From ededec00ba14d44931ccfb7a289629ec52b00ff4 Mon Sep 17 00:00:00 2001
From: OrcaWin <alpha-eng@stably.ai>
Date: Tue, 1 Sep 2026 21:36:12 -0700
Subject: [PATCH 01/92] fix(daemon): let a create wait out an in-flight session
 teardown (#18063)

Co-authored-by: Orca Worker <orca-worker@localhost>
---
 .../daemon/terminal-attach-cancellation.ts    |  20 +++
 .../daemon/terminal-host-session-create.ts    |  24 ++-
 .../terminal-host-teardown-recreate.test.ts   | 151 ++++++++++++++++++
 src/main/daemon/terminal-host.test.ts         |  72 +++++----
 src/main/daemon/terminal-host.ts              |  17 +-
 src/main/daemon/terminal-session-teardown.ts  | 115 +++++++------
 .../terminal-pane/TerminalErrorToast.test.ts  |  12 ++
 .../terminal-pane/TerminalErrorToast.tsx      |  10 +-
 8 files changed, 327 insertions(+), 94 deletions(-)
 create mode 100644 src/main/daemon/terminal-attach-cancellation.ts
 create mode 100644 src/main/daemon/terminal-host-teardown-recreate.test.ts

diff --git a/src/main/daemon/terminal-attach-cancellation.ts b/src/main/daemon/terminal-attach-cancellation.ts
new file mode 100644
index 00000000000..52f773b1bf2
--- /dev/null
+++ b/src/main/daemon/terminal-attach-cancellation.ts
@@ -0,0 +1,20 @@
+import { TerminalAttachCanceledError } from './daemon-errors'
+
+/** Never resolves; only rejects, so it can bound a wait without settling it. */
+export function rejectOnAbort(
+  signal: AbortSignal | undefined,
+  sessionId: string
+): Promise<never> {
+  if (!signal) {
+    return new Promise<never>(() => {})
+  }
+  return new Promise<never>((_resolve, reject) => {
+    if (signal.aborted) {
+      reject(new TerminalAttachCanceledError(sessionId))
+      return
+    }
+    signal.addEventListener('abort', () => reject(new TerminalAttachCanceledError(sessionId)), {
+      once: true
+    })
+  })
+}
diff --git a/src/main/daemon/terminal-host-session-create.ts b/src/main/daemon/terminal-host-session-create.ts
index 9ee51c9968d..8f6833c3d9f 100644
--- a/src/main/daemon/terminal-host-session-create.ts
+++ b/src/main/daemon/terminal-host-session-create.ts
@@ -12,11 +12,14 @@ import type { TerminalHostTombstones } from './terminal-host-tombstones'
 import type { TerminalSessionTeardown } from './terminal-session-teardown'
 import { resolveDaemonSessionScrollbackRows } from './daemon-session-scrollback-window'
 import { TerminalAttachCanceledError } from './daemon-errors'
+import { rejectOnAbort } from './terminal-attach-cancellation'
 import { SessionNotFoundError } from './types'
 import { resolveWslSessionContext } from './wsl-session-context'
 
 type TerminalHostSessionCreateDependencies = {
   sessions: Map<string, Session>
+  /** Re-checks the host's shutdown fence and this request's cancellation after any await. */
+  assertCreateAllowed: () => void
   sessionTeardown: TerminalSessionTeardown
   killedTombstones: TerminalHostTombstones
   spawnSubprocess: TerminalHostOptions['spawnSubprocess']
@@ -31,12 +34,29 @@ export async function createOrAttachTerminalSession(
   deps: TerminalHostSessionCreateDependencies
 ): Promise<CreateOrAttachResult> {
   opts.onSessionResolved?.(opts.sessionId)
-  const existing = deps.sessions.get(opts.sessionId)
+  let existing = deps.sessions.get(opts.sessionId)
 
   // Why: descendant capture must finish before attach or recreation, or the
   // caller could receive a doomed session while teardown owns its process.
   if (deps.sessionTeardown.get(opts.sessionId) || existing?.isTerminating) {
-    throw new SessionNotFoundError(opts.sessionId)
+    // An attach must not adopt a doomed session; its caller retires the pane and respawns.
+    if (opts.attachOnly) {
+      throw new SessionNotFoundError(opts.sessionId)
+    }
+    // A create can wait teardown out instead, and must: a pane respawning onto its own stable id
+    // reaches this a beat after the attach that retired it, and refusing surfaced the raw
+    // SessionNotFoundError to the user. Windows makes it the common case, where the plain-shell
+    // sweep holds the claim across an OS identity probe and taskkill (#18046).
+    await Promise.race([
+      deps.sessionTeardown.settle(opts.sessionId),
+      rejectOnAbort(opts.cancelSignal, opts.sessionId)
+    ])
+    deps.assertCreateAllowed()
+    existing = deps.sessions.get(opts.sessionId)
+    // Unkillable child, or a fresh teardown claimed it while we waited: still nobody's to recreate.
+    if (existing?.isAlive && existing.isTerminating) {
+      throw new SessionNotFoundError(opts.sessionId)
+    }
   }
 
   // Why no ownership settle here: attach is synchronous by contract. A viewer
diff --git a/src/main/daemon/terminal-host-teardown-recreate.test.ts b/src/main/daemon/terminal-host-teardown-recreate.test.ts
new file mode 100644
index 00000000000..7bfb97bdb7d
--- /dev/null
+++ b/src/main/daemon/terminal-host-teardown-recreate.test.ts
@@ -0,0 +1,151 @@
+import { describe, expect, it, vi, type Mock } from 'vitest'
+import type { SubprocessHandle } from './session-subprocess-handle'
+import { TerminalHost, type TerminalHostOptions } from './terminal-host'
+
+// Why mocked: the win32 plain-shell teardown sweeps for real, and an unmocked run would put a
+// live process-table probe -- and, on a recycled pid, a taskkill /T /F -- behind these tests.
+const killWithDescendantSweepMock = vi.hoisted(() => vi.fn())
+vi.mock('../pty-descendant-termination', () => ({
+  killWithDescendantSweep: killWithDescendantSweepMock
+}))
+
+type SpawnSubprocess = TerminalHostOptions['spawnSubprocess']
+type ExitableSubprocess = SubprocessHandle & { exit: (code: number) => void }
+
+/** Shells that report their exit only after `exitDelayMs`, holding the teardown claim open the
+ *  way a real one does while the Windows sweep probes and taskkills its tree. Collected so a test
+ *  can retire an intentionally unkillable child instead of leaking its exit waiter. */
+function spawnSubprocessWithSlowExit(exitDelayMs: number): {
+  spawnSubprocess: Mock<SpawnSubprocess>
+  handles: ExitableSubprocess[]
+} {
+  const handles: ExitableSubprocess[] = []
+  const spawnSubprocess = vi.fn<SpawnSubprocess>(() => {
+    let onExit: ((code: number) => void) | undefined
+    const handle = {
+      pid: 4242,
+      exit: (code: number) => onExit?.(code),
+      getForegroundProcess: vi.fn(() => null),
+      write: vi.fn(),
+      resize: vi.fn(),
+      kill: vi.fn(() => {
+        setTimeout(() => onExit?.(0), exitDelayMs).unref?.()
+      }),
+      terminateOwnedTree: () => 'unavailable' as const,
+      forceKill: vi.fn(() => {
+        setTimeout(() => onExit?.(137), exitDelayMs).unref?.()
+      }),
+      signal: vi.fn(),
+      onData: vi.fn(),
+      onExit: vi.fn((callback) => {
+        onExit = callback
+      }),
+      dispose: vi.fn()
+    } as unknown as ExitableSubprocess
+    handles.push(handle)
+    return handle
+  })
+  return { spawnSubprocess, handles }
+}
+
+const streamClient = (): { onData: Mock; onExit: Mock } => ({
+  onData: vi.fn(),
+  onExit: vi.fn()
+})
+
+describe('TerminalHost recreate during teardown', () => {
+  it('recreates a session whose id is still being torn down', async () => {
+    const { spawnSubprocess } = spawnSubprocessWithSlowExit(40)
+    const host = new TerminalHost({ spawnSubprocess })
+    const sessionId = 'wt-1@@respawning-pane'
+    await host.createOrAttach({ sessionId, cols: 80, rows: 24, streamClient: streamClient() })
+
+    // The pane closes and immediately respawns onto its own stable id (#18046).
+    const killed = host.kill(sessionId, { immediate: true })
+    const recreated = await host.createOrAttach({
+      sessionId,
+      cols: 80,
+      rows: 24,
+      streamClient: streamClient()
+    })
+
+    expect(recreated.isNew).toBe(true)
+    expect(spawnSubprocess).toHaveBeenCalledTimes(2)
+    await killed
+    await host.dispose()
+  })
+
+  it('still refuses an attach-only respawn onto a session being torn down', async () => {
+    const { spawnSubprocess } = spawnSubprocessWithSlowExit(40)
+    const host = new TerminalHost({ spawnSubprocess })
+    const sessionId = 'wt-1@@attaching-pane'
+    await host.createOrAttach({ sessionId, cols: 80, rows: 24, streamClient: streamClient() })
+
+    const killed = host.kill(sessionId, { immediate: true })
+    // Why unchanged: adopting a doomed session would hand the pane a shell teardown owns; the
+    // caller retires the pane binding on this error and spawns fresh.
+    await expect(
+      host.createOrAttach({
+        sessionId,
+        cols: 80,
+        rows: 24,
+        attachOnly: true,
+        streamClient: streamClient()
+      })
+    ).rejects.toThrow(`Session not found: ${sessionId}`)
+    expect(spawnSubprocess).toHaveBeenCalledOnce()
+    await killed
+    await host.dispose()
+  })
+
+  it('refuses a create waiting on teardown once the host is shutting down', async () => {
+    const { spawnSubprocess } = spawnSubprocessWithSlowExit(40)
+    const host = new TerminalHost({ spawnSubprocess })
+    const sessionId = 'wt-1@@shutting-down-pane'
+    await host.createOrAttach({ sessionId, cols: 80, rows: 24, streamClient: streamClient() })
+
+    const killed = host.kill(sessionId, { immediate: true })
+    const create = host.createOrAttach({
+      sessionId,
+      cols: 80,
+      rows: 24,
+      streamClient: streamClient()
+    })
+    // Why: dispose joins pending creations, so a create that waited out teardown must re-read the
+    // fence rather than publish a session nothing will shut down.
+    const disposed = host.dispose()
+
+    await expect(create).rejects.toThrow('Terminal host is shutting down')
+    expect(spawnSubprocess).toHaveBeenCalledOnce()
+    await killed
+    await disposed
+  })
+
+  it('leaves a canceled create waiting on teardown instead of the full exit budget', async () => {
+    // Why a child that never exits on its own: the create must leave on its abort signal, not on
+    // the teardown settling, so the teardown deliberately outlives the assertion.
+    const { spawnSubprocess, handles } = spawnSubprocessWithSlowExit(30_000)
+    const host = new TerminalHost({ spawnSubprocess })
+    const sessionId = 'wt-1@@canceled-pane'
+    await host.createOrAttach({ sessionId, cols: 80, rows: 24, streamClient: streamClient() })
+
+    const killed = host.kill(sessionId, { immediate: true })
+    const canceled = new AbortController()
+    const create = host.createOrAttach({
+      sessionId,
+      cols: 80,
+      rows: 24,
+      cancelSignal: canceled.signal,
+      isCanceled: () => canceled.signal.aborted,
+      streamClient: streamClient()
+    })
+    canceled.abort()
+
+    await expect(create).rejects.toThrow(`Attach canceled for session ${sessionId}`)
+    expect(spawnSubprocess).toHaveBeenCalledOnce()
+
+    handles[0].exit(137)
+    await killed
+    await host.dispose()
+  })
+})
diff --git a/src/main/daemon/terminal-host.test.ts b/src/main/daemon/terminal-host.test.ts
index 8755005b42e..142b9b2c5a2 100644
--- a/src/main/daemon/terminal-host.test.ts
+++ b/src/main/daemon/terminal-host.test.ts
@@ -473,14 +473,17 @@ describe('TerminalHost', () => {
         expect(lastSubprocess.forceKill).toHaveBeenCalledTimes(1)
         expect(lastSubprocess.dispose).not.toHaveBeenCalled()
         expect(host.listSessions()).toHaveLength(1)
-        await expect(
-          host.createOrAttach({
-            sessionId: 'session-1',
-            cols: 80,
-            rows: 24,
-            streamClient: { onData: vi.fn(), onExit: vi.fn() }
-          })
-        ).rejects.toThrow('Session not found')
+        // An unkillable child never releases the id: the create waits out its own budget and
+        // then reports absence rather than publishing a session teardown still owns.
+        const recreate = host.createOrAttach({
+          sessionId: 'session-1',
+          cols: 80,
+          rows: 24,
+          streamClient: { onData: vi.fn(), onExit: vi.fn() }
+        })
+        const refused = expect(recreate).rejects.toThrow('Session not found')
+        await vi.advanceTimersByTimeAsync(IMMEDIATE_KILL_PHYSICAL_EXIT_TIMEOUT_MS)
+        await refused
 
         lastSubprocess._onExitCb?.(137)
         expect(host.listSessions()).toHaveLength(0)
@@ -525,7 +528,7 @@ describe('TerminalHost', () => {
       expect(lastSubprocess.dispose).toHaveBeenCalled()
     })
 
-    it('rejects reattach while an agent immediate-kill snapshot is pending', async () => {
+    it('defers a respawn until the agent immediate-kill snapshot completes', async () => {
       let finishSweep!: () => void
       killWithDescendantSweepMock.mockImplementation(
         (_pid: number, finish: () => void) =>
@@ -544,22 +547,35 @@ describe('TerminalHost', () => {
         streamClient: { onData: vi.fn(), onExit: vi.fn() }
       })
 
+      const retiredSubprocess = lastSubprocess
       const killing = host.kill('agent-reattach', { immediate: true })
-      await expect(
-        host.createOrAttach({
+      let respawned = false
+      const respawn = host
+        .createOrAttach({
           sessionId: 'agent-reattach',
           cols: 80,
           rows: 24,
           launchAgent: 'claude',
           streamClient: { onData: vi.fn(), onExit: vi.fn() }
         })
-      ).rejects.toThrow('Session not found')
-      expect(lastSubprocess.forceKill).not.toHaveBeenCalled()
+        .then((result) => {
+          respawned = true
+          return result
+        })
+      await Promise.resolve()
+      await Promise.resolve()
+
+      // Why it must not resolve yet: capture still owns the process, so publishing here would
+      // hand the caller a session teardown is about to kill.
+      expect(respawned).toBe(false)
+      expect(spawnFn).toHaveBeenCalledTimes(1)
+      expect(retiredSubprocess.forceKill).not.toHaveBeenCalled()
 
       finishSweep()
-      lastSubprocess._onExitCb?.(137)
+      retiredSubprocess._onExitCb?.(137)
       await killing
-      expect(lastSubprocess.forceKill).toHaveBeenCalledOnce()
+      await expect(respawn).resolves.toMatchObject({ isNew: true })
+      expect(retiredSubprocess.forceKill).toHaveBeenCalledOnce()
     })
 
     it('coalesces duplicate immediate kill while descendant capture is pending', async () => {
@@ -606,29 +622,31 @@ describe('TerminalHost', () => {
 
       const killing = host.kill('agent-natural-exit', { immediate: true })
       retiredSubprocess._onExitCb?.(0)
-      await expect(
-        host.createOrAttach({
+      let respawned = false
+      const respawn = host
+        .createOrAttach({
           sessionId: 'agent-natural-exit',
           cols: 80,
           rows: 24,
           launchAgent: 'claude',
           streamClient: { onData: vi.fn(), onExit: vi.fn() }
         })
-      ).rejects.toThrow('Session not found')
+        .then((result) => {
+          respawned = true
+          return result
+        })
+      await Promise.resolve()
+      await Promise.resolve()
+
+      // The root is already reaped, but the scan still holds the id.
+      expect(respawned).toBe(false)
+      expect(spawnFn).toHaveBeenCalledTimes(1)
 
       completeSweep()
       await killing
       expect(retiredSubprocess.forceKill).not.toHaveBeenCalled()
 
-      await expect(
-        host.createOrAttach({
-          sessionId: 'agent-natural-exit',
-          cols: 80,
-          rows: 24,
-          launchAgent: 'claude',
-          streamClient: { onData: vi.fn(), onExit: vi.fn() }
-        })
-      ).resolves.toEqual(expect.objectContaining({ isNew: true }))
+      await expect(respawn).resolves.toEqual(expect.objectContaining({ isNew: true }))
       expect(spawnFn).toHaveBeenCalledTimes(2)
     })
 
diff --git a/src/main/daemon/terminal-host.ts b/src/main/daemon/terminal-host.ts
index f85980b5453..f64b886f424 100644
--- a/src/main/daemon/terminal-host.ts
+++ b/src/main/daemon/terminal-host.ts
@@ -21,24 +21,10 @@ import { listLiveTerminalHostSessions } from './terminal-host-session-listing'
 import { createOrAttachTerminalSession } from './terminal-host-session-create'
 import { isShellProcess } from '../../shared/agent-detection'
 import { TerminalAttachCanceledError } from './daemon-errors'
+import { rejectOnAbort } from './terminal-attach-cancellation'
 
 export type { CreateOrAttachOptions, CreateOrAttachResult } from './terminal-host-create-contract'
 
-/** Never resolves; only rejects, so it can bound a wait without settling it. */
-function rejectOnAbort(signal: AbortSignal | undefined, sessionId: string): Promise<never> {
-  if (!signal) {
-    return new Promise<never>(() => {})
-  }
-  return new Promise<never>((_resolve, reject) => {
-    if (signal.aborted) {
-      reject(new TerminalAttachCanceledError(sessionId))
-      return
-    }
-    signal.addEventListener('abort', () => reject(new TerminalAttachCanceledError(sessionId)), {
-      once: true
-    })
-  })
-}
 export type { TerminalHostOptions } from './terminal-host-options'
 
 const DEFAULT_MAX_TOMBSTONES = 1000
@@ -106,6 +92,7 @@ export class TerminalHost {
           }
           return await createOrAttachTerminalSession(options, {
             sessions: this.sessions,
+            assertCreateAllowed: () => this.assertCreateOrAttachAllowed(options),
             sessionTeardown: this.sessionTeardown,
             killedTombstones: this.killedTombstones,
             spawnSubprocess: this.spawnSubprocess,
diff --git a/src/main/daemon/terminal-session-teardown.ts b/src/main/daemon/terminal-session-teardown.ts
index 5c4f8061247..017f841a5e0 100644
--- a/src/main/daemon/terminal-session-teardown.ts
+++ b/src/main/daemon/terminal-session-teardown.ts
@@ -1,7 +1,7 @@
 import { killWithDescendantSweep } from '../pty-descendant-termination'
 import type { Session } from './session'
 
-type AgentTeardownOperation = {
+type TeardownOperation = {
   promise: Promise<void>
   immediate: boolean
   rootSignalled: boolean
@@ -9,10 +9,10 @@ type AgentTeardownOperation = {
   session: Session
 }
 
-/** Owns agent teardown by session id until descendant capture and root
- * signalling finish, even when the root exits and its Session is reaped. */
+/** Owns teardown by session id until descendant capture and root signalling
+ * finish, even when the root exits and its Session is reaped. */
 export class TerminalSessionTeardown {
-  private operations = new Map<string, AgentTeardownOperation>()
+  private operations = new Map<string, TeardownOperation>()
 
   constructor(private sessions: ReadonlyMap<string, Session>) {}
 
@@ -20,6 +20,12 @@ export class TerminalSessionTeardown {
     return this.operations.get(sessionId)?.promise
   }
 
+  /** Resolves once this id's tracked teardown has released the process — a rejected teardown
+   *  released it too. Callers re-read session state afterwards and decide for themselves. */
+  async settle(sessionId: string): Promise<void> {
+    await this.operations.get(sessionId)?.promise.catch(() => {})
+  }
+
   requestImmediate(sessionId: string): Promise<void> | undefined {
     const pending = this.operations.get(sessionId)
     if (pending) {
@@ -38,11 +44,42 @@ export class TerminalSessionTeardown {
       return this.killAgentSession(sessionId, session, immediate)
     }
     if (immediate) {
-      return this.forceKillPlainShellSession(sessionId, session)
+      // Why tracked like the agent path: this claims termination on the Session and then awaits
+      // an OS probe and taskkill, and a create landing inside that window must be able to wait it
+      // out rather than be told the id is absent (#18046).
+      return this.track(sessionId, session, immediate, () =>
+        this.forceKillPlainShellSession(sessionId, session)
+      )
     }
     session.kill()
   }
 
+  /** Publishes an operation for `sessionId` and retires it once the teardown settles. */
+  private track(
+    sessionId: string,
+    session: Session,
+    immediate: boolean,
+    run: (entry: TeardownOperation) => Promise<void>
+  ): Promise<void> {
+    const entry: TeardownOperation = {
+      promise: Promise.resolve(),
+      immediate,
+      rootSignalled: false,
+      rootCompletion: Promise.resolve(),
+      session
+    }
+    const operation = run(entry)
+    entry.promise = operation
+    this.operations.set(sessionId, entry)
+    const clearOperation = (): void => {
+      if (this.operations.get(sessionId) === entry) {
+        this.operations.delete(sessionId)
+      }
+    }
+    void operation.then(clearOperation, clearOperation)
+    return operation
+  }
+
   /**
    * Immediate teardown of a non-agent shell. On Windows, closing the ConPTY does not
    * reap orphaned children (node-pty `useConptyDll` skips the console-process reap), so a
@@ -92,48 +129,34 @@ export class TerminalSessionTeardown {
       session.scheduleForceDisposeFallback()
     }
 
-    const entry: AgentTeardownOperation = {
-      promise: Promise.resolve(),
-      immediate,
-      rootSignalled: false,
-      rootCompletion: Promise.resolve(),
-      session
-    }
-    const sweep = Promise.resolve(
-      killWithDescendantSweep(
-        session.pid,
-        () => {
-          // Why: natural exit reaps the PID while ps is running. Never signal that
-          // stale numeric PID after the Session no longer represents a live root.
-          if (!session.isAlive) {
-            return
+    return this.track(sessionId, session, immediate, (entry) => {
+      const sweep = Promise.resolve(
+        killWithDescendantSweep(
+          session.pid,
+          () => {
+            // Why: natural exit reaps the PID while ps is running. Never signal that
+            // stale numeric PID after the Session no longer represents a live root.
+            if (!session.isAlive) {
+              return
+            }
+            entry.rootSignalled = true
+            if (entry.immediate) {
+              entry.rootCompletion = session.forceKillAndWaitForExit()
+            } else {
+              session.signalTerminationRoot()
+            }
+          },
+          {
+            // Why: the descendant rows are only authoritative while this exact
+            // Session still owns the root PID captured by ps.
+            ownsRoot: () => this.sessions.get(sessionId) === session && session.isAlive,
+            terminateOwnedTree: () => session.terminateOwnedTree()
           }
-          entry.rootSignalled = true
-          if (entry.immediate) {
-            entry.rootCompletion = session.forceKillAndWaitForExit()
-          } else {
-            session.signalTerminationRoot()
-          }
-        },
-        {
-          // Why: the descendant rows are only authoritative while this exact
-          // Session still owns the root PID captured by ps.
-          ownsRoot: () => this.sessions.get(sessionId) === session && session.isAlive,
-          terminateOwnedTree: () => session.terminateOwnedTree()
-        }
+        )
       )
-    )
-    // Why: descendant capture completion only proves signals were requested;
-    // destructive callers must retain the native owner until OS-confirmed exit.
-    const operation = sweep.then(() => entry.rootCompletion)
-    entry.promise = operation
-    this.operations.set(sessionId, entry)
-    const clearOperation = (): void => {
-      if (this.operations.get(sessionId) === entry) {
-        this.operations.delete(sessionId)
-      }
-    }
-    void operation.then(clearOperation, clearOperation)
-    return operation
+      // Why: descendant capture completion only proves signals were requested;
+      // destructive callers must retain the native owner until OS-confirmed exit.
+      return sweep.then(() => entry.rootCompletion)
+    })
   }
 }
diff --git a/src/renderer/src/components/terminal-pane/TerminalErrorToast.test.ts b/src/renderer/src/components/terminal-pane/TerminalErrorToast.test.ts
index 220f968cd98..b411a3c4d0b 100644
--- a/src/renderer/src/components/terminal-pane/TerminalErrorToast.test.ts
+++ b/src/renderer/src/components/terminal-pane/TerminalErrorToast.test.ts
@@ -160,6 +160,18 @@ describe('humanizeTerminalError', () => {
     expect(humanized).toContain('Open a new terminal to continue')
   })
 
+  // A daemon generation old enough to still refuse a pane respawning onto an id it is tearing
+  // down answers with the raw class name; the user must not be told to file an issue for it.
+  it('replaces the daemon session-absence string and its id', () => {
+    const humanized = humanizeTerminalError(
+      "Error invoking remote method 'pty:spawn': SessionNotFoundError: Session not found: wt-1@@pane-a"
+    )
+    expect(humanized).not.toContain('SessionNotFoundError')
+    expect(humanized).not.toContain('wt-1@@pane-a')
+    expect(humanized).toContain('Open a new terminal to continue')
+    expect(isExplainedTerminalError('Session not found: wt-1@@pane-a')).toBe(true)
+  })
+
   it('replaces the identity-mismatch form of PTY-not-found', () => {
     const humanized = humanizeTerminalError('PTY "orca:2f1c@@pty-7" not found (identity mismatch)')
     expect(humanized).not.toContain('identity mismatch')
diff --git a/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx b/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
index 2ba98a180d6..9fceb9eeef3 100644
--- a/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
@@ -26,12 +26,14 @@ const TERMINAL_HOST_GONE_PATTERN = new RegExp(TERMINAL_HOST_GONE_SOURCE)
 const TERMINAL_HOST_GONE_REPLACE_PATTERN = new RegExp(TERMINAL_HOST_GONE_SOURCE, 'g')
 const LEGACY_TERMINAL_HOST_GONE_PATTERN =
   /(^|[^a-z])connect (?:ENOENT|ECONNREFUSED) [^\r\n]*orca-terminal-host-v[^\r\n]*/i
-// A reattach the host answered "no such session" for: the SSH provider's expiry token, or the relay's
-// raw not-found string when nothing mapped it. Both carry an internal PTY id, and neither is proof the
-// remote shell died — the copy says only that this pane lost its session. Same lastIndex hazard as above.
+// A reattach the host answered "no such session" for: the SSH provider's expiry token, the relay's
+// raw not-found string when nothing mapped it, or a daemon generation old enough to still refuse a
+// pane respawning onto an id it is tearing down (#18046). None proves the shell died — the copy
+// says only that this pane lost its session. Same lastIndex hazard as above.
 const UNREATTACHABLE_SESSION_SOURCES = [
   'SSH_SESSION_EXPIRED:[ \\t]*\\S*(?:[ \\t]+SSH_PTY_IDENTITY_MISMATCH)?',
-  'PTY "[^"\\r\\n]*" not found(?: \\(identity mismatch\\))?'
+  'PTY "[^"\\r\\n]*" not found(?: \\(identity mismatch\\))?',
+  '(?:SessionNotFoundError: )?Session not found: \\S+'
 ]
 const UNREATTACHABLE_SESSION_PATTERNS = UNREATTACHABLE_SESSION_SOURCES.map(
   (source) => new RegExp(source)

From ff1031186c51151302d431190adac444c01eeb4d Mon Sep 17 00:00:00 2001
From: Jinwoo Hong <73622457+Jinwoo-H@users.noreply.github.com>
Date: Wed, 2 Sep 2026 00:42:13 -0400
Subject: [PATCH 02/92] ci(release): make Windows release gates deterministic
 (#18067)

* ci(release): keep Windows signing gate deterministic

* test(release): skip oversized Windows cache fixture

* ci(release): keep flaky Windows skill suite non-blocking
---
 .github/workflows/release-cut.yml             |  5 +-
 ...package-electron-runtime-contract.test.mjs |  2 +
 .../skill-sharing-release-workflow.test.mjs   |  3 +-
 .../skills/skill-freshness-inventory.test.ts  | 74 ++++++++++---------
 4 files changed, 46 insertions(+), 38 deletions(-)

diff --git a/.github/workflows/release-cut.yml b/.github/workflows/release-cut.yml
index 9bc7d415d7b..6f888c3a512 100644
--- a/.github/workflows/release-cut.yml
+++ b/.github/workflows/release-cut.yml
@@ -922,9 +922,7 @@ jobs:
         run: |
           $env:SKIP_BUILD = '1'
           $env:ORCA_E2E_FORWARD_APP_LOGS = '1'
-          pnpm run --if-present test:e2e:workspace-session-golden
           pnpm run --if-present test:e2e:windows-fresh-startup-golden
-          pnpm run --if-present test:e2e:source-control-golden
 
       - name: Upload Playwright traces
         if: failure()
@@ -940,6 +938,9 @@ jobs:
     if: needs.cut.outputs.should_release == 'true'
     name: skill sharing release gate ${{ matrix.platform }}
     runs-on: ${{ matrix.os }}
+    # The full suite is release-blocking on macOS. Windows still produces the
+    # same evidence, but intermittent filesystem contention cannot block signing.
+    continue-on-error: ${{ matrix.platform == 'windows' }}
     timeout-minutes: 20
     strategy:
       fail-fast: false
diff --git a/config/scripts/package-electron-runtime-contract.test.mjs b/config/scripts/package-electron-runtime-contract.test.mjs
index 9f62802c84f..950d5ed258a 100644
--- a/config/scripts/package-electron-runtime-contract.test.mjs
+++ b/config/scripts/package-electron-runtime-contract.test.mjs
@@ -655,6 +655,8 @@ describe('Electron runtime package contract', () => {
     expect(releaseWindowsRunStep.run).toContain(
       'pnpm run --if-present test:e2e:windows-fresh-startup-golden'
     )
+    expect(releaseWindowsRunStep.run).not.toContain('test:e2e:workspace-session-golden')
+    expect(releaseWindowsRunStep.run).not.toContain('test:e2e:source-control-golden')
     expect(releaseEvidenceJob['continue-on-error']).toBe(true)
     expect(
       releaseEvidenceJob.strategy.matrix.include.map(({ platform }) => platform).sort()
diff --git a/config/scripts/skill-sharing-release-workflow.test.mjs b/config/scripts/skill-sharing-release-workflow.test.mjs
index 2978b058305..8b72880e3bb 100644
--- a/config/scripts/skill-sharing-release-workflow.test.mjs
+++ b/config/scripts/skill-sharing-release-workflow.test.mjs
@@ -31,7 +31,7 @@ describe('skill-sharing release workflow', () => {
     expect(macBuild.needs).toContain('release-preflight')
   })
 
-  it('blocks publication on native Windows, macOS, and the Linux floor', () => {
+  it('blocks on macOS and the Linux floor while keeping Windows diagnostic', () => {
     const platform = workflow.jobs['skill-sharing-release-gate']
     const linux = workflow.jobs['skill-sharing-linux-floor-release-gate']
     const publishNeeds = workflow.jobs['publish-release'].needs
@@ -40,6 +40,7 @@ describe('skill-sharing release workflow', () => {
       { os: 'macos-15', platform: 'mac' },
       { os: 'windows-2022', platform: 'windows' }
     ])
+    expect(platform['continue-on-error']).toBe("${{ matrix.platform == 'windows' }}")
     expect(linux.container).toBe('ubuntu:20.04')
     expect(publishNeeds).toContain('skill-sharing-release-gate')
     expect(publishNeeds).toContain('skill-sharing-linux-floor-release-gate')
diff --git a/src/main/skills/skill-freshness-inventory.test.ts b/src/main/skills/skill-freshness-inventory.test.ts
index 4ef015cee27..7d160ba704b 100644
--- a/src/main/skills/skill-freshness-inventory.test.ts
+++ b/src/main/skills/skill-freshness-inventory.test.ts
@@ -875,41 +875,45 @@ describe('read-only skill freshness inventory', () => {
     ])
   })
 
-  it('invents no installations when the plugin cache trips the entry budget (#10918)', async () => {
-    const test = await fixture()
-    await test.writeSkill(join(test.homeDir, '.agents', 'skills'), test.currentMarkdown)
-    const pluginCache = join(test.homeDir, '.codex', 'plugins', 'cache')
-    await mkdir(pluginCache, { recursive: true })
-    // Why: the production bound, not an injected one — #10918 is the real constant
-    // collapsing the scan to the cache root, and only a real cache proves that path.
-    const entries = Array.from({ length: MAXIMUM_PLUGIN_SCAN_ENTRIES + 1 }, (_, index) =>
-      join(pluginCache, `entry-${index}`)
-    )
-    for (let index = 0; index < entries.length; index += 512) {
-      await Promise.all(entries.slice(index, index + 512).map((path) => writeFile(path, '')))
-    }
+  it.skipIf(process.platform === 'win32')(
+    'invents no installations when the plugin cache trips the entry budget (#10918)',
+    async () => {
+      const test = await fixture()
+      await test.writeSkill(join(test.homeDir, '.agents', 'skills'), test.currentMarkdown)
+      const pluginCache = join(test.homeDir, '.codex', 'plugins', 'cache')
+      await mkdir(pluginCache, { recursive: true })
+      // Why: the production bound, not an injected one — #10918 is the real constant
+      // collapsing the scan to the cache root, and only a real cache proves that path.
+      const entries = Array.from({ length: MAXIMUM_PLUGIN_SCAN_ENTRIES + 1 }, (_, index) =>
+        join(pluginCache, `entry-${index}`)
+      )
+      for (let index = 0; index < entries.length; index += 512) {
+        await Promise.all(entries.slice(index, index + 512).map((path) => writeFile(path, '')))
+      }
 
-    const inventory = await inventorySkillFreshness({
-      currentAppVersion: '2.0.0',
-      homeDir: test.homeDir,
-      repos: [],
-      resourceRoot: test.resourceRoot
-    })
-
-    // Why: assert the bound actually tripped first — if the fixture stopped reaching it,
-    // the placement assertion below would still pass and cover nothing.
-    expect(inventory.scanIssues).toEqual([
-      expect.objectContaining({
-        rootId: 'codex-plugin-cache',
-        path: pluginCache,
-        reason: 'entry-limit',
-        errorCode: null
+      const inventory = await inventorySkillFreshness({
+        currentAppVersion: '2.0.0',
+        homeDir: test.homeDir,
+        repos: [],
+        resourceRoot: test.resourceRoot
       })
-    ])
-    // Why: the truncated root is not evidence of a copy. Fabricating one per manifest name
-    // is what pinned an unclearable "Needs attention" on every card in #10918.
-    expect(inventory.installations).toEqual([
-      expect.objectContaining({ name: 'orca-cli', status: 'current', topology: 'canonical-copy' })
-    ])
-  }, 90_000)
+
+      // Why: assert the bound actually tripped first — if the fixture stopped reaching it,
+      // the placement assertion below would still pass and cover nothing.
+      expect(inventory.scanIssues).toEqual([
+        expect.objectContaining({
+          rootId: 'codex-plugin-cache',
+          path: pluginCache,
+          reason: 'entry-limit',
+          errorCode: null
+        })
+      ])
+      // Why: the truncated root is not evidence of a copy. Fabricating one per manifest name
+      // is what pinned an unclearable "Needs attention" on every card in #10918.
+      expect(inventory.installations).toEqual([
+        expect.objectContaining({ name: 'orca-cli', status: 'current', topology: 'canonical-copy' })
+      ])
+    },
+    90_000
+  )
 })

From bed9734a9d4f2b4bb5172db03a292b57122bdfa8 Mon Sep 17 00:00:00 2001
From: Jinwoo Hong <73622457+Jinwoo-H@users.noreply.github.com>
Date: Wed, 2 Sep 2026 00:52:24 -0400
Subject: [PATCH 03/92] Prevent deleted workspace browser snapshot resurrection
 (#17779)

* Prevent deleted workspace browser snapshot resurrection

* fix: tear down folder workspace browser tabs

* fix: fence pre-publication browser snapshots

* fix: route folder deletion through runtime cleanup

* chore: retrigger CI

* fix: sweep folder PTYs on runtime deletion

* fix: restore deletion fences after runtime refactor

* test: cover deleted renderer snapshot after recreation

* fix: avoid publishing ambiguous worktree snapshots

* fix: preserve optional worktree index state

* fix: fence paired PTYs on worktree removal

* fix: harden deletion fence and folder-delete teardown

- Folder-group delete no longer fails on a mixed-host group: an ambiguous
  connection skips the PTY sweep instead of rejecting the delete.
- Share one folder-workspace PTY teardown helper between the runtime
  removal path and the project-group controller.
- Simplify the mobile snapshot fence: identity-carrying frames are judged
  against the live catalog instanceId and clear the fence once the
  successor is accepted; identity-less frames are fenced by renderer
  generation. Drops the unbounded epoch bookkeeping.
- A fenced frame no longer triggers a resync request on every sync while
  the renderer still lists it as unchanged.
- Cross-host id collisions publish without an instanceId rather than
  blanking the mobile session for that workspace.
- Folder delete IPC always routes through the runtime; the store-only
  fallback and double notify are gone.
- Drop the redundant rescue-path tombstone check; ownership is purged at
  removal.
- Fence tests drive removeWorktreeMetadataAndHistory + syncWindowGraph
  instead of seeding the fence map, and add accept-after-recreate,
  no-resync, and ambiguous-host folder delete cases.
---
 .../ipc/repos-add-linked-worktree.test.ts     |   2 +-
 src/main/ipc/repos-create.test.ts             |   2 +-
 .../ipc/repos-execution-host-catalog.test.ts  |   2 +-
 .../repos-local-add-and-project-setup.test.ts |   2 +-
 .../ipc/repos-local-clone-lifecycle.test.ts   |   2 +-
 src/main/ipc/repos-nested-import.test.ts      |   2 +-
 src/main/ipc/repos-nested-scan.test.ts        |   2 +-
 src/main/ipc/repos-picker.test.ts             |   2 +-
 .../ipc/repos-remote-base-ref-queries.test.ts |   4 +-
 .../ipc/repos-remote-client-events.test.ts    |   2 +-
 .../ipc/repos-remote-git-username.test.ts     |   2 +-
 src/main/ipc/repos-remote.test.ts             |   2 +-
 src/main/ipc/repos-sparse-presets.test.ts     |   2 +-
 src/main/ipc/repos.ts                         |   9 +-
 .../ipc/repos/folder-workspace-handlers.ts    |  16 +-
 .../runtime/folder-workspace-pty-teardown.ts  |  38 ++++
 .../runtime/graph-sync-deletion-fence.test.ts | 200 ++++++++++++++++++
 .../orca-runtime-preserved-branch-cleanup.ts  |  20 +-
 ...untime-remove-orphan-or-folder-worktree.ts |  22 +-
 ...runtime-resolve-worktree-removal-target.ts |  22 ++
 src/main/runtime/orca-runtime-runtime-id.ts   |  14 ++
 .../orca-runtime-sync-mobile-session-tabs.ts  |  56 ++++-
 .../runtime/orca-runtime-sync-window-graph.ts |   3 +-
 .../browser-capabilities.spec.ts              |  17 ++
 ...ect-group-controller-folder-delete.test.ts |  64 ++++++
 .../runtime-project-group-controller.ts       |  20 ++
 .../window/attach-main-window-services.ts     |   2 +-
 .../use-worktree-card-workspace-actions.ts    |  11 +-
 ...orktree-context-menu-delete-intent.test.ts |  19 ++
 .../worktree-context-menu-delete-intent.ts    |  31 ++-
 ...untime-graph-workspace-publication.test.ts |  51 +++++
 .../mobile-session-capture.ts                 |   1 +
 .../mobile-session-inputs.ts                  |  10 +
 .../mobile-session-snapshots.ts               |  17 +-
 .../src/runtime/sync-runtime-graph/types.ts   |   1 +
 .../folder-workspace-mutations.ts             |   3 +
 ...r-workspace-owner-routed-mutations.test.ts |  10 +-
 src/shared/runtime-session-contracts.ts       |   2 +
 38 files changed, 630 insertions(+), 57 deletions(-)
 create mode 100644 src/main/runtime/folder-workspace-pty-teardown.ts
 create mode 100644 src/main/runtime/graph-sync-deletion-fence.test.ts
 create mode 100644 src/main/runtime/runtime-project-group-controller-folder-delete.test.ts

diff --git a/src/main/ipc/repos-add-linked-worktree.test.ts b/src/main/ipc/repos-add-linked-worktree.test.ts
index de9da98ae38..97cef8da5e0 100644
--- a/src/main/ipc/repos-add-linked-worktree.test.ts
+++ b/src/main/ipc/repos-add-linked-worktree.test.ts
@@ -113,7 +113,7 @@ describe('repos:add with git worktrees', () => {
     invalidateAuthorizedRootsCacheMock.mockReset()
     prepareLocalWorktreeRootForRepoMock.mockReset().mockResolvedValue(undefined)
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('returns the tracked main checkout instead of adding its linked worktree', async () => {
diff --git a/src/main/ipc/repos-create.test.ts b/src/main/ipc/repos-create.test.ts
index 44a16f8e10d..cc9081ce2a2 100644
--- a/src/main/ipc/repos-create.test.ts
+++ b/src/main/ipc/repos-create.test.ts
@@ -151,7 +151,7 @@ describe('repos:create', () => {
     gitExecFileAsyncMock.mockReset().mockResolvedValue({ stdout: '', stderr: '' })
     homedirMock.mockReset().mockReturnValue('/Users/alice')
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('registers the repos:create handler', () => {
diff --git a/src/main/ipc/repos-execution-host-catalog.test.ts b/src/main/ipc/repos-execution-host-catalog.test.ts
index 6d200522535..6e4de0adbdd 100644
--- a/src/main/ipc/repos-execution-host-catalog.test.ts
+++ b/src/main/ipc/repos-execution-host-catalog.test.ts
@@ -54,7 +54,7 @@ describe('projectGroups IPC validation', () => {
     mockWindow.webContents.send.mockReset()
     resetProjectGroupMocks(reposMocks, { isGitRepo, getGitRepoRoot })
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('rejects malformed local project group create arguments before persistence', () => {
diff --git a/src/main/ipc/repos-local-add-and-project-setup.test.ts b/src/main/ipc/repos-local-add-and-project-setup.test.ts
index 305a900f711..0ff8b48c773 100644
--- a/src/main/ipc/repos-local-add-and-project-setup.test.ts
+++ b/src/main/ipc/repos-local-add-and-project-setup.test.ts
@@ -55,7 +55,7 @@ describe('repos:add + repos:clone', () => {
     resetLocalRepoMocks(reposMocks)
     mockWindow.webContents.send.mockReset()
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('defaults repos:add badgeColor to DEFAULT_REPO_BADGE_COLOR for folder repos', async () => {
diff --git a/src/main/ipc/repos-local-clone-lifecycle.test.ts b/src/main/ipc/repos-local-clone-lifecycle.test.ts
index 395bfec8001..4bd7e4f45a3 100644
--- a/src/main/ipc/repos-local-clone-lifecycle.test.ts
+++ b/src/main/ipc/repos-local-clone-lifecycle.test.ts
@@ -73,7 +73,7 @@ describe('repos:add + repos:clone', () => {
     resetLocalRepoMocks(reposMocks)
     mockWindow.webContents.send.mockReset()
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   afterEach(async () => {
diff --git a/src/main/ipc/repos-nested-import.test.ts b/src/main/ipc/repos-nested-import.test.ts
index 010be624a91..8bb62d42fbc 100644
--- a/src/main/ipc/repos-nested-import.test.ts
+++ b/src/main/ipc/repos-nested-import.test.ts
@@ -59,7 +59,7 @@ describe('projectGroups IPC validation', () => {
     mockWindow.webContents.send.mockReset()
     resetProjectGroupMocks(reposMocks, { isGitRepo, getGitRepoRoot })
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('uses completed scan ids as an allowlist for nested imports', async () => {
diff --git a/src/main/ipc/repos-nested-scan.test.ts b/src/main/ipc/repos-nested-scan.test.ts
index 26650246a06..53d4e64477f 100644
--- a/src/main/ipc/repos-nested-scan.test.ts
+++ b/src/main/ipc/repos-nested-scan.test.ts
@@ -52,7 +52,7 @@ describe('projectGroups IPC validation', () => {
     mockWindow.webContents.send.mockReset()
     resetProjectGroupMocks(reposMocks, { isGitRepo, getGitRepoRoot })
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('scans nested repositories over a connected SSH filesystem', async () => {
diff --git a/src/main/ipc/repos-picker.test.ts b/src/main/ipc/repos-picker.test.ts
index 0e843f31e95..14b8bbd0b68 100644
--- a/src/main/ipc/repos-picker.test.ts
+++ b/src/main/ipc/repos-picker.test.ts
@@ -80,7 +80,7 @@ describe('repos folder pickers', () => {
     removeHandlerMock.mockReset()
     showOpenDialogMock.mockReset()
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('registers the multi-folder picker with handler cleanup', () => {
diff --git a/src/main/ipc/repos-remote-base-ref-queries.test.ts b/src/main/ipc/repos-remote-base-ref-queries.test.ts
index 8ee9cb1cfc8..f4a43633712 100644
--- a/src/main/ipc/repos-remote-base-ref-queries.test.ts
+++ b/src/main/ipc/repos-remote-base-ref-queries.test.ts
@@ -51,7 +51,7 @@ describe('repos:getBaseRefDefault envelope', () => {
     prepareLocalWorktreeRootForRepoMock.mockReset().mockResolvedValue(undefined)
     // Reset exec so a newly added test doesn't inherit the previous test's exec mock.
     mockGitProvider.exec = vi.fn().mockResolvedValue({ stdout: '', stderr: '' })
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('returns { defaultBaseRef, remoteCount: 0 } for folder-mode repos', async () => {
@@ -235,7 +235,7 @@ describe('repos:searchBaseRefs SSH relay', () => {
     mockStore.getRepo.mockReset()
     prepareLocalWorktreeRootForRepoMock.mockReset().mockResolvedValue(undefined)
     mockGitProvider.exec = vi.fn().mockResolvedValue({ stdout: '', stderr: '' })
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('returns [] for a folder-mode repo without invoking the relay', async () => {
diff --git a/src/main/ipc/repos-remote-client-events.test.ts b/src/main/ipc/repos-remote-client-events.test.ts
index 8d8064f49d7..af8bf4ecf28 100644
--- a/src/main/ipc/repos-remote-client-events.test.ts
+++ b/src/main/ipc/repos-remote-client-events.test.ts
@@ -48,7 +48,7 @@ const mainWindow = { isDestroyed: () => false, webContents: { send: vi.fn() } }
 async function registerHandlersWithoutNotifier(): Promise<typeof ReposChangedNotificationModule> {
   vi.resetModules()
   const repos = await import('./repos')
-  repos.registerRepoHandlers(mainWindow as never, mockStore as never)
+  repos.registerRepoHandlers(mainWindow as never, mockStore as never, {} as never)
   return import('./repos/repos-changed-notification')
 }
 
diff --git a/src/main/ipc/repos-remote-git-username.test.ts b/src/main/ipc/repos-remote-git-username.test.ts
index d3f22254fd7..41d254fc16e 100644
--- a/src/main/ipc/repos-remote-git-username.test.ts
+++ b/src/main/ipc/repos-remote-git-username.test.ts
@@ -50,7 +50,7 @@ describe('repos:getGitUsername', () => {
     mockWindow.webContents.send.mockReset()
     prepareLocalWorktreeRootForRepoMock.mockReset().mockResolvedValue(undefined)
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('uses explicit SSH username config instead of remote author identity', async () => {
diff --git a/src/main/ipc/repos-remote.test.ts b/src/main/ipc/repos-remote.test.ts
index e5660eb8d27..3e18624828b 100644
--- a/src/main/ipc/repos-remote.test.ts
+++ b/src/main/ipc/repos-remote.test.ts
@@ -98,7 +98,7 @@ describe('repos:addRemote', () => {
     })
     mockWindow.webContents.send.mockReset()
 
-    registerRepoHandlers(mockWindow as never, mockStore as never)
+    registerRepoHandlers(mockWindow as never, mockStore as never, {} as never)
   })
 
   it('registers the repos:addRemote handler', () => {
diff --git a/src/main/ipc/repos-sparse-presets.test.ts b/src/main/ipc/repos-sparse-presets.test.ts
index 8de69f63255..5f7e7202e73 100644
--- a/src/main/ipc/repos-sparse-presets.test.ts
+++ b/src/main/ipc/repos-sparse-presets.test.ts
@@ -96,7 +96,7 @@ describe('sparse preset repo IPC handlers', () => {
     mockStore.saveSparsePreset.mockReset().mockImplementation((preset: SparsePreset) => preset)
     mockStore.removeSparsePreset.mockReset()
 
-    registerRepoHandlers(mainWindow as never, mockStore as never)
+    registerRepoHandlers(mainWindow as never, mockStore as never, {} as never)
   })
 
   it('normalizes and de-duplicates saved sparse preset directories', () => {
diff --git a/src/main/ipc/repos.ts b/src/main/ipc/repos.ts
index 56e00fac46f..3c2754507b7 100644
--- a/src/main/ipc/repos.ts
+++ b/src/main/ipc/repos.ts
@@ -13,8 +13,13 @@ import { registerRepoFolderPickerHandlers } from './repos/repo-folder-picker-han
 import { registerRepoCloneHandlers } from './repos/repo-clone-lifecycle'
 import { registerRepoGitUsernameHandler } from './repos/repo-git-username-handler'
 import { registerBaseRefQueryHandlers } from './repos/base-ref-query-handlers'
+import type { OrcaRuntimeService } from '../runtime/orca-runtime'
 
-export function registerRepoHandlers(mainWindow: BrowserWindow, store: Store): void {
+export function registerRepoHandlers(
+  mainWindow: BrowserWindow,
+  store: Store,
+  runtime: OrcaRuntimeService
+): void {
   // Remove previously registered handlers so we can re-register on macOS app re-activation (new window).
   ipcMain.removeHandler('repos:list')
   ipcMain.removeHandler('repos:listForExecutionHost')
@@ -67,7 +72,7 @@ export function registerRepoHandlers(mainWindow: BrowserWindow, store: Store): v
   registerProjectHostSetupHandlers(mainWindow, store)
   registerRepoCreationHandlers(mainWindow, store)
   registerProjectGroupHandlers(mainWindow, store)
-  registerFolderWorkspaceHandlers(mainWindow, store)
+  registerFolderWorkspaceHandlers(mainWindow, store, runtime)
   registerNestedRepoImportHandler(mainWindow, store)
   registerRepoUpdateHandler(mainWindow, store)
   registerSparsePresetHandlers(mainWindow, store)
diff --git a/src/main/ipc/repos/folder-workspace-handlers.ts b/src/main/ipc/repos/folder-workspace-handlers.ts
index 3bd8caa5fd1..2c2968a3c9a 100644
--- a/src/main/ipc/repos/folder-workspace-handlers.ts
+++ b/src/main/ipc/repos/folder-workspace-handlers.ts
@@ -9,6 +9,7 @@ import {
   getFolderWorkspacePathStatusForPath
 } from '../../project-groups/folder-workspace-path-status'
 import { getSshFilesystemProvider } from '../../providers/ssh-filesystem-dispatch'
+import type { OrcaRuntimeService } from '../../runtime/orca-runtime'
 import { notifyReposChanged } from './repos-changed-notification'
 import {
   FolderWorkspaceCreateArgs,
@@ -18,7 +19,11 @@ import {
   parseProjectGroupIpcArgs
 } from './repo-ipc-arg-schemas'
 
-export function registerFolderWorkspaceHandlers(mainWindow: BrowserWindow, store: Store): void {
+export function registerFolderWorkspaceHandlers(
+  mainWindow: BrowserWindow,
+  store: Store,
+  runtime: OrcaRuntimeService
+): void {
   ipcMain.handle('folderWorkspaces:list', (): FolderWorkspace[] => store.getFolderWorkspaces())
 
   ipcMain.handle('folderWorkspaces:getPathStatus', async (_event, rawArgs: unknown) => {
@@ -107,16 +112,13 @@ export function registerFolderWorkspaceHandlers(mainWindow: BrowserWindow, store
     }
   )
 
-  ipcMain.handle('folderWorkspaces:delete', (_event, rawArgs: unknown): boolean => {
+  ipcMain.handle('folderWorkspaces:delete', async (_event, rawArgs: unknown): Promise<boolean> => {
     const args = parseProjectGroupIpcArgs(
       FolderWorkspaceSelectorArgs,
       rawArgs,
       'invalid_folder_workspace_delete_args'
     )
-    const deleted = store.removeFolderWorkspace(args.folderWorkspaceId)
-    if (deleted) {
-      notifyReposChanged(mainWindow)
-    }
-    return deleted
+    // Why: the runtime owns PTY/browser/session teardown and notifies on success.
+    return (await runtime.deleteFolderWorkspace(args.folderWorkspaceId)).deleted
   })
 }
diff --git a/src/main/runtime/folder-workspace-pty-teardown.ts b/src/main/runtime/folder-workspace-pty-teardown.ts
new file mode 100644
index 00000000000..f5a5b7df4b3
--- /dev/null
+++ b/src/main/runtime/folder-workspace-pty-teardown.ts
@@ -0,0 +1,38 @@
+import { killAllProcessesForWorktree } from './worktree-teardown'
+import type { IPtyProvider } from '../providers/types'
+import type { OrcaRuntimeService } from './orca-runtime'
+
+export type FolderWorkspacePtyTeardownDeps = {
+  runtime: OrcaRuntimeService
+  getSshProvider: ((connectionId: string) => IPtyProvider | undefined) | null
+  getLocalProvider: () => IPtyProvider | null
+  onPtyStopped: ((ptyId: string) => void) | null
+}
+
+/**
+ * Best-effort PTY sweep for a folder workspace being removed. Never throws:
+ * a stuck or unreachable host must not block forgetting the workspace.
+ */
+export async function teardownFolderWorkspacePtys(
+  deps: FolderWorkspacePtyTeardownDeps,
+  worktreeId: string,
+  connectionId: string | null
+): Promise<void> {
+  const sshPtyProvider = connectionId ? deps.getSshProvider?.(connectionId) : undefined
+  const ptyProvider = sshPtyProvider ?? deps.getLocalProvider()
+  if (!ptyProvider) {
+    return
+  }
+  await killAllProcessesForWorktree(worktreeId, {
+    runtime: deps.runtime,
+    resolvedWorktreeId: worktreeId,
+    ...(connectionId ? { resolvedConnectionId: connectionId } : {}),
+    localProvider: ptyProvider,
+    onPtyStopped: deps.onPtyStopped ?? undefined,
+    ...(connectionId
+      ? { includeProviderInventory: Boolean(sshPtyProvider), includeLocalRegistry: false }
+      : {})
+  }).catch((error) => {
+    console.warn(`[worktree-teardown] failed for ${worktreeId}:`, error)
+  })
+}
diff --git a/src/main/runtime/graph-sync-deletion-fence.test.ts b/src/main/runtime/graph-sync-deletion-fence.test.ts
new file mode 100644
index 00000000000..499607ea5bb
--- /dev/null
+++ b/src/main/runtime/graph-sync-deletion-fence.test.ts
@@ -0,0 +1,200 @@
+/**
+ * Deletion fence: a renderer snapshot that raced a worktree delete must not
+ * resurrect the removed occupant's browser/terminal rows in a same-id
+ * recreation, while the genuine successor is accepted promptly.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type {
+  RuntimeMobileSessionTabsResult,
+  RuntimeMobileSessionTabsSnapshot
+} from '../../shared/runtime-types'
+import { OrcaRuntimeService } from './orca-runtime'
+
+const WT = 'repo-1::/tmp/worktree-a'
+
+const storeBase = {
+  getRepo: () => ({
+    id: 'repo-1',
+    path: '/tmp/repo',
+    displayName: 'repo',
+    badgeColor: 'blue',
+    addedAt: 1
+  }),
+  getRepos: () => [storeBase.getRepo()],
+  addRepo: () => {},
+  updateRepo: () => undefined as never,
+  getAllWorktreeMeta: () => ({}),
+  getGitHubCache: () => ({ pr: {}, issue: {} }),
+  setWorktreeMeta: () => undefined as never,
+  getRetiredWorktreeNameRegistry: () => ({ exhaustedTiers: 0, names: [] }),
+  addRetiredWorktreeName: () => {},
+  mergeRetiredWorktreeNames: () => false,
+  getSettings: () => ({
+    workspaceDir: '/tmp/workspaces',
+    nestWorkspaces: false,
+    refreshLocalBaseRefOnWorktreeCreate: false,
+    branchPrefix: 'none',
+    branchPrefixCustom: ''
+  })
+}
+
+function makeRendererSnapshot(args: {
+  version: number
+  epoch?: string
+}): RuntimeMobileSessionTabsSnapshot {
+  return {
+    worktree: WT,
+    publicationEpoch: args.epoch ?? 'renderer:test-epoch',
+    snapshotVersion: args.version,
+    activeGroupId: 'group-1',
+    activeTabId: 'tab-1::leaf-1',
+    activeTabType: 'terminal',
+    tabs: [
+      {
+        type: 'terminal',
+        id: 'tab-1::leaf-1',
+        parentTabId: 'tab-1',
+        leafId: 'leaf-1',
+        title: 'Terminal 1',
+        isActive: true
+      }
+    ]
+  }
+}
+
+type RuntimeInternals = {
+  mobileSessionTabsByWorktree: Map<string, RuntimeMobileSessionTabsSnapshot>
+}
+
+describe('graph-sync deletion fence', () => {
+  beforeEach(() => {
+    vi.useFakeTimers()
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+  })
+
+  type FenceInternals = RuntimeInternals & {
+    removedMobileSessionWorktreeIds: Map<string, unknown>
+    removeWorktreeMetadataAndHistory: (store: unknown, worktreeId: string) => void
+    rendererGeneration: string | null
+  }
+
+  function createFencedRuntime() {
+    let meta: { instanceId: string; hostId?: string } | undefined = { instanceId: 'old-instance' }
+    const store = {
+      ...storeBase,
+      getWorktreeMeta: () => meta,
+      removeWorktreeMeta: () => {
+        meta = undefined
+      }
+    }
+    const runtime = new OrcaRuntimeService(store as never)
+    const internals = runtime as unknown as FenceInternals
+    const events: RuntimeMobileSessionTabsResult[] = []
+    runtime.onMobileSessionTabsChanged((snapshot) => events.push(snapshot))
+    const sync = (
+      mobileSessionTabs: RuntimeMobileSessionTabsSnapshot[],
+      extra: { rendererGeneration?: string; unchanged?: string[] } = {}
+    ) =>
+      runtime.syncWindowGraph(1, {
+        tabs: [],
+        leaves: [],
+        ...(extra.rendererGeneration ? { rendererGeneration: extra.rendererGeneration } : {}),
+        mobileSessionTabs,
+        ...(extra.unchanged ? { unchangedMobileSessionWorktrees: extra.unchanged } : {})
+      } as never)
+    const recreate = (instanceId: string): void => {
+      meta = { instanceId }
+    }
+    const remove = (): void => internals.removeWorktreeMetadataAndHistory(store, WT)
+    return { runtime, internals, events, sync, recreate, remove }
+  }
+
+  it("rejects the deleted occupant's late snapshot after same-id recreation", () => {
+    const { internals, events, sync, recreate, remove } = createFencedRuntime()
+    sync([{ ...makeRendererSnapshot({ version: 1 }), worktreeInstanceId: 'old-instance' }])
+    vi.advanceTimersByTime(60)
+    expect(internals.mobileSessionTabsByWorktree.has(WT)).toBe(true)
+    events.length = 0
+
+    remove()
+    expect(events).toEqual([expect.objectContaining({ worktree: WT, removed: true })])
+    events.length = 0
+    recreate('new-instance')
+
+    sync([{ ...makeRendererSnapshot({ version: 2 }), worktreeInstanceId: 'old-instance' }])
+    vi.advanceTimersByTime(60)
+
+    expect(internals.mobileSessionTabsByWorktree.has(WT)).toBe(false)
+    expect(events).toHaveLength(0)
+  })
+
+  it("accepts the recreated occupant's snapshot and clears the fence", () => {
+    const { internals, events, sync, recreate, remove } = createFencedRuntime()
+    remove()
+    events.length = 0
+    recreate('new-instance')
+
+    sync([{ ...makeRendererSnapshot({ version: 3 }), worktreeInstanceId: 'new-instance' }])
+    vi.advanceTimersByTime(60)
+
+    expect(internals.mobileSessionTabsByWorktree.has(WT)).toBe(true)
+    expect(events).toEqual([expect.objectContaining({ worktree: WT, snapshotVersion: 3 })])
+    expect(internals.removedMobileSessionWorktreeIds.has(WT)).toBe(false)
+  })
+
+  it('rejects a snapshot while the removed id has no successor metadata', () => {
+    const { internals, events, sync, remove } = createFencedRuntime()
+    remove()
+    events.length = 0
+
+    sync([{ ...makeRendererSnapshot({ version: 2 }), worktreeInstanceId: 'new-instance' }])
+    vi.advanceTimersByTime(60)
+
+    expect(internals.mobileSessionTabsByWorktree.has(WT)).toBe(false)
+    expect(events).toHaveLength(0)
+  })
+
+  it('fences identity-less frames from the generation that published the deleted occupant', () => {
+    const { internals, events, sync, recreate, remove } = createFencedRuntime()
+    sync([makeRendererSnapshot({ version: 1, epoch: 'renderer:gen-1' })], {
+      rendererGeneration: 'renderer:gen-1'
+    })
+    vi.advanceTimersByTime(60)
+    remove()
+    recreate('new-instance')
+    events.length = 0
+
+    sync([makeRendererSnapshot({ version: 2, epoch: 'renderer:gen-1' })], {
+      rendererGeneration: 'renderer:gen-1'
+    })
+    vi.advanceTimersByTime(60)
+    expect(internals.mobileSessionTabsByWorktree.has(WT)).toBe(false)
+    expect(events).toHaveLength(0)
+
+    // A reloaded renderer publishes a fresh generation; the resync-path throw
+    // on a superseded generation needs the graph to leave 'ready' first.
+    internals.rendererGeneration = null
+    sync([makeRendererSnapshot({ version: 1, epoch: 'renderer:gen-2' })], {
+      rendererGeneration: 'renderer:gen-2'
+    })
+    vi.advanceTimersByTime(60)
+    expect(internals.mobileSessionTabsByWorktree.has(WT)).toBe(true)
+  })
+
+  it('does not request a resync for a fenced frame the renderer still lists as unchanged', () => {
+    const { sync, recreate, remove } = createFencedRuntime()
+    remove()
+    recreate('new-instance')
+
+    const first = sync([
+      { ...makeRendererSnapshot({ version: 2 }), worktreeInstanceId: 'old-instance' }
+    ])
+    const second = sync([], { unchanged: [WT] })
+
+    expect(first.mobileSessionResyncWorktrees ?? []).toEqual([])
+    expect(second.mobileSessionResyncWorktrees ?? []).toEqual([])
+  })
+})
diff --git a/src/main/runtime/orca-runtime-preserved-branch-cleanup.ts b/src/main/runtime/orca-runtime-preserved-branch-cleanup.ts
index a78acbad8f5..43853f0f9c0 100644
--- a/src/main/runtime/orca-runtime-preserved-branch-cleanup.ts
+++ b/src/main/runtime/orca-runtime-preserved-branch-cleanup.ts
@@ -38,6 +38,7 @@ import { RuntimeRepositoryForkBackfill } from './runtime-repository-fork-backfil
 import { RuntimeWorkspaceSessionController } from './runtime-workspace-session-controller'
 import { RuntimeAiVaultCommands } from './runtime-ai-vault-commands'
 import { ClaudeAgentTeamsService } from './claude-agent-teams-service'
+import { teardownFolderWorkspacePtys } from './folder-workspace-pty-teardown'
 
 export class OrcaRuntimeWithPreservedBranchCleanup extends OrcaRuntimeWithTerminalDrivers {
   protected readonly preservedBranchCleanup = new RuntimePreservedBranchCleanup(() =>
@@ -203,7 +204,24 @@ export class OrcaRuntimeWithPreservedBranchCleanup extends OrcaRuntimeWithTermin
   protected readonly projectGroups = new RuntimeProjectGroupController({
     getStore: () => this.store,
     resolveRepo: (selector) => this.resolveRepoSelector(selector),
-    notifyReposChanged: () => this.notifyReposChanged()
+    notifyReposChanged: () => this.notifyReposChanged(),
+    resolveFolderConnectionId: (workspace) => this.resolveFolderWorkspaceConnectionId(workspace),
+    teardownFolderWorkspacePtys: (worktreeId, connectionId) =>
+      teardownFolderWorkspacePtys(
+        {
+          runtime: this,
+          getSshProvider: this.getSshProviderFn,
+          getLocalProvider: () => this.getLocalProvider(),
+          onPtyStopped: this.onPtyStopped
+        },
+        worktreeId,
+        connectionId
+      ),
+    cleanupRemovedFolderWorkspaceState: (worktreeId) => {
+      if (this.store) {
+        this.removeWorktreeMetadataAndHistory(this.store, worktreeId)
+      }
+    }
   })
 
   protected readonly nestedRepoImport = new RuntimeNestedRepoImport({
diff --git a/src/main/runtime/orca-runtime-remove-orphan-or-folder-worktree.ts b/src/main/runtime/orca-runtime-remove-orphan-or-folder-worktree.ts
index 697950f229a..d49dc410cd5 100644
--- a/src/main/runtime/orca-runtime-remove-orphan-or-folder-worktree.ts
+++ b/src/main/runtime/orca-runtime-remove-orphan-or-folder-worktree.ts
@@ -6,6 +6,7 @@ import { invalidateAuthorizedRootsCache } from '../ipc/filesystem-auth'
 import { isFolderRepo } from '../../shared/repo-kind'
 import { getRuntimeFolderWorkspaceRootId } from './runtime-folder-workspace'
 import { killAllProcessesForWorktree } from './worktree-teardown'
+import { teardownFolderWorkspacePtys } from './folder-workspace-pty-teardown'
 
 export async function removeOrphanOrFolderWorktree({
   runtime,
@@ -94,19 +95,16 @@ export async function removeOrphanOrFolderWorktree({
   const folderSshPtyProvider = folderConnectionId
     ? runtime.getSshProviderFn?.(folderConnectionId)
     : undefined
-  const folderPtyProvider = folderSshPtyProvider ?? runtime.getLocalProvider()
-  if (folderPtyProvider) {
-    await killAllProcessesForWorktree(removalTarget.id, {
+  await teardownFolderWorkspacePtys(
+    {
       runtime,
-      resolvedWorktreeId: removalTarget.id,
-      ...(folderConnectionId ? { resolvedConnectionId: folderConnectionId } : {}),
-      localProvider: folderPtyProvider,
-      onPtyStopped: runtime.onPtyStopped ?? undefined,
-      ...(folderConnectionId
-        ? { includeProviderInventory: Boolean(folderSshPtyProvider), includeLocalRegistry: false }
-        : {})
-    }).catch((err) => console.warn(`[worktree-teardown] failed for ${removalTarget.id}:`, err))
-  }
+      getSshProvider: runtime.getSshProviderFn,
+      getLocalProvider: () => runtime.getLocalProvider(),
+      onPtyStopped: runtime.onPtyStopped
+    },
+    removalTarget.id,
+    folderConnectionId
+  )
   await deleteRemoteWorktreeHistory(folderSshPtyProvider, removalTarget.id)
   runtime.removeWorktreeMetadataAndHistory(store, removalTarget.id, removalHostId)
   runtime.preservedBranchCleanup.delete(removalTarget.id, cleanupHostId)
diff --git a/src/main/runtime/orca-runtime-resolve-worktree-removal-target.ts b/src/main/runtime/orca-runtime-resolve-worktree-removal-target.ts
index f4790b1a697..58fd6231fc7 100644
--- a/src/main/runtime/orca-runtime-resolve-worktree-removal-target.ts
+++ b/src/main/runtime/orca-runtime-resolve-worktree-removal-target.ts
@@ -5,6 +5,7 @@ import type { RuntimeWorktreeRemovalTarget } from './runtime-worktree-selection'
 import { resolveRuntimeWorktreeRemovalTarget } from './runtime-worktree-removal-target'
 import type { RuntimeStore } from './runtime-store-contract'
 import { splitWorktreeId } from '../../shared/worktree/id'
+import { runtimeWorktreeIdsEqual } from './runtime-worktree-path-identity'
 import { hasWorktreeRemovalRepoOwnerOnOtherHost } from '../worktree-removal-repo-owner'
 import { advertisedUrlWatcher } from '../ports/advertised-url-watcher'
 import { deleteWorktreeHistoryDir } from '../terminal-history-deletion'
@@ -52,15 +53,36 @@ export class OrcaRuntimeWithResolveWorktreeRemovalTarget extends OrcaRuntimeWith
       ((persistedHostId && persistedHostId !== hostId) ||
         (repoId && hasWorktreeRemovalRepoOwnerOnOtherHost(store, repoId, hostId)))
     )
+    const acceptedRendererSnapshot = this.acceptedRendererMobileSnapshotByWorktree.get(worktreeId)
+    const storedSnapshot = this.mobileSessionTabsByWorktree.get(worktreeId)
     if (hostId) {
       store.removeWorktreeMeta(worktreeId, hostId)
     } else {
       store.removeWorktreeMeta(worktreeId)
     }
     if (!preservesSameIdOwner) {
+      // A paired PTY can outlive the delete acknowledgement; it must not be
+      // rescued into a newly-created occupant of the same path-derived ID.
+      for (const ptyId of this.pairedRendererSessionOwnedPtyIds) {
+        const ptyWorktreeId = this.ptysById.get(ptyId)?.worktreeId
+        if (ptyWorktreeId && runtimeWorktreeIdsEqual(ptyWorktreeId, worktreeId)) {
+          this.pairedRendererSessionOwnedPtyIds.delete(ptyId)
+        }
+      }
+      const removedPublicationEpoch =
+        acceptedRendererSnapshot?.publicationEpoch ??
+        storedSnapshot?.publicationEpoch ??
+        this.rendererGeneration ??
+        undefined
+      this.removedMobileSessionWorktreeIds.set(
+        worktreeId,
+        removedPublicationEpoch ? { removedPublicationEpoch } : {}
+      )
       this.mobileSessionTabsByWorktree.delete(worktreeId)
       this.mobileSessionTabsAgentStatusHeartbeat.removeWorktree(worktreeId)
       this.acceptedRendererMobileSnapshotByWorktree.delete(worktreeId)
+      this.cancelScheduledMobileSessionTabsChanged(worktreeId)
+      this.notifyMobileSessionTabsRemoved(worktreeId)
       advertisedUrlWatcher.forgetWorktree(worktreeId)
       deleteWorktreeHistoryDir(worktreeId)
       this.closeHeadlessBrowserPagesForWorktree(worktreeId)
diff --git a/src/main/runtime/orca-runtime-runtime-id.ts b/src/main/runtime/orca-runtime-runtime-id.ts
index 2d56a587c08..da55f2229b6 100644
--- a/src/main/runtime/orca-runtime-runtime-id.ts
+++ b/src/main/runtime/orca-runtime-runtime-id.ts
@@ -126,6 +126,20 @@ export class OrcaRuntimeWithRuntimeId {
     }
   >()
 
+  // Why: worktree ids are path-derived and get recreated, so a renderer frame
+  // that raced the delete must be rejected by the removed occupant's identity.
+  // Entries are cleared once a snapshot carrying the successor's instanceId
+  // is accepted; identity-less frames are fenced by renderer generation.
+  protected readonly removedMobileSessionWorktreeIds = new Map<
+    string,
+    {
+      removedPublicationEpoch?: string
+      // Why: a rejected frame is still "published" on the renderer side, so a
+      // later unchanged-list mention must not spiral into resync requests.
+      rejectedPublication?: boolean
+    }
+  >()
+
   protected clientSessionTabSelections = new ClientSessionTabSelectionStore()
 
   // Why: idempotency map for mobile terminal creation — a retried create with the
diff --git a/src/main/runtime/orca-runtime-sync-mobile-session-tabs.ts b/src/main/runtime/orca-runtime-sync-mobile-session-tabs.ts
index d8c00eda95d..4d54a322f3e 100644
--- a/src/main/runtime/orca-runtime-sync-mobile-session-tabs.ts
+++ b/src/main/runtime/orca-runtime-sync-mobile-session-tabs.ts
@@ -11,7 +11,8 @@ export class OrcaRuntimeWithSyncMobileSessionTabs extends OrcaRuntimeWithWriteOr
   protected syncMobileSessionTabs(
     snapshots: RuntimeMobileSessionTabsSnapshot[] | undefined,
     unchangedWorktreeIds?: string[],
-    resyncWorktreeIds = new Set<string>()
+    resyncWorktreeIds = new Set<string>(),
+    rendererGeneration?: string | null
   ): Set<string> {
     const changedWorktreeIds = new Set<string>()
     if (snapshots === undefined) {
@@ -21,6 +22,44 @@ export class OrcaRuntimeWithSyncMobileSessionTabs extends OrcaRuntimeWithWriteOr
     // new object, and the accept gate below drops semantically-unchanged
     // renderer resends before they replace an entry — so reference identity
     // before/after detects exactly the entries that actually changed.
+    const blockedRecreatedWorktreeIds = new Set<string>()
+    const acceptedSnapshots = snapshots.filter((snapshot) => {
+      const fence = this.removedMobileSessionWorktreeIds.get(snapshot.worktree)
+      if (!fence) {
+        return true
+      }
+      const reject = (): false => {
+        blockedRecreatedWorktreeIds.add(snapshot.worktree)
+        fence.rejectedPublication = true
+        return false
+      }
+      const currentMeta = this.store?.getWorktreeMeta(snapshot.worktree)
+      if (!currentMeta) {
+        return reject()
+      }
+      if (snapshot.worktreeInstanceId !== undefined) {
+        // Why: every catalog row carries an instanceId, so a mismatch against the
+        // live meta is exactly "not the current occupant" — no removed-id memory needed.
+        if (snapshot.worktreeInstanceId !== currentMeta.instanceId) {
+          return reject()
+        }
+        // Why: the successor's identity proves the race window closed; the
+        // instanceId mismatch alone fences any later frame from the old occupant.
+        this.removedMobileSessionWorktreeIds.delete(snapshot.worktree)
+        return true
+      }
+      // Identity-less frame: only the live renderer generation can speak for the
+      // successor, and the generation that published the removed occupant never
+      // can — a same-generation recreate stays fenced until the renderer reloads.
+      if (
+        (typeof rendererGeneration === 'string' &&
+          snapshot.publicationEpoch !== rendererGeneration) ||
+        snapshot.publicationEpoch === fence.removedPublicationEpoch
+      ) {
+        return reject()
+      }
+      return true
+    })
     const before = new Map(this.mobileSessionTabsByWorktree)
     this.restoreLivePairedRendererSessionOwnedMobileTerminals(null, {
       missingSnapshotOnly: true,
@@ -31,7 +70,7 @@ export class OrcaRuntimeWithSyncMobileSessionTabs extends OrcaRuntimeWithWriteOr
       this.getWorkspaceSessionHydrationTargets(Boolean(this.offscreenBrowserBackend))
     )
     if (this.offscreenBrowserBackend) {
-      for (const snapshot of snapshots) {
+      for (const snapshot of acceptedSnapshots) {
         if (!worktreeSessionsToHydrate.has(snapshot.worktree)) {
           worktreeSessionsToHydrate.set(snapshot.worktree, null)
         }
@@ -46,7 +85,10 @@ export class OrcaRuntimeWithSyncMobileSessionTabs extends OrcaRuntimeWithWriteOr
       })
     }
     const nextWorktrees = new Set<string>()
-    const incomingWorktreeIds = new Set(snapshots.map((snapshot) => snapshot.worktree))
+    const incomingWorktreeIds = new Set(acceptedSnapshots.map((snapshot) => snapshot.worktree))
+    for (const worktreeId of blockedRecreatedWorktreeIds) {
+      nextWorktrees.add(worktreeId)
+    }
     // Why: the renderer withholds unchanged snapshots to keep the graph payload
     // small, so these worktrees are still live and must not fall into the prune
     // below. Ask for a republish when main no longer holds that accepted renderer
@@ -57,6 +99,12 @@ export class OrcaRuntimeWithSyncMobileSessionTabs extends OrcaRuntimeWithWriteOr
       if (existing) {
         nextWorktrees.add(worktreeId)
       }
+      // Why: a fenced frame stays "published" renderer-side; asking for a
+      // republish would only be fenced again on every sync.
+      if (!existing && this.removedMobileSessionWorktreeIds.get(worktreeId)?.rejectedPublication) {
+        nextWorktrees.add(worktreeId)
+        continue
+      }
       if (
         existing &&
         accepted &&
@@ -78,7 +126,7 @@ export class OrcaRuntimeWithSyncMobileSessionTabs extends OrcaRuntimeWithWriteOr
       // which outlives the dropped snapshot and would reject the republish.
       this.acceptedRendererMobileSnapshotByWorktree.delete(worktreeId)
     }
-    for (const snapshot of snapshots) {
+    for (const snapshot of acceptedSnapshots) {
       nextWorktrees.add(snapshot.worktree)
       const existing = this.mobileSessionTabsByWorktree.get(snapshot.worktree)
       // Why: judge renderer publication ordering against the renderer's own
diff --git a/src/main/runtime/orca-runtime-sync-window-graph.ts b/src/main/runtime/orca-runtime-sync-window-graph.ts
index 7f5a2bf7973..f9c6ab358e3 100644
--- a/src/main/runtime/orca-runtime-sync-window-graph.ts
+++ b/src/main/runtime/orca-runtime-sync-window-graph.ts
@@ -79,7 +79,8 @@ export class OrcaRuntimeWithSyncWindowGraph extends OrcaRuntimeWithAttachWindow
     const changedMobileWorktrees = this.syncMobileSessionTabs(
       graph.mobileSessionTabs,
       graph.unchangedMobileSessionWorktrees,
-      mobileSessionResyncWorktrees
+      mobileSessionResyncWorktrees,
+      rendererGeneration
     )
     const nextLeaves = new Map<string, RuntimeLeafRecord>()
     const graphSyncedAt = this.nextTitleObservationSequence()
diff --git a/src/main/runtime/orca-runtime-tests/browser-capabilities.spec.ts b/src/main/runtime/orca-runtime-tests/browser-capabilities.spec.ts
index 964d69f64d8..6b09d1263b1 100644
--- a/src/main/runtime/orca-runtime-tests/browser-capabilities.spec.ts
+++ b/src/main/runtime/orca-runtime-tests/browser-capabilities.spec.ts
@@ -501,6 +501,23 @@ describe('OrcaRuntimeService', () => {
     expect(closeTab).toHaveBeenCalledTimes(2)
   })
 
+  it('does not rescue a paired renderer PTY into a recreated worktree', () => {
+    const runtime = createRuntime()
+    const ptyId = 'paired-pty-deleted-worktree'
+    runtime.registerPty(ptyId, TEST_WORKTREE_ID, null, {
+      tabId: 'tab-deleted-worktree',
+      leafId: 'leaf-deleted-worktree'
+    })
+    const internals = runtime as unknown as {
+      pairedRendererSessionOwnedPtyIds: Set<string>
+    }
+    internals.pairedRendererSessionOwnedPtyIds.add(ptyId)
+
+    runtime['removeWorktreeMetadataAndHistory'](store as never, TEST_WORKTREE_ID)
+
+    expect(internals.pairedRendererSessionOwnedPtyIds.has(ptyId)).toBe(false)
+  })
+
   it('closes a worktree’s client-hosted browser pages when its metadata is removed (leak fix)', async () => {
     const runtime = createRuntime()
     const host = attachClientBrowserHost(runtime)
diff --git a/src/main/runtime/runtime-project-group-controller-folder-delete.test.ts b/src/main/runtime/runtime-project-group-controller-folder-delete.test.ts
new file mode 100644
index 00000000000..1cb7209ba65
--- /dev/null
+++ b/src/main/runtime/runtime-project-group-controller-folder-delete.test.ts
@@ -0,0 +1,64 @@
+import { describe, expect, it, vi } from 'vitest'
+import { RuntimeProjectGroupController } from './runtime-project-group-controller'
+import type { FolderWorkspace } from '../../shared/folder-workspace-types'
+
+const workspace = {
+  id: 'ws-1',
+  projectGroupId: 'group-1',
+  folderPath: '/tmp/ws'
+} as FolderWorkspace
+
+function createController(
+  resolveFolderConnectionId: (workspace: FolderWorkspace) => string | null
+) {
+  const removeFolderWorkspace = vi.fn(() => true)
+  const teardownFolderWorkspacePtys = vi.fn(async () => undefined)
+  const cleanupRemovedFolderWorkspaceState = vi.fn()
+  const notifyReposChanged = vi.fn()
+  const controller = new RuntimeProjectGroupController({
+    getStore: () => ({ getFolderWorkspaces: () => [workspace], removeFolderWorkspace }) as never,
+    resolveRepo: async () => {
+      throw new Error('unused')
+    },
+    notifyReposChanged,
+    resolveFolderConnectionId,
+    teardownFolderWorkspacePtys,
+    cleanupRemovedFolderWorkspaceState
+  })
+  return {
+    controller,
+    removeFolderWorkspace,
+    teardownFolderWorkspacePtys,
+    cleanupRemovedFolderWorkspaceState,
+    notifyReposChanged
+  }
+}
+
+describe('RuntimeProjectGroupController.deleteFolderWorkspace', () => {
+  it('tears down PTYs and runtime state before removing the catalog row', async () => {
+    const deps = createController(() => 'ssh-1')
+
+    await expect(deps.controller.deleteFolderWorkspace('ws-1')).resolves.toEqual({ deleted: true })
+
+    expect(deps.teardownFolderWorkspacePtys).toHaveBeenCalledWith('folder:ws-1', 'ssh-1')
+    expect(deps.cleanupRemovedFolderWorkspaceState).toHaveBeenCalledWith('folder:ws-1')
+    expect(deps.teardownFolderWorkspacePtys.mock.invocationCallOrder[0]).toBeLessThan(
+      deps.removeFolderWorkspace.mock.invocationCallOrder[0]!
+    )
+    expect(deps.notifyReposChanged).toHaveBeenCalledTimes(1)
+  })
+
+  it('still deletes when the folder host is ambiguous, skipping only the PTY sweep', async () => {
+    const warn = vi.spyOn(console, 'warn').mockImplementation(() => undefined)
+    const deps = createController(() => {
+      throw new Error('folder_workspace_connection_ambiguous')
+    })
+
+    await expect(deps.controller.deleteFolderWorkspace('ws-1')).resolves.toEqual({ deleted: true })
+
+    expect(deps.teardownFolderWorkspacePtys).not.toHaveBeenCalled()
+    expect(deps.cleanupRemovedFolderWorkspaceState).toHaveBeenCalledWith('folder:ws-1')
+    expect(deps.removeFolderWorkspace).toHaveBeenCalledWith('ws-1')
+    warn.mockRestore()
+  })
+})
diff --git a/src/main/runtime/runtime-project-group-controller.ts b/src/main/runtime/runtime-project-group-controller.ts
index 05d12c43573..2530ef9ad15 100644
--- a/src/main/runtime/runtime-project-group-controller.ts
+++ b/src/main/runtime/runtime-project-group-controller.ts
@@ -12,11 +12,15 @@ import {
 } from '../project-groups/folder-workspace-path-status'
 import { getSshFilesystemProvider } from '../providers/ssh-filesystem-dispatch'
 import type { RuntimeStore } from './runtime-store-contract'
+import { folderWorkspaceKey } from '../../shared/workspace-scope'
 
 type RuntimeProjectGroupDependencies = {
   getStore: () => RuntimeStore | null
   resolveRepo: (selector: string) => Promise<Repo>
   notifyReposChanged: () => void
+  resolveFolderConnectionId: (workspace: FolderWorkspace) => string | null
+  teardownFolderWorkspacePtys: (worktreeId: string, connectionId: string | null) => Promise<void>
+  cleanupRemovedFolderWorkspaceState: (worktreeId: string) => void
 }
 
 type FolderWorkspaceUpdates = Partial<
@@ -211,6 +215,22 @@ export class RuntimeProjectGroupController {
     if (!store?.removeFolderWorkspace) {
       throw new Error('runtime_unavailable')
     }
+    const workspace = store.getFolderWorkspaces?.().find((entry) => entry.id === folderWorkspaceId)
+    if (workspace) {
+      const worktreeId = folderWorkspaceKey(folderWorkspaceId)
+      // Why: a mixed-host group has no single PTY target; forgetting the
+      // workspace must still succeed, so skip the sweep instead of failing.
+      let connectionId: string | null | undefined
+      try {
+        connectionId = this.deps.resolveFolderConnectionId(workspace)
+      } catch (error) {
+        console.warn(`[folder-workspace] skipping PTY teardown for ${worktreeId}:`, error)
+      }
+      if (connectionId !== undefined) {
+        await this.deps.teardownFolderWorkspacePtys(worktreeId, connectionId)
+      }
+      this.deps.cleanupRemovedFolderWorkspaceState(worktreeId)
+    }
     const deleted = store.removeFolderWorkspace(folderWorkspaceId)
     if (deleted) {
       this.deps.notifyReposChanged()
diff --git a/src/main/window/attach-main-window-services.ts b/src/main/window/attach-main-window-services.ts
index 128ff2e0e4e..ff7d84bd706 100644
--- a/src/main/window/attach-main-window-services.ts
+++ b/src/main/window/attach-main-window-services.ts
@@ -70,7 +70,7 @@ export function attachMainWindowServices(
   }
 ): void {
   registerAppReloadHandler(mainWindow, options?.onBeforeRendererReload)
-  registerRepoHandlers(mainWindow, store)
+  registerRepoHandlers(mainWindow, store, runtime)
   // Why: repo IPC mutations must also invalidate paired clients' catalogs (#11994).
   setRepoRemoteClientNotifier(runtime)
   setWorktreeCatalogRemoteClientNotifier(runtime)
diff --git a/src/renderer/src/components/sidebar/use-worktree-card-workspace-actions.ts b/src/renderer/src/components/sidebar/use-worktree-card-workspace-actions.ts
index 665227426ac..7b1349497d3 100644
--- a/src/renderer/src/components/sidebar/use-worktree-card-workspace-actions.ts
+++ b/src/renderer/src/components/sidebar/use-worktree-card-workspace-actions.ts
@@ -54,10 +54,15 @@ export function useWorktreeCardWorkspaceActions({
       event.stopPropagation()
       if (showDeleteQuickAction) {
         if (folderWorkspaceId) {
-          void deleteFolderWorkspace(folderWorkspaceId).then((deleted) => {
+          void deleteFolderWorkspace(
+            folderWorkspaceId,
+            worktree.hostId ? { executionHostId: worktree.hostId } : undefined
+          ).then((deleted) => {
             if (
               deleted &&
-              useAppStore.getState().activeWorktreeId === folderWorkspaceKey(folderWorkspaceId)
+              useAppStore.getState().activeWorktreeId === folderWorkspaceKey(folderWorkspaceId) &&
+              (!worktree.hostId ||
+                useAppStore.getState().activeWorkspaceExecutionHostId === worktree.hostId)
             ) {
               setActiveWorktree(null)
             }
@@ -72,9 +77,9 @@ export function useWorktreeCardWorkspaceActions({
     [
       deleteFolderWorkspace,
       folderWorkspaceId,
+      worktree.hostId,
       setActiveWorktree,
       showDeleteQuickAction,
-      worktree.hostId,
       worktree.id
     ]
   )
diff --git a/src/renderer/src/components/sidebar/worktree-context-menu-delete-intent.test.ts b/src/renderer/src/components/sidebar/worktree-context-menu-delete-intent.test.ts
index 6b1a251bce8..e83bad3f440 100644
--- a/src/renderer/src/components/sidebar/worktree-context-menu-delete-intent.test.ts
+++ b/src/renderer/src/components/sidebar/worktree-context-menu-delete-intent.test.ts
@@ -47,6 +47,25 @@ describe('createWorktreeContextMenuDeleteIntent', () => {
 
     expect(mocks.runBatchDelete).toHaveBeenCalledWith(worktrees)
   })
+
+  it('preserves the folder owner host in a context-menu delete intent', () => {
+    const intent = createWorktreeContextMenuDeleteIntent({
+      worktree: {
+        id: 'folder:shared',
+        instanceId: 'runtime-instance',
+        hostId: 'runtime:env-owner'
+      },
+      batchDeleteWorktrees: [],
+      isMultiContext: false,
+      folderWorkspaceId: 'shared'
+    })
+
+    expect(intent).toEqual({
+      kind: 'folder',
+      folderWorkspaceId: 'shared',
+      executionHostId: 'runtime:env-owner'
+    })
+  })
 })
 
 describe('deferWorktreeContextMenuDeleteIntent', () => {
diff --git a/src/renderer/src/components/sidebar/worktree-context-menu-delete-intent.ts b/src/renderer/src/components/sidebar/worktree-context-menu-delete-intent.ts
index d88756c4f71..4cf5cd0d93b 100644
--- a/src/renderer/src/components/sidebar/worktree-context-menu-delete-intent.ts
+++ b/src/renderer/src/components/sidebar/worktree-context-menu-delete-intent.ts
@@ -3,11 +3,12 @@ import { folderWorkspaceKey } from '../../../../shared/workspace-scope'
 import { runWorktreeBatchDelete, runWorktreeDelete } from './delete-worktree-flow'
 import type { WorktreeDeleteIdentity } from './worktree-delete-request'
 import type { Worktree } from '../../../../shared/worktree/types'
+import type { ExecutionHostId } from '../../../../shared/execution-host'
 
 export type WorktreeContextMenuDeleteIntent =
   | { kind: 'worktree'; worktree: WorktreeDeleteIdentity }
   | { kind: 'batch'; worktrees: readonly WorktreeDeleteIdentity[] }
-  | { kind: 'folder'; folderWorkspaceId: string }
+  | { kind: 'folder'; folderWorkspaceId: string; executionHostId?: ExecutionHostId }
 
 export function createWorktreeContextMenuDeleteIntent(args: {
   worktree: Pick<Worktree, 'id' | 'instanceId' | 'hostId'>
@@ -26,7 +27,11 @@ export function createWorktreeContextMenuDeleteIntent(args: {
     }
   }
   if (args.folderWorkspaceId) {
-    return { kind: 'folder', folderWorkspaceId: args.folderWorkspaceId }
+    return {
+      kind: 'folder',
+      folderWorkspaceId: args.folderWorkspaceId,
+      ...(args.worktree.hostId ? { executionHostId: args.worktree.hostId } : {})
+    }
   }
   const { id, instanceId, hostId } = args.worktree
   return { kind: 'worktree', worktree: { id, instanceId, hostId } }
@@ -45,12 +50,22 @@ export function runWorktreeContextMenuDeleteIntent(intent: WorktreeContextMenuDe
     return
   }
   const state = useAppStore.getState()
-  void state.deleteFolderWorkspace(intent.folderWorkspaceId).then((deleted) => {
-    const current = useAppStore.getState()
-    if (deleted && current.activeWorktreeId === folderWorkspaceKey(intent.folderWorkspaceId)) {
-      current.setActiveWorktree(null)
-    }
-  })
+  void state
+    .deleteFolderWorkspace(
+      intent.folderWorkspaceId,
+      intent.executionHostId ? { executionHostId: intent.executionHostId } : undefined
+    )
+    .then((deleted) => {
+      const current = useAppStore.getState()
+      if (
+        deleted &&
+        current.activeWorktreeId === folderWorkspaceKey(intent.folderWorkspaceId) &&
+        (!intent.executionHostId ||
+          current.activeWorkspaceExecutionHostId === intent.executionHostId)
+      ) {
+        current.setActiveWorktree(null)
+      }
+    })
 }
 
 export function deferWorktreeContextMenuDeleteIntent(
diff --git a/src/renderer/src/runtime/sync-runtime-graph-workspace-publication.test.ts b/src/renderer/src/runtime/sync-runtime-graph-workspace-publication.test.ts
index 823e68d0508..f99bbb8ec78 100644
--- a/src/renderer/src/runtime/sync-runtime-graph-workspace-publication.test.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph-workspace-publication.test.ts
@@ -52,6 +52,57 @@ describe('buildMobileSessionTabSnapshots', () => {
     expect(restored.snapshotVersion).toBeGreaterThan(initial.snapshotVersion)
   })
 
+  it('publishes a new instance identity when unchanged content is recreated', () => {
+    const worktree = {
+      id: 'wt-1',
+      instanceId: 'old-instance',
+      repoId: 'repo-1'
+    }
+    const base = makeState({
+      worktreesByRepo: { 'repo-1': [worktree] } as unknown as AppState['worktreesByRepo'],
+      tabsByWorktree: {
+        'wt-1': [{ id: 'term-1', title: 'Terminal 1' }]
+      } as unknown as AppState['tabsByWorktree']
+    })
+    const initial = buildMobileSessionTabSnapshots(base)[0]!
+    const recreated = {
+      ...base,
+      worktreesByRepo: {
+        'repo-1': [{ ...worktree, instanceId: 'new-instance' }]
+      } as unknown as AppState['worktreesByRepo']
+    }
+
+    const next = buildMobileSessionTabSnapshots(recreated)[0]!
+
+    expect(initial.worktreeInstanceId).toBe('old-instance')
+    expect(next.worktreeInstanceId).toBe('new-instance')
+    expect(next.snapshotVersion).toBeGreaterThan(initial.snapshotVersion)
+  })
+
+  it('publishes a cross-host id collision without an instance identity', () => {
+    const state = makeState({
+      worktreesByRepo: {
+        'repo-1': [
+          { id: 'wt-duplicate', repoId: 'repo-1', hostId: 'local', instanceId: 'local-instance' },
+          {
+            id: 'wt-duplicate',
+            repoId: 'repo-1',
+            hostId: 'ssh:ssh-1',
+            instanceId: 'ssh-instance'
+          }
+        ]
+      } as unknown as AppState['worktreesByRepo'],
+      tabsByWorktree: {
+        'wt-duplicate': [{ id: 'term-1', title: 'Terminal 1' }]
+      } as unknown as AppState['tabsByWorktree']
+    })
+
+    const snapshots = buildMobileSessionTabSnapshots(state)
+    expect(snapshots).toHaveLength(1)
+    expect(snapshots[0]?.worktree).toBe('wt-duplicate')
+    expect(snapshots[0]?.worktreeInstanceId).toBeUndefined()
+  })
+
   it('publishes browser and editor color + pin state from unified tabs', () => {
     const fileId = '/repo/README.md'
     const state = makeState({
diff --git a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-capture.ts b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-capture.ts
index 921249fb82d..16c556c86d6 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-capture.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-capture.ts
@@ -157,6 +157,7 @@ export function canReuseMobileSessionSnapshot(
 ): boolean {
   return (
     previous.worktreeId === next.worktreeId &&
+    previous.worktreeInstanceId === next.worktreeInstanceId &&
     previous.terminalTabs === next.terminalTabs &&
     previous.browserWorkspaces === next.browserWorkspaces &&
     previous.unifiedTabs === next.unifiedTabs &&
diff --git a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-inputs.ts b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-inputs.ts
index d69885a0f8c..0d6157fe75d 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-inputs.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-inputs.ts
@@ -1,6 +1,7 @@
 import type { AppState } from '@/store/types'
 import { parsePaneKey, makePaneKey } from '../../../../shared/stable-pane-id'
 import { nativeChatLaunchAgentForLeaf } from '../../components/native-chat/native-chat-leaf-routing'
+import { getIndexedWorktreesById } from '@/store/worktree-repo-index'
 import {
   EMPTY_NARROWED_BY_KEY,
   EMPTY_WORKTREE_BROWSER_WORKSPACES,
@@ -104,6 +105,14 @@ export function buildMobileSessionAgentStatusByWorktree(
   return byWorktreeId
 }
 
+// Why: a bare id can name one workspace per host (STA-4343); with two owners no
+// single identity is correct, so publish without one and let main fall back to
+// its generation fence rather than blank the mobile session.
+function resolveWorktreeInstanceId(state: AppState, worktreeId: string): string | undefined {
+  const rows = getIndexedWorktreesById(state.worktreesByRepo ?? {}, worktreeId)
+  return rows.length === 1 ? rows[0]?.instanceId : undefined
+}
+
 export function buildMobileSessionWorktreeInputs(
   state: AppState,
   worktreeId: string,
@@ -146,6 +155,7 @@ export function buildMobileSessionWorktreeInputs(
   const activeTabId = state.activeTabId
   return {
     worktreeId,
+    worktreeInstanceId: resolveWorktreeInstanceId(state, worktreeId),
     terminalTabs,
     browserWorkspaces,
     unifiedTabs: state.unifiedTabsByWorktree[worktreeId] ?? EMPTY_WORKTREE_UNIFIED_TABS,
diff --git a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-snapshots.ts b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-snapshots.ts
index 11061906bc5..f6ba7f49cfb 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-snapshots.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-snapshots.ts
@@ -208,16 +208,29 @@ export function buildMobileSessionTabSnapshots(
     }
     const candidateVersion = ++graphState.mobileSessionSnapshotVersion
     if (cached && jsonContentEquals(cached.content, content)) {
+      const snapshot =
+        cached.snapshot.worktreeInstanceId === inputs.worktreeInstanceId
+          ? cached.snapshot
+          : {
+              worktree: worktreeId,
+              ...(inputs.worktreeInstanceId
+                ? { worktreeInstanceId: inputs.worktreeInstanceId }
+                : {}),
+              publicationEpoch: mobilePublicationEpoch,
+              snapshotVersion: candidateVersion,
+              ...content
+            }
       graphState.mobileSessionSnapshotCacheByWorktree.set(worktreeId, {
         inputs,
         content,
-        snapshot: cached.snapshot
+        snapshot
       })
-      snapshots.push(cached.snapshot)
+      snapshots.push(snapshot)
       continue
     }
     const snapshot: RuntimeMobileSessionTabsSnapshot = {
       worktree: worktreeId,
+      ...(inputs.worktreeInstanceId ? { worktreeInstanceId: inputs.worktreeInstanceId } : {}),
       publicationEpoch: mobilePublicationEpoch,
       snapshotVersion: candidateVersion,
       ...content
diff --git a/src/renderer/src/runtime/sync-runtime-graph/types.ts b/src/renderer/src/runtime/sync-runtime-graph/types.ts
index 85b1d961d5f..b51b8cd8afa 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/types.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/types.ts
@@ -107,6 +107,7 @@ export type MountedTerminalSurfaceCapture = {
  */
 export type MobileSessionWorktreeInputs = {
   worktreeId: string
+  worktreeInstanceId: string | undefined
   terminalTabs: AppState['tabsByWorktree'][string]
   browserWorkspaces: AppState['browserTabsByWorktree'][string]
   unifiedTabs: AppState['unifiedTabsByWorktree'][string]
diff --git a/src/renderer/src/store/folder-workspaces/folder-workspace-mutations.ts b/src/renderer/src/store/folder-workspaces/folder-workspace-mutations.ts
index 6dcc35399c1..b9eefe424a8 100644
--- a/src/renderer/src/store/folder-workspaces/folder-workspace-mutations.ts
+++ b/src/renderer/src/store/folder-workspaces/folder-workspace-mutations.ts
@@ -257,6 +257,9 @@ export function createFolderWorkspaceMutationActions(
           folderWorkspacePathStatuses: {}
         }))
         if (!get().folderWorkspaces.some((workspace) => workspace.id === folderWorkspaceId)) {
+          // Folder workspaces use the same browser registry key as worktrees;
+          // tear down Chromium guests before purging the remaining renderer state.
+          await get().shutdownWorktreeBrowsers(workspaceKey)
           get().purgeWorktreeTerminalState([workspaceKey])
         }
         return true
diff --git a/src/renderer/src/store/slices/folder-workspace-owner-routed-mutations.test.ts b/src/renderer/src/store/slices/folder-workspace-owner-routed-mutations.test.ts
index 91c78d42a82..911f0acfb60 100644
--- a/src/renderer/src/store/slices/folder-workspace-owner-routed-mutations.test.ts
+++ b/src/renderer/src/store/slices/folder-workspace-owner-routed-mutations.test.ts
@@ -413,10 +413,12 @@ describe('folder workspace owner-routed mutations', () => {
     const folderWorkspace = makeFolderWorkspace()
     folderWorkspacesDelete.mockResolvedValue(true)
     const store = createTestStore()
+    const shutdownWorktreeBrowsers = vi.fn().mockResolvedValue(undefined)
     store.setState({
       settings: { activeRuntimeEnvironmentId: 'env-focused' } as never,
       projectGroups: [{ ...projectGroup, executionHostId: 'local' }],
-      folderWorkspaces: [folderWorkspace]
+      folderWorkspaces: [folderWorkspace],
+      shutdownWorktreeBrowsers
     })
 
     await expect(store.getState().deleteFolderWorkspace(folderWorkspace.id)).resolves.toBe(true)
@@ -424,6 +426,7 @@ describe('folder workspace owner-routed mutations', () => {
     expect(folderWorkspacesDelete).toHaveBeenCalledWith({
       folderWorkspaceId: folderWorkspace.id
     })
+    expect(shutdownWorktreeBrowsers).toHaveBeenCalledWith(folderWorkspaceKey(folderWorkspace.id))
     expect(runtimeEnvironmentCall).not.toHaveBeenCalled()
   })
 
@@ -436,6 +439,7 @@ describe('folder workspace owner-routed mutations', () => {
     })
     folderWorkspacesDelete.mockResolvedValue(true)
     const store = createTestStore()
+    const shutdownWorktreeBrowsers = vi.fn().mockResolvedValue(undefined)
     store.setState({
       settings: { activeRuntimeEnvironmentId: null } as never,
       activeWorktreeId: `folder:${localFolder.id}`,
@@ -444,7 +448,8 @@ describe('folder workspace owner-routed mutations', () => {
         { ...projectGroup, executionHostId: 'local' },
         { ...projectGroup, executionHostId: 'runtime:env-owner' }
       ],
-      folderWorkspaces: [localFolder, runtimeFolder]
+      folderWorkspaces: [localFolder, runtimeFolder],
+      shutdownWorktreeBrowsers
     })
 
     await expect(store.getState().deleteFolderWorkspace(localFolder.id)).resolves.toBe(true)
@@ -455,6 +460,7 @@ describe('folder workspace owner-routed mutations', () => {
     expect(runtimeEnvironmentCall).not.toHaveBeenCalled()
     // Delete is owner-scoped: the sibling host's row keeps the bare ID alive.
     expect(store.getState().folderWorkspaces).toEqual([runtimeFolder])
+    expect(shutdownWorktreeBrowsers).not.toHaveBeenCalled()
   })
 
   it('deletes a runtime folder through its owner instead of the focused runtime', async () => {
diff --git a/src/shared/runtime-session-contracts.ts b/src/shared/runtime-session-contracts.ts
index cd0dd7a5cc7..17fe75d5108 100644
--- a/src/shared/runtime-session-contracts.ts
+++ b/src/shared/runtime-session-contracts.ts
@@ -215,6 +215,8 @@ export const UNPUBLISHED_WORKTREE_PUBLICATION_EPOCH = 'none'
 
 export type RuntimeMobileSessionTabsSnapshot = {
   worktree: string
+  /** Immutable catalog identity used to fence snapshots across path reuse. */
+  worktreeInstanceId?: string
   publicationEpoch: string
   snapshotVersion: number
   activeGroupId: string | null

From 058e618bb4b29f2d3b8284a8a402b2d7dcfac063 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:05:30 -0700
Subject: [PATCH 04/92] fix(ssh): stop a failed worktree scan from publishing
 authoritative emptiness (#17833)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(ssh): keep an unreadable worktree catalog from authorizing teardown

#14004: the relay's worktree-list fallback caught every failure and returned
`[]`, so `SshGitProvider.listWorktrees` resolved as a success with an empty
list. Downstream reconciliation treats a resolved listing as authoritative,
which reaches `teardownMissingWorktreeTerminalsBestEffort` and the
unregistered-worktree removal paths — a data-loss path from a failed scan.

- relay: the `-z`-unsupported fallback lane propagates its failure instead of
  swallowing it to `[]`.
- provider: an empty or malformed `git.listWorktrees` response is refused as
  `WorktreeCatalogUnavailableError`. A Git repo always lists its own checkout,
  so a zero-row listing can only be a scan that never answered — this is the
  mixed-version guard against relays that still swallow.
- `listRepoWorktrees`: an unreachable SSH host reports unavailable instead of
  an empty catalog.

#12661: `ssh:terminateSessions` now returns `{ terminated, unverifiable }`, so
an offline sweep that only tore down local transport cannot be mistaken for a
remote kill. The Manage-hosts toast warns instead of claiming success.

* chore(i18n): register the unreachable-terminal terminate message
---
 src/main/ipc/ssh-connection-handlers.ts       |  11 +-
 src/main/ipc/ssh-terminate-sessions.test.ts   |  26 +++-
 .../providers/ssh-git-worktree-provider.ts    |   8 +-
 .../ssh-worktree-catalog-authority.test.ts    | 141 ++++++++++++++++++
 src/main/repo-worktrees.ts                    |  14 +-
 src/preload/api/ssh-api.ts                    |   5 +-
 ...it-handler-worktree-list-authority.test.ts |  96 ++++++++++++
 src/relay/git-handler-worktree-operations.ts  |  21 +--
 .../src/components/settings/SshPane.tsx       |  11 +-
 .../settings/ssh-session-termination.ts       |  35 ++++-
 src/renderer/src/i18n/locales/en.json         |   3 +-
 .../src/web/preload-api/web-terminal-api.ts   |   2 +-
 src/shared/ssh-types.ts                       |  10 ++
 .../worktree/worktree-catalog-availability.ts |  41 +++++
 14 files changed, 389 insertions(+), 35 deletions(-)
 create mode 100644 src/main/providers/ssh-worktree-catalog-authority.test.ts
 create mode 100644 src/relay/git-handler-worktree-list-authority.test.ts
 create mode 100644 src/shared/worktree/worktree-catalog-availability.ts

diff --git a/src/main/ipc/ssh-connection-handlers.ts b/src/main/ipc/ssh-connection-handlers.ts
index 8c3bf4bbc6d..55411a70e8d 100644
--- a/src/main/ipc/ssh-connection-handlers.ts
+++ b/src/main/ipc/ssh-connection-handlers.ts
@@ -1,5 +1,5 @@
 import { ipcMain } from 'electron'
-import type { SshTarget } from '../../shared/ssh-types'
+import type { SshTarget, SshTerminateSessionsResult } from '../../shared/ssh-types'
 import { SSH_TERMINATE_RECONNECT_REQUIRED } from '../../shared/constants'
 import { isSshPtyNotFoundError } from '../providers/ssh-pty-errors'
 import { toAppSshPtyId, toRelaySshPtyId } from '../providers/ssh-pty-id'
@@ -98,6 +98,9 @@ export function registerSshConnectionHandlers(): void {
 
   ipcMain.handle('ssh:terminateSessions', async (_event, args: { targetId: string }) => {
     invalidateConnectAttempt(args.targetId)
+    // Why (#12661): an offline sweep tears down local transport only. The caller must be able to tell
+    // "the host stopped these" from "nobody asked the host", so carry the verdict out of the lifecycle queue.
+    let outcome: SshTerminateSessionsResult = { terminated: 0, unverifiable: 0 }
     await runTargetLifecycle(args.targetId, async () => {
       const provider = getSshPtyProvider(args.targetId)
       const leases = persistedStore!.getSshRemotePtyLeases(args.targetId)
@@ -142,6 +145,10 @@ export function registerSshConnectionHandlers(): void {
             )
           )
         : []
+      if (!provider) {
+        // Nothing observed these remote shells, so their state is unknown — not "nothing to do".
+        outcome = { terminated: 0, unverifiable: ptyIds.length }
+      }
       const shutdownFailures: string[] = []
       for (const [index, result] of shutdownResults.entries()) {
         const { appPtyId, relayPtyId } = ptyIds[index]
@@ -154,6 +161,7 @@ export function registerSshConnectionHandlers(): void {
         clearProviderPtyState(appPtyId)
         deletePtyOwnership(appPtyId)
         persistedStore!.markSshRemotePtyLease(args.targetId, relayPtyId, 'terminated')
+        outcome = { ...outcome, terminated: outcome.terminated + 1 }
       }
       if (shutdownFailures.length > 0) {
         // Why: a failed relay shutdown can leave the remote process alive in the grace window; keep the lease/session so the user can retry.
@@ -161,6 +169,7 @@ export function registerSshConnectionHandlers(): void {
       }
       await teardownSshTargetTransport(args.targetId, (session) => session.disposeAndPersist())
     })
+    return outcome
   })
 
   ipcMain.handle('ssh:resetRelay', (_event, args: { targetId: string }) => {
diff --git a/src/main/ipc/ssh-terminate-sessions.test.ts b/src/main/ipc/ssh-terminate-sessions.test.ts
index 77a8638b098..ccdc19bbe34 100644
--- a/src/main/ipc/ssh-terminate-sessions.test.ts
+++ b/src/main/ipc/ssh-terminate-sessions.test.ts
@@ -95,7 +95,9 @@ describe('SSH IPC handlers', () => {
     mockPtyProvider.shutdown.mockResolvedValue(undefined)
 
     await handlers.get('ssh:connect')!(null, { targetId: 'ssh-1' })
-    await handlers.get('ssh:terminateSessions')!(null, { targetId: 'ssh-1' })
+    await expect(
+      handlers.get('ssh:terminateSessions')!(null, { targetId: 'ssh-1' })
+    ).resolves.toEqual({ terminated: 2, unverifiable: 0 })
 
     expect(mockPtyProvider.shutdown).toHaveBeenCalledWith('ssh:ssh-1@@pty-live', {
       immediate: true,
@@ -168,7 +170,9 @@ describe('SSH IPC handlers', () => {
     await expect(reconnect).resolves.toMatchObject({ targetId: 'ssh-1', status: 'connected' })
   })
 
-  it('ssh:terminateSessions cannot reach expired leases without a relay', async () => {
+  // Issue #12661: an offline sweep tears down local transport only. Reporting plain success would
+  // read as "the remote shells are gone" when nobody asked the host.
+  it('ssh:terminateSessions reports expired leases as unverifiable without a relay', async () => {
     mockStore.getSshRemotePtyLeases.mockReturnValue([
       { targetId: 'ssh-1', ptyId: 'pty-expired', state: 'expired' }
     ])
@@ -177,10 +181,26 @@ describe('SSH IPC handlers', () => {
 
     await expect(
       handlers.get('ssh:terminateSessions')!(null, { targetId: 'ssh-1' })
-    ).resolves.toBeUndefined()
+    ).resolves.toEqual({ terminated: 0, unverifiable: 1 })
 
     expect(mockPtyProvider.shutdown).not.toHaveBeenCalled()
+    // Still no forced reconnect: an expired lease can name a host that is gone for good (#2626).
     expect(mockConnectionManager.disconnect).toHaveBeenCalledWith('ssh-1')
+    expect(mockStore.markSshRemotePtyLease).not.toHaveBeenCalledWith(
+      'ssh-1',
+      'pty-expired',
+      'terminated'
+    )
+  })
+
+  it('ssh:terminateSessions reports nothing unverifiable when there is nothing to reach', async () => {
+    mockStore.getSshRemotePtyLeases.mockReturnValue([])
+    vi.mocked(getSshPtyProvider).mockReturnValue(undefined)
+    vi.mocked(getPtyIdsForConnection).mockReturnValue([])
+
+    await expect(
+      handlers.get('ssh:terminateSessions')!(null, { targetId: 'ssh-1' })
+    ).resolves.toEqual({ terminated: 0, unverifiable: 0 })
   })
 
   it('ssh:terminateSessions kills expired leases whose remote PTY may still be alive', async () => {
diff --git a/src/main/providers/ssh-git-worktree-provider.ts b/src/main/providers/ssh-git-worktree-provider.ts
index d5cf9b5a5e1..8f1430d8e75 100644
--- a/src/main/providers/ssh-git-worktree-provider.ts
+++ b/src/main/providers/ssh-git-worktree-provider.ts
@@ -2,6 +2,7 @@ import type { GitStatusResult } from '../../shared/git-status-types'
 import type { RemoveWorktreeResult } from '../../shared/worktree/create-types'
 import type { GitWorktreeInfo } from '../../shared/worktree/types'
 import { CapabilityProbeCache } from '../../shared/capability-probe-cache'
+import { assertAuthoritativeWorktreeCatalog } from '../../shared/worktree/worktree-catalog-availability'
 import { isJsonRpcMethodNotFoundError } from './ssh-git-relay-errors'
 import { SshGitReviewHeadProvider } from './ssh-git-review-head-provider'
 
@@ -32,11 +33,14 @@ export class SshGitWorktreeProvider extends SshGitReviewHeadProvider {
     repoPath: string,
     options?: { signal?: AbortSignal }
   ): Promise<GitWorktreeInfo[]> {
-    return (await this.mux.request(
+    const response = await this.mux.request(
       'git.listWorktrees',
       { repoPath },
       { signal: options?.signal }
-    )) as GitWorktreeInfo[]
+    )
+    // Why (#14004): relays before this fix answered a failed worktree scan with `[]`. Mixed versions are
+    // normal, so refuse the shape here too — a Git repo always lists its own checkout.
+    return assertAuthoritativeWorktreeCatalog<GitWorktreeInfo>(response, repoPath)
   }
 
   async addWorktree(
diff --git a/src/main/providers/ssh-worktree-catalog-authority.test.ts b/src/main/providers/ssh-worktree-catalog-authority.test.ts
new file mode 100644
index 00000000000..3f11c87dc0f
--- /dev/null
+++ b/src/main/providers/ssh-worktree-catalog-authority.test.ts
@@ -0,0 +1,141 @@
+/**
+ * Issue #14004: an SSH worktree catalog Orca could not read must never surface as an authoritative
+ * empty catalog. Covers the whole client-side chain — provider response guard, the repo-level
+ * listing, and the detected-worktree result whose `authoritative` flag gates renderer terminal
+ * teardown (`teardownMissingWorktreeTerminalsBestEffort`).
+ */
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { SshGitProvider } from './ssh-git-provider'
+import { createMockMux, type MockMultiplexer } from './ssh-git-provider-test-harness'
+import { isWorktreeCatalogUnavailableError } from '../../shared/worktree/worktree-catalog-availability'
+import { listRepoWorktrees } from '../repo-worktrees'
+import { listDetectedWorktreesForCapturedRepo } from '../ipc/worktrees/listing/detected-provider-listing'
+import type { Repo } from '../../shared/repo-types'
+import type { Store } from '../persistence/loading-store/store'
+
+const { getSshGitProviderMock } = vi.hoisted(() => ({ getSshGitProviderMock: vi.fn() }))
+
+vi.mock('./ssh-git-dispatch', () => ({
+  getSshGitProvider: getSshGitProviderMock,
+  requireSshGitProvider: getSshGitProviderMock,
+  getSshGitProviderGeneration: () => 1
+}))
+
+const CONNECTION_ID = 'conn-1'
+const REPO_PATH = '/home/user/repo'
+const WORKTREE_PATH = '/home/user/feature'
+
+const repo: Repo = {
+  id: 'repo-1',
+  path: REPO_PATH,
+  displayName: 'repo',
+  connectionId: CONNECTION_ID
+} as Repo
+
+const worktreeId = `${repo.id}::${WORKTREE_PATH}`
+
+function createStore(): Store {
+  const meta: Record<string, { hostId?: string; instanceId?: string }> = {
+    [worktreeId]: { instanceId: 'instance-1' }
+  }
+  return {
+    getRepos: () => [repo],
+    getRepo: () => repo,
+    getAllWorktreeMeta: () => meta,
+    getWorktreeMeta: (id: string) => meta[id],
+    setWorktreeMeta: vi.fn(),
+    getAllWorktreeLineage: () => ({}),
+    getProjectHostSetups: () => [],
+    getSettings: () => ({})
+  } as unknown as Store
+}
+
+describe('SSH worktree catalog authority (#14004)', () => {
+  let mux: MockMultiplexer
+  let provider: SshGitProvider
+
+  beforeEach(() => {
+    mux = createMockMux()
+    provider = new SshGitProvider(CONNECTION_ID, mux as never)
+    getSshGitProviderMock.mockReset()
+    getSshGitProviderMock.mockReturnValue(provider)
+  })
+
+  it('refuses an empty relay response instead of publishing an empty catalog', async () => {
+    // An older relay converted a failed `git worktree list` into `[]`; mixed versions are the normal state.
+    mux.request.mockResolvedValue([])
+
+    await expect(provider.listWorktrees(REPO_PATH)).rejects.toSatisfy(
+      isWorktreeCatalogUnavailableError
+    )
+  })
+
+  it('refuses a malformed relay response', async () => {
+    mux.request.mockResolvedValue(undefined)
+
+    await expect(provider.listWorktrees(REPO_PATH)).rejects.toSatisfy(
+      isWorktreeCatalogUnavailableError
+    )
+  })
+
+  it('reports an unreachable SSH host as unavailable, not as an empty repo listing', async () => {
+    getSshGitProviderMock.mockReturnValue(undefined)
+
+    await expect(listRepoWorktrees(repo)).rejects.toSatisfy(isWorktreeCatalogUnavailableError)
+  })
+
+  it('does not authorize missing-worktree teardown when the relay listing fails', async () => {
+    mux.request.mockRejectedValue(new Error('relay request failed'))
+
+    const result = await listDetectedWorktreesForCapturedRepo(
+      createStore(),
+      repo,
+      () => true,
+      provider
+    )
+
+    expect(result).toMatchObject({ authoritative: false, source: 'metadata-fallback' })
+    // The persisted workspace survives the failed scan, so the renderer has nothing to reconcile away.
+    expect(
+      (result as { worktrees: { id: string }[] }).worktrees.map((worktree) => worktree.id)
+    ).toContain(worktreeId)
+  })
+
+  it('does not authorize missing-worktree teardown when the relay answers with an empty list', async () => {
+    mux.request.mockResolvedValue([])
+
+    const result = await listDetectedWorktreesForCapturedRepo(
+      createStore(),
+      repo,
+      () => true,
+      provider
+    )
+
+    expect(result).toMatchObject({ authoritative: false, source: 'metadata-fallback' })
+    expect(
+      (result as { worktrees: { id: string }[] }).worktrees.map((worktree) => worktree.id)
+    ).toContain(worktreeId)
+  })
+
+  it('republishes an authoritative catalog once the relay answers again', async () => {
+    mux.request.mockResolvedValue([
+      { path: REPO_PATH, head: 'abc123', branch: 'main', isBare: false, isMainWorktree: true },
+      {
+        path: WORKTREE_PATH,
+        head: 'def456',
+        branch: 'feature',
+        isBare: false,
+        isMainWorktree: false
+      }
+    ])
+
+    const result = await listDetectedWorktreesForCapturedRepo(
+      createStore(),
+      repo,
+      () => true,
+      provider
+    )
+
+    expect(result).toMatchObject({ authoritative: true, source: 'git' })
+  })
+})
diff --git a/src/main/repo-worktrees.ts b/src/main/repo-worktrees.ts
index c5e756b9310..b7c6e16f91a 100644
--- a/src/main/repo-worktrees.ts
+++ b/src/main/repo-worktrees.ts
@@ -4,6 +4,7 @@ import { listWorktreeGraph, listWorktrees, listWorktreesStrict } from './git/wor
 import { isFolderRepo } from '../shared/repo-kind'
 import { getSshGitProvider } from './providers/ssh-git-dispatch'
 import { areWorktreePathsEqual } from './ipc/worktree-logic'
+import { WorktreeCatalogUnavailableError } from '../shared/worktree/worktree-catalog-availability'
 
 type LocalRepoWorktreeListOptions = {
   wslDistro?: string
@@ -42,10 +43,15 @@ export async function listRepoWorktrees(
   }
   if (repo.connectionId) {
     const provider = getSshGitProvider(repo.connectionId)
-    // Why: runtime worktree resolution can run before SSH providers have
-    // reattached during startup. Return empty instead of falling back to
-    // local git against a server path.
-    return provider ? await provider.listWorktrees(repo.path) : []
+    // Why: runtime worktree resolution can run before SSH providers have reattached during startup.
+    // Never fall back to local git against a server path, and never report the unreachable host as an
+    // empty catalog (#14004) — callers treat a resolved listing as authoritative.
+    if (!provider) {
+      throw new WorktreeCatalogUnavailableError(
+        `Worktree catalog unavailable for ${repo.path}: SSH connection "${repo.connectionId}" is not connected.`
+      )
+    }
+    return await provider.listWorktrees(repo.path)
   }
   return hasLocalRepoWorktreeListOptions(options)
     ? await listWorktrees(repo.path, options)
diff --git a/src/preload/api/ssh-api.ts b/src/preload/api/ssh-api.ts
index e2b9ce9e665..af198ad1080 100644
--- a/src/preload/api/ssh-api.ts
+++ b/src/preload/api/ssh-api.ts
@@ -9,7 +9,8 @@ import type {
   SshTarget,
   SshTargetAddResult,
   SshTargetCreateInput,
-  SshTargetUpdateInput
+  SshTargetUpdateInput,
+  SshTerminateSessionsResult
 } from '../../shared/ssh-types'
 import type { FilesystemPathFlavor } from '../../shared/filesystem-entry-types'
 
@@ -25,7 +26,7 @@ export type SshApi = {
   resolveConfigHost: (args: { alias: string }) => Promise<SshConfigHostResolution | null>
   connect: (args: { targetId: string }) => Promise<SshConnectionState | null>
   disconnect: (args: { targetId: string }) => Promise<void>
-  terminateSessions: (args: { targetId: string }) => Promise<void>
+  terminateSessions: (args: { targetId: string }) => Promise<SshTerminateSessionsResult>
   resetRelay: (args: { targetId: string }) => Promise<void>
   getState: (args: { targetId: string }) => Promise<SshConnectionState | null>
   needsPassphrasePrompt: (args: { targetId: string }) => Promise<boolean>
diff --git a/src/relay/git-handler-worktree-list-authority.test.ts b/src/relay/git-handler-worktree-list-authority.test.ts
new file mode 100644
index 00000000000..8b8a606dbba
--- /dev/null
+++ b/src/relay/git-handler-worktree-list-authority.test.ts
@@ -0,0 +1,96 @@
+/**
+ * Issue #14004: a relay-side worktree-list failure must stay a failure across the relay/provider
+ * boundary. Converting it to `[]` reports an unreadable catalog as an authoritative empty one, and
+ * downstream reconciliation uses that to authorize missing-worktree teardown.
+ */
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { RelayContext } from './context'
+import { GitHandler } from './git-handler'
+import {
+  createMockDispatcher,
+  type MockDispatcher,
+  type RelayDispatcher
+} from './git-handler-test-setup'
+
+type GitSpyTarget = {
+  git(args: string[], cwd: string): Promise<{ stdout: string; stderr: string }>
+}
+
+const WORKTREE_LIST_OUTPUT = `worktree /repo
+HEAD abc123
+branch refs/heads/main
+`
+
+/** Git <2.36 rejects `worktree list -z` with a usage error, which routes the handler to the fallback lane. */
+function unsupportedZError(): Error {
+  return Object.assign(new Error('git usage error'), {
+    code: 129,
+    stderr: 'usage: git worktree list [<options>]\n'
+  })
+}
+
+describe('relay worktree-list authority (#14004)', () => {
+  let dispatcher: MockDispatcher
+  let handler: GitHandler
+
+  beforeEach(() => {
+    dispatcher = createMockDispatcher()
+    handler = new GitHandler(dispatcher as unknown as RelayDispatcher, new RelayContext())
+  })
+
+  it('rejects instead of reporting an empty catalog when the fallback listing fails', async () => {
+    vi.spyOn(handler as unknown as GitSpyTarget, 'git').mockImplementation((args: string[]) =>
+      args.includes('-z')
+        ? Promise.reject(unsupportedZError())
+        : Promise.reject(
+            Object.assign(new Error('fatal: not a git repository'), { code: 128, stderr: '' })
+          )
+    )
+
+    await expect(
+      dispatcher.callRequest('git.listWorktrees', { repoPath: '/repo' })
+    ).rejects.toThrow('not a git repository')
+  })
+
+  it('rejects a timed-out fallback listing on a host whose -z support is already known absent', async () => {
+    const gitSpy = vi
+      .spyOn(handler as unknown as GitSpyTarget, 'git')
+      .mockImplementation((args: string[]) =>
+        args.includes('-z')
+          ? Promise.reject(unsupportedZError())
+          : Promise.resolve({ stdout: WORKTREE_LIST_OUTPUT, stderr: '' })
+      )
+    // Prime the capability cache so the probe is not repeated; later scans go straight to the fallback.
+    await dispatcher.callRequest('git.listWorktrees', { repoPath: '/repo' })
+
+    gitSpy.mockRejectedValue(Object.assign(new Error('ETIMEDOUT'), { code: 'ETIMEDOUT' }))
+
+    await expect(
+      dispatcher.callRequest('git.listWorktrees', { repoPath: '/repo' })
+    ).rejects.toThrow('ETIMEDOUT')
+    expect(gitSpy.mock.calls.at(-1)?.[0]).toEqual(['worktree', 'list', '--porcelain'])
+  })
+
+  it('republishes the catalog when a later fallback listing succeeds', async () => {
+    let failListing = true
+    vi.spyOn(handler as unknown as GitSpyTarget, 'git').mockImplementation((args: string[]) => {
+      if (args.includes('-z')) {
+        return Promise.reject(unsupportedZError())
+      }
+      return failListing
+        ? Promise.reject(new Error('transient relay failure'))
+        : Promise.resolve({ stdout: WORKTREE_LIST_OUTPUT, stderr: '' })
+    })
+
+    await expect(
+      dispatcher.callRequest('git.listWorktrees', { repoPath: '/repo' })
+    ).rejects.toThrow('transient relay failure')
+
+    failListing = false
+    const result = (await dispatcher.callRequest('git.listWorktrees', {
+      repoPath: '/repo'
+    })) as Record<string, unknown>[]
+    expect(result).toHaveLength(1)
+    expect(result[0]).toMatchObject({ path: '/repo', isMainWorktree: true })
+  })
+})
diff --git a/src/relay/git-handler-worktree-operations.ts b/src/relay/git-handler-worktree-operations.ts
index 6689c178344..72853a342c6 100644
--- a/src/relay/git-handler-worktree-operations.ts
+++ b/src/relay/git-handler-worktree-operations.ts
@@ -132,19 +132,14 @@ export class GitHandlerWorktreeOperations extends GitHandlerOperationContext {
       },
       async () => {
         // Why: Git <2.36 lacks worktree-list `-z`, so fall back to the newline-block parser (loses newline-in-path safety).
-        try {
-          const { stdout } = await this.git(['worktree', 'list', '--porcelain'], repoPath, {
-            signal: context?.signal
-          })
-          const normalized = await this.normalizeMainWorktreePath(
-            repoPath,
-            parseWorktreeList(stdout)
-          )
-          // Why: Git <2.31 emits no `prunable` annotation, so probe each linked worktree's existence instead of trusting stale registrations (issue #8389).
-          return annotatePrunableWorktreesByExistence(normalized)
-        } catch {
-          return []
-        }
+        // Why no catch (#14004): swallowing to `[]` would report an unreadable catalog as an authoritative
+        // empty one, and callers use that to authorize missing-worktree teardown. Let the failure propagate.
+        const { stdout } = await this.git(['worktree', 'list', '--porcelain'], repoPath, {
+          signal: context?.signal
+        })
+        const normalized = await this.normalizeMainWorktreePath(repoPath, parseWorktreeList(stdout))
+        // Why: Git <2.31 emits no `prunable` annotation, so probe each linked worktree's existence instead of trusting stale registrations (issue #8389).
+        return annotatePrunableWorktreesByExistence(normalized)
       },
       isUnsupportedWorktreeListZError
     )
diff --git a/src/renderer/src/components/settings/SshPane.tsx b/src/renderer/src/components/settings/SshPane.tsx
index b4b82dd3e41..3424abb4644 100644
--- a/src/renderer/src/components/settings/SshPane.tsx
+++ b/src/renderer/src/components/settings/SshPane.tsx
@@ -6,7 +6,10 @@ import { useAppStore } from '@/store'
 import { useMountedRef } from '@/hooks/useMountedRef'
 import { Button } from '../ui/button'
 import { removeSshTargetWithBestEffortCleanup } from './ssh-target-remove'
-import { terminateSshSessionsWithReconnect } from './ssh-session-termination'
+import {
+  describeSshTerminateOutcome,
+  terminateSshSessionsWithReconnect
+} from './ssh-session-termination'
 import { SshTargetCard } from './SshTargetCard'
 import { SshTargetDestructiveActions } from './SshTargetDestructiveActions'
 import { SshTargetForm, EMPTY_FORM, type EditingTarget } from './SshTargetForm'
@@ -218,10 +221,8 @@ export function SshPane({ addTargetIntentSignal }: SshPaneProps): React.JSX.Elem
 
   const handleTerminateSessions = async (targetId: string): Promise<void> => {
     try {
-      await terminateSshSessionsWithReconnect(targetId)
-      toast.success(
-        translate('auto.components.settings.SshPane.90e308c98b', 'Remote terminals ended')
-      )
+      const report = describeSshTerminateOutcome(await terminateSshSessionsWithReconnect(targetId))
+      toast[report.level](report.message)
     } catch (err) {
       toast.error(
         err instanceof Error
diff --git a/src/renderer/src/components/settings/ssh-session-termination.ts b/src/renderer/src/components/settings/ssh-session-termination.ts
index 735fa7b27ca..71cb5c80cce 100644
--- a/src/renderer/src/components/settings/ssh-session-termination.ts
+++ b/src/renderer/src/components/settings/ssh-session-termination.ts
@@ -1,8 +1,12 @@
 import { SSH_TERMINATE_RECONNECT_REQUIRED } from '../../../../shared/constants'
+import type { SshTerminateSessionsResult } from '../../../../shared/ssh-types'
+import { translate } from '../../i18n/i18n'
 
-export async function terminateSshSessionsWithReconnect(targetId: string): Promise<void> {
+export async function terminateSshSessionsWithReconnect(
+  targetId: string
+): Promise<SshTerminateSessionsResult> {
   try {
-    await window.api.ssh.terminateSessions({ targetId })
+    return await window.api.ssh.terminateSessions({ targetId })
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err)
     if (!message.includes(SSH_TERMINATE_RECONNECT_REQUIRED)) {
@@ -11,6 +15,31 @@ export async function terminateSshSessionsWithReconnect(targetId: string): Promi
     // Why: disconnect is now non-destructive, so preserved remote PTYs may
     // require a fresh relay attachment before they can be explicitly killed.
     await window.api.ssh.connect({ targetId })
-    await window.api.ssh.terminateSessions({ targetId })
+    return await window.api.ssh.terminateSessions({ targetId })
+  }
+}
+
+/**
+ * An offline sweep only tears down local transport, so its remote shells are `unverifiable`, never
+ * `exited` (docs/reference/ssh-execution-boundary.md). Reporting plain success there would announce
+ * a kill nobody delivered (issue #12661).
+ */
+export function describeSshTerminateOutcome(outcome: SshTerminateSessionsResult): {
+  level: 'success' | 'warning'
+  message: string
+} {
+  if (outcome.unverifiable > 0) {
+    return {
+      level: 'warning',
+      message: translate(
+        'auto.components.settings.SshPane.terminateUnverifiable',
+        '{{terminals}} remote terminal(s) could not be reached. Reconnect to end them.',
+        { terminals: outcome.unverifiable }
+      )
+    }
+  }
+  return {
+    level: 'success',
+    message: translate('auto.components.settings.SshPane.90e308c98b', 'Remote terminals ended')
   }
 }
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index 8ab61e5ce21..163ba22b978 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -8265,7 +8265,8 @@
           "4db9afce1c": "Port must be between 1 and 65535",
           "0e5aa04161": "Host or SSH config alias is required",
           "f1fc50dad2": "Failed to load SSH targets",
-          "0cda732f43": "Connection test failed"
+          "0cda732f43": "Connection test failed",
+          "terminateUnverifiable": "{{terminals}} remote terminal(s) could not be reached. Reconnect to end them."
         },
         "SshPassphraseDialog": {
           "d5a234456f": "Cancel",
diff --git a/src/renderer/src/web/preload-api/web-terminal-api.ts b/src/renderer/src/web/preload-api/web-terminal-api.ts
index df0c84f262b..a3e4964cb8f 100644
--- a/src/renderer/src/web/preload-api/web-terminal-api.ts
+++ b/src/renderer/src/web/preload-api/web-terminal-api.ts
@@ -144,7 +144,7 @@ export function createSshApi(): NonNullable<Partial<PreloadApi>['ssh']> {
       return state
     },
     disconnect: () => Promise.resolve(),
-    terminateSessions: () => Promise.resolve(),
+    terminateSessions: () => Promise.resolve({ terminated: 0, unverifiable: 0 }),
     resetRelay: () => Promise.resolve(),
     getState: async (args) => {
       if (!requireActiveEnvironmentOrNull()) {
diff --git a/src/shared/ssh-types.ts b/src/shared/ssh-types.ts
index cbcce254922..90121007468 100644
--- a/src/shared/ssh-types.ts
+++ b/src/shared/ssh-types.ts
@@ -266,3 +266,13 @@ export type EnrichedDetectedPort = DetectedPort & {
   advertisedUrl?: string
   advertisedProtocol?: 'http' | 'https'
 }
+
+/** Outcome of `ssh:terminateSessions`. Uses the fixed verdict vocabulary from
+ *  docs/reference/ssh-execution-boundary.md: a host we could not reach yields `unverifiable`,
+ *  never `exited`, so an offline sweep can never be read as a successful remote kill (issue #12661). */
+export type SshTerminateSessionsResult = {
+  /** Remote PTYs the host acknowledged stopping. */
+  terminated: number
+  /** Leases whose remote shells were never reached because the relay was offline. */
+  unverifiable: number
+}
diff --git a/src/shared/worktree/worktree-catalog-availability.ts b/src/shared/worktree/worktree-catalog-availability.ts
new file mode 100644
index 00000000000..ac4744f6734
--- /dev/null
+++ b/src/shared/worktree/worktree-catalog-availability.ts
@@ -0,0 +1,41 @@
+/**
+ * "I could not ask" is not "there is nothing there".
+ *
+ * A worktree catalog that could not be read must stay distinguishable from one that
+ * genuinely lists no worktrees, or downstream reconciliation converts a transport or
+ * Git failure into authoritative emptiness and tears down live state
+ * (docs/reference/ssh-execution-boundary.md, issue #14004).
+ */
+export class WorktreeCatalogUnavailableError extends Error {
+  /** Structural marker: survives JSON-RPC re-wrapping better than `instanceof` across module copies. */
+  readonly worktreeCatalogUnavailable = true
+
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message, options)
+    this.name = 'WorktreeCatalogUnavailableError'
+  }
+}
+
+export function isWorktreeCatalogUnavailableError(error: unknown): boolean {
+  return (
+    error instanceof WorktreeCatalogUnavailableError ||
+    (typeof error === 'object' &&
+      error !== null &&
+      (error as { worktreeCatalogUnavailable?: unknown }).worktreeCatalogUnavailable === true)
+  )
+}
+
+/**
+ * Git always lists at least the repository's own checkout, so a zero-row listing for a Git repo
+ * can only mean the scan never produced an answer. Older relays converted worktree-list failures
+ * into `[]`, so a mixed-version client must reject that shape rather than publish it.
+ */
+export function assertAuthoritativeWorktreeCatalog<T>(worktrees: unknown, repoPath: string): T[] {
+  if (!Array.isArray(worktrees) || worktrees.length === 0) {
+    throw new WorktreeCatalogUnavailableError(
+      `Worktree catalog unavailable for ${repoPath}: the execution host returned no worktree listing. ` +
+        'Treating this as an empty catalog would authorize removing workspaces that still exist.'
+    )
+  }
+  return worktrees as T[]
+}

From b75de5fede3392ce2e6fb3ac36de569e654072e3 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:35:09 -0700
Subject: [PATCH 05/92] fix(preload): type the ssh terminateSessions bridge
 result (#18079)

---
 src/preload/api/ssh-bridge.ts | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/preload/api/ssh-bridge.ts b/src/preload/api/ssh-bridge.ts
index b0f7b89ec3d..d552fb1781d 100644
--- a/src/preload/api/ssh-bridge.ts
+++ b/src/preload/api/ssh-bridge.ts
@@ -10,7 +10,8 @@ import type {
   SshTarget,
   SshTargetUpdateInput,
   PortForwardEntry,
-  EnrichedDetectedPort
+  EnrichedDetectedPort,
+  SshTerminateSessionsResult
 } from '../../shared/ssh-types'
 import {
   admitSshConnectionStateForAuthorityReconciliation,
@@ -51,7 +52,7 @@ export const sshApi = {
   disconnect: (args: { targetId: string }): Promise<void> =>
     ipcRenderer.invoke('ssh:disconnect', args),
 
-  terminateSessions: (args: { targetId: string }): Promise<void> =>
+  terminateSessions: (args: { targetId: string }): Promise<SshTerminateSessionsResult> =>
     ipcRenderer.invoke('ssh:terminateSessions', args),
 
   resetRelay: (args: { targetId: string }): Promise<void> =>

From d838ca1419910334c7b7d8e60feb2f7b8c265928 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:35:44 -0700
Subject: [PATCH 06/92] fix(ssh): stop orphaning live relays when an endpoint
 is taken over (#17821)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A failed `--connect` was read as "the relay crashed": the client `rm -f`'d
the socket and launched a replacement at the same path. Unlinking a unix
socket does not close the listener the incumbent already holds, so an
alive-but-refusing relay — the RelayVersionMismatchError case — kept running
forever with its PTYs and agents (#8585).

Establish the incumbent with host evidence instead, in the fixed
live/unverifiable/exited vocabulary, and never unlink from the client: the
daemon's own RelaySocketOwnership already performs an identity-checked
takeover that is atomic with its bind. A live incumbent now raises a typed
terminal RelayEndpointHeldError naming its pid rather than being abandoned.

Also sweep sibling version directories for this target's socket after launch,
so the relay an app update supersedes (#13614, #13852) is visible and dealt
with deliberately. Only a relay proven to hold nothing — argv matched, single
socket holder, zero children re-checked on the host immediately before the
signal — is SIGTERMed, and `reaped` is claimed only from a post-signal
`kill -0` that failed. Anything unreachable stays `unverifiable` and untouched.
---
 src/main/ssh/ssh-relay-deploy.test.ts         |   4 +-
 src/main/ssh/ssh-relay-deploy.ts              |  29 +-
 ...dpoint-incumbent-shell.integration.test.ts | 170 +++++++++++
 .../ssh/ssh-relay-endpoint-incumbent.test.ts  | 240 +++++++++++++++
 src/main/ssh/ssh-relay-endpoint-incumbent.ts  | 285 ++++++++++++++++++
 .../ssh/ssh-relay-endpoint-takeover.test.ts   | 159 ++++++++++
 src/main/ssh/ssh-relay-endpoint-takeover.ts   | 133 ++++++++
 src/main/ssh/ssh-relay-session.ts             |  17 +-
 .../ssh-relay-superseded-endpoints.test.ts    | 164 ++++++++++
 .../ssh/ssh-relay-superseded-endpoints.ts     | 178 +++++++++++
 10 files changed, 1366 insertions(+), 13 deletions(-)
 create mode 100644 src/main/ssh/ssh-relay-endpoint-incumbent-shell.integration.test.ts
 create mode 100644 src/main/ssh/ssh-relay-endpoint-incumbent.test.ts
 create mode 100644 src/main/ssh/ssh-relay-endpoint-incumbent.ts
 create mode 100644 src/main/ssh/ssh-relay-endpoint-takeover.test.ts
 create mode 100644 src/main/ssh/ssh-relay-endpoint-takeover.ts
 create mode 100644 src/main/ssh/ssh-relay-superseded-endpoints.test.ts
 create mode 100644 src/main/ssh/ssh-relay-superseded-endpoints.ts

diff --git a/src/main/ssh/ssh-relay-deploy.test.ts b/src/main/ssh/ssh-relay-deploy.test.ts
index 3134461fda1..fdd719cb91f 100644
--- a/src/main/ssh/ssh-relay-deploy.test.ts
+++ b/src/main/ssh/ssh-relay-deploy.test.ts
@@ -186,9 +186,9 @@ describe('deployAndLaunchRelay', () => {
     expect(progress).toContain('Starting relay...')
   })
 
-  it('does not launch fresh after unconfirmed stale-socket cleanup', async () => {
+  it('does not launch fresh after an unconfirmed endpoint-incumbent probe', async () => {
     const conn = makeMockConnection()
-    const unconfirmedCleanup = Object.assign(new Error('socket cleanup still running'), {
+    const unconfirmedCleanup = Object.assign(new Error('endpoint probe still running'), {
       sshChannelCloseConfirmed: false
     })
     vi.mocked(waitForSentinel).mockRejectedValueOnce(new Error('stale relay reconnect failed'))
diff --git a/src/main/ssh/ssh-relay-deploy.ts b/src/main/ssh/ssh-relay-deploy.ts
index 911d185b0fd..124fb68bbcc 100644
--- a/src/main/ssh/ssh-relay-deploy.ts
+++ b/src/main/ssh/ssh-relay-deploy.ts
@@ -77,6 +77,8 @@ import {
 import { detectRemoteHostPlatform } from './ssh-remote-platform-detection'
 import { powerShellCommand, powerShellLiteral, powerShellNativeArg } from './ssh-remote-powershell'
 import { relaySocketNameForInstanceId } from './ssh-relay-instance-id'
+import { resolveRelayEndpointBeforeRelaunch } from './ssh-relay-endpoint-takeover'
+import { sweepSupersededRelayEndpoints } from './ssh-relay-superseded-endpoints'
 import { isSshSessionLimitError } from './ssh-session-limit-error'
 import {
   isWindowsRelayPipePath,
@@ -580,6 +582,17 @@ async function deployAndLaunchRelayAttempt(
     hostPlatform,
     recoverOneStaleRelayUploadStageCommand(hostPlatform, uploadStagePoolDir)
   )
+    .catch(() => {})
+    // Why before GC: a superseded relay pins its version dir via the live-socket probe, so the
+    // sweep has to settle first or GC keeps every orphan's tree forever.
+    .then(() =>
+      sweepSupersededRelayEndpoints(conn, hostPlatform, {
+        remoteHome,
+        currentRelayDir: remoteRelayDir,
+        sockName: relaySocketNameForInstanceId(relayInstanceId),
+        nodePath: launched.nodePath
+      })
+    )
     .catch(() => {})
     .then(() =>
       gcOldRelayVersions(conn, remoteHome, remoteRelayDir, hostPlatform, {
@@ -1457,17 +1470,15 @@ async function launchRelay(
       } catch (err) {
         signal?.throwIfAborted()
         console.warn(
-          '[ssh-relay] Socket reconnect failed, launching fresh relay:',
+          '[ssh-relay] Socket reconnect failed, establishing what owns the endpoint:',
           err instanceof Error ? err.message : String(err)
         )
-        // Why: stale socket from a crashed relay — remove it so the fresh launch can bind at the same path.
-        await execCommand(conn, `rm -f ${shellEscape(sockFile)}`, { signal }).catch(
-          (cleanupErr) => {
-            if (isUnconfirmedSshCommandTermination(cleanupErr)) {
-              throw cleanupErr
-            }
-          }
-        )
+        // Why not `rm -f`: unlinking does not close the listener the incumbent already holds,
+        // so a refused --connect (version mismatch, rotated credential) used to leave a live
+        // relay running forever with its PTYs while a replacement bound the same path (#8585).
+        await resolveRelayEndpointBeforeRelaunch(conn, hostPlatform, nodePath, sockFile, err, {
+          signal
+        })
         signal?.throwIfAborted()
       }
     }
diff --git a/src/main/ssh/ssh-relay-endpoint-incumbent-shell.integration.test.ts b/src/main/ssh/ssh-relay-endpoint-incumbent-shell.integration.test.ts
new file mode 100644
index 00000000000..7ece0b6532e
--- /dev/null
+++ b/src/main/ssh/ssh-relay-endpoint-incumbent-shell.integration.test.ts
@@ -0,0 +1,170 @@
+/**
+ * The probe and reap scripts run on someone else's machine and decide whether a process is
+ * signalled, so the shell itself is the part worth testing for real. These cases run the
+ * generated scripts through /bin/sh against real unix sockets and real processes.
+ */
+import { execFile, spawn, type ChildProcess } from 'node:child_process'
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterAll, afterEach, beforeAll, describe, expect, it } from 'vitest'
+import {
+  isReapableRelayHusk,
+  parseRelayEndpointIncumbentProbe,
+  relayEndpointIncumbentProbeCommand,
+  type RelayEndpointIncumbent
+} from './ssh-relay-endpoint-incumbent'
+import { reapEmptyRelayHuskCommand } from './ssh-relay-endpoint-takeover'
+
+const posixOnly = process.platform === 'win32' ? describe.skip : describe
+
+const FAKE_RELAY_SOURCE = `
+const net = require('net')
+const sock = process.argv[process.argv.indexOf('--sock-path') + 1]
+if (process.argv.includes('--with-child')) {
+  require('child_process').spawn(process.execPath, ['-e', 'setInterval(() => {}, 1000)'], {
+    stdio: 'ignore'
+  })
+}
+net.createServer(() => {}).listen(sock, () => process.stdout.write('READY\\n'))
+process.on('SIGTERM', () => process.exit(0))
+`
+
+function sh(script: string): Promise<string> {
+  return new Promise((resolve, reject) => {
+    execFile('/bin/sh', ['-c', script], { timeout: 20_000 }, (error, stdout) => {
+      if (error) {
+        reject(error)
+        return
+      }
+      resolve(stdout)
+    })
+  })
+}
+
+let workDir: string
+let hasLsof = false
+const running: ChildProcess[] = []
+
+function startFakeRelay(sockPath: string, withChild = false): Promise<ChildProcess> {
+  const args = [join(workDir, 'relay.js'), '--sock-path', sockPath]
+  if (withChild) {
+    args.push('--with-child')
+  }
+  const child = spawn(process.execPath, args, { stdio: ['ignore', 'pipe', 'ignore'] })
+  running.push(child)
+  return new Promise((resolve, reject) => {
+    child.stdout.on('data', (chunk: Buffer) => {
+      if (chunk.toString().includes('READY')) {
+        resolve(child)
+      }
+    })
+    child.on('exit', () => reject(new Error('fake relay exited before listening')))
+  })
+}
+
+async function probe(sockPath: string): Promise<RelayEndpointIncumbent> {
+  const output = await sh(relayEndpointIncumbentProbeCommand(process.execPath, sockPath))
+  return parseRelayEndpointIncumbentProbe(sockPath, output)
+}
+
+beforeAll(async () => {
+  workDir = mkdtempSync(join(tmpdir(), 'orca-relay-incumbent-'))
+  writeFileSync(join(workDir, 'relay.js'), FAKE_RELAY_SOURCE)
+  hasLsof = await sh('command -v lsof >/dev/null 2>&1 && echo yes || echo no').then(
+    (out) => out.trim() === 'yes'
+  )
+})
+
+afterEach(() => {
+  while (running.length > 0) {
+    running.pop()?.kill('SIGKILL')
+  }
+})
+
+afterAll(() => {
+  rmSync(workDir, { recursive: true, force: true })
+})
+
+it('runs the holder-enumeration assertions on this machine', () => {
+  // Why asserted rather than assumed: the cases below degrade to verdict-only checks without
+  // lsof, and a silently degraded suite would stop covering the reap gate entirely.
+  expect(hasLsof).toBe(true)
+})
+
+posixOnly('relay endpoint probe against a real socket', () => {
+  it('reports live, and identifies the holding process, for a listening relay', async () => {
+    const sockPath = join(workDir, 'live.sock')
+    const relay = await startFakeRelay(sockPath)
+    const incumbent = await probe(sockPath)
+
+    expect(incumbent.verdict).toBe('live')
+    expect(incumbent.evidence).toBe('accepted-connection')
+    expect(incumbent.socketPresent).toBe(true)
+    if (!hasLsof) {
+      return
+    }
+    expect(incumbent.holders.map((holder) => holder.pid)).toEqual([relay.pid])
+    expect(incumbent.holders[0]).toMatchObject({ matchesRelayArgv: true, childCount: 0 })
+    expect(isReapableRelayHusk(incumbent)).toBe(true)
+  })
+
+  it('refuses to call a relay with a live child an empty husk', async () => {
+    const sockPath = join(workDir, 'busy.sock')
+    await startFakeRelay(sockPath, true)
+    const incumbent = await probe(sockPath)
+
+    expect(incumbent.verdict).toBe('live')
+    if (!hasLsof) {
+      return
+    }
+    expect(incumbent.holders[0].childCount).toBeGreaterThan(0)
+    expect(isReapableRelayHusk(incumbent)).toBe(false)
+  })
+
+  it('reports exited for a socket inode a SIGKILLed relay left behind', async () => {
+    const sockPath = join(workDir, 'stale.sock')
+    const relay = await startFakeRelay(sockPath)
+    relay.kill('SIGKILL')
+    await new Promise((resolve) => relay.on('exit', resolve))
+
+    const incumbent = await probe(sockPath)
+    expect(incumbent.socketPresent).toBe(true)
+    expect(incumbent.verdict).toBe(hasLsof ? 'exited' : 'unverifiable')
+  })
+
+  it('reports no listener for a path that was never bound', async () => {
+    const incumbent = await probe(join(workDir, 'never-existed.sock'))
+    expect(incumbent.socketPresent).toBe(false)
+    expect(incumbent.verdict).toBe(hasLsof ? 'exited' : 'unverifiable')
+  })
+})
+
+posixOnly('empty relay husk reap against a real process', () => {
+  it('terminates a proven-empty relay and confirms the pid is gone', async () => {
+    const sockPath = join(workDir, 'husk.sock')
+    const relay = await startFakeRelay(sockPath)
+    const output = await sh(reapEmptyRelayHuskCommand(relay.pid!, sockPath))
+    expect(output.trim()).toBe('GONE')
+  })
+
+  it('refuses to signal a relay that acquired a child after it was probed', async () => {
+    const sockPath = join(workDir, 'raced.sock')
+    const relay = await startFakeRelay(sockPath, true)
+    const output = await sh(reapEmptyRelayHuskCommand(relay.pid!, sockPath))
+    expect(output.trim()).toBe('BUSY')
+    expect(relay.killed).toBe(false)
+  })
+
+  it('refuses to signal a pid whose argv is not this relay at this socket', async () => {
+    const sockPath = join(workDir, 'mismatch.sock')
+    await startFakeRelay(sockPath)
+    const bystander = spawn(process.execPath, ['-e', 'setInterval(() => {}, 1000)'], {
+      stdio: 'ignore'
+    })
+    running.push(bystander)
+    const output = await sh(reapEmptyRelayHuskCommand(bystander.pid!, sockPath))
+    expect(output.trim()).toBe('MISMATCH')
+    expect(bystander.killed).toBe(false)
+  })
+})
diff --git a/src/main/ssh/ssh-relay-endpoint-incumbent.test.ts b/src/main/ssh/ssh-relay-endpoint-incumbent.test.ts
new file mode 100644
index 00000000000..a65cb33fc57
--- /dev/null
+++ b/src/main/ssh/ssh-relay-endpoint-incumbent.test.ts
@@ -0,0 +1,240 @@
+import { describe, expect, it, vi } from 'vitest'
+
+const execCommand = vi.fn()
+vi.mock('./ssh-relay-deploy-helpers', () => ({
+  execCommand: (...args: unknown[]) => execCommand(...args),
+  isUnconfirmedSshCommandTermination: (error: unknown) =>
+    (error as { sshChannelCloseConfirmed?: boolean } | null)?.sshChannelCloseConfirmed === false
+}))
+
+import {
+  describeRelayEndpointIncumbent,
+  isReapableRelayHusk,
+  mayLaunchOverRelayEndpoint,
+  parseRelayEndpointIncumbentProbe,
+  probeRelayEndpointIncumbent,
+  relayEndpointIncumbentProbeCommand,
+  withHandshakeRefusalEvidence,
+  type RelayEndpointIncumbent
+} from './ssh-relay-endpoint-incumbent'
+import type { SshConnection } from './ssh-connection'
+import { getRemoteHostPlatform } from './ssh-remote-platform'
+
+const SOCK = '/home/u/.orca-remote/relay-0.1.0+aaaa/relay-deadbeef.sock'
+const POSIX_HOST = getRemoteHostPlatform('linux-x64')
+const WINDOWS_HOST = getRemoteHostPlatform('win32-x64')
+
+function probeOutput(lines: string[]): string {
+  return ['ORCA-INCUMBENT-BEGIN', ...lines, 'ORCA-INCUMBENT-END'].join('\n')
+}
+
+describe('parseRelayEndpointIncumbentProbe', () => {
+  it('reports live when the socket accepted a connection', () => {
+    const incumbent = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=4242 yes 13'])
+    )
+    expect(incumbent.verdict).toBe('live')
+    expect(incumbent.evidence).toBe('accepted-connection')
+    expect(incumbent.holders).toEqual([{ pid: 4242, matchesRelayArgv: true, childCount: 13 }])
+  })
+
+  it('reports live when a process still holds an inode that refuses connections', () => {
+    const incumbent = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=refused', 'HOLDERS_SOURCE=lsof', 'HOLDER=91 yes 2'])
+    )
+    expect(incumbent.verdict).toBe('live')
+    expect(incumbent.evidence).toBe('holder-process')
+  })
+
+  it('reports exited only when the connect was refused AND nothing holds the socket', () => {
+    const incumbent = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=refused', 'HOLDERS_SOURCE=lsof'])
+    )
+    expect(incumbent.verdict).toBe('exited')
+    expect(incumbent.evidence).toBe('no-holder')
+    expect(incumbent.socketPresent).toBe(true)
+  })
+
+  it('reports unverifiable when the host cannot enumerate socket holders', () => {
+    const incumbent = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=refused', 'HOLDERS_SOURCE=unavailable'])
+    )
+    expect(incumbent.verdict).toBe('unverifiable')
+    expect(incumbent.holdersEnumerable).toBe(false)
+  })
+
+  it('reports unverifiable when the connect probe timed out', () => {
+    const incumbent = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=unknown', 'HOLDERS_SOURCE=lsof'])
+    )
+    expect(incumbent.verdict).toBe('unverifiable')
+  })
+
+  it('reports unverifiable for truncated or garbled probe output', () => {
+    expect(parseRelayEndpointIncumbentProbe(SOCK, 'PRESENT=yes\nLISTEN=refused').verdict).toBe(
+      'unverifiable'
+    )
+    expect(parseRelayEndpointIncumbentProbe(SOCK, '').verdict).toBe('unverifiable')
+  })
+
+  it('drops holder lines that do not carry a usable pid', () => {
+    const incumbent = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=refused', 'HOLDERS_SOURCE=lsof', 'HOLDER=- no unknown'])
+    )
+    expect(incumbent.holders).toEqual([])
+    expect(incumbent.verdict).toBe('exited')
+  })
+
+  it('keeps an unreadable child count as null rather than zero', () => {
+    const [holder] = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=7 yes unknown'])
+    ).holders
+    expect(holder.childCount).toBeNull()
+  })
+})
+
+describe('probeRelayEndpointIncumbent', () => {
+  it('never asserts death when the probe itself could not run', async () => {
+    execCommand.mockRejectedValueOnce(new Error('channel closed'))
+    const incumbent = await probeRelayEndpointIncumbent(
+      {} as SshConnection,
+      POSIX_HOST,
+      '/usr/bin/node',
+      SOCK
+    )
+    expect(incumbent.verdict).toBe('unverifiable')
+    expect(incumbent.holders).toEqual([])
+  })
+
+  it('does not shell out on Windows hosts, where the endpoint is a named pipe', async () => {
+    execCommand.mockClear()
+    const incumbent = await probeRelayEndpointIncumbent(
+      {} as SshConnection,
+      WINDOWS_HOST,
+      'node.exe',
+      SOCK
+    )
+    expect(execCommand).not.toHaveBeenCalled()
+    expect(incumbent.verdict).toBe('unverifiable')
+  })
+})
+
+describe('relayEndpointIncumbentProbeCommand', () => {
+  it('ANDs the lsof selectors so it cannot match unrelated unix-socket holders', () => {
+    expect(relayEndpointIncumbentProbeCommand('/usr/bin/node', SOCK)).toContain(
+      'lsof -t -a -U "$sock"'
+    )
+  })
+
+  it('never mutates the host: no unlink, no signal', () => {
+    const command = relayEndpointIncumbentProbeCommand('/usr/bin/node', SOCK)
+    expect(command).not.toMatch(/\brm\b/)
+    expect(command).not.toMatch(/\bkill\b/)
+  })
+})
+
+describe('withHandshakeRefusalEvidence', () => {
+  it('upgrades an unenumerable endpoint to live when the daemon answered the handshake', () => {
+    const probed = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=unknown', 'HOLDERS_SOURCE=unavailable'])
+    )
+    const incumbent = withHandshakeRefusalEvidence(probed)
+    expect(incumbent.verdict).toBe('live')
+    expect(incumbent.evidence).toBe('handshake-refusal')
+    expect(mayLaunchOverRelayEndpoint(incumbent)).toBe(false)
+  })
+
+  it('leaves stronger evidence in place', () => {
+    const probed = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof'])
+    )
+    expect(withHandshakeRefusalEvidence(probed).evidence).toBe('accepted-connection')
+  })
+})
+
+describe('mayLaunchOverRelayEndpoint', () => {
+  const verdicts: RelayEndpointIncumbent['verdict'][] = ['live', 'unverifiable', 'exited']
+  it.each(verdicts)('permits a relaunch for %s only when it is not live', (verdict) => {
+    const incumbent = { ...parseRelayEndpointIncumbentProbe(SOCK, ''), verdict }
+    expect(mayLaunchOverRelayEndpoint(incumbent)).toBe(verdict !== 'live')
+  })
+})
+
+describe('isReapableRelayHusk', () => {
+  const husk = parseRelayEndpointIncumbentProbe(
+    SOCK,
+    probeOutput(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=500 yes 0'])
+  )
+
+  it('accepts a single proven relay holder with zero children', () => {
+    expect(isReapableRelayHusk(husk)).toBe(true)
+  })
+
+  it('refuses a relay that still holds children', () => {
+    expect(
+      isReapableRelayHusk({
+        ...husk,
+        holders: [{ pid: 500, matchesRelayArgv: true, childCount: 1 }]
+      })
+    ).toBe(false)
+  })
+
+  it('refuses a holder whose child count could not be read', () => {
+    expect(
+      isReapableRelayHusk({
+        ...husk,
+        holders: [{ pid: 500, matchesRelayArgv: true, childCount: null }]
+      })
+    ).toBe(false)
+  })
+
+  it('refuses a holder whose argv is not this relay at this socket', () => {
+    expect(
+      isReapableRelayHusk({
+        ...husk,
+        holders: [{ pid: 500, matchesRelayArgv: false, childCount: 0 }]
+      })
+    ).toBe(false)
+  })
+
+  it('refuses when more than one process holds the socket', () => {
+    expect(
+      isReapableRelayHusk({
+        ...husk,
+        holders: [
+          { pid: 500, matchesRelayArgv: true, childCount: 0 },
+          { pid: 501, matchesRelayArgv: true, childCount: 0 }
+        ]
+      })
+    ).toBe(false)
+  })
+
+  it('refuses an unverifiable endpoint however empty it looks', () => {
+    expect(isReapableRelayHusk({ ...husk, verdict: 'unverifiable' })).toBe(false)
+    expect(isReapableRelayHusk({ ...husk, holdersEnumerable: false })).toBe(false)
+  })
+})
+
+describe('describeRelayEndpointIncumbent', () => {
+  it('distinguishes "no holders" from "could not enumerate holders"', () => {
+    const none = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=refused', 'HOLDERS_SOURCE=lsof'])
+    )
+    const unknown = parseRelayEndpointIncumbentProbe(
+      SOCK,
+      probeOutput(['PRESENT=yes', 'LISTEN=refused', 'HOLDERS_SOURCE=unavailable'])
+    )
+    expect(describeRelayEndpointIncumbent(none)).toContain('holders=none')
+    expect(describeRelayEndpointIncumbent(unknown)).toContain('holders=unenumerable')
+  })
+})
diff --git a/src/main/ssh/ssh-relay-endpoint-incumbent.ts b/src/main/ssh/ssh-relay-endpoint-incumbent.ts
new file mode 100644
index 00000000000..2688267f4c7
--- /dev/null
+++ b/src/main/ssh/ssh-relay-endpoint-incumbent.ts
@@ -0,0 +1,285 @@
+/**
+ * Who currently owns a relay socket path, answered with host evidence.
+ *
+ * The client used to answer this by assumption: a failed `--connect` was read as "the relay
+ * crashed", the socket was `rm -f`'d, and a fresh relay bound the same path. Unlinking a unix
+ * socket does not close the listener the incumbent already holds, so an alive-but-refusing
+ * relay (the `RelayVersionMismatchError` case, and the credential-rotation case) was left
+ * running forever with its PTYs (#8585).
+ *
+ * The verdict vocabulary is fixed by docs/reference/ssh-execution-boundary.md — `live` /
+ * `unverifiable` / `exited`, with no synonyms and no collapsing. Two consequences are load
+ * bearing here:
+ *
+ * - `exited` is a claim about **this endpoint**, not about every relay on the host. It means
+ *   nothing holds this socket path, established positively (a connect that was refused *and*
+ *   an enumeration that found no holder). A relay whose socket was already unlinked is
+ *   invisible to this probe by construction — that is what the superseded sweep is for.
+ * - a probe that could not run, a host without `lsof`, or a connect that failed for any other
+ *   reason is `unverifiable`. It never authorizes unlinking, rebinding over, or signalling.
+ */
+import type { SshConnection } from './ssh-connection'
+import { shellEscape } from './ssh-connection-utils'
+import { execCommand, isUnconfirmedSshCommandTermination } from './ssh-relay-deploy-helpers'
+import { isWindowsRemoteHost, type RemoteHostPlatform } from './ssh-remote-platform'
+
+export type RelayEndpointVerdict = 'live' | 'unverifiable' | 'exited'
+
+export type RelayEndpointEvidence =
+  | 'accepted-connection'
+  | 'handshake-refusal'
+  | 'holder-process'
+  | 'no-holder'
+  | 'inconclusive'
+
+export type RelayEndpointHolder = {
+  pid: number
+  /** The holder's argv names relay.js AND this exact socket path. */
+  matchesRelayArgv: boolean
+  /** Direct children, or null when `pgrep` could not answer. Never guessed. */
+  childCount: number | null
+}
+
+export type RelayEndpointIncumbent = {
+  sockPath: string
+  verdict: RelayEndpointVerdict
+  evidence: RelayEndpointEvidence
+  socketPresent: boolean
+  /** Pids proven to hold this exact socket. Empty when the host could not enumerate them. */
+  holders: RelayEndpointHolder[]
+  /** False when no enumeration tool was available — an empty `holders` then proves nothing. */
+  holdersEnumerable: boolean
+}
+
+const PROBE_BEGIN = 'ORCA-INCUMBENT-BEGIN'
+const PROBE_END = 'ORCA-INCUMBENT-END'
+const CONNECT_PROBE_TIMEOUT_MS = 1000
+
+// Why ES5 syntax: nodePath may be a host-resolved system node, not the bundled one.
+const CONNECT_PROBE_JS = [
+  'var s=require("net").connect(process.argv[1]);',
+  'var done=false;',
+  'function say(v){if(done)return;done=true;try{s.destroy()}catch(e){};',
+  'process.stdout.write(v);process.exit(0)}',
+  's.on("connect",function(){say("accepted")});',
+  's.on("error",function(e){',
+  'say(e.code==="ECONNREFUSED"?"refused":e.code==="ENOENT"?"absent":"unknown")});',
+  `setTimeout(function(){say("unknown")},${CONNECT_PROBE_TIMEOUT_MS})`
+].join('')
+
+/**
+ * A POSIX probe that reports only what the host actually observed. Every field has an
+ * explicit "could not tell" value; nothing is inferred from a missing tool.
+ */
+export function relayEndpointIncumbentProbeCommand(nodePath: string, sockPath: string): string {
+  const sock = shellEscape(sockPath)
+  const node = shellEscape(nodePath)
+  return [
+    `sock=${sock}`,
+    `node=${node}`,
+    `printf '%s\\n' ${shellEscape(PROBE_BEGIN)}`,
+    'if [ -S "$sock" ]; then',
+    "  printf 'PRESENT=yes\\n'",
+    `  listen=$("$node" -e ${shellEscape(CONNECT_PROBE_JS)} "$sock" 2>/dev/null) || listen=unknown`,
+    '  [ -n "$listen" ] || listen=unknown',
+    'else',
+    "  printf 'PRESENT=no\\n'",
+    '  listen=absent',
+    'fi',
+    'printf \'LISTEN=%s\\n\' "$listen"',
+    'if command -v lsof >/dev/null 2>&1; then',
+    "  printf 'HOLDERS_SOURCE=lsof\\n'",
+    // Why -a: lsof ORs its selectors, so without it every unix-socket holder on the box
+    // would be reported as holding this path (#8762).
+    '  for pid in $(lsof -t -a -U "$sock" 2>/dev/null); do',
+    '    args=$(ps -o args= -p "$pid" 2>/dev/null | tr "\\n" " ")',
+    '    match=no',
+    '    case "$args" in *relay.js*"$sock"*) match=yes ;; esac',
+    '    kids=unknown',
+    '    if command -v pgrep >/dev/null 2>&1; then',
+    '      kids=$(pgrep -P "$pid" 2>/dev/null | grep -c .)',
+    '    fi',
+    '    printf \'HOLDER=%s %s %s\\n\' "$pid" "$match" "$kids"',
+    '  done',
+    'else',
+    "  printf 'HOLDERS_SOURCE=unavailable\\n'",
+    'fi',
+    `printf '%s\\n' ${shellEscape(PROBE_END)}`
+  ].join('\n')
+}
+
+export function parseRelayEndpointIncumbentProbe(
+  sockPath: string,
+  output: string
+): RelayEndpointIncumbent {
+  const lines = output.split('\n').map((line) => line.trim())
+  if (!lines.includes(PROBE_BEGIN) || !lines.includes(PROBE_END)) {
+    return unverifiableEndpoint(sockPath)
+  }
+  const socketPresent = lines.includes('PRESENT=yes')
+  const listen = lines.find((line) => line.startsWith('LISTEN='))?.slice('LISTEN='.length) ?? ''
+  const holdersEnumerable = lines.includes('HOLDERS_SOURCE=lsof')
+  const holders = lines
+    .filter((line) => line.startsWith('HOLDER='))
+    .map((line) => parseHolder(line.slice('HOLDER='.length)))
+    .filter((holder): holder is RelayEndpointHolder => holder !== null)
+
+  if (listen === 'accepted') {
+    return {
+      sockPath,
+      verdict: 'live',
+      evidence: 'accepted-connection',
+      socketPresent,
+      holders,
+      holdersEnumerable
+    }
+  }
+  if (holders.length > 0) {
+    // The inode is held by a running process that is not accepting — wedged, not gone.
+    return {
+      sockPath,
+      verdict: 'live',
+      evidence: 'holder-process',
+      socketPresent,
+      holders,
+      holdersEnumerable
+    }
+  }
+  if (holdersEnumerable && (listen === 'refused' || listen === 'absent')) {
+    return {
+      sockPath,
+      verdict: 'exited',
+      evidence: 'no-holder',
+      socketPresent,
+      holders,
+      holdersEnumerable
+    }
+  }
+  return { ...unverifiableEndpoint(sockPath), socketPresent, holders, holdersEnumerable }
+}
+
+function parseHolder(value: string): RelayEndpointHolder | null {
+  const [rawPid, rawMatch, rawKids] = value.split(/\s+/)
+  const pid = Number.parseInt(rawPid ?? '', 10)
+  if (!Number.isInteger(pid) || pid <= 0) {
+    return null
+  }
+  const childCount = Number.parseInt(rawKids ?? '', 10)
+  return {
+    pid,
+    matchesRelayArgv: rawMatch === 'yes',
+    childCount: Number.isInteger(childCount) && childCount >= 0 ? childCount : null
+  }
+}
+
+function unverifiableEndpoint(sockPath: string): RelayEndpointIncumbent {
+  return {
+    sockPath,
+    verdict: 'unverifiable',
+    evidence: 'inconclusive',
+    socketPresent: false,
+    holders: [],
+    holdersEnumerable: false
+  }
+}
+
+export async function probeRelayEndpointIncumbent(
+  conn: SshConnection,
+  hostPlatform: RemoteHostPlatform,
+  nodePath: string,
+  sockPath: string,
+  options?: { signal?: AbortSignal }
+): Promise<RelayEndpointIncumbent> {
+  // Windows relays are named pipes: there is no inode to unlink and no `lsof`, so the
+  // orphan-by-unlink mechanism this probe defends against cannot occur there.
+  if (isWindowsRemoteHost(hostPlatform)) {
+    return unverifiableEndpoint(sockPath)
+  }
+  try {
+    const output = await execCommand(conn, relayEndpointIncumbentProbeCommand(nodePath, sockPath), {
+      wrapCommand: true,
+      signal: options?.signal
+    })
+    return parseRelayEndpointIncumbentProbe(sockPath, output)
+  } catch (err) {
+    // An exec whose channel never confirmed close may still be running remotely; the caller
+    // must not race a detached launch against it.
+    if (isUnconfirmedSshCommandTermination(err)) {
+      throw err
+    }
+    // Any other unanswered probe observes nothing. It is never evidence of death.
+    return unverifiableEndpoint(sockPath)
+  }
+}
+
+/**
+ * A relay that told us its version over the wire is `live` by positive host evidence, even on
+ * a host where nothing can enumerate socket holders.
+ */
+export function withHandshakeRefusalEvidence(
+  incumbent: RelayEndpointIncumbent
+): RelayEndpointIncumbent {
+  if (incumbent.verdict === 'live') {
+    return incumbent
+  }
+  return { ...incumbent, verdict: 'live', evidence: 'handshake-refusal' }
+}
+
+/**
+ * May a fresh relay be launched onto this path?
+ *
+ * Only `live` forbids it. `unverifiable` is permitted because the *daemon* — not the client —
+ * performs the takeover: `RelaySocketOwnership.listen` re-probes on EADDRINUSE, refuses to
+ * steal a path that accepts connections, and only unlinks an inode whose identity is
+ * unchanged. That check is atomic with the bind, which a client-side `rm -f` can never be.
+ */
+export function mayLaunchOverRelayEndpoint(incumbent: RelayEndpointIncumbent): boolean {
+  return incumbent.verdict !== 'live'
+}
+
+/**
+ * A live relay that provably holds nothing: identity confirmed against its argv, exactly one
+ * holder, and zero children. Reaping it destroys no user work. Anything less is retained —
+ * killing the wrong pid on someone's remote host is the worst outcome available here.
+ */
+export function isReapableRelayHusk(incumbent: RelayEndpointIncumbent): boolean {
+  if (incumbent.verdict !== 'live' || !incumbent.holdersEnumerable) {
+    return false
+  }
+  if (incumbent.holders.length !== 1) {
+    return false
+  }
+  const [holder] = incumbent.holders
+  return holder.matchesRelayArgv && holder.childCount === 0
+}
+
+export function describeRelayEndpointIncumbent(incumbent: RelayEndpointIncumbent): string {
+  const holders = incumbent.holders
+    .map((holder) => `${holder.pid}(children=${holder.childCount ?? 'unknown'})`)
+    .join(',')
+  return (
+    `${incumbent.sockPath} verdict=${incumbent.verdict} evidence=${incumbent.evidence} ` +
+    `holders=${incumbent.holdersEnumerable ? holders || 'none' : 'unenumerable'}`
+  )
+}
+
+/**
+ * Thrown instead of orphaning: a live relay owns the endpoint and refused us, so the path is
+ * not ours to rebind. Terminal for this attempt — the user resolves it with Reset Relay,
+ * which signals the incumbent deliberately and with consent.
+ */
+export class RelayEndpointHeldError extends Error {
+  readonly name = 'RelayEndpointHeldError'
+  constructor(readonly incumbent: RelayEndpointIncumbent) {
+    super(
+      `A live relay still owns ${incumbent.sockPath} and refused this connection ` +
+        `(${describeRelayEndpointIncumbent(incumbent)}). Orca will not replace it, because ` +
+        'unlinking its socket would strand its terminals. Use Reset Relay for this host to ' +
+        'stop it, then reconnect.'
+    )
+  }
+}
+
+export function isRelayEndpointHeldError(err: unknown): err is RelayEndpointHeldError {
+  return err instanceof RelayEndpointHeldError
+}
diff --git a/src/main/ssh/ssh-relay-endpoint-takeover.test.ts b/src/main/ssh/ssh-relay-endpoint-takeover.test.ts
new file mode 100644
index 00000000000..687d633b92b
--- /dev/null
+++ b/src/main/ssh/ssh-relay-endpoint-takeover.test.ts
@@ -0,0 +1,159 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const execCommand = vi.fn()
+vi.mock('./ssh-relay-deploy-helpers', () => ({
+  execCommand: (...args: unknown[]) => execCommand(...args),
+  isUnconfirmedSshCommandTermination: (error: unknown) =>
+    (error as { sshChannelCloseConfirmed?: boolean } | null)?.sshChannelCloseConfirmed === false
+}))
+
+import { isRelayEndpointHeldError } from './ssh-relay-endpoint-incumbent'
+import {
+  interpretRelayHuskReapOutput,
+  reapEmptyRelayHuskCommand,
+  resolveRelayEndpointBeforeRelaunch
+} from './ssh-relay-endpoint-takeover'
+import { RelayVersionMismatchError } from './ssh-relay-version-mismatch-error'
+import type { SshConnection } from './ssh-connection'
+import { getRemoteHostPlatform } from './ssh-remote-platform'
+
+const SOCK = '/home/u/.orca-remote/relay-0.1.0+aaaa/relay-deadbeef.sock'
+const HOST = getRemoteHostPlatform('linux-x64')
+const CONN = {} as SshConnection
+
+function probe(lines: string[]): string {
+  return ['ORCA-INCUMBENT-BEGIN', ...lines, 'ORCA-INCUMBENT-END'].join('\n')
+}
+
+function issuedCommands(): string[] {
+  return execCommand.mock.calls.map((call) => String(call[1]))
+}
+
+function resolve(reconnectError: unknown = new Error('connect failed')): Promise<unknown> {
+  return resolveRelayEndpointBeforeRelaunch(CONN, HOST, '/usr/bin/node', SOCK, reconnectError)
+}
+
+beforeEach(() => {
+  execCommand.mockReset()
+  vi.spyOn(console, 'warn').mockImplementation(() => {})
+  vi.spyOn(console, 'log').mockImplementation(() => {})
+})
+
+describe('incumbent alive and refusing', () => {
+  it('refuses to rebind a live relay holding PTYs, and signals nothing', async () => {
+    execCommand.mockResolvedValueOnce(
+      probe(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=3669803 yes 13'])
+    )
+    await expect(resolve()).rejects.toSatisfy(isRelayEndpointHeldError)
+    // The whole point of #8585: the incumbent's socket must survive so it is not orphaned.
+    expect(issuedCommands().some((command) => /\brm -f\b/.test(command))).toBe(false)
+    expect(issuedCommands().some((command) => /\bkill\b/.test(command))).toBe(false)
+  })
+
+  it('names the incumbent pid and the Reset Relay escape hatch in the error', async () => {
+    execCommand.mockResolvedValue(
+      probe(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=3669803 yes 13'])
+    )
+    await expect(resolve()).rejects.toThrow(/3669803\(children=13\)/)
+    await expect(resolve()).rejects.toThrow(/Reset Relay/)
+  })
+
+  it('treats a version mismatch as live even where holders cannot be enumerated', async () => {
+    execCommand.mockResolvedValue(
+      probe(['PRESENT=yes', 'LISTEN=unknown', 'HOLDERS_SOURCE=unavailable'])
+    )
+    const mismatch = new RelayVersionMismatchError('0.1.0+new', '0.1.0+old', '')
+    await expect(resolve(mismatch)).rejects.toSatisfy(isRelayEndpointHeldError)
+    expect(issuedCommands().some((command) => /\brm -f\b/.test(command))).toBe(false)
+  })
+
+  it('reaps a live relay only when it provably holds nothing, and confirms it is gone', async () => {
+    execCommand
+      .mockResolvedValueOnce(
+        probe(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=80583 yes 0'])
+      )
+      .mockResolvedValueOnce('GONE\n')
+    await expect(resolve()).resolves.toMatchObject({ verdict: 'live' })
+    expect(issuedCommands()[1]).toContain('kill -TERM "$pid"')
+  })
+
+  it('does not launch over an empty relay whose death could not be confirmed', async () => {
+    execCommand
+      .mockResolvedValueOnce(
+        probe(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=80583 yes 0'])
+      )
+      .mockResolvedValueOnce('LIVE\n')
+    await expect(resolve()).rejects.toSatisfy(isRelayEndpointHeldError)
+  })
+
+  it('does not launch over a relay the host refused to signal on its own re-check', async () => {
+    execCommand
+      .mockResolvedValueOnce(
+        probe(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=80583 yes 0'])
+      )
+      .mockResolvedValueOnce('BUSY\n')
+    await expect(resolve()).rejects.toSatisfy(isRelayEndpointHeldError)
+  })
+})
+
+describe('incumbent genuinely gone', () => {
+  it('permits the relaunch without unlinking anything itself', async () => {
+    execCommand.mockResolvedValueOnce(
+      probe(['PRESENT=yes', 'LISTEN=refused', 'HOLDERS_SOURCE=lsof'])
+    )
+    await expect(resolve()).resolves.toMatchObject({ verdict: 'exited', evidence: 'no-holder' })
+    // The daemon unlinks under an identity check that is atomic with its bind; the client
+    // cannot be, which is what created the orphan in the first place.
+    expect(issuedCommands().some((command) => /\brm -f\b/.test(command))).toBe(false)
+  })
+})
+
+describe('incumbent unverifiable', () => {
+  it('permits the relaunch but never claims the incumbent exited', async () => {
+    execCommand.mockResolvedValueOnce(
+      probe(['PRESENT=yes', 'LISTEN=unknown', 'HOLDERS_SOURCE=unavailable'])
+    )
+    await expect(resolve()).resolves.toMatchObject({ verdict: 'unverifiable' })
+    expect(issuedCommands()).toHaveLength(1)
+  })
+
+  it('stays unverifiable when the probe command itself fails', async () => {
+    execCommand.mockRejectedValueOnce(new Error('exec timeout'))
+    await expect(resolve()).resolves.toMatchObject({ verdict: 'unverifiable' })
+  })
+})
+
+describe('reapEmptyRelayHuskCommand', () => {
+  it('re-verifies argv and emptiness on the host immediately before signalling', () => {
+    const command = reapEmptyRelayHuskCommand(4242, SOCK)
+    expect(command.indexOf('MISMATCH')).toBeLessThan(command.indexOf('kill -TERM'))
+    expect(command.indexOf('BUSY')).toBeLessThan(command.indexOf('kill -TERM'))
+  })
+
+  it('sends SIGTERM only, so the relay runs its own socket cleanup', () => {
+    const command = reapEmptyRelayHuskCommand(4242, SOCK)
+    expect(command).toContain('kill -TERM')
+    expect(command).not.toContain('kill -KILL')
+    expect(command).not.toContain('-9')
+  })
+
+  it('aborts without signalling when the host cannot count children', () => {
+    expect(reapEmptyRelayHuskCommand(4242, SOCK)).toContain(
+      "command -v pgrep >/dev/null 2>&1 || { printf 'BUSY\\n'; exit 0; }"
+    )
+  })
+})
+
+describe('interpretRelayHuskReapOutput', () => {
+  it('claims reaped only for a post-signal liveness check that failed', () => {
+    expect(interpretRelayHuskReapOutput('GONE\n')).toBe('reaped')
+    expect(interpretRelayHuskReapOutput('LIVE\n')).toBe('reap-unconfirmed')
+    expect(interpretRelayHuskReapOutput('')).toBe('reap-unconfirmed')
+    expect(interpretRelayHuskReapOutput('unexpected noise')).toBe('reap-unconfirmed')
+  })
+
+  it('reports a host-side refusal as retained rather than as a failed kill', () => {
+    expect(interpretRelayHuskReapOutput('MISMATCH\n')).toBe('retained-live-work')
+    expect(interpretRelayHuskReapOutput('BUSY\n')).toBe('retained-live-work')
+  })
+})
diff --git a/src/main/ssh/ssh-relay-endpoint-takeover.ts b/src/main/ssh/ssh-relay-endpoint-takeover.ts
new file mode 100644
index 00000000000..f104aab5256
--- /dev/null
+++ b/src/main/ssh/ssh-relay-endpoint-takeover.ts
@@ -0,0 +1,133 @@
+/**
+ * Deciding whether a relay socket path is ours to take, and acting on the answer.
+ *
+ * The only destructive action available here is a SIGTERM to a relay that has been proven —
+ * by argv, by socket-holder enumeration, and by a zero child count re-checked on the host
+ * immediately before the signal — to hold nothing at all. Everything else is left running.
+ * Per docs/reference/ssh-execution-boundary.md, a relay we merely failed to reach is
+ * `unverifiable`, and `unverifiable` never authorizes a kill or a rebind.
+ */
+import type { SshConnection } from './ssh-connection'
+import { shellEscape } from './ssh-connection-utils'
+import { execCommand, isUnconfirmedSshCommandTermination } from './ssh-relay-deploy-helpers'
+import {
+  describeRelayEndpointIncumbent,
+  isReapableRelayHusk,
+  mayLaunchOverRelayEndpoint,
+  probeRelayEndpointIncumbent,
+  RelayEndpointHeldError,
+  withHandshakeRefusalEvidence,
+  type RelayEndpointIncumbent
+} from './ssh-relay-endpoint-incumbent'
+import { isRelayVersionMismatchError } from './ssh-relay-version-mismatch-error'
+import type { RemoteHostPlatform } from './ssh-remote-platform'
+
+/** `reaped` is only reachable from a post-signal `kill -0` that failed. Nothing else claims it. */
+export type RelayHuskReapResult = 'reaped' | 'reap-unconfirmed' | 'retained-live-work'
+
+const REAP_CONFIRM_ATTEMPTS = 15
+
+/**
+ * Signal one relay, re-verifying identity and emptiness inside the same command.
+ *
+ * The re-verification is not belt-and-braces: a client can attach and spawn a PTY between the
+ * probe and the signal, and pids are reused. `MISMATCH`/`BUSY` abort without signalling.
+ */
+export function reapEmptyRelayHuskCommand(pid: number, sockPath: string): string {
+  return [
+    `pid=${shellEscape(String(pid))}`,
+    `sock=${shellEscape(sockPath)}`,
+    'args=$(ps -o args= -p "$pid" 2>/dev/null | tr "\\n" " ")',
+    'case "$args" in *relay.js*"$sock"*) ;; *) printf \'MISMATCH\\n\'; exit 0 ;; esac',
+    "command -v pgrep >/dev/null 2>&1 || { printf 'BUSY\\n'; exit 0; }",
+    'kids=$(pgrep -P "$pid" 2>/dev/null | grep -c .)',
+    '[ "$kids" = "0" ] || { printf \'BUSY\\n\'; exit 0; }',
+    // SIGTERM only: the relay's own handler disposes and unlinks. SIGKILL would leave the
+    // socket inode behind and skip that shutdown path for no gain on an empty daemon.
+    'kill -TERM "$pid" 2>/dev/null || true',
+    'i=0',
+    `while [ $i -lt ${REAP_CONFIRM_ATTEMPTS} ]; do`,
+    '  kill -0 "$pid" 2>/dev/null || { printf \'GONE\\n\'; exit 0; }',
+    '  sleep 0.2',
+    '  i=$((i+1))',
+    'done',
+    "printf 'LIVE\\n'"
+  ].join('\n')
+}
+
+export function interpretRelayHuskReapOutput(output: string): RelayHuskReapResult {
+  const state = output.trim().split('\n').pop()?.trim()
+  if (state === 'GONE') {
+    return 'reaped'
+  }
+  // The host refused on its own re-check: what is there is not the empty relay we probed, so
+  // nothing was signalled and nothing is claimed about it.
+  if (state === 'MISMATCH' || state === 'BUSY') {
+    return 'retained-live-work'
+  }
+  return 'reap-unconfirmed'
+}
+
+export async function reapEmptyRelayHusk(
+  conn: SshConnection,
+  incumbent: RelayEndpointIncumbent,
+  options?: { signal?: AbortSignal }
+): Promise<RelayHuskReapResult> {
+  const holder = incumbent.holders[0]
+  if (!holder) {
+    return 'retained-live-work'
+  }
+  try {
+    const output = await execCommand(
+      conn,
+      reapEmptyRelayHuskCommand(holder.pid, incumbent.sockPath),
+      { wrapCommand: true, signal: options?.signal }
+    )
+    return interpretRelayHuskReapOutput(output)
+  } catch (err) {
+    if (isUnconfirmedSshCommandTermination(err)) {
+      throw err
+    }
+    return 'reap-unconfirmed'
+  }
+}
+
+/**
+ * Called when `--connect` to an existing socket failed and the caller is about to launch a
+ * replacement at the same path. Resolves to nothing when the launch may proceed; throws
+ * `RelayEndpointHeldError` when a live relay owns the path and holds work.
+ *
+ * `unverifiable` deliberately permits the launch: the daemon, not the client, performs the
+ * takeover. `RelaySocketOwnership.listen` re-probes on EADDRINUSE, refuses a path that accepts
+ * connections, and only unlinks an inode whose identity is unchanged — a check that is atomic
+ * with the bind, which a client-side `rm -f` can never be.
+ */
+export async function resolveRelayEndpointBeforeRelaunch(
+  conn: SshConnection,
+  hostPlatform: RemoteHostPlatform,
+  nodePath: string,
+  sockPath: string,
+  reconnectError: unknown,
+  options?: { signal?: AbortSignal }
+): Promise<RelayEndpointIncumbent> {
+  const probed = await probeRelayEndpointIncumbent(conn, hostPlatform, nodePath, sockPath, options)
+  // A daemon that answered the handshake with its own version is live by positive host
+  // evidence, even where nothing can enumerate socket holders.
+  const incumbent = isRelayVersionMismatchError(reconnectError)
+    ? withHandshakeRefusalEvidence(probed)
+    : probed
+  console.warn(`[ssh-relay] Relay endpoint incumbent: ${describeRelayEndpointIncumbent(incumbent)}`)
+
+  if (mayLaunchOverRelayEndpoint(incumbent)) {
+    return incumbent
+  }
+  if (!isReapableRelayHusk(incumbent)) {
+    throw new RelayEndpointHeldError(incumbent)
+  }
+  const result = await reapEmptyRelayHusk(conn, incumbent, options)
+  if (result !== 'reaped') {
+    throw new RelayEndpointHeldError(incumbent)
+  }
+  console.log(`[ssh-relay] Reaped empty relay husk holding ${sockPath}`)
+  return incumbent
+}
diff --git a/src/main/ssh/ssh-relay-session.ts b/src/main/ssh/ssh-relay-session.ts
index bdc7c4370f2..ed5ae3f9cfd 100644
--- a/src/main/ssh/ssh-relay-session.ts
+++ b/src/main/ssh/ssh-relay-session.ts
@@ -6,6 +6,7 @@ import type { BrowserWindow } from 'electron'
 import { deployAndLaunchRelay } from './ssh-relay-deploy'
 import { execCommand } from './ssh-relay-deploy-helpers'
 import { isRelayVersionMismatchError } from './ssh-relay-version-mismatch-error'
+import { isRelayEndpointHeldError } from './ssh-relay-endpoint-incumbent'
 import { replayPendingSshPtyKills } from './ssh-pending-pty-kill-replay'
 import { SshChannelMultiplexer } from './ssh-channel-multiplexer'
 import { SshPtyProvider } from '../providers/ssh-pty-provider'
@@ -629,7 +630,13 @@ export class SshRelaySession {
       }
       // Why: terminal on first connect — a deployed binary against a still-running legacy daemon, or a
       // claim another connection holds. Notify the callback but still rethrow.
-      if (isRelayVersionMismatchError(err) || isSshOwnerAdmissionBlockedError(err)) {
+      // RelayEndpointHeldError is terminal for the same reason: a live incumbent owns the
+      // socket path, and backoff cannot make it hand it over. The user resolves it.
+      if (
+        isRelayVersionMismatchError(err) ||
+        isRelayEndpointHeldError(err) ||
+        isSshOwnerAdmissionBlockedError(err)
+      ) {
         console.warn(
           `[ssh-relay-session] Terminal relay error on initial connect for ${this.targetId}: ${err.message}`
         )
@@ -783,7 +790,13 @@ export class SshRelaySession {
       }
       // Why terminal: neither a version mismatch nor a blocked owner claim is reconcilable by backoff
       // retry, so fire the typed callback and drop out of 'reconnecting'.
-      if (isRelayVersionMismatchError(err) || isSshOwnerAdmissionBlockedError(err)) {
+      // RelayEndpointHeldError is terminal for the same reason: a live incumbent owns the
+      // socket path, and backoff cannot make it hand it over. The user resolves it.
+      if (
+        isRelayVersionMismatchError(err) ||
+        isRelayEndpointHeldError(err) ||
+        isSshOwnerAdmissionBlockedError(err)
+      ) {
         console.warn(
           `[ssh-relay-session] Terminal relay error for ${this.targetId}: ${err.message}`
         )
diff --git a/src/main/ssh/ssh-relay-superseded-endpoints.test.ts b/src/main/ssh/ssh-relay-superseded-endpoints.test.ts
new file mode 100644
index 00000000000..874d9aae3fe
--- /dev/null
+++ b/src/main/ssh/ssh-relay-superseded-endpoints.test.ts
@@ -0,0 +1,164 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const execCommand = vi.fn()
+vi.mock('./ssh-relay-deploy-helpers', () => ({
+  execCommand: (...args: unknown[]) => execCommand(...args),
+  isUnconfirmedSshCommandTermination: (error: unknown) =>
+    (error as { sshChannelCloseConfirmed?: boolean } | null)?.sshChannelCloseConfirmed === false
+}))
+
+import { parseRelayEndpointIncumbentProbe } from './ssh-relay-endpoint-incumbent'
+import {
+  classifySupersededRelay,
+  supersededRelayEndpointListCommand,
+  sweepSupersededRelayEndpoints
+} from './ssh-relay-superseded-endpoints'
+import type { SshConnection } from './ssh-connection'
+import { getRemoteHostPlatform } from './ssh-remote-platform'
+
+const HOME = '/home/u'
+const SOCK_NAME = 'relay-deadbeef.sock'
+const CURRENT_DIR = `${HOME}/.orca-remote/relay-0.1.0+bd3ec370d21d`
+const OLD_SOCK = `${HOME}/.orca-remote/relay-0.1.0+7175e0a40ea7/${SOCK_NAME}`
+const HOST = getRemoteHostPlatform('linux-x64')
+const WINDOWS_HOST = getRemoteHostPlatform('win32-x64')
+const CONN = {} as SshConnection
+
+const SWEEP = {
+  remoteHome: HOME,
+  currentRelayDir: CURRENT_DIR,
+  sockName: SOCK_NAME,
+  nodePath: '/usr/bin/node'
+}
+
+function probe(lines: string[]): string {
+  return ['ORCA-INCUMBENT-BEGIN', ...lines, 'ORCA-INCUMBENT-END'].join('\n')
+}
+
+function incumbent(lines: string[]): ReturnType<typeof parseRelayEndpointIncumbentProbe> {
+  return parseRelayEndpointIncumbentProbe(OLD_SOCK, probe(lines))
+}
+
+function issuedCommands(): string[] {
+  return execCommand.mock.calls.map((call) => String(call[1]))
+}
+
+beforeEach(() => {
+  execCommand.mockReset()
+  vi.spyOn(console, 'warn').mockImplementation(() => {})
+  vi.spyOn(console, 'log').mockImplementation(() => {})
+})
+
+describe('supersededRelayEndpointListCommand', () => {
+  it('globs sibling version dirs for this target socket and skips the current one', () => {
+    const command = supersededRelayEndpointListCommand(SWEEP)
+    expect(command).toContain('"$base"/relay-*/"$sock_name"')
+    expect(command).toContain('[ "$dir" = "$current" ] && continue')
+    expect(command).toContain(SOCK_NAME)
+    expect(command).toContain(CURRENT_DIR)
+  })
+})
+
+describe('classifySupersededRelay', () => {
+  it('retains a live relay that still owns PTYs', () => {
+    expect(
+      classifySupersededRelay(
+        incumbent([
+          'PRESENT=yes',
+          'LISTEN=accepted',
+          'HOLDERS_SOURCE=lsof',
+          'HOLDER=3669803 yes 13'
+        ])
+      )
+    ).toBe('retained-live-work')
+  })
+
+  it('nominates only a proven empty relay for reaping', () => {
+    expect(
+      classifySupersededRelay(
+        incumbent(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=80583 yes 0'])
+      )
+    ).toBe('reap-candidate')
+  })
+
+  it('removes only a socket proven to have no holder', () => {
+    expect(
+      classifySupersededRelay(incumbent(['PRESENT=yes', 'LISTEN=refused', 'HOLDERS_SOURCE=lsof']))
+    ).toBe('stale-endpoint-removed')
+  })
+
+  it('does nothing at all for an unverifiable endpoint', () => {
+    expect(
+      classifySupersededRelay(
+        incumbent(['PRESENT=yes', 'LISTEN=unknown', 'HOLDERS_SOURCE=unavailable'])
+      )
+    ).toBe('unverifiable')
+  })
+})
+
+describe('sweepSupersededRelayEndpoints', () => {
+  it('leaves an upgrade-orphaned relay that still owns terminals running, untouched', async () => {
+    execCommand
+      .mockResolvedValueOnce(`${OLD_SOCK}\n`)
+      .mockResolvedValueOnce(
+        probe(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=3669803 yes 13'])
+      )
+    const findings = await sweepSupersededRelayEndpoints(CONN, HOST, SWEEP)
+    expect(findings).toHaveLength(1)
+    expect(findings[0]).toMatchObject({ sockPath: OLD_SOCK, outcome: 'retained-live-work' })
+    expect(issuedCommands().some((command) => /\bkill\b/.test(command))).toBe(false)
+    expect(issuedCommands().some((command) => /\brm -f\b/.test(command))).toBe(false)
+  })
+
+  it('reaps the empty husk an upgrade leaves behind, once the host confirms it is gone', async () => {
+    execCommand
+      .mockResolvedValueOnce(`${OLD_SOCK}\n`)
+      .mockResolvedValueOnce(
+        probe(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=80583 yes 0'])
+      )
+      .mockResolvedValueOnce('GONE\n')
+    const findings = await sweepSupersededRelayEndpoints(CONN, HOST, SWEEP)
+    expect(findings[0].outcome).toBe('reaped')
+    expect(issuedCommands()[2]).toContain('kill -TERM "$pid"')
+  })
+
+  it('reports reap-unconfirmed rather than reaped when the pid is still there', async () => {
+    execCommand
+      .mockResolvedValueOnce(`${OLD_SOCK}\n`)
+      .mockResolvedValueOnce(
+        probe(['PRESENT=yes', 'LISTEN=accepted', 'HOLDERS_SOURCE=lsof', 'HOLDER=80583 yes 0'])
+      )
+      .mockResolvedValueOnce('LIVE\n')
+    const findings = await sweepSupersededRelayEndpoints(CONN, HOST, SWEEP)
+    expect(findings[0].outcome).toBe('reap-unconfirmed')
+  })
+
+  it('unlinks an orphaned socket only once nothing holds it, unpinning the dir for GC', async () => {
+    execCommand
+      .mockResolvedValueOnce(`${OLD_SOCK}\n`)
+      .mockResolvedValueOnce(probe(['PRESENT=yes', 'LISTEN=refused', 'HOLDERS_SOURCE=lsof']))
+      .mockResolvedValueOnce('')
+    const findings = await sweepSupersededRelayEndpoints(CONN, HOST, SWEEP)
+    expect(findings[0].outcome).toBe('stale-endpoint-removed')
+    expect(issuedCommands()[2]).toBe(`rm -f '${OLD_SOCK}'`)
+  })
+
+  it('touches nothing on a host it cannot interrogate', async () => {
+    execCommand
+      .mockResolvedValueOnce(`${OLD_SOCK}\n`)
+      .mockResolvedValueOnce(probe(['PRESENT=yes', 'LISTEN=unknown', 'HOLDERS_SOURCE=unavailable']))
+    const findings = await sweepSupersededRelayEndpoints(CONN, HOST, SWEEP)
+    expect(findings[0].outcome).toBe('unverifiable')
+    expect(issuedCommands()).toHaveLength(2)
+  })
+
+  it('is a no-op when the listing fails, and never guesses at what was there', async () => {
+    execCommand.mockRejectedValueOnce(new Error('exec failed'))
+    await expect(sweepSupersededRelayEndpoints(CONN, HOST, SWEEP)).resolves.toEqual([])
+  })
+
+  it('does not run against Windows hosts, whose endpoints are named pipes', async () => {
+    await expect(sweepSupersededRelayEndpoints(CONN, WINDOWS_HOST, SWEEP)).resolves.toEqual([])
+    expect(execCommand).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/main/ssh/ssh-relay-superseded-endpoints.ts b/src/main/ssh/ssh-relay-superseded-endpoints.ts
new file mode 100644
index 00000000000..1a9554f7b82
--- /dev/null
+++ b/src/main/ssh/ssh-relay-superseded-endpoints.ts
@@ -0,0 +1,178 @@
+/**
+ * Relays this target left behind at a *different* version directory.
+ *
+ * Every relay build installs to `~/.orca-remote/relay-<fullVersion>/` and binds its socket
+ * inside it, so the socket path moves on every app update even though the filename component
+ * is stable. After an update the new client binds a path the previous relay's PTYs were never
+ * associated with, and the previous relay is never contacted again (#13614, #13852). Nothing
+ * signals it and nothing reclaims it: with `--grace-time 0` it keeps its shells and agents
+ * alive forever.
+ *
+ * This sweep makes that population *visible and deliberate* rather than silent. It does not
+ * make it recoverable — the daemon handshake compares the build's content hash exactly
+ * (`relay-handshake.ts`), so a new client cannot speak to an old daemon at all. See the report
+ * on this change for what a real cross-version handoff would require.
+ *
+ * The one thing it will terminate is a relay that provably holds nothing. Everything else is
+ * retained, including everything it merely failed to reach.
+ */
+import type { SshConnection } from './ssh-connection'
+import { shellEscape } from './ssh-connection-utils'
+import { RELAY_REMOTE_DIR } from './relay-protocol'
+import { execCommand } from './ssh-relay-deploy-helpers'
+import {
+  describeRelayEndpointIncumbent,
+  isReapableRelayHusk,
+  probeRelayEndpointIncumbent,
+  type RelayEndpointIncumbent
+} from './ssh-relay-endpoint-incumbent'
+import { reapEmptyRelayHusk } from './ssh-relay-endpoint-takeover'
+import { isWindowsRemoteHost, type RemoteHostPlatform } from './ssh-remote-platform'
+
+/**
+ * `reaped` is the only outcome that claims a process ended, and it is only reachable from a
+ * post-signal `kill -0` that failed. A signal we sent but could not confirm is
+ * `reap-unconfirmed`, which is `unverifiable` — not `exited` by another name.
+ */
+export type SupersededRelayOutcome =
+  | 'reaped'
+  | 'reap-unconfirmed'
+  | 'retained-live-work'
+  | 'stale-endpoint-removed'
+  | 'unverifiable'
+
+export type SupersededRelayFinding = {
+  sockPath: string
+  outcome: SupersededRelayOutcome
+  incumbent: RelayEndpointIncumbent
+}
+
+export type SupersededRelaySweepOptions = {
+  remoteHome: string
+  /** Absolute path of the version directory this client just launched into; never swept. */
+  currentRelayDir: string
+  /** Stable per-target socket filename, from `relaySocketNameForInstanceId`. */
+  sockName: string
+  nodePath: string
+  signal?: AbortSignal
+}
+
+const MAX_SWEPT_ENDPOINTS = 32
+
+export function supersededRelayEndpointListCommand(options: {
+  remoteHome: string
+  currentRelayDir: string
+  sockName: string
+}): string {
+  return [
+    `base=${shellEscape(`${options.remoteHome}/${RELAY_REMOTE_DIR}`)}`,
+    `sock_name=${shellEscape(options.sockName)}`,
+    `current=${shellEscape(options.currentRelayDir)}`,
+    'for sock in "$base"/relay-*/"$sock_name"; do',
+    '  [ -S "$sock" ] || continue',
+    '  dir=${sock%/*}',
+    '  [ "$dir" = "$current" ] && continue',
+    '  printf \'%s\\n\' "$sock"',
+    'done'
+  ].join('\n')
+}
+
+/** Remove a socket inode proven to have no holder, so version-dir GC can reclaim the tree. */
+export function removeStaleRelayEndpointCommand(sockPath: string): string {
+  return `rm -f ${shellEscape(sockPath)}`
+}
+
+export function classifySupersededRelay(
+  incumbent: RelayEndpointIncumbent
+): Exclude<SupersededRelayOutcome, 'reaped' | 'reap-unconfirmed'> | 'reap-candidate' {
+  if (incumbent.verdict === 'exited') {
+    return incumbent.socketPresent ? 'stale-endpoint-removed' : 'unverifiable'
+  }
+  if (incumbent.verdict !== 'live') {
+    return 'unverifiable'
+  }
+  return isReapableRelayHusk(incumbent) ? 'reap-candidate' : 'retained-live-work'
+}
+
+export async function sweepSupersededRelayEndpoints(
+  conn: SshConnection,
+  hostPlatform: RemoteHostPlatform,
+  options: SupersededRelaySweepOptions
+): Promise<SupersededRelayFinding[]> {
+  if (isWindowsRemoteHost(hostPlatform)) {
+    return []
+  }
+  let listing: string
+  try {
+    listing = await execCommand(conn, supersededRelayEndpointListCommand(options), {
+      wrapCommand: true,
+      signal: options.signal
+    })
+  } catch {
+    return []
+  }
+  const sockPaths = listing
+    .split('\n')
+    .map((line) => line.trim())
+    .filter((line) => line.startsWith('/'))
+    .slice(0, MAX_SWEPT_ENDPOINTS)
+
+  const findings: SupersededRelayFinding[] = []
+  for (const sockPath of sockPaths) {
+    options.signal?.throwIfAborted()
+    const incumbent = await probeRelayEndpointIncumbent(
+      conn,
+      hostPlatform,
+      options.nodePath,
+      sockPath,
+      { signal: options.signal }
+    )
+    findings.push({
+      sockPath,
+      outcome: await applySupersededRelayDecision(conn, incumbent, options),
+      incumbent
+    })
+  }
+  logSupersededRelayFindings(findings)
+  return findings
+}
+
+async function applySupersededRelayDecision(
+  conn: SshConnection,
+  incumbent: RelayEndpointIncumbent,
+  options: SupersededRelaySweepOptions
+): Promise<SupersededRelayOutcome> {
+  const decision = classifySupersededRelay(incumbent)
+  if (decision === 'stale-endpoint-removed') {
+    try {
+      await execCommand(conn, removeStaleRelayEndpointCommand(incumbent.sockPath), {
+        wrapCommand: true,
+        signal: options.signal
+      })
+      return 'stale-endpoint-removed'
+    } catch {
+      return 'unverifiable'
+    }
+  }
+  if (decision !== 'reap-candidate') {
+    return decision
+  }
+  return reapEmptyRelayHusk(conn, incumbent, { signal: options.signal })
+}
+
+function logSupersededRelayFindings(findings: SupersededRelayFinding[]): void {
+  for (const finding of findings) {
+    const detail = describeRelayEndpointIncumbent(finding.incumbent)
+    if (finding.outcome === 'retained-live-work') {
+      console.warn(
+        `[ssh-relay] Superseded relay retained (holds live work; not signalled): ${detail}`
+      )
+      continue
+    }
+    if (finding.outcome === 'unverifiable' || finding.outcome === 'reap-unconfirmed') {
+      console.warn(`[ssh-relay] Superseded relay ${finding.outcome}: ${detail}`)
+      continue
+    }
+    console.log(`[ssh-relay] Superseded relay ${finding.outcome}: ${detail}`)
+  }
+}

From 7dd2ff586a6da0e7856c077fdc5c0509c1416f0c Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:36:12 -0700
Subject: [PATCH 07/92] fix(ssh): stop expiring relay-reset leases when the
 force-stop threw (#17962)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A force-stop that rejected never observed the remote shells, so bulk-expiring
their leases in the finally block recorded a verdict Orca does not hold. Mirror
ssh:terminateSessions: only a fulfilled stop retires a lease. Local PTY handles
are still cleared, so nothing is stranded — the next connect reattaches the
survivors or expires them on host evidence.
---
 src/main/ipc/ssh-connection-handlers.ts     |  9 +++++-
 src/main/ipc/ssh-relay-reset-resume.test.ts | 32 +++++++++++++++++++++
 2 files changed, 40 insertions(+), 1 deletion(-)

diff --git a/src/main/ipc/ssh-connection-handlers.ts b/src/main/ipc/ssh-connection-handlers.ts
index 55411a70e8d..93fd6ff0e33 100644
--- a/src/main/ipc/ssh-connection-handlers.ts
+++ b/src/main/ipc/ssh-connection-handlers.ts
@@ -60,14 +60,21 @@ async function doResetRelay(targetId: string, target: SshTarget): Promise<void>
     assertSshConnectsNotFenced()
     conn = await connectionManager!.connect(target)
   }
+  let relayStopAcknowledged = false
   try {
     await forceStopRelayForTarget(conn, targetId)
+    relayStopAcknowledged = true
   } finally {
     const ptyIds = new Set(getPtyIdsForConnection(targetId))
     for (const lease of persistedStore!.getSshRemotePtyLeases(targetId)) {
       if (lease.state !== 'terminated' && lease.state !== 'expired') {
         ptyIds.add(lease.ptyId)
-        persistedStore!.markSshRemotePtyLease(targetId, lease.ptyId, 'expired')
+        // Why: only a host-acknowledged force-stop may retire a lease. When it threw we never
+        // observed those shells, so expiring them would record a verdict we do not hold; mirrors
+        // ssh:terminateSessions, and the next connect re-attaches (or expires) them on evidence.
+        if (relayStopAcknowledged) {
+          persistedStore!.markSshRemotePtyLease(targetId, lease.ptyId, 'expired')
+        }
       }
     }
     // Why: reset force-kills the remote relay, so every local PTY handle it owned is stale even if the reset command failed after SIGTERM.
diff --git a/src/main/ipc/ssh-relay-reset-resume.test.ts b/src/main/ipc/ssh-relay-reset-resume.test.ts
index 9051cac5a5c..36ad2090435 100644
--- a/src/main/ipc/ssh-relay-reset-resume.test.ts
+++ b/src/main/ipc/ssh-relay-reset-resume.test.ts
@@ -77,6 +77,38 @@ describe('SSH IPC handlers', () => {
     expect(mockConnectionManager.disconnect).toHaveBeenCalledWith('ssh-1')
   })
 
+  // A force-stop that threw observed nothing about the remote shells, so expiring their leases
+  // would record a verdict Orca never obtained (docs/reference/ssh-execution-boundary.md).
+  it('ssh:resetRelay keeps leases alive when the force-stop never reported a result', async () => {
+    const target: SshTarget = {
+      id: 'ssh-1',
+      label: 'Server',
+      host: 'example.com',
+      port: 22,
+      username: 'deploy'
+    }
+    const conn = {}
+    mockSshStore.getTarget.mockReturnValue(target)
+    mockConnectionManager.connect.mockResolvedValue(conn)
+    mockConnectionManager.getConnection.mockReturnValue(undefined)
+    mockStore.getSshRemotePtyLeases.mockReturnValue([
+      { targetId: 'ssh-1', ptyId: 'pty-1', state: 'detached' },
+      { targetId: 'ssh-1', ptyId: 'pty-2', state: 'attached' }
+    ])
+    vi.mocked(getPtyIdsForConnection).mockReturnValue([])
+    mockForceStopRelayForTarget.mockRejectedValueOnce(new Error('channel closed'))
+
+    await expect(handlers.get('ssh:resetRelay')!(null, { targetId: 'ssh-1' })).rejects.toThrow(
+      'channel closed'
+    )
+
+    expect(mockStore.markSshRemotePtyLease).not.toHaveBeenCalled()
+    // The local handles are still stale — only the host-side verdict is withheld.
+    expect(clearProviderPtyState).toHaveBeenCalledWith('ssh:ssh-1@@pty-1')
+    expect(deletePtyOwnership).toHaveBeenCalledWith('ssh:ssh-1@@pty-2')
+    expect(mockConnectionManager.disconnect).toHaveBeenCalledWith('ssh-1')
+  })
+
   it('ssh:resetRelay clears scoped live PTYs while expiring raw leases', async () => {
     const target: SshTarget = {
       id: 'ssh-1',

From b8cfdb170260b04b8817b55af43a5c92a36b628f Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:37:30 -0700
Subject: [PATCH 08/92] test(ssh): ratchet the relay reattach-failure exit as
 unverified, not proven (#17963)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(ssh): stop expiring relay-reset leases when the force-stop threw

A force-stop that rejected never observed the remote shells, so bulk-expiring
their leases in the finally block recorded a verdict Orca does not hold. Mirror
ssh:terminateSessions: only a fulfilled stop retires a lease. Local PTY handles
are still cleared, so nothing is stranded — the next connect reattaches the
survivors or expires them on host evidence.

* test(ssh): ratchet the relay reattach-failure exit as unverified, not proven

The relay answers pty.attach not-found both when it verified the pid is dead and
when its session map simply lacks the id — which is every id after a relay
restart. No behavior change: -1 already routes through isProvenProcessExit to the
renderer's unverified-loss path. This pins that contract and drops the comment
claiming the branch holds positive proof of death.
---
 .../ssh-relay-orphan-abandon-paths.test.ts    | 20 ++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff --git a/src/main/ssh/ssh-relay-orphan-abandon-paths.test.ts b/src/main/ssh/ssh-relay-orphan-abandon-paths.test.ts
index 9d08ac7da0f..b63f93a6c2b 100644
--- a/src/main/ssh/ssh-relay-orphan-abandon-paths.test.ts
+++ b/src/main/ssh/ssh-relay-orphan-abandon-paths.test.ts
@@ -1,6 +1,7 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 import { SshRelaySession } from './ssh-relay-session'
 import { createMockDeps, mockDeploySuccess } from './ssh-relay-session-test-fixtures'
+import { isProvenProcessExit } from '../../shared/terminal-exit-cause'
 
 const { muxRequestMock, openConsumerSessionMock } = vi.hoisted(() => ({
   muxRequestMock: vi.fn(),
@@ -186,14 +187,18 @@ describe('SshRelaySession abandoned remote PTYs', () => {
     expect(clearProviderPtyState).not.toHaveBeenCalledWith(APP_PTY_ID)
   })
 
-  it('retires the lease without a kill when the relay proves the PTY is gone', async () => {
-    // pty.attach verifies process liveness before answering not-found, so this is the one branch
-    // with positive proof of death — and a dead process needs no shutdown request.
+  it('stops claiming the id without asserting an exit when the relay answers not-found', async () => {
+    // pty.attach answers not-found both when it verified the pid is dead AND when its session map
+    // simply has no such id — which is every id after a relay restart, since the relay renumbers
+    // from pty-1. The client cannot tell those apart, so this branch may release the id but must
+    // not certify a death: the exit it publishes carries the unverified-loss sentinel, never a
+    // status the renderer would read as a real exit.
     const { deps, shutdown } = await establishWithFailingReattach(
       new Error('PTY "pty-live" not found')
     )
 
     expect(shutdown).not.toHaveBeenCalled()
+    // 'expired' records that reattach gave up on the id, not that the shell died; ssh:terminateSessions still reaches it.
     expect(deps.mockStore.markSshRemotePtyLease).toHaveBeenCalledWith(
       'target-1',
       'pty-live',
@@ -204,6 +209,15 @@ describe('SshRelaySession abandoned remote PTYs', () => {
       id: APP_PTY_ID,
       code: -1
     })
+    const exitCall = vi
+      .mocked(deps.mockWindow.webContents.send)
+      .mock.calls.find(([channel]) => channel === 'pty:exit')
+    if (!exitCall) {
+      throw new Error('expected a pty:exit publication')
+    }
+    // The ratchet that makes the above safe: swapping -1 for any provable status would turn an
+    // unreachable relay into a death certificate, closing tabs and dropping leaf↔PTY bindings.
+    expect(isProvenProcessExit((exitCall[1] as { code: number }).code)).toBe(false)
   })
 
   it('keeps a recovered session attached when reattach succeeds after an earlier drop', async () => {

From b552bcb91f02f48784117a10142c6f10355a84ed Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:38:07 -0700
Subject: [PATCH 09/92] fix(relay): diagnose why node-pty will not load instead
 of hedging (#17891)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The relay could only say "terminals are unavailable" and then list three
remedies for four different faults, none of which the user could verify
(#17830). Two things were destroying the evidence:

- `loadPtyUncached` caught the load error into bare `catch {}` blocks
  (pty-handler.ts:539, :551) and returned null. The only cause anyone had
  was discarded on the spot.
- node-pty's own loader walks three directories and rethrows only the LAST
  failure, so even an uncaught error arrives as `Cannot find module
  '../prebuilds/...'` — the GLIBC/ABI/arch sentence is already gone.

The relay now keeps the load error, recovers the real dlopen message with an
out-of-process load of the file node-pty would have opened, reads what
node-gyp configured the binding for (`build/config.gypi`), captures the
host's Node ABI, arch and glibc, and probes the toolchain only when nothing
was compiled. Each fault gets its own message naming values the user can
check: toolchain_missing, dependency_missing, abi_mismatch, arch_mismatch,
libc_floor, shared_library_missing, load_crashed, and load_failed which
quotes the loader verbatim. A probe that did not answer stays `unverifiable`
and prescribes nothing.

The classification is now also structured data on the error, so a client can
repair the host instead of printing a paragraph: an additive, schema-validated
`data` field on an existing JSON-RPC error, with `repairable` true only for a
proved fault that recompiling on the host actually fixes.

Reuses orcad's loader-message parsers and out-of-process probe rather than
adding a second copy; `classifyLoaderMessage` moves to a shared module and
gains architecture and missing-shared-library cases, which the orcad boot
precondition picks up too.
---
 src/main/orcad/native-host-abi.test.ts        |  33 ++
 src/main/orcad/native-host-abi.ts             |  37 ++
 src/main/orcad/node-pty-loader-diagnosis.ts   |  85 ++++
 src/main/orcad/node-pty-precondition.ts       | 129 +++----
 src/relay/dispatcher-rpc-routing.ts           |  15 +-
 src/relay/dispatcher-structured-error.test.ts |  54 +++
 src/relay/node-pty-binding-survey.test.ts     | 138 +++++++
 src/relay/node-pty-binding-survey.ts          | 215 +++++++++++
 .../node-pty-unavailable-diagnosis.test.ts    | 223 +++++++++++
 src/relay/node-pty-unavailable-diagnosis.ts   | 362 ++++++++++++++++++
 src/relay/pty-handler-spawn-admission.test.ts |  44 ++-
 src/relay/pty-handler.ts                      |  66 +++-
 src/shared/runtime-capability-degradation.ts  |   9 +
 src/shared/terminal-unavailable-cause.ts      |  73 ++++
 14 files changed, 1376 insertions(+), 107 deletions(-)
 create mode 100644 src/main/orcad/node-pty-loader-diagnosis.ts
 create mode 100644 src/relay/node-pty-binding-survey.test.ts
 create mode 100644 src/relay/node-pty-binding-survey.ts
 create mode 100644 src/relay/node-pty-unavailable-diagnosis.test.ts
 create mode 100644 src/relay/node-pty-unavailable-diagnosis.ts
 create mode 100644 src/shared/terminal-unavailable-cause.ts

diff --git a/src/main/orcad/native-host-abi.test.ts b/src/main/orcad/native-host-abi.test.ts
index 44f469f0faa..dfa2f7d6a7e 100644
--- a/src/main/orcad/native-host-abi.test.ts
+++ b/src/main/orcad/native-host-abi.test.ts
@@ -6,6 +6,8 @@ import {
   GLIBC_FLOOR,
   isBelowGlibcFloor,
   nativeSlotName,
+  parseIncompatibleArchitecture,
+  parseMissingSharedLibrary,
   parseNodeAbiMismatch,
   parseUnmetGlibcVersion
 } from './native-host-abi'
@@ -97,6 +99,37 @@ describe('loader error parsing', () => {
       )
     ).toEqual({ built: '115', host: '127' })
   })
+
+  it('names both architectures on mach-o, and admits ELF names none', () => {
+    expect(
+      parseIncompatibleArchitecture(
+        "dlopen(/opt/pty.node, 0x0001): tried: '/opt/pty.node' (mach-o file, but is an incompatible architecture (have 'arm64', need 'x86_64'))"
+      )
+    ).toEqual({ built: 'arm64', host: 'x86_64' })
+    // The ELF loader refuses without saying what it found, so the verdict stands but the
+    // numbers do not exist to report.
+    expect(parseIncompatibleArchitecture('invalid ELF header')).toEqual({
+      built: null,
+      host: null
+    })
+    expect(parseIncompatibleArchitecture('wrong ELF class: ELFCLASS32')).not.toBeNull()
+    // A wrong-libc binary is not a wrong-arch binary; conflating them sends the operator
+    // to rebuild for an architecture that was never wrong.
+    expect(parseIncompatibleArchitecture("version `GLIBC_2.34' not found")).toBeNull()
+  })
+
+  it('names the shared object the loader could not open, on either loader', () => {
+    expect(
+      parseMissingSharedLibrary(
+        'libstdc++.so.6: cannot open shared object file: No such file or directory'
+      )
+    ).toBe('libstdc++.so.6')
+    expect(parseMissingSharedLibrary('Library not loaded: /usr/local/lib/libfoo.dylib')).toBe(
+      '/usr/local/lib/libfoo.dylib'
+    )
+    // A symbol version that is absent is a rebuild, not an install: must not match here.
+    expect(parseMissingSharedLibrary("/lib/libc.so.6: version `GLIBC_2.34' not found")).toBeNull()
+  })
 })
 
 describe('detectNativeHostAbi', () => {
diff --git a/src/main/orcad/native-host-abi.ts b/src/main/orcad/native-host-abi.ts
index 2890bb07a15..2335ad3274b 100644
--- a/src/main/orcad/native-host-abi.ts
+++ b/src/main/orcad/native-host-abi.ts
@@ -121,3 +121,40 @@ export function parseNodeAbiMismatch(loaderError: string): { built: string; host
   const match = loaderError.match(/NODE_MODULE_VERSION\s+(\d+)\D+NODE_MODULE_VERSION\s+(\d+)/)
   return match ? { built: match[1], host: match[2] } : null
 }
+
+/**
+ * The architecture the loader refused, e.g. `incompatible architecture (have 'arm64',
+ * need 'x86_64')` -> { built: 'arm64', host: 'x86_64' }. ELF hosts name no architecture
+ * (`invalid ELF header`, `wrong ELF class: ELFCLASS32`), so both sides read null there —
+ * the verdict still holds, only the numbers are missing.
+ */
+export function parseIncompatibleArchitecture(
+  loaderError: string
+): { built: string | null; host: string | null } | null {
+  const machO = loaderError.match(
+    /incompatible architecture \(have '?([\w.]+)'?,?\s*need '?([\w.]+)'?/
+  )
+  if (machO) {
+    return { built: machO[1], host: machO[2] }
+  }
+  if (/invalid ELF header|wrong ELF class|Exec format error|ELFCLASS(?:32|64)/.test(loaderError)) {
+    return { built: null, host: null }
+  }
+  return null
+}
+
+/**
+ * The shared object the loader could not find, e.g.
+ * `libstdc++.so.6: cannot open shared object file` -> 'libstdc++.so.6'.
+ *
+ * Kept apart from the glibc floor deliberately: a missing library can be installed,
+ * whereas a symbol version that does not exist can only be fixed by rebuilding.
+ */
+export function parseMissingSharedLibrary(loaderError: string): string | null {
+  const elf = loaderError.match(/([\w.+-]+\.so[\w.]*): cannot open shared object file/)
+  if (elf) {
+    return elf[1]
+  }
+  const machO = loaderError.match(/Library not loaded:\s*(\S+)/)
+  return machO ? machO[1] : null
+}
diff --git a/src/main/orcad/node-pty-loader-diagnosis.ts b/src/main/orcad/node-pty-loader-diagnosis.ts
new file mode 100644
index 00000000000..8024a8e0ecb
--- /dev/null
+++ b/src/main/orcad/node-pty-loader-diagnosis.ts
@@ -0,0 +1,85 @@
+/**
+ * Read a dynamic-loader message and name the one thing that has to change.
+ *
+ * Pure on purpose: every shape that matters here belongs to a host we are not — Alpine,
+ * Ubuntu 20.04, an arm64 box handed an x64 binary — so the classification has to be
+ * testable from a machine that cannot reproduce any of them.
+ *
+ * Shared by the two places a node-pty load can fail: `orcad`'s boot precondition
+ * (out of process, before anything requires node-pty) and the SSH relay's spawn path.
+ */
+import type { RuntimeTerminalUnavailableReason } from '../../shared/runtime-types'
+import {
+  parseIncompatibleArchitecture,
+  parseMissingSharedLibrary,
+  parseNodeAbiMismatch,
+  parseUnmetGlibcVersion
+} from './native-host-abi'
+
+export type NodePtyLoadCause = {
+  reason: RuntimeTerminalUnavailableReason
+  /** Short human phrase naming the actual values found, not a remedy. */
+  detail: string
+}
+
+/**
+ * node-pty's own loader walks several directories and rethrows only the LAST failure,
+ * wrapped in this sentence. The tail is therefore the `prebuilds/<platform>-<arch>`
+ * miss — `Cannot find module` — even when the real failure was the dynamic loader
+ * refusing `build/Release/pty.node`. Anything acting on that tail sends the operator to
+ * install a module that is already installed.
+ */
+export function isFlattenedNodePtyLoaderMessage(message: string): boolean {
+  return /Failed to load native module: (?:conpty|pty)\.node(?:,|:|$)/.test(message)
+}
+
+/** The real cause a flattened message still carries, when the last attempt was the telling one. */
+export function classifyNodePtyLoaderMessage(message: string): NodePtyLoadCause {
+  const abiMismatch = parseNodeAbiMismatch(message)
+  if (abiMismatch) {
+    return {
+      reason: 'abi_mismatch',
+      detail: `built for Node ABI ${abiMismatch.built}, this host runs ABI ${abiMismatch.host}`
+    }
+  }
+  const unmetGlibc = parseUnmetGlibcVersion(message)
+  if (unmetGlibc) {
+    return { reason: 'libc_floor', detail: `the binary requires GLIBC_${unmetGlibc}` }
+  }
+  const unmetCxx = message.match(/((?:GLIBCXX_|CXXABI_)[0-9.]+)'? not found/)
+  if (unmetCxx) {
+    return { reason: 'libc_floor', detail: `the binary requires ${unmetCxx[1]}` }
+  }
+  const arch = parseIncompatibleArchitecture(message)
+  if (arch) {
+    return {
+      reason: 'arch_mismatch',
+      detail:
+        arch.built && arch.host
+          ? `built for ${arch.built}, this host needs ${arch.host}`
+          : `the loader rejected the binary's format (${firstErrorLine(message)})`
+    }
+  }
+  const missingLibrary = parseMissingSharedLibrary(message)
+  if (missingLibrary) {
+    return {
+      reason: 'shared_library_missing',
+      detail: `${missingLibrary} is not installed on this host`
+    }
+  }
+  if (/MODULE_NOT_FOUND|Cannot find module/.test(message)) {
+    return { reason: 'dependency_missing', detail: firstErrorLine(message) }
+  }
+  return { reason: 'load_failed', detail: firstErrorLine(message) }
+}
+
+/**
+ * Why not simply the first non-empty line: when a child dies without catching, node
+ * prints the offending source line and a caret before the error, so line one is the
+ * script rather than the diagnosis. Prefer the first line that reads as an error.
+ */
+export function firstErrorLine(text: string): string {
+  const lines = text.split('\n').filter((candidate) => candidate.trim().length > 0)
+  const errorLine = lines.find((candidate) => /^[A-Za-z]*(Error|Exception):/.test(candidate.trim()))
+  return (errorLine ?? lines[0] ?? text).trim().slice(0, 400)
+}
diff --git a/src/main/orcad/node-pty-precondition.ts b/src/main/orcad/node-pty-precondition.ts
index 2857449c736..7d633bd0f9a 100644
--- a/src/main/orcad/node-pty-precondition.ts
+++ b/src/main/orcad/node-pty-precondition.ts
@@ -25,13 +25,8 @@ import {
   parseBuildToolchainProbe,
   toolchainInstallHintLines
 } from '../ssh/build-toolchain-diagnosis'
-import {
-  detectNativeHostAbi,
-  nativeSlotName,
-  parseNodeAbiMismatch,
-  parseUnmetGlibcVersion,
-  type NativeHostAbi
-} from './native-host-abi'
+import { detectNativeHostAbi, nativeSlotName, type NativeHostAbi } from './native-host-abi'
+import { classifyNodePtyLoaderMessage, firstErrorLine } from './node-pty-loader-diagnosis'
 import { installPrebuiltSlot, type PrebuiltSlotOutcome } from './node-pty-prebuilt-slot'
 
 // Why every verdict travels on STDOUT: node echoes the whole `-e` source into stderr
@@ -72,21 +67,35 @@ export type NodePtyProbeFailure = {
 }
 
 /**
- * Read the child's exit into a cause. Pure, so every failure shape is testable from a
- * host that cannot reproduce it — the whole point, since the shapes that matter belong
- * to Alpine and Ubuntu 20.04.
+ * What the child actually reported, before any judgement is made about it.
+ *
+ * Split from the classification so callers that need the loader's own words — the relay,
+ * which quotes them back when nothing recognizes the shape — do not have to re-derive
+ * them from a formatted verdict.
  */
-export function classifyNodePtyProbeResult(
+export type NodePtyProbeOutcome =
+  | { kind: 'loaded'; loadedDir: string | null }
+  | { kind: 'noBinary' }
+  | { kind: 'loaderError'; message: string }
+  | { kind: 'signalled'; signal: NodeJS.Signals }
+  /** The probe never answered. Not evidence about node-pty either way. */
+  | { kind: 'unanswered'; detail: string }
+  /** It answered, but with nothing that names a cause. */
+  | { kind: 'unexplained'; detail: string }
+
+export function readNodePtyProbeOutcome(
   result: Pick<ProcessResult, 'code' | 'signal' | 'stdout' | 'stderr' | 'timedOut'>
-): NodePtyProbeFailure | null {
+): NodePtyProbeOutcome {
   const stdout = result.stdout
   if (result.code === 0 && stdout.includes(PROBE_OK_TOKEN)) {
-    return null
+    return {
+      kind: 'loaded',
+      loadedDir: stdout.split(PROBE_OK_TOKEN)[1]?.trim().split('\n')[0]?.trim() || null
+    }
   }
   if (result.timedOut) {
     return {
-      status: 'unverifiable',
-      reason: 'unknown',
+      kind: 'unanswered',
       detail: 'the node-pty load probe did not finish in time, so nothing was established'
     }
   }
@@ -94,27 +103,51 @@ export function classifyNodePtyProbeResult(
   // the loader never reaches the catch, and often prints nothing at all. That silence is
   // exactly the uncatchable case this probe is a separate process for.
   if (result.signal) {
-    return {
-      status: 'blocked',
-      reason: 'load_crashed',
-      detail: `the load probe was killed by ${result.signal}`
-    }
+    return { kind: 'signalled', signal: result.signal }
   }
   if (stdout.includes(NO_BINARY_TOKEN)) {
-    return {
-      status: 'blocked',
-      reason: 'dependency_missing',
-      detail: 'node-pty is installed but has no compiled binary for this platform'
-    }
+    return { kind: 'noBinary' }
   }
   const reported = readReportedLoadError(stdout)
   if (reported !== null) {
-    return classifyLoaderMessage(reported)
+    return { kind: 'loaderError', message: reported }
   }
   return {
-    status: 'blocked',
-    reason: 'load_failed',
-    detail: firstLine(result.stderr) || `the load probe exited with code ${result.code}`
+    kind: 'unexplained',
+    detail: firstErrorLine(result.stderr) || `the load probe exited with code ${result.code}`
+  }
+}
+
+/**
+ * Read the child's exit into a cause. Pure, so every failure shape is testable from a
+ * host that cannot reproduce it — the whole point, since the shapes that matter belong
+ * to Alpine and Ubuntu 20.04.
+ */
+export function classifyNodePtyProbeResult(
+  result: Pick<ProcessResult, 'code' | 'signal' | 'stdout' | 'stderr' | 'timedOut'>
+): NodePtyProbeFailure | null {
+  const outcome = readNodePtyProbeOutcome(result)
+  switch (outcome.kind) {
+    case 'loaded':
+      return null
+    case 'unanswered':
+      return { status: 'unverifiable', reason: 'unknown', detail: outcome.detail }
+    case 'signalled':
+      return {
+        status: 'blocked',
+        reason: 'load_crashed',
+        detail: `the load probe was killed by ${outcome.signal}`
+      }
+    case 'noBinary':
+      return {
+        status: 'blocked',
+        reason: 'dependency_missing',
+        detail: 'node-pty is installed but has no compiled binary for this platform'
+      }
+    case 'loaderError':
+      return classifyLoaderMessage(outcome.message)
+    case 'unexplained':
+      return { status: 'blocked', reason: 'load_failed', detail: outcome.detail }
   }
 }
 
@@ -133,40 +166,7 @@ function readReportedLoadError(stdout: string): string | null {
 
 /** Read a dynamic-loader message. Pure, so shapes this host cannot reproduce are testable. */
 export function classifyLoaderMessage(message: string): NodePtyProbeFailure {
-  const abiMismatch = parseNodeAbiMismatch(message)
-  if (abiMismatch) {
-    return {
-      status: 'blocked',
-      reason: 'abi_mismatch',
-      detail: `built for Node ABI ${abiMismatch.built}, this host runs ABI ${abiMismatch.host}`
-    }
-  }
-  const unmetGlibc = parseUnmetGlibcVersion(message)
-  if (unmetGlibc) {
-    return {
-      status: 'blocked',
-      reason: 'libc_floor',
-      detail: `the binary requires GLIBC_${unmetGlibc}`
-    }
-  }
-  if (/(GLIBCXX_|CXXABI_)[0-9.]+'? not found/.test(message)) {
-    return { status: 'blocked', reason: 'libc_floor', detail: firstLine(message) }
-  }
-  if (/MODULE_NOT_FOUND|Cannot find module/.test(message)) {
-    return { status: 'blocked', reason: 'dependency_missing', detail: firstLine(message) }
-  }
-  return { status: 'blocked', reason: 'load_failed', detail: firstLine(message) }
-}
-
-/**
- * Why not simply the first non-empty line: when the child dies without catching, node
- * prints the offending source line and a caret before the error, so line one is the
- * script rather than the diagnosis. Prefer the first line that reads as an error.
- */
-function firstLine(text: string): string {
-  const lines = text.split('\n').filter((candidate) => candidate.trim().length > 0)
-  const errorLine = lines.find((candidate) => /^[A-Za-z]*(Error|Exception):/.test(candidate.trim()))
-  return (errorLine ?? lines[0] ?? text).trim().slice(0, 400)
+  return { status: 'blocked', ...classifyNodePtyLoaderMessage(message) }
 }
 
 /**
@@ -305,7 +305,8 @@ export function checkNodePtyPrecondition(
   // Loaded. The remaining way terminals fail is spawn-time: node-pty posix_spawns
   // build/Release/spawn-helper, and a missing one turns every terminal.create into ENOENT
   // on a host that otherwise looks healthy. That is a degradation, not a boot blocker.
-  const loadedDir = result.stdout.split(PROBE_OK_TOKEN)[1]?.trim().split('\n')[0]?.trim()
+  const outcome = readNodePtyProbeOutcome(result)
+  const loadedDir = outcome.kind === 'loaded' ? outcome.loadedDir : null
   if (abi.platform !== 'win32') {
     const helper = join(loadedDir || join(nodePtyDir, 'build', 'Release'), 'spawn-helper')
     if (!isExecutableFile(helper)) {
diff --git a/src/relay/dispatcher-rpc-routing.ts b/src/relay/dispatcher-rpc-routing.ts
index c30d222ff3d..164a375e1c6 100644
--- a/src/relay/dispatcher-rpc-routing.ts
+++ b/src/relay/dispatcher-rpc-routing.ts
@@ -3,6 +3,10 @@ import {
   SKILL_INSTALL_RPC_ERROR_CODE,
   SkillInstallFailureSchema
 } from '../shared/skill-install-failure'
+import {
+  TERMINAL_UNAVAILABLE_RPC_ERROR_CODE,
+  TerminalUnavailableCauseSchema
+} from '../shared/terminal-unavailable-cause'
 import {
   RelayErrorCode,
   type JsonRpcNotification,
@@ -135,11 +139,16 @@ export abstract class RelayDispatcherRpcRouting extends RelayDispatcherFrameCode
       const message = err instanceof Error ? err.message : String(err)
       const errorCode = (err as { code?: unknown }).code
       const code = typeof errorCode === 'number' ? errorCode : -32000
-      const skillFailure =
+      // Why an allowlist keyed on the error code: error `data` is otherwise dropped, so a
+      // handler cannot leak internals by attaching them. Each published shape is validated
+      // against its own schema before it crosses.
+      const structured =
         errorCode === SKILL_INSTALL_RPC_ERROR_CODE
           ? SkillInstallFailureSchema.safeParse((err as { data?: unknown }).data)
-          : null
-      const data = skillFailure?.success === true ? skillFailure.data : undefined
+          : errorCode === TERMINAL_UNAVAILABLE_RPC_ERROR_CODE
+            ? TerminalUnavailableCauseSchema.safeParse((err as { data?: unknown }).data)
+            : null
+      const data = structured?.success === true ? structured.data : undefined
       const accepted = this.sendResponse(
         client,
         req.id,
diff --git a/src/relay/dispatcher-structured-error.test.ts b/src/relay/dispatcher-structured-error.test.ts
index 0ba8e164216..3ce0a79f19f 100644
--- a/src/relay/dispatcher-structured-error.test.ts
+++ b/src/relay/dispatcher-structured-error.test.ts
@@ -1,6 +1,10 @@
 import { afterEach, describe, expect, it, vi } from 'vitest'
 import { RelayDispatcher } from './dispatcher'
 import { encodeJsonRpcFrame, MessageType, type JsonRpcResponse } from './protocol'
+import {
+  TERMINAL_UNAVAILABLE_RPC_ERROR_CODE,
+  type TerminalUnavailableCause
+} from '../shared/terminal-unavailable-cause'
 
 function decodeResponse(frame: Buffer): JsonRpcResponse | null {
   if (frame[0] !== MessageType.Regular) {
@@ -52,4 +56,54 @@ describe('RelayDispatcher structured errors', () => {
       message: 'boom'
     })
   })
+
+  it('carries a terminal-unavailable cause across the wire, and rejects a malformed one', async () => {
+    // Why this must cross: the fault is proved on the relay at spawn time, and the only
+    // machinery that can repair it runs on the client. Prose cannot be acted on.
+    vi.useFakeTimers()
+    const written: Buffer[] = []
+    const dispatcher = new RelayDispatcher((data) => {
+      written.push(Buffer.from(data))
+    })
+    dispatchers.push(dispatcher)
+    const cause: TerminalUnavailableCause = {
+      status: 'blocked',
+      reason: 'abi_mismatch',
+      detail: 'built for Node ABI 127, this host runs ABI 115',
+      repairable: true,
+      host: {
+        platform: 'linux',
+        arch: 'x64',
+        libc: 'glibc',
+        glibcVersion: '2.31',
+        nodeAbi: '115',
+        nodeVersion: 'v20.11.0'
+      }
+    }
+    dispatcher.onRequest('pty.spawn', async () => {
+      throw Object.assign(new Error('Remote terminals are unavailable'), {
+        code: TERMINAL_UNAVAILABLE_RPC_ERROR_CODE,
+        data: cause
+      })
+    })
+    dispatcher.onRequest('pty.spawnBogus', async () => {
+      throw Object.assign(new Error('Remote terminals are unavailable'), {
+        code: TERMINAL_UNAVAILABLE_RPC_ERROR_CODE,
+        data: { status: 'blocked', repairable: true }
+      })
+    })
+
+    dispatcher.feed(encodeJsonRpcFrame({ jsonrpc: '2.0', id: 8, method: 'pty.spawn' }, 1, 0))
+    dispatcher.feed(encodeJsonRpcFrame({ jsonrpc: '2.0', id: 9, method: 'pty.spawnBogus' }, 2, 0))
+    await vi.advanceTimersByTimeAsync(0)
+
+    const responses = written.map(decodeResponse)
+    expect(responses.find((message) => message?.id === 8)?.error?.data).toEqual(cause)
+    // A cause that does not validate is dropped entirely; a half-read cause must never
+    // authorize a repair.
+    expect(responses.find((message) => message?.id === 9)?.error).toEqual({
+      code: -32000,
+      message: 'Remote terminals are unavailable'
+    })
+  })
 })
diff --git a/src/relay/node-pty-binding-survey.test.ts b/src/relay/node-pty-binding-survey.test.ts
new file mode 100644
index 00000000000..b51a57fd4a8
--- /dev/null
+++ b/src/relay/node-pty-binding-survey.test.ts
@@ -0,0 +1,138 @@
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import process from 'node:process'
+import { afterEach, describe, expect, it } from 'vitest'
+import { isFlattenedNodePtyLoaderMessage } from '../main/orcad/node-pty-loader-diagnosis'
+import {
+  collectNodePtyUnavailableDiagnosis,
+  readNodeGypBuildRecord,
+  surveyNodePtyBinding
+} from './node-pty-binding-survey'
+import { formatNodePtyUnavailableMessage } from './node-pty-unavailable-diagnosis'
+
+const HOST = { platform: process.platform, arch: process.arch }
+/** What node-pty throws once its loader has replaced the real cause with its last miss. */
+const FLATTENED =
+  'Failed to load native module: pty.node, checked: build/Release, build/Debug, ' +
+  `prebuilds/${process.platform}-${process.arch}: Error: Cannot find module './pty.node'`
+
+const roots: string[] = []
+
+function fixture(options: { binding?: boolean; configGypi?: string } = {}): string {
+  const root = mkdtempSync(join(tmpdir(), 'orca-node-pty-'))
+  roots.push(root)
+  const dir = join(root, 'node-pty')
+  mkdirSync(join(dir, 'lib'), { recursive: true })
+  writeFileSync(join(dir, 'lib', 'index.js'), 'module.exports = {}\n')
+  writeFileSync(join(dir, 'lib', 'utils.js'), 'exports.loadNativeModule = () => ({})\n')
+  if (options.binding) {
+    mkdirSync(join(dir, 'build', 'Release'), { recursive: true })
+    // Deliberately not a valid addon: the point is to make the dynamic loader talk.
+    for (const name of ['pty.node', 'conpty.node']) {
+      writeFileSync(join(dir, 'build', 'Release', name), 'not an addon\n')
+    }
+  }
+  if (options.configGypi !== undefined) {
+    mkdirSync(join(dir, 'build'), { recursive: true })
+    writeFileSync(join(dir, 'build', 'config.gypi'), options.configGypi)
+  }
+  return dir
+}
+
+afterEach(() => {
+  while (roots.length > 0) {
+    rmSync(roots.pop()!, { recursive: true, force: true })
+  }
+})
+
+describe('surveyNodePtyBinding', () => {
+  it('finds the file node-pty itself would open, and lists where it looked when there is none', () => {
+    const withBinding = surveyNodePtyBinding(fixture({ binding: true }), HOST)
+    expect(withBinding?.bindingPath).toMatch(/build[/\\]Release[/\\](con)?pty\.node$/)
+
+    const without = surveyNodePtyBinding(fixture(), HOST)
+    expect(without?.bindingPath).toBeNull()
+    expect(without?.searched).toHaveLength(3)
+    expect(without?.searched.join(' ')).toContain(`prebuilds/${process.platform}-${process.arch}`)
+  })
+})
+
+describe('readNodeGypBuildRecord', () => {
+  it('reads what node-gyp configured for, past its leading comment lines', () => {
+    const dir = fixture({
+      configGypi:
+        '# Do not edit. File was generated by node-gyp\'s "configure" step\n' +
+        '{ "variables": { "node_module_version": 127, "target_arch": "arm64" } }\n'
+    })
+    expect(readNodeGypBuildRecord(dir)).toEqual({ nodeAbi: '127', arch: 'arm64' })
+  })
+
+  it('answers nothing rather than guessing when there is no build record', () => {
+    expect(readNodeGypBuildRecord(fixture())).toEqual({ nodeAbi: null, arch: null })
+  })
+})
+
+describe('collectNodePtyUnavailableDiagnosis', () => {
+  it("recovers the dynamic loader's own words that node-pty threw away", async () => {
+    // The whole defect in one assertion: what reaches the relay is FLATTENED, which names
+    // no cause; the diagnosis must carry what the loader actually said about the file.
+    const diagnosis = await collectNodePtyUnavailableDiagnosis({
+      nodePtyDir: fixture({ binding: true }),
+      error: new Error(FLATTENED)
+    })
+    expect(diagnosis.status).toBe('blocked')
+    expect(diagnosis.rawError).toBeTruthy()
+    expect(isFlattenedNodePtyLoaderMessage(diagnosis.rawError!)).toBe(false)
+    expect(diagnosis.rawError).not.toBe(FLATTENED)
+    expect(diagnosis.rawError).toMatch(/pty\.node/)
+  }, 20_000)
+
+  it("prefers node-gyp's build record over a loader message that named no fault", async () => {
+    const diagnosis = await collectNodePtyUnavailableDiagnosis({
+      nodePtyDir: fixture({
+        binding: true,
+        configGypi: '{ "variables": { "node_module_version": 4242, "target_arch": "x64" } }'
+      }),
+      error: new Error(FLATTENED)
+    })
+    // A garbage binary reads differently per platform (mach-o vs ELF), so only assert the
+    // build record is consulted when the loader message did not name the fault itself.
+    if (diagnosis.reason === 'abi_mismatch') {
+      expect(formatNodePtyUnavailableMessage(diagnosis)).toContain(
+        `built for Node ABI 4242, this host runs ABI ${process.versions.modules}`
+      )
+    } else {
+      expect(['arch_mismatch', 'load_failed', 'load_crashed']).toContain(diagnosis.reason)
+    }
+  }, 20_000)
+
+  it('reports an unlocatable install as unverifiable, not as a diagnosis', async () => {
+    const diagnosis = await collectNodePtyUnavailableDiagnosis({
+      nodePtyDir: null,
+      error: new Error(FLATTENED)
+    })
+    expect(diagnosis.status).toBe('unverifiable')
+    const text = formatNodePtyUnavailableMessage(diagnosis)
+    expect(text).toContain('could not establish why')
+    // It still has to be reportable: the raw error is the only thing an issue can quote.
+    expect(text).toContain(FLATTENED)
+  })
+
+  it('probes the host toolchain only when nothing was compiled', async () => {
+    const diagnosis = await collectNodePtyUnavailableDiagnosis({
+      nodePtyDir: fixture(),
+      error: new Error(FLATTENED)
+    })
+    expect(diagnosis.survey?.bindingPath).toBeNull()
+    expect(['toolchain_missing', 'dependency_missing']).toContain(diagnosis.reason)
+    // Non-Linux hosts ship a node-pty prebuild, so a toolchain answer there would be noise.
+    expect(diagnosis.toolchain === null).toBe(process.platform !== 'linux')
+
+    const compiled = await collectNodePtyUnavailableDiagnosis({
+      nodePtyDir: fixture({ binding: true }),
+      error: new Error(FLATTENED)
+    })
+    expect(compiled.toolchain).toBeNull()
+  }, 20_000)
+})
diff --git a/src/relay/node-pty-binding-survey.ts b/src/relay/node-pty-binding-survey.ts
new file mode 100644
index 00000000000..805527f1aad
--- /dev/null
+++ b/src/relay/node-pty-binding-survey.ts
@@ -0,0 +1,215 @@
+/**
+ * Gather the evidence a node-pty spawn failure needs, on the host that failed.
+ *
+ * Three sources, because no single one is sufficient:
+ *
+ *  1. What is on disk where node-pty's loader looks, and what node-gyp recorded it was
+ *     configured for (`build/config.gypi`). This answers "wrong ABI / wrong arch" even
+ *     when the loader said nothing useful, and it is the only source available when the
+ *     binding is absent entirely.
+ *  2. The dynamic loader's own words, recovered by dlopen'ing the file node-pty would
+ *     have opened. node-pty's loader rethrows only its LAST attempt, so the real message
+ *     is otherwise destroyed before the relay sees it. This runs in a CHILD process: a
+ *     binding that aborts inside the loader would take the relay down with it, and a
+ *     relay that dies is a reconnect loop rather than an error message.
+ *  3. The host's C/C++ toolchain, but only when nothing was compiled — "install
+ *     build-essential" is the right answer for a compile that never ran, and noise for a
+ *     binary that exists and is simply wrong.
+ *
+ * Every step is best-effort and failure-tolerant: whatever cannot be established is
+ * reported as unestablished rather than guessed (docs/reference/ssh-execution-boundary.md).
+ */
+import { existsSync, readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { release } from 'node:os'
+import process from 'node:process'
+import { runProcess } from '../shared/child-process/run-process'
+import {
+  buildToolchainProbeCommand,
+  parseBuildToolchainProbe,
+  type BuildToolchainStatus
+} from '../main/ssh/build-toolchain-diagnosis'
+import { detectNativeHostAbi } from '../main/orcad/native-host-abi'
+import {
+  buildNodePtyLoadProbeScript,
+  readNodePtyProbeOutcome
+} from '../main/orcad/node-pty-precondition'
+import {
+  diagnoseNodePtyUnavailable,
+  type NodePtyBindingSurvey,
+  type NodePtyDiagnosisInput,
+  type NodePtyUnavailableDiagnosis,
+  type NodePtyUnavailableHost
+} from './node-pty-unavailable-diagnosis'
+
+/** Bounded so a wedged loader delays one spawn rejection, not the relay. */
+const LOAD_PROBE_TIMEOUT_MS = 10_000
+const TOOLCHAIN_PROBE_TIMEOUT_MS = 5_000
+
+/** node-pty's own search order, so the file surveyed is the file it would have opened. */
+function bindingSearchDirs(platform: NodeJS.Platform, arch: string): string[] {
+  return ['build/Release', 'build/Debug', `prebuilds/${platform}-${arch}`]
+}
+
+/** Windows defers to conpty.node on builds that have ConPTY, exactly as node-pty picks it. */
+function bindingBaseName(platform: NodeJS.Platform): string {
+  if (platform !== 'win32') {
+    return 'pty'
+  }
+  return Number(release().split('.')[2]) >= 18309 ? 'conpty' : 'pty'
+}
+
+export function surveyNodePtyBinding(
+  nodePtyDir: string,
+  host: Pick<NodePtyUnavailableHost, 'platform' | 'arch'>
+): NodePtyBindingSurvey | null {
+  const name = bindingBaseName(host.platform)
+  const searched = bindingSearchDirs(host.platform, host.arch)
+  let bindingPath: string | null = null
+  try {
+    for (const dir of searched) {
+      for (const root of [nodePtyDir, join(nodePtyDir, 'lib')]) {
+        const candidate = join(root, dir, `${name}.node`)
+        if (existsSync(candidate)) {
+          bindingPath = candidate
+          break
+        }
+      }
+      if (bindingPath) {
+        break
+      }
+    }
+  } catch {
+    return null
+  }
+  const built = readNodeGypBuildRecord(nodePtyDir)
+  return {
+    moduleDir: nodePtyDir,
+    bindingPath,
+    searched,
+    builtNodeAbi: built.nodeAbi,
+    builtArch: built.arch
+  }
+}
+
+/**
+ * What node-gyp configured this build for.
+ *
+ * Why this file and not the binary: `build/config.gypi` is written by `node-gyp
+ * configure` from the headers it downloaded, so it names the ABI and architecture the
+ * `.node` was compiled against without parsing ELF. It survives a build that later
+ * failed, which is the case where the loader has nothing to say.
+ */
+export function readNodeGypBuildRecord(nodePtyDir: string): {
+  nodeAbi: string | null
+  arch: string | null
+} {
+  try {
+    const raw = readFileSync(join(nodePtyDir, 'build', 'config.gypi'), 'utf8')
+    // node-gyp prefixes the JSON with `# Do not edit…` comment lines.
+    const body = raw
+      .split('\n')
+      .filter((line) => !line.trim().startsWith('#'))
+      .join('\n')
+    const variables = (JSON.parse(body) as { variables?: Record<string, unknown> }).variables
+    const nodeAbi = variables?.node_module_version
+    const arch = variables?.target_arch
+    return {
+      nodeAbi: nodeAbi === undefined || nodeAbi === null ? null : String(nodeAbi),
+      arch: typeof arch === 'string' && arch.length > 0 ? arch : null
+    }
+  } catch {
+    return { nodeAbi: null, arch: null }
+  }
+}
+
+/**
+ * The loader's verdict on the binding, recovered out of process.
+ *
+ * Returns the pieces `diagnoseNodePtyUnavailable` reads; a probe that could not run
+ * answers `unverifiableBecause` rather than a cause, because it established nothing.
+ */
+async function probeNodePtyLoader(
+  nodePtyDir: string
+): Promise<Pick<NodePtyDiagnosisInput, 'loaderError' | 'probeSignal' | 'unverifiableBecause'>> {
+  let result
+  try {
+    result = await runProcess({
+      program: process.execPath,
+      args: ['-e', buildNodePtyLoadProbeScript(nodePtyDir)],
+      timeoutMs: LOAD_PROBE_TIMEOUT_MS
+    })
+  } catch (error) {
+    return {
+      unverifiableBecause: `the node-pty load probe could not be started (${(error as Error).message})`
+    }
+  }
+  const outcome = readNodePtyProbeOutcome(result)
+  switch (outcome.kind) {
+    case 'loaderError':
+      return { loaderError: outcome.message }
+    case 'signalled':
+      return { probeSignal: outcome.signal }
+    case 'unanswered':
+      return { unverifiableBecause: outcome.detail }
+    // `loaded` here means the binding is fine under plain Node while the relay's own
+    // require failed — real, and not something the loader can explain. `noBinary` and
+    // `unexplained` are both better answered by the on-disk survey than by the probe.
+    case 'loaded':
+    case 'noBinary':
+    case 'unexplained':
+      return {}
+  }
+}
+
+/** node-pty has no Linux prebuild, so only there does a missing toolchain explain anything. */
+async function probeRelayBuildToolchain(
+  platform: NodeJS.Platform
+): Promise<BuildToolchainStatus | null> {
+  if (platform !== 'linux') {
+    return null
+  }
+  try {
+    const result = await runProcess({
+      program: '/bin/sh',
+      args: ['-c', buildToolchainProbeCommand()],
+      timeoutMs: TOOLCHAIN_PROBE_TIMEOUT_MS
+    })
+    return result.timedOut ? null : parseBuildToolchainProbe(result.stdout)
+  } catch {
+    return null
+  }
+}
+
+function readErrorMessage(error: unknown): string | null {
+  if (error instanceof Error) {
+    return error.message
+  }
+  return typeof error === 'string' && error.length > 0 ? error : null
+}
+
+/**
+ * Everything above, in the order that makes each step's cost conditional on the previous
+ * one's answer. Called only on the failure path, so a spawn that works pays nothing.
+ */
+export async function collectNodePtyUnavailableDiagnosis(options: {
+  nodePtyDir: string | null
+  error?: unknown
+}): Promise<NodePtyUnavailableDiagnosis> {
+  const abi = detectNativeHostAbi()
+  const host: NodePtyUnavailableHost = { ...abi, nodeVersion: process.version }
+  const requireError = readErrorMessage(options.error)
+  if (!options.nodePtyDir) {
+    return diagnoseNodePtyUnavailable({
+      host,
+      survey: null,
+      requireError,
+      unverifiableBecause: 'the relay could not locate its node-pty install directory'
+    })
+  }
+  const survey = surveyNodePtyBinding(options.nodePtyDir, host)
+  const probed = survey?.bindingPath ? await probeNodePtyLoader(options.nodePtyDir) : {}
+  const toolchain =
+    survey && !survey.bindingPath ? await probeRelayBuildToolchain(host.platform) : null
+  return diagnoseNodePtyUnavailable({ ...probed, host, survey, requireError, toolchain })
+}
diff --git a/src/relay/node-pty-unavailable-diagnosis.test.ts b/src/relay/node-pty-unavailable-diagnosis.test.ts
new file mode 100644
index 00000000000..7bed6ef256e
--- /dev/null
+++ b/src/relay/node-pty-unavailable-diagnosis.test.ts
@@ -0,0 +1,223 @@
+import { describe, expect, it } from 'vitest'
+import {
+  diagnoseNodePtyUnavailable,
+  formatNodePtyUnavailableMessage,
+  type NodePtyBindingSurvey,
+  type NodePtyDiagnosisInput,
+  toTerminalUnavailableCause,
+  type NodePtyUnavailableHost
+} from './node-pty-unavailable-diagnosis'
+import { parseBuildToolchainProbe } from '../main/ssh/build-toolchain-diagnosis'
+import {
+  mayRepairFromCause,
+  parseTerminalUnavailableCause
+} from '../shared/terminal-unavailable-cause'
+
+const UBUNTU_2004: NodePtyUnavailableHost = {
+  platform: 'linux',
+  arch: 'x64',
+  libc: 'glibc',
+  glibcVersion: '2.31',
+  nodeAbi: '115',
+  nodeVersion: 'v20.11.0'
+}
+
+const MODULE_DIR = '/opt/orca/relay/node_modules/node-pty'
+const SEARCHED = ['build/Release', 'build/Debug', 'prebuilds/linux-x64']
+
+const INSTALLED: NodePtyBindingSurvey = {
+  moduleDir: MODULE_DIR,
+  bindingPath: `${MODULE_DIR}/build/Release/pty.node`,
+  searched: SEARCHED,
+  builtNodeAbi: null,
+  builtArch: null
+}
+
+const NOTHING_INSTALLED: NodePtyBindingSurvey = { ...INSTALLED, bindingPath: null }
+
+/** What node-pty itself throws: the real cause replaced by its LAST directory miss. */
+const FLATTENED =
+  'Failed to load native module: pty.node, checked: build/Release, build/Debug, ' +
+  "prebuilds/linux-x64: Error: Cannot find module '../prebuilds/linux-x64//pty.node'"
+
+const diagnose = (overrides: Partial<NodePtyDiagnosisInput> = {}) =>
+  diagnoseNodePtyUnavailable({
+    host: UBUNTU_2004,
+    survey: INSTALLED,
+    requireError: FLATTENED,
+    ...overrides
+  })
+
+const message = (overrides: Partial<NodePtyDiagnosisInput> = {}) =>
+  formatNodePtyUnavailableMessage(diagnose(overrides))
+
+const toolchain = (present: readonly string[]) =>
+  parseBuildToolchainProbe([...present.map((tool) => `HAVE ${tool}`), 'PKG apt-get'].join('\n'))
+
+describe('diagnoseNodePtyUnavailable', () => {
+  it("never treats node-pty's flattened wrapper as the cause", () => {
+    // node-pty rethrows only its last directory miss, so acting on that text sends the
+    // user to install a module that is already installed.
+    expect(
+      diagnose({ survey: NOTHING_INSTALLED, toolchain: toolchain(['make', 'g++', 'python3']) })
+    ).toMatchObject({ reason: 'dependency_missing' })
+    expect(diagnose().reason).not.toBe('dependency_missing')
+  })
+
+  it('names the glibc the host actually has next to the one the binary needs', () => {
+    const verdict = diagnose({
+      loaderError:
+        "/lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.34' not found (required by /opt/orca/node_modules/node-pty/build/Release/pty.node)"
+    })
+    expect(verdict).toMatchObject({ status: 'blocked', reason: 'libc_floor' })
+    const text = formatNodePtyUnavailableMessage(verdict)
+    expect(text).toContain('GLIBC_2.34')
+    expect(text).toContain('glibc 2.31')
+    // The remedy is a rebuild; offering "install build-essential" here is a wrong answer.
+    expect(text).not.toContain('build tools')
+  })
+
+  it('names both ABI numbers from the loader message', () => {
+    const text = message({
+      loaderError:
+        'The module was compiled against a different Node.js version using NODE_MODULE_VERSION 115. ' +
+        'This version of Node.js requires NODE_MODULE_VERSION 127.'
+    })
+    expect(text).toContain('built for Node ABI 115, this host runs ABI 127')
+    expect(text).toContain('v20.11.0')
+  })
+
+  it("reads the ABI mismatch off node-gyp's build record when the loader said nothing", () => {
+    // The case the old message could only hedge about: the binding is present, node-pty
+    // destroyed the loader error, and the only evidence left is what node-gyp configured.
+    const text = message({
+      survey: { ...INSTALLED, builtNodeAbi: '127' }
+    })
+    expect(text).toContain('built for Node ABI 127, this host runs ABI 115')
+  })
+
+  it('separates an architecture mismatch from an ABI mismatch', () => {
+    expect(diagnose({ loaderError: 'invalid ELF header' }).reason).toBe('arch_mismatch')
+    expect(message({ survey: { ...INSTALLED, builtArch: 'arm64' } })).toContain(
+      'built for arm64, this host runs x64'
+    )
+    expect(
+      message({
+        loaderError:
+          "dlopen(/opt/pty.node, 0x0001): tried: '/opt/pty.node' (mach-o file, but is an " +
+          "incompatible architecture (have 'arm64', need 'x86_64'))"
+      })
+    ).toContain('built for arm64, this host needs x86_64')
+  })
+
+  it('separates a missing shared library from a libc floor break', () => {
+    // Different remedies: install a package, versus rebuild against an older toolchain.
+    const verdict = diagnose({
+      loaderError: 'libstdc++.so.6: cannot open shared object file: No such file or directory'
+    })
+    expect(verdict.reason).toBe('shared_library_missing')
+    const text = formatNodePtyUnavailableMessage(verdict)
+    expect(text).toContain('libstdc++.so.6 is not installed on this host')
+    expect(text).toContain('Install that library')
+  })
+
+  it('offers the build-tools remedy only when it probed the toolchain and found it missing', () => {
+    const missing = diagnose({
+      survey: NOTHING_INSTALLED,
+      toolchain: toolchain(['python3'])
+    })
+    expect(missing.reason).toBe('toolchain_missing')
+    const text = formatNodePtyUnavailableMessage(missing)
+    expect(text).toContain('make and a C++ compiler are not installed')
+    expect(text).toContain(`checked ${SEARCHED.join(', ')} under ${MODULE_DIR}`)
+    expect(text).toContain('sudo apt-get install -y build-essential python3')
+
+    // Toolchain present and nothing compiled: the install failed for another reason, and
+    // "install make/g++/python3" would send the user chasing tools they already have.
+    const present = diagnose({
+      survey: NOTHING_INSTALLED,
+      toolchain: toolchain(['make', 'g++', 'python3'])
+    })
+    expect(present.reason).toBe('dependency_missing')
+    expect(formatNodePtyUnavailableMessage(present)).not.toContain('apt-get')
+  })
+
+  it('reports a binding that killed the probe as a crash rather than a miss', () => {
+    const text = message({ probeSignal: 'SIGSEGV' })
+    expect(text).toContain('SIGSEGV')
+    expect(text).toContain('incompatible with this host rather than missing')
+  })
+
+  it('quotes the loader verbatim when nothing recognizes it', () => {
+    const raw = 'dlopen(/opt/pty.node): unexpected relocation kind 0x9f'
+    const verdict = diagnose({ loaderError: raw })
+    expect(verdict).toMatchObject({ status: 'blocked', reason: 'load_failed', rawError: raw })
+    const text = formatNodePtyUnavailableMessage(verdict)
+    expect(text).toContain(`Loader error: ${raw}`)
+    expect(text).toContain('file an issue')
+  })
+
+  it('reports a probe that never answered as unverifiable and diagnoses nothing', () => {
+    // docs/reference/ssh-execution-boundary.md: loss of contact is not a verdict.
+    const verdict = diagnose({
+      unverifiableBecause: 'the node-pty load probe did not finish in time'
+    })
+    expect(verdict.status).toBe('unverifiable')
+    const text = formatNodePtyUnavailableMessage(verdict)
+    expect(text).toContain('could not establish why')
+    expect(text).toContain('not evidence node-pty is broken')
+    expect(text).not.toContain('Reconnect to rebuild')
+    expect(text).not.toContain('apt-get')
+  })
+
+  it('marks rebuildable faults repairable and everything else not', () => {
+    // The relay's node-pty is compiled ON the remote, so a binding that no longer matches
+    // the machine is fixed by recompiling there. A missing compiler or a missing library
+    // is not: the rebuild would need the very thing that is absent.
+    const repairable = (overrides: Partial<NodePtyDiagnosisInput>) =>
+      toTerminalUnavailableCause(diagnose(overrides)).repairable
+
+    expect(repairable({ survey: { ...INSTALLED, builtNodeAbi: '127' } })).toBe(true)
+    expect(repairable({ survey: { ...INSTALLED, builtArch: 'arm64' } })).toBe(true)
+    expect(repairable({ loaderError: "version `GLIBC_2.34' not found" })).toBe(true)
+    expect(repairable({ probeSignal: 'SIGSEGV' })).toBe(true)
+    expect(
+      repairable({ survey: NOTHING_INSTALLED, toolchain: toolchain(['make', 'g++', 'python3']) })
+    ).toBe(true)
+
+    expect(repairable({ survey: NOTHING_INSTALLED, toolchain: toolchain(['python3']) })).toBe(false)
+    expect(repairable({ loaderError: 'libstdc++.so.6: cannot open shared object file' })).toBe(
+      false
+    )
+    // Nothing was established, so nothing may be rewritten on the host (#14830).
+    expect(repairable({ unverifiableBecause: 'probe timed out' })).toBe(false)
+  })
+
+  it('publishes a cause that survives its own wire schema', () => {
+    const cause = toTerminalUnavailableCause(
+      diagnose({ loaderError: "version `GLIBC_2.34' not found" })
+    )
+    expect(parseTerminalUnavailableCause(cause)).toEqual(cause)
+    expect(mayRepairFromCause(cause)).toBe(true)
+    expect(cause.host).toMatchObject({ arch: 'x64', nodeAbi: '115', glibcVersion: '2.31' })
+
+    // A peer claiming repairable on an unverifiable status must not be believed.
+    expect(mayRepairFromCause({ ...cause, status: 'unverifiable' })).toBe(false)
+    expect(parseTerminalUnavailableCause({ ...cause, host: undefined })).toBeNull()
+    // A reason this client has never heard of must not discard the whole cause; the
+    // relay may name faults added after the client shipped.
+    expect(parseTerminalUnavailableCause({ ...cause, reason: 'invented_later' })).not.toBeNull()
+  })
+
+  it('puts the host on every message so a bug report needs no follow-up question', () => {
+    for (const overrides of [
+      {},
+      { loaderError: 'invalid ELF header' },
+      { unverifiableBecause: 'probe timed out' }
+    ]) {
+      expect(message(overrides)).toContain(
+        'linux/x64, glibc 2.31, Node v20.11.0 (ABI 115), prebuild slot linux-x64-glibc'
+      )
+    }
+  })
+})
diff --git a/src/relay/node-pty-unavailable-diagnosis.ts b/src/relay/node-pty-unavailable-diagnosis.ts
new file mode 100644
index 00000000000..590eedcc375
--- /dev/null
+++ b/src/relay/node-pty-unavailable-diagnosis.ts
@@ -0,0 +1,362 @@
+/**
+ * Why the remote host cannot spawn terminals, in terms the user can act on and check.
+ *
+ * The relay used to answer this with one hedged paragraph — "install build tools, or
+ * else reconnect, or else check your Node version" — because the only thing it looked at
+ * was that `require('node-pty')` threw. That paragraph names three different remedies for
+ * four different faults and lets the user verify none of them.
+ *
+ * node-pty's own loader is why the raw cause went missing: it walks build/Release,
+ * build/Debug and prebuilds/<platform>-<arch>, then rethrows only the LAST error. So a
+ * `pty.node` the dynamic loader refused arrives as `Cannot find module '../prebuilds/…'`,
+ * and the GLIBC/ABI/arch sentence that actually says what is wrong is discarded before
+ * the relay ever sees it. Recovering it needs a separate dlopen of the file the loader
+ * would have opened — see node-pty-binding-survey.ts.
+ *
+ * Everything here is pure so every verdict is testable from a host that is none of the
+ * hosts that break. `unverifiable` is a first-class outcome: a probe that did not answer
+ * is not a diagnosis (docs/reference/ssh-execution-boundary.md).
+ */
+import { GLIBC_FLOOR, nativeSlotName, type NativeHostAbi } from '../main/orcad/native-host-abi'
+import {
+  classifyNodePtyLoaderMessage,
+  isFlattenedNodePtyLoaderMessage
+} from '../main/orcad/node-pty-loader-diagnosis'
+import {
+  toolchainInstallHintLines,
+  type BuildToolchainStatus
+} from '../main/ssh/build-toolchain-diagnosis'
+import type { RuntimeTerminalUnavailableReason } from '../shared/runtime-types'
+import type { TerminalUnavailableCause } from '../shared/terminal-unavailable-cause'
+
+/** What is actually on disk where node-pty's loader looks, and what it was built for. */
+export type NodePtyBindingSurvey = {
+  /** The node-pty install the relay would load from. */
+  moduleDir: string
+  /** The compiled binding the loader would open, or null when no directory holds one. */
+  bindingPath: string | null
+  /** Directories checked, so "nothing is installed" is a statement with evidence. */
+  searched: string[]
+  /** `node_module_version` from node-gyp's build/config.gypi, when it is readable. */
+  builtNodeAbi: string | null
+  /** `target_arch` from node-gyp's build/config.gypi, when it is readable. */
+  builtArch: string | null
+}
+
+export type NodePtyUnavailableHost = NativeHostAbi & { nodeVersion: string }
+
+export type NodePtyUnavailableDiagnosis = {
+  /** `blocked` — proved. `unverifiable` — nothing answered, which is not evidence. */
+  status: 'blocked' | 'unverifiable'
+  reason: RuntimeTerminalUnavailableReason
+  host: NodePtyUnavailableHost
+  /** Short phrase naming the values found. */
+  detail: string
+  /** The loader's own words, kept verbatim so an unclassified verdict is still reportable. */
+  rawError: string | null
+  survey: NodePtyBindingSurvey | null
+  toolchain: BuildToolchainStatus | null
+}
+
+export type NodePtyDiagnosisInput = {
+  /** What the recovered dlopen said, when one ran. Preferred over `requireError`. */
+  loaderError?: string | null
+  /** What `require('node-pty')`/`pty.spawn` threw. Usually flattened by node-pty. */
+  requireError?: string | null
+  /** A load probe that was killed rather than answering. */
+  probeSignal?: NodeJS.Signals | null
+  /** Set when the load probe never answered at all; forces `unverifiable`. */
+  unverifiableBecause?: string | null
+  host: NodePtyUnavailableHost
+  survey: NodePtyBindingSurvey | null
+  toolchain?: BuildToolchainStatus | null
+}
+
+/** Reasons a loader message can establish on its own, and which nothing else outranks. */
+const LOADER_NAMED_FAULTS: ReadonlySet<RuntimeTerminalUnavailableReason> = new Set([
+  'abi_mismatch',
+  'arch_mismatch',
+  'libc_floor',
+  'shared_library_missing'
+])
+
+export function diagnoseNodePtyUnavailable(
+  input: NodePtyDiagnosisInput
+): NodePtyUnavailableDiagnosis {
+  const { host, survey } = input
+  const toolchain = input.toolchain ?? null
+  // Why the require error is only a fallback: node-pty flattens the real cause away, so
+  // its text is evidence of "did not load", never of why.
+  const usableRequireError =
+    input.requireError && !isFlattenedNodePtyLoaderMessage(input.requireError)
+      ? input.requireError
+      : null
+  // Capped because a macOS dlopen error lists every path it tried; the message quotes this
+  // verbatim when nothing classifies it, and a toast is not a log file.
+  const rawError = truncate(input.loaderError ?? usableRequireError ?? input.requireError ?? null)
+  const base = { host, rawError, survey, toolchain } as const
+
+  if (input.unverifiableBecause) {
+    return {
+      ...base,
+      status: 'unverifiable',
+      reason: 'unknown',
+      detail: input.unverifiableBecause
+    }
+  }
+  // Before anything the loader said: a binary that aborts inside the loader never reaches
+  // a catch and often prints nothing, so the signal is the only evidence there is.
+  if (input.probeSignal) {
+    return {
+      ...base,
+      status: 'blocked',
+      reason: 'load_crashed',
+      detail: `loading the binding killed the probe with ${input.probeSignal}`
+    }
+  }
+
+  const classifiable = input.loaderError ?? usableRequireError
+  const classified = classifiable ? classifyNodePtyLoaderMessage(classifiable) : null
+  // Only a loader message that named the fault outranks the build record. `load_failed`
+  // and `dependency_missing` do not: the first named nothing, and the second is what
+  // node-pty says about a binding it never reached.
+  if (classified && LOADER_NAMED_FAULTS.has(classified.reason)) {
+    return { ...base, status: 'blocked', ...classified }
+  }
+
+  // The loader said nothing usable. The binding's own build record still can: node-gyp
+  // records the ABI and arch it configured for, and either differing from this runtime is
+  // a fault the user can check without reproducing the load.
+  if (survey?.bindingPath) {
+    if (survey.builtNodeAbi && survey.builtNodeAbi !== host.nodeAbi) {
+      return {
+        ...base,
+        status: 'blocked',
+        reason: 'abi_mismatch',
+        detail: `built for Node ABI ${survey.builtNodeAbi}, this host runs ABI ${host.nodeAbi}`
+      }
+    }
+    if (survey.builtArch && survey.builtArch !== host.arch) {
+      return {
+        ...base,
+        status: 'blocked',
+        reason: 'arch_mismatch',
+        detail: `built for ${survey.builtArch}, this host runs ${host.arch}`
+      }
+    }
+    return {
+      ...base,
+      status: 'blocked',
+      reason: classified?.reason ?? 'load_failed',
+      detail: classified?.detail ?? 'the binding is present but the loader refused it'
+    }
+  }
+
+  if (!survey) {
+    return {
+      ...base,
+      status: 'unverifiable',
+      reason: 'unknown',
+      detail: "the relay could not read node-pty's install directory"
+    }
+  }
+  // Nothing compiled anywhere. On Linux that is either a compile that never ran for want
+  // of a toolchain, or an install that failed for some other reason — different remedies.
+  if (toolchain?.toolchainMissing) {
+    return {
+      ...base,
+      status: 'blocked',
+      reason: 'toolchain_missing',
+      detail: `no compiled binding exists and ${missingToolSummary(toolchain)} missing`
+    }
+  }
+  return {
+    ...base,
+    status: 'blocked',
+    reason: 'dependency_missing',
+    detail: 'no compiled node-pty binding exists on this host'
+  }
+}
+
+const RAW_ERROR_MAX = 600
+
+function truncate(message: string | null): string | null {
+  if (message === null || message.length <= RAW_ERROR_MAX) {
+    return message
+  }
+  return `${message.slice(0, RAW_ERROR_MAX)}…`
+}
+
+function missingToolSummary(toolchain: BuildToolchainStatus): string {
+  const present = new Set(toolchain.present)
+  const missing: string[] = []
+  if (!present.has('make')) {
+    missing.push('make')
+  }
+  if (!present.has('g++') && !present.has('c++') && !present.has('clang++')) {
+    missing.push('a C++ compiler')
+  }
+  if (!present.has('python3') && !present.has('python')) {
+    missing.push('python3')
+  }
+  if (missing.length <= 1) {
+    return `${missing[0] ?? 'the build tools'} is`
+  }
+  return `${missing.slice(0, -1).join(', ')} and ${missing.at(-1)} are`
+}
+
+/**
+ * Faults a rebuild on the host actually fixes.
+ *
+ * The relay's node-pty is compiled ON the remote by `npm install`, so a binding that is
+ * absent, built for another Node ABI, built for another architecture, or linked against a
+ * newer libc than the host provides is all one thing: the compiled artifact no longer
+ * matches the machine, and recompiling here produces one that does. That is different
+ * from the packaged desktop app, where the binary is built elsewhere and the glibc floor
+ * in docs/reference/linux-glibc-compatibility.md is the binding constraint.
+ *
+ * Excluded on purpose: `toolchain_missing` (no compiler to rebuild with) and
+ * `shared_library_missing` (the compile would need the same absent library).
+ */
+const REBUILD_FIXES: ReadonlySet<RuntimeTerminalUnavailableReason> = new Set([
+  'abi_mismatch',
+  'arch_mismatch',
+  'libc_floor',
+  'load_crashed',
+  'dependency_missing'
+])
+
+/**
+ * The machine-readable cause, for a client that can act instead of printing.
+ *
+ * `repairable` requires a proved status AND a toolchain that is not known-missing: a
+ * rebuild the host cannot perform is not a repair, it is a wasted `npm install` — which
+ * is the shape of #14830.
+ */
+export function toTerminalUnavailableCause(
+  diagnosis: NodePtyUnavailableDiagnosis
+): TerminalUnavailableCause {
+  const { host } = diagnosis
+  return {
+    status: diagnosis.status,
+    reason: diagnosis.reason,
+    detail: diagnosis.detail.slice(0, 400),
+    repairable:
+      diagnosis.status === 'blocked' &&
+      REBUILD_FIXES.has(diagnosis.reason) &&
+      diagnosis.toolchain?.toolchainMissing !== true,
+    host: {
+      platform: host.platform,
+      arch: host.arch,
+      libc: host.libc,
+      ...(host.glibcVersion ? { glibcVersion: host.glibcVersion } : {}),
+      nodeAbi: host.nodeAbi,
+      nodeVersion: host.nodeVersion
+    },
+    ...(diagnosis.rawError ? { rawError: diagnosis.rawError.slice(0, 1000) } : {})
+  }
+}
+
+/** `linux/x64, glibc 2.31, Node v20.11.0 (ABI 115), prebuild slot linux-x64-glibc`. */
+function formatNodePtyHostLine(host: NodePtyUnavailableHost): string {
+  const libc =
+    host.libc === 'none' ? null : `${host.libc}${host.glibcVersion ? ` ${host.glibcVersion}` : ''}`
+  return [
+    `${host.platform}/${host.arch}`,
+    libc,
+    `Node ${host.nodeVersion} (ABI ${host.nodeAbi})`,
+    `prebuild slot ${nativeSlotName(host)}`
+  ]
+    .filter((part): part is string => part !== null)
+    .join(', ')
+}
+
+/**
+ * One remedy per fault, each naming a value the user can go and check.
+ *
+ * `unverifiable` deliberately prescribes nothing: the relay proved only that it could not
+ * establish a cause, and dressing that up as a diagnosis is the bug this replaces.
+ */
+export function formatNodePtyUnavailableMessage(diagnosis: NodePtyUnavailableDiagnosis): string {
+  const { host } = diagnosis
+  // Unverifiable deliberately prescribes nothing beyond a retry: nothing was established,
+  // and dressing that up as a diagnosis is the bug this replaces.
+  const opening =
+    diagnosis.status === 'unverifiable'
+      ? `Remote terminals are unavailable, and the relay could not establish why: ${diagnosis.detail}. ` +
+        `That is not evidence node-pty is broken — reconnect to retry.`
+      : `Remote terminals are unavailable: ${remedyFor(diagnosis)}`
+  const lines = [opening, `Host: ${formatNodePtyHostLine(host)}.`]
+  // Quoted only where nothing else named the fault: elsewhere the remedy already carries
+  // the numbers, and a dlopen dump would bury them.
+  const quoteRaw =
+    diagnosis.status === 'unverifiable' ||
+    diagnosis.reason === 'load_failed' ||
+    diagnosis.reason === 'unknown'
+  if (diagnosis.rawError && quoteRaw) {
+    lines.push(`Loader error: ${diagnosis.rawError}`)
+  }
+  return lines.join('\n')
+}
+
+function remedyFor(diagnosis: NodePtyUnavailableDiagnosis): string {
+  const { host, survey, toolchain } = diagnosis
+  switch (diagnosis.reason) {
+    case 'toolchain_missing':
+      return (
+        `node-pty ships no prebuilt binary for Linux and this host has no compiled one ` +
+        `(${searchedPhrase(survey)}), because ${toolchain ? missingToolSummary(toolchain) : 'the build tools are'} not installed. ` +
+        `Install them on the remote host, then reconnect:\n` +
+        `${(toolchain ? toolchainInstallHintLines(toolchain) : []).join('\n')}`
+      )
+    case 'dependency_missing':
+      return (
+        `node-pty has no compiled binary on this host (${searchedPhrase(survey)}). ` +
+        `The C/C++ build tools needed to compile it are present, so reconnect to reinstall ` +
+        `the relay's native modules.`
+      )
+    case 'abi_mismatch':
+      return (
+        `the installed node-pty binding was built for a different Node ABI than the remote's ` +
+        `Node — ${diagnosis.detail}. Reconnect to rebuild node-pty against ${host.nodeVersion}, ` +
+        `or run the relay on the Node version the binding was built for.`
+      )
+    case 'arch_mismatch':
+      return (
+        `the installed node-pty binding does not match this host's CPU architecture — ` +
+        `${diagnosis.detail}. Reconnect to rebuild node-pty on the remote host; a binding ` +
+        `copied from a machine of another architecture can never load here.`
+      )
+    case 'libc_floor':
+      return (
+        `${diagnosis.detail}, which this host's C library does not provide ` +
+        `(${host.glibcVersion ? `glibc ${host.glibcVersion}` : 'this host reports no glibc version'}). ` +
+        `The binding was compiled on a newer system than this one. Reconnect to rebuild ` +
+        `node-pty here; Orca's own Linux floor is glibc ${GLIBC_FLOOR}.`
+      )
+    case 'shared_library_missing':
+      return (
+        `node-pty's native binding cannot be opened because ${diagnosis.detail}. ` +
+        `Install that library on the remote host, then reconnect.`
+      )
+    case 'load_crashed':
+      return (
+        `${diagnosis.detail}, which means the binding is incompatible with this host rather ` +
+        `than missing. Reconnect to rebuild the relay's native modules.`
+      )
+    case 'load_failed':
+    case 'spawn_helper_missing':
+    case 'unknown':
+      return (
+        `this host refused to load node-pty's native binding and the cause was not recognized. ` +
+        `Reconnect to rebuild the relay's native modules; if that does not help, please file an ` +
+        `issue quoting the loader error below.`
+      )
+  }
+}
+
+function searchedPhrase(survey: NodePtyBindingSurvey | null): string {
+  return survey && survey.searched.length > 0
+    ? `checked ${survey.searched.join(', ')} under ${survey.moduleDir}`
+    : 'nothing was found where node-pty looks'
+}
diff --git a/src/relay/pty-handler-spawn-admission.test.ts b/src/relay/pty-handler-spawn-admission.test.ts
index 2df29b95420..728f883d3b1 100644
--- a/src/relay/pty-handler-spawn-admission.test.ts
+++ b/src/relay/pty-handler-spawn-admission.test.ts
@@ -32,7 +32,7 @@ vi.mock('../main/shell-prompt-readiness-probe', () => ({
   createShellPromptReadinessProbe: mockCreateShellPromptReadinessProbe
 }))
 
-import { MAX_RELAY_PTY_SESSIONS, PtyHandler, formatNodePtyUnavailableMessage } from './pty-handler'
+import { MAX_RELAY_PTY_SESSIONS, PtyHandler } from './pty-handler'
 import type { RelayDispatcher } from './dispatcher'
 import {
   beginPtyHandlerTest,
@@ -222,24 +222,6 @@ describe('PtyHandler', () => {
     expect(mockPtySpawn).toHaveBeenCalledOnce()
   })
 
-  it('hedges both causes on Linux and offers the build-tools remedy nowhere else', () => {
-    const linux = formatNodePtyUnavailableMessage('linux')
-    expect(linux).toContain('Remote terminals are unavailable')
-    // Conditional, not asserted: a host with build-essential can still hit an ABI/Node-version flip.
-    expect(linux).toMatch(/If it is missing the C\/C\+\+ build tools/)
-    expect(linux).toContain('python3')
-    expect(linux).toContain('version and architecture match the installed binding')
-
-    // Windows/macOS ship node-pty prebuilds, so "install make/g++/python3" sends the user chasing nothing.
-    for (const platform of ['win32', 'darwin'] as const) {
-      const message = formatNodePtyUnavailableMessage(platform)
-      expect(message).toContain('Remote terminals are unavailable')
-      expect(message).not.toContain('build tools')
-      expect(message).not.toContain('python3')
-      expect(message).toMatch(/reconnect/i)
-    }
-  })
-
   it('normalizes a missing native binding as degraded node-pty availability', async () => {
     mockPtySpawn.mockImplementationOnce(() => {
       throw new Error(
@@ -253,6 +235,30 @@ describe('PtyHandler', () => {
     expect(handler.activePtyCount).toBe(0)
   })
 
+  it('keeps the load error it was handed instead of replacing it with guesses', async () => {
+    // #17830: the user got three remedies for four possible faults and could verify none.
+    // The relay must carry what it was actually told, and must not prescribe a toolchain
+    // install it never probed for.
+    const thrown =
+      'Failed to load native module: conpty.node, checked: build/Release, prebuilds/win32-x64'
+    mockPtySpawn.mockImplementationOnce(() => {
+      throw new Error(thrown)
+    })
+
+    const message = await dispatcher.callRequest('pty.spawn', {}).then(
+      () => '',
+      (error: Error) => error.message
+    )
+
+    expect(message).toContain(thrown)
+    expect(message).not.toContain('install make, a C++ compiler, and python3')
+    // Nothing here established a cause — the relay's node-pty directory is not on disk in
+    // this harness — so per docs/reference/ssh-execution-boundary.md it must say so rather
+    // than pick a diagnosis. Every message still names the host, for the bug report.
+    expect(message).toContain('could not establish why')
+    expect(message).toMatch(/Host: linux\/\w+, .*Node v[\d.]+ \(ABI \d+\)/)
+  })
+
   it('preserves unrelated node-pty spawn failures', async () => {
     mockPtySpawn.mockImplementationOnce(() => {
       throw new Error('File not found: missing-shell.exe')
diff --git a/src/relay/pty-handler.ts b/src/relay/pty-handler.ts
index 82f0b19b9ff..f8bd2351cf2 100644
--- a/src/relay/pty-handler.ts
+++ b/src/relay/pty-handler.ts
@@ -102,23 +102,16 @@ import {
   injectRelayFishHistoryEnv,
   injectRelayHistoryEnv
 } from './terminal-history'
-
-// Why: only Linux compiles node-pty (no prebuilt), so the build-tools remedy is a closable setup gap
-// there and wrong advice anywhere node-pty ships one. The relay only sees an unloadable binding, never
-// why — a skipped compile and a later Node/ABI flip look identical here — so Linux hedges both causes.
-export function formatNodePtyUnavailableMessage(platform: NodeJS.Platform): string {
-  const remedy =
-    platform === 'linux'
-      ? "node-pty's native binding is not loadable on this host. If it is missing the C/C++ build tools needed to compile node-pty, install make, a C++ compiler, and python3 on the remote host, then reconnect. Otherwise reconnect to reinstall the relay's native modules, and check that the remote Node.js version and architecture match the installed binding."
-      : "node-pty's native binding failed to load on this host. Reconnect to reinstall the relay's native modules; if it persists, check that the remote Node.js version and architecture match the installed binding."
-  return `Remote terminals are unavailable: ${remedy}`
-}
+import { isFlattenedNodePtyLoaderMessage } from '../main/orcad/node-pty-loader-diagnosis'
+import { collectNodePtyUnavailableDiagnosis } from './node-pty-binding-survey'
+import {
+  formatNodePtyUnavailableMessage,
+  toTerminalUnavailableCause
+} from './node-pty-unavailable-diagnosis'
+import { TERMINAL_UNAVAILABLE_RPC_ERROR_CODE } from '../shared/terminal-unavailable-cause'
 
 function isMissingNodePtyNativeBinding(error: unknown): boolean {
-  return (
-    error instanceof Error &&
-    /Failed to load native module: (?:conpty|pty)\.node(?:,|$)/.test(error.message)
-  )
+  return error instanceof Error && isFlattenedNodePtyLoaderMessage(error.message)
 }
 
 function parseSourceRecoveryRequest(value: unknown): PtySourceRecoveryRequest | undefined {
@@ -474,6 +467,8 @@ export class PtyHandler {
   private ptyModule: typeof NodePty | null = null
   private ptyModuleLoadPromise: Promise<typeof NodePty | null> | null = null
   private reloadPtyModuleFromDisk = false
+  /** The last thing `require('node-pty')` threw, kept because it is the only cause anyone has. */
+  private lastPtyLoadError: unknown = null
   // Why: single optional slot is intentional — callers compose externally; a throw is swallowed so it can't block cleanup.
   private exitListener: PtyExitListener | null = null
   private surfaceRetiredListener: PtySurfaceRetiredListener | null = null
@@ -547,27 +542,56 @@ export class PtyHandler {
       try {
         this.ptyModule = await import('node-pty')
         return this.ptyModule
-      } catch {
+      } catch (error) {
+        // Why keep it: this is the only place the load error exists. Discarding it here is
+        // what left the relay able to say "unavailable" and never why.
+        this.lastPtyLoadError = error
         this.reloadPtyModuleFromDisk = true
       }
     }
     // Why: tie module resolution to the deployed bundle dir, not cwd.
-    const moduleEntry = join(__dirname, 'node_modules', 'node-pty', 'lib', 'index.js')
+    const moduleEntry = join(this.relayNodePtyDir(), 'lib', 'index.js')
     if (!existsSync(moduleEntry)) {
+      this.lastPtyLoadError = this.lastPtyLoadError ?? new Error(`no node-pty at ${moduleEntry}`)
       return null
     }
     try {
       this.ptyModule = require(moduleEntry) as typeof NodePty
       return this.ptyModule
-    } catch {
+    } catch (error) {
+      this.lastPtyLoadError = error
       return null
     }
   }
 
+  /** Where the relay's own node-pty lives — the deployed bundle dir, never cwd. */
+  private relayNodePtyDir(): string {
+    return join(__dirname, 'node_modules', 'node-pty')
+  }
+
+  /**
+   * The rejection for a spawn that cannot happen: prose for a human, and the structured
+   * cause for a client that can repair the host instead of printing a paragraph.
+   *
+   * Runs the survey and out-of-process load probe only here, on the failure path, so a
+   * healthy relay never pays for them.
+   */
+  private async nodePtyUnavailableError(spawnError?: unknown): Promise<Error> {
+    const nodePtyDir = this.relayNodePtyDir()
+    const diagnosis = await collectNodePtyUnavailableDiagnosis({
+      nodePtyDir: existsSync(nodePtyDir) ? nodePtyDir : null,
+      error: spawnError ?? this.lastPtyLoadError
+    })
+    return Object.assign(new Error(formatNodePtyUnavailableMessage(diagnosis)), {
+      code: TERMINAL_UNAVAILABLE_RPC_ERROR_CODE,
+      data: toTerminalUnavailableCause(diagnosis)
+    })
+  }
+
   private invalidatePtyModuleAfterBindingFailure(): void {
     this.ptyModule = null
     this.reloadPtyModuleFromDisk = true
-    const moduleRoot = join(__dirname, 'node_modules', 'node-pty')
+    const moduleRoot = this.relayNodePtyDir()
     for (const cachedPath of Object.keys(require.cache)) {
       if (isPathInsideOrEqual(moduleRoot, cachedPath)) {
         delete require.cache[cachedPath]
@@ -1718,7 +1742,7 @@ export class PtyHandler {
   }> {
     const pty = await this.loadPty()
     if (!pty) {
-      throw new Error(formatNodePtyUnavailableMessage(process.platform))
+      throw await this.nodePtyUnavailableError()
     }
 
     const cols = (params.cols as number) || 80
@@ -1831,7 +1855,7 @@ export class PtyHandler {
       // Why: Windows loads conpty.node only on first spawn, so handle that late binding failure here.
       if (isMissingNodePtyNativeBinding(error)) {
         this.invalidatePtyModuleAfterBindingFailure()
-        throw new Error(formatNodePtyUnavailableMessage(process.platform))
+        throw await this.nodePtyUnavailableError(error)
       }
       throw error
     }
diff --git a/src/shared/runtime-capability-degradation.ts b/src/shared/runtime-capability-degradation.ts
index 05620ac9942..977cd68737f 100644
--- a/src/shared/runtime-capability-degradation.ts
+++ b/src/shared/runtime-capability-degradation.ts
@@ -20,8 +20,11 @@ export type RuntimeBrowserUnavailableReason =
  */
 export type RuntimeTerminalUnavailableReason =
   | 'dependency_missing'
+  | 'toolchain_missing'
   | 'libc_floor'
+  | 'shared_library_missing'
   | 'abi_mismatch'
+  | 'arch_mismatch'
   | 'load_failed'
   | 'load_crashed'
   | 'spawn_helper_missing'
@@ -43,10 +46,16 @@ export type RuntimeDegradation = {
 const TERMINAL_UNAVAILABLE_MESSAGES: Record<RuntimeTerminalUnavailableReason, string> = {
   dependency_missing:
     'Terminals are unavailable on this host: node-pty has no native binary for this platform. Install or rebuild it, or deploy a build that ships a prebuilt binary for this platform.',
+  toolchain_missing:
+    'Terminals are unavailable on this host: node-pty has no prebuilt binary for Linux and this host is missing the C/C++ build tools needed to compile one. Install them, then reconnect.',
   libc_floor:
     "This host's node-pty binary was built against a newer C library than the host provides, so the dynamic loader refuses it. Rebuild node-pty on this host, or deploy a build whose prebuilt binary matches this platform's libc.",
+  shared_library_missing:
+    'Terminals are unavailable on this host: a shared library that node-pty links against is not installed, so the dynamic loader cannot open the binary. Install the named library, then reconnect.',
   abi_mismatch:
     "This host's node-pty binary was built for a different Node ABI than the running Node, so it cannot be loaded. Rebuild node-pty against this Node version.",
+  arch_mismatch:
+    "This host's node-pty binary was built for a different CPU architecture than the running Node, so the dynamic loader refuses it. Rebuild node-pty on this host, or deploy a build for this architecture.",
   load_failed: 'Terminals are unavailable on this host: node-pty failed to load.',
   load_crashed:
     'Terminals are unavailable on this host: loading node-pty terminated the probe process, which means the binary is incompatible with this host rather than merely missing.',
diff --git a/src/shared/terminal-unavailable-cause.ts b/src/shared/terminal-unavailable-cause.ts
new file mode 100644
index 00000000000..2671941da30
--- /dev/null
+++ b/src/shared/terminal-unavailable-cause.ts
@@ -0,0 +1,73 @@
+/**
+ * The machine-readable half of "remote terminals are unavailable".
+ *
+ * Why this exists: the fault is proved on the relay, at spawn time, and the machinery
+ * that can repair it (`repairInstalledNativeDeps`) lives on the client, at connect time.
+ * Until now the only thing that crossed the wire was prose, so the client could not tell
+ * a rebuildable ABI flip from a host whose glibc will never satisfy the binary — and the
+ * message had to hedge across all of them.
+ *
+ * Wire compatibility (docs/reference/remote-wire-compatibility.md): this rides as the
+ * optional `data` of an existing JSON-RPC error, so it is Rule 1 — additive. A client
+ * that does not read it still renders `error.message`, which is exactly today's
+ * behaviour, so no capability negotiation is needed.
+ *
+ * `repairable` is the field with teeth: it is true only for a fault that was PROVED and
+ * that rebuilding node-pty on the host actually fixes. An `unverifiable` cause is never
+ * repairable — a probe that did not answer must not trigger a destructive repair, which
+ * is the #14830 lesson recorded in docs/reference/ssh-execution-boundary.md.
+ */
+import { z } from 'zod'
+import { TERMINAL_UNAVAILABLE_ERROR_CODE } from './runtime-capability-degradation'
+
+export const TERMINAL_UNAVAILABLE_RPC_ERROR_CODE = TERMINAL_UNAVAILABLE_ERROR_CODE
+
+const TerminalUnavailableHostSchema = z
+  .object({
+    platform: z.string().min(1).max(32),
+    arch: z.string().min(1).max(32),
+    libc: z.enum(['glibc', 'musl', 'none']),
+    /** Absent, not null, when the host reports no version — see native-host-abi.ts. */
+    glibcVersion: z.string().min(1).max(32).optional(),
+    /** `NODE_MODULE_VERSION` the remote runtime accepts. */
+    nodeAbi: z.string().min(1).max(16),
+    nodeVersion: z.string().min(1).max(32)
+  })
+  .strict()
+
+export const TerminalUnavailableCauseSchema = z
+  .object({
+    /** `blocked` — proved. `unverifiable` — nothing answered; never act on it. */
+    status: z.enum(['blocked', 'unverifiable']),
+    /**
+     * Open vocabulary, deliberately `string` rather than an enum: a newer relay may name a
+     * reason this client has never heard of, and a strict enum would drop the whole cause
+     * (including `repairable`) rather than the one field it cannot interpret.
+     */
+    reason: z.string().min(1).max(64),
+    detail: z.string().max(400),
+    /** Proved, and rebuilding node-pty on the host is the fix. */
+    repairable: z.boolean(),
+    host: TerminalUnavailableHostSchema,
+    /** The dynamic loader's own words, when they were recovered. */
+    rawError: z.string().max(1000).optional()
+  })
+  .strict()
+
+export type TerminalUnavailableCause = z.infer<typeof TerminalUnavailableCauseSchema>
+
+/** Null for anything that does not validate; a malformed cause must never be acted on. */
+export function parseTerminalUnavailableCause(value: unknown): TerminalUnavailableCause | null {
+  const parsed = TerminalUnavailableCauseSchema.safeParse(value)
+  return parsed.success ? parsed.data : null
+}
+
+/**
+ * Whether the client may rewrite the host's `node_modules` on the strength of this cause.
+ *
+ * Deliberately re-derived here rather than trusting `repairable` alone: the flag arrives
+ * from a peer, and only a `blocked` status is evidence of anything.
+ */
+export function mayRepairFromCause(cause: TerminalUnavailableCause | null): boolean {
+  return cause !== null && cause.status === 'blocked' && cause.repairable
+}

From bda6751da8ad44c9f265a587a26bb5836eafa4ce Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:38:29 -0700
Subject: [PATCH 10/92] fix(ssh): reclaim a fenced agent-session spawn from
 host inventory (#17976)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A pty.spawn whose response is lost leaves the relay holding a live agent
PTY it deliberately will not reap (the stale-spawn killer is skipped for
agentSessionCreateOperationId spawns), while the client memoizes the
rejection for 24h and never asks again — an agent burning tokens with no
way back.

The client already names what it launched: the deterministic
preAllocatedHandle is exported as ORCA_TERMINAL_HANDLE and published back
in pty.listProcesses. Retain that identity with the fenced operation and,
on replay, reuse reconcileRemoteTerminalCreate to adopt it. Adoption only:
never spawns, never kills, and any unverifiable or ambiguous inventory
replays the original failure unchanged.

Scope the reconcile listing to the owning host so an unreachable relay
throws instead of silently reading as absence.

Refs #17929
---
 ...ca-runtime-agent-session-operation.test.ts | 119 ++++++++++++++++++
 .../orca-runtime-create-agent-session.ts      |  47 ++++++-
 ...a-runtime-terminal-create-deduplication.ts |   7 +-
 .../runtime/runtime-terminal-contracts.ts     |  10 ++
 4 files changed, 179 insertions(+), 4 deletions(-)

diff --git a/src/main/runtime/orca-runtime-agent-session-operation.test.ts b/src/main/runtime/orca-runtime-agent-session-operation.test.ts
index 9199e46783a..ac64dfaa6b7 100644
--- a/src/main/runtime/orca-runtime-agent-session-operation.test.ts
+++ b/src/main/runtime/orca-runtime-agent-session-operation.test.ts
@@ -66,6 +66,50 @@ function createRuntime(provider?: {
   return runtime
 }
 
+// Why: an SSH-backed workspace whose spawn response was lost — the leak in #17929.
+function installRemoteReclaimHarness(
+  runtime: OrcaRuntimeService,
+  listProcesses: ReturnType<typeof vi.fn>
+): void {
+  const handleByPtyId = new Map<string, string>()
+  Object.assign(runtime, {
+    ptyController: { listProcesses },
+    resolveTerminalWorkspaceLaunchScope: vi.fn(async () => ({
+      id: 'worktree-1',
+      path: '/remote/worktree-1',
+      connectionId: 'ssh-1'
+    })),
+    executionOwnerSupportsAgentSessionOperation: vi.fn(async () => true),
+    markWorkspaceTrustedForAgent: vi.fn(async () => {}),
+    adoptControllerTerminalHandle: vi.fn((ptyId: string, handle: string) => {
+      handleByPtyId.set(ptyId, handle)
+    }),
+    recordPtyWorktree: vi.fn((ptyId: string, worktreeId: string, state: { title?: string }) => ({
+      ptyId,
+      worktreeId,
+      title: state.title ?? null
+    })),
+    issuePtyHandle: vi.fn((pty: { ptyId: string }) => handleByPtyId.get(pty.ptyId))
+  })
+}
+
+async function fenceRemoteAgentSessionSpawn(runtime: OrcaRuntimeService) {
+  const failure = Object.assign(new Error('execution_owner_unavailable'), {
+    agentSessionOperationOutcome: 'unknown' as const
+  })
+  const createTerminal = vi
+    .spyOn(runtime, 'createTerminal')
+    .mockImplementation(async (_worktree, opts) => {
+      opts?.onPtySpawnCommitted?.()
+      throw failure
+    })
+  const id = operationId()
+  await expect(runtime.createAgentSession(request(id), { clientId: 'device-a' })).rejects.toThrow(
+    failure.message
+  )
+  return { createTerminal, failure, id }
+}
+
 describe('agent-session create operation ledger', () => {
   it('selects legacy before trust, spawn, or ledger state for an old daemon', async () => {
     const provider = {
@@ -291,6 +335,81 @@ describe('agent-session create operation ledger', () => {
     expect(createTerminal).toHaveBeenCalledOnce()
   })
 
+  it('reclaims a fenced remote spawn the host is still holding', async () => {
+    const runtime = createRuntime()
+    const listProcesses = vi.fn(async () => [] as never[])
+    installRemoteReclaimHarness(runtime, listProcesses)
+    const { createTerminal, id, failure } = await fenceRemoteAgentSessionSpawn(runtime)
+    const orphanHandle = createTerminal.mock.calls[0]?.[1]?.preAllocatedHandle as string
+    listProcesses.mockResolvedValue([
+      {
+        id: 'ssh-1:pty2:e:1',
+        cwd: '/remote/worktree-1',
+        title: 'codex',
+        worktreeId: 'worktree-1',
+        terminalHandle: orphanHandle
+      }
+    ] as never)
+
+    await expect(
+      runtime.createAgentSession(request(id), { clientId: 'device-a' })
+    ).resolves.toMatchObject({
+      disposition: 'replayed',
+      terminal: { handle: orphanHandle, ptyId: 'ssh-1:pty2:e:1', worktreeId: 'worktree-1' }
+    })
+    expect(listProcesses).toHaveBeenCalledWith('ssh-1')
+    expect(createTerminal).toHaveBeenCalledOnce()
+    expect(failure.message).toBe('execution_owner_unavailable')
+  })
+
+  it('replays the fenced failure when host inventory proves the spawn is gone', async () => {
+    const runtime = createRuntime()
+    const listProcesses = vi.fn(async () => [] as never[])
+    installRemoteReclaimHarness(runtime, listProcesses)
+    const { createTerminal, id, failure } = await fenceRemoteAgentSessionSpawn(runtime)
+
+    await expect(runtime.createAgentSession(request(id), { clientId: 'device-a' })).rejects.toThrow(
+      failure.message
+    )
+    expect(listProcesses).toHaveBeenCalledWith('ssh-1')
+    expect(createTerminal).toHaveBeenCalledOnce()
+  })
+
+  it('replays the fenced failure when the remote host cannot answer', async () => {
+    const runtime = createRuntime()
+    const listProcesses = vi.fn(async () => {
+      throw new Error('relay offline')
+    })
+    installRemoteReclaimHarness(runtime, listProcesses)
+    const { createTerminal, id, failure } = await fenceRemoteAgentSessionSpawn(runtime)
+
+    await expect(runtime.createAgentSession(request(id), { clientId: 'device-a' })).rejects.toThrow(
+      failure.message
+    )
+    expect(createTerminal).toHaveBeenCalledOnce()
+  })
+
+  it('refuses to adopt a same-handle PTY that belongs to another workspace', async () => {
+    const runtime = createRuntime()
+    const listProcesses = vi.fn(async () => [] as never[])
+    installRemoteReclaimHarness(runtime, listProcesses)
+    const { createTerminal, id, failure } = await fenceRemoteAgentSessionSpawn(runtime)
+    listProcesses.mockResolvedValue([
+      {
+        id: 'ssh-1:pty2:e:9',
+        cwd: '/remote/worktree-2',
+        title: 'codex',
+        worktreeId: 'worktree-2',
+        terminalHandle: createTerminal.mock.calls[0]?.[1]?.preAllocatedHandle
+      }
+    ] as never)
+
+    await expect(runtime.createAgentSession(request(id), { clientId: 'device-a' })).rejects.toThrow(
+      failure.message
+    )
+    expect(createTerminal).toHaveBeenCalledOnce()
+  })
+
   it('retains a replay fence when the provider reports an unknown spawn outcome', async () => {
     const runtime = createRuntime()
     const failure = Object.assign(new Error('cleanup could not prove exit'), {
diff --git a/src/main/runtime/orca-runtime-create-agent-session.ts b/src/main/runtime/orca-runtime-create-agent-session.ts
index 03d187b717e..db2b71a0adc 100644
--- a/src/main/runtime/orca-runtime-create-agent-session.ts
+++ b/src/main/runtime/orca-runtime-create-agent-session.ts
@@ -24,6 +24,10 @@ import {
 } from '../../shared/tui-agent-launch-defaults'
 import { buildAgentDraftLaunchPlan, buildAgentStartupPlan } from '../../shared/tui-agent-startup'
 import type { RuntimeTerminalCreate } from '../../shared/runtime-types'
+import type {
+  AgentSessionCreateOperation,
+  AgentSessionCreateReclaimIdentity
+} from './runtime-terminal-contracts'
 import {
   deterministicAgentSessionUuid,
   isAgentSessionOperationOutcomeUnknown
@@ -72,7 +76,16 @@ export class OrcaRuntimeWithCreateAgentSession extends OrcaRuntimeWithGetAgentSe
       if (existing.fingerprint !== requestFingerprint) {
         throw new Error('agent_session_operation_conflict')
       }
-      const replayed = await existing.promise
+      let replayed: RuntimeCreateAgentSessionResult
+      try {
+        replayed = await existing.promise
+      } catch (error) {
+        const reclaimed = await this.reclaimFencedAgentSessionSpawn(existing.reclaim.identity)
+        if (!reclaimed) {
+          throw error
+        }
+        return { terminal: reclaimed, disposition: 'replayed' }
+      }
       return { ...replayed, disposition: 'replayed' }
     }
     if (now - operationTimestamp > AGENT_SESSION_MAX_NEW_OPERATION_AGE_MS) {
@@ -96,6 +109,7 @@ export class OrcaRuntimeWithCreateAgentSession extends OrcaRuntimeWithGetAgentSe
       throw new Error('agent_session_operation_capacity')
     }
     let retainReplayFence = false
+    const reclaim: AgentSessionCreateOperation['reclaim'] = {}
     const operation = (async (): Promise<RuntimeCreateAgentSessionResult> => {
       // Why: reserve the client operation before any async preflight so concurrent retries cannot
       // both observe an empty ledger and reach the execution owner independently.
@@ -187,6 +201,13 @@ export class OrcaRuntimeWithCreateAgentSession extends OrcaRuntimeWithGetAgentSe
       const operationLeafId =
         request.placement?.leafId ?? deterministicAgentSessionUuid(`${executionOperationId}:leaf`)
       const operationHandle = `term_${deterministicAgentSessionUuid(`${executionOperationId}:handle`)}`
+      // Why: recorded before dispatch — this handle is exported into the PTY as
+      // ORCA_TERMINAL_HANDLE, so it is the only name a lost spawn can be re-found by.
+      reclaim.identity = {
+        worktreeId: workspace.id,
+        connectionId: workspace.connectionId ?? null,
+        terminalHandle: operationHandle
+      }
       try {
         terminal = await this.createTerminal(`id:${workspace.id}`, {
           command: startup.launchCommand,
@@ -216,7 +237,8 @@ export class OrcaRuntimeWithCreateAgentSession extends OrcaRuntimeWithGetAgentSe
     })()
     this.agentSessionCreateOperations.set(operationKey, {
       fingerprint: requestFingerprint,
-      promise: operation
+      promise: operation,
+      reclaim
     })
     const expireOperation = (): void => {
       const expiresAt = Math.max(now, operationTimestamp) + AGENT_SESSION_MAX_NEW_OPERATION_AGE_MS
@@ -245,4 +267,25 @@ export class OrcaRuntimeWithCreateAgentSession extends OrcaRuntimeWithGetAgentSe
       throw error
     }
   }
+
+  // Why: the host may still hold the PTY this operation launched. Adoption-only —
+  // this never spawns and never kills, so an unreachable or silent host just replays
+  // the original failure instead of authorising anything.
+  private async reclaimFencedAgentSessionSpawn(
+    identity: AgentSessionCreateReclaimIdentity | undefined
+  ): Promise<RuntimeTerminalCreate | null> {
+    if (!identity) {
+      return null
+    }
+    try {
+      return await this.reconcileRemoteTerminalCreate(
+        identity.worktreeId,
+        identity.terminalHandle,
+        identity.connectionId
+      )
+    } catch {
+      // Unverifiable or ambiguous inventory is never evidence the PTY exited.
+      return null
+    }
+  }
 }
diff --git a/src/main/runtime/orca-runtime-terminal-create-deduplication.ts b/src/main/runtime/orca-runtime-terminal-create-deduplication.ts
index 6d689ba7e3f..f852e060936 100644
--- a/src/main/runtime/orca-runtime-terminal-create-deduplication.ts
+++ b/src/main/runtime/orca-runtime-terminal-create-deduplication.ts
@@ -52,13 +52,16 @@ export class OrcaRuntimeWithTerminalCreateDeduplication extends OrcaRuntimeWithC
 
   protected async reconcileRemoteTerminalCreate(
     worktreeId: string,
-    terminalHandle: string
+    terminalHandle: string,
+    // Why: an aggregate listing drops a non-answering SSH host silently, which would read as
+    // absence. Scoping to the owning host makes an unreachable relay throw instead.
+    connectionId?: string | null
   ): Promise<RuntimeTerminalCreate | null> {
     if (!this.ptyController?.listProcesses) {
       throw new Error('runtime_unavailable')
     }
     const listed = await withTimeoutResult(
-      this.ptyController.listProcesses(),
+      this.ptyController.listProcesses(connectionId),
       PTY_CONTROLLER_LIST_TIMEOUT_MS
     )
     if (!listed.ok) {
diff --git a/src/main/runtime/runtime-terminal-contracts.ts b/src/main/runtime/runtime-terminal-contracts.ts
index be6767d65c6..3ea47fd6598 100644
--- a/src/main/runtime/runtime-terminal-contracts.ts
+++ b/src/main/runtime/runtime-terminal-contracts.ts
@@ -54,9 +54,19 @@ export type TerminalCreateOptions = {
   deferMobileSessionPublish?: boolean
 }
 
+/** Identity a fenced spawn can be re-found by in the execution host's own inventory. */
+export type AgentSessionCreateReclaimIdentity = {
+  worktreeId: string
+  connectionId: string | null
+  terminalHandle: string
+}
+
 export type AgentSessionCreateOperation = {
   fingerprint: string
   promise: Promise<RuntimeCreateAgentSessionResult>
+  // Why: a lost pty.spawn response leaves the host holding a live PTY the client
+  // never named; this is the name it was launched under, so a replay can adopt it.
+  reclaim: { identity?: AgentSessionCreateReclaimIdentity }
 }
 
 export type PtyForegroundAgentRefresh = {

From da1849c2509cf0cb6fe0d7a71b98cb4ee2553a11 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:38:53 -0700
Subject: [PATCH 11/92] fix(runtime): scope create-dedupe inventory to the
 owning host (#17983)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(ssh): reclaim a fenced agent-session spawn from host inventory

A pty.spawn whose response is lost leaves the relay holding a live agent
PTY it deliberately will not reap (the stale-spawn killer is skipped for
agentSessionCreateOperationId spawns), while the client memoizes the
rejection for 24h and never asks again — an agent burning tokens with no
way back.

The client already names what it launched: the deterministic
preAllocatedHandle is exported as ORCA_TERMINAL_HANDLE and published back
in pty.listProcesses. Retain that identity with the fenced operation and,
on replay, reuse reconcileRemoteTerminalCreate to adopt it. Adoption only:
never spawns, never kills, and any unverifiable or ambiguous inventory
replays the original failure unchanged.

Scope the reconcile listing to the owning host so an unreachable relay
throws instead of silently reading as absence.

Refs #17929

* fix(terminal): scope terminal.create reconcile inventory to the owning host

An SSH host that cannot answer is dropped silently from the aggregate PTY
listing, so a reconciling terminal.create retry read that as proof of absence
and spawned a duplicate shell over live remote work. Pass the workspace's
connectionId so an unreachable relay throws runtime_unavailable instead;
local and folder workspaces keep the aggregate listing.
---
 ...a-runtime-terminal-create-deduplication.ts |   9 +-
 ...untime-terminal-create-idempotency.test.ts | 131 +++++++++++++++++-
 2 files changed, 137 insertions(+), 3 deletions(-)

diff --git a/src/main/runtime/orca-runtime-terminal-create-deduplication.ts b/src/main/runtime/orca-runtime-terminal-create-deduplication.ts
index f852e060936..dab41a53ced 100644
--- a/src/main/runtime/orca-runtime-terminal-create-deduplication.ts
+++ b/src/main/runtime/orca-runtime-terminal-create-deduplication.ts
@@ -40,7 +40,14 @@ export class OrcaRuntimeWithTerminalCreateDeduplication extends OrcaRuntimeWithC
       clientMutationId,
       async () => {
         if (reconcileExisting) {
-          const adopted = await this.reconcileRemoteTerminalCreate(workspace.id, preAllocatedHandle)
+          const adopted = await this.reconcileRemoteTerminalCreate(
+            workspace.id,
+            preAllocatedHandle,
+            // Why: an unreachable SSH host vanishes from the aggregate listing, which would read
+            // as absence and respawn over live remote work. Local/folder workspaces have no
+            // connection and keep the aggregate listing.
+            workspace.connectionId ?? undefined
+          )
           if (adopted) {
             return adopted
           }
diff --git a/src/main/runtime/orca-runtime-terminal-create-idempotency.test.ts b/src/main/runtime/orca-runtime-terminal-create-idempotency.test.ts
index 9afafb4272f..d1552250a18 100644
--- a/src/main/runtime/orca-runtime-terminal-create-idempotency.test.ts
+++ b/src/main/runtime/orca-runtime-terminal-create-idempotency.test.ts
@@ -10,14 +10,18 @@ type CreateRun = (
   preAllocatedHandle: string | undefined
 ) => Promise<RuntimeTerminalCreate>
 
-function createRuntimeForDedupe(listProcesses = vi.fn(async (): Promise<PtyProcessInfo[]> => [])) {
+function createRuntimeForDedupe(
+  listProcesses = vi.fn(async (): Promise<PtyProcessInfo[]> => []),
+  scope: { connectionId?: string | null } = {}
+) {
   const handleByPtyId = new Map<string, string>()
   const runtime = Object.create(OrcaRuntimeService.prototype) as OrcaRuntimeService
   Object.assign(runtime, {
     terminalCreateIdempotency: new RemoteRuntimeTerminalCreateIdempotency(),
     ptyController: { listProcesses },
     resolveTerminalWorkspaceLaunchScope: vi.fn(async (selector: string) => ({
-      id: selector.startsWith('id:') ? selector.slice(3) : selector
+      id: selector.startsWith('id:') ? selector.slice(3) : selector,
+      ...scope
     })),
     adoptControllerTerminalHandle: vi.fn((ptyId: string, handle: string) => {
       handleByPtyId.set(ptyId, handle)
@@ -253,3 +257,126 @@ describe('terminal create idempotency', () => {
     ).resolves.toEqual(createdTerminal('terminal-2'))
   })
 })
+
+// Mirrors listProcessesFromRuntimeController: `undefined` aggregates every provider and
+// silently drops a non-answering SSH host, `null` is local-only, a string is host-scoped
+// and rethrows the host's failure.
+function createHostScopedInventory(hosts: {
+  local?: PtyProcessInfo[]
+  ssh?: Record<string, PtyProcessInfo[] | 'unreachable'>
+}) {
+  const local = hosts.local ?? []
+  const ssh = hosts.ssh ?? {}
+  return vi.fn(async (connectionId?: string | null): Promise<PtyProcessInfo[]> => {
+    if (connectionId === null) {
+      return local
+    }
+    if (typeof connectionId === 'string') {
+      const host = ssh[connectionId]
+      if (host === undefined || host === 'unreachable') {
+        throw new Error('ssh relay did not answer')
+      }
+      return host
+    }
+    return [
+      ...local,
+      ...Object.values(ssh)
+        .filter((sessions): sessions is PtyProcessInfo[] => sessions !== 'unreachable')
+        .flat()
+    ]
+  })
+}
+
+function remoteSession(handle: string | undefined, worktreeId = 'worktree-1'): PtyProcessInfo {
+  return {
+    id: `${worktreeId}@@session-a`,
+    cwd: '/remote/workspace',
+    title: 'claude',
+    worktreeId,
+    ...(handle ? { terminalHandle: handle } : {})
+  }
+}
+
+describe('terminal create reconciliation scopes inventory to the owning execution host', () => {
+  it('reports runtime_unavailable instead of spawning a duplicate when the owning relay cannot answer', async () => {
+    const listProcesses = createHostScopedInventory({
+      // The first create's shell is alive on ssh-1; the relay simply cannot be asked about it.
+      ssh: { 'ssh-1': 'unreachable', 'ssh-2': [remoteSession(undefined, 'worktree-9')] }
+    })
+    const { runtime } = createRuntimeForDedupe(listProcesses, { connectionId: 'ssh-1' })
+    const create = vi.fn<CreateRun>()
+
+    await expect(
+      runtime.dedupeTerminalCreate('device-a', 'id:worktree-1', 'mutation-1', true, create)
+    ).rejects.toThrow('runtime_unavailable')
+    expect(create).not.toHaveBeenCalled()
+    expect(listProcesses).toHaveBeenCalledWith('ssh-1')
+  })
+
+  it('adopts the original PTY from the owning host listing', async () => {
+    const handle = deriveRemoteRuntimeTerminalCreateHandle('device-a', 'worktree-1', 'mutation-1')
+    const listProcesses = createHostScopedInventory({ ssh: { 'ssh-1': [remoteSession(handle)] } })
+    const { runtime } = createRuntimeForDedupe(listProcesses, { connectionId: 'ssh-1' })
+    const create = vi.fn<CreateRun>()
+
+    await expect(
+      runtime.dedupeTerminalCreate('device-a', 'id:worktree-1', 'mutation-1', true, create)
+    ).resolves.toMatchObject({ handle, ptyId: 'worktree-1@@session-a' })
+    expect(create).not.toHaveBeenCalled()
+  })
+
+  it('still creates a fresh terminal when the owning host authoritatively lacks the handle', async () => {
+    const listProcesses = createHostScopedInventory({
+      ssh: { 'ssh-1': [remoteSession(undefined, 'worktree-other')] }
+    })
+    const { runtime } = createRuntimeForDedupe(listProcesses, { connectionId: 'ssh-1' })
+    const create = vi.fn<CreateRun>(async (_selector, handle) =>
+      createdTerminal(handle ?? 'missing')
+    )
+
+    const result = await runtime.dedupeTerminalCreate(
+      'device-a',
+      'id:worktree-1',
+      'mutation-1',
+      true,
+      create
+    )
+
+    expect(create).toHaveBeenCalledWith('id:worktree-1', result.handle)
+    expect(listProcesses).toHaveBeenCalledWith('ssh-1')
+  })
+
+  it('keeps the aggregate listing for a local workspace with no connection', async () => {
+    const handle = deriveRemoteRuntimeTerminalCreateHandle('device-a', 'worktree-1', 'mutation-1')
+    const listProcesses = createHostScopedInventory({
+      local: [{ ...remoteSession(handle), cwd: '/local/workspace', title: 'pwsh' }]
+    })
+    const { runtime } = createRuntimeForDedupe(listProcesses, { connectionId: null })
+    const create = vi.fn<CreateRun>()
+
+    await expect(
+      runtime.dedupeTerminalCreate('device-a', 'id:worktree-1', 'mutation-1', true, create)
+    ).resolves.toMatchObject({ handle, ptyId: 'worktree-1@@session-a' })
+    expect(listProcesses).toHaveBeenCalledWith(undefined)
+    expect(create).not.toHaveBeenCalled()
+  })
+
+  it('keeps the aggregate listing for a folder workspace with no connection', async () => {
+    const listProcesses = createHostScopedInventory({})
+    const { runtime } = createRuntimeForDedupe(listProcesses, { connectionId: null })
+    const create = vi.fn<CreateRun>(async (_selector, handle) =>
+      createdTerminal(handle ?? 'missing', 'folder:folder-1')
+    )
+
+    const result = await runtime.dedupeTerminalCreate(
+      'device-a',
+      'id:folder:folder-1',
+      'mutation-1',
+      true,
+      create
+    )
+
+    expect(create).toHaveBeenCalledWith('id:folder:folder-1', result.handle)
+    expect(listProcesses).toHaveBeenCalledWith(undefined)
+  })
+})

From 7ba832c7ba7fc3175dda3cf0db403c9898de5e9f Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:43:14 -0700
Subject: [PATCH 12/92] fix(runtime): scope both reconcile call sites to the
 owning host uniformly (#18004)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(ssh): reclaim a fenced agent-session spawn from host inventory

A pty.spawn whose response is lost leaves the relay holding a live agent
PTY it deliberately will not reap (the stale-spawn killer is skipped for
agentSessionCreateOperationId spawns), while the client memoizes the
rejection for 24h and never asks again — an agent burning tokens with no
way back.

The client already names what it launched: the deterministic
preAllocatedHandle is exported as ORCA_TERMINAL_HANDLE and published back
in pty.listProcesses. Retain that identity with the fenced operation and,
on replay, reuse reconcileRemoteTerminalCreate to adopt it. Adoption only:
never spawns, never kills, and any unverifiable or ambiguous inventory
replays the original failure unchanged.

Scope the reconcile listing to the owning host so an unreachable relay
throws instead of silently reading as absence.

Refs #17929

* fix(terminal): scope terminal.create reconcile inventory to the owning host

An SSH host that cannot answer is dropped silently from the aggregate PTY
listing, so a reconciling terminal.create retry read that as proof of absence
and spawned a duplicate shell over live remote work. Pass the workspace's
connectionId so an unreachable relay throws runtime_unavailable instead;
local and folder workspaces keep the aggregate listing.

* fix(runtime): scope both reconcile call sites to the owning host uniformly

Both create-dedupe and fenced-spawn reclaim now pass the workspace's own
connection (null for local/folder), so neither falls back to the aggregate
listing that silently drops a non-answering SSH provider.
---
 .../runtime/orca-runtime-terminal-create-deduplication.ts | 2 +-
 .../orca-runtime-terminal-create-idempotency.test.ts      | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/main/runtime/orca-runtime-terminal-create-deduplication.ts b/src/main/runtime/orca-runtime-terminal-create-deduplication.ts
index dab41a53ced..a1743a855ce 100644
--- a/src/main/runtime/orca-runtime-terminal-create-deduplication.ts
+++ b/src/main/runtime/orca-runtime-terminal-create-deduplication.ts
@@ -46,7 +46,7 @@ export class OrcaRuntimeWithTerminalCreateDeduplication extends OrcaRuntimeWithC
             // Why: an unreachable SSH host vanishes from the aggregate listing, which would read
             // as absence and respawn over live remote work. Local/folder workspaces have no
             // connection and keep the aggregate listing.
-            workspace.connectionId ?? undefined
+            workspace.connectionId ?? null
           )
           if (adopted) {
             return adopted
diff --git a/src/main/runtime/orca-runtime-terminal-create-idempotency.test.ts b/src/main/runtime/orca-runtime-terminal-create-idempotency.test.ts
index d1552250a18..f8f8600dc1f 100644
--- a/src/main/runtime/orca-runtime-terminal-create-idempotency.test.ts
+++ b/src/main/runtime/orca-runtime-terminal-create-idempotency.test.ts
@@ -346,7 +346,7 @@ describe('terminal create reconciliation scopes inventory to the owning executio
     expect(listProcesses).toHaveBeenCalledWith('ssh-1')
   })
 
-  it('keeps the aggregate listing for a local workspace with no connection', async () => {
+  it('scopes the listing to the local host for a workspace with no connection', async () => {
     const handle = deriveRemoteRuntimeTerminalCreateHandle('device-a', 'worktree-1', 'mutation-1')
     const listProcesses = createHostScopedInventory({
       local: [{ ...remoteSession(handle), cwd: '/local/workspace', title: 'pwsh' }]
@@ -357,11 +357,11 @@ describe('terminal create reconciliation scopes inventory to the owning executio
     await expect(
       runtime.dedupeTerminalCreate('device-a', 'id:worktree-1', 'mutation-1', true, create)
     ).resolves.toMatchObject({ handle, ptyId: 'worktree-1@@session-a' })
-    expect(listProcesses).toHaveBeenCalledWith(undefined)
+    expect(listProcesses).toHaveBeenCalledWith(null)
     expect(create).not.toHaveBeenCalled()
   })
 
-  it('keeps the aggregate listing for a folder workspace with no connection', async () => {
+  it('scopes the listing to the local host for a folder workspace with no connection', async () => {
     const listProcesses = createHostScopedInventory({})
     const { runtime } = createRuntimeForDedupe(listProcesses, { connectionId: null })
     const create = vi.fn<CreateRun>(async (_selector, handle) =>
@@ -377,6 +377,6 @@ describe('terminal create reconciliation scopes inventory to the owning executio
     )
 
     expect(create).toHaveBeenCalledWith('id:folder:folder-1', result.handle)
-    expect(listProcesses).toHaveBeenCalledWith(undefined)
+    expect(listProcesses).toHaveBeenCalledWith(null)
   })
 })

From 4e35e058fcf091a0875dd81b2cd750bdf30d7b9f Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:43:38 -0700
Subject: [PATCH 13/92] fix(remote): stop unlabelled inventories and replayed
 rows authorising destruction (#17981)

* fix(remote): stop one unlabelled inventory tombstoning a live worktree mirror

#11495 Step C. `buildMissingWebSessionTabsRemovals` synthesised a `removed: true`
tombstone -- emptying a worktree's entire mirror -- for any tracked worktree
absent from a single inventory frame, without ever consulting the host's own
authority label. `mirror-settle` already refuses to settle an *empty* inventory
that is not `authoritative` (#16414, #16546); the strictly more destructive
action was ungated.

An inventory the host labels `authoritative` carries a complete PTY census, so
one omission is host attestation and removal stays immediate. An unlabelled
inventory is a degraded or version-skewed census: `unverifiable`, not `exited`.
It must now repeat before it can destroy anything, reusing the two-observation
shape of `confirmSurfaceInventoryAbsence`. A legacy host that never negotiates
the capability still converges after two rounds, so ghost rows cannot outlive
the fence.

The 14 tests from #13621 that blocked this were all written before the
`authoritative` label existed (#13621 landed 2026-08-11; the capability landed
2026-08-26 in #16546). #13621's own summary says "Reconcile each resumed host
from an authoritative inventory, including removals", so their fixtures are
retargeted to say so explicitly rather than weakened.

Refs #11495

* fix(agent-status): stop a reconnect replay restamping the staleness clock

#15317 correctness half. `receivedAt` was doing two jobs: delivery order and
evidence age. A relay reconnect replays every cached row, and `receivedAt` must
restamp to clear the connection watermark that `clearStatusEntriesForConnection`
raises -- so a pane stuck at `working` had its 30-minute deadline pushed out by
another 30 minutes on every reconnect. The TTL was never reached, which is why
this read as a tuning question.

Two clocks, not one rewritten clock:

- `receivedAt` is untouched. The transient-clear watermark and the four `<`
  ordering drops (`agent-status-event-applicator`, `agent-status-live-entry-builder`,
  `agent-status-cleanup-actions`) keep working unchanged. Restamping a replay with
  its original time would have made it `<= watermark` and dropped it outright,
  leaving the pane with no row at all.
- `evidenceObservedAt` is new, optional, and read only by the staleness
  comparison (`isFreshNonDoneAgentStatus`, `isExplicitAgentStatusFresh`, the
  freshness scheduler). Main holds it per pane across the transport clear -- the
  clear deletes the row on purpose, but the *age* of evidence a later replay
  restates is not a claim about the pane. Absent means "no separate observation",
  and every consumer falls back to `receivedAt`/`updatedAt`, so old hosts and old
  rows behave exactly as today.

Behaviour: a genuinely active pane keeps stamping the observation clock from its
real events, so it stays `working` across a reconnect. A pane whose relay
restarted replays nothing and still falls through to title evidence. A torn-down
pane drops its remembered clock in `clearPaneState`, so a reused pane key cannot
inherit one.

`AGENT_STATUS_STALE_AFTER_MS` is deliberately unchanged -- the window length
remains a product decision.

Refs #15317
---
 .../server-replay-evidence-clock.test.ts      | 102 +++++++++
 src/main/agent-hooks/server/server-state.ts   |   4 +
 .../server/server-status-application.ts       |  31 +++
 .../agent-hooks/server/server-tab-cleanup.ts  |   3 +
 src/main/agent-hooks/server/server-types.ts   |   5 +
 src/main/startup/main-window-agent-status.ts  |   3 +
 .../agent-status-event-applicator.ts          |   3 +
 .../lib/agent-status-evidence-clock.test.ts   |  44 ++++
 src/renderer/src/lib/pane-agent-evidence.ts   |   7 +-
 ...sion-mirror-settle-receipt-frames.test.tsx |   3 +-
 ...on-tabs-sync-visibility-collision.test.tsx |  21 +-
 ...ssion-tabs-sync-window-visibility.test.tsx | 198 ++++++++++--------
 .../apply-final-patch.ts                      |   2 +-
 .../global-session-inventory-event.ts         |   1 +
 .../session-tabs-inventory-absence.ts         | 133 ++++++++++++
 .../runtime/web-session-tabs-sync/state.ts    |   9 +
 .../tracking-lifecycle.ts                     |   8 +
 .../runtime/web-session-tabs-sync/tracking.ts |  60 +-----
 .../visibility-resume-coordinator.ts          |   2 +
 .../visibility-resume-inventory.ts            |  12 +-
 .../src/store/slices/agent-status-contract.ts |   7 +-
 .../agent-status-freshness-scheduler.ts       |   7 +-
 .../slices/agent-status-live-entry-builder.ts |   5 +
 src/shared/agent-status-ipc-payload.ts        |   5 +
 src/shared/agent-status-types.ts              |  19 +-
 25 files changed, 520 insertions(+), 174 deletions(-)
 create mode 100644 src/main/agent-hooks/server-replay-evidence-clock.test.ts
 create mode 100644 src/renderer/src/lib/agent-status-evidence-clock.test.ts
 create mode 100644 src/renderer/src/runtime/web-session-tabs-sync/session-tabs-inventory-absence.ts

diff --git a/src/main/agent-hooks/server-replay-evidence-clock.test.ts b/src/main/agent-hooks/server-replay-evidence-clock.test.ts
new file mode 100644
index 00000000000..12475a35d64
--- /dev/null
+++ b/src/main/agent-hooks/server-replay-evidence-clock.test.ts
@@ -0,0 +1,102 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { AgentHookServer, _internals } from './server'
+import { createHookListenerState } from '../../shared/agent-hook-listener/listener-state'
+import { normalizeHookPayload } from '../../shared/agent-hook-listener'
+import type { EnrichedAgentHookEventPayload } from './server/server-types'
+import { buildBody, PANE } from './server.test-fixtures'
+
+vi.mock('../telemetry/client', () => ({ track: vi.fn() }))
+vi.mock('../telemetry/cohort-classifier', () => ({ getCohortAtEmit: () => ({}) }))
+
+const CONNECTION = 'conn-1'
+const T0 = 1_800_000_000_000
+
+function ingest(
+  server: AgentHookServer,
+  payload: Record<string, unknown>,
+  options: { isReplay?: boolean } = {}
+): void {
+  const event = normalizeHookPayload(
+    createHookListenerState(),
+    'claude',
+    buildBody(payload),
+    'production'
+  )
+  if (!event) {
+    throw new Error('normalizeHookPayload rejected a known-good Claude fixture')
+  }
+  server.ingestRemote({ ...event, ...(options.isReplay ? { isReplay: true } : {}) }, CONNECTION)
+}
+
+describe('the observation clock a relay replay must not restamp', () => {
+  let server: AgentHookServer
+  let emitted: EnrichedAgentHookEventPayload[]
+
+  beforeEach(() => {
+    _internals.resetCachesForTests()
+    vi.useFakeTimers()
+    vi.setSystemTime(T0)
+    server = new AgentHookServer()
+    emitted = []
+    server.setListener((payload) => {
+      emitted.push(payload)
+    })
+  })
+
+  afterEach(() => {
+    server.setListener(null)
+    vi.useRealTimers()
+    vi.restoreAllMocks()
+  })
+
+  const lastForPane = (): EnrichedAgentHookEventPayload =>
+    emitted.toReversed().find((event) => event.paneKey === PANE)!
+
+  it('holds the observation time across a reconnect replay while delivery order advances', () => {
+    ingest(server, { hook_event_name: 'UserPromptSubmit', prompt: 'do the thing' })
+    expect(lastForPane().evidenceObservedAt).toBe(T0)
+
+    vi.setSystemTime(T0 + 25 * 60 * 1000)
+    // A lost transport clears the row; the age of the evidence it restates is not a claim.
+    server.clearStatusEntriesForConnection(CONNECTION)
+    ingest(
+      server,
+      { hook_event_name: 'UserPromptSubmit', prompt: 'do the thing' },
+      { isReplay: true }
+    )
+
+    const replayed = lastForPane()
+    expect(replayed.payload.state).toBe('working')
+    // Delivery order must still clear the connection watermark, or the renderer drops the row.
+    expect(replayed.receivedAt).toBeGreaterThan(T0 + 25 * 60 * 1000 - 1)
+    expect(replayed.evidenceObservedAt).toBe(T0)
+  })
+
+  it('lets a live event restamp the observation time after a replay', () => {
+    ingest(server, { hook_event_name: 'UserPromptSubmit', prompt: 'do the thing' })
+    vi.setSystemTime(T0 + 25 * 60 * 1000)
+    server.clearStatusEntriesForConnection(CONNECTION)
+    ingest(
+      server,
+      { hook_event_name: 'UserPromptSubmit', prompt: 'do the thing' },
+      { isReplay: true }
+    )
+
+    vi.setSystemTime(T0 + 26 * 60 * 1000)
+    ingest(server, { hook_event_name: 'PreToolUse', tool_name: 'Edit' })
+    expect(lastForPane().evidenceObservedAt).toBe(T0 + 26 * 60 * 1000)
+  })
+
+  it('gives a torn-down pane no inherited observation time', () => {
+    ingest(server, { hook_event_name: 'UserPromptSubmit', prompt: 'do the thing' })
+    server.clearPaneState(PANE)
+
+    vi.setSystemTime(T0 + 25 * 60 * 1000)
+    ingest(
+      server,
+      { hook_event_name: 'UserPromptSubmit', prompt: 'a new session' },
+      { isReplay: true }
+    )
+    expect(lastForPane().evidenceObservedAt).toBe(T0 + 25 * 60 * 1000)
+  })
+})
diff --git a/src/main/agent-hooks/server/server-state.ts b/src/main/agent-hooks/server/server-state.ts
index 956be136ca6..7dc8125576e 100644
--- a/src/main/agent-hooks/server/server-state.ts
+++ b/src/main/agent-hooks/server/server-state.ts
@@ -97,6 +97,10 @@ export abstract class AgentHookServerState {
   protected closedAgentStatusPaneKeys = new Set<string>()
   protected restartedStatusLaunchTokenHashByPaneKey = new Map<string, string>()
   protected connectionTimestampWatermarkById = new Map<string, number>()
+  // Why: survives the row itself. A transport clear deletes the pane's status row on purpose
+  // (absence, not completion), but the *age* of the evidence a later replay restates is not a
+  // claim about the pane and must not be lost with it. Bounded like its sibling maps.
+  protected evidenceObservedAtByPaneKey = new Map<string, number>()
   // Why: skip disk writes when the JSON exactly matches the last write; guards against re-firing trailing timers when nothing changed.
   protected lastWrittenJson: string | null = null
   // Why: main is the pane authority for local/WSL/SSH panes — hook HTTP, relay, and its own
diff --git a/src/main/agent-hooks/server/server-status-application.ts b/src/main/agent-hooks/server/server-status-application.ts
index 7fbb6a96bc1..f7e1126d11b 100644
--- a/src/main/agent-hooks/server/server-status-application.ts
+++ b/src/main/agent-hooks/server/server-status-application.ts
@@ -13,6 +13,9 @@ import type { EnrichedAgentHookEventPayload } from './server-types'
 import { agentTypeToPromptSentAgentKind } from './server-status-identity'
 import { AgentHookServerStatusDisposition } from './server-status-disposition'
 
+/** Bounds the retained observation clock; eviction only degrades a replay to `now`. */
+const MAX_REMEMBERED_EVIDENCE_OBSERVATIONS = 1024
+
 export abstract class AgentHookServerStatusApplication extends AgentHookServerStatusDisposition {
   protected attachStatusTiming(
     payload: AgentHookEventPayload,
@@ -41,10 +44,38 @@ export abstract class AgentHookServerStatusApplication extends AgentHookServerSt
     return {
       ...payload,
       receivedAt: now,
+      evidenceObservedAt: this.resolveEvidenceObservedAt(payload, previous, now),
       stateStartedAt
     }
   }
 
+  /**
+   * A replay restates evidence already observed; it is not a new observation. Keeping
+   * `receivedAt` at `now` preserves delivery order (the connection-clear watermark and the
+   * renderer's four `<` drops all depend on it), while this clock records when the evidence
+   * was actually seen — so the staleness window measures age, not reconnect count.
+   * Without a remembered time the honest answer is `now`, which is today's behaviour.
+   */
+  private resolveEvidenceObservedAt(
+    payload: AgentHookEventPayload,
+    previous: EnrichedAgentHookEventPayload | undefined,
+    now: number
+  ): number {
+    const remembered =
+      previous?.evidenceObservedAt ?? this.evidenceObservedAtByPaneKey.get(payload.paneKey)
+    const observedAt = payload.isReplay === true && remembered !== undefined ? remembered : now
+    this.evidenceObservedAtByPaneKey.delete(payload.paneKey)
+    this.evidenceObservedAtByPaneKey.set(payload.paneKey, observedAt)
+    while (this.evidenceObservedAtByPaneKey.size > MAX_REMEMBERED_EVIDENCE_OBSERVATIONS) {
+      const oldest = this.evidenceObservedAtByPaneKey.keys().next().value
+      if (typeof oldest !== 'string') {
+        break
+      }
+      this.evidenceObservedAtByPaneKey.delete(oldest)
+    }
+    return observedAt
+  }
+
   protected hashPromptForTelemetryDedupe(prompt: string): string {
     return createHash('sha256')
       .update(this.promptSentHashSalt)
diff --git a/src/main/agent-hooks/server/server-tab-cleanup.ts b/src/main/agent-hooks/server/server-tab-cleanup.ts
index 4abacfc81d0..3ce2c4fce0a 100644
--- a/src/main/agent-hooks/server/server-tab-cleanup.ts
+++ b/src/main/agent-hooks/server/server-tab-cleanup.ts
@@ -94,6 +94,8 @@ export abstract class AgentHookServerTabCleanup extends AgentHookServerCleanup {
     this.currentAuthorityObservations.delete(resolvedPaneKey)
     this.promptSentDedupeByPaneKey.delete(resolvedPaneKey)
     this.restartedStatusLaunchTokenHashByPaneKey.delete(resolvedPaneKey)
+    // Why: the pane itself is gone, so its observation clock describes nothing a later pane owns.
+    this.evidenceObservedAtByPaneKey.delete(resolvedPaneKey)
     let clearedAlias = false
     for (const [legacyPaneKey, alias] of this.legacyPaneKeyAliases) {
       if (alias.stablePaneKey === resolvedPaneKey) {
@@ -105,6 +107,7 @@ export abstract class AgentHookServerTabCleanup extends AgentHookServerCleanup {
         this.currentAuthorityObservations.delete(legacyPaneKey)
         this.promptSentDedupeByPaneKey.delete(legacyPaneKey)
         this.restartedStatusLaunchTokenHashByPaneKey.delete(legacyPaneKey)
+        this.evidenceObservedAtByPaneKey.delete(legacyPaneKey)
         clearedAlias = true
       }
     }
diff --git a/src/main/agent-hooks/server/server-types.ts b/src/main/agent-hooks/server/server-types.ts
index 913bcd7067e..c151c70d34b 100644
--- a/src/main/agent-hooks/server/server-types.ts
+++ b/src/main/agent-hooks/server/server-types.ts
@@ -11,6 +11,11 @@ import type { LegacyPaneKeyAliasEntry } from '../../../shared/persisted-state-ty
 // Why: server-side enrichment — receivedAt = latest event arrival, stateStartedAt = when the current state first appeared; extra fields ride the shared map untouched (it only writes/clears).
 export type EnrichedAgentHookEventPayload = AgentHookEventPayload & {
   receivedAt: number
+  /** When this evidence was first observed, as distinct from `receivedAt`. A relay reconnect
+   *  replays cached rows and `receivedAt` must restamp to clear the connection watermark, so
+   *  only this clock can answer how old the evidence itself is. Persisted so it survives a
+   *  main restart; absent means "never separately observed" and consumers use `receivedAt`. */
+  evidenceObservedAt?: number
   stateStartedAt: number
   /** Provenance/ordering stamped by this server as the pane authority (STA-4293). Read by nothing yet. */
   observation?: AgentStatusObservation
diff --git a/src/main/startup/main-window-agent-status.ts b/src/main/startup/main-window-agent-status.ts
index 2e583830a48..3b2ba9cbd71 100644
--- a/src/main/startup/main-window-agent-status.ts
+++ b/src/main/startup/main-window-agent-status.ts
@@ -35,6 +35,7 @@ export function installMainWindowAgentStatusListeners(options: MainWindowAgentSt
       connectionId,
       payload,
       receivedAt,
+      evidenceObservedAt,
       stateStartedAt,
       launchToken,
       providerSession,
@@ -57,6 +58,7 @@ export function installMainWindowAgentStatusListeners(options: MainWindowAgentSt
           worktreeId,
           connectionId,
           receivedAt,
+          ...(evidenceObservedAt !== undefined ? { evidenceObservedAt } : {}),
           stateStartedAt,
           ...(providerSession ? { providerSession } : {}),
           ...(observation ? { observation } : {}),
@@ -88,6 +90,7 @@ export function installMainWindowAgentStatusListeners(options: MainWindowAgentSt
         worktreeId,
         connectionId,
         receivedAt,
+        ...(evidenceObservedAt !== undefined ? { evidenceObservedAt } : {}),
         stateStartedAt,
         ...(providerSession ? { providerSession } : {}),
         ...(promptInteractionKey ? { promptInteractionKey } : {}),
diff --git a/src/renderer/src/hooks/ipc-events/agent-status-event-applicator.ts b/src/renderer/src/hooks/ipc-events/agent-status-event-applicator.ts
index 4e24bf97168..c0ce037a0dc 100644
--- a/src/renderer/src/hooks/ipc-events/agent-status-event-applicator.ts
+++ b/src/renderer/src/hooks/ipc-events/agent-status-event-applicator.ts
@@ -225,6 +225,9 @@ export function createAgentStatusEventApplicator(args: {
       terminalTitle,
       timing: {
         updatedAt: data.receivedAt,
+        ...(data.evidenceObservedAt !== undefined
+          ? { evidenceObservedAt: data.evidenceObservedAt }
+          : {}),
         stateStartedAt: data.stateStartedAt
       },
       routing: {
diff --git a/src/renderer/src/lib/agent-status-evidence-clock.test.ts b/src/renderer/src/lib/agent-status-evidence-clock.test.ts
new file mode 100644
index 00000000000..9d10f72e2c1
--- /dev/null
+++ b/src/renderer/src/lib/agent-status-evidence-clock.test.ts
@@ -0,0 +1,44 @@
+import { describe, expect, it } from 'vitest'
+import {
+  AGENT_STATUS_STALE_AFTER_MS,
+  isFreshNonDoneAgentStatus,
+  type AgentStatusEntry
+} from '../../../shared/agent-status-types'
+import { isExplicitAgentStatusFresh } from './pane-agent-evidence'
+
+const NOW = new Date('2026-04-09T12:00:00.000Z').getTime()
+const OBSERVED_AT = NOW - AGENT_STATUS_STALE_AFTER_MS - 60_000
+
+function workingRow(overrides: Partial<AgentStatusEntry> = {}): AgentStatusEntry {
+  return {
+    paneKey: 'tab-1:11111111-1111-4111-8111-111111111111',
+    state: 'working',
+    prompt: 'do the thing',
+    // A reconnect replay restamps the delivery clock; that must not read as new evidence.
+    updatedAt: NOW,
+    stateStartedAt: OBSERVED_AT,
+    stateHistory: [],
+    agentType: 'claude',
+    ...overrides
+  }
+}
+
+describe('staleness measures when evidence was observed, not when it was delivered', () => {
+  it('decays a replayed row whose evidence is older than the window', () => {
+    const row = workingRow({ evidenceObservedAt: OBSERVED_AT })
+    expect(isFreshNonDoneAgentStatus(row, NOW)).toBe(false)
+    expect(isExplicitAgentStatusFresh(row, NOW, AGENT_STATUS_STALE_AFTER_MS)).toBe(false)
+  })
+
+  it('falls back to the delivery clock for a row from a host that sends no observation time', () => {
+    const row = workingRow()
+    expect(isFreshNonDoneAgentStatus(row, NOW)).toBe(true)
+    expect(isExplicitAgentStatusFresh(row, NOW, AGENT_STATUS_STALE_AFTER_MS)).toBe(true)
+  })
+
+  it('keeps a live row fresh when its evidence was just observed', () => {
+    const row = workingRow({ evidenceObservedAt: NOW })
+    expect(isFreshNonDoneAgentStatus(row, NOW)).toBe(true)
+    expect(isExplicitAgentStatusFresh(row, NOW, AGENT_STATUS_STALE_AFTER_MS)).toBe(true)
+  })
+})
diff --git a/src/renderer/src/lib/pane-agent-evidence.ts b/src/renderer/src/lib/pane-agent-evidence.ts
index cfed24bfa33..69ba64131a9 100644
--- a/src/renderer/src/lib/pane-agent-evidence.ts
+++ b/src/renderer/src/lib/pane-agent-evidence.ts
@@ -4,6 +4,7 @@ import { resolveExplicitTerminalTitleAgentType } from '../../../shared/terminal-
 import type { TuiAgent } from '../../../shared/tui-agent'
 import {
   AGENT_STATUS_STALE_AFTER_MS,
+  agentStatusEvidenceObservedAt,
   type AgentStatusEntry,
   type AgentStatusState,
   type AgentType
@@ -15,12 +16,14 @@ import {
 // (Moved here from agent-status.ts so the evidence resolvers below and the
 // aggregate consumers share one gate without an import cycle.)
 export function isExplicitAgentStatusFresh(
-  entry: Pick<AgentStatusEntry, 'updatedAt' | 'restoredUnconfirmed'>,
+  entry: Pick<AgentStatusEntry, 'updatedAt' | 'evidenceObservedAt' | 'restoredUnconfirmed'>,
   now: number,
   staleAfterMs: number
 ): boolean {
   // Why: an unconfirmed hydrated row may describe a turn that ended while no receiver was up; never fresh.
-  return entry.restoredUnconfirmed !== true && now - entry.updatedAt <= staleAfterMs
+  return (
+    entry.restoredUnconfirmed !== true && now - agentStatusEvidenceObservedAt(entry) <= staleAfterMs
+  )
 }
 
 /**
diff --git a/src/renderer/src/runtime/host-session-mirror-settle-receipt-frames.test.tsx b/src/renderer/src/runtime/host-session-mirror-settle-receipt-frames.test.tsx
index b07bce1052c..644debd3eb0 100644
--- a/src/renderer/src/runtime/host-session-mirror-settle-receipt-frames.test.tsx
+++ b/src/renderer/src/runtime/host-session-mirror-settle-receipt-frames.test.tsx
@@ -218,7 +218,8 @@ describe('a deferred visibility-resume repair patch', () => {
       type: 'snapshots',
       snapshots: [
         { ...makeHostSnapshot(WT, HOST_SURFACE_ID, HOST_PARENT_TAB_ID), snapshotVersion: 2 }
-      ]
+      ],
+      authoritative: true
     })
 
     // The tombstone repair DID reach the store: the background mirror retracted,
diff --git a/src/renderer/src/runtime/web-session-tabs-sync-visibility-collision.test.tsx b/src/renderer/src/runtime/web-session-tabs-sync-visibility-collision.test.tsx
index 693dcbb823b..d17a6898d93 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync-visibility-collision.test.tsx
+++ b/src/renderer/src/runtime/web-session-tabs-sync-visibility-collision.test.tsx
@@ -315,7 +315,8 @@ describe('useWebSessionTabsSync visibility collision recovery', () => {
     })
     await publish(findGlobalSubscription(ENV_A, 1), {
       type: 'snapshots',
-      snapshots: []
+      snapshots: [],
+      authoritative: true
     })
 
     const state = useAppStore.getState()
@@ -386,7 +387,8 @@ describe('useWebSessionTabsSync visibility collision recovery', () => {
     })
     await publish(findGlobalSubscription(ENV_A, 1), {
       type: 'snapshots',
-      snapshots: []
+      snapshots: [],
+      authoritative: true
     })
 
     const state = useAppStore.getState()
@@ -432,7 +434,8 @@ describe('useWebSessionTabsSync visibility collision recovery', () => {
     })
     await publish(findGlobalSubscription(ENV_A, 1), {
       type: 'snapshots',
-      snapshots: []
+      snapshots: [],
+      authoritative: true
     })
     const tabId = toWebTerminalSurfaceTabId('host-tab-b')
     expect(useAppStore.getState().tabsByWorktree[WORKTREE]?.map((tab) => tab.id)).toEqual([tabId])
@@ -480,7 +483,8 @@ describe('useWebSessionTabsSync visibility collision recovery', () => {
     }
     await publish(findGlobalSubscription(ENV_A, 1), {
       type: 'snapshots',
-      snapshots: [unrelatedSnapshot]
+      snapshots: [unrelatedSnapshot],
+      authoritative: true
     })
     const hostBTabId = toWebTerminalSurfaceTabId('host-tab-b')
     expect(useAppStore.getState().tabsByWorktree[WORKTREE]?.map((tab) => tab.id)).toEqual([
@@ -539,7 +543,8 @@ describe('useWebSessionTabsSync visibility collision recovery', () => {
 
     await publish(findGlobalSubscription(ENV_B, 1), {
       type: 'snapshots',
-      snapshots: []
+      snapshots: [],
+      authoritative: true
     })
     expect(_getWebSessionTabsTrackingCountsForTest().freshness).toBe(1)
     expect(useAppStore.getState().tabsByWorktree[WORKTREE]?.map((tab) => tab.id)).toEqual([
@@ -575,7 +580,8 @@ describe('useWebSessionTabsSync visibility collision recovery', () => {
     })
     await publish(findGlobalSubscription(ENV_A, 1), {
       type: 'snapshots',
-      snapshots: []
+      snapshots: [],
+      authoritative: true
     })
 
     slowInventory.resolve(makeTerminalSnapshot('-b'))
@@ -612,7 +618,8 @@ describe('useWebSessionTabsSync visibility collision recovery', () => {
     })
     await publish(findGlobalSubscription(ENV_A, 1), {
       type: 'snapshots',
-      snapshots: []
+      snapshots: [],
+      authoritative: true
     })
 
     expect(useAppStore.getState().tabsByWorktree[WORKTREE]).toBeUndefined()
diff --git a/src/renderer/src/runtime/web-session-tabs-sync-window-visibility.test.tsx b/src/renderer/src/runtime/web-session-tabs-sync-window-visibility.test.tsx
index 187fb213b3f..b30662524d9 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync-window-visibility.test.tsx
+++ b/src/renderer/src/runtime/web-session-tabs-sync-window-visibility.test.tsx
@@ -214,6 +214,15 @@ function seedRemoteMirrorState(): void {
   )
 }
 
+/** A host that negotiated `session-tabs.authoritative-inventory.v1` labels a complete census. */
+function authoritativeInventory(snapshots: RuntimeMobileSessionTabsResult[]): {
+  type: 'snapshots'
+  snapshots: RuntimeMobileSessionTabsResult[]
+  authoritative: true
+} {
+  return { type: 'snapshots', snapshots, authoritative: true }
+}
+
 describe('useWebSessionTabsSync window visibility', () => {
   beforeEach(() => {
     vi.useFakeTimers()
@@ -245,6 +254,15 @@ describe('useWebSessionTabsSync window visibility', () => {
     vi.useRealTimers()
   })
 
+  const parkAndReveal = async (parkMultiplier = 1): Promise<void> => {
+    act(() => {
+      setDocumentVisibility('hidden')
+      vi.advanceTimersByTime(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS * parkMultiplier)
+      setDocumentVisibility('visible')
+    })
+    await act(settle)
+  }
+
   it('parks every live mirror without repeating one-shot hydration', async () => {
     const hook = renderHook(() => useWebSessionTabsSync())
     await act(settle)
@@ -297,12 +315,7 @@ describe('useWebSessionTabsSync window visibility', () => {
     const browserTabsByWorktree = useAppStore.getState().browserTabsByWorktree
     mocks.recoverSnapshot.mockClear()
 
-    act(() => {
-      setDocumentVisibility('hidden')
-      vi.advanceTimersByTime(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS)
-      setDocumentVisibility('visible')
-    })
-    await act(settle)
+    await parkAndReveal()
     await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
       type: 'snapshots',
       snapshots: [snapshot]
@@ -334,12 +347,7 @@ describe('useWebSessionTabsSync window visibility', () => {
     acceptReplayedWebSessionTabsSnapshot(ENV_A, WORKTREE)
     act(() => useAppStore.setState({ browserTabsByWorktree: {} }))
 
-    act(() => {
-      setDocumentVisibility('hidden')
-      vi.advanceTimersByTime(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS)
-      setDocumentVisibility('visible')
-    })
-    await act(settle)
+    await parkAndReveal()
     await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
       type: 'snapshots',
       snapshots: [snapshot]
@@ -446,17 +454,60 @@ describe('useWebSessionTabsSync window visibility', () => {
     expect(useAppStore.getState().browserTabsByWorktree[WORKTREE]).toHaveLength(1)
     expect(_getWebSessionTabsTrackingCountsForTest().freshness).toBe(1)
 
-    act(() => {
-      setDocumentVisibility('hidden')
-      vi.advanceTimersByTime(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS)
-      setDocumentVisibility('visible')
-    })
+    await parkAndReveal()
+    await publish(
+      findSubscription('session.tabs.subscribeAll', ENV_A, 1),
+      authoritativeInventory([])
+    )
+
+    expect(useAppStore.getState().browserTabsByWorktree[WORKTREE]).toBeUndefined()
+    expect(_getWebSessionTabsTrackingCountsForTest().freshness).toBe(0)
+    hook.unmount()
+  })
+
+  it('retains an omitted mirror when the host does not label the inventory authoritative', async () => {
+    const hook = renderHook(() => useWebSessionTabsSync())
     await act(settle)
+    await publish(findSubscription('session.tabs.subscribeAll', ENV_A), {
+      type: 'snapshots',
+      snapshots: [makeBrowserSnapshot()]
+    })
+    expect(useAppStore.getState().browserTabsByWorktree[WORKTREE]).toHaveLength(1)
+
+    await parkAndReveal()
     await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
       type: 'snapshots',
       snapshots: []
     })
 
+    // A census the host declines to call authoritative is unverifiable, not proof the worktree is gone.
+    expect(useAppStore.getState().browserTabsByWorktree[WORKTREE]).toHaveLength(1)
+    expect(_getWebSessionTabsTrackingCountsForTest().freshness).toBe(1)
+    hook.unmount()
+  })
+
+  it('removes an omitted mirror once two unlabelled inventories agree', async () => {
+    const hook = renderHook(() => useWebSessionTabsSync())
+    await act(settle)
+    await publish(findSubscription('session.tabs.subscribeAll', ENV_A), {
+      type: 'snapshots',
+      snapshots: [makeBrowserSnapshot()]
+    })
+
+    await parkAndReveal()
+    await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
+      type: 'snapshots',
+      snapshots: []
+    })
+    expect(useAppStore.getState().browserTabsByWorktree[WORKTREE]).toHaveLength(1)
+
+    await parkAndReveal(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_BACKOFF_LIMIT)
+    await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 2), {
+      type: 'snapshots',
+      snapshots: []
+    })
+
+    // A legacy host that never sends the label still converges, so ghosts cannot outlive two rounds.
     expect(useAppStore.getState().browserTabsByWorktree[WORKTREE]).toBeUndefined()
     expect(_getWebSessionTabsTrackingCountsForTest().freshness).toBe(0)
     hook.unmount()
@@ -482,10 +533,10 @@ describe('useWebSessionTabsSync window visibility', () => {
       type: 'snapshots',
       snapshots: [makeBrowserSnapshot('-b')]
     })
-    await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
-      type: 'snapshots',
-      snapshots: []
-    })
+    await publish(
+      findSubscription('session.tabs.subscribeAll', ENV_A, 1),
+      authoritativeInventory([])
+    )
 
     const handles = Object.values(useAppStore.getState().remoteBrowserPageHandlesByPageId)
     expect(handles.some((handle) => handle.environmentId === ENV_A)).toBe(false)
@@ -519,16 +570,11 @@ describe('useWebSessionTabsSync window visibility', () => {
       )
     ).toBe(true)
 
-    act(() => {
-      setDocumentVisibility('hidden')
-      vi.advanceTimersByTime(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS)
-      setDocumentVisibility('visible')
-    })
-    await act(settle)
-    await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
-      type: 'snapshots',
-      snapshots: []
-    })
+    await parkAndReveal()
+    await publish(
+      findSubscription('session.tabs.subscribeAll', ENV_A, 1),
+      authoritativeInventory([])
+    )
 
     expect(
       Object.values(useAppStore.getState().remoteBrowserPageHandlesByPageId).some(
@@ -547,12 +593,7 @@ describe('useWebSessionTabsSync window visibility', () => {
       snapshots: [snapshot]
     })
 
-    act(() => {
-      setDocumentVisibility('hidden')
-      vi.advanceTimersByTime(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS)
-      setDocumentVisibility('visible')
-    })
-    await act(settle)
+    await parkAndReveal()
     const slowOtherSnapshot = {
       ...makeEmptySnapshot(),
       worktree: 'repo-a::other-worktree'
@@ -590,22 +631,17 @@ describe('useWebSessionTabsSync window visibility', () => {
       snapshots: [originalSnapshot]
     })
 
-    act(() => {
-      setDocumentVisibility('hidden')
-      vi.advanceTimersByTime(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS)
-      setDocumentVisibility('visible')
-    })
-    await act(settle)
+    await parkAndReveal()
 
     const newerSnapshot = { ...makeBrowserSnapshot('-new'), snapshotVersion: 2 }
     await publish(findSubscription('session.tabs.subscribe', ENV_A, 1), {
       type: 'snapshot',
       ...newerSnapshot
     })
-    await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
-      type: 'snapshots',
-      snapshots: []
-    })
+    await publish(
+      findSubscription('session.tabs.subscribeAll', ENV_A, 1),
+      authoritativeInventory([])
+    )
 
     expect(useAppStore.getState().activeBrowserTabIdByWorktree[WORKTREE]).toBe(
       'host-browser-workspace-new'
@@ -637,10 +673,10 @@ describe('useWebSessionTabsSync window visibility', () => {
 
     act(() => setDocumentVisibility('visible'))
     await act(settle)
-    await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
-      type: 'snapshots',
-      snapshots: []
-    })
+    await publish(
+      findSubscription('session.tabs.subscribeAll', ENV_A, 1),
+      authoritativeInventory([])
+    )
 
     expect(useAppStore.getState().browserTabsByWorktree[WORKTREE]).toBeUndefined()
     expect(
@@ -694,12 +730,7 @@ describe('useWebSessionTabsSync window visibility', () => {
       snapshots: [makeBrowserSnapshot('-old')]
     })
 
-    act(() => {
-      setDocumentVisibility('hidden')
-      vi.advanceTimersByTime(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS)
-      setDocumentVisibility('visible')
-    })
-    await act(settle)
+    await parkAndReveal()
 
     const unrelatedSnapshot = {
       ...makeEmptySnapshot(),
@@ -708,10 +739,7 @@ describe('useWebSessionTabsSync window visibility', () => {
     const olderInventoryRecovery = createDeferred<RuntimeMobileSessionTabsResult>()
     mocks.recoverSnapshot.mockImplementationOnce(() => olderInventoryRecovery.promise)
     const resumedGlobal = findSubscription('session.tabs.subscribeAll', ENV_A, 1)
-    await publish(resumedGlobal, {
-      type: 'snapshots',
-      snapshots: [unrelatedSnapshot]
-    })
+    await publish(resumedGlobal, authoritativeInventory([unrelatedSnapshot]))
     const newerSnapshot = { ...makeBrowserSnapshot('-new'), snapshotVersion: 2 }
     await publish(resumedGlobal, {
       type: 'snapshots',
@@ -753,10 +781,10 @@ describe('useWebSessionTabsSync window visibility', () => {
       }
       const slowInventoryRecovery = createDeferred<RuntimeMobileSessionTabsResult>()
       mocks.recoverSnapshot.mockImplementationOnce(() => slowInventoryRecovery.promise)
-      await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
-        type: 'snapshots',
-        snapshots: [unrelatedSnapshot]
-      })
+      await publish(
+        findSubscription('session.tabs.subscribeAll', ENV_A, 1),
+        authoritativeInventory([unrelatedSnapshot])
+      )
       await publish(findSubscription('session.tabs.subscribe', ENV_A, 1), {
         type: 'snapshot',
         ...snapshot,
@@ -779,16 +807,11 @@ describe('useWebSessionTabsSync window visibility', () => {
       snapshots: [snapshot]
     })
 
-    act(() => {
-      setDocumentVisibility('hidden')
-      vi.advanceTimersByTime(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS)
-      setDocumentVisibility('visible')
-    })
-    await act(settle)
-    await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
-      type: 'snapshots',
-      snapshots: []
-    })
+    await parkAndReveal()
+    await publish(
+      findSubscription('session.tabs.subscribeAll', ENV_A, 1),
+      authoritativeInventory([])
+    )
     await publish(findSubscription('session.tabs.subscribe', ENV_A, 1), {
       type: 'snapshot',
       ...snapshot
@@ -823,17 +846,6 @@ describe('useWebSessionTabsSync window visibility', () => {
   })
 
   it('drops an omission fence one generation after the inventory that set it', async () => {
-    const parkAndReveal = async (): Promise<void> => {
-      act(() => {
-        setDocumentVisibility('hidden')
-        vi.advanceTimersByTime(
-          WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_MS *
-            WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_BACKOFF_LIMIT
-        )
-        setDocumentVisibility('visible')
-      })
-      await act(settle)
-    }
     const hook = renderHook(() => useWebSessionTabsSync())
     await act(settle)
     const snapshot = { ...makeBrowserSnapshot(), snapshotVersion: 2 }
@@ -842,21 +854,21 @@ describe('useWebSessionTabsSync window visibility', () => {
       snapshots: [snapshot]
     })
 
-    await parkAndReveal()
-    await publish(findSubscription('session.tabs.subscribeAll', ENV_A, 1), {
-      type: 'snapshots',
-      snapshots: []
-    })
+    await parkAndReveal(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_BACKOFF_LIMIT)
+    await publish(
+      findSubscription('session.tabs.subscribeAll', ENV_A, 1),
+      authoritativeInventory([])
+    )
     expect(useAppStore.getState().browserTabsByWorktree[WORKTREE]).toBeUndefined()
 
-    await parkAndReveal()
+    await parkAndReveal(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_BACKOFF_LIMIT)
     await publish(findSubscription('session.tabs.subscribe', ENV_A, 2), {
       type: 'snapshot',
       ...snapshot
     })
     expect(useAppStore.getState().browserTabsByWorktree[WORKTREE]).toBeUndefined()
 
-    await parkAndReveal()
+    await parkAndReveal(WINDOW_VISIBILITY_SUBSCRIPTION_PARK_DELAY_BACKOFF_LIMIT)
     await publish(findSubscription('session.tabs.subscribe', ENV_A, 3), {
       type: 'snapshot',
       ...snapshot
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/apply-final-patch.ts b/src/renderer/src/runtime/web-session-tabs-sync/apply-final-patch.ts
index e15e6369c41..4ef51cd52f7 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/apply-final-patch.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/apply-final-patch.ts
@@ -5,7 +5,7 @@ import {
   buildRemirroredClosedTabMarkerLiftPatch,
   buildRetractedMirroredTabSweepPatch
 } from './agent-status-primitives'
-import { isWebSessionTabsWorktreeRemovalFrame } from './tracking'
+import { isWebSessionTabsWorktreeRemovalFrame } from './session-tabs-inventory-absence'
 
 type FinalPatchContext = ReturnType<typeof applyActiveStateUpdates>
 
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/global-session-inventory-event.ts b/src/renderer/src/runtime/web-session-tabs-sync/global-session-inventory-event.ts
index f8f93f0894d..dbcd22158a4 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/global-session-inventory-event.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/global-session-inventory-event.ts
@@ -78,6 +78,7 @@ export function handleGlobalSessionInventoryEvent({
     visibilityGeneration,
     inventoryFrame,
     event.snapshots,
+    event.authoritative === true,
     runtimeId
   )
   const finishRecoveries = event.snapshots.map((snapshot, index) =>
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/session-tabs-inventory-absence.ts b/src/renderer/src/runtime/web-session-tabs-sync/session-tabs-inventory-absence.ts
new file mode 100644
index 00000000000..5b4a716fbb7
--- /dev/null
+++ b/src/renderer/src/runtime/web-session-tabs-sync/session-tabs-inventory-absence.ts
@@ -0,0 +1,133 @@
+import type {
+  RuntimeMobileSessionTabsRemovedResult,
+  RuntimeMobileSessionTabsResult
+} from '../../../../shared/runtime-types'
+import {
+  MAX_TRACKED_SESSION_TABS_INVENTORY_OMISSIONS,
+  VISIBILITY_INVENTORY_REMOVAL_EPOCH,
+  latestSessionTabsSnapshotByWorktree,
+  sessionTabsInventoryOmissionsByWorktree,
+  type TrackedWebSessionTabsWorktree
+} from './state'
+import { sessionTabsFreshnessKey } from './tracking'
+
+function omissionKey(environmentId: string, worktreeId: string): string {
+  return `${environmentId}:${worktreeId}`
+}
+
+function trackedWorktreeOmissionFingerprint(
+  trackedWorktree: TrackedWebSessionTabsWorktree
+): string {
+  return [
+    trackedWorktree.freshness.publicationEpoch,
+    trackedWorktree.freshness.snapshotVersion
+  ].join('\0')
+}
+
+export function clearTrackedWebSessionTabsInventoryAbsence(
+  environmentId: string,
+  worktreeId: string
+): void {
+  sessionTabsInventoryOmissionsByWorktree.delete(omissionKey(environmentId, worktreeId))
+}
+
+/**
+ * Returns true only after two inventories omit the same tracked identity,
+ * mirroring `confirmSurfaceInventoryAbsence`. One omission from a census the
+ * host declined to label authoritative is a visibility fact, never attestation
+ * that the worktree is gone.
+ */
+export function confirmTrackedWebSessionTabsInventoryAbsence(
+  environmentId: string,
+  trackedWorktree: TrackedWebSessionTabsWorktree
+): boolean {
+  const key = omissionKey(environmentId, trackedWorktree.worktree)
+  const fingerprint = trackedWorktreeOmissionFingerprint(trackedWorktree)
+  const cached = sessionTabsInventoryOmissionsByWorktree.get(key)
+  const observations = cached?.fingerprint === fingerprint ? cached.observations + 1 : 1
+  sessionTabsInventoryOmissionsByWorktree.delete(key)
+  sessionTabsInventoryOmissionsByWorktree.set(key, {
+    fingerprint,
+    observations: Math.min(observations, 2)
+  })
+  while (
+    sessionTabsInventoryOmissionsByWorktree.size > MAX_TRACKED_SESSION_TABS_INVENTORY_OMISSIONS
+  ) {
+    const oldest = sessionTabsInventoryOmissionsByWorktree.keys().next().value
+    if (typeof oldest !== 'string') {
+      break
+    }
+    sessionTabsInventoryOmissionsByWorktree.delete(oldest)
+  }
+  return observations >= 2
+}
+
+export function isTrackedWebSessionTabsOmissionCurrent(
+  environmentId: string,
+  trackedWorktree: TrackedWebSessionTabsWorktree
+): boolean {
+  const key = sessionTabsFreshnessKey(environmentId, trackedWorktree.worktree)
+  const current = latestSessionTabsSnapshotByWorktree.get(key)
+  return (
+    current?.publicationEpoch === trackedWorktree.freshness.publicationEpoch &&
+    current.snapshotVersion === trackedWorktree.freshness.snapshotVersion
+  )
+}
+
+// Why: a tombstone empties the whole worktree mirror — including tabs a still-live sibling environment publishes — so it is a
+// visibility fact, never evidence that the host closed anything.
+export function isWebSessionTabsWorktreeRemovalFrame(
+  snapshot: RuntimeMobileSessionTabsResult
+): boolean {
+  return (
+    (snapshot as { removed?: unknown }).removed === true ||
+    snapshot.publicationEpoch === VISIBILITY_INVENTORY_REMOVAL_EPOCH
+  )
+}
+
+/**
+ * Why: a tombstone empties a whole worktree mirror, so it needs the same host
+ * evidence `mirror-settle` already demands before it will settle an empty
+ * inventory. An inventory the host labels `authoritative` carries a complete
+ * PTY census, so one omission is attestation. An unlabelled inventory is a
+ * degraded or version-skewed census — `unverifiable`, not `exited` — so it must
+ * repeat before it can destroy anything.
+ */
+export function buildMissingWebSessionTabsRemovals(
+  environmentId: string,
+  trackedWorktrees: readonly TrackedWebSessionTabsWorktree[],
+  publishedWorktrees: ReadonlySet<string>,
+  hostAuthoritative: boolean
+): {
+  trackedWorktree: TrackedWebSessionTabsWorktree
+  snapshot: RuntimeMobileSessionTabsRemovedResult
+}[] {
+  return trackedWorktrees
+    .filter((trackedWorktree) => {
+      if (publishedWorktrees.has(trackedWorktree.worktree)) {
+        clearTrackedWebSessionTabsInventoryAbsence(environmentId, trackedWorktree.worktree)
+        return false
+      }
+      if (!isTrackedWebSessionTabsOmissionCurrent(environmentId, trackedWorktree)) {
+        return false
+      }
+      if (hostAuthoritative) {
+        clearTrackedWebSessionTabsInventoryAbsence(environmentId, trackedWorktree.worktree)
+        return true
+      }
+      return confirmTrackedWebSessionTabsInventoryAbsence(environmentId, trackedWorktree)
+    })
+    .map((trackedWorktree) => ({
+      trackedWorktree,
+      snapshot: {
+        worktree: trackedWorktree.worktree,
+        publicationEpoch: VISIBILITY_INVENTORY_REMOVAL_EPOCH,
+        snapshotVersion: 0,
+        removed: true,
+        activeGroupId: null,
+        activeTabId: null,
+        activeTabType: null,
+        tabs: []
+      }
+    }))
+}
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/state.ts b/src/renderer/src/runtime/web-session-tabs-sync/state.ts
index bb693160e4a..d8be13bde50 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/state.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/state.ts
@@ -108,6 +108,15 @@ export const trackedSessionTabsWorktreeIdsByEnvironment = new Map<string, Set<st
 export const sessionTabsEnvironmentsByWorktree = new Map<string, Set<string>>()
 export const sessionTabsTrackingGenerationByEnvironment = new Map<string, number>()
 export const lastHostTerminalTabCountByWorktree = new Map<string, number>()
+export const MAX_TRACKED_SESSION_TABS_INVENTORY_OMISSIONS = 512
+export type SessionTabsInventoryOmissionObservation = {
+  fingerprint: string
+  observations: number
+}
+export const sessionTabsInventoryOmissionsByWorktree = new Map<
+  string,
+  SessionTabsInventoryOmissionObservation
+>()
 export const hostSessionTabIdByLocalKey = new Map<string, string>()
 export const hostSessionTabMappingKeysByEnvironmentAndWorktree = new Map<
   string,
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/tracking-lifecycle.ts b/src/renderer/src/runtime/web-session-tabs-sync/tracking-lifecycle.ts
index e352a439c9c..8b07fde7a33 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/tracking-lifecycle.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/tracking-lifecycle.ts
@@ -12,6 +12,7 @@ import {
   sessionTabsEnvironmentsByWorktree,
   sessionTabsTrackingGenerationByEnvironment,
   lastHostTerminalTabCountByWorktree,
+  sessionTabsInventoryOmissionsByWorktree,
   hostSessionTabIdByLocalKey,
   hostSessionTabMappingKeysByEnvironmentAndWorktree,
   hostWorkingClientBoundaryByPaneKey,
@@ -89,6 +90,7 @@ export function resetWebSessionTabsSnapshotFreshnessForTests(): void {
   sessionTabsEnvironmentsByWorktree.clear()
   resetReceivedSessionTabsFrameSequence()
   lastHostTerminalTabCountByWorktree.clear()
+  sessionTabsInventoryOmissionsByWorktree.clear()
   hostSessionTabIdByLocalKey.clear()
   hostSessionTabMappingKeysByEnvironmentAndWorktree.clear()
   hostWorkingClientBoundaryByPaneKey.clear()
@@ -135,6 +137,7 @@ export function clearWebSessionTabsTrackingForWorktree(
   untrackWebSessionTabsWorktree(environmentId, worktreeId)
   removeWebSessionTabsEnvironment(environmentId, worktreeId)
   lastHostTerminalTabCountByWorktree.delete(key)
+  sessionTabsInventoryOmissionsByWorktree.delete(key)
   clearWebRuntimeWakeTerminalRespawnForWorktree(worktreeId)
   clearWebSessionReorderIntentsForWorktree({ environmentId }, worktreeId)
   clearWebSessionCloseIntentsForWorktree({ environmentId }, worktreeId)
@@ -196,6 +199,11 @@ export function clearWebSessionTabsTrackingForEnvironment(environmentId: string)
       lastHostTerminalTabCountByWorktree.delete(key)
     }
   }
+  for (const key of sessionTabsInventoryOmissionsByWorktree.keys()) {
+    if (key.startsWith(keyPrefix)) {
+      sessionTabsInventoryOmissionsByWorktree.delete(key)
+    }
+  }
   const mappingKeysByWorktree =
     hostSessionTabMappingKeysByEnvironmentAndWorktree.get(trimmedEnvironmentId)
   if (mappingKeysByWorktree) {
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/tracking.ts b/src/renderer/src/runtime/web-session-tabs-sync/tracking.ts
index ecbd20bba7c..1d6eea41055 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/tracking.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/tracking.ts
@@ -1,9 +1,5 @@
-import type {
-  RuntimeMobileSessionTabsRemovedResult,
-  RuntimeMobileSessionTabsResult
-} from '../../../../shared/runtime-types'
+import type { RuntimeMobileSessionTabsResult } from '../../../../shared/runtime-types'
 import {
-  VISIBILITY_INVENTORY_REMOVAL_EPOCH,
   latestReceivedSessionTabsInventoryFrameByEnvironment,
   latestReceivedSessionTabsSnapshotByWorktree,
   latestSessionTabsRemovalFenceByWorktree,
@@ -237,18 +233,6 @@ export function shouldApplyRecoveredWebSessionTabsSnapshot(
   return snapshot.snapshotVersion >= latest.snapshotVersion
 }
 
-export function isTrackedWebSessionTabsOmissionCurrent(
-  environmentId: string,
-  trackedWorktree: TrackedWebSessionTabsWorktree
-): boolean {
-  const key = sessionTabsFreshnessKey(environmentId, trackedWorktree.worktree)
-  const current = latestSessionTabsSnapshotByWorktree.get(key)
-  return (
-    current?.publicationEpoch === trackedWorktree.freshness.publicationEpoch &&
-    current.snapshotVersion === trackedWorktree.freshness.snapshotVersion
-  )
-}
-
 export function recordAcceptedWebSessionTabsEnvironment(
   environmentId: string,
   snapshot: RuntimeMobileSessionTabsResult
@@ -276,48 +260,6 @@ export function removeWebSessionTabsEnvironment(environmentId: string, worktreeI
   }
 }
 
-// Why: a tombstone empties the whole worktree mirror — including tabs a still-live sibling environment publishes — so it is a
-// visibility fact, never evidence that the host closed anything.
-export function isWebSessionTabsWorktreeRemovalFrame(
-  snapshot: RuntimeMobileSessionTabsResult
-): boolean {
-  return (
-    (snapshot as { removed?: unknown }).removed === true ||
-    snapshot.publicationEpoch === VISIBILITY_INVENTORY_REMOVAL_EPOCH
-  )
-}
-
-// Why: omission means removal only because `listAllMobileSessionTabs` publishes every worktree it knows unfiltered; if a host ever
-// scopes that map, this turns live worktrees into tombstones, so the fence below is deliberately short-lived.
-export function buildMissingWebSessionTabsRemovals(
-  environmentId: string,
-  trackedWorktrees: readonly TrackedWebSessionTabsWorktree[],
-  publishedWorktrees: ReadonlySet<string>
-): {
-  trackedWorktree: TrackedWebSessionTabsWorktree
-  snapshot: RuntimeMobileSessionTabsRemovedResult
-}[] {
-  return trackedWorktrees
-    .filter(
-      (trackedWorktree) =>
-        !publishedWorktrees.has(trackedWorktree.worktree) &&
-        isTrackedWebSessionTabsOmissionCurrent(environmentId, trackedWorktree)
-    )
-    .map((trackedWorktree) => ({
-      trackedWorktree,
-      snapshot: {
-        worktree: trackedWorktree.worktree,
-        publicationEpoch: VISIBILITY_INVENTORY_REMOVAL_EPOCH,
-        snapshotVersion: 0,
-        removed: true,
-        activeGroupId: null,
-        activeTabId: null,
-        activeTabType: null,
-        tabs: []
-      }
-    }))
-}
-
 export function rememberHostTerminalTabCount(
   environmentId: string,
   snapshot: RuntimeMobileSessionTabsResult
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/visibility-resume-coordinator.ts b/src/renderer/src/runtime/web-session-tabs-sync/visibility-resume-coordinator.ts
index 7d02f2b38af..b905143a12d 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/visibility-resume-coordinator.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/visibility-resume-coordinator.ts
@@ -280,6 +280,7 @@ export class VisibilityResumeCoordinator {
     visibilityGeneration: number,
     inventoryReceivedFrame: number,
     snapshots: readonly RuntimeMobileSessionTabsResult[],
+    hostAuthoritative: boolean,
     runtimeId?: string
   ): VisibilityResumeMissing[] {
     return recordVisibilityResumeInventoryReceipt({
@@ -289,6 +290,7 @@ export class VisibilityResumeCoordinator {
       visibilityGeneration,
       inventoryReceivedFrame,
       snapshots,
+      hostAuthoritative,
       runtimeId
     })
   }
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/visibility-resume-inventory.ts b/src/renderer/src/runtime/web-session-tabs-sync/visibility-resume-inventory.ts
index 3398595b01b..16541f98a31 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/visibility-resume-inventory.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/visibility-resume-inventory.ts
@@ -1,9 +1,6 @@
 import type { RuntimeMobileSessionTabsResult } from '../../../../shared/runtime-types'
-import {
-  buildMissingWebSessionTabsRemovals,
-  recordReceivedWebSessionTabsRemoval,
-  sessionTabsFreshnessKey
-} from './tracking'
+import { recordReceivedWebSessionTabsRemoval, sessionTabsFreshnessKey } from './tracking'
+import { buildMissingWebSessionTabsRemovals } from './session-tabs-inventory-absence'
 import { isCurrentSessionTabsRuntimeFrame } from './publisher-identity-fences'
 import type { VisibilityResumeOmission } from './state'
 import type { VisibilityResumeBatch, VisibilityResumeMissing } from './visibility-resume-types'
@@ -15,6 +12,7 @@ export function recordVisibilityResumeInventoryReceipt(args: {
   visibilityGeneration: number
   inventoryReceivedFrame: number
   snapshots: readonly RuntimeMobileSessionTabsResult[]
+  hostAuthoritative: boolean
   runtimeId?: string
 }): VisibilityResumeMissing[] {
   const {
@@ -24,6 +22,7 @@ export function recordVisibilityResumeInventoryReceipt(args: {
     visibilityGeneration,
     inventoryReceivedFrame,
     snapshots,
+    hostAuthoritative,
     runtimeId
   } = args
   if (!isCurrentSessionTabsRuntimeFrame(environmentId, runtimeId)) {
@@ -50,7 +49,8 @@ export function recordVisibilityResumeInventoryReceipt(args: {
   return buildMissingWebSessionTabsRemovals(
     environmentId,
     environment.trackedWorktrees,
-    publishedWorktrees
+    publishedWorktrees,
+    hostAuthoritative
   ).map((missing) => {
     const key = sessionTabsFreshnessKey(environmentId, missing.snapshot.worktree)
     omissions.set(key, {
diff --git a/src/renderer/src/store/slices/agent-status-contract.ts b/src/renderer/src/store/slices/agent-status-contract.ts
index 457da539318..65b91e4074b 100644
--- a/src/renderer/src/store/slices/agent-status-contract.ts
+++ b/src/renderer/src/store/slices/agent-status-contract.ts
@@ -81,7 +81,12 @@ export type AgentStatusPayload = ParsedAgentStatusPayload & {
   observation?: AgentStatusObservation
 }
 
-export type AgentStatusTiming = { updatedAt?: number; stateStartedAt?: number }
+export type AgentStatusTiming = {
+  updatedAt?: number
+  /** Observation clock for staleness; see `AgentStatusEntry.evidenceObservedAt`. */
+  evidenceObservedAt?: number
+  stateStartedAt?: number
+}
 
 export type AgentStatusRouting = {
   tabId?: string
diff --git a/src/renderer/src/store/slices/agent-status-freshness-scheduler.ts b/src/renderer/src/store/slices/agent-status-freshness-scheduler.ts
index ee8c8b8f524..c2ed805c3f4 100644
--- a/src/renderer/src/store/slices/agent-status-freshness-scheduler.ts
+++ b/src/renderer/src/store/slices/agent-status-freshness-scheduler.ts
@@ -1,6 +1,9 @@
 import { agentEntryCompletionAt } from '../../../../shared/agent-completion-time'
 import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
-import { AGENT_STATUS_STALE_AFTER_MS } from '../../../../shared/agent-status-types'
+import {
+  AGENT_STATUS_STALE_AFTER_MS,
+  agentStatusEvidenceObservedAt
+} from '../../../../shared/agent-status-types'
 
 export type FreshnessSchedulerDeps = {
   getEntries: () => AgentStatusEntry[]
@@ -67,7 +70,7 @@ export function createFreshnessScheduler(deps: FreshnessSchedulerDeps): Freshnes
     // future timer: the setAgentStatus write already bumped the epoch, so
     // freshness-aware selectors can decay them immediately on that render.
     for (const entry of entries) {
-      const expiryAt = entry.updatedAt + AGENT_STATUS_STALE_AFTER_MS
+      const expiryAt = agentStatusEvidenceObservedAt(entry) + AGENT_STATUS_STALE_AFTER_MS
       if (expiryAt >= now) {
         nextExpiryAt = Math.min(nextExpiryAt, expiryAt)
       }
diff --git a/src/renderer/src/store/slices/agent-status-live-entry-builder.ts b/src/renderer/src/store/slices/agent-status-live-entry-builder.ts
index 3ef257edb6b..12812b380c7 100644
--- a/src/renderer/src/store/slices/agent-status-live-entry-builder.ts
+++ b/src/renderer/src/store/slices/agent-status-live-entry-builder.ts
@@ -222,6 +222,11 @@ export function buildAgentStatusLiveEntry(
     workingMode: payload.workingMode,
     prompt: payload.prompt,
     updatedAt,
+    // Why: a writer that carries no observation clock (OSC bytes, launch seeds) is itself
+    // fresh evidence, so it must not inherit the previous row's older observation time.
+    ...(timing?.evidenceObservedAt !== undefined
+      ? { evidenceObservedAt: timing.evidenceObservedAt }
+      : {}),
     stateStartedAt,
     agentType: identity.agentType,
     model:
diff --git a/src/shared/agent-status-ipc-payload.ts b/src/shared/agent-status-ipc-payload.ts
index 71c830714eb..6a469b31491 100644
--- a/src/shared/agent-status-ipc-payload.ts
+++ b/src/shared/agent-status-ipc-payload.ts
@@ -34,6 +34,11 @@ export type AgentStatusIpcPayload = ParsedAgentStatusPayload & {
   connectionId: string | null
   /** Timestamp (ms) when the hook server received this latest status event. */
   receivedAt: number
+  /** When the reported evidence was first observed, as distinct from `receivedAt` (delivery
+   *  order). A relay reconnect replays cached rows, and `receivedAt` must restamp to stay
+   *  monotonic past the transient-clear watermark — so only this clock can measure staleness.
+   *  Optional: absent from old hosts, where consumers fall back to `receivedAt`. */
+  evidenceObservedAt?: number
   /** Timestamp (ms) when the current state first appeared for this pane. */
   stateStartedAt: number
   orchestration?: AgentStatusOrchestrationContext
diff --git a/src/shared/agent-status-types.ts b/src/shared/agent-status-types.ts
index ea377ae4f99..6ce3cd0647e 100644
--- a/src/shared/agent-status-types.ts
+++ b/src/shared/agent-status-types.ts
@@ -106,6 +106,10 @@ export type AgentStatusEntry = {
   prompt: string
   /** Timestamp (ms) of the last status update. */
   updatedAt: number
+  /** Timestamp (ms) the reported evidence was first observed. Separate from `updatedAt`,
+   *  which is the delivery/ordering clock a relay reconnect must restamp to stay monotonic.
+   *  Absent for locally derived rows and old hosts; freshness falls back to `updatedAt`. */
+  evidenceObservedAt?: number
   /** Timestamp (ms) when the current `state` was first reported.
    *  Why: separate from updatedAt so tool/prompt pings (which reset updatedAt) don't move it. */
   stateStartedAt: number
@@ -258,8 +262,19 @@ export const AGENT_STATUS_INTERACTIVE_PROMPT_MAX_LENGTH = 16000
  */
 export const AGENT_STATUS_STALE_AFTER_MS = 30 * 60 * 1000
 
+/** Age the staleness window measures: when the evidence was observed, not when it was delivered.
+ *  A relay reconnect replays a cached row and must restamp `updatedAt`, so measuring against it
+ *  pushes the deadline out by another window on every reconnect. */
+export function agentStatusEvidenceObservedAt(
+  entry: Pick<AgentStatusEntry, 'updatedAt' | 'evidenceObservedAt'>
+): number {
+  return entry.evidenceObservedAt ?? entry.updatedAt
+}
+
 export function isFreshNonDoneAgentStatus(
-  entry: Pick<AgentStatusEntry, 'state' | 'updatedAt' | 'restoredUnconfirmed'> | undefined,
+  entry:
+    | Pick<AgentStatusEntry, 'state' | 'updatedAt' | 'evidenceObservedAt' | 'restoredUnconfirmed'>
+    | undefined,
   now = Date.now(),
   staleAfterMs = AGENT_STATUS_STALE_AFTER_MS
 ): boolean {
@@ -268,7 +283,7 @@ export function isFreshNonDoneAgentStatus(
     entry &&
     entry.state !== 'done' &&
     entry.restoredUnconfirmed !== true &&
-    now - entry.updatedAt <= staleAfterMs
+    now - agentStatusEvidenceObservedAt(entry) <= staleAfterMs
   )
 }
 

From b4ba3e97ff2581ff2333a117f20ca9ba78b2653b Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:44:05 -0700
Subject: [PATCH 14/92] perf(worktree): defer fork-PR remote creation from
 create-time to first use (#17922)

* perf(worktree): defer fork-PR remote creation from create-time to first use

Fork-PR review worktrees eagerly ran `git remote add` + `git fetch` for the
contributor's fork (and pinned branch.<x>.remote) at create time, even for a
read-only review. That grows remote count unboundedly with review volume and
pays a network fetch nobody asked for yet.

Defer prepareWorktreePushTarget(Ssh) and the --set-upstream-to configure step
at create time (local + SSH, IPC + runtime create paths); persist the
pushTarget metadata untouched. Materialize the remote on demand the first
time push/pull/fetch/fast-forward actually needs it, via two shared
functions (materializeWorktreePushTargetRemote(Ssh)) reused across the
legacy IPC handlers and the RPC runtime sync commands. A cheap
`remote get-url <name>` probe keeps steady-state calls down to one extra
subprocess once materialized, instead of repeating the O(remotes) scan.

Add repo-local `remote.<name>.orca-created` config provenance, written when
the remote is added, so cleanup can recognize ownership of a remote that was
lazily materialized (and therefore never round-tripped through the store's
`remoteCreated` flag).

Refs #17828

* perf(worktree): materialize a deferred fork-PR remote on terminal spawn

An agent running raw git in a freshly opened fork-PR review terminal has no
usable upstream until an Orca-driven sync happens -- "sync through Orca
first" isn't available mid-task, and git pull/log @{u}.. hard-fail without
one (verified against real git). Fire the same on-demand materialization
used by push/pull/fetch/fast-forward from the single terminal-spawn
resolver (resolveTerminalWorkspaceLaunchTarget), fire-and-forget, so a
newly opened terminal gets a working upstream without blocking spawn.

* fix(worktree): retest deferred fork-remote CI failures, fix SSH provenance-marker RPC

Rewrites the 5 CI failures on the deferred fork-remote change (#17828) as
evidence, not fixtures: the SSH relay-upgrade/rollback/sibling-ownership
tests move to materializeWorktreePushTargetRemoteSsh, where that
unchanged logic now actually runs (create defers it to first sync).

While writing a stricter test that routes its mock exec through the
relay's real validateGitExecArgs, found that the SSH provenance-marker
write (`git config remote.<name>.orca-created true`) was unconditionally
rejected by the relay's generic git.exec (it blocks all non-read-only
config writes) -- a real bug that would break every SSH fork-remote
materialization against a live relay. Fixes it with a narrow
git.markRemoteOrcaCreated RPC, mirroring renameCurrentBranch, with a
graceful no-op fallback for relays that predate it.

* fix(worktree): scope post-#17887 test assertions past narrow-refspec config calls

Rebasing onto #17887's narrow-refspec `remote add` broke two broad `['config']`
call-filters into false positives/negatives, and the local materialize test still
asserted the pre-#17887 wide `remote add`/fetch-refspec forms.

* fix(worktree): restructure upstream restore, persist provenance, widen short-circuit refspec (#17828 review)

- Move upstream restoration to the materializer level so it runs on both the
  remoteAlreadyMatchesUrl short-circuit and the full-prepare path, not just
  buried inside prepare*.
- Persist {remoteCreated, remoteName} to the store on materialize so #17842's
  orphan sweep can see a lazily-created remote, including via desktop IPC,
  terminal-spawn, and the RPC host-callback paths.
- Widen the refspec on the local short-circuit path too (SSH's bare `remote
  add` refspec gap remains a documented, pre-existing limitation).
- Fetch the branch's tracking ref before restoring upstream when the
  short-circuit widens onto a *new* branch on an already-existing remote --
  a bare refspec-config widen never itself imports anything, so
  `branch --set-upstream-to` was hard-failing for a sibling worktree's first
  materialize (found via a real-git fixture, not just mocked unit tests).
  Skipped when the ref already exists so the common repeat-call case stays a
  local-only probe with no network round-trip.

* fix(worktree): merge duplicate shared/worktree/types import

oxlint --deny-warnings flags the split import as no-duplicates; full pnpm lint
was failing on it after the #17828 review restructuring.

* fix(worktree): scope the deferred fetch timeout to fetch calls, retarget stale create-time assertions

CI on the previous push failed 3 shards, all argument-shape mismatches:

- worktrees-wsl-runtime-routing.test.ts: the "restructure upstream restore" commit
  wrapped every call `prepareWorktreePushTarget` makes (remote, remote add, config,
  fetch) with DEFERRED_PUSH_TARGET_FETCH_TIMEOUT_MS, not just the network fetch. Local
  git subprocesses never need a timeout; scope it to `args[0] === 'fetch'` only,
  matching the short-circuit path's existing pattern. Updated the test to expect the
  timeout on the fetch call specifically (point 5 legitimately adds it there), while
  every other call stays untimed.

- worktrees-create-metadata-persistence.test.ts (2 tests): stale from before this
  session -- create no longer mints a fork remote at all (#17828 deferred that to
  first sync), so asserting `remote add`/`fetch`/`remoteCreated: true` at create time
  no longer matches reality. Retargeted both tests to assert the deferred contract
  (no remote add at create, pushTarget persisted unmaterialized); minting itself
  stays covered by worktree-remote-push-target-materialization.test.ts and
  worktree-push-target-setup.test.ts.

Re-verified all 5 fixture points (mint upstream, store persistence, single-flight,
short-circuit refspec widen + fetch-missing-ref for local and SSH, finite timeout)
against a real git fixture after this fix -- all still pass.

* fix(worktree): hook pty:spawn into deferred push-target materialization (#17828)

triggerTerminalSpawnPushTargetMaterialization only fired for agent/background/
mobile terminals; the desktop GUI's own pty:spawn path (new tab, split,
reattach) never materialized a deferred fork-PR remote before raw git
commands could run there. Add a small wrapper that resolves the worktree's
push target and owning repo from args.worktreeId via the store, and
fire-and-forget delegates to the existing materializer, wired as the first
statement of runPtyIpcSpawn. Degrades silently (optional chaining + catch)
so a partial/fake Store in existing spawn tests can't turn this into a
spawn-blocking throw.

* test(worktree): retarget stale editor-remote-branch assertions for worktreeId threading

runtime-git-sync-client's local-path fetch/pull/fastForward/push calls now
forward context.worktreeId (needed by the main-process handlers to key
deferred push-target materialization). Update the 17 call-site mocks across
15 tests in editor-remote-branch-actions.test.ts to expect worktreeId: 'wt-1',
matching the already-correct source behavior -- no assertion was loosened.

* fix(worktree): give a materialize joiner its own branch wiring

The materialize single flight is keyed on the remote, but everything after
the remote add is per-branch. A sibling worktree joining an in-flight mint
for a different branch received the minter's target and skipped its own
refspec widen, tracking-ref fetch, and upstream link, so its branch ended
with no upstream at all.

Wait for the remote, then run the per-branch work against the joiner's own
target -- the same path the already-exists short-circuit takes, now shared
rather than duplicated. Adopting a remote a sibling minted also stamps
ownership, so removing the minter cannot strand the survivor's metadata
outside the orphan sweep's reach.

* fix(worktree): stop a failed mint from leaving a config-only fork remote

Review of the joiner fix found it made things worse in three ways.

Swallowing the mint's rejection let a joiner adopt a remote the rollback
had already removed, writing remote.<name>.fetch with no URL. Verified on
real git: that ghost section breaks `git fetch --all`, forces every later
mint to a `-2` name, and cannot be removed by `git remote remove`.
Propagate instead; the in-flight map is already cleared, so a retry
re-mints.

The SSH twin still returned the minter's target to a joiner, so the
original per-branch bug survived there. It now adopts against its own
target through a twin helper.

The ownership stamp was unreachable: it required both a store and a repo
id, and no caller passes both. Derive the repo id from the worktree id.

Adopters also write remote config, and concurrent `git config --add` has
no lock retry -- 135 of 160 writes failed at 8-way concurrency, and equal
values duplicate the refspec. Chain adoptions per remote.
---
 src/main/git/fork-remote-refspec.ts           |  24 +
 ...upstream-deferred-fork-remote-real.test.ts |  59 ++
 .../git-remote/branch-mutation-handlers.ts    | 104 ++-
 .../filesystem/git-remote/sync-handlers.ts    |  39 +-
 ...sh-target-materialization-real-git.test.ts | 149 +++++
 .../spawn-push-target-materialization.test.ts | 145 +++++
 .../ipc/spawn-push-target-materialization.ts  |  40 ++
 src/main/ipc/pty/ipc/spawn-run.ts             |   2 +
 .../ipc/worktree-push-target-cleanup.test.ts  |  23 +-
 src/main/ipc/worktree-push-target-cleanup.ts  |  35 +-
 .../ipc/worktree-push-target-setup.test.ts    | 111 +++-
 src/main/ipc/worktree-push-target-setup.ts    |  93 ++-
 ...remote-push-target-materialization.test.ts | 593 ++++++++++++++++++
 src/main/ipc/worktree-remote.ts               | 359 ++++++++++-
 ...ktrees-create-metadata-persistence.test.ts |  34 +-
 ...ktrees-ssh-fork-push-target-remote.test.ts | 222 ++-----
 .../ipc/worktrees-wsl-runtime-routing.test.ts |  63 +-
 .../providers/ssh-git-provider-api.test.ts    |   3 +-
 .../ssh-git-provider-worktree.test.ts         |  34 +
 .../providers/ssh-git-worktree-provider.ts    |  20 +
 .../runtime/orca-runtime-file-commands.ts     |  10 +
 ...ser-network-execution-host-for-worktree.ts |   9 +
 ...orktree-removal-and-reconciliation.spec.ts |  21 +-
 .../runtime/runtime-git-command-target.ts     |   7 +-
 src/main/runtime/runtime-git-sync-commands.ts |  95 ++-
 .../runtime-local-git-worktree-create.ts      |  37 +-
 ...-spawn-push-target-materialization.test.ts | 176 ++++++
 ...minal-spawn-push-target-materialization.ts |  84 +++
 src/preload/api/git-bridge.ts                 |   4 +
 src/relay/git-handler-exec-operations.ts      |  15 +
 src/relay/git-handler-registration.ts         |   1 +
 src/relay/git-handler.test.ts                 |  32 +
 .../src/runtime/runtime-git-sync-client.ts    |   4 +
 .../editor-remote-branch-actions.test.ts      |  43 +-
 34 files changed, 2375 insertions(+), 315 deletions(-)
 create mode 100644 src/main/git/upstream-deferred-fork-remote-real.test.ts
 create mode 100644 src/main/ipc/pty/ipc/spawn-push-target-materialization-real-git.test.ts
 create mode 100644 src/main/ipc/pty/ipc/spawn-push-target-materialization.test.ts
 create mode 100644 src/main/ipc/pty/ipc/spawn-push-target-materialization.ts
 create mode 100644 src/main/ipc/worktree-remote-push-target-materialization.test.ts
 create mode 100644 src/main/runtime/runtime-terminal-spawn-push-target-materialization.test.ts
 create mode 100644 src/main/runtime/runtime-terminal-spawn-push-target-materialization.ts

diff --git a/src/main/git/fork-remote-refspec.ts b/src/main/git/fork-remote-refspec.ts
index 5bf53cfe7f0..c924fdb2cb2 100644
--- a/src/main/git/fork-remote-refspec.ts
+++ b/src/main/git/fork-remote-refspec.ts
@@ -55,6 +55,30 @@ function refspecSource(refspec: string): string {
   return refspec.replace(/^\+/, '').split(':')[0]!
 }
 
+/**
+ * True if `branchName`'s remote-tracking ref already exists locally under `remoteName`.
+ * Used to skip a redundant fetch on the common repeat-materialize case (the ref was
+ * already pulled in by an earlier mint/fetch) while still fetching it on demand the
+ * first time a sibling worktree widens an existing remote onto a new branch -- a bare
+ * refspec-config widen never itself imports anything (see `ensureRemoteTracksBranchNarrowly`).
+ */
+export async function forkRemoteTrackingRefExists(
+  execGit: GitExecFn,
+  repoPath: string,
+  remoteName: string,
+  branchName: string
+): Promise<boolean> {
+  try {
+    await execGit(
+      ['rev-parse', '--verify', '--quiet', `refs/remotes/${remoteName}/${branchName}`],
+      repoPath
+    )
+    return true
+  } catch {
+    return false
+  }
+}
+
 /**
  * True only if `remote.<name>.url` is actually set. Deliberately plumbing (`config --get`),
  * not porcelain `git remote get-url` -- the latter falls back to echoing the remote *name*
diff --git a/src/main/git/upstream-deferred-fork-remote-real.test.ts b/src/main/git/upstream-deferred-fork-remote-real.test.ts
new file mode 100644
index 00000000000..451f7bed8b3
--- /dev/null
+++ b/src/main/git/upstream-deferred-fork-remote-real.test.ts
@@ -0,0 +1,59 @@
+import { execFileSync } from 'node:child_process'
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, describe, expect, it } from 'vitest'
+import type { GitPushTarget } from '../../shared/worktree/types'
+import { getUpstreamStatus } from './upstream'
+
+// Why: on-demand remote materialization (#17828) defers `git remote add` for a
+// fork PR to first push/pull/fetch/fast-forward, so an unpublished review's
+// status must be read against a pushTarget whose remote was never created.
+// This exercises the real `rev-parse --verify --quiet` failure path -- a
+// fake/mocked git can't reproduce its exact exit-code/stderr shape, which is
+// exactly what `getPublishTargetStatus`'s missing-ref fallback depends on.
+describe('getUpstreamStatus with a deferred (not-yet-materialized) fork remote', () => {
+  const tempPaths: string[] = []
+
+  afterEach(() => {
+    for (const path of tempPaths.splice(0)) {
+      rmSync(path, { recursive: true, force: true })
+    }
+  })
+
+  it('reports the graceful "publish" state instead of 0 ahead/0 behind', async () => {
+    const repoPath = mkdtempSync(join(tmpdir(), 'orca-deferred-fork-remote-'))
+    tempPaths.push(repoPath)
+    const git = (...args: string[]): string =>
+      execFileSync('git', args, { cwd: repoPath, encoding: 'utf8' })
+
+    git('init', '--quiet')
+    git('config', 'user.name', 'Orca Test')
+    git('config', 'user.email', 'orca@example.test')
+    git('config', 'commit.gpgSign', 'false')
+    git('config', 'core.hooksPath', '.git/no-hooks')
+    writeFileSync(join(repoPath, 'fixture.txt'), 'base\n')
+    git('add', 'fixture.txt')
+    git('commit', '-m', 'base')
+    git('branch', '-M', 'contributor/fix')
+
+    // Simulates a fork-PR review worktree right after create: pushTarget
+    // metadata is persisted, but `pr-contributor-orca` was never added as a
+    // remote because materialization is deferred to first use.
+    const pushTarget: GitPushTarget = {
+      remoteName: 'pr-contributor-orca',
+      branchName: 'contributor/fix',
+      remoteUrl: 'git@github.com:contributor/orca.git'
+    }
+
+    const status = await getUpstreamStatus(repoPath, pushTarget)
+
+    expect(status).toEqual({
+      hasUpstream: false,
+      upstreamName: 'pr-contributor-orca/contributor/fix',
+      ahead: 0,
+      behind: 0,
+      hasConfiguredPushTarget: true
+    })
+  })
+})
diff --git a/src/main/ipc/filesystem/git-remote/branch-mutation-handlers.ts b/src/main/ipc/filesystem/git-remote/branch-mutation-handlers.ts
index 53ba72d58a4..2c3273b8c00 100644
--- a/src/main/ipc/filesystem/git-remote/branch-mutation-handlers.ts
+++ b/src/main/ipc/filesystem/git-remote/branch-mutation-handlers.ts
@@ -9,6 +9,10 @@ import {
 import { resolveRegisteredWorktreePath } from '../../registered-worktree-roots-cache'
 import { getLocalGitOptionsForRegisteredWorktree } from '../../local-worktree-runtime-options'
 import { assertGitPushTargetShape } from '../../../../shared/git-push-target-validation'
+import {
+  materializeWorktreePushTargetRemote,
+  materializeWorktreePushTargetRemoteSsh
+} from '../../worktree-remote'
 import type { FilesystemHandlerContext } from '../filesystem-handler-context'
 
 export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandlerContext): void {
@@ -20,6 +24,7 @@ export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandl
       _event,
       args: {
         worktreePath: string
+        worktreeId?: string
         publish?: boolean
         forceWithLease?: boolean
         connectionId?: string
@@ -36,7 +41,18 @@ export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandl
         if (!provider) {
           throw new Error(SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE)
         }
-        return provider.pushBranch(args.worktreePath, publish, args.pushTarget, {
+        // Why: a fork remote deferred at create time (#17828) must exist before push.
+        const materializedPushTarget = args.pushTarget
+          ? await materializeWorktreePushTargetRemoteSsh(
+              provider,
+              args.worktreePath,
+              args.pushTarget,
+              store,
+              undefined,
+              args.worktreeId
+            )
+          : undefined
+        return provider.pushBranch(args.worktreePath, publish, materializedPushTarget, {
           forceWithLease: args.forceWithLease === true
         })
       }
@@ -46,13 +62,23 @@ export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandl
         args.worktreePath,
         worktreePath
       )
-      if (args.pushTarget) {
-        await validateGitPushTarget(worktreePath, args.pushTarget, {
+      const materializedPushTarget = args.pushTarget
+        ? await materializeWorktreePushTargetRemote(
+            worktreePath,
+            args.pushTarget,
+            store,
+            undefined,
+            gitOptions,
+            args.worktreeId
+          )
+        : undefined
+      if (materializedPushTarget) {
+        await validateGitPushTarget(worktreePath, materializedPushTarget, {
           ...gitOptions,
           admissionTier: 'interactive'
         })
       }
-      await gitPush(worktreePath, publish, args.pushTarget, {
+      await gitPush(worktreePath, publish, materializedPushTarget, {
         forceWithLease: args.forceWithLease === true,
         ...gitOptions,
         admissionTier: 'interactive'
@@ -64,7 +90,12 @@ export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandl
     'git:pull',
     async (
       _event,
-      args: { worktreePath: string; connectionId?: string; pushTarget?: GitPushTarget }
+      args: {
+        worktreePath: string
+        worktreeId?: string
+        connectionId?: string
+        pushTarget?: GitPushTarget
+      }
     ): Promise<void> => {
       if (args.connectionId) {
         if (args.pushTarget) {
@@ -74,7 +105,17 @@ export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandl
         if (!provider) {
           throw new Error(SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE)
         }
-        return provider.pullBranch(args.worktreePath, args.pushTarget)
+        const materializedPushTarget = args.pushTarget
+          ? await materializeWorktreePushTargetRemoteSsh(
+              provider,
+              args.worktreePath,
+              args.pushTarget,
+              store,
+              undefined,
+              args.worktreeId
+            )
+          : undefined
+        return provider.pullBranch(args.worktreePath, materializedPushTarget)
       }
       const worktreePath = await resolveRegisteredWorktreePath(args.worktreePath, store)
       const gitOptions = getLocalGitOptionsForRegisteredWorktree(
@@ -82,13 +123,23 @@ export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandl
         args.worktreePath,
         worktreePath
       )
-      if (args.pushTarget) {
-        await validateGitPushTarget(worktreePath, args.pushTarget, {
+      const materializedPushTarget = args.pushTarget
+        ? await materializeWorktreePushTargetRemote(
+            worktreePath,
+            args.pushTarget,
+            store,
+            undefined,
+            gitOptions,
+            args.worktreeId
+          )
+        : undefined
+      if (materializedPushTarget) {
+        await validateGitPushTarget(worktreePath, materializedPushTarget, {
           ...gitOptions,
           admissionTier: 'interactive'
         })
       }
-      await gitPull(worktreePath, args.pushTarget, {
+      await gitPull(worktreePath, materializedPushTarget, {
         ...gitOptions,
         admissionTier: 'interactive'
       })
@@ -99,7 +150,12 @@ export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandl
     'git:fastForward',
     async (
       _event,
-      args: { worktreePath: string; connectionId?: string; pushTarget?: GitPushTarget }
+      args: {
+        worktreePath: string
+        worktreeId?: string
+        connectionId?: string
+        pushTarget?: GitPushTarget
+      }
     ): Promise<void> => {
       if (args.connectionId) {
         if (args.pushTarget) {
@@ -109,7 +165,17 @@ export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandl
         if (!provider) {
           throw new Error(SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE)
         }
-        return provider.fastForwardBranch(args.worktreePath, args.pushTarget)
+        const materializedPushTarget = args.pushTarget
+          ? await materializeWorktreePushTargetRemoteSsh(
+              provider,
+              args.worktreePath,
+              args.pushTarget,
+              store,
+              undefined,
+              args.worktreeId
+            )
+          : undefined
+        return provider.fastForwardBranch(args.worktreePath, materializedPushTarget)
       }
       const worktreePath = await resolveRegisteredWorktreePath(args.worktreePath, store)
       const gitOptions = getLocalGitOptionsForRegisteredWorktree(
@@ -117,13 +183,23 @@ export function registerGitRemoteBranchMutationHandlers(context: FilesystemHandl
         args.worktreePath,
         worktreePath
       )
-      if (args.pushTarget) {
-        await validateGitPushTarget(worktreePath, args.pushTarget, {
+      const materializedPushTarget = args.pushTarget
+        ? await materializeWorktreePushTargetRemote(
+            worktreePath,
+            args.pushTarget,
+            store,
+            undefined,
+            gitOptions,
+            args.worktreeId
+          )
+        : undefined
+      if (materializedPushTarget) {
+        await validateGitPushTarget(worktreePath, materializedPushTarget, {
           ...gitOptions,
           admissionTier: 'interactive'
         })
       }
-      await gitFastForward(worktreePath, args.pushTarget, {
+      await gitFastForward(worktreePath, materializedPushTarget, {
         ...gitOptions,
         admissionTier: 'interactive'
       })
diff --git a/src/main/ipc/filesystem/git-remote/sync-handlers.ts b/src/main/ipc/filesystem/git-remote/sync-handlers.ts
index eae79c918dd..a924c393a04 100644
--- a/src/main/ipc/filesystem/git-remote/sync-handlers.ts
+++ b/src/main/ipc/filesystem/git-remote/sync-handlers.ts
@@ -17,6 +17,10 @@ import { resolveRegisteredWorktreePath } from '../../registered-worktree-roots-c
 import { getLocalGitOptionsForRegisteredWorktree } from '../../local-worktree-runtime-options'
 import { assertGitPushTargetShape } from '../../../../shared/git-push-target-validation'
 import { validateGitForkSyncExpectedUpstream } from '../../../../shared/git-fork-sync'
+import {
+  materializeWorktreePushTargetRemote,
+  materializeWorktreePushTargetRemoteSsh
+} from '../../worktree-remote'
 import type { FilesystemHandlerContext } from '../filesystem-handler-context'
 
 export function registerGitRemoteSyncHandlers(context: FilesystemHandlerContext): void {
@@ -52,7 +56,12 @@ export function registerGitRemoteSyncHandlers(context: FilesystemHandlerContext)
     'git:fetch',
     async (
       _event,
-      args: { worktreePath: string; connectionId?: string; pushTarget?: GitPushTarget }
+      args: {
+        worktreePath: string
+        worktreeId?: string
+        connectionId?: string
+        pushTarget?: GitPushTarget
+      }
     ): Promise<void> => {
       if (args.connectionId) {
         if (args.pushTarget) {
@@ -62,7 +71,17 @@ export function registerGitRemoteSyncHandlers(context: FilesystemHandlerContext)
         if (!provider) {
           throw new Error(SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE)
         }
-        return provider.fetchRemote(args.worktreePath, args.pushTarget)
+        const materializedPushTarget = args.pushTarget
+          ? await materializeWorktreePushTargetRemoteSsh(
+              provider,
+              args.worktreePath,
+              args.pushTarget,
+              store,
+              undefined,
+              args.worktreeId
+            )
+          : undefined
+        return provider.fetchRemote(args.worktreePath, materializedPushTarget)
       }
       const worktreePath = await resolveRegisteredWorktreePath(args.worktreePath, store)
       const gitOptions = getLocalGitOptionsForRegisteredWorktree(
@@ -70,13 +89,23 @@ export function registerGitRemoteSyncHandlers(context: FilesystemHandlerContext)
         args.worktreePath,
         worktreePath
       )
-      if (args.pushTarget) {
-        await validateGitPushTarget(worktreePath, args.pushTarget, {
+      const materializedPushTarget = args.pushTarget
+        ? await materializeWorktreePushTargetRemote(
+            worktreePath,
+            args.pushTarget,
+            store,
+            undefined,
+            gitOptions,
+            args.worktreeId
+          )
+        : undefined
+      if (materializedPushTarget) {
+        await validateGitPushTarget(worktreePath, materializedPushTarget, {
           ...gitOptions,
           admissionTier: 'interactive'
         })
       }
-      await gitFetch(worktreePath, args.pushTarget, {
+      await gitFetch(worktreePath, materializedPushTarget, {
         ...gitOptions,
         admissionTier: 'interactive'
       })
diff --git a/src/main/ipc/pty/ipc/spawn-push-target-materialization-real-git.test.ts b/src/main/ipc/pty/ipc/spawn-push-target-materialization-real-git.test.ts
new file mode 100644
index 00000000000..20e0e646da4
--- /dev/null
+++ b/src/main/ipc/pty/ipc/spawn-push-target-materialization-real-git.test.ts
@@ -0,0 +1,149 @@
+// Real-binary coverage for #17828's remaining gap: the mocked-underlying-trigger suite in
+// `spawn-push-target-materialization.test.ts` proves the wiring/delegation logic, but not
+// that a `pty:spawn`-originated terminal -- the desktop GUI's own terminal path, previously
+// uncovered -- actually ends up with a configured upstream against real git. No mocks here:
+// this exercises the real `triggerTerminalSpawnPushTargetMaterialization` and real
+// `materializeWorktreePushTargetRemote`, driven only through `runPtyIpcSpawn`'s hook.
+import { execFile } from 'node:child_process'
+import { mkdir, mkdtemp, realpath, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { promisify } from 'node:util'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { GitPushTarget } from '../../../../shared/worktree/types'
+import type { Repo } from '../../../../shared/repo-types'
+import type { WorktreeMeta } from '../../../../shared/worktree/meta-types'
+import type { Store } from '../../../persistence'
+import type { PtySpawnIpcDeps } from './spawn-types'
+import { triggerPtySpawnPushTargetMaterialization } from './spawn-push-target-materialization'
+
+const execFileAsync = promisify(execFile)
+
+const REPO_ID = 'repo-1'
+const FORK_REMOTE = 'pr-contributor-orca'
+const TRACKED_BRANCH = 'contributor/fix'
+
+let scratchDir = ''
+let repoPath = ''
+let forkPath = ''
+let worktreeId = ''
+let mainBranch = ''
+
+async function git(args: string[], cwd: string): Promise<string> {
+  const { stdout } = await execFileAsync('git', args, { cwd })
+  return stdout
+}
+
+async function setIdentity(cwd: string): Promise<void> {
+  await git(['config', 'user.name', 'Orca Test'], cwd)
+  await git(['config', 'user.email', 'orca@example.test'], cwd)
+  await git(['config', 'commit.gpgSign', 'false'], cwd)
+}
+
+beforeEach(async () => {
+  // realpath: macOS hands out /var/... temp paths while Git reports /private/var/...
+  scratchDir = await realpath(await mkdtemp(join(tmpdir(), 'orca-pty-spawn-push-target-')))
+  repoPath = join(scratchDir, 'repo')
+  forkPath = join(scratchDir, 'fork')
+  worktreeId = `${REPO_ID}::${repoPath}`
+
+  await mkdir(repoPath, { recursive: true })
+  await git(['init', '-q'], repoPath)
+  await setIdentity(repoPath)
+  await writeFile(join(repoPath, 'seed.txt'), 'seed\n')
+  await git(['add', '-A'], repoPath)
+  await git(['commit', '-qm', 'seed'], repoPath)
+  mainBranch = (await git(['rev-parse', '--abbrev-ref', 'HEAD'], repoPath)).trim()
+
+  await git(['clone', '-q', repoPath, forkPath], scratchDir)
+  await setIdentity(forkPath)
+  await git(['checkout', '-qb', TRACKED_BRANCH], forkPath)
+  await writeFile(join(forkPath, 'fix.txt'), 'fix\n')
+  await git(['add', '-A'], forkPath)
+  await git(['commit', '-qm', 'fix'], forkPath)
+})
+
+afterEach(async () => {
+  await rm(scratchDir, { recursive: true, force: true })
+})
+
+function forkTarget(): GitPushTarget {
+  return { remoteName: FORK_REMOTE, branchName: TRACKED_BRANCH, remoteUrl: forkPath }
+}
+
+function depsFor(
+  pushTarget: GitPushTarget,
+  setWorktreeMeta?: Store['setWorktreeMeta']
+): {
+  deps: PtySpawnIpcDeps
+  meta: Record<string, WorktreeMeta>
+} {
+  const meta: Record<string, WorktreeMeta> = { [worktreeId]: { pushTarget } as WorktreeMeta }
+  const store = {
+    getWorktreeMeta: (id: string) => meta[id],
+    getRepo: (id: string) => ({ id, path: repoPath, connectionId: null }) as unknown as Repo,
+    getAllWorktreeMeta: () => meta,
+    ...(setWorktreeMeta ? { setWorktreeMeta } : {})
+  } as unknown as Store
+  return { deps: { store } as unknown as PtySpawnIpcDeps, meta }
+}
+
+describe('triggerPtySpawnPushTargetMaterialization (real git fixture)', () => {
+  it('materializes the fork remote and configures the upstream for a pty:spawn-originated terminal', async () => {
+    // Why: not just that materialization was *called* -- the coordinator's bar for closing
+    // the gap is a real, git-verified configured upstream reachable from a pty:spawn arg set.
+    // Pre-seeds the remote so materialize takes the short-circuit branch (worktree-remote.ts):
+    // real `remote add`/`fetch` against a fabricated fork is already covered against real git by
+    // worktree-push-target-refspec-real-git.test.ts; the top-level entry point this hook calls
+    // additionally validates `remoteUrl` against a GitHub URL shape, which a local fixture path
+    // can never satisfy. The short-circuit is also the common case in practice -- every pty:spawn
+    // after the worktree's first (new tab, split, reattach) -- and still drives real
+    // `ensureRemoteTracksBranchNarrowly` / narrow `fetch` / `--set-upstream-to` git calls.
+    await git(['remote', 'add', FORK_REMOTE, forkPath], repoPath)
+    const { deps } = depsFor(forkTarget())
+
+    triggerPtySpawnPushTargetMaterialization(deps, {
+      cols: 80,
+      rows: 24,
+      worktreeId
+    })
+
+    await vi.waitFor(
+      async () => {
+        const upstream = await git(
+          ['rev-parse', '--abbrev-ref', `${mainBranch}@{u}`],
+          repoPath
+        ).catch(() => '')
+        expect(upstream.trim()).toBe(`${FORK_REMOTE}/${TRACKED_BRANCH}`)
+      },
+      { timeout: 5000, interval: 25 }
+    )
+
+    const remoteUrl = (await git(['remote', 'get-url', FORK_REMOTE], repoPath)).trim()
+    expect(remoteUrl).toBe(forkPath)
+
+    // The tracked branch's commit must actually be present -- confirms the narrow fetch ran,
+    // not just that the remote config was written.
+    const forkHead = (await git(['rev-parse', TRACKED_BRANCH], forkPath)).trim()
+    const fetchedHead = (
+      await git(['rev-parse', `${FORK_REMOTE}/${TRACKED_BRANCH}`], repoPath)
+    ).trim()
+    expect(fetchedHead).toBe(forkHead)
+  })
+
+  it('is a no-op once the remote was already created (repeat pty:spawn, e.g. reattach)', async () => {
+    const target = { ...forkTarget(), remoteCreated: true }
+    const { deps } = depsFor(target)
+    await git(['remote', 'add', FORK_REMOTE, forkPath], repoPath)
+
+    triggerPtySpawnPushTargetMaterialization(deps, { cols: 80, rows: 24, worktreeId })
+
+    // Give the fire-and-forget chain a tick; there is nothing to wait for since a
+    // remoteCreated target must short-circuit before any git call.
+    await new Promise((resolve) => setImmediate(resolve))
+    const upstream = await git(['rev-parse', '--abbrev-ref', `${mainBranch}@{u}`], repoPath).catch(
+      () => ''
+    )
+    expect(upstream.trim()).toBe('')
+  })
+})
diff --git a/src/main/ipc/pty/ipc/spawn-push-target-materialization.test.ts b/src/main/ipc/pty/ipc/spawn-push-target-materialization.test.ts
new file mode 100644
index 00000000000..df71cb37f8a
--- /dev/null
+++ b/src/main/ipc/pty/ipc/spawn-push-target-materialization.test.ts
@@ -0,0 +1,145 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type { GitPushTarget } from '../../../../shared/worktree/types'
+import type { Repo } from '../../../../shared/repo-types'
+import type { WorktreeMeta } from '../../../../shared/worktree/meta-types'
+import type { Store } from '../../../persistence'
+import type { PtySpawnIpcArgs, PtySpawnIpcDeps } from './spawn-types'
+
+const { triggerMock } = vi.hoisted(() => ({ triggerMock: vi.fn() }))
+vi.mock('../../../runtime/runtime-terminal-spawn-push-target-materialization', () => ({
+  triggerTerminalSpawnPushTargetMaterialization: triggerMock
+}))
+
+import { triggerPtySpawnPushTargetMaterialization } from './spawn-push-target-materialization'
+
+const REPO_ID = 'repo-1'
+const WORKTREE_PATH = '/repo/worktree'
+const WORKTREE_ID = `${REPO_ID}::${WORKTREE_PATH}`
+const FORK_TARGET: GitPushTarget = {
+  remoteName: 'pr-contributor-orca',
+  branchName: 'contributor/fix',
+  remoteUrl: 'git@github.com:contributor/orca.git'
+}
+const REPO = { id: REPO_ID, path: '/repo', connectionId: null } as unknown as Repo
+
+function depsWithStore(overrides: Partial<Store> = {}): PtySpawnIpcDeps {
+  return {
+    store: {
+      getWorktreeMeta: vi.fn().mockReturnValue({ pushTarget: FORK_TARGET } as WorktreeMeta),
+      getRepo: vi.fn().mockReturnValue(REPO),
+      ...overrides
+    } as unknown as Store
+  } as unknown as PtySpawnIpcDeps
+}
+
+function baseArgs(overrides: Partial<PtySpawnIpcArgs> = {}): PtySpawnIpcArgs {
+  return { cols: 80, rows: 24, worktreeId: WORKTREE_ID, ...overrides }
+}
+
+describe('triggerPtySpawnPushTargetMaterialization', () => {
+  let warnSpy: ReturnType<typeof vi.spyOn>
+
+  beforeEach(() => {
+    triggerMock.mockReset()
+    warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
+  })
+
+  it('is a no-op when args has no worktreeId', () => {
+    triggerPtySpawnPushTargetMaterialization(depsWithStore(), baseArgs({ worktreeId: undefined }))
+    expect(triggerMock).not.toHaveBeenCalled()
+  })
+
+  it('is a no-op when deps has no store', () => {
+    triggerPtySpawnPushTargetMaterialization({} as unknown as PtySpawnIpcDeps, baseArgs())
+    expect(triggerMock).not.toHaveBeenCalled()
+  })
+
+  it('is a no-op for a malformed worktreeId (no separator)', () => {
+    triggerPtySpawnPushTargetMaterialization(
+      depsWithStore(),
+      baseArgs({ worktreeId: 'not-a-valid-id' })
+    )
+    expect(triggerMock).not.toHaveBeenCalled()
+  })
+
+  it('parses the worktreeId, looks up the push target and repo, and delegates', () => {
+    const deps = depsWithStore()
+    triggerPtySpawnPushTargetMaterialization(deps, baseArgs())
+
+    expect(deps.store!.getWorktreeMeta).toHaveBeenCalledWith(WORKTREE_ID)
+    expect(deps.store!.getRepo).toHaveBeenCalledWith(REPO_ID)
+    expect(triggerMock).toHaveBeenCalledWith(
+      WORKTREE_PATH,
+      FORK_TARGET,
+      REPO,
+      deps.store,
+      REPO_ID,
+      WORKTREE_ID
+    )
+  })
+
+  it('passes null when the repo lookup misses', () => {
+    const deps = depsWithStore({ getRepo: vi.fn().mockReturnValue(undefined) })
+    triggerPtySpawnPushTargetMaterialization(deps, baseArgs())
+
+    expect(triggerMock).toHaveBeenCalledWith(
+      WORKTREE_PATH,
+      FORK_TARGET,
+      null,
+      deps.store,
+      REPO_ID,
+      WORKTREE_ID
+    )
+  })
+
+  // Why: many pty:spawn unit tests supply a narrow fake Store missing these methods --
+  // this is the actual bug the hook must guard against (#17828), not a hypothetical.
+  // Optional chaining degrades the lookups to undefined/null; the underlying trigger
+  // itself no-ops on an undefined push target, so this never blocks or throws on spawn.
+  it('does not throw when the store lacks getWorktreeMeta/getRepo, delegating with undefined/null', () => {
+    const partialStore = {} as Store
+    expect(() =>
+      triggerPtySpawnPushTargetMaterialization(
+        { store: partialStore } as unknown as PtySpawnIpcDeps,
+        baseArgs()
+      )
+    ).not.toThrow()
+    expect(triggerMock).toHaveBeenCalledWith(
+      WORKTREE_PATH,
+      undefined,
+      null,
+      partialStore,
+      REPO_ID,
+      WORKTREE_ID
+    )
+  })
+
+  it('warns and swallows an error thrown by the underlying trigger', () => {
+    triggerMock.mockImplementation(() => {
+      throw new Error('boom')
+    })
+    expect(() =>
+      triggerPtySpawnPushTargetMaterialization(depsWithStore(), baseArgs())
+    ).not.toThrow()
+    expect(warnSpy).toHaveBeenCalledWith(
+      expect.stringContaining('failed to trigger push target materialization'),
+      expect.any(Error)
+    )
+  })
+
+  it('strips a folder-workspace instance suffix from the worktree path before delegating', () => {
+    const instanceId = 'a1b2c3d4-e5f6-4789-a012-b3c4d5e6f789'
+    const deps = depsWithStore()
+    const suffixedId = `${WORKTREE_ID}::workspace:${instanceId}`
+    triggerPtySpawnPushTargetMaterialization(deps, baseArgs({ worktreeId: suffixedId }))
+
+    expect(triggerMock).toHaveBeenCalledWith(
+      WORKTREE_PATH,
+      FORK_TARGET,
+      REPO,
+      deps.store,
+      REPO_ID,
+      suffixedId
+    )
+  })
+})
diff --git a/src/main/ipc/pty/ipc/spawn-push-target-materialization.ts b/src/main/ipc/pty/ipc/spawn-push-target-materialization.ts
new file mode 100644
index 00000000000..d9a30326155
--- /dev/null
+++ b/src/main/ipc/pty/ipc/spawn-push-target-materialization.ts
@@ -0,0 +1,40 @@
+import { splitWorktreeIdForFilesystem } from '../../../../shared/worktree/id'
+import { triggerTerminalSpawnPushTargetMaterialization } from '../../../runtime/runtime-terminal-spawn-push-target-materialization'
+import type { PtySpawnIpcArgs, PtySpawnIpcDeps } from './spawn-types'
+
+// Why (#17828): pty:spawn is the desktop GUI's own terminal path (new tab, split, reattach) --
+// raw git commands can run here before any Orca-driven sync, so a deferred fork-PR remote must
+// exist first. Mirrors the agent/background-terminal hook in
+// runtime-terminal-spawn-push-target-materialization.ts, which this delegates to; fire-and-forget
+// and a no-op once the remote already exists, so it is safe on every spawn including reattaches.
+export function triggerPtySpawnPushTargetMaterialization(
+  deps: PtySpawnIpcDeps,
+  args: PtySpawnIpcArgs
+): void {
+  if (!args.worktreeId || !deps.store) {
+    return
+  }
+  const parsed = splitWorktreeIdForFilesystem(args.worktreeId)
+  if (!parsed) {
+    return
+  }
+  // Why: never let a partial/fake Store (many pty:spawn unit tests supply a narrow one) or an
+  // unexpected lookup failure turn this best-effort hook into a spawn-blocking exception.
+  try {
+    const pushTarget = deps.store.getWorktreeMeta?.(args.worktreeId)?.pushTarget
+    const repo = deps.store.getRepo?.(parsed.repoId) ?? null
+    triggerTerminalSpawnPushTargetMaterialization(
+      parsed.worktreePath,
+      pushTarget,
+      repo,
+      deps.store,
+      parsed.repoId,
+      args.worktreeId
+    )
+  } catch (error) {
+    console.warn(
+      `[pty-spawn] failed to trigger push target materialization for ${args.worktreeId}:`,
+      error
+    )
+  }
+}
diff --git a/src/main/ipc/pty/ipc/spawn-run.ts b/src/main/ipc/pty/ipc/spawn-run.ts
index 748eb5d8f62..82e2d33f383 100644
--- a/src/main/ipc/pty/ipc/spawn-run.ts
+++ b/src/main/ipc/pty/ipc/spawn-run.ts
@@ -7,6 +7,7 @@ import { buildPtyIpcSpawnOptions } from './spawn-options'
 import { executePtyIpcSpawn } from './spawn-execute'
 import { commitPtyIpcSpawn } from './spawn-commit'
 import { createPtyIpcSpawnState, type PtyIpcSpawnState } from './spawn-state'
+import { triggerPtySpawnPushTargetMaterialization } from './spawn-push-target-materialization'
 import type { PtySpawnIpcArgs, PtySpawnIpcDeps } from './spawn-types'
 
 function releaseAbandonedAgentTeamsLeader(ctx: PtyIpcSpawnState): void {
@@ -30,6 +31,7 @@ function restoreProvisionalPtySize(ctx: PtyIpcSpawnState): void {
 }
 
 export async function runPtyIpcSpawn(deps: PtySpawnIpcDeps, args: PtySpawnIpcArgs) {
+  triggerPtySpawnPushTargetMaterialization(deps, args)
   const ctx = createPtyIpcSpawnState(deps, args)
   const early = await beginPtyIpcSpawn(ctx)
   if (early) {
diff --git a/src/main/ipc/worktree-push-target-cleanup.test.ts b/src/main/ipc/worktree-push-target-cleanup.test.ts
index 0b736acd482..eacd2cd133f 100644
--- a/src/main/ipc/worktree-push-target-cleanup.test.ts
+++ b/src/main/ipc/worktree-push-target-cleanup.test.ts
@@ -108,8 +108,13 @@ describe('cleanupUnusedWorktreePushTargetRemoteWithExec', () => {
       exec
     )
     expect(removeCalls(exec)).toEqual([])
-    // No probing at all when we won't act.
-    expect(exec).not.toHaveBeenCalled()
+    // Why: the store flag alone can't rule out ownership -- on-demand
+    // materialization (#17828) never sets it, so cleanup also probes the
+    // repo-local `orca-created` config provenance before bailing.
+    expect(exec).toHaveBeenCalledWith(
+      ['config', '--get', `remote.${FORK_REMOTE}.orca-created`],
+      REPO_PATH
+    )
   })
 
   it('never touches origin or upstream', async () => {
@@ -242,6 +247,20 @@ describe('cleanupUnusedWorktreePushTargetRemoteWithExec', () => {
     expect(removeCalls(exec)).toEqual([])
   })
 
+  it('removes a remote owned only via git-config provenance (lazily materialized, #17828)', async () => {
+    // Why: on-demand materialization never sets the store's `remoteCreated`
+    // flag, so ownership must also be provable from `remote.<name>.orca-created`.
+    const exec = makeExec({ branchConfig: 'true' })
+    await cleanupUnusedWorktreePushTargetRemoteWithExec(
+      REPO_PATH,
+      'repo-1::/wt/a',
+      forkTarget({ remoteCreated: false }),
+      storeOf({ 'repo-1::/wt/a': forkTarget({ remoteCreated: false }) }),
+      exec
+    )
+    expect(removeCalls(exec)).toEqual([['remote', 'remove', FORK_REMOTE]])
+  })
+
   it('does nothing when the remote is already gone (get-url throws)', async () => {
     const exec = makeExec({ getUrlThrows: true })
     await cleanupUnusedWorktreePushTargetRemoteWithExec(
diff --git a/src/main/ipc/worktree-push-target-cleanup.ts b/src/main/ipc/worktree-push-target-cleanup.ts
index 9bf29f718b2..09918ffe8f7 100644
--- a/src/main/ipc/worktree-push-target-cleanup.ts
+++ b/src/main/ipc/worktree-push-target-cleanup.ts
@@ -16,7 +16,11 @@ export type GitRemoteExec = (
   args: string[],
   cwd: string
 ) => Promise<{ stdout: string; stderr?: string }>
-export type WorktreePushTargetStore = Pick<Store, 'getAllWorktreeMeta'>
+// Why: `setWorktreeMeta` is optional so existing narrow test stubs (only
+// `getAllWorktreeMeta`) keep compiling; callers that want materialize-time
+// provenance persistence (worktree-remote.ts) pass a store that has it.
+export type WorktreePushTargetStore = Pick<Store, 'getAllWorktreeMeta'> &
+  Partial<Pick<Store, 'setWorktreeMeta'>>
 
 export function sameGitHubRemoteUrl(left: string, right: string): boolean {
   if (left === right) {
@@ -181,6 +185,26 @@ function isBranchConfigSeparator(code: number): boolean {
   return code === 32 || (code >= 9 && code <= 13)
 }
 
+// Why: on-demand materialization (push/pull/fetch/fast-forward, #17828) never
+// updates the store's `pushTarget.remoteCreated` flag, so ownership must also be
+// readable from the repo-local `remote.<name>.orca-created` config Orca writes
+// when it creates the remote (see `worktree-push-target-setup.ts`).
+async function remoteHasOrcaProvenance(
+  execGit: GitRemoteExec,
+  repoPath: string,
+  remoteName: string
+): Promise<boolean> {
+  try {
+    const { stdout } = await execGit(
+      ['config', '--get', `remote.${remoteName}.orca-created`],
+      repoPath
+    )
+    return stdout.trim() === 'true'
+  } catch {
+    return false
+  }
+}
+
 // Exported for unit tests: the `execGit` seam lets tests drive the multi-fork
 // cleanup matrix without touching a real repo.
 export async function cleanupUnusedWorktreePushTargetRemoteWithExec(
@@ -190,11 +214,12 @@ export async function cleanupUnusedWorktreePushTargetRemoteWithExec(
   store: WorktreePushTargetStore,
   execGit: GitRemoteExec
 ): Promise<void> {
+  if (!target?.remoteUrl || target.remoteName === 'origin' || target.remoteName === 'upstream') {
+    return
+  }
   if (
-    !target?.remoteCreated ||
-    !target.remoteUrl ||
-    target.remoteName === 'origin' ||
-    target.remoteName === 'upstream'
+    !target.remoteCreated &&
+    !(await remoteHasOrcaProvenance(execGit, repoPath, target.remoteName))
   ) {
     return
   }
diff --git a/src/main/ipc/worktree-push-target-setup.test.ts b/src/main/ipc/worktree-push-target-setup.test.ts
index be718cfd10c..2d9670c2f9b 100644
--- a/src/main/ipc/worktree-push-target-setup.test.ts
+++ b/src/main/ipc/worktree-push-target-setup.test.ts
@@ -5,7 +5,9 @@ import {
   configureCreatedWorktreePushTargetWithExec,
   ensureUniqueRemoteName,
   findRemoteForUrl,
-  prepareWorktreePushTargetWithExec
+  prepareWorktreePushTargetWithExec,
+  remoteAlreadyMatchesUrl,
+  restoreUpstreamAfterMaterialize
 } from './worktree-push-target-setup'
 
 type ExecMock = Mock<GitRemoteExec>
@@ -15,9 +17,17 @@ const FORK_SSH = 'git@github.com:contributor/orca.git'
 const FORK_HTTPS = 'https://github.com/contributor/orca.git'
 
 // A stateful fake git: `remotes` maps name -> url. `remote add` mutates it so
-// later lookups see the new remote, matching real git behavior.
-function makeRepoExec(remotes: Record<string, string>): ExecMock {
+// later lookups see the new remote, matching real git behavior. Defaults
+// `symbolic-ref --short HEAD` to a real branch name, since a worktree's HEAD
+// always resolves to one (mirrors real git, unlike an empty-stdout stub).
+function makeRepoExec(
+  remotes: Record<string, string>,
+  checkedOutBranch = 'local-branch'
+): ExecMock {
   return vi.fn<GitRemoteExec>(async (args: string[]) => {
+    if (args[0] === 'symbolic-ref' && args[1] === '--short' && args[2] === 'HEAD') {
+      return { stdout: `${checkedOutBranch}\n`, stderr: '' }
+    }
     if (args[0] === 'remote' && args.length === 1) {
       return { stdout: Object.keys(remotes).join('\n'), stderr: '' }
     }
@@ -80,6 +90,29 @@ describe('prepareWorktreePushTargetWithExec', () => {
     })
   })
 
+  it('records repo-local provenance on the remote it adds (#17828)', async () => {
+    const exec = makeRepoExec({ origin: 'git@github.com:stablyai/orca.git' })
+
+    await prepareWorktreePushTargetWithExec(exec, REPO, forkTarget(), () => false)
+
+    // Why: cleanup's ownership check must survive a store purge (worktree-push-target-cleanup.ts).
+    // Narrowing the refspec (#17887) also writes `config` calls, so scope to the marker itself.
+    expect(callsMatching(exec, ['config', 'remote.pr-contributor-orca.orca-created'])).toEqual([
+      ['config', 'remote.pr-contributor-orca.orca-created', 'true']
+    ])
+  })
+
+  it('does not record provenance when reusing an existing remote', async () => {
+    const exec = makeRepoExec({
+      origin: 'git@github.com:stablyai/orca.git',
+      'pr-contributor-orca': FORK_HTTPS
+    })
+
+    await prepareWorktreePushTargetWithExec(exec, REPO, forkTarget(), () => false)
+
+    expect(callsMatching(exec, ['config', 'remote.pr-contributor-orca.orca-created'])).toEqual([])
+  })
+
   it('reuses an existing remote pointing at the same fork (SSH vs HTTPS) without adding', async () => {
     const exec = makeRepoExec({
       origin: 'git@github.com:stablyai/orca.git',
@@ -158,6 +191,38 @@ describe('findRemoteForUrl', () => {
   })
 })
 
+describe('remoteAlreadyMatchesUrl', () => {
+  it('matches an exact URL', async () => {
+    const exec = makeRepoExec({ 'pr-contributor-orca': FORK_SSH })
+    await expect(
+      remoteAlreadyMatchesUrl(exec, REPO, 'pr-contributor-orca', FORK_SSH)
+    ).resolves.toBe(true)
+  })
+
+  it('matches by GitHub owner/repo across URL protocols', async () => {
+    const exec = makeRepoExec({ 'pr-contributor-orca': FORK_HTTPS })
+    await expect(
+      remoteAlreadyMatchesUrl(exec, REPO, 'pr-contributor-orca', FORK_SSH)
+    ).resolves.toBe(true)
+  })
+
+  it('returns false when the named remote points elsewhere', async () => {
+    const exec = makeRepoExec({
+      'pr-contributor-orca': 'git@github.com:someone-else/orca.git'
+    })
+    await expect(
+      remoteAlreadyMatchesUrl(exec, REPO, 'pr-contributor-orca', FORK_SSH)
+    ).resolves.toBe(false)
+  })
+
+  it('returns false when the named remote does not exist', async () => {
+    const exec = makeRepoExec({ origin: 'git@github.com:stablyai/orca.git' })
+    await expect(
+      remoteAlreadyMatchesUrl(exec, REPO, 'pr-contributor-orca', FORK_SSH)
+    ).resolves.toBe(false)
+  })
+})
+
 describe('ensureUniqueRemoteName', () => {
   it('returns the preferred name when it is free', async () => {
     const exec = makeRepoExec({ origin: 'x' })
@@ -190,6 +255,46 @@ describe('configureCreatedWorktreePushTargetWithExec', () => {
   })
 })
 
+describe('restoreUpstreamAfterMaterialize', () => {
+  it('points the checked-out branch upstream at the fork remote', async () => {
+    const exec = makeRepoExec({}, 'local-branch')
+    const target = forkTarget()
+
+    const result = await restoreUpstreamAfterMaterialize(exec, '/wt/path', target)
+
+    expect(exec).toHaveBeenCalledWith(
+      ['branch', '--set-upstream-to', 'pr-contributor-orca/contributor/fix', 'local-branch'],
+      '/wt/path'
+    )
+    expect(result).toBe(target)
+  })
+
+  it('is a no-op when the target has no remoteUrl', async () => {
+    const exec = makeRepoExec({}, 'local-branch')
+    const target: GitPushTarget = { remoteName: 'origin', branchName: 'feature' }
+
+    const result = await restoreUpstreamAfterMaterialize(exec, '/wt/path', target)
+
+    expect(callsMatching(exec, ['branch', '--set-upstream-to'])).toEqual([])
+    expect(result).toBe(target)
+  })
+
+  it('is a no-op when HEAD is detached (no checked-out branch)', async () => {
+    const exec = vi.fn<GitRemoteExec>(async (args: string[]) => {
+      if (args[0] === 'symbolic-ref') {
+        throw new Error('fatal: ref HEAD is not a symbolic ref')
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const target = forkTarget()
+
+    const result = await restoreUpstreamAfterMaterialize(exec, '/wt/path', target)
+
+    expect(callsMatching(exec, ['branch', '--set-upstream-to'])).toEqual([])
+    expect(result).toBe(target)
+  })
+})
+
 describe('prepareWorktreePushTargetWithExec rollback', () => {
   it('removes the remote it just added when the fetch fails', async () => {
     const remotes: Record<string, string> = { origin: 'git@github.com:stablyai/orca.git' }
diff --git a/src/main/ipc/worktree-push-target-setup.ts b/src/main/ipc/worktree-push-target-setup.ts
index e064b1f35c3..59ef4c8fea5 100644
--- a/src/main/ipc/worktree-push-target-setup.ts
+++ b/src/main/ipc/worktree-push-target-setup.ts
@@ -49,6 +49,54 @@ export async function findRemoteForUrl(
   return null
 }
 
+// O(1) probe used before materializing on demand (push/pull/fetch/fast-forward):
+// a single `remote get-url <name>` avoids the O(remotes) `findRemoteForUrl` scan
+// once a fork remote already exists under its expected name (#17828).
+export async function remoteAlreadyMatchesUrl(
+  execGit: GitRemoteExec,
+  repoPath: string,
+  remoteName: string,
+  remoteUrl: string
+): Promise<boolean> {
+  try {
+    const { stdout } = await execGit(['remote', 'get-url', remoteName], repoPath)
+    const candidateUrl = stdout.trim()
+    if (candidateUrl === remoteUrl) {
+      return true
+    }
+    const target = parseGitHubOwnerRepo(remoteUrl)
+    const candidate = parseGitHubOwnerRepo(candidateUrl)
+    return Boolean(
+      target &&
+      candidate &&
+      target.owner.toLowerCase() === candidate.owner.toLowerCase() &&
+      target.repo.toLowerCase() === candidate.repo.toLowerCase()
+    )
+  } catch {
+    return false
+  }
+}
+
+// Why (#17828 CodeRabbit follow-up): a deferred remote materialized after create
+// (terminal spawn, push/pull/fetch) must restore the upstream link create used to
+// configure, or raw `git pull`/`git log @{u}..` keep failing even once the remote
+// exists. The checked-out branch is resolved fresh rather than threaded through
+// every materialize call site, since `target.branchName` is the fork's PR head ref
+// and can differ from the worktree's local branch name (rename-on-collision).
+export async function resolveCheckedOutBranchName(
+  execGit: GitRemoteExec,
+  repoPath: string
+): Promise<string | null> {
+  try {
+    const { stdout } = await execGit(['symbolic-ref', '--short', 'HEAD'], repoPath)
+    const branch = stdout.trim()
+    return branch.length > 0 ? branch : null
+  } catch {
+    // Detached HEAD or an unreadable ref -- nothing to point upstream.
+    return null
+  }
+}
+
 export async function ensureUniqueRemoteName(
   execGit: GitRemoteExec,
   repoPath: string,
@@ -103,16 +151,26 @@ export async function prepareWorktreePushTargetWithExec(
       remoteName = await ensureUniqueRemoteName(execGit, repoPath, target.remoteName)
       // Why: `-t <branch> --no-tags` means this remote is never, even transiently,
       // written with the wide default `refs/heads/*` refspec + tag auto-follow (#17828).
-      // `-t` itself writes a literal (non-wildcard-suffixed) refspec, so immediately
-      // rewrite it to the trailing-`*` form via `ensureRemoteTracksBranchNarrowly`
-      // (see that function's comment for why the suffix matters).
       await execGit(
         ['remote', 'add', '-t', target.branchName, '--no-tags', remoteName, target.remoteUrl],
         repoPath
       )
-      await ensureRemoteTracksBranchNarrowly(execGit, repoPath, remoteName, target.branchName)
-      remoteCreated = true
       remoteAddedHere = true
+      try {
+        // `-t` itself writes a literal (non-wildcard-suffixed) refspec, so immediately
+        // rewrite it to the trailing-`*` form via `ensureRemoteTracksBranchNarrowly`
+        // (see that function's comment for why the suffix matters).
+        await ensureRemoteTracksBranchNarrowly(execGit, repoPath, remoteName, target.branchName)
+        // Why: repo-local provenance that survives a store purge and is removed
+        // atomically with the remote itself, unlike the store's `remoteCreated` flag.
+        await execGit(['config', `remote.${remoteName}.orca-created`, 'true'], repoPath)
+      } catch (error) {
+        // Why: a half-configured remote with no provenance marker is unreclaimable --
+        // cleanup only runs off that marker, so a failure here must undo the add.
+        await execGit(['remote', 'remove', remoteName], repoPath).catch(() => {})
+        throw error
+      }
+      remoteCreated = true
     }
   }
 
@@ -138,6 +196,31 @@ export async function prepareWorktreePushTargetWithExec(
   }
 }
 
+// Why (#17828 CodeRabbit follow-up, restructured per review): materializing the remote
+// alone isn't enough -- raw `git pull`/`git push`/`git log @{u}..` still fail without the
+// upstream link create-time configuration used to set up. This must run at the *materializer*
+// level (called by both the short-circuit and full-prepare paths in worktree-remote.ts), not
+// buried inside `prepare*`, or every call after the first materialize -- and any sibling
+// worktree that reuses the same fork remote -- never reaches it. Unconditional (not just
+// "newly added") because a reused remote's upstream for *this* worktree's branch isn't
+// guaranteed set. The checked-out branch is resolved fresh rather than threaded through
+// every materialize call site, since `target.branchName` is the fork's PR head ref and can
+// differ from the worktree's local branch name (rename-on-collision).
+export async function restoreUpstreamAfterMaterialize(
+  execGit: GitRemoteExec,
+  worktreePath: string,
+  target: GitPushTarget
+): Promise<GitPushTarget> {
+  if (!target.remoteUrl) {
+    return target
+  }
+  const checkedOutBranch = await resolveCheckedOutBranchName(execGit, worktreePath)
+  if (!checkedOutBranch) {
+    return target
+  }
+  return configureCreatedWorktreePushTargetWithExec(execGit, worktreePath, checkedOutBranch, target)
+}
+
 export async function configureCreatedWorktreePushTargetWithExec(
   execGit: GitRemoteExec,
   worktreePath: string,
diff --git a/src/main/ipc/worktree-remote-push-target-materialization.test.ts b/src/main/ipc/worktree-remote-push-target-materialization.test.ts
new file mode 100644
index 00000000000..68ed98ab35c
--- /dev/null
+++ b/src/main/ipc/worktree-remote-push-target-materialization.test.ts
@@ -0,0 +1,593 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type { SshGitProvider } from '../providers/ssh-git-provider'
+import type { GitPushTarget } from '../../shared/worktree/types'
+import type { WorktreePushTargetStore } from './worktree-push-target-cleanup'
+
+const { gitExecFileAsyncMock } = vi.hoisted(() => ({ gitExecFileAsyncMock: vi.fn() }))
+vi.mock('../git/runner', () => ({ gitExecFileAsync: gitExecFileAsyncMock }))
+
+import {
+  materializeWorktreePushTargetRemote,
+  materializeWorktreePushTargetRemoteSsh
+} from './worktree-remote'
+
+const REPO_PATH = '/repo-root'
+const FORK_URL = 'git@github.com:contributor/orca.git'
+const FORK_REMOTE = 'pr-contributor-orca'
+
+function forkTarget(overrides: Partial<GitPushTarget> = {}): GitPushTarget {
+  return {
+    remoteName: FORK_REMOTE,
+    branchName: 'contributor/fix',
+    remoteUrl: FORK_URL,
+    ...overrides
+  }
+}
+
+describe('materializeWorktreePushTargetRemote', () => {
+  beforeEach(() => {
+    gitExecFileAsyncMock.mockReset()
+  })
+
+  it('is a no-op when the target already reports remoteCreated', async () => {
+    const target = forkTarget({ remoteCreated: true })
+
+    const result = await materializeWorktreePushTargetRemote(REPO_PATH, target)
+
+    expect(result).toBe(target)
+    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
+  })
+
+  it('is a no-op for a same-repo target with no remoteUrl', async () => {
+    const target = forkTarget({ remoteUrl: undefined })
+
+    const result = await materializeWorktreePushTargetRemote(REPO_PATH, target)
+
+    expect(result).toBe(target)
+    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
+  })
+
+  it('short-circuits the remote probe but still restores upstream and widens the refspec', async () => {
+    // Why (#17828 review follow-up): the short-circuit is the common case for every call
+    // after the first, and for a sibling worktree reusing the same fork remote under a
+    // different branch -- it must still restore the upstream link and widen the refspec.
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        return { stdout: `${FORK_URL}\n`, stderr: '' }
+      }
+      if (args[0] === 'config' && args[1] === '--get-all') {
+        throw new Error('no such section')
+      }
+      if (args[0] === 'symbolic-ref') {
+        return { stdout: 'contributor/fix\n', stderr: '' }
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const target = forkTarget()
+
+    const result = await materializeWorktreePushTargetRemote(REPO_PATH, target)
+
+    expect(result).toBe(target)
+    const calls = gitExecFileAsyncMock.mock.calls.map((call) => call[0] as string[])
+    expect(calls).toContainEqual(['remote', 'get-url', FORK_REMOTE])
+    expect(calls).toContainEqual([
+      'config',
+      '--add',
+      `remote.${FORK_REMOTE}.fetch`,
+      `+refs/heads/${target.branchName}*:refs/remotes/${FORK_REMOTE}/${target.branchName}*`
+    ])
+    expect(calls).toContainEqual(['config', `remote.${FORK_REMOTE}.tagOpt`, '--no-tags'])
+    expect(calls).toContainEqual(['symbolic-ref', '--short', 'HEAD'])
+    expect(calls).toContainEqual([
+      'branch',
+      '--set-upstream-to',
+      `${FORK_REMOTE}/${target.branchName}`,
+      'contributor/fix'
+    ])
+  })
+
+  it('materializes the remote (add + provenance + fetch) when the probe misses', async () => {
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        throw new Error('No such remote')
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const target = forkTarget()
+
+    const result = await materializeWorktreePushTargetRemote(REPO_PATH, target)
+
+    expect(result).toEqual({ ...target, remoteCreated: true })
+    const calls = gitExecFileAsyncMock.mock.calls.map((call) => call[0] as string[])
+    // Mint uses the narrow `-t <branch> --no-tags` add form (#17887), not a bare `remote add`.
+    expect(calls).toContainEqual([
+      'remote',
+      'add',
+      '-t',
+      target.branchName,
+      '--no-tags',
+      FORK_REMOTE,
+      FORK_URL
+    ])
+    expect(calls).toContainEqual(['config', `remote.${FORK_REMOTE}.orca-created`, 'true'])
+    expect(calls).toContainEqual([
+      'fetch',
+      FORK_REMOTE,
+      `+refs/heads/${target.branchName}*:refs/remotes/${FORK_REMOTE}/${target.branchName}*`
+    ])
+  })
+
+  it('fetches the missing tracking ref before restoring upstream on the short-circuit path (#17828 sibling worktree)', async () => {
+    // Why: a sibling worktree short-circuiting onto an already-existing remote under a
+    // *new* branch has a widened refspec but no tracking ref yet -- against real git,
+    // `branch --set-upstream-to` hard-fails with "the requested upstream branch does not
+    // exist" unless something fetches that branch first. Verified against a real git
+    // fixture, not just this mock (see PR discussion).
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        return { stdout: `${FORK_URL}\n`, stderr: '' }
+      }
+      if (args[0] === 'config' && args[1] === '--get-all') {
+        throw new Error('no such section')
+      }
+      if (args[0] === 'rev-parse') {
+        throw new Error('unknown revision')
+      }
+      if (args[0] === 'symbolic-ref') {
+        return { stdout: 'contributor/fix\n', stderr: '' }
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const target = forkTarget()
+
+    const result = await materializeWorktreePushTargetRemote(REPO_PATH, target)
+
+    expect(result).toBe(target)
+    const fetchCalls = gitExecFileAsyncMock.mock.calls.filter(
+      (call) => (call[0] as string[])[0] === 'fetch'
+    )
+    expect(fetchCalls).toEqual([
+      [
+        [
+          'fetch',
+          FORK_REMOTE,
+          `+refs/heads/${target.branchName}*:refs/remotes/${FORK_REMOTE}/${target.branchName}*`
+        ],
+        expect.objectContaining({ timeout: expect.any(Number) })
+      ]
+    ])
+    const calls = gitExecFileAsyncMock.mock.calls.map((call) => call[0] as string[])
+    expect(calls).toContainEqual([
+      'rev-parse',
+      '--verify',
+      '--quiet',
+      `refs/remotes/${FORK_REMOTE}/${target.branchName}`
+    ])
+    expect(calls).toContainEqual([
+      'branch',
+      '--set-upstream-to',
+      `${FORK_REMOTE}/${target.branchName}`,
+      'contributor/fix'
+    ])
+  })
+
+  it('skips the fetch when the tracking ref already exists on the short-circuit path', async () => {
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        return { stdout: `${FORK_URL}\n`, stderr: '' }
+      }
+      if (args[0] === 'config' && args[1] === '--get-all') {
+        throw new Error('no such section')
+      }
+      if (args[0] === 'symbolic-ref') {
+        return { stdout: 'contributor/fix\n', stderr: '' }
+      }
+      // rev-parse succeeds by default (ref already exists) -- no fetch should follow.
+      return { stdout: '', stderr: '' }
+    })
+    const target = forkTarget()
+
+    await materializeWorktreePushTargetRemote(REPO_PATH, target)
+
+    const fetchCalls = gitExecFileAsyncMock.mock.calls.filter(
+      (call) => (call[0] as string[])[0] === 'fetch'
+    )
+    expect(fetchCalls).toEqual([])
+  })
+
+  it("gives a joiner its own branch wiring instead of the minting sibling's target", async () => {
+    // Why (#17828 review): the single flight is keyed on the remote, but the refspec widen,
+    // tracking-ref fetch and upstream link are all per-branch. A sibling worktree joining an
+    // in-flight mint for a *different* branch previously received the minter's target and
+    // skipped all three, leaving its own branch with no upstream.
+    let remoteExists = false
+    let releaseAdd!: () => void
+    const addGate = new Promise<void>((resolve) => {
+      releaseAdd = resolve
+    })
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        if (!remoteExists) {
+          throw new Error('No such remote')
+        }
+        return { stdout: `${FORK_URL}\n`, stderr: '' }
+      }
+      if (args[0] === 'remote' && args[1] === 'add') {
+        await addGate
+        remoteExists = true
+        return { stdout: '', stderr: '' }
+      }
+      if (args[0] === 'config' && args[1] === '--get-all') {
+        throw new Error('no such section')
+      }
+      if (args[0] === 'symbolic-ref') {
+        return { stdout: 'joiner/branch\n', stderr: '' }
+      }
+      return { stdout: '', stderr: '' }
+    })
+
+    const minter = materializeWorktreePushTargetRemote(REPO_PATH, forkTarget())
+    await Promise.resolve()
+    const joiner = materializeWorktreePushTargetRemote(
+      REPO_PATH,
+      forkTarget({ branchName: 'joiner/branch' })
+    )
+    releaseAdd()
+    const [, joined] = await Promise.all([minter, joiner])
+
+    // The joiner keeps its own branch rather than inheriting the minter's.
+    expect(joined.branchName).toBe('joiner/branch')
+    const calls = gitExecFileAsyncMock.mock.calls.map((call) => call[0] as string[])
+    expect(calls).toContainEqual([
+      'branch',
+      '--set-upstream-to',
+      `${FORK_REMOTE}/joiner/branch`,
+      'joiner/branch'
+    ])
+    // Exactly one mint: the joiner must not have raced a second `remote add`.
+    expect(calls.filter((call) => call[0] === 'remote' && call[1] === 'add')).toHaveLength(1)
+  })
+
+  it('propagates a failed mint instead of adopting a remote the rollback removed', async () => {
+    // Why (#17828 review): both mint rollbacks `remote remove`, so adopting after a failed mint
+    // writes `remote.<name>.fetch` with no URL -- a config-only ghost that breaks
+    // `git fetch --all`, forces later mints to a `-2` name, and survives `git remote remove`.
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        throw new Error('No such remote')
+      }
+      if (args[0] === 'remote' && args[1] === 'add') {
+        throw new Error('mint failed')
+      }
+      return { stdout: '', stderr: '' }
+    })
+
+    const minter = materializeWorktreePushTargetRemote(REPO_PATH, forkTarget())
+    await Promise.resolve()
+    const joiner = materializeWorktreePushTargetRemote(
+      REPO_PATH,
+      forkTarget({ branchName: 'joiner/branch' })
+    )
+
+    await expect(minter).rejects.toThrow()
+    await expect(joiner).rejects.toThrow()
+    const calls = gitExecFileAsyncMock.mock.calls.map((call) => call[0] as string[])
+    // No ghost: nothing wrote refspec or tagOpt config for a remote that does not exist.
+    expect(
+      calls.filter((call) => call[0] === 'config' && String(call[2] ?? '').includes(FORK_REMOTE))
+    ).toHaveLength(0)
+  })
+
+  it('persists remoteCreated to the store when a worktreeId is provided and the mint succeeds', async () => {
+    // Why (#17828 review follow-up): on-demand materialization never went through the
+    // create-time setWorktreeMeta write, so a lazily-minted remote stayed invisible to
+    // #17842's orphan sweep (which gates solely on the stored remoteCreated flag).
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        throw new Error('No such remote')
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const target = forkTarget()
+    const setWorktreeMeta = vi.fn()
+    const store: WorktreePushTargetStore = {
+      getAllWorktreeMeta: () => ({}),
+      setWorktreeMeta
+    } as unknown as WorktreePushTargetStore
+
+    const result = await materializeWorktreePushTargetRemote(
+      REPO_PATH,
+      target,
+      store,
+      undefined,
+      {},
+      'worktree-1'
+    )
+
+    expect(result).toEqual({ ...target, remoteCreated: true })
+    expect(setWorktreeMeta).toHaveBeenCalledWith('worktree-1', {
+      pushTarget: { ...target, remoteCreated: true }
+    })
+  })
+
+  it('does not touch the store when no worktreeId is provided', async () => {
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        throw new Error('No such remote')
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const target = forkTarget()
+    const setWorktreeMeta = vi.fn()
+    const store: WorktreePushTargetStore = {
+      getAllWorktreeMeta: () => ({}),
+      setWorktreeMeta
+    } as unknown as WorktreePushTargetStore
+
+    await materializeWorktreePushTargetRemote(REPO_PATH, target, store)
+
+    expect(setWorktreeMeta).not.toHaveBeenCalled()
+  })
+})
+
+describe('materializeWorktreePushTargetRemoteSsh', () => {
+  it('is a no-op when the target already reports remoteCreated', async () => {
+    const exec = vi.fn()
+    const target = forkTarget({ remoteCreated: true })
+
+    const result = await materializeWorktreePushTargetRemoteSsh(
+      { exec } as unknown as SshGitProvider,
+      REPO_PATH,
+      target
+    )
+
+    expect(result).toBe(target)
+    expect(exec).not.toHaveBeenCalled()
+  })
+
+  it('short-circuits the remote probe but still restores upstream (refspec widening is a local-only gap)', async () => {
+    // Why: mirrors the local short-circuit's upstream restore. Refspec widening is
+    // intentionally NOT mirrored here -- SSH's bare `remote add` is a pre-existing,
+    // documented gap this fix does not touch.
+    const exec = vi.fn(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        return { stdout: `${FORK_URL}\n`, stderr: '' }
+      }
+      if (args[0] === 'symbolic-ref') {
+        return { stdout: 'contributor/fix\n', stderr: '' }
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const fetchRemoteTrackingRef = vi.fn()
+    const target = forkTarget()
+
+    const result = await materializeWorktreePushTargetRemoteSsh(
+      { exec, fetchRemoteTrackingRef } as unknown as SshGitProvider,
+      REPO_PATH,
+      target
+    )
+
+    expect(result).toBe(target)
+    const calls = exec.mock.calls.map((call) => call[0] as string[])
+    expect(calls).toContainEqual(['remote', 'get-url', FORK_REMOTE])
+    expect(calls).toContainEqual(['symbolic-ref', '--short', 'HEAD'])
+    expect(calls).toContainEqual([
+      'branch',
+      '--set-upstream-to',
+      `${FORK_REMOTE}/${target.branchName}`,
+      'contributor/fix'
+    ])
+    expect(calls.some((call) => call[0] === 'config' && String(call[2]).includes('.fetch'))).toBe(
+      false
+    )
+    expect(fetchRemoteTrackingRef).not.toHaveBeenCalled()
+  })
+
+  it('fetches the missing tracking ref (one-off, no config write) before restoring upstream on the short-circuit path', async () => {
+    // SSH mirror of the local sibling-worktree fix: refspec widening stays out of scope
+    // here, but the branch must still be fetched once before `--set-upstream-to` can
+    // succeed for a branch this remote has never pulled in.
+    const exec = vi.fn(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        return { stdout: `${FORK_URL}\n`, stderr: '' }
+      }
+      if (args[0] === 'rev-parse') {
+        throw new Error('unknown revision')
+      }
+      if (args[0] === 'symbolic-ref') {
+        return { stdout: 'contributor/fix\n', stderr: '' }
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const fetchRemoteTrackingRef = vi.fn(async () => {})
+    const target = forkTarget()
+
+    const result = await materializeWorktreePushTargetRemoteSsh(
+      { exec, fetchRemoteTrackingRef } as unknown as SshGitProvider,
+      REPO_PATH,
+      target
+    )
+
+    expect(result).toBe(target)
+    expect(fetchRemoteTrackingRef).toHaveBeenCalledWith(
+      REPO_PATH,
+      FORK_REMOTE,
+      target.branchName,
+      `refs/remotes/${FORK_REMOTE}/${target.branchName}`
+    )
+    const calls = exec.mock.calls.map((call) => call[0] as string[])
+    expect(calls).toContainEqual([
+      'branch',
+      '--set-upstream-to',
+      `${FORK_REMOTE}/${target.branchName}`,
+      'contributor/fix'
+    ])
+    // Still no config write -- the fetch is a one-off refspec argument, not a widen.
+    expect(calls.some((call) => call[0] === 'config' && String(call[2]).includes('.fetch'))).toBe(
+      false
+    )
+  })
+
+  it('materializes the remote (add + provenance + fetch) when the probe misses', async () => {
+    const exec = vi.fn(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        throw new Error('No such remote')
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const fetchRemoteTrackingRef = vi.fn(async () => {})
+    const markRemoteOrcaCreated = vi.fn(async () => {})
+    const target = forkTarget()
+
+    const result = await materializeWorktreePushTargetRemoteSsh(
+      { exec, fetchRemoteTrackingRef, markRemoteOrcaCreated } as unknown as SshGitProvider,
+      REPO_PATH,
+      target
+    )
+
+    expect(result).toEqual({ ...target, remoteCreated: true })
+    const calls = exec.mock.calls.map((call) => call[0] as string[])
+    expect(calls).toContainEqual(['check-ref-format', '--branch', target.branchName])
+    expect(calls).toContainEqual(['remote', 'add', FORK_REMOTE, FORK_URL])
+    // Provenance is a narrow RPC, not exec: the relay's generic git.exec blocks config writes.
+    expect(markRemoteOrcaCreated).toHaveBeenCalledWith(REPO_PATH, FORK_REMOTE)
+    expect(fetchRemoteTrackingRef).toHaveBeenCalledWith(
+      REPO_PATH,
+      FORK_REMOTE,
+      target.branchName,
+      `refs/remotes/${FORK_REMOTE}/${target.branchName}`
+    )
+  })
+
+  it('persists remoteCreated to the store when a worktreeId is provided and the mint succeeds', async () => {
+    const exec = vi.fn(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        throw new Error('No such remote')
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const fetchRemoteTrackingRef = vi.fn(async () => {})
+    const markRemoteOrcaCreated = vi.fn(async () => {})
+    const target = forkTarget()
+    const setWorktreeMeta = vi.fn()
+    const store: WorktreePushTargetStore = {
+      getAllWorktreeMeta: () => ({}),
+      setWorktreeMeta
+    } as unknown as WorktreePushTargetStore
+
+    const result = await materializeWorktreePushTargetRemoteSsh(
+      { exec, fetchRemoteTrackingRef, markRemoteOrcaCreated } as unknown as SshGitProvider,
+      REPO_PATH,
+      target,
+      store,
+      undefined,
+      'worktree-1'
+    )
+
+    expect(result).toEqual({ ...target, remoteCreated: true })
+    expect(setWorktreeMeta).toHaveBeenCalledWith('worktree-1', {
+      pushTarget: { ...target, remoteCreated: true }
+    })
+  })
+
+  // Moved from worktrees-ssh-fork-push-target-remote.test.ts: this behavior lives in
+  // prepareWorktreePushTargetSsh (invoked here through the materialize wrapper, once
+  // the fast probe misses) and is unchanged -- it just no longer runs at create time.
+  it('names the relay upgrade when an older host still rejects the fork remote', async () => {
+    const exec = vi.fn(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        throw new Error('No such remote')
+      }
+      if (args[0] === 'remote' && args[1] === 'add') {
+        throw new Error('Destructive git remote operations are not allowed via exec')
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const fetchRemoteTrackingRef = vi.fn()
+    const target = forkTarget()
+
+    await expect(
+      materializeWorktreePushTargetRemoteSsh(
+        { exec, fetchRemoteTrackingRef } as unknown as SshGitProvider,
+        REPO_PATH,
+        target
+      )
+    ).rejects.toThrow('Reconnect to deploy the latest relay')
+    expect(fetchRemoteTrackingRef).not.toHaveBeenCalled()
+  })
+
+  it('drops the fork remote it just added when the SSH head fetch fails', async () => {
+    const exec = vi.fn(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        throw new Error('No such remote')
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const fetchRemoteTrackingRef = vi.fn(async () => {
+      throw new Error('network unreachable')
+    })
+    const markRemoteOrcaCreated = vi.fn(async () => {})
+    const target = forkTarget()
+
+    await expect(
+      materializeWorktreePushTargetRemoteSsh(
+        { exec, fetchRemoteTrackingRef, markRemoteOrcaCreated } as unknown as SshGitProvider,
+        REPO_PATH,
+        target
+      )
+    ).rejects.toThrow('network unreachable')
+
+    expect(exec).toHaveBeenCalledWith(['remote', 'remove', FORK_REMOTE], REPO_PATH)
+  })
+
+  // Regression: the rollback must not fire on ownership inherited from a sibling
+  // worktree, deleting the remote that worktree is still pushing through. The probe
+  // misses under the *requested* remote name so this reaches prepareWorktreePushTargetSsh's
+  // own by-URL reuse scan, which finds the sibling's differently-named remote.
+  it('keeps a reused fork remote a sibling worktree owns when the SSH head fetch fails', async () => {
+    const SIBLING_REMOTE = 'pr-contributor-orca-existing'
+    const exec = vi.fn(async (args: string[]) => {
+      if (args[0] === 'remote' && args[1] === 'get-url') {
+        if (args[2] === SIBLING_REMOTE) {
+          return { stdout: `${FORK_URL}\n`, stderr: '' }
+        }
+        throw new Error('No such remote')
+      }
+      if (args[0] === 'remote' && args.length === 1) {
+        return { stdout: `origin\n${SIBLING_REMOTE}\n`, stderr: '' }
+      }
+      return { stdout: '', stderr: '' }
+    })
+    const fetchRemoteTrackingRef = vi.fn(async () => {
+      throw new Error('network unreachable')
+    })
+    const target = forkTarget()
+    const store: WorktreePushTargetStore = {
+      getAllWorktreeMeta: () => ({
+        'repo::/repo-root-sibling': {
+          pushTarget: {
+            remoteName: SIBLING_REMOTE,
+            branchName: 'contributor/other',
+            remoteUrl: FORK_URL,
+            remoteCreated: true
+          }
+        }
+      })
+    } as unknown as WorktreePushTargetStore
+
+    await expect(
+      materializeWorktreePushTargetRemoteSsh(
+        { exec, fetchRemoteTrackingRef } as unknown as SshGitProvider,
+        REPO_PATH,
+        target,
+        store
+      )
+    ).rejects.toThrow('network unreachable')
+
+    expect(exec).not.toHaveBeenCalledWith(['remote', 'remove', SIBLING_REMOTE], REPO_PATH)
+    expect(exec).not.toHaveBeenCalledWith(
+      ['remote', 'add', expect.anything(), expect.anything()],
+      REPO_PATH
+    )
+  })
+})
diff --git a/src/main/ipc/worktree-remote.ts b/src/main/ipc/worktree-remote.ts
index ce6ee7b3394..0b985a0311f 100644
--- a/src/main/ipc/worktree-remote.ts
+++ b/src/main/ipc/worktree-remote.ts
@@ -112,8 +112,15 @@ import {
   configureCreatedWorktreePushTargetWithExec,
   ensureUniqueRemoteName,
   findRemoteForUrl,
-  prepareWorktreePushTargetWithExec
+  prepareWorktreePushTargetWithExec,
+  remoteAlreadyMatchesUrl,
+  restoreUpstreamAfterMaterialize
 } from './worktree-push-target-setup'
+import {
+  buildNarrowForkFetchRefspec,
+  ensureRemoteTracksBranchNarrowly,
+  forkRemoteTrackingRefExists
+} from '../git/fork-remote-refspec'
 import { migrateForkRemoteRefspecs } from './worktree-push-target-refspec-migration'
 import { isENOENT } from './filesystem-path-containment'
 import {
@@ -166,9 +173,36 @@ const SSH_WORKTREE_CREATE_FETCH_FRESHNESS_MS = 30_000
 const SSH_WORKTREE_CREATE_FETCH_CACHE_MAX = 512
 // Why: bound the fallback `git fetch origin` so a Windows credential-manager GUI hang (STA-1292) can't wedge worktree creation forever.
 const CREATE_BASE_FALLBACK_FETCH_TIMEOUT_MS = 60_000
+// Why (#17828 CodeRabbit follow-up): the deferred materialize fetch runs off the main
+// create path (terminal spawn, mid-session sync) with nothing else bounding it -- same
+// STA-1292 hang risk as the create-time fallback above, so mirror its timeout.
+const DEFERRED_PUSH_TARGET_FETCH_TIMEOUT_MS = 60_000
 const sshWorktreeCreateFetchInflight = new Map<string, Promise<void>>()
 const sshWorktreeCreateFetchCompletedAt = new Map<string, number>()
 const sshWorktreeCreateFetchQueueTail = new Map<string, Promise<void>>()
+// Why (#17828 CodeRabbit follow-up): a terminal spawn and an explicit sync action can
+// both call materialize for the same worktree remote at once; without single-flighting,
+// the loser's `remote add` races the winner's fetch and can strand a duplicate remote.
+const worktreePushTargetMaterializeInflight = new Map<string, Promise<GitPushTarget>>()
+const sshWorktreePushTargetMaterializeInflight = new WeakMap<
+  SshGitProvider,
+  Map<string, Promise<GitPushTarget>>
+>()
+
+function worktreePushTargetMaterializeKey(repoPath: string, remoteName: string): string {
+  return `${repoPath}::${remoteName}`
+}
+
+function getSshWorktreePushTargetMaterializeInflight(
+  provider: SshGitProvider
+): Map<string, Promise<GitPushTarget>> {
+  let inflight = sshWorktreePushTargetMaterializeInflight.get(provider)
+  if (!inflight) {
+    inflight = new Map()
+    sshWorktreePushTargetMaterializeInflight.set(provider, inflight)
+  }
+  return inflight
+}
 const sshWorktreeCreateBasePlanInflight = new Map<
   string,
   Promise<RemoteWorktreeCreateBasePlan | null>
@@ -972,7 +1006,16 @@ export async function prepareWorktreePushTarget(
 ): Promise<GitPushTarget> {
   await validateGitPushTarget(repoPath, target, gitOptions)
   const prepared = await prepareWorktreePushTargetWithExec(
-    (args, cwd) => gitExecFileAsync(args, { cwd, ...gitOptions }),
+    // Why: this is only ever reached via the deferred materialize path (#17828) -- bound
+    // just the network fetch so it can't hang indefinitely (see the timeout constant's
+    // comment). The other calls this makes (`remote`, `remote add`, `config`) are local-only
+    // and must stay untimed, matching every other local git call in this file.
+    (args, cwd) =>
+      gitExecFileAsync(args, {
+        cwd,
+        ...gitOptions,
+        ...(args[0] === 'fetch' ? { timeout: DEFERRED_PUSH_TARGET_FETCH_TIMEOUT_MS } : {})
+      }),
     repoPath,
     target,
     (existingRemote) =>
@@ -993,6 +1036,170 @@ export async function prepareWorktreePushTarget(
   return prepared
 }
 
+// Why: on-demand twin of `prepareWorktreePushTarget` for push/pull/fetch/
+// fast-forward (#17828) -- a deferred fork remote is materialized the first
+// time it's needed. The cheap named-remote probe keeps every push after the
+// first one down to a handful of extra subprocesses (probe, refspec-widen,
+// upstream-restore) instead of repeating the O(remotes) scan
+// `prepareWorktreePushTargetWithExec` does when it must add.
+export async function materializeWorktreePushTargetRemote(
+  repoPath: string,
+  target: GitPushTarget,
+  store?: WorktreePushTargetStore,
+  repoId?: string,
+  gitOptions: { wslDistro?: string } = {},
+  worktreeId?: string
+): Promise<GitPushTarget> {
+  if (!target.remoteUrl || target.remoteCreated) {
+    return target
+  }
+  const execGit: GitRemoteExec = (args, cwd) => gitExecFileAsync(args, { cwd, ...gitOptions })
+  if (await remoteAlreadyMatchesUrl(execGit, repoPath, target.remoteName, target.remoteUrl)) {
+    return runForkRemoteAdoption(repoPath, target, () =>
+      adoptExistingForkRemoteForBranch(
+        execGit,
+        repoPath,
+        target,
+        gitOptions,
+        store,
+        repoId,
+        worktreeId
+      )
+    )
+  }
+  const key = worktreePushTargetMaterializeKey(repoPath, target.remoteName)
+  const existing = worktreePushTargetMaterializeInflight.get(key)
+  if (existing) {
+    // Why: the single flight is keyed on the *remote*, but everything after the remote add is
+    // per-branch. A joiner waiting on a sibling worktree's mint must not take that sibling's
+    // target -- it would inherit the sibling's branch and silently skip its own refspec widen,
+    // tracking-ref fetch, and upstream link. Wait for the remote, then do its own.
+    //
+    // Why not swallow the rejection: both mint rollbacks remove the remote, so adopting after a
+    // failed mint would write `remote.<name>.fetch` with no URL -- a config-only ghost that
+    // breaks `git fetch --all`, forces every later mint to a `-2` name, and survives
+    // `git remote remove`. Propagate instead; the map is already cleared, so a retry re-mints.
+    await existing
+    return runForkRemoteAdoption(repoPath, target, () =>
+      adoptExistingForkRemoteForBranch(
+        execGit,
+        repoPath,
+        target,
+        gitOptions,
+        store,
+        repoId,
+        worktreeId
+      )
+    )
+  }
+  const promise = prepareWorktreePushTarget(repoPath, target, store, repoId, gitOptions)
+    .then((prepared) => restoreUpstreamAfterMaterialize(execGit, repoPath, prepared))
+    .then((prepared) => {
+      persistMaterializedPushTargetIfCreated(store, worktreeId, prepared)
+      return prepared
+    })
+    .finally(() => {
+      if (worktreePushTargetMaterializeInflight.get(key) === promise) {
+        worktreePushTargetMaterializeInflight.delete(key)
+      }
+    })
+  worktreePushTargetMaterializeInflight.set(key, promise)
+  return promise
+}
+
+// Why: the remote already exists -- minted by an earlier call, by create, or by a sibling
+// worktree. Everything left is per-branch, and it must run for *this* target: the refspec
+// widen, the tracking-ref fetch, and the upstream link. Previously these only ran inside
+// prepareWorktreePushTarget, unreachable once the remote was there.
+async function adoptExistingForkRemoteForBranch(
+  execGit: GitRemoteExec,
+  repoPath: string,
+  target: GitPushTarget,
+  gitOptions: { wslDistro?: string },
+  store: WorktreePushTargetStore | undefined,
+  repoId: string | undefined,
+  worktreeId: string | undefined
+): Promise<GitPushTarget> {
+  await ensureRemoteTracksBranchNarrowly(execGit, repoPath, target.remoteName, target.branchName)
+  // Why: widening only rewrites config -- it never imports anything. For a sibling worktree's
+  // first materialize of a *new* branch on an already-existing remote, the branch's tracking
+  // ref doesn't exist yet, and `--set-upstream-to` below hard-fails with "the requested
+  // upstream branch does not exist" (verified against real git). Skip the fetch when the ref
+  // is already there so a repeat push/pull materialize stays a local-only probe.
+  if (
+    !(await forkRemoteTrackingRefExists(execGit, repoPath, target.remoteName, target.branchName))
+  ) {
+    // Why: a network fetch, unlike the local-only probes above -- bound it the same as the
+    // full-mint path's fetch so it can't hang indefinitely.
+    await gitExecFileAsync(
+      [
+        'fetch',
+        target.remoteName,
+        buildNarrowForkFetchRefspec(target.remoteName, target.branchName)
+      ],
+      { cwd: repoPath, ...gitOptions, timeout: DEFERRED_PUSH_TARGET_FETCH_TIMEOUT_MS }
+    )
+  }
+  const restored = await restoreUpstreamAfterMaterialize(execGit, repoPath, target)
+  // Why: a remote another worktree minted is still Orca-owned. Without stamping ownership on
+  // the adopting worktree too, removing the minter leaves the survivor's metadata unowned and
+  // #17842's sweep -- which gates solely on `remoteCreated` -- can never reclaim the remote.
+  // Why derive: no caller supplies both -- IPC handlers pass a store with no repo id, runtime
+  // commands pass a repo id with no store -- so requiring both made this branch unreachable.
+  const ownerRepoId = repoId ?? (worktreeId ? getRepoIdFromWorktreeId(worktreeId) : undefined)
+  const owned =
+    store !== undefined &&
+    ownerRepoId !== undefined &&
+    isPushTargetRemoteCreatedByKnownWorktree(store, restored, ownerRepoId)
+  const adopted = owned ? { ...restored, remoteCreated: true } : restored
+  persistMaterializedPushTargetIfCreated(store, worktreeId, adopted)
+  return adopted
+}
+
+// Why: the mint single flight only covers `remote add`. Every adopter afterwards writes
+// `remote.<name>.fetch` and `.tagOpt`, and concurrent `git config --add` has no lock retry --
+// measured 135/160 failures at 8-way concurrency, plus duplicate refspecs when two adopts add
+// the same value. Chain adopts per remote so they serialize instead of fanning out.
+const forkRemoteAdoptionQueue = new Map<string, Promise<unknown>>()
+
+function runForkRemoteAdoption<T>(
+  repoPath: string,
+  target: GitPushTarget,
+  run: () => Promise<T>
+): Promise<T> {
+  const key = worktreePushTargetMaterializeKey(repoPath, target.remoteName)
+  const previous = forkRemoteAdoptionQueue.get(key)
+  const next = previous ? previous.then(run, run) : run()
+  const settled = next.then(
+    () => undefined,
+    () => undefined
+  )
+  forkRemoteAdoptionQueue.set(key, settled)
+  void settled.finally(() => {
+    if (forkRemoteAdoptionQueue.get(key) === settled) {
+      forkRemoteAdoptionQueue.delete(key)
+    }
+  })
+  return next
+}
+
+// Why (review follow-up): on-demand materialization never went through the create-time
+// `setWorktreeMeta` write, so the store's `pushTarget.remoteCreated` flag stayed stale
+// forever for a lazily-minted remote -- invisible to #17842's orphan sweep
+// (`shouldReclaimPrRemote` gates solely on that flag) and to any SSH host whose relay
+// predates `markRemoteOrcaCreated` (no git-config marker either). `setWorktreeMeta` is
+// optional on `WorktreePushTargetStore` so narrow test/reconciliation stores keep compiling.
+function persistMaterializedPushTargetIfCreated(
+  store: WorktreePushTargetStore | undefined,
+  worktreeId: string | undefined,
+  target: GitPushTarget
+): void {
+  if (!target.remoteCreated || !worktreeId || !store?.setWorktreeMeta) {
+    return
+  }
+  store.setWorktreeMeta(worktreeId, { pushTarget: target })
+}
+
 function isPushTargetRemoteCreatedByKnownWorktree(
   store: WorktreePushTargetStore,
   target: GitPushTarget,
@@ -1062,7 +1269,7 @@ export async function configureCreatedWorktreePushTarget(
   )
 }
 
-async function prepareWorktreePushTargetSsh(
+export async function prepareWorktreePushTargetSsh(
   provider: SshGitProvider,
   repoPath: string,
   target: GitPushTarget,
@@ -1106,8 +1313,18 @@ async function prepareWorktreePushTargetSsh(
         }
         throw error
       }
-      remoteCreated = true
       remoteAddedHere = true
+      try {
+        // Why: repo-local provenance mirroring the local path (worktree-push-target-setup.ts).
+        // A narrow RPC, not provider.exec: the relay's generic git.exec blocks all config writes.
+        await provider.markRemoteOrcaCreated(repoPath, remoteName)
+      } catch (error) {
+        // Why: a remote with no provenance marker is unreclaimable -- cleanup only
+        // runs off that marker, so a failure here must undo the add.
+        await provider.exec(['remote', 'remove', remoteName], repoPath).catch(() => {})
+        throw error
+      }
+      remoteCreated = true
     }
   }
   try {
@@ -1129,6 +1346,96 @@ async function prepareWorktreePushTargetSsh(
   return { ...sanitizedTarget, remoteName, ...(remoteCreated ? { remoteCreated: true } : {}) }
 }
 
+// SSH twin of `adoptExistingForkRemoteForBranch`. Refspec widening is intentionally absent --
+// SSH's bare `remote add` (no `-t`/`--no-tags`) is a pre-existing, documented gap -- but the
+// tracking ref must still exist before `--set-upstream-to` can succeed, and the upstream link
+// must be made against *this* target's branch rather than a minting sibling's.
+async function adoptExistingSshForkRemoteForBranch(
+  provider: SshGitProvider,
+  execGit: GitRemoteExec,
+  repoPath: string,
+  target: GitPushTarget,
+  store: WorktreePushTargetStore | undefined,
+  worktreeId: string | undefined
+): Promise<GitPushTarget> {
+  if (
+    !(await forkRemoteTrackingRefExists(execGit, repoPath, target.remoteName, target.branchName))
+  ) {
+    await provider.fetchRemoteTrackingRef(
+      repoPath,
+      target.remoteName,
+      target.branchName,
+      `refs/remotes/${target.remoteName}/${target.branchName}`
+    )
+  }
+  const restored = await restoreUpstreamAfterMaterialize(execGit, repoPath, target)
+  const ownerRepoId = worktreeId ? getRepoIdFromWorktreeId(worktreeId) : undefined
+  const owned =
+    store !== undefined &&
+    ownerRepoId !== undefined &&
+    isPushTargetRemoteCreatedByKnownWorktree(store, restored, ownerRepoId)
+  const adopted = owned ? { ...restored, remoteCreated: true } : restored
+  persistMaterializedPushTargetIfCreated(store, worktreeId, adopted)
+  return adopted
+}
+
+// SSH twin of `materializeWorktreePushTargetRemote` -- the relay has no store
+// access and trusts `pushTarget.remoteName` already exists, so a deferred fork
+// remote must be materialized client-side before dispatching push/pull/fetch/
+// fast-forward over the mux (#17828).
+export async function materializeWorktreePushTargetRemoteSsh(
+  provider: SshGitProvider,
+  repoPath: string,
+  target: GitPushTarget,
+  store?: WorktreePushTargetStore,
+  repoId?: string,
+  worktreeId?: string
+): Promise<GitPushTarget> {
+  if (!target.remoteUrl || target.remoteCreated) {
+    return target
+  }
+  const execGit: GitRemoteExec = (args, cwd) => provider.exec(args, cwd)
+  if (await remoteAlreadyMatchesUrl(execGit, repoPath, target.remoteName, target.remoteUrl)) {
+    // Why (review follow-up): mirrors the local short-circuit's upstream restore. Refspec
+    // widening is intentionally NOT mirrored here -- SSH's bare `remote add` (no `-t`/
+    // `--no-tags`, see prepareWorktreePushTargetSsh) is a pre-existing, documented gap this
+    // fix does not touch.
+    //
+    // The tracking ref itself, though, must still exist before `--set-upstream-to` below
+    // can succeed -- a reused remote's wide default refspec covers a future bare fetch,
+    // but imports nothing on its own. Fetch just this branch (a one-off refspec argument,
+    // not a config write) when it isn't already there; skip it otherwise so a repeat
+    // push/pull materialize stays a local-only probe with no relay round-trip.
+    return runForkRemoteAdoption(repoPath, target, () =>
+      adoptExistingSshForkRemoteForBranch(provider, execGit, repoPath, target, store, worktreeId)
+    )
+  }
+  const inflight = getSshWorktreePushTargetMaterializeInflight(provider)
+  const key = worktreePushTargetMaterializeKey(repoPath, target.remoteName)
+  const existing = inflight.get(key)
+  if (existing) {
+    // Why: same per-branch reasoning as the local twin -- a joiner must not inherit the
+    // minter's branch. Rejection propagates rather than adopting a remote the rollback removed.
+    await existing
+    return runForkRemoteAdoption(repoPath, target, () =>
+      adoptExistingSshForkRemoteForBranch(provider, execGit, repoPath, target, store, worktreeId)
+    )
+  }
+  const promise = prepareWorktreePushTargetSsh(provider, repoPath, target, store, repoId)
+    .then((prepared) => restoreUpstreamAfterMaterialize(execGit, repoPath, prepared))
+    .then((prepared) => {
+      persistMaterializedPushTargetIfCreated(store, worktreeId, prepared)
+      return prepared
+    })
+    .finally(() => {
+      if (inflight.get(key) === promise) {
+        inflight.delete(key)
+      }
+    })
+  inflight.set(key, promise)
+  return promise
+}
+
 export async function cleanupUnusedWorktreePushTargetRemoteSsh(
   provider: SshGitProvider,
   repoPath: string,
@@ -1763,17 +2070,9 @@ export async function createRemoteWorktree(
     }
   }
 
-  let preparedPushTarget: GitPushTarget | undefined
-  if (args.pushTarget) {
-    // Why: fork-PR SSH worktrees need contributor-remote setup before create, else Push/Sync target origin.
-    preparedPushTarget = await prepareWorktreePushTargetSsh(
-      provider,
-      repo.path,
-      args.pushTarget,
-      store,
-      repo.id
-    )
-  }
+  // Why: defer the remote add + fetch to first push/pull/fetch/fast-forward
+  // (#17828) instead of paying it at create time for a read-only review.
+  const preparedPushTarget: GitPushTarget | undefined = args.pushTarget
 
   try {
     await timing.time('git_worktree_add', async () =>
@@ -1854,8 +2153,10 @@ export async function createRemoteWorktree(
   const now = Date.now()
   // Why: PR/MR worktrees start from a head ref/SHA but Source Control must compare against the review target branch.
   const metadataBaseRef = args.compareBaseRef ?? remoteTrackingBase?.ref ?? baseBranch
-  let configuredPushTarget: GitPushTarget | undefined
-  if (preparedPushTarget) {
+  // Why: `--set-upstream-to` needs the remote to exist -- true for a same-repo
+  // target but not for a fork remote, which materializes lazily (#17828).
+  let configuredPushTarget: GitPushTarget | undefined = preparedPushTarget
+  if (preparedPushTarget && !preparedPushTarget.remoteUrl) {
     configuredPushTarget = await configureCreatedWorktreePushTargetWithExec(
       (args, cwd) => provider.exec(args, cwd),
       created.path,
@@ -2369,20 +2670,9 @@ export async function createLocalWorktree(
   }
   emitCreateWorktreeProgress(mainWindow, 'creating', args.creationId)
 
-  let preparedPushTarget: GitPushTarget | undefined
-  const requestedPushTarget = args.pushTarget
-  if (requestedPushTarget) {
-    // Why: validate/fetch the contributor remote before create so a failure doesn't leave a half-created worktree with conflicts on retry.
-    preparedPushTarget = await timing.time('prepare_push_target', () =>
-      prepareWorktreePushTarget(
-        repo.path,
-        requestedPushTarget,
-        store,
-        repo.id,
-        localWorktreeGitOptions
-      )
-    )
-  }
+  // Why: defer the remote add + fetch to first push/pull/fetch/fast-forward
+  // (#17828) instead of paying it at create time for a read-only review.
+  const preparedPushTarget: GitPushTarget | undefined = args.pushTarget
 
   const suggestLocalBaseRefUpdate =
     !settings.refreshLocalBaseRefOnWorktreeCreate &&
@@ -2522,9 +2812,10 @@ export async function createLocalWorktree(
     await retireGeneratedWorktreeName(store, repo, settings, effectiveSanitizedName)
   }
 
-  let configuredPushTarget: GitPushTarget | undefined
-  if (preparedPushTarget) {
-    // Why: fork-PR review worktrees publish back to the PR author's branch; set upstream so Push/Sync use the contributor remote, not origin.
+  // Why: `--set-upstream-to` needs the remote to exist -- true for a same-repo
+  // target but not for a fork remote, which materializes lazily (#17828).
+  let configuredPushTarget: GitPushTarget | undefined = preparedPushTarget
+  if (preparedPushTarget && !preparedPushTarget.remoteUrl) {
     configuredPushTarget = await configureCreatedWorktreePushTarget(
       worktreePath,
       branchName,
diff --git a/src/main/ipc/worktrees-create-metadata-persistence.test.ts b/src/main/ipc/worktrees-create-metadata-persistence.test.ts
index 934844de2e3..ac003b3a43e 100644
--- a/src/main/ipc/worktrees-create-metadata-persistence.test.ts
+++ b/src/main/ipc/worktrees-create-metadata-persistence.test.ts
@@ -427,7 +427,10 @@ describe('registerWorktreeHandlers', () => {
     })
   })
 
-  it('configures a PR push target during local create', async () => {
+  // Was "configures a PR push target during local create": create used to mint the
+  // fork remote up front. It now defers to first sync (#17828); the minting itself is
+  // covered by worktree-remote-push-target-materialization.test.ts.
+  it('defers the fork-PR remote during local create and persists the target unmaterialized', async () => {
     listWorktreesMock.mockResolvedValue([
       {
         path: '/workspace/improve-dashboard',
@@ -449,7 +452,7 @@ describe('registerWorktreeHandlers', () => {
       }
     })
 
-    expect(gitExecFileAsyncMock).toHaveBeenCalledWith(
+    expect(gitExecFileAsyncMock).not.toHaveBeenCalledWith(
       [
         'remote',
         'add',
@@ -461,7 +464,7 @@ describe('registerWorktreeHandlers', () => {
       ],
       { cwd: '/workspace/repo' }
     )
-    expect(gitExecFileAsyncMock).toHaveBeenCalledWith(
+    expect(gitExecFileAsyncMock).not.toHaveBeenCalledWith(
       [
         'fetch',
         'pr-prateek-orca',
@@ -469,7 +472,8 @@ describe('registerWorktreeHandlers', () => {
       ],
       { cwd: '/workspace/repo' }
     )
-    expect(gitExecFileAsyncMock).toHaveBeenCalledWith(
+    // Upstream can only be set once the remote exists, so it defers with the remote.
+    expect(gitExecFileAsyncMock).not.toHaveBeenCalledWith(
       [
         'branch',
         '--set-upstream-to',
@@ -478,20 +482,25 @@ describe('registerWorktreeHandlers', () => {
       ],
       { cwd: '/workspace/improve-dashboard' }
     )
+    // Exact object, not objectContaining: `remoteCreated` must stay absent until
+    // something actually mints the remote.
     expect(store.setWorktreeMeta).toHaveBeenCalledWith(
       'repo-1::/workspace/improve-dashboard',
       expect.objectContaining({
-        pushTarget: expect.objectContaining({
+        pushTarget: {
           remoteName: 'pr-prateek-orca',
           branchName: 'prateek/fix-sidebar-agents-toggle',
-          remoteUrl: 'git@github.com:prateek/orca.git',
-          remoteCreated: true
-        })
+          remoteUrl: 'git@github.com:prateek/orca.git'
+        }
       })
     )
   })
 
-  it('keeps the Orca-created marker when a new worktree reuses an Orca-created fork remote', async () => {
+  // Was "keeps the Orca-created marker ...": create used to inherit the marker while
+  // minting. With minting deferred (#17828) create must not claim ownership it has not
+  // earned; marker inheritance now happens at materialization and is covered by
+  // worktree-push-target-setup.test.ts.
+  it('does not claim the Orca-created marker at create when a sibling worktree minted the fork remote', async () => {
     listWorktreesMock.mockResolvedValue([
       {
         path: '/workspace/improve-dashboard',
@@ -538,12 +547,11 @@ describe('registerWorktreeHandlers', () => {
     expect(store.setWorktreeMeta).toHaveBeenCalledWith(
       'repo-1::/workspace/improve-dashboard',
       expect.objectContaining({
-        pushTarget: expect.objectContaining({
+        pushTarget: {
           remoteName: 'pr-contributor-orca',
           branchName: 'contributor/new-fix',
-          remoteUrl: 'https://github.com/contributor/orca.git',
-          remoteCreated: true
-        })
+          remoteUrl: 'https://github.com/contributor/orca.git'
+        }
       })
     )
   })
diff --git a/src/main/ipc/worktrees-ssh-fork-push-target-remote.test.ts b/src/main/ipc/worktrees-ssh-fork-push-target-remote.test.ts
index c952a6be9df..fe80219fa8f 100644
--- a/src/main/ipc/worktrees-ssh-fork-push-target-remote.test.ts
+++ b/src/main/ipc/worktrees-ssh-fork-push-target-remote.test.ts
@@ -2,6 +2,8 @@ import { beforeEach, describe, expect, it, vi } from 'vitest'
 import { validateGitExecArgs } from '../../relay/git-exec-validator'
 import { getSshGitProviderMock, getActiveMultiplexerMock } from './worktrees-test-module-mocks'
 import { handlers, setupWorktreeHandlers, store } from './worktrees-test-harness'
+import { materializeWorktreePushTargetRemoteSsh } from './worktree-remote'
+import type { SshGitProvider } from '../providers/ssh-git-provider'
 
 vi.mock('electron', async () =>
   (await import('./worktrees-test-module-mocks')).electronModuleMock()
@@ -90,7 +92,10 @@ describe('registerWorktreeHandlers', () => {
     setupWorktreeHandlers()
   })
 
-  it('adds the fork remote for an SSH fork-PR worktree through git.exec', async () => {
+  // Was "adds the fork remote ... through git.exec": create used to mint the fork
+  // remote unconditionally. It now defers to first sync (#17828) -- split in two so
+  // each half stays true to a single claim: create stays a no-op, sync still mints.
+  it('defers minting the fork remote for an SSH fork-PR worktree until first sync', async () => {
     const repo = {
       id: 'repo-ssh',
       path: '/remote/repo',
@@ -147,11 +152,13 @@ describe('registerWorktreeHandlers', () => {
       }
     })
 
-    expect(exec).toHaveBeenCalledWith(
+    expect(exec).not.toHaveBeenCalledWith(
       ['remote', 'add', 'pr-contributor-orca', 'https://github.com/contributor/orca.git'],
       '/remote/repo'
     )
-    expect(provider.fetchRemoteTrackingRef).toHaveBeenCalledWith(
+    // fetchRemoteTrackingRef IS called once here, but for create's unrelated
+    // base-ref refresh (origin/main) -- not for the fork remote, which defers.
+    expect(provider.fetchRemoteTrackingRef).not.toHaveBeenCalledWith(
       '/remote/repo',
       'pr-contributor-orca',
       'contributor/fix',
@@ -163,201 +170,58 @@ describe('registerWorktreeHandlers', () => {
         pushTarget: {
           remoteName: 'pr-contributor-orca',
           branchName: 'contributor/fix',
-          remoteUrl: 'https://github.com/contributor/orca.git',
-          remoteCreated: true
+          remoteUrl: 'https://github.com/contributor/orca.git'
         }
       })
     )
   })
 
-  it('names the relay upgrade when an older host still rejects the fork remote', async () => {
-    const repo = {
-      id: 'repo-ssh',
-      path: '/remote/repo',
-      displayName: 'ssh',
-      badgeColor: '#000',
-      addedAt: 0,
-      connectionId: 'conn-1',
-      worktreeBaseRef: 'origin/main'
-    }
-    const provider = {
-      exec: vi.fn().mockImplementation(async (args: string[]) => {
-        if (args[0] === 'remote' && args[1] === 'add') {
-          throw new Error('Destructive git remote operations are not allowed via exec')
-        }
-        if (args[0] === 'remote' && args[1] === 'get-url') {
-          return { stdout: 'git@github.com:stablyai/orca.git\n', stderr: '' }
-        }
-        if (args[0] === 'remote' && args.length === 1) {
-          return { stdout: 'origin\n', stderr: '' }
-        }
-        if (args[0] === 'show-ref') {
-          throw Object.assign(new Error('missing exact ref'), { code: 1 })
-        }
-        return { stdout: '', stderr: '' }
-      }),
-      fetchRemoteTrackingRef: vi.fn().mockResolvedValue(undefined),
-      addWorktree: vi.fn().mockResolvedValue(undefined),
-      listWorktrees: vi.fn().mockResolvedValue([])
-    }
-    const mux = { request: vi.fn().mockResolvedValue(undefined), notify: vi.fn() }
-    store.getRepos.mockReturnValue([repo])
-    store.getRepo.mockReturnValue(repo)
-    getSshGitProviderMock.mockReturnValue(provider)
-    getActiveMultiplexerMock.mockReturnValue(mux)
-
-    await expect(
-      handlers['worktrees:create'](null, {
-        repoId: 'repo-ssh',
-        name: 'contributor-fix',
-        branchNameOverride: 'contributor/fix',
-        pushTarget: {
-          remoteName: 'pr-contributor-orca',
-          branchName: 'contributor/fix',
-          remoteUrl: 'https://github.com/contributor/orca.git'
-        }
-      })
-    ).rejects.toThrow('Reconnect to deploy the latest relay')
-    expect(provider.addWorktree).not.toHaveBeenCalled()
-  })
-
-  it('drops the fork remote it just added when the SSH head fetch fails', async () => {
-    const repo = {
-      id: 'repo-ssh',
-      path: '/remote/repo',
-      displayName: 'ssh',
-      badgeColor: '#000',
-      addedAt: 0,
-      connectionId: 'conn-1',
-      worktreeBaseRef: 'origin/main'
-    }
+  // Companion to the deferral test above: `materializeWorktreePushTargetRemoteSsh` is
+  // exactly what `git:push`/`git:pull`'s SSH dispatch calls before syncing, so this is
+  // "first sync" without needing the sync IPC handlers registered in this harness.
+  it('mints the fork remote for an SSH fork-PR worktree on first sync', async () => {
     const exec = vi.fn().mockImplementation(async (args: string[]) => {
       validateGitExecArgs(args)
       if (args[0] === 'remote' && args[1] === 'get-url') {
-        return { stdout: 'git@github.com:stablyai/orca.git\n', stderr: '' }
+        throw new Error('No such remote')
       }
       if (args[0] === 'remote' && args.length === 1) {
         return { stdout: 'origin\n', stderr: '' }
       }
-      if (args[0] === 'show-ref') {
-        throw Object.assign(new Error('missing exact ref'), { code: 1 })
-      }
       return { stdout: '', stderr: '' }
     })
-    const provider = {
-      exec,
-      fetchRemoteTrackingRef: vi
-        .fn()
-        .mockImplementation(async (_repoPath: string, remote: string) => {
-          if (remote === 'pr-contributor-orca') {
-            throw new Error('network unreachable')
-          }
-        }),
-      addWorktree: vi.fn().mockResolvedValue(undefined),
-      listWorktrees: vi.fn().mockResolvedValue([])
+    const fetchRemoteTrackingRef = vi.fn().mockResolvedValue(undefined)
+    const markRemoteOrcaCreated = vi.fn().mockResolvedValue(undefined)
+    const target = {
+      remoteName: 'pr-contributor-orca',
+      branchName: 'contributor/fix',
+      remoteUrl: 'https://github.com/contributor/orca.git'
     }
-    const mux = { request: vi.fn().mockResolvedValue(undefined), notify: vi.fn() }
-    store.getRepos.mockReturnValue([repo])
-    store.getRepo.mockReturnValue(repo)
-    getSshGitProviderMock.mockReturnValue(provider)
-    getActiveMultiplexerMock.mockReturnValue(mux)
 
-    await expect(
-      handlers['worktrees:create'](null, {
-        repoId: 'repo-ssh',
-        name: 'contributor-fix',
-        branchNameOverride: 'contributor/fix',
-        pushTarget: {
-          remoteName: 'pr-contributor-orca',
-          branchName: 'contributor/fix',
-          remoteUrl: 'https://github.com/contributor/orca.git'
-        }
-      })
-    ).rejects.toThrow('network unreachable')
-
-    expect(exec).toHaveBeenCalledWith(['remote', 'remove', 'pr-contributor-orca'], '/remote/repo')
-    expect(provider.addWorktree).not.toHaveBeenCalled()
-  })
-
-  // Regression: the rollback used to fire on ownership inherited from a sibling
-  // worktree, deleting the remote that worktree was still pushing through.
-  it('keeps a reused fork remote a sibling worktree owns when the SSH head fetch fails', async () => {
-    const repo = {
-      id: 'repo-ssh',
-      path: '/remote/repo',
-      displayName: 'ssh',
-      badgeColor: '#000',
-      addedAt: 0,
-      connectionId: 'conn-1',
-      worktreeBaseRef: 'origin/main'
-    }
-    const exec = vi.fn().mockImplementation(async (args: string[]) => {
-      validateGitExecArgs(args)
-      if (args[0] === 'remote' && args[1] === 'get-url') {
-        return {
-          stdout:
-            args[2] === 'pr-contributor-orca'
-              ? 'git@github.com:contributor/orca.git\n'
-              : 'git@github.com:stablyai/orca.git\n',
-          stderr: ''
-        }
-      }
-      if (args[0] === 'remote' && args.length === 1) {
-        return { stdout: 'origin\npr-contributor-orca\n', stderr: '' }
-      }
-      if (args[0] === 'show-ref') {
-        throw Object.assign(new Error('missing exact ref'), { code: 1 })
-      }
-      return { stdout: '', stderr: '' }
-    })
-    const provider = {
-      exec,
-      fetchRemoteTrackingRef: vi
-        .fn()
-        .mockImplementation(async (_repoPath: string, remote: string) => {
-          if (remote === 'pr-contributor-orca') {
-            throw new Error('network unreachable')
-          }
-        }),
-      addWorktree: vi.fn().mockResolvedValue(undefined),
-      listWorktrees: vi.fn().mockResolvedValue([])
-    }
-    const mux = { request: vi.fn().mockResolvedValue(undefined), notify: vi.fn() }
-    store.getRepos.mockReturnValue([repo])
-    store.getRepo.mockReturnValue(repo)
-    store.getAllWorktreeMeta.mockReturnValue({
-      'repo-ssh::/remote/repo-sibling': {
-        pushTarget: {
-          remoteName: 'pr-contributor-orca',
-          branchName: 'contributor/other',
-          remoteUrl: 'https://github.com/contributor/orca.git',
-          remoteCreated: true
-        }
-      }
-    })
-    getSshGitProviderMock.mockReturnValue(provider)
-    getActiveMultiplexerMock.mockReturnValue(mux)
-
-    await expect(
-      handlers['worktrees:create'](null, {
-        repoId: 'repo-ssh',
-        name: 'contributor-fix',
-        branchNameOverride: 'contributor/fix',
-        pushTarget: {
-          remoteName: 'pr-contributor-orca',
-          branchName: 'contributor/fix',
-          remoteUrl: 'https://github.com/contributor/orca.git'
-        }
-      })
-    ).rejects.toThrow('network unreachable')
-
-    expect(exec).not.toHaveBeenCalledWith(
-      ['remote', 'remove', 'pr-contributor-orca'],
-      '/remote/repo'
+    const result = await materializeWorktreePushTargetRemoteSsh(
+      { exec, fetchRemoteTrackingRef, markRemoteOrcaCreated } as unknown as SshGitProvider,
+      '/remote/repo',
+      target
     )
-    expect(exec).not.toHaveBeenCalledWith(
+
+    expect(result).toEqual({ ...target, remoteCreated: true })
+    expect(exec).toHaveBeenCalledWith(
       ['remote', 'add', 'pr-contributor-orca', 'https://github.com/contributor/orca.git'],
       '/remote/repo'
     )
+    expect(fetchRemoteTrackingRef).toHaveBeenCalledWith(
+      '/remote/repo',
+      'pr-contributor-orca',
+      'contributor/fix',
+      'refs/remotes/pr-contributor-orca/contributor/fix'
+    )
+    expect(markRemoteOrcaCreated).toHaveBeenCalledWith('/remote/repo', 'pr-contributor-orca')
   })
+
+  // The relay-upgrade-messaging, fetch-failure rollback, and sibling-remote-preserved
+  // cases used to be exercised here because create minted the remote unconditionally.
+  // That code (prepareWorktreePushTargetSsh) is unchanged -- it just no longer runs at
+  // create time for a fork remote, only from materializeWorktreePushTargetRemoteSsh on
+  // first sync. Coverage for all three moved with it to
+  // worktree-remote-push-target-materialization.test.ts, which calls that function directly.
 })
diff --git a/src/main/ipc/worktrees-wsl-runtime-routing.test.ts b/src/main/ipc/worktrees-wsl-runtime-routing.test.ts
index 85a015496ed..8c936764291 100644
--- a/src/main/ipc/worktrees-wsl-runtime-routing.test.ts
+++ b/src/main/ipc/worktrees-wsl-runtime-routing.test.ts
@@ -17,6 +17,7 @@ import {
   gitExecFileAsyncMock
 } from './worktrees-test-module-mocks'
 import { handlers, harnessRepo, setupWorktreeHandlers, store } from './worktrees-test-harness'
+import { materializeWorktreePushTargetRemote } from './worktree-remote'
 import type { WorktreeRuntimeStub } from './worktrees-test-runtime-stub'
 import {
   createdWorktreeList,
@@ -243,7 +244,11 @@ describe('registerWorktreeHandlers', () => {
     expectEveryGitCallRoutedTo('Ubuntu')
   })
 
-  it('routes fork push target setup through the selected WSL project runtime', async () => {
+  // Was "routes fork push target setup ... through create": create used to mint the
+  // fork remote (and route it to the selected WSL distro) unconditionally. It now
+  // defers to first sync (#17828) -- split in two so each half stays true to a single
+  // claim: create stays a no-op even for a WSL-routed repo, sync still routes to the distro.
+  it('does not mint a fork remote at create time for a WSL-routed worktree', async () => {
     mockSelectedWslProjectRuntime()
     listWorktreesMock.mockResolvedValue([
       {
@@ -266,6 +271,43 @@ describe('registerWorktreeHandlers', () => {
       }
     })
 
+    const calls = gitExecFileAsyncMock.mock.calls.map((call) => call[0] as string[])
+    expect(calls).not.toContainEqual(['check-ref-format', '--branch', 'contributor/wsl-fork'])
+    expect(calls.some((args) => args[0] === 'remote' && args[1] === 'add')).toBe(false)
+    expect(calls.some((args) => args[0] === 'fetch')).toBe(false)
+    expect(store.setWorktreeMeta).toHaveBeenCalledWith(
+      expect.any(String),
+      expect.objectContaining({
+        pushTarget: {
+          remoteName: 'pr-contributor-orca',
+          branchName: 'contributor/wsl-fork',
+          remoteUrl: 'git@github.com:contributor/orca.git'
+        }
+      })
+    )
+  })
+
+  // Companion to the deferral test above: `materializeWorktreePushTargetRemote` is
+  // exactly what `git:push`/`git:pull`'s local dispatch calls (with the repo's resolved
+  // wslDistro) before syncing, so this is "first sync" without needing that IPC handler
+  // registered in this harness.
+  it('routes fork push target materialization through the selected WSL project runtime', async () => {
+    gitExecFileAsyncMock.mockResolvedValue({ stdout: '', stderr: '' })
+    const target = {
+      remoteName: 'pr-contributor-orca',
+      branchName: 'contributor/wsl-fork',
+      remoteUrl: 'git@github.com:contributor/orca.git'
+    }
+
+    const result = await materializeWorktreePushTargetRemote(
+      '/workspace/repo',
+      target,
+      undefined,
+      undefined,
+      { wslDistro: 'Ubuntu' }
+    )
+
+    expect(result).toEqual({ ...target, remoteCreated: true })
     const wslRoutingOptions = { cwd: '/workspace/repo', wslDistro: 'Ubuntu' }
     expect(gitExecFileAsyncMock).toHaveBeenCalledWith(
       ['check-ref-format', '--branch', 'contributor/wsl-fork'],
@@ -303,18 +345,29 @@ describe('registerWorktreeHandlers', () => {
       ['config', 'remote.pr-contributor-orca.tagOpt', '--no-tags'],
       wslRoutingOptions
     )
+    expect(gitExecFileAsyncMock).toHaveBeenCalledWith(
+      ['config', 'remote.pr-contributor-orca.orca-created', 'true'],
+      wslRoutingOptions
+    )
+    // Why: the mint's fetch is the one call in this sequence that talks to the network --
+    // bounded the same as the deferred short-circuit's fetch (see DEFERRED_PUSH_TARGET_FETCH_TIMEOUT_MS)
+    // so a hung credential prompt can't wedge it forever. Every other call here is local-only
+    // and stays untimed, per `wslRoutingOptions` above.
     expect(gitExecFileAsyncMock).toHaveBeenCalledWith(
       [
         'fetch',
         'pr-contributor-orca',
         '+refs/heads/contributor/wsl-fork*:refs/remotes/pr-contributor-orca/contributor/wsl-fork*'
       ],
-      wslRoutingOptions
+      { ...wslRoutingOptions, timeout: expect.any(Number) }
     )
-    expect(gitExecFileAsyncMock).toHaveBeenCalledWith(
-      ['branch', '--set-upstream-to', 'pr-contributor-orca/contributor/wsl-fork', 'wsl-fork'],
-      { cwd: '/workspace/wsl-fork', wslDistro: 'Ubuntu' }
+    // wslDistro threaded through every subprocess this materialize made, not just the adds.
+    const distros = new Set(
+      gitExecFileAsyncMock.mock.calls.map(
+        ([, options]) => (options as { wslDistro?: string } | undefined)?.wslDistro
+      )
     )
+    expect(distros).toEqual(new Set(['Ubuntu']))
   })
 
   it('routes selected PR branch conflict lookup through the selected WSL project runtime', async () => {
diff --git a/src/main/providers/ssh-git-provider-api.test.ts b/src/main/providers/ssh-git-provider-api.test.ts
index dd0915dafe5..3e6ebf76d74 100644
--- a/src/main/providers/ssh-git-provider-api.test.ts
+++ b/src/main/providers/ssh-git-provider-api.test.ts
@@ -54,6 +54,7 @@ describe('SshGitProvider public API parity', () => {
       'worktreeIsClean',
       'refreshLocalBaseRefForWorktreeCreate',
       'renameCurrentBranch',
+      'markRemoteOrcaCreated',
       'forceDeletePreservedBranch',
       'exec',
       'clone',
@@ -63,7 +64,7 @@ describe('SshGitProvider public API parity', () => {
       'getRemoteCommitUrl'
     ] as const
 
-    expect(methods).toHaveLength(51)
+    expect(methods).toHaveLength(52)
     for (const method of methods) {
       expect(provider[method], method).toBeTypeOf('function')
     }
diff --git a/src/main/providers/ssh-git-provider-worktree.test.ts b/src/main/providers/ssh-git-provider-worktree.test.ts
index 6ddff0a1f68..03722c93a52 100644
--- a/src/main/providers/ssh-git-provider-worktree.test.ts
+++ b/src/main/providers/ssh-git-provider-worktree.test.ts
@@ -395,4 +395,38 @@ describe('SshGitProvider', () => {
       provider.forceDeletePreservedBranch('/home/user/repo', 'you/fix-auth', 'abc123')
     ).rejects.toBe(error)
   })
+
+  it('markRemoteOrcaCreated sends the narrow provenance-marker request', async () => {
+    await provider.markRemoteOrcaCreated('/home/user/repo', 'pr-contributor-orca')
+    expect(mux.request).toHaveBeenCalledWith('git.markRemoteOrcaCreated', {
+      repoPath: '/home/user/repo',
+      remoteName: 'pr-contributor-orca'
+    })
+  })
+
+  it('markRemoteOrcaCreated degrades to a one-time warning for an older relay', async () => {
+    mux.request.mockRejectedValue(methodNotFound('git.markRemoteOrcaCreated'))
+    const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
+
+    try {
+      await expect(
+        provider.markRemoteOrcaCreated('/home/user/repo', 'pr-contributor-orca')
+      ).resolves.toBeUndefined()
+      await expect(
+        provider.markRemoteOrcaCreated('/home/user/repo', 'pr-contributor-orca')
+      ).resolves.toBeUndefined()
+      expect(warnSpy).toHaveBeenCalledTimes(1)
+    } finally {
+      warnSpy.mockRestore()
+    }
+  })
+
+  it('markRemoteOrcaCreated rethrows non-method-not-found errors', async () => {
+    const error = new Error('remote config write failed')
+    mux.request.mockRejectedValueOnce(error)
+
+    await expect(
+      provider.markRemoteOrcaCreated('/home/user/repo', 'pr-contributor-orca')
+    ).rejects.toBe(error)
+  })
 })
diff --git a/src/main/providers/ssh-git-worktree-provider.ts b/src/main/providers/ssh-git-worktree-provider.ts
index 8f1430d8e75..8dae1413321 100644
--- a/src/main/providers/ssh-git-worktree-provider.ts
+++ b/src/main/providers/ssh-git-worktree-provider.ts
@@ -24,6 +24,7 @@ function filterUntrackedPorcelainStatus(stdout: string | undefined): string | un
 
 export class SshGitWorktreeProvider extends SshGitReviewHeadProvider {
   private loggedWorktreeIsCleanFallback = false
+  private loggedMarkRemoteOrcaCreatedFallback = false
   // Why: reconnect replaces this provider, so an upgraded relay is naturally re-probed.
   private readonly worktreeIsCleanCapabilityCache = new CapabilityProbeCache<
     typeof WORKTREE_IS_CLEAN_CAPABILITY
@@ -131,6 +132,25 @@ export class SshGitWorktreeProvider extends SshGitReviewHeadProvider {
     })
   }
 
+  // Why: git.exec blocks config writes outright, so the deferred fork-remote provenance
+  // marker (#17828) needs its own RPC. Non-essential to push/pull, so an older relay
+  // that hasn't shipped it yet degrades to no marker rather than failing materialization.
+  async markRemoteOrcaCreated(repoPath: string, remoteName: string): Promise<void> {
+    try {
+      await this.mux.request('git.markRemoteOrcaCreated', { repoPath, remoteName })
+    } catch (error) {
+      if (!isJsonRpcMethodNotFoundError(error)) {
+        throw error
+      }
+      if (!this.loggedMarkRemoteOrcaCreatedFallback) {
+        this.loggedMarkRemoteOrcaCreatedFallback = true
+        console.warn(
+          "[ssh-git] Relay does not implement git.markRemoteOrcaCreated; this remote will lack a git-config provenance marker permanently (reconnecting does not retroactively add it -- only a newer relay deployment does, for remotes added after that). The store's remoteCreated flag remains the fallback ownership signal for cleanup."
+        )
+      }
+    }
+  }
+
   async forceDeletePreservedBranch(
     repoPath: string,
     branchName: string,
diff --git a/src/main/runtime/orca-runtime-file-commands.ts b/src/main/runtime/orca-runtime-file-commands.ts
index c44daefacfd..c195ee5dbd8 100644
--- a/src/main/runtime/orca-runtime-file-commands.ts
+++ b/src/main/runtime/orca-runtime-file-commands.ts
@@ -97,6 +97,16 @@ export class OrcaRuntimeWithFileCommands extends OrcaRuntimeWithPreservedBranchC
             linkedWorkItem: meta.linkedWorkItem
           }
         : null
+    },
+    // Why (#17828 review follow-up): RuntimeGitSyncCommands materializes with no store to
+    // avoid unrelated side effects; this is its only way back into the persisted
+    // `pushTarget.remoteCreated` flag that #17842's orphan sweep relies on.
+    persistMaterializedPushTarget: (worktreeId, pushTarget) => {
+      const store = this.store
+      if (!store?.setWorktreeMeta) {
+        return
+      }
+      store.setWorktreeMeta(worktreeId, { pushTarget })
     }
   })
 
diff --git a/src/main/runtime/orca-runtime-resolve-browser-network-execution-host-for-worktree.ts b/src/main/runtime/orca-runtime-resolve-browser-network-execution-host-for-worktree.ts
index 3ae942280eb..87411ad55d7 100644
--- a/src/main/runtime/orca-runtime-resolve-browser-network-execution-host-for-worktree.ts
+++ b/src/main/runtime/orca-runtime-resolve-browser-network-execution-host-for-worktree.ts
@@ -23,6 +23,7 @@ import { homedir } from 'node:os'
 import { getExplicitWorktreeIdSelector } from './runtime-worktree-selection'
 import { WORKTREE_ID_SEPARATOR } from '../../shared/worktree/id'
 import { WorktreeIdRequiresFullPathError } from './runtime-worktree-lineage-resolution'
+import { triggerTerminalSpawnPushTargetMaterialization } from './runtime-terminal-spawn-push-target-materialization'
 
 export class OrcaRuntimeWithResolveBrowserNetworkExecutionHostForWorktree extends OrcaRuntimeWithTransitionGraphReloadToTerminalState {
   protected resolveBrowserNetworkExecutionHostForWorktree(worktree?: {
@@ -124,6 +125,14 @@ export class OrcaRuntimeWithResolveBrowserNetworkExecutionHostForWorktree extend
     const worktreeSelector = parsed?.type === 'worktree' ? `id:${parsed.worktreeId}` : selector
     const worktree = await this.resolveWorktreeSelector(worktreeSelector)
     const repo = this.store?.getRepo(worktree.repoId) ?? null
+    triggerTerminalSpawnPushTargetMaterialization(
+      worktree.path,
+      worktree.pushTarget,
+      repo,
+      this.store,
+      worktree.repoId,
+      worktree.id
+    )
     return {
       scope: {
         id: worktree.id,
diff --git a/src/main/runtime/orca-runtime-tests/worktree-removal-and-reconciliation.spec.ts b/src/main/runtime/orca-runtime-tests/worktree-removal-and-reconciliation.spec.ts
index 64caa486013..65da9caccde 100644
--- a/src/main/runtime/orca-runtime-tests/worktree-removal-and-reconciliation.spec.ts
+++ b/src/main/runtime/orca-runtime-tests/worktree-removal-and-reconciliation.spec.ts
@@ -404,27 +404,36 @@ describe('OrcaRuntimeService', () => {
           wslDistro: 'Ubuntu'
         }
       )
-      expect(gitSpy).toHaveBeenCalledWith(
+      // Why: a fork remote is deferred to first push/pull/fetch/fast-forward
+      // (#17828) instead of being added/fetched at create time, so the create
+      // path must not run check-ref-format, the fork fetch, or set-upstream-to
+      // -- the metadata is persisted untouched for on-demand materialization.
+      expect(gitSpy).not.toHaveBeenCalledWith(
         ['check-ref-format', '--branch', 'contributor/runtime-wsl'],
-        { cwd: TEST_REPO_PATH, wslDistro: 'Ubuntu' }
+        expect.anything()
       )
-      expect(gitSpy).toHaveBeenCalledWith(
+      expect(gitSpy).not.toHaveBeenCalledWith(
         [
           'fetch',
           'pr-contributor-orca',
           '+refs/heads/contributor/runtime-wsl*:refs/remotes/pr-contributor-orca/contributor/runtime-wsl*'
         ],
-        { cwd: TEST_REPO_PATH, wslDistro: 'Ubuntu' }
+        expect.anything()
       )
-      expect(gitSpy).toHaveBeenCalledWith(
+      expect(gitSpy).not.toHaveBeenCalledWith(
         [
           'branch',
           '--set-upstream-to',
           'pr-contributor-orca/contributor/runtime-wsl',
           'runtime-wsl'
         ],
-        { cwd: createdWorktree.path, wslDistro: 'Ubuntu' }
+        expect.anything()
       )
+      expect(result.worktree.pushTarget).toEqual({
+        remoteName: 'pr-contributor-orca',
+        branchName: 'contributor/runtime-wsl',
+        remoteUrl: 'git@github.com:contributor/orca.git'
+      })
       expect(listWorktrees).toHaveBeenCalledWith(TEST_REPO_PATH, { wslDistro: 'Ubuntu' })
     } finally {
       gitSpy.mockRestore()
diff --git a/src/main/runtime/runtime-git-command-target.ts b/src/main/runtime/runtime-git-command-target.ts
index 540fd86f5c5..47131ce7e63 100644
--- a/src/main/runtime/runtime-git-command-target.ts
+++ b/src/main/runtime/runtime-git-command-target.ts
@@ -1,6 +1,6 @@
 import type { GlobalSettings } from '../../shared/global-settings-types'
 import type { Repo } from '../../shared/repo-types'
-import type { GitWorktreeInfo, Worktree } from '../../shared/worktree/types'
+import type { GitPushTarget, GitWorktreeInfo, Worktree } from '../../shared/worktree/types'
 import type { GitRuntimeOptions } from '../git/git-runtime-options'
 import type { CommitMessageAgentEnvironmentResolvers } from '../text-generation/commit-message-agent-environment'
 import type { PullRequestLinkedIssueMeta } from '../source-control/pull-request-linked-issue'
@@ -22,6 +22,11 @@ export type RuntimeGitCommandHost = {
   /** `undefined` keeps cached metadata; `null` is the authoritative unlinked answer. */
   getWorktreeLinkedIssue?(worktreeId: string): number | null | undefined
   getWorktreeLinkedIssueMeta?(worktreeId: string): PullRequestLinkedIssueMeta | null | undefined
+  /** Why (#17828 review follow-up): RuntimeGitSyncCommands deliberately materializes with
+   *  no store (avoids unrelated ownership-inheritance/refspec-migration side effects), so a
+   *  lazily-minted remote still needs a way back into the store's `pushTarget.remoteCreated`
+   *  for #17842's orphan sweep. Called only when materialize reports `remoteCreated: true`. */
+  persistMaterializedPushTarget?(worktreeId: string, pushTarget: GitPushTarget): void
 }
 
 export function localGitOptionsForTarget(target: RuntimeGitTarget): GitRuntimeOptions {
diff --git a/src/main/runtime/runtime-git-sync-commands.ts b/src/main/runtime/runtime-git-sync-commands.ts
index 7cc892bac75..f68b82aac79 100644
--- a/src/main/runtime/runtime-git-sync-commands.ts
+++ b/src/main/runtime/runtime-git-sync-commands.ts
@@ -9,11 +9,32 @@ import {
   getSshGitProvider,
   SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE
 } from '../providers/ssh-git-dispatch'
-import { localGitOptionsForTarget, type RuntimeGitCommandHost } from './runtime-git-command-target'
+import {
+  materializeWorktreePushTargetRemote,
+  materializeWorktreePushTargetRemoteSsh
+} from '../ipc/worktree-remote'
+import {
+  localGitOptionsForTarget,
+  type RuntimeGitCommandHost,
+  type RuntimeGitTarget
+} from './runtime-git-command-target'
 
 export class RuntimeGitSyncCommands {
   constructor(private readonly host: RuntimeGitCommandHost) {}
 
+  // Why (#17828 review follow-up): this class deliberately materializes with no store (see
+  // the `undefined` args below) to avoid unrelated ownership-inheritance/refspec-migration
+  // side effects on the RPC path -- so persistence goes through the host callback instead,
+  // using `target.worktree.id` already resolved here rather than threading a store through.
+  private persistMaterializedPushTargetIfCreated(
+    target: RuntimeGitTarget,
+    materialized: GitPushTarget | undefined
+  ): void {
+    if (materialized?.remoteCreated) {
+      this.host.persistMaterializedPushTarget?.(target.worktree.id, materialized)
+    }
+  }
+
   async abortRuntimeGitMerge(worktreeSelector: string): Promise<{ ok: true }> {
     const target = await this.host.resolveRuntimeGitTarget(worktreeSelector)
     const provider = target.connectionId ? getSshGitProvider(target.connectionId) : null
@@ -73,10 +94,24 @@ export class RuntimeGitSyncCommands {
       if (!provider) {
         throw new Error(SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE)
       }
-      await provider.fetchRemote(target.worktree.path, pushTarget)
+      const materializedPushTarget = pushTarget
+        ? await materializeWorktreePushTargetRemoteSsh(provider, target.worktree.path, pushTarget)
+        : undefined
+      this.persistMaterializedPushTargetIfCreated(target, materializedPushTarget)
+      await provider.fetchRemote(target.worktree.path, materializedPushTarget)
       return { ok: true }
     }
-    await gitFetch(target.worktree.path, pushTarget, {
+    const materializedPushTarget = pushTarget
+      ? await materializeWorktreePushTargetRemote(
+          target.worktree.path,
+          pushTarget,
+          undefined,
+          target.repo?.id,
+          localGitOptionsForTarget(target)
+        )
+      : undefined
+    this.persistMaterializedPushTargetIfCreated(target, materializedPushTarget)
+    await gitFetch(target.worktree.path, materializedPushTarget, {
       ...localGitOptionsForTarget(target),
       admissionTier: 'interactive'
     })
@@ -111,10 +146,24 @@ export class RuntimeGitSyncCommands {
       if (!provider) {
         throw new Error(SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE)
       }
-      await provider.pullBranch(target.worktree.path, pushTarget)
+      const materializedPushTarget = pushTarget
+        ? await materializeWorktreePushTargetRemoteSsh(provider, target.worktree.path, pushTarget)
+        : undefined
+      this.persistMaterializedPushTargetIfCreated(target, materializedPushTarget)
+      await provider.pullBranch(target.worktree.path, materializedPushTarget)
       return { ok: true }
     }
-    await gitPull(target.worktree.path, pushTarget, {
+    const materializedPushTarget = pushTarget
+      ? await materializeWorktreePushTargetRemote(
+          target.worktree.path,
+          pushTarget,
+          undefined,
+          target.repo?.id,
+          localGitOptionsForTarget(target)
+        )
+      : undefined
+    this.persistMaterializedPushTargetIfCreated(target, materializedPushTarget)
+    await gitPull(target.worktree.path, materializedPushTarget, {
       ...localGitOptionsForTarget(target),
       admissionTier: 'interactive'
     })
@@ -131,10 +180,24 @@ export class RuntimeGitSyncCommands {
       if (!provider) {
         throw new Error(SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE)
       }
-      await provider.fastForwardBranch(target.worktree.path, pushTarget)
+      const materializedPushTarget = pushTarget
+        ? await materializeWorktreePushTargetRemoteSsh(provider, target.worktree.path, pushTarget)
+        : undefined
+      this.persistMaterializedPushTargetIfCreated(target, materializedPushTarget)
+      await provider.fastForwardBranch(target.worktree.path, materializedPushTarget)
       return { ok: true }
     }
-    await gitFastForward(target.worktree.path, pushTarget, {
+    const materializedPushTarget = pushTarget
+      ? await materializeWorktreePushTargetRemote(
+          target.worktree.path,
+          pushTarget,
+          undefined,
+          target.repo?.id,
+          localGitOptionsForTarget(target)
+        )
+      : undefined
+    this.persistMaterializedPushTargetIfCreated(target, materializedPushTarget)
+    await gitFastForward(target.worktree.path, materializedPushTarget, {
       ...localGitOptionsForTarget(target),
       admissionTier: 'interactive'
     })
@@ -170,12 +233,26 @@ export class RuntimeGitSyncCommands {
       if (!provider) {
         throw new Error(SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE)
       }
-      await provider.pushBranch(target.worktree.path, publish === true, pushTarget, {
+      const materializedPushTarget = pushTarget
+        ? await materializeWorktreePushTargetRemoteSsh(provider, target.worktree.path, pushTarget)
+        : undefined
+      this.persistMaterializedPushTargetIfCreated(target, materializedPushTarget)
+      await provider.pushBranch(target.worktree.path, publish === true, materializedPushTarget, {
         forceWithLease: forceWithLease === true
       })
       return { ok: true }
     }
-    await gitPush(target.worktree.path, publish === true, pushTarget, {
+    const materializedPushTarget = pushTarget
+      ? await materializeWorktreePushTargetRemote(
+          target.worktree.path,
+          pushTarget,
+          undefined,
+          target.repo?.id,
+          localGitOptionsForTarget(target)
+        )
+      : undefined
+    this.persistMaterializedPushTargetIfCreated(target, materializedPushTarget)
+    await gitPush(target.worktree.path, publish === true, materializedPushTarget, {
       forceWithLease: forceWithLease === true,
       ...localGitOptionsForTarget(target),
       admissionTier: 'interactive'
diff --git a/src/main/runtime/runtime-local-git-worktree-create.ts b/src/main/runtime/runtime-local-git-worktree-create.ts
index 9875e5a07d0..4e4b3ebe0b5 100644
--- a/src/main/runtime/runtime-local-git-worktree-create.ts
+++ b/src/main/runtime/runtime-local-git-worktree-create.ts
@@ -2,10 +2,7 @@ import type { GitPushTarget, GitWorktreeInfo } from '../../shared/worktree/types
 import type { Repo } from '../../shared/repo-types'
 import { resolveCreatedWorktree } from '../ipc/created-worktree-reconciliation'
 import { normalizeSparseDirectories } from '../ipc/sparse-checkout-directories'
-import {
-  configureCreatedWorktreePushTarget,
-  prepareWorktreePushTarget
-} from '../ipc/worktree-remote'
+import { configureCreatedWorktreePushTarget } from '../ipc/worktree-remote'
 import {
   addSparseWorktree,
   addWorktree,
@@ -129,15 +126,11 @@ export async function createRuntimeLocalGitWorktree(args: {
   if (args.request.sparseCheckout && sparseDirectories.length === 0) {
     throw new Error('Sparse checkout requires at least one repo-relative directory.')
   }
+  // Why: defer the remote add + fetch (fork case) or the redundant re-fetch
+  // (same-repo case, already fetched while resolving the PR start point) to
+  // first use -- push/pull/fetch/fast-forward materialize it on demand
+  // (#17828). Metadata is persisted untouched; only the git mutation defers.
   const preparedPushTarget = args.request.pushTarget
-    ? await prepareWorktreePushTarget(
-        args.repo.path,
-        args.request.pushTarget,
-        args.store,
-        args.repo.id,
-        args.localWorktreeGitOptions
-      )
-    : undefined
   const suggestLocalBaseRefUpdate =
     !args.settings.refreshLocalBaseRefOnWorktreeCreate &&
     !args.settings.localBaseRefSuggestionDismissed &&
@@ -242,14 +235,18 @@ export async function createRuntimeLocalGitWorktree(args: {
       args.effectiveSanitizedName!
     )
   }
-  const configuredPushTarget = preparedPushTarget
-    ? await configureCreatedWorktreePushTarget(
-        args.worktreePath,
-        args.branchName,
-        preparedPushTarget,
-        args.localWorktreeGitOptions
-      )
-    : undefined
+  // Why: `--set-upstream-to` requires the remote to already exist -- safe for a
+  // same-repo target (its remote, e.g. `origin`, always exists) but not for a
+  // deferred fork remote, which is materialized lazily at first push/pull/fetch.
+  const configuredPushTarget =
+    preparedPushTarget && !preparedPushTarget.remoteUrl
+      ? await configureCreatedWorktreePushTarget(
+          args.worktreePath,
+          args.branchName,
+          preparedPushTarget,
+          args.localWorktreeGitOptions
+        )
+      : preparedPushTarget
   const { created } = await resolveCreatedWorktree(
     args.repo.path,
     args.worktreePath,
diff --git a/src/main/runtime/runtime-terminal-spawn-push-target-materialization.test.ts b/src/main/runtime/runtime-terminal-spawn-push-target-materialization.test.ts
new file mode 100644
index 00000000000..748225de225
--- /dev/null
+++ b/src/main/runtime/runtime-terminal-spawn-push-target-materialization.test.ts
@@ -0,0 +1,176 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { GitPushTarget } from '../../shared/worktree/types'
+import type { Repo } from '../../shared/repo-types'
+import type { Store } from '../persistence'
+
+const {
+  materializeLocalMock,
+  materializeSshMock,
+  getSshGitProviderMock,
+  getLocalProjectWorktreeGitOptionsMock
+} = vi.hoisted(() => ({
+  materializeLocalMock: vi.fn(),
+  materializeSshMock: vi.fn(),
+  getSshGitProviderMock: vi.fn(),
+  getLocalProjectWorktreeGitOptionsMock: vi.fn()
+}))
+vi.mock('../ipc/worktree-remote', () => ({
+  materializeWorktreePushTargetRemote: materializeLocalMock,
+  materializeWorktreePushTargetRemoteSsh: materializeSshMock
+}))
+vi.mock('../providers/ssh-git-dispatch', () => ({
+  getSshGitProvider: getSshGitProviderMock
+}))
+vi.mock('../project-runtime-git-options', () => ({
+  getLocalProjectWorktreeGitOptions: getLocalProjectWorktreeGitOptionsMock
+}))
+
+import { triggerTerminalSpawnPushTargetMaterialization } from './runtime-terminal-spawn-push-target-materialization'
+
+const WORKTREE_PATH = '/repo/worktree'
+const FORK_URL = 'git@github.com:contributor/orca.git'
+const REPO_ID = 'repo-1'
+const STORE = {} as Store
+const LOCAL_REPO = { id: REPO_ID, path: '/repo', connectionId: null } as unknown as Repo
+const SSH_REPO = { id: REPO_ID, path: '/repo', connectionId: 'conn-1' } as unknown as Repo
+
+function forkTarget(overrides: Partial<GitPushTarget> = {}): GitPushTarget {
+  return {
+    remoteName: 'pr-contributor-orca',
+    branchName: 'contributor/fix',
+    remoteUrl: FORK_URL,
+    ...overrides
+  }
+}
+
+// Flush the fire-and-forget microtask queue so assertions see the dispatched call.
+const flush = (): Promise<void> => new Promise((resolve) => setImmediate(resolve))
+
+describe('triggerTerminalSpawnPushTargetMaterialization', () => {
+  let warnSpy: ReturnType<typeof vi.spyOn>
+
+  beforeEach(() => {
+    materializeLocalMock.mockReset().mockResolvedValue(undefined)
+    materializeSshMock.mockReset().mockResolvedValue(undefined)
+    getSshGitProviderMock.mockReset()
+    getLocalProjectWorktreeGitOptionsMock.mockReset().mockReturnValue({})
+    warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
+  })
+
+  afterEach(() => {
+    warnSpy.mockRestore()
+  })
+
+  it('is a no-op when there is no push target', () => {
+    triggerTerminalSpawnPushTargetMaterialization(WORKTREE_PATH, undefined, LOCAL_REPO, STORE)
+    expect(materializeLocalMock).not.toHaveBeenCalled()
+    expect(materializeSshMock).not.toHaveBeenCalled()
+  })
+
+  it('is a no-op for a same-repo push target with no remoteUrl', () => {
+    triggerTerminalSpawnPushTargetMaterialization(
+      WORKTREE_PATH,
+      forkTarget({ remoteUrl: undefined }),
+      LOCAL_REPO,
+      STORE
+    )
+    expect(materializeLocalMock).not.toHaveBeenCalled()
+  })
+
+  it('is a no-op when the target already reports remoteCreated', () => {
+    triggerTerminalSpawnPushTargetMaterialization(
+      WORKTREE_PATH,
+      forkTarget({ remoteCreated: true }),
+      LOCAL_REPO,
+      STORE
+    )
+    expect(materializeLocalMock).not.toHaveBeenCalled()
+  })
+
+  it('materializes over the local transport with resolved WSL git options, repoId and worktreeId, fire-and-forget', () => {
+    getLocalProjectWorktreeGitOptionsMock.mockReturnValue({ wslDistro: 'Ubuntu' })
+    const target = forkTarget()
+    const result = triggerTerminalSpawnPushTargetMaterialization(
+      WORKTREE_PATH,
+      target,
+      LOCAL_REPO,
+      STORE,
+      REPO_ID,
+      'worktree-1'
+    )
+    expect(result).toBeUndefined()
+    expect(getLocalProjectWorktreeGitOptionsMock).toHaveBeenCalledWith(STORE, LOCAL_REPO)
+    expect(materializeLocalMock).toHaveBeenCalledWith(
+      WORKTREE_PATH,
+      target,
+      STORE,
+      REPO_ID,
+      { wslDistro: 'Ubuntu' },
+      'worktree-1'
+    )
+    expect(materializeSshMock).not.toHaveBeenCalled()
+  })
+
+  it('materializes over SSH when the repo has a connectionId and a provider is registered', () => {
+    const provider = { exec: vi.fn() }
+    getSshGitProviderMock.mockReturnValue(provider)
+    const target = forkTarget()
+    triggerTerminalSpawnPushTargetMaterialization(
+      WORKTREE_PATH,
+      target,
+      SSH_REPO,
+      STORE,
+      REPO_ID,
+      'worktree-1'
+    )
+    expect(getSshGitProviderMock).toHaveBeenCalledWith('conn-1')
+    expect(materializeSshMock).toHaveBeenCalledWith(
+      provider,
+      WORKTREE_PATH,
+      target,
+      STORE,
+      undefined,
+      'worktree-1'
+    )
+    expect(materializeLocalMock).not.toHaveBeenCalled()
+    expect(getLocalProjectWorktreeGitOptionsMock).not.toHaveBeenCalled()
+  })
+
+  it('is a no-op when the SSH connection has dropped (no registered provider)', () => {
+    getSshGitProviderMock.mockReturnValue(undefined)
+    triggerTerminalSpawnPushTargetMaterialization(WORKTREE_PATH, forkTarget(), SSH_REPO, STORE)
+    expect(materializeSshMock).not.toHaveBeenCalled()
+    expect(materializeLocalMock).not.toHaveBeenCalled()
+  })
+
+  it('falls back to default git options when WSL project runtime resolution throws', () => {
+    getLocalProjectWorktreeGitOptionsMock.mockImplementation(() => {
+      throw new Error('repair-required')
+    })
+    triggerTerminalSpawnPushTargetMaterialization(WORKTREE_PATH, forkTarget(), LOCAL_REPO, STORE)
+    expect(materializeLocalMock).toHaveBeenCalledWith(
+      WORKTREE_PATH,
+      forkTarget(),
+      STORE,
+      undefined,
+      {},
+      undefined
+    )
+    expect(warnSpy).toHaveBeenCalledWith(
+      expect.stringContaining('failed to resolve local git options'),
+      expect.any(Error)
+    )
+  })
+
+  it('swallows a materialize rejection instead of crashing the caller', async () => {
+    materializeLocalMock.mockRejectedValue(new Error('remote add failed'))
+    expect(() =>
+      triggerTerminalSpawnPushTargetMaterialization(WORKTREE_PATH, forkTarget(), LOCAL_REPO, STORE)
+    ).not.toThrow()
+    await flush()
+    expect(warnSpy).toHaveBeenCalledWith(
+      expect.stringContaining('failed to materialize push target remote'),
+      expect.any(Error)
+    )
+  })
+})
diff --git a/src/main/runtime/runtime-terminal-spawn-push-target-materialization.ts b/src/main/runtime/runtime-terminal-spawn-push-target-materialization.ts
new file mode 100644
index 00000000000..958ccb99d14
--- /dev/null
+++ b/src/main/runtime/runtime-terminal-spawn-push-target-materialization.ts
@@ -0,0 +1,84 @@
+import { getSshGitProvider } from '../providers/ssh-git-dispatch'
+import {
+  materializeWorktreePushTargetRemote,
+  materializeWorktreePushTargetRemoteSsh
+} from '../ipc/worktree-remote'
+import { getLocalProjectWorktreeGitOptions } from '../project-runtime-git-options'
+import type { GitPushTarget } from '../../shared/worktree/types'
+import type { Repo } from '../../shared/repo-types'
+import type { Store } from '../persistence'
+
+// Why (#17828): a fork-PR remote deferred at worktree-create time must exist before an
+// autonomous agent's raw git commands run in a freshly opened terminal -- "sync through
+// Orca first" isn't an option mid-task. Fires on every terminal spawn into the worktree;
+// materialize() is already a no-op once the remote exists, so repeat spawns cost one probe.
+// Never awaited by callers: terminal spawn must not block on remote-add/fetch network I/O.
+export function triggerTerminalSpawnPushTargetMaterialization(
+  worktreePath: string,
+  pushTarget: GitPushTarget | undefined,
+  repo: Repo | null | undefined,
+  store: Store | undefined,
+  repoId?: string,
+  worktreeId?: string
+): void {
+  if (!pushTarget?.remoteUrl || pushTarget.remoteCreated) {
+    return
+  }
+  const connectionId = repo?.connectionId ?? undefined
+  const materialized = connectionId
+    ? materializeOverSsh(connectionId, worktreePath, pushTarget, store, worktreeId)
+    : materializeWorktreePushTargetRemote(
+        worktreePath,
+        pushTarget,
+        store,
+        repoId,
+        localGitOptionsForTerminalSpawn(store, repo),
+        worktreeId
+      )
+  materialized.catch((error: unknown) => {
+    console.warn(
+      `[terminal-spawn] failed to materialize push target remote for ${worktreePath}:`,
+      error
+    )
+  })
+}
+
+function materializeOverSsh(
+  connectionId: string,
+  worktreePath: string,
+  pushTarget: GitPushTarget,
+  store: Store | undefined,
+  worktreeId: string | undefined
+): Promise<GitPushTarget> {
+  const provider = getSshGitProvider(connectionId)
+  if (!provider) {
+    // Why: connection dropped -- the next Orca-driven sync action will retry via its own dispatch.
+    return Promise.resolve(pushTarget)
+  }
+  return materializeWorktreePushTargetRemoteSsh(
+    provider,
+    worktreePath,
+    pushTarget,
+    store,
+    undefined,
+    worktreeId
+  )
+}
+
+function localGitOptionsForTerminalSpawn(
+  store: Store | undefined,
+  repo: Repo | null | undefined
+): { wslDistro?: string } {
+  if (!store || !repo) {
+    return {}
+  }
+  try {
+    // Why: a WSL-hosted repo's remote add/fetch must run under the same distro as
+    // the terminal, or it can target the wrong git binary entirely (repair-required
+    // project runtimes throw here -- fall back to host git rather than crash spawn).
+    return getLocalProjectWorktreeGitOptions(store, repo)
+  } catch (error) {
+    console.warn(`[terminal-spawn] failed to resolve local git options for ${repo.path}:`, error)
+    return {}
+  }
+}
diff --git a/src/preload/api/git-bridge.ts b/src/preload/api/git-bridge.ts
index 987abab14fc..822af96714d 100644
--- a/src/preload/api/git-bridge.ts
+++ b/src/preload/api/git-bridge.ts
@@ -67,6 +67,7 @@ export const gitApi = {
   }): Promise<GitUpstreamStatus> => ipcRenderer.invoke('git:upstreamStatus', args),
   fetch: (args: {
     worktreePath: string
+    worktreeId?: string
     connectionId?: string
     pushTarget?: GitPushTarget
   }): Promise<void> => ipcRenderer.invoke('git:fetch', args),
@@ -77,6 +78,7 @@ export const gitApi = {
   }): Promise<GitForkSyncResult> => ipcRenderer.invoke('git:syncFork', args),
   push: (args: {
     worktreePath: string
+    worktreeId?: string
     publish?: boolean
     forceWithLease?: boolean
     connectionId?: string
@@ -84,11 +86,13 @@ export const gitApi = {
   }): Promise<void> => ipcRenderer.invoke('git:push', args),
   pull: (args: {
     worktreePath: string
+    worktreeId?: string
     connectionId?: string
     pushTarget?: GitPushTarget
   }): Promise<void> => ipcRenderer.invoke('git:pull', args),
   fastForward: (args: {
     worktreePath: string
+    worktreeId?: string
     connectionId?: string
     pushTarget?: GitPushTarget
   }): Promise<void> => ipcRenderer.invoke('git:fastForward', args),
diff --git a/src/relay/git-handler-exec-operations.ts b/src/relay/git-handler-exec-operations.ts
index 510b7d0b9ee..f7d0c320697 100644
--- a/src/relay/git-handler-exec-operations.ts
+++ b/src/relay/git-handler-exec-operations.ts
@@ -34,6 +34,21 @@ export class GitHandlerExecOperations extends GitHandlerOperationContext {
     )
   }
 
+  // Why: generic git.exec blocks all `git config` writes outright (CONFIG_READ_ONLY_FLAGS),
+  // so a deferred fork remote's provenance marker (#17828) needs its own narrow RPC that
+  // only ever writes this fixed key shape, mirroring renameCurrentBranch below.
+  async markRemoteOrcaCreated(params: Record<string, unknown>) {
+    const repoPath = params.repoPath
+    const remoteName = params.remoteName
+    if (typeof repoPath !== 'string' || typeof remoteName !== 'string' || !remoteName) {
+      throw new Error('Invalid remote provenance marker request.')
+    }
+    if (!/^[A-Za-z0-9._-]+$/.test(remoteName)) {
+      throw new Error('Invalid remote name for provenance marker.')
+    }
+    await this.git(['config', `remote.${remoteName}.orca-created`, 'true'], repoPath)
+  }
+
   async renameCurrentBranch(params: Record<string, unknown>) {
     return this.runWithGitReadCacheClear(async () => {
       const worktreePath = params.worktreePath
diff --git a/src/relay/git-handler-registration.ts b/src/relay/git-handler-registration.ts
index a9f11445dd1..6462327c416 100644
--- a/src/relay/git-handler-registration.ts
+++ b/src/relay/git-handler-registration.ts
@@ -65,6 +65,7 @@ export function registerGitHandlers(
   dispatcher.onRequest('git.refreshLocalBaseRefForWorktreeCreate', (p) =>
     handlers.worktree.refreshLocalBaseRefForWorktreeCreate(p)
   )
+  dispatcher.onRequest('git.markRemoteOrcaCreated', (p) => handlers.exec.markRemoteOrcaCreated(p))
   dispatcher.onRequest('git.renameCurrentBranch', (p) => handlers.exec.renameCurrentBranch(p))
   dispatcher.onRequest('git.forceDeletePreservedBranch', (p) =>
     handlers.exec.forceDeletePreservedBranch(p)
diff --git a/src/relay/git-handler.test.ts b/src/relay/git-handler.test.ts
index d8156741a3f..590b22636ba 100644
--- a/src/relay/git-handler.test.ts
+++ b/src/relay/git-handler.test.ts
@@ -73,6 +73,7 @@ describe('GitHandler', () => {
     expect(methods).toContain('git.removeWorktree')
     expect(methods).toContain('git.worktreeIsClean')
     expect(methods).toContain('git.refreshLocalBaseRefForWorktreeCreate')
+    expect(methods).toContain('git.markRemoteOrcaCreated')
     expect(methods).toContain('git.renameCurrentBranch')
     expect(methods).toContain('git.forceDeletePreservedBranch')
     expect(methods).toContain('git.exec')
@@ -197,6 +198,37 @@ describe('GitHandler', () => {
     })
   })
 
+  describe('markRemoteOrcaCreated', () => {
+    it('writes the provenance marker via config, not the generic git.exec path', async () => {
+      gitInit(tmpDir)
+      execFileSync('git', ['remote', 'add', 'pr-contributor-orca', 'https://example.com/x.git'], {
+        cwd: tmpDir
+      })
+
+      await dispatcher.callRequest('git.markRemoteOrcaCreated', {
+        repoPath: tmpDir,
+        remoteName: 'pr-contributor-orca'
+      })
+
+      const value = execFileSync(
+        'git',
+        ['config', '--get', 'remote.pr-contributor-orca.orca-created'],
+        { cwd: tmpDir, encoding: 'utf-8' }
+      ).trim()
+      expect(value).toBe('true')
+    })
+
+    it('rejects a remote name that is not a plain config-key segment', async () => {
+      gitInit(tmpDir)
+      await expect(
+        dispatcher.callRequest('git.markRemoteOrcaCreated', {
+          repoPath: tmpDir,
+          remoteName: 'bad name; rm -rf'
+        })
+      ).rejects.toThrow('Invalid remote name for provenance marker.')
+    })
+  })
+
   describe('renameCurrentBranch', () => {
     it('renames only the checked-out branch through the narrow RPC', async () => {
       gitInit(tmpDir)
diff --git a/src/renderer/src/runtime/runtime-git-sync-client.ts b/src/renderer/src/runtime/runtime-git-sync-client.ts
index c4318371f1f..5f1652a3893 100644
--- a/src/renderer/src/runtime/runtime-git-sync-client.ts
+++ b/src/renderer/src/runtime/runtime-git-sync-client.ts
@@ -72,6 +72,7 @@ export async function fetchRuntimeGit(
     await window.api.git.fetch({
       worktreePath: resolveLocalWorktreePath(context),
       connectionId: context.connectionId,
+      ...(context.worktreeId ? { worktreeId: context.worktreeId } : {}),
       ...(pushTarget ? { pushTarget } : {})
     })
     return
@@ -116,6 +117,7 @@ export async function pullRuntimeGit(
     await window.api.git.pull({
       worktreePath: resolveLocalWorktreePath(context),
       connectionId: context.connectionId,
+      ...(context.worktreeId ? { worktreeId: context.worktreeId } : {}),
       ...(pushTarget ? { pushTarget } : {})
     })
     return
@@ -140,6 +142,7 @@ export async function fastForwardRuntimeGit(
     await window.api.git.fastForward({
       worktreePath: resolveLocalWorktreePath(context),
       connectionId: context.connectionId,
+      ...(context.worktreeId ? { worktreeId: context.worktreeId } : {}),
       ...(pushTarget ? { pushTarget } : {})
     })
     return
@@ -185,6 +188,7 @@ export async function pushRuntimeGit(
     await window.api.git.push({
       worktreePath: resolveLocalWorktreePath(context),
       connectionId: context.connectionId,
+      ...(context.worktreeId ? { worktreeId: context.worktreeId } : {}),
       ...(args.publish !== undefined ? { publish: args.publish } : {}),
       ...(args.pushTarget !== undefined ? { pushTarget: args.pushTarget } : {}),
       ...(args.forceWithLease !== undefined ? { forceWithLease: args.forceWithLease } : {})
diff --git a/src/renderer/src/store/slices/editor-remote-branch-actions.test.ts b/src/renderer/src/store/slices/editor-remote-branch-actions.test.ts
index b786ea018e8..de8dbe9651f 100644
--- a/src/renderer/src/store/slices/editor-remote-branch-actions.test.ts
+++ b/src/renderer/src/store/slices/editor-remote-branch-actions.test.ts
@@ -138,7 +138,8 @@ describe('createEditorSlice remote branch actions', () => {
 
     expect(gitPullMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(toastErrorMock).not.toHaveBeenCalled()
   })
@@ -155,6 +156,7 @@ describe('createEditorSlice remote branch actions', () => {
       worktreePath: '/repo',
       publish: false,
       connectionId: undefined,
+      worktreeId: 'wt-1',
       pushTarget: undefined,
       forceWithLease: undefined
     })
@@ -193,6 +195,7 @@ describe('createEditorSlice remote branch actions', () => {
     expect(gitFastForwardMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
       connectionId: undefined,
+      worktreeId: 'wt-1',
       pushTarget
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledWith({
@@ -284,6 +287,7 @@ describe('createEditorSlice remote branch actions', () => {
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
       connectionId: undefined,
+      worktreeId: 'wt-1',
       pushTarget
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledWith({
@@ -337,7 +341,8 @@ describe('createEditorSlice remote branch actions', () => {
     expect(gitPushMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
       publish: true,
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(store.getState().isRemoteOperationActive).toBe(false)
   })
@@ -361,7 +366,8 @@ describe('createEditorSlice remote branch actions', () => {
     expect(gitStatusMock).not.toHaveBeenCalled()
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
@@ -389,7 +395,8 @@ describe('createEditorSlice remote branch actions', () => {
     expect(gitStatusMock).not.toHaveBeenCalled()
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
@@ -450,7 +457,8 @@ describe('createEditorSlice remote branch actions', () => {
     expect(gitStatusMock).not.toHaveBeenCalled()
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
@@ -476,7 +484,8 @@ describe('createEditorSlice remote branch actions', () => {
     expect(gitStatusMock).not.toHaveBeenCalled()
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
@@ -507,7 +516,8 @@ describe('createEditorSlice remote branch actions', () => {
     expect(gitStatusMock).not.toHaveBeenCalled()
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
@@ -534,7 +544,8 @@ describe('createEditorSlice remote branch actions', () => {
 
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
@@ -590,7 +601,8 @@ describe('createEditorSlice remote branch actions', () => {
 
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
@@ -634,7 +646,8 @@ describe('createEditorSlice remote branch actions', () => {
 
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(store.getState().isRemoteOperationActive).toBe(false)
     expect(toastErrorMock).not.toHaveBeenCalled()
@@ -728,16 +741,19 @@ describe('createEditorSlice remote branch actions', () => {
 
     expect(gitFetchMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(gitPullMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     // ahead=1 in the default mock, so sync pushes.
     expect(gitPushMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
-      connectionId: undefined
+      connectionId: undefined,
+      worktreeId: 'wt-1'
     })
     expect(toastErrorMock).not.toHaveBeenCalled()
     expect(store.getState().isRemoteOperationActive).toBe(false)
@@ -786,6 +802,7 @@ describe('createEditorSlice remote branch actions', () => {
     expect(gitPushMock).toHaveBeenCalledWith({
       worktreePath: '/repo',
       connectionId: undefined,
+      worktreeId: 'wt-1',
       forceWithLease: true
     })
     expect(gitUpstreamStatusMock).toHaveBeenCalledTimes(2)

From 266b2ea19022056a0f751a52e07300be935e5dbc Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:44:50 -0700
Subject: [PATCH 15/92] fix(agent-status): report a stale pane that still holds
 a PTY as unverifiable, not idle (#18012)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(remote): stop one unlabelled inventory tombstoning a live worktree mirror

#11495 Step C. `buildMissingWebSessionTabsRemovals` synthesised a `removed: true`
tombstone -- emptying a worktree's entire mirror -- for any tracked worktree
absent from a single inventory frame, without ever consulting the host's own
authority label. `mirror-settle` already refuses to settle an *empty* inventory
that is not `authoritative` (#16414, #16546); the strictly more destructive
action was ungated.

An inventory the host labels `authoritative` carries a complete PTY census, so
one omission is host attestation and removal stays immediate. An unlabelled
inventory is a degraded or version-skewed census: `unverifiable`, not `exited`.
It must now repeat before it can destroy anything, reusing the two-observation
shape of `confirmSurfaceInventoryAbsence`. A legacy host that never negotiates
the capability still converges after two rounds, so ghost rows cannot outlive
the fence.

The 14 tests from #13621 that blocked this were all written before the
`authoritative` label existed (#13621 landed 2026-08-11; the capability landed
2026-08-26 in #16546). #13621's own summary says "Reconcile each resumed host
from an authoritative inventory, including removals", so their fixtures are
retargeted to say so explicitly rather than weakened.

Refs #11495

* fix(agent-status): stop a reconnect replay restamping the staleness clock

#15317 correctness half. `receivedAt` was doing two jobs: delivery order and
evidence age. A relay reconnect replays every cached row, and `receivedAt` must
restamp to clear the connection watermark that `clearStatusEntriesForConnection`
raises -- so a pane stuck at `working` had its 30-minute deadline pushed out by
another 30 minutes on every reconnect. The TTL was never reached, which is why
this read as a tuning question.

Two clocks, not one rewritten clock:

- `receivedAt` is untouched. The transient-clear watermark and the four `<`
  ordering drops (`agent-status-event-applicator`, `agent-status-live-entry-builder`,
  `agent-status-cleanup-actions`) keep working unchanged. Restamping a replay with
  its original time would have made it `<= watermark` and dropped it outright,
  leaving the pane with no row at all.
- `evidenceObservedAt` is new, optional, and read only by the staleness
  comparison (`isFreshNonDoneAgentStatus`, `isExplicitAgentStatusFresh`, the
  freshness scheduler). Main holds it per pane across the transport clear -- the
  clear deletes the row on purpose, but the *age* of evidence a later replay
  restates is not a claim about the pane. Absent means "no separate observation",
  and every consumer falls back to `receivedAt`/`updatedAt`, so old hosts and old
  rows behave exactly as today.

Behaviour: a genuinely active pane keeps stamping the observation clock from its
real events, so it stays `working` across a reconnect. A pane whose relay
restarted replays nothing and still falls through to title evidence. A torn-down
pane drops its remembered clock in `clearPaneState`, so a reused pane key cannot
inherit one.

`AGENT_STATUS_STALE_AFTER_MS` is deliberately unchanged -- the window length
remains a product decision.

Refs #15317

* fix(sidebar): stop a stale agent row claiming the pane is empty

A stale non-`done` entry decayed to `idle` whether or not Orca still held the
pane's PTY, so "we lost the reporting stream" and "nothing is running here" were
the same display class. Split the destination on evidence already computed: with
a live PTY the row is `unverifiable` and reports the observer's own fact — how
long the silence has run — so the user can apply context Orca has no way to know.
With no PTY it stays `idle`.

Smart sort gains class 4 for it, between working (3) and idle (now 5): still
plausibly the most important pane, never outranking one that is reporting, and
never a claim that the agent finished. `unverifiable` stays renderer-local; the
dashboard card projection publishes today's `idle` because that vocabulary is
validated against a fixed allowlist in main and read by older pop-outs.

AGENT_STATUS_STALE_AFTER_MS is unchanged.

* fix(agent-status): decay a mirrored remote row on the replica's own clock

A paired client mirrored a remote host's status rows verbatim, host wall clock
included, and the staleness gate then computed `rendererNow - hostStamp`. The
effective window was 30 minutes plus or minus the two machines' skew: a host
running fast held every remote row permanently fresh, a host running slow decayed
them on arrival. The constant was never the lever there — the subtraction
straddled two clocks.

The replica now stamps `mirroredEvidenceReceivedAt` from its own clock when the
authority's observation advances, carries it forward across an exact repaint (a
restated observation is not a new one), and decays against it. Both sides of the
subtraction come from one machine; locally observed rows carry no stamp and are
unchanged.

The alternative the type comment named — carrying the authority's freshness
verdict — was rejected: a verdict is computed at publish time and cannot age
between snapshots, so once the host goes quiet the replica would hold `fresh`
forever. That is precisely the loss-of-contact case the window exists for.
AGENT_STATUS_STALE_AFTER_MS is unchanged; the clock rules move to
agent-status-freshness.ts to keep agent-status-types.ts under its line budget.
---
 .../src/components/AgentStateDot.test.ts      |  10 +
 src/renderer/src/components/AgentStateDot.tsx |  20 +-
 .../dashboard/DashboardAgentRow.tsx           |  52 ++---
 .../dashboard/dashboard-row-bucket.ts         |  15 +-
 .../dashboard/dashboard-subagent-cards.ts     |   3 +-
 .../components/dashboard/useDashboardData.ts  |   9 +-
 .../editor/ReviewNotesSendMenuContent.tsx     |  22 +-
 .../sidebar/smart-attention.test.ts           |   6 +-
 .../src/components/sidebar/smart-attention.ts |  46 +++-
 .../src/components/sidebar/smart-sort.test.ts |  12 +-
 .../src/components/sidebar/smart-sort.ts      |   6 +-
 .../stale-agent-row-unverifiable.test.ts      | 158 ++++++++++++++
 .../components/sidebar/worktree-agent-rows.ts |  13 +-
 .../worktree-card-agent-summary.test.ts       |   2 +-
 .../sidebar/worktree-card-agent-summary.ts    |  22 +-
 .../worktree-card-compact-agent-row.tsx       |  10 +-
 .../worktree-list/listing/use-sort-order.ts   |   6 +-
 src/renderer/src/lib/agent-row-decay-state.ts |  56 +++++
 src/renderer/src/lib/agent-row-dot-state.ts   |  24 +++
 .../src/lib/agent-row-tool-preview.test.ts    |   4 +-
 .../src/lib/agent-row-tool-preview.ts         |   6 +-
 src/renderer/src/lib/pane-agent-evidence.ts   |   5 +-
 .../src/lib/recent-workspace-tab-rows.ts      |   5 +-
 .../mirrored-agent-status-clock-skew.test.ts  | 200 ++++++++++++++++++
 .../agent-status-patch.ts                     |  40 +++-
 .../state-equality-core.ts                    |  13 +-
 ...gent-status-observation-neutrality.test.ts |   8 +-
 src/shared/agent-status-freshness.ts          |  52 +++++
 src/shared/agent-status-observation.ts        |  30 ++-
 src/shared/agent-status-types.ts              |  38 +---
 .../telemetry-onboarding-event-schemas.ts     |   3 +
 31 files changed, 738 insertions(+), 158 deletions(-)
 create mode 100644 src/renderer/src/components/sidebar/stale-agent-row-unverifiable.test.ts
 create mode 100644 src/renderer/src/lib/agent-row-decay-state.ts
 create mode 100644 src/renderer/src/lib/agent-row-dot-state.ts
 create mode 100644 src/renderer/src/runtime/mirrored-agent-status-clock-skew.test.ts
 create mode 100644 src/shared/agent-status-freshness.ts

diff --git a/src/renderer/src/components/AgentStateDot.test.ts b/src/renderer/src/components/AgentStateDot.test.ts
index ab84e4562d8..33642542d79 100644
--- a/src/renderer/src/components/AgentStateDot.test.ts
+++ b/src/renderer/src/components/AgentStateDot.test.ts
@@ -93,6 +93,15 @@ describe('AgentStateDot', () => {
     }
   )
 
+  it('renders unverifiable as an amber dashed ring, never the done check or the spinner', () => {
+    const markup = renderMarkup('unverifiable')
+
+    expect(markup).toContain('lucide-circle-dashed')
+    expect(markup).toContain('text-amber-500')
+    expect(markup).not.toContain('lucide-circle-check')
+    expect(markup).not.toContain('data-agent-spinner')
+  })
+
   it.each(['blocked', 'interrupted'] satisfies AgentDotState[])(
     'renders %s as a red attention dot',
     (state) => {
@@ -112,6 +121,7 @@ describe('AgentStateDot', () => {
     'failed',
     'done',
     'idle',
+    'unverifiable',
     'permission'
   ] satisfies AgentDotState[]
 
diff --git a/src/renderer/src/components/AgentStateDot.tsx b/src/renderer/src/components/AgentStateDot.tsx
index bcb44a8e726..af8ac4efd84 100644
--- a/src/renderer/src/components/AgentStateDot.tsx
+++ b/src/renderer/src/components/AgentStateDot.tsx
@@ -1,5 +1,5 @@
 import React from 'react'
-import { Activity, CircleCheck } from 'lucide-react'
+import { Activity, CircleCheck, CircleDashed } from 'lucide-react'
 import { cn } from '@/lib/utils'
 import { AgentQuestionIcon } from '@/components/AgentQuestionIcon'
 import { AgentWorkingSpinner } from '@/components/AgentWorkingSpinner'
@@ -30,6 +30,11 @@ export type AgentDotState =
   | 'failed'
   | 'done'
   | 'idle'
+  // Why: the pane still has a live PTY but its reporting stream has gone quiet past
+  // the staleness window. Distinct from 'idle' because Orca has evidence something is
+  // held there, and never rendered as 'done' or 'working' — it asserts nothing about
+  // the agent, only about what Orca last heard.
+  | 'unverifiable'
   // Why: the sidebar's title-based status flow (StatusIndicator/WorktreeCard)
   // collapses blocked + waiting into a single "needs attention" state. Keep
   // this as a distinct member so that flow can render without inventing a new
@@ -56,6 +61,8 @@ export function agentStateLabel(state: AgentDotState): string {
       return 'Done'
     case 'idle':
       return 'Idle'
+    case 'unverifiable':
+      return 'No recent update'
     case 'permission':
       return 'Needs attention'
   }
@@ -116,6 +123,17 @@ export const AgentStateDot = React.memo(function AgentStateDot({
         <CircleCheck className={cn('text-emerald-500', icon)} aria-hidden="true" />
       </span>
     )
+  } else if (state === 'unverifiable') {
+    // Why: a dashed ring reads as "incomplete information" rather than a state claim,
+    // and amber carries warning weight without borrowing 'done' green or 'working' yellow.
+    indicator = (
+      <span
+        className={cn('inline-flex shrink-0 items-center justify-center', box, className)}
+        aria-label={agentStateLabel(state)}
+      >
+        <CircleDashed className={cn('text-amber-500', icon)} aria-hidden="true" />
+      </span>
+    )
   } else if (state === 'permission' || state === 'waiting') {
     indicator = (
       <span
diff --git a/src/renderer/src/components/dashboard/DashboardAgentRow.tsx b/src/renderer/src/components/dashboard/DashboardAgentRow.tsx
index 6766f233f0d..3f2b571d01c 100644
--- a/src/renderer/src/components/dashboard/DashboardAgentRow.tsx
+++ b/src/renderer/src/components/dashboard/DashboardAgentRow.tsx
@@ -9,51 +9,34 @@ import { DashboardAgentRowMessage } from './DashboardAgentRowMessage'
 import { DashboardAgentRowTrailingControls } from './DashboardAgentRowTrailingControls'
 import { DashboardAgentRowToolStep } from './DashboardAgentRowToolStep'
 import { showsAgentToolPreview } from '@/lib/agent-row-tool-preview'
-import type { AgentStatusState } from '../../../../shared/agent-status-types'
+import { agentNoUpdateLabel, formatCompactDuration } from '@/lib/agent-row-decay-state'
+import { agentRowDotState as asDotState } from '@/lib/agent-row-dot-state'
 import type { DashboardAgentRow as DashboardAgentRowData } from './useDashboardData'
 import { getAgentRowPrimaryText } from '@/lib/agent-row-primary-text'
 import { useAgentRowConversationName } from './use-agent-row-conversation-name'
 import { lastEnteredDoneAt } from './agent-finished-timestamp'
 
-// Why: narrow the dashboard's rollup states to shared dot states, defaulting unknowns to 'idle' so a row never crashes.
-function asDotState(
-  state: AgentStatusState | 'idle',
-  workingMode?: DashboardAgentRowData['entry']['workingMode']
-): AgentDotState {
-  switch (state) {
-    case 'working':
-      return workingMode === 'monitoring' ? 'monitoring' : 'working'
-    case 'blocked':
-    case 'waiting':
-    case 'done':
-    case 'idle':
-      return state
-  }
-  return 'idle'
-}
-
 function formatTimeAgo(ts: number, now: number): string {
   const delta = now - ts
   if (delta < 60_000) {
     return 'just now'
   }
-  const minutes = Math.floor(delta / 60_000)
-  if (minutes < 60) {
-    return `${minutes}m ago`
-  }
-  const hours = Math.floor(minutes / 60)
-  if (hours < 24) {
-    return `${hours}h ago`
-  }
-  const days = Math.floor(hours / 24)
-  return `${days}d ago`
+  return `${formatCompactDuration(delta)} ago`
 }
 
-function stateDotTooltipLabel(agent: DashboardAgentRowData, dotState: AgentDotState): string {
+function stateDotTooltipLabel(
+  agent: DashboardAgentRowData,
+  dotState: AgentDotState,
+  now: number
+): string {
   if (agent.entry.interrupted === true) {
     return 'Interrupted by user'
   }
-  return agentStateLabel(dotState)
+  // Why: report the observation, not a verdict on the agent — the elapsed gap is what
+  // lets the user apply context Orca has no way to know (a long build, a slow download).
+  return dotState === 'unverifiable'
+    ? agentNoUpdateLabel(agent.entry, now)
+    : agentStateLabel(dotState)
 }
 
 type Props = {
@@ -173,14 +156,17 @@ const DashboardAgentRow = React.memo(function DashboardAgentRow({
   const dotState: AgentDotState = isInterrupted
     ? 'interrupted'
     : asDotState(agent.state, agent.entry.workingMode)
-  const dotTooltipLabel = stateDotTooltipLabel(agent, dotState)
+  const dotTooltipLabel = stateDotTooltipLabel(agent, dotState, now)
+  // Why: the elapsed gap is the whole content of an `unverifiable` row, so it rides the
+  // row's own timestamp slot rather than hiding in a hover tooltip.
+  const noUpdateLabel = dotState === 'unverifiable' ? agentNoUpdateLabel(agent.entry, now) : null
 
   // Why: always show the chevron so the row's right edge doesn't flicker as content grows/shrinks.
 
   const startedTimeAgo = startedAt !== null ? formatTimeAgo(startedAt, now) : null
   const doneTimeAgo = doneAt !== null ? formatTimeAgo(doneAt, now) : null
-  const relativeTimestamp = doneTimeAgo ?? startedTimeAgo
-  const tsParts: string[] = []
+  const relativeTimestamp = noUpdateLabel ?? doneTimeAgo ?? startedTimeAgo
+  const tsParts: string[] = noUpdateLabel ? [noUpdateLabel] : []
   if (startedTimeAgo !== null) {
     tsParts.push(`started ${startedTimeAgo}`)
   }
diff --git a/src/renderer/src/components/dashboard/dashboard-row-bucket.ts b/src/renderer/src/components/dashboard/dashboard-row-bucket.ts
index c1c15e293ec..0b4377ac9aa 100644
--- a/src/renderer/src/components/dashboard/dashboard-row-bucket.ts
+++ b/src/renderer/src/components/dashboard/dashboard-row-bucket.ts
@@ -5,6 +5,19 @@ import {
   type DashboardCardDotState
 } from '../../../../shared/dashboard-snapshot'
 import { dashboardBucketForDotState } from './dashboard-card-bucket'
+import type { AgentRowState } from '@/lib/agent-row-decay-state'
+
+/**
+ * Project a row state onto the published card vocabulary.
+ *
+ * `unverifiable` stays renderer-local: `DashboardCardDotState` is validated against a fixed
+ * allowlist in main (`dashboard-payload-validation.ts`) and read by pop-out windows that may
+ * predate the member, so a new value would be dropped rather than rendered. Publishing today's
+ * `idle` keeps those surfaces at today's behavior instead of silently losing the card.
+ */
+export function dashboardCardDotState(state: AgentRowState): DashboardCardDotState {
+  return state === 'unverifiable' ? 'idle' : state
+}
 
 export type DashboardRowBucketProjection = {
   isTitleDerived: boolean
@@ -20,7 +33,7 @@ export function dashboardRowBucketProjection(
   acknowledgedAgentsByPaneKey?: Record<string, number>
 ): DashboardRowBucketProjection {
   const isTitleDerived = row.startedAt === 0
-  const dotState = row.state as DashboardCardDotState
+  const dotState = dashboardCardDotState(row.state)
   const workingMode =
     row.state === 'working' && row.entry.workingMode === 'monitoring'
       ? row.entry.workingMode
diff --git a/src/renderer/src/components/dashboard/dashboard-subagent-cards.ts b/src/renderer/src/components/dashboard/dashboard-subagent-cards.ts
index 70318997860..e376eb18e61 100644
--- a/src/renderer/src/components/dashboard/dashboard-subagent-cards.ts
+++ b/src/renderer/src/components/dashboard/dashboard-subagent-cards.ts
@@ -1,6 +1,7 @@
 import type { DashboardCardSubagent } from '../../../../shared/dashboard-snapshot'
 import { nonEmpty } from './dashboard-card-labels'
 import type { DashboardAgentRow } from './useDashboardData'
+import { dashboardCardDotState } from './dashboard-row-bucket'
 
 /** Subagent child rows, grouped under the parent pane whose session spawned
  *  them — they have no pane of their own, so the board nests them on the card. */
@@ -22,7 +23,7 @@ export function groupSubagentsByParentPaneKey(
         nonEmpty(row.entry.orchestration?.displayName) ??
         nonEmpty(row.entry.prompt) ??
         row.agentType,
-      dotState: row.state
+      dotState: dashboardCardDotState(row.state)
     }
     const existing = byParentPaneKey.get(parentPaneKey)
     if (existing) {
diff --git a/src/renderer/src/components/dashboard/useDashboardData.ts b/src/renderer/src/components/dashboard/useDashboardData.ts
index 2433ea0e88f..02d4010edcd 100644
--- a/src/renderer/src/components/dashboard/useDashboardData.ts
+++ b/src/renderer/src/components/dashboard/useDashboardData.ts
@@ -1,8 +1,5 @@
-import type {
-  AgentStatusEntry,
-  AgentStatusState,
-  AgentType
-} from '../../../../shared/agent-status-types'
+import type { AgentStatusEntry, AgentType } from '../../../../shared/agent-status-types'
+import type { AgentRowState } from '@/lib/agent-row-decay-state'
 import type { TerminalTab } from '../../../../shared/terminal-tab-types'
 
 export type DashboardAgentRow = {
@@ -13,7 +10,7 @@ export type DashboardAgentRow = {
   tab: TerminalTab
   agentType: AgentType
   rowSource?: 'live' | 'retained' | 'subagent'
-  state: AgentStatusState | 'idle'
+  state: AgentRowState
   /** Pane to focus when the row is activated, when it differs from paneKey.
    *  Subagent rows have no pane of their own and activate their parent's. */
   activationPaneKey?: string
diff --git a/src/renderer/src/components/editor/ReviewNotesSendMenuContent.tsx b/src/renderer/src/components/editor/ReviewNotesSendMenuContent.tsx
index e0b1d70d5a2..60b5bcd70c6 100644
--- a/src/renderer/src/components/editor/ReviewNotesSendMenuContent.tsx
+++ b/src/renderer/src/components/editor/ReviewNotesSendMenuContent.tsx
@@ -3,7 +3,7 @@ import { toast } from 'sonner'
 import { useShallow } from 'zustand/react/shallow'
 import { useAppStore } from '@/store'
 import { QuickLaunchAgentMenuItems } from '@/components/tab-bar/QuickLaunchButton'
-import { AgentStateDot, agentStateLabel, type AgentDotState } from '@/components/AgentStateDot'
+import { AgentStateDot, agentStateLabel } from '@/components/AgentStateDot'
 import { AgentIcon } from '@/lib/agent-catalog'
 import {
   DropdownMenuItem,
@@ -32,7 +32,7 @@ import { lastEnteredDoneAt } from '@/components/dashboard/agent-finished-timesta
 import { selectLivePtyIdsForWorktree } from '@/components/sidebar/worktree-card-status-inputs'
 import { useWorktreeAgentRows } from '@/components/sidebar/useWorktreeAgentRows'
 import type { LaunchSource } from '../../../../shared/telemetry-events'
-import type { AgentStatusState } from '../../../../shared/agent-status-types'
+import { agentRowDotState } from '@/lib/agent-row-dot-state'
 import { translate } from '@/i18n/i18n'
 
 type OrderedSendTarget = {
@@ -246,7 +246,7 @@ function AgentTargetMenuItem({
   onSend: (target: NotesSendAgentTarget) => void
 }): React.JSX.Element {
   const tabTitle = target.tabTitle.trim()
-  const state = asDotState(agent?.state ?? 'idle', agent?.entry.workingMode)
+  const state = agentRowDotState(agent?.state ?? 'idle', agent?.entry.workingMode)
   const timeAgo = agent ? formatAgentRelativeTime(agent, now) : null
   const disabledReason = target.status === 'disabled' ? target.disabledReason : undefined
   const secondaryParts = [
@@ -310,22 +310,6 @@ function orderSendTargetsByWorktreeAgentRows(
   return ordered
 }
 
-function asDotState(
-  state: AgentStatusState | 'idle',
-  workingMode?: DashboardAgentRowData['entry']['workingMode']
-): AgentDotState {
-  switch (state) {
-    case 'working':
-      return workingMode === 'monitoring' ? 'monitoring' : 'working'
-    case 'blocked':
-    case 'waiting':
-    case 'done':
-    case 'idle':
-      return state
-  }
-  return 'idle'
-}
-
 function formatAgentRelativeTime(agent: DashboardAgentRowData, now: number): string | null {
   const doneAt = lastEnteredDoneAt(agent)
   if (doneAt !== null) {
diff --git a/src/renderer/src/components/sidebar/smart-attention.test.ts b/src/renderer/src/components/sidebar/smart-attention.test.ts
index d04aed078bf..246670379b4 100644
--- a/src/renderer/src/components/sidebar/smart-attention.test.ts
+++ b/src/renderer/src/components/sidebar/smart-attention.test.ts
@@ -14,12 +14,12 @@ import {
 import type { TerminalLayoutSnapshot, TerminalTab } from '../../../../shared/terminal-tab-types'
 import type { Worktree } from '../../../../shared/worktree/types'
 
-function hookPane(entry: AgentStatusEntry): PaneInput {
-  return { kind: 'hook', entry }
+function hookPane(entry: AgentStatusEntry, hasLivePty = false): PaneInput {
+  return { kind: 'hook', entry, hasLivePty }
 }
 
 function hookPanes(entries: AgentStatusEntry[]): PaneInput[] {
-  return entries.map((entry) => ({ kind: 'hook', entry }))
+  return entries.map((entry) => hookPane(entry))
 }
 
 const NOW = new Date('2026-03-27T12:00:00.000Z').getTime()
diff --git a/src/renderer/src/components/sidebar/smart-attention.ts b/src/renderer/src/components/sidebar/smart-attention.ts
index 44abd4082b7..7de41e7961c 100644
--- a/src/renderer/src/components/sidebar/smart-attention.ts
+++ b/src/renderer/src/components/sidebar/smart-attention.ts
@@ -1,6 +1,7 @@
 import { classifyTitleActivity, isExplicitAgentStatusFresh } from '@/lib/pane-agent-evidence'
 import { agentEntryCompletionAt } from '../../../../shared/agent-completion-time'
 import { migrationUnsupportedToAgentStatusEntry } from '@/lib/migration-unsupported-agent-entry'
+import { resolveDecayedAgentRowState } from '@/lib/agent-row-decay-state'
 import { tabHasLivePty } from '@/lib/tab-has-live-pty'
 import { resolveRuntimePaneTitleLeafId } from '@/lib/runtime-pane-title-leaf-id'
 import type { AgentStatus } from '../../../../shared/agent-detection'
@@ -8,6 +9,7 @@ import type { TerminalLayoutSnapshot, TerminalTab } from '../../../../shared/ter
 import type { Worktree } from '../../../../shared/worktree/types'
 import {
   AGENT_STATUS_STALE_AFTER_MS,
+  agentStatusEvidenceObservedAt,
   type AgentStateHistoryEntry,
   type AgentStatusEntry,
   type MigrationUnsupportedPtyEntry
@@ -19,11 +21,14 @@ import { parsePaneKey } from '../../../../shared/stable-pane-id'
  *   1 — Needs you (`blocked` / `waiting`)
  *   2 — Done (`done`, not interrupted, completed within AGENT_STATUS_STALE_AFTER_MS)
  *   3 — Working (`working`)
- *   4 — Idle (no live entry, stale entry, interrupted `done`, or an aged-out completion)
+ *   4 — Unverifiable (stale non-`done` entry on a pane Orca still holds a live PTY for:
+ *       the reporting stream stopped, not necessarily the work)
+ *   5 — Idle (no live entry, interrupted `done`, an aged-out completion, or a stale entry
+ *       with no live PTY behind it)
  *
  * Primary sort key; ties fall back to the attention timestamp. See docs/smart-worktree-order-redesign.md.
  */
-export type SmartClass = 1 | 2 | 3 | 4
+export type SmartClass = 1 | 2 | 3 | 4 | 5
 
 /**
  * What surfaced a worktree into Class 1 (carried only for Class 1, the only class telemetry reports on).
@@ -39,7 +44,8 @@ export type AttentionCause = 'blocked' | 'waiting' | 'title-heuristic'
  *   - Class 1: `stateStartedAt` of the current entry. Class 2: the entry's completion time.
  *   - Class 3: `stateStartedAt` of the most recent prior `done`/`blocked`/`waiting` entry,
  *     falling back to the current `working` `stateStartedAt`.
- *   - Class 4: `0` — comparator drops to `effectiveRecentActivity` for idle ordering.
+ *   - Class 4: when the evidence was last observed, so the least-silent pane ranks first.
+ *   - Class 5: `0` — comparator drops to `effectiveRecentActivity` for idle ordering.
  *
  * `cause` is set only when `cls === 1`; feeds the `smart_sort_class_1_promotion` telemetry event.
  */
@@ -49,7 +55,7 @@ export type WorktreeAttention = {
   cause?: AttentionCause
 }
 
-export const IDLE: WorktreeAttention = { cls: 4, attentionTimestamp: 0 }
+export const IDLE: WorktreeAttention = { cls: 5, attentionTimestamp: 0 }
 
 export function hasFreshAttributedAgentStatus(
   agentStatusByPaneKey: Record<string, AgentStatusEntry> | undefined,
@@ -105,17 +111,20 @@ export function mostRecentAttentionInHistory(history: AgentStateHistoryEntry[]):
  * panes fall back to the title heuristic (design doc Edge case 9). Authority is per-pane, not per-worktree.
  */
 export type PaneInput =
-  | { kind: 'hook'; entry: AgentStatusEntry }
+  // Why hasLivePty: a stale entry's decay destination depends on whether Orca still holds the
+  // pane's PTY — losing the reporting stream is not the same as nothing running there.
+  | { kind: 'hook'; entry: AgentStatusEntry; hasLivePty: boolean }
   // Why: TerminalTab has no per-tab lastActivityAt; the worktree-level value suffices for cross-worktree ordering.
   | { kind: 'title'; status: AgentStatus | null; worktreeLastActivityAt: number }
 
 /**
  * Resolve a worktree's class + attention timestamp from its panes' inputs.
- * Stale hook entries are skipped; the worktree falls to Class 4 with no fresh hook and no title heuristic.
+ * A stale hook entry lands in Class 4 or 5 depending on live-PTY evidence; the worktree falls to
+ * Class 5 with no fresh hook and no title heuristic.
  * Across panes: `cls` is the **min** (most demanding pane wins), `attentionTimestamp` the **max** within that class.
  */
 export function resolveAttention(panes: PaneInput[], now: number): WorktreeAttention {
-  let bestCls: SmartClass = 4
+  let bestCls: SmartClass = 5
   let bestTs = 0
   let bestCause: AttentionCause | undefined
 
@@ -127,6 +136,20 @@ export function resolveAttention(panes: PaneInput[], now: number): WorktreeAtten
     if (pane.kind === 'hook') {
       const entry = pane.entry
       if (!isExplicitAgentStatusFresh(entry, now, AGENT_STATUS_STALE_AFTER_MS)) {
+        // Why: a pane Orca still holds a PTY for outranks a genuinely empty one — the user may
+        // know why it went quiet (a long build), which Orca never can. It never outranks a
+        // reporting pane, and it never claims the agent finished.
+        if (resolveDecayedAgentRowState(entry, pane.hasLivePty) === 'unverifiable') {
+          const observedAt = agentStatusEvidenceObservedAt(entry)
+          if (
+            Number.isFinite(observedAt) &&
+            (4 < bestCls || (bestCls === 4 && observedAt > bestTs))
+          ) {
+            bestCls = 4
+            bestTs = observedAt
+            bestCause = undefined
+          }
+        }
         continue
       }
       // Why: non-finite stateStartedAt (NaN/Infinity) would poison comparisons; treat as a missing entry.
@@ -275,10 +298,11 @@ export function collectTabPaneInputs(
   now: number
 ): PaneInput[] {
   const panes: PaneInput[] = []
+  const hasLivePty = tabHasLivePty(sources.ptyIdsByTabId, tab.id)
   // Why: leaves covered by a hook entry skip the title fallback so we don't double-count them.
   const hookLeafIds = new Set<string>()
   for (const entry of sources.entriesByTabId.get(tab.id) ?? []) {
-    panes.push({ kind: 'hook', entry })
+    panes.push({ kind: 'hook', entry, hasLivePty })
     // Why: restored rows own their co-restored title without asserting live state.
     if (
       !entry.restoredUnconfirmed &&
@@ -293,7 +317,7 @@ export function collectTabPaneInputs(
   }
 
   // Why: runtimePaneTitlesByTabId survives sleep, so a slept tab's stale working-pattern title would leak in without this gate.
-  if (!tabHasLivePty(sources.ptyIdsByTabId, tab.id)) {
+  if (!hasLivePty) {
     return panes
   }
 
@@ -361,7 +385,9 @@ export function buildAttentionByWorktree(
         const parsed = parsePaneKey(entry.paneKey)
         return parsed !== null && !mirroredTabIds.has(parsed.tabId)
       })
-      .map((entry) => ({ kind: 'hook' as const, entry }))
+      // Why hasLivePty false: these entries were filtered to panes with no tab in this renderer,
+      // so there is no live-PTY evidence here to hold them above idle.
+      .map((entry) => ({ kind: 'hook' as const, entry, hasLivePty: false }))
     if (tabs.length === 0) {
       result.set(worktree.id, resolveAttention(panes, now))
       continue
diff --git a/src/renderer/src/components/sidebar/smart-sort.test.ts b/src/renderer/src/components/sidebar/smart-sort.test.ts
index 60700e59c95..3c0193fbc2e 100644
--- a/src/renderer/src/components/sidebar/smart-sort.test.ts
+++ b/src/renderer/src/components/sidebar/smart-sort.test.ts
@@ -657,19 +657,23 @@ describe('sortWorktreesSmart — palette caller regression', () => {
       [blocked.id]: [makeTab({ id: 'tab-blocked', worktreeId: blocked.id })],
       [working.id]: [makeTab({ id: 'tab-working', worktreeId: working.id })]
     }
+    // Why live clock: sortWorktreesSmart reads Date.now(), so fixed-epoch stamps would be
+    // stale and land both worktrees in the same decayed class — the class layer this test
+    // exists to pin would never run.
+    const liveNow = Date.now()
     const agentStatusByPaneKey: Record<string, AgentStatusEntry> = {
       [paneKey('tab-blocked', '1')]: makeEntry({
         paneKey: paneKey('tab-blocked', '1'),
         state: 'blocked',
-        stateStartedAt: NOW - 60_000,
-        updatedAt: NOW - 1_000
+        stateStartedAt: liveNow - 60_000,
+        updatedAt: liveNow - 1_000
       }),
       [paneKey('tab-working', '1')]: makeEntry({
         paneKey: paneKey('tab-working', '1'),
         state: 'working',
         // newer than the blocked one — would win on recency alone
-        stateStartedAt: NOW - 1_000,
-        updatedAt: NOW - 500
+        stateStartedAt: liveNow - 1_000,
+        updatedAt: liveNow - 500
       })
     }
     const sorted = sortWorktreesSmart(
diff --git a/src/renderer/src/components/sidebar/smart-sort.ts b/src/renderer/src/components/sidebar/smart-sort.ts
index b30d60f755a..c5e0bb1496c 100644
--- a/src/renderer/src/components/sidebar/smart-sort.ts
+++ b/src/renderer/src/components/sidebar/smart-sort.ts
@@ -75,7 +75,7 @@ export function compareWorktreeSortLabel(
  * Smart mode requires `attentionByWorktree` — a per-worktree class +
  * timestamp map built once before sorting (see `buildAttentionByWorktree`).
  * Why non-optional: a forgotten caller would silently regress every worktree
- * to Class 4 (idle) and degrade the comparator to recent-activity ordering;
+ * to Class 5 (idle) and degrade the comparator to recent-activity ordering;
  * making the param required surfaces the omission as a typecheck error.
  */
 export function buildWorktreeComparator(
@@ -92,7 +92,7 @@ export function buildWorktreeComparator(
         const aw = attentionByWorktree.get(a.id) ?? IDLE
         const bw = attentionByWorktree.get(b.id) ?? IDLE
         return (
-          // Why: 1 < 2 < 3 < 4 — lower class outranks higher.
+          // Why: 1 < 2 < 3 < 4 < 5 — lower class outranks higher.
           aw.cls - bw.cls ||
           // Why: within a class, the more recent attention event ranks first.
           bw.attentionTimestamp - aw.attentionTimestamp ||
@@ -148,7 +148,7 @@ export function buildWorktreeComparator(
  * `agentStatusByPaneKey` carries the primary signal; `runtimePaneTitlesByTabId`
  * and `ptyIdsByTabId` enable the title-heuristic fallback for hookless agents
  * (Edge case 9 in the design doc). Why all three are non-optional: a forgotten
- * caller would silently regress every worktree to Class 4 or quietly disable
+ * caller would silently regress every worktree to Class 5 or quietly disable
  * the hookless-fallback path.
  */
 export function sortWorktreesSmart(
diff --git a/src/renderer/src/components/sidebar/stale-agent-row-unverifiable.test.ts b/src/renderer/src/components/sidebar/stale-agent-row-unverifiable.test.ts
new file mode 100644
index 00000000000..052adc752b9
--- /dev/null
+++ b/src/renderer/src/components/sidebar/stale-agent-row-unverifiable.test.ts
@@ -0,0 +1,158 @@
+/**
+ * A stale agent entry on a pane Orca STILL HOLDS A LIVE PTY FOR is not the same thing as a
+ * pane with nothing running in it. Both used to decay to `idle`, which asserts "nothing here"
+ * on no evidence at all — the exact substitution docs/reference/ssh-execution-boundary.md
+ * exists to prevent (loss of contact is never evidence).
+ *
+ * The split is on evidence Orca already computes: `tabHasLivePty`. With a live PTY the row
+ * reads `unverifiable` and reports the observer's own fact — how long the silence has run —
+ * so the user can apply knowledge Orca does not have. With no PTY it stays `idle`.
+ *
+ * Negative controls are the point of this suite: nothing may claim a pane FINISHED because
+ * contact was lost, a fresh pane must still read `working`, and a pane with no agent must
+ * still read `idle`.
+ */
+import { describe, expect, it } from 'vitest'
+import {
+  AGENT_STATUS_STALE_AFTER_MS,
+  type AgentStatusEntry
+} from '../../../../shared/agent-status-types'
+import { makeTab } from '../../store/slices/store-test-helpers'
+import { buildWorktreeAgentRows } from './worktree-agent-rows'
+import { getAgentDotState } from './worktree-card-agent-summary'
+import { getCompactAgentSecondary } from './worktree-card-compact-agent-row'
+import { resolveAttention } from './smart-attention'
+
+const NOW = new Date('2026-05-04T12:00:00.000Z').getTime()
+const TAB_ID = 'tab-1'
+const LEAF_ID = '11111111-1111-4111-8111-111111111111'
+const PANE_KEY = `${TAB_ID}:${LEAF_ID}`
+/** 34 minutes of silence: past the 30-minute window, and a legible elapsed reading. */
+const SILENT_FOR_MS = 34 * 60 * 1000
+
+function entry(overrides: Partial<AgentStatusEntry> = {}): AgentStatusEntry {
+  const observedAt = NOW - SILENT_FOR_MS
+  return {
+    paneKey: PANE_KEY,
+    state: 'working',
+    prompt: 'run the long build',
+    updatedAt: observedAt,
+    stateStartedAt: observedAt,
+    stateHistory: [],
+    agentType: 'claude',
+    ...overrides
+  }
+}
+
+function rowState(agentEntry: AgentStatusEntry, ptyIdsByTabId: Record<string, string[]>): string {
+  const rows = buildWorktreeAgentRows({
+    tabs: [makeTab({ id: TAB_ID, worktreeId: 'wt-1' })],
+    entries: [agentEntry],
+    retained: [],
+    ptyIdsByTabId,
+    now: NOW
+  })
+  expect(rows).toHaveLength(1)
+  return rows[0].state
+}
+
+const LIVE = { [TAB_ID]: ['pty-1'] }
+const NO_PTY: Record<string, string[]> = {}
+
+describe('a stale entry on a pane Orca still holds', () => {
+  it('reads `unverifiable`, not `idle` — the reporting stream stopped, not the pane', () => {
+    expect(rowState(entry(), LIVE)).toBe('unverifiable')
+  })
+
+  it('never claims the agent finished', () => {
+    const rows = buildWorktreeAgentRows({
+      tabs: [makeTab({ id: TAB_ID, worktreeId: 'wt-1' })],
+      entries: [entry()],
+      retained: [],
+      ptyIdsByTabId: LIVE,
+      now: NOW
+    })
+    expect(rows[0].state).not.toBe('done')
+    expect(getAgentDotState(rows[0])).not.toBe('done')
+    // Nor the working spinner: Orca has no current evidence of work either.
+    expect(getAgentDotState(rows[0])).not.toBe('working')
+    expect(getAgentDotState(rows[0])).toBe('unverifiable')
+  })
+
+  it('reports the observed gap rather than a verdict on the agent', () => {
+    const rows = buildWorktreeAgentRows({
+      tabs: [makeTab({ id: TAB_ID, worktreeId: 'wt-1' })],
+      entries: [entry()],
+      retained: [],
+      ptyIdsByTabId: LIVE,
+      now: NOW
+    })
+    expect(getCompactAgentSecondary(rows[0], NOW)).toBe('No update in 34m')
+  })
+
+  it('measures the gap from the observation clock, not the delivery clock', () => {
+    // A relay replay restamps `updatedAt`; the reading must not reset with it.
+    const replayed = entry({ updatedAt: NOW, evidenceObservedAt: NOW - SILENT_FOR_MS })
+    const rows = buildWorktreeAgentRows({
+      tabs: [makeTab({ id: TAB_ID, worktreeId: 'wt-1' })],
+      entries: [replayed],
+      retained: [],
+      ptyIdsByTabId: LIVE,
+      now: NOW
+    })
+    expect(rows[0].state).toBe('unverifiable')
+    expect(getCompactAgentSecondary(rows[0], NOW)).toBe('No update in 34m')
+  })
+})
+
+describe('negative controls', () => {
+  it('a pane with no live PTY still reads `idle`', () => {
+    expect(rowState(entry(), NO_PTY)).toBe('idle')
+  })
+
+  it('a live pane with fresh events still reads `working`', () => {
+    expect(rowState(entry({ updatedAt: NOW, stateStartedAt: NOW }), LIVE)).toBe('working')
+  })
+
+  it('a `done` pane is unaffected, however long ago it finished', () => {
+    expect(rowState(entry({ state: 'done' }), LIVE)).toBe('done')
+    expect(rowState(entry({ state: 'done', interrupted: true }), LIVE)).toBe('done')
+  })
+
+  it('a row hydrated from disk with no live hook since stays `idle`', () => {
+    // Its staleness is structural, not elapsed silence, so there is no gap to report.
+    expect(rowState(entry({ restoredUnconfirmed: true }), LIVE)).toBe('idle')
+  })
+})
+
+describe('smart-attention ordering', () => {
+  const working = entry({ updatedAt: NOW, stateStartedAt: NOW })
+
+  it('ranks an unverifiable pane below a reporting one', () => {
+    const unverifiable = resolveAttention([{ kind: 'hook', entry: entry(), hasLivePty: true }], NOW)
+    const reporting = resolveAttention([{ kind: 'hook', entry: working, hasLivePty: true }], NOW)
+    expect(unverifiable.cls).toBeGreaterThan(reporting.cls)
+  })
+
+  it('ranks an unverifiable pane above a genuinely idle one', () => {
+    const unverifiable = resolveAttention([{ kind: 'hook', entry: entry(), hasLivePty: true }], NOW)
+    const idle = resolveAttention([{ kind: 'hook', entry: entry(), hasLivePty: false }], NOW)
+    expect(unverifiable.cls).toBeLessThan(idle.cls)
+    expect(resolveAttention([], NOW).cls).toBe(idle.cls)
+  })
+
+  it('orders unverifiable panes by how recently each was last heard from', () => {
+    const quieter = resolveAttention(
+      [
+        {
+          kind: 'hook',
+          entry: entry({ updatedAt: NOW - AGENT_STATUS_STALE_AFTER_MS * 4 }),
+          hasLivePty: true
+        }
+      ],
+      NOW
+    )
+    const louder = resolveAttention([{ kind: 'hook', entry: entry(), hasLivePty: true }], NOW)
+    expect(louder.attentionTimestamp).toBeGreaterThan(quieter.attentionTimestamp)
+  })
+})
diff --git a/src/renderer/src/components/sidebar/worktree-agent-rows.ts b/src/renderer/src/components/sidebar/worktree-agent-rows.ts
index b6c9d4d4e04..21e69b89e8c 100644
--- a/src/renderer/src/components/sidebar/worktree-agent-rows.ts
+++ b/src/renderer/src/components/sidebar/worktree-agent-rows.ts
@@ -17,6 +17,8 @@ import type {
   TerminalTab
 } from '../../../../shared/terminal-tab-types'
 import { resolveRuntimePaneTitleLeafId } from '@/lib/runtime-pane-title-leaf-id'
+import { resolveDecayedAgentRowState } from '@/lib/agent-row-decay-state'
+import { tabHasLivePty } from '@/lib/tab-has-live-pty'
 import { buildTitleDerivedAgentRows } from './worktree-title-derived-agent-rows'
 import { buildSubagentChildRows } from './worktree-subagent-child-rows'
 import { compareWorktreeAgentRows } from './worktree-agent-row-order'
@@ -164,8 +166,11 @@ export function buildWorktreeAgentRows(args: {
     }
   }
 
+  const ptyIdsByTabId = args.ptyIdsByTabId ?? {}
+
   for (const tab of args.tabs) {
     const explicitEntries = entriesByTabId.get(tab.id) ?? []
+    const hasLivePty = tabHasLivePty(ptyIdsByTabId, tab.id)
     for (const entry of explicitEntries) {
       const rowEntry = entryWithRuntimeOrchestration(entry, args.runtimeAgentOrchestrationByPaneKey)
       const isFresh = isExplicitAgentStatusFresh(rowEntry, args.now, AGENT_STATUS_STALE_AFTER_MS)
@@ -181,7 +186,7 @@ export function buildWorktreeAgentRows(args: {
         tab,
         agentType: resolveRowAgentType(rowEntry, tab),
         rowSource: 'live',
-        state: shouldDecay ? 'idle' : rowEntry.state,
+        state: shouldDecay ? resolveDecayedAgentRowState(rowEntry, hasLivePty) : rowEntry.state,
         startedAt
       })
       rows.push(...buildSubagentChildRows({ parentEntry: rowEntry, tab, parentIsFresh: isFresh }))
@@ -223,7 +228,11 @@ export function buildWorktreeAgentRows(args: {
       tab,
       agentType: resolveRowAgentType(rowEntry, tab),
       rowSource: 'live',
-      state: shouldDecay ? 'idle' : rowEntry.state,
+      // Why: this row's tab is synthesized because no tab for it exists in this renderer,
+      // so there is no live-PTY evidence to hold — the decay destination is always `idle`.
+      state: shouldDecay
+        ? resolveDecayedAgentRowState(rowEntry, tabHasLivePty(ptyIdsByTabId, tab.id))
+        : rowEntry.state,
       startedAt
     })
     rows.push(...buildSubagentChildRows({ parentEntry: rowEntry, tab, parentIsFresh: isFresh }))
diff --git a/src/renderer/src/components/sidebar/worktree-card-agent-summary.test.ts b/src/renderer/src/components/sidebar/worktree-card-agent-summary.test.ts
index f6dc1aa335d..e303ed2c402 100644
--- a/src/renderer/src/components/sidebar/worktree-card-agent-summary.test.ts
+++ b/src/renderer/src/components/sidebar/worktree-card-agent-summary.test.ts
@@ -49,7 +49,7 @@ describe('worktree card agent summary', () => {
     const agent = monitoringAgent()
 
     expect(getAgentDotState(agent)).toBe('monitoring')
-    expect(getCompactAgentSecondary(agent)).toBe('Monitoring background tasks')
+    expect(getCompactAgentSecondary(agent, Date.now())).toBe('Monitoring background tasks')
     expect(summarizeAgents([agent], 'Agent')).toBe('Agent monitoring')
   })
 
diff --git a/src/renderer/src/components/sidebar/worktree-card-agent-summary.ts b/src/renderer/src/components/sidebar/worktree-card-agent-summary.ts
index 8a23b708b6d..314aa430d16 100644
--- a/src/renderer/src/components/sidebar/worktree-card-agent-summary.ts
+++ b/src/renderer/src/components/sidebar/worktree-card-agent-summary.ts
@@ -1,7 +1,7 @@
 import type { AgentDotState } from '@/components/AgentStateDot'
 import type { DashboardAgentRow as DashboardAgentRowData } from '@/components/dashboard/useDashboardData'
 import { formatAgentTypeLabel } from '@/lib/agent-status'
-import type { AgentStatusState } from '../../../../shared/agent-status-types'
+import { agentRowDotState } from '@/lib/agent-row-dot-state'
 
 export type SummaryAgentGroup = {
   state: AgentDotState
@@ -15,28 +15,16 @@ const SUMMARY_STATE_ORDER: AgentDotState[] = [
   'monitoring',
   'interrupted',
   'done',
+  // Why: below every reporting state, above true idle — the pane is still held.
+  'unverifiable',
   'idle'
 ]
 
-function asDotState(state: AgentStatusState | 'idle'): AgentDotState {
-  switch (state) {
-    case 'working':
-    case 'blocked':
-    case 'waiting':
-    case 'done':
-    case 'idle':
-      return state
-  }
-  return 'idle'
-}
-
 export function getAgentDotState(agent: DashboardAgentRowData): AgentDotState {
   if (agent.entry.interrupted === true) {
     return 'interrupted'
   }
-  return agent.state === 'working' && agent.entry.workingMode === 'monitoring'
-    ? 'monitoring'
-    : asDotState(agent.state)
+  return agentRowDotState(agent.state, agent.entry.workingMode)
 }
 
 export function formatSummaryStateLabel(state: AgentDotState): string {
@@ -57,6 +45,8 @@ export function formatSummaryStateLabel(state: AgentDotState): string {
       return 'done'
     case 'idle':
       return 'idle'
+    case 'unverifiable':
+      return 'not reporting'
     case 'permission':
       return 'needs attention'
   }
diff --git a/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.tsx b/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.tsx
index 36f865c87a3..f66b54adeb2 100644
--- a/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.tsx
+++ b/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.tsx
@@ -9,6 +9,7 @@ import { getAgentDotState } from './worktree-card-agent-summary'
 import { translate } from '@/i18n/i18n'
 import { getAgentRowPrimaryText } from '@/lib/agent-row-primary-text'
 import { formatAgentToolPreview } from '@/lib/agent-row-tool-preview'
+import { agentNoUpdateLabel } from '@/lib/agent-row-decay-state'
 import { useAgentRowConversationName } from '@/components/dashboard/use-agent-row-conversation-name'
 import { lastEnteredDoneAt } from '@/components/dashboard/agent-finished-timestamp'
 import CacheTimer, { usePromptCacheCountdownForPane } from './CacheTimer'
@@ -37,10 +38,15 @@ function getCompactAgentPrimary(
   return prompt || agentStateLabel(getAgentDotState(agent))
 }
 
-export function getCompactAgentSecondary(agent: DashboardAgentRowData): string {
+export function getCompactAgentSecondary(agent: DashboardAgentRowData, now: number): string {
   if (agent.entry.interrupted === true) {
     return 'Interrupted by user'
   }
+  // Why: the only honest thing to say about a pane Orca still holds but no longer hears
+  // from is how long the silence has run; the user supplies the meaning.
+  if (agent.state === 'unverifiable') {
+    return agentNoUpdateLabel(agent.entry, now)
+  }
   // Why: the lead turn is over in monitoring, so its last tool line is stale; name the state instead.
   if (agent.state === 'working' && agent.entry.workingMode === 'monitoring') {
     return agentStateLabel('monitoring')
@@ -122,7 +128,7 @@ export const CompactAgentRow = React.memo(function CompactAgentRow({
   const conversationName = useAgentRowConversationName(agent)
   const primary = getCompactAgentPrimary(agent, conversationName)
   const isLineageChild = agent.lineage?.depth === 1
-  const secondary = getCompactAgentSecondary(agent)
+  const secondary = getCompactAgentSecondary(agent, now)
   // Why: sidebar truncation must preserve the passive-vs-active distinction.
   const leadingText = dotState === 'monitoring' ? secondary : primary
   const trailingText =
diff --git a/src/renderer/src/components/sidebar/worktree-list/listing/use-sort-order.ts b/src/renderer/src/components/sidebar/worktree-list/listing/use-sort-order.ts
index 8dd598bef01..80d5f6a327f 100644
--- a/src/renderer/src/components/sidebar/worktree-list/listing/use-sort-order.ts
+++ b/src/renderer/src/components/sidebar/worktree-list/listing/use-sort-order.ts
@@ -23,6 +23,7 @@ function trackSmartClassDistribution(attention: ReadonlyMap<string, WorktreeAtte
   let class2 = 0
   let class3 = 0
   let class4 = 0
+  let class5 = 0
   for (const info of attention.values()) {
     if (info.cls === 1) {
       class1++
@@ -30,8 +31,10 @@ function trackSmartClassDistribution(attention: ReadonlyMap<string, WorktreeAtte
       class2++
     } else if (info.cls === 3) {
       class3++
-    } else {
+    } else if (info.cls === 4) {
       class4++
+    } else {
+      class5++
     }
   }
   track('smart_sort_class_distribution', {
@@ -39,6 +42,7 @@ function trackSmartClassDistribution(attention: ReadonlyMap<string, WorktreeAtte
     class_2: class2,
     class_3: class3,
     class_4: class4,
+    class_5: class5,
     total_worktrees: attention.size
   })
 }
diff --git a/src/renderer/src/lib/agent-row-decay-state.ts b/src/renderer/src/lib/agent-row-decay-state.ts
new file mode 100644
index 00000000000..10f62a34ca6
--- /dev/null
+++ b/src/renderer/src/lib/agent-row-decay-state.ts
@@ -0,0 +1,56 @@
+import {
+  agentStatusEvidenceObservedAt,
+  type AgentStatusEntry,
+  type AgentStatusState
+} from '../../../shared/agent-status-types'
+
+/** Row states: the hook-reported statuses plus the two Orca derives when an entry goes stale. */
+export type AgentRowState = AgentStatusState | 'idle' | 'unverifiable'
+
+type DecayInput = Pick<AgentStatusEntry, 'state' | 'restoredUnconfirmed'>
+
+/**
+ * Where a stale non-`done` entry decays to.
+ *
+ * Silence is not evidence (docs/reference/ssh-execution-boundary.md), so the destination
+ * splits on the liveness Orca actually holds: a pane whose PTY is still in the live-PTY map
+ * only lost its reporting stream (`unverifiable`), while a pane with no PTY has nothing
+ * running behind it (`idle`). Neither ever claims the agent finished.
+ *
+ * `restoredUnconfirmed` rows are excluded: they are stale by construction rather than by
+ * elapsed silence, and their last evidence predates a process boundary — so there is no
+ * "how long since we last heard" for `unverifiable` to report.
+ */
+export function resolveDecayedAgentRowState(
+  entry: DecayInput,
+  hasLivePty: boolean
+): 'idle' | 'unverifiable' {
+  return hasLivePty && entry.state !== 'done' && entry.restoredUnconfirmed !== true
+    ? 'unverifiable'
+    : 'idle'
+}
+
+/** Coarse `34m` / `2h` / `3d` duration, floored so it never overstates the gap. */
+export function formatCompactDuration(deltaMs: number): string {
+  const minutes = Math.max(0, Math.floor(deltaMs / 60_000))
+  if (minutes < 60) {
+    return `${minutes}m`
+  }
+  const hours = Math.floor(minutes / 60)
+  if (hours < 24) {
+    return `${hours}h`
+  }
+  return `${Math.floor(hours / 24)}d`
+}
+
+/**
+ * The observer's report for an `unverifiable` row. Deliberately says what Orca last heard
+ * rather than what the agent is doing: the elapsed time is what lets a user apply knowledge
+ * Orca does not have (a 40-minute build, a long download).
+ */
+export function agentNoUpdateLabel(
+  entry: Pick<AgentStatusEntry, 'updatedAt' | 'evidenceObservedAt'>,
+  now: number
+): string {
+  return `No update in ${formatCompactDuration(now - agentStatusEvidenceObservedAt(entry))}`
+}
diff --git a/src/renderer/src/lib/agent-row-dot-state.ts b/src/renderer/src/lib/agent-row-dot-state.ts
new file mode 100644
index 00000000000..79c0d7c198c
--- /dev/null
+++ b/src/renderer/src/lib/agent-row-dot-state.ts
@@ -0,0 +1,24 @@
+import type { AgentDotState } from '@/components/AgentStateDot'
+import type { AgentWorkingMode } from '../../../shared/agent-status-types'
+import type { AgentRowState } from './agent-row-decay-state'
+
+/**
+ * Map an agent row's state onto the shared state-indicator vocabulary. One copy so the
+ * sidebar card, the dashboard row and the notes send menu cannot drift on a new member.
+ */
+export function agentRowDotState(
+  state: AgentRowState,
+  workingMode?: AgentWorkingMode
+): AgentDotState {
+  switch (state) {
+    case 'working':
+      return workingMode === 'monitoring' ? 'monitoring' : 'working'
+    case 'blocked':
+    case 'waiting':
+    case 'done':
+    case 'idle':
+    case 'unverifiable':
+      return state
+  }
+  return 'idle'
+}
diff --git a/src/renderer/src/lib/agent-row-tool-preview.test.ts b/src/renderer/src/lib/agent-row-tool-preview.test.ts
index b9267afe5e6..41d7f04eaaa 100644
--- a/src/renderer/src/lib/agent-row-tool-preview.test.ts
+++ b/src/renderer/src/lib/agent-row-tool-preview.test.ts
@@ -1,10 +1,10 @@
 import { describe, expect, it } from 'vitest'
 import { AGENT_STATUS_STATES } from '../../../shared/agent-status-types'
-import type { AgentRowState } from './agent-row-tool-preview'
+import type { AgentRowState } from './agent-row-decay-state'
 import { formatAgentToolPreview, showsAgentToolPreview } from './agent-row-tool-preview'
 
 const TOOL = { toolName: 'bash', toolInput: 'rm -rf build/' }
-const ROW_STATES: readonly AgentRowState[] = [...AGENT_STATUS_STATES, 'idle']
+const ROW_STATES: readonly AgentRowState[] = [...AGENT_STATUS_STATES, 'idle', 'unverifiable']
 
 describe('showsAgentToolPreview', () => {
   it('covers exactly the two states whose tool fields describe live work', () => {
diff --git a/src/renderer/src/lib/agent-row-tool-preview.ts b/src/renderer/src/lib/agent-row-tool-preview.ts
index 1ac4c478af9..ba021554dc4 100644
--- a/src/renderer/src/lib/agent-row-tool-preview.ts
+++ b/src/renderer/src/lib/agent-row-tool-preview.ts
@@ -1,7 +1,5 @@
-import type { AgentStatusEntry, AgentStatusState } from '../../../shared/agent-status-types'
-
-/** Row states, which add the renderer-only 'idle' to the hook-reported statuses. */
-export type AgentRowState = AgentStatusState | 'idle'
+import type { AgentStatusEntry } from '../../../shared/agent-status-types'
+import type { AgentRowState } from './agent-row-decay-state'
 
 /**
  * States whose cached tool fields describe live work: 'working' names the tool the agent is
diff --git a/src/renderer/src/lib/pane-agent-evidence.ts b/src/renderer/src/lib/pane-agent-evidence.ts
index 69ba64131a9..51e306becca 100644
--- a/src/renderer/src/lib/pane-agent-evidence.ts
+++ b/src/renderer/src/lib/pane-agent-evidence.ts
@@ -16,7 +16,10 @@ import {
 // (Moved here from agent-status.ts so the evidence resolvers below and the
 // aggregate consumers share one gate without an import cycle.)
 export function isExplicitAgentStatusFresh(
-  entry: Pick<AgentStatusEntry, 'updatedAt' | 'evidenceObservedAt' | 'restoredUnconfirmed'>,
+  entry: Pick<
+    AgentStatusEntry,
+    'updatedAt' | 'evidenceObservedAt' | 'mirroredEvidenceReceivedAt' | 'restoredUnconfirmed'
+  >,
   now: number,
   staleAfterMs: number
 ): boolean {
diff --git a/src/renderer/src/lib/recent-workspace-tab-rows.ts b/src/renderer/src/lib/recent-workspace-tab-rows.ts
index f0c66a5eb6c..cde50e5fd13 100644
--- a/src/renderer/src/lib/recent-workspace-tab-rows.ts
+++ b/src/renderer/src/lib/recent-workspace-tab-rows.ts
@@ -70,7 +70,10 @@ const STATUS_BY_ATTENTION_CLASS: Record<SmartClass, WorktreeStatus | null> = {
   1: 'permission',
   2: 'done',
   3: 'working',
-  4: null
+  // Why null for 4: an unverifiable pane has no reported state to name, so it falls through
+  // to the live-PTY branch below and reads 'active' — never 'working' and never 'done'.
+  4: null,
+  5: null
 }
 
 export function resolveRecentWorkspaceTabAttention(
diff --git a/src/renderer/src/runtime/mirrored-agent-status-clock-skew.test.ts b/src/renderer/src/runtime/mirrored-agent-status-clock-skew.test.ts
new file mode 100644
index 00000000000..925719909be
--- /dev/null
+++ b/src/renderer/src/runtime/mirrored-agent-status-clock-skew.test.ts
@@ -0,0 +1,200 @@
+/**
+ * A paired client mirrors a remote host's agent-status rows verbatim, host wall clock and all.
+ * The staleness gate then computed `rendererNow - hostStamp`, so the effective window was
+ * 30 minutes ± the two machines' clock skew: a host running fast kept every remote row
+ * permanently fresh, and a host running slow decayed them on arrival. Tuning the constant
+ * cannot fix a subtraction that straddles two clocks.
+ *
+ * The replica now stamps its own receipt time and decays against that, so both sides of the
+ * subtraction come from this machine. Skew is injected at the seam the defect lives on: the
+ * host's stamps run on `hostNow`, the client's on `clientNow`, and elapsed time is measured
+ * only in client time.
+ *
+ * The rejected alternative — carrying the authority's own freshness verdict — is asserted
+ * against below by the third case: a verdict computed at publish time cannot age while nothing
+ * arrives, which is exactly the loss-of-contact case the window exists for.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { RuntimeMobileSessionTabsResult } from '../../../shared/runtime-types'
+import { AGENT_STATUS_STALE_AFTER_MS } from '../../../shared/agent-status-types'
+import { makePaneKey } from '../../../shared/stable-pane-id'
+import { toWebTerminalSurfaceTabId } from '../../../shared/terminal-surface-id'
+import { getDefaultSettings } from '../../../shared/constants'
+import { isExplicitAgentStatusFresh } from '../lib/pane-agent-evidence'
+import type { AppState } from '../store/types'
+import { createTestStore, makeWorktree, seedStore } from '../store/slices/store-test-helpers'
+import { resetRendererOwnedAgentStatusPanesForTests } from '../components/terminal-pane/renderer-owned-agent-status-registry'
+import {
+  applyFreshWebSessionTabsSnapshot,
+  resetWebSessionTabsSnapshotFreshnessForTests
+} from './web-session-tabs-sync'
+
+const WT = 'repo1::/path/wt1'
+const ENV = 'web-env-1'
+const HOST_TAB_ID = 'host-tab-1'
+const LEAF_ID = '11111111-1111-4111-8111-111111111111'
+const MIRROR_PANE_KEY = makePaneKey(toWebTerminalSurfaceTabId(HOST_TAB_ID), LEAF_ID)
+const T0 = 1_700_000_000_000
+/** Enough skew to swamp the window in either direction. */
+const HOST_SKEW_MS = AGENT_STATUS_STALE_AFTER_MS * 2
+
+type TestStore = ReturnType<typeof createTestStore>
+
+function hostSnapshot(args: {
+  snapshotVersion: number
+  hostNow: number
+}): RuntimeMobileSessionTabsResult {
+  return {
+    worktree: WT,
+    publicationEpoch: 'host-epoch-1',
+    snapshotVersion: args.snapshotVersion,
+    activeGroupId: 'host-group-1',
+    activeTabId: `${HOST_TAB_ID}::${LEAF_ID}`,
+    activeTabType: 'terminal',
+    tabs: [
+      {
+        type: 'terminal' as const,
+        id: `${HOST_TAB_ID}::${LEAF_ID}`,
+        title: 'Claude Code',
+        parentTabId: HOST_TAB_ID,
+        leafId: LEAF_ID,
+        isActive: true,
+        launchAgent: 'claude' as const,
+        status: 'ready' as const,
+        terminal: 'terminal-1',
+        agentStatus: {
+          state: 'working' as const,
+          prompt: 'run the long build',
+          // Both stamps are the HOST's clock; that is the whole defect.
+          updatedAt: args.hostNow,
+          evidenceObservedAt: args.hostNow,
+          stateStartedAt: args.hostNow - 60_000,
+          agentType: 'claude',
+          paneKey: makePaneKey(HOST_TAB_ID, LEAF_ID),
+          tabId: HOST_TAB_ID,
+          worktreeId: WT,
+          stateHistory: []
+        }
+      }
+    ]
+  }
+}
+
+function seedPairedClientStore(): TestStore {
+  const store = createTestStore()
+  seedStore(store, {
+    settings: { ...getDefaultSettings('/tmp'), tabAutoGenerateTitle: true },
+    worktreesByRepo: { repo1: [makeWorktree({ id: WT, repoId: 'repo1', path: '/path/wt1' })] },
+    activeWorktreeId: WT
+  } as Partial<AppState>)
+  return store
+}
+
+/** Returns false when the sync produced no state change at all (an exact repaint). */
+function applyHostSnapshot(
+  store: TestStore,
+  hostNow: number,
+  clientNow: number,
+  version = 1
+): boolean {
+  vi.setSystemTime(clientNow)
+  const state = store.getState()
+  const patch = applyFreshWebSessionTabsSnapshot(
+    state,
+    hostSnapshot({ snapshotVersion: version, hostNow }),
+    ENV,
+    clientNow
+  )
+  if (patch === state) {
+    return false
+  }
+  store.setState(patch as Partial<AppState>)
+  return true
+}
+
+function applyChangedHostSnapshot(
+  store: TestStore,
+  hostNow: number,
+  clientNow: number,
+  version = 1
+): void {
+  expect(
+    applyHostSnapshot(store, hostNow, clientNow, version),
+    'host snapshot must reach the store'
+  ).toBe(true)
+}
+
+function mirroredRowIsFreshAt(store: TestStore, clientNow: number): boolean {
+  const row = store.getState().agentStatusByPaneKey[MIRROR_PANE_KEY]
+  expect(row, 'the mirrored row must exist for freshness to mean anything').toBeDefined()
+  return isExplicitAgentStatusFresh(row, clientNow, AGENT_STATUS_STALE_AFTER_MS)
+}
+
+describe('a mirrored remote row decays on the replica clock, not the host clock', () => {
+  beforeEach(() => {
+    vi.useFakeTimers()
+    vi.setSystemTime(T0)
+    resetWebSessionTabsSnapshotFreshnessForTests()
+    resetRendererOwnedAgentStatusPanesForTests()
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+    resetRendererOwnedAgentStatusPanesForTests()
+  })
+
+  it('decays a row from a host running fast, instead of holding it fresh forever', () => {
+    const store = seedPairedClientStore()
+    applyChangedHostSnapshot(store, T0 + HOST_SKEW_MS, T0)
+
+    expect(mirroredRowIsFreshAt(store, T0), 'fresh on arrival').toBe(true)
+    expect(mirroredRowIsFreshAt(store, T0 + AGENT_STATUS_STALE_AFTER_MS + 1)).toBe(false)
+  })
+
+  it('keeps a row from a host running slow fresh for the whole window, not zero of it', () => {
+    const store = seedPairedClientStore()
+    applyChangedHostSnapshot(store, T0 - HOST_SKEW_MS, T0)
+
+    expect(mirroredRowIsFreshAt(store, T0), 'must not arrive already stale').toBe(true)
+    expect(mirroredRowIsFreshAt(store, T0 + AGENT_STATUS_STALE_AFTER_MS - 1_000)).toBe(true)
+    expect(mirroredRowIsFreshAt(store, T0 + AGENT_STATUS_STALE_AFTER_MS + 1)).toBe(false)
+  })
+
+  it('keeps decaying while the host publishes nothing new', () => {
+    // The case a published freshness verdict could never cover: silence produces no snapshot
+    // to carry a fresh verdict in, so the replica has to age the last one it received.
+    const store = seedPairedClientStore()
+    applyChangedHostSnapshot(store, T0 + HOST_SKEW_MS, T0)
+
+    for (const elapsed of [1_000, AGENT_STATUS_STALE_AFTER_MS / 2]) {
+      expect(mirroredRowIsFreshAt(store, T0 + elapsed)).toBe(true)
+    }
+    expect(mirroredRowIsFreshAt(store, T0 + AGENT_STATUS_STALE_AFTER_MS * 3)).toBe(false)
+  })
+
+  it('does not restart the window when the host republishes evidence already seen', () => {
+    const store = seedPairedClientStore()
+    const hostNow = T0 + HOST_SKEW_MS
+    applyChangedHostSnapshot(store, hostNow, T0, 1)
+    // Same observation, later snapshot: a repaint restates evidence, it does not renew it —
+    // so it must not even rewrite the row, let alone move its receipt.
+    expect(
+      applyHostSnapshot(store, hostNow, T0 + AGENT_STATUS_STALE_AFTER_MS - 1_000, 2),
+      'an exact repaint must leave the store untouched'
+    ).toBe(false)
+
+    expect(mirroredRowIsFreshAt(store, T0 + AGENT_STATUS_STALE_AFTER_MS + 1)).toBe(false)
+  })
+
+  it('restarts the window when the host reports genuinely new evidence', () => {
+    const store = seedPairedClientStore()
+    applyChangedHostSnapshot(store, T0 + HOST_SKEW_MS, T0, 1)
+    const laterClientNow = T0 + AGENT_STATUS_STALE_AFTER_MS - 1_000
+    applyChangedHostSnapshot(store, T0 + HOST_SKEW_MS + 60_000, laterClientNow, 2)
+
+    expect(mirroredRowIsFreshAt(store, laterClientNow + AGENT_STATUS_STALE_AFTER_MS - 1)).toBe(true)
+    expect(mirroredRowIsFreshAt(store, laterClientNow + AGENT_STATUS_STALE_AFTER_MS + 1)).toBe(
+      false
+    )
+  })
+})
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/agent-status-patch.ts b/src/renderer/src/runtime/web-session-tabs-sync/agent-status-patch.ts
index ddc1b4b4d1f..4b29c800ced 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/agent-status-patch.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/agent-status-patch.ts
@@ -1,4 +1,7 @@
-import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import {
+  agentStatusAuthorityObservedAt,
+  type AgentStatusEntry
+} from '../../../../shared/agent-status-types'
 import { agentEntryCompletionAt } from '../../../../shared/agent-completion-time'
 import { normalizeCompatibleAgentStatusEntryForOwner } from '../../../../shared/agent-title-owner'
 import { isWebTerminalSurfaceTabId, toWebTerminalSurfaceTabId } from '../web-runtime-session'
@@ -25,6 +28,33 @@ import {
   writableWebSessionTabsRecord
 } from './state-equality-core'
 
+/**
+ * Stamp this replica's own receipt clock on a row mirrored from another host.
+ *
+ * The host's `updatedAt` / `evidenceObservedAt` are its wall clock, so decaying a mirrored row
+ * against `rendererNow - hostClock` is off by the two machines' skew: a host running fast keeps
+ * every remote row permanently fresh, a host running slow decays them on arrival. Both sides of
+ * the subtraction have to come from one machine, and the receipt is the only clock the replica
+ * owns. See THE DECAY RULE in shared/agent-status-observation.ts.
+ *
+ * A snapshot that repeats an observation already seen is a repaint, not new evidence, so the
+ * first receipt is carried forward — otherwise the window would restart on every publish and
+ * a quiet pane would never decay. Only a row this renderer stamped itself is comparable, so
+ * the carry-forward requires a previous stamp rather than trusting a cross-machine timestamp.
+ */
+function withMirroredEvidenceReceipt(
+  entry: AgentStatusEntry,
+  existing: AgentStatusEntry | undefined,
+  now: number
+): AgentStatusEntry {
+  const receivedAt =
+    existing?.mirroredEvidenceReceivedAt !== undefined &&
+    agentStatusAuthorityObservedAt(existing) === agentStatusAuthorityObservedAt(entry)
+      ? existing.mirroredEvidenceReceivedAt
+      : now
+  return { ...entry, mirroredEvidenceReceivedAt: receivedAt }
+}
+
 export function buildMirroredAgentStatusPatch(
   state: WebSessionTabsSyncState,
   currentTerminalTabs: readonly TerminalTab[],
@@ -64,11 +94,13 @@ export function buildMirroredAgentStatusPatch(
     const retainedSurface = retainedSurfaceByHostTabAndPrunedLeafId
       ?.get(surface.parentTabId)
       ?.get(surface.leafId)
-    const entry = remapHostAgentStatus(surface, retainedSurface)
-    if (!entry) {
+    const hostEntry = remapHostAgentStatus(surface, retainedSurface)
+    if (!hostEntry) {
       continue
     }
-    const existing = nextByPaneKey.get(entry.paneKey) ?? state.agentStatusByPaneKey[entry.paneKey]
+    const existing =
+      nextByPaneKey.get(hostEntry.paneKey) ?? state.agentStatusByPaneKey[hostEntry.paneKey]
+    const entry = withMirroredEvidenceReceipt(hostEntry, existing, now)
     // Why: keep fresher OSC state while taking remapped ownership metadata from the authoritative host snapshot.
     const hostIdentityPredatesCurrentTurn =
       existing !== undefined &&
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/state-equality-core.ts b/src/renderer/src/runtime/web-session-tabs-sync/state-equality-core.ts
index f382ffad900..42345db35d0 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/state-equality-core.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/state-equality-core.ts
@@ -1,5 +1,6 @@
 import {
   AGENT_STATUS_STALE_AFTER_MS,
+  agentStatusEvidenceObservedAt,
   type AgentStatusEntry
 } from '../../../../shared/agent-status-types'
 import { agentProviderSessionsEqual } from '../../../../shared/agent-session-resume'
@@ -64,10 +65,18 @@ export function agentStatusEntryEqual(
 }
 
 export function isAgentStatusFresh(
-  entry: Pick<AgentStatusEntry, 'updatedAt' | 'restoredUnconfirmed'>,
+  entry: Pick<
+    AgentStatusEntry,
+    'updatedAt' | 'evidenceObservedAt' | 'mirroredEvidenceReceivedAt' | 'restoredUnconfirmed'
+  >,
   now: number
 ): boolean {
-  return entry.restoredUnconfirmed !== true && now - entry.updatedAt <= AGENT_STATUS_STALE_AFTER_MS
+  // Why the shared accessor: a mirrored row's own stamps are the host's clock, so this must
+  // read the same reader-clock observation time the display gate does or the two disagree.
+  return (
+    entry.restoredUnconfirmed !== true &&
+    now - agentStatusEvidenceObservedAt(entry) <= AGENT_STATUS_STALE_AFTER_MS
+  )
 }
 
 export function isMirroredCommandCodeTurnBump(
diff --git a/src/renderer/src/store/slices/agent-status-observation-neutrality.test.ts b/src/renderer/src/store/slices/agent-status-observation-neutrality.test.ts
index f0b21eca930..97fdd8666fb 100644
--- a/src/renderer/src/store/slices/agent-status-observation-neutrality.test.ts
+++ b/src/renderer/src/store/slices/agent-status-observation-neutrality.test.ts
@@ -120,8 +120,8 @@ describe('agent status observation is behavior-neutral', () => {
       )
       expect(stampedRows.map(getAgentDotState)).toEqual(unstampedRows.map(getAgentDotState))
 
-      expect(resolveAttention([{ kind: 'hook', entry: stamped }], at)).toEqual(
-        resolveAttention([{ kind: 'hook', entry: unstamped }], at)
+      expect(resolveAttention([{ kind: 'hook', entry: stamped, hasLivePty: false }], at)).toEqual(
+        resolveAttention([{ kind: 'hook', entry: unstamped, hasLivePty: false }], at)
       )
     }
   })
@@ -141,7 +141,9 @@ describe('agent status observation is behavior-neutral', () => {
     }
 
     expect(isExplicitAgentStatusFresh(entry, now, AGENT_STATUS_STALE_AFTER_MS)).toBe(true)
-    expect(resolveAttention([{ kind: 'hook', entry }], now)).toMatchObject({ cls: 1 })
+    expect(resolveAttention([{ kind: 'hook', entry, hasLivePty: false }], now)).toMatchObject({
+      cls: 1
+    })
     const rows = buildWorktreeAgentRows({
       tabs: [makeTab({ id: 'tab-1', worktreeId: 'wt-1' })],
       entries: [entry],
diff --git a/src/shared/agent-status-freshness.ts b/src/shared/agent-status-freshness.ts
new file mode 100644
index 00000000000..84a3218e3dd
--- /dev/null
+++ b/src/shared/agent-status-freshness.ts
@@ -0,0 +1,52 @@
+import type { AgentStatusEntry } from './agent-status-types'
+
+/**
+ * Freshness threshold for explicit agent status: retained past this so WorktreeCard's
+ * sidebar dot can decay "working" back to "active" when the hook stream goes silent.
+ */
+export const AGENT_STATUS_STALE_AFTER_MS = 30 * 60 * 1000
+
+/** When the AUTHORITY says it observed the evidence, on the authority's own clock.
+ *  A relay reconnect replays a cached row and must restamp `updatedAt`, so measuring against it
+ *  pushes the deadline out by another window on every reconnect. Only comparable against a
+ *  reading of that same clock — never against a replica's `now`. */
+export function agentStatusAuthorityObservedAt(
+  entry: Pick<AgentStatusEntry, 'updatedAt' | 'evidenceObservedAt'>
+): number {
+  return entry.evidenceObservedAt ?? entry.updatedAt
+}
+
+/** Age the staleness window measures, on the READER's clock.
+ *  A row mirrored from another host carries the host's stamps, so subtracting them from this
+ *  machine's `now` is off by the two clocks' skew in whichever direction the host runs. A
+ *  mirrored row therefore carries this replica's own receipt time and decays against that;
+ *  every locally observed row has none and falls through to the authority's clock, which is
+ *  this machine's. See THE DECAY RULE in agent-status-observation.ts. */
+export function agentStatusEvidenceObservedAt(
+  entry: Pick<AgentStatusEntry, 'updatedAt' | 'evidenceObservedAt' | 'mirroredEvidenceReceivedAt'>
+): number {
+  return entry.mirroredEvidenceReceivedAt ?? agentStatusAuthorityObservedAt(entry)
+}
+
+export function isFreshNonDoneAgentStatus(
+  entry:
+    | Pick<
+        AgentStatusEntry,
+        | 'state'
+        | 'updatedAt'
+        | 'evidenceObservedAt'
+        | 'mirroredEvidenceReceivedAt'
+        | 'restoredUnconfirmed'
+      >
+    | undefined,
+  now = Date.now(),
+  staleAfterMs = AGENT_STATUS_STALE_AFTER_MS
+): boolean {
+  // Why: an unconfirmed hydrated row may describe a turn that ended while no receiver was up; never fresh.
+  return Boolean(
+    entry &&
+    entry.state !== 'done' &&
+    entry.restoredUnconfirmed !== true &&
+    now - agentStatusEvidenceObservedAt(entry) <= staleAfterMs
+  )
+}
diff --git a/src/shared/agent-status-observation.ts b/src/shared/agent-status-observation.ts
index d0712d217c5..2b3064aca29 100644
--- a/src/shared/agent-status-observation.ts
+++ b/src/shared/agent-status-observation.ts
@@ -62,6 +62,14 @@ export type AgentStatusObservation = {
  *  body, so a hook or OSC writer cannot declare its own provenance. */
 export type WithAgentStatusObservation = { observation?: AgentStatusObservation }
 
+/** REPLICA-local receipt clock for a row this renderer mirrored from another host's snapshot.
+ *  Stamped by `buildMirroredAgentStatusPatch` when the authority's observation clock advances,
+ *  and carried forward when it does not (a repeated snapshot restates evidence already seen;
+ *  it is not a new observation). `agentStatusEvidenceObservedAt` prefers it, so a mirrored row
+ *  decays against THIS machine's clock instead of subtracting the host's — see THE DECAY RULE.
+ *  Absent on every locally observed row. Never sent over IPC or persisted. */
+export type MirroredEvidenceReceipt = { mirroredEvidenceReceivedAt?: number }
+
 /** Renderer-local count of ACCEPTED status writes this pane's row has taken. Incremented only by
  *  the store's accept branch, off the row it replaces, and carried through by every field-level
  *  rewrite — so it answers "did the pane report again?", which `updatedAt` cannot, because the
@@ -71,7 +79,8 @@ export type WithAgentStatusObservation = { observation?: AgentStatusObservation
  *
  *  Declared here beside the observation facet because both are per-write facets mixed into
  *  `AgentStatusEntry` rather than fields a reporter supplies. */
-export type AgentStatusRowFacets = WithAgentStatusObservation & { acceptedStatusSeq?: number }
+export type AgentStatusRowFacets = WithAgentStatusObservation &
+  MirroredEvidenceReceipt & { acceptedStatusSeq?: number }
 
 // ─── THE ORDERING RULE ──────────────────────────────────────────────────────
 // `(authorityId, incarnation, revision)` is a total order ONLY within one authorityId.
@@ -84,16 +93,21 @@ export type AgentStatusRowFacets = WithAgentStatusObservation & { acceptedStatus
 // Staleness must be computed against the SAME authority clock that stamped `observedAt`,
 // or replicas must decay on LOCAL RECEIPT time instead.
 //
-// `observedAt` is the authority's wall clock. Today `isExplicitAgentStatusFresh`
-// (renderer/src/lib/pane-agent-evidence.ts) computes `rendererNow - entry.updatedAt`, and
-// for a MIRRORED REMOTE entry `updatedAt` is the HOST's clock. A host running minutes fast
-// makes every remote row look permanently fresh; a host running slow makes them decay on
-// arrival. Declaring `observedAt` display-only does NOT fix that — the skew is in the
+// `observedAt` is the authority's wall clock. `isExplicitAgentStatusFresh`
+// (renderer/src/lib/pane-agent-evidence.ts) computes `rendererNow - <observation clock>`, and
+// for a MIRRORED REMOTE entry the authority's stamps are the HOST's clock. A host running
+// minutes fast made every remote row look permanently fresh; a host running slow made them
+// decay on arrival. Declaring `observedAt` display-only does NOT fix that — the skew is in the
 // subtraction, not in the tiebreak. A replica must either receive the authority's own
 // freshness verdict, or stamp its own receipt time and decay against that.
 //
-// This PR does not fix it. It records the contract at the type so the PR that moves the
-// first consumer has something to be correct against.
+// RESOLVED by the receipt stamp: `buildMirroredAgentStatusPatch` writes
+// `mirroredEvidenceReceivedAt` from the replica's own clock, and
+// `agentStatusEvidenceObservedAt` decays against it, so both sides of the subtraction come
+// from one machine. The authority's own verdict was rejected: a published verdict is computed
+// at publish time and cannot age between snapshots, so the moment the host stops publishing —
+// the loss-of-contact case this whole rule exists for — the replica would hold `fresh` forever.
+// The receipt stamp keeps decaying while nothing arrives, which is the required behaviour.
 
 /** Bounds the per-pane incarnation map. Panes are created for the life of the process;
  *  eviction is safe because `incarnation` is floored by an authority-wide counter (below). */
diff --git a/src/shared/agent-status-types.ts b/src/shared/agent-status-types.ts
index 6ce3cd0647e..36bf7cbe09c 100644
--- a/src/shared/agent-status-types.ts
+++ b/src/shared/agent-status-types.ts
@@ -256,36 +256,14 @@ export const AGENT_STATUS_ASSISTANT_MESSAGE_MAX_LENGTH = 8000
 /** Maximum character length for the interactivePrompt field.
  *  Why: holds full AskUserQuestion JSON — truncating to a preview like toolInput would corrupt it and drop options; capped to still bound cache growth. */
 export const AGENT_STATUS_INTERACTIVE_PROMPT_MAX_LENGTH = 16000
-/**
- * Freshness threshold for explicit agent status: retained past this so WorktreeCard's
- * sidebar dot can decay "working" back to "active" when the hook stream goes silent.
- */
-export const AGENT_STATUS_STALE_AFTER_MS = 30 * 60 * 1000
-
-/** Age the staleness window measures: when the evidence was observed, not when it was delivered.
- *  A relay reconnect replays a cached row and must restamp `updatedAt`, so measuring against it
- *  pushes the deadline out by another window on every reconnect. */
-export function agentStatusEvidenceObservedAt(
-  entry: Pick<AgentStatusEntry, 'updatedAt' | 'evidenceObservedAt'>
-): number {
-  return entry.evidenceObservedAt ?? entry.updatedAt
-}
-
-export function isFreshNonDoneAgentStatus(
-  entry:
-    | Pick<AgentStatusEntry, 'state' | 'updatedAt' | 'evidenceObservedAt' | 'restoredUnconfirmed'>
-    | undefined,
-  now = Date.now(),
-  staleAfterMs = AGENT_STATUS_STALE_AFTER_MS
-): boolean {
-  // Why: an unconfirmed hydrated row may describe a turn that ended while no receiver was up; never fresh.
-  return Boolean(
-    entry &&
-    entry.state !== 'done' &&
-    entry.restoredUnconfirmed !== true &&
-    now - agentStatusEvidenceObservedAt(entry) <= staleAfterMs
-  )
-}
+// Re-exported here because every consumer reaches for the entry type and its freshness gate
+// together; the clock rules themselves live in agent-status-freshness.ts.
+export {
+  AGENT_STATUS_STALE_AFTER_MS,
+  agentStatusAuthorityObservedAt,
+  agentStatusEvidenceObservedAt,
+  isFreshNonDoneAgentStatus
+} from './agent-status-freshness'
 
 // Why: ReadonlySet<string> so .has() accepts any string without a cast here; the narrowing cast stays on the return line where it's proven safe.
 const VALID_STATES: ReadonlySet<string> = new Set<string>(AGENT_STATUS_STATES)
diff --git a/src/shared/telemetry-onboarding-event-schemas.ts b/src/shared/telemetry-onboarding-event-schemas.ts
index d76cd466ece..95a192cc0f3 100644
--- a/src/shared/telemetry-onboarding-event-schemas.ts
+++ b/src/shared/telemetry-onboarding-event-schemas.ts
@@ -227,12 +227,15 @@ export const onboardingGhosttyDiscoveredSchema = z
 export const onboardingGhosttyImportClickedSchema = z.object({ cohort: cohortSchema }).strict()
 
 // Smart-sort telemetry: measures whether the redesign concentrates users in Class 1-3, and flags Smart→Recent abandonment as a regression.
+// Why class_5: splitting the old catch-all idle class into unverifiable (4) and idle (5) moved
+// what class_4 counts, so the previously-absent bucket is the one that keeps the total honest.
 export const smartSortClassDistributionSchema = z
   .object({
     class_1: z.number().int().nonnegative(),
     class_2: z.number().int().nonnegative(),
     class_3: z.number().int().nonnegative(),
     class_4: z.number().int().nonnegative(),
+    class_5: z.number().int().nonnegative().optional(),
     total_worktrees: z.number().int().nonnegative()
   })
   .strict()

From 4f4872c4240eaa077efa9eb33521e7c1dc637ad1 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:45:29 -0700
Subject: [PATCH 16/92] fix(ssh): treat a markerless native-deps probe answer
 as unverifiable (#18011)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The repair path read "the probe answered, but nothing in the answer names a
dep" as "both deps are missing". The POSIX probe is fenced with
`|| echo MISSING`, so the subshell always exits 0 and the unanswered-probe
catch added by #17979 never ran. A node that cannot start (invalid
NODE_OPTIONS, OOM kill, exit 127) therefore produced a bare `MISSING`, and
every reconnect rm -rf'd node_modules/node-pty and node_modules/@parcel/watcher
and burned a 240s npm install that failed the same way. `.install-complete`
from the original install survives, so the relay kept launching with no PTY
and no file watcher, permanently, per host.

Only a marker line that actually names deps is evidence about them; anything
else is `unverifiable` and launches as-is. Also drop `2>/dev/null` from the
POSIX probe and carry stderr into the warning via a new execCommand `onStderr`
hook, so the reason node failed survives. stderr stays its own stream — folded
into stdout it would match the probe's own token strings.

The Windows branch shared the same parser and is fixed with it.
---
 src/main/ssh/ssh-relay-deploy-helpers.test.ts |  21 ++++
 src/main/ssh/ssh-relay-deploy.ts              |  61 ++++++---
 src/main/ssh/ssh-relay-exec-command.ts        |  10 +-
 .../ssh-relay-native-deps-install-fixture.ts  |  12 +-
 .../ssh/ssh-relay-native-deps-install.test.ts |  11 +-
 ...sh-relay-native-deps-probe-verdict.test.ts | 119 +++++++++++++++++-
 .../ssh-relay-sftp-namespace-install.test.ts  |  23 +++-
 7 files changed, 222 insertions(+), 35 deletions(-)

diff --git a/src/main/ssh/ssh-relay-deploy-helpers.test.ts b/src/main/ssh/ssh-relay-deploy-helpers.test.ts
index acda4594ca2..f17fc858164 100644
--- a/src/main/ssh/ssh-relay-deploy-helpers.test.ts
+++ b/src/main/ssh/ssh-relay-deploy-helpers.test.ts
@@ -550,6 +550,27 @@ describe('execCommand', () => {
     expect(channel.stderr.listenerCount('data')).toBe(0)
   })
 
+  it('hands a zero-exit command stderr to onStderr instead of dropping it', async () => {
+    // Why: probes fenced with `|| echo MISSING` always exit 0, so the resolve path used to be the
+    // one place the failure reason was discarded.
+    const channel = createMockChannel()
+    const conn = { exec: vi.fn().mockResolvedValue(channel) }
+    const captured: string[] = []
+    const commandPromise = execCommand(conn as never, "(node -e 'x' || echo MISSING)", {
+      onStderr: (stderr) => captured.push(stderr)
+    })
+
+    await Promise.resolve()
+    channel.stderr.emit('data', Buffer.from('node: --bogus is not allowed in NODE_OPTIONS\n'))
+    channel.emit('data', Buffer.from('MISSING\n'))
+    channel.emit('close', 0)
+
+    await expect(commandPromise).resolves.toBe('MISSING\n')
+    expect(captured).toEqual(['node: --bogus is not allowed in NODE_OPTIONS\n'])
+    // onStderr must not leak into the SSH exec options.
+    expect(conn.exec).toHaveBeenCalledWith("(node -e 'x' || echo MISSING)", {})
+  })
+
   it('uses custom command timeouts without forwarding them to SSH exec', async () => {
     vi.useFakeTimers()
     try {
diff --git a/src/main/ssh/ssh-relay-deploy.ts b/src/main/ssh/ssh-relay-deploy.ts
index 124fb68bbcc..310bce2d4ac 100644
--- a/src/main/ssh/ssh-relay-deploy.ts
+++ b/src/main/ssh/ssh-relay-deploy.ts
@@ -118,12 +118,13 @@ function execHostCommand(
   conn: SshConnection,
   hostPlatform: RemoteHostPlatform,
   command: string,
-  options?: { timeoutMs?: number; signal?: AbortSignal }
+  options?: { timeoutMs?: number; signal?: AbortSignal; onStderr?: (stderr: string) => void }
 ): Promise<string> {
   return execCommand(conn, command, {
     wrapCommand: !isWindowsRemoteHost(hostPlatform),
     timeoutMs: options?.timeoutMs,
-    signal: options?.signal
+    signal: options?.signal,
+    onStderr: options?.onStderr
   })
 }
 
@@ -735,24 +736,34 @@ function nativeDepsProbeJs(successToken: string): string {
   return `(()=>{const missing=[];try{${loadNodePty}}catch{missing.push("node-pty")}try{require("@parcel/watcher")}catch{missing.push("@parcel/watcher")}if(missing.length){console.log("${NATIVE_DEPS_MISSING_PREFIX}"+missing.join(","));process.exitCode=1}else{console.log(${JSON.stringify(successToken)})}})()`
 }
 
-function missingNativeDepsFromProbe(output: string): RelayNativeDepName[] {
+/**
+ * Which deps the probe *named* as unloadable, or `undefined` when the answer names none.
+ *
+ * Only the probe's own marker line is evidence about the deps. An answer without one (node never
+ * ran, was killed, exited before the script) says nothing, so it must not be read as "all of them" —
+ * that inference deleted both native modules on every reconnect of an affected host.
+ */
+function missingNativeDepsFromProbe(output: string): RelayNativeDepName[] | undefined {
   const marker = output
     .split(/\r?\n/)
     .find((line) => line.trim().startsWith(NATIVE_DEPS_MISSING_PREFIX))
   if (!marker) {
-    return [...RELAY_NATIVE_DEP_NAMES]
+    return undefined
   }
   const reported = marker.trim().slice(NATIVE_DEPS_MISSING_PREFIX.length).split(',')
-  return RELAY_NATIVE_DEP_NAMES.filter((name) => reported.includes(name))
+  const named = RELAY_NATIVE_DEP_NAMES.filter((name) => reported.includes(name))
+  return named.length > 0 ? named : undefined
 }
 
 /**
- * `ok` — the probe answered and both deps loaded. `blocked` — the probe answered and named deps
- * that failed to load. `unverifiable` — the probe never answered, which is evidence about the
- * transport, not about the deps.
+ * `ok` — the probe answered and both deps loaded. `blocked` — the probe answered with a marker
+ * naming deps that failed to load. `unverifiable` — the probe never answered, or answered nothing
+ * that names a dep; both are evidence about the probe, not about the deps.
  *
  * Why `unverifiable` is not `blocked`: repairing on it does `rm -rf node_modules/node-pty` and a
- * node-gyp source build (no Linux prebuild) against a relay that was never shown to be broken.
+ * node-gyp source build (no Linux prebuild) against a relay that was never shown to be broken. An
+ * unparseable answer is the worse half of that — it is deterministic and per-host, so a node that
+ * cannot start (bad NODE_OPTIONS, OOM, exit 127) deleted both modules on every reconnect forever.
  * Same verdict discipline as `src/main/orcad/node-pty-precondition.ts` and
  * docs/reference/ssh-execution-boundary.md — loss of contact is not evidence.
  */
@@ -767,6 +778,7 @@ async function probeRequiredNativeDeps(
 ): Promise<{ status: RelayNativeDepsProbeStatus; missing: RelayNativeDepName[] }> {
   const escapedNode = shellEscape(nodePath)
   const probeJs = nativeDepsProbeJs('ORCA-NATIVE-DEPS-OK')
+  let probeStderr = ''
   try {
     const command = isWindowsRemoteHost(hostPlatform)
       ? commandWithNodePath(
@@ -775,16 +787,32 @@ async function probeRequiredNativeDeps(
           remoteDir,
           `try { & ${powerShellLiteral(nodePath)} -e ${powerShellNativeArg(probeJs)} } catch { 'MISSING' }`
         )
-      : commandWithNodePath(
+      : // Why: no `2>/dev/null` — it discarded the only line that says why node never reached the
+        // script. stderr stays its own stream so it can't be mistaken for the verdict, mirroring
+        // src/main/orcad/node-pty-precondition.ts.
+        commandWithNodePath(
           hostPlatform,
           nodePath,
           remoteDir,
-          `(${escapedNode} -e ${shellEscape(probeJs)} 2>/dev/null || echo MISSING)`
+          `(${escapedNode} -e ${shellEscape(probeJs)} || echo MISSING)`
         )
-    const probe = await execHostCommand(conn, hostPlatform, command, { signal })
-    return probe.includes('ORCA-NATIVE-DEPS-OK')
-      ? { status: 'ok', missing: [] }
-      : { status: 'blocked', missing: missingNativeDepsFromProbe(probe) }
+    const probe = await execHostCommand(conn, hostPlatform, command, {
+      signal,
+      onStderr: (text) => {
+        probeStderr = text
+      }
+    })
+    if (probe.includes('ORCA-NATIVE-DEPS-OK')) {
+      return { status: 'ok', missing: [] }
+    }
+    const missing = missingNativeDepsFromProbe(probe)
+    if (!missing) {
+      console.warn(
+        `[ssh-relay][NATIVE-DEPS-PROBE-UNPARSEABLE] Probe at ${remoteDir} answered without naming a dep; launching as-is. stdout=${probe.trim().slice(-200)} stderr=${probeStderr.trim().slice(-500)}`
+      )
+      return { status: 'unverifiable', missing: [] }
+    }
+    return { status: 'blocked', missing }
   } catch {
     signal?.throwIfAborted()
     // Why: an unanswered probe says nothing about the deps; reporting MISSING here reset and
@@ -1350,7 +1378,8 @@ async function probeInstalledNativeDeps(
   }
   return {
     available: probeOutput.includes(PROBE_OK),
-    missing: probeOutput.includes(PROBE_OK) ? [] : missingNativeDepsFromProbe(probeOutput),
+    // A markerless answer names no dep, so it reports none; `available` already carries the failure.
+    missing: probeOutput.includes(PROBE_OK) ? [] : (missingNativeDepsFromProbe(probeOutput) ?? []),
     output: probeOutput,
     stderr: remoteStderr
   }
diff --git a/src/main/ssh/ssh-relay-exec-command.ts b/src/main/ssh/ssh-relay-exec-command.ts
index c631cd2d41a..fb0a4fee012 100644
--- a/src/main/ssh/ssh-relay-exec-command.ts
+++ b/src/main/ssh/ssh-relay-exec-command.ts
@@ -13,6 +13,11 @@ const MAX_EXEC_OUTPUT_CHARS = 1024 * 1024
 
 type ExecCommandOptions = SshExecOptions & {
   timeoutMs?: number
+  // Why: a zero-exit command resolves with stdout alone, so the reason a wrapped-in-`|| echo`
+  // probe failed is discarded. Callers that need that diagnostic opt in here rather than
+  // folding stderr into stdout, where it would match the probe's own token strings.
+  // On the system-ssh transport this stream also carries local OpenSSH noise; log-only.
+  onStderr?: (stderr: string) => void
 }
 
 type SshCommandTerminationError = Error & {
@@ -33,7 +38,7 @@ export async function execCommand(
   command: string,
   options?: ExecCommandOptions
 ): Promise<string> {
-  const { timeoutMs = EXEC_TIMEOUT_MS, ...execOptions } = options ?? {}
+  const { timeoutMs = EXEC_TIMEOUT_MS, onStderr, ...execOptions } = options ?? {}
   const signal = options?.signal
   if (signal?.aborted) {
     throw createSshOperationAbortError()
@@ -151,6 +156,9 @@ export async function execCommand(
           )
         )
       } else {
+        if (stderr && onStderr) {
+          onStderr(redactRelayInstallMarkerTokens(stderr))
+        }
         settle(resolve, stdout)
       }
     }
diff --git a/src/main/ssh/ssh-relay-native-deps-install-fixture.ts b/src/main/ssh/ssh-relay-native-deps-install-fixture.ts
index e8fc2274583..821ebbc1208 100644
--- a/src/main/ssh/ssh-relay-native-deps-install-fixture.ts
+++ b/src/main/ssh/ssh-relay-native-deps-install-fixture.ts
@@ -54,6 +54,11 @@ export function makeMockConnection(capture: SftpWriteCapture): SshConnection {
 
 export type ExecResponse = string | { reject: string }
 
+// The answer a genuinely broken pair produces: a marker line naming both deps. A bare `MISSING`
+// names none, so it is unverifiable and must never stand in for this.
+export const BOTH_NATIVE_DEPS_MISSING_PROBE =
+  'ORCA-NATIVE-DEPS-MISSING:node-pty,@parcel/watcher\nMISSING'
+
 const STAGE_OWNER = '.sftp-namespace-00000000000000000000000000000000'
 
 export function makeStagedFirstInstallExecPrefix(): ExecResponse[] {
@@ -71,12 +76,11 @@ export function makeStagedFirstInstallExecPrefix(): ExecResponse[] {
 // Repair reconnect (isRelayAlreadyInstalled → true) where BOTH native deps are broken and the host
 // cannot compile node-pty, so the caller's resets must survive into the node-pty-less reinstall.
 export function makeRepairToolchainSkipExecResponses(): ExecResponse[] {
-  const bothMissing = 'ORCA-NATIVE-DEPS-MISSING:node-pty,@parcel/watcher\nMISSING'
   return [
     '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
     '/home/u',
-    bothMissing, // health probe before lock
-    bothMissing, // re-probe under the repair lock
+    BOTH_NATIVE_DEPS_MISSING_PROBE, // health probe before lock
+    BOTH_NATIVE_DEPS_MISSING_PROBE, // re-probe under the repair lock
     '', // SFTP-namespace install-owner marker (repair)
     { reject: 'gyp ERR! stack Error: not found: make' },
     'PKG apk', // toolchain probe: no HAVE lines
@@ -139,7 +143,7 @@ export function makeExecResponses(opts: {
       '', // rm -rf node-pty + reinstall without it
       // node-pty is always reported missing here; the probe never resolves OK, so cat + rm both run.
       opts.nodePtySkipWatcher === 'missing'
-        ? 'ORCA-NATIVE-DEPS-MISSING:node-pty,@parcel/watcher\nMISSING\n'
+        ? `${BOTH_NATIVE_DEPS_MISSING_PROBE}\n`
         : 'ORCA-NATIVE-DEPS-MISSING:node-pty\nMISSING\n',
       '', // cat probe stderr
       '', // rm -f probe stderr
diff --git a/src/main/ssh/ssh-relay-native-deps-install.test.ts b/src/main/ssh/ssh-relay-native-deps-install.test.ts
index 5297da7c85a..16144fb2cf3 100644
--- a/src/main/ssh/ssh-relay-native-deps-install.test.ts
+++ b/src/main/ssh/ssh-relay-native-deps-install.test.ts
@@ -83,6 +83,7 @@ import {
 import { acquireInstallLock } from './ssh-relay-install-lock'
 import { tryAcquireRelayRepairLock } from './ssh-relay-repair-lock'
 import {
+  BOTH_NATIVE_DEPS_MISSING_PROBE,
   decodePowerShellCommand,
   makeExecResponses,
   makeMockConnection,
@@ -677,8 +678,8 @@ describe('installNativeDeps (via deployAndLaunchRelay)', () => {
     feed([
       '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
       '/home/u',
-      'MISSING', // health probe: require() fails
-      'MISSING', // re-probe after lock
+      BOTH_NATIVE_DEPS_MISSING_PROBE, // health probe: require() names both deps
+      BOTH_NATIVE_DEPS_MISSING_PROBE, // re-probe after lock
       '', // SFTP-namespace install-owner marker (repair)
       { reject: 'npm ERR! network ETIMEDOUT' }, // npm install fails (offline)
       'DEAD',
@@ -701,8 +702,8 @@ describe('installNativeDeps (via deployAndLaunchRelay)', () => {
     vi.mocked(execCommand)
       .mockResolvedValueOnce('__ORCA_REMOTE_PLATFORM__ Linux x86_64')
       .mockResolvedValueOnce('/home/u')
-      .mockResolvedValueOnce('MISSING')
-      .mockResolvedValueOnce('MISSING')
+      .mockResolvedValueOnce(BOTH_NATIVE_DEPS_MISSING_PROBE)
+      .mockResolvedValueOnce(BOTH_NATIVE_DEPS_MISSING_PROBE)
       .mockResolvedValueOnce('') // SFTP-namespace install-owner marker (repair)
       .mockRejectedValueOnce(
         Object.assign(new Error('npm termination was not confirmed'), {
@@ -843,7 +844,7 @@ describe('installNativeDeps (via deployAndLaunchRelay)', () => {
     feed([
       '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
       '/home/u',
-      'MISSING',
+      BOTH_NATIVE_DEPS_MISSING_PROBE,
       'DEAD',
       '', // remote credential generation without a namespace marker
       'READY'
diff --git a/src/main/ssh/ssh-relay-native-deps-probe-verdict.test.ts b/src/main/ssh/ssh-relay-native-deps-probe-verdict.test.ts
index c67270db4c3..df946dfe346 100644
--- a/src/main/ssh/ssh-relay-native-deps-probe-verdict.test.ts
+++ b/src/main/ssh/ssh-relay-native-deps-probe-verdict.test.ts
@@ -75,8 +75,11 @@ vi.mock('./ssh-connection-utils', () => ({
 import { deployAndLaunchRelay } from './ssh-relay-deploy'
 import { execCommand, uploadDirectory } from './ssh-relay-deploy-helpers'
 import { parseUnameToRelayPlatform } from './relay-protocol'
+import { resolveRemoteNodePath } from './ssh-remote-node-resolution'
 import { finalizeInstall, isRelayAlreadyInstalled } from './ssh-relay-versioned-install'
 import {
+  BOTH_NATIVE_DEPS_MISSING_PROBE,
+  decodePowerShellCommand,
   makeMockConnection,
   type ExecResponse,
   type SftpWriteCapture
@@ -156,13 +159,67 @@ describe('native-deps repair probe verdicts', () => {
     expect(outcome, 'lost contact must not abort the connection').not.toBeInstanceOf(Error)
   })
 
-  it('still resets and repairs when the probe answers without the OK marker', async () => {
+  it('leaves node_modules intact when the probe answers without naming a dep', async () => {
+    // The bare `MISSING` a `|| echo MISSING` subshell emits when node never reached the script
+    // (bad NODE_OPTIONS, OOM kill, exit 127). The shell answered; the answer is not about the deps.
     const conn = makeMockConnection(sftpCapture)
     feed([
       '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
       '/home/u',
-      'MISSING', // answered, no marker line: both deps are genuinely broken
-      'MISSING', // re-probe under the repair lock
+      'MISSING', // answered, no marker line: nothing here names a dep
+      '', // launch namespace marker
+      'DEAD',
+      '', // publish the per-launch credential
+      'READY'
+    ])
+
+    const outcome = await deployAndLaunchRelay(conn).then(
+      (result) => result,
+      (err: Error) => err
+    )
+
+    const commands = execCommands()
+    expect(warnings().some((message) => message.includes('Repairing missing native deps'))).toBe(
+      false
+    )
+    expect(commands.some((command) => command.includes(NODE_PTY_RESET))).toBe(false)
+    expect(commands.some((command) => command.includes(WATCHER_RESET))).toBe(false)
+    expect(commands.some((command) => command.includes('npm install'))).toBe(false)
+    // One probe only: an unverifiable answer must not fall through to the locked re-probe.
+    expect(commands.filter((command) => command.includes('ORCA-NATIVE-DEPS-OK'))).toHaveLength(1)
+    expect(vi.mocked(finalizeInstall)).not.toHaveBeenCalled()
+    expect(outcome, 'an unparseable answer must not abort the connection').not.toBeInstanceOf(Error)
+    expect(warnings().some((message) => message.includes('NATIVE-DEPS-PROBE-UNPARSEABLE'))).toBe(
+      true
+    )
+  })
+
+  it('carries the probe stderr into the unparseable-answer warning', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    vi.mocked(execCommand)
+      .mockResolvedValueOnce('__ORCA_REMOTE_PLATFORM__ Linux x86_64')
+      .mockResolvedValueOnce('/home/u')
+      .mockImplementationOnce((_conn, _command, options) => {
+        options?.onStderr?.('node: --inspect-brk is not allowed in NODE_OPTIONS')
+        return Promise.resolve('MISSING')
+      })
+    feed(['', 'DEAD', '', 'READY'])
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+
+    // Why: `2>/dev/null` used to drop the one line that says which host config broke node.
+    expect(
+      warnings().find((message) => message.includes('NATIVE-DEPS-PROBE-UNPARSEABLE'))
+    ).toContain('not allowed in NODE_OPTIONS')
+  })
+
+  it('still resets both deps when the probe names both', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    feed([
+      '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
+      '/home/u',
+      BOTH_NATIVE_DEPS_MISSING_PROBE, // answered: both deps are genuinely broken
+      BOTH_NATIVE_DEPS_MISSING_PROBE, // re-probe under the repair lock
       '', // SFTP-namespace install-owner marker (repair)
       '', // npm install native deps
       '', // chmod prebuilds
@@ -181,6 +238,62 @@ describe('native-deps repair probe verdicts', () => {
     expect(vi.mocked(finalizeInstall)).toHaveBeenCalledTimes(1)
   })
 
+  it('leaves a Windows relay intact when its probe answers without naming a dep', async () => {
+    // The PowerShell branch has the same hole: `try { & node -e ... } catch { 'MISSING' }` prints
+    // nothing when node exits non-zero without reaching the script.
+    vi.mocked(parseUnameToRelayPlatform).mockReturnValueOnce('win32-x64')
+    vi.mocked(resolveRemoteNodePath).mockResolvedValueOnce('C:/Program Files/nodejs/node.exe')
+    const conn = makeMockConnection(sftpCapture)
+    feed([
+      '__ORCA_REMOTE_PLATFORM__ Windows AMD64',
+      'C:\\Users\\u',
+      '', // health probe: PowerShell swallowed the native failure, so nothing names a dep
+      '', // no persisted active pipe marker
+      'WAITING', // initial pipe probe
+      '', // publish the per-launch credential
+      '', // WMI relay launch
+      'READY', // readiness poll
+      '' // persist active pipe marker
+    ])
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+
+    const scripts = execCommands().map((command) => decodePowerShellCommand(command) ?? command)
+    expect(scripts.some((script) => script.includes('node_modules/node-pty'))).toBe(false)
+    expect(scripts.some((script) => script.includes('node_modules/@parcel/watcher'))).toBe(false)
+    expect(scripts.some((script) => script.includes('npm install'))).toBe(false)
+    expect(vi.mocked(finalizeInstall)).not.toHaveBeenCalled()
+    expect(warnings().some((message) => message.includes('NATIVE-DEPS-PROBE-UNPARSEABLE'))).toBe(
+      true
+    )
+  })
+
+  it('resets only the dep the probe names', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    const watcherMissing = 'ORCA-NATIVE-DEPS-MISSING:@parcel/watcher\nMISSING'
+    feed([
+      '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
+      '/home/u',
+      watcherMissing,
+      watcherMissing, // re-probe under the repair lock
+      '', // SFTP-namespace install-owner marker (repair)
+      '', // npm install native deps
+      '', // chmod prebuilds
+      'ORCA-NPTY-PROBE-OK\n',
+      '', // rm probe stderr
+      'DEAD',
+      '', // publish the per-launch credential
+      'READY'
+    ])
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+
+    const install = execCommands().find((command) => command.includes('npm install')) ?? ''
+    expect(install).toContain(WATCHER_RESET)
+    expect(install).not.toContain(NODE_PTY_RESET)
+    expect(vi.mocked(finalizeInstall)).toHaveBeenCalledTimes(1)
+  })
+
   it('skips repair entirely when the probe answers OK', async () => {
     const conn = makeMockConnection(sftpCapture)
     feed([
diff --git a/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts b/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
index 3809af2c3d9..49abdcd6888 100644
--- a/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
+++ b/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
@@ -91,6 +91,7 @@ import {
   isRelayAlreadyInstalled
 } from './ssh-relay-versioned-install'
 import { tryAcquireRelayRepairLock } from './ssh-relay-repair-lock'
+import { BOTH_NATIVE_DEPS_MISSING_PROBE } from './ssh-relay-native-deps-install-fixture'
 import type { SshConnection } from './ssh-connection'
 import type { SftpNamespacePathMapping } from './sftp-namespace-resolution'
 
@@ -281,8 +282,8 @@ const POSIX_SYSTEM_SSH_FIRST_INSTALL = [
 const POSIX_REPAIR = [
   '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
   SHELL_HOME,
-  'MISSING', // probe before the repair lock
-  'MISSING', // re-probe under the lock
+  BOTH_NATIVE_DEPS_MISSING_PROBE, // probe before the repair lock: the marker names both deps
+  BOTH_NATIVE_DEPS_MISSING_PROBE, // re-probe under the lock
   '', // install-owner marker
   '', // npm install native deps
   '', // chmod prebuilds
@@ -692,8 +693,8 @@ describe('relay repair writes on a split SFTP namespace', () => {
     feed([
       '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
       SHELL_HOME,
-      'MISSING',
-      'MISSING',
+      BOTH_NATIVE_DEPS_MISSING_PROBE,
+      BOTH_NATIVE_DEPS_MISSING_PROBE,
       '', // npm install native deps
       '', // chmod prebuilds
       'ORCA-NPTY-PROBE-OK\n',
@@ -716,7 +717,12 @@ describe('relay repair writes on a split SFTP namespace', () => {
 
   it('degrades to shell paths when marker creation fails outright', async () => {
     const conn = makeConnection(capture)
-    feed(['__ORCA_REMOTE_PLATFORM__ Linux x86_64', SHELL_HOME, 'MISSING', 'MISSING'])
+    feed([
+      '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
+      SHELL_HOME,
+      BOTH_NATIVE_DEPS_MISSING_PROBE,
+      BOTH_NATIVE_DEPS_MISSING_PROBE
+    ])
     vi.mocked(execCommand).mockRejectedValueOnce(new Error('read-only file system'))
     feed([
       '', // npm install native deps
@@ -742,7 +748,12 @@ describe('relay repair writes on a split SFTP namespace', () => {
 
   it('keeps the repair lock when marker creation has unconfirmed termination', async () => {
     const conn = makeConnection(capture)
-    feed(['__ORCA_REMOTE_PLATFORM__ Linux x86_64', SHELL_HOME, 'MISSING', 'MISSING'])
+    feed([
+      '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
+      SHELL_HOME,
+      BOTH_NATIVE_DEPS_MISSING_PROBE,
+      BOTH_NATIVE_DEPS_MISSING_PROBE
+    ])
     vi.mocked(execCommand).mockRejectedValueOnce(
       Object.assign(new Error('marker teardown unconfirmed'), { sshChannelCloseConfirmed: false })
     )

From f9db653e142f0421c41f6cf5269692c3fe311bb1 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:47:29 -0700
Subject: [PATCH 17/92] perf(worktrees): gate worktree metadata hygiene on
 evidence, not on every listing (#18034)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* perf(worktrees): gate worktree metadata hygiene on evidence, not on every listing

Dangling `worktreeMeta` pruning rode the detected-worktree listing, a polled read
path. Each pass captured a prune expectation over the repo's whole metadata table
(a JSON.stringify per row) and then stat'd every path-missing candidate. Both are
O(all rows), and most rows are refused anyway — pinned by a persisted session, or
structurally unremovable on this host — so the work repeated forever without
converging, pinning the main process in fs completion callbacks (#17775).

Three changes, no behavior lost:

- Probe only rows a delete could still accept. Session ownership and structural
  removability are pure functions of persisted state, so deciding them before the
  filesystem inverts the cheap and expensive halves. The filter is advisory; the
  authoritative checks are unchanged, so it can only shrink the stat fan-out.
- Extract `isLocallyRemovableWorktreeMetadataRow` so probe-avoidance and the
  delete share one definition of removability.
- Gate the metadata + lineage prune on evidence instead of the listing: a worktree
  lifecycle event, a mutation that can make a row more removable (session-owner
  release, metadata removal, SSH lease release, automation run finishing or
  deletion, repo deregistration), or a git listing that differs from the one the
  last pass ran against. With none of those the pass is a provable repeat and is
  skipped, so a quiescent app does no hygiene work at all.

The gate deliberately ignores metadata writes that only add or update a claim:
the listing path itself stamps metadata, so re-arming on those would restore the
storm. A missed signal leaves a row in place until the next one; nothing is
deleted that would not have been deleted anyway.

* refactor(worktrees): fold repo prune-gate teardown behind one call

Merging both import blocks during the rebase pushed the file past the
300-line budget. The two calls are one intention -- retire this repo's
gate state on a full removal, and re-arm the shared inputs either way --
so name that in the module that owns the gate.
---
 ...itative-local-worktree-metadata-pruning.ts |   7 +-
 .../listing/detected-provider-listing.ts      |   5 +-
 .../listing/detected-worktree-scan-cache.ts   |  55 ++++--
 ...etected-worktree-scan-hygiene-gate.test.ts | 163 ++++++++++++++++++
 .../register-worktree-catalog-handlers.ts     |  10 +-
 ...local-worktree-metadata-prune-gate.test.ts |  88 ++++++++++
 .../local-worktree-metadata-prune-gate.ts     | 103 +++++++++++
 .../ssh-pty-lease-operations.ts               |   5 +
 .../metadata-lineage-operations.ts            |  14 ++
 .../repo-lifecycle-operations.ts              |   4 +
 .../loading-store/session-host-partitions.ts  |   4 +
 .../store-prune-gate-signals.test.ts          | 105 +++++++++++
 .../automation-definition-operations.ts       |   3 +
 .../automation-run-operations.ts              |   6 +
 ...ocal-worktree-metadata-scan-expectation.ts |  53 ++++--
 ...missing-local-worktree-metadata-pruning.ts |  37 ++++
 ...local-worktree-metadata-candidates.test.ts | 118 +++++++++++++
 17 files changed, 747 insertions(+), 33 deletions(-)
 create mode 100644 src/main/ipc/worktrees/listing/detected-worktree-scan-hygiene-gate.test.ts
 create mode 100644 src/main/local-worktree-metadata-prune-gate.test.ts
 create mode 100644 src/main/local-worktree-metadata-prune-gate.ts
 create mode 100644 src/main/persistence/loading-store/store-prune-gate-signals.test.ts
 create mode 100644 src/main/persistence/tracking-repos/probeable-local-worktree-metadata-candidates.test.ts

diff --git a/src/main/ipc/worktrees/listing/authoritative-local-worktree-metadata-pruning.ts b/src/main/ipc/worktrees/listing/authoritative-local-worktree-metadata-pruning.ts
index c5ceb1acafb..ca5c3019844 100644
--- a/src/main/ipc/worktrees/listing/authoritative-local-worktree-metadata-pruning.ts
+++ b/src/main/ipc/worktrees/listing/authoritative-local-worktree-metadata-pruning.ts
@@ -85,7 +85,12 @@ export async function pruneMetadataMissingFromAuthoritativeLocalScan({
     worktreeRetentionPathComparisonKey(repo.path, platform),
     ...gitWorktrees.map((worktree) => worktreeRetentionPathComparisonKey(worktree.path, platform))
   ])
-  const probeCandidates = scan.metadata.flatMap((metadata) => {
+  // Why: only rows a delete could still accept are worth a filesystem probe. This is advisory —
+  // `pruneSessionlessMissingLocalWorktreeMetadataForRepo` re-checks authoritatively — so it can only
+  // ever shrink the `stat` fan-out, never widen what gets removed (#17775).
+  const removableCandidates =
+    store.selectProbeableLocalWorktreeMetadataCandidates?.(scan) ?? scan.metadata
+  const probeCandidates = removableCandidates.flatMap((metadata) => {
     const { worktreeId } = metadata
     const parsed = splitWorktreeId(worktreeId)
     const nativeAbsolute = parsed
diff --git a/src/main/ipc/worktrees/listing/detected-provider-listing.ts b/src/main/ipc/worktrees/listing/detected-provider-listing.ts
index 45ccd4183bb..51a0618ba66 100644
--- a/src/main/ipc/worktrees/listing/detected-provider-listing.ts
+++ b/src/main/ipc/worktrees/listing/detected-provider-listing.ts
@@ -51,6 +51,7 @@ export async function listDetectedWorktreesForCapturedRepo(
     let freshScan = true
     let sideEffectToken: DetectedWorktreeSideEffectToken | undefined
     let metadataPrune: DetectedWorktreeMetadataPrune | undefined
+    let hygieneDue: boolean | undefined
     if (isFolderRepo(repo)) {
       if (!isCurrent()) {
         return null
@@ -102,6 +103,7 @@ export async function listDetectedWorktreesForCapturedRepo(
       freshScan = scan.fresh
       sideEffectToken = scan.sideEffectToken
       metadataPrune = scan.metadataPrune
+      hygieneDue = scan.hygieneDue
     }
     const aborted = abortedResult()
     if (aborted) {
@@ -123,7 +125,8 @@ export async function listDetectedWorktreesForCapturedRepo(
       await applyFreshDetectedWorktreeScanSideEffects(store, repo, gitWorktrees, metadataPrune, {
         isCurrent: () => isCurrent() && !providerAbort?.signal.aborted,
         sideEffectToken,
-        signal: providerAbort?.signal
+        signal: providerAbort?.signal,
+        ...(hygieneDue === undefined ? {} : { hygieneDue })
       })
       const aborted = abortedResult()
       if (aborted) {
diff --git a/src/main/ipc/worktrees/listing/detected-worktree-scan-cache.ts b/src/main/ipc/worktrees/listing/detected-worktree-scan-cache.ts
index fea200f1a8b..b694bfbf11d 100644
--- a/src/main/ipc/worktrees/listing/detected-worktree-scan-cache.ts
+++ b/src/main/ipc/worktrees/listing/detected-worktree-scan-cache.ts
@@ -16,6 +16,13 @@ import {
   resetLocalWorktreeScanGenerationsForTests
 } from '../../../local-worktree-scan-generation'
 import { pruneLineageForMissingRepoWorktrees } from '../../../worktree-lineage-pruning'
+import {
+  __resetLocalWorktreeMetadataPruneGateForTests,
+  isLocalWorktreeMetadataPruneDue,
+  markLocalWorktreeMetadataPruneStarted,
+  recordLocalWorktreeListingForPruneGate,
+  requireLocalWorktreeMetadataPrune
+} from '../../../local-worktree-metadata-prune-gate'
 import { pruneMetadataMissingFromAuthoritativeLocalScan } from './authoritative-local-worktree-metadata-pruning'
 
 // Why: absorb renderer polling bursts while bounding external worktree-change lag to one short refresh window.
@@ -30,6 +37,7 @@ export type DetectedWorktreeScan = {
   invalidated: boolean
   promise: Promise<GitWorktreeInfo[]>
   sideEffectToken: DetectedWorktreeSideEffectToken
+  hygieneDue: boolean
   metadataPrune?: DetectedWorktreeMetadataPrune
 }
 
@@ -46,6 +54,8 @@ export type DetectedWorktreeScanResult = {
   gitWorktrees: GitWorktreeInfo[]
   fresh: boolean
   sideEffectToken?: DetectedWorktreeSideEffectToken
+  /** Whether this scan owns the repo's next store-hygiene pass; absent means "not from a local scan". */
+  hygieneDue?: boolean
   metadataPrune?: DetectedWorktreeMetadataPrune
 }
 
@@ -54,6 +64,7 @@ export const detectedWorktreeScanInFlight = new Map<string, DetectedWorktreeScan
 
 export function invalidateDetectedWorktreeScanCache(repoId: string): void {
   bumpLocalWorktreeScanGeneration(repoId)
+  requireLocalWorktreeMetadataPrune(repoId)
   const keyPrefix = `${repoId}\0`
   for (const key of new Set([
     ...detectedWorktreeScanCache.keys(),
@@ -80,6 +91,7 @@ export function __resetDetectedWorktreeScanCacheForTests(): void {
   detectedWorktreeScanCache.clear()
   detectedWorktreeScanInFlight.clear()
   resetLocalWorktreeScanGenerationsForTests()
+  __resetLocalWorktreeMetadataPruneGateForTests()
 }
 
 export function __getDetectedWorktreeScanCacheStatsForTests(): {
@@ -120,13 +132,21 @@ export async function listDetectedGitWorktrees(
   // those aliases equivalent, so only native-host scans carry destructive expectations.
   const generation = getLocalWorktreeScanGeneration(repo.id)
   const authorizedRootsRevision = getRegisteredWorktreeRootsRevision(repo.id)
-  const metadataPruneExpectation = localWorktreeGitOptions.wslDistro
-    ? undefined
-    : store.captureNativeLocalWorktreeMetadataScanExpectation(repo)
+  // Why: capturing the expectation walks the repo's whole metadata table and the prune that follows
+  // stats every path-missing row, so both run only against evidence that the answer changed (#17775).
+  const hygieneDue = isLocalWorktreeMetadataPruneDue(repo.id)
+  if (hygieneDue) {
+    markLocalWorktreeMetadataPruneStarted(repo.id)
+  }
+  const metadataPruneExpectation =
+    hygieneDue && !localWorktreeGitOptions.wslDistro
+      ? store.captureNativeLocalWorktreeMetadataScanExpectation(repo)
+      : undefined
   const scan: DetectedWorktreeScan = {
     invalidated: false,
     promise: listRepoWorktrees(repo, localWorktreeGitOptions),
     sideEffectToken: { generation, authorizedRootsRevision },
+    hygieneDue,
     ...(metadataPruneExpectation
       ? {
           metadataPrune: {
@@ -138,6 +158,12 @@ export async function listDetectedGitWorktrees(
   detectedWorktreeScanInFlight.set(cacheKey, scan)
   try {
     const gitWorktrees = await scan.promise
+    // Why: the backstop signal. A listing that no longer matches the one the last pass ran against
+    // invalidates its conclusions even when no event reported the change.
+    recordLocalWorktreeListingForPruneGate(
+      repo.id,
+      gitWorktrees.map((worktree) => worktree.path)
+    )
     const routingUnchanged =
       getDetectedWorktreeScanCacheKey(repo.id, getLocalProjectWorktreeGitOptions(store, repo)) ===
       cacheKey
@@ -153,7 +179,7 @@ export async function listDetectedGitWorktrees(
     return {
       gitWorktrees,
       fresh,
-      ...(fresh ? { sideEffectToken: scan.sideEffectToken } : {}),
+      ...(fresh ? { sideEffectToken: scan.sideEffectToken, hygieneDue: scan.hygieneDue } : {}),
       ...(fresh && scan.metadataPrune ? { metadataPrune: scan.metadataPrune } : {})
     }
   } finally {
@@ -172,9 +198,11 @@ export async function applyFreshDetectedWorktreeScanSideEffects(
     isCurrent?: () => boolean
     sideEffectToken?: DetectedWorktreeSideEffectToken
     signal?: AbortSignal
+    /** Undefined means the caller owns no cadence (non-local providers); it keeps the eager behavior. */
+    hygieneDue?: boolean
   } = {}
 ): Promise<boolean> {
-  const { isCurrent = () => true, sideEffectToken, signal } = options
+  const { isCurrent = () => true, sideEffectToken, signal, hygieneDue = true } = options
   const generationCurrent = () =>
     sideEffectToken === undefined ||
     isLocalWorktreeScanGenerationCurrent(repo.id, sideEffectToken.generation)
@@ -211,12 +239,17 @@ export async function applyFreshDetectedWorktreeScanSideEffects(
     return false
   }
   rememberLocalWorktreeRoots(store, repo, gitWorktrees)
-  pruneLineageForMissingRepoWorktrees(
-    store,
-    repo,
-    gitWorktrees,
-    preservedMetadataCandidateIds ? { preservedMetadataCandidateIds } : undefined
-  )
+  // Why: lineage retention is decided against the metadata rows the prune preserved, so running it
+  // without that pass would drop lineage for rows the pass would have kept. Both halves share the
+  // hygiene cadence instead.
+  if (hygieneDue) {
+    pruneLineageForMissingRepoWorktrees(
+      store,
+      repo,
+      gitWorktrees,
+      preservedMetadataCandidateIds ? { preservedMetadataCandidateIds } : undefined
+    )
+  }
   return true
 }
 
diff --git a/src/main/ipc/worktrees/listing/detected-worktree-scan-hygiene-gate.test.ts b/src/main/ipc/worktrees/listing/detected-worktree-scan-hygiene-gate.test.ts
new file mode 100644
index 00000000000..cb8c48833ef
--- /dev/null
+++ b/src/main/ipc/worktrees/listing/detected-worktree-scan-hygiene-gate.test.ts
@@ -0,0 +1,163 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { Repo } from '../../../../shared/repo-types'
+import type { GitWorktreeInfo } from '../../../../shared/worktree/types'
+
+const { listRepoWorktreesMock, pruneLineageMock, pruneMetadataMock, registerWorktreeRootsMock } =
+  vi.hoisted(() => ({
+    listRepoWorktreesMock: vi.fn(),
+    pruneLineageMock: vi.fn(),
+    pruneMetadataMock: vi.fn(),
+    registerWorktreeRootsMock: vi.fn()
+  }))
+
+vi.mock('../../../repo-worktrees', () => ({ listRepoWorktrees: listRepoWorktreesMock }))
+vi.mock('../../../project-runtime-git-options', () => ({
+  getLocalProjectWorktreeGitOptions: () => ({})
+}))
+vi.mock('../../registered-worktree-roots-cache', () => ({
+  getRegisteredWorktreeRootsRevision: () => 1,
+  registerWorktreeRootsForRepo: registerWorktreeRootsMock
+}))
+vi.mock('../../../worktree-lineage-pruning', () => ({
+  pruneLineageForMissingRepoWorktrees: pruneLineageMock
+}))
+vi.mock('./authoritative-local-worktree-metadata-pruning', () => ({
+  pruneMetadataMissingFromAuthoritativeLocalScan: pruneMetadataMock
+}))
+
+const {
+  DETECTED_WORKTREE_SCAN_CACHE_TTL_MS,
+  __resetDetectedWorktreeScanCacheForTests,
+  applyFreshDetectedWorktreeScanSideEffects,
+  invalidateDetectedWorktreeScanCache,
+  listDetectedGitWorktrees
+} = await import('./detected-worktree-scan-cache')
+const { invalidateLocalWorktreeMetadataPruneInputs } =
+  await import('../../../local-worktree-metadata-prune-gate')
+
+const repo = { id: 'repo-1', path: '/repos/one', displayName: 'one' } as Repo
+
+function worktreeAt(path: string): GitWorktreeInfo {
+  return { path, head: 'abc', branch: 'main', isBare: false, isMainWorktree: path === repo.path }
+}
+
+const captureExpectation = vi.fn(() => ({ repo: { id: repo.id }, metadata: [] }))
+const store = { captureNativeLocalWorktreeMetadataScanExpectation: captureExpectation } as never
+
+/** Each listing must miss the TTL cache, the way a renderer poll past the window does. */
+function advancePastListingTtl(): void {
+  vi.setSystemTime(Date.now() + DETECTED_WORKTREE_SCAN_CACHE_TTL_MS + 1)
+}
+
+describe('detected worktree scan hygiene gate', () => {
+  beforeEach(() => {
+    vi.useFakeTimers()
+    vi.setSystemTime(1_000_000)
+    listRepoWorktreesMock.mockReset().mockResolvedValue([worktreeAt(repo.path)])
+    captureExpectation.mockClear()
+    pruneLineageMock.mockReset()
+    pruneMetadataMock
+      .mockReset()
+      .mockResolvedValue({ scanGenerationCurrent: true, preservedMetadataCandidateIds: new Set() })
+    registerWorktreeRootsMock.mockReset()
+    __resetDetectedWorktreeScanCacheForTests()
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+  })
+
+  it('runs hygiene once and then never again while nothing changes', async () => {
+    const first = await listDetectedGitWorktrees(store, repo)
+    expect(first.hygieneDue).toBe(true)
+    expect(first.metadataPrune).toBeDefined()
+
+    for (let poll = 0; poll < 20; poll += 1) {
+      advancePastListingTtl()
+      const scan = await listDetectedGitWorktrees(store, repo)
+      expect(scan.fresh).toBe(true)
+      expect(scan.hygieneDue).toBe(false)
+      expect(scan.metadataPrune).toBeUndefined()
+    }
+    expect(captureExpectation).toHaveBeenCalledTimes(1)
+  })
+
+  it('still lists on every cache miss while hygiene is parked', async () => {
+    await listDetectedGitWorktrees(store, repo)
+    advancePastListingTtl()
+    await listDetectedGitWorktrees(store, repo)
+
+    expect(listRepoWorktreesMock).toHaveBeenCalledTimes(2)
+  })
+
+  it('re-runs hygiene after a worktree lifecycle event', async () => {
+    await listDetectedGitWorktrees(store, repo)
+    invalidateDetectedWorktreeScanCache(repo.id)
+
+    expect((await listDetectedGitWorktrees(store, repo)).hygieneDue).toBe(true)
+    expect(captureExpectation).toHaveBeenCalledTimes(2)
+  })
+
+  it('re-runs hygiene when ownership state may have released a row', async () => {
+    await listDetectedGitWorktrees(store, repo)
+    advancePastListingTtl()
+    expect((await listDetectedGitWorktrees(store, repo)).hygieneDue).toBe(false)
+
+    invalidateLocalWorktreeMetadataPruneInputs()
+
+    advancePastListingTtl()
+    expect((await listDetectedGitWorktrees(store, repo)).hygieneDue).toBe(true)
+    expect(captureExpectation).toHaveBeenCalledTimes(2)
+  })
+
+  it('re-runs hygiene when the listing changes with no event to report it', async () => {
+    await listDetectedGitWorktrees(store, repo)
+    advancePastListingTtl()
+    expect((await listDetectedGitWorktrees(store, repo)).hygieneDue).toBe(false)
+
+    // An external `git worktree remove` nobody notified us about.
+    listRepoWorktreesMock.mockResolvedValue([worktreeAt(repo.path), worktreeAt('/repos/one-wt')])
+    advancePastListingTtl()
+    await listDetectedGitWorktrees(store, repo)
+
+    advancePastListingTtl()
+    expect((await listDetectedGitWorktrees(store, repo)).hygieneDue).toBe(true)
+  })
+
+  it('skips both prune halves on a scan that does not own the hygiene pass', async () => {
+    await applyFreshDetectedWorktreeScanSideEffects(
+      store,
+      repo,
+      [worktreeAt(repo.path)],
+      undefined,
+      {
+        hygieneDue: false
+      }
+    )
+
+    expect(pruneMetadataMock).not.toHaveBeenCalled()
+    expect(pruneLineageMock).not.toHaveBeenCalled()
+    // Authorized roots are listing state, not hygiene; they must still be refreshed.
+    expect(registerWorktreeRootsMock).toHaveBeenCalledTimes(1)
+  })
+
+  it('prunes lineage when the caller owns the hygiene pass', async () => {
+    await applyFreshDetectedWorktreeScanSideEffects(
+      store,
+      repo,
+      [worktreeAt(repo.path)],
+      undefined,
+      {
+        hygieneDue: true
+      }
+    )
+
+    expect(pruneLineageMock).toHaveBeenCalledTimes(1)
+  })
+
+  it('keeps the eager behavior for callers that carry no gate', async () => {
+    await applyFreshDetectedWorktreeScanSideEffects(store, repo, [worktreeAt(repo.path)])
+
+    expect(pruneLineageMock).toHaveBeenCalledTimes(1)
+  })
+})
diff --git a/src/main/ipc/worktrees/listing/register-worktree-catalog-handlers.ts b/src/main/ipc/worktrees/listing/register-worktree-catalog-handlers.ts
index 4a882ff24b7..d684461a381 100644
--- a/src/main/ipc/worktrees/listing/register-worktree-catalog-handlers.ts
+++ b/src/main/ipc/worktrees/listing/register-worktree-catalog-handlers.ts
@@ -91,6 +91,7 @@ export function registerWorktreeCatalogHandlers(context: WorktreeIpcContext): vo
         let freshScan = true
         let sideEffectToken: DetectedWorktreeSideEffectToken | undefined
         let metadataPrune: DetectedWorktreeMetadataPrune | undefined
+        let hygieneDue: boolean | undefined
         if (isFolderRepo(repo)) {
           return listVisibleFolderWorkspaces(store, repo)
         } else if (repo.connectionId) {
@@ -121,6 +122,7 @@ export function registerWorktreeCatalogHandlers(context: WorktreeIpcContext): vo
           freshScan = scan.fresh
           sideEffectToken = scan.sideEffectToken
           metadataPrune = scan.metadataPrune
+          hygieneDue = scan.hygieneDue
         }
         if (freshScan) {
           await applyFreshDetectedWorktreeScanSideEffects(
@@ -129,7 +131,8 @@ export function registerWorktreeCatalogHandlers(context: WorktreeIpcContext): vo
             gitWorktrees,
             metadataPrune,
             {
-              sideEffectToken
+              sideEffectToken,
+              ...(hygieneDue === undefined ? {} : { hygieneDue })
             }
           )
         }
@@ -183,6 +186,7 @@ export function registerWorktreeCatalogHandlers(context: WorktreeIpcContext): vo
       let freshScan = true
       let sideEffectToken: DetectedWorktreeSideEffectToken | undefined
       let metadataPrune: DetectedWorktreeMetadataPrune | undefined
+      let hygieneDue: boolean | undefined
       if (isFolderRepo(repo)) {
         return listVisibleFolderWorkspaces(store, repo)
       } else if (repo.connectionId) {
@@ -213,10 +217,12 @@ export function registerWorktreeCatalogHandlers(context: WorktreeIpcContext): vo
         freshScan = scan.fresh
         sideEffectToken = scan.sideEffectToken
         metadataPrune = scan.metadataPrune
+        hygieneDue = scan.hygieneDue
       }
       if (freshScan) {
         await applyFreshDetectedWorktreeScanSideEffects(store, repo, gitWorktrees, metadataPrune, {
-          sideEffectToken
+          sideEffectToken,
+          ...(hygieneDue === undefined ? {} : { hygieneDue })
         })
       }
       loggedWorktreeListFailures.delete(`${repo.id}:${repo.path}`)
diff --git a/src/main/local-worktree-metadata-prune-gate.test.ts b/src/main/local-worktree-metadata-prune-gate.test.ts
new file mode 100644
index 00000000000..9ae5d3b9f8a
--- /dev/null
+++ b/src/main/local-worktree-metadata-prune-gate.test.ts
@@ -0,0 +1,88 @@
+import { beforeEach, describe, expect, it } from 'vitest'
+import {
+  __resetLocalWorktreeMetadataPruneGateForTests,
+  forgetLocalWorktreeMetadataPruneGate,
+  invalidateLocalWorktreeMetadataPruneInputs,
+  isLocalWorktreeMetadataPruneDue,
+  markLocalWorktreeMetadataPruneStarted,
+  recordLocalWorktreeListingForPruneGate,
+  requireLocalWorktreeMetadataPrune
+} from './local-worktree-metadata-prune-gate'
+
+describe('local worktree metadata prune gate', () => {
+  beforeEach(() => {
+    __resetLocalWorktreeMetadataPruneGateForTests()
+  })
+
+  it('is due for a repo it has never seen', () => {
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(true)
+  })
+
+  it('stays undue indefinitely once a pass ran and nothing changed', () => {
+    markLocalWorktreeMetadataPruneStarted('repo-1')
+
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(false)
+    recordLocalWorktreeListingForPruneGate('repo-1', ['/a', '/b'])
+    recordLocalWorktreeListingForPruneGate('repo-1', ['/b', '/a'])
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(false)
+  })
+
+  it('re-arms one repo on its own worktree lifecycle event', () => {
+    markLocalWorktreeMetadataPruneStarted('repo-1')
+    markLocalWorktreeMetadataPruneStarted('repo-2')
+
+    requireLocalWorktreeMetadataPrune('repo-1')
+
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(true)
+    expect(isLocalWorktreeMetadataPruneDue('repo-2')).toBe(false)
+  })
+
+  it('re-arms every repo when ownership state may have released a row', () => {
+    markLocalWorktreeMetadataPruneStarted('repo-1')
+    markLocalWorktreeMetadataPruneStarted('repo-2')
+
+    invalidateLocalWorktreeMetadataPruneInputs()
+
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(true)
+    expect(isLocalWorktreeMetadataPruneDue('repo-2')).toBe(true)
+  })
+
+  it('runs each repo once per invalidation, not once per scan', () => {
+    invalidateLocalWorktreeMetadataPruneInputs()
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(true)
+    markLocalWorktreeMetadataPruneStarted('repo-1')
+
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(false)
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(false)
+  })
+
+  it('does not re-arm on the first listing it observes', () => {
+    markLocalWorktreeMetadataPruneStarted('repo-1')
+
+    recordLocalWorktreeListingForPruneGate('repo-1', ['/a'])
+
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(false)
+  })
+
+  it('re-arms when a later listing differs from the one the last pass ran against', () => {
+    recordLocalWorktreeListingForPruneGate('repo-1', ['/a', '/b'])
+    markLocalWorktreeMetadataPruneStarted('repo-1')
+
+    recordLocalWorktreeListingForPruneGate('repo-1', ['/a'])
+
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(true)
+  })
+
+  it('drops gate state for a deregistered repo', () => {
+    recordLocalWorktreeListingForPruneGate('repo-1', ['/a'])
+    markLocalWorktreeMetadataPruneStarted('repo-1')
+
+    forgetLocalWorktreeMetadataPruneGate('repo-1')
+
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(true)
+    // The forgotten fingerprint must not later read as a change against a stale entry.
+    recordLocalWorktreeListingForPruneGate('repo-1', ['/a'])
+    markLocalWorktreeMetadataPruneStarted('repo-1')
+    expect(isLocalWorktreeMetadataPruneDue('repo-1')).toBe(false)
+  })
+})
diff --git a/src/main/local-worktree-metadata-prune-gate.ts b/src/main/local-worktree-metadata-prune-gate.ts
new file mode 100644
index 00000000000..0daa8a41b9f
--- /dev/null
+++ b/src/main/local-worktree-metadata-prune-gate.ts
@@ -0,0 +1,103 @@
+/**
+ * Decides whether a detected-worktree scan owes the store a metadata-hygiene pass.
+ *
+ * The pass captures a prune expectation over the repo's whole metadata table, `stat`s every
+ * path-missing candidate, then prunes metadata and lineage. That is O(all rows) and destructive, so
+ * it must not ride a polled read path: on a store whose dangling rows outnumber live worktrees
+ * ~100:1 it re-derives an answer it already has, forever, pinning the main process in filesystem
+ * completion callbacks (#17775). Rows pinned by a persisted session are never removable, so the
+ * repetition cannot even make progress.
+ *
+ * Nothing the pass reads changes on its own, so it is gated on evidence rather than a clock:
+ *  - a worktree lifecycle event for the repo (the existing worktree-change invalidator hub),
+ *  - a mutation that can make some row *more* removable (see `invalidate…PruneInputs`),
+ *  - the repo's git listing differing from the one the last pass ran against.
+ * With none of those, the pass is a provable repeat and is skipped outright.
+ *
+ * Why only "more removable" mutations count: the listing path itself writes worktree metadata
+ * (discovery backfill, host-ownership stamping), so bumping on every metadata write would re-arm
+ * the gate from the very scan it gates and restore the storm. Additions and updates can only
+ * preserve more rows, so staleness there is harmless.
+ *
+ * The failure direction is deliberate. A signal we miss leaves a dangling row in place until the
+ * next one arrives — hygiene lags, and nothing is deleted that would not have been deleted anyway.
+ */
+
+/** Bumped by evidence that some row may have become removable; repos re-run the pass once each. */
+let pruneInputsGeneration = 0
+const observedGenerationByRepo = new Map<string, number>()
+const listingFingerprintByRepo = new Map<string, string>()
+
+/** True until the repo has run a pass against the current generation — so also on the first scan. */
+export function isLocalWorktreeMetadataPruneDue(repoId: string): boolean {
+  return observedGenerationByRepo.get(repoId) !== pruneInputsGeneration
+}
+
+/**
+ * Claim the pending pass. Recorded when the expectation is captured rather than when the prune
+ * finishes: a scan that is invalidated or fails mid-flight must not re-arm the full capture on the
+ * very next listing poll, and any real change re-bumps the generation anyway.
+ */
+export function markLocalWorktreeMetadataPruneStarted(repoId: string): void {
+  observedGenerationByRepo.set(repoId, pruneInputsGeneration)
+}
+
+/** One repo's worktrees changed (create/remove/rename). */
+export function requireLocalWorktreeMetadataPrune(repoId: string): void {
+  observedGenerationByRepo.delete(repoId)
+}
+
+/**
+ * Some metadata row may have become removable — a worktree-meta/identity/lineage row was deleted,
+ * or a session, lease, automation or selection released its claim on a workspace. Repo-agnostic
+ * because ownership is global state: a session release can unpin a row in any repo.
+ */
+export function invalidateLocalWorktreeMetadataPruneInputs(): void {
+  pruneInputsGeneration += 1
+}
+
+/**
+ * Backstop for changes no event reported: if Git now lists a different set of worktrees than the
+ * last pass ran against, that pass's conclusions no longer describe this repo. Costs one join over
+ * a list we already hold.
+ */
+export function recordLocalWorktreeListingForPruneGate(
+  repoId: string,
+  worktreePaths: readonly string[]
+): void {
+  const fingerprint = [...worktreePaths].sort().join('\0')
+  const previous = listingFingerprintByRepo.get(repoId)
+  if (previous === fingerprint) {
+    return
+  }
+  listingFingerprintByRepo.set(repoId, fingerprint)
+  // Why not on the first listing: a repo we have never scanned is already due by default, and the
+  // scan that produced this listing is the pass that covers it. Re-arming here would double it.
+  if (previous !== undefined) {
+    requireLocalWorktreeMetadataPrune(repoId)
+  }
+}
+
+/** A deregistered repo leaves no reason to retain its gate state. */
+export function forgetLocalWorktreeMetadataPruneGate(repoId: string): void {
+  observedGenerationByRepo.delete(repoId)
+  listingFingerprintByRepo.delete(repoId)
+}
+
+export function __resetLocalWorktreeMetadataPruneGateForTests(): void {
+  pruneInputsGeneration = 0
+  observedGenerationByRepo.clear()
+  listingFingerprintByRepo.clear()
+}
+
+/** Repo teardown: a full removal retires this repo's gate, and either shape can unpin rows in
+ *  other repos, so the shared inputs are always re-armed. */
+export function retireLocalWorktreeMetadataPruneStateForRepo(
+  repoId: string,
+  hostId: string | null
+): void {
+  if (hostId === null) {
+    forgetLocalWorktreeMetadataPruneGate(repoId)
+  }
+  invalidateLocalWorktreeMetadataPruneInputs()
+}
diff --git a/src/main/persistence/leasing-ssh-ptys/ssh-pty-lease-operations.ts b/src/main/persistence/leasing-ssh-ptys/ssh-pty-lease-operations.ts
index 2759797c442..4dbad3f5007 100644
--- a/src/main/persistence/leasing-ssh-ptys/ssh-pty-lease-operations.ts
+++ b/src/main/persistence/leasing-ssh-ptys/ssh-pty-lease-operations.ts
@@ -3,6 +3,7 @@ import type { PersistedState } from '../../../shared/persisted-state-types'
 import type { SshRemotePtyLease } from '../../../shared/ssh-types'
 import { isTerminalLeafId } from '../../../shared/stable-pane-id'
 import type { WorkspaceSessionState } from '../../../shared/workspace-session-state-types'
+import { invalidateLocalWorktreeMetadataPruneInputs } from '../../local-worktree-metadata-prune-gate'
 
 export type SshPtyLeaseOperations = {
   state: PersistedState
@@ -272,6 +273,8 @@ export function removeSshRemotePtyLease(
     (lease) => lease.targetId !== targetId || lease.ptyId !== relayPtyId
   )
   if (operations.state.sshRemotePtyLeases.length !== before) {
+    // Why: the lease may have been the last claim on a dangling metadata row (#17775).
+    invalidateLocalWorktreeMetadataPruneInputs()
     operations.flush()
   }
 }
@@ -287,6 +290,8 @@ export function removeSshRemotePtyLeases(
     (lease) => lease.targetId !== targetId
   )
   if (operations.state.sshRemotePtyLeases.length !== before) {
+    // Why: the leases may have been the last claim on dangling metadata rows (#17775).
+    invalidateLocalWorktreeMetadataPruneInputs()
     operations.flush()
   }
 }
diff --git a/src/main/persistence/loading-store/metadata-lineage-operations.ts b/src/main/persistence/loading-store/metadata-lineage-operations.ts
index 7d4867ce476..4b0a301fe26 100644
--- a/src/main/persistence/loading-store/metadata-lineage-operations.ts
+++ b/src/main/persistence/loading-store/metadata-lineage-operations.ts
@@ -13,6 +13,7 @@ import {
 import type { StoreRuntimeState } from './store-runtime-state'
 import type { WriteSchedulingOperations } from './write-scheduling'
 import type { SessionHostPartitionOperations } from './session-host-partitions'
+import { invalidateLocalWorktreeMetadataPruneInputs } from '../../local-worktree-metadata-prune-gate'
 import { scheduleSave } from './write-scheduling'
 import {
   hasPersistedWorkspaceSession,
@@ -32,6 +33,7 @@ import { mergeWorktreeMetaForWrite } from './worktree-meta-write-normalization'
 import {
   captureNativeLocalWorktreeMetadataScanExpectation as captureNativeLocalWorktreeMetadataScanExpectationOperation,
   pruneSessionlessMissingLocalWorktreeMetadataForRepo as pruneSessionlessMissingLocalWorktreeMetadataForRepoOperation,
+  selectProbeableLocalWorktreeMetadataCandidates as selectProbeableLocalWorktreeMetadataCandidatesOperation,
   type LocalWorktreeMetadataPruneExpectation,
   type NativeLocalWorktreeMetadataScanExpectation
 } from '../tracking-repos/missing-local-worktree-metadata-pruning'
@@ -197,9 +199,21 @@ export class MetadataLineageOperations {
         }
       )
     }
+    // Why: dropping a row can free the identity key that was vetoing an unrelated row's removal, so
+    // the metadata prune needs to look again — it is otherwise waiting on evidence (#17775).
+    invalidateLocalWorktreeMetadataPruneInputs()
     scheduleSave(this[metadataLineageOperationsContext].scheduling)
   }
 
+  selectProbeableLocalWorktreeMetadataCandidates(
+    scan: NativeLocalWorktreeMetadataScanExpectation
+  ): readonly LocalWorktreeMetadataPruneExpectation[] {
+    return selectProbeableLocalWorktreeMetadataCandidatesOperation(
+      this[metadataLineageOperationsContext].runtime.state,
+      scan
+    )
+  }
+
   pruneSessionlessMissingLocalWorktreeMetadataForRepo(
     scan: NativeLocalWorktreeMetadataScanExpectation,
     missingMetadata: readonly LocalWorktreeMetadataPruneExpectation[]
diff --git a/src/main/persistence/loading-store/repo-lifecycle-operations.ts b/src/main/persistence/loading-store/repo-lifecycle-operations.ts
index c7bdbd9de37..535108845e1 100644
--- a/src/main/persistence/loading-store/repo-lifecycle-operations.ts
+++ b/src/main/persistence/loading-store/repo-lifecycle-operations.ts
@@ -13,6 +13,7 @@ import { mergeProjectHostSetupCompatibilityState } from '../tracking-repos/proje
 import { RepoOrderPersistenceOperations } from '../tracking-repos/repo-order-operations'
 import { pruneWorktreeStateForRepo as pruneWorktreeStateForRepoOperation } from '../tracking-repos/repo-worktree-pruning'
 import { collectDeregisteredRepoIds } from '../tracking-repos/deregistered-repo-residue'
+import { retireLocalWorktreeMetadataPruneStateForRepo } from '../../local-worktree-metadata-prune-gate'
 import { hydrateRepo as hydrateRepoOperation } from '../tracking-repos/repo-hydration'
 import { RepoUpdatePersistenceOperations } from '../tracking-repos/repo-update-operations'
 import { ProjectHostSetupPersistenceOperations } from '../tracking-repos/project-host-setup-update'
@@ -221,6 +222,9 @@ export function pruneWorktreeStateForRepo(
     hostId,
     (matchesWorktreeId) => pruneMobileClientTabSelections(owner, matchesWorktreeId)
   )
+  // Why: this drops metadata, lineage, leases and session owners in bulk, which can unpin rows in
+  // other repos, and a full removal retires this repo's own gate state (#17775).
+  retireLocalWorktreeMetadataPruneStateForRepo(id, hostId)
 }
 
 export function pruneMobileClientTabSelections(
diff --git a/src/main/persistence/loading-store/session-host-partitions.ts b/src/main/persistence/loading-store/session-host-partitions.ts
index 43b12531a02..6a5743f60ea 100644
--- a/src/main/persistence/loading-store/session-host-partitions.ts
+++ b/src/main/persistence/loading-store/session-host-partitions.ts
@@ -13,6 +13,7 @@ import { getRepoIdFromWorktreeId } from '../../../shared/worktree/id'
 import { readTerminalScrollbackSnapshotSync } from '../../terminal-scrollback-snapshots'
 import { preserveRuntimeAuthoredWorkspaceSessionFields } from '../runtime-authored-workspace-session-fields'
 import { findWorktreeIdForTab } from '../restoring-sessions/pane-identity-migration'
+import { invalidateLocalWorktreeMetadataPruneInputs } from '../../local-worktree-metadata-prune-gate'
 import {
   removeWorkspaceSessionOwner,
   workspaceSessionPartitionIdsForHost
@@ -132,6 +133,9 @@ export function removeWorkspaceSessionOwnerInPartition(
   if (!session) {
     return
   }
+  // Why: a session was the last thing pinning some dangling metadata row; releasing it is the
+  // evidence the metadata prune waits for, and there is no other signal that it happened (#17775).
+  invalidateLocalWorktreeMetadataPruneInputs()
   if (resolved === LOCAL_EXECUTION_HOST_ID) {
     owner[sessionHostPartitionOperationsContext].runtime.state.workspaceSession = session
   } else {
diff --git a/src/main/persistence/loading-store/store-prune-gate-signals.test.ts b/src/main/persistence/loading-store/store-prune-gate-signals.test.ts
new file mode 100644
index 00000000000..9c9aa2eb176
--- /dev/null
+++ b/src/main/persistence/loading-store/store-prune-gate-signals.test.ts
@@ -0,0 +1,105 @@
+/**
+ * Drives the real `Store`, because the value of the prune gate is entirely in whether the shipping
+ * write paths signal it. A mutation that unwires the call site survives any test that pokes the gate
+ * module directly.
+ */
+import { mkdtempSync, realpathSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { WorkspaceSessionState } from '../../../shared/workspace-session-state-types'
+
+vi.mock('electron', () => ({
+  app: {
+    getPath: () => tmpdir(),
+    getName: () => 'orca-test',
+    getVersion: () => '0.0.0-test',
+    isPackaged: false,
+    on: () => {},
+    whenReady: () => Promise.resolve()
+  },
+  safeStorage: {
+    isEncryptionAvailable: () => false,
+    encryptString: (value: string) => Buffer.from(value),
+    decryptString: (value: Buffer) => value.toString()
+  },
+  ipcMain: { on: () => {}, handle: () => {} },
+  BrowserWindow: { getAllWindows: () => [] }
+}))
+
+const { Store } = await import('./store')
+const {
+  __resetLocalWorktreeMetadataPruneGateForTests,
+  isLocalWorktreeMetadataPruneDue,
+  markLocalWorktreeMetadataPruneStarted
+} = await import('../../local-worktree-metadata-prune-gate')
+
+const REPO_ID = 'repo-1'
+const WORKTREE_ID = `${REPO_ID}::/tmp/worktree-a`
+
+const stores: InstanceType<typeof Store>[] = []
+
+beforeEach(() => {
+  __resetLocalWorktreeMetadataPruneGateForTests()
+})
+
+afterEach(() => {
+  // Leaving a debounced save armed would write into a temp dir after the test file finishes.
+  for (const store of stores.splice(0)) {
+    store.flush()
+  }
+  vi.restoreAllMocks()
+})
+
+function createStore(): InstanceType<typeof Store> {
+  const dir = realpathSync(mkdtempSync(join(tmpdir(), 'orca-store-prune-gate-')))
+  const store = new Store({ dataFile: join(dir, 'orca-data.json') })
+  stores.push(store)
+  return store
+}
+
+/** Park the gate the way a completed hygiene pass does. */
+function parkGate(): void {
+  markLocalWorktreeMetadataPruneStarted(REPO_ID)
+  expect(isLocalWorktreeMetadataPruneDue(REPO_ID)).toBe(false)
+}
+
+describe('store signals to the worktree metadata prune gate', () => {
+  it('re-arms the gate when a session releases its claim on a worktree', () => {
+    const store = createStore()
+    store.setWorkspaceSession({
+      activeRepoId: REPO_ID,
+      activeWorktreeId: WORKTREE_ID,
+      activeTabId: 'tab-1',
+      tabsByWorktree: { [WORKTREE_ID]: [{ id: 'tab-1', worktreeId: WORKTREE_ID }] },
+      terminalLayoutsByTabId: {}
+    } as unknown as WorkspaceSessionState)
+    parkGate()
+
+    store.removeWorkspaceSessionStateForWorktree(WORKTREE_ID)
+
+    expect(isLocalWorktreeMetadataPruneDue(REPO_ID)).toBe(true)
+  })
+
+  it('re-arms the gate when a metadata row is removed', () => {
+    const store = createStore()
+    store.setWorktreeMeta(WORKTREE_ID, { displayName: 'a', hostId: 'local' })
+    parkGate()
+
+    store.removeWorktreeMeta(WORKTREE_ID)
+
+    expect(isLocalWorktreeMetadataPruneDue(REPO_ID)).toBe(true)
+  })
+
+  it('leaves the gate parked for writes that only add or update a claim', () => {
+    const store = createStore()
+    parkGate()
+
+    store.setWorktreeMeta(WORKTREE_ID, { displayName: 'a', hostId: 'local' })
+    store.setWorktreeMeta(WORKTREE_ID, { displayName: 'b', hostId: 'local' })
+
+    // Why this matters: the worktree listing itself stamps metadata on every scan, so a gate that
+    // re-armed on ordinary writes would restore the storm it exists to stop (#17775).
+    expect(isLocalWorktreeMetadataPruneDue(REPO_ID)).toBe(false)
+  })
+})
diff --git a/src/main/persistence/scheduling-automations/automation-definition-operations.ts b/src/main/persistence/scheduling-automations/automation-definition-operations.ts
index 93bb7de2cea..c25315e4986 100644
--- a/src/main/persistence/scheduling-automations/automation-definition-operations.ts
+++ b/src/main/persistence/scheduling-automations/automation-definition-operations.ts
@@ -1,4 +1,5 @@
 import { randomUUID } from 'node:crypto'
+import { invalidateLocalWorktreeMetadataPruneInputs } from '../../local-worktree-metadata-prune-gate'
 import type {
   Automation,
   AutomationCreateInput,
@@ -262,5 +263,7 @@ export function deleteAutomation(
   operations.state.automationRuns = (operations.state.automationRuns ?? []).filter(
     (entry) => entry.automationId !== id
   )
+  // Why: the automation and its unfinished runs were pinning their workspace; both are gone (#17775).
+  invalidateLocalWorktreeMetadataPruneInputs()
   operations.flush()
 }
diff --git a/src/main/persistence/scheduling-automations/automation-run-operations.ts b/src/main/persistence/scheduling-automations/automation-run-operations.ts
index 639fda7b836..73e3be63e8b 100644
--- a/src/main/persistence/scheduling-automations/automation-run-operations.ts
+++ b/src/main/persistence/scheduling-automations/automation-run-operations.ts
@@ -1,4 +1,6 @@
 import { randomUUID } from 'node:crypto'
+import { isFinalAutomationRunStatus } from '../../../shared/automations-types'
+import { invalidateLocalWorktreeMetadataPruneInputs } from '../../local-worktree-metadata-prune-gate'
 import type {
   Automation,
   AutomationDispatchResult,
@@ -182,6 +184,10 @@ export function updateAutomationRun(
   operations.state.automationRuns = operations.state.automationRuns.map((run) =>
     run.id === result.runId ? updated : run
   )
+  if (!isFinalAutomationRunStatus(current.status) && isFinalAutomationRunStatus(updated.status)) {
+    // Why: only a non-final run pins its workspace, so finishing releases the claim (#17775).
+    invalidateLocalWorktreeMetadataPruneInputs()
+  }
   touchAutomation(operations.state, updated.automationId, now)
   operations.flush()
   return updated
diff --git a/src/main/persistence/tracking-repos/local-worktree-metadata-scan-expectation.ts b/src/main/persistence/tracking-repos/local-worktree-metadata-scan-expectation.ts
index fca925d0986..a2da7e070a8 100644
--- a/src/main/persistence/tracking-repos/local-worktree-metadata-scan-expectation.ts
+++ b/src/main/persistence/tracking-repos/local-worktree-metadata-scan-expectation.ts
@@ -203,6 +203,39 @@ function aliasesStillMatch(
   })
 }
 
+/**
+ * Whether the local host is structurally allowed to drop this row, ignoring concurrent-change checks.
+ *
+ * Pure over persisted state — no filesystem, no expectation — so a caller can decide *before* paying
+ * for a `stat` whether a delete could ever accept the row. Several of these predicates reject the
+ * same row on every pass forever (a locator also known on a remote host keeps a second alias; a
+ * legacy row pinned to another host; identity rows that drifted or dangle), which is what turned the
+ * prune into an unbounded no-progress loop in #17775.
+ */
+export function isLocallyRemovableWorktreeMetadataRow(
+  state: PersistedState,
+  worktreeId: string,
+  currentAliases: readonly MetadataAliasEntry[]
+): boolean {
+  const localAlias = composeWorktreeHostIdentity(LOCAL_EXECUTION_HOST_ID, worktreeId)
+  if (currentAliases.some(([alias]) => alias !== localAlias)) {
+    return false
+  }
+  const legacy = state.worktreeMeta[worktreeId]
+  const identityKeys = state.worktreeIdentityAliases?.[localAlias]
+  if (identityKeys && identityKeys.length !== 1) {
+    return false
+  }
+  const canonical = identityKeys?.[0] ? state.worktreeMetaByIdentity?.[identityKeys[0]] : undefined
+  return !(
+    (legacy?.hostId && legacy.hostId !== LOCAL_EXECUTION_HOST_ID) ||
+    (canonical?.hostId && canonical.hostId !== LOCAL_EXECUTION_HOST_ID) ||
+    (identityKeys && !canonical) ||
+    (legacy && canonical && !isDeepStrictEqual(legacy, canonical)) ||
+    (!legacy && !canonical)
+  )
+}
+
 export function removeRevalidatedLocalWorktreeMetadata(
   state: PersistedState,
   expected: LocalWorktreeMetadataPruneExpectation,
@@ -211,29 +244,13 @@ export function removeRevalidatedLocalWorktreeMetadata(
 ): boolean {
   if (
     !rowStillMatches(state.worktreeMeta, expected.worktreeId, expected.expectedLegacy) ||
-    !aliasesStillMatch(state, expected, currentAliases)
+    !aliasesStillMatch(state, expected, currentAliases) ||
+    !isLocallyRemovableWorktreeMetadataRow(state, expected.worktreeId, currentAliases)
   ) {
     return false
   }
   const localAlias = composeWorktreeHostIdentity(LOCAL_EXECUTION_HOST_ID, expected.worktreeId)
-  if (currentAliases.some(([alias]) => alias !== localAlias)) {
-    return false
-  }
-  const legacy = state.worktreeMeta[expected.worktreeId]
   const identityKeys = state.worktreeIdentityAliases?.[localAlias]
-  if (identityKeys && identityKeys.length !== 1) {
-    return false
-  }
-  const canonical = identityKeys?.[0] ? state.worktreeMetaByIdentity?.[identityKeys[0]] : undefined
-  if (
-    (legacy?.hostId && legacy.hostId !== LOCAL_EXECUTION_HOST_ID) ||
-    (canonical?.hostId && canonical.hostId !== LOCAL_EXECUTION_HOST_ID) ||
-    (identityKeys && !canonical) ||
-    (legacy && canonical && !isDeepStrictEqual(legacy, canonical)) ||
-    (!legacy && !canonical)
-  ) {
-    return false
-  }
   if (identityKeys?.[0]) {
     removedIdentityKeys?.add(identityKeys[0])
   }
diff --git a/src/main/persistence/tracking-repos/missing-local-worktree-metadata-pruning.ts b/src/main/persistence/tracking-repos/missing-local-worktree-metadata-pruning.ts
index 3ab380bdd8e..0e03a560a17 100644
--- a/src/main/persistence/tracking-repos/missing-local-worktree-metadata-pruning.ts
+++ b/src/main/persistence/tracking-repos/missing-local-worktree-metadata-pruning.ts
@@ -13,6 +13,7 @@ import {
 } from '../restoring-sessions/session-worktree-ownership'
 import {
   indexMetadataAliasesForWorktreeIds,
+  isLocallyRemovableWorktreeMetadataRow,
   removeRevalidatedLocalWorktreeMetadata,
   type LocalWorktreeMetadataPruneExpectation,
   type NativeLocalWorktreeMetadataScanExpectation
@@ -108,6 +109,42 @@ function isValidCandidateId(
   )
 }
 
+/**
+ * The captured candidates a delete could still accept, decided without touching the disk.
+ *
+ * Why this exists: the caller `stat`s every candidate whose path Git no longer lists, then discovers
+ * here that most of them are refused anyway — pinned by a persisted session, or structurally
+ * unremovable on this host. Those verdicts are pure functions of persisted state, so paying for the
+ * filesystem first inverts the cheap and expensive halves of the decision. On a store with ~1.4k
+ * dangling rows that was the bulk of a permanent `stat` storm (#17775).
+ *
+ * Deliberately advisory: `pruneSessionlessMissingLocalWorktreeMetadataForRepo` re-checks everything
+ * authoritatively against the capture, so a disagreement here costs at most a wasted `stat` or a row
+ * lingering one more pass — it can never widen what gets deleted.
+ */
+export function selectProbeableLocalWorktreeMetadataCandidates(
+  state: PersistedState,
+  scan: NativeLocalWorktreeMetadataScanExpectation,
+  platform = process.platform
+): readonly LocalWorktreeMetadataPruneExpectation[] {
+  const candidateIds = new Set(scan.metadata.map(({ worktreeId }) => worktreeId))
+  if (candidateIds.size === 0) {
+    return scan.metadata
+  }
+  const sessionOwners = collectPersistedWorkspaceOwners(state, candidateIds, platform)
+  const aliasesByWorktreeId = indexMetadataAliasesForWorktreeIds(state, candidateIds)
+  return scan.metadata.filter(
+    ({ worktreeId }) =>
+      isValidCandidateId(scan.repo.id, worktreeId, platform) &&
+      !sessionOwners.has(worktreeId) &&
+      isLocallyRemovableWorktreeMetadataRow(
+        state,
+        worktreeId,
+        aliasesByWorktreeId.get(worktreeId) ?? []
+      )
+  )
+}
+
 export function pruneSessionlessMissingLocalWorktreeMetadataForRepo(
   state: PersistedState,
   scan: NativeLocalWorktreeMetadataScanExpectation,
diff --git a/src/main/persistence/tracking-repos/probeable-local-worktree-metadata-candidates.test.ts b/src/main/persistence/tracking-repos/probeable-local-worktree-metadata-candidates.test.ts
new file mode 100644
index 00000000000..380d0cba1fd
--- /dev/null
+++ b/src/main/persistence/tracking-repos/probeable-local-worktree-metadata-candidates.test.ts
@@ -0,0 +1,118 @@
+import { describe, expect, it } from 'vitest'
+import { getDefaultPersistedState } from '../../../shared/constants'
+import type { PersistedState } from '../../../shared/persisted-state-types'
+import type { Repo } from '../../../shared/repo-types'
+import type { WorktreeMeta } from '../../../shared/worktree/meta-types'
+import {
+  captureNativeLocalWorktreeMetadataScanExpectation,
+  pruneSessionlessMissingLocalWorktreeMetadataForRepo,
+  selectProbeableLocalWorktreeMetadataCandidates
+} from './missing-local-worktree-metadata-pruning'
+
+const REPO_ID = 'repo-1'
+
+function makeRepo(): Repo {
+  return {
+    id: REPO_ID,
+    path: '/workspace/repo',
+    displayName: 'repo',
+    badgeColor: '#000',
+    addedAt: 0
+  }
+}
+
+function makeMeta(worktreeId: string, overrides: Partial<WorktreeMeta> = {}): WorktreeMeta {
+  return {
+    instanceId: `instance-${worktreeId}`,
+    hostId: 'local',
+    displayName: worktreeId,
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: 0,
+    ...overrides
+  }
+}
+
+function makeState(): PersistedState {
+  const state = getDefaultPersistedState('/home/test')
+  state.repos = [makeRepo()]
+  return state
+}
+
+function probeableIds(state: PersistedState): string[] {
+  const scan = captureNativeLocalWorktreeMetadataScanExpectation(state, state.repos[0]!)
+  return selectProbeableLocalWorktreeMetadataCandidates(state, scan, 'linux').map(
+    ({ worktreeId }) => worktreeId
+  )
+}
+
+describe('selectProbeableLocalWorktreeMetadataCandidates', () => {
+  it('keeps an ordinary sessionless local row', () => {
+    const state = makeState()
+    const id = `${REPO_ID}::/workspace/gone`
+    state.worktreeMeta[id] = makeMeta(id)
+
+    expect(probeableIds(state)).toEqual([id])
+  })
+
+  it('drops a row a persisted session still pins', () => {
+    const state = makeState()
+    const pinned = `${REPO_ID}::/workspace/pinned`
+    const free = `${REPO_ID}::/workspace/free`
+    state.worktreeMeta[pinned] = makeMeta(pinned)
+    state.worktreeMeta[free] = makeMeta(free)
+    state.ui.lastActiveWorktreeId = pinned
+
+    expect(probeableIds(state)).toEqual([free])
+  })
+
+  it('drops a row whose locator is also known on a remote host', () => {
+    const state = makeState()
+    const shared = `${REPO_ID}::/workspace/shared`
+    const free = `${REPO_ID}::/workspace/free`
+    state.worktreeMeta[shared] = makeMeta(shared)
+    state.worktreeMeta[free] = makeMeta(free)
+    state.worktreeIdentityAliases = { [`ssh:box|${shared}`]: ['identity-1'] }
+
+    expect(probeableIds(state)).toEqual([free])
+  })
+
+  it('drops a row pinned to another execution host', () => {
+    const state = makeState()
+    const remote = `${REPO_ID}::/workspace/remote`
+    state.worktreeMeta[remote] = makeMeta(remote, { hostId: 'ssh:box' })
+
+    expect(probeableIds(state)).toEqual([])
+  })
+
+  it('never widens what the authoritative prune would remove', () => {
+    const state = makeState()
+    const ids = [
+      `${REPO_ID}::/workspace/free`,
+      `${REPO_ID}::/workspace/pinned`,
+      `${REPO_ID}::/workspace/remote`
+    ]
+    state.worktreeMeta[ids[0]] = makeMeta(ids[0])
+    state.worktreeMeta[ids[1]] = makeMeta(ids[1])
+    state.worktreeMeta[ids[2]] = makeMeta(ids[2], { hostId: 'ssh:box' })
+    state.ui.lastActiveWorktreeId = ids[1]
+
+    const scan = captureNativeLocalWorktreeMetadataScanExpectation(state, state.repos[0]!)
+    const selected = selectProbeableLocalWorktreeMetadataCandidates(state, scan, 'linux')
+    // Feeding the unfiltered capture to the authoritative prune must reach the same verdict.
+    const removed = pruneSessionlessMissingLocalWorktreeMetadataForRepo(
+      state,
+      scan,
+      scan.metadata,
+      'linux'
+    )
+
+    expect(selected.map(({ worktreeId }) => worktreeId)).toEqual(removed)
+  })
+})

From f9587f74f530acc042e5f804d22f335bb0a663d0 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:48:12 -0700
Subject: [PATCH 18/92] fix(ssh): repair a rebuildable node-pty failure once,
 instead of asking the user to reconnect (#17907)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(relay): diagnose why node-pty will not load instead of hedging

The relay could only say "terminals are unavailable" and then list three
remedies for four different faults, none of which the user could verify
(#17830). Two things were destroying the evidence:

- `loadPtyUncached` caught the load error into bare `catch {}` blocks
  (pty-handler.ts:539, :551) and returned null. The only cause anyone had
  was discarded on the spot.
- node-pty's own loader walks three directories and rethrows only the LAST
  failure, so even an uncaught error arrives as `Cannot find module
  '../prebuilds/...'` — the GLIBC/ABI/arch sentence is already gone.

The relay now keeps the load error, recovers the real dlopen message with an
out-of-process load of the file node-pty would have opened, reads what
node-gyp configured the binding for (`build/config.gypi`), captures the
host's Node ABI, arch and glibc, and probes the toolchain only when nothing
was compiled. Each fault gets its own message naming values the user can
check: toolchain_missing, dependency_missing, abi_mismatch, arch_mismatch,
libc_floor, shared_library_missing, load_crashed, and load_failed which
quotes the loader verbatim. A probe that did not answer stays `unverifiable`
and prescribes nothing.

The classification is now also structured data on the error, so a client can
repair the host instead of printing a paragraph: an additive, schema-validated
`data` field on an existing JSON-RPC error, with `repairable` true only for a
proved fault that recompiling on the host actually fixes.

Reuses orcad's loader-message parsers and out-of-process probe rather than
adding a second copy; `classifyLoaderMessage` moves to a shared module and
gains architecture and missing-shared-library cases, which the orcad boot
precondition picks up too.

* fix(ssh): repair a rebuildable node-pty failure once, instead of asking the user to reconnect
---
 .../ssh-pty-provider-terminal-repair.test.ts  | 155 ++++++++++
 src/main/providers/ssh-pty-provider.ts        |  19 ++
 src/main/providers/ssh-pty-spawn-repair.ts    |  45 +++
 .../ssh/ssh-relay-node-pty-repair.test.ts     | 204 +++++++++++++
 src/main/ssh/ssh-relay-node-pty-repair.ts     | 115 +++++++
 .../ssh-relay-node-pty-spawn-repair.test.ts   | 288 ++++++++++++++++++
 src/main/ssh/ssh-relay-session.ts             |  51 ++++
 src/shared/terminal-unavailable-cause.ts      |  14 +
 8 files changed, 891 insertions(+)
 create mode 100644 src/main/providers/ssh-pty-provider-terminal-repair.test.ts
 create mode 100644 src/main/providers/ssh-pty-spawn-repair.ts
 create mode 100644 src/main/ssh/ssh-relay-node-pty-repair.test.ts
 create mode 100644 src/main/ssh/ssh-relay-node-pty-repair.ts
 create mode 100644 src/main/ssh/ssh-relay-node-pty-spawn-repair.test.ts

diff --git a/src/main/providers/ssh-pty-provider-terminal-repair.test.ts b/src/main/providers/ssh-pty-provider-terminal-repair.test.ts
new file mode 100644
index 00000000000..530ce2804d8
--- /dev/null
+++ b/src/main/providers/ssh-pty-provider-terminal-repair.test.ts
@@ -0,0 +1,155 @@
+// The client half of #17830: a spawn refused for an unloadable node-pty must route into a repair
+// instead of printing a paragraph. Covers the seam only — the ledger and the locked rebuild are
+// tested in src/main/ssh/ssh-relay-node-pty-repair.test.ts and
+// src/main/ssh/ssh-relay-node-pty-spawn-repair.test.ts.
+
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { SshPtyProvider } from './ssh-pty-provider'
+import { createMockMux, type MockMultiplexer } from './ssh-pty-provider-mock-multiplexer'
+import {
+  TERMINAL_UNAVAILABLE_RPC_ERROR_CODE,
+  type TerminalUnavailableCause
+} from '../../shared/terminal-unavailable-cause'
+
+const UNAVAILABLE_MESSAGE =
+  "Remote terminals are unavailable: this host's node-pty binary was built for Node ABI 108."
+
+function cause(overrides: Partial<TerminalUnavailableCause> = {}): TerminalUnavailableCause {
+  return {
+    status: 'blocked',
+    reason: 'abi_mismatch',
+    detail: 'built for NODE_MODULE_VERSION 108, this Node accepts 115',
+    repairable: true,
+    host: {
+      platform: 'linux',
+      arch: 'x64',
+      libc: 'glibc',
+      glibcVersion: '2.31',
+      nodeAbi: '115',
+      nodeVersion: 'v20.11.0'
+    },
+    ...overrides
+  }
+}
+
+/** Shaped exactly as the multiplexer rebuilds a JSON-RPC error response client-side. */
+function relayRejection(data: unknown): Error {
+  const error = new Error(UNAVAILABLE_MESSAGE)
+  Object.defineProperty(error, 'code', { value: TERMINAL_UNAVAILABLE_RPC_ERROR_CODE })
+  Object.defineProperty(error, 'data', { value: data })
+  return error
+}
+
+function spawnCallCount(target: MockMultiplexer): number {
+  return target.request.mock.calls.filter((call) => call[0] === 'pty.spawn').length
+}
+
+function rejectSpawnOnce(mux: MockMultiplexer, error: Error): void {
+  mux.request.mockImplementation(async (method: string) => {
+    if (method === 'pty.spawn') {
+      throw error
+    }
+    return undefined
+  })
+}
+
+const SPAWN_OPTS = { cwd: '/repo', cols: 80, rows: 24 }
+
+let mux: MockMultiplexer
+let provider: SshPtyProvider
+
+beforeEach(() => {
+  mux = createMockMux()
+  provider = new SshPtyProvider('conn-1', mux as never)
+})
+
+describe('terminal-unavailable spawn recovery', () => {
+  it('routes a repairable cause into recovery and retries once on the repaired provider', async () => {
+    rejectSpawnOnce(mux, relayRejection(cause()))
+    const repairedMux = createMockMux()
+    repairedMux.request.mockResolvedValue({ id: 'pty-1', incarnationId: 'incarnation-1' })
+    const repairedProvider = new SshPtyProvider('conn-1', repairedMux as never)
+    const recover = vi.fn(async () => repairedProvider)
+    provider.setTerminalUnavailableRecovery(recover)
+
+    const result = await provider.spawn(SPAWN_OPTS)
+
+    expect(result.id).toBe('ssh:conn-1@@pty-1')
+    expect(recover).toHaveBeenCalledTimes(1)
+    expect(recover).toHaveBeenCalledWith(
+      expect.objectContaining({ reason: 'abi_mismatch', status: 'blocked' })
+    )
+    // Exactly one retry, on the post-repair channel — never a second attempt on the broken one.
+    expect(spawnCallCount(mux)).toBe(1)
+    expect(spawnCallCount(repairedMux)).toBe(1)
+  })
+
+  it('surfaces the relay message when the retry still fails, and does not recurse into a second repair', async () => {
+    // The lock-busy shape: the reconnect happened, the rebuild did not, so the relay says the same thing.
+    rejectSpawnOnce(mux, relayRejection(cause()))
+    const degradedMux = createMockMux()
+    const degradedProvider = new SshPtyProvider('conn-1', degradedMux as never)
+    rejectSpawnOnce(degradedMux, relayRejection(cause()))
+    const degradedRecover = vi.fn(async () => degradedProvider)
+    degradedProvider.setTerminalUnavailableRecovery(degradedRecover)
+    const recover = vi.fn(async () => degradedProvider)
+    provider.setTerminalUnavailableRecovery(recover)
+
+    await expect(provider.spawn(SPAWN_OPTS)).rejects.toThrow(UNAVAILABLE_MESSAGE)
+
+    expect(recover).toHaveBeenCalledTimes(1)
+    expect(degradedRecover).not.toHaveBeenCalled()
+  })
+
+  it('rethrows without recovery when the recovery declines', async () => {
+    rejectSpawnOnce(mux, relayRejection(cause()))
+    provider.setTerminalUnavailableRecovery(async () => null)
+
+    await expect(provider.spawn(SPAWN_OPTS)).rejects.toThrow(UNAVAILABLE_MESSAGE)
+  })
+
+  it('never recovers from an unverifiable cause', async () => {
+    rejectSpawnOnce(mux, relayRejection(cause({ status: 'unverifiable', repairable: true })))
+    const recover = vi.fn(async () => provider)
+    provider.setTerminalUnavailableRecovery(recover)
+
+    await expect(provider.spawn(SPAWN_OPTS)).rejects.toThrow(UNAVAILABLE_MESSAGE)
+    expect(recover).not.toHaveBeenCalled()
+  })
+
+  it('never recovers from a toolchain_missing cause', async () => {
+    rejectSpawnOnce(mux, relayRejection(cause({ reason: 'toolchain_missing', repairable: false })))
+    const recover = vi.fn(async () => provider)
+    provider.setTerminalUnavailableRecovery(recover)
+
+    await expect(provider.spawn(SPAWN_OPTS)).rejects.toThrow(UNAVAILABLE_MESSAGE)
+    expect(recover).not.toHaveBeenCalled()
+  })
+
+  it('ignores a malformed cause rather than half-reading it', async () => {
+    rejectSpawnOnce(mux, relayRejection({ status: 'blocked', repairable: true }))
+    const recover = vi.fn(async () => provider)
+    provider.setTerminalUnavailableRecovery(recover)
+
+    await expect(provider.spawn(SPAWN_OPTS)).rejects.toThrow(UNAVAILABLE_MESSAGE)
+    expect(recover).not.toHaveBeenCalled()
+  })
+
+  it('leaves an old relay that publishes no cause on today behaviour', async () => {
+    rejectSpawnOnce(mux, new Error(UNAVAILABLE_MESSAGE))
+    const recover = vi.fn(async () => provider)
+    provider.setTerminalUnavailableRecovery(recover)
+
+    await expect(provider.spawn(SPAWN_OPTS)).rejects.toThrow(UNAVAILABLE_MESSAGE)
+    expect(recover).not.toHaveBeenCalled()
+  })
+
+  it('does not swallow an ordinary spawn failure', async () => {
+    rejectSpawnOnce(mux, new Error('shell not found'))
+    const recover = vi.fn(async () => provider)
+    provider.setTerminalUnavailableRecovery(recover)
+
+    await expect(provider.spawn(SPAWN_OPTS)).rejects.toThrow('shell not found')
+    expect(recover).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/main/providers/ssh-pty-provider.ts b/src/main/providers/ssh-pty-provider.ts
index a8e4218ce63..f218cc43eca 100644
--- a/src/main/providers/ssh-pty-provider.ts
+++ b/src/main/providers/ssh-pty-provider.ts
@@ -23,6 +23,7 @@ import { SshPtySpawnExitRaceTracker } from './ssh-pty-spawn-exit-race'
 import { SshAgentSessionCapabilities } from './ssh-agent-session-capabilities'
 import type { PtyProcessInspection } from './pty-process-inspection'
 import { writeToSshPty, writeToSshPtyWithSettlement } from './ssh-pty-write'
+import { spawnWithTerminalRuntimeRepair, type TerminalRepairHook } from './ssh-pty-spawn-repair'
 
 // Why: sequential relay teardown calls share one absolute budget; convert to the mux-relative timeout only at dispatch.
 function relayTimeoutOptions(deadlineMs: number | undefined): { timeoutMs: number } | undefined {
@@ -38,6 +39,7 @@ export class SshPtyProvider implements IPtyProvider {
   private readonly agentSessionCapabilities: SshAgentSessionCapabilities
   private spawnExitRaces = new SshPtySpawnExitRaceTracker()
   private readonly outputState: SshPtyProviderOutputState
+  private recoverFromTerminalUnavailable: TerminalRepairHook<SshPtyProvider> | null = null
 
   requestHostRpc: NonNullable<IPtyProvider['requestHostRpc']> = (method, params, options) =>
     this.mux.request(method, params as Record<string, unknown>, options)
@@ -76,7 +78,24 @@ export class SshPtyProvider implements IPtyProvider {
 
   private toAppPtyId = (id: string): string => toAppSshPtyId(this.connectionId, id)
 
+  /** Installed by SshRelaySession, which owns the connection, the repair lock and the reconnect. */
+  setTerminalUnavailableRecovery(recover: TerminalRepairHook<SshPtyProvider>): void {
+    this.recoverFromTerminalUnavailable = recover
+  }
+
+  hasLivePtys(): boolean {
+    return this.livePtyIds.size > 0
+  }
+
   async spawn(opts: PtySpawnOptions): Promise<PtySpawnResult> {
+    return await spawnWithTerminalRuntimeRepair<SshPtyProvider, PtySpawnResult>({
+      attempt: () => this.spawnWithoutTerminalRuntimeRepair(opts),
+      recover: this.recoverFromTerminalUnavailable,
+      retry: (provider) => provider.spawnWithoutTerminalRuntimeRepair(opts)
+    })
+  }
+
+  private async spawnWithoutTerminalRuntimeRepair(opts: PtySpawnOptions): Promise<PtySpawnResult> {
     if (opts.agentSessionEnsure && opts.sessionId) {
       throw new Error('agent_session_claim_unavailable')
     }
diff --git a/src/main/providers/ssh-pty-spawn-repair.ts b/src/main/providers/ssh-pty-spawn-repair.ts
new file mode 100644
index 00000000000..5086283f3fb
--- /dev/null
+++ b/src/main/providers/ssh-pty-spawn-repair.ts
@@ -0,0 +1,45 @@
+/**
+ * The client seam for #17830: a spawn the relay refused because it cannot load node-pty.
+ *
+ * Split out of ssh-pty-provider.ts so the provider keeps only the wiring. The repair itself is
+ * driven by SshRelaySession, which owns the connection, the repair lock and the reconnect.
+ */
+import {
+  mayRepairFromCause,
+  terminalUnavailableCauseFromError,
+  type TerminalUnavailableCause
+} from '../../shared/terminal-unavailable-cause'
+
+/** Resolves to the provider registered after a successful repair, or null to keep the rejection. */
+export type TerminalRepairHook<TProvider> = (
+  cause: TerminalUnavailableCause
+) => Promise<TProvider | null>
+
+/**
+ * Run a spawn, and on a proved-repairable terminal-unavailable rejection repair the host and
+ * retry exactly once on the provider the repair produced.
+ *
+ * Re-issuing is safe because a validated cause is the host's own statement that admission was
+ * refused before any PTY existed, so there is nothing to duplicate. The retry deliberately goes
+ * through a caller-supplied thunk that does not re-enter this wrapper, so it cannot recurse.
+ * Gated on `mayRepairFromCause`, never on the peer's `repairable` flag alone.
+ */
+export async function spawnWithTerminalRuntimeRepair<TProvider, TResult>(args: {
+  attempt: () => Promise<TResult>
+  recover: TerminalRepairHook<TProvider> | null
+  retry: (provider: TProvider) => Promise<TResult>
+}): Promise<TResult> {
+  try {
+    return await args.attempt()
+  } catch (error) {
+    const cause = terminalUnavailableCauseFromError(error)
+    if (!cause || !mayRepairFromCause(cause) || !args.recover) {
+      throw error
+    }
+    const repaired = await args.recover(cause)
+    if (!repaired) {
+      throw error
+    }
+    return await args.retry(repaired)
+  }
+}
diff --git a/src/main/ssh/ssh-relay-node-pty-repair.test.ts b/src/main/ssh/ssh-relay-node-pty-repair.test.ts
new file mode 100644
index 00000000000..7c1b1800259
--- /dev/null
+++ b/src/main/ssh/ssh-relay-node-pty-repair.test.ts
@@ -0,0 +1,204 @@
+// Why: the once-only ledger is the whole safety story here — an unbounded rebuild loop against a
+// remote is worse than the bug it chases, so every gate that stops one gets a test.
+
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  forgetRelayNodePtyRepairs,
+  recoverRelayNodePtyForSpawn,
+  relayNodePtyRepairAttempts
+} from './ssh-relay-node-pty-repair'
+import type { TerminalUnavailableCause } from '../../shared/terminal-unavailable-cause'
+
+const HOST: TerminalUnavailableCause['host'] = {
+  platform: 'linux',
+  arch: 'x64',
+  libc: 'glibc',
+  glibcVersion: '2.31',
+  nodeAbi: '115',
+  nodeVersion: 'v20.11.0'
+}
+
+function cause(overrides: Partial<TerminalUnavailableCause> = {}): TerminalUnavailableCause {
+  return {
+    status: 'blocked',
+    reason: 'abi_mismatch',
+    detail: 'built for NODE_MODULE_VERSION 108, this Node accepts 115',
+    repairable: true,
+    host: HOST,
+    ...overrides
+  }
+}
+
+describe('recoverRelayNodePtyForSpawn', () => {
+  const TARGET = 'host-a'
+  let warnSpy: ReturnType<typeof vi.spyOn>
+
+  beforeEach(() => {
+    forgetRelayNodePtyRepairs(TARGET)
+    forgetRelayNodePtyRepairs('host-b')
+    warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
+  })
+
+  afterEach(() => {
+    warnSpy.mockRestore()
+    forgetRelayNodePtyRepairs(TARGET)
+    forgetRelayNodePtyRepairs('host-b')
+  })
+
+  function harness(overrides: { hasLivePtys?: boolean; reconnect?: () => Promise<void> } = {}) {
+    const reconnect = vi.fn(overrides.reconnect ?? (async () => {}))
+    const repaired = { name: 'post-repair-provider' }
+    const resolveProvider = vi.fn(() => repaired)
+    return {
+      reconnect,
+      resolveProvider,
+      repaired,
+      run: (c: TerminalUnavailableCause | null) =>
+        recoverRelayNodePtyForSpawn({
+          targetId: TARGET,
+          cause: c,
+          hasLivePtys: () => overrides.hasLivePtys === true,
+          reconnect,
+          resolveProvider
+        })
+    }
+  }
+
+  it('repairs a repairable cause with exactly one reconnect and hands back the new provider', async () => {
+    const h = harness()
+
+    const result = await h.run(cause())
+
+    expect(result.outcome).toBe('repaired')
+    expect(result.provider).toBe(h.repaired)
+    expect(h.reconnect).toHaveBeenCalledTimes(1)
+    expect([...relayNodePtyRepairAttempts(TARGET)]).toEqual(['abi_mismatch'])
+  })
+
+  it('does not repair a second time for the same cause on the same host', async () => {
+    const first = harness()
+    await first.run(cause())
+    const second = harness()
+
+    const result = await second.run(cause())
+
+    expect(result.outcome).toBe('already-attempted')
+    expect(result.provider).toBeNull()
+    expect(second.reconnect).not.toHaveBeenCalled()
+  })
+
+  it('spends the attempt even when the repair reconnect fails, so it cannot loop', async () => {
+    const failing = harness({
+      reconnect: async () => {
+        throw new Error('relay repair lock is wedged')
+      }
+    })
+
+    const first = await failing.run(cause())
+    expect(first.outcome).toBe('reconnect-failed')
+    expect(first.provider).toBeNull()
+
+    const second = harness()
+    const retry = await second.run(cause())
+
+    expect(retry.outcome).toBe('already-attempted')
+    expect(second.reconnect).not.toHaveBeenCalled()
+  })
+
+  it('keeps the ledger per host, so a second host still gets its one attempt', async () => {
+    const h = harness()
+    await h.run(cause())
+    const other = vi.fn(async () => {})
+
+    const result = await recoverRelayNodePtyForSpawn({
+      targetId: 'host-b',
+      cause: cause(),
+      hasLivePtys: () => false,
+      reconnect: other,
+      resolveProvider: () => ({})
+    })
+
+    expect(result.outcome).toBe('repaired')
+    expect(other).toHaveBeenCalledTimes(1)
+  })
+
+  it('keeps the ledger per reason, so a different proved fault still gets its one attempt', async () => {
+    const h = harness()
+    await h.run(cause())
+    const second = harness()
+
+    const result = await second.run(cause({ reason: 'arch_mismatch' }))
+
+    expect(result.outcome).toBe('repaired')
+    expect([...relayNodePtyRepairAttempts(TARGET)].sort()).toEqual([
+      'abi_mismatch',
+      'arch_mismatch'
+    ])
+  })
+
+  it('never repairs an unverifiable cause, whatever the peer claims about repairability', async () => {
+    const h = harness()
+
+    // Why repairable:true here: #14830 is exactly a peer flag believed over the status.
+    const result = await h.run(cause({ status: 'unverifiable', repairable: true }))
+
+    expect(result.outcome).toBe('not-repairable')
+    expect(h.reconnect).not.toHaveBeenCalled()
+    expect([...relayNodePtyRepairAttempts(TARGET)]).toEqual([])
+  })
+
+  it('never repairs a toolchain_missing cause — the rebuild needs the missing compiler', async () => {
+    const h = harness()
+
+    const result = await h.run(cause({ reason: 'toolchain_missing', repairable: false }))
+
+    expect(result.outcome).toBe('not-repairable')
+    expect(h.reconnect).not.toHaveBeenCalled()
+    expect([...relayNodePtyRepairAttempts(TARGET)]).toEqual([])
+  })
+
+  it('never repairs when the relay published no cause at all', async () => {
+    const h = harness()
+
+    const result = await h.run(null)
+
+    expect(result.outcome).toBe('not-repairable')
+    expect(h.reconnect).not.toHaveBeenCalled()
+  })
+
+  it('does not rebuild under live PTYs, and does not spend the attempt doing so', async () => {
+    const live = harness({ hasLivePtys: true })
+
+    const blocked = await live.run(cause())
+    expect(blocked.outcome).toBe('ptys-live')
+    expect(live.reconnect).not.toHaveBeenCalled()
+    expect([...relayNodePtyRepairAttempts(TARGET)]).toEqual([])
+
+    const idle = harness()
+    expect((await idle.run(cause())).outcome).toBe('repaired')
+  })
+
+  it('withholds the retry when the reconnect produced no provider', async () => {
+    const reconnect = vi.fn(async () => {})
+
+    const result = await recoverRelayNodePtyForSpawn({
+      targetId: TARGET,
+      cause: cause(),
+      hasLivePtys: () => false,
+      reconnect,
+      resolveProvider: () => null
+    })
+
+    expect(result.outcome).toBe('no-provider')
+    expect(result.provider).toBeNull()
+    expect(reconnect).toHaveBeenCalledTimes(1)
+  })
+
+  it('gives a host a fresh attempt only after an explicit disconnect', async () => {
+    await harness().run(cause())
+    forgetRelayNodePtyRepairs(TARGET)
+    const afterDisconnect = harness()
+
+    expect((await afterDisconnect.run(cause())).outcome).toBe('repaired')
+  })
+})
diff --git a/src/main/ssh/ssh-relay-node-pty-repair.ts b/src/main/ssh/ssh-relay-node-pty-repair.ts
new file mode 100644
index 00000000000..149b6c486cb
--- /dev/null
+++ b/src/main/ssh/ssh-relay-node-pty-repair.ts
@@ -0,0 +1,115 @@
+/**
+ * Turning a spawn-time "remote terminals are unavailable" into an actual repair.
+ *
+ * The fault is proved on the relay at spawn time; the only thing that can fix it —
+ * `repairInstalledNativeDeps` in ssh-relay-deploy.ts — runs on the client during deploy, under
+ * `tryAcquireRelayRepairLock`. So the recovery here is deliberately indirect: it does not touch
+ * the remote `node_modules` itself, it drives one relay reconnect and lets the locked deploy path
+ * do the rebuild. All `node_modules` mutation stays behind that lock.
+ *
+ * The invariant that matters more than the recovery: **at most one repair per host per reason.**
+ * A rebuild loop against a remote is worse than the bug it is chasing, so the attempt is recorded
+ * before the reconnect starts, not after it succeeds. A repair that ran and failed is still an
+ * attempt, and this host will render the relay's message from then on.
+ */
+import {
+  mayRepairFromCause,
+  type TerminalUnavailableCause
+} from '../../shared/terminal-unavailable-cause'
+
+/** targetId -> the cause reasons already spent on this host, for the life of the session. */
+const attemptedRepairsByTarget = new Map<string, Set<string>>()
+
+export type RelayNodePtyRepairOutcome =
+  /** The cause is not proved-and-rebuildable; render the relay's message. */
+  | 'not-repairable'
+  /** This host already spent its one attempt on this reason. */
+  | 'already-attempted'
+  /** The relay is still serving PTYs, so a rebuild under it is not accounted for. */
+  | 'ptys-live'
+  /** No reconnect was possible, or it failed; the attempt is still spent. */
+  | 'reconnect-failed'
+  /** Reconnected, but no provider came back to retry on. */
+  | 'no-provider'
+  | 'repaired'
+
+/** Forget a host's spent attempts. Disconnect is user action, so it may earn a fresh one. */
+export function forgetRelayNodePtyRepairs(targetId: string): void {
+  attemptedRepairsByTarget.delete(targetId)
+}
+
+/** Test/diagnostic view of the ledger. */
+export function relayNodePtyRepairAttempts(targetId: string): ReadonlySet<string> {
+  return attemptedRepairsByTarget.get(targetId) ?? new Set<string>()
+}
+
+/** False when this host has already spent its attempt on this reason. Marks on success. */
+function claimRepairAttempt(targetId: string, reason: string): boolean {
+  const spent = attemptedRepairsByTarget.get(targetId)
+  if (spent) {
+    if (spent.has(reason)) {
+      return false
+    }
+    spent.add(reason)
+    return true
+  }
+  attemptedRepairsByTarget.set(targetId, new Set([reason]))
+  return true
+}
+
+export type RelayNodePtyRepairRequest<TProvider> = {
+  targetId: string
+  /** Already parsed and schema-validated; null when the relay published no cause. */
+  cause: TerminalUnavailableCause | null
+  /** Whether this client still holds live PTYs on the relay about to be rebuilt. */
+  hasLivePtys: () => boolean
+  /** One relay reconnect, which runs the locked `repairInstalledNativeDeps`. */
+  reconnect: () => Promise<void>
+  /** The provider registered after the reconnect — never the one that failed. */
+  resolveProvider: () => TProvider | null
+}
+
+/**
+ * Drive one repair for a failed spawn, returning the provider to retry on.
+ *
+ * Gates on `mayRepairFromCause`, not on the peer's `repairable` flag: an `unverifiable` cause
+ * proves nothing and must never trigger a rebuild (#14830, docs/reference/ssh-execution-boundary.md).
+ */
+export async function recoverRelayNodePtyForSpawn<TProvider>(
+  request: RelayNodePtyRepairRequest<TProvider>
+): Promise<{ outcome: RelayNodePtyRepairOutcome; provider: TProvider | null }> {
+  const { targetId, cause } = request
+  if (!mayRepairFromCause(cause) || !cause) {
+    return { outcome: 'not-repairable', provider: null }
+  }
+  // Why check before claiming: a live PTY means the rebuild's blast radius is unaccounted for, and
+  // that is a reason to wait, not a spent attempt. Costs nothing remote, so it cannot loop.
+  if (request.hasLivePtys()) {
+    console.warn(
+      `[ssh-relay-repair] Not rebuilding node-pty on ${targetId} for ${cause.reason}: the relay is still serving PTYs`
+    )
+    return { outcome: 'ptys-live', provider: null }
+  }
+  if (!claimRepairAttempt(targetId, cause.reason)) {
+    console.warn(
+      `[ssh-relay-repair] node-pty repair for ${cause.reason} on ${targetId} already ran; not retrying`
+    )
+    return { outcome: 'already-attempted', provider: null }
+  }
+
+  console.warn(
+    `[ssh-relay-repair] Reconnecting ${targetId} once to rebuild node-pty (${cause.reason}): ${cause.detail}`
+  )
+  try {
+    await request.reconnect()
+  } catch (error) {
+    console.warn(
+      `[ssh-relay-repair] Repair reconnect for ${targetId} failed: ${
+        error instanceof Error ? error.message : String(error)
+      }`
+    )
+    return { outcome: 'reconnect-failed', provider: null }
+  }
+  const provider = request.resolveProvider()
+  return provider ? { outcome: 'repaired', provider } : { outcome: 'no-provider', provider: null }
+}
diff --git a/src/main/ssh/ssh-relay-node-pty-spawn-repair.test.ts b/src/main/ssh/ssh-relay-node-pty-spawn-repair.test.ts
new file mode 100644
index 00000000000..12a51ce6bdd
--- /dev/null
+++ b/src/main/ssh/ssh-relay-node-pty-spawn-repair.test.ts
@@ -0,0 +1,288 @@
+// The other half of the #17830 recovery: proof that the reconnect a spawn-time cause triggers is
+// the SAME locked deploy repair, not a second rebuild path. `tryAcquireRelayRepairLock` is the only
+// thing standing between two clients and a concurrent `node_modules` rewrite, so a lock this path
+// cannot take must degrade to the relay's message rather than proceed.
+
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as RelayInstallMarkerModule from './ssh-relay-install-marker'
+
+vi.mock('electron', () => ({
+  app: { getAppPath: () => '/mock/app' }
+}))
+
+vi.mock('fs', () => ({
+  existsSync: vi.fn().mockReturnValue(true),
+  readFileSync: vi.fn().mockReturnValue('0.1.0+testhash')
+}))
+
+vi.mock('./relay-protocol', () => ({
+  RELAY_VERSION: '0.1.0',
+  RELAY_REMOTE_DIR: '.orca-remote',
+  parseUnameToRelayPlatform: vi.fn().mockReturnValue('linux-x64'),
+  RELAY_SENTINEL: 'ORCA-RELAY v0.1.0 READY\n',
+  RELAY_SENTINEL_TIMEOUT_MS: 10_000
+}))
+
+vi.mock('./ssh-relay-deploy-helpers', () => ({
+  uploadDirectory: vi.fn().mockResolvedValue(undefined),
+  waitForSentinel: vi.fn().mockResolvedValue({
+    write: vi.fn(),
+    onData: vi.fn(),
+    onClose: vi.fn()
+  }),
+  isUnconfirmedSshCommandTermination: () => false,
+  execCommand: vi.fn()
+}))
+
+vi.mock('./ssh-remote-node-resolution', () => ({
+  resolveRemoteNodePath: vi.fn().mockResolvedValue('/usr/bin/node')
+}))
+
+vi.mock('./ssh-relay-install-marker', async (importOriginal) => ({
+  ...(await importOriginal<typeof RelayInstallMarkerModule>()),
+  createRelayInstallMarkerFileName: () => '.sftp-namespace-00000000000000000000000000000000'
+}))
+
+vi.mock('./ssh-relay-versioned-install', () => ({
+  readLocalFullVersion: vi.fn().mockReturnValue('0.1.0+testhash'),
+  computeRemoteRelayDir: (home: string, v: string) => `${home}/.orca-remote/relay-${v}`,
+  isRelayAlreadyInstalled: vi.fn().mockResolvedValue(true),
+  finalizeInstall: vi.fn().mockResolvedValue(undefined),
+  abandonInstall: vi.fn().mockResolvedValue(undefined),
+  gcOldRelayVersions: vi.fn().mockResolvedValue(undefined)
+}))
+
+vi.mock('./ssh-relay-install-lock', () => ({
+  acquireInstallLock: vi.fn().mockResolvedValue(undefined),
+  RELAY_INSTALL_LOCK_NAME: '.install-lock'
+}))
+
+vi.mock('./ssh-relay-repair-lock', () => ({
+  tryAcquireRelayRepairLock: vi.fn().mockResolvedValue('acquired')
+}))
+
+vi.mock('./ssh-relay-gc-claim', () => ({
+  releaseRelayGcClaimWithRetry: vi.fn().mockResolvedValue('released'),
+  tryAcquireRelayGcClaim: vi.fn().mockResolvedValue('launch-token'),
+  waitForRelayGcClaimRelease: vi.fn().mockResolvedValue(undefined)
+}))
+
+vi.mock('./ssh-connection-utils', () => ({
+  shellEscape: (s: string) => `'${s}'`
+}))
+
+import { deployAndLaunchRelay } from './ssh-relay-deploy'
+import { execCommand } from './ssh-relay-deploy-helpers'
+import { parseUnameToRelayPlatform } from './relay-protocol'
+import { isRelayAlreadyInstalled } from './ssh-relay-versioned-install'
+import { tryAcquireRelayRepairLock } from './ssh-relay-repair-lock'
+import {
+  makeMockConnection,
+  type ExecResponse,
+  type SftpWriteCapture
+} from './ssh-relay-native-deps-install-fixture'
+import { forgetRelayNodePtyRepairs, recoverRelayNodePtyForSpawn } from './ssh-relay-node-pty-repair'
+import type { TerminalUnavailableCause } from '../../shared/terminal-unavailable-cause'
+
+const TARGET = 'repair-host'
+
+const ABI_MISMATCH: TerminalUnavailableCause = {
+  status: 'blocked',
+  reason: 'abi_mismatch',
+  detail: 'built for NODE_MODULE_VERSION 108, this Node accepts 115',
+  repairable: true,
+  host: {
+    platform: 'linux',
+    arch: 'x64',
+    libc: 'glibc',
+    glibcVersion: '2.31',
+    nodeAbi: '115',
+    nodeVersion: 'v20.11.0'
+  }
+}
+
+// The relay dir is complete but node-pty will not load, which is exactly what the spawn-time cause
+// describes. @parcel/watcher is healthy, so only node-pty is reset and rebuilt.
+const NODE_PTY_BROKEN = 'ORCA-NATIVE-DEPS-MISSING:node-pty\nMISSING'
+
+function repairSucceedsResponses(): ExecResponse[] {
+  return [
+    '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
+    '/home/u',
+    NODE_PTY_BROKEN, // health probe before the lock
+    NODE_PTY_BROKEN, // re-probe under the repair lock
+    '', // SFTP-namespace install-owner marker
+    '', // reset node-pty + npm install
+    '', // chmod prebuilds
+    'ORCA-NPTY-PROBE-OK\n', // node-pty loads again
+    '', // rm -f probe stderr
+    'DEAD',
+    '', // publish the per-launch credential
+    'READY'
+  ]
+}
+
+function lockUnavailableResponses(): ExecResponse[] {
+  return [
+    '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
+    '/home/u',
+    NODE_PTY_BROKEN, // health probe before the lock
+    'DEAD',
+    '', // publish the per-launch credential
+    'READY'
+  ]
+}
+
+describe('spawn-time node-pty repair through the locked deploy path', () => {
+  let warnSpy: ReturnType<typeof vi.spyOn>
+  const sftpCapture: SftpWriteCapture = {
+    paths: [],
+    contents: {},
+    execCallCountAtWrite: {}
+  }
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    vi.mocked(execCommand).mockReset().mockResolvedValue('')
+    sftpCapture.paths.length = 0
+    for (const key of Object.keys(sftpCapture.contents)) {
+      delete sftpCapture.contents[key]
+    }
+    for (const key of Object.keys(sftpCapture.execCallCountAtWrite)) {
+      delete sftpCapture.execCallCountAtWrite[key]
+    }
+    vi.mocked(parseUnameToRelayPlatform).mockReturnValue('linux-x64')
+    vi.mocked(isRelayAlreadyInstalled).mockResolvedValue(true)
+    vi.mocked(tryAcquireRelayRepairLock).mockResolvedValue('acquired')
+    forgetRelayNodePtyRepairs(TARGET)
+    warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
+  })
+
+  afterEach(() => {
+    warnSpy.mockRestore()
+    forgetRelayNodePtyRepairs(TARGET)
+  })
+
+  function feed(responses: ExecResponse[]): void {
+    const mockExec = vi.mocked(execCommand)
+    for (const response of responses) {
+      if (typeof response === 'string') {
+        mockExec.mockResolvedValueOnce(response)
+      } else {
+        mockExec.mockRejectedValueOnce(new Error(response.reject))
+      }
+    }
+  }
+
+  function recover(conn: ReturnType<typeof makeMockConnection>, deploys: { count: number }) {
+    return recoverRelayNodePtyForSpawn({
+      targetId: TARGET,
+      cause: ABI_MISMATCH,
+      hasLivePtys: () => false,
+      reconnect: async () => {
+        deploys.count += 1
+        await deployAndLaunchRelay(conn)
+      },
+      resolveProvider: () => ({ generation: deploys.count })
+    })
+  }
+
+  function execCalls(): string[] {
+    return vi.mocked(execCommand).mock.calls.map(([, command]) => String(command))
+  }
+
+  it('rebuilds node-pty under the repair lock and returns the post-reconnect provider', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    feed(repairSucceedsResponses())
+    const deploys = { count: 0 }
+
+    const result = await recover(conn, deploys)
+
+    expect(result.outcome).toBe('repaired')
+    expect(result.provider).toEqual({ generation: 1 })
+    expect(deploys.count).toBe(1)
+    expect(vi.mocked(tryAcquireRelayRepairLock)).toHaveBeenCalledTimes(1)
+    const install = execCalls().find((command) => command.includes('npm install')) ?? ''
+    expect(install).toContain('npm install')
+    // The reset is what makes an ABI-mismatched binding recompile instead of being reported up to date.
+    expect(install).toContain("rm -rf 'node_modules/node-pty'")
+  })
+
+  it('does not repair or reconnect a second time for the same cause on the same host', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    feed(repairSucceedsResponses())
+    const deploys = { count: 0 }
+    await recover(conn, deploys)
+    vi.mocked(execCommand).mockReset().mockResolvedValue('')
+
+    const second = await recover(conn, deploys)
+
+    expect(second.outcome).toBe('already-attempted')
+    expect(second.provider).toBeNull()
+    expect(deploys.count).toBe(1)
+    expect(execCalls()).toEqual([])
+    expect(vi.mocked(tryAcquireRelayRepairLock)).toHaveBeenCalledTimes(1)
+  })
+
+  it.each(['busy', 'error'] as const)(
+    'leaves the host untouched and degrades to the relay message when the repair lock is %s',
+    async (lockResult) => {
+      const conn = makeMockConnection(sftpCapture)
+      vi.mocked(tryAcquireRelayRepairLock).mockResolvedValue(lockResult)
+      feed(lockUnavailableResponses())
+      const deploys = { count: 0 }
+
+      const result = await recover(conn, deploys)
+
+      // The reconnect happened; the rebuild did not, so the retried spawn hits the same relay
+      // rejection and the user reads today's message. Nothing wrote to node_modules unlocked.
+      expect(deploys.count).toBe(1)
+      expect(execCalls().some((command) => command.includes('npm install'))).toBe(false)
+      expect(execCalls().some((command) => command.includes('node_modules/node-pty'))).toBe(false)
+      expect(result.outcome).toBe('repaired')
+      const warnings = warnSpy.mock.calls.map((args) => String(args[0] ?? ''))
+      expect(warnings.some((line) => line.includes(`repair lock is ${lockResult}`))).toBe(true)
+    }
+  )
+
+  it('never reaches the deploy path for an unverifiable cause', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    const deploys = { count: 0 }
+
+    const result = await recoverRelayNodePtyForSpawn({
+      targetId: TARGET,
+      cause: { ...ABI_MISMATCH, status: 'unverifiable' },
+      hasLivePtys: () => false,
+      reconnect: async () => {
+        deploys.count += 1
+        await deployAndLaunchRelay(conn)
+      },
+      resolveProvider: () => ({ generation: deploys.count })
+    })
+
+    expect(result.outcome).toBe('not-repairable')
+    expect(deploys.count).toBe(0)
+    expect(vi.mocked(tryAcquireRelayRepairLock)).not.toHaveBeenCalled()
+    expect(execCalls()).toEqual([])
+  })
+
+  it('never reaches the deploy path for a toolchain_missing cause', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    const deploys = { count: 0 }
+
+    const result = await recoverRelayNodePtyForSpawn({
+      targetId: TARGET,
+      cause: { ...ABI_MISMATCH, reason: 'toolchain_missing', repairable: false },
+      hasLivePtys: () => false,
+      reconnect: async () => {
+        deploys.count += 1
+        await deployAndLaunchRelay(conn)
+      },
+      resolveProvider: () => ({ generation: deploys.count })
+    })
+
+    expect(result.outcome).toBe('not-repairable')
+    expect(deploys.count).toBe(0)
+    expect(execCalls()).toEqual([])
+  })
+})
diff --git a/src/main/ssh/ssh-relay-session.ts b/src/main/ssh/ssh-relay-session.ts
index ed5ae3f9cfd..68254fbb108 100644
--- a/src/main/ssh/ssh-relay-session.ts
+++ b/src/main/ssh/ssh-relay-session.ts
@@ -7,6 +7,8 @@ import { deployAndLaunchRelay } from './ssh-relay-deploy'
 import { execCommand } from './ssh-relay-deploy-helpers'
 import { isRelayVersionMismatchError } from './ssh-relay-version-mismatch-error'
 import { isRelayEndpointHeldError } from './ssh-relay-endpoint-incumbent'
+import { forgetRelayNodePtyRepairs, recoverRelayNodePtyForSpawn } from './ssh-relay-node-pty-repair'
+import type { TerminalUnavailableCause } from '../../shared/terminal-unavailable-cause'
 import { replayPendingSshPtyKills } from './ssh-pending-pty-kill-replay'
 import { SshChannelMultiplexer } from './ssh-channel-multiplexer'
 import { SshPtyProvider } from '../providers/ssh-pty-provider'
@@ -319,6 +321,8 @@ export class SshRelaySession {
   private _onReady: ((targetId: string) => void) | null = null
   private portScanner: PortScanner | null = null
   private currentConnection: SshConnection | null = null
+  // Why: a self-driven repair reconnect must not silently re-negotiate the target's grace window.
+  private lastGraceTimeSeconds: number | undefined = undefined
   private hostPlatform: RemoteHostPlatform | null = null
   private remoteCliBridgeEnv: RemoteCliBridgeEnv | null = null
   private aiVaultListMethodSupported: boolean | null = null
@@ -517,6 +521,7 @@ export class SshRelaySession {
     this.aiVaultListMethodSupported = null
     this.aiVaultTitleMethodSupported = null
     this.currentConnection = conn
+    this.lastGraceTimeSeconds = graceTimeSeconds
 
     try {
       const {
@@ -663,6 +668,7 @@ export class SshRelaySession {
     this.aiVaultListMethodSupported = null
     this.aiVaultTitleMethodSupported = null
     this.currentConnection = conn
+    this.lastGraceTimeSeconds = graceTimeSeconds
 
     // Why: stop scanning before teardownProviders so the poll timer can't fire against a disposed multiplexer.
     this.stopPortScanning()
@@ -862,6 +868,9 @@ export class SshRelaySession {
     this.teardownProviders('shutdown')
     this.currentConnection = null
     this._state = 'disposed'
+    // Why here and not on reconnect: an explicit disconnect is user action, so the host earns a
+    // fresh node-pty repair attempt. A reconnect must not, or the repair becomes a loop.
+    forgetRelayNodePtyRepairs(this.targetId)
     const recoveryRemoval = forgetSshPtyConsumerRecovery(
       this.targetId,
       this.ptyConsumerClientInstanceId,
@@ -995,6 +1004,44 @@ export class SshRelaySession {
     })
   }
 
+  /**
+   * A spawn was refused because the relay cannot load node-pty. Reconnect once so the deploy
+   * path's `repairInstalledNativeDeps` rebuilds it under `tryAcquireRelayRepairLock`, then hand
+   * back the provider registered by that reconnect for a single retry.
+   *
+   * Nothing here mutates the remote directly — a lock-less rebuild could collide with a
+   * concurrent reconnect's repair, so the locked deploy path stays the only writer. If the lock
+   * is busy it launches degraded, the retry hits the same rejection, and the user sees the
+   * relay's message. The attempt is spent either way.
+   */
+  private async recoverRemoteTerminalRuntime(
+    requestingProvider: SshPtyProvider,
+    cause: TerminalUnavailableCause
+  ): Promise<SshPtyProvider | null> {
+    const { provider } = await recoverRelayNodePtyForSpawn<SshPtyProvider>({
+      targetId: this.targetId,
+      cause,
+      hasLivePtys: () => requestingProvider.hasLivePtys(),
+      reconnect: async () => {
+        const conn = this.currentConnection
+        if (!conn || this.isDisposed()) {
+          throw new Error('no_live_ssh_connection')
+        }
+        await this.reconnect(conn, this.lastGraceTimeSeconds)
+      },
+      resolveProvider: () => {
+        if (this._state !== 'ready' || this.isDisposed()) {
+          return null
+        }
+        const current = getSshPtyProvider(this.targetId) as SshPtyProvider | undefined
+        // Why identity-checked: a reconnect that fell back to the same provider would retry
+        // against the same unrepaired relay.
+        return current && current !== requestingProvider ? current : null
+      }
+    })
+    return provider
+  }
+
   // Why: shared by establish() and reconnect() so both use the exact same registration sequence.
   private async registerProviders(
     mux: SshChannelMultiplexer,
@@ -1034,6 +1081,10 @@ export class SshRelaySession {
       this.remoteCliBridgeEnv ?? undefined,
       providerGeneration
     )
+    // Why optional-call: session tests register partial provider stubs, same as the pause adapter below.
+    ptyProvider.setTerminalUnavailableRecovery?.((cause) =>
+      this.recoverRemoteTerminalRuntime(ptyProvider, cause)
+    )
     const consumerOwnerState = this.activePtyConsumerOwner()
     if (consumerOwnerState) {
       ptyProvider.setPtyDeliveryPauseAdapter?.(({ id, providerGeneration: generation, paused }) => {
diff --git a/src/shared/terminal-unavailable-cause.ts b/src/shared/terminal-unavailable-cause.ts
index 2671941da30..bb2478e21b0 100644
--- a/src/shared/terminal-unavailable-cause.ts
+++ b/src/shared/terminal-unavailable-cause.ts
@@ -62,6 +62,20 @@ export function parseTerminalUnavailableCause(value: unknown): TerminalUnavailab
   return parsed.success ? parsed.data : null
 }
 
+/**
+ * The cause carried by a rejected JSON-RPC call, or null when there is none to act on.
+ *
+ * Reads `data`, never `code`: the dispatcher coerces a non-numeric error code to -32000 on the
+ * way out, so the string code does not survive the wire. The strict schema is the whole gate —
+ * no other published `data` shape validates against it.
+ */
+export function terminalUnavailableCauseFromError(error: unknown): TerminalUnavailableCause | null {
+  if (typeof error !== 'object' || error === null || !('data' in error)) {
+    return null
+  }
+  return parseTerminalUnavailableCause((error as { data: unknown }).data)
+}
+
 /**
  * Whether the client may rewrite the host's `node_modules` on the strength of this cause.
  *

From 7f4a17d8eb612d420fcbce659983e0ebb043a061 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 22:51:22 -0700
Subject: [PATCH 19/92] perf(ssh): key relay native deps on the deps, not the
 bundle hash (#18033)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Relay node_modules lived inside `~/.orca-remote/relay-<version>+<hash>`, so
any byte change in `src/relay/` or the `src/shared/` it pulls in minted a new
directory and a fresh `npm install node-pty@1.1.0 @parcel/watcher@2.5.6`. On
Linux node-pty has no prebuild, so that is a node-gyp source compile on every
new bundle — eight of the fifteen deploy minutes, daily, on a dependency set
that is a pinned constant (#18009).

The tree now lives at `~/.orca-remote/native/<platform>-<depsHash>/node_modules`
and each relay directory symlinks to it. depsHash covers RELAY_NATIVE_DEPS, an
explicit epoch, and the bytes of every shipped `node-pty-*` patch artifact, so a
patch change mints a new entry rather than leaving hosts on a stale tree.

Three rules make one tree safe to share:

- A published entry is immutable. `.deps-complete` is written last, only after
  a probe on that host loaded both addons. Nothing installs, rebuilds or resets
  into a published entry: every `npm install` is prefixed with a symlink detach,
  so a repair on one directory can never `rm -rf node_modules/node-pty` out from
  under a live relay sharing the tree.
- Publication elects one winner with `mkdir`, so no client-side lock is needed
  and two deploys never write one tree. A loser keeps its own copy.
- Every failure degrades to today's per-directory install.

GC follows remote-install-gc.ts' discipline: a listing that does not end in its
own OK token, an unreadable link, or a reference whose shape this client never
writes aborts the whole pass. Deletion is tombstone-rename, re-read references
under the rename, then remove — a deploy that linked between the listing and the
rename gets its tree moved back. It only runs for a connection that could
compute a key, and never removes a pinned one.

Migration: a first deploy after this ships seeds its tree from a sibling relay
directory whose manifest pins the same versions, so an existing host does not
recompile once more. The seed is not trusted — it is a plain private install
until the normal probe loads it, and only then is it published.

Windows keeps the per-directory install: node-pty ships win32 prebuilts, so
there is no compile to avoid, and the console-list agent patch mutates the
installed tree in place, which rule 1 forbids for a shared one.

The POSIX scripts are exercised against a real tree under both /bin/sh and
dash, not just asserted on as strings.
---
 src/main/ssh/remote-install-gc.ts             |  14 +
 src/main/ssh/ssh-relay-deploy.ts              |  84 ++++-
 .../ssh-relay-native-deps-cache-commands.ts   | 210 ++++++++++++
 ...ssh-relay-native-deps-cache-deploy.test.ts | 301 ++++++++++++++++++
 .../ssh/ssh-relay-native-deps-cache-gc.ts     | 243 ++++++++++++++
 .../ssh-relay-native-deps-cache-install.ts    | 209 ++++++++++++
 .../ssh-relay-native-deps-cache-shell.test.ts | 243 ++++++++++++++
 .../ssh/ssh-relay-native-deps-cache.test.ts   | 277 ++++++++++++++++
 src/main/ssh/ssh-relay-native-deps-cache.ts   | 145 +++++++++
 .../ssh-relay-native-deps-install-fixture.ts  |  13 +-
 .../ssh-relay-sftp-namespace-install.test.ts  |   4 +
 11 files changed, 1736 insertions(+), 7 deletions(-)
 create mode 100644 src/main/ssh/ssh-relay-native-deps-cache-commands.ts
 create mode 100644 src/main/ssh/ssh-relay-native-deps-cache-deploy.test.ts
 create mode 100644 src/main/ssh/ssh-relay-native-deps-cache-gc.ts
 create mode 100644 src/main/ssh/ssh-relay-native-deps-cache-install.ts
 create mode 100644 src/main/ssh/ssh-relay-native-deps-cache-shell.test.ts
 create mode 100644 src/main/ssh/ssh-relay-native-deps-cache.test.ts
 create mode 100644 src/main/ssh/ssh-relay-native-deps-cache.ts

diff --git a/src/main/ssh/remote-install-gc.ts b/src/main/ssh/remote-install-gc.ts
index b14b7e11fba..a76d119cf8a 100644
--- a/src/main/ssh/remote-install-gc.ts
+++ b/src/main/ssh/remote-install-gc.ts
@@ -22,6 +22,7 @@ import {
   tryAcquireRelayGcClaim
 } from './ssh-relay-gc-claim'
 import { cleanupRelayGcTombstones } from './ssh-relay-gc-tombstone'
+import { gcRelayNativeDepsCache } from './ssh-relay-native-deps-cache-gc'
 import {
   listRemoteInstallBaseDirsCommand,
   MAX_RELAY_GC_LISTING_ENTRIES,
@@ -245,12 +246,25 @@ export async function gcOldRelayVersions(
   options?: {
     windowsNodePath?: string
     windowsSockNames?: string[]
+    /**
+     * Cache entries this connection depends on, whether or not it links to them. Also the gate:
+     * a caller that could not compute a key is not using the shared-cache model on this host, and
+     * a pass only ever collects what its own model created (see `remote-install-model.ts`).
+     */
+    nativeDepsCacheKeys?: readonly string[]
   }
 ): Promise<void> {
   await gcOldRemoteInstallVersions(conn, RELAY_INSTALL_MODEL, remoteHome, currentDirAbsPath, host, {
     ...options,
     isDirLive: (dir) => hasLiveRelaySocket(conn, dir, host, options)
   })
+  // Why after and not before: version-dir removal is what turns a cache entry unreferenced, so
+  // running it second lets one pass reclaim both instead of leaving the tree for the next connect.
+  if (options?.nativeDepsCacheKeys?.length) {
+    await gcRelayNativeDepsCache(conn, host, remoteHome, {
+      pinnedKeys: options.nativeDepsCacheKeys
+    }).catch(() => {})
+  }
 }
 
 async function hasLiveRelaySocket(
diff --git a/src/main/ssh/ssh-relay-deploy.ts b/src/main/ssh/ssh-relay-deploy.ts
index 310bce2d4ac..54c64a80b20 100644
--- a/src/main/ssh/ssh-relay-deploy.ts
+++ b/src/main/ssh/ssh-relay-deploy.ts
@@ -33,6 +33,12 @@ import {
   abandonInstall,
   gcOldRelayVersions
 } from './ssh-relay-versioned-install'
+import {
+  attachRelayNativeDepsCache,
+  promoteRelayNativeDepsCache,
+  resolveRelayNativeDepsCacheKey,
+  type RelayNativeDepsCacheContext
+} from './ssh-relay-native-deps-cache-install'
 import { acquireInstallLock } from './ssh-relay-install-lock'
 import { tryAcquireRelayRepairLock } from './ssh-relay-repair-lock'
 import {
@@ -522,7 +528,8 @@ async function deployAndLaunchRelayAttempt(
             nodePath,
             deploySignal,
             [],
-            launchNamespace
+            launchNamespace,
+            remoteHome
           )
           console.log('[ssh-relay] Native deps installed')
 
@@ -598,7 +605,16 @@ async function deployAndLaunchRelayAttempt(
     .then(() =>
       gcOldRelayVersions(conn, remoteHome, remoteRelayDir, hostPlatform, {
         windowsNodePath: launched.nodePath,
-        windowsSockNames: [relaySocketNameForInstanceId(relayInstanceId)]
+        windowsSockNames: [relaySocketNameForInstanceId(relayInstanceId)],
+        // Why pin rather than rely on the symlink alone: a deploy that fell back to a
+        // per-directory install has no reference to show, and its key must still survive.
+        nativeDepsCacheKeys: [
+          resolveRelayNativeDepsCacheKey({
+            platform,
+            localRelayDir,
+            deps: RELAY_NATIVE_DEPS
+          })
+        ].filter((key): key is string => key !== null)
       })
     )
     .catch(() => {})
@@ -1015,8 +1031,27 @@ async function installNativeDeps(
   nodePath: string,
   signal?: AbortSignal,
   resetDeps: RelayNativeDepName[] = [],
-  namespace?: RelayInstallNamespace
+  namespace?: RelayInstallNamespace,
+  remoteHome?: string
 ): Promise<void> {
+  // Why a repair opts out: reset does `rm -rf node_modules/node-pty`, and through a shared
+  // symlink that is every relay on the host losing its addon. Repairs detach and install
+  // privately instead (the install command's own prefix drops the link).
+  const localRelayDir = resetDeps.length === 0 && remoteHome ? getLocalRelayPath(platform) : null
+  const cacheContext: RelayNativeDepsCacheContext | null =
+    remoteHome && localRelayDir
+      ? {
+          hostPlatform,
+          remoteHome,
+          relayDir: remoteDir,
+          platform,
+          localRelayDir,
+          deps: RELAY_NATIVE_DEPS,
+          signal
+        }
+      : null
+  const cache = cacheContext ? await attachRelayNativeDepsCache(conn, cacheContext) : null
+
   const writeRelayPackageJson = async (deps: Record<string, string>): Promise<void> => {
     await writeRelayFile(
       conn,
@@ -1044,13 +1079,32 @@ async function installNativeDeps(
   // Why: type:commonjs pins module resolution against Node default flips or a remote ~/.npmrc type=module.
   await writeRelayPackageJson(RELAY_NATIVE_DEPS)
 
+  if (cache?.mode === 'linked') {
+    await makeNodePtySpawnHelperExecutable(conn, remoteDir, hostPlatform, signal)
+    const linkedProbe = await probeInstalledNativeDeps(
+      conn,
+      remoteDir,
+      hostPlatform,
+      nodePath,
+      signal
+    )
+    if (linkedProbe.available) {
+      return
+    }
+    // Why fall through rather than repair the entry: it is shared, and something else on this
+    // host may be running out of it right now. This directory installs its own copy instead.
+    console.warn(
+      `[ssh-relay][NATIVE-CACHE-UNUSABLE] shared entry ${cache.key} did not load at ${remoteDir} (${platform}); installing per-directory. stderr=${linkedProbe.stderr.trim().slice(-500)}`
+    )
+  }
+
   try {
     const installArgs = Object.entries(RELAY_NATIVE_DEPS)
       .map(([dep, version]) => shellEscape(`${dep}@${version}`))
       .join(' ')
     // Why: npm reports a present package as up to date even if a native file was deleted; reset only deps the probe found broken.
     const resetCommand = resetNativeDepsCommand(hostPlatform, resetDeps)
-    const resetPrefix = resetCommand ? `${resetCommand}; ` : ''
+    const resetPrefix = `${detachSharedNativeDepsCommand(hostPlatform)}${resetCommand ? `${resetCommand}; ` : ''}`
     const command = isWindowsRemoteHost(hostPlatform)
       ? commandWithNodePath(
           hostPlatform,
@@ -1159,6 +1213,12 @@ async function installNativeDeps(
     }
   }
 
+  // Why promotion is gated on the probe and not on npm's exit code: an entry is shared, so the
+  // only evidence worth publishing is this host having loaded both addons out of that tree.
+  if (probe.available && cacheContext && cache) {
+    await promoteRelayNativeDepsCache(conn, cacheContext, cache.key)
+  }
+
   // MISSING is non-fatal by design: the relay still serves fs/git/preflight; only native-backed ops fail on hosts that can't build the addons.
   if (!probe.available) {
     console.warn(
@@ -1167,6 +1227,20 @@ async function installNativeDeps(
   }
 }
 
+/**
+ * Drop a shared-cache symlink before anything writes into `node_modules`.
+ *
+ * Why it prefixes every install rather than living in its own exec: `rm -rf node_modules/node-pty`
+ * and `npm install` both follow the link, so a repair on one relay directory would otherwise
+ * rewrite the tree every other relay on the host is running out of.
+ */
+function detachSharedNativeDepsCommand(hostPlatform: RemoteHostPlatform): string {
+  if (isWindowsRemoteHost(hostPlatform)) {
+    return ''
+  }
+  return 'if [ -L node_modules ]; then rm -f node_modules; fi; '
+}
+
 function resetNativeDepsCommand(
   hostPlatform: RemoteHostPlatform,
   resetDeps: RelayNativeDepName[]
@@ -1241,7 +1315,7 @@ async function installNativeDepsWithoutNodePty(
       hostPlatform,
       nodePath,
       remoteDir,
-      `${resetCommand}; npm install --ignore-scripts=false --omit=dev --no-audit --no-fund ${installArgs} 2>&1`
+      `${detachSharedNativeDepsCommand(hostPlatform)}${resetCommand}; npm install --ignore-scripts=false --omit=dev --no-audit --no-fund ${installArgs} 2>&1`
     ),
     { timeoutMs: NATIVE_DEPS_COMMAND_TIMEOUT_MS, signal }
   )
diff --git a/src/main/ssh/ssh-relay-native-deps-cache-commands.ts b/src/main/ssh/ssh-relay-native-deps-cache-commands.ts
new file mode 100644
index 00000000000..52d09de1b19
--- /dev/null
+++ b/src/main/ssh/ssh-relay-native-deps-cache-commands.ts
@@ -0,0 +1,210 @@
+/**
+ * The remote shell for the shared native-deps cache (`ssh-relay-native-deps-cache.ts`).
+ *
+ * Every script here is POSIX `sh` and answers with one token, because the only alternative to a
+ * token is inferring success from an exit status the transport can also produce. A command that
+ * cannot answer is a cache miss, never a licence to delete: `MISS` and `NOT_PROMOTED` both leave
+ * the relay directory owning its own `node_modules`, which is exactly today's behaviour.
+ */
+import { shellEscape } from './ssh-connection-utils'
+import {
+  RELAY_NATIVE_DEPS_CACHE_COMPLETE_NAME,
+  RELAY_NATIVE_DEPS_CACHE_TOMBSTONE_PREFIX,
+  relayNativeDepsCacheBaseDir,
+  relayNativeDepsCacheEntryDir,
+  relayNativeDepsCacheNodeModulesPath,
+  remoteInstallRootDir
+} from './ssh-relay-native-deps-cache'
+import { joinRemotePath, type RemoteHostPlatform } from './ssh-remote-platform'
+
+export const RELAY_NATIVE_CACHE_LINKED = '__ORCA_NATIVE_CACHE__LINKED'
+export const RELAY_NATIVE_CACHE_SEEDED = '__ORCA_NATIVE_CACHE__SEEDED'
+export const RELAY_NATIVE_CACHE_MISS = '__ORCA_NATIVE_CACHE__MISS'
+export const RELAY_NATIVE_CACHE_PROMOTED = '__ORCA_NATIVE_CACHE__PROMOTED'
+export const RELAY_NATIVE_CACHE_NOT_PROMOTED = '__ORCA_NATIVE_CACHE__NOT_PROMOTED'
+export const RELAY_NATIVE_CACHE_LIST_OK = '__ORCA_NATIVE_CACHE__LIST_OK'
+export const RELAY_NATIVE_CACHE_REFS_OK = '__ORCA_NATIVE_CACHE__REFS_OK'
+export const RELAY_NATIVE_CACHE_REFS_ERR = '__ORCA_NATIVE_CACHE__REFS_ERR'
+
+/**
+ * How old an entry without `.deps-complete` must be before another deploy may reclaim it. Well
+ * past the 15-minute deploy ceiling, so a live installer is never mistaken for a crashed one.
+ * Reclaiming is safe at any age in principle — nothing links an entry until it is complete — but
+ * the margin is what keeps that argument from resting on a single `[ -f ]`.
+ */
+const CACHE_TAKEOVER_MINUTES = 120
+
+/** A crashed GC pass leaves a tombstone; it drains once no in-flight pass could still own it. */
+const CACHE_TOMBSTONE_SWEEP_MINUTES = 30
+
+/** Bounds every listing, matching `MAX_RELAY_GC_LISTING_ENTRIES`' role for version dirs. */
+export const MAX_RELAY_NATIVE_CACHE_LISTING_ENTRIES = 64
+
+export type RelayNativeDepsCachePaths = {
+  host: RemoteHostPlatform
+  remoteHome: string
+  relayDir: string
+  key: string
+}
+
+function cachePaths(paths: RelayNativeDepsCachePaths): {
+  base: string
+  entry: string
+  target: string
+  nodeModules: string
+  root: string
+} {
+  const { host, remoteHome, relayDir, key } = paths
+  return {
+    base: relayNativeDepsCacheBaseDir(host, remoteHome),
+    entry: relayNativeDepsCacheEntryDir(host, remoteHome, key),
+    target: relayNativeDepsCacheNodeModulesPath(host, remoteHome, key),
+    nodeModules: joinRemotePath(host, relayDir, 'node_modules'),
+    root: remoteInstallRootDir(host, remoteHome)
+  }
+}
+
+/**
+ * Link a complete entry into the relay directory, or seed a private tree from a sibling relay
+ * directory that already has a matching one.
+ *
+ * The seed exists so the first deploy after this ships does not recompile once more on a host
+ * that already paid for the compile. It is not trusted: the copy is a plain private install until
+ * the normal probe loads both addons, and only then is it promoted.
+ */
+export function ensureRelayNativeDepsCacheCommand(
+  paths: RelayNativeDepsCachePaths,
+  deps: Readonly<Record<string, string>>
+): string {
+  const { entry, target, nodeModules, root } = cachePaths(paths)
+  // Why grep the sibling's manifest: an older Orca pinned different versions, and a
+  // toolchain-skip host wrote one with node-pty removed. Both must fail to qualify.
+  const depGuards = Object.entries(deps).map(
+    ([name, version]) => `grep -F -q ${shellEscape(`"${name}":"${version}"`)} "$pj" || continue`
+  )
+  return [
+    `cache=${shellEscape(entry)}`,
+    `target=${shellEscape(target)}`,
+    `nm=${shellEscape(nodeModules)}`,
+    `root=${shellEscape(root)}`,
+    `if [ -f "$cache/${RELAY_NATIVE_DEPS_CACHE_COMPLETE_NAME}" ] && [ -d "$target" ]; then`,
+    '  if [ -L "$nm" ]; then',
+    `    if [ "$(readlink "$nm" 2>/dev/null)" = "$target" ]; then printf '%s\\n' ${RELAY_NATIVE_CACHE_LINKED}; exit 0; fi`,
+    '    rm -f "$nm" 2>/dev/null || true',
+    '  fi',
+    `  if [ ! -e "$nm" ] && ln -s "$target" "$nm" 2>/dev/null; then printf '%s\\n' ${RELAY_NATIVE_CACHE_LINKED}; exit 0; fi`,
+    `  printf '%s\\n' ${RELAY_NATIVE_CACHE_MISS}; exit 0`,
+    'fi',
+    'if [ ! -e "$nm" ] && [ ! -L "$nm" ]; then',
+    '  for cand in "$root"/relay-*/node_modules; do',
+    '    [ -d "$cand" ] || continue',
+    '    [ -L "$cand" ] && continue',
+    '    [ -d "$cand/node-pty" ] || continue',
+    '    [ -d "$cand/@parcel/watcher" ] || continue',
+    '    pj="${cand%/node_modules}/package.json"',
+    '    [ -f "$pj" ] || continue',
+    ...depGuards.map((guard) => `    ${guard}`),
+    '    seed="$nm.seed.$$"',
+    '    rm -rf "$seed" 2>/dev/null || true',
+    '    if cp -Rp "$cand" "$seed" 2>/dev/null && mv "$seed" "$nm" 2>/dev/null; then',
+    `      printf '%s\\n' ${RELAY_NATIVE_CACHE_SEEDED}; exit 0`,
+    '    fi',
+    '    rm -rf "$seed" 2>/dev/null || true',
+    '    break',
+    '  done',
+    'fi',
+    `printf '%s\\n' ${RELAY_NATIVE_CACHE_MISS}`
+  ].join('\n')
+}
+
+/**
+ * Publish a probe-verified private tree as the shared entry, then link the relay directory to it.
+ *
+ * `mkdir "$cache"` is the election: exactly one deploy creates the directory, and a loser keeps
+ * its own tree rather than writing into someone else's. `.deps-complete` is written last, after
+ * the symlink exists, so an entry is never linkable before it is referenced.
+ */
+export function promoteRelayNativeDepsCacheCommand(paths: RelayNativeDepsCachePaths): string {
+  const { base, entry, target, nodeModules } = cachePaths(paths)
+  const notPromoted = `printf '%s\\n' ${RELAY_NATIVE_CACHE_NOT_PROMOTED}`
+  return [
+    `base=${shellEscape(base)}`,
+    `cache=${shellEscape(entry)}`,
+    `target=${shellEscape(target)}`,
+    `nm=${shellEscape(nodeModules)}`,
+    `[ -d "$nm" ] || { ${notPromoted}; exit 0; }`,
+    `if [ -L "$nm" ]; then ${notPromoted}; exit 0; fi`,
+    `mkdir -p "$base" 2>/dev/null || { ${notPromoted}; exit 0; }`,
+    `if [ -d "$cache" ] && [ ! -f "$cache/${RELAY_NATIVE_DEPS_CACHE_COMPLETE_NAME}" ]; then`,
+    `  if [ -n "$(find "$cache" -maxdepth 0 -mmin +${CACHE_TAKEOVER_MINUTES} 2>/dev/null)" ]; then`,
+    '    rm -rf "$cache" 2>/dev/null || true',
+    '  fi',
+    'fi',
+    `mkdir "$cache" 2>/dev/null || { ${notPromoted}; exit 0; }`,
+    'if mv "$nm" "$target" 2>/dev/null; then',
+    '  if ln -s "$target" "$nm" 2>/dev/null; then',
+    `    : > "$cache/${RELAY_NATIVE_DEPS_CACHE_COMPLETE_NAME}" 2>/dev/null || true`,
+    `    if [ -f "$cache/${RELAY_NATIVE_DEPS_CACHE_COMPLETE_NAME}" ]; then printf '%s\\n' ${RELAY_NATIVE_CACHE_PROMOTED}; exit 0; fi`,
+    '  fi',
+    '  rm -f "$nm" 2>/dev/null || true',
+    // Why the rm is conditional on the move back: a failed restore leaves the only copy of the
+    // tree inside an incomplete entry. Deleting it there would cost the relay its native deps.
+    '  if mv "$target" "$nm" 2>/dev/null; then rm -rf "$cache" 2>/dev/null || true; fi',
+    `  ${notPromoted}; exit 0`,
+    'fi',
+    'rm -rf "$cache" 2>/dev/null || true',
+    notPromoted
+  ].join('\n')
+}
+
+/** Complete entries only; an incomplete one belongs to an installer, not to GC. */
+export function listRelayNativeDepsCacheEntriesCommand(
+  host: RemoteHostPlatform,
+  remoteHome: string
+): string {
+  const base = relayNativeDepsCacheBaseDir(host, remoteHome)
+  return [
+    `base=${shellEscape(base)}`,
+    `[ -d "$base" ] || { printf '%s\\n' ${RELAY_NATIVE_CACHE_LIST_OK}; exit 0; }`,
+    `find "$base" -maxdepth 1 -name ${shellEscape(`${RELAY_NATIVE_DEPS_CACHE_TOMBSTONE_PREFIX}*`)} -mmin +${CACHE_TOMBSTONE_SWEEP_MINUTES} -exec rm -rf {} + 2>/dev/null || true`,
+    'n=0',
+    'for d in "$base"/*/; do',
+    '  [ -d "$d" ] || continue',
+    `  [ -f "$d${RELAY_NATIVE_DEPS_CACHE_COMPLETE_NAME}" ] || continue`,
+    '  name=${d%/}',
+    '  name=${name##*/}',
+    `  printf 'ENTRY %s\\n' "$name"`,
+    '  n=$((n+1))',
+    `  if [ "$n" -ge ${MAX_RELAY_NATIVE_CACHE_LISTING_ENTRIES} ]; then break; fi`,
+    'done',
+    `printf '%s\\n' ${RELAY_NATIVE_CACHE_LIST_OK}`
+  ].join('\n')
+}
+
+/**
+ * Every symlinked `node_modules` under `~/.orca-remote/`, as its raw target.
+ *
+ * The scan is deliberately wider than `relay-*`: a directory this client does not recognise still
+ * counts as a referrer. An unreadable link or an overrun listing answers `REFS_ERR`, which stops
+ * the whole pass — an incomplete reference list is not evidence that anything is unreferenced.
+ */
+export function listRelayNativeDepsCacheReferencesCommand(
+  host: RemoteHostPlatform,
+  remoteHome: string
+): string {
+  const root = remoteInstallRootDir(host, remoteHome)
+  return [
+    `root=${shellEscape(root)}`,
+    `[ -d "$root" ] || { printf '%s\\n' ${RELAY_NATIVE_CACHE_REFS_OK}; exit 0; }`,
+    'n=0',
+    'for d in "$root"/*/node_modules; do',
+    '  [ -L "$d" ] || continue',
+    '  t=$(readlink "$d" 2>/dev/null) || t=""',
+    `  if [ -z "$t" ]; then printf '%s\\n' ${RELAY_NATIVE_CACHE_REFS_ERR}; exit 0; fi`,
+    `  printf 'REF %s\\n' "$t"`,
+    '  n=$((n+1))',
+    `  if [ "$n" -ge ${MAX_RELAY_NATIVE_CACHE_LISTING_ENTRIES} ]; then printf '%s\\n' ${RELAY_NATIVE_CACHE_REFS_ERR}; exit 0; fi`,
+    'done',
+    `printf '%s\\n' ${RELAY_NATIVE_CACHE_REFS_OK}`
+  ].join('\n')
+}
diff --git a/src/main/ssh/ssh-relay-native-deps-cache-deploy.test.ts b/src/main/ssh/ssh-relay-native-deps-cache-deploy.test.ts
new file mode 100644
index 00000000000..61e6133b9a5
--- /dev/null
+++ b/src/main/ssh/ssh-relay-native-deps-cache-deploy.test.ts
@@ -0,0 +1,301 @@
+// The claim this file has to hold up: a second deploy of a *different bundle* to the same host
+// runs no `npm install` at all. Everything else here is the fallback ladder underneath it — a
+// host that cannot link, cannot publish, or answers nothing still deploys exactly as before.
+
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as RelayInstallMarkerModule from './ssh-relay-install-marker'
+
+vi.mock('electron', () => ({
+  app: { getAppPath: () => '/mock/app' }
+}))
+
+vi.mock('fs', () => ({
+  existsSync: vi.fn().mockReturnValue(true),
+  readFileSync: vi.fn().mockReturnValue('0.1.0+testhash')
+}))
+
+vi.mock('./relay-protocol', () => ({
+  RELAY_VERSION: '0.1.0',
+  RELAY_REMOTE_DIR: '.orca-remote',
+  parseUnameToRelayPlatform: vi.fn().mockReturnValue('linux-x64'),
+  RELAY_SENTINEL: 'ORCA-RELAY v0.1.0 READY\n',
+  RELAY_SENTINEL_TIMEOUT_MS: 10_000
+}))
+
+vi.mock('./ssh-relay-deploy-helpers', () => ({
+  uploadDirectory: vi.fn().mockResolvedValue(undefined),
+  waitForSentinel: vi.fn().mockResolvedValue({
+    write: vi.fn(),
+    onData: vi.fn(),
+    onClose: vi.fn()
+  }),
+  isUnconfirmedSshCommandTermination: (error: unknown) =>
+    error instanceof Error &&
+    (error as Error & { sshChannelCloseConfirmed?: boolean }).sshChannelCloseConfirmed === false,
+  execCommand: vi.fn()
+}))
+
+vi.mock('./ssh-remote-node-resolution', () => ({
+  resolveRemoteNodePath: vi.fn().mockResolvedValue('/usr/bin/node')
+}))
+
+vi.mock('./ssh-relay-install-marker', async (importOriginal) => ({
+  ...(await importOriginal<typeof RelayInstallMarkerModule>()),
+  createRelayInstallMarkerFileName: () => '.sftp-namespace-00000000000000000000000000000000'
+}))
+
+vi.mock('./ssh-relay-versioned-install', () => ({
+  readLocalFullVersion: vi.fn().mockReturnValue('0.1.0+testhash'),
+  computeRemoteRelayDir: (home: string, v: string) => `${home}/.orca-remote/relay-${v}`,
+  isRelayAlreadyInstalled: vi.fn().mockResolvedValue(false),
+  finalizeInstall: vi.fn().mockResolvedValue(undefined),
+  abandonInstall: vi.fn().mockResolvedValue(undefined),
+  gcOldRelayVersions: vi.fn().mockResolvedValue(undefined)
+}))
+
+vi.mock('./ssh-relay-install-lock', () => ({
+  acquireInstallLock: vi.fn().mockResolvedValue(undefined),
+  RELAY_INSTALL_LOCK_NAME: '.install-lock'
+}))
+
+vi.mock('./ssh-relay-repair-lock', () => ({
+  tryAcquireRelayRepairLock: vi.fn().mockResolvedValue('acquired')
+}))
+
+vi.mock('./ssh-relay-gc-claim', () => ({
+  releaseRelayGcClaimWithRetry: vi.fn().mockResolvedValue('released'),
+  tryAcquireRelayGcClaim: vi.fn().mockResolvedValue('launch-token'),
+  waitForRelayGcClaimRelease: vi.fn().mockResolvedValue(undefined)
+}))
+
+import { deployAndLaunchRelay } from './ssh-relay-deploy'
+import { execCommand, uploadDirectory } from './ssh-relay-deploy-helpers'
+import { parseUnameToRelayPlatform } from './relay-protocol'
+import { isRelayAlreadyInstalled, gcOldRelayVersions } from './ssh-relay-versioned-install'
+import {
+  makeMockConnection,
+  makeStagedFirstInstallExecPrefix,
+  type ExecResponse,
+  type SftpWriteCapture
+} from './ssh-relay-native-deps-install-fixture'
+import {
+  RELAY_NATIVE_CACHE_LINKED,
+  RELAY_NATIVE_CACHE_MISS,
+  RELAY_NATIVE_CACHE_PROMOTED
+} from './ssh-relay-native-deps-cache-commands'
+
+// Everything after the probe on a healthy install: stderr cleanup, stage cleanup, launch.
+const LAUNCH_TAIL: ExecResponse[] = ['', 'DEAD', '', 'READY']
+
+describe('relay native-deps cache on the deploy path', () => {
+  let warnSpy: ReturnType<typeof vi.spyOn>
+  const sftpCapture: SftpWriteCapture = { paths: [], contents: {}, execCallCountAtWrite: {} }
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    vi.mocked(execCommand).mockReset().mockResolvedValue('')
+    vi.mocked(uploadDirectory).mockResolvedValue(undefined)
+    sftpCapture.paths.length = 0
+    for (const k of Object.keys(sftpCapture.contents)) {
+      delete sftpCapture.contents[k]
+    }
+    for (const k of Object.keys(sftpCapture.execCallCountAtWrite)) {
+      delete sftpCapture.execCallCountAtWrite[k]
+    }
+    vi.mocked(parseUnameToRelayPlatform).mockReturnValue('linux-x64')
+    vi.mocked(isRelayAlreadyInstalled).mockResolvedValue(false)
+    warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
+  })
+
+  afterEach(() => {
+    warnSpy.mockRestore()
+  })
+
+  function feed(responses: ExecResponse[]): void {
+    const mockExec = vi.mocked(execCommand)
+    for (const r of responses) {
+      if (typeof r === 'string') {
+        mockExec.mockResolvedValueOnce(r)
+      } else {
+        mockExec.mockRejectedValueOnce(new Error(r.reject))
+      }
+    }
+  }
+
+  function execCommands(): string[] {
+    return vi.mocked(execCommand).mock.calls.map(([, command]) => command)
+  }
+
+  /**
+   * A first install whose cache probe answers `cacheAnswer`. The prefix's last slot is the cache
+   * probe, so overriding it is the only difference between a hit and a miss.
+   */
+  function firstInstall(cacheAnswer: string, tail: ExecResponse[]): ExecResponse[] {
+    const prefix = makeStagedFirstInstallExecPrefix()
+    prefix[prefix.length - 1] = cacheAnswer
+    return [...prefix, ...tail]
+  }
+
+  it('runs no npm install when a different bundle finds a complete entry on the host', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    feed(
+      firstInstall(RELAY_NATIVE_CACHE_LINKED, [
+        '', // chmod prebuilds, through the symlink
+        'ORCA-NPTY-PROBE-OK\n',
+        '', // rm probe stderr
+        ...LAUNCH_TAIL
+      ])
+    )
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+
+    const commands = execCommands()
+    expect(commands.some((c) => c.includes('npm install'))).toBe(false)
+    expect(commands.some((c) => c.includes('npm rebuild'))).toBe(false)
+    // The bundle still gets its own directory; only the native tree is shared.
+    expect(commands.some((c) => c.includes('.orca-remote/relay-0.1.0+testhash'))).toBe(true)
+    expect(commands.some((c) => /\.orca-remote\/native\/linux-x64-[0-9a-f]{16}/.test(c))).toBe(true)
+  })
+
+  it('still installs on the first deploy, then publishes the tree the probe loaded', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    feed(
+      firstInstall(RELAY_NATIVE_CACHE_MISS, [
+        '', // npm install
+        '', // chmod prebuilds
+        'ORCA-NPTY-PROBE-OK\n',
+        '', // rm probe stderr
+        RELAY_NATIVE_CACHE_PROMOTED,
+        ...LAUNCH_TAIL
+      ])
+    )
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+
+    const commands = execCommands()
+    const install = commands.find((c) => c.includes('npm install')) ?? ''
+    expect(install).toContain('node-pty@1.1.0')
+    // The install runs in the relay directory; publication moves the finished tree afterwards.
+    expect(install).toContain('.orca-remote/relay-0.1.0+testhash')
+    const promote = commands.findLast((c) => c.includes('mkdir "$cache"')) ?? ''
+    expect(promote).toContain(': > "$cache/.deps-complete"')
+  })
+
+  it('does not publish a tree the probe could not load', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    feed(
+      firstInstall(RELAY_NATIVE_CACHE_MISS, [
+        '', // npm install
+        '', // chmod prebuilds
+        'MISSING\n',
+        '', // cat probe stderr
+        '', // rm probe stderr
+        '', // npm rebuild
+        '', // chmod prebuilds after rebuild
+        'MISSING\n',
+        '', // cat stderr after rebuild
+        '', // rm stderr after rebuild
+        ...LAUNCH_TAIL
+      ])
+    )
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+
+    expect(execCommands().some((c) => c.includes('mkdir "$cache"'))).toBe(false)
+  })
+
+  it('installs per-directory when the host cannot answer the cache probe at all', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    const prefix = makeStagedFirstInstallExecPrefix()
+    prefix[prefix.length - 1] = { reject: 'mkdir: Read-only file system' }
+    feed([
+      ...prefix,
+      '', // npm install still runs
+      '', // chmod prebuilds
+      'ORCA-NPTY-PROBE-OK\n',
+      '', // rm probe stderr
+      '', // publication is attempted and answers nothing
+      ...LAUNCH_TAIL
+    ])
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+
+    expect(execCommands().some((c) => c.includes('npm install'))).toBe(true)
+  })
+
+  it('falls back to its own install when a linked entry does not load on this host', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    feed(
+      firstInstall(RELAY_NATIVE_CACHE_LINKED, [
+        '', // chmod prebuilds
+        'MISSING\n', // the shared tree does not load here
+        '', // cat probe stderr
+        '', // rm probe stderr
+        '', // npm install, privately, after the prefix detaches the symlink
+        '', // chmod prebuilds
+        'ORCA-NPTY-PROBE-OK\n',
+        '', // rm probe stderr
+        '', // promotion attempt (the entry already exists, so it is declined)
+        ...LAUNCH_TAIL
+      ])
+    )
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+
+    const install = execCommands().find((c) => c.includes('npm install')) ?? ''
+    // Why this prefix is the whole point: npm follows the symlink, and every other relay on the
+    // host is running out of the tree on the other side of it.
+    expect(install).toContain('if [ -L node_modules ]; then rm -f node_modules; fi;')
+    const warnings = warnSpy.mock.calls.map((args) => String(args[0] ?? ''))
+    expect(warnings.some((m) => m.includes('[ssh-relay][NATIVE-CACHE-UNUSABLE]'))).toBe(true)
+  })
+
+  it('detaches rather than resetting through the link when repairing an installed relay', async () => {
+    vi.mocked(isRelayAlreadyInstalled).mockResolvedValue(true)
+    const conn = makeMockConnection(sftpCapture)
+    const bothMissing = 'ORCA-NATIVE-DEPS-MISSING:node-pty,@parcel/watcher\nMISSING'
+    feed([
+      '__ORCA_REMOTE_PLATFORM__ Linux x86_64',
+      '/home/u',
+      bothMissing, // health probe before the repair lock
+      bothMissing, // re-probe under the lock
+      '', // install-owner marker
+      '', // npm install
+      '', // chmod prebuilds
+      'ORCA-NPTY-PROBE-OK\n',
+      '', // rm probe stderr
+      'DEAD',
+      '', // publish the per-launch credential
+      'READY'
+    ])
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+
+    const commands = execCommands()
+    // A repair never consults the shared entry: its reset would rewrite a tree it does not own.
+    expect(commands.some((c) => c.includes('.orca-remote/native/'))).toBe(false)
+    const install = commands.find((c) => c.includes('npm install')) ?? ''
+    expect(install).toContain('if [ -L node_modules ]; then rm -f node_modules; fi;')
+    expect(install).toContain("rm -rf 'node_modules/node-pty'")
+  })
+
+  it('pins its own key so a GC pass cannot collect the entry this connection depends on', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    feed(
+      firstInstall(RELAY_NATIVE_CACHE_LINKED, [
+        '', // chmod prebuilds
+        'ORCA-NPTY-PROBE-OK\n',
+        '', // rm probe stderr
+        ...LAUNCH_TAIL
+      ])
+    )
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+    await vi.waitFor(() => expect(vi.mocked(gcOldRelayVersions)).toHaveBeenCalled())
+
+    const options = vi.mocked(gcOldRelayVersions).mock.calls.at(-1)?.[4]
+    expect(options?.nativeDepsCacheKeys).toEqual([
+      expect.stringMatching(/^linux-x64-[0-9a-f]{16}$/)
+    ])
+  })
+})
diff --git a/src/main/ssh/ssh-relay-native-deps-cache-gc.ts b/src/main/ssh/ssh-relay-native-deps-cache-gc.ts
new file mode 100644
index 00000000000..e2349ad1bbf
--- /dev/null
+++ b/src/main/ssh/ssh-relay-native-deps-cache-gc.ts
@@ -0,0 +1,243 @@
+/**
+ * Garbage collection for the shared native-deps cache.
+ *
+ * This is the part that can hurt: a cache entry is the only copy of node-pty for every relay
+ * directory that links to it, so a wrong deletion takes native modules away from a running relay.
+ * The discipline is `remote-install-gc.ts`': **an unanswered probe blocks deletion.** A listing
+ * that does not end in its own OK token, a symlink whose target will not read, a reference whose
+ * shape this client does not recognise — each aborts the entire pass rather than narrowing it.
+ * Loss of contact is never evidence that a tree is unreferenced
+ * (`docs/reference/ssh-execution-boundary.md`).
+ *
+ * Deletion is then the same three-step move `remote-install-gc.ts` uses for version dirs: rename
+ * to a tombstone, re-read the references under the rename, and only then remove. A deploy that
+ * linked the entry between the first listing and the rename shows up in the recheck, and its tree
+ * is moved back.
+ */
+import type { SshConnection } from './ssh-connection'
+import { execCommand } from './ssh-relay-deploy-helpers'
+import {
+  isRelayNativeDepsCacheEntryName,
+  relayNativeDepsCacheBaseDir,
+  relayNativeDepsCacheNodeModulesPath,
+  supportsRelayNativeDepsCache,
+  RELAY_NATIVE_DEPS_CACHE_TOMBSTONE_PREFIX
+} from './ssh-relay-native-deps-cache'
+import {
+  listRelayNativeDepsCacheEntriesCommand,
+  listRelayNativeDepsCacheReferencesCommand,
+  MAX_RELAY_NATIVE_CACHE_LISTING_ENTRIES,
+  RELAY_NATIVE_CACHE_LIST_OK,
+  RELAY_NATIVE_CACHE_REFS_OK
+} from './ssh-relay-native-deps-cache-commands'
+import { moveRemoteTreeCommand, removeRemoteTreeCommand } from './ssh-remote-commands'
+import { joinRemotePath, type RemoteHostPlatform } from './ssh-remote-platform'
+
+type ReferenceScan =
+  | { readable: true; referencedKeys: Set<string> }
+  /** Anything this client could not fully account for. No entry may be deleted on it. */
+  | { readable: false }
+
+function execHostCommand(
+  conn: SshConnection,
+  host: RemoteHostPlatform,
+  command: string
+): Promise<string> {
+  return execCommand(conn, command, { wrapCommand: host.commandDialect !== 'powershell' })
+}
+
+/**
+ * Remove complete cache entries that nothing links to.
+ *
+ * `pinnedKeys` is the connection's own key. The referencing symlink is written before the entry
+ * becomes listable, so a live entry is already protected by the reference scan; the pin is there
+ * so a deploy that fell back to a per-directory install cannot have its key deleted underneath a
+ * retry either.
+ */
+export async function gcRelayNativeDepsCache(
+  conn: SshConnection,
+  host: RemoteHostPlatform,
+  remoteHome: string,
+  options?: { pinnedKeys?: readonly string[] }
+): Promise<void> {
+  if (!supportsRelayNativeDepsCache(host)) {
+    return
+  }
+  const base = relayNativeDepsCacheBaseDir(host, remoteHome)
+  let entries: string[]
+  try {
+    entries = parseCacheEntryListing(
+      await execHostCommand(conn, host, listRelayNativeDepsCacheEntriesCommand(host, remoteHome))
+    )
+  } catch {
+    return
+  }
+  if (entries.length === 0) {
+    return
+  }
+  const scan = await scanCacheReferences(conn, host, remoteHome)
+  if (!scan.readable) {
+    return
+  }
+  const pinned = new Set(options?.pinnedKeys ?? [])
+  const candidates = entries.filter((key) => !scan.referencedKeys.has(key) && !pinned.has(key))
+  const removed: string[] = []
+  for (const key of candidates) {
+    if (await removeUnreferencedCacheEntry(conn, host, remoteHome, base, key)) {
+      removed.push(key)
+    }
+  }
+  if (removed.length > 0) {
+    console.log(
+      `[relay] native-deps cache GC: removed ${removed.length} entry(ies): ${removed.join(', ')}`
+    )
+  }
+}
+
+async function removeUnreferencedCacheEntry(
+  conn: SshConnection,
+  host: RemoteHostPlatform,
+  remoteHome: string,
+  base: string,
+  key: string
+): Promise<boolean> {
+  const entryDir = joinRemotePath(host, base, key)
+  const tombstone = joinRemotePath(
+    host,
+    base,
+    `${RELAY_NATIVE_DEPS_CACHE_TOMBSTONE_PREFIX}${key}.${process.pid}.${Date.now()}`
+  )
+  try {
+    const moved = await execHostCommand(
+      conn,
+      host,
+      moveRemoteTreeCommand(host, entryDir, tombstone)
+    )
+    if (moved.trim() !== 'MOVED') {
+      return false
+    }
+  } catch {
+    return false
+  }
+  // Why recheck under the rename: a deploy that read `.deps-complete` before it moved can still
+  // be creating its symlink. Its reference now names a path that no longer exists, so restoring
+  // the tree is the only outcome that leaves that relay with working native deps.
+  let recheck: ReferenceScan
+  try {
+    recheck = await scanCacheReferences(conn, host, remoteHome)
+  } catch {
+    recheck = { readable: false }
+  }
+  if (!recheck.readable || recheck.referencedKeys.has(key)) {
+    await execHostCommand(conn, host, moveRemoteTreeCommand(host, tombstone, entryDir)).catch(
+      () => {}
+    )
+    return false
+  }
+  try {
+    await execHostCommand(conn, host, removeRemoteTreeCommand(host, tombstone))
+    return true
+  } catch {
+    // The sweep in the entry listing drains a tombstone this pass could not remove.
+    return false
+  }
+}
+
+async function scanCacheReferences(
+  conn: SshConnection,
+  host: RemoteHostPlatform,
+  remoteHome: string
+): Promise<ReferenceScan> {
+  let output: string
+  try {
+    output = await execHostCommand(
+      conn,
+      host,
+      listRelayNativeDepsCacheReferencesCommand(host, remoteHome)
+    )
+  } catch {
+    return { readable: false }
+  }
+  const lines = output.split(/\r?\n/).map((line) => line.trim())
+  if (!lines.includes(RELAY_NATIVE_CACHE_REFS_OK)) {
+    return { readable: false }
+  }
+  const referencedKeys = new Set<string>()
+  const base = relayNativeDepsCacheBaseDir(host, remoteHome)
+  for (const line of lines) {
+    if (!line.startsWith('REF ')) {
+      continue
+    }
+    const attribution = attributeReference(line.slice('REF '.length), base, host, remoteHome)
+    if (attribution.kind === 'unattributable') {
+      return { readable: false }
+    }
+    if (attribution.kind === 'entry') {
+      referencedKeys.add(attribution.key)
+    }
+  }
+  return { readable: true, referencedKeys }
+}
+
+type ReferenceAttribution =
+  | { kind: 'entry'; key: string }
+  /** A link that points somewhere else entirely; it holds no cache entry alive. */
+  | { kind: 'outside' }
+  | { kind: 'unattributable' }
+
+/**
+ * Which cache entry a symlink target names.
+ *
+ * A relative target is `unattributable` on purpose. Every link Orca writes is absolute, so a
+ * relative one is a tree with a history this pass cannot reconstruct, and guessing which entry it
+ * resolves to is exactly the inference that deletes a live relay's modules.
+ */
+function attributeReference(
+  target: string,
+  base: string,
+  host: RemoteHostPlatform,
+  remoteHome: string
+): ReferenceAttribution {
+  if (!target.startsWith('/') || target.includes('/../') || target.endsWith('/..')) {
+    return { kind: 'unattributable' }
+  }
+  if (!target.startsWith(`${base}/`)) {
+    return { kind: 'outside' }
+  }
+  const rest = target.slice(base.length + 1).split('/')
+  if (
+    rest.length !== 2 ||
+    rest[1] !== 'node_modules' ||
+    !isRelayNativeDepsCacheEntryName(rest[0])
+  ) {
+    return { kind: 'unattributable' }
+  }
+  // Why rebuild the path rather than trust the split: the target must be exactly what this client
+  // writes for that key, not merely something that parses into two plausible segments.
+  return target === relayNativeDepsCacheNodeModulesPath(host, remoteHome, rest[0])
+    ? { kind: 'entry', key: rest[0] }
+    : { kind: 'unattributable' }
+}
+
+function parseCacheEntryListing(output: string): string[] {
+  const lines = output.split(/\r?\n/).map((line) => line.trim())
+  if (!lines.includes(RELAY_NATIVE_CACHE_LIST_OK)) {
+    return []
+  }
+  const entries: string[] = []
+  for (const line of lines) {
+    if (!line.startsWith('ENTRY ')) {
+      continue
+    }
+    const name = line.slice('ENTRY '.length)
+    // Why re-validate a name the host produced: it is about to be interpolated into `mv` and
+    // `rm -rf`. Only names this client could itself have minted are eligible.
+    if (
+      isRelayNativeDepsCacheEntryName(name) &&
+      entries.length < MAX_RELAY_NATIVE_CACHE_LISTING_ENTRIES
+    ) {
+      entries.push(name)
+    }
+  }
+  return entries
+}
diff --git a/src/main/ssh/ssh-relay-native-deps-cache-install.ts b/src/main/ssh/ssh-relay-native-deps-cache-install.ts
new file mode 100644
index 00000000000..adc1f01d54f
--- /dev/null
+++ b/src/main/ssh/ssh-relay-native-deps-cache-install.ts
@@ -0,0 +1,209 @@
+/**
+ * The deploy-side half of the shared native-deps cache: resolve this build's key, try to link an
+ * existing entry, and publish a probe-verified tree afterwards.
+ *
+ * Both entry points answer with a value, never an exception. The cache is an optimization on a
+ * path that must still connect a host with a read-only home, no `ln`, or an SSH server that drops
+ * the channel — every one of those is a plain per-directory install, which is what the relay did
+ * before this existed.
+ */
+import { existsSync, readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import type { SshConnection } from './ssh-connection'
+import { RELAY_ARTIFACTS } from '../../shared/relay-artifacts'
+import { execCommand } from './ssh-relay-deploy-helpers'
+import { NATIVE_DEPS_COMMAND_TIMEOUT_MS } from './ssh-relay-deploy-timing'
+import {
+  computeRelayNativeDepsCacheKey,
+  supportsRelayNativeDepsCache,
+  RELAY_NATIVE_DEPS_PATCH_ARTIFACT_PATTERN,
+  type RelayNativeDepsCachePatchSource
+} from './ssh-relay-native-deps-cache'
+import {
+  ensureRelayNativeDepsCacheCommand,
+  promoteRelayNativeDepsCacheCommand,
+  RELAY_NATIVE_CACHE_LINKED,
+  RELAY_NATIVE_CACHE_PROMOTED,
+  RELAY_NATIVE_CACHE_SEEDED,
+  type RelayNativeDepsCachePaths
+} from './ssh-relay-native-deps-cache-commands'
+import type { RemoteHostPlatform } from './ssh-remote-platform'
+
+/**
+ * `linked` — the relay directory now points at a complete shared entry and needs no install.
+ * `private` — it owns (or is about to own) its own tree, which promotion may later publish.
+ */
+export type RelayNativeDepsCacheAttachment = {
+  mode: 'linked' | 'private'
+  key: string
+}
+
+export type RelayNativeDepsCacheContext = {
+  hostPlatform: RemoteHostPlatform
+  remoteHome: string
+  relayDir: string
+  platform: string
+  localRelayDir: string
+  deps: Readonly<Record<string, string>>
+  signal?: AbortSignal
+}
+
+function execHostCommand(
+  conn: SshConnection,
+  host: RemoteHostPlatform,
+  command: string,
+  signal?: AbortSignal
+): Promise<string> {
+  return execCommand(conn, command, {
+    wrapCommand: host.commandDialect !== 'powershell',
+    // Why the native-deps budget and not the default 30s: a seeding copy moves a whole
+    // node_modules on the host's own disk, which is fast but not instant on a cold cache.
+    timeoutMs: NATIVE_DEPS_COMMAND_TIMEOUT_MS,
+    signal
+  })
+}
+
+/**
+ * Every shipped artifact that patches the installed native tree, read for hashing.
+ *
+ * Reading is best-effort by design: a patch this client cannot read must not silently drop out of
+ * the key, so an unreadable one disables the cache rather than producing a key that claims the
+ * patch was applied.
+ */
+export function readRelayNativeDepsPatchSources(
+  localRelayDir: string
+): RelayNativeDepsCachePatchSource[] | null {
+  const sources: RelayNativeDepsCachePatchSource[] = []
+  for (const artifact of RELAY_ARTIFACTS) {
+    if (!RELAY_NATIVE_DEPS_PATCH_ARTIFACT_PATTERN.test(artifact.filename)) {
+      continue
+    }
+    const path = join(localRelayDir, artifact.filename)
+    try {
+      if (!existsSync(path)) {
+        continue
+      }
+      sources.push({ filename: artifact.filename, contents: readFileSync(path, 'utf-8') })
+    } catch {
+      return null
+    }
+  }
+  return sources
+}
+
+/** This build's cache key, or null when it cannot be computed and the cache must stay off. */
+export function resolveRelayNativeDepsCacheKey(context: {
+  platform: string
+  localRelayDir: string
+  deps: Readonly<Record<string, string>>
+}): string | null {
+  const patchSources = readRelayNativeDepsPatchSources(context.localRelayDir)
+  if (!patchSources) {
+    return null
+  }
+  try {
+    return computeRelayNativeDepsCacheKey({
+      platform: context.platform,
+      deps: context.deps,
+      patchSources
+    })
+  } catch (err) {
+    console.warn(
+      `[ssh-relay] Native-deps cache key unavailable for ${context.platform}: ${
+        err instanceof Error ? err.message : String(err)
+      }`
+    )
+    return null
+  }
+}
+
+/**
+ * Link a complete entry, or leave the relay directory to install privately.
+ *
+ * Returns null when the cache is off for this host, which keeps the caller on the exact command
+ * sequence it ran before the cache existed.
+ */
+export async function attachRelayNativeDepsCache(
+  conn: SshConnection,
+  context: RelayNativeDepsCacheContext
+): Promise<RelayNativeDepsCacheAttachment | null> {
+  if (!supportsRelayNativeDepsCache(context.hostPlatform)) {
+    return null
+  }
+  const key = resolveRelayNativeDepsCacheKey(context)
+  if (!key) {
+    return null
+  }
+  const paths = cachePathsFor(context, key)
+  try {
+    const output = await execHostCommand(
+      conn,
+      context.hostPlatform,
+      ensureRelayNativeDepsCacheCommand(paths, context.deps),
+      context.signal
+    )
+    if (output.includes(RELAY_NATIVE_CACHE_LINKED)) {
+      console.log(`[ssh-relay] Native deps linked from shared cache entry ${key}`)
+      return { mode: 'linked', key }
+    }
+    if (output.includes(RELAY_NATIVE_CACHE_SEEDED)) {
+      console.log(`[ssh-relay] Seeded native deps for ${key} from an existing install on this host`)
+    }
+    return { mode: 'private', key }
+  } catch (err) {
+    context.signal?.throwIfAborted()
+    // Why still 'private' and not null: the relay directory owns nothing yet either way, and the
+    // install that follows is identical. Promotion afterwards is separately best-effort.
+    console.warn(
+      `[ssh-relay] Native-deps cache probe for ${key} failed; installing per-directory: ${
+        err instanceof Error ? err.message : String(err)
+      }`
+    )
+    return { mode: 'private', key }
+  }
+}
+
+/**
+ * Publish a private tree the probe just loaded, and link the relay directory to it.
+ *
+ * Called only after `probeInstalledNativeDeps` reported both addons loadable on this host, so an
+ * entry is never published on the strength of a successful `npm install` alone.
+ */
+export async function promoteRelayNativeDepsCache(
+  conn: SshConnection,
+  context: RelayNativeDepsCacheContext,
+  key: string
+): Promise<void> {
+  try {
+    const output = await execHostCommand(
+      conn,
+      context.hostPlatform,
+      promoteRelayNativeDepsCacheCommand(cachePathsFor(context, key)),
+      context.signal
+    )
+    console.log(
+      output.includes(RELAY_NATIVE_CACHE_PROMOTED)
+        ? `[ssh-relay] Published native deps as shared cache entry ${key}`
+        : `[ssh-relay] Native deps stay per-directory; shared cache entry ${key} was not published`
+    )
+  } catch (err) {
+    context.signal?.throwIfAborted()
+    console.warn(
+      `[ssh-relay] Could not publish native-deps cache entry ${key}: ${
+        err instanceof Error ? err.message : String(err)
+      }`
+    )
+  }
+}
+
+function cachePathsFor(
+  context: RelayNativeDepsCacheContext,
+  key: string
+): RelayNativeDepsCachePaths {
+  return {
+    host: context.hostPlatform,
+    remoteHome: context.remoteHome,
+    relayDir: context.relayDir,
+    key
+  }
+}
diff --git a/src/main/ssh/ssh-relay-native-deps-cache-shell.test.ts b/src/main/ssh/ssh-relay-native-deps-cache-shell.test.ts
new file mode 100644
index 00000000000..530eed7238e
--- /dev/null
+++ b/src/main/ssh/ssh-relay-native-deps-cache-shell.test.ts
@@ -0,0 +1,243 @@
+// The cache's safety argument is made of `sh`, not TypeScript: `mkdir` elects the publisher,
+// `.deps-complete` gates linking, and a failed publish must put the tree back. Asserting on the
+// command strings cannot show any of that, so these run the real scripts against a real tree.
+
+import { execFileSync } from 'node:child_process'
+import {
+  mkdirSync,
+  mkdtempSync,
+  readlinkSync,
+  rmSync,
+  statSync,
+  symlinkSync,
+  writeFileSync,
+  existsSync,
+  lstatSync
+} from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, beforeEach, describe, expect, it } from 'vitest'
+
+import { getRemoteHostPlatform } from './ssh-remote-platform'
+import {
+  computeRelayNativeDepsCacheKey,
+  relayNativeDepsCacheEntryDir,
+  relayNativeDepsCacheNodeModulesPath
+} from './ssh-relay-native-deps-cache'
+import {
+  ensureRelayNativeDepsCacheCommand,
+  listRelayNativeDepsCacheEntriesCommand,
+  listRelayNativeDepsCacheReferencesCommand,
+  promoteRelayNativeDepsCacheCommand,
+  RELAY_NATIVE_CACHE_LINKED,
+  RELAY_NATIVE_CACHE_LIST_OK,
+  RELAY_NATIVE_CACHE_MISS,
+  RELAY_NATIVE_CACHE_NOT_PROMOTED,
+  RELAY_NATIVE_CACHE_PROMOTED,
+  RELAY_NATIVE_CACHE_REFS_OK,
+  RELAY_NATIVE_CACHE_SEEDED
+} from './ssh-relay-native-deps-cache-commands'
+
+const HOST = getRemoteHostPlatform('linux-x64')
+const DEPS = { 'node-pty': '1.1.0', '@parcel/watcher': '2.5.6' } as const
+const KEY = computeRelayNativeDepsCacheKey({ platform: 'linux-x64', deps: DEPS })
+
+// Debian and Ubuntu point /bin/sh at dash, which is stricter than the bash-in-sh-mode that macOS
+// ships; run against both when both exist so a bashism cannot pass here and fail on a host.
+const SHELLS = ['/bin/sh', '/bin/dash'].filter((shell) => existsSync(shell))
+
+describe.runIf(process.platform !== 'win32').each(SHELLS)(
+  'relay native-deps cache shell scripts (%s)',
+  (shell) => {
+    let home: string
+
+    const relayDir = (version: string): string => join(home, '.orca-remote', `relay-${version}`)
+
+    function sh(command: string): string {
+      return execFileSync(shell, ['-c', command], { encoding: 'utf-8' })
+    }
+
+    /** A relay directory holding its own installed tree, exactly as `npm install` leaves it. */
+    function makePrivateInstall(version: string, deps: Record<string, string> = DEPS): string {
+      const dir = relayDir(version)
+      mkdirSync(join(dir, 'node_modules', 'node-pty', 'build'), { recursive: true })
+      mkdirSync(join(dir, 'node_modules', '@parcel', 'watcher'), { recursive: true })
+      writeFileSync(join(dir, 'node_modules', 'node-pty', 'build', 'pty.node'), 'binary')
+      writeFileSync(join(dir, 'package.json'), JSON.stringify({ dependencies: deps }))
+      return dir
+    }
+
+    function ensure(version: string): string {
+      return sh(
+        ensureRelayNativeDepsCacheCommand(
+          { host: HOST, remoteHome: home, relayDir: relayDir(version), key: KEY },
+          DEPS
+        )
+      ).trim()
+    }
+
+    function promote(version: string): string {
+      return sh(
+        promoteRelayNativeDepsCacheCommand({
+          host: HOST,
+          remoteHome: home,
+          relayDir: relayDir(version),
+          key: KEY
+        })
+      ).trim()
+    }
+
+    beforeEach(() => {
+      home = mkdtempSync(join(tmpdir(), 'orca-relay-cache-'))
+      mkdirSync(join(home, '.orca-remote'), { recursive: true })
+    })
+
+    afterEach(() => {
+      rmSync(home, { recursive: true, force: true })
+    })
+
+    it('publishes a probe-verified tree and links the relay directory to it', () => {
+      makePrivateInstall('0.1.0+aaa')
+
+      expect(promote('0.1.0+aaa')).toBe(RELAY_NATIVE_CACHE_PROMOTED)
+
+      const target = relayNativeDepsCacheNodeModulesPath(HOST, home, KEY)
+      expect(readlinkSync(join(relayDir('0.1.0+aaa'), 'node_modules'))).toBe(target)
+      expect(statSync(join(target, 'node-pty', 'build', 'pty.node')).isFile()).toBe(true)
+      expect(
+        existsSync(join(relayNativeDepsCacheEntryDir(HOST, home, KEY), '.deps-complete'))
+      ).toBe(true)
+    })
+
+    it('links a second bundle to the published tree with no install of its own', () => {
+      makePrivateInstall('0.1.0+aaa')
+      promote('0.1.0+aaa')
+
+      // A different bundle: fresh directory, no node_modules, nothing installed.
+      mkdirSync(relayDir('0.1.0+bbb'), { recursive: true })
+      expect(ensure('0.1.0+bbb')).toBe(RELAY_NATIVE_CACHE_LINKED)
+
+      const linked = join(relayDir('0.1.0+bbb'), 'node_modules')
+      expect(readlinkSync(linked)).toBe(relayNativeDepsCacheNodeModulesPath(HOST, home, KEY))
+      expect(statSync(join(linked, 'node-pty', 'build', 'pty.node')).isFile()).toBe(true)
+    })
+
+    it('will not link an entry whose completion sentinel is absent', () => {
+      makePrivateInstall('0.1.0+aaa')
+      promote('0.1.0+aaa')
+      rmSync(join(relayNativeDepsCacheEntryDir(HOST, home, KEY), '.deps-complete'))
+
+      mkdirSync(relayDir('0.1.0+bbb'), { recursive: true })
+      expect(ensure('0.1.0+bbb')).toBe(RELAY_NATIVE_CACHE_MISS)
+      expect(existsSync(join(relayDir('0.1.0+bbb'), 'node_modules'))).toBe(false)
+    })
+
+    it('seeds from a sibling install rather than recompiling once more', () => {
+      makePrivateInstall('0.1.0+aaa')
+      mkdirSync(relayDir('0.1.0+bbb'), { recursive: true })
+
+      expect(ensure('0.1.0+bbb')).toBe(RELAY_NATIVE_CACHE_SEEDED)
+
+      const seeded = join(relayDir('0.1.0+bbb'), 'node_modules')
+      expect(lstatSync(seeded).isSymbolicLink()).toBe(false)
+      expect(statSync(join(seeded, 'node-pty', 'build', 'pty.node')).isFile()).toBe(true)
+      // The source is untouched, so a relay running out of it is unaffected.
+      expect(existsSync(join(relayDir('0.1.0+aaa'), 'node_modules', 'node-pty'))).toBe(true)
+    })
+
+    it('refuses to seed from a sibling pinned to different versions', () => {
+      makePrivateInstall('0.1.0+aaa', { 'node-pty': '1.0.0', '@parcel/watcher': '2.5.6' })
+      mkdirSync(relayDir('0.1.0+bbb'), { recursive: true })
+
+      expect(ensure('0.1.0+bbb')).toBe(RELAY_NATIVE_CACHE_MISS)
+      expect(existsSync(join(relayDir('0.1.0+bbb'), 'node_modules'))).toBe(false)
+    })
+
+    it('refuses to seed from a sibling that had node-pty skipped', () => {
+      makePrivateInstall('0.1.0+aaa')
+      rmSync(join(relayDir('0.1.0+aaa'), 'node_modules', 'node-pty'), { recursive: true })
+      mkdirSync(relayDir('0.1.0+bbb'), { recursive: true })
+
+      expect(ensure('0.1.0+bbb')).toBe(RELAY_NATIVE_CACHE_MISS)
+    })
+
+    it('leaves a directory that installed for itself alone', () => {
+      makePrivateInstall('0.1.0+aaa')
+      promote('0.1.0+aaa')
+      const own = makePrivateInstall('0.1.0+bbb')
+
+      expect(ensure('0.1.0+bbb')).toBe(RELAY_NATIVE_CACHE_MISS)
+      expect(lstatSync(join(own, 'node_modules')).isSymbolicLink()).toBe(false)
+    })
+
+    it('elects exactly one publisher and leaves the loser its own tree', () => {
+      makePrivateInstall('0.1.0+aaa')
+      makePrivateInstall('0.1.0+bbb')
+
+      expect(promote('0.1.0+aaa')).toBe(RELAY_NATIVE_CACHE_PROMOTED)
+      expect(promote('0.1.0+bbb')).toBe(RELAY_NATIVE_CACHE_NOT_PROMOTED)
+
+      // The loser must not have handed its tree to an entry it lost the race for.
+      const loser = join(relayDir('0.1.0+bbb'), 'node_modules')
+      expect(lstatSync(loser).isSymbolicLink()).toBe(false)
+      expect(statSync(join(loser, 'node-pty', 'build', 'pty.node')).isFile()).toBe(true)
+    })
+
+    it('never republishes through a symlink it already holds', () => {
+      makePrivateInstall('0.1.0+aaa')
+      promote('0.1.0+aaa')
+
+      expect(promote('0.1.0+aaa')).toBe(RELAY_NATIVE_CACHE_NOT_PROMOTED)
+      expect(statSync(join(relayDir('0.1.0+aaa'), 'node_modules', 'node-pty')).isDirectory()).toBe(
+        true
+      )
+    })
+
+    it('survives removing a linked relay directory without touching the shared tree', () => {
+      makePrivateInstall('0.1.0+aaa')
+      promote('0.1.0+aaa')
+      mkdirSync(relayDir('0.1.0+bbb'), { recursive: true })
+      ensure('0.1.0+bbb')
+
+      // Exactly what version GC does to an idle directory.
+      sh(`rm -rf ${JSON.stringify(relayDir('0.1.0+bbb'))}`)
+
+      const target = relayNativeDepsCacheNodeModulesPath(HOST, home, KEY)
+      expect(statSync(join(target, 'node-pty', 'build', 'pty.node')).isFile()).toBe(true)
+    })
+
+    it('reports the published entry and every symlink that references it', () => {
+      makePrivateInstall('0.1.0+aaa')
+      promote('0.1.0+aaa')
+
+      const entries = sh(listRelayNativeDepsCacheEntriesCommand(HOST, home)).trim().split('\n')
+      expect(entries).toEqual([`ENTRY ${KEY}`, RELAY_NATIVE_CACHE_LIST_OK])
+
+      const refs = sh(listRelayNativeDepsCacheReferencesCommand(HOST, home)).trim().split('\n')
+      expect(refs).toEqual([
+        `REF ${relayNativeDepsCacheNodeModulesPath(HOST, home, KEY)}`,
+        RELAY_NATIVE_CACHE_REFS_OK
+      ])
+    })
+
+    it('reports a symlink no Orca version wrote, so GC can refuse the pass', () => {
+      makePrivateInstall('0.1.0+aaa')
+      promote('0.1.0+aaa')
+      mkdirSync(relayDir('0.1.0+bbb'), { recursive: true })
+      symlinkSync('../relay-0.1.0+aaa/node_modules', join(relayDir('0.1.0+bbb'), 'node_modules'))
+
+      const refs = sh(listRelayNativeDepsCacheReferencesCommand(HOST, home)).trim().split('\n')
+      expect(refs).toContain('REF ../relay-0.1.0+aaa/node_modules')
+      expect(refs.at(-1)).toBe(RELAY_NATIVE_CACHE_REFS_OK)
+    })
+
+    it('answers cleanly on a host that has never installed anything', () => {
+      expect(sh(listRelayNativeDepsCacheEntriesCommand(HOST, home)).trim()).toBe(
+        RELAY_NATIVE_CACHE_LIST_OK
+      )
+      expect(sh(listRelayNativeDepsCacheReferencesCommand(HOST, home)).trim()).toBe(
+        RELAY_NATIVE_CACHE_REFS_OK
+      )
+    })
+  }
+)
diff --git a/src/main/ssh/ssh-relay-native-deps-cache.test.ts b/src/main/ssh/ssh-relay-native-deps-cache.test.ts
new file mode 100644
index 00000000000..bfe0c481983
--- /dev/null
+++ b/src/main/ssh/ssh-relay-native-deps-cache.test.ts
@@ -0,0 +1,277 @@
+// The cache is shared across every relay directory on a host, so these cover the two things that
+// make sharing safe: the key changes when the tree's inputs change, and GC refuses to delete on
+// anything short of a complete, attributable reference listing.
+
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+vi.mock('./ssh-relay-deploy-helpers', () => ({
+  execCommand: vi.fn()
+}))
+
+import { execCommand } from './ssh-relay-deploy-helpers'
+import type { SshConnection } from './ssh-connection'
+import { getRemoteHostPlatform } from './ssh-remote-platform'
+import {
+  computeRelayNativeDepsCacheKey,
+  isRelayNativeDepsCacheEntryName,
+  relayNativeDepsCacheEntryDir,
+  relayNativeDepsCacheNodeModulesPath,
+  supportsRelayNativeDepsCache
+} from './ssh-relay-native-deps-cache'
+import {
+  ensureRelayNativeDepsCacheCommand,
+  promoteRelayNativeDepsCacheCommand,
+  RELAY_NATIVE_CACHE_LIST_OK,
+  RELAY_NATIVE_CACHE_REFS_ERR,
+  RELAY_NATIVE_CACHE_REFS_OK
+} from './ssh-relay-native-deps-cache-commands'
+import { gcRelayNativeDepsCache } from './ssh-relay-native-deps-cache-gc'
+
+const POSIX = getRemoteHostPlatform('linux-x64')
+const WINDOWS = getRemoteHostPlatform('win32-x64')
+const HOME = '/home/u'
+const DEPS = { 'node-pty': '1.1.0', '@parcel/watcher': '2.5.6' } as const
+const KEY = computeRelayNativeDepsCacheKey({ platform: 'linux-x64', deps: DEPS })
+const RELAY_DIR = `${HOME}/.orca-remote/relay-0.1.0+aaa`
+
+const conn = {} as SshConnection
+const mockExec = vi.mocked(execCommand)
+
+function refsOk(...targets: string[]): string {
+  return [...targets.map((t) => `REF ${t}`), RELAY_NATIVE_CACHE_REFS_OK].join('\n')
+}
+
+function listing(...keys: string[]): string {
+  return [...keys.map((k) => `ENTRY ${k}`), RELAY_NATIVE_CACHE_LIST_OK].join('\n')
+}
+
+describe('computeRelayNativeDepsCacheKey', () => {
+  it('keys on the dependency set, not on the relay bundle', () => {
+    expect(computeRelayNativeDepsCacheKey({ platform: 'linux-x64', deps: DEPS })).toBe(KEY)
+    expect(
+      computeRelayNativeDepsCacheKey({
+        platform: 'linux-x64',
+        deps: { '@parcel/watcher': '2.5.6', 'node-pty': '1.1.0' }
+      })
+    ).toBe(KEY)
+  })
+
+  it('mints a new entry when a dependency version moves', () => {
+    expect(
+      computeRelayNativeDepsCacheKey({
+        platform: 'linux-x64',
+        deps: { ...DEPS, 'node-pty': '1.2.0' }
+      })
+    ).not.toBe(KEY)
+  })
+
+  it('mints a new entry when a patch applied to the tree changes', () => {
+    const withPatch = computeRelayNativeDepsCacheKey({
+      platform: 'linux-x64',
+      deps: DEPS,
+      patchSources: [{ filename: 'node-pty-1.1.0-patch.cjs', contents: 'a' }]
+    })
+    const withChangedPatch = computeRelayNativeDepsCacheKey({
+      platform: 'linux-x64',
+      deps: DEPS,
+      patchSources: [{ filename: 'node-pty-1.1.0-patch.cjs', contents: 'b' }]
+    })
+    expect(withPatch).not.toBe(KEY)
+    expect(withChangedPatch).not.toBe(withPatch)
+  })
+
+  it('separates platforms so one host never links another architecture', () => {
+    expect(computeRelayNativeDepsCacheKey({ platform: 'linux-arm64', deps: DEPS })).not.toBe(KEY)
+    expect(KEY.startsWith('linux-x64-')).toBe(true)
+  })
+
+  it('refuses a platform it cannot recognise rather than building a path from it', () => {
+    expect(() => computeRelayNativeDepsCacheKey({ platform: '../../etc', deps: DEPS })).toThrow(
+      /Unsafe relay native-deps cache key/
+    )
+    expect(isRelayNativeDepsCacheEntryName('../../etc')).toBe(false)
+    expect(isRelayNativeDepsCacheEntryName(KEY)).toBe(true)
+  })
+
+  it('leaves Windows on the per-directory install', () => {
+    expect(supportsRelayNativeDepsCache(POSIX)).toBe(true)
+    expect(supportsRelayNativeDepsCache(WINDOWS)).toBe(false)
+  })
+})
+
+describe('ensureRelayNativeDepsCacheCommand', () => {
+  const command = ensureRelayNativeDepsCacheCommand(
+    { host: POSIX, remoteHome: HOME, relayDir: RELAY_DIR, key: KEY },
+    DEPS
+  )
+
+  it('links only an entry that carries the completion sentinel', () => {
+    expect(command).toContain(`[ -f "$cache/.deps-complete" ]`)
+    expect(command).toContain('ln -s "$target" "$nm"')
+    expect(command).toContain(relayNativeDepsCacheNodeModulesPath(POSIX, HOME, KEY))
+  })
+
+  it('never overwrites a directory the relay installed for itself', () => {
+    // The link is only created on a path that does not exist; a real node_modules reads as a miss.
+    expect(command).toContain('if [ ! -e "$nm" ] && ln -s "$target" "$nm"')
+  })
+
+  it('seeds only from a sibling whose manifest pins the same versions', () => {
+    for (const [name, version] of Object.entries(DEPS)) {
+      expect(command).toContain(`grep -F -q '"${name}":"${version}"' "$pj"`)
+    }
+    expect(command).toContain('[ -d "$cand/node-pty" ] || continue')
+  })
+})
+
+describe('promoteRelayNativeDepsCacheCommand', () => {
+  const command = promoteRelayNativeDepsCacheCommand({
+    host: POSIX,
+    remoteHome: HOME,
+    relayDir: RELAY_DIR,
+    key: KEY
+  })
+
+  it('elects one publisher with mkdir rather than a lock', () => {
+    expect(command).toContain('mkdir "$cache" 2>/dev/null')
+  })
+
+  it('writes the completion sentinel after the symlink exists', () => {
+    expect(command.indexOf('ln -s "$target" "$nm"')).toBeLessThan(
+      command.indexOf(': > "$cache/.deps-complete"')
+    )
+  })
+
+  it('never deletes the entry unless the tree made it back to the relay directory', () => {
+    expect(command).toContain('if mv "$target" "$nm" 2>/dev/null; then rm -rf "$cache"')
+  })
+
+  it('refuses to publish a directory that is already a shared symlink', () => {
+    expect(command).toContain('if [ -L "$nm" ]; then')
+  })
+})
+
+describe('gcRelayNativeDepsCache', () => {
+  beforeEach(() => {
+    mockExec.mockReset().mockResolvedValue('')
+  })
+
+  it('removes an entry nothing links to', async () => {
+    mockExec
+      .mockResolvedValueOnce(listing(KEY))
+      .mockResolvedValueOnce(refsOk())
+      .mockResolvedValueOnce('MOVED')
+      .mockResolvedValueOnce(refsOk())
+      .mockResolvedValueOnce('')
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME)
+
+    const last = mockExec.mock.calls.at(-1)?.[1] ?? ''
+    expect(last).toContain('rm -rf')
+    expect(last).toContain('.gc-tombstone.')
+  })
+
+  it('keeps an entry a live relay depends on', async () => {
+    mockExec
+      .mockResolvedValueOnce(listing(KEY))
+      .mockResolvedValueOnce(refsOk(relayNativeDepsCacheNodeModulesPath(POSIX, HOME, KEY)))
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME)
+
+    expect(mockExec).toHaveBeenCalledTimes(2)
+    expect(mockExec.mock.calls.some(([, c]) => c.startsWith('rm -rf'))).toBe(false)
+  })
+
+  it('keeps every entry when the reference listing never answers', async () => {
+    mockExec.mockResolvedValueOnce(listing(KEY)).mockResolvedValueOnce('REF /somewhere\n')
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME)
+
+    expect(mockExec).toHaveBeenCalledTimes(2)
+  })
+
+  it('keeps every entry when the reference scan reports an unreadable link', async () => {
+    mockExec.mockResolvedValueOnce(listing(KEY)).mockResolvedValueOnce(RELAY_NATIVE_CACHE_REFS_ERR)
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME)
+
+    expect(mockExec).toHaveBeenCalledTimes(2)
+  })
+
+  it('keeps every entry when a reference has a shape this client never writes', async () => {
+    // A relative target cannot be attributed to an entry without guessing what it resolves to.
+    mockExec
+      .mockResolvedValueOnce(listing(KEY))
+      .mockResolvedValueOnce(refsOk('../native/x/node_modules'))
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME)
+
+    expect(mockExec).toHaveBeenCalledTimes(2)
+  })
+
+  it('ignores a link that points outside the cache entirely', async () => {
+    mockExec
+      .mockResolvedValueOnce(listing(KEY))
+      .mockResolvedValueOnce(refsOk('/opt/shared/node_modules'))
+      .mockResolvedValueOnce('MOVED')
+      .mockResolvedValueOnce(refsOk('/opt/shared/node_modules'))
+      .mockResolvedValueOnce('')
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME)
+
+    expect(mockExec.mock.calls.some(([, c]) => c.startsWith('rm -rf'))).toBe(true)
+  })
+
+  it('restores the tree when a deploy links the entry after the tombstone rename', async () => {
+    mockExec
+      .mockResolvedValueOnce(listing(KEY))
+      .mockResolvedValueOnce(refsOk())
+      .mockResolvedValueOnce('MOVED')
+      .mockResolvedValueOnce(refsOk(relayNativeDepsCacheNodeModulesPath(POSIX, HOME, KEY)))
+      .mockResolvedValueOnce('MOVED')
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME)
+
+    const last = mockExec.mock.calls.at(-1)?.[1] ?? ''
+    expect(last).toContain('mv ')
+    expect(last).toContain(relayNativeDepsCacheEntryDir(POSIX, HOME, KEY))
+    expect(mockExec.mock.calls.some(([, c]) => c.startsWith('rm -rf'))).toBe(false)
+  })
+
+  it('restores the tree when the recheck itself cannot answer', async () => {
+    mockExec
+      .mockResolvedValueOnce(listing(KEY))
+      .mockResolvedValueOnce(refsOk())
+      .mockResolvedValueOnce('MOVED')
+      .mockRejectedValueOnce(new Error('channel closed'))
+      .mockResolvedValueOnce('MOVED')
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME)
+
+    expect(mockExec.mock.calls.some(([, c]) => c.startsWith('rm -rf'))).toBe(false)
+  })
+
+  it('never removes a pinned key', async () => {
+    mockExec.mockResolvedValueOnce(listing(KEY)).mockResolvedValueOnce(refsOk())
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME, { pinnedKeys: [KEY] })
+
+    expect(mockExec).toHaveBeenCalledTimes(2)
+  })
+
+  it('drops a listed name it could not have minted rather than interpolating it', async () => {
+    mockExec
+      .mockResolvedValueOnce(`ENTRY ../../.ssh\n${RELAY_NATIVE_CACHE_LIST_OK}`)
+      .mockResolvedValueOnce(refsOk())
+
+    await gcRelayNativeDepsCache(conn, POSIX, HOME)
+
+    expect(mockExec).toHaveBeenCalledTimes(1)
+  })
+
+  it('does nothing on a host that never creates entries', async () => {
+    await gcRelayNativeDepsCache(conn, WINDOWS, 'C:\\Users\\u')
+
+    expect(mockExec).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/main/ssh/ssh-relay-native-deps-cache.ts b/src/main/ssh/ssh-relay-native-deps-cache.ts
new file mode 100644
index 00000000000..934aaff63a6
--- /dev/null
+++ b/src/main/ssh/ssh-relay-native-deps-cache.ts
@@ -0,0 +1,145 @@
+/**
+ * Where the relay's compiled native dependencies live, and what their identity is keyed on.
+ *
+ * A relay install directory is keyed on the JS bundle hash, which moves on every commit to
+ * `src/relay/` or the `src/shared/` it pulls in. `node_modules` used to live inside it, so a
+ * dependency set that is a pinned constant (`RELAY_NATIVE_DEPS`) was reinstalled — and on Linux,
+ * where node-pty ships no prebuild, recompiled from source — on every new bundle (#18009). The
+ * directory key was coupled to the wrong quantity.
+ *
+ * The tree now lives at `~/.orca-remote/native/<relayPlatform>-<depsHash>/node_modules` and each
+ * relay directory holds a symlink to it. Three rules make one tree safe to share:
+ *
+ * 1. **A published entry is immutable.** `.deps-complete` is written last, only after a probe on
+ *    this host loaded both addons. Nothing installs, rebuilds or resets into a published entry: a
+ *    repair detaches the symlink and installs privately, so a host with a broken toolchain can
+ *    never `rm -rf node_modules/node-pty` out from under a live relay that shares the tree.
+ * 2. **Publication elects one winner with `mkdir`.** The entry either does not exist (this deploy
+ *    builds it privately and promotes it) or is already complete (this deploy links it). There is
+ *    no window in which two deploys write one tree, so no client-side lock is needed.
+ * 3. **Every failure degrades to today's per-directory install.** A host that cannot symlink,
+ *    cannot create the directory, or answers nothing still deploys, one bundle at a time.
+ *
+ * Windows is deliberately excluded. node-pty's npm tarball ships win32 prebuilts, so there is no
+ * compile to avoid there, and `node-pty-1.1.0-console-list-agent-patch.cjs` mutates the installed
+ * tree in place — which rule 1 forbids for a shared one.
+ */
+import { createHash } from 'node:crypto'
+import { RELAY_REMOTE_DIR } from './relay-protocol'
+import { RELAY_BUILD_PLATFORMS } from '../../shared/relay-artifacts'
+import { isWindowsRemoteHost, joinRemotePath, type RemoteHostPlatform } from './ssh-remote-platform'
+
+/** Sibling of `relay-<version>` and `orcad-<version>`; owned by neither model's version GC. */
+export const RELAY_NATIVE_DEPS_CACHE_DIR_NAME = 'native'
+
+/** Written last. Its presence is the only thing that makes an entry linkable. */
+export const RELAY_NATIVE_DEPS_CACHE_COMPLETE_NAME = '.deps-complete'
+
+/** Hidden so the entry listing skips it, and swept by age so a crashed pass drains. */
+export const RELAY_NATIVE_DEPS_CACHE_TOMBSTONE_PREFIX = '.gc-tombstone.'
+
+/**
+ * Bump when the remote install starts mutating the installed tree in a way the hashed inputs
+ * below cannot see — a new `npm rebuild` flag, a new post-install step, a patch applied by
+ * something other than a shipped `node-pty-*` artifact. A published entry is never repaired in
+ * place; only a new key retires it.
+ */
+export const RELAY_NATIVE_DEPS_CACHE_EPOCH = 1
+
+/**
+ * Shipped relay artifacts that patch the installed native tree. Their bytes go into the key, so
+ * changing a patch mints a new entry instead of leaving hosts on a tree built from the old one.
+ */
+export const RELAY_NATIVE_DEPS_PATCH_ARTIFACT_PATTERN = /^node-pty-.*\.(cjs|js|patch)$/
+
+const CACHE_KEY_HASH_LENGTH = 16
+
+const CACHE_ENTRY_NAME_REGEX = new RegExp(
+  `^(${RELAY_BUILD_PLATFORMS.join('|')})-[0-9a-f]{${CACHE_KEY_HASH_LENGTH}}$`
+)
+
+export type RelayNativeDepsCachePatchSource = {
+  filename: string
+  contents: string
+}
+
+/**
+ * `<relayPlatform>-<sha256 prefix>` over the dependency set, the epoch, and every patch the
+ * remote install applies. Platform and arch stay in the name rather than the hash so an operator
+ * reading `~/.orca-remote/native/` can tell what an entry is for.
+ */
+export function computeRelayNativeDepsCacheKey(input: {
+  platform: string
+  deps: Readonly<Record<string, string>>
+  patchSources?: readonly RelayNativeDepsCachePatchSource[]
+}): string {
+  const hash = createHash('sha256')
+  hash.update(`epoch ${RELAY_NATIVE_DEPS_CACHE_EPOCH}\n`)
+  for (const [name, version] of Object.entries(input.deps).sort(([a], [b]) => (a < b ? -1 : 1))) {
+    hash.update(`dep ${name} ${version}\n`)
+  }
+  const patches = [...(input.patchSources ?? [])].sort((a, b) => (a.filename < b.filename ? -1 : 1))
+  for (const patch of patches) {
+    hash.update(
+      `patch ${patch.filename} ${createHash('sha256').update(patch.contents).digest('hex')}\n`
+    )
+  }
+  const key = `${input.platform}-${hash.digest('hex').slice(0, CACHE_KEY_HASH_LENGTH)}`
+  if (!isRelayNativeDepsCacheEntryName(key)) {
+    // Why: the key reaches the host inside `mv` and `rm -rf`; an unrecognized platform must
+    // disable the cache rather than arrive as a path fragment nobody validated.
+    throw new Error(`Unsafe relay native-deps cache key: ${JSON.stringify(key)}`)
+  }
+  return key
+}
+
+/**
+ * Whether a name the host listed is one this client may move or delete. Every GC candidate goes
+ * through here before it reaches a shell.
+ */
+export function isRelayNativeDepsCacheEntryName(name: string): boolean {
+  return CACHE_ENTRY_NAME_REGEX.test(name)
+}
+
+/** `~/.orca-remote` — the parent both relay dirs and the cache sit under. */
+export function remoteInstallRootDir(host: RemoteHostPlatform, remoteHome: string): string {
+  return joinRemotePath(host, remoteHome, RELAY_REMOTE_DIR)
+}
+
+/** `~/.orca-remote/native` */
+export function relayNativeDepsCacheBaseDir(host: RemoteHostPlatform, remoteHome: string): string {
+  return joinRemotePath(
+    host,
+    remoteInstallRootDir(host, remoteHome),
+    RELAY_NATIVE_DEPS_CACHE_DIR_NAME
+  )
+}
+
+/** `~/.orca-remote/native/<key>` */
+export function relayNativeDepsCacheEntryDir(
+  host: RemoteHostPlatform,
+  remoteHome: string,
+  key: string
+): string {
+  if (!isRelayNativeDepsCacheEntryName(key)) {
+    throw new Error(`Unsafe relay native-deps cache key: ${JSON.stringify(key)}`)
+  }
+  return joinRemotePath(host, relayNativeDepsCacheBaseDir(host, remoteHome), key)
+}
+
+/** `~/.orca-remote/native/<key>/node_modules` — the symlink target, and the reference identity. */
+export function relayNativeDepsCacheNodeModulesPath(
+  host: RemoteHostPlatform,
+  remoteHome: string,
+  key: string
+): string {
+  return joinRemotePath(host, relayNativeDepsCacheEntryDir(host, remoteHome, key), 'node_modules')
+}
+
+/**
+ * Windows hosts install node-pty from an npm prebuilt and then patch the tree in place, so they
+ * keep the per-directory install. Nothing else about their deploy changes.
+ */
+export function supportsRelayNativeDepsCache(host: RemoteHostPlatform): boolean {
+  return !isWindowsRemoteHost(host)
+}
diff --git a/src/main/ssh/ssh-relay-native-deps-install-fixture.ts b/src/main/ssh/ssh-relay-native-deps-install-fixture.ts
index 821ebbc1208..922b8bedf61 100644
--- a/src/main/ssh/ssh-relay-native-deps-install-fixture.ts
+++ b/src/main/ssh/ssh-relay-native-deps-install-fixture.ts
@@ -69,7 +69,9 @@ export function makeStagedFirstInstallExecPrefix(): ExecResponse[] {
     `__ORCA_UPLOAD_STAGE_SLOT__${STAGE_OWNER}:slot-0`,
     '', // chmod staged node
     '', // final install namespace marker
-    `__ORCA_UPLOAD_STAGE_PROMOTION__${STAGE_OWNER}:PROMOTED`
+    `__ORCA_UPLOAD_STAGE_PROMOTION__${STAGE_OWNER}:PROMOTED`,
+    // Shared native-deps cache probe; an empty answer is a miss, so the per-directory install runs.
+    ''
   ]
 }
 
@@ -172,8 +174,10 @@ export function makeExecResponses(opts: {
   ]
   // Cleanup execs only run when the probe resolved (not when it rejected).
   const probeResolved = typeof probeSlot === 'string'
+  let loadable = false
   if (probeResolved) {
     const probeOk = probeSlot.includes('ORCA-NPTY-PROBE-OK')
+    loadable = probeOk
     if (!probeOk) {
       slots.push('') // cat stderr (graceful failure path captures detail)
     }
@@ -183,12 +187,17 @@ export function makeExecResponses(opts: {
       slots.push('') // chmod prebuilds after rebuild
       const repairProbe = opts.repairProbe === 'ok' ? 'ORCA-NPTY-PROBE-OK\n' : 'MISSING\n'
       slots.push(repairProbe)
-      if (!repairProbe.includes('ORCA-NPTY-PROBE-OK')) {
+      loadable = repairProbe.includes('ORCA-NPTY-PROBE-OK')
+      if (!loadable) {
         slots.push('') // cat stderr after unsuccessful rebuild
       }
       slots.push('') // rm -f stderr after rebuild probe
     }
   }
+  // Publication is gated on the probe: only a tree this host actually loaded is shared.
+  if (loadable) {
+    slots.push('') // promote the private tree into the shared native-deps cache
+  }
   slots.push('', 'DEAD', '', 'READY') // clean stage root, launch, credential, readiness
   return slots
 }
diff --git a/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts b/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
index 49abdcd6888..4c0874979b3 100644
--- a/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
+++ b/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
@@ -251,10 +251,12 @@ const POSIX_FIRST_INSTALL = [
   '', // chmod staged node
   '', // final install namespace marker
   STAGE_PROMOTED,
+  '', // shared native-deps cache probe (miss)
   '', // npm install native deps
   '', // chmod prebuilds
   'ORCA-NPTY-PROBE-OK\n',
   '', // rm probe stderr
+  '', // promote into the shared native-deps cache
   '', // clean stage root
   'DEAD',
   '', // publish the per-launch credential
@@ -268,10 +270,12 @@ const POSIX_SYSTEM_SSH_FIRST_INSTALL = [
   STAGE_RESERVED,
   '', // chmod staged node
   STAGE_PROMOTED,
+  '', // shared native-deps cache probe (miss)
   '', // npm install native deps
   '', // chmod prebuilds
   'ORCA-NPTY-PROBE-OK\n',
   '', // rm probe stderr
+  '', // promote into the shared native-deps cache
   '', // clean stage root
   'DEAD',
   '', // publish the per-launch credential

From 2c4989ea9481d34e7efa02cf1c206c1d68b42e74 Mon Sep 17 00:00:00 2001
From: OrcaWin <alpha-eng@stably.ai>
Date: Tue, 1 Sep 2026 23:21:09 -0700
Subject: [PATCH 20/92] docs(windows): document the EDR signal surface (#17856)

* docs(windows): document the EDR signal surface

Six Microsoft Defender for Endpoint incidents fired against Orca 1.4.192 in
eight days on one enterprise Windows 11 / Intune tenant. All six were
behavioural process-tree scoring, not signature hits; two escalated to
multi-stage incidents mapped to ATT&CK Execution and Collection.

Add a reference doc mapping each attack-technique-shaped behaviour to the code
that produces it and to why it exists: the renamed daemon image (T1036), the
per-process PEB read, encoded policy-bypassed PowerShell (T1049), caret-escaped
cmd.exe lines, and computer-use screen capture plus runtime-compiled MSIL
(T1113). Records that signing is not the gate -- reputation is signer plus
hash-keyed prevalence -- and carries the two evidence gaps the report noted.

Adds an engineer checklist, deployment guidance for admins (AV path exclusions
do not suppress EDR behavioural alerts; an MDE alert suppression rule does), and
an explicit pre-deployment warning about computer use.

* docs(windows): correct the PowerShell flag inventory and admin paths

Review corrections to the EDR posture doc.

The "encoded, policy-bypassing PowerShell" list conflated three different
shapes and was incomplete. Split it into the three tiers an EDR actually scores
differently -- bypass plus encoding, encoding alone, and bypass alone -- and add
the sites it missed, including windows-mobile-firewall.ts, which encodes a
script and launches it elevated through Start-Process -Verb RunAs. system-fonts.ts
(-Command) and desktop-script-provider-bridge.ts (-File) were listed as encoded
and are not. Notes that a raw grep under-reports, because the hook sites reach
-EncodedCommand through wrapWindowsPowerShellEncodedCommand.

Attribute the in-payload Set-ExecutionPolicy move to #16576 rather than to
#16003's measurement, which keyed on -WindowStyle Hidden + -EncodedCommand, and
record that the launcher's own tradeoff is unverified on a real box.

Admin guidance was missing two ways a suppression rule pinned to one full path
misses real activity: the .staging-<hex> sibling that exists mid-update, which
is when the update-cluster incidents fire, and the userData fallback when
LOCALAPPDATA is unset.

Also: state the measurement conditions on the process-table timings, note that
Hermes has surface even though we have no telemetry for it, note that the
uninstaller names are electron-builder-generated and in no repo file, drop a
volatile line count, and mark the per-operation computer-use shape as being
addressed by an unmerged change. Drops the duplicated AGENTS.md section, keeping
the indexed bullet.

* docs(windows): reconcile the EDR posture doc with the shipped remediation

Three claims in this doc became false once the rest of the Windows EDR set
landed, and two told engineers the opposite of what the release does.

The process-table section still described one shared snapshot taken with
`Memory | CommandLine | CreationTime`, argued that splitting the cache per
field set "would restore exactly the fan-out it exists to prevent", and
concluded the shape was unfixable because "the information is only in the
PEB". The split shipped (identity opens no handle at all), `Memory` is
retired, and the command line now comes from the kernel through
`ProcessCommandLineInformation` -- `ReadProcessMemory` is absent from the
compiled addon and a ratchet asserts it against the import table. An engineer
reading the old text would have concluded both fixes were dead ends.

The PowerShell site inventories were stale in three of four lists: the port
scan went native, every `-ExecutionPolicy Bypass` + `-EncodedCommand` pair
was dropped as a measured no-op, and of the unencoded-bypass list only
`wsl-cli-scripts.ts` survives. Regenerated against the merged tree, including
the sites that reach the flag through `wrapWindowsPowerShellEncodedCommand`
and never spell it, which a raw `rg` misses.

Incident-evidence sections are left alone: they record what the tenant observed
on 1.4.192, not what the code does now.

---------

Co-authored-by: Orca Worker <orca-worker@localhost>
---
 .gitignore                            |   1 +
 AGENTS.md                             |   1 +
 docs/reference/windows-edr-posture.md | 401 ++++++++++++++++++++++++++
 3 files changed, 403 insertions(+)
 create mode 100644 docs/reference/windows-edr-posture.md

diff --git a/.gitignore b/.gitignore
index e3fd07e45d1..3fb72a6486a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -110,6 +110,7 @@ docs/**
 !docs/reference/macos-press-and-hold.md
 !docs/reference/orcad-operations.md
 !docs/reference/relay-grace-time-reconfiguration.md
+!docs/reference/windows-edr-posture.md
 !docs/reference/windows-process-enumeration.md
 !docs/reference/wsl-runner-verification.md
 !docs/reference/remote-wire-compatibility.md
diff --git a/AGENTS.md b/AGENTS.md
index 9817cc41cc8..8b0156ba6b1 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -49,6 +49,7 @@ Orca targets macOS, Linux, and Windows. Keep all platform-dependent behavior beh
 - **Windows setup scripts**: the setup/issue-command runner is a `.cmd` batch file unless the script starts with a `#!` line — never derive that from the user's terminal-shell preference, and never launch a `.cmd` runner with a bare `cmd.exe /c` from a Git Bash pane (MSYS rewrites the `/c`). See [`docs/reference/windows-setup-shell.md`](./docs/reference/windows-setup-shell.md).
 - **Windows child processes**: start them through `runProcess`/`spawnProcess` in `src/shared/child-process/` — never `child_process` directly. It pins `windowsHide`, refuses `shell: true`, and encodes `.cmd`/`.bat` arguments so neither `CommandLineToArgvW` nor `cmd.exe` mangles them. A ratchet test fails on any new direct import.
 - **Windows process enumeration**: read the table through `src/main/windows/windows-process-table.ts`, never by forking `powershell.exe`. See [`docs/reference/windows-process-enumeration.md`](./docs/reference/windows-process-enumeration.md).
+- **Windows EDR signal**: don't add `-ExecutionPolicy Bypass`, `-EncodedCommand`, `cmd.exe /c` with escaped free text, per-operation interpreter spawning, or runtime `Add-Type` compilation without reading [`docs/reference/windows-edr-posture.md`](./docs/reference/windows-edr-posture.md) first — behavioural EDR scores each of those, and being signed does not clear them.
 - **WSL commands**: build argv with `buildWslExecArgs` (always `--exec` — under `--`, `wsl.exe` expands `$name` in every argument and silently rewrites the script), and fence anything whose stdout you parse with `buildWslCapturedLoginShellCommand`, because the interactive login shell prints the distro banner to stdout. See [`docs/reference/wsl-command-execution.md`](./docs/reference/wsl-command-execution.md).
 - **Linux native modules**: keep the glibc floor at Ubuntu 20.04 / glibc 2.31. A module compiled from source on a newer runner can reference symbol versions absent on the floor and crash the app on startup. See [`docs/reference/linux-glibc-compatibility.md`](./docs/reference/linux-glibc-compatibility.md); packaging fails if a bundled native binary needs newer glibc.
 
diff --git a/docs/reference/windows-edr-posture.md b/docs/reference/windows-edr-posture.md
new file mode 100644
index 00000000000..d44aaf33e38
--- /dev/null
+++ b/docs/reference/windows-edr-posture.md
@@ -0,0 +1,401 @@
+# Windows EDR signal surface
+
+Orca's Windows process tree is shaped like the thing behavioural EDR is built to
+find. An enterprise Windows 11 / Intune tenant opened **six Microsoft Defender
+for Endpoint incidents against Orca 1.4.192 in eight days**. All six fired as
+active incidents and stayed open; three closed only because a human classified
+them by hand in the portal. Defender never downgraded or closed one on its own.
+
+None were signature hits. Every one was behavioural process-tree scoring, and
+two escalated to multi-stage incidents carrying ATT&CK tactic mappings
+(Execution, Collection).
+
+The framing this document keeps throughout, because both halves matter:
+
+> **Defender is not malfunctioning. It is describing the code accurately.** Orca
+> really does copy its own signed image under a different name, really does read
+> every process's memory on a timer, really does run base64-encoded PowerShell
+> with the execution policy bypassed, and really does take screenshots and
+> synthesise input from a runtime-compiled assembly. Each of those is a
+> deliberate engineering choice with issue history behind it. The problem is not
+> that the capabilities are illegitimate — it is that their **behavioural
+> signature overlaps with attack techniques**, and an EDR scoring behaviour
+> cannot see the difference.
+
+Do not read this as a bug report against Defender, and do not read it as a claim
+that Orca is malware. It is a map of which of our behaviours are legible to an
+EDR as attack-technique-shaped, why each one exists, and what engineers and
+administrators can do about it.
+
+## What the tenant actually saw
+
+Four independent evidence clusters, from six incidents:
+
+| Cluster           | Incidents | Evidence                                                                                                             |
+| ----------------- | --------- | -------------------------------------------------------------------------------------------------------------------- |
+| **Update**        | A, B, C   | `orca-windows-setup.exe` → `old-uninstaller.exe`, `Uninstall Orca.exe` (electron-builder generates these; they are in no repo file) |
+| **Spawn**         | all six   | `Orca.exe` → `orca-terminal-daemon.exe` → `powershell.exe` / `pwsh.exe` / `cmd.exe` / `reg.exe` → `claude.exe`, `gh.exe`, `codex.cmd` |
+| **Process table** | D         | "suspicious memory activity" — `OpenProcess` plus a PEB read against every process on a repeating cadence            |
+| **Computer use**  | E, F      | `runtime.ps1`, `computer-sidecar.js`, many `operation.json`, a burst of ~10 short-lived `powershell.exe`             |
+
+Incident E is the one to look at hardest: 5 alerts, 37 evidence items, ATT&CK
+**Execution + Collection**, and a description reading _"Screenshots were taken
+unexpectedly on this device… Screen capture code was found in a script launched
+by powershell.exe."_ Incident F added _"suspicious MSIL code"_, from the
+`Add-Type -TypeDefinition` that recompiles inline C# P/Invoke on every
+operation.
+
+In the update cluster the uninstaller is genuinely `NotSigned`, while `Orca.exe`
+and `orca-terminal-daemon.exe` report `Valid CN=SignPath Foundation`.
+
+## The behaviours, and why each one exists
+
+### The daemon runs from a renamed copy of our own image
+
+`src/main/daemon/daemon-host-relocation.ts` copies the Electron runtime into
+`%LOCALAPPDATA%\Orca\daemon-host\<version>\` and renames `Orca.exe` to
+`orca-terminal-daemon.exe`. The comment on `DAEMON_HOST_EXE_NAME` states the
+reason without varnish: _"so the NSIS updater's `taskkill /IM Orca.exe` can't
+match it."_
+
+It exists because the NSIS installer deletes the old install directory and force-
+kills every process imaged under it. Without relocation, an auto-update kills the
+terminal daemon and every live terminal with it. The copy is a run-as-node
+`Orca.exe` rather than `node.exe` so there is no console flash and asar still
+resolves; `config/nsis/daemon-host-uninstall.nsh` reaps it on a real uninstall
+(guarded by `${isUpdated}` so an update's `uninstallOldVersion` never fires it).
+
+**How an EDR reads it: MITRE T1036, masquerading.** A signed executable copied
+out of the install directory into `%LOCALAPPDATA%` under a different name, which
+then spawns shells, matches the textbook description closely enough that no
+behavioural engine can be expected to score it low.
+
+### Every process gets a handle, on a timer
+
+`src/main/windows/windows-process-table.ts` takes a Toolhelp32 snapshot under one
+of two flag sets. Identity (`None | CreationTime`) answers pid/ppid/name from the
+snapshot alone and opens nothing; the detailed set adds `CommandLine`, which
+costs one `OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION)` per process. `Memory`
+is retired — it took a second handle carrying `PROCESS_VM_READ` and never read
+through it.
+
+It exists because seven independent readers used to fork `powershell.exe` for a
+`Get-CimInstance Win32_Process` scan. That cost, measured: a PowerShell
+Transcription policy recorded **~289 GB across 1.4 million files** because a scan
+ran every ~2 seconds (#15209); a Group Policy or AV block turned a query into
+"unavailable", which callers read as "no evidence", which is how a PTY tree
+survived its own teardown (#9045, #10475); and the scan cost ~700 ms per pane, so
+panes multiplied it (#15036). The native snapshot answers the same question in
+15.9 ms against 706 ms for CIM — p50, measured on Windows 11 at 1050 processes.
+See
+[`windows-process-enumeration.md`](./windows-process-enumeration.md).
+
+Asking for fewer fields is cheaper, and since the split the module does: one
+cache per flag set, so teardown identity and the session owner probe open no
+handle at all (6.3 ms p50) while only the callers that read a command line pay
+for one (12.3 ms p50, at 492 processes). Each cache still single-flights within
+itself, and one gate serializes the native reads because the vendored wrapper
+coalesces the flags of two overlapping calls.
+
+**How an EDR reads it:** a cross-process handle plus a remote memory read against
+every process on the box, repeating on a cadence, is the read half of the
+telemetry that credential dumping and process injection produce. MDE surfaced it
+as "suspicious memory activity". The memory read is gone: the command line now
+comes from the kernel, through `NtQueryInformationProcess`'s
+`ProcessCommandLineInformation` class, which needs only
+`PROCESS_QUERY_LIMITED_INFORMATION`. `ReadProcessMemory` is absent from the
+compiled addon, asserted against the binary's import table because the published
+prebuild loads fine and emits byte-identical strings. What is left to declare to
+administrators is the per-process handle itself.
+
+### Encoded, policy-bypassing PowerShell
+
+Three sites are named in the incident analysis:
+
+- `src/relay/windows-port-scan.ts` ran
+  `-NoProfile -NonInteractive -ExecutionPolicy Bypass -EncodedCommand` over a
+  `Get-NetTCPConnection -State Listen` script to find dev-server ports.
+  Enumerating listening ports is **MITRE T1049**, network service discovery, and
+  doing it through an encoded policy-bypassed shell is the aggravating factor
+  rather than the finding itself. The ordinary scan now starts no PowerShell at
+  all — `netstat.exe -ano`, with the owning process name projected off the shared
+  native table — and that payload survives only as the last-resort fallback, as
+  `-Command` with no policy override.
+- `src/main/daemon/shell-ready.ts` uses `-EncodedCommand` for the OSC 133
+  bootstrap.
+- `src/main/agent-hooks/windows-powershell-hook-launcher.ts` wraps managed hooks.
+
+**No site spells the pair any more.** `src/main/ssh/ssh-remote-powershell.ts`,
+`src/shared/setup-agent-sequencing.ts`,
+`src/shared/windows-cmd-runner-delayed-launch.ts` and
+`src/shared/windows-interactive-login-spawn.ts` each dropped
+`-ExecutionPolicy Bypass` as a measured no-op: the policy gates script *files*,
+never `-EncodedCommand`. Where the bypass was load-bearing it moved in-payload as
+a process-scope `Set-ExecutionPolicy` (`setup-agent-sequencing.ts`), which is the
+pattern to copy rather than restoring the switch — the switch loses to a GPO
+scope anyway, so it never covered the locked-down case.
+
+What remains is `-EncodedCommand` without the bypass: the PTY bootstraps
+(`src/main/daemon/shell-ready.ts`, `src/main/providers/local-pty-shell-ready.ts`,
+`src/main/providers/windows-shell-args.ts`), the hook wrappers
+(`src/main/agent-hooks/windows-powershell-hook-launcher.ts` and its callers
+`src/main/agent-hooks/runtime-home-hook-command.ts`,
+`src/main/agent-hooks/installer-utils.ts`, `src/main/claude/hook-settings.ts`),
+`src/main/runtime/windows-default-route-interfaces.ts`,
+`src/main/runtime/orchestration/setup-completion-signal.ts`,
+`src/shared/hermes-startup-query.ts`, and the four ex-bypass sites above.
+`src/main/runtime/windows-mobile-firewall.ts` encodes a script and launches it
+_elevated_ through `Start-Process -Verb RunAs`, which is a stronger shape than
+any of those; only that hop is encoded, because `-ArgumentList` re-splits an
+unquoted parameter string on whitespace.
+
+One site still spells `-ExecutionPolicy Bypass` with **no** encoding, the weaker
+signal: `src/main/cli/wsl-cli-scripts.ts` (`-File`, and it is a real script
+file, so the switch is not a no-op there). `src/main/system-fonts.ts` dropped it
+for plain `-Command`; `src/shared/secure-path-windows-acl.ts` no longer runs
+PowerShell at all, having moved to `icacls.exe`; and computer use now asks for
+`-ExecutionPolicy RemoteSigned` in
+`src/main/computer/windows-powershell-execution-policy.ts`, falling back to
+`Bypass` only after a policy-blocked start.
+
+Regenerate with `rg -- '-EncodedCommand|-ExecutionPolicy' src/` rather than
+trusting the lists above, and note that a raw grep under-reports: the hook sites
+reach `-EncodedCommand` through `wrapWindowsPowerShellEncodedCommand` and never
+spell the flag themselves.
+
+Encoding is not gratuitous: it shields paths and switches from `cmd.exe` and MSYS
+rewriting (#6078, #14815), which is a real class of corruption. But
+`-EncodedCommand` is a first-class Defender alert title ("Suspicious PowerShell
+command line"), and base64 raises the score rather than lowering it, because it
+denies the analyser the payload it would otherwise clear.
+
+The hook launcher is prior art worth knowing about. #16003 measured, on a
+reporting Kaspersky host, that `-WindowStyle Hidden` paired with
+`-EncodedCommand` was denied at `CreateProcess` with exit 126 regardless of
+payload — `exit 0` was denied too. The fix was to stop *spelling* the flags:
+`WINDOWS_POWERSHELL_HOOK_SWITCHES` is now just `-NoProfile`, and separately, in
+#16576, the execution policy bypass moved in-payload as a process-scope
+`Set-ExecutionPolicy` — a real command-line signal reduction, though #16003's
+measured denial keyed on `-WindowStyle Hidden` + `-EncodedCommand`, not on the
+bypass. It is also honest that the underlying behaviour did not change.
+
+Copy the pattern, but copy its caveat too. `windows-powershell-hook-launcher.ts`
+records that dropping `-WindowStyle Hidden` was a real tradeoff whose suppression
+"was never measured" and "remains unverified on a real box". Reducing spelled
+flags is the right instinct; treat any specific claim about what a removed flag
+was doing as unproven until someone measures it.
+
+### `cmd.exe /c` carrying caret-escaped free text
+
+`buildWindowsCmdShimCommandLine` in
+`src/shared/child-process/windows-command-line.ts` builds `/d /v:off /s /c "…"`
+for the `.cmd` and `.bat` targets Windows can only start through `cmd.exe`
+(`codex.cmd` being the one that matters). Because cmd expands `%VAR%` even inside
+a quoted token, each `%` is broken with `"^%"`.
+
+The escaping is not decorative. Measured on Windows 11 against a real `.cmd`
+shim, `["a b", 'c"d', "e%F%g", "h&i", "j^k"]` came back as `["a b", 'c"d',
+"e^%F^%g", "h"]` — the `&` truncated the argument *and* ran the remainder as a
+command.
+
+**How an EDR reads it:** caret escaping is the canonical obfuscation marker in
+`cmd.exe` command lines, and the free text being escaped here is an agent prompt,
+so the line is long, high-entropy, and attacker-shaped. It is the exact input an
+obfuscated-command-line detector is tuned on.
+
+### The spawn tree itself
+
+`Orca.exe` → `orca-terminal-daemon.exe` → a shell → an agent CLI is what a
+terminal multiplexer for coding agents *is*. `reg.exe` appears from
+`src/main/win32-utils.ts`,
+`src/main/agent-hooks/managed-hook-owner-identity.ts` and
+`src/relay/pty-shell-utils.ts` (reading the OpenSSH `DefaultShell`).
+
+Nothing here is avoidable in principle. What is controllable is depth and
+breadth: every interpreter hop between Orca and the thing the user asked for adds
+a scored edge, which is why the shipped doctrine of #15520 and #15595 is to
+*shorten the interpreter chain* rather than to hide a window.
+
+### Computer use: screen capture, synthetic input, runtime-compiled MSIL
+
+`native/computer-use-windows/runtime.ps1` is a large PowerShell script.
+`src/main/computer/desktop-script-provider-bridge.ts` launches it as
+`powershell.exe -NoLogo -NoProfile -NonInteractive -ExecutionPolicy RemoteSigned
+-File runtime.ps1 <operation.json>`, retrying once at `Bypass` only if the start
+comes back policy-blocked — **once per operation**, with
+`desktop-script-provider-client.ts` writing a fresh `operation.json` into a new
+temp directory each time. On every launch the script runs `Add-Type
+-TypeDefinition` over inline C# that P/Invokes `SendInput` and the window APIs,
+then captures the screen through `Graphics.CopyFromScreen`.
+
+That is four separate high-signal behaviours stacked in one process:
+
+| Behaviour                                       | How it is scored                                     |
+| ----------------------------------------------- | ---------------------------------------------------- |
+| `Graphics.CopyFromScreen`                       | **MITRE T1113**, screen capture — Collection tactic  |
+| `SendInput` synthetic keyboard/mouse            | input synthesis against other applications           |
+| `Add-Type -TypeDefinition` on every operation   | MSIL compiled at runtime; incident F's "suspicious MSIL code" |
+| One `powershell.exe` per operation              | a burst of short-lived interpreters under one parent |
+
+The bottom two rows are the two the incident text named directly, and they are
+also the two a persistent runtime host would remove: a long-lived helper compiles
+its P/Invoke stubs once and answers operations over a channel, so neither the
+MSIL recompilation nor the interpreter burst repeats. A change doing that is in
+flight and unmerged at the time of writing; check the code rather than this
+paragraph for what the shipped build does. Screen capture and `SendInput` are
+inherent to the feature and no refactor removes them.
+
+## Signing is not the gate
+
+The most useful calibration in the whole incident set came from the reporter's
+own machine: **Antigravity IDE's main executable is `NotSigned` and was not
+flagged, while Orca's is signed and was flagged six times.** Their conclusion:
+_"signing is not the gate here — behaviour is."_
+
+The mechanism is that Defender reputation is signer **plus prevalence**, and
+prevalence is keyed on **file hash**. A widely installed unsigned binary clears
+on install count alone. Orca's signature is a free OV certificate from SignPath
+Foundation (`config/electron-builder.config.cjs` sets
+`win.signtoolOptions.publisherName`; `config/scripts/verify-windows-inner-signature.mjs`
+pins `CN=SignPath Foundation, O=SignPath Foundation, L=Lewes, S=Delaware, C=US`),
+shared across many OSS projects, with no independent SmartScreen or MAPS
+reputation of its own. Every release ships new hashes, so whatever prevalence a
+build accumulates resets on the next update. Dev channels ship unsigned by
+design, because SignPath's approval waits cannot fit a dev cadence
+(`config/scripts/verify-dev-channel-packaging.mjs`).
+
+Signing the uninstaller is worth doing — an unsigned `old-uninstaller.exe`
+running under a signed installer is a gratuitous contribution to the update
+cluster — but do not expect it to change the behavioural verdict. The three
+non-update clusters contain no unsigned binary at all.
+
+## What we do not know
+
+Two limits the incident analysis recorded, kept here rather than smoothed over:
+
+- **No data on Hermes.** Nothing in this document describes how Hermes behaves
+  under the same tenant policy — though `src/shared/hermes-startup-query.ts` does
+  spell `-EncodedCommand`, so the gap is telemetry, not surface.
+- **Antigravity not being flagged is absence of evidence, not proof.** It is one
+  reporter's recollection from one machine, not a measurement. It is strong
+  enough to falsify "the problem is that we are not signed well enough"; it is
+  not strong enough to support a positive claim about how Defender scores that
+  product.
+
+Add to those: this is one tenant with one policy configuration. Whether the same
+build scores the same way elsewhere is unmeasured.
+
+## Guidance for engineers
+
+Fixes for several of the shapes above are in flight in separate changes; nothing
+in this section should be read as a statement that a given site has already
+changed. Check the code before relying on it.
+
+The checklist. On Windows, do not reach for:
+
+| Don't                                                       | Instead                                                                                                                    |
+| ----------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- |
+| `-ExecutionPolicy Bypass` on the command line               | Set the policy in-payload at process scope, as `windows-powershell-hook-launcher.ts` does, or do not run a `.ps1` at all    |
+| `-EncodedCommand`                                           | A temp `.ps1` with an argument, or no PowerShell hop: prefer a native API or an existing Node path                          |
+| `cmd.exe /c` carrying escaped free text                     | Spawn the real target directly. `cmd.exe` is only unavoidable for `.cmd`/`.bat`; keep free text out of the line where you can |
+| Forking `powershell.exe` to read system state               | The native reader — [`windows-process-enumeration.md`](./windows-process-enumeration.md) is the standing rule for the process table |
+| A process per operation in a loop                           | One long-lived helper with a request channel. A burst of short-lived interpreters under one parent is itself the signal     |
+| `Add-Type -TypeDefinition` at runtime                       | A precompiled, signed assembly, or a native helper                                                                          |
+| Copying our own image under a different name                | An installer or updater that does not need the rename. Where the rename is load-bearing, document it as such                |
+| Deriving a script runner from a UI preference               | [`windows-setup-shell.md`](./windows-setup-shell.md) — the script declares its own interpreter                              |
+
+Two framing rules that outlast the table:
+
+- **Shorten the interpreter chain.** Each hop between Orca and the user's actual
+  target is a scored edge and a place for AV to deny a `CreateProcess`. This is
+  the shipped doctrine of #15520 and #15595.
+- **Do not spell a flag you can avoid spelling.** #16003 measured a denial that
+  was independent of the payload and keyed purely on the switch combination on
+  the command line. What is on the line is itself the detection surface.
+
+## Guidance for administrators deploying Orca
+
+### Path exclusions alone will not silence these
+
+This is the single most important operational point, and it is the one most
+commonly got wrong. The six incidents are **MDE EDR behavioural alerts**.
+Defender Antivirus path exclusions suppress *scan* detections; they do not
+suppress EDR behavioural alerts the same way. Adding
+`%LOCALAPPDATA%\Programs\orca\` to the AV exclusion list and expecting the
+incidents to stop will not work.
+
+### What actually stops incidents being created
+
+An **MDE alert suppression rule** scoped to the process tree. Build it in
+Microsoft 365 Defender (Settings → Endpoints → Alert suppression), conditioned
+on:
+
+- **Alert titles** — `A suspicious file was observed` and
+  `Suspicious PowerShell command line`, plus any further titles your tenant
+  actually produced. Take the titles from your own incidents rather than from
+  this list.
+- **File paths** — `Orca.exe` and `orca-terminal-daemon.exe` under
+  `%LOCALAPPDATA%\Programs\orca\` and `%LOCALAPPDATA%\Orca\daemon-host\`.
+
+Scope it as narrowly as your tenant will tolerate, and review it when Orca
+updates: the `daemon-host` path carries a `<version>` segment, so a rule pinned
+to one version will silently stop matching. Two traps in that path in particular.
+Materialization stages into a `<version>.staging-<hex>` sibling before renaming
+it into place, so an exact-version rule misses the tree **mid-update** — which is
+precisely when the update-cluster incidents fire. And the root falls back to the
+Electron `userData` path when `LOCALAPPDATA` is unset, so
+`%LOCALAPPDATA%\Orca\daemon-host\` is the normal location rather than a
+guaranteed one. Prefer a prefix match on `…\Orca\daemon-host\` over a rule
+pinned to one full path.
+
+Add AV path exclusions for those two directories as well — they cut scan cost on
+a tree that is rewritten on every update — but understand the division of
+labour. The exclusions reduce scanning; **the suppression rule is what stops
+incidents being created.**
+
+### Check your ASR rules
+
+Check whether the tenant has the Attack Surface Reduction rule **"Block
+executable files from running unless they meet a prevalence, age, or trusted list
+criterion"** enabled. If it is, that alone explains a freshly signed Orca build
+being hit immediately after every update: each release ships new hashes, so every
+build starts at zero prevalence and zero age no matter how it is signed. Either
+allowlist the Orca install paths for that rule or expect a hit on each update.
+
+### Expect the alerts to recur after each update
+
+Prevalence is keyed on file hash. An update replaces the hashes, the reputation
+starts over, and a suppression rule is the only thing carrying across.
+
+## Computer use: decide before you deploy
+
+Read this section before enabling computer use on a monitored endpoint, not
+after.
+
+> **On a monitored endpoint, an alert reading "Screenshots were taken
+> unexpectedly on this device" is not the kind of finding a SOC dismisses on
+> sight.**
+
+Incident E is the shape to expect: 5 alerts, 37 evidence items, a multi-stage
+incident mapped to ATT&CK **Execution + Collection**, and a description naming
+screen capture found in a script launched by `powershell.exe`. Incident F adds
+runtime-compiled MSIL to the same tree.
+
+Every part of that is an accurate description of what the feature does. Orca's
+computer use takes screenshots, synthesises keyboard and mouse input into other
+applications, and compiles the P/Invoke stubs it needs at runtime. An
+organisation that monitors for Collection-tactic activity — and any organisation
+running MDE with default incident creation does — will see it, and will see it
+as Collection.
+
+So decide deliberately, in advance:
+
+- **Allowlist it**, with a suppression rule covering the computer-use tree
+  (`powershell.exe` with `-File …\runtime.ps1`) as well as the base Orca paths,
+  and tell your SOC what it is before the first incident rather than during it.
+- **Or leave it disabled** on monitored endpoints.
+
+What does not work is deploying it un-triaged and handling the incidents
+reactively. By the time a Collection-tactic incident is open, an analyst is
+already reading a description of screenshots being taken without the user's
+knowledge, and the burden of proof has moved to you.

From c3c764fa0363b6453925e8f07fbf5b0cb26e4edd Mon Sep 17 00:00:00 2001
From: OrcaWin <alpha-eng@stably.ai>
Date: Tue, 1 Sep 2026 23:21:14 -0700
Subject: [PATCH 21/92] docs(win): record why the PTY OSC 133 bootstrap keeps
 -EncodedCommand (#17875)

The MDE report lists src/main/daemon/shell-ready.ts as a contributing
"suspicious PowerShell" site and cites VS Code as using -Command. Measured
against a real VS Code fork install, VS Code's -Command payload is a one-liner
that dot-sources a *file*; that shape is execution-policy gated and is blocked
under Restricted and AllSigned, so it would silently drop OSC 133 -- and with
it foreground-process and exit-code tracking -- on the managed fleets MDE runs
on.

Inline -Command does carry the payload intact through node-pty/ConPTY
(powershell.exe 5.1 and pwsh 7.6.5), so the switch is feasible. It is declined
because no PTY site spells -ExecutionPolicy Bypass, AMSI and script-block
logging decode the payload either way, and the swap would put
$ExecutionContext.SessionState.LanguageMode, a Global:prompt override and
[char]27-assembled control sequences in clear text on every terminal's command
line -- higher-signal than the token it removes.

No behaviour change. Adds the rationale at the payload's source of truth,
one-line pointers at the three PTY launch sites, and a ratchet that both
launch builders must deliver the bootstrap byte for byte.

Co-authored-by: Orca Worker <orca-worker@localhost>
---
 src/main/daemon/shell-ready.ts               |  1 +
 src/main/powershell-osc133-bootstrap.test.ts | 30 ++++++++++++++++++
 src/main/powershell-osc133-bootstrap.ts      | 33 ++++++++++++++++++++
 src/main/providers/local-pty-shell-ready.ts  |  1 +
 src/main/providers/windows-shell-args.ts     |  1 +
 5 files changed, 66 insertions(+)

diff --git a/src/main/daemon/shell-ready.ts b/src/main/daemon/shell-ready.ts
index 547c5227ffb..9dc60b7c980 100644
--- a/src/main/daemon/shell-ready.ts
+++ b/src/main/daemon/shell-ready.ts
@@ -175,6 +175,7 @@ export function getShellLaunchConfig(
       args: [
         '-NoLogo',
         '-NoExit',
+        // Why base64 and not -Command: see powershell-osc133-bootstrap.ts (MDE review).
         '-EncodedCommand',
         encodePowerShellCommand(getPowerShellOsc133Bootstrap())
       ],
diff --git a/src/main/powershell-osc133-bootstrap.test.ts b/src/main/powershell-osc133-bootstrap.test.ts
index c5fae19e524..6cf8854995d 100644
--- a/src/main/powershell-osc133-bootstrap.test.ts
+++ b/src/main/powershell-osc133-bootstrap.test.ts
@@ -3,6 +3,9 @@ import {
   encodePowerShellCommand,
   getPowerShellOsc133Bootstrap
 } from './powershell-osc133-bootstrap'
+import { getShellLaunchConfig } from './daemon/shell-ready'
+import { resolveWindowsShellLaunchArgs } from './providers/windows-shell-args'
+import { STARTUP_COMMAND_FEATURES } from './shell-startup-launch-intent-fixtures'
 
 describe('PowerShell OSC 133 bootstrap', () => {
   it('wraps prompt/readline without bypassing profiles or execution policy', () => {
@@ -44,4 +47,31 @@ describe('PowerShell OSC 133 bootstrap', () => {
       Buffer.from('Write-Output ok', 'utf16le').toString('base64')
     )
   })
+
+  // Why pinned: the MDE review (see powershell-osc133-bootstrap.ts) declined a
+  // switch to -Command. Any future delivery shape must still hand PowerShell this
+  // payload byte for byte -- comments, quotes, `$` and newlines included.
+  describe.each([
+    [
+      'daemon shell-ready',
+      () => getShellLaunchConfig('powershell.exe', STARTUP_COMMAND_FEATURES).args ?? []
+    ],
+    [
+      'windows shell args',
+      () => resolveWindowsShellLaunchArgs('pwsh.exe', 'C:\\repo', 'C:\\repo').shellArgs
+    ]
+  ])('%s PowerShell launch', (_name, getArgs) => {
+    it('delivers the bootstrap unmangled', () => {
+      const args = getArgs()
+      const encodedIndex = args.indexOf('-EncodedCommand')
+
+      expect(encodedIndex).toBeGreaterThanOrEqual(0)
+      expect(args).not.toContain('-Command')
+      expect(args).not.toContain('-ExecutionPolicy')
+
+      const delivered = Buffer.from(args[encodedIndex + 1] ?? '', 'base64').toString('utf16le')
+
+      expect(delivered.startsWith(getPowerShellOsc133Bootstrap())).toBe(true)
+    })
+  })
 })
diff --git a/src/main/powershell-osc133-bootstrap.ts b/src/main/powershell-osc133-bootstrap.ts
index 1f356b1c332..f776521d498 100644
--- a/src/main/powershell-osc133-bootstrap.ts
+++ b/src/main/powershell-osc133-bootstrap.ts
@@ -2,6 +2,39 @@ import { getPowerShellOmpShellWrapper } from './pty/omp-shell-wrapper'
 import { getPowerShellCodexShellLaunchPreflight } from './pty/codex-shell-launch-preflight'
 export { encodePowerShellCommand } from '../shared/powershell-command-encoding'
 
+/**
+ * Why every PTY site delivers this payload as `-EncodedCommand` and keeps doing so.
+ *
+ * An MDE report named the base64 a contributing "suspicious PowerShell" signal and
+ * pointed at VS Code as the counter-example. VS Code and its forks actually ship
+ * `["-noexit","-command",'try { . "{0}\\...\\shellIntegration.ps1" } catch {}']` -- a
+ * one-liner that dot-sources a *file*, not inline script. Dot-sourcing is
+ * execution-policy gated; inline text is not. Measured on Windows 11:
+ *
+ *   policy        dot-source .ps1   -Command inline   -EncodedCommand
+ *   Restricted    blocked           runs              runs
+ *   AllSigned     blocked           runs              runs
+ *   RemoteSigned  runs              runs              runs
+ *
+ * So VS Code's shape silently drops OSC 133 -- and with it foreground-process and
+ * exit-code tracking -- on exactly the locked-down fleets MDE runs on; its `catch {}`
+ * is that failure being swallowed.
+ *
+ * Inline `-Command` does carry this payload intact through node-pty/ConPTY (verified
+ * on powershell.exe 5.1 and pwsh 7.6.5), so the switch is feasible; it is declined
+ * because it costs more signal than it removes. No PTY site spells `-ExecutionPolicy
+ * Bypass`, so base64 is the whole of what would go, and AMSI and script-block logging
+ * decode it anyway -- nothing is hidden from MDE today. What would change is the
+ * process command line, which would then carry `$ExecutionContext.SessionState.
+ * LanguageMode`, a `function Global:prompt` override and `[char]27`-assembled control
+ * sequences in clear text: higher-signal for command-line heuristics than an opaque
+ * token with no `Bypass` beside it.
+ *
+ * The payload is also not static -- providers/windows-shell-args.ts appends the PTY
+ * cwd and the queued startup command. #7978 had to move cmd.exe startup commands off
+ * `/K` to stdin because node-pty's argv escaping mangled their quotes; PowerShell
+ * never needed that workaround, because `-EncodedCommand` is quoting-proof.
+ */
 const POWERSHELL_OSC133_BOOTSTRAP = `# Orca OSC 133 shell integration for PowerShell.
 # Profiles have already loaded normally by the time -EncodedCommand runs.
 # Restore managed ownership before the shell-integration compatibility guard.
diff --git a/src/main/providers/local-pty-shell-ready.ts b/src/main/providers/local-pty-shell-ready.ts
index e11f8add7cd..61a04fdf024 100644
--- a/src/main/providers/local-pty-shell-ready.ts
+++ b/src/main/providers/local-pty-shell-ready.ts
@@ -122,6 +122,7 @@ export function getShellLaunchConfig(
       args: [
         '-NoLogo',
         '-NoExit',
+        // Why base64 and not -Command: see powershell-osc133-bootstrap.ts (MDE review).
         '-EncodedCommand',
         encodePowerShellCommand(getPowerShellOsc133Bootstrap())
       ],
diff --git a/src/main/providers/windows-shell-args.ts b/src/main/providers/windows-shell-args.ts
index 4f984559a63..74e5af534f2 100644
--- a/src/main/providers/windows-shell-args.ts
+++ b/src/main/providers/windows-shell-args.ts
@@ -202,6 +202,7 @@ export function resolveWindowsShellLaunchArgs(
     const powerShellCommand = getPowerShellEncodedCommand(nativeCwd, startupCommand)
     // Why: foreground-process status on Windows depends on OSC 133 C/D, and
     // PowerShell needs a prompt/readline bootstrap after profiles finish.
+    // Why base64 and not -Command: see powershell-osc133-bootstrap.ts (MDE review).
     return {
       shellArgs: ['-NoLogo', '-NoExit', '-EncodedCommand', powerShellCommand.encodedCommand],
       ...(powerShellCommand.startupCommandDeliveredInShellArgs

From ee82feb7762806c605b5ca25a2472ccefa4c6be5 Mon Sep 17 00:00:00 2001
From: OrcaWin <alpha-eng@stably.ai>
Date: Tue, 1 Sep 2026 23:21:18 -0700
Subject: [PATCH 22/92] fix(build): pin config/scripts LF so Windows can run
 their tests (#18056)

core.autocrlf=true ships in the Git-for-Windows system config, so a fresh
Windows checkout materializes config/scripts/*.mjs with CRLF. Vite's SSR
transform finds the shebang with /^#!.*\n/, and \r is a JS regex line
terminator, so the pattern misses on CRLF: the hoisted import/export
preamble lands at offset 0 ahead of the shebang, which then defeats the
code[0] === '#' guard that blanks it. A literal #! survives into the middle
of the module and every suite importing the script dies at load with
SyntaxError: Invalid or unexpected token.

Eight suites were unrunnable on Windows. .gitattributes already pinned
eight of these scripts individually; replace those with one glob over the
directory so the pin does not have to be remembered per file, and add a
ratchet that fails when a shebanged script is left on the platform default.

Co-authored-by: Orca Worker <orca-worker@localhost>
Co-authored-by: Neil <4138956+nwparker@users.noreply.github.com>
---
 .gitattributes                                | 12 ++--
 .../shebang-script-line-ending-pin.test.mjs   | 70 +++++++++++++++++++
 2 files changed, 74 insertions(+), 8 deletions(-)
 create mode 100644 config/scripts/shebang-script-line-ending-pin.test.mjs

diff --git a/.gitattributes b/.gitattributes
index f4676d210bb..97eeed155a2 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,11 +1,7 @@
-/config/scripts/create-draft-release.mjs text eol=lf
-/config/scripts/orca-dev.mjs text eol=lf
-/config/scripts/latest-stable-release.mjs text eol=lf
-/config/scripts/publish-complete-draft-releases.mjs text eol=lf
-/config/scripts/release-rc-history.mjs text eol=lf
-/config/scripts/run-internal-dev-setup.mjs text eol=lf
-/config/scripts/verify-cli-bin.mjs text eol=lf
-/config/scripts/verify-release-required-assets.mjs text eol=lf
+# A shebang plus CRLF makes vite's SSR transform emit a literal `#!` mid-module,
+# so any suite importing the script dies at load with a SyntaxError. Pin the whole
+# directory rather than the scripts that happen to have a test today.
+/config/scripts/**/*.mjs text eol=lf
 /skill-guides/*.md text eol=lf
 /skill-stubs/*.md text eol=lf
 /skills/*/SKILL.md text eol=lf
diff --git a/config/scripts/shebang-script-line-ending-pin.test.mjs b/config/scripts/shebang-script-line-ending-pin.test.mjs
new file mode 100644
index 00000000000..5537d258096
--- /dev/null
+++ b/config/scripts/shebang-script-line-ending-pin.test.mjs
@@ -0,0 +1,70 @@
+import { execFileSync } from 'node:child_process'
+import { readFileSync } from 'node:fs'
+import { join, resolve } from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+/**
+ * Guard the `.gitattributes` pin that keeps `config/scripts` scripts on LF.
+ *
+ * `core.autocrlf=true` ships in the Git-for-Windows system config, so without a
+ * pin a Windows checkout gets CRLF. Vite's SSR transform locates the shebang
+ * with `/^#!.*\n/` — `\r` is a JS regex line terminator, so `.` never matches it
+ * and the pattern misses on CRLF. The hoisted import/export preamble then lands
+ * at offset 0, ahead of the shebang, which in turn defeats the `code[0] === '#'`
+ * guard that blanks it. A literal `#!` survives into the middle of the module and
+ * every suite importing the script dies at load with a SyntaxError.
+ *
+ * Scoped to `config/scripts` because that is where tests import scripts. Other
+ * shebanged `.mjs` in the tree are spawned, not imported, so they cannot hit this.
+ */
+const projectDir = resolve(import.meta.dirname, '../..')
+const SCRIPT_DIRECTORY = 'config/scripts'
+
+function git(args) {
+  return execFileSync('git', args, { cwd: projectDir, encoding: 'utf8' })
+}
+
+/** `git check-attr -z` emits NUL-separated path/attr/value triples. */
+function eolAttributes(paths) {
+  const fields = git(['check-attr', '-z', 'eol', '--', ...paths]).split('\0')
+  const found = new Map()
+  for (let index = 0; index + 2 < fields.length; index += 3) {
+    found.set(fields[index], fields[index + 2])
+  }
+  return found
+}
+
+function shebangScripts() {
+  return git(['ls-files', '-z', '--', `${SCRIPT_DIRECTORY}/*.mjs`])
+    .split('\0')
+    .filter(Boolean)
+    .filter((path) => readFileSync(join(projectDir, path), 'utf8').startsWith('#!'))
+}
+
+describe('config/scripts line-ending pin', () => {
+  it('pins every shebanged script to LF', () => {
+    const scripts = shebangScripts()
+    expect(scripts.length).toBeGreaterThan(0)
+
+    const attributes = eolAttributes(scripts)
+    const unpinned = scripts.filter((path) => attributes.get(path) !== 'lf')
+
+    expect(
+      unpinned,
+      'A shebanged script left on the platform default gets CRLF on Windows, ' +
+        'which makes every suite importing it fail to load. Pin it in .gitattributes.'
+    ).toEqual([])
+  })
+
+  // Why: without these the assertion above still passes against a pattern so broad
+  // it says nothing, or so narrow it only covers the files that exist today.
+  it.each([
+    ['config/scripts/example.mjs', 'lf'],
+    ['config/scripts/nested/deeper/example.mjs', 'lf'],
+    ['config/scripts-extra/example.mjs', 'unspecified'],
+    ['vendor/config/scripts/example.mjs', 'unspecified'],
+    ['config/scripts/example.mjsx', 'unspecified']
+  ])('resolves %s to eol=%s', (path, expected) => {
+    expect(eolAttributes([path]).get(path)).toBe(expected)
+  })
+})

From 0c9c3c00cfa2f7f9a78735a229cb7fb50179a2ec Mon Sep 17 00:00:00 2001
From: OrcaWin <alpha-eng@stably.ai>
Date: Tue, 1 Sep 2026 23:21:22 -0700
Subject: [PATCH 23/92] test(ci): ratchet Windows-gated tests into both
 registration lists (#18047)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* test(ci): ratchet Windows-gated tests into both registration lists

PR CI has one windows-2022 job running a curated explicit file list. Every
other job runs on ubuntu, where a Windows-gated suite self-skips and reports
success -- so an unregistered Windows-gated file executes on no machine and
passes green with nothing to tell the author.

Scans every test file for the win32 suite-level gate spellings in use plus the
.win32.test.* filename, and asserts each one appears in BOTH the
"Test Windows-specific boundaries" vitest argv and WINDOWS_PACKAGE_TESTS: the
classifier decides whether the job runs, the argv decides whether the file
runs. The eight already-unregistered files on main are held in a shrink-only
debt list.

* fix(ci): detect compound win32 gates in the lane-registration ratchet

The gate matcher anchored its argument on the closing paren, so
`runIf(platform === 'win32' && hasAddon)` was not matched at all -- the
guard excluded real Windows-gated files by accident of a regex rather
than by design, and would have missed a compound gate on a file that
genuinely needed registering.

Match the condition followed by `)` or `&&`, and resolve named flags from
their assignment in the same file, so `RUN_REAL = platform === 'win32' &&
env…` used as `runIf(RUN_REAL)` is detected whatever the flag is called
and whichever polarity it was written in. That replaces the hardcoded
`isWindows`/`IS_WINDOWS`/`isWin32` names, which guessed polarity from a
name; an imported flag stays undetected and is now documented with the
live example. `||` compounds are rejected on purpose: they can run off
Windows.

Ten env-opt-in suites surface as a result. They are win32-gated but also
require an `ORCA_REAL_*` env var, so registering them would not make CI
run them; they go in MANUAL_OPT_IN, whose entries are asserted to be
genuinely compound and env-gated so the list cannot become a quiet
parking spot.

Also: reuse `scanSourceTree` instead of a fifth divergent walk in the
repo (its docblock records the incident where a hand-rolled walk scanned
`tests/e2e/.cross-version-checkouts/`), adding an `extensions` option so
it can see `.mjs`; strip comments so prose about a gate is not a gate;
skip `mobile/`, which `classifyPrJobs` can never report as registered;
assert exactly one `windows-2022` job, the premise the guard rests on;
cap growth of both grandfathered lists; and test that the self-exemption
covers nothing but this file.

Corrects two docblock claims that were false: that nothing in the repo
computes a gate indirectly (three files did), and that a compound gate's
registration was asserted while only its execution was not (neither was).

* fix(ci): make the manual-opt-in exemption prove the env read reaches the gate

`requiresEnvOptIn` proved the file MENTIONED an env var, not that the gate
DEPENDED on one, so `runIf(platform === 'win32' && hasAddon)` in a file
that happens to read `process.env.RUNNER_TEMP` parked as manual. That is
the native-addon-bytes shape -- a test CI could run -- and only the cap
number stood in the way. Now the win32 check must be compound and one of
its other conjuncts must read `process.env` itself or name a const that
does, which still accepts all ten listed suites.

The compound clause guarding that hole was itself unasserted: deleting it
left every test green. Two fixtures close it, including an env read on the
same line as a bare gate, which is the case that makes the `&&` do work
rather than decorate.

Split FLAG_ASSIGNMENT by polarity. One shared `&&` lookahead was right for
`===` (a second conjunct narrows) and wrong for `!==` (it widens), so
`p = platform !== 'win32' && x` used as `skipIf(p)` read as Windows-only
though it runs on Windows and on POSIX when `x` is false. The literal form
was already rejected; routing it through a flag flipped the answer.

Widen the one-lane assertion from a `windows-2022` equality test to any
`runs-on` that could land on Windows -- `windows-latest`, a label array, a
`{ group, labels }` object -- treating an unresolvable `${{ }}` expression
as Windows so it fails closed.

Docblock: the case-level count is now deliberately approximate. The
reviewer measures 26 against this guard's 31; the figure moves with which
gate spellings are counted, and the policy does not rest on it.

---------

Co-authored-by: Orca Worker <orca-worker@localhost>
Co-authored-by: Neil <4138956+nwparker@users.noreply.github.com>
---
 .../win32-test-lane-registration.test.mjs     | 673 ++++++++++++++++++
 src/shared/source-scan/source-tree-scan.ts    |   9 +-
 2 files changed, 680 insertions(+), 2 deletions(-)
 create mode 100644 config/scripts/win32-test-lane-registration.test.mjs

diff --git a/config/scripts/win32-test-lane-registration.test.mjs b/config/scripts/win32-test-lane-registration.test.mjs
new file mode 100644
index 00000000000..a1566c55c31
--- /dev/null
+++ b/config/scripts/win32-test-lane-registration.test.mjs
@@ -0,0 +1,673 @@
+import { readFileSync, statSync } from 'node:fs'
+import { join, resolve } from 'node:path'
+import { describe, expect, it } from 'vitest'
+import { parse } from 'yaml'
+import { scanSourceTree, stripComments } from '../../src/shared/source-scan/source-tree-scan'
+import { classifyPrJobs } from './pr-code-change-scope.mjs'
+
+/**
+ * Every Windows-gated test file must be registered in BOTH Windows-lane lists.
+ *
+ * PR CI has exactly one job on a Windows runner -- asserted below on any
+ * `runs-on` spelling that could land there, because that premise is what makes
+ * this guard meaningful -- and it runs a curated explicit file list. Everything else runs on `ubuntu-latest`, where a Windows-gated
+ * suite self-skips and reports success. So a new Windows-gated file that nobody
+ * registers executes on no machine and passes green, silently. A recent
+ * security effort added six such files; five ran nowhere, including one whose
+ * whole point was asserting a native addon's bytes no longer contain a flagged
+ * primitive. Registering the instances did not hold -- a sixth arrived from
+ * unrelated work while the first five were being fixed -- so the class needs a
+ * guard.
+ *
+ * Both lists matter and being in one is not enough: `WINDOWS_PACKAGE_TESTS` in
+ * pr-code-change-scope.mjs decides whether the `package_windows` job RUNS at
+ * all for a diff, and the workflow step's vitest argv decides whether the FILE
+ * runs once the job started.
+ *
+ * WHAT THIS DETECTS -- a file is Windows-gated when its name is `*.win32.test.*`
+ * / `*.win32.spec.*`, or when it contains ANY suite-level gate, nested ones
+ * included, spelled:
+ *   - `describe.runIf(<true only on win32>)`, `describe.skipIf(<false only on win32>)`
+ *   - `const d = <true only on win32> ? describe : describe.skip`, and the
+ *     `? describe.skip : describe` inversion
+ * where the condition is `process.platform === 'win32'` / `!== 'win32'`, a
+ * compound `<win32 check> && <anything>`, or a `const`/`let` in the same file
+ * assigned from either -- so `const RUN_REAL = platform === 'win32' && env…`
+ * used as `describe.runIf(RUN_REAL)` is detected, whatever the flag is named
+ * and whichever polarity it was written in. Quote style, spacing and the
+ * `describe`/`suite` spelling are tolerated. Nested gates count because the
+ * Windows lane runs whole files: a win32-only block buried three levels down
+ * still runs on no machine unless the file is registered.
+ *
+ * WHAT THIS CANNOT DETECT -- known blind spots, each deliberate:
+ *   - `it`/`test`-level gates. A single win32-only case inside a cross-platform
+ *     suite still leaves the file running its other cases on ubuntu, and
+ *     pulling all such files -- about thirty, though the figure moves with
+ *     which gate spellings you count, so do not lean on it -- into the serial
+ *     Windows job is not the trade CI wants. This is the largest limit, and it
+ *     is a policy choice, not an oversight: a suite-level gate means a whole
+ *     block exists only for Windows, which is the shape worth a lane entry.
+ *   - a gate whose condition crosses a module boundary or a function call --
+ *     an imported flag, an imported `describeOnWindows`, `isWindows()`.
+ *     `legacy-wsl-runtime-auth-drain-apply-script.test.ts` imports its
+ *     `isWindows`; it happens to be a POSIX-only gate, so nothing is missed
+ *     today, but a win32-only one written that way would be.
+ *   - `runIf(<win32> || <x>)` and `skipIf(<not win32> && <x>)` are rejected on
+ *     purpose: both can run off Windows, so neither is a win32-only gate. That
+ *     holds whether the condition is written at the gate or routed through a
+ *     named flag -- the two spellings used to disagree.
+ *   - whether a registered suite EXECUTES. Registration is what is asserted. A
+ *     suite gated on win32 plus an env var stays skipped on the CI runner even
+ *     when registered -- see MANUAL_OPT_IN -- and a path registered but gated
+ *     for another platform is not caught either.
+ *   - whether the `package_windows` job is triggered for a given diff, or
+ *     whether the registered test asserts anything worth running.
+ *
+ * Growth of the two grandfathered lists is capped by literals, but only review
+ * stops someone raising a cap. The caps make that an explicit, visible edit.
+ */
+
+const projectDir = resolve(import.meta.dirname, '../..')
+const WINDOWS_LANE_JOB = 'package_windows'
+const WINDOWS_LANE_STEP = 'Test Windows-specific boundaries'
+const WINDOWS_LANE_RUNNER = 'windows-2022'
+
+/**
+ * Windows-gated files that predate this guard and are registered in neither
+ * list. Shrink-only: registering one means deleting its line here. Never add.
+ */
+const UNREGISTERED_ON_MAIN = [
+  // Suite gated with `describe.skipIf(platform !== 'win32')`; the cross-platform
+  // half of the file still runs on ubuntu, the Windows half runs nowhere.
+  'src/main/antigravity/windows-hook-payload-delivery.test.ts',
+  // `.win32.test.ts` by name yet in neither list -- the plainest instance of the class.
+  'src/main/daemon/node-pty-windows-input-error.win32.test.ts',
+  // Same shape as the antigravity file: a win32-only sibling suite that never runs.
+  'src/main/grok/windows-grok-hook-script.test.ts',
+  // Whole file is `describe.runIf(platform === 'win32')`; runs on no machine.
+  'src/main/ipc/preflight-windows-path-refresh.repro.test.ts',
+  // Nested `describe.skipIf(!isWindows)` real-shell block; never exercised in CI.
+  'src/main/ipc/pty-encoding.test.ts',
+  // `describeWindows` ternary over the whole file; runs on no machine.
+  'src/main/providers/windows-shell-preflight-runtime.windows.test.ts',
+  // Whole file is `describe.runIf(platform === 'win32')`; runs on no machine.
+  'src/main/startup/windows-shell-path-restoration.windows.test.ts',
+  // Whole file is `describe.skipIf(platform !== 'win32')`; runs on no machine.
+  'src/shared/setup-agent-sequencing.windows.test.ts'
+]
+
+/**
+ * Windows-gated suites that ALSO require an opt-in env var, so registering them
+ * would not make them execute -- they are run by hand against a real distro or
+ * a real filesystem. Excluded deliberately and visibly rather than by accident
+ * of a regex; each entry is asserted below to be genuinely env-gated, so this
+ * list cannot become a place to park a file someone did not want to register.
+ */
+const MANUAL_OPT_IN = [
+  // `runIf(platform === 'win32' && Boolean(distro))`, distro from ORCA_TEST_WSL_DISTRO.
+  'src/main/git/runner-wsl-linked-gitdir-windows.test.ts',
+  // `runRealWsl = … && ORCA_REAL_WSL_BANNER_TEST === '1'`; needs a real distro.
+  'src/main/local-worktree-filesystem-wsl-banner.wsl.test.ts',
+  // `RUN_REAL_WINDOWS = platform === 'win32' && ORCA_REAL_WINDOWS_SKILL_TEST === '1'`.
+  'src/main/skills/skill-windows-rename-contention.integration.test.ts',
+  // Same flag; installs into a real Windows workspace.
+  'src/main/skills/skill-windows-workspace.integration.test.ts',
+  // `RUN_REAL_WSL = … && ORCA_REAL_WSL_SKILL_TEST === '1'`; real distro filesystem.
+  'src/main/skills/skill-wsl-delete.integration.test.ts',
+  // Same flag; real WSL install transactions.
+  'src/main/skills/skill-wsl-install-transaction.integration.test.ts',
+  // Same flag; real WSL POSIX semantics.
+  'src/main/skills/skill-wsl-posix-semantics.integration.test.ts',
+  // `runRealWsl = … && ORCA_REAL_WSL_DELETE_TEST === '1'`; real distro traversal race.
+  'src/main/wsl-approved-root-race.wsl.test.ts',
+  // Same flag; real UNC delete against a distro.
+  'src/main/wsl-unc-delete.wsl.test.ts',
+  // `enabled = platform === 'win32' && ORCA_REAL_WSL_RUNNER_TEST === '1'`; mutates a real distro's ~/.profile.
+  'src/main/wsl/wsl-runner.wsl.test.ts'
+]
+
+/** Caps so growing either list is two deliberate edits, not one. */
+const UNREGISTERED_MAX = 8
+const MANUAL_OPT_IN_MAX = 10
+
+/**
+ * Floor for the Windows-gated population, so a broken walk or a regex that
+ * stops matching cannot make the guard pass by finding nothing. Only ever
+ * lowered, and only when a gated file is genuinely deleted.
+ */
+const GATED_FILE_FLOOR = 23
+
+const TEST_FILE_PATTERN = /\.(?:test|spec)\.(?:ts|tsx|mjs|cjs|js)$/
+
+/**
+ * Mobile has its own vitest run and never touches the desktop Windows job:
+ * `classifyPrJobs` reports `package_windows: false` for every `mobile/` path,
+ * so a gated file there could not satisfy this guard even in principle.
+ */
+const UNREACHABLE_BY_THE_WINDOWS_LANE = 'mobile/'
+
+/**
+ * This file quotes every gate spelling as a fixture, so it matches its own
+ * matcher. It is not gated -- it must run on ubuntu, since a guard about
+ * Windows CI that only ran on Windows would be self-defeating. Exempt by exact
+ * path, never by directory, so a real gated file in config/scripts is caught.
+ */
+const SCANNER_SELF_PATH = 'config/scripts/win32-test-lane-registration.test.mjs'
+
+export function isScannerSelfPath(path) {
+  return path === SCANNER_SELF_PATH
+}
+
+const WIN32_TRUE_EXPRESSION = String.raw`process\.platform\s*===\s*['"]win32['"]`
+const WIN32_FALSE_EXPRESSION = String.raw`process\.platform\s*!==\s*['"]win32['"]`
+const SUITE = String.raw`(?:describe|suite)`
+
+/**
+ * Named flags resolved from their assignment in the same file, so polarity is
+ * read rather than guessed from the name.
+ *
+ * Why the trailing lookahead: `const d = platform === 'win32' ? describe : …`
+ * is a suite alias, not a boolean, and must not be collected as one.
+ *
+ * Why the two patterns differ on `&&`: a second conjunct NARROWS a
+ * truthy-on-Windows flag, which stays Windows-only, but WIDENS a
+ * falsy-on-Windows one -- `p = platform !== 'win32' && x` used as `skipIf(p)`
+ * runs on Windows AND on POSIX whenever `x` is false, so it is not a
+ * Windows-only gate. One lookahead shared across both polarities had that
+ * backwards, and routing the condition through a named flag flipped the answer
+ * the literal form got right. `||` is excluded from both.
+ */
+const FLAG_TRUE_ASSIGNMENT = new RegExp(
+  String.raw`(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*${WIN32_TRUE_EXPRESSION}(?=\s*(?:&&|;|\r?\n|$))`,
+  'g'
+)
+const FLAG_FALSE_ASSIGNMENT = new RegExp(
+  String.raw`(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*${WIN32_FALSE_EXPRESSION}(?=\s*(?:;|\r?\n|$))`,
+  'g'
+)
+
+function escapeForAlternation(name) {
+  return name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+}
+
+/** Never-matching branch, so an empty flag set cannot widen a pattern. */
+const MATCHES_NOTHING = String.raw`(?!)`
+
+function alternation(names) {
+  return names.length === 0 ? MATCHES_NOTHING : names.map(escapeForAlternation).join('|')
+}
+
+function buildGates(source) {
+  const trueOnWindows = [...source.matchAll(FLAG_TRUE_ASSIGNMENT)].map(([, name]) => name)
+  const falseOnWindows = [...source.matchAll(FLAG_FALSE_ASSIGNMENT)].map(([, name]) => name)
+  const isTrue = `(?:${WIN32_TRUE_EXPRESSION}|\\b(?:${alternation(trueOnWindows)})\\b)`
+  const isFalse = `(?:${WIN32_FALSE_EXPRESSION}|!\\s*(?:${alternation(trueOnWindows)})\\b|\\b(?:${alternation(falseOnWindows)})\\b)`
+  return [
+    // `\)` or `&&` after the condition: a bare gate, or a compound one whose
+    // remaining conjuncts only narrow it further. Anchoring on `\)` alone was
+    // this guard's own bug -- `runIf(win32 && hasAddon)` went undetected.
+    new RegExp(String.raw`\b${SUITE}\s*\.\s*runIf\s*\(\s*${isTrue}\s*(?:\)|&&)`),
+    new RegExp(String.raw`\b${SUITE}\s*\.\s*skipIf\s*\(\s*${isFalse}\s*(?:\)|\|\|)`),
+    // `(?!\s*\.\s*skip)`: `platform === 'win32' ? describe.skip : describe` is
+    // the POSIX-only gate, the exact opposite of the class, and seven files
+    // use it.
+    new RegExp(String.raw`=\s*${isTrue}\s*\?\s*${SUITE}\s*(?!\s*\.\s*skip)`),
+    new RegExp(String.raw`=\s*${isFalse}\s*\?\s*${SUITE}\s*\.\s*skip`)
+  ]
+}
+
+/** Exported shape of the rule, so the fixtures below exercise the real matcher. */
+export function isWindows32GatedTestFile(path, source) {
+  if (/\.win32\.(?:test|spec)\./.test(path)) {
+    return true
+  }
+  // Prose about a gate is not a gate; the shared stripper tracks quote state so
+  // a slash-star inside a string cannot blank live code.
+  const code = stripComments(source)
+  return buildGates(code).some((gate) => gate.test(code))
+}
+
+/**
+ * True when the env read REACHES the gate: the win32 check is compound, and one
+ * of its other conjuncts either reads `process.env` itself or names a const
+ * that does.
+ *
+ * "Mentions an env var anywhere in the file" is not enough and was the earlier
+ * bug here. `runIf(platform === 'win32' && hasAddon)` in a file that happens to
+ * read `process.env.RUNNER_TEMP` for a temp dir is a test CI COULD run -- the
+ * native-addon-bytes shape, exactly what this effort exists to keep in CI --
+ * and it would have parked in MANUAL_OPT_IN unnoticed. Only the cap number
+ * stood in the way, and a number is not an argument.
+ *
+ * One hop is enough for every real case: `distro = process.env.ORCA_TEST_WSL_DISTRO`
+ * then `runIf(platform === 'win32' && Boolean(distro))`. Deeper chains fail
+ * closed -- the file reads as registrable, which is the safe direction.
+ */
+const WIN32_CONJUNCT = new RegExp(String.raw`${WIN32_TRUE_EXPRESSION}\s*&&([^\n]*)`, 'g')
+const ENV_READ = /process\.env\.[A-Za-z0-9_]+/
+const IDENTIFIER = /[A-Za-z_$][\w$]*/g
+
+function isAssignedFromEnv(name, code) {
+  return new RegExp(
+    String.raw`(?:const|let|var)\s+${escapeForAlternation(name)}\s*=[^\n]*process\.env\.`
+  ).test(code)
+}
+
+export function requiresEnvOptIn(source) {
+  const code = stripComments(source)
+  return [...code.matchAll(WIN32_CONJUNCT)].some(([, conjunct]) => {
+    if (ENV_READ.test(conjunct)) {
+      return true
+    }
+    return [...conjunct.matchAll(IDENTIFIER)].some(([name]) => isAssignedFromEnv(name, code))
+  })
+}
+
+/**
+ * Any `runs-on` that could put a job on Windows.
+ *
+ * Not an equality test against `windows-2022`: `windows-latest` resolves to the
+ * same image today, a label array or `{ group, labels }` object is valid YAML
+ * here, and a `${{ matrix.os }}` expression cannot be resolved from the file at
+ * all. An unresolvable expression counts as "could be Windows" so it fails
+ * closed -- someone has to look rather than have a second lane appear silently.
+ */
+export function couldRunOnWindows(runsOn) {
+  const labels =
+    typeof runsOn === 'string'
+      ? [runsOn]
+      : Array.isArray(runsOn)
+        ? runsOn
+        : [...(runsOn?.labels ?? []), runsOn?.group ?? ''].flat()
+  return labels.some((label) => /windows/i.test(String(label)) || String(label).includes('${{'))
+}
+
+/** The vitest argv of the one Windows job's one curated-file step. */
+function readWindowsWorkflow() {
+  const workflow = parse(readFileSync(join(projectDir, '.github/workflows/pr.yml'), 'utf8'))
+  const jobs = Object.entries(workflow.jobs ?? {})
+  const windowsJobs = jobs.filter(([, job]) => couldRunOnWindows(job?.['runs-on']))
+  const steps = workflow.jobs?.[WINDOWS_LANE_JOB]?.steps ?? []
+  const step = steps.find((candidate) => candidate?.name === WINDOWS_LANE_STEP)
+  if (!step) {
+    throw new Error(
+      `No "${WINDOWS_LANE_STEP}" step in the ${WINDOWS_LANE_JOB} job of .github/workflows/pr.yml. ` +
+        'If it was renamed, update WINDOWS_LANE_STEP here -- do not delete this guard.'
+    )
+  }
+  const run = String(step.run ?? '')
+  if (!run.includes('vitest run')) {
+    throw new Error(
+      `The "${WINDOWS_LANE_STEP}" step no longer invokes vitest; this guard is stale.`
+    )
+  }
+  return {
+    windowsJobNames: windowsJobs.map(([name]) => name),
+    laneFiles: run.split(/\s+/).filter((token) => TEST_FILE_PATTERN.test(token))
+  }
+}
+
+const { windowsJobNames, laneFiles } = readWindowsWorkflow()
+const scannedTestFiles = scanSourceTree(projectDir, {
+  includeTests: true,
+  extensions: TEST_FILE_PATTERN
+}).filter(({ relativePath }) => !relativePath.startsWith(UNREACHABLE_BY_THE_WINDOWS_LANE))
+const gatedFiles = scannedTestFiles
+  .filter(({ relativePath }) => !isScannerSelfPath(relativePath))
+  .filter(({ relativePath, source }) => isWindows32GatedTestFile(relativePath, source))
+  .map(({ relativePath }) => relativePath)
+
+/**
+ * Why the classifier and not the literal list: `WINDOWS_PACKAGE_TESTS` is not
+ * exported, and the classifier is what CI actually consults. It inherits
+ * `classifyPrJobs`'s force-all, so a path under GLOBAL_FORCE_PREFIXES would
+ * read as registered without being listed -- no test file is one today.
+ */
+function isInClassifier(path) {
+  return classifyPrJobs([path])[WINDOWS_LANE_JOB] === true
+}
+
+function registrationFailure(path) {
+  const missing = []
+  if (!laneFiles.includes(path)) {
+    missing.push(
+      `add "${path}" to the "${WINDOWS_LANE_STEP}" vitest argv in .github/workflows/pr.yml ` +
+        `(job ${WINDOWS_LANE_JOB})`
+    )
+  }
+  if (!isInClassifier(path)) {
+    missing.push(
+      `add '${path}' to WINDOWS_PACKAGE_TESTS in config/scripts/pr-code-change-scope.mjs`
+    )
+  }
+  return missing.length === 0 ? null : `${path}: ${missing.join('; and ')}`
+}
+
+function sourceOf(path) {
+  return readFileSync(join(projectDir, path), 'utf8')
+}
+
+describe('Windows-gated test files are registered in the Windows CI lane', () => {
+  it('scans a plausible number of test files', () => {
+    // A broken root or extension filter would make every assertion below vacuous.
+    expect(scannedTestFiles.length).toBeGreaterThan(5000)
+  })
+
+  it('has exactly one windows-2022 job to register into', () => {
+    // The whole premise: one Windows lane, one curated list. A second lane would
+    // mean a file could be registered in the wrong one and still run nowhere.
+    expect(
+      windowsJobNames,
+      `Expected only ${WINDOWS_LANE_JOB} to run on ${WINDOWS_LANE_RUNNER}.`
+    ).toEqual([WINDOWS_LANE_JOB])
+  })
+
+  it('parses a plausible Windows lane invocation', () => {
+    expect(laneFiles.length).toBeGreaterThan(15)
+    const missingFromDisk = laneFiles.filter((path) => {
+      try {
+        return !statSync(join(projectDir, path)).isFile()
+      } catch {
+        return true
+      }
+    })
+    expect(
+      missingFromDisk,
+      'The Windows lane invokes vitest on paths that do not exist -- vitest will run nothing for them.'
+    ).toEqual([])
+  })
+
+  it('rediscovers Windows-gated files that are already registered', () => {
+    // Both discovery paths, proven against real files rather than fixtures: one
+    // found by filename plus ternary alias, one found only by its gate
+    // expression because its name says nothing about Windows gating.
+    expect(gatedFiles).toContain('src/shared/child-process/windows-command-line.win32.test.ts')
+    expect(gatedFiles).toContain('src/main/agent-hooks/windows-hook-payload-delivery.test.ts')
+    // And a compound gate, the case this guard was blind to at first.
+    expect(gatedFiles).toContain('src/main/git/runner-wsl-linked-gitdir-windows.test.ts')
+  })
+
+  it('exempts itself, and nothing else, from the scan', () => {
+    expect(scannedTestFiles.map(({ relativePath }) => relativePath)).toContain(SCANNER_SELF_PATH)
+    // The exemption is load-bearing only while the fixtures below still match.
+    expect(isWindows32GatedTestFile(SCANNER_SELF_PATH, sourceOf(SCANNER_SELF_PATH))).toBe(true)
+    expect(gatedFiles).not.toContain(SCANNER_SELF_PATH)
+    // The other half of the claim: no sibling rides the exemption.
+    expect(isScannerSelfPath('config/scripts/pr-code-change-scope.test.mjs')).toBe(false)
+  })
+
+  it('holds the Windows-gated population at or above the floor', () => {
+    // Bounding by the grandfathered lists' lengths would be trivially true --
+    // they move together. The floor is a literal for that reason.
+    expect(
+      gatedFiles.length,
+      `Found ${gatedFiles.length} Windows-gated test files; the floor is ${GATED_FILE_FLOOR}. ` +
+        'A drop means the scan stopped matching, not that the files went away. Lower the floor ' +
+        'only for a genuine deletion.'
+    ).toBeGreaterThanOrEqual(GATED_FILE_FLOOR)
+  })
+
+  it('confirms the classifier distinguishes registered from unregistered paths', () => {
+    // Without this, a classifier that answered true for everything would make
+    // the registration assertion below pass for free.
+    expect(isInClassifier('src/main/windows/windows-pty-job.win32.test.ts')).toBe(true)
+    expect(isInClassifier('src/main/windows/not-a-real-file.win32.test.ts')).toBe(false)
+  })
+
+  it('has every Windows-gated test file in both registration lists', () => {
+    const grandfathered = new Set([...UNREGISTERED_ON_MAIN, ...MANUAL_OPT_IN])
+    const failures = gatedFiles
+      .filter((path) => !grandfathered.has(path))
+      .map(registrationFailure)
+      .filter((failure) => failure !== null)
+    expect(
+      failures,
+      'A Windows-gated test file is missing from a Windows CI registration list. It self-skips on ' +
+        'ubuntu and reports success, so it runs on no machine. Both lists are required: ' +
+        'WINDOWS_PACKAGE_TESTS decides whether the package_windows job runs for a diff, the ' +
+        'workflow argv decides whether the file runs once it started. Fix each line below.'
+    ).toEqual([])
+  })
+
+  it('has no stale entry in either grandfathered list', () => {
+    const stale = [...UNREGISTERED_ON_MAIN, ...MANUAL_OPT_IN].filter(
+      (path) => !gatedFiles.includes(path) || registrationFailure(path) === null
+    )
+    expect(
+      stale,
+      'These files are no longer unregistered Windows-gated debt -- they were registered, ' +
+        'renamed, un-gated, or deleted. Delete each line from UNREGISTERED_ON_MAIN or ' +
+        'MANUAL_OPT_IN; the lists only ever shrink.'
+    ).toEqual([])
+  })
+
+  it('caps growth of both grandfathered lists', () => {
+    expect(
+      UNREGISTERED_ON_MAIN.length,
+      'Never raise UNREGISTERED_MAX. Register the file instead.'
+    ).toBeLessThanOrEqual(UNREGISTERED_MAX)
+    expect(
+      MANUAL_OPT_IN.length,
+      'Never raise MANUAL_OPT_IN_MAX to avoid registering a file that CI could actually run.'
+    ).toBeLessThanOrEqual(MANUAL_OPT_IN_MAX)
+  })
+
+  it('keeps MANUAL_OPT_IN to suites CI genuinely cannot run', () => {
+    // Otherwise this list is just a quieter way to skip registration.
+    const notActuallyOptIn = MANUAL_OPT_IN.filter((path) => !requiresEnvOptIn(sourceOf(path)))
+    expect(
+      notActuallyOptIn,
+      'A MANUAL_OPT_IN entry has no env-var opt-in, so registering it WOULD make it run. ' +
+        'Register it in both lists and delete the line.'
+    ).toEqual([])
+  })
+
+  it('keeps every UNREGISTERED_ON_MAIN file ineligible for MANUAL_OPT_IN', () => {
+    // The two lists must not be interchangeable: debt that CI could run must
+    // not be re-labelled as manual to make the debt cap look better.
+    const movable = UNREGISTERED_ON_MAIN.filter((path) => requiresEnvOptIn(sourceOf(path)))
+    expect(
+      movable,
+      'This file is registrable; it cannot be reclassified as MANUAL_OPT_IN.'
+    ).toEqual([])
+  })
+})
+
+describe('manual opt-in classification', () => {
+  it('requires the env read to reach the gate', () => {
+    // The parking attack: a compound gate CI could satisfy, in a file that
+    // happens to read an unrelated env var. This is the native-addon-bytes
+    // shape, and it must read as registrable.
+    expect(
+      requiresEnvOptIn(
+        "const tmp = process.env.RUNNER_TEMP\ndescribe.runIf(process.platform === 'win32' && hasAddon)('x', () => {})"
+      )
+    ).toBe(false)
+    // One hop through a const: the real shape of the ten listed suites.
+    expect(
+      requiresEnvOptIn(
+        "const distro = process.env.ORCA_TEST_WSL_DISTRO\ndescribe.runIf(process.platform === 'win32' && Boolean(distro))('x', () => {})"
+      )
+    ).toBe(true)
+    // Read inline in the conjunct: the other real shape.
+    expect(
+      requiresEnvOptIn(
+        "const RUN = process.platform === 'win32' && process.env.ORCA_REAL_X === '1'"
+      )
+    ).toBe(true)
+  })
+
+  it('requires the gate to be compound at all', () => {
+    // A bare `runIf(win32)` file -- which CI can run -- must never park as
+    // manual, however much `process.env` the file reads elsewhere.
+    expect(
+      requiresEnvOptIn(
+        "const t = process.env.CI\ndescribe.runIf(process.platform === 'win32')('x', () => {})"
+      )
+    ).toBe(false)
+    // The case that makes the `&&` in WIN32_CONJUNCT load-bearing rather than
+    // decorative: an env read on the SAME line as a bare gate. Drop the `&&`
+    // and this reads as manual, which is the parking hole reopened.
+    expect(
+      requiresEnvOptIn(
+        "describe.runIf(process.platform === 'win32')(`x ${process.env.ORCA_TAG}`, () => {})"
+      )
+    ).toBe(false)
+  })
+})
+
+describe('Windows runner detection', () => {
+  it('reads every runs-on spelling that could land on Windows', () => {
+    expect(couldRunOnWindows('windows-2022')).toBe(true)
+    // The spelling that would have slipped past an equality test.
+    expect(couldRunOnWindows('windows-latest')).toBe(true)
+    expect(couldRunOnWindows(['self-hosted', 'Windows', 'X64'])).toBe(true)
+    expect(couldRunOnWindows({ group: 'windows-runners', labels: ['x64'] })).toBe(true)
+    // Unresolvable from the file, so it fails closed rather than reading as safe.
+    expect(couldRunOnWindows('${{ matrix.os }}')).toBe(true)
+    expect(couldRunOnWindows('ubuntu-latest')).toBe(false)
+    expect(couldRunOnWindows(['self-hosted', 'linux'])).toBe(false)
+    expect(couldRunOnWindows(undefined)).toBe(false)
+  })
+})
+
+describe('Windows-gate detection', () => {
+  // Each positive is paired with the near-miss it must reject. The pairs are
+  // written from the shapes that exist in the repo, not from the regexes above.
+  const cases = [
+    [
+      'describe.runIf equality',
+      "describe.runIf(process.platform === 'win32')('x', () => {})",
+      "describe.runIf(process.platform !== 'win32')('x', () => {})"
+    ],
+    [
+      'describe.skipIf inequality',
+      "describe.skipIf(process.platform !== 'win32')('x', () => {})",
+      "describe.skipIf(process.platform === 'win32')('x', () => {})"
+    ],
+    [
+      'ternary describe alias',
+      "const d = process.platform === 'win32' ? describe : describe.skip",
+      "const d = process.platform === 'win32' ? describe.skip : describe"
+    ],
+    [
+      'inverted ternary describe alias',
+      "const d = process.platform !== 'win32' ? describe.skip : describe",
+      "const d = process.platform !== 'win32' ? describe : describe.skip"
+    ],
+    [
+      'local isWindows flag',
+      "const isWindows = process.platform === 'win32'\ndescribe.skipIf(!isWindows)('x', () => {})",
+      "const isWindows = process.platform === 'win32'\ndescribe.skipIf(isWindows)('x', () => {})"
+    ],
+    [
+      'local isWindows flag, runIf',
+      "const isWindows = process.platform === 'win32'\ndescribe.runIf(isWindows)('x', () => {})",
+      "const isWindows = process.platform === 'win32'\ndescribe.runIf(!isWindows)('x', () => {})"
+    ],
+    [
+      // The blocking miss: a second conjunct made the gate invisible.
+      'compound gate with a second conjunct',
+      "describe.runIf(process.platform === 'win32' && Boolean(distro))('x', () => {})",
+      "describe.runIf(process.platform === 'win32' || Boolean(distro))('x', () => {})"
+    ],
+    [
+      'compound gate behind a named flag assigned on the next line',
+      "const RUN_REAL =\n  process.platform === 'win32' && process.env.X === '1'\ndescribe.runIf(RUN_REAL)('x', () => {})",
+      "const RUN_REAL =\n  process.platform !== 'win32' && process.env.X === '1'\ndescribe.runIf(RUN_REAL)('x', () => {})"
+    ],
+    [
+      'named flag driving a ternary suite alias',
+      "const enabled = process.platform === 'win32' && process.env.X === '1'\nconst d = enabled ? describe : describe.skip",
+      "const enabled = process.platform === 'win32' && process.env.X === '1'\nconst d = enabled ? describe.skip : describe"
+    ],
+    [
+      'compound skipIf widened with ||',
+      "describe.skipIf(process.platform !== 'win32' || !hasAddon)('x', () => {})",
+      "describe.skipIf(process.platform !== 'win32' && !hasAddon)('x', () => {})"
+    ],
+    [
+      'double-quoted and loosely spaced',
+      'describe . runIf ( process.platform === "win32" )("x", () => {})',
+      'describe . runIf ( process.platform === "darwin" )("x", () => {})'
+    ]
+  ]
+
+  for (const [label, gated, nearMiss] of cases) {
+    it(`detects ${label} and rejects its near miss`, () => {
+      expect(isWindows32GatedTestFile('src/x/sample.test.ts', gated)).toBe(true)
+      expect(isWindows32GatedTestFile('src/x/sample.test.ts', nearMiss)).toBe(false)
+    })
+  }
+
+  it('detects the .win32 filename with no gate expression at all', () => {
+    expect(isWindows32GatedTestFile('src/x/sample.win32.test.ts', 'describe("x", () => {})')).toBe(
+      true
+    )
+    // Near miss: `.win32.ts` is production source, not a test the lane can run.
+    expect(isWindows32GatedTestFile('src/x/sample.win32.ts', 'export const x = 1')).toBe(false)
+  })
+
+  it('does not read a flag whose name merely starts the same', () => {
+    // Without word boundaries `isWindows` would swallow `isWindowsHost`.
+    expect(
+      isWindows32GatedTestFile(
+        'src/x/sample.test.ts',
+        "const isWindows = process.platform === 'win32'\ndescribe.runIf(isWindowsHost)('x', () => {})"
+      )
+    ).toBe(false)
+  })
+
+  it('rejects the documented blind spots rather than half-detecting them', () => {
+    // it-level gate inside a cross-platform suite: out of scope by design.
+    expect(
+      isWindows32GatedTestFile(
+        'src/x/sample.test.ts',
+        "describe('x', () => { it.skipIf(process.platform !== 'win32')('y', () => {}) })"
+      )
+    ).toBe(false)
+    // A platform branch inside a test body is not a gate.
+    expect(
+      isWindows32GatedTestFile(
+        'src/x/sample.test.ts',
+        "it('x', () => { if (process.platform === 'win32') { return } })"
+      )
+    ).toBe(false)
+    // An imported flag: the assignment is not in this file, so polarity is unknowable.
+    expect(
+      isWindows32GatedTestFile(
+        'src/x/sample.test.ts',
+        "import { isWindows } from './f'\ndescribe.runIf(isWindows)('x', () => {})"
+      )
+    ).toBe(false)
+  })
+
+  it('does not treat a widening conjunct behind a named flag as Windows-only', () => {
+    // `!== 'win32' && x` skips only when BOTH hold, so the suite runs on
+    // Windows and on POSIX when `x` is false. The literal form is rejected by
+    // the `||` pair above; this is the same condition routed through a flag,
+    // which is where the shared lookahead used to flip the answer.
+    expect(
+      isWindows32GatedTestFile(
+        'src/x/sample.test.ts',
+        "const p = process.platform !== 'win32' && Boolean(x)\ndescribe.skipIf(p)('x', () => {})"
+      )
+    ).toBe(false)
+    // The narrowing direction still counts: `=== 'win32' && x` is Windows-only.
+    expect(
+      isWindows32GatedTestFile(
+        'src/x/sample.test.ts',
+        "const p = process.platform === 'win32' && Boolean(x)\ndescribe.runIf(p)('x', () => {})"
+      )
+    ).toBe(true)
+  })
+
+  it('ignores a gate that only appears in prose', () => {
+    expect(
+      isWindows32GatedTestFile(
+        'src/x/sample.test.ts',
+        "// describe.runIf(process.platform === 'win32')\ndescribe('x', () => {})"
+      )
+    ).toBe(false)
+  })
+})
diff --git a/src/shared/source-scan/source-tree-scan.ts b/src/shared/source-scan/source-tree-scan.ts
index 900d969b2ea..dce7ae1a274 100644
--- a/src/shared/source-scan/source-tree-scan.ts
+++ b/src/shared/source-scan/source-tree-scan.ts
@@ -34,11 +34,16 @@ export type ScannedFile = { path: string; relativePath: string; source: string }
  *
  * Dot-directories are skipped: they hold generated and vendored trees (the
  * cross-version e2e checkouts among them), which are not ours to fix.
+ *
+ * `extensions` widens or narrows which filenames are read -- a guard over CI
+ * config also has to see `.mjs`, and one that only wants test files pays for
+ * reading nothing else.
  */
 export function scanSourceTree(
   root: string,
-  options: { includeTests?: boolean } = {}
+  options: { includeTests?: boolean; extensions?: RegExp } = {}
 ): ScannedFile[] {
+  const extensions = options.extensions ?? /\.tsx?$/
   const found: ScannedFile[] = []
   const visit = (directory: string): void => {
     for (const entry of readdirSync(directory)) {
@@ -50,7 +55,7 @@ export function scanSourceTree(
         visit(path)
         continue
       }
-      if (!/\.tsx?$/.test(entry)) {
+      if (!extensions.test(entry)) {
         continue
       }
       const relativePath = relative(root, path).replace(/\\/g, '/')

From 3ae51076b1259c38ac86ea11a2ac58b03b4549af Mon Sep 17 00:00:00 2001
From: OrcaWin <alpha-eng@stably.ai>
Date: Tue, 1 Sep 2026 23:21:26 -0700
Subject: [PATCH 24/92] fix(tooling): run oxlint gates without a Windows .cmd
 shim (#17894)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(tooling): run oxlint gates without a Windows .cmd shim

`check:code-quality:changed` spawned `pnpm.cmd` without a shell, which Node
refuses under the CVE-2024-27980 mitigation, so the gate died with EINVAL
before linting anything. Resolve oxlint's own Node bin and run it under this
process's node instead — no shim, no shell, no quoting question — and add a
ratchet so the idiom cannot spread back into config/scripts.

* fix(tooling): validate the react-doctor diff base and widen the shim ratchet

`base` reaches cmd.exe unquoted on the shell fallback, so reject anything
outside a git revision before spawning. The ratchet matched only a handful of
runner names, which let `vitest.cmd` through even though config/scripts already
spawns vitest, playwright and electron-builder; match any batch-shim literal
instead, walk subdirectories, and cover tests/tools.

* docs(tooling): state what the shim ratchet and diff-base check miss

Both comments read as complete accounts of their guard's coverage. The revision
class rejects reflog syntax like HEAD@{1}, deliberately, since braces have no
business in a cmd.exe-bound argument; the ratchet misses a drive-lettered
literal because a colon is not in its class. Say so beside the template-literal
ceiling already noted.

---------

Co-authored-by: Orca Worker <orca-worker@localhost>
---
 config/scripts/check-changed-code-quality.mjs |   8 +-
 config/scripts/check-react-doctor-changed.mjs |  20 ++-
 .../check-react-doctor-changed.test.mjs       |  29 ++++
 config/scripts/lint-react-doctor-changed.mjs  |   9 +-
 ...bile-pairing-qrcode-import-plugin.test.mjs |  13 +-
 config/scripts/oxlint-cli-invocation.mjs      |  23 ++++
 config/scripts/oxlint-cli-invocation.test.mjs |  33 +++++
 .../windows-cmd-shim-spawn-boundary.test.mjs  | 127 ++++++++++++++++++
 8 files changed, 246 insertions(+), 16 deletions(-)
 create mode 100644 config/scripts/check-react-doctor-changed.test.mjs
 create mode 100644 config/scripts/oxlint-cli-invocation.mjs
 create mode 100644 config/scripts/oxlint-cli-invocation.test.mjs
 create mode 100644 config/scripts/windows-cmd-shim-spawn-boundary.test.mjs

diff --git a/config/scripts/check-changed-code-quality.mjs b/config/scripts/check-changed-code-quality.mjs
index 66d2549ea4d..4427c6b7f38 100644
--- a/config/scripts/check-changed-code-quality.mjs
+++ b/config/scripts/check-changed-code-quality.mjs
@@ -4,6 +4,7 @@ import path from 'node:path'
 import process from 'node:process'
 import { pathToFileURL } from 'node:url'
 import { resolvePullRequestDiffBase } from './git-pull-request-diff-base.mjs'
+import { resolveOxlintInvocation } from './oxlint-cli-invocation.mjs'
 
 const SOURCE_FILE_PATTERN = /\.(?:[cm]?[jt]sx?)$/
 export const OXLINT_SCANS = [
@@ -285,11 +286,12 @@ function isSuppressedDiagnostic(diagnostic, root) {
 }
 
 function runOxlintScan(root, scan, files) {
-  const pnpm = process.platform === 'win32' ? 'pnpm.cmd' : 'pnpm'
-  const result = spawnSync(pnpm, ['exec', 'oxlint', ...scan.args, '--format', 'json', ...files], {
+  const { command, prefixArgs } = resolveOxlintInvocation(root)
+  const result = spawnSync(command, [...prefixArgs, ...scan.args, '--format', 'json', ...files], {
     cwd: root,
     encoding: 'utf8',
-    maxBuffer: 128 * 1024 * 1024
+    maxBuffer: 128 * 1024 * 1024,
+    windowsHide: true
   })
   if (result.error) {
     throw result.error
diff --git a/config/scripts/check-react-doctor-changed.mjs b/config/scripts/check-react-doctor-changed.mjs
index f659eefb3d4..743a64eee04 100644
--- a/config/scripts/check-react-doctor-changed.mjs
+++ b/config/scripts/check-react-doctor-changed.mjs
@@ -1,16 +1,30 @@
 import { spawnSync } from 'node:child_process'
 import process from 'node:process'
 import { resolvePullRequestDiffBase } from './git-pull-request-diff-base.mjs'
+import { resolvePnpmCliInvocation } from './pnpm-cli-invocation.mjs'
 
 const requestedBase =
   process.argv.slice(2).find((argument) => argument !== '--') ??
   process.env.ORCA_CODE_QUALITY_BASE ??
   'origin/main'
 const base = resolvePullRequestDiffBase(process.cwd(), requestedBase)
-const pnpm = process.platform === 'win32' ? 'pnpm.cmd' : 'pnpm'
+// Why validate rather than trust: `base` arrives from argv or the environment and
+// below it can reach cmd.exe unquoted, because resolvePnpmCliInvocation still
+// falls back to a shell when it cannot find a directly spawnable pnpm. It accepts
+// SHAs, tags, ref paths and the ^ ~ .. suffixes -- not reflog syntax like HEAD@{1},
+// because braces stay out of anything bound for cmd.exe. The error names the base.
+const GIT_REVISION = /^[A-Za-z0-9._/@^~-]+$/
+if (!GIT_REVISION.test(base)) {
+  throw new Error(`Refusing to pass an unsafe diff base to pnpm: ${base}`)
+}
+// Why the shim and not a direct binary: `dlx` fetches react-doctor on demand, so
+// only the pnpm CLI can run it. resolvePnpmCliInvocation prefers whatever
+// npm_execpath exposes -- pnpm 12's own pnpm.exe, spawned with no shell.
+const { command, prefixArgs, shell } = resolvePnpmCliInvocation()
 const result = spawnSync(
-  pnpm,
+  command,
   [
+    ...prefixArgs,
     'dlx',
     'react-doctor@0.9.1',
     '.',
@@ -26,7 +40,7 @@ const result = spawnSync(
     '--blocking',
     'error'
   ],
-  { stdio: 'inherit' }
+  { stdio: 'inherit', shell, windowsHide: true }
 )
 
 if (result.error) {
diff --git a/config/scripts/check-react-doctor-changed.test.mjs b/config/scripts/check-react-doctor-changed.test.mjs
new file mode 100644
index 00000000000..2c5feb90a5d
--- /dev/null
+++ b/config/scripts/check-react-doctor-changed.test.mjs
@@ -0,0 +1,29 @@
+import { spawnSync } from 'node:child_process'
+import path from 'node:path'
+import process from 'node:process'
+import { describe, expect, it } from 'vitest'
+
+const repoRoot = path.resolve(import.meta.dirname, '..', '..')
+const script = path.join(repoRoot, 'config', 'scripts', 'check-react-doctor-changed.mjs')
+
+function runWithBase(base) {
+  return spawnSync(process.execPath, [script, base], {
+    cwd: repoRoot,
+    encoding: 'utf8',
+    windowsHide: true
+  })
+}
+
+describe('check-react-doctor-changed diff base', () => {
+  // The pnpm invocation can still fall back to a shell, so an unvalidated base
+  // would reach cmd.exe unquoted. Rejection has to happen before the spawn.
+  it.each(['main & calc', 'main | whoami', 'main"x', '%PATH%', 'main $(id)'])(
+    'refuses %j',
+    (base) => {
+      const result = runWithBase(base)
+
+      expect(result.status).not.toBe(0)
+      expect(result.stderr).toContain('Refusing to pass an unsafe diff base')
+    }
+  )
+})
diff --git a/config/scripts/lint-react-doctor-changed.mjs b/config/scripts/lint-react-doctor-changed.mjs
index 971c28800ef..0f294f481f2 100644
--- a/config/scripts/lint-react-doctor-changed.mjs
+++ b/config/scripts/lint-react-doctor-changed.mjs
@@ -1,5 +1,6 @@
 import { existsSync } from 'node:fs'
 import { spawnSync } from 'node:child_process'
+import { resolveOxlintInvocation } from './oxlint-cli-invocation.mjs'
 
 const SOURCE_FILE_PATTERN = /\.(?:[cm]?[jt]sx?)$/
 
@@ -31,11 +32,11 @@ if (lintTargets.length === 0) {
   process.exit(0)
 }
 
-const pnpm = process.platform === 'win32' ? 'pnpm.cmd' : 'pnpm'
+const { command, prefixArgs } = resolveOxlintInvocation()
 const result = spawnSync(
-  pnpm,
-  ['exec', 'oxlint', '--config', 'config/oxlint-react-doctor.json', ...lintTargets],
-  { stdio: 'inherit' }
+  command,
+  [...prefixArgs, '--config', 'config/oxlint-react-doctor.json', ...lintTargets],
+  { stdio: 'inherit', windowsHide: true }
 )
 
 if (result.error) {
diff --git a/config/scripts/mobile-pairing-qrcode-import-plugin.test.mjs b/config/scripts/mobile-pairing-qrcode-import-plugin.test.mjs
index bed29fe18b4..8c5c403ff74 100644
--- a/config/scripts/mobile-pairing-qrcode-import-plugin.test.mjs
+++ b/config/scripts/mobile-pairing-qrcode-import-plugin.test.mjs
@@ -3,11 +3,10 @@ import { mkdtempSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import path from 'node:path'
 import { describe, expect, it } from 'vitest'
+import { resolveOxlintInvocation } from './oxlint-cli-invocation.mjs'
 
 const pluginPath = path.resolve('config/oxlint-plugins/mobile-pairing-qrcode-import.mjs')
-const oxlintPath = path.resolve(
-  process.platform === 'win32' ? 'node_modules/.bin/oxlint.cmd' : 'node_modules/.bin/oxlint'
-)
+const oxlint = resolveOxlintInvocation()
 
 function lintSource(source) {
   const directory = mkdtempSync(path.join(tmpdir(), 'orca-qrcode-import-lint-'))
@@ -22,9 +21,11 @@ function lintSource(source) {
       rules: { 'mobile-pairing/no-eager-qrcode-import': 'error' }
     })
   )
-  const result = spawnSync(oxlintPath, ['--config', configPath, '--format', 'json', sourcePath], {
-    encoding: 'utf8'
-  })
+  const result = spawnSync(
+    oxlint.command,
+    [...oxlint.prefixArgs, '--config', configPath, '--format', 'json', sourcePath],
+    { encoding: 'utf8', windowsHide: true }
+  )
   if (result.error) {
     throw result.error
   }
diff --git a/config/scripts/oxlint-cli-invocation.mjs b/config/scripts/oxlint-cli-invocation.mjs
new file mode 100644
index 00000000000..605aa33c686
--- /dev/null
+++ b/config/scripts/oxlint-cli-invocation.mjs
@@ -0,0 +1,23 @@
+import { createRequire } from 'node:module'
+import path from 'node:path'
+import process from 'node:process'
+
+// Why not `pnpm exec oxlint` / `node_modules/.bin/oxlint.cmd`: both land on a
+// Windows .cmd shim, and Node >= 20 refuses to spawn one without `shell: true`
+// (the CVE-2024-27980 mitigation), so every lint gate died with EINVAL before
+// linting anything. Oxlint's bin is a plain Node script, so run it under this
+// process's own node — no shim, no shell, no quoting question.
+export function resolveOxlintInvocation(root = process.cwd()) {
+  const requireFromRoot = createRequire(path.join(root, 'package.json'))
+  // Oxlint's "exports" hides ./bin, so read the manifest and walk to its bin entry.
+  const manifestPath = requireFromRoot.resolve('oxlint/package.json')
+  const binField = requireFromRoot('oxlint/package.json').bin
+  const binEntry = typeof binField === 'string' ? binField : binField?.oxlint
+  if (!binEntry) {
+    throw new Error('oxlint package.json declares no "oxlint" bin entry.')
+  }
+  return {
+    command: process.execPath,
+    prefixArgs: [path.resolve(path.dirname(manifestPath), binEntry)]
+  }
+}
diff --git a/config/scripts/oxlint-cli-invocation.test.mjs b/config/scripts/oxlint-cli-invocation.test.mjs
new file mode 100644
index 00000000000..7a681a825d9
--- /dev/null
+++ b/config/scripts/oxlint-cli-invocation.test.mjs
@@ -0,0 +1,33 @@
+import { spawnSync } from 'node:child_process'
+import { existsSync } from 'node:fs'
+import path from 'node:path'
+import process from 'node:process'
+import { describe, expect, it } from 'vitest'
+import { resolveOxlintInvocation } from './oxlint-cli-invocation.mjs'
+
+const repoRoot = path.resolve(import.meta.dirname, '..', '..')
+
+describe('resolveOxlintInvocation', () => {
+  it('runs oxlint under this process node, never through a shim', () => {
+    const { command, prefixArgs } = resolveOxlintInvocation(repoRoot)
+
+    expect(command).toBe(process.execPath)
+    expect(prefixArgs).toHaveLength(1)
+    // The EINVAL that killed the changed-code gate came from spawning a .cmd.
+    expect(prefixArgs[0]).not.toMatch(/\.(cmd|bat)$/i)
+    expect(existsSync(prefixArgs[0])).toBe(true)
+  })
+
+  it('spawns without a shell and produces Oxlint JSON', () => {
+    const { command, prefixArgs } = resolveOxlintInvocation(repoRoot)
+    const result = spawnSync(
+      command,
+      [...prefixArgs, '--help'],
+      // shell:false is the point: the shim form throws EINVAL here on Windows.
+      { cwd: repoRoot, encoding: 'utf8', shell: false, windowsHide: true }
+    )
+
+    expect(result.error).toBeUndefined()
+    expect(result.stdout).toContain('oxlint')
+  })
+})
diff --git a/config/scripts/windows-cmd-shim-spawn-boundary.test.mjs b/config/scripts/windows-cmd-shim-spawn-boundary.test.mjs
new file mode 100644
index 00000000000..0c192382d7a
--- /dev/null
+++ b/config/scripts/windows-cmd-shim-spawn-boundary.test.mjs
@@ -0,0 +1,127 @@
+import { readdirSync, readFileSync } from 'node:fs'
+import path from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+/**
+ * Guard the one idiom that keeps re-killing Windows tooling.
+ *
+ * Node >= 20 refuses to spawn a Windows batch shim without `shell: true` (the
+ * CVE-2024-27980 mitigation), so `spawnSync('pnpm.cmd', …)` throws EINVAL
+ * before the command runs at all. On Windows that reads as a broken toolchain
+ * rather than a failing check, so the failure gets shrugged off — which is
+ * exactly how `check:code-quality:changed` ran dead for months.
+ *
+ * `src/` has its own chokepoint (runProcess) and its own ratchet. These trees
+ * are plain `.mjs` run by bare `node`, outside that module boundary, so they
+ * need this narrower one: a batch-shim command literal may not appear in a new
+ * script. The list only shrinks. Resolve the real executable instead —
+ * `oxlint-cli-invocation.mjs` and `windows-process-tree-gyp-rebuild.mjs` show
+ * the shape.
+ *
+ * Deliberately a text match on any `.cmd`/`.bat` literal, not on a list of
+ * runner names: these trees already spawn vitest, playwright, electron-builder
+ * and tsc, and the next offender is as likely to be one of those as it is to be
+ * pnpm. A literal is all a copy-paste carries.
+ *
+ * Two shapes this does not catch, both accepted. A shim assembled in a template
+ * literal, and a drive-lettered path — 'C:\tools\pnpm.cmd' — since a colon is
+ * not in the class. Real code builds those with path.join, whose 'pnpm.cmd'
+ * argument is caught. Also note codeText only drops lines that BEGIN with a
+ * comment marker, so a trailing `// 'pnpm.cmd'` false-positives; that fails
+ * closed. All of which is the ceiling of a text ratchet, and the reason `src/`
+ * gets a real chokepoint instead.
+ */
+const WINDOWS_SHIM_LITERAL = /['"][\w./\\-]*\.(?:cmd|bat)['"]/i
+
+const SCANNED_ROOTS = ['config/scripts', 'tests/tools']
+
+/** Scripts that still name a batch shim, held as data so it reads as the list it is. */
+const WINDOWS_SHIM_SPAWN_ALLOWLIST = [
+  // Owns the pnpm invocation decision for every other script.
+  'config/scripts/pnpm-cli-invocation.mjs',
+  'config/scripts/pnpm-cli-invocation.test.mjs',
+  // Write or assert on shim files rather than spawning one.
+  'config/scripts/dev-cli-terminal-wrapper.mjs',
+  'config/scripts/dev-cli-terminal-wrapper.test.mjs',
+  'config/scripts/electron-builder-config.test.mjs',
+  'config/scripts/ensure-native-runtime.test.mjs',
+  'config/scripts/live-remote-freeze-rpc.mjs',
+  'config/scripts/remote-agent-session-authority-repro.mjs',
+  // macOS-only build path; the win32 branch is dead code there.
+  'config/scripts/build-mac-local.mjs',
+  // Benchmarks, repros and e2e drivers — developer-invoked or Linux-only in CI.
+  'config/scripts/build-orcad-prebuilds.mjs',
+  'config/scripts/run-ai-vault-typing-bench.mjs',
+  'config/scripts/run-ephemeral-vm-runtime-store-rollback-repro.mjs',
+  'config/scripts/run-local-ssh-browser-routing-e2e.mjs',
+  'config/scripts/run-multi-client-navigation-e2e.mjs',
+  'config/scripts/run-multi-workspace-typing-bench.mjs',
+  'config/scripts/run-nested-runtime-ssh-e2e.mjs',
+  'config/scripts/run-ssh-client-hosted-browser-drop-reconnect-e2e.mjs',
+  'config/scripts/run-ssh-codex-artifacts-repro-e2e.mjs',
+  'config/scripts/run-ssh-docker-e2e.mjs',
+  'config/scripts/run-ssh-docker-perf-e2e.mjs',
+  'config/scripts/run-ssh-docker-terminal-parking-e2e.mjs',
+  'config/scripts/run-ssh-docker-watcher-isolation-e2e.mjs',
+  'config/scripts/run-ssh-staged-upload-reliability.mjs',
+  'config/scripts/run-terminal-ibus-hangul-e2e.mjs',
+  'config/scripts/run-terminal-scale-perf-e2e.mjs',
+  // Routes its shim through an explicit `cmd.exe /d /s /c`, which is the correct form.
+  'config/scripts/verify-skill-update-roundtrip.mjs',
+  'tests/tools/benchmarks/startup-time-bench.mjs',
+  'tests/tools/benchmarks/worktree-deletion-dev-bench.mjs',
+  'tests/tools/repro-terminal-send-submit.mjs'
+]
+
+/** Drop comment-only lines so prose about the old idiom is not an offender. */
+function codeText(contents) {
+  return contents
+    .split('\n')
+    .filter((line) => !/^\s*(?:\/\/|\/\*|\*)/.test(line))
+    .join('\n')
+}
+
+// Why recursive: a future config/scripts/<subdir>/ would otherwise escape silently.
+function collectScripts(directory, repoRoot, found = []) {
+  for (const entry of readdirSync(directory, { withFileTypes: true })) {
+    const full = path.join(directory, entry.name)
+    if (entry.isDirectory()) {
+      if (entry.name !== 'node_modules') {
+        collectScripts(full, repoRoot, found)
+      }
+      continue
+    }
+    if (/\.[cm]?js$/.test(entry.name)) {
+      found.push(path.relative(repoRoot, full).split(path.sep).join('/'))
+    }
+  }
+  return found
+}
+
+describe('windows batch shim spawn boundary', () => {
+  const repoRoot = path.resolve(import.meta.dirname, '..', '..')
+  const scripts = SCANNED_ROOTS.flatMap((root) =>
+    collectScripts(path.join(repoRoot, root), repoRoot)
+  )
+  const offenders = scripts.filter((relativePath) =>
+    WINDOWS_SHIM_LITERAL.test(codeText(readFileSync(path.join(repoRoot, relativePath), 'utf8')))
+  )
+
+  it('scans a plausible number of scripts', () => {
+    // A broken root or extension filter would make the guard silently vacuous.
+    expect(scripts.length).toBeGreaterThan(100)
+  })
+
+  it('has no unlisted script naming a Windows batch shim', () => {
+    const unlisted = offenders.filter((name) => !WINDOWS_SHIM_SPAWN_ALLOWLIST.includes(name))
+    expect(
+      unlisted,
+      'Node cannot spawn a Windows batch shim without a shell. Resolve the real executable — see oxlint-cli-invocation.mjs.'
+    ).toEqual([])
+  })
+
+  it('has no stale allowlist entry', () => {
+    const stale = WINDOWS_SHIM_SPAWN_ALLOWLIST.filter((name) => !offenders.includes(name))
+    expect(stale, 'Script no longer names a batch shim — delete the line.').toEqual([])
+  })
+})

From 3d3b4f9053a7ce54a5f02a6067449e2db7c64476 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 23:35:38 -0700
Subject: [PATCH 25/92] fix(ssh): scope every activate() release path to the
 record its caller owns (#18038)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Two of the three release/cancel sites in RelayPtySourcePublication.activate()
acted on `current` unconditionally. A superseded transport re-entering activate()
therefore released — or cancelled and deleted — the delivery its own replacement
had just opened: releasing the fence resumes a send the replacement is still
rotating, and retiring it blanks the pane that owns it. The live path is the
unadmitted/subscriber branch, so guarding only the first site leaves the defect
exactly as it was; all three now act only on a record the caller still owns.

Also give the restore-required token its own toast copy. It must not join
UNREATTACHABLE_SESSION_SOURCES: that copy says "Open a new terminal", which here
abandons a running agent on a PTY the relay has just proven alive
(docs/reference/ssh-execution-boundary.md).
---
 src/relay/relay-pty-source-publication.ts     |  24 +--
 ...y-pty-source-superseded-activation.test.ts | 161 ++++++++++++++++++
 .../terminal-pane/TerminalErrorToast.test.ts  |  21 +++
 .../terminal-pane/TerminalErrorToast.tsx      |  14 ++
 src/renderer/src/i18n/locales/en.json         |   3 +-
 5 files changed, 210 insertions(+), 13 deletions(-)
 create mode 100644 src/relay/relay-pty-source-superseded-activation.test.ts

diff --git a/src/relay/relay-pty-source-publication.ts b/src/relay/relay-pty-source-publication.ts
index bad396b5b68..16b6e81c61b 100644
--- a/src/relay/relay-pty-source-publication.ts
+++ b/src/relay/relay-pty-source-publication.ts
@@ -65,20 +65,24 @@ export class RelayPtySourcePublication {
     context: RequestContext | undefined,
     recovery?: PtySourceRecoveryRequest
   ): false | 'opened' | 'rotated' | 'existing' | PtySourceRecoveryResult {
+    let current = this.deliveries.get(id)
+    // A superseded request can find the delivery its own replacement opened: releasing that fence
+    // resumes a send the replacement is still rotating, and cancelling it blanks the pane that owns
+    // it. So every bail-out below acts only on a record this caller still owns.
+    const owned = current?.clientId === context?.clientId ? current : undefined
     if (!context?.onResponseSettled) {
-      this.sender.releaseRotationFence(this.deliveries.get(id))
+      this.sender.releaseRotationFence(owned)
       return false
     }
     const mode = this.session.deliveryMode(context.clientId)
-    let current = this.deliveries.get(id)
     if (mode === 'unadmitted' || mode === 'subscriber') {
-      this.sender.releaseRotationFence(current)
+      this.sender.releaseRotationFence(owned)
       return false
     }
     if (mode === 'legacy-owner') {
-      if (current) {
-        this.session.cancelDelivery(current.identity, 'source-credit-disabled')
-        this.sender.wakeSendWaiters(current)
+      if (owned) {
+        this.session.cancelDelivery(owned.identity, 'source-credit-disabled')
+        this.sender.wakeSendWaiters(owned)
         this.deliveries.delete(id)
         this.onCapacity(id)
       }
@@ -88,7 +92,7 @@ export class RelayPtySourcePublication {
       current?.clientId === context.clientId &&
       !current.restoreRequired &&
       current.sourceExitState !== 'pending' &&
-      this.deliveryClosedUnderRecord(current)
+      ptySourceDeliveryClosed(this.session, current.identity)
     ) {
       // Why: a canceled delivery can never resume as 'existing'; retire it so re-attach opens fresh.
       this.sender.wakeSendWaiters(current)
@@ -219,7 +223,7 @@ export class RelayPtySourcePublication {
     }
     if (!output.sourceAccepted && !appendPtySourceOutput(this.session, record, output)) {
       this.counters.appendDenied++
-      if (this.deliveryClosedUnderRecord(record)) {
+      if (ptySourceDeliveryClosed(this.session, record.identity)) {
         this.sender.wakeSendWaiters(record)
         this.deliveries.delete(id)
         // Why: deferred — publish() can run inside flushPendingOutput's captured-queue drain,
@@ -275,10 +279,6 @@ export class RelayPtySourcePublication {
     this.sender.dispose()
   }
 
-  private deliveryClosedUnderRecord(record: RelayPtySourceDeliveryRecord): boolean {
-    return ptySourceDeliveryClosed(this.session, record.identity)
-  }
-
   private registerActivationSettlement(
     id: string,
     record: RelayPtySourceDeliveryRecord,
diff --git a/src/relay/relay-pty-source-superseded-activation.test.ts b/src/relay/relay-pty-source-superseded-activation.test.ts
new file mode 100644
index 00000000000..759bbbef1f5
--- /dev/null
+++ b/src/relay/relay-pty-source-superseded-activation.test.ts
@@ -0,0 +1,161 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import {
+  RelayDispatcher,
+  type RelayClientSessionIdentity,
+  type RequestContext,
+  type SinkWriteSettlement
+} from './dispatcher'
+import { encodeJsonRpcFrame, MessageType } from './protocol'
+import { RelayPtySourcePublication } from './relay-pty-source-publication'
+import { SshPtyConsumerSessionAdapter } from './ssh-pty-consumer-session-adapter'
+
+const endpointIdentity: RelayClientSessionIdentity = {
+  principal: 'endpoint-principal',
+  authenticated: true,
+  allowSessionOwner: true,
+  authenticationKind: 'endpoint-credential'
+}
+
+function requestFrame(id: number, method: string, params: Record<string, unknown>): Buffer {
+  return encodeJsonRpcFrame({ jsonrpc: '2.0', id, method, params }, id, 0)
+}
+
+function responseResult(buffer: Buffer): Record<string, unknown> | null {
+  if (buffer[0] !== MessageType.Regular) {
+    return null
+  }
+  const length = buffer.readUInt32BE(9)
+  const message = JSON.parse(buffer.subarray(13, 13 + length).toString('utf8'))
+  return message.id === undefined ? null : (message.result ?? null)
+}
+
+async function flushRequests(): Promise<void> {
+  await new Promise((resolve) => setImmediate(resolve))
+}
+
+describe('PTY source activation from a superseded owner', () => {
+  let dispatcher: RelayDispatcher | null = null
+
+  afterEach(() => {
+    dispatcher?.dispose()
+    dispatcher = null
+  })
+
+  async function createHarness() {
+    const writes: Buffer[] = []
+    dispatcher = new RelayDispatcher(
+      (data, onSettled) => {
+        writes.push(Buffer.from(data))
+        onSettled({ ok: true })
+        return true
+      },
+      { supportsWriteCallback: true },
+      endpointIdentity
+    )
+    let publication: RelayPtySourcePublication
+    const adapter = new SshPtyConsumerSessionAdapter(dispatcher, 'build-a', undefined, (id) =>
+      publication.onCreditAvailable(id)
+    )
+    publication = new RelayPtySourcePublication(dispatcher, adapter, () => {})
+    dispatcher.feed(
+      requestFrame(1, 'pty.openClient', {
+        protocolVersion: 1,
+        clientInstanceId: 'client-1',
+        requestedRole: 'session-owner',
+        capabilities: { outputFlowControl: { versions: [1], requestedWindowSu: 4 } }
+      })
+    )
+    await flushRequests()
+    return { adapter, publication, writes }
+  }
+
+  function contextFor(
+    clientId: number,
+    settlements: ((result: SinkWriteSettlement) => void)[]
+  ): RequestContext {
+    return {
+      clientId,
+      isStale: () => false,
+      sessionIdentity: endpointIdentity,
+      onResponseSettled: (callback) => settlements.push(callback)
+    }
+  }
+
+  /**
+   * The superseded transport must not release, cancel or retire the delivery its own replacement
+   * opened: releasing the fence resumes a send the replacement is still rotating, and retiring it
+   * blanks the pane that owns it.
+   */
+  it('leaves the replacement delivery intact when the superseded owner re-activates', async () => {
+    const { publication, adapter, writes } = await createHarness()
+    const settlements: ((result: SinkWriteSettlement) => void)[] = []
+    expect(publication.activate('pty-1', 'incarnation-1', contextFor(1, settlements))).toBe(
+      'opened'
+    )
+    settlements[0]({ ok: true })
+    const activation = publication.receivingActivation('pty-1', 1)!
+    const ownerGrant = writes.map(responseResult).find((result) => result?.ownerLease)!
+
+    // The original transport arms its rotation fence while waiting for a checkpoint-safe send.
+    await expect(publication.waitForPendingSend('pty-1')).resolves.toBe(true)
+
+    const replacementWrites: Buffer[] = []
+    const replacementClientId = dispatcher!.attachClient(
+      (data, onSettled) => {
+        replacementWrites.push(Buffer.from(data))
+        onSettled({ ok: true })
+        return true
+      },
+      { supportsWriteCallback: true },
+      endpointIdentity
+    )
+    dispatcher!.feedClient(
+      replacementClientId,
+      requestFrame(2, 'pty.openClient', {
+        protocolVersion: 1,
+        clientInstanceId: 'client-1',
+        requestedRole: 'session-owner',
+        resume: {
+          ownerGeneration: ownerGrant.ownerGeneration,
+          ownerLease: ownerGrant.ownerLease
+        },
+        capabilities: { outputFlowControl: { versions: [1], requestedWindowSu: 4 } }
+      })
+    )
+    await flushRequests()
+
+    const replacementSettlements: ((result: SinkWriteSettlement) => void)[] = []
+    const recovery = {
+      status: 'checkpoint' as const,
+      clientGeneration: activation.clientGeneration,
+      ownerGeneration: activation.ownerGeneration,
+      ptyIncarnation: activation.ptyIncarnation,
+      deliveryToken: activation.deliveryToken,
+      acceptedSourceEndSu: 0
+    }
+    expect(
+      publication.activate(
+        'pty-1',
+        'incarnation-1',
+        contextFor(replacementClientId, replacementSettlements),
+        recovery
+      )
+    ).toMatchObject({ status: 'pending' })
+    replacementSettlements[0]({ ok: true })
+
+    // Arm the replacement fence, then let the superseded transport's activation resume. isStale()
+    // stays false on purpose: the superseded client is still attached, so production reaches the
+    // delivery-mode bail-outs rather than any stale early-out.
+    await expect(publication.waitForPendingSend('pty-1')).resolves.toBe(true)
+    const cancelDelivery = vi.spyOn(adapter, 'cancelDelivery')
+    expect(publication.activate('pty-1', 'incarnation-1', contextFor(1, []), recovery)).toBe(false)
+    expect(cancelDelivery).not.toHaveBeenCalled()
+    expect(publication.publish('pty-1', { data: 'replacement-output' }, false)).toBe(false)
+
+    // Release the replacement fence through its owning transport so no parked work is left behind.
+    expect(
+      publication.activate('pty-1', 'incarnation-1', contextFor(replacementClientId, []))
+    ).toBe('existing')
+    expect(replacementWrites.length).toBeGreaterThan(0)
+  })
+})
diff --git a/src/renderer/src/components/terminal-pane/TerminalErrorToast.test.ts b/src/renderer/src/components/terminal-pane/TerminalErrorToast.test.ts
index b411a3c4d0b..31febbd6c21 100644
--- a/src/renderer/src/components/terminal-pane/TerminalErrorToast.test.ts
+++ b/src/renderer/src/components/terminal-pane/TerminalErrorToast.test.ts
@@ -185,6 +185,19 @@ describe('humanizeTerminalError', () => {
     expect(humanized).not.toContain('exited')
   })
 
+  // A live PTY whose delivery was retired must never get the "open a new terminal" copy: acting on
+  // that abandons a running agent on the host.
+  it('describes a retired output source as reconnecting, not as a lost session', () => {
+    const humanized = humanizeTerminalError(
+      'SSH_PTY_SOURCE_RESTORE_REQUIRED: remote:2f1c:pty-7 checkpointUnavailable'
+    )
+    expect(humanized).not.toContain('SSH_PTY_SOURCE_RESTORE_REQUIRED')
+    expect(humanized).not.toContain('remote:2f1c:pty-7')
+    expect(humanized).not.toContain('checkpointUnavailable')
+    expect(humanized).not.toContain('Open a new terminal')
+    expect(humanized).toContain('still running')
+  })
+
   it('replaces only the unreattachable line in an aggregated error', () => {
     const humanized = humanizeTerminalError('Paste failed.\nSSH_SESSION_EXPIRED: orca:2f1c@@pty-7')
     expect(humanized.startsWith('Paste failed.\n')).toBe(true)
@@ -216,6 +229,14 @@ describe('isExplainedTerminalError', () => {
     ).toBe(true)
   })
 
+  it('suppresses the issue link while a live session restores its output source', () => {
+    expect(
+      isExplainedTerminalError(
+        'SSH_PTY_SOURCE_RESTORE_REQUIRED: remote:2f1c:pty-7 checkpointUnavailable'
+      )
+    ).toBe(true)
+  })
+
   it('suppresses the issue link for a session the host cannot reattach', () => {
     expect(isExplainedTerminalError('SSH_SESSION_EXPIRED: orca:2f1c@@pty-7')).toBe(true)
     expect(
diff --git a/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx b/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
index 9fceb9eeef3..11543b96ccc 100644
--- a/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
@@ -35,6 +35,13 @@ const UNREATTACHABLE_SESSION_SOURCES = [
   'PTY "[^"\\r\\n]*" not found(?: \\(identity mismatch\\))?',
   '(?:SessionNotFoundError: )?Session not found: \\S+'
 ]
+// The relay answered and proved the shell is still running — only its output delivery was retired.
+// Deliberately NOT one of the sources above: that copy says to open a new terminal, which here
+// abandons a live agent. Same lastIndex hazard, so keep the test and replace forms separate.
+const SOURCE_RESTORE_REQUIRED_SOURCE =
+  'SSH_PTY_SOURCE_RESTORE_REQUIRED(?::[ \\t]*\\S*(?:[ \\t]+\\S+)?)?'
+const SOURCE_RESTORE_REQUIRED_PATTERN = new RegExp(SOURCE_RESTORE_REQUIRED_SOURCE)
+const SOURCE_RESTORE_REQUIRED_REPLACE_PATTERN = new RegExp(SOURCE_RESTORE_REQUIRED_SOURCE, 'g')
 const UNREATTACHABLE_SESSION_PATTERNS = UNREATTACHABLE_SESSION_SOURCES.map(
   (source) => new RegExp(source)
 )
@@ -77,6 +84,7 @@ export function isExplainedTerminalError(error: string): boolean {
       (line) =>
         TERMINAL_HOST_GONE_PATTERN.test(line) ||
         LEGACY_TERMINAL_HOST_GONE_PATTERN.test(line) ||
+        SOURCE_RESTORE_REQUIRED_PATTERN.test(line) ||
         UNREATTACHABLE_SESSION_PATTERNS.some((pattern) => pattern.test(line))
     )
 }
@@ -113,6 +121,12 @@ export function humanizeTerminalError(error: string): string {
         )
     humanized = humanized.replaceAll(PANE_OWNER_UNVERIFIED_MARKER, () => explanation)
   }
+  humanized = humanized.replace(SOURCE_RESTORE_REQUIRED_REPLACE_PATTERN, () =>
+    translate(
+      'auto.components.terminal.pane.TerminalErrorToast.sourceRestoring',
+      'Reconnecting this terminal — its output is being re-established. The session is still running.'
+    )
+  )
   humanized = humanizeUnreattachableSession(humanized)
   if (!isExplainedTerminalError(humanized)) {
     return humanized
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index 163ba22b978..38e352118a3 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -3087,7 +3087,8 @@
             "ownerUnknown": "Orca couldn't verify this terminal's owner.",
             "42b283ecfc": "Orca couldn't safely reconnect this terminal because the host couldn't verify its saved session. Orca left the saved session unchanged. Click Retry to try reconnecting now. If it still cannot reconnect, open a new terminal.",
             "e16012e31e": "The terminal daemon that owned this session exited, so the session and its scrollback could not be recovered. Open a new terminal to continue.",
-            "sessionUnavailable": "Orca couldn't reattach to this pane's terminal session on the host. Open a new terminal to continue."
+            "sessionUnavailable": "Orca couldn't reattach to this pane's terminal session on the host. Open a new terminal to continue.",
+            "sourceRestoring": "Reconnecting this terminal — its output is being re-established. The session is still running."
           },
           "TerminalProcessExitOverlay": {
             "capacityTitle": "Git Bash console limit reached",

From 0dbe9d050488e64d01ec4dfdeb8184fdbb72ff75 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 1 Sep 2026 23:35:47 -0700
Subject: [PATCH 26/92] test(ssh): dockerized relay fault injection with
 verdict assertions (#18017)

* test(ssh): add a dockerized SSH fault-injection lane with four fault shapes

The existing SSH reconnect specs all reconnect by calling ssh.disconnect() then
ssh.connect() - a clean cycle the client knows is coming. Nothing covered the
faults the reconnect machinery exists for.

Four shapes, each documented with why it is not the others: killing sshd's
per-connection forks (transport dies, relay survives), `docker pause` (silence
with TCP still established), SIGKILLing every relay.js (the only fault where
`exited` is the correct verdict), and a 48MB flood with nobody attached.

The relay-kill case is the one that makes the rest meaningful: every other case
asserts the session survived, which only means something if a genuinely dead
session is distinguishable. It is the only case where replacing the pane is
correct, so it pins the boundary in
docs/reference/ssh-execution-boundary.md rather than just testing reconnection.

The `docker pause` case pins the other side of that boundary: after 30s of
silence from a healthy host the pane keeps its PTY and its scrollback, because
loss of contact is never evidence of death.

No network-blackhole fault: reconnecting the fixture does not restore its
published port mapping, so that fault is not reversible on this container and
would strand the worker it ran on.

* test(ssh): fixme the flood case pending #18018

It fails in CI on its first real run: the pane keeps its PTY and repaints,
but a command run after the flood produces no output within the poll budget.
Same shape as #18018 and not caused by this spec. The three verdict
assertions around it stay enforced.
---
 config/scripts/pr-e2e-gate-contract.test.mjs  |   1 +
 config/scripts/pr-e2e-source-routing.mjs      |   1 +
 config/scripts/run-ssh-docker-e2e.mjs         |   1 +
 tests/e2e/helpers/docker-ssh-relay-faults.ts  | 133 +++++++
 ...ssh-docker-transport-drop-recovery.spec.ts | 346 ++++++++++++++++++
 5 files changed, 482 insertions(+)
 create mode 100644 tests/e2e/helpers/docker-ssh-relay-faults.ts
 create mode 100644 tests/e2e/ssh-docker-transport-drop-recovery.spec.ts

diff --git a/config/scripts/pr-e2e-gate-contract.test.mjs b/config/scripts/pr-e2e-gate-contract.test.mjs
index 7cf2b4e11b4..232780c6941 100644
--- a/config/scripts/pr-e2e-gate-contract.test.mjs
+++ b/config/scripts/pr-e2e-gate-contract.test.mjs
@@ -266,6 +266,7 @@ describe('PR E2E gate contract', () => {
       'tests/e2e/pty-input-write-queue-ssh.spec.ts',
       'tests/e2e/ssh-cold-activation-restore.spec.ts',
       'tests/e2e/ssh-docker-reconnect-pane-restore.spec.ts',
+      'tests/e2e/ssh-docker-transport-drop-recovery.spec.ts',
       'tests/e2e/ssh-port-forward-lifecycle.spec.ts',
       'tests/e2e/ssh-reconnect-tab-destruction.spec.ts',
       'tests/e2e/ssh-startup-exec-readiness.spec.ts',
diff --git a/config/scripts/pr-e2e-source-routing.mjs b/config/scripts/pr-e2e-source-routing.mjs
index 1aed38db92e..d81f4c040fe 100644
--- a/config/scripts/pr-e2e-source-routing.mjs
+++ b/config/scripts/pr-e2e-source-routing.mjs
@@ -27,6 +27,7 @@ export const PR_E2E_SOURCE_ROUTES = [
       'tests/e2e/pty-input-write-queue-ssh.spec.ts',
       'tests/e2e/ssh-cold-activation-restore.spec.ts',
       'tests/e2e/ssh-docker-reconnect-pane-restore.spec.ts',
+      'tests/e2e/ssh-docker-transport-drop-recovery.spec.ts',
       'tests/e2e/ssh-port-forward-lifecycle.spec.ts',
       'tests/e2e/ssh-reconnect-tab-destruction.spec.ts',
       'tests/e2e/ssh-startup-exec-readiness.spec.ts',
diff --git a/config/scripts/run-ssh-docker-e2e.mjs b/config/scripts/run-ssh-docker-e2e.mjs
index a723a9a6ad0..195811f7312 100644
--- a/config/scripts/run-ssh-docker-e2e.mjs
+++ b/config/scripts/run-ssh-docker-e2e.mjs
@@ -72,6 +72,7 @@ const result = spawnSync(
     'tests/e2e/ssh-cold-activation-restore.spec.ts',
     'tests/e2e/ssh-cold-hydration-gap-tab-seeding.spec.ts',
     'tests/e2e/ssh-docker-reconnect-pane-restore.spec.ts',
+    'tests/e2e/ssh-docker-transport-drop-recovery.spec.ts',
     'tests/e2e/ssh-external-image-preview.spec.ts',
     'tests/e2e/ssh-lost-kill-tab-resurrection.spec.ts',
     'tests/e2e/ssh-pi-compatible-agent-title.spec.ts',
diff --git a/tests/e2e/helpers/docker-ssh-relay-faults.ts b/tests/e2e/helpers/docker-ssh-relay-faults.ts
new file mode 100644
index 00000000000..f7c8f77fb2f
--- /dev/null
+++ b/tests/e2e/helpers/docker-ssh-relay-faults.ts
@@ -0,0 +1,133 @@
+import { execFileSync, spawnSync } from 'node:child_process'
+import {
+  execDockerSshRelayTargetControlCommand,
+  type DockerSshRelayTarget
+} from './docker-ssh-relay-target'
+
+function run(args: string[], opts: { timeoutMs?: number } = {}): string {
+  return execFileSync('docker', args, {
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+    timeout: opts.timeoutMs ?? 30_000
+  }).trim()
+}
+
+function tryRun(args: string[], opts: { timeoutMs?: number } = {}): boolean {
+  return (
+    spawnSync('docker', args, {
+      stdio: 'ignore',
+      timeout: opts.timeoutMs ?? 10_000
+    }).status === 0
+  )
+}
+
+/**
+ * Kill the per-connection sshd forks, leaving the listening daemon and every relay
+ * process alive.
+ *
+ * Why: this is the fault the reconnect path is actually built for — the transport
+ * dies while the remote session is still running, so a correct client re-attaches
+ * rather than redeploying. Killing the container or the daemon tests a different
+ * thing (see killDockerSshRelayDaemon / blackholeDockerSshRelayNetwork).
+ */
+export function dropDockerSshRelayTransport(target: DockerSshRelayTarget): number {
+  // Why: the listener is the oldest sshd (PID 1 under the fixture entrypoint); every
+  // other sshd/sshd-session is a live connection. OpenSSH >= 9.8 renames the child,
+  // so both names are matched to keep this working across fixture image bumps.
+  const output = execDockerSshRelayTargetControlCommand(
+    target,
+    `
+daemon="$(pgrep -x sshd | sort -n | head -1)"
+[ -n "$daemon" ] || { echo 0; exit 0; }
+killed=0
+for pid in $(pgrep -x sshd; pgrep -x sshd-session); do
+  [ "$pid" = "$daemon" ] && continue
+  kill -9 "$pid" 2>/dev/null && killed=$((killed+1))
+done
+echo "$killed"
+`
+  )
+  const dropped = Number(output.trim().split('\n').at(-1))
+  if (!Number.isInteger(dropped)) {
+    throw new Error(`Unexpected transport-drop count from ${target.containerName}: ${output}`)
+  }
+  return dropped
+}
+
+/**
+ * Freeze the container. TCP stays established and nothing is reset, so the client
+ * sees silence rather than a closed socket.
+ *
+ * Why: this is the laptop-lid / network-stall shape, and the only fault that can
+ * expose a liveness timeout firing on a session that is still perfectly healthy —
+ * verified locally: a stream stalls while paused and resumes intact on unpause.
+ */
+export function stallDockerSshRelayTarget(target: DockerSshRelayTarget): void {
+  run(['pause', target.containerName])
+}
+
+export function resumeDockerSshRelayTarget(target: DockerSshRelayTarget): void {
+  run(['unpause', target.containerName])
+}
+
+export async function withStalledDockerSshRelayTarget<T>(
+  target: DockerSshRelayTarget,
+  body: () => Promise<T>
+): Promise<T> {
+  stallDockerSshRelayTarget(target)
+  try {
+    return await body()
+  } finally {
+    resumeDockerSshRelayTarget(target)
+  }
+}
+
+// Deliberately absent: a network-blackhole fault (`docker network disconnect`). The shape is real —
+// the remote keeps producing while unreachable — but reconnecting the fixture does not restore its
+// published port mapping, so the fault is not reversible on this container and would strand the
+// worker it ran on. Reintroduce it only with a fixture that survives the round trip.
+
+/**
+ * SIGKILL every detached relay process, leaving sshd reachable.
+ *
+ * Why: the session is genuinely gone, so this is the only fault where a client is
+ * *supposed* to surface an explicit session-expired state instead of resuming. A
+ * reconnect test that never exercises this cannot tell "resumed" from "silently
+ * started over".
+ */
+export function killDockerSshRelayDaemon(target: DockerSshRelayTarget): number {
+  const output = execDockerSshRelayTargetControlCommand(
+    target,
+    `
+killed=0
+for proc in /proc/[0-9]*; do
+  [ -r "$proc/cmdline" ] || continue
+  argv=()
+  mapfile -d '' -t argv < "$proc/cmdline" 2>/dev/null || continue
+  entry="\${argv[1]:-}"
+  [ "\${entry##*/}" = relay.js ] || continue
+  pid="\${proc##*/}"
+  kill -9 "$pid" 2>/dev/null && killed=$((killed+1))
+done
+echo "$killed"
+`
+  )
+  const killed = Number(output.trim().split('\n').at(-1))
+  if (!Number.isInteger(killed)) {
+    throw new Error(`Unexpected relay-kill count from ${target.containerName}: ${output}`)
+  }
+  return killed
+}
+
+/**
+ * Undo any fault a failing test left behind.
+ *
+ * Why: a paused container outlives the spec that faulted it and poisons every later spec on the
+ * same worker, which reads as an unrelated flake. Every fault above must be reversible here.
+ */
+export function clearDockerSshRelayFaults(target: DockerSshRelayTarget | null): void {
+  if (!target) {
+    return
+  }
+  tryRun(['unpause', target.containerName])
+}
diff --git a/tests/e2e/ssh-docker-transport-drop-recovery.spec.ts b/tests/e2e/ssh-docker-transport-drop-recovery.spec.ts
new file mode 100644
index 00000000000..9f8434ed51a
--- /dev/null
+++ b/tests/e2e/ssh-docker-transport-drop-recovery.spec.ts
@@ -0,0 +1,346 @@
+import type { Page } from '@playwright/test'
+import { test, expect } from './helpers/orca-app'
+import { ensureTerminalVisible, waitForActiveWorktree, waitForSessionReady } from './helpers/store'
+import {
+  execInTerminal,
+  waitForActivePanePtyId,
+  waitForActiveTerminalManager,
+  waitForTerminalOutput
+} from './helpers/terminal'
+import {
+  cleanupDockerSshRelayTarget,
+  enableDockerSshRelayTargetShellTitle,
+  execDockerSshRelayTargetCommand,
+  startDockerSshRelayTarget,
+  type DockerSshRelayTarget
+} from './helpers/docker-ssh-relay-target'
+import { connectDockerSshRelayTarget } from './helpers/docker-ssh-relay-connection'
+import {
+  clearDockerSshRelayFaults,
+  dropDockerSshRelayTransport,
+  killDockerSshRelayDaemon,
+  withStalledDockerSshRelayTarget
+} from './helpers/docker-ssh-relay-faults'
+
+const RUN_DOCKER_SSH = process.env.ORCA_E2E_SSH_DOCKER === '1'
+
+/**
+ * Every existing reconnect spec reconnects by calling ssh.disconnect() then ssh.connect() — a
+ * clean, client-initiated cycle that the client knows is coming. Nothing covered the fault the
+ * reconnect machinery actually exists for: the transport dying underneath a live session, with the
+ * remote still running and still holding the PTYs.
+ *
+ * The distinction matters because the two paths diverge at the relay. A graceful disconnect closes
+ * the client cleanly; a killed connection leaves the relay's grace window and PTY table intact, so
+ * a correct client re-attaches rather than rebuilding. Reports of frozen panes and duplicated agent
+ * sessions come from the second shape, which had no coverage at all.
+ *
+ * Faults come from docker-ssh-relay-faults, in two shapes that must not be confused. Killing
+ * sshd's per-connection forks leaves the listening daemon and every relay process alive, so the
+ * session survives and the pane must keep its PTY. SIGKILLing the relay leaves sshd reachable but
+ * genuinely ends the sessions, so the pane must be replaced. Only the second is `exited`; a suite
+ * with only the first cannot tell a resume from a silent cold start
+ * (docs/reference/ssh-execution-boundary.md).
+ */
+async function readSshStatus(orcaPage: Page, targetId: string) {
+  return orcaPage.evaluate(
+    (targetId) => window.__store?.getState().sshConnectionStates.get(targetId)?.status ?? null,
+    targetId
+  )
+}
+
+/**
+ * Not covered here on purpose: park-then-reveal after a reconnect. ssh-terminal-parking already
+ * covers the park/reveal round trip, and driving a park deterministically from this lane proved
+ * flaky enough to cost more than it proves.
+ */
+test.describe('SSH transport drop recovery', () => {
+  test.skip(!RUN_DOCKER_SSH, 'Set ORCA_E2E_SSH_DOCKER=1 to run the dockerized SSH relay tests')
+
+  test('recovers a live pane after the transport dies under it', async ({ orcaPage }, testInfo) => {
+    test.slow()
+    let target: DockerSshRelayTarget | null = null
+    try {
+      target = startDockerSshRelayTarget(testInfo)
+      enableDockerSshRelayTargetShellTitle(target)
+      await waitForSessionReady(orcaPage)
+      await waitForActiveWorktree(orcaPage)
+      const remote = await connectDockerSshRelayTarget(orcaPage, target)
+      await ensureTerminalVisible(orcaPage, 45_000)
+      await waitForActiveTerminalManager(orcaPage, 60_000)
+      const ptyId = await waitForActivePanePtyId(orcaPage, 60_000)
+
+      // A marker, not a prompt: a prompt reappears on its own, so it cannot tell restored
+      // scrollback from a shell that simply started again.
+      const markerSuffix = Date.now()
+      const marker = `DROP_MARKER_${markerSuffix}`
+      await execInTerminal(orcaPage, ptyId, `printf 'DROP_MARKER_%s\\n' ${markerSuffix}`)
+      await waitForTerminalOutput(orcaPage, marker, 30_000)
+
+      const dropped = dropDockerSshRelayTransport(target)
+      expect(dropped, 'no live SSH connection was found to drop').toBeGreaterThan(0)
+
+      // Nothing below calls ssh.connect(). Recovery has to come from the client's own ladder,
+      // which is the behaviour users depend on and the thing a scripted reconnect never exercised.
+      await expect
+        .poll(() => readSshStatus(orcaPage, remote.targetId), {
+          timeout: 120_000,
+          message: 'SSH target never returned to connected after the transport was dropped'
+        })
+        .toBe('connected')
+
+      await waitForActiveTerminalManager(orcaPage, 60_000)
+      await waitForActivePanePtyId(orcaPage, 60_000)
+
+      // The pane must still show what it had. A blank pane here is the reported bug.
+      await waitForTerminalOutput(orcaPage, marker, 60_000)
+
+      // And it must still be wired to a shell that answers — a pane can repaint and still be dead,
+      // which is the failure mode a content-only assertion misses.
+      const afterMarkerSuffix = Date.now()
+      const afterMarker = `DROP_AFTER_${afterMarkerSuffix}`
+      await execInTerminal(
+        orcaPage,
+        await waitForActivePanePtyId(orcaPage, 60_000),
+        `printf 'DROP_AFTER_%s\\n' ${afterMarkerSuffix}`
+      )
+      await waitForTerminalOutput(orcaPage, afterMarker, 60_000)
+    } finally {
+      if (target) {
+        clearDockerSshRelayFaults(target)
+        cleanupDockerSshRelayTarget(target)
+      }
+    }
+  })
+
+  // Fixme: fails in CI on its first real run — the pane keeps its PTY and repaints, but a command
+  // run after the flood produces no output within the poll budget. Same shape as #18018 (deaf pane
+  // after a stalled host resumes), and not caused by this spec. Tracked there; the three verdict
+  // assertions around it stay enforced.
+  test.fixme('stays bounded when a disconnected shell floods its pty', async ({ orcaPage }, testInfo) => {
+    test.slow()
+    // Timeouts here are deliberately generous: this guards memory, not latency. A 48MB flood plus a
+    // reconnect lands near 60s wall-clock end to end, so a 60s bind timeout was marginal and made
+    // the spec flaky. Measured since: reconnect-and-rebind after the flood is ~11.9s, so the
+    // marginal part is the flood WRITE, not recovery — resuming a pty whose client has gone does
+    // not slow reconnect under load.
+    //
+    // The drain fix resumes a pty whose client has gone, so the shell is no longer throttled by a
+    // consumer that cannot consume. That is only safe if something else bounds it: `buffered` is a
+    // capacity-limited window, and the pending delivery queue — which is unbounded — is dropped
+    // rather than carried. This pins that, because the failure it guards against is an OOM on
+    // someone's remote host rather than a wrong pixel.
+    let target: DockerSshRelayTarget | null = null
+    try {
+      target = startDockerSshRelayTarget(testInfo)
+      enableDockerSshRelayTargetShellTitle(target)
+      await waitForSessionReady(orcaPage)
+      await waitForActiveWorktree(orcaPage)
+      const remote = await connectDockerSshRelayTarget(orcaPage, target)
+      await ensureTerminalVisible(orcaPage, 45_000)
+      await waitForActiveTerminalManager(orcaPage, 240_000)
+      const ptyId = await waitForActivePanePtyId(orcaPage, 240_000)
+
+      const readRelayRssKb = (): number => {
+        const out = execDockerSshRelayTargetCommand(
+          target!,
+          "ps -eo rss,args | grep -F 'relay.js' | grep -v grep | awk '{s+=$1} END {print s+0}'"
+        )
+        return Number(out.trim().split('\n').at(-1))
+      }
+      const baselineRssKb = readRelayRssKb()
+      expect(baselineRssKb, 'relay process not found').toBeGreaterThan(0)
+
+      // ~48 MB of output with nobody attached: far past any sane replay window.
+      await execInTerminal(
+        orcaPage,
+        ptyId,
+        `yes "$(printf 'ORCA_%s' FLOOD_LINE)" | head -c 48000000; echo FLOODED`
+      )
+      await waitForTerminalOutput(orcaPage, 'ORCA_FLOOD_LINE', 30_000, 20_000)
+      const dropped = dropDockerSshRelayTransport(target)
+      expect(dropped).toBeGreaterThan(0)
+
+      await expect
+        .poll(() => readSshStatus(orcaPage, remote.targetId), {
+          timeout: 120_000,
+          message: 'SSH target never returned to connected'
+        })
+        .toBe('connected')
+      await waitForActiveTerminalManager(orcaPage, 240_000)
+
+      // Why a generous ceiling: this is an OOM guard, not a memory budget. Unbounded retention of
+      // 48 MB of pty output would blow past it; ordinary V8 churn will not.
+      const afterRssKb = readRelayRssKb()
+      expect(
+        afterRssKb - baselineRssKb,
+        `relay grew ${afterRssKb - baselineRssKb}KB after 48MB of undeliverable output`
+      ).toBeLessThan(200_000)
+
+      // And the session must still be usable, not merely alive.
+      const markerSuffix = Date.now()
+      const marker = `FLOOD_AFTER_${markerSuffix}`
+      await execInTerminal(
+        orcaPage,
+        await waitForActivePanePtyId(orcaPage, 240_000),
+        `printf 'FLOOD_AFTER_%s\\n' ${markerSuffix}`
+      )
+      await waitForTerminalOutput(orcaPage, marker, 60_000, 20_000)
+    } finally {
+      if (target) {
+        clearDockerSshRelayFaults(target)
+        cleanupDockerSshRelayTarget(target)
+      }
+    }
+  })
+
+  /**
+   * The one fault in this file where `exited` is the correct verdict, and the only one that can
+   * tell "resumed" from "silently started over" (docs/reference/ssh-execution-boundary.md).
+   *
+   * Every other case here kills the transport and asserts the session survived. That assertion is
+   * only meaningful if a genuinely dead session is distinguishable — otherwise a client that always
+   * cold-starts would pass them all. SIGKILLing the relay leaves sshd reachable, so the client
+   * reconnects, asks the host about the PTY, and gets a positive answer that it is gone. That is
+   * host evidence of absence, so replacing the pane is correct here and nowhere else in this file.
+   */
+  test('replaces the pane only when the host proves the session is gone', async ({
+    orcaPage
+  }, testInfo) => {
+    test.slow()
+    let target: DockerSshRelayTarget | null = null
+    try {
+      target = startDockerSshRelayTarget(testInfo)
+      enableDockerSshRelayTargetShellTitle(target)
+      await waitForSessionReady(orcaPage)
+      await waitForActiveWorktree(orcaPage)
+      const remote = await connectDockerSshRelayTarget(orcaPage, target)
+      await ensureTerminalVisible(orcaPage, 45_000)
+      await waitForActiveTerminalManager(orcaPage, 60_000)
+      const ptyId = await waitForActivePanePtyId(orcaPage, 60_000)
+
+      const markerSuffix = Date.now()
+      const marker = `KILL_MARKER_${markerSuffix}`
+      await execInTerminal(orcaPage, ptyId, `printf 'KILL_MARKER_%s\\n' ${markerSuffix}`)
+      await waitForTerminalOutput(orcaPage, marker, 30_000)
+
+      const killed = killDockerSshRelayDaemon(target)
+      expect(killed, 'no relay process was found to kill').toBeGreaterThan(0)
+
+      await expect
+        .poll(() => readSshStatus(orcaPage, remote.targetId), {
+          timeout: 120_000,
+          message: 'SSH target never returned to connected after the relay was killed'
+        })
+        .toBe('connected')
+      await waitForActiveTerminalManager(orcaPage, 60_000)
+
+      // The verdict, expressed as the only thing a user can observe: the pane is now backed by a
+      // DIFFERENT pty. On the transport-drop cases above this id must not change; here it must.
+      await expect
+        .poll(() => waitForActivePanePtyId(orcaPage, 60_000).catch(() => ptyId), {
+          timeout: 120_000,
+          message: 'pane kept its old PTY binding after the host proved the session was gone'
+        })
+        .not.toBe(ptyId)
+
+      // And the replacement must be a working shell, not a dead husk.
+      const afterSuffix = Date.now()
+      const afterMarker = `KILL_AFTER_${afterSuffix}`
+      await execInTerminal(
+        orcaPage,
+        await waitForActivePanePtyId(orcaPage, 60_000),
+        `printf 'KILL_AFTER_%s\\n' ${afterSuffix}`
+      )
+      await waitForTerminalOutput(orcaPage, afterMarker, 60_000)
+    } finally {
+      if (target) {
+        clearDockerSshRelayFaults(target)
+        cleanupDockerSshRelayTarget(target)
+      }
+    }
+  })
+
+  /**
+   * The third fault shape: silence with the socket still established. `docker pause` freezes the
+   * container, so nothing is closed or reset — the client simply stops hearing from a host that is
+   * perfectly healthy. This is the one that pins "loss of contact is never evidence": the verdict
+   * during the silence must be `unverifiable`, so the pane must keep its PTY and come back with its
+   * scrollback rather than concluding the session died and starting over.
+   */
+  test('keeps the session while a frozen host goes silent', async ({ orcaPage }, testInfo) => {
+    test.slow()
+    let target: DockerSshRelayTarget | null = null
+    try {
+      target = startDockerSshRelayTarget(testInfo)
+      enableDockerSshRelayTargetShellTitle(target)
+      await waitForSessionReady(orcaPage)
+      await waitForActiveWorktree(orcaPage)
+      await connectDockerSshRelayTarget(orcaPage, target)
+      await ensureTerminalVisible(orcaPage, 45_000)
+      await waitForActiveTerminalManager(orcaPage, 60_000)
+      const ptyId = await waitForActivePanePtyId(orcaPage, 60_000)
+
+      const markerSuffix = Date.now()
+      const marker = `STALL_MARKER_${markerSuffix}`
+      await execInTerminal(orcaPage, ptyId, `printf 'STALL_MARKER_%s\\n' ${markerSuffix}`)
+      await waitForTerminalOutput(orcaPage, marker, 30_000)
+
+      // Long enough to outlast a liveness probe, which is the point: a timeout firing here would be
+      // the client asserting death it never observed.
+      await withStalledDockerSshRelayTarget(target, async () => {
+        await orcaPage.waitForTimeout(30_000)
+      })
+
+      await waitForActiveTerminalManager(orcaPage, 60_000)
+      // Same PTY, not a replacement: nothing here is host evidence of absence.
+      expect(await waitForActivePanePtyId(orcaPage, 60_000)).toBe(ptyId)
+      await waitForTerminalOutput(orcaPage, marker, 60_000)
+    } finally {
+      if (target) {
+        clearDockerSshRelayFaults(target)
+        cleanupDockerSshRelayTarget(target)
+      }
+    }
+  })
+
+  /**
+   * Known broken on main, kept as the reproduction. The verdict test above passes: after a 30s
+   * freeze the pane keeps its PTY and repaints its scrollback. What does not come back is the
+   * shell — a command run afterwards produces no output within 60s, so the pane is live-looking and
+   * deaf. Measured twice at `waitForTerminalOutput(STALL_AFTER_…)`, and it reproduces unchanged
+   * with the reattach-token/delivery-ownership fix applied, so that is not the cause.
+   *
+   * Split out rather than folded into the test above so the `unverifiable` verdict stays enforced
+   * in CI instead of being masked by this failure.
+   */
+  test.fixme('accepts input again after a frozen host resumes', async ({ orcaPage }, testInfo) => {
+    test.slow()
+    let target: DockerSshRelayTarget | null = null
+    try {
+      target = startDockerSshRelayTarget(testInfo)
+      enableDockerSshRelayTargetShellTitle(target)
+      await waitForSessionReady(orcaPage)
+      await waitForActiveWorktree(orcaPage)
+      await connectDockerSshRelayTarget(orcaPage, target)
+      await ensureTerminalVisible(orcaPage, 45_000)
+      await waitForActiveTerminalManager(orcaPage, 60_000)
+      const ptyId = await waitForActivePanePtyId(orcaPage, 60_000)
+
+      await withStalledDockerSshRelayTarget(target, async () => {
+        await orcaPage.waitForTimeout(30_000)
+      })
+      await waitForActiveTerminalManager(orcaPage, 60_000)
+
+      const afterSuffix = Date.now()
+      const afterMarker = `STALL_AFTER_${afterSuffix}`
+      await execInTerminal(orcaPage, ptyId, `printf 'STALL_AFTER_%s\\n' ${afterSuffix}`)
+      await waitForTerminalOutput(orcaPage, afterMarker, 60_000)
+    } finally {
+      if (target) {
+        clearDockerSshRelayFaults(target)
+        cleanupDockerSshRelayTarget(target)
+      }
+    }
+  })
+})

From bf88bcae1a6b3c1d11230300085f913747bc9ca3 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 2 Sep 2026 06:45:21 +0000
Subject: [PATCH 27/92] Update README downloads badge

---
 docs/assets/readme-downloads.svg | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/assets/readme-downloads.svg b/docs/assets/readme-downloads.svg
index 0bde5e2704a..0708d09d993 100644
--- a/docs/assets/readme-downloads.svg
+++ b/docs/assets/readme-downloads.svg
@@ -1,5 +1,5 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="106" height="20" role="img" aria-label="downloads: 35m">
-  <title>downloads: 35m</title>
+<svg xmlns="http://www.w3.org/2000/svg" width="106" height="20" role="img" aria-label="downloads: 36m">
+  <title>downloads: 36m</title>
   <linearGradient id="s" x2="0" y2="100%">
     <stop offset="0" stop-color="#bbb" stop-opacity=".1"/>
     <stop offset="1" stop-opacity=".1"/>
@@ -15,7 +15,7 @@
   <g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="11">
     <text x="37" y="15" fill="#010101" fill-opacity=".3">downloads</text>
     <text x="37" y="14">downloads</text>
-    <text x="90" y="15" fill="#010101" fill-opacity=".3">35m</text>
-    <text x="90" y="14">35m</text>
+    <text x="90" y="15" fill="#010101" fill-opacity=".3">36m</text>
+    <text x="90" y="14">36m</text>
   </g>
 </svg>

From 6dcab3060828e82bda628b0d2cbc663184785f9d Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 00:11:10 -0700
Subject: [PATCH 28/92] Update WeChat community to group 8 (#18095)

- Remove group 7 QR code asset
- Consolidate to group 8 only
- Update all localized documentation
---
 README.md                        |   3 +--
 docs/assets/star-history.png     | Bin 249409 -> 140054 bytes
 docs/assets/wechat-qr-group7.jpg | Bin 396762 -> 0 bytes
 docs/assets/wechat-qr-group8.jpg | Bin 398421 -> 403705 bytes
 docs/readme/README.fr.md         |   4 ++--
 docs/readme/README.ko.md         |   4 ++--
 docs/readme/README.zh-CN.md      |   3 +--
 7 files changed, 6 insertions(+), 8 deletions(-)
 delete mode 100644 docs/assets/wechat-qr-group7.jpg

diff --git a/README.md b/README.md
index dfb676bcef5..b486a9a4925 100644
--- a/README.md
+++ b/README.md
@@ -238,9 +238,8 @@ Pair with your desktop app to monitor and steer your agents from your phone.
 
 - **Discord:** Join the community on **[Discord](https://discord.gg/fzjDKHxv8Q)**.
 - **Twitter / X:** Follow **[@orca_build](https://x.com/orca_build)** for updates and announcements.
-- **WeChat:** Scan to join the Orca community WeChat group 7. If it is full, use group 8.
+- **WeChat:** Scan to join the Orca community WeChat group 8.
 
-  <img src="docs/assets/wechat-qr-group7.jpg" alt="WeChat group 7 QR code for the Orca community" width="160" />&nbsp;&nbsp;
   <img src="docs/assets/wechat-qr-group8.jpg" alt="WeChat group 8 QR code for the Orca community" width="160" />
 
 - **Feedback &amp; Ideas:** We ship fast. Missing something? [Request a new feature](https://github.com/stablyai/orca/issues).
diff --git a/docs/assets/star-history.png b/docs/assets/star-history.png
index f2695951e92206a7f912970d298e3e292bc43ec5..f069eb9059ca83019b1339ecc29f4735793c5e55 100644
GIT binary patch
literal 140054
zcmaG|cU+T66FwrASP@Qv14K^|=@FFP>|$tw^y&dY=|wsLqS(%YM+ro#1&}U;9temE
zLPAk`jg-)fh7#%DzI43v`-dNd&HL`o&dxmZ%*;MiSG}}n=N~(N`|Y<qN|(=T{Px@S
z6Tkho)qBS_@QG>Hr#HX-#`K%g`7_tt8HU^8ZMK^46u!A!xplgoBP5;av*OEJrxOdV
zTzR#PeMs&6AHfBMA#XZf(zF9ly?Az!Ib>TZ-xVd)o*RlhFO=|$^R{l>eNyxY%iQW)
zRX#-Yu;p0cREu@mWc#J)#l`uo1|n%>;hf)Z3^2wWOotVhe>r7T{A2wuro#vX%#9C>
zDn13jf!#cm=?2knKlADrm9Hr(N?koU2?vido!UC_({tAbE1GR(41R*n+IDeeL|Cq$
z%*Ho@iC}tnu^quQA7oOmn&SB8y<vX6xBX78y>eyJNX9=n)rHw#aBW%$)8QIZhI2<(
zmIY0!iIFk*{Z#2hXz}44{abz>?9FiW*veq#AU{8+=ccETOEbh?D3;qGAn2uv<69p;
z1Hy1N0&8ycWhhl!T?+^7qS8+*KV?$9<NkRt@R-OI2}nAt|3`$uJTI*NvHa=r<A-A+
z!WvEM8g^}1G$fsvY1qZfYlCB6z+e^kh`R6pR5Wd7Z2RdcJD^uCzX{WP00=R)D4qp+
zFDCC#(}-WJrJI>a{plkmp7r<M;g2!-_u%KJ&oWrxJK{fYSc#%v@iq93`<v7w?gCh{
zQ1Tx}+6?sl>x*7mXC*7*?CN_kc|u^#tz(paI8&Gm?BbQRMK1rcww7Y`9Xn3k?>aqj
zY<cStxiHUF9a??<^5C#53=Gt3R#uPJCxl60sbT(k%P(X0GgutGbVL28RTl4H;NAF9
zm<o8F&7jwmAu~dIb>1rv+q5r;y<ni^vuj5nS)VyrBk`-jDnQuc1GazcT6u~o|JKa^
z+(hzipo#};<N`M=B~Qq7V&n9HY76fohxj=O7nzyyE-TXNfpWf3EV)7F*kE9SOa;e`
zjv<<0o|k?lYVa~mUa%|DNTH>z!z3K2`QvBlEgzU-&fkH8y$iMbv@#`3p0MfM=IJe+
z7Y7G$?(fXnO*~#-3Ipu@@tC5`gH4se6vNKnF+Q`nx`@>$LsnsJ7MNb34&md%PyBzw
zBpj?cwDynXUuxFRGs+NXVt3D>_2aX7-Ooi#{lP2x!HS1@Uq!4<ulO6h|Kz_Oi+REQ
z!q2JS<ORd#12D169kyw(atPSE#A8`vlQ8{N%d+~Fl~*pSt+OhaU!QRv1305Gzi-<t
zjx}4uxMO!Bc%VAvvCqnJdVeCO`acI_ly>eo!3*zq-JpJ`v&CXR%QJ4r#J&^ZqG!8T
zkI(A#W_IPC-5?_jJ7kFwxn=tw_&r$@&+;#ue82=4H|2VD=?K5)i)sAN*#RNlgLb4x
zM4i5>nqo)4^8MG~Vlvod%hG1ejZ?2NP~_VrX{InUn6qe1gxOe=!|D^4pH>|4JL1L$
zDQwdOFAf{KkhWuYlAq6#P2BLL4Q8qMHE<R|UCv@l{|@70sD{q;hOvw*TNuUxEOFlV
zs3&VDG$z{5X~Qd_nL|cGQXLG$cydW^^teEY+29+W3e=DXs9~&VfrY2)<`-_T>d-fK
zX8~<^V-j7(av0$Zi#q?y!5AD9*ggLY%az@o-)i`awe*95uBMXf%35=b!R+5-5s#1l
zuD-Y1pw@EJGJ%z>KE6>%7$vZIyqLZQ-0$B6Hx2#Cogr9(u$?=FIF5paU1V|irH)}3
zfZg0%L#jEj{J0oB*u{<Fgygc~0&;<Lx=^DVG~3j5t8C<^E!@Gx_7}!+TktvAvqnGJ
zO~z8bm`xTh&ID-Ad})-T=`9AG%}TZmS5|jX(LhnLInH585GpK)L%&-1dth!jiEeRa
zD|!#$&L*U@syCNSTYz+GFD6~z_#}X~&>Q~-Xvdp@!D5_}zK+ONPxFSe!^Q@TYjMF&
zt|K+F3`hUmxLaWU8>|xMA!I`M<K&l?6^3Sz+aSp$Ra+T+BiYX{BR#F5c<n96g}?6I
zJhf&0Zw30_?6W0m6)Qmx#N-_|eZ2YLn?3|P2S3l^R{Cp|h9<Q;9E@w~2wPx2jMxF2
z`DrN|4h!ZcP#RU1WYqGmVJ!AL>|0vZ`ihpFg=y-p9Vhx`M2df`?QicrzpFpP%}Q3b
z!2LT<-0!(CaD3BqcE|Y{Z$di7AHdGBjB9uy7$<K3q<Nd{<|%-kn`>CDb%7{!#Tnc-
zJq3Jm%`hPdkPs*7x0VHLn!1CHchek}^Z)=^Q$sM&@npgV85YOv>}UOHFv1W<VpiYV
zxMT8XY_EHefxc0JO!XlxEJ?fyBk_Ng|BwA$^{!#iKIhFZJc$AmcfM47c}<wh8nT4#
zp=s>C3pVhCagge&fVb%=R<CK%hQXKw05Mc!<FYsY6X62W|4DzJfMHMFQ&cw&gLG^Y
zY+!)l`2ey}L02C~gfc!3`9IrIdIX%%?ScGD`f2)X>%=eYQj8K<@$o{HbyEodsO^93
zVTm4OiDCJdR#yzo)YNVlo7|>tAzOe$YUnXr`d^X6x-@rVfc$nC2MU7&@PEM^z`j6!
zk+Iknnf?;YneGLLzV9ni!hCgqe*xyUx%tB?-k~La!r%V_bBH)FMdd#aY%@~)zhF+$
z87Nn!N9aX>I{rVH6B7oT=jgO=-ADa&@R!Zf1X%G@(A5nd^uNFy;u|bz?}_a`{?e<;
zyJ`}Y^%b{lG)rOpU`wtkS=}$L+jZlg|D!X#5n#ntg-%-_Pl(ZA+jxW^v$=Yb*{*>H
z#t_-(S9N&zD?j;7ctp;)M|+hESp8xUbP$+pMm9|i&QQHN?UlEw><6p&4NCph%U6b@
zbb(8I|Mk!%KSf5HjgJKXUyX2~j{)9NY;L`<jJeoU845Rfd7!#0u7J%6tm#>iV*8pe
z4P$3e`!{|t^%pw|c9Gq3^Zzg%uq*4@4V{dqaG;J&yNb+mfsx<5&#Q7={`d|!(wt=a
zOC4ZU{x7aG)c{9T>3be-c?*Ay>&Sb+TH4&JH$?OQjqA36aG0uCxHodsI{%I9CV&%~
z(zq&K0Q>*A?w&r_l)5yvJ|K$!i|dM&A!vNIc@5S764%`V17#4L8$|eDxNh53Q>!f%
zXE<NT|7^K51!7LG8U)BtDW3&Xgv;hIhbb{suj=oru5H8+d56I^@3L=ZgSOT56hq^$
zEc5PX;MDjT-&@nz=RBsT{!1f^KY$>TMZ$UeMuUmcDX!h5IDW-Uz>}9v)2^-4KZxBh
z-}xaEl2A^Y#sV$0=yCrjWnn7EX(%NJtFSm-eY7GHT0-$<2FndERxSb)n|UIK`3>`V
zt0B*_4j$)oc(;``c)Us`ZLa^40>4C?!@23kq6Mu{r_g^E)#f7>`xF-We1E*>uHXqZ
z)bIhnVB6?r3JZ>bYHl(sGY1Zue^t;eu%nA<2S@(ezWnCmZ@U0YgQ*<+F<tFzJk{<-
zp?%<$PfsqORakVE+@)R(@Vw^n?GCqLWOcYi+H)n3`N_u6aJ&43wh=owfn5g$Pweyl
zx`lL)!%kPc{Z_4&fzLFRL?_Y<`7>=YLep2@x`XLPs^350FVi2u`o5=EO@yr)Hq-2_
zsOf1PL&povH{&BKw#$FRSoQY2xPM5$N?~!1_E63H<!}Z`nEFqEw|QP;;i%Tuz@#*y
z=K<Z+w<S9*+Fcrjsy(WlE8cDAHasY#f6Zr_WTJi4W7v$_K)lKHj#Dqr5^FNo#j1r<
z*dS|2N2+%H7A6i(Ugl@3waNGuPwbGLc(G52d-~I*iaUoUVrXN&iv&)u;dCl{wfn_p
z+nn}_lVzNm!o(k4vBc9rXbX7r25LEPwBZ!RcQJ#CHNbMYwWSw~*xDzRR1i8QQ>o=@
zK2GHlg4J^Lwt<0MZTRDJiYqb2N*o37nP0~An0xa6{53Cv@P~2OW?q#Ve)~Q#isD2P
zvUo`eRDSDGCDj+aI9s%sbi2Yo1dfmZYor0i$e)R#QWh8JiD+L)@niPGww+mv(o9W(
z(6@~9-vabSFPv@vl3IkxW3-dBD%~T7Sr#VKd_znYXBw$Lx&uVi(1V&JCEmzuK*b2x
zDEK)re+_h*Q%1Fe!iqx0G{Y{g5IP&FSm1@4S!=ey82K>=bPUs5)as+XgG9ynDAQGL
zSZH<@@ApU~WA9e(u1xSOjmdPL9mxqLGgbPi&%EZYJ^IYz(RgZnyi3ZO^-xaoD}^)t
z8}{Eb`q~?Af5>HrnGyG7uRQA_IAp<h_Da7g=-gv}0xl>4RM832RNuL7ZuDpvuB+9K
zkg^k54K&ILI!_#Sxz{z&`ExW9Ni6F7W2flZws`MB&1imjItq0xN;C*oG}}H_VeB=c
zHR?krgt8X)U!eXikb2_m0M2_$)CT$tAYHO+5o0iZew%Fcs!sbU?!zq3Qx=63<_FZg
z4D;~)V$sv&NM23vTWyYIAzSuJ#<bn4RiR$r=cSuB@dX+G18yckk6xUMH}o3GqV~TE
z5Z=WqEI5=(uxs`nuOy+uZMC%xY_l?YpIc+!?^7sHKJ{jPJbKZPI7bx;z3}K@2=pTA
z{FraiSF7R1lebPYpI;c%DdJ}}cE4Uv7xC`gMFqp>Z0>#5QkdK9Jv11DeYWm7h&Z)k
zc8eW$dIRGnvN*1=sM#?QClLbKE}k<+eU}%2x?`QIq~a56_2fg!ro}C8zuO0F52Sf+
z9>DY%R{<SQ@IFt;W)`$)K$Vm|5pQ`joIjLG?Rq3)oalop8!4oB)K89~$GmvZ#)%pM
zxBXM6i6}JRk%p9<4t-i%zK!sx81i%+?t)Cz_jsRSr)u|+vf9yW^-9q`3**tD)~R`M
z?dCI9d5z-tx4`x=BYt1?7MSY*hwW|Us5Jqf?7r<Mzhq)FcY4zaloaft%H2h*#BX=0
zO=bZpD8#}{W0A1JT<1R0_4{1fuFV#qj+KmrA)_&U{geh#I{n$Xy?nfpw>0!1b9O}_
z<r?#4A!oDh+>=K-t9_>M8P)Q$*9=gSPhDDdh_nzIP`?86=|=yASM_R5;SQqoy2;+k
za2;@f@@5xLU#SVBH0fKXXdU|IxBZ&fHI^T}Ms*k4XN%@X?0N7u+&_x9YtsvQPp2hd
z+ecC*!uuetMJ{j+&g}sn#3^WoeqFq*yLricnQAl21}~|Za!_&G{Ni0TmNzTGCIc*J
zzk>*-R!yOBm@r1HcN-sd4Dh-p#$z%+s1wTN+VrBJhew1@W;ECAw6mz#d(WFx123FQ
zn7BMWuUZR<L)|2~5yvB`;7f)Fyr=ThO!SDAVc+;jm3D96ZL4?Vo2`%hoAy`$f2n99
zRz&4Zp0}pxJ6mG7RLhfTEDBapRb#a<H*N9pfKCMdofazixPR4fNz+H#FuqzCe#E)M
znndmhQj^a^4;<y5zC67^FEXjjwq>oNy#pq8mcMCixU>)`M&PpyJb9f8#WXX0Q~r1I
z1IiWYd5ThW3aZhgnhm;UPh5*cS%x9Um-S%~Sf9^gl2%#z7C|cF38?+3<DFg|<59Gi
ztc7oE2qW3lts?Gcntd1NmsT9;noaSUg;%l_jOGtjoY~HG?XKGN!JZHu<L1%UYln_S
zC@ZkM5k?YNjc#34`qW_AYf^8H6)6PgHmQ3?4YjArgi|A1KPCT$>Ilo(#a@Xb_LIE@
z<8y~D{Vpu^aBPo6o4PPzID?1BZTQQ@zTFLV$jj~>9(^J9KI7rkl3gN#5)|+8$AYop
zxQwD7A4RVCu((Z(J}pX0&9^$u@#CqO?<Txqn#~w@GA1JBh==eRF2QvE{%Ln6*-!aL
z5YJ_nxF@Fr1y%CFTC_>FsOiQ_^0a?=kXYAhW|BtQ&Dk^iJk_=6mlS5MW(8Zi75Y?@
zBt*oLghw97o6NTi=tMmmCYdZa4FDB+H<S<`r7v15LZK-4hwxn9CpS@(Q6)W;8SdRu
z8>M|{?(6mdX%-r=0Otnw>NXlWR|eu-M(*`Cox!?~L|lE|3Artv2C2~wX4zgNL-b_*
zQDG`qul`QwMaYE~Mw8pnGqusi5OBzNw~gZ(a+~FG>p_)9EHU1<y<6WltDYPaaq!lY
zHGcrP?Y{u3e&~^)V!BRr+<0BQQy^LWE-&t;>u6rzQ|re=X+=KMb@B3ALW|O=9N23W
zqHpzJ;_t4WE#vu!cAH+XK)thQu4a7MOiwA;&B}b7CuW#<8rd4<Py)9AC{36SG*KYh
zdzYA)iU~cxQ43EKMUEO!X0$!JIVigI19q?E)!ebbI+R)%VbR1_VLZmpvW?kc=5glq
zS+epc^4VePKQ#Y;+8e)UXOsQW?>RcuT>)14!o`HTHw2mDK(`i=*UGc-0Wp>znYF3{
z9yvNjE?Si0Oaix*TK{v4ht7ufaJ-J5MF_m|Q0iC~h;xdQ;qHi454@g~176pH#Q|bl
zP{_j!M%ZZbc+pIK8WuvDQk*U%<?`;QGO4nia5XlU2GgR84ZsvR{ph?OdP%lx|9oO5
ziA6Wkr9qDe&pO^Fc)FD+S$>DnoH9S^mPEZN6YdGljgF8Ip~G`%lFJ19zB2hUFiIK8
zAiMkOo*MhP+YL66)#W+zED;tYr+gf`(E}Y9Fg^!1fVkw#o?E9ToNeL;y23+2E4xe7
z&p-4{D^904GoS5^8XZc}PI^5Ttf|TuJ=eoa5DAbhnrtvY(sgM*G=k@NIK@!3)^WU2
zLZsTgRICEHKrPX6n$ei2j#9Dg%NO#z@QW<LuEwfwBM*yb<CMag#LNbg#Wc%2>`*uq
zdrLvLH|y!ey~iFzej<b=EO_o+65frMekUPZT09IG2+Kyw8lH#pS7l6>FQ?B8CWS%(
z9&#33uUr#u=lVYi@T_|^bI;98JR|ok)_Wd6F8xxmN1_Z@U?J2{6XG#teec=exgZ1|
zgQ1(5%t)qYIW4K3$|6-QScnwPd#$g1>P0gERhe}o_UIu4<k=eUN1_<ZQhIQ_Y^?dg
zA@@?8G+d75t1*E4Jnw2X_OZV@d|eNlGGDx1UOj5!HE+n=!3JZ_TvUSz_9B{Wc1Tkj
zs73~e3qm2AItQG+KL1ya?)`EiyeE)v!iwMG&tmu5W$8y=80l^cTFBmo<@_K-=lN!&
zQRhs5c3<|j{^)73dqX>c6Zg5l&#USE5`tz8XhLNlHeKZcxZS^Es6!@;p5-!Jj@Qe}
zpGb7*0v9oM4avrhp7_jzJS38LZG>h=Gj0SHIPk3~9#u<O0zPoTq${uHl-}a{iWcX`
zL;(D<J$=tVZW>LMKvbmE$L3O7qx4GM#|r7fP!KWA4e#NyJU-FQz4#;Wuq%Lxf{@A}
z7b3%+QiGGKeylU^rZbG0%KxSuO+B|V8y^$Y%e--wy?S>duy3EKA4Pn=2j8-S;ut9q
zB!t<<2EaQtPF}w@rI~Kg(3RC_Eb}tKQen24r_)+l)Oz%>Sk(!D(=02F+~?GArJ(6k
zImZoBw43dV=C5FFRTiZ=%6AtEvdpyg$>*4h_a5>ZzA6t6nVa^2R|MSw*!0Og@14xf
zCU}#^>(hK(4!oA1E>}w>4&f9}B7=_Gs1~MYliOs!`fa(=aSofJ5<S}<^i6t<pY-Lp
z?vvJ$97;#pOc?bfQW5to7w^<zUsNNV>R}l<=^Rmfl5Sh@y_5&JBR;tULMwq(e`g{9
zA;JC*DcS<@)VOdv{xOeguPbK>iKf8{aOUm~BOV6J+m+<kl^MnMUahTH&UTM_7FMya
zp_H198#S=L+-kDlKhR7TCrzlhYHw6IEel7Dhz+CAusPSvD#u05#KiOBy-4<*6SZn-
zs5<~Vi3mbbQGQZpwOIH}RvOw?=>!*EQ%x?*yw{R&8^Hecko%OPqGFz)$mb2k3~{=L
z#pqwmOCAhgYGsBMb{$AN;RZnVr6lne*6>fI&!@55s%6K?!&hd)O_QW?J<*x9azhA=
z9x)~F<3WR9LG&!J=UL_#so?;W(!K}y799JKz&+bRC*~acO{OoxIg$O1i${w}Q=?uE
zQ9KG=@>VdXCCLu;-GZ-{{92~#!O@G?%Ey^YEViMFiW7-P@CzMKSn~LVFvpm@*dp_w
zkq0$|=S;Wz*idrlY*(EgwtFs{d2e5?7gDjw8fD@Wn#YSAJ$_jwEb<wmv+e37F0HN*
zQ)dv>2?7sMn22I2ptin(M<w09x?q0qI@U{tlAlDCf~ONmWzJC)V;}qU{?zDil4HD-
z$^sC05JYmS$AxJIpTfFpiEn=#?i(=hdG#tQJ$F!Ju}5Me*-|d)xmIM%t%RLB<4lTK
z)@92Sb`XkM-&zF&!+*emd&#JUJ%Ygz89nA8X(TlJIa_cKjz@`Q+Y@d3KN~ZGt+3BI
zhoVTrgycj~--S6ogWl7aS^&W*iR}QtAP(KCIYR{~E%njGcHU3r<V>;+(mkvK$KVe3
zN8~;!Glejk&-227UI`Z}n#xKGfdbqy!9s7%Z)V)HO>Zd5$_ipt@At|i&+hM*SBv3_
z7vz#24bSJF+Id23)Tbzo@o6FPpXc-@tE`IlQP&)+dp#`CKR#F`v=rQzb;_e+lWvz+
zxrz-T&fH3Mvxj>?u}tVZol^81oi|3D)uzM^r-qLE50Pe4xfj0O*Fh4q_1(z*%3jU1
z!g|5ZnNhbQnRqihIQI}!HaIsbrT;Kx;l2MX13=H9oKPi-$MHRn5f}TL5ZXIpBR0lI
zYC$!BB{wNMbO`v56qG?&6Qxm%UzRW^5pf93lk<MHOe{KIELMawu{mI7L5x!`m@B9y
zt*z4tJShJU_N0#Usl0|QAV4cC;5mXs6<TaF9AzKB=XgyQs1nINN={o7H-be7P%4!B
z!=DL>iR1vBnQmt^=!sQp2QeM?dF*pnmU|1;i*st_$%I(D;S-VzKe~}6DP-wN(YVM?
z^`~jMU4LJ-RPFV8tXCzD%y&ISsJo7Oy3oa1^u|X4X~g;Ju$ZhDT1`}pizNe<tOuI}
z+iK!L6)@2gl@aZ{mBt=DEtje9cF!B`#8PE3bb3~VLH}&wsJeVn3X7`b3-jhi@)hs4
z?n63H{=~D58<c-39ngVw43=~$OsDn$AV~XoiDj0T^adqW?>&YeuL?6q_1%}Bcv01L
zGGH8CL4HYY(vT8U5yO&CRC=Tdk@oTWk!MF;3WZ4$S6KW;izMI9H{=ktXsXQ84UGi4
z-jw(|bL^fD>$JivSV`5xZAR5nOZt1bMv`F*;P*h`O`F9D&xD|LW3o-#l*UEcjfW6C
z&k<GFlXQJUix90Vx1XmEs`Pl4043@<(w)z9#uR`$j>bJ^*Pct*8#kK=sg%AsO(enV
znYZyUk-7GH*4(N1=h7iPA$Y5GoN<Nd9R%ijA6D<-KKJ4+Up_n-0o7_k_YZmAP<q?o
zapZ;m*|<@?H;}#|u?dxra~=ujzv24xxS`Bg!T1$au1j`MxBp+$$Gc)fjrAwzUk9o3
zC-_#LZVdL`b&|rPT<A#}u7x-d`N$f1v#PPw**L*hgl1HD2rmF)JYt%ZAEgpl@{YnE
zU5^M!+0`;zDj4&iIGc2id!{Dv8v@VA!pX~&Vt@HTXfZ)PjSk_TD+`g5GySiSuwMV*
z_()fMbRLN7P2S9ed`sE;aC{d1ZkMrorS5#^K3`p@HsbZ~XUNRG76p;5bl`#q*>UZ8
zx%!i8sg`lyI`4BEN4hPP6TCk^GOp9htaBuu)~mKrmYfAd5IR8`UNpWibof-Z2L*m$
zJlwrZrX#&h4#)GHVuC(`WC9p{#vs&XwDx}044hX?Ak$>N%8P45KA{Gw*nACOt9T7f
zgY|7Ze&iXuWp|$3^((N5?{!@Ek$`>D*1dk$QA_RZsnox_lY_s@LhcgfKS`kSh<GSX
z12?N9I)nfx%W(ljReXimOO>K&2|D+$!+r7owy>ztDVEVEjiT3USV7<vI3?4n^ftWN
z6(<M$c2VKD#_SI$x&lBT;L7|{mh%<|O$jAkcgQd0rh9^taCYz)1}QR@M^Vjn<OuYr
zbF=|Xt}Lg3D)eaV1kV|rsPMyY>+|tGE{>eO%*PszP$U!SDS<?{1s`Tl6w0#QwKN(R
z$d|^Uq>k-t?3<Kl=y7ee)iIt-)Ct+eN~ou{&ysg5JLoMQ8b8FsZ#k42PBkgx=<4-7
z_Ke4y@V<%sp;99SUd$rhTj-|1+lQmN*K6s7ObDErdU@fIMq7udfcT5)lDoSuk!x(T
z^m*`_+yHWhN)!&LP-Q67sxrCN%5CJsm5Y)w?KNF@*n~SK=XhVZmTH)gi!4tjR*!6q
z84=+yH(cd?uc@!_{$=iO3H`#4`TtQ}%R)OA!=cvxy+KJmxW-0yQs&N^?{(a2kzSP9
z4hsmL!JRX%S)$qiR{+lw)f6PfqIz4laoDJ%MG)xAOj!^D-Lg;C;lokpE<<4Uv=pzI
zT-L?;rOQ{#ztD%h(6$~n6*;4hvW(--%W)<-y&bSeT|JIa&aLw(l&`YMCO42hX1-WY
znU>V0pM9;RW0X|@Xb};1OYFXO5I$aFG`i_qU~o25`aI{DT;X6W#e+AcfeQ;S744|X
z$DP6Hp<VP~c*gsa(;35J0&n-Chi1(pc&vuThgr^BVlAGQwRAlvx;Bu=O@Nxh>+4G`
zMxid+VD&1K8yG)Cx`=6ty)$3nQZa~Zbc(>mnca=`xQGfs<uzsg!=5~y(kp3ej^udt
zgl|#R64`D8h!XUbB$u+;^1My?*|jt;sE&iP2`pK(et~DtPIQ{0e(;>{H*hS!%c!6y
z?NmMxJj@(tezQFN52Qn&I^PTR89D9whlXm!A-G^D1VY}%%}=$a$u4{k5COorpCkFh
zaC!jRMoF@1IvEP8^bckUBa6e--vasKe`k4|t#5W;9QOnpdyZgPZ*h<U5sg#BwT#!N
z;{XP!6qC+jyaK0cV5gY7sJR^(ZI+fX*FxznydTJ3mk~`vGwvkXp&_b6nU`9cC%m1u
zFlfz=bR)1k_t_sWiWM9Q$N5j9S=xEuA`drvm_*fb<(FDzBGQNoXIzO}TDjCw7yBUY
zf6(Fy-uLSkZrzL}oO<1@{o+&+;3ko~^L?H3unSarSa*8%9I=*OFg7Ri{4J3fFK(aZ
zx#%N?RUMm~ja(dM8?#ULdAgLGR@N=vvurntB>{2Wt*CK#nOJ2rXFwlC%)#K?b^r}q
z9o9?4OS4hcO3ES2`Km7LN36fB-aY4J8J17S`jvhQj<HCdsYMsoTZQ=N!yTogT|h=A
zGgMQ><M#8aW-mTu4E9-k{UF!3*Q$jUdd=jpq-uP1&H;Rn6)Kxr(7~+C6O&jyG!HR%
z%oSAGBUiII8x53M`0M+`(yMLS(tVJ66{kqy#OX@=RN_OAPe<+x9@xQqnKbsYKL5RF
zQM}!l|EGjnsnod+%2akv2w8nta7<S92OWZ}J5$6SrH{9$`OegSnT}xe{XQ0T2Deb(
z>CiXdUN)^_8E4aRp)ZTEudw7RW61O&o08G0nE_27XSkmX$vJ`^<<sl_r@;(1y`J7f
z4^NRFYm1+k<wf@kR_CY?NYZICt7+5S*?t}S4}%;WgGEqBTsp*wF3ECttYT6<KR7>C
z3Ij@N6?Sz(o#i=zklfGE_D14y_g^JB-nEYB>kskbzGJ%>{o1c<R)o4BZv;|BMe=$A
zt$Lf?Ta}oC5XoL~`nO+c4?TS=Xv>qV#1`7^iA1znwd=(Tk9G91>t&A@j8}0u-fXqa
z5rUZFR{Y@LBlthkmie)B5c#cVUpRRs3OAmKL(>}sY6erqLi(nKEV6G}hQoJ30ZL%A
z>q!#*_W;0J(o)?Dlgv^5wNX=<5E1U$p&@j#b=vEJ8!W2|aI~2kT4{K}7uT`KN(nA8
zXYuP6*tGet+ZA+aWDo^8723PM=cs^~bavN{Xj6rbNDJJ}uoS#t(fz7%pEC9_;I2=0
zIbrojyxoop3(MaGX180{yJ>;<%&n;AA-O&-wNnpNWu_zDo(jCMF7gxQQfjx6O3f)4
z8l`KP;MeldfTG&Fi(FE(H5l(V`p>%m%ilWaH!`5+>q(D|tzywWMjkN!^H##&-GY~O
z1MS;*uKh8Dl~z=FThCST*u}nR2(G+D%i{aRTW-8^DrVSzjiNKGQ-qgAt6dI>m6sv0
zFl7N;7jP2UUM1~ecl&cyhH+U!(A(76@P7h4$Yxit4@L@jt3Q2-!zDE6MLDKqw^)tD
zS`Ecy;8ma2#!s9st1YBTP4BVDHtEBQ9zBI=gR)(s_8kRP$a+UucGxvu<U-Nb?To8j
zz%5~u@RxH~&-#JWqri2ebtXW(X{;oPqZdJeD7l54BZvQB-(r)ckM!u1I$1sGNy;7U
z_T+9H^_<MALi;pAtd#Vl3Xl#k_)GMqL%C85nNX!%#dD!vSj=;rV|a4x@(go$Vi)5=
zPgGU$$&nm=w}n!f@V}8IpBRTCsRP!Q9FdKj8-RwQ>2Z*v6-yY=!}EPz=EngUhB^32
z`3?D5g<v|Po|%jIi!Vr%nJ-@ogQ>c77n5o+3Y5|i<Y+~w%*rBf^?G68e#{xSOiUWa
zA5%f7Yfp)y%Ccz81B87ebW-MWlhZ(KsIZF^>9%WCKN8WvmCf@_sVTdz(r7FEMZV?v
z(!VC_b?mDjB-@wU5TV@2t@}9mtY~*iYG|{|fF{~_Y+Sy}AX<$sFSbpLBYRv5ZZz&S
zESMBv{YdbReyBxstP|mV?&!FC-$Gql4&!S;fRrJzN|kh(0IA+EqSy_V)JWHso0BQ^
z^6#!k8AS?C2hlr>4mOTjiX_PY73$eOCXK(qQvCEyZqG3c%7@S_!k6f}&*$5nq_My$
z&$8(!#}t$KRllmaEsnR2&<)BT50m9b?BtOL`Xb#zWq4~44DZ+SLF*OU0EnCJ>R)Pd
zP`+CXx%<2N@Kd7BHnO&WwWbJe=k|7>C|V|qGY5Kqe`F$f3D7~hT1i7{?j<aVv2rY3
zx9-{2e^i=N3agvnQxxDc@rqh=Zl4g2OG>|1?_jn}=9PKDgy%8*WzC|kg7_9ELwmh1
z;+;3#zG<3_wdLp^wM^t09^U))iz>0(V>rFcwWDQR5{>-Sj6R96E~-f&jG9-EN6c+w
z4s*#4@rm_~w3u`(4P$>f=~1XQ@1Hv9VM8-Wt;VY%u(N<h1q4rZMVb6m`b;LLYtwZe
zWJR3)NXf_T@U8%bg&(xLBHq`(H%Bg-KWz8BXK@7(K9gv2RYq{1+o>pZxuOxffVl=j
zS)e#euCRXQ8}FW@+~qgDNaU8e*$9fEU@I$@vxke<(9lVG)F|HGu7WT$rR;H*A{f9y
zig2^@aP#o7#F;H|BM2Xc(@VIlxDFJX#8+t`SF8h6^4=1`{AqWF=kZqYRvXQ`f@TcI
zB0lBJ?3M11v3RaD4H9p}o>m{6*69X3vm{Rp*^QB<>)3A~s{d}R_FE<(NCZ#!?nC#V
zqdqwL^aO5CLsE)6&s*umx$#SeRib(D2h!(aCl)avSO36M@1VFCL)p$p%#8KOZw-5T
zI)dxZ=y!aCHi<?7<Q<hp5=l$SqU(vDdUw_68M_CLsu$fj>u=@~?$Uf~1b}8@q&rBM
zS^~(I$m76ywaJk=;A!pP+j^_4&@`1ZXZy%@WXD1a?Dcq;Qrx&?gA4PwUUaX7b|{r7
zcykUQ`8;8(F|lsRd0SRN`A^Px!J)4AQwlhXaEDZ*n!Xqr#^j{fv`NRQ$=ND5soJ98
z`c|xgogU2qX@EPRAKEzkSfUe!mXAUM2R2=4ZsRh~_@sU0^)M8JrFpdv4O$(Yf<G){
zse77RzE<yC43*4dq)vb$kvk&o&(`4aHqFCFF2nAVcOpMESY?$C-#D8_e(4QG1ENO}
zeXrVs9scZWf#To{K%#5YA8Qv8ry%xJc1W+9A3h`cK1I3Hm$^rFDm_35WV0z6DX4@-
z<0BTgv5Y6jK;(qYw}gCOJE`Y*GQ@`?Q90Cmo+QD#-1<IT0zD+nJJuVd6izf6d)Wf_
ziF1HQ3`$QfKzS@B1!jKK!9G=)k!w&|b%yp}9;BqC{t~|dD==oTfW^)2z1SwJ!t0?5
zD<S_m;(Z=uU0BsYA__z)4P!15((NFkSNY)Y>@pAR^(e5`*il@{G*<*ja_}I7i4ZRf
zZ8`}MyfZV|Qwvbg<<Z3wtvi3b_3op6Ulu{?%HjKGa5C5%b_wUk^w6WfFg^}7a@AW3
z%`~FuQM5TCp)AU+k^Ss(S-Ekt7zyG;+rwuEZC^bR=bxUpFq}5xtr_#F_9&aC7Z5EA
zX2Vduc18-AA*eQnc1RO@^4O<#kb`w<aU(U&8sEaKrO?4IV#g4g4Ak9w%FNc;uia^i
zx5K<GMeuwk6E9h{C{&K>8_envj-~88_-*uN%jiJdKT>LM1MQEX*ee+=d86F_Dz_o|
zV=i&ITsuH~5<g$(0rJQuhrU0!6zm<H=H;rNs^*G(6KqOt2AN$Am3fGafyz9toP8lU
z@Z6M-R0J|<smS{Iw8fb;T4ualisggs3jU;E6;NgHK@Rwq&?UZDboM)eGH+LoXP&Yv
zoNUmNftNF%vdt(z&O@OL7fh$vqpg*S#PA~!*;<VYa+xRZo&#BE<G~n#Bf2F?GoFQN
zKTc~hXha1yC%8lp%9~&O3)VhU;LQE#aUNc<4DM8G{1ne~d1!Ah%|Q7LmSR0<PLlBe
znd0d8Q`m)`_9d<v^#g^qp6v>}!-z@qnM?}Z`O;a6Qmw3rbL=VT=m6AiFqAFmp$Ad_
z8Xwa=TSYFB{Z_mMIfHF3fbxxKWL7nE=Cm8Hm>J7?-X>pA5us00P1?!jYdqW1h`l5?
zc$G&Lq->rai13Y;NxZh$!NWEx$WiUsHZD|~Z--5(bkk>1J}&56X>F`I)!{WZ<3vHv
zG|;>13~P2S^E}J=vlJ8;K2>@R!<=EQQCKF9L1ilxF(h@$cC%N%K?!Q}cFzTY^Kgh|
zbQplh`rYOJe9fW+d!T=OW1uDjiQ4uQU!JHB3-vz(7Z(Po^ow<KMPk>n#pJx+=R6EU
z(nHDkYe+bAPSanH0<Ga!SoXT==$kz`ov0T!533Wjcy3`u7$ZqAvM3%uG5hVlLL1Q=
zxbjda?@*si$c$7^L_4zYg{pc2aTuHnP7l|9M)x_8<y#Seop??RPbM>Z;gp(&rh!Dv
zQRW@z`X)#9Fu0K%(D>-4%?JNO%pg7LW7s1PUii-L=<)A130^(_T++rk`UJJpU)zBC
z6p{8ZfiY*mQzqS>nv?mbIGrd#2_!4G%w@CaHc%%QfO)VeC-=^I;VkYB(W=nc7<83$
zlqU1DxPp2sEe2ONb&e#q4+@i|gpd4YX+yl9&;v*l{fyzEQVx5=r}8uXGa6o$`C<P7
zm&KM4PEh1`9+tn_^LFDYC_0iF`*ImNTc(LyGeJQQMh~RFvTuBTY1OM$@_~#9zbwJ*
zdF(fm#6FhP*c9(tkxpflzDt!8hZ+HQ6{{|E<`Rk>rBwO7El1Er)Y|^h$0O$0TPlYo
zKZ`GM>x|EC#y1wix3cJ4c(fWfdWC#cxNdZo0F2e{2cGq5ARR69ft2NM05ADcR<C0s
zcj0KZ;OAC>Q=C_C{;dj_@r<PQN}kuGFapWB!z$|v%Ewj2BRo4JRyCV3csj*A&a4V=
zf%_WKC)Xou0Gt6IX}FXv-X>Ehb$ZkaJE+3coMvY;9#vM0YPqZ%LGeWS#8C=6j0PuL
zY01E#IwyRSfAN=_!89EZ&qdiYA!VoVSGw!dR4qMFK0d$>o`_r&rnbXR$b>9|P7Dvs
z74q1KZjgdz=cOyIXFOi*lKt^+pD_G)ZcyS8oQ58;=9&FG78aGHr$GaZp1RW8;AR}W
z{^G8?aW7fnrOYJ|5IK4~B)!F_+N(n|ieAt+Y1ooA-of}33RA9N9YzEp6Ry{A8l#_7
zpNQ(9b{M-1W%!>d<8)Ro&k-^UHO(Pn(NJB>2g&2VgZ$kgY}XW)=T@l2bhYai7RgVu
z!=om4YDG>$Wrf*-dM#Xm773px<QP0gL142~Ojj;(4C13{i8_Ue-XISz9Bxna$eO!3
zSZCm!1E|VD&$&UMa}n~B32Iu%%;O)pQ+)G8ie3rQXF+|R2w>c&M|yHTgN^C<EMWZo
z?~`K*0_J*+f{|@WW4QDtxu8?X_T#UUQwCj2TXOVM1|@!gG>KhZ;&dhIVPEbdVC@Aw
zjM49{l2WwMbi91ddIW`Nhqdt5sDVmgwTmnCFfbb!J?2ltnT)&O-psUP$p+RbS*T12
zoCj395dxL=)H~xjQEn%+jKc0I;5tL>ulfKQoUb`x>cNEAyLzaUODJASzunLp1a_1`
z*|~4;lc?sJ4c4TbIgNPdyrv0(Lwa$ikR7fap*Xaj>jYr@eX=s`P>DQ;NrKtZjLMPz
z7xe=1;NZP;&Kb~sXV51$%NanBJYrn(6-{r?L91cqK_!C<GBs-#VXvqFVlO<^nQ!dy
zLOLi!;Y-Yh(!@3(+d<9kekzde4Js5{bK2|L0c}Vch>td|uVf}RFN`fNr12xCLBWWI
zs8~jQ{y2O6ote3En@@ta-dzuQv5XOgi59!_qUeF_e<uW)`UJ>Loq%u#@Sl%bp$OaQ
z+q>;L^MhI^i*OK6e^mIR0K?>i633|50eW%bag$?-#7W4}Pb%C16g2T_Hn5IXH$iz8
zF_&mK(j6+E$g)&HxLQ1jcm!23cU!Oi4I+cOUFHYtAl|!D9C;aHGu#rWN8=X~+_K$4
zoEq$Z3vLY*WK2tpGFl)#e+fRw+)pKVM$ZphCKbnyC*V@BrY9J#5_13|>A;WE-jqT1
zQ`-PVHv*|ms01;MSc%hfz|FJK8O;)Et)A?DFWNfxIl$*u`S2&QUsBG58NJ<21cz?2
zYIjsSn?v3$3rP72;QNh;pnwMJU5&5L@16k_3`K$VI~vYtl36@09@byoj=0O(?G9*~
zU=I6&bn}De*hX~CokOPvS(sCKY{*_99Z1wn1qqixstQZNQ_pTT*4k0ep%k6UY%<{!
zw)vr&M}=l0A_uTLwvSO44OQ9bP$rnR2xU0#M%(+&wkF{sA!dFWyxPD??mDXPiO2S7
z)D53qW1fwK#4)2@&)a0d+VHX5UV13yMu&6iWDD~|FNHcM?j-lZrQ{<SR_U%O{#gk5
zxz}wRB*Sx`Uw!Vk@bZx`|Fjzq9yAfgS3-4^u`)5rlH5UtIYN*8yw<T1(^~5Q=xkuE
z`E$wRhIPZ#Jii20;4Gu`gbbduTR%D|#P1Sz+UOKqLDc!=8NJ(2$p@9$P8(HoB(*bM
zz_DX_1cnfZS#L8jF<F)yLe@1w-%f}PF`si`bYA5Grj9+Xcw9)%^#V129d2<H-T4t>
zlw}Wx|Fk#?R$WCrK1@!2w^TN0<~iF+F&2t%)r%(-4oFsyXV_SyMtkQ2`q<%A<|=A<
z6fUIEN<~(dv)VZ>QPt-Xt`ZlEVqq)-HK`(?;!$f-uF|La69MF*EA4%pl|Dtd1v{Kv
z6h8hz<w3_-M-}adxvTAH^_QY)ZcgQ6>eUiTzEk+<5OP(e2I(dNFn?Owda=*17l2Yq
zZPEZL8<lD?3zbhpcp-4H>XS#dcaB&Q{jorwII!lsgZ-*jD6)->vcUF0-4zH~nBML2
zWPBArKz^E&wgt;oEoG!(LIURnVhA0|+0MBBH3bxblBj<CMd>y9OCSUC*yQjF)Iy{$
z<hp4Jzq>b+jJ1WjpWEwVuPy{N2k}OG(;obxmoFjaed%}Um0<i25mP_lYyQ=`!NhhE
zb92BMrGeU3FXB5*TB-;=w@)t9oUe-9bLFih?mp@uMKg*PY*kJQ0ELA08mUkz3-atg
zm7vZ{RD}@w8)(@*7DG-hCy5jlSPj%^stM_dOXB~=+k8_1v~yy?I4F~yuC`KY71U|d
zBX-{7z&<3m4Hq=77v(X)knj^>uR*<fpr73ayUhZ_$$=>F3QDt=@C=kjkCUJ}jKHz}
zLQvhv?vhYpJP%plBW0lg>N$bH9t)LE)(8GGo!Wl7(NHtv*v+)r;Qe88m^^w92wLU|
zk+FI*mli=<s<6j5_nGf~{3(Y8!eOMCWkZhvz_V6Z7t49UkKsIa5F~UvxW;=zy9nx~
zK!MK_pB;yiAFc6lTX>!|2f=wD0~G?*h4bKfS&sPt>iR^Zk(-g!{6sC1ND7ml9yKBg
z<bJs#5HdVIQUR?(i)lJm1f4JkC_H}1mLajum6L);!pBq~GP+(PW6NoW$RmhLTlG`4
zPg_ebM$!M2{QiN3gxP*bcdE^~nzmFm!q;?euhi=qIsv}`g-WzNbycEej2CxEu8}Z@
z5$_>*v5hVX6!LuW@~s2Mk3MS-1|Cm4Z!j^b0!ruwQccD{eRi;5y(h5vp<>mt_??I}
zP`2;%{Ud8Al<S9Tg81Qw#cKKSB4ePaGZ;!A%mJV)7;5OGbl|U<jvn)lzrEnf0g4M{
zTkmuGxJ!X5ii(2<HYYppL-p$dI5|)f!t0IaSb~UOV1KNz$DW|$!HaNWrA6VMreYeL
z%!dKRLAf^B%_yzhF#C%TRkD*a4OEE*j@4L9^*~;p+2L3*S&$^y`P{zI0_cH7t%^iS
zw$xV3w~Y6cO@U_=fE1S02Z&E6P$sQaX11r(n4YgAMf-G=M4TNpI4G!#&~|BD4c^}`
z_4Dt}18VrmBxZD-7z|VJ^?~Z9lbW^QoKUhpqhzPRW4}D8z88RFP=5Mpsmq~7+sLJU
zzsp4h#}H7te(=*`lPQSd)3DA9P{}*3eTfmLLYytZI?o4ES8_}T)Byn1sZO0<X`xuj
zO&FM>tbXnvC%*wK`yby6w5@xlA3Orhf?-A&xIB8A8Y%*+42_#1-_Nj}Q=RzziG6UZ
zeNkbH=zE%lh?idZ@PIa{h|cm_YeN??hMhT=v|A2D!yD|>nqqJ4Qo_6g@zvg5ug?OI
zQTu;gN}yhif%^JKoAQc(|7DjF=uY)>vMaEBwV@mCKf07mFK$Kg#6*1F@5#0?-h)uH
z0PN6e>;dT!#u%u%F@MF5-D!SN>wCAXVjC7ytPZs8{><cnEc8HfgdgvEQ_1GRVQ{b(
z<r7}pR^P1X%b>HtJ1)I->9!Yeb%w?Ed*{IOR;)c}<yI=zUH@yzd>n>y*i$JtHl_N&
zS2nfNf`vh^J@&2bieItvPWOYWFJB=tHrx%-dmD&QxWK|}S%k0Pxyy%p{k1Fik02C*
zXc#=%^Vcp$s1am%wQeDnV`!-RiG>w3>9vu$HY@~8hyaUP>mykjdrlDataXJ-;Em|3
zW&W!?%ceU;6isIUp<Zi03<nQnGb+~FC?Oz|4TCemK---wM?kTb@$u#xSyrWl@CHli
z^s@9^RWJ~1W^dilDX~0{8^q$wC+dn)wwZsdX0BFthUI|zdRqk;TnSbzzR1PVsS8W}
zKUxFQ0H85(FFC1ZKUl*lwc-csQeJxUdZ%vK8?Y@e{~BC<8p=d*-+v9plmdO=n6=uo
z;ZhOI!(F*|Rz<mbgzPZQ`%c7r`M0cl#^oLR`N?m=O+9&xB~KMuwmyFN(^EDo**z7|
z1ZQKfyi^Hp%EUOai6z^hk>KJapt5jn{F*+H{`~r1w*p8ug6(sjXWevr3g|=Jc)FqG
zZ21!qrlqVeZvI*kmX69w^LhAhn0HJy|K~cPjm_sk6MlW2&`-_hz+C*|Iw6ODH=l!f
z|LZy-(0mT`(9`737lZj_tFb1c)t1tgk5}&!0^Y4SV`px_ul8l*T|(fi#clf$8viM!
zpYIZaY~Q;BHDdoBtSJThJ2&4Y1X&a1NWYbK>Sfzfa~YVgqb5mbgb02ztIlv`IqPZ-
z&B+F6tfeLe4+j0;26T)gXxl8qyk6z#e%XM2BM^{AO7^uIP33<zpw}Kom@-gLJyzdP
z$F+2(iv8gI%VpTh;&#>psvSxprdJCwyjlSiYlm-Rf9Da<&c62@^2-HCY-~0Rh3oB>
z>*f#=0%+EURV3i+)^1=buG{&aCcNqlu-ly81NYWVlV7nRE5c{<#vr`F^Kcn-&dnch
zw1rDYAPfvU`S2Rh>YA++ztkFFz<^y6?=$*iIW-Yx#W3>U{_NuZ-07zGm+}U`WPn`^
z)v7{k3fBN^os=~JF?4*s*lnwOj~Dnlu&&O_a*o+`ETUk#mYcs>#K5Gz{%0};(xlzd
zeuq|#9`q&CzZscT;}V9`I;_xVED&)wSkzVb_ZZrhHm$zsKa>nyWO3}xsc<JNpRGXb
zj&+a<#hp_O|7kvJJ>K^&A3j25a&a>y@W*gA>AW)AFWLQAECatJ1PtH78qQ@UU*1$O
zttAKgb{IB~x+2_kGupzwF47k0e|X8en4LE19}nJXIlb1{&eVU<VYBB0*Z&;uG*80?
z!g*PT-!?uAu=_h-p&SM7+hM#lTel-qKPBPjWr2;8z46BH`i31rh`|a=$~`zl1WU>j
z##xu{Hh9i!dVb?qfGV%851R48Ps8O?N@efnxTc0Boh9{vo|$iLSMw{*+&P@r7iA&Z
zn(3<A9mM3YTq(4C5}*gJfQ4cQ__2uL(_W%TLRIUHPKQ0HVlROh&Tp)*y%<Xc5I83L
z0{YV&k?s_U24|42oQC>8$p$kgTg05&0i?i`!r7SqLy8dxF~*&*V~yhP<^wNLrj-Qx
zG(VT5CloYTsR)1Ku-_qBi%w<Y{cf4*7~AaAU4FWCV&??j1WOwjNoZJ7f#OKmQ%F->
zs`ou#<pS1-p_n`n{WV+P!n%&cicV*o*?WRlL0X6@>@3D&kLtx;<#B^8zwdRfi;GJv
zx@lRry|Vb@#0!v9Q0p;@UpQ>TGBEBwq<YJ++g4)oi>t`u!{FE_HnYQcH4o6gXQV1c
z4W@ylSbB?w-P*xt`-6dN-DDt=U~pcq%BalDp^3tS4AhBcE01DEyZnJTr!PvpAxo`o
zpeldTzsNeQQ~8)|!cZ^qUF)`@OKBiJCS}+Ku^Y{IloHgM#QzaOBj<;`Z1b`O4O;%N
zkDjeZazwVCpS?<HO`9L3<u7E64o&Tq8GcKHa+$IqyDSV9h9%m9;6Vh0P*oY?Bb#n5
zId#4m0f`N4&G#J>yOuQ3-A>1n9aJ}w{CcsS%s(IsDQa=9FBGKs@?=3NzW~%GLb?xn
z6fI^_J8c5I^|lZOa_wIpWEpr5@{GnEfCdt&#riy%N;ZtHNZDHsrrsZ#-%M|jp2d2y
zG)s>eVY?s7T4&~yXu}D_K791N%~Em?>T95Z2ojwb&Rr<?i|d7+><21rd}qJvlm;$e
zl!02OXLYlfQPj-oK9}nWh?bE8p{-@1+pD{%?mTf^jh)_m;^$GM?_i3_;?PiYK!Y|t
ztGpn2G&{d~cG5+(I^t6yd`d%MHa)v89BEMGrWq>o=p)$A@3gQo**K_fkmN)FOcoo0
zq5a=D7ZG$+S+d!Fsz-UsOjsVND8)*d;ba@%%4(>7m$?j7qh~(N-m6-QSG$z|KI36T
z-@=*pnI~pUfR0NW=yUJ5?iSf*$zc@JYLhuWip{5J6?vI}I!&#`bN<>%_3h_fe9C!3
zgF*jkK4@V(U7xqoC|;}q+qt}J%V!DE$7o0RG519z;*^)ujPG7p#el@<cg72~eBU6Z
z4oX|~vtR6)y#?ooQeT6!_XaK%)tJdr^NM87vyaG5+TP(sw8(Ibw7B~mogY*_|H6dh
zy}JB!if&{6lbL!2KuD872fVf&$Ok#~zqpT`9`AFb=%<1h8tU^A(MnxAYM@Ph=Z&?<
z&{Tb^oz&EWC?gitDRUeRV2I!#D+lqd8NvNf@)(pbD?IKmg(7g!2^bJ;V3!x`Jz{Ml
z0QORM68)Z0cK&R@cWi+Bv!G_yuy=<Z(<Qzn8T%wP(>OS-lkV3gMV=8!nw4jnJ)o`o
zqF~e|O#pXt8ni80BwUI@Pc>6PJ659xb(5$RO?Pa)wS4b|^4Y^kLWk?;>7X0$Qi8w*
zk*eA?^ILen0q!~7(EIzxqccmb4u+u7)&lfWa9)iH@|S6D-9g4G`rPSmM<oTkpK3eZ
zp!*6+lfS`wjE>IAbbNp61e(I!SY^25{jC1W5-Zkjoe>&&?wAHhfDC-4A3*rqp2_`%
zVoW8@3|eWM_d!Ku@gY!-lm|(0#RA?4^t1y)%)9(cTKlUx!2KIT`Lof#`oQDEY#FNm
zh2<~DP`;#!F{xJ7?6}{35`as0HBYI%7~>c3A-2e|Edh8!mEYZ=RxPMwC-$BzFhfFG
zaVwj6Bhk-sgPT$Os*3SJ5+DyJBOvvBKX4h35!Em5le^TRGPwO})o$|*MsDr<Eg%-b
z00zi{d5tadAjNrwxR_VBb?XKxJT_5OSph4>Oz>l21)fQhq{`@p8jV6#$vo5hg;;(a
zL?M7H1C#YLyWw-76IUeE*mK}PJeOzx3o2xD9*FWX-qTa0@Ctu>%`0~^Av`sIFp*Xp
zy>KhRY2&LP)UX<l#2LrvAoLV2Na`WU!^VnI_>L%X6_`L;ffGcB%e<WQc5?!Z57*UR
za1B8o54gQSAQ-540NVsqWglpJ{zcHQu5*04(|pRj=!GTtVO<fg10Z7|Q9t?&2Fh4{
zsD(P=_V)p~9A?4@j^#UamT<N}2iLS^tL*xbS;Fz;D8-U;A3*u3K9`fy8bfuBfSbqc
zdY>{J_yOoju^72pp^Y$4Io+>!g9%{Mj4_eKaoi2M8dj*HDCIR3C2J1LNBV*Legt*j
zn*NYZDci6O<V3&wEAXn437Au#qvha7V{r9jppB>qISXbOpyHo@Xt(15=Y=sY>k(-7
zCS_))Ic}T+w2tNLJ4{OfJevxa!#R8zE@$^TfaX3HGmPvmIlM!b%BRNeZ?|&KESm;H
z`%gjiQi#(In_mSob}7wLtm;)y3Go|RYY}AF%x3Vkg%5D0^U~tJ_vL1dH00mI&atRh
zy?s;$>8;|HtweA|g1E!Ad#m?;-N5>7xTsZE8{;1|k5WV3Z1ms|GHi%zm-q;Dj&EB%
zC#L!LT+m}lk|>(4qycri{%3obdb@Y^n615+fd^<exVivzGGM4<!V>EJgwhv@3r~iQ
zhiur3C2yMWd(AT6a-%@8$l=SE)I0RSt-*KbsuK^2MRzS-8v?O+Aem{4&3lq=HwR^S
z?gqj6MDqJzrYGt&7EPwuhXB62C<3x%P^VkPb6Ov`QpIDsLWii~1BiTai_1^AFO|@6
z9It=DJZ(Gkbugu2taT5PFcpi-+6Al7dqw{`a4;8ewQ;lix705{t={~<DaUIYI({6E
zvmouR$nS)@oF+Tp%tBNxRHK{~5bp36G*JaZ{3qyd(dGjc`1I$9V`gBf#ST0AdHx0I
zFpf_V;GIcUHyeFK@dm;%5k|ghCVx6WI7CW+svRFSnM{K^5zlYouzCCL!T9m$2#;Re
zNM}ls&*Eb2Wx^NHLv8NePex?Q2p@((Q*z&w9MsF!Quf}*p_JY7n%KD^$6HVF!uV)8
z%+_58$sO<ImaY2kbiYmPi)k36sB;D|h|4e=vB$D%LQ7F<Hcfxu4&{f%pr@f_BpI0A
zk?sWfPxNC$;$<9yizD{FN%njK$#2ijx~uO^En1kNfl8~4$8NF%bSM*%QFh3y=WPpf
zfjsyl?dd!_C#H(M=uWMG+!{m(dj-3vvU<i5A7QU5Bgn7(gRZiX!TDUedsA8WE6CVb
zQN$v}F3D_(*0%O0Ww}-fMgWSK5MAqAvj_*d4&RE;m$;2YTTfv|p(@x6Q1OF>5(@M7
zgSj+NexD2~^A&D}azgE}z?ON<dOzFi15)NocX1T-$&K-WB#u*g)Aj`4nKjOCIf6OP
z`_&FQ&!9oitSX}IW^~>s(Nksz)%R8=effOm_uTK#BtpWUx~t`llqAefeT8n9paCt#
z7xZ5c;Rk(p*3%`dMD+!5wMT&T9HU>TiH`@N3SzLQzF*^R1KG)u<7F}&8De#YH)BIu
z=+(Vv9(T90iyDJ&d!BdQy7Pa(3#ZKWx@JK)aTI_8T)XIfU*17&P={#G?gxY0I0$oe
z-$gfYg$_tgRVp8$9xjYMGV;i7V_*mgc!`nS!tc=fv5!8YhjppEfaiUM$PM>%a-ckk
zs(e{Y@%6coH{HK4gz;Is!GaDuA8A32BA?La*>#nAZ{Cex0zE7jH0TI>MJ_P_Ro@k$
zo4$cRjJ&&uF{F&!*Sk8~KDYCp)6778D7eVw#)rv9;#3yTkvgb&mj-k)b?!%*!Xd}P
zMkTDBidSK(3)aQQ%?V=Cr4%OXG)Yh+DDB-opSOLxKV%x^q<8%-&~U#tyE-rhx?bVU
z2!$$KxHx40NGO|al4wY_`2d|ispM=Zmtq0+AU>U)p9T%XSC>-AOE>Iv*v>Si*%?K>
zodJBmy$7gsHC#dsjMYo2E$HSDr<Bx2`)JQdQcc4oEu{g<UrgSl%tP7BKpzUA_t8VS
zOM0Lw60^iyKxS*@9Gl+47(A7GX@8e7sCh=4?b$BpLXN^kkqKv`k3Y7nntpzHL98L(
zpoli$)E-qWB*E?LuJl`TVeC;p649A3`RG!JLgZ9z)k{Zi%WXZoOn#KmpsuGrIpA<<
z8dP{LbYBdA?v)4idPgvwP@2uD1kM`_-PS|}x0?(U$aaC=GZA4Zr+oz_9#>c?-kSV+
zWPgaXs&o-Ajvi=nHF`4HGDHI8Ca77D?tJ#X|J`rP-u~QIOWAX@4|HV?TDE>WsErII
z-2ti4Kpq3oQaY<GrVgE`DR1&rtGx+SK1GA7R}J0TU8s;@Juo#2?mLhhYP{>AqsN~G
z`bB~C4I1K+BekyHOUW8g5)lG&w3GG2O%va@Jfc);NC*l)SR5sc88d5-ftnR9ZkF?X
zMv?Aa4=tk6Qwga&naa&w2H2TCsEKv3o|X253~Kcj6V;OFlTgrz?(leKDk`RI7Usjd
z1c%%7KCUJ+P1&|itlZGH<Wjcn_#a)@0Z(<?{vW5Kh^I)>p!5jIj3WCqB|-@uyE3w}
z=Rr<sJY{8%V>FPN>`jY|kQqWHWS1F||8*aZ(fj=0&*y#L>f`5k|L*&`ulc>c*Vlr8
z934CN+6Rpp+yvbV6fWJfgVo=?`z%BBE?krNrBn6shpgLpRh6A3<~3G%@*Un^B!eeo
zUmxPF$_B0k0A9&Hz+2Fg+Qb}KUHc@v5{!B{uO{CY%>8r&K}pf~0^w3gb`>!7!2e&1
zZrKp_e&+F>`KL1cks=~M2GQi;?B<7e>5IPZ-p|4nr)w1IaQiXO;KxleKR=D#U@43-
z2y4!l5>Y95)jrz>U^mrHKs;zXymX_L#C>{5EF-;m6gh1DB<UGhAoH1wjh%Xqx*{t<
z8wckH->AOkeaUB#f4y^8ci899I^m21$`bugW~WS}@hQMpqF_&wMVF)M7K`pha)AnU
z%JU?aSpmb#h4RSjHkL2Ps=o{mH>;#jasjNy!D(l|wc^*5im@XM-$Ry!9<nL;w#i=Q
z>reY$ZBYsrZw)YFr=t#BH=}8nsLKBET;Gh{?ghj5JOQS^^;+~~KhG^dqj#WVVK>|G
z9F!I#{H+A3-Xj_aaNPBRst2m-V<M?^Fj-i0p!cA<&`}CuxeEW@@SYQc{0h&STL#^t
z-dpzS-FT+#`h`hNHviQ-#9emnQBmzsA@t`(54^1IthOE*rOy}U73_&@N8MBDGrbWZ
zz$#-K`39&HuD29)W>o|CnSsOAxtIPoJ)Oh;&iiWjT7c^EjStbkC*nCO2LmPqKO4Kr
zw8?Z~-r1zuM|%2(y}20eIMUFopgZP22C&f745x%{&pd>kEs*N+8X_@=rAcJ4C<9T1
z=_&I8<6u*hu5*b!_L53fjB>2cFQ`O>rPAu54uCOIpH%#lj_SIhLcwxW@mDbF>dhtG
z??HGD<exa`*{t>2AYpvRLlos}^gT=ew*27y+PUvvt8~>X-+jS1TJV{$T2K9ZCgR@>
zUID|peO|9KC(}cUl4sRFqh@Z?{w8by;y_4@J<8O~m8?(%WqAH`;VPqyzD_6ZCGryu
zjY<tgFBPSvR~~4}npKVp`<^VLTpHSHZT~cM46bg<K952Aujivm56!tK)CE~;$LSg~
zg#UHOUZO-cY@ClJ+^vX{9W}rwHGmz+YI9uZ|J8YUdR&A~sOn+!v{dgwUmgSmt%@Ry
z;8}vO&-?ojPk;k{)0WH*L^?++D`}k8tND!osBs_tyPTq7i`XX9$wbX!U?mEIe*7Fa
z{;qG;=W}Rd+HWarLLu)3Ia-_uQ>Fy|S0CzGL5y2f2oJVJy-zEUHnkS&-ZtRw1bQ7F
z6{u<wNY$Mm2Y^EC6TPO2FS5^^-teBPF4alXKU(2c1t{4>yE|{f*xF`_8h))G`@MTA
z?GFF7guq{?5R%HjtKo#vcXhG3<N9~8cK=2Ax+w$~Y+nQs*_?w!1~(v{FR?=@23-JC
z0or{rgRGV><02h9^9&N2YQ|WNcQj)4#791+2VQk6F579=c*kuzdbTmXQrUehU}~~D
zl<<-%O2uv0L6L85EZg?%W7jH7`dyJ+D#4zzaod9Y(>#Ep3d$Vd?0S~G3I2XH&q?E2
z@l5YfBEN{V$o*#$_%ZIP0s--%0)-e&J;l2kdyJ#;Zmq@&bI6~;LpG!eG1wi@KkHn?
zS)J^gu>e*!L?;XJ#WcBR$|6wpoDGR^%iI1|O{}3v_ra>XUad#88<=7ovV&qZZ1pN7
zy9_Zeu}|}w0WpgrO}%TN?#Y-#H}Sn!`XmR2<O<IF-o*OM_*`}4=}M|rtj2~zJBgh<
zgQi}UjN7};B?JU}%z?EI@I@}7dsTkibI$-H<x`jSv#sq<;KT*Ef{awzMcxEY&S>a5
z_oR19T$xVEtUtp^rCzc@228#n5UZK%jU0}vv6Sj1+#9Zx-n8Yeg8)xNEM7!JL=B}=
z!PmoYDejSKmxestP~tFH^($G=7WOH+H9p?079EWBwD${&J)5!5A~?-L<D0b~{+7M<
z^iXAfp-5n|u~x4ppM<dtv;kC)RAph!z&^gUywTacd-`qcRC9l@rC_$;#F4jvNq;^W
zi_L?UL~S>T%h5ZcBdKg>)iz}0aZ?Q-$9+mVEGR6@H}b`00S6z+zM|~>j@dRapfj^+
z;r6@kIK0@uAxu2XQC&mcBRnityjJm@XArcbxdXuO+A{66Pyl8XSsgh;E8h0aGvIMQ
z{m5aeo=?TQq$8e`&JIpTk4RU<DTKXT59pN{L?$ErO5mtr_HcH4Dl4Lgh?ku=sTj(y
z*<pitp3W<e(r1qV)qtRVQO2kCuHO#*^p7Nr+2eFE)irom+W7NPDUva+0JM+(!q{Hu
zJl@s^Fs~gOd-K9>wWg;1{Dd5+FC~t@RPRJMk~(H`M7|Eu?-$WZOJ&Xhd_}fQ$`nH5
zz^2>XPT(o%kBdl8%C2$Opw_v*<&*ukVL(tu#&h^U_-L73n;|uTn&zjR-Rh*9b6Z*l
z<`H~p)=GO08x8@sY0FuUk1{*DKfUGfHE%fr>?@T6NzXcEYLE8S=hHr7N{{=vx(rV|
zMYnya1VPRymxoJ-No2IiZ`R|2oQ&}EJd-%;bW)E~)Xb2vEJ3PieX5dC9?F|=c5SN;
z##_xae?kpzllE{&5~gMvcw-dd?mS8KB@9cJyb2vvbGUv-C}WG{=%99XmShYHza*1_
zJ<VzN4!%SQHoNtKJjz$Y+=}dLw1-G3c)i+UT>;VZNGij=p*CIO=Qk{RBrQ<G`o+ib
z&<xff9;K~!zOZowoGn4rBi`NvTGc+G>uf<<_b2FoH;*=4Z$9^=`x6A)XUp+Cw82^_
z54tjjwA&m`^vG~`SWIm^Md%1`jffPHVe)fqNh;w9AN%opE;PR?J@3D3`Z#?l%#~XK
zCa>r#_tSSdgnS-M-_7(*&@b%n{Ig9XLDkr5|LDk!4-y2zKtg=Ba$jw9mrUwriC0-Q
zbt%Q2c_pBe+T$ZLI0j#$XlL?LR+s+GzZ2bl+hs=@rxtx}56BB1Mx;XyO~Hfs^%D>d
zE8FWX^waNCZQk*ei$)RO7d#85s=VzaEpCvIe#q4AQn$BQ>gM*jD?Z|JZohKNrBgFC
zIo6fdw2~srha;dtODia{Yv?0nSA(_tiw5l~bEFAPv(V!AL7>L#HCVXxUuFeXKaTbd
z)xU|q@*5zhta^@w`JK7HX9wl92VDE|{KDdB-`SEZfKRTX<`l~K{MWb+agmpvAulUF
zyLCW5(9O}Mlhdk_CqD2}<k1<F@7(8ET}-(B8A?D}$XCmeD`-;J%JLn&S%XU;tT)h!
zZz=v=rtdZkbf>&10?~?ApR4InTYv=a1;d#PNGAllUJ)*D-LezG*WO*qY8w3~V}H^O
z&g&AR^6#N-D_SSZUMA_l#b3rH^HaQ$pFe$h<X_4+SCc~EBl8-~^hI~2A{yFk^wJ#>
z;NFc6eu<qbx5Gx#>Vik#C!iLe5hF4*6!kFNg;u@m`)x6Zzz0x|VqZ;6M&gmO=mIdp
z9HtXCJI_6=m5(<(){RIBI82SodhXt!lIa&^`;<CBo@PLw<x#UHiY&cA=apqQcq4Ku
zY(UP`ay|8Jkr>iZcHeL<%ysDn$$*_!gS)4-<K__Q*+8+YLi(l|VOyc9dk!_FRf+{6
zMMH*a9W}Dxz?sZVtlRSwH+N(M-r?|^ix!j*24C4swHoL6UI(t)z<7YH50B5r*!I`f
zd_VLM5RBI@ZowjQH_jI(#sp}?(r7vX4FhJ$&rgAu+wrh<9Z)lF)zIq85oGc*3~NW7
zbWK?`vd=4=`z{Js9W-o3$>4hFs)Lsdr~MPM2qXP0Dsjrrn-c;o5EL0XD7GIQ3#xQR
zem!gUERJN(IAIA5xO_?LN|o+wM_*+KjlIDX)7xnt_Fz{zEBCK==ktI8hx<STO15%}
zINDkObz*B)PGglk2{kc|0RT-nemG@ZI)`q<cQV;&sc!#DN!t^9VL8PYnt=)1+iLlp
zmit}QP`n6hkK=E>_jewbxX8ma2lwfy2N|z}dyY<jaP9Z7lp6l3<!4`n2uSxyouSF@
ziy}0?Y5M(|NtrJ!?_#9guYUS%8Pyh;ScH(?7$baBuuDt|lFW&cDDqXC`z236ISJ;A
zhIuV~(cxn?!!b8E9k73k9~~SFqYY*M4iHHb1fm@Lg0eS(d<mK?b^_FMP<=`kNS#9a
zn&kG|ptV7YBLgS04yeRjjqfE5qgL>&+Gqk0(X<Bf-PdB{`<*e}NeIEZ?a(XB%)Od$
z9sG`I@BLcfk+k<g=c;Z$Y38Dy)52Vr-X8TijiLcH<c=V|)VVPff}tkWK+giQtAvsz
zj3UQGByCf&niB`OKe)a<zWY2|U+swyr+5CTk@J$!0#(HU9bx`|Ns8bz=trOeqkgLr
zrCQ`KhV^}fOb~BmRW?u^{GJ=tL;cuez_D^f?UXr!QX50>8A_M0&P@W^#AR`y*Lu8u
zW^2H>sP0A2fSbRj%38#zdVZ1`!`ESWuT6Q%d)v&|@7CNlWK*8};$P7Tl;^NpZ$;}X
z(f&3$w?RqL;>0%~)PoK}wu1^k7UoM9G=$r2;QIx@H%PfQj*^@G^e=?lg)-PB+uI?{
z*%nW`d(coX`iGaXmy=S#`SPPTUV7TFos6}mZNm~HTeiHG0jDPE-WFF*m9tmFIDw@2
z&Gjw$Txr^_7v}>AHs2xbDO@n+04RAcnls(mkW8O~lBx449luYhGBt`7BOan%Mnj|r
z;bFcY7fNmlUGqMYBOi)`8N?pi6qnE3(<pr8vS;#5;WV~z(s_zDKBG2xI(Ys>wrAT8
zM>plpITTJt`+RtoZqR#eV@9FXRBL_T&CN1SC;Y<yk}OHkt_@ZxY)Q|{GaBUmw06i5
zr9Q6j50zfI2x;-_cOEbixMq&z)B-HUCis)I!*}e+OrvoKL8`w-KQ-e{3UhCed%MlF
z8!oSQ+)*Iu`uCsp`GaGTIo@+eKC2zet-+h;i62!pdaYwq!P&GWk!LW=&;f9|(|Nif
zZHANQpNAQSaN-*rP)D7oCB9fhgctQ^3-a*yK!9LqPvSfQ1P;;aT~WUvnW-gQAav;?
z3i(W@$h<(PMvOY@6W!<IZAA@((}p);G6KzXazp~}m!D+Ox$rKqx;RxeC;GQh_EnwE
zJY|pI9yQdHTrb{?ePCaNy@uRyX9#t5iczAvrc}VbzGY~T|DleXRGSQy*^QU)2Mk1w
zf8`Gv+&0viO46H8lwqCzjVL}Rhu?je%;(AY2k|<GxV9fExtU*c9}v%EvRWCo=f1TN
zLAFL&<MoDqahd2CfzL>6W&D2OkK#iN4`%*V#rgEi!9wp5Qeb`H!P+<0K$ZVRORTpT
zv)QTYVNY?vkXEpk{V*d@O!3n>N-p4Qn_kh=iT2%2FY$)4(w&95zwf!Vv(?`6v_KsU
zNuTy-a57Ex>~cZCWBG4~)OXQRWgIdM7Edw0!Uf$0Wqe8Du`+|AyC<K@1;NEmWwmcS
z$0^d6?q!Clug+HRbIvK~NFirdj+IxFs%)Ysi;x;tz`XY)(B_Y^y+Y1K54iBkS%)li
zp4pZ_leAq_FiI?Q)HFn6ji7|)meqLmSZ!w5=ozlGs%fSx{t;UWvoup!)wPagVV^EQ
zVpIcBqWgamw1{26zqB9DY7sy*oz94ANm#@Vb?%KMEf^RX72A@tSSOogj+*ohRq(xv
zu)L<uQvRb4GGqGA?d_eS|FE7_3AdDhxHC&l51OdU&xy6}pnnFjiTw}HDdz<+1e+C%
zj`g-jv~J-up84piC;Z~7yCD92_O)E-IqC|pw*1aE>Lf>IBP=co>$>2&Wn=k)77^aV
z4{gi`=awjch_^RxUxPt4QelTUQ@W-;b>851hBi)IfAp-Qk)HnVse+IVyT`p5iC+~b
z2Y_3{EX!*UrB-gaiATT9Xwkbqe_(%g^$P?`M(rMD8)SdJP&gcrW{x^A@!JkxQZ4Qa
z{q#IFwA<5%_K8GE!bQF4x9&*CVrr{jO9E(H;n~!dP$<t^bH30#R$E<JZC)$IO{F!}
z8U+akBeBa03^Q#l#n~IVna;<h)NI6GKHQZf)f1?iXq7dtS<;Oqfxi0U5anx6@|!MQ
zw>kOc2P8V2B4Q%lLN9u*5^ZnPSBDlsrZ@2~=j1*w2WhG=D2L(C-`hPS&FSY}rPX;}
zSnH6&w_dTP887Wx;UcEVZ{}A-eaG8RFBoTRj#@4q;Mg&!{{wO+a0?z_G%T~+cUVk)
zO}xV@GPd6MI7|&>9cYOk$KIA>S4cJD>V#Zm=g0&EK2!eqP_a&@D+S3dM~^k;OLes;
z`*P<-t4u;|%zb!P%l!Gt{!IgIEaldIVSb3WK4D$U^J^96Eq?<${m032(^`AVdzVlK
zcd+#2yuodiPq*hCc4xKV+w2=R3T%o5757ayY!lN}A6)UCFbG#)iB#P)l5Zb*9|_&h
zJ<!LIau19bP(f<4DNjf9WrZ7_8~?k?HQpvaI)1*N@vSA|XKrZ7RhPuB9?(F}NR!k1
zh=N_mvf$gVVsCDecG@dlw`T=HBq-W_cC~al3!L(k=5Jj`4|bVV*T*A@(=0`c;2UnJ
z*H?HveYbfqY53Q*%Q`YTbA0!qE4tY3wd20{L44aHMn{@@>#AZS+UNCjA02+oJQf%X
ze^~pkmGHXAD^N}FDYAOSDRde$v%4Fm^c_OBTyXCdiRMA9qB>JR$m-8|Y4H9GR}V^g
z&o-jLKa1xEQ`DAG?5JWkMEB8Vi1D$*KN;L|DWAU70f_F-RMX!&<@TX~?3m%|MjZtR
z8xe>I)lu3BpIB1_@CMXD7lJ5r0UQ>a%DXCK4{IiFsoOz$VJ@~zv&}xzQdg}yij}2D
zMIELa^_VsEKgTx1<+14r((qAxH%Y|^rQxH_O-Z_HsO4Vcl3}M#Hd1J)cw>nCbdkKw
zL60=Wm|cl$H)wf+%ON@T&tIW{uhK;oCf*tncaR09nmPxqKNhnCL(9t~WDKePrs{C>
zGPA=QF|T-I5N2WZvJp7Vs*Jj9BlkNJ>4%1J_vWoCHAnI`DBUULi6@<pf^HUNxrVl7
zWPj*-s<UgC0$}}@6}ksrX*ECV!&JHpSEBSH2n4FFobNsY?RUWkR4Jv6t9Lyvt-OEx
zRVd20J-Z38Fz$vz8<-o`nZWoi*JA^W68eT2@2j<R`~lr5+H)UZ4#mpC%LHSVCSD0K
zW9EY$&mJ+E`g(z8v)ryls0GX`BIfbvH?BNE{^ms-9#Nb_Xke&<Z7N)3(|XN&9`(;C
zRTrTR)by*;{p2?S_?+Ea=(9mdYd})*Xs8X8xHg}6oHPtaSa|wm=T)of4fJ@iW@mut
z-~F>eBEa-6RRmvY|HyC^zzJfyf#gYErRj9&kU6dumrIWv{PJ;yjY5d#8=5~yUUF#~
z8QoA^+wOF!M4@sQVD-(vR~<ft3D{N#mxKnPWO^XH-*eC(4aeZ9ArB9s$i2Q2-F9+k
z1ViX4D7Zg<7ey+071i+5?(AmD2*<OhOU<9sS|=##E76kd>g74g3V>~!jJ?<&;muUL
zeC|s!vk1El6xIZ=NW2^0u!P+8eV9t|*)I{ILnEy!$m0nYJ<+`vr@sRW*7SNHhp&{)
z>&RNyUJ*Hx<X&8iHD)~p6F?C|`nxzI<*C6lFDs}ehnhymF7~8urZnzMZ$oi*m3@m&
z%iJTtQ1^P3n(588`7g+PWBp#GJC$Cex`eAJ&85DudbKe0>{O&Q4~ewh=#?qm{tYv?
z2HJC}5ixlP(!U%7(NH5IZ<tUHb`#`&Y+f_Ud2OFSMMYp{i16BPyHc*zZ>F}Rh)Ere
z_}oZY)avc+LsXFV!KPh^WFzuJhF5!YCwSSX8run@Md)Mecs}LkVaN<K$hoqqJG#Mp
z`&Y<#kw<@!(K?hZKsSamHzNa(U_%wHgF)Pz?}1)d>GX70)cgc<A9lYlgCIlpi))+`
z8h<kNSi-mcR)&+`Z!bsan2K%6zcN@H4{ePj=_BKK);PJ^y~J5ZM^vlt3jYXkOC{=8
zMWn=nu~v=e<br_Xm;jI+Re_kJtHc<|9l4i7Ka6_YP^L0o-?_zb%B<2GQyEt%-@P9d
zXlZVNSDsr4old*XWhZmn(+EeoMV)IIluE5KvMoV1k{{Rl2}Sl@0b^(}>ShxRA{O+6
zq7kEMT^VLo+O^hwGUYeZV=X({4QACBMxr2X9V|Wd;V~i%8oE|2AqyTt5<aNuUxc^Y
zu1UrA2gK^tUZH`p)Rz?pb-#Sf<%=Qh8g*9kN^hz6wgf0xRcgVACj2-5;NPd{<OdiG
zK1^TvN74G$`$El>_v@->-4v}uf=yH1Yn-N2)XhHb9lhEeJzxgRff+gt*OKhz_J9XA
z#j`6grAc$Ps725aKYOtYJRLM&LsdyUb_k5aeByq}iUMC!1OwSE9;V#kFXIX&Jvt%;
zo66l!9zKLoq?;xOcXihI=JesStqbk<fY+*~Amz|fTmKAY8Jtnir_7Ikl>;+sB$E2Z
zo;<$A(P1Gv>>3-SejuPD_>IA#@mbBJEW4P)okG@`E-B5CMBVx1A44IAq>&vwb+yh0
zDHV}DgaCZ+OeOC#zIOABcVBnficxe3XoD)gPp1}-Sbv1}<M-Q<giR6%?MtYyt^i0N
z$#wW0o1KyTq*n7Jn(~6kah=BkqCeWM*S1xw4E@}VrZ5P%T4Z|Irf1J%QYr$Kvz6Dm
zE|3N_-3f>z^~`U%ji@d-GZ8PVGarQ*;zNKl&AP@JP@AiTtD2VTCfw4}I$9d;J0n47
z&F)YKHdH44Xl3}|*yUD5%S}=lfkLrTYd4bz{rI-K?=f$+qlZK_=MWu1=-z&VXjz@<
z&Ete<UbkAyQIxmL`~H%y3NbD_e6*H(@zrjg?qFX#HO1agE*R>b;^wd#e|~4WP#V>4
zRgM^=HkYX;F~TRH0>2MK5L}VB0y92x*Gp=K2K;64A;)^J;+5FvzfO&h7K(-mIAn{o
zS!0@9b|rPCD!We&8~n{Z9sxy1_&)l(9@kdP8oac$4lwpZ)58@H_mHR*y>W89n95D`
zciwHug}u=LRlPY7RU2Jlm-!$PJnjtCQTP$q<!RD8G0oHUd|@wG-(CG3*>Z|*n_NL~
z>GO=p_dXj`Pd_7@1+s!y)Gl4s+hueH;m=wFf*m6ha)hL68C5pb7SuNwZY6sdF!)GU
zW<0Dm5K-0s0x&>Iv2qKW3jdYyjvVo5BjU)kXy>@eNN_J1%DrqquF-DiUp&6Ly#V)O
zi|5#MD}dt&i4Xb|1c+$}ZM}-6W%(W~wt|(W0aBe6JmoZRx$DNK!1jsML{U`gc5N!@
zWw7?rA%zPHo#kNVM-bZZx?Oe29_dtq?-^D;m|?pjRnh7>U$_8jVM2P#&t8kdG#YL~
z#r`Df@NFv1-RYFONjZ{mUVVdQXCQ;GPLM?Ex#s-K4?0`O<1?2=6RmpH>VCE|!8%Ll
zmKn(*@!zK!Nde&ViqEwD9gcQs{TZC`nx|kx$X$fDX~|gbOy#hg_b+dIH(SM_d1_6M
z+Lk{WMxe4SW0jV60AP|`W2qUF!xag89&U?=d3WL+FW0n+;l{CEcPZxsFB3oDXO-SH
zRH3$6+{h<!`_u^#Y9{80tXbRf7YM%5+gs{QUg`2Gd!dJcl6qaQg@h(nXG1}si`Z%S
zu%j-!0HjnpMC0^FL5<RW01e`FAJe*Oq}xxE;i4|Os;6T@pz$Z<UOI8h#muYkag%c7
zEz$plF<s*h!KxvWc$v4?FP81iQ!z>|fE-jr-DC!Q^0_0(;B93MSzas+{Zo%?tD&&)
z$vc)*Y^;uPGL!B2QE#@aKPJDT$MwHpRuA2c(fSm8#rK<lX|%C(%hbQ?Fx`k{i0Mq0
z$<~YY69Aeo{`%HuWnalcf0g7xwe;@eJVFEYsglF0e4`S9&+MBe`C~|v8Zl@#W2g)j
zKV?5D>t1S6RSW?{>HA;@W+kN%*YS2{a&zL+<Zz+?oW?EGCwIj3NM3`CZRZB?5TUoH
zqb71$a-n*k=ds+`L;hz#*uoXilO5}jhe*DE{~q5`ok}Ougq4{Hi?@<K$D?y)mD}TC
zVdspMN77o3Xr1@QSyG9Ro3@2GF+2a1$>m0?7!%Cn+X2B27Hxx3K|i2*>{iEdGLpa_
zv#QU3QSmN5RDA<Ec7)_uow<tr(SNj3?&R0ETJ>e<s)B>=;=AZ<qpaw*i)~qAq<UJ|
z25!aP^{dSY-%SrK%4VZqBJ>FXSnUYEHxZ1CIp8zAH|>u<ahl_g7nI`YzAg6<m42m8
z?KGV)_BJ4+P=^Q|)EFiNLcgF0BaQ#jU%si!>Pa7sXJ;3Z!=`7Nl|1AkY3l>HQmQiK
z9JFeBSuHi6G;qZHXKO5cEou=EZmS2s<%P4x*@1umXqWqA+BuRzK2EDwyBu^A`KX(!
zD<Y>VK3iG1NN$CT`q1gD#OkrEe|8PtR@HADRT@dtI7qNL(lsbFp@|cxw>0UOIq?6U
zFI+7XrtODGhiq-yJ|1?x<KZ#3X#;92O*>KgKUbsJ1I>4anXz8X0M!xCxxPo_pv&qG
zYn6>_hCaaYBCBxZJ4S2|;pbDgtx7(X-Cwq%mQ<SaA}hyaq)=+R#s+zmI#FNyJ#lAN
zT?cl%SoEgVLwPsolIyqFNw;X4mQ1~3tjDUsyob(|)~9;AL>`ykPSvAQQq1Mh8M<0v
zkmXvL$1Bu;dCWg7VcC7_4dC|YPxVfXgKsc5zY92rZK3&l?TVJ4bfG~8&IFl;)^355
z*f{8<6L-tjTq?ixLah708gP3vV<#w3!%Qoi7fN%1fPZFf{@g$9hjI`TZw^0i2gaL!
zUkP(j#GPo!VzqX*GPF&IaFbIp{QD@W7@U4SHXl&?E?y3QF7^du9n<nJizDY%0ByQe
zNpxOAD7TwQWz$H(`;0i+?f*TD8mW(U|5#N$mzx;=H!Q%-L_2gZL_PFJ3G`_D6{9_Z
z|9s)%zIL;0w>8nI%J<o$`pyLW1tq$qQ<R_dW`I%ID~FB_M*l4!*gJpqZ=M{sH&S-c
zu{)z*2DVH@X@t1;2baAJIKh6#?YyLkj*5QkmVwvUUL~CPL6$7aOO_rZUfNnm84zE}
zirVkq-xegXo-NM`0~1j5B-@zrkG4LtKrN|oXeWip`O3Q})*;4k9ojHFwI()4`pK1!
z%lG+jXZGbomJlrB)m4jHG#%)Egl>WO|0|R<c?Mm_6E9DF4HPmnxCeb*s@R0EesXVP
zT>K@<L_=F`C>$d#xNL=B8ZmNjuBy9r9ki7S9g2Nq&Hzu}{Jw2%llNIhq1A)VjTG5m
zd~MQ7(Q|nhRb373iTtGJ#ZC;wf5F?~esnm--v0jbD;EE-x}RKv8fmGh7X}0SNSRN}
z_L<*2013`UvB!Gg<t|OmTmAUbKGDaP@|W*^pVRfSqWF*ixWgVcI9<<0pBNfC^fUiB
zL~`0G9~9}J1xsXC#!Pk8kn_>KL@L<eO?6du%q!A?G97C!`XNnpwcU%l_k8qg*{ZT>
zhOTk#2>P|tenHa23NQ5)ccf*S>Fs1$uLyTkU+{$E8eWyfU0*hJ9zZUho;(Pf*p(9p
z)~h~O$ODuvl`Bs^Brk~lEZ?y!3nYKpqRWd@r3f*r(v1rHVrR93gmiA-msDU@HhsJQ
zeyM>(|1`B-#M+Mn;)qgu-!$;XuF-Hk*58GOkERtJoL|+$C`V1d<{{g2D0%NK3IC&`
zsswG>ry$Fb*EPEuu|mG0-X7}9s&D-TXnBQX7Agp{*0IEET>-sQzVAG-)Q;wA!2hg?
ztmWa0E08<eXHi%u#?37^ID&_uwq}g(yA#@l(92Zs*1Bj*$w^xrEU>Rs=x=KucuC*4
z`+G7k0omKpLI2-Na;}3>S}XEsZ%+&1El@u5&bzKlwZ$!5gctKzBQ)xlsj}g_7mAty
z0eC&^cJSd<2C$T#&S}}Qqt7@%Y!{Fz0nRydwWGeWGgDs+y|+!}KDt}_ou>M|hfSJp
z9Rgz8z(}}Y^02)dbOQSk1XCP%ajOupnGA_0vlF8-_A{5Jq)KwngvSP{81e|*n}3V$
zC(|dDEc}8@7azHxj0TaA$%{P0=LZDLW)SLo3_-;4mX=+P(0q~O%eLl{0~;6PGXJH1
zE*5p`os%Siao9xg)+|4Xc?H9ZSv_*>5Lg5a2qAOMv_gzuiOSMsKq_iaEChrjKVc-#
zSRA3404RD+NqVx8j4vGkilq5L8<-Azp}gaIF^o_MK}~aoXv`8hbq<kpc{(6(LLga}
z4yC5+-%@41NDcS?Uc|6UDsM>~fux5aAZf_6M|T|WvoE*32toWGpF**yig^ggIQ(c_
z&O+me_yOPh$M>O+2(bqeO+i~hXp@-Zw;zRp4r;##OMWLI-lUz@{CzM<R}K%Y3YFRI
z*R*D(9T9+g<T|RzBi2+#i?3gy!Yaq?<POZHwI*5oz$4T)NA`3ZxMK|e<3=74qu!$A
zlbvjKL6{&+*hS<56}aIOKblp#TSE}?`GlaeqODI*KSd%8ZbQ>iP)*T0S4?CVN;ohY
z7AX}&V}yFf9t4LGv=>*XZoUQma3*dShb<vZG6oG8X__wCcE9>yikMP)7=<^cRE72%
z-x{^W5UK_p)fL!)C1dbJ@4@=@r$Ma$66{9U-MhMoKAHz01E=x;eP4w*uiOE|5K^sK
zEyl@o#vO=<$&J5BX*RFD?<)gmwQmreU?H&ZvMoRxi$o6~C>Pkcb*_s%Mtv#fGeBA^
z`lS-cbn9hGpb*wpPRp(L{RT^*X9QxnMlC&6Xx7pjx!<dOLR`GZA|>^rPAmgr#ftX>
zG+c5G))p7RBCq@2yX99?$6LM%S6drsnb?o!<>G;VDv=XE>X1{=q&7Rkba^+l!*HZV
z13P&Sj1I8Kx?uLQ%rhF&U1fJA;1+b<9f$V5oLWnu#~L_dVVTq6(1T!I_EEC5G9s^p
zd&G18R4F3+J{?>%A~+7vvOb3i>5S_R(_nN!F$?&$9+`)VTeJHRO0NPpv5FF!U<SN^
znE>vNerlwOx@0U{`W?SRitzC-kU%p%Xv8h5LV&zT)J-J-ZBR$$e<GOu)z`_DQiCu!
z=A@e7b<s|zZotGo>;+h2bUGAgg3(yB169$U0f3OXhDO^)sqP|*@74GF4;$wPx=4ga
zNF7xu6pR0^4VMSSu4p>#tZu~J9I{0y6{z=nKpfqfxkf<hdlHo0O!LSoBA9p6+~hKX
zrW-K!(C(Mp$|sITz0hdH8K<%15Ndmu1mNy4>5?<zrgbbD)IkJ^dagY_*M+Ob5nuhC
zXve_WMX*UQzSR3a)|aM$Dv2Wp^2Y5t%joV~jVW!GdxwVQmP)eK4!w0193vx35LzKh
z`Zr?78{>aFdpY>7&h`1p!G_o=a%MjefqsX_v7wXlM)JjIytQ)DJW9@qaP!hGQ%2qt
zh`GLI2|{-P@xNK1(VUVCn9ROkGuobo{ORd%I&AQ^?ZsQDdj2ZRK<J<DkvB4PL#k+q
zw}2WNZ9a21ou%*-HAhW>a{5QJKE(>exi@?O<s;k5J2sGK^yXS!a(r&PS~XO!ArndS
z!sO_<y6-SUG2l$eD?yHD?YDt?2X3V)z;9XK--j<-9RDl}CsK*}%69|I!#6j|jAP@r
zXl($8++XONsYS(QN#$8qX&9_)rdM%3b@F`1Jf@P|B7;=JTvV9Mcd6A20o}RiH6U{p
zE&zevtl)4yxvJ7OvB%?w8VL5iOAZU>a5<VBcRNC(Fv1q)?lb=g<&Y|r%-@X$|BxG%
zyWElq&VX`jxidU(7^2fGQ}Y6uhoMs)D5>b1>kc1tp$`@$2sFSwKmnXQ0CN*@kFoT(
z|I_FT{RKy3pLvb%!=-2M1qx2Z97O()QxKA}D%3S*gDMEnex8&Jq?jBoS^6(-j6pka
zg3c7&<9s*mJ&m6)*Dx8?M2HFAd3+5ZiEeV*wT^tMb!^&kd|F0$Bj*<AMiP!+Dy{1)
zQZX+(DT{xA_{_`Fla{+23aPIA2`BY`g7!H+wh7Hd&L*_&IMsX$jO(7kSHe+N!a+<1
zMtYWj04Pa%g=iAmre_2E#vX2VyDI+KlgUL#eZ?!%H^NFS4UJj!wvTfy-cP?Gm5#{3
z(%f~G^3reK1#E)>RLpG_d?mlehP!7G2VK(UD%ANm2C6gOt#kAfGOKqLrU6r$I6kt2
z1XHx2Zgin#Ko)Is6(DW~&ff{Q&x0UxmDsPz#3&X)hQy~i(aPo!TT3`F(6jpIxWK5e
zOo9vaOBKL2qRvQw!787|vw4kicLgR38UtF$Kc!Z38eyy|0AL8#yXMOPAq<t>6GCpY
zS--D1fo)vz9M?Lxz(NSxQ<NaghXmh26l050vkK2<5qV{VMK*p0T8?B=cat1Dorhgu
zrnb>suFOR!`V71>y$<|=8guT~5$Ak8z7KK50%P#-04?8O03c=ESjJIT5db)3RN?2k
zePxRgJ@>K7Gq3hQu2dQ4`@cuLeJ`XgPJchLSWrBZjpE^tN5AbLngFSf(z*esa3EqV
zxhMd=QRD(0ejb3!$-x#WyaL*}6W7m418)DBpvD}zc?~L|&wL6N49dC@0VLxae0o+!
zOqU~{<A+Ok#(-r#DZ^C$bRK{YSBiUwAnf{cRR^iJNY%7E^)E!Y_j#`?Dl{{eV`B<E
z2AX^8Wu+$xh)*%`H}uYCkzB_rnygD?XVx3^Wg%o~WPH;PfWCL7L&w~O@|l3Jusf_a
zr#H!&)AEzCRxpk|t182DFaYK`P0d`~0DKEQ=lAw-gKi<)>|`ySRk>?@da96BE*5}0
zf*rxD`dyW?kvn2M)!P8gJ3i0FC3-RoYAtUZ6j0$N4<M~=eUTf&Xr0?k;<N6f`PX9z
z_6(hF-w~u{JaedI;dc)}-ub`<kgY<Vjj4Q#=Y8OO_;A++HQWPMRrq=Iu{H$35q%Vi
zIt0;#`|YSbf2}aDs(TngXz}%8RYA?wJ5pYyf6*%P1?`OS*-X$7h0d}m2Dms~L6a?d
zC9JOBU-Uq~7=8vZDey1k&y5s>v;ewd*hSn4F<!$&hdfq+EY3qiq?2JA@h<kz$@y%A
zTp>}CouAm6lfyTe52Ju{Y6ow^@Yoa?)*lv?4xhi={1{?o`{UAFG*Y_5S2keJTv`<U
zmGfO9(Zj`rlwSP&q&1+ZG4LHToGV{ZKh~Gr-mJU;B7EVUlQ!x@g*x$cI<%GrAvb<_
zQ2Ya`qJoe`zbbBjUcOsP;#F-iGmG8_=e|h9<(d2QYX5bKlB0;c*tUP8!Wr<Xq1TgN
zoIgIw#T3zV4yY24E(jH%8vftRkkHGA%*ff2SWHjkf#Xk#%|V05gAspltjH7A6kar<
z9bK>nN6{;8qrYaxlSUOr02FTj{`?%8L&@3YRo!f9(t?`W41vytAC>OpT-$9D%C@l>
zsP}!*nTtl;rf7eb^z0?3I=$5z3R0Xq7Ly(%#krBlom45+sSwX^n-@_S^H&hyK~YAR
z?moq8F%Hy)h6pq#Qd(dxVjn8Qr2@nLn2%%O<FC6yz|+%nZiwi-FxK%F$$t+7ZqA5m
zv(35vZa3-~?19^&=L{sYdJ-ie;*aY61CYHXBW`TeD-)Aa+hiP8A0mZkeevIVJr|GB
z_KUH;-xYA~%l`@=sUlBvM3c?^Idz$K@3wx;hz8807%4=-44xiv_;|tbn+_G>CQKsO
z?*U8aDlPI17&5x2+796|s?ab}-6n1|2QaE3Xu`$7C_u%JBxJ7!5|J;1;t8D2;`Zrp
z$1awl?tDJm->nGiF+S$ZTKm><H`DGBkQdIb_>a&TT!|(brvsmZclSu^Gym2|@}v#m
zU=f{*e7_DOviH-DRrUgfSc}LNDh$)sw_~aE*TPDUFEnkP>v&AUse(;B>y}Y=lAJcW
zeF2xVN?{=L23GWtwI@>b{V<LSC8NegH9x$*w2O&o2+0-!rih4@>p>ssv1z4B0FRd*
z+K7-+(pt*P)gJww*xQffA*ou(6}cL3v6i@wm?z*DyI9(xe_0X5x3Mo5M9631uiFkk
zCI0M5q})o6QU=JV4&`K;<wp+!&kIAYDh}rye~SZc@BUaE`kvM5XE9%+7+HGt^OGK(
z_!_*zJNP8gLARZMFaDTNF2-fW@Gm}mNHL~-=q)2hX5k>sCT?sSs8G>cH(R$}&C<-6
zajIR0&TluRid?0OJxZ&gqKnFziKCK6y^=luVsD?&Z^cyZ-9ftc=UrY+--XjdVILr6
zEFa%;8?`3_jT|ITCiOgiY$kbZ`ZLO*q#duOmKJ)mY*Q!@ou1#>+6bZ)Uv`enMJDtU
z<8pfKKG2Xiu=*~ThvDfMwaw2n&184=U`>GvjsKFY9|n+yZ*Wrz@k{qziE0Tlv%Hx&
zRMD7v_tER#pW}zf`xvT8m9lD~LRN^(Yj6&dNRTwQdZut^{RQCTpS(=k<WsuCm~`++
z<oo4}Gx-->1!xo{RS>Keqj4lG8;BUv7`I1*P`E0YGO`OfQ}I)Nf+CMgdvQn;(ny5A
zh2VdJcsXz}IZ$oPxxdJ#xO!*>MLN)C7;7PBx5YFUX*j2Q<`ozCR@q{4CCfKUg!_~H
z@?Xe*(Ek_r%t|-}QACWLoi^46x2XH;?mzb$R{3cm!?Ev@!-b|VX&NFXH;ISXw|ikO
zov-uL+iJqRml3!Fi|92n0~pT5;baW&zCF410WbU05FTMBn!D@=Fv3swZF#UQce~9F
z`r|58kE!-@`K!mdwr-gHz};`_a(c6xy>3*hD&c8cR*Tlmt3LdQ4taI#${3SL1LJWE
z)~1j63~-zC8T?{~FsI2lkFBS1``3Pq2kr;;iPJH@)aPx|+XgBw#VZeX$M5jLxzU_f
zX)Y&hqcDcV=uy-EaUbvPuM>?woXE-Dki&g{yKPG71mibeD%#3o|3j<k8L_jvrFU1o
zl>Sla%YIc!H<vR?vr`7~hj!B1Dd29{P;)H}Y+R8xw6Y}${#NAi)nIh^qdYt9X%#N&
z4Nz?0_{6j7w<4h+e+sCw8#GTWm9yVn8$J}?*kW=AAT9Zv>_=Pqxmd{3Ni?SmWm~Nu
zK#){isTenraA$Bb*Jtp&QbHEP5?`|OE>ZVvJhYQ$;xz6?x}3Ja@|}MwLiKsgUB<C(
zv<oIF(l@oKMsu`axMWK)TLRb7k65o+p&yoY<?rb{e(K5&q8XQr74K)dq-V%jU}+{4
z;YG%}GsP0d8G9rh%xjFy^H-ig^3J{v6St(@CN$YOxh1tY!?GRb`$!AJleyRS;bP9i
zZ>T@ce+46ATvPqQOYsh_52N{~uKz-J*Y7XlWxC9FCf+sv0mJ9!Mhpr(MTkKxelgn4
z$2pd6*gUts!CHfli}{JUx%-l)xcEXSty<q+aeUCJ4Mbfylc{^}&aNzVOhEtl%HLq&
zepryN-pYy}0S$(mFyhQ_dowxrXUynU-&;Oz^oOwn`kl+q<!yPIB_ZraNLRm}iaCtO
z?AYQLQ(adj6x4ZHT|b|a3!uyWGabFZ*n@`r#klJ<)zS4c&8gmx!;jmf%f9xOXFqnM
zz666l>M3W;pA4Ji2OCpxZJk*b4rcK`Hd}}%H#k5#B)QN7+f%t~CxtV&j*cp4X^)my
zdy~h{KcJ~t8jiz)we{nM1`#Y3CK7hWA@0#C_GjX+jiD>^NZ^z6_p0!Uw>AnV?Bd7;
zQmf956Y@9Gb2dBfAvzFa6+*IEBG;TA`(sSpq7esEcMqp2jpyH1QDG|FMmrJdfi>*H
z?@ZW(E%RY(-~71O^mM?V(cL{k_G9Slx8sO`q~vTDo7Wb$8?3l?pNw&*-nV~nx}%S4
zEKJ0>*C>_ij0Y|XTm5JMIeCvRYy`>qyQ1O@(_zfbz3fNDw+}>7lI;7_Jw8x0^Wx^<
zPEl`DiVlAt)?=j^r>M_~-M3!@Q=789b7(oIscKgtcJzC&ZALi`61aw+6_MFyAlBF6
zA+v&k|L=1kMY0K7pTjLlC&I}cp~+?69P9lT(H#V4i2LHJE$nqc9)D1>B1!%S{1Ti4
zHqni6-bPq*^sVB69NZrF&aBgD%VTu0uPGlzu^C(SaGugzLURVyBXy(U`nElM0Iy+&
z*J$Y8T=s~z%H#M}e;vD@ATe7!<s7d#Xy)S1KHR%z+gUw$)q=M)MWhxlwJF`Vl~1e_
z#L&en58Hjrw1LZ`y3-rG{sbsWTxiBm2HRD;MOKlNgJoAK!PF|tilP16$S&T>bN>`(
z9Tyyte&g;F9=Hw~n!q(T4y1^DUEXHm&L|<}7Z&xng7K*_=y4bKxgGc2`s-tNL_Fw6
z;*M*^R{z<~yT2Hxcj6+icv!aM@O|U$H$j5wKpS+{M7r_S!GFp*b}oYgVj?gCtI-m;
zOW68>3e6WEI<ta(if_;va7octRu^t$dJdO#wSvCK&HfKX5fO=7PghiECUMJs6m?{e
z@5W<kE-?DVBx4?nmt*4oFi|w<z{p3TFOH62uXrBoy#qwAji*(NCf+o5XYSl-{zKDu
zRHu4oi;x!O6-%!sONgHaai(1Hsf0Z*cT)W~cA@>C*l)fZdAM}G#En#|YLJU>;>6ZB
zr#4-)+$o!<*@DX<?54szgFPwU^m!Gc8OKQddi7u5lMQflDi2u~e8Ya>@RKAKE35SS
zlzOgF0ASyC)8$gc#*d2VTyU+a-;sNl++jJ1ecU47{S}EgZdhex%+-JV)TqY)KS}u(
zRr-sksYF~nvnOr4!))fr-(L?v_C*^+th7QJC8V*!`}NPP5#&W1dy$=(nPS#H)U3pD
zrafQO$9yDH8KCH`;Am8r5rin*-MFLFo)lHJbb)5o!DhMHrdyuXa6iPs@GT5fR&Am7
zN)HWuojFY?_445pC77RrVP!qbA5dR$)B{%rT8i-fhW6?y0O*I8&lxT>H3*eyhJsds
z`e1{S2QC{_N5-T~^=(|y#=C1Oqwr}<wxZ6A7#K=|YkkgQ(%_7eCUDT|if!3$1-F2T
zGNen$Z#56XqF=IAFXjVd_B)f5@KD7EVm_vuDk}DUX7}3z&;2Uo6<NN^Z~Z;;))<UZ
z4;ns_OjfV$?MRsvqY@<yFXyLTcaY;D7WJEJT?<R<k1$q^B9l7o7Q=0#1zAO!)=KU9
zKDidxPDTJr<P6&Ta>BqUe&-sh`;||Gqe}%NTrb9LJ6Wk1jLU(YEI8YPtii;oQtAIV
z=F=WvKrbjL#Tn1^8l1Occ>4@a%e^ZyjI8L0v)dTfW-P&rx=5T+<tp5!#a;5MCbU^T
z3D7BH``C|$#pf8NuDoGAu9Rc7i4Y3Kn3%Pgc10?Vo3gf&lmMlmeqLY5G9-po(XDnQ
zxHR<Om3;fi`>UVvv!-fT)+OJLfmkKM#vF3D@q#U3;rPadW8Vyyz}ZQ`UaEYDh*7e^
z#Q&hrC^{4DXx3MQb6=Rit$YR+ySVognQX}Az$cgg(g{%H2SuJzemF}pu_?v(FCr^E
z)cehl**Wp=zyChDN!gtItub<#6_;`G0!(s&laQsZ95<|U-{_y+m`OhNqxf1&+2hXz
zb@C4#&p5cOOo%r&(yYQ?5a~DCaU=7wUXR4Xc#)RquB4Lsx*7&XP$XmV4_{9JfB%xC
z6|sCX?Rf%jvqgtIdlGC0-c6+UWDGCW{K`>~w{+QWrhC#9kaY|kgV@KuIOGtF&y7@*
z&>LpuOVj@2sUtrzps<<-Dqcj#?ttFfJ@A(Kho*{@T_e_DGgn1~VC0DYI7j~gb>-lv
zV?VFdVDq<v$os#gzR4rxF!bStYoYP76=it)uZPLXRd^eMO9=`fdvd~hqYdV?6BodO
z#$O(8k=z_wS{){`VF(WvZq0Taz+PCC8KMl!=_GEmza@qyOtSJP8QE3-f-8zCJh7Ky
zf4GO!YQaKlT=b7;mkdornR2S~_H#_&_0v{L5I(;|*P58WjbX88hT<EbAc9zZ>I1|?
z`Dc{c+74$tt9?x~kpPz_+GgkSz=s$a>JzK=9Ti50wp!NcSd)UQWBLJaA4S?wMLpzD
z2R*S~v#yv?YA;GS#I8a^%*--N!ND`ZJ~Eg$OnxzZosv5Jcj;km%i42|X4H>CK6p}!
z&IVI~D5&X(BE9%yclC|Gh_eg~lsJ#_Gzy5oZ#o*2G^&)X7w#WAYzXKmxG_iZzZ^*s
zG$8^y;SqV^`_U^5&X&5aSt@J~-$tb0v>HrJ!y3H@wU2q=&cXZck8!;@N_hn?Mi%R}
z+QTC1ZhWHlz#>D-th3`tqWC^;vn~DmgoH5ber*LkynZ@2iq4BoGP_SKZ_T`n9V|l9
zO9F>`fXryKBX|3iJ#97@3Gc)HB1(W4nEW^-vQNdhhSbW^AhtZ)Woe@pKNXT#>~wb1
z1p#Nfx#haw_8yH&DQ99A+71$Z^WjJs2>*VPhsU3vi6jL#jXhs~(4s?ga3GLmZW?xB
zaElvQq>CV)rGgq)7q1PD3hVjD(b#bLWjm$-h&!+_kfc2lo493-ge{%or^8e$$q3NZ
zMc}77z(Ws<C0nPzpW5dqLL@4x^m>)qQSSZHJtgYW<Sx~(o~k0fd_tq50)(awldbfx
z=UI=^LHM+1$B!_+&GBemxpj-;{Dy@A0g%&q{nV8l4i~_8!6>8D&<UoebZ`mso!;F*
zIX$8-UG9Um;zqWp8fQQsH&j++x27B}e?UsEcpQM!0hw-Y8r()fJFrV)j3_AorFSwQ
z$L_(Cpa3u)>adB_+Zc9&2HCe?QuY1n^xWDQib%zDx+^kyGA)p#$jj{p7s6i#Gsz7B
zKlkWI_Ww{?OP9!Q>uIfmw&twIcZI1i9mt1I4IG3}gq2Ep*={f0?L|Xj!wt&2Bh0Ry
z)YcU{RI@!5+SHt258n{t|5<dhI<{CbE*%?1$U!IkzW05ms`j2;<4#$NQB$)P&117P
zjmVbH7ZV;VZ~TO>$GO!fsB)D!k{qR2Q86)GaqKuvYA5yUk}dEyUSgj*MZJ>WwI+4~
z7-Ar4$h5~G{P9<0v)NV7f*6K-O|@Wut?1G<XH3KJEe;2wQIDeY0`c%Fh>bPikX_uy
zzi^>R6su-iES@#lY1%5!o)VSJtPJ{Jm?t?ZIra${LS*Z=E+si|53sM-9xzDnb0oca
zE;e|Zbl*K%W=G(ne1(f5TrODKxbpS%$sX~m%!Z0D#==(fan;u+7CM7JqHl-N@zyO6
z<yEFio^vxq2Ynu*<N}tCYw?m2+b}MaU%6vj==EyP#0)dmCe~qa42w>KsmBI`*3{l~
zBFi0n;!itD@h9sD#QN;ihT0VI(zJ$n@Pp3ojl|N}K|s|Sc8^?>zPN*G`agE|(hKS{
z6%|#riFsLOn&Nn?^`9Bp>y+XA=CNiMDcY)wZu=kCXQBj0fJ9ut`O7FWPa!3*&#WI_
zkJ3}Lm0wD(ATTvWvi^u^D>1ct?&^7kt`8^PRRqgdi6wz(feUgoIA-WQpN=*Q27D8H
z#&~who}indqKvt`B<y3HLf0!j!<m%2NXgDbC0L@}aS)wdrv>)<iBL8C_m!ZT$iua@
zp=?Q$bwhKinxs7noHxK{N|)O3An|N0@c6m<jYw;Jp=&hu<Ppc4nYDmoNzXEK``yiO
znCOlYl^ZS`U;f4kmC~Ly_gCmD5`^P6Hg!J-2VXqm{GJbanL!4n)jzcVk;f_ocjK1R
zT_o)zZl);;FDom;r6gz>zTJYWCs>!CdvbN_8+kX#HV>`vBOQoZgBW+iIsQ<_oOdbB
zv4|<ZXd5i>aO5sphV4#N%4>=m@TrSRVm)$2L9M9S*sync8Z$gqhLf9h9euQzJPgA8
z57+z;YF*zn3neqVAW~+^;NV60nu+_c#FDg~E1`O+8OD9}Hu@c23`=9n&b=!Z$E(S0
zAP!($T##If2x=@V6>`)riUk`_RuynId$6~&S(`UM-sunj6a)tqwA=JBwcYZbFZqs3
z`k!Vio*fc!nyyPm(X^utRslHaErD*QOxWRklRZ7ORxfPveDC^!F$LE%%ThV+tAT3O
zlcP}&!J4WF!h@4zac>r_{=fy?ht)?1vW+{D^3{N`ShAmu39=@zb*@E%87s2q$4oW8
zaszPea+oG{B@_hFOS)<L{BsaGD%M|&(c8^^v{f*9{mOIXOH;&bwTH3|qu5^MFoto5
zj>HD4hV0ZxhpQ+TB#TlPB59v(|IrWsb770gXrjc{s}UV-CXGDe{Sg6?_3)VfUtpm&
z{ME{#uB2b)wS!m8qW}ct0@dc#RUx$hARsTzH%iIQe@tWwASIu949OBIka^a>416gc
zHF48p@7nFesi92WR7V9Qi3hwT(z*0yup4>64SU;iVE>XLLBHKa@DsYUOXoMU?P^5B
z&L;l=9^oYJfE)0p7hB(+x?v+kEhWi<xl-m;@kZ(_5`pC>u%<NMmQn@lPw0Q1NKlIw
z8S*kwo3n#o3BDtI<C!*F8hU?^^8ZIz+NdG#0p44C5_2E;8Q??R6Gib1{cX6V`cDbu
zUi_^`ar7(iBrg}j4;$u7XOz_2+YWPbTMUOMwV0%1H}b<bert({{<L%F&M^@@C77PY
zmwsRK3+hy<x*~@XLI*eKmC_I3L1#sE6@OT@iBEy=b$Q8+vAFL2?fK0;_gM}R>Ct(Q
zR~`IcM;<x9NR(eJ8V=R%;7vBku)&MB(}PsLP??4pXZBd>_BBgcOpl!QC_S?gDiESR
znKx`WcXU7wVh?)J!K;>c%*@R012mZj&HHo$P_gNzaX<(00tc*YQz4f<jJ({B#>yT6
zI_fL46a7B`6v=;hy5D+Xe!3hL_hr}`^wBGYK47Aj85+sb4Te<y(@cM#gG2|}3vD#f
z^E5)c9|gPrsZ~R2=GS<wF9Ik$2RvdKqQ<^g>=T4~T7Lks+(Cq243)4qEl<5ShW>H8
zjH?r(ZTtbXc=0mtT`aI{lP7&ZNa_ZZeE)PTK&QF7SL^dJ;EXGOv0)GE<5S-EdV71%
zU(UKx0v^@k#y}=2oFbFxU+T&sV4V5YW1J#nIy>^@>(`BZJ89^>JmT#@q+2=Pmue&C
z`H(#mKx+0-TetW-z!O6v5U;yU-jz!uAM>6A*Zu1+Z|+Nqh78=<?Q%6ar_<#*G^oD;
zK<9zkcHRJPWr2<oV1q70JTFtdV>7^Z$j2!qSor;=O*@2%Rfg27gr0^z)1!~#Y7D5w
zWPCM9N69cd8<2YT08m#uocVzgXtYuU4+I&NJw0?LY6gUMgayBtZ)ZZtvQy&Sg?PY2
zDzn_L0sVOWKzYGvG2vF#ZoseDw6EJNr6Lf2tnD6}nd1%YEfNyHbAXr3G5Nq6Ee%)k
z4Fdx?@nvvP|92qmj;P24SXd00I79mgs=+W|n}1@V*1iW39ptcR9ND}>_{qm$_0z@B
z*xciCK-=mCwKcpW_HzIBgO^VLSO5Chu`${H-+-c(fjP0y@1@?NV+kJIEc?qUkK`YK
z<{~}$YLsV<{~T_X`Y)nYt2*-=oWWgGkC&9lvTP%3Kn!96e;HNP?EK<>1V~!6fFDgv
zhBBeir?Yn2&qL!fV8TqiYP{U><Ht`Dj=w4yG#P9PP?AV^w9u?&>5X9Yu_>CW=|2GK
z#p@Q4-hEOvPO<-@_rv3Nf(L7*#uXDtWt}jR<V$aar9e}I@)_4S=HLYBCUoiGEXFZh
z%hB(mz;9$n6_;#>vlSKj3sVMEozEF)w(5X0xz6$k=O#&|ZkQ^gQEqy2rb$CD<*Asc
zXz(CR$54PV8!_6lU+!{TMuQ=mKz4><_<1KI8fEij*g)0hdE@h;KH&VeMsR&?b(dkw
z#;50=F$d4b<;5B+k&YZh1ECE0pUub40clCi2Ox9MHT%8@pM|BWv|w(mQvLe+*tXux
z+h4zyUL-)Gj(6jP+I_5{o_y--BWyVaXSH(UPF&9VTz{s_$1N#&Y*fPuIA0uw?ghpq
zUv(<-&-R-K7Mux};j9Ljjr&vcQtRmV&#yw}i>JhZ6zm8P9en}ti%ZI-R?F~iG}B4R
zUBGN?C0~e~#d!{W3L_Wp7OK7S4zTe;Sl6fmNwO-;Ld`Wp=V0pSc0_h%<B7V=lVMUz
z&+OQ(iH^5Z*@64b1p(Vw^`Mx#Rd<hwk)nB4llpKIa}5&nlkLFGbS^a>Yee8o@dqq5
zQ+rbEIPkBke-8?X6`KE3l5TBdK<yV}JSxKl0W)4@$+U~X#!>h2TA4ZXH`&QR7D1>I
zaryP594SESuMgzP;DnfYoSlI)JaDcBZyaeOuA`O8#|upDGF9$L3$be9Y#L_}O1tO2
z*hi~ZHqJ9I5x4QxYu9v(@yK!OV6tMSXrv{Zhl2j8h|+Oz?Ij$b%(Q6d*v;U^-~4rI
zn}GJkgEtYKmNnp4-@pm0w;i+pm}_kf-4U+=H_l*k_)0l*V1I%Cu-HP^!n_{gxm~CG
z+^|BQrYr)UR(6>1woDCQN#fk^3xpLP5QKbs|I%)>G77E5Jv`L|8=qNZ=2m$9+?M_K
zKw-0&R3J`FW|7mp`$~Y~@Wh$z>UMVL5q`chWwXpr{XEh}G!MQ$q4zluv0RwQ;Z}fm
zJp(oir`|B*10(15E?ET-NGmD`J}7^E>xpY8H9P$t%TNzh=ziMkN75#qTt|i3!SYuB
zhH&>~H>skW!XEzTK*Mb>Zklfd%YT}C?XBP59v6bm!NX6c%F4<vBs(X=o0#W8Fl-Wv
zUB9F^<_>Xlo^6;)MJU0Lre7=XBb(76#zp=EFaS)*as4(i_K^RMeOoFDfAHHba#jT-
zh2$ZuIInAqHIR$?AZRT5!>Kbeoo>?|*3eUOs(kd6gZ9xpm|Q5V0ZGLEFM)3r`=+`9
z$IHWvxW?-9GNJ>YAU?Mp8hUQ_#vN_x0{ZUDT5RzTi^)#hXH@nRhLrJ<^gOE{8}Fj1
z1gSE%&AUYT07{qo6Xu9)neMuNoo8=YwmJ03s9pg+VQ&OGYrs1wo**Og&0w4~!?WU9
z(>&djG=mENd#O{NeV|V9@7+Ow%fG#U%-e=IV~zk%$z$mR{QCrmh{1<sST>N$;z)dP
zR|x9)WFH7Bn17cAN}<9wFStQ@^`35GxY?=hw+}dyxb}ryKVLqof!O>~zA4F9-n*@I
zpg+QY_?^jNLseB(Le>|l%dhW-9yU|=+9j6yXdZ^i{rjW4TyCy8jXCnb(ryro8HGR_
zt?bQ!dW@!xF!8h!7quJ_>v<lz_~P!Lfveoqc?waGfxy}JR?EjHmIJl;4z_1Ajqx(f
z5K{IGs=iDws;{eKFj4F23DMgP5Yv+c+kV$3HH|l(v`qVW6n45J4Zaw+ew8oPUiQt>
z`4ECcLQ6cXM?7K|EGM5Aya1hq;@s5DWq?OLT>04UW7#BXwaAlZMzey->SGmDt#5Ip
zI7tCs`#@Vma0=TliEDe>pBKf(a_Z{SZ>8h{+@TG_(fnTE6RC;1<GgK4iD1en<2p9d
zkQ3W96GWsElYIOk7uS}65{u%fmhwVj;K&=Fu5fcRGhW9O5O%=j!T56^tFk4z&-TM*
z*vrZ9D>3jiRNU5xp!$Sg+Yw;2HbqG<5u%XUKafSw)f(AkosPt4TnX*=(4~{6+(U8_
zrSbk!_#FQ^?(36b9m&}DP<8PEXWMonz5arvyW<$pT-%x+*aJ*uER{VMj*R4Xe?g8M
zG#BvzIeAcha4Jup6MzrnN5&o$bLLeZke-Y8D??2^>bp6ZH;I4sbNc!Dj_P}I+Vu@1
z!!m)?(t7+DiSCL@M*EI6fU}{CbqNkiWC@}#7dQWqHa4^yNU3eana|g!bswl~49?a)
z+x{{xC<M^779T;|CFHq2Nzru#Zc&?}qB?7PBQX60+c)AJA^s6;yO84ZQCse}A|_%a
zR^$NM#UBBBp|v#!RW9!Y1@O9<?Dcb_5*b1m7?B|QoFX`Gf!b>?Zcsmmn`I--9H$(;
z`>~v_(i;I^S|+a7^4yV){q}4nM_a9%ddFCl!w>NQ<hI0S{H$2VR@=TB{+2bJ0?_)u
zjL~|VfOOzDKJl=ZJHWA*5JzU42K;(bQ5p0>rC%;nmYFd)>GrMeVeF^^>QQ1IX5&ST
zKTj-A#XW9oPG!-tJICra@!lGgt-5P_diRmx9_aTu+*Z~93tWeTk*knC<d4R^z<QEf
z(B^s5tY#aP_V_L0L`<Rqo<#HY9JnpUmc#s(&I)h500CQ~-l%E_O4qtSHl&P6S&9*{
zcp@@%Umn%C*WeMvp6>E?1xNe~8p??5b^n->FTm|ZYG4-Xk%6a=FGG94&_wuD86(H3
z*Dyt<Mc3P>y)JlH!G1oS{LK5jc1%yTsEGgLgCb9F(a+O4`VSdPky4k6s?E-j{HShi
zZ-=gtGxD!8kBtG)`z|2CADUt#%+uwcSSsow4-_uJNzMMy;$3+#olB!AK8G#C=-oYl
z0&_>fwfUC&w}oZ7?P3`I?K+h*MJ-S)BT50AY84n=x$PWvD-Uu2C*f51ii39AYJ&TH
zrad)|*`J@E|D47B=AFkU6k2w5e!uMmK>A&~EHclPcv-4YR2tOeLRWK>bZmPXL^6l;
zAD}iO>Tf|@lv#R4N*Mw)G<AK=-CX~Fl)ZUe&H4L2KBbV%pd?#lNgI_cDciB8J)wQ0
zvXp9Ch!%Cmm?0GHQOOe0rnI8;wxzNp6cw2kTBWoJ`Cj+yoKrFL{XKr)&mZp(rp|f2
zp6h*I_jO&jLH;$)LS=6gB8rr$y!79hQw<aS)?o(O<*18U{r&q){dKGbyyJxX``k)`
zwY~rdFQ#2Njg`U2XPr*yZpLe}VyK?>wYzEO2T-#T&+j~>`F~@WydVMr66vL_x`l-o
z!!)A1cM&=<4#&dLj}wHa-Fca6BRuUaM~{Hqa^e8Pf_V|;c~oS~+#4G8u(P@Naoxi|
zSpoQNx33-A1N|QH9&E9XLmIiu%a_=>x_+$-_4)G)&gT>R*@@CJ3&!mHWAKV##w1@;
zcp_)Go*$x3bUDK{&1JKj@p2RK@8bnDVn5)Un)}cE;@2lO_6MF5Z7~L4J0ZnDSE|v7
z0A93|0}5iFLl!ZiUdNv)>!i)Hp7Ya};?DM*xD`NS**q=~Wg6aq>MsZ+vt@)o$qDjs
zW^Os3cg9MdP$%#tBf~*ccX5Vxk<HF`+ObvwqfI$*YHiipZ1={}s)sMu4qQni$7{2e
z41E2!*`UzqUHwanC0S09VRzrM|2)UBd}Ct-5$CVx)F|&16?*oI&)m!3g$vE(R-0v=
zfWN$?GH-EmmkoztGK@1E#h_j$yh@=ve;tYubDK_!i8DXfFoJIo66Nlb*P;<C<BrzV
zO?suHyH|0w5haQ}c);8&w?PjGcAkjRP$H(_I2j)|*S?&mpbyxu<qqVPZ#a}?68-Wm
z!Ts}=xcy@fd4Cy6l<+wdpDz>=6dZnL%cmQ`0KaYo59`rgb_8?{;?jJ|t@AP@``;fn
z1P?^lpMh&WWBWE`3!J!2dEoGg*iObzQB_0<m>p-g4H=b(m-4^b%y}NQ4*}{`*R(k&
z0c|xA3p2nnQ=c<eKVK(U4JiabS-f5bLQAs3)9Ua1G5E*zSRxBLW@-<X3|aF9*ADVh
zVqbC*i5H`};o!SPK#3(!IJ09OSrQ#Hd4TuHIjvre<xyNv9Jzj)N`4C)+!oQ}+iKt(
z*K$7p_&oxm6Z`o@{~IJ8>8>6N#P>N01AXu6dJ9p?lh7{52Jyfg?&&F_k_%gVRK)ln
zhLbiB`}W!;fa$54p-`LZnx-{V9RGZYeyy+O5Vx-U{HWiO!39lgQ&A9A3@WVtrV31N
zKC0l0Ql4tWItw0KFKLBe{_JVBeIS9wpcx8092l?I4^%fU%S;x!u<L8xP7pNwLC`>v
zXy%Co0lUzN3xB>t1VzSjLdyr|SRTQ_nR_19R4$N4F%jr=WQNMN6#~Q6^EdtQfOuU_
z&E1lig~vZ6Mxlx&brsb9%S&+qT=%Nyr%Cwf%wpD!WE;bhoB8L+!a{{3=JZo(fJ`D+
z^C(g*NhAI_LtYMqy$Ldo&1&DOfaIEf(x77FH7jfz`5AA^R%10!=*SrL11&Xoh_ec7
zt*q+)&nAnq_Bu{psapDUN!p}IG)tW<tj-a}-}c3y{m(bU&$vpS$Wu{uE>E(bGiTF8
z+4+%~dvw&VETzRC`vsHmI?EMR_?+=dyZ&QG%r5cZ{}dQmQg00k1Q=9WQkZxyIy7ZD
zX9uz7@%j9;mstF9^DHi%skB==%jxu#JGv?7optxh*6`C4gXxv_e)|yjtCAG{;Xfc3
zRKiloQ;FOjf=As!C9}TOu`vaxr=!ck-l0$VJlt<5@4e+mrb|m3H5ez)0N2aeRdqb=
z@J=EohyU)>oa~1p>krpHXX?RW5+%&Kky6v^Q8(*s!`CX%y%~rN>~*((8$QH#L;g>3
zJhN`DR?~eu8N;LR_7w$@lfTJJJ195Oof(Mh$ZNn9Dz<^YW`H!rc?J#ZmyOS6O2oIw
z#P}Tsy1R_f-D^EVc+XvPBrOMDHF7M9&AYL1+!O{D4j71H4QXrs;OxeM%ZHX?qHqMa
z=1^imS5epN!qT2O1$qJZPd<7rQM!kwt7HwnbJ`y{Q7jYIz@p_IrJM^*<`_#;`*G!-
zga&1*wtBmzDWzDTv~3FtjPiNK`|0=;{U`j}hD;vw`~HebCF9C8wJ+u@46qN2&>l-0
zceEeyg<mASKu_jupjrGE2RRvd=Ii4lR@$u&cNw$vwTkqOwXUly1s(>o-eDvceD~L8
zh=H6LWVZ;z<cB*pEJH5*@1U!QBK$i+Iz(BqdV(FNV_P;2Klmdez{ejsUP+eu)vF>5
zhlr?;D5=P^Td2I<xf;twe5cb4eRsb0pMRBsBhNAHb<@Jakcg=+mFCsabNf~b;73nr
zU^KP!CInM4<0lps^Q;pkap6Ai|6sc^`P9_dk;_Tg{24dy!?qg>1{B~pLw;x+&_56H
z`Zo{9d!<(wTugd-`4C87BO|u`o6~~t>>sPdwH;<j?%=)~!a%nPp^Ydi#2WJ-($*)S
z|J}n#Q8@MQLp;9F!};OAXr9c8NPEsQc4?u8*^Tbp8{;shC7al{XUkkdGGtQ_a2)2W
zOUr<Xy+nv_Lx5(ev~JYICo8{u>p7b1K@uUb_9s#lhbyTjwiCf{5T}IYm+vP$e&(wE
zkdEKWcB$QlCrjPeUNh?MX1#B-)B}!@Pp6oV+$)i*6^qQ;?(C*TyMXV<G9&4_X#XPc
zl&E?oR^M1do40yo-HKJ8(IoPIU19Kz=lhVcZ0l@z+71(j%wh+N!M!56fPW4zilbl5
z;)KxGQGGp5krCXVF;52-^mm9pu=}F}{UQ!Gr`%dWDeyit{FFD;A$21I&%x$ovXNET
zPJ_cdEWl^av5E7~)r5Y)Xi-Te>733F%5H%sJ=R_B8R|kj^2+U56Qm_i(gJ?VpQELp
znVESXebC2K!<B6W0|5l{H%f<$`|bseU`?OzpU-@s1XSM{Ieev}Da^W=Cb?VQ{}^O5
zU%@4w=lhL9fix+};`Duw++o#zx-ak0u99>OkG%;!XmLs_ve`gbyvNSu+yBoY@%zwl
z7MCwvwCEl+zM80PyCJ6);~D^@E5qD~hOA$3?cjKF&JT*fikXd)925)=ZP+axCIuL7
zBIzMiBptKwoOUJ@vITMpi6W%-EOw0l2m_3j(M9T-+YZ#rTgjF`lPf}dg>2?4nDB11
zSjo`if_Cx-oVVEX$OAU$Ztr+u=Vq{d9oE#SI)zm^?f0jIvk6Bi?U}t2)}oue9h7~}
zr+GhZK9nxe(tNM95sFxu=%Gll(h~ld!JN$6PSD=R!*yrzR{5njDK}xojuB9sG7~TG
z^t`&!T^GO`1!%`Ljcgr?TLV}0?aZmN?1k~eE6cgj;d4z4)V>UYq09&gijL(3#xgev
ze=$6Pa27k%!Qvbv2^qeTMhD%TFV%Pjp;ws>QwKwxF5zJ>K<BVxM@L5&+A9h-S`3`D
z4pINW#yZIob^gD8`XVkVAZ;d2kECuey%-)<;!U|vG+~!$X^{@L{m%6Mt1~0C6mn)8
zoJ-4fIlib&MvOdz3ZNyOC@QUc?A}rF@QTtW003=TUZ%!3;Ma#<E(7z92yxol-mjf*
z1X6HhFC!upPzcYL6vAvoMqw7703q1i()rS*Ktika)4N9r8?-OpN0&AQs%seUd9h{F
z3*H3(3=v2=<2*BQthe>IyWFNbXZQ$)|86oKTT*$|G<4T^Y7*pn_wcy(N6rTpScpj6
zGRgruO;F8vf&u=y^LKdP(3vJa!sr1CV96MMOhiUd@Gb`<lypbzqr3+{;d(lD_s*S%
z&j+qh128|4K1n_~dnVOTBNpt?y$Pox#f>nWX!94h+&3cz6UTtJSl-)i{`0G|OxNe1
zr=??#bslX-T$(|FU0=KJp+@_Z`5xbKWS7u_F4|8^OGU_OC^4hVwACWct#5lh1i#{d
zJmapzrodC?tt<EH<7GX(d=5x{#x7{v7ENl!mpr)0`XCyzvhQhN4a}nsOKFAKZhD!>
z+@LHmzDJy6hxZYFL?%SE-JNXG-)-A7)1B%TO<I!WLPcmxsREqu%#ykjYt+6?v-8Q-
z94u?!RCqh&m}jvCyuH#`ikoBv`V8}Ts!n*|_(umk!2@RnEIFs`3srMi@u(lZ7|h-K
zh?khh7=4pLL|3F!xDPsGh80DABW*WHW(gIw0bUn7*Z3t^?ALYihX;~`AHo$(+9sl>
zl0x8%0hfrzlJw=z!Nq5ut#nc6v|(9)$=@r+Gv-2js37aEp1<gaC&K;!<syPABi@Jz
zJEr(CymQbY%;(7Lco?y9T*>@`siFyqLB;xVHTs+x792PBCw8atE;f$7U0&s(2M+TY
zuFucKmo#Ls6s~zvK~kRo4H~-1HSu6^yr;h`w3h=<(lx7O$(0=YtFo&2h%3vGD?i9(
zwGYF3cSSL}US)xI??>Yu(R+%Rm%!P?9SF%18$K28Un9rKKu-9r>M|Vw*&$I6A2utG
z!&h`_N`?y+1qc;xz4KR>-0v#C=CSm)D{X%m5o7+rbnp?FXOZLtY3w&6pI5xugR?Mq
zQYjPlpO``8fh*~?@;{7InaSA*{$gLZ^oWiA{;V^jCJqpf2d0R%byi|%l(yN8#Q}+V
zT@G6}3V>Y6{zIrvdDZ94tlXrplPNN3lu?o4y-%M`e*VCa&>vs~0LDHzrS59p6=i!s
zRXZPVXK?A;WTDO^zo!^sXL_oYu%6nI9fh80?H~ylrN6k6o{@16t%L2k2Q9M+kkyU<
zIG6Xn;8g<xOa}+fL;7#9Gn2pjjEwn(%`bFwT9I7J8Mi%?Rb6d&!(^piwfgrvzox<z
zq5ub(IBLm9&IhQ;5#ZfR#v=CBkkD@fG<_T%8*|H0Lo`O`FB>=z9T_ogU+l8Keu(dY
zf$(@^tZB3ZE0#Gno9e7ziWSizf1+5xu4V;Vl0A#}{t7RQK(y7GM+KOB9(kXlVL2j9
zRapPi&UvaIP!TR&d=<y)Q985R(5TO=2$TaK8S9~J9eQ(4AP^f!A}IScado!Ajur{+
zI}yaQoCI;^RiS8Ddw5oWv1~6{iN$^JVDQGFj0MgB0x@DVX{j|$g}&-Cs-K;Or7)gg
zXkx>5iadrLQZL$)k0bE>g_FcChnHbtVN2dexoMi^?`@tV{_A1Znl*R)mKChwPKd6+
z!l5y@^)C#xrKwxyX$!$&f)!Gl+_Aq4vyY9eQ(F}|8V)e;dr<_f&i>y2Ma%5ErTf!$
zE(lrHt66zA#<>89zDpK3`#K7xXC*~ME%k7M3yIkLU8NU{QO_)8vJ&1>8`*i<kIl;@
z1q{a<FY#&eKQ3Vk<w{fGZ<794eKHYrptiQz)IB)qlFv8d?y3<I<EinW=6kR$l&A>M
z`*y_2iFf`U6Nu)BN#9(-T<47x^9RXlehyfrDh7HWWpjJFIhUneAf-s-S6hd!Ui<W*
zB=vy18>Q;z`TO5mBh0KHM$A9BT=0pau*|^Ya{s`jB>kdTy6+WNCcGQQll9>19^7JW
z6$v2=6|Kr_1(UQ3O=e`=rj;NI!zQ!pGl^G1k^-Pmv2|Fzo$%#;5hVpWZwJ5P@-XHM
zb0}ZEU?c<eYVs$99B}LZM4{T`DN}0EILr&BXtZ$IGIf95NhUUd_mlXg=)I;bXmlEv
zWL3E)7rr8z)faZBEFA!B#&2S69`Z%DYlwKVNIEDe7~zV>h2US<lliZANa-IIs7Fw3
zdbS^CFn7`ESd>B%RAp5VhG$cy@!le0Pml+ZnB$PM6z@>t$S2MtU-fC{dq{sdR?4DL
zIYg6))-8dkttF_xBug5KnU`Oe2GwX#0LB>!F0c-|H6V51SP8=y1LV8n!xWV8uQ@vU
zc^yUa?J(O}M9uX!$j_;?dURsOnu?>*F@Z~J4rinPtESoQy`F58Tbeep{?+pZcg+$R
zeh>oXVs3p+)IAfOxktjKvI=ll)vjAqq8Tf5k>w;BQr%aURYMkZ_smrL8qV81J-4nM
zetOHv_;3m64>q6wtWV$dOitvK*s#moDfCgWX8ky!bgLy!@L^EtD`iQ`cko{XLdA|5
zS+{r<1^Z#O+8Phw!7pP_s=O!}_E}Vpzeiz|-m><!@lh4eC_kI1;$(h7EFyjggmYpO
z-?Kru^29C@>Lm$b=axPNDTJNInjws_TJh=Of_m{Zl=1G--k~aPX7_E1ZosB;I5t%^
zEms!gv>52F*5@P-+-aOY^v{dsh8l^9U~?N*mMuCS4N22ACKza9q6CmaQor7(&^8-o
zpyIB2VI3Wvb}ZLh=RPA2Nx7UbI+?Xby0HF#(I+nrEXN;)t7$bsq%WLx=loJwc;PL@
z%Ra&w9@Sk2^>6A%O#PkZjr`;YMaj{5Pq94J)(1|r_;7l;*WR2&JSlso@Zll4Yi1om
ztQt0x*uXCu0f;Dcy?T>z_bn+}_sE~96tJr(>q2v=q<t>cz4ui#&2qqqJKkQZrMRVY
zIcms6t_rQZBBfj`F2mcKKj?MoOY6C%n{bDuM2wB+Wjo7!0dS5-u&d_C1mBCl6f;?U
z+J0NPut5C3+1*ucPc~G?RADRG)Z9JN4m-xV)S|v)QG7|&*NX3(q(dc!?oZUtv86cE
z&>=%rp1h@z+a~k)YJRL};hSNx4`pvtK8L8p&>SbR{MxHnE7|C_Qi}}vDEhKwob#p9
z;#>9z!}NIG=W#xmeOq`W2jS@q&cA7q)zon#7|3Czo}LOL+^Ex`P;_t0!Qa$msPPqg
z;Y@w{W^)%&4tl{9oCM=Trxy<HV;i*iY=+(;6n!v<q~`==izKPiJkhti*)&w0g3Bg@
z*s-{(-Vq6L37Ba%sQNOwJXk#vuz9i@J$=PZ_ZHOPU10K5fUYtVakE=o=ZJ|uPf%j)
zk_MwM7Hn>z>DD=0R+cOu8MS9dt2_@2(7wY#T&?*JY3OI(3WxpRBf5%u(Joa4W#i+h
zw5GXJPv!YeRoVM$r&PZ@5I<1pL(VpN;C8~0l`MyFR9ihG;qT~wP6xl(oh~}jn{R=n
z(mwt}TKZ+@yivZLDUp#(n{VJuXCDw%;&nTTW$}Nyq<wjk4$@E;Ten9J3=^B>GYTvH
zGZy2$M3ZYZh>~|aQYnA)`Qd^mcWIYWJD3*2G5`Q%dZ_-qfmFqn7^mZj#@s0U$`~C2
zkPPdI1;D;8P6!GS+~D^zAr)=P*7s%Fdc3JYn?i}B;))6uo_Bs#3CY`Ja;0|$d{p>9
z{DhfuvRc5rR2!|lesRidhGL8tyut*LZx4<MgO$qketm^<x!uUp#9qHY<9lG81qXDo
zRnONRSjNmBpxJ#l{aII8@~dc{u<hFwu;xLDLIn9847|?X<4kU66SzFnyBgNB1`6^6
zi}v{uKcyk_VJu5;T#=ViAsPP!QI#6#>gX&prsyV1K{P}wY;L1i3-L4jzYxP~qtOp}
zA^VL`Hdk_ac{<y)@&=C0C%1;3#PwxuC!l;fmK^3LqS*Xp8*w?wjFoQMb$tPl4Ab?K
z>;D;^WbxUG$G1E^k>dY~ckl6DmexN8Nm)vNfvV~O*NgA$m1%dMuwZM?k*TbxsJT)7
z%?U@sa+lY8%9*o*?pfk*mYF&vQHQjmb3~L}hGw%H9V*Ka`zr3G*z2)J-ljZfghQ!M
z*G~y;rqr%C%Wt67FL&uNl()^2j%^jsyZ{Z-zp9Bou>GS0?NkrXSo4?r;%c#q35u3e
z$-GdjJcX_uzye`GCkbfmx%qzi$%@j?2(MDIdrqwRE&g%>cN&ICz8yE@n8F)rF=baz
zWkEZy@(XWegs_hMSmOMV+WJK0ZAT|~S)w_=^!@%#tFS<!MrO|?+j_)VGo@xhq&I0-
zy{*0cp1r-3aKTLlbR=OqesGfO%<@|X|JHelv`a8iX?{{Lg;94~ipvzq1`8GaxzxR(
z1Z6L@oE%ewuGN7frh8NBIRO;m03b(~v^>2jkw7SF6mlQ^q96YCrZ&5ZbGq`T?Ash`
zYv$_K?;*|aqCZhym=9+d)O~U)q_Dbh=H!p!&v{Uq1P(?jVQIbXwY9$e?|o}<b0m$d
z`%_f+Fs1IgYK<2R_!;BFUG?>3OS-{_`hb3g7iD0M+xzueT3QPiF5Fy|610f#(+>+1
z6U7mibP(ee^5Nf>zAh?Uc2nIADLYIVTu;WDPjl@3_>Y(lg;7%v^#0>gb3{5!B*MsY
zzukq<aB=hBSCI!H6D?DJPM1Kc&@~ybN`9C(d|JC;pUiEJS;Z@;si!Y5RH7fzcc$c>
znq{5LbkI?BfT{K2M=I6J#CZ1;dzI)%&PZ_waJ&wQ2o|k@0CY3TYwVe$4x?I}H;$m9
zLkFHL@3{*+XR<GBac4@&ZaO^#Nnqa=8adFr25z};mUQ?W?6eIeIS2ckuzOJKL-hv^
zDY<*GOl)jyR?OKQmMbz5b~z8DRIeHJT>r6zZ7)Pj0W9_xg4g@HfzKvXHqz*_lPSk)
znOFf%_T;3bq_{SnfGH{pWS4x82&a@#)L^e$E<>;+p=dM*XL`)fQaGl<Jxa3VMV7Q<
zo2g&;T=IJ#eU1rjkpY4!r}_po^nxSOF%zF%(hJ1pyNF2Q*+>9tficND@-02^wRazG
zw&5o$&eL*=T`73%M}07mg5zZL;&9=A+PY<@!dK9Od=SWbCmND+vqO`tW#{i{dTyL%
zt8r*|Uw_@@jpwgt2sWUv7G-=N$}+^p46s3;XZbY@Zl1B1XJMnZ*mv1VxQq;CEf+c*
z3e?sXIbBdNx%Uz7$-t|iSeo454_8kc2oVA)v8}8SUh~)JU5bWL&oUZM|0Vm6$<wn#
z@Ovm*#6R+aURJk&y_EDd6|)6QP39)^4I)Q~OZRFou9~^wm#{5+s@(K)VuFHph1!~#
znaxFkBuv3#vfj#X?%rQ2s}-z7Q^E~ygJRz1o%?PG*2Nrd<26~#GA)s3Lnc#p9Le0B
z?&OR=J1GQVc?jb0_J;X!Ej2hjY=g8&uDlKOWl-DbJleTy*Aeo9j5k%I<e`_2`7z5o
z^(hd3Ue^DK46;iXR5U++HG$ZEnbJG=vWMK~*h$C^;G%L=zGRE5^12mBO&I+E7Fp<o
z2fI1Y+x}1QLWj}GO%Q}^dAQ<*B(rd5hZJJ>9)ks}QJk}WX4Y~LMdy2bsOrA*2?8py
zl!MCz0|^i?6nr?u4S>F}^9BpLs>>O<4qz|Saa8?&W5JlQYP7F4C9eq;m6etGi?`?X
z<ffc^^YW$fMqlI=a!tiXfBhygc}L9t?dv|}_PjCMXjFKSl~m`pc*kx-&RM`(A@FdB
zG6*(Az<JUkIJi`2t7)BFa+Ye8Ib)Ry=Z>;PkV3HdZHI)U%qy2ukUfZX6-@WNdG3t~
zxxgpy><5e1;OBdG#aJb7@$m%aD;GFnk>D(eVJD(mE}vy~m=C&$3DkE8J*dyJky!5O
zzV7QSV7&58(OW3Z@_&cRYV-3?=JP#h<cCCk+|mlmib@`>u8<ezw=}<>%z*k$W;7^7
zSgUzt4p^ccJ@7&*Po0+US$YN;Y);Cx+c=Y-Ea~s9mA_7n*ET=jf)6h_;>TmaFe{CA
zXfOYsDgO{@^nMJ~2hoNcLo!TB9BaEM^=sSZ{qf-Rxdond%29XJWEGTcP@pqP{$3}&
z@(5G1X*1r3P?o~}`C#(9euCiTpNYV>2J)?c;XL`)qb`J=M19Q%c<5?ZSEXwGjWP2G
zuSk@^c-ft5!Z8z}TVD%DVS99xpH#oL4%@~2gW1h}E>*Z{L0a8f7$lVnl%@chh}Um6
zt671w7k3SCHg6mciH;r1ENB{5wgR9qWhqGqi?X~w(#jU~(N9^A6?FaDuqAC-4?xF7
zgtqw0lD>q2;*L#PK*Ynu1}|h6a!nWj^9%FIhu<ju3}B*EBsW|Bm2)HubTT0<+jHE8
zLX8CJ=6c7Y#Df~9c%l)&+Xi`w@M?ctt<J~O*EM&@&z&-Pa_PLdS_)e%_P&xL$ju=4
z+m50TSr-`iW*9|ZQ?&kT;ElMen$hp&|03+3<C$hx`pc6Cwe&KvF#^hGVyCLP?<78}
zSoQhD?my_n4!=RIGqc<Bz7%zBW=`w$XS!PJ7$97L*b_f3JNfkynI0CYTZEaho4ADi
zP+CUx9>wY)`yHcd#rk6tPo9zsKtWHE3K#y4X6ndS^R{D%j!{GLcAPSqRTr773LoE~
z!Z&PaTo2zbD6Q+8pwV8S=JjmmiTQlb5S*9u=WNiw*nm4dgHAE*y=CtnofaqMLM<@Y
zK&$?a@VL5K%+E;$`RUO89T60saF_Zu^inegl9UzujQTu&gGQ70<0_~zxVx!O6Rk~n
zFDWlw5?u#DTXIzD4d#k+U?+=&SOhAKG}?`lQ7V)hcTqO3LB#+2&GzHYE$$OYA64t<
z>}7Vz=ZAcW78SR&{+!LYmpx<%8(@8|W}+!jm0TlZTeN<$u~WB(_tdM%hkg(5a)HUg
zg-NyX{I|jv?%FnHe@(m+Of=pL=bHo>KnQv}(0ICMTs%u}z=h5SewY3bLVPG7+;fd~
zg2gjgeQ|g|{q;19MN4UBA0&Z4<YZ;xqvMTQTbI~X4zmR|X4*fU!5sUb&Mf@AuW--r
zUx}36kFJULh_OrB0RV=x4j{z2|2%$EEd+A`PkcVOF~zYMU|kC8mgze;(*5m%y7>Lh
z#%Ef!d-rb|qqxECD<HkfJ2%XS_*vz<@?YUj3H!h}aCFNizx0rHXk@}0poW)g@f0V!
zy{jlK2mmvkgh|^_N<0iV<&{`|<4B=51`$^(T2|cq=kMv$(0e?qmWs%*;9fzEu}_WZ
zBcPa&Q_Ar3&_Shu2m#M@RE~dovT|h%qJmRBD<FnA`N6mIsd|EC4_E$Ye#*wp&5hFL
zEhz)#L+)Z4u9qK-bpvNIj_7-K?TuiK|1mYjVURbdmefQqbMB}sY>#g9mZnm%uIEzc
zQ_#D;mnb%U|2TRIwG5qWd2^phYqf9ufrhhx->04B)tX`S@U%)>b+m-$t`&{_U~Vh-
zBbxST*q?;>N-<0%2KB&y9DXf6fTSX)rF=TLyHOPm>76_*fVaST!-`df7GLBwkWgpK
zxmH!5xkNAxV}O-HS=P1(*V>2nxpYCed+M3KqHT2jSzf?#D38|c>Z(N!{W>*g^8qvf
z*LvUi2`%R@Z2G(ts!xJTlL3%6^i~7Zc%6EMx#_;mw&uA3aIcpV3HG69m&$I=Wyser
zZmxg-R%jo|Mf?>&pJS_hg+IA`GLnrYh)Zkhg7p-9oRxh%I-r^hfZA@?p-C58O`oaA
zf`C<q!(DuBh4NmL)Xwls|JT+Bf7Pt7_bv4=`hU~}a^^8dOvz>N<U2%55OTnzNr82?
zI@6+onj5ifC&9w%VgAvVJI^1l@f-G=jL+X4lmMmw>YyobaZ8Xy)<&I8ItjBV-Xo;w
zis4j<1nWgl5$^aE{b%MmzBm<h{C%{CWn*QCgmaX#oo0dkXbH7+b6+s+HR~7d?VGS&
z^HkX6ux}Uc?l9dNSrNYF+fbY-R+LYNGoAUYQSM;=?y3jDa+s>r6OOo99#rFGR#5a`
z%uYl+7%IKcweG<Nq2j;(`pea<;5Jr~i138Dhxg^SqxM2c&dtqcSZcKrZTr-x?tQtn
z9a*}9!T*O!@WMMvDJXTPP{5?v!MCx0Y1_>OgzS}1{+A8MF!{H;@Wc&kV*ys73RHaI
zs%M($66P(GV)+kgGSGIMz-uU6YYL^$976?pw9Iy^6)m)Lkq2cis{_(KQ%VF>g-5QH
z9f!~`A?=*3l#Kjj%alaQx8tCu>Z)+KGzEQBGH$0;qYkh5#iv!#B*wK!Hg4WdD~BT+
z+;YBkR~8pO>E648ze`e*fxNl<m$nIlp8dy^K$`@A@f;phBzV8~wRc#<>}{i{2qbcX
zx*}b0R(66qFtx%y;T};Js80Zu=L1ngPe{Mr2HMZwxu^iEIDb6*_cVXR>a~ATUjkws
zEM2@M#OlE3`VG~8>~@|Co#E`@?!J!q*igCW8c}GFDc{6@EjP$eBL)q*TVIrZMjsUU
zoG>|#xCl(6i9d3BJY`E>WG3%=neM3^Eg>-6B)^u<AQ6<pl^r+X+BzMUIW2mHkLNOk
z+;M(k-!%&Jkda;wNz^)$QUB$d@vVk)M-3wkD=hZ}>nuJ3N#o*D&BBlqE&HD0w0x5~
zxp7LE*ssM~O82Jl)Q9p0L0RS|$sgg`Kl{|_)8P)Sr<<t4oj2*hpzE%Lz#x|4ub}T>
zRzBW~9OoiulVn6Djg_~p7%6g6)Yq2<D-0_hXWXcw<w)M&V$~a4KI9Jbd5xpks_P`=
zSVvIEn~0%W_w{>^?{_1YCkV%^Hnt^pu*Z1ERz+pH`XFc1>arIq0(!Q%8wXG6qHpcb
zqE&ke+>Q_MF6dIW6w2o0&9*E!%$ee`7Ovys?l5yASTEA>OWdC}>JK_|@1dQL67^SE
zUlF!2sq+iuDwchg+X|Xje0lX`z1PfS8?UgU0tpXuVqGnabJwl*p1Vcu>xGG9sC{}d
z&|71LOSf;l=}LCLvY&*?V&7UT-x_M^TY9|S(+-exbJc<pu_ynDItpBuwst80pqj%l
zbkn3!nyv59NP}^{9Mw5XJ*H6Xqi#AW!m!VW3Iw-shY{2rR=;W6C;05oE5ByEp*p}D
zx7RGk+EbZMKB#om0FT+<f>usq&vLO1YC*G@mysbYzDY`I;gl&;Hl@Bxg(lFj^V0jc
zzv@N9<L6223bm_v(}l{9&lSWRGGTr@f4)qjggUo5lt-=G$yoU6ZzepG)T{nI?H})q
zF?zn#unhZ^ipSf~bY-qewQKRbdRIf?gv2yW67<A1CZXw1`^iA>*;GjBMK2;Vdx!6l
zC~(AQLjzf=`VE$Fk;z&|9=bcNBqE%F%eSs_#ptD9G&G8+Fzter*P|?nTLm#*#e&R}
zd)46&pcTRl3@(}~yIU)IKCGXuZ^1%u$K{03xPqf6HlMW4bfFrh?@6TEUOW1vT(0Uw
zV~vpF{qj^;6x*aLbm#erpoqq(fOO4HBo#XMPO0~W?I;i?$kJeu)E=!v<-P$c`+JSw
zEOS)!f}D4~m%*nltuL($5se<0QaMO0P!&^h<USuO8sxaTPf!~y>Vw!kp}UcD6q$@|
z*!YLCu&A!v2D4yt?2k8AE1i%+m~0Ie_q-S3-#=q2C(&h`lM^2wZ~oY9D-edn2v@J5
zcHEo}>%24#3>Uf^<X}FFk|3E}6ixyu!0g)~?}eE0AFf_9JoB7RSN{q)dOWKRR9Z1~
z<VLO)Ae?9HgG^wL8uHTDzV$z3>asI|Gu%YZP(w$P)CAwo^V8S$IoWDnj$3PE|Ghzd
zrD=QrG!$s5KST}O{r8#gePuTv!O1?_rsdjaRxDSW)3QEbs)_xR+fOKnq&8nvEPs7U
z*K2j!w;Gb>#??$P+r3dO>-&Y?%Hrr~(x3-z^s1)5B0KSaDeE<jGmT)HF*E7PP3X3b
zBHp8enwaPu?S|ml^;C%ORxhhHc{sQdn3c=uVy)xIJk#{x25!L+;@ojSh>-$Te~Rf@
ztGSvOluW#jD&BMin$8zI?W+NAE?smJC+bYc&)0z%-)B@==t(x6;rEnZylVz<GiOD_
zp^)9Xoty#)$xjza&B(|oZd`^Us#tk?N|g2-iKV4ka`2U_NR2ngJrG`t$N`7`498ce
z9=EDzv>DI2L7&$e9{N~TV?Uz6up;?S*T64KdD!{^;NZX6RIw8o`fXF;wzU<fWvUqc
z-F^{csiVQP>HBt@7E6D7^Yxud0m8}h9knSBS+eX37rXbqI88lN%}sx;Xg^1swJW<S
zD<Nh)zgc%BPXHQk>~i5kJsMevA;FuQb?Ha_r|}96Ldy!!2CC#mQXeO+V$T#hJmiXE
z^NBUc!P2qLFYmW8v-DT;&y)fI4iNc8ftTc`u`9H01hDH38rkU`sfsmcRGcj@%(k#P
zmXT&d$HP;X8?U-s9TJXv;q+K*n)LF`O3%)Qm+sGWDihidDSDqZ*FA*NjsoSe`%s3e
zA(^ye<Eh=q)>@uhtSHTzZDbO+<NNs1CFrm5q{!yN?HPYh6(M^FIZhVE2}q5F__BC~
z47E`qhPt{dvuvJ?vMVeU+pv(*Mb=+}5RFcbWtBmKZLqBs;Qp=)Z6Yf^*9E82G3D`_
zIBE(^-2x1ncC;P~4|2MNZh13(&UD}`ImVD_DAS;ngi=!*gc7n+d@3)k50<K0l$VrT
z^`3pukSrVIVxlwcbw24GdEQOL*F{dZzIB%_&I0}N=GVnZvb$coh}m7A<CuH>{$z){
z=#()56Sq*;-g#x|L_)^BGQ6Fj=MA4SS*=I2C$4V$=i7FN(k)ukf>#bX7_l87J9I<5
z$ofFu4eL!+BLg1KspguC?y#ufY?$qW%8{{&7efuF<~8a#`-kLLA?ls!sMCj&dMWiv
z><#?h8`xX*eg(r$O5f6ilKK<|l5aD413ac3ebN@;4UHVX{%_~XhS-Ce8qWisP<CZ=
z?a|_+j+w9K;08$8;6hvcWYD$N^0>Rr(kt4JblZQ9%JkEbmoNTx(I{-}!(_AZOkVB4
zLFGsf&!=hkHG=2d1D=tU*jZuKH@u-LC-=+rwZHxvExp=m$}8ssf*e!NAvYGmmtVBr
zo^k6}F%U_s=rz<e41UTapC%I?Z22Q?f~~1tFNntr!seQYps(4=bG4)LO?!UbYgJ*o
zry_k<oNaT58|}%Olj_q<@>EOhOJLM8ck*OI?S@|^)D~_>RR^@Ix1)M8R4#mZrZVf<
z$(ZUlZ`!?|t`ooaRDHSxA(C@%$z7}66CWjVrLhY7`9R;@ifV*`uzW{N{L#2~)I9x)
zimr}pn({JBh0_gd(yldU)NjsDrwETlrS>z35s8jbyS#0`p6teO!$}vn_=0R?c%hBy
zJd=v<M~tro9k9!g`bPTr-1+O*qpz;*D4;e*1|6woYo9eepbYt>;R(YV3io`miPkHt
zVOiIHI`iFomtEt}GTdEu+cV~u_N)x9q;sJ#tzu97@+8~WIP48l-7oCZ6kN$YbJ<a&
zA{GzaDD1f-H-kj+Xr7dGQjE3;0eYR5`OycN*ao?~m8nZakaN##534P?gx-+-MB|Oa
zB+4hYPdg#7O<f0Hoec7)<~g;b7^l{6E+`GI>pNhpIi9R&;$}CKtq&MV)XLIqlTLZu
ze@S*dn)_qS7dn(BW`np^(|GAjKzgf_-iJN&1|An|iCL0doh=-_$q83WY5<2w6lOxj
zDc!@n=^`Z`j+2=OTOWNJ=AvgRR8dtmm6$@>(Q1nh^gTOsA9Xpa3a3Rrf4d@WX#Qv6
z@OK?5;Ow@)>B-A_SM-=2dE^oglH#mZw&(b<sK#>$Z(FkV=(t>b5!~3q2@m#*A$I9l
z`Tf(%;x~<6{!Cj^M=MXTX4OsS^`f_&B6aCRL35Ygw$C+ohw?1l_Vcg+BJU}{=fqBm
znhzRl@MR5!-w5u%C;q?~wsm;n`<DKV%+VJ}V3jwy$9PoxP$DA{H*X_~GDW4`aq3fD
z);4+_rN&;~tqxX4r=tm9JF2_)sMIhjB7M>BbqBc?3@2pyf`?Z8;8YC&J84qi6!pAI
z<PN=GM9B!az7Y{dJFg?UxY0}W*<D)CH>d2qFmL1c=3D*pzoEL&Aw|qXA~>2GJ;=-_
zI2IVxtC$O~cu8`{4C}CgtACO>_;vO#CSeQ*gvxl+6k*%`5D;SY>^23Z)h^$aP#&;n
zK*!Hn2qj*89?Z3XrV;xNFrw1FQJQ8ql5eJtqnVPN!oMdtw#xg{BOADQC?q^NwJ5>d
z@Ik!au73|JB<E@(B>TFu{<NW<Ve4}a{oHkqz6xH~GV|rOqwaDNB<bhK1oHj)O^2La
zH1|*j!r(VyxeHNISK>pwVmSJ=l4|}vp|QK|?d7~KI&TV-r`kB@7sh=YKlIQ~lvH9;
z+onP>rxKhwWr7c3XsJM?@UKNic_Iws2z0<>sH@O@YX4Usd>D}BRBg<=Xp@#!b(sg<
z(ut)jsLeaE^p_C{3-!C34>(esE`^dW0`-zb%MtnjE%ly7un^T9YC(|lMeEbasds)`
zdiVW`o}AvYtUNKgF(^=MN1HK~-&TJ8_!20a&6}J1>rE)aoEQFs&jAgF9RDc_IncAk
z-m$gs{>iq+@*Pt+b{C_=hzTJquF&$l8O4EPM-}syT-1&ffvA4IOU+%T_O<Df?s0~^
zIteNh@9t}7V5KnJD)#KztskXNo}CoIU9|)6%dqn{@RJo&0^A%HU(({ZAH@DnMPpQ;
z+Kv;KE%S|M^R!zh5KtB1RGaSX(`@GDoic@4Ej|4FoGm=CG$FK;r_M47Iu}7L&QNHz
z5YA?743!m#jti#=MwJ1s$$i@A5y<4JUtKD!zxEbISM(4I6ub!0z-1j9$Tj#`^Fm%2
zGqTe#-)G>9aN35F6NQn@B%*@($XhSu_nAfCQBYFdotbrS$BIvp;1C=bOY9(uI)JI)
z3JD5_zlHJ5&Qh(oZgfAKllSqE;#!oW3o1i7;T~t7oN(m3#!X~LNu%QnOztu`diiW4
z1xZ?f#=4R{LPhm8M*u**1f^N4@|F{zBEnGS`D%pkA)V(B)kZFjWVjYNwmf=&d{%Wh
zS*Bwg;TgLnZQ5%PDQZ^s*RI@#qxLXT)NgTAHl2!YVg*{2*Qr79QKCx20WRep)KIP2
zbwOG+s6TC`?TRzZ<1Q+LQ^@tKh9cow>d^WX*^58=n@J)72<j?%6!=pE114Cca`+;K
z&ion@4(!K9Vl#t^CuF-~)qc9_$$u^zPjeo@zk42~+80kd`2)mStdQ4RQ<^2E2b#nZ
zYz(dHi`vzv8D<>Hwf-be0l!az+@Wd@PXB66=1(pUX8e5@B7jX7dW>HhgE+tO<x7Uk
zo+qX>dB}YQe~neK6-^q2;7sJsefV@L4b^BW(GV-Q=V&L;`7d_n2fK60X}<4({w&@~
zxi0@!ZSaurnXT{E1$=IWr~g)3wXsJ0PLuWNbBK9g0JEEOIXSAd%*i}&G<HwiNmTu^
zLZ{vNWyo?vQE}k#^c2B`jAj<ig{u>pACdedR1^|&vn8##25bv|;;h7gxnYb#0j;%m
zyf^uQY;2#P4n%*)8K1r0bSP1CR~Otrp#h@0OJ<aM$RXZ-NZ7Qgnw(Q&pufz}HAz##
zhzsE={~TSIKEPEzLY66&-x`IPGMU#0-t;^a+;U&q2J6TfZvG9XNCBYH8W<=`&E9lQ
zS%U0HWVh}ob1c*ZCN=ik+c;32`iWo_=kTWS;jCKpNbnek3+BZKa9-z}XY^<ObBS+R
z5T5o}tvMtCEMP_6A;#t(Ir0Y)tSadNFhXuqPsNKinDL#5dAkw+AymEE3^H$JP+2|G
z*Kr7`8N-|7M;cP*3E2JO)IdTn(^FY?2{UQ81k;urm?08E@zWtkLIW-jJS*o{*rFe2
zbM})6E)}gqx(80(*ZXi`izu_EE{|cao-I?|9^kS0W)g@yhR?S&tzsSfVS+IdRBwc~
z-cavdvri-wJ&lfH(bqcX?l}}8U?=!D9ixW2`LBQe%@lzvNkNHaZxa6Qe4%rn6Bi7V
zIq_Mbex10*cp`Zxf|~WTq(py(fe*lqV<d100E{^*jU<r=P<y^hp&k>#A+|n_RZ^BE
zD<8tuPQ%plqc?AS@C^R*^c@A`ob@Jr$vqm7-@)I+6qNCGXf4hhpD4X#Z|jcFL+{=V
z)u+jIMy`*FuDxUdMYWlm*p^4B{K6#DlN}N_YP#pWU*2|vVji)cq2sGRk&n$A?%@`(
z6+MV~r*;}~T8X2Z$qG&VZmZc~3;U?;)7<?AVU-KQx1PrA;XlEF+*1(3AsFr^#k2&3
zI55*|DTspZGBU=aGB`C6Wy)RZ5MaR&E}-*uAzeTK%ssn45JqK*mPh=<6yCCbo(4>y
zu{b}-uV&&dqd0^JcPW|$R9dE4eW@sCe3;T-H&ev`z@^c$-nR$aQINS0h08XSF5~7|
zPxt-W-ixw^1c8z^P0!;`2Aw9Q3hA)Y>m4+AU%aqgjSRw)cQYk$*8c?m97+|%?DUz&
zmNgYVFE4+xz_Oe_nRXSsh0fDg7HMP=H=mfdBzGV~M<UC?wy>Z8swQB^UFh_AKsGfp
z=u{(VVxGM|YccTYKM8oRM!{f=oO<g`x8STe;lLLxjjkwA8hg!q`$I9HZhb!2E`>c8
z6qO+Ac~!rkvG0O@eka>pT83bJC$D)XX|s{6>fNQwha|)|e5|sEFiV)-#C2>b3B*q6
zo|Vj)CrE}<+(3oY<H&WC46S^+HdIHn1bD+e)f^siF34;P(02WvLC(^ioWCHM5LNmQ
zLp9GMB~68%`=8a2u#KHJmU085TYX!|0CN0yBuGYT9$n9{ja&+|Am;JE&WUSePWb85
zN*cIxCD-ud70-rmOpHHFV(}cxGF<<;eQ5dc>0q6CcLblATde{V&(&n>M?sL5)Ov%J
zhH*C-E1aKP44CVYP9_#vBE#tG)*5+we_Nychka%g)<a@!nWG)GB-Ohb_NF%AY1Ci;
zQKB^ZoS!-qJhP_?gU9B!%x4qbuHZ?auf0G$z*mXyT~^=4khnR~P2NuY;bO&G=KP)n
zFTRiIUj}GFEQ@N(375;w*4_M%B@gr3w?b$GlIbC_%vX;w-DnwQ3-n*)Bt^hqQD*R%
z3gDGtdjN+Vhgz2>$t5Y<3|&Wr-H_rJqjtsBf%qZ<<?z1GLBx4@1KmUz!%S^h!?%W)
zjPS<!p16#<v7=XchafjTXB}eAL6|yW?&S#Ef+FzfUZLQEPKTCDks0>fBYx%m5ZO)O
zi^8d^j$F~U5i^b8QJ337(wnQoGrcVALbd<0ny*J5#F)?6^L{@pk~ArOM=t~^*ScaJ
z&T-~{rv(Wp5S_D?gyKleEP&-L7;cRn5*OMu-ViC5bWF5R43s<Wis~`26-hHTe3KaQ
z3IJj)kgc|t7X~SUv3Y`P2P|<)<oOb$z3#nZ$V3z8vX3oO0Y}yL6ACqwly(}U13eue
zF8!b17eEm`ky!6dAG%yhR*kqvY>EvD3U??o9b8PT*fWBonJ>5}hLT}+o1rcJ_mW%u
zkvjUBe@AC-)sdeDugJIA2pnu6SB!fR+WM{WCdobk4vA0iEBRYf=wW)3vIG_U;oZBT
zhooC{hOJjix%OD?pIfViIf|np-^=XS(bxT61Rv}l#d%v-Ih>1jJCex=Y@J)h<3)~b
zo(LmDL?Vt(nCI_);m<lyg|?XbL>lT|{L}8<aXIEW*YJh^oC|6oOv73CTv;~S)jNW?
zY$%K}Oz`TCu&mAAr(IFuXtR<!Kju_EOt40@zM95)g5jI<8TmYSqdf>^WxSwH9`EIT
z3zlM8`w1=!pw=@;eRfrrqrqKRrgt<7DZBGNzl*c}N`vZF*F2Vo1#ovO%X&ZG9^O8-
z5;k7`s{Gu2x`x=Eq78up^?nlrrY%>aw42-)M%3+}Hk1KL55IZjWm<Vof@qLXX{7i&
z^FFiKTl#iJ@lARMF56LpXr1sBFcWU{TlQ?ta4X5AFo~}wwsync{X3Fk{b@4cs;6?X
zb3ql&h@>Kaj)p!0=cB1GAD}~j0-3U!d$-@)KYy_vecOYBeyY4^mNSWLr;(e@mcKe~
zW)URF=SItktv#}C&Z^H)HL1mTHpMGf+&&~+T)!D8U;j8J3!p?1^1koKA*r58K5qMn
z-rxw;sRdoI?b!6oVto5QyB{5(@xm2-*?{XjHGi?kJr6<Exj$tYfJ-x9N5FIDiPHjh
znykH}cY|nC-$X?i2vbhxY2{D?jH1pPvNDGDV;O3N9_#EY5f0Q6WQ@XkeEO(s-q(IO
zAv<KP%V=eRlKqP?-ceRnHDB>I!}F5tp^+kiyVy&HXxfj%F|_!#ED6LL9@|BmpZ}3I
z%wcrmCM@w`qXKoqH&vb!LSq#<iG+|0+6E+O8660FQMhZ|tVY_E(osbQaYxT!D@81E
z*(Pq(hz1(@g3E?@rf@GkR=}*p%v=ZDw^P;a5OCq4t$!DA4URR3&0S5%CS6&1f(Pn5
zh!)t3YkV5vItVrh{3C}=qA<FU#U{BykP7}no8cSWX{qp}2x;5GIVIMKkL5Yub2die
zP1cUe8>Y*1I+E8nEajVpa~S<%F*0+WGkhPE>I-1hLC(AJ@!p`LudNuq*vGkpYE|j!
z>38X1Vt|mkS<{brU~QyQ0G~qk6Wl#>HHd$(&(>v89D2=l>x7BT7cIQAbp+d7N(S`3
znxj@<w|#x`{j1*BTi<)W_p$Gs;7lC%Q_#G4JLe<Qq^!GaGvECEil!A77p|ePiTAz%
zMqAgXP>=gy3W~N~Uq3(bP2Q7}S1<Vdzw?}Fw0UimIf`tyf*=_4h+mi162BXfnQy~F
zkT1$gJ*3FXl2i#cpr8cMVV{cNI^=^F03WqnYH}wqe0BZ;&PHOUlHMHsXxu%zY!A#@
z$nlR+`p6%tr@!L+*H0%!0txPHoDvK+*!NMI6#D^LNh#?^r}1^y$ynM2YW(Dqlo`_*
zSN?*vkC+H)xM}{Uq2B^)Cd5bbDgP64H_C@=(0F}H6oIN-p82_##ML+dO26V-mS`g8
zSZri)&K1>;qqzFLKPz-i9SL6if)UpiuHzkL|IwIbyp{FGnGfCnaAo3F)5`seQGD5u
zFr%`$@hdJnaF}|VjBZUPVvc)elhf@#g-H4mn!;UZ1CuvQ?(J6k%ZVvO#J+|oMbz&I
z2PYgY3}X3yz}N*KvJ`nYehDIT*_@bBkmYDx>LBr3A{t--vaF#fjTB#1;iHH~Q;iZ`
ze8YnytR02#Vzggp4162s51h(ntN@a<X_wXabDcdB^W{teT2Mh-b+2>9=R!R))Wi+0
zeW~N={H-}ScJH^mx;6`}{XA=ve^AOc>uy#Y!!P?Z>hJxhW})ri*g=4vvu7``l3oNm
zPyHOT`o8%r84KpSW1k2rN5@j>vxx6fs|CjbHuowJfD8m&>yAzcecZY-p7B3Nl{sBy
z9ZV#M{*WwhYh;ZxZ$3C2ExIKSnW<*o8aZ*W;|J_LMlB53{kZ8lnBVLwp$H{*pBRzJ
zQ3KsUoRxZ&Yl!sjcU0cE_?U4Z*}MWYQbb>^hb~^c2nA!_Q_FeLXK-4VzS8R!L?Ju)
zo5ra@zosEH?~+6GZs_32ugB?$f{sA9q-AcX28t<oA^noCAZ_JF=adU|<Uw4S!0d`*
z3E?(4r>hy(#)Vs6xtw6TDStxBD{n=3zwj<l><!MI)E~nS`<bR0+VeS!;ea?^#TDel
z%Om?iLN!~LYg11!6P1IhpdsI1{r!ut#EqhQ;CQ(xWrn=e-l3i;h;E&qzBTZiD(Fn0
zucFQxeB-Zry8e>7oZ*Eup%=JN5qUM&++(0qTpF9xGmI$Vdr6q|=L_4td?7O+hhA`r
z_G2T)T|2XTB#t~=o0;2j^Rk2dhR~upv(0H43#TIynuuSW_pPDp&n_Gw#6471MG>#c
zWbMiN9YD+$?<cM(P98-LeeFip4X3eqbhX31(>T(OzBTy~gR5A1?niV)*rRr%vsI(=
z#$L_y<cf{sQVR0|Liw&YBoDB`%?P%GQ*Kuoct~!KRi%N%8Q3RueG0$zRf=p6mNX|8
zecwuk<u9)5Sp6jcV#K6V0r9*+LM)KzcZ3^x%S)s8m_^RGDz4PT-AMA8P|@+l6*6$y
zwH#NB6r>hn?_&(#05<&JKip^wAeB<zg!(Z+7|3~k8x&&x@UBR@iWWzqud1rd=Wkb(
zcls$$=Sr8F%=4QH)xM9AWRQmjakjR!%%;1tPnTc^5L$L6EHLCUdNc^zfQFF@U=T%>
z_5dcaJ=6F6QVp>Pr#NMw^>*}{ffgZ#R+;5!jQrq=-~NB+5)X9$M3E+=)#BO$tpyzX
z<leXk-hU`>Yy*osPAo_|+TGwvcheH8<&kj%Qm0&_o*SG9VEk&<*ulBM&V+<LK^m<x
zZzl>xfFL6P0Q#taoifNfi)twmpqd=rg{Ag|&n=rbnB`o&TlY+FrG@F19ALOFuA2|u
z!9O%ilRQJ{(5Ku;vW^_CmGAaty(9`A-M`a$SAc8rn{PW4lflr2upG_G980?O3#G#E
zlDeOKZ~*SMxgZV;6$vH>+%K(<e|Yp0ihSJeIR|H2ch$vS^<o<KJwL+wAQB=`T}(7u
z22!O9eky#9nHm6<twE%h*w&g+{$XFdYoLJnU{=G~+Z=08<K>OjoUJ}_D&_qn{(eZl
zj&O8yBC!^8ZgRJ%vf|a!1nC9S&kAu4fd9d9ZK}Di9w&np=-ZIb2zYqE)o=v)#qy`F
z^VlsTBVbv551!m}?|Y3OGzJ*zlMs7?X?}Id#bi0t@EBttlb7$eUS^eQY}K@(t>f@W
z6@pO|Bv@Z%fa)hs(5EG7k<SNBwK{wleFSzzM2(E#dARZ3gQ;>ftR^%@!RZBe-*mFU
z{hls4d0Rat{?|JWPGtYWUM2RCiS)UzPS@cGEFq&0^Kv*vq0U42Ei0MHylA<^mw!E_
z+S~z)9fN$KWsNq{<dSgy`!j)e!r!y&y5JBO%lun{A<V5o$q2H)H*d1{(QBd6=djbU
z53l_3uYKVoZB3}A?Pkicj_H=CGr!K-3SU3rFZM^pUZOe5Q8E3MYi%}g1BHR-!MWFx
zOIHL*!N0IybD4vk)Z(zf)(N0bs!hRfowJsc(ndlsgdSwzZ6x1=goFL~*lOE%y=qbV
zRv3z)ozU3I^PD%pYpact8O#M6e97+u@y_?9A3?NgvS59M69{^>JzXoz9U|t_JLXw;
zbCx^HB(|&w_`Y&5Cn1=q4->!@HH$|N{c(I5$43I~xDlLG9FvkxC}av0=#hcOmao3w
zhhc1fkx(|TbjN!M_y(L&k3h2#Lp@F1Zq+P4<^_j3Q{tm%^Q8`b?bvL7v|mCBDz38g
z<hX{-ED9de(3UVV*JIoIfnB;^T*;R=+*mlko0p!3s{-7Ln-aCi5+4b0j^9#G@Z?`P
zsHt>k<ii2~i|2;gA;+G+65l_}SF@8D>zbxQl>l!&qpW7`<{A!fQrBNjxb=^G#{HLp
zac6X;hsIup9}rWz6Q8NOit|x7(GKC=w_i`KgdzR}C0-glup|@(uOvljKbd$l$>P~F
z3GOVYW7GpC7jgeKUtsN!3>FO_Ipm>d5$FsFTfbJOX*5Tx?h2da$V#IfH3Q=!Fx)a<
zl(&vd$YJi;(^plAQ7zi*IHPiTUP*N>+Ud>PJrv8vi<M;f$<zDAh7&gdEl8mQ_hGap
zxYYlLmVZ;1dFf4a=NnvaL!yY8OxLpCT8|F!0+^n&cbW=k-ttMMG3WVsKcqs2iI|ci
zZ}vD#t>g(m49psz-qAf1rW?>dUWpS%HpF4aEB;f(JB!do>dBBOM)F)j-GwBJZ}Kx(
z@UwlV2cuGvkafOyhPsu;F6BqZNoL`@&ZNExR~(xwru~s*Q7Oe7Xz1uFIDG!9NS(3Q
zI8^t+vFtO*H^$!@%ou6GRKTK4Cp>zaIb@IAK3V&ZfBT5jA<B|~uxYO&9C8+QV9tI;
zO|OG7pM&imQT-n#D3O)bzhQ>_w<9_BhDlLVqk0UUU-D<PGkr!lGJJiG59nG-mh+K&
zHTSf*EDHrC8d09|R>Ryg-QM)kzIE<=5|H!O9?%5AyPO!aLlGs_GXK@COcz{w;S<ZT
z2K)C(54f4}_9RC^-De>wHRpZn^)2oho@v$6HGG^wf>9O(L$a6the2}YtNnRt+!Nm!
zc-0X8)z82IGv-pYan}B5o!qCDpUwF=&XYa}VN|=TA=!5C9CukRmX7;KYA$itK}m?W
zY}hrU4i9*Ap(8Gq_?Rs=bV;(>1gl<&;&ozn=7bHrJpF-Zk&b@bBzNsj#zNnEP<$e@
z1TPQ6uc+-S^qF)nbzq-!{=iiIAR|PpL2b8dyo#9LkXFxdyk{`(q3>ZlN8h2oF6{#h
zL!)%}FMr5A9gSh<oHP1=R+)mRypE%ma^15ZF*I1^xz_eWKA>(LI)%2_Cu2*Ly^sPK
z^0F4+Dp>nV<2je*&T|_K6;4R;x$!2t^DMOr&G3X9=a;cn`poCW-r)cCd$fSv%2=j-
z;gIi0Jm%+x6$6?2YaLw_GIGBak5#1M7{3Jz?y|F?`Es$}|JAM>e)QY*$!5l#<6;l@
z%8&Jt9N&Z=cI<1h-z7Nvo3{)vD^MGUrf5&s+16J$4>#!H%=}%_jGz3RxW5*wD?px5
zx--Qnu236SvNqNadtA^ve)W*uYF#hDi^xYGqk;@9^iGX&n7lHFSU{YQ_2oCw(0`}*
z_}CY7P%_RwDOf1^!=u@1=G$Vr^_jY9b&U2AI&9G}I4y#6H_8OyC~|odw_)VwaV7tb
z>m;qHq5W}=UucI|2+zghH8sCn94gG5$wRbgobN7?XI$((t!giCPneU?)G%>8-x!)$
zbl%4Axfu*&!an-p#6&;F#giEte|b1#&U12~$-t^HBeOH9?Raw!igF$EZSL1?Po6XA
z1S(m}f00wa8omWZKL_Lib5sV!)_nYe^o%{>&D>qh8+%SM){kYx|5`(L@$oZL!F9SZ
zSra!KjpzwCtiz~V`RDX}kt44gv(a0A*4rVD&zw<L;kUqj$FyURzki-f<3&ek0lR-J
z<2h}i^NWNL{SBE5AEu>hL{_umqQ9y0Y*6r`Bkm#%;(P}&7>GX+18Kc+<6UwBO&eJ}
zQa1a#$cD=6jJoR6;mUXS(R&t3FlpwqA4K{!?wx^fK=6bUXGw4u84v1(BLocWmR4Th
z?)c^%cLjFd!jpcVBHkm!jP#I)<m6|$W68T0!vo7b@oXo~CKRNgJ6~%&*3CW9u|IV-
zesGOr(SHCsxjfZL;})IdG!bR<BXF3|TR-Z*We4BpV!~US#-ab1)P*w;$dCUWvG*h_
zl83#*%Dg__7{$+Hm9)68$68A#K}IvIm(OxHi>rKzifDLj%ano@)9WL5#2lf7xEmPT
zKBAqI?1<zEE~OgM_mGOcPI^D@KRPQWne}wlo%_;uYvlnr40P9pO|w{vF7(qZ+Q@92
zcX5myughW_%Z{+X>wUE(O;vhaBsV#L4<bSksmfv(aWsM=XD6ob-X{Vk;VD7NZn8&X
z_<vM(CLe`QLa1CSYL-j<+*~mV2s#l2U)=10Pn5s=cgT@UyRL^@9Z>xZRh)^7>^Cn|
zQ7J$lIODF0WqTtAOo_N_j`4R%VrFIPRd{zIE!UYD&Adpg6J7J2SDaC4ApAp1Ui!u<
zLy+>xGUHkCyFra*_PLcW;C)bH?3~+03BH`va(RV)xyt)H>Po*+P3kL=)N;G3FQLIv
zYRE@Q*^7_AcxRBuc$cRL^$s5AwEg)<A+B*a^kT^sw0xeR-`>aJzzNvn!Y!+tl>Ine
zuo>7w-fDySkH}vym8w&y&KqQSGqw-mmBPF1YQZUQ?6!aL3Fx=J>9>6V5mSDDL_nGo
z>CDj=>Aw_~6_@M^pRA}~$Xtu#4O!NMb2^+z12?{YsB3&Se1|KU4Kt=AtobxdAE)_(
zQWIi0dv8?H;c>HSsL>4>%hEMRRQVdHgO0;MCR|ZV<9>+JT$Q=<yylDZ<a4{j?`u@v
z%QH;)sv|E4aQX|Gd&rS-t#LBAdw1$xJ<A9yYRsv>Z+D28V=Fq(j+rO_c@Q_zXYtM8
z#zb2LuYY-6cx4zj=7MF5B+7=KUZUW*e%~~XOkJn%s^3;|e-E(DxjjiB4?=F=i*8Af
zfrsnH&2r53#3l$WYF+tni6ud-xi{QnAhK+%>R$l6obGMpb`s}0*^98N^j{t0x4xoA
zjQcNk+im%|`l!yYFoz}io!T!XP5QG<x2*0dCoya?B&lr5f%C@~%RQ-q*eMW5uN;gD
ziyZ+OqH?m-P(Jg|Trl;v!RM>KpV$zcI>pbg!uOhieU_l0TmwkO;zHdvd%Xf8jr9Vd
zi13fIA)wB!PebDo5%K20>Rjcu`zCuii9v~_!D~Gy0qr3`Ds$K&l)a@Mk+~-tr!h4^
zX}UI9eUUoqFH8dz3P1s`l6LimUUksdr-28?6AO}zdkii1ytr~rvodjSi@9B>@2%S;
zue33`AYixdPID+}tI>@~F&CaO?$8G385(z2x*W1IJ-fe1_EJdD#p3IlzKv!PRHjh<
zY+~O@7LV7(f8oUuoNpcrj#F};YUFG*XAT3Ik7rQbc_{zZH8Y?2r{;S~m7vAinXh%y
zwJ065cJvb_C{~_`Ds5aJkp8KSW+&o`($3)0yi0BXiO)Y*V_#W5B|cwBvn>0SrAESR
zxCh?twr})Cm7}Y;s4z||JnViCFG#sOmg}O6eS+B4gM66F(WfBtR8}D!hOGO7+9}D{
zA#R=5&)}@ehCs4tfo^3Y)i2}vpo+AFD2a%9t@m`F?7C4NATNdD#+!~k0PeP;Gx<N#
zD?e*2RQWPJy!giD!5I6&c|VSY89Qbam<JZGgONAmlJM8y+|ZXDa6z+uzR7o`lTIBD
zRp!&khepwP#24Zx)^~4yiF)?4_;>A$?D5S1MfMnczb(+^2h}51#&F~O+L7Z8=r}N4
zPR&vBmYO`sQsj8GmSo|0_i29Rd>%d%cI_aLr)>L5B2jZ+6hKiT-B*6&O{ngoz;ym=
zwSpkk&fStQ*o0BDytCj5`D{$TGx?g6fWTlN!@00K!<jLzxBc$iTwyhCayaK4pSXcu
z_xXqVYo(c2Q2t2F{sJed<HXvpDvL4K{uQi*BSV`oHZBc|-}?EkoxPU2sa<5I$2XkN
zXRa`e(97a{E(3uVV!|Fy6r+I#$lq3q{=x+xM#oY|h;2RZHtu>+gE=bnHzW1~Smf60
zDnVu{>iRHS`q@3%laY^G3$XeP<j6HA&TYp^S&h%&*e<}<&{pT9<;c5t@DFs%sawT_
z{xLzp7DA1LJ+M6|jQ!$|QI$Vsdy$w_0no)~ZCio#!DMSfx%>Yh+6mK*Bmcj4c)Ew7
zsV>3XPji9Xhc@A~+>VnfIL}8FS|?h_Wd91q$)r||M+WDA!0T<-<j<u$9R9i#4JAl_
zX>j4$vp20}`et|{-Xk81(L)6(p%lE5@d|c?f@iZ?^(o!@SyHmap>l`Pn}gX+JYIm>
zwOsk6iy)KRrx->N|B@isbk}P(1!Rg^TM!snp7~en%k%$=s^PQRHHS<zUIce_r>y1>
zZ>;MP>KeVd`b51KzNKQ*;io8nAI)sZh(8rap;3C45pmzUw>2&UyQnm$;>k~~7mK;A
z7xgv$EkU^=C$n^w@W*5;rX8VlRxc=|@k?0TDmbp|%f|Ac2Rd<R;cH0xn5C7SC+SA#
z)hG3wIDuLZF6d6%<f`mgTj63#%^yf}x6$#C&Gl~T!>AS-NcM24=$qx5Ycqq>hf!_u
zx{9<6n>EnrWu~Wxyen<5;PhQwy146#H&Ep6rWGp8jmCa6Dx0z6;e=Q0$AZudKvid-
z6x$-V|JCOQrU-{oKaD{f#BL^L(JdWSSRWirp+^;17No;1i`vyx4H02c`Gqzkq9efA
z=KrA^BR5=P#jX%o%SAHl%q5eKwa7tDTev^sBA2w27{y9y3yW=8WKsPlBIpDW9q+};
zx-7w3C7!l?MZy*$eQ$P$2Ec{k?Pw|Hjweg5U0UTK=F33HlTTg>o8@hxTRgk<W*q;7
zUVVw%qSpMTI(r&C+Bn_O2f|FAWhNR1gGOMg7ZjBkcb+>|4Vtk#OyZN*KdXje(kYkE
z^Gt!EnOxg`Z~YX<=dJTMG5s0cZ7MwXklzQ9cQauan~gHcCb!QU%yK_KGJ-)mi<mUm
zxZSbHwKi?_bww$aaIs=v^tIfbV;=DbYcS$vo{7MMt8+Pqa~Fl5E#ir6z?WZ-oLa@+
zXWtX_q@aET^2f5#qLJ)qTfk`n<<EO2#p1*{WUPWojz+2~GJ`eBb_Tm(KK8Fz#Zrd|
zrLC)@+)Fj0_pB>$)+ZfZQ|GDY5%1CvIK^#iB-`F?#9T_Fz3na)dxkf8%o<LUCc`Zs
zFN{}9Zr0o<4;WUAA2_TcA;m{W|Naf7F}q88#8}l#ka(6gn>KkiwiZ+MA%Pm0EjOuD
zI*uW?!O%1@+xP!p*T?%E3Cc?YLW`h0x5uU+3!nNlE*(WlhJV`NX%CvXMba_qJs1?6
zdu|W0h?)8yfu5=lQWP9-Tvy)IkS*r$WeFYaSVRlS;()16k<v^%Qdx>Z3`R<P08N_D
z9EYGc<6D^6V=`$YrzfUMG5XHttoAMVt25~#=<>-`3(>;U)nqUuWu*$N<=plD@*lrn
z^O*j-+tjZA6})daXX?lIbX(NeO~)-y2@0H8ttE4@eB@CmUJlN%))o>tJwbmo-$B`n
zMH5#G&CiXP`BdcK{E5T(M3t7Xw8LeOG<bF`ZS;+)eBbTV79)SdYo+h9Cz-EaMYc7)
z+Tr|tshfbbdRI)9^QUpGf>-TE$pH2kC8Gp)qY$_A)4XG+z-zZLUeCwA`u>!vx5FD3
zXXWTrWV_g?%zxrxATrWcbIgXl)}CnT8~KXe2uG0(-UW5=K@PF}_=osxPqmKRlSBj^
z@y_azW}f1wV+$T{0Bfj6#L-m8<U<0!YVJutoh>Xr!SM*HIsaonOG$1?VM(&XZ*TNZ
z_nD3poIKllix~aqQT)SYge8v}d%yV<6Hca8mnc|mghaxz4-%jt2(0zuS}U_WL_c|_
zkSgNQhn}VV;NET^davl3c+0LUMiy&Bji!DI3cqQ4{qrN|m}C(1Q(nFs#d`qje*S42
z2Oh_IDxas`Z^dmT$#>kVF4D+cUBVYwwHc$cNY%~gdTD6sqLlrQ+*6NQBpMv2J>?#+
zWpTy8a)B%}j=cZbBzjenzJXmPG&XAL3$N0%7G@q5jwkSe_z__-C034pzx@c6aLzw)
zXMuh@-70^A+*KL&#{X&jz1QM-WP3K}Kc*Yy|6=F$Bx&9z7W*mxyMfW;j-z#>;BU)X
zqYQ@qwfEbLS7+wEeskhi!%e&qo@4Eowq4pbGT~XHdsxorObh&nosoWzHuC0x9`)i#
zrMnI$7XOE>=YWU0|DTI8>dDB6j5yhmB)b#g?5xi0WXq1qsyj-_KC<ba$X?0Fs_Rji
zN%lxQSy|PCc+mKNzPIT4{a>$Mx;o#_=lyx_^?84<Wd{cPUmud=8<NB$^mrh6lNh=2
zSzT|McW8D96@$^Ck}+Ql;p^YeQemc=b&iY&@LGtJxs!;I6?V_nU5`Ov7c-{mgZ)w3
z&>5fK^gsN|V%UX54i_0T#((`a|DU!5>0LM>@o3KtS{sxZM4yt;jBmWXqi=Nn==`Wa
zC8Q7_68q!&B!E(rYqX065cMeZ0G|-`G%woEH;c*yewFTI_SH9}D~%-m#+yU3h>@<<
zTJxF@V78KJ&CqKJ=(&DSA>T#S9vB2~<kgxDCuXB+Lx8Y$`u70CE)oFd{3gz4)>y!b
z6}1c-7pPcuyNekxC;bb%$<Pzx-=DbOD2~m)kqnxF1mVVBvGcOKwjn~?V^3=Xao-x<
z)$Fj~;@*&|x`>mM(-8L4?KkPB84%*oMed=TerL<)h*j(BFT^Xjt=;cj<?EQzCjUwr
z4nx}^u3_D^K&PDDy};z_18BfcYg7C?o@5hgG#fuFFRuN$tz5lm!hgEkjNnLwui6@L
zV2N=>tQlpqV&*goiybn-H^VF<uX_0`dZk0BLmZ!Mf(5e3BCPH_LG$fq0sI?Sts#*!
zvA3DOFD#v8Z>jsEq^)qdWj!#HLNnPog#Mo7DVDSgWFFpGAwwKp#$kfL2f?Yjc}q*8
z)7ZE7Z@bO_+Y0hg`Z#3~N?zwXGcyS5%VT}7V|fcKbLb6`giAZCkU!zi!z^I&k}LAX
zw=FHnTV+7v;_lkDMP!3&OG4!D^m)R9-#1g~Kd+|b**JE{1l<5jA*zZ59If6jjvbz>
zwj-=lpVXH`_yR4Ey1q8%3n+pfq4V^K0EATd<YZ;>8x`^Put9AI6#QpcOL$U0xFkU3
z5JD3@puJ6KP3z^qe`XsM+%Bs^Quu;G$I`O|JC3w)nr6{E98)`r3^3Lc!01Z)cAb_8
ztTrRc>bG41O-F@*7^A)*!;?BkL#m|bhOd$Z&k0DDp?b(5q&5KGyD*^icR!o<1oNU@
zDI!FX{t$wY2f#1~__s>$h}i{Mzae3ZiWy1zPipo4%O6gyXT4vXG$yT;A=2|~ln3uQ
zp;U8j*MrbQB^<st!7t(egwcuKS<iVN>ZEDoQbRNm;C~H)l^6?9;Qhc^LScZN=a;!E
zZ$Dw@KAfexR5-%-9!Gu%fjt3mABT0eB&};{^E;d2XJEPENtXwGbT2QfjjY_HZzof-
zha2D`R>{KBoczFoC^~i*R~6nNR65ud{e2@d9(~Ca5|lJuLN=iHD1fp++9PNOG+<kT
zY4yp99NPg~%Q=z~wCtes=+r(R?vz(vl;0%S(g)La)bkHSP??GP)mb{#LSQrWF_Y7k
zACmr99xY$>x=aGcEgHysZ5DFuyesV@kw1y5h4N#W3#H3^hhDTOL9_88ng}T%Z3EEs
zrDKO5s}px{WJt644KFAo+F+xckhusw-ic+U`JVDe>fUY{m~TW&;Fbw(n0<aMm%@n#
zngqEW+;~V=UR_PpT&$az7498n4T|KPB<d#Y3`^yGCMjJ4%}n^DS}8>XK!8dWV9G3s
z+6K)7Tf<99x|XSlcDhjo{S+%IlE&Gvu#Bw9DR=>oc9{?!a-eu<!;_pR)R4ZtIZ67f
z#xEj?A}!W~f~cql=J8{d8BqInGc%DMX>|xIUtDn4F-2tiG0L~-V2FgS?qq>8Fec!3
z4hKGAX(19;HZ<P*kTibyCQyM_=t_&gaVqn`gQ;sT$2_S^S<!peQ4ZQ;4guLL%4h_n
zuE=#TSQ0vV*I9zxqBKxMALd#|e<!>lYh@1cq$dvz2d>YzPfqX0N?Vf&H4B-e^7nn}
zD3y+}=8$VDJeMSY0~2D&D9mk%gkJiBriaNda*`g&dsDbDg9*@oKI*ZxxYuYkaxXon
z=wu>AWGI|a7)7=a8U6Xr1C>f-q*t;4oH9FX;4SDu&i?$Vl1<{aJVNMGyH~(B05e?m
zr=9riFF8&g5Z^5vLx(}=a{ySnGyjxi8i<==XBkjtWSqJENhqAmYiX?gnl}a~{a+-r
z)gE*`B^OYAsf4z}GE1BHPYU~y^o^_vtv<v<oWh7N?G8E$ib@8p6xlLy1uzGyt906)
z9xMO-F+c-IcRYer&bJ)fYu{^o!^SDX!_;pFY~lFZgl~{7%$Gv@?czLW+i#rQ99h#L
zqC-cT{`?SId6k)~l1%P?EAV9Y+itc2uZ_>+`u*0KL<8JoN}Ks;2LggQUF5ecxFQfS
zGlyCha9*@2?FMlD#2J7q277p}%Lv_<Z|L3{$M-}9BSPdD;&J5>1PKz4SE@qnIA|S_
zL~&&ST!yUNNAR9{%Vh-=?xP;b;P@oqDicY-jJd(agT;SY5{(cfeQ72@HgEZU&L`x-
zKL6LRg7B1fm6>leaP(mc<;!SbY3g;u;>(~T$r{pjk`)Y@hj=6_7nl0XtiH6LT09NE
zbJc69sODoISEUw2SS%+vqvs1`H6sP71W$S?lI?+>M-Rg01e%=(?^K48_&}TCsTFn;
z@=+hu=={FX7QHR$KhW_s6KeIYrdz*&W)>Tt-Aj5Dn2#u!J{R8eBeJTSvK^HSvN@P~
z4!3(GhIQXFp|)A_<gL>nWa5a(uGR*$ylmvW%3Bq(@p<<2rFt9m;%;V#kY|G4kCk|V
zyl2z6se3FCIjBj-!68%)(3ckM*5uWma8k}g5?8k*LirP8<GBx;c=^(~Y2fj)VUebp
zquw@P$utabJP_C!R)A*JxzQ97$st-EqPHb!Oo-(LeSf~Q(dG{vAM_GlP17LnEWwmk
zb`=QQ<!gGS<cNfP^qx>!8zMu<*3(R=C~bcDTtqo*|3z@tA8*eO@YE_yfT{h~V+y?g
zwJL-(n2XO-LbsXGkx^K9(jSY;$!)QerC~tSq!pt&dv5WmT$R#1>E-A}Uz+w`HY{Nm
zlpQe?ePCjp@S@!`L&@u_EO`N08L+@AZe5Z5?@Cj`De^}MWGO6y?%1_I7>&xUo;xtY
zJs*PqD#ILrd~s43d3*;)Vm*6l$0&^djRjJo?kKce#UsteS)OjPFd;aw`LibwBmE~`
zoBu;o&ZCnjz<*&M({-N-)_?SUvDUjJ`K<v38U!!!Eo%Rks(p4q!GuC>vW5j-mP}7M
z=hZubYBMhrW35Am&(9P3x(}zn-A{cy6MB5!bCeTe9$VVg9qA@=oq-*mHw!qviJFaU
zSple_qE(woLE0gbjW9V0uyji0sHF~h<I$t&UHU)8Oc02-wU4iVa>5vN1d=b8W&i}-
z$@}vz4TOP3vwkfk!PIYw*Yov%vvpwnsNJ%X)mWd~D-w^Ip#Okzz>=>N-o8UUANd;u
zmY(_gbr532LToIclqWe;G1d?pg`^+^<pCho58Lwk{ug~Ih0BNsB+1s<$?v&!$#sqs
zoRNX!rx&&U`&?$<zp=ch6$+{bfh*>56fHv8nD~p>Acm})T`5{Tfl@?9)N5a6ijkS*
zCmx6#@VS66f+(Q~>^a8kwgB7Ye}%z9=cdb_7#Zh<l~@`u81P>oRRUI)iRS_lw0;}H
zsJN^d0RQAn%~y8@&xvPYJg-o@eUMXJmBGZV4A}$~>sP1QBQ4V>^RVrIYI#%QK@kqr
zXPOyYPCzD6NmAGmJVh{N97X}FVj`kg@A6}Bh@sKQ_(w8ucr_rnV^@xQMZs#=D&<J@
z*@d<9cn@EHAnsnCKkq5jpQRuzO$!hh?(v!Anh`$IsaEZlJSh`&e`UG(n@KnmaCcCT
zFpUt;m2rZ&c%kp|6a_ILcHb58aUX}2_#M~bC*J@EkF56nBBK-k3^rK$2Y_?Ym$Nit
z_da4hF0^Bi)~MDZQn%I#_`4zzNsm-19tbV{7U2GMziQVPDLcm^e?n~2d;a|$2%XDy
zU;pJ<;kgTk<EhG6-WDjR7Grc~@x*+<X#bJ1UUCq<Yne(dn2NE|iEQA(_Le`{d+>|i
zTVzC1+4p@8x#TmVBLUp5cQ3yqV^%f}6GY(>fXu>FU<|S$^;85|E-K`DbhZ!`^PDif
zH|ci~WmgDD7=~GdCjnK#+h}`@DlIO@dhp=~{+}oifemIv@q#o>0q}d^WeSQ>;Z)I~
zh-(eVP5rOv0M8!9EJ-gKUpF`Xmr=q#vN^z7LT2@qdo?S>V)ArSR6|4p2Axc3P<zo1
z1t0g{EHm|^2*o6oQh6P4di0rngCywy8tgcFdxs@>j>;Bq<h^Lu&eE2Itc8>jK^SC?
zoWVo)i@FMTOLic8B`L6AGSDYXPFKUFDO&0fx3sJ`#y=qHe-c|DFU5?yNuQ#J9vUeq
z0H~L(e)C*;yX()f@tw6zAa^WK@`{A4BW?6f`h_CTLCh>!s=q!-YaVP|ugoPTj^3Ds
z<tptEcE8D%5Ak^TAF$frbvCyk+Si}vUdbW1Doh}8ZMPU;xL;>UNK#WL{l)|ys*mo)
zSvlvF`L^7Pm?z=ZAv7@=*Z}dXJ|}HVkw+qAsAh}^kvY3iX!9?C5l^bqa#BKAeQDtP
zU)##wouVUYwsq#=v-GBNiu2E56qSX347iqS@yk07)E~4qRGUo^8$-JNM%`bvP}LM!
zG&v9Obx!OF*=Fd_E>gt^dS-xLn_jde)yW8~kA4Q@hg|aijqb!`572f}P@KYO&S<pN
zoFuI>uRtOyl%+%^08G)p2tiQ*CE^&ZMDJMxK#{#k8<DhndgCrdU<k5+X<7nCtKN_^
z54)5iB>N6U1Sn<+;N@LX+AR(bz%H9sAs{Sp`x9gMy9aovu#T|V>WOUZR&K7w?G@E`
zf1kjp2xX$7llFm3tdgCvJ~^d@oo7JZqaX=<T>`oBwoh(oS~qUCSqQYkh-`n1(^m&*
zNmBr<e(*=HTIvIYDyCs?(os`1A(IIdaVOS6lFVmlM*4+ur#;Ev)XxkW{l*C<cyZVu
zNTqoQqkXFs3jVrBrW^*g2jqMHaPo6DqbvPim%aKTI*XGh>xfQg6BUJ*fciZCdOX+i
z(D1Xc5GZs1>b(mTI544-senSK?@<KUk5zHDy#5c2EZW%HKt<RxH0~p3cCj-Yl{1u;
z0kSwDPig+Wia_#JkR*102jxd@%sGk2^Ahore;kbkRE2yAS-v`|Jb(o#kuWfAOk`0U
z^Y--@i|3_?Ahw>lR05&2F&d2cjaMLsNo&OHGsl<1_KGeByOdH>=CVNH&-e<|fowT#
zJcXb;&}!0Ivt=FWJ$sr8$TA@I$cHPJJBiTlWqNA5n+O?F2sCcGvfNNTde9EI57+lY
zfMAuGK}5Vd^4OcQG9rntw1k35pl@JFNB$z&O-L3v;gb#^`34wLT+sR!<=2ROEUQlo
zGH+l@-Ka@87TGHs4@^j2piSL@U0H0%ZQ{ls35D6JxMGb8PR<DjgR~l1%E;j2=nk;n
zot!RQ0Hhb0zDoHT&kvbgKmO9&Fnu`MjDlIp84HgC-fFOD_O}LBg|r|ZGMV+UAfSN2
za!bL~P*eIKFmi@jL?m54sM6tJXLI$lR~(FKKdUd4UGE{g@(PrI0%(a^SPCV8Ugav}
z$;xxNd|IIWB~`7I>JhT%L_uoe#vnh{j*+3bNDu)Kp>NXwq-^T=SUvXYVFFox>o3X_
zKoQt2C^7M+KK=X~DN34l2P?p(?&4fPnqQ~n0<_WoS(ACqqM1SEWss(U@Gn&dh%%%8
ztJWSw?BZxE3O&i1fSp;(w@Qz8EkpHd^%dNUb_wg*^acz)IcOjh134_u=piWp0PG+v
zg`%keLcFnl5lMTGjs5uYVo)4USYaCWCnneTBzImZ_kwajL=FHy&e5il2!nbGlBTyG
zz^KmsGFPD;^8u5=&&jBx)N>Pwhn-~}2CBYL2oUfdE{Jk&>^cZ}LAuoL1Lp|X?spzJ
z<Q7AC`J(-Gb<e$>xF;DrAeH3T48emiCLI3lA&{Yj!fLlfKyrz1y|co1W&?9!Oa?jx
zQ_|XLsQ`gN$dIfkIt8y$`FA%ylc<Z(q$|y*9I-MPtYUUlv0g^3{^~@4_@ACcql2)a
z^SlFsQ=ptU5w@kN#JqeQpUQ%T_+@IkP^^cBwuETZO)h{e1W{uLkJ~40heLWh{XGST
zO!C%fkP+2BiP~&n8jh$ccYPg96>@MiLNC*>Fa0qVL9upk1CZhzDxFB!uP5Y8H4LMW
zZ5^K*8m!SGxKK$$CQ^?%mO&57arPEYPB)Z|WsG(e^^cvU;1}x*#oSV^qgRP|-OuKm
zO*uORUzZ7bPF(bl1A4FjoL6%9m6Oksz=MK~6j9aSU4VpMzIryLM!E6Y7yH5dF|xI=
zmOwutZ-5@5XE1{58j1V&it4bXlVl9b!;Csbe~cYitMtr}-G`;dX^1_*$}3F5t<F)%
zipGNNBquY^QB(kxMMh=N%mq-{6&a80#TH~I9T^N%o=tg3mIWqxL!cP?y3@W{;O$_w
z)I1PbUe7_farygrcvMhdFT=12Wk0+zcuL?7GYOH^=Loy4xa>u&-i!9Bx;J&EB!8kA
za{vm3Ks5(bl|J{znkooPQhJ0birg__i-|rd>Tv}%jKx|rp^DOhLdX)YxV`fjk&xyb
zvJYTP@@9ldr;~3pYl!+50-F<T<Da+{eWvyl6$@07t}}O)-UiM&#Q7sv{9OtN;S}wO
z)du@`PP^Nb>-mgUi!XyAC-ppDmu&>m?3BkzGJ2JHNqKv%8VdCkaFf$eaq<nQy=6$F
zm&t3P*?_~4R9GKR<`<HqOhLJnEy&>m?RVJvU__E;(0igB$m$W6fqH==Woh+h=yh0q
zi}o80YhX&=nQZW?h<T_vtlwrEyd&mB*zCy%>3a2mv2yg3IH{x*lTF8v8OG!szzT=R
zDwX5EaTIF4*>5uVw^WSPonKoOzw~@Ur+6DRTC42NtR%+gUAAA%m<RLjoq`w49%S%?
z@ih61wsXq!78Su3ThJ`KTAOP>pqsWYe;z4lyhMnHhDy!*{G9da-TJoJ7kPlU7n&JD
zTW|YYVu494!IVt{JIKJD<@u(l`Y2iO@PxBK$sSL>`90#x`}&hV<{$iYR|buz4H~V`
zYmp?GKu_0|-t5l-1#4hh#X}$7PUsyBefP@)9tD6w$N8W)w9Y3)>PTS!`SBl0-ETo-
z25LO>=j`d{^ZeVOp)1hG?#DCXstc!Ff1?~kKC~X}8}DGC-hn6F6lO+X>md%4+*mkh
zxu5$6cyqzLWO7dI!JszHt-%A<*WZSG=v)5rFL+7R)mO7kUC_%%!^W;HkKPBvrnetK
z*R;ideaYEqa((ux3B<crgxcLw3;ZA`J@M!Ax{BzXm8a*ivy3Q5($+3wfKwx%J`vlx
z#MOwp_!t`TFtGx)Sf~T~Zw&H*Tfy@Z7wYwVlpg%4GXrLX<G}n{pXri5Xt=q}PcRl@
zG*eVD2q6A6>-(j$_a|3t>zbv<!Q{;GlXJhw$gbp}-Jlx#1*yu#(mwqXSKq4S*9S<y
zQOe?bn;6hmIs9Te4yM;_45S^s=t!?w!4JBt9uH^V_@pVI2ffRaO-+VT0eUkLn1<?n
zZR(jo>yay6&+40#K(~|6m#&-#VA5Os`gen<sxLQxZ5JF2o!m3-e1qlRygMR`RyodK
zShbly_lOmf4b_nb49`o<Bv<NTuY3tLac3m@?Nt3QW+Eh;OXJ-B&bHYDt8e>}EzB8u
zYv&i~n_$$Q0o3~u(itDr<=Fe+d;5ccRERbOi*{dv=fMkPbT9t<7uQy>1vFSk{7Y2*
zjUQW|)xQfCZi2xsN7cZi#?Z?PPy>c^qM*m!xBwcRKR)CBW4JkFqxxRe5h{O>#6F$*
zI>woWTcLW9+>&s7PlOja#RGmL?IGj|Uh2**ymYW5+J5a}a|^Mj>di?_49@+8-DbxH
zBWNV^w&im$m33MA;%dgw(whgMjcC69ZJ2j3=zD)}bFIG9?s(Xeqrf8lnGoKr^mvTU
zf1^S)xQrya@4&JidIjWSkRZ#DX=a%6RaU`@2qyU9_834Cnf*T6Ht$#Rt81n|0iWuJ
zayiMnPQ8wu$47MBxmXWy#ADUiXB_&GeO&wu16oexo&Jiz&%XuImLGwk@LmgQq9M0c
zAbTxkLeSi;c?q|nQuW?rG6DV|vdI87QKHi0l<5&zwhj#|eZheJ$Wr(&cO`S;yURol
zIBVE;N;LESjf{=t?_ePNP^bSuiG9uKi&;TXYmtKIu!-$5HAMwN3QEPMM;4o1kd@XE
zY{Zl0Iow{|K;qUeV}h`_2~=8fE)I4gzO3s);=e{6;5|F~VT%XBFotI{8qCoAn2?gg
z9p9kI7T4;f5Sw|TYU1PIO$tl1>9681+bvob4QmE)wmvr4Mdndqv_8-n*m;mecptRF
zxQ7|kkP=?qr>HFq%n@jcBkWSrif1(IXDyz7Iwvz~2hAw%&3+xvJN`-ggpG1@hedgB
z-Euhd@lVH7>50=S^Ppjj<El@#&MzHRE}24=@Ae}g9j!^9a^2AiBwmAc%&kA(<W!*6
zK+=i<F^l}WpH*JM$VFa{ofJCt^!?27R4{L*WvM6Nm8AV+pO9p`{kGc2g01A57KgxS
zS=5X<wulM!pNu=<5~#&nS?&ojPHBI7V|TK7uNd#T&m{Chm5Z^t`(~iAMjy67Awv$l
zqL@d#19T5o90A!;MpJt*<J{OMsME&M^9oQIz_t8OVqX||G%2JSTH<yl(V;>A4I`Rn
zaw?^`nM3-<KIb)j)9|a~wWnKv&H$3w2X)}8U1|CC>-n$k=g;=1)^|BKbV5Vk8~gtK
zr@BB*dVDSabnL6oYhW0#Z!i#$OrgRNyZM6@;-Tm1Jjr#pWfmxszfuVbh*Jh*l<qH(
zNNdgq&Y=J3!;{BlA{}B|v@k0?Lr=9!7mOH9uewHlpHvZXJlQNhRBp!`9oDz!psH*b
z7%ymWFzl1&_Tcj+XBmBHo{+>~kxUZV?;%@P0vrZqTd#nwJf+hf2dROOSS9e1X4LQI
z8-N*d6KfXV*ixTrUE6FJYWBXya|U{4P8y%$kF|m`*(<6CgL@)O3;O0~M9_zsvyDXG
zm8^hKa7K`kb_~3>1uUDA*GQGKghmI%*-^oP%<I6(rkZ!MXlMz_^iMjK{|(F#1-2&O
zhj;4->$PrzS(xJ&OabCM?LPO`{REDL-zcaWPc)$Lty6tqkTYt@=x|ky%9AfTBO561
z4^2v8;PrVQQZIkGB{&26k3Tgtm;4(9I<%D&EzjR-lmMRl;_t@3-w2KJ#dRo`N`l<-
zYc|;@WH8J@iO`C*`1r^@H8GjMBK^RUtAKA$j4yj%TkKw)+9U8UVzePp@<~_}euh2g
z>#b_=((4bwk-p7fCf0-v|EVkBW{Tgrgq50#FfTBpI7xeXfgB3|UXM*;S_0m5uiX&e
z^Rj?UQl{ci+H;JKIRaY?MNq?se*o_Qyo^@geg)S&1BR^q(;VcIvyxnpccFQ~g4AvZ
zTKFgUdhbtu)W5i8s<6Q}Arh1r9kXGK^@rY0xzT~1Js%%zz6FeLN9j&{i=T%LUW7C-
zegG6>Jp=c6Wl@QMIEAI3;gON3!RrMNGt)z_Z?b<{>3Tfa<a4?q-GNp6<Wk2^1CVu_
zha7>1c0+F*^fKhf4XNA<-(-HR$b@vBcyf8DJk1a^0-b*Fwo>55o6zy3oVC2rcR>^p
zfC77<yTUQiOj6d9-yLi7Knon-hroBP?Nd|*zRU>{BbBS$kXu#pI<<Mpc{{~eX(l<K
zFY`mSkKM>$DbhB*;NHq<-zz`)l3zJat3dBLm<J~Jrq2NA?tB)|tu(ima#_yt)c?9x
z@gQSv=bHV@)%)wO{mY}1lhc#h^*b><o?MBHyzmKhlYZ*-ttqi9^9cgiofdCApKjq_
zuYC4x^Dm2X|NAemY2!K~uZF$3Y@d|#?@Q5qF3{~AHsO_?%DxI|C&yY9HSl7N2D6)D
zea|n9QgQ)!f*ivzvC)KT3h#l?J3mW&u?WFOUkYV3fU+fJ0^g>m)`AH-YoN_nH5<GU
za{ltgZENdBaQDU0{<D9oKJ>PpK1kTsmR!%M@PVfB`83BkBxJ(bCwMoZf$(Y{S>tuN
znm?Vpu*56**)KjM54t3y_BW%kE~L5~zY*ra)V4Hlzi6Aa+A^EE^3z{p$V_1%Hc3r0
z5f0JsH!@=Fdq~1)T0X{EoY+Xhd;KFLLM~=eV;`S<_4-=vw8}APM)z7cSCinozQixF
zP2e`8dcbp}0s!iP0rWnNEkL4FZ=f}dO>b@QQV+6Rv<IO;L5fsr-Yc3qA2SAZL=m|L
ze;BsPV4|S;mvy<`<nR5n#Ye7DBP-HxyOm-%D$)_B6@%7Ns(~|kXVCM_3*JcYYaoR{
z-I3ClXNE3^@f%RcL5|0;FJN<D7>)k;;Q#k%V5?7~?~8h3&`W{F4g|Aff$F^AE=WP&
zzY4=Nz^94AyxA4a;a@=29Y3dKDBxdGQ^K`_nrhEg+A)$ZN$F3SVuA{G@9nxM37k_L
zmDXe+L9GL-(Ts-p|Ks`>vG*0M0M(Jmsp<EYl2}l694uDf>5c&6mBEPOgQQ#%w3vVr
zMNhWCTFd0LAP2c9OH2%y0kvOTJx+DVsDOj)RTgI)lTo?aQlZn^_Sr1s%hbX`wFPi#
zY~GeGn^IK?NunX-p{1~^@gq25qewkyt#Z8Y?n3W!e3F)oGPF1pPtCa3k&0QJQfR2;
zOGf*s2voi6tG}i$whX#Gdm|5LNj>s|s&zfqw8Y9jrBekrP}VmuWfkp3aZsua2(u)b
z%3h<53{V4=72)`hq6i-ax%k86y}>pTjA`yr>Ae8s29=yBfiCpv$)QTn3&jnW_0YYr
zZUyDnL4Qs4?BoHdjGgBX72XD3j&)WfkL5#ci&1hmJJ!R=V%P5w&x6XM(QE+8UWGi#
zn#H}Mb#V+vxOY1i7f;9ni0D52zGZg^MusPe>19GW$Y+3xFI4_Q#!ub&y)n-p1m80X
z-eiv(>%xe#p-M;%?A>MmxpvVQPhri5^6}8=won%mhC#0))Kh3J2(laWqVJCFI=`$9
ztv<1igvvt<*e9LWdF~?z2WcV-f?`BvpTFNLHs`vW_}_zm;_^jekHV(bGV;=(<nbP3
zl{;2s1x7@14bbFPi+zqWE=SSn|3Nxazm*^?3FP=hVz<iM-R?{%9cJS)$|jdS09zDR
z0DN!d@Lq;0v>*jU>VG9ePPhfzKh;rg(8_2~6+b~Lzs!nF{z(GyKfNrV3UHaWlU#_y
zDllmow?lE<DDa-=fei{Muo&w|D5n$s(cNBrX_f>5=yn}6rgXG43`#EtDA$xfxW5CQ
zTM_0Bl)~eLBV?<F&8ilB%gxgXP>K%s0x3`Jz5q>5>}esOffq6OzrDk+xqRc3KOG(6
ztNNBE9c7P`VozJ@eh>&QK|{G8K2Yc1drY+ViYSG`pd%8LL`pl;EBTp9?FnrEAqb}w
zi-s;NaV^2=)8MDW?fzZyHgCAQ13_uJb$sCaGJ7SplNB)qSWw~Tp;4f=fWjDIzD`Ho
zgO+|TGfM)TH6hQ{iSDTA0WHpW(CTyNigd?QsJhz)Isu7tJ1YV_Rr_9kYSGjL{RnfJ
z1d<ybK?i5lV@rS=3JZ=fYx6%ZEBVW}eDATwLqEwfPb#GTZ!-*FJTI0?5cbR3fy`(3
z!&LYw(0BlvG#e(Q>w!#;e@VAp^eyj6+c~^7l%oh19r(Qg64EUA+aM5q;$rBWf`LPg
zE%SSYm&KJhESYyAR?rj=BGD|dk|KgX^KkGkGys+M3`Qr?sQHxtiO7jtlJ30@wv1Zk
zW2ZeOSMz=-2qXgV>MZyTu?@_qGvwz`oIpN1{qw!Z<*^7lTS^leP-Pr<F>uYNI3YnL
zqzR4&9)*Xi!5Ot)SC(}pp+55u3y?&lOOxOTvH2;GU$uI|ekpM0q}2AA3}Mh5T~iZ_
zfomXP3Gj%75{p2nDVeBG@jqdMzH(4{ufBdLnf~gR4{9@P(!bUCh$&uF4Gk@_7xYIN
zj62xIe^7~8gg1*68GO+1#lwZDjizA9NT>+(d1|m6b7lt?(kHiCuts>|iBL(+r%;|)
z-rWSpp9Bv!P_Q{x(Y(4#=(}`)$qCI;gDRS`C_>Gyuf$}*ttVWbs+f|yERIQA7Kd?K
zOAFw>-~`0T1WBL>QxB-vRK>T@lg|lSikB(OG{X*1tAPyG#aXf^Ysntel?#=O`bIfJ
z;T=p3U~?BJc{&^PWN_Ekl<aN|tDqoKNbs;`9mKS`xV4NdZKaf5&6|il^e)!U#3mc4
zW1fg;%8z2EG@k?-T3t2`-P%^w&NU+2BW3-e_UTV24!1lVbz}?Ntr#hV-piD3<(>5k
zvk_J-{-e!A@mb0*8-p4Ij_twKY|qJNGg<A_gArvQY#Lk$KtY8Q(1=q@?MVVh^`jFK
zQ(6{uvfl^8!C|<dgUAS6Jq{uV;W})V<SqR-15CVJL~7tbT&82t`>Z<i@=!~Skz?VY
zkP#%#RbHTiY(Sv~9x+Z|`r!X-%K_jtU_d(qnjaD$+IGiU__H&RVajvgdyG*R$Dqp@
zg4Fiy<xg5w?Bn0n_<{AuzS=9+xi|y$no*ET<}+|ntv!1?7}@Rd?;wLNTQZyhDaSAp
zep7W<-49;_47^Q<hu3fw^YD$|)<A<fRB+@PE(S9#AB<$XWeZx}q6Fb;!pIW>v;aBL
zic|bo-of~Z@e#DO8<Z<MmUC*6h>=QNT2l8Y(Jq>>K+Gc6URjpseqc-wjYGgS+G;Z6
z4T4zY9>|!tlWQK9l9NA)tacK*>7Z#Fz2l`4`!FCO59GW{<J5m5rGPIP4y`$|EK(n6
zbJ0XD?hB=-AE2`cHfV!Q25lh~|G`QlX4wo625Gmd@^-513%v$!sl`1^1xM7=M&N*Y
z5kaoUb-j(;Er-?mKn`QN3tsKmc#=^C?Z-fs1S8md^U62nXxrSuax<Llv`9AE_NG)P
z_6Xdo+WOxbd~$&miBpgRQGUNZVU%o|iH-x}9F{>*n*|_dbv$4#MT<o)7$IkTZ|2?|
zZb=(Dk&UrXt*X>%RDg>m`Y^pGB?zxZ0sk`E*xM$f*1a#kR{j;SWJB#<0~#~{=!u9(
z=Qj~?T}iX=03(c=`SXvGc?eq!BU*1x8DJ0onIrJTun@Zr!1Tepw%%0adq|-N08?QP
zGxYFQrG27RDsiwXk;h`DM_c0b_QFft(sxW6J`ko*SOqwt!`#I-j{xrOa0Ol8#R-s_
z=0N3pyi>vT^W{KR96kAP%$QF%2m!T(^<_kymTK_W;VOu$!Ty-4*P;da7EdUSK9Q@y
zk1K3#dvI%U@Dr++^McHUVF^c~gG~7o)*9j9ope>_cj>JzsIQ^RO&SGQmHPtW`>wB+
zIPj_PmbzKm_GX*>Ur89@mMZObDRvATawx=M2~sDGtL`|tDM1PMW30XcWI2&V%s+>0
zCXxA{W28xGWBgIrS{hsyd9dBxA{`@K#EVwFVROxG7!^kYZ@m-(E&EvA)K6(pg_^$y
zZ6oIZ&z=CX$a|%@6x;}*a>h6IN^PP)8;*lI-`-sYwjwE6mvCYt-We7*UL9yt!37Wc
zM2qa$6L-T0E=N(|M4-gj)7FFcB=>RFsQxC}0ALBG9vd8fx;x2O_qKf!hrVu<eZ14>
zy~6PmgLZK=PW-pv#(wF6zpZA1{r~`+lm7e<nI9-;C;CG@jySD&;C^c#M4HMd0*Ms*
zS2v^DV8aX@MCZ9vK_@(fVw$b}*P-5T^kF(rYJ6Gw5=JMCq=V<S!kdq^&YwWa;<RLt
z;W&&r-$P0+0N4rX6D5X3$FwjP6G*BE;~~X!&jfVIkRe(SLxU?j;9m<eh>F*KdvMhf
zFdUr-qc%<~+H2=b*crCU8m4NfRyx-0ra1;KSMpe2DcNb~BsTREis?R`s9#NHH(Sd%
zQYRapw4{l^y=>Y^5)sKCjfjOMdmXLe+aVqCQ>Pe07I&zHWa&T4mXCkHwfg9<rNC?Y
z-dXMrX9!imWw2epNn3kUiO%!UE*4<wvPD0CqZ7lC&?R|jLK5kNG=264N)X|zFo!7t
zAvO}~4s46E9`x{@c&6qBhW=V*`ZR)jcC;`{%Kg|BGt5z2B;d|-743fV+^++n?#*Ds
zxF-)NJ(AShwBS-4i2N4a-FME@$69#^+7-MC3eZWoasHF^{CBk|u;P@ZLa+e{pPZ^%
zr=JGTlH&$I3^#CD*y?}#tboFkDk1pSWa2;KIk|?OGy&|gzt9QRtU9=;TPn<r6yio+
z+I||vp9ByU+gPzlIVF+4SOw^+K<mgF_YQ2tPbawq)3}Rx%~f4|WOQJ0%`<9?4V^kZ
z$Z_}DCQ#Q6o;W%(UMp%$Cn8#;O4QNbqagUO0ai81O~FZ^<hQ=N`@mNK6AFP3(r-c7
z)t(@giull(C@2&)>3FR{2G6bWs;NMDHPQdX;7n&<&P7)f|Is|?8ihV+2_S<FYVgF=
zhgU3#s(oyg<T8|p2!aNeyx||i)UDjc-C86ky`END6~EIWLeF&F4HA^2U<IzfK5JY7
zJw-_}%9P9pQ?)H&RvZsr)Ew#Y$Q2$%aJnDHnRo{S2UIx-t`j@Ox1Y<RkKc7LC}Y+~
zYSSa#kESS6;9_2(4NruFKajz2=d(&wauVdO2Mw1%pT^*)kNolFC`s25bqf%Bazm=E
zt?=*N$YQcZG%wn`M>ob3_Ydf0R5yh_XMl4KJyst)VJtMPdr7Smo`PJv2Y;pdg6IQ)
zi{pr^Nicn3wB{~CgNzw%hr5S$3grE&(dtvXKddDYK1j9$SuO~ipimL7$@>OrR$Zs`
zLyHWua>kc(v?>#|)KidBNrl4V4_rq`X#_$tofN4J0{aNM+LBx_u1!jxR(8RN*Qp`x
z2KX9MvK%1>aW-7Rr*RE0UQX40J5Zy?l9-&@E+>BRg2Kg97e{`U?{Iiw5+?Bc|I=j#
zMc_z6gM^8Y@6TsPZLj5op5>`)g}=}>l@Y8DG&b=!76QBq+SRB=mW121+k`_M@(3k*
zt!OfuDO&ca3BICk`h?B#_p&dJw3Oje)VP&svm2?Ff+zwtpheDV%*^o>r_|)%yO3#u
ze+Z%uww5}mF@{a;SZ>|4N3g+)S|UdYS^;7(;_W2LRwxWWJv}}|7y722-jmpH1f9qV
zgMde&;o^`sZ9SkJ*#aDZh3(_*z-1rHCVNK+cKTAXdolyKw$tl9wU<F2_&m^Wl^hcM
zijoQsgphrJN!y4gp)3ByhCZZ0E-?&+{uTs*TJfaE|C@)wgKI^jC}pe;8&=13?beb}
z{75fXLd@UR7Z!oet^WM4SD4zd3pVB3)I2#!U&!m@%V|4Y#I31$AfnyC&jR|Ftl!FW
zg}aX$UixIo)+~bTJ3g_(BaVKw8<n696qvBTk#+5zppkm#o6+N7TdlXcrgayl-`Vt5
z2cNb4mRkoGf96=VaD$X2NsGidQwjDBqSeF|$2UaEgG<X{q_t3Bs*f%kR@anH`0WIH
zLLL{~-F~1WA`yg~b>8}GX=^IS<^uPsf_^^YQeEc=5yTIr;C}Z^F{3oa3If`Zy4<*!
zSYk?*%@=Qn7~YIS!;5(D0*^!)w8?FSC;suba@ZC9or1Rsei>Hl69kms@wfH0k4RgP
zK<+_fo32eCy5nJY^lVS!Q7a^!0HbPE+)KHrz_l1S>s@%6SR2Rg2O!mw49t=gHhtWK
zc!zICe-txn`5+^`vR|8&y%H40YO`tRm|nZFSo<=eG><`*?JoSWL9u1X74ga?SS>Ze
zfFz;=fCiO1y<t$N%-Ca9lTLci9E!Q@K|?w$SP#dbx1xqyOUbIXqJyvIBsgnmhsWiS
zl7kRfT^0n&ZCpxbr}jB57*^<ZQ`qZIu$svg+7e<O0;rzw1o$%@T=G6)M%`XBocw22
z;7EL8M0SK|@`N6_&`0$o3I0sO9+1e`1HPXVS@t`|HeBuAr?pL-X+Tu8JuI{(BbUI6
zi413P4==#6y20AG{KGL)i$_N;xn%x+AxmC^pv(!53p(z05r~Kb2E{){UvGUnV6|V1
zEd~U3Jk?*GE<SY4d(n2@-+M<p5miWG36SQ7ob+RZoyxmJp~r+47L(VsC6&aWh<msp
zyttQMIQR5)H7xNwSEQH7KXy1eQO9QJ`X<@|#t(VT6uoZ&vI4duc;X$CRhF+5Gc3zT
z8y=mfL8~2y5X2pN(WcQXV0F3#4G+AFhEE8O7~0f{1Vb_o&om@+NzWx(@{tKuQ0H>W
zNiP+$JfRaXi@?`-1)~!}vc_~p#6`ej==kS<=vvb;Hw%ORvc2*(Qp;M)PL<la2oNmI
z4qa!Z-l1}>B!C{py*|EW6#l>?4C!YtN{1)rT{_stpxymkyCq)N7|8~b2L^w<U8dGf
zC^EDlCTo?w-^6Hk*4~U0Y9UG1uiokB#VRnf+>Oaee1(~Q7>q~>V!t)LEzGE;EhLCE
zM&g>`ozu1#B_{V$F$dug|2JR`-W#ygKesX!ysWRE+;KPY;9gHhc;flo29P_@!mXg4
z=!7<Zg8XFS!_P)Uyex>Iy(na$rJofBQJZ=<Ke0a$U5U9&!rdo!L2e}At*9@t@I5Wn
za&OodIa#yd42RuK;@ecY(}#wr)kSm^y=ManH(>y*ZADwE(HRv&s~jqPPE|$Gr_O*n
z!MFvmk>j@y{}BADd$6tP`e33EcY9@N;u34Rz7o|df%L^H*VnsHA0LhLZ+(0K0r!di
zqY(0mCtO1(Jduw7@V)zoS{?bK0wu!}6We!U1t6zH&0_%Xxl1#nCA}-H3ou!Do2D7c
zPr%=q;j{#yKk}U&Kp0p9;O8b!L^{Sgvd6>(uEoWC1Gq!0!$@eN5H>{<C`<n=SDPY4
zI)-}Z6I;Z{atqG7>yP0wMueUfB65%{Zc-R%srGWR&Bm9(YN0_WBq6&Ggv>ho4@qJ-
zY!8^r0a?9jGYm*tLVuj#K#PPY<OMOX#K6xXs)kSYqNi26!&|8cPXR4vMDa8b0%T=7
zwXu_NMP*@h%3}#l;R)~1FrePf;ednuwv9XG)QU1Sh$O+`_7pSVQv+bJd|*%N!6ND%
zJi!SDp-LYoUzj@WBywRa8d!1!T>PMRuO!aA41Oh67;XO>qXJCL9tDu_cg(c<c5=gj
za^x1Svm(nU__mlShDoctp#Uf`)BSyV2%J4|9TW44y-t7*PB9ZR+LGTI3DN;j`&&j{
zF)e*)4tdP+^%F^0iQt)>!%RBe5AAEyWWo8bAe=s&l#6sfB^ZUHL|NpSGZ3;eK<>IK
z%GHZ;u?eI+L_BK@As5O+0$l@mD-qHc`-k*+<ee5vL-b%=8hW!7ZA040k+uZVvS7Rb
z&CGs3>a}}-J&*#-PfQhrgCv*x2dpkEA@7n5GDOd4YRP){)j+_L;DV^9rrut$9~Vf-
zB{C||EDZ9vy%zD`h;-g3RMdw@z$bW-{!cA$8JuFPl=zQrJjDj=e{Ryd^5S70D&|2(
zhK`5mg|d3WXSQb-xmfRZE&ip7MY63Xe*e&x;0x6jr7|(gy9kdC1*z+)%zCJKq!L9N
zPweFH(FMt=Jk?=cK^$fZYRi9@k9u1Rs+$S_-q7v67jx29g9T@Pr2IZVF7aW(^!^eD
zQkfAzNik#quhvlN<(24AJ~>t;CPTsO77cAvI-Zd`2w}6qq)WVujPf{e_!YDxzps>c
zZc|Xc1GbIf?5Mtfj_XUu-@@EdIw?@rp(dQ1AT!>bl0`iYxaOabn7ofi7yzEAg-;xP
zoa1iAg7XSArW0Ki^FmEiaskTSf-LD=Uv|1;h*SVSs?G5JB_Mdqm!swu@Q5)whO@oL
z@&Rt0v9Fuzgtrq=Tv0O(qJUwmj@slFIE{}v`~WWj<MIX93rM0wluWlAz_zp5Coea-
z(Z*90Tr8&`!{GyXQ72-#{B~%oW54658IbPtSY5y{HXl}qD_D!59e0*;0aI!GU8*^W
z`9Rrn3>4I22N+n~VzgLrT0U*4*5so$N_!WPUF>;I)^i|?N#1v)NM=!Ya|@ISMa#w-
z$}%77<Y9HIsrh7(3}pp{Euxa-#;;9KFd)`*1FKz|fDsZ8zxR$|FcD=8cBo85IOc^8
z51?8DKw>!{L{Hl)Fq6#_9?PU?>a!<NY*%@R2(%onE64xdlmnwm1Re7(Rh~Gg$Yu^4
z4~g=(dlCctj`rwE?B!*Ys>(5cZ&@>!t0uG<P+JyFR^TN65t5Y{$(|;fnWxh7&#7M#
z-qQ<xZA+dMj-qkQQ|(FH@Ptn)7FLyt9vH1H45Z^m(j7)F#!aLMvEDku>3O8q>-;it
zrWRtE?)Tg8V9*b^&2L<GzzoR421&1?Pl3M1__c62f!qC5Yx=8abUds6!aZ%uwTbsM
z+Em-pZVu%(^PZ<n|3YNbmr_R<Rk{JGidNr4%0-fLRb_1W3r=w0voRR;0u5oXn8qNd
z-4PMHb~W#r0g_JC>R4bZaMJ0751bVujgKMgcTn~9CPuJ@kopoz9-%M>xQ}pmQn-&n
zoekrJvSib&(tZd9@^JSY?U0CA-mO0lFQ#!uB+wleo_V3ogjO?SQxg<^>`9G=sq36$
zzW$xq4>fkUMvbCs2n@8a_{3s5K}J=a_92y|H$VVhp&dUwd8~5tdu@OA=f!1R!ej1R
zSx9<mbKuSlL%|>r`<)*yaKN_Ol}U#d$yYyt`s2Vd9GBxue()`Efgh9ilTHxX5}uG7
z9=mouPl{Z$F=VNXqW}TuF4YLc$oUr+h?gig9ObnIVbKPR$8p^D_g{W3&I5mG9~d)w
zcJ9D)y>VSSe&HEf-Dh)&{PFN$6`VHxQSrCCI|5i}Dfhy_^%YQ=oz}84Btg9Z#!J0s
z75u~<MG%T22t$AHm*C;i@W=}y9P#I#IgCYb&NXN46NskO4N>jh_PqXkaul%4XXrMX
z0T|de6QCwdnP-xM5)6+wxWF6g33FVFiE)2?$BBK^WKr2#X&1IgcyoJBz}5CZm&319
zFNcF5%%sWJedfrRFza>ryTuc1Y68eLw;1!eoLEU4RM-K{C%Ajf!pldk#(T1W8oy3^
zd6#j4BpYaUz>nW9rsQ7mb}i^D${LCxVR%3LU5t<!>|P#&*z08crDP3t)13I_JO*Vs
zk*~U!+6HvbYiH)ala$MUr&49;RV_`Xi)<h*^RBo8j{_vqGjOr4rVQQUvO5r8fjB^4
zii35EB3Kf&1QQRv(9Wl07iKkx(Ly91qJ5S2Q0He`tNh#6_55S7=$3`<bzRm_5J9(p
zNNkzjonRse(NR40WnlM4%2(YfmG4J18ZUL}SdnyWNLEiL<$>2SPb(St<wP*LLf6wS
zM0+J(3dwQpQK;qGlK}3dr4NFUEU7DwiWFr`;W9)Cy(j3-lY(x_pB+}CB+(Dif8sbC
zl|%HJ?gfoi9(kdeALN@jc{J)vK#Uemq87^uSWLu9WwyL0@7UO+EAOrwA3K5ot`)af
zyJ7s(;>O6Lfu4oE%1Mj}*6D6yGgGJ0fU*#58n1Ne4kB4Yop@ffO1x;12+DtdB$}9(
zc8kNDqS`p(5<I}Us$wl@*BiV*$RL_XKu7*WgL&4&QNWW5Pik5B*;0VT!^7_-W_&od
zNImb)P$dYy-DxsBVU13z=pBrXAGsD81KnjY%>%7_Il6%!a5est{yU+G+TY?zO>?LT
zMxvx+A8}UxLqwxKbjwEExG|QLl|on2sPPHE8%wm03ljRoE&i4($Z>44x1doW{FVXZ
zA>1Wyi~P-ZZJI&{qm~o7y-%&+?r8CwPCMwSLwd}^<4c=c1!exvj#hE2z(||nyFt9M
z7<#qT<^p<qeR;fyR40GUewXHw0izIZ1tYx5YVO3-%$MFv+`r>8f}d?uce=CA*fB@&
zXcUbDJp5K31Dl+PiEhW8^CHIZm4r6Uj@9$VE05LKf^-w(#Wx{C2{hp8T~RMdrV#Yl
z$bDjx)jd+Nte*mu9|ewsd$#imry)btDa3*WOwNO(<BpC(2uDpi<S+=~7~r!-aW~d3
z!QFHd60|U~ruVmS*D^MXlb!j=;-B^i<Ggz##LgHH(se}>6);Ce8x~(va{bS<bOQ4n
z$b0sQ28_De4@DgvPIK)z)*#~Mgr!iEwo(Yd(Xbx1Jji5%mW%x!YRyNHK|Z>{8nf;_
zHw<lbd_iQ=EQDMOi0QAcMP2-_K8j={4Q2Z6x+sqz0wGgztmVOM6kZ@IG)U;{1?T6(
zr{D6fZu+Igf3wJ+j@Po|4!*B-uua#ZqezoKJTCDQ2lAngQ{E?z_T)(?z6DP{Ye{s=
zj;SDjg0A3K(gX6^__BG01E71fu?!zxB_kZ*uvofpx^$~)+8uW^oO6i#{w1~Up!Y%b
zu`zsoDlM_ixMTI?+lHpN#0TPID_TEw`<?m4!|$FDNl;vR3P>7+WDNlCV@cHNIl%@_
z{7w=#U+G9b9q9`8Z{T3(p;AH4On`osJirQ=3P-mrG=ptSi=VVJ5Jt5nWBzUmQgq34
zXwAQo*T&oDux)VJ<^(2fA8RyL3wDo=%}T%>bz=nwDzh1u%{$W$!0Z!VsyqUsut6D-
zzmmL@I8dNn@eD8a(|nq7?r8`0SiBS6=d|v8?d9Y5?PG(4+EDui*>sQSIK2NpmF)F<
zzy%V}{FDI$3z9%NJezw>R18pEL$O`sVXC8gY);%}a?Y(+S_qtcyI-oGK=3JTA%??I
z{0TwDQLzI%LPl{rh{FZ|Lk$3WTrhN_g;*$*PKdkhU7F}qZnN1{`+HqF#;?+Fb!iO8
zs(j$<on}j!#^MpmY59@~8<9?hgSu-TG4kWW))^rGOU~aCbp_=IxY(aka2pIro3kA=
z1*KI%7HoZJ#=cK!0+lw8EP~P_X2l!RgjjT0D$_pVOI>p&FBzoEEEehdoMQ{xC$b(Z
zUmW8wvtJ^FXK{sK*QN6{&VB88jQg6bQ^!A!57MfP^M*wMFCN--%=p3{wAWDhrh(&`
ze7__4{W8Wt1|mIT<v($klS_a9drKY<+)L0qnEif_1ReoitH#atDVkubF1>fYP3PXE
zgI`CjhPcd?p3r|3rPyiU11}1X2e$3Gc0%BVO8&b>+5DhpMw-{^C!8PXJ~lRJ7Z6`*
zm7lny3Ov%TIq37cBTuVC#!w$Mp#n7Ws2DnP7ZZv>JxRx=g6S>AP4-_ZyBcIdBQ+RX
zEb-!LvAemI;c#5waIzsIcib2!>`p}Q)0r;Wo6Gm&>~EcT#03=3*8_S%go>-NqZf{b
z$K-`Y8|_+|NMdlQx0RGA!2bhC%zKl`i_k=ONz5qxqD3zrG3YUP;IgX~%ke?>m=c_#
zHl18<b4$L(5wRzF_on{HFuk)OP_M+%=PIx==Wg;>eaDG6C&AleaCC=rxf~4U&!vgN
zLL+*YJQSL77uOzgJ+gW<KhTTI7e$k1=p`}5Y;XAYPCdQYOsDvz|E{~$rA833chIj)
z@cF-zTg~^!`ep=J+gI5fDm*Ux`T29B0<+D-n%}I`uE^1Dm?E%2ka(t6w-(jV&{jG`
zAp}}{a11vrkTu@E$e9(vV_tmswUvCi!_)qa)!TfWesgT>Lym5jS^VOUp~FRK<=>~i
zJkp4o%6QEsSg0r#J2rI!mNeCmzdqIdtkkjLla|`vN22QgM7dkK_xyvZbBoq!t#E8E
zG&^yiIAm;y<A6)edxchHwsQ8u!9#oba=qdrMo$)wj|ZBC{_WV~XLp(x>(|Y9ihIt-
zWuQuYNd6}H=fNQG0*}ov0k0dcnp%#rX*;{W^O7zZ@)(k7uv=CCnP(4L`74UEyKi?U
zC68P{X>t|UX3pNXyQW>{I&r@BXgm_jBDTFDw=iMtr!vDabYD7^FG<cIguWw2yKJJd
z?hFU0@+?hs-B!xt)yF4{&^Xh+e07y^KeO_>mkJn_%2Fy-qwjp9EQ)3puG6&aI+3ZH
zv@~`rY%e{`(T<<R>6s$kf~Zf>##;CD>*g0v-VB|&oTo8=d8ql^y_YwF9>%Et=p69I
z?R_-#>+6tsucZ3Q7k5;AYt@<2+`)}gE^lF*8wL{3)pUPWX(_>LTdNh{`ddkCBS24`
zo^z{IiKAbbeZ|Mxf#cVdxzu%+0@l^xhwBU$TGb6!UpBbsH5o`*@z>d|r@Qjh-LP2c
zTer&pT4b8qrt-!8e#1-<7+U*MhQFs4**tQ(Lg#+adb&li|98LD0Oh2yxGC!zdyA!q
zQY){&H{~C>!s?#2e(pzc&V#m#&ek<uMst5XN9Hcr&pZvvIY09zIK)16piAUq)*DJL
zp!Hc_sf@FwnoeSTScmC!ksRMZT$N*2$dAI{*|B{!nOjxrZ|m*`Eyylwjd8w9Ime%*
zko3An>a&?Ge}U>c-w-BjHt}^4*SDfk?-e6laq`5x`LFGhM%$c;*VuC1KR>yv(0W3r
zMtCJQBjrctVT+$0wW)kp%<ZDbbO!!RdyedM*3KQg;58-IIN)7j9iKmEQ`T3#E-<V3
zX`-uL^nq%brc9U;(2zeLAb!yNQUCE#@6=DHU-rRse;-7hsCM-$d>g8CP_?(A3h($V
zC)7-r^PMmDt?kzm^Aw|h2fLFCs_++2(CGU7r6C@vDs9BbqAe?%Pe;GHRyp^qaGT~w
z{F(3H4$UXr9Ld@HsImFGp*Y+2jC+s3u*2fVwLi9V4RaivyFz%sMQy!SHCuQ$Zytg&
z`q=<quoDSX&hDRIGPGEUPudsV_TX)6gG8TEK})$Ltf#cJ>X%~BG4Z6Zj}vcH^Rta=
zZbna4XEs$krbIc$==pv3JL34@V?dUi(3iq3jykS*rHYwLYTD9f6>d}21=&U?f2mzM
z%j3*7rjl*6p{&#;(;;lUbh^U5;7QuP2k&P6M%&e+4J;Nrf{ut<NM9S>{L4S9!Lprq
zMlM@BTilh^-F&=L%Ef9(qjmav?gGzPyN!XTBVXUSV}OL!ZR-Y`!{cwArjnJsI{i9$
z3v#9(EouC!b$uM?n5gJ|U+aT%o<yM6*&K<vfKwlGJ1*wED{Of8S>l`UMLWoE6J1b|
z-qTTPb59{orEE0r{M97yF9GW}jEW%A@y^J9-sDZWIs7<M=?}?1uM#d$E)LezPpcwK
z{rp#AzHqU0S^w3aYImgPusX8^w#`MHsr#DtzBx19^~>m$`~VXQbwMyZ^q`Vs{5527
z`{^6WE9RVQoqI5c)R*EX@Lo$Nm*R!S+Me8f`M4x+q~EK`v~xkl%Kh^xL#*<H%&LYr
z9zW#m7A*(iE)nIirI~r94M7Ga>PaZ`aaZd=Pd%kvTep2dY27M*@6Y80)m^b~<sI_3
z|0coj`aakQ_xyU7f^=$7fO1R3PwuaEk?!!6lDsNMZ6zZPw}*(4=ZjY5J`c@!7gU$B
zw6}|GnLAhZOFr=Oi}^Vpnxgo#Q2s$i*DtZ$(QKawH<vT~UcPtBSbgL6W6eXUqkL&p
zu6@g)HN!qy%H0-9H{MIXh-HOEz+ztova)pUv5%NNv)Xs@(WQG~(b!Ih&c|=>7GFC(
zr^e7I$@4S!6C3AdfTiJ)^*cVpwN?YI{&SMPB{t&{_aAKzzRVSuJ&SkA>@1HzRgynI
zv}SH;h>;1d!E4GPA@Oqu!8K};Q!y_VpxW_$`eNHXIx|I~vM0f0hEO`5tI6kw()?;q
zm(J^(*@1~ZSBkwpdC=d}cwIH4fqnh4VPNp~4<ba<qB9!xRhvy*4*aEEbJ1P}OXnV$
z-3%EqH+VY|Sbu1K@9C!w4Q(2~DpENujN`}Du~n0frQmfqzc$QMgp5b3!>ns{vFi-U
zKR#4FQ!BGI(3d@u%xRW6e`Ej**uY!CHZ{v#2Hq13+)Vw3=$^1;`N4s*>_MnE4i$^Y
zge8~w`Cg>gdmfTNI6|v*_a64OM(1>i8PCS7XhjGF)9TeEfd`i))@_~Ao2K$Ae*VoC
zRqgU4(%b-QZcpU@r%fkM)ced6ndZ+)5A=hCbPu&kuijlY;t*p>{*n3j#6YFFl;}nN
zT7j{Sxb)P&zxy*M|KLskwxv*L>`@H{Txxy1RxR~7ENdn6lakSP@$@UHUfH2GvquIi
zQoSit@tK@f6Yc^b?`w^Pe^rm6gOV5xrflORgiF$&Tsg!YXunV$7AIwPrav#vtU`AW
zb5?(O$BhHiZs+coWM!(p72?ev5`G}lSZDVpcr;x=_<`$KRl$45-pvNyKQ3Rm-*9m3
zrsY_1f63>ddkU%G9@V1#%<KNQG|rAj_c`p!Xt1vx#19fU=7a^g0>$i;7aF=+n*4l1
zhwt=H<gffGai;OtgFFrKFEwqdYKL<#IQj)oy3YaA<}I*kDg;ua(j0xD={H~3&py)d
zj#A}B;X1BB+}+&f(st7rdu#T$fcIBpix18m*xG2>vU;S^>Nu|WJTrH+rf@ka<4wb}
zq`}L$AFth+=R!?BPP7P_4m22ltjY*0?w33w8dzfe+^?g;^h<GT8Lpz^pS?4TD*02@
z6?z{ezICsfizlh}2b$Qp)W<pE6n{RA`cd33U6(c#dOvt3sBq}%@<qcNaj60~`&BnZ
z4Rbrn8^U_0WIUexjn!nVDtSzt541{tho6coUVK<<HslxoMm@LN(6081TCBXcO1rU5
zLAuxz51s&9TSv9kJXD<fz>4t2r3>n1Ln(zDmG1rA58RJ+@Ljd7O?2gtax}!vp0D$Z
zKT*o}&$i0vpqL+#_ti?goCEoW9_jsbXyqArCNVP?q<#N%_qyU4gVqtBtfpkUS+hX3
z<qFUX0_<MO#V(y~-Ime6*3Y{S|9mnWdH%6<L`r*In|z_sW`l-8bg55foEN6b(DjLk
z*Jf9@UGs++`T3!JwiQDman8a02lSmabl0W#@~=AA&T-{9tWJv@Xiyw*=L^h|H*Dk!
zihup_dtPAH;EmkT4!_7BA!yzpmuy9&`-i^Wz52@E&-ziR`)t%!S8&IhVa0E+oz1h`
zPCk)$d6BzdJ+~|$m~|y-F59`$(yXE>&SG|RL&?ad&?Xzu>cZnRZGKgx#e#)sYoY%A
zVB?l3xnku5#b*6=?tL0w=`#%jTjoW)bBU`;Z?zf$ecraHuj+03m2_3Sj#IEu(zfDX
z7d5orw_cWUOzk!P$Hz41Wr_0m?@!V=<1K9Y&2J9Ad3gN%u^BG*=OwQi2AqR>8_tDf
z%4ff9x_<mZW6Tiz+ug90AL*j6YW)h9^m*zGmrh2T*YF={^ss4Hc_Y8@^hk+^ie+Xz
zAkb^2&+wVlWwWdA&ky0NR*K670=r!vH+zgXY`U!F>NR$BBS*F*oGsrZoo-xEpPKEA
zKQaGZv2}VvuBfZxX--p~UtHo`cC}&j2N|E1${^2sE}JVJV~MF2S#!fJ3$JSj_$PjJ
zf`BJw?5T4%jQ6y+0q;hhjQwilxbTC3^gVsTH$%RyMcnyrcP(9DttwY%ymD>wZBD9v
z@Z-z-4PG&u_@z50JpF2poIX`^5#9fsp6=eS6qm<ce%b>f6Gk^opLr*)_B-3VzrWgD
zV&8cq%kQmz&drpon|>~8XF9L;7cE(-Xm93@zK>jfH#lH4hIZgxXDVHv_zS-MMa^I3
zhEea&&<6uz(=+DTZ{tsQ{}7pZBGczC(oqs3ad}bk>eRG!2;SnF=;DRrChI<Kr~Z$v
zH;;$<-T(isQ7KEJ%~BE~Ymv+hk|b*>OJog|W$X;YkRm(T!_Y>HUG_cu)(F`d+ZeLW
zjBOa>drjxO&pDsp?e|Z&dcS$C*Xz2T*Yo*!-XBX{G4j|e@!x~aM3a<cbSGW^s6qdv
zv_4bIAcd@4$HR>$iyedxxk}`acpFgZR}ap}lU_g6NgJsm5BjDE4<%X+@s%YCZ}Ay!
zAx#&5g@f%;#05zyZCbubj7#<Q{0CW?8heSDx5uj&9*oF;MV5=l9(_PoxRwVYyJq}H
zL_s5h;V()rLNETdvB=I&C`?iBGYl#_+C8&<snfCgar`JR{>h{MOQjQ4V2kO_bgB0C
zwVYR7CI)~|etoUWRP#l`##b}YgZK|$>)#t^z;`bDuV5XpfPvRS<vIL_Avntal%)TY
zi~nD;;d9VQRBV{j)cLQ<%0K1i|JGS(f1}~A!MQ*q`yo-0d+z_JmTB9@|356aJ~%<1
z^Sl34j!U?Adf)-^lfaNHI|ex?w1@}%8VPpWk$*P+Kzz-)E(pYV+EakNVYNGi+8^3j
zJD{#D(vUKRxz7LIl!H4sWia*E^o0<EN~bl~%%gj{ooU#hJZNc|a2_uW!;+*+>w+C_
zgUR#xEf+0<R$T90TGw{C*TGo*zG)R;PSDsfN}qUZrkL}d#z)cQ!*!rnHoKm>RIeM#
z@B4Inbc6P5r{6lA1toua2GI9=7uew_^wBzvH^>+iEW>|mWKjuA{>kus<~;bB(@c^T
zQ!h3^|9Gi)54kV7E+JsIKU24K5rdqU>j$Sl@JJgQzeIy~oGoy47td<=!Q}I9YQR8G
zN6+WSiN1JXAh;2tP}9hpCjvPOdb$tZID3_(efki6qm%dArK=w0zK3Zxq>D5o9eXsw
zZkL8a@O|hUISK*2#aiXn6DxgP7F43l)>n%`8f)SiFyhk-6$tRzzpM~^=5$s%{a1Am
z=$Ho;AaUYh5r01LZ+_k=POg=pnPe@}05w&!d}}GJW~)8F$1?>EcG~<Bv6b%j@H$C3
z8mrpyNIC!wJ=@>iT%>i{`_i~Kweo~%B8rMf8QOW#G^x@dbd5k}VrJoUcm~{zRTVHt
z%E<SdSjtYD+{m6_F;S@O(CGuezT#Zy7Wux1R)Wsum?E{&@I@P#0}5sl7zJ8Z4VLC7
z4(2~jb9M<nyOFQRB7k(cF%`&|y-T<My<d0f_p2KlJn29!`RWLp(sd!&#Ad#?&Nkqr
zR1HOfM(S)Zil!(05@@)WCNIx1I(qXud`k%}SXczUQ@Fr$`S(Gi)<)l~Ix{-d4A?d5
z(J(#zV3d+PQoGD9O#rsi-OSyAoIlvtxgks@de^64HrH}ywiW9{y|w*bM{E9`xIuDr
z@Xp3514J{0X$->5BfS32V*fI9ik|&Wu<s=Ri2C4XGroaNK(Mp&t4MZ^0+f}?-3^W%
z&@i3`coxbDZpe)f0y;E;gps5D=i;H7`D@~X>?YGdSZ?e_KPf@YLG9+OUVByUahT0T
z3TUCGE((Ox>_tl+JR2_k>LCKs%m8sl0g<KmUoaDmIOHiHXig<2>lxL|oUE>8S~#`|
zpg&Gic*zEU?y>k7@p##~TUR&(fMsgkDpoiDKE}}_=lnN*Ej9tnM))p4apAakh1yIb
zH9RW+lxV{>=@%?dDt?^IZ)hHH4jL?tPQHBjHt{_}<CZle7CiV*W0PBDi(-0+yRHUK
z$>iO<&*w6Gtm~c`n2UzpH~^n9yt~Zzd0_GHoS{~+!s|iy&?S>+!@-Inj5E^{GtVn_
zh43g*NxzY<{5ln2f)NzP<inW4&k%af?GA8QT|+OlJdjw}!yW{9-<hA;H4XqM0`3x;
z66YO5&-Lrj!WhN*lv@RklYM*}HwO!o%x2FFohln~0+WkMW&>#7r`+-dfQVmwFQT$+
zEJDs7t+_7qgk+qy;1suJ87MpCVjkps1WCgM6#zph!#}L*|KtL+#5H2y@bcZ2t9Yk3
zbs}@;7CaS`1=2F*%aIH^98*~7?L!ZJ@dQspB;Mo1Xp8&&XM84gF|*ZiHk$@I^7YIn
z>A~NX%88xMawK$=J_9(jKm}JSLExasdk0W9+$Jn>V_53e<PAIY{<6KEXT|x>bT0tk
z+AV1I)~Q?bUo(}FaN^IZX%?20Sy3|u+QbLkK7g<>+C`?>Y3}X6sXggu2d2Rce!^>w
zj})s(ApvrGf<=zc(IozRe#LvV+PL(6%iai%mW)*ZGs>n7^RUSYEM;Ed1UnrHU;#WV
z-W!)YKbEQPI?`?4AavC*s}tHu!+mT3RDeQ;=b*`A4e6&AWNPLuDHVgXd%i;bO9~kj
zmO^yY+46!7i#Y?NWVqN?%i_}xwHbWc4q^DKML~Nf(f-ZF{cb^&ZvoVW80u%p2avpb
z*8tdE{r+E+3eF6@z{9pH7s0tawoAHf_(>^sON`qm5Y(!l^#}WFYY(H&JNO+vmiDa4
z=zWwHU;>-Tki_-xS*Df{prVL9Js5e;V}Hq_Ug_emVE&D)$xFUx2R3!iy~qV>xVtr;
zO^mmFZDnrJ1$91Ep=!(m2#;H?7npC{d8Xc>0@`UFVPR|cUwcaV{)*rV>N1|!F{+cA
z1BP?10QrIfbGKK{-+tNKhsOceLr)~b<Nl35pFdPJ)e!qmvQvorR4_*u@721LSF~K|
zqk$Y~CSa?vk;zp9pNNis;qgMu(Mqco8$WpKq-lhRu;kpG=uf~Nu?$|{lctaZrfg@i
zx}_wH2pgkP&-CL6Z0T*Xf1>dWb6P%-*Po&)9^`I#qqe=n>}6T_JoIl+cV_p#rq^$b
zlsCSD(fek$9LX=2S$hz4i50S_srSdvbx+c}Qfo%NGY7izY;mx>&U3ruDCTYe7~LMB
zujUbw+dQ7|vzTO(!^AN#wN@Ebeh(mX6!h1GibE}r$%FppM$N(_N4{$YDznnqGJZNU
z@5XCaJqspfo8E2mY;^-iK^qK)ctGZ$(1vN)8e+!J=+uoQ|8V$PQnECaXHxb_1!Hvl
zn$DVdh(?$vubGQ#cXp}6(AIoLYGojcewN-84Y`DsJ&H{J0o=h;ccAl1MnFNsj&&H!
z)r3?;cxsdR?El(<+&*kJFPpr0=m?;(BwvJ8^t*?#1TbB&vB+1IQC?f5F~n}YovX0e
z?Mv<p6G5l&?+v$k)q96nIeM>-D{9`OQFjcuvXYOhNfWJ`X$ZU3H4&_L8m}Iv1Bu`v
zA?3TeCgAn^M0GsqZn0yK0&~#r^Jck3<3_x&uWk$RSxyE|iD#N_E$pvzomBF~^l|Tn
zx`D>cjg5Xi0mQl0(4WxladQ~@ENvbIx^J-lCZDh{;QU?F<K!H#3*8)8)k-Lm%!Wu+
zg0*$npR?q7Y$S#sg0eCmuHPT4*MZdId|IZbXHT^((%kYk!i{R)?^TnVMPM?u;6u|p
z*vB3`?v{5+^(P%$8Y;l>ievP46<-%nrhNMrJ-7^R)Uw?W<)Qh0_KRDPJDc~%5%`Sq
z3#I`D*P?h$5AY~z&K@EWPl)jwpRH<T`eby@CrBJfvN^D7;=Q-&`TKAyGb`!H%3+&D
zgUsCrb(IPjms?CHE3C4U8F=s4dE;o`{CoRZ+LE2Xa??+V$F3r1?)^an3ru={By-<n
zMyFAkI;*UU+B8D_-nY?EDJ|4Gv-S8gB`BIgu4~!~qtK@6ItJvT(oh8Da{-72`oN-5
zyLy>{Z6eiQ`S!7q_B2PN;68}A%Hc8cx{g5ik$XFkeYfa<Hb12B-M}?Lf^_Rl^Otvj
zXx$s<<?~&57pCyC>&TpwJ%2GlFsS)jEc>V}nY3w!-BHnzau4yEd3TBZ6pd2o<rh%g
z9XmpXfzJ_WVs|9RzM0`J*B;>(__-<1ZD;7-)1eXj&RCi8o#p*3Gy~fj1;loBMv4rF
zBIh~8X|TH-0QqROo}u?6wCJI`Ab3TLX4CCD>-Ib70+)k(UIP6}cjTM2@Q}|U`gbt8
zAt`gOT==K#M|SNhe>zQ6m5$ARgR7OPWF>MIngjD#dk3j>oZ?^Szzz0;b@s5e+*!XJ
z^S#lbY}1K9hG7^#-uW7r=xO+AorpMuq*)r5)MwX%O<oj%cLHq>DY$%Qo}6K18OOjj
z{Z`=M7~Dtg5oocmdp<*^5fCRh7k2!8It|c$$6gTj8ti$^rzq_ju=|hXKRliwCY5W0
z5u|69vokU09aXS6&78*qsC{9{N5Yw1YR_}D54mx6cb8+qU|NDH%|CJ(wh9$SGvdY~
zNZ-ikn!D0zA!gOkiB4SAkFKL+d(}U8VQ6(4Gfi9Loa?P^+abo|*9CF4#Uq&xLI(HQ
zKIz5AEe#a4@sIJ{3ohWW+AF-3MQRs{(H@tQ9Z=vyoeE-{RVK$PFAiD_Ywb3nbJ&$u
zFOC6;^!s@r5YoTA4iHLJ<$!3$J2@E+m4irBgTTGk-g)hy=93|ExTWbDRaz$U*QA*^
zitF5544XocczJg7_IHlnxtP;x=ViVhMn#g*iqv&!ri-ZMeBa;Sys)e@)&e+>8yTx<
z66214xrJs4l||Sh8;$TSZpPDlE9Dl;t6(oRFQHHImr$ap@e^Y=K&VzzuIRjFt)9~#
zHc}@BU-=tv8iAOIOX|9G`e``BmaQ9&W;QIeen7<@jFH^e4#X#4PgMK1=&j!42cfig
z=np*oL^zwD;X04Zwz`=gnh<HfY*Io*ts2nc<4drbR>MJp+sSR6BIn+ODbXPXm_GaH
z&l|oEs9*|!mVlV>b65jlJobI-C`{({P2K9woqyZZ#pM^iu#Xz)GB5i}4;s)444p<q
zfzVz97coJmZBQnjQKqWJY|vs&FgI-DQR7I*mMZI+MhM2J;y{$YBt;?V@GW9sI$oSf
zi1iYY@@kq;;PFZPlS1vHPF$%14i~-$uzZUhdI4_MSk)m2dQ<v|aO17jFRY*siiy={
zBm#e@NHUZ7LxVs%KPDDYKt129TA1V+M+JeZoNGagyHI}K#wnrKXFy|*zDN-A<Evw5
z<vma_JGIwmBjva(es2b{Km<8OKiaf`0o~NR*6CeG%6O*(=wj5^9b^OkSir#{+j;Lz
zUGFLb?9l2hnECZ7lcS!mJzK=Eaa#Tns(15GGck}KNy573_6R?i>(eMy;(dmuS%V>n
zUU$jb$IRf0L+i5k35j}SWSi`er1^{>R#2!6r`my}(x7Ya@k*+<%^9rPQTaCG2d)zz
zDXL+U#cZnk#N>Kp@BHcwUstyt99G4<rB2`>I%loxMyaL)V}iknVnOg$B-RrPkiwjF
zk$e?CZZc80lzH|wA5)=&;5GrakUO*N#&h<a`bFCnZBQ<SC<%=jb}p2UwPN--(w#Gh
zVr(RjyY#l)n5dw?Gux7e94|b9{P+`Waaa7*IleDnSx&7S{heQi&p7}S*afCj0T-jS
z-~!IY-~dQCL+uxvR568cZK21YrW!RenV>+dpspKQ<jz(7NDF)z(lT}FEuH=H5*X2=
zR~lH^f8BiXqGd_ju`8#=!JzKSJfdHD9x<l)f+_MAp)eGhyH`d4hCaJ>2A7Bi?5oeL
zE3bdrW`Li@FCjW26`T-F@)id%2Rkuh^%kAwiUkc9n3Fb#YY+lXcyH)@sE(0)4;ipv
zN5$V_Y-^CCrbX}&j3yJvvL9@%%m6|{wnT$_qSIK}=3U(0@Tv3f%B`{5t}n&Wi_2pJ
z{)=f=pKL03tP#0*+~<@6H~)7cCo+e^G0699Fb5|<oBJgsJ}9$KJAH!kczwIN<c~jf
z4=6|2(VMppL3~EUlTwM1VJerTevz&T1~ViKgw{Ol&yxMR>HuT56N^3g*=zE$VD`Pp
zHC4@!H~^8wqFK3#X2}g_gP;tFHG(FFQn#!9fV=Eac`AQ=&2aluAMzns$()ePy7fh=
zb90D_@~PbhEl#p;J};9t$rE8h-c=<b%R0sc5QZeh*Ha=x(V`JzQgYJ5zcfSm=b0`e
zf`UBbKI?V&mr)P~R0f!BFZmL2-XQ;ROY+@eY98GG+n)b>^5&aO$cfocLlk#m94X_2
zW6af`q>W+w(*8sv((j}ND$u-m1@&zayzbV;6%~^|w4HromawR)ver(qzC)$OXxdfJ
zXlW>^P{CQ+8nD_VO?9Cq3c~WK6Wx0OvG!O;?;iq{l-mi3<+UqL)e}=A$;w$R%3k9h
zT+0{Xi5s&52NhDLgxeMH4**;U{C`87aE}_tzELLO;}tS8k<3j2b3xjdo1+B#?~JFn
zK@9SBYEtyK8e*0XkNME4P_1WhNAtZm=H`!;&1@Olv2y#my9b|M0vsb1Ic6ez+V{Y{
zquI8LM)kW7;nxL;<I8pmHpLfy*$7&6s4*s;ew4}LjI=n~73VXRgk6$`I1t`yn6LKu
zu(l&F61iRqa&&s%Yb~-?+BN}^E=V|uH!K{##|V>aL5_Ho4xL-|d+)gFY7NWm>k4A=
zAh+Kjd(AKAx#T%K7XL;114=F^6Wgx^f!7?e=$fkW+k!}bs}w`?Ito}^-ueXglq4eC
zjoxZnz7Pw$_c7)6%%_zUOb%Q9sV>N}<W_5#lQtp?(>2wtG4trhg5k!?a8K=s+LI(J
zj>Fcpw1J4JMHRr^W)cJGReRc9mW$e29lbka<B`r!hSfq;=SEIuuB|WH4Q~gdt!P=2
zNxnKa?AO(oSyG-Cub&88GM8Bx>se-JelF<p;q1ic0-iPBq3YcvmMboN)3{~T?E?yR
zP8Ai9Ok-erhg!~`W>c-Cj7V&AkhM5A(9t$-*h0WU+yL1n<yx?1(yMvdK}w-isqhhb
zd3{pf@Jg}1zOASY7VoEi1iuasefIU=0mo;2<1FM(mnFU{{i1d;UjSJaZVMCdlSiL)
z<%`%PZ#o%ICEjba7RY9bOTBIV+OcjXlEkyL^XIrZzaIeNrbR1LcbZGSj9+7qwocEK
z>zt}QgHPQ$?u*t%|IUucEu;JEdV4ca`IZbOp?vvtTjunm#dqyz>o%^=&Bw3A5hvBh
zds}^}!|S0J*{OuqqwIuA&Pe2P6SI6$1U%WL2xpBstGcYkE>0EXkm!L&N1$>?Vpv{n
z+?k4bl7RWXLl>CEx}<X?SGS>7gtOi6x!k!!aFQH1XZ?1~M#GpN0)73E!ZR7nRaARh
z6rTdB<*br(Qiqmx1sg-e(qNue<Qk?5f)jAAJdG*GkrJA=R26y<Fxn1)%Fx2EW~LSL
z`>kIJQfd2~TOUg4pIiXhts7r^!kAaB|AeEZqTcw@dP9(dRvi`O?|OKvNyylr1@7Zr
zgxKh%rvO?iFjP<7JOS<4?)Eys2ibYI0=!V6OAv%Zdcjvecj|e8BH2C*K#>cKk=p^H
z{DTA&2lWttaUa*n<V&Xx=j_bj>m-0c$MPftWC7!iA2}o?Nzi}WaE5*3@cJ*M%NUI*
z*`&i$Es!9VkcUw?WT#6k*)1TWeTXy>Nt**m55ritH;7g~!*Uo%$sRPt|8(&yiu)<G
zCcCs<I}+V_dRBS2yt%hckTBlD&)fBsu6hr~7$#01LdK-}PH$H{@*-M;lY9D;AOAo}
zbhEvBNZFJ6JCPR#7ul$z99t%-W*-_TOg^cBbS5L5l~{a9BZ%_Sh^VDGJc+sg4l<zK
z!fozMqZS86Qk_40qYqGG(Rpr|H`w@fB7;;Y5PeXo(#wCq_9}^Z17BN(I3IporY4pX
zCuht0AS5RmtCbxY-Bt$qWjM;Y)VhDJxg=*eS*%fMHR>~O*GEc~nv&167Y;HQbjq91
zgnEt}3w5t+AWHT-OBA!-*~ERJ+BspV#jO`nwjnP+g<jkY_dJ*OuF!@I@)!{#4>l3L
z@KCWHAQ$5L*aC7yf0pQ_qgm7hZ&N8cae(RBSLEB05U5rsJGpL&qJD0cr>am|EGX&{
zTRI5SSLg4X%8pZhUUTe?{gjiy<e9m7bOQW?y{ZIB;}R;CcM0?^gHkflK^=Ck_45aO
zecK$aNyLB)UO%tk$L8K1#n%+YU7*awi@C8R;kBg22Imp)^ff7lI)}3`-y3m$`zEkO
zRGKA-f(~hlIx{bRVENPkF!bDTK}y9>*Luz+vc3R`oUmp&-7^f@_kBL3upBGe&sam+
zcYEd7XZm|#y&Kmj<j88wA#QtMCxiZM69ARil3(MQ2Pj<Q*L3XPW*Q!vr_60D67}4A
z$RMcWsxH|1b4;G&spZ`>UTg8ma!+6TZvjPo!yH5W@iyH8^!3ZoXV$QK<=37vINP2S
z`$t|eKi1>OO};Qw!u<yU76g0LmOb|`9l#&eVd62FQu;+)8Uo9kgCV;%lerD!o{XML
z!ZQ%INIAcVBzuaNkuL0IZ6fH(m(f=`UB0SJFtOhE2afJ*hXlxGjd-RIW1KCMdBuEH
z<I!kZ?z|e~y%=`NY08~Zb=TOAJJ~0?@rF5M#ycFrRbLH(i*2n(V7F%$4!8Wu7Y%Oq
z?&ETKf^K#nrSQM-gv3~#`C=4fEMs}s&&O3rUWceCirNBFZC%BLHmzmth%nweq~x0m
z?I#dKUX=*?yQ@PBd1qESgYzI=(Xtg=eL|2VM4Zstr%vDeunlct!EV{GU+k&TBuECO
zUmH*@zC1HIB2h#KC*o1*t?$~U>IiM&`w<Fpxe?91e6+l-jSN8}>DA1bZ&RnBa#%SF
z;&mGmO`N((U>8Ky2*F*A6O3t#+PshpErR#Xnpt}eZwgGUVG&kX;1vAWb^_X9!#nvN
z7le`k*#Rlt8YkW^?FcxgNb(?1K*2v3b3$RYs5^8D`4<8MTvF%Q^FLo3;>orZJIKO(
zK4wcc&QzwGy8$A8>jc)@X|FfQ-u3HQGWD(8j7bAHdUhX`nQ1|RK(SB-N0Vq`3J><P
zT?P=|@d(AD%&k7Yy;nN54Iyf~^-NDcT*d_dOo@3GuqL<697Q>k#A5Q{Tn?DmZqSE_
zXMB9QFwtB`KAJ*S^DM)KsaV&gV;$y}4(qqdvX4j9irJin7NywFh1x6cjdW+%gtCjD
znh09V`U|Kozky~UD8|@q$v;Tx&{zy#Mg(sDMK61ORk2|@^))pv+vjjx;6>>Cs!OQS
z#~CeMj~`Q&8k5o?ucK}2O0Lb5Yt#yCe6`%*s)5n=)l9q*7#(N8RQC23uS-wB@_NWU
zQ9f0C)l?e+1y5thN)e?Qgj0QXCNr40q&g`Rg8$uO!w=GPU#{Ojo>_juf*Pray8YAZ
zMKsy-N<IIH^eF$z)sk-5#e5V*0bj9k8}JAxNZsuarl%chGZeXuImC@U9U)L)37J85
ztv@|7a9>cMGxi9z2TRfM9(VEOmu<cP&t7K<EO$Ir{Z`p>PUx{qBeQmun1KAp>)MYL
z)V73BDm=3(q%u^}r|s6qb@_jg)I(Y_6|wab1~spZu3(WMF5?TL(3=qEJ%%}n*a@2X
zLTxUaKmyj0DF2wMgi+f=rt-1)-}xypgByYnH7=W%gf~XD<H6v1dp;J+E>okI<325|
z9{ea)nf1x%B2~npya)#k?T)5GC*;l(*!_Tl<|^b)mQQ8G=0_ud^bQLR-Oz6@2y%>Q
z-rk)AZVoZ(;AKnu1@#H7oBW00!uNEX-Qp*aBi*$1jImo)>J?5Zm-s@>1WKGtMD%`_
zs0Zz^z~vYE#D^fWm1WNk_4c_JR=+O*5;I)2u9F}M?Hy{|V=)-bGHYf*#Nuc6)f0NY
zpL*JksvqG8;1L@%UY$wBS}}7T^KxcyJbWmPQes*sMQYhCjJDxiKev$@xpytZ7x&7b
zjwOcjaRx8zD*}i}uwC6;_pd-T|6arLyV&jUY44!(qc+f?BQOn@3@h#`$Q>R;3eCGf
z%)Damv@Uhe7*sO$2&cs`rj&{9O!_$Z@X`ATAmnSm%C#wgcju6Lf?Me>_)x>aiEB-;
zva^9@BkYqYBM%6^wECo!*P`xWikJP?{_8Ed=GD4~6NfR=r=4Q)L^Af}YOBApkL#?a
zp6`8cu>-S?a4Y=FmH(MLRH)OZ4uy1Eir#AFz+3Ua<9ln<%N2Gc+jl<PGN)F^2;&~l
zA;y9|ZN*SyFO^>h6LGj>qm%XdD6s>^du;l$1CQqBhY@G3Y3=nXF%6$XZEZ`l@ZOGH
z1)4~osLc&@cWCeHO+*ayB$00;$sFdWIoT!GY59l}kUi5Qj{toQy=?TWro^ST!s)j6
z>f>t7NLaUCZdVS(CDNAvyG*7sQ#Ur-_AIUJr|l~?nS{Gy%m0A(rB2sHuXXZmOcnfC
zwF8wnv7_r8()A(I55_*L&5=ba=jSqmh<l%}J5xs@LSGiuUGMSJksUC0rPUcUvNAL}
zlyiD-hR8rSdey3Hy`8<Q$An>H(jG!sjW+kQgK;t3^-VIid}8e5Md>*d>dQ^nm>*!~
zOwJ5phLAA&ge+y{Lqk0LU-7nh5@Hew-L{3yPLFE3yh<*sxJ1lwp#jsm+QKIvFB>hF
zrefWTYI8Fj<-`D#oZ%tD(#aT#kWs=;E-w2MWY->Nzy;(n+m~pG7Jmz#fCFphOdach
z-mCTYVf?{y1v}NJm%6ggIh1Aw*MXeu_Q}lc&yscBKR3OGwN7#;tTpvk<O&gr!OYll
z!#vyajM&c;P#c@aiDH;4R_l4p58{3}iiPOZk5*7obh_7NV5!L*4zDAIbV-L(>?9?#
z=P**uA0$HvNvwOW@ts$tB5)LT{;t`NNGycz=INT1rmJu0J3+gyN>~G%5gxvPhZbw_
z$<}|l*nWykI<L0sRbJilXEMRz1pHmgk&y1!WMpSrTTwU5B-qLzv1)ba;KK7u=|(h*
z*Y!ac^L|Q@MI9^?<M)Vt&!uPo9@Vnodio=CI~eAu;YRvvPe_7g-A*Gq)O~{oHQJ9(
z+R1+dYO0qeFJ2PVjJZqfuddl?m9$L-;VI~M(vBA(8<tl+th??KP&$-O8Ex9vCkT?q
zwrsayOc!S#HB&ckT7qmo@Y7pYN=m-Ez?_ZrqdHz1#H-#MJXWnCcKp>_3z1=O{mU?m
z4$>SuR!Cs`JOT)Q5bGBOcHaWTHb{l6ZsTQ<P@ySqiwnYf2|Chp^Qk-;$U`qXW9PC*
z5BEl-CNnO4(vA&yz)Z5wpNo2@MdA<m*LDjUQ;<qah`w16?)Z$L)uyVUrHJ!^fm1XK
zj)eL-W6J)tx?c3XBqHZ(czro}&5nAmJU4e{^T`{GY71UB<LBhmm9{57rrB|<`mIP<
zPk{^~X1Qh=bmk_JB`3%})8DHL@fv0#BqI1P<sWI~<waV~e1^nlVfDAX{>wDoUcW{Z
zbLVAbLrKo-)q{Q{dh&`(q`)E3wgy>XAeV4-4&F$VH%*k>y!R-8@Du)$OqZcN6+@Bf
zVPqn-varusEA?MSrMD|wKG_wfOjl$PaDtDvzXp+J#e8!dF%1XONIe2uc&H%h?4a`Q
z2jxdaO6*J|hntgWN|<z11E0s0Sw8_<%5kpxBc-((9(<H$;nt62I%T)KGaI9atdQc5
zTRJ4rX#<tgomkZM4sW^JPpP^;J`KqJPqCLLeO641?1LOS(H)=wtq?sM>_80+tdgx6
z0oj9{4Uix#-?I#Q7eLE9exh;U!}wWR_RuF;T!9aS_QOEG*V}d5wV-?hxpkRGS0#`|
zrwAQtLDsh_3K;fy<Dg5`k6kh^qEG@t<+;mC(k;YIwr~>M+DEkY1P>zBzK|nQB-pin
zMTi_czJ#Kthu|O?UZc-y)nUmvY~tXUeu~(kdp2^O7=b$Xm>*>|Fth3qW^F9UOc!b?
z;MlQ?nw?P2pbk|GeBmA$RKxSC1(b>YCO<Pxiy)tQ6~Sh5;GtkZ`3@hboKaeqRXy#l
zFCd}yN)q@W33Kx&35hn*ikCQ<X4N%r_xLpn@yAstOe;x|=q~KVhf67*41PBk)+}mZ
zcGkLb*y<w6Dg%NDjKNvIZN+C<t6Z}HHWqcWMaD4{>T!)Sx$ftaP1n|b_jvWujC@kw
zRLqBHOiKRz&8cxNE*iQuyoy&^tzD4OgS-A|3Rup}F@fq~V(!Vq1B<m=H^Bm&M2C{L
z4yAcN0WXmrf%iDxHA=AL<5l+SQ-K@1L-jBM%he;ZI%g-DI;1*1{OtXxgNM7CsO?4m
z#y8d*82!>BRAYSHMP>DKQoKPmlytHkerMLt;Ol^3J)x_sefx^Jnh)dpub2Q2v~Z$-
zLp1xqlb;1n5+t7U0&hrXod)p=UnD?R3a}U)XW?iTa?vPQ#Q3ke*M<}Jdc1?@pf7d;
z&Cf;Wl&i_R&z{9rlqX=dHVs!(r_YZ9al{{}yWatxQ5deg_PA=@euPSRmzciM{Nydx
z&ow5oJai=+9ViDHFQ<Y9D3;re{Ok#*qGjsqr|W`4gAgsWA~`<d6X{#+{M@!yaLB!L
zCmWC;WtTiji1r4`8y~5G@?U^Zd&*Q0g-FkswRN6n`9$$n^o5n^QB6Y7p}||icgjHm
zax%Lbc%;;lXV{>5)_mBAB<0?i&2i-xNPoM*xp&`|TMn5obZT^j;cq3V!_Q}rZ%g0Q
zdUU@0pIiVFDXt<^D21y_8}S-*71(lUjvsAxBkWDmR^dOFU52VBOADSOPa3&it!Zy4
z;i?mtPa;!X+s}u3@RBT{+v1>aTA}~70NFD%7g;wW-UxIlQo=7hz#`(;<$hvb=w#@3
zspG2qK*}Uvd^}xu)}130L;NxOsHKV`d<-ofZ)~AWmhSsCR=sdD_Btv+cTJ;C`Ff`>
zNSO1NOjv!j339ONHp<W?A$)(^+=ekGoS*)Fh{5n(2LmKMVwYt2s5@C_k?-`_%%v0@
z6555d#PytIcrl(J>%oaSg&+m5#QDg*MEE+-!&!NxR_DIFCCW5Ms4_YaliWI;V@VKN
zEzOaMDA;gOp>5zYDiBi|;(0No;q?-$z!L@M@%BG;%@zACXCKH)dmJ&iPkk(n6a^pu
zS_YUFwu`<<;o!BKPA;Ha!gD!xn`y>7CDhSOz{e__eF^Ckd4za=W4(zzrsZ8fWrc#;
zD@SROS@gX=CUdj5!$20SWLT$$Jen~=5<&&1mcM7&6rGxUsyDcL!1O3}x=It8Dzg9E
zV*lZptKAm_$`JR2Q2HtXprF`o7>KRC&QL!_TTZICk70ZVOSp!P!Gv12LZQo6i<cBC
zH6@N`6vLmS%)O0A!QLMym&Un~mhMt};~h>k)or2<xcxpRD2t9)w`PJp&zYc|<(sD=
zXQ$yXlC9X96F0{0Muu)@FdY*&X`eiigTGk&p+YL$X&bn?SbMc3V3dpAOonfK4@bvA
z^k!0zZ$FF+eKwG{6DhW~cn9X|Q#W(6;Es3AET74;u=)CHW?$|W2(*S3>5^gX5xKcE
zB=RDmD1*1}IBaLicv;8&gn5Oa%GtB04~JUGefU{4`32w`D*ikycuV}n3+NQ_Z?M5N
z(KXsV?!y%CJzzXxwzlR;t$7JyA9ELwT~K5jx=@C<Z9@{|*q17QuKTrh>9aX?t`8_w
z{fg>a%*p&Y?_7n4uB9FabIK}`V)-!{a)&&S1H0ym<s7S=<oF)xC!QZh-tW8$V^JSD
z7r$hgpoh6Xc<e4YLcr`>hXFF5rer(+>o6-S-@b*@7f3tW3QZMoQtw=&_IBEoCm&}X
zG`!+9tPH^~rQ+pm27+yW3iKmBMs&{#(s;6?Qn9GQZmFlikAA+AJ`hS|k4Y(zTJ1`6
zp;%p>pT1I^HnD71yNu8eJUcNNB4fWJ#8JIot3^vU29p$yAmURu0m?-?i09~>+CA<9
z_J?VF0<9gG*br^a@ou*d8t_j*O+@vttsK#vNr_y-AkjNnXS<LbQ)=Q(O>R-0!SP7C
zXymwATMY=RKgZAsEPzox{EY)77<;;o8kmV#Gj1QE8PV-cT1GhqXCqP}7pK%E_<Mf|
z#j_unp>~e94<{3Wo=>FBdQDX|_tb_}=3f5rPsY%c9DBoV_m~znx=FJD@VTOogZQ_Z
zK+ftkZJ@cK34No5@xgRbs_T3Fp))t!x2v&G!sDA}C~IgFlvJx*1bJRH>Yxj|2y5%a
zQteY&!n8GOrZGn!)vV|h2!))sfiA95SJzTJPDs7?vZnxswgKk?EN#T7FRS3&aQPR7
z4!@_QR1x`gX~;Zz`G+j@YXuLXn4wm<(mM>owB{o%(A6TgeTwWEbw2m-RgTw|`!rR-
zjASjw9BDY~6F0r^Ax0O-1MJ_KLo&%gO*u9^p5a!XpqzFA?hW#u18GYqgY;k#xS@y9
zYU{3gWhW2%w~)e~g8E(d(A6~7Ei+K+UOgH;N2_B0Vu(DHxGgd79fW11_MlcAES3Ti
znN?K+@E`J-#&(cgU63Z6yS@bJ2Oa&7e@Qce!_s^EO9-E`My!uH|LYnVJ|4=<Hi4#z
z9N)VYkUcQld_wPum-<YJLGF`*Z*9OPCv1-$wzhscl=p7sA$9)2Hp<1!VC(D4qCy9e
zukbV#kh7kCovaX%I|l*xt{I+OG~0QcBoTjILnPhhW~YU*?LJL8l3+2rW7fHQXPiU;
z`5z*!Vo4ZJ=bbsNo8+*Q<=#;8br^LG)BhpzD^Tk`{L~GIZ)(g$I#n~{F0ZK<JD>_*
zT&^f!Cn#{)vnk}*#Jecp(?{htKF&p;NXimVrh{)7+(!;^k!G`z3l}G)r*-0MA|X2s
z-p$<Qcmz-o2aOzd2~JE#*ViT$2*_vFFYZpUC|9iAjwyepNv49~nx;BPa&ZBLpzf_c
zP{QLH5;K&3a*chn%yHyRMdK5`Fn(hss~x&|45<w$M*7M@3cxDRe<;NI7}+0G@7CTu
z=r%B$-{V85DGriU(^)*&g4#oI#+Zaq?{T=x6|2-+>#@&1s=}p6=atLwYO;hZ$$9}H
z0k|Y7TM~;+5XhWPd(ZYaK|p`oD=T!iP-tRazFZTap6-CeAYW1*d<<j>Am_S|N|>MZ
z;phO89GChgMy<&$ysFUBofs5lw%;91I%iiM=3x3aUoL%;{srP*uV=n{M#_~8;5SuS
zeg$<eo?nS_yzMrBwA>sd=x9K_4b*^GOUhW&Cbu64*|6I8J|=P&8hXo=-B`E{47G3o
z>}p;<tZmlf7%$N;nC$eIt1*6SVQ=gY#0*z(+t6I`OSivV-yAS7s-fc{FT6{|;$4r;
zmz-<lSpCq>YcQ{~!u{0kn-BjUkgSORGLV6@2%YQg+5v`J2<w-hhg-2v1Mm^sXQY5q
zWY5=xR81Kjs*@)m!s2X=qh${r3r$zv6BgJ$)Z)iBs4+A7!i_bzr3(3o?dPwvX?yJE
zFJB|cYxB>QSxy$@wV-2MyRG^urwx#GO{tbLs|Z0wsZb{fNabLB7GJo>;&F0(OFltK
z4Ni`;XJAh^(w{-~VrCy?oXN_)YzqTn&*cW4GrXG4+F-W2eiaVFlA6Uv7xkKlZ`d^x
z>Kj!9*J+aG3oZ=_bPdY;{mQ~2CUZYJ$1Vj=E?^FNi7c<DVIhW}pUi@2E^}4Dh<Y6)
zUo%ZyOM3LRio|*SLRiCWX)jngXhw?@0e@#zn&o}d5fh3(f9H-%prx8)jM$K(^C5)0
z)B(R)8E>e{NBq42HEr~rnm|>-7wnBRw?%8uQPjb{AL%E^yMH}NFC~lwl2mPsPph1-
zlz_e}tesG;t9KqYP~x24Tzjncc<0u1l^R?q#A2q00<nONGA?y=UDYEqzM#B1?rXfB
z6}OiTLAj!3$*~q@YrrHBEb}bWAj~v6p_YTwm?`05pFdsY@MbUMx0!o|#ti?ZKTXol
zWdsaDoFc&{+5e=J2?dB0+-H=st;a4pz4oVN@9)z49wn5g?Ij_Ne<vz#=TECbw~u53
z4aEJ)vC!mRa)4&%NSZrNkKqU;XPPR?Us%xXIsFz$ILs%eScZa+4y|T<__<-%Ezn8o
zYnsgaqEy`U&3yB#@ww}`mSg6tSsJ|CiY?kSJ3=EfgATRzH%linN#W2B!~9`%%cj`f
z!MeSMVIG4Qhvp){^B&L%6g<_qS)(zXb%UtX5y7&-D&dTWD@fUKU6*j~N=Dr7cKJZQ
zF&`oIkY)<12N8fR<(BmQ^@atzG6jO-tF`-cyUlBSLZgLiS<RcFRmVqpmVCCjNM-_}
zs6LD;6XOSoY;qU3L`>Re)N)hp$qzHY^)Yi{>jKXG68$)>?K#YW2;Ben6Uv3RY&s(f
zBI(*IZ7L-QBX8Ud#$kE*#TGY>EB5rA_e>^eoe2p?Ye1G{Edb8Njv-p9c5dGZv+AmN
z*F%~^ee`LHcG6x05y?f#EH+%DsXuavp8a6NTzfpB^@cN2q*n2X^5mtt7&U6!h0aTX
zXGkE~O;_|2@Onykr*!HmqD`;|^JJfUFUlQG&%Zn$NOWSmwy^?7DG|;mS~4l**Z8+?
z_q6s14$<)!axTmTi$X7vWK&SXP5endjW5o6GjPn!s*!SFn_sv$=bPven!(OoCUB6R
z@MZ0_iCYVtt^PuGY1h)P$!gw?m}CFd`sIo(u~rmvYOYD7>9T9yRPc?aYT0l`_JeRN
zsz>J3&)0r@^9a@s4tvnXzxEIvLsdb8!b}BbI#{_@<gl4b&+J}GMfvP2>AK)Id*_L1
zqZchr-wHOUsRr;O)?1*g2Dcq8zq9zNYWLB`=yiVjL)jP24@IrT+N9ocd1=`)9V&ok
zwR3Zt`9xE#u&VH{2B*B433!d5spQN9Sq32E+1_kYkB!9Q%r)5#jJmtl)@iO}x7MRE
z*Tz5en#P{jL5#c!WWYRQwd2{oVrsXe;d`9$zNI8{f4O=8xR4Fu$HHKq>4~AL;qslD
z*XQk?oeg4!Sr8mwV_Y{zXO^y3l)3bT?ME2EMBH?6?)->KL&CYxt(MI%6@cr0o&zz0
z&T0f~{_3<ZBA(O2Mt=rrwu{dtRAS%o_b_b|?LXhMMaLt7r=2cji6+^}RAN0huc{vM
z-v0W1^oMo7pK{h{EV#0*>yh|s56kIKhwE;JzSC5M4du*GgOe&@1f~6i9EdQ1K@7oK
zL8uJJn6N2#Ro%(>IhPsiV-?}RVM{QHoRwDAoq>f>AdHs}K}_^!_`@)%HRCOKxzUEA
z5yK=O-ImP+ylzcGV}uRz+L@tCtLGO_HQRUT+T&b`$@R=Yy-g^d)poD_Hz?YcA-_N(
zHpUhD=e?<+D6f}u61l1Qn4H2pTZB;w`uv-UFY~uE&OUp={!I)6V7r#G^uA04)zoQE
zAG*QC+?ro!9>_Mit$SU;hBfFvZ-JO8vEJs2oT7(e74IWYL@gbIZ*nd#dmIu-=9Q>$
z6`@mw!LGKcsXHG(Eh`)i)m-~FJOtpC-9~}sJ|eY7rym&bvk|A`S(weleWqG#55aei
zcVen&k=b8uHWMeAqZ3HF7)5J2eSBKIg-@23bhDt!2p3KbK_+`~)DV^<uC*63|JHRH
zJOg<zrRsh=6c2`*JoNm+NJHUf&C6>GXBvZVtabn?CsoMRY395cm5ZgR{vJ<QXpFXL
zqGKe(6|Si&we{!*{%uhvfm6D1EO^lRzLq_!9+3m=al`ibZns_-ZdCJpaps<+kY@{0
zn+&-<^#WrQnXeug&-*3ctMr?CQk+3uT09HE?ArxtS+^Vs#_d3+V?M(e(Hju&_mWI6
zl`<ML50^}2Jj{}3VA^CIBw5o5$#FQ&*@~j$*Zsdfy!@8sWDH1>G?$zPL#O7G;{ima
zW6i^)&UJ{Sq$3^8dxtzRS1FzOtpYD5?f@n?v*7E8r1FV;-)(Wpd3adZ{^1!eX~`~y
z4&VG7h_`RI4SzgMp?#}2Y3Y*G!}auUx!P!W&n&{1u=BUa3+!}nGW!?{oIK_AD-vRB
z@OK=P-`M%`PcA^cQUY^z(A}UX>V{gJ_6JDUDT@Xuw@M&;Cz73uy}{W0$xQGy1sr0k
zC>MqlP;vBYSK|km-sRVBV69Q9W?m>Q#0Kmo%D+)~efq-dP<y89cjc;RQo_%I4c;St
zB|&Qev%(TyRzCiNGE4!J4rxv;&AnTM3|C0P$52C=m@bgOM+VXKAz^D@_CUtKuu`UG
zAl4o>7pq2WS*-yuB+Fd}<n5_%7g^<r_kV1}^jgeh{UYtUS9})@LV)DbnEl@-2(TTO
zjK$Uv8=R(3{<Yg}NMS%Cl$!W|&Aw^w6%7uz^tn(M2`iJ4(C;34^8DIA_>iDD23oTN
z7nH}xAhUq51BAh`3n!(YYJ|i^Z?etG7fd(Jr2LDUTGQRLUcgq+uEq8+x>G+dE@qm!
zz`J&-<vnfFQ`;~e-O$_VDs9nsJPZed8na1vc-P6#pXjhQTqjL+*gHj=Xh2tKIK8iU
zi_D^WNAL}XM4FtKt2SllCs!Tj&3WG0w{0+5`_}S2sCzw<vSg%@5w}>E>kp`5mJC;R
zL4FLq3M4k!U`w4tYvo!54HI|X4_%aUk)fR5z76DFW)cQqYW=Pkh($bV*_MR?!LOCq
z(;K92x&G?O&3toybIS#fbCRVjGqg{lT?3Q0+3tPC+QG>nNl0a6wBNpo`)RTY?2zJ>
zw7F`!;lHRkiTi<;LITaF%Ow6ZHeH|OuLH)VnWyAmSzZk49M&xeMzDS2YI6tKI9kt&
z1GD4sICDkld5#Vv$L7XLjN<OXhkjbaTJv^0!5^N3_I>WCi$tBpG7gze1H;JgcLOny
zUxIavD<&9U!_Hu?qNqih4Q2DtV`+iK&mW@0O+eh%D;t!d<h}Li2|j_prSB)842>GV
zn@*-gH(b>s<D^g{M&l>*U0(g|=uipDX6;p*8h6L&fF>`}U%B$T-vI}E*i2UA<2`e?
z|KUPqwK7DWa&0|r|B)tmS>yq&5WR1S)`PUJn|FwDV?BC@Pbv?CXzQ)NNhZ15{$H-~
zpmjuZ7dY2rj~NnAD%T8m97S)`Mf0_HdC#;IgTe4LnXZ2C*Lxt4k+RF6qPA8Ub;B=D
z?Clsp5$&oR9L?!QkMqB!$X%`q5f3LYlfG7mFBa$1*Zw(jxv}ui<!>o14>=2#e*gaV
z&6;lZt^O@~&Rbz`>@2hKc___N`*5^Xh~~s^<#$zIbu+%+!26w1{=GS%nD~K#N!0!O
z^cQ)CR8bCpDf$VDTv4Lv2?o}Ihgt6UpV<QQa(3N?n(>!L)~B0RW+J4HzeoaGxe~%`
zTUv+@t&X+idxv;Fkd6WHOX)&YK_fb^sD#9K)!;)Ta~<(ce+IsIwefi~L4^zIslL?|
zV%N%~-&!f?KNt)-&i5SM)*BUtWjMzf)Xk}1un0!+=SM-HD9uv6{^Mw#UM6ht>qBt^
z%b8)Dm}{RxPnTv=QJnd58gxNBhby*Gi|JhTTY2y(R{cSvNXn8>1B`V5hy*2pb*sUP
znlp!<c3mlFOCqb#(K8jB2uev|ys-Y;Q->yc6tL%*u53P752R;|WRWSZv=vigU=^g@
z#79onH)W&G#g(?l-Gf=ab35wC-fx;HaCj1CX%FL25#(V2EirFuHwR4(hy0W}6|8<R
z^*0?aqRZl96^u1h*}hrjvB>4vuXd!7K|oPlB~aEr4IM5Ni(m-5^@HDMie6k?T<#eA
z$F$v4qfTvcPMj*ZHV)ba{_{uB&e10p$Gpd!6!t*3#mX-Yfoq%5+D5@T3KIjjqt87P
z@ZX4g#{Jd<aYqe21=i(CJX#(;2{Em7`@{#j*$7`wT{DrQXGmCTY1L&F>`h=$S69!r
zv^78n+X#UhT;djF{P(T?y<fpVm0%_!iR3iZ5VX~L7S2>q(W@kC5kSUSUSCjjpC8^>
z?00I9J#T1cHl9T)lw&x?Wr?@rox&nZ;_c@SAJ(^fQlc;VpR1>5nh{s&`R88fncVbL
z3Mz&{bA}UW%PfEFHPTY$xs>F`I&ccyal1^==vS@4VtKx@zXRys7X;pdU@Vj&f&0G?
zh4#Zoz)hL_(&m<RXBIvEe{TW&MzclWnG3WR`1c@Jv+3wNTL<Qh|Nb*dq#^FVm-O$y
z2~rsbIA~`O6k%r7pMO$f@a*4r(QZrsC;Fcw{pXqpyjdZvPl~~DwVnAoL;m;wk6Z*s
z&i{FbZV$3L1E}#Ie&>vWv#ZoH7eiD`)^>~kKaU+8;7JA@^X<Q{UQmviJ4vG8a(U%9
z{OI@MXJxXLvT{f7egW4S#CAeZCDrQKO;?WgQ}jn({O^hX-re5|6D*u$(9{~;ATD}g
zVz!4%-3v-h=O?UB@aPp5KN;~Ai01<r7-Yr?4kdm?2m1GFWp4+*_|NVA>$!pJ^*Z_)
zKbQNkWVvr7dDzpvprnl#=By`i1|B1U9EOSSb+bRdbfwzi&LZuA*(U{6M!wgb<NMF6
z$|5se2eZfj9Jg13;pD@UTMI8VR!Tn=j8Vb`oDgoQd3W*)w+(CT;SzpLZyt8oiLr>N
z3TiNa_F`iK6~`>jFAV?pAm17Ody@75`c2<~y$i`A$)>gsKRxsJfBxy+W2^}^8d^PP
zV*1wXIXbxz(#0NK`O!^NdifhM7gIFCLK{OT!5B&%?MpcNpX;SP{&u$@cpbUbJb-L#
zT4<@7H1u*tsP`qqxihq%$}(Z%jx>8zdDTZ_E=8bqxIZGZEcKh+Ti=_{O&=e5hXhZ3
z{I~l`hq~TwP<sJo;%lyZfC%c3BN|UO{YJ6L-|8nv(B7GT8W=jG9>ZYd6me(W|K|y*
zlpVboujxnZ5Lp4D%2G7c?-B4?clwrBR@}s{JRZV!+S(iIU*40URNnFpK_Rq_fu6gk
zU`;Fgq?KIegAn~Y9#otU>zgu}(KGW}>@H?{;k=DTkGbcUyW3^hFxK-w9qO)Zg_)95
z1&qzMV{`v_Dq0bkl>A#4<y|{&8Nj=B16<q=<XMJqzk*Ww5!7Z2+J^v)KRL2;Be)R%
z{$8>q8Rq^@R!=Vlr8!r1fU2Fb-+Cj9)7J9H7P!>mWQ%}j80dC-6hCwn*kPYrnyjrB
zQ`w<SU<O~lX4>s;EXvz<COoh<H#dKt%KYz-O(m<6`RmuO%PTne*z)fZC-vWVO^u6s
zCrzp7iQU;#O5TH&sxj@h9k$mFU5=+FNp;nKUz(?u?>mfq+gkZ*G6<`$<r`TQRm$ss
zHh80;)YjeS{!l`)nOj)YnQNCT%FHzOnxDIyn515@sDpf1+8A{x80medwu1IsE$Zy-
zjFc3ArIwY?5LRV(QQ&_E-1h`Jy!sR`{buAqPngC1=jLaW18P=46Sln1x~1v&r*YTt
zD5=_w`+qzhS9uim_4N(hIQpMg>VEWrNn)Z=9<eD>6ZNH&TSt4>K}$S&WDXa<626vS
z7*St4Y;Lj}{^{t0B#|yB$`8VpCwZvsa%E@u3E{1@H;-4wCGn$P!eiu65@q&KXsIJ*
zjf~G^zg?4Z!}Dv;+iT)yzZII>4wh~*^O{-mKK6+Fvby9MYd8Gt$IHWwo0RIcI)@{l
z<(tG5)guni{R}%%Y4GrQ`2U$Wp410UE-ehs44T4A2?2s`&96DVX2L|O((ZR{V^Q@W
zmsDTO4%-n-92_|6yZyu``bydG1+(rNMd6$OTC0N6IYl?`_IxA0_|hDn=dNlmPCSzL
z!;oby9{FTi$g86~dH6Hp!*YCL=5XiS-TuP-w{@a>KPF8H=)AA@U5baxq$Vfx{{$pD
z8P#MYK1>{uRqlNj@Vc+$<;k74?-F}!z%yJou|h5M_!nG-RCl_f+(Y%KyKf$KWW8Fe
zKd5`euE$U5%4&TldW`GN)u(W;+m=wKVdnq+ss}9uZ#?*870PGFc!;e~OR9DNh~2DA
zi>zNk3C$<AmMjjcMm4WGCilS(D5U3$Iz{i#4^Tl%xq{~cSZc49c7q9ME}HI|I=Ek1
z%?5U@M`M&S!`Sxnm&t|B%oEG4s|urH0PA%nqP)1T=Ds+I@l9ru{~0DxJ@P#FUQ@2}
zaD;O0(}PD_QfKA8Q)){neBv9yG5&Y=h6`7l9LL@`^^j@=Qxv^7x05y)6V%P)oD9FG
zE+SJO9E^6pH-Cx4;l4<m*}qWAMPl}@7yuu;-4iF}{f+(ym7}E&_GtX4K@%0hG_Z8p
zxi8)GqD@p)bPoR>g0YMY-;4_K4ZE0+@;oq=5)(T-sYm{)v^HEiWNzw|W_Vngvi@Ap
zQarCnWRvItUv~s<^HKgsqC@{RnMfYh-`?cbcagz%Z8Jjb63st3J+3K@T2yRZT}I^a
z4H10CDn6Iv5Qr@U9M_%)E@x}uhsJWc34XW(o9-wjfoSA0lqmEfudFN_ZyV;%+b(>0
z&_+3^6FX>4x|IC($L%98E(d;@-AOB+Sp)K2!@P8$w8<~y$DhO)eA_ou+uq&8CwQVH
zO^TbdwNtIZ+?>4+<QhwpR#3N!m3XaM)1lz-$Hm%#bhb&?PPNe95N*Or;+RSY4?ty}
zHTO~J*GE={`DP|gP_qsUrd+(BrjH*)N77;`sQt~MzY%Gd&L#mg(^ikZ+uK+)aH`E0
z?|9Nj1&#Ystlw!eIhs^q#B=EJP_EkV!P4A0wSS+cn`a$@k(U}BAH6tgoM<s1d{TL2
zPkgeRp+JyT{`eYfJb%$Eif?#cWyxf?>+T8Rvd#n2#Mcpd_$EZW;6A$=#&>@E`-d?;
zrxx=f6t`T|xqHtNlQu;7j21J9O3Y)$IGfS$&%V6(S{)yOtR-hXey*m?JN`>E;JE%^
z-unn%spI)yq^g%?tG6fpXfAbLEhmjYbPP2tXB-e30@0d5rQhbC#793jnW3?Wp~v1M
zSIWn&*`XV;Uv%6iE{^@t3zQvu6iNJVuq4PKLjUJJoZfrq%8Hpm;Qg_y$Ie~v<wvfo
zUdg`1OisFDn)ImPnW{3;Q|;sX_wTbMzIa^P%2fL&7jW##-qskLMZuQ3RbKz8uT=VJ
zub@G!8(0di9@7N81^nB+Issgm?h$S0k{)@l26~p^-$oXEY^HmlE0Rgo=-5L)u&gPJ
z0JL6l;XiTLh}2Z7{aCW&8jFD6Bebxi?eDv3-yPrN<v(&dLoBrk&^SBnnl<rj>G;`S
zHZS+>Lv8Zh1Mrrn4>|fC?EG@Phr5tg@#KAv3A8OqBze!O<E}yM{hR1a;pt2beBa0K
z^KZf2zx;~Vyznf%<`?(XvoK^uEp>Ov^TvMUX}SAkH>alo+mA*c>jn)JO1sV7iGU^K
z<i?BW4Las&en3M&Ke|`XwIQaJ4=ji3cV;3=iRvdjdRCLfhek#Iyz`6_bsuvoPYrNK
zg5_}wmuzte>&g6@_sXM>5<0TaM4yz7jo4>8(blM1LhIRUXpLHP3nW3k-$Cj@-5I(0
z(U3d-C*nK}{~J;MU4dnd1xJHrm6cH$pP=Nq_~7jaA*VMzDi{K%eLeC82K?4)%RLu*
z8|AS`_od;Y*+)>B4|^MHSnTfBiUX+Wy@2j5m&{Xhwk_%osC)9y`Y!rW$@mp8DX=j_
zJM(*!L(V$0GQ^kerwD+RPHd_YNp|x#O5&sE`S*2z#gLgzL1MVqOOjlg`2YI4?m(#j
z|BqZaNrMI%eft>6C^P#c*{icx6f(LaGh`Q)LfI!Hdmh=NQ}U@q_BfpR$==}*;rBW#
z^!fb$sdM*!zuwQ+^Z9%|UytW{y;&7}KMVq`&lifoSbohgJ*L%~n}vb8bv7{s7OmkX
zZKmc$bUsqwJ@o*hHAt)baei__vt{b@j7<Uj?rSS-9j3llZ!w%@P0}Q|S+D<nPQ?lb
zd88OfNTs}46qroAQKy!Z7bLlU74ej&`X|V~P9{ef@pAb`(ae^PXJq;u=cE}tC+c)B
zh7k&H99^AxUp!jnFmT@*b!jxw4kQFTi$HKr)oI}I>BGeDfDV3Xl}1;5$s7|CNG_j=
zZ$0E}B2hT<TG(C*`w6XDf+;BAH^>rHU9$4kHgfsI{r(qtb<i;e_*7zliqGq5;hsYm
z`v`k#gV_A@=zHJ<2GiNuUP6x*nK&76$JF()RgdOJ8mLJgfZqH*U+W*~@YEEa@wTIk
zx|U-_Pife6G|QjU3Dkh28$yhG)*78>!AUBa(V<SdQhi_*H?S&29$T)_T}`Qb$NB?j
z^S;oe$}iccc||<gAGQIG{K@+IV_s>7vh97`l{=qF5qRJil1=efN@5#?mmR<kP)5gj
zq46^D;+8M5X{O@8LK28;e0+RFV&Fn<-Orgkmfw`4^xBm(riyUfB~OpDj*~5e(*w@D
zyTzsyQ17`s;BRp=dx9QWV$wC`nqeT6nn1q<%!-wi7DAf{3{mjy5!f8~6Nyr<5qWdc
zT7+4c`4>xe^FPWQ!48zS^>s>9GC^HsRx&I5Xur}fw*HekS^v}Xt!}2d?ni3FX|*z6
zhR$_%T*89@<_7A_k)Pgm@=n+w=Pt88LvvLw*P5DFLmny(dLxC4OY)>YQQyCVtty{@
zGp(Sx1=d((_HB#M=WnF_y9j3u6f)Aa+#jxsz6;#>n2XivjNY#A|Is7U4T&d8aLtPW
zZGck!lhmHe(w7rHqv{0eTNBl&voDS&#>S0*N{69bDLK4S<6j15T6chhf;tkg9|Ran
zV(Gij8#y8|xBG!dolnVK!aO>a1`Ek*wXf%@0%d9@<<n)EV^T12@Ot$DaD>CzcdwW^
zeF7Z;32mcqCLSo8tlOf?CQv$3dWANT=u&hoEqVJPud-7f_%>~2DN96v3fR6w9(&({
zWD+#=u#_-lS;MGM%7H2SlK9E48)m>nE?Yi|xGersPNyMOysE8VH1mTSN2RXX<rM(>
za|3uPI%uj}eM6v^YkoE>@(4hXF_Y;s?qAHp6>Lw@z_dQV<we@Fi+inBmJ%JEn@ed1
z9a?k*H#Wl9x7@MdA0#xJE-z4#Ys71?qY(l;930K}V&F5qn9L!0p`=j1iz1`(z8ORI
z+75|-8#+fg+J82rju1E!<`dn;sFE7zQ8rcF=V21wYEZ=t`k6Tk(U2a_#yXBLWelt1
z1@pugg3T$$&B}4c-qhOw|A{xOMcX8&-L12CUE?)-QJAKgpk*ih;`E$zc0$I-lrZId
z`r%$<Yy+lOLiguWmh5IhuC8x~ozLC7;1*c$#&E;JUD3H%1rqZMyd_6ptF(I^GuOA+
zTeEaevyDUXflHCPiK=y6UvI`QNo7NNNIK0s`-a4qJTzBvw*$B)!4^~CFvDq}9VEK+
zKu_iLb$FSN8P>=R(b%FsF_6UQTS&!|IiU-wwsJM*77HAP&RvvCHL`>naAaR$!&g%V
zr4l8PD4k?eG00>~a}~=-y&I`by+A0#ECQqGrmDnbDMoNFGHv`|8a9dshNCt`oB7eI
z1=`xKFbMrpK*K^rAEFRejE0xpVJGL}gLt$s$P!x^;$+?Y1q%=~-C*luYKh6Kv|OpU
z6v@EIK0wAsE7o51Vx_`=Y#dL=?QicML}S|egxdrq8c|v#>t;UwdR%@ou&Wsa#+<S7
zFYx*@l?u+jH6!Rtut{{jlGm%5U8En3BWYy>u`d;7ks}%=CMGfC@g@n~&&!1WK~LQ9
z>7^b^8S@M1-8hpnW;us8EbjsbLD9G5%9)f6gTe$RWyx*<n$Y&Dv4j9_-kz&1$K(ba
zW-v>7L5$)bIV%l>)Kx&7%~<%?8L(lzICJHHC1WR3#)f_UUQ%Hl?<ma}K(SGTh|?w}
zEu>(-49cTr^@4mDhku?O$%?gB<#81umowT}!wWi9VisjOH8SP2I#^|*yT)Qvi(5qE
z%;^{x9|f{?q{SvqHlrgtO{R|KzX))JNSmP*&~sHU<ukJ~3V5_0nk?172e@_xwWjmq
zPVjJCiv0Qw|2E0xeqUwGPnxTuiye1--$)AlWl<m-MPem7^DaLuG*pNGNrHd%QL$NA
zi?lTg6eOwP02FQKcu%5RrqbeTYK>Sp8SAlP38$`bs8mD1Vbu-cE9D^U7wyWjIDzFM
zUy$*IL6a<#f?AKhD2V@{`5^5v<>{`GI8R12T0q;Tx$uOw{F9=f-YT^9Fd-NU&M-Lf
zPE=hg+oGWi96i=l<~)N`_Z38RMdAdlK;XDxqu_;5Z;9ST8VAjWhP1buwPq=T@4#N2
znJk!uSa7?R7;SL>6Rn{A@HeY3j@pD+B0LBOUNm0zb;6+C1DR6kOGf6nB-UU`AJ}+e
zE#{5;LiufgB=xc!Z#F1EGOCn70isr8^i>0G`cbzWFNesK0e!qEn*r8fD#56D+6L|5
z4Iio-y7;m-EOmO@k=PO+3{Jt{cAu8iA;?fqZyeoTlI6TyLQgwtkENB<$mLNI1)+N1
zr9pOBIz8N^%+D@{*X)@%07)h{t<ZVb<L)_ohNkkS=r$fR5^*Y#SLL8SbD7ydxz6#V
zJcb=kvF?LJFY~SM;?W5jIh~Iyp^I<D^=Hgjo}Rd*h%PuCQDHn%C(^L~c2GF_)|I}w
zlRt}GnueX6M)Id7sp<tG;JC$#2piGxX^Ybir5~nymvaOiswBG>S#bIl5hG+AbsWDW
zTWV4vGikqivh44TPQF?EsLInZH)sc^uIo1p^I*4+d7O3UFcto+d5=|Q_B{};6v7-*
z75~m(kjlv2LQYFpqbcn)E~4;LydmGdUiiz6AVvgoR$c0?_aU;wRpXaFq!W@3dY9Bv
z?u-)iFLfzXzcsY`%5rLPxJ4lI#>cBO@8&ZgYYWDmAZ5Tqxd9KVvPPGFCd7BZ9#q0$
z|Lsc3o11u#8<6sDSa8kh>C`d{ITgH`MvyW-3+~=lt8P|4fi9mMj<zWR|8t+oz}H;L
zDX?vJG+%Cv^IJO-G*(YrB0iQB;^Y3&p-moMg6{PJ?y~@dp{<Hn32X4hF-N^ETGN{k
zf4I%Dxa&G1(L_q~hR||X5kkL3pybG4#&^q`4YkDU__tjwuW3RT#U6KseIJp>koNeW
z99k^zTSI1(k%sB}4Fo4qA?WdftyctOJWsN7y{1`cQTy2R!KFmJ$DmSNXf&NM%hiJS
zTV~&Rx~DS4E10ETQKh59E3xCEC$g5ARsv%|>ZAyVEdOcUwvkcSef~uvv6H*({QSH!
zG2T|Sjm4ndfEu1*xWKRijulK!GH$lva<}oNl_2rH3Ssw!{_x(lZv^%HTlWLzVuI`V
zSLZscfXtz1)6{lUOBqYekG?b>%WzH5m8<{)yZ`+&MEcQVoB;M@GfI}NC+&WV1E(`4
zWeC7J(L#Au)(wy&JL(hfx}q=S0nRVdfKxXhiaI|pB)LTDeo<XQCfkb6>p;~mZf$CG
ze>I+e?;F$oW6=1jR>S-x4g{`ho?R@;z5UYh+k^#Kfp8;w`pUQZ$%iQbDc8+!l(2Em
zLbKo=Y@&rN>4F6~HR}j$Z^IjdSb%_QIU>5Whi-K)%LL(qZFma!?#7y2s9-Vyv0L(9
z>vXZ{AMMVaR8FI=Dp;lB9;fKi%JkU|Iu*^zx3=Q1%dtoh3p^TP9n%nbC9x|PU3Lnd
zBP>po+OOnr*SSLpqSj+)P5OdLsQYr6VlFz?n-02|SIbRF^1^*}k*ZnKJlRrCg=%R7
zK)ooE5IU5mw?f;zFSW#Fd?bA4x(mA;t%_^$u=Xu?+H;rayr3u6s3GMvqc_!>ZYi%(
z`MM|sr@K03j3m>yHW!WFcU;SOBS$NyjLrW6pyg$u{;WF|&FmLY)*05TN|BePI(;v`
zlq1E^I(J#J!9Qpdt3WRKzOa^{8Em^Pjr+_XFN3-2_{{;{vCg4iHZ|5fcsj*e5`W?-
zwyJc*rR|0hMN6W%E*TY_Y58Pc02QNHhr?@7(7GgL^Uvk?BxwVAxagafCTbdeF4?lF
zAc@wn*yG%%VONaoxml}6-lv^z#>z($`j8StN{*74{?5Bp(|F@4)W$9Cmc(KD$kOCe
z)wN!a)v30ORJKV`htXgKoUt#J&-vn;6zkUjEL&?R+!$wl5j`$}pGqmOEj#;t@mXuj
zC%QZ<kU=4M9H>}3Y_5ER<i^9xG~wkr$iGV`I5+n}{_9@u$E&G`8>rc)+pUCfsdx#k
zQChvcjAs6%Op>70f?n(m1b<E7J!jKK`#jd;4ASBpLfjo4dTe@8BQ9F6*o(3iislZ*
z(d)j{HZ=n<3iHd_t&3Xe=*IeIW*wLHta-#g|2%!cyO7x{qznJqoa{MYCuGf1PJEJT
ztxU_0p8`pw6zzyPRpDd|stGRR#WY;6mR5=g^`}ft3udQA3*zqawcssEl<|%D+a(ne
z^SN04tIk1hm^B_yO}NBfWHz^6x3A6g8bO%`ES}Ne5mz2qEc@0&Hm>fq6ANJUG4a5U
zQbtTPOF%2i1Z5c<H8?C%{iy}6XZeIp7rqm74D>6i`}K3)G153AecHtKW)w}DrYf8Z
zD|nG8EB-;GEXG5>7|DQc7twaZtWKAwi;Y`mIY0KJ7!NB0GS#N!s0ZQC?tAF3ejdz*
z;sS+lOG<R|twQ_;H5;^qu5_6r-O7I2IYtqgp^L=un+{R+5n_cclK~Tld>lyo*wegr
z^=PprnrXg?trH)bTV&a+rZRp$-AuVGJ?TwA!K8}oO1B|4$i-RQATV52vb72!P?uQM
z&>qTzik+sIwP0-D@y)%{ynF&EcuZpEMfE?<{i=(N+R!Ghk?vx;El%l%@(GGPk-fMP
z`UOP#;Fl!TT%1z#r;3b<aT^m?tBbgL1<8%H{?f+f4f3uc+ng82o3-yPylVpJ_^+1S
zoXWt7pKlnA$6W0!AHDEcTY*TwE~`9Kymae<f)FffTF0cq7VTBHi8oNLXRXMaG<@Ex
zX=n_3uFn-~=NP4jfv9?G-l<n#lg#lb!A{c<ks)nk^;2{)($syHB|7+;(62{DCy$-G
z&?T+%bb5lSAT}a(=1KTBn%NbXuaf}jLqWviZjAnnZmU?BW!<%r`WRnkbg%lT(WP=?
zRkIi2+1yinE_0?+C=^YwQub9!Wb|X~3>6}J_Ns`o@_Y4!shDZe^tB#&ag!cAI3nwV
zVYZ`gpXSnQ!l_wZzn~I+^xeNqX0>pxOVio9moIkEb6#ZvZ3;GAs9vxovH3%0*0REb
zzh46R>0gvE{4UE&plUp%|8N|ek~%B#DH>ftSFa$H+MSx#<~Em=U$0=M-5}#!?#h)S
zC_*_M@<pLNR}NVGrNe<mr9$@$Vv)}(^1rxi2Sj@UUj^Drn@BVfqAFoY_rFU$%1qxS
zx1APP{3&9pw<6j1P~zne62jPOm4C=IH01nTt?es*OiQWk0*>L{XbaSoysNl8P|y9-
zFv}CS?quH(J+;Cp)RCj$T+r@<;C!>B;i_4bXO--(yPm9kOQ5GFv&OUczPKc=*oNsj
z|NS;i?I?860{7npKX(BskEvDn7KRLdtST4p{>bla6fu!O2oLmpT3MR8g#ahJ#D}0I
z!(x#NSl=s#5<<$DW`5GlUQL%DpH7p_ShtpwX*y#VVTs<Ocw$uTwV8x>AiShp^~ov{
zK6QF=`T3$nNEH3M78k?QU_Y7m`vPCLZGOU1-0PaT296$%AarM^nAmDoOys<mAfM!j
z99lGeUUBU_-DQUchS&=t*mAlmen@Kqc6dM#i_y%~GO;TxjZW?Iqth}_g!r|X!M$+G
zK_1%Oh=Dx%zch4vdJ9ZqQNwga?L9?fDbZz_>1M@flNr@ES&Uef(n{~+T9a5?LqsB(
zcoiNsEKn$`{PTOPiWl!Rm(tpH&S^80!K_7sysS>!@`9=^vE>Vs=RLQnLad&2La%*;
z_;4@m=~0$sXUQ8u$>((hlqOLQ@OU-Vc>jrMv6VaGdPYJvC6m1mo7|pA0E}uJ$%*-L
zLt12P*lRBBbZRd}BE5Lo*eP-C2V%oJfER`!3E()@`RLQhd-da`T9&k0{TmnMLnD2{
zczE19kx|Y8?&^y&2>-MSWhsT^<#~?GJdh3SN*W589Dq>cQqAJJ@@mW~FXw3u0W*D1
zpT@={nie_CbJ{ZJurgF+TtvP~gM*oN>g~|cH)q`&mDv`>-Z$#avI)t3&q-O!oOo;N
z>$-4Jjt=c_zZ4TvW@LXzp^50ljd}8=%m#y*MYyUQM3PobV^+>lyFnZhFz%XV!6U<v
zU*z61S8gO?;~<Iu8@ydW7*Re|lwxekA2;`CwN#upY&ceNqA8DqOQe(-7Q<I2Zh#e4
ztTHRL6n3pxDSDwFf$~Tk6}dG6Wy7fQ8=x(x4^z;>&=+r&IV>%&EFI6jQxZhqL4~Up
z&zW=S<=N0m_|mkb*5^26pK1}^PE+Ez^fh_tI=7~v+l0c`orSs;l#hdSFX7nLmhH!R
z;-I5r7ZLbtt)dnlowrk#u3DYp7OKO%j9+k=u`gZhvMx+l2@!o1;S?$1US?jXGEH@)
z#}sbf!``H(NEcX3m1aeMlH><%y!ocAl(}+C?B4e9&#<~ZZ2GRHUf3nb-tl44D!-Va
zX}Y)_lk4wZ><Xr4`@Uy#B&ygo_F}(|eiY5QBlB5V2A1DXzbKaCJKP!7_u8_7+ohf6
zNcKWiyo*sRBC@aTDAFz0unT_^mxyNsk}PC!GsLZfI2<Wvu9feyYfq{>ZKErQo)(@_
zYMS6@$&f`2qZ}C0T@WGk1vk|$qqJvc?3ug*4u^J6NK8!}rOdz&$96L()??}faTZ#s
zU*|n2bdoc_RKL8SjBOehJ}Vxi5^tPygRdzsWwf!diMb;|CLlDs{VS#@C%w2IL^o}a
zxq8@c5etBl#EZ+b?pVKS0!Q2=ernZ-5Gg%678os}gMv8oN2J+A8k#MGMzShRO7R55
zFuL5VInXsHb-2m$$3LIiUNx_^XM~^sq6O+5bbR54q{p6+=kDeOO{2V!rjKNfx?LIn
zx-8W9u!Z28l&SOI{`<*gMJox9Uk^k<{1QGfaE*U?<mj6uF***#symj#ugx1`5l!dQ
zJ|gt*y_G3B^9^9K_hj>365aH7%AO8OG#TPN?rkMcz)K5FuYWkL^U{ETaFNuU512>K
z>qfE{T);7y3E@k=`Z+S0uNL?ALEn+UkIip*xPH3vjo#!|n0pxAw5E4;O@=~CV-{b{
z-Hy;9_+%7IL&wKwGAXbjyNzWYF88m!x<3Nz(2)$JFvSy}QcP}9BU>8$Z1_JCP}NG|
z)Lp2~ii}m`trvF38DUtpfxKZl?`zW0R%l0MPz;%9-p0D*U0i11>ta+VC5%7SB6oV4
zf+qf@a%75s!$-5aL`-XF`|A*&lIfq#5WE%iS^8bm5}Pu0>5q#|>mjVl(EP*pi1MLu
zeV?J(3tbYiBT>EDXOVFtj#ec)sihtluJdJx6H+9aioJ;99v{44k@Eff_ifL)mw4aH
zzNB{5b-}{^eUO4PQ$?$5+1E8pg8$jXFXT&2OG@Y!MnB7Gu^9iZVUTGNs;hc8a43eu
zJ~E}WoRNxud_WCkS2%1UQ(`eq%(f+5+9P1gEF4M~+6uiWbAA}uT$899AJ*RHzy?4h
z;&xe7ymRcRtmi^j*;vw&>`~y6mtE8eT90fOy}v;7mL!Z0i6{68b25^#PsP^GA+e%Y
zdQ5I_fTIB;MNMDz3b_o0X?KCNllg$MPlfxcUpd+QA!@P4gc+gclWQPVQuOpBo8E#U
zZ>7q^-C7U<a`xP`_<u$&Nfv8Itks^<_(tt|W07;zEY(@0$BDhOl8{wX>FamEmDlyQ
z0}rcCe+?sE(l13{Z2LM}30=SvrZ`ze%XC=$FPr7{!=m8CNuStP&c7b`Tas(XTp07`
zt$k&tW&E@KN>1WhnI@BH#dlaadezaXk9Db&f<ZO6R|caj)kybDFJ~|}HNvS`Ae>PL
z4jTlaW<E?%^VHWgGTc#-QD(Dj!BR|3!A$5y_)Q$`yO#T5jI2&mT>=LD5MTbk-k)go
zweQF^IYrfaaW)ZAlW6HnCD_O*Fm^6I?39kJuNA2DN)VT@zH}4xCBdUxAfHSb%^RiN
z#tkzjmMBiLb_ie%?jUWouvK(E{NI@BdkV0(JbN6J&mmg`%FzKmy}=pMC5AYlagNBs
zm$;L&xm8CgJrph6!0KO<sE^{4^*_Rjf8Ba0bb9GZN55yukY>O7`{VqUOrG|$&cN<d
z4zDyWjlGm*yn=`*HL`xw#{&Hv2a+I8AP|iM>8M!fqcUQtC84K*EX9QU*I<I9^4vN&
z1wK&*{((<NXa4xQQ&R?G%@Le728j<&YfcPVwfW-C&WGaB#!{#aTh+pCc5o7r_dVM9
zZt^731(oR2Mh{G~>7`5#_be~}nr|Rf@0m2~%`=L-cC4??#3^8v(*qeqQL&7kqi_6g
zjx{|F;4Z5Mt)0FWcDWuODcDHoXA^I|_ef#dxcmCP-`Lk#5a*~59r<+n){(qX)(;>C
zf1GndT8Ls{Jq{RB&Ij5-er|0+>xRxfZGmEQaxJ3a8qPyz+w}>=r0p!ZVx`@&Itz~s
zg_jhfbtPJ!o&40E9Ul$e+4UE$w5>jT_C#fYb*AAI3W;4IuDuoIXJ)8TTFuHGYvFn8
z7r>D9ZGsOz8`JZyUZWSbNy03*NKVz}@gU?sosjH^;-CMfaDt`i&RC$6!I$roHAwBQ
zTW)J@H<0|zhn*Sk(GS`*vSV25e)3HIJjDu5)2&}$NR{jag)#;Ra#ald%tuNde!@zA
z=+EFpe%iOxh$7zE<5G3{8~K@%?}7c1pzM;oXo8Ll$m7j<C4W#WS>;ci<5VvY?c2Gw
z)E5UmGlt@pGnju9--`NlDynqo{-Hnt+RyX9{EYIOsM<Mf(|Vs;3qtaN*TfS!AuS~(
zPM$XKpbe+#EtqWGeCToNYrAKsu&9LIJD;CZpeqSyCbN<Mo&IH<CBonpG^Mm^IfDxC
z)mLEIGD#@miNR4l8-F(~P-6YYr?nW-ZCs3=r-iu#E1*OzR{vTU4wMpd#}~4Zn3h((
z@#|+!g>+4heBVXLu|gSQ1))BW)?#>m&VDR80_7@cm3F7?3V)d685*n&9fNd;&tp|_
zeCQZ04aY71Cpn%>;CPvtP=Uy9dk(2DZ3ZDEadYp0FQ~jx6dI0vB^Aktr)t4o3BsF`
zguX=@acosBYzKwzp9Fm!IFU?#kcDnh%hfh?43qI^QYg+xawaP}x3o@x;ty3Nma(x1
zJw%EuS1IqtIEFt~rMaX_EZakLM${=w3m&qXxZ$z!xy{IJDy%C7(xcN@ArjHvBd<DH
zKJg;|oBB35Wk!<Fy~2Z%w$2y!HU-+@6}Kg|ei=ufMwpB^31e4^r<jh6l*QlnuFHwE
zvDd15JEQGs!(#Mwhz-iAt7!?ZP3d}^&t33#{!7<g02+fbM{qSYwBfTCUL||Lcqgf%
zw8QQ~ZF>uU7&=)u;C#N@Xy?Tg)>>mny}#zZSWt^%T!CU+>I9CYqrY201Jl0rPnXZc
zc4<moG>o`dJ$Cecx`WwGHEU1++j{%*MfSnNCZTDu4q&;zJ>@G;9WD+kNh<S5L|Ir^
zD)S^hGKYri-)^pE=qYy=!VePSxmaD&AxgfnH>I|^_W1D@vDZ$WW~T!JwN4-@NAwYe
zn#Vo_RJ2^~Mmy766@=OvVm~<dI7Wz9At~~AVgVrE%<7ixZ_mX9^5CdsRzuHB=Yh<e
z3Y0>NPsM3h@kjb`enl^QdLR&p$h&m1WS{5bRAYx17iylyIQI%yCkD+fd3lsST<URF
zfU>&xEyO2lX?zY*5s?pYL=7g-r1Sb$6<X<rFivaO)U(As<fY};E~`Huv^a&c7Kn6s
zZERBKFZ%ZcD#@|F+f#aFsjQyCj#K)7U&a+3`INopb~hyeCSe#-Wcid}z~MRmq;YUi
z{~gzcB;+v=J#s&_&Yn|SDIk`GbV#br{60#7fLz%CCER4<m#Q94i{AgpU)T0sT}auX
zN^xS0wI}y}+zOW3spqnqEuZ1~W#upL2K?yTUGmw!HJk%gMAyA;6CTU;*R0IX(@v|@
z#W?KHEq#}~Zfc2ey(OP%!9Hq!qbnm&(V^&&sX-f+xzv!UM`zhOe&*NbV<X-pGhbz9
z)oj24)a8Gd>F1((InP>38{YrcvwYpjYGmWCA+&7yP0b_P5!%lBWKo>cC!B8P^-Gdo
zQL`-=W2>5s84&GEF%d}|X)J70mt`=cEB!b%cDgPV4?@^_2p5O7wsL11GpZDTE%^jE
zErR<WvNI=nje^#Aq{-~p&U2ig)Q=C?5^-t)n{;_>Hr=TOP(Q%`V*Dlg+?-~=vbQGW
zR+Sjt2|PG*kPjlvQ?Yy-9?#c(s$RfHjz2gZ0qwVnzQL0IRsN?~10lou!NCKBooGn$
zVmuv5%mbhnje!%p@D^mKyK+scnkA|`f{WD8T0`f?oqb&g$DN-Wu^bOqUe{}%Ek>1x
z1fE7)|3!;OYS2HjoHpnKdDtFoYqZ9D-G!L8MXhW-U1hUoC*_smggncIQ`!C@KH<~S
z5y*IfZ~15!O-)UXfcg+Ulk>;qNaMB;%HJwp(Csp0m>6W?@3(%|%^}Tn3G$Mz_=+1n
z8clAjJ*gfO7i<?h@8WzQl#?JQOWyl55tbHPus)udljXUwUipUKv=zkjEuelJY3b3z
zm45t8WtE9b??x$xY{_*Yq5{`5V+UjTEnkI&hil>BLg)CEUin!xx3tscDM+(fj<QlI
z;(@vC{O41EuQP`x?j`NkPHU&*m4W3{3+K%DKP_fz!{ymhlTq`__)TX<hUVhpvtq>L
zFE_+LubxWfDB!bN7wYqhrzSM}I+~v)R|ZGLGMTrA&iYCs=DWJq5!AW*f@PnkXT<A2
zFT878v?%n~)X<Dvw+_L6cH-=8dUira5791<)gEU_Wi*C1K0hbiOp_!G3jMQlb8TbH
z)V-80*o^AkoN0#}->5u~f%XG`Lx@T_Lu|mCMx*%$zWzNS+QT23?rJxFo)_-`R~3Ui
zFNpIofsS9SK0OU`7P?=c5qys5ya`tgbkl@3gluSdk;8G~d@&)MTREEn<+su}&Y(CW
z-+IUm*^3Gn@Oeg3=Zf&*3{%C{LDQ({_^VrwDzprOn50DpEWS(4av-S}wc?R>uF3V0
z3tgAsiUj*rE^5f&U?T50O5%vexX`r+6_?ZK*QgR_`dOpzoiL{y7M&^x0i~)U%MvxJ
zQZiJOnSIo*kvIFK+&#r-MvM`;Asd9FOCo({p;{}M>F@J2Iu|f)&f<lYy5w%BGsWiY
z1=}pIJY<HiTBmi1Ood8E0jEms4qS5^8ClQ}A0^akn?CXav0G3)pJvviOp4jKA(U1R
zLc^QMM%Ot*)eD!-tbnrnNaV9tEh5NYcw{7~qZKasn))Uhl!X|l#yII^s}jnShn+yG
zI2t)T`q>wmH=5#uv>pB8ju<he-zi%?1`X8?!wF@YcPL1zS!xd73esr|up1bE465{0
z!?Q9Le8XKgOpPudu?Cs4Y>XCgk)uJ)VLD=56%?NRbP<EkeC>UVnR>D)+o6&y8r5r(
zPGq5LXJ%X0{#39?`G=r~9N+OQp(THGQ>(oSG0K8Dh1*PBO<kOr_Cs@FtdB(*YpW=f
z)--^zYW`h+&p)8+!{FGjPGCj3M4o5WBpFBc223CRAFV};8--&`>by))jMPNivsZE;
zc9y{w>*I-WTSDVSO1dawXd$zK;Pp2BQr94ZG-)9weHHF?^BH7=ARDcgVI>Vg15jS&
zKc1aF<8R+lc#1v|u@Il&8p`n`d*VUZm4cSWY`(koN-;v5LH8DzQv^p>Q+i)bJKq=s
zY7#l_o#B;g@NuDQ7@BbDLlzk`-u;|_m4<P8o{N#A<kD5>T&?~F>jHywahsX$>Z8@n
zK*vtDh`Fqd_h|+<6VN+xA_ClKJVNrC<af=f_ve$1YME}uy*L_+d(nOEA~XfX^^ZY;
zK;>bNF7u*W(QEhAQaA4Uic%d-;S-57@tkxj?ZK{kxS7vC74&HN(f+>2B;`9N+Q5`&
zZQ&KBWKc#jH)`Q~jAjvkY3r+XrmzxrbqkkuCN91<?%>%&?yil>#3`s=jLz!u4n1vR
z$WxHsld3J7%$GnUs_THlJH}{Uvl<cA9}S-Cd||T0j*tss{VqnA6#_`S0qC>L!wQc+
z92eH5JNs3}%-9M^oPT{j?iJr|B6er0uzaX3@3t9IWA3Zn%*}sy4azTf>p@U2dQ^W#
zh}Ewb{c!g<HYed`8X}8O%F#z?G^kfP%-<;PkTK-RbJw4-)<0!qDH=Lyd`RTn-5zK;
z8K$+uP@vYYfgVYy7#-IBR=gDc-a0cwiww8GtpMS*502s(Df!Tv4xa*BaUm#h!}1%9
zE2a7;Ddyk)1SM1!-jpAhO-(2Dlp?;_F#n5Xeb@)o*c(`wjd%Qy<n{jc5kh;$KRht1
z<1prY2o!T|q9r4U0XLvCfh~$-m{eWs!sl0Huj+mI6$t9pl39n^)X*Rr#PUlLHPh*;
zO5c4y7tb+DdxUy*hIXT<cEkWl&HbP;C0w--DhboIcwBVnhe~^5nymR9H4#!2ES?a7
zPvp3o&YYYAUJm#bRDPX|zH-M;IaaLGkBZ*>t0`}FW^4>7DYDM}COZxN%dU956+i^g
zjiLx)7u;FWJJl1QyCuHK>daw!THDqnN973-@4K;ub=KCNqjO}Uxl>YFk?i1Ih<2-4
zlYI2$##!#=Rz)nC8NU`j#uuBt)qaPT&SUWIps+~m1%(Jvu9ALX@c21Gh7PlOb0z`Q
z(PeSz=Ka-u4-`tLg-aHCKYo1z^ohXhl+AWxdEQ;5gvNy(jUaqFM$0~TC?wTMM1cI-
zDVN9L1q#vX5>=-(Igj+p=%U!)wm)t6xY`mhT_ZwrmZP!c(>Sg;hl)v}o8Vwy;^4@@
z_Y<IZlUtrv!s|{s&?kjLJ=?2#umB3%+uOzz6!&J)&i-or&YfJ|!6lB|Dh)7t3d%tl
zl*XTS3V2H6QcUR;A9N!dx^ATOQ=PKF6=f4%gC_{0D)hXjPeA8m!$Pb)glh?BBPj~n
z!|r{HywaYk8h1D@;LzXF%taetp3BawQSLr)XIZBydm*-_&F}B!6I5Q*+eRo`Uz5!=
zR01VWMwooN)mKy5vQpHN&&Mu4rSN`zs!=UR-v(1iNa=%afqrHSVcUKf4n(W7OG>V$
zBGMi@f-aOcaUIaV<wzNPXy-}04MbaN`r-KOuh~1mRJ#@QR&h_bMoqPt-<mM&z&YJ3
zOk68kv&nWevffHqc$ZOvR*iC6;Vp4l+$KI6v|m_2k)k+*b00BuFB;RAHp!KLio3CR
z#&QjZ7s4lHxs`r>O1K`jw|2-2_6w4BexJx2<wyt-Qr&mS3~dAKI1GMT3&k$bu+bvt
zKXMtE!(+sYb##O-triWM{j0B9j97tCKe!KdyMxljcI~X8c{s@*Y=82eNZ|Tr_<t)0
zPz2f(@8AkFju4ZM^L$|3H_)awdJ<bb*?s^Q7tAX!S>J1ZtNJLIlBD(ce=wQITLcPN
zcY&sJPsXA8I&sZGVu?t8oPMHD1rGMjmPw~RFp)dtwnz5Qz?&7Upw8>L=bYS0I|!Xe
zyTaZ4v?bx4>Dd{ALUy$0p)^U*ao|T(xM$v5mw=W)HR-J}@~#t#-uY=hZC~X5jV4~>
zzqs+@5@5uAabdc>^zsK1$^K4$Z`0)+3B5{O6WJbYwT*y(%gXD*hyU%ppSdv)$U?t8
zE`Q`15&r+96-?DzgaWYl<jJVbY4d7&+5Iv8uA0H#5jwvz#nY*F9@nTta_&EvXK@_p
z8P~^p`5g;I;4!l^Bu#kd<{jHv$`wpcT+@xbV|8#%z>wr>ihD(~+hTaa`x|Y%>3^|x
z>-+sJhUEOQM6$b~ryX(c2=0#-Ll|=eByFeV^!K75G%=e0Yl|VdX$X<ocB8|tI)OR{
zQuYb2(674eyC`sH+6NjU2{ryCq4%wn#{npPaq+|39TIm3+wF%0I;RH%T1FXfudu}(
zJAJRN-AcY4uI$K7Eg$T;C`8Ae#zdGCg_<6zM~`>KPAuTy)1JJC9kBvN|L_Yr+5^9#
zw7e1zJPhy_baUnp%DuSsq3OWoK<Yb<oLiQHjL^+#oCr4qeSMC^;|GOKSjeD}bCc($
zXfW<K1iiw}*4D`ibJ?p<TO)3bPsa%sQ{|&`TT61AZ74mj?+1tl;e>~zR#3IiseY}b
zyWHKm%jyL4?_Np5mljSyE_EvP6n{Jy{JP&xfO}!OAxFkGiSJ~CJ^kaBT~;tp5E_Hr
zPu|=mAbt#T_0JB}&92!-1E5CHim3VDib(imO&PpLrke%<R!=bqULHBp6$w2!>tJ6J
zjkCK?1GIz1PGpu+bY$onGd+Zz@8GiBub)&jz+A#$PO_VPiWermO7@>Ol>QHNRcq^^
zTz{j5q?624d!N0jBLwF05qgCD1js+_w|M`YhjAU$BRL*0EJo2O<)+nMo3Lph5AH^_
z1n#;Vy7>^ukCC|kAe;8;7;~c-fxBO#^0&DQb0xm{pMpzc1xiLoc4=pk0j~co<K?<v
zFyKe9`111oNZIrAd)Ni`a|)(NVQaL12HuB(6~1?jNmM9;Xk<Sp02g+Q)F$hRyt|J9
z>_<PP#07}-Mv=;GiDc`?O&;&Lo>u{|_l5x3<LyB~Kf2n<{m%xsY;n&U51NllC9EcW
zfA1|I7RL4=>Q8QDLdI$0zm3z~eDKF$X(2>go5_y+yoUk7o#$#^AM!>)_FAFs$NXOI
z1TF>=5i5}S$`FS2zDl8X`j7E<MO}RZEX>XhtI%DowvZ>Tf3cVNO(|`T&;JHk64t+m
z8utheNXebFdb9U;*C>PUxXA}yy?9S|MT-2^-!1tDPmr`S?Nwu5Il$h-0*7U!n2ktU
z5AXeHbM|}9gZByn1HM1&wlx;mq+jnhGz3N7zQOwpxc2$|?>7Z@r|-Q&0k+BAKes;-
zuGcpLMAQ}&vmAgh+^~IB8UzKA18SzE{x`yV<=+%`AD9H@%Zqol>-mWbUNA*UTaSZJ
z-d37TI=opy2Yjb#!8yX20R$?>FTwu%26DAIhCQV2n#4UCOkhN?fWTj{C;?>|sRQcA
ztLk;)07z-o1}t#@RNXg661s1gKcqlRdixTXSdp^gCxV8pQ0D%(9Rq;5nSi9qAXfqK
z+vM1w50T@4A*!@QpkgA|UhXq=yy{-O2Z#kKRz%S%35!AqB)!|Gjs(?J^CVu}!yPai
z6hX;OR@&*1w#$0CZ_a4%Kl}IxHdK<((sio%bujQB@M&}0-|OcDxK_7WjppRG)Q(jv
z5i30YkM%>?i9h29E%p%%`%Z34b5JvGbHKcsEp>L<(tgWhAEg9Z^t1??yJGJ|Y6ooS
z!PU0kzfmK=BgfnS+djG=iUU@<mkXOu*?GW|2te$ELbk%+rqqIyIB=g`+nfi%G;o34
zDo>_E_~Je*9b8Vb<?inxznB1AZmh!hLDKy^-I5&hB><GoW%$(P0K_pM-bF9JdAG;r
zHAVs*qlbsw*;W(ScM99T4)S!zM85{xa8yX0O7ibDVW;a=c5tsJu#UGBY(IRZjt7w^
zOproNYybG(B7~C!4xP~D)%D8zQ(O1BnXuOcCm>xQof7a1(0*?JNeu)B{I+@)#6W0V
zUiBBZ$z?8vq>1n2Gr{m~VjM469pHm?kqKekU2|+2L6m$DRD<p|@Kzu%UP>#u<G<Ok
ztqk$rB$GQWs$1jiVpDQ{G?DCfkMNGhAJ|-(_h3^PGZsQ{_<j?!`Du$-K=mKkl-x9$
zXy{L3H(kSj#iqwBtcU{-!e4+*fz#a@p7d`r-Djc6`OATto3o8PI!NPwLJ5Bf5WGBj
zKZh;3=K%})pTh^^fgJKHDAIo$0$2;B?cx0@0~km!B=@+1fa_T5Tn?<o_EXIJdi{YD
zFaqW^Y!DKy4sie0GTB{PyC!LS`M?S2&8k+78!Vq2#5K=<Q?mVO@A82G3aCg;owrA|
zI7(c<zyE+R|E(K>FM+AqCnu+~?Gfu3DLAL+w?1rs0tm`f2gDN0b$r#%?I+j!0r|lo
zl=lJ{wxv866+;rbc_PWa;eM|M!tC-4fXNFNV*W%xZ75l<9nkrEiaTx_pt|k?FikG6
zg?E=ku#uO>esZ?u0A43<1&GMJpSut0-aj7yXCx*#isZ%F_;26nZgTuFmW2{=;Qk$e
zpRoJ*E_a;u9zM}8_J^h&+Y{Cy#72N4Z*kXZGgze-LbT-x?Y(LD`e1cHFJFc*`;i@4
z9AhH3+DHB7eVdZY3IYS;)$cIvBRGDD^y(jOi!LFyq*5o#y6;kgL=I>f(QjNzOloz?
zc$dk$#%Fh_6EtWKE(I3uFPPy$CEj&&|HP%RcoxXj?P9Mz%pi;}_^-H>hy-A9o*l+)
z5d?7QvG{L~wb0pt+r@f&)NBvr-=ym|FeUPSK%qwe|1o0|n8q%Y<PZ@N^T}VA()bNh
zy<oLaTf)&5dmgpR$$tT<0Qs@OkpFT$tQH&mZy@#9lX4>bf#tUaQge?95s&}-j{Td3
zdq67iRJcC;{9`}Zfds(N9|Wn#(sGFY^M(T;^?(nyX(Yfu)n~jnsELR+HdN{D{fLN&
e4ingSh-kpr-e9rx?N9Ixk-Ut`b@Vl3pZ^0Oxwm`(

literal 249409
zcmeFZWmuJK*ENiYgmgEoMR#|1cSv`4N=YxeO9VkWm6S#V=}twu7Xs4V@Lhg;Z}-06
z=YIaaKi*^i-~d*g>pEl3F~%J8idIvRMSV{690mpkRbEa?0|o|u4+iF$3L-4<2;O#-
z1n}#LhlZ>KOw}044)BkZm9D(CvN8+<@HZmNlSn%lxL+>;eu#h{7?`JdPhg$`zn}bi
zED!dtXW{qqp8oasGnHR2EZGt(f`Ji(k(UzJ@_DlN8L8R$>rzLM3cNfb`!jYLMDaLo
z=_p^sd~v1X`L_)MbOGgWZ-S1erqYStbI&NznaB7hNQGi>f+1k`aH$_q?_7V+%j;YZ
zEW4;ZpM&%EnX!3?fEn-Rnbchc(eKNjyyolexOtG|#9*<Kg5jt@PyUZTt*9r8Dxx#r
z{FkTxcteN)Y)r-j+W&m#pHFLGtMxFQUu0zeZ=aACwd3-?jgCdf{X}|1!zFQ0{(pN3
zFgX0bga4mv7xM44|GVM-$C3W`sQtGP_ivE-H@yCr<n(W1`EQ`$-^B7SlKG!d?BB%l
zZ({imwDB))|G&XlLVT4>htlXR*#d6PhJ;F#vtGoRvc3GNWo;pEa{?V?ALHwL?eLW~
zj#!1C;y;MphzXoM@xAQhoi=1n;m_mD_K3BbOQHOhE0fJkVmO_dQjo{tdz`x(t=(B>
zWko_K@bMg>J<-AeC<JkOp5uOs3~v_R{KvNcAq!B!(~YXkx<AtCs-U##dQUX7etpzi
zLL>L7BKf!?IT;EE_nVKtr#}|IfB!DiA199Y0!w_Tr^LOd{Xdd0n+f*SBdJqHH6y$4
zU!3%ZAZ&IX)fP!MbjVlfOo2;TYNXbpzd*<O;*^lNl?t9NgQ=&&-S>EpU$Lg5?cHHb
zM$LbGrdnb!E&J}1;}?JK)ex7gFIUGK{NC3$yVZr-?iKDk#c!OKTDd8?s1$MJdxpkE
zZXHK5*mDDK=x=@$#Im%W3^8(sYYZNbJj2rsMnfJXrvAp6v2yW1sQS<C?~xl!@ng}(
z5$>-qZY>d9mrf}Y=W~>gP~CBGQ<x~y`s(svAelcn8ZWwe&{xS*UP}>9xsM-`X*0g^
z>hLq~vX4bEAv0yPnq21Mx`Ma|%_?d7KW6)jzf9gi@AcozolO<dwc@0$Bj>Uy_Mr~~
zRctiEnmYyt@;fP~%_Te<S#ar47NupMWYN*HdOhageK6m!Tax8CUuE>E7tf%=pvk#A
z0`=9+PU(!U1!|az@f&$0&jO1not|vkSN3XuUCA%1J%S3G)00iCbx!~1ruyQDx#~)-
z8b$864Q^WUy6r+{9dR2*7rk@+&dC3|r4ydmv7`G!@StYHZ@2QY7vBVhOeh08Gp@;g
zI;J5iLoU<P2l4aCt!SOsZpD8tm^HAYtd>bVQvbO0ksvs}#|+9Op&{i+*r~O*<FPhL
zj2af6GRqNz5Gcv#5%7??Sqv+h&JXGgrhLhb=}ZJt|B3ualGYK9VH9$aZ0%Uq_N!22
zmVx&}2qTY-p@Z4f;aCbC1WJ+gL`bg6NQSXLYqosot9PhW_t-byW~a&*^UCOE9Dg*5
z71C7cK4Xhgwn8#Xp=O6cbJ#s+e8Y7nbW16pH;c&SVCj}I-j2Xb{kMej1OL}~7*@$F
z{o|rcA3(tcVN%m-#S$(BFnzITk#v(Jlou~|rZ!u)atclCf`$9&G_ROm6nAGTrzxO#
zEjZ1X-2dFJY@E0MR;J!2iEV|wA(!b<VuKsvsv=_Ok&WF{F9C`rq#QBFBPNTn5kioN
z6_=5qB>h;>;5dghUVmj5#aMTGq`-{xI`XWX+LuFuR-4x5hAR3=x>7BDnoQ|OsMh56
z>I_p-Gn@p;)}`82t_9Mq1I>o}-|HRHq9BIpQMEqZ^2b%=wIYJ3)LjcxND6fG7tOE-
z%hhfKUj97$k>$cc#*d=+o-a6>m&lw@2PNr)t29C-#xz#l*gHXTj}i7y`;El!>0rN~
z46}|i*;DG9<@0lJ2*y_wOqdyFi}lb3QfOj@iXbq@ZlvpS^fK>&q1383^hpa^QZG?h
zTA(ShOdsWvk$9*G^J@s0BqQrRLQ^a$aPXSsS>X*^MzwxcW;-=+jNn<CU!xlPivMhO
z+n8^1A;-KXKC58-#|3d<*!m68m!^TyJ^s>7Rs|(t@?-SX8f-n?V=s8!p>j~s`pT%_
zIM54sQcmj;Tphzs^&vXL<i6)bgiOvmP$7`R4tD5_?TK&hGkks5x=|iU>^PXAZ`sih
zId{4gK5^z=B+`$?k|(U6&!#k0h0o_5s*@S`x3YFD6(h7d8*FC_?~@HQ0=Dxb6NF9%
zILG)bqN(3(&(=~h5Q900op5e7xSz|5Xvsz_PKkdhP7Sm8!fk+ZA(t7a#^=xyj#O7$
zp<`4CId`<);yJ3_TWC5AK_K(_u4fZZBy4|wKC^ZIzOK%Y_#an&9Tj|t@-~rYSnJO%
zdio?}TXV8;dkfDD8GN|heo5xrlgwD%#?eFvnFZk#NG>hj{<vHTB7ezrgO9+o!#4JM
zGp;aMoxeaAr%&NI-Rtc*y11abZgNZnbip&W<;1}`dE+#G&S#bGzJ&qq-Lyy;XoKh1
zTe*j#d5@?wE5TYZR|6o;*|WvZv@TF7er9)KK`+PM@0Bf9zTo`8qfP{zhY`+kw!qQp
z8PB=;;mh{R&rvz?GOU9jYBf8m;XGa2{O|$htgd#p0VW<-m0FUxXNu{jNUcMqZF(I2
zf*hPQSJ0+Tua3)yS6mb#7uyz3y@{IlJ`RsLMsNH>-8`iSG{tMr4JCs=Vz!zLY?Oku
z{_B9SHjgp>tz=m;aj3vHEkc9C3`=z-^eYqyWJfJQ{FfVvqAYk6(zpSZ)pQwgd2c6W
zStXxHHN`~XEu|)VuLNA8+uWO-Pro?)UP&BDJ&BE^P8S{Ct>-<!e?y6UoXFxOn=8oj
z>Fi_3Qv@1};pF|YP%4+UwLabzpHqa}$JKt(n`84>=7@H}XPojW{8cqjLYsEI9*G;v
z@CCj#g%4?hoEi~~gZLbbgj1z4n3OUgjIUd4JMP2Gk-C}Xa;b)x$#dJZIX<w&Imfb<
zISUOnCOt&LerHKwNz>u){!+JBg)O8ykN=p76%k-2Tyk45|J)JUQZP=)FVSn=i!T@(
zwr6199dEudo`2c2G|w`J2X;R~hP+x?%<8XCex#6a^I~;rg<=cSLFBZ`0&{~NeA^eg
znLbR6fd;hBl;LD$ChFAYR79?!K-P?c_#C#Kj=goL;z!6k?(_HxCxI&X7<xMXxO**S
z!$x5(kgQiLz6kyLGs^pR|C5Qam%Lw`>`d(OY9}Pu=MISjY``@6Py_bGlJVRSK#(8X
zr<Q(!X^AvbZPLLxE_4cP{Z*kK`H`f4XVnSDX5qMH&xQ%=o|V<>+@HQ*A$v3!TJhaF
zu*p6Sa;X07W%VA@RZpA$>gA2&^W~%$x5CqjaI1st%e{C;d%IVjm49a-F@7XE^K=iB
z5rsc?$`L6zI5Zj>S?@Vgok%F+sJqgBx#T9B`|6+tKOSp3x-cQRUX6`1GT-#1{Fr-2
z-vffmv)%T>rbl@Urv3c8!F|rbW!Eac54Ba8s3pf4cX|zp=$8UXri3TPZkxEYxt<)b
zbcaLG{FBFY%2ondzR6yew(Ty)>SnBGsdShFh;MbF!Ox@d265nZ9#8Exmi$jg^<qP#
zwIapg1c!VbwhhvvzsUOelu$ShFu?m<xp3a$?Ukp|bt2pRBoZ;dLS}7Cf)q=x`0dt>
zi*yHbw8+Ry)shN$Zd)XZ4C&9m^Im>AA&x+4K9$J$vo}SAa-#6`oEWKw(tnC}MY#*?
z2)W!9oPqpfddd;~IUhrrwB>0i|3U(76u}DNC%8_?l`$e%1nZ=#c<2Odrd?sJHeU!!
z!9s4-;{>#3V=B(=y+2B`{f9IZnS13>Tt80A5bxLalSSnt#?F{{-ve1X%92orpFwWX
zlR(OM@#8}JC*U9tvvw?&C=)YH&bW4IS($T6hLL;LI#hlBF{Q{N4ZpcZB|+6EL>^Do
zIw66K<*?Yy3T!`Yw4|y2jMS_!Q!p4&cK&Q~r@2=$hZ+HPa-q?P!zI1PETvO~!X?=_
zSyx>|v(_f8uZsY`X(UBnqI9ZDbYqrNE{7_U5gGC!O1l~&%!4vDh(l{eA0lH^C=>r9
zgJGj6*?)T@^R$t*?T7;YY%StI&oaE-cV@}Eb_e=}c78_h)jQ^<#gs5Tf-EWen`Y(h
z0!^jK&Wwf~wE>6fjy^%{T3Yh;f<%iX%33#rRR;f$JQDULY!=w3F;5#I^h7-3__V#R
zsku--4#!0@K<2(Ka^yfgnBy$Q-BZkB4Dj5G3q04uk_*-_EYfi(y?$3h#Bi~W$R)L#
zchZ^uSegt2I10rz(wFe4h`rCBCF$UufDil0f>5;CLsg3HAuN56SvffXBQDkUKUnWp
zHpv9qXOLGB+>O?D%(+F9j*DzLiqxg*W~0Up=)y@WyaJHyFN}(#1kWDTWGk5*&oOlr
zGu6W{LiX+l*!xTt#WkU^Vfux^!=8<-6Oj0QD1F^!I`;w;5AosAWipq{`bobVc^h%j
z^yz7o`@5ODZ5v2pBZ@LMxFm-4Gk?^QVyq(3w1R7rQf<t~(Ply02yx4nJ)^?woBcva
z%jMWySzns#CO}UTr+(R$dOT+rW{S&ip_Jm;JXM{xAO~-i>TPcA(T%G3@$+ugr>f@l
zlSnc@zHQyv_JG^Mpnx-U^ega|M&W2N$;aLtW>akTACclYN@kKw3SZ1Hl3^gTM?BgI
zW*pMpr$BuD)PtqSmUEi%jJl*NhTi`po=zMFd(|vy3BjOOlBgfu2itFBd~WPt%uopW
zk;G30w|J0Nc^n~#SpxW+JfX=LjH??wnw(1QQ2De)4&tYKZaG4no7%q_gBBPF!wid_
zihlz95oy?DeGCT-Z$t=8m{3^T`Iq}k55t7yZCOtY+oYr<N41-a`B$uP3L*=mS0iKy
zGDDqP0I=@=x{jFkcy%ip6+SD)lr04{=VzF@zg+4#6uGUc8x!cU(gsuI!%b39na$NC
zqoX&jcs~aCCkrWHJ9sZS&7`Ubl}kpVC65n0K^NLj2*TkdqwS~Z!iF!>+BVNP23>oM
z3(JCHr0?|IdU1CwNVW#yBB3O96&OpQ$&4cGUubJn#F%0k3Ov^EXfv#`IrN4Bh?Ix>
z5f8nhH%G53I(&3Qf25}8Df+oZVh~A5?enMl_ULd-@*u@oq7pSWRl$8OGU<L1!C|IS
z&Bwsw72dn$2%}a{vo^kGgX+qwlwO+1@g`%=pAPywZs?!8fW_2cF_YaccDpAF32B98
zUg)~@hT|I(D3%PQh8^dk>7Wpp0kLO7E}}EZEL+5mGb)sj^98k&Ga-WMcNt{su;%)8
z8<|Mz`l2Bmk-;a55+0}&ZIhkw!$qCU*76ycH(ch_B*=DzXAHlY^ZV3b3hS2#pR^VK
zpv*t;LIzk6Sq9h<{cV*#R5lWkhxs0~Y#|Nuy;nAuZOC6K*DT#g6buC5SZQK*7zz$O
zf<>FOP)uky-~9LYAFBKYIwOy)To>0-AyFcpN5QD*tQ~hl!`pEr+Z$ZuSY+058&o{<
zd26_k)=L+WbDS2i5m+l<i_Gl`^FwvJ0GL23DMq1J|HemVU!jqJQv*>WTeR|3+f6S%
zNDa}TjU&a)d9us)!%IV_1*axzI&-|&B@mk%^>%_SerKlgP!aeM8T{^Ge?-~t9JfXH
z&0QHGXHjS|m_*$&rfcq*5P-pu#jc3Z1J|iYZ|a=ks4*yLW^~ticG$JKE}jvWq>y2D
z!lrH^h$e>0J2P#ii)(bDZ}a6UMnWk)R(!t3U!Ly|Giq9V!BIbG-*x7ic;_`Ay$^z$
zapZltCKJZY{dxIKk@d5Z+Fta-Ix=g{d1Rfd9BBUihl<wwiv>ytczSCs<y;JU^4FPP
z3k~N=Ucb<{>qg~eLNi^*KsWrVD}lRRNmm0f^gUvicJW-xBP2NJ&gduSF(l39urCZU
zy1h&RA7dg>exy4Pq$u^Z^yUOQYtjU)n?uOw-;`fP{?21%3II*hZrR6U{xecKz+w0m
z^n$*Eawjp&Z_u|BReBKJmDq_ZpEK_irK&K9Sj6*bXX?X|zL?zhh}Y`hScoL`nuVZ?
z41g#H43w<E59)7ne1Bvvy*f~lBHCz~q90)>#0juYu9r#h$G?qA5%xYDTp$LH40?tp
z+WYl|!?w|K4X&a6#wF)eWgc-eswe4E))FO9$|cDN6aZ&j4J1?QW#qNV)OjBo#OOv@
z37w81MEPvcIuus3XQ6$_@jn?vAoC9%uQ>JRx|vTzyHj6ibSkgHAWwb<iQPs?xt^Xe
zjBn@3dxWtxv<{K9K!Tmyj5S=YT)-P<X<AefJoxtcl{c&z25F^S`6OCPttPNL8eHQI
zZqnj{s(d6his(*C$p;hNaBPg94&jW=(WBK<U>8asTte=BG#MO@Bba;!i{BW!K0LGN
zi$jvUqwNNA!$xMvxFaA3_*mmYa1=Q%mtP&e^InRE3Y%XclF)dpi-;7ig~7Q_)mq4&
z>`Z^a576(6mP2T`Y+P{JUFmo%Lzi*8NHwxxoLMow54c#4{0eMb?_Tb_ZGbOP@-F&x
z6IXYLV@P1*=p?Cj9B67ec=rvyFmP_@BXUThRRJmOW8`V<L7q7))utz#BXdNFclDAH
zqhvfUOWXNJ?4<=_@6Sc=4}Zm8T-a~{Y-+S=q}Qn6#JZ3ki}Z9AE~1;I)|VTZ>v5DT
zHAxnpEz;Yapc&63p9~4(o`@!!0=9?U??JUxJjrEjd8kBuh{>48W%<~KqZMnpPvf{=
zOwKnrM2-W=^?v6;wa_=7jN5*_NB;T+x;@SN?=NSJy{|AM4_o?kNN9R#rPW~*3v&I2
z%9HmAdeAj+;`NBo?4TnS!)+s&@mO<=43<Kmm}93ihw4uk-wm9l&7XpZ2&p;;urC47
z#7Bt}wGicZWr?)&?sDdorDN~J-#yaRr#ntXi!Ek7iLx(I=x$&YAD%pLcFneMcBBB4
zq7KjoDmW$hh;oh-#fQK{vu+le+yQcp#%0`hO>=%(l4!zVyzs7wX{rbHCgt}7-m)6%
z<A;|hgx|VPS@|AQf(%1Zt8@v@F~+Yt;g?cfndH~B;_ZDqpWz>s`wc}CzB@~0i|!o+
zkoUz81DEx%g`y$cc?beJ%{KFAmo*sc_omsZ3jo9F9!K$sz(*uGONH>!z11!fzaA*r
z%6Y{iU@egZpCzYOMJV1VBi?@T)}d*^c|lW!|Fu(mGeDIDL*4vk%Bi?o)H&jbjx{eg
zGThcvcH`dulrnZ?_@KyF{hRRQ%_Gv8zgS2xsQ%;Zo3da<(MiHs;#bMV3mFZUf9V`Y
z9|OV5Nzn1BCt%n%F4_<KcRYJqVv8t@C_pf=9?5u50J>b|2{6v^ITXJ9QDb8^f)kJJ
zUlyNzZjtROC*g+6OwSW<j2%noi2+yLdcttBW)xp0*Ia=6!8I1<vg2{(kz(@Xt%|3T
zV^UcZ@i{|3mfLIX$$Zz?C_LJMsM*57f++S_$>*}2cN=p-Qs26f`bNx0zDeU7_du?r
z5*N+0V+i`;uMbPITw1SO@FAgk1RB;o+yY4W>^K(njez#2<9zwE0l&+fBlG+<U8=SJ
zVub#B?q)9*T)UQn)bq}avnWO8unm3(5nk0yTi;qHyeTm6GLmcmzPD7TWmx!~^>+go
zqZ>d7TyehLPZE5R5ye+3aOX;pN_W*?0UBYhTLd5xZkTU6$*U3&ywV*=>S0H9Ytdu;
zbA@!d)LtJJBzPTWZ@0Q5VRq<Rxe*i&;yvxWktGjEqYf*3$|3owhy|8CO0QNEUFc}F
zG&h0&xCh&N+1I8d1xXzqh2RT%1b&CRz-!A4g@-e{9tswQBS0%k)EZ3`5)qFnR{jl{
z<nj(WrWSsq-7mZnFmu!j7!v4c$*D<INiJ9E-e*Mcv1olGUbZVwGLf{))Nb6VP=_Vh
zi&7&bp=2c(5xTvDB2skb?86|H<^o1H=^*H_Q~P7;0$guJRDyDMgojkq#r}fLbEBQt
zI>u`?R5{TZbUq*tlxFEB^BC3QT+gZKfs*7VAA(F?BXfw?3#RCAz4LU=o@!qkw;P|0
zr^ptE5{FX;8=p1BRy}M@hp8A1W@^`aJh~qMd>|Af;*^gH)t!vbbyb;n8Rr?Nrko?w
zR=#ykX&($CpVC;^k4_Jf*dC8#`npL*>t4S6y2{t#b(Lu&7Pr~PQZMg&S%bvq)0Ft!
z6+;Zgd&u(LVc%m=9Ft%sUFwS*L$Q6yvK5fN0SX4d`HleTX+!h;L*;k3S;0e+^V7nr
z=9A~|X%L=wZgC7V)#=TQZo|1$O<3@&H;<}DIr1)frZRt;E{C3_Vi6t8+2qED%5xMc
z;L@iy$fI*E<GLRA;@2I<t;TTH2uUwrF1Pz6C}dTx;Wz(y>yUy%rrZ14tqK}#d=1b_
z_mNb8#L;tr*$H0ES|kemEMu&0<tVkn#(%*jbo!+1>p0)LH&i6vcW!q9(NsjMy5`ug
z{&8OIk$kY~?3<Rm{?sQt!eP2F0w+B&oUeS4f1;REG<j0ENTU@dI@T}#g6Vr731v(2
zA%v*6^+md8bukWodhJ6DA6z|?7nHy^tD*sC^oIG2wQWbyRyW5JM={-KjNYq*>jTD?
z(m8zjBzF^?qGW1cHRPt+0nRXE5EPIge=@I-5cKeH*|Ac7t77XvV;F#X=u7q7{pa%S
zUc5w;*y*!%Y{ho`FtjWZjA2B#d(;^dzro^UN_I*LRqDb|>|M;X=PG<_a2$KBzB**g
zw31U|mu<TTpL~u;MCr33fj#=4PUis*Zi<_-InfkJG2&+bTC(t}h+-8~%grQ8S-}A1
zjFDE$V#_}eql?FA6F<qYNDwE4&Vr^VCnS&M9|%@+89!jK?Bv~;MT`us_5VO-ssU)%
z{v+gGPw}(Vn%HI%ex#|41^9#=kQV&uSaCN!E+7aU!R>=r5Okp^h1+412X`P%cXLhz
zo)4R-)7Y<`&lr&tW6i#tA^YsN|C*GRP)dfx-5+;rL<4ip=bFZ)zKC4=&FK1wg|YV+
z#0{n*nH=r@IGyB=>3)ZM9yUDBL@nDFF1<ID%Sm<i2O8J08xPwrS*kHX^67Q-73<dl
zf#5sbyhK!TkOGc9|5YA@-|1~dlr(~3dvFg9t%ga!xweRVuYvg~r$xGq`i{@*-*pdd
z#V<kV+WX%Pn*WU8&X{8U;yy6~k_dXVl!#(smSGELJ9%8}Q8JR`+Ofw>*)QEO^V1F8
z2c_|yAi^JPeM)MRMBsg+2%75S`faQ_jB!eQU^2Jfm=N5-zSXi$UQ;{f%WtuJqnw=1
z=R0Ga%#)jNjZ?eRh0Fq#T8mrN^cAH+)=L-&KZz2He(q(mayxM)7p%SH{d2j_X8fv1
z!+g@6crA{X!PvL=wQVe)B?$*mfKaOzezg=Zz7)i_i_UKt%@$+b5ALkWdb#<sAmezx
ze=8>dE%Hon0Ib&2PU^kLu0aGrv^<lym?8W0u#pmU6f88f6e22+q!~8CGau8#p=g^u
z0;A`>{#r8GHgArJ2kn~@wT<--=Kw<NwrTePXym-5ZhXIKrE_lplM)c2D*YLw^@Ok)
z9a<<TPe|^q-Wbbdh7GVj5k+i37e2#Cq5es$jg3it`KIHFdfv99^yb(I1XJMX+;IN=
z)qVqhKdoLDqIIteJ!!pNnjw{RiChHjr$mt(+ahDcQ$6qrRU}mMbJL2OU<xC#!1kQD
zSYM7z+S5QE7zU~nTQCz=tiGE2bt5|Z`RU$u0#E}2*k}rK2T36M9{t3?bM!&xkbxMq
zLAYm|9$9yU`DVew^pn;-mw(qQ-@gG^*ZINc*MG4t_z*e{9~rOchZH(G5k$#e9|00e
z$xMdy3Gw6T`;n?}gL<;%#zE#*)wo#t_4OEoz8w#z+1$(^IQoQJaN-GCPwB1js9Tq_
zf!D?adH=z8eFx^8IBT;r@igu+f)kXN30&?<DW$=_oHY66X_P)uY9#%NAep4@?MNh^
zGj@<6iTgxi6a*eMM%e9g$z{ca{N6z&3+t@KCU^hqmP#DutK$Tfb||(P+DjBP%x`SE
z<@XA5WtLGQa!h?Y5JdSjk32*#U>+!8Ng6=4)GxXnLKsPhq)Zs)QiMX>v+j`5!z{x3
z#->uhH#@_upTkg_vhAUD5?L<o{7nRP(IJCwa#A*)Vk+DmxFSXIq1h5_8<P)PIY9}k
ztrjCV>T>8?p1KmbF^HI5Zi=~cWg%C-chUX7N{W^ew$K6L%f(cT?G{J&P)Y>0>gK!W
zD6`f0CO()oj&Lyytu_i42G>-=46YzoY8D-9-#44Afe*2$9Zld*bqB4x5*gck{lqXU
zL5IRjoT0*y77n>W62w$mc*0W6Z=vi>hP6=pKPz>BcW7E(46{z)a_RkF(K{JN1Nkko
z&KYG7DOIUor+F~y2?lx=C-E9QW~4}6y`N&tg6<Ez`-4&5m4b28?>~kR-($>^gKb|g
z|6Iazj#bh6#@sj?S{FzHFNII}xSd!VO(!E&f;RgI)9xC7*8`%IG$xuVltmYyvyF>;
zaOJ{c*1*A-=<<1Di$y6f!$w&vQNLNS0w^Nm%o;@2#LmrY<AFDvI7&Dg#!kNTcBMhb
zy*|q#nfggn+i<LtwVkxgL!_9T(oxV6L{g#CqX&R$cJuXRzJ13ii=%#AGa^BN_dyPl
zw++F`z&Gazg&hDf*SC;z+jBK3fw#n8A4B`_9l!r<!&|xN6s@y-M%`9RRVx8;RjMtO
zYl>Ep=1MbZ1LM%FcU9ukD8!{YO({0g6_G3`t<Aas<)lxSi|-o3#9V}rA`#5{2n|G7
zRS;3GULNx(S(>1v5W~}h2TKKHQm}R=qeWt=Lu?(nir3a4=rYM{8#r<kK2hBSn%sS7
zb7~J7HSd>ANMP9={$3eCz`*=xUR@D-qDA~IQ{ub$C-G$QCsI^HZqgFwkhhR^$y`Xx
zMms@&vP_PMby9egY<SfSo9GK^q%Nc}y|Eo3DllB09~OF354FI>WW;)9j^1aCV{&Px
z!`&VcENzLrWZdNeY}5q0G9#_{CvWu;SJMsP1O={&YM*B&E|~KNWCL1I6$w_@Q)%{u
zvEC2hQw~`)loWJ-Ji{7Xbv4?;ub6McxvX2(L&DDnLtK3llw^V;w3ifxI712JMKnV)
zlOuHSXu4aSh<Fo31~u_(w=KqZRJhu;U+DQ3U+fQN&uA93V<I*ox_YiZ5l%Qwf%aiR
zb*u^3Xgir%;iVA+Uu~<k*F)fkQp7A`0u#wT0d;CLxu$@F?bH=?a##uVaQ~D}+NKa0
z>EviV13mgCu9(eiCe`)sNQ3lKW5uxrj+_;A5wqB%QDT0el#l8x8&B4&8g;z7J|rRY
zQ|RGVjOAUJMa&dzHX4Kw;n@U+!5R-l=>wEJZcdF!FA4$Pu8k#_{OQi5&0w6Z@ozXQ
z)&Q91D=tie&;N{h?c%VuESS#g*o276?~Oiry%Y5Q@iNSot4u#rf&6~^;M2jn7)eu{
zhxAIOv<RkWQW#s|u{iOKTQAP!1_HXAI--VD;@dtsxQ3yz5!khu$hUe?a<WKecDh(B
z7iB8VT@ea9_#4McXr35FNzi8V2zCfxKDgD&ELrIrBbs9u?G4fJwIx4#z}G=Hp%-A-
zz`J8wvseQWzHUL@4cDP>^rk%-5l@&u1rw6O;u4zYrkRgu3DmV?-4`Z`DmYI>Aeo^4
ztW`u8QHD^+OPW&CCEA@*s2e|x5k_Nw3fhp83Q{84LwiqsLj55oug&`Gn`ThQzSqLB
zud^-X^E$lTHi1;iGEe;m$6hy`y-5$>Vj2PZ4mxKyWJ`M#4KDNNmL#+=^oX<=`GZOH
z&O4_^SN5bjjKOf2SWZG4*qkI0R60bIhI5!NY7a3B%M;wNR^LV_Pp#r{64`afr<Xs|
zuct$a$z}W%!9E=E_<h@kNwl%1FXb3|(|ITPn{jAi144oQypzM9Xk^3+HtL0xm`5~#
zJ<clwZZC{@c0=XftSW);U5mjC$DiMrJl?!!F=_>U%?kq4PN(J)m5?YSL^iE>3F>PU
zk+;=iY?S$Ay<B3Vpz*`gjKc>4oaFe+o5}4-n_Lf`m2^FucQ1d{&-_Da(vfh^V=z;;
znn}><H<BWL^twCR&Z;4{YD=-iaT=HD%yMS*==LJ?toYocT2^Rv8t^3}9*cFyX<PR0
zwE0NlEZA<u^U)3AfSd8uLEUpRSDnm&tPqKy_d0KJ%FGNLFveyF#d^gPo|=J4!Cs)W
ze9=70vjF0@R`%i~7Vp_p8BTwk)MkfhYfz_3FEA-&R&<G8FiCC5c#1$*CDjh-GUo`3
zgUX3gX=^8Z^%Oa-`oTJBY7D(dRkmSy?Ap~VD7I4MJpQ_A;?9CE^-1}0YX;M`P3BRE
z`^?6_bq!1@GRN~evkzEfhH`yWHbm|sfJW*#vghbUiMtQGI}(hTq#9a`qes(jriyOd
zRRX1T8zKkI^A3bN&A*q2GK6&{O)I|G;7{|B80-pH$To)$GZiroIZl~BBC&Q^MnNKK
zDB8zwNVM5sblj5c3g$*7st0lWNJ@V`oRxY^_!STUc_#Ggi0iO|%5RN%lATT<+zqJK
z$VT6aE|Cw$m1aC{1p&$S)d5&4J&76B!jc|7xhbMuIITakjwBPsi0LhUU0#%%7K4m!
zt<rv)YGfaXh&pfrp~Z?sIuV228dq~%<dW&oCXOAAKRVjO5pl*Z|2sR4d5tWxg;`&V
zM4Y(w<Tor>+T(P(y5{xBr<KRigs*yb2Iw-(6b*^y$xV=GU$}!P(g|v^F}o(&EM#4~
zK$#QUryOb`W<5G?34#xNC_fqOmjpWCLfsEe00r)diRYYSct?e<_W5{EL9T&JREq!h
z*D{u-xUW~4`8Xa{F-mwwj_k(h0^K#vW+*jV`48DqmSItJy;t-^$VmOj7z1q_c!8mB
zQNG$Bk=2xY2uoIM4QUzTI#BL$jQwaoy%03*d@8TO?Z+rWXyz4>*t+?*DM@V<4u}1N
z?`5UY9}9IfiY-<`&qcJXKESRtcI;I10AC;V0@DvMj+zKnW0EpasB29&fr}<9V+{@y
zAxjr88nB#s9IvnjUaiSuw6G;mM4Ukwp=5Yod$VrwDh{B?d|!4fTIt0rR+1N91+m~X
z_9zry(=Wl;szS-EFZz*AUc?=XRjhSKt^_^a^RvHc7RonlOHba63Yf)yHxcD+n>+|-
z(I=m=;3HGlZ4<_Z*XVe>$@_`WEPI^%xOFfrkM6q+xn+#G8<{+N6(Y`~Wk!m}sKj^c
z^iEF#yV;MBE1T!}@##v<(!CqE{Oof4C>+R<Vb(Ec`lCMS*>s3O$BC$#j^B$0U%EVv
zDjRCJWd3|zfcb8>>hnQ@h&OcUjZa@n_U+kD_vK0*hKoa00}bobO`ccEYtW}`5*Vaw
ziP}iABJ|k?ZMAR@&?G&To%IkA432>=Ku|eb?=Ttxq3L}bq#-^X5rHSL!R1Njdjgw1
zbkfaWeWoX^2x~|m2A5&=wWSy2YdsBA4Ezp!w@#=;;OA)UuT8%pET&lEtuv2({>uOe
z3VBbR7p2!=;Ij5-?^cThXkIzL4Ri(~16%zn*_KJm>1R@Sapl=My}8>+;T#u8<yDtq
zwcyc5U#^ioj-KiPEwg;O`*=DgoQM{Kz9FZQksoUo@x%ehSJ7JyN%cPW6z|R9@(g2}
zJ&AaxHiDPucPqMa+;N)#JT0&h$En7N9hw~-g(Lmx@Zr|^cE%|VBb1SxYwOB}t9d||
zv8sl`hG8%Ui*Mu#up5<JXoY!vEFRZKTX$33*Ah2`W2)!xJMP}HO%T4AwaM|NX^INq
zlM=OhuDHkl5M3qPMJ1C`)*d}o(>h0vBttPZ3v#Dat9_OXZH^~&mZwqLc2xwICu_A-
zzN)tR&{~aEt68(2#@MI6n?wYLCuuvD14>uI=_276mw;bzD>^U`w<yFonpb2#A+o18
zLPys<40|w<uGw#MTBmucbh9CAwIK0Sst3KHD0i`$X3Hiw;NtA-HJtyFJ4wnZ&w_K-
z3OeSl(3ow-ruX>@mdd`o-QsMmRK7p~##`(Px(wbGPtH(5%vnu=YXgi`6Zi}C-*z6g
z^Ir$+fffYw$3tIul|e+<p_mf5F({-}OMn6e=pK1bz%co%Qr%rx^pTh-4}Qxgug-r0
zHUyVsG;2COyIGJB_%e?-e|!J)<#PZ1xEp2`K{SHEwg?jx?{mdMx&cr%jS&)2!jaK1
z0SkcxM=Q)7`MjDgjb9xCo|;*zX@FB)0`(9H8B1`yQnSd_D#Ru`Q06Z0Q?jVZCmCDG
zvH}VP8kQTP+>(6V^t=h-yMb;Jg;AWT>8I#IU$A#QYoHrEv#ar4>Nk9TgT!pnfq;dE
z)O`S~DsoN5b7jUHO0;&B&D%=*+8W79#<n|nTRxcngsIBYx?>H&;%XzLSxRZzkUq)f
zkZk}5m2)+fhd+re06Ny%Nf>S#!5}N`Z<|GrwSfvFBuGw=_p13xyhHja!xS=0TX12u
zj`2(C>LsD|C`um}u>uh3L90U|GtUa_BU2H3!nfx6pC&nho5>!_$<I}%Xo3W?*L!fu
z<RB!b1AKKwyl0h77@clis>tKN2=pP>KvQW(ulrYJ-Zgy17fe(NUI?$==TQh`;4%~9
zHK7XLmHD(hac9mEy^RZgX(HEu3W##9cP@z?cOQpa;+GXbfeS~LMI1vq5w-;1Fn_P{
z5h<nGB}x3>qNhJ497eP)9d|un+;#*>H+`>D<5I-er~&p_(3~lDCVV+!X54Y${mrr2
z!GWOnibtX_ziBgIe1zVShJK5cG=_f8{H0$p5Tut08B)sS+q)6##iOmyTzcP%JS6vF
zQDC+NTE+88O|OI3KVK}rx;nxHbovCpa7*7WPZ08Wo$A+Q;C^0uc4(@ISk2a$xeXvr
zJ2h;+C^L!!saTP0R(&OUcXP3yrS<r7w*#Z@7ctXn0}9W`YjNQScSph4fv;dw9JU$+
zJ)jts*u{q~`1kP&n027;293t2I8A`2pu2K=Lk1K8jz(_T-x#_h^=UG}l?7ZVI;Y9&
zZpK*S&m|i{(ADL#w0FLS5KNJkiqq#p3u*d;8DTID-WXfk-Bc7G|5Spuktl}YRukE-
zv<v3~&thz42aJ(F9?9B6d0NR7w>|1Ft~P=cYiD~>7-^}0xfon0Y2(3?5!s$6@*Vsa
zyq1C8@w|qBgp+-<Xql=!1`t2MCHuqUXD~(g@@E%4@6YF6bH4aR;~yS;aS_0TrBzaf
zemlj$W?*aI>p4u_)*C=iq?0evFt%ii?~&MBdHQ&r8sM_vC2u`P8aTp*cDEdGxrA@x
z&puuwnL=O11fwGmG9pLu(EmpG_wuV%{yO3>w<`a%sj=ZB=JiThba}&poH5^D>7xy;
zRtb9rK-XlqDK~M<QR~zbYKp*_OKyVIGJBAyXv8RvUMAWZA9NZ9jba}urZZ9;0CXmy
z>3l1=zg!_#kL&*;`0{7ZNrbj}-+aVIoT(}-Vs%*=Nn}wzm_rV+h*wH-%9{BtX@0CZ
zzuO@8imkEqw5M)pS^uE8vCZJF2!E6;QqaTKTz=OfcmMT}u@BX4F$AqY-+wr$y(L2z
zzQRCOucqUSJTD{VlxpfJmiZ>^JSi~#ura5|)GjriBRuK5z|?B%<Bt0Lu4uGiHYjW4
zY}|(uAv=kUv<f4kYk;HA&N7PHPLowud6Io2StymwkNP7BqFaC~BDk%$3_JMaBOGj&
zbL$S-tAi)T3Vp=Z!PI!9T#IME`9JMS-$iJ|A$&=JujAXAw>wwy*<R@o-GKWU;NkKh
zY5)lmsBSwMQe^E2i;U-;&w$Q7OSkYpk*CcKoZmqTBPSYk-OS#pPP{&^`gAbFQj`7N
zYp@mJg1<%H4@E;F&{1hr_i`G)=esh`(%HeML+}}3OlsRm5X3@udP7ben~Lt{HZZ0^
zN!f<~^5Q<|CA|LcPO6aW+%IoRseU|4RQ%ON6XK3378?B{iY96xJpEgtY$61mpMV-M
z9-c6YkpcHDJ|)4#M>wNsag`6?OQFZRQ^3GX@f?31dpT)5$;UQrh*?D!cN1AYY7D7E
zFoZJI|ELvkaqzjM$?XxplkgtqoQL{fnMFR{;frqJbs}4oM5#zYX+yDu1Lc0qu8;uE
zoCS(ZAVuqxlqHk{-uHXcNAd|-*w_nvPJb*|MZ^4xH4i|J*sXOyx8xI&`n;}?+mPY*
z9;X})oWaF0>~VQ{@fm*&-4_R4mqysLR?ec14m;9hu3#H8Hfp2eDpVQlG38umn?=G+
z&2C-S>v@%Q30NN_)TZ*vR7FW86$YOmx$IUp{y;vzl5$_F*tL#oTnm13eK_q<ZREYc
zePLMFaYaQJFlPF2;N2m4Wf4|imxR{j$gaU%swau$n=GE51VftrH7Vnb{U@9c-%Wz<
zQQMoIAP*8g6;Nk0Q_S5r1(%b#Z-ZsY+$^W$q@dDLx`t*EWuq<M3b<r!*%dn`8M(cd
zDjc@P-klmKAUSGEK#Fa~4^4pc>|gwD6RwL)jf$|X4!dBo8SQVRbchA8!NVzM{n$T+
zXfkZEAaSI1h1l#K<`h&}N_9)MpoE9%Nx&Y-DQAQzpq@ODs1|OUoIWw2+smv$1MgYJ
zAb=T4<X|^BNkEIC!^H$w(TyhRxDs$7jYUDhGa0-+BKM861Nzs!07}Q0P`4frzCUsb
zP)1LxZ3g;5RTFQn)w8=|$rR28REwlUxSW%fgHASbdobZGQ|1Xf<4%i2A0`to_Znyi
z*@jKs)G+UpZDM@Aa$L$cB1O{McyJW)Xyk90)^OIeb&OsPGdE=ePDY{mxS)c((aNS}
zzcM3&3c!0F*DpGwR_t0Lm$FO3RnYUarNO{UkK+l`@)y{6$LG$Oy(tA4OFYY#*eGKC
zOb`-=5vDl`@soF#lnFwi{hxi`(5a*_Yx0R_3twbdWIp4jbY#&{*jR%7<=<k3-~2*v
zT^{a$^%RpHyn3+g;oTUGf;5E2G0aCg^`&{(+9*lfZD4NvX^_uq>u%LBU%ZJCNrB>e
z%nCYu8+&l+?J>p)QcUO|?OTA<B#fkr$;2>D#s+>yyO1lpI}t~~c3sOwtGeRB6n{KU
zR8+G7AP_fR3a%(|LPG=@W!;e>Yf{ti0`aP#Qr-@IY4!;z%lOn^YRnZ666m{BfFzYd
zB&HN0Q7aZJos_%8==I(yAowFuV&-g9$)}r|EPiBAp;&i~B^**Q>qaEQN>e>P3T8W0
zf)dbd?IeY;_2t<vzPOR^@zar_CixgfS0vup=I%DPnI5ol&g+hoR?fE;MiaBZA0!ZI
zGctKNF+gCW9ZK^;f-+>yG6WC#=-wfWvxhs*PA;iT2k{O6Z8W<}-y)Dj7QAgm_uiQ;
z7OcD7U=bVV4T42f_SH#aY(!qScP9wm-Ie8XBL1|~EImFZ7qJX8=-RL8Mk9HtM6+g6
zJyP9fh1-zyloa&k6oS6|xC&8+)~y8I9;eG+g!|c*V_L}g?7el`9HED03?(g9<IIWw
z;dTp@7IIvgHFfT6d^xE00kJlFqinaT>40a!@vFxrfO2-m6M#w|;ATnqT3##9^mBAP
zf?*qkSa9h!=9cL-+$MbHl)wx7WPkv&t0VguGcLB4ts7T(p@DozwyB-b_6D1i=<XP1
ztK)8yb?KA0tb|pP`vfC)X!tlv#jWU+seK_3v#ocXbYGL(m}0SPat)>H?dg~}z2te5
z`vlD`+;r4qH|YA*1jFn}@0&vB&*v}FOiBRMy95|q!|RWE9LD1#Jk)+G2mZ83{@1x5
zJ5n3;(*8KiVzAWU;J9$5?gh3TQ1`LVRi@25-`-7~yjv*-^Yn7RIf@l2S_z;EEOLXU
z6Q@obiz)Exu#WdRO)e}g90Tt7ql|Q~q;Rf>*YGfV^`{2`<L`rJ8bWzVCs(I|w+Hx@
zuGS*u3F%mTq|x>f-}r921<(PHR{TbYt<70&=F1$dcyUL%>{Q5rYxe3eyHcNe`!7m`
z%-ZZ)7|#QEUvep6Kf;YatIf3H%i8c!g!nIhH^{gLaLnQ0>qWYK#@+W@mSfKHO!Sy&
zg!o8V=${gE+1e#<(S*K?U4M7&W+E1k#P>b{pX|Cc=isL}f83$@e6bhK6zi4wbDix&
z3f6ro(C;)3%-}>*#KruFnFrBX@+QvV#xf!r%${AXAB4H$Hb@Yut=D<B)n(V&_m*&v
zx;e)|Hb*&{V_W8laQ^FuDsdROVql@Vyo5gmOe#=_JqRF|sGl6;|0I{bsxWpm9N3Yo
z6NhT+YEBbN1@ltQv2U@@5ta~chuSiwtz)(a`E1rFhWRS{%0B~za~9bnjOXmD^%gk~
zRff0cw^WjhVQeY+qa)1enU#A<WD0tGQmk2XCwg%kHGJTx6YX)VEfm-!6%Z&Lvp#1|
zXBp3~KV_kwP<s5m>)u>*Mu1hC%MeHuw~=O~1r<T&;hoQtq7I`&X9~Sc3WF$>imbIS
zJJ~B3j$U_xz4;2>gi0`7A0HT1K&bfPY9sNKa%+*=MxFEZHc~&<U17@O$(xSVVNp0~
zu<-e1sk;<!?Ga?$Ff~QzZ$$SF&Of{D9~F@mhLCJZ$=Jb22cN3!Qip2-G+ILSY(9a=
z7%e$bOFVEingserJqpEU-YB~qLTyTaeb7x^?!&{k70%%`sSzJ;swwp0TJb>&3Qdy^
zX$b|x><ylPs(1laSU?sYw$-R8W|#9bw8L~FK9^jifJ;BK<MiQ*$9C3>(qkforgus>
zbo24V-{hW~0=Tf!)!0QFE4DrcHJu<yb#Iq2sIF;l9h%;JRjLUX@zRx^Tgb2}zCXi!
zb6UvY9xLt)&fGL~8#c|+WsPGLB<RWL^dx(=R|`QC*#0=ovT>{R)uDuS-da8I8dIsx
zib<So-@_(1%ef6{9OVSlD`#$N36^~|=EG1L1LgeReT37Jc?X%GtiKK-R>lW73MPtv
z(A-fH(|c-i@-3^_U)^yjqm2tr-nULo=ZB)fmnt$h;vYK+UdB~S<iso<L3I0u>8^25
z&^=E<Y`IZp(@~g|d?|yPP~DFVt*TU|=KC`{N$47sE!4tyU#-_VlCo1!@?*oL?ZU@0
z%4NPX-m%3p>c{O^J|`+tM=5ybA;zugYVlmLsMi14r%8->v=@DqT(*1(j|89*%-TFI
zWWLvE9oC}iF(lhX(~=7FTycYJ0V8s+MLwxzFO2HL$5s%S73zg|n|G*zks*HXC<I9F
zY6LxH5=aL1m#HRz9tJ=qzJuoF9#vjs<M(kM!ma9^6IXSZT^+5-zbY?&qi+`8dWe_|
z{xoRXHXXb9cY{J153Goav6G<l=fBRB3<ygjjVO(~NGZot##d^BklX$n(0%lB{PQKs
zwrDUfae<<{2--f)b2QQfR|>y^tBUp;`<25vj}OdE>%FmBUArLPK~RCJF-G(Ob}iC9
zqMlRE>zl(ba;BchYZV$Gi<s7o;=ZBdAlCbn@!1~Gz0w4_yz>)c_1Bo5N>$<OFUA*m
z1GCZ?Qt2hw_+ne1*HzDf6+q)kJfn`C&tK`gAq!xcI`zr(@p}yOiIxtTV9L@EX7_Gf
zhx3Ngz#VQ2olQvcCk{Gsti7vjYkS$U`DOzlE^oa0z7w!FZobwr|FXb;9VciaCeh9m
zIC3nbFu3o4<?&}@8UUy>RDp(#u~K52`9CM*I$8{xAu%VOke}$@gCBTR&pU+<?+=Ar
zi#W9fxb1;xp6E|1r>UOk4Cbj4<=cz>>)Er51*gOVNL3j8&;mTBK&Fv(rj=<30u`Av
zGD~x18*|@Q9`<#)hD6MOwyjzGO+~4|W@GS|6hHWQ0r~BS5M9MV99@_9NAk4(7+j2;
zE?h$-=vd(m(kV!AzJ2l)#?BrjR@TUpd1VP)De`-a*dX$cT`A&KOqN9{WXOc2+;QRT
zb$5KkD%=90Hv0Cm2^}Zz83C(bD?m@7m2b;ND$LV!*@<z`5ewDju8pq`Rj!QMue9!h
zV^s>*NYegxN=N`DJ_Vk6j=!3{GGG+cq>9@fu<q%`MGBWdFDMiWc0f&T(%+%cOA7o*
zNJylSur)pK7VT&~m?}BcF1p%91ul1V6d$#$6waNAOW5l$?eo<G+olJN9`V|Uj6&Hr
z)O(&kMZ`hpe%i<uMM$|S;rT(SSy%9lfL6$s6qSv@&Umrw`65;_T$C=-`-Hu?PKs0@
zRUxwkGArR;<KHVy*U`SPN*kJ!a2grszFvg_GSsiGAQzzc!{sMp*L&jVprwTpHK2%v
zCcHO6naIa6o>G_Y#$*>?VnjIece`*IJYe9Rt{MJL_lJR(?pcT}d$<HnJ_0H2Ao$?O
zc7L|kB6-WlU5FJmE)?<>=;tE{Q%s)#Vggg3Eg+?<guO3-5Nd||opbN9dNOi!YU50q
zA2Gg5#pO9qq1SkKeqzo{O0iBwUB}QAzCeH@#0~=s@yOfy_}*1;_l&_t?{&CGP2<$~
z-X(Uj!=|y$fx00z<BjL@Ej<IK5iO2L;&-kr-zBmdp51k+cB^b+89RIt<keH$VEZxp
z*@cYDb#=CO!-tmXa7fCPR;@pQ6eyAeoH93FtvwNiPFJCla)hc1X*oL=TK|)Qu>E2n
zM?du6{*IMNU)pHZ%9AL*dyt(@>zI(TyZ7XYLxBFCnzc(F!=U@~H~RMUSkmQC0YQzO
zw(232zaVbXmnNVhe7dmd#PvH_0ctSSmnW(}$LthtvI&?);>P$SXemeDo4(kr?k@Oq
zS7BY*15<A@Du?{{`+)vn_9tUHC$oH&`H>1%sdMY<XA$WMe^X!vS^x-aioy*49rdxU
zE)b#n>Aqju)^-(qBWX129;we<SY0T8-}WoSR~hI+H9ibJ{%dHUb@M$$tQ(R}GF7A=
zkYInq<oogtqeA0PU>Cv<&Wqxw{bu-AYtpZy5i&=W<niWpV(KXle|&1jxz=z*dL5wz
z=kITS^bYuP*Y8%$k^eqQSQ(dad~TVk8R4#kgDE4=_djZEXI~O#h5Vj)I_wZ@D}_G8
z-}4EKb!0@TruwO<O`@TK3HMp5n|{9gi?M$sI&GCNsTtZ2Piy>t5B_)O@UIU_dncCq
zk=8cwk4W~r3E}q`VlRIci4X3Z{QkEO$N`KqJ52*{|Cq7g?*_i1+R`t9>D6PU@oy~r
zdy)SC;fjAP)D1I-`2RA17B8>`e=Y}o_{T#2)lmCO-4NUP)jk&(tMoV6{?7rXfi<mb
zy<GYEzkNeLV0RU-P+<RKG5%wKf2ZKzU6Aze6#Tz31*d`^A2mx=ic@yJmU<McmNr}a
z1GhK%TB5AjAWhq3{NJO*kff=`{*|33?Tkug<+~RKnwqg=oK}9LY4h`g4cPXy(<(W}
zx6iOgRB}0Ly-41jSc+V7sP|;Qa_rC^SI*+0CR3o+xoK!<pp;D@5%k&v?g#R#86i>h
zfsbLUCmNgG^uj=S%=EuU;X38K-ZMO9`z&P_4bEbf)~xv=FZa{8^rNLJ`ljDrQM$C*
zhS-q@8GjAabmX?kn)y~=mC0q@NIKph0o)nl_=k4M*qQ>)$dA$M{qJ$ayazy8@o=%l
zBa6ogPtP*hYk$7MY2jj35{-=0S}7Kfd4gRyS}%I+Z{+ijU`U4_GN|lepQYr;5um@H
z_I4-L_oC7I<{Q0*D7o+P^;hQ>=PvFb6ZbtqZthgR;Xb<tdgK?qX57*v?)Oq#d|5P{
z`UwV&_S4U=vFKB=-weFv_ip(Di!Aj?s(++*ls{op;=g7A;O-E?oEcy3OSp554HRAc
z>g<%?#$^du^%%`G-T90l=osGgtlf58img~9tK^(r-)h?9Wq!y^>+!8iftnGSq{6Vu
ziuLs%k!lUMVWf^h2U7_x?SbAAXd@qlaHE>=+vb0t`4yp%5^hb05}ps4`hvy2qu)wW
zv!;)nM@kx$7wV0+A>;i`P67eNyvC1Lxm&D@j)n`BpJw8!GnY@YRP!ClfO%{r&FuDf
zhfk#)qBO?~wO({1<D{V32w&unOg5zXpXnAzm~6aAN-kZcS*6^W0?!ERO7updG~CQ3
zs*ddI`$&iJCbpgBx!;rwDn>t6%C-qOuBLvq*H?04=hdW-caa{Ma_pT^EYhoMm23zX
zy9R9a$9FzJS0zwQeF^CEr#RO@J*cyR4=6gAx9b1bjJ%pft0wr_y6+WB);F%o%&7`%
zfh~>|U%SP9Ugl~0<R92H4ff0KSM_gqh`sbYR>%`w+E;siCSCex-(@|%8^ul(;u&)r
zZrj6pc6!choXcgW!LgP^v*EuMnU0xDolE=5@;`3#@>i~AGk~K}b(x2KmU^1OjcxBx
z^37jh?Yxuxti?({Yo~!bw*D<&mGutwJo#l%E_3akgo*!h{an}A-S)FPQkQA)^jIIw
z4_9+HDfV$I%Ew9F(I<Th<QZ;1*sHTFg_^>}zjdRS_xV)SLSs(NYckBk(p{s+nCq_c
zCt16u=eTX@G6-bf?afrL(9`B>WYh>@*?iUw?;H_`7TMJvM9s=b4iexz&2)3@OC-+?
zv>lnxp>rGN#`Ji{W(JGA6G<F^^6;S#>mrs~8us<IR%^^@PrREtEV)0c7wsn#y8n-^
zw+gGX+p=|WcXyk(y9al75AG1$-Q8V-gdoA)-Q6va-~<T4UC)<YyQ<D!>t9#g&F5jx
zA$|1L+S|v%HzM*Weif(Awb4s8d}~;v(1eK%n9|X7G#M;(PPdC|A5m821xb>k;^8_l
zWb(LuPF|a1SupbsGB3en=?XVQhufnt{jg`+rK6Tqn`v9mTD1NJPlZ4|T^45;Cm(C~
zf0Jha^L5t3DcG>pukXuFQ?Fj7Uxk+{I|`kIDnAR>9f?iTaM$JwIln+);yARA<LqVF
zEV`ZCluqN;RG@gzre+zv5rE#ECC9eu>=T#|b?ue7u1f9z+)f;^3p@;Gsr69=9!Ks5
zp3|i3CVn6w&#SEKwb-xMd=!w<neiM%SE(E4mDibsTeW6;kYGJ{P2XG?4RVUx4%1J=
zb->T_W#URfC0C;(PWzHQJk7gIrQfDH!+4rqd>QVhQphkLETw8c*pW3rrV2s-xIaaw
zlVXL=nay*<(TJYZU^F$t*N&dR@b=q6^OQ^esF9wkF@wI%QnQOK{BImE)NzQ1fM72i
zM-L7^&B>{62Vh;aJe^cF(mO;eF=2hy;iVfmuu^FU9l1TgV+uAVtymjq4dc<Q(O5A?
z6Gr0C>OIAcGCg9c>#+YUfA=YZL`LPz*l!s_77osv<5i$R0ur9#@M)TxDN<7lMTu51
zrkXpER7jTa+7sr95AvB?gpEiz%fZa#F-i{q>v{Q~jedw7EX!4$!&QyX<F7Yq!)2uK
zdh_Z!Tkv4}uBAT8!dBfPyBMzjsrLu_4`0RX9%IE=tryg7o90wIyPjuhHf*-u7cQI$
zxDzQTT=V2e(twANTnCAd{KoH)0F;GT0a5k<P+bE7$Vp@(UeC<;-}c?ND^Vau38<YI
z=1>C{*y>qgQvZi}`pTLHz>)q3&`>9tI~hreCkuNddrY8^5wl%@+>J6lZI+u#RUHwV
z=@3)v&#M`M^B3b@Qv0TPsdNIxxZX=Uxu}g0SylHzr~2p~se*_|-8ByRK_nFsahqc7
zD+BR&<T4$&NVviWd|oFq4D7iR)7d0kLjLSwnUu$u>)B5C-x0qkTpM;X!cQTzr(*P<
zRM%NYPJeiAS>(z@iw1B|j_`K!nU5s_0U3|Ax*d+#1bpZ5yodt8O}|mOYG^i^pcu?M
zqz^n|fdp!<dCWIwnXg%rwL{8RJGkkheKU--du$1DGkOT-*u=%GxePV5srn<)!^ZXK
z3d!*D1jxx69N4YLn9z~K=TN9|sluU*MQSdVNkThWG2rvDB5qk02z%B~<{|nMCf{iJ
zxZ9~YMH}g|=Ese?y_C|REVx^B|9`>y|Jib=@J_{615GxF%bbrT$4kS80blRtM{#Yh
zhKE+FZG}mGxV3BQoj0C0E%R6lwOfiU+DxDHym3@}?^(qknm}*)SxZj6v&OTAbtD%7
zmBGV#VDCeQzQaeic}YMx)0CJJ8x{5Q-VTNZ0uH=TRe)Kbn6tWW0AY;wh^%UOw&3lh
zY^&hO_i2m*SOda{qya}o%(<Uh`kx5NG9(#H(8!O0^l;nG2;t9w=Rf(K=bL~GZ2h4f
zg;eMzO<lSD@Wc*Hm$x+vBj!6-t9ypX18N%nH=Iz8*xXAzEX(oU1=)G4lZvv>#TVS4
zz6UX!V2^%8ME_Q&02@soiO&`U86O1&0XK>Vi$bvWeE1Xi>_Z&ik=Q?#zpN}<d8d{f
z1D`j(W*X+u+B1i?i5bZ=A}yF8yiZXSutgD#B<`R2o&`J<MdDLN(uP(^=1cfUvFGY;
z#_fTVajI-z*9e?bfS(LQ`cA7(pWnZ{Nf81`@sxhT-fU!^%_NaWpam_5=PGZ8L*v!A
zGsSC6`U9<wv4q({HsZ2GgE3Coo?d=CgH~6E&+sNYCbDio*2yACjG|~IHe6Y%t|S>l
zn-SlfZ_inhW(KIw9s$?ap_AJk^fPaX-%~QzF&d`;G@9{M0l4W1FK9dr1uBJPWSr9S
zA4<jR7?IeVdM>W&$HLh#&(HX`t=G7A>!+czzy)q-Y(F`iand2V$hAty(QK)TLcgq(
z&7YqtC0PFSL;Jrrw-mqVa8y&UPe{k*!=5s0g4fMBO#y32)&LV?lAsDV$j@mzVRS^5
z5C4}4)g%CS^B+03a*E9h!x4vVZT<OF+j-t&HH@wO@(4sK7D0hAD&bTFIBKie@1E53
zByyX;%8B|M!W}7hyBo{$+2@2#rkt_NB&c$wTK|{F*++Ga9bp&E?taq@6g6}vod{&Y
zh>jsLP4kikc7OAppRG4%?{0yDkQs8I4(E-ztmL><FqC5&1AhC_xgzmcra{*)B$loh
zLzv3@gVOe#u#QE<OZL_pOxs`RcVmp8<KyMu2T_I1?=eHfiuKfla^;2jW*NaxQ#sIB
z&j9DdvMRx_RLdSOP4>(6w?H+}UKX&ruR3pz>UR+suIz^Rn1bQZ+4sk5qjdGYIFHA_
zw3`O8X(O03iDKsKP-c9)4jqj^`6-h^H}!OL918QJJWy@mGumZ#xH*Xh&L_{zj~>yO
zNUWtb9qjZdmZszQRx<^M>0gS1m0c|1kCA;m=JNf|B!sBJaoAH1=z{wh$zexyqc+!V
z;+0;)sRFq(A?FQtA}mzq$d%bu`=P@B*E02gPk;##<B28N=_IP$C54Woh56a7PPc0+
zy(ZfqZYOQu|J>WwKRa+O;%;wDtJ{w7<QfW?$bDiM`o@yDpH6<?o*qhZ7&s<HyCXD!
z;DaLuzW|?u$m9Wda_6mxG!fhP7nOw%Y<8#EuK<xTAISZ~F_atAf>dqW7SJpVfwtS1
z01vERJj%~oi#j0@A%GXE%b)v@L&<`<_vMOKXcma%T#k}%wK{H%u@O3UT_#HtMVDw=
zGsE*_)=(z?g5xg~p`|o|DwG;b_ST@RQN9oCIPdlsemVjvbx%)`v?_E1R6;i$2ptF2
zG_)mx+gY;4q!LX6k<z(ygvS(7j2h182_SQ&VCegYi<2b-cU(me9gD+Zr(pe5zNyh%
zhDmZfi>Y}@jiI^;LyrcLa5~rs{Vr@|CkPx8fpElG;LB#k3q)|X5l9<jd+2Pg$k9xs
zZOuGGWOLz{cH~8jv9`IPmr^9DNtu#+49V4R0=ueyGJH#>UVbQDgJj51iK6*Yrm%JO
zyC|ZIz{P1EARk};`PXIylKh(P%9Wd7ARWJ(b?*)PqzawQ9=ImD_L^}Va+{7kW6jIM
zWBqM+?fEFFzr@#}Vv3YtY?w7^p@7?E?Rjy`WM?F6uMrxiJp%xA_9as2@&Qw$e)DS5
zc|U`w<9x{<U@!H>HG7r%3k3GY+?@XRUGTq6HcPp}<6X?06-HL;i~Uhj$5!j>dzyfi
zfL(|J#uc~a?tmBBXKdRtrM<u!<xfJ*mM%<I`@nNj0U#pMO`LB+@uT?2rKQ0!5Y@+Z
z4On@v=(#e{OC4?#q=%(ik8vKG6*y<Szmf+2LZk9QxSAd>%bPMggcHwe@H;rr23$iz
zBdQ92J(;Wep52DsKJ_vBTIf-b*63{WDN2Hup1|sw^to9(0Jf|i5W_=HDc-KLJ>y!U
z+TA71KbjvUIfzdc-y(>~noRDK3LSt7hW9x#T^aygSU2cI$PQAinX{IwHn-)6hm12i
zZ6o~wLd@BNDVr4X!I=Sb*a)~I=>%F3(@!xUazm8&ITi}h9vUe_D?;obBwZxa^*w*M
z>qa@Jv1C9Zb9@7314gHk)z96)mB)AYftBzui0X>SQLFnkVPk%;JRIH6WtirQiWGW4
zxV4HYC5%aEFWyOqU9$2f5V)13cB_c0P8~acw7mEvOM9NT3s9mXJbpxnLncVZDtOU~
z7E@i4NAdcCz&MVHGB4}8-?H$jTPTASicUM=FERlI^b(<pA$s$^CV<LX`K|J`!1Xy_
z$}uJeBb^K(rkH}Z7(;-2s7AHkFJo=E9M2d2&hSgUiAsO@nuz@x;aYr@TrH%!qwxDy
zerDdLFb5e5q}s|`O1}G@p>O(q-t&jquBz@<G7E{yi;y^wOR%BDq3@SE?Y;%vLz%Fn
z#-t=23Kqd9ry?>|Y(6%>yLBryDaA?W%Ykc_I{gBk=5@>5dYt0aC9K5Th#+!fI6R1d
z`O|kE7xc@#=gDb4)H6IM(nT}aOV>}!ovh;r$qaSws0$rUQW?a6VHbUBoHLQ-oAYJC
zTCeLG!(z9lDYF!=Eo2RpE#w5`1k8f@Rbpz9o^`ce^X_-+OGd%sL4qSZDKZr@ISpOv
z!-EQRWj4e}h(BI$-oM1XY{*Mct&C7Q-S8Umyn&*VoK08E2G8BZN$NstPPR@DU{3tW
zVq=NU!FM|<+;HedhVJU)q-z;Qug!ZW_dH^vT^c0~v>yob+^LSrz&avylPN8JFU%_u
zpCzjn^)Cnx87E*h2D`~XeOS1e4-5Vd(46kpeMz|?#El>b9{OCtSvE1*LMcUeH5|)C
z)saz(Sz1s6&}>l=^BUp5>k!_a(rR8LquW04KO}{!l4YIgyIY}gDbmpiAN;MI6xQI7
z`7O}OO8TS+>^@wEVd8@$2vG`RjI^ze{s`Q9r57`g@hj4*$WKEgHTgRArOWySfM0CS
zlP;xgnFXs!TiTp=y`s<s37db-K;v%rd$Q@7NJ)FdrsZM_Vg$FnGM(emF(L!G>BxIc
zrO<6fK%HJEgC^TnOjGfahS5PmNFNZ7*+S?HI3^R7E?E;qF5m$ChaJF$<rmz=RV?+&
zy*LKCF#`=5#;}cR5~-R{BH)aFUIF#$e)HO6-2!(`3f9818vkFH!hfxgUKR-a+HZ%+
z8yrU6YK9tmM2?H4f?Re5`R`8q!^ee$%3<`NaUE8Y8h6OcVtZzEBr4*>*8@9m4vgzS
z7Q6&;H+XSYi&SdGkmI1$APrMH*3ca6*CCKPMLJ$^RIs@BQ+C-7g=CJ?2*oC5RSaG+
zz}_tIooPSsem(<arn!<CXMo9zb<;mlAD(BcIF^6^GthDANEP(XrDl(qwtmrz8reUT
zX-y1Auy6FKeBMv#lg*PHtRhw#7N{;`lX~bAUs`wy90*OvJcgiQ_5<56T%`^}DXIy4
z;_K5bCLeTVIJIsl24X)BJEA{54l1!5E%*3Gc=k4lK}0DLjI`~CEKNN5a;}{{;I@qC
z$~${3`{12BR3-frOFHMo*?TkjmVN03cS2HGzC4(ltE}7eRPhXN2O!xB7fZ))g6r~f
z$eZOQ1*Od*QEvHNE5i8aQ!!qTG1}AR9Mx4AZGBs!yza0753bb?@b)~a3qyxOw$*$k
z`KB7$lhcC<Gi*$e6xFLj3ZKZHK;}O@D1ZLLcQhOk_flq!7Lpi(e`qjrzU8C-TXt|3
zcyJ>Do^<MGQh@4%Cy}b05J(=hPDy{{c!Lc_vpkc<b`2OAPqun{4Ve-2sKTj8xU9SX
z=>!NOpQD6pqw`GG*T;e1#~_aySE->+iLd+3dNnBE+Vjw1(ZNZ=lAuvaKe(glv9V#Z
z%G^81LqO}iYp}mJ+{H^}?yz);QxLL7NnYI|6*u&<Rk_0vL{!8ErG0e<>`)e3j?H5I
z02V$Z#8Y@s`6ca)jD4)KOuWyXu8as)+b`G<HQSrrAI9M@q#k&HV+~D~H1LWo+{=j*
zC@tym@G^YQ+qI$4o_v9y!mhTx1<10|Vk*30zMi`?#8r8z%iOe$2;CqvuW<)Vu}Swn
z9_mlTn#&?X#Kz9=s8!f~k#gMbd#(I-b&xtl=F!k^TsP+)TO&>EjYasio=jsnau-Vq
zo&w$juLY%7=*v<e-GK4tuk<<X3uJnpWwM~7hSE~@wik~vlyf2-_y==j-Xyo~mfw=Q
zc&dqHa}Polc?Vq@KjC<dymrF<#Qf-si3#2G3=|%1LqewcTn~eoJj^kT1Z~M3TdZb3
z0}WFqmRVAix)Z_z1blQ1g?p1wRPjP|!tRiHD=;meeP6S%Zwft}<Q#qvPEtvt;(`J&
z6?1vKHoJ|pg3kb;2%H^MGNt{&evNg)k`KIaM)_y>`|=}+_6NAbc{EliByjP*|L2c!
zwKN&FhaAME8}hwy<gRWRwGNgu##u@9mf)4j@9=Di>nLsAGcBoDR6(+?A1E)Ega)_{
z7rGPrJQ%KQtbVY&v^$L3ENfu$?v$LclzSc<4v`p*7Y+vGuRrd$L`4HG-k$UH#(3RO
zB`_c=-Hs8&-hVu)`@l<vKxbj8dR@?Up0{+Ks)M*q2Es5Cghk^>_@Vj~4+O=w>;Yr1
zwvj(FB|)f@T3cTag@koVg!E}S4VU>T09bUd?Rg@Yr{I9_^jO=8{L?wxqd|rt$nz5C
zZ8ODZRq%zZ$PQjJO!YOX4!&KALZSad5uIp{PPpBr1e{NmV;Fkr5XBCbqWK5z^3AZ&
zzL`!)1W^e*s6NEyPHQpgTg9E&elcnLOfAuxQiM!23<*}ylb}P-qh-M`gT}SRQc(Vq
z7hPTuu#y}D-qwHZ%j|8+w>XIB6^r%$eEKc^{?T>1`R%({Q2=FlBLg!gCAmptVv>H!
z0}YhvivC<%0d*qfS5$=n{3227tMV;l6G06Fm#?#ss6tL#-S=$r2@g+zKZ{PJXXlB~
zsVp;rC2Sy^n(&`bW5ooKfr_Y=kuUY8G?`A_#-9@|ZE1vk%+_g)cqLEU-E7&%S1uF2
z(i9l{Ny~6D@qTkWaBsqoZhsh#O$#Q&#D}T{4+kF&X7wMr(Rb)RxOLtGIO#L(VfN7$
zL|joAIA6emAqJtTpst~1N2A8%U@VZi;904OY9DV`jm&m33$9_I#Zo+U96$JtgCLeO
zSB(Nc<mT)s(3uU9B}i;BCN$H%Nkhe}iBNY1zCUl}^;W19S+st)tpqr|DY5g>!D$uw
z`zaJ&%kexvbxKMKzAp@zpbBkb(uIb)4RP*h*rgNvOg9eo@PlY_^1y!zw`HJ+6~7@S
zN3$ZYZ=)E=?9NC;8*(bkk*l|fJHoW6W+4;*GcS+X)b9PFy@mL6WE=*u0dU*k8$NrM
zc=q$c$l?Tpk^OGJfqC7kzm)G6=tryj84@CjLml_LmF{+AlY=evh8x@0s+j&8fQZa0
zCz8yWCxNi;HavSFQ3aDm#gHCNOyj{yEdSF<83vaIv)e91Mtrd;!kFul(_iTKrg}75
z8`6Fw)=IChrom4|K;UCg)nrDGTk<fbADP|d&U^d*9vjM6+=ON*ZjVxhCIPdLB2Y!z
z_73jDT|AK9XDyOYc<P#frq39>7nBorib*4ejfb$SbrBku5GMRqkC-#|eK$t>>~@42
zgeQuLNHjbKQV$FEhw%<e5bfi-isA9f7L$V;z?#5#Ml#K-ZU#v1g<zNqk<!E_<By?0
z27xXyMhl;b2}6<@DhQn`E*6QtBn)ibs*r&5!0f0|#*1dGbf8GIi~x(^Ef#dDxt(@8
zrr`(<UIw+7cr>4g&n2Zp;jujGjb96+l!OWojlSsT%ZX%)Ai(KTVg*GEW7E?qW)dxf
zP?jS>4b$z+w_w$$ES|k9w)a#{$-o7{?5F5wENIJzKaWK+P*Ilmw47<=5{<J(&wsOt
zwN+~*e0TUI(Lz+!x>{C^1N1NT>3<iki9wyLX?CB#U8n`y+t{pC1e{NMD+{GnSLxv)
z4dsTX#M<)k9a*3EiDsME(2}@)gH(#{b<4-B>axCMhy)MjEQ!1g!n9c|jpwcx^LPRF
zA8Qt?#0AKS0gVV?5N|&SUNV-C54}KNlM5xO7W&M;rwuh8p>x-H$Ks^a15tcQ3d0DJ
zRV1}jZ=l8&em-rSvQ5I1SS-J1sx1s+xs;&10>rVv$Ae5>3NM)&yPEb0ez{Gy5L_%Q
zCJEHzC`L1)whSD|WR6(>G4|sqBn$@n-nhL45@~t6t4VsObx~LB3%Rzz*o9FRh{OP-
z7;}poF{y-oV!T`UWUnIWW7e-!XnqSfTS`R@EUD1)I+e8vJe9a%&ZigrN0$t%<xGFN
zA7Hdog6s%JZo`ktM5mB2gcAqCc*mo%Y^D~j$LRZuOTq{dbtOR-RFdP@^U|b){)!9I
zJ3v+Vixh88Rn3Kb-REB}kN<m>7=I;8a^FeWb*Kyf9Zrus?Pnr!x53hFz)Qj)N8P2;
zpnG(KIoO^N%_}h8-hS|I2BRe>SXr+MV#Dnv$`V*Z#;#CJk)=BT4EqSUbTDDgcgvr7
z_lJHJ1d=qIA7mN{U6q5#RdgV1D1JhPBvKQ|oJPY5jG?z-!=b|$M-C-Mxdy{X7Bq)J
zpob!T@_D%&-2zZGdczMGn?{QPs!)HqO=5Ms&@jK|`XkQ(l9P*E7}5eJc7<pXoi3YE
zUqhS>Kw89qtU?3rmf*qiR}XhiXcKZ$^;U@`g|KjzZ)t?~;2MH|N^c**4I0Y_!&253
zW}zs#<kuM(9jx4Ozc_-_4}=HN&gsyyv~73G&-{AaTG{@t$tRQ4wg?*y2KN+`){sOO
zCoPO7d@qJH9<7UG8a9&FVD4QY<nMF0DOJE0N+dVwXtX5A425Oevo4nSAJ6(A5sp!J
z3MI*}_m_mdo2;C-!=38}ikryLjpI4yvWH3H>N^bzV|20t%_z9K`}dPIjngfu@8`>d
zDI!*V7Ils}^8mVgz}fHp^?nS?(&K0jyhGX#_7sN4?h8CQ#JZ}Q+JIgZMjQ9q2Xxvb
zYQbVi#}Mdb_9Vq5AG}~%bYe*15D2NcA>x|Rc*0S*=gwK7-}Yzd9k&_!?W^IM)(v5I
zy;0f<De4fQD*%>Q&>3+dPf?rb>kriH9UqBN%|)disK7F41qzL0veLC*Mba`^O|TIr
zh(%Y>F2bcrGF1hmP$m%@rS6!P?l;0f5C-tO$)yrGbCUk*a#}3V_(gLS1IE~7b7*iF
z#02b(NX5Nz_aQmPR`4M>6Ik6O_0a^?bInp(y0t9Qy<`Umzbc6kL878LLo62l<2NB8
z&QMI0blJOQ6I?<+d~dvfQ5pCqJ2qtnBj^Y(D=J!NVZq5;=#c}QiroKRC-tG}Jfq2k
z*}7EdsB+&G1SUF-zIT@M4mDE_YaSbPluj0==8=n2%ws&@(hxGbQZ(;`lb5Z3haGUS
zG*8cZhn%3H9o7YY0xQ4O4k;6AKUnRMzKFRdm=(xi#Uldy4eH)n1H1JA6md!jNy%7>
zh%A4H8&}pWC*~y3f)$#gl$>15`lvrZWj0Bri%O>{@VbfuC1ic@<xVuULR<1Hh5vle
zYli&JlA$X<IEg_ZF~ggkK*WbpHWUXDy6HF27DY}JeWPkS=96}a0rM(NXVy>JA8XDe
z-7np@TEP+}_U*d8O?(u!u;<N@_|imz%z`OXB&-JnWwHPJMN4|J;@lUC|6Tril|F8u
z4=Ww(rTG^32?q_T6DniLNYlE}Y3EzoD@&vSR?&O&1Nif$wS?|-<HCKBh>D@ww)?f~
z2*kU6pTO7tl50%kJkr`cb{V`L(XD*=e?H6m93_pDbDdK8cy=g1^8Dt<XUP<vX5AZE
zNVeu>yG}>Hlr4aY0VU{n8A_H5>glH*>u^5weYX~1fy~FKil^!}ruaO5E&1D?1H(1k
z@Pj$50lfB2AF9i7`~*k+!{4U&3?mXqGImO=urE4}R5;*dse%>MBpQigO0+<U6Mq>+
zt(-UKxmiD2|1n=ork=*J=kYL!oTfnzOCeNZzrnSSy=ET0`ipgDJrsAO*M7d?0Q=4A
z5nVx@{tV|=n9t$ynQc;`bto{izN^ac80xjkkug{2I334u3NN1BD7$8K|5(d$GC@qc
z*5`;Mh%=e-%}!H>8q()Y@{6)yA}#wpDcy!?r($!dwz`?LxLDdyC((X9uL}ma7T|B(
z;VxtKJ9%Q2#w&IWf7%sue|)RAq_hM%M;w|_al+b1l`F_7oN-wu{Wt&y0kGa*_oWn;
zDt0;<Vrc;SjKLCoX3XiPrxhC=UQvD0i9!r#5kWie5pYm$00Jj1a%hO(?egl|RVD`=
zTIi?bQiH`sKLVvh`5UMpyITso@+it}s-+j{sv?6UXz!0?$1iFAv;msN(cc@4`fI<l
zg>ONF2jD(nHzxK8b6@E1;g+>ltZz}Vy4wDGt0{=Q4u>MinIqY0<TB5I`oI#>p>N#s
z+or@f7g3KTj_V$OhCGGNyr&h4l#e>gmxUm?1iZAUrYR#y2(z?FnCoTr;Gqu1z3Pqi
z+CE3IO;`n3Y1tUelBfpdEum9ctFXx)$M##Cdh!c{^7@LGD+cDj3iAcL_JZriXMKlu
zD)nMq_e?m#x%sezAzq}zRAr%Ycz=x;HUXa-SI<pv*ipHO(pk$l`tEY#U4A#U7doX(
z=VTP{LXjle=PQKmrVbV=>2TU$!-0l97>c4Md#>D%pU}6<hLq3m1RR8~<2cBfAK|YN
z4?IV$YD3AiHpZA(|LH~z=0XQYdD!zvHm1&phj!`LnStkbh(h$EDCo`4eep-6!C;AQ
zA8ubO{$6aHJC-cH)bt~1G9`AKncSu=TX5E#KY5#fdartMymm|)HCyHwCv0^po5O@@
z82jz9P1yB4appVW+x<@KkARI3Xv8cZ;5N7i5R1So8aEM3%mI*Mao=xES7JiKc=~hT
zu%fUZu;AFW-2Z&P?S~~jU8+cxS*Wb(Iswv1s#8Mqca@aXIct;yK&P{%ql4fL3vsed
zX0$bKdy)ZS>7-XHdu2Z5{dWdVOWVh3+a3Opg#|EO@lkg%24T$r(M_2dJBzT-EI|c?
z$f6amC(8E7l6?dJeEz1xmE_w;*|I4OxIv)P@N(oTLN&HW3o8Vkwiw||+hy3dk5yL9
zOu44ckC8{3%WZfo@n*PeR;9x8ACrB}4OW;zWbs}d|2DOKe{TV7k1f$j940<+%#bf#
zT|_ZxI2hTVwqZ%!$Rd?YvBbiD53lMwe(=crJNDrsagO35I?dMbu62^OX<yYM-MT@G
zvm8ONh=A(mWcfGHRbDp^MP?n_229HzJkJcw3rrrDk1ods%A^Eux5ZJvJ;fP@7a-SY
z$|#UC_GZE;R-=dRm$&52<1FYi8q8>xwh&N&mCY*8qQ-57*WA(jRkJR=u?(zo_WwU`
z_5XRfKUBjFL5RYh&|<+^ZaOuqV<e2^eV3d~ta-U?+;yW=UlJriqCC{D4&1Hyq(r2a
z#}uO;CiVLDH>C@m-$7oGG`?kk`eVmN+>rf#r_~pp`}9V<t7I4XEEG-qA5O2x(!~B)
z>Okd7F&BP8Hn!wVK4-*#x?q;bhr_I3ryEY7Kkse7+<~3QnI%27paTK!b45qf>hOcW
z;Q&b1z3oJj)*W^}YeqoBU>d2ZN0&z}S(L=9TT1?sHH^6W&UR2n_wqXW)nb&Pu!uS>
zqttS*k_n>A8pU?I6?hbEQVC-k($X*;{rN3lci;KFM-*}D-@k-lF2vxMbU{9r6ETYh
z@fDkla;Kkoxi6QBJQ|x-)E{Wnk`-w<Bnf?diPPd*TwR)-K3`<4tK^6y3}y%YZeK6_
z?e+ND{P%unOs?$#JaiqycoSxaRoUP2!yXDlu7aOQdH1F`+79sope)0>H!LhH+KvGO
z4=}1@5Z{j#L_w=6Wd#r?I}g9x)$|;mG`_ju<c<y(u}X?#hWF+@X109VU{Bzxp&P|r
zA)7zS{yNG6s5$5EVft@*ikA*}x_8-G4F=ZntO%s5?D)pZLCKrmT({`73ivm?!pT1R
zoLn<kV$i9pSWsTkU3PC@gN;Uyt@4B(=K9|%SCy5c8Tam+OU-Sa3I3@i@X`ZULPnL!
zM}u9C;FTVna}}77<uy*#i0g;ru4h@?u45@$O51WQ8rj*8yjzn>H)9Dw<gJzK;i8&V
zkd~@ga!mxaF}b>fqZjFFRJ61%|I;}%A*-+rLkpc9-2rg~tp_s0Y3=Kv5`oJ?Wo<XV
z#RS#~DgL_I{fD+5BK!=f8N>xB#pKYmPoMo3#sfHM<)tw3Cuvb17QybS_sU&=%}_A=
z`@_)D4whDt*U2#(uSdl=lYC{#Uf}Tlm0bGc;3}4SMa7aRTdORkx6mM9=gof=ZjGu4
z?VUhm(YbLw4ijkw<_E7ZOMpR<J$uqko(LnZYg;%&gGP_?;{;vL4Q=mD940x0Y=v7w
z9hKk1&i?`D0G--tYX2p;u&m?ypzXotA*{WLWRl#Vsfb;Mny!!zJv<9JBVA@<Vb5?*
zfXo9N{Owk=pK3ZzY#poy&@&FuA6r`nnq5jzWqXEFF$gV_MMV;tCX6PriWW)|8%Ubv
zCN1V>hZ8YDoHwuNM#cs%ucuil{R3WjJF2B=;f@oy2#~aC{^6Q*Dsgn4ell_y1*~{i
zm@0-6M^;VrkQ_$;SO(eALeyjmqt1P?u1=s2{tS23>Q0U8jEODz)q+b&7K4QR!&l3c
z4L_6Xa3%~B7MvP5=7|gxp`xQH*I!l~)vh+9Of!uv{a#IH=PoQ~5_xE0F}N``MRlCA
zYf`4%7*Z&mf<O()vtiE>2EfUsUkF-^oyb<b?6-PecOr>rqIgA7wig{7r2GO(L=R=a
zqaj0-gM*8Ixa}#5vk)N+LTreM!}>_(u!ks4OgMq#g7_ow$kO*`NSD6&pmW~fNr=)|
zUdfx0mpaMqhk?saPSb2|GkU7jy^xWEJ@WNCe}$k+yt1U}!^EDi+4B+2vlM&WXf!r+
zJvJsAWQh-Cg!73uXrUEea~fp9jFBTK9#8TwM1zY{iH@lYCU^uy#TURzL2K>*_V_DW
zcN`)L>8TwwmL?p|lEZFcI}irn`qPDh4s|nd8(>|HNBzY5V4K31dh_G{XFi)5%qoAs
z${-!c8sYW8vH0`6RW)hd!afs6jde6~_Nr(@%JqBg-1QA|ot8pPDW0?!FinJ7DQB%!
zc?$@-1*Hg6aqf#5l$ElIT^Ehy3lZMn|4NRqFggVOZHlC3v^fz&W_o&h+7EY)b3BZe
zX#O~+iZF<u*qdVr$uBR1C{5J$<S7DQ_DG{eb!qV^Ui?E1hO@E+{;?9kmIxB|5>Ixj
zIXkyOs4pLP`G_)r)NUxNt2y12Qhd=`ppD#FX#F--wMwm#7T<1Ysmi?Q@P)hknG$pT
zuwJLQg_<BVOxHlWDde(BaWWn_@HfIn0qdqe+01q{D|jYl0|vf>3}d1)q^MxUA!2b@
ztuC{FQ9qm?N|Y`$%B}~QEu=0*1oU%{08?Z#x-7j1Jc9d5m99c`lUVtA0^M+EP&0sB
z@CP2<P{K9~l;s^6O#19_q2d>&to0(|*#)Lry;Q5w7T0kn?|GDLp8w4P(0kKHh(Bs;
z|IT=7z)9o;VemQK&1I($^PpG$5qThFM?Nm4>au)0Ta3&Z-DJ#|`3&h5a8&=!n{(ow
z?XYEfz*19f_(G@Fmtcsz=VcN`XAxszsmpw>aIASHqmK0cI2$+@`EDxbSU`tw^k!J}
zRO656Cxb`MVv6Y*tzPgZwKa<lWo=!Y7)0P0Q?A5+OnIVKq-Da<x^7A6pS?z-m+>W{
z=SUt(7%ZMcj3Mpy246Zmg3fdhH<^`TbpV_`>0B$4=3?a{gbuoj#6P2Qx&7$}zZw}H
z@eG(m*t9ZIgJId?lL`7amfU~PQ~&m>Ug#n0!B9K;!8B9rvK@G}J@HX3tiexuV`BKt
zE3JB8H0GxgzpO8a)VWIvVot0qwbi5eBDr-q;3MPmtvBH&TDm5*biIA+beAg%{!sE;
z<1JnZ=PaVRn7{(62T~6T0SP=NOw=cttl0O2ws82_L-(!nB}%~r7D8hmJq-<UC(%65
za1TyFl(0T5`J>1B0nqIk7K)cH7VCE;2yR1vg<6zIw?6;b4V1@*=8R}}fRkd|P2#MM
z$mN>@E+2<CjJhDDhqXb~88mI|3@OuOpz-zsI8Cq=vms#&RTRUq1V)h#D+EOmf5c2;
zi3*tP18>(NTwH`R9V>KD8;;2+8F_M!<!Bct%pppSW98Wod=qSSA>>Td`WX~UDpvWN
zF}(5F<ztR0^cn60^i{+OTsY3`;xcdnbvUl&Wu2gwK|0kP4M&Mf#=u%I)^aLA(*h!!
zuwaYRRJgq^T{;eCPdJ65ie@}=Q4(pP4;V0*3-}o7U3{SmMHzvf?#xHc6GpLxL;h>t
z8tNfxb5UBysUs|RkAhjIL}g;1Sz=lvkiO~3Cpte-U0LjV+H^HUl6pTp{jSmOBU8W$
zXlEnGrhe{}uvS9;S25*pfwm$6)f6lEUdFQo?W=WdZ~0kf9J<?pI=|<&rG56zOf~Wj
zQC<wY|9IShUON@(Q@i4%KkTy9m8Vcy$_p`aZ&MbAE+)E;H=90{C8!=d8d4fE8+snH
zau_y7WYClxyu?{5OHA=CY519Oush8JV<*}i%7Pcyn#?;mPYee!6zo$Nd(IeCgg>K<
z^v`BFpeG^{U$({^^L98}kO+NKAJm6&X*Bjo^*Ft&bk~bStwG-_PShS8_d5xf0Q|j4
zfdsRN)$GExz3%rx9vY`!-*jD>pkrllDW|`mA9DOP+;53eIr8)S-p)GV*Bf<nnR4Nm
z9aJdgwJri5^E7B&e3R_YqEI*fv`OK3Hfm9kxKeWRa`;0Pr`GV6_~=46<>SeMPv9)Q
z+oM6yIV9NRex%?*!j~@qBOmy<#XLUO@|pvkWgtLEPm+NK`4kd<U~Txa8VesJ(elG%
z1DSgb44-RP0-4f#6(La+Dg#8T9yiA+uM9S23k6M5Z&Y4*5QiBzb;Y!kiC)u0FKDNR
zUu4uq)En^Bv#3cIB+Ezu;tGabf^(|Pb7yc$D-<(@;?%P6I-LCX5))k9SW$|sH#)C_
zTkWDDiAp!KQzC`yy5M1Ss_a}2nxmrq45ohJdxHdRE((vGkxw6ZHZpg#>LcWDH3@V)
z30k}OQG+W?Rt#5JiHvLfCrBKrn|N!od7>m<3Ohe~3G?{b?ZUXyoH)*-`Lci^Zc~Xc
zx(Rk#0vUECHn^SUEC8>yOei&HCC3;imSShFrRpGy#2NEu{G~2Pl!V-^Y3P2~Bs0r2
zN%u7TQM6x?eRpIro3V`Cr7|)1{XV?Q@qwNu>$c}z2xrWjSpQ&`DbI~FUq%xrT%YlP
zCrY}?ga~)Qc4r{``yWKQ6~JAM1*fB$9O4v_<@<ZORY&IHN9&1F69OLeF^A+JV>iri
zm@5OykQ@A3`H7EB*2xAzp~hAdfw?)RChXZ;m&o4JD`wT{(_2eskp?;;{sVm|?94Jy
z!O{?9-)N)-$1U!GR}@O9pM4~$^8*#G(cfWdj}yQMz@&A6rjJpB36VUz4J-jGC>Fea
zAzM!KZc(W;T!>QZxKyqX4C!_U-dW<%l3HqD|Mp?{)K3x7JUu<E_CB8p^ppd<@yojY
zNE28~17WlqT^VJ=tm3lE@-;Lq|G{Ropf?z1A9l$(c~!3f4SB(*J?ek6xBQoUAWzm;
z(D~TwA#Q?~Vz9C&hyJ!_u0B3)l$qGoN~!;&#(#AJT64*Un}H=aH+$tU=!=}k=GOt|
z$*W9qs}D3Oik4zKFP}tKGDP}hrl`Ple@b5x6bEcuNIdm%;G`Hisg*xMp-tF6%w1U|
zf!N`0LBZh-pj;g^{II?>k|N`m4oTYypc0Ox;|dU~`Z`*XL(7pp43~x}uM;KIFmkLr
zAd{asTq^eB3V}r3JCgHVq_oTO%z%0Qa-kw=PjpN(jfFM=cX*;qky!X=wE^0n2AfzR
zU*23d&w>8(#-;Q4q^RJe!l|g>Yohjz*FjXFFuju|XPPsWT`09el^5#)k!0dB6QykS
zaOqOZ+0U=Q$jdKaDEa*EfH{L-!6dsa9R<P-drvG~x|`j`<y`>OCF&)T6uC%=!I{hB
zh=L#4r-v3no0fwTI0PCw2){hA4*)BPQzT&%!=pe(hui*JPrtTo9A^&;DIDC`EUHk`
zbscr12|LDL^Z=uhq)7sx6itQh+RQ43BqBAR$aH~B1sZMk5MpJJOdT2|$=7judl%Z1
zF7N9LnTZnA=qdaP(~egtwgLK|tAKCD3kcS`NOzT<b>0iX9RcqzTnkYdyq&MsI7R^p
zZ}OL)YS_WeUmRu66QtkmbS+G>K>t{4H6wwqjS}HTLtW+SR%lIdWVPG7yyZ=3f4-u}
z<xT{GPXfaD${Jc;)!iA*pLkqhPY;GRMz45iw54gkP7KpcUJ=m;zqNjJVG1puKW0qV
zux%Q4w<RBnRK_3|K}zo7rQX?2m7oAnNA&fn1omib_`zTpd!f{K&EHfC&`DIUy=hhD
z>y%Vf+c3F8Q4nYsRWgj0^Vt#zkmX{j1dHS1s41~>6ilF~(GKIJb0B0iH8N)N^|?>p
zbcL1aVx$@ktY>=h+uGL`%QA5?_YbwG)m&p6E86!)Gv9$RVT-dd)x9>(>3i6A?vNic
zqLI%|>qklVxbFbP>rw{KfCm7a3H)io>@K#rNDdSlfEGxlRvJJ<EZP9zarPpi)*JTM
z(+NT+N8R^7^(hG$2|ZLo&%)61_&=RI{jT1s)Mh!spZ}FUzsO1f4z>d>ok;R}NkbZV
zdyv`J^NJ$i1pbPnZx3#|W>9Ag4x>84Zn?~pG|L{jA4{~3^1e7L+-$pU3n>13Le5pk
z>B*qy{?3<rL?p82@_L=7j*il;nobHx2=F7{Ihx2TY;D7SF@j2F0w46fi}a(Ta0;}$
zzteekq)FAb^z_vmy)&5sUx9!DO>-(`IKc<iS3u2k?0OslQuMu#PlVP6dO$#}!+oPz
zd8^0Y<D?OAWnX_PgfUnE079sL=k!Kn(p-&|iM@2iMw0lIZ{PrT&nF&JFc>EgE7aA&
zr^D+{%imT#y4?sL*q!xsQ-=!V%HZ%|{q6)I(7myr7D4Laq5nz4nG_2W4*aduw9hhC
zl^H7JWJ@3TbeEfh?#bg=uc+xRS^U^#yz;SEG19HICcpE(;%MP3FL9iCz659POv!+f
zD$E_m$@Tj)qPs52YCa!`jqtHX@{`D>^#`OV$1$r9FS<raC`-|6n1QnX{XA-8$<c8P
z8h6ruxTgJuJ1Us2VJJgH2G}oHB?}RR4&`*FL8X^WDv>hK6y`X{dXdghQ^l!?8SJt=
z`K}Pj3g!H}5}V)01ZFjbyaOMb@Wb@fM=4$MDD749jBL2v=XM&r8trSSH>-62__Ab-
zgdUr;Qp!Qhe|>?2$7Tupt5!JwK=@h+1#cn^PFAuu<L|k0a4Ht6H=wS}mwu5}1s1$W
zsS&c{;qI~tbPo&f{O|xn)b!5a``d1;neqMD*$_F6q3bOdo>jFGO%w=xm{|I}=b2f@
z=J9BL*8gT+8uXb+G>q2ik3azVAzbu<ON__`5`r=eTP%yo7-N53UPM(tK%3kBR$1%g
zv%eTLH3ke?bprg#19%7sD+4zlfq7p<obc<?e3Z+{afMZ@F^F5ZWhMze9%&<q!aH6{
zvqSkkvK6Wy_-~4fl;gc(9#jV(fF{uMkuYiZ_5h-Y8Y28D;DhKrE+qtbYZm4N$Cyr%
zlF(~C7Xz_{J~wRA1$TjE!GxCC#ZQ0dCkOXSV5;G1RK)u~kfNr35A&os1=@=~Mrsi?
z-M20J&M_82rmK(Ts$Y0R7e))R#-ohG)IP#7)GxNi3v^qAlmJW1YbR>_AG-w+eYIrU
z&}!>B<+$(``EI<w_f3^P72n+1xl&Ds_Gd58tK{12N<PMI_JLM}e|=Y=)ZHDH)RF2|
zi(yH=R!Ft-`v}QONQ)fQkbx|klspeumN$WsYDcUE%_eg+adRfFoSb=SMHy(u-egzC
zX=K2#H66VGg~yNk_DD6KKhQirYL90(?zx|SBL4y6%bg@G!!wrTCPrwxwwk3o92+(s
zbH-ilkq?T)^#e{2U;Dy{{*ukw!1s^Jd<Pmjb&fr+5o<j_9SGP!@N&|#;Hw<BdRRT@
z8rF7_2_4Di*OsS2Q23ewLr5TMJp?J2qq(9b0970+J1d$BsPhlk&Vdm#U)aP#2{jX`
z`&oY$iNi84_s_U~DF}u61Ni^r2)SiHMRzX~Av|vO7C`<Khb5LvT1(b7?cAFY0J~F$
zd<&Cap%AAPf5~@W(Osi-28LgF4Q@HMolI0l36m;*qyP+**Y)9B=6uI?8HULsT86$q
zn(<7?SrX_q^4KeRqWr(nz584m75E?OhTzK6qS20boqhk!-*oN-jHE46&fW*6##epZ
zS=+R&tmfWy3cb1trxllj_!}5?Bnkj2u@HLTf4D0MI6P)EGc;vtI<^2p1#2de&WzMm
zzsCaOC4$Fn$fCJCp8opC_D14CU}JI=!MG8Nf`G2DW91L@K}QO?{^?@-Tggh0VLQc|
zNh&d`5+dMQ>_!hwT?s_a*3zRociOX(%#<?F)2mnWFzcP8zI@Dg8j#<r>!7ymbur_{
za6Q=V<k!Ld11-E}_M1e-UQmp(pBbGH;vf<&e9n+43yul;*D#r1Mii@gy*)k)t{eG>
z^==ZBgRaxl_4L$0#$v+;-Ry!dM`gp<v;AO^LUkGI)|6^Oo`%`d;~Tqn<}Xw|V9Sy+
zr?-bGZZN)gr{2H>YcUI<_knAJAL3MGoa_COM1H4iqd-d)2jc>0=KPJ&)O6qJwa_$P
z%#OZ4CWWH*6UPxsknqc)sn-?YesoL5n*vO@4vVh2o-|#ET;3bit!!|uGSk!vb9us!
zKuHXNgN<-?!=Yp~$ff;T@Np=WY!E*`4QF7kC|XHYmaUC^Y+m277y7m1`K<HLN+8dJ
z;!QRc9fAIyGwfiL=aHagMQqnmaS>}))^~ue`t;}fd9$|B^WQ<?z??`!*wrdjK4&-u
z+6)_DcGZ9Y=1&ubdw|19?}Jsgwu(4_n4ZES_zp2e7M~l)I>xY~cRJYW(novyxh`q0
zu=Bj$*Ig4}N5*R=ES4#gKHkW*oVdP$bv_i4$r5=b^4(<(q6*{<D4(i(KLNYcxqYs;
z;F;%GJlYfo5O1ICCg`KXMnh4Atmg_vX$L!8ZqYh#J^!>aIPd1C@lkB2$TLR(r%*@x
z`Ha7GB7vd_U2V{WB7z{x`^G_uxVmA0$B{nAKgr*~%a#l(g<1O=DqlsCGx<VndeO`%
zTfjr2u1!)Fc|)h-Os+lGUWMCOrSMlm^oc~Y`k^yXY4d?NP!S&t+Qctou$5fww2-As
zgt0;V8iw2aYH5N>UPK0tAGUOjPix5rp*>pE^!SCXJ!EqnnopTEKWaEMjjNarF&qLq
z(_3s#7WxO6cJ?YY#?H&MK}~BKBur5U>%g74kF`)#qwiUF<caE$d`R&3FJ~A%De+Sm
zSvqH%?Hv2SCA2jy7B!IXb1sojy^j7ZN~WO?i@f{lgyFpRU5Nc=-F@}rU*h^?Z5z=O
zlIi91d2a!q8TBu*-H_%s<MfOI=R^D?=QvmBN6bXw{)bf~f9S83lYw<Ov7_V&_+_xN
zw0z$X+aF*Bbd1r6O$VtVkcr#)EWsbMtqQyW;S>(r@_JXEnfeQ%W5?y+G0!_ceb1<7
z{O{Ls=~K5&kVySc=dC^mSnmG9<f*jFx`LO(N+J#1b!J{LA=-R9UwRi;LAZf}8uniO
z=sCZK(vqg{35IEj!zy{0Kq!EcM9#M5{rm|%&0dBSko4Ay(7Bgr@~-+}iIH~nbv4%m
zSKl6}&}Wdo+NXlG03*gYl!PJgQk}telCQ<FA@NQ2gJDU%UT-h0)l?CS{FYRu-A|T|
zYjI!GWk`H)*i^bNLJ)%?+UkOY?5=zMlONoU0K$2-BEsHTZd)uM;QgSuOj;7MeW8#L
zQMy9<YT)=V_tSUN_rc0Zey8vG#D0&thPBCAz3??$%J^#0h2%4ZCoMqVt&OIQvYd*R
ziQokt+xtSgI6g}(o9gr>yc?q)ZV_r8o^%{qKQA;&jJgk7zg=Xk8lmJdsOcLTffR3C
z#vXa<aTBhkxHmQ4CokOgUW76)1IO-LykMWbnok5K*D`r|Lb7?R&YM$>TRqRJ))met
z4^13;poPdqbFDZ$jUU1!Pq4a;R*(DYN{8R@M`oWUb&Ucphp%UQMe^1pvNICf69OqQ
zYHIO)c2wp&!zkN&p3i)j){qjYo#ySZKY(+f#7*mS-j5Em+A{GQFi0qeJ-SlXwriaq
zydcg9A0C-qAi~2T`wZUl6pHsyG6>Mp{I<5RH5*5aa{A*t3TJB{PXl%Z1QJjuSnK<E
z`QfGpmR%O8*f(iMjl|prO#f1Sw>?hY^CuW_-$d}mL#Z)jnSw(oy*~N=LNrN|E?4k~
zO-*PSZ<H(3-@We(MHy;a!RQK6ePXm)<R6W0NJ?&;5kiE)eC%?a1#JPd7qc~W`h0<i
zYqD-l_}I$7nS%e1&=|~x60E|V9VPLDGxBiS=piw;q4!0F$Ts&@%~f2N2W?i1218S{
zjC(hOufjS(IK5qW=(`JrF}Cs~{8COeOl7lVE0d4gIe4H1^@YR<x^Z)1$M!sJLa3Nn
zgc5<ESKS)J($ImZsgG=%JP)DMn%+zmA%d2-4dX*K8t7EymJMPxbKF9FF4;b0<}0E*
zf`tsv7^CegZ+EhM$2x`*9?`C><o>7DA5woxtS9J%4=Y3n+(<r1;32NRAuYpsYVo9&
zU9eI;HqHv0t#Z_hY@-Odv5vDVIUnHs=%`N`6L>Fbgu%DMhD-XsJqV*78jWN?6k9<c
zPO@`*G;jW?BY}RHJ+Up~1lv23z1}37uD&=avF%~@{(UFenO0IpT+2D=aNR0D9;`8X
zk*UL>sBTApeRP_4Vr^eT&KyiM(#xru&JrF*E7L~}=91lfOg2X{UUw6H5D0*f7p?<-
z10ZW49(;lKt9d{^1UqL*JA_<;qR~r~)Glre{eyg+Y@YcjhE(~wxi2qBBaXzYFPPB;
z?JWH>;~Y9W91$ECWGuu%9t|>IG<rzUrAxTr2RiwJ&tCfw>i_ZAL=4W$Ws>#9pREXR
z_dCi>9PE$7jat2Gt%EE}@epuOTkxkTYl@30N}9A>5Ue!*#D`udH+2AItEh>|00jyC
zX{bI$V@DK2R3jNR4!Z#(G@kz;P2H^#nWz9pci3g=icyCb!uxRf6E$jE5i6(V1UxjT
z&H`Bs5<jcbHOHB*)(o>F_m<sZJJ7R@r5+(CuDra>-0Je}`Hylw+0S)Blyvwnqv`CY
zjnpzw2^L{<8VHooJCa@s<df9c$#8WsoV-Hj)(!sm8`_>8sq7ORRx?<+BR{PkMBPs0
z&@n0Yco9;oqQPfS6zV|Gb7taAI^3E;>`EYwO9$4_2Q~Y+y(l%g@(%<&8-<XczZ4Kw
zn-|H|Ygv&ghrZohE3cV+ioE4_V(RQGqhWPR%XieRJUZ__H(W8rK_N)M5Vf|3*HQHP
zMQl!_8Y2(J8E2f4Bm?DdxmVA-H+GS@|Mf&;Dx{<b4MQ}ZZe<~f&kqdTNaqj%n7KCo
z@#m{2cwB8Fq4YX6f;5pgRIM5b+obN-wmy(Ka~d1@yv|XrMf88F+or|HFll2n(q>=1
z?C*|8W94!p8x0lPRxVBFCvswBI;?a5>_Ofs<Ag&RvL`uzsbK~gHLAV*C~lUU+CqNP
z+{1H`8$xS#zfk0~rZ(VEVv&j_;Xh6ijqKCxR}gjV|G*|A9;9a~I4X>{#HP!4_A6Lj
z-Xj0ITXJsi-Ke8pF-eBpKEY(ZF<GkouUN>;Hx?w*A*WZMQ|J1NS0JZ-G{TT8TEjq$
zdf?RrQW2VEC5{m<(#l-U8yyUE5uN006nM+E<LvxM+WCS`q%#TPf$)DE&ZGr7He6C0
zhg1>z4y~wu9K%AQ?jLNfN6XbfG}W4jbA6$zw1x`({XK^OAJ!@!(JG;L3B?U%(L5#`
z=tzix_c&(ed-jvD?;XVj`U^Hb{P5a~#~-3&hfZXT_R_w%X$w^_M<5;()!NAqHyHks
zqr20`$lq72xLY^)q4jtiPEmdPac_ToC{8Gw!q{Mnkr~d=fb|K_3O*iv2@Q{&H3XLV
zJ=QcPJWhtRku%L|Dyzbv<-GYr8ddv+iE)Nq$Q;eR|J@H*MX4-F^}FN$cqbA;Jmy!O
z4O~S!>fT&O&Kn@Ufz4R{>gdnHWk}#*(eL$TX_eHc$wm>c4WoDzf2v~Qfsis~=FzY#
zrN~1s!9Wg1GL9{b8Nz>rzZ_d$GcbZornHPfw`?|dE^z<0F8bL8vU#0=CJj-NEe)=%
zKWu|S1?$^P*aF|^^s-Ndh-w>m=F~6_rP;9vg@$^bOQTJc@+=){X@(Db>5GfWJ-$_*
zGcYeswMGVPNE~(6ee3n!`4I_8`~FN{^s7xCS^EYobQ>$msQJn)B7P_*h82znDtnqP
zN%qs|;CmJ)-7ICX2r?PMSW?`Al@-4q6^PY`b}L}?4`W!-?-mOllAY(QVt5?*tax1P
zdV@svDE8G5VV)<xT^eJzZCUi8jN(BD2j`F*mac~ZATS&pq}z*u)7u72^{y&D!B6)U
zf*3WyHmAr)UT0KJq&~+5FHRz1X#-&_ECu*wV4@mI338cEWo5EXvgPE2Xj{O?)60vD
zq>*4#HWaYKkTXQb9~6egfh={!%(N2Y`sD2L(Chow$Rj$>+x2}<qBH(Ky52IZs<!PK
z1tbNeySqC?x<MN0?(XjHl9mRkMR$YJ-QA6JNjL0yzk7e*ex6(3KkI-W%r&{<>@fx~
zEDaU9*c+%_^&^`LE<*fw^A1YyAbXCW4xRIu;8y<sl3@F1RE8WEJG40QZfM886chfE
zrcS*6fq5~+F*Uudmp7AX&Xs=j%e_wIP|$m`X5F7}NtJLc<cA>FP*+;$j-62F<|Bi7
zg-&a=*l&$r!JQ=`vjUM1mdqn@DU5+b4(|^0U<JOI9l7Odut7xp3fx{^${kiNNsJIQ
z@+h?B(#^0r7LzVrhGrcLVp!?3Bo#|$q56XPL4x%`b_ns~J=p;>X&Rf^2k-3z#eC%N
zO{Sx%4v#oR0?)BwBpLe6fH+N(&enUpSF0<=jG3NhzT0~vdk=d9^{_PIe&QY8TKn}M
z9;^Cft|y=jJI{lzu(-6q%*R)Ojr`bXS?Kt!_kgxVagEVHE%@_~s|hcln1WEd`}`|W
zuD>1oqi0fy6FLd(DYagm*;v8{B|s%+>C=AZyK2ZFvQ*Y>34i%sf{{-nsNg&DK$pj)
zhf(BPHvsJkNmuRqxgDh)F7-^K1Us7N_vUlQ_Ti!V?e)n<TdiY=9x)?Qf^V4JMw&_=
z*$dzfX;BWtW)_2DeCoOg6spb}fT;2pRqrzjia}#jY5W|BURJ9O6Y5AX1865X07^l+
z07__f0u`?dS>Vt~k;f97Y6H+M`pT`*A0fd-4JIBQ(248392{iaw2<xPFok>p#`Ddi
z4>o$?ZhBMShXar0Z)uRa8}gv|eb55UICmcoRf?=COs(7?JjKr=`@x6Tx@aww(vl_W
znS`LFya1V)lyRE|mA32^&j531RMKC2_X4g4j5iZ!E--@|aV2vVuh7-=tSYc%*!T&7
zbAgqCZd&4jB?=80j33OplO8C{<aO^4!y+DLNHfp}5-+q_(LRWNnXRp<S$3iQ(vl}x
z-pq*wUx1}LX1R-5<k*#0;Z>Mr&zxb9;T)tZTC9k=2uMjrG6HI}4I)T<_07!(fCOjA
zvmu-|cG3)h-#&wpN#0oZI(?Z9FVdgM_ISjxWjJ4HIzO1o2ZHB$S#CSW7ncPQth4H!
z584WHS%&}shS_a>wFw|t-%Zg~WgtHk(d<$bHnjobcc6|5Hmc>dw*+Y4pvT&KKthK#
zj4<*z)qP^ECw3+YW?IkH0Mt5y!Bk+NLYJ=(*^1$IsV5Zk#SsCD5TJ(NIS7qs?N13=
zbDMnLvXK3ckj}3)3^i>Qv$ITqa>Q>m%1B{SOaHlysl(8IfWVDh3Hv8dc{_i(WAg_S
zSZuIT3z2=R@_UKmiQ0UH)gO#Y{7!b!huSSj4Daj?Xl=b92{`*F)yjVD11RwCKzMe6
zi+x;8$0q=Aj5)y@?3AZ|L2DCVo^^W#nHaldqd35%;|*X^Q{3xzutn5V*X1`EmM?&-
z7-|wN1}erqoVPYjE4KjWNoO}ur@8I<Ma2JjkpHp2qbsc-I-Ji~?*VFG@4MF=Ty}JC
z;k?^&Fq!cJP?OMIxgmuXdVdKyQB%}A8T@rL>2G+;PR$6xZilEX<>oG`xLaYl*$ZL9
zfw98;7U$hXMcvP=n6P1`tAdK3>6@tM%Uy<i-@RLF9O8~=Rz`56<VlM|bGYYOABInP
zdIGwSExDR)=zVMV-iWLCzffdF)nBxop6el6?EU>1?6;Q&p9PC4aU%+A17uiJBzJ!p
zE3)h2zu%jFekaPEKB|)R=@@2>W^NarZRr}s$9>wNH%S9ec`p(9*!cFbc1Dhez_)j6
z_4J)jzpgc<vUGT7TCAG3FBA%?2q(*j8&3UBFi68tE}pGmwD0T1GQr5fYdqG!4gQf`
zB5XT%07Tp4_5fKgDHDo@fNdKROp;|TEJt8=$J(a-*)HYoYz;4HyUt!{7bFFt;q?qR
z@OE0;!7>QTZT&8+x0g(toSaf_>-BrjA|s*!xA7oyps{LlEY^pyePM*&ax0s!T+iWc
z=dBsc;V_pUgbHZwg0-R-jrjodaNAis{1>EeF*Cec_0|zqu#=Y|yW12uXMjR1BbTah
zAS2{QXJ!iTaE(k#lGD2L_IwEeiQ1+$Pdu*`z`G#!V?v$$Q-$++yf%m<u6cJV%{(M3
zoCE%YaF+Jl@khbUnCcfIgry9m&+qvn-7rzfp>t_Sz6kAY27Tyfk{deSr}Nu89mJg!
zV$2_v#^H7U4e-?u-&Z|W5PjYe_lL!%qosS^?JXzO@Dt5>pZ*&Dzf8&dBkN-oh_IM2
zC&GRb;*6mpKzd{)9E-tc@#`KrL8{oU`pks!zL{;<tYOhX|LWBX1aaZNU)wQfaGYOm
zT)e@K>EzKtBVy?huc>uITuN-EZ%OPRO2Uz95nWc7sX&_`7tHIHFVO3{#x`%mW9M4>
zjg2{@VMr_rYnQc734R}nu8tw=axl+hC?UsJ&REOYa?Y;G7E9;Ib(uE_vGt<xj4CXe
z3?a3hZG!6xNQ0@cg#(3*3bdMR0bg=}xUd1HGkEw763(HdRZ+4PsJiHl5;R0sNB;KY
z{esnU2+Bwp1iCJ6%ZEh~VcW$L+MVfHT)#vsk+{z$1`O~!h<?0*j}r8k%oLa+8`>_K
z^xUpq$ya+(WqG5fqq{ijaP<;Fw+w*1V$WdX+%hX7pp2sxNLvAo8$qb<oLT`~=tS&d
z4}2h>&lKK|hsVe1Qu^T06@t}yR`Wi?kU5rr&s++fspT3~7iI@dAO{u>78d)TM1E0W
zA|cCjKTQfl`YSd|Agesz2RzQ`M<L@MJMaO}A}}AwSG)$+-9<aG0#FF!^Ostj_IZHr
zxBt5jlVs?>zO6ORa!6h6jqNMmk7&MR6C?3%3f@N7L0XZAe^|#cb9(%Z7Z!`d1}!t_
z36y^yt}gs2!AQfp0GZB?ms=m8&k2SsXfLX)kT$6PogwB^1(A5Z#Bbq6LD6?~LNNC+
zoaXR<A4;KtTpZYknpsj{JP5A)no$5jiApm9+UI?+Z*?{3r5OWtcYV{A{-X7B3VO^{
zfD4C4wg`gdb+YI&ft0+cvfRFeeTX|`_ma{oIdvpzRue?U7*T+%A8(%LBAPiT&za)-
zgE}Ru=!bHDM6cHAVikLqOrxFJ#cr9vcuqR4)x!C`Q<l!1RMF2;1^Vsa<-XcNLa3RD
zVX+e93<3A&I?<R!_<~jQ9svavtkSbfpi0Jf&>2MO!%|`r^-ZVM*+7~VuRa191m`H5
z99x|h{Qez>{ia}JoRjR>@s4f|w+rn`CJZ67{oBiJSZ}aFfqq=Y%&bxS#U9?I@d@O4
zlXM3|(<*8Zx|$>W1H;D+$L<I!`(g?NTyOlRr7i=2#|j)AC5br}*=h7h*YUC4=W*Tb
z+{Zo;evgS*e=5HG=L;~t-@d!&w(c7S+q7ZuBou~lv{Xmsy((>_8%U7<8+nYoU@a<C
zS5%Uz<C66z;>38Palg^}c&}W(lqqUk3<!2^+MiBG8a+|G?Mwa<!e*zSQHqTa+;-dW
z`RL5B4!BgW+ZHqugJX*KpXZM#YQM#t0&rQx34ymj*1Y#OCr;!1`kUabm=Vig=26)`
z;#y$L-_t6HgKa$$1&K?Z0(BiDECHxw^v*z%18^=B!<dF*6ojenUuVm93m10L0Md+G
zZm3DEN|*RE`7d}lpi%Bsr|@W8!yYTk#mLkPN)k#)vUn_3l|_(E{hG%5*T|<2);@89
z^rO-VWRJzi{ZAYyROz&O*Rvfxy8;wsVpH1XTv=rw9KrMyQ<UTp@0R$IZzHKke#PE6
zPe+JxSuv$ag_0WBvNbhk!v2b#(2`S8(o#a+%yM*sKOqE<S`^lozmDm#3;r|>%QuQ!
zj;MsJa<aA#v~{rqdY1qo$|CVenE_&m<w6XPE^~@Q0&)Th(`cU-oY`6Vkv$9E(2T}w
z7s*kmh;3ZP$b%ZxM2US?YEK9KFB}?Mh{!JnS^Zl6L8RZN?SqwYuW<@cpRrhj@_OE5
zu}G59;zHuHut|R=qbGqtNWX>3CxfTOAm;(8cjuRPy~}$?x#>?CWC(UxNbDWwAcQv5
zS867~C%r{3bDZ;fO@(L}#zk{0O6(31Cv+sTg;OF3>35*q@8gIZ(C>(en&3!604v0$
zN_Y_kF^?>oOj`<oi9+8?x!UhQK%{(;`0^Vg2_hY~w|uuZn#Nq4Fc*GmfQ$?|9{Xb9
z%i8B+`x1r9NIk;iyMoWb==!w`SsLB_>Bi57nY##>xB>p4ToI#+%xNWMY3v`kc_z6;
zGCoDJT*A-20Ou-FHqd)Sp<?OzS$mh0j}RWioRsv1dNdEth*{~c9YiZe2<`2Rj-i2(
zPif!L5V%SnA^>%p=ifnFz2yMN5Z)}xGVv;K36t;1hU>Y~_&a%q494z=&%IZYR^pYP
z%ifQ2v{8m2Dh;PDjnDB+$%>kvUq?@lg1}^AQdxZk2iesN3PZ5mP`l7OYV5f`P^Arn
zrqd)HN_C1bb-VM~XAp}>)*wE-`NoYE>Q`H8g37W4;i)jUTfc{^?UH|DVbdI$TSoNq
zXSfUsFh@fhAXbc!3|#pVtl&FcfVBmM6wbfW#4-N81K+GXP|pZsHO($k0z^%y%s#C)
z0qbfkRiExDCMo}uMC-=`(kx!(QUJf@b@6N4ZJ5lgt2K&o9_)GB8~@sV4}oaXmu=y4
z(rDVi9C*2{O9g+X{L3T>_V}rI4))~o?oJL5MfG7-2kg&DiVCjR^d!E9Xixq5ow<uj
z52X@90PvO~DdY=inBJPKJP#T^<(~C607?=^2vK4X7Q2@|h+Hx*Qlmv*!Qg7pF*8pb
z$!ic5I;1Y{j-Y~ENY~ktstXOQD#AQDDw9=?n~nyI&FZf(DRHt*sCQfBejFe=qg+<G
z9&gjpS-&-`&o9dH?`?3G?WL}Zw7FHLeRpnO9+P3DG|989XJw5o9cRNrB1N7nG&11D
zgAQeAk=ZS6Jp>^CCkS}D?!}46>P3vktN*Hw2TK4t@Gw^8mFtZ9;xnZ5n$pj=vt{3V
z73sbQQK^vKHtP4;&^yq8a7UMV99G2TZKi)D1&uML%UG%%xtDQk4Pdh2V#?V{_%6g=
z7%O-Mll#C<x{lm3nFN}(YO(9RBZWVL7YVd6CK&`HPy=(&rBbPU2Ytd~y=XG4!x|3N
zy$QPX<GW$14p}w!YCicb$vf$x{+obg1hk!7MHC%4z{S%`)A>u6ST5&eGB>D7TY$%d
z{(5^wVzOMkVCNmw*5Lg#re#FOs@fG4deZmxkesM*_p!D45}t7F8e^3Ox_TTYsmLk&
z*-n+_s-A>C$o}c#%GB^H$>`B(9DlWbJII60G?kaXS-TQuqc!sNzVhFSQnQd@Td5pD
zn(c#nt;m*K@!Ytd?`K~nng)p`o2WOF#ro9tJTN9A+6eLCGt?{oZ;dC5lpW2u@Lp>8
zU^Aolq;nx$4%O`)8&peve8Y#JesV~9c72qZzB6k^7{9wUH(;`0_hM&bvwq;z(`G<1
zyUuK)egDjh>jsrbgb8;zA`zCD#<dFNE4&AL<?dAFZ}G(%3SzL-QjFcF1+sJW*ZQ+H
zM&FJfhPZW)G1#_$z51d4v4Xrij>ftiPw-g@Art(2jOo+0OOJ^^5Aph?Xjf}bx`+1|
zmZ9zlu;oqI;-fPxFk$zGq^;-z{o_;V0@rbWe2Zku3u{*1!ed8Vv4~gkq4b4e43o&2
z(GIG!X`Sq|1c#?Q^f1PH0Mxd4oew7A&?ps5;4+55^BrNYq9CxcfXP6V**ga;WUUT7
z0{E(+25j`AAEY2$f*#E}WM&l#DWrlQH0>T3Lzi7wriy|Jb_lPUSL+NYe`$E9zYmC3
z!jnn~sg>KUo1mlvB{jZRq1T>m^-w&`yL7%%Wmwp#x6TPF3tE+o4>z%54S0T4wxSE~
z{8B}zE7aEL%^?AH7TW(QIx<nqVNnRdL?ozIF`n|*hkDANrE{uR(W<iUc}#uJ+wl^{
zA3*<5ZZ|vZG#~r`s6)X<k~gfcp{Id%%kjlP&L)b9xkOx2h`8v8=7F@sFe}9QJS<Nm
zB&2^lv{i{6A^F3J*f!h9#|e4}e?0BK?~I@i<Z4_ZBF_{NC4=Ylx-)egoalDfvLuIu
zZhu~y_DaxK`ZXtoW>3YKo-u*3)AyH;V4Q}%v@Cew%gfcl8Cu1NzwpJ2S={j}n**@&
z{{is<Jc+XvGcrQQ#b<UlgDo_U{_EWcf+Um3oneIAwQlF@JSWxf>fo^$e-YYKOILyk
z!$6thU?p55aFSxKryQASjL_xVU5{UjyX%d710!aqIEO;WWdc{#;|Wy2h#1O1o%Pfn
z5v+FpYg-97MvxgpR<v~g?P;rkt<FZJo-~Vwkyf+wbU>GQ(e-LL>#-4mD}LKvgEli7
zI<KW*|JQkcbt5S(d#H>CieIBEhmb$1(A<TPlJKOxKbZ`EjZn=+anz5#hKOwq*=}8*
zZZPUVa8is)2wZyX*k~sVF1K@gQ;J35fUYEPjymClb`*_+Q++947Wg$#m$-Tz#g7j^
z+e=GnbDE9gm~v7ESJ2%`^uo5RiK73SnkT>p=fP)tnUCX5z^s~6Z?iiYDXqCPCOT@l
zSo_SDjA=Gi4UW4wisjNb5%n}-2epv<#<+8$)}ef_K$I@-4Xz4kCrNW#_t<aV`D!Hb
zX%(>?QTYQRY8bSSNR@DR1Ia1IICw9Z=qg2jr$jlaI|P9-g^M>Vg0O0>mfmv;^wJM{
za;PV}NHJaYKnKrgqsY6PjOf(bSpQ;Ug+k45Z98HIS4&Q|H0NsMln^l#KWzPS|Cj7h
zkT5{oa9scx-d7cKoWeOYRwU1W^%`=`THraVH|4ROAUZ#ktmz@KH=v4>RtU4O=|ia&
z7+1sZ;h2U<PTii}bXY7pNrCC!2_G&fDxn>toqBddaDm0OL<o#k7yAv#Jt#G$yE#PG
zc7xKXflkg<7knWe*R76uGbG&=xGi-1j%}-nv{U-m4T0N<167VAYgGgm%;7U&A4W4i
zA}Kvy-f;Srnaq6rt1&)CN#(zcsCDK-cPfG^)dXolL6ppMTyf$%TH0@Pv275l5mbKQ
z5&P5}AfrO5fIhrHrlF+>iCb6aBIdLFI0pufjqlC^5zrn0k2V7B&;uL0?H0E+;y!zC
ziF{*;5~waMfS&Vt_8v91IHK+PCPn=$_N{bNDJQ1!cNyb60hG^HUXTkbeanW&Ko&mK
zBryEAwaJ$H%A@1<yGG`(30SayhN~5+Ztqa=G)^qqLoLYw{Ad&x2NQ3++#9lN<pwtv
zy<;g|q_E0GBf%3<e~aVk9q-^!ims;|^Comui}+HfH7aB|YTajj?W<^X%ygjxL6d}c
z5Z*EAUlNwnQ?kXZVd>Gp`K=q{qCSZGSD_b8aIwbBJ(5W3f><)x|GI`&D3UN)q)Y?i
zgEFZM2|}D_p8}kZ(=X?@{1fTru&90-R&k&G+G9Fuz0=R9Q#*3gC*P9_aT{Zn!!ac(
z`aH?+pd@Kti8G|06xw-7(%BS4+RJxM;b_3(nBDix6dTcfxx~is7we1=(0~jsIij83
z=HpZnjRps4rA?*7;<J^HG(Vn32v?t)n3{D%Ynhc^kLB!jk~&5{FAS@ikrdslZKK<F
zjup;17deCC^UlF&6=3TX9=(#102}_Ya`muDBNE!X03&ZhDF8WVL<{@EsOl-W_kSU?
z|4DtN-ylky>M$LzFb^lHWb2#g-kEka6bzN0Ek$8@zf;4$%&V(4#f?7XdY-)A>_ng1
zfzY!oB@E25BtxDY+0HYulPQ?vy32?on?J)^L`$2wO!RKELHhDQc<<Ar`Un63V4oxJ
zTM7z_$9u)!R&1wXzgNH;G5%uS%lTjhb;P-l*zhH58@$)AXYuU%>UMSM(_P9)hqmW)
z&1-q*Zc~+36G*A7uzpwe-q`|s0O=OPEDNsb;J}g_*?YZ|DNHycnaQ!Oq8T?53x<)x
zoO+Fcf${e6>XmFTUA17qN00;;ap-s3Uj2M4JM&kZ!>J%K#`q_UAqCC^IIpj5)whLM
zB1AsAXyb*oI81686(2^WTF3WRlB_obj+Y#a>F%=dB3c|TbZjchP-V9o%%_C0o_?!q
zX_Z|9xVWr2P80yLYmN^=$_NySPd_KN$A!oNv*c&1X%o6iw=W+*sB4-08Ps+z2Mcyy
z80KQP4YKLlI4}DRQ~lVRr<XByWO2POe0QNLhLPdCa*%nYO@)0EnW^AtGwkCs(kD4O
zcN$ZE<gRbIC|q_0exakJlqf@)vdI!NrZH#N_gvu(NqkmTTB?hGwGDJ1MAuk|9zO5@
zB(NedyiR(b_=0Bjr%#^r9_)H}{{juDPA5e!m37RW$kb*`EzNoxUL3{|P!>%X`-G5q
z>a%3-;prP|B(Gg<G9fwaG$R-Krm1BCiyZ+Bzv%EGh;#`mbayLggC1Gs9(NSkWl7@&
zZRbicx`da$E9mO-yPl{U6Tl8~VLmH+J1PlhZ<bhn5fqI}5eC;wmnxdMF`Jq#k1p3g
z&$vvykw~fqNFU`VvGnaItQh#f=?G))53h<*Xa-q1ajw@a47L&|K)9o`NaDjsyJbQ?
z&@U91eLOnpreysusVLqpljEr27;+WOtKTIIbi*TJ1$|;`!C0q@ir|Wmj*c>H+Yf6b
zh>S3TF5JD(f8PGX`RftgXLxPM`4BL9q}BMhFbg5T1tP%ywK6-diTb%p0yEm%-nR0G
ziDI2-rJ*JHGJkWmwOsd7p&vb7A+(cFJ*%=#t(^WP4}}H!-Z|uRsiSmDnq<yDQ+*g1
zLIcbYhiDO^n{J}>%+r2NufMq<#X5#4Gb9nA2;-*~%H>dlDQ5tb5*r;<I0+=Z;0v)8
zLoDpQ;d>Agcd|xb5HW)LtT11tKGO~WAR+vWs8N7n5C=sjC8acaNsWmB1zj?(#9RI)
zfR@ul_V73!1(P)o5`z=IK{eJl_Nzdl{&NWhBm^-w5t^z{#iKey?kL$XeHVX>KCA`K
z@J$NSTln?>Jfk^mxmcXrCmYQL$6VNBZ$^Ht;1p7XxgaDKdIl75$*RTb2rvae>!oe$
z{Nt*_6G3K<AO-8l-I80*>&p|<*w>i9vVN3jz!r!ciVj*}(xtPwXqMKtR$$4|mm``;
zYZ?Efv6wh+Q(}$(YQ~koq<$29FJMK71TNyXYtW{t9{NJ^K|LFw*OthC@Z<a5wG$pA
z96A}mn(;WI3@f|%Is8Y7QV}384x$!;xD5X)N$Q#|5|k%zggml+?+qnhFZ!NYLdF1}
zta;~y`S9vw?qZ@o`a5oZwQzth?BR<mq>Ol60{YSxR$4)LjD|Sj!#)|2&oxR(7W=OP
zpp}sqdIx}aE~95Ahzo{?r4mdaO{NPht30muew);Ga-HOY;)YNNcFQQ5MFz=K!Z2zD
zqGXIJf+;*PYava%rxL%eFHc`b=%u0|J(g3TvSdiB+pdyvI>=V-1`kBd<Qw;UK(frH
z=5dTG29^DiY#Cu?U5Y0o<bdbz?ht~9qyYoS5@Y!7eJ%ky7oXQ9V9@sopdEKVOf5X0
zuUHwP%KEYHdCXzn3;kDjJg)({s?Cic^2toR?^;7FUR{G&6=fXSsBkMXEnxjci^$io
zx_DG}uZjZ6Ok}7S&EkII#RaniB(o|x3KDhVsE3Mp=kRXi9gVoVy&x=YXYg-BZF)Qi
ze4<t4Zjb$}yFs$pfA|XxXRyN#y22&-qVMr>K+J=*>{tw%kQt#SkkR2ElUSQ_dZ-xH
ztHGqcx&!Dupwm5~0gKm1@00jFj6gV~a{GG^pnTb2GV-lUpWl7Eyh1i9IXOX&G#(&d
zn7dyXKttUDCL%27%W;ISFvlcbt$wBGdE>lCQHv}8OrALOrF;Pp%>^WQUS2{wCek^g
zfEfuyM{>vcKtY4wsoRPL8T~jUCgKMibP$#H$;Q#}x{7uMB0aCu*BTV---y8*>+8{d
z=1~oNc4Dv<dFjdB#m1xZol$TMQ$E74z(Y9gje;YRrpS@uGt`JaOwWMDXpn-#Xp<ep
zFTk*U-Kec)U7tn8ydFf&3+&?EiDq**0{)_J8DO9R(}o?bMYi=>tTt#nYo(hUat{Jo
zPyW?25r`5e(K!J8_RM=0ZhP`w3I%z!oH+2RMW!KN#wo)Hc5IiZc7jE0Z78vv>uiY!
ziHgJ<D#|B%<8(9zEBReX9AKf(;M$?*p~dBEN&=DQBZR_70DV_U^4TOBrLTOqi&sos
zZ_P%rK?er8Iq;bTzX+sF$1~xSLiv9nrDTXutpQA8RX-nbgGi@DeQNP9rA4t>D?Ne*
z0^RaS^l`vB6S2LS=t%W*z_u?InL1>$cs*D@p)w#YbPHX8L7ial^om;$O2_TqH2}gA
zapnzDUHP3Sv58b{urN~fz0pvnFa+EO#bmLi#l?ao@+~h-<|qWX{&B=|8iVMMm)mVK
z`5XBn#l#}=B012@>c3syL-j}enl?z0%i+v&_$d@!SE^7k#d_<r${e_>POpg&kv5{D
zqLPv%Xs9ZL2yD3)IVi_BpU*P)cRYtNE>6Hcfb;zcIAu7Sc9#CCj;%*|{#Quu2BFv=
z5~^MGz5vZKb!R~7FV$h=g*LZy0O)WPC-PycDqo0<)BI154Y2i`k#4pmC-SFVEYDED
z?|aG3B8o<mrlk*GVy>K?+N_Oy4#}!cjI#Ig;39CyAHroaR9+c=RL4~NR6&1bdUq!X
zw!H_8#p83?e?R{L6sLi_$PDQEZS`RXF9$6JGz92fm5e$~@Z8-3w4xP3OI^ai%wp4e
z>%e&1Nv+dH*2iUYvIFTw8PGwF*V(6X76>1jRzw~&D!Bq^w8%t<hhzeG>QqW`b!t<z
zG!)Z51mP>89*fUtxAwX~#>B%)Dw#fEfD-#m%c~8KHpo>|#%mZ5Vx9oSsy;;T8kdY~
z;txOz1QB^y3v~-tfW!nr>L7@d@mU`kSLRz>C-Mk&G!EMyz>}1}i4qjeUM!EToY4+2
z*@x6g71$R{)jAfWe4mwsF-=Tj8SyGeSv6<6!7@~BPrU@(QP}BJ{!<{-t~aOPFsvEG
z<dwzT$L-ibT-W>8h|Fx~Vokn>q{LX>ZOISvU@S=-yH%|J3l&VUZnggS%K}9|-_o>G
zVv9SuZc?ST0>)>zmz8{{r)!(Ua7shn$<NT4*t6n_l!s7P`<EJ8II!4!KUfuXep+`g
zJl7l(_33x-{5mXdg~sS3<J%&A2HLEO)wh#DNJ5fb-yN=ot`BDf-n_T--@MVGxX4n8
z7x@kdZ-2i6gJ6ckz3+1;=vDjlSz&j>Wc&NbSt-&#TVuuInqerT$5Ma9u#8hu2*B<w
zFNNK81_nd;fo9llx+}v^j{n02K<F69)u+3qiBI88F)Z3g#%;}F`aZ9k*}5ikI7Oor
zf=VXUpXZQ1z7LQBEq?8ZLNG+*NV1SNKSJq6hRvYBmm5BF*;@V18uUv4t%e4q9(*|c
z?HS}CFz(&^7K0<mOd5M#Ainsk@WeOq#e{l<fYT!3kVdM|B3RcKPjtPh{4Tj^yR{Pv
z@jXw6(fK-n8+!tfYF%M5C>SnzhyUxkgMptH$vbWMVId5#(oh|n3@gEBYLA|_m(BQu
z#i2QCQ|%WBYYdF+aSbuTyG{Sjc?vZ_Bi1K3Me}dw&hY;pU=-**3l}=+$}FVtDKGQ8
z3%THsqN4lQ+=4wn@y}*~`R@Fw)Ef^{9CDMGV)q!ry6sneF)_#7d=yAt)^In~sp~;5
zvgrKKRq`0-?}ly8hpdjjBqJH&LRWKdnb%8I=%l0+iLD4J?ji9NX?Vw`MWAYDGP9Em
z#FnaMV#i^Kd^>jq-eQ091Z0$#o<IAI>sWa;u4l+{iU}$Tf{U?i21>7Dq(rA1=b5sk
z`N^2>34G4PNhxND8j_hcj_&X6Ww14$MG-SWF;-Lrry#C%n~}YnnfM~FvUWP!^vE8I
z=$vTl-kMYD$*)$??s7cevj4-bp$bdScb_op`*~^BlS+am{qk)3@<I_HtdzfQsh827
zr$%rsQGeAbyMNHe-M&~ZH?KwDw>iYUeI?~5cB5pFNfgpCN!U@V2Q&Be-2XiJ)(6Q&
zJL8SzAe`Ep=yrbMrL|b@HsxwV(|YFoKqcpB`pEw+*K+Vxm-jdAQL-->_XFUSpS!Wz
zzxQg~DK^wtEmYoI{7g^C^(C<sdh)GCvJNAICH4n{`2RoXl!#xNtfp7amQ|OjWfDwl
zdR$|<x9Uqa?t2It=9^zpHW;{eNEes`IMy6F5&KmsXM}J#NcMybblan-(-jZ$lLjQ@
zj>6>wF?-Vc2z&~R_mN&#h%$k}taGmoJ-=PLH#N9;{+pq%x<1?`uFfFbYokjT45{|h
zQ#-GVDBW@}MFT(x?({~FSFj4V3YD&cyxn$<d)NP{qH%5DAgrqFi6E=oCu?)!qN?2v
zcNPeRo;!UBU1k;K1@;f$hs*`GSE_9lKVM~?dlr?dCJ!A&au>_;JhqN2%7DHBvRyZg
z8%0?}eANyF3ob6&W=C^ss+JOZ3zM_mIWG@6Sx&c~EEO(!G7j|uZR{Xg;ahoF7bd>Y
zG=h#c&SknRXN0nxI%3_U{&U4(iK`tU-)D$1j<u;I91)>ju@<+Q;D>Zks=(W<0AfeS
zORt$14H@}I77`|9MU;830<mrN>k5%eZ!l73>0Q`w(Z0lfEWxQTU)*3<RFkew%mlQ`
zvWj6Z00_nF{Kt-)9->zTiWq)bC3}#ulJwG#efjl#_rZl18rzvJqpzRD>l_-YzRNmf
z$Zvmx>MW{!osN9CR(;|x)=YRU{whyW656qt-m(35fBv>J*70OYQRG=BOGRyY?UZ(d
z!S_vh<_fBKr}SV|%MXAdWg_|A_izi59Hw(vfr^TDOAf{++~&(n1&;|I-ivaGT{pU8
z-8SZL_{TP4*`=M0u)gx&&C7o!`>!(uOP?=j5ZLT&z&9C*>9BC!O&cAx2^vdWSaVjh
z>=xH~D<C=<Z1rf}JE4M6VhH(W4Wr?Yd_^3D^tk)zM-?RK5;Dvp&v!Gs@f@?E%vch{
z4>zr>EjzA)+T^e!o}*^T%O9&$4l0%;dLZNW(+Dm7F7=}EqjjAYQoB2w`t6I=D{Yie
zfh)UfnmGr#PpMN9!=t>9E=Vn;JCgWD>}IUvtVRuDwb~$PT&>9kM7UWD`q45$=R%^$
z^uf}hz{@%&C~v-Ta98N;4wC{BSr82TKR&Gek}qmmRX`HkP_#Y~hE4fiHy`(_TBqlC
zTvcVD8tWTsiUjEVt|J2AQpenW`>{!<o#Q{RJM~duP3kG>i4{i*+qC;&Kp!=K`Bbrz
zZ?Vi>j1TPG#Ev%zR6LkdZm-0{KXxtgVXy4`N9Dm&<6>FiQI8>1&hp*DWy){3{Ep&S
zrUoV)zxMH@4BZ!rc4m7!o#`a+kikb~MUccT{J6UrQ<eN~xvP4Vsa^DIbGUQRGoL2!
zm9HIEY+ca5POTvnDuY*UI<-=-W-e8I{A=!8E77R->)eCkaqqo>P#V<A-tj)K%aN=d
z`%piH){;@5qd-9bnjt@VWBhBv^v9eAnl|Ote0*685GmWPLsTrfGDF5Rdsd6OV{_{E
z!~GW`2Ka>Y7RH}m3OAd%TfR3=EaWOruc+MHea;v<Ixu`8>B$K>(3QngRH?!<pq2;E
zwt?ePD2h}|DLByLTrKYP#*N5~&Lj#)?T>M<lV>nO?H^cecVlH|zQI2Ku_wS51z<2D
zqk}S*)8S=Iut=5GU+Zjg1Ujw~%Mynkt(P)}X8-|=Ij5Xtg4<$KD#o2xcG<=tdckmy
zxUR5G$H-CiL>gAD@?K>SXi!Gp;yQ|psoyNhB!b^WiL+jvw;1!AN%2u>M?F%h_wS|w
z^5a|=`IrqRh#87!6oJng1PUXsk=z=Fufp6C8RJuwg<`EwE<Jue7g3tBT6EL*iudp(
zC_Z8&pyi8`JF9@EHu&(tsEAp%Bc;=G-w#j!zv=yde@Y!p7Kby<3)2auL^^NfdwNB(
z;mm<PT&rZ$AXl33`pUPJq&cM*-K3?0_&Rj?{mq=(pYPz;J3k>Pd;VR;$9x3ImpPO|
zQ%_=$Yf{!>_&RN<6865l`e=lA`(a|U2~M$Rak*5+hT?$t#<x<oD2-I;%CV1?K~W;}
z?Tn{PR1~N84>z^b5|5Gc%x<?<NKB8FoHu$=G>2_c%swNp%04;(iP41k&AeXt!cVw+
zy+A4*-hqvVzNVA^_9L*w3c(sDv<phGh6#p^kB2uGC%2jjsv5Q2U%e7z5ScuEo#v);
zUvqic4JP$af=`Lzkqrrre{VHs$`2%^(7d~hh&3eMxao_%R{aE$n~d+1cd1=}{O$x?
z_cA(e?P&CrA4pL>3!M!mFKa&6hucCoU06D_i*px!i&G2w!>+LzxU=-WKN~d}8p_3u
z%K)bl6lIW!dwqILyb=U^-{#bT#=H0O;S%#dZ#S}_J_Y=>Od7f;Cg>Cz)MPTVXVt!u
zmBUhK(Psbh<4|s{i3(AR@{XDSZn#rXxgJ3PQ+U)wPyjaNdMPG$sJ`mAblL*pyDS)2
zah6p>>JoXM?Yh*bdw<6}G;izul_`t14j=s;n8)zSN<v2033&P~vGb3uPYoUSC10QT
z?*|<(?%R9YqU!Fk@TR_oZtA_L&u(sGr`S8^FU+2q=YQlD5B}F3?toA!@#{Skpcz*Q
znY&_=-F>u5IJQVdG%_unob{w^`&IUHq+NMsGJ2%idTdQm>^PR&skG67n-j4xg%j4s
zZ;xU{2y-(n6$a;7P)E-1$#udC{Tt1`rVPW4>W%*}3rC6uPFl{C_xD!ewtt^gV*gIT
z_lsG(-gloBA*_;2#+gpAtsqTveWyO2dz?$G{VFxIDl%_*Z1i4p%4WHpPDv&EK=je%
z;C)DH^5=JaJc*~9?-e3E?0+IX&#_ObYrSnypLoxGmAY-TJGLu*e?3uty&C}2&ZG_g
z-+T0rLB=KquUIIfs>hkrwe*3vlA=g>c}wS#rD}K{&=JUbeGaS0urlAxuIbmtb=9Wh
zKOKS}$YC#{NfEQKZpyebe9w}y^9|LIG3*h%dCw3B^q#qart2C@ajoz@GcbSzPxN#@
z@Z4dhfCJLA-vhf2q(u2|H}H?i>B3MLE0kw`VjGh6%UaKhwP#ynJ`o4~xJ=l7O2ODM
zP;p7nyg672n!nPsC2}z|=&n^uBR+%Tz=HNvrCjO4BJSnA--9`d9H#b}dC&6Fe#F=y
z6-~?HlXMs)_wuruLd8Z{tUJy4AF<j0w*l4O5T4W^_;R*3+RmihgAPrnA0E4R=g$*<
zKPKNVb7VkW%`|Of^IesT=-nM3ZVj-@+R@jR_8_pwYfC2<t?eGa4*z5&*^^xJ%F(&q
zPdo<<-;_z+lCot9^%a2GU2gYjvt)i@T_WSKhW?k&_{YtkWOR=I7DeiwedMS7z~1qL
z*<<0Xd2RJ}Z9C4`k>pc37H2}U%c8@Oh1s_--tLgk=8kBX1_s-W5oPwv*SDu%G8>X0
z=uhgB(nnUlG1Xsx0wqXc=+m}aH?15cGyPN!JRD(m8Q;FX+C61cllU*^`#-+;L$?1g
zW6Uwru2J;ub+F7%Y0IgWt?vXN<?Es2lQ)-@U3PTZl4g8rrAN?lEfzA)nE&c17*GO%
zMXp+7W|$6B)uVl=3r@>&o{W7dfJNj~;{Ro4s0ak2q@v=8((bwRD4ZVk{CT#YjP#&>
z$p7c+|DJ?IPYiy|X#X&3oV9ei!s-2Fb?Tlm)P43?<2b-~?7NlOFyZZ?U5|PUL6Pl&
zk10fG^0T=Ny}m_IaZ{wnPkn>5*IV5?=*nbH=dr^}ig~UK(4u>JM|AIh#CW5oG=Sl7
z^pKivROyrTiE9l+^_N@Mg+@J0PtV;SoK9@}RHxRK)p9+tksVtlYpn_Jx2Vc*YwgPM
zF5!Ea?|Qzp%2F^!TqY4aeBOTCHLPs6Qb`C}u&FHY=qHX2?R-}hcJ9r*SIIFfVH6z=
z@#j5r=YsgzIa{`vmWQ=c&(lJ7#!>Zl_HD&C9h$LzN0DiQO0z8I_L)Q8H`2uehohXN
z%A0Fl`ay@5CFP6L_hr&v{NfcMvwy`<fR$Z>ilm-3Vy>7A{+)-HdO^B!S>jh-dpMe!
z9$}a=R<6}_^y6ca1iqE_dLgIvlHH;$0demtqLH$z8{dq9a%d0NACCkJpg@_l{w<ek
z(jS`T%*fKUyOG&;$>YKxuG`m8I#W_;B<~^aa9@+fJI#KXHS$J3WMW|q2MNoP0v1pC
z=hMI;q4kJ|8^}FWf5}26P2FH^+{VAnSvCZA7n)2Tk1G%0d-Y!Fs{VRVM^2-yfZE-R
zHQ&9CLv|`SyE)@XMe>%~lSEAJ`nO92uFn&l{>UU`4DsN|`07S`htmv_r_mS}lG8Eg
z!ckeyt8m>TifqN6QVT6}?#Nw}$GCt!1dtkxyW(ixc2QjHvQ9dE{_oJ|A7khZZk1($
zt>wz}W_Xui7aJ=--e_i>x`#GZy8k?VRP=0Ums`}b$ET&7%Yp-Mh%`w+(To2*qo!VG
z=_jp|g%*h8k4FmXQ$uMhV6&;&j`6=;^v{YGN#S}-Ifzv^ddyb6R%&=j;);79k6XSF
zDdEb}n&DxC3y%i0U`S7)5NSWE9kHYcCvpC<s`~ek?-R$8Lm0}(tOry>UI*)jRYBG9
zG<D~?_IC{_1yiHexR6t&p33P(Z(p+$4!d>R*7e2#KwLRoE6W7%%3AVyyn-KtD*v*s
zu)N*@gQ7+T`k9C6q@0|LH^C#{i;4`y9~!H2^qzV<<U;UP9-d2Wy{u3x*X>6Q%(4wM
zD@L(ZLM;ee#>yn+`^h=I?%fOzHNT@e9nxFC{dpAx^}!&^rD&uRVJfjQ)UB?6%`bkZ
zt~=e}5qLbI;#qhzZ!c=D{WedE)jKqkW5ij>1Sry__x6`Au#1D6W3+%{!|61u0eOxt
z+^guHW(^q|4!r2oR>*t0GUd7+x<n`y6!aLLrqx?FKb_|Tn3<ivQPFI26P~X`FM(<e
zy571I!7Xr!%yV_jDjiEXUn+;kzD!IQ<DmolAk>0({qAq?{~1!s>b;T}s1$=oWV9Fh
zC&5&*T6xQbDIW}*qwAQug=gKVz3g$y#v<Vc_98W_Q2F(jn+y$8;ffnHbE$^}=TPx)
zqW&2*<k9Sb{~d<>Pxi-54e??)%vI}&ZfYTY{3UTh&*e}@?_M;)653;VxaU{Vij2=#
zI@Zr}^GdqNEcuSnVFmaEE1?{AdI*#6rF*|}Q-d5u=8%L(!CP^hq5kszn_KX|DiMM@
zl>?$|m_BUFW}H7fKioa96lT<sp47`CyQWKg)O{?&)4NMA)@l^4*jG|fnX2kRkdh@=
zgVD~#2v~%c^hb8`w}sXb`pX8m-$Mkb1X{>wFhGjO_OpLnOY?h!DFbPf+1~W)B=wG^
z{A7KI?cm2_A0daoD$Q{P#S@04VTtLQdXk%JFU3h1@;~#`I5Qv{GG^_9)ff0#eb-el
z>#(By`hW%f&R+Te;tyYf?;P-zlE|%o-d$y+tlwr~<G0_s;zZNfz|N_q7WT4@iOmb%
zMyhJeh3+aMDS)_ljvRzA3#68sCZ5v8mSE&Pc-af|0^*3(wlM{tF9#2Znp|`UK3_{-
zD(<W+7LG+YV7dQQsrYB3=mP{xRlL&Y>+@;HFNt(@GS=sd8zOPsB%Np%QLUe2t7<u?
z*qGXKEie^xM-yx|p<r2HUNKL#VDhQcv$9kIaUcVb*r})}d9udaeKP9)xaD90Qz+)C
zwuRfnt!u7bYG?Po65PAaO(`F7jjm?kckkoNbbqr}Y$`!|lqY-9W~97CR9L@b6b%2g
z`O#djt!UHH+glqB)V`TH;>0(eYbgHEe(6B?$J#|FbOvV4TK}%j@Y$QWZS<R2{mr15
zmIPmySf*LUJ5dnk{B8{6JS60pg0kXqV%G@I9=I9c9YRQjUZumz-b;tB-k<kGECSE}
zVoQ4H;-c|VnmX<e*RupHzZRmg3C)&g7~W2*y-go2w0FD4d?Tq!E`%S}p6EtUS2cz`
zV<*`|UM=uB%nOvx+EbEdIJr8M_j`=7bI;e?GSh1x|MV9xJ_viA=Y6au;I}{}z=}8i
zZLO3(u*7Th`7y>y_jlydchhU?QQB%18;Lj$+8zjg5r+*pmauKkm!~XcZ;fw-d870r
z^)uF-99h~c9dEMZe*~!DkmAz%w|F@l&+<g{oNMfa<SG_zi5zXWalg`-J|5<(tdAtF
zUehtp42lM<vt@W=pYfCIF|QW-9OQ3H>$#<oN6b^_WMs^syoHbY+;bNFWufxP^aXB8
zmcM0yv_G+&?vYtp6LuV}=Ig!W$gIfpS=f4l)apgpzQOdDLPpOGg>BBG8Gh)JT^?X$
z6#qusS-x=WYeOV3rp-`bQTkrC;vwHBJGmvcAT#t2>k>q-FFT>yI9$PSgD^^}6r#42
z@wEJ~vYe6O1X|E;YdKUkTe>gv`*}0G@$qv{gZ5@#t5s`Fb#4;*d!4x1A!e8d!i|-W
z!lPak;@9$GX}D>_Yz_IyGip|~mJi|UHlZQ^`o_*-RBG!|)?wQMi4zQ=q9coIq4P5)
zA6wrm*+!ORlb?&u`#T(EdY5^owx&97PK_iO#J%{_cuhoWsv)555!<FRY9$iTF!Rmo
z=*vBS5$XRJ$p89yM>FZ5N@9wd^m5a$b?9!<sCVBmPp}}rY)vv!nr<<UZsm6)V0yug
z*2;cT6*<aT0E7V|o;$bsE2V8G3lbYolQMiPN)~&*-Z@HtNlpULCwCZS^|whKRMru(
zma+V<=I>rkpTDjgR}wZ}7O=0)lTqqEva)H7LUS@`beR#KZ@0TdB0FtlhThUA>)v|u
z@liNgTaTs~KjQ3)@DOu<{nrWszn-8Lw}p^0ixpX7h+Wr}MU^peE$`;S)j9san{dH8
zdDQbvlr7pG(o9w9M>hO$!4$^2Ow#W0H0{!nFac;`XFK;NYF2z}&m;5Xr|e68${YCe
zmM~93z+V~sG_Y!P+FG!C{`HpDau`}dtxLq-C|*(_FU$9YfyU%+lG`^Vn`TaODfx-=
z#`~R*08xQca4J$D8!3^6&ZQae70!OPS7m>Gf=oy%c`BKs6%O>j?FpSWaTe|H`fXH4
z<3rFn-iq_iazmM0eVZ6I=EDif#M9}JTE|o{$gI_3z8X=>g{N^|drQBE$9sE!>!;h(
ztP>xy(##M?ymrRM6sf?|wXB@*pB@HUs}rgwrfeHVt)k^>&vScJyQWo=bLBR)K2q;e
zbLU7a@4<9;n0&N+swIdI*Yi#v*m5Kg8$^!9Ub9}jcMVt~>nKWd1;W46;Q$N@W}|%@
z3me<E`9_<G#ZOw!HU?#eGu>F@RgCS%w&f|Zb632X9IiLsQ?I9QYxOD`$8%+-IMGFg
z7RrpV(-<L~hCx6?Sc5lg{}*enh-RLy`DXD=v$n{-<ftKXHuy72#`;}l`)-cFa`uw8
zTcVTOoy-?@oraw_vJanb)o08<p@|A%b5$Tu>ya0{S<5u${&PK+wIl}qa#E8?kW(B?
zN3zFIt&9>~y$o_&N6)NpPwhelUJUY&zEKk7sP6`rb9?uY>0X6iSCh#gt1^abn>S?2
z7xF3zQLZ2Zg`*D_WBJE_F|m=z#nE*t7)kxyMeJobVvOgycR{CW+V~Zb>57XSYz9A<
z=g)TK`K-2E_FFvpoaR+HFHKS#^@0u`q0+2-XaS#8?)KI9U&ZZz>>!=k_gUpjV%9G0
z`D`Q|b160_c_8rK%{Ut_Er9KYTUm2lkPjmJ%5!p(;@tD?h+P(2%%Iu|qGgy_r&Du4
z<i#o?wDr!J@Gn7*{xwwnWwTSi_>JafE6<+aWl)V@o9|w&UE_AW2KkIoBW3xnqW5Z)
z9)XRwbsA1$v2ooS`dF!B<!BGrJQ~XmaW1BlyB}?EYLD0X!KZ&8bD&qj3K^&i;uuQQ
zTvORI6Id(l^XA-0uxY7@JdU7iGg;z$oJEY~vDwbtPc2sV*HD&wt5Z~H?S=~2mf6=<
z)(}gx7Wrpg3O;_d{oA@oe3w*qD%sZ@A5~j;?$mZL!EKuHoGTd>=4H#awdQ*fOJwqs
z{m7~_ljY3m>flG?Xx7b4AM`rSFP1H#SnK#h+^&EZ4alMnySoGX(IABs56)fu%nCvW
z^#3@S`eN^uO-9l!b5|N>+}1B5?!FCCDsde5iDLIUFlDY+TRulnSsfCkV7Q<u6R2oI
z%UQiqW7ilg>gBJ_ZU?iD=DwaHJ0jkkK6&id$xL`L$B2tmox1YK&QM2|O1*&s5dYjA
zY}){0r507>f~8Tcc6D2eu&sNYMzubJ79&pXBgI&+KC6>lyx~D|&Cw!+KyJ3!uqW5^
zn!DgsFJqkcpw9{S_)2i5K%ph@Fp4G2j{F+?&u?h1@-IuVm=OK=;(i>Whj4tOVrqjM
znkA02^!>J%Ex*pMMk(h+14|RnxbZ-q$PAAIh-y$;@;!Mg9A%(Vq?nmn5Aqg%p1Cw=
z+KBe|Gyl10Ch#ZBA%`k!BaG*39zF)E)~a7q#JooKHdFJd<OGVa<Z#fATT%+0I3sIW
z^_DdAKY9N11yyYVkaa7k>ppjDo(<nPn#6y-vLgIDX;iK4Of5-Ux3+&`I375@$y?^u
zn9I{Qs>0-d7+rRt3JJ0J1+tZ?8f?gx$ETe%{y*>Tu=@5?lI%TP%X_!#^tNaBW-1E(
zw>R&D7xi!**?;v|Nlt07vKVkF^Y-<uEYA8JTvL~Ag<ByxGeBoFQj9VnR>&%IS&8!8
zXRjpj3uMXNLi8Cs)RSuuka(zE+KqydFpfj`Ge1%Vb&h>(?6{Wi<7>K2Q02`goTlq0
zi!FP*Jk}b>Hl^LqD^KC7kh3k#LwJ$~tB@&}BINk!B6?P3`n3!oQ<^F(WxY{V1bw^1
ziQi)RV{MStyCCkokMrC|5Qka;4g;}Mdi8_WL?S)E<vN-2gPxnfan}r<LhUSFbZ9xH
z;U#f7AX9O+EwN<g!2VeZ#y0U3TWu0>In~k@4f(HA69A~g)%7=yoNDT?Dz`|{OYg>~
zt$9l9@Axg@;aQEdXEA_gxCC~4Yl<>$+boP#LemOty@R4+ZnefbDQ>)q$|}LCG1x_E
zZ&WA8OpE_wMTz0bE6t7?=0Xm|*V3bgiI3{{n|z+hPI+@IIrn7tv{4$$s#|==&~j#(
zej01BK&+l(IF;d0|7m-eHzCC0Et0cWudh4ks~~26o=IH2JvywEa@3l4VOorln<!WK
z6hvw9M6UbChMqCxf|2Z@8cw7C`6T~N5iHm|PeWPVk0lnV&6wlXQ5`M@bSq~G#YgCh
zhue8FANVdO_1xtQaBr@2^}_8wWC72bTw~>q{xgn=2KkQ&n_+^+gloRL2$b@?Jp^en
zJ$qw9im9k7&JHFLIQ3^bT3$9Q<q!Av$ABR6mlJ`9Wh-<28K=S$+fPE3vuPM>Qkqld
zrnS>OU7B64?^W0Ir;{Q{;l)zL@)^ywObj)Am$y~U@R;Nogi4VGc6#Zch52v)<rzd)
zwWN+_nI)&yg!g5BSEE)bxk6=HF+baJ5*`xYiJGpSz(aJiqlsq!XREvOT7hLCX2|#P
z!y)+dY0T^p9@?pC%#+LfYo~6{GXi~hxB)Rcq~Y)I#ODcJi}_AJ^F&Ufi?wxpd6<lj
z`pWMO*p@ImN%%jH1W?8z(Z7;n8-SO6-(<3PIh~YT;i<xzy&$7GF1|bZv|*w;7J7OS
zLJoI%D{QcAHIM%g-ZL^%WnRk3CP~$H<2t(*EA4m`_mAs-KrHy92L^N&s^QQ<v^pj+
zh_b26lcphKrL(=XwV73FeH9<aa{Njl#?oxpVXaouRn*aqu5RZU*cuYQo?G$}&FQOp
zx|?!Y?|?dxbbxA0?#hMizYP^&6$8RZ<3v@=ZTz4d`{E6-=gZ;Cr+6LJGTO=7j)v12
zmIGwdl}syVq62GaWd`Q)Z$|Y_IEx^}QWaZ}F&kKYsZ;iNdT5Xl&6*B5{#<F`?cZ}L
zS;#e`j^?Qae=biL{-Tl=No8a9^u(_`VS1*SOyOYI!~|)Pd|ms%T2Dn_mhEn-PN^8r
zR4`sxa)_;jrwab~vjf=5C%XQJzb!wKv>->SkP0rAm_;Ux6tgT&QUu2w-$&by-y<=h
zC6TTbi4t4A-R{%b49D`H${wcoCzM@<cQX{VTOZO9wFjLq!(6aJk4I#vh$^4N?EVs!
z<zgv>mo#{5D{`;MGdC2-GcY@(H3?i^kY{J4ZE$PYx!O$OurZchI^WEW=yJGpm&6p<
zmQOjc4QR_se`6vSIqw9!1(x4wqk;?VU-s&sU-c~@t+7)IA!PWrYOU3=Oig@u#;){Q
ziOcrVm6WcshGk`~E#%uqzvetDUxg=L>7w#1jPFJAs=*bpa31dGSks9C&n{fG=#TjG
zIwOP&=C=IOoHN_^{yn&;KJql$Q1!MfCe}k;R?8-Ka%2kfQunEq(hB>zhfz_Z5>a+1
zQ#B=NNqH91NU-EiLKL?(852YdG>4JnS|I<nxf4*N$%?9tlJHvNcSMmEUuN3!ACJ6-
zL%b3URf-fTIFY(Nn|MCDKK?&!ePvjaf7rGn3WA7=fPexPB8`-i79w362m?lr2I(9V
z6_FO{?!iV%H%fPRN;e2&#9-TV`@F|{9PjJ?AK}BjUtN7(=M{$u6Q7aQ?Pz<5w9`xH
z>Ta(3B2<t}sFgi@qyNDV{sw<lNSgF%8vZ0N<@4Zov@DEQ9nun;^TC8n5eT31o%7Z|
z=82hDxd=gfLtU=&((0U|#~9)rddnAp42|}g>bY~IAN$QtO>SmUYOJcyeYRBQHyOpa
z9HSpO9GLeN7Bt}qDOY33<?ff<R&wfoT$M1SD@{@LNzbky$cj^JhxW6Pe$TM^q5?#=
zAie~~BUB=W&vELA867E^Fi;!qo^;k{nzRdN!;K3CK?zZVE$XRJ-fwPyp2ydaNz!5F
z9xjlRe(#)b*3F#2^r9Ea+?c1@a9o$$oP#a@TIGWctrFeZN6rqSGszN*d6Vjo4oYu$
zs9c}bSfI6p{BI<@CQ5oY0(oR$upeKbb@<5u*lEmQqB|(AeYwCw_Lpdc+|bA*V|}IT
zew=P&EzBtw{9#<H7SQ8?#LMUYzsUUm$lGl_UrtL<mWXK0dL#d=G{QQcC9~Y}f?xCt
zvlXxWk;Ot{&kq{8^{TjEdR5QwuKcQ#_~aq-vinyp{{a>0gTJNYTU09X(!_IlcwjMi
zbhtzp?g&w<H2xKvp{Fi=vUf5`CvJI@-&t8LMQo(~r9cs!fxUCq9BuUU2Tzy473^eT
z=hau)s|uhqDYh>Xa%}%f>@8W}(0t~Z&hg5a`03bc2P3eVucBkZ+#mdety>JVzWkZ~
zZ2UCSrQEjdw5S@Bpl3^8iMwu3OqiX@wZkIPYeus&ESh2uRX-?n<1x(RCG>h$n3<r(
zcM?JN6y<$DTjRf1_Xff);2UtCuKH)?c$87v&&Eq{WL@TuGiaGMXH3lP=LXhqhu=<e
zZK|40!X%Y?uP`}?YYjOrxkP+^0S*dMI(amu03<GNheLs)7k+dTEBs&^V*R-3c6dz}
ziPL&Z<@_d~pQ%Gcz-YZ<D1v@XwIvo)F;}_xk>4)))bhsb!%-V+DIJqex)i*kT-`~9
z(jb*$N!h!iUe1-TCJcv6y;BXDbsWul8og$=c~jdPILmlG9-cL@Q%95upLJN}Q<A5Y
zXW^SE93>*9ExsH>#h*U}QKq-2IO%TihV8_6(b0`_F-w>#aYqsJ-tHudds~Z#V->QJ
zLv*e5vdZ9r#$(e%^vYEW6n#R1a;uNjaz}(?CHnxj{z<1ksTgv=uj9S{ZwA`%=|zwN
zs!>syKID^{P?wh(|5qz?SDxM3FEkspVZ>Q?0)0o_MbXFFNz)PcNZMNKj`nyoYHG0B
zr&~P|rL3QKFW={cV@iSH@2S=lJ~G60EPAr9baw~ePy!oUX*^SHy&cZdO?tR*d=*rG
zU0Gzm%AJr<{MM$&)WN{^WXl|hz(uSqEjhol?yeZ(lH3yWu|4c>Lxy-(t6`a`q=QPY
zDCZe>C!ObT3h>|C;kQgVxy<u;bzcNotFf0=p3ZsjuA7}Q(&W1#-yF?+Cy5O+EKb#)
z<QiRi-$SWg7WKnu7N8<VR~|YtW+7v`{Yz*d-3P6!eQ>)vtz8PRdK#rreqx6{e^K4f
zaSeIS|L5(Lo%|9`P=*GeIGtX9X(QR)b3@9D!XdROTAaUzHTk&dtPn%U6oWq@Rrz9a
zMoxDF!;(`{9-EKWAG+kPWR#Z5=|xiqkcBpasQ54B69lv2%ChE=Ju<*dhNpZ`<rRqq
zh$(~Dtp)JpPV|<nh_gNEiGz$0hy9-GReK~Mh3|QW9HkpeM%TIPyBQYTC25NhXBMl)
zNBM!Hl~1<(<fC-m+P01rQ*5oUIRboC8wCvvRY7H3RZP2#HnO_Yi8SZAuy2TBsY;r%
z@tz}U^mbPFf8EB{^iq-t|2f}Mt{cGc4J&uU)}Y?<LZ5l0HJ^2*X#uN9prd!1Q&)NZ
zCgLatR)5y?<Z2BS-^8`?AVBjO7`|D4|NX&g-9oKcErAB>sZSk~YpCfLC*6NL>h6=P
z|H}NeTWY>V!NEg9eAxF&)^^7ZE*;vsuyV_`c+AL5h^wA+^1;W|iccNbJ|8<)IoU#~
z)TUI(1;CO%J0~{(-1TnP6J^%1+fIn<QASpB&sKbEIc)zUg&=Ve&0ZKd$ZVZaQ&{bd
zTPS3tKDy~4IVxl{W2d`Zf11?=kxTBs!v+;V(jPwhUUIic4)9Z@ii3M!&>LFuRi!J@
z$Xmzc-q19Q^}LgG{mBi|ZM^gCkCs=Cid7y;(6bQBwd3Ed*3G@56sbKDdZtdCmr;^h
zIS?qw=jzrQU>bMm|6#^xXp~~saFL??LXwJ{>Q7K4idl)?kT2Slbv$=aoJ4uB8wSI^
zueOfw*!VPsiQ@loB{Y{+j;^~hM*$SH$fTlG>6uJx94Lx<=n{-_OBqnQbsfR&4q4Ih
zDzn?JjEtB)x^6jBcaj$c6s6y>Q<b$=TKo0FSEt;Fe>S#TMQk&oS3KVNVPGSh2D6l+
ze3|0eTO2wW>Em`Ec9$L9LasSg?fyJpU!NkmLoI;!l-Aua7wnh($(Zdyax(8G$oRta
zo*gZ+&0>3~uUc}LY>v5=_sPoEXi~@PRPI=+(ulG$gJB$7BcKG7<*E(k)?Y`AU*Nv;
zJ5&~H5NdrX@JX4_%ljsrBoZ%hjm&QZ5zK3AXFC-wl|auibj3ll1;<`{Ts+(7Gps1F
zXR{Jd=kbnuSMS}?rhOs=?yMg7K#UGt$MOK{dy6XRmfHDFXNrSX9;1qzP^*V*4`V0Q
zX^?$_I#cGC{Ve}Ax&R{Zw^B}-=Syqj)zZZGh9CPMI~Q|wtri@wY>6;t=a=$)H$c8i
z-|Y0;s9YS%2%~wV1pz~_dUk>R78_M*hgN>XZ>*-rAY*CDUQX}K7H`j)0$_u`)<(=@
z9>iw6w`RKV@4a8RZ>X<!vHVKn%Z{gRX;0)I#&$jeIyV-f($a2CQQ(`PnVe)%<IPr4
zJ3VZ%c5|Cdxxf#w@pY_bA0axzXvg`tnJVD&dja#iOnmNDv8ml|n*{3Dlrsij{w=ru
zd`{Wic`tv1lY5a%Q^))QJ?ya9?yyNQ!@5u>VGZ-H1&mq;c%@aJnl(8YEFrJD#7o3$
zb8vPM7MAd2Jfh@>9M8X2iN#%iRzUoeGqM@-riszS>dnd5E5Sx2Ri2-}DM9!vLyudX
z;}ux3ps$vmbv5=?7;3gM>LDXZrfS{EB5LX*;Ze4D$@Pilaq%b{j;hTVYp!3y=*25a
z3v=6&&D3N^Kmxe7u<dL8rn7hu_jl_yiun8DS|nwcb7WojQjI%bUW}8qq0+om;%2UG
zFnKcXmH~6}%H~3I6}Kp<=lN_5X(#O+7{Jm8KYLzT>GfFsu@aTrg{LqrzFTDeR~OU-
zcdJX$VcN!s$HiTIEOFNbuaP|UTf)Ab(ea9`S}z(HhSsjf_?@nYP!o^1t>YKvof<Eu
zDHq$=-IZK8Ua&NuXf>Ve<8v`C*nLXZ488`|CC`ztSWK7sbRSS{PmdNp9K5zZ*7Mpf
zgP!8Xyf=ppS+AKf%l?!9H#DQZX@pRofBqwrAIam{vR&Z{SiGY3!*$ohcL@v}PIAef
zuGr%?OF=eX1A~cLmL;8jgaB-y1N)%ofxK4vy$pl^us4b!ru06~y5xNYVtdyNBO8C<
zOZy7@IcX`WeANuj!BmFqXxf2u>s<f7P0A~I&-30D2TS}wM(`h4bM4kzw#}U>|M@DM
zJE3)>xvoI}{e*g$mGm+b*05L@PcM-dpb1gczbVcrdM{hXl~+T$C?nIP>oM?d5^;*|
z+rr9G+CWOginnYrhJ6fzxV#)2G<Cxu5=oMAJa_)`O}=2g>s)@_gZKKrcQusc*JW*4
zwz><a^pwAp7%JdM-WT?2{1J`}19Um@Z_sNm`faWqqZe)#ZH6wk5l!$6S#&>YRAMu}
zYC5-0nhm;A@f>l_V_Zcfq4vt|@n}qi&q_o&53{9^TACT?o#q!7HYVv4Mo&5uB#+Wt
zR*~rnFCEXmFqqDG3?bcTvXYfGEh#RJ322}n1%<8`W|BLt^UDX3=&uhyRn9}=3uu(D
zPgtaRj8wpOs~v1jTngWPrIv_BCI$S6Fu-<gsz~RShH&*a2>~|N9=I<&2TM2q@TN<H
zMHt6-?#|n6Y}zt#SJeH<OC?kP5h%QQ&Q7UhHh8Z~6#C~eX0a>c%}neYt?titHud_z
zoa#!6lbf0?@@WdnkmaS=`|tZ`53f-Q(v~0l))-Vwjhs1vp;mk+TU$2yT0>j=QU;+)
zPGLN^Nzf*~{v5ycDs~pE+GZ*cOBW!bbK?RbH6<rn_d^B+#{aZuK#$|M`sE^Lo@o4v
zy1eK$_Q%~~YyrZp3F!LQJ2jmGEFoV2q+TTIwq_iXEdjxdMCeOCxz_}{MRIBa=g7eG
zHsJUmem$X@X9Xcyt<{yQXj3oIq(tw@B^`cY`7YrD;qJV(Xph#<1LrHvn?^6b>^7<~
z@mep`=t?SSJtgwLKb$ZpuBYHpp*+boULUL6zuh4b=jVp<<c&GfQVrM@S~#b2()Poo
z-bT><SpD}V{&~8@B_ZW^LUB5jp1K9KFp+@BEQ#pXa5Is8Oro_}h}TWI+{{6W7@W)}
zIo8v+#IH&;Ac>UY<41&fHlmS3e-Ills}TiB2z2e(4G4x!wP*`-w_d`MIsib3=vc9|
z$9@Yn%WCohT5IwvtZ|Sh^Tqsr1e77=;Io}^dVBD)$*-3c{SiVP0z`ca755K-A9msG
zo6Qg3m1*88M$ZBCk5lEgn7!p4+4u|*y*H%zOA0l1=NAj<-CD@xNM9O}AW0!1b#QRY
zx@K4$elkmEYubkJm22jP>(ytbO?S-`VXg7HZP}pgk6drTpP4?loZq^u9EJvdHD`80
ze{t|O=KboTV|I3S+3upEl(18?f6pHh5&r$0a!KnvQizY1OEx@w0KHUB)o9puP@c;d
zCO#yaOo2IRM89^4-w6-1Np#h{p5-Ix$f(5^9BKAN@&@MlbiBHK#5Jek-J*eNDBc(-
zQ(!%3!lFky<cI}AFaN#Cs~?_c4G&%tF_%D6j?{}J<w%K$>7Q+8?|2gZ_3m4}?s<>i
zi?FI;f(&`LD%O;Bq*H+d<8Em)EhiUfq|4uSIcL|?E`~Zwux-BRZHi)Ao*Y0jEr+wd
z{`DWp+O6ylG|H^8PqoVpGc-=k7#LgT5Qn2-b=GhVZe?zJb4*$9-e#yCc3<p)xnx7G
zRgZyD#&f3*Me~;|NBnQUR;6qu_7=iq&n|&Jp^TN3xu91BwVR8W9*`(sp0W=d0WruY
z9s}<K2D}|1!7)=iX9sd^@zhT0BRZUIwrUIo5z0!15*)N4Xpszd;V6!8kj?Z;Dq|Bb
zD_<I4{7rV;tZLD`q<&cA!AQ*HUP+g~)9nLhk~bNx`BSSmE*+x%0x9?-Kwps9(N`0f
zfKC;Zfs7(`<Kj{#-J9nNPqEmrXG0wEc6PWIFg4ROWST#+h)OtD4GMc@NCdJ!M}5|7
zy@%W<IhTN{c8xy014~11Uq8*~t0ew9;E901kdj7;H-6E`v6FQQY4Lh#1#{-y?9d#T
zxtQP3P7%$(vpzct-9vLE#8vs-!ONJFXG;qFig(P-QhX~Tnno_a?4GZNdTr+?JFlAu
zZC)AC#Z@cH`02?VpbjG*3_Qbu3cYN<(vrN&bG~(ykpS52TAnDzuDjW3r7h)bYA?Xn
z&IcR?@^FpW?#UNla-icsrH^UT?Kb!S(ZlY-p<pxZTtG~$`7$JY(4OUGncPIV1qRew
zp>Pw{H|0^m7*E%*6Vw@%ZFF^vbB&keCa)BK;6`f@AL~gBKarBqCH`5iq})eK>APm<
zrFVA3mB}efA6|)gYN9_BOtb%PZR-7HAjLg~pR~4z8=$nKAR8{g5R7~+>q2wPd6JK_
z1LiM$#q*Mpq3-g5?F{W%)n!<OU7|=A&h(WTSZL8Y^tc7eH54$-chGtAbW`R=1Py?C
zWpCEI(YkEk+;@8{HyMuFzO3rrC^3iaUEXDoA^`>YUcbR<CA#A`!`Uf=ACcfYeyz3J
zE8HsaVqi*8st#87Y}*o;Tv=oLak>gbTXx@-IStaV^(r8`j=~wxupsz)%HOlG0(z0V
ze0F;pDjx6-QIhWC_r)jqBFW~yy!+k>G*hn9T*eSus~%79@q}5M<YP&xb3y_IoyK&T
zGez1$mz^nj0?vgWe;43G+(-X9*vm=>5*Eomxb>8iZu8PFefvkjtfXFP4yCYyX6bkK
z_1=|)wwg2@sb_+90#)CZ{FD17=9f-9GuB)ixvZN}TI_`%tw60kPots0HJ|MM`hLLP
z=Tw%_rh5F_5e8e?*fr?kT2eGt{I?MjD3vSzjMuH1s@mCKP-N`=;xfc1u^31FF~fie
zZ4&WkKn7c3OBGH%B6u&n+G(aW?;t-G<Yijk7roi`!%-=JV`vi#`hJpc58t%4hfnRh
z2IP`T&)3V{6n^Wy=D_TU5byf8kPam`S9E*m)Nd8IF}NzaL(zoHJTM*7Dr-D=okhAy
z=gs-#fU4kQMQ_XHSSvy0AvF4oa0B{bg+w?E%_zq^UAvX)lmaVfOOTc;PIMsZkkJFA
zEt}`=!EutTDa5XKbgO#3sdW}3`Y`4P%9^U`a+1NlmKdDLDpBjwtqjTEWFTYK_r`qx
zksZAf_uTSh(Wvsr9Fva*BZ49B^^PHD=GxvSQ?v!K{Hu>(2?aK@A_KV#-Y*}<+ECs$
z1YDsDSClX${=tWz{g*8Q93l=5ZeTaGs1L|FP|FDg_A`fzC~vPD6YN7u{h3@Pj<(jG
za&Bv_a{m5*>!NFROn2V=<6i@RUd{VJtpu9LbesWFcLCLJB!*JXVw9mLV^vjgrBp#$
zI<S)5$+C{@L=kMI=2aVei#z9~tm*$ND}A2am9hU5Z${&=(z{z@BZ@r-b|>=g>&qrH
zD%UI0GnvNMo1NQKe9&HJI<hx+2>OTDpI!rc8l2ccmj6-hxMh4Ef<7CJelgyOuF6Cw
z_?<beCfFuK2<zwAXsrMUGRK|)x&}NFXOzwKFzJEPEAI;bjLoy=FN@LxivQZjYtMhD
zULJ49el$p>>P{DBaGvhbE-$RF<di4~{{H4Bxw=oUkiLiMYI|EV$5+og8Gs}D^c&z*
zQ)tAL|C=}h%3ww}i$*?nAkp#EA$3ltylljniP@FC_E8&KIT8JY5;=VDZYCtuQMT)|
z*&|*nyIU0UDgN>w%#E)O&3ID6U3zt_u`L2ua?ykJp%z}0%6s%A>%Ap-9ulXNfTG%t
z>*NyWq=G~vSD9hck>yuPdg&QQ`5Pn?CW^VfPKDTsvgL~(EmuIrW+c`HHiLW0K6}V`
z7{2=b;cu7FbB~w?hZIA;!=|>F7th`6-ZozSSMPA^{A_WU=J$NkT2)LmzxB+zm@_ZX
zVD(E%xBfv^evFTl>%@iyzK2>!6YPFG)SK+y(G?-$k3<SfXdeW0e$L9!-nU=-9h`Ix
z^ZP0PD%iEKW{c5CJR9A;ymf7i<h}X+y2cqoZF9}46}EivzKf8e6%`fuNVy4gr04U3
z5QR`+EXQ`63dP$9cix$*?rBRjRdKgj+u-N}m@nSDjvV}7E`X219dwKW>rMhYYioxe
zfujHJc5nFO;secgxIEHIz^yg5W+gW4_%{<N23E521FOeGik!jYZqRucQ>@0X7dn1A
zYdiIp^Tqb2C6G-`UN2RNu=EurLBe!Qxr&sD+&3h;&Kae7g1n5AU;700Q@!p!PIlJH
zDmwpD?3!%&jqYL|tdf$8*6HM>`Z4EgBo4;azz-VTjj=z`mr8Qb?eV(TGJjYiHmzqQ
z?Cs=otCN1fj2qq4wzsOai3<4eFw59`T4Q-MN;C27VWr~FSjZ@}fRgM_+|`$xoqVUn
z8)mDbl=w7S60IP>PNr}LSJH-^e)cf76%0-@H;TUpsl-<M1vRLT=fRMz#Q~B(gtq-g
zOH#_Vzcqy@N91Xgfv(3YsJ4L4XE!Q|l3y)4CsTakisZQ-?m7_v2G%oQ3uC!*&N+~e
z)RugpBv%jsz<ash+dOv+bzJSM*GCb!&BJ^d!Sc63cDK!jbOunil1mp0l@fk9g#Vyf
zPR<gE>HxRJfy&M^U7opR1gN*`^;P(^lek6Q4s%DxzZhowQ(~y!e}IT8#l&(tHH>^2
zICl9rhV&~>s;w6b5m|vXJp#es54CDq-e8+lrKVVY7Cr~^V-)E6N_?vOMSgI6uVMGU
z;rkaU?ZIYz(L0DK#r5p<)@h={ZbHkD^G_LT4GFXd50%s#<FWG7XGg44V={O*jO39-
z{RG@n&3r>xib7L+Fqhb=Xn^}ZhwGUetS@i*bUI1j`|4j^>U*7@Gq=`xv?Yyu2USzR
ztGO7zI0LbneVnc}Cj7neOI^-M@M__yDzQUJNnDe5@aLBTnBKx*dx)hn+ja;iZ4)y)
za3cC*O%&evhxR-A2X7>Ncy}q@#EE<C3B#eMgiS8@gX?LHa()3pt31fWQ=e75_QKP{
zkQ_7k(TmBBVx>o%vRHFm|4_q5<y9+9&3X}H^={I<5~+5PKQH_3MNPlc8al@e)9weG
zPiFCqfvz)ahDfftu1w0CaV<w%7MOl?`6#z9C-C6Yz2<3`jL4Ted(n^EhReM+vLEdE
z7^M@3Wjr-P*76(Wpwy^ORyw?rMGh%m(tj#t(!13qr2U5DIytc$v^#s;^531s@1%eX
z96KKJd(Trds%j#f^`;iCyONk-Ao1}TSuB$6=aGm4Q?Yi&O>FX&jp;*5uoJ~%vr4TW
zGb74d**ww>f=y<hHpH9JjlZfaw}I=7Qgg2lt<<DestIP%GP!X?*Bs)r6&}!2;%;l+
zH7Oj!>}9F)VtMOE91tIS^=w=lT2~8qra;t|@woe5)~_FDNAK*_Np0qp)bB?XZu!6v
zHWG5#bgZ>WGYu`I{cOSI&-+pPrmMK6-X%-5S?{K9ZN3~&A#C23${VBT8e5%hdGq09
zZ)8BLqJp5@>6pNH#(m%j5#FuYVx7ka)j|iG4F{V7yZOy}N{?JZuWktY1qU+1HBg@v
zZeZzwMb=^Gkt&eH(R@67Za7k9$F;@>U0Ja9X+WwxRY6I=U~Vx9Zt(71|H(!NtLh5-
zze=5wo!yt+l7U0Oj9wz5-27v1VMjsTta7tXzP9GaDnrpSj!^jaCfY@gg-#pa(lv4I
z9qV}??;{7Ok^p1a##iGPbt9WQajAtKdU^F*=KiA_`BXw!w2+(3gn7KU(GQ)u)Q0ID
z3dSRs;s)n@Er?{LS3(d4qnr0Qno|=x?SWSdTRBMC_$s=6y5+LRP15B2;im!v=Sv7b
zh%9QilCZxYxJy1)!%_Moa@5XRHN_&V@-B}GK0-!RPD)%jEjb`g;?=j(?+D&530EJl
zqdo1xid&e+NDzBYHe};U$~h}JxyUP4n&snm6>Y7p-p^6Gib<$lw7^hGVPVckjRdO)
zF2(lqzRy<Rd<|19`ZFnc{8rGkOun?S)3TytnkWNNW}3Q@XShJmbQPQ`R%>Ro-2I6J
ziF*C;fn1z=TPxqvzSdz#=FDZ6LR;9DJ2(S9r8A}Lvb{1PMA)z|)>NU%2*?qZ2;6yx
z7U?j0W$5uYGTbWot$H{0UOO=1L6dr=ySKNuuW!?3>d+QaZW9+5cT&M(7n>OG*;|s5
zp{$M!lcvAP_5Pr0H4JgKSO~{ki_JI>IRLY4Mm769w@lb_MUNO>?EIh;_pr0unVKV%
zSMN1Hl6C-Q{d!6EupL}Rt|W5{ja*0E#VX(jrjnRo4KIffr43ShF~8|aY||ShLmqi#
z8M+TUCdyyuUMoGrf_N>QOT{HrUzS&QmNnFNJLxr@yyZT6OaUA+;V{tmC^+=i#U`e|
zts$q=?6N-6p&(Cp!pSNESlW=n9G4@&KJoIc8KRRL8%_*eXbeMaEvDdxvm;G5$S?Z&
z+^Ap%Dy1@~lVkN-;pw`VfO*K=q1MA>x!VrS8zZ?Q%hRei#<Yhgmw^hrB?kE@X)jYw
z1~)*(24_3q&C1y&M7TBlCG!{}tnnfapacxUvP}1AeaFuJYy?b!E}Sd0(Ug<MtoPjp
z27m8*uGSpT(7YbWsDVf6lPW@o^F2pb5@GS^tqvV?uA!7Nly~YA2fX=Mw>KtYisPe5
z(krw9JWX0=AbE<AE_Ua111gdmDy)OJ>_jJ#zd={|M_RR$#X;zc*t@^&xtl(m!UyZg
z1}<+W79?i(LJNJcxe5aGS{tbgvVNbWe+@$&v!c1a4ae!y>7C-LrNLIH`*TFXQJ=)F
zq^$qsQCk@?TE;U7{TO=EscqoULhs{RMO*_0g2Q{P4KS@@wR`-;4Sx71oXmB&x?hU@
z$*%oLi40z-4ji=%jJQO8A^-rx_d_H27b3YmySY>KES_L&PI*fh>o}PliLNyST?CnA
zMK<1gNFG&!XG+AA55=bn&*UeFLig%iI^OB}C7r|ta3ygk<gyXng+yi%SCQ%WH#-$*
zdxxnS@#Z@}?iTToftI$7$L0)dJu`&W9)9bAVSstb+IO-VU)N#fvl``k9*$)?`b9|#
zdlRUW8+`DdU@e^dwD=3!&a>?~g6&++RjwG2U5;yMA>}^H+;OX-!T$H7x?T8RJK>_X
zZK0`x4ilYmi8*vp3tt09^x_ZQYVofSM|brn#aw2)`ZSr4wC~)o$LA3_EVzQgV$i1`
zi4F8D+94@b5VuHsEJ{JT@6Q);Wm;Tqp!X;uE+4vabE4nb%BjSz*g#f&l4{$=VXMR-
zK5_qZ@hm7`D}Ak<{>A#eT+7w_TTT6!{-Wbn-QJ#0AslXi<rkKgmY~GlhQDlH@P|lP
zxczw1{1+BG_tUAl0u2Q-zd%Ol30fOnzkj?KcBIT%2+}zD)o}V-WK1t(TFoAM+{jqk
z+G=;)K|>`5RzN93r)xbh39|=CIqCiI___QWifjSsi)O)NPy{|A`5+TWbJhWzKc_!W
zWqyAe$OskR;3q8b_eve<$$s-0NliIAuJ=-S#7NDH-32?>6Q{%8rdVO*&IEQ(ZD;TP
z8<GBO2k>^xjFmoLP?pO8Ns(t`xg#~YOn72=xEW{w0J$t2o+;U5Gg#^KX2*p(nb4`w
zeQ-;>Mgjj(LkGa+OL@(BwoM;_0GF=i^0c+JrR)WpbM9imAqu=i!hHl{1gyPIEq+|P
zDs}WXmKSWhov|3m0dLF^qL;?$%;#$5<NE!j^R$-(xK?X%8@V!ne2)-2PAS@p38J>R
zTq0JR?M#LZB;kL@bsQkpxv9rBJv;)oK9QNj$$&qheyVRLIuFVtj@%G#0J-BPWb&+R
zXK2xDZjDR)1r08llXV1wl}p(Kw_&yB^LA@zH*}ADqGU+IIRKqSW`g0O{isVs#VUv@
zv{1%_?U=I?s%)JMu&aUES{|^YqWhtoTKQbcw^s_%G!Mp=qTXMMe`_aXJ$T*C*!>eX
zP~X{{J@!^pPyH@UL^I1T$5Nf%B(7(M!Ou(r?_k3_??&kpezBd+0~~O<iv&&R{gbLb
zxC(6#=ylF^1A#~!VFOXeUnUG^OM?TJRDB#jjdE+FkFkYteN@&xm9o?kpPj1J<n5^n
zBA_{I7CN~JgeF8`Z;l_p`-laa;D6F3{~^zcs}2n1iPqTJIIu&kY1R#udE=3=vQ4hZ
zBjxq`NvX>CvD{sZ-5iXO)ClN2@B6hCqjBgI)*s0Sii^lq(uw5;IzRUHSw0(irHNjb
zt>cW1&nq+-;~$$oxx-5qDIpt+=YI;&>T<Fzr*u3I%ZJ9dahy-tT<0%wd`?{ZTgN?L
zw%!h~_MI^z2#n~MVN3CSoLH>^rXCw94_8miMkabSsUlW}0y&~?SP_nMp;#-acbcbx
z>@J~bkw+XHK1V$bxeD@T;kZseMuVJh4%?Gu@zn)|xjM4Zx*c+>n~*S%Zj;%QUbke&
z&d0d7_E@w5>Ji~3tv9$WQhTGacaJy6VS6oK^v+R;#oU;QbkW67(l7=Pf*$Iz+dWBL
zWY(5!7bC&X8kTnwWKQZgyym#utXi=*t)gcp?>Jb?sc}c%!hY)32x89tFjUzO>J&Hy
z#{qQOe^DWPuCiW9Ds3_1xMNkewNz1hZJ!-X%IQFuPo^rp2$$3F^dDOI@hf07cT%6A
zh#REMg-|9_t!0#6pMDW>a7&p@0xbg1bO$|Kkq?uS7fcW3?yNnNh}o>1Eifq2mC)^8
z9aQA6!}LnHAXj1=ut0unMJNTeI0+g+U0%mkHw4NY|J2skrWmO#a0ljfK8B54XY0a6
zM44<jPI{-F{A76gZ#DcJ+5N|<Z+|}i<;;<D;NC?L5>&1zals@V?rdsB&Da_}x~-a>
zYamd5xJR6i8B6w7K-NCtbWSH^+i&F+a9yY~d1V*}xHgEZg~1x(DP+?00=OmhvXH<t
zyQ<~rT|L5`r0hk{k>OocpM{7*V%Zq6)&8tif^d9?ip@oBVi{mb%)>+pZPctLI)yR_
zYk!h%8_rd|1+ad;=Uvahh|HWur{I+&;w=llt8Q;8F`hn*$ki?!H4%iKEihWoArx)V
zIhyt(Qgu7Fnry=!MEWEIFsvy@SvG|L5iihCgO9mc+K0TqP5RVT*>kA!`J}DAzzAKG
z@mE8y?4jc!v6v~Zsf3;W6Hk7p5W5PW>5dk<-d??lHAd?<d|#RQh9xz@X4S$}dJQT;
zG`?m)`uOZw&AxP<`kz%gB{nm(spCww3l%y2^^HnIcb4PxB$Ourd)tN9FE=!pZI0%9
z0)_4|uK3~5`s3p^DT8eb=riO;**f%{I`Hk2H93Hew6w&eEjTo%2fI18X_~aske;*W
z@JLF94fO;B@T<#cl+^o+SGM(JM~Lg7mfh+xccdVi+5;=9_4|R`BEI^k8{Mo8y)Q^T
z9G&wC&YmTU9QmEem$$qJYz<uY4ta&}Bb}czwF|$e3rF~e5F6t}FTYfD7AThaJb&kw
zOsD=)FNI&{dHS0;fdNJVuJ@q!<CQsh39H6>nDs^0iys;Fox=gz4GTpxzdnycC(zR>
zvrUE+&_*d>krZ^&bk*<~#;><e&(t*s+FIM-va7uxet>=<VHum;8y~9EG2np{f5fr>
zuFp{o8}Ya;_aZ#A(0aByxdc_nsW>xL_;;7kkenNuQ1#W3hjrk^F+HcA3O-!4!fU*x
zm-XjG66ajNlZ@J9BBv#-Q-ChPpCdV?Zk270Ez;;3MM1Gyyd}*y++|g(WV|zkn){W3
zu&0b~8ryYXpA~8oDTg3Nl*J%LC>4#%Ye4W4-4_BnA4XlqT~SwUI{S=_L@Y!AuW%X@
z4Y41H<4Qd6$co<=%(B;n?pY!=WS0ZtB@5oFQ_w><YOFL>`woDVfxd1`&F_!Y<u()P
zZN}1@I(-@|IT0gFNoVXQ8GT|d`rB)!@RmohK9p8a#*x>@6!xzlm5^HJwaX961m3%7
z!eoVP`YJvJ@l)<p-o2vr_<8^9{mQLK&0KAnZI6lL*7$X%o(<EToi#k=7w^|+4-h^V
z;Jlf}ul)i7$)b)dHMeqv)gC=|I(Qf&o}+|0LhK%eJzb#O-n2jc>oG2=Lv_xg?K|cC
z31HrwJ3V6BA(^3TO7NCGi1t@hMRfsd%t>XNRIdy{!!N>fW#x31D6Ri8|M5BSM-)EA
z?Wo>s<IB~Y7g){hzTVyq)9vGu;g1CcPR{Cc6{kK4Zlo7ANmejct|P>)#AG*9i%*gH
z{?GxW*)!C;W>~MF`b?h~B3xHXw5ZYdXtW3tsGh$8H0rxFcrRt=sqNAmbM0zc<S6f@
zce2o*oh+#r20n2KP1f^RGxEpLiP}zP(su)#G~VCW`UV(X;#IFOhH;w?Gru6@8@M0~
zSmf~L4pyt`VV+C7M8Ym{aud<hhSYts_LpjLEiPdrDv%qX0T4Q>MD^8UaG=wT*vTXP
z5%AfII<z)no0VmrG|Udpd=ADA>LMKWJVy)W4n7^Pu)vgT=z3)G8-<^2vI)8zV#-F}
z59cZ&aGV|kZwXXiywuJ(-DYG`j!q8LF8@{*o5{>J_{*Y>3(Bn^JV;U8P-=;<KhWsN
znB7Q=qv8&eT6ssWj&m(t>08(}{;{t<hnqdBcU#Yj*?{Oqo^_Z@>#(65MhpSh$R~T~
zuTePJajQG6L!8Xgu!tU0*B$ZC=C*XMuCBr-R*XxIrUp8E2sO;wN*-r>Z8D2Ysz-N5
z<HXaiTFW)*Z1v%Ff0GvPg3-@y7N;wRg+JXHa)a-&eS(?PN>}x7qWOk~ZMGSEEfbHI
zd}u%#77zE;WexRS@&4R(9NX5U%n^Bi^YF11=<<?1e$+k*pzK8)$RTpfybr=dxo?A-
zQRHeap`CP5TsYugTHrXUYiy_E#J1U_pNd)|<_%EmFp)&m>Uj&8#Wjl+k89-DFD8C0
ze0f9UNcPi0kKs;;hkruz^evNp+)C>ji*mYr;=<;+ulLwFF9$y9cpxm)GweLH_$<3s
zD*qH@@A&fTbFqVU@$6pvpca6W{Lo;tCileK{kX8~DzC}wJ5>u)+L2>$ALAT+AHHYR
z`7ylI@YhF7pG1RX_R#hkvRd)B96$pKMxN9M%^i&)@M8dJH^gH<1-{THO~_``zTmvP
z8h^@0(DKRD&PvCP8hCAE%PSi6C93mwAS*@H#jegt#6PxIN&OFYYKv_nmQs9l((ybk
zi`$unb-q<a`Nu$HFTlq6Mn&pZ2p^^67?z$nhhX{b@!Av*01ETo`4z>KWk9cH^|E8L
zphl(ZHvptMYB<i~k2a6=NdIEP%`hBZQ##`jb6D1sA_EnP)%~$Lz8DHt%TaAOXyJ!1
zb3@hdW@^a7e*{a=zcx6`@9KQ#1dP&^+NoST2;X^^4|35=Lg9KHuT+MnAP6T2tTv*|
zeQ#mE9<l#JMqSaFA6}<)w@Z5_y*5>P5Z)Ehbswv%FJV@x6K%ASud7jBv~{zPRQ4Ik
zYlr=0%W_0|=G$an*qRnk-Rf*q$<=_=9*_AHdaVV-?FUcePyi#-&0(1yKeiU0&HHy(
zoM@HS)5u=baorx?iq>V73r{&LtioA=<*ek`)<Ji)ujV}I?nBID05i+2*$DQ}*HFl@
z>ZH}%_nj<Pjv3sF1_ort-FS6pOk)vXSo0#_5cskuYIk%>Ee8Ch5AI$J6<5v*pIYd8
z%~%LpD2^`az6bDG179RyOiWCw%QSlD@C^unS=xT=PFG>%YGnSP3v6OHbcKYU;3wbB
zqHtSAQF~89pS@C|cF<Yc{KFa7+>*I^6S>>!`N6I=y-yeYea&lA+4(2^`o2JHQ_jhB
zt|mrajs{0?S%R*5bWrdOP;{~t*5l#<8=n;4uJOW1=Pc*NG8%QZB36&$)C^y!nZxYd
z50fnJW>S4R|9LD0kJHKpT2F1pQw7(VO?-~${kcQWvI_|jZ%~_j)%DRkKu9^KcPXP9
z6&e{}8V^%=+lBRT*88;#5SL=w*iKE9Q*}790pVk_hC7KU9gS#->d*0Jbgz0g&XL5<
z=X??T0+y5E<}c}Nj&XA>4laYvx~et>yi@SwM5pfJ8L#y$b7jLD`3!lrzrHi#y`*P*
z&iSrJ=f$1pU3a33)aDWfy~yHvNN-%f_|c6M38FzZHcRYOzKY9$#Z3cKE|WcAGr;Z!
z?JBw)CYWV?W~)|dXlc2>f;v$Gdrm3%X`IWZedYWm{nyWsqCnqcj(71DZvNV}Mj6~1
z8>+%HSKBPy%m76l9TltD5=-^UB|M0TX#spkLU*=I27`g?#4_7SJHG9<)8Fz>T;SnE
z=oD#*xtpP1;r5J*T>~cMETBzdWImkT84TfpR;@*jx!8`Z$WBx9>1$M4Knw&+yk2dt
zq@U}+IjQPjMjm#a+@t5=;v9~Q>=Xv`qZZ_Bfd<_^AerUR#am&4V)Kgy0HN!<K1*(M
zhvgNILx+8sc+i(H*3i>Qeqtv-cjWNJD8~(@?KN@T<}*zM7NtrY$?iJVfDSmotw+#c
zHbN3D5%;ix(Cb!jJyC2Xo>Rz~#KV%oPgt=(TLI>%WG{A#jpgZNv|2zD3N#G@=a(K*
zlFH&A>Wh({&Fe^)6k^KW+LPS*h3!UO6i};=Dc*>+Z}fyIYu(cRY_O(ekE?;YU%z^<
zUk;#uBho;#LOnA;>K&=A&JBAZ_8`-fy)a@2y|y<*K3$___L|*lq@opj6`CKh+i*5(
zk6*E0S27Etx*a76n5gXdeGP1E10K?VZ)hMifXh*S?INsa?e{|^Pq#|2`Ht}SbzD0<
zL1NkkdM6YOL<%Y?><nsj?Ty)2RF_rU{->+D9z^`nra@N>|CpOgyox)aL-Uk0y?l<0
z{~BfBu-<81`iTX%L4B$&{9YGBC{IZ5vx<l%`h2p5iS((x^gw$XjiodKp>}-!V$1?B
z860ryy+iA|$-6w2wz*?~^w2s_!*L70?PRIE6Tkw8!0NlrGTA_)<suA|9rqstYYtmb
zfoJ8F4g18s+z7%|*L$_!^|xp^>tn>d&5AK2<X~L%PN|f-fPuU~6Z^ysGo)EF%Bd7T
zGY2OOD$10;pMM!*rHw<qiP7%w5HG2<f%-h3zDW|Z!0JEP+STvc6SQp!7NXMY;`REq
z&V86!3D%P)zY+9OuUi50@@V|@I~v~n#~y}%cDfO0r(D0!v3*kZvc7@$!NJd>E=PBy
zk~L>3#u&W+b+MCEL_TYl>lM#p`xDdQqq2;f8mM&X5eWRpS<aPL**<E^7rQ#dT-25m
z0YXeOto{s0t~0C?UYA5A2>y-g5LA`eF5Q27g3eu6ngJCq!?W$0Neau9?0>v{UB>js
zwhAEQ`Bgt!-J2luZ@R1OFDuzejj7YXZo@drdqE;223hei+rBYA7BV4#X$mtZ6<mA+
zGk0fF^k=PP`hy?Sk10H3(lSG9f9HorqKrLi&jJm)oE<k96a>1$kQ!a6FoXB7GTgMx
z)6TBw!sTb0wz1XJr0IJB^NTj&rDsoh2Gz<m%2_S>s#jo|2{L;VGI=N15Q875(SP<%
zs2R`pPsdJX2fLl>8RcHJTFyJ#_S)t)TzM<7x<zYo$t`j6H`CdB3ue-SOVNEYR9BgB
zn0b`^C4&L0$HxJ3yTrDJ9Qqdqm=%edf)(EV)u|Gd#FVMV!_j-NSB6?Z{;W5!?e%?<
zjMO>b?Q4{vFFNjZ@1MBp)ExQchpe~}X1i>&h5(476lA8zxQ~Z5DAC-jWZ}nM0SO=s
zH*a%Fk0LR+AAWXGxwndWM8iCcm9O;_x?p;=;U1RewVTtD<}5zpw7k*>bZj)$0Na{n
zc*EAkXXkyH?)^-R6<T`HPuh(C{PzgeG0GurcgoJnYUYb_!3pjY@pzTGw)?5QW_bQr
zH;DWCY0doCxb}so?H`L`%!=;{u#o38C(@_}h>{q~b7WJG`qx}pk{sqL1BLEevq`#-
z-<*G+#jxt|kcN>#?zTj-mjkarQncm-2MbxrYoOmlXFt_~gY@M8IFeO~lqu-N`WYEW
zo_?|~sKT*yO$L~!KTxQ#EjevrjKu|xS8&)?srNZ220(WLy+eO?UjrEHV3HKNzND?N
zwN}0l1nRpIsg=dBqce0Z1x%qdHPbgIif4{|TxTtkC&H(No9v8=Jq@8)nyPbTHE)5n
z>61&%R6GuBw3~9y;OVNK*^!cIFt4`n#FE@@DnFU1V!YAq3Z>t1uohE}JL(dNjPa#O
zT4*j^2z(5;Yale}F3Q9#ALy}{nd`kzEcQ>_a0~u{gZ8)#@$|yw;1DP)yV#7;c^{O7
zlBiI_Z;#|BN@g)u2DiRw>${Bn^+}ygVdc?Uq%mdgjX%O1({ZT+$(QvE#FCXoer4^t
z<ufwTDM_Au>hg!^v+%1h%f{yk$+3wRug>}gM7ot1cZ(TZYu4%9SSsAO`)67IFPfdZ
zEPKxYT|Yds_*7*GB%yxOQm$h~c=o#@i6woWLY}zi8E0k@0)6dA6KTl7QNnT5<n9e$
zMDCXER{lB)d?WTw@5*u$Y%AZM_e+c?klBkcd{bVLsyct-GoHQT1R-~Q_u-qhe+O)Z
z@guuMnXXkrrvOH>aBOqL3M?U1QdatJ7t48agOCrrdAoXcU{KuAC1VB!VdcWS$L$Hk
zgXL4{L*k06l;HK6pQYRpNu%}L{whAUb{h^G!r!NF@hj6sNNfsz#EeLi*ViZlEy8Y(
zk4k6rv~t&R@wbPL@Esi;t~FBm6^jcb!qzW#-Wt#2gj75E?lk(DBX_(#b3I>X)_a5=
zlQQ#EE6$!ujDO4Z9%2`Y&$ko4DL%*VY0@vX*vKxLmO@`(zrET@xs?i}60d&j86N7I
zUs54nhe5DeR6=EfiQY(QzDW|gtz0@a`K+?34Sp$ne!k(LGyV~q=Yl38+|GLt`ZSsW
zDL#<A<~%6}Jg|-K*>R`kBy_E_$M~t0y)0XZG{Pn1_Y~!p_<5~Ib1tJpo{xZ}>WCci
z+MrErbvQ>eNFG^kS@)QcgiF?!K>04>L{!X=;g<GIozEOR9AeO;Prn0d(AfDN9p>1M
zi?3d-`?T?U98tt`+~QOE?$Y#BfZ0D8LL=!`9|XQKk}~R~{r5^0y6<o##6i^_BDJvU
zA5jWQwv#Dw+nHdJgDuh|7iNUn+dA?dOmQ1Io*YMqh!HsRRh%bVyd{>v;$h~H^iL{(
zw337~BlLE-kY+*ULxhIelrmug_+vxgUqXgBVsLq`AG(>RZ|HL@x@{PtkaoqX=J(To
z2`hbdI0df9R&I`kbY!%e_KY|scrQzIl!#q<sF;ij^)d(-&W)N5Qkj-Z>QY{l<abo>
zxd?_jnN<HA3UY{N0)VAD_kiveMb?`=B<%y|$qC@p6(v@d1PYGJH+M?eD$Tp#Zp*eY
z<oPWyhvbK^%8Y%=1tgCJhI$5TE9?N+Pl+yo+S8JeW)36KQBLaYZ!w`?{H$LpK~S-F
zm`8IdwZzbPl<VNA8iSbd`toE?i^HQy<7CuSySZ{?)$x6%B58m|Zu~;le^^Eea^Z-?
zmB!)pr8Ifgx(25<8V@i0+oz%oycU(bGm`7U+nT2`e1ZCjx_!>5=EMs!0WWs%$)Bal
z7~%X$mUiLMH~&#s00v#}z+!i7v_HO)u0@Wr^m-+`H_X~rH=2k$OpEe=Tw5A|X?kzP
zo8lXh`pW5VKU{&NC61Js;KKcH@%Q-17FS#7awWuw?asQc00w`0Mo&ml+yQ%s_*i_Q
zwp>2%vEIf--DWu~0GsTFo%i`wa<V?)N|FqXjUcO67iOy7F<pe#?@Aq}US7z_;V92(
ziHOSRn=Rh|T+0Z#G$LG}g)bOOig@ennF^RziVcTBCelw)lL5_Iqotx!H7Ac`4qH=r
zZLV<`U7uKsle6BfayM`ZC<#&6P%^d|E8Ws#PYe5Bu10p+r^;SV2ORS0+V)d0+g&#G
z<y==jAa-$@bGECQ8TCnC^)w^J6*2Mkm&bvx#jV-9PBT;y?24lmb$zBxVHRCTUBUV^
zX&X8jV7gt0O%p#}-DUl(a_yGTcZ%@bTiPAg-Cv(Iu?h7|T?K?-`*}P~_GhCU7_Po>
zES)nF7QL6{q!JFRwawMa^^|a#v{_@Y{rBA(s!+S@ewgMCCb-PSJ>~y6E#z@6-Xdqy
zjSYT=;z#73{D}yv{n^|y`erK8rBi)1**co1+dCqDS|{RBoQr|s;<J#qs}wJR`(<a%
z5Y&klN$7df4Dv?xYpBDn9WdAphDwk0{`pe`0N+c3pHO73I{!;D1W<<ePsg+#CGO_A
zfLUTex#5t$lAiX~`vLI%wAz`xs%dMnPbx)IkU9E1y*RnO%uSkKrL7*!Svv0;)<z@&
z2PyaByCiQdnR<kE?V!AEl1jD)inAH?5IM_L!(*Zx!Zy}Bn5DSdmr}S$JQO)333&}K
zQGZ5f9_Wv<$QBrP+Y;aGTHdZgK}rrO=4|ue?9BN#7Rn$r_Ti&iSI6B87c#=*MT@k4
zWbIPXxpzJp%A<U_(vtWqEDmYwe=aI^%2$|0Mcn}PTjMg4IrpVv$nCLk$6yZ~H`G}1
z4JXlqFQlH*Pto(dy(WQqF_6OzE}^;QdM6$0{XL3e3A+j1;0ha7nvt!{jyBgqu}$B-
zSBoP`w>G_|7>Ev?J}>v#d{jydKCtcOAwHW?fS}Jr-s(lgE-o&L7x*rre+_S9j_B>8
z<u3i#sh?-~<3%5ttX0ctqfseYTEEF)&1Q!`frjb1b<O^2f2nCLJaw|;6;{8lS9AK3
zUhfiWuMB6O)*<}q<&g0P8OZ4BAAZwbXP}YxIjc+V$e?7bC-{xW3=j}_@3m~atD>s9
z^qqTQcwd@ItSsvE!k}&SzpmI%L+a!Bp+WL^3Qd!aGL5kE)|FA-3Y$udzpHvbU-t@c
z1U((^vyCNOtyGYtgQy$VRB7Fk2F8LRc{NaSTvT?&P-39Q_b*|>H#xoBk;(0HgD7=$
zKY%kV4(1t=l8sXkElckEivhK}`nGSKgx&BH_qTT$dr|eBT-3aKCO1vv&Bbi$@a63Z
zdYZc`rm`-xu><6>+_Xj1F-qio;5sB)P{bZK52`{5E-MJ;bF`VhGK>bedV2RMj%!z9
z=!`d>GeNDKt3<bBvN@*{C$+&VnEEzSruuF*-}YsBZQCIIaT;4AA)$Jg?X?-PRR{AN
zp~4;76Bg0nWDIhxxkTB{3dvF(xGI@F@_~%bgKOS7Ia^$1^f)Q4F9v4YaL#D-5aRG3
z?sAd!#XKnOnbL(ux_qIX<(YiC3W81Xv+E}&_1c-TUfb_&_Z}DWTHV);mK-FG1MTa8
z>NpQCa;7E?OB+5g+!Ev1j_r<9GimDiA~FN9+v#D98PyxTYGXd3V~(U?-9fAGuq3EE
zJUeB3Cgpw|_!gt@{C}`E_1mB4?O60)j__l=1u^YOnXzF-JPrNW*kUjXGFur0%Q0qj
z)s<E-R}C!4*ic@{0UV_d((kJO^@+}rl|b45D0Pinr8OiRM$p<G|8miBDuKr4Ftm=A
zMK~+Afr2*#f_SW%8np8O5W{mSpwnc@BukUT>i{~hldS|VXda8&mizcPoz9+q<aG9p
zsd<wdv7)GTg<r==BVTWaY!22ed10@6y_x^!?=d{J&eN|X7Ll_1+<AUfrjJp`R1rtb
z>EYA$Hx5!Xb$N9Ug_<%RrGOzWrrARRFVaTZhq`+|Fbt8CBmde%-FH?0!3Oqc<KmM9
zxj0Ktj)`NXz2o~Y9&$bz;~9KfgdKQ@34Mk_b#@P=Ay@M-7m&@~*abZ!B(THY;YY7(
zNcCDTHMvd;SfYuxFz$HiQL@KYv;a*Y8e1Jc#??(YZSyMJYQ3*}oSi(bGLU}Nsh4PQ
zi3wQOw-i1&sg2U%{q1dEEI3g`G*^{AaUW@I72`X4V@1fM#xE<{*0G|zsQ9Jm-i7`3
zXsnrugJi=@z-XA1{|F1=bp1RrX-@ey_8Xb`vg$qVI)fsjGd7Id+A{lp3}<6|l(n9+
zFgN_MF}nQ%HkV8<mi%`xLH1Y-X{X3Jvch-lZt}pr@6^~jXTqwJ8K3qA4VISt`4jOa
zOkDi(0=rO^14=;<8{^e-G#^CS?flnSBz(4DBMCFRbpS+V$lSpq@TyJ=+J_pc;hP?1
zSv4W7F12wD547Lw#I_$%nNZ1nerAr~a7thN9P6|oI7G@j9~(mUYw3%Kws+G~?}Iof
zR!CDxxV0|pG#*aduAH}~QDUl_%~<#celf1(M_4J7?>3N?nr402`!Dwi06)gD_q#j0
z)Z$jlpD=s*qAFFsR||x>N<5getr`;vUunN0avd3zxS#|PxC>)ry<Rab3-mP9P{vP@
zlp)TMNpStyx=+jFrqkvTzAE<pO*DN_46i{cao*Lmn<4&gNjuozk}3hMrFo%8UeN7k
zEXF(pkik3;(A1n-h3ymp^Nh5K1IL}pIVj#^V|l}*thusBD4`s(m>@@3FIF~@y(aek
zCmZ*d!F(F0cFUCz`_LqZsGm&yj>#A)M%<6V4+g1#cpCl{&lRUEZBp?JB2QH3%`#8g
z#zS+1AvDai+>i>%5}*9dOb_&p?pm{?qj)@HJt0#?BwkiO14X&@m*hREv0au#4$k>%
z-~DY?b?MV;^~>nYe3(XND@y}58#`akNN$j|P%$VQV(3%*z|td%p{W&mQ3RTl1RP@t
zrfR^7#4WtV?%QZu^<6%MR?PC2hk6UOa`X(sd^GV2J}2MI3q9}!=H*yn)?}VIS#VXY
zZ=DKAf?TtivrHt_W0dRyaIz_e<sYru-z{xZAGW3F4OJ3Dd*7?6&fK6|oiSbecA>7M
zFHvCR<c{*!XK-GCFQ)r7APMFRnrX_U=ao(F&D)a^zLe$=&>HDgK4drj{?+0-g`1GW
z*irKPZQ*hjHi(1+W)XuK|LoNHrT1Px9eeYV+rOYOK)W44*u(IR&LORlxvfuxw|Q4a
z6RbrrrMCXPGVG{$JL6t)n~A~(c**WV+0oq<M+CWR8SqjH7*>5qR`ua0^+jP8*g%gG
z@)l4MwqBgvlkkaN-ag?_kd&BTj?;dS(7Fxp>$Xqe1js}faeF@hORT<hol#c(@U=vt
z*UV=9VOgQFOE<<-b>f*a%BUoms3ml<i6k2-B+E{%&(M5-<^jr-S=pd!YpN$aBs@WE
zXQI*Ne#2J@j&WP4S95r4g{{3KvNXY!y(ky({oSGt{)e%*jH>GWqDB=#1Vp5zMWwr?
zK|ln~K^keKyStGR5Rf=@$DzBsySqVwLw7fK^Sk$scl^N*?-+dM?EUQZtekT$)<sdV
z3}*3pVeW=K#Aa&=cB<Mj9Fb5y@liPvu(ePX&m&K<T_iAKq>{gmIaV?z$DVg{Vane#
z>lg|XQc8C(TpR<J-k_;lTzC7d85=bXjoF<)cX{fmbT8%JOY$d>wXu&C+t^6-u1MBV
zFGB{YRmxocmr_Rp!=d~?c%%h5S@Jm(8A_djsr%E$jq}QldTyqIgx;2!MGd$N3#NN_
z#|sFBu0pw^;6t7+=W=nNJfZ^bL9^o=?C0TO`7bJ9vcM~6!C7rO+7Q5sC&%~kYeM1!
z@9;7};JeyimDyc-^+vr9Jpp4-kwjZ%dPXyy<_RBX*7}scAMJ`aSYv3-q!PJqrp$o<
zzXOdWqoA&mlgKop%e2Fx{U!wvNq8nRb2{V6>QiDK+Cd-EQ+;r1uy4m#3PlZf`Fwnx
zYU5hkL|m{<?ZF84(JP*G4r|pJTXIytq&Q(S$)O=J_zI-gdZ;sK->J*vXQ-Ud`+yy^
z`%TXXILyZSqP?TNPRBOT{`bQ)ZR75Pwy!p{HLhIdz+6GB){YtKaiGpE6#Lnu<5IBg
zlyL^Ma>A$o&enEudeP9yqv;gzK4yhuef)(Wx?aU`?MSj1CtyQ>(KScIZBU`h2~AEL
z@M|zpmPXOChom1*&UeXdT}N$GHnP`$)I>N)h?M0}>lJdb6?3x*X1OXT%SGNyx1oXm
zib5;P7zp63#evYuNK&cS5id?1*AL}VBF4kR8@?SA^_q5cdgvaS@-QtbQs4FNIxH{L
zx-y6>L%T*}Cr)Ba7#44uid#c=yeAwAwCkFllkb4ZI(?hs0T>10@6Ln|-N3x9X2pC~
zeTXALihiTj;t;oM|G_q|C!TyLQ>n(Wad&?M)faxfYmewR<F!}ArJZ+PNodr`D;#&N
zspcOU);v_m{ggPm*4e&eU;l*vQq7!?&i+^G7tU3=r%<~dHWw&NPxbLI!!Ac4vuoLI
zM7@$}zpf8w!dmh!a_?d~fH%zx%_^~5ZPh0+fJr_EOXg>_>_PQZ-s`t*@z^07FoJCK
zrOV7{b^sDgs`naR*L1blJ%;6xH%~5vQ@e?~_6?e+NSsJMD2S>`-bW@7mUmwN4rPyU
z?5HGXs~-MsJ^0*EW45OseckT~sUH7W=HJ8~8i;bv6WPEJ<3@#CI;9ft*Vg#y)sJZD
z+!}9Bua7;i>c9jErDCD@g)h|JjQgH(?UsQPS_Z*7s(N8_ioZ9MCQha=zIxCM{C^om
zMX77-cFDY1E=H+xzNDmNqGbo(f1r3nv$aXi$AqU#N~!MJ!3C?dNz<xNH0PArefdZ6
zdyXh}Bmvrmj14rZtMSk_IU4y8AW9Mfo|^DCVgWM<95}sWH=gwO@An`|hRJ=r-@C)8
z4`bAGl|O&|D(9@jOX(Eh<#D-HbVL$i-I2~DKUtsYDZJ6&6dXUkt#9NoT-DSb;)cIX
z1Dv-zYfQc<tMg~VP9xVC&61))6W8Bm1piwQXzn7hy4l55o@9?nl(ZC93p_Cl<&Kgx
zna(0z@z;1WSUT{$LeVE%#BDY4HE-e;5JI0FqC^MKmZxPiwldP%KTmglT>E?C7!)|_
zOnqhMXNV`kNx96Kk!X)}Ca!A)G;a=1VzXY#euob1M`KwhyQA9d;sU(!+jkHp2T-#v
z=QHRgQ+Y**Q}WYQ>h5?SwUq9MZs%p5hjr}sh{*uC=|XvR0&O07wTn@INZh1b_q53O
zPVWWi3B<xJv&ObBnE3RwebaF9=)P6Izf!)*Z0W>VCB*1e9y*cGpa1i#5|;)viWG`?
zP$xzvPU*r){qKqf%>V0#p1?h$N#+ulCl2x+{}g!g5%U~6PPDk(40gkk)H5VR-7siR
zk89D%lFcS@J#YFn!~}0A1$YL;X1)Cle17%MF=Am^&#g^t@}^A&{+y1mKK#0?i5{rG
z$`cP{23eF+k?4)txDSGIS%1_?RcB;lO*qW^E0}!FkvMw)f@y7m!JD}8C-8LxoBCQ>
z#Tg;mMjxvqsTi#L#50&tt^~s$jxOG4J_Wzf535@zV@~w-shx=JOmtbgP4C)dw@{mn
zBPuW$^O{+grofVjL}P?k6Vmj%kDxz|KPRb51_G)l`9RC1LNb#jO$D_4@Y+Ue!zmTM
z02G&B9DV9lIxle8)-a2;?=VKz_Lb3Q6M?SQ{qicp3yF8NTWPoc<+uB8KNT<_262{J
zKB<ii{Jd#KdH-ypam@}(Rmot^TCPvV|9E(PmZ0~0ruZBMVoV8@F1M+FU86+5_v@%(
zV#QPxjpWhU(V(HK6-xO7xA6lIj^FY>LnT%Gilu8;tF|)-XpE5Dtc&*Q_8{J`N%>#f
zf8sgKpb0k1^N(L`e0eyQo|s_2l7d;uYrqmG7uYuWyXTWc1X|LClM3Dz*F;V9O-MZP
z_J{j?6rS@LeOmK!0JFSD_MP6*O8D0W$F+o5QSIktf#eV3Fre>i4L4EsITw9p!m$JG
z8TLEVP07_to;fpe!*OHSP8Nnf{nX8m$~Qq=lgO(k02TjUB-z64g>3J+fltx`YtsN#
zKVkgtFy=#}(Q9l<_xIhFVkxTVLXK-EM{BSeUs>;%suZLt@GVb|+bQ0ox;U(lEzV9~
zVK2Q49ra51&_v>!0N<_q@IwOZ=qSve@l3_p6w?lWdDi^qyC<~KuEchgCMj9zRPn2-
z>WxUkYre#Qr{cJS|KF4D9(+ip1WtEK1P;<?t*(`q4_`iJk9l|9YH}1VND=Z(rA>WY
zA*`t3n%DdcnE(r_MtP_s^u#mq2`PEwvxjd6i00xV85kb&fDem)%9gg<kQdZ&^;Zg4
zcL$F3j!>eWIgUD_78dM}aAmOnr8mN<6x8gv@7bJ-3O{>jK?0gm@J<;J%c*{BWxe;^
z4h^e+C7lBmD!PJlq2%4ynP=aK<5F7i>9mOnaJGpe5Wn)P-zUDg<SP$d0N{w4PLZ%g
zCfKCopNr6;m{%3g&dVJ908#0c<JcVSj)>GIIO^G3ulhA0sZQuNFYIW;@;L7`0TGFr
z)gHEJpLoWQ{<%<+`o{m#q``0$qUa<>@nXxrw~{q({Br1!qhTVKE+;rhCqXjQ76cLR
zi#eDwXn%PhR-dAI{=>)!(f6H7zuUQ%{w?5+GbSePz4525R6<wW3f~#%aFma7Fzxrj
z>rh`WS7j2FTPKHO0Qe6VCBpIlC>6E|pT<qpklX6H*tjqQx@K(4JSa!#ab~6=^wUQt
zxNFiGk*1~wriYTMrTq!kiUmJ_EDd<Bo5A1z5U-#`{{qJM`%Xr+douyqfCeQrK^;TU
zu)j;q?;TIZe3X${zQF&y8`GkM*&k*$41$N=ODWIzSN}sYL<(6aWgHHsVqT-Y;-888
zsuQfAQ?A@<I$u>DN9giJ&w6o%y8k7MaSoI+8Z(^a72F^YSq^0%34;KV2cZJeD=|?)
zV0N6TU0~?E`MrF2cdUd~y+-jSV$^EUUZnGkXECN*hneyA|H8hE*pbz?hG`nB4Yd*o
zh;sDo($&!@Mj&f-Yy?Wl*sgGc?8<7(pl{im5a8;FKm7!9LwXq10NbL+DDrV#x-?$u
z&K&8oK^e3S>kxjAuVnO!mxn_=6h|yl(Kr#>wv96prnQ^e*<z~a3D_yE!xvWc2W}0}
zP81R-hoqh5OR9W*KA=!L{;uRi8FpaAt7<DJw^Dp^oxF5~%m`jbAUA#axo`sku23C-
zaEudJA^hVe*1|Ify>VYJwsZE1stV1UI5_gBQwh0(pinH6#;uVv85V4%=ksi+(U;BI
zN=tsye07hI@bm-WKE8>6`Ce}Q|5^Z($Sc{#(*?!;8&kr|z{>>c%+2f{4i>szdo~4v
z+xIr5%HOEfh+g&Yk=S)0gyz;vp~Ms9`h6egTpPDH&8-G-C%}d|>s3Ai<;QYIrE+gy
z<SD$Vq%ZPBLLTjQLWtC!-__=rpE5H=J(@DsWtYrZHai}ZrQxJG?;BYImD=BH<`<N%
zN<R87jQa2;0l9D1Xu9NLH+}?kmvo>t>=CP(g7I<R+p3(TO4?gT5;>+ylybIy5=D3L
z0Rmj%>)^siQ+xp3ME<8vRU&Y0V#RTGs*I65X{zck;$mrBB61yVzgOQ`>8TFvcWatg
z$cYgIxAqmVKqeUrDCVR7bwhPL`@RLCPrf;%W&A9w6`NkWdoZ&~5hz)T(@B5asg^l@
z5_yxUk;Cw9hBR@y`&!lP3BtK7vj-Z4{?UU8xFf`)9P=9|oGi`xp0IY4xF**gWM^?1
z{YrAo2MovcRmfMK{4ZcVx$JJ>q#4Knzahir^7znS)WJPP#kD6t0CCtfWd5}3o#^Iv
zuh1Qx=_4@$*_D`RM`s3VI2Yilm<h?UQBU5x|0tlsaiJpOd(@c(zyO{eYjSEaGkMz9
z;bq{<At4nvw?T_~JrG^6k&t|0bo4L9f}R>ry}{$SZkj3t4M9ywq+|Xzn*qquj-7Kr
z15dPWeS3A!<Y5}mqzOiSK4rif2?N@|fnrPqbK;tk@mkgM`G;fj<Pf<2uD15y`e_Q$
zwKaykR_@2!;VDGf&oKp+P2ykvXqBW_AdXfv`Ce17aOVOIQJBLA8hz`tBpB@x;-n`z
zRr$Xda>sL&RXd_|i8DjE5`xu7S?S(O?5q>+&}5?g(4-!nODuSG%9;Ax|MJ@iMD@hU
zwa6K~_b?ns$G|mE2dQf1t>HSJkHvO)oxvyWqz8SL0bM3g67&AKu0%MwNHiZYGqd&$
zAMES=lB@SyVDa`hWo$h4o0qLcAEb{f0AevsqcyDlY+=@fz0zc1ZpZFy+J5nU@W-Y3
z#!IsV*=)H8he*pzNrhleFWRdati`k5t0+?F7hST}2KIoshnNsXQ3SZ4-!|0k0f%%d
z`21C=mXl!lEi(3#?cez}pCb!cfhjRoLx)^Pg_-K!HYc@6CHfSfXM>MNP8BT;V)zID
z)Gyz42|MFB%x`b_&u{irFA@N(dqlZ6muU9f)YR0;q{iI=|HZjk?G8J(>L!is)$HW-
zQ+|o|=m2IPs$%(Eg`2~|>%+y{{>4`gNgIz8LRe&)I1&#`Vx8@lBl|g2)uzw$azkc{
z2x1w{%UUMupacv*d7|QIPlXf>`0CdJ!u52_4Y1&DZ~@&aD|xL*HZSD)wq$r<%b5P{
zr2g$Kiu)bVouF){4cQ{Z#+C$ufX0Ca?_S-}M7~O9B`n!02%-=??cNeI{KHDqO^kZ>
zp5z*|R#*JXU;pznLxhLPgY}oU_SA(hwISd5ZnIpC!1HJ&Z~Nk->{Kdtu>DBz{mS1l
zJ1)p0=@HBLa{9Ru*qlI+j!Q90<8J|Zjq8T1UG6^~&w!2$&@DlWc$%?5Y|(TpN@D#>
ztLp0wEK@Ezdv{~hzJ5z>Qr+2<^IBCy@%W;rhSy<{nnoo<aiSoSh?b?ld5f0!;i@i8
zUzDr@=5A2Ytv@RNh1-yseQVQ2VkWG|wBb+I<Tx7d0{lcw-l`%v$EoiJS0CQ3fT8*#
z!ljabcJW}o!d7Y0)pp^{Ore_1um}gxnv9V&>ggquh`essxOTrsjJkFgYFNP_io{Oq
zDPaIe1)zk7+)E7#vc);&I<+<&^~XPt@VDS((Yv6|u+m>;4U2r3KQoHL=UFBmk-OcF
zcF#8K1=x(BfkHc!nCc9MyAbyB>85}&x?|>6rrXji0GDBhf9)XV>2^yx9DUG9;(py@
zu91z=dk?plxXk-j{0Rx#(xYNlEkc5diki)HG^GtRMR6O707xewNql-R>VC3emF}oi
zdJ$G1CqzPB2uRY8>tkzf=I535lfu;mJeU(T^`TSNr0jwD>@;+@WWN)}7}0?V*u_@q
zRM;KQi^(~_gYAOy+|*;p0S!SB37nc`@SagP>-s;lmzv9sC;4uUN5$vL3Yq%=(t>*k
z?<r+#&z|~;S`aG(%1eM$w=cnOW60UMd~>#V*M|8uOEGWr=!YmxQ&?`Ev@S4{JAd2+
zN}&He)duqc=RXfH{^qctqBFOdZwWalKYPhv%HF?Bi~M;;8UMqATp0!Z`HqN?G<tfd
zUYi^el*Si1{FEhedgFuYYfnS;^|d4nAG7!G-&0r8qCB7EY4|J>1=w3z*hiv^;UIpQ
zpV>T;xtEk7+<S9Ja_LIha%ItjYWDMFzpSJ#%Can^|CvXmR_M>9Z1~cnGHbJuGw;<q
zK^@QLLvGhQg`~?9Y72I}t2vLS!nd@wJDikHJJ(<Khp(wDZ=k-Xs_cyoUo8<>`~(WZ
zQ<TZBW&pt1KExh9)Q#5}4E(24+U6gxP<tckM$zR}HwkwPu&wH;o5%K#Bs0_6U5<0!
z>(-~(O+9q7K+V(eqK!!9E3Zm=P9`k~+Q_U@)|z^-y}U4Jrh>kSxvXg1AyJ<<rK<F?
z&LHOCdJcOKHCgV5A&R{9Nyfn(mZ#E(p~}~?De0d>Y1(*}y57SwE(py5iirfn&7ZI4
zx7kn|IVR{WBTZg>eEgW<J<1OOS5+z)qClp{NdZ;wjj+bC9F==?RBu?HMu{Zma;fyE
zQs#R*zKJa=(N(+Bue2fOnEIQdkgKvH)*FqGnPgfiuQj8N0JW^g4wUy*dNY~Z_g_qX
zy*}GkjQ_IW?+SHp-LY5H!qrid1^}SX$-BNiE0q1A6#0!k4(wWEyEQQ?$-UEzNHWH?
z3i}YPoPFJI?p6v1PJn(mCcEqqeUuA%G?gKP<l^;Jlc^XJ%w-xm=vDXB?3Y6d8Q2S0
zS}kjrI#C&pTgXI7X8G2C51p|ry9}Dq&{+G>@yP2@1Cw<i;A5?;kU=*o<y`?4`-7!+
zfCP;=_;L9qEDWEqz(A(8Pu|yY&a%_c&<d4Wqf{>l14J~Ld4G=;8!rJ(1Rk)cdWpTu
zKc=;yGyxruiAh!l_pgl(aw29!I%8ad)J|e%`lK)YI+gM#^(UC~WcrEN`QKtpCA8r5
zd0}s<o5~sj80DimgTN~zFJ5{JEK)ONC<Y@dzP_lLte0ei;PVuq!+>_NXj)nt$?d-1
zNsevz$&3N(>R{4c!&&2=J+KB>8RZMbx(?kT%j*yi$%nqnqsat2>lo+V9x4jMC;kI0
zgVn#jqG8VFj{6-X^!dRCzI_3Dt+Pdri_4O%xxrs#w){krNAgTtJM(d#9D@F`R;ZGa
zzwgoCGWW3C!v}(CG^{P^()<<vhk~#^?O@K;4g&MKtKC|lVWwBl12_|0I^}dL32f~G
z^?GF%?alli_TD+!wJ0R05j&gqYC-4{{Xf1b3cO6eyVCKyFUH_#+~(yFcKWNC8FM$?
zjk=!miGkEjgEUU`bNcM@3g6+MJE$CcWYL#2gWzO_nFW{VdaMYbq)``7HYbI`iNm5{
ztWmLqrSZr|f4tDt%Z=n?%s1iLRF``oikt8|z;oF3RL+n#W5E$TjE^slC6Z0aTV1}P
ziwqgg81W{!7@bV=SL$TN>PoXwS45*)zGe$>wc|gXZ!Ym7?^~7TC{(P<Ze+!Ts+W~m
zGTbG<EY(2!eKmmZ>E;_Pe&1K>l2J-;=>a_dE;MP*=1`0x3E-RS=25jXZ+*y%XXB^D
zf8@+nF@A!_BtGPWmp<A+Yfoc_L&X8T`N$wtR50t|-`0?Yt(!)}Q{E9Wv%WFaLQo*^
z>UQ6NSJ&fYSH;U<FTVsdKW@52`K$m^R)XzB3_vv)1UO|G)y%yk5*@$x_GMv@H%t{t
zzz66hPA2RH1f!PpF9+4`iidrc!z))auVa}mIjHjrHr&386~m+*HtHzQim)jm^=Jx4
zIX1OD%w7`rfox3{-pw{%&EAXDbgz1$@ulN2_9FE3?q+?l?!0Q}_=npw#LfE5re9)L
zIm!l&EH~OpMB<IBV$C_Hn~ZU9`+KBu1#KDg1MSM!r?c<u{C)o7Wsbn&p`cH+a*}8s
zb>*1Ap?kyMq~(ta@~e((NtJ;8ZONjtD@J5v_BgU2o;)35c;wQe+u>qXOKl)k%sM06
zYnAyo(>o~|{<)TwrR81q>mCrj;gQe^q5)OC(o@=93b1JMAe<|KWWh8e+W|nBQ(dsy
zq9b5885#hHGG_$<gJz-5F(ZJF?klCn6{vmZQK9+76ZeHM`JP@!>9{`yN&RZl(mPuy
zA7}A*b=AP7c5OuBPz9Rrh2D9Uv=><zgAHU%3<ezL=+U}xuDNZr2@#Tfhh6V;_f+yL
zk(ur}O3z+>6u4r@Y92Ez?SuS-Kt}lb%S|4}Sl&^etG(o$Q$4N$EX1f@ea8mFe9<fQ
zMsb>Pz-1DoCM8Usfn)vZntXlf_{A|@o1D(HQ90`(4D&0`0g#74>H%4yX#iArda`lk
zB>`=ZPs|*YfAnsD<dM?JS$xE}=eZlK+rv_KT=M1B#cGJQd{88LIO7^wDSs)hoFp3|
z&t{1fZtA(<d2-U;hpANncU=fbbZpvi%?z&}>Pkd`b)$NiY>Oz7>m^N{RB#M8e=0nU
z<r)Z{^M22I5n&)3_JeK>JAvQ*c4+8#o_cb?qm=taU71IJSY)}f*PNZ{C=O<Yv6DMl
zsBg&CK<y1;xqAa?`9j<EP;W=;=Wo2%b0TZ;kZ}NGI5xw&p7XLa=U4c>=LiL&dY@fw
zej8YDrNsxuxO`z#HDJnS1>tG@f>9jus$7^7y>S79kw~)Q7_9j^EW$gjJZvQ`UzIgm
zCOZPL9KNn&gT(rnDNL?POm|E3_Qg8(|GJi@W2EzX&!quHwG1R=MUIAk*M1AbdP)L~
z%7fLUsQ`^Op#vT6gBl-6^{ThU>U$<>NGz4uMvkY8*hXLt*=lAuFG}F}N@-i=d^GFT
zN$~JOcRGRyDgl=G6Ui&&nVvV2^4_`@N~>l$)A2y4FcjZ?evncZ#@7ut&~49H7iYDE
zoJ3z{!VC*}cYd)93}NhZ9lEqCTCp@d)Vpqq$J~!liXHkGXPB_`78SIlKVjdn=&(M}
z9p}C-@_l#GPsLHM_F`&(NU)GfYurTXX0R9H?$j~aWi@dfZQV$~RaXjsiKCUnF4Z30
zGlRpRUN>vjJ5C~EuIRd#lbPhEe1*K+GbVE-J|}0-DX;tu8c*FihTY@E-K$lhA&L)k
zp9xKj=$YxumikstgQAAOt;;=I3%Yt}f>Ug815`yepG&KJ1}c@c=D3zw2NNdyOKZ)7
z*m(-P$$Et}{CEj=E3FL1(L46Q8_?G*Us=dvW|5hlW!H)U??v-^D5>Vw1bL=xV}V8?
z@8h4QXF=66<uOqjb{F3P-I!x(QHF0t0`lJTW{QIPF`Dcu;2jVM1T4RCJ#fWsG#^eC
zfni^cdg9qBl10ldZvje8rfJhsKRD%WsKkb|F=SC0N(b;Jp2a>o;XZ7sj~lu1)Hc-z
zJU4;m`iD80u#VC4ka9rtl&mjo?s@ejG7l<slKnPS54T*}IDu)7a^Hf1)!+#nD2S4*
zGrsz3Ok}^#eI!Pn?8yTc&kzi_wN@6Mp8}4TGMoR}i+|3%@dnEPNI&@r%M3Gz4YCR>
z0D;78-HUeZ5YE%Q(t(l7RhUaGON_&08F+cuHq9zW3Z1G!wZY^<E+dBrfy`)JQ(We7
z#tz(Ch4R0q`~=R6^bb#*u>xpZZWW4Wq~plpU<6*Sa5v;V*R02g9YYD!O4X~MKTEV9
z+i-kM)%;SfF57Y?G4uP1&q&{=^7!kkbIohQ_4Wdsb(Npl5#Vr^NFPs%B$q=UT($E|
zlDpB8-NO_=V(QUKX5&%A8Syte>&aSGK%Te(fj_!v#Py75kA}Ur(rq9s2}V(f3s5N^
z`-*4JcNe(*uv>7?VZv&_*`%UY9;9FqG0++{z3vSmce8=8DH*+6i=mYGacSXle4uw>
z%&h$^=-nAa*$5x(6P?)7D=;3d6U~6qkM!dD-Tgru^;KAmWKYNp&m!{g3)1Z!!5CaG
z0A4QxCJ0+?^L>KsXDe9uj7GH;Oc0U8W<AA^xp?`ABrB{3Lk9qjIyjsI)$`SHCVxJr
zO<jbXdLDdfTRhjrg`y_OqqeC!NZ>#lN~x`aw_4GNHyTUWcyYQq&rhKAF_Lw(ue9Kc
z@1{hm5E`53=cG9Gey9ZUSBR3dqf-B`>=;&!Z5%>TAi;fof3)c(v`DlXqN1WeC6H0b
zy$s-I-RHGKcq<G?$=Q_uLQ5oct(C9!|F-yW>Hq!V6Dwrh9Y%Ifj}+zd`#uaCrR((H
zvNg!!FfGba0u(x-GKIhVfjwnK)mET{wESzF$IQ?oUbxxMVU>Y)AJxI4^+Ss_<rh&J
zW(!9blrybm;dw87TW#JEl2}pD@tx<{Wyo3<qsZCfoso}j&nM$*WhwvXi(~G6F>@^~
zMU~v^Y$HK3vz)@Q3f*2DR2PMHC_ThqrCyz(l#^%}D+cz~M%Vgsf@bS9{xZ@5TcZce
zq8;E$&6g<q!sZb!LGk?%GWoJg6+Zh&`UEQ1xYNx<FJGxe2)1Bn9BqjcmZVLrwvhA1
zTD(yU<DR_feSR|llnF1s1sf<>WIr7U7{@AuaEnhzC=SGNe61hL9AqdP%M0$|z&6-S
z9{DO_1w&@%9@YL+Ag|Y4GNYg5+ViLCrF#+@w?zU}=wZIQt>ZbA%NpQfQ=(^Nx+W5G
zSGnkqdtR^%W3QwKfm`iG>_aBEPoW$}*w$Zr?}~tDk;GoNCbH%%P%6yHmdjIsn)J~3
z@=1<sZ~knls@-e2qBD2wz2{_454u)>7{!(<);iy2EQj#l_OCTo)2d<<nawVDJX-e-
zLRy)(7>i>RQb!-38&@nhtJk6>6yt%Y*3=xChKe3!@gAYx4wcYakdm%q5puuS{@~dl
zuSH!&yG5Dl>jwyy36jM$UWG2Y{<%dgD+L~d(Ej>Bl*G2|d5HN!-Nme;+tq}MSv`>c
z9=AL1)t`lFG^P`JHiQ#CzhDmVIGZyb6ne!e%*`C7qV$}*%N1(==%D001N19ant3Jz
zN@o(>uk>5plAnENU%6iBIuOTaf5oGD#}ThmmY+R6q;zARxsVh{$~cJtgdgMvRVo#{
zj25=>=k&^D>ne+v6R7-ke>XCdCNg_y?m6<s#Z0d0=tKAtd`wI!%gBEgY<A;%;KKu2
zcCK%zsc@1N=%S*_Dvwm+ANQCCk+4uPUm0h=I;y96#dF|&%C_jl8a?G~)f}0XFrmt>
zlpAkbkpF9{#VLDr!0SFgFA?Au0@-HJw$kbw%ALT7>=%kHmp>zz_HaPT4L@F7o^190
z0M~E2xZ1QJQMfF9<xg=<D1`OemvlC%NgA5tsT!G*U>E1O|DdyfUQlTB;(^of+`w3G
z`&;Mlviyb7@?z1P*qpY!+oJfbKgPH&wp${h%X)KWf;n;&V$9Arc|)#z&;amK++UNE
zthE3h!z3Pq=+DL*KpXCe|H`^OR($$6R7L_@EmGGDmK)Z8c01$T2q5Kl02g*y7B67E
zCjD|1@*%rSQCbgAHNZyPmXRA&_%Oqde(pI04_%^T1v_8+BbvBQ*@@21SK(EpR&CaZ
z!A>%xXTrvMQAP)7iod^HVda6N=j=qd#M7b%hd03WAQC(LX$5Ls`$lI71_u!*P*j>X
zT&x1ks(ZZ?_w!-?F)bKC?EZ7et>`9d>tlT#Q~&Ku;_JmvX{{M?n)=POk}7#=s2!sV
zlTh%3sL*HWDK=YSXjEIlI3o+6;y7*6xn5X@t;E8Ip>}dp-po?|_RIT1nKmVRW;L6s
z1@rp-X(M9x)~YwVZzg-Wfd-CdCNhvWk6{JDG%XN}78`f3I2IhzauBd(8?JcwZu|84
ztoxWcX;rKC)59eJ)!*}eKN7cZ#n6c{g(sPYOp7N4_K;9Qu{jhsB)Bp3zb|ss3yn26
zS5XH3J{C}^^A<4CT0ZHa4_8N(HwtXSGHhSLmesk8+9q);O~~&*%J^zWetOzckQ7Y+
zar;l>g}1Fx;H+EbZjHJExF)f)F{II(iG*}t{5~b4ju?xGGAen_Z9ZQk&%&PLw(s%m
zRn<AahRYvM#7H%1KqbKp=!R(AT~69c9mF?Soz2_d0WnMdd5-mQzT(J+;B~MCevq#d
z6kawi`Ize`QO4JY7Z&J%L|;%h^udM4ux`(H;zg;1U-;k|R*+n^kd)V|tOae$=ZbcB
z_$r=JuQldMD=~$hZU(TvD>*~mF(YuEnbil{GYKDt2IF%<)2!t%K^iof`Ha<0m*Zj4
z#)E!y111s?D_yk|XqOx@2jF6Q85-+kveyZ*wHKUb^I@^8wA(BvEU%#*^IQ2Pe`pHp
z4vF?0M3urgZQ&l1*Y-=`a#H$S!|~-cVuuVp6Diql(@(%=yO%@UtvZ2wn*>QU?pa-d
zDUK>M<>!hFZ)UcyyDD;^v1gx!mA_Ky@gGG-?YyUW%SeE5dFm%F5}^y9O*)vF=(I_d
znV4E9^K?$*da%)9@rqs@=ph9g+f=uR>qdpC0ri!%D3Lt<)qQ({x>Ocv%>*l{fjyV2
z{H42}pC3ZI#nndI>cb6=Uev!4p^Q$J-*>ZbN3hsYg!F%)D!Lo%^z&A8;I~8OMVHFD
zjsm#<5JgqMGhrZzC|Fk?l(aYq5`PRi;dy?7_^I)d94H~Ishj2IDr`1J(9|wd0Idue
z<AE=qXs!+J8gDD_xcK-A@?_J}Pk=!e+B{I^!YYpyEGcrs`R^3dzStXiyD2T@V10{O
zJsSM}kGw^>NeT7so=-GX>gV)q?njm|+X;<ZwCp3*Uh?UQ-3eAaf@yr)&BD9!s(G{L
zN<*eb10Xd{<^}JLv^54-Og@n(o<#R4q0*{x4vt((#;5N4nlwD=T8EPW+VU|7?`}-P
zO}zBGkxvqu%l<QShgO1DoGY)f^)^ASPJnWWaS<od{85q}-o}IxTSiR2LN2Wa*_taK
z`qe`tt;_Q$ye?KHpWFfmWIu)3wJs;@xun(Dfo%;EBiHtsF&UJ37QUc4ESj%a%K7__
z>h%`NS!rkwmg^l<I5MH&oH{BQN(yLp{#WNH7pZcq$O4RJ8MbJOc#9T}#*6;R#@myg
zKgWip({i9{rxQSS^+4i&GQsJlS_rgeXKUS0<}b~ZDyp^TiPlTWvTv!XB7U9r3RovQ
zgVr8;(y4AZg#+#HY(>&6+T@<a(9xQ+3g_E{Qhci2j!GPe&6GwJ`*a;;4(^(2`nVgj
zc4w+%br3Rc@L5CVi93j9R~{hK0|^9>%>3kJo2u@62T`PUopryv0ixjMz4*<2XS1v8
zX8?U>P0mQ~#nD<4ppB{gSCnQd;;F#}m+b)I;_!8fEF86^JPyxE<l|jXQ}j<6f)2X|
zwSy4zv6cUJ?kyY~g?0!zhOSDp1@sFqtt#U9-L36iLAB~43-RgtJ+qZqf(VKePgVQn
z)y#{nfN{x`Kb-58P(}p!Ami3w>Xl<6b*>yz3Njso%cM``yxpw)V(n&yin**9Gyqv~
zyL#z|M$I3fjFDM`sBH%3^yuuwCY;Ouk$L!~-zGPwl)p8P%~Nk9;-5YoXE3k+8|!12
zMWj%pH@dPq?0CDn-m<9T&|?T49iWy^@?5?)cs)f1=ZeC_X1gqBp>!%YoNm>f-A!1I
za{<UGXTHCbll^Yg<ycMVc%l3`NqIpOJGK@+AntL`^$&{o=TfZ-pm#*xmRDBkz@g4o
zcCt}`(KjVunuVhn-g<f(!pGbDtZ|}TY}{bu{t%+wJR8V7#7Wt_Rq=E$a@cyx3%y`3
zEFs?_Q9`5OV7Fi04lxr-E&jGZ0EtfwS^Y3g$vXyb?uWn4=m+02W@{=}ep|J3xp=qR
z_MSgPdvaejp3IOvEZtb)mVa?Gcz5G)!6Z7RP`+;(2x*G{wSw%j!BpuTA@@GN9#Ch)
z?bFzwsBDmjMCTO7BU554L_QlNaa;+ltlu#OCa6GXb^NU1tRBz>0np90aQ@B@AH<`H
z5WUDSRz%t$)#he&@yae*XG_Sv7*|f&t}d*zGjTJArlv!V7n6NyKnkDb21a=CeW>3J
z<-RKg&S1B72ShsoX`#-7##<+_3&8RwgA5iH(w<=(7icu9BS8lm*AkuYCA98V?#|OC
z71}O-Fm2qNuG~Jd0>(fDE>DzaqwHo&vx}C4d`viF>^@56p=_!K$^>V(tt9&OOe@9u
zL6L`IC1%@abjmU9J*-5YM8I5jbHyk}uSO0}FKu|L#x}R)OAw`Euu{QznvG17<hU|*
z&wZ)QDgkZCV5@38={JXDLYUTr&tlCV9mW&5MuE3|Cfi)){+)qaZd&BZaW!$DXXk_0
z5Yr0kmxj7+rhL?yrcc#o0>aT*j#22FNdc31e&0$)re||dCDj9HzUP*vGtykyMD<3*
zeO3V=gxJmVrS?FEizYH)Ova@T=y>b?<V1a|it!*rd<wr>;L%9x>U7fo)%9ZUn$5Vr
z`-6r8o+(FV@WjXo8hy<%ny=atb_&O~Ef{0w(~;J_(<nfn5@8$EeVt8z^9PY%$|xI;
z4wv>@val7<{K$dI0SlI3VNT=1F|dYI(9YJMF^_|bqt&k<5ask(C^(LN1G#4Vs55a7
zpLzGOglMUnK=0vs#SRd7wXzt=k7hjqV)sJTQBth?VRx5tu=8+<qjub^%H&vy?jSn{
ziQ8}k;w~qXsy_>6rZk02H-zN0l-;C)|LIIfQ!vtY>g&>%@AiOFNP@mvI3q%wP7xTi
znp~6!q4COvs}-nJ0&G^J_;Vd?8KhM?H0Y9qs}n#dy@6@mX7G)_v6k1(@s_2cKw6E!
zew-*2-N1eSj=W6PV3heQ32#w2C)Xy3F7EDvB4$CQ-(@2|X^N3yFx96w%=K(`kI0-U
z?R^jJyPL%g7jS@KU!(4uS$F*bVSp<1j&X++8bH?DBi?U$aXk7Jkey01f{t|SCpvx>
zZ8$hF&zh5Ihj3+8YTWcF0_D;|N(!mG(f~nRW}a*@U}4Ee0lkF|fM791dGneh;R@<h
zUr<Pi21L5T^hKA)3-eaX1a@PpjLX!&?&^!6Q;xGHWD@t|57L^fsrY(b_$c<}ns(Q$
zcJD6ixjV!9My)Zg4Ar5DDaF;yQu)$+nW!5)aJ7<}GeRI3BqvSoJWE(6@aTHM{h~h3
z%_Tfcyx%xmoqAD@Qprvc0=bvjET2@*C0&7CAak5#hl#`DbmgJ+w)dIao$KDDr7N(A
zd-6u63iDw<>DdRVbN?uX_ZkS0n4^F>Z_7|SV%MVT+hK%>4$E<~na!Zj%>lf*G^d5}
z$2D|%Iv=g&*U0F5K{B$DF$9(Qgw`H%>&O5Q>;6e?)eO_rA^f|5TC)4`Fu%-?3m}!@
zJzReeh#ik@UMcV&v|$=g<WYU4c?Qmi!DlG|b91Q!5aR$zShTt0mde6a;u*1J8#-6P
zcpn>_8aDuieTaN&dWBR5hB76_{$WO|d&lhAy|WwwwO>?Mt8|?2vLNdpRW|5664$@I
zMr*8PW5@YOuu|VwVqDsSg7s~R73E!Hl<Iv!e~bch{;4$JksS=`*T{Bc1oVzqR?@9N
zK{$6S6nCBDiW+G}R)A&~FxUubVCKw*x#Lqejm<?JtqqdIaR8{F?c$~TK3=MTu1hw2
zY2HD+8`<u|M+Fe$WXWQT&MeC0lHn?P4S`9nF1>7uX6MsjOFH_pm9NTK3s%jfqV^%Y
z^Ze^S`y5*FMRS@)tVI~QkFE6UX-`<A<F)!cFV%)(VrT&4T^;*r4w0vZ0xJEMutTX~
z*#7>$AR<wj6|Bd&p#C!{)QB#GcX#UUcJa2Bxkn*)e8VO}+DNz>hiNkAXtiH9S?Los
z8eO46q|tz?+CLC;EHcS5ZT^M7T6#^_1I(<Bz{`rRwJaCM!oT;-m!L`ZDvmeT)<$b;
zSoT_jHqHqzO6GK^yMLMdA@d1Z>Kk<JT;gLnd^(!ti5Y$R+S=%g17~0cMxWJ>UaMdU
zU}g{E<l>sS5*2*C-FSC<-{*4Ugu6kQ0oY90n-cW^qrs`!u<qd+SpZ(F{`oD_ytvWL
zTUqvLgR8RwJG43e>sTL%-c(;8U4Q=j+*jF&PA;u&(C=a5X4mQK5UrV56cau0Zgq}n
z%xRHh!P2I#S!X98YPAUu<!zHY(Z%DYZX0W;09gCffpS+2HT$UmaK}~0VWsPRh@1<j
ze13McOcJ1G)|g8~MAge^oBm5sL+uRlXcjrRce`pk@ryi~$^eNnw8LxK^fAHb6vY9m
zeSMcy&*E8{MtNpud#0p6*bpx8mek|7x0+5k_*8`b=~KaakGHsWitq^NCpF1`eANp)
zO8k>mMP7RsJ(rpgXu){>sq6Ep&IF78*6tpsV_~O@$Lp3p9r7cFVp%mcd9{=H?rXQT
zZWZ}*OZ}2)6Zh+EpO86e7IyU2B^iAwBLfufrLkZ{9HY)j5zDFHxk1ddB!#C$rI>n=
zwN-qP&3Q7?pW$nw1S%y!z9Cg@oXTVABC<2kNb<2ROjk#sf|_~1tuk(vN@b|B<Eb*1
ziLKmFGpKj=X|uOJjbU2*813%L4*-`XxG!8()VP~^%|%gU76*E~`1#<k=@Rn`>`)r)
z%0vX=j;xKGc*QWl{_+be7BY>Mkln0nn^`Tkge4PYI);B(<0@s+i919&z~hC>H#lBW
zCiGx<MP?c156pJtXy`x4$t*+PfQ}%*uppY(`Be5RKO0bi&afE<_E!QNXny}^?cO85
zX;Q;0%EEp*FAkD;i6sDlF-uCGhBy97s5Y*P6*+I=-aYywp!2LsBb}X63LeSD#a4G(
zKnuJrY8E7op`m|~CfA>M<%r227R>xz%E~grT3QJ9<}DfeYfseA$+KkSiNle<-;*$f
zfFgvPjf{+Fe_{}I%Z7(J^cfe{p2ljZ9|5!AP>Ph<-)8B62Dr`Lv(v_X8r<MFOg}D<
zg)qb3F-^h{5yf9GyL|X5y~uM|!zxFF{`%>|zo~CX-ky^i)h1g3Fhvc5ug+P9>&X}G
zbARRz(`nGI&u>q-cgFuRmlMwXRi*kBhV-d~dNCU!ECA1r<!Kfb{f2b_Pc%NiI2c>k
zzxe~B#Y~yuwpaD6S*^4rY0sgb;`RPWp+*nBwGG8dHJpz?OGO3H?~SBWt2qw!Be{Sv
zxK{%R5qVbww$haSliRaT7$JQhpBm$d^)1|G8+t!J(0TA%@v-!P{^s1l2;y1}X){Br
z=U(-1mEttYTLyQFRjk&}WfCFj1A(eY5Ogl0PYd%&KQD1T&&Y=`i-#&YGaNw*to$cq
zvZ6$`fU5pUwz>P23PasKoK+C%f>kfwV%>HePrHP&D+<91y0rJVfyhW4>d}2*7*P3B
z5?^_>UVmyZNz0E^lRA9-;&W{h%kZ&?06cIS|MT}2y?X2yUWnUP%f#sgQLB;an{iv=
zz;_%Dd#&P_6rJ>0VpUVi+_vvtFw@Jtfx77kYd*tVxAQk_4uiD+{r=N>#c48WFP6`h
z>u7hoZ*qJ*g;vAu0v2ah<FC7F;sSuiB|jd(Q@{482FisP7JZBqB~)V7I)?)#{e%-h
zRB|{Z0jtdO;^cC2*<I{q`0sCZMRZM-bmGo8Q)~hczdv9R>-2Ed*b-cO_4W=0rcFhp
zxv`2@>Sc3e6p0QC`-SSvPIIqFN5YP{mt3e$F;;GR@J0VK(l3CKLh)E>(?!4-;EQFF
zo9ItweyAiB8_>Aa_ffP;%<i`?l&>iqI%4!)&bSxvB|bP?{fHPTz_B)~c=}p&N+Oa7
ztb`K7fUGJga4UW1xy~eoIx16Gw$8xm_wRhI72hWLnA}ih{`YYIJL?)Bf$tk7xQYEv
z>TV)y(N*lHy&K)Lx)uBuN~4TXXH(I1d)OFmgb2ZDt}V$Wu!OJ|KbxL^7{bKB^zV3y
z9+iiabkdR+9Q;b$7mdWNtJ&}Eq)7(Ll^(v&PNo^Z&AJq~-Q1~#u)SIR$;8=$^B#Te
z_9qH>O^ifN`(4$;uxR7E^*8zjS9^_jKqC|J{Eb~LT)60u3U(&gV{2e{f<tIP>LhY3
zSWy-2?yXIooSUmV<lx^>Eq|-h6UoCL^<j*e(<aU|eD)Us2E|hB$Ao}UOZH%6S(hlu
z4!8K3bwR@)?}mDjY--zdZllGIjN?aGj3;Q#lvskZ30d@B{s>!_FhhJrXpn9Z8&R}5
zolfAhQk)bN6tsA?aJG&(FV+o^V7;2<g#TXMI>@_ClZQ*y|GgwItK0b8JKK5CU@9;8
zj}yM+@~rw6aHBKrb6wcl3*}OyS2Kvc5${Y0DcR7q{K70vP==-LUOR7ecH1T%d?<|p
z*bxN2Monv}m(c*{$(M%udZJf9zodVVXh#n<U{n2oP1$KU5XT?#5(X%p7PF9#glE9Y
zh&aqtU0r!$tQy5u2w+;dQpF!TbY9F<eFjfnhyj4kAUkus)DF^rc-HyPZ^Kt!B-x0#
zr!Nm7#E)V!xH9qY6m(cc_dz2I9de6|+W&OR`o`b-w0IN6mKm#6y1w502G955-fOY*
zy~JO7iCf)G9v3aBQe#7PrI|XO<&gj!C+pX0*MoLkq)m2iF`7IwJxpV<Tv1|2_)Pz4
zVatiJF{$9NtKUb9>v65WIh8Gp+2at1EDH&4^4J9bakCiVLUAF;^dbU!zYG0URi^3=
zqwbDYm+fsQE))D6G_{3f)$G=BRK`KkGs<@UKZ^W4UL4E7&C@f5hB&a!;SGfT?4_eH
z6Ek`H4#UfFcF*j+SD_BwMVEBiHx|hR{Uk@6M*pD|cvIQ<H=sHKZo~UMYGV|?Empch
zo%hN)=9PWa11juaq6k;46AvUW_fWhut6y#%ru-jg_1}GR@({qHP-6z2tAjqs9WUjr
z|LtsPITU72FyHDE+0D25xR)<aWF5uvd_dQlm+@`=CwO5^-WPyH3bTb3g})4L>h2Dw
zFfSihfPcPfRn5P6qCb$t)XQ$WDW^(+t?qgve@zaqD$f{t0}5ui>oZJ>;V@5x?3JIX
zJM<Y<ZZYk+jl&cDs)8psiiWo^yTX17R(NER$%`2K5|-ZKFE9nORll8<TrKin_ypHn
zg0`K7QX`CmMI{%sm;Q>52NMWlO>7qBFa8*56G@K3Tu1T;BGWYT!NGE;`{l~l*?`sQ
zQhg0TZODG!7MDQRjLk6DACn?=Rw{gu_m0pq%0tKo!%0kY6&Sg>UhSE4c=`KY-JUgs
z?8<%o%XMp#Lfia>kycJR#s%k7W$?Nj`0<k#Vrstc!&(z|C>UF)*`HLj=Q+@vJ_=0f
zjk2cVr@tsK4?nY#wcq?w-Gz+^?{#(Q!sdn!#9`n#^Qc*{KD@5xy$lz<Uz_#5bqDBz
zyG$tQt2qq&gn-=J*sI#A=)M&-Q7?1(H}Kq^F9RJ4cd8Vm$;I2#O7HKf+%Tre8$S%y
zbqRJ1Hg1sH{A>>NQQ`zxnHroMGlUkKOIDp~Bg*YAlX6;}U<~V82aLs$DQ<Q}w`Dh5
zADz`(^;YeLYSvz_>si`F7l#!buO(yfg}6$~FGoUFgCT51Rm&c#OrE>zqc7dC-YAWe
z(p(3lrLdlOelMG6Je}w9b~A?YYuaB$f4w<?p)}mjA`X96eJYq(`+SR@KYRSbh7IK<
z9y4tRM`9VdS9y9oFO#V|NZi|OzA7j3(PIlNz8(4t+w5VZ--C_Ni+3m~zI@lXg1FNh
z@DxT0FLP0vlpn~QHq!y4GT-0a4lvnDc4&!ql{8v#Ia0=j_DD0qWVjOQ%w1;ib=^M<
z?Sw|>sj|oE1)z4=+S<}mHv+4M(D=^ZYCWT){>??}xJngi+UR;FWFvDAwgV^eC0NZ!
z#xTQxtc!PT+xoZV2Vn|`slSu^_1prJ{%gTjNzyga+sT}0LEkrc+#?BAbQJE0{MZkZ
zR^aSS;S!J3uxiR$>64kfWL7>6`rLXfY2MQIyXs!_R~8aS(=iO-9#vbJI?ovAP3uoO
zl!lgvMkSkmlN3=OmRAU+zIPL!;O2?_{kdC{W3pKRc|L^do734vmm_ntyTw^|`&rZe
ze!4Flb{%sjrTu(Y(}QkHm`QI37owbjg+Z2`Bxh%ecWzxNe#s1oFW-1%zW;)WhbV5>
zR|aBen>iBtk#DGl(%pvj-W|PJUc->u5!M4~stie6L(Jv?66lAoB*20G_E*Vk(QNN!
z%2{DfD?*Xrcpcl1e)CW+#YKz!IPP2~6%A_9){(?s2Gck7qRYd69dY2pK%~vXjF}Lg
zPalb9_5XV(zI)df!+hDtLoN|*Y4m~l1MMsofT}#q{OWep&%s%*zyGIM*x(&+arnoN
z_%c?bK^(9nN91gf5D$_6uXgO%qAgcBj;5baek_m$V}Gnm<dKdMc+S^@ajVmGFH=7=
zGeaumYvMt=33;4Zz8f-y50jRXM9@V;X#RBAbtGH7H<eou9b}y33SDkCEPr++Xk8qU
zN4N66kvDYuAZ<ZU#jXYfX0k)lVpQu8@+e8HqmUD;{4Uk`u4ouz{S>zHyR}ehokS89
zp_?uhHNT^pH$uwuNgse>htNa@sVvc;TlmJC5@!3xrIF{qj%7_pbQU*{9L9$8ZI=qc
zV_8iDh{dy%=yOIZJ`#_d43L1c!)1t1k#T3q-%3DxkQ(W7s(h}O8Y}KLFNN7nG{)y5
zX;~u!i2O~Kn<=2Di-XlOWk;<MxR(POm=!UfUH&_9ak%;0sPHFEIo7PANQlC58xl0l
zd7+fT3QLsvKiF8o{-f#Sj^0o)u1zT!+l2Zs(~wsILlW8uByS`Wc`krllkLzqB6I91
zcW-wtiEzj(X$H(k6~=4NT{0;ppXgIrU50fVX?FDS&pSkoRZi_kAry60Z_=q3f3~)G
z2&RqPoyN4`sMLIV9kDEv!wgMdgYYi4L&k%|fsa-H`@WnEhp=0_MZKlzR_rH_?3WqW
zTl&)_`$cG*Ah(MNqH1X&tc&4q*k3L4srn=@_d;X&8P|)+$;r5eJnG)HB<I@`&casH
z9W;^k#{p1SQ~T|2n{C4l$R~zF&IG@y9-VJigN=XY?`(>p5eCNKN%kt2B5L|ewhdMG
za2r<56Ni|)It=|w3r5Sa4Qd+U`;y3s^gg-h!}Hf;M_v1wkPZ(KlS}4hZr6+BJjA;4
z)m4eZf=~(T9-@&8YlT%V<Rz6GpRVylNQHO!@x0`0%|!P0S+Q^fHgM?oMN3oeGk}dh
zZRdtS(Eo9ye3Hp5t2|aw$In#tz6H=MI?vAP&s!=otEp&K_RYu%sf@*nqZJS+6HhSe
zh#8mg+Tb-t{FJ4CwbbLtC$@%bSnvVv-4G4ZwR=rb+~;$4s&19v22gU#s8gA-^ma6v
z0omGi!zC_si?QtIYBKpVDOAH|_;!n%6H;$DtRv*bLGYG_4%xoz+bXi729I-I;XkfO
zMU~3$UZ`NiTn1ATv`L7=YC2*s{meozHZDDGn9`bhGgY|jJ-L7J>=FD;ZoZA(VHo`g
z!ufTpouDtocGj>bivSeDiDW~Vq0xI>@6$hY1f7c)$O#lHF+bIhQ<KrER9I8Hl1_Q#
zjQ(>^>0wV(AgGq>`n;2PI>s0q`p_$X(11BwV0rcH(hcWuJId{&1DzWWD>+X6Z({Jm
z$!O^7{$Kj++rRfF<sLxvSo|@|&IJo1EQ~QmTUZv$NwELn_JCg!*siwHkM4?4i~l(y
z2(?`}Byg7x(Bj9esPOZ`CqPDOJQ%{1QE?w5^Ae7>5+s9)-~U$O>nTkPOaXXhD-o%%
z9QN=u!*6@P8a~LA$~2qkl?&tjBaZ}%v~vni${4W@B6Za*IDX7ZHD{HrZKW6+a%suu
zY(6^OA!l5ge~1x3lsr>(sBWeuz0;R~0Ty`)>}3dOAtuh_6yN@^m%qEv<<I-350Jo@
z9eB^2M^;EZKunyjPVtZY`rQ!43x^lJ!lHciuxFDO*Iod~2UVLv97{Z5!`EglM~87~
ziseU*C;caVCqniA%&GE)NmpZed=!`wIt}7(o@=3_5sYpyC)3%Fwu^9Fe3v`?&r>`m
z^emyNHIRx&QoSmPD?o{&vrw0!hN*FlN+Ulfb`du0b13XnYRw>*q&dU>Ic=TvYvBW&
z+9ypRaS%#V**A&9H=rN%)gl@*b6w%h+6rh)dtscpnEyIO&!Ard5wsstpDX@KYvldy
zu#xc*`$8}xpj4f`XWR06zx6JE+-D%LS1?xA+ct0T^XY~$*Ntb>^I1$xLH~pg7?`?-
zx$PRRC*$`(0Dp?4=$pfBpg}-vS%GF{-7BWDTe;|#nP_F?e$K-x`p*YAc`Jo{xN&-X
zJ*hEpa~MmSsDcdvoK0TuMJ`3Wb@q|bvnU3NFkM`%k%CA}cMRs3El(w|u%;LKI;X!O
zdK5W*4E?M|*qYHn^x|!y`Q7U3BCUE|w3q9b4lm?3JwAZ7bT;QY$ktf5n#q5&5kV#E
z;C+^kZCbluM&i9O!)>lG_*wr+U1+o7;`s2ew2F!fCDzD>jV+^2mcIi`Tx%sl?kb%#
zWSdHnpwUpZmRUCy+)aSW+&9pnosc(A$LpRf=UQm{$xny!S|A~-<R6#s_&MCg$E3s3
zgaI<`D0&}yC9~5Wuyl_jD!s+7;^N5~kE~TIGn-Ikg!Qu$q6|z1YuFFtFJk~4@Jf*B
zILwU+k4)Q$=03l{gPU)NCnOR5fvAp#_LF-V$6wEPpzqIM!R0iX`+h5s!gFwNq#b1m
zr6MUB$z<l|?-aV<Yyse2cGpXr?UeGRfQ>Ec5q9DZKxU-6yfP23_s(?AzhTAp4Tv@!
z5A-?EPUkl()0wzy;!M_h+u^w7VMJYwxW`aHENdo*8C519fk#;7!BD0yB?tZ%(_&2x
zm+}Gqf>v5a?#a3+_+J6U3-ilm+Y=w#PzlbcGjaOUxSnju;0X)$qfvXkHM*@ny?VJa
zE+Ybb2*In5PFt?0Hsx&9l(Zt)et!^*=U}lvGf??(QGseqa~{dY`2#s$@bI4vP<+aM
zpM(~y$Q!Gova&RQ&{eG8gq_=RsSVhTp>@1I{Qt1^mSIu7U(~PyQX;8zr+{>KcQ?|~
zjWkG!G}7JO-7s{+(B0AvN_V|y{?Ge-cz$|a^BHFDv(LWwUVE*z7iAmB=9$dK(lYh0
z9Muysiki$Pb09lXYfVRU;@KL<=DiwDbTNzu7x&q<@Tf%kNYI-H@g{x3x+o1BqJ>qG
z-PCZI-Ilbd)Wd0Qimgdw3Xxh$(CG9DVgg*w<Iw%dRC4KlO@&<9d8r>&dceMsHQ~-9
z+EvrnUt0uMUJjW<uD$<$vh2{{4F{k^G$PvkhpGHz<Gz~6lel_j>Obx22b3n}Pc2?M
zIA-_14PCtELoUbRD%-y6)i-@K-hsJb?n<TK;C(KH+)hD|{?Zfg?OVIN2^~Vx$W!q&
zTnf%EmT~Tj96;=}!N$&>vpll-^Z<H!hBOyXm6e6RAxJ1dZ6b18_XSyTg#TYJ07}8N
zxx1j&@)B_;k|&LP5)l(?C%t!}qVOp;c~O=HxWz^d(b2I*f^0e)OPevpXM@C=nX^n=
zBJR@Ilx>qyyp^>>E){4DHP5ATb9_d+lXU5)h&Ut85``&$7m{tEuh8O!hFq1vVtUMy
zF8B0DV)gk|w=+hd&n(IzqPj`pmN`P{UEhu5uNzlEZSSd6LS(;R7~8dkdab)<4wio6
z(|~{}A`mboB~WDH%g(y;l{qI5B8UQq0mDa5POiMX+?*f%966H9p!2)_<0BSB+wBwt
z<iTmZsNg~2Tz};lZ1>jmk#Plw&@K-yj0QIvseK&L{VjSF`~=Ul(|{w3X_;1iN;Y6F
z-9Y7e=pX5QnLF|$#l=LKUB8+1`3ztKrgj)SQyQ@^0&G`YT->T4Opw$bjCD+9`wxqA
zL`BUvmP;@PW`Ift*q{USSEE*zmevMD<|%bUI}VrnHhu7=?k4|@3m{T}&^U$4?4d=J
zVo-v&%H5Xkh?5P<56aNApH|?`F}6W<5$&@E|CGKum>!oWSMfA*WerZ#h|t9c<ta!l
z#zR?*v|n{u)jeeZ)!;};uIL4h4YS(fz;u@%oLvo=vKQ76#m8wUvSHb!Wh;UQ*-p}A
zCbbXA@X}?`IT27Uhdb{K3fWG2ew3e%&^;%~xyDACn_4w*j5EO78%y`-dIQ*hw_CW0
zZ;H#kg-B<MW>w_*0+>{~$#%u^05fIaFs^}(y?be-+{S4z3D36!0;>S&dPK?agGD!)
z-^KYb14|`<GoTP~&lu8KbiYd43g`HBJ38DB0``W{R<v%uHS_YNoO@|jNOsNUKM3Do
zS~7~@54?J4{iWCT=c(wQy*ezE@1Cpp-GoA(Umk6<aX-b-=<uHx$Gcgo6lNnW6<X-=
zc*m<n40##~+|4FFocZ$Tr0Ol-z1q+;Mp=cz`^&&_Wg}Ey6ydC8l<Tf^G`qp5!6;Nm
za%22wwA#Sho&qn=lgLN{o&@x;4ano39k0wmXh422CGlrXc3ESUB|=9952~;d<-{Tj
z3>vSM(qqO9v<}jg<CG1^r)#{7&n^QS19e@Wk|nTZ1N||LM+!clJWi)4zN|ZFBP($A
z)GmMlHk!lp<6Rsh8I(+Q)BvH!r;6(^mT}D*<B+yt?qn`U%6JIQdZPdARW;FZB`eTz
ze^ogqaPkNY3z+m9-tGK8V$$a}MlvvdJPriSs%yU^;@5$_X!Cx5Df@T+amDyJptMB7
zO4Akhu43kHzh`Grp~k;8u(CsmW{b)a`Dy!fJUw%?<)fs(5|`m`cT_HcFfWZT+SK`c
zno&qbyGQr6jqHViMIJj|E>SBDF3<rm!iESp!A%T0ny(XCLa8<l2LJ={2S^)G1%UK<
zZ<?(td3G0!Tpspqf#C<;7e7}(WD3ZQ4iFC@ow<>KQX2XF0S!?Qcb>?~N4sj?+@~`I
zZ&_mU+)cWXA4srY4`-<DTA31SXK;|5ZJ&OZOW=FM<Qk?03m<x({oGR=I}uHzEdSW6
z<sj2IVs%e8y*TGMQ>4@y?63>au<g$F!?_&I#dK)+PWOk1bit(?A}A|0#OXuV!OPAH
zt?5Gr%+V#+LQW)&&O{-W|0u%*u~36`nI$P?qTl)n_rH-z90zSx+|T~ZX_n<5La`dJ
zBUeXx>;~KOt5pocW&hOVk}^;`4*il0P0yLm3%2Pk-qmHqbOwOh2_s0}Quo3+`#!(+
z^(k@e1wCiNIJ4Ydd?fqSx?7df&m4k5aP|aQx^)734ljX?ujC3`5hzB%HhC$FZ55;@
z%yB}Sqz6QMZVxZ35#o71{otfXV2SL@S^i5BuRC)OF&h2-&dVe7RY;R3@O~A@r%RK}
z0<I1X2h&7-c2i$hn(Sr66{WvzQM)&H&k}l`cA@Z|zT%JLp6R7y#%fs7Y4_y9$QuWy
z+PgJ&I^x^Z<wY02PP}g7VimIK?rtP6^(mmGwu~eXVgs`px+|DFPMEOyfRy~-;h8Ur
zNY*_C*30b+1@d*5+`SMr;^I<`V}D%%g`>8mU*K53@^5V$3XbCinOZQN*7Qyst=X`%
zy~*2AY3Vn`L(LB8zS36DGh+Xz|G4&XWz-Lp7Ma~R7c}Y!lm&0hH1$2H86j0CnEn}Q
z-?+u3)AIMrr3?w~20#o=suh>)u-Xd7B&0A6GE}>}QMxdH2WzsQLq3idc8u|W)s4%d
zJC-dDbgWkWxA-@_4jy+qi5UD+C?oqQKDW@XQ}Ks;qD2Mn4ivtos2ZGdE)waTi7=}g
zIrFMeD$rWS2wiz!<y6*OQE74_???JPlI<q09=EBw&5LSa%NpQf9;Qxs&JWSN|HrZD
z$!Fb{vxkvAl*nI_zc?E|5}!0CJ{fWc7YM9+4--B14O=e#z+~8~zfC{L4wv||wxMH0
zJ=SDg#4_k{H&C__(#eehv}3Zceh+w@U)QOSZ((E#Lu9S(tUNA8-Gc>?h_%Jfe}?d`
zzQZuXjgWOlVDBh7buD;d%vL3{Q;r<*C~b4zRV+4liO&F&p-P0|cVP!Zw;k6E1I{Gy
zc-R!YV&yemJ6S@|U=^Y*u*x}5H|l@B9xIY8^tryIYg~!xVsUlJN#nHN%nrg2y)kCv
z^Dtk1Nc3QMy3en#ulLuJPhkxiRGEwM`yn{?v%`gHS$_%<9zv1<%1`lea*z6*HTRux
zb#p;%6g#HCld>}OzhVct;4xrsEp_an@Ts38HwvVqPx6^95(k|>xt~6-9I<SLVVMR}
zJYj0o9+<)rs1P!-el<zFkwNeo)p+!&o5=*q4zFYgBw~zDic;9mK)~Mg*tH{2^<AjK
zWr`#6Hs0Sp7dL42YXb7l@q3UP*f0mJIzh7|VRsjx^Z~Xgmw-~R?D1TS?6}CTySnst
zxpSW=R~ml%9q`fua9h8r!=ZeibOpj=Z?kgvf|UPO428^S{#38H!}KV}XKc#yG46{`
zEJ^;+=z`L3SpR@ty#I({>4|3S9*4OD4EZQKOUoPu^4-eHm#bEeJtkK~sm9fBM}YKe
z$Y4MGMj2|vhwXEQmK@Eg9`^_q&EDN(={*hBzhX&_xTIHCo&3B0XGJ}}1rBN0a{75i
zTiP{&w$q`Jtht?^pf082{I&_Fsg3%9%vIcP@4WYw!L557ah#k@8so}-03f9)0l-`u
zI1(X>My$q7TB{YkB+5UMSokCsh^Zb?x6Ox3OEEeL&w1W5NrdQ*QcWQ~+!5+kF7-4U
zAGfhHCb(UY>NNubm~;A+*uA0m*m>a_z~XV@ee||qZvsYx@8Ne~s*K)FWyf*88(@MI
z#@1_~rOmx&bi=1vEg$=VR=t(?!DI+jUR<085b|1|ZW^b#X5G+&G9XpzNQ4HX+^P&g
z2D6n`8_QW-N}P5&U>~xRRy&@}WwZAAGsWK(CS)3TD#!a(Z~tYDKOx?(rJ`m}n>%dH
zZT)(ei{W;>6}>_$VNbhO14){0$7%XIS>zboj9Jctdw}w~M!Uekpug)2;jiJs$_=2?
zY7K{k(e#hj4-bLnEb$>RBHJ5?)J(JzO`B<4j*PaCF{IeB+PFD4MN)y9ebHnRS|)F;
zd%2XKE5lZoDM9p&rX)BY#;VVMGQ&?q7ksuDt8ym*_Y3-O5%@IwIl6t6Ac$DA=Iszi
zAfs@Kdwp@4<%iO3JvCuSLY*hlY~sts7ZuF7vrS6#RrF!vOV6#YEQ$_w_AZ5fhd<fU
zL93Rqm$_mP;z`PWD{crv|NZ^9iagiyGU0!{P%JQWqF5A9S?E#V`4ucP_UG$}F%7~<
zF5~V}I>&pr>2>!DEF15`y<b_;N{j9Y3@5E4DGa^#HMm`iW(B3bz^&Ly3jy$2>uJsh
zb1$s%v1Ny|4modjpW*&cAxEEzx8m_5>q_>&UwuC{L)`)-l;?-v<2XE$;ulG*m6kk5
zhdnx_DKU*K2C}5EwTGyquv!G~$&cC>XQp<YfnCHkI~0`-TQe5&-sdi{psAHzt9Ll;
z$s)*n+pdjI$YdZVu<{|Jieo*z^vI`LBdjqIWPX2%u&y!+yF6r#qcn+=lp+O?t~(ky
z?65^${a?`6r74u>TNm#gTJ~iBMpG#+J!XCL)H8#HYxOCHpk&b`lvIc4i>W)IR1WX+
z+c8fN{m#-*{(BkWklauahSML1wkd7y4Y;Ymu>1k-HZdAt_MJlWO5{hIE51WweF`$^
z8ESjJKLXZ#PtG&k-H#-*j2fIDfoT?aGJs{UM-^><!hCqPE;3&pYsdLz2xN)8qqrNs
z-$Ntq=xc~kPLXVtrAQo-!i*xElMcyI1NB~;z{A0Ka7!K(8Q1Q<kzy&YZq?V<Dd?5b
z8rs&?Z?@_hWMk1O#Z2xSg-L0PJMlt#>yqS<C|R4(qlaGa9EX9A_UDG&v94aOPH7bm
zk{cOcl`JaG_umrQTuJ^_6$0=qkMBYN0VrN3@k1dWqd;TX#6nbP%xH+RncT`oj8UXO
zHNbwbrWxM6K$7@eg_u5AXuOWKc2w$Qms!&fU}RO8z8S&2W$j}lxQ)B4qj)*16P^nk
z+7qJ|zpzC-iDordM&+Z)r_*oNd<6PqF*><Of*MSrOVfP@!$2|~Xu2C1lRuD>eAO<D
z0ST0ErPpsO(Xgc>$etgdJdWXQj;h}_MK8UgF4PXRBv^{?V(~guv1RBpI@in4dh=;p
zO`s*z(VPDE{7tVLv)szZ`10qDl=|wO*$E?T<1&#U5QPGlT{cE)BHygqzkWTHZ_{>A
zvhqH9J8gj8dpI^Q=V#B;!>@lF>wB!YHH8m6*ub6xB_HHeT*2O((;>#ADM`beXf1AX
zgX+*XV8ScHw%9yz3Mf1{-*<P3i<o{Gb#Aw4L0bpnk%aYI@;u?cjE|#8L{7iK^Iz^f
zzPSKIzhIp4F=9fD;XA-Z#B;A@4Fv3@&yLh9qv=L@`9cgg`lLqpMGZ6sS{#8R@;u%A
z$>0rChR4o@-n%nf5q!vGV9}}yH<2=05z=Z33g<yhDp8e9)M7!Cxk)3&<hLm?>cL{W
z!!mS!#-2yzje~1WTXH`!>A5dPSO90EuPV*NH6w5-pJJKKhKO;#<H)kq5)~1tVgBQi
z$sk8H)yZMGj;TJO(uwX%s&HPt03D2@x2mK%9>iou^vuN!NBqh*-HUX;iqG}?AN$D=
z3QyT^^J=6Z{pMsZ9oYJrw%S8i7Hz9jx_NTD72yNSs{n;dFQn-_Kl1T<a_zX#B_|F=
z-I))_eD`CVdwX_JVmLLWm$xP+-Q)ydu*S8Wo%W#cT!gVu$tHD{Crej^;S+#6HIX8M
z*oZ=-jqBLiXgb<WF<YTrEp+o^;<2U9fo+>xzHkIiYXF_teju|bk_BR>P%>L8FYw!m
zTOY+wDl=@2n~1}9C4%SAU^!Ex#u3dwpx(Av!EMB787dm9w_D20sqj3QeBKJ1^`I{*
z4Ha>xLw%k}kwJFcn@Qs)$eeje^7}~Vt9M+Ms-zQYFy9OnMqCMKeSI<S%r`=@x${WS
zql~Z6e6TsrMcFnHJI>=PiJy!57k46g&n4A3+pYGFlr-bR>gvCox}Y<38}I{^T^O-V
zCU-3jjYgm?)NugM10br0t&)FO+Givp_LVWH%>)7#gtTqy>FtE**uqkf<KC*{xc(qZ
z%UNn92g>s5WJGRWUR#?VnO8;YxrAAUv#E#(^sFYo54bP!ah%~LXk9Kv<y;8kf|O|&
z8io7RUm-n9Wmw>&;OyT8#{wfv&KR!*)P)+SLwW{n+hgm?zTa^cX8%r_2F-oGj#2Y2
z#zXG|KEQ^|QmycWgCI2v!3frjAyU|;Y~Lq8;l(LAZ-WeBY5&;B5l#oK^8hsPMS2Xp
zV2swIao5k<gwC^OewB5^(mL7BV~qQmyg`Nfz~WT^t*e=rOXt1<5QI#i$B7&<V1`X`
z3~qiSqkQ|Y>|^KdSff)c`1I0#-!Yjol3q0pgi0F6c>;-F5Ti<gIGe3RB;ixriTBB|
z<CtmtWh<ZpBhq>H16YDGDV0G3c^@im?d&9;9a5r3gS#s>3%vgY&hWs)cq<}Q7)!`%
zNMdQ7NAf0VF*ec>xYLiAbc;?|;WL_FW_Y-;BN<1V$~Dt!Sh@^2%@hKcMG$!vi3#Qs
zvRRNJ*_X2<gdZ`y^yAD4d!d-3kH2e%$5cgnMm@a?<d(I(Bw=QE*^yv~e&yiez{W&7
z`j7G5tVj@f#bqly&g;6iT~5i^=(3Z2Nqf)Ct7QWS(=n*zv;5ULbbO$LlD6;<V#Ar;
zr7zZ={<t<iU#mCgUsM|nKxW%nP>lox1g&UF!>#V3j!;w(xrWzHcO@!}^vf~K{nLrp
z3jk_qquiOxCj^RyOyQ;DjUSf%bF`)>nRU#ZtivVSmoKX6eVct9bb^BM<#q8vt8w?w
z^FBkz?ajdc92r;iG7!m=I740`Nl0hEgn{1^g~Vg|q>B`D0kf}FP85>&#Cs}t7<|(x
zOOc>=WPT@PIZ@h#$s*(z8yJ-ZdnFXT$x~FNgX01(p7NNakq^s&!E<HPW@y{>QYrUX
zV}N+Z*X|HWsrwB{Quc{$Mp9E>Zk@JoSC!sRr7yRUFIi~~)`{S3!8((aOW8N8GIG-9
zR*ob-f3U{ej#CpCr~7_lWxB4qm(e#C9(kKAwD$Fb5nWg1+uwr9A0$;({&7LfrN1(Z
zZV@GM=`+}<0e<vo$JGs^N~}Y2)BXcNUxRUt^Foqm*Bkf|VtTRAULDuE5^5-~m`>OS
znFxv6t%i_y+q|~I1d~3H!sv9P=gjtf3~}fTnUe5RpIw_+hA>j@qPWKl#kxDs)4KQp
z&h!ASViW*3v1_n=hcM|H+pp-B;bMo9gz!kpu`}xV0N1t3mOssaz&6R7v-k0*{^O=g
zY-4T@015qaJ@K-!v2hZkl{eZW&MlE5zn{|kg0VMLZZXP`aUquAtN;8oT-*Z^pV#qt
z7liATb@wB<0_pw5W<L88%1j8&KiI^AC>ZdF6>-#w4(YbLD=RCD;7|4f)B@6T<jMh4
zp$6Se*%J5}D^6)L35Me+I_Q2AJ!CUSz+3b!22wve5pE)R^_PA1+2<lpac7PFzRlIN
z3xGmo+g|~g1_*$3$rMKWg{m*sh#|7Qn{@i^o=Z>DgkG0Su}M6~P0)tOl>^iC{(Xu#
zB$Zjq9WPHO`nTO!rXxvTjCOg`tl2LXwjxKreZf32>5vK3jV&j6htGLRMsx>{Qy{X@
z2nf7Y<hkB#490v-$catj=VOu2U_SP`Ufkn(xgww(=8vBd3OpBIilKf_!(w>HrSMuT
z<4A-4cBm|wg$p@Y-upf_(@+2)W~!<csb-lq?`Y9&Cp64a?aYvjYmXSXaB=8m1Cab*
z^yVW8;yver3;XU;ilQ1+e{8V-1yuVnCE}ff+{F3HN~V6)pHGxWuvl6erpmd)A=ivV
z&Az#~jSreS9DotSl6^0X{<nF%SC$k2ZbSv|^sshXe}yADA{^6IwgCqw{s=7J>oA`r
zJ^z&0f0+%>m5OH<jMLjf^6T_l+R^B_qn47xOtgg3;s`-9z0@3wF4HSv(G#EbXNcat
zNDz-vC~mso*9+i$lp1d0BUSPlV=mC=Y=t4?I(Zr!g~B@V4pOQ<ti3$fSxjToOq-=Q
znKWfQFHVp1ZjGRki7T4J#v&d^y3bHWT3Xm{ys~elgPnHD)6G6BxAS@c>;^XciC|%K
z<k%PeUo)!eHL}Ar=lEY9mR4>mTZ|DWL!FS0502)i;OVw}NqnVB_4o0SRuRHX(d$k|
zX8imtzAueEBD&pDLj-ql|M(+cV~y2dCh2_TO*u#mjN763DUc47Lf44fI^Z2r@VZy;
zTYi$<{-*6b-VqZE8^93Qhfp~h@goEIS@bQ`BR0sEM*d_^1tQ@%04fdvjxDYqMAg<a
zfLt2BGY{8BuF*ap6=je;x{SL~zG$MJIbxpal{Ix>bjDdBZ0aN_Dwl7NHcee!oo1jr
zKsQ?lek}j?x(F;1wji6hWEllXJ_@jP3sB$G89e_G@`E)LE|g7g9v*9{DlJIo8l&C!
z)nE)Da9P+0CDQBi<VsAtQI;2&6VOOPJ&?NG0kDK7F(LIr9k%Z8`BA<~-LEFn0dGod
zBO`8X+10-IK*=vO6WLz)mj(X{I=lqIocFy#Vp<N$;@!~{YGVh~@xKnWD`{6f6kIOK
zwcC_KF9trl?t`v{b8HhM&0Ga0W@k>>IE(N#2)8lpwMxMp$8g1sKLt4;q-*f49GGOO
zWGXz&CK$ki;PAh`q8-Gd*SS3oGb8djKKop2Y9H}#b#zzWamnxuGDiSzUQgiLGC~K(
z=eAni8QfHbE_4>F6nH;w5dq?phl5Pb!GZ!xy&*E#o=){LO`%WZOK8JV>*RiBv<i3#
zp;6obllve++tz(#a$p_fEQS?_+vy`ys(R2Dl>y65oCBN#shYwjtw7(nZ8XO^FklNP
zV9ey9Vl)lx8W_MUr%cCIW=V1i?%Iz2vO&%F)yf$gx^bJjaku#&xNc`46)MPKDjt|R
z@nPi;`5V=gP5xA-#jIbsZ&{M%(yHOyYn%@dDoLYrDjTtWj!q$PML7x-WqQpQKs?xl
zeN+rQfvRZ8L4~mOAP7&c;4~IM{hn*ZqaA2mvZUR7hZYA+ybp)sY0=!v*7aJAnchi+
z<M*}4Ht`A*AT0MzlN?OA)cx)b7UniK(6RAfwyu2#7u|8zkB79%-fj%cq7lg>B=%;J
z&_Bqe0EN%iHs&v|N{V8#H|#sy-exybX_60&8Li!iUuD=zEh6`$w9i$m!koo0aL*A@
zCqIO6hxyZfbbE_)l!+9AemIQ>T}voyVyGLA=WJbIRdPi7kEDecC)geEiDFM#zR5vR
z6T_|N+A*NT=cK-F2d;qoXDRTntw@t?KZ=by6a6A<yJIIX8CZOu_M~z?ocuAm*HFD(
z88V=@uKVA7E|TRlf*5a#*xM8dGP}r6d1#a3q$QJws>RwS(?8#*4E9W`wUp24oFG9H
zA6GAN;cU_ZIG7bP`x|DYc5ZY$5{i$)bz}-?i8JJjMW1?z-9`6i8lQ_JwT%%~*U?I%
zxvzt@mjE^n<?w7B*^`Pq0U~wwN|Tb0jhBVHC3=a)W(>M5XbSbr(vE~YHhW4P;FtV0
zk7eh4{YX)rBqYjd(n)hp+$Xe^-Dv)t+R*{xtSVr~qOYJ0qjp=AeaeYgsTyqrAGanB
z&)xN2!?+C_V<)C%N^&z$5~~1z*kFrd;y3#A1j*ze@p_frZ9SxEOITYqba-bL)FisS
z7-RE;zBc(2Z6(5ZUfM^=xU^zHR{T_@nkj%;fl?@fn<8}_qcET+)X2$iOk_lsY*rWT
z*hd(1>`aLPsxRI^v|&`2Pq&m(!%b=57Mscb@D$7R8ko<Y2P3;vD^%wLr1n`3Wy6zA
zX@ZpLq4QaE?mUdxcvS<Wm8shB*l59cZ)?PVz5=jR>j9FI?cX)7yNo49f`<>^*to6{
z)_p>TMJ|(~nA&Ml{mNE6=8{O%b|F=appvFBW}K5FQ_%CBp?@a}yTw=-+0oA@0rxw+
z6BPs=+C5ja80m%~!aVPIdBF0ypH4TO8xb>HX)0IWO;B}?E8w?x#4i_l;<6jzI$0af
z<v9GhOyPO@ot&Gs)EqfF1FSf>Ap1ty(61~a0V!Z+LmFizg`%!2wla_p7pAn<#iT$m
zhd=Vzc}1&HHd$EDMlVL4yvLl4PQj~0O*{J=SldKgX1A&b`Dx}XGl!WFgW9^h>_^4F
zZWj^+e|pK=XbIE;tBc_N<6!;N`qPMI<|}YYd^rL1kwn9s^PH(xsy<=Im3lIPOQdB@
zg^{x=9&2Lmmp;~EDqScr&euQVfoTD&bif5Y`oDk=tNl#8G+5WrFqW*cXf<U`tU)_a
zc2;+|RfY;3?8?GoP7}+$)^v%tm+8unY4>~V_lF}dwzr>c^xDczWrdWxj*Z!jnkP!i
z(;F*FMoam$32fKY7j4(L$cE<GlUVDx*~1PEicAS(5!H$Kx8E7b+0dC~)k+k8Xm?bd
zQT^8tCW9(UfhUJ1SGYJ$Zcd^-@x(fluh!!3F@nVTj#$<`M5l^oFF@o8t*_bxq+4Ko
zm!m!1`(;-oq<dr&=aIOg`1hUtQ8;jVd@@<fFUj32_|^U+!(qz{)kZHD0xyo0ZPzs-
zZCv+(z;N@YChI}}2a8}U5qpOnYK<cpkw!qJURAfEb@hq9?QbGDWZ+GUV0=!$7o<lC
zKU|^tk-q7v!M)>YYseS+ZYdL-$6UH>rJQWc-)3AoI)Lw>NC%hvKlY0ZgxzbQN_QEF
zDtt`7%uML>cm}*~jBgv2(g1uP?FS%KYdY<&d_0SERRmR3{K-?u6x}AKil0V|x7Y}Z
zlTBl^2WHh@Do4EU+%2a56&y-vAB}b1;bpsfH_IBER9j4z+S@wwn*$UCRgq@ZvBaUX
ziS44z=OBL!O2BkPB~{;6Rp3=h7<?HS<Rxe@#eWl0&?|39_Z$B!@@X{*`e%zDF@9dS
zsVVTy<Qp6UH;dyowWI9ni-^TijFfz+lNLWGz?yk`++*sqf9EJj9gXG7=<=n3iy;5U
zREhp0>C^s}_t4MHkJ{&2=QiG<);0rKU!W=F4$25LOLHwf=7S0+g9XRYAUxYyIXpR0
zW|laLv!oS6a;8*MMy~20320a(K_^2-t`t}=u*&i(nu$~fB5R%qp}k2P=)*NWUE9Bs
zrD&E6LLQVnu*yPL(d9z@WmkjFW)#G!l<8~};?Uf{eraiWBp$}KciCLtc&*z_s~$0}
z2w`gk!8G%sV-#S9g*b`|Iatlbz)ROgEy(to*w~n0=pm2wYo)Y{T5WzT7O(lud=SJt
z%b3KQ6Yne*0w|OI!Kl_JS9Hi%HY;G?(yD07j<Uc>BWz}-q0nF$pFz=yx3FHae@KXb
zu0p`T5Suee=$4Hk^NIt`@SemsBPwY@{Bj2u?;zQ8J3;vCG8ywOZR68m10V>JNu<v=
zUaT=0lzvYYIgyU(WpPywWT&s7JGpZR$@cG$SA<|mlGIFdlk@84@{3Na<V>0MC`!qZ
zd6~sv-wso1<kQr=&dPo$8qXJWu&RTemWSarXj~H-)3<_n;`cBZhkQ4hSlY?hxf5RQ
z=g_t^SEG7RI5Qjyp=?G<W$QiS&!M|_0bO~>XesJJL+=gQi^=>xi<N}^<4i8apuTVo
z#;dch-SRY~<LM5L*dhAO&55Q(z#=a^R~Zdg*ng(^jlP&5Tfj!+7zYB*RqzE+d_^b0
zC@sw;01MHQx84h{kW;$EAf~6MABTVglj4kMAUcriYZoY%v-k$<G{+IHxE0JoZG;xf
z9L|S5s>VOH>?TM|=BdO5#=lZa|HaPmbb~rZO(bsy4}%<X;$(MpCE7IT-{Zzkmh4A~
zq&Twhh=*BQRF+y<y-PiO61Ew*CUVyPjY>5ge(Tpc`@zv<Mu>9Eoa-*=g>l9Y{!$3S
zfLDrwm%hXSk8J&T^R^wBOzS+YX{1WmCP};Wi0T`1*@(zWj(K|TGCV(ErCQfWiFiTt
zn4;%#Ic!VPsMrifkz4{krBx_~^HKjG=4Sbzbs8kJHm$=s+pqItak+F^qu~B})PKp-
zIV>V-Ui|JEbiw^oNKQ9yv~ZaUzp1jcl#VNr)Qvi{2R`-y-DLbtP14g5l|=1_*JOa4
zE_PqQKezAIxjK7G>+iYcCNV2@5h#Qn^0Jsh7_A)2;upY=?Qy>G<tO4y9R|2q!5e6X
z^`DkB6u8gGbC|EF|5335+`o5FXt1^GTlCP0!J$$DJIZV!6po=N&rH%Tbq#QA(Hetp
z2eNXY@~B^qh7NnWq2A2Bnufe>jEKBTZ;r!5h9TF)z7I^ZmxAnc+@J(HCOQw7`9xOa
z$;BB!<IAD0j%|``Xs8Qk`2A=fo7%9J&$jW3h<Q*B-8aqkmpfJYK27GlDfZKenL5kg
zXz~6}nBb1ft(2T$iZm>jf{QOQ?2C^r+D{+oplj^eyM~5+DFmjYwbLt0i9EWw?y@T0
zQ^D&?8wm6WufutlwN2h{!c{W;6r4xhzm}9Gr+h~91G|A^HA%cD1F#63CWHV!)$V>q
zL`1|KTXAk1U*eIdobuG%T;STaw1_N404o3-aB1-FW_9_|iDZQRJ9{utDP9^O@7tT~
zQ5hy~zilI`aI3xZ?EvIKwdMQs1&$!hM0tvSg_1Rwlk?q{1YN~}xS<7qRI$$LE+tX7
zSYA_xmozqBh%OX}#_A|*<B%3nQFU*z^6KQ+dGfhPN0|~W`BWg=raexttjJDKFePD+
zd6Go_Nn<fXHhVa|gs_};_GZbxH~$R3|L`~B4m=-bsP;YKM0l3;3dPiSk7E(3b_m*u
ztn4#Rn6M2^5kkcYhLkL4WtE_imN@0&q3RCo5ymi#=#%QG6^4W%CCU&ewf{fu>Kb;x
z_XE$87Z7Y21<d;OMFX!j3tHSZHBkd)IFSJ1iBt$%VVb46oc!w?e}|*w)_<Rw9c2_v
zZMsPg-J;&f?3-#V`lRWzg<tjHqI&mynRm!N4os4X0}2ky$BJWl>9lSzw%idH)Cn;m
z-@RCe=|7NP(91U2uHjU27|kq*0#dboP{*B>VFztmbiB@4q$w3BrYx#7S<W$?wc1ks
z8QAB>4*<iZ>g6?L-%I%G*1X+Pn*NpaaG<g;3^lG138WGSTQ<WMcc!L{L8{to??q|h
z3by8&yi--i!1FWY!ejJQ=CM_B1E$F)i62Q=hDAC1(!Q>m?f!49=|l|~T=gn#lA=Y!
zXl+tNM`8k+(wHNN8yw)eXVZI%1^{hVUS3|#v!Ky9ZEb_+0|lRyiiWi>544p{4!5Tp
zajw*%{A<bfrnoR|-HWPrnVIpFe_t3?_5h10HBqKTNNCZ~JKKE>DN&(rem;)7HBhxC
zH=nF}z&F3VAcrA3{y>;p{tHGL(L>trEl-AuGO!a{{HZKNSNtrQMMX}j^BH=~V#{sB
zuzE0iJ1%PhzPZ<6ES=}(e7M60a8Ie0d;~ZtTY&YsNhWj!2CZ2EI>pTtK>objO^vH!
zq2#gj-uY3Pgv3T<DR+PI0e3y%l>v!0Y%KcF0}JM;?q6L}RwAnTXdEsgb>gKKM*d~a
zyn_PY^2}$gcsm&r+*SugmM=$>5(FDD)Z=3LO>vUy4ZZ)XMSW>}ZT02lQ7LHN`GIM{
zNnPany6j^({J=$<iwk#K*Vq`#bRurTlC*-Z#rdV%AK*L97$VuVADEI8d@yD#CCbbG
zj$+WbVE7Y&Qv4-2*DT-si#2HgjV@WmyCMTvMQL9SwQ4_8X@Mq6rI5kKehwb=@&Vev
z_Y3~)Zw}p$It<aewp1*9C%?1=j`E6R;&;af_?$ZXjd@PxG+vEXV+jek(06Dd5p@oj
zF=R}|3L8r*OsT-tG5GR$?vryE<&>r+Z)Y{HM96%~8qf9ZavzZA6U4+M-FN+${RF(j
z6fl;ECK1~kni)%rwaXday$bQ_{sGEd)~8P+F0pVYu9AzDj-QAl(UQD1=W4q3&OsK~
zq!Zfkm%R=SKWM8h1|>F`0I7>_SFc6{9!Es}&il=!kA+Y>3BKWAPQP9<bQ;I~sO&f+
zUJGIEio8{*8musAPV!57azM29%EeY_{%v3Z$=~JEr3X~8wa4OYxla4}*?`KIF=tFz
zIJq~K_?SH-6)gZ$EOxlodiq0}Odmg-Rj>S-*~8O#*sI`9Etqe@P&v4A`J)+p5B?bP
zovNfvK&djbFvAJ}vAesw8v0)GBwwfiuIs5SJFjsX9Tf-04Fr5GDXrK<8;y42&CzDI
zd%LV-W%)#_E%usz<`jUsk~+vuU+zgJtp9r*XJKJ{boZ6PR3G;)v*|~&Qya^Vxmql1
ztYKSmz8PuY*=r+K3Dse~1{l;Re#Xbo3MiMG)E4HDUgdw<dyr&B9>C_QL0`d)T*jZY
z*&p=ek8B^=aR6kQeOo?Wp4b-qjG|Nu)M)^hx7Gck;1|d5yS>c94@^lwFQI5-L+5@U
z*UK97l`+yna3axK0Fl<Cr1T$Y$XXK$979Xzoqd<=amb^c%Q&r`>Xz%+Cz!af9mcX!
zpb~10t1<9GCLr$t_Wvmpk-zu9YVs5XfF$v{a;RzFc3>b}TRsB9U(khuYYua@b=d0@
z(>-%CT7>E}cAF(2`ezmvG&M9NM93+nBVv6L=(NR6&g(W0@)N!N)OjhMj7aZmp)f>Y
z+MwXRf1<*A|1bUr9SrZh%k)d&G?8A49TC5=@eGI=>pj(Ro5%&GHrod%D95GReCbx@
z!nZ7*J@23akBM`z1wJ5yf)LG(69(BvaFt^)`aA3oIOMtR;sV}cJwMfV2wYrFvzU#2
zd%Bueid|?F_6=vCq0OpJ0Mv;~TG=~*<YN3{T)+pIK<_5pyN&A!Rl6cV$yt{Ts-n0z
zqOYqA78+n@|KbTOQ~Ennt*v2lnlw+R+2Xg{crJX0{Xc6s?8p{3ou2Gy=po9K{&)?&
z<;nkP?p<&K9F<QaQ$>i1{d(&XrwpC|hDLkM{e62!^^<`)Kj|q6!li$2-Kikneii`7
zBI9$K482c?>bRQI=1t*o{R8oG0|qJB9qca0ni+rzM}<~>C@m$j9G78l@J3J2N!1o|
z-O`g$OC*uNs%%;}<NQvognrF_du|&+Qo}vrF6KZp{ivG6Ux`x?h9A}Udpez$MzD?`
zt4Y)+H*4F^@?w3n9II(*jf}~oP7Q1iciG+|_Pu=qk_y<RTORzVdTN-y-ZGFh|5c6$
zU0td_2kP^QtN~@DcsQ=}xc(o&hfc!n+qw{3#zUVY*kEO09Bop{i+#Wtfh*P2q253w
zLn|-^k;d~RQ@5AmmDSPV0x8Dt;TkW=p_g_JR=&Rrj$2fiN6~F=zoCQ8gN2h*T~Z9p
zy~kgvH?sVL@qX6q1cf=OO%9)326DFs9kpn0Ni<7~;V+3G)z4YjM6Z}3o>ZB+xR7$N
z%9cNoH7-saE=97e>Hb8vDf|5MD{C}XikU9!6zF<HrzRJ<owayDZEb)Oz1lDRIL+^f
zTZGWFO*Uvst91Xb9&4fxh8N3$Mj_?GbeditnHlU9r~lXq{T6FXI&aE3AW+rI(%oB3
zlZR9Xw?O><!y*KbC5AeY0L(XbmwCz9r+<9J!G@har^@(B>Ja|D3o;jWz)0Wa18E`L
z$K>x|E2N?c$4Xq!NIQ9<KphiV29YVj9p~K?l}Y^F?vYkK!+2tOM4xz~aN)oue+<*}
zs&~Hk^LzTn5Y{$pzo-xgY<<XhA>g1<Bb8S{c6|C=nh$?T205sCQ}C22j0pv?qZ|wc
zVhs9Jo>c6@yVwQ6jF^u;g(kHuo<*{6j(m}5rkk}M=!PogI<I?0pJSLBcumsz?JKP`
zRP_E4T+RN1gHUIAL_zTZ$=);v4xkS{9?W{D-zLSbR!~Z`)&6LvN2XFKID1Q|6jT3E
zVwt2+`QM-g@4H~*ONqfw4VMIEkVL6`^q}+*z~K9nKb-LA;>?SE*_s6=KZL#1D57R5
zwD6-0P1MJ2YAM*-p$mPJ^?ovQ2CX{ttHar2T0}vd5uX5=oxjhDDCWDwS9I8{;~}9m
z88_!KS~{(5iE^Q*sB7izyWy<~8<&ZL#e%>E3Y|rJh&u+V?+t*TdPvt8;Lis8kgG}f
zeI{c+ZCJMDImnBB{(bS{GO59k0u;~=?-)MolE@d3etOy91EXe0X=o~;D}YrxmI|3q
zq&peUi}LdW%+(o5S=Z_d5dV9rKrpAb@S^r6BwWK_458Y$x->-!ltaZ6C!Zb;a4Va*
zk+lN}ZtSe%lBo;0nO~gV=$=|ac-vKH==<3|CvMt<<TT+$oyoPPfZ!;X604)W2?W9!
z#O8=d2TU6X6{<6Vy=J{gE@e`0vFJUG@5y)}T<n_SVsPC4a`P`YfdUjZmbd->T<2K7
zfAZ^TWBL?T%xeDQ(LVb?F-0e2)8^;?pbd+Nsd!I+(cP?rKSQa#)t6u7a^WSANyO8<
z4Oibcrj;0~yTgbCREMw8-0YzE$eGr-;B%lxRSoF`YJN*l%BM;Cub=M>D+oMYLdM0y
zG{nCwt*p4>0{QU4#4HCv?^qcg`b`QLl#<VrPK-<cMaNxG1X9HJURiPPE``KLWzH?|
z_6motijkSN6|;8iX$_l%&ktyyqWAge^hDndZ1u^TvlaK-fUwY&1V;Y_f{GEiY@xK6
z=Y3du5U~K-4;?O1yi}<oVvUR%cw9elvH-U1CM&{78KLc%iga^SKr<vJ{`%ZT!64e}
z!1DksiirM?drPLg*d5G{YT0oFF?96c$fdog?pryX;^WXadfRZtD0kd!0EuOv3WhzY
z*SPprqTvocE;^>N<N5x0u@>xjJkn%ubaZ$K-$Q<hE+LhX@+p{*)f|-#AO`G>dtE!u
zkgLXOOO1G+8<kl6-HKm+fbzx4gRj2SE!gMI$XvXeiWMpb@y|9jN6Gkyvr!QyBBgYP
zjq4?cIOOGTd+iv_a*7%FVJsL7gOl$7?V&u^RUANl;w$aesL)Ct-sz7ddP!Yd5e}yC
z&_|D#LNe9X#;b7v01H1jlwE4H6qg!y9*ZgH$&_9@+poa@-v0N68T=jXWBgEvF)5Nx
z)mQuBUp^MeHx8sq<}^(WPTz(V2s$hmf_=T4v9Y+@s+i=(b{5`>%0psrHM27?E(vhZ
zY}xPr*(9IFcos|+(J4<#F{)%+-G`}d*T&XE1sjWD5!}LRWr49dhg=lh<@utZ$@UMd
zG7AnN?<ovRLTKh-)s6q^Ch;(~7|J)fR66x{mB*$d6|yV}7>-`WC0~?Vp4?NQBFz{g
zkA);{h-MXrqUQW4(KB6ARvX*4AVwScLP({iD2;#xtSIkBNs?^JQm%D1@%tt<H{%~H
z1ppmE_3gX}jh??dFZ<xSrj>Nz+02g9oJBVVve(9J+g@LA7Ei|!P|}u<L#K~$km@K1
z5-*qsPV&+O3QyM1K`}C20GaQYydcJZ$e85r@?biVUVCX~hV|Rb{wR<afnM)8Op3rV
zhk=KOhieaRQp(>{pR)3w{%ie`-zSDT?LNh8lxrqcI3|mFO?)2XxR>+zlQD{9Bhy5=
zx3i^Oz;bY?n-ms{*tdf1gUCvSwh!2dkTBUuaf&pWOEUwWhaDUJc%02<CvDdmzyy$D
zUnXNLnPm^?k-hH^3aPu4rlM55BDk)T#(n-=SZ7I*&|vt5{1G)o&yxz7^1!G%RXd!S
znGqZz)yx0BhL@7@cObVi`2Nt4-{D)6`HJKY*p97mGX#5L!LF83nf|){9XPKq-wVBr
zJCtoj1e&(D?S<LPx&Mg#<h0)R#VakW)mRk^t|sZ^t@Z~X7C7n3;9_xD6a3dM5<Tca
zw=oRqFZp&}N2&PhwUmgl<&5YYt4?IF7;@k&>v}gUt0U)my~c6=2c4^n(%`P%cKaoi
zC&gq$*5j^?8?c5Do({GwvP4N`r5SSE$KZMe?*!bs|Aze~B^04F$qo;uRDVR}KJ}02
z9RIgo$oS*&ODVgR5zNWT-K7`Z!Ebi@40lS4_7;(Ny;4u)i1PbMp}c+wDoDyYCaU2B
zxw;kbeA1MWmm*EZXSc@wz!)=FUzquA2{X)S#RbqR_4kV#Qz$GiFOLJND~6|mMD+?C
zi+2did3Vd-D%ypUX<m=<3tu^$KdgWp0sGaiNh#D_t@5mYLA7OYzW&-6-Z-NEB>8Qk
zo$lMWGHZ@PI%y9#OS5!BiYn)uO)Hb12R)!+Z^5F#hQTAl@w3eTp)zG}eKR!W^$3FK
zUS$HBu#E&w$w%CRn8NKlxMZ=Pn8~Bt_sP@zJ<=Cu8D6_xaD<+~G8S`5q}}>?9U0LL
z4u%Ixji0?`*JUFeq~9z3Klp!c9bfWHQpr*I_40u}{_ocbm}O+`YYOUJ4~29(Mn^`J
ziGFdg9Z$p3`qMHHsjZTJrALV)uJ;sW4}^3d6V`FO)SmY-=W1f<|M|8&5Lm^Swc!sQ
zkCfzkZX}<jeH^}AMDccUfObQDJzAJWyhH>(2q-)tTAJtQn~s;IK7Au!cgomo!2A4`
z>J!(1Tgr{jjr;X-%2&VHiENRZH9H^9o-S2~jyE|We}7@8cfQi^P2Pj5rc(Fno2y2;
z&xIu}{9MH=$37X8Rbtnywx-E&{BiicYzvoYz;*W$pf_aTGAfa!Cz>UI1~?&ot~V7`
zLARCqO2Lki-7q_+9gfF=ycFjsR)<D1NOlfCDxBSkd+{0?R>x^W?By!`rMq`AH}mPz
z%=%~Xn@L5jL>Sr<xfE85^-f<+16vZifTJlL=YOQgbv}e%`fHJKckd{d0E3ORsh*oc
zt4-OckSV=wL~y@S{R3f)j4|!cfwe^?1@jQsb~T91!7EY_<*A`lz>o$+%49a45iVzB
z)?chrXgFtJTG|KPV^at3H)EQHcXv%A&PX<6Xsi7JkEXFb{ui$0cNc)IstFr6?U04}
z>kO~RZzvJifvq<8mk0Q8D6&TIQ-t_G^Z=gGe?Y4$CUi|Qir9FQ?bi)8HDsn2q1OkI
znEF0#sChXNP9!_Z<#hEP-evYj=_(<B66Mnq%UQTy(A6_Wki-8nI;0FwS(ARbv7?ie
z<;4|>(;S}6l~7o<W$qyZz95AtJTd`$7_a>gKyn%fFQ@I{y<{d|t8b^tMWabh*?;jw
zxv-Xrmjh(p<86h^Fv?vrMN})Fm*k1Z{}y&xwD6+dCKT@7GEIYGCW)kD4jVZEDEz9a
z@}Q3d?u(qKKjKS!B5k%vH?5>Si}ja{q`$cI1!eJzW)T5HGCwc)PEnqmsiqvV&s1Xw
zEC5-u44;VCjWN%r8l?6BjFL$uqhiP+Ij1fuOk;ahkUvUvE`nHRNEEaQuX4vN2?~Y^
zau{C|qa_9#*n&kO9aj_SwC9$VEX^Ji4HxFKWz_!VQsPPyCDZHtTS!7TN*XJ6CyzEk
zE8`pUx2?&BrTYTT&td8VI}Tr_Dsp9v&JhxW+rAr&*3ZRO-f1<@J+-t7i9sILsRGbl
zytYq#JVMl14bf-u3kk5cu-G`YSC89Ta_ePa5ZxQ#zpe%t(5Zql+E+UDnY?WWyQ%Ob
zz3ph(T$VE*rxPW)t)9mbuIAISzr)t8xow35zB<y<-(NFT0D_$rqLW)PYp|cjF!<pp
zGGrH+bpO90qAQ*?7q82n{BH3b3r+y2!7Nkj{+6s*lv&#3BAwvMo42x_^}dQPMx{ae
zHhyamm}2X)!#e{P{)8RCXmfCoL}&XPj&Anh4#J5v2NLn)=xB#fg_7@w9ZGKduab?H
zSroWqyt@Df;xwP`s`ifZXYN6)Jb(@g6a_|Te}vGl0GrHt!q1YsKv8wQWW`Y1$(*ES
zKJ<5aRL1eTQZ>RahNvcG<wDo&?5rbB?;B+-I8b!v_6-B_v=OE0%|heKf+l?xt&RyT
z*Z(SNO*=^cCa15?QHd|${b*5`+5Z(GAF`DL;;Wpgd&OcK9n+veCX{I2q(d)3@^iq#
z?d9pl=WbYE52$pN(&92*pWWHDfBva!tw1dj4n+StC%UTv!-RtwQyWE8<%$34uyXD_
z$3LoFO?@bPcR42$iQ`baQHGIQZLcU-rnT*-ypwWi3J$K@qI){mPtC;1QUxjpS6)At
z0NzcoV1QsF0~N<eLjVPAc&!QN7l3_{?E34<Oc)9>%megzXMC<}Z9M?xz464`s6T9@
z)gdq4ocikjdI8`KIs91x)#@id0UM8b?|Ne$cSo{`T&7mMZhk@LQW&`nPD|e!8ZR$O
z>8gVWfuzaT31<ZW%Xa*C+p(E^PqoY)Pme*O)BmN9`&N)DN}F<(lbRO0fvWC93bpsz
z=QtU)2SF*FM<X8P+P2)LiMqMUG+R9EBVn90Jtx<kB^4<t_YnGC0EAsZii7Z~H(l+f
za>ei`9evX}Eey1Ls*8Xq{D;=Pj1J!0brGNDEd_JVh%Az*s3B40m<8_XO~hi*PJ*_c
z`%ZjWB)fe`DvQnh+v@AbsCA1U=sm*?*`|!t8wnEMg^7A%*VWG%8+9c-ywkqr{<q8s
z?(7%(KFVm1s6=Y31@b(2%aW{0l8nF?@rfZ&WI&#Cmn9iN8{}zHfp7SSj3*wF^w&jD
zAq={OIphS^d7zVRc{<eS*e%PztLXSLSN3^EsB|=q3*$gsxYM2@Z6cyzgStF|_dM8f
z{K*v=sz$q1P!A0Ms@IdEuCx=t&P8v}-+M{rv?CRGTmOBf0LG27lg<S?IjuvfE)tew
zrQmyU4QUwg)cN)7LHbQuW{n+JQ8+qCHR?<R6G=UXU0@q;RtIQ?1^#EPI)~nCMbz!5
zh{tR^2<Ww4fnw8pe<SEm%MCxebCGOL!SChZ0b}R8439td0Q&U1ZdyLouANILJ-%<M
zT>-_V9I@s3k$P!GP9??+PL`D3zH5CGGf8nXK~4-Hg))XF{dJt*;mZVknX?mjicIcS
zQY(pSJngHqE7-9DiXWp!#o7N<7nb5>1nbZf3{<4i=WUXc$REAX)I;>N5PpRye1+Vi
z?I>>ypawVxpp*!nYffa^OhDcd8cz!-De2zhAtMiSxx`ijBVh1gG+Am&N*Qn^u9j@p
zq<nt(@Wj$_y?JlVZk0uhK)PLUCx-;6B6^lyJy6k(YW>xX1C}FIGRZ`0$3m-)_JZ`%
z{_T5@b17<aAm36upY4}wSEAE|_^Y;;OtY)Do8sxWVxib?iHS9<Uga3P#XJth)i!K>
zNu&cmt>J}-gsh6jdW;Gv<%UdZ3Mp1)zb7%TGC)Pk4^a-nG2I=pXeqmY?C`+ka?L}4
zcHBMo;(xnR(ROV)?(utm#LDN6Z+y$uhpmIsawL8_+_3ETIoT@XeJ=*L6czIq7CTT0
zjiGj&`^t&e7-Z|faY3ivGlnQyYQfE7lYMTC^qUmv%^BnmMwTrOvUI(1Hy2$cnQnZC
zMS5&eMd#A{f2asrNd8|V^_3vOit{0Fub6k`Djkw)Lzk`%re!)z9s_FWwfrY7A5+iN
z6TFR_$h9{r-B!Ms<{gApW-~&MC&)iEiw3O@u-!uTb=}%PdC>Ki4MSg*l*yU+eVY{w
zzu{ERWgcygI&G{E7=IA?Iiwg+imn1vM!zkZ>`C{ZJurk}g4=Kbvj!$=it!DKnP0Wt
z4sZ6}6jRglEh|*Y{D>weOg?coE4-+u5-_>k7jYC&4KB7EeO}p_TV5224e=rz5n0!S
zL1hHKgldyZqNf~4n@>Gg{g6uK#4!>1fVa-$J!*PCx>|6t!V$31l4e{L#xwGv7VSTa
zBzzyp3}iZHP7_j&y0whF<Zw%=2d`Rw9a%qIbv#)u$l|3ljgS8>`B19hy*g+_IBgZ7
zI@UJ^J9l(aoLlE10825@DzJL&_X_IfQ`Nk%Y=Et^W$}ZuX0f3x-4JcP675@#(#9*{
zIFNxuB(1QDUNQ3scRfB4kw)S9H|b1|mCW$}8uG6&_)fX`a{C=+3JR>Z@L<TYu*~vr
zZM|C~vODIP|MOnRt|xn-uduCQ#K!UmF`e+0pvE^4i?iZpapwKak=C(45F;x;JM|t!
z@*+N|@fL}_@q62q-#w~pS3kxf#pucgYIKg*JIq~@Mkp{iu~BIF&pt8YuP<-n2rgUv
zu__8d{ox@VJTXU=={!e{CYH;o9!7c-TGh7GBq$v_=h_#O_0iSQyQh<p9;H$YC4*dR
z$zjFd69Enn((j#o2*>r(vZDejdr5CyofAWcxkq*2Ij~%ec2;3nsoiagZj~vL4^=DT
z0d=bfkN@xgp2H)iZ)Y4O$^%)4n0FCtEmFfTTl$A~YMw1US|Wy;WO>)$vB;h~R==Id
zjuQ3fq6>$gyx|;D)%tH%#_XAVh68S~fhXPM>f5FsQtWAy-L5>D`lpJ%S*NJCY;DeU
ztTW=~8Rq0Mj}kp)Y6C-_b7MO5x$a!Q{ACV$@%3LZg8EhO0OzT6O1jX$M$(M^Wx%!a
z>Cvo_y{DVDc~-S<{P2pwQ)*Xy34{JHd8+sY1b(DxtHo7uggUs4Gh7V<R+fG5w8L7k
zBH68IEZDc%_$_>}Q-O!IITr9s6ZEqaD%z6q157E6BMI_cMz`wFXO!q-V@HkUmb9S8
z|DMY+%{rohvyBGDAqKzQh$iRS(*sK1s3FZ+f31Uvr}5?P&7J}uwTl`p-5v&pg|dT{
z@K${qmO1fg@3dyhnUCB?%Te-Y31AJtpN`HLc&3w=-!*&CABswKu9mFX<LwT=h6_p)
zUBC?u{=aKyI%__h{&4CoKTc^lq#c+haDCho7^xTcoaQoiRQR%!;5DGZ_beH%rcq>N
z;PXiq6WCU55D9-eFiiMGmzzp0z?4t1px`MvCB?E{i>62C<FXF-4LJQj%P2m{`3{-t
z;gr@eE7)0NJ}>@WdsZL5U{1Zyos^wf*vs3RGDVN0{20d=m;EhPVn&8;lnSg%!ngqS
z2xeXwKWSWT<Bqpdis0hlaGjRpuvu;>pFWsKe{5{7hW>w-bO_QZrbzb01{759c<8TP
z_9?(7TkNoe((JXZjHu2(4b-<I(8xJw`?73h;UzXf(x->;cT`7(BKrT2t*;JiI_&;d
zY*4XCK}=dkBaHzlDU8vLfV4D>5)}~;P;qp}V56jSgmg|E-4Yv&W(;94_I~ksf4@h3
zU;pyDy!_s~@B5t3Ip=fYPIKk1Q~B})!<poc)l1pi$7#Jq_|J!m#QeDL!t>8vDeK?F
zS9hzdt=Id1X3M&O!%8zS1oC`;HG5o9dad8MhG7@pi7e&hVPDt#8TlpQvFYnmX9dpe
z{F*=;tP!E{-Py@?hBk2RulAE@ixJ@2#lI2MG>+z7R!Mm4a*WJm)%N>J5y$<i2&M~p
z&z3{Ulk3&^g|^mwjd~a3Wf9eDs&=bvhZi!P#&EOQcR@9#p9um*WYyj4*)O={I&@zd
zuU*A-<m<-*vp9d`rZ1ZGB>HIETKSYzo%?<lgc%MSlwIC_k#}D4dtNtrIifbH8X3>1
z7pgj)3|#m6;jgDKO<L2?<N4@JY>hX8C#aF#ds1&`|9$Ovr=AMJVlRzzUFqG5|F&=s
zl7ZQpC>K^!po}SNv+Uh1bWoYkhO;;c&wl42EK_cDFa!6u{^Q&wa~Zd2<!Ke0cs!r5
zlX}|2n5J)a8PJm|mN9tw0>SQ}73FFFs#E{&<+iDEf@Dn#bApEuxuA3qf+{Ezva&k}
z5=yVU{(?to%5lT7tcRHIcVkQf-`_4$3wJFVatUu|im6oiVaUDmO9t3o<;k-G!E@e&
zkBt>HGPgOK`wg<9iDS2HZuQ6k%JkRO3`bGP8}Ay6n^9-HERG7wigUGeU2;gGrKG&7
z6G#?u{J5r@)MnScFsvd<Y86}V@cA_k$W4P0aC&Rpf~jjFlUb{V8(Hv;zRpG<XAQ(8
z)=ZZBCrDCN4u3BrXIgaX&C_}wTt-3l`!W8Ds`K#=zY)VIwX+7+;S!({XLD+XuL&g$
zEE~;zZBmX!YmrL;2yN2eY-ag_E8NkXH9`tJ`;v2>P!#F6>;ueA590EBpZQt%#F5R&
znWE2W!3FDL-mwcKoIJH`yxLU33`w|zNiEl<{PF~?5F2#9*9MPb0Hr>+Yd5*(a_`4O
z17viwa*w_IeERFtb@pZY%+z2W;C>nfvf*&N4EF6X%PP}9%WRyI@V;|a^-7J0S=6w-
zI9Vt>PVL2P&+LfpRnM`BkSf@c34t<~!9ydN`;cD`IPO6Ct2dhsh4Iopx7;~&UNN;5
z@nxLzEluYHV?Of?j+ZcCm;X`6rd!jn&p1z`(b9S9s|opH_SHMzQ;{FJzOdeLcB=k}
z`iz-OKUuP*V!8(w{C0>;VeE1rs$TZ{>_2jUgHY;*(r-Efo=H_(Ulp*$zo3hsmr5`0
zOkMr$$Z)Y)zJozkhNP>@u?X|}mEdqDCuQMs{Q4cm$^Fh^;lRRT73(i%HsUM51|D7l
z?&4jxTm4!QUn}6<AUdu;du(C;Gh^R>w&>206~5)2GQ5UebgLZc8OtB?oq230=7fBs
zZ6;A*n<wEr+Z?4{s_qZPjyezUCll{Lqd-eeG~tS-8-PqPO!?9pYZ$dJl?0pRd{Md5
zE&Z|waYP>j8?U_z5-Hz$Q``UQMSOGHZlJB1it#XVp1Hzzd#yX1GP&Tenf`u=rzXQ6
z3YOUH9imqcD8R*=St-f#<eBJ!Sh}&ULuYUDr&4vR$)wUoj42$|2su;FlcQ#7N=g{j
zT9tvXz!R~K$o?=vooiF5%Keew6%)RGJmE&RV;N~;n923LsQnYP+zvUJ7%#ZiNn4eL
zt?!3^FK_a(Ti6*r*Lz2l09a_d`n5Hb%=l9%h|n*MDWnE(<K88Wm(NBNrd(Dv64IYX
zb-yTLV1Or#z(CL<@#$Z%b9+Tu`H5@S?&-pui~n3Sr<~`ed^7g{d2esoAy9i2m!@oy
zdoW$T>`6_F;#QGt8LAWA3tLn4ud!4t&zTnd7Op4j{~d!=lol<?2&E;}Kv#RWG$C=k
zhiZMB`jR={ZPA!V{~k#p&0P3xm0bUuOxe9&4`2F|!w^n>7T5&qYJOE3v|ddo&A6|m
z1lHyZ<zQ^{g`tJDLe*{c0SEjl<ijG<%sbQpOV#m{(Q(HnI$}mnWLNzykAUcQ8Qv5O
z5wKvtkehe@t2+GzPeAFe5F6Uc385cuB@plPP&gsl=33phWlK}!bFs}z!MZCdV{F$j
z7|!@s@kq^X%L9@0-Lt&q$0&<0idw2}9FfLDbEuJeH5P7#b1vE-!=b?@ewP080R>yQ
zF6|OYoS|i{RMHI_lA?6}hGbhe!@xVIYX-K<D)-`gp+z*Ek8;VHy{KVozHs1os=k(W
zjvl+3jrxB#Ai~FM)L-uJu@r7l=Z5WJNREl{F+&@`6j06V6TlRGiy;)5wyC%CnW~bp
zWv2*D;WAV{3(=9Zp^RlW!J6EPk8CgoRBW7PAuQn87^TpPq;5^N+$ij&J0kwaPtu#n
z1zKd`I}SAC4t%Bbhu){_d99?b*H{jBjme_&JR9{obbnP_$WLS0Llr#zeXy+S%R^st
z*(MUURK+b(%~ivm&X}OUv60VGn$|9x?^*&f4KD{;-Uo!rlDuOhb@cEWzEN|&)UrqP
z_vz;&PgK#PcapiFun^U*FwrRwLKcI2mrX!xIrAM+p^}7(0^hBSA*s!0*y+a>>P?o+
z;E$_`FkjuzFBz!Lp8p7FM1vH!<F%t$dMt3_((`BVqKEUO#|9GChSR&Pc4&tbS)6MU
zo3T`#OLrNM!Plbj?=S4P-dVrrsO`_wWs8*pe`I<>{m64Ro#jy5q)Ms22FR8sC;sDh
z91Fa6`#It~#+!T=ERYHPq5~^|DThz-b`FNirjYw8T9FYtqMd@m1rw{~96&GOa8%0t
zpfoR06>=@GsMX}Q!!J?5mR8XKO7Yw2*vg?F`j_csR15T1bjgY#QxFzaSVmfrwn`D3
z!m*m=pJTG*kg5d#8IdOQL2baP>2{k|NIvMcO;Hr)xvHH-oNYLTNV&*yG5-;OtAJr(
zDdlJ--v$KrZ?Sq6aFU+g6T+}rtmTWi%%=*A@U*H;ImoG<DK5IZ$Ot<3Xx7{Ffm6#l
zj*1(e_Ny(TJyHgY;h7^T?-DN&4s=Usf#}=$cx&_cY_s9f9}b{7>b7Zqp`Z$pt6r$F
zyJU5%+>WyQwoiUay_nZg&1ymouYLv&B=k5|et(huW??rFUMstc?sc5Y(rGE^1I@j7
zcnD?X$6&EOd*@#H{e3Ej{>Aodxq$QC{=}?v!qQbhT$WobRO8pRLJP8P&4!PMLQqw&
zZrg6XvC+vqBXz(uaOZ}F%XKe#NouX&MHP*>pD*xl|3e=59e>n~qMX0+MUpf05ss@%
zuuG80m@~8lBkdOkG%Zm!{Q|^AMd1~su)N83o+GFC8W3D9{}GWvkZQKHgZ;q9tcTVL
zVYW-uZ%-0@J#R%#tk&G;Q<ib=Zf15uhT2xYpVUP^1~Ew0VpYTLXXD${0>MO@M>Uri
z`Hxpe(GH)esTjNP<|dlJUrUhvoMi)z$<&-Uv$~@DZ$NrJMJ|?uJ7am&k%#d<wA{Y3
z$Yf%x#3@BO`boG=J&Vm;xsZTel!dx3d9Wgun7iBez<27n{<{YLbI(J>rPRTev9>Bn
zMy--DLDMc~S&l0Obn#6XfBk=6a9mHI3V9}7X#J7liE-&7JPuQ@>wv2J;5YRi0>MH?
z)!z2qQL}aOohx0Tr2o0A=sZCCzW52#F1KC-vp-9>fJ&3e{U&(fsM_MeX}TkFt?Ni7
zZ@Qnir8E{Ha^G9V2a6L6SX%D*oMX|woq0Wh_pD-D3SoRMHv1idZR7x?^e1}iIJ6ui
zii8G7`&)T=87ko)y<_moNvo>{H-<%quOC@J&h*tu-`S6AF_4l{c=i4aqR?OTCDE{r
z-58_o0NzeNL2E$Sa}wPv4DIB$!oO?uE*|Hi>H-5HjaRad5p*QQr8kx{R9FeVwnx)*
zr_nIg^wg2>>t3WPZ<p|&L$q(=Q|zS)B^pr0G7sU7Su3oz)<(1-i}<fO^B#YpL91uj
z&3U;;*DuTcZ!puAudc3cvN@ql-zl_ap)T`}B?NT-=e1S^f>1>O-UJKUD`2uKv*y0K
zvpeo4Q)RNXHI?Lr--uu55Y_k<^zdn@c;Xb5eo(`YvzN>-_GAbn8}qvE6QRIxGXJeR
zY^Vyn^7o!!-uTj!M}B@KL!fZTb<#`6YWE3{zL~fI$!>h^W6Ef|!`PZxq(5P-8(9_-
zF05cxq9rDC0oL)y-!KAHC2P;#W40IXra6*T9c5SSa^F1yi1zfiv?X(fs<b_3=l+1@
zU#{S{lcx;zV6Ak6*UEV}wdzTExx(kI?5$MLS-FZcCx$%2liJxUEaNt^o9t)n)V<>M
z%0^$}Q#e8K4zpQsW`j4Xv(bmX?I~dGQ=z{M5y9<RwtClss8sJ$3(&p1Xl-XhcSI?_
z?VrqBTMSP2U-53GZTjH_&oR{3maiF6wcq=x>_i?>H?-fsZFE^Qw6%GdCmAPw@Pi4&
z8SaF<Dg0UB;o{glhhi9TRi942d04HtN(`h~a1w-=aMu_D!&!j-X7@MMj3pPv*miaw
zP#rl?Ia8Z+Ie5)1?qs2I*`~_1JZEl04KBD)hSdRFsD79m8pK7u>6&G9xzIso)p_H1
zWV}c`L2)m)-gr6@LZt-5{Dc;aU!Xd>4?h;5K!&&dKw+j{DDe}gX0-G5VTjq+2aht&
zyDlUPUie#D0_S<3YkA8yy1_d;k%C!D+@9Ky_nn-es#Fr1tyDqb4exS9WpYvlCdpyQ
z@q(lRs?Er<8lpGszsyuUukv&Z*y%AKiaRrXOFGs->kXobR($SLMue2oK#X^<uPg2Q
zD2pSWLEt@(X>UAr!MY{}bsE_?9;cvPFytDOT)&uzW~vvG9#j5a^c`|1xuPtM)ctIr
z;+^H99uBc8e=4!OowuGoW;|;CJz(v0fXg%zdH>32qT}t&2g~bC5#m_J{O9k*-=SmK
z|E6XeiWz?Jo^35*e;#ck%xI+x3vt595Y;P;h#A{25@Y#w(yVIEz76SPkaB8qO&PU$
z-wXQ4b=&R)ow+`y2-@|x)ZRc!f(3wAVS83G1XWPngD>Q|gFB-Me@W`06K9k<<vC6a
znBWOth9Rt#GZs6o;ns!KQqOZ1zlYql9joGhIj1P&Ou?aK!W4zTSvK19aaiF(`v7Q4
zrYwq<1`x$>Za|C?vs&Vvv#QdVrO?!${#l@Gi*kbX@E`xOzYUkpy*#Z`rjTJadh@wF
ze6ic)HyiLq>OtpAbNSK4vAUMXFs}h%(ruJVv3iLe2lU|#hiC*Yyhj=GVl-3i35zfQ
zNbfZOz+z0nPmE?RYqrFWCc<s5$#b{Xj`7+56N588J#G?3cximYy4W}_R#-^mvf_1r
zvPF-!@e5ZYh>coaTvrB+qt<pm1TAESzSrBrEG@)8nDR<=J29*@$k+5{ii}uz!{+5_
zTEwk@L7G|9UNkxv;mnfjDL&B=ypO<0{cWIi)u;-nPh4e|bsEj%SJi>c)AEgM5mK~@
zOh(?T`q&7GZ_W*g7$1!1bSs1O)I>`G<M3Yb5BAPWmp}3AD9a(a*xTo=J}tOZa#48A
zIY9Iu&*gmd>+IbYAHE9K482ZQ4Bo?$)ZMn3;1rwhQZLNM`Ms!YQrTE+Z1g!4#eF@m
z)%lP#Y)GPd7yI}C^85vY9uFaWu|rrBnSei=R!4uloaye_2N#0kvdIxM4>e==(+i`;
z$ma5p)9kkLkU7QN2uYhZQn=ZoJDGEtHu(=Uo<9u5rlm{HxV0f0`wvofE6~0hTOiv^
zYxlcDEc5YmxZ_Fhl8&en5ULc&=~c<Gc3jt^)0(1?9ISo6NBS1Na%P$z`6yc?<KIVf
zWmdnH4KZ`OGsf|8r4Vqy)02ms$b=QAjD|5{S(CK`pbxYn5f#X`yr`bEmu%tx-1-6?
zoW;GoXm>Ehm-M*Lq28VW0(YE~{~Xh^ekwaYB-}a92CkFA&?G$PYX<1$%~K>H?UM6F
zude{~5z$x177phcq7VOq;B@_9po;m+F9i_U^6sY{Z%1Z%r#2lK>EcCERY@6U_8@}!
zy##f?#)UBB%h$@!QccaX3#v9X%XBT|J_KK8WIxU=5WHwJ`Pcy8$Bz*v6AJ?-Ry<&)
zwz@zV?(@m~=*z+Uu~ZIG75i9t7<$EU3l`EjhJW+<yZdIk2J9CCM4ahJ?s?n4R{q6%
ztjzmCZ2nvU0B47e^u;kTIYid!x;&GC^6FJh9)N7=`kvi1Xg>;MCH~UE^EGldVcvF~
zo!Y&Q+|amu`((YC@}Hj(Yrf)pIN1x(2|b)VL@Z2^aC>5-y#B@%<rq3M%gJ@XR2vR?
z$Icl%5wZ;sNUx}WB>8$J+es6=CT;}5pw~|ZLL+F^X>88@z1GcdA5Xox&63YOtK<FI
zsWc?+z6y`y828y4tg^{+&rVQ&ai*>bdj-Vc#vb-}9EWtr-TY3b7zX2OjMhpx-=?j(
zt{urIn9GbWfD=5kyGX{Oau+nOLs17edx-tg%q_cOp1)X+Ecm)1mD+8KX3`UpRHBjf
zq?qwS#V&ifCC~*_?zG#oU_TmuJtNM>Cn*n?z)<`1WB7HnCoJV%NH!;!GK#$0#L^EG
zhu--%ekuo`$DA6z8%h(sVpcp1qIPo_qgY&@-rzq%^95RhroGw4S~1H~Suw#Lo%D8_
zBQyInk`&VC75N*5X!dfq2`|i(f%u_1ySn)x#5rl%Eva1Q?w^R&7Mi!VBSKUFG@js=
z`yif5yIN3@zpPpEo3m2u0{l%ESY5gdvr@Y)QkdT*v{o&)_KzN&R=xR5RZR7IKD-3J
z)IF+(8(Jf$U?>|a7a%g?eR$Hy3!znyC=t-!iM^jwc3-^<e$rcziY#rA$n&?Sn0iuE
zZ}_-%vXok*55uDXmkT|fa&Jw!8}kw}<iO%qS2(&K$q1uk-v5o=$Ee_VQHA&*Yb&X%
z9u>x9jx}cT!95<upXM&Unadwl#Ng?Z?HlUnjL8MfCzH7n+qY!NOHB7--4!?GGR*%l
zEGIY{0{od8f<4qL@-BfB1_El6I~2hr{#>-Qc+t@qlTj-$-3)v$cEUG(IY`GJn4jF^
zCIV3ix3LIa^cE7d(%)07o29iktu<ctE#wviBUg)s%eCI<RUgnQM27gCChodUo#pie
zjP9-7)BO{z(&6sKt{S=hHNH<r6@-px_3@J=D#&Lmp0_`IXZM$6)`ya|?<a}mx7si3
zSiLY$DUM~6ToEz*CcuZe{Y=ZB>6HI85x2qBnT}VCBX#6ZsVcP0bpiRd6I>0ku_tzi
zSN$>W9}rL#a#E%aYK1c2{7;O*|B|X|MIK`60!+$n(Y|9E?F~AY8?n(=`>k>wdA*mi
z)4X+o!2T_~Z=|yHSNU>8*<Rf&8IxU`v!cS2`v?TeXJ`NImd6e9E0kry_O?`iTI@Kp
zLemIbWP{rAM=Et^|I+q9_s4rHu=6f5LD*mR{jyb(RY2)CFE~;khGj@`3fOd=|6Lew
zJa9H$fhqQdC{OwO*+TIwFVf|V)>gcXqmdX0$!WuvChB~c)o6H2m#VwgNbT|umvM}W
zHcc*zQFEdpKi7UR1?cWB7gR-~4TpSj`>U!kr!<)8ong^dT_1<;qlm$ZAgI4JvDN<#
zLIwx_h{`ct?h0Q2{EGYJC0!~iEpxuW;D-B0<qjbIO{mN)x!oxqMmq67od6QSz$voa
zKCXH-drXFc=)vgh@wEPS&DdR5DTY!;-qJGp&6JQu&V<M7&Ki|pos~?uW~?i2-c7kO
zPXX|f@sPy-#r5;_-{u=Y_q5Arg}`?aMM3w!c$j4j?^GC3!UFaaTGa~^OyUYbx6!5L
z+gK#>!MY_#Etyh0oU&zP3WY3oHITF^)(KUveLp_^xCDH&;YU&;==f1!I!2}ZOpY#=
zEFTr77!}C0=vEzL5`VChZk3z##F*}GC_ie^cY?<RFTFHE=)iL?4{^Xkbao)Q{ATk#
zbkZfR#+ymFUx(os<LN_t^8fwyoU@NgzA(TPT7}DnqEbA2$L}!|#_9U(z4%d^Z;)>w
zqBB3)d~g*l)$(zrUQn!xNBTl4qNAP8kelMB?H<SXgV|mAF(E7U*4dj4DKCA`{G%k7
zbd{(OI2EfC*46URy(|;d?y@>=$Z#sGjRR}&%z`+KUEPZR5wOzHII4KYa(d5_&b$0+
zQ+jDDalbeZ*>}@%EU9FlH_O8r^hcB~r(Pj6F5IuO$S<qTCJl&J%&kUV|J%<8_PPTK
z)Ei?3Szrjrc5GURNWPaIk!lQSPEIcAof`^R!>Uu7s;>tO#4!r6gJu^YtdbLkWve4j
zhJKq%ovDaMkdJZUuXuJFJVUD0iA`e0D;zDE{*L)Uj1VRA7**3P0C`!^8#nYd6ytuc
zA5Zva!_lwh(s!E&ETqcgvJuV7VDYKZW@r$xxc$kl8!oS8$RQpPzw||IFgccO3SU7B
z^?J4cEH`DZhW&h(FtO<YZ^BlQAr)<u0U%k@d_WGNErfwUg{;%^(5vUex>wO36_AD#
zbZ2R%US3kJPceC4FzQ|Ts0Zm%M6~iuB*(>t@%25C<}N6Grt2p0YgAD+k+iwL$U#&X
z;wZ>_W5{vV<wDXk+1fL<Xdqq7?*+JgZ+~~M&PI6V*JVoX`pIovKC;%gp;N*a)PEs6
zwYb~Q3o}G+2;W23A`~#S`v*EdF_iloZ|vn+dd7#jmKS!?Hgb)Hpff@ecXCk$+mLhC
zcLoBxAJq-9-4z3jSJ>?aEz7X)-SYn&-K8DX<Jp%mSZ>sLCG?9r9tW%s>>Rd0DgZO(
zmsw#0&T+tuSvA=QUqErNiXFURu<p@r%GAiYggKoRt^ylfoRZ>M13nq}>ssm+*Rv^0
z1;p6L!&32wRSo}zhVwyk^GvzU`~&p);$RyV73-PRW!9+!-y#b~VyB-KPOL?*YNn4P
zPjX{!BO~ScZrabT?=LK;gCLAATE9Xr+o)}(O{ZQy6h=RQWSQhZ-waq-F<j7+X-9wZ
z`J0mrG^1a4#XTZM_9xD;4>iPe3X74E1oE1i$qvfbH*Y8@rDN>Q8J4<jE>NV&`u@)?
zq?*`=J7{&d&qT=GExG`B7Mtyi%O5&t2k>Qs=a`1f<_kn(-9P9>&wncYWcA-Y9scbx
z`}2{8-K_i6VC=&m{HUs2zM5aIDTZe3WcvbK#qSA<2G-LATfZz{zOHf!+M@<zuHVu*
zb0@1K?As=}nVx)HB>4P$?BSO@8BA5WYZA`S(FeiY-{>tA%3AONgGR+ri>fu{nWI%N
z*|2<5upsv%IB4p0uJXs$vQ_;i)zyz%-KtYN%i~k^P7~M&wwMVQzTSOoV{n200l_+4
zNtmd<TJt_!ia`Qr_h_@h^K&0a>Pk0?xL?T!q-qKdQ#H`FqTExBN%Cdf4O*$<C9WE&
zdO9!Pn=!UICz*10=e_Nf_5dXw7HRzD#ZOnz<WSvPv`^%t0SQ5>I`*1nCym{K5g2O=
z?%OsIJ-^3$tool^y%42iIRp~9!Tu)#^*yzqCL@Ke>*b*{=Z33b+|p(=dAyS=##W$V
zYkS1xCXCBJY~T6R*Koq3u8<kC&@%~&ECp(BWjB-VkYW7dZLcrKg9VK{>R#1WB%4_8
zrCf}c#j%9;`-fFBv~d7EOUpEGEZg@;7{OAqs$W2*;s8_wG+LI7XqCZ#c1v`QFL`!d
zIC`sHh7Gx!3c?ol*`8S0DxQGK4920ts=Ia~;R$27=?ftLp7&RiM{@fu4eQ4<l8vzX
z!fZgeR0FKlM7Z!{$^+n>lvMI_&Ge!d%Z8Q~AsbocJcC*$n?ZHBCXCm=TZ@;|4U#OV
zDz2W5o>ZiG%W#wXHdH4JwBzpPF2C2QPuuMWtJq6{L@Y5{a8?iVP=PZmmtE@tLwkw(
zdC2Z1^VJ^kz=owXK5GyH)nl+2{N4Xj_@c~?>4h*vg?n9<*c#04pNb*IsMA)PX2Ijz
zo@@*A6PK@7;kP?#e_4(xMtF5D2>E*=`vgS^s&Pn(7N&gD_kbevS|2)R-Xy?TYUQlS
zvrs|}@^tb63@EO4lde#!-eo2AOZP1sp(8H$@sp?ZZWcf>QxAM#T|n!G^{DGCs$6!G
zbLd9#%zU9bD*8T5U&5}olv`MK_e03(s{C<D05jH20lj0(o4z6r$j4HGMk*px)AegE
z#p{}U{G1}Hor9gddZNH1XGtKY-NE(xUmydZLowa3|KQ@7%tl(C(H7QPN8y*R-9C21
zb|rUGn`QT1>NlQwO>u)$;o8q1Fl;eibR6*qzkEP-cI%I-`#c}g!9&i$Lj~we1~24R
z*kzRGfU6Wb40m2W)mJ;}hz4feH?0vZ8PS%s_8Ih8{+LwZXh$3=$);?86la`q--Wqx
zO?giTS+?VUN28_hdGr#9vS{y+GXK=eO;oey{`H`hw(bcaJi9?ZP1`7azE(H85Qj(L
zR;uQ{C>xW0#^5_gb*<x(ZCVKUAcHpjQeEZ6zXA0o5cwE_GfY}@yNc3(^>dAj<&Qbl
zY`j-LD0In8#H&RnRIZb)Y}#^7=XNYqTh_Mb4}#LjXK%iWq}u=G70LUyLSrBXFIvE@
zJRh5+mYw{@u+a9I(R;*~?jU9r2c}wjm$suPYf4?Jy69<yXEGS^fJ9W+?({RX?vL50
zUj}uJ7q&WRs?DP=ENyZ|?8(mR{sD+pAXxI&`P}GN*vPl^S%6L(=;j70*uJR3jFIx(
z9fnW&MYOR6CthB3^r><^f+?o_Cj~(c*PdCr*y*#|1#CHCl+jB;&t#$^8Efvx60w`u
zri(Nt``^78pq>#IL>ceT@&O?iP+nkaIxU|uS;C;HfOuJakyB)QzT9EV4FwI;R!~$d
zTivT0EK^4nTRVLy`9~p^uYG&Sm>cCa7zQujs&mIK-!oa=@=#H@9?$L&ZwwMdL6(M6
zwp%Bi(bPsS-xvmQw*O%P$K_wkGObYw<~YGLkdod>T1dsJ__XgT4t<?GCdAHqQdd1Q
z6H{DL(m<}Q&_G%3r1f)yF2AE|zrAy5q<b!WWXa!|5PZNp>D&W%^9ZQvyjI0_&vk`2
zQMZItia|!DAWmZ31u@(oXR}GuQbwyl29aL*_3B*MJru4mLuNLV9rC5heMvhXcpA4R
zsse`_TPZJ)1rkGF!6(eWn6B<-H`4u$+s6VWPkk45>$8Ur;<TqoVYPUNZ@KAKJcZcN
zdADo<`o#6x&r!y@v3EJci!9SZ0{-uv0`(Q%VqY4^zwysyX%FTb=!iY?wv4tkyC#y*
z<5-a!4wZ~unFV-`zmjc%59v4^UhUxy+`HUy9;$u#f|t?G;wXnYjc}Enr5gte;ZD0w
zMv~E`s`Qx}cXEWI#QzYH4HGAKfbq<C-&Q@m7tOq^iO52NfTwQvp~jolT%jTZ0fwv{
z#PVdEHGe|8(a|GS)^E@rNi-1&d!NG0pe<k81oBN#S4lefHR9yoKM7Uj-(C<LOFlI=
zR$j&@kxG`Gtbo>&QQS&-OY)Wr<~WsMO5AF+n`D(ZAeE+0XP<{uiS_?(5TOIxR^PZ6
zi%asHJVU|0)z`_ZI#bZZb!4+Zk)Ga7LTw-SMn9`mULKCvtpqyj;k)z^QJ8FI^<}`q
z4oaxd3QXAnDxy{PWu5$n8)+lk+C(^V)v^T|KSDfRN`CaLCKonpAFf?R{mJ!0N7N91
z49ZwNyssf9Nloz_`~bT|x!?Xzr237MN`8^aI;_}0e&Y5*q=O!LbBKWR6D1MLGGJ5p
z^B7`2_eipq%xrL6<B)0+HE2C84~drOX2x;L$0F7Az9!7yKJ>0$0|i?bflOcISpFSl
zl&yvt+@;${5;oNq=zG+mySYAnin&$Y&qAa-M*E|UW6B7W#5C_P^gdSy>fwV1<yPut
zmUvJei^=STt4WUD1o6;0Fxw?LBcC|Kh0CGqp5K}NIE{yy-(+ij>zI;~68E(eDAwfi
zzAH!3po1poU2!|sVL``oc)ZA_ZG_Tav-~FAPSRgW$4y^jpbI(kx@o9(hKT*7SpF0F
zs+H#P)EdPDQxr(-KR5BfKO3~m(Q^R^xhF48)3%|~>dqACF&H7iRqX41uVa<?MJ|hD
zc9xIZsD&JHS;tG{EDgIz@n75Q&?+h3*nY8k-OL0d{GQEf8&6G%P}Ck<<*IwYa?&gF
z%bDy?rHHrIKzK#t5u~hY?#26Y{kUZJkx-ys!U*7vpVl3xv5?KZQ$?Q@XUhl>(sPSH
z&;Pwk#*@d<be4>kNmVn!Q%NK|!*cW(-P6<Ye&e*a8MLDI3j7XiI=~SiqEG$;HhDuU
z1YtZcKM%=jMURg>IThz#EPnO^_QoF+yap6mJz19a=Atu_zzJ8Vf4R%uwCqtsiu9uC
zz$VuU;{K`i8RnX<?TPQr#w3vjbx@LyTW=n4TF7#Fc!^FpcQqxu6#w3e>DCw1C%!?_
z<v4-|Vmbw+)h8D72%SH<x@$`$u4)`^Byb8?cV9K~ctG|^Ab|^bkZ%wwt_=oFEC1-G
zMymCgWnW2<NR~ql(xS|kken3K-Ma0zP9cN$LJ8v%I-KZkBi$gL>al7?R-I(GP&;To
zuNcJMx6pxl$xeIoKv+&mFx(pU0*e1wU>Nl$?K$m8)lGI0yCQnjj|0rz8dcykD)bO8
z%ZXV*=(A@yTl59lMf+sZ4wH}$Ip;dZ!!f&)cRpL=HuVUx94w?6O!uu|&yQ>Nbi~{c
z<a-9r+CQn|OO+`=p!WM}=)@5W1zh1_u21@^_mbm~f)Guvkp8bTmNjB2Mmyn?Vs%=U
zW8+T^zXrCJZ-tHDsHHS3`=h0Pon*LcW5#Tz8>@o(y@OZlU5N2bJ3PO=!{U=Y)s~1O
zW*3mimjySLa&x_m=QRQZlN;m%tAk@aRov0i6`ZRthkfr>bUf86t?*O|7<dLU@*aO?
z`EwZypSNpQ2}&LWGg&=kWjA35E@=8Vkbjjq#_J*f7c?Kb@(riiMUV}=DDJ1>6SmU%
zW#!8soKW6yz3n`1p)SsplFwWz>+k5)p?bEpdF}COVca^z>N@Z|9GXG!Ni4i_=&&6-
zxuAA%?A!3s6gse{@8HvVr_D@VdhR>M<3;Os2NBA>T|Yf6rG}njySjTyby&&G9T;Of
zcI{S(E$LJ&85jqbs;^SWiM)BUc`o-5aiop`p68j@Ed~D`OD1HX7zxh{ZSe9IaT&WX
zK|qggPGC?{3Foh%<CEE%gIOgH-iS3vLf;@hnzVG@cQt^TP3y#?+qBuy(z4H={fR_g
zH;}JRt9S3=nvMVcKHw6>#~YTxf}Z7fS(U5$t&AI>_a8}l8eMvl!M^M;CQ5(zO#RNl
z1~_G9)C|A!BN=u<^E#Zpy$jjB$-hN7;QGH7vk-`^$T0nxJ(#79Lx5F{5@FWHo(@g$
z3orU<5-K%REptEgkyDbz)<P0r?NRZqxtF>nK$G9+Hrx9?SG&M#SjH72)Y1Mjb`;U)
zK$u(}<&YU;A(oC5FUe=QTc`!aww5J2JjgJfGftQJY}_Q`u{6VSc!s>-Ki>O#C|3zD
z_|1rIS^wR9&cX9d&uy%(wdt>U)I5BJTR83>FMjuaHq()FXqchCo79c`@{?F?BRVlw
zG*99gIup)n)33a|U_VSfIB~f}4|sf0bq@SwAc=S{%qP<DkQ!zb{j*@Yce0{Jrb`zB
zfv_q8(m|iIL<fW7Y%{4;QQSTK(LutlPnp&KajWI8y?o+7xf=f<^lE?$)XvVsC+jk3
z;sgGfgli-6j(V&wexu;BBK$|*e8H4u#DA2(5ugNQbQ|xv>_1ZQo(bVNd}<>{GIHoT
z5h)CA%$iZAv$uT)ZZ+1sjSe3>;+iyG<wWH%sk-r8-xi(P3JIts2g}A@KQ}1KEGl%+
zr>?tOtOFDleH3`8TlM3#gTDvu<W+10z)EsauV*i6`f}I!sWY!>CUuJ052s$7<!;TZ
z2~Rm_!N_j*MJ^<crVE3~owE-nSCn7fJnFl5pK?Ld<L}gEkV^t~41S|%zV{{$g*r{S
z8P)!3@SEI%5}G-%@;OZBlzJ#&=srmwJ4GK4&|tJMK$;%ktNM+`ED^Qb5Nh)T0s&d0
z^#Y*+b{YuU2OilRP@prl4OYl#jE(i7*f^j0`#$-<Q5jo8VRrUohW_O7%tQheLpS^v
za)S=-^<I3dNcwtk6;F7aKwVKCwDp4h<0@wWA56~yE&*R!@W%6r&_97uhS{LEWi|$3
zC**$4uQ@iBmQDnBSPJz&$QWqJc?t5&0s|Y`FRXCt-n4-jwnEH}TzhVXx5?D$+|AnT
z8Ws-U5VDg353dT|P457HVZ&p9bld$DwVHI5yBG-1Q7!Jf8yn6L6Cm-HZ&!l^5kEgt
z$?rG7`?{`;bLt$$u+xS&Q&uLni6F1~egEN52iF#R38Njzl{HDHsA!v<gJKJxhgPjZ
zxq5yQjjt=B#}4VD==Z=u{`9&?OXBPIHk^-kR{<jSBz18(b{(OEPsX}?Ai~}2c2f&G
z&i&86{_GH-m%arZEIO8r(O7_U1Cktmho<Ann3@S|*@Tmgsv+T$yE1$ov=3fQEKLb|
z4`1%}RK+nHV}g?H#4RRruCrR*8T}JaM+3{7KU@2?R64c-=!OOeW(rKxw8bYwg;iSO
z-6_sliPQoxE4;#4f#2(x>8&HTc%EuSkf>szD!!<ati{fSa%p})WavC!h123`OMhWm
zqGJgcGMR@tsFmqA{jeGZc#yNa5I`fdNH1<o`<3b6KlRn!!y715KkSaxjz_S7S-a`X
zdwY5vM@yeQHba{1o{$o#Icm4Nv~E5%6kk(8ixIfbbf_k0*H^Dvr;zqUG)7gs)Uc7d
z0ktrDnlBw0k*on*X<c7KtPcNw*lmDI<?Qx3xIN)magmcwkGrNnw*XjhK2CoZXv5rY
zr1g8%6@6cSND*&Shg<u=a})vJ-k<&$=8HbbuB6~2Dn_UnE9qrQniywsh_Jm>$h}tS
zW?QXK{)#Jrc68-7I`Vh|Dsq<B{kQ_7F<yPaf6^qQFXy*bq>KA4onU96yG!IboSMI^
z0C-=$69I$fb?<pwc|870bOE`@mP^%xrWfP(lD_A^TD7KZ{yxyNR*dR!i+A|&rdSLY
zUI-dG==BGAg9Yl?S9(qhG@0<Bov8B_js><{0tirnuMEGKJNfAJY&A3ykGh~nLjwjq
z$^~lkp@Jg3@N&+^%qy;!lh4K+fuTT#oc_0lC1Kfo3vpwPh&tEC1?GU#gz%HILdK)_
z#|9RvA5U(o5k53+79bU70-Zn?4*z@fH$aH4_&=bX8x&@Sd+4-SN?(IRW9*C!w#sF~
zJB7*$^1x1r<~&ueqx!P?_$Ft#s=}LEL-Dft^2q%ZFaPS<;!dm2I0lI0U_Sby#5jwK
z?iePL7pDU_J!Tz>hZ_2p4(LSr_C|Tm>(p1J`!FM0ITd%tLXLY=Weim$*wP)#B$AeU
zyz*Rm)rJ3sf<u)tU8Eka<@X?M=X>t21;p<5wK%ps9Tr6iM8%-)f}+T@GIMl=T!QHM
z(hpi1#cpGbNr$2J<C_5Af0DLn>g1`f_`AlDP=w<wvNBIHa_J87-cat0vV0=h=&-5a
zzqoV!q{roNK@iB(5gsrw4T-BdFR!S|-FQL8dXGc4cGk!GqsV3m(^9$s=(md2aGSJK
zO2vW0-s{J2eu#E8h&_y3c2Us&6U*JO1#~4?-)${PJ*gRDj=0PZvyz#)9Qgov25c#`
ztJ<V$5R#0j!6>0D*Cx1hj=Iy)pI*~oq`FA1>CD&TI^BHmwW4fHU^kROK^&!nc4#-8
zwZuqh^eMqO4mUacJ{YwD*>3RDXD(D0$aYe?FedVt3ws3$AEyS2g;Rj*{Un8{9@kvV
z1mcEZ;H8o-lZ{PiYB$h612aPc(FEk>;4kc_(!_sQX<D_LAc<#lJQ2J;Riw~_2gr}P
zU)3jFR>tdnp_%b<EABes1yxlQer}l>+97^(eJ!^l;{}tsxMyqn=h7}le1-nW0H0mv
z0uDm@UQIg=0?VROx))1>YS&RI$cgG9K_owZ{I~!fu(7R>uao8r2K4T~n#-#f*d77n
zZs3*d;mmo{{LWd!%0fu8+<(JljKSZhH?vB$6WKYV#-9*=!*xamB;6C&2Y=Rix$rzv
zVAf}1{F52q$eHeNfE#;$STopSF+OrOD~c2V(X*9zKa3MYMV4NH#~9vpK`VaQh~EF(
z_#8iZBU5hGQ+56dIg`6OXmJ;AgX}Tcsi<-asAAz#rEe~u?{q_LG@ZDp{~KFzI?_vP
zI7ES4$ijuZyh$@F@2rsD{??b8B?8#bcs6kUew*j}gWWltQAmncM&EN^gypT`+8GWV
z-!-2p@LQlW=EQ)YBmLh(cnRnxf<fP(X(bhODoRBe2fVGqw;9wq!-?SQ@9g%ASTzJD
z-FsFmcbkUh&&WuCbzEm5@;BzZ7iw$WjHVQr75@{_NZtPU@_%Llm_`C7cvWDuMY^b1
zSw6bP7)+6V&f2j@f&BPgMg|^Zqx8y8_2td$n>-cuoJjd6MG!}QH%lju+euee7$fGm
z_g&F(znPMpV@3E(H|ZAV;W3wivXNDb2zcncb&i==sNX5?iR|}H0np$_83)|g*GPkL
z!GVmCLkLJedos+0j<2}w)YflnX$y5$0M0)i*lF3wN8^<XSmD{(fPZ<<3WdH=&%t+S
zb^a?7=ikVo#|B^7kvm^_d++U9drwJL*sDV<EW+*csG*Rbj@@Wno2>O5(donHIfgCk
zO@U<9eqrnK1h=~(8HQKC#w0K5eEQSkb9VV0kW}>qmvM%Yp0)(lB%7zT7fqV|Dw|X-
zq`tc3xAl3jtpDoT!rjq=3Swsg&Tu&Gz-=g!evko6=%ZhOSI{U97;NdI@g=X$9&P_?
zD8BN|Qey3=o*fMxRLjybtUIfm_o^5k=V+IxC`J*KnVsQXqswo7dIRe{8a^7z(G<+;
z^J9rJwc1L?{LqbQjVCGUS@plFtN0#yn|zukk>QgmU#`>DaCyKs&;zzXtmSR0diL|;
z0@u9k9*v|7Z7p059o?gYoi^Dz;Q4jn1w=2PtA8-2FPnHV-b=Ab+cx8(j@T=pU7T@A
zoleG9+3)lUzpU)k5|N#QV=v(TYVAuuZsULWryHMM=OQ&^wI3?!!;owtN=r(zkyPZn
zHQty39x))IAF3<PATMb*g<ZcRgjrm8$28{XcrHN^HGki#r*0MjL0Hnqeu|i-ZBII^
z2MY{-^jfKVLPu-VYo%<+Hm{=^TNJ?xll72bbszU1$TcB;XQ*3GTJy!_nvn5PY7&dU
zeB%MwwI|$#{Rc|?W$EX&x&WHcscsir?OQylSlB7&o=gJ_jW`AJYAgcYQXJH?UO5PN
zx%;=U+<g67fSXYuh#^xx^)fHHL5n;2Jc)3+RPtB16=l36cP+(f{Gxlxm_*5)v-=L<
zih1^t-*XH#capy<#23{@4$}($$1>0#QZHg1kcYdTl)beG*@GQmqV;aK5V~KFzBRRf
zP8<a73#;1+0s*56^6U5KL5CyhfHA2QOOVfqa~tb#F}D5d5b$77wELO$>yDMbRGpx+
zAsop&ld=JYokH$6{Pd?VVs#tg^*dqpl{+(G?(YNY=cYWDhttAVu`4c&M>h3s`BWan
z>D6o~?>F+)cUbnh4hKV+WSytkI!YN{uwy*aqki(U(___sOm~f_o|8IsJ6;E6r8FPk
zyM?<&Yxw-2^((UL2HmkkoBA1uxa$&r;D!8K=yW)BwdlQxB09OY#Uu8}O3ki4+4X}i
zz8aN#(e7(b4t+8Sq7K!w5t0SfcqH4w^qCY=f3`usHmkYqo;-t*l%%8&@IF2FX-EV@
zCuyI@WVbVgJdy(V>mo$51Mn7{uW#ZxZx4cv^U>}60Hq6ioBD!&vdGwcu4z~AG=4Qf
z1Q<ul?e})};;b>fpqZbiudCFeV!gY&DD8<ZKbPal+FErYHX!_aIE>zmCG8L2_H7s_
zBw4NViiRt3!!)=*0Bv<wxytr|(cYwvfZfdM=%sw@aW*EVzEBUale0r&e7po@pQgX3
zHsa1ep`m30AY^D&vB^vp@I<$WAY4h3vJiRjR6c&R;Cpw){x5^cb&}Z2q(6b;f1L%>
zic^O3N?@3Az|$_y^H-y)>;g8IK)!;t+nwKpEWTt?&lC{38Qew>=7dt_lQuh7<4*|V
zDqDMb4MF9}Kh+u5wu$1G{&+XPfy|NTl;Z$?06&#4KOYq;NC)Qrx=;8cAxq1fiLSl7
zeUbid^Dv!cV4xvoHsF93rinKX6$Am99$E@HxU9fjWj>i3rDX>1O%(=n^sUDPkg@}i
za$sxBMZDDkL%;!p-C$my<7n|-Mc3!QKox-GP5N)i;YI=a$&X}%@`VgUout>sS*OIU
z3#2Dhm>;&u_dGzjWJM2bs2h;sp3!y+#l{s`<Ql!Wpe&nfgHFpVOs?LKe?kvM3Iy2N
zRrcyo9y$}eY1XHeU2pj)WNQC3445Y!{zXxh>mU&)wb!BUzX|lX?#H%C0foVJOG#@a
ztXMr_R3!+;-L$`KEtA_+CMY2R{qgWj*_cC*g^Z9;#%_SjdLXT#=Y+eG5E0S(V?Rpv
z;HrGOL{&i<zaiFfQaJeUl4^i4)s<_~A59kwT11#sA*>4PJPtTw)(qThqGlmOBH*zy
zJy#D22lN`@Om<Jcc%~gR>N5^HanrWBd_?G1UOL*ie)d1L%ni4JV#`(bO3fDNbLFgX
z4VIxLYv0B5r#^Rzx&QR6-;;*s578+`gom@b_iH#Eki~dDXw3j4D*!Z;95r*nrPDd=
zj}Fyur_uU7f9!zISKG5*BbQX{HyXIz8Zfo(@&mc2Ba_O~b>y@3-E{N|Y5S$6_J7e1
zIgJ1I-Z|Rh#prh2Ko^{YZ-$Vk9+UL6=>{#eWo!CBO9>~_^cb!$v7vp*%9B`wauJnS
zH1yezvZ|Er@-r5ZzGFUCzju?~JKv9aaDC*ibDICoVt#^KvK@aBIyK;7WdK07JO#Y8
z3155aGfTeD)6!g?$-iT!C)7Hnh)GN53&|X8L{2%?lj*-Jl3|FXGBhTcR4OqzUhTew
z4%l$b=dm`daLm7`aSz)jLn;D>-b4?U5ymDD$~|kztTbZTx&5v&Ap5GWP_=?_@b$9v
z9Zg~ya-)B@Ok+M}v>>5BJ+joeescbN?a>(H{gVby_VvB`5pHXqCCS`^>4!G@fjver
zwDn2=rLR!tphME%>)A*gTM5s1VMm;6qt{Ex4jGWQDqsxN;XU0yoP3|wT|8`Ue*YK%
z@!u&HtcrNAAQ;fdLD*i%FaB<wyrlxswM9)THl_~}85XXl>@-)?Ym(az-$Mc$2uGoZ
zdy53=L~PrY2P|yo-Rpl>Qw}&NMm*2Hyu`A#WJtW-2GZC`_|-6(pJn(iuEzc`hp~!9
zPNPTGKbDkD1}Tca5f)`l6X=G+T9Chx<H1Qy1DN)ym{tr$oV>h3S-PGuzoMq~9=-{x
zsdXQ*w0o;2MX$qWTiG0`>fN^0Ih$gk?k8W0ZY0Nbdq#(xKXW$!@N@6w4!6aY{^n88
zTWV@LR&Gwf{sic$*JgybvG{#d;w^hT(c}AznR!Ap;{`tdd$WOKoxG22Ia?1tqXHSx
zpI*Z1zw;|T%ur~zKP1zo+p1(_$)-EnpN$X%p74`zvkk5`*+u(rmmE$|)gNjl$r&k!
zJ^ES0*8b0aVo!!9k=yf2koPoRFZyN_%!l5~;Jkr38#A<TN{9sUS~+=sj&s$kQOa#@
z!AJ|0o6VFCSzV{qV%w79&iFVJX-3lg0eq6t>re^<-i4lBVgcWaLKg0~fc(=ITihia
zh8Cib9$GJT72}jRU{7t0jK0%)H{T-OTawZ^hiz_tH|YNLyAtYPA17PC&k<wC26024
z2J=*hrmLVP?_J49gX{77`Up@qox587LV8%K=9vuSOuwQ&UP;ADys+;`bQ_p<Z2_&H
zO8rTRuoK%YWCVU83Y0lkZ4Y@Sx^Cy2kYdc+3crh7MNCl}^8e%~%=;RPXeVy#m#p1s
z3m@8+2!h5CT)jE#S%j&9>ILoBvM^6V9~Vnrq}FmyJsZSaTu2hk5i$xe2>Lq9x@$lI
z?%qqI>r0MU<T$`*TEKK{QzVMD)Cm>!D=TZ1hCPuMZ&o`zr)4S)M<Lq#w+_V4Hl;eZ
z@{#&VYP%*ZwmS4X7-ie%?S`u!pP;oq+JM2&Ld9KQnsr-6hiJ#oqv|#K1HSD`sLn-&
zfou<!vz?tB;W6%3szS67d-K}9^?TWBK(55y`4g;;%P>z3*A)1W2N2xATbF@`+MY9d
zzb95HIBDG1r`-4YbE&!M?hGzw&OEv=vG?dJf>=G~HPK?=v}EWq-wERm*DB9x*9?jy
zUO?d{*1TsECM#_)>?;{=n!B?`YLK<^rQDe=lK!ZPHO8U;RPv}I+hY1?y8IF`d<Dw8
zbksocpUV+T{Gw9U9?vZrWaBAOUwIH;NbZVG*;h<t$bXs1B%-Jo?`;XqO7hw)0jhaV
zOIA-l87)%^)j$g;wV4_=ZH1@a2MXoZf&5F&?pfG<?n*7@oOs2a69pBaH{JPKK2Tp;
zN^h6Q>o-`@ZVMx7Kq2=t0Sp9!gBmW~{%Wjn0Aa0u_tWEx8gRr)cEH9KP_7LjP!_I?
zrpfH0CJK7tet7>GiL{G49G*rwlP14Y-Hp;G&CK>tN#RFF+%!y6=cp%^5DSg0JI9fn
zF9?IGF%)55F*=P=<u4<S^(uEu7NcvW%PEbsApd8>Qr{R(ITWtH`EgA&uFUlo(0}27
zsuC!4V0`okuXFHQM!%2i80%$!0=Rum$DGvX*5h@4HO5QJnl&~VE|2G94JsVTq@lV3
z_n?rym3kAu744F&PZ}wBsWm9B1{fz8$<>qR+RC;+ea6Xm_PR*5rQe6%j0rrlTOuM4
z{hTeASe;V&v%C6%*4PqZ;ZFXNKc2r-CRFDro~53`@A{CE#<wupltKiB*sUe0bq>Bk
z;Eh|-5;OGNi%Ve{ftsxi=JU0`DNWqc>8|2l5AA?0z0I!w=G?Bqw_%Qp?_Hy~VMcQf
zs!CGE<*qst4ui$Re!o?0hF0=$a*EE5?wK%rC3!(nwwljh%h0Pah@pScjP(v4oX@G-
z?=hdy$u?AAw3p6Mm$T|`9Q?)oAjf{I67X4ZiLPpX8whHa0rEcZN|W!B!4zqhjiT!W
zdxS5oPIs)1xZ|#$KU7#Va^>PtChs(Oy4O}&wQv+PI=nmEZi^~*Y<Z$l{y545smfsN
zg~>iZ=QH@-+rhf$7Z@$&$MF@5ONv~PZ(L(3Ik@1IB(?Fb(O%jUXm~%%3;J_mlbt+}
z2Z*<HTu8|(?TZo%sV6QzkPFEy&*j*m(=kkoEPWYP{4^+1$H;xaggkFzV<hP`{OuR;
zuI~UeNf{5mmk>XZedEBTCtieYZ=ub2uX>1kzQ0#&{8dw~F%g+tSf_7|8I#z`d#uS?
zaG&Ur|DS00e?#alMY+DLPzjF%gQ|w;WXOb~B`Tj;kB8PGTd5n-0a+PQMjKtu1e?*z
zKZB5ZGR@L$TP`c+c^%k=-cfhEPOC3tUV7+~FdF{Zj0c|4nByaNtGzHYKm~Ua)cfXU
zkqE6fyF&qlA+ZU!sNMn<@bN4quBnX(Py3N#c}1=oUs8zr6fmlrY$F|2iR2RTuH1aS
zQdqJm6|k39FTEm?ZNtXu0)!HEIO(<I`1qd&EiphLocllaW|#T_%ye6^Lbwh`vat&2
z1HnbIFxRBFLwO1*Z^h95B$K9}k@>9~c=tCh%0&}y)jb_2n6qmuH@*TBKt#&VFP-rI
z<7()3Qjr(Ubv+E^qITURSRs}GFi`Jq#-R37WH-=5hOXgn+J)3)A1}_iCX-oIANUWT
z3rP!#GRT|7b)O_Y*3Yi2{W#FqQbO>}acA{ce^-K-+p@71RNT39r&GWho(-y;ezZaW
zZ1Q}wwbU%J{x_+5*4qym1XT$Yu)B05>IV9;wgR3(%KPPF<KK<Prnkc^Z5Q&#yXU|O
z70JYnh4K`!jBl)kp+b_<^%>%I)dpEfFI-YMQq0+0AB_!fv~KpLXC11HDGg9+l7Lpf
zH5<W-QQ~*6{qkfUMp|+ulZXJ_v<J*OMkqa7Sr0-7`~rU0u4^(O(UY=R12YAxO{U<%
zH=qkXlY|>985wRL%3rGIbN1xb<k-o>5=dHM9((J-l!NKFw1W`05ZYSGiHb>R?x6eA
ziO+_6{X8`z=l|6norVeVV5I*Yn;R)VO417X<{=)KLdTtknlLtBcY;!hv@Q1Y$oM4l
zYE8f}A)#+>t|S=){iUpWNpYfI9%WN#qV#75$jxufhXE4dcu#jXr)z&B{<@5ejIlbX
zV0lvy4IN~obg;2GH(w?_g~5=BJe{wi+#6B{JF~!R*T30-2R4xK{#yVRJoEo*kM!JK
zliKuj<31Hn(qglTOG%mXobsdlsHUQ_U|%ur(gmD|vcr)0QleJ&K=s8wo}<?ETlYzl
z>lcHuwN5y*in?^Ck%l`qgEqi?CNy_Oc*3dI?rT9z?>#$?<rRW!INh(S$z}MUY`W`1
z_zJB%)NZ~n_v%OglhBQ>1O|8j8)EgE4g^UM<$J6$FpD=xv5)rxoK_9B9CsDhNEvT0
zN-ZqA_8#m)WQRDT@oELb&cHBISuD^wLV^?)baBH>2SsAJtF_iPX#;keMhQ6?5&C7e
zFm?eQDWsuhz=d4Js?{}MxcHz3GX$*j!_oZ(!b{7^ldvj&{s`H~=o?tfZ)_^8=pA6Y
zd9ap&j9s%I^WE#8$L(||UClR$@o+p}Q9u}U^T@RP)S}2zj%KU7Z&Kv6@RLbW(pI6?
zc>H5nQc~ZUl(+PUNb~qUkgrLI)VVyDFtvphLv5&rGB1HS5qV(wQ(r;8zi0-+_5r?e
zs?N`c^~nvu0aX%OLUfc_8>J!0OUL;{z`Ni50FMBgs}6BQNV|WpK&?37k^+*ollSL1
za?`;Yh;)@C#X^1j1pe{X|6%JZ!=l{UwoRmw5+$X(rAz6?p}VBJJ48Sj5Re=iX@>6Z
z8XD<t7)rYP9dx_5KHv9mIF4cNbzgCwSFN>jHPox~{6|Xvo@7GKc?*dzrb}<-NM>v7
zJ^9d;<ExH-(a?&AbacC#V~Am1IBGUCHYaei!Y1KTHa8@h{^nJ05&);lYE@3wVqeZ(
zYKfzb#+ltLDi!Y3t^_O@a>VwHX_g&Uiz)u{<UHMtgQyZilpe`e@5X7uo;sKp8v7xN
zX^S*71lC``l-?;TE<>HTEEJnF)B<N#n!J$?DRAwf&ZdG>%0BczqWj^oK&dtvf_+b-
zK6fb%S05{X)b>7U8Ub?DtJX-8N5k$?iZRr%YiFrsM(%uw|FZZMQ?e=UXQS4wv3#|L
zEMqqlH@3X&SMhL0CRwSNuOfLTJ2|^MWBf}EGUan<lw=v_99mJ2lHAwU?eLKNRh0G`
zE<<y7>kei;z1Hc+JQuF^Zn7UdrF#1i@%_g~cz_28Mi~x)%ua7e(clb0u{^sZIP&S1
zslK5YHygKy$#TinSHVNzR>^1?nU3gE_P)IDjixEp-a}0{b39JF@~)xSHN~XYFUPPl
zUSsiPmtBaqFU3;Beq58}5i+yRFi<;$bZ`#I>uKO926;?g7)icnK@o42s9gow(JV-=
zP%fA5AXg$3sFiw&;jS&ibns-B%atW<*m~~qUh2Qg#QFyNSj_cA-?$iRNZx?$i1FoE
z{T!N2Y%R=;Xh>lsM<j55cRRe8e8*TB-Q!FL0)ri~uJjGRdo4IS)q?!#N$wWWa$mgo
zA@4N{2Y*5_58Jn~Ci+VP?>-VkgL$RA&C%CZ2gd3#h*!u;6Qv0uJWEirq{RAdGsKH3
zRQ*zpJ`EjDmQ&WL$Gd8C>kF6a^AbP*|L4-~g{gZ4|7Dvau~<^vcbAWF$2}v^Kf2Ly
zIYvwE(pSe^;J5=ZlTcwN5^A8a`_+mX>!zh*V!(4F{Z`f3?CMKOzaSG8W{Z>~rWQNq
zilEI(O7BZUt7PjJgb1(~S9|(Wzww-v2jP{94s0$rRKL5MB)U5E+LjHHXaK5qwHjMJ
zC+Zy|@EF17Md3;OfvGTb(AT{c7s;1+CCIxzo3K!hGk-6_UrPTa&4Z_(4%w?!H*7xv
z$yl-A)G{{xS`LjHtIv-Kdc9BU+&?>ZsY^n#)U8yIWECB`VL2XJg;QhgJbLQGnj>R$
z)m$n;T_6LrOC*6Hgfgd0;G*-6a0wk|QwcghB??)H$CKTS!xATH6gK0UI^hhu79HSp
zohD222tDg8dRCIx9jTK2Rqn87tSb4(#jN5nms3~3pG$<T*5ducJm2zI(RqW|SmE6-
zgMKPh?X!37B?}kW?#C^h18_U0tQ#^<$82X*u7S$sJRS>IXAKttpMw2f)MAvR9EQJK
zkCyoae6R3^582^u*|!5P4l2|D8JM~jG0=4bYdR@$qhllSF{hRdrh3-lU#YBgSrfEx
z(H%;><euuTaowmn^WN@tMf*#1Z+&D)KWeXTaD8-S0?@F0<;T$u`@CBMIlUWalx0jF
z<>%5DiUDhGk5Ek^yKdLb<E1qm?cG@m#}-BhUkQb;Axb$CR|zY8JMcKBK(&0)e(jd$
zBjelg_}<=&CGK^df$47bZjCHl_!Acxl=#Ehj`ERM#@BVxuY>41g{bg@DZ*(kEQKE^
zBV8O0{p^d<E$rEjH9fhCVAB8B9$_CR@gE^Nf^zEdoeync8?caI{l~DoA;^r}g5%|v
zsrf0~1Xd>pb&8RKy=wBHh#jH}oiK{h=-qMzJ4wqKF1ub9MayUzGlm2f^m0T&YddK=
z2<RX_A)zfu?A^V=mmxB>dq^0cTKAKv>}eLXBx<(Y<e~AUICn&<q)TWDa8z6~YBye%
z-z|I1XZ(-#`8*LV6?Du%rFeHl5Zos}2_Ff`#Ab*nDXR=@RaEMsMB}^0yUP}Exazhu
zT36Jr(_TR7KUOR;TtFeZPz&EdVm%l*z_J~U{enjHFo&hp&j_Wj`|}BtZ6=U8PS<PB
zPv;(k^35N9j@`aIwz2tBDlkW2An=*(lu0MpERn>aC}X3}5`LN$769lf7^Xpo_9>u+
zc-?@`cyEtw8w}a~S{cW*Jdc+9NaYkc?(**FEf&<GSQ;F<Tr%!|mEjfa8K6Ee)JOhr
z;j6Acl0~GCwyVg=)vbW1N>*f;%qI`191u}V<hx2}8ggA7NM`JyI&m!!uDFTvsNJ)^
zt<ibzZl$Vd$|3f=R^7H{04=sH{a$W9>$J_!k1iw+T>s}isBE;K_81}bW;t>)R0y^`
zB**8D=*=z6<Lw#5=Q-WJ6WnR?oI3SqHwrEqcu_gWr8*4`^Qd;4n8}b{X;mgMK=2;r
zE20eIxhDi0^e5-ur@<cws{Th;Z+)z>bHdf&a3*9oRlhw^ki>~cU9OI%BM>-DXd1mb
zCURzNz%X`A^jj+%mR+-UUoS+v)pft6SznPyo*|)CDBsp2hgNMJ68<C{4H!6d@_Xa+
z{XZ`C6`^Qo7($uT;UF0$nv-MNjLDdyeO`4pF`VsH#5zXE5IrY-GLYXls<8P?Ahz-D
z>RFx6u3$zmAo;UAvOyfM+SG6$<fr|!M?Mhh>vv#xrTZUwv6sG8LrT(9lTP(lAx4j8
z5Yq=c{}8y@Dq-~6GK)^pqP}9a6tEfZ%M{qZ*&({iNlZ#A2ni7mWYvi>jBzl3L$Lmf
zG!kTBZ(+of&inJ7{&)zUVl$=MTY<yZlCMbg(#^i#^?<@=Z!>=Yo2G|HvL!!271@7i
z9n|ir)!$}q&==*cJ7qairAx-l`{j3G^pWA@3hqGRuosK(t@r)n3<6X8wG#{8o|kz6
zb3cNT33PpSHRy~`h5vX7?WVQq+#d|4o{hpNW3C4LZG6=xk62XwqGeyLe?lf19+pr!
zPtz(l<BO8aqOd1Xuem~^yxnPn-7ez5EFjO|6w5GQHZy-}b;o+QGTPVZ;FrlL#6*J1
zEZF;6kiW1QIS2tN!c*q);a-93a<EswC~JUs?`&EOq=p^u(FpC6#pnxWLTx1fADvn=
zGBH$H^w8>)lW#F3ekIPJQ0s#mc~sz8&+RVhu{<d20X>5=Mq5?WOtSMzU}__&+bLkZ
zyOAr*NP1EPtlnR%qJ)y(OP4+AUZM7qlr3wkE?<pEdJ;!JSS6FLhW`zC34#yUV#S%r
zDT3H4BKxsy=usFHCWzvd)3j_M#>v+q-dqIHrW{qhnTg4GD53hqeR)>yVtjX{yo+Ow
z3x3Mq6Iy+r-6Pw_N8VKryzNh%@hk(4^IvG`GjL(_)fU>;5Q`4H``gVy@eh<6<W=j2
zpY54>*s9(Q2dW44$(|Iy9S8gW2oDfxD5o<lVw9dQ6fUWV53zFlP-AJWD8Ayihm8oP
z<hXwnR<*$sRbY*TESsQoJBTy3I|3xl#L?}#ruXN|>9QiaY-fza6Dt`=Qg2bT36oP$
zL}AZ>dON~y)>%`|(>I-V(@fJNqK6K6O`5LQIBweoz=d^)HQ7}FeCOrTR{hx7pWOP3
z_atPG4Hz!WtchmZm6bMnAiw<PU-E6f#1JQ;uit0z6W3VEFJf79gl~vEOS)|Gc3vtH
zs8|it<nvautGDjR!GoN3ZW{|+3IIJh^t<Wuwr9J0UIL#)Rm5&@x7)qBSKdH6OnFCv
z?&!{1SREPc_KxuvBKXJ)@qba(x8|Bh8zP~|7(1T(&(5l%$CcCsPFFV<E+#tG_huU!
zXh&!V=uorDkri0&_QpntZgT23qf?*9O$g~cT`54U*w<>o9v*O9bG#R6f*Q<5DY)t)
zar?S84@>EAKrd|3+^#Gl+E)G&D(su$-}Xha<O$M|6@*(~8h0FwoZVhP&ODX~xsnpK
z3XO4U8Dv$|eZd@awMSxJwX?2T>ewQ)VZuCUQ$aL!jn9={V8rNKrCB2pBL2i_ti_^&
z<VfQc-oWma{zoh;qlc$6)_35PYw9na!%6tv&{bm1<T@*8Cl_aE)L#OajD7Twpeun$
zI%9wE7J-Cwh(W{uyQfmDK9<H14p`Nt^e9dTbuO-P7e$?r9MrMj+-I&+a`jlCpi&#O
z6c9%xVIZ{>fQQXZjLKs8sfM|UlGE&76pZpPQ3U&~^!}^ce~5Uo=IMJ%FqZnc$vPi2
zNUtLAwf|@-G6_xvZ4h^VyUAqZcI30W73<KR&Ed24p#01<A1$oX1ns-IbWg@ez5Us}
zR<U0oCI5WU;ZSOc?&#&uzyHG_%_k3qK`Wd3ghy?O5%TGna%J#FT_XE{tm*Vf2;7;+
z>8SNxt@q{ryyZj`tr*#OySjQzlI2{L_t`Ao0xMQ&kTOaAN4%eqqB#vqCKz{)2Gjpb
zU4Ejj&HR%uF@$B1aCI7R@#UI}5LXr;8bw0$iqiXTq6)uSEQOnym94?<u$yY{bVrT3
z%y5@Lfb(h|4QQ#MXl*(g=XM&sZkagC{PQvS-uLms9lovKACUeNfAZhLzjy`ZY-wMP
zHIc9?j=Hlk*-CcVNM5yW9Obzd4jdK{Fp~iq!X{)?WSh3<?1|2qQ>?L5$9Jmz!Rwz;
zJlKD5Ja{I1A2fwLd8uEBPUbB16KDQ-&H~9t;Ho;`m2dWocj=6e<@-Nmquq2g5zQS;
zZ79m+S><aDp11?z*ADv7Zf;JUn;@0LEK%wruMP(#pTy{UA<^x@e2vNmj8I%MnCaB%
zTK~sy-+yHI`ms#)F=nu4T6VQCN>-;^Y)b%OFZ^y@hr#RmLy`hScvUQrsh8=)^o@4-
zUY+Zu)?N|!$PoOJ@h4emt8zut+w`@WpODn-_5v0<Cl8`RezD=d57K>%l#>OAiIDZy
z{IFXuiZ=LJiU&#UUKwagRk<@axsPUVL?2)&rO`1~6{xFk00Io>3R}37Y~jhio^4)u
zgwK8NLu{CfO>pL-HT=#QQHS#@rG?vL=(4+N4c)Z=KIfN>X$O6zD;docTsinAI1;Xj
zi=JVVig=@1E<-KdtLRj0v#!&jbL-&&A!y^}Q3y>V1Jtr|y4xXgt@Y}tHLPisE!?Hz
zMh*gez`h{upiqc^>q1sG*FTUP1&hM9F^q|}jjPn@`ykDG0wK)(cGE#3)u49p`d=Kd
zC<rfHF_MeHjnQ*%^stxPj?YpfjiCNzTq;(>B~l8l*Np%w>K>z!W@6<bIar@43z4hL
za(}C8_of*wj$o#jbKK;Lb$<T{sZo}J@@zliCn_))!Ync2`p2`r+2<s^ESfE!f7rdj
zU4l{wSP&BawAJ6_VDs>)vO{3fU_7Fvns6%uNKtP*&g(_cn(?*J*(Kwg_ME44xr?M@
z1;h*#oEbYX`i*zWnaBH*^vL?oCaw?7e(DwMUQ2Epir74?dcmJIiOkG#arWSo6#f#?
z%@R?=3D3f1o4|G3`Sa%@7C)-G<+#zp{zNVu)o&Wvf(UsHXoeV3Sb&jsG2mtBLY{!9
zSoNKcLhvB6H1mWNWhS%#ey%BZqumIb``vaE$H{aRiW$gAK1Q&;zZvrMr4Iu1DL>GI
z=N_}RHDQ>=E%1)f(It?s1Q*)Ru~6^0Jr28`xNmUq!@IuR++~;R&BaXEHn;zQgV&N8
zl(v5Ce1aJ$0jSDh7F62{cROo!M3$gJR?H4H%EAo#0Ev0QK36A5GWg89z5ZfOwZ17+
zYDtO+quzn7CDAW7vJ@FE{+i-v-2GDr?hg<sl-oS^Tb?ytM>8(i_0p?iMjotD2(0n)
z{^aj_w}XXinl?Uq?8qd+nsnv+>RtZnv^qDMcgZ}#kHsu$ZId_&lx)?yM~_2@lzTl>
zX0OZcEL={u(;k%=`cS-O8CRO-NcA7Z2wyWZt8rWVM1;BU^{0%-K``z-apWI>n85kA
z*l_Z??7zOf5K~DhZ6`wsC+lbAs`;PD&t>xw>!d#sTosmVA|dbbVh@2%Zj)0Jmwiuv
zd1*MkLCtqja{${28p)jeZc@|MoB)MW{VeSgX-ZVM__3*BmCIB{+=>@}BykDyQDzG6
zt`BS-%~|)kvZ?Iag4gSfRo{!1$iatHZNhpKE4@uxL1%wQM2za+64kF~vsL)dY(0PI
z0g_&!xZ9DH!V(6?JSPK@h6;?Dz4$qmc<1_xlYzacix753){+dv?7kC|$%P1mG&5ki
z+K9Jf!Zn?}ResIo^Iu7Ab0$UebNk4|gYF_KTc9`8x^Aa(;qt8MB%J69KGf1qV0Ux{
z1(wS5TyW_|Cb|&9{plph0UsR%#q$-Y0ZhQA9BUIZ!U|^8UX@%Q^o@!U2FWA}A%LS;
z?Pf71FtyOHoU3+URi|TvFBB9+Q!SlFE4N?5qHnlabgQ}GRmZpgU0+MNAx%L8XA2uJ
zAZzVtY)(*-UMk;G054E$cV)PD=`-%!X#L%Ejrdy%*ZkAAK%u}gWlZf*%szW>#TGQ?
z!Ii~xte=KcO$OrvtB8^MOU4_r{Jt{$GwB{!<cEI9^cPwC;Lv{r&QRIz&x;?A9^f9N
zzps?Q$V)vakSzC*&wdp#U=@wZ0`4eAPTkfh4fSuqvPM4>?DE?JmZ$suK-p``_8#=T
zJx^VO?2bXuqH|L7S5R~5EBXvv;_^a?xBwO@R!IkthWCu_{n&eMgU5IaWY8)lxV;c<
z{%gRoNQzYBy(u=6(=@}*i5&!r)sUmYwU9FmMI|CYp<ETb7=JoJ{Tm<Lmh`W1j$z}j
z9Jk<i67+_q@;YOW4Whuf(Y{VmZaa3V86l6&*p=RjK-B<7lIt=u22{1am!qtgCC{!>
z&hsvP#Dw`+^kOSd`j{A^@H;9oyh>h5SJf&ROYzJZ-F9E;c#hGw@8bEz<t7Ez2X0IH
zu?WM~nVAG=ypJfGGb!)axz3f+M+;dq^M^utWeKtWGzO}D-Y50@a6@EJ3tC?mDZjW_
zrBIDR(ZrYJIbY}w#HG}z&G@>6Xp}xTE)9W~_dlFi--&QVuL;~f&c;!OYdSV>ixfNQ
ziP&V6A{8?FEITe=Al<RM3Qj5jYd1t(eb>pgI)~hqyR2)_f+o15->LYL$jBS-H`>yZ
zNXz__K4Q7NyDyGDpQ!aZ%z(3JX_xTeQhRQ%g%<Do3wM5tbfD=$4^?Ja3yo>HQY%R#
zma=*gN!%B+H_rrCue9cpDg`^k!w<VKo%=hS))sDLZ#bOk%8`Vl%Tg};no|uoy4zC|
zSx^e<)q00(^W$&{m4nL4RQh1|pYf$nhmmg`dLM`V;AtF;E?{VtlzurPSXn}6tmjXo
z73laWZQ#iJyT`Mi3z<}et(IeKllM&by>B;5pZz<Rq@U>YkC}q<A8;R1IjjufPU$V7
zi(YCX`c5r7Y8o58qub?cIP5CAUhWgPUQE;3yjxDmaQ1XUm~*jH%Jwo#l`iLwVW3*0
zNu6d<dE9^%wAN)*@;;oQzM@85JKqR)O1z!ZO!UH8=<fDBo$&l{ntW_613t7E#LvbZ
z!GiRznnbvZ`8NP+e}q9L&c}-6l%S`~03dK!$|8?Eu6h99o-c(h^sfX5NAz2%V^(rM
z%7^^Vz-4hdfZF)ds)BD3-|%I^v#{BlF$;&ob{qjCOy>-(K@r2Dyfl|A!^k%;sU6fp
z71JyWL_*jF_)X(<HK{TRHA=*dW_Tjb8Z4ondr9W~uW&fVKn<yZ_Lkq{XWy_+qSV3x
z7mFFPj(dpt|0y~DtNu&RL$Ydo9GzuQ{$S;qT2tFv*WaFxM5QbJ#!4=<kze_Pz1R6U
zCS=!>>H0tbgl*UPeIhy$2s@?B-7dQ~N=4#J1-)1}IOv5LWnQ7=RkR%D1kU4Nf7Xy7
zGjzGVO|QMPs`(>r4tF)PkRl;+1F&VU#*i#dM#4#n2q`gUqSgEYd_jG&KM*r37H9wX
zsNjAb7Krx*xcnv*tyMjk3R6RC#W{WW<w|1PI_7NHcGJb47bd9byvU2WmnF(_`L^GF
z^=~k+kbn4Q`rQo)?xC)d#F8%(zpi?<Jg#Z#dqNbq;z@EEQgY=Q<bfBmvK=c^sxm}}
z&{XKF>EN94wjri%IM2gPR_{yW4jr$~WX|XPvHV`D@D#&S(k21#nlEGc(E`~N;*d$W
z9Mb$Rv?XVHL}^M}JK8$P5~4K<l_%z-8le>zGDX8PPKs1z$TS-tKf(53R)24KBVg6%
zm*xBZC|!*8w)=$*K67@2Kwb;u&(L!J5e$zTALO50E3QU&Q85cXi30d#8X2g?oL7H*
zwN_2!yqroVk(=8}j@ftOLBqxV+fDC<m5=!Pldu)=xqYIdWWjMp-uc_l!oqMwM+eXN
z-1fT#Fe-o~#C#+|VV}f*2&JB)H?-M`c^`xirFdH%jHGN5cnOzpImP6@QGPsPR@Ga(
z8%_EogqlQ-0P)Rp>jYAfyF-#7Lrxym*iaVq&B&9@Jg8Gr==`kP2>r<2nC0Q2dD2@g
zBNEZpQ4$ALwHmi!7yq9QIuLxHdbheQIdgZDQ)Ys4+C9$d7H$s0yzxQs%qq`(2l*o3
z*q;z;|J`aCFME(CP8K`a$p%_@X__aS5Q}j^HlAZaLy*wS(rU0{Cz0?XCLfEO`{G;N
zc`?7|;`tKg;nm$`oWRZMb<bgCL4i>EyvdvR{;Fxocx;|X5l0Ns)bbJt8kQrVSFlf-
zGC0-5c#du^d3DCf*r{Ve`-SI*d(reM&8sN*P7>*kw0PBR7Hl0IizB?Y6}DeeZjMJ{
zYS*+M4z3h>5*7JKdQ@HixiQXwEbbMoqCrV0SUn}p`wC>t-qiKm%l?VW@~wSrA159p
z?jLXxEce)EaS0X?039iiLa66m;IYFEKPfV=s%g0^>Wel;h^44s^ccTr+6T9gqG8p{
z(?r&eaVtUWhYC#;!!CVsB{K7~%GnG}EeZsc&#Md8q1lxvjUN_%43$>h^=-%$<#?~o
z>CZIsIibdFN&w`#sVW|ce4{|jEUjn`BW6IASs=9fmBjcQQNk*^*HhZx`Q#|VK0wdS
zxZ^Tkk@QNCQ+$$=CWAQky-6WUz;UqgVExm`-Y<3_=rXvLtr{LJXPGT+^YH>=sR3rx
zc1!svEwuSGY{wMmKD}~8c%COnavp~tZXiS!v_t(obGsHhqH0k{w9neO+Z)M+GJNUb
zG&~i>XIOKi2O$^ZrEDu!ZvJk)36(lm@nX0A);f1>RnbND^_2DKQ&iQ`TbATTIXuB?
z+o~7C(-}@K+of^i|I}KkY`kE(QnJnhQstS%$r@Qtd%_D5pC|S#t{xG(%LBZF;dUhL
z?VrUMCnwKE|H|N+gE5;Qfy{V;h!^C;(*FB4n!r~mZX{;WqGQ~xXpW|QG-v{|Jf+^y
zku!X+%aSrNLJ^hZf}=QgQ~$4}F^<!~_zsrfH#pHwQWd)cd&$#{1*#hznILXu4o#5v
z-i)zzy+qJv7kTfr_8poxK9bck!Mf%1^K`?(^L$exT)~|Wz^buxGzqgvy-+Dpomu8X
zrGIp@PI_N$r?ULG{<^5$;y@w_=(K7Yzf92?QjCEYQ`xeX>idic*1d<_r|$R|A1y%q
zuT=i++q^LvNER6^4MuCsRYKb7$;)wAnw0Q7kGmWSh-tjOz&x9CG^+g3o|LpR8&gnf
zoP>Z5b?Yt8Kk|?EqO{DOb0x~G)4t6;EvUjT2-=B`QQ4zAwQ@Gi%gYwVUZNj@)YD!$
za)=S7z7Kd8Rk1%FElvt}n$n#mP^*wOaV&*HK>NLtH-lH>x24_p4z4e?yBbJa@KFOI
z?W8hdKw3^y^9}B3MEtxGtl@UI-6_|brvyBOu<Z*@b)Lk}I?vMnDHHvhYPWeD7(H@k
z&BI49V#a?VHc)<LJe%&Ebh+L1gYWdMyh_f8*qMk?w_KXMX%$-w>3mT`(*~)i?$Y9$
zo&<M|)A*_;PssNC50P1(nVDz<LmrjrJ>4^SlA(4@b%Lh^l*+4}h;+5DOwq#<!#tyb
z?R8yZf?VaNLoLplBXV7$c341sXWM^*qeM9vFRd$_J=(?dj|rp>*Injg*1%WjTG;>0
zaeX~_cO4*bz0^&$Z?3`n&|H5x4#!5*gZ581vM_phJo^rh0FP-8_h}I4@PYqPEyFWY
zKc}S<rLHqFBMB4{F5k@w^6>(d7lXnA$rN!88$IbZdsNumc7T!3^+4L8W{5tvG!A(z
zTwy`y$a`edFh0FxujNI`+cd`wAf}YDLB%kO9bAZ`bZ81(l=xLHC^L3pN7Pq4qEdR^
zPQrQJv5521hiDA6Gsn(`lR<5cBa+3(699mSGo(ZNDJa1q57|`?NFPJPR+?-dA7ees
z#F%A7iBFZQ{0QDz+2+>Oll>P-7-0IX$J8n2Ffjso9DR1{vu^aQ`a6!Oz{>d~68)A8
zV!N=_Zk?(XQAM+4@N$D2(@qUFEsm_?c$-B9o(82<Y7bqDL;!0%AXi}kk@WKlJo*))
zGRd&8{!4cQkmKF{ZD!Hj7`NBAyYGB!CB9=*D{=2`P4Xo^BQ9kF9Wy>L_P)z=C_K&N
zC?H@=@IEP68&fILtjw-GSOW#b^d+O<mAt==ef^qLX=@w2s-A13^N)#E;K0($)2wa1
zFse@BtW926%4@^U3HP7Md}L@}pKv}w7Ua%<zL_w%luO-!FFtfaIFx2(Cz<`>dUefV
zO~h~G`$Qp-KcQw?W;bq`*`s6DGRnO2ec*my$$ToQZ58%lKOKHGkAR2%d1etZVdFw(
zYB?#OS8LN_VbnD7>8of%tx(a-jZLFC$r;#0>3XgCXV6}5VMFKqevgNf3N2ZG-J6PU
zGMYiIi~Ym#RL#iR2^2!V$!7BTeT>|0>Za|R_ypuavn-_v`5Y!TxE<|*@ptw?^0afL
zDPev|29vO_O%#PZq9w+LxFus>J<Ke{uta=oO>))N=hdntTd$HnL)BOR0)QCMJ#8&=
zNWRJKy5+JtGWcxP{<s^$Q&*M2W0W?y;5>@9t%zMypp+QTg_%vB%Xsr`D}B#}QJ&wb
z!m}z5T9tLAvF2RQ(RA?HBbP_=h=LirRd=lifIZE8=?y2GeXjQ~4qWxJt7>4)Ega6{
z)vx6)Uc>m7_pTFXm4E`gwxuCs*Eg2%Plf0=j3=T!+)0dpLokX&romFwCzn$3&($Df
z8K)|Iqed1i`MT;yC!2D`aawS8GJnls^IUJhDW2K}mPmv${peUYDbm@(2)#1P4tL=j
zNDK}dHej|gE!v10no$Qxbp+&K`+<(eqvp@v!`B*4^o3N(E*xJTPbVzTsi4;8Vo53y
z3rSK7D}`(!6SS9D8Rr)Z8;{gK^F8U3iPKFE+k3Vf`6~oUxetMi-NVoN(8zHvp6u`Z
zQKn{i=tI#W{D$i3c-rxR89m^`D=8l`yIku$3#=gj>%1^R9w&qKvwFSFWU*l;e0n<U
zF#g8#=Eo-`ZNNi{@aQVOg7s35fC`onQ4=J;y53!BHnuM+M$*dkI1l?BzvLYF4cX)k
zL7aDHZRcpKwCp42-94SwdONP!^NXf1(=6QuMPj+FWP*IClTud|fFE-l?bus6%$TB&
zlC=aFeXQjPNnpzGks<k6`Vbe6iG&T&#6{93tTwy6{H=uhLZIs4qx0*6_!FjzafBfJ
z25cqzAONMhlTOXvaU7+JEH9t)*{u)+El5bGkkBJbfSXxU?bLBdvUIny9I=#$>_yis
z4P90YW3T#W&fp_3XX`Wwb{Y6m{>u{r8oKP`*N9~*TO6}FI$mSRa}!n#Tj~ZNe<uGS
z6T3pesqo786!I*gSV2rB)lotE(mD{9gq2%9RU5>H;kIgD?yWZm_Cg~<CVbm=7XP@r
z5)8icu<&jX%X(3~5nUhr@g{gO4}$eB4`?E*zlx)PVsK9P1YoBZ9tG?X%)5H4@{ZAf
zcmSnRGb1T?npL5BRLtEDCN=6c)2?L6abfykDWWaT&{_hun8qggb33fMVz#*8Lhdq$
z()kFjgUbn29(!nRg0apSYC^xhh*WCAs{AB?43?((AzJn*1!+V5zcWKCdGy{dF46?R
z@xztP0vv!H91p+Dj&TJ%!Bptsi06Pv{Um!(A<U}!?RP2JV%J6E*0mRSA>E{Z2GPx~
znDBvQkat9_5)Q4*oq->hMLbFiRXm2qsAG!og=K~^Up+<F*i1SE=#9Re<f<v&S81x-
zU-vc$<<nAmbX0dT>roU-lM(6>JKnO%Z4w6h)+ztm8@UI`mq47+O~DW<<mkaPHkIn6
zqp??Gv1e`_Q&;J4kXLB-3SzV!Q^3kf%>Gj0txXU>uhQi?aDbvCibWKXoRvRJ){i3`
zg_-eE#YRI8HXv69#!KRz<W2e2XL+wH1kcny`#c-y`}Yt4gWm%T>Aosaf0AXs^21II
z{RSybq8us(0QqN@*5N2SUBigX)EIur55&W3YsUwWZ80LwgU!M50NEW$<3VWzC7uRF
zE2Yv>A!E%sX<lc*9N3rDmQ2i_2-&!@Z<97l?h@eKBy+lJTlK?o;gZ{P%u&zG-F;?_
zM7R~(QkqI^!oGa%9Y=E3QjPiax3bTNf*w5kd_Or(mjKoz*A%1l75Y>Buy#k~+x?sn
zVe!C=C0vEl@DGwig8GK5ej`+VqZ0HOdLlKmO=mvK$<MSjl3b1M4z-+(t-fZr42q?D
zZK}LDz8-BB4@2zk_&z=t9wn5H(O`lTq-cdXbEfR><fwCHHf1W{w0Gm~eO?zqUv_fs
zP;0J2{k|If*eDQZe!ZmG!M^XYSb30S??>>8jG<vO%5Sokl7N-AGaV{j^Zzh<Sk=lN
zQTIj7b9j1YExgEjTcnZR1n@*S9Xh@nCP?;mJC+z4;ng)!6xu8`8XuU&FyL|7aM-W|
zmZF-w@Yf^O2@oxx!Wm+PCV5&{yNT;}nw8u{S?hX7DBm6yM`Id}^YGMMYj&09?f7N<
z9My$l#aG#H1=SFbBTl~;xFFIBi$_w(Naj{%ia}{`kq@Ev$-?}<LfVA;=3y3Z0WZ~m
zR17o!MG?erb0}s^Lv48d_2@6zgC!)H<sHE#*BRUTMPtj$S}9y7INq}iVP~EjF~Cyw
z^2!(T{<#>f(={G8mky@a1GEf#N!%KY$d=(0Dzn9~(PZY@HA@qL<bl4t{Kz_^Jyog^
zZN4!Kq2pzAIO{+q&WcENQXv!)^UDB^IC6^gbSX4Af4{M3MIy%}Xkm>1M1>a8Fj&Dm
zs<$2eTePmv-zsv>(<-O5OWT2m?D0byl6uJy83Gy@z1`Nr0|J66V|Htb+@TicxgjUa
z8vM9$GtSzkRrK<W`BzfenskZLeCsg`O?K;Ho`c8zMSIz-Cw)!{C<=N}f#$Cy=`E;^
zhM^b*KD<U>ILao6xWv`zK2Akx=s&N7onNO0!gP%9r*jUY?VpaN>*Pf<PO1CpSUx9o
zFihu5A^5v6g;ibrNakyxv&C&1ygVG8pQ#wEhvvPb!jtxc&#j2tkvCE=_fR4t^s^EH
zc<udI?ykX9F_oNh7k;Ew<=l0bchw&DL>^yVX|7d=R-6-eEOns=<Y}tbfC;O^@3R2N
z5qFek#9BKYBN(KHPOIJVHQly{5UB)5zAgG&2g}-Di!&uK_G2bDu+(%*{Ze}~`F%nZ
z!8OMF{%<?j!+48CK=zr+zP&YO<xp&?SI^tjc6;cVdze6+pP(rLk5<MIvs&NFbj0)(
zDmomaH}Ufg)?0jg%tfB|wKs>7<x0t4MD;2|dL;C;Y=+rK`VDbVJ}ui4WP%*UhZ-pj
zL^3gb#yH47DOegXxybshKLLCr8*#_ZP?mS~(ZtkH2n1g2{+ep|_y`p76Ok(urpWs#
z@%w~aPpirtL&zZsYLwOXC!B)~jc$~G&By5~Ac_Z&biNNG6|goZMH#Ql{}fE7zP>pB
zQcA8f60KKW(FrTK`imC&wF4NG?8;jxcY3>cCdca{M$*Gw01dFiGJO0hTZkt*17OWm
zs#Lyhs4;((zQf^_J%3h8W6pzamYQZn-ut!ks}Q?sx^f_8$s{@M6E<24*+=3)awf<`
zT80E$!t$UIp1{&JM+DU80Obdot;vYN#uSKS;`cz$&+)Q^bwv)TwM87r%99bU09rs<
zRH*of11J9S5NBuzbEJX&5k7mE-=8Jf1?^^u0J-j*LSbEMr5^<%dk2bmN^$T_2Vo+C
z+dhJ3YR(=ndh_!oUC$Rs7x%+q?Y()=GYP|N<)8*}GO>=s(WsD!9NdEP0YzKAtx6A=
zN1R07A>p2EoF<ORq!6yA4s$RYF&$J9VG;d?-NmP{fYGDHVEgnbRf#4Fa|PjDkQ1*m
zS!^KV!F#nB*hxAwJ0#1zX9(M;ft*Z#8dAOR!!TTNhbz%fQx3Q|l47lT%9YQ<%Ya3G
z9g<N6>J^HRS0yIx()EX9u#M&PH>9@ZvxsY(xh!*W@0e(34n3YK^hu?AZni5kCy>>t
zST*!p)`;qE_8bJoz%wHqKVXq@G|a16{N1Z=j=v`i)}G)xQnJ`cO$=<1k`lRuK4iv#
zfor#A|9vblS6UOoN-5V^{Q+91@ZUVc`$Z2V-7HSrz;sA;fmx)m>U!yBetP>`hS=wZ
zjWgwaE!X6m9=4)%i7uBDcNeo@v0+)|m`)shiWF2|H!kXIce~s|F?o@hQwokIqpJXZ
z1E`ZFkZGna24fA>Z~K}d<Wr?G9Cnc`s=&gtuA6@z%zzF<wS-k+(tKf0atvwdmtvoQ
zwD;S)FBJqX6#ADJ&u5L0No1tS#F!}x4b&<nP!j@vjWGQaY^`H`Z%s$zlw@?oi0+?Q
zR7?_|s?<n)k@=#xVPttVb@PMVxX$e|c+lG_xL_dTHnzwqh&rX*jDGl?+{^8i9bXl#
zIIXiF`n`*{v2~i$UHTHesRR|0jQQ{RBVv)U6JDd7nv0lR9@_kFT<G@S4>-J9>zG5A
z@0GA6FO+8Yiw<OCrcu-(scZjom~wt4aB$zWqhSs=l8x!D|NlsN<6C_9y!NGP$V4vP
zjHH=yaBX|G!OiN2HaQRdwW21h%U%)@zAT-f>9{-+oiTmWcb5h)oyc~w?HqTo7XUYV
z0`wYJpD;az(`p4H2_j?bnM|g9!5hkfh~|2deL4^gxPJM*BTus$@1Is!-Tt!;hZ!0q
zWdMrwjXOS#8`WKQ17KAXO_3Mw!RjPVPELp4DY)$Zr>m&(ATq`bFMevCT}01lZ3k2C
zO5hePOyK;j?eSY4Ok#kTV|0`nWwLfY9LRAx`+C_%btic~y=Po<wp-i1fB4F~daRa&
z2mye!Afl}%lWzRA+t<=4l9Wg${?+^QVCNPrCnBccq<<o_kB`h@oh`MAfkXX01Y#&z
zW1_?PyH^xO;Vayo{ue7Io4#(+Sh^%F?Macw+CPYoZvIGf?rU_C8rd{4X0!8RF8O-Y
zFJkuYR*ltDZXXkX!B+YEQ`I@#0IV;2Q<3)EyVxRpBh!42hTF9oy<uMOcV?Xp=bX@4
zdiA-E6oAROB<9o8AK2aCO?8ld5R8liyr~N?WZ@JIp@}kHUUGD2_fsw~I8KDYv5Z}h
zN-q<oLKkI43_NX#UOX3uw5Gl&7c_R|qZ(}FZGaoi_g~bq@OT)o-0?gEf@R?$X_@<K
z$o*MJdjTV6_#5E2V)j-RiHA3?<rAcaU-3Js9FbdS6~-N{qK+#s>bEUtKfY<2IivE+
z$A&s&vvgXYTx|^58<n{K_`b+^cin7!XVF8y>9j7b<{at7pECpIuJPcus!{~cUOU<s
zdG;sISRuI=MJpT?OfEilki*&e3LouMl10(^lDMqh?3lzVqDT2Cc||Y%xdM`p?8b_o
z^e*(@QAcwaH`-g`GhS*d_c8&j;?}u3?H3n)puV%!7?>RBR{GR^5)Uba`hvY0IUoFo
zdOpCnm>QB;lKPHhtDj`30$oahbdK^W#KY$sX3|W<YU#+Ahi@=zKVb1LZ_?Pc=D-uL
zG+$9~ev<x9jXxN!9Q!)A#m-O+x}nf8@+?nmm%wYY2#v^9)G?c6EJjJ=^D;|HHKBS$
z5k6zDrA8I1%IuGM+Pb@ABC#1Ktf_n)H7vzXZ{Ad6?REa{i}?i8z&JkbuxKuUG)cII
zJS&8>rJW?!`;ZcLZOk2Hkhr2fpi#n-BALllGE`q$npLOH8JhfOm1%$Z=_n^*qMzUS
zkLgh^NuZl3S==~hwmy+2#g~{sa{n<BmNxY~$!cL-K!?7r%nRaJ;Tno$bZVc$X5abn
z>*Mgtfg*;53l8JYa^<0Pax+xSt(mT7NvOd}G|#_Mn4GX~44TZv)#a!3^KwNuTupcx
z#_rK4q=)BZeKF5>nxeDWG#r^o{MTD>03Y?nMcQ>%s<cBWhC=aKAw%8SV`eCDkMn(j
za(31BMn-UFE2b{+D&yxnH9zN0e#edVHa_;|_z6#rwiDic2EJNKYmZ7ZA_<4(#3UU7
zlf0!BEOv^@Y8Y3lXL-@$5X*8r0Z-v%ekPB_f#|wM7EagtEk^n?P+d2><)M#rVeT;4
zAZL5&n*bxL)|3clzt&Z$LZ)+3jp1P3JkP{D?P_R!*aOTRR}WTJ{BFayhB?PF`91%s
zg&L+7{jH)McNhZ<86F{^Asv;gSATk9A7MmNeZAp*HI#DkOu+XF0PKEZZ@E_UYk=uz
z@52Ygun6z~CeN=}CaR~Y4|8)!Mrv}>y_@R8hg`;Hjt)_Mqm=X95O&{VuoQGSFV@l4
zbU9WKYuv|fxYNyMC^&SCiKCifXRUbuMKeu_N0x?HWm6rp;mE}kxvh3_m{;Yw?>m!K
z)$1`Jrk0<c``mWC9uLm<k+lEDsQD|!puF|00>&GYnqN(1*ow5j!7u>_zEV3S)C7a*
zq&Voi0YTrA4JUP<Fbc)zFJjCP{4o8t8&#^vx$cSWxYg=^&8wN5^1FvP!G!KI>z0|~
zWSIXk1<*b}QmqzIA;gb1Y|q=l{72ZFr_Od?tB)9=@`U!7ve{B-om&_$d(vs-bjL_p
zDjRtou0pezV?~CjyU}tBSb=6hIYXT=_d-j>vgSnDxvjCKzi67nxuBRjW)zt^h*4+<
zj(E)WJHHEUNx6r@SJMn(p%jWy19~X=SxEQeto!=7&j~rq`8|`uaQNaS47gmm_@7Wn
zeCm}b<*LCHiH~%DU)=rVNQCFe|F>nqfYF@x<2go>NAdnD2Zl7(yK#1jG!q+jx@2C*
zMX<85o8e?p7!mJH^8#|ROFn<u$J#C{F7DfXP`xvl{;c2VYOF6RjE8^s?3t3m3biy_
zk+fPOzm?{2{D7meB87@}$&L__?81SMk1Q)OA|)cVG?^k`9dX-gi+ss0+eXX}3hiQx
z77R{x!`BT}7_Z=S*!|bia9+bK?Wu0TQMRmdt*|^$Us^auoQYE9eJWS?8^A~46WCqS
zPXomM>vh;jAh=}s;%0`5v!HADd>kxkOQVrITIFlYCK7NzBX~x1Grc{3Od#jIL+rTG
zO>24g<Jb_$<XgJ1)psmquCE|=`;pODk=yR3hpyK&_(ACwO50mGat(L)G_Z&AUUgdS
z))rVp2c&%_S&koO5txL6o|V}Pk6;#*fx$XHvMEnTPJ&M2D7Y;5T)p=IL}A#FF@S^?
z^NUZ4=kKGCD%Qhgi2bf4D3&+$hh3>K1wX2+)iP+Nnm^7lv=`@2*5h9ozn^enWV+D3
zC_pa#s`R;L(lJPSm^wf%NmXSySdvl_F(hk+uva~8rYeFRLv}KQ!6GT4y}H)pvU_P_
z7w1`Wekg&K*SUgI&6fxd4SiJ4O~%q;l{l`+`8Z_-3BE}}F_EQmpgDO(QEm83#m4lR
zwN`z6a)!ay(2Gr#d9unrat*8G>9TCk3+%MH63LhWG2(XB0BS2QEI}cA<T5pzGA@i+
z>a6$~8U0s{)aBP%cq_*HpZ?)aAEbNi{$!WZ#L+el>Y@U;0ju7kKu>pOn&u!qM;vgw
zasRUH`^91ObEhV(syHU?rzxY_!ieC^oQjuV?$gKq?SM=;!_aq%vH2k>BGTe{RJ``(
z{HHFQr|of9jdok9?xQ{OltEeB<KpWjeOlg}$WCvPL`de9!I49(hG{Vk9MN4#o2pto
zO`6CW0C1({f&1ySxi-a_*2KL1%{599rkZi%E&@Sn+AuN5B8Xq9Y?l0%3K{_#aHb9W
zH4M$}d!NMFys$-%bX|^R3f&fGy}G&G(ma&0^W#PSgFQoDzehyJQHl~JB^}adAp&+G
zNH30;3g>KQ<lBy1wS$%?M<7I=s{99&i<3*2aoH>W3KDFS6dp-g6;W+Y(|DnFYFVxZ
zU#Kda8ya`PTn&@va*Q1XvUP^;ZTbd06R;D2dh*=u6%GvRj`-YXCSZHHre2pWR^TBH
zg&sVda+6j(gG~a7=}{R0?bU}xVP|js9)4bj?TO-5`S4grj2xQr0S%D}jga>|uj!ID
zRw@+V9>d&f@$t&{KSDG1sJFeutis(ZRM_(f9}Jne#~5_6CH2f#dTpTRhqp!DzH-$!
zVRQo5U$+R}m@){}elnz%i5HHA5@a}M&jC$e8FSN3rRC>QN4kU2*7UaLIb?P0SB~dl
z0|FMb1B3!jr%^Q*js<wuaUt0Wc2e8>UJq|NJjtaCW-1xqUxB5|N{3xEH%R@0q{qq$
ze~%}9Ylg#sb!2>G#}}AKCCq@&kG`i0rChIO@BiqIkM)N1o-_T~(-@b1t*G=p5D8Nu
zjZ~IO!L*|pZ2;O}voXN41!;^);+*x~8X5wVCUy0#U&Q5TxEJ`w$?C6Zv2oIh%=PH2
zt&cT-jvJWm8vp>JhubHbEEe#rscY-1v^~pW=Y8U~=ogyoiu1Faup~j1!bnmfcZuIO
zUSwd>CSqfh%_NM!i!JsuV0+!-pq=;8#If{rZJL1dO!yy|YIeoe4RqCZWt<%Vd<J%5
z>;-fHzjr=ki>?0D!OS=de=hq6G{Z^=Ue2LyH{;RFhR^_#cgB08!Ky*C+z00q$+s&4
zv9GXu(H7Qa3Hn*MJ_sj^C{r|iyzDNl5TXniM*I2}cXn^sU*6E#<0=NU)0<sIw<8e$
zV)t-jp2n&%bxYQf)b}Yzf{VO(h|#+wwI`9AT{!drq_Buys8@XhS|^<EkKrd#hH2~y
z`sjV|D@j;-rO%J#FOAkpeoj|5XFZ20gjzPed3e?95Wy}&Yng&yS#~<yI)Zfd&pi$K
ztUmUb(jMoD78{!*!=!x(7{)kZv-WacTRC2fx7UsCVpg`a>YJ;8f}0>^ewJxG)3%cO
z1qQ9E_l?<b1)Cc&8rkz62@ThWH9H_6eVL@_Tsmc1I5udf#8#dSvqhvJF_<_0Nop&G
zGu4v8$ZM*1*|tPdeJ_g2RnC2-%S=N;-(%_=JPqTR$~5Dr4%4X`;N`;q?YGH7uyUgP
zqD4l)J^}`wa%cOu?Ck7>FvE4S1iVdgPUYX<gAr@U>yKzD>!_HpqZr&BEc9!(=4`Jv
z<_EV9H#Tq392-!D1imEpiO`T(l7`K%Ql&dM?zl-#?ud={I8=GGZP!_QNqKd!O~o`w
zI0x*je<K?FuK!M|&K!+95lK;b9QDShPdrvw&G6uJmTWxWjj18_cLAy=I|t8J1ZxaO
z`-mV{-{@e$ADXgiIgX%niqX{XW-Dwa>h*n<al?Rb;{5?J1`)ok>6f@Z61fqqqn?y)
zHjgiV04)aAOBGV~i{y6v?cBJ!6*>ka<M;SnYCOYf;Z^T^J}5M8MDS<nx#N5wmQdl2
zG(i`YfeWN6c5T4#t|s@`EAv*Hy<NXpZh49&m%LMx9ZJ1sTx+|4`T?`weTw$ewy2&W
zTs@j{zM`6EhgD?u<<;$alD&NaLEZ5We78egwqEE5OPknRdb^AeVuYM@>3Bebk(rBl
zf_>Hy1-!<a+cD2bC4Ig=s1&BmvPl1_g(Ns0Bv8lJkzj&%e3Ec2`P+ehBY{1N<M7zC
z6#j5s)POe5&~RP-RB49b3r({>-dWS_(T1h(f=4>O{0gi}`=-`04<11;cdIo<q%6xI
zu%g_Ao{+dRssv)OCn?63W$K>(oh=*RNMcrcAk-Yk++SRtfiBP(74=krh5MlT`_WB{
zU1_?Zr$2`D&}MGqE~MKkFEl@KD{H)`MOS2-uc&6r`<$z3$8M~JBxZxC&|guU$=}?J
zJK<9Ddg*t$=fTs)`v&<o2Hy3y0XG_SPg?y_+Dcaa#$umzW&aN(9+z)s%LJxwKH3B<
zPzkfm*I>0xX6Jb2Lk>~_{=)rfvc<V%Sq^!eE<?2D1lz)OsPQM0!}PWObxoz`YjU|G
za@px#s<?^`w<czVT7|+YeUq4N)jT6Ky|TopAj+!MBq3T~nnBGm%em{^q@srYo$6^V
z=ap|*u9~4BaQnA-T*=J$#I-SyUeDhX-LMVsu=(K7qd+-#L<9<k16wS^SVOfmWK1ao
z*<o06{q-+O1TlOhCw;s{V981_>w;x8-kP>1(_1N(9)N4E8e~-<kHc2+^&FG9k#2=<
z(?IZaFiNM!b8VhytQ%7*AO)BkP8VY##i-cvB{<t-t^$xs;%Jd6h;xwnPKvUv@`tjk
z$HnQ?rsvGU?P-TgUd?XS>3CA<VQ(oYyYabY-x>SHn^53lzg>*XS<=CqbZhCy-kZ<*
z`R;p@_o+zn5Nt-s>X`NX$2lbeg_Z85Ow$6S2ewu3h?gitG+`Cq_0M*uIq^pw_ppTN
z*R8@1fyWr8<hidsbJ!4Bl`KUVf~%Pfo6ed)G>D;D+zp|{D#!(h5qdz8QpO;t-Fi)>
zhD5YD*tDjjvPt0204*2mWtyBuko(mRX;O=WCY_OSqIt+{CEjhDxB6s-xf6J$s{H8D
znPFxz7y(hH!;$2vQF+)(ukAylx6bz9M_$r;d{Fg7tKEO96vd`LD@6*x!8Fc@+}!t{
zFOtvd*FksvjCXwk=db8OyCq?2`Si!jz_$AsD2)a(C@uR20Um6kAhIM(_vN#+!~~?6
zr108qMW)!u2^fLovf~K(oUY<l#9E7SK0jXD8Z!CV!F=R2kwdTShb{2(GTKVY=__}r
zw0eiJ#@KZP0g4dMw3?1{+bqulWn~kXp!?QosXhUA1;&)5eu+$EUL`(42py)BZm4^b
zyR@yCLW%_BfQ?&w_w(<Nv7Z>0x!5O)F@xKMA5vUid}F*=b7vHjN}=nW{N@pvsQX8)
zOO^Ctru3Ig#-UoVCyK(KnIh7)=QPyL2b-elPe4R224WfQJrYDX$~aQKZkvTd>J*{|
z7)f2e@z(vyC(Sr*jT*5M(Cpz*J22{!i}e)LwB9+dr&6YAFR9^8f_n#jT#D>ixs=GJ
zP<AQ1Xo|f9YZxq`Q-88Dq>X=(`IeO!2;6~ZO3>-cgVGq4roWB+H^s+tQHBu;#f5UL
zqW&_5l-}}JiYanvL>UHbpTPgD-#l$mOA+k`*mf9~9kX|9c2N=V`B}=a{*ZHakK0;K
zPf}$`u>DxUXC*A>0=%bOU$|50U_14(#wkrHLuU%%Q*pPt92plBw4D_WKkrQ+YVB=7
zOff17OECz1glTAYqKam4*+B4O(b~91BWiLnYPm?n(>VwtCe*%dx#Io$vG3B~V3t77
zJ8=n^|K0i3Y;@1*uLhQDAh3J5A_>>l=exK62uHSMnuBeph#RF}c(+TN9k0ctMUnTQ
z1N;N&(7;3#UMprt`0bxI+<iS5G19YiOE&2X0fRY!j!E8`T6K2xZ+6-)1?eQ;ew4V1
zC_pFan1M+7-mg#w@oy&~Y0vg>`Mgr{mEXrwOR-w6JWY?#o>Hz|4^rIT?2+IpH4)W5
zOW=qBs7>h}PS=hK*Bk}kNNU-8o}E}rY9G0IUa*z&r8~0HH)K8+(+}@`9bxpf|5E}@
z%MEqs7cnCi-s#Q{E=H_5Ms2uBE01v(OtzRIkh>rBUcXxfA0LH05R&#H`V9|1H#_UY
zzs^Nk;Toy_l=(VA<001v_3ZV~EHyT&R@U~{qBK+O?zMI`O08sq!Ggil4BJl_0dZzo
z?iy1D=>TF6zgtc!PX|w~jouFBq6xPjUz@D&mIiO9!2Xyy8BwMCg`*}<7|^B1!N~<Q
z=v)E|Z*Fb<OCPT&r<rAg4C$VUG?2!J1eD@9c<+sGR@I-z6I~yCU42(&hR#8&dHLEB
zoQP@aw0rLQ-`IOT5SFR1>8;BCTcd!%+<xnmN4TFzYudL2;29I(=5oPr+do$>t<cD5
zhDxDgy(kivN@VGpdj5f0;z^{^E+Qap7ri4C+}H6v_0<5pjEhBdSTU2EB1J_soBF9D
z1dYM_^7Kb?z$|Ru&<)}ai0jd-s!ZzO4H`}k_8@d8*s6`E5hL|!T+P}0B03*G>5vhJ
zcd5|bW5JS81>I@fmW7@8Hnwo~*u7HICqg!Ch&wghJrwdKwN_Qn!AM?<iyuq-Uk&(F
z+(-P%5wm|Cb)o(7qtzDE!L<=0*9(8mq<322a20JNg=aXyT_0{FGkpt;MM8~XSA3?U
zyVCS^jE^H8H-n|;LPf`&3%Zo3PULGGoE#S4y4?xMd0t9gcDK#&6ogaDoj)WQ3=N7(
z>1C>@%QweloH0~Taiu>Z!8%}KR}h8XxNtX~V1pV?P;OU;Zw0P<>8lzoPy35@_maYl
zjGO{v@*Q7tEeJZOrLQWm1GZfrN||alOFQ|WuKex=!jk!4)57w*zqV2RqohHFZwS}%
z$?Q};_(fzu;4JfP8m<CW-%A`>1WFNueI0r;Ql;7Y2a$siiPSI)rMTsi74Ms3nyp<n
zl}iYbzzI+;J2?Bri!ftHHl7jnY5kNfqGaH-y)7^9|1tKC@p*5{`|wVhHntkuww*M#
zZQD+o#*Ljjwr!`e-PpG6=k7jdclZ4MZ=Uye^7*d8H8a=Dnx#D6)IF?!0>zZfq^}}U
zZHsE(z>G8T{cIXbm-o8ERlD*0i+p`b?1XBms_*$aa((YD3Xwz3ob>k+qO$hTzh({Q
zI9jgsiavFfAdnwgT}i$CaU;8|9%yRyXuEI!V`^<+88qs`h8YFe$gi$dAN56J7&*-X
zBYDWDm0Bo<%7*2+EVk{>M>^D|3I=7<X*=xZ0TaHnd^d|NsrTPoCdE-icvKT(P6A4#
zmdGY(iJJkbsT5)I#--G<3HPKw6^67#8t#-`RoYJq9yN73@B33<6Xr)H%8jOblVq~a
zYE`nYlrN~t+erLrpHWj{bLC|tAXv~ACz(&(=nJ(sQO7JY1{ntG^T+IecZPm(U%$9=
zo<BKC5GZaskn<EY?(GAIw$G#n{K2zyLT0<t_y=uH^=j-i-+i2K%v;?|cAXmmQ$KLo
zC!bTf!obg<$>2UMUzar064p>Do<e9ls{|P@4*<qhl|qg!EM1p^Ea<V>Y1)MgGdNX;
zPJTxE&FN3jdX6PH+CE0!-Ljz)YToF7$uparVMbu<_*q|TjC80LN}eKGqMl<aNA^V_
zrQ~Y}>h(fcUWCDv_|4PpHore!csic}cctxLyrKUDQFP)TvY+Wf!eswu1OLgGmmu&#
z(yRt)%FDGm9E?$qhE1qu>=n}4_cA%`9>R3#gEJ}Nc{37UZ?1U!<4pUm=%r_f8HAWo
z;q5gWdhne?;6@momDz@{IYX12arblGlxAOv2UoBtkU4m$8f=hPBYoH5on6mlTy>O{
zT6PKLp`5_G*GUKpQU&Gs1XUdYdz{u#)YVt{<b-ix$A;G5WaYg>V~*4$+snYt1n;wo
ziu;v7X=Y-&a~Kf*C5x-}fb)y<X-?j!b~Q~%{Q=D)&f421Gk-aHHFta(p86LjU<o&j
zjr|qX&}snE5qu9$feBRJ=0_;fu9M+~Fa)Y3NbOb0;$EP~1p=zm0|_;u^!Zq%2M6Wc
zdp7V>JDRW)X*b|_SgV&Dt?%RcL{VeyyWX!$xUJ8;?srnO-Z;Z&R-PYiU2pOfYQ}HL
z1?|WUF|g8?hTW~}9o4O@2vtue!I6zkn5hZ%fg7%Z%FX#&OKZ<}S5-SmJ!T`I<#{7i
z4WV-m$B-jbw}gW*QpjtIAtIEP@}fZo0{ksaLfGK9dh%@0TEkP-m;`k3y<k@_ZTdfr
z%>=+nu;KrK9!tOO8hFk)*NYm4_mv!jN>*x~1GhYY7dLCE`tRudc0?dgGU=Q%g^ZnQ
zp;FyDoPeuaKdi0rF<6I7jNDq;loQeC3;tZMBcj<CHG}Cb*CA`mp6c2d^jjufO)YLM
z+y@Q!`SiD)(3n!L$Cb2nzT3Vi_v6XcfjX!3`nCzQ;2z?kVFVG0hKt8l^f|b4rv#lC
z9HMrtCXdC(GNn_A0dW=Ma)Ei``4!gZpw!0prxuHmhG}!DceHFC%_=2_58jpbMgJre
zUcZWOHfq*g7Nev=hD&>O%XH!~B?2V_#(|ai{S<JKf6O-!u_(6yF$yN<kdRj1Ce&ne
zkimP8XtWt_Nz{xi(wU&0Jm9m4LBD?f&@k_#(bm(e=lN8asf_O-mFY8&`;$4$0&(?Z
zGP(`(-sr=d1fgq7+eJOwQuce~Y)ztl;7N^k2#85~k~*`)pun+`XwK97qUVg>(D-xP
zx%R}|^6Ggy>Ic0l|Gy|=w+N?l$Vak?Eg6VHMM}5e)pyh!P<G>RyhGyPflvAxljwBh
z8K|bkmJq5N#4AY1?+8l}e@B6g0qgqM8`)LndbV`DxJEOv%=6(Jb1&+TbgpY(`>Fez
z!<qfIeODW4SH9PmciDrB-rcVGZb*^_)}`ABhpHtW_r0}R*GG77r5*DT_O;82_IS3s
zpUurz<pLt21farSArL?a`N2YdV14;2Jjw>MOVdgelI*Na=Om>RpIh<r<!+aT%P{3L
zBL45++USFlqzdE)C{W-tdK@H>w|~ik6{VI<tO_;9N+v+AOkr%hm^H?r^?Hk%t|@tc
zpmSUfG1Xnr4)m){cT!i=9JYjCtc{^YRqx^)9i)swA8VS&NUj-;M=8pOtf);<z728p
z;-cnKmSyAA<y~&S@9=P^SX{E;dp2queC+qQT*!TO^~KX%|GF4k3ue4q^cZ<XBCMn)
zy18IvVll?w7w?Gq`&fS=vg?3}^>XXXAGZQdEk}m3^<rVKTm8f){ye)h=m);@QA2zU
z&f*z0r85#$gG3e_MORuKtNV(Hpw_X3B$xLs<n-6qlc!n077jp1_HlS`iI=U^OjLbw
zLz8bX`F?e}TaiQ3Yq_p3yb?_yNaEttoy@kkAr@YVy0S~$Oip9k`m5f4Z}XO)C}$MU
zS&~ZM)o|C)yXo#Tu0GjZ*<_@-ny~!Z8si)T91V^1=(4~?vxsu*R!x}lwZcQHsZeL=
zU%ypg#|;r30-WHPxo4Ez*NP?9eVb0o^tu|td&<V^t{`97_uLepAo;DYGbd15(WsFu
zLvps8Q8md(eynlMZ12rR-_+M3JXhCBY?;Og;qUO0(aVZuiO#bW9@@52t5z`IO&G_o
zr8s6HvABC<dz<9g8V+2>d7UQSX8n(A)$Ql~ZOqkO!9NgRGM`oCWTrJOSKQC`>>nc^
zm!HW1;>#!Gt=`!9)QI-Lr;WCeakszGW7P4prEqQ6%ZV$|Y%lw)Z+YX#T|c`%iR4|A
z{r=cUED$7ysAbgW@%^x^%LZ##7Z+NcHnl`!d6e}>-UEz3G>Z?)2Jy3tf<k@|$11%$
zo@1@FLg#8XoX2<SZSB0|G|36Rom|?E0J+)DO8g$V5<W$tlzyzFt#~82tVHN^+$sE!
zl+*p7jH^1qb#C?W`WF6;|7}P0*}3-Z$A_V(#DhEcrP>(@WA|cvE#oY0Mx9ar-j7>;
z_&Ha?n5E?gf&!&wpB<)zFq>|QgAxyOMwd8~prkl6Krt8&WdZ;7DxmpA{xZKv)l;t2
z>zogJ!M-Owcu$kTa*}W9Jb(t$-{%hb3-Q4N6u?T&TzkB{y9>Se7U}(VIF;0SaPM;D
z(un~(-_mY>Ty|ndTaJ=Y*5u1D)gtYL%L(84{5s*gHv$h_dYs|0RqWJ53f~!*?$P9X
zrhT~h++$&5B_@~lwkg`m04>HyfVjC$d~cS4QJzV$BPsv<a0bVB;0zf2WWWCfEQXcC
zk(YeiF@X^mQ?a&}!BWxB3BMF+k?~kbi9Rga>lJc}=ND4^*AB5ifD#+v`iI?|N+F_d
zEu75uX7sK0VaCT9g2eE)>r~Dh>H&s_K>R-aHd}r$G_WR-UUsNX#L^i9aeS1O{jgxl
zowGbMQgipJ;y4NXzF;<P$#QWzUe^cBcZ-KUvJ#I4jIsrBBJe{6UIZCWO?Tyzw6S3T
zl$G;9Bvay!<l*+YjPE77?8<BSYam|hepIKy#QKb`x=OnY|Do%JAXvnfQ*ck18Z0jO
zFz|KyZ(<ysc-HY0Py@Ef6o^q7Oc+~SPY9O11XiSK=y=jjXufn31NGe;a^#P&0XJd)
zDly}i5;NvcHGwZZv0Q6fi$x)W{FcRr3>p0#Nlt$)>ntZEA>fg5hMqk~N^|GHeUTqp
ziB?&lJ{v=ZPFp^huJh%Qj+m}ZiT63@UcAF=Ny(&HZHW$EFIG4p(yqbm*37JNyv@J3
z<6*I}P@$YQo&2oD)n%(I0k8F5j<)h;5<Hm&#(r-~A+%bK27Say^0zX87=94}{Kl6r
zgac2!>eNxUySYREexj&g)`V5`k~=&+se^q>m0VEr*KJI!>2Au%QQONC$$7rpfvp77
zKDWm9JM7jPGNqJ{w%o_{UK(=+8~d>@3d+GVg}_xgqyAAYHTen8c%^O?>(>jhkd#>T
z#K}b7rs)(jjQNOYa37iMoXTO+L=l;Su1Al1qXItQ#Q&BdK4>E&(6w!MORsT8t@Ycz
z>Wk9SlGj1Fmj3-sQ!V5}iR%6+ak&Yp<8-Kz+LFx_BnA^ck!3_x+9{pZYuq~2gs**I
zBlv0p>X7N_r0w08hT_zk<;}>ky9zimvT^Ra>P{w3M_rG3Z}rBac#B*{z+Tbi-HPO#
zc@MGq^Bj};xADo!m5)Eeb0uD9L0FjP{Ad1+Y(U#~qXB-TuB3nBA9%|TcE%2>Wv{Q6
zNx%;dvOX==kb>S;*6l{t*-?8v#Fwh=-hrdDH52BK+}<k`azc_)ZxFxCip6TsZROjS
z&a-(o{waz#<7IGNYj_@;u!m>MH^rvJq|8K1xnh&C1VBSMKvIf?yX~AOSUP;r*&DTw
zz)aExa9u&oLjD6Fel(Ku6Ye#dIGr?ng^f!~9ylwR3i$n%ez}BSLC>VX_#C;V2T~#y
zZ*DfnncjDOXNpCO%L|iqw&L^&9}6VZrU40wbn5FVqgPWltDX0o39g;*M@NZ17hSch
zsP!%V(-nd;a_ZN4V#eR2FMMJdCZLLAaC^(p54i`({A}EXDzwOx$%_S|*(s7mZ%z3J
z{tYuW_CP>b+d@C!O2xhHeHnL~n)?H+^{gxgSdmNiq0ga6S011|H=$=H-cz+|{FRag
z&Epd%v<!%WPoi9z*JlPrlFx)rr{g^i?V$5|NYLh!QW;YzNrCToRSP$i+)_K56))1y
zX{eYTW@|p-B6l^zRLCkN8-fMpI84~?M9+NuBeDbasSW(94%$S+&RC$x-jJptfxhxz
z6thM3vpK+nqZ^v4_vd@)9oBKSJ8a(E*;*7HV=OLguw_CP9*Q{4s@`3goe}V%d=Ks9
z<@WU{_1zo2_l^$L${8TB=vB6|r%11psVU>vi)v8*q|7{P4MkTVWamDIO2AwLUtF7j
zz%DO34v4?xdF=K-OiLoCC=~b~zrFqCw;s3yk85pU6nh#zS8<sy3j@4~#Nx{h8kQ?i
z1Y4dK`)K>3L1Wuq>E>tu$TX4%WPnDLv2h<{To_}!nTD7bZIT?x)|hy$%B~6J1Ew%1
zN%Yq^7KkeoI7<B$%8U+WGp3>G1qsH%1Fv2gZWoKJ&oz_fpt3tC6r8X^8#3wvu`HHz
zH3eK}RgnT6a8NC)Hy0XRCbhn=woR?vPe+cocB7?>l4DJKLC^SCD>WbT9lD%oEU5~x
z^4HBzHqd!%?p)tIY5UCclVb%oxarNAXJN#Fo8go~QjF5bOu})K>2(;z0M{dE%X<BY
zc59cHfp+fOWqVQ4-#7;N+5S1!uQ>Pxs4^d-m~BryMv`6$H~Q3q;t~r2by_E>vH^D*
z-1<4nw*7)Xgy=^^h+p>2Zs_AS(vx9Xfl4&fhtwfj8^oUxndC6tIS|e>3~@3%*Mt^6
zf`aQt8ubJ{jkU!MyihrgB66gO=6Rt)AEbwSS{TziWJTo1kw_o9&hGHM91i{QMr#D;
zwhMjl?^!F)=jgn5OWJi#wGYF(>}=^KVyQ=zx>_?Dl`TzWN?;+&6_vGEvC4~jkM<^f
zn4gC-Wf?;fus!=u1p|rqcMxAGru6@HR<4l0Le(25`Vtv^a-%>1NFSgPn6J5m3(Uj2
za-Fr|Klv}XQ-GDQW#;B!{bQ`c8xRou?Ez|sIf%%2;-49DxFf2lT<`@1i{j~(KGFK$
z(W?oz_O8O&MyM=7s|s-%=`dA-rG76Ra%>&4={e&tmbvY>P<cH>zCzZe7|^w@#9ezQ
z!Yi7f?Y!tkPozB|0T=SE^1T=(TN&?iYQuvIsz(^s<iQ%L7qHguY+TtaNlUE1S8q((
zX|5fA3dJZZf%nO}{&0@;I6b#`ov%ePtz2M(Nv@wQj47+6W&W>|0TtWU3^Z{s$4A`L
zwQQwCW61U0iI-8?_a5I1cs4dR{RuDSWA3Hqsi{BYlk`{o@CHeZ)rPTC5%mN<)Rt?h
z6s4TW8M0E6=6L|y_r~E{SYgQ_E3U<M`qWc6lii27%v#ybv@@T(lv>od!0}d{AQy!i
z^@OH;1=*lnbl-PS$pkAYs>QktGvfi-w?p+*mRqyQp~ho>R&=tfGJx`^F_MW)psP3z
zdH#hDrRB^LOPloCV?&(p{ru+uNi`9Y<IQ%*<t#OvdAO_HEhyR!+>E5U_2#7b@w7i;
zoGmLbe5_k_+pfN$@9wazeVI5-RI5D*2kbu1&7qyqu37gKilgq@t_EfkA^rv;U0J<h
ztN=eMbhi-{4egx2w0djo)Afc_L(UQvu8A+X(>ZI|%Et;b9^3hlWO)@~L_=9sU))sS
zCalVnz{MW+K034mSj@6Rmz;`~Mn-$@5?O_IcW$T2yyClB0BHUld}-s~$K%m$l+u^j
zoy*fLrf3Rnobxd~UIKXOJWwmkS;$l#R>|0WFZOT1*A?%+uhe2Tb6>NKOJjb5enk4X
z%Z3ABD;e&5V?M-1{3BZaz!LjaGa~FEo<o7|3g!lYARAVPXC%|3;;(_@O5ODK{-C}*
zK%7W`ll_f&D_vkU$%C*{3cUg8FcMj{<QT!r(<a4w9KvH^6XBf~hdpGO7ZW@*F0RW7
zHom?q)pBg<vdUy}7xs~~IBq!ju9zr^xv&NM;(E<Oe3F`IIH9;H<TpBWQiPn_oW+lW
zbE_bhB}0r8`7*(^Q&J7{GfJe7Mx1BGI<YR@AMRV>+Zx@TbAdb+lXjKENBEr!Et$f$
z%*2kh3vu)zAqdn=c&9t9gXGIF18g{J-v4999Dkc}6K<alfgJ76A#(lk0l|S@!nI4H
zqr&xbLmf4sW<~A250Za_*$-IIDes|Km<YOhF}0Z!?Xrrtrm~*3!ncPbs`-?Cx`O98
z(0+--!j)0M+&jw%VZ4weou#>I3dzUsw2Tvy+dx#K*gyBjw&X~Xa2j<h3P<sS*VN1t
z$(dfNbmZW)LSli4uu`p^JF{L4D!p`T(0tkOZF*GX)9O6#l7MqaM5Xx_Xkf!Wv56o8
z<8iRNYBkJQOvQE6o(I9UCP<XT{UvUKEmEG3`JbfzZ?|1z{uMIK&7y1uqNy3s27<qZ
zZrK+liam5;mIa51*YAkB+8+%5KI31^e0gy~SKA+RJmEyQ*B|}U-?#5yjCLFo)u@Qq
z${r-L*+?`DY9fR$zi1FhC~ikYB!ZlYriR#mHr5xvmc!p)c><Uhn#X4FRD11NIiALL
z+OfcEaC<n|*+}wu8}A3I_O{}l4A+<Ay}1@>?vHNYS717Cc0Q|?p1bb@@SeKliv(j)
z6VX{n0}nA0p$4Yv6<sw|pX}3j<>;lOd3A@ef(Enul(m%NCOWw?(Bs$3XbUZ+ej6n4
z$QMD#_=wlAq8>(ETI{q0>Nx>k43K6?z#RJ+9hPCp-`yxF81A3H*myutb8-_dXXaGu
zHfK-T%dsk?9xi<J;<4ajcj_?XgDF!gf`%8{sg?$iVxR&1VUYmb)Yh=I+vYKh1+B=D
z4N1z~4u)wMd$q5Z`x!==z9l|Kj)AK<zz2$SY>!Em4||zuqri_A!jnP~%js*#TCDXh
z6oz+w_Ivx6juajSD_yu0=4&V3N7fg(tDVoIeDoUH=G3{=-+VLe;)eEK@Ap$Rt;`Xe
zhb&c9KfO+>_o?4p@EJ^?wjKjVjH?$+lbIYmH(q<8!XMz&`+r{kMZjz-c`3gGZy!=g
zt~KC~2-_bqCf=&Gk)`=N@&FMW@XPd>4m$#$b&PJaVvmN%GGBnN*L)}H@d!n_YP5rL
zBLDsK4OW7$7PjH;jiLnT1w99{;g>6u%s8o{2YL}-V;J4`pkIR7?Z-uySlmb(Aj=a&
zogyR^hE!XTO}NTVnhjj+?;GD5FBN42Ea!LYEnA8a+Ikenn#8?b7IF4gzp+%L($qUE
zKlb0o%1537bjr%|?zty@U!Eu0PTP-eUcc<KBZSAXLPxULzSqBNp)?~7e-0^iznoul
zb)BuU!F${%XBh~O%|}(~EkXH{C&C9Ei2o}zdElnod%I4a;LT$10T@qdn593{ciJnq
z{EJ`+ezp>SMUZX^-W<?jq$gfz<lGXKCCaA<v{9gc>cuh<E`uo(>4>DC<HWH3?&b?{
zH;TNrM`AnD*Nv_JCOsCo75dKhX!`Dy6)54ft*MPtTcFIF`caz{YKT{3_}l#6Q~ul1
zlD_R}%=-=>(>>qM6rH*A;e5Za6v|3%F{{bzVtpIK%GfhbxSyYr7>8gjr$IYpM}N9M
z2pKNPtf@Otw_%dLNl#?p69369G@(KQDI+SKgmW92FqtH0ZP(V-Lno+@j)*7MtEUke
zBES7%r5dcR?Gg>~$>^&?^CZ=WRJ+P%{-X%H@NKdz9%E{HKB@jd^17f~B%G!gE?l+l
za;DeI(J|UfizTfl1Rb|7??*|`+IGwIDt*e6+S}}{HKPu>*&6Gc$%QR2sJT_W**le|
zsJ7h9@>+0TBVR*9=qCyvYKb-i1&y(YDd`cn{yKv;_)`>Ic}p%0dUO10jhngvOsIB8
z8|;Yd0oe<Iahd|x6X$&7e<`DoANId0Bl`}IN&uIKZq7Q%XtIVSd9oX^I1)rk<zfKZ
z@5BP=>(+>B@zFiLkoSZoeFVz=<H^{o#3Rk<iu44zWK3`<-T}K+U_7;u6>tS&Zmq7$
zcv20zZUm3L``y=cFmzt^Xtgpa`N;EP2{bfpG{j;PP6vb0t@PN^DYtR8id2t>w>PKf
zNWi6eyN*#p!Q7TK$QEIN#a8(G-&uFGF3s+wSkf}WaR$|adm#*x-QpEFESrj(ur6pt
zX@+x@NleaQWCsH=2&VoFvX>;l!(Fz!=(0JICl}#~;*By(qbu*^>G|N`w+Q{#o7Xd#
z&0Q`cA(~;ZniMXHfKAJkK&TvE?{k(I_Ar5?v?8TaP*ScB*=3S0Go9CM!uv7&r|0Ll
z;a!CAlS1m$AGH*1D8&}boQ_hpXW<Fs35RZ&!;^cZnta!;s_%E51HuvCFZ7^6rjR%S
zLmk?z@{X5yBaM)PY}T!-syqrnhx5tR*!&3MYc;ZB3Qm|RwEZmZ`q{4KGQM)6N-h7W
zfUHk=#E$zjYX>2;<Njro+?C76W0+8+D(7csgpt@jQcaA-X)m|zQ=I=IiY9`cL=M#$
zckT)kcqvJZm))`TTp(!(sG}R!qR}XsP_642%zf+pmwDdT!}bx?B}uydX)wO>xv)hC
zF1UgTp$XH&pF;u+r{e1mPK?-x`h{v!7P;)6zN=$B{S=o6J>mPKJ5^>!ps>u|V)8bT
z!<Ts%IJPEIB@b_(`cAYUE96+lVT5>F_*<pP;|z4vBA@IB6vo2?*pT<+ZT87ZlCQcX
z)x@)nr~l9!kox<FHCj)(6|4-fHn6saZ7iZ4AVoR3wzbbe{T)GpmHk%*s{_Ao^);o6
zURm=?!|*HP#FE~I+u5+)T3z#u$M3#}?wyX_rs~qeLr;4xI`#bm;iF3F7aG<F<4wGy
zNi7Mq?%OY2`YLAVZtoS(Y-`tS!`J7-cs^}|af<EXfnYRrBY7$*lBt9E78CK~ABOvR
zEU)3#Y6U}$J`IzUEPs%gO7AC9;2a6xJ@^VqG2>PQsQ(F2t@6qF(dMl3k-HZV(Irfv
zt(5F*30n8@e{#U`Uws43)9+qM*M84PoTT4}mmB)Jx6Z~Cs?HrUZ<zm8;vBKwBtD~w
z%>YQ$X6Z;t#L%Wq#k_b(AX{l6k8P72ZVhqWkh=z(MNNVpa&u-Cb9pVPV$s@}`do_r
zR@tg$&%yUq9|n#E0QdXW&f<P-&++ZJ2-jdVB^*t)1(t~*WgIri)`;cDn?4)fa*jAa
z_j2??6jJ0ceQf?2sWFeG^+##O<)z6|OYt>~_ts9gz14H^>ox~5w26(R9a5M3aiQ-_
zP?xXfVj`TCdZq$vlen9C;XWgMUt=*|lf<w^gGY%0VQ~n84ERd@H1bA~9yjiS@=|0e
ze06S=t4P0dd7xIYMM2rtA#ewpXVU&a9y?K_$%E&RFA0M`{mRI;7(X4+ALXf|NR^VS
zY*}acZ!CODsz$k8|8!*nIyM1DZ5CE|Z&G@I4!KL;-eKrU%gT}3=9TTSX>fUh9CsR4
zdpZIT%4=kmc<KN?{AVSbCzD;$x=}2fridWg^K-E`=g~+*OzLAz4g=icw|**u)E<ok
zqsQK>)%D5=9^g|AvJ-qi+mFu_8}!vbRg&$@^##~thj!cjZ$uQ{sKf_?k1j}%%D-fy
z@P-Nr{kh7}PIowmD${0VfXSeKrSK$d$}m4B%DDK<56vNLt1!rIv7h?UwB@D77o3%W
zx-(;UnXiz@!HejbCA`;3Hct3(rqBLHwG<Hm$OoR*52y;O7hVO=taugKn<Tb0U{jwY
ziVzrq&zManN>(o0YqO|yqb;gWV@a+mYQ|PJ&+eXFiawotsjBg)_oRhh*^Dw7+57aH
zB?z-54&Vhp*_PaOD8KKR>HPLFpgTGM(^}j|lB_=%AmI%zqOadi>F1yKSY{?a7`FxU
zW0@o<O)_RX<cvv~aafcx4f?OuNF_1AidtYmkw*u|-OXfX&Sqk~$-aBg<1!i>%i_zB
z&06(5GU_^ri|X?Uf^C=E4s>@{sY_Y1lgSst(J(_5n8__}L<-=zyE^8xyTa=(Q=YZV
zSJ<}1X|C3qx}V2SV#r>b*wp-l2^9zmEP&KttYFTQVrP>_#Wf(!c7+5mbk_2LEv5WX
zX1XE(%gpnvFzG^x-vM9+7mQmp!FBXf2v2<Hfkv<~{T_o(KfF!{BM~2wOu)O*FDMl1
zDzQ1}RHx*QE=tFppw%OPVXghDxbri!C#k+qv#Z?fQo(}iYTT-PYGbZMjYRblIK^bc
z^rG1T3d?%5q~z026%Pl=yJtCB&EB_BN_Ptu4o6NN=avP|!g(3+3{?RG(8Spk0d(V~
zE;q=JsM91K&X@;DO$d|v1Pu+={=BJ0K1tP0FLzD6PH2B<1|QUx`&ZfQR!}GU8!muJ
zXE7MU7WgUSa8e~klck_;Hadw#!)|ze!s;rnZquYrGjH3Qml!>3&_BBX=G3Zddt6<~
zRO!xCd(IS6_R5hg%2V$Pt>AeW5g~P0?X-qvT5N-xPe>Xr;=UNSZ>=2OoyBdP9Inj~
zSryaCSRIYg%xb6X`+BNis5qtVu^^ANC2DIX&PNK>{3N%Gs^)>fbC|*#{@5!~k)<ry
z<pkqR-z;HM*WJ54l_>82hkk&EYs39TBu7D&6aAZq{h*QJ=U~Um{f3bi_O0Oi`9WJf
zq5SDx;NpyK37yaEsWyz~eD@veI&fjDI!k|dPO&12%{8+%mQoIS61dJp0mO%H<m=%<
zjb<<9_Vd#%<jhmP2k+P5HP$f)j?Xs}YkjP;Mr0F=AR-EwwDwX`1a74Asu@OQUxMI|
zv#7PQCAjxOTWOgkw)J|P%mPBwoanMm9FplTiJ&quO|kFIc0yxsi?lg=!$&@|$^8F0
zPPx=y;_T8q0I4iJS{fP=mZ@%+=2M^h%xkLUlU>!5E*C7!q%59-L>*=BICD6G*yk*z
zSUVjSmM3kS2oE3M38M^XO}?v*D^Xqt)%&&aA@COX*Qt$5*Q#f{ug*xPtV{*!ar7h7
zNBR4hfm_f6c@AH&n73f4Z%2iG2zy1>RqK;=ds4#(nhFF2Eu(!rBd0V~Kl*4ST?D{H
z6vpNdlIgc_v%<X>=N;92jEda*^4nDq{BnOKRZ~~KJ&|h-*0IFK>RUbG3d0(oN%W==
zaNi)t?ZaBtev}I!6-7oAnf+ZA|6L-llY)RP3OC{hup;Uz#|-0S9&}5|A|)zG#}xz`
zXt<eBrsi367q&+?d?)+D5H)5+7D7<zIk*mI_7;L}K;7$xd#s^GDLrV|4;#QM_KgEm
zILL#wtJJ-rZA&9A$J#i$$A5~kq&m12JoDXY!*e$*X<;q<Qrgo(gqRV~aI$rKiO#E>
z#jV+mcKCBR3or}NACVek48%<_=IE<N(l0IPZT%JzQLmba>vqHUw!722IMr)XIFS#Z
z$yNm7TIM_9TQ`a9d98a%+V>8^u_K4QS=yWah%iX2dOcuM;Rnk^yTv0qOpGE$O$LIo
z!?x}yxX~uh8##&}BfM_1g6l58e%vJd{}_f}sx7(hIfI64I0S!JuT@wMaF-ys&o19<
zg71^;8wIby7@x5S4sw*>WWXfkBT{a~F?H&`A8syFUhzL+lbsVZKT-k9p_$<$J9vy5
zvSgM&l~!gW0$uIWv%1-n6p4HC_k#VFuIgd;7{=wA@Z&qXhM(tp;BI@wpB9?pRn>WH
zIxl|i<g0q{UFDALErH-!W3oN=bSf=BgJ*MIW{4U&udktJ9-L^~&~|(-xXm{QP`ckv
zkEA;clA^-I&!wbmsS`i}!l3*(czUk`;-5YCOtuA7n$kMCSLom*rVfvh$&SvJh7HeS
zU+dQnTe*O@DRu~&@3CjpZG(zkOk%O-?()91xj9uG{y~iV%9A#nfxY@iPPxd#5)t9U
zrKKg=_n)%wPke8;f#*n#^d?)`r>CcJWU}2iF$EM9!15DmrtUvU!$uJV%3V-9LgeVz
zCF^{!H2-h)X)M#bMN19YVcnL4X>%?B3&1`F9#~y=86!<fy8r5{|IFbdXPg)Nk?y*6
zre}x8+u~(?QekV7e{oWStAt5~u9x`k;>jX<SOZREC0QnK9I2`4yspKf8|UhE+N?9z
z!QEBKkXsUD!k$J@9=~u?#F0fV;4CkpvYm-aWb@0|?Q1o!<6cbW%f-$K&+BZ2llO?w
zF}G(%Xn5Z~Lr7wNZ>vCtlfkr1H>lv4aaENVE~*75?Vs7=-~AXis0iJA1`YRch*8OD
z_Fjq6$C=Ex8*ttW5b8D!)sE`w%X^>0^Ve71w`a4|KnDjUKv$G|_;_T&Ke2AZ3{ov%
zjaUPs*HS2>jRD<_2~n@dDtyzWd%L1mrzlUq<GDKtuCn8#<4Q_1Drmm3m0I0%KQ}kM
z=c-%PXoghT@-E1Qxp!vsc$7<>3Yw+#xLxR{UTOtIbCvNTtd~No7J5qd24QK6iYccZ
za5=_|!4@T%7Mj{w`rQgy&5q2xfLbXmbUEg(|1;lHBd}d_*>fu}Z+paT@~w4as#}4=
z{F_iJpe-XTfo;M}=Nc#3RRFlBh*#sp$?1>q21Jz$N)QKwj_+G;bXg|Y)5M=-K3Kn@
zlYKBoHXw-~OHWVV&+vr9m9qLuBi_ZmhMsEjUlPKW14O>gul_<uP%xg`B_dp(RpQjL
zLqq)fWCmQ*;<|UP>;2`qj0NlcO_uMK@1^m6&DZ69g0HqM4UhX8b-b2}j*kLH(nUvr
z+ZB)xn<7H0;E0N8SRma8=M+0Qqt26VEcIADtKJwuR};(|GvsE4bVi*w%>2{(ScH73
zU69i#f`~Xc%F?n~k|~koH6mCrL(0?r?hbr{`_B8QV<1gOGZAw_WHj<xMl7%q1_BkG
z9XcEZaT~OqV;_S{|BP;TkcMu}q1%c7|43sDSPnjpJz}SdX3NkH51}*Ztn^{RlnKa6
z#Yg9&nq=%lXJ0R*eU|>GVf=%JpFigdcK#MF2e(ZAu%*c!3G5_>YS@>GtL{@g;9}Cf
zKv{g_^V;`~`&RS{-NkmsrH-W_fk_1u3a-!DqI>$bJdkBn%5%(Xbpi}TC==JHhE$PT
zj=Fj6geJ!q1p?VEdd~^Q(rbvE>Go?<ruhl(lj&=$hU%<XPNze0CsW9;;J9ZzS7JVA
zH_TX7_U$oyR>ihfme-McDf;Mgr0SE=^!8XI8~OtQaK|Rz$>K3AaO#Q#Wm*^k==Pr_
z4ZkD8{;vS+s1SiXq)H3s`n8r`d+(1zc(bIYzAM2oE#g?BWz%duRt8~~pzuGc%nlsT
z1ih3V|IjZ<-yXj#m0;in=&`=f^Q~Z<p6R%`eEoL4DPw8U&aJ+NcctP|=)QC+T^Tu-
zlr+*JQ7|_Aq`|UPU#VZu?3O<6P|;+qp@>P;#;o(4)j9-X$ql#dmR%=#J;`aBjL|qr
z+&4XU^dZW1d`-3eG+XIdz_!`<h+6Wwto6iw8Y(i$wYhh)skZ)$%Tq>ke^SwpgC=Z{
z{cz6!L=GDSsK`M(unHo1o`_=(51$-4UQVeGS}7MMK3qy>|Ms{3o<zHt`z3;M!`A{_
za{@)$tw92nEj4IF$IaeeZSH{T<PQ|dwnz0@>HjH5ew>Qpn-Z~NpYy!tA2LlCwJx6x
zleBuXK-##rRC0!5!^@lFu7($5%3=eD`Lohsf^|^RwW36WPZg#|t}0WGOGWl3!xgBu
zshN9viHlK-Cz*`f8bgKS-C+dpSsR*Rb`dm8&o^BUMAue*PjHCR%Q8DBT<0Pv6T^r<
zqr-fgKqTDRqkF9iW>jyamj7ZlE@D9-NlBUzNFQ3_bg}|o5m#cPkdT9ktLs84M>Dk@
z$23A?v1>dGdT+S*bYc029{)}*8j*k*qiufaCC{kw)Sd%@u7*>8N>tw)zIwMuXfUmA
zhnDgzfXOt=gtp-Y7fwv}pVqq_7}#VNBAtCD?q^2q#O?AJiS>|`E>-ugk09<cR{+5+
zR-sAhvJ5o2OYV`Z9gfw4CTMebL42rUo*Jtxikj#rP;EMZaN$rv%GuzQPm`1Rd+9_7
z-@6eDCdu5e!&3Jb3XxS-QpqK`>mGGk^x@i);wN|0R$e)t>_Whx13Nj@8IXS`q3nr6
z?l8N6S#~&fY@&|&fN~@UF}rE{^O?@;##$54<38~Hi0yV}e&T(4fHvbGU4v^k={%I~
zPyvdBE$`ymh@j0gj@_6fS+D|r=0b6e`VH<N9MabqB1AS=0&){c$iRG@8qFwRQXEk*
zQqU#Mr_P{%Y!VAOl{WF)!2sD5Fx37t%J^$QsS)j$EX$8C+eb}UQ&C0yWI6fn4EgTp
z-gY}5c6Fb2MdUe9q`b@oghm^zt3hUCed(ePoB#7K?CQXDO7#p#!&;l_%`vF5H`$#s
zs6JYck0rE&q6r<uF{+Ifh6`1lR0}4QP-?)P6C+dNGX{qSnTxr{CS<;*Uv;CtUo|v)
zS+})E)LaTaxo|43s?Yp%j{OYln>#F2BCOC9Zn?UEDY72CE$-`X&Q6uo!V@)ouJzo2
zIBpceJYNKFTUZ^LT0TlYE2G9sa^6DMdOx+ZCdzrw8*iQNls<I`y=<_Y@j9zJJ0e+j
zkXbcK>^`UGkX#({&5(PYT(aNoCbeXDN(YXU6DW#5<l;8+D;Y`5_Hl#<LzXC<>0&^`
z+zl;9mZM2furuy<f@Ha7^WA0x_wV9+qI*LO2P`~b@q%?U$K|&F$KinS+aKbG&O-}P
z{lP7Edw_i%%+NARS;Dtlxs-@RO7apoD@Y6ugEb@#y`J8PLYw!LrB+t&y)Z6W9{Khw
zq~H-o%kI3xPqS0zHn4)7)l9id^y<^J;)c7<&_spkwF+}8p<Q`1lD9_eN2o2<Ce?W>
zPY*522CUqh?v`Gqd73&@<7o#r)>U}#@E-0{hqR#vKVo50`I7^h+<zp_HzqDNO_#dE
z0&nsm@S(!wd7R~^WzLm)Q%)^14g>zT$rbV=T^LAQE$>+5l93V)+B1gvBt1VrLw`iJ
zl;e(+b3lpRCQ@!(?!%<sm|ET$J^b%qZ$uJ*rQ4ymI|{4ZrCb$8L?+qN>GO$Zbuv(H
zZe03QxuMJLL`x%F*!<MX_c)*lo~u*ueR?!&qCvn7Ztu3zR1qyF#za6x=Y3IMu31+u
z92+I25HtP>wqcW0%%9jc)akO~poiFfVSPJWzPL!LSUG6&JUYA3_z1_Ldw%yyyxx6c
z$^RU)4LFK=!b2J;k3!d#Ox7XOyVAbD=JBE02~}|<dE`RlY?1|;LJ%%{Q=w^L4^uO^
zXl)I}?l5%_BJj^~ypSI_U%tkdE$@62>PnL$ZP$U%bi7zJad&sOH&BbBbRbV|f@VP`
z*{3&&{pOyk<;?kay!w$Yt(Uz^V-v<2MMFpOtq~(YIFL5E+)u4Y>ZoodRf?5sbttLR
z>lQlm<&8;m;<VGrAO+^A%|c_1)lQT0kmboxgQ?{CfWJ6T4EEcga)>pvy7|~up1lGq
z#E`gg2w)3jirYt}v`(yjr(Er{{G`F<8pn2-#_0WwDfRsM5!Wk8#EJ!yf!VBW+v0*R
zDrSTJo5Kh3c*p#i08_}Lv1VlHR0;+WE*T2PHVZDi0AUaIpE6dEQ`eOa*=viwAD!<0
za0q-*SEye=kx2#n5t+>2!C^&kSeSrg+9yjdhkz8=_Gih~Hc=1KWM?q6^!?3^MPm7>
zt|mdBURlnF7TvY|<bR+P@f@*GIXj=vh4j6WJqb%P&Gf!Xm?DrEqO!?oXvo}|$W}-r
zD#prY550!^X3&RlX{h34QD3Ca)ld(^i-?peUiXvvqo{m~NUlU=ioIEkc*(cDCqMX!
z#H(7qr};ZopzA--Qxd9dnIHi+7R)|TAbEZzgyNXhG`9~y`M5Rt#Xnp?aFF7AtqEzl
z9AQi@LPzEnDSirelpfQGk$ohvS#YW`gY+jF{J;_a+x~0lH1q|F1EfL~HO%6h!i>cd
zKdb!!=Tl?c93%dC&DwnA^!K^_xT1at&Ujk$iM6%pSLGSEF3&1v;`p91z3igzzUhZ$
zny1^+&W`m4PY*U!eveeFm;QEEIOObAy02{+lhy-v)B>EuE;7=J#8xa9>|>w*Qh+)y
zP*Cz2Jk`iM5yi(kES)?1jAP#O!KazK>YjHc;+5hSZL0%kNv}rT+#iJ;b^zDYPGMZv
z4^V8#3;zY_xaT8d;AAGUgfR*gfrUh#f3Aa<);v!PNhF(dE~j~qI!Hcp<;H@A4j10}
zsP5$D?T!J!<_|WOA2{-kBlx!j1anbIrINxLlB1~!RJu88LT<V+x?`IWn5!=$<`R~{
z{!0I^)2vW{>39?PR|F?<GfQ@vY0m;?hq|J*o8&rg%2-Jx^H-u176auLhr&`0W1?xB
z%0{ee_ubJM_HZv<1$K+?x{_PwmM%dPR>~}eXdM6r%6zFd74e00(|8ZXT|<h8ODSp^
z_Snlr?^+y|T-6gKjt_J60#4Dv8R||3<w7IgCtio28;d@n6AUf8r+cDncK1WdD?oBP
z)Q*r?CW~^fI}k2SW|8xb>31_<%Vj>Oz)sU31y)rJ-nl3IH8=S`fdFXt5Wnm`4mtwf
z0f8Kde(VlzG}WK*9Q2sFFv*h<n9<=^Ny()C8CA0-_aiSI8xX_~OYDB!AkT^{=u}(q
zGQ<gBTlk=?nZqOw5g2MB6!(caSBU}gWj2z;KnG-uM}rIM#wiV5#<0?n2JSfs8WC%y
zC=sqpjn9`L3?9ocX1JUkQ&a;`RCJ?`Vh*j+P|mo<+%>nm$>M6q)9TgdeI|JpsCq}|
z3pW$5ksS=>aE1?D+a^zv5jL7{V=|mK7_>b#eD#HgNg=<uI9gjLOv6kVK&HH0k<P2E
zscV&%G*UXW*c$73He-6Ot;4tLF=D4yz!njm3{%ivB_NS7Dhu5qA%zsR@-^s@l%U{L
zzxDCl?bCu2Z}o!#4nwcAE>;+uQ4wAg`~>vSCD+-FW$VjQf1U8ZEYdH||BN5VDzA~E
zdtU;OgHWjXD|`3l(mpGV^c~Vzj8?<2)Xp4I-;DhkK_c+0+%|uNiFx6;M|7whkuM0?
z2^+BmNc|KLGQ938kj@Z0!>?XFsSf8)0c*$q7(dnwgDxU$^_M*I6#IgR*NET85ZCE#
zarqu2dS*hD0nH3Ev&^Z1123civ=Z}jXadBwM8%i$)I~GbMh@%}zSs5F+w3M6x${#D
z%}B=Or|-~}TsWiHy6gH$*E_aG*Zh-8t!CclqxdunWqvU=oMnkz>6p)F);BG$-B7E#
zV`nV`nVnqT^M<+kIjugN5>eMnwi95n-gT}^7hePZ=c>iuCWegzG_0t|S1gYm5gHDd
zWav#`Qz&4hr9$2$l11&u6q@*Mo?b`xhPml49QIoV{H4P<ot0aFf!bE2GM>P_GLL|l
zjmAoznuuLu6i<R<6RYqEY;iQ=d-SV8UPF~UvN8h0{{55}QsCUBWJB|lxdD-Q40x&Z
zNC_0?z7=Z>U>MGHI}H87?*3^;wk2Isa?I&vg-Kmew)KN9YoC`2r$91%q=H%7%Oi0M
z51?^UlcQtC^2181U-=Pp6)Ws1a1@MlIpOs1d4g=!;9(8ky6u#KP0hIP`#w(}^obcP
z7k?c`$H#!)@7@HJ*t2`x*`6diA`HgAgTp_gG}x%W<na9k%S#I)KFkWQ2tZDttF0ZF
z75cHPmj*6Kv&{Xn552nUaHb0I+c_^-K&u$GWL|Pc)~VC_z2QX|DU&8|qh+_ZZJS88
z8{EtVF5SRS@vTV`B5lT+z;*dEh2@!%EBt7XL{{DOXy5zbV#0GpiKCiVC|zoqA3AF_
zd*l`uhRp6!TRqKJ*`9S@1lwKP->ytkY8KU&Z)o$}vpuM&ja1OZ9!#2@sw1(WOwz2D
zndh!5x+3>y4_5?)`l`!CM<lo?Q-~)_66x08<w`jvTS{fp;N7d|eCyOau&AJVLk8}s
z%qkCIgEPK!v9lx#=i)JeGLYj2$6}oS-@IISWANAA6{Caog%7zh*aecrSSTWXyZ7zq
z-gxg11Hgwa;CrG%6WGz(0IC&Q%`T@)-uJ8b{kSQ2|7C9*!9jo{Iv;3Zo((peg|iwm
z`<E<kTEmt1CZF)HM4)$xi){EmvU5k<X&$w(P)cu93PVeg=5FjWopg`o%Z8~EszwMZ
zj+Fc~rYSUZtm0c<Eg#svDdwYuFFdUS;4)L5!r^*h?T9C&iMMinNz6t)_^Qq|vMMH?
zVZT@`f}94c|E<lopD{fTTVSi(#k2^~6{LTh`IMHVT{%P0097-Jd%UHOV88U-D@s>A
zi7J)#@JIfkwtDG`W>VHNsgb04L|PXK6eQZXLTF;zCG%t=^5d4<XCkPk|C5~p+f|gm
z+Eu8JY!6LgFZMuiUN?)`^y0=fbe9*4yrtLkd2!|IXl{PYhW9>z<z+pM{7?HKlFv`|
zS#Jw<C+Hgo9|c_t?UAeeV3-CTn*LW|Kj*C_@pN{1OE2ku_Z0pY|BPZwtdhC$pf+sN
zY?In4qx~f#r>du`H6z>mi>rK#d(KQ51yja77E|NO<obMct%Atl!;8S|bQz|b-cjQM
z)X3SP=q(y4Yq_p9!M2@zp*!hB2n-a)-hDKQCR(yuo<x*}PC}V<Nj#tZBg6CY3BJ+9
z`OkFGh-=lb=eHM_p`X%<_05$ubNTAfasY(^R7RixVZl0<Fvma#EZ+;3ERkgP7RT}Q
zl7V;584QG9aQlyUA^2@e0E73o$8LxI8htbM^icIzKT-5ChD&vn3XGLLQQ)XBYn25p
zrkPI<?!j*kvduym!f}Q`hvfolnqR!P(U2UmvD^xi4X1f%biO{Lo!xWSuJOw9+%5GS
z-G==LO6N>xJL&Fd=;C5H!Q=URMQL8j($r*Pt$aL!{vpg1?&59{yX`l+c3Yzlrl#4G
z>k8WkOf$(cjFR!T%)~PJ2GG((B?}v|>N|507ak_w=n0!*=xo>u2X&dx30=)=;6{zd
z;F2cJ5t$uiX-yLqY1Qf_`kzEhI3%M};a=-^oeNmHJ(`X`DTU^4;q=SiOx5`rIwUJ|
zuey_PzyQAbaqy?7D`xY-|0$SXQi_ZQPBMu?yhm^|^UmnIn$domA$c;~G9*i^{sbKs
zfJdE6L&_VIXxv;^ck=}|_3ppZKaGff$&pOH0$oY^ZWKcuSIrG+DMQiHaHnrBp0^V9
zj<b<uCr7G_?97WBHxuvWBQrxgfk_@cmu~k^Z3&mg5KBZ-ag?x7Tf}kgO0}e)-hS|5
zxP5&HF${sB(>`WJLtsb7G<41ZY_D?Lrl^<?XrzKg_#_RZgXs3L$UwT!4}VE;Y;GZZ
z@}5#hDoyo|(|m0`Tk<@>@t2YRAqiQ|xPgi=Mzi^uB|=!ZWh`LtQ#m_8h2kn$LrtQO
zJ48%y%*sx*7vFgb-ylTU?M%x?WR4@nl2YokDbs{jX9O)%I@F)(FVMkkfHQ5}HmWC;
z$#lIEUJzQqt4qk#LN&cKb99u$)!|XOO?{>#od$Sy|Lwf4fq_n*;6rz>1Y=r-fA;Y2
zhyg)e(B=Bf8lo$*ndv}mAj-yLRO<##siB3Zshm^5Ip?sA{$?CCI}g<%+_OYYtuwrB
zGlj@#!_5Xq3E`}!!tla%#)~h=U2q+bDY9b5d>9C?F>rL@j^rvPX*$recac(g-(&UD
z#<q53KFq$=@lX*wsj|gip6r4dSE)%@Gw|v%QrCqCH{(5heVQ|&zy4q>4Fwl<m(vn!
z?$AZA)T$`~G}JNVQKj6mOOqghzel`@yIhENqRG^48#=)p_q$Yrr_ezJy)I>vC!NMQ
zmt`q3MFXzqOA3>R<xIMpXW{b59BW(zOLg7O42&LTKP#bHnjN=y5b@0;zq1>zEUv2%
zKjM?Y?pW64LJRUltUWRe{xI-HR$Hj2#!FO^5;5Zc3;!X%Mt*wHHzGK>e~O<##qfsZ
zIJlYOt8Y1;Vb%LC!T(1`Uanx1n?k~{)OX4-(YqHDEN|#u!xAqu5p~#zw~}JM_COxX
z{Hhrdfq-*z7TbxptiN+_u(YeEE6A*LzS^IpEC@rg<gxRe9aPHyo8|-bR5v1_S$emi
z8IxB&YGyy?GH3ZWlt3za<f5eAhn9Y+JC~Ebu<g?2y^E1kr>(oY-B}!a?}>OO|MRvM
za}y^6&Dn{1m42@M4{!*k!%h4>#%kn_I)RuxL=jhl;`-Mu)dwmR1<L4***{?mkOdnL
zTffrHXod47;ZEDc>N(mJ%*|#yCtMq_FKKeQHVhfrHgmmno2tdKh{t5|U?s{rzxRvE
zIM03e#M68G%Y93VlzI=EVsm2#3<qzTL!jk<F0=rXtPR#*-Aij{eRLVApW%j^Q=)jU
zp_vbtd=LKb*A1LPoEX0V;fFoZUsJZUirtfBIB9+lfGC^6+(o)0KejpQx%t6H0NpAx
zng>Lp8gjB9M95s^1tw)>au*ZqOj%X*^#%Re7Q37J{3Q9M;16WTp(#S{wi@>mg`H(L
z<de2=uJ1VskHh;J&m(+>bbQ;iZP7`nq~L)H<mrMMMx3XxUzTu#R5-*kiY0rg`N0Dz
zDY-y#s1_mmr9M;oADdg3FrqGvTJ#2}0<Jk9;-&3E$W^aKhazPqT{iX$11cAzr~M1a
z>?<^$$Aa0;TbF6?;quniG?$kaypEWBo9o<bT%QC+a}=Fw75BXu^jtIV2?v@v*HX6y
za@b2I0sX~#S!Y~1d4F6G`8#s_u$KJ0+?%H5P7WJSzR=4tdAS_Gdtc0a=J>l5`n%fs
zQB9IXA}r?i@nhX^@-q(VfSTlKM5yz66>W*yO#6XwXfP79m9RfT6J@qs|96LaxqUs0
z8wD0>POh*f+|&{c_RtzTv1B!9GSW|!<M#AJ4{JJ0ryoO-Lj^^e)5aDy-|kd1DHy}-
z?CKrsffqc73i+xDw7Hgq;M@}Kox;YWYhbPVVN!%$l5szu8Cw{3M@b3i#KEu*_Xh(Q
z#CjN1_{q{gt+q6L(KPuvXc!6ZoIzsDgiC#Ef)>gl!MTR1NDIAsn0JhoUQbh9)Bj9m
z?u%hbYE}OJ!@Xe%@BG|))e$~mads<XH~)5*3HbbF`mF-mlJQ{4sH;4UEtx`Jozp?f
zMbefV%}JSK3|ou#|4zUIL$KX55|E&0ZEh%{^}3Zp%inFH+A91f`?bphn_NT67)o|R
zewS{T<2Mb^)%hXx`Bv%}e^#U!E=XDl03FpIuEwWIkv+qqhPLhKK5xO3!EnA26P`}1
zIG982-;4+^OLqHq>v3PQ*t!K*vAmg4DWTcWUO(GaT<ZxA-mUKH7M&31pQMZV<gLqM
z;@cK~do?6gZqqdT#yqGHDIZP4^UW<!xFnMQSt1~&v11@bJz><1RB4YM@#hbsV$q?V
zYQNZIvV^<GBaZ`@>s{j*lBb*1D?6u6S-#?0zw@DSZPQx-lXUE=<C#F>zC{(G%AC6G
zkdbz#F@h@>^-t;z;RdVBS?#okL%avQcr$_!4fHxQoILdh0US=ZFSGM~V)i%h0s5$#
zo2EKzkv`ePhPa3895{d85&>2|Z9`xk1zzn#;5n<Es9=+}G(Ig#7BQPlRHn9l@`s;)
z)keVnpftqj2h+Vr?!oKOrK~TKqGC}na0BGCG$@k02pO>IOePjg+><iyEO2qJM;j?P
zI86ms;iWoFvC6dG7d}4k+C+*eBl8}?af|sQ6||>rI|JZeUW2AYD$?r9DK;J(La8pN
zbpc_>BrDme6&jk^(^!laiO^#$mg!SYZ1XtrCARFV1!XAG5VV%r_#RP&HxUU9I81$2
za{-h5Fv^sNMS08GkAnjj4sp~pWa=5VHqFc<iHX^^LHYT0F8gcGfr?ni3lU4-#9Fxh
zxQCNAGQ)MG$)m}MgAJMQhK&-eh_}9L4JL9%o58}B36EG!kO@K?5m4ko>OZHd^U!pM
z?)`s!y;ERlZIdM&+qP}nwrx8(v2EM7ZQHh!6Wi9w`SbSo_4G{7^nbbc#lCoISJkSg
zR;}7Nb>|9qVA%orA~;F!n=s7}`(FU?-)N9y_n$1jyLP*>LH}VOG%%cLk(5E6a{A6=
z{=5=n5%4cmyz2-=@%O|YLC72$hLKMKRh$dH$~xDjh27rlhjxn{H?~$A-B#DObiV0q
zWmb|0b8G{nxOjcrJOmt`7}itS<EkJ4`e%{T)$y^O_PS+f!`<eJMXG@DS_g^{RGo<0
zeb+F;VhYOTw`3{-@3<AGNq0(NT8@Qm$XCw&TmIV2g6LACl!Wj2MfY#@2$LG)mK?m~
zTFJ)&&sN7;uhOI(o{Cns8KpV;*Q0!FrJP*Px_B*9&e?M?m0_d~jLspZ*8AR;_z~C4
za&vVd8sS_~b~z12V^;5JjX2VmatL(7Is*z>>T~Snks>HOM{+0kXQ3PpR~U=-nLAWn
ze^*Su>cOCSI>dzFL)yXdiJ<q?znV*c|LrbJTka<~w&A>IIrWPc!!IJCK_f6aWLH-1
zW*05!{hN@mMM?lt*l{>|H(msR&6JxXSEt*#{%1RHTCB*-nW8cySN6?<LhP{G4sNBI
z3LB=}?@^6#JwWL9bc)Ymr*sSoxEHa5M><mqHGcD=Bk6Y*yd?af9t}UdD_w>w851(+
z(x8++_EWpeUe7cx^^|%%S8muekuLc;+$;~*6n9Te617{NHJ#qZ-$iE2N%o%+<jD%<
zrGd%4Y0gv&Md$ZLChE?LX~Zk!so${BoFo#l-Hy|9LRuo1@;50+u$iW-E@ept3ViBN
z)HM~PLNO=%7YuT<1ElkWD}`7%qE~E3@l>=;u+g~^cw>#m6%nqgKl2qj<fD!S$l+;J
zkp&D+qqBMK)&b};3k1%B?^``I&A9(UD?gt4@5*E>`kxVkt3aQmbGqsDC|EQ|e#^+X
z(0>(oV?q5@6Kr)kbl;}J60n8Z3Wqr9L2~FJbruUrT*Ku!<E{{$p-Q1=SQc&+YO8WX
zv*rlCHG8i?PoNRg0w>CJL%S$S&OkEWPW#Y&eC<H8k>=?gouRz_yX1t6f(q2}e_{Iw
zpt_5A5!xCQNgaQALjoUsWz55sWP5=Wlow=UuB_hi48lgB*r(GO#zi|CZG-U*i-lC;
z#(b?*9gIv#)9Y_~9JpOduX%2(7QiT>$jM{Rt){K0kV-5}aF@r6bx9{@4NXA6AIOw0
z7A2U?&%Ze06QDYp2hmq{@7E|dn3@FI-=p==B=iznvx=T*m-F^+JC+l<t)9LcFr?G*
zH{S2|`M$IJeh&P-&(qIdz4`ln6`}uKvaKG@j2}Bj?Kg$`C*X#@L~=7EjHxodu7`jC
zDV`U_j|kPGxB)^BDm?LV1`WPcvpekSfx~Ez^G59N@z?hZc02Vix>0uGd(6gk<J?<D
zz3F#kk-!u|OB-DHSl|3Q-1h9c9_gunMbv-W>E~g)7NqyPsQ=nC)%o8nQTr)mf1Hl=
z!@{21LB&|8^ALMX;a~H(j9NDYDupA)G%{jba3FFqsWBMtY<SHDlM2+dh-I+A#3*9z
z&&hN17DIwS!@EZOqEFeu0%W*O_7GT%wC#bi^@ecgTon>9Pz}hduZl1u@WV=1c;F&z
zY;f^!a$mgiIB|toFDNPO5XE#su~;xwST64UG513Yvny36i{?xgA#1L0?iV&Yomkjy
zvLml<O+@%J(@G9VzM}=L)%CrWLgcRq<g^!~oF<az9lsg|+k%ulOS=`&N>+F(V;iur
zv3`aw!#gaiT3ci+?(7T2q^CdeB%|bdT}qu^^jr?AajTn3R+{<GDu!l1cHp~T!Doto
z-C{2Bzt`_@nPw=i*1)6|)@G4CIzN_k5%HK4Qq$4F{-1p3|M>r7Bmb#6MRQ~StxBLT
zZcw0Qgo;KmW7ypZ24r}5ckO|>q)UJzCR{3uZG$5!35{)5-5v`j8)9=yQkgN&lb{u|
zXuJ+sz&I!z0d=-l61zK5E?3xRbk!Sf?&=ZsVUZ_VhrdZPs0%?(^2>+iU37|Uv9sWK
zM0XS-qv7R_^+jPUCi9~8#mnpX&H!lTA)*W^S$(dw=$hKjc^+LS%hlC>FT|EWaFumf
zPJ?9O6&Q76@B`?BlB$KUosIF@ymXTVS<>?QNGriC-I*btYH8I27`JtN4K8VN(1&vK
zTfo-#*jx_&hHFXtx3`Dob8ge=dU^Nvsb7QB`^5wB=^DP@Isu9J(?Xt7L3sC)xhCSF
zL;h}{0!P%M&GYzY@xF!X#Ldkl(yUYrGmK_vZjJ^!dh9|W(~qJR|9_`j{v4_O@;{mF
zf?8ngU!yJooPZGK`q+=7z4ppNW5E?j=PPgcyHXnP#v%9H1dx8DN39g~Gf}bVD`)Yz
zJ$d>5Sf1q3!R~6!HnYfvi*GDEz^a?jsK~Wa98?*0AD^Jikos+6V8I*id^Absqc>l=
z6lG>kvT+0F>(iB<W*46C()!tYU2K?fgU&2Ho}|&C2-Lc&p9*QS8rD3?V!x=+w4TC;
z0c9emagTKZ(eM?Jg2X>1YTegdT*;T@^kb{4Bny>L!sFcQRE-x->1wdfisb0)&QgwV
zMn5JimS%|KC@I%Iszye+F6q;xRwO;+OUd5=lxTm=Eb{)+4ts3ga*3$Mgu~So%pD1L
zRRWtqAC=1MtWByus1C;%Qu(L`5VQ6H+C+#~9D<WW2nMA(K%YM0F8FVJk{^HXNBjq|
zLhLUU{5y?VgDAAZ9OB>5cYYWFvh`DN8|6fEnIbgQa;rHS*8}vKeDSVP9MXoppy_5)
zJsnu_%#GGYKdy0x`K(A0qw<X9)@$>C4cyzCWJ*1jHOhNy_BpoDskHR5d%qmlFJ5>5
zEjT{^b8Vtzd&{QYy7A1*n|V<wo9#Dnlai#FS<WMU;dqh5C?(h>qk&E*EyFkEnGO!s
zX?>eSvfmkyX$4~<>W*cI%~}pDPWsu@bDla5z0P2(#AbCp?csY6yrU(L=kAqyYGGN;
zoilK*T)UJ7xqG4s-bjw+BlNv|XW1BQjQa%?d#23_D5ug+?_ebx^^)(?40AmGdNOa#
zs33$NETrVV4P1piqGb#fGMZXAxZHll(Jp+NHRu+p_34g!fc$@<egP0W#DDr6MCgJ4
zIl_|w;M}GzxUImfn@q63<Xr9++Kz@BxIPU{vOPTLxDM8U1w>}mR}^AD>P(a#3uG}=
znTdO~^67OL^e5&zt!%AMf1`u1)0b97*&=_J5HP#!6XBU>&`-r$q0?4%zQqjx?}6%0
zP!O^waqDAijbVc`80dM99J_hVL-ZQN+5lk-T!ji|rwUp4JmadoHt!tZ*hYSrNl;Ju
z*|$w~)LbC9isdk9&*wax_Gk9Z_nqIL%c}x$OnRwb$D>MECxo1`QJnXMMHu*d+vpX$
z4cWXx{w+v$QtY=-T9|2P=}kf1c_8ovs5<o-O<H>_&R2gR1CYT(beZ#0bp(50Cutk>
zroZiWI;m_1Rc3?`UlDVv78<$I#1cx6aFn7CJpZqD073vUsX(4gEDHaBRswcN0`F}i
z#L_V9G{W_(g;YEj>5RGLP}b!*Y4+NKHI}eU?qnIGz?eFjinTU>Y}TjqcUlhM|E6hb
zsvZvQuT(W!YU&QQpJ_j$h6HDWq3%R9MS@;+F^;brZn_i!vS?iCkU?%r2!-RMJU1fT
zgf1Z)5e9}d<||oLD_6_J_W%dLhg`+Oa~}L6P>K~%B?;-jtQ79&{BUs077Bv7S4{co
zd+WMan2dt^^tLRPI(|Osp5lG_=Fm31{<WWBrCNiQ0e(y=5gYITJVt!1HEaxyQkpE5
zyR$c8Hb+sOD(DxQz7jNlHj6xzGyx`jAN%w7s>h?5T-@a}<MTy(_ggQek|f170P)kv
z!VnnDn1==!46A9~{QGVYBRzo6Zkp5hb2=SQ7?@3l9VYu6GY)oUeJ3W%Cjl!O(Lg{*
z0wW$o$+GHsMcYsNCgU-pTXiC?ExB^OO0*>Uk&2q>VKm0;mx!2|uOItCrw3<*g@-z3
z)1Vt9s0u-%lzYe~=*bX>jYoxft)b|7zHKY&uSH038M*#Q+HLg`9bIcB<A7117*H%|
z7BmZ*d5!!Afq%W2%>czhc+Ae|wQT>-SH7b_s7B#&q-R<<p_ZAAXj{*Jnzh*A@<Trh
z9ouzo;ZxBfN|>E)ZHH1;h{NDx(BR9cr^Gm(qPJVB^?m_-oO87DVr{hM97|3(-f~z5
zd6d41V2Mrw*`yY2d0Ot9wOfhV>2W|&k<iKSi{yv8-fU8@N(A^)eZ)P$sisl$)FD$^
zprVfyO2DqsO%qKryLQ@~LaUh+Yff7^>@*w@8Ai0?gDmwuW$sP-jF@^og@9JE9(N$q
zpv)yMF9r^;khuWCq~xN-J@GKw&Qa_z^<yJ(AmOOA=n{58?4iCX{d9Lk`|0C`Vy?O^
zFGoRA3u2|Hw79z*snnGfCZ)h70C`mvoMJmRW`%cvzGbEJ(yv&MMq4jc&L|e^VSfbT
zps>JJfu2xWXBz(V!2a8zo-P8xhI`P}^flQ&7EH49>tEH^yrvvVZ#7nvNK%v`0FAr0
z?u2UpbN;6hpe8}%v^V!i+0}#lcP+*fF0A0imT=*!CmAQ2S7{oJiyI6M5+F><%Pva8
zds>s=_A85>)v|K_EzQfz5l%7U_?Ja1l_uKQ6@RE?<vGc%GBRSD6I7k=|2nPbBQnrN
z0S+4gv88I@)=RANUuxEl7&@Qj<A#_eyxz9IYiwlo^ho?H$@}{*dyo4Y4+OoV$NpG6
z4--enCZwTdl{{V!FOCJ+zLrA;DYMkED%vPbbh8#0``8gj_IL+FfzkZD*^<P=U|lkM
ztF?-hc*{xb&FUiJlp{2uQ6YQe@VZb&mKLxBn4|@2ZFPoc;gEqoMzY9s<c%(~!Ww=G
zLS<fUswODC<k*Jre3NrGRWeYy=$E!)qZ#-Wb46X8k$?Z}P0#F+N@WK1T(|Gdg#1FF
z91M&VrTGMtoXs3CbG2Gn)wm!@-zd~V$z-0p5PqLRBU{hU7NpO6N9|_{!MJb+J^fV`
z6k^nD@eQ4t4*uNbK<|;AY?T#hw%uYRZ!>uW3O9At{B5497f{VwdiIR}r;A`gXA?tb
zzlm^(&#=$jB!e!unwC;RlpgKFxI)@bC_W(67yjr&u2>9}{qsXSP6BE7r=@sPF}WNk
zs9%$M=$NdrDG|sNF*q|w=%AuHM=%pb6}wo&`th!knor`!xzop*0>xn}CtOWQNZ_<;
z6}J$rDMN$I+!^Dtu#kSc*rkhEX%97C%2RM4TiE)fzpNHLs}j#XRfi8UbnFZJX9g!}
zYV&E0D)L<o<y2G_fo5ty)p=hn1cjyQ{VB0){K&U`JxCTf6va8M4dSVuV@nAuusa*U
zv7iL?ug#Us$KhSU-N|Iw{BuJg$22qETy4MMtF(qx4)JB|Iuv-eV>)lw0LBwnL=w@$
za%tUp>uHwRB(>w3y*(c0Y3CeBNgMZIGT$(0A8axV5ecz^%<<=KPh|ete&ec4)3U|<
zwFS*p)3^RB5FPY7_OK%<6f*OCZq_;n&Wz^MXXaPa84ka~j#4`*o9d|L{}iNtEYSE*
zm`av)@kItwAj<DgI|8KRf3A@KvwQoE7sW_9jL8fJH0~tlFv`=XYFTXk6XFcYXa%k?
zbwfH7se`IO03@kkk9{DuGR&=R#a{wVd>Lqz>CKx&K+9gz)v2mu6n3f9T53jUc)+%o
znT+~141z`RGR%HQpDNLQp48Oz&xKLL@A{cr`%Lh78?bP2V8J}@=R<^fCbqx5AWDFZ
z*$bI3RTpp$^=j2rr^VW)WbiFV%`!yXw*MN%@T3+ydPaBTp8?Zj95KrfnIDKiVo1!P
zoFZXfS$t67OlKN+*R#wL%_P@MFiGH!w0Vhd#ytYgRHZFv;2#a{!860$(n~e9Mlg;u
zaGX<Z>T<<>wqe+|n~L$g4D<7L>*UIw=QY;&;nSX0?xf*qYImI+&+)rTn(r@8-FS|H
z*K%g_yW4v0S5{?H)5n#S9!yZWxuz{#kae`iZLC!0Ri>+p5=BN3?vk>_0dm-6!AUo%
z1{3LOs?2Q4TK(_I;{OPA%1!=sm$C9O?FC%FX$24<{UHHa{(j&7{Z6U#CPf0)3B*$P
zZuNU^<$piqw`|)wnsbxIdjIDO?igtCF2@WU6Em}}Q6-zs3o6!OKdNO-rbMjEKOJYt
ztg0_cgrpdZBqiIZ@+=zUIi{eN2^to)HyrDvnP3XGob9gT)Z4y4*U&vh9#t9*(0wbB
zvCo|Y&Z(mux`BI|{UvOdtE_j6G!2@nvofL<xN3D}?aWvL2~erd&^7EZ^i(qezu?8G
zZ=Bs!p|u$U9Dg|5z7c?S&dyyj%yW)v(2iWzqneR&N_rX1KQk1jwJ)o-eJhY;QO(g}
z4)ZykKT0RBX}t^AvpP;Lr;Sxc{1AU)TfEwCT6Ae!8tdJDe=jTy1zd9EKss41=4Q=3
zvn@>C3z<4ehq?2Hq9ryt_XWB}#MZ)u%v0%boeX5Ls98V1E3Xd5P8J*OShe)dq-G^o
zKEH}UiJO}KCS(0S)AfH@pr2AR{{@qi^dj_U=1u@blm>N-5E62LzQ5F=hh#1{J=+mv
zN<&}&*EYl47M=}=HBEgG+Pc4PARrJTkkrAr1u_V>dA|^+Nu?}2a}7XRa}7)|l6TBG
z(UcPLy+%_^6+zWZ(jqHw3p|NmD_U(`$Ln^H&nY+f&7121+#l!U@3Wf`?;7TXg&rGH
zg8XPk%(qMGsHMjoi{wVuBFDcb6P*>})w1S3otmvc%J05t5vE!qV+)Y+MMCTC(#QSS
zCpT9|1P(VVUh2&!UY@;P4H$Btq9}yX&{ml#Lp-=g6}L!Y-Xdq&iwc56OVe^wjl8^^
zy!>s;o+rlmP9;9artP+5xb*E$2kQ>0&0i10$`;1Q+83$Aa|55vCbr$EURwJuue>Er
zrkSS|mgTT)kLj$J73N(I=^DAf)QLlIc^zyD+-hbv6%(1BX4^8xid@(sKofEfdJSWV
zGD85_BEK2en~*G287W$#Z3P;_Ocx-z*AHQ<{)Y^qbBAUjFb!QCCCIQKQnS>24V9%Z
z;Ph^fCa=xu2+34y2f#sxfXrg`5BjQ)0bSO~CsLpmnW@faM*bzGOKt?~rF+o|rHf1n
zKd`+9Jx8R}niK4RG73_~XhJUW61Y6M_cF)#w%-@!=j>*EYhqO5OMm2+n454DbJ`+^
zwo$!;hk!Z8w%NhffaJ1gg)~z(zTvYp4oeQcv1GfYxkg-Qxs)GyJ5!p7)}?20CE>9l
z;-(tMC9<zMwe|V6LX5eaaV~;QCYkAv(-}Gf6Uvo)`1vhTf7(z*P~%0P<9D%i-IE4C
zPjcq2j7)0_Yt!n?!$SzkqJjmtXD;rfObb+A!?OUL+F%?XSi{lsm0lp*F4ymQ+uST*
z)nqgLohy@;fr+MgvUMl1y1JEW4Yr#vv(-?P;cB@~sYU}ie)tXrunGmCs+9B#)a)QE
zLNO}(ny<3{0wKuYz`v4fzihy@Qfj8)f52NYpmJ6LV8c8W9(bJS0hEHYnw+uYK$??_
zj^4~8pGrP)=HBMizh&y>3cQcb)+9E6z;FMYF`yZ+LZ20}m_G*s7a2r1GV(Ua^94Dq
zu;{qqnAi->AYD5Cy?rd5rTC3T=izJ${@>x-*X><T?>B?q-jl4&psR@UbL6!59bZ3Q
z%%@UFy(KLTS+ShOHQlD)j$a=A^Ur!L*C=-G#pW&sGv6u00BtEtB_FUO4LPaSsFV$^
zNIyE$Op1hqE<+DMP7b`eb}@}D6FX^FdfctM8CD}zMW;H~zda=O<L$VauOS>ux#pIF
zS{ZpOd}}q++2}J@US>K%aji!Y=A>$hbV#dY$s;a;Ca=OHD4Dc@lWFZUOoZjxz{$qU
zGCEg{9Ndu1%`!B^D$z^LDx}(T%|d^9O=tPX3R));rMJ?UpGEV$TvNc1Gpi8dRkex%
zwDe0*TPS%mR(%u6Az|2^1ZW`1>HcX|85p0$WFv0$YRdjP#axli`G5KXUe3Qf;rBb6
z7;*rUD5(?&=|paNH61!mQuJjfdiZ7x)<1Pfw5GxKTxRz)zy-z&=S-qVfJI4bYj>da
z$zX1eji4gTA&m^n7E7bTT+%}?aGTF}=-%kxac4$b%<395!H#pRk7j17M}i0K2sVi%
z)io%su2M12Uagny)*CwfiyD_r-7m6hB8Kc$g~x*qPHOVmn3QBIKo>laiqa;qE{H(N
zo~G_*iEc-~!lHnOhA2~OBj34PUu(PDaZDL;<u!h{^SR%CBlzC~ytjYntN)}wQOdvi
zxP4qyZTEPI>+Q)*a|xouEA4~>gHC6@aib9=ieh4bP|n2+0ycsc3@;(;%k$t<QrR$w
z!`mb0Bc4jAH7WyUCtkBH>t&`ITbTh6L4t~-*6U(}Wh9jN8j3p<f4(^jWi&gNse%Mc
zO0DB8ho;sr-j9>Oa4~U2V&9opv<|BTcrBOafS@WZgp>!eS3QhZ8}$>T%Cc7c&wjD+
zPbCr=>S+=`!R62!<IoAhy@zrH)F)j`E>EbJkt27SP#{BWY8)Vo2Jx(5yIhV2ayTh=
zXMQ{`wtoF3l6`75Q#%+(MF6GVISF64e86D!j+d{Pdqj3w1j-v2s~s$h4zXL~U!_ED
z(QH_1vsI3!NX_QHAK>8uU`+J_YpCO##IW8xO=`4!)=<+hxY56XFvoKQv`F+NtE1SM
zia|3~?P>_303yJ$QQaydUASRkhGt3|1i^@EWma2)7M^E&m{6`wn6H!3ypgk*FFG`i
z5MRy&rzB2O+UlZ4YaEyix<35O_QVn!NfNuk+8Ca`r0YNUor(BdG$Q=|@z5X)o;@(R
zIRM^uU(SkAgQKY_<Mg+ae7gH>t?9T0{HBvxU-umC{OoLCpg}lRO^%DKON-2tZyI_H
z)?#NZ$G7gb5wb*(=fQi?eo<r~tD?YMqPpa}b}ap|<OcNSDw~zD05r$0Z7DPJLiYj0
zuTh)BPUi$UDXH|@>eBl4`)u~ft8IqY(s8a<cl0Zpwas99I;9mFfn!cBS(Fhq^!{UV
zn)`Ro+ch=c7vqeJs!9Q}rOmey1jTQs6$k!jACukroR|O90+5*JSB0;*_HW1=gmUm#
zAubJswY5sOk(4|b!)H+|yNLcq;=5B2$rO^HmRhsM$7e1L6vXs_ffH5Av9B$cv~uYf
zq_6rze_Tl=1{aH_q*hZ&MATpPH*@*FE(87xUHr%GK-qtURaNPnQ)hr=0TL1esju4M
zH6#$^h7B${m?671Zf<U9Knt^<c))WzBi4OQgHSwhFAZahno<%81se(i<iSI!(IiD>
z+-Sls8)05^0|BIS*$D|(mXe@(t684KaUmION9AucpxGvnj<TDAQfk-UoM@>wffsJ|
zDWM=mAeM?_Ep`)DJE$m2>$XgmMAfjzxz^o1*k1_**bWshEx<xBGf2k7{<kA|pNWVE
z#5hvwHyw^GMi!o<m7vU4_0Vhp!=dkQN{73tL&3QQsNXF`zQ2;iK`vs|Q=`AN8hf>9
zXwj@MIoL|2t1MDQB!8K9z=WBlw&G3=sLp3TEb?_}GzNARoin@6_x<sD_5BO(E8SGM
zu56vH$*S8q8+`7mYJ>lU6@`=E0z=Cz-`IPTHe|EDw%(<bcQq?gExz{T>NXkp{8ate
z=Uomm{mj#}G9k!DeU~<FwB%6yAwizaPC$g9S0F2+`*Ku9I@dYN5+NKbDG)Y*9N;D$
z_QpZb8~<5*Io-)(%4slJ-Kn<k^#5b8I6G(-f)miizwY{x*klV{3YMm($6LSOT@gS;
zXu$`Hk4osh&M);oxoX*_Cg|ho{8TCj26aRDq?9=O`9kzpO|z*bn)tvKn3roK1RNc5
zG041d8*L5IDBz_<D|8qGpi_Wzwajs~2op5(9W?Z3T)JqIu}Svr?b}sQHH39ABnki|
z<2#qtYm+&1^SNX(G-LToQ!d}mN62Oi`m04Pu_tNk9Os8{JDnY1M5u<DW+>K>Bb|B2
zbxDXG)U3)}IXfTu|6J?6Xvl;iOOIOEQcf>@Ti71o0cuNYK6ZCH+Z^<YqQ-=&PSe?C
zph-|1I9YG?nm0_DsBxtCyHxkb4A2T<uMyGTG1ak74spzB3B;vdo{uhIfUmImMi-GR
z*bdb{aYQKzrDJPN*_%0wV<T3TVPwuOx2VI}H0^8z>Ax=bO0UTf-#BZb>u0<3Nq1jo
zR7|F0loPnKb4zgL=ciA*QroDXmg8tDw=`}&1dwSj0&)UaCp4LsMZi-R_`!tzRRK4!
z&zhkw(JwAa`IGfO`&OLRzijm!Xz&A7M$_~^7Ss6dzTuDBnF4ZEq9)17$zQKFhEyHq
zx&@Z)mfe#z30R16o?(EN%SX1fQj2L8RD<%8tV|BACLZiV*i)e<S)9i2l2oQ9x&UHP
zg(`43lm#ROf1s0rbPCL#Od53ke8h)RiUM&VRyEX}_!JR{ER?u_v_S{Q^IghtT;s!$
z$*K6j#kx-->u!Gb*U+&NfbyQg1%{dm8sm3*>Mkv-xyR0J4dJ$DK59^}Y9M2+vw9rf
zAHQ!O>WG+uj|Bn)NG1XryyUmwi{bOhNXeZ@dZpT8(Uba_qJ%8EfIe1s$^m?FvqByY
z*eOHHuEUQ%!K>5XKm=5URDMcVX~|ln2QI{Ijxd(Ri~}}Oa}D)nxuv#ivV+U;G)7kF
z%IG226AzizWq&`@+D^@9bkoc<Z?tA>RXmERx&W;*MIO{NN+NTD9xXDo37Vlm=!9%!
z@qiE8CKf=`mJ18-RA3&VUWR#-Ty~{6Q0>5<keM3_NMduHt1fi5jRK-7wu}FtSmr;f
zRcGydKt}rb?=)Ek(0mhi8Ma=KAH`3QRTVo6(STnk7A#gRT0dDf!1=vMDF#ggQ!fc8
z1)B^aO)(&Y$^<HcsU=7#<rL-DgoI$azfT8t`&h(*&O1Y+t%<2XdwI*grP2|AM@I{m
z<_=`dHK{-_XqGgUx<H!&x)d!g>;OHafH7z6W;s&$qLC&0rv_I_7HOA3V1DHT%|i9G
z+TfX$wM;!9QO6z)Bz0B|bBiO;*aQnqpTp8cTVL+i5xD2Cjq^;&%sPCYi|3{ir7V|d
z!>NWcH`J@z2qGILO@Jt*9qiK?mOCwgWSgW6ZIF_MMW)r7L8qkQXq}kjm(GbyxB5Z%
z;9KJa@!qwI%dqP~XRy)~Ei(Ty(@{~Ta3a51W?b49*qOZL6S_%Seo9$uN5@Hv4X30c
zO230i>Kubb?RK7w4dHbMw$NZVD2d7!EY%2E$|agMW&$;tn5+^l*1E|Rm!xrlb^k;j
za70sViQ_~_3(TbiC@-~>F+er*5IzeBy|ey26ejb15G}#9{!I5yHN_Rwt^c3WxM=ks
z+!Nr;+fSNV|A$l@Ko%6?tdk%;KjSEXe(Rb|omA!>w9vI^v}hXWe7@Ny3Usj)maUXD
zbz<;GHAaI}4v17`o-iTbspTfy^yvL8{XrJ)lOV%w*Yk5FO&4w+V~iktYIt^GNd!0(
z2ktJArl@{;@k`)$-`Byc%UWpasL&N#`q@Kfl1b3MXNE|-(?gcO*8-`Nx?Yj?%i_XF
zze7hRzBctC3)onfyZR@i`qT6ve?5$&x)|eB17uSPys#E%r;c84TI(Moc(MH*b{|$<
z?|N(Wo!X^7YDpjKMf<H(OKw4)9W5-_mge+U@~|L1cKZR1i0wlTKDo3Jg5^ZKeu{uV
z8M`l<k%1*@8(5JR=g%TO>q$*4J2RSG^E4gi^Rn4(zHFf;xxMKtsi4*I`9M22`6^r&
zvk3Uypdr^T<utuQd3np&sunFRNsXIA3giA^wNy|~=s4*#)V<n3T-j-*6Zh^>O(X46
z;|hR1B>u4H$95wkY(Io|Diih`r9fMyQr9gIm(^zt`2adpEl8Le*C~@oB?Jpl0pu-l
z28H7-NvHPMO5>#e20Q+%OR=|L`%~C;3w+?~OD76sl!L^cbHKTq*5KKt5A7oegatE`
zr3?C0O#Iv_6>IccH29JF21lTYty=7y)dd-fSywqomE#4SM-%K=a!?h5Oi#1T4CJ_3
z<z~fxoZH(Uy=--=>tAy0PHN3*ZpQf)2f!O*pa~Bi0YD=K^N^Fs`guA!uN(ub*^4{G
z!J5X=acN?unXWZzSnW(X`WOzhUtkTjs=?!OiBJcLaCaUluQXmwy;{lp42~~}!{ZoN
zjdk-=cmf-<P_2Dz*qfY~F3!AL0_F|ZZe;@HTsn(uc`(SlfT7ow6*)4sw`o9aZW#O-
z=x5mK9TWOBBU7k^4S+5u>+$(w+KHTXvTY(zkGEv4Ns#zuwhwYWyUZZ7`JV8J-@azA
zyC*Zn^d~~Hb#MB?@!~)~I<Xic@Z7p~`J`;^aofdv?s4TNe;NcM3ia`g?|=>RMFXXI
zlISL4k@PBda~erx)#%<+(F6mPUIF`65>$d}JH4pXTX|)-SQV)|ftmzVn`x&%V5(hv
z5n!AYv6oY|-Yi79GUX*i%X+R^1yrpN&5ucTKbR^6weRGAYb^aYqyDda_r{bkS|B6H
zKq)A^2T(5!#B!JdIltkbjxJHh|FJwCCT*5L|J%jf`Br}MXKzs~UZzCS!lIEzF&dxm
z+eeI;gI|0M*b(lK%+9J6(uU{$#;EG>%ln6KsvdW#F2G^daDpMVM9v@LDOdG2dn*&-
ziRv~!s#|WY;gTv$8{`VqRA$5@E{U^x+xD(aJARs2@7u6gIS9uZ;}gpLk)UM@@OOsE
zn=Wb|PZ~|4)HcYWK-Fb2G3Up{*(k{y-lmo-x4?*L>a{RlwU9JQ#!1|@r&y~ou2w}j
zF|;nhmnCVXGMJ=wEI96$;TsPk?^mZkk(YV=pVg<;+_vUxq9NRn^=IyQ(>W}vdeJLZ
zPV7skH+_C)u4pn$w9;+7C0k_Ugxb1t07OWqSv!2PGqkMgPW{Nje&JJ<9HLrpO=!bb
z<_YWqrYZ+|mK~C*j1CH{BR?Bq&Ez%n?T}r-gA<MqS)!#$qiqQc2qZwmf!vuc>+N)E
z*40frH_4iW*kswpReBpa5~QA7TU>FX69Z@nD0*}E(pi3~eP$lGNFCuH>sPvhTKv!V
z@H~~Y^FOvyd0kT=!&HO;0US@{xg+%_qcb?7<k4+O0x}Wo(3wDUv8td@0IAtS7FX&I
z8>Fw~Ul9UJY*1}PDeV-+Qso94L{<@wi2aLhn?SlfrWPSVwTDZ?)`B3&3JM2&liXSI
z%6vowx`nc7SlTd0m=8@*TXj5aw*WOLl82xSNU5rw9z|1Yh^pL*qk<`bDH93nz=wRP
zy7m4?g{>GdOI;g~%8P=J>N|QdG}_Un3W+U<jLr$WJbZpl(roi8&w@g{RS26hjjiR}
zc*QT61yEgSk}_JnVMtMKBuug?xd$fVx%y353z6cba;K77CF+Pm@!>I#N};ECxW6f;
zNb9bO$T7(<8HYSr22mx2f<;p$rmN7HlhmQvB~D?{8Q}txs-1-cbpu(lKz&bD5vi+p
zBsRt}^QTAlb*8avi_TW;k<n04SVKkaj6mMEY|85lXaKfeRx<YTdr1>tW6U!lqshJl
z0(}30v5A0$or>Ht0b3l;!usO_-gmz17LYB}+1AMd+Yqa1QS+C_RMC%=2#Qe~_fkcH
zs0LM>EWJQZddaj+M|q(^6~eJVnxT}2{hbU6$%FhpNeQB5f_3vcU(<L1?s-wKC93YP
z_!Kofu7KatMqzI|irau|Qv>`{;}FZT>PJB>!!G18wH_u65NKpiHVA2uS&C*w2}zj&
zTNkgN!EkGVB*4<RrOk;V6}Fll*+lEfcu2QiH7h+AX}&(HP2hIsuTP?y7;`dnTs5vY
zA4{>9vp0)$yX^a(?qXE@l9K%isalOQ7z)&_xV9&i)*Od?{D7Yh@(yw36?(@iHu$K@
zVa#$piM%W+him|~9|OX+1{FjX23nKn3UMhXR_>N;DV1!1(wwTqvbY%_Z*ia}gG#!D
zs!MTLQcvAN%$jd{3yR=H6$KOXRpISr<0`MoM$STJtZJzEs*1&`Wv2|35%S~F9VSG)
zE*=W;7xPZZ9_>o+%b3}uQizUD#>q+ZT#`uMUm*e?cFc^V&rN1iRi~<iTKVWe%y7qI
z91(h3l5`)duZY#b*RD_KR-8e>0Wqu+jdUVX^XfNP9f&4(!o*4aX4c`PV^a<Wr(qfm
zR>tPlk(9%OMj8z(l4ht4Y^VjnHrs<=do%Rg$xd!g^vi9)q(=4?UcPXajG#<WH{5h2
zFvqTF*3f>8MeAQGvEyWpj?K2((S3)7xsfFBlEfd8jH0r!j-4HJz`#>cTtck_e21vV
ziFaYBPg^_RS=d~{q(n&5$7G3iiLD|$C?vM&lkF-~%G4Ua6%q?p+g%UKjLI{GlQ^N#
z%Du>Cmpp6pZ;SOWs#-{%5RHp&+~g!xf(7&fOfZII^}^bzg2JZV`_^FaH8Wt%61G5A
zhRKWq?g{^lFWw;1)}-ge60Fo6Scu%lV+4~ZA^>4F#98>@E4^JzJrY)61&a58>IA(*
zuhH>>+V`8v0Qv%8WFj)pQJ+>GzQ*uu3rhAMv`Tew7}$2A?BR)Rs!)QvY*S@G?xoaj
zxF#cNg6=7qXV6!v7}u1=bCG5pjPN7QL;_FU-QNJUD>4+Qj+&;YE|_rA&PQ8;FjOJ=
z3u97e3(Wwr{cgMZ7H>xm@ua$XEUQR_O;KgB0^(EuePe?PkzE`N@ORlM^|xA;31iB#
zF(|E#?vxq<k!da?g;5KM`hI|?*AXQFxE~KO`5UyI6VwPzBS;)?E2l^=6L2Q6L1ZX&
zwq7t>fKjppLIXA77?rVBCa{V~hYl)0(h>>v24$mTYSjt1iMlrGNvw?Day+I2VOb>?
zpMC4VrU~s3RC6LGBtG|e0E$&3$h;CjInfDMm`TLQnrAU=EKXFB$#-K_i&~n+60v8L
z`|@xWoh~(TysKKY5%KIygl~hN!!!49);K(v#d)q~zjgf>b@e8@3A!X3(TP0SHdHPP
z`dS~!sTT}8MV@2Ky@(!nfj(~CRS~yUubzyI3<ex7J~fPbd1K76Uhb-XeE=CDheJ2Z
zWD#6-+)NU@EY1^5Z$s!(+)K;=ufX9D9+0V~Xp|?^E2af45Yn;VOqdJJifC6s6J5|P
z0tL)Y5n)i=$_E~nR)hn+x@Gf^dV_6|dN1JAB7l=mUl#4D+Aulekq{roz;UfSYk8Rh
zNUkT%XYsm!0}XV%@Lt;|(7!Ic_o`&6Y@anP(T1_uF`>YivgFLxH8MWu(-JB@&-Tfl
zQrhTH_RV%T)RXSRD6)?msAeLzg#<W@EW5w<ty+YiFWa<-hZIPd9<02yX!E%tK}i$D
zO(*iu@|b0-Z_aBHlZjiq*(TEZ-B0bxRotk#9M8X0TG66m9HmYZ`6Kjnc9<klF-Z!U
z#4)e67xl|ST0n<$H3aNZxrif~<MVOa-rEJwAgn5~YBDp2qnYloxT6Z{@gz%=l`~@7
z4NWzapsNOpYey&{$i_Z`va1lJ@g0UwoB>Js$9x!fYs`u0ADKG|$Suc0g3V3O51shb
zD#iCKD}rnX=&ZA#kulfHMowjrjpc2^Cs~3U6AAUr*&zIh;tSAG7ZPBsV*k#E04gSF
zB@6S^GVydwlE$`}vfc47l~GX3E(0xR7A8QDu^gsWSX$j*1PDer+s$ZNlmmg&B@nKl
zW=&(Z_&;I!D8AAkDri-A72R-S-Zcg%P%2iAPfLyo%8P>4+sEsjR16aY^lk4gb_||I
zU%0rY8v{Bge5Ro-$k`BeIz<R^vI&1&JwepW<3_W03V0Ua<t>8ZoFihs2-&ZKaI3?z
z5}b52ei7H`9-o%*J%%4mC#>O^G0f9@?+*_#DCg#8z~U9@H1}J#ic!<*+_%cOCnNyG
z`9rDBBY5vGQzttCeQqgO>Kgh8gydU<LVAN0XOf1_Qmx&9Npa4oZX=H1u~aGCK6*}p
zygz7?M41<K{`ET<5gL<CjGRWDUNrG|6`*|4nVwR>P!e6KZ2c%2p40)QzE^**Dk$bq
zXf!k~P@4}FVLDv0DIw#l(TD-k`I6}wy3lI@Qt#o5)j>l6wg>VdtW8Y+iwugXwOoD&
zFj!iTvI%pzY*_G1Eo4KCqhGlsM54?z)v@R>u6R;oM*BUL2(N51M~yHRCxGv~lJOZ(
z(}RYb5wWME`_0YIRP=qCI+yq3X=e8^kK^OO_5?at0j|*b7(*S9E{bGAOp#A%OX0vo
zlV%5e^Wywua?|s`qlTPsq21zD2}>UKUSH<0<(Vi_F~i(<@iwi9!=@&4DrgtpcM)o7
zo`T4=^a&O~=N7<AF4IoYljh<C8FXFKP4m{4d~Yyf<zXSE14jbcPo9{0t%dbBYsBJ^
z<Eb7>>mS!vw3{0lTuuE79u3%~*Xz_@AA**c(X&Q#tk>NV@VHmkzw5$)msTRw_14Yk
z*|?dRZ78t4UY577nom!orizNj7QfCI;56lM(f5a!dFZl3rI#waEMnX+vck7TgyJ9^
zVi)yLLPoc9SC>I{i<qIiEa-G}wby^9uND~VJR1Gezn_A)tl$R`rPn>y&z#Z%)LKtn
zEq$||H#|yHf)?GL190c{S0IXC9o$ve#amLn#!Bs2W2?yVhvZ$(A^mJu`nZ#ic;$Co
zjNLF-4^^;uf8n=1chzM+$*qG|MN>Oci51d8axa(eJ*iOTnqm!aHHtow-hY!|#umb5
zT%Q?|4kIj^Z706rpiTA{IVAvEa-uf)!6g_pW^Bz3oF?dn2omkk27$O70ms4It~$2#
z{%*tJSJHqN71Q#0O(0}-9Zfd^sSXxA8a=wq{7O9(=j$FRex4@&BUEOOngtEpB_QoB
zp`l1oGhRZ=nYT5lg^o$W<TxtW97dU29}*!04S>V*o77J$du*hrsh;Wt_qB+V*3LY(
zJ-2*8aalyAx^t)92%-Q~I6P9Rjg3!Lf<g`{AcW8Z(>QywBy(^2yam@>1-XKR7)V$q
zlyOe+hDJ)HD-%9#e9Aou#=E$)eh>}@^(x3UIo=8`-a)I$iphKysAa}7P%-kjM7yDH
zJLoBPI}SksBH*of&A27^!z5XXwstTE=}lT(S<iZ4<$kI23o&_s%p#06-XjRMAu(Mj
z7J((`z52Nt#vqfJ*sKg4!-h$xB-ohOVlLC*w7vlM6NxX3i$yjM6k3HKJ#b)Ir3QfG
z1)szmZ6ll#)*sm<()by4I^ej?z1uc{>F`Zy7<SFS!r$EA%l)8gWwz5YNqs7b9RZIY
z77G7}0+x9Ta8WS6`{}6{tt~RYw`Ty?WAzTIw0}GhfGRu=zp%(d%GG|9B|7}DdYcB&
zykiu}g0I`bL-`XdkR2-{5X>QsMFUlO2p|ZK&puJE97<WsfVSBRyj-18iR=K}Vm*_u
z%92{iTOBej5V<7sx_X;2K)*>vT0;{DBp#yz7HsOl-MwB9qfh?ml>Le(28tF=O<kOt
z+7xADQpO7CGHid4H7>&Zga&mkl-wCeZmKs{M-1R_eP2qZn=^t0nXJe#x7fhVmx%__
z40sn!>_;E(-fEyrFB-2q>v)r;+#7a@1ul$ZH*wDHBQg!k4gWi=!ms^w;C4pe`SKv4
z>t$0D6JOWtMdX}GJ|ZS*EFrhi#V|pW!qEMSDZ>mV@|n9={mlxMZ8!K!iT|o*OwnS~
zsu_hMt^*f*Ow4$=@YXdt*hV8`qt`a*;5}B|LQ`)ZV~^r~JcbBVt9ghAQ2T~@Si#z(
zh6E^|&P*dCFE!()Mst_G``cxTO)pw5Iist#J-DDsZO<zg7lcfo;LVumZ2HC(5B}wM
z&et0qxmf|x)HrY(Z^Dn9s2#eO%u7=@GwZ;*R@djvz_*v~($%`Fn=2P%OvSry=e3FH
z!X>;q|EFZ%)=Q^uuLRGUSk8He2WiHR?VJp3QZp;}m;yywDmvY6m8>hPHM@aH7NU@X
z!`>lGyVi4hO#?E}iHZRQvHl+|9Z;QLV^;V;pgv0z(G2rGtd6cWyS4YAVo}}6_Ql#H
z^u&MmaXc`MnxVkmCzVr|?!jqiAO(9W@AsSAn_P}T)pzR2^<)yVojYsB&2!h)E(S4k
zPq(&4B|mV932G>aZqLXWL)KwsOPoTk-we2QfpZBxhlQb4gy{!Rik;-!qV^Tk1!X;M
z%kD^Cc!aTXv|HDcYQ=pp$&HdesKb@tMMNa3K^%S<FE%pZ)RPq<q!ax~0c-1+%FD_n
z(G4G29c;5^UP2Lo4OEa*PR05p#KQ;*xFE{YbUcLRmKS2|%>3%47K-w$OmZAISH+PZ
zOc#4J${;bhwY~NToQ#gP8WY)cRm`$+y+kBdi3z*nue4jZdCVJk0b7`dYrtYKBNZ?_
zqggPt9hb+I)2UnczZ(~DX;45-1BF66%_+-Jr7nb|{HreBBOhRm6wt3FoT)t;rb7!T
zQup0`UH^c^(4{M%C*O}D^k_cUcs5Futp%wy*G^SP_bIpCFi|<CAW=z$Qt6P=yM*i$
zZ+bG>b=Y14%Ji}Y!uVp2&KU4z;m%kj8_KxNL;v)dF7~C|6o^8iwKGCyOM}h(YH&X>
zes+Yi)8@)TquAJ%y@aU9+u{9&B0n65#`HP`Y(QWL)-PPvG7o8}?_}G-s!}PRNu_LD
zwldih3Y4v4Yur}Ywa~h;y<V_HZ|6AC;s&5r^`b|!0XzHfSH5_Dc)J9R!_t#>CoQru
zXfr5QPz=nb=*{@m_=Ju#bGi@&hDxSgAi8{F7@W;vpya(Rxp2a+i6_UXp!xg-%qU`z
z!Q?+qgQ6ahSsAmac*~J}g!pOqP?b0Mxs3G)bpVnfi_^kwVVD*>!*x6l!0fWTnjkoP
zliBd_B{E$?eBRc_+If8PuvhR5YTmv(v@s{h{e|!1W6SVV*F%=OeS8?3VY)z34B0v^
zLP8>=9y_m|A8)gk-tcY|ZcYl=^&AitXPql*h$gyM1jTlU4@4j4pDuA!|Al+TCMhUv
zyJWTDy2%uyeH+oWIt&l5t!(?4hmX-w!d=YBL#(J91B8P+Kx;|Y3bbx+YKDZGmHGi(
zg)Uc$`CVRnE1Rwy!e0;yAKy~d^fZ12$d3)|JNtAsk3$GkZjlips184cP=dpU(=Qt4
z-nnVPz8IQsbiK2)YC|rfIb@LYvAit9!ipZZcpgP33G~}%hPurAHxsvJ@`swX3p4|!
zPjqIbAt+X$&0q_&U&fzda}KyHe2q!URoDY}Ql~93J2yfzb=hr2bNb$+G`)Te<4dKf
z=PFwPYK_djoz4>-M~|+hm96Xa5wc$NgGftoZx1)=AeV0qqDCA0zq7rL<v^a+Fp3*1
zC<Tio_f^-R%7v#0>ElE9C~sKfsPoxi?^9i!b@{d?q1e22FM}#cY*T+#&*4Z%;f=El
z34T%WP`ZWRJGc?<gK1la5K_S#d#p|(W<K6UQ2(lxprEg4fhx1c=djO<UJE3&>^|}y
zkBWDRBT&*M%Cje8<{cj+&n4TM(CHf+sytEaL-?hBd6gEGEkRKi%KvJecSf;dsM^H)
ziIua3rl`~VXqr7P6DWwmpi?Oh^cW2j3d=4^%acr!J|0bStR&If&;+Ai&BYhSLo%)*
zU%%b$oV1SI#=*2b<&3t9h9xz8a+fA|)GTIywD@jcO)CJlkC^443f)JH6#ILMDcUbq
zGca-)h#)nAz9@5`uc?sF+b01z0YS#(Fnm2a;JVaqqXG?RA{@ZpKhD12v)FS_k%BEa
zQINuBt^g51%#QR(kd3pj5ynNVcUzx`Dny9bDi*&4YWT_Khp$B;=u=Qk+i@Fw>i$gT
z7fK@l&(wJVD25(i7H1(hn!6pB4HfgG%gbb{5@pWCf-n>?pz})Ea#4ouLaNK~Cn{pt
z|BQ~RsBXQUuFoJ@bnKB|l71fa5IKtHRX&=JHDbb`)_mttzb=f}5ZH(h=aM(_;@}0s
zb95WNF=$LTq~2c?wRM!tM@Lcr@XNSPOgaR8fkx-FRZ80LHK8Vwwa&A)-js0O0BuY%
zZw5hF2Xq6;(fUJ2-#J>}eJbl`yK#?X$eQU@Kze4)g;#~6F$kRWK{{|-GrC#3PNQ_u
zM(+F;ZmPL;e_aTqR*-bg!-~qsz0pW$sMXR$cK9Mil@67|(_u_+c#`5?2O3<!%4g4@
zbJg=Y6cTl0IaDoB*daYlWuug;0rs){I697?bEV66<hbPB{PdG^G3tUm-+hE`Yc7m>
zTn$dI_gM{D5FuZ_Tn6k~VbE*VSZpi9I4>O0;St0`IM;B|{owxQ#eyIlPGv63g|709
z?s$j+RVl2v0>3vN;M}s5$*zd3wC!_5p()%&q*8fJWwO98Ts2YQ2`lS$4A+vD5MiTV
z@gll)T^M7Jy?+f5LGvB`-Ftz|8))#FC%Nl0+4oWRoGr5;tEM-`5lPtRbab>K(*dWa
z)Z)8aPC@Cyzz}^8Xk>)SVkT6>akv?^i-LE6&!jLe7C!px#jfpME$7boZX7Oa)Hr#w
z+PKh<gJG1chXl1Z&=Vue5kUf$a_I*#$S2{fCm)yDbh7}~ulOthcPd5D<8WEiZ0Rj0
z>;Jr<oDjCcBUVnUSa;w?`3p0cnqa`#?c9^Y5G7n%LS1QNQKct_{7BzSyc=9xby=}s
zE%0E2tb4LTV7#rQo7&kT2XW6jyoSYzfzSwJYcg(mH5v=J4DDr9F_;b}!8hQnodds!
z05HTbTkXGbH?O<^O`@mkM?2M4Vrsi6uLLVy?UQ;WZQbF~%TI=ly}8@swH;yPnOKAj
zj8cA;K<4(Eh=4&9+lz1R2$DfWtQ!$=RvLOA5dTHNKDZGUw2Fwu=KCd=Fri7XRjvL{
z7|34CDi`L8;E6XRg(&7yl`C15#K`TC_Ab9`4Re21Kv9&h60J~*Gr3?Q%mX>%r9Fuw
zFyec}z`!|ovqMXS3G!Tzia2uS_@VXJ(6$Wal6-)|A&gT5GKb(`|A=srJCU&&*58--
zAjN|M3xzTs2Z=Lab%sVr=+GO6sCH0+EK)KpETE|$TkCTfP0?|ahcI<oWJY^8MU->D
z{UM`T6UO@H2X_MN79eEGH4L0S&0;J8Pk^!nO(AxAkd&!~S|uhHk97<hidPJ4%$9<@
zU_KgGrn_Li_$d|80B27WH%;%x?@BF;g(xxAiJHdeN*wZCgW{iu5J3x0bK-BrSkEm0
zNA}2&*WPGb1LU1Lo6!1Cn5IpZ7j|ISJPUH!$DJfgIWkl46@C{xmO0Tg@VrgNJC2vr
z@k0OgJQ}yy(0rdmWp9AQGDN`aA%cul4!<#?V9H+Qj?bpH#OJ*>vd!R}$Zv6u;hEt~
z5n`HVz`1mMK)1L0VbZocxhb)RJXZKXu7pOo&c66iEknS6DJFu|%92>wu4ChR+Pfba
zG<Ih{f7(JWH%SJk%-O&iAzf;+3Id&tH}OclL1G-4by@tZvx?K0#H+)HP#()`R+^!Q
z)qw^Z?d+UDE!1lC=Y%76<pY^=TJbz#V*10|=ic-8$=phrnLu_*9Ii#oCws3FTxlZn
z%wpcWhE-r|8NgfSy|<wm>vWh$4y>xmWB%f+ihmRl=?(r0?!yG*;A}h?kCRa@OQfGM
zX%K^KlY#2fFrhf={a|v_s;(_GDJRqSV0hdy4uhBS4BKC)J0JD(?_C`3)Ob+<n-=#T
zwiUBfU{5*+UZxF%rdGhlg_U997hVLLaXC31y?^gYWYV<a{nUySc$81MW~Cmlj>oE;
zC7sm069=#TwsCU5c!}T}p>~H)<&GF9K-GN8`YwYfm0G;i%7y2_8ikt%thX)KegUd{
z`lu1-;9wC`*6ZdFMPc8b9BIg3Ds+tydDxur@FUUW%n(yF&&VJmx||S3#z<vqNROhC
zu~mE7mJxDoq;$ptFPkRTt|@12u!P>ASYGC|j@B0IfuT)3^EKl-X8Mjm)Ah{XKwLxw
z@l%mrLck049|#Hz%(PucU0VMi0GmK$znl;;$qewYjT6lQM~E!*_(!txn^ne82p}o)
zndK=%Y@W#!W|pH=iQ%Q9mE#i0&IbyhXDFo^$`E?W(M^k(=AMdfuIUa-YZ(jC7r*k~
zFe!VDf~M21vSLw&?9=HI(Ot{aj1WV#jbE|l*jAxdkCW6={Vekxx7X{v<fSiFe!?nM
zBa2-=9akBb=a2?~%BmGYidT58Ld>C2eyr;9PNb!!rP<k8I3bn1WXo&cPViQDG<@oZ
zs~VBjdOF?<c|qhUixH$DZjPF4N1EO#CfrT+8yoT?Wc}KDT21i6A#WA+OJSWkEk5U*
z7;CJruTM-&(3K}2D)gxgDyopkpL5|i3n1U&bZh;MN-rbrX3CS4NENJ6GdcOk|4CRq
zqA$s3o=hY1B`+gHh6-2Z9_Ms<dHL&K|GLnRk0Kc)aNtG!+0TCV<m4oy2%AX7#?CT4
zWVWpBCIDGI_BIcpyY9M+Dtw23|NGy^!UEGUk1+-P>aYGPQ1W0fXt&!;P*|99tW6@r
zjX(+A^m8D0o5k4i61h(qDw07pWZpqhF`94|gCKvu-)HJOT}6-z8?LRbF`lUlH;zbK
z_u%O=JVW$y_aT+okm13Tdb?j5kO949I5GA<^O?_}*R|JPyLa#2Pk;K;kAM8*ue<I#
ztVd!9)tW*>6$+^?Bepj38B*#bY!M83Y5~ZA$Z#Www9;$RS&XrpZn_C;Y{`uqiWfO3
zyWK7iM`+L;JIE8CR-_jEp^?HZ`80()Zh`tPlOe}1XY`SbbK0VdZ@A$G9yeU2cQ~c%
z8J3KHO6Vzi^QN!gv}ezrD=xo+LK(V{$*7=&0rR34y-2E42!YV-xFTnhAqG*-89^}K
zD1)C#4EvDKks~zREb{ajr)=_P&H|WS#vYS1c^cx8L{wNZ3}B8jZqJ+m=Nsn+#5~`6
z<UExpHDcu@$1K0N*gtqEU0v}Dz2(?R#xMD9K3G0_=l9ot@<VIoXe%1nqj1sNdOf+@
z-`Ydd(!CVakp={0D%m)Z6~QWE_m(NK@)^y&?;BsmIT0VZIFDk#WC5~M?qOp_?rldo
zgyQd)<5q{S;;I>fhh~Yky8htG%{TVqyv0)J;b0J^YI!d{cc4%_!orY{*7$55bk)Y3
z1XSU1<pE~J@nB`G?6g-8?+3mFm%}lV1wv^Q60sXMRWkx!)QOlL5?I{A5fZ>u;Z|21
z9Tn><#%KW4O9-AK2Hna4F{3QaeH%dVV3IF@`i+QCo}1IHbfDRYP6%~e{(!HL01z$7
z+dcuk`JY(a8E6(i4R*XXKqHDGC_f7l`G*zL^bhY#1mQ07At)iH0~N-3HdBiL0A97W
z9%EAlh*fZsiu<j+{D2$PZ*I^_;3n!pz?_&E5kbZ02)=#orSqD(>KE~y_pYrD4WCAj
zLlSI92^y-xXA{GnAUD9RnKLoF%buDU;7Kz->&{F?x<5HTZBBG>K4hX*XxZe1J3DO-
zI$@cZ)18nlIAOxdqjnJKg{imwPM3}Z2UH^l7!iao<spiTDB;cV?sSGp_^t2!(}5!g
zaZvOU{l%~PjZc5=i!b@L7kh-xVe?XO#-L^5Gz>8(^kxNnf&#+NE2}*zS*nc^ps^}C
zIf1~VPVTAe$_WxLUFFs4vC}9a?X#Ge=P3BiuiZEp4KWUH_AJ0ZeBj8x`8WT2nrB2M
zhZE%>m5doTE;R?l6F*tdXm;~V@@k_5U9F(988-m9>OBB_JkP;~yL1T6Sp;k^TAj{w
zp8I?-UYvK?ArvxnAUYJA56}cl;gMg3I^T%|f_d+~_fAhw!%PWZ?NcrvFgw9s{ZuIL
zJ-q7iAx+{<XliPTx1Z-c=Q;E9^K~ooV6IQkpA2T<*5JMN)?05qdh{sowRD*pQKysO
zATPcsj;2q3@{_N);)?T7<xhR;Q=*o<9@T0hKRt-<j13I((T{!fmw)+}FW!4Grr6R9
zl=EFD-@q4LbkXA;_c-}-5Vl)ZIVXj53gZ)vNMHW)mnB2Vc6x0mWZl2?=?h=@LXIS1
zzFn0IwH(u74Z5C>LvD7yaImV32Mof9;>bHU!|6*meCe~F`7CxA9~JeGqwbsE^5&;M
z?decLL#I%&v9k;t>`>cHtjEXs=Rg1X?V$7Jm1T$R!)^O-{^qa$`JaD)C8^H6OgHV`
zz56#``<qXE!V_0lS1~>u=r4@V4a=lQ$1z<qU(sb;9q%cT<lG)_yzxdPWQ3p^cihU#
z3eS}1J@0vpmK_mH><lXu$1K?GAOG<m$=9Rw6kCBF3HjQ5*~?yrg=Nk`;8U!A*2vHo
zQAx<gi2Ck#zx%)g57717^*c5J>G<J~et6>zH@x~^{!50?H~;CIM~)nM*0Y}VqaXc<
zx>yWu0^5ND!iPMgj)pkp>Z@M$DlBu>6x`4dvQdJvB=X4o;~)PR2@#AEE^&|0YxEaj
z%{}|?dH1{CO`+5hR$>_jAsMkAcMSmUD}Lh@`!3zbZv$A560V{(UH_yfJ&8L`>NdwS
zZ2`<q*U&EvRNA5=zWL2>Qo^ZpBAxs8x4)fJI+}85HuO8)ch5cdaP{JgFJ{ETL53@2
z3=;Tr{J;l3K+jU0Lb<hH{Nfj%Y1Pgs|6|9Fed}A_LRs~hQ>iKD;<>=jFpO$i$Ev7*
z{q@(&4>M;}o`!jC0U6SaG!k7vAMs-_{lc*1$RNDrl1umng#pPa<F>ANp=Q*B`9jt0
zQKeUcGa9H8V3G=`WB=E$-0+H*yl^7b*6og#MF4ug^E<!uZ{PcuUdstbNyi7`Q9q3`
z;+dP6b~!RtaT^rGG%@o7U-;aDne~DsEmB`|R!x0j<f_o)TH5>Z_mA9k!%W(vncVgI
zso60dk4+cX*AwDP<Em%rS)LNu$97mFUJwwPg~LpRi_1%`=}DX$`S~BPk~ahd0MG(L
z107-$Nfi#ovI+aFmM52~dZ#E@jO=INKe_4RDaRt0B4)qF68A%vTc5xYV1qE6k^(&#
zWid>cVDn_8V(Hj=N^@C28IE#5N??n;PjtN?9fr1}0s*N98VIez;S{LF8Nq)vd<V1A
zW=*zQ8D}F_9%p?|C%!fdq65rSph%h{uvuD(`YDf!c<SMjr@3}m5GO~Q9mP1^DI`uE
zK%yMF2v90DM;?J|;+*{|amPd8SWDnz5HOvJS*|vt3`1t39-(*~Yk~#$Ns6yu7)Orl
zt99HK)+nc`pJsk5P{D6XJxXHN^}{4?>k4$hnNfj;RNu3=@SXK=XzI$J(Vyr9vvav^
z_1PBF^*U42&h*9DWO8<Ht=G>jXXeVwSvQZ&QI2z@_aFc2|J=(?l!p&@2R$wBvpjso
zTVQ@<wK_}0*KskMnp_7vcI|cdV)bmZlqQw0rD5|*=(;0Qy&_CbPc!E-xAH~^CW~Ql
zNaVF%OvfpMkkQDC#V0@cNp$A}m^W#N`8gCO5Ws}KCPPBtQ8+?P3L%CG1DH=WG7J?6
zpd`^LBr<ggc?f7LjKU{9@kz}1H{X0SKpxNLTfcYfYk%{#KdcfC7f36Q3Yt*EFG=3<
zj(6}X!?ek}JF-!ZY#b3=?jWR6t!_%Rju>);71w3%MOqvo(T=u61$24ud*4f2BzXuy
zPhAKg!_(ohk9{oF@u}g38zxwZrb$#6O*b{Juz0Rg4#DEF#V>y03vYh&TfY6BZ{KqB
z%`bh~%VuY0QA%FFXiFqPK{C*jUj6D<fA+JV#b<{+;&J@jzx`YKg<5Dt6)b?L^aV%q
zGz1y;q*3mDJWvpFb!`>nAn;%RzkhxGv#;l~84F`W(GgZuK~5-fYCsrHU;5IQQbK;S
zMyFUJ-68Lt2!@A<bQUVmB0AC*5+W4|p5t93szE8e_Wt+3pRY0mrk3b<iZVb(SE4N6
zcrX057vf*m?R2pos=<dorD+J%F-_j^`ZtIS56K+W<i$k{NcHj2MRk#!4E=%^37XO!
z($S(C0tgK@zvIq3{^qa$hL=}pgbxh4iZGOn=V_PERMbHQ%D0r0a%6)NOyR9>d+YSn
zG<hM0Ap&DYTA^J~T`uv`PcMus!d2lc5{?f8_`n3yAy}>B!Gj0C`qi&eMGOm#+>(?a
z$#(t4C5!`e?l_c!E!}}^)I|VkLh8yLDm=NwX>Cae5JOra{}+Gp7YtowgR@X_m0O9r
zd<b20%{9FAQ-WZ%j<DkU`L^3{d&SFNap#?P-gn=9T*VsFL1dt3gwO;T60OMXS#yAX
zJRu&lC>0@i#xtIQBMBL5p&%L9N(NTcB0paDRPwO8<(6B1@{^y?Ya)YKgL2e_1NJ|3
z_z;C3`rwCXg)XL$tMoXnbCp_Xgg@q%%~1tqA;ywqAf^flV)ED)RyaEG{RuZ(<Pu~Y
zsYv4LzJ2?i{`9AlffyQ&ROAvg<fYLseBlf95j0$qs~oqKhbpK*b=tyQRDln~GzxR<
zEMo?Nnd=~q;^<Ycd=<tS=O&_#m(+Qfi~KO(zkmOizw+f)pbQJ=nr1wM09=A0g&bub
zJ96~M``-ILN~A-PkPJ*<jz}Ulx0|Re+|Y=2H`^KhSRM}aAj6d*O=pQ=VMT%uPa?og
z_((&d0;kl4fXuj3LL-gV1adll6ca%}Ap+lh_uXIr#@DANr)Zi)AxG&Wj-)^Q!#|`I
zZZ5Ijzkd6_#sVMw;0KX*ob5yAX_s3@TIUEixnXGzUEqc_Fh#H5`?LS;&uFoh1R2Pq
z9Y<=3<eQs=59<8ZZ~xX)pYl}r!wvq_rEoLxNlM^PT?9ZX8YLkcGoFaFxuTewhM=ci
zx*kZHu__(3nI08*YBL@Xm<09>&3pdsd(fRGXih3}37*^w9HB=GhCOdk3>9WkMB24$
z7c{kwRD_a*@H_+=x+Jdt(L4U=l8Y~?*>0AHb}zm3Qf_1ftF@LHW;5|amLS;2|G$s(
ziijlKo19VwNf32yeQkbj9@#$n(U0DK`|XH?QZfu6z;qm`_27dKZrKVP>T<+mEMY^c
zQ$@Oft1v_bF1_V{ddp?|E~A7?G(>_D{wNE5&F54yLQm@=Kz+JhU1Xq9$e^cDEI{V6
z%PxEBQ=iHu5s8fOL2F9H+K?e<J#09IrdEwhl+;&IldDvO12a6hKibh2B`_xgC3(oU
zlM@1l2crcJ<l!&$RL4sEzQU+uU_A4g&lC<K4|yoR^PTT7Z^&;jlyi6RijDyAf!o{O
z_BNP^<%OP37fC3m`gS61SuR!hnO3gS9Gq$KeeZi8844+ZC)OZQf=1j^p6l_m?p0S^
z#VJ=|0;Q0B<ttxVTwDY><yNHxt+#BKLTbUBgkEq)HA+Y|J(p;-K0Qf>R^)vQqcO2F
zM89|2_dfXVKPXk;kDL%t4o?x7JY7InatmL3&9w-?CFp693<*hKD=+Yrlc#WlJeZww
zDXgzj$jFpajKF>LxzBx$PN!W8QIk8Dv4K>aQk`-!b*24rn}{7C;41v<Q%X)^hs~F0
zg{F~*3{8s+aFf<)mnSclVRZ4j#a9v;VIoRF03{`o;Rpw~QGz6#BLC(_r3BjwHz=_Q
zdFa3Nr7vN2^01{{8BTxl$A3Z<=s88U*S-FA@BFiOiptwDzmUos5c2}*O@0z0)=i0*
zoeKY9{n!8Y#aF!aMHlPNW2TImZV(UFCMPGJ|7-u<%-lTQWGtLzZ81r1Z*CH9ROU?}
ze7ns@Ng3RCVE>I@?uYC1cFXG(rE4E?4|^KXQrc-WTwh)4c3LSuh>_*AmWkQTI%OjJ
z;O&Mh9u92$hof9%veRM_<|Ae=0ynd!dk_wt%yn4!tfn5dl!<ALXer#2t}zT*LXHO>
z6J4fOe-q&v-@-+Eg{acR(2l|s6wvl@xywe;C@6j!QvxkyZsHiGJtt`8YRRqHVZ+7D
z;^nJkv2_rRdi|Ckq|8M47P2{1e>mOl9?^QN)df(+7Hn9_hmHbQOEzj$QE|v5dJ*EI
zXR!8}$;bBB`?epjx_E&1XI6HDj#HYW-T)WAGRe9@t6+)w+MwI+bb=Q1TIhGMGxHVx
zo2X0xAqE^1scU2d_Stj{HnL*reY!SaiZt;))GQ+QbS5TQ<IZymn34t3qb$8+ZE>R0
zAyPLJnPJ+CYik37^XTQ!o55xe963^Y_VZu-;_lq+AdRWMn7G}RdLZ#|;hp8uE3bOi
zbDxX#Y!<Dv7o<gqcD9sc9N^N(>joQ0ru>$E@PUJV3wW_8ZA*DXCfROh*L_D1yz6~`
z9xWZS`@IPws_PlPlXiO+?Eqmq?Frrlt-y<TmKYj!K%mi)mlU8(@@hL7z6vyjLF2K=
zB+g@r_lDVp`QQJ&-=ps@z2s7Pg7RDhRpb>D9slWD|MZ{#(|@Kzp{F{J3XD&SOw-cW
zaHAC{Ih6+nr(`5gp(F}P<mFO*RoMQ@^M3`mslX2g!vRBrJv2Y^k&p16$`e9xH2716
z@yQV(d3=JEzz|^=y%leDKq?-qWFVt0xwGUH;mN?f78L?YB-Ir;6`s^ZHb4g$QbJy2
zfCH>J<qe7N5XkU4!5~ybTHz@)$65dEf2dGDjQQR`7hVB*zvPJs7Qpil&NK&&JRoUQ
zULZvAg@uLJzV5ZxTzw6FN2Abyg#OXn{|I4d8dD$-)kOeG<N-_uwur|m72%0c^fDGk
zaiCjig%ZlqjtrD!n2V^(7b)l}oGIb>vkE=L8P%x*e_H3u>hO`nD8lzGu9QfNRA6w}
z0YzvFjcOZ025Sh&P$<0&E4p5wC9YBq!FCeR^oC2Yq9JJ)i}A6Cnlwrti!svRk9~Og
zU<O{8U*IYwBFQ)_IM2+?Fk&Hqp<KdE;A=O1O>yvi1d~C+k?!CqqSE3Y{J|g4-DrVL
z;LIhC)ItCRgB#2bA3h9E3ORC>gqpRcoQhQ;pt`h9p=353g_64TDR0Km(=;k`N)<*O
zif~nQ$7uy%mm42p5RbahkRU({IHNC@D324huP&el6=BFQMnQOjbbRi!pA!XTGNB^1
zIHDTFwYfIP$th!=!609!G)jpyO$O#1#R9cPwUA`Q4s{8{BphuZ=EDgck%8)*Dt)SN
z__?_`M*f@L^d_u93Hnk6%Ki85|HOa!#4~>J8Ml7-R=%R;?!(kFY@p$msrwGWgaFQ}
z$xVsbgJF+qWYGOhZ+_D+JoXo)Ib>$wt*ovv@4*NDB++yen{5kFnJU2gx7~IdMy4TY
z4tY4G2?#{rd+)thxX@oTgh4o^%cueeQGeTJs=kn`n>EEamtTH4V@ak;=?j#l6>R=X
zzx3?azy1xhBBFAYa@yrcMSd*+C4A3&-h+5Dp1A?xLw-wPU<hY4f*~>sPeh^$^mL6F
z5XW}9^7U_cJ!thsyDvi7G)oD9M@8YlaZCOf4Z#o+o;(CeP~P;luibRh*QvXq3N$hg
zb3`8MLX1>M2!sSNRY;I=<dm!Eg@l~a3gtCTEss!AE?3EjNHl>k+#r&n3HTr<6`%5y
zr~K~k{;trYDVLu1w5Rb{kruHGPi^uf8igAfd4`gyTTz$C61@q`#BUx5Oycx&pa0xv
zKK&VaB0xAUJThZ&$l%W<G7Lf<i#*Y!U&a_eL{<g{wHT$ShJqxtMgZ8-DB7VT{mv7F
zb}1xDyA)D|L>sjkH?${W^B9E~BhVcDvCrwsi5Q54ki6Q-ki#;lO!<Zu<rE>YJgp!+
zwGe}ZsN2cOC0H@2$S|UilYW=E5rzm)MJ@>wX#z3il!nNlS1k#x!wq^`rw~fHcOWA}
z2{#KgQeM{@&j9rBSe%)j;ih0zz?{)YmF?souRESc2CDG*z;4_l|Kb1o4+tRl0>U69
zN9a+IhlSWyB;=BijdR<aM<h516S*pSi5V%W-}LBoB%#-Yj6Ag<BcYw#CY$+hS3(sy
zh(X9eCakvO!&RCSX`!JyCEPFXeCIoPU@<F#uhAVCnLL@7y!a&ujPSx7{#2)yXvZm5
zf=tBw*vCFbITqs-dPW`jn{T=K{eSs>Zl(G*fd&rnfi0~|-3><w>K8Lu2{#^Fl+z-o
z3{htI*S_|3@+^~=hyI|?AX!>o;%9Q6q09!*bGy+xok&}pa{DkE;eZ$-JV)e|A-X|~
z`V?ZxBerDVKt@hELLj<eRT%P=r!8nO4oA5J4Xr=#dCz_R3tqs}0WvA4IvHf3?ty~`
z7@Yg}@5k)a-A*d1Ku;~~0Dtl#Aw0K~QyP*><3~D$D)f{LNJc(<xa;A0=+GhQGTI_h
ztJYCCKtm5ACt^cD6O@o74>8qwL%{OPJls~4Q^*5xazgoXl80Edz!`-+Z?G_dj09(B
z7*V`+^P*0R$O#{;N*)5b6&f<ahm7b5A4;&Bl-GqK7=<GIDIPH|mcc$W$9pUqk!MQe
zh?PVJSkW9t;Me-Aueut2sijoz_jps~5^g%EDJ>$WWRQnUeJX|Z5wZD^n3of7L&i4c
z(8J`dZ+$Cvpqn_NK80$`95_H8ksxEtyzzg0<6r*8U)FbJ&GSOd9KX9RRP`P`da;I>
z59>^A=Z6cT{`X(}>~Fm6C68})-*;u_lHGH8IO3COVup<%4uzTP002M$Nkl<ZZG~}a
zIo^!i2HZl7b&fo=xIY0$1_kf&+C)~aFCKAb+JJ6uX7ss5dESgtR%CNS#pRF{wg74^
zr!&Y@T$hZk{~VS>6NOuM3*94jNz9sQ(5%E_@ipt1Q&3Hxz$ckL<Y~|Q5%3v-SGWcF
z%`VRJ@2zGlqi8vam(zTaFMM8n4HixpZE(JTh%j*;_bzkoUtZYt%<lBALO)`Tq;q91
zs5{#4u*x_}nF#^g5|#m*G{Ivw?k!Ju)hlVM(<Z7)Z_o!P1z>BLYLz?)C2$*C7ZR;p
zt>VQ=q(}pc6~*Xen4XjHff2=QI%#<k&p@@yX7x#lE2UeS9xwc*`ex>hAP8E7nZ_e>
zR0R}55ZqvGEQCPpz(_zBTon1bV9P|@5X)keG2QA;&<TuI$r@z+FmC~@NnY!P28_BB
zL@xi#jo<uV2b$+7joNKu=VWW6goWm|Yvl>sRJ)@X2vM6~Sm3b;7|aJIdvt=vw!PM{
z*MGuwkN@r8{vQ_h>{bs00{5u*EuFn7foSP{;8`9FgdrdG2Y>aE|NFbQ+_GzKp5NU^
z)eF70yzWkS53DQ#@TvGjES_iX<)wv(s2{K;D0@osIg48*&p4bn>FK&JSf*VkCK`6%
zM0aLqW`FfcQ5LiF^B9uhN54==V)mzslFBgnT9D@u1C<`xZo20Z^st3sGfk!J7UfL+
z$UsGb(nL-g;x-{KPfF^N<XwbT<Z&pJROeKV^t%++^4Cuk%DJs*MfBp7Jgt!7A;%+7
z#DF=^CunF6w&dYSMVhYZsj}G!<0a&w*=zv{N#lGt73NeSiH;OX>x%kB5=Er07>Yb5
z;_VPQ!HlFi5uQqLqon4uq0zcr*a~r7OWKrAW%5{tJV)|aLoz~hDo2b=;suv6PrI~;
z%KXGlT{6N!dUiXDK_l|lVpCGfEF4bv$OwT0ZyRtXp_ed6PHq9d=uneFY)iQ`S2rPY
z@|*vk{^_4WgR2(`PIM=}@y&1Wn>n5@3@3&VO)#|hAi;Xng%akxLDFlKP=yj?Akhj0
zh(Y0arf!i;O-TmMBKb+^>$=j#a!1HulS}a7lv__u<r2dQF;E#DVGd25r<^x7d3l8=
zU51JH34{_jpf9JiLNCiZTrB_<;U+rPg_|?AZ1AC7S{DJRPF*RX7N?X$gXD61ifW=J
z(!vMBLPixCR}fRerOh%>3nmai4-InCHDmxI_#{A)4OOHq#DF=(9AS$*weXwuf+5dz
z(SoaRpae_OE{PKAGGGvuau{yraPkr)ln);1N>LM$s8y>hMyqWi3~7!kv{;XUEgM2S
z={}C*1X3;yNx4{qywGD+^1>W6nGA_S$hgJ$niYd%XEOL5a|r_2KBP#s7{ZNOv?zD3
zTtad9z?MP`E(3-m2B(m*N~7bF*9^(f5gaiNhJ~0B0x{n(<1`!cqBsm`RPGDWl>7#x
zLAjv>Rupoicf@WR2<jmxy(wxUm1vESQk`#gtjbjxY{>koSHB8p!@S6GHU~|h3Dp0s
zH~iMeKmPI8yyi7<gTp62@rmv1aQpXf|9Ah#zoUu_8ybS1k+wniTK-yWF#_dsOKzrr
z$P%#<62g-_O;bhGAJ1SJ2<RgU>$YU5*GAj2EhL1SRFt;1Bs;}IxM4%um63CjTGCU<
zOzY&SRV%e!E!dLi1*QlpN?X+0ve#r(a7o5FO)!j6b6hZP8H~eF5gKW?rl*PRB%yrY
zzI{xI;!Fo~#E@}*k}8`oQHACxr(0=`=LHIqM|f^bGPPhbAwVgY#BMZ-I#k)x0uUn@
zi4624GIc_6TBiwR)3JwsO;Bg*F<h5CWQHnmCe@U6D|N|urk0Z`^)TT67307S;pucr
zuD||YJnvV2g>sVG->OoLDrBe&A3-^JtEWZGa%}0?yZ-!LR7Y8LwVDRS6g<}`5z~=@
zp%`RbunqZIHs~dfY}A5`Qxe_5kzWO1E0YiXh2(S}l(lmu^qkg15gNvlbTORi8cyZ5
zg&V{h`mUC0yK*5A3&33NZs`sRsWsj;5Ys5HE{G(Q^6+H@Qo>c_=l5n=5yI()y3*E$
zBNZV#70L}2>r=6YSV@lcCCQ8zVkJ&Rc+nafl-klh5Q6}66-v5*rvoM2$Z){s!bJK}
z9(?pKg;;=zf;pdz{H)G^p_fT@i!>@-DH6gK0XE1$p$Nv21SJG8kt(Nnq-l{8E5Sta
z)UC_M#Q^23I~{s1@#0N)zx&<q=7C6c_6H-;S#rv4C4y}h20kDD@P}C-h|xrS1}cRN
zY^sQ+b<-O%zyHSHXZZ^}A={4s<`y5hB|r0J{>W9Mkz6fSW(P?10<T%Q{$D=-$=AI6
z<<FX&`M?vVCj&y9sP7^`u}}pbDQ)F9sXlRKlryJrYjJ;)CLNa@4zncUqbDr0_5K=*
zo!REkPR-aTQ@wOe!{ruCaU|68mhXfGk2oTpuvMR$kMhzXhH|N|dVqjdwBGCZ?c8ZC
z>h_KI+{f?5MXB8Ll*cA_wCxP@?7kz1?_Umo=xb2|f(X#Xq|B5<7-pvR(jgkR#%6_T
zqet49cJu|`@4C(u%ddZS_LSQ->YFXR4CBFd3*BG8?y3bM!7Lq`YO`Q-p7|>-i=nCh
z21UBGzPf9E!Hbm}l+8|#fNTJc7>PWQE7GLHs%^FOYUl($*e|FbZiCtYx6s1nlbh&2
zWvXJs7&^|L>sCB9IT;N{YI(TpF<D|;HMy`UClD!9C(f9<3Hll91gtLRQafb@y_uP5
z9+-aOcfN7tz^87zf4S4bv*^&$3KqhjbOb`|IjA}+G=7WbF-u(Xl<yYP1~KI4b!8-Q
z*DB}_QQaZ%ZI+ftte{s@WR9CA#?FaF6SUhr81lAy2|!a7aE2`xSteh7@~ve#zqgLo
z2Al$JlG-hAFpO~4B)E)%DCrt}Z0U4>VV7+OSo5x&Z`oo%-k<{CB#IKwz`&aH1rDH!
z3uqJz_<7Lc&>Dp>mPuSa5-c-O@xF!X__3a#IhPM7GW8q{pYex~OyyE@ydwEJG3>|5
zAg)j4;Y|r_8M<=hl)BP)yjzf|$;i+;SI1?L>X4Cm*zly0>a3#W6Pi5lB@8EYf!qD}
z-_KL6W=LH%_9{On^5f+q3>9I^rHZ}Ez>q`+y|_wV6eLfEBv&EWoL~YO!q*K!Ec_v+
zkbG?iX&Q!gMnsajH6Q4OLtPzK^#i`<FZ3KKp^BVBDe5B<g>p)Zb$3%DN!~I~oSoAD
zNJ}f&9KmQsUYf~>NVHOOkzocsVxS8Iq;Ue&ftb0m7MoLOY7QGRwMpx8h-sQrnjl|W
z45`L>LI4?8g`loJo<SX6m3YbH2sh;9d#pBi{W?y$G$bV)VS+U{)&kJ9kcn*MN#r3$
zFzFF#TB_6)u@y87Y)Zyu8_%PHGz~+NaI2N&os}lU8gRq5<8?RWArRRphXak)vY|N4
zx#>9awuf1yE<;FeUdm~Ud2c(D!VMZE;YcgvP17#5L`cjoLW)wHQVuayq@=D$t#M`H
zFLoB@<l#wP3PmbtBva3Llt`hJ3v(%<A_-wO3tY<}83@SGmQ>^vQ(zVmPYOATz~c>V
z;Iri^6%hlTb>GztDHr2V5w;?y+|)uN40*X{2yMxHLm{>55@E<Gdcj#bTAHI%7*s+j
z9VB*^t0I*MQ*#r}@RU1<A;j~(zB-<f>Km+7bE})HOGHz#t>ig!wYJPSbMitXg>`;h
zqYd;34B3V|T3YAGrCRGczk$OBT||a)8VID<Hi%J=a50)(tz~A6L4f69h0#dxp@hDE
z*Sp_E6$sw=`){OtysbLVaDo*_5f5FUWW?6|Yf4JU*JPrvcyG~4JrZjAlV{+=jZ7_(
z9Dykz(TZ?JO*lXx>T~22!7ve35Lm{uNcI1-cOUS26-67sLpq@sl}_kgih%Uqq<866
zsRE)PQj{*BfOG_<NRi$_=|M{9QWTIPy@S+1LP+`k?|oo-xyg+IlTUc>Zt^>K&g|^$
z?7ZihEoaX;Bi2P#aibRHmm=2D^)RA_a41nJZD}bcZN<nDOUX)$+J&hRCBylTsLU@C
zwJeD@ind%5PK%eA=PD&HH5}SDp3w>ok6{!Re$i71-JBs)+L-EODH}aSY%~d0Da#TH
z70E>s!*Ey<4!Zm<F@SJ0a}?FlCO76qa}jo`;Vu;w6|p!WGUW;>MMjgLO=@<d(~*`X
zGiryIQhrMPQQYOoGs<#;)K*(Ve=5}?UIOsa|K`^(mt4dYEFM;tj8kPxjm?B2<o)7g
zxG0`Ue2#B%@bfc8zv6`9G50*&88tM*Oj$<-DWrq|Ne1M%z(?n&Z?>VCW{lHRouf)4
zP=3K;Mo^##Nx2AF2*((l+R-^J@+9Ms*vx?)`A3lw{9}o-)P~8hFq@k&QaWwP?-hak
zE(~LXkriglqrBLUnbs-JpBV~9RjGxrq}2kxUKJgILXgxzzlgdhFK#RvSb`?ts1$p6
zLv^f*Guzb|3&U(a7KLA$Xl^@DXfOTR#gbIS8~G{Ix@Ld!o}el>HdB@6D5z=VM{1R3
z+9RS!^pl~}sp3kh4vp!Q=Hi_EC_C-E)6qvAogyPu-eSzp&DL71ZJnw)jYUi!uIX;2
zqw(SAi?6<HlXcf!YVyer^8zk!gY<!x#@du8d~K*}tWo+z3{<%KK>{8GhydXI#%m#m
z_3YilR-YbTw%DsNX6n<kx5YX80zbB+aNx(|b?f8Rl^=B-=Y7wM_a5l!Z(k&NXYe@B
zyg%s4_XfT1S@1p+3?BB1slR@sXV)I@d^GHxUK3pPk7qsU<SWkhf?EAEm{F6Pwh-wv
z;uHD?iirs$Ez&jKiD{)%TL^vfGrBJ<3|J}6{ys0ZY?mnWe^?)n44C3H9+mFnsckB_
zWq6klC+;?Mz);_?9<N8&aXuc_b4V9s(nV&QXS+!on<On(z5nsxcLoo9Z|KKfk>ztY
zGYx%bw&`b_yw7;Pw4y}gBk2PN**iI8!fqef1I704y4YbpMby(bgt&Exmv!1)I8M*T
z7kGwzJZxz1UgLh`>5Q%e?C`W}wehTd_Z|bg^?c704TA^Y-ED&2gFl{7uhzB8t3w9A
zX_Vii*9U`#z2IBu<Mw{xm6u+8=EX(>8xgPV*w)uu9#!cOzg@TP9?h21hts@pv+Zjy
z{MnFqG&~qS-Y{S2M)qv$33#{RPXoX<uQsTpPv-68^lqDCebktl`$Uih$~HaR=fg;C
zGKrZ+kDvS`)HN!!RBFAl5o(=SXl|25HuN-pgvR&m(fPT$x2-6-q8bsuA>Vi>COUm~
zqexp!Pf-3utf8rqicC(w#F1KwsgmgLve#7@yQG7m5L1_<XG*t?Lp~!3U@7AX+j-nh
zlx4s~X2uz3bTp|j+NR2OW_w6C{QicA{pv6rb)`~$o_8VLbmL7P6*syfNsnP40k6ZO
z-}s|UAvBhGWN4O3ADL6f*k4XZlSrv(YxXA#rSyv|;du%PIP#AyMxqNL3x`;vSlc=X
z=R|Eg!{nxHER>6*UEw=QsTV<paAXi_iO<7~hS5AmXM|~{p$w@t&~IU9BK<5OiD(|e
zmew`b)iAVeU`@XKF3ke}k@n-dw3N-#K#^w;X4)9DNoF8kWC}qHUD^`MX<(Zsl;1AD
zLOD%wOvTmS(MnB9mAZ<Zjb~%0nu<xPbLG23&U;?nsM6R|iWDLiMq!L>R-S@|1BRJb
zC?16bLO1I#=+G{FsrgqXA3x;kl^e1ASn4XaH4`+Hy23B5&MCB-p^-6o)oQu+$7Obu
zf)P_)%!|)qL96}Ta+~!t!zq&@Cbu0?PGv<23!$Jyq*O<V6ndn`;u#8+EtgaDm!$z^
zN9~`HD#wg|HsnXt{6xhfA3g!CkgJw70Vf0|;f`97+#*m;6J)|yHfDqw-zEz`Sx$2)
zI;KNOjTB~bML@zVRfIFrV;UtZb*Vx@wI_P00)gqLr!C<Tky1fHY9Fa`%-BF7u~Iz3
zDcH`)G>t$AGHT&!361H>i65M%EJ8|M&Dshx)j1YdqthbtX>xR?U76JRP4!=CBl+@M
zQyXC%4(A_g#h)-sU4_6;y_8GAa>*Sj;gZ%~wvq2h?MMqYGfP<prxhJ3B*3wt%}yFr
z-K?i0x(F*Cx2HzOj*5(w-`v2IZRU(vM0LbsWU6kCFeA$2kY^#`{1#6A3hk7nVELs8
zr=Z_AwKzpcF;8(sLTj##Xc*07xvpY7wWC?Eh$)hWl;$&@Ntog1M@eq7!YLX8fsTIe
z2*<E?1)F;}H8wY&&RpSYY=`$!?`RUGYR%D#44g(<mO%MYim3=1q+}_GPA>UEM<Kq%
zX2-}EzmZIf5?vuBA+fX?p%fWM+9)5Xk;OtT%EDYiTyv$N2@v+X6w8Z3b+M<c>xG|-
zP}%&Hx-DZH%IV1nrxb4{MpRBS0ag6tAC2#%X(rA25z)<MIY;qmNU5})O!+O+y0{U)
z5Y2j;X?iHp3TlhCW`Qq67q7ZjT{-y$qoFv;sY)59b>$99WVo(flSiyQEh-vHk)j{L
z8~k8SM2ut04;Ps<xp*eOW2|y)=Y%2_fm|fo)zS4fqQT*)w0O9Az#uoj9or;M3&D)I
zg0O<<{O)pHZ)rj_htrWgN=1OM9+pqyv4VnJy-rINBo%S=Im9etav*_J*TTooVpa<`
zvU4;I+J+D5)>t{}_Hmbs{&Lwy>#V!jBoiGu_oNe#H*U9KjYpxq#nG2oY@GBNZcB+E
z?V^V(*E&c53FP~DwRgh~?lFA8zyVW?H_>~ZTkK=f`_Xt^x`T^%FxZR#;;`ZWdi!l3
z;psU}m+^-5^5LECy~p#Sh<o39^Dj?6{m+42hK$=~{4Ns@82Dbd?!zqqS;z7e<<N0_
zCa3F=;U9Gy$9BTT%9yu48UR|w8)?cGzn;S_Jhr`2(z=?qS%?)rY-UU;{YaxLY)j~_
zUB(|W*^IN#+G~6^f6%A5xrDED59-xt+<~vZHl?SeKOFecup!UC{8D4RY4EV|Ja*mK
z=1oUq+%`l_f??Z6!p)|hV3LU@7Mosv>y7t(iKv%%Y&L@UyIp#G<HNzrPBQr#GtM}j
z70N+xzTeIE#vT*A(W}qI6TJ1|fcJ(B9@xct>ELcY+CF^PEOUHUobqP2UgJ;HXQIiv
zPdM@5uH6R>8$RX6I}ZHly$`w%8PAs2AwFl$FFgkJ>VE&N{dd{zM;<O8;u}QXNz}6k
zC-oe!*OO1aWGA_2NHx_vGQ>DbnI7>TGUP*VvGKJZe2?chBBoVay<l5Q`t<2OV4$y=
zcj?)C9B-4eI@x&2ys^fsk=^uuRv7)~SKlwfw-RYNlt;Vu=-GIAsKx0vevhu*h79|d
z1BNzMBO9I=628s0L)=*Q=#l-QLyS#)r>U_znL673w(Z_*=q+}->crMTZI9bGF50#w
zvvdh5QI4)jJ{P7HkxH*t1P}xq+x1~Zpj{_HtVlN3NJ-(Rw`lGKQwss>6kf=!M`6F>
zE|1ygnEg-Z{t0d2(!F1V8Jb*5&|t-E#r-Z$4U&R2l3Hy|#N&7_MQ^`$RAc%%?fv`T
z|DGl=Oo|3aN{Y6|Z{0N3M5`-Ibh{K|FcD-@mlmb5_-ZL0C}raW;|ZFzi!d3*B{I!J
znW!y#Xj3E+CfzM1+(iH%r^u(SMkCvX3yx}uq^uawZuF2MqdwB3iiXmr2Uk@c`<u(A
zig5gJej1B(26OnBjvCHjoUD6ld;Hd{q|mA>bTa|GUS3(8pdvb@cq#m{NY`Aj9UWJY
z=iB@W`32)o+F~9v@@ujm$EhRQr9~lOAA3<d+A+DZD3`ou&O*Ek(&cK|{YN{0^7cmN
zxj8Hgp8=Y%-g@gk|NIN>EX*lwYH=CUU#>AkY7da(tJs-RBXUyKF;OC(Pb-QuEy*#7
zfCfe^rD&UZ=9&GV_*qXJ(NwLVQ=${?x8_6IR$6(bUmx*nO?c&%SFGVu>-Ib6xH1X5
z@~QGo=VzaJR$Ef9mYNYM>rxRSyeyIoZSgP}1!G<_)9*q6N0RGQrR>LyaIsl)XmINN
zp^PbwEdtGiACcv8RQRl78#>NW9IXm!)u_7W;{TCWgbZsPizQS^VIo*tvWO|-i}nnY
z#TZR+MKxR4Txs;vAce0K!m<4Nep5gF?YG}fSffhsKt@u~F~+1|RPl3ZtWr|k!c+o9
zzS$VGi!J)qRb<jS3QNJ5T?7=A>!?N*IW}jttHP<`be1^D{&v^ENQ)4o+0`2hi_h~k
z06qauOY>tPJ;fWLbBZRMS`=Y3Z9oCYELT=@@Ey_lAyPzf1szL!qa+~3jL!>ZliSe|
z&{SG-6))x$BDv+1sqs}fr4>cVs0pQFKQT>nDus?e^TVk{tIeOi{ZmMH0V~B+MG#zF
zdaicW(Z)Q*6GJHB3dhvaPIwfjio1yd+6dQwF|s2)_@!ON`GqrLMH*5rQIRuuYswWx
zK4pm+x_H)vjGjV~+{8@?<ra1Ej~Apc^6|$Xck8RDO%-&K0li|?h{l9dh8Zz~0W{=t
z>Zr(n<d+qYNK!~GosKwhrt17&R=B*Xh4FfSoLt@`>QBLxO>rDa>wIL!Yb#_an|Mo)
z<gy_U;R28mHIEL5p3(P7DlJv#=g2X2p%LZx3X?n{)*`fvyCihV#-#yBv$k-E6;OL^
zuF#}xyI+A!N$%^5W-(HwQIb=xBgVXT76w_=x(ErB?f~89@5UH_VLlvB4~6mhq?1l^
z@x_;rk?TrpE`?cAyWc(Da9n@=^<H}EWflTLV}dql5M11G#~o_SZ=D~V9>Nlv9hni=
z;iDbH&#A1)P%?^m5}kgC680M&`E*i11A(OSt9{D&++VdMlE=wLhALGYlS_%ZP_3gm
zWtc1tbUovc@eAsIV{mg_8l_Uk<R|uvG&@$o{H6*bBxRc+5bt4@iziW{oG!K0QbGs)
zN~w!&B8;JhSVS96@q>|u@w{IrSA`m5=jb0*N}Hn}S4GBnep%B!FYBbF)D;V(wq1Km
zmUhLl#4u?~+f%CfSTxWtsj+~?Y5c<~w4*E^r^RHUVb!Xut$M)z2N)VfpjmB8(w`0T
zTC#bar%@i)wF%CGU{?=n5AAZvwO6da_Sy@KKkixc&oplL;X^)re?0GFvcu3DA6@$6
z3>T$@70B$>%Zk`1^8^vf%l0Sh+57Fm?_1fLU`Ve=UVZb`@x2_<i!I(AXW)n3d-i#~
zN3Yx8{NOK7yfnxI&7QKf0QONAn=XBk+d`TLhI>rV;~U?aVw&N7C-~;1A9S&B>XG4(
zhkxwrevQ3m<9C|?v@F5-X}m#G46@u|8|h$6r0!<esp)l%);P@T8t+dW^2!8*`V8+e
z-pAd05AJ3`vrG5hA9rc2Ja*~Y=#UZ(siQ67?6zC4@vwU%H2T)}(Ba*Ck1uQB`|tLi
zbkczzG(Mf|;dGlQ?UX$9po9N%#g!AbJuAv@R{DGrDMv-dYc$C7^TRwUKFoSl@3#Ag
zgNIJgb%5fYk#20Z96YRd*YUdz>G9Ekk2c$Vvkf=i$X9Lz5w%z{_Kl@M9}eu@-S>02
z*Ye;vOtiq~!#7qEJaunr2(Mu}R}AgaQ*?FWqv!(%_2|>vLT#5pAA3S$yvZg$=E&ci
zdj6?CfTWF$!7D!w9%z6la6k6&3qE3QaG?@Ehxc)s``UYIwrUy4%SSCWH=^6XPv0u#
zO#(^j<Cuo%+NJk6<26=D+h&6w4{khm+TiN`J=E^8c1xSY3?AB=(#Y)ArDw06bIm=s
zc5$|!z#^tWz|apH>r>v*`Q{sM=v0QbJ;6$*=Q!QH(OK!z4}G%MiPe^x<9kDW+q5Ug
z2zdQX-@bjzkDlJhsayuQ5+YWJoF+HN*x9)Hh7HRS1HLL0(MhDP(%<M68qH~&e5yr%
z108autFF3Aw}Gh?Rp?~VrWet`sI`!x2UTfo_M@dAm8&486s9Al(;QjiRn0yHuJ^@J
zMLPSo5{*L|!fXkhR8AEcG0{m(E7;Fk(+n3Xri4kJ|D&00R1vUZ#ePh$NKacbv80E5
zdRe(>7Dj{R6>T9v1Dk0^$Rfr|#8j=K7>u7RHXz6oQ2PT9JU~88#*e`b(J!9VKJUEq
zY71>@VZYy$4aPdtPCL!3uf8_NoO7IW_Brfi5*al#Jo4$P1bfmzd}jD@W#MQ7C11!K
zUqwIcu)|bgY{5m8#EogGU5(~Qti|Lg6-9Zx7rMyD+p<#D55X9@nIyzKuj;pj5K|VH
z`W-Xob47U}9s8BSajnwhRJ%CGk%c(;^r%R}ln}HbXd}-gk{S|vL|2eE0bXH+71YQE
zwke)fU`n2U{(0lz;=|NMiK>aU)0PV$Mw)>rj?Pu8mJk7*Q@^!0pIUqU!L~opBEKw-
zqbk~|%_&v9EmysKl50SgBAmuTwL8s<TWn*bh7-nDBWS2X79~`XS5`p+%Pg}DYok*|
zWMny_iOI_R->{gxDqNft5=apW^F!cB1n#=)uDD$h&UC4y6(b%MJpP2^Px;*`7M=Ma
zZBZjVs($$4hnqK(VveZcKXTGi$6U{|&N{29X?{~KVmwosQBdO=&~P6F&t;PzuA^G`
zp*f2}DV*rkcHZM*{el?<Gbop(EwMpk$(vX{_Sj>Li9$+<`4#*+F+2SHOun^ELvy`_
zW-Xc+foM}uvYaGVBk-vu6Cw&p;>e92RYy-wn~x<+Lt=k(ZfQGaek}6T;#*ClQ*+ei
z3gH%Js2zuY`~>T*zuw+I-#Z1BjjD2i728ss+z8O%hog-EK>0L*OUQ+kA3g2D*ToZK
zK!Q(cMFLKoOfzk=I6Spbt5oQA$N07|X)tFN%3@XFmn)WlRy(Q!5+Nu?cI4-xp&g;P
zBqaJl881pFZp6ui<+4F55~$t0Jo~J()uIUDL^f6tYo|G<t_sbkflPFgEbba<k&!Z$
z;&Wp^xpv$<^x#8uV&>W#v50!DGUTEvKZkmA0gNb*!$R_ohFhGEkRquf)ww<;nsZ6;
zIRLJ(;tJk;>b0l7!2Z*p{PgT|&i?(Wzvmn)fPR;_PNg*Xfmp%`91;yKp8oy&cVtZX
zffc$CBbD!nnNsEI%4z(M>3!dBcd-g&oXT~5`dM{S`Y$o$%rnmv9P$f}v<eMu$EOGL
zth3J&ggH>dIV~4eaQet2kGOvL#8EC{L?!KXj(AElGzq+ZDbD0oiJp$Ge{b1iSbhjc
z3Y{tv&1ghUDUongfm5ylOfor@t9HLKPV?`gIeI7`Wl~U+p~DrW)!Xl|y;n(K>V48N
zDV3_*9sLj%o($exU2z=^8l^hdPwZD#7E5Aw%<!8QYvsn;^wBWlO1t*jYZdWZ`-usV
zFE%I`Rqc!!#VMVNC`cw&ExYWpn5s~<S}>WdUa-v*SNUn=s$Fg*9W_lK%3ZWE$<=}&
zGt%1S3If_?4!G9ZYgx47pFf`U$9z(p@+4(xc62&YJ&fUjwAux)cjkFE5N4aCAQ?-R
zYILe0`8C;w-g2ugpM2s;GVy>?2&WXPm%Ojja01|{MM~I5&>6lWu3NwI3^UB22?{C|
z2j({-Kwj-^VB4*?-b#!Om`d>gBA!%A?M`_wCQ-$V{K|;fM&alu^)iEenv>?Acm8?D
z9&@bgGkW}Ra{UnMC2VTRytq`2a<#fNmJB-;WT8?WS(4l$6D4$tLU9W^*M>GuGtJbO
zTym-FpF$QYC8;_#bW}yl@ISlwTBb>zvmxGr*tlO{?aZfWhIP5@hO5?HYt1>w?eW8@
z`%F3cMC0}7KHb#QOfuOwy)XWaS6+VQ<rfC^XnffU3?NDhP{oMGs}eu_aPR~@KDN(t
zVE1Rb_B{5k$9&7>!{Osv$?4r~$WZTr?Bcy_-<)-xnLn~_*?6=Z$1~GD`{FAtJuEf$
z@^pE(=g&Il?CGYPvGMLk8$eBitrF_iy9nGq4kI{P*Yg3OF4kT>jy=5FN0tS>Ce!@R
z!_kdo9c1`0Pn%mn`>3lYsC5fI)HBRx&bDWk8><PL0JjoxrxM~Lws?ashPmj_hEjvi
zJ`K0DN%pXPa!~JaduwU$F5TX@)3J+hs}FCy-ch`37}a=S`h#9W$N6|@ueSGN`b4<>
zjf|8v%u3#nAw4Yxdf%kgrEXo#7zj)}+?uDCV-D`tt0x`S8GUxV(F!Hl*rl<{)7vBU
zBswL>w*9FL>^{zr#`loaI>@Usy|!$)*GKxmdzW|Le}B>m8d37YK_B(BiP1NIEcW`c
zdiSn_1`g^yo+lTEZnMqS&pr86<2mteU3>KI_3nW8yY}qCY5qUh|6UGg1oy!otFBi!
zy{Q*+b|08U%(gbR8RHjeJQzMiJ9_B18kYGy56jxtnY+xn;Cw#0?ib{{uDyB;`e?9E
z#`m<D^y3f5>obA4xyZr`AN|{7?&x>xPCM*ivhm^IPrgHHqb2_^fDy_L9oF_a5i8Se
zxA+`;`p~?7`s2n5OFGDgyV?dr3MxWIfOch~U70)oXy>iB+S;{Brz}juesRK5etMkn
z5oDTA34}wKjG@c{2OOYZ)W7OiNG756K=_7P=bn4+9COTJ%%oqGRPCtu)rk^ja|lKT
zM@0|)sq0g%jlW^0cJjsM3?m|0I^Fc0IzMJhrO6S9a(p_YhX4&!jaY9qQ)Ou4_hO_}
zT1}x-GB^~bfs}-g<5PF{-Fu($jfyCdrJIy1shxm?V6X+j-<|wB0#Sm=KQS+5ofiFS
zBuOUb#c~3cZW)Q-c0D)c1_uT!G(>XrkMvxA`Q@%j%G;Srvmv#H(61pZLC{PL9l{YE
z`|%NRa<lyC8$*)!)SI81yC|oSHvZpc+ijkB{0TOsI$6at?W!OT5yWB=M`aF=2_vdF
z^w2~3kY?JP5}-jTo<|t-ab}u{83PazYpyH5NSYk090^dHCgj*$q#f-S<Y7k*q{q+U
z3Urw<_3X3HKJv&TjlxwO<;t>3LgXjNQLf_Z;yNR2dbo}a$t4_`9%WMtNklO(Zf|E>
zIc=-+lUYzKDFvHlWYI}jy=X^CKnQl?$#w<V$>%9Zm0ZUnuZYv~>(HzrIH>{=T5%k-
zg6K3h^`_F~wuyi4P!yJ5!EeDNdK6dhI_s?c)?05==ywtBV&3OejPisApKCA?6)pX&
zbgD?ev=$KOvo>Il&D=#Gv!ghQF(Y1erB21$eB1zIQgH?Sp%I+m_l;VYmLl<aYFD-I
z$sBdmQ5wi0QgW3Fjff3wLnwaZjW>Q;Vf()+3vLjky=F2e9DjmRF+(nb4T@nB&`g)Q
zqr{SYab6Ye^|qZ`E78{^E4C>`r{jo42&gN+RK0U>pM4kZ`-^Scw*ACbW3#bstFdj{
zR%143Y&S_`qha^mcg~sF`|r$jGR^m1x<2b#U$dQtk$7%G3vd^ew<?>F*ePGK@Hk6i
zst<O=Fl(Y6ovqZ+e$B&Cr}9#THY^A|Z>c@!JyoyH;A(~I%a-+uBIc>uB(y2er>FXe
zN5b9D@Dvn?Z@Lfq6xesHbIWB@(Yc+;bZt~=;K*Y_238QAI%+N`;CRoJeuJJl9Ol$?
zP{L9n3Sf>nL|^gHi5;}o)U#sOooB>gP4|g8tc)s#5lx=u?V=D$$5}P-G~li{;|$9q
znw(mAXGC&3HqS7yz*1#8G(e<Z7KwA0V-FZmxc|j$8sH-wr{*`K&IK`omwoFhTK<x{
zHv9MW-0|kO3_<<b(jD*~`fi30tf9(7{^e!azvMBDLrdx-);c~GnHJSzIK3Ypn^We2
zy(8*ae9O_Cxp(pJEBXx~=##LE4cO3&q2-IG$^ow_0&lxfa4k)8l0*iAGe0)xt74Sk
z6yd<I+z(0EA(t}eB>vOtIk3Bz&H6_u3*#X-sS<52<XXwNze|A*{%F#%qaWL~{Iodb
zuJ>Sq>sP@-ibi#%lvS=O&LXXXll*UxNdvV+M<<<>HA>cP%t9y1tBNyUD;nKTp)6H{
zk_$ajNNKVACMQ9%GYc;pEMQKbrdm^eBd6Tlt9<OdzUL~V|D6hANis*SEE6rh?QZw)
z=Q9FJFDtdZ8~H@6HU;t#=;&MeffWD!IYqMEU_8FYLnkcOJn9B2CVw?~9Jv%kx&A<u
zBVM}h&?FrjoKXyFwAG&&mcGu<*K-(frK4B4${%tC?w4^q8@vuCAfdA~c`28(GdV25
ztoXjxn)S>(gda@p0Fjm!fgJoPMi(Fxvxfa)O=J-PSzD$rX4n2=q5SvUIvvB~1A!|*
zKd+=f;T%&7exEjO34Lnaf|-y!W6?Ne184&_F0nNrk()7pL$)2FN7J_*!e~e^Q7rGu
zO+%;aRte>GF?E?iT=aiFHhd#=iJbDU1G^Sv9h3+pV7H6G(podVlim6F{ngdJby6CE
ziCiRpN$Y7gHWfwY6k-pa7bA#!-7STveb=P)E)5T5K+DzZk>EuI{QxaVmee(xc6#2^
zSnAuMTE-&RiuTus7#xE45oTg(vdsypSc?R;oQVfEs`wOVFh7+KjXs~kG{HH+|EwbH
zPmTvkBzO=yk}+)bs$u%diLJ)$vV$<l4V<#9-+7QYwKr_e>kI=<&G{co4+bJ17ZSRr
zo8tm`o_p5w@ikI1K69%7{++_d&2>J;`~7h$h(QAZ{j5IC$K_p`Zsl^lqsd2rfGXts
z<aPahtlhL@&@bB$`2E+jgpB!tX!nMjs>_n;WtuZbV8q9Q45#W6MwF2Y)}DIH$|k-(
zNqrAHRCY3*fVu+J93<0hT!-hw@0`hG6P1RqmvFM$K!O5MOPwQXRhx!JnkKcO?U2+N
zGcd!mt3aKcNs-ntz48=f)c^jFw=XB-OC(8<C^|4ysf8%idGm1{NYadn*4H_8BLXPj
z7&a30C!r%OY~hZV2zHotH8GhbPP40Y2w}~=+OaFL1UMd-uh;tq)Pkp_Er$M&F9q*j
z=d#poR3=*{2Got7%`)-GU|wHfg3VEl6<e4s;^NOIA{C>YsivcR&@<#9=i-Z`)htJf
zAum^P@b1sGP22Sj5l(O4xHrd=t>UX0f25XWS?sf@%VX6OTT!8az%xNgqD^X|>}z1&
ziIZ{Xnl|qC@{b}2ULct^@-Iw6j(ER0d05$Ja{tOy2vBQ2C1B3d{@`A9cu)VJD@puY
zZSI_EVF6{f)E*T#5*rhl)gP6zVK|;r;-O13J>y=yf28RzKm$1%t`ihn(7bQfo{VNE
zYN|qPGVXT7EWZlmlGx-Ey6F{)E%ylso}jFiV6!aDR$G>Wy~J3QuKJ^o#aW0)HwlzZ
z#Oy4kskWtQM=;$*{TET`!6Dk4<V4jKg=~S>ki4+YcyI#*UVBEaB4*Qgs_{>hCGOB7
z`<LdX!@nw?yQQbgGcnZu!`)L~b`wrHlp2^x2zcY)`^c#%xD0SKNV5Z`fRQy3QI((h
z7=-!$PwN0uX|x%CrCcv|op>W3LXiq18i<BF4wXN<rP}i1D%uy)tv0_OcD-uTF9nG~
zU~x=A?%73%;D|ZSisiW;#DAC4HBtPS1m}<^>>@O$<1MaB)@kuU{R+CNKV*zY&W7l=
zJ9;9<)c=}amRKKVVllKdG;`w7#I~j<Yrr~WWaA`A={B+p<iPwmI=o}O2*aGP;rT?2
z^cn*<C$48SRLyM+qopvbfL!peuscz$)=!6}yNmQNmHa$cO8rg;r{?@vNuUuB*-Wc%
z0bjzb?W(s7VXysSXRB1h&2dS;`qwHV+(n=TQ~KnDOi3SITQ2AoJtt9jbGgL9z+i;1
zEwIm`tBfIfdvE`ZZFr#ccO&s|xBDZOoo8PU63K$CHjks#dq@<wKi?7<0ce#-%4jaI
zfYG!Z6DDGBft?k9#%is82T_3aJ}CAUW;Wx^9dnvDK^8Bmv$*+D=*O~ZwXLO;P#y7!
z9WiYXlf*3uxm%>?hCxN>i_nemvxo)h-g@j@h-sKZY7#ILv~!DP!AN#1DO+UJ;AEg{
zDvsT4X8xj-6W)K&8bPoib3thR^=qIGRa8xjl>q!pgBRe&^z|o%Xktlf#e{(%6gyPW
zCE`TeA#E4_RNry)lHq^`vm`$Jnc9ygkddaedt1%xxv#E6x05@y&)?f}F}j6|v4#ei
z>La6B2xeSb2IHbquwG@Yzx}zh4K7s+MdLCRf~;pWa3G1_nd4N0^ah5}8S`SIi&|Zm
zMqHa`<i}c<I4=zsV9>$Cbuy7542Ae-4D5ZyU$4!7$#Z_k-|c-0&MSiO@v!#`vU^bT
z;gWWyr%*RXc#<+wrb&H>!R#;MP{Mb1BArrBSJ}XMR1Jtkq_~s!S3ycj$cMCgDpj`8
z%&BFm=uNNw_xTP$#ikY!SnbISInKpJ6z)}ed#%bTRoYh(TOpwgR7IQ!Nnd35>q9JR
zl?y1*;<mY*GeX<J(HZpwv?D?x6g9oC2x^>9#Njgt#?y6ps>>e*DheecV}`i3iK_9=
z%nXvDUhqcH-lxix+r<y!G(Aj3o;ar3ZG<a!K3pFSIn;NUTQMyUTxiiU(A_S}Y+Avs
z@qT-zJRhRt<u@j&YX4z}hXNUqy@<yQ-8A$l%-?TNEZu{<pf8vc<}~4C(6h$Hui>Vf
z#nMaEu;_Efu;bK30XyHuiiPN+XZ+<C#o{n@Am;>vLWC#Le@<(2WWzAe4`gS^=$P)Q
z#hMN<k_^6-#H`4BY!Gh!kzO?1MO6Jb*3!Prl&xDVO(9tY6!_?WPB<k9qUcJ@=tk8e
zlGtgBSm*JA6SDrJ%O1un>&w;=n)?BKzD@|0i%P+(PnNszu#v1}w50HBdh0}O_RA1P
z3@AaRkfZ1!m!h^{jxMh6=pS_9DrKSN615Yopg5}x)=5j1AfY0nVQIg|l(A<09<fG!
zyHqI?KD?-)2ppq0u|5lTB@|Hk`N)OT{XT5)FWUW{!y9LPyLxhPRoHh}-gbg<`W$_o
z$WnDPu6;Erar>K0UHJY-*c}d^C>TPn#Br(MUD$CxD`c9ji|G|t75jNw!7l+mC$3by
z2ZwjKl2r}vnpqSTzZS6>-iX>@MGoT74Pjw`o9+@n4o;A~8z_X*go|O$l%~=A@7#|f
z@#_P=%!|XIJ5-5Etr~tOct&^_4i(0)@J$#~nr@#Tz_F+K5Y77v4VL&KndZjrZJ4n5
z&WwlgM+Ml4wpWl(|CJydfXy7`Y|S6Ua!6kGqam@5u<8nd&Kf)5r0AQ&_e;(4`sO=&
zK&$=QoJq5kzI`|JoT2S#UthMc3{kfqjHoywbv^pcRtD^BlBPhAm2u53Zfr$U9i_Dt
zW&k^kil|^mkwD(^`DkNvizVYK`7{2QCMiJ#Z7QIN#d6?pU={n&q;Uid8s2@ZRV=qD
z`d%Wtsk810T8z39&4b9G(tX>!!Z;0YedP^OqrW+U@G~(ZJZ3+d74bN5YN<}Y7y=rx
z^LC7&!22mn$0FanX%suhZ9x``QG_|ebACk*@@Hw&sKGk^6Uk;K3GJ-o*j*r_Hk9r(
zMB?35&$Sqd2w0(slP!#^)~7tn_tND>1&+Ay2qkzV;GFqrk<D^yKHm70AUpg1xZ9~d
zX0bTuj88|*^gap5Bz9zOR1*H##G=q|JetfsaU7NBH^kfD5Q!Grv@(c?`}bBS+vq_E
zDm1^19xP`sjsWX|uKfst`tMg80LEmUZC#<`GD!tg_v^p}LurkC@7r6k%?B!8Hyv&A
z@v5wWkqj2Z$t{MF*L?Ul5)a<jrQHJlkB3DbBl)QQcz39KgqL>sj(nIxk&tZTC*Xg+
zcW(%xzVFOt8cR#pIcBCK^J_fc!Wp}^wGhn`wg!ryzmV}OSdL-w-)q1_>~Yn|lkjFR
z$SyV0C7KSfRWRHx$X74;bM$(o`o%Nr7S|{W<yM=T{;2h#g)TgS76IM}fu;gZ*G55=
zkp;<a74qGSYl`GnD*lr4+}iR9bYW(bVoQM$&^iU}wax2y4$P$hpPW7a-`k#yg%jCM
zA#nee+o!oV?U)-=$+O66)LhBUspe)GsWU2TY4W`eI)J0^_8r^pK*v(xJcfs%z$$tl
z0v;T4lKw8q`Nj7aVLeCA32bk+@>-Gz;Tx3&A=Bxw(k5-*>9*(Y$M634m;G<V&D<R~
zp8Y)s@C;|-dVhvGA6N7OU#5)kSz+;k$#d*nDsf$jt;j<V4%@c|LT|WlPGCe9rx<!`
zjzllN<?qkQk25^BwQ7ue`bv!pH*c;Ce6$<w5c7OJFE1Oyn}PUK<%I{x*)>K?{qGHR
zXzdTre9cE4<L^&%;>cWIL}GL*3Ortq_3Q%PoyQ4S&GjX5_i58q!)ZOGDHLRzi&=$z
z?i(n0z+1U|!8zD?hLnzyi}rVXuV(0!pzV)zqmw<VvzIlyeF~|BK%U@sL3^(}@S^fB
zas#eEg*tx43jl?G;Ic;-itzi*$Mg1Iz$XcBz?oeetTm)rm9V0?ii#z3qp~3qW+96m
zdal;I7dU8qMe(Xc`&tz!^mv@(xZ}TSkRbG=%tJ=XnF2pWs41?*|56IH1YlyfEpF(o
z<;v4Z8wxTDYv8|Gu^2y^wN)rf>M)bSHMzr7XDZO-J&ow?S5Si+CR8vMqD_^hZ<%H&
zSCslNYb72*D4lm4ZKCghn_Y7u98|;iC;Y<=cDQ!Wt$=YgWg+uXB#U4fv_ISCs|HV-
zp2DGLPI5T4j9{zzQ|vlQY>R4}T2%WJiX?H&a4q2t%OQ)<LBjsoZLBdE8)$!33iJGg
zKDvELh0rekoGzAxf3=+jW(}8yh0sH*SX%lo-**4*1HG<?Fe#4gX|J4cC8>pu25laG
zIXUwXT1+L6tV7q6(;S=lrPBPVQ88I|OglMV@!Fz3tFRiKD*Y(SXhYxeneSECc$HIF
z0d8_g6!DDW0E>ZP5+h-<>JNVI#c-Xdc)>3?Yyx)*M_MScU?`E&<|!9ktNN}tqA+Uo
z(QvNw0Z%%Xn_htja5T}!rsm+xVh(VNk&GF*HE4;p#yFE<*W_6<@9J5la7pxXnku+L
z#jX(%k~!M3vO5@H)fP{k-w6Z`znTeYqPQucm_>fgbU8K87@A0yXYASwK}c7TDfrKy
zG4lP-c#qB?A|;q&Qbj?)>#V@FzFCqayF{pjsrOhM$Vv7cZ^T_`d__|W<z3hd@H;Yb
z&+~Y-2DZc>Z5zISzTf}c9Dtggfli%ee(M?|arEmtH7m+w)fmW$`bP2c(D*P#p4cct
zE%EvR2}#J_N+(7T(i@qylT~fyq%IJAVku%XDE+lsK1m|Y;unK~&|EUH(-BPO3c>}*
z>mf<nDB#7MfR&3oGL*%Q`wN9zbN7ZUbrxj;6&M1p7|F%N44Za37Uv|Fu1B<^5jWd5
zzbv7f;xfcC#3;ldg<GlR2uuo&p_d8pcA7(?n1i^WcTBz!0aj!E3T&g8l9_^?Wzy98
z{Oq_Wb#JayWQCdtea-7ab&N-sU+@^GR4Lm~VW-(j$SUHic(D2D<uirg>FWikL(|jr
zE7rLs6yyw=t=b>oUVi5ftI%KP$uK1qrNm;I{J=t~ARh080g60aPiqZrp&LFF%3`?N
zx66(K#EOGQUE8{UR%}t9;9HV7hOP6@Ja<-ITj)PHU@<(9hUUgJT;O=d{mE2M6bcoB
zu&<)vK77C>l2xNt$*mtoC>27v6@oL9!*rLa3{#?z3aYCDYhd{EVAwhNPWD1)1%D~T
z8CeyD3ko)$6vyD7i^RPwkbNU|*>+zIP1}U{<6)j{E^Ekm4ycYU)9~e!=-QH&AcmUq
zv*5GfrZX_2V&qx>@c#Fs4b>zEW|^fK@3)rl1X-Fq$dnti6lK7s(lt5Ed3-v4L6|?>
z?St_hn^d68D3Bhk^Q(_W9$nT$J0#`kDNCML2q+63X(1FteoF?+iob-OA8tuqXzq@<
zu@X&UYyNM13`;jIBsjU#oJS=Xm7_zJUGpS$u2Tr;au@}Mx&6fSBvlebVM2@iz+OC7
z#N@-S%Z<At`ppRSthE#!488(=86xio#AyU4A4s;teWW45>o7?=Hh9o7%RJpVVgK{(
zn&#!CB!M_^=$88mHG&8s1Qo`X^i;hV24g^6fN9%kK>j}+Q6Vs!BHUnz)o^9ip^Pc|
zHqs%9xpLK^(;pO3;>n+_P@*Pa0nwK5xs2vjNcJdyrdayLb{fe9`Y_B)MIJcXGQSxu
zYTt<ft&n_tolOl4KCuj~#QQ5x|K~p{YBU}KS<txP`!nCslA6bcGtDAp!Wg0FyE8W1
z=wR5ybe<br)Ss*lN_jubBskb-xIq^z1vGYaJO!}UkvWOwHHw%G7-Fxzu^b1#r*+Hl
zjVz07>lv<<T>qzaI9g(kGk9vprKL$B5W)(hq2Iow6KiDG^N#O#nBRaPmTOa8<#n8{
z=Wxpm>m>o0wr$bmIt{S|z92Y3H;t17Zjr)~^wFZh<bqq{g_*3VDADwH+uV=0!-NR5
zovgY!?JSt1luMJ8=lj?Q6@FkgV{01+17<&~suLp^$`=+8vO<noifF7&U>e`;`Pa8#
zm%fd8C7&KWwg;gc7cv1yVjX;T1VLyogz~?ceG(_P=!67>)<HwbuxgP?osmd0)%3up
zUQG;(Xz;$M#8LMKe}!Khyedyd?0dnceX`lXa`TFufMf*ab1PK{qd15h31yDA9#VZ^
z=J!)t<jdjq^A1(iV#Uu+DD%PQEwR?>8rz;~n9mZJ1(+jPM%3TSiI%wm(7FYW+t&fl
zLkKLKAVc#sjePH8Jc#4_p8|o;B-i;U2Iad;arDUM=;R8dqvOtyoHk$uN>7DTl-Yt7
zUl<vNcvT_?;3|*k!<9Shs>fc-OUX5{7}c&gbuz6aS+Qgxo#ar!e1>G#zYzzVoK_TQ
zmf%?GjmJW7^R&>Z2og%Omvs--j^IB0dmf>)wbj)y8@?jE7?A$$yd6o37Lczbm+urV
z1dgpuLYaUaSqtyyTqsH!jFLH?aT;rNEsu9p!ohXxqLS^k546V+L;N2r?lj(<EcEzA
zc3AO@MEd;V$%4Somv6*AR#L%`ltOcTZx=Oo2c3y^zeF>TOZ<n=ydOn=-+<f(pn`bC
z2nX`L7NY(!;RxAJnh<%S2{}#D#NMS;$#@pI^CIxvyEb|xqLBXZ2LjlvE{42$!!d1X
z%MgDdP)_dTq`PKTHW~Z3?hJh^Tw5O(6eU_%I-yM(uCkqm;MOzJ#vdB_W>TSD(iWu8
zg`7!OlaAf0$i?}Mpi;{0H2EHjtPBKA!qmaR@zuO!>C(Msx6kz%tF)7vmc;7x*?soa
zqbZiXRdOiKiynpc4p0iYx15G`EV4!^kd^#fe@8Pk{CPy{Z~uff`X|eyKvv|$H&U#M
zAeG7tAaFTjdsi%_qp=qz(FCD{J}9v6hf#Gr8tCh33$bnx&mkotg%Hk<6Z;}Y4kDQ4
z`Q1%wKDb%>e)u)yd2ZmPDi~b%T=xOPa7_UHp`R0%ar!L-F~d1vNAQ-?W#61yMnC$s
z3a)t(7vu1N0$eYTmz=YYXl0#IR@fqI0bBq{NwFR;(U%~ddM3u&X=;R2R1|BnjOLkW
zp8jqmtxb2@@#mX;p1W?6354w;GZdTzvC97wFaEm?()L(C%E&r|9npTfXi0FQbI9hh
zZ<*m<kuZacMEUQ}9$>ZTpiS*So$s@@H5Cen=oJ_w@H6`7{iS#8nx>KcW7l!^RMj7b
z#)Sg!BwV>VM@IM&$KIESlT-1yEA^j(_tV53XqIuy8#o?_|GyUiY|JUomRG1u+zKA6
zENy~4F{Dhd$B)>`I$^U%k%~u<9eBtn0x<{)PCK6W9rjld4RPQWkKfIpO+}uku60>j
zB;GLIpfLbV3}8Ad{76JVa!W)=X!Xz5`KyVdjuPvQ0wU_n>OPrQ;4aT~k#ip)dSGfh
zRK+oLDk8pj41CKG2wx$5^wjaDOo7u-`VN1bre)|HL(USOD9=P?X7^j&BOFV!Q9)KC
zox;5~`6Z{JP1j?7{-^NnySIS?Dap~i2o2IshX3ler_dV^>Hd2o)Zq8I-T|cIwu?Wr
zrL_EQ<Qgr3(*iX%wZwm-y$9Tpdv!1yzrJqnesV*IifH*>@%{FRT<-24<Y1Fc|H_)|
z!TY#Q0^9r}OENCj`mukccQQL4u)9hV%j1nN3Hd^}Pa9k9Q%hV)90{|h5(vp+k^Q{w
zDJ+)IJ{Um&na@9?p=n6v6;``>-MKxc0JVsAjt%#dbr|t<-Yq1UvK%G{w5XS9)i`8@
ztw23&&E6<WGnA{<0RI@BxfbF<35Ob?FIU+%d%}s3WTVAhINM#FG~n5HPh^VTYa2o{
zvc1~-Ql7Id{ebS*VnMR~0f;Br&1m8|Q90Cq@0-R=rwJPR1NJ3xlsNY#nh{x#3jzb~
zp@ysj2sM-@mpI3SfC_WGQ@&>CEcmDQ0PkeEk8)E~9dTIGDFj(m+Wj;KiWmq>ip1|k
zbYBm0T7RPU7-;ZLR~rgoWeno6`Ju)I-k$%SDnGN*4Pjo5Iy4!Y^?y8Vvh*L^`Cj#n
z56o7L%5`B2{myeVy!FW{%eWn3&>+rs&5#Y`09xMJ|HcV@VsMQ7=6@Y_!+`0o%_PRl
zE(O$6J(l_urg#s8guKC{1~(SM)k!J&IX$RI3xpuv)OQ`@`@XxORJasDgO!3{^U<6}
z!fcIboc<1EN3!KAn(Q=28L2&rJPv5z1zj<oEM}CU%v^}M=QDq^{UdqKAcPa)q<ff0
z@6hMACkpd<UKLo^{%X_nZk5s8U9|hK91@E1pLWG*=gV;p%v-!%RzjZZ6<>y-OI4xC
zUHRfOv%z<#=oYfavqFE@mx+@2-n(dqx|C{_%ZpauqwJc7uD7cmf3tPF=po1y&R}hz
z*327+i0FJ>A;qy6+|Sv4FK=p<RN(d5AI0eece)`8tp(|5A@nx%-JNZm*M9$nEU=Ks
z3+l}PSWTc3jR@T_4n<0xS)m7q-Ve%}X9-5<L2W9!_v&kJ^(kD32o54v<bg@UG4M+=
zsUu@+gfw!3ky}*c$*X`a0FoJzZGX-il2GA%O-SQv29e*yAaGsckbBdi<;5ZgCYDul
zf3ja-9cHHLPG<3}roq909ToYt8T2C=plgi0m(!kiTpI)em1wf9ilK0H=e9h$j?&e_
zaH-p_lyjX9-~bBXeIKPm4{%Lnvo4WaX&NW;-6@!D>H3|jrqom+5Ly0&)Bk6b$a4!#
zc0BO&z5r-dyDj&zFkK_zFagYC(tXwF`A(i?6GDOj<^APnVAtcyrg~lQ!5EM(9n_7A
zA+;)#+Ox;<|5eIs_x8*BLUT7kRFa`gVUg|2D|-J7WaX5NLnAgNiW>)01caYLDGg&D
zL#mK+c8aP}LG;KQNhVb)bC?Vby?51sgX48=%d86u{owZP$u9BbK5s`}%SQ5GZexv&
ze8H9OTk2eSjzc>D<LDW#`_$9{LlPa7ScD@7hSNladfHVox&_v5c^s6sWmH0~rLRCF
zlmRE@)QM%~eA#){?7E-r`8R!NW&D+MlwtG<a77`e#&mz6${0=2hqbnDw}kU-PZ!rB
zIb`emUTxsJ$LFm5^#}}wSlfj_K|ab}5|9yDDFY=M^73RWv~VYSLR()7;q$}REtJf~
zzfB@;*iZDrL_l}FuAe)0?ikwL4sMny7T@J7-g9;cDe<3DA|z2_wUQoOjRNxI*_0Sv
zjSRoT==0iFln(ma$G5Y`X-1A-mDSfNKFfk%>SaUnglVuPOni0YXTj;uAYR<O?z@y$
zo?rWpinmOhlp9naMLZf9qnj)BD+AB%#|qcK6428fyAHmn!;mC*D1SdpNQj*Qo;ahv
zX$(J|4ADPLb>;X3Gb5+erVO3rzoX@T;N{Okhz1iYP7R*Dp4ao>LSuigcrGnd8|Hca
z*s0zXcuZ9*l9i5t5crXOm|a$Wp{eJP7O+kiw7bw?R6hA}eR1tjke4hc$&LmRyu9GM
z>ilK5GKgYKw&6n+d;J{q(Y|FWpV!PNx_2DFW8`v6b@Bp4x3*<XH5EIHBG1mOWck4F
zj}6EDe^7)T=HdmePSB*Fu-K?^z?MFTF9T?oXp=ilk^@f5G60kU3tvoOh)1k3*G3$j
z!rAWk!-&+G3%vv9p$&cxab-;A*To(U&qt9AW-SB%G?{S>vBTmRMtV$L63k;r&H2D6
zD(wD)Xa>n?AQy^_P*RiTzW{#8b0Rrb_TOh#T7Gi(T&BPqdLLl{-*uKM_%l_8q3Ktd
zXs@ojqHlyYdEvy;KerXQG)hps?j|c3vq_iCPw&ez47uqRb}P4C8~%jYdGu3MaxIBB
zE?y}0qaQu;)DoYx5`(^lfPc;SH*f+*Urkj%^0Y~Ht&h?e+1BVsg<ZhL+Zm0e3BHz*
zp5UGT(>l2|f}L&;xmMr3U$8W96q#5@I4??AOGHu_-lQd>7C)VIpUer!<{^?JV*3S-
zJX3oTE}3DAX@OCT$fJk=idkQgt$aT<&LwP4FhNKxl-%5~tR^)_^gv!7PBf^^S_6#~
zIx|0)_dLNesq1{UM`4-K^i}CR@8h~PQpbYpKR(lpZ@PYs%Qclen|2&`Heu#z!~rAw
zPj=Pu$IHO^r%)trw+_|s?PY7DRSO8S{l?4Jb!TK;H#oElsNmK(95#SbVS>`Rv>3+?
zq2mh%CXLPM{U4?mLj6%W>_I}HAcx<zB`k+fZT)=@LLg6o@2iorUVr0*@v1hz?K5JC
z+kjb+;bsMI@P<;;LS03z;pP}~(cT+Dz-~SBkSaa=G=tKwN*_RIIJ|>K8di4{Tx1ZP
zF^yp<pW?^}gOx74uOz`+71r*efgysdC9v3UxJLBnI5@&iEHa6r%HX7o0HS}lPY;R1
zYDDQz6C>#^fF0`Iu9V6aT|+N55a9HR+|S%4Zdogi@orTS1=}BlAvUJ5?;{f>PRUfY
zDpw^(J~83hHdB)k-V6F@lf=f0DPmyk4_R+wl91YqC)QKY`FNXdnJ#wM4WpnVckn9R
zrnm@&39QB5{w|kN(_I@tjvhYLFwS-!+#Shh@uAZOOkZaqfa^Jno0pLcg(Plsq8Q48
zNre{oB@KB|&Oj?zutpP^LKbwBpY-YZ(1C5;HXopn(47j~xuh!ZjpppYmgl!HSyR`Y
zEh#HrNfB?=TdIt8C4uM2)bt14Lr2v%`*0;OfB4foX_Z&uVzxO_#1T)uzj<;jM_X1l
zwF7b(<Wmbw1s88!FRN&PXfO#OB^Df1G9QKZ^9Mr%B1?o~qlI=##TWCW)MkaKOta*u
zUo<iRop0;U#h_d>Lo*{>U@7U3w>~iS@w@AHmgTB}$Hy2?pXkm)1jT@%$Eo>ANxUFD
zI$cKYP^ae&QR82*%td9M?-QU|P|n-Wyi?06`#NG=1C*1|fpI@^RjJ<yQ(qvycyEC2
zLs1A=zNbNTxd8jtc6Z%x^*#HuwHC8o$E7sjZbNM>)H%{wMW+hxZ5HMY-(RyQM3i3_
zfzyvxd2Orf-oNv<&0F91kH>*zL9f-{Q1dusd!40%c0@eC_BZ1#CzCI2snT$lG}-Rq
ziz6Py9N|5=PQo$-(?ziU*&e77HPw(;LArC!V-A)U{3qe0JP@54DfaaAVc$b3eB3&*
zd4mwpw}V;fH4*IN3l)QAF`I(%l}`Eo6o$GEC&w~EYkvry41|Jq&u?NORas3arP^<l
z)pAz&g!b+tkXQeH1orG^a<g__ZJhTyhl?xN7`*(76YjIDH{ZuCIU`{*#lJ1*;PPwR
z$ZTT9+bCQJ;#MxK;0UMoIh0GytR!}sAj^-2Wex0m{<*5{kHqSCI4^xs+k4r*S-7@P
zN+mg@Nl6m;4hOZ3mTNth<&^4zm^-Q6XQts}1NHXUBWbYF_WS44`{b1{Tf{T%E5%<g
ziGp~bF`U9HAUI?A{Iwm>yAaLbo&S+w`8jX5alBaYabf8?&Gzl2s54+I#NsNjRF%8b
zUC9<-{(oV2vPr}KQDhh*;=lEBW_)~uqcVanJS><fXTCO@D*47gw4~AbF7_X&RHL4R
z?533yS2GmpyxU+cBs=!Bq4Y`Hh6%AXPdk>5j<+%=>UrbK{v-n_4h#Tie9t1-P;f)e
zO2MS*jX7I8iR~Y}qY&$D^T0>ylX;l+Eb)%}@2{4(2q6NAj1Izo?tT9B9W&fvI)Abw
z9cG$KtwQ7c{xU|u+ju|Y$VKeI(aa{we_D#sg1+BAvj2_5!6@xzjjmq+DmwTXcqmU*
z^^B%tlbZCWsqC|AX#6@2eNXgmdToAyRN(|GLEZJJ4anAW7hvZIAn=5sSQI%c*daHq
zpODbf=_Oq-0Y8R(VO=ZS)}M?RyGD{FTgV@@yI8Lm`t{BgBz=^>*dyTny7)}lc3+{k
z+jQt*q6&eKP1Fh_er7}wzHoY!`wyT8!?gz~u~a?}<XH|D$3WxSm6&*s*c|jKLUTYL
z{QJy1r4<tuT-AvI>02i&f}MHM_he<UpxAAV%#i{5uy1jDT9BaWtv%0JrDtx`vt)dq
ze1GVxr4x07SDz;dRp(zGxSlP8o!OsjiC_8RoPeQnYY@y2jZ5bNa6E(%?p-S)tCL1l
zDA>ay2oFKY!x@X_J%=JFVP9uTWW0v?R&dzHh##a`2hEh3Lf7y2y~$9D3p<wA;v8WS
zwwpd{dv$261nNUoI~)R>b-CF$QsUDVW4W%=)-_yf?3q<pW~Ex;=K>D>Ujbmx;u0{E
zN&q+Ep5i~;6IZuvp8jK5;H&8jUy<noFJGKlUC7r&B}IRgYB7G?K2c{q?NbP#9y)=V
zfJ|F(A5=CL#?7WACDuDf2WhEJiAjBekXl@En~0~v8x;hJn2^eq&+&-f1_XCzSF%z2
zqZ<SD=e$%blSyBFp}}mwsA^5he>@#gs5d?v_@Sf|2Bqnc5VhC>$;d1mO>Uvo&Yx0Z
zffkq`EpWV(Uof6V+bR=oR0@$1)H+I3EH#Q~g~O0$EWH2{ey$KOo$ayio<WtaJ%oOk
z?|bpG5W`{!6k}nhVKcmZuBBQ=-jcxjnJe#r44+A5!p3x87@DcsnW_b$Ht=+3h-o*;
zjivvt<sPLM)obp;i0;0R@rYvm2r)O!RN7YLG=Ll1_AR7*cPkOW2j@0P6a<^B+Qiai
zo%vB|0JQOTO`JR!;=MIfJp&`CJoI-yTXwgNkHa5`g#n*kzuk}j{u!q*yc|O85tKmJ
zoIg!<kw&63XkW~(hS6Pyc;$knpTY=AWY`q~eOTz$VNAo~fd(<82&0a$d^25ynj~-|
zbID0%=maXrmFsk&d;j+7TW{_BD&H)FG^vaosQ6~qj9Cg}tYNv9+r&wQ7$4qLM_dD=
zI|+e`$taRommz`{k7mc;S2)bJCfi}|ia2!n9$T#Fa(`2B;EZg4^!;Zdl=&Z(H2Plc
zsMw?yMLzzOfkZ?T7QMv+-H!(sy`PP0@ne<)t&57bG^kDLBhXS}v@`KV97x~v?|{t6
zLQYLZ9VB?fv*T1El*xa<IUdav4*9U{of%3`rv~A%Ad*8-PF|KZub=RB1;QQ8b^5i%
zriS=WF3eTmZwHRDM(#~Nj-ScJ;Vz=Wp^f8zUzACB<uf_hG4K?<wusp2(IX`{Aw{K4
zv~<`!_kj^)yud3)J2JTge9u9-(`lqEsW`tRr6l1Ierr{@-?94$DzB=Um_Yloyw0yG
zFdZ%p6gORz0c6aFt8Fixd^5>mI?f|Z%1|`pVEiEVFXDSWCi2kH-w_C-=NTHBo3(f#
zbNt_)4D4=4?~zFfV~8L_)W)?8y|I*>)hS6y2{pp9s+SMevp{&lN&o9ummw|%6aQP{
zkMxGJ8^RHL{@uj2Hd#7KfiU8hRL020S;z;Tr^FXIhH{7%wq^JoKd)KBHJ)rm$1`u*
zdnqQ!vq-$Gk4z*s;_a%R#c|a|c;U^&?6gOX4h$QfE}p=?cOKX%NF;ZmGN;M~UJHLH
z3<!Q@Pv%D&O0|dk_di24j^pP7{<{xB!HBUVOv=LdtpRE}dS&FGiB>)-Wy4|B!(lf$
z=!fF4h*d*>uCIUG`fLUf<BT;RR#CW}4CEv&N3AV8{}a$4Fj(ul6LQTPY&>RZo*<WJ
zX=(jL8?Q}|ExDRTC<z|5Th$e2?0tH*jd%HOGl|GU>lzIwjjFp>g4tFDyH6cV00;Z(
z9}FXEiK+;vL5aqr9~epy7E6{O&XE%0+%+Fzy{_U8>*_Qp%5qWCnNRK+U8T%3-5&1R
zbJ?Nh(P7}JmK5~0S5Xg@34f0@H0U7mgom`Es1;oJuFNAhd+h&~f3jdMDo|(ga!9>f
zA_#`c#fQp(^dId&%-Nz66Er~!P>GQgq;esS(3UFE98=RRux(3yK&u?x`6vN0;XR_A
zDwGq{kTkX8i|%zfRcRAZM$9`fqr4Sr+Cjz~IvY~>4rG@(I3W<YZr*9ieAKqynB@^?
z*BlJB3sT*kk^*hcfu7nxv+oekwi}1{CM(dI%ZBFf$wN-)QPV#Aka`w{I{Tm&Do+2f
zfY!@ImsLpVK&;Mpc)QU;&2G-SS*=p6C&q1qSzwZa)(-iv;&nX7p^r{v@jMGQ4QtwM
zaIf|v=WhVUgIg-(9<vjJ@ieg8GT_xDvHo(L$KuPWdV0se=y+Zx=MOG3ezr3v<hfgd
zped&#UzSQsg&>`Tnq${J89`u2%R55(cp#9jnTiiEUVu0dl+8I~j)Je#f3rPhS>Vsz
zc~5HNBhp1##8skCVFUg;$M-u|T+^6<b}*ZbRpT%Xis9smyx$6!xAK;gp<K-i6NXl$
zN8-OHTFJEApfgy#UruuNm=UyTrYnFD1x^eK)?dyia60Na1~VJJc057g>pNjWP#u8x
z=mon^59k0@sU^c_tBb*B$x`QGilGsTL6k!#sP7j}Qh@WElti<Jsixu7P9lM@$dqMm
zcz9Q9@C~F}>Q+R_!8T+L<lUOTp!xZ5?^yln`klQgp5oYl|5TcyaF*uq-<PX8mJKVX
zs~A7>sE9SlA0WA6>1AEC?0hQ=OJ1c-4g6pq!e9R@kG9G*Odba;iEmuu!j^#h5b%+B
zAak|SLWNn6X9<x(^;|`C&b;V}AMi0$s4+zc$3ZCgevtbTPa}#&FX1>wg^Em&gtvL+
zsoid@@tDzj&6pXsCS`Le3h%OWJiHWmZIS=J&kC3jv|m`2V6rtRCwr0Nhy3Y_jLru^
z`IlN>EF4N;-+glGctTRf-A25BJ+AJ@9D?uafS_}>Yk<YBo*-*GX(=?qUoCGN#9r1V
zFr^;sQ7AL`fV%TVXaHjF4E9Sr6t$AOAGgC{#K?j?3zRA3be>otm1(yMDHM;kI4#y3
zS>aAAQ2paG(DA!%Hyu!7jgZxL;?GB>Y3TwAUOe@lfG<2eIJa?f*scH5_IMpK4~>;a
zP3Yj2;k4l5G<T>r-^`P;oN7aJbz!fG(Z7M*00e91e>{yp8rO+n6N90yOF6=juNKf?
z=y=D5w;&iX+WgDeN$EuglA|Tz!TF7*@JRK2_7VF_;s%1i;^MThB|>^6P^eXoHmOI3
zCRquHATZUxR?S)i|8(6x*xrKWsSp>;C6z@ty+qfZsO&dd9PH$|h-T~mlwhSnaJ3h0
z)3q(zNRr_2Ay|GY=dE}_oRH3}0yCV8+JPg%n(3r+j)sk~e}9huom8ibET6lSYUp}C
z#@=T8FTPoqhSBVO0OUBVrFla}s)Z35#d?OtuPPxvApuJAKx2mNE@!*?*Z++f=wbon
z=rPze656#yQ=fmu&!OUy$_(6ZEXeRPPm`9gRN%#~KjlCgni5ixOW@}G&>ay9-){U*
zwvu9T^D3)NA@|iqa~4y{Wfi_B>l=vGs^j2sn)v=&K2W!+PkL@KYEsQxh7g@O-2DTM
z7*d_281aP_T$+_!a!h30hpL=$5*BWYbv{~w>ruVkSO5vPq3`ufn#3RRz^T@8!w$-G
zkk|X<_&OF1Vi__26F4qo1k93}tt?^<3jTwU$S1aNTPdh)@9`-VM;R!;T6m*XQ~|{i
zI%RF@I}Jkh(IeL>t?Jt{VbCOJ-3O^Ap1|q^dk?_cR>6_nj-)7O`hb;~V|tATtFcFy
zrczK_ZLaK}sCS&NcR$QF@2xUWFUc2SexycnhY?LmV2SDIOb^qg@2vt~eKm38$=|iF
z3En|)0q)+SCjd~iaeW-H2Zubx+)?`$eu}ye70u=iAr;#ijBK;xUvZ1piwQ#_;!01w
z1{@xCF}W1)S6HLdh%Ur{bPD0}Yo$c^hTbEZAn?Qsr9lt4FdjcaAgDn>6tk9{HTe`m
z2`1K$k6v?SoMH@)w6YmH4^F|WE)*nxlk;-UZq7CCplkv`YC9dCDQsg(oGa|Zf;GZJ
zI}8@iv!|AEl!>a|6n!I!rsuFSmCO20Z)iNx{!p3;DS_f@*y{MHUCs&mbM)EYyZ4S@
zk!ccPTi->!=p<Qdx8pL!^dBDPTSczvkF~-v&J;H2cgo?Poy8)3sIjqZ@mz68D1Pna
z|8ci!0e|7V6^M|GH5<Xh$b5&_Q;byw;}IP+&1437!b2+4tYTbWw1MaBeMRo|Lx2=J
ztKu<-llgZp=W*4bq440}_VpKAaEn7qdAg+3c6G}3WV%n~)sQIC#P1JQw&iRCDvp>M
z-Cz}Vw4?uGI*_7Bzktj|X8_RxOkfaU1j?v6)=t49*7|^)G{jsxCDH`>{bqPVr2g77
z55VopMeua96oYeg;dPlj>63MX_*>Wuz}78t>~BsftqG}%;>zR(mkfbocp2h0s0Rv|
zlI34-e4I5JdBagt+Zh6$2!MiKI4V)$;ZoOrW+S4@-%~hQ#e7GQ5*Uh@3r<leNu!Gj
znijb3U6eqs2VgPp+EQRGGw+(Ap%45N>Qhs8V(}NSD<-}**WxQr-J2uOl|nX4+MHi(
zS1m4Kc>uDQj1~cUA-`>*L_>B1L($?*#Pf#!&kX>L0s6GlPnQn>tQ!7C5|H`k{RO0H
zTi;}{LKGB(4q;qh2xbNd`qZ359@eB#ekUn=m`^M{z0Lw(>Tg>Neh#W@Qr=F&xJBNM
z*$UDW$so#qJ9o=-Us16h0ymLot&WVPcajswY^eJ8%1|>w;m@Uboi<4se5J!;!wn3(
zY+C<;N$~Ou@StIp?uVk_JEmt~vVBaeSmOH(hGRp@D(t~W3U1|1fcA{#qx46sd;o6}
zC7~nr3do_=ZyU)`6nKd#aETarg7}XEyTp;+JHKR$+!o__z*r!*uGQhClK>sWF~h)P
zvI^yoSGqo(4yNvv!nF6n?Ko34w|cA4=UQd6{pB*-80i|`F9L6_I4G1Q$?2xOrRrv%
zJv9{E1GBEV%aUG*wUF==Mx#s)#wk7b*Z{~L330!B67Yk*iuv!di?~xYA}fZzOem#}
zz)=Hlcqy}oA;#b~$KAesjy7)k#^`ytxq_A5Psa#-@a{Z{p{8!9>5)`ZM71h&Vv2PR
z8;whi)q7z6eJ^q>=v~<&Lh%Q%c*O;yQuKTS0~?LU=5jKoKLxaiCL1_S3nM+p?`^)l
zU0I^XeZJQm8}f7-mCh?VmPIQ$cd>~}RQR|C_Pw`bn!>+~+1F2HcVL?jI322h@wx}`
z+@cQc()h>c((X0Tq}#VOX1|1zyo-=zD|rCqQHVnj{2Xf$T&sJa`pX6#J_at}U!MRm
z#2f9{_NeJ5*8PwNg%jq9s=1PsNn|$PfH4l~;Y`|A+K~s49&UZF=l{Tqv+9i~6-mA?
z;}IVARTV%cx(p6dA~5*-1tiC>2-^*ys&T&mFpu55yB>geT#-LS$~^kC${>L%iWcGj
zgF7gu^Wa4T5t472?+rb&ht>(2S(z1j+WLjk|2I_C1xL@14S@vvi{D?G;jau7sf*$w
zN!ArP%zId}tnQtA|AybMuU%?sKgy(44fYxeOR>oQ1voCjy%6PHNET+_lg7v@PuF$%
z#=@-3Akx)VOs2sMRW)U<HvKTZ2BP>ISO@Alr&i$8eeE{TZ~b!+qc@^(ElZ=ZK)<U8
z<x=%}Ip6>2aeDaQ>q*JjLUaYG353O?uB%y;+p~eEFaW5+f|Ey>%kdBs146VDwxN|t
z8^?}XG9;%x5RIVi30f~_^uNY&&Dl`?qK+nroBo1oc{fS@lm9f1XXh{nI}^W*X+`M!
zuaG>`q)JK43q&G{bLUv!!vB>1`~NcOEJRm7=VB}eoGW>uNqQm;DgHyG138Peit>g0
z4VQXyI32iYvE-N^tHeOt7jlI~r;`TcJizV;E;Cez7^@EpO<9_VEe^1ufTcQ-{=AJ8
z&9Nu7Ixl)9n9oHYmPY9@`B!vW3!#F<<cy)rHQBsMV%JbbkUU{!vAxh|Z$>X+-bAOf
zOObfCPz$#PXX9B#%D2R%`U5_g0j>2ipwqy?Dh3e&INPvl6bP|b;C3e~VAnq!MU!WB
zl8#0;0Z~O`iq594I9y4#YaQ6LadQTSQoLbnT@FS8Xq%@RT83DAK{TD0os03<6kc?;
z<Ypkes{wd5VJmQsUBCNvM(c`*>*8#=;LTwaAv@wSy;UvUBz*uQOV{zq5;1g^C7eKb
ztCTw_gs*#xaPaLc^qOMo=sv5i$?I0`0ys0~mJ4>f#*Wu2nt~yfYZYmdBfXlY($9Dx
z!Hh$Q6gAcRq4)$|`_=%WV42dk*xa{}x`0FwW<&ScGq-kN=mlbsTpk^p6NE@bB$lSO
zD6=d<vxr?u9FOV>lejI3PHh-(LTdf@l?`|?{jq^Fs`8R&ZHB&XNK}9R_k4gx>@)Qn
zP17O-M#NV(LBheytJ)v$_p>m8>`9&qrjr$BA9_M_@WesQ;B3YcKLw|z@u8{F#gwJT
zRQ}TL2SxBT=sSir9somZUtK?7K=}QzF7P|nxN#=vWWBcK-DRqz2rjxL1%24K04_w1
z=*p(14!Yf@LtxX4Z^$@*gQz0Q2Op(WEdUT^F9Beu<tJND$n&meKa?UZHK~2?<XGR=
zcvN`qbu+aFYt!EVy2|zU{hmSs1pjq`x##M@1X+PA*%Ft+GS?Z}=$O(8;Ny|;_(#Sm
z1MYKnwUwZ}H!-)6_p@-*Wkr#okSY@L)I%@UZf%!!h32r=XHvsB=GT>w+@y4ibLK2y
zsmTAa2bxr26YCbXeyDLy<p2H6I%DkEaxr`&G07eAd9D)t+IO!cK;UH(-44G%+BKe*
z57A$e3bsqw^3x<EK+4Vs988xf!Z|i|LO*c$G4@nO764S;piyui1|qvqTWwgJvbsga
zWj2xj10l-|(&5?C>N&P>g`oG;$GS9!(1GJhdiOzF%==z7Ror6WEraDr9|mRT52Fb9
z0Vb92%SHX{mF!-3Pq%7HeC9u@%BSz(y|b+=d5KPcs$?xgq>~2T43l&Uz_u8J_jmK%
zV;8>ddkAm+s_@Oc+ym8GOIhFtV?B`Bb*=$n@iwik;5>CV&*e@QI5b`+%~JIS{VxhG
z9;4M$Q+%0=0GXkdg9)M~&+0NQQTu2MZd?D(3&LNFPl#deJ!uurwa8lj4~<PC;T<5w
znbMa?fS7h9gnBZl<SH-31Ss0q_LmgA&FDoWOK8J@6%<AMpEiOpQ4C&~($j`u<Ve<M
zVdFqZ?`P!8oTtMoW?bR6ImgpMd@8R4-sR9mC%{PIs7G%uy8p+I8r<Sv1y1j95$D1?
zm*bkOWEqV(YP3hkkO-3KSY>399`@D_T4go=wjEjT5dHLT63ei%)*?=ul?#rn&JVEl
z9Evh1TgJ|8d55Ne@v{=TR4s_uZ*K6P<Sqc;t#Wr`D&{jm_6-*cCgBUAJ!{|l-IQbV
zDfPTX^0}hz^OkFZA@2z_N`fYndpUjcwo8tEhv*z!k)gittt5`#Eu@KpHL&9#a1#X4
zV)RWZhq(i=V#&5J-ovK&z%TXy_q}d;7KI^BT`Pu<Qu0MhH*ny)cYE|X8od(U@!z!X
zaL*W>K_}|KErXviYsXh>uiNm!W%yqUJ6fk<{U|c@`mm@>GwV|n0R{UXS_9FjXpv$N
z1{KnL@6qoF0*61tBuW^~;iI0rwtlnP*`9sgKl#rY2Un4(-ZoK$4{q*%3jclDbj0D|
z*>vN0RSQ?iLm@1In!z#hVq?f5dNE4H$vZm30yN;xUBZ_fiUdKI{cs%YysXj%?>-?E
zg1KTp?mYL>>N{Y<xC1eG>b9t430dA$xDVSOOq?x}8|1_i3=#}!-=2{YGj0QT+zr2&
z8Ry6&D@3;&GMEDYmGyB#*I2qQ5M#e$zn-KF>O=eiXn^gf&3TAAR@hZ3UE$rg-(#|_
zvwXkBQT~%?A@_DgZBzOx4pfG~!pi+Xx}M$XOeTR{Cm8FGW_i;YuGP7HV&CbeIT(RN
zTRbuB8*Ew=IpF7w!OK!0$l+Q$seY~)1JBLn(0aqojII=&nbH(R_+Me}uT}A^q?-`Q
zk2pH{xdRfNe9i#l0?sab&!!MOn#7G}3~Xpj;KM8Z>w*U%fLzR)8NVQdh05IjewP>6
z+QNmF>C&ok1`v^gw_zB+vu*4DK-#!v%gIJ-$BIl8&*XhxJ3av0_1Z?HQXGDRdq1CE
z*MU_C`wnWQ?hEgJA;-Rtqlkkzo^9C1;Ks|ZHTCWE*%pbZOQy1;=?o|>!mkr0nD9iJ
zu3?d!WaG0pDa+g*^e929*r%XHB7r$=(_1QquY6$q>`h2W;M5rrwZsSQ4+(I+z>dsA
zx}JR$bKX~r5|6Wsmlh$QZqfyZN*HPWicj`&yxQ-qOinTf!AU61qJ1wzj!(Z`tuFZ|
z$FZGH;~+>$|F_}Tr31eY)u<$nf!Q}y*%^}-;C3uY1e+Mxlrti3J&>tBp0*R9Ehx$9
z$hC0SkEDBQdv>~kbz5ygv80IF-a9$(1$~79vH_Vp_!Z7{!J95Euh=sF>W#BtrE{<*
zW!R}sIkV|KsVxbakXnl0VNR*cJs0fP{TOe4iF>gevrFQsePC*4j1@}@RTCsiZ^M8{
zmL+qUgy-4eRNPL{A)TNvPg!oLVnu8Y_7Kfb@1zG;!2R|<C6Fwjs`2u#oCBk6ft%8e
zkeyPMXL1J~66P1o!tfx{DJnpTnB_mOKUbOSl!OFPB@7vOez>3LSY|EXSB$AbOJTFy
z_45DO3$@7cfBGKS*CA>W9Ypg^?7P);#ohmS-GQy+hUVDs-Z7jwQ9M~)Q%_&Y*manU
zZHg|NiqExE(hiK>`HNsK5+<M-8biLw+-B0tWY=^04sS7nIEmzxk(M%#CE+)u{I3dT
z+w4cGCKuqR8bCwkhL;ceez&9ln09;W;;@9f$#9*GUU0iK4NbO9wxWd&xo(5D;fA_(
z2i4EFy1<sYrjeIAI!L^P=9Mhv`v$es^k<P%g-`_PFKI5-IPJ3VVpEDfL{?7lrg#=9
z)1=rYXk?z$m=DQ4_p`z%Ui(uPA(DOPq6?CUr5uP6p7QjZUgnE^Z<qgQz5^1s8_~C`
zmWB<40VY3Sg7D(l_i`PMZ8(8(!tY$xTeguWZ?RTw?I@a^Xu?O3t#{Z8;O-4QFav|;
zB<kJ0p`r#@_=v89p~)8DNyOZHVpHH4eg^r2HzYq_OGLRCebr4TsnQ=d%G~<sHn*N7
zEz2uK?B&~n-T3FA`djwE5g3gd%ErIrS%mokT@-#U4nkeQS=(hTXB6}c)G<w;NH9$e
zIzO&d|Dj<?{7!O>;f~^uckS%NBN@nhbPY3|&Q`LA+LoW)`>zB`C%*!KII-_@USGki
zkvb3cMujD*Clv4euX|#<TBvUH+2cU@KWx2aSRCK7Jsc!>@Ziqi?(RBhkO09Qf?IG6
zI=H(#3GM_9?w;W8uEFK){LVe++~@z^XTI=-J>ApQdsnSmYgJ+xgen=50d4&721=#6
z-?0~rQ?nH<GLFUYb=~u*YVTwVP9JF#dB#$*-@+_0gz}RSM#Navu&V6cNi@Y5it@u!
z#ZGZJ;_ut~0NT>D;=816UD<Fs%)sMDbE5uh<}YJNG;QPf&sDpiF&s9xzL;Vcv?6{M
z_8q4HY;WOu6X1i{x^q-28x46APR4prZwY-DBAGfY?Geoz$(FR}eKi)9pwI;D9r|qc
zg$+D9st16&04g^STSyy<t9Jv|^8yV-F^H}3K6Vqn<j3Hsm4iR$3XjLbRI>J{^RQre
zB%|@F{n1!scUaR}arkJjs*2s`bs4_<X)cq$Y4jqAKe1t=97iDXlRs*$KlCX=SJkq4
z*jwSZ-{=TGX4_Bd4Sy|<%#kOe{X#{?+t3E&oGJUk0h}=n-L+rMz!XvrU204~6EEv6
zw!{Uo>+(h+ma?23%5R+aNgb`TA0hw5#(LjQ770DB$EPDSPR{DwatGFo1J~3dEG_7B
z!{jzE%r~jkle##)APmuVSL25gel*-gi4VEj3gJyySc#b6^q4U#@G!*?%1vzV5ZkA`
zky!x@uoOf}ovop_Q~}EhJ?wR0wPuP65Jh|tVoer|6=fMkw57;3f#Zor3_}2)Kzzir
zX(K6xk%}RM2p1~|j8K|dxJJZDa(Gnhd^5BP{->pU*OTC4^-#6&$$rBT&J5eePe!i)
zKIGQX$=rp^0#Mw|Ex*1I8W87w*UTQI3Zf*LM-luPH4_Gw%PUx;%jzipa(SlYDln(x
zrO@s`ftA{d>@#l^I(1-oH7(CnVH4tLw*322M8?+ePZ#c`=!awg=g<5~ILpibu6fu7
ze%T-Uw>pL(zam}y+mi4EP+&qT`g2^(7zfT_0VNowX2o@7?A5q!`4R=z{9ySl(J+?l
zIToi}ncP1*PD9WMeHRLz5fYB+TVsSSSO&@S9d!*28bk)EkN%LD0z$<zM7eNLV^~YF
za$a9(=x%rkLCgSz`IAxpjb1E4R%=2o^EZU<^mY|93|xQCR?+GXZ#6zjeo0K(RD%2h
z0!5Bw5H!`G$Lua@on30hsO0Y-Vn9oo<BL;4hW@q=D&0g>kwn%gIW=o)FVia;zNfvE
zJlDBU2D&D9)O8S^)Sc|9tmLzIqF|-Dse-s+v3i%1=%@N1W~tgz`iP6WqO<Yc)A=%l
zkBpiHU#DUbxqKn&bd?BcvYWHO3G(5#8Sod-XaJhd9-^sOL|G9o(U5OLsGVU*5r97@
z7SxDPDW(M$6=F(Q4jB7BzXV-sFHABHvg<@(d!UEp+`E~iCNv2a{1E%z(((&gLV+%@
z_6FV%N}lPCxrBfl6fRhf{VD!vcKsl^bJh5&fo|qTz~*d(B*X`3;h^>DdaX1xhNCxb
zEY7eYY=}$Y%Qt+_&;FZ`z$O)~xugSw9V7ja)L{<Saf!iFp!gkZ;vt7jX+Jv5hJyl1
z{C68Msf0>wwX`e`8OVS2gTX@U>7*ETi#n4kx!B%(Oo2vSh_28^QsUdPh(idlpZ1|^
z(CdR8>Yp5)J2QmzI;NxvZ9DGGNr)S)KK;;UDLdy+@qK<!u^uz~^Gj0`H0&78{a2|~
zu?=NOk1+OjEpklvo|k<3e6S=(YUTqgVLn2N09NmD;YB>>+0XjO()@C`&7Rx^wlTSu
zF^50D<^~%kTb7+h%I35S%b`7jmhoau*yz}c4i&t1l6MQgc=$>6hG(0;2e)h#y5FU4
zM^KeD{iDfJ`u8?E;w9?Rn4)jW6C`(s)mp|temU~JlIlA=;5cGTf>4<!JQAm-$oCO&
ziERIT1XPoqPqiZ{TE-BrIc?{~&&BWG*>!H+nD~03c$`Jd+qL#%mBoL}4?<T7G2WOn
z`OB#LpHElHxhTH|%TyiDOvWF^#Je*!@)4%aWnJg-qNet<m&a(~L(6m@{fW@d4$1co
zvVZ>z;NmIHEap@QlE{nS^#`V?pVn_Fc_;%879qnJSA3ToukOWA)f+XpYAgWvrgm7{
zRAB5+{l~v#Z=F9W6(<kco?V_nDONjns-H#melk{;0u;X^kFG-6TY5lTAu&?|gUZ|0
zG19c=yCfZxVc&r-lkhg6T)nabC@`wpxuY*Kbvlp;el%n&TSa^WevyBDUS5TA<^SOI
z0_kHLkd=^l?&sMtJiJMnaQ<_)wr0+D<6gfE#}<?kE&TE6)!wKAD5m}h8kSopTALyp
z03_l)Kyw=EJQ)E0GktHkz3C^<L;a#Osk15R3Ev4?NnF!=&*yi)a{%R1ts17gM18iO
zRfP1lXcI7%$4}C3M;!>=CuKo0t=rDJSAcVDG-g~@l%j2(W)`&dBkW$}p2@1{7mUdg
zP(iLpySj)h%p-3QMl9LXDNg7Mi4e@XCoe~t*)JprMw%ox9++nUs)h?_XfQ*n{$OAC
zrTWNxW8+~J!1Djs$I=#U-{{XE&WAQ@-w3A0$*aX1vwKyy@{C4H<2bWnx)R+T0L^gh
zd%xp@U2&4I_ybVSodiVMh$%}YDDf`<B=ft6qbfr3wTC$!0Ok003*UA|mAX5K!{c`m
z@vOxA0(&X?0{~7Q8kJWI5ew;r8x<=aIw?p>4QO7&pU_|DRx`R5K7NEe>?wUrlB2&8
z?M@YyO%;P?pFos=p{M^!QIBM`v?y%rjpkDkCaiN(vJ(AlA6opD2pzsK%>uI<9RU;o
z+l_|+B1cT4FS}5BJu{!$`^e$0$hoY3r}QY$KCucs=^Hot@`kyUJ)*H#(Wp07EBE7W
zoz532%+zl8f9$=V>vHaGOnIKnhC0y@ZM<Lyr7%O;syaGJ)P|@!Sy{BI*Iz!}UK#j{
zcXY{p24=x$@j4pYbSdo2bT`5e;Dbe>F=PE<S52X}6)Dd9moU8sCW6{xJzt*gk0(J%
z;L5*Jf(*{jn8q7%Yo^G=O3+K7fV&qoHr7|T`^7tv*DH~_=d`rTiCC=^Kgg`wI^=R5
zs~ymLc>nosAOt{yWrc_V^W!aw-HxhNREC&W4GQIPqCE)bq?@g$KO$JLui#>@M4W_0
z*o?woRqW=U9Sjj|jG$p{w;4VmUrc1?(O!{4QE-cMBGrsg{#G|aFrKBHFndZN@9to-
zDL$kkgF=)Qg|<h8zFTwuLsA#TNu{3}h+=LKx}<r`^s^5vXBdG&<_59LH$X+|Z9>Ln
ze!5Iy$>uqW>x;mZ`5pgox8Zlb{?nAzL+lA&_#BG9fJO18^i5RLxDn=6g>zNb=T7o2
zwfrZUOiRRwdu8V*n$|U~syxitu444{HQoTtZ3d45zL;-CuZNU*_`~k+(AhCoReCCI
zvva{LJZ7S1|8s$u?!?fA^7GTd_KH{(pEu(Ppf4?vQnH5IqA9+E$O05;&|jCs+&{fd
z7|!H#-ktEfxH6MZsnl*DFtfSXAYI>(A@V(ipV%p?zfflPeUahyU0=IqJDFlZOzk~R
zX;Lg`GJ<}ZCwzTR9rx3(jPHS(y>SB~z=hcM3*p>8)9<WiYwM#I|MV-WB>8iUC}Y}Y
z{3-gCOmx#?PSjPBKP+$sOmbwpwt}bVFh%;j#J3;y1uB|=pVo#X;7&97MW>)kEOBIs
z^?t8^;)yZbLy>8?tc0kb@D=m%C2&O$=J;0(0&pQRJo0M)zF#1wK>vC+nC?E%MGACu
z8kb4l)G6|{V6FtyZ*BD@>cf|>PCK9sdHOLhU)eK`F0F-ASX&2$H5FMvMZD-qyEe(+
z$o%&z|Nb-A0BbPuTZ>J=Ht1jk^KAFq4(;~^kj_5c_ClBDBk7RhG?^)zGl+xF1Bi>~
zFn<BI$EmSt^}kW_|177U^M;TuLAN-w0*7ITo`rp<6+-y7?iWaAH9pb2IC++F<^!00
zr!d`(X7?zeUISW(2FlIYF6&kbcw+xV-Tz*19vj+Qg)HGZS$?N*ITPCoEiuKKMa5>q
zwSN2C7?<L`vG^{#fxJV<rBk2cR8=`FXz~N}X|D~fFMP`X{~p&_#B<{h6zO+tf?39J
z=RJpB<&r=tEbrOxt=P)iNjWqtcdZ|}>UIRta%7CJSlH|3{ysrvveunY2iX7PPC?bd
zh^E$OKS#|j+u%9qG_6046w8%ON-Wkk(HtC7#iR{=<QVflqoKP6wd>3i{E`=i_A`PO
zR(ipO`^Nu&thee7?HwVQpk8}iS8ht*=hR4bFnZIbrT@qDwmXSX!}QyNP^jW!lUYvk
zroZ^~@|LF0>XX2B80Os-5GGGocMCfI@3R1|zv8PXUD-KC4s@fbd$^#EH{B<mtAmA<
zrl+fEE*7-$NOzf+*^My?S9$7-i%Z?<%=11{G(_3lSM+no%NOUWdiDRTX~P^~Tq8T@
z)Y9hr?1_|wbcXnySfy0M`a7>S&+lJKDoQ#S2x;o;%8b{)5>V4MZf-g*Y1ek?Ua@RH
zDEza?109qw`D(_&fzt1b29gdzeJ=z-I$U|Z22Fz-bq*nXSbp{*uCy;jm|xQhOZYS`
zcagWB45)IBzTsGWS#=qDm{2zGdW|T0KXJ|Yav#n>a^QhN&^~rl*I=J!zd)I3&)<K<
z-#W`z9IWnpL}#eOggTGM)Rv|pm08V|;KA{k7YA0s_`%}8LDuL9y|S_rEFQoG7@JsI
zTT_Onj+vW)(SteD@RA(yjf+$vXsxw&Wj?E4W@0*!N&3ZUkk|srKg`e0_J$E9^4b6J
z^!g|MyBZa8wJJDMbl|R06y?VBew{|!Xi^XHeAJFeDpr+mS*|75Jj9z#B3%{W%&|VT
zDNBY+WZ0?1Tw+|XT*zQN@wgbau+z!W0sp9tKRX$3tYWFsX)t;_IGIpkb3vo#*m3uh
zGYQ{JkZd(}*ulHZt54p}_7*dR*q4ZMtE;;s+Xoq6VHq<Wf<;?+(St*v)bJeEh4U)2
z6r*MN?LTk&JT+o{eSNiQc+wkW80JsBeewR@6mQ2B1joxva|idXW~)(_P}r;V_S&we
z<@fQqtg!p5eI=NXTRxCb+xFAC#{ILQ*(Ql{FJ)otc$`1pk6!W#Im`EDBc^5DT4gP(
z+EuEL6!O-!Br9|uu_UNAWZE;krTj?0923-y{d{;(UfyQ36IB=C{Cj6{AX%nr#D2fr
z)%9a7i(98IiN+YUy(&BGSqRMz+{PJi$qRN)#x6XagH144fpNfhIwg~hmxw1t=iw|$
zG??7e(=$CIgS;m!6J{%!MEhBXFM#J@?L<RK?CL+8NEf$)e=rufXC4~AZ1nN0^EF!F
zES1OYH2gh7)0)vE1dApbkIne?`9=ir2gTUm-^b&1Ad7(it<6Z7&l2%{Ov_-3xO(aW
zLX&-WT_V!%u+e?>^3WF1>Eg(^P2o&%ly7^7!^`#0Ydntvt(de5GH|D^d&2$h>oz8@
zdFxWOM%mP(A2>iNuzfuwaf6o-xnr`uW20)tv^#J0X^5MuLI_NrfW24laXuXV-G0SE
zhpV%ZiQ_5kHzmp7nErAdZ_31thS#?ixsU<XCU@q_#?KgNc%MWr{dtAQpVDQiJbnz0
zIYxJzpL<~aFeEGps_VBg$L7*;*>^_@LNO;GVYSm<&6oJ@%|K&_>CDh6mQM4Z?ezs3
zHtc1g8y(sIueqba!*ohAlTM@g7y%B5u~b$Km6$)#YzXl3@qG|bdL4beL-A0?K`W=&
zf3HJMOW6i4&Sjm>t+@g8JTxWBInj-+7R$un@Tl}~ZR5>@|2eAGnZ$BuHHI`(Xjp{X
zHpW8*O0Ht>67ECoPn67EM4aX94qHQ>epL=twonLgA$#YSl*}(>a`L=Spj!ASqW9AJ
zT6LE&+7-RR-{0<Y?pT5<VtcWOo06E^U<z+qckiSM?5sPwU*!Gf;6=jVx0Q+zn*lxd
zb^tu-ywM}^-7kmvYNL8-B?mR3;|%B9nNW`Nm3jQmKv!4S#>PfF6&T|gs)beg*RAQF
zwttgV!_5RH{`}!bWT=GH=N+ZbCI5YC6rkg1BjJY@%<dN^d|fX#`}V_yP_YM1Dz#L+
zWbpO?a>L!UU*|Q@1mp)a%qBo9v`fk(fidiuW`qQFxQ;Y^EUlf!>$nBpQ;VR;nwwEU
zQ!axusQaHYu9^vJaJROokcp1-i(7+P!m5Vws+wL3Xhy)^=ceV}Idq)=%j`iY4=Gop
zAh*F7=U#@Vyr9se*V>|2Wz~4O27fK_5R?Sk>)<|Glr8aEZDnv&+`XzZ`OsX)liIjL
zTpI)}$vMN}>($;w4v_x1F4^)Jb;HJ|Zopr3mq{#tJ2f|DI_r2m^*U{b?^$)*ee91R
z?JVL*MZxaOxO_8kyikX4HyBGEDPLOsMRoC;-2%6LBzV;J1xG;aKd09Rd9`>UQ<_1b
zx|#d+OX?xMXm;;qZ%<2%=~L}CpaRO|uow?{M>vluegyRXz5tzx%eMO%ziSir)EZrg
zURp*_yb4~5*eCaDN0SG=nFFQT_+JP~HJrwhA!HIi@WIoH?9xX6eA~VoZ1{cQWL&*E
zTv96s;SY}wf&$+Jsh1LMs~8P5d|%MMYm6WH9NxuUmAn(#upR2f09)JJt#580SpR-8
zH#<|S5UO|t!MEApqLIuwU3Z`MS%-fQSES-L;NHn#Ptxs(XQ1h0dIw80IN=_NDQrhK
zP+N4-qi;}!%dTTY&(RonDSQN&#1L3S!CNrff6eMLO5}6iL&0P9cOnw|EWgJ7$9@Mm
zVC;5yWdGMDlq2sig^+=(<$LbHV}S!_%1W2>r=yNqF}?SjKMLj0*imKYX^F`F0pPtE
z(Y4rM&C+>%`RC*W@Fe|+(z&n%Qc<GEddHwynaO4X_Z`Ej3}EYU6sQe}B2@D(M4}wz
zAosoeE0%s?m4aBPf=|+~Bs>@4)UUwuU-mJAC2oj+4E!p}(5Te<QEc+7`%ogH6=(I&
z)0crJB>}5>Hms{Hzr{ZhtxIQk+K2PDlSUTyem`fEx15QClZY8KZkXlM<8`T)mIcXj
zhH7v*dO}^fPnhU3Mv+NFk#|R9Jembb+}67&V~7P@fqcI-A{2z4OSGp*Vj}O_1sd&_
zh0E(=Y}~edRpd$B9nX@V6ld!6F^1%I`@vjmw9j|Hny!7*%4+)W>*k5jO99gOpw$;o
zh68gnS5*@Kr8`$FaL`=;x|8__Fv~#LVI1BvDl2|Y_bSKW{!mk^Db`|J!QkezbO5KN
z0xPqG?QC!VyWtwAh+)9{CIA{aZ=)yljNeFe_@Wxm#0bq5u2KHqUH}i2tpw~-R8}7_
zP5R(s>*<iP|Jl0?38^P_SEDD+t`q0%Qc#!^Yfp~mj@9Q6D0^6%?Pirl_zp>_(FE!n
zSaaK(w&JFj<y$)+hf+kobWaCXYCk6QrHy|X6Cf6O3gXa-Ay6Otf~I@rU?$D?8SI%6
zq9H@H=+gTz8e)|vkfEbiX~qsF>$vPx;7T|jB7M1)LDMy@-zv%XmqA_&RaR(Xm=22R
z8KNL%j&W<L#!bk%SX^AR6es(Wn%I*gt@tfX&dRt~mf8vbtxNy@6Xt^Ed!GV<cJ$r-
zB?1_7^gp`A{c5|iM_ZWS?95zDd0J<4={(Ya*^qj;CBP0O4RB}*)wD19CeHY0%MtRe
z-iy~WvCz|90W>^#Tsy*yfJGnFt!}F|X!eb!0vuK1{{}vIZk2bo<D0zp6@6A%k)jGh
zLtdJ*m4|jhG~VTbODWopY%z6FQW;*m`0>Z|IE7H;F*>bu-u+*5A+Z}oGJ_wY#XALB
zvFg@V*xx1pCqK^s`{#1MvsDqB9icj+RZSzRSIQQ=Us`*(0lJ<OY46`AX}-Q3&L|5!
zcfp`ZcC@z(xkjTa4-{;w*QRbnl4#&w)V_u_wiIH%t5M1ju(uQJQNnZ{Aa;w4o<hcF
z-cnE>(@;b)8Il|WCWknj`P}}UQ(?L4b=I!T`w~Q_Rvg6Y=x4LHJuUH1lG>;UO^D?a
zhy*jheKNVcq-t~E-C;2mQDg>>GXJ<`;>K@$9%Q{_|KrO^W|5Gx>up<G;Z_m(y_|9}
z<-rM`!(Hl@^oa;>=hj1|g1nluSJ|@O@z^dsWqQWIb_hx(irjCSq1@zUzqQ{|sCCIl
zi>b5Tl-ZzzbG7=*?<6s}>->(+8<(Yp{;x<ZIAv7KJvxpMlOkkdnP@yd<6eaA78IFC
zH3{2qL|MFQ<Gh~)DG9oJE{(0RL!io*qMAC$e$VCH{E07HbZFgZo<YnHby5g|4pfbn
zA4ZAVu`GZSGD0&(kx{gQNiW-uiy*ZB5f{q0Kez)p!#k|D>>0i1<{%zdm#$((vt>ia
z5Vry)HiNK+n-L7VN>vKFcR!411z=|-Vnov!VsfG2cC&p-oFw47M%sY_$Q&>n`w^hG
z*JPyp82*AOc%%htSc~E$Mu&Wp_~`q14(P}NbU|zYP|#-mpf}HIew|vTR#Mx;2|GD-
zZ6Y~1nf35S3M>6{5p}<!;!X^?osYj60xa(&)=VMGOi9x1+Y4u|l+QxOQ<7${{0hc5
zRgXmt|EUuVoe|LWWq39<yA4pSWaWz4JPF35NrWEGL>_O0M%G?eZx6a@5PTn7*WyJ%
z2-Jc2-=noaxv=k!epe9kIhn$aVJH+hZy_{T%+viH9Cd{|+6i={5K>fl?N{6WPHJz9
zNZ^{^XDcXC%(%&R>$F(!3fPy-hQa4N_sN^^-sSLCAjA10d9G<z`QuI=xARfx?4|Sd
z+7Db;?C3W-QuojHW|IIL4nB)D?cIj*vQ3Hf`muBHw(tI`l|+EkO;(<d&uS7<pySHt
zwC-F7bn=U?9zN+s{5JQ3Z`533|AjjuZ?EHY)@;-oLnv65g$CWwc;WoX)<ma4U@lR9
zUUVVzdK=RfuXwVXLxZQ7i{rJ5-?r-g2XsWqHY03@l)@#u=9=BD^XkX5CXpe!WwS!w
z0%uTPGK;}DGMl5T?xps7&JX=5!2%KW1pMGM$9}>PAxi`_5(xb=6_;sMER9F#k`xM|
zEHJ#mBTg}5%4B)aH{>x|rJJ7LNs=#Qi@oi<KUq^aL+MtvC1|ey<=1yjN@WJm593;+
z{9m30pMCl!s&eBAis7R6a{RJyKSz^_2xB{$vm6%02tS->hC)aIVQkfBwUW5p$TGGg
z)(nrlOs4NDJ(B^n2z3xHW_)N4Xw*x*kPDv^nq*PxLp~W2^d0PdS%&8Qu*Q8nA2mtN
zzIWk>{pkA}xud$1qG`|^MIoOGxk|&mFre`u^Y#Fl2#{?+HqbM;tbczUz|nPhc`I;I
zkEKZDf(Dby)jlmC8&F&tc@T8rvJn#?;56o^e>EwA##WV}BzO>nrDW)e;0$5qK4(`u
zg^oWq->HiB<ev_D7m!u+FlU5W=eNRA@ekhfPlBDH;P21%fKDodnIKPZf-jmD47Gz`
zfng|h0qMN&UEw&T-jF?#s3Y~f-$@xFRE_?K9$&uD@d&`->yIM2@$L_sECx?4$RaWh
zL`FOp{N(HdzK<s|Z^o$Djo^}w%L_G$7?P_}oz@eDZsuX2@@*Nn?{)xlt6&!IfC{2P
z^ymVd@3b>6J5`n5H)$63Eju_APCwf6`(FQ*{x4BLHA*Mf78Mtook2aG@L0Z<j3|p3
zc$@}A!z<bI)s%TKe##kY0Vga`Qx83)t=u+hWS@-EBzfo27<e#WZ59Ex)4w{_*MHgz
zl$zOCn0+kPHq9{8q;3_S5#XF#iLb{_xG5gaT|6C$(yvXA3YsU~!u#}17MUV+<S{1a
z8Gh+#AB+zl+PXYh6L1nrj*m}8KeQtROj&6AM1`rK`MPnqWY_ub-Cb>#>oVPCHm_Kw
zP2nhQK|sLo@=p@Djkd<1H1;Pl)Hr=3vpZe(R9+3?$=j#Ry*P`>6K)c~>TTby^+fvi
z{Elr*wrh%*bkVKb5;ZIHF}Vhw&9}N27mMByk3d$8oel{^TN4VQ>=zA!->9NP*9N9R
zp-N)YO2YJPv{tpBYO`0DiW>q`D@%7m6?%=WYFLt5KD>4XqOoFlUMQVR_-$O_DRVn_
z-yuGIlN<F{V$6H5b`bFb_`SqUV8(xzvH_S_+qj>~rTk%xx{OKQiX#hqzD)L@#l1*y
ztbk8W*gVj(B{$gOQhC+h2otM}(5gH2uj6qBL-5$i!D{O}kwUWrRAxxaGMAB~#Ducl
z?99>tZh4rjWACviusX!@bC4Cu0`-*cHU+{;{9@y}=Hs^eH4ecL4c-|7X4}cpyWw~#
zO{L?%AHvVF$ohgK7wd8U6W$)Mo^|@E>%=m7|I=C69U$A~lfUqml|=45AF)CfI!{x6
z%l#YB3s9sM%_MN-o1zb}A*id}-p}ZWbVx3G%f^%U)H?3231a(%5myU>fPKn?5z5yd
zS8r><92#`6Gskh6f}bzFR<E+dE_)<#=xY|mINs9Zrx&4G{E)PAIyc<B=N>J{E={j~
z{A*EKBJ%thPAWS!LkvyexLTz^X2tc$wgx_^o#gfI&*G~sJA%MJAd9F7W%Y&8iJV<Z
z@kMBi;8SDYT-AuHP_yezMUT1CSQc-&V13D~aI5pGy?~uZ^U=j_^x^4(5bC^d=iXeq
zVEa)vZV0nap7lW%%c}eIWV=QZTqRQl;i{mGg3&<0ju=zYqWP$9W2UJ!okE*x`<!8i
z_`4FwYq%gKUE$g5`lD&B?4C*><rYNG`_ob`cVSB*VhMOS@)?3aiG|Om?P$@=H~q0$
zT=xVxLU5H>iChvb#xnu0)Mre5^|*wm?!8WbWl4$V&&yQ7vIe!CXjG=Pc&Nx1E!$8v
zhk#?>07!UKMm1)N^6I@r+hNt4hGs*4c9%O#SX#g>6Z`Tl{nTi#sSRo7Gg*2~xcvB@
z-}Vzwy5f0E+m>W`637j57_;U<x6B!KGs@OngyYp4aaeF}t<epb{Mm<0bzY3w3j+12
z5&fR%Pu*0;G)3vN<3m%jbXL4~c>Sm2-+i6m2O!n?zll*&Q*J!XM9YL>o25V`Iv#if
z8j4bdgy6;HehqY6i6rDXeYWWI8%<>sOT~Z7U_;p`mP!DC>z3k?&^X=Xn8k@E&FHz2
zg8ha!EWY>1)bc`gcp|=nYi{|tTc>rm!WX>A#<RHzSGb+mQpG4#`!z!;!vJF~-i9S6
zry$^fRjvOAP?7o*#o-MHj0Uo74+Cyf2I6$=g$g-ObdO)Bdcru)(!iC;>;%<0Ft*R9
zK+vAqrNIHn>c6sqfH87WR>dxY8n0`ba4Ll8ddew|ov;HwtaoR%&L=_-vX{@KuCO1d
zacJz!4Z0RAaungPf?bS$`YZKzJfGNKS>nkfJEiP{a%G0zlD4mBtld#x@U-JaOU*9v
zqI&D31_+gVYjICziQxlef6`8%hZWXRmiHJca=G#P9Q-;aj0##%bl8N@Fl$x&e;KT*
zdio>cdqVp7`Dtuc@E>SuU75Tq#noxSTU9Q^R0oZKf2XSmUigFeK4f#tt)lrLHTn5R
z!m`;&<;zLB!5HoGR0h+DphM18zwUYTh72Qq^I_;nlV7g;*~tCQNySkW)5HX*!c5q1
zRlv}pr9%5yF?|?pZzO7_MK>WcY~7M6yJyNH+~n_8aQS7dr!`I+X%4K7lruOkoQd7p
ze*&cW_0uWdSf?l@{Q)3$cV)PZTz}-A);uEoT20+e>6SuBhfAIU!4bfg+t`U8L;;W?
z+nD3($0?wOcguMY5TvVc*QzHUszdF(Ke3;W2!)D#Kg^d9AF+mU(U_v=yHGPgG@=|c
zNQu?|VYiF>nw2(5S5^A8KY0=2slM@ZBx#ZIe7k!vE-s1+gdmW{LhJ{mZ9p%LqJmZg
zpu;;}=S8VgBlT!ImA8?G=<g5Q0kQy#*+CTs1AV?fL1k<d$&%J6K?@%!Cgd5?ArhrB
zOrP2SP$$lmaUAb{J3$#b9EDm>c0wi4SN3x9;kM(oz4QKVEf(}{W68cVYo#iTtpGv2
zn$&|4bV&AD*7HJO?RlJzCdX-%ZNQLEj`ywu9ccj>LWPI_+Ze^HTs)Gnm$;BRj1A{4
zDyU4-e<?JWb^w#Tu;k@eS=&kmXp6M+9_C&nk!)0S6tzco-5AEtBoC?wFTGW?0~7i6
z2Fq`RXliI*<Y|r+6T-%S<9r+UQ|WZvnGl$_P;BzP|Gb%hNKx9TcJQi1Je<S7x1wxe
zu`2rY7Jd<!ouTy~(1k2OB<alsb3W{h<WtZYh7}fb-E>$H_69pU#uz2oMc(`Au6uwE
zD;Ntt!9r4ab4A(bFyU!jxl573-XPs|vmPjdyxJTg?@)oUCkXOD4747f*!u}oxNPG)
z<LK2{Ob8#A7T~35Jy{z(667Gt4TwhuZWwa`-r5G{@={u|L=#8(tklOPXG0~K3QuF6
z{>`Lb`BfJG!a_9=*R3vpLGxu7rZ2QtFV$nvu;|rz8(q$J|A|>{zIjODNXlt4cov^q
zRw&}Ev8{4L;d^YGIwMuLSu)bH8)zi9XlK2u%pN$k&T6vkgE<QMl2D@C>D#lsDpRF(
zH6j#Z*JNQXr{nuHX=N*~-I!dryiaE^WWKqs|N4chc|=>)e#>NQJHtWWG<yEa-NJ-7
zj*#i?T~U-NzQDSBh=1Yx$|zg6zxLm)xZuzYen&q+Id8yqxFATKlJCQhk~BKleW$-F
zFYl2tg!N*u$&?%k(ya`21WnnHRxk;yyR64lz7((Gtm?#BnBaRAEZ>W_zSxo|&tWxm
zEW(t5PV``RN2OQu{b)Z6W)+B_jQcABre$~D9QVUmP7KJ5jFsXvmHHa}JrQ6cIIBi2
zg15p(Vq`VACiFZyvppp%bGgl1We17~HL5nYH{?#B5+|Dr!DscJ6Ihed#u0G59z}Rp
z{gtLC4<{>uT2Y*)n_QwXdaoEGEEX=ovWT)LZeja*Q6ZDyGEY!^9DauK2)+~`A~D_d
zgcIUAlS6;HUe1^BLN)t}@-svud#?CQM)(QCj#i;M)Da>&KkvR%Rb`66Z6DuQ4EGIT
za@fJ~10tvJ?6{J`DLcS}Zs6(M#)MpmpGS|Q=2O1lrQ)_XPo2k%@^X#hW*^U+NuqK(
zOCZ)8O5qQhe#Xd!h{VMBT$|{2N3o+-4Coa=G7s?2_ye)8(0uP;%*E(4QD}yC@Zv;P
zUTf<`p8Wvu^}z1)_y3|nD9~}RkvmXgOm7n<%`7QnqcX`xIDkH{$#3oBvs@C7eD7>#
zn(du<pLZPQ%Ziy%g2;h6FV`i4=Hsf{10oM>)^C2Jl=HjWorY0Hi&FO@)Rvi&abhK6
zsXFhnCx698--;CC0qiy<(1apAX!qV~o$)>s2OZSc!im12a^4#?OA8=@c1hQ&|8PeB
zPiDVF54B1=7=g%;wz%gSLeqmv@?|jUyS;v@m(@*(6fr}kJM-1k;^E>{V91&7y!ByM
z*&5ze-uN*BCWm{{)cu7;bjEqK_}nj{IlVY_djmEh{P=SF!_16~=eu}|{wg8|?HK{I
zm5o9Z<bh2`_b<l68D3N|L(HSwQ5{DK>z(Iv&E&Oui5I$=7aH4Jr|oC@B(?oQ8!HY4
z&U<6e=b^%p5t9A`2+=@YV9i(Ank?`Im>HZ2*nY-|cMnOE|AA~vFBA;Wx+~Ym2~#Q#
z4d|eoa8NJKw+~*S-^qbUy`I?myGi0REONeZcTyH3;fH179>`-F6{>;BR0BJAe<J7#
zz7RAiA=Q3wjmR6y-O#6FrR0pY>*>jlDpO2l4UoUI!;@fW#*0><7-|IuN!k5|sk8Ll
zU9gxBgn%uZpTb8L+`#Ga2PTAi4r``pU`8iMqaI)ZispCMljXJoVVwc#4SpwFU>`cm
zb$8|d?8LfL<+pXD)$KjOyM@9}0ij1JCUPzeDWr$!DVQ+}ii{U5T#*=^d*~X2;OUg=
z<3zWAqyOp(Aa@_lq<uT~1`)hFj?B*nQEY(GhGUgUpG0HE^fQGk6T^ftmR3juQ7@7F
zMBu;6Wx|%00a2!kaV)Vehz>V<e}B$8^QQUMTsPkzq1Iw{EgtU?7t{`zzkBQlrNYln
z@>&jy&FT5+2@ZZ`3v<M`CwW6hP-?mlkgV+iVr3C!V;&J3r{No|W|=}pHh>oAm!E5X
z%h1oE!S9Cjf8^Of%5tt~IZ{*ULkz`C&x<uCv#ls3#-zdp#T;K>>)U)0LimXWol1HB
z3v`+c5@V2E#{sqPXvt{DpgeO+5OKQXs=-qz%k&PR!7JP)hN?4|TsqIGZ}@#8ey|~s
zsHC&YiAR3OkRL8@(85v8g_HOFvQsth-rah5e}^U}_;$SBn4IMcdmthb(DxOEUg8eW
zE$&V6{E>j_DvwJ0E?rgVPS0e*+hz#sdq&EH!JN+6ml#W1q4N8A=f!b8*ZsH_Q%Rkq
zJ%<eTA_cWP?NRKEk-!PO^GZjF0mgk#8@;)3tIFA>q{NIlM%~Wc;9|eWzIXxD(X$R^
z-&?wh$1^U|HNAA#(Ihxfk~xXsM28pw7QEy)gk5)qHo~_~S^x~#)Lj$r1<X_@z?WV%
zAAF?f`RUmIDs2}r<{#ILB7+a%Ya@}PeSP?5pw=bDJ~<$A<9Mk?Bsefe!tZ1RdT}V*
zkRB?yz=I9k99}pcVu_9<*)^gea5qBEnUkRDVdI2nDc)|K-*_mK3Hh|1-V+}SfQs>U
zce<CBg~UCqj3D*gw%3<O4i+Q~7*;NJAD2AJtxJ04T3@XZxKWo3@@~9-EkX710H`;T
z*`DUT*s^EriWIQd4(KR`9Eu8jy?DW=Mmm#}B7>UaHJM`I$jd>&B|h+OHlT+A9iL`<
z@OZSd27;*L@kCu?*b#Rodqgq9V>h0^N5O-^`4NV)SeHiR7R>k&(GETCB&Yo-sglAN
z9~J0PkaxnMl7+q@<i@((TnrGCrej2RBEja5QgyYA(B{EaALkY(5qE&Be!gtwJn_!P
zhrh*EgF{_J=$BPf?YFrzBuA7phnnVC^P>KVxtPyhJHK3p$8Roa-6;UzYppuPKmUub
zB_K+sD)Ho-Qq1iuixNS(NN%f3e;A2|0FAFT2&9Z0b$6;nOLxV6D=J2qKL;;M^uBvS
z&wWx1eu_=}2HdJ_TqLHT>@eB{3{@fT_DMunc9te5WHXk5Nht&OZfbS&pI;1+43M~}
zUKO$UBH}~4Fst+hD527S3h@4Gtf@ei@-NOxbp__WLT$ybLar1GFVmvTZ5_Ci-?dBG
z46fO$b!}WrztYrQZ5Lm$wuD{xyL!UG!I~B~rs?ylX+u=)f+6}NQq(Kp#zk(2U*QUF
z%=jPixH~+miZ5gL;%N*HKeY+goiCbRH0%({SjZ5IY;L1P37<6=OE}*<$=LbmG~B#R
znj>*%7Q}|fmsrO4;J^IDt1+&w+7nRMbF@LrCl0e3yNwNv&AWxvBeMC}9V#uvjP@#j
z!{K=mM>PGBmYk`tQd*co5)R1#B7=G><I328o)Z>-&5o(Bo1egLF7s{}JSqhp_d5)V
z;t_{hWhe{}f?}8TnVp!rFINEzKi&)=E5RDi`#X&zI0vcq3)1)CNlTJI{ZLr8rHC=-
zz({vELMLOBfsV!tq*LqZAsUpy9p8tL1$1Cf_F$Cb@rRgDg7Ae7Yfh>q(6$~|jNX?i
zTwk5@4o~&i$!!-vIJVezzlEps8e1~<`dS$y#fpg}LSuV&qac~)lS>%=I{cW)#%{Vl
zLRDvu;CpT6$845(MI;pSr68GIW;9xU8^e$cv+9X254HhNW$};pRJ#Y8EhRP39JRbP
zO$IY?&|S}DwP0a8N~h{bzf;VN;oHSiogbyL*^<g1<Zy$_Px{1axqs$n0VDyZ$)BtL
zn*?w|!<J)IV2;%8LfFX}$=UM++3bQ^f*OI;cd)JSbx-ptQx1gq^^*)6$>r_Dj~p%-
zGm`Oi?k@z6u0h8xx~+Ch#Gj2BlX-#`gJu&EXFjp8$!SG)Yek{|q{Nbtq@8fZ)bP=g
zWr22dQB_WhMkol7C$Tkgyv)As2(`tY?UfX-`=7-22Enwp#mRN+k?wn%joH?on=H&1
z3#7DUJ8sL}_^djtn+g)%Qr_yiF5HdqmY`WPta}A+J&gpX%J^;PK5u)+F8|$k?F%X`
zHG7f#UT05BxRJh>Xx1!#?$22a99dxJ+I)+HcMSG;@r1Q2sDZbmN>=oZAp2N4$Tik#
z=qQH3%4xbU?jsc4R@=EJAoyUZVl>6waO=F)v*MMNk3;GW*krr#<YjLoti%%H<wZqW
z=7Q~hf7!;`j!yP-;IZIyxC`Mad*e&oM<TYin<9er?zf>N<5ga_Y)RzZdhAF;!mitK
zqsF|<Q(b8q*8@~9De}>I5+R$;3majJAI8%>t?tU=<z_>$N+@p}iZKcHQ9KyYc0d#!
zzcZ@B>sT<?6om>R2?b8?wqoFs4Gd}CkSz`V4092qW|TxbkeyXU<Uvr&#oXe<L#FO!
z5`<A|<QYZQJ$^&gjkt~?#=?j)3;c?d%qk=@y3%e|&4tK;`N@tZ%%eO(WuQhe#6KV-
z{4jC6e!h?6lI~79r=uw`RB)!V#)1zRfflr|1ZSk{Rl%N{nX-c++9>AH*THDr>g=#X
zmJj&>)Gz9#1M1_J((k)GwrJj>gn39Yr$!T9Zz90tbJ^^(?D5={EEtT=DgCed$`h7C
zE*c@bIs=c#6aAx%BuM~!9_ta*s*&Gcf+$f;Qh&={)(A4&*5@*SI#EDL{#W+fM*{o9
z8I1Mwf{AA>(ww<$k8mewoDFsl;h9ob31&a6P7VLiLqJ%$-w3pEH~U#_uBoZYz~Iqp
zZ!oSQbR-0oklXjkU4zc+q(#%4i&js*P>%6m^dfF)Ls33D^MvTa#pwj=VXBjzlvBTh
z4jG1s+Fx>Unwq-_4Sl$F+F#}n3u2aqMOf(oO4~bd@r}l)jq13@9npvBUh6~-MZu8v
z+NQ+qj9a|w$GBjaCQ{DhgJ}sCSHU!w%Jrd(UrEuY#*g2!&5pvYofU(1`80RF?^L--
zLL<D&Qi@#mCA2kHyQ?9MCq}*>Pqe{q5qHJCB*0mwAVE(%@3zcUaMN{m-*X{?b$3l2
z^9L28dM^cBxbs$&_7SRr4dOioQ;Al3(553i$1Mxc7ayogrr9e>vOVcVBvd8RSyW99
z_OV$}s4~;Yf@dc#DXAXf211^1mqdtznaeI|$sm3)r|z$*WEMB%m(+5WU7;{Wi82gw
zsbpNo98`X|ik7+Y)D-V(-81=&c|DEZRG6X_KtijAC;>b|N$ts#fMC#k`t9Sv_$+#a
zqY9>8X$&QEAjk}LG#8oto!KD_0+&M6nu|&L^3I3g#Zp8z=>b8{I4P=XBSPweT$-Zr
z?684YNpikV+xQV~y3#(fa3|F{4iSN^)yG9<rQ+o5P(jQ@K+&~X<c=u%jhy-`{WWFs
zAxePe?wayT4tUhpsen`Me;_I-#3v8fFgJ(`B%ZRI1~r<Nn|W$XMv&z>M&9q*UL>C=
z;DzSp2J1}V%BOd&9O`Z%r#X!}v0B?ONh-}hgF1UJUDyZCh)s-JN6B~&u}3O*RJ6v}
zh!=KVP89b+Rr-A}D+(Kq>}<8*<9Mex{Ijkx92dqKB`E{^4@2;pARX8L9HokwgX;2%
zzr-8qI{E7kleu`-R(%J)?Y^gs=#io62~TRM^Ey3~WheY$;Hx<^>$q?s)%Zb!qkYGU
zZ;0FMQn7*4T)vXERQ+JHB3%f4wmi<qf}1irCdg&-EX0!ZyL_07D(m~g6rb6(FHID$
zN7ZWkLeIiX{NzOxsxGEdltu^tSegx4&JR=(DIwo*cwa|nUb;)WyPuO1jbZF9pz*==
zDO!hUb#-0=_79d_@~U7GdV0s7rp<TkToyp947r$vIZ4bhPQ4%Fn{hKOWzSSow!Eru
zsd(g6OQAhKC4HHgg*%`!6T^Eq%RvimI*=;AFG;rjS<YION+s}(+#Mv5#qlbGR>b+{
z7x<}5IS&QbbW=eF`b{rhST2=fy-H8myhK1bbBsSay`i9v+LS2Ea3;pO+6qWPr5hl#
z#??T5=iSe?ib&VY!pNm=5af3nf<3@<&J#VaGd;i*kE1P-LpMRv?Pf)~F2YU0OZXl1
zvX0*q_ax=-SuBbzDH%j{y&2CZ3_w&DI_y|`XYXp>^id6Og`GZah(+pEKE)Mk<RR&n
zierw=sv%ISrTMA@P-l!?a`Auh`7v_zDJ$5qV;8bms@^>vp&Cq4%8QFXfR)>?sw#?8
z8ftSkQOg&eoI65&g`uzE@3GlwA$J*;c<+Ly)G@!-vA1k9q*NaTS!NJ0t3;q&W>QL%
zcFNnbNi&e{8Bz6*a7vI<tK?*tZO2<w;V^0UhAK|^k8>IfQKeHNp&|3l^!-o2{3CRc
zc+K?8QoQ}=iHcUI`!g1UKUV{uyD_8h1e~rfLU+(I=N|WytbO^cd-Q(2_pUB+@m=~P
z5z*tGoJran-U4ku#c2LbzBNT??V|hJu5K|;=a1&&6b9dhwpu&KOGcK-^5-h11)-)9
zm5NYhV&6r_iUAac-#0G>-#%|q9#<8G_jI#uyaV%I){(Z*u%{XT_eBoL+5B_~SoEQF
zwwV91x)JOz=xFB7q`NOT?==10&8He;P+)&2rtRpFSO%hbub;%OOn<&1(8iHeSf8KW
zVLEvpc%4s#%FhKurBWQ5TtL~b%7)U9iJIsvjrox%Q6gk24VgHuFngdqO=@4vpWu-0
z16Dz-NfG<Q*RWFr!=;m^wQ-uc1<U&lG@n#KYJMnj`q-+_0kvt_ZhD&@JlDMZQ2B1S
z@!8xu^L^=_QX^hY37DPC7D+e`bh0&`$GioM6GPStP9yG1HZd{@_DJtvd|3qDc<5Jh
z3)5M7Wu3qzWe-l_NHLh1JmH&gReU+TuX4MClaaEivph9;TgF=ZrU<-bLu+sVO@bUf
zAUK+5#TzToDVK<<UbWaBK#+`>{1C5^;`c2k-voO<KDdU6MrO5LM@{vN)7}=;0UMS}
z9p}gYY*;p^P!uZ&4G@E+xrTzTu_+t|2s>)2ZSpUGS4;+vy?!b6lbOnO+Jx`!6|PTq
z$%a-Q#z!n2fE1McMyUH%W_OIz+k&gxtGwfRV(q1G!Vlw!_BUv7&F}RY03c<pXh-m}
z^C{A4vUe{SI$DPZRO1Ff9Yk_2<Gxs&SPcW;t7HRT&JFzTepPvMO_xW8J<~#hk#>VG
zEM-Hh|HbA7#1kkvJ3|%%&Uzd?%U-{}F<989vT+LB%_p0P2p$%wrQc-E)a4c|b2;zm
z-Bz?T38;~%j&}IXKMvwley?XyPA;df^!9i@Eb+|Fnq#w&aI<gF(*CI5{>{xNcrU(g
zDD`PS3tlmGp7S^{kA`&3b2w}n6(p3f`)<dytDncX<3&ROQ?!}94YLEWGlYg>gxlxA
zML!sP8tD_vahm;eBA}Urgw;Yq7c>$(AcBf72<yQv<F0?1v9aY~8<*KlGaa6R`fRh;
z`(=8#Dzfl((w}8FewoNaRbK%j$Yr{Zm!i*k0WV6fYx=}?%~aw?a%U_ZiB0&H(?pdX
zj88>Q1ZHL)iYD(uzw;SA5|BeE(L*5o5XP!EIN%7z7b<c>wD$On!ZNoz#>)E)(4sZ~
z7yWbrH)i9m4Xm#~Rm-Usp-ybpCerD1Ip#R5C9i~jiSdS&mJmf{gwNAany@L*{%gYc
z)@3PWjQE>iQ;r<ZL%PTTR)nso-y%+|8q3C!G}Rl1yv5RM@TA_ctqRxOO#LMEZ0x=Z
zJMzN4tiAH1VKrnp7GG)Er`qJPsqp+!Tz_*XRO-q9NUmz9j6o^KOC$_evSLL`1LRnI
z9gtqCPACb8+$h5CJbs-hNwoq|{4zCtplW@{^JuV$`1l*h!;3pNWP$W7o%_G7A4M`z
zg-90yKQ-znsu1C$@;ZcONJ$yQ49=0mK2vZna4+*U?h4WQK>T_l4QQwo4kZ9)Rd8P~
zb?jRHyn3I!Dx`BB0ABt%0MpJ#B@FX7ie&#QU>wkLy~aY7ZLZsGtsy74CK>4qh<z~j
zUtiohMJ~fAJ+u#jF4FVLnO~F3&~%LNbphZpM6JU?eJUI`FjgHffkf^B&}7xjdGozB
zgaPf(ipNk2ixHW|+f1Q<`ay<E)UijSu1)3uo&9vzY$k_!LLLqz00PE$eHjL~V9m>T
zsL!l#hMh(`ImzFi<?N^Zi6~NRMa|Y_Hpi{-bM>90jNle*sJC9Y8jH|0)8Mup)J#v%
z)yXU4b#XFE0slI=!M|xdS-KI<KWKJT>_KkxsPh+IEnLW8prZ2K_1Xz!s49-I=>5DI
z=wMrz;BKBK-_b7-Z@DwV08WU@C`cNXK;uh9n+syi#*l%C?2w)GRfTvdtOlOltaA>z
zGaJ-o?!CXeephiUz5OxfPI%h1S;U)m4Ry03Vm23tYI{6e@0zh{t9OWE0^be)g;<A<
ztcMRN(SQpIdzy-VYRH8bJ=z&t9421fi5gIN^6qxe`QmXV7Qhan7gN*EXaspwrbSCa
zEBFDecEHF5S=n_WjRU@+a2iLj(Vx{{lJII1@wRT&4QHn-*u29AW@B(7zK2RLjO4OK
zS@_R(X<R|7Fw6xu-(_U$U2xx%Boe=`){cdGqY*pj3@FY0dP)YX%do3DuO}7RL~8Nk
zqt>*1D%mKNG&|RWDp|WM5hh1Ez!_<n)03xiBZZRA6P9J)SL9id4Dp;0x)B5>#)LT|
z_}(?%0rvA^ix&XL+#k+a^0;L$XDi!@f$j>}M7kwJrMR)k6s}Iw+&FLnuHPQOQzjc0
z7b%EM7u?dbFeKbE7JW)nA^pw13;;Q3;ML;c-atW%pfrp+IP7*-x|i5oF)SJW+ZR<J
z2QWBIbp2mB01f(g<V{T^OL7~kLTb-wc8m1+YscRU7VVFbZVAefaTGrkC;oP)01BN|
zx8v8{oaccFga}GcX__)+z;L~N|1RUZZ;$cuneZRCyyW!^t)~LgM_RB#zH_64@1a`G
zCh;rdjn>PQ+i2?4HUs3F$V*L3XZ79Nn-95Z7EAY}8@`1y1)|TPFAowIu1{J9!CC(z
zQ386RQd9a*s$mUnNM*b)_FHik)MIG^b1T;gJ0c#{k9l8;PJJ#Pb9f$lN*c0M7^^2L
z`BG38OKdOW^sq>+fn&n7@7VNIMCdgzdOBQcr{o8}fwll`87EcnFR&|Y(L3*8Z{xjH
z++(MWX46NoglnoUp5}gqdd7U5=1#<}_n?J|Q(;;9*3oWN=R2$nS-7~_0)P95u1Asc
zK++eoC%T+@>VuF3q&1g2z){BQxTa<$CcPA-_h<h}X6S2NeCwY^ouPraUXXpCzLGxY
z5FEdH+ylrW)PAR=mBH6n%21RE9$yqxW@JDj=e`-Rjf=*%?(JA>+G~l#5<?Qb|M-mq
z`tv*f0-|n0f%fSLr^WEmB~*99A&rMiRrzH$yDa?Rr~aW|B=mdno^66dyuMUauY;AM
z#R|6wtT)Tf%Gpn3w*zWqvR~u$pW@}Dofc<5ADc>|*mAOQ?gSPS!BUyddkoXS4;`^t
z$3u<{-@f(2WP<~v#`|>sxYR_bUcxY{E`T2dNiX<A-pJ9iawaxMDyGwg&N21E4k3!C
ziUCA|b@>qkW5VO^VB{eJtQvF-CU0Z%o;)II+705erZq=_x5jzzhzW&nrefGAasu~E
z6xE@(4@GpNv{BZH%1lW<(M$|dT@edeaVpTpZtbEOZimIiuy_-F9Hi{|t-h+FgoODq
zSDM2wfL4se=s1tX50j{#B2a038TA44Ozb^aA=r6dG>yRYVI{5=uta;znj&EQr_1s$
zJ~J3L%)q35YGvlRx0_~=WIBr=|LS6EKsn8ctd)hO?Y#T8W3Ro+$3l%CT`|qZe0AA_
z5eC6;hW8Gb(f728+sSLY$azCnZ4^+QI{&cjJP}3S3~Hn1_d6`3fxNU73NR2QLs^n_
z3*Q6dd<0H7BaKp^GB7l%^cxI+np{WqQvFd8MVz_^Mj85ky~E?@8vXhYB6V#I{YxP!
zCaUChKw|qnyEb?yF8ZxzdD|1(iDm_z+wo%k%u>jiP<_K^k3SHPBN89WmCVQAV?Ro+
zUcC58+>4t_d1gM*-!cy|dQ@KOdX)*yBoS(naJUZIVZle~=pFAfCu(0Ym7oZnemxPX
zUh7(s-iF&_hY7z|IE`x5?SNAB)~Juwrbr5@(`h&7LX>$@=jGBpL>$O*IA$BzWHTWp
z(vJz$H{~l6%hq!TNn8Yi`ea!*X5DquaVug&DcA;-eSj<@jU9&s-F`%rCd(bO6P4N1
z4x?RPzopi!%O5bRBAOVlR9K}@4B*_~9!iLd*?Kp+wtYC+-#7pawhf@6mz7j4W>+<Q
z!XECIP}pgjfVmOz|7^@LbIf#esYb<|F>7RL7;U<vQLcNjoG;Z@7b3?FA>#+=RfbZP
z2?X(uE;5MB*&IV3y1K*JA=<^@0L0i9%3mYq5=bDNpMBThGm1AKAL5yV_5{{0l**$X
z`)u<?DdIJT6@nD@k7~onKMX$ifogla;WL*R9FgzkZvMaat~08sv|H1pqf{w|8c2{%
zXwo|&NYQ{aks44!hYUy!ND)LS2{m*n5k^Ij;7~-Qhu#K70cipXh)M(k2sh)bPv=`}
z?*F^);{47!IcJ~eeb3&{-p_L)?-#njDK4acP_)M>8A;C;OaFSNFY^ZEUa*Rom-sc=
z)H5j`nFdb-)Nm<XfQkIC_~6ek1Hc3Pp%_dI<y%#JG}OT@nX-vW*v03+|HWPwXw>l^
zFx_@`CPSKhlR3HtqbJ7{a}|m|IgKmID)@xrY3`(1<1H&$XhZ>m2d}1!^1iRfct85Z
zSt4k<>N$ERwr9>1U)0Ie%YU7_PZ?)R$yKg<6`O71D<MJ$MxtjG8GA=GceQLCv>p=<
zD|1zS*Ya9>5w=dklw{?G$di@tc~SO-gf8-GiSSs6j4|U&j=dGNWA9xU)@xQb^?FaW
z=qOmMgwoG{I-;R@%X`BuGxSThOL6e1{>B7ivxD6*i50Xl7lbde2iEb^X}|8#$dFU)
zTE`(P|Hd+q=5SZ{p+pc7{dPLf0oJcwSzItR3yI#mc5PV}`HC`M;!_++UfEgfCtR6x
z#%vKK&M{~26cb?8n(uH~%rLvK$Z^bu7OJ-znD(x^VJoz}=b^>f$1y9{t-Rha@GuBp
z2z*gAu!NcOg6C%YRy}R68nDp$>~d2giro^s!E;{p>z#__zE7E9ov@%TA#*Kx%O|Qu
z$8XN|J~otF9WEGnt3*~&tj{@&*xiYLmu6`$%4^b$9RGwZj#=>zcDrB($#cSl8RoIR
zdC1_kfC!uOzMcS!WV^v18yw|cXLIm?<?B^3^=^Q=^Tj*M0&g$p>x4g7{?fayPqc(^
z2r;cT1}k_PoQD5)op*ReJ%Z|1nknt2!<+m8Sfg-cIBAi*=8>jDulO}$!_E_T$+PP`
zgXO}#`+ZMdVXi|j4ckKHU}EKQ&V3mR?@wi}A)MOXSsgCQi1QNt#GJx6o$k|PW>oGA
za*LTjeM^(HK)b08K&5Uf8gP}KBl~v+D4$YC402B?mMV7=`~1BF*TY2#yd)H?#!Wy$
zlWb&WKctF}*;D|h?e7$|HgOH;8-?ci;l&e0V=Xn{u5ZuVX6jS{a?0a$sT`LesH7{V
zNr`-&lWVs!xkr1xm`FCh*|$4V_ap3h=luj_MtccNB<F09<&|!UI2loyI+<@AEqEGq
zg`VUH(2}mVLMNpH_~djrXO^$|g@pvJQCMEuk$s-AG>d`|%;VxID@Qh8!9IcbNpbgw
z+Q~~}@oXHoo|<}aCyDG;B}q`Pt7TQtpu4mReq^<!XpUrY7S$!j8ZG1E>K&U%jb_!T
z`O4jQP0PcO7Y{wRVOAh-VkUkt%dy5{w!+1k_>R=zYv(_tVwc1H>hyV4H8y_K^5;(Z
znT4%)wpul~tlG_H(tWVbv3pra?O<1c`B6{9ArV%MTZU*soP9qI*{N-_4O}R{cfM5S
zh(*3<3ytW7qj|%{J}${kf(TzU=bbP;ccR0!D(=!_;+J224icqMN)g>{2Aok3-cP$Z
zcKU30DHAPP!5#|$O1to>*rP*9(;S5?g&7wq^~7nwp8M&n-RB6gh1$+1jH1r(Ntx*p
z&3Fr6o$fLZ^rWjS#7S&|*Jd!0h<Pb4lzh93Nxe^e+z6z6p9Ws|L~OlRLSP;S=S#Bh
zmH>2UHP2AQSiYO${`nA3GiEIl*vR>2g@TBxc95ArzhOpb1+ZFg@+(rX(Yf9ebFHM+
zq>wMkDrcKNs4H~ZGnexDsMrt$kB2kLZIK;VlTs=zm?bKCo9{q7d>dS@<T9LzH5Te*
zpJ&`~T{tk9+<vBitEE;7vB*idTqO^)Um1SK`PRdFA;yuCPFe*Ndi_@k#W;YBds3W%
zt2AhCg&AH)T?S39-fcfu4RTJm;Nk$_Qxoj(um^G}zL3(evJ;5r)#~g03KW#&4o<Ng
zOzkUxsMNwu*(Tf`+Uryb{7ql$=}KfYQyp#3silx#ZLZE9>_tCMG$UlJ4>y40v7+xY
zxs)Q6JsBFaT57sK>C>86`4+YMtpAY~)obX(JJ(8@8lL*9-$Zl)9G?NJmN4E!Upwez
zacO-3p9wTw_#Ci#98W8Cu<IqAD2|o)>L(A&lrX=Up;a?7keYE>Yadd~>@$F51`<9@
z!qZa%8<OZF%2uyfvQZzp{$a3uxg&G`6JMGD-Rrd8<ONAXHw{$scjMu^iN%vb{dakA
ziaN}S{)bX2S_tRt_gzPA)_U}yu_DN<byx{K>y4_Ex*KK(JxY6gT-$8?UGTUz(mp-U
z2j}iKE~cf4kilCwZr|RYW-uGaK9qQLc|>w-_p7uVMT!R^u3H^#g3~W7GRnA##8i1s
zAu7Y0b&F`ekt~3}lQ^$DFg|xGO`+HTc@Fczuaf<nH%@aUO{;(6Q(pof?x5z*bfUpW
z^)+M9h%JLsm%`}6R+kyjy{w;#8uVG}TTAw~L7<!WjO_%3%W;7@?Yrr>pQ6l_^1SIN
zQ{`jf%{d~0&~xhjqgJ9h$}(PjxpnLy02I`mK%elTZ;BQt>B0JqqYa<y7D|G|ldpf*
zf9*h_gW9KzVpn@ZV4L}|Z_tNWnKRjHp17LCxMQD|)GhfD-;u{Y{mWQ*Q<J)`hGuY-
z|FfC)x+qJni3x3m2~~(%u&G<$N5pJf_w}=^xE7J!nZrMyK6cm{m{Oz-^EvmTf&^C~
z)~AHH`kVTUw7-dGm@an54A~U4kPlI^=?zTKJwl-2LfJR~kh7E*=togt8_0ix^j{!I
zCRmrN%m_zFR#?hnTqZ?wG;C3e8rDOiof7>)^^De45QwLZe@E7l@)$}(v{>M*N4JEk
zD^nzA9iR?nvM^<Ri4mAm&4@=@o1rQqNtK+iW*~spn2-IcwKsFom#f~46WWjP^yEw3
zrE9POYN?g+UGv-vucOJ7&Uzk7T=-zcSdC7XI^TAA`iQ70UB`8?Ct!x(OuFauZy@F}
zg{ma2rC`@9%9n-9@gdMN(dxhq0rNQLLPI4DU^I-Iw`R>ix@I(9oaS!!$L0C}b=-p#
zO&*KtYPUeNdO_EQe3+T$4`JG0L$2*!oTi4WrXbE%6Dq;WDjc%8-ZBR@B7baUh!Xkp
zM>85t#D_eaw;&{=!68giRf8QP)JbS5$<1il4as-5A2^>DoG_all<#kn3>x{7X^*0r
zCXcq;6t_+2u?CxiPnXEl&@f@u@IC*cp>+m3dNrPcdRVw?o5cBNm@f-s!9t27PXse$
zJ^w`Lh0Z^S1CH<qzwx~GO4}iv)J!;Tsu~Z8`mo7jt2+oqI9_E)6K-2y+eohHivQ3p
z<Dy!7?+KBd(RViST!(fLzccGWC%SSti=xutMo#U7*N9}za{&W*av2k7Hwz9@LCV&8
zLhn&!0Ejmfml6KwHk;&OD&R(1*_cUwzPky#={FA^6+q@SHh#yTUA`2p)wPS(0=fyp
zczK3w<w`>Zu}9|EG!FVvGwM1<(KSwuOvIw1|Le{`8~Q`4ZcoYd5TqUw?WjjZki0I(
zErdP{5)xk(tZMDYLidQ?7=ly7jWH7c1Tpx2&LOBpr87^NojKlvyQAPWIMs`e=2Yj{
zDUl$e{bV4eS8vXhJ0?h741iKe0NlX))p!UZqn8u6CPY)Kt)#JEonGfGJ(`YGB@6rM
z;tGDT_|!~#v94<Fo|qKx42!tZoIq8Bs9Uab>PL)<9iAj3x<WaoaaTb$)-3wz=+2;o
zPWt^M>N=Zph@8iV?2oJkoftm39F45ZG8R=l?RSoNKg<u6{*h5B{6H^Uw!pzt7vyrf
zw$jVw3?JN_UiAtCXb5K4*iry~iACyI%Yd^#nKw$5kh~%^vB(gN&ycNd!*{6g)w#Nc
zRWdKcr`9QKyZP|rDQ&ATo(L1(tD*jHV{W+F!!4UJbNX7w&SvzVjY$@R$rU<`oq@0m
zLw#%u!*DeLn1rKx2f6B*$hX$Xd2Jw*u>|Hp2Tzi)xrz}q%es`w50L4ZdiP4-#GRy!
zvMphlS7L|m_q#_ZR77Qb)i>7O(VGY)d%Gr{Y-E0q30~r8>?v8n{(LmQrjqltXvPY{
z1F3vj&kEO6&Wo8G<!*YBp-&6dP=@Kvo#HpFh*agcd5zHx+|hb~sU38oSb=FN2&Lzw
z<20FR`I322^<3CzA#n6$CNy&j;Z!9YdS8{fOLlF6%!#}OLvnUhCz3WV{vof88;$)^
zO@HL|;AN76&O<iB8Y@A$GLb#?;=T!#`EFXVT}tBTDfCWJ-qmC6af4sY<DW(BNA^B$
zrB|rgz0K@*%`MxfF=c*HG!L@Y2d|hkur|BjMr%I)cGul{-0{-_?fY3;OpX~;#d<(7
z+_Y4lx<1mWJ_TcuyE_-QMe(k=$pUuJ4Mtb!leP1-L|oV-wj$?R*rLGrt*!&(a4vM%
z8gIzB>AzgVoI73L<>J@Mm6s0J8`Ea)&N)!b(H`ep6@fJoyL`pxZ2Le2UZoJhEm_3U
z>N%a*gR``&sN+;Be)H3z(E5~MicOM$n*WR<RQRdybUnT}Mk+MAek{0GFtkv?t%IVq
z*>NeN_+1H6l=A^XKF}ZV`x$`02~HM{HOn_|&45+{QC?P%hUU=uA)kQxNHv%>q>?<p
z$-Hzka-|2K{JWNMTb(O&2+Qp4n1?x=Ie=wpq6d5)s{`Ot6QYzdWl7iaqv{K7g?3l!
zg{=r^oIgc)HK+FImyq=5z*6a%xJGzoDn2G;Xu_n}-tXf^HA!de%f|2!FikLu)OW~-
z$(u%oFForlPbX*SY{=|{hk?(eV|zDJ5gV`Tf`|nYz<B<Y;WkLlJ35*+u5F9h4fdaB
z|Bu#y;^X5$lmCh0G8VUN9TG5}>9C{srLJ;Tn%=HHl1&?B5PDEixIUB{!ml&oH2>&!
zxK8h)NwaLEVI#-pvNZ4!e+m5^$f_SA;yY3Rq<HY>=J-D*ynn{fIbAOdq*MyGsOff>
zy9x_#-G^99*^)WK+nO#BK?E!P?Y2%Q0;bwVI`Pe`k)_SNTKqusGpRTdA&;sQ;KGEK
zWyM7m9un*uQTLABpDDY2`<d?j{15Rb-ApL)KZCOm5tU#f3Y_n&f|Xa3AWs>n+YQ_H
zlR0bE2W=r6r2`TK^Odt|eboCr)L*j!d4se|ZWp}G`Zv0kQ<pCrHrdbY#Yws(PbU|w
zTMn9B3N!x~Kpx$vgLpzN5pG8j5mUw7wSK+k%}Ucb?o}<LMHi(Kks)y67YE_S>$dgp
zeF-1rHQM?c1!?MpvEm@;;2o00sS>e(4Q&edZ-0~~_v;3JnY#Rixk=IarRCqKrvJew
z{r3-)b7EnGJzv96|8jwU*Dt3jfIc~cY3cvxI8^281W-}2?!t`pZGJ846KwolN1Vjr
zBo6=F9#8Oaf`=14{Kqfx<bCmrSUy=7C+p&5UHosw$jN*2WPkX-w?DKWpHX*F3hV4L
RAETliFk?%j#|Eyq{s%nW@Vfv2

diff --git a/docs/assets/wechat-qr-group7.jpg b/docs/assets/wechat-qr-group7.jpg
deleted file mode 100644
index c56f76c9a1c2924d784e496b17e4776ef1ae1ec0..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 396762
zcmbrm30M>7+b=wb8U-OD0s=zZQ4y)KSp?#SsFX%US%p-oLWq#6AW=dFMHWS*N`(rA
zsK_QuR0t?b0)(ZOB0JHbgoLVWkr{<BCCTtT_Wv&DJ?A~&^?m1r%gkJo%slr!_wu`c
z_x&*UdTt0>dT9T_{g8$R1ic17(3}*y>B^*?fgleLXfp&si=YJ>%OFi~rU8B+4HIa=
zKj#p1NW=6$&W~zr{I}1{gP=qjH2>c|;|GpkU*O7Lzx{7V&HEbvdBywl{{7SQu=|?-
zey;iTj?kPO+Hp995y7|+!uV;G&DL+A9eWOX%>R0I@cQR`{XeHmd(CdXNrj%xAB|o7
z>jbukJy#FuEz;DShiPi)LG$!9H1#y*njjKb#R83gUjKXzylKqSoWEcpVbNkOZSVo!
zQfQtA_}YBU1q;63Mk5CN9-6PWVA<+zyBF#oIZ0S^Zu#~rw;wE8yXR?x!O<>coz1E9
zR~Ks;8m%xkS--(z<EG8FcJ>ZCzIEKY&vn1sfrE!Uj~(~&_VM)#`tkIc;1F8qg^0+D
zQOrx1<F3UgBqm+IaVPDUyXhIf-phQL`zSBJps?uiv+@dFW!3W+)s4cY=9bpqU;feE
z)7#fCdi_Q$l@0&({=>(S(J}P%m#JyR4EFczSGj;b|0Nc9|CeO{lUzUv8uRAQ*PKuI
zDwoE*sIP+S&0ny3+rnkLj}T6t(_gdw%A)0aZa;Y1uz0P_QN-ZX`7SNPb+*#==vUGH
zk?jAQU|0W-B>NA+{!^|2XfH6#|GU>5xXAzA6~MRW-T||u&WWKVni{~EH1!}dgbxaW
zNpGl%3+kV7b03wZI@3jmNgV39QgXj1DC-asn7AP2lOQsWRw;HZdofJb^H6Z~nO~aE
z(-aqxQ1frlvT`m~>>Yx471NEXwtm?`5FFOnwE$WU{pVr%w2q6=`w720l5Xluaqpe@
z6rpza=(T!K_oR1=^~q>@o9Xz@U+xTkdi810ch!r^=eG_7C%D}>_Txn_2>(VfBoH7B
z(S-6OLXri`g-U&<_C9QrYz~SWG#8+gEsQwxMLlPFaAT%Os)(O|l$p_-qlK`u^+O~&
zwY!J1=MBP3LuVNYR<?}!q4>(K>FB>Jl8MW-OR2sPzHlRSe_pH>^j{D7Xa1r&s3Au}
zn3i0l>hdHvIlPXhLYIy79R03ofyo=yc7z+>5nCardshbR53^_#xom#wvbuMwZiD5o
z5x-BD`boa45&c+^;S;7U9A{;k=V)Lb=b#16bI?^iCX6pWK17Oxjrl8B=lfkYt9D?i
z!`j>gM?87>-Lf_}v@(7eo(KqT_S;|d=mhgJal(w+Se+jCV5~CprbBXG=&T|4WWmd`
zgKNrBoqFU6;Y-|Cm1~T1%E7ANMJtjp6rm_!q^#gk2;Tzxh+dEi8YH@O^HtHmPnlT+
zVp+phrVV~B1*QCK8eF*Hc2FVx;*4L~>(_&WR=;_g`n%t2+%rUa$4gZiHz>ccx|=yh
ztt7S<@eFuX{(qOSNXX~@Km5CvX&0T97w~Fw2Kx`HTC1+oYl==KJvx8lyRq(X2%o>o
zn-Apm^8<_8Or|jwt2Q7Xo0O?HU?RSrwc`nvGL#+U-}A7$HYne}wMfFGpXg?J(ofF6
zysmshP3~YI&7u0cnho9I@*iq>m9@Nd_b0^GOh~yGU;JLVk}jy4gX9^AjbcAClU%{k
z7-R*Acq3dDwPav0&_Bdw1>$y9<&LgxiR!;-_>ITbJT7q&lYAmsXmYG0s9-E-UB;oF
z>42cU-JckCSrAcfgRhdQf0=_uCgBi@YCYd{4*FafOHPHc&8ZUxk#o@e0d+aP7H^Xv
z*}GBF?#_t{q7l=w89tTf(f3JZG;B$d2h8hfHi6SCFAi?(S@p$MeR8U(%(i$mtjF`2
z(u8VeNr6=3|88%@w<K&0LA7k&0It=JQim6&$t1~9q{Vzgl@?N!5Xmrlhh1<_^+o5P
zq{zu6BbPN#ku!ItH38pCaJ>PuHScOIxnqGA{k)w;lUB`Tskx(m2B?T@*RceG56pg4
z84Hy5Z4c>s7+ukdNl(kZwXNH2tNrdmgZaEZTX&Bz`TBs(<32rG7N*7&j$WK;SsbZt
zYDIOgsi`;^Cg+)MdgT6VEP1hD=r$GEJ&7?LTFC=MDYwNsC0JUONDfLhY(Q$7XJDNz
z`vs*KS7tW{U9V+GmA)zmhZ_;e+RKsS&r~~5=k{j2ASk#j!0to*%FE7$8Hb~H5#LgP
zavOdl&m+dwQsy8niGq(kcVgRGdDI%uL5l_PP9}pyhQ8IK(p)zgJYhP&KescFztpv;
zJ?~Nm;^$N@9(dbs;{S&R#sQDz5HK>G5e{;UqQkm~-9x>H^NW%4deR~lo!FRdc>s%k
z=tmFy1|{6;ZWL1ccwu|KG^KZiRC`~mcxO1<BKkf-JaD8xQto-AI{hQAS3@B-=2$@L
zTUgs1w2;YK)r}i4=b+=5jq-%*AV-#SR~qAe46!R{n$*SuoHPpQvtc!X;!(C`HB$E5
z;F=!Wlw-SQBU^Zn{KhgejjKIQIcqn~YZ}RnB_IL+3XO#62C(iMAcTe15`dd%sBhL9
zfvcZU=Q;%-_<*dXZa4%tXYQ5Wiq8$bFp950h$$>rL~^Va&7Om9l+34bL)lxAjHC@u
zdLrzqd*rNd%~NB}6;q1FGOG7q)p!TgOA!pcCM8gx!V^?9Sn&uf-yNH5xh!e;)t0lI
znbyeBuXUCxtt?L<KZ<`d*}x5ZAi=zv!zWY}MpQ8^Ga-{9%Q#e1SuW`L<oAbvTg;(O
zP3$jVyky?wYYSXwKSo#XXa5dsz#-IIWFF}j%VyX*m87FukEVW)v^H{xBSyF}^6{$6
zx)BpbvTAW&;27JwXLVmB(ZEd_L-lx$(yqP|9q5T1PnHwivQG3&6*_s8Laf_BAz45*
zkt)4^d@g;eL!3A?BVR1zCe7NX47VFK2$ni+LM?Z9+rInWow4G1InvJ^lDjo3ibHxv
z#ig~#cxGVL{DV;^VFPtSQP{ah{H&7Lm^aFGKr4?V1l$^LC(U=UV*Q{lX0NA_mbz?W
z?LY)gVL|(`Fez8NeMoLT&@vk!xL)CG@m)3Qk`r0{a!O9{><P2;Z!44!SNF;Ince-`
z_EoNssvTJ05V)`=%K|L-31)%hDz0L_=s**7d9B_s`Nl<HMJmtx*c`OK$ChhA%h@bq
ztq1ALlo{;ZxdD-9(u@X4X$KJEjV-*_(?;dJXYGtSvnU=%2afcb?uYQ;Le0GgdxHBT
z18m%Q%-k1!k=j=F?>+|mEQ=ohRetJH=8pHbPx-F*T<f;{*3xB9YoHPh^=HfyUn0e{
zoK{OYn2&%r2Q_~{Cl!Y2tkZMQB5J(TiX1)j_4en?XinSh+KlbeJBI}}t@-Yc4Fs9(
zr_w)d+;H&<MAn&uhRR6D?himjm<6j-_y(+%Sij3UELzclo}GiVRR+=M_Eua^9oz`(
zRm?#KOrp@coSDzi4w;Ql#x{S%4H@y_@<_7{jWYq2N{gg58Llrr+kO;4>VYou5YXM5
zXI4fBQkyuH4z1b}J-58q8|p4SWUj6EJCht$y8e;-;}fGMVOZZ}g?wwY)Tz?Yp}Mjt
ziWY+UzYTRL-#@cG7PjXg{t|56dai02UG}ljnb-&$esbBO+KLTJ$xFurm)4?&cMVg9
zCyC?i`7b&n=Aad$f$J)JR=b!By35v~Tdx-}gZ+B8hLwGEuk&{6v$fpNS!&mzAIn~S
zn9vJ9b(?r0BM$g0N-#6!7G_YhBl&71oMP_4Lmo400xRlzBP6;s^vxjMWUx$phVyLP
ztM*x!ZTtQ(>jOr95ssCGm6sz2pFR|y=qUDuU<Mf_7)=z+L2l8?J+RaYk<3AND>PJd
z5Gxd@S&Nw_tx_5890JnJ?8V+c3}qXt?>jki3|T}p$g7(n6-|+^nOsancQ&y%^H6Hy
zmWl6wlPt4sqs9fg^f-}&9#P*igPPI=*X*3#e2`x*f8ga|hc#z4Ko;2{I8C12DG}>~
z7|TeQgH)yWiS<@H@kI`g2jPZb9tm6D%UL<G7TKSX$GK5OHb`@Q4jUXqPS-jI4==L)
z-BvR^lcL%(YWr@FNcg$tU8+_?j3QNU?c0H-9FymeTK&JdhpZLXGE%N&#wj56Gyb>u
z?}O{m@YLa&$!mUiyg_2})DG(~E0905v4MshQ!I6;SXra3jJ{OSeo19Eth3nZ$fHKl
zEIUnhtZ(X_rJrc3#^3qEVF+va3fwejZ16>wfa_fZc;IS<>JZjPmrW*LP;J0G5u%W<
zTZ2Z55^Y~k!%2awQ0u0bwZ4p@6bE7Y<?LMM`JTPJ)cV1Vy-vqV#-cjlvq*^J_h}D8
zEz8DCL<tZ%m$MXZ0KusIW~OcxDIPvcO{vVWh*^7-q8q@BYY3d*8(|uDspNx+YfIJ1
z{MNiNBk?}RD^+Pn%b)a4DciE_GEM2@zS$PLh(iLI_Z2%hUZBT<k+voyldunU$j27`
zW@JNERBro)bB_W-@ueb$id=Mp=517YIp(j~voqDK&#&8~P6l1DD&P0z&A_3KdC<9I
z8tN|~-avvO3HOZxxF}gj9!ONYK@6{>TmUdvu$)g0OXA22of!G;g{<v}w@`j@@sEfo
z*@-@+-oL(!zYdFQ5ie*mU)60Z(HGNQ7Iiy)TS7BJMvd@w_SO8G8tR<U*_edeCxaf1
z+S^|~lacQ`K${KEDj3*%`eeat-#zL57wzpYzBH@L%g(Dk(hwHLSou@K658?ug*P5+
zoc~|oG(r;ZRCud@n}g^bi5U{DIfw?w1!`jLL-f~n8>QW~v<D3_(f0#FtHWO1jx1x^
zG#yrFH4SQ_CoadlZ!&>zIvJFVm~ZYjp;XWuoA3Uy?spA5h>Qd<uyr?K#NAp<5`Lp{
z67eX@*{`T(rA}@#$~B|QV;&Yss<juS;{z*dk01k0CIx9`oTRO+?U}ExN9EBwZKE<1
z5{rFwPW@qaNF4p{faY8$j&Iahta)eGj1x@$@^|Mv26dAAp#u8<eRyzXq+Y#<+%}H?
z6rvHLNosQR$|xH#`Eb2-w9@2Na>>YS&fVfslhSN{Zr)gRVD4$>{0I4Celc$^_)&eR
zejawE@3a3rI`DR&ZJo`2v}Qd7Cp!O^lIq_IERsB0X`}MPXlSbf#&)CrQeui~CrXrx
zZn73gm6N*6Dxt|u$6INIt+XFA19QVZ<gYL9vkg1ddbm@y`=O+nUc!u~_Cz`p{GUGQ
zn;IXm{E7J98Yk*w<wzfVM(`$jh@skmo23me5VfvG1K2AY3WeunHE=?|xds+5C7@-w
zdAok(973i)UZ37LWo3G}xA~DDo_D%zASCz*tb<*n{XqIC|ED^c?ojC~TiJS8fbtT%
zNubYOMXwArLP$cc_@g2Wm88^q6dCW&mP!_3Zo?LFPP=6u7gY@_dy=iz?(dnj)6QLT
zwCykdm+xCX%{xp`+KgsaW|Y#Z+2y&Rm)WI{Li_DAbM8JK%}5u`h8N^Z8qE4`Jt&a)
zy|gNor^rj5o)8BNxUVz%=HSZC-_h!F2+p=pnY~A?>s_|1YuQ>%o5mcgE^tpyJh}Wm
zClOyel6hPf7>HR1qQsk#bCA)9cq{*DxVw(m9MmX&l`30Q@%K9A(NV|Bd(m6A?T!ig
z91B|<(@+|LNHh;CMTUn8R0hL}9atP1)Z$2rWf6n9EH9*Q=0@$oi(71+$v#*jLX>fZ
z0>Z$UUtAocz<&(ij(S~rI0uDDocUQl%-#qLjk@T^a`65Mf=kV(@mZX{i}W7gKY|VG
zJA}|QiCI!w{JDwztzAw*^dT;R<%rQ_#dY%(&U<=X(V45Z*QdBEutT55%=+h`0k&aZ
zQ?<Pyc=<Da8mLc0W(N1?6%2~~W7!)2UaJ!nCjnTw@YSNE<Xdp1bt6NcIUt-RG{MPi
zEo^6zY8!H^6gEpJ9R@Zaq8dySR|=&O&p%81rpY>^?6p01#d4EwnqAz3twm)6uR9)v
zn8-h6YN$~rr#TQ5WC^u<hsnlR+HNE@PPO*I*q{YUy`iF%(8Pp<+HKO(d5y!zMXbFt
zv#8_GdEHY1MAvS4IM2%8tGBGQ#CBYpp4`@!6ehj155ji>cq>Sy5?IHTr{D(al!vyA
zn8>x`roiSCF5jp&b+3D#-g*p`2tBN27Oh3oWWx{>_5+=~ckKyT#8j5q)(6^q&D6j6
zsej3^|Eb`&E(oRyma<o4rc$>nwf?A$jB=xbvVf^s&nERb9UmqdVhOWmWLIP+vBLi#
zgXiIWr1qEi1aW`A(d{QD2Ul!4+`6U11eCp&K!XXYA24b(0xN#UzGVyxbT~K4RWUEH
zIvO$?cF2@rFh*KpU282RYg^xns5AMiIqEU<d|T5`%@65*w|>hw!i+xJ=R~HLWjj)r
zVV5Fz5yu7;@z@KbV~AQ0&_C6XZ;eTW5~9mW=GunLSH-eaBP<iQ)Uj}{yz~0?o2C<=
zGQS+{i`-dbX1b@V0t@HGz$bcb<wVz~y>>Bs{`li3B5L=qDpXT_5FUEXxxvw`r31sg
zrsl9TrPLK8mnA7|9lFFsWrG4(9hD@OT#e)!s90DrN)*~xf8eZgPiFEa7h(mj{Zm<g
z`PwQ+!ncN%e#%jP*Jo7<Ij7>f`q;f8Vj>4QXf6Jutpx`*Y7>oG2u&=6FytFr^>pAJ
zCTz{DN}6g97dG-qm8J!~)AuSUx>%e)-96-8=~N8SyD$7Zdy~lbO}j{cO@bH#Ke15h
zNo12ka`GI6d`EsA?1=>r2WYo=u?gx7{(RLsG&w|c%2#ELT1ulDIRtEPYt9l;$$KBJ
zZQTXotRm~&lK!fnT@`JMBjgMZdOOjpn`ili*v7#em9kV}#}bfNw|h&|>xRt;?pQqP
zK5QXWauaiwybvTYQ=9t(=k=}bW6_I3#7D!cUv$@6o_-u6=Z5C#f8Vp!u1>4v(}$h%
z3kR!eps%^^>N%DN27}UTiTY>NX++d4CZ#x8TTIL##X`Y=pTR^_`nhp@2@-xAln;g@
z<xjNNR~Ab<mXBO+xl%GZqt_f+FjgJ*F8j|T9@=>j>`X$K-c6H<{emYm6O%|dY&3Em
zrBKzyPTNq2gUG5{H`Gid1n6G1274!EEX68byS<Q41(2Hp9gvn3MNRI!L24-5BUPMo
zD^IbD_@(x~ZgQhhx;QG?$+|G`k5%PQQN!z(qINE{)Zvxoh1q_7;u^eW$L-(Zy-pcv
zJ^Jk%f|9}1lo7AGY-X-)q%PyH1P>oAh^>v1$}OAOL^L>Y@<FdHMUNSEqCEL<cVyW1
z&l`Ts=~ldA=BGR}i#mII?d^b#niv3yahZG<l_^pn2X)E(3*CU+2sAJ6<1b`I_X5ui
z=+4dYS5xZAIz0F~r@VRau8g~sHXGsKeX-v!n=6zUza3SKE~$?H%VfdZN=10eSrJ5f
z%}ro=N;xLX3qpJw5|uP%ZOGi)oVnqyjH-nd3my3!F7rYYf2HW`sy<utQYL(&`_tBn
z_TYW}5pBf*Zio6J#*4Fb_B4Lbu5rI!`r(!vgfAcuq10ru4$BvvQS8AyrKzSMSz^gZ
zT0O_m8n<A&ALv~z=&L0dHPJf~96495YCX-W?ir>$W~LtK<nr3g3>7}S)CuE=?2FMW
zB2wTzb-l6Vl*^F%TVNd9S)N!V;*D#?D@}l%@P^4ml@oSJ%DK^mWwh`udslZm*+>Us
zsEvbbI?qn)MEkthbUK%|*0XQRDSp4*rm%|A&4a#nI$obUzOQ^y6RW9?iQ>+PzW717
zwSZ0*mn+Uc1)AmxPLT`)SV4%bivjj6V&kXgus34ayrhmqP*7wwn`^5}r>rcccwO1%
z$_#pGeho^k_cMH&T<{DTd{K5V7rQZjsJ9~KyvPH>JOASjwiI#j5GX0)cr3S4xN!j4
z)y2T|o0ax&=pLoJs_j}^lWGYMn9h6y*T+vhoNIp^-2UtZ@}r}-cu5-8Y}EL(Eq_(I
zm0dl#!g*Xht?G{@zog^ZGbo^zT0mN>lBb~hQj42Y<RtS2bt3+9EL7N>V^XbT#~0B_
zM3;H2%~+HSi>Pxw9yYx*%%UaGKs0r_cfw@Yy*G<Omv8v2^Z=GOq=}0EDG`+W!BQRY
ztt=aa+sqjV0uFcGiGF{Cs_$aOqz}2&Asr2~c|+xWtP2G!YdEC`!?3g8FOzr*koJt5
z5oX`dK?ka`r=z+GdhLq+ji*YrPt^77BG+;Zu&Tzv1&H9f6JwaMEQGCxFyboAf|>)Z
zQ0nzae=~hy&I+U>u|k>cABgG-O2%ybX|wy2AC7uu_@x&YN#5=bJ{c6|+}GQ+TfaIM
z28@v0L6$;jnS&})<%D61*4Q?>`3e*U|B-CI5&6KKe?h2QbblOo5={q?jwDzX-hXk!
zQtt9;@WYNzs}dp(?rC3sexWObYC&_*xl|&}FEIXo$mI>!^IwOEx2EKdW_sOzMDw~h
zdod%Ab~*AF!%TKo{;1-%kQQ_@h_=MO^5VrVS4J3P`A<TV{WpHmc)Dwmk8TN}_lgSV
zd|VT&e|Zjyf$i>V{vRF}%s1anczZ!5=y<<Ndl%^sg34ScpY{wy-EUpy(U*-Xj)p2o
zl^s`X+swS&50H+Q_e3(TP%E7Kiwne5+cRT>ZJyO#5z*Oux{Z%&znRM3PXG0<JB@u0
zp}8&q-8EGsf}x2yNSrYoUZo5VAw8>MioCk<g-oL%$rY9-A+{ob;@dMt(Z@I~Cg}ww
zl5yO&N8dBXvdJ+$+dehVe`GtQpw&Dr?4<rclXZ?v@e}c{XaA*|Au`n2f)K$?_!+Px
zEfyU!8cvC>&v8O>0F-Koc{nC6%Lps=@foYW_|zeR<)NDf7r2)(J-utXOZM~bzkRFi
zjtwPMzLZwwtRgD1k?^M%WY&wAo=rxe4fml&T1WJ$xzYEdd&s9q=dJw;ru>fYnY*hF
z21mx9&h$0>=E3`mOC~g`K(%Wg1y9S#_>IfpIqTf`pV}Ay*35WH3m0WvtW0V!8Izet
zUVM3+_Lq<Fo0UK3Jv;Zx@i1X_9g~1BQK;ieYYn76E*tSq4zHyOHL=q6pqhsAHBd%F
zhc>oZ*(5nbkzZ0-O6Q=ZDlPP4O<u@;<d5pGvQk;V8FkoQlMiU#nSGGT1VlAJ=rk;1
zuVB}cOv$Gv7vQf1Myg9P@<O&~a7TvJ?l+Q29-??5gBM~S+M05-yFS^CXGhf!>LcH$
z6)}%~7Rhvz*E#;kHcs?@!a3OcXJ$gK+4MtSh^@jHV5#5+m;IU1yDL#xzCd|~9=N5d
ztKzv6rG&`<b?<!EHmTgdX`4@dW`DtbjP8l)$>i=rv7O>km4jbkVj+{;G$Z!7`NSsx
zOZ3Yb^f)x4`S;J@n$uv>B-{+VTi}~my2(S5ra8!jwHu?LGeW*y4Wh_G9hACXWTa~#
zVI`brZWlFs&At*y!!#RnOwon6O9UxXrF(@l_JPJ-)@KdubS#eWYVGZ3`yXpy2D?bd
z*iF>(^&<H_z>P0ZXPi|50>YPV$J*87WNLA9Ys3q?=c=8-=XBaXJt)dgHFy^n8ug8j
z?}@CPhJvRzKFIIipbz-?xhKVv>lj$v48AyT4ssPLKFmSF41_obJ;;eAXLH2b_#!ju
zWP$+k<Gz`L@WrV^9k(+76llXV;(T&Tsy1sc>XH^z2$<}KIcP~liskTzav4Ks9Hn_V
zIwVF;n!6I}1%|If{93Z}MsQN^`hKTx;X>NwqcF|KFBaY>K?##8eRn(=mV>99Xgx%l
zgZ4T@uptTYCcU<H1&R#E-;$RJ&XBd3!^f~IL)n%TWG2N)y9`SZcT1YTVUk-a&xcl<
zC(2$%4EXC<c%ob5!{(r6@BIC{rrJsFqTo2CU(cS-J71J0^_pMy#FG65L&+q>BSjO}
zN>iR80=Zf^OCwVgNxCXCq_qh&(AJFcjjEnyv}CqkQ`yMi`Pd$c4s-KIuP1#G&K6C6
zmF2_lR^;=_XnvJhk4Dq0v%k<x>U!;~14amn)xe(FKpVD#k>~8U66`z<655naC*ezx
zQWtI@IFZmvT&r1m6j-wnzJqz&#RPwO*-IcJ8Gue><=uQHqm{gLD)*AK)S@vRH#fI<
zik8I<$#;LM4bBY>Tpi~A9eTRrFs(W#E&uQCK)-SOSW=hHjLI0;+x($Be|&a!7#7H1
z&<g8H8)-A%gJev<@Qr_9#a63uYg>#Q9I!Qd+$VU``sUw2bh7$$GtwFp@~LW(h6;rn
zHVcO02DQ``a5!ZkLlKV2(Sl}2l92OyuZ)<48!_9CV(zp@Be*@5B}<0QSqHF7_e0H%
zdsRUXv8p{tdTfS3heusX*Le(3k>5>4Ic-+wF0Z6YWP$_shkzyj%iAuUz~B>=2uDs(
z28ZNqe%>{`!^y4$OKz6TcRC_fTQn_uLorV&8qYE5Vb5poJ%Z|{o-E|?`U@VsW|j+$
zs(HV7zV^eC_vJ|K0JBg}!qx_>mL^LJ<S1xrDa2T$(v|fCDoSJ-D@~Zdy=L#Q4AXXX
zIZ=igD?`mUgAXOj?b^&Pw7M)u%kJi3M_&;WGT%41WS^7X18v;Mm`$hZdhWbJPC)Ew
z3}9)6`syc^vFukDW4sgQ4JM<y0otCF1)+RLG^&BCk8Kw=we(XbqEnY+@GeYWYQ^yC
zyrX=H_dM%nxj!6RCjR?jKW=<A6H);#|LQWhVG&;kScr$p3Z0R0<a#J9V_b96L9$vo
zNZ}Mwi)ED7C?+M_r5d{ygy3rg=>DfN?n)-5)z7&q;p|lOR8N?b^J%GDUu3|czj?;B
zyL0_Uf;`Zr1UaWgfZ1v*HdJ9A=)B3HRJo4QGXyr=!m=p}by?8M-VAtP>zgj-8(tK+
zDqe@Ne5HW1Wf>qA*SAKL9<sbt@n-83tp6sEwk)8z#45icUFX4AEa_wJ*D5JMfb1h<
z4pE8=K#1%3OCt`?TD}&|8V<Zdx~_`iVw8GwU2JtBX4Kg6&<9)ddE6b<%^TJUZsid9
z>$cWKm5pupH!~5s_Nd6Z@u%}U?4}h0mnt(s;x3m4aLEL?;j!eIH^{U~6Lu#I;y^GZ
zm0aP++J_MlVT-`{uWr8GxJ1V(U`U|Pq)0R3r&Ct|ChB0=5aSw5jBE#vnV<aVgmt1_
zeqW@Hz0T2%XL-)6OYI1KwoiyT<e?NQ5>_?QuDpZ`2j{8FKm<#nnnlF8$?zA$0&KTx
zE#l^l5aQ3)+DW+(2x!gl60X~gNmdlnBeR|T@S=p7*dWd?3XMpe@YiwJpFv4DSvc77
z)7e;O5J*4>U)YMjoP(ZzoY;vbDmdzFwgbC!hHZmc(jQ?pzMX74x<E%2AWhY0x_BHi
zBYJm5{I1eLilr^Z51ASA%$AIzQE}g3UJ32gfQO(vJYw(GVn#_wy*}_uK*zooyxFPX
zs}uP;c#ojM8$dU)xu`{8G7(8K9yKv)2#AtaU30RMrV{EVGWVxE3_Zg9D5W&T`1_-q
z-_iVX@`}bUR_EN#<MH!?9*IZXH>8~_8Q*2j0Bx~!0As`8GpVm_6su5){DRVf6^eZ<
zp|VzqoPeP&7F~037{fKt;|14QcBp3S;BqYZ2iE$SA#wsoH@|bb-Lxt2o9^kI4JBL4
zPZo_ll{7EzVU(7(+}BWr0S<^H@t%kR>dC^J1<U84(;Zhx%lY53qSb}rxP|I_?6j1e
zgs&xOIe8$tje(j^sAe?#!A;$^G5Y&KOiDFp#($suFtqyO-6E<4OCJdpmu7z|q6a?`
z2l|hC#gfv=NFWDWRaMWx)=$<0Q>bv8m_!+Xtgqb$-YTgJR41jR6eC;*)vYnFk&zZ+
z!>uNSB$Y!MMyeMOE0i%CBor*Vl$P0Y`*FyODD_fI-k@*jDZQxBSkg1eLcvhS9P~P!
z63^D;3^U|JrRTW7aBHnY!5}ty6!Vr*ukn{+mp0Tzlf<8_YS-UqRt**0VjZMEqK!HM
zp3SfII+qdY%}evXBXTnue@MGe0_l`W#8z_~QnB@%tNcZvWyo={Qc+M&EPFkcuas6L
zvDTt@7+T|O>uwd5_GsLEBM&uCk#Xk(FUz#WO$A*g-`^uAPS$P#^kmT+IHXmkbE?N5
zZ$}Wq7wdnugZ~+r(U|d8>F-rIB;r~c%5y3W_3biMkVUL*N3!3?8@hF}0lGmiV~VT8
z)CQp-*<}Nk9g%#H-1V2pjzq+4j&@fV)e=uGd>RvUuF!4$FW!slNpA~OyOki<bk9K#
zCCUr1v<)N7L7g4DNX<qngEWOfH+kqcK^3VPeiJ2hvG1*gL0zQdDwQl}S~i);d8Jj?
z-L5$?avNk;ng`ImG=<`F04SVn-A#X=stfY&j!;{E*B>tD9DCMP5fUys^bArB-Y1GE
z*qRKLzP}Jgj&TRJGGbl6#o|g;j#%UnH$HGZ)`e<&BEQ)ahXaCz=B6m+%GZ|vB2irU
zbjnVj&Z+EZ&whN>2&f6pj$htiS}<CDJg4ZK`fgD`X=zG5L1FN}&Dvb0=GUxktOQV`
z!IMlUzV;k;XqnV+KtzgNRj9$o8!CUK)uX%i+hI;pCGbiw6T-C~VK=k*d$jV(&?tYP
zY&5eq=~iAYR;p7Pk0<8K=*pOA3WO(2TVpmK@x`rMvth&A=(ys|)4oT~s#D$TdTTEs
zmdATarj4$;KC2dV%i-V@^N&ZLRlV5e9(j^cJnA{P>yE#$$mivnw@n(V8L+aA@X*yk
zZ8Z-LvmU5X#9%WZb(<Io1+Oh+`%97J7H`R-AG#}2O<3+|GILy35F24e5t<a-oFW>9
zu#J#j2l8TG`vq^j5BX5__(a2{M<e||`Mr$1R5JPlsnh5>Jk-I!EJ`~P?UXP9@1#}+
zCd&p=jE*NZid(O<P9pA2gDbmhU9D0YLo(9^(mLxQ@--fLX-K7GmOp5~Y{-^zmq<b@
zx1I3uW5(@&p5uJzt)@x=@{!hz)EnU9>m==IOJ#uP5sWb`S-}Lo9M7i*Pd)2put+j9
zH=)Q|aqiW8R6Iy2aBi;tZhq17q-T&c9{TB+2L6`<MnBT#pukRe<k9^l6l1!Piy4x5
zL$&+#%4LHgfu<t6<O5~tZk2aFe%Jkp`@^mGYtoGa3F-5F(>Fc5ox5e(u~TLDNwQ|;
zKD-NFF$aZmlU*z^5!%ygGII-*8SU<e>vEKSeY}991Flc_eUWCTNK3FYW?=s4NXA|y
z|8~@4iH_0k%IEg!dL5erzO<inx^KSve{ezQFku>WW*7d-?iH9uPzEkg)ptcLpy7<z
zv{DzUB4zhf3ra&Tzk2WxbXaj>Z$<kVAr%SybvBb0Xx_^+=B0Q^0`KU!9GIrl{|=O`
zWu?zNf#8R72;L+>m`18x$`GvPI0z}~!*E4A1kZK<Q?<6jL*tac-Oa1!pfgG&cn;c!
z-HIh=nLraPJ!DcwXlnNh)0DPesSQFk1FD{89DCly(vzmpn=e<GoYnUq=qPN@AMx^@
zx$Pr77e$|6#n2jPwd<>;th$uz1x-`2AE{yio|3Fc02PBJx^@n_R}GP+x8cw^Xx83Z
zYzoQ&Zc{3LW(3rd39jm5Faq^j5W-Mx7c3+HopoOmH#Smm=b+qE>IVYk57mJ==tFqy
zw;UsO2bIJojYOGSpp*5JH_aC#eZN&A@36#X$r2S!TBqAje{pB9+cL%9x9jZ0s`N40
zzN>@Zh8yJH>)t5bxw(^&+6i)wT#g9vgB+nismB6q%hz#<-D%o^eW{s)xWHJZJUa>4
z*?(_P{MXUK1@f&Sa-Nl=?97`bM*V4rurmWIz4dA;`<Aq7J(3>(bqcxz;81zSRdV>`
z>nfRboXT#vV-em5Lk!h6ncC=kbYa}3OQ?54rosD`jK}`#`yORvS|r(}SO#=``t#_<
z7d>_<+l8J_emh8y31(baa(flw^L5aE*@(Y^pAEiH9t7^Z$%?fN71pzD(}sduizjcA
z4N3Kvi_mvfaW3YA%z>e|mDPg}E)8M48u#R^Uu$(__fB@&jweg>UK*zV7_ctyLryqE
zE>RN{BK56W%7c-?b)AAx?wf(bT~2%RXyOm4Y>qMCtSO_~t29^#=Ulvf0=uQ1)c>Jd
zW}N=*P{NPIN}t@He!ou=R;kRoloY%}u#&%--NMo3>!?m3-pxb<)oP@w<(<FGx$25t
zh{_|6={Fz?>uB7>(%1QTed>0UG&<YUJFbDfx;n$PhgaMleBfEt)4KjCwY|u{^CO@v
zQx8FE(AK)@#tOg~h$*ghL}|u4fz`?C$n{{v(g009(Cg$YQwLa+4k0)vs$lH$vCFse
z751VF{<N;ZF~f%nwN$ww`)s#lY}tU1|A`a(H1KCsL<B#B)hp+qiLW@nSPD$cZn=gk
zncY7JRdq~UBoB>nUQ>tnQAxErmyqNkcw)L(H6JTLZ9K9-e?(hKzLB#H>5xa|kK~Y^
zqx-W9-i6Gj#0sz;MAqYro=J%+#C8hx$D^KN8Psl5q4{RVjfCkQkm9100N!_X;2k9F
zG9S<uUyke|eE^jxVKwVKb`VwKTDfR&GrZ6#`abIbB1m-7M~0;ziewb+6Z{AFL9@ld
zHG_iMrxlEiFB_fxW7O!=*)lsb6EM?rDEj%wsw#e_fAqB^O@tjweniIXxQZLtTIILE
zSPrV(VYE#~Nx+RpsRraTusOi8E-z%`*DEB%P<SbidY!XS6`Y3weyxePxXa02eCx^(
zV_ADp5ta!?M!L#)+B-e8%yv)9gZK4BLd2;vz-4RHX~1Pa0vMjEa;ECQe;3{-{$+|U
zPE?*}zXYIENJ5TMZ!BY7Miyox1B$E2trt>39NR@?XRIO*O`46H8~5`~#vDs4@5-Dn
z4p6#R$Co&n$t>S(n1hbiKJBU9OD{-HCB7RwJm_QBNtl*iQU<YqpN+}uQ-72nRPJn`
zoepz;*V~R3NMHDbl|G~u+`Y=Y_gj)||9J!7q!q{4Nn^>kt+7>Hd4qBT4Zs2kwk7>3
z7r=Fk_z0?)J3Mp4WfQwY{PE^w8O!(qQ2F<FQLZ8uJ^djspYF1`qHC(oUWw~*%`vJ!
z51CA|woP3|9i54)GBk1R9`Tz|_z<R>%h+PUQ%ORFM^Mw{k8*FN<LK<xD|urkgHK`W
z7C4b&b}J*#&poCv@W9W^JHFXgrB)yA^{;qz_wJ%w4(A`&lU@d^Orw-%@HR&Wc@V(b
zz#gt;45!AbR&YqT)2L*H3$bIk-9ts755tMoa1-&CD5JWcb7^=*#7=+rVmdX+Melir
zP+TF7y6$D>^HP1wo6_5UpD-OaOdjAWtg#rW^)lwiW|-$)uT9ipy1VwW_LdF$vAhv4
zUL+%L)azMbU>iMm#IL`gG_=ZczK0^l;b0GU+VV}Mzpvkk6KyNM(@=r*)KJLb2`1Wy
zh;cA)vXPNQTFG9?a>3$?S?nxX|81#+#Jtnmu$@jO^2k~kUFe0c?wTepfBA^!_-t?K
z=og={%NIHDx#E#_muweq!5jZj@d?o`QZK2MI54i*fcYbFGPfp@35b&#B`j+xgD`&i
z7WZ5p=s9z5M0yfmzpqM=96~zc?VK+(4X*05-db?A!=o!ghveBey>lRG%aqbI>t62l
zSaM4~AWwnW!kC>BR74pp2Y^PqdiZ+G^5Mxw?gB8Y!$9dWJ20(48s->>3@+}QYO^*S
z&oGh1^R$^N@2FhYlF@2@woaR{aO6U$*Wq`5gEW!nz?glMeWAuI0D238)zx4YRU2-w
zhr^1^_A2gS+u+Bled>E`2NoD)N|aK~N6Z~i;&qqRs-xIx8FvA;Rw!m9)*464bi%#*
zoOTz#5k?i&UAt_5r9fRCh#KZT8gUHIE%J|Lf%LO*ko|`GEax6r_&osq^~WU@7L8z%
z*$vxS$_hb%n^FnbKue}I=#LV|0=Hl&x>rU{wD)ILPVO^##d(bFY!>Slg_VpDACJiB
zS*2_IM|h={-aRF;&J0|;9T?opHgNIB>f+k9r<JZMGm+{z>d=@;j&)ir<u1Yi1G!yP
z>ndw^YpQnPhUJNAF8cibN!jlFkj&EQ{=7>I%I=;FJH4e!)VXQzE<<?e8e9oa+_P3K
zt5STA<cZ|Q$c5dgn~=Pa%5p|U2`c~LNnOk)5c!x~ksWokml09izP34IcI$&RDP*4>
z>(WS5_vjSM!xeQ2(c0s`zPY!{DHzw?r!FU-Hgm@p+bMUc)^~yd>1+5FEDcTb!?uBP
zB+*<Kq1>EetfU97>aAUiN~Ca8>M~<1)!N9?vg-vj7hU95P0?HM+ZfCJ4u*=$P7a^x
zm-)BzC9&|mY%sZw*KwW@<ju;JSe0Up`WHK^wTf)aY`GU1axq{A9j*|u*J0j`)vvN-
zL;};=4Jo)Dkxki!?k~!vS4VzI<Bo{aIZoc<Fu||=gE4|E`WBn#gdtdEmaFt;x5Iky
zDM~DL0pCpZ6Glh1Wsx)TBcRc?4fC#NZ|ZS6eU33iUZh%w^+}zhnoPieMM9Zfz*@Hi
zNt3w~QkhK)E)F&HOD~z3(We<k^^3oM>Ksd$5+XqgrTRL1vuYz2jp{d$dDQx7Fw2aU
zH)gsN=bji7ECZZ*z_9`6$NP{_zA<{H-~q-Fiu3ZCJpDrbtdnfRtbMvCf5>b*@`P8N
z;B!p#@8h7n2Otone}N3Hr@UbdiG<`7jxKwx>R>rm_gLl8>tr`X(x(k>kFl&rFq@_v
z1CtL=A2Y+lJoj}QjtAD=5PCf6<ym@o9{VN~jF_eL<=-tj;RnHsfB7HwW01HovYU}Y
z)g}jXF-y0JIMjdGEyb3T$kC06q06|5fUcppytfTldlby5n94GQoW(j`AH;(nm5#zA
zXlk;p&gPHawLTFkCYJquku~z2ZqN9=R=dc(HMq&7f&!o-N1a1Prdf6XDn5)Q{~3qt
zeuGI6&hVtlfI6Id6JLT&?#5E2R%?YE9Tp)<##nOVV9bMqG7cbcg?qo|@=*R!U%K9?
zV_jYIwaoN1yH9t|ots}A9J3=u981;-(VTS$%JL<Lq+X?#SE-g~G*<~$x~#+KQuaO6
zQ$a;%8X217?5)*l?g(Cl5{_cIh<A%PDv`_Dy@mRkZw?-nE=FuNviD29ZatN<W^A@m
zv^POL-5#{Rhg(nXivI6K`56!aMqm@ldVu{FOaV~zo640l+z}hWh1gw=QAu0)+Du84
z<1d3INJeTI3sBNJ<0g-3fveF4W%nL|Jm7Vuc+By~>b!T?9H+C>PJ|pC+jcO#Cl(IK
zn1d=Q6W8;72FJYTAfEMvJS?a{e1aNy!l5NKamf=uzdc{xe)mVthA7MB+iHGJ`m{%S
z{QA6D@*N7ciXv}UuA@m1Pa<Zen^&faLdfy9T(MAbtIy>dcE{z`lyELf@1g1dvM?FV
zQe>bm4~l8Ct;uI2JZuj1>I)_MEYlKyET}2tvh@w_gq`W=gsuBs5Z#gze$h~e(81DL
zCnBXW+J2~gjq*7AmBNIS7?JHB(9g&kwidqZZ#&ez<wLKXY54+f(#IFS`uq8}Z@V$L
zxZvjvzn{9Zr?8$hT&g^X)d&a4>W8=s_NCD;QBf7|6owYd3X*GW9>?5K2$k+aFc;ci
zQ!-MW_&U;(?!3QEo(Xm$w7#*^cK08EZC+MaUX8f39zy*<QaK+@#=ca58X<%{b@VX7
z4BZQgh$adsA^=B`uLGI~O&dV=Q4km5U(1wLAs2BA#OQ08VvqFwRkc*iOl%~BGDYU0
zJ4Qd4Gx*6e#(#eoV~a(4zs%vPY)6^#gL~$i=2buIBzS-VDOm{~O4n0%rvy9AUI%}1
z*hNrnx0X}EP<OL(FD$)_-JXN~d<T(`-vvBaZE7S3d|ZOJ%xw;`iGX0?8oUqGGH0n3
z4!AM(I!V>uNw~|DNF`0ggv%9<V7^L|*($|r&IK73F&={99urZ#9c}8(hv!vsM-n|m
zXG^TtKh2bNk1Z<eHmtfs_fNXB2l@T6M(bh16o^*~^X8yGe5NQ$2gyyztcCCw4g9xb
z8mfE%7KW&wQ^;2U+s=~ckf(R!J+>NiJ^$}z=Nxnxpw=ERS4v8dAO|O}kquQ=(i(Sa
z5@76-@omgD8GNIlsyxfLZ<1w%!mZRrs%?+<79}5;Ug5OuA?7W`GtLz-+5R=j+E%bP
z>ctEB`2?1F*c-x=L;khhsvf1pJ6R8Nbm=*|XjQ@#aRuhqH0$-?0W+hKzo~0#aw+Ib
zIGUHztP((o&onP(MCFHyz4C(2Ij27;po-u64*F57cz<peT7uD-<U~0g`6#3k;83nO
zSW1dpTbl@oYHf0e^-YN`%R)EzqG<M7pb6sE1TSL-@3}Sm_Z|D%S`X{*c>cwe`{>u>
z{ygG-_dbymqN%Rq8_hv4ZLp|0=#=#}c&eeGlMr<2e{HyGDlLKcYXc3>CkJr`BntaJ
zm?jZ3{IOh_83T+rvJMVOv@!n%mo>@tV()9VT+K^fRpoD~d+8+sSjJ&={otdFqwPOs
zhE?7TJ4p|w(Y65m_bxUDP?!srf!KCRFvJlo0+~z97^c>zL=8It%2B0-S)-(3c5)$>
z(L9P0cJ<5gW!O%C^h5E`JIbyX6`dw4YN-Vw-X;e8I(kuQN5Ul6DzaljeQ~g5csHo!
zIx7E5Kl^{&`ldNSdQDKA?uO3_1{@R->WpbH&mZctsFQEQI?%0JU&<_S>nY_0_#f={
z8=O4a`>1<@8*WuHaO6dK&xdDEpV!bzOTxp~@N-&^+;}skyic530|JOAc_@uDrK!FT
zBVT}Mz(wF4qzZ4<(x{=}Siw-Wq})NJpV+`Lti6!0TBy$Bn|Pq3b~<hcp7g0M3|VVo
z7hEwEw49`Qm6fyErJN*gqzKb^>=(k{S<^iwLiz-^w)iO<2RA=QZhm2wXwH)V`<ps=
zlaRf{SUvE-qUG?=Z<eTKs|0x^3e+Q;IhfKlho7rf@(rG&S*(o!`2TVu$@tIokNc?R
zW}70{cb_;A;nw%_*moLgAX3vNFx1vDtATftu}h%p0%Qm|OY&w0U$h(WL;@s$EB3?}
zH-ODtE{=5=L20l0whH^QUct%pq2)NDl4~m0`zkF_1u?;9Jh||#FLv?EzO>;F_fD5!
zpG1dx^H2lMRYpo`ylPvN?DbZsjT-9J@PBvDjtpE&UuhizIvEUkfzp-TmSc{d$s115
z1PyFc?vfGqrv8fY085`f+e=e&vVV_mX>icFb3aB}T3UJOxXgb3b3i=i?R96&e)i&B
zoo-s?eUd2%Cm^vc`~o*@V9y7tI?T7kJB>&clp8GiX=G-I7|+r^??fD;$)~I+EthAS
z#yQ4sXc?lx?Y|6m<kHy7lN+KkmeK4T*Uk8;6-5QV&%U~QI(LvZixH;1%ixAW5_0IB
zn`^(VdJQ0+gtI(FMxpQMWfjR#)_bPQ&NS=b$!C4io@tVHdx4}a|81@J(>D@VtL&co
zRn;j&QHMa_-$A|w>yV}Hs<W67iBi(>WmN2#WI4V{WeXl$veH3GQo{IBis2Y;h>P*x
zmF!~mT{ZZpn4FNvo!uu~;5U59rS~xp4->ci$6maNaeUEUfWsH6Qv`r4;t4{n#q>a|
zK;{91mUHcKDQC$)zMNQ}NxnJ-Ye+gCzBA^o=JhjJlp^LW#oj_n)Op*sfbIQ*t>2gT
zh>zFx@*rY`U?`V_oTW@?B8iH%>O9<DrHK++D2b9~_<WTamWT=t^s*?jChWRY&2E#D
zui0@|(#^HN^ydY-R8&PV8m+c!xlWUrIv)>b*%ZF>1ru7>)$Yb|p}3IH&O!D`Fo#6N
z26egM2kQh9FIB#&Oy!Mw-*mB~!+K>EDVhyA>r?CftgqM-6Xzg(r(mSaYUN9v%Bpj+
zl)XN6i0jAepCXG>Cz9kR`>i5OW7cJFhzatArYM+YqRKQ*Nx<7APsptl@m|HHKHM7H
zDYIy>vOa`1(PaXog477><s&akd`J8^@z%BjS!TvlEqs%=MhdY!`_C$SBflRv_Ip=m
z7<qltP_6#jUm95rR6PDQxRHM#CUc%zOthor!~Fs@1F)QeTatzRm8zfm?MO>7o{QOt
zi9ta#mk`3<+3jSM&t!{5O%x|Ku_v-EMt8i);d1T?EbDMZt!RJNeLo2p3poT~sknAC
zxPz8DWe)mb@^#CA;=cNxo#aNKnFzFL00p!hCCAr>$u_bgA7O0=(06}~rl&5L=&yGE
zm=H<Q4HT;@wX-67<ve$KO`CSj@{9?;lvu(@>jXeR3tzwu-`1W}Zf1Az$ymc<RyZnZ
zN=@P{uGK@0ngiE%u`cEix;OCAPjRPZfAvIkED_VHoBU$Z<LM>-BR}mNi^?#1S&*`4
z%=LLSQwFI3XA^e~v<nl-&tMP%K@;Cu>Bj!kZ?Y+68_N|He1}=cB$~`||Kt|0>LQd9
zi?7Be-O<1-*}}v_HC@4-twMU8`M8_C$=ymGDamT`=$C^T`|jxcsQEYPzD^k7JA6Q7
z8)n*}v{vv-3uqkL=i13~HUG0ImHhI{nlCKw&OblbzE-u@u$o@I2Yz*kvk*9Z0Tua9
zht$Y61)Fjs(Jw9REj<+;_8m<*R#n(9{1sK`h8GOl^2<3@3~8IQAuiezceK_w{C@Xp
zew~NQre(c>0hjj64ii6eacuyY=I;RGQb9zqH@;Yjj4RHfl3TTQLtqx&U*;-mDD|eG
z-NNB<E<~>mzKI)P=P4^kXMe6k-gP8dF~VH7_`6$ND<eO<W`mu+>9Xcn|GkJO#F31B
zKyioRp}U#vlt(_Hop`4hFAmE0@g2K7Au$~8$?xZB(|sP)^}X)__*}dBWYE^U^LGXh
z1_v#_c#*p;L2MhZ2Wl+<>f+*o`qL!y1Vb4TBmO*xiAh<i$sm}*oRN}DsBokHa8`0m
zlqYhg1`$s-`mqb5f`(VHn_bHDnE7PGH}Bl?s3T9_g&56--$%zC^KO*}7mPrp4jm|l
z14N%xr&ln*wlR@98$Qj|!>T+HheZB1=Bzc5KDepNc09n_x5t)lWpNB$SXk|vH>FTm
z7D--@d>O4Y5?%cya<8sU_I%!B#|$I6*MR4<n}WsL;EMr`xQi?%%t1sauz?G}$S)Vb
zn98Dqh-Ezo37CA-iZ8B{Qg7fpE3gI1{VeixY%D`G8<3DY%+<s^g}5mum3c%-e=!*q
zRD#{(gXPxs*@uK~Xy2>5`R!7rwXv_=OhT>uC8_VH+M^okwf}AENg!fdq9&Y&$e2Zj
zd>W-I=onQN5ZxppMkJFKGus-sW0@PtRS_OWt<^f*>sBnQLh8UDUE`_Ju8ZQcj^qBc
zFJl+G_B!|7^md6zi)9CZM!*7y4S3)N!Pm)d_$sJnQpKq<@>LfyGr3tDC4{fRS_LTn
zK+0Y4cJHH5e0y)CM|f*vX28vyjcM{_BleE2uL|v6@L%Q!z74(eX5h7Pi9F|h0fg5v
zz*Fu8EoZCt6nR|^N4bY4N)w;hODnW!(LAqk*xoq0K<0k}J6-z8yx+^WUpqeJ^v1P!
z57{h)@Cfn{7!X7DaAK)Et{jAx1uMWNz}>3v(AFfrDPB)Dn5JH>6vJ^_!fJ^nEWiFT
z{#w>4#4v3*z}?@Gle7+DbMpLD=5>9+NJ@Num3=`WGqc4;R=m?%_rw79tLE%F5m+7I
zq_Oo0xew@m>?BTwMWS7?+T!T5Zl}GZ=A>y~TeG8MuR^xi{n9<DvOODV(f#SKgul;P
z@2;r*CMM^v6+fN><n<Rc8PG7Q&5UHha@+vyvzmi|*p21j?+T=Xz&{}P0sjLRgZyaI
zB<3WNd0<DI%Rmtf*kc-eMqNHZ5<AR6L0|YCiUF>5$4|r^_lYwW<#SN#PRgtz4$Paa
zht5fslmEJ>0^ax3s97@mLob-O+!LZXV*SQa+L6HD#_pq*J2aAwTQ51p;hR9`aUpvp
z_RP#tUShYHWj72b;ikx|8ncwok5Yn}vw;N>l~tj)`oApyb?tI63MwZ_8Cpzg{ou+@
zmDvzSX9O@xsR_2F<UNQeo@JFgI!Ho3CRR9a=(g0c-rqUpykW5CyY7fm`<6j%EAsbG
zcva=)6<00kA*T}79fBnPw!7hP(E5&hh-<30VIbVj&%x?YMzf1)MKzYF+=&T>CU5dr
zFdu72?}*G^Gt<H`QfVWpO|$#N_bSqkaK6@H>{X!|CaH<CnyM#tqN!A^ac`P)N22ZY
zF5+j^ed6d&T*rM5`sL{eNAdqK_oiV@o!{GNDAkAvK@m_;q9WpiR0XMkM5T&KF)9@l
zgw$Hbh^Yl6O2|f#NyJpGP@xbfCK;kKDMKRj&sqfu1PMw8sxq3L3UQb0Y|o<q^E=o1
zaNg^@AKy>CuF92UKhLw*v(~-t`(7;3V$mc$b+x|k>*D{3E>A>nEfIZaZ~P;)L`IWz
zg<<-id;b3_FJC&grGq$7u3dz@X+y@2aAIy!UjOl5e&=V>A{n;Y6X$nKz<UxJuif{V
zH2Pi*qUogn{YDyf*a>d44tUpKFMpt2Ku~%nUGCW~kjBbupNP`=6yhtav(=>#vJ<6e
zl5jyw*)YRoWs0_Cx+tldwsg$jI!}q&5FI^{G5?8Pm-|d+9O(I@)3bm@PUUll4v}>0
zpfD<hkN2g?^UN9Oe*S<%i@T)`TKb_57loU!Qtj7x2<9MXe1ThF&(I-dUuF#75<iNu
zlu!mUi8TU!cJ9%hvS>qlucIm2)}R%ll!3i3t4f*ag^#kPCbfoLl)vl#o4WnKOPK#D
zF11?1;5cBAwc}6WjWyC;CEPgQ_kQ5e&<;gyTccfoy09_4kipzET(?r<ayi@mo;2u&
z(Tjq($Rgn_vp0Xa#FW2LS6)0*RaN(B{=gr4L<t|Aq+qMEbt_#pi=hChp5akEpCTc)
zjA{foTc=ss2<I$Ybb=~P+J!y6%g)xYb@|*m5sb>tR^BD9#V$1^;kddegR@QRGdxlb
zGJ@`+x@t8op=zn;kRVCX#|gfjn`giLf!bDcMJFg4sp&hHK%Rm{q(C{77>;y%h>r7d
zFGd1_%MOtL-Vp;2wo#X1MHq7)=<a3@u~Kq1akbbfS>*+hmATReeZp4bX0dYqM1h)@
zr@JJZ*Vig8xW+kP;n`&8ZKS*_p(G_@=M!k<5PG1xogsE!U8<e;nWXf`;mp3924D&4
z4<+XEv<pT=XcTqgik3dcSR9Q|xSiB0i>7!7%~>o)o!z>xj@t4MhpAx9Bc7eJ8Uv(j
zc7ao4QHqc{c24j_Wf2gTzoqw*rK?B0;tk#J+TL!+@^x<d)2{$FzKH<)a%8#eekWlI
zpc}y|*2e`95KBeY#A2d{iXNm(JBK=(8bjW<B8G$w=g{L`Hw&d<`349{*N(j$cMPO@
z@O*h*y~k^M*Oxmjo-Fw=zM`jmz3Ta;8r9k0(4V>kzR~+<Y&%s#$1SgGBZ+6ChrD(~
zDtIEQ;<Zy};|p?!cu9o$F%C`5YHehBqp>aZrJc#2XbV`l=k2k4x4u(l4O<nNzGHNC
zWL{^gxYa@$ll9pC`iJYm9O<}p_w{=uB+}XjcBul6{6>zwVj>n|EWXf2v#CzZaRqha
zhg*?~PN^5@8QeTh2j4wPFAi+F#rA3rS}Vc*lzAaX?Em6@i@r~Zj%2jDycq*zzb@of
z@tXkueR_natm-`vr>Pm5Yr0$RYuMfbt7h2(;n$oaa9O709<0%t-yEc>c|14~^TVFU
zhraXHc(oKoY-t}Ic%J<q{+}6t#@7$)w+#Q^HaGe@Lqy)+iLLG%cSTDHgMP{r)+Jdr
zxruR}Z%Qo2ebkcD@?q){cN;LDSb0vEsn$PIFTq_)+0Ngo-&Nik$^WX#L^|ltJQ!x-
zmrYnTCcbgfZgU?vit1k6)0>8Mn8kp#fMeC<vL4=lYK?P>+h*;L+!r!)w@}Cw*jN+l
z^MpGKvx6(EuT5sjw06QCfG-R&7ae-4kbS|<KHB5hX?%n+`m~tMYnA?f=A1jPK>A!b
z8hPlwm)L0;<rkX#4GUWnI=)m+!E6Ohl=D<`T7>94@}+PMKEIE<VVJuKEouj)oI4rY
zdlrx!gN}AVI(4C&YZ==c2#{e{*p(iSP}QZXfw)GGU2**J=MjAe#4(G?Z>)b?Pntro
z4X}YS4M|PG0gBP&VBzQ|O`|Sf_!Yhr6Df35MQ0*3g?*so+oH<Ix2x-8RqI@XoTY_4
zxx;*Bb{!?<q@#!u;S&M=EGsHs+Mg0tPTpZlg%9qAf09$*`OMHX?^)mrpoFi5i)pwA
zmWuX3l)~}S{z$yw&xJybuZhN-QJ)T2sy;PO(b-J53?rN{FI3h{kkvMJsctdKK+xNA
zT#@3izelZ?s8{8gNv@QI`yJSHtgX1IB)pDIes6&<c?o-Bp-Uy!BTa56fT79I@UeC3
zPGu~JI<4nOs^ZD=)K-Ly2W0Gd$)%3Yj~E1v+lhN@%8@?DPV#``xy;OpbYoFWaJ<s>
z>8b1;l|A;8k=!9Kk}h1AF!Qn^sP{yyX0<LW*GE@N3x@Z)PLhl|C<KYPhg_6FTS6@2
zY*4FG8}`cSb4T)l-N!G-9NLN1FB^6g-DA2e9UIB6Jd&}LwJ&ZdbI;?3?kPjpk|#8v
z7Rg5i*lO}PQ?1o(!;Da}+ydHJ*M>x`p1J~fW0MXh$wj<|b!yM;s45Y74)w}UiK+s%
zLwbW*>6puwj55X;-(=G9W!1X+>K@g2`Bb3CxZ2;})Ak7&&Dd@ww17temS^nYdYQ(1
zb6~fVp<qqyQ%#)x&cSyq`%U$-XX!N?-oAddcrmbb?o-c;<mEE-TLzWw+&t(k7P0vK
zlpXigAxQ;TqWBwi=Y%QBdy>DYds**#WrMeKoBKSqU&f?pK6WDL;Q}51yO&Po?&1St
zl}*;5(k%KW<t>XaUIuT=Wujd)A7Rd9fxC;)q#<4+_iKQ49*WvCRGG9z4LeZ3Ru_v_
z*}O2qte05MG3*_$db7FB-MmMIZ!KrvACVb0c*n#j2J8=3Oisoxi<sR%wP$An;yY+P
z6PFMOOZ1yzTw5_BzeRnJS(B$+O8vHPy?uj+b{}U2dRfE@E<NgjFpVE8=w_H;mztj9
zly>t`rW1|A&i3q%(V0($h+{H0bsVgDT%D$mU54APOccrQM>G}Kkk%es2i0qfT$TBd
zLqX}SwGf&zxRzu7v6tMJ4lwX<8?d+%EN)j<!`WM}2QgNgOI~5FA~%<BLNS(&`dTje
zRFku9;%}yA`o%RsbM1Qcre|=1988CHXpX@XTq2%|tc9D${M@auKww0D-{S_5NT9<3
z34dp|6Ww@BXzkKa7j$jbVCmW5!q;QwpK>nv2j_jbxqkWMtADg>-kzxbRbRJXq!<P<
zfy4Bk*zwIkWMj^VCvrzg#2x@{v9;83?-Gbwe?oo>Dy$v1@sO90Cilza)Fz#e<{YR&
zbGIKX<G5$E3++(egsY-gQbjR&<+ZISji3(Kb+n5N2AJ+&cVC*O_Lnv6C=EA_kZ#~d
z7LSssl214kYyS#2_8RL_5Vbv54_GJhkhnhv)`>p1TQr*%(TT0KfS{HBnWX0yUIb+7
z*yDHDWW|&qGuk<TZv>hZ3{k|<jIfj$1$xyXuW%*RXsLhqJA13vx|5Y*#Injvr$F;j
z?cTbFjgLt9k$*EJB9A7Q@T8wKKhJnuo$S2i3)(Uux6HvUySWaW`Pt1uCTf1`Hl{bq
zPdK5bq~hL%So8b+YP-ysfl{h5U~6I0UDG2L{!_Zltde^LHL1*>r`rn(`hyaXvo6`V
z8I3RiF<IYqK_9-*L9;4rz#Ev5k21V<#l&2u%cWnAHrckmd=)lLyQHd)^qm^Y%<A**
z9%n(5>CZDYTWT#fbr^zlUWD$XVrvBB0dhLFhJu^P+Gq<2M=Vq>OZrTTWbx`m?Z|oS
zEtse{Tx8r}QG%WD#HzL5VBOyEBCJ!}Ph};`Wu_6<R#=H*Y{JH?Pc^Z;=fnD`$Q9Cm
zrtXTPC-&%1SE-$GGcaGvP|%IpNp0}s7g}f>8^sMyz*^Sn_$f%Z!-b%Y>ZNb8c*ouE
z#6&_(H3#!)JJ)%U<5S)_tKmv`&=OR_yEiudM%z>vHXW&fKVq&X|FekOCEW7T-4>6>
zh5%<;H31~k&!kJ#1$d-FBdXQfegyf1y0ErlWcS~Fe`b&Og)|fTr&;fw{`Fi)+o<{Q
zJ%#$eU2%=6Fgp>H0OLFUEdiX6(f8<Kpt)WDuR{bEa@3}$vcHpA12kfy?=#82MGk-P
zD?smiWoQHgFW^DuUm1@*2VyX1>vrl$8))%Zxb>{hq}5`K3LpC%g_`s`>cr;l)X%;D
z2h=Px?smGrkS3sbCoxbuP0Aw--UF}qp6(uDImTb=hN#7XSVmmY$S2W!_tl)OU0ka$
zs<Ci2Q0ouZB;Oj~tW)<T74}ucjNn$Z^y<9O)=GvO3psH&+}!0ym*9yH4SM4=^oRg+
z2A(e;^&|{NwA(pnb-6+cQ}l&!EyuWP8J1nZPW8k})Nvh}{MGlnD`wv)VOzAGvuI<b
zSvz&xbXETrliV}A<W@i!VJogKx7wX=6clNp1?4$9+X0`?B<4WG`La)U6K;E%J}rzP
zWypzIxQco0T9yg>-KQhH+%=pabXN9-sz=p2k7g+=5vSb&vFmwx`KI^#9`agPWnTBj
zYNUmtv!%>)zeVn|U$N9~pZLkwRLp^bo50!b*V-dZE>M8?h#qz}H?rhNE93n1rxx#>
zN-JtQ!;HH;OlIQfkVXS@D)io`mg$M?Hu_R_SJ?Z#EUR70NC#h3A+C7-;`*u^#h&ru
z#p`p}<Zcn_#mAfh#Y<L`HFI^pfrD0;h+M7WA!b4sps-OPZp~-c2VkX;)J+M~L<>1K
zx3G$iCqirVeX}Sn-}t5J4)l8AEwc;$`Q@y85X*W7zU!?3?XLUBZ&6Kxo|=v?v4F+d
z0^uGZ{=>NcjOd{~jBVkY;Kpix3yX^RZ10O+M@!?+CswdSmF~%EivY2k+lsy)u<{{_
z<!Fw1slxTHw`Yr#m+WM}qFZU?5hTX<-W}^cHf+gDPN1bs&s5QdzFU-kYhH9c*bx)M
zI(2N`ucm)qF(>_EaG;-b<@XadTW?aP>@dis|E-UyZnkpz94xdQsZ6O>`?b|sq)t9}
zZsjj<+XaRz7tnXrL-D61lCP&67DQN*&kNUMQO%a?r3J6D{tD+(U#@o?STyJw_5-r|
zPdW9u3b!aC=Co;-bD#37D7Yzfj&;`^1ty%uaGRV~uVp229ndIn8Q{;4<{OP##$F_>
z!%NlrJA2@P`K|8jvVDXPu&c+xaj0|tmNa^5^hosZWIxNv?h%Q|a<hlu4DWN(;z`Op
zEOuuv$Tu=s9hNm2x56#=mkiNOxm~oX!0a@fQ9M!?-<YSm=(Yob>qX&06o4tg>y{0r
z_XgNL%|KjuZSg6p?N*rOmaMG0m`CKl;iJiR@X_|P5C_bT+}7FO*~)lWcte2MJ)u@P
zq;R1r7KX3sbp!F)q7m!4eL_=OOZ~b$zZMA0mn#MAKR&dyf5m=hIH04p`U@Ydx>hzK
zO$Ng4s?5?O7}D~D`W!G*Xk&kg>T=vR0=aMisSF+O7y^Ns&>ZEp)6&m@Wto?N9eC2J
z^^B!WK+vd5dY9~QO`|w+$}2a(;N-Y~1+0aD#UB=EBApLjp8fC<Af|g+SV{*mryN%L
zINbCW+9Sxv$(s~KEMW|hE-`Lq4-$Xk4sJmVM4>mF258ANQ^Jt#GbBjmEEPmpNMDPL
zty+c7*flv*r9UEE*{iBv8rOPm>2+DljhJ}qA+_0?_QqLRwbs0Q45o!kz*x>NWW@xD
zTZuF+Kz<M<Q)}T$^pFDt^qHg<Mn)3m&yFiaY1R&1lU5^>xuV74d`fhx+KRnm%>P0D
zfbUC3aN9bWv%mgcnDZI;6*Vv4H(FDB9RrV#S7(qYDlM@bQj^4W$jjf5cWs1(it7M_
zn}9SK9`T_a<l@Jv*y`*Fd+mD8hTiJNP{sR}$hamyg7R2x)wZQJ7^sz4pqzEF#($RX
zuOpV%Fn`(-q<OQsV8yP}WjpS+-3x4DMa8b4qxVn8e_8R=o^0F-T7p1OyGE1W&bQGO
z<1DQ|`-DGsMZr3+q0ZxMQ;1Ts^4F<Z=O?#$9mReh{JJr>&7~vFO;1TR#2P;|xH9FY
zCkn!Sb9yVT{~R;+to)EwN9Dsz673#@A@n2<pZ~s%OIEW|8kTFfFlmPP;R-hLo!HG)
zZP6kFesCDegvm9KR7}{WdaF0&-eSv?o#}2iWyeM=BF&T|`764n?AK!7Ncw!=+HSZ>
zeOq7lYD0GEXx$J02?=yPB)ot0#!ko5@EH3?zZ9=rb9&JaH-9mBVz>C_JSmCzgC-wf
zU^af^+rX3PPmvW3(r)SdCoX;MMjm^yv3r~aD3VCIOe_QNNR>Q}+sP>@;5?%~B;#yS
zvyy;@>#zP2B&?=;;{pQ?@%M<=M=#8gwg<e~7m#s)@`^VgB8-}0&wRqD4>~7ohbT!@
zy(vMW$dsURtf7A-Amcl`xEnc9>b$`l_iz_f_bJoI`!Ndtk}h;WvkLBFSM7}%#$$%D
zcbs&>8}|YOhx??b1hcMBJtDuW#jOTlYut1RqLU7<xbHRjx-#Jss3WZK<7$1S^F=o&
zg>JS=Np0n&g0EW4E!?e#<ro^cfR-He73y155h1j%t7lGdwQc^FAB0D;3d4NemxvwL
zEbmh_e5?0~jxSUZMqTjxzh|3jjC95B_CzN_u9hY6&4jaXON^%$x8#5IlDn4kBbGE9
z4(HtLCii9Pa@BbVp+>k5c11a1>}}X?p7U+pchdYDk%eQ^OSL1?wme;LUe+Cj?k9bG
z2%rhd<Z}2DCx|fsYeI^CS%lK52?&)IPEV?nb<i&&OC0k&m0;mI`kAy4`jB6Uo24=D
zZf!^{WLvdJsm+2k_qpAxUON6(W!Lkfq{2U9aHU8R(|G)S@3q~56pxqN-HHf9Km)&o
z<CMteJ_F2?k}j(D94|*Zj$w<{WO+y<s+`umc&2o2b4bgfwnmbb)HaGfzP7$A<{9H6
zH14krM}=L*x`BRY*^x5X9GdN2*B#>(xLbCprtW2eI}{IzC*TR{sHoRx(h{Oc_E6O(
zkQ&P0)vL#pwH@?CnGx3oyVmZ~*T%RcqTK4Hw{_}cNQXI>+{JN5Yn7fCqE}DS$WrF~
zaFd90nH9GL%-9DJmTeQd#`1}j)Y}OhNbJZ!bv2=VPkS|{u@Q^HJNum#?Tx5M8}TJ}
zT_Ko@rS7PPwz7@VF4cWS7~kZBT)cviGA;@?stb#5MdUB26DPk*ic<vWR&{?c3J83t
zw!TsRbk+HI#eIsH^(vGwf*nXaIL3g@93N5&F7frMMVSoKhFCPCi8`NiLTwR*wW&Ls
zV(WzEYQvqC>ff_W*r5tRE1)cFPcKkcnLoBjbqpJ?3Kr(>>n?-#@`T^feC?rn5`GHm
z#;YQEChY-ve6iM%W2(E0{K)u%iI7#*$mJYH6J-(GiZB&W@$KmQ^a(dVInZ|9#Q0GS
zltsez>QvxNvUcPu>W86O(LJ@gD*jMQ;K!l|iJ!a!GVW7`LT0!v`jGI3cBX8RS-HD&
zOt8&oOFI=>dIsNuu*5gk^_7>~h#tSRZ-^V(X3<<Zs?lufj5HgcKIvZ>v@6{9c|+``
zo%b8m>#`3}CP&de+-fTvn&7U6tvADRipI;!F|p6fD(`jsdN{|G3@JsES*50CI8==-
zvfqGv38WZJDM)s+i7X$hHF<h3;yycI=0g3;xzDHLHe9H`)y!O|AD03ma|xDt&5R7S
z5~`3W!a$7DG*OS#yk_17q_(J4W(b;N=R_dhP0^P+G}jk%SK#Zgm@+K;N&a%Rq@;pf
zbdVP)CYBj-y-nLKUo`6SlmSb3dl~uDj7M`=DY%QCZpRU%shWoFdgf*2>cx9SsJ_dW
zNCpSv_XDJrrYpW9><LL(c-d?0Ka-uAmS=LZV^5Wz{wascKk-B59%c6niQW<rn|mWo
zt$cL93ivGsVr?k4`N>T0h+htSj<gAq{2kh?XsOdRkIS&z15eK7u&=e|8}w9V8n))!
z^-S^2M(cJLI3$zPQt_2J?WM*25tfa*-<><YO{G^?lkmC!mZ-W|Sc|3HR+<4#ev^hC
z5T(%cgf89{PtgkT4mG`1WWkPW`6M2(;C_7{oz+-a>}D8O@#;CNbl9Jo{_g5F8d&?K
zekgPEGQZf@g~j@H#gvR!PpsG1!qu2|5|Lk&O@>had4N=>ekRdoC?u{9;G8y|Bu8F3
z6LYP!dx<|pMo!P8THQ%lXa%<6Q?mtO`?pnKZ5I%49Z*_ZAZ=&Qhsc_il4Dp9WeH_o
z-j5y;)6#H*(&s0Np2yk#N}}dLc|t~-9?Q`EwEjL~uD$jc#}j=&K`R&w+JFV4Q40G$
zUIBKxU`(n?UhfuL#&mgJlvFjqFu`)0&s8K38994({V1WNFH3E48RVTUW?F{aU==gG
zZe{xH=_S#s;(Z9CLRcn;2+NQ=$HTQNWW%w35{s-e(!p%42O+)|ac*1N^M+qq?uEZ(
zG8Ro`S_bIcJp<~$o{G2mPHe4Q4WgR;jn$h208<WTRP&n3;kfA_W`(o*ReK}?H?IPY
zf$paJCXS`p&9iu5M=;nLBQ2CPp$+PtRgHw6{5!xuD56HX#IMg+^7q~^O*>Z}bX~FT
zD{|-L47Hg0fgTDZxikE!2{LhUA8AOq8UYqv`V5OMLp0e`e1MEy=py&YP&)DtjrS^v
zc%jvR0Ij!Eeh+pebnSmzT=-@P64yj;=gMjj-GG3oPJJ@-2W#p`#5Iw;M+7=K_|Ooo
zI(J4V_j3YGd@+Ics|<59Bn}p#G@>(CQA8Beq#+5k&yxQ`Dpw+fin2twxglXN0hUh&
zxoDK;Cu~By17pf#+vw;0KeYu~wfcLu%BSu5>E&*5;4?sOizl~o$vr1?eUkjUvOU#}
z70D&>RU<Ah@&NWdk~p;6(yh+8wt^H#$IVj-Lwkr*Z`3oLoKV24z0h26m!Y@Q(;16!
zsznQZHs-9zc#S3bxzyAmk?fef&=;4R#h$3}N^rrO*Q3*Iz1{yrY61+cB0YS2qP2zz
z^Bgd^lW{P*GI)lz5C*rjTRDrcHto0Ub@I+uS&~0Jt%0nR8Q@-5<H-l|r#Oepu&W>#
zvz#TW?ZusnM}#XLYR!ulj@S(>>sh~{+<wD&X!>?H6=4kdQX=%rnznJF*lXG-bRu2=
z2O~^mz&Q!Eb$uYV_cq4biA97+Zgt5~TDt>@^Iacj$B^Ne;Qo#~VP3b{mfF1!v-FEc
z{RUU`M#t@m?i|<jIt8xQA7x;+4BUKxFt~9SY1&5nai;e@Ulb1E7PrEZ(I`2ig`Oz<
z8g*#fo!cT@QKhCe3uX`J&+B!Hba$msc)K1(i_!|ZQywb<L!KSH@u7;TJra{)PiZ|P
z?Mt1!Pf14PLqLu48z*abz!x~t`Uf;z-A&GBbqm1hvUK+^dZKl%imF(b7dI4nR!=N-
zy!7fuX8XCuKaTVd*Tl}Z6<)tRu*+8Spe&;HVx(hj_vD+X@488}gnwJShB@)g{)|^|
z_AI_r(@^v1%7HK5F2Awz`|}q|ez><YCHTv!Wl`IyV}5c5=3s{}V0F09Lq(V96S-(*
zQ@JwI&|AW9=DIZ2b-4vAN}LRje6a1p58hdCaT;WV**4Yr1(B??aS_=E_e46d>@WFk
zPCzz7w)GQ0cz&Aom`b}7X>w9=NjTgO$wPO!&-jZR+?_cG`-E2gAip^{>^$gz1;j@x
z^2k2Df+}XDPkVVdI_Cc<+w1!H<iHVCv`=h#fYW&TDLvgzKw1N-*h)cKw7mr*N%IzS
zC~PVpaXBL}&J&DUwx?FS+EsG2<?Pa|>f59KhimSDe`m>8Ne8=C6Y>VJY5~)$_-a^S
zm_F7I(clii)==PNPl(ihn(xri@p`p6E#nMdufbj&q-`g*p}Jh8S@cMRRmPy*k)|y|
zD@jE`qBcMh?L{L61+j1MiT-WU+l_h7Hu-Y(y$CfsV}BQkb{$3uh-OrBJ2|d1*eFZY
z?*lfA)mt7g(LP0NTc%BrI`6~zf|}}k;nF3VTB*0BWcIZsUB^aEMi8l2vCRL~jj1&!
z?JIWQI8i)G4Y@y4bJA&8d><H56TD|~3b8O7!4qh|OdJ2IhtETr{==_PjsK&C+_-5+
z6@4l3JZN=27*xV?Q!C#ma_2DE6DMb7r{D}_Ii&;0w;ZH2B7b&{S9XsRW3JR6-y?Q3
zlQ?a2{U%Er^s@S$cs<L_9UMK&NnCJ59WTO7yfhE7by|={H+gX>oFBkA+9OIqNs0A`
z62=<b*S$>R3)zeV(2FVRs)}T_3XhdWols;1?mlAS-y2!3%H3C!J@ILa==;PE%Gdfj
zQ<35m1Klf_ra2_gutR|`5CJ-p!{-i=;Wll8QYnIZ0WuWEOs}j+cUwq~uq=Fl3fiTr
zmNyp7{)2)dqg6wUS}YWeQ@n33_iWvAh8FfH$KH@3X_#Nav|fBwJASU9Gu0uwv^-$n
z%j&HalNrk>&+h&AE+A@Wuxlu3$FFG3;j*Y!!CFaEl@&M8pBWh%*&H{zoNvy4xOf?Q
zScyBsI;IzmNzLBXo)SZ$ZFps<aqTD1%KVP;y5zje_jgVDZTV#&kc0#b&Y(=7ZfIK7
zU?vAzBwIvSc_`=^^pvV?^Z<q-dzI#65M-PD{Z(1-wwboLIQLKZ9qMy(&OAB!Z11V@
ziMRDR%cEkM<QqRFQ2(l~knJiNJJ(+D#eaT@u&lThKlfX+;3E|u-sU@9Kls<KD~Gl(
zS$TE!$>cMOLP&qyq(D+a7@db7a0@b?hq2?C042o%HPjhH<k^>D0zgdXr5yYBJl{aq
zW?~gubcwqdUyFJ-)+Ch&7~XMjyaNkiRDCq&`G&uxtsY<zX*S4@Dmg3t)#V6zB6MO5
zg569C51Z9u!R>LOUqG1jRKyeyfM(@+(Sim&1?vmk`OzaaC8HXmBc$5-CGzJB42@jE
z#_ih*gm=mZg2pWR{3H_TDPCkevhtEWeq%e$0g=Ck(C092q=jBale+>GK4CN-u^6MO
zH!C{Zs7uByvZxCd4DIg5y>GL%-(|xQMaU7FXYtIk0qJ@_|Bzbdx+4*FyYHMz8QV`h
z?}?7|Iz-aKYRtU?zqt;6b8rL=rSqg8pCA+(1nt=~Ri&CIr?er7)@0PKx#(JJ(8>li
zy-lWvr9J_7h<LM+?&t}y?p^Xo(#KGrdT_R6mwkS6QBcR7BV$6FM=u+;-Ah1zYn)M-
z!Iz-BXxMu2rU1ePZtABA$2`<gnp~9LBuGbQ!=1(1s!mNJRy{p^Gorj?B<H!N)Vlii
zSp$SwiZOieOUmAMPsPRk-taWOXwd)FsDI4F@7t|CXBs%LAm7vE`65feVs0=Ni$WdF
z)2f`431|E}>}>@Ojn1uiIGa8?l`@P6*pwkM9OH}9PiYOz;-IB2Mix6=oD(-p25v3i
zUs4)jy|Q;QF3gcPULcvuT%<n+f+HDjK1LW^FG8B!kslqt;CSeY-7L^3CAkS`=L)+f
z$`ZDzvJ{%<3y!i&732grSGm!N!w*xQR!7nfp@OuEs#Sdrc4ht%o4n569Nn_6?8tD?
z@>D;R$kO`<jw5*)(sV@hJx^+<A@MY4b@>F19XgcSDoCT5HJDWl9OXC%WS;Os+f(IM
zvWd(Sht-$Mf3ESBx;gWiRpKhwBbgtHN*T}A)ZVu|lUF)wPNLqU-7mr|$b>;Obkl0b
zI|{K%O*PnEcC>NLF&lK~$)FwT(3+9Kr?5pW#0r#}T-8Zt`bx8M7sg76Z=_l2QLzO<
z(!pcWQGf5Y%eTHPbiMu^3EvBs0be99MjlWmg0(9-M!I}a2rpAgX;&?2((Vr9FRrdv
z>8-5eC4&_ljm+7MmCDm6oF-1aA5Wo}F#S7P^VUWh?t54zS}-Er-xymG7@lIkcIg3q
zEb-q$M5F5GD}9sEP|YtozVIvdZLzNi?Q7;`%I0!y*%v!@B)%96Z0u?<9BL%DSvD4C
zL>4o`&sbPizu*_V_9)sBUos;3dC+a+YuVA}P6!R7O}CMzC^!>W>ogg6nOUG~r!@u4
zamw4&ayYRgpvNiC)W0(IVD-fhuHKAYJ(IbCUVD1&yMv*@=hb6>v+;i2-pCENFSGCN
zBN0atc{LyPWxXm@zQ-4e34>s@2P9(lp72_?Ag_4JzGPw@Cq&(m5Y4K^&Z)eFz^dSN
zI9pqzOC?2dcfFJ%)8WA-*xBM^qv{T${PVNkJ-8F58C>4bt5BO|CFtpV{E?=gMDlAE
zSv7s(+B3L8@`iH7qdgT<&v#2kZF8KioOoRQNW45>s?eX6V{m)#@n0N&UR!tndy2x3
zFg~uUg)E*j5UUx$P7Any4!ZD^p-F@(PJZdWWGsJccX<%aU@XY?u{t%Qf$7Fw*t6=_
zW6Uisr}C6}E-eQ{aqGS|J(@zazj|Ge`}!;LNB#@|si&nwRtpYL+&SDfK6(gALCi&A
zjQOvz&5DXj1!XD6u~GfY{kRF6=DOO;j#{R@#Zfi=ik<Xd;&1$^ENRUHCKJ(J%|6JG
z1?(!=fgnHX5vd5O6<{m-bkyu8RD8{b&!m6g;<lOG24HF*BCnKHJ2dkKJczlWS|9F9
znf`~VJTC>~vXd%x+WA6EX6(1#)*pkap{PqzsG2h%gi1%6KYWOTbp2dMqSMl-=JyA-
z__q?4J&w7VEYGf(v#e+@66M)66fiV-zrz4u6QN6|0ZNxqi&V*YH?cqk0v|K00A;0e
zV#)(t*{=J*m_ix2xosj;nYW*Ob!ZpwusFK3KG1snRcB~asbTyUrLsG2VEIpax;7aE
zpVNr^>U4bO1kSGweex`AJaU7>%EXqVJt|d^S6EO;${+1wul&)!KkV9>rOE1gwypKg
zUs|m83|Hw9e*Bu)Hkl!4S!ygM0@d%IXr|kW5{WHDH-9O21GclTbxW4SQdgTyti%tf
z>6aR4tcoN3jEFO5{99f2SB6^`g@>0!m`gsDx_!k6Y)$`3PIda1%!@qU#>dY}k-jSG
z^qSTBmoZ4;R(2}wbZJ6Zaq;Y1+o?*^?NkP&(Vt0w5wssDT31zn>1UE3EwNZ%_j~bw
z2}@`vVGJ4Ruj{yw3w}B!nwC(%0Ge3gu>Lgs@1#SYNpIJmv(x3mATXV&;t$x${cA~t
z4<bh${@Klc0w!hdtQ7wAO(=D9NT2)u4=4$#Z;EiM8*s9@x&+9fz_jmx?zSkLm3Rg)
zt7TZHvh$Lgg9UCoxI%54pP|?W6fIWpiEu@{YqM04`Yol@y=2?F$5Hp_rN;t0XI%|=
z8X6gqHK{kf6b_LiT%(X_IzSuc3vM56K4C^YpN?(nOq0!q_fwUDSh-mYvGmwQKxUS9
zVW|pgg4?d4H=B3$*f$)m!1$g*v@fk9dgV)wXUOyqjJ*Xx$M)VG_1|A&mVf7z-rt_M
z$vR>V?9!JLx?41PE|n|_=SivZlQb*gYR+kia7{!`qbifLSLqe#(CiC<N~2m|;mf<p
zcJ)THN)*3MMAw&ZZt|6WDB19ET2dM#h{!qbz1wK5z4N#CNg6t~o`;)!Bn<ALMTEgq
z?LOd%uF<-Ni)IV$pih<v))0aWHzOrt(fFqK122vh?2tP3jJ}XLXd`yOol65Eu5Gvz
zk>&fTIqc+zvKYgy6W3qqQ;0cm_P*Q$D{~SDkRmaXcmV({%pvJ?VYRaWO;}vTH^JVw
z4z5zyrgH)o)<uiZUzyfcRjB5Cs3Jb9<&3#I_5K5NszHO&BhPX__2pzfe{qZUd%6jk
zk2G-*c?N>+7xfRp?^fT@Tm_z({!!cvD?oh$u!Hx8>-b5qAQ`#T1xK;5AxeU~In#x5
z5n_}X)7mCQwJ&3zx^b}bd+G7+n01j+-->^9{(Izkad_WN>H(x_10qjC&~GW`NE7Wd
z=|=!UMdnDTEA^6Wf%|6M7)C!7wFfyt;eU~H%*mqyKZJ&)4q3e+@2f@&A1gAcbhION
zWv}rS#h8=$M^T`=bn8?+-M81Sp~sGdK_`p~3-UE27J#Whb5B#E-NSt@`|^9tR!voi
zS{YxA9DFKQEnsJ<c7vnJkjmr;o8=>RJ6gyt^;KKGF8rNmU2ywN_@NPJiQmirTs`*s
zRZw96A9}b21Oe)30ZJu|-oiKR!vf@;El@~P9}0PD*PtpiBzaXeIMfjv)V*-rkKU6V
z-Blc6*<Np#ihC(03^r7pswnt-qAH%^B|bTkW$5Ml_4mo<V00?Ow$>8{d$p$AHpUmC
zP#F(-*wNg9IVmagaew53`)crOY1mOd%AE&hl<{)aBKC^`M!mR!9$zu)E3^|ka9p7M
z`Qb+C(Iaod{lq|%>&rH;iv*(%HGjKxy_Sa4y1DD|vzRR^2&(Tn=}1fGTX3y7G>Kp`
zwI;(CoFapV>@8YyG6%D5-<D7Oel8O#Yexw^HZ=BR_8L<<6NX6qM48&!g~(-40nbjo
z6;@|Mw7VPiQ9Zk>ChVum<KW#hWjQ?$tkQm6ZuOnyltNuy=ImeoPuiOZi;V#R9ot?%
ze73~o&YT{741*AtCz9vV9%heI)E*jtHGRBXo*_%IbnXz$!+mSiu`OfXtOLFH;=%~p
z+zsxQI|`Zkmb}31Lw%EDI<Bmv_8@j~a44{```xv@;!{=6jJCWB^!47Z|IbhV1HMAp
zl(>cXgKvmL^0763<4syeJi_~DBze$XLM$5<Zn%$XZs+VTC_Bn=f)OKRWkF$rG{gVR
z-tYn})d$^mIbE>#$6p|d`AuIPaY@O(=agR%p+`Uq2XG1-m2Q!$1;N({*B~E(@ANFN
zb7rcSW<4F-`o%NNYUr+CK|<E?Q$sb0NHQP224zd=hP(NOb?S7Clk@lzmd4o{8T973
zOL*^#2FJq4jhx;0Pp;L|?L%75BXXW-@`T6;68l2z&i^p7e`n$5ei~owsCFUTi(a${
zO20t<JAkdtDm^BH62q7?BGufktGRXOD83h?p`Vlm?~<(VXyVRRRF&%=R#y`lHyei^
z_4Mt$FTMljls<>N%E2f2BOJZkK+SIf_Cv0SMH_HXG9XI}m(2;}>_lnJNTMZhs5U<l
zlrqBIt<{t?2RA>3VD=NY{nOvp_&<Mh`9`?XwQ=7cee~Ywt{5hBF&K7B$<@E>Ymo-n
zVFVtf?@YFDlExODb*ru>|8?L|tW<fy`AmCQ4mfN6G3avThsUY0H@?hVa^Cjv50_?3
zNJJpS9R|9G@~VDFfG>=NG71b9iY|b5jHTd@JF9uEqB%ma@@uoUdHk@udcx(svZEc*
zJBsl-#Oxq@{qH0V9(RTr^CtVmDS5?V(&atXk^6~{d+M&*uW>{vBU;#tB#ubVn;uLr
z3oF%HV4HVEGQ4^m+a!(-i#YoqN+z!%;r7KnRdG+<SW!z0OMVE}`tqY}tDASkE<Dt*
z;NHUTDeq{+oW&4*Gj$oXuudru$^(E4z3xd)QM+Is@sw&&CN$)1L{%Bp+5w}rs&9K5
zBGt&A+&1ni`W(JdV1)bni!F-FSB$D8+5X%NgI=d1%XMxN@9*_=4w#rQ`U?)P2Y9f%
zuS6TO$I})3SwYO{4R`KJ*`j85dn_qZ$(#2YhQP39KUVxR#WH7F9y?caV|_;K57Num
zi(lz(ue3Ph_mxHZ6I!kVwgvdm&f59JEB-uD1mzN=n$r9a;TS>8!rEtwQK~|)0EjDM
zptcNWSyQ_>2Tv;(Re{7Th|Qf=wfSFvQCMRti?Gb=O|G~RaX-8+_}9Li<hEBJsa2N}
zMsoP6d)X}thgO==Fyo={3JMhfzNT!|6}A2o>kaDXwU-)fN}3`*opBjFZ<p4vS7|>>
zb@D@`l2yrcF)uF+Y!0q!e2_mFx|@W50Xq{iBdosPH<7Eg#ZT&PArbT>6c1G=XHS?`
za4b>c3P@KOVjO6=Mwq9fwz<=4)t$Sq*e4Ek38+DmYFfHwW=;9ok_cystbckx&zOJW
z#M)733puq?RLj6kHWLO%i@5OMRkAc(PwOx&nv1jK{6xkANKxn=L1eXGrnuE*gGf%9
z8<D@U8wWy88t!rD^%2=%*p+Z;W5K&?KX0hYt$(#VE+92!bQ$GO9_AcM%o&5zK<J8*
z?~l;JR8qS9x~RP~O=QAd#UAjG4N>M}S>j!2R)*Z(H=eRzjIS$X`yEE*wU)nS1$qS3
z^{(m_I5@anNKr~&bPv8Hxocoq^WasV1uDM5#WM*NlaWrFJ99-QLHaX~^CecUu5ZfU
zf+0%2IsEGe5e#q$TA`NkZ;oaO*Gm8*jj*;*ubf^xEL>R`xoO*us`{tzUQTVZ@lAPl
zsFw7Z<mdujMcrbN{1SqGL&a7VwRHjwW?ZH&9f}>FD8z%YJaul1pUeb5IOG1C+xGHx
z{~Ks@eYi$Wty)Jn91~iJ%iOjWNW;3EGRtaW{oakfn|}B4P{Y-sjij?Q+@h11^8i+5
z9LiaFj%YCrdNM=u!?jJci?lDD1j*+rc!*rIfSm)ZOz&(S*8$U41U<OP7VTGulq!!@
zOxDM5ZtwFS%w6@%^p+B4#mKoR;jJydO<&IC>JeN=a5bDx<hF>=?E=j9uxdPB>%<&%
z(`839E<)mv+QdlZx~csxH=I@qtez^jMKRRxlP6^sqnSUuxhiRturB|jLCixVQt$H1
zS0b|N4i{W+$c%FQ`87=6tOW1?`ZZ0ffO;Z$)uGvs*=jww&lq!Tu#HNsN^0W)|23kv
zoFhcV?0{CG72H;=i}_#2(+`VrdhuA_11xD*4`DSTsq=o9TXMud&(%+|yyqnAol9gJ
zc<dOWv4qhe?C>7UK@pnJu(6!@W7@NIB6JVhetmX1Tt?)KhSO0)4i=+_0_@v9JXRXO
zZ>Ad$8zOP19UnRgXV_1HcY_X>XC_xSY;3<tecp#JfrRACa@|GI53CE+N`42WpP^vl
zRuVi=ZFdMetP~gyTQ8GL(Pod;9YNdcm1FkYq5W#7508tbSWdfYzstFx5ou%I^}+0)
zzZZ#5g;qUyTuUOp4$}vHU5Fs1&KdM2o8^=y)%?NHbF5V1dJYrwL;HeyqW9V#mz;ED
zEoG1GK!qhxlgEc6C(MhOC+>A_yO5pbTvHN##i^~}&*ch8Anaj2qKpPQE0`8x>B?;z
zG?ZBF6|Z+}@0}7^;PggGwa;;;SxHZI+<$OZ<Wflq=LhX!-JfUBm7fkhTkEml(Jm6P
z6_LNEV0IScrP?n!!MYqLSwEx6f<G_X;j+*OOC#2yvnn1Jk6BZ?rx+=*!rAxlOE{aY
z>o*isjMVy12{J;gm(}o(3B@6g#V0>Zj@i4Mom$mMBEApPR{<>5H~t3wsA+`lNq}ZS
zWolb$pP!-w=o4di+08Vgh&6Y|oO8C^xWx>z;d@v03`$4JOb^FfZrk$r=%B4IrG516
zq&9b*f_0Wep7#G=+~@ZEDi%Ipq_Iak@FfA-)!bI=#c*3xQTww2tEU%p5H+hMj%xY`
zI$W2X;<iS+n|+a`hXn*QRMqv3b7l!fsb5Sw^-Qp)?CGsrBwQP{ePM>ue#7Qlc?<QY
zuYpzpVrdf<8Sda(eI_Zq)qv*#C;T&Mn*+8%FrE%rkPSTG75qnRDQdW{r(qk~yp8%q
z=+f1&u{h$;Xcra)a)6M|)^j|V3-#<S(dBL}b~sg-x+}@2u7@>ol2aN!WhGj(bUSSs
z&=3FLVl{o;Q{aUSy$}<PH^EzG@Af6JZIpjjA@gbDyVSA7Z%%XJXPD%Wra{i8`b@G@
zYfX@T8TUD3`Y{eu1;*e0KOC(T1pPS{zZIbA{7kBc?t<k0%-Dgq&fBTovAAV6bWcyb
zq>anCn~`C@F+_vYAR&YHDfv9|ha*7-lKV%FBeY`4+Hbqa{|>>^$N!g}q=bwnPoSa<
zQNO<CJKg1I>Z<`wm)hx5lL+(i2f?U{FynZ>B$jfvt3@ddK624gto@VHR+6fG)Ibg&
z5|}m(jX5k~i`&~@XgZrM=@&xLz?!7csMF-MXl=d7B!N4Lv;s|e7i$`DX1tFs1+et@
zKoV8GAQqn=K=7anauRFqe<r=R01uvTAohRh3yxFp=+C2dWwd|Vy7T~(u|t~7M8h9}
zWgiGmz{Kfjz4v@GcpEygm3HSjWF?Havl!~kaNokN^sc<>O#!hAVZb>B3RPv`j_b+Q
zW$-L*)Ku<l^wjn6_a~h{NiPc@4*365dGu9;-<qY@pOF8#27&)p1<t~tEj8qM@nlt=
zYb)r;S7Ps#scBWZFRY$L&TR>V$}D|~ZZ@j%w-?@tzZYQ=zNIdu{PgTxBTZ59;I5Eg
zI%49_x-_;VoUJAywYANFMy*1Ofqb(I<q^L*PLsx2w4oO&qOl0h2z@(M@nA+f^b-SR
z(Qxxl(A8@fb6ckQ<NaDc+^5goklokJFmpSsoUk}l4`yf19n+M{j&y5B=iJEvUNYAh
zO3myz#nZ`3X1PC>FW$Yk{Z8Sruvp87dA<OEO@cwX51fpJNYi@ZGHw&}Tv*M>d1Oho
zDic{K+`^fIm7t!@T%#^71&=@v)`+lbIo*V9!Y=YtQ`#u0L5Ap?nk2>HKI6)gfu@qz
zWB!Q&wwJRDJMCLu`zLT9OaF2?yiahRn_OtYe9VsC%<E@rz;YQ3sxThv5rEzJ{vpgq
z6Rv^M=Nt7q9t8PXp8HzB^R0#0VL8tV3EA*#KAhJJv4_Q+eL3EWMsczxPorJe3<mE>
zgduD{nFN{_;a2z(H&K}2Jft-3Z=!}6ZS>3_bDrWwvZB#SVb@O6Z@Rtf-k?W(oN^-W
z7(Cc#(vxY+;d9@(F#6wCb_>83c`(BAa-Lb?FA}m(&*c4ibj-$L=DIe>({7u20)hm7
zt5rxl(5wY*v_$DC5C{eA>=l}Fj;o&w(jr%?SCuLQX>I3>t6?Cuwew5y9$``|wO@9;
zR~7x{+`z%^Y6{KEGH#^ylY9vUw*W^#fKk6x>h6IvH^Txryzp`&V0#ZfS&a5_mf{S5
z$vLE1mSOz`cw*ee43(Yd-Per5Sxs|txCn>!8|N<B4tWYn<Q1_wqjgCUmUsPPPx~M7
zf4crA)eC;|MntZpW40m~72%-qhX%;|p;IE%L&<NVCQ*$EL-w6!%TLV?mj;~!cfMC3
z7aZwxiZZHbCLDV#Ziq#p-(=t3wlQX%VZfW+EkWYE4=0`M*E-eKG>S;r9m04vY^?$i
zJ<&<ZD;Fs9f_2y3*Dzt23LdMb!0524My~@80J7Np1Yqe^>GGwqboCOrX=H5-GG?v%
zu3r7+#kw=;Clqn^CwF&6IG=kXx%|t>1LiVni|tGg=N1B+D}P7BR&J?AnF@IKTPaej
zR_YwLlY_=D?KwU$Wep}fyJ5KjXjXO6(Zam=qGMQ+qO*m%h`sqp?b&imm3L1x-6XI;
zaw96#enOaC;`HI#_j)+=p_=}nqDL67ay8S~I+P-J7|$HynQ#L5&5VV2!R!{;Ew$&}
zSaRyz;RpU0y)A#<1N6cc+JXjG1=Va+xU3#A$qRWm+PU4``hoaXRf_!&+CvQu54)ex
zcz=+lSm&uGWy1MjK<K0nI3)g19qFpzwXssc^VMi=`<~;CJ>v})O5jIl`^W!Y`{fR^
z-f_#5S(3lM{br40akt6&OcGKgN`;4q<OQ>_esFU*M_8ae5+Pg&J_vT+JuKXz0=St~
zd6LJ9`hl^pPo1hV3VGi`orCXElxF&Q=KG1K4DfAAqgaou4};;3c_)1CGvoT7(5`f1
zTm6W+88dcPO}mNJ+&`rj<9q>@)BzcSzCw`RS&n=4G^|t7XN7TBNw_f6W%O+{V$4R`
zrJkvHNV+1-ZT1hnG4`zO-QPEgdj53z*6+*~uM$QAvZ?A{X3$+ex`!o|DP-gJ08lQ{
z<<KH%8NQYuZlN-Tuy&}PvdAH&{HoUf{!79JU#))M{5WRJi_9K4NH^L$#BT67TR2cV
z5M#A;!@ED8IE`yYpHPR-|9?h!y!kaeLpbe3KTWP&M;}mZXgG-kXE46tCq$|##QeY`
z3}Mco$z${=RwJCV1wnH_NM-JDidK`7CN;ql2A9&EiTO@yIAa%Lw$q9PSUSu`E(Zfs
z{%2Coh!*JM88;~(Aw(w%35m#<b_xL<?ZigyLC%V*K6`gde76KAAD4erdhIw~7UAOA
z!n;6xf%#dBqKe+$72j5`A2i5q-Qp4>8PK`6_*7T+EN~q@HGey8%WC~;cy*G%ZsOLz
zgh10;O$(MjM3*K7NE)c<fKt>HPgiu{c6E$YCzZt!jCQm}O-tnjpExUEBhBYR9xDf)
zJAY@rB>S6-bV`_i<MWDw;v>&vna01>)=Cnn((?ECl2V8)0o9fDkCQabk9$IDYx3FA
zT3WwMbNBM!#E~D)+B~d^_mG!oCLVj^lC~^vY|Pc^de`eW0nOGwl86&<^fF<#5bc##
za|#v!j$+fdTqo{J=lo4DXZen19II6_GV;ml-v`Yl4UyD@2Ej$zBKKwC+{Nk_=jBGO
zt@&%Ns*ZLOt9BGN!NBcr`qqz6m9K9r_KYl$xeK76-^7%mKf{$jKVwhVR9*mGR~Exs
zC>uHFd#Csnc47w<N8w)aQLV9AzSoWogt<6%q!SBZ+~0wSx`vml_(k4Is>!g+lGs=i
zVR_le8N<_YB=X0@@XRy$+n?Na5fDi1-~d{xSrfb9{)ZYlb|OjbD;}bqcRT2Of#Wx%
zHJUXkTa5cjc!?a(BF>gB&SB+Y32VK(-N3f|lHgm%!r~_F_qjeBaDF6il~cQ^nTY%y
zAG6`5;LDW^6E;(mCvjhnrS5*|WbgS6YL`mrb6@(q*D5CtbxV$xakdqV4sOD{6{5M}
zwK?U@9pOfw(wrvj_Em>-#-6=8?iWlVqD1o72)3Rz?xi&ZT1ufig^&oH)YN7Qc7$)9
zJLH_?76qa-hfEHlh~IDZoU#*be4n&oTxiKg+6LDFcaN#d$!RQj)0xTxUIla<cWtRI
z8uhK&;{S*|X$nAuG4M7Lcd}y@&aL*0CtygJ=I(%X_chl&WS>wJB@=VNCt6ZFWEAnC
zzid3Zlwrczg&kK=XNSF9TwxAT@Sp_W5o%VLH|w?Jmr<8QX?XTcY7!p?w&3O-8Z%uI
z63ok_R@Q=~#U=pTQ2}fP>J&c{oR_>f+u%%t?It^WubR;!N(mxA>RO(m;9bCj%ftN#
zlh2~c$ldR}L%*%;R-KHg-}OKgS07Lc^Agi^kKp(X@vxPubmRnp22G+lAPd;Wf}hjM
zqvDH!+cnlie9`4@$T@=+XiCd~)zDrbA7eh|>;N2_pM={Mh1V^YT&^wM8(-lOwJNvh
zjYolW)bjVNET04}+)zzI#>^CXyN>Z#?OccPms(%Wp+4bU_WLKG_Bo-nUw5!^=HBWc
zsA@_2(3|~3{+HwDjw$?-@YAscgX}X${96Jl)w{CN9_j?%kGnp^T*&s}?ICGPiMhvT
z@+tTRdoCnYvTAxW<2=<0vh>UuD!Vhs7~`WJ%|hcYt_dEBdcG34uV+&ks4KhPA2KS3
zRIVX9Av~}6MzUW}ER{w$=X|*Hm&ftK@T<8uRO=IHFO2{7Sl%hZY@p??A`GsfR)m2}
z>jtC7ZWCL^kXi0)Ip(Miy2LtWOI=4Z{Sx=<q+_*}y{D$)s1{)^@0&YQiLYPM9ylF|
z;XmjIz9$<IF01N^e!h1@)dlg38zm75)_(Bbyn$n*0t+lr1cKSo+64Vknn0|&0*?e6
z;9BqwJ)TEXq_#0g!@}9!ZhA09l5gfPr7{_%nt@;3^&TIej3y9g1?4K*dRg2zC58j)
z;NXy;VSQ{hR7Er~S+f!%;APn7YeCk!D@Z8SfOAxL%Sm*BHXm$RqMlGG4Gj5GL@ww+
z%w)sUoe4141>5;f;kE<J*|Rfno04$p)0Zi=cb^xH)tXk^DE8k~A{~+5jjf9*CJ)8p
zOQ6`B^@}bU&|5IptsNiJ+CaP}9LCOhc1&0e(J$h@B8qT1rr(lp*^RFOnQ`p-@`i1W
zG}DGP;5TqsGWAT9rjGFadw4qd-Srd4Z@;mf_&abgAfSt^@@s-yR6rPzm8|6aFZ$fh
zYCRz9AYW27Y%ZuxCoI`_<f$DZQ!u-f+^h`<m{_4|r5VGRuG*%YKTmh+dk2?<ozwkg
zamLjDd6an`=aYZrP4Y*8gve{)+ynuKRxqGd_>E7Yo|@fYJ>+gr{gSg|W=NE%Lm;PH
zvB}NS1J_z|-d`x=ERQ?^Q+A2@>W~tp!Ty`l=M!%Psfc1}r8x7_S4{tuf+*w!h^&|Y
zsyEKBENUH~B#Npmo(L}G)Z92*9*!7rH*q#%xg}xKocm2k=@B-iT}r*ka(uS9;xx<X
ztxkB|w!EsA{Pc48!MDw`LAWsv@(}r36=q{xemiU$F3XAFd)N<JpYBQB&QC4=@5iUK
z`(87-*7c25DevBUNbG=6K{LUAj`Z1^<9ENuw#!Ku_081}gQ4Bknfsf{RiPweCn5)2
z7h9tm2ZGY9#aM^dB^>yFmqkj7HQP>3OTyzK%Q*Xb@O4V+tl|9C5}|D%w(g({2#9Dy
z+Z=YNb9N}wICdIupM!l3v^%yRiq1OvdpEwz4K*$=At8=cdY?RTQ<^3RWsFB^V~Iay
zRh_Mo>wuJIfMzQ#nfdF)xV=$cXIj8FJ&xWdTKf9@y$f``nFSMrdFJ<H7Cy+){27$t
zTNO}j{o{2K?d3;e#eR4>K$rC%oKxz!Ak0$2Xu)J1T;}o`#zX2Qnp{EYkJaeVOI+7J
zQ3w<OicHm$z|i*7*eUIP3CAy3NrN7|yHyW&6&BZ2*VxEQm!p!5Sar8lv(5CVI9g>s
zniHC=x*KTu>_AVs<Ew=KReB-^2^-kh<12IxBKd9pA|%Y={3d3s$j~9W6Rgjh>ps*M
zya|g9T33Zyq(-_q+hy202JT)Ld17z3+m3B_b5eLGD*D6gCjFypWCNB#*~L!n{8M`W
z*#8%7`0wQT|2@9<T@VRDjckI6(9$8#<g%(f&sNzS?n=x`nVK4{<61q-oBNp*h?3JM
zMP?)B{=LGy_<~W>5oiCDYpmG?Mwg3<g1kaLdcyn-SKDS1QrOWfz_vnz*kDMYhas(m
z3-(djnaEw=Q#N$%7{(l;Co-%Wyelx~fx`!*X0YCRh3qoN>YnuMz;mb)1y%nSb#EHg
z)ZO-tf~Zjuq9ULm#HxrEAypYF0#PZVQpBN(fRHLGLyV~vBtl@z3?fpsN`*pD8D$b7
zpbUwSKx{37Oc4+=P?b@36v8gqN#Bb;&wb8$*1Df}o#8!at@EK&KNzz2f4HXKP-Dye
zPIT9Z{_?l87c_^F|A$=#jepy#h|-2*i@@UZkS7GNB3Lsf1{4%kMw`6OMxVjeuR+C+
zVQD4c*B&iN(_#8FM$MO}rVHGBiA^_|pE{p&&DlZ`;FPH`?(Zf(#Mv+wHA?ET!e8~t
zkY%F==~1Q{>b3v(@DKmtlltFwcm8XO3NW#ZcmREVJ7<phCPhk8eHApN`DPFiW{Fi1
z9>5;YzDnVr{wDzKVqmsD>c!<sUHlvz24ocCKKE;ND|-nrguew!Qf#x@q|1hJU9F9Z
z1;r%dFo|entfRFbJ$_TxU~#0g-a?;Gv%jO@h2`}(7hyL(`Iz;TPoA$L6TN~oNVz=p
z7=mpG!1b;H6i%e{XBIb6pBO&p#rfG``;`tXDmEbTFa<%WAPGCcZyQW$(M0KFvcr`e
zA249`=PN*q#i)mD?ee<*sC2^RLWzz03iWt@X+jMnm*#zf&;nD$3qpKFzhW_#0$F1t
zwo|zWKc%|oq{j*YUh@YkR$9ia5m1dCh*FQ_*l%i3LJK*Gy#&;O#9CfV_BUJ(S{7}Z
zEO|-yIg;?ZT^EPFJh(4wu;`KRiQQ5a*;xZd6_}+MUjfjD5$O0eZkrn*CR21_tj~)f
zEmW^#twDdLtYqm7Au*69)vrf+f@<#C_VQDmqJ!NW@}l9|li6$0vf}(P`_$|TX=)%f
z$ZnhC-HHVbHAx}v+MZBr{xPTT3rQLq+fab7fFaIr1Y9pu;Veh4Q_fIhNUK<3@>q!{
zpPb5dlux$s5>1z4_lI<jwvhB$dN~;HL}gWv!_ge7ZHm-)h5KGdy(abQ*AE_pe!`bc
z#>Fpy={#z>R<8R*69vL{5xl40Rq;-sk<+-73>g_YhF$5}R31%T$z6%Np&Qu`XzT^`
zCQ^_px}2d%k?RTU0}|?8?_**YH2+@yh^f_+6Gwzc+COq=J3`BKf-jR*(T_&@E<BSp
z*iki9&;X2qY`1YeAWiH8#y2ZB4vqn!kUjpF+)gm~6}A}V0m-rc5)3>&qoX!3KL|`W
zV>cxe>xHK4YP;$W%hHI{(IdUh#Wd07TC00&ej1tGn7ZJ`oq~QBdSK>Niat*=0xc-d
zabKmQT1c5c_XNF4(E12K&1L%R3H=;=1CJ4_UXIT2+dvAX38ady$hSAAzm%ovV*Up@
zs|LUZZ8|Nnc4wgXAFs{S?4XE}Uh5iLQH5);CcfbxAXJ3m_@u<rP*y&niEfu7$!ELP
zqLZKsMqOIJpu9D=O{c6#Hw75%!`Y_YXFD%kuq?Nnm|ip<x_a={mGO_#Ywu3q0v8=`
zb68a$kEQT7*22Y-Zn_fW@Nmm~^>fk_`ui+tsosJ1Eo3m}bA3K1V9^Z%77Mdzmt;gk
zkUHwYkIAwwFfAXZACr@kL$iFSB644($BC{<j&X5j(Jso*pm<b+uNYETVG$5=H^F;9
z$lNI<H>FY}!WiTN@rJ1>2v5IkBrP85tT&X5SX+WP>2t<Bz|ENR!!Q40UA}->`5oXp
z9sPt}b+0FGyL4GiMG}1@7dz}GCrwkAT}4jJhT$uYsuv@9BMSSoHMriS!s%}R!OH52
zn%jp}Z1w8V*|?v)olO9#Q5>u`0{bpE;SC#Fmg~`m`Y!UhZ6^nPJuYpz^^|~Kgv7{M
z-6F1piLWvk-%P1Q_~4$tZjMMxd?K&8R!@`^8#@x7ANMnR?ch<$v?Sx3rH-~eq627s
z_}#SoL7l-0qi<|yLluwH!(UgW9qpRlnfaLbKH(q!pdwwZqf(`FwWCBN^e8VztR3Zq
z?G+1ox*-jELhAC5xPH;s3?fL>fu+k|^}D4L<mQZsy>i;1L8P~K5QnD&sj{F_VEa>b
zTB%FKgTY|?&|$*tUW8u=EB6a;Dh+w_5*iqFQqtcV+qC{tgHrp?>X!(5fcz%&J4k}>
zQqB{5kNRRK9bA<=qF(V9oks%2iDH7o?(hs=%sDwD#lc3oomRm-+H4>CF82voh1SGR
zGj6CiK7$r!9J$P)NYc*Q3@W9c1+|uC&+@T2t=S$JbsUD>vlSUJg)@|{ULV#(QJ*1v
z#zC&|3s`U{3mYwYr?WiN+5^f+b(`rHZ2wugwj^M@Sjt<@ERcd*Xwr<i(2vLg{zb9G
z(X>z4oDr6Ms>?@cPmQnQna~UdjbfW`jf$3^^a-48sR%6@>pSmVtburk!Q~2Ud^2^P
ze?-AaKpXM=-%LzSSZyh|#Rm&K|2(m)P8WH8+S#I!D5Hw5sWFc0xf)*QB%NIHe(}Yi
zOY`Nzbyty%B-ELNnSB_i%C*%?U>7X#L0y~Kaea&y>O8f8YUJPvHc^b|C<{yWb=+7t
zr3hTA1|*xNCyg-1k;nF)Hyk{2L7l!O^VGwWV?8xSHt`=zi?R5SjdC+yLMTGiKu(xK
z6%w;&?p5H&q!ST*BQ~z5RD8?nWVt>J&d|MoNy>|HnvaGh(Z@q0R!=FPO_2<l&LC~%
z1(cyxRvT`+$w>(|4J3iR$*0Dm;o7`}JQ_VzgYeg8bq9}VO$O7;0O4f3sbM+@Oj4Fc
z*#JWPinMn+CF#O+P!)LrHs*&8-n1$LS(&qpONGCI6yRj!MMgl-Qjz7Bo8Hf_SF9ym
z1HRoqX&7M^png?=4uj}Sg<2Tb`vX)SjCtqE<EbW5n^+!L!BC{RXAjpJv*U|bj8Ewh
zrSFSF?=vG@(1U5R25^n6H>a%|7&W?47n<koQo_7_s4k9Hn|;3^(9f{5Y8kN|M2X;Y
zSD338H(!C<epL0C<tZig8cLAH$u;;|IJaByizq3LyBN1cJ@~}cL4MmXXV`{<>>cgn
zA4AzovGCSu@W)Iy+R=`CN*j(_ywm~fBdh!;zIKAk-Uhsf8pz#&x#sRKut}U@tjNIi
z!~%FI1i;t~0n)o&lGs8`Vy|}CQN;RI&P(NP$9JHJ09f}PWx=%#gV$@%r4=!2oV)Vi
z*T#o5kau;`tIC(cem>Jt`f=g?5_g?fb){qB**TifeLydQHO>bJ@(@_&^RQO%vmvQ|
zfzGTBR*afcF^@8)n}EH5r7iVHNG)+5YP*i;f;4doUv0xdxhVzx%z|C%d*pe8MW+~%
ztGFF3=e&`y+6(vT0ai5yqY~2huy-~ilA9FtpalTx0>-b%$_>;n*jj)mACk?C&!8zo
zX=x6T@^TnCMVT{S9+Rgx!`aL>k`FcnF-n=4e9^5SKZDm+9QL>e$ltr&c*XzrwYAdA
zN_0fN;Qh1mU<oOUgkAy(5jTYq<_M30RReQ#QB*6kgu8%s5T-u<jo};9OIU_zKw^}U
z7c+JbmKbSz6DIL3eP9eyY6r&D_3ICIa&#6>9;;42h7PD2UbIge8|#D#s*TzSf6e@B
zhy81#4ZGqiZiC<>0DR#2zCq3sduN7h?-h<A+EE)=?rGqlnV2^^)3;#o*@GZ^-5S}B
zD%+lrXO`1++m|QO_a?e`0hg{}r&pSLZJqi>w{_{hzR}|n(&$mha~{HpJN>st2Rw;C
z8Q(h@hu|+rAO315d~#K~&%I5ke<Ll_y1uHLFc5JhN>4Kp#YI()dL=dLHC)Yh_x;M!
zB}ptFDPwU|N7M#zkXY48ryudq#ckzQ9Mp~<<~<pEzRanWK`+CK_o5AL2~);dL^p6?
zoqqN|`vQMK{n;1=Q+<$actXKfejZ9}0^?V`*yn6ra#i^});AUCxok<G>FRFo7tGUb
z0`A(5dW+K)Lepd^lM_)_WKGfSM+7{+;)pOe2yo&Cmkn%lNY}s9R4s;sOR5mT09YA-
zG`iT7FHyf%FMNXClcdEVm2IhNyFm3k(UHN)My{FsZlYXUO1U}}!7vF-w-o_rm~U%<
zEa&*1!7hiz@DKM)4XmVT7Y^SH_TE^isg8wRK1#thl2z-)3P>^q7cf_FUbw18?r0!)
zX7H6W5_3MgH$uHcOL+p<#9U4lj!>3@NFP;%J4&+5k3nnb<-qz~Tl<1-!`;S=V)qx0
zel?Q9>M;ll|8*wg*XqlPi6Sah9Qi;Y(USZlt1~y({y*)>@_#HcD7llE4Ox9e_yAP-
z=PC!F3qV&v2I6>jYT`V=eFx!0=!w6_pat-VsJNFy{14a6zhF8R8w222QWXIts0*5a
z)I5Is5tDLKKFcKShdhle4NJujIGBfmu1&<@i&Dl4Y`tIC+S~l|?Lo8LJVJ5^{W5gL
zCRW<}<|%GQln#z=8@YUy^ooJ+f$`*mXee(iQ4vV6*6@jHzqzUMvO3rg-y_2*EStH1
zi1Po|NUwqt&<bAo3DWF3u?|oRSYH7meFEmy+C1EVpiZjcQ*kHpQp#TuFs}Z8>yu68
zO882RMHKWf)rjSfUcRGr83EfGCmq(Rn(mMZH=)`hO?EDR$no+R|8i|vc5O?vR7b1v
zNU+G$$)aoOw{qhHx4q`lheU~iXvN@I&y2;{vj88uWn^_bC}()~U}8bC0e^4j`H)Pr
zJ9w{4eiltX>+#(^nzwc@-DL8@xZg7R*Fy_3|BY`asSnU(T59bIK-Te*iiAq#wx}-A
z;7%-3=COozL~eeawN>UwY%&t3RZ-RiMmg-W`nX~fYkR?4Di(GOZC2k^gr{Z~YkP@%
zN9|qIw~GecH<srQ=a882!25WTcWIb838KLpf5iiA2deFbrOK%?wvZAdUhYI-hVez&
zpf1H9FyEgh`w+)T(;OYN?g2b@<jTGj(!wC4caur$UY{?$z#**|z3h!7`rme`>Lxq5
zf!szV+^yDg+l+FG+N(FGVLzleq$(@})8Doho)+#bH)#8&r^;gv)3zKmwFXy1olAn-
zTt7#Y<FvX%r!79zUGJ#8x<Kmg#_!AU<2#n6<uTJdL>JgpUOVe6%`qP8NyfgeQ7?Ws
zN57@0fxynIEaS)xWr>2xR5gi%T`CBg8Pt@66Ew1PBqI+uoE2W5E@d=(pRKnu@V3dm
z+oR~Sy0ZW>nK7dq=|PnTJ2Jl$fw-h(+dpS=PaC$8fv+imM;XD6DVIe3!CNrbJNJ}P
znyA;<^SCQ83rTiEPA`)PFLAjw{YT)wCR(>G3gmv>j_;R7l3pl@*RAPRLa*BPX$uRT
zqkQ|W*_uQ*TJ42&;B^Uhk&KbX2%e;Y@_2HhTuE$IT1CC|jG|yEvbH4ZGW?5jP;vDZ
z$8y+-Y7>;02oj^!-1T~IiF&=ei<q~)<r{PFh9A70J7N&zPxCje18IbhSr-e2Gsu9-
z+>M-~U^~)*elB5v;>md|O#V>7TftogZsey>#&e2xy^r*3t}(NwMRAde+o6M5lH49^
zu^uyEU;4K^$l7QRc9-|I92rzJnd}c4Q-;=7-F&O{2@J{1Anf!<wTRI}jNTNf;kZ<3
z;mhoAsR?JaOl%(ltzM8<Tr%dgu%mt_T}qmdeQ50SOqi%DUw*=8)cfOo+2*J(21bui
zeIhf2d#lk;{Pong!NVZADxa83&NN5Z3%KiGzR1ReXr@f0px_&*XfbyqlPDwO>w$bh
z>ZSCv(KxK&fSjzLD9Yc2QpVdR;J*qa5IHwWI{jJQsW9eQjDOTr-<>7mCfi{NQ@g7y
z4UcsJ8RsO*%_{;z_5DI-fG1`)L~HQj*NCcrcsnrcohME#4K1BFcDTd*mb;T;$hjw!
zZc59%a;DQ}r*dP==po|!ezmq9Tyo8-Un#+ievx`{tGrI}BN}!cgkJcH`4~Hg70?Y=
z%JM6NnhjV*`AOEdn7f?dg}NqIS$ewGci}eq!+ne<-|hR;T8!Ra@+cb1HtT+v*z`k?
z>8j3Y_9_kJKs5yoNyJwejQ-v+IwWgrcDIel^ttk(v)pMRzUS7*rl1G=H$17m?a@gt
z+3<{WInX@9xc{Z?9h1_svM)AUXduSoIdb~S0*NR5P*h=&Lms^yZ2}Q#sd_oS{xNpt
z>=1cn(2UW7wp5O<t6z6L^^rJ8y^2?zc>Hxpt0|psy-IxiY<*Yxd2;!>%9_sBpJ%=&
z#Q+`>s0oh%Vbs<iA?4wEAJj`0qqo7MmG^M0wt&CWeP{C^wBtS`wEG6D4LcknA9&<Y
zu7A<taBrgsbR8YgQKP#lXVB5GjMIL$cN7B$EZn!@T1p58Ne=+W4K`n1T-aRFYgiVz
zasd}90104VRt4j734)OmCoJK;uaGB#v{ewP5*%AlrF!L(f&Mmwq9Lj#=E09L#Yj1r
zkBs|J>f>m4xt8S|hHCGvmlLC{C-#`QHidiM2wff0%4o?*kEKtQ!<+t=Dqra_hpSho
z*a>*}R;nKFFPB}UKib9#@Voe`%qVbyJx4iT-X9_R5Q9fZ(xOS6o>UoiX^>}y3-KD%
zO{2nt-415Om@Bx)B;XWA$n4L98>&&uhV05bEco+LQ^Rh~u%xETVSnC8jnN-4{G9lJ
zn?T(-Kdu^N(qm<!X2(4d5kc=0nmQ#6!Pg(l^R8`Vj!)!rJI2S4$li51YY+N)dzakE
zm%U%){QFf>t2w@WMy(yKw3}07Iz+}c6$lx97EPwss9jTAzgXsxtR@H9&m_LauOMiF
z4>cJ?v%VMxyD+QR+>yH(=}A=+{@-Hk!jTnN<?gh$PMZm>eK#1|9uJwfkBA&LYN|HT
z*k}lJ^vDNZho&C&z|!Sm0@3V+^g`+zjIkH{V#tT?F8~FVTW@^=GmZ(9N~g%g#-iZP
zy>|_^(`w(RK5P!XxH2QVxWLP@`A-ef`%DmOq~ca-sq9tUtq5eSO>jQ617vIgDH%a;
zAVJ7^aGgP#!ej%~X3860AN;L@$3dR(I8l66p6Xt{s_uo-^UW4qTq)3e_w(F7oVzJh
zrAQ-qkklifinL$3qE$&&cZsqcu`n5X9==abO=j819Q7J!MQKwo|3HK@w`fQ9&tsl$
ziFD;>2opkAm4yr(b?+|q{{7SMAHL}hi99_U(HgKHvfF+HJ;KIz1gICkmQxgls)8sT
zbz5zLfRTdeJK5tVasWIHXz^!YySwsBja{lSj?|a>yia_?hNs75yU>sdCV6j9IY&v?
z_ILtj_eV?mg8YnE4BJN)7cwjPIiwGF;1Q5W1l{L>ea)T|&9sLo7Bw%bjZ$^4MoyHb
z3B)n>P6eoXwuS%P$xN=eDU1BF^H^<<b=vB{*|zwqXOgO_ZaRlu@pia2_i|rZ`lFHX
zpM4lr)txqxyR=^NB+n@54|d~bN<U~DaLv@eQz{osrbU@Chrm)IYK>R$ESDphT*h*2
zSDS+S<D`JSh;{s#sEjJ;J8+W8KHL*ZnjbW%-&v)z)pErun=Chh-E3=(LO(l2ww71`
z%o-~CV;i(crRn2am0z*esB&x=N#ey(U$V3@8*sb|NOEvIE1|5!U0zTB;<Oxdb45*4
zhawFH+*Pj)`p5l1TzV&I86fBsm&4QIrz2WD_~(2t^W7fHkJoFWV%+e9TAQa_rtXKP
zi+lPwU%6!vMi!)G9Hz<OS|+zknr<VE`DwJXv~#e9{*U&YOA{yzW)qX95xro;AA)Aj
zv2*)Nv+iVNR~C)Va(-6y+1@F?is*;@=l1#6E>e`^dThl*bY|RB$xye7Ifg0q<Pz*<
z6Puu3=RKx2M<)}lO6U&G5z;Z$_9Li*V;d8?-5@ipWF+H4<t2FQ$M0XsJ2B?jb129#
z{C(_#@r>4=2(#-D!C?vt<-_b2F|>KnW)_UP-sx)~+bJMoX-H9o$!l=KPQ?!pO|LQC
zo}1ctQv!&+FP|q$*89G7)6E>BuE9J6eygxvX}KPL902{H-y1s{>3k4I!eEoHUf5-`
zm_u1PV!Eg^uWK4vIGRm<+TpNHQ?>oS`^^h^sF%2(A#KA~>ZzA#%M%r;n9D<2h6msG
zKwFd3Vl=cZS)V?gwqjVVfvO4;9>^nG?)=$o6-!7qt4cr8Ipro~AF1d(TV-^=y36l<
z(+jOnO;;&2o+M_@Zy=5h`g8r+pNB|7cRc|V8QM-8a6@_G^GSVXB7ZseelhNpBJi`s
zkfBz)mK14Wsd=sZ>~$j{pHAWTm8F~t1@ZkpYEl{QQt;cO!N9Mu06&d6>lN81K#KgW
zp)z13BiL!KIr0gFi(X~IP(YOzLh092w5xKFpthyVfMY0<px(|pBx0SCPU=GMI;{46
z=KWWvo^*J6WqME_yFPmR#>;1L)b{vxzupm1x?Yf?FS}UhQLyJO5~=-PCA;!=@8252
ztO8ZUZm48#UA3TjyXQAN9PKmB*+A0?aOZX~j+=kVv(1>JB&^%4v2n-J?O(fUjGwpF
z-3r3gV&wtkKkA7ExWD|yoquMqOP#jitDbg;n!rL^+=hBW(t240<#kz3ty8p2rPcBz
z$nH3xP^@2^?>}~X?=v|e@q?l5r(T-K&@$re_nH#W!TkTSEc#zla3OmEZCisc^H*F|
zMMqg<HHr#VDaV5_97RF2M#V%YBbF8Fn(UflRaMMbHoD2-sElen)(3c2x_2aHU+4E|
zPwIUt7M+*)T^$#IpKb&8poXM1JN!Q@a_2lc|0`bnKmLY_`vQi9S9xbAdnbqNCUoTX
zYDda*9s$gDiiH^pMo7PL!x2aA1J9mSpo7U9ORt>r50#}E1jh*Zrg|M`>aKz8OJB?F
zhhCHQyqeVKl;(y1lnKsa%vKvhL|W7aq|u)2v>iVT+Q+&qPwWn~zy^1|4xQ9v9R~q&
zcCzQz5z~ctd-(i}bBT;0Upt>l^j%h!cOIU8ari5+z^t*GH}sv|Egvt=Q^H6A82+jk
z*C`i_0!5b6@8eUUy2%R=FT|i{J^m65W+r3609`C~jfpa5mhX~_n%WZlzLfLgY<7CA
zV6NZW&Pk|@J^8u>fXLQCAK!J@wC*SiX+8e?=quSbImAyl{=trb$SZ{6`M4@+x*Ri0
zA8(LrH;bRtJcj^bj}_+t;mz-BIU<;hAJoBa%Pf5adKlji#R54D<G|U0kN5I@Mw}p_
zIX~sTjpn|ti*NIXty}1oD;K{eWFn0%l*i_vN)EF-Gm;QAy`wZ#zc_*6DRvKy@W!^6
zVTLUvZ6{-<hqSExY^ZGV279U6m>DBF%5L=bO9oZMg?A9C$12)!;eL^Ux=CA9*-g($
zJXBHhbQkfn=iK-2f%>K!zQ0%%V~xCVReW=c0Vum4<xT}M4?qeS-e7^HxG8Rm8VZQ|
zW7(VJlhGmMRm{xqx>-kuOtig4<=&r9_LRS`smWGNRP`T^J=iI&eq3EslcWW(N8Kl?
zWaJDlmRDieNKNGtkbv?y9*p2mM0LWgd@i&t-ftl~$uH!P7lO4#L37%QF?+vfxfsRc
z^;FhHkoRHfNXJT@Kn}dJme(OL{NcpOMn>VF@M{8Uxy!KX#rkJmRmz~~z%p{_+B>_y
z^xhGWx@O_3wRcW$({(+3eXcF!-!>m<+=fW9sYDz|bn^o#6_oM1OAnbxT{^2wwtW!r
zwBY^K2@DOw=})}*P8=C{GF&<)*X2F>wj!AkN)I^P&_ymY+W+ywhMO<HBFN!lBhb_@
zsFmb#6*M{g<s^w`BRP>maB!0^L9RzFm*2v-qSZGgzFNK=4*CTCz)^l`m=pm=KCY>{
ztD;tZq527J>&S19{CrOCrbUE0Hr%<jOA|kHh|o=a%myP_JU~^$^G9OE%cfd-a6mJG
z(s*{15%yuPTU~?WG(y0}pqb!6meIG8$IWWE6*QIMcU+E7-DXK$^|rryJ_)z2FC@&0
z-$0LIC*^w+``_C<II1MdnTs@k8YAGmx$0N$a=&laa+1G@a}NuXt}gqSxBNk}l~w*-
zS=b+y2R>ESX&_n@G}L39hiWP4Do)hWldJ`Rf1ixI%wDOU*Uv0(2`5~&2Dx19$c(_=
z?mC=+#eKoyNW67YsRQMH+s5SFAe3sAQgFhh@Z_#g?H3<-*|PVCi0?jKrFbKfc%BAV
zFRD|F9!u*rm(&PJi+ZuoQb;?>uNh4y)qhdse#s!c>@9AO8OwJ9*>!ySOjX9fWXMff
z`J%wvqqX0?>al;t)_HZi$oW!%-+&L;B;BW?lWA|(tFI?2_CVJ$7=w!SkFy#`h8SN1
z6IPb7Dg(q@#QL}nN`CH5;(IKh!GXLY*BxqdGOSUzq1}ne^+6B!7h>1w1ecTxY^iG7
zCzX4by=f}r?8Bhe4L5^&Y^&dWafrxY0;LWN)83GJBP4bc9#G|&%5~$FyFo{FrkSe4
z+M>#w8+12u_2i*7it>1pFq|Sti&blPa7fFr3li>4S*Es$u`p^aGla6tJJ@J@FxkJb
z)!*_}R^YIvI*I*np5&C8ng#t+GOjO_6!1NIJJn0}EByd*uv1#-V2rjs=joSiVXc?a
ze2V*DIuZ_cg*Y0XyzO3*dFW|fosTwc;K;}p`kzm4o*&0E_Z?`QADBb>wM$d=BW#g;
z<cT>jIQFwnsmfRv<uj7WX!X`$9>Ku`z0oH9m?<}Qu9U;d9>?xP$ZbW<-f@GvqIC^u
zOX;JwAgSe-qJv#Fkyf)qdy~t34n*vjJeP5mQd4?Ky_g5r%3pHR<Pv7YF;yZ=M1-9-
z1LQ-mIU6ceY$yG|nbK25eeP$O)#2PUDb2*kt=9JQ3(IK}tJ${0Ptwn}rVeoaxcEm7
z=})rqC@AeBODREZecPo4u_f<1!EfdB5U+Vsi+Q{$qAv5Vah9EwoaFRHyY<c;<>hCy
zKPi0Z+dVi5ZgtPzKYJFk-DAtGx;hP}iw1IuiUzffA5(5-UBI-I?yO*}8zo8;0Zw5b
z)?!SG?{j)6KiXtZ5txvj0azLXKri8w*H8w%bob%c(pB$k9=SUzp3(AMOHcYV(!OW(
zw3yfYtTmg6iQ##lLn_K-9RO|v>3J;>X?&H|Befn$_!p(UzQKOl7;y76u*!pHD{sB;
zKLj1m>n!7(VXir<C_WoD-|#pfpdNX>6>iz>HE4Ku^)8Aq{GR~nLc(la70XmNoW4LB
z?Y1~s<L;^qwGPC@dvaqLPhde@0dBE1&;?kEyVV&nqNnRp_4wiE5(%jx0~b2^#|<uD
zdh6KAjb8Yx&Ca^Sx~|qgU-v_V9B#w)Bh-sI$_2q<^dPz4?Ic7<wFZ+c;4S5yYXkci
z2cnFZz+Qr{Mmw9s2{+UREE~CNs>Axie&+4xeNM3@ZvF<9xjt5<_ume*J*3rMdOOlr
znmSN2eoa$-1R(f?*;u4;DMgYE708@X`244;JFHL{yVpZP77&eDN6^R_0Z_8)WQ?Y^
zg{=K@s|p$2)2GY&WwNKYygIck*eL3rF8g6nPmjH6)<xRG6D8Z+X#V=G-G7QSOn1Ot
zyc)JJ1*SASm}+cRJF)^%;&?N9RGJ7K#aJUzV{6!RAgvxl$C|`Tr`>k4SF?Tu`5ckp
zct(BpqE2gT`NrFblxjG(Ovjw+zNbZWNNG?SwA3gywV~-MlJRbCI9Nk{Y=`SzQY>hv
zoKEXKuB8O^JoWneZtgsmrTko_477lZQ9@e1XDKtWC0n<H<t4N9H~~($Atp3|(a)mV
z!Aito|CPd4{nSc+!5dew+-A_15g@GNCSf2Z@f&*~a$0;<yv9i<s*SzGX&Gx@tO6Jc
zP4}kD<NX%FHsRONJsV9evBNO0>*J=E1#*`??y!yw4i$l<+RKKW-*uH-uyM5dno+vt
z!hKFx`Kh0^FtZ#T(8NCB6P&#X9lRHw;O6K`eLZe9<QdrKMr+;MHyGlzEOF24eWNCe
z&YFL@Tce$zT*b5ldJ(MBXOtX=+eupWz~1+6!E4;|!AR}Gdz2)n`5-rWu+H&rdXRor
zeV;Jd!Btx7;U@~+;h%h_p_`MscjhqfX^_>0kNNio-e_U%um;s2v)o&txFUj=mqeQ9
zv;<5}ca-A?tFSR?`5I^RCEv(18h0!Y5)+9{K9ft_!6ny@mXBSwJkkR7+qE6j5p-Ki
zx5G70IW=8YWv4sGZ)p&RqOLk|RMFhk*!CfhiB_dCPQp_2Ov0qVoTK#Jh8YuYO<>IE
zs8H$O<hLEmlQML%6gMUPde2NXn*la(b=0c9le;ewGvDvFKJsPlRiu<tfa~!T^PX_3
zD{JPW<*5aE^|tMckpNPh;kKmjQ%_%ayL3sq_=44jMX{`z6~9@R-ZQ&7aPJo_45l-&
zh2T$cm0jsM(TnCe!M;Efp*<-}8<#&|4z-w?pr$uzppfm$eDG4}XN!gh1E8|1aH7g&
z!3WTH&UL=BF!_`}{Yoff<HL(f(`P(AR{(|OJI&bvSd2~JKJ`!m6Y7|<s23mx0BU`E
z_(Jj0dgoFQ$Ykx7sJse{4n7M-CnZ$a^vO;}obLNIclD4wR~c{7aJv27+ds6ODml^U
zbf>5h;-&9gyv*VKn<z6EFYWL(JCqcbsVb8qDPkLQNi1E|Dg_lkuT4u-ufZnO%ZWO>
z6(rpe?iX@lTuJEU^6L29y;05ggTlf~TbsM96La~r+@P4_HK3hhd2H=2qQF~2oeBX{
zRNfmap-k+DfVoC~JQ;@HHt2_Dh7P_(b&qvL9?_J&Ql6SYGhOLq4@?c*2zAOVqN$B*
z#SgLUS3+m`Owx5DTV7D%2&r$|o6#d)`@;&negpchDZ=MczE7LoM(Wjurg5>P?Qe~(
ziGM|fz!gMAkCn$#bSVMg<t3azP=Bdm;%PLEPt{<Z6-_}Zb$SqFxcm2XY={vaa^Kc5
zbm(bqz3t^nzgCl9kDhc>M4ZyEKjX5*QX`7hPMC(C)xx`Kp}5j@!c1<i_#J$iW+Y+=
zmo#J{YbUyM9~M@CyS9(lpOQMRpj^AeI!#?gb(0KSwh%7`w7?&xTJ4rq14oZ{lryaN
z?ai^icmB_=3uk^HPTUrNITSDe+LEhG82s?^ac8A@7Fl3)Fz-RI^Fb9mN`E*b`f>O9
z_mAt9x|I)^e!>$S45zk>=DnegU(UWf@;LKsH-yWs!v{eVQcvm1+_@VI0|+4#iY6bg
z^DOYYye?kpU?Q#CTvkRtSJlqiIuv=y<@Lnb`r2DQ#n0$dN(*Lg?X$aX$pcF(_kG$~
zslja3KsYntkv;Sr#3%qd5THoF{1Map@KID<mc>vj!LXJ-J(zA<m*;a*%w+i7-e1qF
z;K*I$ronD8%^+y&z)Ra?8J%?eb-AtIiIaP;n*MLB;eQY$|7sS<VUrV*aXRXhr8JKM
zbW&wpy4*u<-a@UiXVEzw6O+~>=A8~i5Js&Lc+8`UNBfXIkbgCJR?a%nNyi<T=Y0-#
zk@$n=SA9!g{nGxF@OPI=Yc2sK#6`8#w#7~aU`pi<b-P+a{^vz6S0o>|tVRifwj~26
zBd;y&vMLEhR$yXjesREg8@-D<cd}mH4Bc9}FF$+YTv+@rM;eF(!r}8rUXxXo(1sGR
zp!NI#tdI%7Z-es*=*<UIWdL;D%P{A^HQLlyiF1&R#jxkU;my&a`MxNmKWr7uWepQ?
zJ!5q;GQkE|Vx5%uw+3ZagCZk?!>64JdR+Yw%5=h-NNQvXX1jhQ^jpR(^z*9`wb5i8
z1^-)P7;2iNdWz&1@st}_YC#CG5idgi`dedeM!cK})KlJYx*CcUjK*CC4CKExa<u+0
ze}4<;cMc+``=SY}+zQM?d1hcxNZ;Ap_m*XcxdJpOq++{Ie;bo+Qf}I@I)Cw+n#}>1
z+t*tc(|7FFyNZz6s3-h>@{EvzZGM%OhZ~~-@#ZQv<(%V}pOsW_UGbM0h*-zuM}1Q#
z&UQ>jnPJzo9qoJQdQFpBze(E&fp;(0x&?=YdBbI9<=~9arQe~y5I)b%wh%ut>J07P
zor>>aNiIjd=&OOY=00GEb{2U&V7bZ(sjStqw%A#ZSlmbVng5W7)sWX?xxqbIn-R8P
z%D6%Ivj@lBiS9J!mw2L@_wyea-_=I-qr_@Ze}|6!%($<-U$Iq{>!iif!t9hT!Ib4u
zJMk~DX!Ll;2N^q&r77Vp0tgdUAhir=H2p&E(oz6z2|tJK@=z14eLWw`ry^Ha8W=}<
z9=Xw{-RkMV`J4yi&=yGJ)B~Vz2xNK43L})J>L%Vo<SdNh45j1=4F?+PEjo#ou}g4s
z*lW=&e<?J<gC~7q=21WkJIZ`0Gr!6)F+O2u^iG|5<)LfA=;fQuFqm*I-p9!P{e{*w
zcpGqX8il}B2%G3uF2eV#ZXp34aer%=(DB{!6mKkolw5yUe(4+3GtQd51dDi1T3)|i
zzT2vbhAhF9LXo$+9I%htomG1)>)j1HUV88vx)w~d3YK{t(8Q^8b1QMpI4msTgqn{m
zM$XJp_kqaFi)B}F)8*@>c1;W|+)C6b6~=Q-n8L=HG4wOP$8=ezO{s;CoX||3AN(q`
zmF!yC&De6G-jSh7j|jV1&>ULmOgEW+PIzyQLmj5wrnG~{aHj;2<AEYF{tkU9Q^ywo
z|JO8Ap4dD{#_IB!9(=<?zF0t`+6IkEmQHAW146Y9mrU~(<{74iIyxWeCQmzBj*|{l
zaH=aB3@d^Ajcoc^^V};*??B(cqeR=9uTIW4*ZgBeN%a2JYqy?UK`^-jun&LK6*rlN
z^Nck>5A*^cq778V^^QYzsfGvBn`cRJ^{Y{Sv(u^$d{58otmAFF<OW6Z#HQK1mATGg
z?@QyM8;}@6t4l#FKRm9v{o^6fk%X58$F=cn)FSx#-88Yc69SKu32Q%E5X~ht4^0Fs
z1yp@H%kcp--B(T$ESIKOG+2rFQLE&J*TJNnwD&O@880x(<*tip*faKBZS>U3O(mzZ
zr?md!=MXQb?s2!f14^@lR5>}J&A9I(OM&5<F?S{FTr7XPA2*Yjl#fy2qHd7~9vR)d
zp!1DOF*l)>m0m>uK~eNWz=@5U)_+f&GO2+4rGX;JIMVC&TOn(s>dBVr#g_EJ*$$CZ
z*yJ`w^ARQ+z3&^G^|(>J&2RVoW?90>c*&s5#w(*|;8#Ho>9<7O@RE8-BB&)UNmm}i
z3}pe0ZJOB2MygJf0d84|g-XZLlH78=m_kA4$+7VCYn)Wi<Lx0PM<K$+>X#LiwB?Q{
zst4Eg_<elU;&?z7;l-d-PVAyA8`hd6!_7Ex(;wCan$@)kT(f=R<0u^lQq;Ivaf%)l
z%}cm%3QRFm6F8-lEu^ImyD#Prw5^<@kT|6b`KTDKoVrivr*%9Iayloi#!D}pt-q?J
zeE8qpqXfA-WGGiv_4Sr>rM>DIcfGpPbOGvD1E$fV-mVD_dXfeU!HmHXEL+L<Tl_eZ
z{H+LgrRBGV<qyxc)EL`L4<;6jhPUS5Y}oR!C)8Qb_jk>|5_gfxdFVH3*k<$CISe(m
znk6<>ufqre(lRF#X1~-mS*?w|7d6@0Zk7QqY#8QMp3$r`4#%XaJC8l<oXP@MA`T;Q
z);Dw5JG=6}kKah`9XzGDZ(#R@HCl7B+y6Eyklq274c)H{S9fhy_aW7!2~FjZMyWY!
zR?xyQ9l-MWP1{CON>2ucpSf&c<a96S$|JMVpTp8y3r6mCiht87u^qc&E$>f=Uw>KS
zFVG=F;JZgtQBOuZ6+M7l<C$D=vcq@C+fqR&IvnN2jN3Req~!{$`$LpPV{Dy|4%90-
z#+0R4%5iistvtwEF28X<;87KKQ-{@5e)W_3s<gvLFP?i&>N0o+hXwH8jdl|u?x#QS
zp;vfbCqQ5@>v!KNJ~ud93-ibs$tbJP&+Q1xxbU#d2M-dJS<{Tix)b^)kHtFooa-!o
zck830#UbY1jzh%Hzhm9<jUR^WS|};hRb=ZzYm2sPVm*f|@{N<<aB6QU`e8sIx)w@Z
z>5=C%=%!y^^FvU_Xljst*H61Q$eW(jAFllQ5OI4Bag?B5qyzgvh%JUKSdU$l^Cd#?
zTII{qlO4?EhAll*J=|u99Cw+!TCV#nNVaOq#IPw{y}GB~QU;n`U$$Bog$%6IIsTIR
zM80O`t3k6C_QeOS`dxO_S4q#Pux^q`;u{;T0aHPWqs*rS6ZP<KYtdIlXC)0p;h+IV
zm+%()jitBSWL3z`ldCA#25ow*8@}v1IFoLfkNJOB_sj>WXu3Q3BiZsf<yFUApm`1-
znh5xXws9VO=V?{i8P#2&dywL(M&%#tErurbn8l6RRv0CZxwE-P{Y58>5n)?e?9EJZ
zlLw@-w9FGHt1PB&Xs_O4#Tkn{{c7@$J0V3SUW{E%km|(5BaNNBigY3JhOfAeX+y2B
zT6KS#oWwIx>oGq|stl?6ke`s}W6t~xVl!z8%~V@Xx|ZL?+A3c!?5n>2DA4|3#l?t+
zfrp1d<~u*PT0S^B8~NzKD^1*ZF3P+Gj4UvPgH$(oXV`E2CF$d>ppw5ql`|w4HM#>L
zxbb*Kc~cq@*nx0Q+9f>f3h1uNilUXTWbH+D^Kxl=F#0+%YGgE$k(&3kQ_@h=W3FzG
z*r`E;$P&{EO8BHF1rQ>a;NPfjQJ}ixt)Wlzu7``R>NRIu01$&oZk%Pr;X5G^%gp1V
z%o{J>_hudyMp2&04Jt}#PD?wd_FFP|k4vUhwu+fUhGFT4`+J`f<neR)Ne+1&&IrL*
z-2}}TfQ*W-@|FT<*jSZc#ZIO!RU3d8Mq4snZ30+u(4I88M2-$|^H}m`wAQwv9RChI
zSbov8GC#;RoYPwRA#n@)+xq&ao&K4J61r`)bBMo}W8`$)Fi{Z#kCGMDhCpBmVDz?0
z)0<nh_JQxT@6I8Q6fjB(b4SY)7@ddF4>1lA60jxkUKlI&Fl4?rR=Oz}Ng4S?MWZvb
z+)T?~`;NtDm1SK{4>PotkbaNU2oB8146Fq&=Uj^)W)Bt>j0S1#NDZKAKP|g!@WZMH
zFHSEyX`!$4lkS{xmM<EHn?Q;=|8qUcPWXsNp#F*{?GE&d4@N4PmEXX9z%>L+afWA-
zU(d$wk`VH;QLqHrUP!Zd=Zs|R)HwhakT%@|PnxY~>ABb23kjb?;oWH>ji=S%G<B@r
zRrz%gNkeUd??uzDs^^V}SCI2X>dih(WUt&csoq6y?=hcWc)~^6wiHWjuBG3&dEW~o
zxZmnLj4byED|$OBy7{u;O|!rDz*WRPMDwHg$%mF_lyhx;J_?rVzO4Od^AUV8CPM3m
z=0~l*HC^=vhu*OcPJh5`3~}u`u6_5h@1bFk7qd&D|3HsZ{}AIFy-G{9V1go<1c)o^
zZgqzrzDf0@lwmq(SXW(x(a{?pwIlAPev3K-y3=IBbaYdm<(e>^py1ARC8><X49i`V
zo0FjJgs=Pn=pTJ^MLC+*TpnjSU!DjvDA2g{$c1rUCx!>va=(&qN)teadAXpJX0$QB
zXsqvG?7Puy^SX|b^Ds&;y`u0AF}gl;$UR(PaFui|L~{msEd+(I1E3$o{u)Ij%n8K=
z82InP4wo`(f%i)NmYe9&&8T+-S=_ekPKIM5Z<prZIe^`>y*cDFz&KD@M~iTDJ=|Fe
zYDh1QX+;eBa|+zc|4lW6K)r%`Qu-hA0r`pa7XZtMB4IBC*c$4QM0X%dVM?jq@U${h
zknRM<d@@}+0EysIqmUZ!%jqSw%Zk{;4X;aVbi6zF-$EYqi$_oEMSM+oe@7##5f1q>
zo+Nh=>iL+H>Ru7g6hIe50RXN;huEOAidhWN7zB?3z`;<Z1BQYqOO%)@1MBFjR`1Dg
z!8CfW&=U*GKjHQu*uE#8aVdW^{d0ctg6`6KPYu$W^nYKsVSj6oUtOg{BmL=$bZS3I
zQK!m5g0T882MIM;r`-62JdYjsXIDanZTzXrYdMcAo^|!~{6@Cw`MrZsch};?DW%)*
zkBgEIztwsNz^ho0s^Xz1i18%!05yqMHJ`F3Y7O&43wtRq&_qi*8f-Mf-~C|J$r?>d
za?*b}^sJs@Ql7waEnx<@imcO?6$ng@h>vG@=mmvke0$d@vNhM}mRsnBtEA5KB-nqz
zgV!&MEqx0n#gh|}V1Fat-vvmQn<Y%5bZ>0#XzknMm-goc)#g8=$qW3Ry{;M?dl%C;
zbF8L)`rg!7(Am1g16>>9>1L3hI*?QRC{M9+xu=ZLY|&tAVl*c66p&V9>JR&Bo<`I~
zemT_Qw7#p}#Wr)n+ndg2UAEhTEou6Kp9G&bxUCmlZ(ga@R;V=#@iAr>(un*ceY6!!
zqa@<%z>k_BD7TK*u={2yeC6b_>Ui)d3m;DlwJM50I|WC3M{OSii~353$8v0^Pi1X~
z=g}&T2)DZ^9aFOP%~Lceg*z$OPEb9%Z<be*E{0!nKGUt&GAH7t50U_46qEFcvJ5j?
z3X@D4;$#l+mo^VwdpAB|6mslNX^z$DUD}lYpVZv{OL_*HfAT;o5>0y}+KWbZ0oRuo
zK<Oh1)eg5T-i%v|uN@x*mocf2Pg=#nzQ}F`&_IlFw{C{zjR%&}hRW&=%X0>dE$zNl
zFMfJVK$S|mx}RM|z*lMwfp|AK29ug^(bVRmj|DXV=qWim?nlHJlHrf%Ztq43(bnIn
zdeWslqW8YLH`{jlj`gWJPJ*LsZ3|CUdh|rkv<4B}oVO1DJ6yrPzy?|>3aHeV_jXGB
zpkXrqCv36YmM^8o^veh>;^nMBaNhv6MSDvwrwpq*0S*Hm$-JfbR~IIyqa!V|@8w|R
z#y-<KdBgUHAGg!343G6Z==AiHlae@&C$$D4DQcipil0v!!tJt&M{95sP?k6>j(o)0
zfv!YWuogcON?Uh&bk~~=mFouI1uUsqJICGD*iA(_9P{#Mw{>0Yg5RABhij`#9|Rxv
z3$o8s{VXB9TRs={%K!oSQW1=4q2f7HpXDx+wm3hn4w4X*37g0%Q8o<-(JMHk<{EcB
zeh9el^{0jq1KRAX#~BHwkAl6qHIEKf%Ra))O7ENM4hPE|pOGlT_7F#shXy_Z#aTWN
z%AOcca6+EAB#UEfI}iy1YCKh6z4|v)*-{&pIBv~ej-4hOGc)*nCvs;A$JfeYXHf`s
z#RzeJcu#DESx*YMMT9S`xLClgkTwtwb?%~^fERKPnr*!2<%w+6gZD<X2W2#YhDI&4
zCC2;Fu;$sg!x+uIo_$#EdZV6jpDAqaQ#?cpcZVWK(U^K;&$PR@`s1hfL4LA{?j^f^
z5?m$4k<c*eb6#vMV|+7eKD00$h8RY`y4O{AWv|Ar<YF)PzAg<(Jx!dCb%KQ-ZyED8
z|I*9+yeiMxbN5Rz<EGhLE`=^3J%-+=ZoAVcHNktvweU}y<|)#bh8bmNF}6)6M2zh_
z`|Xp-8$L;|ML+(;|FL5AkyQa}V>EM!iaL}qK7txc17aM^0oDP*0TAD-P}k^s$aJYq
zT+(AS|0hM?!NiAN&He?wxuWAD!*mam`pq8(#V1dS#V1!^m@K<s^&ulnL+#3wd?5Fx
zNemt;!G&<+^f}B&O4IQeauw2GK`1LZI`euMO9z>q($az(PCAz938Az!;>n;}KR<?{
zMa32yw{tZ;<9a@|Zte&4-9oQw&He@XWFsloRIfb*s8v*{IiI4-4B&h3&4h2Ni$yr2
zqy+0y!`<yww68-Z*6)2i_0nXUwxyk0$CQ#5VdB*EY7zbX#M*0vgPWwOAlwv(U=Hgg
zu8rbE$|}lf&|n|bghCrxh$&^FShdYCX$1#T(2=nRHP^?T3<q&D>O8lyk!l^?w6Kyu
zgTb%my7x#)H?p~Fd9SIiu+tCD>_vGATSC4k4tYZru}Mpz4f4t0o|G<3!z|LqFQK9#
zLaa5C<fO@+liOQ4>a<+G^wP;;@3IP1B=Kw}B}eH*`ZevipK`o&N^Hag#T8CZa$!oT
z-pPc<sYv8tx3$}VvwJOs98U&zoT9@UW;02E9Izz(t??81ZN05m-Qu0&VJSxZCJLJG
zu+(8arRk`0ubcFX+-RvM*2mUmIPBvsCng%~e(<-(1=7mhhAAd4Nsn(g->*MrcAFV3
zKKwm#JWZ_+UgfjqgYdCUZo9$Z!3ZQ$Vg8)<=B2{B29~dwa)GKL1iCULFwyu*j98#<
z7caq=Tc!%sx+t}UWQ;j0+`2g8)j?5)*`w|{f2Ms0^(5&Ssz{DF6$&lN;J)sJVu^~h
zr^~@YYMiB^rCbC2KYvuDPM(a0PrcQS`~}ZBmruOtRBIce52bC5L~OHY;vUMAn#WF2
z6JgPDvOH>v8PJ$*Ty5)Q0#ZAb4+6Ps>j9YZ)z1FmS?loZQr7Ib<bqP}%?Dl%_6JkW
z7L3?lzI;d{D(DbFu>+<Nk@ynKQEogGHjyHC6^eE1Er%#3_(qi6WMV8WYmi0SI@0S6
zY4Yudu}s1Zs}K{)q0dv9mI1y`(1euS-()K*>{WLY`g-E?fq!C`jJx}nTt%3DGmVs3
zr!U*5*-M#h*r=rC7)=m<@L>*?$nTrET5nlA9Ii+#@oFs??X#-P9W^@EnoyKGde_j<
z!2U*7B*QUl;@8hUC;3~p)qX|5TBEuLwb3>{(sx^N8w-;(d=<#mK@ElC>wenk-RoA9
zlP$NUY;D#za?`||kr?H%T5i{*OTwK~LBUqj#$zv)Y>QX*wNIah-Fxn^WNv59g%C;y
zTdm`ZEkKU|e;_qL?h<9l-1tFe-b}hqS}qa}ZttqnHt`WS0gl|M(hB%Swv$J?*VR2u
zbVc81TFQoJEpK~|7<kr})ji^$vGGN`8+aNj;8Ml#)U6~9r;Pv_qFk_G7y-~=BlO1>
znUDV_FPBZmS`D?+ty4Xrx?AD2l4UEW+yFt(0d23>o(H?D23%d_x~YMm^Ge4rXS`3f
zEtN8s^#^keM4_$5M_@aw`%iZ<iU?rQ+F(MfF~=+e8H0q0dVMtIdB)fBw(&-kBKvT?
zEVtd#hJF<0dCS!n_%^iW1|A`6y>z0-^H4X(#MMV`S`)ct^Q9|h`N_G$Jj{PrbqBun
z{&4NyY|X!tp@{kp*TO6TK{fvm*q6}jTEcI<%v<iX3J<`p5TYH<<`3I~i=xBMfT7gg
zRaC=~yR`}T^h-VmnXZ4#>1-)|IM~pVe&tH;aK^891CF*&rMz5Ad;^t$Ifzc9=2G6c
zxpF<zzmdAwLGylKBB&M|maV3LfxgNNGwW#>A}$zKTgnesMn)Fy4nvSfw80HM9ADaZ
z+=kkx&+2&G>>#t#&o>c1!#s@;&RT-)$cqw?D%)D<Bxy}t2;-W)`NT14TY^23YVB*<
z@7iPd+-W=JDu3AQw+?OSA1S6Yih^pg*P(=X8`{~foVv^dwVh?UH!ZIP&vt<Jp9fnD
zrm?*rBsGm~0AAp(Vy(u)q$CZ@u(8%4R+=>rM$Vyqy>I$Y2-<Ak=M^<a6oZA@!%(x9
zf-)@eWS0$j88gkhzRP9+Ioid^+M}42X#Hgi_r`PXe3ntW(>wrz8?h*8TjL-JD|E6N
zqiTPUw?sei4$OG}5LJI}%w8)$f#z3$hkXSt{5V_YxFa-jiREdFUWXl53bE*_#n#<&
z*JQo#G}Ma=|7$*^H8ZBxVPh_6+Yk}g50mcAl)E<C6Vt4D3oxS0RZy-I<Y!jt>v5p7
zK2)k>)iKn>HM2i6ex4jk)TN%RE`E@;r|*-AomWlgbn(8^-65^EiY~~ic+wL%JivoU
z34(8^BB^)h5Qo@`9jX-QP^1FAHBVI+WqJZ%hJND*YYf7CQSH<vETY++R#7ZYl!pnq
zt5i3q0lie?f_8Vm?b~w7hM3A*Q4ZF`9%m^D4*FqbC*ERY7Ze{fKvRaH#uDNdqy*lS
z2Mb1Aad)BR`GWAzMAmt(W+cb+h*3+BMmOaAWW0EZgIO+AEg#~d?3lOOng(@IoJ`BX
zE;oI$usl4~Y9RP+L-@JdjIhWbttU2i{@z)Y>8zWX@8ccRQ(ax55p}7Zpzw#QFr2jz
z+W~Nx@`-YJz}!{1bqFlp7du#>WIm$9+AZ_ZEMYGUV(VLRx7nq!ojWG8=|=sY^7*Fo
z(4H*wq=Ubz*LF??hDH((bZ-e^tYkhAdTFS~>RnK0i7*AHl!5Lhb#astGmUR*{(721
zgg?xRqgmUF0{cG3mU?;QkIveb7Wf6-21wVrf`Yeiy{Nsu&Xx_`C7&9t>1%G3XsWj&
zRpoKe9V7K^ADW3~nH8j(H*uF>B0wDZt?r2LemC6dK#{hY&}yAh3sPG5$|euh8F+_g
zaccU?KYlDX|AhA!Cl`d>yy|e|Ul-wj-iQDD|Fpn*cI&X_F|S{~jQK<G<)av{Uw+ll
z_-(`74~M1g3(6l;VMuvLtk!})cgyg+qWLQpt&Q0||NEG)*T%kBJ5889H18jFh||}9
z-Vt0}|6(Gm$SD2N)%{I{8zl1%5;XK$bTkh3cs|O@=omS+``o#jpT8_zz2VkXjfML+
zNOTWwnpX;-nGJ_tZr4xPZ1%mKezMWtC5sj$9TI5lTivp4*9Xd``Q-s&M(MYD-dp>5
z4K7~pS+nJkX4@Ke+ck|+$fn)(>py?|^hE~!>A<_apXdWwb=AfGUw_?pa!mjsaNcjU
z&?S=@eazcyFWg$a{Ks&eKdzn`ie~4-2xm;JUi1O36mw{|MI)yt7pY(Hs>sh7$=O@d
zq~=MiATr-$6>el|P#5Xn#9Ia=J1`>Pq~8b;8#9Icmvotqaf_*iNZQG9pBK={q3FCF
zF|f0D%6t?UR?ADi>Ik-6b64vwHOzE5ljDa0{eN1;h7KI>x;G^Gwn05ni$yFqc@jo;
zLq8<2^e+Bbo0eol-zaX3+AiN)P|AGd+F4?qMRKoqH{W0FdvMaXq3gnp6k=j1N|gOG
zBa~7kSyU9dd(X>39Mc-p0dbgiQe{9(Dpg3)#G!8!t1#VwZ6?HWK(+Q^BL$jp6n^$%
z5!n)_4binuyk>cl6H7|Q>yH)e3H9Ch`9uYDEpLbAy%__^4t@^lOQaFl1~Nt*4?Q&5
zyR9GWO0-dJSz^q22j8JoLNjGKD@dM&+rU2V3y5Zv+OUa%gM`-(#xlwZexZ0QycgUb
zX(zi%ET<eT_8W!XO)T@p?u8<YuSQlV^&!K31L%mxv|cxfc_Z%zr7}_ImX-wZGinv)
zCcRu*h;Q=H809YNfk#Z7bp*fiouwlkSe=k-Dxx!N7{nm^vmZGHZ{Pg3;6|n8l!0B%
zWjBVIMidQcgnuF7B1;gk;L`+WsaJn%XgO))dr-r;`mORK{X>N7Fy1_c@1V;pvJn2D
zf!s6BVe5US|F>vjGHZW+s;L_h&_sW0`0=_g^eEh3(hbB1IWeos-`8oVsU5FA9wVBR
z3X*#JM&{orAP|-o?rxmF#`NKu@7uLxv{d_#ebW1Z@2fM63x}Sjwr@>1H1h0V%hvR?
zpgvE^S4$TGSmHi`--bCDD~>-y&Ew8t50w_`j?2jMKT*Y9)<p*T>8134(Dml=P_BRc
zup*PhBqGFADyPJp%5t&|sU%5StTA;Y%QWV6vP_H_kv+5=oH&fKWf_w)6k`TssU*9}
zkXe*04Ku~Kj~R2GtMBi5y`JZf=lMtd(Q+@>eO;f=`}1Bt)bTEg9qQ8}%SBlw0z_)Q
zW%Et`zqq@Dvw>bi#lt)6@sx#pK}gZ`AMkb%7D<)q1hc?)c@Cb5uKRjVu0+@_hQ$+%
zrMsXP=yc9HsH*`jdI+pfO;=K7Mm25~bE~LCy34arU@-fl5imcXtCqgsG5LS3X3-dN
zrl#K>x1wU`plXDr6Fc)jh)AuiAJEGVTcgq|2I}9^-AbXGaxDn#YUtFxFYYWC+8h(B
zS4?qL!>lElLC<Kt4UcQ)47ZEEEK~+*>9AwevuzhE#^XumXpuh-I;fL^;?<D1F;qVR
z9Mg*;I}A=SILq+hb5Q{#5VVt0<@?3P9gk(Ex2ODp9sa6%brlqRvi}<_(bfjEXD5fk
zmtAG!7+(pcwg)r?8?sYue_03l9>k?8`Fz@P(oy^Sea9KckAH4lk<F}!WeR?OXw)^I
z`DV@|`Q*t<@kTon4qNZ|@xVdb{-^tyy%z~m19-oFF&t1fc!j8jeH2g(t*y}*it<rT
zbm9%!ZDcz_1Jhd#Aw6Ed9xCt$C6=uYARAAbzZhC9zJ|5xaOESm&)<Rq&ow2lfHV*n
z^_*xRRbo6=o6d__x7G$|#$YFX&R)}p3Bf^n7jzp4dCbx}nea0B4)9pATonVCX#r)V
z7Iv7VN;&A>t|5BocK(o9Nd~@@yF}au7l8|sIALqc+@@Y&TeRO0p@R~obrUt)Qv72h
zNjrdRss$(jQ;2QkB`lK$vfb^$Eb7O2G5l)=&t0a|G|#V)X-7|G%e17O2*oQc5J`F*
zABIi@6ft!1+(Xnof`ush?0{T5#Bj@qtw~LoUS@4toEUjJkyjCKf!4_M-z8$EO&4^5
z(H|`Fk<UORbF%`;i7DP5{Z02jg_Gk_e-f{R#|4oDAOn3H3X9`JUtR-!B?gg2rWwBE
z8=%_sD!P~kT<A4H=P7p*6UESfZaLZ%o?W6AFgH0k<x8&v*yDDZ-IY+zMeEwqy!@ov
zj1u1or!rp!Le~vk{GPE-@kjTJzf(|rZI1@2iv{2{{Q~N6Iz*DIIEfRdz#VtE-(6kl
zM1m)5NZ8M(m~;lV=4pF?KsIKoy`j6n&AF|Knqq3v>v~2s`MM;4tToSZPh0Xo{lle2
z1%M7Ir`e!gyc@N`vOlOGFR(oUJ^{cCk`NK>a2Zl+EFZ~dreP!E&Q7s7?x~OXxMW*Y
z<@|jg_kE8l<{5j3WH<p>k?@d}#`z5m6}8@wUq@rU+g~ra<9L!!{wH(rKEMzJ__V<S
zpgysm0Nq)5%l&yhP~#&JAW_f0xgx}JC9TwZPHrhSED>POvt1hLAfVyNpb$rM;n!t-
zUzN<+Tud{=nO#>q68}eL5I)^sXy&1{^?m>8s^ZAK=?V%9E>q+C;&-R(UjO}h=bjp6
zL7ma5Hb;fJP21yD6o2bFwd3m-g$Lgj1n0l|PMplh{2)4&e)x~W@8dT=RCqgg^TP>+
z!@unN=fUQ~?=J@3^`PHX?7#oy`H?yM$6rGfKi4;>f$i|7-sYgs3CBGiD)byyIDAUc
z_@TqsbOrefCNGUF`r{|k{?k#WtdiJ+HYBbmoD+8y@~MUxK(39RLL?fqd^3g1DVbjj
z&WnF)6!p98_lkz~;-)ie{7O06bx*@|`saPaDQ4ujk`T824!w$W2m9CHJp&N8ZI}r%
z*g=@X)Z(`_DGGSW=$U65fEct$0X5NzVFa<UytN~3liNk^9fgYLMHN}J9&g)iQ-#q!
zqqaV<<Vd@d>~>EujkrE*86*5cPPNF$^l~3C7B!|ipi-Vu7L1ixN<$ld3)FJo346Zx
z(({}1P;g<fswwUL0X@uZ!TG4<T%AnUEvL@;T-@qltovb|ZQ!)R?uOToU7c{YRqBHS
z$G-n^W!-_()d~(fr;fJ4{*e`{n6`8%=oaU1>E0BSHnrLLoYjHP*@4U5`thh&2teeM
z8C;bDKLvDMUn{VyktD4Z+8+wDM*%7)upm{&0^`{0s10F;a4{+Yl$0blQTCn4agdM*
z{cs$uCu>dMfx{bx?h~|qIHI5>W^l!SV8Ofv<&((LQ-F1YL%|OL{g%N4ek#$DOM|GO
zzIc?P{a(D48=DaK6s$SqJ^NqZ@?%Zr^-&v|0-#`L;B?4iYC=V-^M%2enqQIqN0xh}
z8|&jxF3BwSL5mFX7W*>(b9g`E<5#(Q=URbW8^o%tXK2eXz=aSs0rJYOf-47@g@w?G
zZ$Z6dL0&f}f^^(c+Bs&l5`X;5Ztyh~=Xv$lQ>;8j>c@NS9=VR1;g+PXYo|YOCgnWE
z??8+SJWMwH&rM~+F%ZR@0!)4Oi`)eW7E>ATBq&Ab%KQbmj6{d}pA?L=C4>r|)n>T8
zpMC^zemaP|2TS^ubEZJ&J*T%UuZUVr8Z9wQ!c~mVN=CiDhZQ60&`MyhU*wK8An!8a
z6o#d|2T`xq*jbHKosA)71A^Xp4g~jsu#o~gYmLCTO6c%Bz#z@hTgO9Un*D04F(nw!
zMlZR6G%!RH!`LV9H8dIlEEMpM(n+GrWH6Y#0FXr|KCF$Lz_5ZaqIrH^Dh-)t4cHfQ
zlfDusuq3-0SHnyAnWz&3^}xbGZ#t<Ax^Sw0p?0x$IrdZV`4Rew>bd?gRynZjX&>~5
zIu!qX<!91;DWd*$#1&m1?3bV`w>Nn2Qqt&8OdQuO-dLLM?RRb9ttQXlg^|&fB^&Sk
zZQpKw_^nHwr;___dBn%m?6J49r{C?<FCN@~cWjFzY-eJ^QQckz$31@@@7(L0*>(8g
z{*$^2_o@|6Ix1cJbEB=;VKabFHYuD_*{R^N=VxOeQc!&8G6P#KRz+W70-mA?Q>F}d
z;mm&63^0t0maJsURVdOMGT;bKBdzNd!`t&OrKH-z!JF9Z<6m1SaEFf3gR$BL)Ucwh
z`P1I!)8c@;b*!pc-|O|FQ0sAyYw_fq-j?CK4r>RP#OMF#K+Bd8z-|D2k{toRyeCA0
zpGEj_US!MHJE#!urpq!zF_Q&X4Ljc}08riTp@_aDU#kQfeAC=&Lq$-@98+Vd0GEJ*
z<7_=FYZ?M{#b;Iw55F9|VY@y5Ls~5VK78hu+(>;b5j8VT!hiuRK_8Gf8yyhsNMVlD
z6@zH761s_pB*knxvK()60U8sl`ikicjX`8B%@3~bho=8A%dw52eD-AP)kv%(TS|4B
zs(oe$=DaFz#VO~Nwb{l1ujltm>wcOsC>evxXW@Ye#zO2gbpx1&Y?~)(61NaYB5oqZ
z*30-##q$(_bCS$m)P>XW#~XWymh>cbrBI+(f8<8lEddtUX>DHy=9c;k=BCju?4ACK
z=R}L?t*A26R#KaQTo=hqiJX<~`dPo}F*9}!M7q$CW%vgSEhw7RL{2TKD+G-}fLQtQ
z)S_0HuXaXkr75kUvL;lnC*CG`9C&c0AzzzvQz=SE0nw_{k*z<E)+X*HI6{xBKaP!K
zxEge<pbvqu)Z3$jDfgKxGGkNej?czJ@B3fo2Arty3kW;Ux}Fyuou?9BcW~vxJH23q
zsepIiEzBf&zoZ|2FFIXSGF<1NuwwjuI^G0ylUqBLetdS?{Bm2{RW01UiKP!CH-cfh
zvLhe*VQ)htx8~(?1m@c}d`>>@QKam1f8C?jujCko8=gP<n%^XcHcUn5=)Y}@idx`M
z?(wGV{<!&%L9yyy%6k(A*uBpP)%F}d*_`e8I_Kmm*geVAcANN}V2K;2bEbn#)#%@!
z*|?riee)z<sq#S0I)%i0UzH4ReUIPMu(IV!uTp>Vn+pfs4ZlTpeYrek^qcHv7jI+8
z|G{KHUhkn9#TDSlSS7Mbq{o513%^!mzNn86J|XrbKMg@`lLeNJVK{M&iqHzEx*e@f
zTf?zHY*k~E%kJz;{T3O1{uf;6s?#6mKuB?}aEGWA$YLr1Fa0b+^auM6P>p~+QAZk#
zN4Ey(4%qJEw^0ZN;;l18!y(~P%K<wa@R?+`BlV!h3+Y`0Mvdw79fk+Rz~M~IO>ja-
zuc#vW&x_{oe^C_wlnMQ!C_M-;s-r{%ULOr++0x$$j%?e#{I$R?P`udhARKrhGER>)
zH5**<6U8wzBeM}>&~tpaT(IAGpj^BmE4yNLwX8R>?N(%k(?0T^@^^D{Dy=A{U7#~C
znk${lS7w&Ya;B4NL)lFyX;0_1EjdMxs%Ncp>KkIR@~T1`>)e8$g>sVq8S)Jn^JkgT
zM(SU**}7|G-CHL|G8@=G1tq9)E6Ho{Fe5N<b-Ys>xqh*`PX+Q~aW3y3KhqC1T-<bq
z$)LHN{@KRMHQIUskApFR!5e=|pWN6Vj8!0X{^X#_bh~*7rR;bzt*;XforusB>oSng
ztyZ+Cpy6?t+&H_<h1ZMdK#9`ZYU-~`xQ==LkE8+fXA-=HIE#%~v)ZYAjEONA$jG1y
zkOq&|VeEi@5@_HXfxiV4PRH_v&W_^XMA?OMzpz#HmeK%+_E@`P?LtFcuRlxsPp|L8
z+|sg&dclfRI$R8clKTN?X%=Aq%0)l%MID)@GH%C=eEWboR~P?ds-h!<qzgUmJKK=r
zFScvETVD5E)KW{Ue5%?kMZ*D7bl2Lh=6k&!emGK@mSxOnzTJxQMDc2wa9cI8kz6H1
zdV7{(FDgnD%p=r@Z%OsW9VoaTh7;NFG#`;gL=g6XP;*;NLGPYEeOhu0pR5rYrB|Et
zY~0)nn6+WIZV$@e4|HTj{|7FDOTY=4U=1do2o@UJyZFuIDi6L9BDG11OxA!Bm~c{T
zYpwhkTS00E?t_NFR<SS5Hb@{06;8QWptj&M{1~qo!!(=j{ORi<Pqv!UTIgF8h&WKf
zjTiz~UeM_Ca)<}SUCn$qn5Q_8MFsu#rgE_CaP>WYnWT0=iPM?Q*GYTiFj90RwtO5)
zblD$N!x?{{%lXSw;ugL6h4+{XFs#h{`A~&qsXf6Cj54zCa8&>a$Xt|{B2(qzHbF3!
zb#w~o1metwP6BM&scd|r$DlCjFAs-@{{9n}(E$_NFd6gGf@<m8VEXGKFwXNN@fH_T
z4A(aU8R#`?x|JbZv_#e@UMsDU@93UNEb~RC!{cc<1!%FuO1>q}$2)hG1P9|XPiuP2
z<sUAgm}h&~o)4TXzRXW3kS-gliqLl%JHUjCxK5;#yo7^6CT*)`WIk6Fk7kVm(qdZi
zOw6VFsQjor;5hrB6Nd>7#cn;J<*_?n$M~SnGezhj_*8pr)p+wJq>p|A3vzOVAKDO~
zumb2Uv_2ibSxNu=YIiaaLWz1Vh~z1iVW%=~#a4tgrKCoVw;bm1Kf4~K#W@y_NggXI
zkTyrGlOSZ8taiigP@<G1X9cVmHza{v+O{IAwdbHN#%;tmv#fhx1k3;}KzAC^0&jAX
zy=3b7;c{m*fGsZxC&_Wxonv;Cjyn5GnF^$rdvkJ%3WGx{W=BB+dt6ezwx^}#xf7V+
zpkT~aM{H;)cD=J&3yrQ(`m5unJ?A>oc7!~us$VC=k=lIZ8)W)o6j0rQW3cAAScipB
z!bBl-WT@gWlGe9K6g;#s3ax>ZAq6CZ(A5p>d%}Hpgt8N6k1J-Z%?cI69!!J})i>*_
zIC1<=02NdaaHx$Sek6f8HRXa_9gOS}h%?sN?dWxrA!se;^|)J8sE#=8DOP?&zI&$J
z1n=C=Y)D#6A;by%EuL7$G^Rz2bCbAms*Xo<vWuCS%(!&o)7sOJ!U;vG4p8v}cZ|eB
zx+;&mp48@NZw4m!n?s6pQaXtWfI3ax>hvUZboGWc`ySoBxF=fRt~saSx98>rCT4jq
zuGxFofH?4sYung}GaVi}%|rB+DQE%F<1&B)l<z|NZIi}p40|gmuLErFku4<t;x~5X
zJOehe>}EeH0WDR`Xth|eji@&qiB%RvL=Q#k_rd2@%QNl1G`t;m8%CPiwyC{;2SSIs
zqrnpNo%o3M^PBuQIo=z3J2-lCv}I#d<Dq&hZMNkP6DK>msJYYpaJBQn@PRjF+mpe}
z69rPB?{HysJ8*Pe2M=!Y(+pFMpkLunfUT8)z^WA<U9!3@HIE;iu$-L*;#R|xs_@aR
z3;mDypX{YhqLdVKzq><(G{mXFCquTZpuHX7h5VjBnO1_&J2^r>DzGyK)Mq>DY~HF_
z^Ak*zc2jL8C4@t%X|M)ILumAXd*Cy`!u;#U824j<qXp$l&EWXNi9Ls{fsP)`ew5!3
zc7j1Tl>@w(_Ev`2D~h@vKLcv8rxDC#gt~<)_Q1yg$e1r&?7(rh+Hg1G{}hgZE=c`5
z3WoQzsWu7SW~S*lr2V^KY<)Z_VDgYCI>~+){z3<FgP5HXK>}3E&Q;42K35AL*rBbx
zTAoG?iJ{f!#^mNyg|6J}!9@q%#vHugxB1z-H*2Y$#qiG<xtcm)wCE%6kQ#zJs?jif
z6e86~l1=8f;|C(Dodh8S#d18VeRY|fNLkKHqYCNP`JcXVYB(1)J42(NnNmh3F7yUn
zlkgBD)NVuyQ3;}nVg+6-QW`@8jQ_J_Fafx23_vI7dj*+?+1~xj1u6&k{pA>Y_4bbE
zZ~7-rsC_Es?d{AFw$OzC^!tyqY(Z{yw@g>a!@+#zZK!%gM>T2lOdY{t6o4>HZ3y8h
zei$m5>hJ=CYi1kuj_*o}?8wcke@Pguj>{<BAD|6=?pre=7^BqMGuK_5et|6k{>uhE
za0oMY%iGWm#>s?eexXh$1A%&p>+-)PH9`*wmrXW|0@0XSY)8?Kk-)~+S;w<I`st2<
zPxc|__I96dktX_n&9{y6wPF-xQQ!l*K;OWl!oe|ca0#~~q-a}zJyn-*3}T5Lps$^l
zzStVQm2`GHaVObX)M33)^#F`E##x*jjoSGZlnx56yzI*l-xFGS?CjrQvuxS66@GU-
z1B_sQ1w;Nd8v*>TIefbh-cNEKl8O<mbC^|Z!_y{MHW8pf;^=glra)*=aq`hww#-7H
zX4!XsaM|Q!`n1aLAsMv#l`Zeqi4ijWy*$7<@se)@UX@TYiwLgJU5ns8%CN>~03_C2
zXw4b-78f-Z6Z^T^1o)FV`(4b;4Ij$vAMlZCAw<LwalojosG!1WLz8op=U<8+nLHjz
z5pUB4^2HX%*H3jabO#8|H+k7$@@XZC>!MbSbKUvb+e3>E44BWux6a&h*MD1%@ob8s
zR?UjJ9CI(kmEpy283mZ0)QR<dvMs8uU?%P^+v+N@DQLIfK45EQl}XqTJ4M#%Edl-Q
z5qv?HH8a)14<w0lK0n|6wsJl?*V;2L(DF&t;6#CeW&8Wz8eTM}?}P&wB(Z=2Y}`7@
zB4;wkwaaj?s62@RRrAAv9c>3%oqpok>?qs1FJYOwh1kzjp~GwE3=M`2?1#$TYVgh-
zO<z-%cj0z-$5w=GW!=>OmLvd^>x1up#t`QNAB_NIQ8bJC@q*--h<V5M$WzFfRY&|l
zf-Of3)T`NZ-G;iV1?cr5Ana7Vd{pvw2aZIUU#%^xnQIK!ixr+;o%{Y}@^)#If;<Mr
z6Oq^B4}X<xUMrIC1Bl1*Jb`wa)E_uG<$K-Zx;NSz)ro@BfsJUC7?x^#NV)n;25rE?
zAJ+~%Z^M^<nE18GGlTv#^6>z`b|n(XJVA!aBfc|>o6Ow|yb%6VSO>w{Cbtem;8Y>!
z_SK-;>?a}lH?(ga9{2v})4k)+zYpJ<_P*~hU&(tk5#ZlrH}T^Gpg`-$3<gBwt$Hc#
zfGH|4{hCO(L1kZGE8#;})IGn`^@e+1i<Ci!AAPw=6gm35PIaEF-taQKsnq&X$9G>}
z^xMeDP^}~A06GuBwz><7dR&Tpn`rTlOoP8>)J{|vWo1?XXHY}k{)47Vy+8Rr8QwJ!
zy(X?h!mTzK8-4v#zb8y?^f>=p|GFYK1=3Cc_S{0YEhaJct<ga0`pW8m3h@MF6`J6?
z_LPQBMrb0#BMJg<Pf=4iz-DHwX|lWBe&6fkF3bK~-@)~u7y7QQl?GUWSh-?{&DJlS
z3Z$#nmYF5cE$2bH9bahT)*qn;a|0l)9sFb+ZEz`0-+9RN_ZLGE6q7SA(p61u+=gn3
zlLx!H1~+1{rdNN`j|4yIM|Y@@Es6j2P6Rv?X!}VWZt(U1#Gq}Y7~V?KHRl>YR5##i
zL+jh_10gO#fjIs~nKKEe=T?IPNUhMf=kzPa;R%knzv}icQiGP7EefRV!~b(f1bDp&
z=N?bj5t{&?NU1LVf&i9OkJ7~lEmQB=?|$SUHY~(e&1zzZ8`p~L&G6&xzJHDCgzl|p
z>%lSzHcy~Lx5HiY>Sbk|%h-K80bl!Ch@uP>LA+@s_+VQ}A}{wW2~kz_A%l-`*T8%6
z(V3Aw{;KYcLs%MM$Wz;VqpAfsjY&uB4iDEF%xdXSm~YGc{(QOo_M%yU-{Z0et*G@g
z|F5w<stFAp@oJq^Zyp5u6*`p-4*PJz?I&~O4Ys>V@QgV7N%WS`fbC+n><&9G|Ni<l
zw<#;jnCo?wA$ofk$}mc42A@~m5<k>puYO#&RtIt047WfzeBkMz*e%x^AO!Nr+h;f_
zDTE7roJOc*wKj!16I0d<62!oi`BOI-Fqe(cvv)jrlk)7^fjKIOX<dt`%JcfA_(188
z1J7o*UAv+nQTQG7#PB67*c=?`pz8byQFf71M~S)vSU@a6ab9*2w*t>EZE`qc*9ZX#
zFmUw7NOyIJ_~X*Y@aaKwtZS#?ZszmnhgI=r%NesB*L@y?-WVg_6bViy!ZA=>M9asm
z;aLQ*BfLCGTgxLJg^Jj2?0RY3$-(gsz!b#@(3+6n<%aa>quRj8RlaL5;#05-BO|CY
z_el`$rc&x`zJja_T%Z>N0U=l*k^rX!O*x8+?v&zt0QKQNg$x~gJF#1GUMLPkOT6Wy
zcgz<dMDL(P&r_WX6|j`05JuZm&cu5O=h~3~{oj6nxGHgJML98fF8~=p<!3W>OL}Vz
zztV1x5XUv%1!XY^!qBiq8Zyg$=g^`oXt9-{Acm*f?h**Mx~5LL9qBMcj0kr%57BI_
zlIM_IzsGu`)6<|QezO&{Qy>z91nuO;%XD~XXb<<>HG)1LtIATFLM7$e+lp`G?<>Go
z^ayZz_=IVGB$!FO81H%*1`^b^<z&*j%J4rf(+ZO^|9*fyNV$@#_>}}5Wr1Ul{<Cb3
zTPvYs1f-2KdS5dbn)7Hy*$LoS(Ue<&y+whHe8os12#acE>|%<hOJ~CC-&z1o>Lb5?
zi;ImpR~bW#`8I!l3BeXAz`ytZ59<3x5d<p(C}V*N?c)kN1t`cEExaRYmQ;(rCPq+G
z)p*ftb4qO6D&<Sp-xgdIsQCn4#7+CQ)a(1{y7kFd5pl=9Ecu^}H8}gB@7$?9%|l46
z?2WhLDgXde-^&e10||IGKxOqE0ix#Qfava%X~85NVk_al(krqXYhcXCk27lXWp;kT
zI20jOW^PS<`WT`I=6*VSY6@}dP|@nQe>quYuq0cfr<u458orK|n3M8Vw)+qzeAjcD
z0wjpHk^wn^7Je!KMD_5fYV&fW_+;I|`=N&VB1ZNzC^2AUU$RPgS<2agr2<UL$yIO4
zm7?iWLdutj1l{Xbj55a@>}sbZ4r>(Co%wU~692WQ6bj|(LxDgr#UppTy3&}S6}m4!
zv{cmIt>tl&vghHccd6;`JAT<0k2=QW-2+>amp_<CA;q@@(HTs>M<`bpI3rvW)n@V+
zci^vq-0zL}s=*)aN9L_l?$Xekp`7})=rgoaxX9j<YPZ~n=_q1TW=@BDXk^9Zu_s`b
zmImCyY(XGi$y_ym@uP9a9~fad*DS@JCYGLQ9^j9v)s&pcyF{ylE(OKjD({ZD5<7En
z(KNiA<`bAOt?RSL0WM&7ut_>h3_1&~Nr)|h;C|x1pC1YFH}Tg_pdJq7N8cqlQq6rU
z?h#z#1mvymB~YxZf2=pH{|3!2>|(sT-RuimY)CDx{Ql!Ig_pJRcieiQN;e0rGvZz_
z0k8w76vrTGw3341EP`ogs_)s%lG)sIw9bW+s<1q{L1W#}H`AS&(@pf|BK=srM``Zy
z6W5F3A4$+|Hn3;B2sVYY_~<De7A2Nv(b%<^g4kw3Inwp~L@CrsR}lymyExd)^1FkU
z)aWO`ig=iQH1>&~Fz&aR(fp)_3MH>YbAOJzSyU+y-w@ovzVKGLTC~!o7u=5inEn-v
zBDO}VZIbk~G4_brU9LE7$obglLg05S%^xIZAmeRKsxYITyC!+Fo<&9j0pBlX=?t3+
zLJb^H$#bBVSp{2R0t!^D9V;l&8S+@8@7iM-Mha+60osY(z7?4=crDnnHsKZhhW3b$
zrP+FvLk}WRoAK>^KB<$wp+9D#^$6Csx%XR^Y2Ttt$3Mg)e25b$QIr<Bp8Ks#+#`vE
z{H2H<5&JSUD*|H%6$`2!o-L?1v>vL*DG{9dEs!b@$IXhxu}YvD*fNaBtbE#9W6I(}
zWbX4p+Wx1*wM(BoZE)YD@$k>htq3LgVVQU1aIIWhwg)N{A7G!%pX7SK7Qy1_m!|aN
z4hV#M9}cRW#;MQx{uOn^-+A+(UuVRC?OQGCmY~dc@qXg3t*9)fs(A)(3y5hj6$kS_
z+__!pRN{*v+CsOc5F0~vd|NsxUxbVtY$ZPN<WNn;a0QrzFYxQqqnjR%c75mX4xyAs
zD7deaZGgUtFPv^-17_WJs7{P<svF)jh>Rq!lUV~aYN^`JQy=5^Hll|DD8Tk5p}1!!
zf@6as_x|;A?>oN$-wy)^FLW%dgJm;dvQX$kaK#)#3qa!@5cX>I<(}X&G+x?jcu*8s
zRCarF0AVygt}nGd(^9|Z?<c!MuQc8c%0f<BEA0Y`6V}>YCU5>R;IJ`4>TboiDY3ic
z7%r`;uXS-fAp8ZV$U=G9>3=}#EH9Dqoh9Ir$=GboOrepL@$asQEoxIL#yOa#%<?)z
za&^G5NPYh!r*)7)TVTB?krx{JP4ENckxPH=l$t^Mk|6g4xel9t6)e<l`EIdu$6n|T
zh0Efr&ikWTAcE#8pkMOlO?8M=%?V62=P%!$37@tNIXNu_y>^^<lAWRY+CQieQfmH&
zigY;wJi)#xvMTp&<hJZIV6@fTZMd%=8C3T=_k+a5E$~D?HDW%^)Qq1$I=kz2RO9P(
z@4YGqtbc(W0bA}}<~E|%<=F<37DE>R_L%4z*3Da`z5wxUD>4#AeyGNVh=F@>d7Hr0
z$}M+QKlFOKO&T`$V$$c#Jwd^a4u~=EC$k}258M5sidI7%h$7v38KMdhDTG7iA;kS+
z<Q>LgKfHT;{=$<ohl5_124of#yke(yQJUIvjrNZ|kZPUcDYY1%a8?^1Pn}Wxj+U!}
zq0NS`qfA~^5gf7+HM39(HH?k2qmcj9KBxe1LEX;G2E8cU@I=|Xp}`QHa=z!dsOV7{
z^n3TQQ7T<%BQ;z(&m3Mj&zp<N9Sy}stXo?r11x~VC!`Sa7J&R&HUgt!BT@)8)w-*U
zU$}4nlDL~?>eTfI!Co9tEUC-rjct=GiZGpUTydD!de=hxG5QHg0sflz*^1jQ`>w#h
zmdI7XU}nP=r~>>n0G_H`W&D)HOYHuwq?oX6K;|J((`jRBd|{h0cFpHEb{ws*HudtS
zzZ#)i@ZOY&SiX3xGxY<eLYXyM*pE5fTkQ|a;`A&2D=mg!f;7dk9i*3w-S9+`q0At(
z3=K8&vOCc!WF5LmU~SvYTTcU^Y(6!ko}@bymETJ%8_5~z%DGuN)9`$53-}~1yN3J#
zDMVWjpN>axYXN!$vytJM;4A}lwghwesBcEVY=adRh)<aJt_>`5rbqW@E<D-=!Tv<M
zHJJt1-MaOM@93$tqRV;UPLYy-!QW!b{)AqGTXh63XCdxVOGgo^gIu@9Oj_zw0=cjM
zOztLkJoGs-i6{GJ2=;znCEcYdHH&p*dwuV6b~G3w26fy9YU?p2%2jhe{Nst^fQ50L
zq|Tgav&DeftlAUOk0+?UAI0$YY*7D;0>}XA-G<^(5F3Eap0!mQc>{DCFyj_gk?q_R
z@<y7$g^ME(7x@<QLa~#J*s@T-+%{hL8y8}G)<eBwWq+HFrtpliSzpullRMP-E$2<O
z#gX^npGeTXK0bSGyKyE-ybBOlBh1&y{wB4#F>xpjQrjtjfh?w?X#1GFOeDXTnJP4Q
z-wa)7%g3&DQO(kLeJUKw0)9^%&bQE%?JHL0Xj;Ck^bO^>-Cg<f@Yrnb^W7#21VsnE
zRrNa{oW*xgX2p-w@e&)S(wfKPtWE%j0?QxXqqMk_3y#}r$z`)K1S=i(O5@=d-8f9B
z(#u{Wr7X+eHz>q*%MSGkqXA!rDs=`^=Io#5>+f3>;y^X46bIhL(|Mql$8nrNOcYkG
z^HJt6ssP|c7+Otsi?74JCStta_sFuc9G~sV5V2D;v+9D%xg30=(~#b`Fg?S{4by+I
z8|um^@9+D!u3I}aNot!8*kGCG<i2)C=AAdqxp{4cT(6yJ`qcmLf^WT%S_qY^`L00)
zSBrkTp6-=;xck6SuXFIu|D_vgS5H-ZYn1*WA4TlA!MvUgg$P|GLUBquaSuo}a22%?
zPE_E#hPs?P0aqapb6Yfuv9sxFJQQNR7erZlTVxtv=(iY~?my3&m-=@3@55v~htC9e
zF+~wT>jVdYThkI+<V@nkvd+&G>9T2fne&uCrpr^V){k%-tfgxDif_z|kgg$wBW32h
zr2&s4?SAVnbBqwI_O0hDp#E8e_BsQ7a~DE%b}^Goqjth~5a0uh!!z6lSh@guF!c$}
zA{vqT@`@(}U`vR&2lAjJ`GxN1o{N)8?YEl(^HpuOwW*vOOKc7KeuA>=#cRKQI0vam
zYWtG!#=c8;!2%pkqB9bK+i^Lh>7Kpjh|Eje4jfrW9}84WgWP}wz<<D;nat5HsSb_G
z!)mSMN9MjPn+Q0TspKW8k^iYc1hld?eH4$*0n_nru&3zB5g=oCTXq*Wg{wojLe|{n
zrrC8E59=&46wiCla`s9hT|en}=6hD~V}+XT@%!>4GTcsgpKtI>8VRS=mNmpHF0%wH
zGDCAfbqSmz!-1wab%9_a*6|Zfmy|-T9gL&UTdaVqGUHqRL}v`>+UTImQf%iGy~YMA
zy}ayP?h9o&TY2qQ`jhLVc*<Mx$4mJ}KyunZhQK^uNe;P)6D83i@;Cn}E{EH0xDx^e
ztsVdtl3Y=#H)L0Ni(7%cbig)|Jz#dJXyv05ZEuH0@+p8$rISLcdr;rId%Evpiq~Ou
z*r5Ox?#jB=Sn1E1&s%^P!@*`11kWl`1Z{hQA0ZOj&ef2ut0kDfhAPDAE1fF=ilU+d
z@uo34qUzI}cCU!s=FwMqIkc&FBrl~TuOoL02>P6ur5p(8q6Yr4PK1+b=*U&c;u47o
za0PRg{yGCpQ9IBacKhTeaUnaS9=?UJ{k3>+ZX@3UO1xP)r&p9WHM8`e!g`tGi&y^6
z7lzEjZB1@#`6|+AwbamqdKo^df5-oiX_QTB>m~yL^*@D=+$mgJhC8$`uM0lb1<#t?
zEY@jry9I(<RLR<NhT8_g!#81Z!2HEOsMN<*)W?@?h5F8mMy9J_$@^ZjC&%6B@T$Jj
zd5w>>d&P*KWuzX8*TUUF0ve+!hqas~CIlD&op8=eVDm#iA*dH+XEIbT<BPhcoCoE*
zK$ItGYor0ZJ2a37Pqp;&eFu>{_13x`#NjOOA{=9FbR*tQ4}Bi4ZM9RBZ|Vle!3No_
zwWq-4Fgp$LvXd>-d^837)>$IE(L6v`6Ts7$dbP3(x1XA&?knhMjDaU#X@W33{R>m3
zr`_R>7Iz!1TfUtOwe<b`)tMeLigAFOfR_~xu6iI482sJ02V5VL2I<;shRJ1u0d3gU
zg72;i2s!r*mC~hc+4$9>99%6pdJ+j&2BG8+U~q9U`N#RXVeAbgcEg?QGxddLdgs(Z
zEFM@sFf-7=wmC7cp>&9E?G@JYoZEU~f+!kKnw>hiUySYuk?#z<6=JU}&Q2ljngKR=
zrV-3dkR{i7*v!_S@2~FWesMU9raAL`a<+j((6M^^jH5uZl*0f<Xisn(a8I+>C%_@5
z7{;o;ZT}CTi73h}#1-jF9?yJB-6O9=`ooR`x8dBkHx>KB!fm1R`26D@yTcXUK#8JT
zg2i_9w`|Clxk<i<07{m-i9)a#P@?AqxPYWg0xdyMT!!?5)JVS74(TQz1U8R@LkzA2
zh5AOqy^uQRNvh*`h;h<4(2l_N6Z`GAt>xG&<M;iLtAvWjr|y#Bgmq74M^gmkwt21&
z2ZD8uBH%pm|DfDj28DTitIWUzxf<$ZL!DU31LWN$5gaj<|GEb2y6XP{@1a6wi!yD}
z6cF61@=>7S8XNB<*O9<n=2|ukiWTf8guX&&T!4~)bP<0QBU5Bn0;Xa}3Ttq#NL^%5
zMol&sBD;xu^g1wQVJlWmHBGM0&q4>hdvU~dtA|7da=3v%4CKB=pfV73+xpUpMj>*;
zp`|_@=us<E*Ob1OZyN1Ym+@_IuE{t#lB$5OzR*v>Jxw=B9$b()*U<i1G(W`c+tf9@
z?q~efhHS8eet?vVixeYXbOKOWsCV=7;)!Zdn|$B)<-YAMpj6$4Pwbw@#FqLzs{A-3
z*Bo40RP_mApQV<YJ-AgFFlV*(vONWd!)<#RPjVy!m(Uq^j(!J1ovuNd<BCpYbDX+k
zYAgA1+AHV96|79>E)TqFr`OQOV=FPBG!&2$CXMg}o2s(`KTapn)~<Di9`q<YyMp8F
zP!u`IRkwkQEQ0vbE5t$63uGqsr_{wu;!9u4vRH=dM2leZ4>0O#Agbz$=}rgK-~9lj
zp-3`#x@NYzH&HCOnr~=Rcwwpc<=-*_0&Cx|{AwBxTT<cmLDs5MA6md`-Gl*C+%^Ly
z&~RzIrQmT+Bc)<^q6Jmgows%y_}Gq$Y2;03x$Bot7O-MU&fw~g`kfy>lYd!Ki>qDH
zPf?Knj{2D}agmgc5S`D?Vya&iFMgY^BEGk_0^ve)O;*VaJ$#p2*u3C!G<S<Y^r2Z`
zitdWeXJqoPm@fZPkB0a1Gws>!O;>1xw_+_8syI*Wp27HQKz^}A`u{FTVk$tI#TkMJ
zczIFs2{Mcn;-<+j1vAhNY69bsSULL{7^x5+Q)aDe%Wba$yisN*PPtoa{yAL@=PW)x
zi4aH8f=YC6R1|=$Nl9Gi=%Z)dILiW1uhYT5;YK!K&Z;sSjOA*!SAiv+)B(|HCEEs<
z42Zjh%Tf#hz4jC^=>({|)}z&NS9v|?<m|PltKEs_=oASE{WWnEUtBHK_KLPg)+M_C
z3Ka#Gh198C4S$;9JT$oXjsptyi((*4ZXkwbM7A6OCsscVxOHdyHD|aF&{4p#dBtaR
zIriTV9}m{|nw(9TUX?Fg7norDZePDIN<I6F;wMm?Wsxw<RSOaaY}%UvUM>%sQS6ZI
z1#eRul6F{=?$TAkT|>a;`1NZ&uVljBr(ypaW!$J)h}3VZnBmw_7Rq9<=2Dwx=>sg*
z_(3q{R;1aRUAe~<BsSbJ9SL>l#=^3JGf;*+sWF$ThA!f$RH7=uh4%8rOIljR>*nUy
zWR^!84vSrHJJffi^jt^go~&nO&lJDr|AZwrfj0vuwRy|;gQfMG?2@>rRlX5;=6XrJ
zK<b0#BR+L&m>dpa&48~1+;K#<&O%Nu2Z?EV?#YButs-r0qS^4l<-g5rZEG#`GxfY_
zm@9i|K;e)mHzl?8bL+iQh`P{MzkYy+KLE$KJF7R?O*C40vkX5k0Hx}^uTU)C?zo@z
z*!<+LjqZs7I<bYSXJ3UZASrnrzPny$+TN)gTl@j+Wp{~CEL<8|JF-BC;ODWp`Z8xW
z_D1<AbqTO2+ylhK%HVR-k(L@x;fF%LRPE$<?peTd{xGt*FUj<wU}01_C#Y!8AL`wm
z%$M#$eI5cHW@swrw!$-uHUX8k=~;lmYs*Z)AlKHeTy=gt&hpKi-e_I%SZKqsA0G7j
z=QOF?ds0YCQzI>f@S|Hlo;U{{m@c?2o(UD&8{G=<D)P&fbW-poXq=a=C39(pD*3%m
z$HW3iwIjwj&7uzu@Gbj2^&_=7*-^nKl-Hn{IS{JgWBd=8U<}L_+J%vpuU<3KzfamY
zz!{*^02FT<PdEoAxdw4XCLlr}^fnKnNw@~x1fCYcDfo6-08N~m`6R^9W?(^fNRZJf
zl04wKZ}Oj<OJo6~qkNOX@JY_lrC8UVS4c{6?EY4JP^2ZC1lQf&NEW$~$MD3S0PD5K
zMu3k*QiB=;#7Nen280%Dhe(u<<9OD22HVyZMC+PfU>P2IF?ug%<n5~g<kH6_&xCgZ
zKmBn`V}gFS!m5qrJJ=s7<!e=>Ym1qvm(lHuV=9d8-~sKh)ua-B6~i-avEuVcL+@F`
z4dS9laZm8AvxbNPf-Y~2+`;y>`!<?ySaQ4iZAGZp5rbp%XGZKl<c6=4MgL^wu%l&~
z6>{}lR9*JBG!a>Xh8{@wxQfp%@<wxzcWr_G7)Cgs(t1D4eiQBf<&c}0e8W0k-*y`)
z>w{~?eC*oK!gpwq=X&(_p@ZepW3OP3!To!ocwZ<$UWJhE!B<FJpjhdz&LRwpq-jA_
zxh!)PqcZGwQ9Dcn<{d>=_iSy%Fo!|<E?gN<pyoCi$mB>-Lz;bc)m)%|mcRDoqHFyS
zWx)b2G;x4WOWRN{`??p?Vs=9X{O(rnJ$saB-2bvSHPu!V1nDsj4Ct*61#@cHm-_2n
zrHYZ*X=h2s%|EWEymvpO^Jl-ZRR<!GtV7%i4q;OJ2;>Ef4#~1T2%H?8&q;|qk|uOS
zij$grLvzSu2+@Pt7@Q<ef|KMHf-0%*Uywf_jmzWMGHHH`3NtbzsReO>yv5e80%~q0
zDG)87@%H>iu=~ECyYmrAL~F5e3JvufeR(#IJGKgfI|61KnZFO$P|c;xmzUp4V(0w|
zTpIe6p2hFT&Sq>QoP#dJUM-h-K)5MxGAFk(Y=v{3JhcdeQrg%}nSb5Vzl}U-3Oc&b
zp-JCv>w4r(+>ZOD?*fA-EuX>u8~A_BI22dG-2mFPnyM#QkV&$eBav=8F2gkU&GNUz
z{lj#tXWZG*=sY=M7)LxH+c$tiF1a?RUVAl24PU~#dJKk#*IY}uz0@NeSMe8y*Y5rU
zz7)Q5i=#rq#+~;P;7VKYJF|-aQ}9&)dK{4HYnb>1@{?~mA-#>qv8*j~_*{4hiN+PG
zl+EO;Csp{&>RD!&`w%XOZM9>5@~1@OA7>?&_jfx1-jR}}=y=8skEaJH3It=|73MC}
z%_t7>vaXP6*>viFyhv19L<VvU=L9H=mW9D)ughkNb`?kx80@7u8&ABiyvKEP5%3Jh
zd(rL<uhNIkH}yyOWxOdbaIM2Dpk8NsogQ5Ng!CA&=(S||3`Az=w;;U+E&OcaoX(7x
z_dt7Sj3Ju7>Z=M`OI-^s*ALU|`gc&{>jalw`Bs@@-ios0_PYU*02pq5%E_T?M@112
zi|r_7Wi^M!$9>2B=A#E3aX6*Z51f=Vc6V+*wA*<{*t7I1t#dGapnC+&A@F_8fx=3;
z7XqLnOr}AWc#WDP)n|OoC{uA5$sG__x$I_q>iG~2p@UEF0pUYb-n?CG$4Wz#XkvbK
zq~b2YgrBYI7nWbs7~PM*#mZMt)0zdggmIKtFb1hDYDrBMSPi=%#}iCrPYg!Bs%PHS
z#H?P6VH5;cI#*zttWwQwdJ(?QUEc)z+4-HOA8#ItG`VT;CG*`u$;%T5Qi|1s<!b--
zo14PqDln;zWy;f8>m!&VWwCt=#WDxHyKXNwj$wrFviXF$XnDUKw~Tos6b{aNH2<KQ
zZQbbU^Uv`+4z|s5^((+Z28=+AjD`MH7(K)6s<{A-5oYkG*!KM7vT`3Z8XtVQd975g
z0r}4Rh?YMMZ=DF?(E5Nuk^rGT5oR5c%YGE%yYRBq<w)pinGg)yzXXG4NP3BsX_hzu
z$$)enu~W}EdCA|HwR)cTj;ug^1d@#B?M&QVKY`Im(sCStB5JNSHuzC4crsdsm-X);
z3SyrH_y<hT^Nzgxw(e(O5{x*bx9w*_7cVcZHo|}3R7XBan8u6KIVDzFjr^x+GOuJF
z{3-cw0hp$<g;jJ@Qc(H47tyfajE2$2q*5aF3pGy_ecxX;bOVgzexw$w8SL8X@8_Cz
z+{fsV#|syuNcF7jTU%dPH(bj3D<|k`g1S18X0NFBFWKp^tj!+r`_yLj&?z#z;?M?b
zv!vpgT<v_%%%?M}LG_-#;W?$VQNMzZgA+~;-fWp`Y59i}CKRi6&T;GU)bw>S7l0G_
zDko{*kt#w@?Q~qSJJ|VsLdD`qe46>ZIoqt>&bpg#CnuL&p6l7jB%iKh3@@9E+u8di
z*VCGZk>OX8_BFo(+)1rp6u*J9Z=d|m6a34cd-Mj#uM=Dxi15SbN&43E%;6ePG<xX9
za;7S}pGM9yR34(m>G%#>Y!8oE^Ku!9kY;2UxVkYKi$1J=xJ{|Onyc#%=JJ1UyL9nD
zd{yy*s`zaeH!CQ#D*XJhWAi!KzW{A)<AZB2mya`FhSLD=(JlF<05w+ZDp2$7Is1|}
zygX*kOtb&>`OuzG95301;<hxu&Cf);B|oaZ-UAmNcvtBh{PXYshxH2FBAzWm=9u<L
z;HwIxasuT_0bD)AdZCP${c%N*mrl@qHm`S*T*(FWmmjk8kS<?E=FHD%9>2X{t`>t+
z!Bac!b@IFhOY4XCh!)c#*EAN?ffmw|4Vb?t91x$~K&!#(H%EX(bRSZ9oDnN#-vhpI
zuf6%FIhFE|7;Mp_3R8I_*yrYBdgsQxoi@DqG`ITU$+NK4!Z+C;n8S-y<U)~O_2Vyp
zz~2GM)hLPA3s=Mc`9qK*{34idQ9RKk4!FZZ$Hyoq31Tx3bdk2qH0h*AE~Yn5?i+|G
zynagGW2m025dd9iXXh^z2H#REqD1mr)(hnNY4ve-!d6s^*YO;~qZ-$;PF#Cvb#8X|
zZwF@PTB}X=A9&ZAprW+prUOFIDZMu1Yn=2GQsq!t_PPU0R6vGfG3&FtO;uTPM1Q^1
z&G>kKy_=DMly1Ie;ykcay%GBjFjvkzZ)|)q^wUDz^dMztI)}6UNt%X(efa-|&j1z8
z1}6Ou{S;7}75=AykX=yDC~Xs9{Um+jqB~Vkx`E{fyXXu3bUPrlH!LX*X-clWU;8As
zbS5SxP396;GRxN4IyT!_w3BUi<4FS6b8SHZRm_BbF$C+8EYVtfVUF86141?;(m;y`
zNOp}!W__m%gR5p=UJhk~K#a=Sp`O4vwa)rS-eI0m`AL6KHSH)uO3TCs<7BII@NP0>
zfo83$=K!dzK$KNi9+H2uuo_RELU+0T)EedLVGGMk1o}c$$Ci)=ou)5B`XS&f7-elw
zzFImqf$q6!(NGW+8n`(PgH<}DKm_;L<|6~!@OD68WAch)&>4iI#ZbkWx;4<shmf~<
z&rTW*EUkri^>xTqpi6@6?f4@dQ4RSyExj#_7CusYCI*>qd#L7wUYH&{wLT8%H&|;L
zX=gt;y%U~F;*Bk;LD9#-Iel3EE~XZoeoZGUrwq`N1ke@HOp&g2&za)0Ey2JP+gDUr
z-YBr?@!s_cv_)uD;5JmG*Emc&YDV4JZ;N^wB7WZ#l@o{yU-u0qLSq$=v6;LFh=y0}
z2!CT=Ju6nGF?vv$Qa(0^8uMK!n95eQETn`oZzSWM&v9a1jC{f@8JE6P+x)%HZ2?eh
za)2)jTyhXx*jdPrWe5kq`5nY2E-_W`w;V-`$8l19`3L*`Ekksh($LktnP1an7*Sq(
z(XZmX)CG$9cq}G1Gq#gq%C?|t;S0QSt%fZYH86Tbja3u=VZKS9-WMZsxuQtoo#HvN
z=rm%>ymf9`>6|q)nRrx&po^xf<I2ZA%>^KuhiU#!r-seyU1xa@=TE<44pPmQdd6z@
zH9nkoZ+i8ju(Ton)ZdB{j6|j19J!eY5Zo8a8GMS4i%61*l^!9$^T%EKm*xStwJ{eo
zjE%|5s<T&~KTn<<-H${r)KY6Ff4fv`wqX4FFZy8fbJ&j|a01-L$2z<McZ`?!O`5zK
zFi(?tloH3}Y9h%aflK}PQ41l`0Yt+5r;rW8LnGW!-gv)rF9t0>Ik!*hGDjoEF{w4n
zHht<LUS7}p>>phL1k$gE91N@ycnR}e_L{V&WRn66Su^C<%YJ=&Zb~AzD&OvdN1S$s
zd`b5ndwA-zr}N1Jt(CjuQR831XGsPs`s<0sp)pY@PiFGtiXN4OG@Zz4C@7t^_AJC1
zl#|Ot^CSN`=kqaCV)?ui8yt*LvK$>1pV)lJS#S3*u<yIT4gCtiS{X)bK>Z2wi0(tk
z_Lvo!F`^!f_}ukKAPU)e1jR>+tO@7W{=Njv0kRu?+}D`=OMv3@0LVG0oTVhgoujQU
zjV>{PBRu*|+SWZcpLXvEtK1RtL_<S)<oKobs;c;^s$UgaTea57z%1trV~1$DqO<Sg
zh0ff3^-PSQFqZ!n>^zsnri{EGb!N>>5!k(1v0Sy8)!Mops?X-Ey;2rI+#RL`?%w=5
zf9NzYI%u}L_p56)x}_B+_IE(kAVf|G_>BEN@M36kmbH7DxtmdkwFlH?aikoRk1e89
z6uLT!$Z51s@N?2_GAnJs-x{FxTAdw@C}5iO4bl8mO-~M<3Kw2^tbk%4i$~qh<}~xE
ztb%OFCR(ntU}n3HSJ|CG3hG4*Q0X0$+xklljiDqSH<{e<JKm|gXczYi@bnKjBB}yH
zhD~@}r{4Y7qf6!@R3iHfqaLjm!u(x9-ZG;oqXD}y61Y?ZxYQOI&L4JSFyhjvEld=Q
z9$~u-)hzL=Fim7uufeh@#zXs$c4Q>hampFEM-axF8%~5y|5*|O>~tIu!;Lb%{h)co
zCjw@c*yIA6ZubNjZYO|71eb33izw<z^{k~{&f;B}E2@(jU!+0qu-9v*H|EEwUM^@a
zIv_?R2aVLfHpP7wt)wmsw=L+O9ktNM#KV{Jfn^Mkva1~8A=b~LL^qvf+8XuL4S3fx
zxJ|P$U;2{9-9^*c*9ca(1SCV~01nh^%A9vcO8Nx4wY5R)y+ge(=LRP(yAat(^Lwob
zw)8;Li>74H4L;uMYf7(FE8cg6DQP79b`&@%+yk=KSQZC%m&AL*Y$PYy?te0Cs0+-=
zP&XDi8LUZt5jUlN+*IE|B)Ric_J{aGLCH*vVRm^Nwj$K}<f95dKkv{cY!a;{Co_j`
z+3@^?(y8=yVjydXMv1Ny?>uqgyN?6y(9>C@0E5;bZ0N_*kFQ1+U~*RtK-?AT9DSg8
z<la8H>461#dzWP1J&TVuZhlF7ox3leqjL@}%m5rdl-5i>GnwvI5(+$tzNSX>2sP3D
z7N6{gyap^<^e@tKdoBz{#vPFBgUaX3@QsT6!PWNfDwJ?xd9G?|k@2-F@XrPE%@R>x
ziYX}&&7pQSG%2TH1r#qy6`5sSkybodb5*Qd1`0sgL6LF=|I_;a6nwHa4CBn*U>;)k
zG@6>u=~u6FyIotrs*em*(wtjO1k#iX<Q)XNVtga7v6HKcr#cPD+<+vAa9BK<21*`$
z%9$6V^`_A$hh@krpE=)?FH6JDP0X$qJ$~lvW<gm_64E7&QG;)l#4h?TfOFS<(D461
zQ61~#onX>?8li^2)lLS%6p-;~0Y477?@t!SO7)1njJ@>d{pQsMhVK?Th`&N7_{eQg
zBl<OMNGL2O`-$DtBMSpNii}2rG8btrB+p@5=2^k~ImYYPe<^;)$<^CHSK%yI30!M@
z2Fg7-jnC!i^PQkrFFHWfXl^RY-UPR+RrZ-A+r$2|xJvIwLB!D`4meYlhF6D=o&FWJ
zfd1xH91;LxBuPP;Kp_OG=TC5VkesK!H#rliIAYG`{QihwFIs!w6I$WzgbTg#V#3{`
zBVqeF7uy%_cyAWouaixa+W5e$_6sQa*%E>{379%f;2Te@y^!tVQxKg;LOl;d87`u)
zY4VM-+atCv#i32(t(?NF41t<^dw|w(Wbc8|X%hoaDa+olnVArqsqgl1Lh--B|GU+;
z#wp`Xy3iW*OT~Ci{^DJ_+f?5UJoN%?z}A$<RSvPHrrTZ;_+MX^HQO11)twd^2h4d3
zC+<39u2%R=d^-E}nupC6P>#c)C@>{xls}k~-XaP15`c7eTIqjwbM~NsORyx4bL&&S
zsYpY7p&m)h8kz1WJ%eX;7i|$+wNrJ7eE|l5tsXtaG{oPYekncy5V~MdcM?5F;I9fe
zk8HYe8Ro~QG04?lwR~2uoct^_five<a1K5{4giA0JD`$#X4w=_7QqzZtb~usENDre
z=c~f{<^7LBV=zv*Jz&2%4;&U&eRA91KYK;L7v_627XR5JE|grq6ZS9klbSGv%jW9J
zO$axkoW1v$TNp^-|CZfB)@MAfFndr=-i9ASGsMbG2hHn)^&<1<yjE1PK`p)Y2kzHr
zz5Bp3^l?DE0F!1ibP(O)4(%aj$&vGVuy(BK6pqEsT!kmyAmDhWuAN{Gdr8g}sdc9Y
ziJViH(E3h%lCDdI+CIc~d~M(PfiEKAmvS1ex?|C_aIzriPhiSEc@*4Z4{_(5e6u(p
z=jXUs4cKTCZdKxAz3N2S_bj*^v&F7e5L4wG8EC7AO0_`3I)O|LCy2G%{V$(EJ_eja
zlgsbxI}Z!bd*&#h?o*RV8&Dzcoa`>*-XX?DK$@b7zjmuCKbdmZ3_&Q%b)n{;E)lbh
zF%-Ja<j!Gpq+&>Z=X5~{2{YFa<rZf_VUX3ntQG#96ZEPvt<}z|oBSLm<cp~7dW#?c
z93V|7;Z2}r4A80912KlUslG8L@MHjsc3ip0<WdVTB@)1uKZbDJN-j@0hMPsIj)$E2
z(Yf*d+ucSAw@Gc(F{UJStpvGDK}upFRdLBwLj}M2|Dx;L<C*UNzbBOtD?|~yI!Gm4
zSCKBXRVtM<r4X^JBxcPn7qT*&P8O1@6IXm$l2gob80E0#e07lXWMT(b<*@Ntu|C=M
z>3(<pe)oO<{<!b{=#j@G+voE>yxy<(>-9W%lHFSa;+i<uc{^Yh<Dq}>8>KR?ZlLH&
z%+AQML)G=q(!@2-c?Z_yo~1sz5F7ds?E$B$7SrGJbs8+n)cfJ*s+Gt9@Gz!Z!BJcO
zQJ`-j>*#O!W(~{5Ba58$RY9AZ=2#%pYc@ZZTu`7aNeC$%;?B)3_=tQKyfyl2wtTM`
zv++koWYAf?+!fKssp#}hR%HyoDy$g;Z{UDnH2g&p){HkL*)-8N!gl$z0~HPMX>@ul
zJGvtaYy)-36B-V-R>U0{G%S+lL<cB5m>&n)nH+!jClMEnPEDCR2H4dkX@SBh&?JNH
zz_EiH!^nKb_*V$aapHS~)wt8?DB9V9A0_QB;3XhmC*_qqnhaR<-X((@4OT{TFLh9i
z0mU=)1a_;!vCguwlgGw#IYCX5#&xaAc?xrJUMyLPGfbp$!Sw=E`mW|8>jCYil6jdQ
zN-?9q%C&^Q7O3s(1?TA)xVb|r6X`mDZuY{-Og1|ZCI$Ddg98<&qTv47k$CUHB4+DT
zQMf$%v4~g~`u5MSmrk^Eo}m8VL&t&DdZ08+Z4#~Y8{~(g4UspwR$$++8XI9W&!@M_
zBN-{j)B%D9{3GD*mxW7faFukL;6Z0wW@T~<w+fEmBbeLiyRMWVYAR@X{31qW!9GfP
zfzv~bkv3cnzJsI3Xub$-Qy$V3@*JtFC;fm?*an6!qD}LGQzh<Y#Mjyp=6>q+!ONiX
z3g9K}&+e=W_SaO&eM_UXvNpCBpVH2OyHs1~ef+9xR+#6SJbsu%I!24#5NHpOzmeE&
z>YqT1whnEK&$qsp)r!Srwj)+O>ja^_`Tf<O`t$p;KFE$CFUx(c>k^;oC<DP5f%57V
zFjh^6K()tGtqUCifoUOGlLxM_U53Dq>jV>+MyeCwosZQaJ!<1IfDO`)yQbc0V#+ho
zWMemiQhx{lDBcc}bS)DR>05FwJx=z{IGpXPE`9LnX`=QQu<AO&)&4g?yf_b#v8=^F
z`mY=J6x}L%w@&ggXUwxJMNo%nx3uk;k)|h)+Jg(k6RO{#0Y^(x2Va-IoLh5M;<c_F
z`xCd{vD4zf0B@+6R8#AcQDF9NR&@gO|Hc>iZ@43*My_!Ut<CuL(HZSUcWex=l`be+
z`cQlYy~hyT%g61YZHS>cc-6;nx_G9=>yNL<lG7@@np)qlw#W-Qr4ECM1++hUXp0nk
z!YXbY9AoHBxZq^$vBq`yUfP})lRpPc1ltc*|9x}1E@7g2`QAj#+Znal-5=n_lk^dw
zO`s3EDsOAjX=D|80<%Qzz@7rusJ|*)4=HY9u>)MRRq*i1Da5T&K#PXHN|M+K4<j-V
zqn_CW!}izB-ozSbb9;`1val%j;%0voJ>rLO57-im3>A@AA5lx2`A@^-EGgjNWFP3G
z?UwM3s0?KgEMkXaf9j6S-r;143G8u7bA9pEoL>4kqAsDc5y>v`$M4LU%V{<9t@2!0
z0)kX$T9F*BGC+C=h7BjA942-L*w`~-$}Pl_b{d>r*k5RFgMd_LV9^?EG#JBL4X*<*
zndM^u)7c-^8%e3|bU`*!%6z+gpYGV7F-n$cX)Y1@(8a+U(!R2_AWVsK&8?Me%ll=Q
z3Z}DF#|XrL*pH9?Tsu1APmCi}O;<%14xKuc9LjzAOyG1<CXT7iKE}JVz3!g&x0hgU
zKyjn#2(ljh?T;f`8jm?7Bdf<j?3=~tQC$zh(a>v2#^ooSWBMB717<!Ebu1<SCdM6-
zccpUK(QTJ<OBoA$sFc06Py53996iY{L|J5PkhgXRU-Az0hDGxp>2k0VZ`@aW`HuQ)
zxthNj^$p)j&_}Fccj=-}&7f80su;YEY$gh2R;K+}b82dH0Fta&(9$}%&7DG#40kP_
zyp+JXA&(tSp0*QTJ&^5{?wvuD+;Y8e@#rb-$*%uLLa{gz>!P4sqxp$3Ce*7<R<2OT
z4cdw^ye`QckWo%Z(5B;cnM}8%64o-J*|DLBI<p&&24{p_CwjPPTa~NI<_xwSt>!jX
z)};i-|F!nPDiiJ8hv+`Qm57t`ReR`wd&s<swWW88^dbS)yrW&XJs-N-idj(21_&oN
zcLk$~zIh<VGTIv=T(@Ycv$+AXZJ0gB*M;LxLCPwL+}N*y+dmsfjWsYMKpH{SL!bdO
zBvOOUE~3Zyjyg1j3}Z6oI-n7K9LM?qq&}S6(H2NAA3BN?PDydCM63n%s?<-uO7W@v
z(x>D(bP|6N&l1iK7_ja?FSGJw8#iOMde$mzQXcoI9UhJ&_`7adZ#jz}Jbs-}J{dPi
zOei^|)eD5ho3=5;kIh5xj}{bzA8<HwCl22yk945S%rHV7ZYeW-eSL2`e)Wrs^MRND
zRKu;g^6Q3Y&mQz{JhT7K{^Q5OwI|Zy^?vFV9nws-5nlSK6}J-bVvCr_&uT1OD;e3=
zA~Hr+k+R<K^aq?Q__{UEW5sE4Ep*qK?gp<|Nm^h_R$=3ljs$Y7q?6$>7_-yQw=Z(G
zp8Ok?(Mq>OX;caawH0M7kYfnE!J9-t>{~xP*#3EslfRo?IjG^@8)!Hw>9lB#_QzW>
zpTJj}g@h*bqDi`SkE7g+T|P%ZPXKmp4pMb`>3nQaa<y&hUvr+j(Eqsag`DLWRT%Az
z;v?XaNC>T>bpA?OEE|Z@72T|MxC+W|`^M6j;bWzimx2hb$U3YMv^cp0UkLWbaKPZq
z+1ft#Y~#)uGCSn+QSq(Boo0ZwctiwmG)rs%?&gCXgr|IYDsaGo37!oCwU@NZl>UZg
z-teo0WjJ0(vx{PsPSq(Z#HBkO4)n@?^T_?;-EaS}y5_q1!GgWM5h!>PRDcnX3y7}(
zv+1s3Po*s!ui%Jrvac#_+F?y2&uR+0wHkh&AnCeh?w6j~Mp)VqT0Wj-bCv5w2@t3k
zK`iO}yD+0Iz~+kj*AQaCl*{(NGO{wR+l^+HWHj{4!%!M`4IhBN_+XnZqXVp#Wy883
z(ZC!amxnOB6`!t9cvdhI+@0GEY{oWJh$#!GaUFN|Np@Z=m#I&voYW4`=SiXRcIhbS
z*JNgKQsv}oO}ua4OcJZ?HO1=w1ue)~z3erjud9lszhYE%q~pQ}R|wD%N(!s?YYToc
z{1$C8J_rJC3?tdJZl;;+(ZTd<9CW0tjzF}4I&@NpUtfb?e1U;qlOiH3F3E|!m5ghP
z%E7nRk>BQoN_L^k8R8<40|kL9|0Wwyq&x#?Bmmw*I|0tq`|ykkV7h_5^F`=tyU3F6
zIL==&$3h2EZKaFvmy8G7Lg$irI{+2W1P=335YlE{Q{{#&CmRKGuAR<aEdT61J$<d(
zhX!Ytp+N)i%0@6YVGIg?s7kpnT^aeqF>&D=xJ?zWwu28!XO`Jqbqj$455SqB&Mkk@
z;@DGGxWR@MQjO;ef;P{7B5S1WQwq(U4QK9S9n0J+C}TU3N_CGE6*N8GkfAjW*nM5F
z9gz329izyOju9@4j2Pm3tksOu3?^$OIDNn{QGvE@d#8=GrXW9Jexn((j=~%@%WM~+
zc+19J@TqF|c!_G~9?PS1>_{c(z0uck`_yic9OK|_6fOgEjZl#(zpB~=2amM_hAATy
zBlH=gT#?PCatudczQpVWKLuk%b0A6eEdnj3<a%QSh;n@{ZL{T>x37KrDE8Gaf&Ap?
zpm)Wytc6L_BOg$2;g>3F`T(P<9CVXd)n>BSs@-b69-4asHuGV`choBEQrdnvq+lv5
zry3LSystXJy?u0bkDZh2RQxgfu<FW;_!|$gF}KUY5>Sjogr|dQ%V=O4e?*gkEJHf^
z%R%d!Z=k;T98l>k0psc_Zw-;Zk|kNu54>(@mXF_!16xuj(b8esI>m=HC0CNLpm}%?
z!$=t65<OKHdn+gU$;6$hsZvtb-#TwtkS`0~!TOPDeifscfI}z8D5IfIz#sH0VysVC
zrQZDjS=XhYv<7c$guV`afP%9hPx^o~JdPyR*dA=m^zC<Q^KuOab|QbwoA?S@z`KAQ
z{JQl8hC_Jjr#5Rr^n&t`zX=Q6?D82+tN7s@;jla8ab-(`HsEGsbY@vMvz#x}7+@k7
zbVf;b8j>s=^y!@hW3^kXm+`?Kx!bQ&&qkYevy3d}jq02u-(oZd)0q90DD@A3>W^&E
z4@Y(w_IZI@gw>{Zv!3ExIqz&F)2U<noYWeipV9ajo@+R%*w%i@DzzMT_8hEEi0<I)
zVU4_Wm^8aQxU2P2Li_zk<8?RV0y64qvucXF!X68O#o*Rit!O;|dGCxY*41YDC~+`j
zP<dzT`YW#4zuuAR{POJV?|0hEjt<;TY+0adqNOQ@^%3+I7)UADG+**)#lLfJ0sa5c
z2NKQZmNvw(n;)Ld(I#5iDhvw#^K%66r#>~v0T-zKX}^$5gC5tueB_YqR6IN5D(e<?
znuLdID?n=w%*Ud)Fi2(=t%g6SwyA@Akd@SECA|-Kwv&Ju<F8>&xq}iouUJSsSf@aP
z3+xkWORxf4DnaW7OkEf>qc4QcZns*M-P|*AVOjXs;P?o9Y4A=I;|RFnFvJoHyxHc4
zo3=RN5@0?$$bA$G$bgJ(KJZcTsbv@=H1h&3JO%yLB-@v6LE;2(jSj_G?qptbJMd+D
zm88^00d#T)_cv5tZt#&VVEO`7(kYzy83Q`%AY>^un#T>85Y++X4f2!b&-5mo9^(v*
zR#Fui$<k8X4c=;k)o{4WryI0`V_tskxyvE&{v+<~ndXt{ad}JBmXaLw5r~_6omfbW
ztGhduyHWA8PMa?SI@|?sGRz0+8AK4_@ciKm^Ud=@{nxg`xFL@*K%M<i(C_KQ9bmt~
zYKKSKm9L4((3PG`@y|J%ma;Vi^$EKa{-OkJfGaV`Aj=TDeptPIkhhxN!`EsE%ZG2Z
zNQ&B7OmI-nIrdYk)%za8{1-0$^wo+}ml!E-xH4`<k}$~PWVYA9BVIS?;mnmeZA`?~
zQ(%yv{3{K5e^66{a}a`V$wQDk;DBF121DqH=-a5yya$Ul*v%Hq<`TuHrV(fHOgm+W
zCkL27f-*|MVR93&6qI^v%~M6qWhv$w;zDNZ19#HYNVN}poNw$#%LV39C6B^|Be&|M
z7h^F%$k(E;nu88E_tueTs`n?9FnWJI&rodn1Z-s^9-=?kAbQJHk?LLGZJ9rA?#BFx
z^c%v($r3w!ho7&hIr?g~4yhEqgu1TfLex0W>F&>Js8PmQt?Qp<>j`@;!&+-iT}UKh
z?QrZ4#{{Fd(qWIMD7ZWk2f9__Optc*fs&+Wm+&rL^B9OO`Rq|>%Jak;lBB3Lohj4|
zD!uq=$ZBdTuvy@jj9<WRNcS3;p{*-xkpd;akW;;G9wCJhcEtGnHZYr6?aA>^Cd|Z`
zKK_qa`Ht%Swd}v&g@oz)42UUR@A!!RUDa;n6$|oqxP_^$P3B>!>!gAz)nS|D-(U&U
z`|2XylIX&%VMm#A9_|)XjO??=JZBbxi~T0fM4d@SFJXdif7cJv+(&MgI?mS=V3MmL
z^!p$m1nr{OQWu$T3eL%eif)-x^7+WIUdkL^2#!y`zVlq0+S}(N=PWl2D(OA;Tu%#9
zzRBRF*cxvB`{3cn8Qqgvv^xdwQJ8idC}X4qJHQ_lVNzy0|Aya%Oau#rGmP6sCJj*u
zr$Z<O??z!hz<9^vOsN^uuMbzB;P$cYW7)w<63HSoF#bT0o#d$bPu^(PhiK6Z{1af`
za+KAYYrw!X0`ilIRF+hcQrg4Y0*CAawxU=x?dRTxQ0MgOAkP<rz3;+<cUB8%2GAGj
zt<o^bh|6$WKzV98@$0Bj<`G`KAm-#<zuxKd0?Py1^X9M|bcPJTvOGp}hDg$L^&#Nx
zw`q!aTBAgsp<vpM=S1`B<?WaXUH}LETy=Y$f}i4;LsI%e_G!h$T+BJM&w&w$UH9zs
z^+{`rgPd47l#MzPym}enkyok0=&cZq1mx#;BCR|ZO@kUe=2^_!GKDjsn}qXr{J>j*
z<=r-!rE{&k;g5OXs|@bsq80WXS7URmx;(pM6D)$EyMYX{5dP!qZiV4x2c<Gw`V=ih
z3uh2RfZ)3FaDq_f*S;zfS;A56rN5GXZQeG13>*ThVhCyUpWryCQq-E6k!$r_VFk4K
zQh}jQkYtMOA)9|($G9HYYPGGhn@tN!$P1b>_e-fBx2M^ZqX2MzG2<LX=&np-1=VPB
z`C&6@BFkx-!-{*zhFW+VRMf#Rv4Ldfci(#yd6l<`)AR%H9!Nnv1MgMd^$v`wi;usa
z_;>f;CffCIrb>@K%wN=iDWSQ8lxQ`50H@oamA~^p0UfvK)<8|vRIMx4Z1CDYZEJwt
z>DfBE5xSN6=w0L7T&t-sF*e@#)JWHg2G@`GmnVYZx{9gnkndD^G)eV2L!XpU@E66$
z;pS*!4YK(e{0nqdif&u!whddESxH<5U!g3d#s{YF&pwgv)ql1xq(5M2=1%h*JL3fR
zKM!?)9-4BqrV_h=>P?*i45CccVYM0bYrkyv=$Jz)P7B$j{uRm-#4dbxr{y5<tYcoU
zPWWjuu17d>FzmFli+ieo+v2|TidlFf_T0ay0DyEI)_~(mJjG8TRHn<gP&CK|nX0vb
zikc&8!YmF4iMWkI=P=x9(@dO3EUDWLRf5@1oF$W5meJNK<T-*W3Eyx+d1*behC8t3
zRy`>+>|!yIHEeUNe{L80KH#E(fdBia)^u=ay-3%izpW$4CP3OSG$WbIOk1nyx;4TB
zz{N0vBDW-O*KMkO*Wvy`I02eQFPXTsWiU(rk!$2XmC0NCysqb%g~qV!KtI`SkJeW+
z87OY(#HtU&7!_8%4t7<nQ`$o!u#ZjEKSROy#ew`}bBB(Th}jTa<O#jP-j$@jq#5!T
z)1pn&o&-{Zhxhl*y(H5-V?#@)d@m(E4++T|n)D8L@z?p}tTr`9^oJDAh+YdcBVjh>
z1M>pl(F6h#NKzd!#y~!682*54q%zz1%ePeHmcf3z1!0Pyj?3!BF+mo)p}|zQgP|13
zl!4W5Mnc(0L_m2_ywb~R@DS>I-+y-@aK#MRG2W|>1DJZbPIZk>D;u8o@Xz8?<}+?b
z#gZ1a&im#&v=XkG@2#CbU)lcIfAl5rlgrJt9;n*qIw8ETxqE=jv0r;nTeCS_`v(``
zN=$gbdJGf;94qcW?5QpeXb~5@WuNIG3Zl3frEC(W>TuoLqVQusk>?Bof_!{3eHxgd
zZR)JFFC(vQgWj8=kh+c9>L|b-^)+=Ns7?4vO<(nETQ669rRFJsOq7yr^)0C6Epm{4
zv8C5QBVI7F4rrwOx$xG;`~y9^PI#mAw4i<eN^i{@Fq;13Yr08gOCPMuIw>qKh*IsQ
z1~(_{CQAY*Wap996Sbxp(LvYDi~@vR3Gq7{>+9VY4rU(PoAT9o8)#J{KlRRzP<9Ju
zgGfgz24)io2l}fU0}l?^+0D$3_;~TFvU*iV`p-w^X9$$-O2J8Tx!nHDozah@Cx2i7
zNBp(F`Gc*8jgey=U>mazc7UtJj=4b5FsY+1_9KY=g?VvB6RZV{u=t#<?H?5(X2wGk
zgXTPTR0w$s$KbKBFyF2rs!{&>ke0@nF1%ps!jfH7`T9@#UZ}f%4=e>{dk?6LH8@|W
zS_qS+C%ru>E(c96uityyy+k-({_`unL`LdPzyLs=h#>Oz2Ziq#O=kSFuBDdP_E%GZ
zJYdzj^W4YY-cex!;aI9N7k-_;uQ(#w-TWXU!8H9bG2nPy9NDg!Sa*(frcyu9mih?w
zl?B@;Tu%cDixFNq;i+;B?5}}s6Bv=10CZSpCJ2~jMulC}dvj+A7>eaK+-EnpbRSOL
za^%*NS6ayaA9`s28Ut*Y?Q}i}7RzY>3L(d^v9AwvGl2z34)<4bwd%l@hj)(&fD3Mj
zzraa%P0g(xqblElnHg@-5&69?MoI99DCnTwz?<HuIv+o&E$vQ+#DSwH8D>St0swwg
zAuSNbTr7NlDzL>-nDCzWYjxj;x{8dwVb#y?;u{+)?oiEt4SxH1a_B)`E@-_9Sg=jw
z^;_AhMM&HBtk@j(^+(7{QPrE*q)>_hyRI`1;8OhJj+OnqJ}TKhvMBeXq!|eF6VLtG
zaL2V<N1P6P!cT_)pdmp#T40@1mX*emv!Lm>Z#8mB{BWR`yLhnUB}Gmyf3Oq^9DQ9x
z{5;ZRlDy(g#&*iq`oLY@+G^28ZO{ED$b>__TKBoOD?)$MtIRIGym0lEC4c{Pb9oc!
zfj?sd1-@*cz(@RlDDX7_BrIvcV^e{kd;gzJ3pd_&H`)^Q<k96_n3rbi)gl1;NSA|s
zxiHWrDZM~s>8Gp|IPUZwB`Py*j`d(V2vto9R_acZq%WS)@zg;4voCfQa=-Phv~O`h
z-0<Ndt>Y;0=V#Pv0LMcaqO?B)(V!)uR@$Cjv`;z%+tgH;vO=vmpk^W@dGQ9;aW6Yr
zbh;kwM-~MUFC`3oZnuxzQazj#=Kriue(t`wisjq?vF6q$hw@x+v~+VK?gT^36qveX
zs#jzyjjQ|5%PI1}v5fn_)-={8O}_66%P09|++7)VaNSnn$Z%6EdBX^Fs>wvL)zjQ1
zkx@Q^Vr(G%K!Q3ut1Ur{U)a5k%Gi5vQdCit(%|*vfn%wT3oF?Xy@)<a%A;QO7HO#>
zYaelv8g|qjDUJF_m}qI4|EVe$BP&J!q&?pWBmh-l!xqT4oM(v3am%w_y%qFuc*|%j
z_&ib|l`Q-`PtbQf796zlwn5wb+q;+Iqqcv`-En6B9~BRQ4*!uvTnWGyZu9JO0`^|~
zHqUyE3&0HQ)uhrlPG;G4jubR@w%;!4RHP~sdP4hSo)@P5^OTqAF)&Bo;90*vMKasz
zbF_kJz?QcjOJqF0k7BF^$JXH>{k=8dslX}5VN>!aytn5-^PiPXd424)B#V)dHo{`-
zfpXcay@kT5;~Af)gZ4`e?u@>S{o|{HEq={!=&47Exb}KPk9azy0HkXN7~+Qk=YW`M
z5wR{#UZpzzZel*+dc*b%-|fDv)#}(q?3|o}I*&zMcJ=bd+m+CxeM=8iw5Oz$?!qkd
z*7*v0EsI0m`PU?atB6j&@a+J1qZ481QM18rw#2#n-H4F($FsVs6j|Q0TY``AuD?#(
z^$1oKR@dCw8+K*GF0_35^V>e}>bj?VZY{6k2MSdA>hqFvvV)!dnea$*B)iZrNjfSu
zqZVB`PAy0l{<`A!U*3T5Mr9k}OsIEu^n|22X-+R+zUR@}N#`|3SL`}*0=3Bd#}aMd
zs12~4J$=a1`KJ{?rMgKW^11c4cjuum%3*~jZS-LV#GV_-$boE>vCsNs(~$#<T9q~1
zCbRw{xbV5&owPkaVf~WyxZmGuX%-=)89!pJt19FqKnd1e{|~ED)G>Gmlxi$WiB=*B
zA*Gx=BF<T#oU4E1Os?t1!#?{~mvDOm5^+`x@qkJnXzs30Pn>3-m)n(daW?_Mb~@Jf
zFFQ$6!k&+46YHDKW_|lpt=~gK0m7lSEwUL)c7y47^U9;kv_Vk<(JL*O$l|Mw!4=Gy
zSV|PQ6qFGv2y*8q`^d$@z|rBhl5xgjbqE_!mVbZWv4xoMnB<a>#4Z?llA4C|sjTK#
z-?1$X551uc5*&DY{*gWzU!2OXH0Zp4J*VJp#YL6-qzku=4dfdpv#t@iI_(J?Y&HA+
z^A9>u*7a65ZaaKy@<Tz6BUrmH&zcG@DE4Yifn^w6Z(%zFulJBQJCw;Oi;9{%vGe^w
zfi1t=amchN$^M##TH|%!oPA}UyQ55BK00$a^6}kWrhM@=Q`7Aj=s?#y^7-@f^BGf;
z)tO&yi4=p%_k<w0wzYC3_{f^Q#zF629nLf}ip(PFUJUx{W1<_-F!b+>nVNyu&dB3q
z<4=cPjLr{6y38}u|4&*X$3dh6;5zP=;XmqWG31!zcf9wXx|;B!1lMEyN}>Vx!;fur
zALIgBNDuC5+m9e`g8c0ZJe0~=VP>)pXw9SQ%G#vfAHo2P>!1GWSg5=DKxpp44Szn-
zUJn4-(-+QxU0sBr7d@@Gi|DpM7RT?r>h(I(r5uI~t`|O1c5~<0w+g_DN_p0Qo?Sj<
z&}y3b)!a98r@Z>udS@SEjnUgXJ9FyyY9Ueg{sr_OLs|mBRH;ZvM_q79D6xc?l_~dB
zVJGHq<rD|HUp&n?eNhqC?E5vtuO?2{`d>A#%H7dq7q@NAGbY7<zo`bV5~HO~0UMb%
zYoPaIwTywVw<KO}cCaxaTAA4$V@IBz9d^wSIC>I<>y)waWXy5mqmW{vZ&%qAdNJ!l
zX!Uh2*(*QUYwqPe?fFR{bqNR<fqCJX7%19VZS+gIBYE?Meyr)xq_Z5*CTs~2=FZ9B
zhVhsXl$o5?`SHHp^=nz={^5@mcV6|#gE!P%E7qCo+lBeq@go(U$Rab<CSN3N1GiWq
zp|NZ_D2(bm{hMa!Uz{T!a!3(b&W3Xhj)aFCbePHSb<D9nbZdG7thbSE_==Mt`cxl9
zG3;V~4A=jF8)>ABrUx~qHZS<Kyu$PHBL$dLEXsewL$cKQWytn)g|9Twv3}?iyR52d
z>F2=G8@b_UZvWX3{t9TQ5&VZDF8F0d7KDLHf$%!JElqQMuEFnupTIB5&CEA0qw4XW
zr-bjD*8llF@J+f&k88);t=sHS3~L+|_7<o-s*LFUS!LTzqaxy1K&z{8WbzkbbLQ88
z3-^J*V9whIr=u?v+uKz2l{+N_#9N#^OC@jUpVKAxIyXKe?!uMuZ<?CAaGD7zF8_PN
zTR0Z}5iYTsYUd1RrE{)%zkFK8A=?{y#+Q1QUR;0WqmcSf63~$<*uOvYH}pp)VqoyJ
zA{EgsP!Nu$ycO)+^Htdnr;{!+fLrOsIPz&ITYNra`=IloD;LF;cjmvz*W4GnhBefM
zpYUpJOT=B^iy!@a!WyfTlK(nk@v=14{`VH7VQM7%jgqj0Mu-plB`N04Hm8CQ4Q3a5
zSBMt9S=P1u<eB~6KWyfm+MC<^0LKGLk@mh72*-}Y1&X&SpWM;WmFM~?XW-N)6BQ#O
zPjlOm5sxCG(o{F<_u%7|mDOCoWr2HcXw755SwZQGk^3RK7r{TZ!4+)_*EXDg)*(IX
zp6^%X)8O4!`T4XRgL4UMksakm2YSCA8Ynv->$QF2I8cop5{?eL`EBq1`ypnm@qa7|
zkW7B>SA!2{S~7s5*mx_}1@taFzN0>HQ8cGG)mEh27lTQcRa}JPI|QQYWAIxHQv?;A
zgXSiw|G;%0#!Q9B!aw4+?yI{J&b1)#-%j2<wlBl(g2ktv0?&^qRVK1J7CbK~yXP;1
zCqTNI1HLSyU+V(^*@Vf{R9;{guIH1cL@8KZsI&000{`NrlyQx3id~^T0!^hRkalJJ
z_Wh$EB)WN#*A9~qt2$;d07e$KJQ+8uJ691}5?&J`_Y2rNpOFoetq{PP4Z+puXw2he
zL*T$?fHPLz>#g%KOr`}M!vQ?NpTXcOz1`wfzG^Kvs*v7`;p)hLDTFzP;WQ}wFm%ZN
z@)&MOLiPaxu5t_6anqJqv~D<}M_3F8j2#h>=l*gKidqCUyq^Z<9?W^|589<YPw(f8
zO96)SlzFVW1zFOS7qIetd4btM(pc$W%`Y!x_C}p<jCCW`>o2CBzcKSGVbjsn>;L6(
zGpw+cV%iBe87r`Mw7_Ta;P!3=^bA@$aLXgt_u9?sS}ST(oK*6VR@uB|0XL`S)|h{N
zgKys&Zmp*g_RU)S#wUpv6aKxa$tY^07DV4qb%@clNk+G!5+sCc*wsLWBu;T?20u7Q
zS*YGq+0P#9Z6Fr5P>Oa-bJh`{k<ka`w(rA#w*;VG4_;kkZ-KvThHNLJ{8X2r)}H+;
zjZ<5GQpEs!;jgJ`8!_jy2n8BbrL6&$AMZY*d2~w^l;l{>;^5$-yBdD}INf0&mY_fB
z!oKOXK8qIoQ!h7YjlKE-r@C|hs7>X6v|AYBtE^hSdWEa<0)z)~?JDCbOO{Pm1*;vi
z+X5)9A~R~R3OFtd@hqvIfJbV!gcv)n_In6GLK0THxz3dsvKt)l+dm_}?`Eqhc=Ybw
zE1|p%)|uqUyTAmW1QR^Zk=<5&9F*eK#<qtwIdrQjs|EeEU&mN!rdAk*b8=*Zt^{M;
zNd`yz@`!^#K*>g7c&{Yx@nqbk<HEwc{1IXJ&!U&?&VR~tBi91D4zQF&PlX{%^1<g@
zgU|n4y;*ZNlCFpRjjOO`$x|USAbB}A;@r$z)9>b7N_+{89aDsAW?IoER3jkOxLV-$
z3p#n<TfQ`VW|gODx$td$UTv}f)J?j}8*qg~s7qixK(~PeKL5F*2>9S>OGI)Ta3p<u
zs=3S4p#jDZdZBtRTv9}hZZ-eX^=R_W`}h0AL(_AjWz@{WP#ZtR$->scN4n`ed-|Av
zUQc!Bp04A9^ErvQY=@yK5cO0SkpW}@BZW{^E2~lvr2LjP!5rGq=BAs|qZSP_s%+w@
z@MX!#lR=Yaz9jm2`p`mWpCMg&Ufq|n(bI9{=%u?>iK-cD<5HzW^QU^<WB9A`zUBda
z6Ac3eKQFgQs_rtOR_#yOX*5R2=>3QoSkLKOq}Im=PG!5g)~6nb6fUm!4CGW@Ow!$x
z$nX|{qBTG?tIa$QXi|8~sIFoUwQ+BYvJzC$hQ00r_A~lsKzdT_jN$8xViBr<pA^H;
zb$4chK(aKPx4sryZO%}yJtz$f+V1(fqxWpZ;GCULYu$y4gdIAsanLC|ypaV&kH?&4
zA~EMGp@t&!A*rlr%M|?dbq%}$NANMEI7od!;c)E{caY{PiRY|<ulg&jYnhmX8Lq75
zffHFVbw{eC_@{3ar%p|no7NIH>bwW0-XeH&rrNA<Q0WSzAF06<T_F+yp{E%%cVP@3
zBD8ef%tWjJ>lA2jfG+z3w_hX;L*t_xAm#lytJKF6zI97oIy3GsARV13EqQG>()ngE
zI+0EU0f~yEfNl^+ZUFTGn^n-w&sXl@YX0PzF`9|RYIo>udWb}GLJS(;EQ9dDQ7dl0
zwPJt$6Y7<CB5hM1+!1iu(Qcb}-&j3<xf4=AymWqcf{emF2tZ}5dR&`jdn54dQ_s~s
zSgoP;M=ULt>gAMawJb3FdAAP8>k|3epm10Y;uks@LDRM=R<P7Y=?CHGVQi{ROWl1|
zn{5{wu4?{DSSGiheYc@TaSy@tsR{YOfh>3J<-5m8L9Pe-Vm_#jOzB&Y_FpkUsX<b8
z1vEUGc7el$Va9VqI{jERxECw=Azdcw#Z1JM`JzjEh<ZXej2H#7jEI?jjOF<Q>Jtvh
z_+%TT7osrFpY5J@aB$qYBfKItXEnC;55NuUo=F4`TE>E+&auUm#S!UXi_m)Aj?8BQ
z+e7-Ob$vH29?a!(r;oS8eiwe|N{V!gCPqny)BOLYeC#gb)?^>JBdPxOQ?h)>MEl!i
z@QnY^hd?g_BP>-ifiw?}!nm>==`{b;%+P)r3p}{f_(_pKTgYZVeAPY|S)%}SqS7uP
zIKRbe8y`wyh1daxc%9*0hwB)R-m;hx-{DpcT?@|KWu;I#s87R9khU@j)H74X3tl_7
zr)$AqcMb3?{97b#3R)dMCA2=s72h2KJ+H0H3}!5|5cDj55QbLX@8N%*eNN_@RzJI;
ztpevH^9iG=jWBy%qy1UI|BiC|7p{byW`qM=$A5Lb{J^WU(QujqbsW@&SR#P#w`h)K
zpk56VRIV-12Ycg|;8hAc){SZv{%Qtd(ZJ;?bW-HJbrUSJhTmRGEjm4qDfZ`KTKD%i
ztdUx72I@dz`%y?PUjnE>QGS{=j9uym3UE1HoQO+HA8zSj)S}fUXhhFptR9obT0Eyh
z3q@^+Qy<S{LR2-A<c5hZB3T(HEXOuU(ow`qo~4rkX}tRdD;gLkQ)YuL$NL^<wtjW#
zP_F*7D^jb6(Q=C~W)o)5U@UQv4+yiLg^6xmN{oh!BXZ#NnewP7KwRI9d43k3OgFAp
z_%(H<iu8CJsIk{;>Ls5BW9nHeXgd}As(XfEW{Y19))vaR`ozBAA%STA;TBsm6?oCU
zJcg7*I52?1(HYWTSi{;#nyV6E5S#d|Apa+Nd{Gx`1Ggdq7|4EPkWu9!A5_FEzt!Tk
zXuIHS1tJOt)n3@I6}y^w2%@A^rv)Uqd_CM-wzeBk10}_7zcBKs7lPJ~dG_zqbk^L=
zsQVx&8>}5PPNX*hc`+%!X0IUATS$Ke3XY-o`)j_mkuPfU6<fz-nMQkG8*~l*qu6+h
zv35`8x2?<W$lm>9YrG57$-ItTjSR4$qYNQlYW=kZ2>jT?-&A{OLBRLXA#HSLpIS%q
zn!*j5#I98=8cbG4Nrzt>0E>Hc%cU*AG8yId#&KjVfK#35a|~Qo>s%Lm|AkJk@RNEu
z9!LvGI*t7mhHRCtnwEN~JEqb7WdDb1XrQJv){0di^oqY|UGtzIcr+p_tvRr1oqI^3
zFi14=x9R9xfmAYfJ<$aXTQk)wRLbjM$d1ByrMY<!qj_`zd|iUO84$)K1Fc93Mo1`R
zMX{+^@`(mpsjVex&-15)GKym=VHtd@tt_O`B{<Kp{By9-GdlD%kXo4%r2!FhhvE2E
zD<j1Qri207EK~@{$0e8nLMGlE*rw$C0c!VkIUmZNo}5y;U>nOv#<T8!yuYpB12>mL
zj4kYPJZLE|Q+_-Uib4+APZ#m(p7ZMNcGfjK%bNTcRGfSEtC3^h!AhqCgS1<n+~v!o
zub=Q<gz|fco?s$NTveACO~-Lz6eiz-hen!Nm3FoAc<2>n6_Ia5^UEVp87E9Z>z)=T
z^)mK?+S=Ke6aWs}^(+I(r81gaEVIMSb2RFoZIb+s_OiDGfAY)vkwYnAFh)<nVv8>T
z;!tiA3=_Wi!8}DKf%;l=7xlZXQ)rJlF_{gXQcobI>Dtz1mZbLB`i}G?F}Y8%Dk+G_
z4A>%UQ{Ig-WSTyje;QBRGWPt2Ht1^T0&=9zVt{plywI109GODg#U$t=_G%|U3{-?&
zJKw+{l@l)&U76u_WQ?_$UI^e^;~H#E2s<K}(<Ya!za$+UA!Z(owak&ed*2cop*5=`
zXM&GBfCzEiOxXv8hw_ga_#lKAkESb9o9Am2X%y*<P9U7#ie2{{PLQU#%<NNeuE)S`
z#A1?*{eO6N-45lm7V>jDUA)2$_i-XWcH7V9kYp~6i8^-~O~3NRV|d{pqC2G85zeoi
zNusY(uZ8*0a8sS=1{cR<cGS!(Z<oQ_@QMrkC)E1ZU<{x>G@A)Q{{SdJP1ViZ$a_8r
z>J=v{p9$<`Yx)guFU~BQcxV|W{{$ZUXZj$c7BA}=OCMq$2ag>hF}udIepz^uIu#5Z
z54IM}X~LRo%-oMYgBqVJE)+fSpYV>jlv9%#75ii;AT40y7AwK4kNv@(TN4kemN1&$
zuz)SGlgg25raaTfTdp>P8zs0T5AVJPeGc5~U^IRSNtf8xUrq><kXZ2ESU`p!INcko
zpLT@g74W%xvM+G7gOm_`K|uWd#cGP$goGGw)3Cu^l2w(#Q8`dEC7fp5)gQ2-(`;(I
z4}8OI5xG2Kz9X&7&6-0Dwue43f$qjiLWDeTqQ=Sru%wm)jLux&9BC@Y>TPqv-tfMN
ztjNb&-`XIH|GF100?p&qM3xz%g}mgO(QRm31)%2d3g(D8d%$duz`ojbD5f(grj)&B
zvQM?&66aI<94NfW1c3+UY+a|corSV;$qnsfO~H56Z$I3ne(eFqG8kc;@((y03Tr_e
z`#H0OrKH@SdweZ1Cj^ee{+#mazvf&wmCM+3xQas*yE6MvwRJphE&o|X%A}>Ucl<8&
zRJPI(Y=Kfn6U|5I4jUAye+ECEo8VVdS`xHhWW`+vVC!7afJUsLk*>4`jO3sVcz65Z
zBRy)oM85fW-)zp-K@X<y(_S)p?(dlKx$E1wUrrs-`W6jNx-m^7L;M6&jZXwr5GzeR
z?rbV$NMCXf>(I}$hVd-|tkr-4zZGW*M}zatVR4mB3U>rgsJjJ-=!|yZND9pG?2m!1
z@y0nGewF>}nfqCI6cP?x%g}we#f&C%(AWEpT1K;$a4e}f<y!bd8SK+;zTtrsZ!kIW
z@Z?a(lkiJzkNxJ)<*lg6OCZHBb<T)xiPC#Nyn9p1-g9YxEJ&n%QFw~+a**LK{08?x
z(_>QbvY6HMF8(TTbV$-u8HNnWw(c$T?o7IcLN5YqslYxk%v)R{(L@?Jx4LYuuBlxf
zVaf>SZqF*nZrPONjh?n?!a=?c@Qzv^DC}D7CY<=zJnqKhez#v95^y){tASPOnNLCS
zjhh7*1okwi*s*#N3ym+SPEwK$rK7sD4{S)fc`2S3_Ms5+51mnP%)pzNw-}N5M20aA
z+}E%90wOP?9Y3_M!BXKM)@kOzd-evzU7K61Fl0){v1_b9rSNMb8yGstZYRV!TTV4j
z7d?T4JJk*jOgqP6yFIU4OD}27TZ8OYCk1&235WN^f-YibX67$}EtYK}WqRvt2KUJA
zC!JCMcu0L#V`-NQK8IMZ8>u+xZGfVCs1v{%X+wk}E<j*7h{NREhvPi6Zk`Lxx*kfu
z$`1o*g;8zj6wkItc5l+<8c{q<Hkt>19=SW}6@uqdHeD!PH61osz*uhJ+Tv#(+F5?z
z?wQV99thya!NoI$KcPRb^I<F<p|1NzKdz+)#2qi*4rByZ%L0Py0acn}?D7c2NK+`E
z1}>G`KvG`CVK%IaE{qsm(kq;w@(1~TC;HGYr>M-<yCic~+DwC2D2L>d^qj$AtzeJl
zl%y}MxgPSHR>=RS1_HguRoTdOq7-WSt8SW=VwPWhQjxEA1IP@QTucLHHQKCg-Ilt8
zy>5+@6?@W)Uzcn%*sya2CMf<x&wWn6_B0-j0`4xQ$W8aLB1A8Sfdqm|hjWVB7C45$
ztkz&XMeg+{Frf`uHs}O2)QegI<TvLdxe~CN$Nl;yvfieaP7EHj?7US_7-2eS>L<ut
z{#fw!=Yu9GmP@>s>Y)Gw{fD)sh74xHpV4%N5zc_Ettu2p@YjM(Ae~l%4vkRR&5&#X
zTDbaNdt4ph18%m~pW(RHI(qHHQxo%Z1p-z`87Yfa7dMPK)W|&c<x@4O)RibjX(AO}
zYD?g%_d9&IX>>!kn+-6k?INHXJj=%GlCtyQPlv%090s^Xo06d6hV6AgSA&`!!0UFh
zm2dSh^UcT_NSl7JMbYk1RxbZK{7mOHAKE=L+y^Y>RW8Ho7}!gtOMm^8J~+B~pnR5-
z9PA1?%_KQ(vcqCvzK^GaK>+m`Fsc7KZ!nV6mFk$bz|PX`7k0$gn!208t22*7N+5P~
zU+S6t6g|WdiV(dKu!?nH27s{i04)PVmr)3q>8olW`?B2i@L&;8@WB334~I&oDpuq^
zm%_7_er;B3dOif%cs{GoB6|Wx#!mfRSKkcI)gO#uZ<TrLd;y=h@HrUR8Ke)OxbR6>
zH`obq&Tvbyn}Gr&>*lc3lEXxP8lKwjY_(F6ro3G+?t+vQlCWltz>w$fSh-Eh=<1s1
zeOw}kyybDvqi21lZ#_HR<-0H;NIwCJCCGDB2N6&dS;1QnKr@C{K;^^InX9oJCV={+
zx%~{30b-|sW_sb<AWT~p{XvMdG0>;SXzUa;H=6$_dqNiWtS_H`M}_}c)I^Q~D&7Rh
z3kUD;Q*yvVlW0roHUDW?0~}i&+Q3G<kZavf!;4Gt7$GU^2uJ)ty*oO#n3{j2dVsdB
zn7DQ7(z&YAw@%c|V9#OA*3X{fWXjv@ojFOlTGN=CFtw#IKr4Z?o7pNF;yGMnE#w)F
zGt3%r31Zf2YE_c}Sq~g*X51EWPQIVu*+Dfd^i8fE!K2S3#j*53OzOxvJFFK0-#2Y9
za(~|E6jnWO9^8HFfd1PwXGn$U-d80c132^<xB_6IUNOwDo7CH%3!HW??rNu7c0cmc
z_a2Dx(Tfnwhkh)GK3n&nO9`#gSCe1xW~N6YejX*Vqm?TCVbbr0@ydJP-Q(#(P`sQ;
zYQT-*ge2v8I0qs%2X7k00EwYwH$r}gVQMiod5gW%z8<rqmCx$ASC6y2s(8HW%DOwN
zX2>y`{qcLV0CbW40=pgTFWg=pfD|`b^Tm%@mH@8jBmLBjd-rJ!mxfrtpYV5mq4d<4
z5j~;EOR@M~X6AO=l8M(P!6!$&ir(Xit|x;vIb@EURywuH{(Pj}v^7eB5r!yjG-bGu
zc)s3AdOt>sw}xht-LZW>XYiUud)*;n0GwoJ8tBiB?Q>ukJg<26tj}t`RTN;?A!O$_
zR%QA7S`=F*;=T_c$VTmNTNIgUb{CY7yqN+jhXd{k&~RqE0Oa{5KK!dQ;^U(Nfq10u
zJ8H^Ct@jY!;(|iB;FjKn`-bZhIwNmXt(f^b?9y(X`7PZ#@Hlu=f7}Nf2IS39xp9Q9
z-%-9DDaG1fl>bLsrbmS=)qF?YBdUJ~5%(jU`5pBHtpr`9@w-Z})b8%nlzd0Y-v5vd
zo~%>=Fl~zbM|TR81<2{@yg(&LE$UOgqXbXkDTJXpt~JdE6`^l?IdTyIZrcJdNgpq5
z*J@x9<%%5DRv7>Q)6av9xwG(SqFW1M2#~q=Z0VqM{56t4FTgC|gAG)ki0udSe&Rdo
z)mGrxBvOVls%(%F&f;#Jk06MFD7Nt`To2H>o?-%07UZD*j+!6Wo-0xU3h`YdO$uMu
z%MZh7e0T;A(M=fGRfHVPgzh3;1PK!<p$M%Kah<Oc9cKyOmQLW5#sHzyTU@NI=>T9L
zJ8(|@1&SU?02X;=17m0`q6GqBaY{)6CCNjHxa%0$?F-`0hmLfq79s<L`I9O)ZygBe
zM3#bfqr1a5&p4Sic(9t+-%&?Jp!YmK-mUXFTNMCaMaYK^qgB7KKs|mEfEyMWK15Hx
zO2plH-SsVybqEZ-%UzIXFD}@H5#*p4_eAQ|*<jL3Gyps`J;Io~i!Acik>vbadR9*S
z=xBdO{SAhA(GsvZD9UqSoQpaRp^zB>MG9g>QoikE4Wp5_KsyYqBCd22_3hk`Dc9D3
z?-zH8zU|Kh)nFBtkj$9R!=1Z?LcsrvWPIC70l(E5_U~_bg5Ua%G7I?M=MwnkJACn9
zn9ped8kDa2t4sFpS^<KcbU(1p`f;C=(N>J12p9}O$rfOy@*M@LNL9EB2lazYSsDP_
zw?W3>9sRC@bv_A(`UU@kIRg~KWZ!t^jLEB-LLkE;4%aS)FzR%xrQp3dE&TboDxfH}
z2(<jF5W@ptf?t8DF=Px$VJ2A1MY1%o=zx4Dv0DcM$*E2j7?p1z(u2lCg@+P+XJ1!S
z77DQr*Pat0OKic2#%q#rvL}<Qc}_#vF3eOk0G-Up!B(>c=8sN%*(+Kc*Z?A>3e313
zn4XbkXgHMxHi9y2dxrv~3hojxSk=Ya>OwG(|A@YM;pMFFs0&lyQD94e&AN2_e|jtR
z_y86*cxpY(V}@+TiKX$uEdk)cM=(f>)^|y5G&gwm;2{_10R<!D|Jx{Ha4_oS804t4
zYBAU_D5wj$A8}kujDh}$`?2T1CaI78ch9Z(_w^AU(0tTU`O;rvK1UF$Y&6-TCWgir
zF$cY14+Op7-|db5cYA~M5Nz)U57FNRn*Cs<gWz$M%a~Y+dD?}Tjp~0#P2BL-`P?LR
z5c(kcz~<7l^0hRHBQ}TtNBxN+wfEH~7hKcE2HP;qRdS4tvx`@4bHX;f*CnsDQ(}X`
ztCUEYSx3Hf#mKE9vBm53<ZZN54bSQ_r6vzCU{9-^IBLt%@2CSWG)WAI2NAxb4g*<|
ztCZn-sgB$gTz?y3)fi*g0Y5Oy5R!Zq9|mgM()0s*ecYcz(^Yx??|=mi)OqW^$=w#B
z1PBR{4)r)X=&`v2nlj$XzS(4Xtlc5u0nT(H_RvH0fCyga(Z+!{Iyd8o@hw88+Bo`!
zDQgAd0;e_y+dxPa^t#pe!d>-FMS7y!jac%TJ}EYzA?-r>!|^QvkwpdL!h!PV(PJW=
zZ&vI3s%>|~UfjU*a_~kWtw4cw3^5!?KR5tLlgzV7n{RM%&ZY0D^Sy2%;zqo0^)T5s
zp~$n3ArYJNl}Y)F-G*&3GB#cwx5)%E^pzJjQ~>tYPR`BXjd1oDBNb=t7NU4EMQDV9
zJGK>-LxA(+q@_B&YR@Qzw(p<=hZbbdFFZ&(JAdJ+P&U}%{gmYD6Bhe%Sd)cuc)bhl
z{BP!{!YKi8_R2;25Th1pl!^?Izkz%&z|_~~YWMyoXgFQG4{$=7u%_L19EYDOo>uV{
zoL0ti*uCjBXY!9XUna0-=|K#m$-3C2s#2nGpCB`j6jy`7oKk}bb_Fb>rXX<V+pfrL
z<KN&{ylo5>6PWYXgUN0ui>YB!&I`hgtoH0Ye>vIxI1}XWhP+L1X?p;-{DHO;Qar!?
za<S#ML$!?qGXjz4)5iKlZ8;A9i6RG!ZczzLmT+$6f?#&#EWL}jQ1cjT`m&se-3$s`
ztTdfNJ%|O>wPQZ*`mNhm^%B1E6mAu7(QeEwC-5!fS-z~Y@a^<1f`Z2Gm>>u5dT4S(
zHnC)v)_jwSK_A3HF`MZfILsM%ShW-+z1lo9fx4D#D~)S&NUY-|(LxpO&AE#P=JXA=
zwSEb|WdA@Fq>kWwIUnt{pRQ(@k}mKKW0PsyB$n<$ij{n*yEnUaewWVYyDHGcwdGUz
z!(UqH_KHkdw#t>nGNG*#C-@!dZg7{Ta#pIH;AqJ|0<LR(eQ|Y~g+E+6hFeHPHujgX
z+1Q@)lhoj`lh2`loa-EO*Q9%TG2C7L)G0!G3D91E`*o0|L7A->ODq<7<uY@PzJhuz
zaJ|AK1=M9Ri;(q2%-{MqsGN93Y;er$1J%O5R`YX7wFZ`rq8kp5#g03%q*Q;d!Ty06
zy9{siJ3hSTlN=-fIw-2A(pS)+3&NxZ7@e6ReV8izHCpr&K-fR3d1&uQFbqc)Dh#>N
z@lv4ENRnKrXCvJVROnz#sfKd=nF5{SSZ||9OJ}OxOJ4qg+102pkX<U)VT1K?8W%x<
zcMJz=l4)TQ*6=pvPWTtq4x|(Kve+<V&?#1~n%qc`$yqYIdn51q<i2hW-kyCxQ^*L{
z@6uJf0G+QOtXE)behYo&74oGHpppDsk<);+VJwCJqwRn!8B`r*G_@jDniN2yB)m&k
z?g5|gLGQ$xDj3PL3}&#S<{>8rts61#wyL7vDP0#fPY6+F0^+=sqBW8AL75j%Vsn^k
zFA7C!=h>Qzx!M+4x2D^1nc+G_Kknc5_={0{&22Uft)he6RhNIRYbd)d*A>##rp9s-
z{ai4~W$M%H39}mB8i<)hUq3nTEMK9Rr=Z8TBkOw0oaA~If4Nx`%i!!oPu&xqyq{3k
z97V+gVr;6i62#j3cDOTy>sdCk64h$;N=-f^45x1`x{gJw_iG-Nt8rq0!*;l$##!d(
z6vBbcy;GR#@2D4E?rj7^^_K3}k3muV531j(D{B^gy)L7jym(qtO15xEeFM?D;zuj`
zqM8hBr+<ZTY7-xz^c$tx1`tT#0x~^)_O4iOJl7g{chHEBS_*?<k|$gs?KB%Jl50C8
zed_*_@PumIQhTZ6vK=kx0<xyRoi%35S~UEgx>tKz1lu_OsHf<-dZ^6QI+Yq0|1>z6
zzN5x!UuZB*ig27RVnd7X2PWw=H|hY;J;pUV&9>#|QxjQ5auT$E{!7dJ_RKH}@Y_7a
zdSMzC2z4f97I&0VuWaf&*@#mAIMrcb=LrSkZXgR`OECxD#F9-wUjeM%1GqXIsgM%1
z!}$wE2Lx*EG29K8bD2?vZ6%;&S%+)yO4rp%r2zr$uz(t9ni(f07;c*|Z?9*N^CnTJ
z2*N~~4HSngu>f%fun3@zCe}*2IlUuz4G&zZEzKR4!5+sH9&MP*1OslG-=60g{xYXH
zD6W;0VzpdRm|Yan-Rfj#IO7XxZn{h}V~eO)JxC+y<9)IE57GA-=Yby`Lk>>0h2I1X
zs|pbTe?fx>bm>#a_HC1+dICZa6qeRtSI#&$(qJaoZsiP9q=c1J9Aad*`GBMjNEzAJ
znkC0{x~Mz`IMt;I4gtOPGrMpRbSto(gdnZ-;VghHn(0gX8w^y|w1Yf|ceQZb4~vDb
zLsQa`u3NMq;M8ZyQO=~=1Iod0bFgLo;Edpx?FDg<VbcDZy5~fDZ0nsvvKN>Ke8?LQ
zZ}E`d1|wkwXF?1qrQOT#1)^0C>$P~pM<t9aS%4vDD*>fC_8iIb%$JS}?rm6GMOSjD
zB0(call+rA|Ecw^|L|_fh_z$q_9lVSvm4#d0LqagEXb!(y9J1ca&bxg3Qn4notb-Y
zOpbdy)&>qzM2K2*xA6MP>}1nwPpJiC3GE_ObWJ?yG<@UifKxcIYy^_g7i?9f*Lq?M
zFkXRVm-pI=Plz4}@QZMoVvuVU6O0=i6gJ8`{cf1k6!A{Iu@+ET;;p7R_Bi1U)jJ@k
z@*+)+O)>>^W`hUSC#9?A(#;4&UvuV-xrF%E`2kJe5K$OgCU7xLe>7oE)%lcwil@j%
z#wfQ4hV-2@YXx7{<&bg))<{IF$NfaQI#;S4;6pT@sIlk^HS<nMsgiV={Ir`#Yzf|3
zd9nLkFV{BVjKzZ(RklTT{DU<>HF){|H=)|8ilo11K*u@P!C!5f5?sXk20*}wRO|72
z%iQcFwn0{JaoTEE$mQfza)=nOJu$(Ct2`8#W(T8io`d47nOVlDor26tlerP3UVEn6
zTsl8;<BMNu&D#Q8#brj5Cu95uy#)u8u~^3JVNjSFY@&eFM{QE|FaNKcYM}%tz(U+|
zKACaD%C)N3Z58yT1zEihz8EiYZH}pc{utZO7s%c+q2QKgiZgR=B)Zkgxi2<IyZNbz
z+VQ_A`|`M^&UV`%RaAr^C@2U~QPCo#m8k+ISO-*!aYjIhipnIW4oJk1jUu2T@~IUR
z3K0<j5u!psnIeRt4#*4=gbdiq%ua={B|F>u;P;*LyWhR%+}}Na)Y4*h-u;fx`>bcJ
zRZZ6)Q*+-<)GA1bFCA?cqG$PPb4}$!01Q+RZT<*M_2pb^+#XhP6juThcgN_JwC_L^
zMO4Ss6P_5o!kcSn>QG15?b`AL<PPr-`Wm+kpE=shH`ra$Qsy9S&}17`mC$Zyz8`da
z$3H4_*QylnO9?xjpK4{W<5zM%U2a0btQhKrvBYua5X9UK&5?8mnijX3B1i%nze_g(
zyNFiBci5+DUg3<SlX4TL9>=!LYBf%N%-+nJ?fNURl)0z}o1Cbcw76ijEwTHt^>Rf_
z*8Pp4=Z4N~c@V+e*)o(*qHm_cZ0j1utjtmlozMQjttmd`{od<9PlIV}ov`!#Ug1rX
z{l4dRy>V+M?0SO2Z+9&_Ues<Jn%SoQSYtJ8mG%7QPj{w~v87=(QzZs38RC{Y8qAD~
ztf|7U=q$zVeP}KJ0Um@cQCMz_X^>^s-ja5-9Tt>gPqTx2)?l7mk#@}K?5lr|Q04?B
zA$qvMqgV2{cJ#oh!C7*j4OPjFTH_RjrBXN*x*zA7vL{u9X{pMB?LEYut#I$amq~O&
zsnf9uIW?BskS=jomr5y`i0A|d?oXFmYD+dZ43o9l3}U_{0g)~3uo^mpU_ax#l?_8q
zDEYHkalKg1Ghmn2_%2h_D|2(Oj%u@I9d^P6L0+S&AaBOb+S@w9$Ja+Zj!55!411S*
z$wwkKyxW^H%yPJsJ~5s2S06-n?|X?^T~o=5N*6nxQ2_Fc`Z8fI$0y~b*U_TfUekS6
ztjeBQC@)rCQF66qd&?+(QbDQa>Y+hEpggzyd9$;nSqWj$R@m+2-8MG7bZ}c^XlWOT
z{Fn=)Q#nm2%}1tHEW{e*P=S{4{!_IfZ5kGFzd=qn3ZgB*vQTq5?P+G;z6AXN<3cV7
z!NUGtVbeNvCi_Up22Xf8ottbQACeuMoYiR?;jp7zK!Wh)yLK3+PNI{Ex-n<r>w!%*
zyG3RZUtx-GQp_>?v6Z6@MjpUvro@iXjjdC%`jUFA&^K($Iwm<ZMaR#(aV)~XwLNjv
zqxH<2E-Ug@dgoIg&$?4DDTleu67)<MJ}*jn7c){=NUd{ajLrnvv1kQDl*H8oVQku5
zOj~|7skaN6Gtd=+Z_4PKOo}IL*c0oY##Wcu_(B!d3q;2!Xl}o8>V(q0=WdRP&$dR*
z&*n;q=`QXeV8s=8MB^U4NGDx+sslJy4wd18>rwgGv(XxfPQ@bjuY+Oefo>i1jqMfR
zV-1zYVOPhUw1bcGe4n9twFReT+5EAs&YKJqD;76)?IMjOh?&I9RM>vk1B$9Y$TOt}
zP&ygD06X*Ne0cB8PO3?^0Gbt3Uycq0?KU~@?&{mjHRNnkJS@-X+dTNX5NL=QnOy;f
z4oUm$lf<_L?=p_+G;00%t$Yr2vAX<m{Q@OKH&KZppxMB@6z(u2P?>P%O*sYmv$Xfu
z%cxNjeR@C~Z1b2~Em_La$t=2+0Wz@lkBL^E#yD9Y^za_+tJ{EH7g}5r?AL$S%p||Z
z(g=}DQOlV~assU5Qm7Zgjn3E6HE2d`b7HoQY7K6uPNtE9eSd0Y9i(gM#>pA8v58u-
zRsP+R_x5wPD`@cwiShzM_6g8y$R048-e^6}oYsXs3g+t%So-y9C(PX7aOtJ9hZ33{
z^#JmS^aAEfNsMHgZNqHtTjqRQW^{!~Aqohyzk>CWX)sQw_+YGUfs3ImDR01c7S<qL
zH%;yAkfBZ0?GM|@4r(Vt%-x=b93I`<=KfdKSq()oJ}-;V_EQ~2DtDDxp{kb@N?wHl
z+d?K0@%0$JI!-T<>EO@+dMIJuij017Oq`#5RKGZ$6RObmY_-cX+RzRvj++ci%46;x
z^2-aVInz;Ek@jaKeM$DT`rjtb7AGdz>$}Y#FMn&$`DO+O8<E{!R(#X+1<P*5o&e>w
zQO$+68bp*(1Mag7%n1wvt<c<EO+slJ@7Y9kgqi9k&9J1o3{jl+MtPTLE7=Y1JlDdT
zb=5sIw7z4QkG>w<r0^{WYGMxVbD)#K9yF}r^)Zx4HMc8?M4afTw-Dym>@RY%*iAa)
z1xzu}-hhlJQ;%lQcLVECo<r-ZG!II2$J{q!vF@#*3<|cPCfT)Gc+I{fEB<3UZYR4T
zCu7gOqI+W1QL^Wf%}q-aCBst6FW6~9cLdf$Y5)WxXM7kk-jIK<soR#O!gA^kMc8Gq
zAN3Z%1%_3qT3}_3yYju+uDz1zvQ@0dgSSL0vL3CMCCtH2i<+1|470fOK;xjUK&6y&
z9q>99@MDJ8PlY2Gc-~%R7A9uMw3ng#F7_<K5J=1y#b&cl%NiobR5ed;RqOW|pDoVE
zvZ})zc~{5R(Ig%UUA~+#FIarLzWOYXw%QV6&%|qQgfnbifM&Pw7<CcO!GcxmIZG6E
zL&X+XTa+>A#C6+X{-vE@CoMsf*pEKf-l|uEL~;|pLVQd>xoXiC|2FwRkLmNKaW|h6
z?SDtC8L1i(|FwUSrg|D(mWN1(nUkBfhHT)}nYai^(!(HCn}bKdZA<zD`0SpPS)hJ)
zOWI(-hI0C?QoczaR~z#|5mAL<@pDLg#-8yWj5s0Mg89LJY$$H$Y<MsTCoE@^ticd_
zIBWd5v!8sOLrvNuh3ggP-8t;Ry-9mp%eJo68utW{JsAFK5F}TBpdaGl)H29<w&+0`
zkJ<~hOt26=R5nQEzOr+wgPfr2)L3Sb@B%0Fd<OfIZ1i&3Px0tvS5;A(Z=yuYVB^#F
z6YmPpV-r=sdb5%B?Hqcqo7%$*EeIrjKtENdNc0Z8$9i^<n-j2W;Ns=|m9%lgR9GSk
zoRXWme;CR#`C_{AGFGhe<opUEe;e^o#V>Hs<|^ELe8OtN$NsUwe@;Tkp`#fAlfEg3
zj^~7ck*Fz3+|8V_5Z?PNuOcZu(2L6>kL3O1iPn{GW&RPHR4ceOLIHWWNwEUCggi^C
z(m5}mxIR?qCeaTn;oi-L&z8`l()W{=gVJU%dEp?<1ZBnKtw_E9q~$?}K>gEzIIkxE
zMy7W6t`YIO9ppyIJfyM&K|R4O%fH&!stq>9@?#MeRg;E!a;sfrU5>x{cg|7y!op$w
zs@`4YaX+K6muNo(r>$1(D_AZl1OrA^)#Qq&a;sD0_gZWrPt}^Am$#gR?|V`7yx{rs
z0+7jV9szgK{Jax~+16J1i_cy?fBy2(y@?CcZy2vVd}D8K=#kJlGk45{WN9oh3(mvo
zchygY(!{euy+U&5II$2Dy`<=mSdGV@hvHxssPtC%%qdVrKR#=?0~`Dqf{P8cX44e3
zTk^1`<L0P(;+A}0V`%)!F4#x<ykgQb*k>X4M^dSJp~@Mi$8<Za0p->4W`}?R9+k6%
zMr)jc&J_kSs;J>gB6BXs>0uCcUU((?FuhlJji8}DN!bG>9$jZPw|znd%A5z{AP>i+
zn2|AtzPR6bBv}J*oKjp&N1lGd^^=I%S}G2EcMaqmexn})5Ed%jU8Ba&GsuH9DwOMp
z5@LE5-tsBEDDN)}(elCada0WIX;!UcZ`kHM2q@;gXwT>TXqb^MynMg8quOy{YvejD
zWisq8s~`knKyl?Iv9OLVHc;;Fz)jIyQAbHc!sRmWbo^(iLbNCAB0<jo=p3LeX`#*M
zY)}*xrw5SF+<0FP+VQ^>pu-O{&OHn)PJUoCS#+0mR^!Vz{|A2|3fEn62BGWNBs>gJ
zAWP|>PT<ZVnj{6xXvis%$@pr;=rH-D3@`xfqG(e=g8R+ED&JW=4_Md!Dv1$iZKEJK
z-ldON!P3Ff7KFZO&}VP&stq$F3=>4O1tf(8v!)KOgYG93{zHO$n88#>QSmkEyT~!V
z5!SoCSYbLbq&^7%@J7YN<wEZ`iXP@BV$K^^la&{sxXL;<vtRt~F8MNU`GDyzeM6bc
zj&(EQDRxNML9c8Nl0V*@lC8Q4r+5P9c$%0EoLev;3_)pcs+f=isd2ZF#m3~7ncv4g
z$vYysD}$JNaLaH@3>ed<&JCi?!dj#ZUCAri@VxhI*7ouuv^;ve{l<g+jC|0%931fK
zxu>CU{dPops*b`?>?&IeXXIBB<v!*i<;OC0Ltm76JmffIR2hFB28*ID-nVX7vz4>I
zd}l9x5yz#&ZXL3<Q4r7E&{UQe)UpkT9^QLZ_K8W!sp{^RT3<W<1;r)&2NbspK$P|W
z2E{r3_fQ=5KcF}!e5wgO1{6Q|r_Pm_T?zODlp9=x8l=uYxlNMEBIn&M6kg#sqE+8k
z7|~P6s|Q?&LX{_zwTRqxfIvKPl3<@pzmoWnxgXmNa1yM`8C(FAY>A(c&d(e-_!2FZ
z%?_=xt*XOcNv|@vt?=;^^hNY>Pj*@)U7s#(qkh>~2dGCG4$o*wjQ=NGwfidxP#`d#
zA>R5=g<)-4ifNHF*f*n&BY)18JdIU<@E`=SbxhbqfpQfJ?Up02mm?<tH(KIVN2HDg
zk^VxY7bJgQro0a(Ud2Eob1iDeH2(T8U<wyX5K{R)@LU$sQ3gx3M%Z}^Y#2MD0yIDS
z6S~&{pjeOlKmkl93gP`e>)S4rJo*z0{0?tuFW^SERgl&mNJT?PT*wet_CU$%HU1@@
zG8{_F>EmwP#xV``+Nna08=5c;lol9VJANsG8k0;Y2BrLcSXe+;r=|k>H+prC266Tq
zu??778k2B^`fd$;c`>(&sq{WB95+>f2}?d`ZU0Wj&8EX}Sz#1tfDPILx+tH9ZN5RA
z_`^o6F$N5S0D0|8GeSC-VZC2T*>-ItB-@>Yteh(3!SkNN3UdI=g@Tfadr-^{uu=XL
zzzh8dllJv%1l`Y5t+;^<xTCah7%$;QmtJ80eOrS4<W0PT?*oMAn)-2o=48t~vLaOd
zLikY$*(Q}EORNo@)Df4h`DZeq2pfc$O)l|Et}+w8Edzqyz4XXF&B<0p7=AU)0)Vjd
zUNGz-z{-w|o`P<nF~JV_eM=c%ok+e;nY_F8+gnXWLxVx;=C=T(asx6{hrr>j-f89x
z-~Hkny6`{3|Ez#?eaGq>T<IaDe=&20iRH(PMaD(}bsN!kp@=@=X6L?=7BeslraBr4
z5~`P}Q?oU(UH`0s0Tk}yZ0IK6ucSi>Ahw=G<c=-`RQm(0fb*(7$m=c%>JAf$2XOE}
zky;3#S`~1ihhh3=2>+xCjf6vqICN86XePpgE+HY#w*MmNX{c+FN`Nu-;49(*qvQ?2
zT+9##dXb2JKu<l8<IFEkJTZ@W=hPcZJeC+VYQ6i<&k`BXdkuK{gfvV2Tf%k8WMSC`
z7s`Dmx{v&2GX<YVA>MW<VLrDp<Wpl~YCMIxvf(0f87A!&;d=+-53LwvEO*zvDLJ{Q
zTS8cBMTokK4@>POAC}r6yhX~t`ul66dKu9Hf31Yxw{OaR12va^g^$_(rh)&#j@tn*
z09pW6n^VGayD${$sf=oi6n*ygiv8s237YDQ13%^29x1*>=p|ssTBNtK^TyD3gb6}6
zJv{1Bip;amJM)s#f+&T!Y13EI&&5N~=@%$kurE9Swftf^b0`a@#A@|(x-^q%NPLGg
zuyeh_%k<)~E1W~;vN@hD9G9g}V?}3;Pu#v=cS!ET@_8Om<{)ES3a3ZqJ5&6n5dqy|
z%#E09A^|NhgT%i~Jw#_6?onW7Ra;X~kA}%*h&CPlf;)X<z;T1|>FV^aq!8dDvxa@-
zd44Z%1`9Qj07@(mVu(4!GR&yfYmM)I=6fHz!j7JW3SLb9gAj-6@I}RE#dHvMe4h2Z
zWhAShk>h@Ez(y>%J#>$fZA3>yLE57TINIHy0K2O*D`x+`zq+LPk;R68?Kxu5RhZPW
zxnQIB+ba*Q?$LeZ>#$>2B%McDg!R^dh7_C`4VQ&_&aSzbsLt0>VOSs^U4ZeK<taNm
zoVUtZdILtr`Neqy9W4d!Vc9|9@ohDKe)#*xz!kT<uE`_U22FwI<R;#G6JmDWw`_>L
zh2kSppjGWo--3=-Uw+K2@tvtiiXFm_N^?_#e__|eUVVJVYE!SfWsTnc$0Zv}ic(J=
z7bo6w>>NM`G`BY~-AJk|If5^O_;C7BECZc@X6lYWtvaRBu)?NsltVu!7sepEg`?A9
z-feo;y8Dl^5;W<Wt?E;oGd0hyz-{_NVTPbc@Ssq5qKRKPyi40j^(*-rauC5Ri-+Ni
z`cB+fc3MX5Op;sQ&H}|L-MnD=y0Di$4(Kr4G0j8dx#yii)-VkNysR^vcYwlRn{Aw_
zjcbRU`&wDjffn14*)4m$s~ZbXAJiB}>R8xXBVu;Sx0}sGC2Kyu6SaupSSc(-6M))S
z=fc(L-CgOZ5mdkiSs4dAo=B2=JG~mU%^olR=|F(^_x8h1Ikvf~KC2O{%-a?&<W%7y
zI%Z`w3`_mHLF}BIaY<6ZuMW}RE@CHC&ywH4mngKV_W7=DcDBoZ^<Cm*-smO2R*Q>1
z8l0bnN0NLBitavUv1|vuKMIP=lXg58l9Vj*c|z9&7E>y>o&H@JOGU>wf!iWg7vxKC
zJgkW7J&D%6ETT<Q7+vOAo#h(}WZIIsfl1GTEM<s6=c^UB<#|gxrLooF^Cl`NZSn1~
zIYHqO@3m66)d+fkiLC@OBzm23fvHhp(dR&)E$gt;K}0?J*e#hGlky&0G3fa`S>^K#
zbqXrpSr0;R2imPql&#O{Gv>r)ypg-9nbkjZu74a{^5<U<G}?&{CdveK#9=rG-B8Ue
z=%|rgsnBocg4OCE16lAMw?|i`N<%zqy!NI2{SF2^*xty&sDOQV^79bL{oT;)TJdNy
zG%s_kATa*?p>U1e%BhG%iB!5Ghu{Y<Drh14%RMd$$T7YPT0@;Av-**_xK0-Km#Qi;
zyeuayR5q-+M_6)k<c(<Oz>3ei3z|9~UaXzi-Kvv*RU9xZB~`17z!(;=hS9E3=|`Rh
z&6%?eZKcc}9j~|aRZyY{Q?}!qmqo-H-p{46yBo*8k`}mU9jLc2Pw$)T&P%v_{ES-`
zQP0rpPo@c0L;jAIwC<kPNC&R}8DfE`RCD!JLT{7m$ABJEtI&Uc;VT1aX2bCJJ+tF#
zdu4xYA;-wk7WSuoE%;uCs^@t#nK8SVH7o8^%u~%VBmagOljm&G(|SWe53F+|bf-O6
zr{MFo@Of@-=)=1z+u{WC2oGW&6<-Q5b8qdc`Fwn-r2@pI28`p!!Z~49XF;XVo9%4l
zaK&Nk8iw47r7d`_RV^%la-9%ZkDEZ3TL;sU`d_SA$p$HB9V{^2o6W59;LYWl_NT2;
zxbtGhhHCBygwd9km0tW?#XyNPtFe%|)|Z~W?^EuxpXPtH(>{_@uR4!Z9;BaOV5^K`
zoDHNbv7g*5E<(!G7!0GWY<8Y6Mdo;7mLi9qRmra-)^t^u5Gh#=Q1;h;BeQ29`9$ow
z@L~0hqj|w6_dj5Yi|gS^ZlkgYrl4nCahtG8D4s7QUn=e~U{33wC36#sttu8(DoPOT
z`z2T?VQz6nkV2VnFH~PEa;cYh9Z`hT+$nsn*j+E56}k{$nJ_}T5{~Za1r-TWAIMdG
zC2fED6!ZTykR^-As#=DQ@urVBBa6%2CKTVL%_?cN{ZjEga&VSkqfD`>QW#qm|JWfa
zr1#>d+J>LBG^7cbJ&Ty#-^+(<Z|zy$G;nh6V$KUFIa?Z%j<v|ME^@5o_1{Z&6<r@N
zq0YsE_q3+Bj+q{w`EjohEZPnUTSgqj-J<!`yEfmW%;1VCsGFqATdAdxh>%#MkWr~p
z+xTD=X-tu2!t@?7?$T5i^4K~fB$FXyl7rIbhiukytx<L)$K1Sy9oCtwt!Hh%>9o~g
zXR)=$q|QBvHlIjPkNWc)ngo@o+e^ov+Rvmq?KR$9u1En1_547;odq$URZgBQ@18Ds
z+IE~XS`cJ^^n<u(lkN1bLqR0GU;P-7-W3*Q4S6c~veBWhBt?UiclkKioa39cr4ZW`
zEYnF_+eEAy5WmaH>N`uAVn{v~JUkh81>YT#KQOsDE{DzBp6r9T3)^ismA2fE@@evK
zCDFIQb36E$<)7oXQ%CVt!kBg>SWsM|T0T)LiT%}AtiHc2X=vgf$Z>~Tp-@Ehz1*t)
z&)4}W*FQYb5}8@4FAJp^lqo^UIO%9*DLIyKMybP*1Yp`%xf&lhHl;-how}=b5u1CB
zH)l!ddi{*hd)UP)@ua1iQZtvaTD&gVGdMZys?>c6>k{Zzhy7a=fe_@cq|aMjD7AI?
z{MUoTY@IMw5L*n>`H1h5Vs(1b&y9X9R{Uwy3s%I!)yYZtQU%A*_)GyLqUN)dISP=s
zjQT5STS_gzH&Af*sG_W5^;rOk?~#FeaMy!Ulv+HThi+$L7GvQb!3MaoqnopQ#+@fc
zakOiwBbHCOyi}dh<SO#CH9uQnd&?)$%HGP7^TyWk+FAXTTHyJ|huqW|q%ltg(WBHA
zjyxg|Lh~3kZ=8%-L8`3M503~#n<-a!1F&|qqs)b8JcMt*#6HFN&V;O+SI@7>7A#zf
zZsWdF^l76g+eGCXfKLxOWK^}bVo|+e4q245Lv!-nzr}8&@YsKT5!Qny3`0OO-9&wX
zeq!_*(^Mc_#O|n~7tQYx%17tm$P+C0VO?(V)p4C&?2oNu3{$q($4wan;p<YnD{kdt
zn@xW_*koH8;UMau>D@G)Ve;Lt<O)7r+7Id}mLc7lZI9Ta((;r8T@5FS6Orj0TGH7(
zTlWPo1n2lCmbl%~KKI1-3B&mHqa#;0PG6w;nW_X}=;A%DSooAt$AUn$kXgyR=Jgbd
zS0sj<_}pub4cPQXXv*L5^9M>|FI#h5d({T}Zx4@;&iBOP_O;n{Th^>`_Fde<5`>(x
z4B2{SR1b?0?Io#Kc0ijLm}QLM{-CileJ(LKVAp`yH~nEvegHDV*=B|yV{1g9)uW&i
z=Z=;j!yN<3r?**;ePOMp=J}PzSUfLyamiU%10NqO87Y>>v-Sg<902-iUvq_FZgz0R
zV#SQoY@Y#fPifx3#A)V0N$t}|0|p0}1L65u$jNmh>Dj&?7-8qboI4zB+-&oQG~im<
z<d5r}fML+~43aF$fY<hUA6Swk^7k<%R#qwwvI97Vadoppj9gRJr_?5$wf_;{;ix^Y
zRgRYbQOc|09Yl;OZS8xs!4^kZr_5=mONW|NjvPP8eWkcy?tZdc(hwhxTbODsUG$>j
zr!MSd@7|6FSU`ngJD;<^V!83wQk8R$UJ+u{_40%Tn!7<hv#|3Yn%Gi^`00-Tpsj^A
zO~;GXsm|xLz^T{`P0Lc*Czy@GZ8BN`{?6C9bBh%jUESpQ{Hj%DAP>^P2woO<xW^%G
z<2ihtVVTvDjZsWqwbid0<3OvJm^v}jC?FeNXEgj{23ylzowmHGOc<X;FL1-`88H2;
z1V?y;es<YLj#h4v+4pg>10?~sX{*-#wzHoq6+K$tyUO*#F@^1}NUkPPOPQ)mTFDz8
zM3V?3-jE6nW0Ydvr}Kgw4P)gEi!hOhAU#!t^u(XG=jHjZo!N;4@0j|5#x#D&x%42%
zcXw{}|07swoOVU|uyrhTo48doT@3`SOLTNs!uu>~g#cc$*T1sdgqWWYW2a-^P~+GT
ziHFG&%(}6|9ed6lEbb5tTZ)Q{J(Ol9SI0qlZTQ3%_uJ7u83&75^LF3ep&@z3#P!ZY
zt)eOrH*5s;J@Q52jKV|cn;HjkJU==VF=LO4%rwdr>k{uYZ2-SmD~oE6qU7j_n0%_4
zypGY{JiVax#2MA-)3U~&lk_7`GmB#Jxt7H2<*M&+3+8otA*J$-HY57Upcgj^gyLUT
zP#bBB1Btn%Z6iybHsw!Eg_-qjLlp~~?NYt|YWcY(G;gQXSZO?0^-E)ocp$mxZtz)+
zK|18Y@I^K-)@#)_iCJt*C4!w+cvq#F1L*kI%K+|7$~<TC(O$sz!LF+P^^E|6{6t}v
z8=iav<;Pf=yHl%@?cNr2VZlFNeIqJyct55?-P*D`(iu?>z@%;=BuvmHj-{DluBwfk
zEsbPRh*q^$jggri7^GW*1sZK-yX@*ug>k|K)~U{)v5QpQ8>dgEzd!J{Bs5b!CjPCc
z*hncpS`(>N$e9ImC{!qYgcLed(WikbE4`Ae8wjyYLV6|mVyy3NxMDUJbp?l6?Z0jm
zrtbSJavW9{<$<=>J~!RG2Ps|b2W8Ey<E-1?d8~4w{J`x-(5<X4P$znm&bFxG35=?8
zS-Nb8x=BF;l!z_FysJwb;_>g(RumV!Xw3kuJdYhNA8Fa7n30jWf50n0A#;GiI{i4X
zgeC}knEBR=_OLyYl47f|+MprW*#R6kLQaRQKHc?Uy}8KQph~{wVNAg5SM#23d8Bw{
zVwsVBbV;PGhI$qTwj>vzs|0MDDqmytCcXpnmq(-RR~`lg%IOO^tC|E*iZvMc&}-AN
zWZo6KSJZ<^p6#RhbL}%9G4u~GyUU6_Odj6ujHE;S90IE%VHol+)7`Ke=xZc_SoR#d
zBB$!qf=zdpOeg~W^xcg0d2HeCr!oEDmK8D6_f<B#p*H!FvEkjY(;+%NPxFzZea3sX
z_4^$?agTD(*aA0!oA`82`&fv%CoFyosgAkI`<Ew>-Fqew##3}3+ojqJD{uH9{sT&S
z*BW)go@bxA^+@1fV6^=_Gxlvn${o$mT1q%)E+SKuRR;a?Bwa)i^JJL~7ec{}F<4HW
z6@1n)I^i;IBv)I_nL7YxYeoSDJ^>|}BT-=|rzc%5%+B}N(`51D>8%|FF)e$+h{T2V
z<2~{{;n7vXfG$K#m%fGOQ1KOznrME?{=5l^LeTsS8+IX9{R{Vxq8%k${p_N=)gTC~
zTa+Nn;rtXDfbWWz)wUT%(#!e72<DVQM6=$***J~%uaMy_wJv@Gp?yGtdQzwP;9H{P
z945MZW|?ccMP&+IcXO=h2DUP=XNh+(GkRxWvzs(YokkJ4D@g3N!n;S%b+t(rHG#wu
zck4Wd>V<bSC&T~k6#m~bC}1$`mQO#f;&*xUo{<!fg%8mSWeR=%wS#Sm^P3Mg-xS-S
zk7?5kS5L0RSZ0x{Ju0c`Tdk9<uP(lQG*L0S>{s%om74uXr=@be8Un==lxvd?FBzR#
zGG(TMEMLJtgyb=Tk2iG&RG6SWzqL07alcn2TxQMja*Zzg(Jw6GVgIv1ullyk-;!(d
zG6E8t8M%XwKDQgShFtNVWm7{B;FT*{0O&VQBqY3ee|`b+#=2@@Oa%>F3p;}mz8cGv
zS+QR7<^olR3DL8ep2GCEMB{f+`GL0<SP!v69{lmg!DScaM#;^}_ARW{`PLy87sE)h
zKFty8``yHBE0qTXC2MI*usAt&s8}%v+cjDnK96gr5JrcVey6aA<oF*wGGWsfMq7qP
zjOAty7<WXE@L40yR{RSy1oy0S^WXPRGzD^j5FeARF?j{zs!Awc-KP!%2JuhCGS2eG
zBkgD6-L@t8G{VK`REuvDb7w(vQ)r0(z<_+Rz00E|`OuW`WvB0YosU1fvdgOuYWhLz
zbI0RBM<MXgJ*v$Xw}o1T`F4a_4*PqzkEaagF+AGsBDN2Bcf0Lv3$^S#R^A$F^|SKa
z$S6Pmuf&0ofxr{i%g-GNJ2*#7QX8nF>C)Rskp!Q2f@(5Ac_yj4AV+jK>u$C;RQK3}
z?e_!BqH;%Yaqf30C`l?TF6SQ~vP+m}%{ytBcm94LE9_impp7SUAlFYf=Ygq<<`6HA
ziH0=b^LgN9#9D~&?BHs$&sQf?E}U`V&mDAh5J|51>MDw_<rn7Bk0)PCCSNM_+1%@?
znBIMxmx`>o`@q|0Aj!VH0OZ`xg?;SWrtx>u5EU{Raq1EvDiaG7Nsy8}Mv30XU5qj=
z2yzjfV6z_;{#R`onpn_a^)1hu><{eo8`?OVP6x8`gN=PtL$d&8_d3m3aSN39^d;xa
zcNgeKMl4jhz*v+q(LD{FeCfpXinW}dvE{O1*Ox+_F;6JLgHX|hFlW2fnJsDIto6HM
z7ZD0Rzmg9F#o@luM?VFL|E$j|%lM^fm>O#NkD{W264E)w6qG#u32Z2l@N8$WbfLh_
z!oT54vNrx>>-ZOE_bj%PoO<aD<URYjbK9wg%;6l)0`avcK3Mph>fL1ylkGP`PE9&b
z7Lp%(?-vJ^q`f%zh!mbM%z$`&COp#}32wOP`-7TSu^iuv@?)X$W___cwN}CT0k!8z
zt&nQMIHY$c%FUFU+7I|_VS7~1eO{=bB?MYM_BC(5G&v)Gf=g))jesKk&-C|ih?%j_
z;(6+_3cWfg>fmDZ%pT6_igtm!_Iia!JRT^MXn3*nKW!*Uac}24ucBNY8T!;Q7Gb%+
zsG^Z2h^MVB>=O(->}?{N#W6_;SPkc?e38o8Q1pR3HL6VY=pC)2L?t^y^OTtn`-v4D
z9BojHVJn&1qTFrmMd2Nnp)+)Qx_kQ5%p5NWS}fWhUh?!BFutBT{q56;9N;1W8~B!S
z7QQIYXlN%oLh01pjD_ZK>wgS#lyeq8SKlXJNLMVy_P;vb!?@U0>-aELKC5CuT~5(G
zj>Yn~r}yU;WzLAA<K|EL^;|SQQcy27q%}-=${o+5l<MX(n@r*jqc;Myz=ZyZ=o{=r
zuZLTgx%3X<@Cxh&cf4TEpk4*kU>REIyXx;UQ;X`OXyMIS96zm#*MJza7vKWbUDTD(
z0XX8~V-5#nNEz2EbTEpnoKnS{TWEq9U_lLaJblg*DStjKI%1iy(<>%Z7IBK`@@V#J
z8@j3E?S7T$F}X69+htjNl}bMx$;nZL!ceaeo`Awx>l;#@0k@Sodnqc3!jYT<eZCY$
zF#w$p*pkXYx%YYR)b-9*xr2o1^Rg#R&Rdbp&LGF4gp7fkUfqLUzPBIu^lv?<8<#7H
z)cV@=|3d8uz{!qLzj&t*vn}B#mNY@Vhxa6tgm?iWvQ3CGg<pQ53_~jQs7aM%@==+l
z3nk${lK%fL?Dq|<8#)PVHW$E>Bk(HgfHnlrq^o!P0;{W@hdBb*O$*W_uajO1)%!~T
zd`JqJLSCd4GX0|qN>^VY76K$=1#+pDLNu%xzZ*7`0V^pUj*)?EECo1V@T=uQ^t2KF
zy9YiOYPe1IeI>Pi`VS)7Ed-;E;+YnNPB)BRV<8|#m(|w+1Nj3gEcnFi+rVd91pXty
zt=b86!8dY1w7h=PAbzEzY$N<ZffNDymWZKd@(KYKT2%;Q&F~(1%)gToq9w|$v?;hv
zC)9;9VBkV|O`j^Zv^+kwJmGnDxF%p-7Px^tlAe2&^p#`|crpaDnO#$~v}ffk`0W(K
z>+j9~Nil33CFVd>dh2_24l>l&I|YtN9f7y#?DLhhH0ugH)VEzY)^*y2B9j3J3W28^
z*8|J%Di#dm5d|R3!&8k~14j6K17c@7ENC5gX;U?H|M*7s-;p%9#rz+br59;jf>E{b
z`{v&owJ8J`X~Ii=(>idyTw<rG3PRe>1##f=$<uGtx`tG~lKdUb>Y@|F0JebqHw@Ts
z-BSbBj6D6Hk=LfUU$iG`NFjXuBJ?AxoXDN<NEo}QK27z#m73UE_^}@O2xt361bLsK
z+6;`VPf{2J{X&h&QJ7ToVN#V7B8qZvC`0YhV{?x@{sIPdLYe)Qbh}t6O$I(B%?bK2
zM8(~qH6HCk`4d7sEm!0<lLq6^X@x;1{m~%spFYLF2vISc31XM0LIfzUoJsH-I+Fp9
zo{Xgbkwj?2=C~?QT}B@&4W>^9HuY)#{qR2r?SH^rtJlJfm%w<{U@0((QxtB1w^3d?
zlGI{&%S(VsM{z&Ul>wB(Vj?HO7-*?=Q&k!RuK+=P4-nt{sg8QiR|k`?7i#oLrk3J{
zPg6_r$R}8e0*<DOX~X{~8xA_dVQK~m{D*FQC9TL(twB1=ap;h?ld=*LaRvdon=hMr
zFQ=%FtQg)TthYdb>6-Cd;7)f-C>7Ah&H?<D&wGY^CH+)F`qH30fWbVOz68)$X(mON
zww$An757pMh;E4<vA9ldMUlVD$O#nt6vtdoomZUPUYsx9@ZbP@_eP8%BhRViOg3B?
z8=d8YZKh1`{J>_oqO_c&>j1ZUNiQH{N10Pj+&4W{u>53N=qIpInE@6m<co9-y7XxW
zguqNgjx83}OIg5%ORYCZVgy69mag#gQs`VuGixkdI5ZYK>>+1Vn|cjyZs$1Ua`f6b
z%kwcWr3g54i7)Ph3;}S5%Aj^|+8~sgT#&f|@f0Bzf?6%?9S;(@)es4+$6;RfX#naM
zD@(u)youQhRlmZ5cd4)>UJ=WhLJigVw(I<BdRC~@%XTV6wGIyLzU1dE#{?mMwTNC>
zL<Ti}B(&bayLCKbcAZOyvz1ZYVufwRGLWM&DsQ6twcaPGx0S)%-yoD`*|#To{DALN
z$Boa*8~&7LsZGC1F}gW2x#hn9^>=Nfgofw-%$heVV`h|>6&8B>xYxJp#oh*nIsGz|
zjQgV*b!j%(Auv-H$6hK!(9bo-qZi>MkJxMO&JgviLf>Vc&KNAQo2*&(BreZkSHX+I
zJEGN33aabpJ=?tVy=DU7ai9WD#`WJQvtWW|us_%N&Qhm@I2%0l<g975?LJ>8)T3Dh
zC)dStG-Zh$Bh(NMHN9tmMnNTUf){1$<vF&gr`)x-KS9;+le^Zp^Q}J>2%g*wBB>96
z%7U>s%oi8bKg!udK1c?SRJtA&$YaAyUja(LP_c}&{keh{=imI;zdS)yF|Sxbtz^w%
zb9<{D3)U;GmP+<34CAsIB5d_O4D37k0#>U%UHUuRuUzR}RATn&T+a3)O#30*ppr1g
zHXd%l0~K1m*1|k&cV&Ce4=-L^bYjGooI^iF<Noppw_2P1c0}>%>HL_KO-*OYtr^&s
z&~oz~?ao$*_>tUb4#4YCyAWwMWj1XgyG!nVJx^uNIl!xQ)cJJTTh>s;FvGXBbC<Ip
zb!^wRQzt~(GUjn8DECHw@IT(ir40Iz34Lv!-CiooelDe`EmT!*vqcDEF4+Kjb|RRC
zE9|#QDRgo&cz82w85i|A=BSZ~uEV}gnHAWx8tarph0d`zb&mLs4-C0BeYzLs^s<89
z%D<0ZjbB663v#SUi+z|<ezvx5Luvcyan2^zy~y)*!w^Btfb34?W~jo7G^49CIC~LP
zTh6~&VH9`@yHyuXtz;UrC#rpI8=V&(n$tmBq9`k&##I<%#_gX)z6Q^t1$2Y@te~Xu
z#9JB5+h43mo}}H)mF$Ng7dQA!%$z<YP3201(xsm{OIT45!*S>P1dD<4W-g~*H~Ste
zLK><)$DB&bsny|07lz8rQB_@%*Yzk__o>=JQAuKPcFlwS&)`?Mt7+`6z^R+;o3M>E
zOb=<m9H97du4)$OSu9s)(iTfNGcg|exzb2{3IkL+E1nZ9CmUdNnBC&VER%sr*La#S
zHqC@LJ23fXzu1>=ADbOC+0L^U_~p3Wr;t4dC)=-TV9Tery<j@Jjn^4V==!!HhmmNn
zPeXYsAI^#?R~M?DD2&fBLA8b#W?{Q)Xx2$DC!dMC`?(fqnXkDznY%WaW&(~3Hp@DQ
zIUtnjcHf(E%wJ(2FAIjuk(X~VpTx<7iQS~;A<_ynEp=Lj8M_#QDb*HCTbZE#eXL<o
zLkL7gv*&W`WRh8c)R+8j98nxSN_>y`i;(ZQn%%*5KIS`Ga2>v+pJv}&M$PdaG(Mgj
zd&!QzAkdJoCK0=VJ57F{a0$);KsJPx<QPI1b3;EX|4>ZNx=^N>v0gSh`#qK+^M8q4
zo@`IO?`0b!`h{1^oJ$yD{Mv9qeu{Qp%x$v*xsI!fx~=$W)7a;b%s{36St(@|@m_-N
z9PRQ`5<p!^S9#;-6-G6g7!nf7k`6EKqs>OC(S@t156|%hZlJVcht@@vt+Kex+OS;k
z>B>l9AigOy%X@$S>48&$C85!o&$ZsCeFv*21~zJ@PT4{kLSlO;>)Sm<zB-L#qq+gB
z<di63fiPb1yfAfz*vV~XDAf?_kWnskJmuPVLhfI;Xf0cxH;|nAa+8C@&F9@Nl=)m>
z)$B;<vQYLZgi*v&qE%wb*{Yz|@W_Q@EgW)~*)17$T40626$r8l#iK50hloXH(?yQQ
z3QlsKFwV=heN64TdXGM=JD=TPn3T0VTdVt9baV}o7I2MFB371Xqik&(v6bldO&*KQ
zYT)BwCCu^6ulIY<x&Ba~wLs3Bhnu!LGvq#ATdaB`T&vB@+s1v)dzJ+XO#OCMv|69A
zK1#w2lqqW1&4VRfCi2l(t`pHDF)cd;S&yu!gUwd>e0e}`lk-CIMT4J9Vt2GGLtSGz
z8kua5svg~vxZTCE9%&O`aG!Jz$+J+tO9wSD8{ZvTeVbzOMX=JQXS5tYUO0$!Z5wer
zuk9ARa+wgDrJ@EEH*W}@z1{%e&8$kNa>lOGBk^8;fzCo{Nk!S6@|y1I4*jj>B+j`<
zT*yG|0PYhqoQ?|X{^o4Q5)@I&HwyX{uvtSc8G}&e88QiUQ-lx7c4EFQFO?PZqAH;-
zKP)h-eqOR*TzNZKmS^1arvPp@7yJF6w~cRgp%+vCo74Ixvnx*dBkXZm_yPFye%6ps
zwdY}hLZs}$8qVK`47<79(p$CG*+8NBvROQ65SaE87J-D^$99V<D42sxZ6V@X3WX|i
zjPt4on0{AP&ksfIW$V&|!e_iV6r?c;;jP{!DDI*6<r7nf_2~**C<SzG)cQoOB)^9<
z!B6!glu~mHROTFQecWDMglqMdo)^w!54yC=l4R<vOZWG+diUzI3$pu)+e=0(Eg@ih
z+_S91wn2~WuuIsE|F~Ro$!;{(qhe*+Xr-=(IusFo54&rZaO`Hodx-vL(qrjrlC1{5
zm$M%$hcTL~zKBTECG#qlLRuk1p(SeoKljgd;@^1?44lsHpCoeg2Eqy6(d^9bF|X9L
z3>m|iLsuk4j~4oPY;3l3H`;+76G#WUwf|_^e6wgDN{aA<T(<>M8HDtG2JFy>egsgO
zlV>y(4MU;e#NL6R`y^sWz8HzDc0mp2euW+Xa)kwF7gnG+U*p)=IOc8ln;lTyi6vP6
zI;R@ivgb+O9emsF8P$Q4_N9+}2fb>p9c#8)OXZKD<j!>)2pv5btyItVzCGT!yZV|S
zIL_NG<&JGRU7k?$oIk$mUi6=FjAys@U^)-`Z*=!KT9p?JIL1d`bYE)MJ)HOa<{1)k
z#5qig7~*Td8IWs&sa#r}EqnQ~J*yO27da4+c-h77K|jSgTju)o`7Uh?UAgz}VZf}<
zYuD5MwhP<yy!gh3CmMG&Z{H&~BN(Jmas3SCV`x+c_NH#i;(M5*^B|Bn=Zw44enmqy
z<*MUIfviEJ&%trHzD5{>JK0Uda%_5aPJOE8E;Hs9gg$uR$>z#6kERE8cyyfI*;Nhh
zuG=w4a?iMnfCRS=v=w{9P%wt_6o#LxdMIt7gUB@Swv1QUkJg!4-Eu2P{H%i78SV<G
zoQ;_Ax!U;h<*xpH;k?Ud&Igy)UH#Bg{df97GF%QX>fmsNy4c8ZX|HgGQ|A}fwMnC)
zVQIHn$95=4YFL0DOxaM5LBjjBQ>jUwQI%nuwt_06UV9oOG#DDoDr+;S4rhpJQmVKM
zyw#Roio{4LT^geslDM5jhwvE-Hw`%rOr5~k+OMP{AV4=<>(ORu28HyJqa_7@-Inra
za{Lro(Mto4D$Ek35&o{~TQt33DtB^?Z$m_S02Hjd2iJt#8Ye{;g8JovS3N%_^dDqt
z_*7x?Bfxy4nFY|_M!9u#_;)qWa7rsNkW3=p(F<xbdUM@exXyJlp&rJl^L1zm5zORl
zJ%<*EKznM5Lf-rHt@W-gk2#_F?*n~jwQ$@c&ZP&wLFB`(RbID+mtN8Y&^6iIw_r|S
zcvoeBd$)fj1u?~=GV1Uwl_NX+ourzwkW1md3-^!a{Mb7mHM?GHByPA;wk6F(eYav}
zu<v4wCCiriFzSr0K#n|kzwLA2u<~_$0%(*ryO0H%UqtGgbSa;X?o4>^E$g1BVgmkt
zr-QbL;~?y?=4|GeX0uIX9@X(C+uNxgMiXA&QRX{q_lBWWLA#I#1837rZ*6<l%0G=n
zgq#d_uOXcvT6w7FD7GpIw#@sVr3la|cMkfl#XNHcCQlUSVs2Z&T`o+PS5$oNfi~cN
z5$AVeo)ENny(`UFZ}+O4r5iLEKN|a~b@)vEzE8g-?P|8oEp^f2zTu%>WNcN|kRN)#
zP8v4!r)t+AR}1sV3=$^_GB7ufsmIFqR>X$p#(@w-h}JGF2mM?tZjZk2Zug{|q0?`C
zJ1I6#V426*D`=LrhQ{w37}HEs=hLP65EAc1x^iVBJTya@q0Sta0CKHsJA8sXH!BJ<
zBAU1*#=1XXTz_9)J6dfhnT=~pqvR(a3MV%w1<UQ*j*pdA0S)MUaIM2UjW4BB@lz-i
zCrdg(Hu6e|`Z{-753ZvYR7{5(pItV#Lb4lPxuv(~hO}Wm?v9Q|3M}80j%u5F?`anv
zrCbYt?6^HQ<AYZ)O}}XrGFcx2d<|M{eN3SxWbNgsGEw8pQP?<#u!Znv0jNTdFK}1F
zL`mgDpv+-1nuzEJO_D{h*K<tb)=%kOFyvN$C7sVk{Mfl7C<}2yH<PjLc6^<{@b1yr
z&{T%V>qD`zZj#)@%El*p^|;e?l7FQTvvVS5M<~K%VHXGsp8-jMf7M#&)Azg};ErV)
z;t>jyEl_tBXX?rkhZJ8s!<r3zqr`;!!4Bak1+5Puq?Ro%X)D}Q9_OYoO^cUXx_fMD
zc}ZVK2emBJmEUDR%nET3y=f3HeIuK=!ZA=dI+Zf#;O^k#?hXdoTFm)@^<mZ-Quo6Q
zeayd-yP^sA2zgK$BG*1sfxh)J6g*%W$hyP!x7yMT0|_${{`8)1Qf0VDTqsmkGB%((
zX)m(bqn--u=uGzaB9Y};Vp)aaM8+epPV7{J=vCGYuK3S)Pwjqp+}1hwY{%#ctIK!N
z?~%tAVdqsAQwJ8x)_OUmeLz=wz<QODbv6<Uu;>T4ts*O-?5C!__AO$g>&|{!Lx&VI
z$cAj;mhaDeCFx^{6bie?D$EnaNz6e=Vpo4?N+bEtILMHIaMbK8XsMEi!V=j-xuS<3
zQPf?=b^I-=_*ZFj%UUSX5uwcVd#44V<(9IdxO;G**Mdr^P&YU%IJh@Lqrwc^;91gf
z;xK5`C-NU+85<PaD>SfT7gLW5_~~A14EF~VHiTI2st$Z^FHbAjkhU1*$CX(<>gnSy
zMMsJsz6D#-{Dj=V=F0Pj&IhlttXWr<-TRNN`wqEK3YiN1Fx)VUNT7cu*|jJkkN(NX
zg|d>f1bYF~Oix`-m)@sq)0T3au&iFlaUjJB)r`x=XC!1|aZOI(q+w?IK)5b1BFF8V
zzhUZ8KN)idz77nZkB64;_G+@t(|=Q$>=3m&^bg+8j$2C$e%Dm(29En)h<l5X{^h)<
zbV3ibG$%;`nphZ2=HJ)`$|~%%DhLlnAtJ~RqFJgR`YDb~5I-rRyT^=UZuOeDZ#5hh
zrG1a?De~gRXL)nz9kvTsv&!Z_2o#fJhHc5@S4Y#y+SuU;#|TXZ3G<Dl|AI&%o1=rU
zSXb#q4I;G>F{?(ND<Kh0j{9!sVHX*fclmUQ+0>U6B!RuX*-8buhB|DjRTFMEA*wu`
z(<k1SnGtL@PqC?}{4u=km7}t5KkruClvOTMyZ?U^)?FuG;Gw@D*h=znzv>LfN1Ze>
z7C0;n<jou)Y!q6<^Lr`R(^d;Zs4s!Pb8=;yo$zv+ZBrhH^=QxrORDxTG`5a9FUuv*
zFA^eoU^|%0o0CVBXGL=F5Ae_csLlAyXbCk@F|W{{<`;(^^#k9!`yf?ZVJXT9nlNnt
z+g&#)%k42ftJ#*#=YQN(Sa@r1+nIVh>*eu$fwtvNtG6zcx3Ten+zMlQY!qQ4p;-W&
zcFw1z6oWxRTfvJSzoV1SmkH-%-g`?M!P+;dC@-<7wJ^fB_Vf0N3)c^o6err;EYx@l
zxj5MRHY4bI#svxLMY&?YIi-O7u4XSQ7V#Ixw(sosqSTO$ao-4oo!B}#W1;zeX1|$X
zGiQ~Y5iMLe9Ll(|&vE&ipk^%A6<ub71y_BxPl3{i%?UMP!vy(3vY63DRqlW}^LT|i
ziRNID0D!sVg2dQ)M#YTQ6^gnlNL!9Fz$Lrl2du8L{j)bi9&b}w^4D$EO5C{Z<6YaI
zMn^*v$bAqX+Csj`%uLV*rU-$=_pPCCn6rW-DL3IPSdUx)V(I8*o-SdJWe~IOs@7vB
z$}sGw3ae&Y=E4DRv^s<m0u=a1u*VJ+KIdDnc3yao9Ve};gCvY^?7bkz)x@fH+hI*n
z#j&JE>{G8*`&+kpd3uq!@O;QL9F<^eN9vS6V52!iBd;jo<>+<#w6TPljK`b<*h!SU
z71j-R$smP%Cg;9T;r_v6(qf2@`t2=4+v6T|eHb)b(=>#iJ|WJE9ujza7N(x+%xdu`
z;kvMHVC_`S5S|cXt30aW!+H}cqcK<Xv&=U|ZirS~kdMaqSSu`ILMoO7+pp+%cB5Pv
zgP;yGubZs@Gxn18l7c54c6qGrjfLK+yLb6mijrf>a{|(=3ei5TCtSGphJY9{Q%S`%
zdYNK+%>+|}u*8gH<t2k=v}R%^)=_7+6cQR`lsO*y1B6pqBkqU3d3ln__7J(vTZ1Kr
z=mS>=yd)iE<Eqp}Y}Ph~Zb1eqq6M<m?&?&b6cRiOh(8$e(f8WQ2U8mO+_#Ps*YT|u
zQMSy4eZC76ra*y>x1WqKuk~Gm`Dd}?lpJg@>^?h)Z16tF%f5JdYC|-*Q`VH6eWrLH
z<e?0|J>+7_!VO)Ozrw7EbN*3f1fs9sBEezs4pPRd?-r7c*oRee`lSleerTt0V%(gY
zKAr(-s}vv2%+$YEOb;?!jG872Lm&1}IQj*rnHLHahFP-iph3~*byU^qO(cA^`VL)M
zC_#7g-gn7psVI1)s2|x$rgJQtLaki)G~&zifJ5e_SR-*s*{fPx@eCz06&|ur@q%*g
zpKqQ=ifUwe=DVJu!}*z^IRj^t4>(?b`shG+<SB^&WMb=x*%qp^nD#czTeX|pES><9
z=x|yw<+2n#%aih>B|3$c!$C9gQm0WpPtNx!{h~pQ`@_%HH^^6nU}SebXL(t(yr4AM
zGn0hNr>etziP<nq!VwS;E|63;Ob2=Fy((sKI9<exO=c*`QDcZ6=X;E-An$Ir-Sgsk
ziJ&<l4$4fe6#myjO>~@wt&V1N1(m4ByzFmGzaE=ul@|Z7Uuk%c;=t{spu4~WBY~K$
zX%rQL1oINapK9`KUh4aPV7vWnW`t@*mf2-8gDn5-396SR#P}MZ{;}hxr`%2*Z}Dxj
z?dm?JJtKnFGihmYKJ1@Ht(uc$7&#{L=MOwhWGIcpo&tU3;Us`uj7k4B7MJw}@Ekxi
z(gAq%#|=t}eUO8{SPXl^cMwpwWDOPnQyTGl0zN;A*mVxhH!Z+{UaK>N<Hy+#BkA-2
zO%>c#qo`0r)<w*Q6VV4S1cus3wH;gl&A&a?*dKKF7|KcbU`+)eYTI5%(jVtG{2Rj#
zJ3a+Z^mo7#%RyeRaE816(NDb$;`c(x@G_xI@FlNp;S!N9QTovZd?K4pY19(Y|4Tv4
zGyk<9Cgr31)UNxq4%g=sJ8!{CQbLm~)pzOR?reL=`6AN3(Jvb*H4@eL%xTauhx_+v
z5I%+f4n_XI2yCl_0zRIX3r~ItPhO~i+jKe)-7!ES9%lm!4YD`4UySipHaYb19iS~Z
zrJ(r59VQq+VadFIL1CVBfWo*yyBe23XPiY|jS#IAWl#eU{a7-|KgVlwF#tLr;C=}d
zp5+oK`d88D;yPfjH6#RR%7RG5F!a=0)|dHH9mWHfi97VMZpBC>y*L>x1K@u)C48}C
zb^*j`05DnGY3XZd;S?9}{}UP9HAV08A#u}@%ANE-jVb63iRwp*SO{B|YXZ=@P6Yg?
z9wS+KOMM0T_*Qs?rLw0+@&M+Ag0u#YZ%n_HEmKTC|N1GW-yX`ajSHo<A(sBpw^2Bx
zlL;W*93aof1Dz0PT*oBOc<SHVphq7yEZCv-<*!DqcFGeb&T|+#1dlkRas>EPf<};#
zLKtH$I(m+eCjbL*R5cF?kf@#Uh4;wveN#xA=7bHQ^9&HbR;aC<ILVv@Ow2SuQ|$>2
zFa0(J+&;k+ST3BJ0zQGjXhdN!;2!af0qVvD2Iw^$;I_6eDw}`N+%m=iIp(3;629zD
zA+$FEtA?TO;b{GH?ZiXA51PHp6BZAgI|YBK^N?{an*iSDH_93Cg&3Gk9r25$5+bgG
zvUX(r7kn`QMsf03{1*K(59HWOfm>-DO+subXh1BUVI&Vzr?G0N>OBalPjey|93TOC
z)0u*gI`46tC6f=GgIy@Mng17S?wfMu<Z@`qLFfSJxXSf_1lJ=0qv}1xs(a*kMA}99
z0<1LnRT#{kyhDl({F~G(C{YNJzhfJ^;)qub(ZcZ{3_!D2-#YZ4WBs-DZ;0!nN|lfw
z%t%qg@<J_pVY6^@B;h5f1FjF7vo@*;gj`gmT#Pa0>p&=05F1mr=}>P&EYpays@L34
z=I&HkWav?`Btbr$m>+V>J3)kEVcT0r#;J28?1-`r5p#@s%u3PvzkLJ(7?n`CeZriG
zx<l{(fj&z(+He{9@^XikVy9|Lohk%gk4A?b!+;OL_#Oo#1_@zZV(RCY?aapy0j|W{
z*AW_l)FppsW)W4puVU%+cR87yjVL|diqAij=iBL5fqnujEeCms{>ndF3y+XszrYYW
zK7Wu%;K_xAHb>(t>1{NLLx$UMmO6u`g`WT;6B(<PMZtFW*4O69eS&vldAh>T9PEux
zTiG!dvql_yMc{K%;Go#laV4vj%ChU^Y_zj)vzyhmv&@G1=)hvF9uGPSYZ0>)beGpW
zmK3|zRL+09rt9^gLUi5Zs<k&Vknh2i{l<Z=H-dzub!AT*4CGrLxb8hllF_9p5I<AJ
z{@?|!h^kAQgE{1}8C%S>o9eC+t2jHcO#Z-+eUr95<}X^4Hn@$o93LMw#G-r^XP^3I
zKd?IVpyvT{RM={lGHAO$c}P<k=LLOBLs;%~*EZIeP;8{!+aYkWvY#B?-Z(5^UOj7M
zTt6;&T;LVBgBirswHg~-D=@iqz1cGNi}YFXxkT@r`xlPfaG|G>FEI<r!{=dR9K^a6
zbGbVBHgEy^qR6V60KLlfiWO9yAV>GNP2KFUYO5?PsVcd3dFcP*>b=97%GS71JgBIM
zpeQH^Q4vrPGAc!B(Ln`7jFlE4V}%eQI<x>GQIIA=Mj2s*fzXTel0+$qkN~5I^dLb<
zVU!w36v7@-<}T0q?!C{wf2fa-va|QjTJL(xuP`;{F3k{)`u<7_^Zl7?*1b2P#Bay#
zoVSiyK(AS6O1X&+s;iCo%(oL}3YyYl)^VpK0cgQv*|r4L_N>z*t0vSt);Z;)CZz>X
z$c5ob_u&`pKK&fq)q!uuzcuP^J-#Imc0k!pp)p0?vK?5^LWIxPNxHjW>y~l)GdfYQ
zl(F{A400)yeqj)&_pgeZUT1OzH_*pewD2s%c(i}nyK!nb^bg=#Ie4L!+Q?bP!%sT?
z4wZu4l?hI)JfJoeHi>x5)F$2QO))fuA|>i4nc|vMf+ZlF?c=fi^o9$pxs13nzX03y
zndP+fN^eVUc*Bhy^Wj|Di;&3Tz$2e$M(7?54~e&boR0p)Zju;;{4uojP(Q(2z#PR%
zQ@|P1#@hl-UL9QS-5y|QKsnb6GAZo&#;o=cPhU8CFf3YM<I?<Hl$prMJ@(_`)y9Sa
z5%mOaZ~szJy~?5z0e;?##4q4cO<4y1{NAo!ZkG_p#>G$UYaXbvKgF+dl_N?5R{w4?
z%wJzs)KzJk*ywIDd8MIlIOyK8OQ>x0ORaLCu9g`c-c;9^p|S-b1)(MO8Syi-F7dJa
z6dySnCrt;sd2wyI2PA58<0xLd9AQC@&L4+<pOH45=l<;z&Mcmla`cKPUY5>qY~#OD
z3@W*)z?z3e964C>Ddql_MCns-&659xD=a$UJ7JHafD}kcCTTNv`C@%Mli>1QuiWxy
zqAbc^1q4|(oz4O_M*T~XRw=%Yvk%Hpn5-gt)a|IM>YR#{W92hGLF0L9Gp6(4@LB(f
z$VJc-fsGoFfQVqhwmGgR8~|GXb~zqsRSan>6{q_dN@N=v3@pMx(0`mCB-a(7wY@Ri
zn1w3rD=#1KKu_9gowDcoZ1hg^>LA05TY&n40l4t&j}-4h@92oPqO=7!xfsja!O+7y
zqr?j@Cc7a23aG^VRvV3YcqEj!2~YB4)&gd2%MnF!F%RE>>bJL_$?q<kwWeoLi+ehr
zV9KMT!C0aS>>!Yx#oi;e{m|sPNqOvdP>}<Q^o`1H*nb#%yspcgp=;ulPFrQM&}<H=
zhF>m_oXr-tI*z#lth=hanDK0~q1;_Khtn9F^JwUJQ0Y6T$4D)iYx-EOuR>@5YqwJo
zhu}9bHzE9Cs&a3|8`3>rH7O0+%4fp%>+1PGCOCsp1Bu1dfeI!x)LFTvBlgCx@W%vl
zLnF#n*_o9@%hW*5AlsG_-&t5b_OoS`9lNO!h*H1*L4;Ral<xsC#TDcrc`$9_P6#H{
zOd^^qKf*RG<96YrSZp9(1ZHFSMGuKh{H>uuk#$sXa}0lR9agz3{i+T;$l-4vN9rpd
zuKO{cn0n0K@Qa!sNzfrp`Bpn=Ie0T3)08dt7)c5nv6*2+I1asd^%+9DOGa24w>-00
zE)r^Mj<PaWo6|_zF|FJ!+3Xp?)ya;m#H_x^$c`y=*T@l7u5dDIS-8+Okm#g=?qhpX
zA<Ph>w=36))3Qw(giJkr%4snr!4h9Wqi0@|XeKS21;Ne?-hADf%l)_!4my<Bt62+Q
zC%7iR+kfxa)(mWKZ{&fcOQFzdrTGC(z!vAE^1V`jn5toRfiWbvi>M%68nRe2_<7;u
z!NpKig~CiQ{4q1;LGkBz#!pwG!g_k*Km2CN$<#)*{Q8sHq^^8BPr1=u<^ry1#@GjG
zx4{e+30s9#>cX`6S6I>(<vzLHaP?x#5uv|$Y(@*ubk@-uPfHcXm|YW7JDK@atAS0%
z)E9s2b;N&6k0F*w4nIU3EmQS8HA3xG$7b0i%a2sfGIj&;SSw#UKk-UZsKMFqE+dxa
zAucV67YD*}^gRZ@(wPIxz81=f3E73Ad%=5J>RV#<voQr(`@>WezW^Dd@8ItInA86#
z!Q6{ae+!fUbx|#jupSBQO*b6`tL#4zCWMbn22*{es9X{vbj%b2K}nC17OyPbBuk1G
z!LF}2IlXfLpZS66yM-m7#1S+t8gAhVe>NVpM5?1^9C!9F_$Qtp047+UNCGav?WrkD
z)C4w)e<Yv`Iu2$Ix2h4pEJBAshdOqoOS}o4LN*o25abczXLMt!+_au_hn~pkpyo@G
z!{V@t%G|9f?OKgSZxQ0BRl<O+r1lNDn{7|JAAE=?g+bvp^4)F!s<=LaK)y~SIQ^^g
z5tN7N8lX1|2hIz?-r_1e6;?}6sb2E+lopGnRW*e3(6Yp)Q)%gbg%wWR1qKp=of1pl
z&gEXMHmM?ltw(xl1eBmsossneji6@GaSxevILf=!*EniUjUP}!crb-q7RR!cX}BLf
z#<$F;F!?<Bn|xaJJ22<y29W?{`LQnnnybx?u}9g%Y_K6OEsoZJzI-<Lm>N*KCqKtC
zR0X7UPyh>4aAD<G0L{=Sz0(%{)MTVlJqYd&lv`_nyLWg+*(VHuHak32Tl%Mx)Mkm`
zf8Di|a~ULnu`L96E2eR7I^+HONp_a+m(l0kt2(r-KS}?&_xE6R@WyX>jI@Pek@4-<
zs6TeCeYHlOPGs}MXL)00(ti|XqyXe-H_N%*a2+`AhlTL10f<I`tuV#sx}~bO5l_?t
zb{WBffQWb?cujDx!IxeiX}Jc%D|gIq+C#4->x#>emATVZTKxRPlIn6C$co||nYbXE
z(;O=UBWbMSMa!92pD<DJ3oivSUz9K-C!~5-hxWV|RNb?BrL63rqn$AqzU-@ivUuqY
zy^i)gENcP(i|hW2nyFw_KKWOr_J>WY&{L!-bH$MAV4Y*IQKK%{e-4icC|x`~d^-D=
z0BO^gkz^`LAD(E#wT>&q&k$V8T`M6Yc0_pA3r1>8(F{dQ9`D{l59Y?dLO&#(B<Umg
znH2G_lq7~0;e4MJ3_4^3Mhs7E!vO?z+e}s>i?n4<Zz_Jd*U-yv#?yKwck4jQsR!Z+
zmNnOXG0D6r(=B0PifwCNZ^aqQIX9pac~uq4RlH;d!MHpr*p{hQ$kD_}GTCthmI$w>
ziWk$W<Ypv)VAgaXR9}{odL*n>^9pU)Qp5RTU+~mW`WcRKZRXW}(Q;6D?>Ppoeq=cb
zBq~V|Saa)MfUlS$4}w5b{4oU-5g=1>Gy!h9>OZ%LnW^?xU-7szacn>Rq2JF`1n9-D
zBsLnDUW<WwH-5Jq$6ZKUwR87(dBf;mcB!#!mW`cw3jzs%lgySXHw67~7rX0dPW-4u
z08<im<)<jM`E>EI4y7Z?vKGj~g{jLlffB#CwW<>c%WVzF-9BiqI|&gGj=#mSP7W_;
zS0FWK4NY{K?le-kG(-Kt+f<d+Zsn$Uu<}99AFJRJI}kft++|M63C1?XE64SC)pIFA
z&ko#UL(LJYrY3p<j8p~b9b9?}Ja1UJTaFkcxD`R`EFVi=j3oMV7J~0)o~904#^_%i
z3C*zpo}T&OvUnf}#-n-ukaCU~AYpiG0j;yEos>W{<H%1H<2T`wo0!R8hFgL#0{4(B
z;+iC?$PU<|Cde;vgELF<4W~IRwiPvw*=4>HGd6&A0572yFZZc=%EG`#r6OpQc{7;}
zeo*=+a5$tqBJGgx5P$VOI@M*1VCA4Yq>O!igkxm@)ZpJO%vVbVy1>~QXIbt;3zpq(
zV+M|^lU`=!#=}+dAFSzT_oyjB8&@1;BdU;v5PK#zDoTK^zA4|cowT0d67%!QTP~dK
zi|$zQGa9jn`ya2TNl;Gwnoamj<lsFk_n!^Ua^JHqG84VLmZWc*YpG9W$M9+(Ct9Zk
z_8GX{drZjGb6)a_IGAfA>20H=z&5v-RZZ(5K~8+D0?IW<wdv#@;w<&5<3oIhKzmdV
z!m%_!dX<@CRi)2*8~`s5)QJF+ARWU`FtH1(L#pC!KZe26%wK9C6S91_HR87BLpo^#
z;6?jwQsgRiuzqW6fk;J7oboV-iqppWZ5E@GzfjnQ`i<F_Y9a4Q>;ZG!Qq{Q;&%s74
za_fXs-pq=$=_spI@py)l2Ls;peuz)m%1y&!qqj^|#$oWvPay(RwWYPtZRO!%q5)*a
zHrzRa({_PKlgzEtD-*_gR=oHy_y$N1CjwX@Qd?B(lHZ=X0V@|qk04@@YH;pd=gXk*
zH8M4s8L7>j#Qz(yiTIJU9!Q~+fFMLH@jv)m&SFC_-=M@!90m^5x>z6#FSpwblNgEJ
zrEf|J2PM^i%;jO+u{Z9NU>rfSo2>Z>Fwhky0!xtvX995hVM_IG*-ld1HAj_kx%v+`
zn04xk;?Q0$y<LyWp!3lQ%HyCC#oZAvK9W0Irq8WT#UljjKZL)_Lt8<;b2l4PF@Z01
z7mvTkN^LE2z^HeOp3sQZzppv<!-7O{vmdBKfTiNW)12m>jVmRNBX(sY`z^aQ_O(%6
z?agWegYJ}Y&)f;*roE|#LM{Q)&-b+(f|rB*FEWP1^vOrRUu<b=$-;bA72vpb(mX{T
z6I+wCC<&3ifa*Yd<|%sXmc(M{E^Hgb_{YM3P=2By`=w=%>e;%+gpqT7OIU1$$oaCe
zr+@xl<yVfC?=7F#3BD-Lp_<@__IeK;C}3s)ydI?`(71R+8V%VLj$wJ)j%HBSNIPTO
zARN@3dhKpAlUcLExr?AwzDcbcY#g`ce80lXd75sX^JhC}Vs^SM2uLodf<Z$B@iT8J
zgj7#bu9JgYWa>5|^UFzC9Es*UA0q=z*B@@|t#CmpIcyHMNq$|tM@;YFJ^oi^J7Xu5
z=6#r&qbtK+L~fLy7KayX>+<dA!nQ)UylZ7!T1#etw{dCy#9@x+FH+BlJVQ`{YEFTu
z(Msz7F82hN#yv#*^IM*#sv;ZV-wQP5HVI^bPGVp@F8M{m>!PGKP0%ONFpwK$*ECvZ
z5wmaCjYEZ<x%*qZg5kFZEzMLndqn9bS~fTTA-YxDPe2qp`>$(leXX`glAjuvg^>Dt
zl<z=qV232`UzMC36=DFf3qV15&_P5TFldir&I3p$I|HUlx~DlxwL<TLGKIyIr&Z=H
zHbC=b`D3!+lM$2<=6lrKXT=ZHqAfNO=Qf(hgh72DHRjf}!Il_oF+PRmabHvGRPjU7
zRf<@IhEBvO(^bXUN;#DHugaerlq5iuI06iL7C(WxccBmt9prT)9wSs37Kpb1bHPUu
z&NM^cB@OIc$8^v7fh*pxqcy@8*;!RNH7U!mq)DMpa|Pxb>+5uuykRy|N;DZByucjj
z5dEgM)LcVqI|k0?ulhNf-gGo%R>LwsRXRZ3=?Sc_<Zgv%o+T}04=6r`knRnO7m>fB
z-qD5%8THRQ{oRV1X#tP_TB9UVcG$0(B!e$hTe+Wb7|Je17Rp^A%p`9oUR9`*9u^by
z>iP`vxEPld2HOHPTzEY+UyVDwylb8+vQ=_Xb8g+u*f;yINf!Q3PQQ42{E&(QKz3un
zuQnJHgN6=uQYDUK{9LAZ@hxKq<a{finbHy>fnOc2YQ$5S+TEZ{zF{SyGL)x*0d0dM
zi)Djzy{;UpCe`APtZT)L%>5Cb??OT_Yx7{0h9^L%bwcp-40Xg2$t|ve-c)o0f^8n*
z)E}mC<(wEuf|HZ7f}4fiV`dS#8fwl=iOr)>oTksLPrB)7Wf3PV$mW8s=FTPtEvfM@
zK-*V#^JqMgziita5zZmqsY%N{0Ua#IPay{zaeAfk@Wa4k%e*=<A|$MkbZ@$eT2flT
zLkFZ!%sQPNzEc~7bdB@mh%D#2qup^H3G=GcAm{^5D0Fb83jjlpK+X~;=?91|#3iD&
zLfruCYLMk-lNfpc=#zFUQeFk<fy63d$=t{TWF0{-mc}F8+?MJ`La`MJZO_;hmmwSw
z`?fceq7)3~J=~`PxGqZBjc8O$Q*IuGzPVfAbTP_Zl=H6#mb-Iy1gD>GX&PAWvAYIL
z+8UoozpiD{XbH=rFEaavmJLY{4cjEm%1w(PTAC^f8N2Y=d|qb__q&js2LAG1ABEn5
zKPzfEQH)t#&dCum3N_M7Z4#Hv4=JaR*k-p#i+hHP^AQz06Ta=@-%WjpxI^M6Qb0!;
zu<C2($0m^}=-Me!YCiEDYz-*iX9^nzT7U|?^QA$?K70d9t5>kN4XSYxCuH)ONjge>
ziaXX0zIje>e7GiY8NEZp>^wCm%>5Wk&tA%hA%UncSk>7iF*?XbdH}q@8m^60DlQed
zi%s9^WB{p}Lja{6kz@r2#5Kt2Z7)0--r`v{7RcPffMFO1`{f!Y6r8Y|tZ{wLCfzlp
z*n7_BLQ2_OmdPJwYvk{hA9(+rCNZVQ#U2&nDd}BB32`66SZvZz(<4j)2;qRs0rXWP
zeC+H1r*rWdwO+D5y`rPkcf!YOv?FRYV$@@0p4J;$|8DbzJY7K007<JZC@*Aw1P8Lf
z`3E#f?gA9Pzl4n=*w66@uXLxuP;9HeYub!uck4M#fNZr3O#Wpg<hl<x@Tjl1Qxt7A
z7NtICXP2bnxbeSjZa|a*S|23-5PFO?NpAzq*j>R&3*|?qIw*|pLdf%yV)CPwTb20l
zmn4pf1#|t`A~o6FsdmRrBXS36kK5@?<Zus-Qi)bPaX59j`itAN#f_7i00|8GZDJ=f
zw^_OI2A`D3+)lKBD1rz!B>}Bv??F)2eahGw$o-r#0h4@QJ=-8OH)82cqzlJ&Sy2MY
zbr6|>5%H@TZraNmWf(WZ#F!vb<Q=^9C%=cJ|Kkp~TasH<3_O$u#Z{=wgDhv6u^;B>
z!4{f^VL76$H!1y8$?KzE!ZsGXre~NPOL=LOYwGgy&d+aQBL;xcM3L`Kj=+M(=elA=
z<K2cg^yYXAM-?A?+Mu&NChUgnuw1K_LGw?3=^=c-$`yWG*hc8amYLFDUJfWary{re
z@2gV|Bltb)&8MLTS;QxYo+k8lxgE4C0(W=tEd2`C3xs%k8~RUU8QZ#X80-8SJ3joC
zx_g@+cYkGS$cFoxi@!cZbZSdwEe%7Y;NCIMi-QZInjidEEShWkt#kDwzPfVp@B-rq
z{yjh(y8U735^P?*_nAp7-dC7m>S`2z)+0~zIY{e&_+%dVKYyqy0>OHI2xP5EVi(w_
z#Cf{)3gRvV^#9!`4L!Sg{!NKOWGZ0{Bd6gG3HNk=but;%{&nHf>x*iCklNm7W@PZh
zXP9GK^s_6XBdO|?(TR`k2dADK#8nSUi=l%=Deb{u??-G7-ntbX)%UaEwZ?{~H;4Ap
zU-YSp;Lv`>az-Jj0$3m_6Ru-cGU$EIGCk!->!a@e4>UfwMwbBd5n6V+cgt_h1>+cQ
zDzNB`31+)vqJth_?<d<I-KRnf0?~XRGn@t%j|=I^{p;7q+N@SO$d5RjpL#4GxJ5pI
zkq_hc$8v1$L?=HV;C!7CCfQX{TfWyP<wso9{I(3<24ajSi2qVjC>{}f%`Y8Cp}o*}
z{dUg`Pg+Pv7$y=ElIP_f6ow5^x3|$5(Q0yAE3xZ1e4+mAho@k0`a2V{zwoUeaZ__N
zwr!zmKshC?c=C<=t~5D#!Td0BtK2z3I;(!O9TPPFb?ETErd-Q_sxOR&w7br49v)Zw
zXX2vT0HTgMTtyZ|%MMLUd~Wl<<1cfOYcw@CH)R|*uL=rMn&SOXDcQ+iZa>+%Ct1(C
z_}RemNsov-*GwKFxOlCTdtx{IW%S#r=~D|E@-ziTN=-0rPwzmBkq*{&-JU~1_6Qjg
z?dxUCc8?CaQx=F=lULjFn!3e5fwLNO>~g|K;c2hxJA;db@#7+k9V&>VsQ=3DeTGBU
z($#Lzu!!wfb~NxNd_J`qk93V~&-x}b3&>r$@&k>6X$s16Jyu}F$uAq{e)1ZNz0=(K
zhE9EC7+L770;qelDoSU#RS;acZ)RXb=7!vixLrDMPEpUhKdjIHn*Y<F%lD&Js@jJO
zJ_z}pZR|T6EY~O=0Fg?6naNy~8Te+$fVfF*79(TolH#e{r~o6tiFWd^KFEj6U+6$M
z?<W(JsjGvYr#aadYvVpNH~1P|vH6K@DJxV_TYh;G_SckLTi;^<46@>0Ao#WFTZ&6R
zj8L{LnBQZ2W(?>z=h$^1*4-L17sbBsjGQ;*3g9<V2pKiFqaW-3xV`Crw_*d<=NgV>
zHWNAoK(D(uXJnP+gsw70zQFwY@)!?wft#DICeoK(+PLiQaO+v>Le9qF&^B{X?Q`z2
zaxb;tV(NK#wdHsJy&3&86&Oz@HBqjsKJSxDiBJ^Fe5QS9IZ{+NmQ0^<79vH6)C=A3
zUnqx5DKs!=EIIWRMJh%SS5_noDoT2AaL~MHs<}B=ALZtC=S@@7n-_cNH2Nbw@6ue1
z_sxWzx6VHIzJ14~-+MeZ_NuDf!QSh=@}R`5(5!H7wcD(Gb7fW8=NETw{B||&w^MDq
zpZ<MuJy3E5?suz1Qd^~NIOrO;87X07Z6P>IDPkAV`c(AhE6)3AA#TFDu<bUN3XhF-
z8&|P)k8~X>Y;Ea3pVzg|PK8JTKXny8AIgJF(DLnvCNH%%*3#3Z2NY$8jdG<z;P)W|
zBKVW;$IjQg`s4enm(9<88${O9J&yUIeNkLg5na0rw5-7ZWBst-=s2lO2dJHXGOrd@
z`ws?_0#eM+?lgUZxd-2`D0j39Jcx<jeXke$>uQW5_1mfAu09{71Jeg%zpCBW{E^%(
z`Et3Wwta};V__k<dlrs6ytt_B<if|uFhrXDfm)Q)*Q5W?wSO|(ez3_^b3^I+hvuZV
z4b`Gx5CoqwYu`1#p*Mk#-=I<Sbt2%amM;owU?)EaI+FUQ^8?i{Ch^jD+VbjG_YbIc
zF!^6lV`fNbA5Rp&Zg{+^5m=VaFWxD2a$sNVF7xY>T_)@p@*8-6Vwc~-jHSX+sSxos
z4~>rcj_=Syou6K#ybACLYO*s*Rzx_RSBIWY47(G8iwrWI?-K8Jet@-%&^nPKh=?!v
zZGYXdvz;d{3GY{iyF5)z@Bp*)Wl|fT9-a)A<~X$Vmlcnhm=GC`;Mh#B$4sJ{Q`}$=
z0mmiOhJJBON89axXUWiXszFO8?b-XkR(?uUQ5MT#F?Y%#w{~tub_7sD;wC0qy3MJ}
z^pmRRYwlGqb$g3~MHYFHd)`pr#GcNY5bEMfk_TMIpS=J8h}~dAbq0&BNKY!#D}BC>
z<NOsxRP5`++<=ZD4vn(e9;q?>!Q)HIsJW=Pwc&~Iw$tvTzTBdxRraSIB6|OySu+BV
z{rGV!;WV_^6Zh$6ba!^N3$mlR`GM7k{<f{JTf~Tz%6a~_bAKgZE8g&_w3P6F7VbXT
z5a+hf2<QxJsF1P|a)a@hI}zYiwuAg}*hp-M<4f5txq01CKK*q9CUkDp(VP%9RM@~s
zv+-|iim|&mxV)DBdLvM!@E%|L)AhFtYvc_;kN5#td)4DyE?CJZdo8++wNw--MozjH
z7xY@*rw$KJdmJ;TzJB(5@BO|u%ZkmYq9Yw<@!Y3ZRTYjv`s{?_8MS8{4zlx9Zo+)Q
z>Ro4YVRg92p>~?^i;X1O91wIx{DKq(84lhn71@?#DiW(m0W;#o<~n89u;bu%^ymul
zqS`W$mIeW98`)!E0l^oNp~LNM<(ThODLKO6w<q5wobXaZJMrO&cY)i^+GyU{XX{&u
zN^K}SJa(@3qUKy0$PF5loBSg&W#A!PNc_C41WH&?%#9dXuyS}L!;|yBvn)(9+0}sZ
z_4)kvo701!2kJ$&NcEP>?3w++f4v`CBiW%s0%#-g-JtO@v8G6JGdQSY4q{44&2Gmm
zZ_ZTR>Svfa8NVM}`0g`tqWFpFAEp`gu6jC~XAh{#ZZ<Vh>!@#9Ti?WfeE)G{b@jqR
zN!kR5!<n$o5Ptm{>Af#@!#?K>OmS%1@!_1&YhD2Qf}79^UPwBz{_C$Brk%4sr?nE9
zIVv9iO;7+i2?<$!T;KpJoONQNesp%^*II}o8Q`oQxSQsEuNo~pTNjnF@}Te->Z8;%
zJQK6IZ9f)O5&f{_U_pe60<^wjsS~3Z@HB3V(1HCcV4YobmBEyK)~;6LY>$42g;Mb#
z+b29H;Q9H#Qp3sub;D^o9{iWVix%dhUp#XI`ho6v@c)}C0UiSK)9M08CUpaF*7@L|
zMRR{Z<lAg%W8L8V0C$v}=(ziGzq`8quPX1azPP*Q#iPHq@?akm<%a6f{xG>ViGTLb
zmGF0EzQi%6=3>x2KYYfwuOC@_XVI>8%b#_M+22v#$Z|~Ic(0zN#{h5C`B>rj$?7%0
zY81dc64gm<D8$S!|HbC4XEuVY@3caNbkuJzcuXX5oQ4ql_}WNKniP4ZLre@#3wn=u
z+JqK`PuNJ{^8FFSjXEO?yY$JPkL3@lVX!g6ncDuwoU`8++ZSsX40~MZyJC#;;E<*3
zJwi~_8ih45fQV=Et0+sgI1w7`b{rQJ69vSFhy=~CDPSz#CEEk0HHJ)oGI_!jxtri4
z)_nS$v;+UeDx0YVGw7Oh*L4LG?ZlQ4>x#0^zJck!P<Q*p!G3%9==F8>SsY5lD`e@M
zU6>n+ou~O*fa+4Va-%;8X9Lhnu$kQyMN`lk@k*y340=!kMZ8@dVUv;&S_G%tt3!S}
z#2M+)#nbnZrFg%w%L8x%@>QUpsYEStDLTfQce&POFZ0c?#o`TGZRqc+tB59W`^Oyj
z7E`-NiM-s+uUouKur3x%|I}YUa-(0QKGpg>-XS5bqP+HJ-gJMk<Hg^<o$Wc~^Z97y
z`8D#)zyV@Euhvs!EYWTUOw!~@L@XMnTn~+PF*mlj3VT8GMk}ml^IX;ix<G-vBu-3O
zQs{Ovwg3+!S?WF|%B|abKeahc<6PU@tbJ+yWopH9K#vIl9pEJ`#h_RddlappJ=+>`
zYNT;Yq>t(k!*Q{bj)ld6t7prx<{8Dsv*EhLV;LM7lG%_O?bdDgM^Wt83CxWwo78bH
z)ma?0A1>cICCrrXXy`)dhT=8=n}(6L-Zg}6eFS(JezL1+A<^b3T-R6f<zuU6EWxG_
za_sdLi@p|`)Tupg@s5dk#i+oRPII^>-3eJMmj{C^R1i2hNUGNd$#3_|4TL$Uw@e!E
zkv(?O;n>OH8o3!?afP2-!&lgK=qZYyexLD!wMbBeOOpTKf7S3?-dh_J=&OA-@xpiI
zu+^Xar)N&Wo}tCAWN5E{Cj~lmou{{)O-eD`2C0iz_-RxepdYbUJLBMN^N{P%%lrM~
zi1<eG#u>wX;#ub+jP3pi+XSkxVo?kAHZ#*_OLpE&?q1y{(P9Fas{K%GXv?7(%J+)9
zy9^IOS7d0swvfk0Zh;~$atH^--IpNuXt5AxFdG$$4m8xINf?C^JGLG&G0fL*!`H@s
zcv!2W!#Zm6VRPy@inV%rrAY~FFn%Bye+b+w4wBm72>uv4l_b8z8zs9bUQy9pwRV^a
z=t`lrAhIjueItS&sWin-SPj_g*97Kj0fSMvsIf*L?*S;<oQY$7%S;X6eo}1y@lAP8
zeqdH5H#j@LM<8-z?=b{xXC0`S<NTDzlq_a_4I9BFvtW&ju}WJEZ(|1Qx@0PLOwh5y
z(zr18_W8$qVWe%-w$zoh7Bp}riZWQ{q+2TWUdOpS2f(vT&(=Yz>vE6{(8PVcW(h6d
zrmfrn%Bpn-pmCWF-exkf9RWO1J9<CG3CJCQn?>#*ZUXG!QZ{pk#gYi?N`D>4x(vzK
zI=SnhX7Sw5{c@+8K%aGrOzDlmW#7{QO^)Qqve{?X{S1uURfHsdBVe?kp#!~um9*!&
zvLCh^$ebepJTAEAF>@2)jv$%f&#!rsYYe^I2oZCwIiZUHan<Fxdw@WapoJzct3JC4
zDO;y=b%*i>goD&>{h%m=pZ7Bc_HgbFo^<F|ZX|(d0D5Y%1^5-I1!z}!zGaH9p`XI)
zY#u6)%(zO>Zz-ydJMa}kT4~`J{#d6p!-t+gz*Lz&R33%Y+nbO{@`$2$SmB8!l)A<R
z8FBz_d0V1W>@SSqv{>b-5Ng27X$RML0*mNp(j5S}>uO^*+H~=t0}*WGSg*i8*8U#D
zfU{KdWWoe`p4Ho)<J^TF<=%}KA~#Nxw21o&&V$q(1luS6`LyGKY?mQR_vmx40kY(#
z*Ahi*dc<d<Sn$&pmK4A=<IXcImHo_yAHKe1M{7kDL0cT{0WtZh+Ct+*))+3{Hjy1^
ziBN}VA02S*nq~NsUZG8VWwjL;Ioo9URh4=9U{be`L!wQ7$Ki|{G9pwUpg=YQUXdn5
z1;3X7=OI8{UIB!^P4Won&Lm|wB_XP_ss#V@l;A5>0M|zcM0F(-tZtYlF3LTHU7V#>
z(rIzm6H~p`)Fs4dM3l{^W%c8og*WW^u$M4RkeB5n=%rx%G>zDz)CJ<ER1%A#g7@j4
zw?D=w|3}$J(IFfZz%{+zJ+K-Z4aha<Yw^BSG~<yP7V_ZNp!uLZk9+Lv=O-2dRNpyT
z68lL2GzP1jF*H)-J06$&LQ}wsWrkc3V9V<Oebos#M6L*Evd_HCb1lZ$CO)-Fy}5`S
z{JS+5`{uC7IAMI@c4U_Ivy_W!sXyRT!2#$WJu>J3GrrM5pXI0rh&uNun!tFf$%B#~
zptmJOcAju|&@x8*%z*jc+JVMYQ}=qw@77Vo?2=DoZT`1zVYhp5GHN^4ZY^?2K52;7
zsQ@mx<A_ECt7bEv4kQYcwm_|EWD=doRI@h{B2y?@RPuIwoEI?0tidogiyh<3pux`7
zs^y;Cbe-~w(NQOJWnNbJi=e~L>k`(50JvyXqI_4jWS^V*K`Z3gRGUuJpBWjwWn3>}
zZ<e(92A0@Y=sV^eXamz}tVof$SZscV^6M?0Y4H8I+@7WrEW&B237thCK&*9803=^8
zbU?Qa{z>z+gz|`Z5T7YcC$n@(>l}?*$b6jU>?*M#BBE%H&N$j{VIg-bha3odD+5;l
z8442lORPSY=g&y9GU9ZKUj@1e=1yvY%03Rb?k)WW-}tYJ&}I%MUky-|90RiWTiv8h
z&^oX&JRk?~*+Ow<s{9y9a!VLJP1(j!li%wPD-|b@ABZ{cfu>3<`03A5Ng&<NSnN?Q
zR%*tB!*C%Cz1g^<>j}k6?7;Th<Y*G-Db6jgQTZ`}5a1v)f5l<_AHsS3F)8@((-feZ
zqOIJdFGDDYz#sxVs2Urs2D}o+gd`mTNlbofx%gyax1xyPFp1oDW|FxJP{Lhp<okgF
zd@aG<x*=>5g!@_fQ9tZYesh^ooryvhcs_L`tocBtmBK|e4dfstq_*?SnY|<$PiYJX
zJ46{&ruw%+RXEat+(dAtLGJ|QWJd?_V#gR<%NI}U6=oy~MWl03B376^>Yuy9&QKn!
z8`>k;ZY%nG#PjHQVE^pTtC1F_k^aB+?EOWv5+MM{fh+J;7qo~Dpc-xx=D#Z0fhwyo
z<%VI|cI6Q87OWAaTg1t%m3@r8iYz&nk5q#Sh2UHXNY!Q&jcb8m!IIkunHAETPij9V
zL~MpC*m@%=R=lmBrXx7giG2f;w!y`(W_?QX`cW}Y<iON~!{k3=iaqAWVIB=g2tFlp
zsGv?{$J}eWP*+XtldfJU8{~Ft4N~3W6-8DaaTi)G%xg+~;g<udieGfZ3ohXfsC@@t
z!&(XmftQuzltwjCkL(P=6hg?HW+`>OY~-h@s}jmXrM)~t?EF-I3LrF*@p90U*l7BM
z2%|re>w{PW_&|<3N94CmQ{+wpn08k*Ni%7Qw239CQu7#EHoqBkfwUPP!sf&JN5~}p
zL*QCr5d9XMia+M_-;{k5$FqIJrAdu{wCtFqYz2%o|5yUrq_D`BYZ@=VQSKyJ?7TcP
zp)<n0Q3S=V!quQ^H+PeT1%bUy^-+zZ)4=aUJOWNlPpLW7I@tpkFgxI&CT>{l)Lb`b
zco0HOrd|=4vU5V(vJ|aTiD5ILHQM;Qr0tOE^+x6JfN;d}X1#eyX=D-4&41nJZAiVb
z4{r^#g-qxm5Vbe!BI=D0c1_~O3Z+a5>9PH#;)wvFv6!9=xXw>)7ZY1f6$bv)O3N>r
z^RX_SR8K`*9mG}rjsKw>`IYu2o_nw$^sbMJ43sZmo2|8iK<r<48`Mvb%o$<=0xM~w
zQYSEr^w?N(mnxX+H3Z;9uz!}--5dg-2xsx#>}q@fH-L*sSV+G-(t@nS$FlA$lna1@
zFL3K{928=C8y*s0$pgUg;y|>Av<1%O7L1rKWr}q>C@}mLmThK|y^VPA3WO{p*u-_|
zMx93oQCQ&&>sIK6FvtcVGwgN-=k*1L<(OL@T<#p4r;guZWjPE3*DA0p6F}v&s>UxB
z-H}};_GIMlsa50vMc{u`(s=*5NAP}7It~?d^H(}3h6L+IiNQp=!H}&l=M9hpiEvK2
z_Ifa%(emUy_U~LbuZ0Dp_-A+Tzcqk&P{uN)gV2g#BLhZw0EoyK(o;XxH_W<W3;P`s
zr^!q<cny~)uM8R#4~A`QaR5%Lfm!G2O@!)!(d(^+?pUK;dqac0RQ35?qIj9N@}sSF
zm7sU@yYx>*p5uCm<TrH1i?f7yjNVDyBR}51oa$p2)=0iGw8Yzhk8^2Y3~d|UHj1;j
zks<iy^kdgAW!F^tpf=e(B7j~sn#SJ{!@Fv@%~CQn%+HST8$`#o!*(dG!Nf66kQ6qy
z!9sK|?2jdw4nF<bz~I#e+7MhM!f}RtQLM<Y-A7*`57quhzDGeL-6M}Kwm*lo`8Fc7
z%!QyMKD`P|<xPP1Cnc4+jR?cv^o_U}JHYu@#XJ3!n38N+WlnV)3vz5%Z<bPRJheu-
zU6z%<oqo0ErGz4VtEeOeC}1w)6);6{my@8Wya2tYS&aAsf*-_^s0kg@3j-Ta*{)#@
z@Cy<mv(o!h;5MHIl*5<GOV_QMElr&Ck6u*!_&ew|jleYiRlzNeRq%OnmbgUN22gqM
zxP^j5*5Vf94@8*QhP6okS7ismKwz-RZmc`?>^BD^R<5DsS^~MGD~uEo7IQx%{I|-H
zh-05!HV?YYubG1BF)_VdC+YJyeKn*25}BvxXgh)TQ*TCV_!54BawgHqHij_T(EcYV
zS&R;D=bR5a>$**S+uF<rqm~=*i`fH-w|~wvEabzW18C8rxT0-Ujn$igpmm9EfuXG5
zj(TN}xGT10tIP?Mm^F{(cBPR6pVc)qSzK7k;l`Xpe<AG$Qc(IXd$+k6C9&*uRKE45
zzzo4UC390c{B{p1?Fd+iE}86*deD^H#hrB$lF<2ya_{V_UruD%y9Zm6i)SY+Ibp6#
zJx6^ntYS;33BrjF*FU?5>`RP@Qc*UxfDC<oFu|YGqAT!4cQI*QkL)!jeXpDxpla^G
zA9I7uD)1j!?ODs?zaN_=8qy@UN!tks-K5C@i@!5ivb!4k7wF6YJ>kUYFZga1qA>}8
zDfww6kSX(@=N^I10HBdDF@bRuQl0cm5n^lBLyJy*cf~>9pv1Q;dWVTe#1l1qSx+=T
zshPS_CC>3R^HxdAs0sr=13#BrIwMg*Uz${iC;HTi2>Q?^K&u7PwvM{;tw4{(pESAn
z6sFapFJ`q_`^3xjeB*g3_K`vZyLP1^jWM+F1lV(?2Xc#xB5WF-X;dEm?)oi1Pjf!F
zSGoBE^hBCbQ%2+wH&L0<0eY+4UTNeAuF8CYyWi#~A2554xRCXYdoZPI-B44^Q~K6J
z?#4MlwcsHvnL>pD&2K41k%{0JQr04Vfo+5q+lUU5#jalHjJ=Z>E^M@+BQ%%ns!WvM
zuhNEE+=bCQnk71|{A7EL3ZP)UqL<3Zu}QXy?y+;C581<Um4R6=emJiU<K)2IYttxz
z@UK@6gA~w8kxyDRomTzlS4A;`Pe#z_a)&{X)r*mfNjx3P#iu`vcjw9+_u<jfWC{7n
zviT*)J@O;3!34M(3y_+GJMg5i)LWf8KD`N+2%rs|!gd7Gt5n!l-&v(b(;&etOqdG4
zCN6nXqXNJ}>|K5*fb82NJQA>JnO*>qGI$d9l=LHAPJ_|Z9x?f~dO!k;C0OYY0sQIC
z7S$RbpdU`cz&6e`)g+SR89Fl=I*cO&U;rOJa%Q;7-n$e(0Ne7}+r0#WAvr-*6mD0y
zPO@pT$Z}_?q!G}l{{K&G{ePYqA}Pv=JBULF@deTtSy;-#?IfH7G*>2u97}Yt{hg_+
zG=OA2bcso6q)?>O)tPGuJre+e6vii&nJls(gz>@i10{2RMsvO7%yaCwnOqa<;PPK#
z?v9^TuP6;)g5&Bac-VO57zz5F2~PWeXnC5&Bz_7oMbi{{$|9AY^b#^<R>Xe4eTqK_
zD4=Ko%DqREWUeVoX(X{qOd}jDnlm#^VB4-G>HrXU%N3yps?&!<U7zxbrI{R>?Xu+7
zgS|WqU(i#JF}<duthEPO##*r9V(GJbTj;+~#Aq@X>l;08bh*)8+i!#v5bdk!jm<uh
z?`!7WgybGWMF*K(vM{&WHF$QItAC>8S!mD6vc}(40n^FR0w~K++K?$gZBT>YT%YI;
z0XYI8ES0zm|NR1e$lNMA8px%qv$H7igiCkUSKP4bNGsK-ep8G-rIUZ>fkW}^zRzPl
zhmRW7s^wl(TV%?$;sA4Ab{nWMY7woVZUB9#mix-IXJDJ;$MPXkCsUUQn^PXCl_b0=
zgSe~FBDJ^ST$@Lr4tBo@Ds%>2%%}oZS1ZarDQ>l|`<Gr{?z-60a<*PY`IvZu)W)QU
zJrP?822f^!4=724fN@vaiXJ)6Y79@@jQ`$&*c}QI<4eDNdf&|tB3&DC1Wvk6wRMtR
z=y}!yfaOa|d;a;1qI|apEa3G+)qg&Kw|E*{XA|)#sm+sM2a0Zsmy+mq^nZxja*GjB
z3rI>f-fa-fkzsQa2O+XmT2A!@6yhole<_4%yt`8r;HW<|Z)J{SuQKR&^e3>kTQUXX
z$Jpm5Oq<1jsLiT%0j`^DlFlN7DrGCk)Vo09q1Hj(4Z+)+C{HZm2>|p4(l4O4u75gF
z1`w>~grE>08kV7_Lyaj$@k$eK4=;uG)r3h(FildbAV%+-jJ<kNZ3-^mW~1D&Ljv&S
zRpL@1yi<lqbKDMX75BCgj{`0Dpn|}t%(w;OJ}l8fl0hk$@!Ko0Dwwu5G!thB`1r*Y
z;mNF{78NluCx(NUBdB!^W~F|BjP)5!<;nGMl2YkC;4^fDKoon5{P~opKACMi)j7&m
zDl%~dv8hJ6+pQ8pw(DG;%RNH5AUU(h#%&*UdWA9ERX=Q%qG3JfewuT)PVagIC)4Jl
zgGvZY3>pZ~ewcjwF=;MP1M>w2xog3@Pn0_;;y{05v9lgjq|ZR31xRHSaTsQ3NMqUD
z$WMYu2}LCGwmI&`WLe}06c@gtHSs>a=t}^c`s%Z@FtVgy?ofaVu+2<)=$HpCSOC7v
zEg;a8p+UI0xtN03A&&%G^eV)Z-2<jcUqK?T?%73BWtf4U2;*fDlE1i~J24B$>D7;O
z?Vzqn@b7`j{bK8vQnJ>m0^TQ#Cw<k5Mzgnj<%`cU2X*v573HCT|G@&3wcs;wkkzrt
z2$3(aH#GzWSdi>8WX69?(I@B^$lb)54~-!INQw38m|*Iu<(zNC+o-Qpp@EGM7QZy-
z3yfp+8MTs)Vg<Eoo@<a+c<WBZ#HkvKibBv3GzX6Yf+v51lEMUrLy!D)6b0IoyvGa&
zxjjQt2{7jLPc1vb#3R1qyQS5r$cZhjje~GGS_sLn70+E6#d_#fX3(R8q>sYZr_Ghl
za%@ZTqw`dV@0DzX7=#e$5GP+|BHzGSLPCfAyO5)3CyDc;!}hoG2`UgqNPfzt$1(H+
z{EohEl3YkF#*6^)*9@Pcku7pMKP(Dc)bg3m-Ax?~1q*w&iAD*EsWz@12~*L04~O7D
z`Lato4~EgY;wzIiq9d~V_(kbF^q>kV_%5){oP;O)?U%5X#-Iligm&c+Zj|8fcC$cY
z@3@z6sx?NlV^#NYi}S0J27&0Doflkg6Lw3euD`Lm#o<8(K&t%DJQaZKQ{}s0a)S|Z
z`!0K5!Q-r6>CMbG-3N}$;=>t?V?zve`~tAQO8szmG1SnMSw9@w-0kq6i&<5})rGf0
zGzwXf!3%2?F@RnRR%cr$_iKs}1|41zRgm%mSN-1H!o4DB^-Z<*FRQzs8!*7KU=7H&
z8VxAjCF|>Z?|kxAz!hoC@jN+Vx$*!s7JP#9i_snHmUGx!RRE1oZ5f~k*FVH&S^PL7
zHbFDRv$l-P8|8Si)K%i1n7A}ICUZlH!dJV6%y!?K-@4B>=6Wqy*)_WxT^O=*%Z@%U
zm8D_Z`EB*88x~V^QFAE>xMYGhcx=I36g-*4FQU*(lk87a%tR^UDwQM5M(g6jxhRu-
z%&QqaT26!n$^Pzxo@sjVv|$wO?fdhbdFycHK%3>gdS@duvx{o&07C$}N^O5+eN9<k
z2<~vJ_%oN0shLD|gOB=O9}L}v6B%)+2D+yx(m0^~5N%-oMRz31FEvJp(DV+ZOT`W)
zIT6*<oRwcYtjlkwKO}|dWfYeNaKn@}6}(Z5&xIFv!pZ})N{YkQrR9{&aDH+a7AX{>
z!LA?x-3Z!F*Y)(==De;2$lKU<R=!^&CzINWCXB^jOT}cMDsCwvogT6RbyQ#lY1=!X
z$W62Hd4dn|6MvvJ88W07k;d<*vwA*~E5>GQ%agojkIh6qwNCFbe(|2YMsWw~Vl#G&
z0e9=#q~=cSDm>oaSb*Gu%{7)FpAg($eVX>$Egng<G(S3bm9wlMp@vPVpb@6)JZK(F
zHSoMP1ONn~GX2Pfg(+a)4CoW$Z~sFBsVXir`J=pT_y~Ylk3C9!pXHZaGu_l#%pb=}
z;{e5WNd&)IHw14n6Pnd<?S#w}QKRNIA0MRUsv-4(0KNl{?$E+S{TWUl1kBH@E!5o_
zC3AW)J#W<*q_*&|R{fvBWnGk?)3H&&%fqRRV3>WnHuD;@aZt$Mgi*EzSnHjAhB5x!
zSM{;{6%VPAk$q!hbo1Psn>1>Ich04UC&-Y^A{dV_q5Ycko{ChkIOtO6NA}2qK;CGk
zG!wLMqlU?B@~&)=(Iwg8dPU0B2JN4ND=i3MoP79fK>CMsD&Ih4I1%mFw?u}FbVavH
zfoa%_Vjfg_O_93<+w2AO>2h97B`tT8xK{+Q<OR#1_1v!kCBw^J_BMiEV9FF^hjdH%
ztI<KtdpLJT?Z9I29u+`Y*r*Sd4ZcFTF#_Z+iXr)tnt%zT!64FY^h4$DH$#>Nm%BXc
z=n~C1hQYMoR!MlA!vw{Ftu+Vi8~qZi@VD4e*Pok9lZ6JbtNmfe&BM$cXSsVcdln(v
z2vmP4cwQ3Q!S2fNQmfrXiD@T1HVT<|4@XsZbL$~pqe`N%E4Fu2un!K0%r?a{;tR2Q
zL(=er4j*hUq?ZRCJxdF>xpI2V>L9qadCn4gEAcI<&apzEK%XD6e1o_HA5{)GxH&T$
zhvxS;4JdW+sB=T2=ilCYizX&749(YA&P{tb85b+6dWze-9;{8ugT*4m5exK!F;d%c
z<whuc(sMv0KUJapq+B=Ln6n8hbD^eQIoC(rB7Z;yKGAmPBR!-m$o}du#U|dhR$447
z$TkM&n()o*_E6>X`<mYq{%<UrW+RE8-L#MlT7(D4^V&i{8L;(CB-jXeW6o042;r1a
zBjRG?K&ZR==>f;%knY7{YL5T4ArpG-pk>w3_6gz2#UXg`p2qsdSZwyof&|kr6(BsZ
zs-irF;J;E@i|>L^rDg!40&H@q#aEE(h}6V~{9HRSu!0__f;llH$TWr#7rNQ)<-PE%
zv75Pd9PNz?upTMcNR3=HzcI*(wAkyRqGW(lLr+mdG?Lo`tV|r0$<J<I1oUjG;|@i-
z6)w@xRM+r8|6a%4P~v3GTICp-Pgyh9?)JqN@l<}3vXx=TjBkOL#ZXXSTDI6$RrF~B
z{>0LWxJCga+W*0W+v{JQNC7H_ZP%3toC`sbT49nbF6DP7S2>r=>SXp7VLc|cp(;|1
zuA;o}U^OnQqsHuBHp=RDeD+ugZ*bL0!}~r&<Z%BB;F`lJH$x+qz6hyEQ4pG<K)clq
z6Hdv@d2M+!nVC`=H-YY$BS8q1g=J1f-tLF4&tCpCBkqZbH2Cw1L)D*`uYcIKJp#ys
zT>}E@YD$e|$<!mD3vZ??*QIG_clvGTm`Zv@W<sO^bjZMrZF@E!{?vYJiLxK`Qf^0)
zpSGAA6#v~T)ZFyRbrPv&yqFaFqGiAw-I1&3y{I*p<<+F3WR|JQy+~mCc}8L*BFQ}P
z>8vP5rciSW6eoQSO;rczDHF?l0=X9Sf?1xn{1T}cIQo^}Fz-kMb5Rc)Ex(!7_}{;C
z{d|x+dK&AU4%w*?#!kYfFM-qP*SRQ5AgFID!U+DdiaCnYnn5=vBm=?N&7RWdz$P_S
zsF~nsSlbsCtuQyn&N&=IF~q$|^GhkRB%{WmYB{26Y}Cz?du<i<kmL>U=W?e!yt4p|
z=ypIg*Zbwi1fZ{}-@(``F-^92DjyAKQcG;q&^^f<qNavi=U5%AY806|4}{KPvlYlI
z%-6B++uu)ME6NLE|GO}?p8P-f%l{7=bEaj7Jtz;wFM2-oqsCBB_NiQ<Fml_@J+THJ
z9M`*9-kZ9%Upia)&1JqUsrZlhwS8)`n3<@Om(`f8aB9J<wQXl=rI$}&)`hC#@iE>^
zR>{jUR9D1}vY8Q1y*oDgRy5Yq(>gPJpc@y0I~?L<)H%Jh=7)W7+mzl!3Mls499nF2
zYKpss=Jv`#pK)cJfua!Dqgd2BuKR@1Yn{lb&z=i{UuE<yH=Elk1GWvUE;<hbjL-8R
zM-j*#ca^D%79o>hdI1E43#?>op%gX<_n_+3oJP}-^Su>wQ44eurZ`~LF};*<M;tVf
zUq0KEvqY2n5Gi0PL$}GKhp>XMxZUaQht8(Wu2H@RsvWVQf8T=R_aKy8z_A(Y=1c-M
zf8MTn^5cC=8V@X%6^BNbf+9L5Od$bQ;I4bkyZS|=2+dxx{hEvuh^)m<kyXe_%>9|#
z&+p1cEAwC@<0_=RJZc0Rt}+Im`7=z6JWc5`)QXpz%MQ=-Gzk~#q0F<XEhi=y^$155
z4W{CVN6TNLhi#ox<lbuFr+Nf68i6o>PS~dwoM5A6vssbE;%V?(M2#MZH=zi9$eamu
z?RK;SP8`eKX1+alLxS<hQsI7vB@GbSWHQQz&e+8eD0iZBVD?+g8mGWIpRw!LT?1-a
zMtN$>%Rq-;6+|mtD4oRsn8Vl}C6@~n$wa#Bte|SD*q;Sv;&HFM=5(x;`^32UNpW<$
zA-vDOd9d^~JrQ)tQY;;??aKWFe?P-DBDMysmL!+AVaox!woip<0<yO$us<T^qRh#n
zd>Jx;-o(iCuf#GNg7W*8va5a`;9cRI&6F6iY;0c+RGPf7pl&Tixf*o*)9?gW_jbm-
zD^tJXC$&{WfZpi^Z_mX_q22-J<C<fG9frD`M#?t4Kbt~J6gk&G5p19Jh5nTRKFat?
z!hOld!Xm7XMNO%DNa<|Wh4RwRC?0_Hrn03GoDfz>kY(-rw6`$bKD8BalCJm1W*vf@
zrOV>6z}1`36X2q|c4SYVk8%hL$gfTQ9s253e&#>DhZhY3jSus~3-E#U)Pz}JXXxsI
z5jq1Z@p2W`S^Sk;0kp4tXxVuX=@f8StOA>}rYf`*cBX%+*&9c7KzR%;7Srp0kdWSQ
zT!h!un8tDjIJ<xgQrgb(A=Q6OestGcobr5?od~Lbf_YfazA1K-vj_$HMrcjctj85>
z*4;-!T)f|Z2IV%@fqLgdtP~l~grJGB318B6dZ;=`SU-%jx2YNPa<}I?7G&^YLsOmO
z5vRq>HgXEXSYlCEjE`XD8bCKDMG<VnJtJZ2?xv^vmfTI-o2bf)N~~U$oF=us`=Z1P
z_1SM$FMeJOWYtcY_k5^hX*WG2St7&%7w825HfckILs7svX2D7U10#!t(u(Q(Xs$a*
zm4chah5Qyhll-!ox(_2XYg;yu)Yy_45wiAT;I<jPKf|A&m+E3we)t4$Pek<-KuB1-
zqIgY3YJqAYz63u1LiY0~T45!ci^(vHt^`at4|36HcJt^jbX}j4D$=du8P3;JRttrZ
z*jx9WfBxK||B!f%)K=v)k@5<xk$sN3Gpl|zC4rtmb)PC>os}58h*uPUnRrxr9hzNa
zd#rlUgK&q_F+RU5VI!gLzv}BR#m@S|ya%Yqg`jg;^!*_*k<^9;+!Rp6f(wHEm8X}P
z9M%J4HHG!gXG<Dbw2{@XrFV)(ujAu7lxo9rQ-Q-4^@@K){7f%^$p`~1Mn8i=qh~c?
zOszof-PDq{ureMOI7lfSEdM79MXJk`Z%b#}s(}d-{|}xR8RN$C`AQZV*p5k$D6;Jx
zLP+_u;Xc$C45k3~*l(Md@?_~mb*0JcSo2#f!-M@{6b*dh`DdJ!Gb2kmNavw^8lclx
z3034-U<uV)wd#VNVXUX)Gg8G&xDSmfbCMe;o*J}R6q!>E0)1^^+XM9;`<(fGp!j34
zaq8n={U(h6ykb>VgbO+Daw+#A;#W|Ri@-r?I!}@v#^xG;gfRNd5W=4ncl1->s=1=1
zyqI^IqG@lZ4hYb<4ofqSRMx%Iwm;fb`K;yk;#q(h1t{n?f#cpj@bYpI4O8(JVLgVt
z4!sdkjzCjuTB)CXr9K5c+^D&kpb331fzp8&dBn>weFcogC8rP$-lz@?r+pj6*f31R
z%T@9|WEH0T{+fULexTEmf=Kt!t4K8w=nXzz>3}IyvQ(5<E0AyRn-alFzz1V2fuX^q
zav+1w)3!%e(z~Kz++0`t3%M5Q?S39r62nDd>T=xNQ7GB*r?ZwpZdYT>2^c%%<n||F
zlKupes6$2hI~X_XqsMfW>1{I5P!l*voB<^5>qEpJHHiqZ6D|$C6A0V#b}|1iw%#<X
zsk3d{hEhdEj4~<+v7({{OsfQL5fT*@5fNt~2&qzp5JPGe2@n!Q0Re%k6)F^>B9jae
zAw(f0LI~7aWC#!mLP$~vhQL}1VQB{6i~D<?cl&<4e_CW~<I1(xx`yLC&ixp>oAA}3
zV`kYfEnn_c+ATtZJ8H*v=H#w)D}jcC`{;%W4ccnF*rtik=?52Shop2WBv%RZ!i4+`
z=XH&P?71uPiprW<N&nX8cwh}xEcZ9o-*T)1KRE?6XT6UYgT^91@QwuOO0-OH!VE@U
zXiUJ`)R3C~oOK=l1ZZfe)kvrM3PN(ssGUo~3wz7c8j7q>Ar~UfJVLBb7oLJQFjvuc
zEP9(Nxvq7ShTW|oUwA_d^I{EApW`34_~}h+bagSalbYk;<NI~BSi_4Eu`%bd7!>`e
z{uTezy<7M?8Tgh#Va)rdr$5FBdbbLG`N%8@&{rno?*<@_T<ywSg+RsCMCu1vPa-oI
z+iBi%JJu9Q;l*r~t=2NjK3D@)Vk?I3UyhWE?3ecfT&6r8i!m<aL_C^gm=DBIv3A6E
zn{UPoJlDr^1^i-Jz)z^*Y_fiNXPOK8WWEsa$}*@NWOjJmb*CL!9pUfj!y7akJSBFC
z4L#PWEUQl}8|PX-Si)vc%_g0ics20$=~aJz-UiO^Mu>Ev6dBf_>6ZXFL1s$#h699{
zEc{Y!q_X=O!x8prW7^Wvh3;36L9FXD^dA*jc9?cOx~Ydlu37f!MDNdAo(^|1sg@05
zX_cXkK@5-{x^$0uXYP^hEn(nT)EuOhx9Qi5sjk$OG-^B34!4<{u(<hQ^hz&|{toa)
zurj9`bOHYS##?@gFKvfOs+gbRGNX#!B7Q<SBNUjdV7Jy>o&=iR65J;3ZsfQkM7Jqv
zv8Ek_6+|lVMr3Y*-N4(N`xi?>qeoZw&sJ%&Hz`0>LX0UFmpvozpt?@l-u;eL<1%94
zh3+77-mAhv<O+eEqF<-)M>qK7@a$?u%WY)Wv=MNXA|OMHt!|~pE>iJ4YEx^FV(>}*
zXH(Qt>BrU6s!a!`YsQ}Ls`s|7Fn%=)>Ugtt;L*zjvq~%vs5^^x>i(P)NCVpi4Wlf`
zp$(<X4rsLp<kQ?V6zmf!iSgXl?0LLma{MBos}C~PHgcPr#5D~;HCwUcb6AgS^Wg{m
z$R`B`U%2Ww;4=?vLHGmX@2>{7f+$%!y3s#f)N*``DwJ8$10`A$MQ%!`ytJ`qjA#($
zk()`UY`vpML}%i>9NMh_S_j~^DBr*L&JhPUC6hiz7hLSJ=r_y;mwN_Gejuuh#R;5B
zFVpwyK_xOJQ+r5vgKh~Iwuh~^H-pk!$yD3udA*C6VMnWKm#vt?tVCv`&{ll&*Cc5w
zH<ON6xZrm`9#Z%g9tcn^#Q=Rywdlz`)G_c`wP21h5JY!hVb(>q=jIk~0Ka2tiMm?e
z4hWaDQ?XS5v6K<%xtD6pyzE~&seqCy!dX8X<YVcl#H@~jy*8ghNb33z1fsMd$uBew
zzml-CChwl1HjnNGN=s4QS3O+br|D5z1|osVg-tn?Tc1@#p-uVU(<YxwUDO<}(xPk9
zmUsE`B&KiOvw=-@;#tj>*roSwP5b%T?u`6hNcm>nB5DS!!AE5XmvtTjB_QoZL<C13
z>Wz6P=xvzEV42g&%4WMwUli#2?!+<ztvqy~W@_s@?l((oDdCx<?{wm4yBm`+S`S@0
zlN50E%eTcAh_7ak_5u<jkLTECpQV~=J&<~(?As4!6Z5|fhm1_ziqhM_fQ9Q@F%mKq
z+<JjN*zqokLV0j2@WA>L1|ndmRw{ElWK(zq$UbZMP7CP3Ympj1{VD+hjy<b9iOLxS
zOtXywaNKRg165e=G#JaAVyUQ8MHr3W)MA+mNH0xHDNj}x@_CmX{t7;NMtWOLO*_xC
z1~q}-5gqitReGL#n>1<;0sZ27@k*%cnl!baEBO>01@h`P6_!e0CM8|)di(Eh1cx^x
z0WR(Td^$M&d~JHWEL*llj}0XS%GQ8#P5{D5yf^$t8WjgdDoG)*4~-h+KG}zT+j!@K
zqKFunf0)}`uq5JHT9-U0etpK<{ZYNY8~wBS8*<c!rl%=`&hgys`@T)gvHs`opzE9X
z=Wm3LYgfdJ44A*zgF^UKSFD#$tA33DN!26><;=BVQDA401(YAw&<H(5t}_WMmhQm1
zI30k!z_godGBP>n=I*S9qU({k{fPs)-TLmv6&3f;>3{_<K-Nouj(N*Q(CT*|7WxBm
z8I|2w?A+KJtA<VpP@cXI5!Q3ngD!<B<|y<xQrK}hpcFU>rIsCct6CMC3Z~<+w&d(>
z{{#!YUK`8b8YJXDpSf1N3HfROvq9PJdF~?rvJm8@k|@FeDR!yn#tSv4{YWLd71RuS
z=RQxndtFtb!bSfKHvLSft&g6cUlnrN&-BsD4Zj?msCbT+@xlMJxS#R5>2g-dxKeLY
zqzU@a*6Amn>bQ9yNmS&jxBl)zS$|dI4(|MoYB5t07+ycs#MJs#<9pX<>6S@!dkmP4
zEQkP-ps1pSf2cysY2FH%%J>nZ-<oN~GcM8Y>%ncKRmQ&dOjLN`Ua(pvr}%Dlu<><m
zWFomDiaUzF?c0}$2#IM-6oIsD!{7$DyHSQPUhAH#>I7Z(g_=O7V(&u4(!0Nyn7@;8
zmj|^ZCBPEYYC4M@;K+>FuLf%;5}v_}OO;;K&;cyba>52Kipk+70bW)WFc1d1Z{|84
zEB@#w^Ews2<ED3yaW5Vk#dFa*dvLwLsI>}C1V$|ngU_rm08FwZ7j$Q61F9!R9bnA$
zIf_phAVS5e_J0bJU{x1`c!mF!oKE#`dMW@h0>|_Uh305Kwbqf>!Yc-nQ)xlqWrG+0
z4WroTqcxA~kU=Nd(lYdrunp(cqhC!bz$DMfGC{&eZ1p(TW>$}etkYu!Cdj!jO5x}l
zZj%@<cZ4lF1i;T0^!kIuX7tLrp3pGj=?OLTns+goc@zyV-gFg^i_Agc8@8+#eEF`z
z2#!>PYEX*Hg6d+9AFD*$3eL7ztAFR{SlW2adMT|i4CaF2Oxs2)o)4|-Q;!$h^-&pX
zgU6+v$((01yu*BKp9|KBEHFcU8E@Kpzgpxa(zL3bAk?@CDA8Pv7Mu^!Ih?EmAVZY2
z`;>JPW$u38T<*dy<gb2yFU1)@^o6aBxO^W}w}!g_?1cZ-U{}jmgZ;ONvwp0(t%h1#
z+T<QYq_Jl7u`KxZQF`2<)&$N~CxN+VyL>TQ$xH?0G~SLRvI70>q;y^=v+|X*ETTR|
zHT|1#s$$Ti^ugcR5gYY4FGC~G>)r&!Jhzd~tI9Rup!zuoHU>;-xB3qloyPNdIN^c1
zPWNKd<B-y-4+-k@>fkP*@oueuIAQPn?D2qW(Xlp#qVuSjUGu)arM{R<{v#qSaKC}h
z0gNChlCGwME#0DDVB?MsVzxB$c{iX-i?#N}>tJi`cek{AVEal%fc*;ql^(oPikwFB
zTN{}}g0oQm^%!6$SGHex5#daT<?!z&s)sgl40NyHa_t&cMG(!eJ%7|t#|Mv9c8zQ3
z{`YObQiGYA;9K@!TM}%80W6{>yuA@`!}E^^6ch>BlJlwt2p7?QtN(R3@^2n``-3r@
zI!4TpS?Rw;*ntCj3%WlHY>+G~-R&b#S(O5l7KVi#Q(_B895n~~-f8v$^JPcr!)R-Q
z*Q@f9aY^56|DA+@*z%xI-<Ze-E-iT{+lC>*0|g{^d35nIBtvr;c=2#h%+tKyNro9*
z-oeVS-vZ1sc15bj(n$Ntdy~bEf<Df-4gKd;7**bMUqp&}P&%=$zSaDm@zi_mDz1JB
z3g9EYpJ|=Rkl6v3JSG4!1ufan1!m=lU&+RNVLno*2v|iE`a+$l^fL-8Uf(;oJb9|Y
ze}!-#EJ)jz{biz{bg+~O7=MK(|2e-%)MNZ1QWXd$svI)j5Ik7;8v+}>y?*$Vz>Mby
z6@rss2F}4T#WMhM)LZKF6{hIcrt|uB@Wy*^Xu61H+g&zcBG=)Mv3&PKZ~wKH{&}j=
zdiywZ`UNw_5ZoCvkjwfHAhla`tI2#_x#v+$07>wT=XVvz%RngiifbrZevM_pQJqIl
z#aGjhRwAh}yjbYVOW|+cm4)O`tI<AX80%ODwU&*4(&u!d#o$Yv8eG%W0A7H`h4Ht{
zMi4cVCTMgkf)kG;c4K&Rz%4~zp`U~z_^Vqh5tHW$_9Y6Y?HiK4V;xci8^v93m_Y$u
zR*K7xdk`WeAAf!x9Vjl%v;GCO3Ot`d%+`jmg-uN+;|0zP7|73PPLe=O2f%)S0GOn5
zp<sCwa~WEZQ&SPeFov1eap=heK}Jk1f1MV`?b-SkrlxXUQrr*L`(NztQ>i#RvxWnC
zej5x_%&`*SmmxPk)0pc20*K4#TqC_CkGUpaZb1lZ2AkSNwDhqd<YzI>V?yuZaJ2uD
z%jK5}V*8>N$$6}u_kpNOAzhfmoR-H)`>CqyTPZFo%r0;wOaTYh)>^`hsuct)VRV(e
zi<+<@tqrK(3#b*e^fug5Xr{Fu-f<85Igna5o{-bb4%7M}j7Gv7XbOKcZ?m!ZP6Z+8
zbr}nz?&|6q=qgP%HU<}S1dMSM&mU|lCv~@Yff^8br>+q5chDl`jU2gcz;*o^3C<GV
zHbOkyqrIS*K_Nza20gc5Aj3uqOYZfU5;!i?)h{&QATM;u@Oa$ziOZ7w+$i-S!)az6
zN^29Zph~mUfrz7KzZUc<0}c6FLU|{~fJRhs)9EI1>Q!R}g`Yo$K}Qj&nRJv}jUo{|
z@~FRHtNZeiQ-5oMdsUZqs9Zxpy`f$?z*+NM-bsVcRQ)m~c#=QRa`j7ZYurh!2H<fc
zjqFqkuDN)U9wP3Y1UEL+7LY2PPIt_-bD_Ib(vm2=Sa@-F`{hp)tHKDAM?&93Z6Ci`
zXj>Sd+FLvhNPh*OiQh;=L4dBXm<p6ufhpZmfzD)c_vKz;d`D)W#eiOc>}>sNV2H}4
z?~u0~`+{j`%q^pJ9z~kRsst-bf8XZ4{7V)R;*%M|d1}?;d%o`U8w18(W@`kHKvKiD
zfV=2V3zu8BXQ6YO0y<e~GK<(rF!FvCr)gHqG`=%5pX1!1^A5}D(s~qcfnOC>A_<z^
zb+@9h6})|v#1*BBy0Two{)R1`dv5&i`?LiR)v!@()8brtfU$l+(7;OdbdjrYk^?=S
zSh)bW;#|Fqy!+0d4RUViLi>n41Igv2f}}q;Kb8&!hwP?M&8mNCzy3|dV$<yR9o^Cy
zB~{2?ih%hqQ}0MWiLeyi-vVAhXNKOH2B55)TdYU7z?S78=Ba!Fw-GiSeD+8hb*iAO
z(Qd%B{nX0tSWm0!sSji5AvYipEdJSNYt}<Q1s>V#{hF2*x~<JWp>wb9Zhm0zc}_kj
zgX8D#a7uu@e?W{*h~U7*wx)YN?eE*lrW|uB%-$YQ5ZG|t2nOMVV9>tZfYfMA8Lyd7
z;->24f*X7@L=ditLaKH_j;(Ba&{Z=poGip!PvEu!Wto$RwnM_a{5p<)D7bvLmZseE
ztYP3%5i`st@201iQ+h{L-3VIIUB>|;ov6wRFD2!9>rFu8_;`vqpq^tBb6Y->i60^`
zhg1);raU6G5lOjPKb2d&74yR>=7(O9K8vca+=aizLR>IfbBRKxHRr0Ira#A9>2cA-
z2C$nDVGN_d*rRR~Zw!q=t);OJkPCqT?T^l`<^YWVY5O7$?2E-O8y&ywtv8dc^v0!<
zN(1Z$YSrTN$vDs}m<H>f0yF<7X7r5qKyH>yJA``s8MscR>}=2QTBH$Vn*rw`FxJc*
zk=V9N^w@#ek>f{T%6x|XR5VIq+r4UJq^tV$WHw{bWVAS}MH71E*O=wPB!eV#5M83w
zT=;6x`%XU~LvEt21)uBhp^7CSS}MSn-QEsNefbIxS_N&Ku?}dmv2YVI63bM<N=rD1
zrysTd-UhOH4KESsB{l->q15-o2F1y^YyYoH?lFGp9v2rlALuTTxLfCQ^UXs?!$P|@
ziUtM-+Ox5uuCDff`noT8)_&}At?u)4*xqb)Ht3rcgV?a8uq<0|Ln{H!e_`$#S`}Ca
zvR$`dmSVC%(6b$}jla3i_Q>O=KK848_J_a%Mpb#?$ks3O{>^UrzZ4dlysX;69e(3y
zo1FOSzUCLbw1AU3edm$>HJW2zUKV{h--A(79*supox_5nt*n1*X?c4`Rn&cB1GlN6
znS1NNR!Vu!fymU+Ek|$O4KjNBH<%S#03tR}k>09f5H0B&kef<bDt|M}|7q_#z+_{s
zrlq%fXr=q!407EQPBe9<#kydQ-u7>L`lP;CA)5AY5EBS5Hynoc{$)79*sQAqfRXOC
zv_!BhX5*t-Qg4yo0$%icQ%s9I*Mj~FQUrQ=$O)H}=Hp-ZSyi-0pZxo)%M6xMsFd=Q
zT|dB$03!$-gx>+M>!kXcPT+}$vy?M!fPRb@3F?^Fw5ve9vyH{H)H<h&5^~$AtC2K6
z^m3Z`6f`%No2E^KM9x}sQke`%JeoH#BLbDe+S1>TMr|N<SL`y>xNDArrIFYeR;j_$
zPiD&WCWf#?`Bs#kTI;!+0wpTl?!u0T5Q?&yW%6d2mM1#^+n2;?c4-fA9{*hE>!-8&
z_`WsajTL`geP8(<=iU{iQHEMK?KVUPmyFfCs!4>Xig^+0T7H4ns<BBW6JpQ^`+1zl
z0O!VSzX)no0B{8#$UmC$DkLj|a+Vig!o3w=Y<cR=OM_Uxr>=?_jn8D*@SsQ_B}oI6
zGwn>{X!GDVM39ZfS`GL^0%4$deE!F<*8%bOX;<3|^71cYv;SQ=GV}sl)x!DbXn@Iv
ziW~RPeR%CENBxpm%^`+FR=??)<|qxNUuFuU)Xq?PJJBkX7U|u?HzCj@CnefglrY;T
zw3j+Zyly01fT5WOy%v>_-J43wuhrPU7nv6(j>N#PZg4X!5#xT)j*3CtZ>ygoXEZii
zA|ieS5JwD*e$d1HIU6;>T7v~^AklV;v5sWFwi%LLx#Ukg2D`P~3!4BU5zdJug9@Vf
zXv#tVWqt33jeZsTaQDk=o6EiWN_&jq?F&H-1fZs)5G;$R<KTa0r4l))T;_Qb^wnHA
z_fWp5*bMSX)0+y~XPzM6%iC=>s+$!iGZ{=&p19rm({3hqG%MnvY-n7a(w-eX@h-8D
zybA@cDWwwJ_hKjTLoDM3h*qxFuF)JDXW4mffs`RoDXSfXNC`}c@^keMKLF|>HC<~Y
zS49fVq=-gg$<EknEz)lWQ+w$5&<6~uEY$B2VT5QKTw`JMc^u?n9o378OFcdLt3X%j
zKJ8^BT<+S^)PGxuMlrV1K|XPM{?V3?`e8;BCf##i8R>y~=0%n&a8G{#J|A7^Fy()5
zHSnE!(k~#xx^z&pU@6^2Okj4q0f<b@Hh1tFyaM#hBmsT#tASdgW~w{YXn@py#n#={
z)#z@Qg8wclc~~dVxCdwg3)N1{%|=xaUPacNq;G@xcgL7%vIdE25j5YL;5f{z<9#>A
zydhf!svb!W8owjW19Rx9E~DMBThYVUNrF=Xe*X;P1<6{<F&S<int$`A%OUv!+DyM)
zdj{#PAT@D2Fj?S_&J#`8KMOA3tkn9!l1$II3KD@{UwHSt>#)pXqKVU${b#<j#Ec+)
zX@T0ghOq7576azjUcDX!vyZ{74(2tmj2ctvZY|V|uq9Rm;&WTpRS;~a-O%J)Ux!r1
zL(QFpP_D4Kip_~%N&7qW_(^dC2b#TQ8lXA+Q5N9V_Hj3L7y315Yqu3Vndtx<Js>)@
zN@ZMJ4GO$I-@GWLfx$}b(XT=rjt7{J8y|)vMJQA454xMKs<`L&XudV^+yFhKEE<pE
zQOif7F8}(H!PQ$2o*!KN>`9)bf&Q-wBLt}CDP%ec*{47uJ32uo^rI-Exu<D0iDjlY
zj|Mk9zLHeDsc%7D1S?^iG=ECxc>NM)>FDst3krK8VJ~APe2AOZbeg-Z6O}$kO8KL@
z9H5Ik-WS_OoqP7Iz$r12_OMtH|L=kODXV{b;VeG*_Sk<)vV;G<IdpWD-;W07yU?8=
z**Q?@*v4E5zF)XttnnAnUgv4~=p~#B8YVnLp@N;5RpS@A?X2Zd0vrCei30w!vE+P5
zy%}Za;l4SY?eXTPeYnBj#+y=GG&iFN(FS@U$1A|U_tJ=W@L;Too#TPN^R;tc!0$CZ
z_E>zW%dKtcRyN0U&zFe<l=D;7st0-Rrl;Qp-Q%Y0*i^7Ld(8(UEs;r?v7p6)QEvn!
zBH-AVBv3Qx8^QixdQ~}}>4{Oe*i1X=9Ei}g049nGYBOp`fj!%I$CphsMT~IfvfnuO
zo+fl#^w#+-O2!fYudioz;XVdvBjqk+{nB{wykEYp2sJ+jN2V}#(*5&AdfO-cK#J~O
zE>y(Ng3aX$|C;fee@hC^+o+04-*()@_8%2h_(Wc&gb|;-S(1!Dg&(WY?}Ug#U^Kv}
z;7XcOL@>Tq4JL#kYxQ+#Q+lkz^jP=7^dOK~hg*dR+loz~+CS!hZO4GEj0NrX3Gpn&
z+OP2w1~W6QNL%tp-n|9%*bv?xaTMVpAL>v^8)GdTcBPiak{8zl+_-Ed4__AD7+27p
zGS`x*z77KHDdvaZtwqb(aU~-YdNbHQRpH{c^YsJwro)xwcnaUqWtaVDa8wzG%dgRG
z!G17LSKkS?Klc#|FBt6d7t=zqHHXEAnX72rkbz6@`{>vQrTuko<+ag24vqSg%Z4&y
z-ln{oke~fw_%Hy)_=4u0|8}G={L9AXP{xX?GC!y43!;i(Ux&K32OIx6G~GV7=;XJz
z0t_NEf$xbrvjk~w0|$CRx|TAQyYj=R3&hNv%`#;Qaho7@3ArjNL7njkSVPLAn@*KS
zY#7XMbkFPS#J04XdH(8<vh;nFF$~Ud#(4nR5O*2<I6t|D?)%^kGQ77Rw-YG|g8sC*
zQ_Wx3$J@ak(qhDyyr@U|Zh6N?mPOBhvEoFQjRu%`$6qKVb{ZWRtpC<PZ(U(D1?qpq
zOdfVD0NLy~<)mb;nQS7aYSCk|VYE6N4$Rd0)rNVONAc}|f06G-a|o2gju4MLqp7AY
zwK)3KH}zvpUZx+QP+Z;?2cFm;4Zh|%r;w_U$q@3e(;paT_PVr*zUjfJX_uIq7>8iW
zG^ISFc*|I^qwkplN7}#HcY5yz`x`Ke;<WaLO3YH=FnXtB@v!%i+xrGUxB+#j!^OQL
z!L6{8Fd7|Z)gPOSrm@2Ms<D~_8{-?Qy1e)DpA6Kvu&uU~iP<hxv+ax8kNwB^W55C^
zVBxl)#q(O5li-l|Ee)+-7O(W**@1Hg0!Zo%-+}Q$wu)yswlg&GWPRUTn3+AzaH5;S
z{@iQeXnsqiD_5AXS0KmR3tDRLkl%%!9{RxjxZC{mip@qkXE0#_!8awC9*Ot@fn^6c
zVX%_!X%9mC>%(DutH-N!NTC5w<L$&qWlMM)$nQOR0hqAc+)vFP+pRF^T0bmon(LbK
zIL*bFHs)5I{_RXdQNNL9&9i6RdhSym?`c}!g54pewl?B`i>hX9e_mo%MrlOm>ND9k
zz7aR?IP8nOylm+a6nqa{#SNrf$k+jXxT+svV4=&;N)c8Y4x_6Rkk}TqkoE$*DVv-u
z;NJr8u??O4=tIHi%?bi9Px9qlRT;ply$&1x3kn631XP#Z|Jb<WcSGF^W@~}{HmK-#
z;Q39S@$`KlMI`MQ4UU$-8!GK6C9e=vBTV6s^fQk^Y+4!V*Mr=+rpp;XQeHfKqNy?M
zK=rvn*MFb>?0y8`v1FjJU9cRn7J2~LS{un8x3`4yQ-Sl1*<QR+GG{_@+S}6*x>f4e
z<#Tc%)@f*cLtWhyPNwg4Ow5J@53<+XO|~%9e;4LhY|A#IrM(+HQ821JJy4z!_1g7U
zAy(IZ)6aH!n(wMR16Nv)EqS%i;7pJ47eJ3H)`RQso>~O<lsM3CljWXsi8^fDVZUvF
z?qFXMJ-S}3byN^jz%hK5h(dBE518qiT&x2JJ+~-Aw+W9$?W+-~Gb#z4TM7pE9zlHo
zk<^Y04=74)s;i^#QxeUh_!d3+fVm=mXh$UW*IcT>YXaMuD9_z;osqwF;4P6kagy+^
zw47uU`k<~@bF_t1-<ae3?f?K1%k-v4VD2@n4A~fSWlU$={>7?N(ftiQ9C=ji3XSAc
zMqaF?0q$V?wh6sGCDAYQ6i@6RaeY4Dbcp*)r`7#$-BHmWKbv1q#vcZfK<y})A%y~D
z6IwN1fy{`C(NJpcbr2KQEj0$qZxd`)75Pw9gUA3JMH?!oE<yqhl3$$F_rR!3&wZ7z
zqrPlic)*FHZyp}mi$ohBS$fkuFi47DkaI5T?s{V6GZs+<$#wl&GTKgySE@|>`&Ae$
z)tH<hQGvp4M*{9Hs3xoloAl)kfIJ5;6A%&OUbk10aJVWmaWN7Rcn@_3tT)Np2ss|?
ztXdtI=cDMy75>&jF-`DX>T{Lnw4$z(F#ZwnFB0;zE}0CYRz%%=^U`*LFffvLw_<d6
zIl)<Sj1Uy|=K3|a`j;ygv5|GaySY(`LN?@1k<qDO9;9UkEYW)LAZliKFUKi#4`@KI
z_l522E>_a0gdC|)()N%#PQR<Bs>p3>U#uNxuIQ!DzazUoCe!k@Yb8qdVp_O<$++ea
z=yVI)(sL=mOzS&{`xar!^;aq<@-8O`Zp^iy)ES7c(m(PLG|F<VjIA0a0msR^W`)as
zr_H5q35V~*$6t7|I;+R{4Zt?eplJ>YN3FTFdTBpzsiGT&@Pz;<f}i>{X2+NmN^6R%
zR%9ue23iM*nd(WFd!4L)n?Gg04ia3SZSmeeI9tX3{$tyh!2@L(jN`k|c|Z@01t)ih
z`(Ol}=P<@(`%OKw-Bz^s%D}c6#GCG(R4EN17jGsmpZFMEy#Dr{zPER%*#9)R;DWZ!
zk!sf8a>3bVoolA?#W5SfJiV<697%Oe{FTUjE8YTU4cNWb!d%M*9LQprdTrJ}QfTi2
z)mBB;Ak5Id>FV!(7zNfv7FJZ+?|iZ(+@kty!HzS(Z|MCi6L{&tB`I<4(65XxAg>57
z!~0Wk>jL1HfiN%3L_biEbEFy*XvXbLmYta^u5a{6iP};_3?X@+q*=Z4-{VcPV0#{4
zZ@^^L7$j}ctVZ&M`sKREAc1%_tv*Ps-6<z7)%UT!;rS_uE2HOs3?>n*(`PZ6_ErPf
zqVVIqyLq<$_(S5F7%DX;A|lfyYGdC1B?}a=l1nYefu*`@XGkyB)--(opfd&Q?-<xO
z<1%Nu{e&0`+BK%Ib{_gZ-x}(9DkUQGUEj2HVUc>96ZJD~#6B6Hi$XA<uo!Udi?P;H
zqF=(K)X;sPu)FxyT&YQ${yzxU^!@dQr#~ZPxhYY}eQp=x2V3V@)?SnsegD<qAh?xS
zzmS&Ggig1@hoi(Yii7zN#_Aub7pQU6MFZ8)2;q&;PQ>ZrWnf!GyuY4!dz$a>TKo8=
zt@F(nw%a_mJ*hipV!-?p&{0(jlh1AaGDFB`cMq75Ckc`(%yV|;-f;09;JVG1j9LK#
zat7!t-52q2a&YjY@7DZ^kth#-ezkWbZT-`vokyQEulnr1vKiC}fnDMM?p*$7rCcEE
z=u`1fBsE8C?LL*NIjr55D<T+a_lm)xXN@*4e(cJlAs`7Hr;fFRgXUx^YP|USq~(8O
zjqZh!3+!ti`aG&OJ%_bjL$N>k=Y#(k&-rM)k@u}EQ^vP+A`Dg!ix2iop~y7;TBPZ#
z0TDDtU_)HY_w>2o>oDtl*>hfdqFgBLT=U)J81^PjAppy9ePcFdI)W$F++*QM^#oJh
zAbKrrXFD1?h%!XHLFn++DjNGa8X#$<G^H?sQ56|mOFO7+XLt;PZ6&Jwx@$!#d1N!W
zz~vu8-tCS5{^(Odh`%NEe6Z%)F7$mF1WIZ4h!fC-v}W(sQ!Q|3rWP-EBAV&{!LQ*N
z%ZEVE*U-3cEh6a{H2@$ht%Ka(L3OJ=7QK>|OK52nH)Ma`;|E^(t?M)H*!^atWiEs>
z%<;fdyb_VL*#nt6#h)Q!K^e3{Z+Ht--j;-KWjKbKA8+U{6pn7~p>FM{mlu&-BJMPF
zT|8v%#*QxwTT&}en;49{?tRhdsc|>RTc_q~SILPW7**vYN1FjO@)vX_!*LS-4G1-!
z5jK@oMMl=phC_PrQOs+6cZqBF^6~nE+yv2Rt{iPT$#>{iKFK6L9`^_xc>ChOZ&qMD
zoge*wK4<*bKD{Siz60j!R@eiDwC(DtuLl1%89aCAra=>%raw$9{xDkj$+HX^T|@tL
zIVNjOS1)V6<5xYkP}3#)e9sg($qv&gUk$v|Gnvr60m0|3$#`GESS|}Xtnvnt-I}Nm
zUkwbVahtk8a5WAMfZ+Nc={|7j4fAOG?ZhR>@sp7HrW<R_FEV5HGcTeV$rthMo}?d<
zP+eTROb)Vw;q7GtW=SwDfC$b~0)-i72*g5D)gmz6umA`?AAnWE)vrOD>ru@ThD5Ly
zAEEQ>P%|(R+!ADzxgr?R2u}foVhOzBc4Ar3WU>8V$6e1)qcrA;eoyxr(i3vQT0(Ih
z<pG#5ZT96~r|&yMrq&XZ>0^M;R#@eL2->G}N`q~Q1Hr*TXYTwyvhu{$lqIce*Z$jM
ztg_aw<m#7h2VZ~D5kv_G_`yCM{ujq2LgtmQ<$ZK-MYiAb!J8v=Uw8#qS(qKZ7b?z{
zCuZ;8)N{$}dxw(Ag7QqPYHxJ@+0o7b=-pk=@`?DeJ$>arpvLFHBOWD~nrGgdyzJqw
z5@`Yn6Z1{`OG%}nv=scew5z)t`)kj?OY2CY?gkBUwl&lPY2%99$NF42T{cMvyUx|8
zpAtX3O9kd{1Kf{V44Ak8-KP>FisA}z_Z6&b_*L2qkf1$ZZ~wHVxo6=FW`MAcLuGaG
z_eY`$jGGm2KFoXM+`i~`_X4w&lwTk0X%<RSAFm(YYxo`zxWMVD)dWA5#$Tv%S0Rzg
zbP*<tXafp>o$~IsuDJcs;;aXB53y@ix6S0J+kmTvxhia;sqDTY#6)Fs5Nf=6-<L|F
zM3BNOqowMaM=w3OVfOWq!dvkhYM7lxgd&O0gY;{VchnRjhbnrDa4GVZ!;|uVnHICM
z#lFzHPa?NQ)rHdW;_dluVHWA_(#uz>0#=GKb1i0e$B*``Z}u1ghpYo%m|BM~_lzOC
z1-UDT3GKxr?(=ORPP2O`4j8lMMMP<Ug4$N&5Q3yvBDT-<=E%0D(8dRY`XyN};T3ht
zY`^w|h&j$bk}r8Rrh@cKE%rml57j;9@quzvE;;VsvkUhU3_&WhwH8QFiy0lV2IEfF
zRRO2FgKZ7UId~xuP)SWte#f&*I|Ykrx7*Om8|?f<qwan8o<faRSCp609tA8TB{b+)
zHQgHhbchEpYRO5j0-HCIw52=a(hsOV0gj3Z#YA2c#1LN#fI!O;h-Rd53Z~E&f5YAZ
zzD4(dB3m8B>+-tWfJy!gC_8^CE>&v4wE2O%%2(kP&;fdy97qX=(@i^y%4uh1KK-@W
z;gRD+L67za!wEdFz94RK@|md`jX9mDD`l+G4*=H@FOE%L`J@hh#~GW+#=njOjwR!3
zlo;ldxk-PU_d<_-sna(VleD>zB%i(f=By*)t$lyb@8P99CvRa#JztxvH52MhGZ8OM
zG($vOCWxly;2R>_1<S~SHEGQYES*64;X*m^D;c-u*>t^6cYPUp`IG3&;?j7gBC$|s
zeX^hZRxB#JLnbAH)VlF_Y|*RI1jA0?H)f7WWvR@^)>DB>s`ULBQ?(SB1Hk5}lD>QF
zXXJ_;l__PWDfI&oJC{e6&!i1nhpiAmIakX+GuHKKLqPHI^k@+IU{mZ&dPs0n`cY1Q
z!%I7Nf`Q)qf9cx>_f}*Mi}Wr}xM_XeBK!3X9PYkM6EcN*EM;_wBsFLC*=Iq@eQUp8
z|0pN<!pG!Gd;?%R*1KzuA#srOB_We(37Y=d*Kl@G9_&mIapLbGJ^_lq&UCMbFCNME
zQL3WdzU-^fSFV+?BhN4|m~vSgIobaV|Ma_&M$&^HdlfLW$JAtBx(Lk?s7xzq1$K^y
zv)TzcSHPE%+NV~K>xSBzTBfreOn5k6k2Q7hZR%gt{^fFh5_>Wq)a8DYo}RS%y{Bbr
z4BeHlwZ`a|%$G7-H!-$ot)D=SqHJ$Pc^fr1%o+~6FW*5A38$2UP)<n(f9+}HTz7|*
zc)g@|%7u=tj0(JfycB{^gV-+Y)ZEhI$<UrTDryLm-mp-8dTIop1oXkpH`nKa9uL3{
z4bO3va84ZPH8`>NWYe-okG^?S@!Y^Ld9#s>84hHiZV?^?C!B%2)nqX}k|bxX1P-|?
zCA1%T7Zfy(-LIyL`)H#Szu>1&Qcm&*V;WRe9TWcBechYrggaAi3Fp5w=8`-M?%Xq;
z{|@~1m-HRX*;r!3d%YnYY_#5OOUAPTa+%OB)kS$O2-zNs)S4T&3D#b!@d5ZaVyX(5
z@U0c>>#oBb7@v+?F)j@h*^xU2i=BI1N4B|qKdCsCi)zJRAGEis>z$Ug>7DOrEtyqh
z+){sLs93w+P`Bu-LAxEkj-|5;RDr{GGI*vx-?)c*KgdMZz3FAPM*jpRf>3tn=3#l)
zt0EvJpT%eTmpq0aX)W#7=66u<^K)EQTw`pmWqk`W6?eI7*Z&%J9wyc2ET$T-GoH2l
ze}AdWTx2tK>gs}z66}8{tQ_K#R9SWnFA@|$+6xSOco!aY#+Uk4A><AKK<jR2e+zi2
zeH+Zi!#3o$;eP0m!`SRUxtDFI89xo2pDhXu60dtQ5c3@82dW3}J7lx}p_PM{2-A?S
z2Dd&K%@yjG+yrO7zpm<+r2{zhRr$GRa9|L!Z!9;BXd27R;BNzSz*%3<_#~39yc7vI
z(C3NX_?FXgGa?rEOyOi(MEGiO(#*#ygPcSmlP<)?n+zv2gW|xu8TEcj>6JZY#cZ5c
z#ag}@%wI)#$-FS;r&&F{A+>KQ=KR^7>WG#G-(Z5GZ|CHWt>2-Rg@)8;{ATo7vM{XR
z>l>fbHG&afg2qD<(h4`?jS!655(bPg8~Py_C8T(9Fc!4=&b(qzAP;t<*jJ8=YzQQe
zz-#APkT?Zv<)qC!0R>lQS;N0_Z-^Ea%-dH%)}st`Y6*Db@IxL+=0R75L{7JARVk7~
z!5qoj)j!w0LW`9&`0ot4)pw$g&B<ON+z*YY>r16XS8JQJ+Yt(v#WP16azb`e$bJPs
z^SK84WqJpiyGZa2&RKg9Ay!Nt*{6`Dj_!n6LeRA_YSzzj?VG`ZBX}l2xhAwry|n5k
zT=|8Pk!YI}^+7MdR5!m}`p1T*$DBV}c)Qltbl>m{iT`$x3(EMGBQ@<53$?^!wA9nQ
zU5Q%T^YYi;7q%<b*aZju;xnI&e}G25i_@;GY6atclDG&Ec3R<!%D4>1YV8grQc>hC
z=ca4%kn&*P43Er41}A;R+M|yqJziBR$WC1*J`2lov<)SXbp|xye&GVM9pQ`O-KVxe
zh86c}$2xQa(}p?LO-wGJwo$Jq0EmZ_tN5r5>f>#xn&2CzEAnoSHRq=1>m9@{VfvT8
za3T^Qv|?-!H-!E?+;}IpHcEJm4?#SeSzs^4t1m#)6^5Td&E?zm;0{}W!}qcX$PWnH
zs#UO~Iu&3+(%bAUkaA3G?(!(~63O9o5rLZlwyXH1G-bQAGh+s%$;=<h62jxfI7pPA
zu5z7yDroLMPAt$hOeWfSM&Co1%No<QHgynJo;y_qD;2qI>|vBrcAb6!YL>GzahpgC
zH1Z7OFro~}jeG;~Il%lXndn6>?r9iM)yCSHALyrC3ejBjylnHPAZcKvbl_p&svnG@
z$})1nXx4jX_@qtkZ8Zy{!VeXsj^s)`S=(QH;=gnbquzP<^6lrs#`s&54)q&DxBCj}
zs)-(x(7<+^(emgG!TTETKa!2^+PJHA!^$_^8yIKPe`0fgS^j)g-Wx+*EO^>&1!Hfz
z7cYdo23}*5iCIiA=Zc7FN9aGn=<M`l`WonDLlyHeLX^+n;CVxmBLcW<CZi$oVPSg$
zD~so-*m6mS-<K1L6AF)hklc=z5c1eb4?h^#Ujf_I|2hb9_WBpZI<yF&T;z_bU^u^1
z+TFVQ0n$l?;yTiLW_Vt;$bSF*c+><GbsUNGdD1NQ457GjL5xRWTxEROX(@>6_3FPI
zP}y2Fe$NbCvlCdD1JVIUf65oSt<Fcdnp4_yko`0GiCthvll4{LXk8%`7ND*X<{JF1
zhC^83@t+&5R7|GzvazOT)m_dFFQYK7I;%b>@xzxj(aH9}V6f;G5RNW-qJeWmRP3y)
z;jhw*WfuHR!*n!^PLU{3S8>?JJHJTy*2q;QW`)*G%t3uaq($y;%t5ajFUG*c^bP%&
zx?(n8(s>KFldXHmRtd!!;U&m*qt8}it-r#5lWeLW@H)0-o8%u716UKe>dSg^D$4OT
z)$_vV97}K9$Um059iya%E6Qtu;B{M9R~_BN9pZJ@Gf5NHak9uyJi*QvniEexgWGO>
z_pM6ywzGMsb(Hb^Mh#f1T1$zBjIE4+m_`g|dZey`feE7TM@pgLHrc8<0LM$aJN6gd
zvZPg+y;TPKzj7Z6fE>@P9eG(A<xzGw{86;^t>^h)8muL!@=l%lb$EE4@jJ|a7j^U)
z2HD7J#av@Gpj&6M^%&&N7;BC8c>0(m3xH+57w&I_4;LwlF1Cfaz}!?0d&MY?ctG4x
z*kU-#G6Y?4#K!)<;iHfHLw4mKPC7Pxv>&)G_2;X#!HOaesgn!7oxiTGKKTc*1q$w`
z)ZAa8a#(UN<?Z?#t~sw-E#r1>NB>dx({dFMZLt}H?@#r!=luRq1eqz1@}9O7tqZ)h
zFE!%XtzfH-w}L~%m#_4^^@D9um%)*Hs6B`;K!_k+aELq?OjRZ$<8JnwkQ&&em1#=f
znZyo=C*KdA<a+=Mx;$z94B?r0D%MYvv`Kbkz~x<kWStmm``7tCl1nvp(+Tb`s97Uu
zMr-4u!IAXno@y+6I9FZMJb3<6(zfnXP0&=>5@;rUI(8>{^LK)$Jv@9|IW1*oPw%@X
zUtsV|EJ_S{Dt0a~*}_RWc)&&t;@m*u(H$@+IroFG1KDu7+D%u;Uqer10q!fH=mNEk
zD3=M@R@zgXV$e%u+aX3It;7|v{qR&V`f=gmL9G+{qB3{+WRpGTek-}kH^Qx6{<7P2
zm)`a<jLI^=KQO@{u5s#L(q8r1vWFAZyjv4aQR|=G`g`*E<x{@~tUXZgRr+VaqJQ)9
zy4Iabk@~&lrmVl|_0LpVpn={WKh_BH$NyrE<qJ4z8BpOqq_RqT8VYD<rzK!S=*6@w
z(ajBEJD)r*JUQs;@F+_EW1=59Y12owEEM9GTqq-wc7Ip6w@EC2#%bg=vbqekm;bjS
z_&?z@s1YLaUA}ge3~Ufm>a~ZFA*xc4Ws}|}xW+O7Wg<<tm7m;pC&gQV$?!Z5Z&Qj+
zjT(zRcUsk#ha%*|J<f6npUJ^nPA2@$CEVCHOk;ZYdEyg_zw76DFPv;0z{xh!ajMkq
zYK>4%1bLgOV&2iMH!FSQE#B=m#=<1>?#GhiR}sB4*cP;ZPlKt?sXmujBPy=6EQs9X
zqS6)kgRDD}`0xDR44B^lcQbEkmDUBx0wtcbuys$xRP0PT4hsif!8W(plMA!gPX<D1
z%}lxOpz`3;mU{7wqd2lf{64RP+-zcdmr~$Z{7QO?w$do`o~h~1Qv;Xci<JlZ=S;UM
z4&2xl002cphoJhBKZ-+0XD?spMZI&|X!794H78vS8S^5>=Kh+}C;fC^wrr@o{#8TE
zAl9~uM1N)$q<!u9^wt*7XW_ob6N;X!|BvwdI|llEAYY|}4QfC-u%P3US?0_r)(zHL
zUIe5BrA?$H7P{Taw?!h$KU_pIXHG*iX<By$%Yq!XsRcfKvy$|9JRlO7(1)Vj3Qivz
z^}o27gS+oleKdIACBrXHnrJZ5l;gi)80-HgqH%6?Yh5|tWuh35?0|$KndNy`YNk!(
z)t@28vxi!*-dgaEQ*5S*%V;q|!jpcG(l+i<)R>xR(oI>>pf)<fC0jquGeCj8;202g
zsP5PB)b63JOetH@t-`|Y@|YrJt}O_RhQRD=;$12o6_y~zM_PJfYsj4il8p1zpLqQo
z;!0hUDQZverGGiSt`sab1hjZc_?rv8q3gzgk9Kqh!A?F$124f;1S|nPdG4AJ&~}xd
zsW(C#Ll8j)4X-5iV(4fEbunV@#~;*^%YsH}A^RHp8>rT~ro$7~qvkCI;^TdDrf2^~
znMT)rXtdGlouLm4s@VZN0$w~Hl}2NM*s7l)GR+>kH{?erz{WY^=V2?6ljSs$#24Zw
z(<usc8dqY!l@DJ|tz5&~{fJiIhWoCWQ{S7f@#q%HUW>buE>=ccH`?qnJ_#126JS9K
z=cDxPvbsPKMp_OIpw_UHs7cbwh4caiYnk?x7+7ob*);bP5@-646(Jw2`73)a4L76B
z3DJaiH!Ftt_qZM>N3zRG!tt-)KWpSC8v&nQ%4u*9>+vWi$TMJ#%>%Z5oVpI_8l$eH
z{~`v4;i%CS$oH;Zcp=UnO1uC4Yg)p~pl2}dW>R7`(gYCup+2Dk&Q*W03vQS!*Q~}`
z^xC!)#*A+R-zXDoCYI@i#Jc<p0hxIfbVSay%QDn>W3A5^qTfK<uDm#29}p)eUT0u{
zrkL$?97(L85%;E8!1nn{yakP{3EVHa&k=JlCZVA7xls`D2>Deg)H@mIcl{5W>Z@4)
z<A()o0{$Tz!IG8MZ8O)1&<Wpl2usOAA=Y{;?$jJ?BzG51=9-Px=9eS475kqlb5n~Q
zdgykP%2!q8gh_(FNbVKm@{R0hQ+?>g;IvL*!ioIi^@Eo}zt<Y+w&Ud+pc$Pp;HcZY
zX2M^9l(}ApxcG>2(_{d2UWsoEY@fM?!-4{DJ29QH9w~}2PWPn9{g658a$1Jx&M|=r
zjd)xD>FcRYou_*Rjh90A+qsAKl{NRqzC3Vt;F6!t$Cvkn|I|R+42X+<`sMRTCsh9&
z3>cu2L7g38UQl-`FA*loJB1;Fv@jcZaV7Pkj5evad{?gQI^J<PY<1#bnj~=WlASG~
zK@!to8<IZwFQlvGvZb#BN&s}%y(!3eei)>(7aKsuS8G6%CvFE62a@UKHIBz5S|0^|
zC9QC8Z-brDo?Z}56`Mp38JM%3q~H(sU8=#2Dm2IX*|i{{u^tdr{uf-a20x7Hw6{cx
zG(`OX%ZzSP)yYO271k=i0_n70Avx37QlGVeAiy~yC1H@7ZCO@IiL8)zR+2nYOBEqR
zDPi<^{gT?6dqrUz4L(0f#<vKN?E-KQNAP0;6$K(5g=f+L^0|+G1e$NxPz@(MYWOUL
z6Tmpjpv<UIi>L7A{0Lf)UEn@3eZR{rC3@1IeE&W%x?nlsFW^+XmcGX$*?3L{=PTd0
z=3Zeg(<Z`+AQPZ_3C$V|C2*5QhpmUHnXyG-vZ;iyyQHPWkzuKAk@s=%Wq;<18z`s)
z^#XuSI{UG6U(c+{J5ccC$y0Fu%?S&ofz4o|>PO$eo5WI)O?jnIo3OKZO+F}R1!U_z
z1@QZ;4*?E?^VMMa_^9Wt;iCXwRxv*Bzg&3`#x~xp&bB>~8u6I_tQT9gI)<R}>90{4
z;7>5e*uZK8S__@Qs~OICGY<~vI0wM*{edP?hai(sNt;RHqup3p2E&1V3<*(mFQTE^
zY&Nlej-k%E5Q(rAJM#QZ!myt`>n!)nyDFEQ)Q1yIcYZS#5~1_VPSC3kMlWSQ-3X!F
z15=Y|K9|3A66kK)?eOt7$77k@VNe(w9EWnz7W@q~g4gi?zQ%PXT!C6lWA7iBEjsri
zrXle?#m_HA?@!z<xukOjLdzJRxkhh6Gtn>g(u58nLWOmztJBPNy-`3~@i&i~2UNC4
zU}i3TUj<>51j_KbRNn2d=!BM6MGwg~4SDLvzG@e1pFwQZyT-nTnmy`%qd&o97tjAu
z>jbm4W&!Hsy;=-dYE33>1VS$p5zsu>k&Z++_D<kd!8N%z=5!3Du<7lcm#r7WE0||!
z>3at6`L6#sJzEogxZh=CLEpzUr;T0;#@-2T$d>W8gMHRD-F>=IEijM?t#DXG2>udC
zAjFsy9X81(cMxQ0I4|v1Bun8Gy1t{gyy$+f=Nh?7Vo3ko(m_*?S56^`zO~{b{j<$}
zJ*bcG|NmQ=dE!u<h;I+Va<*$cKuuhFD+)9^26hs!F<f9AdxLf0(eW^Q=zXr%tC~#s
zJ#X-b)1z-T<`hO=ywnpsd^+@C-D=fX-nqR$q10&rX3a`xxI*vKwP)lgdvLtRnZf5W
zN@@9RdPis`W1&*2cYvmw0lzJ(U^=~;B;ndHssJa5GSGOxEc%qY`H(F5^zPXIVQI8>
zYV9525_w>@{znEVWh|wmmE9|7ECr^GxRg$j;5H&eZ-M{e`Bp2uc`XCgHTECvKCgRu
z!hiwKeGy~2xD%Y7x6S(DtNZ*hA$+mwQtnD5Vg7`H9-y~pv-C?1VITQSD;3#NJ{1lx
zFu`U6478q5c}KR*dy)M%*hM<7w}(`B=F-X^3M<J4e<lx)6ArmIrB?J~$?vcF_tg+W
zy^lB5i&eF?_rN<w3_yH6cYZb4t+NJ({6@5vk&Mr#4qK}Qy1TAy#G_elw!n$&U>OY~
zm@(Fr<`JV?V5tp@b!3{*%$2BY`i~kSsmVHpGqX};G;TFduB1mG7t6^_zsKGBP;A~G
zJDG*HoJeqyrEC2bXBz5$2c;-qx$Fz-g8;!k{%W8EIGl(uM!%q5pxwtR2mS<W;}lf-
zPsm|eJ)QrZ4KH$6uChdn<3WEQXQi)+Qv&3maaLJY>kLWFcJchFv+dTQ;&p*yAg^M<
zTy$F~m__$8A@Z582A#lT2cGdUfxuF~mQDt5B#$wKUdb>=K>yQB%2w@eh%K}V`yNug
zXz9h8lI4=;#8l=AdN{RAHgzD@HVNIquz(k5Vx6p5e*Gbb$*N5sHHV7(z)_+TD9Tmf
zqkFqE1uJl9hK#k^69WuZA8?iu{`dM<1%gz)-T0Tc6Qmi%%&HHg?trR~busZNP)0O-
zsS%{P+L1%7T(+GKI8#dWqpX#ky8|lP));N%m~Lyw{PBKmpuA?Mzqn>AX3liaSA)>L
z>Z$Y2=jDl6%`b<Wvno_7ipx(qzSCPBFQqLx`u664Wx>L2L)^R7CA#9dZo~<#wMvkI
z_T8~hj;h_7U9@IJ`qXFj$nJ)R;CI<3fHApLQ4@F)I^R_7b~HNh6yFN&Os5CvQu+9m
zUGf(kugfyOLO<yJ_32r#Sb}!`ReF2cPN8%@ix;YtEv5ywF|2wy0jm&JyWRobpAMQ>
z0k*o=IkJDQCNXS~vvV@k{XlO+wwv@l2%Yxd^KP`Gtz$H?`I$Ur3t-^EDY|N2xLk0Z
z#lfpEuu*Hl12O{zOF*M`eh1EC@Bz2EAuAA)W$4!<xgkBA1FBe)#1PHTg1(uWn7&ca
z2{&!|yU#`H^1tDG#@(}qIxvH`7BkoIEruA~pyR#O2@o=HmSVn3Cwxn&_>+m^xP(a#
z!`K;NmEc>NPn%DN$Kj#`2v>ifq~BQQv8j1MU4c~k68Q%#T#mM&ou5cX54x)s!OF4j
zR={Ah;5*TSkh^0u-+<RGAcfOKY#((ToU1xe-Jl`Xy&zGRA9?;s7M)OAS#erQvRRQ@
zN*JAFd?&%os!Y7abEd>2PoDf~^cn2WuHy9=`j5HlwYvNK6<tb}=`j6B4>P*kOzSt`
zxhlSLcO*LmG3mfB;V(mo07sNFIDX$cVgG#v`WvL`06EL;sas&dPq{}zh}`kADWfmn
zf(QE+Jqihc1nR}Q$Mln+?aCT-`P}o>>;#D5c8{FWYQmD~1z*#*lem>oUV7wmlvmfg
zDh1knGU0GWX^^zlMKq$*@qX;^i`a$lTm~@oUk#2D5jQ{JK4DrcWcx+R(wnT?QOk)m
z<=CJAW((2gS|{BCymxFQQbe@pZ=vsp-q_Tn%DJp5>C9Enko%K_u=4X<n@~k}e7Nc4
zM8aWqM0s+ewRWvFoGT}$;KyzWIC+H%0U9Ch@8@qoh<lNXV|E_zPc<fai$-@0@cc^2
zR=71i)inhG>2=KCc9$gf?%A|WA^r~g2e5wJ6k$Nq)9c@KYi)IKzC18TFm@aN#6SHS
zk13~6k08`BosXQGdr3nf3}Lhm$`;h=eymqO+n2fQm#wko(V%MnE~DCKIrL!UgY?zS
zsv)paRtAS2HdGLyi*X&@*Z5XoVE5{K&?`7I*Kw=sU`a<d*f^vCH_f5wBO_$~_CZfa
z_`RIkPBr%~C8>!~e-ff_%b{X!^+Z#RbeQB8b~1<M^)b3>Fe|*mfSDh$V8i%J2I$ei
zlfG2HSq~JFCyrSRG<^?Lp2_o&)l1q~D7W%5vQ@T)&HPpRnujzWQG!eV@fW6D#Z~ed
z^A81$sa3B-y%!DSl$MW#1ep1nf1k|s0-7+*7%Voa9~oe~Ro~fK;TbD$W@my{z(6@W
zqbc&r)ZA)n?6}r&Y@xBhM(d<NTfU@3oeS|=-`O7K0mR|8^WEoTO}Y*qm=*DCVye%B
z%)m_xIc!EBa)(eI#j6pjCP@DedX*>TQRjV{`*UK0Piue;Fw^FZew=ne3+=6t+wz)=
zVFN#N#H#6;>2UFEm2DN5Ti4LUyL;xx;gGKF8_pZ*Uya%!+0eX5kM7Y1%kg%Iy9m%j
z_Ja<&bYa*=XeQIuiz?KA2kAKxi%Uy@^`yQ`c6waem|I1XxB*XN`I(CsBK{9wZyyg;
z`u~r!DwUX|C}Jwzu9$Y+?K0+6Dz%bIrHI*Ti!o`ojZBO=MedVr+juX_D4`M(QpmU&
zW~-IlGs@g;<=#2PILpl0@5}rB{oQ;%zt8vgkMelbnK|cN*Xw%SJa5p`=K){ysSd>F
z(3L3mqweU=8J7VBw44dcL*Xfn!g&S!Kbb4lmbj(ribHss>Mpu~Ze9#qWSIi;aQv?1
zxOWN5(VK4!C9@)B#4(^d8<VhnG_QX%xS^m?{9)_&9!|T)v%KF6MO|28wc|b3bWGv%
z(HKqYv)p&R{=I&pQpr1s-?k9!xa4i!+6%sKw~sGvbpl+^7CUVc6pAm-wshl=#h{ub
zU7&W9%^nR_UBH@cmgrvPuQ@spcK@E^)#?KexSz$0uO7d#za*0e8x+uD={s)^d;V~f
zu2O{;-aLNS^Xqk5sMVqWis{kTfLuvkCSuB83YCCxv=~cjvY<m(0YnmgF>!6mVxArL
z<XN~~UyB(_sFz2ykqis!)5@b0GaC1X)EWnDEI0JFI80M<A;;tX@I}+et{d`kL;u08
z)OX_v<T{=+<{hhcRnnGoKiBmeV`*2*Tzo~q>~oB#yXOQ>Q{s5e**(XD()+7s)wO><
zIvBp|MxM{xA=A{H2)aY+k&B;?zja^vmGeDa;u+a)@#PzO=!_fr20&zaci?EOK805)
zDxeiw;HKYM7M^zn{KAGMH7WPRoQS!FBMTz({rZkSbiCL#bzt)y=lIpP{Oz@H(|;>0
zP8@&$>RLnNZQ=CTDmnF*%3}Qn+_oO7xPP<~t0RhtFNY6CwfjB70+Jakc~-4-TZJnt
zq}42W!{JW#3PrG!bHT36Rn={|vEzSSD%>HXR-(|dfepEku>!4gMuVY5`>deE&~5Jq
zF-zT=(7CLN@ax4aC`YKq#Eg6@o^B?SQjTt$bMturQ2!d7QIR_^9hzJA^(*UUiS3sS
zE8BKx{|(=A-XmTR;SP+4b;4Nwau#ApUl)oSfj0`Us2{0!V|%*Jj#hih=in{ZCR>aM
zhkvxZTgU#2nsza3bh16}k<Bh~wMl;PZjiCM?P2kU&T2=6p0%CMgcYfW;O(;Udcc={
z94$Q$8G8aKx%`1ojo{FAb&Rqe4~<~a)V{c-!tDxgn_M^#&h5(68OMX1YDymlh54V_
zc8cx9O1IA{QFxpf;W^(Pb^@aBA5ggzHz6@u>mcfFBU>zVTImt;B<TwE>VHq*^+136
zk4|e@7tg$io2HaDQsc9zWt}7E(pM-`j$r{w)kqPm;?ct=CO`JObM)Jptm#|j*}6Gs
zort-dTt?WE3oK{620&<NDrO>+t+;p-Vv!b)(H77de7B>TskBNlCpaROTx0OE_rtU2
zH6A(*>0{+TE<x6}?``80pUaKyf7gH6nMtgwXcAnNE=FX(B9HZpqxq`|Pi8f70UMIa
z(^AfEo=n==L8roFS=6$5y8EhnXa3tg`eU~q`t$|?WYxU<tzl%<jxM{%i*-e1k-i?!
zE4BWXk_P9Ak63g)6M&s5Onv$`upU$)iy4l?@E&=#Sbp8`J#j=a(R~C96QeQ0CG;be
z{+Zv~<fnLIaMoEp43ace@SdcvyDIGU@o36U?*>(b{GiL!_wWCMR@eQfL$eD~5(Jf{
zGbfHC=Q!$bQ8;9$fd}&UJDj3ke4#en8$61kfZXfMyl!E0QzlMOJ4lyXSBIU?9S|!b
z)9QP8jzvV%$GV$u#oyOJRX*KA@Q1fXHyt3(Q4C&%xd`L`!VYZ#i|%Y{tBHCWphV`h
zfn1k#<^n2zMd<#c^`>Pj^>s@f47IzX$kk}wIX=L)>$X(8;;$Ovu$xb6bN5k`rpHD4
zCcE1TNlR|N{7Ioa<tl&k8}+8U0IG#XYzVqCGDGPYSC;H8>Q1-F&+co<8FqS}AIq^!
z7rT8=8OR`4X<!Ml(AFO{&xF`}wGPl!17MiWQNbFI(kIN69QCqsRW|%`QGJMbuPDJ@
zsl2h*<;qA@3?3E9V1VL`tFEjizbM6?2y%+!N9h4_I5FAtJQJME`-SHta)~=Hy!LdS
z4H@{o|Cm&A8Fj4ybR)2AgA0p{TR<aRIJa-xmy(tXI7R02uFP@0!(#XIY?Bdrfc2k-
zFAu-3xc;g2L$Z(Evn&7l?lQHOI_ilzeN_FR$t4l~>$Gq+!>W=n!IPk9W2rrYf0z!j
zSaq}3!m5+EMe--`vySgMnSP_4-}NNrytD7$H3!oDs(N(lHtI~nLyUsktutpB!cT8C
zb7ogR?*fs5Q)>kj#;lW%{+gS+2~Q+8M7RPV;OMgTxV*K<NW`FF!sHMa#~p798RkJB
zy~;R?-bshTO!Ly8q@^16`O$%oNV|r}TF{;^l=WGb(X|NJyT#=YieMwJlzOM)YxEPC
zuPAG2yLy-Er)1O5qVRdim|1;gP3fI&=wEy84^{>wgjmf~*{7QM9ejCaPlt|roadIa
z2UM1a`z_K#o~3Q?3iUAc{nxEuoD=M-21l~Et&jisrEK1gBhI&u>inXwb?V=+QuMeG
zb8R6Ub5!TxUX#fe>Ecmj#*KH9kjlqLQ{pSfqj(fKH7Z<iS#7Pk!ICxq%$9%&2-BSB
zLfq6;T`2SqGG_J~SMC(V-DwRj8_ug1_@o_9u)9ntM`YOu7F0YEiRr2AHFrn`*#a0&
zl(m~&!_y_)mC|HGmUKC^dSWfMV9fYx1gok~7bo*P<o7r8Ot2LBhiCc2PF=}&-hspS
z%i*viN1T4EfJuHB%kHMnWpsYWe@;;}6vY5qPuO2j?a<s7o}%@RtD-cw`E;^%9M@Aq
zi$Yg@!jC3<{S13m*RPMY#PZh=7u<2rSe{)lor7g4Y$^)al}B#f-=049Oj8VF{qU>5
z^s%PxjJsHo_q2E!&`5^UC^{7QGA+c0lo1{PyWB?PxIh_Owc#qABM05Wk9AVBP>MFU
z(EgpR*fcja=8lx>>5Xk@fZJ=9&y4DM-FV+=9hyWn>>Ix5crVz-&MJ9hUYYh3GU5wC
zDVuCWm!qetfZA2g0;E!q@?|X|K@z$U)V<vNlH}eAjHO(++UXyV#UXlB6PD@vn>j><
ztUINA+;L~?WRkh<!44XIkJC{4t-?-CVQL1O?qCc?giOrelUN1CB1DgRO(tnfwlYhF
zjlyeLR;}tiIJ%E;QBoH00y}s{3YXnOjI~hNs+rkDbVIoGidq-@)YbH|Nm?6TBLET1
ztXmH}!yIz+{d$Lt?+0H9{zi91w~j*CS*lib@C|uR9i%P)jkMhV8SVy#FE<Og-3N$M
z3gjwZA6u0Ey5MZ()hCdCj3?IU5mTZgK4%2_e>(9l4E0-e6it3>eY(@fd=o9rt-Tgm
zCX`h(vF)@d2%oe#p$_9KehbwEl)|d&giFXZl&k!;n4sxW^}1prV;}C(l~7FNd*BWU
z3RH)1t99}XTr%jhtScijn@OCWH1pWL(OxeyT-CQf68TO`(}p4H6{9nA`rshl!uw7G
zk&E5TR?P8P|9ciNPAH1;X#eFHyzThLGE~xSu>vEXV^)oluA6sU<g;^z!?;a3YW^r?
z)UoZQ@AtZ&VJ<Qk3f8Ev)GOiV!69a;IKD;))V9);DO$Yq(c*BI*Kzny%6f_TnjI8c
z49MDpKK-M$KU&1l$MUa~`8MkUbe@^l$jaX%zgMpB^ch6{g7=Yn!`z1;M*W{usQ@|A
z()$au&lY&bb7ySC3K6!EXvcN;Vxi(B>E7VL0b|>S3z7GN77tp5p3>Y7Gf%$tve)PN
z`-fk@t6sy7zuiBitr<i`R3YX;o3^1=IFc)cmr>0k=-A*;7GYbZ^VQIEiRvO-5NvPC
zJas6(Qn(OdQM8dJfq{A}?r<Y72teyp?BlLBz8#yf4y!5Gq@B*;a{Td<B$;R8*)o@K
z@vhdgO;W!%G}?sw;fjv4_jIP=sr>Jg5|;Y^`>32X-i)f^*YT<F=Q;8%a|v<=(d8<S
z5m#i%R_<7LGTo?%n<{xpS>{W4H9es{V3|@A^V>$x+9i95oYt-yoKCH{JLqGRQRu$7
zqp-}{&<1@B4dJi<J=}nD=f6lp|F_?CX2vx?BeHh1N1zal2r)}VT2o63T5c^B2@|A?
z=&Nxv5sDS?Kq;r5F}H-_)LKaQ%7cxU0G`DRmu{u0!;J?$gJInj<oYV7qFh$k{XWUy
z#fl$UPqL}0RLoxhsZA~9i{rHvnEShpjN=?7B`JhrtUmFGpee@Zs{@4)_sV0s=&mxM
zImlMv)Hr*o4q+l6y_J{2I*onyZnqD%^lF_nyFXTL?(nI_D{*5{@KK$=nc4a-CVL~<
z$J#=;?~ktSEO*xb`rAzRwKOzz*@N$fgtnW5H(osaSInxP0(CTo)hi&vMDS}b_AkNS
zQWpyYX??oK@V8FuGpN_>ne(_pnJ~6`-92t{@EX&`?$`-^jtohhOs4Kgop~MX&~OO1
zd4_TVPhKBBSoxdJE-keYye%kC>*n)K_;rFZ?-5(9O2s7_m7@_*0zb)5v0)e;b!@sI
zA4NqqbMe$n#dvJLX;t^wWQq>Ktd;ne$TObuHwAVdnLf@~S=M>>Zfm*S&HXjLeXc>;
zGc&j0(ohg#`})9jAzCDa#Sv`nEBcWY&T}FQZWArCu(&cmPoL{;Ydb^rsau7Ft|DTT
z;$B^IY|Kt$F(s;5UDY1EF7f5Z<DGd|#>cdfe}U_Wr+SH{yh6PsN%67H!%@~E8ehrV
zM)=`<^;w%cLtLB{KMgqY8CX_1HvO@F8jT+<XBu+7U9sZ0YS-N1B}87s{?-j;SW$FX
z{;rDf!)m8!AJ>OLTGXgR+LJ9KD`u?s%(~!FAqhMkf`@bGA=mo9jcYK;`YL!+x%iD;
zU!>!KZhPP1;8lJ-`r8RsrALQP<im=ti=UW#&f1(iQSsS)D^krQqNm6Ox!`rwp!xuf
z_B0Go+qbhI21u_nv2C8ZJjn2(Bs`d=N1Y^2DFq1ug!{~P;%nx$bX}2t#O}5+at+}r
zf0B~TJBeEe<$m7}s(b=s%Y`d1QRh_e$qOVcAGg{)pQrHSxOR;5T+aMFWP0#2x`T=9
zj;oE_$s}~N83si(89a1X7cJCznlqcrI-=Nd4=-{-0<CG>q_{5Fsv%mrsKzP9qt&f(
z1-a~n{5jHO$hC2P((YS-UcJ@9>6$<FW>c~psFm-;wD|5innBB=ExHriU@*gn*J~#n
zs36};iJwUAf3zlS-{^i8&p_LwPKRfSZy@!K&A6g<U(-22MPXqDDh~FAnuSwDl!b$)
zXMTh71u>W`w30QI$N_F9m2~-hjH4sUZ6;!lo)25{UX@%J_~VOgB5D|H6H-6!D+fy8
zh5u6)8?6G8Ta*Ezqe_B5^ZDJ#qv9r7a{rb%dD=)c2ZU7?b4%rU8Fz>aVsx?0sR(qi
zkGNQ%O9yKl-q0;Khxv>N9&oP|hj<#@eRI@*(DcVB_W}DPkZV5(HmQrI;i5mjI1yoy
zhAUNlr5%5jJ@asa&@YyL5o)F9tBUDr`!KbyLX%lmki5N3FM4H#!~UT3v)%i1>XvCT
z{-`k2LK#BrJA_zOd>IM$1VH7KM!=`5*?4RcHl><Rq&-lt!tJN(t^7<}ae=7C7)hzI
z;_A6}g;;wv`B1M-c<OO4F5oX=`@Aj)zQ?`b*HM(y5%T=Y){)<eCf)Z_q|#Xi{p@!0
zG)vYwUV-J0YR?3)EH(;ucihJMp{clnw-`6RlE?nk`zH_*inyo;u|OW|=GV5lT!(Yv
zexS-?JvKU)AF#6PNaffK`U{X0At2z)VZyC1R<DPjSJZx*GP)JmI(<(h$j9e{{uVu2
zzNv!POq#;{H-UaaX(e3D74J<Ex%%Sb7<yRlVE>BpGHm_5mK>NbI64$WTqx+-U0Ht3
zCsgDpqgIj5kdL_tzpoO^<7PpfIJ#iQFHo>Jx7B_QcBW7%H0GJ%Zqb{0yMm=NU!q0?
zx|J}IX*fq(=k{C+GEVnSDDzcS*mQN@|MI~%x_|dHuSh(0a>M#f7GJw<KaluW<oR^1
z>z9!NDzOUaMvHA#;cyebldn-D1eV(d#m6Sj!a*mK#%6apHM)8o=6e9-HzwzgSKG=t
z3%CXT-D>wj;$tn-(7IgDZ##7*>xk*D-*N}T4|N>`y@BTU8pS)`KFMYNulznH7UVeM
zi=9%rgRQgetZekm{yN-JHdT+V<Q-}Ko+wm!#sIZ%S3xiaG{m^1$xO<jHl8KMsdf6)
zQW!YxqRPk%a>%kwbg@17wETJ1<Bs4Hsjv4_Ks+-+ik%aTKt?%NPjkHx4H8NarJLB?
zfN91Bp?M3;F`7Sr$l?p^Zuq=gvfzLN*oV>xMe`{!N+H))09HNh&=aG<)Jm7QIO{TJ
zJ!GOF^Ww+Dy>~80dcq}_!3#Kw{NUN!uG*r>Mgy6>!^)OX3*ln^9JM3v-Pqk$^YyS`
zQS~XA)QB5UYif|IK$Z}!V6g2L$X{37Wmo29oLKc{vY}weDY9^44;#JH!U^x54%Ed;
zXBi+IDcD*O4mv6~aPK@xjiQzbNA>Vms^mB^Vph%IMVz|BThRr)6X$yVa;zwKL+^yg
z7ef>?^_RrWhiv~<mwVs!52cUz6y40<ODmk{^H@k7c@gSyT<3*Q_E?Gq7mu{g%p*k>
zbWM@)%y_b3<z&Qo^tAMfQ0|1GO&YIShE>@t`g|2gm83OTBc!2=Yb~lznl)#$!)fvK
zQ+Y#af<D9HF4Me}WfO~&zgFpmfr6c{3J!qi!|17&6lqEE$a{QBIWA6-_;|((%t3TR
zSGi+4tPX-8kA}rXshzXc2e7;pB~zapWJWRNts!EHm_ySx$%Q^X?DSW|sj9H)^ta~7
zcco>Cj!(6S6jCn*j&c>*3|(hRFS1pWj|4y+X{O#@$q{85)z*9i^p$3>TK*=d!isCR
zf8!zdxn74b8W@5~doB!AgdfSaPxA9`7kxGCFnufInCG1rxqH)}>H_s^1i<C<Qc0K$
zA!npf$YRn?9jSRh16i=GM6jG=PCQ`7kn4#(a;kRUTSB}yPL%4zi7TTmQyb$S<E>?F
zcA1`@ZAD{%?3TWGFys)HUgj`;xO~Etk){3jx3FRcVH4@`=D|;Y^*m7B-NAo7YqV*@
zt!l8aA)cK8##29qXpN9b7Z0}%_pin{*Q?Lp21ApqRTy%Gq_R}gJ8J~k)X}!dV5(Ou
zt=QtzjK}lR&N*v7v}z&$bdp`DyaGK%nRXWTMgya8ygr2tf_BVe9335=S+xhm81{li
z=y9e+^#aGbQ5`u9TD0sri9a%5(He%CiH-tFb$~p+j0tLsu^tP9t?8~sgOxkQNvmpZ
z)?e)Y<z?yc`P{-kZ)l-@5H0(JC2<;a=?J{cxGA~YKU(%7+Ui(-Gg2`=awz~lYd60~
zYEG+h;act^zQS+Hnr>p2^6o~DU1J|Tv3WwA)&TIK)8mvNrvv!m_Ya*Me!JUTs9uY|
z&dBAK9;qt9^2#sd_vl;sRC`3YMsC%a{tT7mI}Myt17lE#Qq&0K=6^q=wtNC}8AozK
z>kN-C9)}M$MeAG{w#U`sm`w_HQwdpwAF~#nU$c&zNOJTE%O<Gtn#b#`GPn14i_#}d
zFWx$F>OwGhcc+=!loTBAVL7QCj9c!!lj?i9&m7gA?7cAa6WMqqb;=}+T0TBf|Fchn
zwP=jt!n6AM?v|WAmh+Xk*Y5WR_AD?heX=F-=;d1KUr;;EHGtuoAemYr7)`^&<V6+K
z1il5RRp;{^iQzhnHL;RUug$|i*9#B>=BKuI%F8=I_Anc`N#{n3?j(+N^~;wWUeaLn
zexr^Ol<@zU9nPYXG)OZI6~ex_TB>QyS6n^0TLNR_AhUElzIq;zRCeYQuDfyLOiaQ|
zK2r0QuczT~`%!}L;`-f9alc7O+quwh>|M6^s}vtS%B!P2I<nsAfbv6_da0Sp1Vdt~
zcPeRy{B9Vzob{o^g!s9OOhxIOCN!>cEIa+&O_uefyrk961wGJJ9?`PKWX2&Qmo-(H
zJkn?Va5NxmNAhK)X;|!&nOd$ymk&Fg&5LwCf_uk@IxqP1r|oAR3p>Zg3QvEv_eQhf
zFAEO*`O}@<8BhL5loe|IRQ7NAivc+5=2els(#I(<O#3|y)vb;MB-}b86yH$GG^Ixr
z5I5_EhSle@x${W#4dNvdDG_k6o!K}gu`hal>fW}zpoLSWE2pnrbaZ$u8KSU$I%uM$
znavlA(7LV2$zWY_!Sk75R`86MTCaN&X0@dhG3{#BLTo&WzmDrAu33juQeg161^14k
zo80N)M%0C8J$v|=IXvC`tGDEC>Ylp;7pbhy$*NJr{c&YgypB5af7evd>`o!pqUxo(
zs`Wt8$e@;7gg~Y50e;A!N6YDLms9FJS8_RGs-fCiMp**Mlu(~RCBo|YHm$|gE=oVQ
zZC&&N59U6>400s)wIB6(dsg=m5a7~x80#ObMHq<eBc+e2`VQWf5h9}M(kYNmK)l3l
z6|=%%vF%*fdaA+f!}&+c>v<{WmT1>v$QA7GK;)E~u54fq+3r1b3N7}?lf3hL>ocf2
z_*Qyce6E&yf40)#^i8SY?nlgKRsoIc7^b(U@(mK;dDUV;cL-|C^TGn6)H`#y`L$U(
zZ>p(^Ov^*q$E46mv*RTKkM0S-?XCVFJ+JHa+_^qo58A64?BBK`2C!nG-Q1_E@*{4~
z7^sa1=m{#j>!k_OCFL|p1dKSAoW!J{b{ClC9N{^aaFwSu7V8hEcNN~_9{GHvt?Y+5
zA6y(eQfO@t7FDAj#T(K*o>WHf>-eEui%b?mj3G8wjI743WI&Zz3GTdAnyg)M3W^T*
z;)j<sL*7x08C^beq@rD3QvJ9KT<1nl?Zj=aJUGhqdD|;xg?HULfwC^lxzT*?>Ow8@
zG$I?8_H9u45IHjl{}ppyjWK9;v2j<0b)0yZndFlfgY`9<2BfTRRnNW4wQ8za_OvTB
zlU-jLBr(2eH~pa^ARwP*GJUJ2^#0wj?u*7I4&kArjZbwaU1h+F3LDvgQ$QRX?~X;-
zz%Xk9^RSAY?O*`UD8`d&{mnY}3GVl~h0fYDaFhJnCP$ZOEPr0tpZ0L@iPNoX!|Tf5
z-!;l<%BD7rtIc1`9Ol19&BTy6^~t)MIC0Wt)yHI3Dc5RfcuYlua0#pC>vlVRN>eHv
z19rvw?vV;A#q%CFl2&fjvS7F_<kt?t;fknco1&4?(V~YRDz!+Pz<<Lbcfd>gMYz1i
zOby3))D2QBT+XL)@3hx3^+9eXZZ{a8DVn#Ny_f*mkjh6L6S*Dbb00madX`wP_k4R#
z|GRioGc%@xYVb~Z)TNVf3GZ<tSlS~buaB#~hd?}o!5&X<Q2(Rlq(#D+!DbR0y+;5K
zj9q{O*b(pQR!XBLY0*@u?*iWW%BYQ$M4uhq65(YvKzW-iOf`iQ&6eLm`zXibaaEhW
zpM@FdB%&1S&|;Io3a6B-YQ!f0J{mlH#0nb0PtvtDKcWri$R_GU7+R`JQl&9ebtl-Q
z!4yY~SdbL5m5Lo|NwWBgSf_latMI(abCC(-m=v1YOCFKhL3eRXRIj-6Dxdg8yr=8b
zw*2AL%HSC@*Mh)qlj)s*;(tB~n__sCYw?ZV{0|ZZ|8>R*rVG=<{90xO+~`gP+LNX_
z`24Y^fYf3Y=Bd8`f~lXEJEV=!jj$CtdB^k2WbZ8N`D@$CnfgS9cWe2m!|=ZDvf%B1
z7LH|p@%EurSYUf^3+G1}HA;$IL`I`$XuLz3M8+39BjOmYl%o(664KCeT5QcGfdTIu
zJT_UGb4tdXuU=2IfRGm8G?9hxf+`uw?}teS)*N#y_CCtGA0%W~0?A-(H01fgh^-Xa
zcbA<g3#2}S{7qO_e#Gj;SNrgJ$&q0j-F|Llv+jZ8)NadUpFInAnmPQ@nORc4v_$(d
z((70UwjP2WZ*i6pCQasj3qa52wgC&P))499z)wMf6*W`>Js9kKxIFPw`;6=M?#WSG
z-`4RRUuRdg+eb299eDgNm-6=yjhgU#x}W0UL|;L^MINK^p#ADeto7@Tu5sd06mtb5
zN?dvn4D2)Z6Xy#yh|C@9_&Ob=B~Pp4VW?TAdtE`{(IBU5Dnwt+452&UJ<cRzR=1yE
z*)@{w?fedH&6xo~MeztYLYVEw=cUY?;Qtxsv#$!U`%ZqZ)FH&_GgGD)^I6MAe;sE<
zDnKL3J6*!P%Vxjg+GKA&`80OZt=6qbYzyJcROM^3kU&bZ;IZ44n)y6`%(F2$OisB%
zTKVyIq{+$hU`3%$L%zc1Hn73#FCOF;>|zTSNrTe5{FisqY|0944_6D@tZN!<ia96k
zohjv7=$c=(r=iT46G^nfG-<Z}N+ZSpXf3b#np^a$R=P-Sg1fcg%%t*fIP2T(^jw$?
zj8)iVQO<o$lw=G5*4FOck4>gVDZL?myE69Ir1m#S6pB@pN!V-uLlT9we1;^-TXhFM
z=L#uyWMUznBi{IHv9dcVlp2l9Wz2*BsLfx;JJfDtGfC3|iGNOFwaLtpz{)ef(!EZz
z87U727Y|97SI<3BKve9i5@K0#=kE<!dUu`eZkYbNeJfH_JR1rc{%a_J$g`u2)7PTf
z?nyXtL`+ja7hW-vkvUi_sKU1^eoeocfK4+Ke^eu_beri7>UE<F2R7vj438ckz=<dB
z6WFg6@ktg>Po;jlPKyNY#Q&54Q#Cgrtlegoz)=@15T0XR@1|O)P4d*siH|_VLACiN
z>VsWpp11NAfcpXT>bpm7<grbU;tmC;1MUun(;*|8%UInvkY(Lv6Ef?{l`zq4U*;09
zAMj$ACbv?Cqe-(c7409boGQ(~5R6oB1eWh36nS|Wxj`k?A*1hSR&P+7RFDf<IC6ma
zEc2wO9W^;HQ(1hBw;Uf&oYchx(dyvy@?s<Ig<~B@x<&qLqX9$xSH^d5?7=q1@67PN
zq~jG&bluopS?^A3kxwDfJy+b5vA5)TM=?5kpd?zkFxnK;V}}VGtGsw!(q@u%$=D2C
zx`+Pfja?&aV!vJgbMlRxZx4S@`3scRSI<O{e>j2TbSbH4|Bxt93Zv+h+hiBO4*c)q
zaVmbd8jWzg0$ru?F9M}25EgT3zjP<a@Jhjv(B%-kel&WL?Ws>(AK#4|+-6_mpAC5-
z-O;tAR%f~i9v4T@6V_mAP_FP}tLikr1(%@|meciT1;@AHVtL+eJCGa>u-8ny>0$M+
zt?ZzkPVDOUzTVc<_2JX|4%c7~{q>D4x}PpVKG;R}F(0R0C1GSxckpaA2XC*XQq~c2
zyuU?Bsqd|^9R88Vc!YB<2Uq*yenp|q)}BpBPi2S+=BD)2e?^NMFDk6w`e;a>rV2<4
z2=9_nJL9gSvO6G1*HEm>%@Bh+Z801+8>^k=<|g~QC(~NVEd)g*sZjAV&P_S$<$<$W
zIAF{4FYFK5o|=9nIZqnoJ*976p82r-kN8@u68UL(U9%|ur(Zm+?$@n2a^tss2J`>0
zjItfRwto)bqb>`f!!a5&V*@sTF*RFY&1K@_@_+_ff{)wiSHSWPvoIx6l-88mU)~bV
zO;iKYc)-cHG?&RO`n;#z{@%yVY7>Q(a}_Y7K7HOB@eT7}ML84+{R29xSL8zAnvo(2
zWn{t3$%oQ%X040=lt@^LHhF3j5j(N8Mr0n*F7oM4qNB4s0}BHvw&8~AeV&vT_Iupt
zM*FmnS{${Tdh#gt7-w=p;aTf*HYc^zkeWrGMuP>tmh~vMw|Jr246hhnhQ-OJMA8^Y
z+xY7puT`(cO~g*R4Vr^ZeNFvebpiAvd3zo2ROFqy;=%N+o8N|Zgscd)a%R7ZXm<F-
zX3y*?{8eY1Ls+$pYG#%ON-+=5KIffGNt%ok&)WtpS{`VAWYm&o7$Qp1gCtf|V~Kwh
zp>x>%%dx!VQ}Xe-K|W(8@BM<pO6<u(m*0ID3Hgno4~8A5`I)TqKLIv@I@>q7pQeU}
zo@z{!YzBV1GiwR=gPQ!B`CRWtbP<201bQ>wF)-M%tgq3*P2$u{`EWvRN7-<uQIk(r
z+<gy@Dq_Z}!1_pA7jUZz&z%x@3M;RbZq&U3>kr~@h1*DEA^dd{gRVA(Rv{IO6AO%L
z?1xd^5NaIXfViMc)>T*(7WfmkN<jl9fxk|$-*aw1`v&*IckOgbx%nA<QegNhm*pk3
zzMjOs<WTZpu*>9oDs17pO(<u)M*t(DC=Oo~{=MctIXBP=)FXRQSwKC<6qGfEOVk@=
z$P#XZSg2RCoa<d@VcTj?p>SUvYPJ8>4-uJKPaN?{Kjv_&ut$^O-OAxiRK0S4wiU5~
z_%|@#M^ky>-D;zpJp=;FK^0AS;ART9>rj!J_+sNR!0eK4#V02!kt@oMqH2%(LkGFr
zXO5P?d00kFCVyoqI4;=dK9lrxwCwXGr&lYt0?E2WSG|;?qT*pAmu9|Zn{q}^%^*j2
z2<9-%2ExL_5*b!ptGb%i?V<2SeLb)yVO|iVz-LNwi0D1f+sm7&2TD@)-8{-K(XX7>
zO7CJvBy2?laH3LGO`25lOMatNn=y~K8A6&^5ht1vN}?MOW3vW<zWUf*V)QJ1uACM_
zU7@Bv91e$OxNoNSj@Dy5SEW?{C~Nv$!97V(<<qCnE89kj9!_K)iP%s1r%MBQQM@-i
zjvLa6RlGpRN&6Hjqyv)nek--vI{|cJgr!Xx5bsr3vDzs8mBJ+Drs_QId6gpOl>V7|
zlPlea-Kw}+?W%MZUTr1r9^YkiB5Sze=0I1L<IR03K4ot>@;xJ*$yb}~`@jIjn_NBH
z26jW=T)`prrEn4vqL*Z5YN2)l9r!S+7M%khHVSil+3)@vh?~k+!d|6{hwVjHzB(r9
z?cpk$YK*$8EwNLL5=#AWv0?6Ct%1QgZ`J48L!Pt6#_7Rhw-x4AbyLz_aPpo+mi7(#
z8*7n}_$#18NvsXi%%_?nn2LZ;PZqrY8<O8~w9ZX<+D}KdM)MT<xxJ_Av#h#ch>u>i
zaP~86;DgM4a;l(M8fe-SlS34^MITQByG@YkIFecH%QDTne}a?O%l3X^#5S(9iJAK;
zuuF@&<Ue4F?*!O6RK3JYbslc|ccMX+4QBx>*|RCke-WXR!`sw8A<*GEA4V6sE6gJl
zonq0RHQk}eQpq0xM=XvRAx-^!8}3Msjdm76;uK~Yb2t2((oQYp9&<TbcVB>gH_D#P
ziRl}1)IpecqP+{{Pzg4k)U7BgRanZC&kel}3~A;LnBK9;EG$anV*QL;;kYmJt~Gn}
zqlbBiwa5r~^U`r*joV1+3_1WX2CB$Yl5`x7U^_HgU}Op2s<gRW$HV9s68HPt*apw;
zbH}~AH|GmGi*0PI`OS9+{mn1;4o?5@Q&2_Pl+S2$*Ke9w?V0zuFR8y1?)e99iX4D1
zp0P~qDQV1eg%aXkgRCV!jJi0KV{r_8TuvITzx6Q4U$66H`v~uF?zXU%Af;;kU?9yY
zD}Cz76VtIcblsD}AGFE9U!i1BK__X>BDk<V*$B}mY=l)nwhPMj#h`J{CN~lSh37l~
zRRiX9XZPg^bY37iXR*ZZWw(#lTYuu_LEL&QUsX_$p=7c1B!enrr^u*3L(N_HYt0ms
z3vJ<eeFb5M&R;qUvn`uyO1b=)=M6P4B4gH}@zRxc)~9^%C%L%Zj;`;CJu(dtCX1u(
zIR-<Y2XSbx+C5)5zBT%IsW9qugHOz8YK?X1t6(SS(m&PxdlVJ~wV$RooFetxG*^T{
zlpY-*AFi8$r&QmHkBgYePavzk_Lq}xGQdVapRzR@H^`M|+SaF<p1VFpm7ILT<p=K@
zJ}%4{P3ulC6tOq~0l}<umsir%#^a>^m?joIl|pO);GU#P6_}w2h@uB$UVcRIrTYWq
zdOUPICB)O5iz;+QExNofpSG^^^Kn0>{x%}lpQ~sQslwmgWG=Y5v+~VYNQJ4$r|4(x
z36Nod*Z4a;?FgQ~CKj5Ef@ERYoPV^Ik?VP$z@kd41yRyTh%$KIZESq|o6Y1#F54aF
zC(AOy;gT-7oGPt%^1si{c{kiWo!mH;5PH<!Jj7?f!9>Ma(R!HyUEnAjt@}cFQqU8j
zTKiOUA338ZOyKL`j+g1ETwh0&wF0!}&e0=ob3bm!RfQ~hPmXO+Q}=%Cb+Np8`)+%8
zeRt2SPp_w6dwB2ZD2qrKw|maqrZoe>+!W62lVE_}k7!chn?v=7tjH#w;S>e4ks4j2
zP2?&BOIXsy_MSR}v7Z%4?8La~&Ky>jS!@4L+e>jnYWlmHXpZx{<9<W#;0@<j=^29k
z2l%PG2(6<Cf1nZ@(2*Bdnkq$;W>d3@doI#jc_t0xH1;pV!{Wzy!TG}_+|oLKC;WPv
z!q+<B;4gZk2A{X0aTVcbB_aF$CG0J1{H;lQUfWmqwfLRtg|l-4ME2Ve<~-7LC%%pU
zH2_8uXwf0g<0}Xi6+}C(JXG&dnD2Y(;&$+PJDqyRzDpo~zUJGp^mez_rkscV$5<Ct
zKMsYDJ-c7nUmUJYAW$kULF<;Hr<ueClX~O|(*lOk&E8^(L57kU-%Xv*JAn;1`Lq*l
zFICeY8yIWxtQ$%XGf_n`?7{9MKXNa^(6@8qTY2ZisJ~US1zFFe93M1I=K|5e`Tt^U
zQ651I5eQ3dl4efxB}i$?NS(rSX%J{ck2f(Bd_1pCjvEE0I;3AO&mAb#@6UbUa3dJq
ze9`KG-_gO(Jw1N?g`IhsVHb>VpU)5aSyGb`qD{sjI6MvY5@+%%C7DV@@BnVxB>toZ
z<=%U<O9nRSw>8Ev5r(8+j}`?72Hitp9VU+xq0x*bgi`K7Z469v`gpmp+D!rHoBx~|
z>~Kqb>W~{A`MjtA>!0y&4;@ZMc2y_s#pmY7jX#{!YhH*hVb@ZV{u>ngzc(%ZYhPpD
zljuC?uB1C8f7GPSFpspCwUqtsAJ$7sFX<Nx{`&jIr5f+d510JU^3S}hIT`TNWi(G0
zzOJl8NUXaaC#NnNAh)#D*b&Oc@H26FM~RzFZi>`W`E5n=Pm<Rg%RNHrF1ZWrMh#r{
z;b*Fn_LQb`Lx^18!_S_5x;Cb*hMK1?SSX99mWGX-pK*uZ7&R8;pEWjkel&gcOptn4
z6=D03<^R<s#%knp=sQ}IV4>QnpWYs-_uOk&hkakfFp^~asYPy8Q0Vl{N31Ehobd7q
zf!Z|3+KAMLd3Dr2R;A62{GhBA#7BkocMW?V0cU<2ir@5pT+_`d3_ck(ezdx@bwcC3
zyR5R~<8}AGq+puo<M!<IfW((=lHN5jTF6Z}cE5=u7r0@-Y)rzFWGkhm{3<1t@J6Y0
zbER`PW^!#@H=aW`ndNc=!g11hl-9Ilk3Ly&ms=!ld}89BGn9V89~3n*9(Wj3-5acY
zEx5})3+h7Ilro_#Q}DPyW+n*gqSCaH3PsAYp#B9|cM~;!3l|mnuYa@o?4*8}=bMKi
zg`Og(>hR5`*OKxZ3WA*YDWE|oNuKalg?qdoaVmU$qtNxt^v)jL>1C+M3R-Zx$EO!F
z>`?jWtSPP;^%cxjJ`^aYK%_@TxdM1J7z@Oyjc(QpjOd{!W?cBKS=wpJTJ|d|4|lP}
zJWLQ*ZI4%pvQ`s*EXB7RMG`aZ_*260!O=jzQ+4~<V!9*X_G^PoDT&4E4d?H1AL>jW
z{y*np^#N*QFV$)y63#!BMo8Mg$ZsKUThTDcyN49e7I53^l%j&A>D_S?9BQC(*4hdz
z_e1W=$LP5f1N*+gC+UB^>Fp14__6Or<hkyG^A~>9{yX?T(B=PoMN_*x)n?D&`ujAu
z5Lu2um+`F{)!et|P}verG=IGtHjCyls5UFyBP+1d>!U&r+f*q|4iy+3eF24sw>QSk
z_k1&vyl}o<GUArl;N3y{fa||5%@fNnQ{Hh>pz;%|jcm{;!BWrqzldf?V%OzIm5+MX
z)i|dq*5@jdK=wC!cS+iz_OWtgK3fpbu6E05vH#cOu8^DP-Tr=-xAzTJ_=mU$X4d|H
z=%{;O*gzR&lJi~ROV86JBG6BXYEb2A^2dRO+1*Gr<b^5CO&YRRU=@i0n86j9hfb~O
zhuiXiE2rD|o%e{0qhMSTe4${-H1GELfYYacuuG=yZMDuX=?pF8=?oVWo8r`F+u-6;
zg!9ZIew$z=67YA8mD-LFU{-SGHNNe@bY8g<DwOzeV_^W+*D#%y7@9JdZ9(liU1I3V
zE#BKc7E<LA;n@)kfbatMe0FT#agaoz=(D#{XYnnDLRtSmT0Kk^)KXDA^=3^0%3?9r
zbNj?p({gD-SUUfvyx63lpzOdHS7elgnk~d(_U-!gy=k`G#Lr$;n9Ik6aiIJ@{*>lh
z(P~}R;jwzs`jF0JxS9y9tCT)+8>xWr4_mNr<~#DWn<C{hfNhPU8~8SQ3W_O{nA(Y-
zONvkgTh*th#T1um{6?>*20%agy8e;w<BxtTDzquP_x&$jpI#4rFx47FWjA3|4x!m-
zMisA#VrcQ-2+C~1Cn^TFQpUwnL`lPil&0=}?Kf)M++o}2H8*9W8+NrO|4|*itNhWD
zckJ|AZ>M96@ApgJKJ+=4sS(^|$t;{9enTP=9gdzvdWKaxM9R!D@=vHqmhf~TdPkW~
zHM}Z}XaIVO^+%D5kzzv}V>R$A!s_!|dCdnu)DPGD6oCR{w<mr$Rd^<p9Z}^$^}^nd
zMXybNmljWV(w+p5CIPAcFSu5i+FKJhJ1tG7T9_%sqLc*bN^+t48$wz<?Bsaeo)$N4
zbHk*uSa+bG-ljIcOGNBWCmo((vA-2b0*%;VVeS6h>*ULEf3T~Q9;kQ|@`w_R$Z8;3
zz%uD+0DbZ6c2o&l<qw2lkO((Wd%-Y`?j=uI#=SEx4tKj&CNSR?y6pGCum>+Vm*mZE
z4UXx~$9+9csj7na^?B8l2_Ju*Cy4kSIJ3|~r~cDTiiGk3>MTHWci0GIs0r*@1X#w9
z7P*rS>u#=#Cb0-cVdxxwyMuH^2)npf33KECP5LB~d{NE>fZGOd|3!G%l?;(_)~3(i
z`>F^(wjz_?_L7sh_>X@5H22uyCS#}Ek5O~M+D;285)#m6nniy7Vm<?jw!&u?-~VCy
zGV(Jt)r922<e8;|K%irSA@o5u(`4eEo+@Ov9(C7bs&(-UpST&@S}OJ%5mtwkqE}5s
zjMd%ea<5Yi)Q(+hSBx!sQt6pezS<&s?)6+b^!wPK2l%Fy9p%Y@u7?^tE*k|b*x+jE
zqZV>qaV<h}?&+vY!Jh)~lJ!yve7@t1H~$TD&ScWKA@55f2{&jPuVbw00Dtp_&%=^k
zF>;y#_bB`PKxOmutkV3WL)|{+uW#r14m+5hdsG?Rm=jd#pT_Stjl8G(ap$bhfbJyV
z5awl)eS*g=BPB|-k0$RPrQ-RuOr2uVHc+Tjy;DYAqCSK(;$(={&>rj#C+P|KW$QTo
zydu)o9aG&>EHF|qV#00@hR6K1gndyZsVxb6_Q>~AE%I1s4tv~JDEpU?qBc<oR|YXF
z#3KpCJzTd2i4dr_Ao|jZ%vXcA0VsQxWKDb6&U$O)Crx@T;pU4RUui#SvokmH1VI+(
z!SBn;ue`stQwz05F!o3FQdgA&u?`+#pRF7bqbVqbp#$wZ=?bb6ji!<I+yba!7FC-o
zka;bqPspnZToAFv=8g&JLbU!w-jIp0t*2}_`G|hR{<g6XofCR4r@-9L^TO@R=sw{J
zR0c^Mw%7A2qDK$Ktqy9Qp{GGm!G~~d=&meQuNKZHozzxDE=Z@Ctls(jdbCWcO*l77
zvYr<Yhv$x{R2T6Ej)CCh<C^=$K|YLVkcw4lQUB7JZAfJotIf<{<(g>XYnH&{LF`j5
zqmZq$ildod@Yk!Ii8|QzhC|_wVrqPi0pZRn8bA!qY1J+dxK`eHfB79&)|N!0J3$xu
ztIFRL6-`nXy>t6MbjF&|&cxn#J<y(p&@mSv8UHr0b_$Ua8{9@y<bp+Hj}(CJ#Vgdu
zG?_JD@s?m4t}qtxP7xgZ!t61|w}Gh;a;5s)wOK1MBw;c_<J=G)OqN*WD>zGrHnDO8
zr+4PQ_&gSRY~s1qewgK1P0z|#d?l1c3ox&g9=!$u=04sloaKv3q%z$)LA-QcS&N~X
zjtiqmN3}13Vo9O{Y(pZ)8{c7?8kfiYEb>{`60fG+3nbUKuPwnH64TOmRJ^!9@acF1
z7^)Y>Wb0<2b&V)?aJ&Z*0|1JXEYv2A_??Ij-%;&FD2sWPZ>r7ZoGakN!qdagjfuEa
zrCWm_(SLPU^>K1;_vAhGhU`ArjN!?-dAA?h>3Vh3?A|%<iyDp`fj0scn3j-^76`F@
zRd7aZ*f0_!N0yR3XsNWGYNlRA7-2$LS_)4W7b~V3gjX$W+o}UVQzgqB%X@a7olOjj
zBs=@d<-teTOFQX~io)g0KuK06H?{3}@9;Fg>JDq`?C7%Yl@L4V*%P2Z)kY7XHbV*f
z8Bd-mF^qdEgd)KgLr(LqV73bC)fyY$fl9}QV#7g(C2muyj0~tvZ>q>4Z2qjXzZDx3
zTr52{)W5OACf~xWJ=EP?x6xa&TzAMsZInVToIU3hUFZpF@7I0DH09_Sa8q1^rPLxZ
zQiEzQ@N%M>ff(4A_;{T9Fea^&AXn6GtOs1AiQLpW`6|M(%g*dovdN(tOO|9T#rk?l
z?%TJ${yW!c@i(A#9VoV++4D*%9^qi_@bwqW>;fDHjvLRYuDxMc`)>nvihd&^H=BE*
zu3wJ`!;$*%t2LW&T2y&*fZLn$VArF>l{<NHcl`Ze9xL$;ntE|AHI;EzMtvh4fjvAI
z(z>W0pr$s&a>NdTiVY)mveVskqdSrLbwU&VH|np51Gr^_X=+AL<*wq}L`ALtxA?vk
zg|(4ad#JD8s{?DF{KRr<et2<uDmD}twoZ9B3YnKtI|K_&Q7<)7eG61{9r86&DjoS7
zpOIIH1ymN(1d;zl#C`_FIXf!2OJOZwoN1;^nIq|AXVJ0iIS;r#lx0DZuE(d#u;ilL
zOU1n`(~!#7!c#dcNkz;#`gUzK^6xg+Y!sCuusTyvec|bGVx!wgCg9u*?nmBMZy`?O
z0eiZ6!G(ho53(vWC-7izkdxo*hjx))S|xiQi1rBHMx$AWRQbN!=l+ciQaZvZrYC({
zi*&k?vwDZK47a;+{04+b6~dnTyC$3R8DL`3zX{oJ9>H3gO`MVfYu0Oi=SAd!!VR;Y
z*88yzonzl(!9B+gcB}JWjTc4ZRK>^Z_P<r@DXgqAGHAx!GcR8$EN<ii@6JW|IMl;O
ze8g$9BsJMsP%xxLZL$B41I_;<umAs725MKyBX@xZ9xbk%E!-j*3?I9B?`{0A^t}F;
zWd8?_wcf@{^rsmoQ};JtJ{s_)HYuFNI7dB&ZSfU<H336y=XR9C>7_P2v7lk(EznER
z5lhREdQUAvx-;%bX(Ap{Y|OQ4<kQ;eZgO<-(M!V9ogp4)>bqt<s}ql|k6-q-mikhx
zUI}UNTuV(dxrX0^Kx@!dHq}%-pBK`GoTgk06PWS05OK0RAuP89e`8R&dZ^w;m_Ix^
zFiitb_JViZfa7?IDy+U`$=iNzc)R!KkVe5yzkLyIorWMqUQ}%lSD)?Oo&**9blt=d
zA+Zq|fj$~HZAV+V#;F@Lx#Q|V9QC?He6%F`Kv^^sL$A@jZgZ>Z!{0hg8Hyhe>_(^c
z$qJW+e+RTpKDYAh7(G|GN{h5aWJ7R_MW~pXhkPgUPsUtL2H%G8RQjqHVBVq&xK0yO
ze=-<p6zVHFYBs!8yL46~w}~)urFG}WIG*4A9v0s;eOUApH)#A|TbXm__V(>n9W4oG
zd9HT`zNfx4*W$;bbsLdDB$oQPSiRIswO^CXupOG}rxL!HRB^PUI=GlM&B!T!8yN0z
zUp{)Fp^a^w!&>Y&Y?_>x#weLf<^<n87Gzq=Qcbz-Z4Wh*b58%LP3B9n2@0`3O|#Zn
zwF2fd<+Bvb=1G`U&o&R$%WPE}Iv}`y@B|mFyRCei9&WTMR3oS{3PMYZMbvARbMzj9
z+K&;<i0h^L4QnTo8p7Wviyjea@}?_=ykPA4lTu~o<~?^kSh+-s4>rTDoST>SU`R&o
zc2m;<Og_sC*kb^FKirxROX_pvR_ccm==o^#+mU$)n@W7CE2btQ+VoSWLA$F<kPCWE
z@A8xFl1o9#D!rwlWl=A2O5~IlW54^a)IJfz7|Qy}6jz*)^=Z(;vgEpTz>a4%t>c?H
zz?d-k|Bz+kVHbMA{bm27RnjstIm4JGlC_NL&c>Ho4s{4w{+?*b_EVq1!{WfnbAyPa
z0H;hwnd2FJn>!4-LYh2DuyoL=J5J&|zToYUark8a&3k>rrpq928_e1uXsD&Op`(!V
z&W(U&cbaDh&yGg4eN_FW`4>G@b3^9BxAL3^m@hfjGMma94OKqR7)W=BlOx((Bhhqs
z{A8i)fzEO(tAH%4jb+IOuiXWUxjBd4RMT?VrXRAj$(^&2YuX%44<Xw*i1sk$0<}@v
zE&$YjMYcm$STmP*h;YM=#1&a<AUPEy@%~1{PR_$Ys4R~a5jhP`-B%`y&4*2Gl9j%e
zK{g}yuTYBAKZrE$c&K15VTB)#t&)4VGPPz($%UWcMttB#E*^uO{|(9(fQ5ppK_g($
zxJspN9TlGET%L{$xgs@TSg60pQwx-|gc`l>YR8=8{(+1+`1+F2+l23T5x<4Pn7#No
z+0ttF%FLBz-uW>;)LO^2Yb)a@ypm8<mMeIKUPff8=p4ozNOm5ObJd0*TI$Lqo@W!{
zdVv|a30A_o(U0o&Qd7nn^+8NkDo2QY<r+h}clKK%tf?}%yel`Sytcjkm5b+IVd6Xa
z6Ofn|!ndD<FYob>*7u%9XdMj=Y>7ei0k*`sjI1Cn)n^`K#h2+uvX&^SakVxcCZZJ3
zk|q%2cR}H*Oc`Rx4zn=B8e@~?ksd|rJ%#J?QY)he)9GHX3W6lTw`z4EX`2K6@TfcR
zA&d}6NY;CgJjXtZnE*4L!NL@}buDw<umUk(7Y5#(TB@%4@M#6p0O?!*ysZqS5^=7T
zI5j5J8u4x~nm~;Q^zIEf{_-L+=lO`mnm6igIfGj*;M?lL>|`JE{rF1wlr6JFLcszw
zXts-J&amQzck`DG)EHpW+G02piKij)Am4GC2*%w-l~dO_KnB$JZ>f{43^%z7GUs1M
z`Uj4eH%A<J^tg3mrq4GRTKK!PW)N}#po`~1eHIlmM8)={^z=3Ouh%@DMG%s<#DN(n
z-b!MVviJ*-d47RO<+S7wjw#QQ0QvJTxXIlO{BJ-S@Sc<iJJ4ZwER?3tP4P_p_+6J>
zQWa|nH*|TZwL`7WXBue$Q(-VK7YR+!@2Ljrx!|z9S8Ym+;xvVB6K4S-*w@C;Rquk9
zbb*U5R09Tz%BT3ed?mntEBh<*xh@;f#e)~KEXuoWtV1bA#~toUmgP<s$EjT}<X%Pv
z$slL)&l@rcQJ7JQH5Hl_apYO%=!t){TG}onSK#f~q>Q*=VdR1txYzl_70gPuy1S6S
zY>2-UOB0RjaXBKVTTRa{$dWiKi}EixMwMy8N#EoE-#0wO<z`=?Q(QbG?@Jth>3T9v
zmJ|)8PWgPu)+VO5QlBuft!NKLCQvW+RZUeu^JRNQJdMAMOOZP!G3<!wdVh<Kv56Hm
zs~ltK2V_kBV}#Wq-1xWitfD}tdHLs+hpW5B)!&AlQmi-|(i`%QdbpKFQ+7>Yl(ARj
zY6y{0R%q+L&<~Ad7gep<sH2t(WqE?f(rEOgu&+UNO9S2-?5x#bE?={RJEm`0pI(t<
zQO{h`e4A}y_NLk^Uosr#<d-MNX9hX_U^+AyW_l|tGq2&ki=eOFqn&I!E7Kwl{##4Y
zK?)qHnXk~gU8EB)qFVEy4D`PGY7y;fBRPyNh*NioG(YTIiqa)aVJ%IZU`Mnp1yrwT
zYJzgN9cZ=fl>Z&-;p~CE7G`_g8~$mq4OHk}$DO)Ip#EB99URGoLo_+R@nN7(*NuGs
zi)mquy*^ArLWZeJ1F2;jM%P^^BF=r9e$8eFqdO~bx5nZn#F<E6x2!`QAp^Xf@^|R=
z)KC3OJ16|SJ=sYsYLVZ@iPZwNVVr6k3}e_*ViVFJlt7n!Llg50-~ueQW-Q{`){8}1
z8;DD%lvd9JApbJ0wyF6RcgV-aMGSM?1!U7$u*+`$BHq!a-Zt;%y6*UK=6;isLDhL+
zeBD-Z2nSzs{(A*e7a}ORLi4Y36!adu%FMmp-&9}9=3Ua<nat$WRX!j6wQCwp2r0B|
zLX6cr<sSQHc2@pky}i#9H;#e%#7|ovfp@b*+a5E}-k~Jf1**S=kq!~Qsei~?kJ%Lx
zIQGNN>+WF3wd=!+4Iu{)TO7W;`;WU1N*6ECGS#XD)hp-;mBU)F=Ql_})TkLRR{g9g
z;>|7MF+1$g>y;IC)cFLJG!jxlcwHL%u-ZySiOr%v$B)(!rxik7BKl~zeJ^R5yh;+3
z{(B`O<HVhW?2@dh1MH-&6bYrzlhl6>m*2-i9tVt4pdW;mk`-Wm>=_NKs$1-DKqNsf
zb`9cAwcou!pOz~j?!_i`dfW>NHyFyBaFN69<&CY(hUq_{Saf;GGR>WkxO})(=$1d!
z1t<Oa*<$*V5ZfjtRsmJ7N_7`LEKE()JV1ibnCWq#*`X`TTM|sVo}@{a@HeXIZ)z+8
zp-r%fJ1jq(7n3c4Vn`e%J$BQFGjET=gLwqsT>0xTBZrg6x;P#DL~x!_q&<RQN124<
zXL3Or22t%J;Lo|5-)j~P3w3I~<QZarAxlC~!$9dW0118S6CFuE+{Tgsk;U~kGzG6H
zgI9#OoHRe~?~rpx!t%F#)EQFvB|F%!tfXL|@{f5i4UHh@FN2`puE~Z*z7Ud_Ku?L6
ztg8YS0{OO&wwS8~Y&|nkxSXyVAdh4qhC%)&?bX!mK<Pp?D$D#bczqMi;K_sO)N<AX
zc6WGQ$-M-7`!;3UL^ECIGCU8M?azmQM}6D^EkK2M)D3V)>%k#Ly_;B9r2eYof6?{k
zVNIQ1+b9+_Dne8Q6ogn&Q4wgBp)w>|R8+*Ms3-`jqB6voT0tU&Yz3Lc)LNxNAtIB=
z5D@~(kO*O@KSX2-5QI!sWRj#p*pk6-(f51L^?m2O=MSgr(rvQ$v)8kpd)>pTlXNez
zuh#WY2<B{vler7g<6t-($(I(~t|eRiQ5}l*(>?M-v&^+^b*c;ZlzNku{UqEo9b^Fv
ziZHXs884xAxCC0#v?fv+bG%i?z9pLH02YacKn^rPuPGqf+pU+ojsA-~yhm9ycZds0
zJ=Zw_7CgOD>P`CQ0+^tCUAEV^8W(O8y&IVguM?D9i!SuK5+=soVab2Nsh8&{O*A)o
z=b5q4S5n8B@=0IRt$0Ws-T^y6dBcAA+=;AZt}fCNr>3EWaM$&S%ZQg1gr=cwf{N%M
z{tN-jE1!7O5w7R9{qVD1Ti@ANrNtAan{;QKln8VT7ZCBCbZk8_9telb>lWXl9kM3*
z)zoWJaA(_u_JANZvOQ&b@Mu3cd4F+rkPk>BZqiM%`|2Ge5d6A*-&<*vmuWjO;dpoW
z;Q4U<sG~Y+IP=H;iilI8HS`((R?b#Npd%_v)V-0k$h!q+bQZOd*(HF?$&|heLh6*T
zHPMQijV*q7Hs=$T(!{WZ2&Pc`9bs-B#Mnkd8ue&bhG!N`IXP~GV|9u}m??iT7Tn9U
zixd*le6aOo*aG0mhL77}Z{y?z%22{`dYC4=LZ8|k*;G<-dDLQEcNk$l{ghmEvmzz+
z=*RuPgo&^pBd<O<S9)J5UzX9Q`{g2h<}`x%9_|^y#k?b$G}mjumh$jL&(FQ33i^I|
zOETX4G|F$r?|4h$5ECFZ?m%yo?};h}rV+nIL8;Sns50+@(dvuBzh_-Ta!#Hesl2+q
z{ju3Y?E9<N@i#TU;SEAaU`BgNwT;nU{fP|=4GUf-i{*jh59RET!}XU7Kc<5VZX%Gr
z4&@Y$JoN_+9Fi|2UkNzHzoJUAU7NH~GvJ_u<mYEXciN5An_R3=nYpm~7k>76UQy1e
zeBQ&s32{nL&GcBstW5UbJL_g8b4<(gxE8g}p{+Bd`ch^=ZfA9WpU`j7#9Q4jH{lh5
zhg5GwILD0R$xre6m`Yc4yH%>zgs!V$Pqkyo78~TH52QBkO};GtR2PT3JlJCGGw=y_
zjg9~q`MhGig`smgQ93rcf}2`A=G5t1EOa$CHGhbi2Aq0X-`vG{A72wbpM^FNt7ZH?
zPyG^(CvtZ<y%QkK>1P};PjqOO$AE^$yFeBCNhn|v2+)K6g)yJrTEje)3??4obwLs&
zUQJ>Tj{0goB$c+y7oF-u?~-b|)t=cWY23>;f~x38enX<`2=S|qLLXAs{Is|DUv(Vq
zlz?OokL<*~Oi-H`Dy`5xs&7CK#oer)kFE%>A;tX?%vb>;R05VPOnt+-BCfHs82M)m
zE3UD*awKc)l%RsB-^S(t*iCo8_87hGzuCsJmqQ^ROCIy#>8O+cdkFr`b$mWbP+_%w
ztcnGkiJ5v*KU0>_IAHFqj~`X48h~?sr08Tl`AGuB@jd(7F79i=Op%#e?JG-<^`Yks
zyg&Se?PM-N>Z@4tldM%V<RBR6tG4VZ=noZ?4G#398E`_NE*bmTV@v$8ZhPD^^sCMx
zf&IXB0}J8oo5eX7iyr;DM~Bb|!x^617-l)fc~WzC<?%{xdFMpdXcW;veGZ(&{4dbn
zp393*c&OgV>*1_!mk;!xYTy3ng4CohI|<vh-!mFToSE@2)brOAKp{Z~<lNRHmEDsU
z*|mZ4;l^3FTgphg{x>CIc9-lWq4$Nfno4rv-}lZYZA|TtS@C+_KhytT*aR~h0Nbnl
zl8Jf+;;;FY7lboXlTh6f^?5MEV8?0~pb0W;BAknwskgZx%yB>xEpTOuTY}59E0U^4
zNL_{#x4n^|YiEbFti!S<&9lqK)*-5m=#xHkv|2|^fw%TINZDdN9R|()_w<#T9ON7|
zVOG?j@9l#sa@B^4h*%7hu@>$aKWpPt1*BXjF<hQ0Tn5!%ilAHJ6F9%OrFb(SMtD$i
zM^DV|%{f!jYSWV(5TZDJXr8J^?yc3o1Fy+$kR&+qH5jSY_*WgaI!Mu$5N|I+56qE{
zWIipd#bfyGy|#~37qW}IB&-C&N@y3_7WTG3C;QtS=&0DY=l(tF`2`wf`I8NwIN%oO
z2K&ZkFzc^UZq>xAEmd}EU(IiHD=8sXDKgY<X4ex}s|i4IYz42fNnhE)9<^tntPa@H
zcfs2a<sDS4`F`Nlqfy^5#<~o?(=6T8Rq5=QTG$V;#<w5`s)d8j!v7%k=C0q1MS8S|
zCS18~nZmL$ePe9iNcs#@y-OidCUrRQR);FDUf%T>QoK8AS1ZVTu3;zJAu9L2l0x8D
zTcqWlsu<dH@6W@Jz=zP0C-<kKmL}tfYKyiT6sN=mjMhkEqE??~t$c&B!sR3|R3#bG
z3Zxb+iC>*n3vQ7bPY;*0c}ndPfr^pDvH6iNZRA}7lIAkcoZ=z#vfmn9a8&_0*AdSw
zAg9Cz@x-?xZEs|MoJ||gDW=sN=?shBevqdiB_hxn{5U{TxJ|_U?pPJ@ZLdx3W<?<Q
z5>^Qu3L!qPTO#j`uXTI4C+f<!;8}~i1vZ?x=a_$>2w^tDQFU(S2l#d~tAEm4bI%@G
zhFZP^{sB&wQRgXP6iNM&=18YlPJ4U=eo5ztZrAUnq*bBm!>LwfiqrTl%){Mb?aRli
zWh272k}2VdY-&!Zv9EFbJW$X4@A)}qOr%~mptMAHsgOCrr72h%$-`S&aaXzK3fNeU
zXc0TROT+wFrb3#5pzA2J-beU}<xpAv=p(~2{oJ$Oa2z%uWXO_v!0GTuXKvCHFLLpS
z7$+jC-2<URIss(*?*Lv((G(ND%pS&ko;P=@SVlPaRR@SLFG(E2oC`;bFSITGDtnNf
zE}760MgmNp3ocDjqMC)^4h4#A-wyn0T1L~5MQ!Kwn48(oG?}7;3nn9<rr4ldW?-w9
zzYFg59c=2kj+y!jaO?kAzw3~CN1iyD_l(d)MYkqE!r?l42-S@4jq0f^d}+xlKHjjq
zb`J=R52G>F_seq8D||T(+>3SU<m|*V7N)U{fhV@n_QDJ41w>V^*rBbyTdVKKGUjPq
zLrHQ9LB0H{>JaZ4NAoK?jGWPGUE~)X=%vYq5z$Dv`Ie}}^~vT38f*e(wne$Gq5>^T
zdWs|S(+We{U5}JZ$GtE6ZRjxev$dv#p+5pZ+k}tG3wB$JvS_KfiP#75DVBKX4tw<1
zU6jJHbP^wzs9i5V#3~MT6ujV6al0q%_fap2EAhL13}3C;k$U1fp8gO!nxoavfg*5J
z`xi_C##q7>DQ1EqF$bHwSosyL5!le#fInR`{(HIY4aWi*3fWA9DBD}WwLlXZxHd1k
z!=eyOs*`6|VDGmb0X9L0Uvw8!OV4xxjbSzgje~dfFW4z9K(&S#q2zj?mR#b<tD1a=
z;vSEHrDlpmbQ`I#OAKc(7;|#`l#V1;X!KeL#*jE^ewO0+cgxRVgUIe~`?0>BiT6oM
zQ|!S9u0U-@g@yC8CYeVi#<Fl+0;3m?RbZMr#L(z=s!ik({9Hv<Dg#hZ57UUaT639~
zd-F^ri%(ra^KPo<CE6j9^(pR8pFZz>B>#|6;9hvzKg5}v_jshLS_d;(HL)B%_8XWW
zg|lw3j4pD`=sF<jLvU7Lp6k&-GF00r*fMtVG;=Yz+97Am*rX7=N=b&Uf#SL=#OnJm
zL(+#biau^@jd&C=x;(`6_KlLt4ED%FT*6#OjZrU8QyOWik@I#bxQd7gs(j2BZ7K!1
z#3>L)l9mvdz+)iDXKqflW6<p{xm&7xZ3@sc(#eHn=jJl08OuVG{K<`axUTEs)+rbF
zf_{%H*RK8i5?9QUAGSlCKp#z%VEc-cS%6!R#I{v(7)~|76GoPEt!eHpktWTA+xTrS
zDthp%QSW1l+Q>b_3DD6WR3LHGDc17*_*sJ|K^@SL+guD^d}%6U!2CzEs5l+<7bs#3
zKt<zuaw1DOsa)0tR8L`zq#zMk<uYjy)AfALi0PimMkI-Vr8~%H+|g@N8&bmv<>7#O
zvmzlTTtDcD!d`(dV2|RrbUXZU){|n&=g(eBQ2Jk(Y21l}7ry=|K|BZyGI)WIK1*dL
z%2yHSt9!Kz;LK$vPXp=*-AOvACv9&gShyEE@kx4+HeD_ENpy8lcuR4q_M5}7D+l`B
z?lo!C09sBs!1Z@I`mAStIV5cRpVn1>c>I6aBz^7B<|2|=cq;ouvv^)CX-1UtZ+z=#
zDcmr?q5FWkO%b7+CYg9!#vAQgo&w=}>AmD)(7+&>Ug|b4>w}6DCE~}NA2`v}2F2h$
z2fcQ^wkwbIqOFg0UkrOOZ3p=kl(WK%l_tFpamiuxRB&!yIK~)2bO>i~=q6A4eod}=
z&tr7Eq_>e6!*D>i<5C}XijH@<emiF(Q7)NG4$BN|CX=0%c?ognnDr*rd)^e~j#Lje
zvz~;eAM6#<O_%j>GS}*=fG?E*KOn{Y<E&O65izy`yCL8@;k8P;grnN8w%4$E;%pwr
zX~Il?)&G}a3A3?1(YT7M&sA95(<BsyrtgiFkgznb@Fe?$=Pw}NXgVWxVYJVI%5MGA
z;&iX~Ol5OM?r8jH&k7y&3{(z`Rv%vPn0Us2L{F<)?1Y}XHHCCoAxoy1xAF7k8+ftm
zYfnaeBDjmndKha)Exzk<urX;A-o9@a?q;m=eWqALl(fcol-j4XraG&L-0rEty|O)=
zo|lAjN|08s2VU{yj<9H-lgL1n<U(%xp^WH4Zf1@zt<_s#Cuk7(<v;7J7(nz^PwOA}
zxcjHFvYV?*KV@yQT=4giow(LX^)f&0k~WnQeX#~`F>xW+0sW%D906v5-GH5JAxlvt
z!6nj>oW!XbFB1<mRWa5WVPUMe*B(Dvd%&Kwx;;-#lB+9EIO?8y`)PeA-D8nrS(N{G
zp<-NDS_<!9X3RdYc0_#|8JmbeRTxfY@r4@;iVNcDmgl9>K1~5@qn+Q7b31Bx<hN&^
z^b?UI@9y3@)#{frW_^vlA<n9%GAZjEY(-Y>tHz9nzEvQ}9Mz`b<o45wjW3FQ_k@+@
zy}l~UDhQ97AF+64dE?z&?<cRzi1y^QKmGPsw*U1Vpr{)_#C<$;OToB{YAxdx4|=^I
zL>M8nNdSlAK}Lu3aC55O32>!iaF;2Z;%Z6qUJ3Drv}?*M&?DtUHFZUBdKEwV(6C=u
zxXpI28}@CaAFClx@D$Fcs#AwRMJQC%c2d3KIRi>~MO?y7BoulMx)&(@wM*4I<<$6E
zJ^2i=mqRs16G)1x_(}DKT;GxVky&YvMuv_#$Cp#D6@oX({i{O8T}m{vHIJhF4)Y~+
zj{ox!j!E+Y6^VgP&J{l&)~!85U)#pQG4LaV`S{K1r2_4i5L4{~g`rn>2>^zMLR2Ng
zG}<Ls;}Tt$7Y1LQo$@VBF=oohUWUiCUH*nApTasW+Bxe!f`u6JzcA%U{RM)ULy~(@
zli;UGVUPp^+mFzPkF3&eP@j`W(jDaqkcJu}6yz0p6pr}_W(xcS?|Y^+EBFWG&38lc
z-nBj%{Uu<(vy1Rl-^o#vnMy(FJXrGc;kn1O!$)@dm*(Ms1QB8oQzQhZ4;Xc(oV-tg
zy+QYZ*cx9(*_nultFGR~wBLID<!a%c+f^`_rylN7?+L!2HgTEqiyehy=2E10s>J-X
zZaX68k>n?V))CRdf(b!$dw;vwYGQFV*zp!B%KcEU95iAtiWG!aU9Dbfu@FLFRMPwx
zY#NmJQxzTGc2>AQqOF6;Sy|NbC!;=)ZZ(y1tjpvO#q(I_OG10Vzvk$Nd3_kIUIBcI
z%BPwnI2<tbX)@&#h&2?M(y(F=J~m!!1IjFG{U}cbK2=JDSkex)QSle$Y`}w(kbg#c
zh4Bga>_;TuQJ=*~&fv+xzwURn+T`lsz_#m3klM&wxmr`o3!IGQ!A$;@g6)a+%I>J#
zgK;JfDeVhGpeYFC<L9<$Q4(Xtiz+yC28i~jn^RBr;J*#|B{(uV?)Ia*{UOzZP1A4w
z{Hct2SVyBkq32(qhP&>C^29tocG)P4!@h|(8wH`|Tc2ZcTx0b1MpLWXu2zNpCz}c&
zfHn!ZAO{2$&pCQ#t*0JsA2EHy&Jq2%j@KFP<$mZzWzFwkUJDyqI#h-yq%zz@gxpVg
z5j9tRuRfh1BPG#o6#2MY+ReSSW_d6gZdff58H5BFDyTQtb%g6v{g@u<RO8Uugv1py
z#7_G*mm^iN2fEmort94IMU@!npVOW7mV2m8RA3z}BVy2?rgBCfS66;|$g;zJ;w%+n
zz*`z4iML!G9HuL-v}U6jUe7u>e%5Z(gLi~oN8($&yNmCC*sPzYd0&<+J&gVPv(_L5
zzW%S;zX+9oi=GidDn^#xt7=}%T~XCUHKw&UWv%IApOv5glR-#%IUA6a?HgL18yP(@
znYfm^Fx02IB-hucZ@idlUtoH(*W{?5-*sgDv3XN$$l|yH%cmRyF5^_2=+_jD;ENZd
zUCij@eZ#e-aR>N<`@OT8mN=~$P!Ota)$UrD5O^&rzkg`VFvQv6UF7+^p`0_6%aL#S
zZWG0aK0n0F-a84e1`VLM2*HW8BGoVS^&G!ezo=|Vv`NYYmD1F>e^bmS0Z}i>rt}f^
z{kvUjMN6M3Dpz{}{|hHS%0#VM<3t&P+RTj411^oTVyH%e6Z?#3=YBMGYMkS|8_3`F
zR{Q^5{h>yh8Tx6g{(e=j@1-KCCt+zHt+c6j=c_XzKig6qT+EFJPH{P&AukC}a43VP
zUg4x=vc<ic8EL!rJlN%gXdWZtGE$jUB0(&}_NkPe@|G03kCfV9q`ZvUMXTIs!_rHs
zlHbz~^*BtL&=6&M=XyoeP5ZHuLtVZChB<n6Mm7_lkQnY);&M<i|1HGbI^kE#TN1@p
z@&WV@-B}Q4{f~QcyN6a!qViWS*Kl9~=CW3DVOSSAJ(Gf8-A5z66d8nxOiqum^Fy?o
zyXks)`}0O;hvOe*c}Is!QfivRJ2=)VuWhoUF_zcNV@|b^FNe)TU;P*788ZqPA55;y
zRe(IyAFK`0WCEX529H>;BIA#=W|EnjLVi3V!d7fDRtg2Pt^4adPvEyI+-k3I8qh0y
zuGt=67l`0lhU<$#(Mot4p*CYft(eiI*g$hgi+$Ol?G%|5TaXjb1jVC<){~v%pEgo_
z&C{{`x3~t!t7G}2Aq9Vh``KKQ20i6;2i_ORYYt;RHQ$5Y&<HpOk3xJerRJaX9XQz+
zB0Qd2$_hMxK4{5+@RZQkcaMG@r=)n%uLFL3Q}?Bt%9<0Ci*}j<8olrYCp$Q6eHS&1
zy6ofZiMrg-6KTe#x9=5?DAV&Zkicup<3IgJ**v=%XcxBG7m_~+X<4hK7j7R5J6kai
z-Jznxt$6WO=P7ogz@h}A&}eSR1?nvyZuDP@;RZcxip#F<NiQyodWpLZz1rkzbD6x<
z_uO|@N^@?UYe@Lx)Ayg(y)b-;`GO+#dw77Oa)2H0-qONnt*PCtDG{5)tsc)>i1tV}
z+1WAH(B8Uwp9X33<JJ}XAJK05)w`xKOa&)IM-u+Z@+4LH?xn8M{p>pzQSg5>qlE6L
zIbl!CI8wj$tmZcF0>!eK#G%G&R{_fenXg@gnlwShk2}K-39x=kcNY`%Lb9-eZ@HW<
z`!+I>3^@}kq9Em^-TOuSSDk$?%IX#@omip6*aTnw4I)2o*LMYiaeiYgVziUWO`20(
zWIm}SNN}B=%n_7tPKUb98nR5~P*Yc{edN29&O>EI{M>ht<DKaz-Fpw8ls__iDQ9W=
zrF*6Rp+3UEro4gChq$*$eLMOCR=e0v#*SmmQvhT&L6+d+XXC3R(Obq2%S{?Hw+D2%
zMo7%2D*d7cF-@kI?&XgOcRQD|!k0cJZe*5{o!$D5)pmwcJPu_E|2d2uw$>T|jUeU;
zqmjj7UMHN#-V~J+njUK%$&7jEYo4iVU@2<7pNn7qw$>%^(ddwAtow5Tr@O;qxJj5d
zC>uI8Vj6w#eO={)Ae*7`$0Hj*?*-wD_P!c=qXn~Y;e9k-1H(*lkX7l!pIp2jh-O}b
zb5PhW(!IcqivKLs_|EB9kI=hboDK(TKO5@7Yx-GvRPtkzpGU;fBI>m(i}r&?Xbv}<
zMe0ux&a%Nr6^wdxn{Yb#btE-K-aa0uh*!x-O@PE;JU-h$nDX*z;Vp2eLG;i=&||{D
zrBCr^WJE*eRdSJDV`rFOVByE*Tpo8+9r6&@rG-6t0rc@Pd&udIcS@`#YUDKsy#fzD
z?ST(Eu0Eefc8(l1zT;nVo1K4}Mw&3aS{S@>8L5w`8gr?*KSa!Oe2A6#Xbqy_5{cUX
zu&Rj7)c!O+?^$o-V*Hj7<Qw&B#VT4$OZthl@E|dHkSL{0-k?sE81kL(7btCfPIZTQ
z5*DBKl<tpDq2}~^J_)IGG|kU@%r8APqJwMA{BIzX0pa4`Ampz)H((TEr(T&LscOaw
z%}881lkeu!V6g)Q4@R!Y>+Z2Gx^*EcZ4k8X>vi=qs(qyG;v4r~9W!PZjwmDloV|FZ
z<(fmv$vsiwq4Tsi;Vh;>(DhUej#ST9O*XOAt#2{l9b$vjpXHtP!fFldG*1x<!4R!!
zVi;-CdBLI>0jYfW24lk*ch$bF_JdIkrkL@zTn`z^B&0Gu?^AgW-BsZwdWl=XG6?-S
zWHv4FY?Z<;wm?CMQ#+>NE%B>$w0XS$=@j@L(Jp=fPveRvNv#LJ&S?)~89>`x;Tlm&
zcSOxpr}}9zd`UzjZZ+)}vdxyZDdMtV-|6BZ`^v6Q;a=YSpJ{1_<P-h!FJ!$JzN5p$
zuIWE2$SPJj%n+<$K(#<R_niAq4vCy5TIBa9E|%EZ3Iz?gRsN#WDZv4O)bk;@ICX2$
zi<oOyl?wIegRe~KuVJXqK`x3?xF%pmco8I#;M`%u$sjCHU()2^o$3DaxPrtIn~Scy
z$Pze;uXOd6*?cqLUslHL0m0B8_L-rbHitUfy}K!t$rCinB>UUl&ws|If7G4*8yX^i
zM4XE}!;BwbaaeqoFio1tt{-D2SK;*3XT%~S^zNa$yY*EaG-K?l5K}?i<tHPTL!Bxa
z-`=bBD<FkbUI`%wMV%oR{#7;N_PFYI-PsyNyV_)q(Pb%SfeAy?TWud>fudq)4YW~b
zaf@iC{KiP$ExMOOYE8Rwf+W*X<<WVO>QHxRx1Sf@OylEK=CmTau6t|A&8kK7)B>nx
zWjy(DT;E;gP5|ZH)$>8}Z@WwG-Gu)Z?IJW&myT(_?_~2NO91-|M;3x8{kM<83ojnE
z6usLct-~FWH&#{OzWZb(ol-k{sNhV*qfpbD0dnOm%<r94yWsK+g7|Kh5sFjzo$f@)
zq($_7JtcHK=_Y&DH}oGm)$XM<QB!1TUO{VqNVQ#p{h)_uhy5!%wjFh?`{g3C^WHmW
zFqw}-g;}fu-*<zJu=~J)|20y7oOcH4w^Hsv%T;dLE`nJYFDA=5MH!>OHc_^WHK#N3
zaPhTX66R{)FNxx9&b)P?tP}bC799viObZGtUlfQ=jx-E)9qIVAwbTJy;SaeNV>9ZN
zR$9Gm*q)zvf7LkyXPc@9?tIM?aF+FK7A@m`101hF307C_)-^ro(^%aC9tAWzU-{nT
zj`}Ad)f-t0(+WmSC%8GKqIaW5^z=;yv!konwrAu2^E37hf;v&POEhqCwI-7w&Wgm2
zzgM}_BRd(3)Ltl<=(f!CDoM-i>wJ6nEB4-z0Z%)0$hw2WTsS)GkX1!}BJ|yLWn)^2
zUqGte@y=<#6Q9F|J0~kri6BW1(k>~4)ei)Vm_S;FcJZX@6x|68R2`&6$#9LNTfF()
zb&w?vfXM0*FjFt}k`j`*%LOn}CYxrEPvCK#Q@kY~SB&C>+KoMz9KO9m%@ej6Fbl>a
zC*Gtz0-EcGi2v$_{u{ym+6gJ3y3=FYMW<97)utK_L7Yd@<t|i5cW|&P=-<^mRZOOa
zw=X?8>Xlb7J*CB=PCkl&d)efO@Aw<uWtn$}n>z~4e|gg!rPn&)+7@D*9a`@46f?U4
z;V1IMcSuubMVPNTlasf2Uy5KR3f2<v)plx|@ay4~Vj`hPUqNGlfx@v$wVgg6^)FD<
z<p^JI(vYXTT2Ml}TaPPmNxoZ;hv?q%lIc34WGJ?Xeo-;6V=BeV(@T*5?5(R^!I*ZP
zU|iDs2!_Pd`(duUZmxD99Vv9&R~;UA8-P8f*9mQU+9hQw2epF+{JyhU9J_IuJksqd
zHlDOpyVkc4b!=~pWGg?EfVuZf9NkUY)bYMYC=|*LS9A>b7IaS4WGF5_;ob{6uVFtP
ztu7EwTR+9NC+lcg(5Ci*20LNAL=~?7MUxxO7N))2ruOd8VrV8W(;%G7qM#_?ByHnY
zo#SZgV;bMHdrmzUvbXiPfEwm!XRw=VUZoXsIw`i{W&^4Tr=z?|fPR3h(muD{!`-W2
z7hVE%rnx~wV7_fhz9^)mFj$zDS}_qw^i!Rpcq#8a-XkryiO&n(u)S}n(Y4j@u{3kr
zUlsGzJowiOA(cy1=F`F)z-gC&A0v~81))&Za?LI6cOkIY7%ONIE$M==nl`hO0QL;?
z@1h0GhiMnu`J@5-wyI9;vf$;X0!~(@X4l)6NH-@Wq`Vtp_3y-WB>>oSeJ)<bXb$RG
z#Z)@TF>&V<3zG^zcAyyz&aC7qU^Yd1?R`T&Ca86Jd>V~C%y}lLX#PDQq{_+Bq_V@G
zZ`dAkWf|?X?iYaCV=wZ=zr&tsHQ^^=2~|?kgpE9xezBXoT73?Jux!L7nCA2*IXIz6
zR9^UA5{u+zwKLklk8LvQw9w2t^Ta<&X{X5R`ap>9h4kL^->V>C1Jgu6om#YuHv=2C
z{g&D!P_>cfC*jN_R_JM*TUtc=9OklMt*bn4{0_B3fr$es)>~naVo;X<ZheIDtCC>T
zA?7cKg`?Gb^9tH7pZ@_&s-bMPAoW`aXG8;fN-sz%-p%L|VYY(&rn5_#*vruS=u1qQ
z_S!@LR>IOlJtXV~)|x$!KUVKe!85PA?k^b?t#ELmkdJnA+zt#@v{|}yI*aWK4Sk*i
zzDFfcNORPl6;;~RIOVV1AnDyq^OP`CTzAOHQp~N|?J{=4EIYBH-Ix|dk`v>nvBo1N
z&XhMrMdZkkWU|Io&+Sm>jAu<1uk#YM_}m^7i?ccmB2xbxf#=j`qRiC9Ok;sAa2qws
zqf;P<o0`J-Uj8bh#W%miHdR8wz9douL6uDO?69*x4usf>jAJkAdM{BwbWb{%<yIVj
zUR7SksYukF^3*Q53^mXO*62^cxTlzjYYIIHd%R5o4-%$GTmx-8V#0N#Sv7+R<TQm!
z>@A@aA<$zcQ5}^t;=}jnDU8z|(*he!s#p5jC5QD_bcBaL3K&Apg*rP{q+c!jX`c2x
zkag!O6_QU-ujth-f=WKWQDLPv98-FtOofXw<Sk<xeK*=Fx09qbvrJKu^h8<7sPo@L
z>(K&niC(jFR%-sn*l0<c^+7OkAMP<=N>Xk0zZ>)$as1V@IMjFO1wOA>be+B(;5*2~
zTZ_!8+M#J3KCa0j1W|98lIrb}5PgOv4eMD^BR6IjyXVq!JQOpDVRIR{vp%=%Gk=*m
zo#0*dEJ@m3;hC|pbK1@6=*@B7U9Y<CsWCZL9QiM}bb@_dB&W`(SCAVB3-PN^<b>v~
z>t==Ji86UW%q*LUw<P1&g9C}Q?a*wqjr(Citp@^UTZ?-eH1FSccdoKeh4`MW+5cP&
ztJ}sWR#tKnb-#$<PNyT{dw|l6#{x=2L1i!v-@p{JlU$E09^qmwwg7|qrbF~D2+6`>
zL%D#`q(}slQ~p=|FG#V*Ax>JHr?tM%!R`tbIo0||ZH1shb9|!0b558CcGhaMFL1w^
z@}OAtb_wj(f$h3zCt~oi`YMx<QcHP)vW_W`r2MkV+l#~7SBx5)4&6BuQ4;!#rT-|@
zH(yH9i+fF(ahXqV53R+1h|n4=fTiN4Z6W|;9DX~0pbH7&C77`0R}h71GJR1!F-eP)
zZ!EV`+9@|MQ@F-`yQB!#m-ZWWxnr8lu1vj0VDo{O<)>LE*=ir?cyp5c^UP1Uu2NWS
z|JsA>{^)Fxn#~?3%6onM&GvUy-0K0IadUOnizkphYxe!)G3Vd2Ht%;Z_nmTAX6~Kc
z?NL*EpPX<!WD$tGb+vjyaGeBAGGj4PzkBX1yHtxotpd<p@=4_fbTFH~3T+be7SOIE
zX93<xXky+7SeVf$!rpCkbe;zDdB37yoYC~}JsY{T0=3%)W$MFGN3KPAjq}*pbzHYU
zQ@t!uyVx-Be9$?l9C1!Rz7Y&{`;!7_oukUX{TlBqp0p)3o%v*&zxc!HL$a`E<$v{U
z4c0{wc*beGpMW`21dOn!+?BxqNnvAf5;&0B(pPd6Z)(J3n*$$I4b^su_H*&`%R*{x
zD37Caj&@FPJoSw`Ro)fPdmI+6@5%b4eCun|{S*etDLZimJo#Qyf1rdoG1qX|Y0{7j
zqEw}DaHgT%e2lbgnraflz;$<d@B|ZFQ#y<^6+Xnb8@qiw|M819AqiX!3xc`pRZE1U
z<+Q7+<FOt+Vg4ul<|NvhZ@=nD8ev;t&wfvZXEQU?O#0VwaulhL;+?aLA(c6)S2Cr{
zdS3tJk34w+-vuBT)J$soKw@38f7%nP7i!_$ncL$)(c@n^z1yy&c6$)5ROp!b*nc#_
zIcx<do%AY1zrt9IyVX5c9&mtU?`EOvhhVc?;I7H}yUX?1&^ozjyjPx~vTMXa+-#1o
ztCQ(1Cm%b_9l4C3KG;+tq$DJ%eQl_O&Row|Q<=u?M|%Rx()ayz0>%#B?Kg24t*KfU
zB}=e335#5DIlw}0zhO`I*K5$4yrmrNC3c0WjxEvAQ?;fPCFoy?j{fDJA<~ei!{EEl
zcb=9{F?s)%t$(YRg*(KJIyE4GvJ-A`7t=4v1MbK~@t`&SyR+6^GI(KdWBjpq<-Vd*
z2amNCjLx2acbGKdT#~crS^;TbU~s@|O_}v!%$I|3%tOR!c&Jn{{@QNSG=6q?F^w%o
zn0`kTJ}+5`>G2O7ib98sq8d7Bo_^fh8@g=OWO4ZOicVJ#hgiRsLS`8)+1zShg`i|=
z>}Tw&1OG3Sh5RqdvJ4uAtyY@bz@3N=YDS(F+|*j3ye8fp&N2zf=je?mXv$H=p*kr9
zEBhT(#FsftH{UA?P7n1JipISAMjY?^`WHJodvQ|#SW%(xa-Fdmsec2~BsRb-c+GFz
zMU1z+a%_DDHiqj^qj@xC7wi1#fkfZ?D1N2FZf+3MC9O*Rz!g+vh7S8Y2UJT4gBV-U
zp6)P>$Dw#PrxU$49BUh|_npIl+$U|(8ITJy7M4rhbUmuC1y=Ti*I9c#|83!(%(Yxz
zjKC)@_x4G_@!KbY`=xhuulqV3K7O4bFsbLsVN4EQBMo?P=ZwqK+;+uCN9b;kMyg#w
z!FRh*TH@WruuLOXBn!Q$jgfKrb@{#lWZ#Tts)Kckmve)_voOz5aN_CjH*^TUQBh|*
z?cyetC4(P1Gae^H;H|nvT9hVpO9O{nw70?3pdjjsxZh8bLf=;VHhj>@tLJ>TgP#7?
zFO0RLm67kpit6GfN;7k=Ifv)HHc5kQgI7)e%9KSsxhJuoFKL;$0!w>==040*Qi@7F
z;T|E4ah<h+WJ%lM;A(Dm&PXKq4DJYf>~Mw>?hwa?t=u@{@w@)@&cB6J`2-!{c7@~0
zLmeODMwtJ9{c#Kq{eh>n(6D$vwWFIhF!{`WHebk!WtgiyQ6n)g)tk0%_&5c^P>>|o
zJu+%imVQqdbwS;0-Q#8Q;-@qWQD8Gw7v$YrIvx&_$=j_*W8IziCgtidmcmqPfer&8
zruyfsr=sy0)itdM{=^pv{rHgysay+470ZG&i)UT+%SKc4gYmW?yjEZ&#Oq;gR?YE3
z?1U#&i25J}?wBCAD=d}xV@-`<Dib>q`TOja&}zpg^EAV7x&P_Bk)mCk0cAZ|lk9p8
zZXxgjV`8+gMJsCc+4TJYQ)~d3LM1`?Uv*ZYzmZF}eVOI~PNAQRw}<qYiaMXhpJ`;G
z!l>^pW?($m<f_1A_H}jL`?AcJghFc|;;#khe51Bm*{J1<mXs`*$ZN{3ep;u<%bR}s
zJWk?d?6Y6`OxgQ$!e^UL%Z%gC?_as%;bF`_Gw_M#24%anO*k_+jNrhi2B66`u10M2
z88lj@N59g;SWGvExJ%BI^G5cgQN)OWM>i5y(tjixjA(JS3KQr%^dts}>BnZHKg3D?
zVu$mVhnfVK)mGzi(K@=bv|c!t+<>011lc8+vQ(|4J9NZzazlOh_e|*%o6|4U<mp3O
zPMEMUIZ9l)Z<bLKI2>K%#Xb2q+4HaL%p<p=AYkYg>^*cy;N_KhOc*Knpu?xYIoGio
z9mr+8MpoJ2m(aICgK?XabSN=>gD9D?-VZRdtL^+>(Q6#L)n+7}5yy_v<;3&3^+unb
z+Dz?B|72CAqfJwXLkq1z>esuH#gm4#y)a;?$1h?vM%rfQ?vi13N4Zv=wPz$rlO;o|
z!rS#jP2)MmA<AmO152C1o9Xd)3;UuUt@j(yYrXK>;7dXVu!4c6?xR|+?IX=Yf)OUE
z0_IZtxDK=&zR1)Hb&xQzXpK*|VST_Fx$=%!w1D=;pX}8Uwj(U6u-2z&)WRyg^+->+
zm(S74*!^7>ZR{y7`+t-9Js0dGWV3`=?IK-xU>OSHOW@E{Z)Cy=!dt>EyCSA8dlzEi
ziiQ`XclRo);vD>)h-uzk9F~D-G@bh*Z^K01#GeL~X^M$YCv`$Srtf`_`}D>0%Ac|I
zlc*zEyVz5ur|l(_wKuVZhRO_dbG|xM@tReEO=PSbam?D*JxxUSLYxR|A%sDRk|y%s
zhLsqPdE7S-^y#j>R%ly=JSK%&yX9x*4D=0*z<|3h>MgbxI2j&bSEF4_$zwF)I6*0{
z7}Zvqk0dBnYXSV%0)<P1g%gTAK@$!sHr|mE<A?MFbZXA}Uq*$cFA9ixqt5Yh3o}al
z-i<ud)a<R{R>u3eJXl*-rKA1`%OQdw21^$rPw1juJn~T6!K?6i8NFQ=(I`sBEu%-D
ziM}QqB%R9GFX!G7V*&P9*)he$ggBck6R7#VL%S}5b;=cbxWCWQ9$Vsr#~UA<2f_vo
zGXQUZ-JAx+&;-UYaw1dMBK3ja^%w0zcPLE6z4dm9tktzfGHSfA`9%Tw2rWgDb~Bu1
z6e4tdoIU}QuZj|419xp2QTs|^n}$!f4eGMZ&)C-;M!6*N5^U8Wyw?6-Qw8kTu76>V
zAnl?;)p`16O)S`<vgY%GnW?WzTI9TavCRNVTw*^wNdy;5(jhcf;!kWK$nUr1^fz5D
z9GxY_=k-|jaH3uIa_V|*!&-sN5H{g?ROQG5E2|rbVnxIp8<|OfNQka~*~lh9ykNg1
zpf(BP4<uOh2T$d1Pyuexo^-WD62|$eo#?_=F+M~3`Jw-)>F~{p5=;Z`8`p31)yI12
zX88kywA+*X$dciDryi;+A*XK$<?ny1_FDSu$JxsAJkM+(K_4OgkN@j17V4gZ=COLU
zDwHuqs9;Y(L%Ul6ald*Ba?8)5+LfKPr_68SH>9|CsGYKDz71o(oX$xHb9~F;Zt>f+
zW2{4*?(kI=A8J*Ly6tZ1M{L40gw4|czp_#!_h$El%TueOT{clL;Zuwz)LVRmDge(M
zsg7tIwB|d{+?t|d$Si|W^{L`rK~kmxjo>9vhd3l8uT$ubq+iXG)aeG?B?=xrO*!5*
z5#~3biE`J`zT`}zI}p$~<$UxNloV(Mrd7%8sXD78-52S054G*2ip<IysY|Q%j#5g6
zxv{Jf*e0$!B##{^XM^t&yYdy-#4vLMm)1nm34k>gJg>X1`{g0r?$xjb1tEd3u&Byf
z`19}T-I~YY#1&v;YBy1(*xMx|#MB-gGF8Bk-wrbvJVZcyq;X&jQPG|dV4<)|8tw+6
zp={~$ezI@C4g4MR_5{0}Zi_cAV>^!N&Jq;`>NP+Qn|~P;2d+dZR$tpC<TctY`&eyI
z^dy)u|1DmZ(GiKSlIi>Y=Rf3B0^j#Ui3|)7*2wc8AjN|oMsYCnOyo>h?ya~V4ygq;
zB{{#rgyu3L9t6@QbNrMFR5u)iPZD-DWvxTq&MT<W2WXF&XMr@B$m|mFW-mf0Huie$
z--Mb*@JR+}c~f;nVos7w5T@Bn#O{|A4e0s%>a_*#?=G22v7zbCnxR#2@O4J&zpXWw
zcQtc2qKIne*jJs^wUpdolU}?r>Mvo%uq@P@OK81*=a!Ak+EgV00=ZRQ6&to`L)P)M
z!_aYE8gemrG^<JR^!GmO>9ui6S8n-VDy#o6_`Ih<<E@G!<<Fq9iY}$E?dC9V3wh1J
z@gC4FBP8OMfrEq}&WKJxgT$U9Jw3blfR&1bMEmF~?kq{WvfMv3{hTR2?@Y<o6Eli{
zkx42r#dfLS5LEvcLB7AvPYEPZ^$vNO@`gbBJ$;{o*+4X-nbbp<0|G9Rtm<aCdBiD&
zAOQw#*D@NB75G&&kNVjYnUD0(PixLbd-}&nDpI%2ny>3RCO8NA=5MjBpnXcy>QPiW
z+GeC|BU@#!6%Y(L?J-&3%M+RihBV%;o=@5}&=ti3)L{|K#h<G|#zR1<=+xXR#Ai#Q
zQmw|T2ieJ6r)ZY~d%{vOzxjO9>QvR+m-sn)ZA{v~?jD|090NWj$ESgMU1a7Ux=k>`
zJE`^2Y&oG}NdK*NxjI<>-Lq;)_oObP852#&_;qNGTvk719{Z#GPv?O#C&AU~xDQoN
z93a{~qkzRBA_doxKaKut2!;DN0P7I;tJoyy1JYOqpx)*6M@g^%UfqJ$>m@sxrOP!?
z<3S)mS~SL643_Gj+)fbVw97hNH&A6>m`2hPtvTAhD`ThPm}zLJW2JNIr%b8-mXD&4
zs@Xt4VSniCbHLW*KLeM;M7wwz{OubeV17EDqi|}(nblqfS6xi(^dRZPGca4RlFY<w
zaUT&Zr_HI6h_Ab>@T=D@;t3qEhQz8vZ!fx9pDE@q0Ump`Mw|3^u(BG($UEk6pT|xw
zap(>J!c9umMrdFmeXr)BtGhg?g(99Xg^hD5{fOLK#!Kd~7LBF*KO2b<(m_o`k+(Ey
z^?JAFr?;`EqKO{87sz!M|1?mJ^4$fdU~ky9lc2*B|BVAC^SHMvLcLj&sa?qUOZ%O|
zq)8%1k`?q21+#IZoS2FS%en)8SbdaTuf#7Z?}Cd*G-TQK)b6?J@XDb^r9!ZKBy}!_
zyte82!?rvLM-%A2Y~)z=nz<(sp&-W4t)&EGMrU;|-_CF>(l`SgrzMk#+y#ucLS>b>
z?d+&<hXdAN)K?UPH$>AKd^vB@emPf3@!-#X$jcAdvQ;@_c5c&k+#8JAgr(Knu3DoN
zAUK|wWjZ`wRtm1!b~nH3oMR`O00WdP?UA!n@D?MH6HU;oXxEH-iv2NO=pBh@DJ@48
z@TNu5SWY6F_|A`9=B&&#N*$c4oK1!p-2)6WSSx=35x-iL5N1w3rYUk@VnQRisd=O6
z%$sy~6`s*)5(ywIdvg4zni~0s7vT~D91Z0qZ^|B>_T2cO@Et7(G8g6Q-pca*Ipp-p
zKLx!rI=I&}YGbli&j$`ioxq~DLpLTg+x6G0Ns1r|Y1~MG>_S^**wyR=4*Q!Xg$0?N
z#9P2!8=AF3zW0V~!jiAuT+Z6vg<tt9k64Vd_H;~8Ic?`<T@xES?f>GWLeZrHL@9oc
zpz9_k;!@wYPefnKJ?-B=aJoG&6h;RVyKJ-%?B%)7MrJxgNDIT=Y&~18u2#N?b~@U<
z)gm~vc(Qcjb%en@^(iPQ%>?-oYJaPC$!6f6{GcF>^NPug?@+QlMXX8VOB9%6@=tXV
zYpf~RG%eAAw2CxHL-<^q&MAV)$&u>q<fMn~c8ODN7Neg*#JPB!va!>ERY<yy;KSz4
zLL)H$mZp?}(>5UTBSZjm^3lS)vFa*5J6<?^d#mdiO#GwdVZUb`3`@1OqPL+YGqU+V
zM{|zgVb8ibNcX_sGt7HaM9w1?oO)$G*lqg|_b~+=lfb72q*kB72*RHLQY)als29Ok
zxr|Vdn}jNndL==c*224i8;C%b$lij5@?=BSx4jhuB`b!TuQI;rdfy>xzUpj|qhDE`
z6P#t45v@%qKx10H6f1qbg|A9SOdSht1b2R#_r(z2#^4dtL)q-m>Ptzv!uIGVp)<<#
zOPS{>EAPJZ4;X4U=WuGjYxvD`>u+uA)~yfz^t$g@;6HCMs`*I$=C3+u^?`mpt-`{H
zDT~o`o+68~F~%9IN!4Z5eyV71&>fDCm(oM7=&NbTvz^VK7TKHIep)3-9^Th6zVV-<
zKEFT3e5})9EQc@0=fUKj*XN;}&r?LawD#J|mzp#&%|i%_C=AP!{TwmsollNDQC2j{
zwW*KyBU281YTc8@55RG2t@Yzyl=KblEkC`>s1|Z$Kz2aZE~x`1mNWP(euLVbLLrGp
zHUsCu)GTMXSv(8+HXwCQvn=X9+>v_n3wBBU7l#jwJqWY$tiKC9xrY7Wg?+6n%*}}1
z+1)EX^xr!RHU0=-E4pevLHq)ddxOnMtPj-vUl|=DJvxk1=^kjHTqL$@jHXJe_>&m;
z9|E8dZ0sd=oPElv7C1O|ux+RgsZ_t`l_oPY&iC579lKokc>^bf<-5hWesFATRRyX;
zHI=aR|C|MHU*_y|OA6N#bpi#ecBP0WK>bP!W#%q?NBk<mR2$XD)5XPXLw8_ola<GV
z5=ujx#a;czH#6R+9dsD)4`cq0P#X^@P2NIefnA@j40GMGqnORGQoD8zqd=1P`Ljh|
zz?2~ig{KGK`T4$Uk3JK$G+>jwb&P9NN1l0J5kGL!sSsAf)om~5Y4`na$o{{P`@G3<
zSo|0ZcyLw~xPCq5WjU*9k~u4?Z%+zXfVzo^3Ec0{XtsJ4Iwl>Pz@3z162|G~Ztnut
zp;V~jL(99T+QP$*_fB2A=<woFPUp1sK8Gl`?LNsfhdBR_7VH`FR5UTH`c7@6`IC2!
zn&>QQ()jE{Kg0M)LA{l59kgJ&;0f8K-YlPy2Hm)*-lpUk(l?7IqI?9?1FR(7<H@r9
zUAAGVc>eBmmm*~?Hy%K1+0pBcu5N|-DeRAtukY9^Mx2`;6u$cAJD&$z?aovO-^tig
zvaa#SsrY#p|GcpiH|ilq&>cnEMZ;1mhDK_{Z_?yXGZXNZf(o1M-o12PDfT+dQx0)T
zP?r<670DELK8Tma?Kg)k<ynQ-a{XN^y+bW5dc*xUDzZP10};9#2p)jWVr=2&!8$s}
zLN^s8@y?SVJTqXc0QMrX_)?~V<Of@>A8!$j_j1-Er-*(ONvNzGGVPcm;67TID8kYL
za8+pJ42<T(vj;*VFsI9_Ai!iuFx{>Dh5E0UQN`3QE>Rsq3CeAnYC!&2!U(AW#Azph
z8eaSD#yV+<RYPH*UE=Utm>rP#GoL>SX7BaH#eK*ws4sTRSrFHwWf?qFvd)rKc7%x|
zI!G>7y*m?1-kgG|9TZGqa|))Ww-|XDd>eQ{>UZK7fj<I)x=(Azcmr<;KqAm@s6ok4
zZ==_wUE4WnzZk!^Rl;0FcLy8mTT^U<Q9-4zHtr#bDC^1}F~+Zd_O$nXW#`_!Cn4#(
zXK!>;bO_7-)i4l#;fY0d=q9U|Jk-i=Lh^)uN|Up`H;f&J7~(Os8u8U~nT_85Zr2|f
zxItP<3t_1`{ESpX;#Y6DpCdKD@?#7&0kgNeSiJ)%0Phx;cod!rnPv7_G<?)mr9*#y
z7j#gfDL|9Hl(IMpUv+)}wmAvn&JejTyWd3Op*Hpax0+I|J<>ptSBdQ=;zFd>xTUo6
zqw)`V(i+Gcw9P0U0do>7NI6x{J1=D|Kgit>%a1+qk9tD^?M_8B`NUJt&e^TLw_lu_
zr*Q#!)GsX{k7_x@tK(?c)bNxH7we*;XiF~$+zCNB<|m?P>+jn*Hu#gof_u3wQPJyc
zN{Z9-3-U)^xt4JzG?`EDL+Z^3@JxlWwt%g<gIs7I7@o^viBR4_Oz7)TKNX!G*aLux
zOEXoXp|<?2{voSHN`k?i#RwM*R$5|x94zO$=YlCwO4-O$GQ+eZ+|R{^?7o~Nbk7TA
z7J=Bdvlrq<KiHv`jtP=B#J3X(ts^!2=HGcV3MrowELPjjtBAV~YssBh_PnNCK9qD#
z3Txj~&M9S=o_4o*kpB)%Yh>W$YLm3Xp2cI4C;m(`5r}bZ5$a{`TD|X8Yv#!IW<09K
zQ(4%n-XkYB@HnKVMc@r$)zmH_7^{EmtcXg%8KSe(>cyoYB7L=sl)2KjJp8=k8|w`7
z0MX9q1@Uo(P0>*W?f49%kC>@z3SF(iC8*7=H1B$gEeflfNQfI*nvfjkrFW#8?k1n)
z^S%Lp0upwNv0Y$OGC1{B2O9$WHFRp!2It+g_x`#qQb9uChs^x`9Jj_U$EIW;>VbL`
zj#V)&j3&ZU;A$~NIy^FKH7!B1T!A!Q<8DV?q^2~>X5KPao8r<O2?;}+d%=Btso<Z8
zRyC!2Bwpl6%)Bl&&kpar%dftjiO*ipT$UGl!ZiB+^LeTXl{@_P*Dzse!-*rBJm;{(
z3QQtnJ58ZBDh(N00qS*X49mRMx)`lGEwI7uD|^OlWUb&rPHKJRhSZ8G{!u}=4T%)v
z>2KV6IPJjG-tfGx3Y&ep0Oo1+;nWb*#%N$Yt%6=YP<dHXqO~L=nDBn>4)FejZuS8l
zr{06!kcf;%vc8iC-Jn}TU2&K58v?cq!cqhIz4&jOs;DI+0$++It18%DHFAk!XY*Ef
z`mT1#Jb3?CLqkwYQW-Izb;D|x(xU|0ZR$gC^6``s8rX|yhCiZCiq`rWr$}~V`;t)Z
zq7<JRkoU9Wv#|1#_`8y(UbBFnTFp7qyS|anz9Ei2!kbFvr+HtX3t9-Qocdo7F$?$1
zY8;oZeU0N#8{3zumn+)&L<?H`$xe=+2yWL3*bk^ug9L>haIBIotKZr(R-*3B!g%Im
zT4)IAVDHqVQOK<QQ80*(mT25hoA@>rBwWY;2W}0-rZplEOPhpy>M`Laj{;}Fb}9BY
z%LxC2+EUS8kLaVGKcb!r=F2-Fb_(kTVN3iadI;1~X#rofAowtp<e2Hn(u-lOZIE7{
zCwbac9G1s<(d`hu7F1aOC-HTO&ev{0ss1+=R(EzcwCE(*1&IA)%1RB_HR237657j$
zo7$JEEj6rKPlXd7k5N=+oRQ+b3B_+k%xH!$D`)Vw^4lfkYmd-!;?oXwU@=&*oA#8v
z$*_2qezj;rMU``S;bH9LKVbI}0u{TBTV7qp0&q{YJlE-dm+-X`dDik$<E&WsJSqE5
zNw_|t-ndt3vgP(cllxANGxwiOWC>~cyTf&~`ygzXAU{azt7<06j{`Wq#pgO>Bi-z+
z){ailB!gzUNHY17twTR`ThyXm^t8)?nM5*jUF1Mmjrx!{FWzd`j`@1T(QPPaviHmM
zY<#@B9P|cQhD~`@DFEo|j|qX^lPM*j8!&1^!zR2%Z|(Q6Io9I|fu8<Ojo{+;aMT39
zMw6jkfx0w0DxK?Y%|^eQ#irC+O8gC*vWx|1Vx;@+dCSp2-ww6=BhpsWtdu7qv#BMV
zci>a{K;;9{yy1GL@UHSMv?a=JQUhrT9<M$NQ@|jBZBAVei=VXsO_CDyKBhhiaHobC
z4LuTGNDHNwKC0l{j$%0;tBO0l_o2lCXqEr%esCY5@m&a2w0;NgtX&GwH70^&!_B;Y
zmUy^@n#5bq_zrS!)3eGT4@wlvwK??>vV;meaoCW6#U1MKM`YiiSm~c*>6yccm!@3E
z5Jfse{Hc0+Lc>Z>?+D4$VcbLNeGu{Q1o@#%Pc4MM0%eR(DC-?p$nQ3@79&ASNCmE4
zENhP;U>If)D_eR;M!HEdpc7>*gC?uQ+U1hyjjE%NY8Rc8pC+a1hZ4i{LTC59Z~nHj
zr=%j&2iyp|wEEB&#sq5Xhn(S8l6sBiA=ie{3dgh^>J#X6srtA;9VjK;X6e(hipv#$
zFmNFAzauZ_M`CY`t1n9?0($FbSNfXVv<WvqAljd57hZ=P>9z|`QMI15chO&~`;H(6
za*Ag=YBiJw3$R5~z*vXsDR*mFS_Aqn)Jd|5yBRfU!Rf+t)s<k9DXt#b{vP=o;@QPC
z3}0y8o2cGgI8yx~k6eTj11KIp)?`*_F1T!>yJrWRa(|z911<`u+nBT3mjRY@UqSl@
zw^D1#cty}*Y^U!<+wwtPZ<VSJQSd<Q|5Yc2yYBAEyG^FNxQAW#Zp4<XHG)!CCkch%
zA#eWUK4e$~wC}&InRdJ2ca4)7bevbC^BF;ZU~3n%R2UQkxVxfU*4{wvCy68KvB`)o
zV0t$rXJTu;<pc?GgRx?e#9TuULc`@%jm~x{T`#$~jvU2>SVBT=$m4)hedKShb~y~#
zI34XOsO*nk@DcN+9_DAb(P8)+Quz2skoq4gNO1Z&_(Fi3<@M)CNr|=oazjWvq^?9|
zGHktFJjsY2CB+)i_sOp^Wz6M+p^Wboyf{wkFH!aahq0PylLIE?{Exo&#?E`wD3tR-
zD?{g@EU3&!{_AxjTo;w`>g|LWvDNs9JVQ)q^ur15cB1>Eoa#yQXhaD$LG2-)G^M*j
z_Db82b}K=>?2Au@IB#xdF`dxCau-b6WE=(422PYwmY<(wjSjB<y^ep^L(h^Q8wCDC
z{%sS*D=0ru?jE|s?fgZT5*Xuw5nLzqSxVZ~D{zn)An$s~SdJq3+IrEmh@^2kPNLb)
zS86TMR25#m9*vW=U9%rJIdPjUoiqbz2AIpWM5+FsJEhZZe#h$4qcRH5S-=0$GJY-g
zJyUDo2)B)@ZNV)CH8~&<2YCy*i_z`k<Ln7LMe?v1X`<+fSqb3I)74PTjtdj5rdtC|
z%^omHvPZeRIZd`{0ti4c!r{is*(2564^uo+j(NWCq!{TCitO}|dMkqX4+d7=lHj@_
z52*)~FEC}$u3^^Tj%3jJGtgaF4Tu?<^@+c`YhtR^<$tmD?(tCO@BcWdBr!!OVzyM;
z6|<XDD@?5|X+o!^h}n{yVzx!5j2S6}u+_%KGRi5T$zdpm8H~fWR?ahwn1k)$e9y+X
z*BthH+4txD`+dKU$LA0As7KA*_v?P$*Xz2T*YkQl>6_4j4nKV!g(#lAAs**{9Yxbc
z%Y3*LSH_gq)o0V$&mWhLjrqP&mD6c0&~N#LUP-$NtV}lIO4k5qbNplZRwQtiEg9el
z)+!H>u_CR!M{sht*!f}mse9!r$QEwnR*|Ecdu?x{mN?A=8Y#NW9E;0K9IkDBcu`DA
zu%VpqBH#HVddrI!hp#ZUQfm0Z?&|7~9K#=j?HYeW*{;K%1pkiMntD2@@p*X<7RLX+
zZuaqm6Wl2J+9|`13W}tyBD!>{ZmIsE{5_#;x*?~u=utC1o{rk%q0gU-za$v-7o8En
z&ChGfP5P)`$uU)ux>U+0p|P1e!sf_4bUspdb1AxdfGUC0F#qgF6P=6`eKp3mzJ8oT
zHPr)5;{cM)WY`hLv#Gl1@3DUj{g+_BS#=rG=+%xO6D=uFu751sMs}B-u#bBFP~zUz
z*?-hxqTav)5&!<Fqc6C7Gkbf+$((P~-?(hQd-abudXEm~V-^RX>~S~%(qF%_Hd48?
zwGLMiwF&m^*~U<WBi7E<r;9DLuLm%H&hcr8b#Vu2HQ8lClbu(8l(~<u%dx?VUFq*T
zq~k_+e0?|fs=x1?f%<;6AuQZ=YAbOIZ-Un%P$8Fip*h7`r?BeN?2U~Vo}#ZDFrm*n
zKKlg?Z=JnZT{q;}+kLTKj=T+d^83`(_}5R;--`lN6u-cg;f>j040JnDt}BpA(N~yG
zd>Rqs;8H?4o;~XNLSlBu$po!FfdtBTdsBZ}GC75254d9k*h9N(v&}Ue4qouRbarH9
zw1PXVALo>r>ZeEm34da>+3iNmGjfAyY33am8Fbv|2PVzh%=%dmF6QLKoMSLGE7j-0
z(u=qy6dzbWxcK#Kg^iZKXZ@%5n|^v?qasg36Cgr-3EC>S6eeC(*-ES;&RWT?q9q5}
z4fajETMl1c6=Buiq8EF9OCjo$BRoMtj*%Q?ykBts@Wp%6PMXNX--XrtkKFxT^@Evm
zJ)l=>CeUsv9Ym~Q<s2uM)j0%?<3m=eB&YqfH@V6!W3QcSjCLhNl+4iJpRRa1ZA;ne
ze{t$k8t(^n$+YYgZ24VmVX2{48`}_u^n1Wv*qq}gA$GF%Noq`tP#=*DQlJRVeYC)D
z(81X<p~#2)1!%U06$RBF8q}s2awvU2SJlODeAAV!B4<L1*t3H6=$DBwcUW2yyPNWp
zkH=q^fU$$bGa1C%YI9=Ot@R;v86O!R7i&yxDDSIZyS`Z%Zy2|K>i^-={5!vdiBx2<
zz<X&zeHJG>Am1hN577`2Q}D)4Ixx9sK56&W$W$pb5RAw`T~HcweU3L|YCf%qS~I{r
z@E|b4g4y=N`8)5(yT1z>R#SvGTEPy>gLS%qdT^jddj1gp{I?=4yryRZ=tm_jOfz(;
zZ-^T5P%$A#%dl18Uh`4{bkP7&Y;?PFFZX?2ZMvIR+xQne8~Ubc-t5(9q1j-RI(B~C
zT~+>wwvsdd0?b<)9G1dTB65trnqr9_cq})D##pr^sg<V5vPUtZT}|{jhfOgB!9YmZ
zKwiTnttFp6SY6jES7S_#>q*``_OEzL_Uwer&0MC5)p0ArY#t{konMJEqZo8ohFsUm
zy|QWmI<~?*dgb0sseY#Pgey&ELD@7!Doo^VjyG$9w)Yy}Des4)J1;!PEowHDO}|ck
z>-*O2s_Add*xx_|zd)%GE8EP6$4`T{M$d?VLsXBXt57r*rE+XO+9h6UWhCCmCQ&t;
z1|9G;iTTmI&em*?+dKOG5$$_oUpvwJB=tKL4qNy;tIxlkw(rP_C<?9rwLV*g<|{y^
z=U3!?O*>cEP;JLi^?y|U&{ClRm?7U*Df>*Wsz?W)lxyRg6~8uWTtK>7uzJeXWUGm5
zl|me*(3ZLZ5!{u#P4uKV>GHxFHS<SXv=|^1avgKCX4Z4GwRUUYg72|^RL;~QirNPv
zNl}nD(D7#fzl?DpT5dQZGl56R%$R*F`Eg!)7xppfuD44IBmM!(X*B`S&B9>Fh+-nd
z_)X*#PD`|5Qc9z4#fSi<wHJ8wMdcoG)9)l!Hx1Nu2h7@_7HgSBK}(?fK7P3j_DnhK
zp@2|(zoJ42`7Ms@i@$`~_-J<9PWhTkzejP8L+<$qd|roHXNT84A=`OyYho7CJwqM6
zj<PF<tYtTi#}eK#-+uWf4*R-Jz7eK?ZpjSLY32IE@HSsT*zLsIhS-h_btU9cCQ<Zw
z_9}|5B)-cPy(KIoX-^X&)(6qlSg$7V8q>?Z9l({+n}o9TyT>Czyye-u%i)irOGE8v
z4EIY`ee`}Fuc|nYLSkhH*WD(`NRWf_$!Vp=-?DAP!FiweMrCM+*sVMWr7qd5UEkCG
zJw2k>cMK(UP_>cg$>RBS(^BrzJ{S$BxAM6eVn_88gfOpfhpZLu{rou<%wJZD{6@?Z
z`95?}(jcl!<S)t(z}Waw8$<0QuGBrt8zjbcC3(#J$uL^PHe1PCzZ|1=T7#0&=KDSG
zkN(tFzUiPt;(uuc_}&jntrA$=Q02;bix>XN$Iq?-aqSDhVBm=v?Seab4%HHaJ5FEA
zod5yt3Ik<@2ys(%>-g3_2dyXM`J>zg;+k`@zl?_%&c3;MA+Q`RIn{Ir%{ntwqfl?X
zL4*2p8a^MCc=o{Slbc0H+_C%*?XUnD?7;ckFjnTcQbBjHRlr=A)asGMR+k49kpV-y
zWizi6#N}nr-*m7mcnhfQP&VHe*Os@Lhp&nBJ=Thhb3y~fj#eE0++9_rPvnZoVHB-p
z6VMH@h)1roQsW^=RXIy|Gf6T$)I&EV4_dCuJtcy4>VC>@1k-`h^8@H6d~b1Oe^dsR
z9DV*3u<ES4@h$`93p9-&b@$$|U4+@o1oMnd)2!{>s1umAP|Mzh+=l%k8f=w*!EXVn
zr`zl**pl>{L_L=3G<*FbLmkZ!dU0s0DW=MiTVjI_52)NV9SHg4sm>M?lm07m|HrP6
z(fSXk`$a=f!oWj&VN?_BG^?uXc?+{aYBNxS?lP0>0Ju2-Po~8l?@!Y~bENyh3Suu5
z?d+LpBzl6F-WV;Z7JlH+QvGbW4#AQLQBR^nlz2a{Ezb_=U_3obj&K{aDYfp=B1d@K
z=N*I5lLMDFdX#pTPTlxP{XJAf64;+pie&00YO|j)x`cR015rB!I;-#&++}S>SoAVE
z28|NV->&suN>c7<k0Ob+tUADAG}2AiO%m_(S~T{>Jg4r)yC!adC^ca)>zl?(7)H1g
z#yp7m^l2p{_-E+<LIRd>%5@Nz)_jJ31>fAK0K-BFenNUr979i}ZFbrKjcF%_7_Y(4
zC7wpU8|zG#@0tj+^3CF0ZRJrvtE_KCLV^rzYYlAcuDP5|J##Wj>t}9%9PP3l9syRn
zTnAKbk{`oOb%efpl6Y=MO{y>}r66<a+as6iQV7Z0>(X6+S$FS4=AQ3<v98*&_J)e`
z3QUHvk@K_>p7auI(Yv&kL-?ScjPcbH!7b%x<yhW+39il8>N}(_snd|%T5$?@$HZO&
zytST9L7tx3VS+p5Q8`${v5!km+k11vt#c#X2K3~PF$L51>D8j2Fq0VQ&)tGzU--cA
zTE?>}!|1zCwlGZcVt~ZBVr_(pUse=J>taGf_e$#zKOC>TUJ`6ucjM<t<A=<S(x+!9
zd%O3!#$FG-Qso|peLn_zrhrQ)%u7B^Bz0nDu;^i$=tnsb%>o0<O|)5$*&g%=P?#^0
z2fQUTDMreZUc0BLRAj&pT~VrdPy|6NmOe`x;ezYi6P3UIJ?>XQAb^1f;Y}jqha0Yw
z>MHIo(nd0*Pcp=2@$y43Z>ZcU$x4vJAlrHYdFhCxIAfwxYwYb2o=b}6yw((TYtw+!
z>+4}u%Zey-UuSpL!2CFA)&fsZk%5u}L_qa@w3Y*`FO(cMfFUgzacLmyLuv=$X^qm9
zqTL$_0?*5A&X|Eql2~xthM_vevKo>fuJ9p#8%8lMn$Ef*w>QqcyTsZxc%?jY&8t3(
zC?oc!pl0j}^oU^#MYv&_)IkwPHB!D7)XcKmXe#7RVPca+XTX^UB(yMRv3{}y!=Z0f
z?nFDq<u~}xGeQF+L~b76f|UMKvbXFI%kWn_TmF$pVsqngFYbIKPCM=fPp(&{)ZP!9
zf~xGJy})$}Mm|W%S>lW~k7SyW+>wOLfl(*oR3g;U<rsRF#AqoiCbYcH@^-xR`OP{t
z%xXqjZ;}&c`}o<^jfC54eGj-BCNjQPO@n<O16v}6_Pxgn0|`iDcxkwzU>BMTm5|u3
z#oUqBa^EsRn0C68k4sqymOGcCImab_^wOYv2d#%1h#LvTzCkx`6R%V@^*_JlI#>QY
z%rZ~~G@<L*$Pdvo7P5;_$+7k*e<xPs<$LMIP+9vmAzYw|%UwXlx!K+fjKNpFEASTU
zi?`DcoT|0j#!Z`morMVy#aQUHTxtB7`<yviacWnesGpgS5wZTA1363__E&2E2n!O1
zszafaqcoBSHlfwX2XSEQ{EA1VkC?GxnBu^tL=;!db279h$2C*W4NwSA4wC|6E{G4f
z=?MI4Z&p;yE&Mr1t0tL-rn+SRfcYIT2$E8hCd0z>bY@@1-=<e5&D3Es8c$w@L7#r*
zK5|0`%N!Z|5N|!Z3addj2QlJ)xlLffR3(A-d>p;0-0nMdYHDM5Kw!Zk(L&v&!OKG}
zK$Q6D3l(NSg!Dicp(!tLBs~AsUrSd$IV7L*&5_oQjoQxfM<a4ewtSCS=tj)s#sTnP
zs(JFQqA*eizq13Mr2KNo+G3xq-2~dw3BC++DaD*|-n(;m+2h0FupRp&1si=P>xx0D
z`eOfhzvGcH(*|2l4|DHkRrx2#O7X%vdbJBALOoJQ$Y(er`c~jmv#Si+Lg{IS(grb5
ziA^%Lgl3KJ0ZJnS_`>`CQ8_*o<@l9FxpLb#OH}ihb&Yj8<itI*)}htK=WUunMm8T-
zXlR8zbo!gVC`X@mx)H_d*_6F|Zfq$E4@Ssspn*#3H*;@{Qpa?pvcrvo)-j_^U%Yp{
zVhN&Ove|v_L!+}>|9U?p1{(0M9_U{1c`}zqE6VUBkQ;RA#EuA>^K2wZ9Ne(3I6Xm<
zbAn4by$9J{B=Psj0bZlW9mCG}8aM4vgdv85c}cK7UgL`OFBIQ0n}y{(hS<%c3n{97
zBx<lAw11E7cg&C*JHx8pe^pies$L@KNV9)0=8ngtIZX&ll0UqBk$3jK>y?u1-$PTs
zE@s}#)(EJ1na6iILf)OZBfS~hNs@2Vg|osE-44Iv6lF>*h}zufZ#+fUqUum~R-w@s
z#69{Ww#l>!H%LtVhA6(zh<x;75Nqr)*tc}lTJK@kga_0QKEGl)f1l5NJ!|q&4Y~Z^
zyl1_N;sLyfG&xC>p#lr*4FI*9e|vVJ{gK?KDEmB8Q8XyJ`{Ojr0?B+O5@3cY&)Qs{
zg2_hi-ET$TRu{iN*{wn=pZ)(!dpV4WxYC3*^@4cnUOTz&l2W5V_!>ekdlVA#`aevz
zWjoq(dpyzW2zlqeG4lQCcCW<0_RKrD<&S7y508B9kZW)-(Wl$FExV#-`HH>eQ&lmx
zYF=*COy43ujhThCcg-!dX#&HamOhlEKPvVW$Zf&k@+l?>zu~dLjW>l3I@!$Ug*=np
z{gKHwp;6Eo(Z+5-%{UJZJ)PwHJu089qlf%}nT!x+L7hQc)3~*e@-<8e!OgQZ<*K5^
zTx<LqvKq%5f4kA5&|;`9%gfZQH`1J7vG2F@=eu@((u|4JIW{w!xwBV277~BTyv&9A
znpPb+8zp>?U}twBKB9S0xONFEKUCyALE8|VJ@k)CVj$0YGO|HIY_)G6YM6q=RDERE
zKPul!)RUes%wB9I=hs&?C5qP-9>h!-Dc8d@SzGFddL0>5!nt7=WgOa`OmfJw2RRO&
zczXDG)bQ-?`a#QLP&J>>Ox|wzvN|P3a~;KqG1@}iJ5$ual$cc0>?eOym7f8NlKQ3F
zQHs!37MLdCFyt&wc9AlP@zK8f=jCgRC)4)6gSFn7S*4RpC)*<eKyzd@mv^mh)6QNG
z-Oe56pRZR<`)_&kKe)I_C1M~>l7Eg#r>zCE%?rSy@PPhrlDLz@NWmg$v|!+iz+b|)
zU#EW8ng&$^{F^JZz$w89o)16YD+iRn53*XM8BAK>_}|39A217<ePAh*f$n@$@?_F5
zvqU_fHok3;sb$$JJAp_aBmRC(>|Vz6*&TWFM_7%0q$mrMxle>Vm&#YK`lE~#w%7Bo
zUm=B8_<jCX?e7(8=u3E<S80JHJ~XX1!Rz-4Bn1KmtH8Ata!}g$kj-yJOP@|DcL&Ka
z&*Yv%qhdUV2DF2ONUinKPB3X4O1$TfO!c_jYU7V~JC#<1+W+FA<vnSymslo--QzT%
z)P_J5f7By1%t7gd_V_z+kuIB`1*;oR@8#ZqZP=Ju)dl%XKOubP;(fyP_czBho%h~*
zcuhqaN(&dDmL4<nl0c=Vjm$(jM$~}0Y#Cgc8toDTLyl=#dcRoVfCISrPIj#F@kFdg
zyZ48rNG<QT#Ti#cD0RE9_eZ`{(^DUeE)Wj>0^?1s;gG%%&y^;w{ICt&E}%0{G9>Wp
z2HM>{YA9d>@pCX1r__gKA%Fuf5%s05q1cEmFd|x<lMb06q~B&{=vDcI<~i0Noym<6
z6Pi6nZ^=<%_vEIbvCmK?m}K<V7*#l*Wj}E3Ess(h`9NUvEFHeekE8DU@355mJV|c!
z0bbC3s4-kbkK!5C6z!5GLA0V8%KgxjSA|9b1M;!g%+dKZQ`zoy{^IU0{`%C49F{6b
z?%crsQRjOLqlNYTbMsf`cQNZ<$S&2!VTZqiq}KQ_eBc9SWm7#<!t2O&pW^q6W5R4l
zA%^C^8Z=8ZxNl^1ol(N9N{o4>_kD^_S5C~?v7tG$#EpOLQU4SR{~7X)_z%<`Y!!XB
z4=&LN9g!U-V>+l>Xt0b%IWwfRJsawz_ba+|5_MyEQ;wo76Jw^$%Wskb3nuMYdk2^?
z*t_=WS-88A#RHcIY)Bh|S%J6bYUXwQLQFP;dN1V=Bzb3Gea#{()O`jQXnOK15+??r
zwGWk9qB88QY-w(c*!W2Qo6uBa?Vc0d@bbtQqYCf$`^zonZG1){DxT{Poi2;Hl=&S*
zV$h?fZN!VN$bEtHe_CcLQ&Z{(w$Zjx4k}w@G$})BCf`lnJt%ik+*6cFE$n0j8T`!9
zNXj=aWP$gj8I|6D=Y6Ac{ohHXe`jz*X~>~@6jwLnCexvEq@b@qdq};Fu0}2q^<+5s
zSAf9~Yb#PD$XI~UFq(MnE1Ebf*R(HFa1wb_De6A*e){NOP1CXQx!?bKT@&k1;Ld@i
zd<{`ME;b6*6H1v|ng8NKTkscXU<i-|^&7lvr^V5b<+9hyFChL$`lD#8L+BW5$5lOI
zucSqs=CqS7m*V{V5V^`5MwSOHnFL==_kp=Zj82GTvVIf&n*qimM)zYr_QMbaAzCaJ
zaRpr-I8*+XIVhX|Rri|tTjuO4A&7d~*f*71@LG&nYm(ZOAHL7QtvHB>xmrl>Jj#vS
z8Rrdtl67M93f<Gpy1~e_Q(Y&Rn9|^~l2H46^>lb_KR^<VAHF4RRm8ENyTq>6VziO&
zn0$$f7;=XiUgIG#X+sEBdjX&1X9R9>rY!<Jy3beB`dM{;mP1iv9xdL{30Elii`Gvq
z!fawsw`K7c_61!7@bOFa72RbL`ZW}?BS?wV7_3S*$ge+uhO$R8yz@>gUZz;a$83+A
zQM5aTwiVb`k99%gYW;F>8c97|TXowT<s9#=u=zXEr(q9?@-;2ydVbTJN>YhWD3Ewt
zhzOC6S}x7_%A%DW%jz>-GRu-S{MPC59cYP2V1$;mjqgD!mf{vN)&`rbiJ$V>uRm}$
zB~-9!%5QfQ*R82s9~;0Nu!!vb=F^F$b9A>Vwu*8eG_o=O044jQniN`y@4@8mfiwl)
zpl9+`Xso2VnU8BDsqurcI*nIA0Q;!lr-Lle25eNXK(jbjQ_JV>h1ukoYlXDFk@}jR
zNtt(Lf4SE%;o(rV!x>d&Hl+I;VkKU&b$*5kF;0f${G;;dn2HkeUIuEmG!qT)s=5nx
zn7s<8R3n?6M9q;<VaGj*KqP3*J=Q;Q0$H0NF@xD%b^vfFLkx3J&%dU^uxI*2T%`p%
zajL&@SDCkf?B(*3J<#!}z~}JepnJnAG(Y_R^0iiSwmp3F3M7Mnft|Slf@wfLBDRFG
z<5+9CtW8wlKWRnLOu*_VSWMVTaT8{&BWJYLu~%1+N^Ws(C^`y?rfh9%1>nO(dJ=5d
zRQtFn=qsZ4^LxPoimYOzgP7@OAEY{pJI`n5ECN>sGXv`4-){|je;8Fmp6w1QK9YX;
z+(qPB*Va948m0mFFn`?LvML|@8z@sRNi`HdMX^zH&>kFZ&D(=wghV6o9Xo^8iAk!I
zwFo1_dP%}gq^OIU{KdegUO&cBPm-UutSFo|kO0w{?|$z>89APJX2`nhaHC=DyT<y2
zKda(sK88Ir>aq>wm8oB2F91}so?ADO+*tiKdv>50q~rH<GdAYuuFP*w|ErVZ$>ZL4
zC0Res@{Hc-d+?84b=jZaGd_s_%|+S*auHNrC0D>SYwcMz*;7b16_v~yNa~tRwEF{^
zSc8TAa&sYwA(|ocNi~x;#_r<zQ-da5M+Yh_@|I3C)U)b??k+{^o_F1OSM^ho3hhTW
z5=@-A1w-)uC{A{UauIDp>_i{~c*oGAT}w?=oKYq}2H5#TnWIrlkI2om-N5kLy?iuJ
zaHiLKI;T7QWJFBa2=JQ>PWp_V>!wIg>}pb>0a&01{4V?pvvyLFi8Y{h^TR-PG%=DS
zB`s<hcs}6ZH7I&Q`ldr+S2cD_JA?TALM&*KZ5s*;I68O5282cj7R`-*Dahu(w>#gf
zj*hG}bU(tLUE8Q^r&p2SnF@c+qHSSqhvQ|Pa;Mx?GT)J55^Q2B@mh(mG_lq~y~oXW
z%ooU;oTAPNP2-EagH<nXogOqH#I84XIv~p_wPfnmzdZZrLCgRh{X!tuosfRUg^z_V
zspURnS23D1w5QqH?8~@xqP|>D?6FF2h0r;GRFY#l*_zZX;KiZT;$EQ~7B=C&<$mkw
ztxOBprF>{HF=_uUi65C8^1IBf@g?(THE|DWhXHsay%El<)rF|0BnuLcYEsMm9jq?P
zdYZUpasH0qm*_pA2ao`Vn1r6S@(3u)d7Nv@k$Kit+zI6U!(x=sYHyJp1jXC&0W%h1
z_Tm&b%;yxlsa|CXhg#xijAUCn;p1N_${Q~fD7zraHEtKrCz`B+Dl%0Fjc#=jBf&ux
zFx~cS{l}r97h<)U!ZE9F2gAeMic4vsF@=6_-v%3|HFb5yUWll&+Nl0_*nhJOSbP|z
z!9&R2&;Fi~C|FI^LrpnEkan82OwA`7aca3)Cc9BrpxBcWXXmUxl1MlvTMunG%9Rrs
zQ&~Koon2Oa9`l)ic>b-2>Fckze5azkh!@Vx4^K#aP-mH~vYTea(xGUe!AP0dt+P`N
zVVvMO8IrvSh;c1L7)xmOvzJ8HdouG;Z!O%xp%1mZ8gujR173sHU1|RA>4fP6gpXI4
znq}7y;%`4wk;1@IR!g2Sm}DPS_RujD;-%%R+w$u`Sa7-J;8Efd9erW<W07Dp`P0EZ
zo3fp(7uo#f*K;+a)4%A?{VvvQh%n0yvp&7UK92Un_7*JbKPrlZMytmkL2C+{)wGd#
z!BH@wED6d!V}M;n-8yB}QatJT!|*W2_VH6ReEI|{^MDWeKA}rimeZBxnLQ=GKJxB+
z%%43VMGR@hZ%%+Y#Di(AQ6z31*f+WWG9vS#_SR!sL9yEyjr9kt<m(Cc>PbA1*#kW^
z_<X0EBG;NU({F~b9J&t0t8g4m;?!olH$3$@Kb$jr<a%W6=d&vKid5{dofJDzUcMk(
zaS1=4-rvd{f5Wvy*C18VgqXAU*KPXn5^1c{-PdVYMsTQd+rH+{dt;A&QTuxvTv3s-
z1zWY6h7cL(ZboaaozU(kQ2IK-y>&s$XTl6L?k49&xV7k;C63>AN#=v^2SBv`{$#f2
zBfXACqFlqSv$cH{k+Rqyjl7h+bjjTFaiQ8Ww5}2jSJYuY_Rs<tau>mEf&6vGyT4(q
z*IDLGYjL3Y1KK70AQ+AiI?|hoYlG=)SoYK&eqCn|{IB&3WQH|Om7F0a-jdtMe5P)=
z7qYetgwICinjU`1Mn6ZS)80sWYS;ylFV*e9Y2|R={OLCD<q#DtcS-&wZw3mbBQc=)
zCU%nV24SO9AZ!G>fOar1Lz4n{8($<piv+e{RfF(a@Wx=)$nDXjSP@Zk)ELhJ3u{SU
znq`5QFor#n#;#rf?!3ZHAU%>s@-Osu+gbd3$4Efb_n6jfpsx=oHRNX{#Aez`5x}xW
z^{2)=JBXSNS49jH^5wa?4gusrT*_Bv-cwwi^T9mgN8XF%*{nZmf4TGic)`98KgQ9j
zX)}Ei8Dv>ZyJq}tK@E<R`jFltFmS-+lShx<9vd0=4Gyh1dpIiUamf9%Zdb!hnEB(5
z9U0}LJBuo!faDszUh-u==Er|I%6rrhwo((0`!!!kTp&K!lOvjmt4<mFNNW@&i(H`8
z6I}23_>O<X^R?FImZKu;zb!A`_Zj<o(Fh#2-(L!IloMhvFI~A%bKgwmBRry10kk=R
zz2WGzW|Z6`wtP^GW=Xrz0Z0in@UyCtZ~lJZ!?Uol2>)~1ih}QrlHCry6RGvZ)TOMm
zF{a^pJ0+`s45?4zJN1-Uyi}k4_ESsfYM!0dVNw_g1|mGHlQ)0qtYeTFT=ZjQ`{tnX
zzmCp4y;DB-`!nx2{8tnMxQ$$RTK<%8&}n~}9qKH7iN=&uyoV?R{4MLWt$Q7a!H=hu
z=CuZ_%LygqaT({@xW=o7Ov2W%ax>z_*jrwMyQ=yZVw#*!vzXOCt1T$wJ`eHE%q<A!
zEwdQ3z@lJ#-`qC^(4t5iw6&+^mW(*>>VCJlINQ}3791E%+FU*6d){@MKH{=-z`g@o
z@_%<By2|x32o543VC}=k;aB5BNNVV)xUeeZ#H8Q040lO*GWO2<zP6Inw>b7-VSS+B
z;|;mARl{$Ob@vgm@3A#@-lqiKYK|(@2f$m028B9+aV;heHj*4re1;Xz$5zkZp0#GA
z(KKsDbNwgY-z)Gbsv+ts4JT`<0fM{F!}9O$9JfMjnkuuW<a_Ae$iR7**qsl8YS(~B
zv*mvvC(L56A`U)`j(zbVk$sUk;{JvwJ+7cf1>4}_V1Iu1Y--#B^$;?Q$Qhmz%w4%r
z0b1Rb{k%d<(*L;J!7e>NWiPFM>UVkRWUht(qrEd+P4k!-avXjwO*lgw{vd@yLbe$u
zrALtxA+B{kfvq!33-QpR>?LiK+aTAHg<sKxBz^gA=pc=S9^qOu*7JkCk5mzf2quwK
z9;J1vWBOFTvMV~Qc#O}V%Kq67e26MkB29EFnL`ezMHTy`Ru(`s*D~yw`)qz|CU^d1
zZQaYeu3OKU;x^xXJP{D}=FjbM)~d?il-jUEqNy$8Y6v}1t|t-<&r3r<fh5~9N2K^H
zM6iZsf~KBPzUi;nQC(x7*#wA8=BskSmJ3IKz7hM)(n;2@P2KMX2Y#Cat6-dbo4-tp
z`Z{l`;svbUz1qC>sDTilbPZpV)EPzq+hE@VqS|{{PPbKu-|7J;Q;N#Kl`Ccg4%;GQ
z@$Q4dO7xz1nus2)$qB`7bk%+wUNz;RcvKwwliKp{efaOO!@!@nyeCqaO6?R`6$`nV
z$6xd<bX{kyrhLW9)WRQUru_c<RuV&Q6A^oTr)TfC8BsA2SEGOUJ>XSd@S{J!$A~ye
z?Loyu&|Dh%G!Z!SU?SrtdmWg~WqE_HH7%u<y>V8F4XPdAj4a(T61{nhOm($pb&K4#
zhB?@jfR4JK+0fp38%Nx+D%Q}fvNgMAsl=noR*3x#hKBCLHpD75Df<+U;ns@;Rq8G5
zyLo!ml1>iZP<~Q|Pj%S!wCDQT9B{ifF<j}p)yy6pKF>ezQ9>vU)<2?b`@@21bU3?J
z`t{6Q_-8+>DbBG)u=i-oRv<PF6~vMV8Z`U-|E8W%m8U8Pf#{hrJPrU)k|Nb<^;yaq
z#4`u+nFwqiBTn$z=n3AwP2)L2%ti_UVZ{HV64FFEJ~+_IwewtddQjj|M%jkwDH$ST
z6E3GU`z@bZpeQRCcM)qv;hOQ!Gtdi+VY>3}k`$2Ewpi2+_z95tK4QqX5fCGh!OS#-
zmXoMJ2oiy-dzIVBxYNL5rx|yNJT^3Qov_sspgNjfc#dX%INJYRcV=?H(-5A4L2_a6
zmm`z5xV`s=&w00g3#!SnE1;dKf<S92#a4SX(?Fu&4Jvvn{{cNGoKNA10-GO*@vDRV
z4)o1}I%Bt)FHi1MMD{v4WQKG+tFvEQaV^sE*z%jcMQ|{XeLZI~*X-lBH+sFQVv(q9
zp}&xp_{S8FQ#*-Oe`elDC~8l88;oE?0S&LiqBUFWcS@B8DdM%{!hm!6nO_%}QBIjY
zgSulE6n=-W!@5#DZ{<M}k#lJV?d(+!x)a^%QWwP&rpGNoH3&<ywx1(R^k9Jg%<t&{
zbHP?#E%??~#S&e4%nKq&BRBS!%U#3=9DRrbvlTccr}U6zby?G}`eHHz_6nYTfvEe@
zo0rI>Lq_*K-9@7Ppfu=4xxQc(%P_c3H@KepE7zb8;NUzX=HQjx_qpOTDN7#p%qHfw
za}}1~=jxmR<N}N5JGTI-Nx(Oq;KfnQE-!=M3Pw^O&VrM_<aJaOMQW&?*m(8%$9kKb
zae>>_7_ziJ>S2vm)b*>5LoLo0ZT)}D&8UhOR2AcJQN^^%x)~;nZ1^h*fokpp74?9a
z(e{*epbIJPJP!uazPQdzC=+VvNx-XbB$5h0)?-q>AF|fk5tBx1yOH)D?B$jNSe2zm
zGHs*l2F?X@uSryB$6<H?m}U>8nrJG570=&tZ~@1JH@zR11#u2;#_c_cR2{Ne3w3){
zcF%G8$x3#g!*?QM>=B9OEg(-P6jjV-78HbJ+GQ?nJo4Ih3^+Oybt_Oy0Yh$tlWnB_
zmWP8d7Jzz9;L_QFxZBuG)ZOwE=mUub#UB95WT!QNoVQuH|HW%D`3mw0Q5qih^zDvL
z?>a=8Qyl!Ip0cNR`#@Ouyrt!$(Z}bc=R041k7;5H8Nf|o45xa*r-xEU_<s_s*v)J$
zn6hAi-~DNE&&@_RAwH3%hsKIwtYTi&8E*q(BVJzB5=?x}n5I{d1@pij-idxo%lCbY
zO-??!R%a`lUcAa4YsUY6>fc`7DFM0zGh-lw)0)G;Ut$=92&$Hv0f4L%M{~-E$<V|0
z$e<dcr#qFVJh`vfJh@<ysj<igY0hyFMwZ5Cf=u#`-`@*d2Er-|5?eb)2=maW1pG<5
zNs%52geY8R#$Dw`MGh4s$D?%Qv^RQy0h+u?9MY<fSZ$`S<);q%HsuzIwZx*fP^nqn
zw?ne~K`BaT=XVzbjhljpfyF$()4PV5<TY>w7j_WeZT~-~<UhO>>}4TZso^O5F^Gn^
zGe&bn2D5Hr#+s0EJd$zyLA!~ugqGBZj|vO}QvDG~?8cm1>$#;O=3q(90FF6p*mWxF
zRR2P*$BF(Lh4<8mwXBKgnkZT{`T;YWq%?(6EIydlw^8wmjqoXIkP-iqkNH3nvSEIw
z1rIIdI-)UKSi;&4(q3g5w~1KFF7;L|l1Q0aHfey}1m;NsuvcuwX?&!b_h(AyI2^;y
zv~G4w24-rRk!ZO%W_2h#Ebwf<g@ebHpU#EMs48@5ZQp}m1#Wr!KPq*0N+XXrnnHK8
zs(en_0fE8KLshN=*VMEUfKTF5Xlj)6)Gf*(ldaswP0vvyk&;n>W_0GM_WHj>v_2#(
z8t+6?=37`;$z@Q*txXPPjQWL)8&sK>O=Z<bHjkVe9#f$?XW<bt=naO2JvZzDC#e=k
zKF8d<B?9>*bS$djZQs(O*FH$BiT$&-_w}ALnc@Qn>JqjV5`ss*1zz0(ytZG`gpEWD
z-hX~{9;U)do$TZ~lDrCJLi$cZzXL373saHj<0qkcwrD^FVS;2tp5{pHEpx=PUM+kO
z`FR!Y5E%V96ca1PZ}8=F^jLM5NPc`bZMoX=dM;at&``58hE5guB&v#%pIyw>&WW{5
zDh~Bqj~eBFTu!evE@u><o#MaCfNFZv_(y)&*vG_i*>}~5v?;2@`?bXwEA5%v`g888
z%2=#1>+^AWBr1?Rm<TT^<bO2G>cFM2H!44$0)6^6-ZgKF`8KRUh|;3I|H|B)&ewAl
zk&}zp_s-7k{x&=4g6q!1*8=h}U*uyZbCm0h;1p^@O(C7EM2MXp3D_EJD=j5&A3|&c
zIox3UMmb*0xb*{>;43+jBTmB~t3<{+lNK{JkVo6cRr_-eHS||NV7kC7r<~mVIN+%d
zE%0@|z$b*rw+GF9K|2<8z)H6zi3E3v!ugqbnHL<xo81#)u@L@}sasKJA<Ws0krRXD
zWx8VaCNgn?l<weM62zT(KQ%AIwk{Vf@|*WwkZpQppY~M!ZvkKfSe_j~W=d@XMGmmH
z=v96U*_YHlwmNk`IS%TDO;PhkWK$4ATj)_mpN2@ORwGUgCFHVW5?&iFQ84UfZ}Faf
z**Yh8$EUWhLT!0V-~45)?`yexsM%={c4Zu`Wr$e$p;Iu-14`c-L|te%Yi`!&k%854
zh(-L2T_)DvMA$7#O=Rw-#HBU6Gro}^K1XUakVJ@gzj_)9cJmd!z8`OV5tPaGPAsm4
zS>2)X*$bIpH#>#H$J@YGdkq|4D2%jGHR%xr@S-WvLrmPQWkEW877-yFLuukJoG!pu
z>TOtkxmy!y^DsIucHvxK&>|h-HTstZ+m;sAHu#rLZan+8Yj^H-y*96dCI#>$T>zWU
zgRxrvs1%Ei%B-k8G&Oe6C^QqU^nHfd%+*P<oI$?>%3E?^>r&Q9L8$#~xl#iK>sv2w
z6zbjjrt5g`yZ)LA`vBIf!SKal?Hv7_XK}QRHUE+KglQS|Wqk^~y|<d6*Ef4Wgyl3@
zO_<Gml6eNvbQc)wgAF~>tObeGZRp_%ysAt2<h9o&T~|f4O=!skK91rXTTBGAkH_2W
z>k_O-n`{ZCk+oT8e0C1aH{*5L!X^RYOS}m&;tV|zyN0C!O8@JW=Hvq{Y)oT}UAqTp
zdQ4cGZ0e=B#fXFCj$)if@HlvW<AfOosO*@sHI*P)!!3zngqZA3JyAbssO6-!{tdsw
z&H0py^1>dqKBtZHZyHb+iN7eRJx0r30A|tt65ST!#`2ofSB14TL*a4*v71#}CO>MZ
z?Tb%`NU^rrnFHNA4)<KlT@9<BZU%YxY<0QGN~3Z9WpB;7m84Y3H}ps@>5rUjJX{oH
zvH``4Ei{kwc2*}WhT#wM7BLxlTi877oCDIAwFAu5c`fpdPp7NXjYe}ZuGxVvKxd0a
z6PDo-KT;CAmOfi4TdnK^aA!Ta>o9s<wnpyS=VXC~bHroslOIF*8<=7sR&Nzxr*GKS
z6`=>tN%E3JZmYIZ^@0s8A4Xgddu$A`J2_>TUKXwQfXR9ouBuQ!3wut;M%@11TmI)D
zYc+K=Gdq<(+N7w+h;v#!rSHkB&@n2DIq*01?wj_-OrH(h=R&$}n^V#ip;Op@mVba*
z5003`I+EOA#S?p06E>Qc;y#;%yNzG%;BUaejTm-vmOXEYu*oo~CF(Jje^X<hS64wU
zj`hQC2ywE3#NqaH|CbWmqGFVKz>(C}N6^j<cou?F6L=H?UhfRHuv-k|x&-AN+H5xf
zHv>XIs=jSkp*aX@Ku)8pMWDkLG6mJ0^39_yf>n)f2CcLacC!ve4?Y^QpYq@v(QWuG
zlmpzFj5K?@WXkDsEz3{d2>0g1;f#s8<auaBb$N3m_tOvcUYTDUy&3g%{Hgka6-0}h
zv=(dj$2-)w0yNA?^&gdm<0sT5VQ`DliY5m~_<e`sCCgMfkf((>G2z=<44*#~G1j2w
z-%4z{?<&7|h1A8D6AArMJ)2vKd_xS6JQQn%=<t@)lMAQn$8!r@_Y71p$AT>&NY2IK
z_x)$`nc;!jrYbefpD4RccISZG&{Il;b`oMI)~*B$@uqSgkIOYS64BdyPleTIB`h{w
zIcz+Xk>C)$z1G&w{^w7VRIFrI{e^{5w}=yvWG(DZ3<}?o9&_D4Tcg1BLblnt9hskR
zcKFd{$NlH`P0dY9zxe$}jn#%K_g8WbHS|4VnRONJ3{K};IZiv!2W=h&<RoDoxURI=
z+U6NDfyDIGt@tgOaWrvPAM<AMF`jo6_Zj@lvNJW3UAgzqopU9LjBUaXw@K&bR26r7
z)iog$^2WbL1L1A*_FcGfxd`Op$aSs!YXw$Ef0|qx|Ew3ckV6>p+f)4TA~SE+>>dyn
zzuWlBMBq9wY4OEEj<TYHce)Ek%)uE*%?2M20Dg3skbTECI&X&}|MpMb@~?V<-!>M~
z@t$UaI(K5O2Ly--rC}yq$ojl@C;y<_Q{R|v9-4;p$nNxt-K(bXSn$z^Y{I$@m^Eab
zpu0nvyqo>&1IL-#%u1iv(O+HsBj6SJkA9s$qF=rKx?6?v2$p1xA`dJ&y_D^=nyi^=
zAx@tl%-BjfhhC^ai5%9B<ibO13uj5O+Bp$By{>tf(8b#?jT;ZXlN~GczE&2sv$990
z3FIn1ltO&?9isgX*e|X#z(fB>MODyAQvng2=vDyX8J!ucK!X0B1lMU<PrIp|fK+$b
z(^7B?Yz=a%Yo-#rO+fCpb{6$u%x(iJSH9~d*Mbq%P=Vt}LcDXqpomPPf8zbEj8r9@
z8i<??^kDTz#TdCkV|CVYuZ^+YiMo`z4rRxjL0v<2BQtkr{Cn<ujh%^NjeAeB&4T_s
zb+<JR->Iow?<Lz;G7}?<r1rC`#~%JHHNhfgZQWrMqcz+D?XoDKb=Wd@OtZA^&n@d6
z&Ytqnp0bZQzc&4A|E$P}BUPp+)H&Aw3cCuDW^MtDbO}6)HSvJU0q&#8vZ1V2lvX(H
zl7EE~;mAo^QIb#a1wCArC1Nv8HaJ{^)aHO7sUSsZMOG*N9BSzP(El0n91*?v$K;K)
zvGGT1-js%gYL{G7{rdtun@L#E1toOpkTbXu;C-6SNMsH$6yGkg(1dB88ju1pv6Mu2
zq+-^PqdmiXIIQ&&!OaD{HaX%O1fR~@J~AH6%cN~wjP>vwVmkV}y{daP5IK6l(Ux5D
zs{SD6-HkZw1vj?^-@v0>|Kz|2u7fi+`-RuOc;J{Y=ta=2diU^BP`uTi-?Z-C-=n73
z)Cj4Q`fX*i7f6%71s!c*os6m<kqq*8=a{7~FxH}YAv>93R)VHg?67YtNnBKrCOQ*r
z()_<ol)Z7YJ25D?c`SI#UsqT^U~w6z6GvSS!m;ogG{6#)aC~#A0a^g}XN=y=2fYV#
z$!uqP*)9}rf8BhN+;xJzWy;ACg((sSW-LglF2ScSbYnT5KglinW-AuYHo8PV^K&hq
zBJF;3Dbtf3qN0!k?*_?0%`Pol-oqz5sZjae9(Rfd_U_`<H0id`)EW<gs_Gw^l}@D>
z3PYi6$5O0fD<(6eyB(Vn88NUG$EG|h+pk}J5`6l&R9}ew11mQuQLdjy29)a?BqU*8
z5#le(NQbdf9I7Ys(4X|SERs0ZXyRc8${W2EA&P-$dp;!37<v9m4CEIYq3<11k&u|G
zSCX<g-Q;RAe}<Li9{NjUstTsXP-S^q3UeYpQZvO1sw#DGqE)T4lCo9uhtuvRK+sEj
z|Ku%nrCFWqUGy>cCC+3`Ux-!Yl=-@qyd?xgg=h8oD2mnNek)g1fB@_NT8ki*A7MW&
zqBt>5uFn%<<eR5CST%=}>a8%g-Etbnp((12P{Z#^+DQ78{agpUB!dI}?3Bf*fq5H`
z4IlGtH_F2$yGsht@SgKS)_Vea7u@zOwMBn^HTKyF^#$l!{qIMM2khh!MSTqh-NT#h
zl6Xm<AQ|ydK;pG)%Vcd?k!!<ldOPx#{77ygOw$)|__hpj&_Y-0thqaHvCQZ2V3Z^F
z*dPcR9)0;T%zoe;*R;;?A<VXQuQ2n}XFFFUCD%VfreRc2b{t(2d$rFeQEenk9DE9W
z!*eGr`4I~??u9XQniFv@giGDsXXB>n489JcFg3sQY0m)=hxHsdAvtoJn;kX7FDh!E
z?M?}{k5gZaroo1fhlsY{w6f^|0maC|#zRi>&pYJ?(}dWY_F-v5f3?mAhs8V{Rrc9e
zv?mlUt=j(__x*s)=M@(M^A2cs9tJy=zn5UyPr|3%U}354wA!TEPoT7O9sPX5B2+X#
zJ1?<1gSLnX*xS)Jb~jAm5~=1MSfI_%B|rIigLs$8Uh^^U3uNIhiVrt3%ySM9iEQnn
zpzO<!o_Qa>AqX8XgN-ivp9~GD>y3H^<*S;sXQ<I*?Y&Zfzs%cKGBnYw`e|N4^`nI}
zybnkSWaOC*T08FebiyYlmT<Nb;oTuwkA8i*iP^gtEF@^gVLtKD%86-4ieR&H7v&@i
z#zRvD$xe7lRtCd5$F=Y!bHK9EUu;2W^D>NOw*6k!Lkh5bBJJ(|qWpfRVZ+nQ+Yjys
z)_Fc&7*9leGj2i%BhV6vTa{~-z3i0)x3gv335{p#$-kPw-1?I2>?g6HCx=tM7SY#*
zP>o=IeuB1ztWGf8mQ747Up!zO<00A0lfp|HJTPZ%-Vif9ztD@})6&^UG<^nNCO1YO
z6v&MfdF+sGl9<XAX$5|ZT&9EU0DWEKR-xI@Vyf4`sp&T54y3Mwh9xI<xeesk(@zEg
zMjm44{cG*L;BUe{$K{+I06705Bn`@DybzjV$ko7^AvoF=73pF401y5FA-mJ!N78C^
z0K97u{9UR>uyU2;ytne<L~iH_i3uZ6++^BG+vsG-PGV|d&b*R2<y<W!lG8_hUetFF
z8X9*zYVcB7rh}3fY%LGvZ?qcX%mvvYC|jyOG?Vy;l%L73p<!b7ZMSFgOMRfmZ`T6M
zC0?7B`YA+^>~PEyrW}c4r@FGxY`+|uY0!;LeGAi?U6ZH8|ET!X)m4R>16KL(4G18z
zW(kl8;8mu{%&2X6HIUEA;Oh!Wv&MGm)O9EsUEkx4+B~6HNiuHBJw&m##G0Ub#UDyr
zv<w+N+ZQFvsP#QJmAx6XAWNL3=CR)l_~yutxmg`k`HP0`1z7i?%t|><eDRM;2JI4Y
zge|0Z`a<V#Vl7ihMBN=ONE!%;`t2F{S0Vx6ej6QjNo?ED(;jf((vo$_x4gM<+^PrH
zf5)HtE6CQ~FT-Z>4~tU2Zjy1nx}@?y#7y;ndX-YVNC#mkH2ok$Zn1^lR0k+nvEc4L
zU~dbw{&n;8a@xrU)_~_tVJOZRC`VBeyY_loV!40+!dPIZ(lQmM=Beg6?scR7q;hih
z+#AQ!#Fy1|wMriMJ)0M`<`p-}mvEv%MM(iiC09riy_~e<7APAcm-Bs6ipg3?gVQ@(
z=_Au(OglYEI=;KgFfUisb7$EsO{tHPzLDHEJU<gT+8uakfa3F<kl$U(A1_X>aPt@Y
zesKW5>0`D@1!y3GRm2WIy?<05hjL&5X!igcg@k`A76G7h1cn3<wtU+w_{uFvbP`Jw
z)jW#On(2x4^BF8H^06N0cpUTzB*eQomO6jhJ1bs(;7vyUk-dOob-MS}bZPF7qyr&$
zFgq~u3W!B<TgQ9VWVi;zC4PQ3{0gaYyC`PVeDrz+Ztt8NUv%DkjQ{pX?^~bqqun7$
z56Qt@;<n+bq|2!4X!+g4Dl|jb`-eb;UwW+<>=yCJ*@OY=M)FQGP|S>Jr>ZIF;->zr
z?{10A66A*^(ZGMONyV*hdG<O+JMDV3h^94}r*HUnPt+)BgKIhY+Q8|$KFVRSk?|Qd
znITVUNZBv(OsF6e!Gs<0NOrIhyP2Krr5qNG(OR?hD<6mQ^(zBy>17}5xeuO#-0yPn
zgJ;1@2Kx5txv?b2+{Ir%`JCtM-B<smI@+Zip#ocogW><9A}t5iDc@bznAH>qMIq~J
z)To8O*~^Pp8N|{<vR2TYAehbaZycNht@IjD>vrnzwq$B{HB53hS&aShsqy|x_3r=H
z{i@0bummC47J7m`2@17SC_NZ<L2H*pQ%vl{m;gZ0VKr&H1Se#2<oqhv&=RuUaga`L
zaS)978P*Oh-YS^<VN0aUydu<_oia?EHhkFKt3H(^*IN?WwXBedkJCo;Iy>1~6jSkj
zik{4p5{XudwpvD}#>Dh!f%?Naq@kT^i(pf0+>Uh4)F<Ya1v%~Lo0-!m`1~RsyaG??
zo1rJH-l#C2<1knkq13vE>i(N-BS%4VS0@sm<fK<4SprijN}vSa?qNVEK1^efd%TdO
zPFe~y;rA|QK7MLcDt-a?b<4pF$jR=h7sIT5wi=us`hH;GoMdg&)2TQUsFK%6&|OGI
zClPU-=g%#*)3qt46-3ZBHH1Eq$>Xa}_~3@^(#bLgdot^c%_!|e?NO3-xA&;W5HoG}
zx!J(G#Gv|)$|r&f?t^Dj`d*-EGQR@EKNrY1RSU5#v;;PC95b9U+6;<U+ePh?4>Ka<
zmROJ$ZV?$1ljhtG;;6e}Hc^lwCrw~BhGdC9oEnOX4Lr-fcgm-$v;f4Fe9bsFti5ST
z){aKUUZ}|5!5uwSYEVo8iOi}Ov?*LfyxW)2WTZe`$MHm?CeGIQ5b!#vJ9ZmdLO?#;
ztx@1StB+dpTqH;C*WL@Q-}YB`!Bq4O_nXhghP$4j5zb9;GI-;KkBF<On^rto;wjV)
zsxe{)2Mn3y(gZ-cHp*Il(|Nd>REHLHQdjjh`cG(4m&Kyp^-V(*XK^g)4A;iItMq+#
zOv7vUcXxLNsiHOz0B^wA<%69uLrleT6E&op(I(KQ4zjkO*9*wpE<${#Zw=ydS7{*k
zm0*%7`*^nTn?MQ$G&vn`r8zO}FZJuPy}SIS{!x_hIQ*NrINan9omWdIdyhAW^OXHt
zPu#cb+|?E|{qPIUkCj_JPg%97XRG|95{5})uV!tO??LQtvkWQrC`l+-hw3)xVf*D4
zBHV^aL#^B1*HZI8a_>PmMqhmNUG||38yPtf5!Or55nC-8mS*+Y=YCZ~^I@esl$$7D
zA#Vkh>g_ZP8Oy21ws{!1N=jNx_DC*2C~+>Cg101rVvONb__y+%%DJpFcD+INU>)Rg
zwfMCIF5-$!>Tjp6s+AvAmE(bd_AeP<eFi{JQ-Iru;8E=5F+3saX&0>h$lmCn0SY21
zRI@<`Gw~jiPu~oJk{wL_e-4@=k@XdE_dXliyTING!|2Ox{3H2w_D7!AVn^zS(hCZG
z{f5uONQc+|5{0v%3(ZE#L_MuE)Ew90h!-(#)!<i8Dy<L_ho0=Td!W(ra{V>>GxB^#
z_TKu8)W(y$Zkx^g6q2`VNN+Lr$IzqszJzo2EUsn08{q`|)k_t*#=qo{6GuObKcxOy
zdj4|yuNjPY2eIQAxe*3lDYD`*%LWy=!B!&6!xKLMYuG^#VYdOlizxB@^X(XnRF7kk
zgf|HR!9tq8?}aQcWR_X`6bS;4=u2T9?q3DhZ|?W?=?b%WsxBQ{Su|C-I~<Yq$<{Q)
zYaTThpD$0fpBlH-(THfYlUtkAEmhyT|E0^*KQC<zQj=Z$4|nCi8cy;8ns5U9H(_aI
z4239wD_lHJ_L2Xi^57u$&VOp&m5O)uBx;HziIQfv%XXk1&3J8x?Vw?g8JQM&+#$LR
zED-iRm>%DUgx?d->rHz_ymhe{dS5EWg1jv2RT*)t+opT2;HmHVZgYo6(30s?YAazL
zwMrnxD)OB6@lj2VEpc-Vj?duGHbnLq4F~@;9QqTg-hp2SYgN|fr<X16c}*DGEo<{z
zjnpzW+x5Mz&Anc7Y}tP#&BN2D7c-?RbOClY0w_icJCUxT+)S}Vi1AJ)puD_nnIxiZ
z__%Cb0u7@r6*|F}vfodJ+i0EsZjcdJKNQs+?bX2IIXG90PZ_>%csgazdK?q;gQ~oQ
z)-nqHRc(m=m5LOWg)=hInn~1|XMyfc(n$&HQIRvSna`jBrDWQ9$=*E8A*PnyOw|;B
zS0;OPJu8{?G$#{zCoL6gENEDBCAd58g{le?_;z=;k`hhUgUt*B@*{1Ek;p?0#d4Ot
z5*p1!6{ei!C|1tnkA}uSdsDNDN7^o2-pJ=4+I->N_1zDD?sBO5W8PGSwjKPt4Q9p=
z98tjp0ek~~5(lrfYpIi-VVDI}0t0?P<FfI52GuB-2pD!?1B_DJzZ*}!TJqN6MpQ`~
zaqH;WDbN1VY1^Md9~@p=VCXYk0lP^LI?+U}#$EYAR6V%7`PBfPE4TJr3ov97hiZc4
zB|Q0Pg6*~T*%LX2b?#k=we1*n?~hC~bFZy^0SJR;XpFh$p6yI#{GJ`(p1=q*l$iDC
zS4c@S+XRNNuql3;z(}E(Pt2z}siGCda)QJxX<;}rhrP`i5u89t{=yuFj&s1DBcStp
zvzYwgR9_f#I@Oc=q4#3ng3;JFA6yVYQh7~2W+EkSr6(&)!>*@pqlCk|luzxTZ2<h(
z?i(}#nQs&5Z$`6P{PtA2fjGsETi+r*cPNMbOQx5PkJNA@qd@~(!^T+mRLb;GZiQ(U
zfqR8f)6mfMc{83DsN95G|Bp&9Qv@>_y1@eZ#W?(3uxsQ<ofVIs(}dHs;fxk5iaugR
z#!cXwXT7Ai(8t2X{y+TmBqgw6QB!FpH<Gk%+Qc~JyFU7f2i~YNBJ<(x&9A!UBJr$y
zG8Ss``2e$m(B@=T4}K2S81&mlb2!v_uo)1y5}G6h;`Clf6u-ua0y*s4Y{ZkDaRbls
zQ2&^x(eL1q4{oMO&x8H2HTs5OOKFq{p-d~f!(@l;SM+M1DU+Q%OG{?1Z^e$fluzF^
zHVy8&Gd6y{dyl$M@o#4x2{CA4CkPDi!V;4`EHp=$rrz<1vO|&O^qKrD8iBo2;r=*4
zlyQfP-3-XQnVTf4HrEt((0B;nD~S>%PL18+=Fb1i!u$mLmfygWTHZn~_Vf$5;$!sx
z?LI!Eqvi|%0+R%5;BgfRYNI)r1V5d=Ms;MVm1xxH0>Xgm|A(zNkB4&o|HqX|5>pW&
z=9G4!#d5MuB}tN`Y!lORiZKm!Y=bc)vd1JRKJjKq$euD3V<yIOO0o<y88M5KvfopT
z`<Uf?uil^c=kt5~zK`!esy{MwU-xxgukE=IB1UJeRg%M`&u@oYvdvxXyxYpK7ySG`
z$0nS8<=r4ZGW?XiIEq7q?G+e@ItDH=8xVc00UU6TxUZ8uiV=N%KnG@eS|ED@&UE*H
z7!6hw8_^LI>A!(Z+V3VVCKAKc(2d!y^?+T17mziknyjaN0BOkgTmN+Q9_n-6Ph_(}
z4zO(*BjgK1SSVdMw8Ib~CbRf!fK~(P;D7~2oj_&zf_N6@iasgUNe&-XU2MfUa2l#+
zj?ISK?e$~_*WR`;vHz}G6LNcgPvh&fGdIJoBE*sMQrZ3@f~F)B=!7GLu6AJ*HG<Vd
zNN30f0?yfazBc<@zpdRwYs{H}hQ&9G!fA={cEgMf?q=clNzt_Xwnw6<vVg2O+q3^Y
zMhDD$wy{F}`p@gw0qlD;93Ub+0XNeoq9aTbqeQp)TWs;BsR2=<5S_jEWH)OGn6^f}
z+Im8+PE82`ecA;W5o}PsIuO<Zykx9t1^2C)so~PO3(AXo6>2t+rl1>S%<%4oIhqQ^
zUKd6IX~BD>KGasyL3q#P%<0AicZk|SPExGn%3K6}+Xyk2UTX7lvZ}Fq1w|Q?_05SE
zu6jSbq49ddVqtHn?_kJV)SoZ^0|8hPgKvD2xE?+Rbt_aUQZ;W_Q`mH$Xrls7*v-0o
zsI5d_NwXb&nY0T|6*~zd6K(MmecCg=iQnEZhr;myGt#*<^ytdx9)pbksvih@JsW0c
zc8(2%R`&y_oLK^S!x94C)0HT;|N7Qm2epZzFN=UI^9AH>CrZ&HGvnI_Wl<U>0TU*s
z?JNB!%p{o9YyFFs!;2#yI9`#~dop5nzo8FSo0=R)-C<s(#3R?+Ym+)rFPZTqB=J`$
zIgxHsE&~!=6{A?ah}3|;08olh(!LUzCUdF$>|*U29#u&I<ht>Ckvi@oy->95!LhKJ
zJ1r66sw$pc{i(tU!rp$UkT2N-!k(2cpk!L2w9Qexd=`1b;(`Ho<#sgbH5Fld4a%Ls
zq|*TGbIkR(tLYa9gNe=p%*Gk*te^{H@1FVljN4O83!BGZ=RH*UXFv{$?-aleyvbZS
z0;UR}>9rOKg4W-4;GT3)Z0M0j`;*&TP<TF)G>}8pFtyhUj0EBxjP0;mn^okNY0|;;
z_QH)W8K^VO;`;-dw-kpt3#N79>MrL7uDV(|NH5nVo79GngjLX;tK&$~<aT|~bXeJH
z3kv3VJCA>qvi2!2zEZ4T0-vi1hNbaWNjz(-?iprMDDfgxmtw0c0wAa@w))p>o5>IQ
z?%VoQ5@Nh_FG2<%UX~T;JP32!0+P0-{wdy4Dd$Pu)FGVzHY^cEt{x#YvECv-Mamqz
zrC_QwkgNCvtYqLwpxzs+M7BoNm&<f;9<UYo+}rY}OhNIuExZ~S!;*&cP^m=y2}B|a
z5gwD_(aBJQ())z!4s9+%lK`JsV>hu=YS=aCYkQ;r0p{>QbAzKDsi>4C{9Y%hoC=hD
zm5>7#e3?O?^iU@*)T9YO^D)kM4d{dD?#LUE<Riy<&@%AR<UC4q>>Vz6aIH`6mcc2(
zgNCY*qx&-AP=#O%0{*qXRN^RaW!`q<#fWm>x=>OKx60qpokc)n;3Pz8&!4(3ro_?x
z%pQQAp9*Ub)<$jicP=MTSUIoYDh#Axmf#|-Z<U)AaGr?Lk(<$|qy?gx=q=)#69!y<
zEzDb^25P>H0rK?_Ui-4oD?k~o+0%!yUkynTBP&KndMz><X>~lD;V;eoi%;es?V}l7
zA3edDHy^dklNcCXe6;2z$l^D^RTKXx>5%$Sy7v2J{+uuz3O+|NBRYz?ov1BX!%b`&
zYBt6sv>WsdWnML-fzh$U^G%hbfsJ{Yb+*=FRx5?&Q6ay*aEg3Be%?@YLBo{10e;HS
z4Gtz+)s3Rt^j&O!d|P>Nh_yw%Z`aFrx9hw0_8t5<TUqp5q5Xx8GwMe#4&TDXnz=EC
zYPVQE5xi)4O@Fe(>lD`4IPgn&hX0v?X9qUfJk8E=Kdw_tKP+<5k1|~#+SU5-+Lc{H
z!=FuSOT??&wBCX2s(YL1`=VD$K5@Fc)+v>jPg$2$e|IXK%1bKWb=J^(QEHRlovO++
zbZkuXbTs*%bhW5(o%7$vO~whhj_6o=ZlnUqnZ@rMnH=-SdPz9qzccI0pO{O;9r=HS
zXILHjJYRX_Lvb9ck_zwCk!@EKfbl}|>>Ck~dJyqvzld!_N!d?j4nwj~0Y;mstN62J
zh}1U`c)xJRfb4D=A>Wf-Q*(>GWU@z%f(UB1>nW?a@!and1{)pQbw4kMu}XrGX#voD
zHW({%C6@9c`_-~-@@$d?!J`XhXs=IrC1~wSQ&_YW`4En>{5Qe*Mbq}1#a%UP47J2t
zIaL*KrP+p{yavNfv`07-)4mQXZN14C;drYvZy?U=RX=iNo9lq+AmlZB7>FZbBxm3r
z>CvB%H!PIUK{}ERd}tM_PR~9&16)2}$^dEG3^!M?f-0(s82pv)1SETaJF?$Vul}-x
z^FwsA&=PE}-qxH7p>!^^Ltt164xkIzlTR4BieYlSStn>~l>-b+jhNbIzXRsqydiMK
zbs_bfk{9{vgvfRsFQZG`g)m%*+Kg|3q+T?dvRD;sb?QY+w(H=Ww&Dk-^$k<+0D<hI
zq&NVyW)X8$3e_1<F?)hF$!Ff6#_?Y@buWxmiAZk%CKt4lmfKBG9ekh_cR-;fM%|Ms
zm--MQ-!}J7QYTQFpMq9UX`?IvIj4$xyn`+5j4pC-o7p;-^gQ*(y&yQSt|Eb7eIOvo
zA(D`gJ7vTgF@hFg-XcNia9-?{35=KPQpS(KuPO+{@e!>5dU~=CBuN+4=(nwO)vWC*
zuEC9;Tlx5=c6t*Ut9LqUPwtJP8J)u2ez^9l$lHo8BoyKG78%cc+4MFf0j0;h<@P|2
z(t)~<+DP9GwRj9GbT9<diMG7)0)e_Ax4qDSb6c~Mw4WW`Vl(E(;(0!atnvQrXsg})
zA@|*la0|-F`#4hYzva;wd<~}HIe#?>QhmsEr1b=@u<t(6M0}nP?&k+Y7qRuSLv}}G
z;V+=ilSp?LBGdv4_3EM8SCvx_zs+5nplspemh+ws`hWI6QQTJU5TMQ|-VLk#Kw*W{
z&HPbt*$L&rl0kfzah2-<#pJkO<^VI--17S==`PQV#(LiL`#bMX#yOajRSBh1Cnmdg
zQTp0n?VHJxu}l8xtn2xQ-+ej%@GNBh;-${Hb^E4kbpg?!-wOz88jL~q(zpJI7C;}`
zMjCYLX2X%rWL+jJpA4n|tMfaae%#Fownat(OmLr1Hmgae9lQ8^$=g@K`*^0Nw$^M<
z;)1CXs*nPkS;@3fCqT?82V;GmB)T%>)&-(Al89i-ZdRWJWHQ5EB3XpoDm$5dvSIi^
zj<soV>{D;}hAZ24M~Uel?<~4XW1f#q4_<i}60){><0@DeabM;Uy3tEpp(kD=`O&?-
z-%TT<!ewLs`+K6C{TGKHo%!oDVtdMm%m=#80BG=zUf;^DHDq4^8pX{I_CMl%AIIVD
zYZQY4{<Girg<YNYA>F*n`X%AGzN!$ReI|7mNk^=e^=IX`si)JoGapzPmzY#|dS2Y{
z^3nQZYZCI5x>{bfym<X+aD_AZetOGOH1758#@8v$2UB(duf9zU!I>??kw(TE+q9Kx
zjw6GB{toJPEHH8XM@bq;RFT&<VAfAD>~e)VDYQ4?7?tT<E6>9-3QaLHf#?kJyCl}6
zV%$M|8R0%`)1@~HWVeE^GudHGO~+@`dX1D?Yy`L24v4_?f|*_#fCen$Ff<*x90pUY
z-eDy&$Sk1C)KLH)YjXy!(5V>O+VXo&Eb7J?PZAO$-y@oZM#+n7+XU3LpUA&`vrbMo
zGs^R`lX+C1+C6L$<F{RXuXD`nMYK(UPZ*aAG`Bwb{<lgY>J>;i&Ao)k`!Xw$84t8{
z`{2|VA$21GBV;CoF%xtAZN$jbS#ujRjT04r`yUgJPFImbLjnRy_N12(NGlUQLk1>A
z+Mx%|GA^@zQ2|qG=pxYlWC{4~fy8SNRkE)Cw!J0sbYk$LH)s$i%-tpKg22q39Dt9B
z685TJZ5SdMJ#Wx!##+<$%Cd!ZbL-8=F0K=wPd=6;P!=Z(kTL_%7hY=!-*TmPG7-eh
z@?!Iz*64N#K(Tb%ZvyU}Y36bbGgCV!CunJb)f>R_U8CuDYIhEJm@CkD%Wm3)5j_-b
zjQ&++8kk#6qSQay_I=vhHGTLU@Rr;7U-ofU?a#j-{rr&h$Ev?U=XFgJ*wpo~aR-1)
z@sWyt%qLBvI&38+jJH8jf5@_=62@I@=qFw#7ZW1-+O2%KX}e!S!w<AW2{Vq=ORpI(
zX|y*{7W{hWbtN|RS8?Q$-Ty0SqI6*$B8})FWCAzY4#T73oYrSBy4_!EfM&Ltkl)cP
zmp48J{RfSV0Mp_soF1b*=AdPcUU0#U5WBItFCXgL0H5g5`{}f<I8+x9?cXXr=PbQO
z;-MNab6X82t0GHe&TwwsG--?8=ZL#O5hT@yH`XBu4Lz?H|K9V;$9zG<7t0Cwvrve5
zOtrs$?!hW?!M`WE%RbT_<Tf4^>;*8HP8S5UlQU4Sbh?cBfT^QK(kGyWT`d(vGY0Uc
zj1MQ+B1%W$8>cv7St90EZ1dc+=ElU*siu`OYSfx{<<ndpPEIbDb7yqy<Ep<?!K?cS
z7Iax=4}O-)w!qF(JDEOg1jeq44Nyqu8PXBBrGu;)66Q?zcn+7JgmQr{tPros%JJ9c
zguCwH9(Uc_&DhW6&eM(sTj<Lj!`3%^TWrDGT#OA=UXlv9GDCf-{Rj}lCEpM?NiM_P
z$j%y6JMVOXc(q$%baH$x!@wWTccZzOI9!JA0N3l=beHmPz8w$AK_h|Dd`V`p@GrWe
zjoM+j7jLE5Vs{DbI)z#+_~IfcSElvDQBGAD61CyoBD19N)v(os3pHJj@kZ?6&JF>(
zy=I2;M-vVMi>@|jpt6ea60HB`!7yxH@RIRNftNdn=u|N+Y2*O13JvPu+8<VuzXfL6
zhKHqxoCOPNRvpw4mx<xJ4$UGg2Fhy_WH<>yHlI);KK}APjtZrZ%>cEC@QN_)AxG8}
zhR3-xt@>MkcjV-Gig6qXn3QA4f))u9Y}q+wsjkce)`4y<0Dmp!b-+{Z6Far_6Mb?F
zJp9Cw9R*HciX=Aq!b}Aymi2_hgF7I*BKU^T#RX?z=G(}vbN!lfE7z-D6I(x`L_Sdn
z`bIx<U8!8zfx$&x$MBlFeOm#Ir}cUdt51O15~v+r+WW`RAnj&kO6^jJhTja&u649W
z`$_c}A?D=k;e(I#ryB64KI89|5R=9VwJNZnc(B9bD`Z&MC01ybkoUEXpG00IL)Ly{
z=+ujcKX@Ux$eik6#l*>BItEM))sIYK5a065)j&fCfhB48H%wHFr_9nYn}Z5>yfFmF
zj(`6xN=v8R@L;%?n;M)tFm%NFTVB3#)y67glZuPg>;K&e{?}xjeTF=piKS|iSQuLO
z+XY_aIp}h3I`DBbw5b=ncHgsg4kZ^khzyRPZEDP}3?Mz4nhF<A3|Sx$)6MsN?P+`R
ztI*$8o;B*#OeWU(pxsKqyeAwW3U!dPVC_$1q&LWd5+N7>TP&`UeIwolj|t)Un?U2G
zf%>!kQkJ*(txK$NJNeakx=I^=tqjQxSy0Ic=ikp=L3Z@1!R=o=^EyjsusM9K@Ib{8
z*@<DIWmuIK)R!2n)5bHbxHe(YZ_ygs`4%}q{(o0x+TiBB)Hh0!DmEOG-X&g^m)0nd
zZqSeO;&Tcl6d5nmJeZAvA935qH?U3UW<r)I(s@t3+qR%a2`;9_2fNRFMon7s?32ZJ
zAN8|~$^t&@Km_&9$#Nj%?^H?tzFUcu55muOpgyglP{l~EQ+O&~a2S7!3?b@EV(f#D
zicu^}FXV{Av<V7HwOCLkG)Zr~<>q=d=AAO!KWOVCFjM;|8UH0|#$}j}k~50~P7l#s
zZ8}zfls}mJ{=dTBMk?*=oTeyb)C)`+h0?P@B*ZJwPXv?~2QD!LY-6{i(jkkg*mXSU
z-nA0+_~%ni&7EEO&wSBN&x4pZUQpcWNek}DE`#`T%J~K*XfH%b-|6%SY?ZWMCp@Ee
z#p-yRI(6br!AQ-?%F6f;AMPl<d#klddJjYa03?fV1x=^610-W&5T%o^V$t^irA7`!
zZX}%Mc50K9AN{J>ONi`5s!fXhzQ)rq>Sg6*yl~8e#kFKuih~P8W18-1Z1=2rTT~s^
z{+E{k+moA2_g*DGL;z~`^YVYq+FFV97c>;0>qEQDPdV6N=euySL3|7{OQu_eR-?VI
zxR#;eWK2CLTsnqu$XnV$@f@CAGzpq<eSu3Kjos^>r}gSz%3xw3ixkyq5pTgy#L6O*
zd5RWe51c+>wpDh58`ifGyOKV|$;(Z*m>G+?L~(hQGjVyyWU&f2cmB-n!S5>)kv@5+
zP5$VUrVoPcW8H~#H|&}wE7Epu4Zg@>7gtB`bjij|UCgL2Iq2Uq%?(CIj?1?x+q2FM
z(R}>X&CWB1$}^81WnIJGjXH2j_riPesH1W9wZBf89>4Ih^1P3ul3xpWV~bKyKFUxv
zBfbu=dYfAY>*i`i<1>0u*=`}*of%GN*rDnl-<KSGzio9b^;uB!t22Oj{d^j~-t!5V
z=jL~%UU``DOJkbHw(ILJ3LQ2b|7d?f&5EHf)+h+(MkgiIc>5MR#^jHgDmY`hqe1KP
zVh9r#XHOQH<lMNIeeXDuqa)kwqR`k5In63dce_gW%P{gh#$KW;TZWh*ZzANs1wc>}
z)2yhdyCtyn0-Z~%(do|Hn+AMO)l6KR#fZ`J{-rsci#gmY1GHZktC)zu<?*e#SHyQz
zhJa7p0&Klk*fh6Rx=j`#r;^l2@A$g(-J%7G;d+i@6CZAw_&w0l5NN_D5F^X{0}CyN
zZ{L>ft@EFb=B87U<}K6^s-JqpOQ(EEuVO+(cwfID7V8J>)Nvfy@jn)hpL1oJe1*m%
zz-%@KRVtOVT6R;OZ4YoGU8vPSOu$9Z%1mRZv4k@V>j>HHn2ikvz}i=J_)Bu9|4!Pl
zIbX|F=x6Ml+}W6FGMOJPT5q;guxlzhqAEl<r}b0D!Bj=IT^ZEY`*LU7gl;3*LbKVg
zVjE#ZRwdDqO^=$OZk65Ab1Zvy9lG3*z{*3#n=fpfUU^*eA$NIYc&s~xW_LZz&+=n?
z*L&9a)_ipCg@NPtQb6Gp%z={hhmbnUhunm9U6c{>gbBB!FBzjjw-A_V@@0n@kSq6I
zxU;Q(d8e@VsCU0x8vSzFjHIGEu=!SgC1xt`zNTeXrQi5e#7a&bHXx*OERN(&ZVLrS
zeg(K%<I9M;u#?oDs1E{kU()z0D4+vo{LCpZnjz*<vTKzD)+wkw-BwfRr^AXMX>(|H
z+AN?yVU{Vo94k^Qa9s#@MPCBejb&xY*peVuV2||Aph5vK%;TVn#@q+P4wYb;ReeZO
z;d)E!^0zjW2hopnWk%6npB5O#BeFwcP7PkHH$CM0w<h7e3HmIXc2m4DCH!dRNLz))
zyH+>5IMho$C50tu6Y}pd*9kyerICa2JCTWsH56xHvT7el)}bRx%ag*gfEI>`l4`$A
z@n>^R3+N9aKFPCZn=$DYCN3hK44QsM@Zh#OW`nJJwSV^!KYwRqCGu~7tdfDM)Pkfc
zLqf~4?I2dJwHj<dCi$-$XkaE`RF^P1GHbSZ-^M9R-^hDJH&KC;giPtMUbtV4pSwYW
z6s1*;6Ns%2;h|-YL31i87T#XBy&iRe{@)^WA{^+q9qPOra#!o&6?C7T>l)}>(y?oK
z`<0yzUhMkt==AiT-#Wdw?gDsrP`Rwx3Pw)3EI#DD0GmAEAz9?L*x!Md8yEPB5_di7
zV>Mqf0oosW{4VN)X3v_Z1cRK<$c<AgnU9MCS1y0na~nCuyLsO_COd$kqonAta5X!}
zHScwD<TT6}V4Q|$gBM%T&ch}qOX^22u|wwmqA}PseYNM4wAT7oS`Hf5;__dmO>dfV
z&fLnFhy)Tqc1!`U?mk&fc2pWoZVUbjs_{7D{%3ALekgMQh=?63>^@bWL{@^8-Qgzb
zC0`8e&>p&;KBjr1l?FN8H>quySr@M=fF`rFDyIUrJXcv-5|K9&Lc18-xpbsRjyNku
zB@*4A1?i~(27K+O(V%F{H&25&FF#F3dsdbEbz9UdCCUMI#?SZjDS-B&=vVFEaU7LJ
zhRt(@{Cnp7WNK3`@O#`L9Cg$6B@N=C@9fS)Q<k_o9=wI+&^SD2y8~Ypg~B&Mv%VmI
z3IwCPPHUfc(GNfOsP%>f1IDHgQ_~&^=pc2hf0VWX9M)r@83JB->wgry)*`sB-SEI*
z^%4^S)Oi?9Va@C%S5w9Qn&7#=^t}&eWpA(8KA@Gi3;6YTp#*(^;BP$&RDy~WyV`^q
z8fGba+_@Oh0&rkI>S{Se$N{l%To*nH8To^COfn6p7|#s`MxSmH@wZGjT4VEPU+`z5
z6Z_LY78J&zo{~q|ZG~Ilds3k3W2i0ePFloh!@vKK#K284;l*&mdD?K;ySgxx@{I3%
zIzbYd<)Yd$7+z!LHrz1!@F~vZ?E66p@60@2l%<5)f)cR7u7;f)!Fl(m>P{Kz4Vd$_
zVg5v2$DhP&BD9Gmhkr$EZm&Z<{{s4~H(tK|`VaSn6R+s4O@qHQKNhhEzeB#yZcPjS
zrMz@Qu|X&>TT28j3Sa{>z7mp2G%kW0SzrNQTFoIQ#x`&}^!&;yG%_YItB6M8<TSw7
zsWAx_WzSlJ=e7l{&6Tc<N_13YgjHjG&&I0UjjNz;nf`78at*;tv3@~n0lMcT&3<!~
z7V$iXWKBpG?M(^mH5~-_p4z4&MgKoa+H}q0Y0~bYYpKDsm>Q#Ydq6O<DSH=nka>Nu
zp$F}9cY9D<oZSx~sUiR#SbYjrGiiWTI`L>RoCRz<yWI3(pQRd0wtF^<VLD*pXJ<~`
z^6k-;PNS*3N$S?QS?%V>PtxXXVn$nT{&6DwPUb3w^Z$UX0De~*L{x^5@r-St81oPy
zll`^&Z4m;h8m!X35|T_e7RDavbL<a`**%EAb;ujrxTy`N^eF1qo7Z8K4{w?aW2%yK
zMA(~m5MOXVhbm-2OdXImJ_~2v1zXQmyn0lU+W@VxH^=YkQ)~%`?CT+EceJEbXjHR4
zQC4W!%xTE5xg2}Inb&Kfb}drN**x0@h)9iZ0z)1W5=OJeRUlMyScodYrajs*>E6#)
zM9lfd!7w|OQ-gC84eW+iV^=_JLK_>~1U}jZ0L+^=A6E)}t^D^-#u(LptISfYGj|kR
zMzO;deaZyPr6I)*(!dIZ6=D!%m1pq>cia?OV`vTQ{zX7_Sh;SdUWOKtP&S<YC)>;r
z9Y}6mLLIP>{w95ks*@v~28njhu+i)8ftS7~u^8Bx*{469()L`5c>D}&jc@Sujd)Uq
zm1H?!Z<K%XVX4<VE~q|?=8ZaP9qP#1xigN8#6WlIKolYE0NbsC+@`i*!Au%g8#ZNF
zk=S`iR^0<DokBzQ&3sYFy#@*e`D$HuDeTp~#e(rurX3L7h+d_<k!fmBrh$$B&_NIF
zS5XI6$&-D3eLwk*dVd;4kNEhYS=fL8?8XR5V@{*E+ET*dK$VVb>6>>tZaloxNh|Pq
zT4m7%mA|><Hojsbl$*>94jBQUW}Z&cq93sGvyuPn>5vRtJ=GjuQ&=jhaXBqsNL^Gv
z06-}%@w@UbwXzp&^bK|nPK&=38d!eh^lnFwwx_I;{qg^4DE&mj3`~t57T=;2&G_pK
z5?$-Ch5BNH&O~mCxthA~3fqY@AJ))9aiv~n7Zuu||Gs^L+3ModoaC{3?8?ELr)sw;
z|LfoA7-s2oUQTkw6pxcZjx3#Caa<}ZFP)Cie20rI53)Sk9ey+RX1H3n1#PVKgS#65
zQNDCA$L_jqaH0sYxD1wfGr0{%R|c2G2KaIb=-a%h#geq-F95g;=UUG-w>v4u=T4a3
zEA`!-PjrL=coFg@_Y-SeC)^Ovmi00p$J{k6-}Z)W<_MCnfy@8fw^=0vH&0s+5&{K*
zYWaN`8f>p=c@EvjzDgA9O8^Bm&p{NKXi?=fU>>{q;-ra(peC`mmBy9SmQ<%+Gdxz<
zC3$C_ABYlee}sFp5FUfRfDmf@&sh0Cn&I|;$RE&;g7B?J`h<E(Nuc|bOab(CT{;Tu
zc8{bhwn|>Y1umG^gtAtaI}vKw=#P{N-dR248k7gSw)S?NNvUUM4E9TEo9DIT$T|H|
ztgk<4%QPD%mwgK4nPyxAIxu?nj{`!=vC*En<)hu$Yh_c-vCl5>ygzyK9JbaJ{M@>u
z=+5o`*}4XN=#EMo^?oy`FSc?O>k~q2h*pq)IjW1wQ)^eKz%3SElN&~U18M{6$cehQ
z21YK>a;9$050RfK>x|eb#k>lQ_nLFjeo{H+y~jlN+6BaH(D?ZH$8j~6GXSYVOELy3
z?Sw~aKyhW0)5c8>+q{KI+lFtX?Hj&mej#Ob97w@H3KU;N1a^EPGx!+jwnmoC@Hfg3
z)l+;;g<;_ME|^k2P0||-xosO+N5G)rK9%I95FMY-zO79uW)1mdHTd`O!Ptv7WiEJ4
z*Cv}{TB??^bSIe3=1X1x?B?|ug+{MDz9F5OSg1^O298p{;+WfPV@i938M_zx+rSi+
z8Hc)!TR_N;i?^oIESsCs&07|d6l)lboVp!3i~g|3sg_4xuU}^R0*ClOWmwR!P?H&f
z$-{E$Y&Q$DCf&v@?k@3WBWQfw4|S35W_G56y-4=V71?_7ZywtFfbZGzW|)$4S;s>$
zT<Ci4O3jZbz;37XtNaZT#<q6GD#(q6f)6^)JrSBE7lNx=Q%G2%CXDY$XN_+goHNJk
z8H98J)?zzKpU~owaK1iG-#eJ@AX?arE8ID3xG#Iox3(%KLh$Y=@U^*CgqTSNdXZ4T
zefkM0UNK;}k85l7bXs8q0e-CkSnQ=%Cs!JMNM;;cOZa-KKRkVG^>;#H?12T30n_=#
z^wE6FH0<JNRn`7omOpy*<H%3#z7&)dW5chJaUroceqx2^9{;uZ3eVs7N=N@^-Wd8^
zoqA_$hpE_Y&2zDfX2b8sMnJ`B0{CN0!h4})78SY_0-LtZCqmq|=*#@K;3QEl0?+n{
z$vze@?5ON8r2R_FmQ)VXKtwP+v2H>ATV7JGAY?r@H^SGa5pV=pEBNe59s&S}>UslC
z5867FOfw9{>vGF+c^WNc{6OA#desPe+V_0@v!IBVBSF6Y<v%mCQU&$7PoG8U+~c8(
zqhn~7gPNzsHl<4BUr-RPubrQ4XeciNjhouMu2jKK+2y7<kblWh!lrndjjQ2%W592Q
zSG#SK1w;{%MdRxk17(Eh0O)HnFV=KGM0?VJKlDEHc8vts$P^xiA`|U*5Ij2k*NVBx
z<{>&Tz{=YJWDcMJkT+vFpnX~wm{;1u3)1tiDjNq`<J{vhdYu;Js&8Z*@#}$AvMh32
zp<)%}$ehiWdJxYgx08?*k-@^8S&TrxPT%x#0JxS;F;oW_da_@+i+!pEw>v_(EJ^g_
zo66~dDQD}E#^R{mpR;Ux)QVJ=j!93!I&EZ4du7>Gzzjfb_-1GcVNwB|x|xN6n$pax
z>_Scs&#g<3yu00thnIQq`u_Udwsx!`L-!Hq`}p|$nCMNs?k45GOF_Ur0p#6{&EUP%
zE)0@K2ytu@cc-9&z#Rso(c;_I;gy8s%MjpdZzCdy=yt`Jpr<>c?mqj*OHL)8h$;7W
zK8i;B;q>l{PrbbIetwmd25xSPpSv>(+^}MK<048A{8F(e1us1)ix3+y^6S8Q6%;U-
zLboK+9`W9!@aMm@q<IU677fTQY=C{1SfJAlPQT|(kDtof9jzoQ17FhHR$ahH0Iw9H
z>V$z>J5M89)R%(NBANQZUptyfj{|VEa3fhA25M{It>ky;RlA$aS2k;>hZyERbBr?2
z!g9*I=eC$NT+uy_a$pKx+JjTsVFvH+o8#V`psE71okoVP{J#`OU@7Y%44_lPIw!<U
z@wTh#;DmO2;{gR%tNc7r=MK-e!8?EoW}{b5_KwZ(w>Y~4j-=v05FH5;oWC=$W*Zei
zL4UfT*aP^CTA;n=3ogj}-A4G`(O+usmHA@t%z)9s*LIW&T-Qa~Kg1c_#~7_6P&=Y)
zi>qg>3;Lc!#>R#pWS{*jt_Yb;h9Xc2w!5prWpb#R7*GY4bBKr*)KQq~b95sSy4R8u
z8wv!)_EUTS@3t|$;+<{_yJl$yk8(@*isxNQlixnb7<{CUjsW%}r$CHG{li}7!w+Uy
zs6~oF<UdMV(pdi}{cEifNoR%(`Sqpon6j<i4&YJB%-X0bXlLP=jbf|f351b`y5|@{
zQH!o#?OZ)|ex~{(XS2+J{-xH_Wcb_-=!5Si>!F9A_ufBWfRKbLk-m{T0{nIVQF=z0
zVZwiSB4q-g`c@@$lIetqmRTXNv0EnvKH%Edwy<_4m#J?~hP?m^<(PI|1-3CA%IiA;
zM+!4EPeRKNe0eLeR$Y4j*-&|#ri-YjRr%tJp>P{NUmxO8^}_0dvvH_!vgl~t#($Is
zZNtF?Yh=Ki{3EUi(as<7QmDNV2S~s)AU>ZM4Sr@4$_3m6+sGK{*+3pYk+Fw(V8Eir
zrQH&=7Mk<hBmE6uLXl}9CPWYWCl!GnFrqzcEGW7*qh`-5{JP4zn>X!Cv^d9+Z-ACa
z)W>+vvKlzMYnFyZEr;Hl{Psp(e*0@vrl4fKp=g^z8U4<DzbPkY-~2C8n~v-nIIK~G
zOa?+XZm{V>C+btSq+eb|#+hjmw?Vm`Rmjn!9eH5-Ogc<ZIm@k+DTkKB;NPA8`^04#
zQ35y3-fJRwF$VPd#kZ<(QDrlF>ssaI&(3A-9!``u=v1$gM%IAwnB+*{N;T<cD2N>!
z!F|Uzy(=EaVH%$K7E-X)b`4c!pQoGgxozq@moKod(hv2--oRE)<$6W*9MoP({G&Ga
zuo7u6xy=;p;1=d)6ma%x(3uMtzv|?#wY3p9vm_tIr!boo`+%FG*rJ=|GImt7m6Aq`
z71daIK!r5R^ojHs1frDNv9Jy8AE?8#2Tsacrq&twk1USpEh<ZrJNZyl`ZxjI;aR96
zzsElze#}X)K>xgLkaL@nDU0exn7l#n#TqvsNKR>^YK+fB<1=O)LZeE3XL#nz&}qrQ
zbcE~9&%dZl0BpuTN(!|e(E_}?18G3F0*f}Fup#J7kkgIetkCi)h6PnvmrAq~ui0g(
zqZ6?*JFYM8O<Yb2F%Kso9db`5t*F8HkY6|*JEz|Zl$ZK|kiDU6EshLSIZI^w<Vkq?
zR<Zu2{)OANKuk%O7-@J6>PuS6e=f_9z2OOw@*!$lQ{m3|PQS0Nre<1!@9y4tm^z>F
zI&ZI%4BSNVo4}#{4RoA=7iMl3Vq{d<J?l6@9R&ono#Ig$7KpT&D-N(_cmYLorVt60
z-&?90i<n{Y5%zmnQ9``eS;#4=h>ia`U><cl92Ya?b*a_WVKzsAti&`@W!vvbeP^gI
zo4S!|K#0a=qI>ploeY_3C1Lf~2}GBHlSsP+e2F$ofBVA(>lLZj%T`z&`aU=*k+9KJ
zXJ|3f-gFRTtM@biQF6v=x?i@w`Ay|3RkmqCp@x+@k~#qgJvW1Vi@KWhmJAm9Hn7k{
zcdK-*_}4?XX1equS_IBAQd3_AcHA1T48$^QTzX=EUpO8^QT-rM=;fKS!=(|55%0%~
z5aK1+P9;p}E^6+Y7%8!W`B3zNLN!2~FYy~x93vQaVAg_ZOgdk0ff!Q>dz}HG{$6EI
zh?%xHX4>Nc6ra1==zdjj@IOkI8=x=4eW|-B=UYsk7a%WNJ{^y<2cwgCPjXvNp%M5?
zxZ)j2TmDFflbU!F?*Ma3JgzgBtWI|+B3=kd((B4E2D<;_zlZ@$41TKCw;EQAc38Q?
z%uegE@!ZN0@-=<@foXNq$&cdMLCFQgDex=Pz%mX-chA*HjbtA3Tw7)74qure`GKeQ
zxQ;j^gYGJhlbw~C#gE^Os`mcotDelFtWv|16e8~VG_DWuk*S_FSqoX)4S$d<YZoEk
zxq@<Qj)_3sBJ)t9`Gmb`KsdP%xCfH<!q*K>Pn^l`AS3Lx09~qiqc825C0EDyN**(5
z(ZtD(;@%kleK00{&ui(qLt|*?U1zdSeO#3xJ}U6)T8L+UqC&5M(e9<6N^+`Z642$O
zLazX(x9Kf;^dF^9{HqG?&uPW|a_2!Xvmn1@(!%=Y%w9ZEu;iuJBz4AfInuYbwIH4;
zR#3Mv@UdLU+hN6OqUmce--$mdi-2chvBLD&Ez6>>Z3Rvu(*kI;+l#claDugL4LU^9
zkT~k5n#H9bi|<S<(A#Wp*08X(zS9xn-rHF<8AU1+0NjUGs2PX>OhLl7-$2xWQ>A)v
zmBa$-WA)y(Khh=)NqY&b(%^Iv2uyZODKevHI7yQ|Ada%m%-JIF*Y4I%4fyilTT4so
zzw1x!;=Z4nDj$s_eI<fdpO8<!4JMF>Aj8(@;Em~#1DR>QNfpA_ozqg070bj!<e1A^
z(D%1{c73L!aMP=FNrd=;XP$PIb?b0OHEBP0aD2aQ>CpV+HGlk@XteeTc<Mh%1E@xo
zZpw&<w>V(-aV_aj9p=l-dSoY4iD(DEEZj5v6DZtrS&U3xIxKR%yTo5FGtZl7YuX~S
z8@O#gX4%JT{4)89>&y-I4NG@Zl7lhdUfK3xDVjiet56pM080Em5}S0ydLfZ$S54J{
zb%6gG7>zlBUDp8Y$@s9dtpR1Eyu(4U86VoGU_%Pq6Sb7t{Hk*}J*tcZyk&oYr}bnC
z8jua-xf9acr1uzITSw{PrrD-iMLWq1;&&`0VpK?bSRy~KE~BoO1gh|BM}CHv$g%5H
zk<5<4=wF&)CMz^zjn32q=UZ8Z(v>rLk7c}~*5il~eIU;?aT;xGF~k%U^8U4w#v84X
zNl*>Lw3<J-Pj~5D9O3mrd%nlueD-d!qig#6^=v$s^)A$=>Z}0SOO<W?q1ccs!T=rX
zxy?fAgS_1Kv7>_JMEWX$8Zw!&4)SYCxg}1j$Cs&}{DB!>0G!9NL81-58iT>D6c(HO
z*Gp)UvNkDKVxwzBf0Gn56Nh+&5+*Y7%$1{cyb>^WToCd9N3Ze6I8DIUfkQgI7;D9d
zM51#MJnA}}dG9%F<J-SvXV&Sd_pJb*nI0pYnen#3`FUS?Ia**D^XtNz*%yD?UsF4d
zJV|D$kw(dj0T`N-!ie9=RQ%TcUG`jgvN!T1M`l(tW3MZ=%&3GTI|>bk!`0O~43XS0
zX{!;spVqo_9*?>_Kr1l5kTm|&xG1bg8k26~;MUp{KmUGSwWju3THu(L@`3-WZD13U
z3<T7o0L9Q>8_tJVoq1pH5y^srpzaQPEpb57LK&M@py|ynN2j~=*gQY;%d-@1@0(jj
z{Z0;|{TwVBUY-&lKLcGB0FiEk3Y!9oi3h=!%7A~LU=<o+2fO%^RG3`qXq9A^(fj3@
z_Dj%R_H^$IFLDgPn+$iAiV*596<t&K)#XX_k*{xnLOoi5n2V7fRtz<-7b9n-;vOKn
zjz4BDM_r=3sS-*6Wz%(M-{l|nZ+Y`+dtEUn^S(TNvSrls)vGsr&Ek|Jc}gqhn~why
zk2rZu<#V`#T%cs>Y?SKqeo9ZH&gj6tl~<coL}Y8FA9&ORs@()FvaEs<TmYNG&Pi08
z{Om;C3`(P#e)*{%fqS-pK5tFqFb$#J7PF@YTmF&j*|YVtB&&Vy?uM%DouD56104E9
zdutg<UI18&|0wA)c9K4h?_xsa^xrr#O(AkKfqJT;Fl2KeV~seoMLR)+>s=>V6VbnL
zPUp^OPp#6Usm9RHeYm^$uou7v^NWt{k1;ok;SYnK0Z@L|vSy!AukDWylg_vDeAJu|
zzC82cyR*^Jmik+}Q_WZXXS8Sdw}3q2CV2|y3u{1UMV)zTfkNFxG^nx=VMzxe6p&H}
ze{i0ygwJ*5Ki@;G3$#Zv1{d_Y-5Z);(9yUG^_n?aXZ7gbq*E6(tVC{Yz~_BkNLa7c
zgi1Rl6|*7SAc%vT(_@L;?h)Mu=rP~-JomMolTUD>*rVqP6&%%(Yk8vK-D&&1os5hh
z?o;j!1h~%<`Z1{i37}Q_!zfz`P7-f<3Ee|T*@Ttw8t;iv8bk#Aq&Coc{Bg{d-hhfJ
zJs^=?m4Uj*o)?Da@V>tn;jp5ckM{d%Oe=M;YZ&H=Kl%Egylm-2B5XY%u87(WTHvse
zs5^;xSd4D--vRZGVhCO!rP~P&D@uhmB);Qt@S<_6$Eo#mx=m>-+k%VZrwsf6z1kEg
zjQqg;+TgbnwT0YfKOaJOG<<S3Z)rYN>fBxWtttAwZ%1<hC#wuY+{`g+m^&g`bTdgz
zoUE(#^Wo7wm-RAc2U<TAAyfE}I|er8cbbi6OFHG*s37u2V5Ln3cvgvt7?TVRROs8h
zvewuMDHy!yOpTjCk(uE!3kGnW0jf<rqZeFW1M8opH4HWssGPJ8&R!$7n_HUuocny0
z{Kymv`kgz6ivgf0Dl|dmaW6{!sR7~gl4mn~O^sag*HK5a(J(O5*hq^iu%97Q0~Ajp
z6%WMZXMGCVTU0)CG+&|SCOswliSsX)X~~;tn2}}xy2)hzmXFXN1hkQr7<=}n*3x=h
zw|b$u;rWOZZZ6L&-r|Xc*%q_RrJe%oc{ZSpS>MVgKXp+rm5y4B!77W-QGzc>-l*cC
zkMz1iZ=s`4kq8EpL8N2g{>L$~NKkFH{bsLCZaWE7qy4PfkeitS9jG-jeW}IF9XKas
zlP_V<bdLyipXeY!>F}>$^Uk+Mij6(o(hF_kP5hA?u*ebL;mHgwl4haZt`Yw@@>#xk
z3uO-XkJ6cg@_I59BL<E6;?r@cCp}=~tkboy4t(MbTaaz6-7ntz)&Oxzy!8)o4pnX4
zrM9?8-Z-Tykg5)7<H$7_*w|fcB6*@wTuMAYc-#DO`UUY;kcwO!9PMaaMq!~#p4S$i
z$Du%u_rIkaUv}0Qp|}HBn)gU!AYlROJ<O009(%%S4l7nW(N8oHk<)pc)X2R_baT^8
z3LxKYhA7GORYG+`-G!SulZu)1U@T#7<L7ZX_fKm^)z<m4#)$n9Ii3QfQNPM;fNZms
zVuP6&r%>feF9(eufG<n!gP626d>x`n713U-(zc-5_$EZG?EjK&Md*6J+-B9Rl1#iA
z84~l<Kk$Yp=LUKG%!|*2-?^Tiu69}BHpdau3;y6z%4OpGtQ<HrBz$*y4)YYSz^1G-
z79?G*b;NUehS?JIv2w*Ahax*7$<Nr+-6Qn`kxWw`h;)H=hbwqa|2SkXN~Rg2Q0oTr
zF9>-R6UXN{bz;`h_lha!<W07?O5!=VPf%d&M~9<gZcI$kuZfkr_3TRpm@O{lgpVdV
zj_f6JD#L_E?_Y9NyMlK(_l7-acmDl?t4n?yf+r^{5EhNp6P#k8p`f`kab9fBJ6{60
zS?ZCJhZOIDgBI@&PWtUx_8z=VQvKG%E6c@^@Lz|_XY2x;n;8wx_?jgf)lwJm!T=xc
z4=Uu303~Oe6=NT1i1e%2>+P7@L}r52lkn6mg<;X(K-G4G*p~+wJ4SJ&UBfj?25RX1
z6XM=V!rcimC8ee|Ous-orYvG`GTHaO&u7QzRni?3RM@t8`2rM~3d&hh8?e4L7!Pbt
zY`RZ(5>a_;ZGD7e2>-mX2{z5|1`7Z~7u3daK>2KAljfACV&_2N(v9yVesFc)aU|G~
z&`At@Fra(klg<ga7f37j%?612MvdDUHr)IPeSo67!r0Gd>;#-GfR3|Q=UB|l0Qn((
z(QlE3sx9nlTf6esn!cp4W%g1xEype@*Bx*77Ih01goKZ!OBievXab}?@&PNbLt!mj
z-!f!t5-OBp(wVw6vy^6_0IPfjekvLTs0Ai~(oo}=2$O{#*UHiy$_><mhBLuH+sJg>
zIr!1(7tKmCfYOTB1i$JQ3RI3xg0G#F5w4IsYa&*be1sC0I}k8B3voZv@E}{}Bf!UW
z>KUdA{k-8kG6KwxsUeX?Gur;D1E-U>^ZXMnO67&Mq_O9v@7n@bt(=g?klVVDwB!u(
zZzxdqX#@i^dH!~=JJk?rg-TqK)--dQ{ox?wCJW>m*uxRdx?z<-Ys~Ar0C0(u@BMJ@
zgP@^o#mWd3Rh_xYnXe8u<X+qy8!u4);iOPC0YD2RAz7hXB|Qw})=UX4lB;aRG1!Tv
zILIZsf?CwSpRwm1#PT29A&w}Cse$v)iubhueeGHLsf_B+@+wFA%clN4FB)^E-!EAl
zGTGatv|=oo1IMXm3G|hjl8bP!)KX?4ryOK#2}0`Ab!&kVi&-Y10i`l_pC}_}cIo-e
zCr_+54^f{2Mm@6Cz-=KZE5@Sman(4^%F_4LqjynzD9=AU+;trJCqVVCnnP)jZ}EA1
zC$v+;MIraetL)8X9?)23m3?BY2$76Zvkjfd*wTk?Y^WbH4a3!Vv8)YCuZ2{OehP}l
z&#n-g)FQW*72gQmWvo8j@_v<r$m^|HCV!pDVm|W$YAwlxxR1syYia7AC+!9T9+Z0~
zOI7J>l3c!-KcTyqOl3_U_2~``+5Oow<mhN=hslwrJ-SyB(>;=1;F0Ssm?LC~CybOH
zlR3#VYDmUGd}VtB*h6TUI6>VY13NA;6k7!w2^9(D1g|!i3iuWfJfmig*q#Uw_8w^O
z^BtO_bu<hwT+6<Ye2)EKAvg}X8*D3ora<HxqSz24wT8)(+fesxZvbT6t~SwX)9r6D
zyhKgS5L;d0n$oQ{rVH_?<1v^ugbi#KhqJ81EA65ImDv`{vYK*MU>L2jIi?>mSqKu^
ze};fU@qdW%|NlRf<sd2na023+C4dkid1{@WD|@n3QkSTss4hb!$JR+BKR~;+@*7}G
zA|ZWuXfm}TXllc>4$moh3877>1R{@sAG-V1V4batNUdtyRjSXBKQQmuD{oq~)9Ikr
z=g!@DN=SDaT$1ZaC3j#>Q}bzBIWMUBricZ7?T9>7Gn}~S!TY?vc1IGSqyAUtr)igX
z->Qp{sYocuGWqEgu#QMqN4pIywy1k`pc+&<M+?Xvuh?@Y;p)GCb;~}^K4@x@{%L3C
zSC7JO*TyFH?3dO@k&X3DNrT#FesZ;kfl1GDlFUW~tVzsdTF7(a(+N*uiYrb20EjOk
zx1g~rlH42B-lK4O8&lQR3zW9&as9qQo35PDpb0VBfzf8EvSXD_di+4rjsd`oJy*!R
z$euI3s`QW2_Lcv@{6EDgRCR?+4H$T)M}m%{d{Aaq6v)tL2Qz=e+%w$uhTULb+U->T
zTCDScVHoIdCMGfM%BXAUnmGRh;@~$ma7jnrvn-nAjmYH2B@XS_Jk8|f{Nx=(FW?VY
zM>-6IW8hun4m&3g@C}?UK-?~~_~@o&vxP;eOHZ%z<!15k-*kKnQ^W6SWl#AgeoUyI
z(c87$XtwqP?{rPY)XTG+$mI*~S1GOn;R6+EIMJZr+-w7|$?_3`7I?E;5*Um!lkL~{
z+u8`nlwDs9ESe~v9FQF?!}3mpfxKRrC6Dy@*_3ZAtu-^h?9*slz>R=4mYn|1jc3wU
z$!fs16&M;o@`c$f=?=o9A14RqWsaqa;U3}GQU5pWgXNsC1q4hLQqvb?&c)u-kKS@Q
zd8m{Sx`{A-Ec9H{>$INBEzo4bUGiF>a8W1`AURzbC0N7l1B>9AC!b}9fv>~99fn7o
z8mPuM^ctNWG;i^)ZWuE@%f9_IzR!&vHnZ=ShWh%3czv9U_x1SoC8?XWl>goa4r(D?
zQ_#0bF~EdQ=W=C6!U8-He07`gR}};6GmXa;Rw;B{t4xN{6QWUVevflzo$$%|`l=`9
z2FE{R&xgC7p%qKR2mVlAS-yPf@~O+G95*~KI#Bt%z4H0n4N7m7u4=411m>vL;DdUB
z*4GRMNqTE&+Snh4BWvRdH_1zEkJS(g)lIvQn`R6Rp;{Ug;sJFfRN~y<Hs=(V5JE4C
zDd{wI6_=JbIo)R%Vy~3>Mc8ECqSqBDjiv(0KNk>fc7rXL!W4i+`9&F!CPlh%!@A*x
zVt+<{^^_#9Ai;l1FQTey$_gJ4vr#e^UKYf$^ernmM(KSybbBrYUugVaJ0B~dxH)mC
zEDCQ~*u<*pgKf|XRYtIEt)Qhu#2m4?3}=fH?h5f5H$-kJj5UzkTtlIXc%JcFeP}g-
z-Btndg*<{+r*$&V0ti~h(Y2dhm-1kYgH%an354)36Ck)a1xA~ugH$sVF5W{anTkG_
z_qCmxpf^d|^Q4^TZC_V&1$M@phG)3fTu-fAa!E()8)KK$UYUG;;p@xVRrc#nM<qoh
zD34bEUlq9Nry$>?+`C&j`Q)hbu@mN2n?Czo>BX6QjQ$A>&W>FrjNMGS?6Wh=+dQ~<
zr~+KkEsK5dfjXJiD@S&9L&09jcX@Tg+|lz*X&>9$*#OgY#sqJ2_4vcl(e^y?nc`HX
zGZW_yJb$aT>QCZXu-fUQalWptQ3XLo#GK2Lo+X}w&cCS4Yq~GHCZ=@zO72zc++GO?
zj!Caf3I;3wIyi8qg!;!{X-a=*gM{8T5*$sE0g(3xs$Pahps11UuJXne>WU+iEz;#i
z9oB|*rJo(c%cu2%t8Us_HRf98Zt6UEr1QwjBc`YkCB?%<CVb3h!mJDVDM6AU&j6j2
zRe&}!@ft3Ma2<tfAyk*!I{qhuL)YdR-o3|*f5C}m_63n8(-Qoy#vTBK@^0vn+Tcxp
z{W3ty?>&h>4LnvsrwaA89P~;4M;b*={YU9)FTxS}I(tHj{5Ea~E)|tCH2D+zb#}Fn
zpMp*0pMQIqs%~o$6Ty*K9vbDfbG@3ZbRyNapABd(#HCuf7`FgHVW8K3I<fdOAZsxL
z7BsH}@-8WM4WjVKb>Dz4<sSCjF3w^vqJyl=un#iaG0-5tECgL&V?QR;loS$PV9yg7
zyPjWQHE-=*JlgwgY9V-);`gCdY=Y@}AjK!NK|jC#rtyu~GGT2eUHq)yZ4Ixq`gfN3
z#dVq9r5R6lWejHxq`f$BrU)UC0=a9mlRz3x^Ax+<JXYW7#j8PJdF9g3#9r(*c3}ft
z(+hUPjM^C?t^P%QLy|Gh#wGA+Q)5%wuh%k+P5~$*$c_a+G7ygUfkzSDMVnIEDKa^(
zU|Sm~n1<BAykSW?r~um2nS<srz3$g^xYquUV{2z3fqsq!i|0KyqgUG7aM<;^AH4|4
zvQUa`1tFlfe-WceZadAqO4T4_pBV(k^m8$ick(BTv7sk9vnCdP`aXl<$OjDdh9UD-
zuXD^aQI9*ju4d2A68~pEs^-fh-KT`HfjHF2**Mfg6udw8o=oRCxvdvCYhulSu2jsF
z1sJI6AyX{4bV!l?`^v{wAwpAjrx`Sws>~(T;RcxYWnb;oP~q5Fs5k1VTgj9M_7&Q>
ze53(Luzvw!D^yw}t54|)x$QF;d^u6yjw1?Wm!&2_%uTZM-{AnqEV?r|+G~l2<u3(L
zNM`tCjJ9?61KZsy;D0#?shUBkKu*Ixy1D>vXqh<$eM~tRhpMv%k<o+-ADeL)2t&cf
z3tbDden^)=RHLmjguXJ&d<lXUV$L-P<U<^aM1I3vy30Mb=~C<WYf}H>&`H0~f4l!Z
z$mj%eI-H+Zf%3`^aJ|}^+krU(n8}rgSIr?^=$tU*NaIjoG;N%Uy<73E<T6YVru$vM
zTKzb+?0aXZrX+J*=F@{1{Uu|^>mNp!f7-M<@W2n<1$ZA=v_&N7?6x@oX?Hg@0{YaT
zt%Z=HP8tDKEHYVkOxXJ~2sRifpBP~LO89zy(A-t?47<3Iy;x&(7TB1~g2r*zxSEar
zuK;M1^lwR+2m5}WE>!=rV&e>?NWe?AK&f@0X}~<4tc63-0Da0^yxkiAFJDPj5gZ`2
zinBlhtVPa?hqcAA&j{oT;*hkuMOVvd5!&v+kB;$Qn(LEPmkJ!`l~9##89eP|5j6p+
zLp&<N>z@_tB*`2hRyR*4#THdN#ffGl*M5s;CR*T8o}j_G_d=40<uORJQA<xZa5~Ru
zD*Pz<7zO&9Il6w^l>aUUi+M84ZVMNfeT&H*o;>?pyhuGj!W2*DR?R%bN*>PW)#euy
z_rZtllgp=l|8=KkZYeXv{!NW*sqdA(gL=f~u8Q5y?l6iY*m0yea@&~(kmr#hH}WXZ
zZeK?!ooT)SJhmHlOR>C<RBXj3nj`}%@AUncMZlX~FZ?_<72TScSy6sv+Xs$y#^chZ
zSDm3DS}Cg(=9m6kp`KhzmTl?=dj|>cs+%<nDGprmPY(gg(&xEmMT22dS8M%V+!aoE
zh6kEsDteWq^?KMM<NWkj_u+8W$MZ{S($x9+$vhE|7O^LQXMJLOSlCKdtnZOt3Tg)4
zmUg&H(0L$ZNuajn<<va;6a+|V;@$i?9jLA?_h+x{%NIIVPvcFf05qlub?v!&jgNPi
z%D`w6l@fN$RNsXYZj6pYd~f>iK&AZ8@PBe^Yw8+;eiu{I7F|S85q96Vbq7bsfKcb2
z>;y3rY_}E#G4_cuz~=m4a;i%|(XN<>nO<QO+jG9(1}y&cCzb_S1<(3bK4GAlI(R=>
zZqy?I^S_RZFetG;s4Ed|q5>kz{l<V1OieF{3?C$sjaCm`aFGF#IAc~QE*x*|WYOA7
z{}W(={(RJV!1ni@%`f}c1}QDNB{J8O4ibMCXHZzoc;-gZFEWf+QI03aloOD`<OHJA
z1Yd_gGUfRa6BHTYuMgGcSAlwr7yifpVeH-Gq0Ilk@sUarlN3eFc2qfSn?pH`jw(r|
z5@NP(r7?}!7MU1xi4c;lHa3<?a*8p@VajP@9CnkO$p|xJJ2+ocj4N~K_iFFY_i=w8
z_wRc@9``@_qnc}6@6+r3dY(=U4!ddIZ6s3-+J5P1$oZ%`>I2P~JlGN7!kPRSi)$c0
zAx>sxUDSs#jH2<dp%R&eoZ1zfK{(hs=~n~#BlqLgs3nLjudw_V_Jwk}?)#|}>ax<d
zZToJGsYtBgk~cwE%=70Yv&wv*Kc=6TMqnExK_jeqO9vBK_&35x9jsQP?bto`#d+fa
zGvESFCb_$y7n0bdGh~ETRrXXC(XH(jQT$#5v3Z@g@fW<WWcXVq=Pc$e(gb6*hPF4U
z(hBUVkht_sMV=VZ$3~<<7^pDRu^?B^4Kd}Kp$%Ts(U&ZfHvjFHvL$Uw`Dtj;)eY|7
z`Kv?{j}V2w@lfC7L=t+K5C`#Tns4ObY1W(^Lt4%V;OSUS<Hwk0>7pU7$l``gm~M=S
zwwz*JYg_`7hzpQcwj2wphn$nj_7F3>maeH81E0OlHBZ6^12s>o&R9qv!2EpX_`|=t
z7IWYk;3uMmZP$G_VtGRL`4^Yv2Y6Ujgk+ulcECaj6UjP*UYPB;C^g2+%HhN~-@~hx
zmECr=C@1so;~~#+o74IY`r)H`LZjnw{8&OM^Ncx6dKx#Okmw23Uf?m~)P}Z!K2dU<
zeF#lFY5Q3O8qtjig<;&wpimj}?{AA+{YBHzJdRJP%!x~Q*Fl|iTjou%PBSXVb<3mw
z?wn7l40(4iHTH$$U-0RFz}N&M!aSv|B2j56H<z&FD}o?T%u|TmG%~2c4vlbb4X=`K
zl?0t=w`^M|-}AH@{g5Evn#(d`;31B-tZg}cWKT^k+IXupqR?lET#*)=b@{=W{o+lX
zAsOGPelfsy$Tl#0cx8e2iYUC&4->62Cq{6Gy&a-;k26kCtJPxc#Zq%VrscHq1d}s^
zq+_UmoK>N#wKAME^T(y>&9P#apbs0VYc!qoS$fD%oB;zV6D{(!#UwIgWhZM9L&us;
zez120pGZ_?8Z+$B>dN<7nuD#eNk%;Jw8q7G_c3mTRIf`w9={Seb*{AX&gu-acUy36
z*NG*elQFX0*iR!(!zzfMg}`~lKbmSq$yhwz$Wv!7f$m?TsF3>W%c0J(&j(mOXk4sS
zhPmPC-ro5p@dvj%qk+PxPraV&PG%bavJ_cEJP!?&HfcylFmDC3olvSase#(?D~BEm
z9FsT<61H7pAgV|z4EQ^6jtZR9yqncF58n(2m{8WHZhk4a8n|!C=hfFQzJ5UHMZV?o
zC^a%*iQ1!T6C^ZQ<QxSpKptH4sk{YpgU)OS>?7Sm)a|!QD6SoW_G^TRCWa<_$EAIQ
z7o<gCYvFN9VsS0__X>2jsT6`rLItt6DGzx!f~#07ia8KY5y{}dr^7Uf;vscTU=`%n
z-(1Hlg++lGhc+a?F&5F1<N>wo`>ddGy&C&N(AOBT_eGp*_l$)WeJ?2P&}LC?#v}63
z+HMOEAIV8uhuEs(u^?`Y*wvdaaHuWM#h$2sas76h)+G1uRcbAQN0kKdN|Wnk$yks@
zGfNOdl^dLU)CjKArf720B>n}+aVKZC8h4mgd*+NX^)U4j&N6S3ulJ~Azt|egpx>dB
zeen-^&1W2p`L<`JnX93yT1^yIA?Qgk7K)R;CaBipm7RnV<R<T&#Ui@V)VP=nMnYf*
z+I)*zeOaQ~WTq$--LMZ)@FaRKSorBpXzsN~Zv*solOEE;`M-E3k&a0=P2ZU1XdfP0
z`vm<%?V}ri7_*NXF^>__)Gq>A=O@-e`EE(?U6I1#sKozPFefQ3`PziNPjSD%d2yC_
zr#(ThK6!ba2(D)aB$r2C<2Jolf?7>a(^lojF2u<r;Voo?J%(}@th+-@Q|4=uHr3Gp
zvS74s%gh5fBNj2>Xct0fZXod`=HqAE%L}L1j2mqPTr_L<WA79+_4*|2p37WC!xQQI
zJEz`N*=7fnZhEFR!HpvdKS77|bf!@|mEkQ@qigs`PE{m<3_aZ&cHm~ta{Bq*z4p5`
zZ)%U*7RQU&dqtrM({cy!R!D&JywY$wf#DMRsJ~S+<~6UVRdvh;M~H&1?rHFBOl=&-
zOh}ES*dY^1D!)yOu^CmXC*T7FYJ5Vh(c12xB|bwL`B)Qm#dx#h`aT9V^x?;}ym%`_
zX9x>-Dz7L_JPhIljRWn$=?-=WsXrkrz=_I<VDkpv0`xJ3kGwMO<>r8+ArYY_Du~C*
zxwTJfpDI$AI|n_7`h6Pi3I+vd>x75aJ*#*gwJ%K_zWJGqpOgB*vt#FUY^{aj5q!v>
z-|ApqybVhW3ah))>)0akG@kyR|AJ&tOQ1*d=cL@ty(Un#>d`keqzn-x3!y0#Z0OWz
zoC0lm>$?RSlRBrKR9k!9d!{xU1E_a8`1sxiU7q|9)g9=25jf^X#xWScK1kpO<+l*p
zW@<cP_K*&05gQDzo~Oauk5N#fFeNFQm^hP;#D+e>n)!3X>Vf7DI@$JzMtn%k?Tiyx
z9Q85%p`8n9<>rzR@*~uX9-z6QKI}rQisCrJm-B>0#2F505?WAEh`<8Cpwp4W1U$BN
z8W5R2X_unB_6Ipd@vzp=6%7*arEC?(Gqrp#rsc*I%8lErmv8K_B;x1^1HN5ltmQ-W
zY`*l#ANFpK$18pBAqAA_{6Xi3A9eA54@Q3^;Qq_j^gr&V|Kks}Iak>dq>hdV3&Qj!
z5>exNftp;qZ=`MVoM?Cv-2kk!;~X93=HOwTWKjoMY12^~S@o5gjTzkQOjY`4J}v(v
z1f!EhlVNktlC{#bThDU>^y-@rg~xS5Xt6m_SWQGv5eCx1Rs#w|q5q_@Or5buah<vL
zW9{}DtRxpq<lwwRXkxecTB{CApYwI|7pii`dCS3Fap&{oy=Y3zh=um(r%_wo^pHh8
z;5Sy=&n6v}hMCp;ruKQalkSXcoNcabaew;T{_s4X0g~6@;~TYoypE*mep>y{>03^B
zn%GbG|9puWvh5(GxTt?K?NVC^bJGj1X4j#IZ&k>_)-_KWN*<25qog>RG4@<Y)R2dD
zLK1?x=S-D9vX<_Dq!aNcts1q~C&vGg;q|i5MY6dxm%pmr#bA`ZZ*wH^&uPqjSibVS
zv_?@`Ya-W2KTPhIZH5lM=@ZOBWQH6=!PfbPzS>R8;WdMA<$G&7yBdvbyRB%3n8^#T
z_j$RL+n5dH``o5bMY4zuuKJn-yB*%mPRhGguw70@cTt*{cay0qKa2T5(Dh(XMsjj3
zp0Nj|H9#dXG-ka#AT5HEXs;$Vv}-gndRE(I9z@Ic<QI~!BnSBsr;4*YVvm^Ibt3dH
zV#$rjBi*HCu6w08G^S_X+lkv}jg(y|J?DR!Uh>`Z%+4kxI_zfem98U32hBEjTjX%#
z@2s&f&(IIW$qy<D5Mc%IYCcRl!x3YMZIB@t1bAzpYPV`tz;QENNUHz6>^T<w(2H!X
z7nbunPsCdlpiUNL1T}r4k9bHt621c@;G_MHLQit#U`2)~F=>N)m+5RSP6<m+q(sou
zgn18+v<gOuIH~s)*IwvEc;(!TU?%>P17aR#8XAcNYK99hvG7E)#kKjNbT~nWCpd+e
zfv;^_j2s{2CvICtlCS8SiEsmN^oU}N+Z6WgJsIwOj75ERekwUZk8XN8M0Y-l4#uX7
zd^Dh~1;?>SN&26j-N=LLUNSC)j!e`I<uGrBoF>^I<R;kfk~v|Yn|cYFmKOb8eBY&#
zjY@m;X085qh;t{Z_tmqr2e7sVqn({pwpkh5XKKd8C&*i(UX$s7KXfacs{2Cq9u&?#
z;E(qeH)=%U;+5-Dn`z1)FRF@tNC$g@H9g$h%O`gn>j<gQJ67FUo<ulZ`V7E2<C9&*
zo62}yA!d$KTLLF&6M<PNf~nW<R~MTVufMY<+f%#8X-B^53{)BF-v$XPFqk8c6<JoC
zB*(>|tygXZ1?P}@H)D}RN7P$WK#U_a*zRc6<z&76IP`r*XL$>6*;tx!d{J=g{ycps
zzzRmm1sCV6)vabTIgfD2zWHRik-ucAkE7CIgH#oz-YVRb(Me9NOrF$ckEKQAK0s~z
zeMqAz!%Hl~GY-5S`lr#XC#IH@({^=%L$z1Z-M_foamdDBN0GA7$yV7O`2mS@jH4la
zZUkb%lN>Fv7)f%I(OU2>o%WKDZj@&rjcLm45sS4HL1+|1J$p>gI_yYTamm$idoLzr
zr#%{IS$p_9?!NuFnO5lXf2)0T(2BSsjMXswgfy8h8rH;u4tIwPFQ-SJRs6xUCVQF3
zJtXVi4FGS-qJY#PHEu~)aLo_(L*aval%K>J-gXB!J$sh6<$UNd`~u7Y)fr(;YKraJ
z)Z`1m<iP{jv6hqDd_s?X3v7(5HN%p@W`2c6BIVF*Vk=m4IhN)RkbfB*6nMKJR%KU8
z-ku$(?~LD^v{v=4y$=k<7|f(=aw6JPH9|8~@_`)}Rc!!S2;*K7i$r@*nU&lRor|q@
z$nHPjR|6iwK_2L-%=<ayirXeGA;4^3RHhyE>E+`e9uTrv=s_Z8p4SK%#6~zPw=t}`
z9PxDb5njDpeC0dNEuDHVZhW94fudZ6B`u1*|6mYHJS<6JfnjNlG`X1W@A9N8gtKg1
zf73VHgsgyCqaKF6dqZ!g2~M#e8;70p8f4riqv2wkNJl+obLK+Kb%di&_dbDw)ur(n
z?0Eshr5yF9Tt@uIY-hPqn=y*Wz%11BX=k9tFu!C>(9u3o{y8@wOqwW8(tj!A>pxR_
zIgIYHz_v9{_Q=*U%&=xq^j}s)Ij&a@5wy(Z6hDdW_(9A=G<?II0`5ByC2D5W%nvJ9
za*G*`7)7#a$}(AZ)OSUD){`!)8sbrz;rnYK-S&OSO_h!TMhnBQ25)!*sXNZ_kQp+r
zpb&p4OosK3{EVo}ozbJ&=s+XSsCFwx8Zpli5!LAK%>{rdapKK}ELJnr!6<mLoTmLz
zz@Cn?^l?5ZS-Lqrf9yBk0Z)=|9WC$$p&9rm{m#;C#UnE-ct`yoq%`caWQbqSwbo@C
z*MPlrBE$-|xM}%}-9Foz>ov}G)Ig<Nt-C?_eE(3hn|jkUv+mQ}6;4k#nx9n7!b)Y@
z%6^`T{YIrD_D;4@*+pDjtzneym(7FhGx<_zEX(TS3j=&<Qsy7ZbrS!W;G}gS8eehi
zX(j#T;<snNoVco8+q_ie^EVly!WDK-5PpB;+(b(76NTuw)CY){JmK)I3WEB&YA6>Y
z<y3q_;c!f41~2l+?ZJ<=U?h?3FC?saGwxLp6MFfvH(yNgoVmd3AUKzH2d5|bgY}*>
zC-Q2ue3gMx>oC><@7PEIT$_H60}2+ySmr2qlyGj?I}|cb)p8}>yp@m-IclWUR|a%U
zkNWwD-aII=_lh*FyPCp`62(-Yc(_JQ`}E|s&m?WrbaQFXk?5v_@xc3U+}Zg7*v|n2
zll!6<;^1CIoPe}2`B5xfOb-mSw;AEYf!wRHZ4Jm*b)}(wUOsQ<jpG@1LWRqLo^$2h
zMYLd9{3V+ILGZ$5|Lm8kejI1tHA0-|15Wm98^PxLu;VPm+EC*Y5-T>;6LF@F+rh+u
z%eNb3zI^#Jx2C#-${=TbygQasarf`FHtug8NxWOuJDU_f^TK`Y{ZB86n9sp1e{Fg>
zty~&2l9*U!=Y4;M*RLinm)>`1tlr_8=leGt6UFy8y}Nm5gF{Z&sNhysUQOfkLuoJP
zKea!PdLR4?ekS(;{u2yW6xJ^|1EWUb1s*hIQzt}7yg+k+Pg!_cVl|Y7_Pv;!n=@N`
z_(q=|x6j5VHE8+I&#RuLy}xiZC-g`BU%+7MhJv+K!_FBimxYeuDVOG?JgwTro&&yR
z+E#-#Idk#M4Q>&XMSr_np6<I#7BINS4vepAsIdO^NU^kiB~CeaQC0pUbXp4y%yvk}
z73I)8?d)^wg3E}YOM0v1$&(UpLg&kuFS|zYHy@Ojm6c!H5GCjpEa@}|rypM*yYb-2
z{{5#O;O~4?Rj3h#uTAXsD}Miqqg2h7bG=7-7u}Ziw}w60Xa26N9J`#;N~M_nwc9d9
z`q^i&WueyO$`gZU59yn<ZrG_NRVgM*^(zt~YA^@x47s3H%gP(Gy^=-Md>5mLdH1Md
zF2$oFRDDxTPfkzu)7?Q-Tl*dL(<}4;dR3;PTpJ9~>HKAQkp&f3enaYv%S`?-ql%u_
zVqYY8Tn27DNZ2)Pq|vH1q*r-Q`{!r$ANNIVzV~PIQqzljww%H#&cZ<Co;fo{LXUvg
zt6y!lA9Sw>6NhB(q~=AF)i%d+r1wzgruoeKVYiRoSr50Wd!YO~_siqWrM2bUDlWbF
zyIcEln7>l9;K`Fx_%L&3^PFzV=@hO$dw3F$Ja(f}m+1s}NR-_~eamOlw0H5^)8->x
zmV<UjUD9Jy{GL2{TIQiEeR3euNCFG2wX_USil{@%!9!OmwBX+uE4nS#dH=CK<6Ko)
zpXH&+z=xivu7~P&t#6^({&dFg)E#RNT)Wy1IA9i+mVJA^ld^&Mb2+zM=D~-%!dXS;
zk_WQ=Z--Yf0ybB&T26j0_FGc>^QXXj(qbv~LAx4M33V?kPKS~}W;d`jJl%y7UpBz%
zADTOwMqi)it?@T8z%8mWe6at}`W=F|wJap!r_V1=oGz`dsxUwI{Qg?iNegV_Y|Jg7
z-z?<A;~Czgy{A)jKQTd_c~AbEr}tjUvQz=5K3O9mEoZ!O!FsEqoPr^rF`GHlWqqlA
z9yXy`b2@)bseE}3$If9-0gOl8ddID9mnk&+d8CnbZO&T9b>WE?zaZmV6Ge}nmEG>i
z6kIi(nqnKB@!UwEq$gh4y!Fum+*h0hc>Ad;YLu%zJx6((jz(lbNKSby>m2Mso@d_l
z?*^&wy^P{(d397WnX=%KZf|e<f#2#DZn?d8h3VzT55X|!rH9<e*w5d1Vz2D`01NV^
z`54aRDZ_j0&viP!-u=V!4OpVX>?6HR%i0Hg+j2*{eCiB}JXXB%JoJN|;Kg4m%FwcZ
zBm01hSGU7-VwQky#mjZ3-MY=ppkEGsp5gujujiXSEh#RVHl3=qr!Un=cc~(G9t<=q
zUUyrRseW6WVod+%zyZh*mbyQ{e}?Kcx?y5+ouZ8AH;_-IiYsdr_x){Bx9?sVG?<Pg
z7;R5@`}S4B#y{)yrm{YJ%AYCs33z4zADvW@!EJZ(FwAQr>P380F?_7FoEK%sOHP&4
zU8QMuZ;i-Nw(tx>9Db0j&oI=TKHAMTv(hk#SwOKH2SbrimmBAU;gy~q`}SUkG208T
zJ0Xj1M54{6QYX_s3+L**TPnCwTU>kIX6n+1#{Ox#;s2a2O0dcF`Sf(Ze(JUxTU5Vv
z{Qn^1|46?7`wzS{Q4w1-X-fQw*RR#v)I0RLm)M^y+;vOPxr8me*@9Npe|mXh^{EYe
zH$Jt0y6SkXbLgc~UGTQfQ{oqumLk~Zxfe;hC#jjrKItF^_KJ-5eSIm?&|wu2uJ%u}
ze|)~}Lag8u)y^$#Y{}qH&r<4NAG$ZxyC9PAVU?4i+qK&pC7kGy+qwt;k+{Wmd~;HB
zWM3@0#lGj~xABMDQCeC-PJ}5{DwXC>Ta@z%f)Tv<tIFBzvO|k%%Bz=@>|MCLp>XB*
ze0|f)`}H3mNXSoEi36+=-1$QMFIFOQoq7e8+N%s77TkFq-V?Ph)GDWlP%7`Oc=|R*
z=Mar*_3rHxr>TzpW<9TNKeq1#{}<hV;b5XSZ0^z0D-f*ZL3{I)#(;PDUuun2Rkt;}
zwcqYDH?78t2L|k}tu0uu&bBZUR+ay5j+y_MK)=5!-q4BIw>Xk`hb7?b?I0<&faf1|
zIkjVkYnwa~F0KhWW|k+|&g(5>#j?1zWUt22?S%4xw4W}9Z6nWLmrYIdId}F7PU=TI
zh*X{LeSrTbXkW+7ZCISa^zx?Eyv1()+ceLu_Vixt<K-4zs~_un-23IC5WQH>pTawo
zcRCJA?jN=TCCsyrs`5uf;Xei%hBitKXBqiF`+|>rA@7cc$wlh9JF-)XRHpjazuUrr
zq|kzZ(A2ObMa$N-PxE8%r$q0bWqPhwMd$y;8fDjDEo?V6-Pp$yJ`8)5a{5ldl`!WC
z&N*^^O_>=&IalDzZ12-gx>r81?pai)a^!I5hnk9neX(Oy>w3>l=Ta^h`B%O__M#B?
z@<pKuZtsHccdJD$5k}Xog_G175xz+>KKvB>06TCB#bJkA83ixsJJfl}OYmB-xU}<b
z6T#>uIVE;W_W=1Lb@F9@{fYh~%Wtp#boZj#EH{))K`24zBdD}+zi^sW&by4a+d%{_
zc-!=E?$s;KO6g}fui9TGuPrIvP-vp<L=e@{aaEPLA2sg3P<>!T`NcMPo_SIQ{AxRi
zN=?nuvSg(?OLBVN&YM0R$h(BZThDpKFLVh32U0Xu=q=doQ2!w1BGvcP<mAKK{ohdv
zQ{qpyZT%5H$icQ`WaP}rbpVqUacj!C)m-9J<4MBys4-x2?eLNlBr!cjxm)kG|4j{9
zX!E_}V0+t2_XDT*c^t#P<X~1WUv~~D)fb`6@Nn<&tL69vf}#2J``9H9Q|8Br@%oK7
zLv8M?FMRuUQ&L7on(Owfy1ku(!83aoUW_C>B%r5T3=DzN7y)l_A-CIflJ+23O2oe6
zBG&4qpo4o-1tdP07>4<Yoqsr(7?KxoIwdV8sXjjq+-JY(t20;sa||yT_}|+GQE*r4
zP+Imxafjz8vor7xH#tc3XGLphvL9)Cd)McQ+TvCh9oti|GQcx&dBTIz6<2q`&On5n
zq2%dZrFtDoIC1B7&#ZylK+p?a>&obX`o4-@ujCiW0`rk$rQFIb{;|FD5f-j#pN4GC
z1YYPW`uV=$q**_X__YrTKGjOh4{Z^vH6b^QmSd;T!g|{e$;|cG+}RRzI2v&Ns;yR<
z{yx3s>h@I>J3BgxQ)SF~xK~?W(f#EuiS*Xn)4T2Ra<x&ed}k=6d4gf0g(T=JZoxPG
zWvdU4o;ndK^HFxQ&_mxGXpdp3LIm$k_W+sidkGPu;&~di#`G(POlOl;%~HUvEN;mB
ziJ3opbXnzxxZw1Ex`Q=c4);u2X&Sxs4*zm#V`W(lP64;f8*pp{;^(ai{q9Ny1J2VA
z2}Bm;0kvs80T{hazRCtL<+%7VL~We3mPh6!dr3=1G~IWjgt!Sy$uE}dt;_1$+$v;7
z_p-21zONCuEsVp3e#$c8^~+X^S(C}5?~2VM9n;~!jsj4l?(C%5lzFZqruO@*r`uaD
zTimsXF3$ZVI&fQFNTIECxqNwZkK<Wg$stSj4RO-oy)&wb@E<S1e{|!K5p3gJ6W)m4
zCY*{BIr!OAvpLbstqgN4>%kcQ(fAJfuOCiCXu0$UkF)WOnMQrp8;VE)t}D(2q+EV!
zUam>>d{V8c2IEBz;b8U~q*J_(S&E^F^ok-S*zm-hYi(Iq$X}Mw$F=$Vv2V`$Dc}Dw
z|9n1UcUryF$5u2_eXDbR>!m4QZOvCSjml$cpI9SpYw3mJ&|3_DiE*=6H3*55YS+;@
z4Zb@;2V+%!@6XD<glf+sU&_$Bo_A$k)S{VjPb)L;V^!7R6b%>eE&AtIvCEck+xK8?
z4i5C6{|bW3SmkQ+6^|ibJkC)Iqlq{TBuFcM{-k%7rOG(cSxz>!oL)^X@jl~?aSry{
zTNKg}QtXtEu5PD=<pBG@XXj_vy?r*_)T?L`AH#Q9#1EsP&hnLN%|v{)j}Sxy@^y+o
zm8<B94QZR+C+9E@pcTm@N#`4CwVu_uZ5&V2%^1P!QIvYmdf4m9uF2B(@sCH_-&zK>
zoeN&S{F&OPbO>}}0`C{Hx`jNX93)XD!q+?qcWk?+TrNL}QS<4=$Z9Oq1-qYvC784=
z4iFSws@>#j?2cZk5w+CpX=%`LJ{M|L`z&Phljo(hiBa~0s!X`gZID*No}En$bQAEU
zS0HhBR}0!Kw5fLhL1Rogg2M(HeHU~xNcmXi_zR|S*Hjs4HRju*)FJ6$cMp_AH->3W
zPQ~R194E(lly*&<vkp{uh3L?bK$U3(-3PsoEgo{+QW19|BODEvnk#P3;04oC1oIim
z2z5bwYs47~WJjY#uS>=0RU866??t8CjTxFgw$wt~>~*;~J$VhuYs{4sFu$^POTsRT
zOEXE%`$}%8_7a6`P{|;ed2=H1Cxn3E;mRLXy+dXK_s5t*EWD1Ttu)5moqEd0A?5Tm
z<vz7~U4d@^Yq|Z^^CGHA!#q1D=FiLxsYklr%Yv`iF1l4p&L8i+GWX*e1U(4Zv~hAh
zi#kFHDOza=mWfZ|Vvzt&BuPu|B1Sams$!djG6#?StRv+ve}qK1)m2iZslZoI5ztdz
z+h;SpkNr*|_0QjX<-wgxGwbD8&btT%xXUEe3rq|lZkI3ip8$ww3GdSMn{+<!sXr*u
zESeoxcgj7)ERBy|DUUL(d+e?92k4*cYnS$f40<;^+Q;#KgKNCmd2u4CBo}zZb4F`r
z>q&1%K{Bp~BUm$=5j2=E*(_VHe9hA&`mY8Lxg{7+G<=;&c!GLdt3EDKJt(=5Ax<K`
z2wQZo_`Zm!K15hZPv?6b$fk;XHuq|7aP6M5Y@1AHJ8GPR73|T`g6vd_g-Le^5ehki
zImpXKiEfHaQ1Btq;4$L3#wNaq;VvGu6J_2NubCwn_<juX9>gxRo$O)wbFe!fj&zkd
z9NucRKh8<n$~snUJ&uGpWN`b}s*V7a0zC*!4dUb~(8m&1E0;0<BCTQsp>0i9=4>)o
zN<#j$)w-WIF16-z^%<%2m%OI9IiTv94x!k34YTw5EwXoC_Oq0>t$nRB!YbFB(372G
zHc~`uhykQXBYSKIb%g)e__{^4JN2A-dU4ys!~;EMrn3%!AGvom&i)?Sd)MWh!z&M#
ze}?&r#nD0SYSXlOJZ49e$}oSl`32Y;Ry(87Kz1l7qTBI%jf^U>7;y%n8BhlMQ$~NV
zE|hl9wi4@&zHgUX>E`!tAJ`iX#7***Q1|*d%6Zk-A0H6@<e?{tm|5zi8yvOn?Meg8
zSPVT4$2Fj3prL)IpG%Hr2x+liM<1tzH78A(&T4KZ>Qcb7yPUQhi*iYal-KHx8HIWC
zv62pP!l(JE_b;cU-r<SI@XfYxi<+fCKP_r4Qs-swl6A3mLnrSXl4J}lqPuyNFmgAw
zdRNxiV*aVp*!fq(AJg9R@+e*oqughSlU}|hd2hzj7)rm~EPqPqvM1lEwHP^IZZc08
z>zxQ0A9n{*Ai!R)AL^56%;Q^cPlV17G|oG+tXkPq*Th?@_X=tH<U>1q?Cr!p>xUa^
z4N}&bT0ACOJpPzg9GAbrmn^t<6G!NXfp)ZkENGzLb6^mrz|-2SkVWij8=FsFjMLmZ
z^WrVHH&=&;({7Mys&D^d@7Nm{zwF4n^{4h9cOt|P&=WLlt8+68+X^tM*^UufvmIUy
z`<1o~JHW4lq%^lkaQh)>(%t#euC@Z-I!e&v!Lcx9UQi*0TY0PGYDiH4m$Q=l)9b(B
zkmth&dbM4xgYYzTa<}BX)I#wPx~5$$)max!V==8hDe&{Dc4H8>x}HB&Q`#Hs>Rw-K
z3~`!{pKK1zaCGP{zI}{c1y)sFW2dEFMRT^U%Jj#3{qwyekt00GYSttVDhIx78#2sE
zWXUBLRlmGaJV&U+n?&>&Uf|M9DjRN^Ykw$7zM0n4)V2?;O|xv%qPy1%HWJUH!!f}Z
zAEkUa_WWtbrR{;0u_Y1tV{@PG2hupXcbt~1{_`I{{QrI<`#*WUP|QC-{PCD=v-G2a
z<+zyfJ+^^ZPk@M8Fb1~YkV7XNl5lSZ^VX7UH}x<aL~j<Si~h2r(3W6TyW90g4z{yr
z6l;AvN3DPLZ9Hc<_%Ussk{IvgxCv(11DF*-!~jqNAd!wn@-0}oh!Dflbkvs<CD*Xn
z%$1m5F6Em2-jVbOJuh@9No?qUT5_ROY<P~aryX<+KGyuBT^6R6{RgV92IUWse0Jx#
z{HTJJIO!JA0)xi~T=%?mU-T}fr)Khz==due>!**<!@Bz~zG*hSDDv^t`u^p~-(C<t
zYNP(jrGUz)ZKfxRjQKuce5Lw%AuYZ_zb(q%s^E?MKwq#A!q;!RRWu!(?wv@|9b+1C
zu_{qj#QM(-%MTe9I3!hE%O2P>w+}8kzfHtA5&s+pU~n=77Uu>Ch&5*zpj`P%3n{Y;
zqLJ;|;+V_e@Q>kXl=&<kYuo?4TvD8Uo+9R~5nyr0`WPPJ#e)<by7RtH4i(}wbZv=J
z&FahKUOk)CUwtAOUmhZLnuw6?3)I~t#1#rJ%OtzAU8YuvDh1wj+TQN{DS6~ollk42
zuCxYyW_k9|4dY~3nVfUyACo_SNlBGn>HDR10gkalwqN-Qlp7Pt5`DMptTI+Tq6ZnF
zH!3%$iZ3#(Mhq5}J>#KM<<je2R+H<cL*5xXygQ}>FO?hG$y^TBRF}qibk0WTU;U{k
zIOA~VTh;n4svq(F--H@XyhvVIXdNpNDZLrWB^ufrj!bHO5HauP(J4wDlgaSLw2Wq{
zVO%VgvAH6(&u9ayQPuq}zaaa~fMWqOgjhQ2ru9f#`ao?C073kAC?oFiM)AaD#OV+5
z$QN1iyDw0zv1Q<gdlU@FGnc|tdIBX(g<CUk8JP#_N=jRQ<ycFd7opz4qwd%lI!)9U
z>EF)SbBAFSv0mvi=;n<!-(+l+*fpl+HR=hb*ldbEEqP-fq(RV42l%Ow$dpI?pVr=I
zHQ@*OstpiAAjwuP?GdpCD8did%V;;Cv`%hlTfSR}XaWx07wvr<lBlXRf^wU)jqB-_
zf91Lcf{@K<<r8&eM15994LVrb6<F<FM9&-&yjF^wh>xeStI6`UY!HoJ#m;@jA@(j`
zacyFd8}M#*F$chKnKd92pJndEE{i#akba=6Tt8N8C?VAI@Yn$dHB!ecoB+1pp=Fs%
z+?L%aYKrkgo9mQI;&#`jd;flRw9+}|L$}<$(8ss2V5~GUocBN7N`6!#_i)VP<6)c2
zMHv(iNCLM^a_55`pRxdXND*jp&xPhtyf&BT__UmROxCYWMOM{F(;t($y`TF@Z+yWn
zE931C18?`Q?Wo+c*ayc1fVFNrQCK)!7AIf95$h!b$h8f2STl64(FgC`QM+Eg3yaI~
z@r6{RyWsA5zj_V4fQuhf)0`75+1~Y~^yG#G%`yw`imqw)Y?UnHC;l;$yw)F8WHw?v
zX0Ica^jI3wj&y()kJlf>_o~f)G<MpSbc1a<9WO}gy_P@N-%9gigO-SsJZ0H3p0w@#
zK~7d_H+9N1@aJpis-h^N^f#&_)7X02B!B{oTrp1xUwS81x(>simz~AZM_j)tMn4F7
z%Q3jJ{M;;F&2WyeN^Y>r2y*IWEVtA=?7Fwn_q!(*9S?h{Gd0JpC{5)Ze$-7H%W(=6
zgFD}%qcD5#*l$PAi{oyTyJ4F?L^*1Yra@5N{(>>mN(M1&ymo7Etr5_LFMS@Sw;XM^
za5TkoTTVPjCm*{!HuV^Se4g{VP2q!%;@+(%B8hF1!ADm@cllqq;#kzYQF86?jVN&&
zj*4UUBX!?H(+G<0a=^g{MBH0SynGu<t7paYG^;5isv{U<m&E2s-!-)Druj_9jy-)=
z5rmUy3Rg6F)UOW&-TYo|g)O^Lk@38P{h{k&Y1;cQ#gUG6iahw(v2Tj;d)Ok08$^?A
zbL*cI1!hQS_4>_`)nKE%Xq0K)&2XWJ+;qHL9$|$?y4FdML@R~X8mq|#<HtHK)TFy)
zj=db3_s(#1p<wK(A8}uJO7(9&-^I#4pd`5>*SM@wZX`n+P{(He7W+f_Km?u-ZD`%l
z@O^;qlFGhfb6U0Q`JA!ZWqn{1UocwvzHn#HO<SlVGMZRnfhqN48YZ{N%hf8FKtcMJ
zMnBmoBQamIRv;H-(CS*?xSSp&9*VgtoL&o(C*^JNpmW1~^0kmcmkeT~qfQyk;9C^Q
zfeflR$@;yk#fk38vbv%H@~5}Ow<Gd=T?{91gw~k<ZH=jTqvW$tcNVtu*AeL<YzYgH
zIbk{zuXw;T7**oB%G^{KKTE6ukM{SJOh?bCPnEf81@zgTW=V*3R~9b`&T#BH+BHkD
z&>WR!uInmd+wZ>A_hc*{30C<6#n++{#WO@$gcwz?L+wOraNh&ZAL7q#v44wQJ;ZKN
zjIE-<1=BKPG2xcIO)iOku6plfG2|;Mt)JgLj$Vl#p}M(}@Z`#&`wOjyO!ZSZIYWmW
zlR^VjAm<)B8}oRWl_ccd_bgRpB9lS?itBL`hvB~BPUyoQTS4n$qjYzd`G3U?!h9Mx
zmM?vP=iB0x<?u_k5x)@I1UAZ7vIfF@rQ@=8wRzKaHS8lS^)tkG#t3>0k=b(ucF;a<
zPRLjNEdAEN`)~3gV$WTrX31CF?<UM9!rW!jd@sQeY5R(M9O=-f)QJCz+j36<+x|oh
zg)kr5k*|6mc6T-8<#)(Aj%>63w6ch0@D&HVj8nL)aq_jW!)!UNDE*3?8boG`92X(*
zH$FJz_dx(fm2JoqWBDJc6Q|(Vy(ioG6*rcF!b({JUv=m!?$b@)b(S;?xOc=^7iRm6
ziZbwDsypEbvyt_QKK#^Q@n`dkWQCXSDrm_6@c=J!R^siy;(nW!>y#?%h~*y26lNR9
z>>dAKI9LBC5zCMi`4#sM9rafvee)gbs>#41&!Bm~iG}{^EYI|iFAq|-=`|4N%ZWeJ
zKEoh@iRIBqVl?Qx`;^XYnDLw<fmlXUW-?&}BqmOTVwm>3Nnc!sC*Z*J^Ee4(8ZlxE
z!|9y{f7lQ(y8-113Yw~Xl_!c*79#?qNa8&KNSlbl9@-ZdkL$=pj649oiS>OYq6k(|
zX2P$QtNfevsRBe>z$<y>|AH_NxI&%%Mb-JI0AhYC;Y43?FTD^NUS=+6Q>F!j^<crj
z{W~RmW#Ox~FPp#OxM0f$KT1C+|6rOOQ<L(c{aJGLD~^zg%zh>+lfocc3NY;dr84-h
zA1cZo)>CJBTI$5#FnDt)2?m@On-8c0%-k2eclwAb%#km(`p8(cBKM-|*ADqz=zU#6
zgyqDU3xqEv$WsLLRflmH@<M5<cuExBCRJ427aOBfg{X`4PerEul&LM}y8Ju{lgYLj
zNew4FDUO7mrc}nf$4w^iQuuRvURV3<H*x-ktS^38+PJT#<fPl?)M6(U8FV<cnMmCc
z<YN-EfrwpV?)r+GIoPiD`L@i3*}>CAD9N{mSMV-Q-(qe6zFDD|)ktMfhPL$F={GIv
zn&{Q_GLL^aYOS5(YUhNu#Rb=F;QJbOoqDHiYcI>N{i}6*<SU`k8YcpUSx4YbPig|V
zCd59IWxJKHz4GF+AuL1577<opq^2~VDXx%Yh`F7yp3^fjlw7%&Gd4u%nF_|N!ZkOL
zN>ZKsW_%8Gd3KZy+?Z}qzfAo_MV1OLUkx<vu7Ol@b{6I;TSfkS*4u5NZOk`|lAF_^
z=S@p2FAsU;X36#rpK)j{{XT6`O-Xeb`S|`;cEcvoFZlOFF`<F5Mh;usP30EG0SSD=
zL<S<kH|kF(F(~4sQxB<-H@sD1ofA|<sqB%&ZuwDmI;X(*?BJ_)v0F~PGg*0PH8{7}
zMmlm8zai%cz_OM~Dr(R<sS9SsX83}`eA#v}QD?tDo9<j62C2>Q=8i2C$8zyBh~?{R
zwY!YF%@_VQ>J{?-xmHeLP0gDwGjnBg=sR45XoQH_AW98_kgx<xZ#LSXxEXR8rs<N8
zUcg^1eZaV&_)~tKU3@RwvlU@N2(~>z67CBUPflm=(CLbfYP*MHl}%Y&ys3`$WA8>{
zA|1b1Bol>yLVcMx`I(KiI4SNZ7l7AR%`kspwS}A<p?EHATL6L8ynw2Nmu;>*kniwT
zV0QJ1Vw3)#?|2h5_7}B?y~j1o+}+DNbGm{fPE56{j*}7)lr|?{H7#uB^Yr8=C36#0
z&H&xyMcAg{8}j2<Mac=nDvs;MPup&a^x$=yF$~eq;=F`vzoN!-DwLMl4ol4g6f;K+
z_JQ|1ivSS)4)-NgY6DBsU-=d`;nm=`A=|)E>2ow4W#QkIR7e6V8ScOXdEsl&$(h~w
z`O?fii4Ejd(|0&^hx~0Oq0j5yEASoHmEw)Eg3hn{z2xmqwGN&EPZ$jhITG0Lk&+y(
z7@msXW^43BJpSMoO6K>y)kKNA(7D0Y*|}qXPYwI^V}>z0B2G@UKNpcV+VqZQmDp;t
zyE=M*=ee5RS+Z$agspPETlJF>oC!)`6bf&E`IdaGrf|C7+Y_b9b>^h!u^`zY<}0Xd
zUl$T$IJ}Dnt*U$h)JwY`pY^3Ueh<GveUg6zLQtx{rRW=F6%W6q)Nbjr{2&Ruokh=`
z|1_x;{TPe(a6PNq3lHD`ZLv+hHe5`2lirkRpm++x@9Tt8?nIXuY>q+?VFe?}{qN`M
zhs-34bFz<AUaw%Tkd##tCXFTIC(veo(s|G5qbx7ULdUge_YR6}XdGjE#K>w>h)xo5
zbZ|@$W&JREnKlW5cng$m^Li6~=<s1o6GBAVu7~)Xo~yHvl-6b1Nz`sI)?|;b*njo1
zP=R+xiH-QU--t2n+1T#cDuaj%%^p2ei}Kc^0>iTxC8J@dQ&if3#1G9e)<BDL=??S<
zxBfQqU~(N1nr0eSuE@bY`MGQ;mXebgHbEm&bXHMZDw-rT=?z(7w<Sxx*{b^_nz1ag
zi^Gn?`ul<?m4Ww>e1~yzg?gZhh*e6GYnv#S#>;#do7-!5$rmVow*qe>xrt<7-)*{o
zW7u?qTQst4M6%XetHkZ`MK9+@;*HFueX|iNAN;wc5+hd5*^l}$jWzFTSp|cx=fhHj
zMptD&!qKn=5k44x;&$EM27EWziuCH;Xv>QslU{Rs;v=lGr4jrkm>cQ8n*BPoI#B0u
zUwLwjucf3hImTjk^#!t}32kLt_95{)ze3GLAv)Os;=feqlVL^&f8)BKLGM@-=TX8@
zOhu+6SI0h}dk>)uePTT=o<s-%pJX?&<8zoDhn}<C(DItzj3Q>w@S<`%4*sIRwWcCT
zsJQU?#g#i0Bi)itTGy$*tTZ#<kE)*mo$Qx<P-+B83|^2_<t9*jSt>HC)n&E}LUN;5
zZIv)WPgo={Do5v<2->E>Rf(%Zh^y(*PFR<ub)AG61KCI36=+jZK0T5D&&PT04Ng(8
z_r%b!lM32b?}mM612*C#U}mDm@Ww)AYw1y+U(`BwJOHOP3+SA>37z>#{wLa}hIXHO
z>?$0NC#<aAI^w#y%RL5km4{M2QDvqTb-lRRvy0jDXw2G%iz96Px5Pc_HUMIAxF`x`
zc)<su#SNx5C%I^9+MZD4SR>@DrMsV{s6T@F;#whL@o75r=KAAU)QfFCB>GPuyttB8
znHivW=GuCZ(^4`*cd9j%sg#JOms6NJeKW*WbpKPe?bU}w?DI#!!FRUCT<qfN;@mq!
zc@tu2a;mFXY+}ZivJfgQlzdso^tZQr*WTE>Ee$BO3=241eub&vCMSwmS|4rmB9Zgc
z1_5E4V;+(9lW)q8qov{)UVODrMD82!{z2eto>t<q5s`)Z?&9&j<%b@Rp^y$(tB+22
z%!O)yOk13s%P!6cRKdQ$(5!;l@aH$o%zZimL>B1~jy0rP9`|B?S*;-!fsTm49iAR4
z;zUlAtDLjAF$H|eaj)qFtG}&SdI9=WF#4y`d?iNQ$HRa7=aPRL6ky?dP-zmNHDT>)
zF2do(bgtMqLGB=QQ=wCQB&kXE-i2>I8tI`BQ&ZJSYcTq*cXn6jfE(zTjolK$2V}CA
z_!V2s*jaZx4I@tp+tntC^1bKbixzyvWy5u>HBkX&$(Q+KYVYTgdFO@&p!1rvqR0&B
z1K?{llPvH*)>p>SA`{eqEG_FTZ$*yv>AmVSx3|f^Xp@!~SM8D&@V&bEB*Xo|xPEHv
z#u9E7PoMW@V(LPq>P(z+9hA{gurxaUK;Abhp-_@5wy1v2`ig@C^%GH0#^g_<22Cw8
zca~oA!sP3jz9}J_ds-y<oErzSzu9TfO$A891mgfno68>&-NcIM*-Gs!1tfhw1opFL
zvRpS$d6WMYXKf*M0~~SGiExXsvQ}5V7c-XNn+WQ)rWo-oif>59ji+X=mBdBM4_)ZB
z1(%CAPjm!6FZ!KNAGjs%oEm&z%6pnQ1QM(FuivY`RgHRphtKzG>o)=NN14)u4CM{)
z0wJcduQ543>{dnrMLmlgTB#fFckU5cw>1bUgwjdk%YHz2;oJV~w5co%uF|bPbdH~>
zEa{|fVx8<Zy##_>*J++`U>GwqV)<P~fIb+qQP-NQch~v6WKMdvd)n9JVkUV-n`;--
z+9$v^rfdBwZpoAK=QUNoKhmxE?6&@ZkdVnLB~GjZQ1%V7Is_P#NNL^+&T9D{tVFar
zq(JT`@~0Zqm0;`a9fBNg71i#N=p~1cG%)Wv_kpo1pFXw^(6hZei)pjN7JHuD8b6b!
zvDL{@DZ$GP(qTsYiN3zZ#_k?hB$Ov+fPede9QN=4J$%GtVo*HD6t^5MO;e5;>eOeh
z!Wv;98U)o(cCRPb640UBkH-bABYX2M&Qqn?K~(A%H8B{tPu&j>%^kB&^<rk_4W9Lc
z_RByE83+hulieZYP>Ss%Y2WFtCiJcMt9a8NvYpo#7B0mBtNs$RnSdTe2HcfPRSGbk
zi{dsYI^x74bX5|xUT#{^XNMPIg!(kSfvF9k(;wjJGY(2DqUGNWt?Lf0d7U8&kNB0g
zf;3tYmRU&7am|I=`CYzRFG-guj6_fmB#NYEe@@~r)|;S-HQZD&js0M*lE7hDK%rpM
zK&7~Kn7)kQo#3LOd{%<5i6oOl&2wsvD5yvjDR!3)nh(vLuJw-ip<X)mR`tExn_;E;
zJy{TJCr+2-eg(?EzT$9JoJ3n9UzTn_(4|a@d2yL4=+ym!vEvaB`wk{T{#7+eSfg{Y
zH>tR#f5yj12^WXbk~G2mr%n+44Uu0sMq{He;nu^_dBSYvEoDG{rWo!LiR_O=O(tQq
zrHIb=X=iQ)3T}M(!;4@>6Dx@DqG`x&uq^Sg?pt!&)r`Q9h&?TPpO<x%y_qVfdU>0f
zzn=Pp!~Z1!@MI=gdJsN)FMQ|yfW))nfMTahgxQ{b7C6--NBhj}t%tVrByIJa*m>)$
zqW;`*nd<^1A=4J!OTQo7yMFj&CHhYoJM%uB$wz`{bY`2A0k7ObuAQh{dS0f-*jfdl
zfCrf^X?@q2y5vf*<{cX{>vUYtFvRXrANr1s2SJ;@CQojH#f?z?_jKf?z3C@tQ}jbp
z;~sQRm9=ggaZfzaGgIi&uEuO(p$9;R#F}KG4_ij!CPrjt<IrOCcpNaF5}%E6&tUOr
zs3@oQdFUfEjx^@=wLGxNjTf>hJ{{}QK6+X}f6#i4->08ZoR{Mr@aveDBb$6trH$D~
zKo7F8E!+tcRCW|&%T6#`^{4qroNeZFeB1^}Ox!JqtU1_m$twNP;CX+}TPQvHlG<X4
zW$E9OJs|pfTi3}dkEdOE&#RrUIT3Au6NT?{yEcqMYXmdVn>0iV>v#r^+RVSwhMuDX
z;>CZ2aMZ@r!1vqj8c}O{mc90E8+9?85Ci%yH%LEZTMjx6l=t3_K(f3BD7I%S(wgp?
zP2G*~3*V{MMyPO>>+F!egF!>QFq>nFVn^IKqF%<jp)>4>x%e7w!@@_VwF1&^r4v}8
zj}D35VjayTnK8K(3bpc+p^gXdNl)>_`b=f#>+qe%ncv~B=Pzjez3<9g%H22ilHuJ!
z3wuv^(_}|NFTdnmlFA$rhYKe!Rxo7slOLc*5e1A89tFYdwtW^h*SD~Z{|#5(AwSSr
zY`;i!wXBW60DMSWL`v}8-u0+sQop4Epk}*JnLoq2s?*-P$a^)Xyv2@(!w!tueaW@4
z)n#p`pH%(w?bqp*Lw6&piQXbjQ)ECT47HiYdPRnEGp6BM4sEv!tVQw_GPAxYOGOy6
zVl>reXgjKQquNYD5PupQ)}ChUeTbbfyI_Y90`!~iZB7y$)N$_U^xjm3Qzk17mAx$V
z%DZMbA5@{qi5}(jyEM8Hqvbnx(6hyxIp}m9X}SHu&WjaC1#`C;25OT9=oDU^-h9SP
zktL=r<A1x0bX>IUX`H%8h_3!VC41jfoYIFVEc=RE4z@Zx0+GU7K!<&57s~t~;x*=1
zTV;I&Meq`abqAZH)ZhIGEB5(eNK~usgPm_2)}h*8EduQgI*`07;1|YjNkwg~@h!sQ
zw`WJKef2x+jUV7VOQCr{gC_t6!fj_Z_HE~1r7n8A^{PZB_3q-VFu9R(v2)z5+tGS}
z^ycj2ojU!)-rhrAFZDJ4SbyJerK*UyR=z_~4lnX|=(769@I=<=bOP@JPY^CtW<QWS
zp&_4JMZ^{C^tS_w?86YeLpt(Y0#+VtG3LB_U|G#k6YsVaSRe#NG{=SvT+KA|c5%WF
z60yY3u(ZLliy~bI9&mn=man*n`w)wlk;Dbx^uYtP5jfjd>cF4zMA(r8b`4i-hi_T6
z*g4=2c3K*&DNA0AY1CDooa5>fBIW82-NFmbl8sh%T<9)0NT+i`%-lV?%N<-!_Q`h_
zjytaFwW4~>sQv?<vq4gO1;^2bSr6AFJ!nXgN&Pb4(hkV&(E5@=4N2E|jFEtNQ`3*X
z0iltGo6Jq8tO!f#9M=`2wy(UdWIY<c(tgB>pf#SRcH>eoJK%-tycV=!ctl|?apnN;
zCxYA>NJjG;-9E{o*5*l9E6RvMsEy#X$bZW0COoYQ7&hclr<3%+o|@0EjEVU@b14=h
zB%4`YoFy(|I6Y;Z1#e3EE)?MlJYpG}{PGMqD>3Ios1-McvCce^^U*_KloSenN6+DI
z0bL?BD$@DGR~$Uqf}sN4tVKYi{R~E~9+H-3f{~*coh$u=)fgm4`WPXcVTKQ~_TmVC
z$RxShEPP|wyNYtr?32!{_To!Z=dI%(3P#gHZr!6TwAR(NuJ~m)ZMj-PyBZW+Pu(V5
zW$w&DMB9S7iusbD2Gv5M(yDXDg{3`i9Tu1^YSX${xj6pPVZ*%*%<YomauH`S{fa?>
z#6PE)%X#Bc6krA+8_nU!dhcgyA4%~<;UFF}?TfLu<IuBDDH3L{&hRup3UX@-c8h?7
zL@EtU3>hu53|}*=@mHDKQp|lst6ZF{6Y$A<;IA}VoZKdROrR{KpX(}%_(693Ik)_G
z)q3bz45O!#1s{~^E+cO7z<b*w*U9f^?CqKiwzxsmP;Q4fZri@-sdAp?P^%(YtdV5F
zA2LR5;>+6f=s%vNc)1q+hQ$tbdyadR=dyE#UshP;MKUuO&ajF~!C_!{x&0zIIaNo8
zbQJe$*Z5)_r|z=Vj^8nMVxf|w&CRviwi#t995%KGHfExM-1EU3iuCwj)49WAMut5n
znm)8t#SR9Zi~1R-{Hg!`{rmA3e)9a|&y=5jJ>>BB#ydz;<cfc}pEG-<MA*il0<GIa
zq><F1^@5+slUZYNV*hIlv!dN1g*#k)EkLL{z`r|wcdu1L<>_lhjMI|5YZDC5h+O`P
z+8Ub3v;4mOPK)3yPSUROjCC|82Q}$E_}I-z-7!FRh}Q)lnu*CUw6}NwLNixCdm7zP
zYtml39wIjH6XMqMLKBAF`({`%h_*e2b5XDW(%eJEuFftMs3NAPF^LV%9YOhL8h=sw
z;`5DC^-u|m7)bTl*5=83Xto<RBC}P#oS#c#t{T_R&3^QeY1Ui2j$wrP(>QH88kZxk
ziY9Hu959|8_fp2JoFn{{+#qmF4;Kw&9PK*U$+kLFZbtB^D8s$uQFvfFCtv9z)kbyi
zN}Q#+inNgF*kQa?2GxESbwmTNFE_{TW_eQFo!|Grp-0I?9=GgifUKV|$nM-Ev5~sg
zmISSork&)b9&=mfMEElpBos3-GCQQMlZBp0?(Y&pZrrsBM?*!L<2Eu0N*|iY5Z_GD
zvtJ}JIgP~?V91fQU`Uz(L~F79XVf}6pBHC&`U(0PfcjXrl>wXJ-1VW4W5vEYYZfS1
z6$8=2My{JKeFZQ4(M4dc>B*dUd<!+X9d^0!Ej{}%7J^dvnVZq(>*a{PiyxBXjrBE@
z(78>u_PrrAZL*h9;p2~C8(9O^^MSW>$13aJke>`v^x3U%)c#j&sk|8xj=OzvG2+6p
zCPM+a*oWPUB&O^CH|zmFg(#QtzT%Q;-@Jwtp^DqY8Pen~C&JsLfBWuami#txU|iXz
zEBlH&Zn6!he99q?yq;Fp00P$G1_A-Dd=327mM#nyrGKl$;w$bXVWJg6(~Kt*zv4D0
z$=pF0_Duc@^xpmc#Zy*&s|XdIMBxD8%O38;xv#j;RbO%JbCTZw3)&%%|5ocr0jr2Q
z1+DcT5Mk!9)DI~oC<{1haEok{8v<IeB^s-O8<dNXq%88;7D@C%esue?o%p6u*$T2c
zc)FcXfcwTXjjs8Md$)$9PMnxku13aE6j=cN1YytsUaxiyie5LgO?m$kwABy8zilA?
z(}-L^WOjCVh5PWzd{z16mjCi5n+2;LKY)e;71wza75&JVof!NpaX!GFc1I|rFWw$X
zb@;#wJK&5`z<L*Eb*m^m0jBqaXPE?zlBE78kg*5d`Kt3>03E=EDEcn%ofWYHQ4DaD
zPmvdoaq=AiaqyJOCcfhC4l44A6Fn@zkcRn{@SJ_{92cVS8tK!$VQi<j^7U7o$5&kM
zO+^u45%7VM5XE!eKT_lpQD#dMXu$vLOUze&_YL{j%fogQDvuOOa{z<Lh82E_7zr<-
zTM{Zy$Ta?nD+%|4V}ja>L(E{o`cKQVT}BWE%c6m&IL0b<fKYgZYa_pJGZ_cJUa4$1
zGL|C=!6Aw4ZwONn3#BH@v%IBn*RM)|Z}bEkcQS&pStJC6YaervC_TvL&Dx+DICx6b
zD&*w`-Z`RdgElheF80DnlCfQO%42L9%-4UBwlfSs+CHTNghCX!NjJfp_(5@-H}R%+
z0W$U&g`h465=z&TXS)gEE86hg6vvSNkFqz9YU=FXhM}ma2vJc`6w<1QijY>O7D7Uc
zii#LV5D-#Fh6t$@BtpocARr=A>myVsL`6VkQkg13B81^lYQsE)LI!GOikv8fBRM(!
zHhq5Y?|avJfA9L%_fJ==<#5hD?0et)+Shee!khnMs1wQ4`&;McNCRK(fJObSb3hFU
zj;vA_&p;YplHXruqF;+OROWKPz`C_J|1%4JmJ<d5r)*`zWN=|IOxUMugV_VHZA$mS
zz_~Cmsyo3bR>R9x?0*caN~GEcVug?X*Onqmgfg-8<KCcFlI9D33Nk08p9_T_^caVK
zY+z!xWIVr6jY3RSmH^wi(Bm%Y6_kiZ=(68PA3=X$H=tT#^<LOp(#ldDB;sGXgtf4m
zg6D|m``UucRU(*2cFL&U+yCChurI}!!&~B@20cQ&@@QoPI``RKQU?XI*2nWm#8MJW
z5=-NOj2EiBbdVcq^OIBu{i4Xnozls55a{(p^toe22leA%T%_+4*@JXK38}E3NOtT$
zu;D)(p1-?rDCu6!r_0L8(?<#DbC%ygVX<t0Etoh2;Bq-kae}tW#{1m}6Lf35xEFgn
zTV8Gdx)6^2<btmqT5q!0E1U0O#`5wXBKDM(2OU3M)n%XKY|u7F^gIgqgAuJemjH=w
z8JueVf9s6y!r<x2H6lL#pKk3;!D3i1XL%C%f9PQ#FRh2pf{-Cu64V%-uPnUI-N;)h
z+KXOFJRMRPdYGeWwy@%x*`}l8Qyx&1FCG=_c=jw{W78$xW>D6#$UG`kc_dF(>5#f9
zSR!<zOTprv(m)3ni}ip)9>V|D*`|XVV$acZ1@i?nCD#FSQl&R!Nk!5WsZrI0*pMS`
z7~W8AA}Iq~xz!ZokKcQ-K=*3FkD+D<N()a6hnNlDiacEs+}9^LHk0$_h5j$?`V#5m
ze-xh{!iQYr?(ZQ?h&F^oN}XXZ8$Haq)k53QGh@v(#K;X<o@?)SF`I_1yRSi;)9|N)
zcrO=G7WLf3@!s&y1kav6zO}!js!h9HZ^j*VQG!1rEA!i(4kmB79p+iO7X;@e*Q05v
zsyt8yYk8#he)>mQcK+89+r!RvmuG#(I=%X}^1;dg&y}7R7n}u(!RzvVshZGMA+n6W
zbym?fpWy1Myo=Gi7PHQmGI}c0s4h~zQ`mK`m%8pzs7d<(r|pHswyL!A+|#mH?~%Z+
zlE1pQheb+_Jc~G~p3s~Z;BmP67rki`m^58X$5(eX6DBIt#B*4Wj7<_LTul#mSOSiS
zW;cLC-|m|xg&{V-WThupO}H?sgC(!;@9zq!%`X@%HmJPz*HA`qN4Fltj(!%gv`7;M
ztHY&=eAN`Gpf@Mnhq}e8Wu}1+sPKA3fJ-ZHbx)Nhr1LoSM6K1;yxMqibEB>!|3djd
zrD^SrobP(GvIFz0e>opV>&GD8>RZn*HQpBJtz(Po-ABrkaLYohZC7181?bTu^427(
z;YjJWS6XWEGn_JFW3<>oyew24ekMtJq9Z)aA=c$JD`$uL)!di13LR`h4SOQKiU&~B
z0aw$O;nmtqVyk4-Vws940^Pcp2HJM?ugno-ajPOG#xu;Bv1(LeQomjuZFP0Vd|Rs*
zNJ;s7`N!n2_IFJCyB;c2bVS@dqdVi#O2NJq&wsib*HR^INMFkhK?SLx;x%UoFX$B`
zBPS82sL!<r?d)NPp2{JYra6Z?zk=IF6{jl3%pPRyXr|5`Q_kFfm3ui-2mgFNke2eX
z4QYk=dRME-?2A^D`Z02U`oP(`uyT@ax?~l!PPp1Ws+rAe5u;w*sF27A>KdxQwj|dI
zSvH9#;JcWsx1X&$k^9AB-HCaI3myB)i+(Eo>JDDNU$Q7$IB?G)U;!SOs*bW)oZjRv
z+U<XDeJ=RkKdtV2fSsv*(v^Je@S+%9myjK-hxS`$tlUT~^!{05F&s7v$=VuX$*8oF
z+>oAR0Ujf#6|o*io}#&>D$`ao<_~PDPsoE;8JU5fqQsq|X3L@3B<Ug3th2dKs;y%N
zhwKjdAKJd$vgz&`esvALe2`d5*6499ZjJP{mM2+Q+>!^}sL3A<+@NBJ#B0WeU8>Q@
zmgiAMckW5CMw@M$_--8zvEk#bqF(17g>4q`S@(3>>UYM6dhG{e?i!V=zlEI^CzKWP
zpE4Sd#UO$Zpeo+gLtBq68mJU6^yBUUQ3=6kEZSOhl4TYmFz&?N6>G{I&Y)#KEITC@
z`K|BUF#xoI;}Krw+o%1_T@F0ec`qG|Aq*gyUkGPad;<Pe2X6(h0|7A?X;SU(TENs~
zQ=ed-?x<0^BJ9-ANi(n3)DaY4?y1;gzvT2!A9i+CEn#{+?G8737<Q&Rta2jTjdTIi
zg|!WfvEc~)9K15I03*xj*NL?~b;hW4XALU8@<25!DqqHtHf30>fBaiCE!io>q4;v7
z%aF@APnL(6ZFf4dFG6ead+UKjLd*ic^VdjC5Nu=hTX@Md4y%E;R9h(6(mx?sf^M$5
zpa@vkAXtI6+?1s+JAq}fzM39HR<g1VB(7S{iXOgQ5EvRAo{BuY+!<ox*HW=C`KQ_{
z)h~Jzj4O~`e9y*L^W`KFvIzg8L+}+A)a*?Eq0)t6H0BJDThj1qRZSW@qMm9W%~6q3
zt5QQE(^oM4{4P5(C6c;XztTTV(6*w$;o<DmXD<MjelC<f5>|`xRhOwNPHGO}N7I{l
zYcWor4{r_XkyvR+X`n4l2&gv}T~L&|i)t5mtD{@5?dD(Dd^4ytl+SwBS$W5HG9vx)
zu16Dei5ofRsBYo?(OPkeLynb5VBQ(&iZq!Kg(vTi`kADjjC?fV+*|QzXxC||`5w4)
zdUf-=yrOZZiiV(*CxaHu`eYv2#b&R%wdd*!ayt)>wne|foScY!ZLq8NPwXUG_|2{3
zoe|1I(_S$nPKjX-LvWS-GJJ4fZ)w=BnX2m2!aHdNd2Dt})B>j;U$6JEyI*o$_v3TT
z33$lo^e}cmA277^fe$0>hSFfrmwWA)eijX*8VXyTNzFMyzC97jPsqz~TJQ9hbJZ$x
zY6<>zN$}j}V!6w=f(>2ek)@w_=6tc8yH`H(`k>x)Z7X32izWWozyaT3x=5H%Z4<>>
z*yhXRhN4YT)nU}VTdV4BtSQ@YWBd={ZRcIoj*^FR%ShdRy$=-iRqfBhFgCU+Q|T^K
zS}Pn1YEZ@qKfX1YumVK^c<RirQ`66}sEkS#DIWJZ#UGILlxEyBRR2)k|8o6JgW@pH
zUA^1SKK^y<CEYn+=p@;PGz8K|i*QKyMCLLEvGXqJDwV7WfKP|xB^<%F%r?@~$%e#d
zTn{W!6EP9ErE{8@5EZ!e!*)hurE*)VZ`Ra2Vy3+zC1D<NiyZm$DKij@oerw5hN7|$
zT-nMwO4|r!P;=kxx8#0dKO%dF%o*}p>9Z4ZNSU@lSNXqwt%i5+LqrpK@xFC%i6GfQ
z>&hEHgWD_$_BA43s4;$=yRsN?BL;5gfqzCjO+EF6T#W6;N6#e?D{pRJrmJ<(f*%%a
zo4b9JP_yR=Al-al5J!hBtC}vUrbwnnnvm*`s>|A<%$814YS_rdjV!|=<XlLrNL=`&
zIgew5uje{Tjr@0#(d$m4UKG5UsCL@hZe+`Y`V$DgBASeC-2|N&3*azY(3%lU+d=t(
zyL;F^+m{f7v_F$9s{hfT9P>LJaD!=7eNCe3@DWWE?XrBSy4+#(^ZhrzAQ?W~yPYn3
z$Dd3)a_))7(hdm<RGLu{eN!JBb;x)2)!F;^_#Cn#sMpJ$r1H1?`<rud^emX|p&H!e
z5d$Qxt}^<6Vz2WfI#&d8+Ijs)xIte)OTzNp?G{$5rQ>^5I7hv8I)r9b1C|r}JQBMO
z-(UbWgq?1-H(xi;>PC(Z{Q-G>KhiLi+(7$$`8ed(#=n6ji|$I!8m>udi}<t7a5W|2
zjj-$9ll128{TAe()WN03-i~P(wtZvXt%pr$Zz8fg&{hQ{fMmsN3&ViB2}8;`=?bza
z$Ky~BgcZKxuZqj^-RM+WWNggg>iSM<tb%S@)a|37)t3!$u3erEJL;)$X)9gV6cwe?
z@0vQ}MyjK-V9z!p4gS>C^Q}eo#44_{YA0`Phl9=c3?q!9C`eFHOj(D<GM)~-EWlW9
zHSyLtZ2#wbvTU68RUuWOre5ZykLupv|5D!_Cg(G_FvRz#5H8K|AEKYyys*pX=K_Sy
zk(eOYoRP41<j<I0T{e|0WZj@Rn6|C?UY?;pvEt{2lNKf>E3lU%*O&|Q;&{D8k0aPh
zvvIq^77DgEl76Mn!puS+ybQn9{$eVhMAkn*M|V1p<92L=5H(>#vm{=bB0&uOSAx%f
zB2{|G-H1=azFMRA-hf#A6=YKjTe9U-E%Sl>Q~(y<CHq;G@r&R~<oZTY7+OVaMNWkz
z&2U!<KCgcE1Q!2CF8G{sLnWWsw4)z5n>bfKddXkuXkE2}?LyhuZS9XVYE4VMr+l@z
zp&7NkD_wn3%lCP)0zZT#|Dd3KPQ0X<JgHHw=*R>M5l%xy%C0ufPS(lW%HP`D$gkhd
z_vtP0)d~^WJ*knyR4QmSifmR8W}{h9?A>TG{5h7O7;<`%#kl5B%y|<VIM^`tXrmZ9
zkg078%bq>-`&yeF@-U#az~eG4k5wcYlUdYg4noYR2XwrAz*@$?PSEi^5D&mu%N4tP
zCX&DIB`R#0V>gkPb6BF~)-Q`O(LoT54R>H*yQmJVb)kXQy~?}4R-?bCtbTj7s{BbX
z$e|Yv=<uLW*08#iE>kR_pE+bTX%Hi8`zM7`FfgA9jT>pHW7_5iwK+0X1-_oSP7)AM
zo}hmnsm^RNyt@h&alf&!UJ<U^!72V$AIJ*<a2b^Sc@=83>Fepr?1$VhpKI^<1fm1j
z6Y}J=V5!%I2nOxX<1a^qn0tvbvJeZdm3OuXo=d&V@`6dlEfL+%B6Ko|CF_FV;NMK2
zWXPPfY30OvKi+TRQtT>jnXXP^E)WPL`Z=Mt4^St3vtyK>gu5f`Oz3IRwcoNX2m>xm
zpK*2{aEZIj$4$z*2qSW;dXF!iT`XN3$ZNA6VH>5BDU);5?X~Np?{t?W$1_KqF|*EI
zW!)O?N$m~6diDx7dLMVEty;NIbp+e<80s>U4X}M?fRO;~1A08q0E6RxL~fPDrK7V7
zoA?RdVkCw5vWrK?5}I;NpB>Hg02C}aGWFskq|sWz+G~6iEvUM%u)ZcGVrvQRo)=s5
zb&q}hfoZ*e)5FuT4R4jRuv(_DNI6uRkxGWh)rg)XQ46?V(67_TSj_=d?@f7Hc<}wq
zy_G6%mfxmfa(dIIKL$sm`o4p^^f1%ctI)OE>BCs>>|KiybR%J83!C5}A*L^`TY?^G
zpqo)CC76r6C6O&pHwfTp<gJN#m?9M+_1hKPd@#((_N}>fv^y-q(|FO%2ioe8{L0Sr
zB_&tNGXDLW?)zCK+=&;4X`j($d0C`*?ncc)?xBi4+*D>5__iq;jzKGVsZ|4QRc5pC
zz);9dPM&W^#1>gqZ=HL=n9p49t-R2zYvK!eW3|86gcM{4&*bb6h~tH}FL=ywEkXYn
z^s)g3<tJkHg$3!$P=-OuhOD)xtv4NR-ca1SVMncV(&06FZe*dr5c0olp{$Iz4CTY^
zM!!Y4fRjWr46Y4NHhK=MQwt-N)wL>4MBARyjos8;3WEu6LGMiVgOsz~k^a3g&ou=Z
z<9~T%K`RFxlGO83Y#T{gtho%Eh^1nv<FSUKKrBxt*)Cj~`9j^nrF9C(EVAU1a}%)*
zEy$5ydYZmlmH1cQgWxD9-qs4vOwl^G_G954_A#rk>P@=?XEot2A}e>cO??pDI$|Zt
z`F70tY!c8s*)m}qq$mgb{hC7~%>z~T6A{mQDEpZq!dg#`iDKOM?D12}R=CljDi|up
zwwA+7o#RGgv6@|Y7}i%F!1cm**``FH*FH3ina10*6a8`%i;lA{)xM3hr;uWQ5{U#G
zYWphdUHp5fyI5;`XI$M6bP5I#n}W3alH)qOfB7K|9emU$+uxtX#Qf<7;b~QMpT`zV
z$<pKA)c*SZ^l@BsXV*_lY%K@>^7?cqX`|i36QGxpC0q|OKZB=<r9+ydnEOGM^6ga~
zm1t)!=eq&baj+rKq|+usW8iW;%lj!hb%pA1Dy)*eEVww5R-|y{eU!BAugVzlS2+ri
zu;9#^3>o<$U$t}!Uo9lAFyj#{hWpjuI{z;GNJQvj4Vn|Yf0HXolTNA%=Dblt2t#Mw
zLKjQEC-DtctM=~#?jV2Jc-nVajO$cmh4pt5=C!)5MT{Wi<f5tv4A(ldmdp|iIcVZX
zB$te3=#cFW>bE0L-%i%3gz7eING2YbQb(i5rfvu<vEg@nChakE8~fK_R=}ViSJ6{u
zQq!uP^^@$^x%OoVo**0Cmz{E9MLz2eFDWUDqlY1i)l$qF(JmG)fPJsVAp5!L@c}F_
z-yoRP)C;ieo}C<lEkb#QtpG0;r&hY5Ff2XkF_!L*CCk(Nx+ZxmI|=hE9h8|gcZDW2
z#p+5GIlgvwkV`5bHT$cMP2H-9_4LMq$~cY_hx#I!3j$8)Aigc4|4z5CU1;*(I=9_F
z5=V9M^Be;;Y=-z$h}&-Sasbzb3(C0$BMehsuY@NYAsG|x(V5M$dn0zExlalMc7)dQ
z)A2(O7j;hm>R@xg)12JccCK@5u5d8oD%EaP?V4*b-;wH}<|XSzFzdv$H03zg8FS_J
zUdlA}JbhAC-1uG^SXD>aQu*{+Ff>EGlif`kvivpP@lHqJ@$QO;`hPJe?`Xc`4U$nP
zG^Zge-U-0Qy@{?*+px>A6cvw<L=>}Na#%-MRr%u3+KfAnsVW0`YszOD5^g!H+jpZX
zq#$72WI43{M%4s<+7)ISW>b}R=@qUw?cYR3FG3sb2(vx1-heQrh+dm&SbMuG`N}js
zS>F%#%Ba0WM@5!c<GHJw*5K6dz#_XS{UWDsQ3lu>l8~+H^WT!<kW+MQGnDlpy<NCd
z)!HP)g36b)jSL-Wd`LZ}a#B#z@x%53OB}?jL!FHMzb?hP0$B+~n7G+#Yw>u8WY4T$
zL7ox6BsA(ku|eAweQB;UZ1z(?CFd<b*(rDsrIDFDY@OOTw>huuwHySW54PinMr=aO
z9VMPc5kNuUgm*5Ua!`gVz8tVuS~OLu^S(a~gUKp7l@do=rHzN7za^~h!&hCSn2$3n
zOhqnU{*6MTb5&h+4AACd_41aWM|m6Tj$0)+nw_gJF27aEDKmHGRHb?D?#!#p-q{({
zHRaIKb>u|*qDQ*w^ky;Um`N;cKx5>EX}m4tLVXxQL+ck=tEDLpY$IrPxpkk@)@qh?
zyC5<9FxwD2{QH(j@(Sj_@zgYT4SAobbIZMjCA|{Yq`ab+Atxhr-!mrH!U@HLI=n0o
z3Sj&jP>Ds7&1iWth92t@v8IO`GJ+WQV^$&`!Ybo;^L-N{0lB;C%OQvQ(;i)H``7L#
zs-F1LpN2)|Sa`Nv9lvx<M&3)bOVRLTe6^`M1alaX-pF;vj>+m{8t8`hF6qXYKq{9u
zd68RkH+SI<g{J~o%v4b=cZD=CB$wRP+)_~{KEEl<W%pA-cmDN3$^LQOSvtOa4i5Z9
znd<YZD}0o(PQ26?7!j=(ZBwALc9vK^i~b_8Jq8v0D=+Z%470(2P=kESu^J2eTRV@}
zSzBG(pL)I%%cYoH)uH9W4$A}D)$dz1tGOo-333pNjnX(<Ua?V?Q3gslTd9z7E}aT{
zq0+;C;cR#{*t~<g-Sc}=(}S*|$_{yY)l0=R{2uW1tkvNe^O~8cI|JK-C{^h9<aEBS
zU=8*?Ju&)5O>uDGdKJBivUW_cFrmeG)ah18^c(oWlRX<Q&kPyw?NzdI*O(H?XI))Q
zW`X5-9xl=`=YN^V%%s&;_;Mh(x@e5>RXsqgqomQ7Q7M<9uQ@v7&Phf6X?fobd$D-{
z=kTD<ozm?yP;4HnJ+l>ZuJ1y<g7QyHEZkIGDeRseeRutf1LxdG5<0f2J`-OL8Qc>O
zQLFYxHev3^drf&b5r)Q7BwIKZjFn`A%NcpUp$AooIek|*Vy7fOchlv@o*AB>hz{R!
zV_+W4J(qOelQ5fDsL8pQPTmW$Qhtn)r-}#8a0Yi;xR5Jepq*H_jc<7gB42{sFpyb$
z`sc|+iiZ61M1HdizMj7#J<<Cc!H!!EU%#OLl=UAtg8q-0+W*UJ68@jeCc+bzB;})j
zHnG$i{*5h5*B<3R22jNhK!SZjlqvkUpR9!Y%Gq^|(z!=<kW-}F>uSr8hC9;tfb6l^
zn&pHpGVVSPgVfJMBx^u3&I9MS&U3VbVl@!k#^0(+b+`%t8=>WY28sTm*t`>>Cm0`h
zmMf(IOjsWW7)p@lwqA@ccOeexX$+Bp&-;*>GuUt(72-T3mOz;r_*-W-TnL=0PXL}P
z82#UPRkWYAsq{Zp!ZTvcSLr{H=PK*0-N?!>+{iD5xall$_!i`+?*N`0^+P6h@>)SN
z^2|Z~kAEQz0O12Z^t4c$Z8=4hGS;-~zhCG^eg?=^CSFkZ-^dmNkS+4~OL*Sdw|J>I
z9~sC2=;l$v;r|emUa|l4irvJ2z2Zw~Y<j4N{vJm!gQhLJ3W5<eZ>&(^jcEN5qftHW
zaws}%hb^=adF6x1<ZO+LmI*+No%+dtp7;}ls0!kMh%mSZqnmmU8GosL^dGnnkSoJA
z0FE8gLc^xYfvxqSExSt^7dK1aZ{zTZ=6UZ`uNr$@yao<HzVLk-B@KvzTp^SRXTIV6
zHm$2&Nc<sve@0qO)@F&73*kF5n?ZE>1B_7x@@j*?3<m1kd6c*4mrC7v($hl7-u@Mg
zG`J&^tw<<foQEu^cS*^}{{-wt5e9G>*m6}{i%j11N5<K5=Xn>_1>4{e9=t|Gy?evo
zI^BiPa6LjszmJ-S521MRJn|p-aJ3uxA}~4WZ_Jor{0F$&0A(I!7R~A4aQ-GdMBc2l
zpaP`UgTiV)?0*eb;pcw;3z7RTxK;}QVEj^mj{~6<I9;=?wvYhPc_8Zj(XRjTR~V9E
z>HAyED?;^I;8f3CB!K&dm$mCp{{Wv~jJ)!z+X(BCGU7wrnSKS&X8>8_2y&);9^_q$
zz|OIgk^aGWbLnuC?r|gc-2MkY-<SUJcs60M3tX%i+F`D~8@U%qZE62uj~(`fK{SH-
z|4Unn%<wow9Bu7g(iELo_S@e&Ke08jNdFY{#*HN_dUTNUFm(W2!pxl#R=(BdLc7Wg
zgS!!?I7pF<-=bgTt2fLe;QP%Ibr5?p8k~&hnJU=YTy`@>dlb<b)td$U#26rXLk(Pi
z2JZ4YrE>*TmK*st6J?3<d$Y1a?Z1Gd1-rx@x}AaHLi)Iy3^s(sZ++?;@KFp!mJZhU
ze-IUe^*ZKda^5G42UCfc;zZ$0D7Glh1rP>0exE&`b3Fxqg?1a@+%G`=YzjbsCI4@o
zOB3^;Ke{cB{wn-GbV$<QJs;l^pK4*E0EFsbYm*T44bBB5Fz7C+iF6$x`}0g}laulx
zv8rdLxcmyUGWi92Wj_Z{Bv;g;)Ts0xE9-RIc2IE@UYTM~o~}_*;&4{M?#}8Ig_Jbt
znD-z+%JFX{mOrTvh!S0rk<Wu^&0Z<$$Df1cgZD88=%9cP9PRTQPqjo_j2mbeo|+(z
z57>iL3MJ8Rn|+8K;B%s$U@2pKdLtRPjwGCT++AvmyOv=W4_DF$oRbqAax63rv$abL
zlglEuM%a6~y3rvfC^k)DHVmx=La+)a;p>05jiZ~?g^V!Q;Coc;t9YzRzd7(TRqG8Z
zvxLb>Xy$#c3a@y`Np2e6)ED{H@Y_SZ4zJnAeys(cntf{dFsrz2@Xou<H&gd+G|tfZ
zYm1&5dJ$q!xOPOTSn8tQGNJ5e#CSWg6oWb(Z*g}%mZS1-an89yUQBhBDMNdSLC;Rw
zW=_m8G^#0w-ZIiuJ9Hl!J%PVlO1*%bRiyee)(##I&KO?NO+6`pOd1zL_cH8xeO3Ub
z-)aIxe-F(j?B_o)_onI*5kiVU7GPGb!=Ks(_dQ87enISD_s7WJW1h`(WmAuV$^Lpo
zy1+J}<PYD_!e+wEB-yu8hk(I835O^9pA2&YCRf$SDIyyuQ6Nbb^<waOGd7`^x-mC(
z6?eIZS+zv@scZ6@<@8m7!GUX3t=HaBFO;)#EmSAIJKi8~>kZ+$l%E*S%(x)2FVmfi
z1kYdlWMXOLJbj_Kxi%_&zMtu;6JZ7{!7>TQ^o4XK&9-fXZu&>aCA+|8xp--_qC9SR
zHTuW!r#+Gtryqz)vCMC}&IxkYyqoddl2Zr}DIK#i#a9%oA&ST6f}@TMGiIR^FNn3+
zH>xq79hRUfZUQVe5hv?kFML+*$xfDh4-)7!s>(Z0F&6QW68UT-p%HLQvjdq0`y7U1
zJi8;A%f=)!{n2Ewp0J08$0)Q|&QGIl91~c95FjOhWA{yMU#p0HML@@jitxRvfcm7D
zl=D>cd`_z@JwC#a>6g@|H0_<E5|)pJJ&DC*lJ$NW&m*CNAS3HRRC5r@t}&~9@YNI%
zvK$0|7O@ipmts-qTmOW{Xnqqp&B9XUlZ1a!f^~Wt(vLq!*-7aMR6~`%Uw4&qqkGSE
zEZfgGxHmd5yKuscA#rec-d$1}q@!V|;q*xGqst!f!R&;TLN}-2KAO+*W1T!xPWanq
z$rNz<u~|h@p-TS{s?OYWn3H_4-CnwmYXU|J<>F-fBe4pv1HU82zS2L&%)D?v%d*l^
zNB#q59Jd0_1-KZ-FDC|t=n*85*ajlShauY+i^`LD>s6ZqS9apZRHEkGFHn&7o*6y$
zEW61h*Ps%$0&L#wc6Z<kgM#LA=|puPxoddh#N&$g@T#_A^77_;aWPWmWr*l)NW(7S
zX)zqj3X;-X5f-J6#HwWC#H?N76g=u4*H~546dTo2YZ_nK7BU5{Q$Zd01vFKz=EumT
zOUBgiLwS%y`#uMV#nRRxva_(uUVC8t-+Gf2?6bG?^jv)%usrbY#V^9Q5ZZ@=H3Wq8
z3Xf~}#YYTz4qg2NkSaa$I8#l|uFY^wpIXV?-aaD+EN5C`ar0#9Sf&M8wY%s{u2B~x
zpex3nO0M*QiwUy%U%C@~^f+SxG7G16;VI@?EK}X4eJof;bVw_FlBj#-Ll+h4KhT3x
z86=Q}HoJ85eAX|HfwrnjKaa`R=qH+H#3;fm@GT?N2L=7Crgl-86k|0z1ulD5jW!7^
z(HHt3v>G^-8_v>Y`N$J`<G+a|#A{~Nq8b?`v0Cz1zQUZ|=v*$Ex<X!AG9BjO<9V$6
zGzc_o1C#UWV!3kjxc{+wgfyC|Hv43}#w_EBMOIcp>7&5FxHIz|@IHXt)F^w<4+lU2
z=`gQTB5g`fHVc2wRvgF4CuPh;x{-a1GW2)H8;u_VljY1GxXTGkvkOt#`>RyO;~CLm
zBkLv%VpyWLkM)P?Px|n6U&9f)T3dlY;Zu*-L74O+LFHEh7h`wMWX;A^vTs;8LOp~d
zZW1i3tEsMS$D_jXIL30PCQldgGR}R2q-W>|7{z3lhDJwhEwxRvNGuwS&V8f{2_Sli
ziG5nAY=aqW#~63<3)ssjG)Tc{9AY$WY@7oLJz^0iY!+-xkgK0WpYIY~;0!WUQqkW!
zNptn}{M0h5x~J_k0eTFT$!+$-kc%P2hWd62?0EkP8F@GH8=ShW_^K%NeQX6fI6|Z;
z_ygH;W-@OZc4@v{0?lmxTgQUy)mg`(S{LhGl)sKT+C^OfKU8a;R+us!RiRpxrjKtr
zJigJR`#kgL)2{MB))pPwZrC}uVE$J8Q?0WUCg8d%(~%)*BOPEQD4(yz$w2_kfx%nQ
z)oBU|YmU&oW*$I=*Nj_+Kfx{+_lMT1!5Po5;Hug$Fu!2fZ#4Sp%ZFb_hT8n1_Z~E2
z*MIM|>B7#mO;2lE&9<~rZ!{cQ6?N{Ej`_>Gq_J7~Tiomj%!so}`UBT;#LKgl{FEv3
zpIS9)cJBE_8R;srf@dSaCK`8ydUp&VCppz!jr>oz{_;UrUc;H=kuI**O|`G9@?X6?
z&kj8P;Fu0x3!ekYN5fWx#l|eH(s*WL2)T^9q}Z3ctE=2Wnk+RI7-E@C(R~T!4(W!&
z{%LHt8qnR4Gd|()y;RI3THn3#sGG0l{Wc5BYVrd@{BkDal{PxAgCaV5AqqDMY7AVD
zLe!2ZAN28k)`{EQ4}q`|PW3=ft1p11e9+^Ll24((rH>n+m`a#?n@T-a(#B>RkLPYw
z(P~OK$tUVVX27Yh+rhdx`<dH(l{7>;n5VANKIKt@r55xM@(r3TmZtI%Ic7OzUcvWo
z?BJ436KpD%DC#;h8))XJ$!$64+<hVIz8`Qd1gG2&v6HgIj`fJm?-ds>#BR|aofnPK
zC&MTNSJu-+`>VB;<(Ac5CCc+Qe|GaeA$~J!xwpyWM-R5KbX-!?;6LPZw2m|4UE3Y$
z0%C-77cE~ayJvT_S;uj~`dv}3EP@&G);@x(dwSg=1tOuV?_l*soQra4!ukB<#@sbY
z<Hv1Ax~9YQ+}bN+=u5b+=<XEuD!Wj>n_X}_Cj}q+<7Eklf8t+(!{c)gWaQ_FN`DGp
zRYRmAlXlRuMHzt{*xgl!=L^YpgCi6_$WKZ5s^@Z#$&0es4YOZsD>kVd6BXhgEI!B1
zD*Uf<=?e4BbY=a%HpNtYT@Z5m{vTFx5pATUoN7%|bndeUAs0uhElgDB?kIAMI^XW=
ziFlwxv>@`Igfb;_4$`anUwefV|F_Ou0OalGhyjbOux@@NM9levgUsCn8YDL060fbL
z>Zw*xFG<%<yZVW|JMp8Lw;ZHN_z~HJZ$toH6vba$cjWHXlN~hk(7>e~TnbB8)Eeh7
zuOhTMu`FLU_$lcw{eQ^iXxp?|!gJ+=dc@K<ns3J~7NL&!E~-36`kFmoUsTYWgel01
zs<!8`rlPs+KE2C1w-g>t>=pj~p*2~|q=@3z{(HJiTsQ9SE)SeI)Q*24k6k)P%<k#5
z($PXjf0d5N@`cm>kS_7@uMjeQZtbX^EFC<;ClQ#*05ln2mEHvAZl~){@LnTT(gt&S
zOBT}1Ux`VNblCDNfGY5&^!`}ZBkt}biXr&YOVhY^W#eWU$tUFxw{zEyXz7Q0XPC>d
z%soHYl-yHo&d}9*Lwf$y2{$jbO)Q1m3u%Wob%tWMw>yvcy`5?$t6vu&lm@{c?&>8?
z8s0Uu_O2B}6S7A@$HKG`QAA{{(<{w+9Wn$@e5I56dzg$ytXMsT4c+Ad)HX$YLUfXs
zo>TQDBcYTOx@lx8tNatp$LE$m7%+f7%*bv&h#V-I`RUZX<=E8DUYiK>ZA@sfI-1@r
zIYZdh1Z<Ov{4!JRza_!#$Y(NPJ~IsjaCYYB`FZEP9JY1>BO0&As8AGO*Fe*Q26=Z{
za_sVUs@_PFHifp1l0apZun93*b8S#TiSrTFzG=Qu#%0M5or`Syl%!yQ6$e~Up<0Dm
zS+!77oTpyUQv*N8$g1%7u@_&^SC=?=ks1jb4X^M4>uDL-H?_hAccnea1cNS$CTCk=
z2<PT_){RuhXAc7R7UidDYX+x!Wso5N^4$PgAbOmi!dnVaL2AMq$oegJjj8~ur$J3C
zz&dDZa!QsK9!B=9%xFE7yk8X+FIa&g%>s+stlp4Q=|{msBY(X5d7C7#VY5XX4U*gV
z#ayVe$G340_5#=qYHca1J`ug5CSiM}(nSQ`hEb}dS<h|(c$+teMHY-_nI?wSttiDQ
z*pNw;YKM4V?v!tZ>TJ3wBD;~dCi8e_Bx!xH^+>9rLGuf84ZoT^30HA_?@)dPspUCo
zJuxJ#m~9a+5X;is31dnkx#C^6JbeNFt*S3^L&lQ2UH3S4fnCTMa{OHC2}WM)W!vJr
zA<~uh=I+gsWqyTMN=oZIB1@a)X=n6Q6U5?m8amRz5^Tc2)8e{Nc86Z+5jWqtbVY?_
zd!XWU$br)KKA2z{;ipxk1Dz#R?hiQrB0q5h^M=YQ&7Nd9;b-|ySmukJcH>OD27S}@
zZf2q?tBc`A>V|v+naqTDr+H}B;?Z^32h9bZSZYpNI>s~1^u>x%k<21fUapUWS#4Zp
zOj`h>X{vC%HfZuDdVm<&*=e8cpTlaFSk^R|e>F3;bZoBW#|ZHX%aKv%IQ{p}G!{t1
zF-T4Ck{>%I)*X`}19Wv-AF+mG*AiWoQD4S6@S%}xDA>gLj&<qt6OuHhdj}lwcCBVe
zqJzyh!?Lf-12I48?q5~gy`8sl5@)`+8_XY&S%78=(g3$p*+XX4RAazJ8B?jN@ty!e
z$1z1}>RQ}O?rJRWYbZ~;$+_n0eB=VFV4}9BQJfrT&{q{}pri%#^d&nOdXIc9d|v&e
zR?rn5zI}VH4ru^TQ_|#X7>!RjLiPS`DqEw&>me_N&^3_V9O%;f7A?4?aq}C^wd|@3
zDH}75iq=oX!C26vR~VF@-WBX@UU=2M?X`ZB&!se(#)jP_fvaM`xet5mpH=Eiv$5^$
z$$EIY2^OQ?3=UWHFy^41OsF*1*aIC+u%?%0iILSYPvE@068U=DOVh&@op`_qrxF>+
zlo`HFAuPtshW^R{lO-~G6U$i4buYqBH)UFovM3~{tGKf+Fg^#>0dVuU4$HAWvyo<{
zO%<M>ckru7pX^Z}t2x<z*jX7{V$voeZ2PKQozHaHM3PN8n_W+<&tlpbIg%XxJE+eN
zjs;rKEYa?jSb`ToS;{(dwtk9nQ|@M+_psw_^(P^6>FZ+d>Vuv0eLo9zv_%3FqElKy
zPvl1Ci4{2%HB#L{b;{>#4D7WnnI<iUn4Xk+pC_j4oa>A5ABs6r)lPLn;IgqKF$w%4
z_w{aElpIrf{Etu_a+(m-CQSO~)h0G@E!%kuab0b3q;xTN8(P`di3K%6lQBPmzA_J;
z^t&Pre%2M?%2Z^E_-3p*?<+N%J+m1`{h^P8onxDu|5TerR`%7fx9DdP{e1Koa}bJp
zb7*TK)mU?!=*XICCN07!-h#eL@=^(hE-x3QL%}Ib+Q15x2&(enHwOIxNBZheZ^zyO
z!=<y$j&rYDlN5s9Bck^qspS)=59(;Y(q_|Ty;ES_ptMGv<Tb5ncFn-PXskC?WG35i
znR4kOZh&g4NlR%}=bH8S?X7cpG!e~?=Pl!WaC@BIRQtsfmBsB4)0FV4#US+35Si*_
z?X3yV4Axaa9juU8%-5Vn8f>T(bhcGUF5?+vg8*TKMI(zt1T@S>!CuX|CCai&GiC^T
z&)0pXI61=j1b6L?P_q5NHHYQb!F!!29fJ#pZF$8J|9YCD$Bn+>zgZgPSgee^hI>r)
zHeLXIBJFJMu@UK2fi*h&18ywOvELa<UXE2XM^_aj%atpe7~4OOEkD{*Ub;ODAG@FW
zI*0o5ke+iK!f>Rc!4!Pet9P${A0HVZO?u>uFS6JdXxXtUmyw9f+K8@ie%gEbGPvq|
zHST<I$j@b6Omf$Z!Nle)C&$dpgR630(5-o2Kp9ggyUTx~ul#^!t35j^Uj}I(Q4c-B
zJet7E=Q?d6CV}E&R~<77p>~GQDA?tZp>T@MIANYH%IdvU(m!F=ml8%bw@Ri^zbXzj
zO=sV4U>E<PgPbL!FPZ42a_uHq0BfP@qu+pNZRd1|t#r^#TZ)7WuOQWZO+&y3uu`z3
z7QBw=KckUrwzQ45`9?+1OdPmG@RQ~M9EZHMZ9#b$`@m!D;+D=xLu=8nMOU4*d<%8!
z=G%xoHGK)jI@B>0!Ez(Lex;+CAeN+}gX-Tf=*$MM+`h>b3Tx>?qO+Q?OgMq^Z*(0^
z-rG)H@?eazYIw6MDn0*sS5=#hJBU&|uz!z%uB5<B6+yFU_nT;ZDHEIiG2uv<_2|%l
zWngE@F&7`=Cq%Ohm<A9<h|E|WWF>i}U@HQoHyIxUeV8dcs;aN4{3_j$9xhI{aP4`=
zMMj=0k1$lbt4diktH;$n`Q4Eoy*5?+W!OYR;FsudY5s(B*p2dn&|G7ceqxo4#j!5(
z0oI;_dJ|GC#f30{>x&2fZ=I|$jn&^eA5!m<ekaEXYbeSv%?@s?5U%n|@k^?jM4l^)
zqHt1KHF@oerMEh#U-xf*a>D8=B6seheHub+g%EcmDbL|$_Z=?t0n3wJ=08S!T4^%(
zS0)G)+$G;P<KydNA+X$ohHdwKwUE)@uj-x*pVr)o5XV6{GfFM;SU9=T-)l3!WK_EF
zd}QqAj~j1ibsgy}FPX7k(iG+G<UM<^b%zcYu89laHX0v7!2Q~rblt)Q<pa9zQAWY-
zP7(Il6BVMEy*e`lX^`1-l}$@2?Z;tT*pT-)t<7ec*MK1$BB}Fp$jFo{qr7`;!yM8A
zwKfr9RwsJ5>(Ec&FdmDpLCSIfca^8Fn3xM{;`d8iBpJ!~Lg!leGO+>oAXcTHf`fKR
z$gF8~?i%#ZVOz`)Oshp@6I~4!w;zCt_bQNr>KHe@G*!x)qh;AfuKSLZE0iTkE0S>&
zQZw0{9&8P!&*bJXef4P-MU=CGYp(jxOkdN*;LEED9t%Fp7~F%J)XU9-<VZ_Q4CKTc
z{?^&0GHglV@JT_n?c41UW4Gar9UFVhy8LvAcqEwLKSdY`duR)}eqB`%(zlpSidBqn
z>QVAl<%}?yyl@&QqaKQywCNQ4vCPA0UmSPWSx^$#Uf)%>x7c^B(q3JGCCXi%-`V7N
zNm6q0#HR1#kTql|Ijr(m_rh@V#sxdNg=f;!Ek48Ct<ujc0kU2@w&X5GX|*uvJCO7J
zt^QC`fdO_)UcLs~#dR-u+7?!b<w|#@HeE7{d{>n37y5WCt2#gAlI{!x8u=)h`0CaX
zu?Qr@EU-+?Y0fpx3-a=a%T!l|(xp*qKrF-^dL06mDuT}nI*nVHhO{*t_m-^ioZ?+e
zx+2@WtePA@pOBdM=E=2ZDU~)y4tJHkpuu4lznBp7QUCO-QWDPzYXcJv&2Fx%Hd{dA
zuO1~VR0U5|wXPdapr&cGPXXxk`7lNpqQe!a$H*&xPO)gts5FnE2>V_v5}4VAL<^HA
zZL3NduWFt=)zSWQ$Kt&dq8D?7lm05{A?-Z`66QF%Ik9k5up%=Mt3li5vnwH-<h{7=
zy+7O^adO|;czA+b*kb80#@^Yf40kAB6P!V~Ry(&Ql{mP3WuJD*^p@wZI)uOQG;|xi
z1&+6RG0IP=Td3JWbkaV<PRr6wL)C&$d#RtrfG;>C-BbsY=d1;4aY?YVRWo}LHsXb5
z<QMt>{v#GY+n6D-X-&!Nn%<>am36n>o-v7%zSb6iCY}_9r9G%GcYK1{spGZ94uD;9
zx2eqEB))})xqG-P=7PQ=tw?kDGpp->%BToRv(osg*B9OVGd%}zyGP?uJd65n8~dSe
zX7}gLdUl1|xY0v|va66I;Okc?0Ag9nUI&f`RZ)$Mfg1H0l}9?&V_xcNL|Krih+&(u
zoV{j#|6zo*5_jyJ;SY#MCJ8b+O|$HrF(>)Qu*#PVj1yZrXTI`bbiV@;ql0>-Fq^;e
zej}q7tl+ax4I#})^{nzT%2KCmv#4K;ke7|~S5VD0w1HrYRo&BjhRW@g#?84dH5~v@
z@#9Q+mZ(kA^Vq_E#skOaz(HZI7|%8D3qqd-Y+`{p?bJLwQtb!X)r}cpe`Z7AChZOS
zc}fBka;rWCvK&hYz<gwM$%a1B@E58@_wGZZWox8Dx<FJ+{3fkjID18~o|RQ;7C$;{
z2HwY~)>b{ItmHiHYRFIvwj?wSTj{98m@Q?#Jh~9>Kk1WIcR6o~rTWkqXQwR?p5rg&
zj4=338T1Neb((yL^dfLWuho-w>P7|QTCGvChR)T=^zW=P4?2=88eY{ibyt;<BcECk
zy7deqH}9r;778kL-;*a(Az;0lukW5GLw#5NR%tHJK|orbA(LLqa;Uk+HMon1s)S8x
zq?X#g_!&<Qh3ho(^#cxBPHHlDhP-imSJ{Rh?w9PD;xKQJ9?lp%cFVK+v9PPm_5}?t
z-2arLme9k>vCU2*@)GVDY~UexEr^12H4$J5?3{jWzLBRTaAPIvDBNT+Yql^m&4wF=
zevk|DLUV21A6X?&MYuq{E8O0EcV9qlhi&-u;>Z`IVtNo8bGSt;_0;UdS7KqRmbPYo
zg??kHogz6&Sr>30Tc?nw3$~2$msi&79m$G9wNqCsr3>)YDrs`Wtjgrtb{GR+f9(Do
z(YL499&;EBAP0JR?(A}-!BH0fF9_nR>F0%*WnnT{MN3Df`36(~FcglE)J6!eg7C#&
z1=I|DJX9r@oNtt~WWtp-*Krb@Wd5BXk`NrdyR<C0(bZ&PUyr@g%G)vPL1vbBUP!3!
z-@OE}MeqNUZcOw6%W>)>M2(sn?NvlaIP)2n??xVmZUa#G45#CK1UCgyO|dEP5do47
z1B|tD^dCSxVLwpvQV1zi&8d;jr2vU`<~F3(7E#EIl1^NU)*+7l!@Jzg2i_%(4ZKT$
z)q!|PqyS|2(Vi{g6R%rGl8Iu9al5|412@YDF#2b-Rh!9AqtAU0lBz)FoyT#vbiqg^
zBLmloUg6wb9C0H<_R&yH2UcXih<Il`&x#x={|K0QyFQdA8!ph_tQ6KD+8;|#1Hp98
zK?k|%Fwd_9L7{!ZkGmPT@gVVAx%v#irw%gUAH#}F$P>O<j+i2oMO*{;<J5d;<7Z4R
z0btfrvl<!5=lxEfE99<oBgfOxC?TF_Ew|F<3PmLCVQD2$Z?kXfgp3N`ukA!8txo=}
zlYi)-zUIcf+$mgGvY<CGc^+|qUX<ta2u+t$1F%btg6Df8=ss|tOk%#znCkZ=+QKr4
zJi(`TNi!XHNpGCga75k)^54&7^=TR%ka#;{sri3E?4K#Px%)gLR`phUlNryPOFMB;
z|HCc#%OKoL5B}owc^Axcbd?kEkIN?q-N<80pdlg%H>MEY5Mkq+AQIZcraa7!CqrEj
zu<>~a9A@0D{NuhUe7y~HG9bmkd)>|Jh1QY~5YDZg??i~9LnlIx(|jjFF$+2o-UF%k
zo)ll(10!`z17*E|j#g+=;J=8_)rNAO6T2A3a3`!UMaHWCilYO9jM>c+hw@cILY%2!
z5)T;zxpDNn!oh4}f3{i#DVDGHu5jisRvSle?ga!Ih_wvNv2~t$yapL+MkbDPBS9{e
zsMVQ~V!+G4zfnB~HL+b`&;cR5GWtm$zPy+?WUhgk8(1^{ef*W}(Bb`mq0s6QoyZdk
zekXGhrsZ5S3h#Q%Cvl73$8lH@|ATldF8gQFKqpvlih@~Y;t#~c68QZ=RT>zuaU}{=
z-X}9KjtF`f`REJ1-?{*CCb6}9=)sTyRl$Dz1CdR!KkhAWWNLQslgM+=pxX&{iVyUQ
zxWO+yCVXQP2oe9OsR~Aaza(gWRfBIN2U=jfU}*ytIE(*ZRA65^P=R@C{}J^?F7VNF
z`uG*-Yer_?YAlh_DTy~YiS7G`jy^#CXbaXWBqnw~zzzlllvx%5-_RL`*DzI#;ZV;k
zzXQs!toDVW@Mn7w%-)?il&W$e#7>G#;t@SALRSN;aUl%rtwo^tJlReUVQY_AH~^#l
z#{4q=zi1_w#ksB{3}#^qbG5$;Cx5}9Ug}*Q7pw=L9lsG8KQ==ThE(&Z#oE7hI!pJ(
zQT6_({-JklY%{Q?J&7eFFimzEOBm|}48p)qQZ%w0zaQlb3nu}CFU#Y4LPrqt|4Wd!
zPYcgWhDS8CAk%k*2E0If(2xsqBR4a^P*xqGeIz_b8Dx&=!}1)Yw6rQff`xggO4U-X
z@*!4!#buZ_y*6li@(i82Zd3LSFJ*XDKJS`L;<M!S2SodRMZ3*HgEMN+n|Wnqy^rH@
z5B`_HvVILA7FP0GL5)bUiEKg-qFf{FFc;NIbI>|hsXXE%L+slI>-Bv1Bo*Ed{Z8R;
z&fHU*A$c`ZIdr)9{qL@f1D!L$C%qV+UGJ1`v_E>m`5a0OTEwF#!iJ%q#NN$?*Az%Y
z%;No6l1rJF)Xuj{s-sw}qOs_J+`_^W_QrcY6?B!`P?VdjFN9oN*mU7l9C;mtxvC)L
zTFnMd*Fh{<V~?Lyl{b{H9haE5CRGJoY{>fYDgS7Dcv%=55+dsm#j_{EDosF6Y4_g9
zu&p)E;=fW#wjQm}iM=oaDlyRP>eMP&rLu|#+h{hI-BU+VC_z(HdbLuhEOl%O_1jz#
z<j61Tclawie_-5XEGp=NJ;^4gr@rw)+MCzwmQU-xpPCeF&Jf-FCxUtfd*!@T$@;oj
z)aSS=<0k7K7(Oi=Z|odw@;jUOc5r$$GIqzfb*b%K?2fU*SlhW6Ct=rVLAP=;{M(wI
z$Soide+}cqBId!`%i^BHVj&$&WEvyqr_wC8gLIbCXjVkqfz}UKoeVmypcsvZ{5hUw
zk-s^!pnupaKeW1eGSYv=_tlb&9Eaa?V$GY=dS2JvB^O9Rv7q0HSX!uY=U9y(EtGz`
zy1YVrlV;|w$gz_brs9W+I0=UwAqxb&(CUC{f7Y_VRqfOKl>w=I{ZR{tj+sR&qvHG!
zbqi%Ra&A<TIGyKT1DX6WZ7p4PTZl6Iv^NRrAGjyH_s_t>Wr#{QzVJ)GS{H?$_Uyww
z<k?bl%w1&X4~z}Ji0Fb+8Eoq@wt2y=f}zkFGw*w)zJ9D;^~%wUYi}KN{1At1U{*LO
zwVEJai^Stv9bNM|uY<pmw``Q=*j=eT-E0Ou-N%pY>8XmfmBd)PdV4t?suEPxbSK_!
zsC*`P8bACOAu(7(dGjpQtE;nH?>VM|L7jiOM52ptIKxhW96-pTry?tfH4}Z&0q>s4
zN~3%#Qr&xlI@tHSr|&%)9Lq2<d^p%Yeo0;XFOw*?L)N&-rKkeEi$P)A-N?^{=q@s5
zrH`9Hfo(E7QkAE6)mFo%?EfIMYG$mPsO2Ztxjw>D0p!NgA8`)MeRyH9MK#1v=DNa~
zARDHJ#WeQi8s>%pe01>yvdpq6i#un|PoA-ECmo0PtVSB_5!tU6%d{!Pr`&I}`B43d
z4pN>(?c^<`auB`3cVWH{ILU$SXA^dJ{#6@KUh{{91zgqY97QU_VBDwL$xA*!DJwI(
z{B7^F(sANQ$M$#~WbHJ_)2N@oQ4jGnex49|$${BlEGJ#3eFFdSjlFOHWEz@c9hoV7
z1A-JvZ0e)#a^NR$xsN&7dsJa{G&0(HZ5lE3<GizR!>Z|q{-HMmBzucJAF^uCWhz`f
zeV$&`dy|gYTH(fG!ayIrsQwOxYwDnfy7Q^_F;5@c*qRa&lRp+{*;`^mtmp8Xf0T>{
znyXx=5*>yN8heK~-tzv*zuZU?TD^RHPM9Q+UR-}rGUiNFeSepniYx*pe<pfJIxry@
zCV{EiT5UP;Ic6X)Pmn#ULWNiC>rb_ec($K^H)ZRvq@+@;^r8`eN&X!$#MorA_sgm(
zUuyR8dx?h~bl#ICEcIJ$8KB+w<U6$wkzfFs%}%0UbPqOq=YG+%Ay@Qurmtp8kL~#g
z%{rF#>gV;I*2fF#ej0jr{qs#5&L;o)EosyW>;%kQG#7!@0^Yb}PWedGqy{YyR3#^$
zr@F_Y9|E7LGOt#Nm!uuGiwt=%;oN#<+UAJJC+mUt4*$J~Hl=9XFS4rpsl<QWv`Ala
zRtJaEBmO?j#BwB*j9F%+p`sSVxXuT3`Jj$_&G}D(VHY(7eS5IGG_M2aX4K4;)?As%
z(QkH)ru|Aj+Fm*M+Q+LmLgT4iUz(`R&5JA;w!9MkqyF>|N+*^;0-(PN?!i+c%KRd0
z@V2L1$?&7Zb6pAsxVGI6(pA{~S-CQ&Ae(Jio)8|XAuV9l@`@<Q-|m^Ne%3XUbNGce
z`)u0G>qpJjal8fa1Qz{UI<|GTk&#ZX2;eI-RqsiI`ptB6*xrdJQA(>>)U~x?q!gRF
zy#;>5+^>>7RJ&>t#mTk@@<+%<QqR&8$Nhq{e(b&H<Se4y{yrm)%nGKXL40M!!_jER
zd!@WiVFe>OGFxeVpsuG<pONBRJQ|(z`WHLqsIsUZ+wU7{QxLG%;ijMhsyfd<*WO>&
zG#ae;-g90kC4L*x$9$Zuw9>fpUh}NjdicRUdZ;qS1C5%5_8s9TEYvsH!ddluzJg)E
z`Q}5ztRrC^X6lVr=jUPREyKoD&w<wza#}u-N?(3l+CSlB9abU&b=$gr`0yNlHCOF@
zahTVQRJbPo*<1a7s6U&LGRr*m?59nam9#F>l_nqZx!YM}+GlUtDt_B<y;KLMz+0uj
z54+HV#n`4+<vKYdNw|{hdv6GfpZaEACvzL%N;Lu9CHJ~Nt?16$GE=|$4bi4zCRR-u
zU={mnE3f%K52L+vsizHkcZQ!$I&QmMuLd%MH}Ft@WK<)7Tw2Ea0g{$&I;!%4seM|I
zh=b)+Gb{R%Y5+w?Vu$vrfP(LY!g{hQsEPQ3Xa*;;GOla;S=9-F^E1`auEDnaL9Qbj
z6mJ{Zwk~$9m$vM-JT+`xW0u#@+?exz8F`R`JBtY;NM#<p#{A!_3PIk+S%<Ki*Egu>
zQ|{8(0XM~rXU^--wWk}?oC7B=aN3yIU8)<gF;#Kkw&G{rAVjdWg8_ehj85W*6pe)}
z^9K6D`O4>fqpw*OsYcnXlV{JA=%VI2yiBA43e#t$g9adhUB%UxQ~DEHnP`!~o@215
zm#`A6((3jCkGh+@l)5@!z?ajPbDoa-v+2IQVQgD&NIu6IF&y;^e0I6a>YAYSVF({h
zt9~APMpv5&4Dk{et`Yj&erckRVupOEAdBDMB`Ne;{HEqRO&2IYQP;|Y-ZZs_`-QfY
zSPdK%iRlg6r<|ac!Y1e8;!;k=SK(CmM?+Zt+iuh5jNBcSJzW9Me(m#CyjS~Ul*kxQ
zuS@!#2T4(NF!M5`!FNh&TM~|hOK+STem@-J`GZMmp8vj+zoy*#m&e7hJok(2&(iug
zsoytKy;3&ZG(R?~*9UKSmH*Ug-twwKn_q`0g#Df)6~ynuHdvVK<pZoxB|V}FQ1cBl
zZmWzGcnHn7$3D$j>f2YxqNL3rhJoXs^m>sFbyR}z4CSf=OG)>6f~r7u@-FoveBuL0
z=+mkg3ppaMbi!caUCs?JkH+CopQMA7#ncVlI;O0C_*PVSmIMEq4bQ@Nh!Z|>G-P3#
zKp1v8gqChU_R#&}f{cl6ItZVihObpHlP&B)q)}=Xl6Ifd`hvHm@Bg9d>*JYT|Nlv)
zk|vcEu}Y<4oKtSf-6}<rMmO$RosO6_J5FSBv*Nf9r#f-suuAS?6q|+FVs6ek5;i6i
zvpMCi@m?|SV>h4Q)#v;BJ|4f{pQk@|=Dq8EU9anT3;wZp$9zp46(rxLE(Nx33FaFv
zdp5E7wL<QtSIrCp&H2mx-xHmmgdh5}+|2L%3<Tu{l(x0sL<`?MgN9(7QXfhJ6(PEu
z&v_HAJEBSHYK%<qRFZQ6jp;5qa7PH|orS2%-2ny#5{DeuuiV?`tM<P_WX0s{d1q{>
z`}3rGKjWY%Sf)$YKsAD<5v4v>y=kWm`*}*1cU%VaB@3>qCyq{4u#sPS2WmCFP9J{Q
zwhZE7qW9*2+?s8hTB~6UH^AC7i2p-VLm@Y4c#)<P#C#Bp2w>%T4AxHnk0V+EQkX7N
z!b#~OBehjhJBra-@Hrdmvf4gF)l~-8&IYI}1spwAthjZ{d6~8FoU_4zHAz3nElLc;
zRKurO6upRmTg4j(;K$KYOZmSOLswpEsGL=7%tSs8!ufHofv`1uY9|gpcs)<ysyqx$
z-HkyQC{MsPWpm@E(Ad;HmXX*jyQ9SPE@_Ffj!ZcBI{O@t-a?C*bZZr$#lyS!&v^+g
z6)X?`HyC}&L?H?y)ky&-y2c7dy-@d$uZPp2A~A}4TIRX%i*jG0Y{S=(K?cSUH%+uQ
zF>86nW0{r{kcO_sPes{@)*iKtoOfl>%NP6uY#!AIk7)pKT?#OSwXc(eoO%*?xGwUX
z6iIg*;@)kmwuOxmY$u?uW+7uGMD31zDnj{vMev-nwJi9TaT^}p3F(bpA8u=RTdK}8
zcvkqXw8DR^^NBE`@O3?}?hVF}a~-%tn9?={3dZ_FW}gQX=Mv7tP7{541e$~x$TitE
zL@YSfEL)xLBa9Zd&#dGWFSXKCy*ZB_(Z)Ipk1zi^;!hhW_}r+_u*HOf!a`6#q3~5Y
zV>VF2^Ms`mW+yHkO`BnxQb9D+kkoX*$|lFyvcRKd5FOoOj8UAvVKPt1CIo(Z-H^3J
zBz3-St*?I#O1%N(k?cxov%yR-lk8NP%JnkjH_Rsa&I|?QuyHb003;j=EsK+Ab#u-C
zFbjhh1&wwgM;hq^j^9f_a<y&A-XZI`f05j|c*4(S^w)yA#W{j1Li~r;TkzsDKp>D6
zY|-7`H?jwF4@5N}q%9Rm?@^%H92Rkf)GQX@k<)$n7sc{23GHOx8xy3gSCp<i@r3My
z(zjRvQp1`AQ=OS>ege9$>`3swU+k?{K9z=RiYZ_OR2q&cBGdv@1GQZwJWR>Ptajcs
zE!xgPKPQ9Z#Cfx<Y&es#pdSQ6j?Ne1X|Q=`z%Sz)c#K{o7Hcq#l;2*;&D;NMrK`AN
zT*$2z0*rq&x>^HK0={@T1|oG!!F_dgFKk+x)DL2i!P=6Dxc<t^crjudPU+M#94+-|
zyPeDU=qAoCQdxBhBlDuF@heiv*o^vCx?GWCJ8N`{&G2w2jg8b)P!wQCXaivr99_lk
zgtZ*_+rqUR;Dlk*nwRf_!FwyLH6f^~gY!C=CF`Nstmo8@ke&2Iw=+<BX7uYH2CZr5
zhy9p5i<qM7#0?^^Y`4peww?q%?T_6`WS$%WezO-zea@@k-Le!pq@q~>>p3UwBAIg$
zCWujbGwfZ1opszkV^F6%nBZ-YW0e}yisHsvMM)L_0TsZ;>fs9`pRSIAugo+vmLB#z
z4;;S}k7}=jtuM;wWDDH9wPb$he>99ZVWQNKy)xI7YqVL;CWeB#9nKDd5`@Wdvhc!p
z4ImoQ2kMkp6C%L`6YiY)V)pirzQD0vUYfYoJ?5zPr&#5-BkFZe73aXyI26rEOR|J%
z5)nZ4w<PUUVmYnQr^l0&bl;UfzQ>!`zGSuxirR%;cO?X4vtWPAMRR`}BF66}gU$Of
zFn-Rwr^x8f8cC~$@~0=8s^75J%iKCRM!>k<mu%fQ?1%@m=r%G)pV~a2Kik#0l(&^!
z?Mv^c>!Ph<JgSXtdl|YuYTiI3Lub^%=;ndK`PuQYkjonCmy1~VNRRwIXMmn94U_+_
zDzr8Z`Fidp5IrA3b+n$F7C!2Hei4T^yU+mrP9NM<9Q|daXwC~=tE4(>?1|p034@7Z
z4fsiu{nY~i?{^nvqY%p7ve*uj%`)3!nT~6d4A&0gd%+cwk=?<M$*$A+fcJ*;|FTw{
zMIY%*G64x;RkOlladpwt7InJ^qZLx*Mb@JjqeKg>3w*Us3i$Z2dPZXdQ`M4mY#kac
zZoK31VtQDA-IbglGTfu0N<E?+emRY>{_>YKtsvj+*7Ylhbhf#gPobl_QTI~hsc@Yv
zyBkoXBID)s7;{XPVL=Azi7f45CHYhUr5zpjG(s4if03Lt$>sS8KTPw&saJ^3D^^V5
z?+gC(JGJJia1u_rjj7ISnWU(-r%}phfG(zHbC4kRCIP-L>B|Q5kupYt$pjJXH!Iy<
zkQ=(jEe1n}fUEV3jzh5RK<#{);-w!x-_|~)D0Ee4XgU6tZ9pWIM7oA2foR=7ytES`
zri9u7fLA@GsVq!vc29W%l-^+PEESRT00Ed}Fu0#@)2rjd7_W-L$E-IhE!?rcf!$Di
z{na2{QPgVZ-PruHxrzCk)*?lX0>jc8BEYWZVbOmy?yhJ9w5(FAhjKOVeV!a3rpa`*
zpper}O=s_UIh3@QT+-bsGIX|7UW6Y@)|ZUB_H)F$cv7V=Fst}paF3B#>Cf6z?<Isj
z#rNT#`Og{7Kdm9>8vP}e@Fs>B!H!zX!|GjAs#l!pIgp{LH2B6Pe*!Ds3K-z>Q9_*w
zYzJv1dlJ|2Um^adg0RvAci2<Xi)|aX<S$Ck_xbZnhpdN#dMjr0_1%f_*WyWgk&QPI
zhprK$^v41Ng4ff2(2xl=R7~*Ijgq>kpl3~3B>x4doGI_OOh)4x&NBfQ4*4n1!DBHJ
zkDNo@?gQ#Qo|TAAWW%`=JQ^eMW+w$I#KGnl26xf12+_3tx$(`x*Dka9HXgW5`=+%Q
zzk;_1-iK1|#8;EIbTtQn_Z4T2*k<g}9%9PxPW>DM>d`}%JJP<owK5HLshLmV#H)7c
zk&F~Gc_O=I+tMG+r<m(2-D0#xGrhFn1lUdiU~bV%WG5xVbRxZzvQw!EmsNPyf(qFT
zM`PMZ+(QrXSR8GMsC8M-w(803T-jXnrDUPps<C_P{oehLZxiRs;@&v_A`>YMJk%S~
zWp-^z2Y^b1I(lvLdh3M9aQb#$8tdZIo|+kf*PP*|I^w?ks<ICsW|~7EeF+c=J#1*a
z(Xo@f(H;wnu4BeKwS*w@j|!c_2;)J-oLH3U><s&Zok+CNc}Ie+;0cr{%2DqT&Bkt?
zV>{$`dkSh3%uB;fkPSmi6Dzp%r9=l1qn&fU56fFM>thfQBPb)s9H75M3~=sIA-uM<
z7wQp*<*Ij+ao_ILGHehOmTrU44**w{$b?YfR_KhH@mAF;JO-BX48rZh(xf(S{K@9R
zwitkJ^5<)xX1z;1*%^lP)}UZ04OY@2MTokqO7fZ#x**h+n6(i|JK2w|vTv}AU$|_d
z*7lWVm+>v@q7`$5QPa3EW9eJ(@zbk)U3Z*An76;k(44~=0zC{0^5zIpVonA?9>P_1
z?C(IfM@9BC22+MfSqlE)Z_(Ld;*EtX-!5-m1r>fDg8g-R0^`c-A5iK){Cm>j_p*%o
z@3cRNAWs}@S0}FrtM51E`W98Gqmc|DHfy&^iw)T~nDG5XOJ9a>v%I33ES%&n+XYav
zY>d$6Z7bJb+2)jo3t3uca+aoEu?H9Q<$)fk&vWtda}Xj@1wL<Lm<o^<7u6q0`;&M&
zvTGCRU1)8w!QI43+)lD@TWpdUD543SKyP?A<t+=#s@W?mdH8I4<pCMz(OBTa9*_)P
z^kefUnhp2WR=sc|mW|y>M1oTstlnhcq`a;^r0#AMZ3lz_YP7;rb)T)7;3?x|F|5{+
zJuVL~(aw;0iuM(n=nl(!GSCy@0utSKK_J%f0Xgs@^!Am=w%|oXJxrcOT-#qLysUb!
z4Mv1D$>76@K(&~JO6p`=z{QG-Nuq!-X&7WGW@aXQFUd1WIL3=n-E>XdGcx~AKfTW|
z=sh862gE4IB+`ilf4-FSiZ{FR<sjogOuVNp-n!3uP%B=&9^AH9zXP8whPiUE(q-E6
z8{oh0&QQT*)|au85BA=4)P^O>X2OcHe)@Jt{-5ga82>Yv*|iHw4h^D7q+#x_qS2te
zb5X$OK`g1JiOlbS;RtlYtJibDSI>uo6$jocBUCRr#9)lP6J8HhcdhKNkR)oKl^Il2
zxIz5OGU7)n7x>}fFJHMOd-|1T$jmk4Es`SanzpFY?plIy3;gtxhYoSAqQm}CrMB4Z
z4Y>D^lw0k9?vV660R=)X0+c~85$fSC+ZT_gOtd0=8wyShgbGOIgG)BNCqouiA}q6Y
zur`vhzDD|E7GF9X8%tRAA^3yCou4rDVd=k$>q#T_*i>tjkRs0pomNyA$hEX8LTxaR
z5d7lJ%K7`%5dwicw)r`@fDo>QMO8A20VFj(?h<wL8WH{3;PB|_N>N$A_R@?3L1_af
zpNWZez{7fnr#uRt=;LXiK;ufWZ|rZiPEe9p$~mBHZXDJI8(qm<2sHoDlJ*?NbleX4
zYq8jse}TzcR7J@9jyJN?Pc(klSxy6neJ@HIc&u0Y;6nwUzfLS9qjq3OC}BNc-U1Ws
zG8ve(B!ujGk;K^LGi4L&ro_|ATXq({ja@%ih)r8q(|0c#v3hppSDC@XvIyH=WGbd1
zhIX>+a=#Q@9Y9IvH;%ajeCgSiIrBc)+%B_}&SEq_#KH*ZdY9UPkWmqDK5(rz*vO$H
zbBtD-N*kj6#r%Emv++;k#N=c5f7klA1@K4zfAi)y+RqIGADQxc`B1&SQ#N%rcZKJ9
zp+`O{n|~TtUiQ|Cg1=g&T(2so(MRWsY;H!aDSsOEeD<Z^haN+hSlh>yr?vi+`|9Xv
zFM25OIDb6n)s)mfzH&U^y?>kHXae!b*!Tw*0%08`jlC~tBXbKY%GJc}%wUV|yV+8U
zH{WT)4S-Zb&DMb%7axF#%gW8M@{^2LgBEp`(FBnY<tac*BcHscx(|k`D%6MPHse=*
z`|i&#e&c^Vj}V4b8Pj;34l}|>sb9K?b?A@3X^mqhnwAAVD99Z%TDDM!zQLQEC{yLM
zjD2v4Y#1M(Yc_5z{sVoaYhQCqG0%t)jkf-3->vWP(g!>U({F5}3W&WX9)kX>7vQJ^
zVnwQ5K(H#mjEMXkrLdo=|KJyVB5w8V+#INmYv@{cb#LRsUVsBf2<(I*Wf5=9UJc%u
zuc^IYUW6|NmdQTY-e=|SVfFegvXkSpUj)L*3oru$HLuC>8BdG6nzOro3cif`pEj)?
z3v#;}8W+F!JBtVV%F23s4slo4K0$q40I2~KW?lQJLf2PZz%9P$(Mlhr_j<f3+05ZH
zjC6h{Sy+9xa>P`82nZPo9%bb(`xN+madTq4)py?rHG6ESKir@}F{eVY<E0gC3S;$O
z_BVzFKg}X>3<0%r)XyVkV=U7!=`qyO-5=rGAJCBbsewN=6#XZuw$wF^7wp<~Y|P{f
zsQp{24vPz`91+eMCJr%{QkUq+d^^F-&KU5oG5USP7{X00M>~UIy=KqVP)n!9`Fhv4
z_sZ{J9)N7rmcRizph2zF>*!WXiHAF8D2$R<wAml#)q?jk!o%b_IT=wcT3>cgh|jn&
z&&Bn96z0``NICFjpHNfv^Qv{L^-gFcZ#tp<>xrFuZYMDy7J4rR`pGTBS{I|<@E9zd
zm3``_=l;%j6+tuOyM`|;T&Qm(ZaLnhdPezifK(eXXFV;9y#G_Q(~T2VA?qy4?44hj
z7IPZrm3I(xNp~=PfFRIk*S}VQFBz&hYK6Yu@>2CU3@LaO<g%~#eiKZc+(AqIu<ldf
zwJ5~Gl`V(jUL}2T`U|k}yMNPE0FZL+M1+0Px5@IED%&!~LE&UC3>4+rNBbg|z5Ltu
zKdnjX0Yt}Q&Yt#TktRpSmoE*GYUsW8Lw<dUmBGT1z`e{Pokkjz>QoI%fk<g=1uAI3
zheg5n8e{XB#A^^JcF&m|4La@MKi(}4%lB}2x}}NPoO@9GNcwT)kel^+FY~8Q5L4&x
zV5$~i>mwKWH$c?}xbqN63>_nL8bOYRpO%LUhGTyU?5mFOPPnF`#ypNz9p3TW-D;tf
zXI<=j`2lYzwAgy=h!;D&lUDrpl?LVcBOv9VDv{?`dc48r$W)Kn*(ZLaEisjrK8=dg
z#T~w0iRInxC5EqBnP0EQnSTAe02;LCpN+A{XV=p{UdlH+t)VP>f{>P~H~u|nu}21A
z6@aw<l^AAH6%Szb5x!RgKjhO^PRmQaP2Ig)!beMtqNA@%`mnEu7Avi4f5;Kji!Smd
zugT-`kx&iw7qIz(<C~a0hrTF(tD-HTZNChA@fj%L&B-x2wbJi{OKfOjXsqmFXRHA;
zKh|eqFVdFzo%>F~vR(_<+VX+x=X;>U?0b-S0M7lkKb8d-lDa@+%k?7TkJYobRQfw=
zV$79-%{Ed-{!^%-UC%EhC?Nd^myqcExXL9gYLA8Q;hE)u_IY{1hC3)hK_0^xa|SZY
zi6I88^m*{;ee212-h&LZ>n9^L<~;v1J$|&PXKt?N@g63<fzHed%q}X*yq31^+5`U|
zPq~6WD2OuA*D?px$wmLsFkXDW0Elk7s!>V#f4+s8JSMsQi)8RviBaIpV((cahs@1C
zG!<akxyV??>q|iA2?9tQ=Fkpu6V<Ca8!)5koB?Z?lUKEGNZR4kIQ<oLC|zc)`}$7S
zMYHL6bz(!qb@#H|y&LCWyg}t*pa|8{qhY1K+Z&(8;e002p43Ikxh2eDAvb$CrFM)T
z^mu=zHOmf<zMlX0C*l0jic4|m$X%~5e}6W20#zY`E_-4<c_4QZ19?@`e7#=r(V^cq
zPkirT^Wu~9ItTU+GU`%74iC_Y&c|wh%(7z-G2#`*=I7`>M?|x}`Hi-(dSY&Fyl{t-
z>-0@B^cn-5)R{A1fcJ)dwifv2GqVX$=I6)&fyC%8DIPBo>37G39ZUUiI)=Fa+H2;+
z8~vP~J?5(pXmxTXJ|?<hzm1`m>S4h!Q+}(!zH{octO9Sl?CTZS_ab6*(jaQB4gQAp
zblLsAt*pGWyd|ge9)Y3x(fq}^Il;X^{|_E|+8?Nphc4E02sm&k5Y~fc?)7R=`hyBw
z&_l-#2NpZe>%2D|q~nrHHViO|o!x2A^R3yun0Otj`9=EmE$<_IfGF9!GlppG4Xl4)
zkqsdQJ|f7SvOVC#c);jb1O^B++A2n|Q5!Fc`qs9@$2r>m^yl2Z!I#1lPJ^%B)H~kl
z_i#wfvWwABJyxZWY8a^Z6>=9Ae*sOB?o<7)UcIiirgl$r<F8zZ(+>S@TB7~H?0e6x
zzy7(c{y}M1Td+Uqc$x)3cpJ!m01xA*1a1Ca76?pOkbi*IsLD&0^=L~&xy6vFJexUa
zg_iE<><}~_nJxSgS+LpEg<xBHZRdPmTx6}L$^*9Y<}c-Gld--$tItcG=9eHrYUNBJ
z=!aYbUbdNKVKA-tkt$W%@E0*IERJa5YrypR;=ZOsfA1>?)9UZEzZ?S`T@KFQ>~p$e
zKfW$5qA+Jzy1Pac=x5X65g!$L4eIXrHDvrmL=YBD`(q`SsyoyXJ`mWG7`F3W-py67
zwf~(1tvaAZOO^Xb0s85hORD1W75L^@sfWT@G;5!u>ae|KYhX(;NHC3xjgOE0Nj54J
z28?#^T}E#CYv*?^Mm?r4%n#q8(1SH7YeZ1oBh@cdeK4CPS~`rn+c;pflKPR$w|@?5
zAC@;7=5wHDqVvGR<7=lEfct<Ccy8c(xa-$3&vH>G7;j?1cq2RU|K|6oE`Xo+$x41P
zc+P8%z^#OMN@&>48g++g3w><Q`0T7s+)}WsRSvbGwho<Ew6*pDE~NYUOh9?nK3aW`
zJzhvu&FyMzczs_3!?V1D`IDs9Atr`af)DkhM9#H3e*qz<YA15?-lm4vX|rQxjF&(t
ze9iw!oGBhXf3<KtTDSS2B!9=MKXYGb{tNUoqhOfdky(WwAcN2c)6$+wf46E;xTyYJ
z*|oC2Vpc`i72bN7s5l{<Elj0lpRtUzppO=ZxiJSVpJq-pP<{Bjn;smrqFwMp%(p%E
z_AgF;k^J`U@ylL^{WITaXg+X%v-6K1fJ)3)-o&C0QX&?Fv0nUnT3wA5Cmfe!m+#vM
z1_68={-(^dqaiRj;6r<#ZYQI|@<E&9d6~zSn)?l=2cIBHDz#Mln2C4NlkM2|Ve&#=
zDVzTAQoX9i%0{Qx#_}pb0bV|_HdlveyYguu=)(zoWf0!5=6`>Qh|R~pI2E^dXsRwG
z;MlKt>MaRggG&xQ!495$Q1mHOcnw<B?xw$b^@<J&DxzZJ;=r0{BM=CyNlu*|JhzSC
zmHzcVOCqEA+jav2UI;l$k3>p+gm_yk?IZ2&N?0c<_g27f2FrTAw$wPY4q~8pE^p<)
zND1!~px?VxyZ+cq3yUX2zqrzr`T?Xjg3g4>nH8K;e;KHFZ&r!?X9PU;pBPm1^t@H=
z6MC|ziyusq=$g5|a*y1bYsVV02^@7ga-QLHWPBEx-*{`F=cc3gciP|>f{32qzRKpC
za%UzO>YJz@&8lY>F-Ot!y9<f-a;z|K@_dDH@nTeqQyG6om`knP*ZRi2@b8s(pLZvJ
z(*6nI3SRrWq#Dq^k;iHLlf`1t?bupSPR{Smud}pb<Lx>zs~l}_wfkb7XD?;><c_1i
zG<Wa5bmiWq|H{KmaQ-;3_V#109<(5#N!L;)eA2Hu2!l@l{OkDpS$i5y`Ug#?8En5d
zw}Jt4{#4`FF6i&fJ@yB*fwcbTu8MMyU5w-qdIF^<yZ)XFWUES|dkuy2^WZHYp0xr^
zXo3byYPpMb=04TpZRh(hX6pk2Y8uLm$|I1y+Zpvu`MVHbzIDW7gxPWjc0I5aP)BYn
z&a)UCFqVNfd#Bcqk2>sp8Y)57=^$FS1F`o)Wz3Hj_l}2N`RT+4P308$@)O{xAeCFP
zCoCWCTl(WRZ9&SIK)d#N#{YiNtA)SVcNarH-B^)Gyw20f{Jc1qgL7xHo3hN(c*Kk6
zvm|H!J7xT5Ky?_<(3+GsF!Rj(fEfi+n^lx>iuzu&hB|<~m(sQa;OV%nl(s7%VWzmm
z3GOKc%vFQT9M=jLRH=C-hXgixdO_qCaY!}c1-Zu$?v`X5$NIL)E(25Sde*Uuh~ehp
zyGvG^aS_N8JLc<wtFrQ{XIR1{7?p$oX-h$XA?JA(o&smZQdFBSX(}J6M@98+9jNyn
z@+$Z*g_+W8&^q{97iOK~i3<F%{Z#t(!_(ut`<3p1kn0-Pl^H*9u$FsBP;1FW+?By*
z&rutBc2uI}!=$8<Q0EE6qyN#u`g11kgQJO*1uQeTdnHF<3Yf_<#tmW21S-`TNe9_-
zqD*`FeN1+Yu9;eY?cgGqbHkI6ka0fkNf5czPqwz9Y%Gzs;OHi9MV^GzAVGp@-}$Zq
znXa^w97jx}KnCM=Y%Y-wh|6{k<Yl#i;Cz6|vpLAJD}__!B!T0RClNxW&qa1#`CQ3f
zev%ED=?$sxCsv|cYs+Zw$-W)K&6j^`5D8(5f5~coqy}ai2=$>tF1TC(U*YmVJDsQv
zjgz>g0a2&|JA(8Drb@d>w=5C}kj^Y<CUs<U^vRrdp<7BcLU&qi4h_|1>}eTvMv=jI
zt{+G)L8Gwre#rwQ=iy~OV5;PS-5BV4MMsWlTgjoJ1Wm;)7}qs^l%Ig9#*sbRRz#nd
z5+`V;oz8pcuSyb4xhr|u{K>E^BM@uQ`o-m{Z4;pH=jqKq^vRp7=bmSlUP1hcfI%sj
z9#t}>+-5sD8QEagh1r<Y_aBW-N$cjkVWh9@^g`-$xJZJ&DT(eQMJId@Xnt;I(k5oQ
z3!lC_zLMaKZk3%f-?rGiso+^Sd$*@c&|rdv<_cE^TB|<7Trn!m<fzQ89mtZ}sRqD5
zOyMp!bADm(n4@TYg0EejEI!|Mx(yP-UnVEbvTG9TDraw1MUhHFW}9~wS`>2q0tmPB
z?>_$!GPe@0{lym;DekMDVZt1wgo~;YwUaU&-cm)*=LxwTx6|9|vO<o+R}<^rkDOaJ
zxD_xYN{;E(PxRsOB<^O7O!fovmB-^}?i)X@)B?q$>TxR5t_!gic$SmU-{RjG>7Ae(
z!qnpo%Vh$a!J+$pW0A;qA-V19;Y+Xb0-)~91YFg0;WPgTzyRbt!}+~y90rw)KmGDL
z`Jk89KP%vBz5=l5<O7s8Fu+ed!O*Fni_E0^Ab{IqWwG)#@MRgHv#=k+rK&g1iS#4q
z)n?oYCqe*Z!kNS&XK;ulYo!^Vexw|(I4NMEpSaW*6L6et_rZmK7z2y`(GE1S78w0#
zU^hO6fe%!)^}Vm?rW!e$Qrdjfw(1WY1bb72&@K<Oj}Rt(nq-9Y19a&s9@-7?I6x*O
zk#V{y*&!xFtgGV3jB4^OUf95*!(Yl{)#UuCbF$5YL?Y{$WEUczGf_l^ZrA}NXLMNZ
z4cSS(B^)7@i_?szX4&2DT?QcAx_|_;*YK;#2<HvFg}~EHnPtlhuFUR@?aHRIDj;QQ
zUF~d?)#n?Zc&Nv7aGr5ye#xDlb3p46cs!+GD`Zf%f}%faeOIf(cN#_SPE%uGt2ba{
zNnI3WHd|0PUWdJDWZWrPMaE*@8ggvM?PE=F-sGQ-m$#N2k!?zO7I8bs^xUAu?x80`
zPd(;zf;~TLU^Y5$QG*?-(f18*142`&tD<r6oD`F_!Dqkv;npUY!Aml%csLd5J9x^}
zYsf7<VYh^4>Sp)|Vlt5h?Qes|*6rTXWA<B-#xc=75yMUDq;Ly_llby9RVmw18OMPB
z5ax8J(%455a3D#_RmAl*Z1?Z3#){ztlEgUD$&h%#$pM?^U2xtbtkuKFrU~yO)VPD<
zFZ|c=lAqwMDy3ZSOW~L#?MiwNax(2`$}1qYLuSw;{!{?@Oi7Z%Lkwgwe*{dWj4L{2
z2|>{5)^S=D{KN9up%_o+(UX4BfjuM9U;}C`8v9!l0<|0p^}1~`bM<<6s6kxUwE*Li
zjA0ej-ECqI9%U#k;+A?<kvNSbwlbPEG+{_cy8Z~n2ePR9S_sc(Y)iZPz~iO(;Pbuo
z>fZeh4n3=ya~^T;BrPQUMTJO!|1>|N`omc-5U76El&PL_LQA8>M!~_Du)Y-aE_k#q
z0Rvy&#JL$$I|^TO8)Dfg&M0l6v7tq;i0^~p-^sD<wuQQ!tjMM6V53Vi*P=Ddte7W=
zP7-Wor_^te_o*@@Fk03C+O!*i%biR%>iRiIi5_6@Pq+kHF3mbn>1vC{;MmUl<gH|i
z1kr)XT+RkzB48$rQ6c>SYn%OJBQa9cA+TQtTF*n%h6UMoFnhkG0Ityk%j^zWi))BX
zPS94|1p27;P+00>PcV|}tPg=Mb6GVPC^+Zyu5C~2aqp)aqq_0~eD0U~cT{hqrKXm(
z(pVAt2Ob^Ypb6wt$RvAZr0Pk6J8{w~54T-?D1j(T%r97*9wy;r1D#1AP<!PU?yFh0
z^AS2VwoIaN{zHI+n<rV$@8V0EJ<fzRHx(YucmEisvD^ycM^1n*h=58`pMk=75wk){
z6@!`=f;&GNa9%f$t18t;!-WQSpN7kSni0BYKbtX(%|$P&%-wl(MSQ%mo#(4$9S5VM
zyBizR4*YOtQ0v{d8MkgU9pKF%1bqt#s}ptg<%x_~anPJtJJr!2m`g2NC7jK(YExNA
zYZ=+>jnIcSNj01;tSu#$0l2K3dTsSG^HblM`kp;p(t6-c_>zDDhp7U*s28GD+NS{U
zx@n`Tc2T>YXFclH&%#g?r-G*K%}4#YI(YkiJxPKUBQOZ#UBb%WMSJe-3EOzs*a|x)
zKXV83m;)ckQ|g<`2O*?#>!cX-Id4)V+{}p(0pgYMn~81{9H=;{^pW{yJ{eL5m;a?h
z4*4=CxiNldn7s$C<5o|2P<3a8q><8LR+x<_)tY!{iu>2icyh^h{u@jvMY7R}pnh<$
z4Co9GjsercX)kT@6p-%h!Ab)mlzKx0L{YDA0_JIF<dF0Jgv*A$9h_v05xw^;W$nyE
z<@YbMyP8!CogQP(BA-D=7obgkBNuH@@A@$7ye-9>Ez==5Bf=9*<0RW{NE>H`mD)>y
zA>Fj<f3`6m=mjZIuU7YiWX&DXno3ZKf(48XDF>K)?4)(FqKQ1|8kq^{o=C4C(D@kU
zUO_Xvx`u!=h_*6z6wYVLv^&1ct>ib<jgUDVxA;XIgP8z9Lv6?mdk?T@WA)$%e-VM`
zO(Ox|&*fAIASds$!EV%wAtKf$98?uK9~x7xl~I%F!5)%@3}^e9fbr^QaEe$vnS}-+
zStg~ESRKTsxg=wmYn|kgK<O)%YI9fY(qm|czRX=5Mt>T#$<gKtnnfAbPY|C+)jQXK
zrRfG7OBn#hvI3C$QxMm482Gz9RS&>{mVu(@Nx{6i1__TTG|3zZDw%BrGv#sEEps>^
z9cv%PZH~@1wr!s}U(W;8*3&#3+09qhQF2(oau+ijQZBNgVm0;o>~JA9!<4_|X&by@
zLTh;~FqCcVlAXF`SC0pd@!nNmFXr+-F3y4f(@2Up|3+k8K9b-;7;_a(j#o!r#XG&p
zH7|N^-Fuec=RcL(E*l_z)KH(YG0GDf$qiMd&U@gC?V`;rB6M+5^oC=Sa0)&l!5Jux
z;nX@Zw!_daBf*R|JHA%d`1mO-YAY;xSk?P{Y#cAl`K7@>q^y=!!CWwXFi!kUa~d2b
zpshr`VYj4JCjjJcfgaaUmyVJhvi%P$r=9me^BhoL^pn6E9e+|_@rl1gL<aC|5IckX
zA_~t}U5$#mRyi}=j}40ta}*4J*R!$CNFxFF4J~)YKqsj1zC7t;1<6BJJ&E}|r67>`
zpc&QoE^k<z)+DnNUvHWGQ@scN+G(F1UUJBJH4dS4hVMdMGfHIn%$~juLwQ3T++{>w
z>Vjywsp7iLf9-F5K|ZP_pOgbyAmuh^qN;i7^MWk0U8L5*Do&{ff3Ewbc4@Q1IUz`<
z-PNo82DOdvS~BWa&|dhCCLsy261y~-<@~dkaZ1MoH?eu|DvJK-v|K1C6SvwD>b8Wx
zL3JS7>V&@Xd#XR?89fUl3zN%ToV!T&ekPqR+cyQqFA#KnHAZ3-xPD(@*J#jd=zPmF
zkLth?4@aKRC24r`sJnIDhSD=1?>Om5+@xYfRKkzYEgG~SS(X+ke3X|#A&lywBK8eO
z9}}LJ%{~g<V#sxR5?#3ppgS{@-Ku&Pf%#z&4X`HXkx;vlIy7zm>4@WjY0XaMc2yO?
z^%h3D5PAXXJ`6p!n|epUwkYy^ExXKY%LAK@UJ~+z1iu*Fns<iUp$D6G*zdjlR(R=l
z{!^2p{m%-lekfS3zA=Cv6u+^@WQiL4q>p8j?W75-TnwXIdQ4XIrhe8SfL@{l(_{;h
ziVp1hzh2CgyHtRjT+lmQ=Q|+sdU@pRjk<u|TH?9-?fdSv%xnCc3%INmUolErthk!g
zH;$yXp)@%WfNAiZC`g`XfYW1)>>@^W<FZh?EUTM!0DKz35gtyP=*nF4p7+*-jLbC0
zl#N&HD-HP&h?jro>Cj1tysvRxc@4}q5q(1Qvpj1np$;fYf1<XZE<tgMF7;be?ooEA
zO_k?)bkFk=ME!>ddspftZu8u&LZVX6ndXQ1cdqGpne_3Wa5XT5HG>!XcM){b3O?wY
z%lQE;9nLn#gWx5{!&1d&5cgwwH&hnihFX=RO8^bnF{Di+u$jc*aRo@VPx@YfxJwDQ
zN>y*?CtxRYHq3T+AXjX1Gb=;zjmUsYhV!-TUFxC!MK8p!fb`-(XAq-Ixwoo>rKxaH
z{tPzJY~=+N8^m*ZbTz<OpI2}nP3fKz2z$OD&set*5q^+Q9>_ym=<GoUVr9XCUsrJ1
z<vfzo?#0YQ{P?z;<?zGv%|MFv5=0_GlkzXB*Xm7VyECAdH(TDTs%9G`I73iNu+|&S
zCQLXrdt4ieOk*xH?Tf$6m~4movKM=|oI^I}d>nsz%cABA(vInCca!wG#C@mMJN02T
zk4nc$cf>x6K+(;*ML9U*1?3T9Oc<!Cx(A-oO_}ooS6;yDc3P^<yg5mX4J<m_$ST}k
z)|}inktOjfeQ-JUw6&(HP2EF*NN&n)nB(BavIWls-n%@Zl{~mOVPDv7;8mMy2f`u3
zuu==6Dgy9Jm!RD2YWSKwAC4Cn^<*DdxZoMbvJ-n?5S@}^ON2zEx6Ghu8#B}9Cj<!m
zw`3~yi{yi<92@E#(N<@SS{P!jVky6uS^B^pVp1k<n+=flQrg=g>^<~6gQCZUREyXQ
zsvdj)hZ7U69@r)-uAkA0?806bj*?&SgQ2PP5M$(J*-zTj%b-ZF7ngavFFE00weqB@
znPoMBGmc0?@#>Vp6TMsHiLJ7(hhm)G*hr^yl~{q;&g|moP})67&&ODe=Cq3RXfk7q
zW>Z?%_8*VGL8Xg8EGBG9>7c-S^X{?r@GGETyI5<I#O=!|w91@MFq&*V!qta$F6VV5
zt)-sA?jYavgD!VxvT*1J_(t|2h#@bcxkz-XJwwnw<WmN*_QVbgO_?AStkykXF=fDk
zrv_L@#MIGI`2e(#rgSL7uYlV==4sL(b*FXCmXib4*=KH8(~Mks(cr1HT`k80vlz=D
zAc-2f+92QOR~I62qgO}96Vy=<nb9N*oTS{dV((VsK{l_BWI1oiAzsJHqZ_l;5ih}_
zV6HcvC*1=`1rp0s((2(OsFg0xZNFOoGC6)Y>mBa^P0Bm!?XBS`|Hf!*%~IYM$lc*g
zMT~k-q)iD$q{cQ|KAOa4uc)7v3ke~6UfZr%r7vQ^5Evk<yO-crdBfc414up$OJkj=
zwJZp0@e+i-%yZ{o@KB6KUqQ^ps&{b(oS8j^IQ5=lAQn4yS%Y#=1O!&^vn2p#>Xz35
zg@?J)Z8#ch5W!y4{F2k3a8<lSAYwYz>t*|X3+PK>on1Kx?mi~QgN)!!p9I7(ZY;7n
zd)l5k8vSPsG2-3$uwSbNTz|*DZxy`UjnPpCJ_YIl(7oX34=r>jA=$xLuConfm9dn!
zp3LMnKQQeo{1&CO>MK@Yo&8U)yD13!`Lce<xc{in)#IpO3Ku{N6Cf$?*M(6)D(Me@
ziy^e*erx}L7QgnzI1bw#@rb$^W%2Ms5Z1KU@$1`9?$-<bb=)oL|9t!9%;$IWoxkVr
z?O%Nf$W(#m1Q;Wde@+?_F}u4LG7LGNdll!%59JPY*huW4lZR6GC#@ZJ#8$w|Cny;*
zINcMXrmzl{f~4Z4RWfIWU5-(^dXIYKp<2Iq3wI^t?z4!S5zMc%u_h>JIpa8{A`gr~
z5DCZ!kKllOt9LCpNX6j5cclhEVOiF{JDVs^3~|DVN8W@u6kQmws*ymXoF!9*H~AmD
zdb7;oZL?XXRbDdd3fh`5H<}_Q>BWV)1C%b5GXbu_kPG6T2)a<0g`<=1ELmkG?Nm|e
zh>;W@>>4n_pPouDg^ORHG7AF68=m{YF0K%}KqA@@7-694XfA1?xpkULVqP}b-=eO0
zR9mg8*$*s&$uJl^*WOTG=ugm=NJ-)fX{VT!QG($mV5(-FH$(fG(1wLKhGE%DqaJv(
zmymQg$7s?w>lxH1r~hdo9-5EVb$!Q^_?3J)N?Sdwr$O0+S%(Qn<%t^dTWZKD69@nU
zgM)Mx%cEwd`^0d}LJC!183y$P2&~BqyIa-WL!jYhE&x4WT1HdRS|?t%l*D5hfo(tU
zIdba3F72v>6Dl?*l9QdZY1r9VdHEZgO~7Vy5K7P002zX;I#5EpNyI&+vBZcF*h6#`
zjs`*98Om#w(}f_GC$+e2QBO1y<fi+P#uyB5;BI-MJzEE`arHV~nU#9OE2var*KGj*
zD;C|sY*g-;d<YGn7z~59inf9+&;afOU`XC(a>>x54#f!GoPc>Ae%mcG;mF<q+Pkv&
z{j|6jy#&HlLp;;YLUY+o`i(XJ9bDOqFxRQ~C@7Ye;s^4zNy}Hz%{MDk9f=;|PgPLB
zl=${sh(46~Tl2!b@|Ut`j)9UyB30u<w!a#(A=-I14LH&wX8*E&N~!3L-PWlQ1<Eow
zuxW*KMsY#?&csSps$LH+S*~m|^&84Y$3$S1bz@=5l*nQB{-AHit(BvubHj52d$+7B
z2i$li!|hIXuKWa>7s0*H$o8JT7iG3hReg5Z`yaYP?E7nTD#>rOW-;&~H>F+$h^c_S
z%7JQGM(P4l@z`7xQyWx#y~lLs8G+Vhz66mSaQ+uHkmeLu&6=3XnCTSpG5BAQcW79V
zoq#MW$_eOmWe+UIx4N7Tj<a^Uh1J{tNX*f@L#8S>UsJE^RZzY;=A{MF9Z;-#!%bP9
zd=u<13+pmD0OH=)z(;6GFECyF@&&b;P*}m0#&?0-js$I4gV^#>Db7ujw{b3MCr`Q{
zU8042;kw%YQvZHt*gj%RBZdR{fg4<ba_f-^x6gr+zFZ(Wr%b#+8DS!+083p5##3OR
z>l3?m<&Y$_+{a?op_RA<b3`7?ia1Hl<rsi8wvJ{{*JO-2XaDm|fbCONDs9d;KY-i%
zlxO3G_{aw%8C7vr-KRztz4?!ZCTOVo?@&ffu8oQ3=mo);|2vc^t)l91qa#8b;U<~V
zHhyqm@o`N2sHX!KSk_A3jt2$4_veBt5?b?<wZ2_AVUN5*Rcb9oo>4u;;3-0_$;OA`
zmeFDlZZob6caO6<$!tcrwlr>)a2z+?7-B0kVG_$i#sXdQ0e0~H2}fuT*CNmGmnR77
zw8j%e4KQ|%i<p>p#M)`<rX+o}5XH!A2jD;3Fn1oc31lP>OOY~4o3n2JZqA_P5@DK-
z)qx3JhLM?NZt*X0q6pup_kM2*3{yXj{nIuddHwzy$KgpcDN5m@9w=C`q$y4)<KRBo
z=p|^ZxT{z^<}qp3i82D(_Wm1I`vZ$wj19ha2|qET%0|Y5_Vh&&e}G)9|E~Y@-h_<?
z<v+Y{Vy}NSWEFV{x+tab5Y%<d5ihomw;CzLX^xx1*>1jc*}GCGtUES<l45yj{5oQr
zC@`Wqw3nJ5y1x2DTa}-uZc%q!B<~Idx2UQ1;y_U)oTuahwazg`L_~<OfL=^FpK=-A
z_q3PtY}V&C?KgW7IO(qg!hVO$HV-{?Z&=Um1svN^=t>i-VzF^+#_!W+3UeP;o?fGR
z)XO@K%C!D(E4t81xuaU5yLNaI2R6ib8tDvEX3K;)6XVQM@~y<P?~G%81`_Nfbw(rP
zbYH&p<NbjO)sYh{nH^BN7AXSbh|w)nz3^Xg9;=&aS?4uXiw%d&9qOO$$q)Ns+vQ84
zkAI(7qw(W|pR~=kTWcyoLp!4c1EDf0kswOvkCL4-<}a)hs5}aux(Qx>Qy*TkcYtw8
zR&n<#%vJa~j$1=T??XOVWhl+`$;|dVvkdypxYB2U8F@SWgkX;cDNBGKzj&^HvDYm?
zuw<l*a^+b>E;$AI3|RqG=!ggZ#;ymmfLSEX|C1*8yX$Yk!N|z@`OvI!;kthc@%q-F
znBkvzweCI{HVyPpikP1=%i-*kgEr4qFLud1K-({y8dFu579-Mi$3G)y*6eC}FdZJy
zIsWj)C_bPmTY>R<%_oWJO@$r~zhr2w{4J}<ay&8tc=x)lBx{*Lsu-aSdvFUynU0qw
zoUIWnNp}I91;?J^N5-HDIN92k>YxDpZQJbUc)_rJTGfkLJ0F3qfzQ{m;J&S!9V)fq
z+y9NM0CXqdmZ2L{S&lY!|0S_P6HQ%Yo6>0!?DYapI7%1pJI9M5=(>49c^P$>a8Z`}
z`-Xl;Y-m`N&ASv@FznVDf|PkS7QE=hCt}ha-JZ-v9S1tz3Q#!~Kcz&HLI7?BW`_H!
z*Vl&`G_zCLm*5k&DdjytT66ox?cA0cINhZl)OsUXh1*(&7=#g1IzM_^XB-!N=GOqO
zMa||r$EdK~R7gKV1n)(D4rt!r@O)198QG{~WmCO1&9%?V{(RFlnNgQjd}+iFJbX@C
z_4NXSg_w%qIN$s^$Nhd@XH)Muwx~B<k!`wL3jRb)gzAXjuyvyO1z99b;T-O~jlYCG
z`*+uJhfrE4HG}dx?E<XQrI8g`iD5pCP+z*Ei{#*<)ZU@!&uFxEz|cRb(JD*1L<8}q
z;TthI0s=<(b>SiVRChq~R8HWxFv7YStm06DX1yo&)ZmS!V5bG^yi_)lXA^ju^{O!b
zRukVQ&<IGX?wk#+A4FT$%o{lTzCT9;vl_&bjK!a9{5D=G^`W76jOU|po}cPf0-|Qd
z1V#03$POH`PSl!M?$+^)z09XqJSNrA#|%JL{+e1^B5`$NGqJ0wlpAMpc=ne2QSHS^
zh}02+lEt=LrIs9mN?J-`YP)(b90TAsE;#w+6`{0nLv?yJnRJfLTPjBS@xy=#I@tU|
zeThyl#`{%M3Ga&_ycYfG!H&)Ewf;Q|ZmFFt7qNo!epv1c{ju^XPdh7yB#fNuu=h<X
zAN*W8yo5o(v0_{fU8F}SOuF~AwluzUIv@|MuB$Z>w*<Tqd;xn;KaCWYoEXq%se$P`
z{NEv6ih%d4!7g-B4Qk2Pz!jbLf`?+xMwlS)R~3LUVlz1#H+W+)Q3u3sgXH?PgE5JO
zfT5)wG`h;_zW{Bv)We(oI{97KyY;n^*R!@44{E6j+BRw(T&=fm*FSo3t2YCUU@~H=
zP(ytjGf{2g1la;zp0+WiZP)Nc8TFUNPf&NdH5$`VO_88YdRa~s33X?JD--I>e{E@H
zYVRq^nBu%lInl^5_!{vwMCevg#{JL^^e}h4w7-}uaKNia3<Vz;L1{Z0@Ku7mEA?&1
z)F;s(e&_Y6&ccmaT-0XP&562EJZsAYLhrHFU^v@WmJDq5x5f>i+A?`!Y=>5NiH^Nz
z>V(WST@E4UUfjX-aMYXb4b#!!nExm{ZS6^L7obkUfQ>sL;GYF6Ywf_&C}w?jb}RC7
zpnJJ}5{*EL!#i~q-`d4WHmb(|n0kR+d<Rp!qM-)l&%^+AD;&lJ;cg2V_8}aJla9-v
zlBh6AxBxLztfkj{`HMXZNOGY_Qt(E!J&1ghYf!+{3nHw1HqnQG6Yrw!{W7=MN;h$z
zE;%JIJ__jcAN5vhuXuq9C~%UmZj~+EWdKnp_zgcalX4u*D(x~85VUFb&Op@W@Z~U^
zz|l<7_ltr05HI?~nt#$S53+2cN@pQ*a#wd>^FTRoX***(t>o{2PHCzr`WkzG)mZ)D
zyoS~TcSjBF3zRa@4Fo*GMZp7(fPr7LMb*mk6c>kqXyP>GX+@ZN5b)i~6Hg;-3)z{q
z;myphg`K#W+g*7tX1;vzi?|(9b}eenJhjpv>s0pfxhyEKXYXOtm)f1t|2?XvJ;2oY
z^W4f-kokj=hKb2GwEd(lcnUo-yKXkgIQv4w!(cug9WSP)M@ta_9G?EQO8*)AcTd4s
z_I}3xQ77xx?VL|3v_St}Yhm!0<C?1QgbOmW^aLZQPlC#3;p(Q@+n|b6B|^f{1Kkqp
zy+b#mF$i+}iGfA)IaOfbunp}(e6XE6&$>k?ZXw3l!>fteP)|<|EPDJb%`8R(z-TZ2
zzuG3ud!~B56DYBSIUvy*JpGj+@O05Sora+WpNWd2aKKk@Xuhsu&d0W7KZI>3Z6G^z
zg%~%r@FOjW6T=DnBvPF~h?%*V`J<=H37JXWi||5PYi&iv*yt(Ee~Dlv`_8QxJO&^9
zM7HUE6(Qg}wVGToNo||6+Jui4<`kEg)&cCc_G$I3LE*mNzPjCf@!|c9t#4u3KL+1p
z(Y3|+n0Wg#y8f9bs84qPRVq($DO<=lyQm1q^^*u~a>^-L*e|S$6AK&RY_7=xNKk#X
z77P_hC_yv<?cz3UZA|hgnL7t+R(!FqnQVTHlk+DDP_>Y2iP!UYc!S;O6xfZL9X-XZ
z4ijddZJx}U?CSp<GfEYfW48oOGYc81jkG8+2LT^e_k_q++ea_2kF!jF7D8y=S6)}`
zrsaoc+P{0WM%r<B)&LJw%&pHOR<Ie?v?C$?F;1Ak{w11opU=Qj@gDi;1s;QF<;~1p
zzyg8w$#?!VAgrcc&-(Q4ivUlYCw|Ng|1o@Q#~n;M1$GpL^jBaYY~Dr}8vY2m0C>96
zejkppLY%G~`KuPcvY+m})-PPxDSz<LND*xA!|spiK_Brd8ADsmFA{x(0{nG;o&GL_
z_}Tx;@i9cq#D|5=WC|ETA%D*Mx{ET)rcyZ8lj;KxKRHoJC@ju@cnzc$_Kh$nQK>BS
zv(8wG6H7m0e4h;5VF0zof8Y{VLlD*$J;y^IW|1Jt;SQzxqXs3PqueR03l9JhL0>1M
zz#nYpZ-}|0-WYD*#EUU<I)%UesR;V&7VPFa==ldfG2Q1S-ZXH`e(G-)1FwhOVBmcm
z)z_-A_1hZ+z;&=@fUE;-^kI{rm(VQ5QhEBR5axE6>`)c5+@FvyO!>S_=_nMXC+w?I
zM)4Ca*WnF!7OV&PAXaHHs2yZyZiiu6agE&GW&yZ<36*_B=ce*~{o2d%*8QU{=+2H;
zZKTyddpdqSbKhm-_q*dl^L-E9?>0ObxA)eiQy1PIUk$dQ&EPd|1>^#N_qr*tg@qw9
zoAo^n3sClWHyJZc3`{oW7YaH|Hd4DVJAF{d@cScU=Y-6({X}06KgQe|>e*jseKaHU
zM$sKlP{Xz@wbLcYff$ND3}W9|z%`1PDOeeA1xDx8^83%G3vCMsXy9R*U7;x(<@S+}
zEBsH`d{n7ELjfZ~?zeB;kvprYHZHhfIQ#LpG@sXxAN`iReaH6XbrZ?QR{!L-=Z-nh
z93KZ4(Wmz6)EMxtiC~VnI+)<zBs0iSguq{Y1lH?pjE*sA<{rcBt;+4p{w1`BNA7j@
ztCxaEYjmXUp)a%RXiMwqi5JY>_a{0_uV|=*V0w5!5F*n!6D1<%rfP{3!M)%5m12KV
z|Lv$jMyqSz*_Y~m0ec&{+I67D^W&mi4iaL97}*M4^K*?~9Tlpxa$c9<SY++h%r}@r
zoC!e=<>U}JKJHUCMz@*=@M4@i+C>IQcHwHEnNYdDlPkD|jH%qZgwy!4xyF3Hd(`s?
zyAYIMG5FSak5}&ar$m%5-{z<!-dy4SQA4E*z8?oJ;Ff^RHaSo&5*B3HsJ3u#$4q^G
zDy!rA#IC5Tua=GkgM<>3wF1Y3V)QEEoOj9i`X$a*xWa!xX(#SIWEQU?;Xpnx>Rj@a
zH@lJfht?z&woL($Y94Hg`b;gKF%&#}5#hXbh!XCk(`jIMt28V=UfdcvC;trw0iQ$^
zj?q}+znJJV$xYe=Zul8j_)F`gwIBPJ#!#1Y4PFk`)S785QsAR5A^mg=49IP1u?drg
zw|AH;*#zB6dA7f*a%5(qhEPD+qTJ$Co>NBq&|mCwxjC6PPe`=q_p(aN37Mv;y!9LI
zP#y;V?_07}^FRD=NoN_?f%%!T;+ZZ5z)o_W5nxbV`?bFk>cC>yn&gP*KmkOgdi^H~
z-hm)8gsEPn+(rz2u(Ts{a?8XkVzu&Ai%hz7ckueq@Z@U3vj|_xHLL-a6eTHRvcc8A
z{ph@jd>3NIT)n&K8<{v`i)sW=jU(wl8UsehQExe19K1Wd3y}?KoEPqa7x!E-WwIcR
z$iV$#yG3~kekAKk#P|v38Mw6D008;gxkAdY&eI+1BgNDt93Qq|Tav%GLF-(Wt$CE1
zTNhL3Zk4&T&iZw&&2hw-6`W%J2DkVt0ts-FW8oa-zu{W&psE2A%GsXOiDMwTNF$)B
z=TnM=v{h*&Bai_E&=IoTj`RNZN5(r)rq%3R9coZYBE(0K7Ci&cH#NU}ok_*A9!NTZ
zLeR})?=-&}YebJDWEJ<4Ovu?-S^6DEe+fy8%sivO$$hgNQFRgQ9WsN*a)lA?utI?e
z9Ehx8I9N5#FqwskqLJEb3eTLeq35I0seC()B^6HIq^f3}cs_f3Q>)^<y1#imoi?-F
z?8+zwU(7IRZ^Z5Mb<bygcq6m+*DESQ$PWk(DrYqhPb1x^mE;R&h5lDc>@vp=X#K6!
zm2Ht|b9JN1rQ*8Wglo{(j%s{VMO_9<SCU9*514%){4a%2Z^*tIf3;G_qjW1Syb-x-
z2kW)6gP48Xgj$y*z%ejc^k83Zh?%O46OPyn#|FP_27v@xA#jfj={FElY`KDDw(?_w
z&AnvXI&({}#%ZyTKCwS}lA?52KX*;PrE7jtYXIEbOzhflQ(~10gc4EEa0jyRM<M!C
z%LKxJFuq9;NsrI2c9_fAKXnn3s*B^DA3M#1kOR-F77GOQP--!^gCFo_T5}w(lb5Q>
z6Jo_GVCp@pdX{7l_p~>^^>(QthjmhrASWi9yHfLAkW1{wfc%{5x#in2i(X@+qhqIy
zhgem{9eQt{xNp7j#AF*dAiz1HT?wLtCuP-QV|GOtR57XDiAu9A926|u_ttSm873A`
zFq;;2{Xr)_s){Ra4fM=X6Z}3EI>bfh``+F6Xiunb)Ny12MR6kGHe6RaN{*EjbS-3y
z^jVnDDlW}`Is^khn#Ak~mlt*d*=`P-Ml2_1`w!lDGB{B`7^8EPB)Mz(jKN_s-F=Lz
z2HqG=AOKX<-JZCA?l=I@8YENP;0+4zhkopV1WlP)SBNf;WP_*CZj=vM(nXu*3}cGB
zO3}qRInN9DCzq{=VFazS1A(V9G_^ZWxf~<*|6%KGz?t6v|8Wv3X}O6I>t5w%r<0pv
zwn{?Mlp@3`iCJr><8CpVlKXI~6X$SP<+ji&Mlo9$KIO<gHDQ}>+>Q6UnD?>S`M>&n
zzrX8uUH|{TtE+Wgu4`U<@AZ1Vo;Qyhs}GY)F|EYg%ngj4lS?lBb@gXb1n5+THC$5o
z=XGq*k)halcIra>F)fS750?L~9^QWHjp6Lb+Y3N;vVQp%2(kSEV}PaYh3uBQDo!r5
z+nc4t@$4I1N7$ofbTve5rYSf3k<3=Yyvz#{jD{&u;Lp#(8d}hD=A8SjW*0i``do8b
z-0Jh?xZ%?S*fi^pYG2rh1xsO)35xtCTju3m{BX=lW#2CfGE|!+Sw=OF;z00AW0*3V
z8-{G&(*xtl#kA1VkRUH6T|o+|N*eea7k{<G>z+$ofP2;4m9j=q4VJ6@14E%wjNFyJ
zA6hQE#WSNbkq;vLn)mKewkgSUBiOf{VE`@vUN`jfXix{~(L}5?r+~8K^QXSR5v<*R
zh79+4U|T=OM5}yOZULCCYWUZ$$GM<i>MSuAOm`Y+WdxedNenZ&9^)PbJB71upX=-T
z%;B9Sk3BA^|NY!$hrp*wKf+y~y0v<%vC1@ei<|&tv`}2fGMe*iVvT(}W+jc_YG_f6
z5S!5k+;}m2-6T2gdPMoCw&Rf=&a{)=e*&irb7K~_3WZyoJ`Z&EH<abMo?mC*2CNUw
z=@(&*{0dOdrHyB&1#L_39co#Meg$~_qnqKZiqKN6;rx7xHIO9ImKDWON}c1&M@LG2
z-)B`5V^|lnTDLP|-&@sXHf@`7ZC?!+VkTczZc&c-E}^oXMg}@C4JHcp5F?TVuT64L
z)b{Yo%EDrmWw3pVFuA()!-&ylPXE(+r=4;C={_Md7*>?1C_q(t6POBXa)UvF@CB)p
z?^fU;V!Nry_=yy`Kk|f_tXw_FJtR)!nNHQC1&)Dn&GlBDtW=u@EAKX+J4nb-yP3($
zy1^NaMgB~t|AEL5`HqH>1jgV5z_e0Rio54YSc05R_9@&EZ*hXTUN}LlmL@-Z6hO`l
zT|H1WAGho*d6&<OD{*FA-PSid7dfrfknfUC&am(+5FJE)1&+H1z{=uabA_%4@PM<@
z;bA6O#<)$2U%=K%kHP>uYa|+Ik3a46g;w%5*1@IsfF7B3iA39>SGXE`;Q`^nR4g;i
zR_#f^#~|03kW$Yw$&A|fCtWhZ@>82>M^8Lq`7u9iSW8PQ%(C*z6{Wr6IH$V0nv=G<
zwx*^wQSe5)k;C2fThq#2cbs*%UwiVX{K2{uSv2AVQ<ZDf<N@?O$j-6#Pi=|mV`#;-
zM+g=u3zo3S%58ZE)NeK|S4d1RPjcepP6uu~*h|lM{PkPMb{`-AOFs)=Z=<Q;K`R|e
zrpi(P`1(ELJ%Clgd@%E)s4(sLHNbQQCA$Ry%My$jt<ZZ*6`Fg%bD01Up>4&mLol*5
z7|Yw9BG5%N-u6kZ@_}IoB5V$*3ieHu;O??Cu#7<m&$2YzRND$Uaot<`$ujHeYde2a
zUEaYI>|@s8mv^?vTEWS61#h{u4cw#8!Dc992u88X33v)M9Za$306s4RzUP-N>1vk|
z^>-?JJtNwd%mu1Aei@S3DqE@=EQ%qIJIV^La|x>lqu!65A!q!tP~{S;=cV~IN#zQS
zDR2NO!$PBlVANm;7{$@D5A*8!=Lzd+Oz*}XP9yqM&2Jv$a+3ek0^3F<E1t5aGG{UR
zUhB2B>1GEuB-p6VjX^?mt@*NPiqs0U$%iG`|Ek#PtBM(Va7qSUO=4=_I;sx4rg9A>
zjYePZxxskw+XyX%TY8J@IfZRsJnj8^W`T8s;ma5Guc`~AS1*z%SIz70MecLEtt!oB
z*4j&>nB<7yc)7Q-XQ<Y<_Pc+O--zNDBtL>2Lyj<UzD9|l+NTv7Nx!Cz?tXaR>_G5k
z_YHSaAE5pMkapBZVC~bT&`I$D&#sP^I8Gm8nOHGa)6_(il*Efewi(3L_F34I6-cgR
zW#LxlI?~eB8+IIV!2z2;W&l)m^#bL@c%VlHsqIfHxh$}%|GQ9yF@yAh^Zl#_%1yHd
zpo-{lhp(B^n!uyX)f1z;kqx0@09Fg<ZB8Hb1zd1yU?0PLdMP=(G$^prD-iV5cUCz4
zW!=|)A@V<4enGuuAzPRV9o9HO3Tw6#ZU^ZsvlS=hTLBIs8f-p|G8o;Q3dYiOP%)>4
zdV&(aHv89lLb?*&5-K`t>Fdh7>$f2PuweD8h3azJ8WM{F2m>rYs?|<fE?r>X1a6cd
zgSEi4GjGTK%`kq|KhI7^8(pDOL!iF4*yJ=z<Id7dNyQv;j<Mf3zNY&9_FDfNP+@(o
zaj~6!<|QA!ttt%Q<@5tueZx3Ku_0761Q5#ExUI{NwjyW|UQOZo5^;SfoKUKv*V8@O
zv<6qGE(seVvB*5!_FXW#zHdH$P2W+tD>=CD>O<hX*XinY?{qrZVx#4S!g;lMf(%Gh
zCc5T|LTAKq(YR|1b@=dj`=|xt2`vi7bRIy=45jukf;lo&!&aZXhhzwRFcMD-iD8EI
z{Im>G7Ch$N0W)ojj<|v|mQw3a)wP8I9lxL?v!H@jJ_h2gXozCEsL;pDoS_scWt=a(
zgIha+*NftB9Hu)$b;&s6GJ(^H@k5aPZMrkG=r@4%j(JSuH$^YmJ-h~nzthi2!l1(X
zzo|tnA>|*5P1j<D@#UHn(1ik-d?IN4g4l2gm5%1%TgHR~N-KBhrYS~XW(9?2;5Imm
zRyIJCPK7_NB<3O6pO~q*eAQO&<b1L>q_!6XQ%8#qjC93PNtM8-=N)iy(qk&MBXVWK
z%fB%U82$Y9U{)K7c-ps_1Ofz{J`{S3r{6k`%qWaZ$0zg73^r6v0lZf5A&J)Tu<5CQ
zM(YmGhUYJ;<r<x*X0Kn}R;ME3iz>haFauS<%DLq`^Z<DP4J9ke9>=FBjmQjCEs`l_
z>eKCrDX}HBiQ}w|VB5{6Jwbe?J>i&4%0h*lX-KPZ&Hz0Sok#6v*-l?dDCLA}7j34W
zp}uOq25^0;I@I8dGeSaPFy(6DYjdP+#dN%gm^Nw$WhF<M)FeArd@n|r0neV<*X^dR
zI2UNb#9g|%;m(JPo)0#T>ELYW7m>zg5Hz$xCG7$}Af99cX3cqKvj84Tr&E?wmaAlF
zDRG90xJP+<$oI(!a(j@d%MI_yx@P3)ntxa!b?;Tb{0<V#MOf~{Y<fnl`H~2Ei`xpo
z&T8^gV(Dgs06t+-%O6l0(M_Jit#d5|^(lXDb@*aECJ6(6_AAX?e)ye9#^m<;e%B<M
zEzHLrakSc9JJ*TOsZ1yc1w>te6N!0g0R+@qGWlds01q(?k+k>-sEY0i9~%?c5p@*1
z*^^#mp4Ian%GN<_!1#L%RuA{rQq=<YHzc{4f)8YQ`ScXnVrqfXzQGOoSw{b;UXKl1
zn-(CukAOw6*M<4m34_wa%WC81f<TiaJ@Xy=1$KGS_e)5lTkD?n%}_3!Nf-9^uA+!C
z54#%g(mH4sGR{uruV?Hcv!Hv5<M7yR-d0-fO!QKWVmr<O*l<du5prBl2{`~Ir7+}P
ze7R{g!7)JikMf9>P3ivr|9nZ<FH~9JClEEU?(!q_NW>P>Y#Pe*DUgh1j_E5@q1+bZ
z<X2V#W2-Datk>%Ad#fg+Gbk<~uA#hUn7r&iN}jZ;x@zum>Hec+zZE-x8#~a<xlByd
zu6oW}=F<tLlXbU7ca+UYi#x+}kJ`!)2YA@GZ4Aj72^rmT_w2<x<7>Kf_wIUtP6Dvx
zF2(v3N$AWpI9Yp_S$I)_ay`-~#%!{eI+jcXZ9&LDzRTFGNF3Q`qm|FnJxjYg-WFu|
zj3uxNEf1>;(uOVT<FoEmhCe6UJucDY_JuaS^w^9V$^QSTNTC)<8JN|N8#bd5i}of0
zvXhv?+fVbCpGLZho8Vw^Zri74gEkhK7;#p12|$M6fW95WxF%=zt1B!^B119lTBTve
zKK$~t;l>5*luy}$rAUXGZ<7bneHewaz1$gSsb2vW3krQ2zz99EOTecSfZF2>ah(4i
zEgL|Z<c@S_1Q63WBN(seZ~<TNX5FKDer63d)u2LB1>(o<l+!PH+*+7Xr12mW#-g4~
zyV)k!-*pN->Fxs90*wEe-+@g(o1$3Xpj;jNBi-?Y?@4Oe(6sChXxW5RY0BcExfE-x
zH@vUO`P?hy4_iX|NuY!Y)uxF}@h(I3Z4HF}Dmq$nA3jkOCF!*Bd%vUVFFWJs1Ev%e
zd?^9UN1g#RUMf~^Tw4Q;SY}HdC9gPqEn1>mMzeB%5BHk+O@;f;lH!pMr8gw=XtRY!
zO2a|p3uV(2Ht}a`?_Z15_%r?vd6%XLq)HjeRb6nO>@D&^?n4rqOD{ZCzL}F-OjDo?
zz@|cu0$oCEumrs^oUvu-O2FYBel^wwTKEhduM(LCDV54a|C^+zl=;mzMn<3W{-d_Y
z1nemjRe(Lp7H4PG0FC=K3&0=5ZD0Yjb}DCyn84UY8r@%u#7UM94m<iynEmt$Z9?~<
zL|PpcZ>!_gn;8$`I!*o=`;Z%eEmcthL2?lgW;#>=hAkWsHG^fqJp?bci(*=+$%Q`?
zlcQ0^h?R0PK#b!YQ(U_h9*--9PNRIW6~-MJNKRx=mRb?ypk?62@1MQI3A7#^eKQN%
zT^A5Qangw4C*pMJhruL{KO9XoR2+o(NgU#OT4?jAJz|AQRAAVnVUX!zip3cimkG{U
zURH8lEwHijpIT3g@NvTw_J8!x58fwGRfN)=kS3TcHf<}50nnRl0WsO$zu#_9*xA)G
zW<twtiZSLi=66^X8~-(G(m($JBj((_{;4*7vc%1d6tuZ=_N-bNTqd;wUPo@w^3W~i
zRyqUuFg~_s%!BMSmrN&t>MdwDwESt%UT5TkXH*e6Pbw?8W>wI?_nh#JRfAKb;994S
zpN`SN19K@%W87Z)7Ug@udhvvVB}CApM%<XyK#v!Mvp{676}MXXQTaw5BlDHDE4KNU
z<}a54273u8M?;tEy5wkC(&7g$pL33?G6;W_YQu6#X@+4k5Q+O0X@Su#&%)P-cTbpM
zkw3=?8^fMW<#c}>9u7ZAVr&`YXl-23ii_)bxtZ&x{<qi2xz<hT_uf{j62yz`RFE&P
zw&ZB<6Z^Ii()nv^M*OE7rM?6t9!9l}u6@xzcQIuK4hlCY+%z!%9%KC|VO8+USMHbH
zTyvhTr#x8AWy1fejPqMF_w*eC`m=1wn4oc8i<f6m`%&-%LH0(Z<JgOVi?y$+v%PEj
zxGt69b~(aZ(J^&7kK@+v{xxSP<|oSv{clAH%#&l#2{vL|${fbaT!68+7yan+Q$lkF
z`*!^~9tNtrsn`OQ;?XS^L=}IoG~TrI<<%2pyeSi%%HCeb145I>U-Vg5T3QL;?qBfu
zkT?DxmG2;m0CR7TC*Wpt1bGKbUpdHASuWoUA|*RHZ|qhTV+Ru2ieKm2QV`U22yV|%
zIDtCs-~e~WwNhZdGg!YckNXKekw$$o>7Uk}V`?UuKF#63$`ecu9Yl9%0|NAN1><kf
z6AX)`2Q9Od>*+qoeR=pt1l`8e<!XY=)^w^+2Vyp5P>pEJgLQD=U$I{@%KVUgA0$oe
zA@!G-YRHc(`w9uDN!axXXQA=QM}KGak=L4ESPFv(K%A-oOW)1Vp<|Fa@t9C|cs#p>
zwMpSxhqym=sibXE;9z2kf?NSU1+cN7&oK^RrE-a-(`IIk-CUI9Oh2Y%AaYo0e=5<l
zE}Oth^oq+ri2Aqx2QCH~f?4hOM9@>!q$u|H1HaOh%uo`3#Z|_d@Yn>{?2jv!4C_F}
zK6o&L3XM+9pNr2!8{z7nObWMj2c7BH^KZy-ySt&^BcNPU2BsTrWizkfIZ-iq7}2@X
z)~XiR8vsf8Iy}`driMbZ5|d`rQbKExu#=TW$~VS7bw3_-Kcm}n0kh#O5WiGVOYH6d
zog>f32-&+&T9o%~`;FK57xiGAx0Q)l1KgAz41{W4$-`;G;-U0;)FvAK3{p@koDA9p
z)jlRwO&Ax~qi$fgiKPK@d!J`HWD}$k3<FN~eR^4wM~*2RB<}I^vUsNX8OUV(&lu+a
z^P(wV0Uoz0V=GM$xclfX%JlgVDuauc$O&4Ej<J=1xRysnO-0xL1{R;CP=|(Fa3*l>
zt*HBTcg8$n%@o@PlYDK$@rJWcA4Fw&8`Tw#`W?jEgJ3zuG(#*}_|P%-2E;rN_DL*8
zS|sMJ%%q<X!{$X{NePcH8HDNp*gHm0^?-EB4HLBsi!V;%4PK=@jElE3lB$1v?j+4S
zp{fi%{bTjU#>elp0EGE5$^J+EmY?pt7oW0um09p!w&uazcufvaI~q#FhKlj2JYDE(
zHda&OWYVhCf*F}*2)K-PL9&OGClj%<lqbWkF=gR-K}DqPwTsa)(Y?jbI`v-Mzq08k
zi-YL@q$oDYLHNu~!ISvN_H}oj(xzLCFIPZgvfKSQbK2tZR|8d`RBT40o?@dQ$C=Te
zVD&$K`$)>u?ow>!ZI|0F|4rJ^E;B2=5Gvn3tb%`Lsu$41^?WpGwjKIXRXPof<23%f
zP&MH&n-NcW61Fs$`9#<nUos^;Q4(S)i%rfi|3FaxoVif^Js?onsSkN<KLrNSP$<~5
z_vlBUoeeNSwh5s=LK<3@>arPVn(z1*&NzG3<WfP^DDe5)*PhE#?@F}hx|B6p-kY?L
zgej~fTA5~!1Igr$K)ZmKkL<cu0&v%cdDSHnNcu_eP$I(^?17W~i&PWEA%HFr@iixy
z#`7_QT!JL<*pO>?O)9&l)Au-s<voD8l>Dwu2%ydZ!4XlGUPr$_%sFzf>mYjipM&Uj
zUulZmnZC9UFPZ_Gu%iv-bU$cAVH(7jT^_=%Rk#dZ#k!Za0;-#Yox$BL5Bq>byvFV5
z_oqIeG~3xfhufvV)np&%<{Wrf4`0rvM11OW+^WL7Sfi>8U_uf6EV?Ne<5+~YzM`8*
zD0;0rG+z*In&;GztU#@kwfzr!=)vLwjR1lUE%ap0pnGub;JigUfKnA~(<*RS2&rz!
zviKt;eKYFoyZ<vi{eb|N0~}+b4V@~IYq5sg#h(|`Y61wGklz6eaTm0BYc@(NEJ{jk
z;cdu}$XF83P>;S#cdk+^Z7jz0XpFJbFYB_7ytsGvncj@yt}rz@6Hd8}wSeT!ysdCo
z7S_24@n{;=>EWQ(BP_w_W<F4V^VD?ir4(}kxZC?=15H{vQ(1NKF6rx^13K&P{dEKE
z!6AjQDQxoEm%oC4r7Ky+`w5yETaOnPn<KXi*9Q9kO#@iIaK<`_mlQg#6>n4$AZM+6
zQ{_h}aevZuRTe$;Wpwb%*~{E&_t*G}A9vk)g%-pTYYJGYV|v&C@XS`w^qO(nLma9u
zQrGHG@-*{dSUo*j&sCNoJuGv3kkMIqmO{Dsv2SFQKn*494|zAOeSq%ZD~zP$*_tDa
zCUgzDC61{V_5ze8N0!;3mWdB&dQ%R79A{~GQ2lH0)WZO<$g1uBm-s51zyN<JJFTX{
z$@#5aFEOlcaP)kRX{GA2I@onbvDZYPDa3k4l%`3DrnGz)C<i!LkKGoU%Xs|qVN#BE
zC5<Ik^2J^2Nbc8ug^Tl&U$Lj^uV$9`weuwMQ#?*hU6y<4k@G0H@CV+ie^{w~7hb%{
zJp(p(445sOi@WqE{D;zj&k4~K>j-Oser*XQssgbO7~+Qk;<bH`&72Mie)X!)+LpSS
zcF!5s_{%!jh1+Lq5tnK-L_3JO2sX$KE)^_PgW0r=f5n1n@MEFU_DuQ)fLm`~AHI~t
zxvks@Gs*xZ&FdL7nxg-0dtM<Ys%+AsMByL*$m5qQk;C%l3<~Mm9u+^(X;KB(_^2)T
zk2|CNB+XSIG*A5k5fi9%lw=|@{-{t%)uy$$!RxB7Kc<DAOJ8l~xi8?wivgRC4>fX5
z`X|3|JHwm%C_q2wff?vBXxf34(KQJ#%0}0)ZeiUejhaVbLaR1e6q*7ec-*P}s;Vg9
zf*gcie#p~B#?SQuL5Vk;>j$iDn5z)#Ias4a7FJ+cGvYv+HC4U6U-O@k{{#Q~$kzZR
zqoJe=h}-gYaYleopmc-`Z)43LP2)DgF-aVcz|cd3^B-m&ovwcd;&RUF!ycPz7j>@c
z`3JTDVcku>KY8kdO}(fv+c!S9l07pnH>X?UEV}XH;7+*C7oMV-MtQix2O-b88vw5{
zN%yr*e~~|7qxN*9rTEYj&o%ym;ab;76w7MAkzy6}*To;xB2`(6LNBFtbR(px(BCFA
zf`>ArM)oz2u7jx3>j2+U)C&AnW+l&hxOnl1reyJ!ttUW)QOiPZcAe;*pAN_v9)9e1
zv99)}-=*_UjwLW(bXE;;q@2dj1p>q9m|t9?NHJu~h~aa?1mh0%RxZ5H#YXSQ^!8J2
zoty5wsNd_Oo`BB;YK?~Ngv1~aJrnN(i3taGDq|N7?b55%r#k`03+(9KuW&E*n;b(e
z%;}SfMpq-XE!qtGKDv^{)1AkLS{Wt{$xf%pl-k(Qf|z|Slwa@uq$xWC5{pG?u>2rh
z2O#kiUjXSL>D8~2x&%=V!<g}|{%aE})mQ+8FAR@C)K;oKO-m-|n+L4yt^JH1nG>ef
zA-M>)cpV!{^7VF&&;~trn+l8j$y1?eD)<-1Ah)n2AP2JB%}_uHcSGMeXDkux`3QN`
z2b>|1Gor>{rw{jAaV+97t%Vz)69pw;6km5w_-6YrKoYl1Ul`54*!lH6vBkFFt?RY5
zcgi(^z1jaJ6-+Xi7}N=fE5eAn_^bTnydjWBl+eJK*DwViS`hP^x4z%jF~BpfRY*v%
z#vRBu9!25^fA+@vVSnOTL7#-percDhYX{EP=j^>w4OF!jlb%lJVUle;g9W_p1M^(~
zI@lr%dia#QB;&+WO2d|RW)urOm`}o&YD?lQ4PqJjrSFHkuE)p6VC@ETo^@cqwd-G<
z`Y-mEjW)m;(=ueBjd1hjM4ovTecxj;emyg+0hKnY3G|EueER9WkPK}^zm&z?80K^N
z(6#ajgE<LvUDdmX6qA;#!ofdwUXovOe2sq!ChkMccx}Ztz&4`E1$mf6?gr5^*aZUI
zZkUkD(V|#5cSm|!kIZtk38(w7eo7zh?HwGozv~_nwTW`BVGn?!fcjq}PH_a<(LPfq
z_oiEdt&C=-84zm<<^+x`HSJT~w1-%&N`*agO+4b*+EHZlXo-sYNEYraD>gl~aeGao
zS6x8BpBM5ZJ?1LPGJM!vs+lI@2kDKY1gJDHDg`RlTpe+CN{}UQNZ~EX^yxd=Jzqhx
ziK}okp7Y}6?9%mU7|tMTnf%fwSyE07Hox1=wmzTq8ZVIi-^&pgSY{)ezh(j21`F9f
zHggecDk;zsbc*JZqH*f*#jw2lPak5ExuFjN&lQ9=FU|OTd$Tk5>15BS-??*>brssZ
zLgLwx)Xb{S+};HG90*kV=|>^-Eg&|;s$qhSCy}ZhhN-O-vWS_&Frkr8^-HTbe3R**
zP0J5)y2!M^n3+8PVY{J!u@G|$YhQ&Vo+gJCT9`UCyFa~jyJN*$Ri)oN=yAvoDVq!T
zLreiMo0R#&%mk2eA^hg0?AQ3DoE-nf6!4{Zd%WUyb4`mUj7N%NqF=Zh3g<IpJo;-W
zC*D6RY&qRGcjanP`WIo??`r>m`X;fN&J^WS-{WO*NC23+@8WHnCUV+uahWBwEgTCf
z;?CykiL(<~rd&rh^2BuW0j`5V?o*JK`MbO;?x}j#Z=2z9I_7?Xm)gGr|HX71;$LJh
zIdlyJ;DaV>HUFOvz<Uz3UDZj;H&6;af=mc6&U`3U9A-%fNz%wJ6p$;|%)m(T)m$%-
z_}J7p_RM!}Y`L0NR+mw;yXxwEC*e%bF;eW}2P=gO`GQzBa0wbrSN*4TnO(u`_CEQq
z%Ijg45`Pd~2I>=6CSnf8a5o<)KP=&A7N5|M=8IEq&ZAb+vL$l@w*F)ep9<e9Tnm*}
zh&v6&k3u^*om`=>Vn_YgRBXV5vxgp&zqyvsn8)(Z!j?IOTN-<2xaRBx<^?{y%6<l1
zwXS}0a7&85i$UuD!we^q8O%mDcO&Ef{eVS$(O*EJU+IufSgGtVHV5pXacWwST6f!@
z5|$b5m}9o4AI*wx^$1BuuP5O)zy_57)JwN0r#))-c?s{#7Z23H8uv@WdFFdb^{qf%
z+$stjplD?aoAOHzv1U#hK&5pbue~=yfRbm0S~;1w^v?OaK*F|w@@=`~PU;5fU-yny
z83zVbTRu@$=rel9)PQj?OO}F+%N=PM{(V??HeDNe4widsiJxi%s+r!XPS@8s^M1wN
zm<rM}qU(lF2C=t<<Ul~2x)~PyyX%(AKCvpW@ekM~YEnzN$_3;b_TV<!;N3#p#Mna*
zMLNb&Dfo3b19Bd|Wf|4-ugY308*ji!Z4;Ixm8H%u6ab67pzNnWyE`c|bB$XiWxm5{
zEARpxT8Q_XE$*iu2o;yq!sj(-&0EKieS8@Sy%q>?ydD##j2Ez5C$RR91L=-GrhHIB
zI9_`e>rGz$s?TQ5*j0>55fam+HroDY`7h=;1?$Kot_QQe%cI8*!xp45C_6j>4YZIB
zvyjcXEmUL=p^2EmuQ6`}9(((dI1y1paWY>tl&G+Uo?5A5{mN<8&Jai|sFF-T>qyDq
z9$-(%MoqI_;kjg+<rN(swX9S9wixM$1*7@=Kn%f?rnX=&s|9E17+`6EkXwy!N2QIe
z<ddjbzbZU|lJmG=Y(3pJ6h2PV^oDkV4Z6yw0FxFKZ*nfNIY_;men?aHE~ON}a`PXb
zCGuq_s$znloSR(Y6cn`OMyvh<0?A4b@b)yN4oD&0Kqr&Ep3w&!?RW<iuF#3x#|q~G
zt~T_&nYij9)XD)^nZ)3;3PL5V>om+trn^#O?AYZ~K3-uCK`Ermd1rF&Ma7qg#}+Tm
z_(vzG$_NU5O{Mk;L`{xWwi9bmV1l70%R*WnBXSYG1#hSbc?rU6n~tbrY!zsz@wIKV
zJzA9qy2USnP{4d(s0VC2lr&#(jJhVskx24&Sl|Haa7!6!iPN51^AoB7FUsOWl$2)l
z@SMyV$eu(2#7Z2nJ72}KqNTLmq3?rYngkG6mt>}oFvsyabo&7|H>w;NZg!aJl9&d!
z;q>8^_0jhq9In5bFRq}Vy<QDQnR*8{_9%W*okByWF^KJ=2s4u?*QZ}tE@P-Nx`A8@
zXUu@E*H_7<JVipsR|c)^r#nihD~Cs{3nbbW?yn#sh_8>sM)zcLOiTlg_ESxKdaaNC
z8TF7zl7;#K)549KFd1ZC0XLOPAJ#?>)kVWOmcchAVZS|BF|gQF-jJ%Icl$S$H*NZ=
zfVvtJfE$R4i1<AFL6%mMe_3($!xuMs3?=Y=TlDR(AWN^uzpqwm9{^_R`;>2)s<@x&
z)a7EOy-;x!X@uIFiTY8LePS=jpg>e$NI-5B34!KF{m#D%ts#KA90?);wWOL3E3(%s
zZo1aUWsAwmD^*uKxsj^>JO}Zn2Lw8Gg%$WWh^~qFg0Te(82~36jd--8H(2r3(>hwv
z8!kdKysexeg|nEd|KqCo3Sg$Ikcbu`c>;b9=p)e%3t1Ip*?YFNjYlT#%NL`$M>Q(S
zpz;-Q0Wl4)YB{%`yotctO}uk+xn6v>|CQI@`ukQ0EH*`IZhU~6-;TumC>E4|=kQiS
zx6pcgGG2IMTw=*E>rKi0jKsu1a(8G8e5g8&Qw(LXB&ZeP!cS&q$%@W(zY7}`^|xeq
zTCYW!*7P}5s-U}E6^8lBRXw2oKz5wqLz)7-7Vjq-Fgb0>&ayMx*Be}e{84|p5DP74
z@X+oLM##FjBJl|NXg8a?@5v+s({m!%`2Fxyv_n$PliZ_IqmtgU33yiVfbIUCZP};z
zSvF^m9BFuY`iR$xM|=L>aOR-uX%+BiZ@Nl_P2V}Uke7LWpRZ`#C7HRKguU))*tbbV
zrDKz7)=%mxE?`51ff3}?*t~u}6SDgX2EX0v<~e@b_qlJ+wy=}kAIUpP|9bsb4}&hp
zG;{1HQJzY}|LcCzHyw2aAl<vJmt$fszMB=~#9ZF-=O1_d(zf4qH$U(|<G+Onqn+8L
z3+|WPJVV6>f~*uaZw8b&w*j6p$dIT|mk;Ow7q~Xp4n`njX8}U)81yvb5pv3tNa&w8
z(Mo|eQ*EY~y}brz*umMZ&w<F{^BmbXt^CcXsli3%+L`6l?bQvQjxyHr6KRxYZGq)g
z_9euH8A_q`?B^8DwxLoSt}NDezdPkF-O_($$E&oUjdPSh!Gx*;VK!OeMTua3SlceG
zlarL4Ok;*ENRU=Ant>!1rUjqo@U>aK>nltZU^WSnxpvk%g%b#P*g}h**_wE*=3j|)
zM;K7G3qphX*b7lLiO!HTJ6TB8A%eEmW^}g!z>{c1D%<QG3^-IVQ&=V|>`{2)?mc!E
zj}VD9h_}R3>)238^`ADG9{$j5fr!5*+*o-pxZJk!UCE>ONEvWjtoqCQtZ;hC=6h+;
zRaJ#1pmd;88EX_iNG??5-(PtZ>jBlZkM2XLY{2k)#iQ(8^o0ni3n*<M&F9iN^7K!p
z-TkQel1|&(xjA<BKMQLxzy)+KZM|CRJ@5X{N3#NtF1dZ&K>O72GBV2P%>B}k^Kmy<
zIZdc79R-JQ9f;A|bP%c4-JqB@py9O<x1Tm9PHE{%=I!iLZUowM{MFK$Tkt#nxMQP*
z2kcW(MUGuex9KE0_tMRa!(xO{nOS#&i>B(?X||a@Q{MnAv5Iv|#DU8-rDg3H#KuAv
zTZbHijlYZPq!;7|UEu%%$Yh?-*5NZEXlOr#5+||RqgMWb6!bF(V%?0S>IQ_>H`P-1
zjQjUIrDC}IhwdQBR+^x5@qr?4Jf{ZF{m*@Ff<%C2;}A3)2U3MMaEAobLR>|2m4Ng_
zgT6z|zr}oS$1~@{J8y{5t7v0_rLSom%!V*y*&lg^ve0a<?S%(tCu=*I5#=sVyUIO7
zsG;Zce$$+slNNwCcnHje*8s7kZ1e`@THvFIrh;LM1wxXr((<hD!{Osi#&tJr^NFgY
z7&D6@8;U<_4b9@nkkzbhpr(6&C1?{2esi0bUXIi1=rEbyAIkY%O~gdDmMKiwP_}Z7
zt$cSlnuBTY${N#A7?#m8+Vj5N!kN+>#p?WIEA|x|@X-j?`JkiKR^NVGaX_*kL$$5C
z7$)wXk4F)zQ(XHZbNew11sA6U9woH%YSUC?7hYk^f=pyF%UKMZvYS;sCN+g4PQ!Dr
zsVTTU$eTFv*zKaGy2AA^{)W<I!XY~Y8}m>&LfiIw$r^ACo>JG6Vl&5Xv3CS|xbcQ6
zE4lc}rsBz^k@j?jgR0_4Q{44%Bg)lTO5$(l4q=}qZ%a7qx^>0D{VNl*!&M>|hlbp?
zy=rWDb#QpV{AJ$hb*id2-)t*CzcKUm3e|0Y<*97u@i@+=9O+0+NXG9!Zl+gjwC-n}
zJ|)<5Q*bHi<h=xaRUqUas2)(!kpJ7Q-}SmIo7_eBb=^d|8mm=8M-wbSlNmiSHWLrN
zn_NaG(|{QQswn0Lo;|=1ZaR<T!meU=5~u@Y_%-bbkz;D4pOCM|6I+dUW)`(d=2lD#
zmj(4l6Q7XsqASWr$F_#YHgXmgO0o(<oEq=H)cm}tF!WWf+5vSaS5qKYz;)JwT*nF7
zxXlQrjksYmvQGk1M8)ZhmR^wdwi?gf;u6Q1TGKp}e)=}?7;4gc!rUD~rOhwLc6ir%
z9`5qGcbG+Bovh{av)xpbmmc+VHf}rnpdWJ~?PuNnPs_4w-)xs2xqtf7-4ptk?p}Xm
zqe>>!@?o>*C6i3@&q3k2gAQkE7W+K6UvrO(%z^%S!7M)ZY<u+_)5`R|$NkJd#0mIr
z%<C~IlsJ=Xn25DN3-~}~HJyjts@M1(ONkL(fclO>mqvHX_07*wwSMS^v@C}P)OKq;
zx@vgLGr+r{-}A0u@mI@P_<<(yi8TO8@}Wn7QD1|Z35M!K=50=3lxVPAL-(_99$WPW
zzJ5hYKO~w<T>{`zb#cXTm(CQZNCuu3M2PZR5tf+T5RhqqC^zuAor3~Ms*7zF>s6NL
zyP2YQtoO}h&OKEMg8Ve2Z;79_xwmG5?pzUO$6rG~@Ng>clg}@uRpk?-X8qU=lKf?@
zV~zZPi~`4_JQ$xkXVY-t!t+-{oU{k=hec}t<bsej!ED;X1yOos0n!eoxFQj-uRp?q
za>vVV(GOM8Jd}C?7AAz$LW3cNdc=cC-p{>QmunA6OUz_W=T;d(XCkjFIjYmH%ayx2
z9&n*gcW<Mv^9N493FuTcpMlfrfdnsb!5ZdnR@twj3jV%UVVr%i=GP9(Z#LEL+k0Pi
zys@acyH`cU?_;$tpt${_Vw$89s2m#LPwWPxQ4ysJBr^|C)u5_kJ^xYy&av8Z9Zrq$
zCWmK}@|psS!eaj!<dR~jxFTGJI9rWo0V12OA|$3%c=Rci>uR4wH?0bwT^^kEh{sI}
zVvH|2R4G|yP9w`NHD$}7Uz`Y#`14ULKng(N^nfiW@B|$KCP#8D@D<nNDP0-F7YppH
zO8^@LEXYi?T7fXq8EM@I+iAWAGVWdnsBM)B-?i7AFOBZ$tz`QiAEMgSWFH&AP>5%q
zbNVhc8lU-1^J~ceX&f=WF`HI_kCnZIQEZ5ju-ck{xX@@LR3WyX`2l;;9HEsc)J=;3
ze#JgbY2GOrCa9BmrmTQo4n~_~to}Pr6Fv$$uc0SFE##%Gk@R5FVM8;LcoIe>CE!cu
z^q5Vou@^31lNE<ZVxsV?><N%Xih2}YtK8I2KmOy)xr!UKW8+qj_sr1`iKUKBqsINV
zBf3LgWFW?E+yYo<+yP77IFmr?vBF4Ror(f<)o%XGY+4fu<US2sfkwe%GZ3y}*diI?
zuSv{H{0%MOUIjyMyTMSws3m{_Nl^NvG-heI5(7!U6i`GNCd3uw7jAX_#(<youBhl)
zibq!Og1O4_2P7LrA134P#h?}NEwmPsj1e9klVA(Y1~hMcLNa4O<>3SAz=wryLYpAW
zGidIHO;t1zMW8=xdg5M8-1(49-kux%Y}9kbhjS`S)(VfP3)l+vzX!h+VKF;uUK}~Q
zO`Q9y%@wZ~$t`BTtTxhD`6tTsC{4I~ZZ0$puHSvN?5>@#Dfd@wW!c(?$*0A?>)hOT
zP`@11xYHnZy#j0dqSyvLeH!D9xvUadhNmU?#4B`A&V!+gn17Rp64EXX&K>W?YL}0O
z;kFENsZVL3x41P~erhNR`I2(9yT;1;?XYvN4UOX{Wd?F#=LsH4Wr?X=vm3m7r9uN}
zdju1~Os2+n<{y9|4;-LJLEB#EEw)xUw=j*iK_DpKQh1B9S4_s#&t=v)I(Dr@><<pw
z5H{d$kfO?I0bT`B@muA-eNu&eh2La!?0lgm^j<TS*<=PbnGh@<ObTZ_L{#C|@uBvv
zbcQa_*-gbp1KI2B=3R;%q;(l$q6#u5AZlYS!%>U373LCiF04@@VXvaylno9aHCT$u
zPI;HTz0Nl;Q!0I$qdEXm9ACWX1Lg+)Ibp^FjOfad)u5^ifX(<&H~~dVY&A1PxP|L@
zJ&Hr3PVaNiA>KpMgLBBfCZ%a(AC^FVJY9dZ3>XhJ%I-%5hdd_r9U@=5PA(U!FipIO
zME{3bLfNeF=hnA}uGzSqOHzN^zGwHv4TmoNe7OA0>oqDL<}lVbGyd<jwtDKc`!?xz
z)xU!Gf87rz_I%}QG!z~)vn)RhD%$F=K>lzMRJ84-w8ioE7PO`!B;_D-5UUp=Mrk8>
zNodOa+(z0q=ety68aiMw3a{%=Bl`AjhtEiyfWl^@lk8rxb2(`#gvYN;pc6s-sRPyc
zb)^oo$qv|ytyT81RC)Uqt}yR@2yEg3p#_-LiolE(Lx-flgMO<09SJxK^pZtmYmr}t
zy`DSe?){X7<$VDhZs3W&GcUM(9MhjE263h|wfQ*Nk2>Fz8Olm!R=YL<hjJrkI8~@I
zB=H48q_|D+T-ppy4}cHc5N1ioxW{(bF24wg?Q0EMJ;<5#cJ1MKI(qa+Ssnf-z<*$7
zZXwl1YCNbMbA6_w0AcgyEco6u6zU+*zee^!DImwQhuho7bQOSun%1q@2!pi7+SFjY
z&6t=G)wKrUx0@LbD)yBlzAZ~Tv!le1YnZCYqZZ<eeyKFdYTxO=HSsvg<ssjGy_VPL
ze+QK?Qyi?o{;TrvdlL)so?t2p4x+zo_%W}c2O%La&@ilqx5~vanF{>)2>vx+Te*q8
z5B4b&XM7s4sj_J2>D3Lir_-&YJmQz)XCI3@@{!2SXh3zHbute~@#?02O7!pLIBJ2B
z=4b-Gn1I-(jQcjT67kS!BRxr7Hr7eBO1VebMO?4cLp0>AhCm(NhYy?h!DTHd{jfsa
zz>8wTV}LFc;{h=m4Q}Q&eqpVvt7<7jf{*2W7YJvQio*}0CqWXdg%*EZMis6F^H!Gg
zzbc=mRFuH;HIK#Vn(2~YkORTWHG9V?hU1|LQ7CnK6hdJGJJPSW9}Ye;(?#w}_!?u1
z^)CnK=QNQVm+T{h56FZR#@>D#C;xX#o+hoam$RbqYo;6qS@ESGM-!Nra*6slqYnY+
zf`Y)z+p46XSoh<|$Ox_O;7y@WxJu|ZYi*u;((U2RjdzN3{7koH*@i}+ITfa+h{lVG
zi0c)GFjb~p=753nepov<gMkJzX^(LZv<_hT*LP(61Z<e3Z~^+T{-tSEXXBrk#3hD2
zo*c4U%&D^6+tBp$fs=O*qBnwU5b#!G(NJhtJ34U*)kG8yiQYBB+nOCvt-Eo%kO)Z>
z8%SAS9&#OAK&$X?&9m2ZN~(66x=Sw(+Em#KyjqLNzfML3;cmn{p4eUGa-O%Xo9LyY
ze1+S~=p$CoHKCGtPDmZ>J#LtQMMK}gWtwbD)TOZnzN1^8HF#)Sw~hRnGvwL(nLlV-
z<+F4-h0ue=KO_lr_!85LQ|(~L(CKlu-?FmozoszVtSr7}<k<UrvSeiU6NMX8m<{_L
zS$+)8p@$cAqWVcwF<DK#c$=q7H-uOz+%uQ!?{MnCNRh3BXtp}I43lCE?}aV;_yqf>
z5Im`e;}5DW883tCGmLP955D+|7-2)}=mF%p2vE~w$3*B>Z6l5rOJ}nB&#3GTh{tJ&
zogA6r=wUR=W-oX$1$l$_9!?rZWmdI*R+g0ug#m}Z9|!g^=}ah`*iKB$MMIvRu3{RJ
zE1IUJGPMD`a%r*MY+b)?g%c(SlCj3is{0k_CxP#$PWiiA-<LQBVtkB!D#ENI<rR%+
zzrNmyDPvp-IZSm4XqKtdmWvoG>2}~yUs8Tt46;S4MHC}CMQ%-xKnP+jrgYfJ^(2fD
z5Yt&}>1RY#RhqX;Z_S^W1t-^2Lv;75v%_^Cs?3Jn`+U9Nb#*wPyMsPEV5x#L1@Y%H
za7?}d(pv>^p)hZ8vX|s0GR5cVdN8UjTT5{YN>V<j0yU`hgV;cLND?F9ueFjUKONi`
zNUC4FskrcPsy?Wp)M_^Ax?^~~jY9^RX9};&FG={Jf5HZRsV0mjvuPKT+~_D^>MKxX
zQ$!uEI=Y3pf<%^>;ucTC)GUSTW8pcHnGyKLaRCid*HeY<9s^N+y;{*3gr3MuVnBaL
zO>bn?;cp++6c0g1`iEN^Fc4=WJ7c7p5MBa+<8v~bA+8}D@H+2H?ghD>!W2q=XoK6<
zS5?}lI4L5kh6SyI8Hwe7#4d9Dg(qQVJ9}(Bw|Uhx)TW=Ey)yE<4Msmp6~Tkp6%D8r
z&P@4g#cBj!2F5u#6|lX4$T3gGZJ9J%+Z&Y;=<ELyA|&Dr73ZMEG`feSL&UlE;8K!s
zEDLK@YB}`XKYzN)yQA;!+>C!32doq8uhLl330Qw+=Z+6=xw+I!BCZ|YmM*c67Cv|`
zd~!nHVE^ltzX6A}XE>l9$5+Gcp`n|Zx(qZu0AWh9)sU|(OT=^_z-EeXHFm2Rn0LC|
zYcYcRwtx2OgNEAcR$mCXce2sZrMFQzy-UK;S)+#sQIawxN)PFQidw%Z1;jOq-LP7-
zatBc9U5&FrhFful-5fXD0N`y*Z2L*!(4)Xqgm(ph75ce84L8$+^^N1Xiym<fllHzV
z`U6&d`CSc3`R_yj-)H~7FUrRt<LD*cMgvb!<rsP+_5h%8;LM<_&q0b1IiSEmvSEQQ
zJb4YN5X1tO$rj17>ybW;HMhZFU<)wLshrmNK!{ko=o3qs_TMg5dz8R@M44;FCmT}=
zMvKZpv)eS8b%Ej}U09d{Kt6J4NGMs45D^m-g)7=*FgV!#L#)riWvyGU+f=%L0zL}^
zq;h1>m;bT_Fu_HI!IeXBVpHuK`AK>l45*18WR##KPmN(o-HjT278=bx`FN^OzaAK;
zSIx4k6nn>k8pD08J+@Y9{tB8G*1jSab(J8&g2h-cx8A~5Tm}MNo?8B}YdX#XXpWC1
z)9s6=KpvdRbzvi4o0o7&55oMN{t{-ftH}PmA|Pe7<a4itBwI8T=9I)=Q!mK;OYhvr
zPW`<<1c*8q14<jHOOP$R2T0i|qQ>K7utVqC=Wa7>pu!imxr162fM$x;!McDEO5Xda
zoWa=pzwvwLs;(xLJ`5$rU)}NTs`SB2*EAKZMgpD(Jej|bvzvfEX58`<-WoCx$uoUO
z_sJf&&WDd-R*>sQ3NzSa3MW1QQgC<jta_@V+^r1H^~_-1OFW9E`zCtF>XO+}sCDg<
zUGvW+?6r1JRF{M3@yjKA0M5DzLJ)2@-5YrbXNcz#73w0^N?M{HY@TY1(j!&7l1Qev
zo;j<RWU*|&0Ig}`f*D!8Poj8Px8>vz*Yzopv}BN2I_1z-6cVyu^SdF)gp=r0#JN=2
z0%&ASo!%1rTQ%8fOK7Pd@I;QyzPS*8ap>4!FoeF%1I-<XpF%%LHFzNF2{#T|OvS28
z8u$2F?x?@#S>Jat@Py-z{`uTSm1PB3XEvjosm3!=HW6zz)36kn_&RT0ru~c*rnVRi
zc_Y~;Uf%sK2(p2Wa>VF0VL1lTdVyoasXV{}jjFOZ+IOW=8v61jw=v1Usbu6Jelt@v
zz|Y2OV3?vm23cC;NP*}jV=LVnK#+|T@uH69=ynenm0ZQWRt1<p_)~zIyqjXZy$8S|
zTIfO?CoI?4bK%Rqr;}bmyvGm7K0YdFke5McQ9=(9rUirS#7kQv#sNr2v&S`yf0>ZU
zTE#UAx9#vGoCaY3?DR2h`bkl?D&ldtXFj^$HqhhLAlJFle|y{DTaQ3P*Ob#RjvoQG
zsPo`LCRR<61`3%Up%ENUlx#0}8quJMrN-N?Y-YZ&Psi%O!LRd_$@oxql9}1vZ)1X3
zN<#o3L_?SFh%x#TLxVAWV4fYGr<oQR=<70INu@k^Rl|SwGWl%N$(L&XEP|_|5#+s_
z`}r49AHIs--3QdHSbnQ1RaOCg6@a?ZAIGLtkTD{(hGHAiBPQz59({2-@br9NO$T0w
zCU34kjw<gWSwD^{e`oUt`=0w?&}%itLb=*Q=)Ux6zJ$Ma%D(p>1Ak^}WWeyNx9;Zm
z$mGWXglm{wT`v1`s|oKvJ)bBqT`q41193l^$@pRuI*qXwVhb=U=zbtlQq_^+gT367
zK=YEs+tVZLINKf7uq#S?pI6=YtC9lUFTIl8YwdNMBh+$ke%V--<<_nC59r$_<}yih
z2@ZHEm{zZht9^--iQ_uh2}Dy4{x*LjCDI}zTX%$p64#c&7+E~GkM3GIOp6{q4Mx6U
z{`3QINoP*>rQFzse&bE|oJ+AW^<-eJbv_n|+up+M?w+UW(LyEc7N!nD6~y`!JVoLJ
z4u)CSy%iI&vndrHTFOZd?=mY$OC_zzk4wUH3=I~A(M7@6oC>6WK_7=bEq^Wo_{aco
zG2Nv9g1EqX<6Sd}Q2T494%TWMV+#Bwm~a5lEO<Z*^-l56ZTgAs)~_@jL3R!a?CY7V
zQqt19hB6xQ%-|MizK%aUn5Um--B?bljkQnX+QwBRFimZKpij}y(a=F+23}hUS`|%!
z|EdHtQ<(<z3q>@o*Mo(de>{`94YcIwnjRY|S%QDfOlPjcnrM_Uw$UPo0|VL^mXI=Y
z=VSWdl27jP16%Ejazd|^jj4K#9~e>^;9I(u&{!kTGQg$$tMaBFARfn{U+r77fv)04
zyr>Fo#u-aC`?*^Y@rXuk0ZkVMn(WY?aurm`HVp(LWLuMvks^_*+OF#M4+^5i`QQBN
zHelQqkP$~Y)%%@rJ#(bsZ{RJb^WR|#!0TwrK+Mv(P6sSl;EB$bvZ35|@WA$g5mPGB
zfNKR=2$<SnK<Fqg#^0XrO3K9>xn|#U?xzAk__PnCFvCKFMHsNu8bczlr*weRi8&5x
z+r5&wk&SBd=P<gBl{mT{k~K)iHUNP5HF1{~LOeQvb&(L(Pcv+x(LWzeIB28=<4P*Q
zO;B?EaSQNhiw!EET#GL!26}AZlz@z%u+_z+5twD7p(}>c-Ox6#A6gZn3WrTheXLbT
zB`Bfhg5g|o>7P|2Z^XlM8x=NnaCU2P1AO!jh22tm96HM~0yYLmn=b+Vz_z+e)JR0_
z01(R?Ly~~b^%~@)h-#qlK+@m{ka;K3wM9hKRN*d|m>PxBoAe|XPvkjO=H@O^wW~T?
zKYvVHd%PA%<PG^JEq6GFTp&kX#~RG4D$RYZU!42sma^;n+o@lUo+-XqwsOVK>wY<i
zdvHD-xLy1Jm@Z?$vIp7Oe05t4vZFm2XE+R!#v@D}h93PS!lJ^4P4=UkpY<v{#369q
zZQJY(G-u$|lzD>e(cS~VSsy*DQzTk$Pi>rz$vxn8nWS=$N+eWZXM9$30;4bp29-Pt
z8dt7n$|>$ZxHxEKPcb|<0|QqT`<qvQ@%;0CTcQE|C`h!cBAQ3Fpxl)C_&otq-!niA
z)&HOE1y?Fd6OZ;-E@bOXSCa~jx}zE|zE=B0MC{_myP7hCm8-SoSUUbWi0xg7CvQEH
zIL=H0GI9QM=U((hu~(A;qu@J?m)NIB!RYu{fP0>Ha1(&$%Q$6IJ{i|a19yCG{oOb7
zF)5aFKSA>mI6W;yGo=<SRJqzh?v2FwBM(It6s9El4%mIFbbQZ+p-Sok(SXJqZ!a{4
zb;DwDtTK<NsA~~siNN;!Z2i5r0RdKy9^8h8yp0!tkm9#zKY*V@*}yDU?m}Plql32c
z&2rK#*9gRO;akA7_D2k%iq>aLsvl`7B?Y%dVTlBbfhNfJ=K6QJPu>JSCN1S8Ndk41
zLxy%~)W`4RQ-XTF_D5<50FR%8c+i&;O|!F@nqd3gyfVSmY8S9HM*ux56CQhApL>&w
z20B`Kg|FC?h3dde0Zx8Q4k>f$Yb`;dwL@J3y-zjR4cZO)zso*9q#-}kC!I~eQ~Bq+
zgoYxjVC;Rh>@1vngJDTS32-JnL<j0Ro_MMjHp|!O^lmZR&_}nDIPID3U5X2s*7iOK
z@64<S^M98gPoc(_P6;W}q)+QV4tE$QFdd0dOkI0+Vr=dVL5@}E^zybNgtG{{O4&cU
z33*(GppOn*7+A<gd<(S^54flqw;2wE`WOS`5>k$GJG_`QpP~2U;|D_3NDxtbo%S&&
zO#!MTf%)%{a_@xNe1>xMUims2@Juq7M=G`~=O``!OO@A!>)>;Y-7q?XGlmNAKSxU^
zXwytu@>0?{ncG^vh3lM~6f!tf{-hVAJO&$(;c{Y6FKRJy_a7H)y!Ap!>y%s8fQNbs
z2+y2d<}jfNI*5T2*B_w1`ikll>tn=o0u*3Ew6l<%_NhEOq#m8fQlX<Y+pLIfOGob&
z57S*>V#^2-v|lw9evfF5gu>a;#g=;ej7J&cM?v?3x924gMcQ1OR1qG{*oddR=%c*G
zKVl=dfIH8<e^p$9WuSN0^6&?~{^2Jk{%rz25sbOeGiB(RL-G&>bNT*xI1y2HiN-SZ
z4))P6SpRP0Q4rzYU*ow=Q18+y%gK%D@tfL9${Q&uE!kuk5n#LA_;+ok)u@dZDl1HF
zk*{0@+NCS+BH+eQ_XQ)wB6s8ijBdwiA|a4{lhSB#A>Lg4pvRI<mW%|q$1t|^*{rez
z2ww31dG;yuBgRBj;FLo}r#SxVw6_nZk77vpUfK_?jdE$IQhOzMc)y&RSgPXPfLXHk
z-lz}r!xNE#-lyTO&Ds&i`=Usc5Ko7HRZjL$c$#6p#*LW;<IdM&N)J^{d?yaK@2K=I
zNqk%9rNYFce_+J6m^TxL^T8Ork++`FgEpkcmC+n!rtorIvqv3rupXVvbp}!w^<|k1
z3)+b;L9`HH(J&@w!-CAJGsFh$>(`1p9)=rde#)CI&<&3!mwj~V)|}&K@I~E#9a}J#
z#C0Kyh?y)-TgtdcrlEIAb6!^(5F23$3ODsCoOk?HQ8Y##MfWk*AfYD*BQwb3E9;Z<
zgC(ZAv)=|nZjO0Z-@h9P3Py)6-LNikmkwEJb~md2-l0K`r?JQH&c^3(x$#aJ@9sRm
zoOwBHZTjuMPyckv-RQwue--5ursxL9EDv>km{zX24yj4LN<p+xoI>ivBU;VOjU3d?
zQC*1IwCvo>FdopT5|63VQ0)$5Y1~5+lpzh@9z9fRSj${L55%^5=9f)Q6b_Cb@5fwS
za7>-0R9#eAKEGUr7xnSq2aAVhx?s>0Yhq;*Yn1n4jCiaCV+e4t&5L*)?ir}7%}gtA
zyvg5XD2;8?8F3I=Y$mQG+y6v1zMLCZ67caolGE(@^S5uq-ZajtE1&wVzQ%V6|0ikv
z-`w@TFDp6=UU3^ZH9o7ZK0RNz?&x8o&u3fK|KxV+!)CMCYX{L24WewsMpL=^pHL82
z*9w8E#Tdv66Wf0atB?GD=z8~fDD(esoK>l$sfZ$`vr5>Cv}mSQC0WfzQN(Q7a+uX@
z8<`k0N(f=AjZMo`PRU^sW6EJB#$k6`IU7dI!B&pBu8nbJX0Gm+{d~Un@9}#)?(aX<
zA2Qcm@6+r3d_52THa#`#hHT>ejgZO$#iq)eA^dD}<U<J(*yxj=meUgPju#jIP_g&?
zKYDbl3pVdFE<M$i3Drhye4!h1Nx2Z~h7gKf%5aQ_5{?6fiH&~2z8*?PuT~HYX!sH|
zG$WCzm-9+-rWkV;4eFM4JCVa_sGfT`Fp-{?@bpei(Rv(eB_Urnf2XaQc>rg^0}gW3
zEtGJm618dK^c$Q+%>;J~_H##P$*F>6!zPCc!IENeNL6aaLqFy+RKF*=z+bw3X19;~
zYhlTo;GT|y!NBSILvQe?wz`pB7cG?iOog3A_KVPf^hMe=@(LzgBjTyV8pokmDZ36}
z_cV!*8U6J>GonQ`D?=4JQ3|Sl(BP`}@PQ5f<_?|K71tB$XAi#nMH!*YxE*q&X9jYF
zH2+pl(NHYR`(2YVE|fhW@?BmM`iRHTyR9OPsiKLeXcpI;3MgoP65>NoU}__ijX--;
zJ1@8s=yc21ED#KhSF#@s&)Bm<@5UECmQejAknihG+oL-J$jY)fcHK_)a4}0F#KK5`
zxJ@|$Mf3!09MPIsC%CT6lWAVCHsF5^>Y}CmA)!uirc1mNO;$^7P%4ix9=!t7|EHl~
zO3ZY<l)wL6eu$(e(S(=s?nVAcrd@VvfZK3IsO4+g7A^9QAf0KTIAp-Dlpty9m8Qzq
z_hrNeGI8v)76AkUmU5Rw+?Fx=v3_^Y3I;gu>Bg&10533254tPeCE;eo{oOn>U&Vrq
z%aV76Ikd`3p9@)!w~ZKQc>2!M!W+qoWdJ=<G%M5ky}{}tp^k$m+=AQZHZA-z`-~J@
z3wtg#4H6`U;LSZBCQ(rn9Vu6S(>^U-9x`Z&7~RXk=*`q+VIy?4RUYR5x+(f{XQPA|
zNB=IPDf67N_Tug|#i|S5Zs2qm-#^jj4}B76F$W29Q5$%;xji0d+2DOW{8qZdsW)%b
zF4$L5q4co!FZtPu*W?&455Kx4jT_S?j;~y@?Sj%r7o6Fq#dhK#N7Ar$1d&a@jq;tQ
zRv1W36|SzKok89!30MkPW%&%euOG8A6%BrgaTKdq>zLnQQ4hy_E)*%E9h*#Cu2%$Y
z!~!3WMP}V?x(a>^WsgseT;}igy<j(A3y+;{#cU1mMU9sp(Tw0Y?o^!}#@9XX09!OG
zsy8aG*Jner^u5r{?z@h4O<7W}nVY}psZd$=TzmJ?l`o!hoi+`6TLEQk?mhZiEu0NA
zI|Wj&sn?18v}OoxkV_{FP`YC2JvpJbRWV;!Z=VK>UP*{&?jK4sl44xN=Bv7iz&E{o
zbtqYXgGiYUTf($!ZoBFJ>MrYdJ>!>0dlCy?^B)jv2Y11ZZ=X=cvCm$CZsLk2Q>47o
zt3&rwjE^PP`-qdBz?!Q8l4YE}RzB0;JVQm4cfopUHoH7`KjTcaGvz62lzipV4;xdZ
z$9TWwCTU{_VU_`kdd)z+2>$#PvsYfl3SsN@!gA!&#muc(5@|W4(y?{lgU7DjfJ;L<
zphAkh&W%2BHu%ZY)|_GoY|bil&hKNeUWtAjbicA)64&%%-tLRNgE6c(>Hv6NXY!d<
zxDi9izD_hFhfws@?iI-ELP*`DDF{iVRak4CSLWN4YJXpwM5f&X<_3T_3P-%Z)-8Ww
z0+|uj)yICcIUAK;san~l`)S}`;Qzm(256qmA+#i+tXtaKIV2oEr}~N+sd+%MW3@*B
zN15fs+=vjG3MWVgfE`X=QxoMax{8eJ6?9Vuy}oS(d`bd_Gy&gshna2gseIPMYwiIl
z&R$pRjb$CSs^d3~YNHuyV*;)}qWKjDH47YOS8^r}s_fM#vA!o1dFu_*8YCgbX%m`u
z0-+|K5r;wg<!Nh9&LBoVjwD<a5J^|BJe2yjT0dNx6U?nE_VI6eO1iT<`{)DhSv?gI
zp8YZTskC9TFG^<LFquL$5e5%<LibD>Cs+#8`jo&FuC4{K>eV!h)CxC>VQ;X5b)3TH
z`rw|P@6rx+Ow+8kjeeME$VhqO-}h$pVqJlAgi%(A_NP;@EkQ5(+EUhQDe?`u?<4S8
z3{(zqp{Z3^5gXa7Z6~h{S|RKveV2OwO<krQDDfIIYADN~K|mDOY>-WA_xJXl^iex@
z+tzv>hTF~&+KXv-(m!Gko||tnEr#&+XpEh$`wm_S?Qr|;6IZ80Jw)HQ4!9Ltu_IPK
z`SbUM)@Apc@6I#Qi#fC(2$$YSgxX}TkvCJ0aN;MJ(P*`@Qd~o)KN=}x@J}J!6p|q$
zP~=c>!=q<ik^iu{c{fRqk>k-`k(?}ba3>!XqDH(3+7ImqFBbY8;aY037Qn0fo-DgA
zTqrz4hF~BA><oA^oJR3HSXuqv%`@ahYl+59u?o=X6B?@`lJV6TI9=Z!#h14+m!BzN
zu>K(=MV|P}VP}w+LtJjvrddG|BQs9e8$*7u*WkaUTYr$`ApZu-menf}2<iDJol8R`
zlvI3KkdJ>s@j=>(5D<hue4{3aKZMcr`nxmVwH|pc4!<|0y0W1n<3yMF=IY;cK1ISX
zVDPjXNJjAIR@_RxtPI<PZfGX$fhME0KHD0ai9`iex#_c33UfmVbMFg;7cVpeY#t(Y
z0}qO)YD3j00-|$2k&N3*r-YmTsUII*w^s0r4zfOmB+y(Hp3Bu#f>}ij@ma&5HC<bx
zK8JSsn{+u*jneIkQV4F9opx3c$E(UaB%^;izMAQ*NWLFU`l|E+-?+SP)2mg>yJN_;
z#Q%5A{aK6r8a$}sdWGz#YcWByer=G|3R4Q&G<5WPjxK2Q=DDMsL#TkC8|=+l?z91!
zIfTqKL3GyO(yqW~{LUK3609l+U&x4cZ&x3qKMIcg8iE04<7VPpdu@II7x72b|L14F
ziy<erVwMTxR&pU`L7r$wy_Me~)SJ^BGlr$8GTRvSj^%Mz`1XkuzU(E~(1A+S=++}F
zDcZqwuf1nag&VD`fI8;D%F68<?RZI-wNLRl<KJqrg4=Y*3F_rw&{-yvV%x|Q_oEPF
zg-cq^L0B+y@m0ZcM$V9T$_KUCf^6m)g_(f}2nxp60uW)moz>aa6YW!GM^z`W#5}2M
z$!O%}>QGw#NCuLB_hR^^A5bkgKhcHWY6A;Asd=IZw3E&<paVJoj<fG-u^rh@?bXX-
z<(vtisLc1&aG?prxk)y03Sk+uem5FiThpy}MLr&Fudy3SyYaK2Bp<R(Q|l)ijQn@B
zJ8iY9n4L~7D6IiCq8GZ|x}tynGu01~DL?B@?Sdm`K`cx!yS%d6WOoQjINukt)918H
z!Jt3$Am;ek$H%|Mx{`12wVXM>^R0k??b4d^zGim7roWD~<-IN6lch!G5V4Ij>SY1&
zbR1yHN<kO^M!ejcgSJnxD=HoJ(QeYxu?X_w;wko0tXjcN+K63617G@B3-jR~*Xb0H
zi+S#^q+j<DlodjN^@7^R{%qPvW;pNduh%|I!?LmhbELT&(NAxNeY(N8$rkU8Bqv(i
zW*s3ALT1HKNRG{t?v}a*?hJNFEqds~T!u^!^78wr6~^`w_e$ZT(;>Ud+ya+!3tYDi
z?$gGv5RGcIFM^9kK|^aCKl2xdMyZH;gR~2o-@^^nk@S!9&6lF)dGfw#%cxV|r~3xc
zb2~HNZP}Ra61VB(pv$@KFU_Op#ESpohrNO7<rcWUMDr_K_JC7X!kIXsI?Ozc^%o2>
zhMEMHbDOD}h+OgnCcah8SGkz6Z<mw(lhfFp6Da!{X`P$G%Ehm1BBlG6$nb)Mk_wt>
zSkn3KQk$%CEz%SCzsWE-CFC;U__WFhnq(Em<0`aBnfMHgLoDP4$t;_agvOF6`D6;1
zmQe{zQk$L43M@fH2#{0aIRsv`4Y&#SFFM=K>+YT`u~kha(!-)&(Gt?TbTHTdfaW@?
zSMWJ(c3qLQjNP2p`$|cN?A|djCL>0p#zVq-LW0zUZpB&&jw_%lB+4~J1?PGN#QH>u
zj3o3VFhrU;S<?k4p)ap<Iwi#Kf@QR)N0K6HuMLIwPtK2o8<0i^5w`{7f51lmPIG(8
zMsi8{BUXfRy)xXeyAK)0O<<4MT*TPbcx!AoYgfEH%-vZO3DOjO<Wq%d){4m^H4eX+
zq~zBcmC+yfYckz8yW73a)mA4$<xc$EHV0%Vg}DAW_6f)y0G?iZtkwY(N7(FOFXCvw
z8G&npflYFa%Pv66-NiNGGItu-9r)3XZws~c+dX+oSWy8|i?2e%vh2>Qj^<sV1>HUx
zLmasafUHKfklj9p|3SoV6XEFi1f03Qy_G+}XC$ziDv3y#J&5D?jZ)2>R_8&?Pb)%m
z1=MavF<5wMcNQ`O%U#X|Jhfam!KUPb(}^of91h)*k7d#2#wlSM%O(?EcSan~)hg_d
z61zmJ@Y<c=fjBz~gaKT0ojg1ZP9JG%S3)dX4XUzFKJ2=)f;~(dO)goMPvuFQIM?v4
zm8eieG*P>hu@_;LO%i2~h+5I+WGYY78w~OJDa1(0_Y5u{t=jadlj}1t;n=g2c6uI4
z{+GYYh?x+V2f+pTV8N6D>fJr+E1D-vA`HClH4<Tzyoy9r@1ZA1(i+?^wAT9@^?YCv
zL$ddD)wmb9DKsIz<Rv2xznQRV&s{kaP#luJD+F!6VxG>AFnYFsAMs5#4>qcmnwT0g
z@Vk|Ts!-OSi}HsvLzN|u_ZEQirs#N;o7wIj-&g#~&M@Ih|B%SI`nn}4`l(<cA04sw
zq?J`c_F=_$gujPyeVL|~{XJzdt6z$EYXX{uW=vh=m5b&v%ORMvinVBrY#4r@p5S1g
ztX`hWq-b(@_dfw|-|72V(!JcV9V6g#W_E>`V3%BE_R~Ad{?_u7e@eV^D`mv)IRqnD
zicnhTF?<{RcZkWM)V`nGP3tAr1>DhF!yGf#YAoZ_ZINqvx^i@{rD%|dS{Ia#MJ9{%
zO0w_ffM4)kO<k(wb<dTzhkJF@Va!W~ePgWMXnc9W;m+V$VG?tHVeemH6JeEwmqdiq
zHXK}Ee5<@}=Z@5a-d|s?il4Vd*J>YeP^vbGQ_*l(9lGqZAhn?CkiNv*h>P*%OgFx!
zK<$d2H8W6T+ypgnWmUn|8egOUWL#5O-p)O0zv!Ids;)6ErrU5iGxcu1^v!7I>5C@^
zq^Cr|g{LTcbSE<=+F>ZnHP@JSDigfR_#>;ATAp5OHTkkNk!9LxOPQxWgAh{Hp2akQ
zHIiQ-rxHdofl5l`()`zTU!e1911Obe0t$|%|NMv5^jO^)+NF!jbU&^B|CQ7Ku_5vA
zv`Fpu==^Yg(^<ZtBHK%=?4%;w{wJU*uXKI6dhddt05t!(23k+^tziK%K?%u@XI_Mh
zcRxjWCgA{jKDmG<ISrArQbbxGIc4N?w<6+O=Q&V(a6?DU{s*HMH(qlbusqdS%riBO
zyRCPh@z&*p7Jfn~`<vL$R~|;W6Hpn?dkXthGaFW&;aN-v?U@-eZiHPlu4+21A#_8%
zU_lL9P^U`vEu7})x)+alXV&!K^U&=>qDtco6NPi&yl1`ZLyW8-9N@|vf^mrb9bv_A
zr2UO4PJf`%BifSMQ87XLCTbG!Xg%9xap$z}9(u9lqieU?GoUCq!=3JQD4Oi~th{S`
zo;36djeg0nY>O@m52hQ;60^$#fm=^eIwHC+sW<&~vAPnqDI#pjqA1K}L?stm8wZWr
z#ER(F`cuqxXR~*-y{$zAg++e8n1%0)F54E16SXz%XN)Yol3J!s55Lj*wB+ASTtkBw
zx>C)=+*JT5)OoSL=iCJ9DwBFnW)n|Z(<9gt<i8Gl3|4k!`p1Q%a}f1pyuhToJGUZU
zK3<W5Qj@0~qdmRutq>i0nmOdv^`6&RT>9ax7BFuoG5Tb$GoD6O9tJJ+&zSvZt(Gh;
zb|&Nq1VE_O8cnWH2K42X>WhedbCq#}aQ-j}GKr9X-Zu)2pW|)Fz+{q>agJL7BUS3$
z^GKJ1F31XCz3Z`}A9`Nf&K=xJr3k979w^qv{Pq#s)6^!PwNw<ft_JS1vK)MU540Nz
ziRR{*x4bopT~1HM37BW2zx50J74jH;SB6?Z;eK<fWET}(Be!Mi^-+fh=b>MSO0ak+
zh~jh1Qt#XS1NNK8j%eeFL_{imnxHWkj^BdT_d10BS?fN?S`V>h_aF?J-usS#?XkcY
z+oN~9u#d8|CF)I@M{0{w1`R%=fxC)oAFDP{)Ov~{TSX~HKoqWaH_yl$?%`LO>x(~B
zxJ_Iha_9Bj9+d2LIQ6b;``O=gW(R9vWUjO7yo@ru#pKH7@n5aRC*D^--@$4pFDyN`
ztiPf2NI+#J$`sqLSlFJlpKe(GXK(73fj*BI@@)#X4syJ8m3tAsdL;qZTcn_yG9wTd
zQL7#c-itZ&80smrND{0c-SCoSgce*6lftl@tIyazV<b1a<qi)Ly92=ooUk;cij}Bv
zY_UAvb@ukGspY8;Q)5M8T6j4C7+ZwnI`S5P=9ZSsZPPnOB9~@7raAnQ&aTj{ul1SO
zZd>ijrJIZ0I+&i(Pe#2h>GMkF$KN}5<+1;f6@#yP6z@(xf{j{*>;I{#A%9O_fOiWK
zuhsZk^<_j?qz9L*p?nUSECa)1x6|d=#au@D%UO1s;47;C>E>d_pMIuCI;U^^fUm=R
z{$^bAsOE{!#Vg;+pZ*eDb(N=u7pVcnpT7;>Vl;zL@4pc(tyP7vUi|~vD(&HB?BmJ%
zu(wEmqr=~o4t~Y_h~>fNrpWt5J9oBUS6=Go)K^E^r^Y4@&B}B56}-$qFcf*4fa`l}
zD&cIMyw1@DnH&2$$CyP@@5Ee(vZ99m5*pj;lNFq#DNaHrt5)XcR*#z^e}?$j-*EB^
z&kZt(n=UOY_+vgEM=vDt1LrrEjHiF`I^f3`VrN>@XDw`Nv)Z6v&Z#Hfz#UNIiTkSE
z)FAi;@x17WGjlVQr49a;^jD|;2n{{+fI+US`tU-*UN*|-U#g=8<`2)Fc-z(ajj;M;
zy6fEPGs~P~HT++InB3ipFLL{LKfi9r!7Pl&Pdpl6^>DOm)+ub_h2`WrVk~Zt@Ehn!
z{!1{rf=j?Y%DqK4i?Iz&Cg;QnP8W-V97KI}r9t9Ax1N#-i}vZ3uO@hV*Ux@<{qCzR
zIv)e^rI$4?pbZWkV={7d5orn2PLoSos`dn(jGkgrqyY<GBkUBQC;H68HLwOrd72W1
zyPMDby2w<1u>6&&qi^*AKF9xgXNE`Bb2q<T6L<3J_i4|*|JRbrh5Vgx8QuVRNM1eO
zODyLke5l~YaP*iK#X<h|Se?v98!I@360WJuav?w5$Db>wucB4i+_3E%4{tHS2Y1(W
zK1xz9R0zv%zpH;Ik-sGCvSnk^eort^Z&VpE=VL@93ZN)Y^pe88dE%g4m{cCb)?<b~
zV16C@4MGMdRpvP)mHT8YviUllmqI-F>loOf4`g%lM<bMy?8kQo2TuA>X!%liEnUQU
zpDAuAtn5%9lh+=d{_Aq&WnqqV;P=P>*k105OyM<r*s$;Q+x02GuD5ht9``SoEu{uP
zvH8$jycUg()w4{|{J6R4+71%jcH05ATe3g)9_bXByzz1<$@NZe55d=<#))AqQD1lE
zB%N~`usr$S(@pZBXLU{(#3$~;mu}b82*0Nr<Gp0W)p8O}HnW=fDEX)+6L$!qt`h7V
z73zgoQ*KDe*K3v+LPubJVc%&|ne2U!ZLQnMbdj8&eBr(*^TgYCFXnl9mF&Gvl|(Wi
z>+b0kWVZ0fbre>{he3xwxB6E={L8&F#lao^tTyuEsUrT<u8Fg?<xwTOPN44Tg$1YW
zYS4-vle<}Yn%uaO4-?-#Pd)sz4t52=x^gm&-Y0~vwOF;8VJWj|BF<xe*Ucg@HYoC%
z8_b;LJ^Vn0R4?c@^H3MbY!LIMq&3cN%n+>Z4tGnoSrQTv8PCZL;fo!d+`q4SbgJdb
zl5e!tKYyz`VhpjPkXvli*NQJbp<2fb!v0W1vFEFIA})=D3a~ngs1)<P9OlP!<+W^4
zTZqr~$mrVcuE=n~!=gT(MzRm>?fW#tpKn$2?v@t0n~IyNl*>MA<%l)6$>>HBT&X_>
z&N<mk?1zyv)ZFB<W$!<0^$L|Soh&DYqZej|xX2*X3#`-{OV(eRrX)y!aB2t*=)$%s
z6^(7!TSvN8j75sQus>upXkj|+ZJCU#$f)k#SlgY$Z{wYs*helU{x8R<v3d;|g`*C#
zMmE6bAH@bx(EFuUP!r8{J8SkLLoWjx2TgvHG9r$l##hyw0v=$u_ZoN~H1c_OKk!Na
zX`lWvpKrvOhjRX|m<^xkF5mcC8%uzLv{h|_s*b7`YBGef9D!wzfUG`(ysziNQr6sa
zx`HIvLxVR?F^sPyId+pa!%qwD=Zy(ARQ2Ux=X+Gnpe0qO1VDtu<)6b>6<0LZx(yup
zbM;GdyUzde{-o*^Tzs*v%1i<k$Q7Y1PikZ*Of%O-IMBwGP$=m9j5_WOmR%PtZev9s
zC=;nm$Gq>M7D)z2I>HW5+Lq`XuWip2mxlFD=U&?q*8KcM6)*lr!r1xGTKHmP)x6+J
z`>GV_M7e5nNnTuD<3y)3XuvmC-wT~MbLHI*pHo;>RCVEji)E>UJ&Q`uGhOC+9QpmG
zw)#H1ZoW|VkXR;;C(H7P$f><iuuq%StVG5{9Ny%_@+aU#tfOEjLSci%Fan#h7qts^
zusZxLt1{`!FkV;|QB?Jpz#Mxhw>l~k4Q{A~(7Z#dr&ksK@cu;yR~Dl)TPvQcRj5yO
z<HM|I4Vip+#;v7y<r)i*p6T6BF%7~$Dexm7DbK{w;))bvqp_s2@Uqo|U;0NRekt#A
zqISQcS^6g5I}1K7zZ)o1(bTJ`0noia0(q71L1j>z$*b`#ShFai)91}8w<`}A_nT%v
z@Nx#+0wWCVFW){LEUx^xw*;&@_q{%wx$&-<p-$8PoEkbB6Hu^7`-RFqh`ri?TrZt3
zSdVvb7U0I}qZk$4pg5jwg=936i5N}JQ+u)Y!1YDJUNY)qn{C$>=15%;%%43yzNx0o
zqU%xTWax+Ob_TStLerS&5tyyvu+QDZ>mwu727$^~$aKO)Ai(DS7TA3indyOn8fP&R
zT$^N*iRN2T-Bi{F@C-zn<88<2OEJ@vVqVY>xm|P*cTeBy3VwTq@4`}>Y2Ptl2LGw<
zr(<xrpL2x5xkTg$2iwv*zUc|X><Q0?8hun&YB=E2W0OEGH-0&JJ=+dWJaW?DVk}%y
zqSH*(W36WRzQn)mm~{GTD3s>h!)ggF9p)G1kG7xsBX=zF3K-qre^qVy>$~p=e-SVT
zW2H=Uiv+8$&e4_=OI<<^lEz9`vNmEvL-ecD0|XIS&na5YxiPb2cyK|QM-^&bP(qQl
zxcOEf6M0W)CO>%HrtwX#bX!}S=zr<&O1})3%l9dBGK0_UbKu0Z0lsiRWjH4gzZL_Z
zvY(~LYT>M$uDx^+yI9(+m^8-foW6Qy7C>!h5izPK8rmFZ6}~y$zTKdqz|DR0N8id+
zh3e?D=P&M45^V&nmo8{)hS?3)ROB#m79QJ>jLb5jIDgv$(lFq&ugp;HLjuQF!vHOY
z>iirf!3Qr_P_)&%#A>r>xxP!oj{3|2VS->Ib0<P+47J(c_3qlK4PB)*mb9T8YMafK
zM%}#0@rxy{1tYgZ2n9YdtnmMg22jkVY5_7-u<JI@rNd%d)1crCv02XQ{K(*+L;_!$
z8OV=j<uG*XC9ns2H<+)*_?OTXC)N9(U^z#sW4-x&gqI<5tEPpncx{{JRfU@P`$_j3
z-P|6&k1*=e1S*0_^@;>Pu-LDlE(S|M;nf<-lVP7yj$FFBA8>lk4GW}{A92psA@IhA
zHeSooA(x(`cOns~nWaZ!@nnwy?W+U7RK>8Jga{pylgY|sn%b!}2}fZ+aV%<xZW>J1
z6>JhAzIC`RBH%^K%<Omzt<H+W>E>f5ual!USF@upg(~-MIE1L}FZ&$5qcau}d54ku
zkLvIp(F3B8Z3HX5n}ThUCgQ6Z@AqQ?51}-2Lk&EUo&pGb-k6q1vO?dG^wBT*!C}z=
zM%969t)ipGJJ*-$vaqLyZ1>^TrJ`V)sDJ{XIdtVe6Wbz$dOFzF;S2Ao*22#_3j>KM
z#EP^D52w(f<qw&mLTsI^RSTmvL~^fI3@pUFUvdcQE5(@bTXC4#*H)hX0@!}!-;c~%
zrQSw+PX>L-xUBrgrRRg4DjY#{$6Y4iuCoBT=R0fcRon13e=Fc~OB10}2n??ca&iju
zifq!v6}4<+?FPi3trL{NvPy;PMg8E$ZqAYJsg?^?=6-sf@h-gTc#+5Rs!p3?-WID1
z546<3!-Upm*DYe7o#U76=wS!9N;1XG0y0WW5^TZl)D0RVgI5(3fiE2_uGvzwi;Xg@
z?_d{ZO`*j$DzFfAn}5J3kEc7jlR7CK#kM88CFi<%R^RJ<n5&}+YE#!az!0OVmf&6F
z)g<j;5C^P;ZDln=Rai6=35;t1Gz&IkKnOyi`IlNg)IzO`Y>rpE7F(4)L(}g(9AvP}
zLjD{Te+#1%Re;5<?+LZ-Z`G&mBU-_m))&g8)LyC*X7n{S(_T|d4q4^Ih72I#8YgGe
z=;MKQTN|S>;nFE`g8ypl3eX>ki_f$@1fk-k6Dmp)&z<gx9L-bIf<Jk3uV{X0c^-C&
z(pJLxS}10Iqdf*OTLjGB8DBI4jx#UGL}3uQPwa}_LYfuyIs(C$d8l)8nrMzCG|$>6
zR@7S0>giMKs$M56q7R)cDX~j-|Mrb9&F8o>GXGA|$ZTl4Lu$I+UczxLIK8epu<NSf
zxS|Lpz_*)09F=LBoGH!?&I-Xsb!Y{uo3feXhDvYL=;UCYhY}imGUCI83r8ZU@!?wn
zy4IJci8@9jd<OIX88w!~mt205p2;-w@{+BwP#Z%J>ysvSF53XJ5H=De<;sAk*i~e#
znK};uo1U3topwSK+90{zDM~KAK{Nn~Q~ucgs^o^uUv6WUXO7gOjcG~S?ON<gof_M%
zrz~4`hV^{cHT4}qe*3=^?Wq@-9?Zxx7y+9wDU9I~E5IknD+QM7gY5ak_5wRB!KOiI
zh^@CV#O`>OC3|#prvN^|0*|{BMGo8i2L1?sFnsGxh`8!<GW|?w5f<AJSrZ{q=Ke>?
z0(wP5^7pNn1z$wyn;c3TFS-Q&mLoU`djLD4IvA489HwVdr;7SpoJCNqBu`P+3`=kx
z!*0O%+fF%x=RKlDuIUVs9DPB*^3Z=oh$IgNWmYqu>dY=hjMXO4-k4X2OkS(8d<a|<
zc<%KK5rpkk6AT%n?4-dRNIAx*@+*?|dQ*XY;`1!nWS&FTaQ3M5(9>Pc`Tc*aERan4
z8`nUKZvaLTMCmKY=WU=1%^f$E3;QBYgU^|hr3(5lRhX4RU#HPH1D4A=B=tprf|D?N
znnmuIHVZga-eb4!(mB+8V=a>R`XMc(Ro=VtS$FZ#yr0%<;i+K+%nq27>vD&EtTUc4
zov=DZ3dOx6Y=V3Y-Ccrmn|AvY+~5|E%lXw}J4-U5H796y#w@SFgF5INlzAv4cmKtU
z+kyRY?)=XX4XS<vV|500J~(hQ#>-TZ?7FY;h4^dMF5ox{R<WdPLtA33NqVf};GJf^
zbkTG#X)|*(7F`U)baA-*+2&&?>3(sr)CerOZ5Glfbke;NjCO)ibLvtqmMJ=n+|ZrM
z3xGKRsBzu82~Z<kAQ>@Fc9mL{gvvO_sxkRcZ|UT__>HN){f{d&U;kO}m|WnM9W-7%
zVYR~LTqW<?vRi9)Kf1&4!pyp6&T5&%Qe{s+Yn9Q*Pk}v&zzK1AIobb(NaWB|crJXS
z|8|rtN~Y-tQrl|01LW-GG_j}KlRp%W^u_M%Jby-NkD5U{*%O%V8_ISq=e7T$GYgM*
z<23M($Wt!(7Pfo}gI)F2EwvEHFG1{JBDM|;*npa4Lm7Vs^J5&LG*C^4+2#C+9mwBI
zc93=G*&e508F3LtJAl0}VQ}UC_Y|}NPu$`emdfr^ovc76Q>Psla-B8>4Ap)WP9|U-
zAL}xV2fx(9GlU9b8*C#%vm9(6iC8pgBl{oda$e_PR^H?Gh!}Pl_~zQ!Lm-Hn_wXjX
z<+q0gE3jDEn2mwM0L|R6gBg(rKnFpWQoP8YzD$Be{(bt?NM!f;?%BN8ca>Yh>HLt(
zGns;1?N84C7G0`F7>rra{R#jesXHR1wXVT*l?g(07r-PGgna_bc#OH!i#vn7vv+p|
zqDy0C12%3os9jcrPj*5<aEAFteDK$iU}ei8K*XNX?$f?1ZIBWB+~2EB`r!4%zo@9<
z$I87Mqe)T8!SZ-qJd~D}`=TuU<h>0w{8ZJknrFA80?*iPy%HQA(y_jzaV~QwhTPH&
z;`ALf)gD$CxgufwV*vLJ<4LoO+{{ge=Pgzri#TI`H(cRJjVCW-I?IZpBj0}$KRRpX
zFyx(Z!2N65D(;1$irey%p%+=p4!<;?|36*4xjIu*1m9GLEsLd=8BbKJ4BS-T;$4+E
z8H-h<floO~jjyqj*XlOT3S(>uUj&(J*W5XHcl{kv#LuIojXh3ok6&FZ42euF3QPC$
z@|xY9kvpvPl#H2F3bd7CwP6mfp9?cH9J)90<Y4JdVfhCRx<PK=NWMzdWwOy%`^D3Q
zHCTpXcS=b=a}$zZHk3tsIV+B@aV>7tDo68E9!Z0COFnR-f**s<y1LWp&^qzBZLM>C
zCZ_wB6mf>Mbg6QMh6@ZI@)BW)R1(>#&~0F^VO~IW8<GbsUE9<FTxbvCMC_7$2Cz)#
z*2=cfPEllLtHM{~58vG+At_ux%7b<y$?Cjl-?NUjCYyT7xLT1eY9n1-A4csOlhq=G
zZb|CDBL26z&>#**ZDgtUa~L0bCOy&jH)^7Du!6&BKF`|1>AIs;E{VLYXP@!A9*T|d
ze&5cGu^tfUyRGg<ZRfeJu>LlJj0GnGG`T5|)TK6cfq5~Eap183i@cf~r0)pV?X)De
z8A~6wueaQ>S$3-04ViRlFTt%DZimo!DY6t(k-urrM!t%8Z7TYwSNooeZ6>X!iH0FP
zk(?WU`K(MW43LM;(~-AgHbV8XDCGuCg79pSjfAcAsYGW)K;mQUQc&a6mI}K5*r0Wf
zQ}jc|`>)Y)Fbw+f({1ebte>+eQy3qvcbGoaui2*XbsTeS32^VOxL^3b!_Iw)&QzLm
zD?lHxH^}Y@tTeYF;DBuk8IY3=lZil4TnkkRxq)Jg)!QVJwjl@eJ`@gV7QAX&Afmu6
zX!`q(sTTYFv8NLDcXs=~`)9P%J?Z1I>KDT2&+ok?uVc#;9Be&xJPO_ms=3e7!`lHi
zt6<q9VVRT7`ea$gO{SiLY7ipW(`olNN{tb$#U@?QbE!P8)V*-n8z++WxfM|*)+=kC
zimlWKLob`UK5u(Niy{7Qr9}gKLgnC#oS;E=ADcHF>iCU{a`$~SXJY1ONQt4`Grs@!
z%3$E#cg^oY``>Mj*rGd2V?dkxG|U2zAaepDNL0XzV|t^LNmC`dN1mb<DWxPUaA3Q`
z;GX7{Cs}zm=*u;F$00MLsVK7C-z9hC_ns=|C9B+@Ua$KIeGB+jv8h7YZD~1KZQu-m
zV7YD*``jm{-y@7XB*;J^4BAOskrkq9OngL>>TO0g{eha_RiyZQi1t6pbUlYImAoE1
zQ0=;|^MVsu+3(iueqww)hI}tlYgSMB4YoB<<%)L+%h}_TkH=<6hMl-0sAAj^ma0MN
zwLByv+pHYBHB_rtH{&pne}8YwZ}u||r%gnIb%A!>72Z2v{``m2;qfVL{FWC7q0!YV
zOa^--i*Q4=mmpJ*aVB&2J?vLQ&uh~6bZ@N6cHDcUr+xGD@ST6AS624?`JrBqadwf3
z7TcD}Pg5@&gI>2M?9UH1Y2-6$*YQ1IV=b7+>JdOQ;%2yGaJIAox56U8NH8H~s?|8i
z-xxKoz4%kOTiSA8wNq79dpKu#@92j5S<a1{VjpVa)Wl}9&Cn)3_rD)V>tR0D0DKEw
zFEZjz?#~nG0lQZB29F-cSw>pHa2cXs53@166;;9{^H6dkxOI<x*3xNFIA7X0X#MP2
zkCXP}F`wNpq5|?pzYUU1BqW5NoX&FD{{mDrF=XT6|02>lGp*2dhba;CF9+~0-pyIA
zUZ*-lWn{DCISWY!r?J_|x@@B^i#BU!Xi<n{AmMsNk-Kx_Zu=b}Ro3?&!I4{9<8#Dn
zurT^uK(O6J<!?3<JT1bw4<J7JA@GY2`1KA-`k7W(dET2hlGDE6cE?`hbj4~g%c-sA
zBGsqyu~ZuT&uPiwR~P3+^w_7<w+HdP_{)p|NNK577GOJc$K??33ZXJB{2QClQ2tAL
z8qrv=#20%KZD$*-cGs<+yg^!rIQg%=?~<zWOmodRmFDbs$lcD)YX5fsza=Hpk_PKF
zI(7f|E35Qj;xfpx8|*Tn+R#Ahhn1)f<K4@E?2%E)Hi0Z%^JPe2f|F+vW_kn};9hqk
z%7iONv)8=<vUK#)9BzpD`i$nv%0<E9N}82<|Nf8b-1??n&41UKCM%)JjRmwzmYJ=k
zNg)Tb6WQ~bWYk`s(J&cDUcg$b_C^YlE|4~01<gk5XXKptaI&fU!%;w)&7aJMf8Z#5
z-IosSt9pLQYBH>$i(N7Pc2{3s?MvM{GP0kItxXu;s|vwI>13Y$gsX0Y&5i8sum~ns
z2MNrOcMuFZ=OLfK)R9XQW(Q{C1TEUgz?(=;VmKE_|Kh5qlA=*@*-1%niryjMGLeSd
zdw8t|G10J+=L2*WOJmEj*o(-(s`DKR9RF0nJc1oVDKcuk&{!SRHeC&kDMqrwJeljm
zv}+3|7>@Zb6f?h4M0@^WM6v?bWXm?OZ>LQKG#Grks*Vczr#o#Y-0HK}!3nYV&pAVX
zB}@o6cHIj$LLp0ZlsX!YFo+<rID*{)nNmbEVF|gR#O>Qob(Dgr6*RcIGrZ`Y)f9U{
zP^LxP^un{x%iDjbm`We>0dh^aU%<)QZX2E8Do^Nk{h~cYMNV@u`%dL*&Cl@q0Yh2N
zrV;xtlZi|_l=E_OncA^NTwxW}82P@zPftOPC#?sCd_w)bu&v;ycdiP_E_oOtu<La4
zE?^`ajsAL2(dyEzwtqZq>_LMNW#)G6X`nF2;`&g9UHgf7OcT#OC%wrrpW-Bv4e_na
zpD;`0{ZPV<n*9MolLkz3M_4ZQLT*NEuA;_<v6nLFCwD)3RafOz9Vq`~cmLJ>Ea!&I
zxVtkqHYU4Nc9l5o&DEMS;?spURkxUZmfh>Cv;*GJgq>=;gz@nu%x`HUbtz`iNHP(t
z{fe=fLuh5nP<7PvlFhWV<<gdD`G6;6cYOJx>_w-!oBN^8<6YxCw?+9TC-8J_wLd^V
z#Lpf7vTR)Ng+!IR+C+1kEi3q}r3IwKNc1#mJ{G#EAkArhA>&VchbBP|;p-N$;p~OO
zCj7)nlfy&pH9P3Vqn88x(D_Y2*qZHq*Uj6_@7z9VJ@Jy<k%5~7pKTss3AxwtMj>_w
zIy#@Y4+tOE!pj<%JM<O_X;iSYod`hR%K~rsHVXBePH@!@ZJ?pL8lp@WtS2tPm#Ft(
zr@&zF$l)f}DSgid(&BC|^Q*^u5~tl4ggScAqCCSw+jRbU^goIVa;XrrGXP5XUAXE3
z`4;b^63D^io7sBUhAU{!0Sp>y+Ke2<`Py8}@ul~W-08EH(L~L$NB-C=e?eJ$1$P;R
z*pRj2<JX<^f@IZs$txe<Qv&h1mAp1xr8D?yZzn?T%1i$xsCNo{J-SUFwZVwB0>MiZ
zmRY(lrE6HGSbtMwm&3uEGp%_H?|Sn!sQE)KBcs72CU(5)Xku>P8)}GsM_uT=gMS-p
ztDnQzK4l}vguR_I?*!ow+&D53tWStC*uB~4O*I|y&q33u?E)f1HLwWJ%bp=`2RUbk
zD9b{O1SZr~!QTJ$wuZ|sOO8lScG*^oyP1v)_-7t59t}Bb;rCf!do{Q5WC$0rj2M%O
zgOgAK@4=MBg^WwzcHgNZFJgVkbcBUw*_aVbymLlAxd6D7tj#aF?P?>u1(}kjcHi;L
z6A9Upf*W>zrXr<7HurmNHQaCOiiF59N^i50p}Ec4%X%%XAWmo_QkhG`CQXiAYl_1+
z(p5}f`D8-2Axe&Ao<UmW_E$@W5OETd@+5fHzd&I|^u@xTRK9qy`a5B)d)JiTp{BiG
z_e~$_cu9^BUYNuzxoQJXk+7^_!v0boE@77!G(^+9FiTXo-a+>&zC!H})~eha<{MGt
zRHkFJ3@rB~ki7-A5-ul&(&DkoogooL7cwu$<upI0Rdo+QVyD!<KZXU}pt@%q#Dm%!
zC6lTRz`+^VBqA^^pdgltKvC;Wa~sq=Cs!Se3gcO;`WUhMu=sXrkO}u1FU@GQ>U@^s
z_mcjDUE|FC!MShT3mF$aSQ_;d|4<B)I{y$E5v~Ksi8Ra-p!3vDe34ic!0@eS!v**y
zJ2`td#shIC726=AXfusKNl8sI-_@-SM5E;I6CsXCl^6y+-D|T$N0A;l#jVQ}oaG@_
zw1N>Is}%9=8A*53tw*CVL{oNM6@1KbYOkeyQf;6sn;f4(W0hH$3u2?-z65n<Wr9Mw
z6z&M`uM1YOL-!9sgPOXWwT*G9fdo7mFa8;tqU8&BLX(%oE6?tFGMMeH181VW-rrP|
zJ#VwK`cbDJW(}W%oB$zM=?hrKe}XfyDRZx;M6iGvfF+=5^~adji2XH^9`gti(MUG%
zW5oK^Bp>s0@$PgoD;d3wL2|MG{hSc{%;u!<@_?NFBk2xK_V(a0Hf6TqxYkS91OU+S
zV9PjymGJNH@Ylq}tj(+*vJSq4=>j2Jj63r8DG)zhpzw}m8Pmp!4l1%hIx}0Ea7LlI
z<et&sZ`>8eHVA%pl96`U*x`~Cg6k;TO$2uePfB900E-1s#`$|S*905bb=E99pbk2#
zj;T#CDM}dvN9VNtNJ2bmF<@V54XPA7CIPg`(nj*KvFtB1>LXw07{^sCbOJ5+*Y&Se
z$IjjN5cBkHjy|n;k;2ofwbfDo{oh8+XRXsxXkhAXfOk{}2CWtVygt<M*?~6NyZN%{
zd4mi~g}70u&D?>d$=y9E<?faz+nju593w3DXir#*=aKFo=-dB#1rn*^IzyAmc)REb
zkwf~e5@`%%5+h-)YQq5KF3m%@Cj3R!76!Jand@L5heCCS4v<ZqDA8b|??47kkesbM
z!ZJh?Vnd6kxu#g;>_<_dVu0q=lO0N~Pq!D(wxr+5^9vc=SlRYNIDJuz0$_Pvxm0bm
z3ttq45?^L7M<>!I#3~!ir?U|!cBuCg;#up|KVTPSWHSac#H;L0Wr{+o%Sdae^bsd8
z_vcshvJ3L5{Y7=*OCH&0>ll8}R`b|(O+>_l+bdRZ{-tdFMVwFC#qb@f<&3wW@nb^?
zjeeJ8ugf1Y_aRML@)YMLs-E?Dh5N2XpWR%Ggm8+98x46+eZdixg}83cnkR9}%<E1X
zt?Z8>KbiA1niKNNGW@qA(ggL1e0JSF^7r?x>>H{!-&N?7S{tNhBqGDU0TKjS;siOt
zp$fu62LE(B(_8L$VWIVg<P(TAu_Dx>!NF|ybZ}<Ry)%y`ZzK)c>Kt|*I8i<3l(8F#
z*j9>q1-*&5NMIGrS*>2FB0%!>OcOhmWskY-&KhDbXnZg#HNwAOjHz_$NSiyRH{>$<
z8zZT4xY3xgq$N8!+&ZmbFhpV<xB2<ty5xpPN<s{|IK>fP4B*wgy6!NQzDGa4SYKs!
zFtqTLkF>w>G2RB0v#{u|_t>mWRcx7@N})DXI+Wgxy!Crgc>d^RugJKY3O8E6Z`7~3
ziTlX6A;^TNUTLh{*3Fhxa}WwA4OHH>;OzrR^IL+=P1*%ts=vj87owA~KfFhc_=+r6
zRNA7^!PWPVr8Qq>nY63@^4?(S)J4`Mn@Zj|WXBbV3K_|6H5~vjJ}1k8riy%%HhY*d
z?h9Nha5w*~l{u@09}z;~j%}M9cVk0IvJG!0^SlyJS0+XE75<vKfG!Lq-w>{1?g%uh
zmK8er!ZnhBcS>vpTanVdg2BHAw}7ocsLPNz?jdTNZ2P<4=7g`&^AF`w#1$jynN}Za
zfV2uSvu+sRd&H@qIlX-Fzzmd4LijXX*XV5I$A}46grbDK=-O|<!@h^;G#Lq(vCM`^
zCJ0%yiW!=>?GHKEfHtVr@wQ!ku#n;G=?Y=p{)P?(S)q`a^2)*G#>4~=NNx2}T=v&=
zhWoY=8YKV81EApgOidX(klJUUlw<eoCx~DL4X)4Xy=biLXo-xdhrMsgP(~7BpprKj
z0sen$N*pKI=~Ur>&j`tg5BrdQ$mLo8oT8QmoQPsgf{Xnz>8RJTH(Kl{V|bljWNfq1
z{eY;)Z`gJFg#n3H<5t%6z*Lbk3G;p;b=5DnaVk8QH^Q>0?&4Wi9<U5OQy}r9`hVjw
z*fB^;T(KJpKnt6Gx}y2IzzOdY@`TMqEkTaWRn|_tlWh)GzSi#kzmHTE1Km0fb!+su
zLdG+*e>?YUZwMhbL>YSJ`}4m@-mLy^=L`37?T-)&_#ay5oUz0#Tzl#&$cTp&l&}zb
z{uhWjOv%CY>ySDn*uwl0%Nq)%dbhLeuznGHiIv?1L9w|cycCN#1r}wB0m?TWHGVXc
zQ==xVYFe&eOA$u<mKQT7InOB=6Rhg8dr4@MVwRAy04BQ4fTqkF)jVZd%55YcWz;4D
z@E9SIaJzabLX2T8V!9*bMw`_kf}L13qG}N6wv~PeqrhpX^s}h1+Vq;M;VHN)MxUJ;
zk(^ICb4kBwl(Y^q1j*oOm;jgs+*j+qC4a|FpdxOq*Pw<a*+6$mSD?#0ju~^+K5aFA
za&8KX3=z1C!cVFrAX?R;k+O7baLIG@e0jlsMadVTx=ram;nRcJ@5YXZrv^Mk9%Vc}
zxND!#nudTs*ko<+Mbio@wwX9#i3sIFXo}kp0cGT7rg<{bUq@PuS)rgKHe|Z&=CQfK
zvuenc%Ez2fcfCVq;=)=iL{-1dauRuQ6&(+%9WJC9ejLl}Ny&$e{@&ZUhIk%m8Y!4%
z1{4l(Pln3DoZ;IDOoo@->*n^@LDgRMddzI7Rh#((cstPJ1iLzF&LOe#_wmd{T)+Nd
zpnd57CgH|S7uBvB^IwT>PM?Wn6+V(mntzg97DD`>&pzGvWc8Y6I2N~Q;&B^zVI(VI
zAS@_y1-G7^Dl`ymVuID<i@YHC5oV~Io7fY%AP)I3Yej8v5T@|b7KLPH-;-NjIh0p$
zGRUZ^_Adu+qD`rFYFq)eH^_gZpnV_t6!|+MX30?-Q2jJX<a6a9k0qCLMWIpqfNnEX
zXAZzwqcAyJ8>0<LmohS5nj3dAjTNS5w0eI_bZJ(R<e;YPp}%{s^b?_gmg!V!(sL_3
zB0t24zcYrl3ZA%&iX0<C*_i;HeH~US72Gj(5m5RySU{tUd{dIcG)LJ9(7Fi_k@S%W
zkxepbVYT@t)IJWZ<J>xU6TZG!N=_Ex>nnM}>dvVN2qj4RQ=(_wrA3bO(Rzb4<<N7m
zJ0c0M?N&)xEm#L!@LK8pYkwcL|IJ_P4>7uPcQn-71s**A()vOA1H$wKG>(i+@kLiq
z-8zyX+LACKS6MNBYHbt{J8GQiaPc-*)8Pzdn+9DRt-R>3Z_&sipv1)Oc2a#tEajtn
zeo@Zo<(~&m4j$ZYy=t4I7TZjSgi9ydRohtIf-PX&ZHl*muyrLW{1)4v50#=zYK=S6
zOzm(Alv(YzNt{ILn?(+G{F_sHV;bXQs9}Ko1Mf=lh?nPIvwO38QpLA(LA9`!@Hc3~
z@-zt~E6iDDJdvl`2$$2?%?}AN_)-?ct3X$`BXn~kZ?6Y&F$2)Y_?lyiMPU<PZA_e;
z%;^ZL=JU#3mwz~aJnrPK5-oP|URVrZF%kFpln=EICX22nWeB`h2R|4JG>`C=!5M`s
z|8lhrj>sSNx8QY!sq$RDP&DB^5@pA?h@Y>>i4G{*Mk(R}zGg1t$KXJjuhzht4U+1q
z{mM|Nl{tNZ^(63eY-~*uE)AtNXA>#}=+Ye2;>3$C=GMoIvwp5M;W-%99gBPPhH-nW
z{>#ys9j(D7!47um{L)}<-k;i<i~sw1az%*z#F<Edpb$8euifm&s+B*YwFM1a9p)Bn
zxr}?wftwaa-8NJ=Xo051t1qICjk9m1SM7ccOeY&)UQIUU!LzpJoB63`yH0h7wfMXj
z{WCha22L2e9|`a0qU!&x4$1jxm|d&#56y4v@7ewKiob~!?1ssu>b32xolFBx9lio>
zP7ODOhW8hp4J<R%JZtDHIAB&XgeR&h+SS|atV~_HHnh{j?@d%_Tu!EnzfK(vnJv9_
zE>c?~3t=N(Y;5y_JNcs~CD4g5RXV1NzbONK@Yzl<K#ZI1$=h!9t?MP*NLES?BVBc}
zo14AoUZ`!$wx*9B!rz){0kn${3He<2(;i$RHFDaDj=__bu)e|wDhj@g4O9hjGbh=6
z2`(x3b36&naZiO!BY7o5Boay_k(8g(9XQHEWr4~uyBE)WeYv|=W`BFXSLdD2{}5Yo
zge~g<f=|J?FTCfSSTj(ESei%RGq?y#%*WdX*J4G%#!ckaj7xHmU{e-i{V&-|Yjzd9
z0>dk;;CN?P3;lR!IAkY|lnyKZNpW_stZtuNva_FhZ@rc#6UOZ}yUv#^yPwG(H&&ev
z7MN?w!Fe`ua0|+Z!vOV^bFM?IOtPXi2Al%lQ&DO|>-;g&0_1INLY#W5Lf^%cw$Ls#
zvS;#icV7Hn@`3h}NuJ|Khv^Sr>b^@;n^Iv`+G(!iE1@YmMeq9v!l_*dN9Nr~xz1V6
zjE>+ALjfKvpNvyhy_*Ypc4$qiu`9)hzUbw={Gh=vpQ;=O!Dys3C7Q&SXL(X|8hj3A
z<kJKOUFrkcGZaX3!xxL;NPGtisabUzbA*M&d;b#dpN?1^;s%ZsRBeWyj041b^>J{i
z0gqdpAa>f3>o*vLuMpFv2awXF3-5X$mMi6go4zHb^9TPwJ3^fsBpC^Fry@JUeeP7b
zFGLOqv2A>{L8}YAv-3E#F_*H|vVaJpLt4uG8nc(>V%|es9d!tH2a>{A7Ud{0VH2&;
zPT%qyG?ka{s;~hk2UbaeG-z;ZTMM2N)-f3L@r?vaJAf`o$<t!MnKFliABL;eTG*k#
z#J^;<l66081q-hW%~+PqC^5crIC}*$Q%5kv+!WV_FGFo8*une?D^fuC=LaxS8<;M*
zUSZhoWOgw(_%`*3B%80W^8E%pGOJri;s%HOYuZWx>kIJ3(5{*{1b5$S;dm2nj0R4`
zBF1uy6oCQ$S_<YF*w{<<YJ4lhSe|fmDs44$J$6Md)Mmtg-^M(l&@%-~>P(*U#w<VH
z$+<w2L+P&Y?f1GhJ{=V9ZsD$_ehp~nZ)906wM@5(-D@C{YT*m;4)!AGF&sf>n&^wL
z?B*kw)lk|Jrh6FxaS6D&bHpWX2+Ouxy{RZ9k{!3=9c5YYWtMqGcVNOX)a=!$e$FZX
zQ^P)*!C$m-b{7;}pF96$jz!=LAF52%n}Jy`dnB9({iU?j4ZhDY-y#VnZZhBAUSW1*
z=ui#1Hx260MWfkP)WxmECtuCQJX3EJbZ+Rhi_#c<5S@;7e_rK4%F7>JFo?g=(P%?_
zpD7Vr&)2L@z<;1locXNP+7Uy}XpLbb2g!YN=I6+d+zBgqi?BkDXFK$eq1_NeBy1Nr
z29uVMHV8VWIff&%@FD~{3_b-r!)3g3f6hbq3gg4>x2D_~DIWt$YQT`brwh`Z8*sXF
z+V9AFZ@w1(;D7n#$zBS+umsq>U&EliW%Y5&2#x!Pgg2z+{P7Z5ZD2FL8mTN&0NA{A
zjAWa9`~~KB?ja+p32JOx+*q707PT`e=?XWvAq`-cKc1>ZG_h|?X^yYPjJ5FWQlU)J
zimmTbikBT!nNiMdZ*wz@s1#OECXUYRzU^wd-p{w>ebcMz-Pr@bx~&+H`1!70c|iH`
zfd5=cy{om~O_m<3vctu~ikb0gIT-PPT{NUTh#~iwMeMOF`@t@SauBgd;c@jxG9(4P
zL-AtO*Y8@7#`~6s8h*Q4;%pcc=Mh6X_x~~Z|KnCT3150YyksJL=`iS5L2P&&nP&qx
zm?D1wAWVl?eAIe&PdFiwV~7)nv%dg*kLd;C?`ktWk&?U^(n~oLl!<f5Db%Q_5W6+)
zTXyAfN&Ih>MwgG$_w9|v^>m=*{j9~V+kwMhbpT=paiD4}=hnGjl5rX-*RqY16}uA@
z?xqTHlg*mC(z-mq#xuYXWIJPps7}-Dy0&RXIHlr`sNCKW*1Bh1VFSB;-TlJQ!jZ_w
z3oO*j6Yzzr;S02C9+Cn6*8+}{#93C#gY<MxQ;B1P`R?xU7GFhk6Y&cPcKJ{8iV(r-
zPPN5@VZd<NvXu4i>zfD!cF=u|f2)VMlxO98>?6;)VDtTgVA&di+L(?ngw1H)kS3ih
z`;BcZ3?cTh<wktOQ$ekBr^{In(hAhaAm43ZLsOMY8f!Z&X#boCv{?X}%oq~Wg~jX8
zGIYWH#~33xLh)J4E%o(3ZbhaqHr&t|fiuxUZ3=kXyysYoYCisoZ7kTUHW1@`n4TEK
zW60k(aSa(lf2<nKcsW*Zn)xjfpQsqFS@#f&k_R@B=QCLPI`!=#wEW%yY4FUfGH;t7
zb<`mzucegpoi^&CUPFN24KMs!6#hH$Y24(5y=tr48ps-R0q70H`NNsnS?5q2MIgv?
zu#X2&yt)9p?CTdPR&Z}RUAzJ;l*?XzF3tj^R(a!@Y0A;g(-l1)(L19Jb*4O(0CL1$
zBFlauZP(lcA|}O5eMZBX7TzSUz&EN5A=$#Q$=p#a*rg6b?hZaI0!!J_j3L)46`KIb
zO7~=+wH5=m8mp<SGQVA!xiR8S@N9H#Q&Gg@5RW(DwetyvRCgWB7Zc$ba<7}x10b=3
ztUrkQJZ`LHda^miST>Wy{F1XwupS%=M1rkwyOU9Fu>KESZywgv)%Ag5QBe`1qM#r|
zYn57sv`V05iZd$3ID&$ZIv|9IsTCwb$Wajx5K`-_v`~nMhzKDv1S&&f2t%z!W{{v{
zs>&2OQ3$8xB)yA%_q+F>_xq>qV|~uq*=O&y*Iw&4kgEHfPlJp~+lo<J|FXNmY;Rw?
zogL8|>|J$jL3M7r&BtZ3<EzZxBTt!_>jmR{!aaNi7FLLFHRRT9)h0KODl|(*n`le$
z1KL`3TM}7d!-&0oKlZjR|2$NPDOPnvMXPQ9x>|<U=6xMe=0_?!HD^`gnjYcK`kqM>
z!aKRqaz9MC7pD>Qh)5FVWdytdPBTHWRr#673Cja}DI07S9<4@*SirH2(T3cO+MMJY
zPUE7rz?T}_03^fkL1Lu!`_8sTGijeJs`t?L{9)Pc9L@XESvcok3~W3>|0&xZx)R}B
znN$a}j_-UF;SNTv-^`R}=5Q=WYX*P3^C3d!&DFZ8s7ZCpibk?d$I#ankGRL*srGvP
z)A9TP;hzWQ-^_QeoMp`NC!&#5eDM!2n*Zoj>nOE7j$nOU%{wGE+@nN%J}z8wH*w7!
zqt0uy+B^F}!E1H#@#E`wg-4H;bbeh~F05Ys^fIxj8ea+5v)QADY$%K5h=pxZpvyk5
zai~_vlZn<wOBs6$(<FlP8FYUNG0L$n_ReC~wrTkmty!ATE2gP0>tdPVde)mp@6~<L
zX=#23r>8gA6~}-6a=2;>u`Pb44q!Hl;EO<dh6F1i78b@1kQ<+cjXMbA(DKMN%^@Dz
zfaD3MgX7zuXrl`+SAG+X;cMdf!xe#}?)%bJ^Y8jvoY8L)bwy*9{mygK;B-nG81cVL
zlne0fGuM58pksUqyuviVVE#S5-|TN#p%MV4oaQA{9=G628M>bhnViLgj7+hGXeEO)
zTZ|(3XPLf830+2ML=vIaS!8`B`r(Pw-T7#@$Td^i8+iK#6NC#l$)@&)iE@=MO+TKQ
z$+u0XAzw>ih!vUga>#}ms&NgmnA0O8T=%@B;9Z8w$fb2$5bM+WT(7ga$0`Jam<#IX
ziyuK_#@oCnim;-^EK!NlpL9;VHm7xT>JN%jBLm-#?kmsU(|wszY5=VQIO48;#jv#&
z-UnD#Ift(d-hQ|<+TOjT$<|C`uHW+tynpIM6<M-@kd8=L>Ws!*Tb_T%+uLLdcOq!!
zgtXtUt4<`x+Z=w(NVB_4_((9^71_OnlJumuR%!W5QShicvq6w1Um~&_o^HbTOX45B
z#O#`5`;wf<8(zYp-Jz@%CHQ8Hs6MA$SlL<Q^I^_i!fNpP05UZn2DgRNM5!KcpvuhE
zg_;Wr?jk&pIS1cW0gCDb6UU4?hJv_&ZVq*=wq*7RL~RbMDrs;Pnwb_&Tl6CONXOYo
z=eixDmE~Q#^2p6;MG-Ms@wywc3>NrVnA%Xl$U#`xqb2wN_;^x9NHDtAprs{78|)V)
zk}h|sqw-mlz{)DdfQA2nRKA$wh}BB6x<84FuIhGq&D>I(G4A(UZPE+1Z+BqZk#ZB<
z9-bO0R;0t8uGYNKJF)48dkBM@Y}?mlVD7;TC2VVyml&iXG*V4iP!y*ndfVfhv`uZ-
zS7$51tICcKl3BGeS_eP(w_c|X)^(1Zjq>#`FY~Rf%}zBjTsJ&H6t55vu}Bi18kbR<
zY4gNkum5Fy@{-~7gtq%G6ya79(uwwU$KneZL_!^SMKlj~(g?T@maQhtk8nTt#E=^0
z7wDl`5chE6^|q1tFGi`|s>&Hx8OYre*kT3H>8PN9rdvj=Y|#XvwILW_-W=GwwaLj*
zIj&Qn-P4wAB%<q56!!bnJ9oQyFcU+*M0XAr$Em(~;5H2;T2gdD+E{F8X)+_fB=COC
z?`E$l=piEJ768Um3c^bda3>L>c8Xjv>Y?IE2v><#A~!6k8Eg&OZWzC|nWD|FBM2}h
zzM9X9Q)M<%ZCSDLW=-eATkl8MT#SvsQ~SULjc`BnfOqD%GAMJru>PO>DPe*GYlaT3
zBr)nsBXT6Ls0B?kS;TDNcm{E)(G6dS1#6{Ez@Qg7<KZafr2xtYHd3QIZ6262!T+<7
zaO|tw*^UlXHQv0K=)w?2R%ZX(ZnD?jLl-P^el(Ln**5cEX_YDcN{)0tR2s^;4VoB5
zVS1gF)~z9Ad9TZJN(#lwdld_533TK#t$e>?!1Z7m`;<Da^@}O#h5oeHOFl|%vNnB7
zn)HbLp)Vky^FhaDN-|tCO%1y^77$O$5p*|oA-(~%OjgVLM`@Tu?MqxpKh*>v=9vRW
zo<tU}U>thtESQV~nv@3!SyASOmwA4ybhSN`d{?$TtWZj~=$^hk9XyhGm)MpJ1ZbFq
z?+qy+$0CLdLcC0TT09ryDsY+=XCq01*s|=5R$N=?VzlBhf&RrRUy5x%jSbq_X>|b)
zu+-O)G@rWighnT2?ZE7=0-(TX_VyjD?|Dker_PxfF{I%>L<`JE8fcb6Ib(lHWpmvn
zk^lmbVtZDCx=&-1KguEXoYj1KRS&Kgw-w`QAuG|+?6~6N_cJSAVsYC#qq2Rne=jS$
zI(x@m!dtb`yck9tYRI63GG(`n^XnDd{<!U0H;G^lryp77Y+T41ZP2m=O|(TD*>296
zYHorNa?@*aX>4X=I@08@*1cZG(}w&NLU)_iG+$qb8gtgB^D|`vKzDXFC&G4tLr}83
zGTmxdr;yO^c0{|=_)7s~7vm{Hxy(lQpXy$GXG|#FLinP#WB?0Oy-Q}h%`Gl&wHmR#
z=1oM6iT8YB&TpazdjIlWl@1gvH&a0G7yI<x*cJUZh-4R>Z&`9vaabB{1xSqT(MPin
zqHPUwJC-ZaYSf!dHCfJC$NmDH%U4lMK@?HOP4PVB)Li|5y)F9?&riEcC<r<_nicoF
z@cG=EahB<YmyvxJd1xdJUwlpmX5P$~AJqG^1_$Sbifd=i-@~=_KYb1?h2f3f<YPw*
znx3!EiY~9HtUP9)SYNW}T8atfXJlZ?I8UHog}cHod1Y*(mC+gwYulvE{!yI(6(y?y
z79QZM_0CiI1xXGJXM!N0OKZ$7l$Kf-b6&+;<l^vYvhqVP|6MAnZs&#k5nIhi*`;3V
zD%-Or#BQ_yems6O({G1qwxXP-nZdtjcH}=Mz~Wv}7jqZTla*AdhnyQLPPo+=P;*D9
z^ne8Ol<talT>;u69sH{2J&EmiURfV8syJ@_<!H@|{D)Zeo=*JGC8Dl5@8R&ptlLk`
zCjN$jzJ!M_6A%4K`FL^$K5XRtXBIvS{_LFi6zLlBI1FEUNKF{iqwC4VV8|WFOz>oa
zQ$TR{dtt3$!7)q^YD=FX^JR>{8`bX3{QIofxF;?eNXdfhx}%3HU-HFO(SC;x1f}m9
zGW`(p|5wAHf8<&SK~28_-sR)HmeVC#V<>U4M_NP{1|9(0O65DS&_Y&zW3G9JCza0*
z%2b_p;zP?3{DC~Z)L(Zs{K)oPLJvHXRyzDWO+GTn;gfrAU+H2#rSRp@O$G!%y2~$2
zI{lVgVEn_q`kK%wz^8ix9NA+D8Z-T#*Q2>BM56NC-mXSlvLMylnUyAWb1zLlzcDr=
zhp8eFMr)S#U2JbD9-7Y0?Xx~~8Tpym46THId_C3$J^G6|$c0C6_*;lRXF-wD)xBWs
z{Ps&l$1r$7buwS@UYRiU)$zftg=-tNQvLlqK1YpPDrdc!m}R(zNI+G_2YH#T`y2cz
z->Ct{Gjl?-k7qZCmvJTI^H{UkkiVL+0(PWI8^EEBKXqfB7z1tcd04T(cFspECn|{H
z`#R3JSa0Djdrx;sGwjlJPVF@@=nZ$pihh{f&-N9gKB^pnw5@-<kz!W&L+<=OAz=aV
zL&eSGTnESAI!FGn>%oXBHxy0^pT@QoEYdMy7Gv$>o+wS2w2v0id2ak<SLsCjkrH9H
z2|)_abTc!~Ytzp&zNVEko0uT1R)sP6?33DsMEmHrYq>UPH*b+~4a-zIxU7@CS|Of=
zJ%~Tq14%)xB({oQJUSKP8Ry$k8euaXfBQjts39kedHzD2r-E35RFC6!JP2F)Xv|oE
zem{FF=7yREVqV(K%47*4g|^I-sLnB0yR}ekf{#IS(1N|Tm?g7t9))o&;jCjx8>*)R
zu2UYrNG^^q+!;5tkp#TW(lOz@$bSVc$Uw0-)xUz>y9Acod_?gpO$cbMG)O@;6i}id
z_8Q3`3faTQ4|cE3+>aH^h*wb)T)4CFV<7R^>L#6@n~heqgv_rNUDXk06Bb3-a<5w*
z?gmZGGoU%p+t9nbz(j*6D#hp)n5lK#G3Zv#9>G59w{u#>bA;lnyrrTA{TQR!{fw}H
z9RTN2F=ffo*I2O+`XEo~7q<&5gmqvye1IPCJ&UXNV@@#q+>TduS7y)Q9&~5dB&NSK
zI{=S_@SDI9D}EN+A&>=B6t+-hYZMP^wbiP^=C*l-jr^F#8o(HU>`21)w4mGkk~-qu
za4<<h6!D9roNO&T{g%DwpL)bfnmQoveo)(ME2*p}`I=}EjARDz>6uoO6C&~O{({pD
z$#X+1qCgsHS7dT&&@dnB(J9DM&Z;5WA{XX$+A{Whv~+44*fcfK>{$Jk`T1O1!s21~
z!lcm7()7Wcb-bdMhyC(hGL{({{68>!vwyn(EqV1B=Y{Hn*eeYwpw0uuN2sdB^+b~h
zIH~-x_TAM<_^5OlW26H+L%r@`*@LeyWF-VtTxl9cjhPRD#^C;H8kpY*qp)PkbvjzT
z<0R+^!ZkekZ$z?+GW0iR1)`*AH~(YubC!t_%GF_VY@^#)kdlXeJ)pa9sIK!-ahHXQ
zD;!(el5CNu)CFwcI<&Dh@_qzoCF(Oar94^}ql&cc9eEd0hFaD>!mWA-z7>^$yIJg@
zw9#RusF&?kuuUe{eQq}S4HPgx%p}}M#|L~9FzOIh*gqy;xy-`LjeyBKN_trVu^SCx
z4j?*-b}EfcRe-~U?jE|X4Am>AxVWD(?mx-CwH?kztKgT6+%G#_iiBRw9qj;Im0BDg
zYPIIYKicYCmKQWybLOT?&DG(%#O{JN+~%Ee{;WvmdFX6dh*6dL_oQQWX-rGD?@uaZ
z{R%vr)pqsrPjuI@l=*f!w}052W%7>+Njz{%O}Pfw+O`2VT`_o~e@%{K&c?$HdEO*8
z6}>GIGv;JGAtZY;)%**Mftw<9{(UhzUDoxkNpnOvu>I17m7B-Y&wO9|v+0}E|E=x+
zf8dvyg};i5TW1>Q59ld~ge<Z&wh}8zExydF#HF0MqqL<H{F5y$4i4Idvaqy`b@AFb
zm044;U893Vcio0UEW_jV7X!XpVO8=YpOSTHk7SJLkb7wlo)`EQjMV&S2IrsTv{+Fs
zNBxMYJaivL7NF>pFlC$fV$Zd1YPV}vN^zp6qk?LI2{d>5WKEj-u`J`0XjLRpDm%wh
z^4InG<_I@5)%{lg@j->KtZV$-xu3`;4e;?C5eeLD6xlQ=pus;Ys-KQ$&?<M`M#F#w
zo8#E%Fjq@S@;tAUFLRMygF9YJij(KoyTMqPkJbY2EXjf~_V!2%VPl_b=Ck;)he5&g
z-sahto_gwy=5L^20Fe!f)a^XfkC0BQh#C7^`$4J>Xd<P@_BF&iZttvHrW{`)4OKp;
zeS)6=(+lb`&?0`w;`yQzu7TfX`CKKr#LapD$8$u0yRPuTwy23NaV6Qw({zLgt^~LZ
zVw|6#q+yOzV>xJ-s#-%VWUs)u=qUwLO1(O`84YM8EyRk*p<q{mk+z}H###V<&~|H`
zxeqZ~<H6yu0QAj=h&}A-$nO24w&!jYZ;g8(yUccj3K0|pB#;;=ct~X*ZZ&n-@GIra
zKPDNjVmr=f>^)eT!q0y>dxdg*u_T`bbzs7E7udTIS-iAp>QcIh==-&Bd8e1#j;c;|
zk6>Kz*Uj8cb90Y@f$s^Ol$TaU^DYQ!k2{f*f_`R$co7oeWUi!Tfco+VC09zb#_U=`
zR%rhdvbqD`j*d#EeXdT1{fHr3`zF%TJr2~jzwNFJs`Wc~A^LuBf9v^W1<zaQCT8ju
zd}R|%`Y8j%%CpRVa|P6M^(6M`YOF*3H7tHVQ`P(GA{K31UrF6&B@b*9l{3me^Zmj~
zM!eTP?r_eiE*YVLf^lV>ldE)p;#g&U2t!|Nmhs1icETX<GVJE>dH9lmCfZ!i^3j?p
zO+X&LsgLBjBG0FUWvVhuWJiXnN%KeUxE`QSC#4Iv-yL#T)h>H48|mGj>F!<qh@M&1
zI_FLLgs!V`Y!<FTBrhoF5#(j2t`oD;d*ibWcQ{}0ZVY~kzH6!mO;)ZI>%!LFDELWO
z+|DvI=7#5r$h?pd&RStdv>k70M9ko)e%oX%zMaexer2(FS~~SWS?;KBmDt3%`QOdy
z{gWY`<BTzM@dm*^CZQB=h>H-Avyg-6e!^COebk-6IrYN9+8CuENp6Lc)Ls|+c2?Ha
zc4?f2jC9h@nl!)a8gY45mR6Y&R~!Dz+bx92Wo59YjSy~0XG_KrWwp1%vFzHQI6*m$
z#ZVo$sS<~$tkskMS|d5Px+Vd+eST5Q;y+5SWSf92_A*#j8#sgViU4Skf5-l!7mAyN
z6|Vqo9o9g-S|ys(>lr=wR$Kv#5z;qFvl<N{{X|)4AL!wAa=LGCc`rZ8uy<r?Pgj0$
z;D%c8MczK^$#;ZzuKyN(bZd<Bw(CQ18^d*2v-gpCB3EO(ZF9a-oJ0WH&r|ol)U#3j
z(F~^facpW!_O>qe)>7F3MRyguu&*u)Qe6I~zJsEQ3epAZoF8uPd2DJ}fGCZ?!6!_6
z(~@Wy760}hleg<GQ(kN^nv?X0*&7T(L{T6X5;TtJ-uN>gl}s*KkX#dRE!rt=U+}tr
zOpaAzktiTK8){$2I(cZ^HVx3-jeJGU_G9SuV0OIUgq_AUIAC9=(6Oc~(uDHm&<yW_
z@{o(UZZIzJ(yup4Xf{A5v*h$Rd{c|j@<AFZQ|gLlHk!9u&-lrn$u7d3Yq5k&Md7(?
zvv+WTFFv4&?Q6a>t{k}T;?e4Ssj_}s*FkaDxig*jpn6pne8Ff5QSR!N@Yr=_e8K?r
z>GZQsAekMu-Ic7Qr3A<ZA4Tc+ltTX?D$W{>GQadleu)y=r3qyDtKJ_yv8j0_Fz@g9
zXza9hyFg2H8_oh9{sAv475&GgiF8B0)O$_1ziqew<55?4w{#plWV64m=*fd-^u~ML
zniApHtHr4=jJjTr`?n+Czdtd5^JNxD8iayVOc=h*SNFLg)d(yo$|oQ>fTR{GUWh@a
z$r?;hfWNgk+_pDQ(Te!oYRI)i<KHIIi?E2UK(SEkofCH-3HLiuH0<vm6L{pW7~6As
zapVUDk*8-F?AeenCV(!;PaI2N@e>-e95n&=*nYiH;`yUX=oEsH$O>q#7H!s^EAT3o
z9UaPbNNBVrBv-DEzjWdJlKGQ4F}pi8t3RF_pEM5&KmE%ViV3J~FtIP-IyNJ>_l#zT
zgb8F^^)j&pSw3j&2z=KZY<fiNome^u(N$!tjgit4IrF*HPBPKrB_oC*2$vOtw%EIX
z^6pB#`H8|2nJ0LJ=4}{poo1PhO=+N-G)DuU$X{-3mRHJ?>*nYW3{jTik!l*q;RCMm
z&{NSIwC%=QtwXhnaNS{PkEeZsIfCtWaWdU~wYhmJDEUCI^Ef#OoCPCE=ROVkMU^Vs
zPxuqT+-OE~D3i=Kf|TiZUsJ+JGGBF~Ktj4MCy3Tz^5fxnD8$0W$HNCVcCh0fwUyFq
zk`u|4g>=!Xpn|R)2f^^Yw9xWaTxjg7a82o1ffIABiCzt^3^3xqV8k@mE!`&o99Rh(
zBY$H2hI}!!CrmK`>LcOIhyE*XnfGJkYOGp8TFkQX>x=f_E~9%d?|{V8ob`h`&@Zg9
zx~-@lk3I6Mc1U)nthn`5K?p#iCjSSfMjVDJ%nXU(>IXzZs{2Mi3q(6DIqQv`woH(n
zk<aCrus_4rsHwBr+W=gC>u6ddZJr3okWXWCpFDWQ3fir8<s!fYel^78vm*W`yNGY?
zsjK21?TU&I+3@;{cGHh~qoor(U&47x6cWZ3L4rNjuWjg3GaIQ6P==sgzsPcv8b7V>
zs9S#zTYyE#(x*~|B&*>X6QQw7f85pGzUmjt;+VLL)ufHqRTpDycF)2c_5-<MqyvpH
zTH3+0_pthuVVBtlN{l_Rj#4MuQB-vM{3AAyP?a>>V^~*%?Tw4im~nYnDuFQMy}CUk
z@6?5bH|wUIYm0{i&i@_bZ=2XtqW$(M@dXcGnFkYp!jM8?$Y*i>;LV3fN=)5^(|f!f
z@YA###;>%*#0iU#mWEj8<k0+xLAwO$_(SZT#a!KZQ&xJDS{^j4bB}CItjdmjHxgKI
zqdGRa{-xPOK8PQGO*PJ6tZJJN)?QOcm06;vU9@1R=A7Vyl46a~T6%LoM|+wK_X9SE
zb5>P#d4BbX-acx3`X_SEG<`ZZ|FrYTTVvJL`~Q>kl=6!hBf;L5>NXhi#1UffgGr-=
z@f;$=w)h4;5vPgZKJD8WV%dJKWTN&p2@Fsq!9NfeU<awz&y>&8sZEcE<qL#G=M?qT
zT`s$Wj<n|+2hL<+K(y{Eg#}>-p+d5X%(vU!OVt!9B3F&bLX#du<v>EQq$E0Lqg=K#
z+K^M+Pf9ow<ah9StDbCl)cVE1>!yv{0v6aqLmVy#@9<?GbsI4`%qDE>tHF3MMpP4_
zW)8~Xi`ao^TN5?Sn~VyQot-LknEPt6B9z+_6Ki()q;})9CFq4tyC$Mj`-6Qoy|&)z
zhJvEun)qD7C6_>f?x@+M9UYzvee|naf@K52h?L287wY}$+=yptQF-HUrF?v-m-^}3
z)rtp;U+t`Yp7rIQOLm4XJb%Z;7z9ogkZv3$yc9Hx(O@dDeyXt;74V0)86c?)MdpWt
zB~Xfb+#EakhCk_>!#Id>i)bSv%TD2?2|nX^XC0ZLHQQ(Gr$eOqyVRxr%)pMap0`QQ
zNLwgHJPd(6#?;8YrOY&10h*QacgkJD8-Wh$zE_)#O}TJ>CETE#2Jy}dQtx%zbM^Yo
z0JEDfBwThNVZabc4vIW=MEmcJLT>q7EnYCxmsus#<td0DE^F_y=Fy;hSVp^k&dKu|
zRb0K5G^=vM-6}x$?nR_Hv=E3BZ1F-d%ENy7$K+2x6C@YGZD_h0Y_mQRKItCsP2dV=
zS{xDbDfZno<qF$85996cI^B6!yTdpOZRI7CNsGeoWRi3rm9O_s_tGnaa`q1F6W5k~
zD1Fey-vPQ%nBjlf-^A_~+zz(KoOOm<|CoHoOCbuwu2CX*D+k%mog!~moYG<{!MJL0
zs9GktS~)r+|G_?V%fFrN>wUc@N&H|W)*x>5T~S9SixT1rj=OS;gMbL08ME%D<-=Kq
zD~y?(&<9^)zO`M*KTnAy%w`Dk>F#$P)vUXsWTx2Eynif<{<ZIvZ^zlUXnbWrY}MTp
z`gJ)Br`Ea{o1dgsZA+d+oBU(4p^fY9*(q9&|A4h>J+=wEH%3ve%a<8HWqsUL-jiRI
zcBG=Sj;1o4YP5|mEnJq<qq!fOSpOhzVL+K|FnD0?AG;q1Qy1+yZu$pQJK$oP04n&!
zv@*xBVAK?<3r`8MY*i8VmC6emK0w21NvYd&cht>juC-1n!bkvG<!yW1jguMt5m)2q
zodTTXoOkKeBf6_~fUSQ%{d~cQ`!$`cpelEkVIilTf_|TjFQG|kv%S9<bs!oZO;A#@
zCg7%IQI)2EUg=V;aQp^40Nk6F498x)nYUFC?m+CYeye)_!3q$({NdQh+mBv_$Z1<6
znQI=JDWOxp6F$%xLn3lY{&GsyGWHP)L7`OuvN?hQqJ)q-?V6{`F%PLj`%>_4)Fe~3
zC)#LTvo2p*Z1KZiqqg383a@Q`XW9;yb>(Mt9qc?)_M3Rq;MyO}MxncCV>EAt!=oIM
zO>jdlhAX)xWEd9aDnW+vQ+zH~fI_9s3?(J8L!HHsurw7lfy|pdym_wHGVw0mS{Cw4
zT<P|r(ag-i`%aAefgyg878;oZ96$fQKEs_G`U)NnC+pQVMB*+E0}GWH2^Ey`5->v{
zkb4TyfIzI`{%968-P21&FTuAn)Vv$CMc(U&WaEis!ouM|+@@wP-Qnx<PLjA1sUX`$
z#`twBtqI?4j5cq#grYv&^XEK<7ewNK$h~?NbizLo%`vu5)0&Y~;)+U8SOK<H2;kq7
z*@w&N<y%z-^QHjNDy_x4luCr~@+FJ&hg2Hl`jI-P>5YEGCM#Yj;(eX-rrKl#GG*Yv
z94BGxKvNuZbQ^0!W7HH4h+W%a*=U&LD=;<>yH*#Y6kD4Qq;KDnwWp8P;as;lpOyS=
zH=A5MAeTD-!eXAN|G1`BDDE0NrwP5X#nZ=V4kfTTg)rEdnZ@GAy+N#?jD6JpAqVOQ
zAp@?ynhib`s9SQ~R?AGK9Vz)A6B|Ij9O?Dks`m43y69l%>-ELxx9E`<i3L0JefT4N
zvBsjp4fG#}7e~}oWz8~j4*w5!9r>rnSVU2_$k9E>^p^l(f;z;SZt>rdTZn(~QsLMA
zgp_#|;w$qNf|u{Rltw;7@516K8+nzkd1wY{kuP*XUxj=MLrJas&bXlbj_)yYxc7=d
z#-M#w?z@I}2Y*s|*wwzaYzZiD_sjhSQc8bB$^~9K*!-LT-#gg*K1Ij}*=5Rq#{0p{
z&qlwLm29-!ZFodEMP0<Q3!b^)AeVUyHzMJLx%m2S&u!!PB5a|UhFj>pSPw{ZuzMpL
zK95chQnn>W^U`Z@*}4SF{1Zh~Kol+*hL*nP)&i-@j<V=7;!i=<<Jf0n!*b*)f-fGS
z;Z?w*bcRVTHMYtZLN^`c9+Nc(z|O<2y0=8MoDD)dOuC}pjn=~p?yig{(!g=HE--6F
zuVd<l*SlJF@Myd}ozBrd^}VM%H<ln(!r(A}n;QO0vv&pmOAbIn<tPI{gPV0<86Jz4
z8M}x;3m8v;r6*pDQB`vj(29l{v-ESN=h(}X8f(OoE^_K7rx6JK<jfpZ`rc`k-FjjA
z-Vge*Sih`e;W`;pm-NILJa}F402ujf2=<QNYuK*Z>MQ)2UtofNU88kNj<$DhYmqNZ
zlqYjmvD|gx$4csal=de-1fSYh**lSaKj}kjbi7?)hjT8eY&6hWaQ{`vaP=1A3(%P`
zgWXtVxQ;Mr{hQU9;BN9QZrver#Z+=#O0Us8JT@$&Fl(y8+XfXR7;W({w0{OnTc(8S
z=C9E@JSoO^cWWkF1NMu$4@|TYw?Pu^k`#O<@_W-Mf=&hlhEFGP3Y(!3(>(;{oM$wG
zXa$xpg~pioDoiR3amRkhlo4*gp+}gFor7zUjQsX?(edLWu8+76hpKvOZWp{xeEp!H
z;5d!mx4+VcT50+r%xLih9!-V&UL|*o06ZXGrO#7}C7X$H)x0#(S7>)8ZSmSCJubY3
z;UTja3=7A7XwvO7(^2kw<yFO(;swF`rlzL(O5w3{Keg=ZI?LZe*$JY}M05vi>|M8E
zLZ%G@{1W<67Xn^spesOxNeUCBiS5_~H81h)yRBM#ZmMVzPSM(MCn7g}2%743F>IGQ
ztg36jwO#9f>q22=b=ES&l<tTwy|k%dH0!9@->Lt`zL`?@Rv0|gizMH8uSX;<NEjuZ
zxPo$qXU0B*Wot9{z%zjd)CP%auRt>%1O`D#nkcVXPHVd&D|r@l88i88>z(YCOP=eV
zr*E5n|6ycAcP!krjiOM1D2^H6RTT(sMO4!?R;Z)yB3dn>rt)SB<=1N3k|yC%7w$_-
zB{LC~U|cp@V|HVs;B<Fhugm6pES28BELE=eI8d&&%*=l+Ewb>64&Hp&WE!fJK``ze
zFz(P%8cL=0uK{!cw?DaoxZJoJKLx&%UFv`g&kNc;@1vnl_L{|02@+f=D<ZP?<?09k
z8KNb6dO1IGp_qs3Vt?4f$Ui#ZS3+ZOR@d}QY7Uz!nb_CBbXlXH1t}9s4W{Z+3_K2i
z7oeanPogbhn-w07AX+-sbyl`ng%48t#@L(r;e(qxNuk{!4CWi2D?ie4?rx9;ZBLJr
zNo9AYZ+CR7+hG&KOoGZmBm{uBWKznAV|*3Cmh;Rw3(HrNR^nzedXG(_Z?GGgHRGv5
z@e%+wT)e4{j4TyIzIPcoI<|4r{-T=NvC-*lq_V3rF364|f3`4l$z_f!e7zUY{zqQM
z=%@xR#{%r8E2vKmW{S*=K3#G<XYoj{X!addi!@{%T7ARlfbZ2t{yDg+W84;dH5%w$
zgiiVTnIEjEdF<L7m|GngXL;9oBadogn8N13L_@XW>H!u>QP?22h#-~|FMF?v2xMOM
zq!<d-Z7B#->zIKDJqkIx6Db-UbnIPK({;9#?6u1{qEae4C+Zz{cBxsFudViUR;Kwn
zd4swLMAd{}A-dlI1t>Qtd<N<0*c<(3+@Z@j56f?q+pfV#D!$dz%uMUtg<4XQ5Zn_4
zO=!e4FL{!vS(et6<(#in(jSZl1`qyP4W0Y=P=SnroCLnqJhO>v1r1vzz?XzQHCmwJ
zgaMrkxIsChy~z)T%2^dHUyj(0->CC-<}vK+YTl(xvc@-_=q9)B+renvtCBS|cf1e%
zG4N>rz&s$N{|$|Zg!?d37;U-Z*s=5aHTX_|IxQWR&wcN`k(fHTSX-FLUVq*t#9Wm2
zbTLLe(mpv5Z#}L#bc~hcugxty^(aKbsp`|YW*ujqywxv+M*QzR|3bE2gWV3bAHas1
zV|tG94_-xE(?el4H%Y!!v|-rR?8exH#r~n1()>IrJ-#@Y{(Z!=IZe$x>mtLiHSwCB
z9}^CwHoX07II{*;c>g#s^}A|~E92p7Wdc}>fDz!EdBO2`r+XGI;B+IXkNjokHuyCe
z6iCtfq`-V9CQ;6aWgd!FxrU$?C)N<JpQ`GZ7+=Klkjg8Y1#VZ_Yhs*#IbS@)vt%EO
zM@^+nm7hcKHvRD=q80X{t3k9DZQ{2iokX9SO>T#z%o|<_Z|q3MAv{SO3P6A>0y1My
z5=N>XyNUYhoZv6~2Y6iD_1>)5Q3zxfWQsXvqw?k{ro;>bsiB6KQJL98&aslt4Zrig
zr9n6K?6Vs0TQL_n(}y<;6Z!33cgrh<Cir)E334jtX0BUp;34Pa*ypar3Zm?g)J^m?
z7LN)PHt8I<K-RM8#V3?)%UStb0g*fY$*?;$<5X(Tr2V0WJ5^9AiMGG!N8H<8`Hf(*
z)ovU2khmTl>aFwQn;`MT|8`QZgwfyUypUT`PQx1=HAnOw`0C_iLM#lGs^SN4DxMP;
zMWpjbvd*M|dA7fJ?oDUGXI}<KSj)DLe4y7v_vYzx4*I$FwvW^#6&1w`4%V1pwwEbI
z0*nlq#~WY@y`n6qM39ylyAjJSRcrE7o*BL=SrTH}$1LDJ4RFtF@@Tv68rv*Z1v|7l
zjSE`?c9f$>>Z_AZWc#P>d>nboznc`5?i-LGl_g!BWyoak&}}^Ivpe<o7`8C@$8t%%
zw*|wu+vOL*ghwQ@vv=%dcjVfNpFaBZMrqE;_jgA7p8mPDaOC1<$)yt)Zw3cGU#W%c
z{(}}yM*|{RkDP4F0E9KZbYMHCM|-Imwq|45T26~1vw?4_BI5zF_3e|SmFyFprEIDy
zn6k61UC~n)zR`Pm_(k3Hf6NPqUGoq01<JRlj7MhuZaRHI3ud!mbo`Z?I**mzutxV4
zMpIgA*CiK)7pZu&B@c%<B=oPW^!rsEqns5zgVP_pJdSrc?5yiLS6ES3o%()xdTUO%
zodyC5T&QP|ZU4p-O#mtdZJB3!UpDbECRdT>vd>WF;H&RpA9Sj5iP0YI%~op6o7~)+
zxXBapvEK`|=PKeK`OqISVt<`#=<@A~JX>k*w>X-xNc7t*gB=^vfUEOhMSt!YgC?se
z*Gj~vDJJZ1#9-#h4;nUlVqv;*OV$(=fBb(4rW;qGrDYe+KYBS3Aq&;i+3er>XxP0u
zjr~w(JIF1jy9LxlKQ;RZSGu_kKxh}AB*?mSyD+tWE97Rgqe$tZZxVFrecl#BRUz(o
zR8tKAtS?Lut$;+Q(k9R{{fy4fQd|Ow|B~pVAg}siWWo<*1(rSFMLzhMygqtAK_(c0
zC<;Mgb`1?gvh#X9iTZVzsWLgOZZ#m!0=W1FwIF$Y++D1CtCk3v56}`ecbq8$S*vb-
zVCTC7?V2%R+J<8D?0BEuPef%=G_TO>rqCueS~SmWaL!Y}<>OW#h%%z?8a%fx9mZl@
z!``oL=ElTpZ5j0ezGySR<oqMec6GAt?;m^iU?5yK#c+C2z<*6O<UNAQTZ4J}7P{;r
z_rb7&2=Fz@0RZ3;(Qk8rnfXy4j7@=?Ym<_YfGpxz0*+On6+bn)V@LaJ&8}-a51?sJ
zIjgj9Z{C+bdstOb7{OVpwSRHFhLGlx#{cGRZM)FC--V$uZ~T((unJTt{`}#8fpYI)
z{2}nRMHIy^w!m#1)os(hYozukKqy*nT!o*6Q+^5fpS5I&)(c^qd9*FXX&9oE6B)Kg
zZq!@|mtD+O(kx#y1bHm#ZeiC?3@>wPdE`lbuy(dge4V_7&<2@<-Z-DEH#NRM9)H4V
zmshksC0Vi;VYi{iuByHowIQx8`QU4MY(UBcg$RQ=HEK({;gbD~Y!@G5M=B2-akuZD
zD?QlBRQ>W@eI(^TPYINJ4pUChu+=U25(NjoLB+a4mArqm5;|Yw%dkQPSIS+9<+sol
z|1=e%jk)f*Q{84x&;6>mlx)9k@ZCO;s<6$dJ|9+aO!iVXK$q>T&)_W#bpjD*6%Akc
zH!PGVhU=8mg8nrMCg5K;<5nHs^I0lHws||Yng5byO&_b<ph6a~q)Hy31==nN!mE@1
zeyg=iE5=<rmF<(hb^~+L{CXw_{Py-8-ZXr0*o4^VWD<!n{1T1<2WcX%@Qz1hKu~Ap
zK=PHFVY^8Jh48kLzUB`3_Nm)9B0oF0>U;BDBMTmzO}Ap3jq~8do&7V)yv8OgH|uS1
zC+#tGF!@0^Uxlm~7zvc8vA0b}-}e{rS(yPgy+sd4v$A*eW#zo`uX@}X<HDcAuUxxo
z3*qe=qq!a)ly6A$o@?wSqHr!*uxDdTx2NzQ#y+0SxM)86XuJ2ykwyLC+M%ofu4uu~
zox#shep2<RQb|4r2Vtsg%qB1$tR=iUI&sQpGV}VJk0V=%-TqLyoIR7u?HLMmy?Jk|
z-hyo>PWI{A=<<*`SsNU8te1JROY>=E#&|$4+2UNBA?Wav-8=fGZ%=#-p#|4f2W)!g
zQVQL})36lV#VD28AEa{tbJDM{Y|yK^$eUj|o{>8rO9eejuLaX|PqWBJ?61TqIq8-F
zWBAkuWxpmI>Mdahlf^0DB^<uBQ+#W87un8h&Ay)Zp4%USfZX#?6V7EsvH>m$lq9*Z
z8ei(D^Ec#(zTC<W27$<I?H68~n`4pW$$<7rzkpqxQBGlvx5Bj}+U?{)9=&8w{?3At
z829tSp8U@D<CZsz=z+gfcJoarT^IhZ4C4{-s{p<Ek_Yhw{edv{i{2KCk$A6ahkJy~
zN=Y8q%vUoLf%A0D-8n~q9crLd##|3Ysfo^Sx*qhpAjuBvdN^}f7lV=QyaV0ja3|bH
zrJ+c@SEGYDlw>FNrdfs~|HsAsh1h8RT<^%XG28(Cc(E;5Vwki$*EyokCXiX!)Nb_G
z>Q<x>3z=#$+LUXp%kr@3H!0`%p5(BHua8?;eOvpRDD&HjsIm;LW>r<H3Aj%K6bp_M
zi25f<{o}e(_|R8JMW%)Vwo|lPoDAFyahTW+k1Rts(9%ejtm>vf$3{Y8hzZ;V>~=1-
zco>muQ(1}KEE-L}KU|ZP?)0|)emG5LQ=PRWV%oZVmH{Hcf3HFONir@71A3*G;kKB`
zlL>UO*a3$MGbxgY*pT6f+0;er2IYfjhQ+)V#>4*MYWL!;O!73nn0?mCxwJRv@3R`s
zz=2wk$jzqOglOJwHVJq1xlf?11@&g)K$<E{b3%>CxJnrwD8$T_;%l~$#hVI3%5lnX
z^;kWn3F;L)A<6695bqP%Tj@bd_IKr2`}D5r*l2USj~Q)2JkkTC>Ws^?4C$-{<2)*C
zgj=94${$){l*-L29|~L79PD@lQfiT<;WfH!hr%%OE%{JZ)15N=x3`M>OWvyex;6IB
zXGv?4M$C?#+yy1;nS*5r=J>F&2_cFAMCx<TaCe3y-hg&d&M?z-yxF4VLzKnLpY+?3
zx7KQ@jcE+tlF`_6T>8E3MXXL=n#qu^W27uC*uB@T{>0e{#woU~31L{!!b7)GvCrBv
z>TFb8Gtw9XZIdunk%WUCC$%wGR(HFQR$yls`mn3^F%8p=)iLN%M%MAt>a3`#i?)eB
zK1m|iKd!H&^FvLHbg|+k4bU26Q~*BBG29b*bGm3|mE-Ay8{0W9&(SccEivQVyBahg
ziA~ODZI*C0^8z~AltS2mzjy}lM?%)ec~Ot`Foopm&Zu<v=UXZ}y!%w^g(zVtS(gMq
z9;!c*&v6>MS=9z9Nk0K%yOh6g>M3VU=3cE_dgvh-Gly99RBGHKslI*e%_Y9kMaLu$
zho=*B>QwT>UF1lcgNdPC<kmGuI!UCc(Ypi*g1J(R^XYmEV-K&arKwFu0Bt1uyX;8q
zn--0kije3YEatBLO^nKu*d&Gc6Sjwzd_UKrV@xI;s}Tu`u&G0~@AG4#Ieq>$7t<r@
z*1323cHyQvbK?R){LkJ3qoy6>ND(2DQny(DIm=AROb1UoV0r)|+~I5N`|28-)F_%2
zn~a83sMD=}uY2;OJ2JG3DYRc8-`986`D_?>e@Cf+zi6OsquWIV@mC&t4tg3MI+Gb7
zWUj4^W|@AAvCU`?OgqX9AfDJi;?8YMOM4ykE&771AXtrvtU6q%bHjCq=v9H_+l|&;
zBeK>%hmn$zY2gI#Y!7j7*M!A}-6ndbae)xVyc@=RCLDnNBw3fr5g@?HaPXUfSlmi5
zZY8KGS3NJFPu@=u76oFN%H(U4Tx+^)-@U%hi0O;PO4=gPuQF1~MBHn4pC_Hnu-`gK
zF0@6m@M+zhSs#hGodI5O1zvCohjQ=LllT(gNPBQz<SxZ}w1?DZYPHNj?Ydg+ic%q~
z@~G!xEmvjMP*2#3rr-Xx=B&GSQVsD+2|4KZFq^5V+|}KaX-}f9PEMc8F1Q>6>UT_R
z4Hvh{R0e<;r!EESL&J0tXpDrHBA**I(|}bsaK6CKo|_07D1PF3B9G<&al3Y5%nu{}
zvg)MqiMAz!&!P)mzWkP?sT>^*dQKnf7&67xfL9<)jKN^PgVnc~qWF1QJd+c7Lrz5L
zzaRm^-70p7A=i5m&d`c8IF9kfAzJwKslXzjpyS+0zI!iYg-e<pVd0Ql%>>B!RTeX5
z|MYy@<8s@aw`F|q0)E66V)o2|K*N`$=@!nAy}xU<(j~xA^a<;NBDoQ0EvHa!qW?SP
zt4#Nho2q!TmdEm-h$;u?&T-=Yv?InBw|17-x1YQFQ^S;R4WlRHZ4i_dI=?3<UO-Ow
zPp>hJqWWxnh9~QQ7#W2#JlPk{&=w>@M@({-avI_|_BEq{Ry~=XnGt5VgKtoNgM>Zv
zJU4Csm-~x6rJie!Wj?LI=~d_<8E<KeV(2}-jqMw$Ov`bnTo3SGQgJK{ZQ`b#qb5L2
z?%_C=;sGq!e@uMfzL7PoKZ<-zg9uikAmY}2IxvRDR}%HR;MH5%M+#V@y9_^z!>O~6
zv1gZSX}X=wc`Cx(p+Mp_<6M^8UaY#5<*`rrq;DMeDtgUc8q7F^Hm5UU)E2<Z_*@?L
zfHAFuJY${_YOQ-9)7v9QcQU6v{{g}ZRR*W*ufZnBuQvEnvF-uN)d=(#Ih`~i@iMe1
zNao<nFrIO@m%ZU0s~U{6sgZefhn4NP(}P!xcDha0oy=2@U}Y?gEdVc}qLJR3<9+<X
z?ZqQS5oEi&grt9QNB>f>6mSeiK=DI>lnG`O)}A7jR0&b`t_dos4QV7IR=XQ3g1?mV
zBeuCY#2XbFdU^SD?<Hc?IWHgo8l6hTPZf-Q*ij@Hw!MYLs-<pO(Ye)(qEUB;B1T?6
z>qpaRcdQAvpa&xP6t_XeEe@XpH}Yc$HlS`LN~fwFmSBgJf&`*NoqaJT54q_t-`8<Z
z8_)=t3>y^cj)SVu-+H3cPX*A%4C~BCb13`z$VbO2y>^?Tjz$aE@>ic58)=Wj#`?4Z
zU8JG3?gAfQRoCnNO$1m75Y-X|LIm>1yA*!i5isHtnRa`A8a18-_X*^BR4{W}rt;6&
zKL$qvPlng<ld4dkczS$6TKpDMU4pI;rsgI^acjD8?6!V8P)^NSTA6B}M)7idotAgS
z6GT$BU~bwzNlj913A6xfP`29=R<?@T02eM6WlxvO?B2fs1LB>>Z@M_`eJg%$+Nt8v
zpN3^SF|#*?xLphMUw$)OK~7O$<{vjela)b9aepTvSz{h5?sfc>^7X}0<-11Sb&dm;
za1Y<|>B#Ah0cAh}oAGcci+8OQ`cRBJqV;8+PNj<8C|?1AHtHNb;AdhA1z&7Epbvr|
zT-9pdjoIrDffT%{mKTg^v;k_agp?vS_54cl+Db`jMrN(cCN;I0jvD7Y(E^#Dl1j0_
zS1Yk7%Df=P!BMx^_}iNIPfCt&4J)AQ7B^jrDW-o%d`E!JEpj&*U(Ecsk2Jd%lt2|Z
z@=u_*CZnmXg{Yf~E3pFuZ(IGY9*#9TL~F=Qop{FH`jAx!p3}*byhNaGF$xCgZe`fb
zi4>RmA4Yxq#wLSp4$)ouU4E&|IkewIfhg*TXb3dDXc|cF0k2)8cj7#!EQ=Or5EqNS
zX2=&#{Qag3B(MXNx^#ub%#qqeGR2RGv~z3Yv;e~~52oo4W9ujubkO#in}5++7|<;=
zE34@0A)62iphQbU&%;I6OgS~SO#c;o6(DWDVnELbq!7%poeJVr5W&f)Mhn$MuA*10
z3}E@}KyxxP*j_41B4UZ3%6oPfEAOLb813DTJn6)@-y2zTsIzq9*;phPjU6|^3XPWL
zutNVrBor}Y{N+hnKcb^zToob1!3A_*VV#W1-aZLKM^zMQ+d|OOG}@2GhF!0FeUX_u
zxCr$x<d5WTcyhX{j#9`v<k#!;U6M4o+tcUK5GnHROV+P5G-Oj)rEoo0+;&)QNP|um
z)09oew0wLS#zVUlZ4gEhMI=B;L(`C(?tE5AO#=FN-4a=SVT!jcdy_UMk!<1ESQdUB
zOWvdRE+v}>S?o3U3Tc)ey!y7^gt7)v{6)n!wgHyvqVYMHhM$2_BvEB4)Ta5DV{h(*
zVL9_gz*A%qsG7$#+yUiXA1-bms(i-xc4YZTYTj0qU`c9~Rm7K6aBB_p&koJomsu@l
zh^wo&5MBWX%xD=7GvtFME4U2?sw%8Sya-={T^_XT+*n6LE1HONjP5LP0LrPq|I{U0
zZ>{x_Qj@%$(Gc;2*M29Xz08kvMpxy2+$MrcMwGykAt++S_?pacWD<Tv6y-=+j7AQ{
zA{Mq-zlJ4fq}hCjlA1o}xU!zBzJ<bbrWAU3%uprVvOV^p*1Y@pZuDJZ-HBo>^$ocQ
zg!~V3rM<=#T`uEej7UmApU}_eSULK;*#r&!XtZR)(7mvVr=lfV(hY=e&rpV?ky}l_
z?XL4d)r}NWB%HRG0gRYZe*Ue4=wO}zBP!jl<7-OV3SO^>Oe#_unESh!`8%FmJ^ayj
zDF8|+iZ`GD(l+CbIcHH15;|^Td=~OWFQ}qifW5F7KL93K0U?XE$dyXF`XJTkXl^!B
z>E*Z;&`C2nf{3A6Fd(7G+)InRlbQK{WW7l&{UtiyOO&tsp77@CzaUJ=1~A7Mjgu02
zIjVa#b70fOcHy?;Dfnvig6d4BN^BL*S?+4u7$Ey}AcS7S)qNIQ(0V85LeW5={Mn_j
z(0HUUh~{_h&V>l~*nP}M(2or;e!354Vgu6g4)B*XoL(ZX8Z!O+lHq|^@f%WJ4eL??
z)&nud1*VF4LW}nohAc??lLBZJ@AFjQQP0!YG<th<uzm75?ST$Yw1=de#eF4FubKNg
zUA_@{KZ`E_bKphv!O!{tiDtGrxJjwm-ne+UW{cUR1r&J!9S#hskKiE}Okog==c8uf
zbK!vg9*GoO;{kJJsfS9?BEE8d^a6Wh+Ag$E%A1EJggpMO<9%IZAx?Rmxy$?OiuQ3u
zRj-SeRpW;gvXj}j+BpTuDXTmFD!<j}zAw4NFD?&o{WmLT>7n`#4+m{H(SjK(EarNn
zld-*w(aT%FSqlbk0Z-c&v!q+P#>r1aD|uE}pRy%=Bl~<2i@CQPENOi5jt1jiT;JX(
zxuxvYDEe}A)5!Eb9{=_5`Juoc&8GbR>(4Qs1J&6!*@XsiRhXs;RMoo%=b}cj5}AvC
zhowcUs0+h6U$_Gs`%bLA=$8lKH5W#2(gOmfBTI|oA`5&Fu!nv);$Oq=Bb~A=EL!_p
z{ja8~SQF!I_$mVw><hOsIG<;$u;==1Lt>$S(M(&^RCfg}ynMII_ys-0zOOFyK5Ih=
z7UY&OxgpY{(P)iwZk4iLj8e5x-d|=@yC#_yL$X&jA=P1pTOYwssmaY#5iKtxAtCEv
z8~zOMxluz%!nc;v5#hdSbue{T2N_VcXiO3k)+XE3)tI|c+*RW2Jce&p>IKVzADVeB
zQdoacwS1!f3uGCq7`(!hj3a}77aDC{f36O^{hQfG9~kp0SafZi-)ZGs4GA`kr8Yow
zpa>#KTLR@QGv(qxCbnS8sZ_QtWAE(p+<+8d&s7=KkZ=JEzAc%vLTi><*d1+7Ox-Kv
z)SpoHbu{L#6mj>vUlNsVoMrfoy#)rJjVQPd%TS**&pk?LKO6&Tg&e|`9x?^ksp!;G
zvCM8uFU}~D1%l$FlJ9n0D{f#~vV44MdP?tXaOtkw2^h^IKmPbC`1m#MDHG%y1U=`5
zTT^u;Lt-5P%Gb*ceAv{~Yu4h$Mn`dT+g!E}S0efnOH}#}JG-QtHe@AVCOeUo;$-}g
z+G|7Od7n_r+WQfa%37ZJNZ?spji`VhZp+UArPc2VLyl@OzVbE9Oa>~Jv|XQ;OKDur
zDoC|PsS8HVvwW1aB&eNSL^%SrSFDjVrlI&zm*RV%CQq5mLa3<>p}1EVNeeu-F)GMw
zTfF19+PRfkG0Br#2$FHkwa;k2UT<lX05hjq+%MHV(Hey)a<E6_5dm%L)#^haKtWmL
z>7j}vSp#5_sR$Z3=VwYu^I0t+9YX#mNYZGrS1-SC>-~s}?i1$&<vTAG`ZB+trMJ?<
zx01kRelK+qr-f3P2|C^E*j}Rx_~Rv@aV>}i<N;G#v2V0(lFY2!Vy%_5Z_wOtm%5R+
zM6`mny&>@2ZRN|!XP(<j$b;q8UBg+yJ*DZViXys>9eriOVIY!vIUs0Wf{m{sxe&m$
z3}T8cypgaRr(o$S-jX5PH*%>s1t5iPTC43?a#09lqwF)@f;yr)*mp;dr(<+Pue*Vp
zT4`|TeQWQ#O@zKLDD{+SGLyG>&lEOt5J{7KrT}Sgl*omI25SG5+M!-Ms;X|GCIBXQ
z4#t#BJ2nVz@CeFILX%)NmLPG<{kpGikCv)zx#sfu1ZiI2$cK@N;hM<a0>Nm^v%+EP
z!1(%t_j#p5Pl@mB|6hLAv^$J?6WCHf3|~8S1^I5gpQ&`ym}+kYV+3uGB1}R{;(dbq
zDl|+bwV8Q+afATnJ_SxYxiEc#v;<WAnJUd(Kl5hm8qdIbQT9WiG|8O)s+R4Xyr%2*
zckeBog);G#POzCohRfo!%$KQB-D$%u&S#@?ySfu<K?)E)0<M#vQ<IS;90!mCd!K^p
z-dpUWXbQ1n#rT{E_rXHdbN-fNL#`p#k9#!y6P?26ZHpt^*R<pvV_i3$=+nW(CvYJo
z{3p;67{y<MpcS!&&s0=5%0FSR27ORSuRZ#Vmh33)?e{l}+1~AE@fB+)yw_q3RN5q3
z+&v*))N*g9%E{K(i9QaG_w|iD)3UdBwWup{3&jqM$OYI&!5Bq<$@nL11jvXWVX<qe
zkvCgx-;IqHfYLIOK~c^DLoF!4<Sws(IOqKtW+`n*0#mSSI8kL07SvaW{V4mbwsWGt
zGJcbETlhKBgZl2D2D?qMmv=1?!U*HusBB$1Dr}&;i?WOA7N}fv&XQKwgdh3+yYyAp
z@BUD-v}*U)pI)YPCp@L07sBwx15MuZ(ZcKaF}?37Wg$*2Wg&ZeJh!4#jg(Ks;puTf
zsDDLV*wSfkQnVLS0x|(UN~e%<pV~`jL%ZudN=LGG4kv4@1Af>xx`o)v!);C(%_;g%
zIXx611-B|}=9M?+t4KEn=Nr<D>yCpSHj+k7W*<UF{j~8$ff~6cTJ8M_s>{|AfX1H6
z2P+lAwLeLd1|MnBeNW?O<=lNX(tY(Y;B$n#!4dlvB3VIhvmCM=EYcrggjjS7(`|fv
z$i#VoA7>l#OY3$jgEZTk&1=OLz#3hI9a0JA1IEC<v6G&4AGE%FQanAJCQCkqXX(lw
z2&?kHpM_tAh5L+#9wzm3jSD=q)jFh892!h*^d@5nYAP|hR*12}VpdG>zi@~+)mh_$
zp3<{y$Wm;E1BvNQQRDNsE5oB+Z$F}SP0MS2#K^S$)!qNLbK-+x(Q54?vyZebL?$9}
zqeKwq8{s^wb{p&0?`MrmjjOai3Eqp?Te*!6pSR<mM}1TU)my@?q>fVLo436<_$WOy
zwji;pY+Zg>p*+GpxU_(L@2KA+ddd%dIt6j~|Hv?&a5{)+P+NZxs3?C=9qWJ{V~TRP
zYCZz{<yR4LkZmH;?i~)W4ZH3cnKx=&iA^fwPpMv9Q5XU{p9gnMIDPs~oj+1TOPs8Q
zaLLFbU7H#_iXq4P0(NwoP#((vYaQYv4#DQ7QASxHW^%F5xy>}0mEwl`0Nc5?0?oX_
zUd?CpZXR~ab?)Lg47rMy(^d=&^*tUK$#TA>O4$esCsFl3$l3sv>DTmgU({<ye@5#U
zzngxDy-YbTR>+yy=WY_XZP{qlh&D`j-T11@xQx9ITdR^^fi&?(rIYJFCLy<!uS9FK
zVkyo3D68u*`ZoR4!%^d^cFj4_%5~|FhK=^+b$zR<dSCDhUq+M<i~DU9#8*@JjvUyG
z{s3EO1C5y|18B@Nwf{fVy?I;{XZtrAii(O5aRCJ(Dk@rpR0U}P6O|%WigBr+AVfvW
zCZ-mU2qA+an}~U=Rh~j2D4VE&NC1V92w`bUl_l&5S!iXKNrf<y$@E<Gd4A`-pZ9#;
z|IhhDtgW3%X72mCujRYweSD78?iUA9mk~Xbil)hJny)eHKG4lmP;T*8f%Fi@+OOJm
zlE1tsuq>}U>*uQWpfr>8aMPdF6_<VeyiYNi{ihgCeJ+ofxz<-d*K6$1(e6TO%f;w7
zQ@y~slc?O)KcX#@ryh?F>Y<cL1I1Lr@gV-{@D?&VvC-Qtu6*i-jcUs~14@0?YV=Y{
z3HIAqOXFvped+y-E;|Fu6OM<A@=o;!r+**hT|W3SI~F-@u?>RPPjq>zsa}G!TQP+G
za$5ON4AZr>JjUk`%1nT6@KoQ<rg}eWNBAU7`BzijoWayB?kdcuZg*6dIBc1>XIg|3
z62mabznH$Ywl7Np=gyrTGnP|cGx6ngLf=6{;r{YBX&u5Ua#26&;_L&~6~CNS{{ku&
zr$!eE$a<vY26}Z_Sg8iaaeB9%ERnVr416;@g{9byO7AN#Lly5@e`X`cQ;xilTD_ER
ztR@jW5eTcl0YX{JVvO7{xCITEG%o@XvrCEDW8S<3!fYP)G^wYk32E%>EUy-2Dw@g5
z+2aa&0*us~3w;;MV~#VsChRn8yxo&6Jin|2<2)%miBJgR&*@<BW`ZUT%|c-T+K6TK
z^u<b5V#79(J=;O~4R@KUpq{*RZ0Zr)zjknGhj2+uF7ANJZVH(>*!4D!lVMHX*zrII
z3$sqUQTynSNgo$b0oc-9|B51#3E(VhhIR9=HrfL4{lWZI<6!B=T`#^~UbL$g3LcIP
z${ga~h~SxoR1K7ZDvn+<u?2MDBCk)I?`-tl8{9_}J|2G(7L*+{_hXgCU8P4%xY%GU
zn*x()`0%)Kn0k#iUVMR-!Yo53FRS#tu`ix_sH(j%v4U<Qjumad_n}iM(0^S678Jy)
zn%4E@*jWW-ZAg@DsiK)jD$@R5)x{6W8`~W<`Rth}<cW246iEwHzw7e>uMsku5@Vu)
zBAAM$Ex{wZME0B`SPtr?q}1^iv&s8`K`*I|G;vI;m+1#*>6vy;B@vt9^Yh{_+VPgT
z7XPX=II+3&P0rN|1@0Gedj`i$mhan3;Zsl+FpNPCUZdGa)ZJ%3pPFQ<DD_NTVJO<v
z#HDr#d@sR#y&g%*T7&T(a9mY}rOL~+IC>p_F}wSl)*0r~x5D&*q;T2l(eyn}TL%MS
z70iUjyq}q**S(_54=s<=<w_Q|#iX9qW2sKZoHTnl=eh}J+!Gr`a~dJqIXfx#kRi#S
zkbFk`m0t1XJOl7mulKXWo}eFUt2RaH#fM({Lzw0P=v9_ch-t=Xly80-Xl_5o;`Wg~
zHvgl#w{Q@iR5;NLMoGMQ%JbpLgDR#Ewn0Ua->y+PFj7m1wQ$F{oOy9J=<U$W@DtBq
z78Qe*yvnlU9rE2ptc*mv^77az8pqkmbcQ-LS@>N1Nvm!JT(=XxMhu9KQUp|dWhIzU
zPQl>&Oc(JvNUqCF5`-oJxub|aFfTu8s`K_ONEVcs1k-kO&+u-F$@uF0fuQ@P*af@5
z@S3H=$Gb0;`?4693mWoV3dcN2l;QFD23QVoZXLiI9&YB#)>j*9?-46;4%S)BSq4wR
zMV=_3UW0k_rE)Z5h`}=^kQ>~^t(+ySA#;;@M4vFj#1d&Bms-)bvFqu?rKyRTnvEeT
zMb<~2SqHERp|K7x`Z5_emZ}$N%f#ne42akC=gj&d)=<Dr+)L#nA?#t?5Q=_KdP!tt
zOxG1dR<-XlF6Mp;^C|Cy%0jGS+%FJhjP!fQy1Kp#jOuJjVhJK0R~HL)@B{O-r@y;_
z@Bd#bssHzH^j3hq-i9w10UcHox}5J=(8L3Vv`H;;o4=B_9zUx}O9TtnAsE~0alGSP
zTSb(Es{wE$UNq|G)E4pDsc!kN+OkIjV9jh$o;jOro7JSbGBzi3X|<VdCAZIaI`9=4
z#1bh~)eA<o&xIZeeowbL3_CtVji;CK8=0xJh0tJS#UX~Y6<GHHRY@H)fv{4wB-E;`
zt_gSKj5!QaL>=LQPo3QqulM_8TAgYyzGV5spfx6#-2X}!FaGbh`<nzZO`FpGxm#xd
z-0cr75BE~?dxoJiR6fK?;p;$`GDtOio7j!72cy~O#whVEVk@>%GHBiXFs|Oh2^}np
z&Si%jeknGMOyp2=?eC{RN3^tAeQG9Sz~8HLFAb8-xcd+iVIK0VyKV}z+FhXfAeT+l
zppcn2P~(vm!i8tE*@^N<Ny%c|lIPh@+rYjHmhj1T$l6hwZoAzct47ZQeNOJLjakc2
zF@ya~#TEDPJxE^PIL%Vf6-z%Nmj5h64<VS9@m<Xl;@3#;78qFW0B=Nc3YUa$#}bu1
zGmzY;pv_ADZG4}SpCnq=hKDMhULS9?a6m<6#c%r!{C$OqUr9aW(rJ$^);5-3S5%ai
zU0+4Q8SwcZiRFB8Y1%7RPqVzBsU?<Q28i2h6r+n`Xw#87TdTnl6%yw<L_eId9CK<!
z3`JY9l4F%BAU3Sb8R?@{7xs)>=(KHWi^$Lf+1u>wi}C!;Ixd9UmaRAKpqZ~<Hi+dv
z(G9o@@olI_!Nd-YExXr_u^@0iV!}BI#==d?f_mnPG1K^m!BzR?O0fldxNfdH*?xd=
zv}3CH{pB!D)s-~XCR1wSgdL9@)aQBUj1Jxk*X;rv?-ca3u3`%{pW|FDpB?~6UL8F8
zG3N|jPq<I7wq$W2#lYE2$z1G*QJXC6Dl<-_4ma#3t?RmJU=NYGYBT?)LK-@wDYBgl
zwLB#PtraIp#oQV_bY`!`Yp7LB_JhOcen9aCD6g@>m}=#a12p?T!IFYzKWWED{A^XC
z`0QY1<3!VE<w8g9gUjlWxK$6=R($0jQw<_m-*a}s(#wV&bq-@lvM6W;bp026)TUDH
zWCnrhp4SQn03UJ*J2*r&8aO%9wLGXR&0;+y^Fr$)0LOa2ZS~2mDoJ+scsfRG=%)6?
zFuXfv3=WMc-yb0>d4%B$Z6crmT6$fSvWcHmdg@SYk9_L77scF}s)~{*$v3#Bf$7XR
z?z*>c@vRw(69oz7HRM-O3p06%FmLwl!TOJst5#L5&WyibrFOhh5P2@5sdL8Ti0;Sj
z*<>*yzfad8%(zlMdZeXym)xPzU?WI)`KzpzU3VX{yZ4uMQU#~Vi&mJ~xP9}Y{q~c*
zW>#TO{}{EPDd;LKGa`Vy{oT)}{CeLCB9D@g$1EHc1F<CUZ_-yPZ33cNA%dRm2i?7t
z;T$MI?1*2GGNABYg`>u}m9q=pD6O4l3}%tt6XSAzYWmbQ4wc2qXIt-A6<4b)m9y7o
zZlH|B?b($eZmQ@Xpex>|J}OBNypVn+E%&K8GHTq%&Dc|%0iH;zR=vqc+-w+*0~76&
zc@+LaIA=JhXQs+T@$OzW_CaX}N-IZ!M5D9`du2gMtGBQyRr%f7=^mh@FU#~C9P|Y|
zK<@Do(MCbCAoKfn7#CKFo>h_lCLL_St^gq3owzfkSq5;h%^Y25i7twz|G?-Cm={!9
zF$NW($s|uh9cSv<l`JRT0NQJ~HkGPQ!XnU+`omSSSW8vGO^&_BcDw*Qu&+ImTn<$-
z6Z?#xsG1roO|7m+u;^d?wcYuPyzzriM~zLYu4L<IA)AquK<r6pPV*=|5aEoh<&?ik
zpV{dUUSjlwI2M6Va{)lDe2}VLDevM%C}i>TfZnZdNBx$zQtf@Tmwd?w#BJd*-|yLA
zAL<=a<T)ojoN*%kO<m~W_p?Ve%Xa@76B85ueBh1F$Em%PE;rmXO=HAu7MCN9{Jw%F
zM34q4nI3*IP0orVjBDqk1bv0T*P)SOSX9E@`W8PV#a)X+M7rIfRB)Zk^pt|8NoGl6
zM*Z%n)PzL)Np(rU8GFpm*XJt|(dP^k(FG6Yw+giXs%GP7=$KX0L_kPBcGtDj&V2u{
z1SyNGV=lsO4mO=E<uj`J`&7t{`FSX?T{@1OKDZ?f8lxfJ^rUd7KjV(KMR?GUl~+{9
z>f+FR2ojS5DNEpYY9Cn<aHC-at&}itQ;eN;6b}kdrwn`<2(nJ^#fpJ7%)!MEOd@j*
zOGD#3e@WQjOq_qXNmjbonf4#RA&3FAmJtR&!{@wANW`nbfUgvf#$Iba<CtKhDi<ZI
zfx2$gaZs$1C|YjNY$Q1&GIDv!>y?r!&@bX!1kMen$;Xcy{5koqa`&~MfJf~6>gX%o
zQ{`r%CXz1baF2j|e;l!7zS}w40s6j_3TiUG3ncnr*(?zTp?3j5BvzHZ;yPiQLCBz`
zj%pf6*n`dHcs*f{PJEB0yb`T#o0?%5j5+ij8Xeq(zIikob)Y0~;A;<oX?gM8$I#eb
z|Bteu2c^deSXv+lL${!9=l&+vr8xkSTTzUk?smQaOgxG{PF7ud|2x}kh*8grC(PS$
zOUmtO^I*!75l_I}Udjx+dNv10F!t3&F2_0ws%$P8{7df%gysl9V^W^!L3EO*fpu+5
zy*N?)oH8+sMk*<_THOO!svOR(m6!`??og5^Bl^vw8Li$;KsH;b7%=?6L>q{EN}I#x
z?sap&SEg@%-6}0dN{h>K0{h})^*-K%RA$~km?#xLBjYQ;bh{>-s0TEE`xpZ3N{Nc>
z-OXJD1g4TCIO0P<c7=S?kES9gJ6~1!?rP+25O?80Lx_F|ZGDH)Oy-ptyXtK$Zta87
zZT=4f)m>4Z{D2UWo`Q*+pMcjufLaHMXp-rO==dkvpTXTs4@=?;@~@$hM>FK&SfMpq
z4IFfonL?Q0eyXBr?q;;<x**2PwW~anej2;_aCd5nuaEh$#@~iLrN4jh_H{9Tq&IyP
zbppj8xPBw%gC;6uvD@iqkzQ8geE<g+r=1_P1)9FK0+v(K;HIkkI#-b*thy=79?dUN
z+8|yXtl~?T@_%@zy7=_i$?2LEO@~@11Orgpf8@ZSUL-!l?9r&NU=EsHoCs|eRH>jR
zis;~%OE?}Kq7~Q=-E!HDa7uz`naV2Oq)xO+6@P241^NjEqkgOT^>dd>LhZg|KR4Lf
zUvE-%VpvTpM;?#%F%l-HKO-yu(f0UXvPb%NV)-DoH%^{5c>$vL7nm<Pu8u`%8Q``I
zVmvUE2TTikBV?q~&sarH5-th2@Cduo(lBTDSk1LU>w;J0y(v=odVVoYHF6<=An=94
zz)0_epSa)!OF_q>^|>WYYuTh;3y_IJm>!Um4ZxxTUN=BcTGX3f{wE8&DC>;`wYNMh
z2Ym0cXp4hj-BBe-oM`(U&O!NCoD0xHB@@lwwXL}8gE4f#hyCQ0pM@BkRDQH0FAm{f
zly;fZC7w~uA-khO2SgBJFCzbk2#Z6GTx$(k4ZqZ{5WX=K9@lT;%T>TJH3WaOFErbF
zu-h8B3{r(;v`J<1YVN#fW4C~6ctb@^6f%uV&JHDoo14|A-xDXUY*2;Jdn;24#-Dau
zY-pdJ^y|=_>*#=ub05IdH9j64c27z$tAYu}>f!?b$bz@c`4EB^hWj4+oO<Smz92ho
zzyb8a?UG#CrtizVgQHH&WaXXx{PtMm*x=Y2P=@*A!++$?f6=CJBH*)bfX`Zm`G8s}
z&j7!GA`=YN2QQ3@TGrA{rnS42R@bMemW|Vm#euwqzdpuF>asRTr{-aGd<H73D<SuQ
z{+`%BA~gT>;MiP4MOIb+Xw>~5b+q0XpIAbN<=miRB?w&<zV2YiqcQCn9o*77!y=EF
zh}LK`L`IlHeZ{;7SYu{Hgks7BW7MTnZwjr8_bsgdVUz~Jsx%jia}m48Fb;G~M40)6
zJc_0NB2nK!4<`fvYpRKyXklvNFX593DmYUgj-|d|IDob}ZyWLm+20;N*?QY3?8^3w
z>op#)Zf>ya|HCMM@<*LNKur0+0V7d1ul&3+Ol^YA_oo!CA{y=w+#h{T7*?S2S6bEU
zGmO|NLp+Ii3FkELP`k(it2~X069lY<qre3RFkbC_>%dBfs^3Kx&r3Um?vDm?vo?0v
zyL(V1SE9D+4e(JffEB_$o)1AsN&{Nvb>h;N2^E?KMf76PBK#2cT23|RtiYfdtRUYK
z@YizeP`_%W?+WWo<dvU!8#RJw5WLG<l&PfXhu9zwgYP>WKuY_^Jxy&(@?trqFp!)8
zH7~$j0c((sx>K(4*AWoDAy?bYIR?cjex@5%drPW#DXy;yIZ_FTtPqf&l1S#<;#+P{
z8-#Lf9{8|XwNa<LO~1WmlOyiBWN&lq<M4g<vA4P+SRXKTt=$RNXXwK}Q0YPBn_`1`
zQSV+@)Ag*lDkPo*!p)`-zYoeG$J~(U$yzf)Tm4cxQ^bHh)%u>}s;Hi%)c2+PVqvF1
zEY|%`Y5DoelyBMv<IUfZKhXXkO@8{{t@ty{8opB(QtK_U!)%)x$5E^O*wG7*eR>8*
ztH_Nd=7Gc~s$8{WYHAH`Vlqg+V{eW~B8@h`st|#J+=Xn6_qFJzviVrsq*Z)-?4C$s
z!%_GWkW99gqb9KF55TMbEto`Ct_J%fx>ld5gP_wvGCV(9_y0$Kb?Gc04Q_!xMOXXS
zsPhKYab~h;ICJ|1v1@e8`^g8%xjrFBFX#Kbx)ku~##oQb3$}P2-PE=r;0U>%(dVT;
zs?9<C#YxX`D{TRd%<h(V^E~U!{iJRxZu+zSkaU~+ANm`LF)wE6{ST5XYOCpAgHwkc
zr{c?F{J-+>lpJl(ngKcOxjqt^4_GqtgqT>o4Wh|}HdTB^+|z#oU~xeMR?5hPa)7mX
zsH|=YsY?DL_IK>@gQ|pkLnWWSSFfEYx*(-G+dslCeeiHUm0cCOzyF(xj_p(1r;eQv
zl?q6j9AYV4R1fgNG?6X09uW-JGGgZ#jnpKNA$G(~U=h2(VAoYXjKw?%gv#4kXkLVo
zPpIw}D)oCKa<<c!OUs)xqh$L8QorH)%C0NvCjA1Z(EUS9aN213uMsVIdI>BK$e(Lp
z15h6h5B@W#JGxQ&kUCYB2mq{>YxE@?1Juh?ihrS4sUq)HEliV;mj%(5w*i7FM7?vQ
zhy^}*lePxlQ<B-f^IlxDj(ky@vBvNDbAih6v5snZ-bO)Rqgg||1vccKmWguB&Oq@h
z4%qZqV8C-;4-H)B3km^hks?nudF9=ZmXyt&yfoZN6*3;PZ_j-`-R!Rar8Lw|^VN*`
zG0lmUKBIkyi*;sY6MNwK?1hi+NHd==n9?NlTU|_3XFZjbBA^!JP=Q-PyY>)U!B{tH
z5P=R!q9WtgcL`cR+A`>}Z!dOJ>Kf;Jv(JMzIQ%uy>Ug1vZ<FyB@_S#n>|&($d-{2p
zGKeRdQNWLA{~gXtn)|)Vt?{+>kW~sNWGIxxwrzIh)p3`qy5j^b1}6jWiXL1o_6>Qh
zS~`A=f6V7Kt^YvE-rG<E?i^E0qvSs3HL%PAs=DW}d{*);_8^~g84Fbzk{1V7SnNRe
z@M1HXydx9KCwI2*ah#L7s}eG<=6PehL-&1-N9K(c<px$pddD=BjhWi=xR=8Fza!T%
zvCqQ@{UD7EJcNTZBisNp(0qnPD=qT!FiWMK%!K2k0=)m%eukCh;tI4SS!kAr?Q%nf
zyux5dVfPinvbt-=BTA_`_`JQn<!k9gsD1B@$No@~?#C~)$zOv_oC&e&Z&D-uhRj$D
zu~xAW09C%KU9S)$L_r~1iC^d6=?$v}N3UcA{(CuB0x7_^ND%ypNzu4y9FAyA_-g*M
zfsf39@5s|ht%!VFjBWPJdk|Q4yX>k8>bCR-;%<T8n8<>!upA2;@xIsj^DbGS6okNQ
zXqk`P^L-E6{Fqj;(*42}bnWDMw)xsv`n?kD^Jo~6p=QL=I2B#ZmWl)D%h+%F6;l%$
zg*Yjga8?P80v&m`W&q7A#a0X*lU{UQQ#x>Zq|fU{HfnI|=(xk&+gTdqzU7PkTc<N@
z3|o$=7VCX@u$OX%ctsI(-2w5eURhbeBwY#pd%xYS+-3Mz?YK`7#&qil71S_Kv>WT!
zI2_|064qQ-{vPbv<$a^OVt4mB{SZw?;8QD+^xVss{T=ffZOTtU6roAGOl%=Wo5v`4
z6}{y{HdzUHf*J@K>#(!%^K)&b-QT2CWD#eZl3{@Ff?_zJj<1VbLl-mfT(>YH1bCjf
zi)uiY3fN?W=e)(P5rv$ugso4V>9z&MZ$*5C#y4u}$n&c1EvWjY4kq49DdeLEO8W1<
zqM!^)|G2_yasyzCqGpo_^U=A06lWu)N|C%FG;D91@M?~G_FHywlSkGTUp5y0dwP6h
zy!jh`*rUEps@_5U^6P_gT@B>TNzg91OPSt@N5OleK0^K)LFm85(lhwIAK=TNRxs}M
zZRzuZ5vNiXZ{b*q>1qyg9OLA>dV7NJJMwRHmM9p8BlJ(EDP;Wci`L^FmF23{gD<JC
z_SnvzLN^x|7I-L{>1IrQpx@?C)gAH1p6bpW_&?sa1tFHM)*Km;RisT8YFvp9t~r`t
zAV<hRkdKd4`s&xsb>)OS4srBLWfhFhZTU%C6zRXf*z$PI^Y-ix>cj-m8InKX+nf)y
ztEan@3kPC3A$uupblmJ$cqQlO8O965Sea(854R2QGMU|y7T(}$)aIG0`?`&yyPUEJ
zFqoG(7ozh|$}s!(uHlpILNAk4YUm%G)7o#Xi$3|AbV!;51^dN_i~;w(B;v_T3+6aZ
zEID2fnBMpx*N<qWZS1^gSF``a*R3`pBO3p5aj<d4UB-o+TBH!W-tSSGas1_1Pag_9
zY|lKexOzXNFz4E)c`Y7?mfOe**pA_xi&%pyMPou3m0&*fRY37`pO**HxN8D{p|?_O
zJVtCI8i;PqqI=pWTKJ`=Oj0LaJ4_C`^@(Z&-f6Selehm*0s>0f#A1l43uos&UBGyy
zRD40!7j^)9pg@*`Juv0we2aP&h>WES)tEI_Iq<0Ox{AN7xL+2OHn_F}|03EfXm)p`
z%hB?VqD$ND&1}B(*i2;P$Ho-EHBI4c`5D@)G7~yz-1y7+uWU?)^y(SOd~=Z@z8|CH
zjEXGL6pmx7of$pFVtJR4{FL4QjcVaU`Vhk;Zu)ibu#W(p$x7SYojhahW4^E)Bs|7U
z{5H17(n8<}+l<so=Ih-64GI5DdsiIfOHuM~aQxBZ;G-Cl8!|{ne^tGQ4-O)jASlf_
zk#edxWXs*liWrx#YE(7D3AO?s{^ZH`XWJ$t#zRkM`VG0Y?cHNSEd3Ks0|2)01#m9v
ztE6g{Hp^}*g=>!`t18{wIb;)j6G3L_1aghr_$SM{Bk0C{V_ub}Il;(T-xX&1p-X@3
zb1K?D_06@u_rJaAd-o@a9`}!%D>P5q+||$$je7`^&)mh@AE7Xnk?^z6F{zxIOgAJ}
zvMm+eH-!$lY(vJnpwF0?{=QQ5X0RhG`Kj&nFZTN8SGwKePFEa|PQ1V9-*JE+Y0?*Z
z{t5}d1J{fP>>>X-3tttcX2JaGbK-YLhx*Xd?C2rxPpV4LU{Hw?oYw~B^7YwdCFPo3
z$&%5k1+O3ZjYpbJ;oCD_pBq1^xsnn3ut_l<y;;zi*EJZkURSM=!`RUL8te;cr^tj2
zOHg?w4VpXr`fZ$Dc?GvPOU}w2RPQnsncTjC&~gJOcU2ZYET^BHacE_oG${Sows5D6
z{w1OBL~V8{T`%TEB|kyr3MguAye6t)l~`dc=+E&dB-tF7j&NQg@p*@68@mJ`!{JFn
z$^!2n`wUAIdz@<f=n3c3j&_uPalX8x*uIA0`=VO9{i%`NYg%Lf$t=y$G*=Sw&Hpyr
z(VYP|r<a;Yjx#Km2=1WR5cF0{QY=hWdP&4OGMQbbm`ah=weOvqN)YhYo$Bv7s2n%{
zRJkW>qv^5=)#-te9ezQTkrg)KY6n*I!kYLIy;*278hIhLTj(PfFgR-xm`DC5{n<(&
z_eh8XQkICDB+9+6(dAW8es|-mBBAP8f`{b-#VU_j+k~#_3F<4q55qYf%tsRC@G8|z
zf~=UbJ2_qL#9TgzT@wdrZKqD7HurPR5Ni^f9DY5k<Qsb^79VejrL<e&u8^oK0DR$t
zw4rWdZH&v`q%@b0#5X#4KT^8~k-rp|&Ax(1YmI=7W-#X*#sVoe+*JE)Qt09zXy={+
zSo;!%z%%L%oTuLodAHfvT(nf_hWx4+37<S{uyKx#xlPS{_4~2$`^IImR=w#M1h#@V
zq#9d8pRz7poZ<2M?)_PlSKn0?&eXdUnk#;J(}cY}=S5Zbx$<l8^G;m*_T|0x$v+>o
zej5DeUi!~1*d{C7#7nLR<jKo$6#$-cTloe;*1WQ7<!nQY*U*XLJo$K!bJ!DnbJrx-
z66D+8-;rlBzBKiVqoz!2J*7hi>U;DQfhN^7)Zr-F5XWEYcM`k(eq6F1;&u}KpXB1(
zjO_8K+sTnCO?~?7ggb?PqZa0gitXvA`_u&?0d{KB?cP~=#SH~P?ZIhB8_uQ8{*{-R
zaoE;2^K9yGu}B8Lkq-0m3a%}F94pk`(ZXui-=(DArmaWLXvG>Y%}Qb=ePuA$lK6$_
z&=_ZE^R)0wO$TUYz{!}hUo>t#MVyumBxmLS-6R#XU>n@<b-J20TnWF_g0I=ml}1@L
zP?ut09e<m1wg_W2SQwyvY#=o?CJs$TA60$XUQ?bscLLI_8K$9Zz$14ss5_|e)R=K-
z{#ci3wMWFGQPZt@UBEp$R)T#|peA8$08VUY>e5IfvNhZd9CvISEoo#f3V%X2!uH~O
zTAla!t1Kl|{P-EfG`MO8pKE^Ws_>;B;U5>YZnyij7<Vgd^3Sn<AAjNMRi*h>-C-HF
zF#un;OG73aVYVcT=RZ%Jw93Ozp!`&>eh9Ln$Zj&Ej<y=G%g(H93_?NVEzzew<JRhf
z(=XvH$QxiQrz8&E_U&UE!`seu$vXgGk~g~7oQE6h6NbCAAaPgHLmmp4Xwx{3ij9Q<
zD!ri#;zZ|7->Mil%w9!NZU}rRD}!j(9nOr%m}uIQEyXC`ur|*p@XB}l_H;HrF>jW6
z_n&(6yAHmk^`Dl;d}o95cN;-KRrbmMJbfVg{O3=2IqZAb5Vd<aux%HbXm5%><!rxO
z$E9?F`qJ?_(MA<-VnCUCY-{KYbs5J~y4}Ac{Po5r-?Ss`-3Qu;4WfIY@{*OWV<KrO
ztb(y4<5dZ1g{Rrb;oIxUf35w`4Ry6U5P842=ZV_A1G-jsWh4<5i-Rev2e@MLP3=o=
zK`5w4*0QH+tLV39QX`L`kxi_d6a%5%{SWNAejg9LuiH5kg*o|f+?VJd-iL3`UiKS5
z-t)RR#8i|QrSqPTo}TK-QM*EaDL~_mJ?@5q*{*DMj)EUcSDeF4>a&&upI^K%gjlCa
zh=0`QJ=#~ERi>~uFgY6T<H0ymRxQ1B$=0suQ2Srep$8hr7WHIP{!E=8=RXCBK&pDB
zHdXiqgq2S1%^4>~?_GIu;Zyv8_Gc~`_f~;ofQ-bBZnD^@qSlj>5wh?LWy_lJxwItb
z3;rb`JCVQ;$5hFwpkz)uExurLR!VkHQ2K7Ze?fmNHySWFQ2w<{6e+~m7G@HSiZRq&
z?5Lcdj4T5OZ~K&5?hX_hZcN>=xeFz!!sGeu$cEh}JK2Y&2U2{b_Ay&?!-CQ$yzkv`
zxYFgFStM}0cQ5ZPfDz_jJp$S_S`CS)hifec{}rnn^b6G3`yz7`CS^_`1zSo$LeKBh
z&Obj)k5DhYpFvi#pSX7k50;Fj%~m=%RNXEq9-F&g_{i_HN7&V?&VN-u)B9is(e51a
z3%|@t!tb3`pTwHcAsAls66q_b^gw;)jXquy$nyqEYOOpm<OycgIJm8<)jpFd0iOZe
zXB)Z&?$%m|V;zF=BBq<{kx!6!d}e;p<9%0jwBKNs>ZRIb!ki5ha9xx?@jydA#SW-*
zwB;+bOJP?l+^&~vM#5j)_Br{u)_}%ZPH_7BQueu2@9}TC?5(wji7P*h&ApHQ$<K>K
z97W`Rl6xfTQ?2wMI=0!qC7!0oCfBaugkv9~(P(8om((s+=#~TBW1Mb^uS@7YATC8Y
z>6`D>bP8!-sJ=cjJ{M8LPx`@z(QI1L?6k0)M3jY7dJ@%kXk+|CEW}0oBR#;{e5IuC
zaOQ&%wToOVdD)PamfI@<|M%qgLZ{0SpH&L3Zx#0cG@Rv;@$UXXeJ2vKnT|3kJ^t#0
z?P7TW6Fm@WB>|ADfx_HO{Y?8{nsS3LFiw`IIF&3IL5zg@xnQgHv(WlNzAR9*s=95u
z#`36zIk1H$EynA!%)w^Z9r2IxUrm&TY2&jqx9iR+OMwvYuigDy%i-tRdq}|6?GrYk
z6GiJO3kb8%6Z*O~U0)n`P?2`$#^nP^rf!j+H}Bd3;@B-fToGwAiN&17+6rQ6@Vrhs
zK*MkFS8+-GSVohl-;(wRs5-f5d=C0H`xG8@Pspf|!++V?>{bCT&O`csQ+xP0xzZ-r
z%S0AbHL!<-*sRi-8;4C}0oLIK>Qo3brLb-m6T30$*H|LjeY%VIlpW`TUa6RkJJ1zD
zNkl&3ZUw4M`dI5JU+;>X{9f<~@m`b{o#W@+M|&9>V9P7+8S}PLKPUhaWFdm@n40Ir
z94MdH%~agMV1Ds?4GG!cg*<DS_<=4Tb0^<$k<()n>wY4Z10b3z*;jDL82}l^#}zZf
zH}#Scg^`KNK4Terr`Dok(9}mq;ns2OWvD@Jz_%o#22t>k^Sn9xlHL|jYUD}i#06l_
zLcS{(iWhKK6K`awC$sN^!l9PAaFj{rt_!S^fgpaMh}`<RwM`J?rlh>$#fy#blXg#{
zt21&6f@TLlQ(Y1l_64e0hIb$Ci?+D)@KjKr{k{13M|ywk`9~aT<|DK@dEDPAWm8Se
zTS$c-kJyD<qF_9*0;o8wS`9gIC-&j1#QHh61WW8rv}%8Uql2etO()T<$jChYjR4I`
z30PG22<V>0cLU6|#i`K+{o{`HkpQ^Ns)o^QW7g(2d!Atk|2Z--gghLd^Ly}cOie|-
z6u%$5nm1PQLyxS_u7X&XpxpeTJnQ7w|MFP%%R0faocQ?y%c7;Ptd_PG3(_1R+Ck{f
zq`;g~D<WYZRf)B<73~Ip5)Z>mmSF&8OA^@V9d=B35)o4<Gc*6RuDxe4*r76Q*3T>R
zYQ*L5rmRV9a}sg|4(cGQiA;?>=ji+d3K}G-V2`#K{~Wukvh5zS;YkeW_59_|I||sX
zqkfCZQMY(!PrE&4hg91g^OJK@ijd<k#2w`ZyF3J)5lkyaMMp_-kzLX5!B*Y5pD@Uv
zVKSG*-NvC{cVP6~h&<=Lau+Yda%$%WGaonP;5)#f&OSV4;@Df4uv|93F5NF#34@3V
zuOs`e7KAt&mgJB1Mf|aRpl7i5@~ZFG>tWq+q*6wP;U$TQCjRr5WLOUA-be!oVd5l!
zC?Uzr6}0WRt3Z{Qf=9|<n>3jg=lIK0zaRP%74d@!YeCo9HoHkHM!LdZI{kTgzf;PS
zCpG)uo26(nQqoA;4X{hfh&oDX!Tgmom=$jx!~mAZSZdEoWR^KJPNj$zcMCVm$z;r|
z-p>q+N2?WSH-$lRK5(HnpuV@S6}f4DDj7BYesJ`ArYN;!v~kKswTS;XFg=yX4A&t%
z!of9i?mnFNOX%msy&LHAd$Q+93JVD!$N6mlj;(AFle1sdoy<8aCmXW6nSdfH4-Gpe
zW!XE`_%~F5ock)IcaHYcg^+x2MriJ+y6dvbS^tai5)!)`Uzeyc;r?0$L$@$>EcQ|{
z)jO=9#)0>#S(j)T)T4$%e>rpEh-gt)xQ$DL%pAln9aN^T={IcbPITK1c-0cN-Qm5{
ztmRt@b8UWCN7e7%5#sH6_mMXV`KjiAv@OFeR+g4`;3pKByXWYR%}2n-+CS3pqveOt
zOEYGHww50@p1)7uxy?MXadhMG_dA~f&;q1>#Ltk46LJcOW7k@kXn#Zkn(2mYhO3mb
z=Rw~fXERDGk6e_N+vj@Wg85)+abWuGvd074mlyQeoBM#OB<ovQSajs&%a*^rqBJz&
z<}%GrqD2NKK|P5|t2)XJaJoFJY)Mk{EjT-dqGdXP#(t|xRmMD6b;Rn`vp3F(Tf@Ja
z5a?dbJ<XQY_eY!z|0Tlbh5f2>v9P-0ne?21MC^E^3r#?)DG7fexW-nC{mD0EM$?~j
zJkVJsYx1~;j_Eeh*1dRHQ&!oHTf(IBrf7Amvs(@$GJoJy@b1>Jr~?loFKkjf+^@X6
z>38+)^4}hf=@7!*{8IizoPS8@g%FK3_svo7-hN3)=yJ>o?Y(itr?J#!O#s^Lv><i$
zzAN8;-n`?B?K%VpK_f~gW>9yz)#RUO`Vbs!)Ft?5JS8$Q`j9PcG6g8@3xPTLl**OI
z1B;c#_CL06U*@<aEu6DQF<@FZtf4TZN@2)mVfD?B(SR2}>V8DB$=xN``lecXJYV2|
zujZ>^e4{F;jbhYO6CK}_!@@IdiJOrLL@7^$>13KN4yxD+`lL@tND4A(rcYkOX6)^F
zFGy+3IM{Xed5pC;cpj%T_v^=!XF!rCVUP9)`bZb_JMo=#0JVHf%O?L}<*H4fpHG0Y
z|B=uYjVE;3ONdnvV)TZz*%yhmBK|IHDJ5kWPH)8z6PqnogxqiS>tWv{#(h#GJ5N@|
zZ|KOpbgpg1S7&yR5I-5(B!2FuHSL~&&7a_=;Qvk9IjuvSf(Qon<~9D3e@G>mHF+`u
zO_V2IpKeLy8`#;f6ah(gbiKgmOd9Xu7{!RY0Jp{ND(l<NimR$)oW2%9oG8~Gkhqrp
zU~aarT$tk8x;=crP{NpR0&M)JRHv7cF*~N(N1MfU#1Cl&+)W_R=_)U|>1Pc#D6(sg
zR7o;^HMdC_Ly;IGs{*j!omuuJ@#SF=is+)_o`Cf*tBCXI2oD+XcPpzDm$gv^{h?u}
zQ;v`b8E2nnIk%C!wKYP#Y+U?2abh^;Av@(@hrs4sGqI{k(#)y=ocqsRrtu|x+i@pW
zBuky*p8W8`<fZj5Q;?q)v>lpXV@`Yl^pxnZ*3~z$k8=8wljhcSq9q`J!KkCHl^P68
zew1?P3h}z}s@<t)Smo9!H3!h%(Js%fckhY!W9p&i55>h>G6xTkRNf@wF9>|?yk0AH
z0G6rw42m~1Vhe|iT?RZ?6dskPI8l-;TF(w(s0yXddbylE(AXdM)d$HjcjLkbfuhJH
zj%#7C>HVC%p!-o3rKz<36JlXm+jK_sdh%$KI#nAB0zb@TrjCfpwrmhTPkZIWCy&d>
zIK$wtQOYvs&5BSz6G8iXdwsJ3t9p@fyMSdh;+W5W<n0a0=%VDuqjQ<@e+o@@rycb$
zwI?CB&F4`j|AKXJF>->X`4meemZT~ew=AqdRSd|U%76w+GIJ%O*sbE-#=*OG=w#;^
zlyR%PWEtDLv5#f!9kOF2-S19L?VtPd0*{VXg;zqyD)05vzWfK#SHIJlg?Zkr+E|;4
zLnmWFn^q7J!s|_w7vC$wKi6i7tT`u9dXn>Ic=!_0ViiD`W6<GObF<09%_Tvi^=QQH
zxTkJvbI;$X6{F9Y2XjNx!_(4tSD!5mob9e~AW^o!N$`SFS~8LM6sg@T4&dJeQ@<>(
z5nHUJHVlLeK}oV66E_lzS~;ObA$@7_B4?a|g(?23^s_GQGQ8`b&!*RzE=ptNj^rF}
z7dHE(9&>l-EVntVp3sG{h8QVDCei?alcCO0y-Cx2ft!O1hR7sPv{Ka+iyxKCbl8!#
z-cyPAp)5zVJJDm>lz(Hw&Zqj(mNw45C%_K(dtftoFLJdaBxBo!gaIXKLM%^2N~sfx
zaGWft)ZW35Ue@g9tmzhdfbm>INj+lDz6-}O7-|nOm$P||ej8t;?>X)z>Js{#EgC!Y
zeBW9BprHKzx3#c7uH09rUr5aqxG#-mlks&anpNCiy;=B*xFK01g-o<imf#eX1Nf$+
zVNB=~Q9ofjeT7<-K44<aLnVORNDytg{f?#QGjbV=bMF*VlmjdV-$k{_yD`=Lj|#^>
zYi>Ed=j8@_?xlnxwOf(1tR9&J9HqoP34~OA9<wS87SRD&u#n@W%6h3RNfem@90_#X
zAhrXp%6bSf3z@GXnFZtNzZX4br+ABBR!AHE8ui|M*C()V_3ezDlRZ6qbv{DhNbeBj
z*3Tg)r^|m%XEewbau#Bz<cwsC1(-taVIrYzM=5dP%mu-_)7@@cc7U8-z8`sM--x=e
z^LBwTFMmgQ*JSycBHQiR)ulc@_jY}z_pxI>*ZI30`Ubjx%@Rw21h$X^vs`&vg@rLs
zozm?bTEw1eGNwLd(-qXZl4X7D9Hnthw$IqJky&EHH{B5}pm^ch_Vm*EpELL?*%H^g
z$B8!`MS?Z<q5FUH`IIydx=VT`o`)xXNx#Ixck>~|oZGS$e*S;^U+c=~-|{d=;9C5o
zIf(m#zEo|1=1b1<PT_^ffE>&p)baomV#Ppdh02)Yo>IG1O5I-|-3Y#u_~8z_P`48q
z$ATuy>B|HA81ZMW*G<|}je=%>7_I1*Q`*W&p2ELLJSXv-8qOG3sG|}Z{*(DodMUV3
z4q<p`o}YiFr6=W;>^XIEGkSdJcIj0#&PP>?n%tu4jrx6}I#HPniIr~C;CAe%M<ppx
zv{-NsVqv!NMF3A#B^2cM(r(RlCKNs_x^*`{Ehgx@zJKWzBDKdL^bVKw?oxvgH_eXt
zT|Doq*0)6l4O+AC6ht>TeYi1mB`C9ipboOw_pQE`<@+q{)!(Gmv`xWt!^xIu4C%C%
zy8ngLE@sD22g^RB=BnAjM7OTJ^rXl0c8)OexE=u!rvrJ;0Iz^G1e8`~!;`B~Gj$3x
ziTMf5jO`|$cC4%oB`XSU0V*3=%5g&9-%}t<vHR}4b@(YPvS@_Z&@o-KdxO%zz^;bj
z5qIReyVmJcbf~Lc(N^6*WS9;3t{>HW4!3a;pWgsU&uiHt+U`J?24XkB>V+{w)YLiT
z8t2n+8;4hOdADC?j}qiIp`J=txwm^NV$x%?ho8o~!`W$3+}VOA^LzKjmy2o|V|DQO
z`99hR1Ems%v)bhFsW_QocuOk3tYwn%0QYR?Y|9I>aF7zlz<{OR5?Q1M9E=TWxe5YO
z?8+f}tk5kiKlr}7H8>>T3FiIV_<{7lLRSrj1Qq00KPGXlky^G`UM*fkmlq6vf|;RV
z&>eG8(ZS#V3m8(V!s@v;SPMDcj=Fkmo*cq)QG_~39IfJUvU18IXgPMN|EsR|5!RDj
zpu|x6qHgD1Hsmjg%j+8@KN^pvRB>VI7FUOy>E|zGdm~U=z*7%<h`Xk_NHZF%ykdo$
zQC2;%v{bdNf~WB#>xY2l&$z-o>_lsW{KwI5@5%&0w7OzPQD^$0r*Cwy`B(sqhU-%t
zTdkPb&213bYcsja*&2z+K>IIF7_}ke6k*o{a;x>kPF2lRvh(VvjO^2aTs>7l>U5Dq
zUBwkKSrDk`v;;Gja&2QtVY1z%qm#Z{4M~fk!??vt2<{(VqU!j|AbB~fehna=%Q-=J
z*%@x=FbL3L8InG)q|MK-&15?4S8XX!4b^$`lI%jvU5i7*U$c&&B?+tupRL*AYLrNI
zp33i!Md%dtL<vTvUZ;mL`UBMSGF`g(YL#aqI;GafQXk-_P%dBf{rFdH!XVYIhQgtF
zDD?7(fnD{0j*n<D8R4!*C%l;YcA@$Q9hpfp+C%RKr;c}(fROH3x2tq7{edr?ATNZ6
z^4+gzFKl^&Qq=ur9e)TaVh*)1Q1YwH!*%Ui#Q|Z(^NwPAVCt5kBZBMlUssn;&v|Cp
zzukJbxuDlM^-?V5*KXW|PAt76r(mBZPP)ijZqk<!7Hsh=$}+AAzOxk0UMhAH>FFAD
zR#E!w;S^jo9wkl^Fb&25D5;M7BgFglyL)*jN3*tcbKCNIe1g*=uXIP<sPaq)z45)2
zFxVIN^o!8HhuZiBO^4{-iG7Cedxp6ev-uiUoskSOS>G|jOf?+qd<ty_%xrJu??uZ@
z|4d921{97(k^4G&4nFNYDS33R(LHW2<*gV$0AG7S``@I88#G~vLV)Rk8uSj3^?%)j
zo21Oc#A+|wK({Leb!)Jcmsh~@TY8nVxbOa57$WQ=mh;Ii@-EdAAA_&4qufpApGK-S
zVq4kwgrC`yM5}2IA)$k|XUHQNge5HE>p@7{a_vho+BXlPANhASSy4hPWopj5!jja{
zz7Wxf?%g7Ty9y#h6>=JV(JHjO%&EGkzNZlDK#IzjP?u$T|Mi*8pWXHpGPcX3)4sE8
z;OwH(=onT(b+4=LGrc;&KMiwG2iS*T)-nkIGsq46)JXAK+8VZ0Nv`AbXlu~h8A@|E
zMMhvGvRt^inB$nyP&sH))h47XGb8H;%~Xc>p1Lb1-41sbu{cMw2ZL1Fl#|l;CFylT
zE}eVn1-#|(P!x2OVHT=;`UP4rq0t0{_-(Chx8Ejo$iaYLv%q;rc5ol=8Ajvfj|0Gx
z>&&h^iV}BX9@*3s=M|r1AFrRSI`MNEvk!|tm9;>637U9`Lss=EK+5HtKo8%q)2`ox
zavXc2vTUNPus644{1Eii?g{WnG5$BIJ?}Cu*f(C<EGT`^xv9M3hp=Ji9hUBCHhV2t
zdnwXLe7Osu&qsYgNl;Er6)zG8(r+NEoCD@F3aS9hP{>Sh)0Db&SxR_|u_PxjYqby^
zELVW3Y}u=HXJTDV+w_YWC)V<l>_YoJ)Z=9_j!g2naaH@6p9M)<i%B72;S%*}kYFJ}
zC_{Z!TR0=T*$v}zII47m#H)l3=sa_Pe7@U$v8chICB=E4f}ZN<sM=h7x4_l8?^Z<>
zJ%P%y53;drUon0Fj1K@x^r02T4fJ9VhO@%gxy~DtJJHWam-L3H?_j%BWlY90_Ef#a
zc9eXJyEtfYp~^kviiLylWhZA}0bA?_@^_Skp?#nuyk;`ZP1MH1_Ze1Sc+|3b@_sz+
zW|}Fc*F#5-h%v_k^;a<0(U`)RjzkY&#>xc#_?MUpt!|VpqI`o%vvE5#@jA$sFq1_l
zAj7O|S!vU9O=N?+blbC*2YK%<`5s{Mhwm1QR+|3&uYob|D({n`jK?HoDS%M*)B~`W
zo<g+Fq@S1d>Vrb8y=DiujlO^$m{MYjuX@(OS(`g9UMQd@3{ug`WPE)Z2o>(GeAGO|
zyD2lY4_#TG8uoZB>Qcc&pP+Qnzn=wFI2ILGwFh^b(r)RzgF59D6Z^ti9iW9Y<18cw
z++Sp6k+sa*>40%)(1yJdqd#NfA?{r{dEWe3f{<}U!AP#4qscuOS?N_DRQ@{bl!_cT
zU9)pab5`JPu<O8mA`lUj6x%e!>Z!_L?(h$o)-=ktU`xu=AjkTno7zVmGZPBd?KC!O
z-W=cIb#Uc9$$~o%7dIT1=ia#vbBc$Q>vTEF@39!JCD!njZm=DgV6c$3UrK3=^12RC
z#(?@kvK0Ti>ke|U4+Ar$sU~E}xVI>N_1~ndstf8TilUWAvZTL7*EkNI8_A};q2ea}
zguW%3Ml7vX@_J=o|HC4qUgNIA7fNXx2Dg-|&XEm*{C2A-Ko9;^-cz38iO$A>ph~Fz
z;nr|>st$15deh?SE4>r)A_{}Q9s8}(%;)G<y$?-$Efkuac(72Lfdo#)A_7|GgMK!2
zFXdj1%mif3cA-Obq)mK5lC8)LYdN60VQSMkZS>kcQ&eDkyW+U7>#FDb*1h{Cwf71%
z;y&qxI3O3J9>ZnjF)nh(WOWEv-D*Em&X-JGGf`ieO<j@kZyQ#=HpgzX#OA@jh2Qx$
z7xXk=Uh%a3RA04Vu@3&@d~}7I7l;-?bS&U@5^FFqS_wmYQ03eOz=1M1%vX*Hx#4W*
z2&H~t#Ouh0s^UteFHAjKlBNv|kxB8&G1G7P1wmZP?xTVl+8g5CN871@XU|FVg8S7#
z(~wns32-U!6oW-Ec{y6%D@5`*Te_W(*iS9-mTk!d>049Plmt5K_)gWXQIqe1)1Ut`
zf5gJBqdat}Q=_|n=DEhkKH}ulycc)&(qB@sTl)X7yuNf%!-|vyp=3Bb&c)I*Gr`)b
zN&bY6*&0KxxX?LGo_LcfZ+!BA7uSv%?qM8+(Jx=G&JNWk#+_5;UYUFZjG}E;^$}9L
z5zaxY>;3h~il3;1%%vr%4=cAR|0EH~V&!LGr;?_Hh}#c2i$TFFI+1*nM64Cd^C%T?
z!RxU^zsv%p_U@r)uo%!TJB>D}sd4>B9P_$(aBN_Db;vT@*4`a0T;2FGMj=}ilzv~>
zm2`hek)N!o;Bimh3y@EIG(S$IL;5AZ&O}c#6Pf72sbs{wsgadnVGqJ0IqKL}=Ov43
zK-1ZDHTb(PVJ9lWuy=^QdoCMk@LP}a6J{pO07r0R_GGDQfkW1owh{=2Rvy5CpW^-+
zkqg{kDI<A)n_yOXm5CAKyv5uWamBY~%3th!kFoSeh)pO`OIe0Ro=`3G+$BoMA0M=o
z(wwofV<?dlQ)p9OTv#+p7^`g5_x!idc4bkzF0JQz%oEi1@NSA|HCPdFliV8257c!Z
z>HztZ*+vVRxP2n`zK_lB*+$xi4vtI2*`Vzov)p~Ym@%oW{K5a7@aU6+aAvGqO+pw5
zx{r$4w$uW&T`Zy8lFbX9!I{CiAZJoA71tW`Z=@_bgF>O(Og3gHrk1f?j-!J$3La3N
zUwJ!cnZIbmzX*7Ia=Z^ozMXfr&^4^!ZJ_tP;wKgl9>#K|cr?UB2wCTRnewLk8Z&ts
z6cES95fJ`cJT^zUev!5fi-cw~je>-Xdk(v6B5y*HOuscqQ<+y}=JpM|9TT5x=h#Gt
z6`ek{?}4^@Kkw+>deb9%AK%Z{x!p3{Xcy47wLgPNJHK?A{=5K6E1#iD)d0!&x`n$d
zsU)^k9-nxPb3!Z5!^Tg|>o|=PpS5wWLcN|KLwT|h)1tbjTv=dMT2j%BmZp6uEJd|%
zk}54WkmmTr(p_-qF^FI30_Mb7l|~%}8M7|8EfnVal@b8{ZsdDm(g$#MM8<Kb3I-+6
zk)OypsytcjYyhkS+sda{;$bN()6T$Px`yhJKBtH<aPxMLu^V-Kp%;(Tg1P)3{N8Ag
zTTS3XOb2L9KrM?GB`QVZPOC5!Nuezbl#w|n^073DA2?Sk#mU_(*!TOJm@B#K1_Gnr
z-7R4^pJ+du=<e|?v^GHI{{3LIQ*GFSY;zX$YYD?|wLgk4{!Qv(0g<#^;|M~x4=w_b
z7GxzP=~GEuyAi|?nrE_Q7{j9*7VawMSo%TKp@E(>2MUtgA`D=JKWX=**?{8V?xfKk
z3O$wotWp|5G6W_Yl!SV8;#dCj$O%{UxH?e#kh_T6wu?O^znwsQB8_Od-e)CYuECBs
zSQtrvK0Okpofdr#hK@3?R^dTwzroSDiugqtPe+rgB8rOwN_KSSw}l@eTfx@;9RY=z
zGS=j<#t4(CUA5`NQqFg6@43`*?qV8U#cMLRe#KoKCxKB4G9+7qe=S{EI~N%%+Qd0<
z*SBj%Y=pUZNK10N^4hlBWiFTP5qcMCC#y%#P!2)ZrNfM|q*qr?o(O{Hp`*<f=@RYW
zn<S^#A)jze?jFM&6tFZbY*DWy{0mfESLJpcw^4psqbg~bO00U9Su}3CB{k@B$;jlx
zfs?&s;-I^SJ8f-jEh_~i>@J}X!%e*<+&4`0C>%u$iMY&ULV-pP1tgyB;98ClPO9M)
zu0s%aAu6o;#=;=sxZ*Xn&e7`{Z3E{kk4vGKrcQM5eQLT`99p`KD9wL$eDO=$(#y69
zI{2M`Iy=(&&JNxrmXGge;Hy)-*M1ID$J(C_C7)q;3-TFxBxLtL2l;=`^MxeR(4E?K
z*PV{&X`(sQzezs?p;I6Numl;6V`LjPejuFR|4oA3t6c?+akKyaugIfe+{_3?6p7cx
z@;gkD$dc_-Yr2Rx)RLM$+lZ{dJyoIQ{|=3AoD;_pdpIYs2*s(0%mZQel0J5H?ckbr
zyBNx$YuW7rZB@d9(DUi}l|_TH*yvf@WLUwJ@RGnmPTco?sEMYJ&L+PXtz#Q;w_uAt
zoRBKAW@}~3o%h5nOt_<*GW1*Mo@wP%F10TTaSLhw;$d{rO7E_4pBDO|&T@UHZ1P_h
z{#R^_IL~$6Tvo<{-z>J3OepUyS?~P)=`U~R-deu)<gGaV*Jt1ngyD{uKhSe1u`r*N
zDEM&#@<J#uOcJMC^r0mhwTN$UpO+nIy65SYs4JQNmy!-OEiif%wCSp??dF}QPrtUW
zfBqYI0(s%)I;e?!Dp?#%$2JutMeq{`EnapLR6I%u+GY;k34=ZcUXA=^6V3pB*3j!5
z|0MYKnVoO=1xVdxWn00a=S?wZ>?ikn`@Y(AB%9L1j2D_ID7sjHM6?uzKR79<dTf{d
z?aovMeJK`lKq`Q_SAfKO5ucS8=tpU_^Vr$df4FVh*UVi|E)^6}8I{+Y8Ko81+uPS<
z#~baX-$p=7S^X^rwh`E;1-KC$QKv93g;PdLA2^nv!*wNnhDtN5XLpsd*lBVq7*NHB
zr><;7dOvs@9P^>*V;|}XQ{E|S3n5`qUD~##bF<WrOzs=qOX)rE(}R(8+l+#dIT|l-
z)bYSw7%Gl>d;V0=cQUBzQl|fcD;17hzJJI9&#o(;SK3@zAt9_)-}%(8`%Yqd;O1i;
zB3y<>f}lnsu~aMME@d~@`5Co=)*K|lWq<OMXqMxS;9lp8wfI4M{1!x+#escYHGfRr
z)SM_qMX5O>Mq?}7)RpamqTO$T&L=c>ZX^+m{|zOjtAV8+=g2jh*F|lj_M0eMZgPwi
zQ_JxKKy50C>tjl&#^c6DW2ObyY=}(*9M5N}-v`$?&@P%DE>P~-C5ierHKxe>ReIfs
z$KycH?$#iS_1zQYB=S^rJwZl!sX_-OWf9g~H@Hs4y5a2eU~F)$3Vg~K4};QY6L1ej
zO;p{`p>7a(HrGEPsA``nBA=4l77HeQ4g#L|qP>}ZMv8m$)uMMlIKWA6!swIMS**ii
zG~W<XkoUThW}K*?Ea0{>*9tc%e2te}3W$RiN&;-dy9ZjQUjzu#-~AOR(C+-LtNn{h
z@2y_m*+_P7|Lx6$&WFkWnYSYO6x{SKS^$phi2UDIWGlm|3)zt#Sfa{HIa~j^Xd~8c
z;7Gv^Iy1qz;>xTmaOR(mwQsMCG=-I*nf$+)d(W_@()M2z2Ne||DosF$ipVH!Mkx*i
zVnaX%V*><)=paIfm|*~k5E7&pF{8f12m_HWQbGx!5Qq@UC@<0z2|`FRDxI~IvWAq|
zkN<u4`E;)Hd0$?a<^wKP)_R`%xy!Fyuu|LWYWTDSh=Hxh^NM|vTPr90<EVeq+5;Tb
zWabD5)H_`H%jKms5Xsi=o3mBHz&i|iHPydBG>&0xler;y2w-z9Ad~ycs?%z%i%+Vi
z^*-fofB0eSL#O5P*ouSl<p<K^JnPsaGG(wxZ7fB$ToTBJ+xO9eglHt7JzAYEA$`M`
zb#pW*7hw0QM+T(sW_}XY5pbEKL=}0&^V#q6gCi_ABfh5xttz(U7}#~2##B_qoaT&L
z6I*If0bmUzQgtZyNCLRs$MQ-hn7J>gbVdo)C_ffbT%b*>B>|dEZ76sW2nt!Au7PnW
zi`l&|ha<@>+>W_*(+}f+m40^St%M%_c(Z1NWd2d90e}c(Kz%O~h{kR;mmZivOxl}O
zl9`SN$fqtKPb71FM>@VIVXjLiNIq>t06<MnUU;%-?Qm1#JYZ$6dwVhPVHGP>!+FU3
zwBDWU0Ki601z<AH7KJX-uh@!`9tUH5=XjP{Ko5G;%2NE~LBw0!l54E@IX;rE4fyCD
z&{F4`o<#xbF~)Npd_Bsg%IW6DT+_Z%VKFZ%Tbl&1lujRiSNVVi^1TTh)wXXfiyyJq
zt87Kgdu;5K6u*bsEBp@hB|8Z=XR{5zN1njWBCkYDfTUlS$glrrt+}*GtQK?WWsYxd
zZ<^BshIU>7AuX_gpmz=^F8uTD(D$btM#986<ltGEJ0GJXk^|68hY%<tE`SF5yI9Aa
zV(eCL^4jGLSGYR2X!c=c)Omvc;ksd~Bz{Ec!{vpupHB}k7prb?09hsXIO^-^{|VyL
z?0rF@&yo6$_1O87G4@M4gBzoM{V~wHs=C4Sib>kjZOv)>9}fH{@S6VN6YbAXt78y~
zOW!~-gPao;`V>3pK>`>{0hO0^uOtjw<gR?Ksb-K3Cfn-o%&}*OBF0@L<7!oT#XC>!
zHqKjpY8>?>@4YhU2!LmpLkj|b8y=E3(xx8dR5w9OT)rK%2T%8*w=ZP~ig&n|h4?!n
zp~bSF<@sjIOjY9A`YoPUly**FS*NA$_!U1VE1xHS>aC1;uGJRb>Ak%{o`wK8sRk63
zVueycupNL>UzP}*%x8daY*P~3x^SjhCk10In%LGYbQ`o%Q$9VkU>?zjb{bsn^$oQ@
z3+R-@7z4*{!Q{};mQc|HYb6C})=dEiXvTJ#5xfTG@KqwxMsgHaxYN-b6!_f?*uD$E
z6SWyH$cvUKI-Kn+;l`^-K~>`U*>z@0L>?${PS^1kMUSt9ZZ<bL`Ld1S3@Ppfmd4Ta
zt^TKTRttIzq|Y5oDV*KlH!&Ht%s9m%@~P8+5N2TwMq3J#W~e8%N*hc!T6qdXiZW<X
zq1yRTJatOO--DDu5on1$c)M`0riJ02KB*AQzIDsEdmPIn&Nm9bE~v=Y=>R4)paRnh
zssE+bgUFu1k~tTEI<OErF);6_;Vg9-3l1$hzHZ*sbC<oTfc&cMP*<@{#78(9>0bZb
z{p&34rX@+DgV%cf5J~<%5@;+BIQ9avpW^^c2<k~>LW!o!sQsq!ZUbB+BIyglsR^Sg
z{=Iq1K9HT>9ilqQOrT0TyzCMcP>Li#s;;Lw|CIy?-jYmba;OFJ5;#R{QBWu_t|0j9
zw8G!{k@2`8lR=gapcvL;>&9vQEcDteR$+S_-36!vyHtTbAVa1PHiRnJW9K6nsuUyW
zOiD4eKPM`UL{*uwqtdtAd3EG6bjXjnIqDqCdl5@Hy<84)0CTDup-x!Mk&T8i*os*_
z?f+!ixsULE-XQ;DHb*_FnvnA#t!ldYTx}6i+cw(2s(2P?@fVba<lHPE8J8&Xp1=2N
zH?LaBT&S!Y_Y++0GH&f-*PXH=={MJ?z@Vbv41tHN#QqT!<1QedejlP|*}>U1?yu+-
zvhr(z)CA>K&QRz{d?E)0h**Hs2ED5<ARn7OI+1DT_RV|=12IyJdFj2((t80hMNTiA
zO6S`4HG&>!4Hz4dk9HXT1Qvr#LxNK!$8@!+!^sI1h;LWE7JQIiHs@~u+a|M5lzkxB
zEv10+_(H?W;gwJw@1ey-*21Nq+nVy<DY`$!_&yJe_c{YMpf*-O>{v(L15h%wK(*ap
zYq)4oW+_4e@Szs?xAmZ|#laM}0SZ>q7vnm(JYCwH6;mEiH@slJQ1s~2-D-nh)U4`U
z{N5{f{+}#BS#Cp{8f7GMw#!UG<Zp!dol7XPKG(;q6PLlzpc=n{ExUQ^fgG8!p%wjg
zzBR0pEYk|8CSE+yv}Wg=xE#e!;5P5gv&!86*$Y-L2?*F+CU%crJFg@MIF<MziXq|$
z6F~_iy(Iw0h-C@}uM<ZLqGzDBDLW6=mi3qm6R8Jec92dg`@~eg9{D%Lk6NpAW^i+&
z+OEkfSC8}8ofes*g`fQqnlI04d;s-D?^`2+M^|jw_wCH)k`SPSFrQ$152GOxs(t|C
z15u$cwuc{mE^oU|+mE0U^!DNVz_c{Wvkp9Fwf_}@p5vpYrh0ed(zL?qW`pc8R;H1A
zU4zm;;|g^$Vh{S9V1v8#)A7479#gT(-tbzxTFewb%~6xwCjRe1&Qz>#H{P&KQ)UO>
z$gwH8eeI>M<xa%DQ&9b|az@88tT;qX{<Qq+``(IRJFQjV3VoIJEpC7|;J+jPyCea0
zNZdbehJZV8Qwo8IdK!5E_;h+o@>k%I`GYO8g%ct~4qL_n#WR{{Dc#XPb`Wt8(RYP7
zsx-m;PTxEqF-e0w?piYt>4$RyAtITL4UDb8mCXQ!yITj^U<1L}%t86M%kak$(tN`o
z%QdJ`Jd*Hu6&%V%FXeeOC?9$9|1iSUaRR>Lfn+rjM3@+{*S|`Ko`aQ^`V*FjU$>`^
z@d0^dDGmQWO!2*c%d2S9i=ZhiGifuXeaVT#NX6MQJq>9jf_>cvD7{<`Sc*z*7D$t8
z-J`E(k*LysU{Vy4|NWzl1oY2CK%HyCrk`sQo%govF=&9@4zcshHXr92C@M+?Pf6F5
z6z6V(r0@3aTg*`4g;<|Y^lfo_exvDC!>gu;h53R{TRj5f$;Qs<!GRu+e$sk4a-`<`
z79cX!+NSfb(wn15)HidhMA~wD*?>yGUC{iEq5*k7MS3*&Mr!F`LK}1XTT9t(m4P^8
zeqxdn=KXQw*jlU1Qyx+i0Yz9ZFPpdF8#*)o#{K<I3r2X*FPGgU*g*7xoHMOdaZPiR
zJK!^E*FP0wLr0g@yw0({7EgTSuIBb0+xPXxwk{)KYh&Z+v4G>~QI2evjzZl70y2Ek
zRcnYop8?meM#7{{Rm((>jokl;5G1IioOkrn2|R-DnLGmPbjJR|?Xja}SQ}~PD6%DJ
zZE}*;1pdUMejFPb?FK&>oFynti>U_wBE#6JQW_ND+#wv-0QQpYKzc_@{*(>axjQK#
z!$3Tki7<hm2F5<T5TUh)PZ%pWu|+cqjkYW)AenS`^q(6Px8@JK*6Z+nTIcWvHU>H#
zN(x6S(q@Fy={e+2jscn%{Lp=QRVB@XEC<}B#`KQ?4?LS5#hALKK8j2aE)IU082?ki
zZv}p;N=JPldIshv&7(*L*Kps!^;ZuIn{s^yBh4*L(=J4@eti>5y#45}@~=nEc*n~+
zH}olmkAOLVR|%rgqxbPY(ODT&LajMHz`5W8welFR5wntDzrrU0&8)f{mEaQ32gmDn
zJ*dn~zNo2;^?~@QG8@QAY>AqS-k9z3#iyr=;3e?=P#oy#e9y9KL2x7UsfXZ)cDL_;
z+4^0a6-%guEP2-@TpW~Xi6?yBUwu_;EGR|7ue8;@+<6u{d#$;lHfJm4l{iZm^Gg3l
zEju*DbK8cK-{iSai4CUKd@F}br$&svSep_Z!rfbkZ|3Y?-0gI%sU=--*E~Pw?k`^h
z^u5JTw2x1>AIA=uh&VEX+9^NWYeRJo@F3BWIt$6XId1diHq%z*wpEN!X%dMOoVF%%
zRIU<_=3PPVd|GyQd}3H)+_lhJ)I|!9x@(4uI;J850*Jl})r=R^35GuH23m{qlbm7A
zOo+zLXNc1r&B+1o$X`u5{@=rR`U-j{a>?rk-)cei!f@y>(1D$R^%FXkfMYlDn4g;Y
zuA`MtZY3(A+a|#lNoaJ`4x#D-CGRTgYjlI%oLzEKF+QYM6vI#_w(08SO)^Lh2(;J~
zMJn+l>g{NLbfGw;$<9AF>^T7tomz4_-nsfu?nQkbS8QW~BXa=8E~H6A6x~>~BU;hF
z0F|APCt!%6E0oSqqoCoy6;<YLq_+nI)LaS%$*8pL{C?Tb*}bj?3LNd{;#6kz4yHZ3
zt2gu>1RvnyM=re!jOAziLCTUG(T~_Wi?rV5mVKD~cC#;AUe>YlrwIvMo%P_CSzG@8
zldv|F@e|1`@qWk9qMMu7%Y@#i3(tan{9fe?2tu1cITZh=JNV!zFUMHJdOf1ewGh4?
z%w`pP2#jyNJi5+*hY-aV)m&-6Hc_wXzP2v5ZvHdFi*K=aurlKPor7tlpu3S#;o%g3
z+oM{6rqU)Q9FZ6v8%_!gBsqNi_%|dF`1o**yZT1^Ix{r2SE18Pv*CWz%JbY^m`5&e
zQ!Bfil<qK~infDbV*C><RP3_*mPeZgE2m@~+WW}mW~Mkthg_0=Ir#5%m-iJt2W}}F
z6@6EIU)l7#EgN?p-~K=8z8p*w<F&x4;By;0mBrAdn!l-_?BY>vWe&(cB0P#fH5p{1
z?8jy9gVswaN66Wip$Ao>z*mp_G%gSRozbZ<s)PMAo_mi^x^7?hY$+x3R7G<OsLm<$
zFe!~QwLnku!6(a3l@tDF1|ld}3AH~p%4D%%Yhm&-TCJ^!a6K&SM%zAqXlP_cp3W)a
zA7Z`6DpGOC;~Cy&@fQQTRTodedDN71kK!=QT-X4IgDKh@nVlsi5O(fyv_ilrS*Jbv
zTvb@vSV;bnZ(dtz)_*L={<LUa<vH$DKVp6NTAkaR{LH6G{ygj_oWSL#9sfxxOrh<F
z7<bE%JHKu_Qd7%H``psn3UxOS3B-*75s$B4#a-X?LudNdy9Xkiln>lLzu7SJ8L@4D
z^P^twx<ys>WS6p^8=;5*Of*OClpna@@ZaCPPlO#l{-}SW`_a9bH*yY`>7Cxb0a&M~
z^h8_#XFZEK#nhhhiF|%4oK{W_zfxP*w9Do9?x5!8+T<;Xk6rh;+;|w}GM$kfxP8OZ
zLWI;wJ@AN3v42MNku^SlbhWE+#!FC~1^?A`(RHYMQdH=C%|q|_i~nxf_%K~*a1^5=
z$=vnU&&>x4N?*>jQ`YOJy&y+<)zl@GKD?gl78x11edp7_i1Z)6sC}_3{5W<>iFO$e
zRuggz<tD#}4GaYUStLnn1_*v{ipjVhA5I2aODv54GVWgP6exMK7->#&fhV6<wFufH
zgDSmyZBrUT4}SW-!NKNBtmBePee;062S3j7TY`~BYag&P=@z~pm-GV$2ey{pjZFb=
zD_=n#0niYDVy#E{)%O@hU(~NcaT|yPZ8gdHS{C$iqCrt6K_gC)2A;xp$ek8cGP6Fv
z+O~I8#E)3e1B#VXD*YVj%o1{p;VMrBM{)mF>Kn#RAe*z4j@P->rjBF)b>Mg~W?+t$
z5E*K+6EM)~G@jL?J*Zq6fBFl((<dqe;|&}z7EU=o8tPc%;)=%lirdQxw#{uXH%tSB
z3j_JdlFMm`ns<f0R)Z0e6io?00-jTDDY~JX90@7&VD~t8-8Si>9CPYL<GsxZcKy%E
zZL@yc-uAmSwdNbx3EsuxJYM<ohYN;D$A1FF&_NTK!6v9_)e6YS?*v)D9_=O_jd1aZ
zC83<`#%(){;F$=ZT=UsFtN%oX?)vIe1N+Im8XdonkHuXWZn!cZ_;RRPR981@uJ(9V
zW5$lGk`MN(KXA3dgRKtEg#b%kFoWJi3&QOtf5#VhbEe9vMr5w|K||rJtsX5&rYym!
z1DT0Rw#Idl!|CoEMY#mEl^kt;>N4Md4#$E%_;e*T(!*a6wS9V0;v7NV6i){4&<EX)
zeJ`9cdCf@Y)TVUf&`9<amdn{D)2ac;^G)@+?SNWO<65F-sJkG?g1bbqeQ&PZw(E08
z&dtXv_xC0%mfSe}XKX$zHNwIEN+Z;rya8U5X-gEKN-I$SoJ<`rNoq-PlxMX8pO--y
zPBLNH?QaDKb>9sw82QuynR0<gjN!&%ma8@|CZpBs{8yRNixB><p3<4stVZo<ztMNE
z<Ryi1G&3K3oGiR*%&9yW$gTM^%dYBf)Jx75P53L`25hHq?=Y?KJ@oANE-RAey#w|K
zoHJ`?+m9b@V5)(X;<t8GDoc%cBIl!?Z*W7Eh14xed?1v5V5iV`ob~+v$@=cf7aw+^
zG&f`%*V8*!;t2HEbGlwQ8NYk-+&jc`#;)b~*Y_WKB6s~<`$jWU!*y4hHpp8NlOFC)
zK95=kokUQT-Xbesge(&+Wkl&l#ZWf&hZgA5Lu|T*0!{lxi0IAv$Lu~=5iU|~_3;=z
z2+gmxMKqrnv7I!3%r*G$@PFx;XXtn#bcKOf*wjmZRSe>5n>z8y0E4z#0Y&{RzmK_K
z(nZ@eE!4d@`?a&p9J%*`%zWK;;HBaB!z=^b*(Unyhv+1QPJLbd5b0J!OMSTb&<)-K
zd%?j>3H#eJ4#6a>24<fbGKSIfQLvz=^9Uhp7m;UYa$kX-ZMM#@TdlPzCl-ff4+ZlD
zSx-rnp!5#KSLdN>rujwFj7*zuf+24&>JwL?N&~w)rVcEhI@wjksS3dBjrkq4B#tu0
z1cc}go3;a^zwj`zKmfES%16COV&L2Pc;+#!!@i8*xg@GW0e{Mj(i4$)xA}xL^UA9y
zZ8(Gi@-=1n8|xO#Mnql|aNZV%14EVrpqfy44ycTPlOKl`jCTrwAMkhraAI~1nA$BP
zRLTrs=T!3sdWxWbe7UzT;55uh0925k?r8U-&TGxXnDhBM@Ph`E<Z6p&&8!;O%FeI5
zq9ml5VjJxTJWW;r13!?W3#yq7@>(pU(ZP{X<FJ4Jg`H}N=6yT;%Xze^GCTU~W7nXh
zzW)eSR<H?QLz+C>Y-*8H#AgD;WTC1OXS;d>s}*XtJRW;z@m-8D#GN$_7g2n=_LK8R
zl-DE*qdoG+*y%w|Fhh38QSV=+FM>F%lH&%jt0~}K!2{h1_bax=0;_;#?Q#)AVA&Cc
z-9m{3c1z7AGEmV|cM_U|I{MJ<mk?a1U4CJNl##mb-qdcH;^qH6@WRvpx*GkKndZxR
z%I&ptIR-sRN?7oY#6JS5Sw*J)H>1Rk$0CqunLk&ClvhE!DgH|cwjM9j>|ZSa6M=)W
z?RBtD5{>u=#f>0YN>Oa&m8EnVZfnTCT+3&p!8{<DDOUZ1wQw^=wN=Ayi0yW;o^;)?
ziWEt!B!mS&Iz=ixw?R4sex(YX+Upt+EeM*w2d_&m`nn|#PjTQNZi}1lQldrZzSfo|
zcI(Rq)}t`JtH2g7%Ib&uHwKl96&i6=5Z~Jm(WaWIhvg4Ax0c4;B%DsmF`3M3fJVaW
z&(XB02g#>ICaakM@M-{W160&ANKz4&``1eArAzf}$i1Pb3#|+ELQ}-bQB|$kGNb6O
zvh)QZcfB!N{2Dc_(S?WZa5@%jI}`^-BCzk3S4$P+!^;N0tT_WP!3znu*)j=e5Sd3v
zpDu%V?rNRu5^3LRazc9b*MF66h1_YrT@ZG?OkO&xum9>7H{kd2oh*<E0Pc(~RH`A?
z(J=N@7h{JEFBYceEYhdsCLS$y^&Hrr6IDIiTY5#eA@;1$xq&n4qk7`*-B_y~)@(1^
zCJhbDv)z0l%5g6tD_dtBxKIR?z4tjY?B_2e2l=pAjY*EnO*%*4J8%Dy3A-8<s{eg{
zvqh#z9@FV{#2bk@4NS#fUb8(Sm==V7Dht=Dd$Y$q?11+9t7m^Vt9R0U^84OLR|aZ=
zj=$CuFyh#eg=4t#Im2!6?Z>6#cWHzXV8le!*7j6H)VAv|A|nH~@4Q>ztNG(Uk1YPV
z@xc1SV#RUYX3J!Xv)K71o!f@yt^8x|Y1>S98e*<EH@do+k$!EoSyS8g*I&K*E}B1i
zZaX*h{dbD;DV+ZFor@uM!UT#((G0{Qm@CRf3wT^zT1n&s<43cLZ+Gu3d6;#K>!R9n
z*y2juYxHQ8Y^R$-T^%4Jul0}FNmf0OH0fcW?$=X7*67apoJK)O(D8ij;SlAs$i3&Y
zdaJcX$eJr(b$onQTMuc=J<elgysv7AHC&S(nL9bWM6tE07hgjGJ?<h9H^RG<V9DxH
z<Rhdi3Yrgu>7u37HVoPHDuR8E@Fg+c<A^gie+Rtym{v%BD?L{aEp*xnn(m{y^|RXf
znhp61uG{d6?;mWZ7Zyzc1^uE}vNBRONHG%k@9eSyjb=`2!?bzvmD>jgBmCShr*HL+
zs=VYHK>YQg%U@A1Ts+ccuXltWSLadm#ems2-g8%s2GR{DSUJ~2)p+#<v(bU<rtOc;
zHo|=|1d_&o1Jb=Wp6z<;Y?O5P!DVGB=qSctrM36^8_NFxsSrI8U7ym)c|RvXcjn=z
z?l8ikwKH&2yK`*|#A^|`|0Ef)(p_l@rFy;^VqYhb%3HHu1rZ|emQGYPfKT$A9By#*
zd6mbs_CR2Tl#3n@U$ufw<{v}DtLKp?P{Pkhml(Z;(}~rU-TvbF$#T041E(Y_4iKV)
zxV;A7Elz$wQqIHlB-t_RSo~GMkHihjEH_t``UczDm8F_lFKv&b?Tr9+xpyg9wZ~`l
zzFvOj6h}Km5ZeEAHT2Za&|)nuAnflxWA>!eMAiKPw~si@8rP41jURmAGEOWqSGq~`
z-vgsk4kimbebnop^@r)^OsWyxT8BR6YlUW-{Wv*3&aO?_q*_>)tnUhH8}z@U|NqUf
zf0aCOh)s{;e3f)JZK8`dcZCx94E5pd{}FZo{uDsk*;&TuS>S-$G*${A3$vf$DkTa4
z?Jg`p9EB@`%aQJ+82zhMs^%DHuiuY+1!xy0sAQKf4X7ZuKvNDq^BDAipCQg2%~;tk
z5yrcO9DaJ3eL;eL03aS3UHSX#hRqflIJ<g8Z<c#esGjPOu#?$2e?}WW>FcY0V(|B{
zaiXoxPC;tc-2^2nfHk)J$TX&w3~B8@a!6J7-EG<f81L%^ioXCVCX+?P?wGOhX>EHf
zK`T@C!71r%eQ}<R>2#2<ISoX&A=X0p$<eCLsOFnxfuVN^R+mmQkE10m-&%*2*)n~R
z2(3y6kX4k_-~&J|Hd`bB^tcL=+eJOZa2dX}{14knOzbyADsav4<|gyX3$EpJI@)?S
z^8zgj$Tyo~+*IuY4kZgTkE6^%E8r>HK!n{1fHj;D%N=u*`U5L@F|X}7uia_wdhg0g
z#wKU;ck)(90(%iU(c0aMo6X<xCcH>E>!=NDw}|HEa<^W~nsXjqQFFW*Lo5%thWf(!
z)|edw&E8icOI5OoVyj%L9ZW?*iy5L=a8w5h??n&KL~qUwD!JlVE5;`0>+xkLUN}_U
zw}ILUs^)UC3Myus?k9uYcCodY{pykTr>JYFb~F$&>TuKsZ!SI>2+a2Nr$l(m2!&L>
z|2C+NE`Aj;?ut28N+xyEwmRB`L@N>kDp+UM0bL*xtwxRp*BUO&3nf_s9Dtad?`s-$
z95vH4g^LI7YM-Y#9UNsuxno@=9z0!!65{nUw3fuSEPg*7y*Z<-tH`^~hmhl$x2fUD
zpBpCrz7f9>W%kJJ;LHthUmr;dbp>RbU;)&!#!SSU`jaRQ*ax9B!Z=QO9O-c1-_CZ|
zNdRz%d^=tPep_kdHN~JIn!~dSwY>al2snHl;M6p>{IGQZXeRjPYXd|-5J{*~X>Z#;
zU`5+T2CC2Q50XS2HFC^37BERrbs9F8umFC+#H}`6)m~NA^h!~@fG5~pkbL0sX(h0d
z|0<L1S%LaR!c;7Qh8T4hRg=*j&5Z?;e!-<n$X$u=!l{$Px2t8|Q!eaC$mA_VORY9;
zA^;B)Fr(RuPQ_FiuDezSC<G&`CpouYPHvD>3DN$!U`&4}qi|-`?hL*7iU2%~C#60o
zu9wc_geLA3yq{T*&3xe;8Wb2v)b!+KWx+k0*gKuKe_vbpB8~<U5a`#k4pfp47y@ZI
zE4H{tRRNrkXGJ7TUu6tB8p^z1av<L0NZU@PG68D{mdJwb&rtS*8(E{dU54o4<t1ID
z9>*GLNQfek0>tM2L&tcN>*V*!(k+dRP4!Ix!?7ha)ckt7fX5RYh@TWpZoE<uzvUN?
z^xfApwT~5MdKfufcG{+N9`&^rtoYY#BT=a8szjd8b}B@ooQ5Ko^r(ICtf3_@V&TZU
z{!6ff;vuZu1(?1uO#ksNgYK%RvT2~8>5<np*Js_9M+^<psABH~1<e5vD#0@!u$AfS
zep~D<ifx}Ef3y}k$_d`%kA_UTnA*W%#OTocGQ)>rItsCyT{;P?=NbHcv?{;8$PW})
zgy{clu$Z?vo-era@%+dJMakt2igQ9JOeFzh1jrF)v;~H!AK+Y0LMbUAzfo+T104Iw
z?7$*|TNTm+3`0&xP+GGU*UPx1kS2u@?AcO9&hUP9CCl%W_b6#aH7h2!y!cmC7ifC}
zwbF&7itX<qTtWja1K*_cU<I!lte2gM(V1f2^KnkZc*PdKpFk2i)`RXh;4<(~)|F{J
z7Sy`<FjRa()VJ08<@~|8kP9<5KTiBpJ6?ERWsO-*XueZlhM!*VO3JDz29g3kx64ar
zJ!|j;K~`Su#w>oL&Z^gi-q5>&cSFq@*F2kcx^C*+<*GTzz706$pd%>LHvzb!{uCOK
zftW3PN}9rNBk0i7!D!3D2uOifFUwWj8(u-AxJ5@J#h`206i}(?*Q#?XL~e^P=Az<U
z=iy0JU9S^Eo-VrytCQzdRzzajc5--k+a5k<pF~a71$IuNxR>CA{r5wkIAwxa!NFHW
zA$Nv+z|f(h)W6F*PoA^_#)1<*AG!`4Jvsl#=+OQ+?87C*%Kr7FYMq<`(#NGe0`etb
zhHFI=gy5BJGxiP6Yjo0}WP;;1h{r5N&J*{e7B)dESrz5@+4BU|U(I%{fAVGSeRt})
z$_f#tw;QS>kD(&5ZJc5+Q2PQ5Ew6O8uGj$BZ)w7wj{~Za7{8&#h~9?|$rZ&R=RbJ+
zkGpvIzI~ZAdgJuNU#IUsL-#Uex=SGN`_h1)axlv9glIw=txrTZn%t)tzd#xtZ2B-x
z&%w1Bo2cK->8YfUtncmMFq{S(NSeswi^CCbOo;Yw3sD};$p-+a@`Lg^sP5xaz==0`
zOb);vx9}*W7v#|C5w`LiM{6KBN=|UEA7x3(fuayUwP6BvUTUy>^tEL~Eb&~;D698b
zJkj9HJKmSEA#y;Zl8g*C)@5*%IA{QcLy=HxTA??v%+Ub;n<iaAWI?R2X7QHq3j;6l
zPRrt86aUeDNtTfp3TFc5^)62K9eMA=`dyIv$W>X13JfK$vQ?)zAZ!2}1}WCQ$50bm
z%c!(MjTx;b!n_oM*kOOql>}$F?4F|r($eJ*S_#<(%NkWFsT6augXKBivVs45r`XaE
z&tLs~aGKBc;vDyb+Y6NGiqPt`_C45}sGZY>x&tgc@WvZeVCEEdyyd>bZ+ku9<fdZk
zAVUX(E(vKnFk&uxFz3w~rW_JYsBjx~Y`^rImu40d)+yVwc!Ou28G?wZqC^Id5X?;D
z&rruM0>W0aWvVg6j9X@ClW+P3{9HeB0~o~vF;;}i<96DaWnVZexY-aye2yRYo%OtF
z`m&07d&<?*^y!n=*f&&AK!YR^1?+n6QFNzJ$U)0_wNeD#k&lKllUt?x6z?YOc=NKK
zz{#|_-g93T1!c4=Oo3&_%CX98_ekthV&<-p<_E8sA^iQm3%E<{mn|*%-o-bcp?XP(
z-Eg}?lgF8Qvfh+oO;ekWW~5_uV5Z2Id<qyI`{nVPM0CWZ;V!F{672KmK<lThX5OD^
zfiFt_Gf*ODo$rb;z7nu)gVYwxhh<RqHxJkCiog5~fm3}1e%tg93cx>%+|44PX0oEs
z<QgbmK~nDeWCNwq^T$)SEmlH<&T~d1O*8W&7Ypu2-u-n6^93Av4rqvsOT-)slPXdB
z+Z-9(=mV3-2ElT~svxJ%!Vx)vxya*l5HRfCCX41Zfbref+(8Z6<}_dfqXqHG$_WoY
znCDF>l1lvCRr>;OPXn;re>MyuM+B2!yA3s2&B^u|zRX?Io_w3H``>I|{W_af>%P6V
z<}lo=U*~dvTV3tO9WDSH13~;`w!>6EDmZ@^^dO}e3F?^C8>)=JqR3Gvh8H5LbWRPj
zT7u`77fjC%n-wMxadEY*WYZX5x8S1WEdeePCl8SHq>vCyFGy1ATIF#vQV`gpd;ln?
zuhOB_R&j3Zk#`0(?*aA?j$0;?aOY9$V6pG`g6*jm*d)~=BG>+DaePN8@zNu~v79fW
z5+%i+>HopnUk2!sRH{0}pmU}w7_}xzlrT}1YL`NH#L>b5tiTkuTZuO@+I(4nO=P=Q
z&HUz1$hmK;?RAFhHC$<}e*t4r>+j?H?iuFn+YO2q)&?1wItn@?)E#~_prlxHFgFb1
zzP>aw=_t>M6s9YV4S$46Q&$}=kUSABMcC-UPodDnZfELk*8A^U`7%?e8=HsOCun=t
z^BVdSG4^2wf90NKk>jv6>tOAg^&>wq!4rUJGA*Ix2`33-4+6E&4<dEowB~*Yjt<Pv
zR<96~b|5-GbNJvgT7Ujv%&V`$+fRn%+<&_kwRU?==Sc5SAi*`I_5ULCZsDPu^m}aG
z3Iu2`EQ7`wa)~PdUi4Zb;aKlU0Qz2HW#}_^BKR|KtFXtFa=nyHyON{Q27J^nm?UAW
zBHx<@-LpPXK*%5;^gZUGgl&;~ogG@4u)H{E-D=l!Ww0Svwa?URDALWva=Gu)&m-m^
zS)Abpef{Sj8(V8z8*+S!EpDmB@#3vFl7lC01Fxa})={WM16$U$<ML<NDJD?qnPR9C
zd>HXGg1fEgbHa+M8tPnQE5x~{-;LGFlcAsaIo*Cd<FEfvhAm*_I6USC7zM9iC%e`*
zz26{@03a^vZdjNcxwHx4a|N~;7$b4sLFow?)bCEE0-~OFYvJsjCE{~}Ph&Psb2VyJ
zr*Y`broO8G9^snZemi{vEWSrr<f!nqLJf!o{Hqi~O8uSe#f8bM($zm(A&1ZRhh1v%
znperTPDl_WxjIBKwRrV6IAm>8mgPZyJZoP+qXqQ!jPoP6t2-SjCDY35f6AY+bwsFC
zhO(n2*`%j!_W<C<fqt9pCpekGMDSgD?toN0r;RJ{|0}e?!1QALr?-py%))-ou(JHv
zuX)M2?#keZ@;@aY@}7_xiHKNWz21%8;{$S|COE5A>Wu(RZhm^fu$cr_uK=?`HJK%1
z|2$alU_nLY$@QhPgG{zF)1Q!~agNvMW%sTGv(v2Uaf=dlf!6*r#z;g0ow#<O<{8?j
z-)(3xNV!maLTXBh<`)b{%8&GW)Ta1CJzSIqlETeld-7}DHKVhVn1p6(ZSiDbRabIJ
zAQ5CFm$-Y<H~a(Im78l3+YURR;1DiaOK0J>Put<r*paZaWYgzN%qh_L^vvO>FS1Yu
zb9$RoY*Qm$_PR~@Er;$J5}qAWOkl(v-9Ltg?90r%s=N%WEOn;nn~^2O)^I8L3c~N0
zM8ke%AbSg3$~3ec2xXrtem@HbPac7S;;aGt7IEvcyNEya!?5gxsP(t*VUNK`BL1-S
zT<blP#vGH4H7Y$c=oUW_V=7ugj7amZnA84y2CZVldvcn3`eM49yK_su$3m!PJQhb_
zFaDeu(dX6a#e;gnEAcZ59cVF0G-q1zPf*sl^N`hoqqZCIO3`@~=$a)YQ@~@?q_ywE
z-cs$~1zrrl8oVjm7IIlflU>`>pyyY~;hl}&-Z{GT1T#3?&*?ypKT|vJMTqCt=iXMf
zZb8reeYbA6J!+(M2PF9?aVp3qFj<9MneU6i>WfCFU_}QJ=Q1+4llDHxFaM9oC9S!p
zraGeI0iN2QKjgVx9o5_7I8i>SyJX?HWtaEUeVLldpXnfkylzv4v9g`Rt50EEs_c+x
zA-t2L)<6fKe<W6{=H*h`#-nIe6B#UA2X51x9W!agH1$Bspydi_3qtpYCQHJ~`bfr$
z85P2rH8tag&WAwgA>do8zMv&l|CaP@0um2_^zCHJZ+%0|PuC%3k=3e?P715n!N|3N
z;Q^h=te6dNzaF5eJ=phrmcJ&*TQ1-IXi@QHcJa<5@m)XAW)>nClXmKkSMqxRfSa0a
zxO?CxyqGDyM#i>Bd)@zgs1n%6L?vR}fKlhWS7Ow5@41^A&)c8P+4U!3j=q?+yBwt&
z81+2Z$M3@cYxTSx00!~?Z|H>#1<7_fE7T9cDKZU})jK=@PihTcy*}6m0*pc<)~#Ey
zb!47u+7CVUhd%PtG@^hv`0XH|Tytc&OFO&ijv$nmc|g1E8_}utjB2^{A4`BwQy1r0
z{tYfVkJqP;2<!OYT+~Ht^VbVy`W!?uh0>%PhIQ!d6EKgKUOSV&5nfDrPR4hyHUsGh
z!~qg*ZY@WmF1OVTHRM)NV`8-leQT@kGT1jY4x4S6gs+cU*a-`UuW*okkdDN;+YPP$
z!N-Rjzb5kP5bmLzVht=VNpgt#e!oaM><pRePs3u=T00wmpJX4o+Ou)!WaY!3&a0u)
zv2{HQ_7L`XJ&f;WjP*)-I?$>idR?59N{kyo{i<}Lm4bBy@`<d1a-Zot(LL!hZ1D`=
zuIpW1@odxT`VCuDjCI!2=YGzrCxU*R-XQk^A<Bq0#YQ(ezec^Uf6b|10)oI<LV&>t
zMX69UM^~0MlcU5y2;!93CbMKl5c&ZoH&6`3FDcgGd#D4$+=;`qUHvrcSz?aWaBy^E
zVm+CvO_#b|Rs#Kzsd}IY$`D9bi{uYh=wk_D;D~)n%$Rqb!rgB>2(kQ4V174Im}>Xm
zNi!Bg6K5)m9dkvrjSNlM4xk%L5EKK0rtXCD*|qXWv3>U7!p&MbuFma^<z?l6zJU&a
zzwH<>`J9AF^D9zY%5FqUB7C3Xf>bbp)Eo^c_YNRmxqyPTU8rUTax)ZS>DCB3C!ccL
z*RY$Ydu<ry<46?Hc(Nv@vfaZ;<+DFr4LR>asGX=vda3dn1d1y(1kesLz&EL&ZC31&
zsnp4HmuX{Qh6JLM<Nk5kWu9y)Z5Xg;bkZok#Yj{qRU4XSjXHzhn!MV)nO;V4w1iE@
zZ(-|JVlpp&neCP=tX`P;1SIR%bXM`;B9A#F_wXr|j$ZITHU=RJQm59Y<h_Fjkuiwq
zfiR0Gwn$2tsG@?Yes#{@aER4ERwPc&D`Q9LU2di}5dtK6w}((W#zF>PTfOff=#f<<
zD47lb<!q3iqfXqxZ=$MD@bYwwhja%yO0-zb(7nap37^C7p5^Rh2Z?nHV3R~EhSrJa
z<Q7p+$IS-Fq2YeB;$cw0b&-BoEC1SP=_}aaO<jUJP*w<6fU39sEvKnJ-BAls?$kj;
zr%3`!iB@-o$j@-`v$%|FP85H73g+|TO}&CMO@^k>gS<eX#kBaY=QQu87rUO-0Mk<!
z7KU(#4LoP9yq=-j>4=#SNbZ6aQl)U9_S%(o;>J|K9k1ZWye?&k`CPzu(0bez&Cj%^
zX@^W24Kx_T)Fy1YOc^SiUFy&YmpKkb$Suz{K!5(A%bJMH^>2-NyeUp)c@ww|h5AJ~
zo8mr&-H1H0ME2npew0iD)l5sZxiDnzwWATzgStl{7*-UG3Cl7tI@_pksFp5l6S4J6
zy`Gf)IBjyC(cqHVDCJaToVDpQ)aMMvwpSoE{g1pHWF~YVU*U_iN@!#8_%Wj{d<`=L
za});jo_2Ja=cEY_6L4MP%65jN;>$UoJ7YK+WG_*5Ie;P?wEzvE+g5o8Q7Yu$CdavH
z(%h;uq31$9e?`65M<bZ^;Q1<zi=bi)cZz&oQq_$A@Ls_qT@MV4uHD<5KLjW}^%wKs
z@(A2FB!W#5&7Ae~?{8uvrh$dUXBEXZ3An+tAT(-)uO>ml?o68Kb|ysP`fr4^=-j36
z5Y#!?Okp#^S~x^nT$%6(O#CCcC!xw{xuQs{hP&{pkqCM&=Lv!UZ$h$aZw6t-egKuj
z5lu3hg!0{M3-<u#au5bRhd<sb{Zr%z*=DlMC7@JK0sEPjPO+CPnEE*Ck77{O2+eZ{
zbG;NvylP%BK$0DO?&CY>89mS((P-z_^$4$;e1(!=wCNcNBw+uaS6`tcCa8rAFh{Yq
zM|u~~yvnA833^Pr!i)@%@%<gRos<py2*!@-Nn6<ZbGpUfkY&2#?)Nji^)p3cyqe7Q
zB`3>I#W_j#W7Vt=F5Oerm!mp6bU@(rT4fdN=$-o1Nyaks^8)ysgzY9N;&YS~dpV(4
zfsQ0drWvp*L26-cCw@CA)X|C(2DhaYj8XPN+V_}5Jsu-UgjWwnZ)c;Y986ETf!ADx
zJaz{wE^*mU4^gvoz+K^+FIl|H4YD4ri&F-VD<zsLq%8*s8&woW&fPRc!1v0ZILcs#
zf!C0E6qA9PPrMA!`MVW+AAK@cX>Z#MeX11;wTQosja{AfdN^ZfIAFG-hQIh|_*@-u
zT)6md=w|%ep-;1Zzn`#5-LUMjHor+4Mac5X$tsa*DtH2FUYXzn9xoJ9`@jUE%B=EM
z)&9GSOiPP0DEdSwF?1uzx~ucu!&3kNcBHWO8EOEJ?CY0lj!Twg8caz)eR(M!TW?b?
zy~>59T)W$k#kBZ*l%p{Vc~~()`Kb{;!x72D+kF7{VIQn=0R-2?=y4y|crA7QZ^)5D
zpgqeiKVWyc@rT*QIP`E6C=EYaj&rz%o8YoE05Xf$qz*eOr*J1VV8d6I55O!RcmENh
z)BccP=kQUMZweQ?OO25eHvnke^TVvdD3k3aN{Tgn2a>IbYv)RCZ;(krDALDH)zBJD
z=5wV^)KPyUBt~jPWHe?qNquJ@$-Kb0i6gp9Jv@jBEF(8L!<K0)wc;g|y9oCk#j~Xr
z%FFEUr0?(!Y4+$(TzrNV*d5aQm?1cfkE5>1K;tvv36@0PPO*f+g5L-3c&}nmxTSOm
zbEs;v9T2oVo8YJmkV>3Ma`z=v2G9nZq`swYX0;APxZV+lXg4|j0DaJCS9P*r-n>8b
zT;*#!2=6p-nJ>tiVyj1i>?UNr^cn?39grwErYlV56nh906A4vxD)u1vR_)acmo7BI
zb_iB%@SsT4D_8H(C(=<@$v5?1Hf%9lQ8lLuG~0$(lu)Bf861ebmMQatdV37D5kKh`
zzyOxf#Ax+dJ=<hVxR@!}FA+N?iHPzumUWHwF;g+vdkW>;PEt^)d1scVnz(QO_yWlN
zb5@vUqL;(fuN^hPeeR&OU*mug)cZ>!S~qs=^VH{gUCGioy?y;N-AiJ%9@If(=*>`n
z0H-!kR*K>JZy9AaNSC%!zDL;EU}9ng7WW-B3*Or4LA~C~H6z9;ms@q1gxed|W2F(`
z-F4EMOj0>FI1i}XM>$h;yaDZ|feG+>h{Pv1GrO1W+cCS$@gU0{YTMV1F(~hiDVqa`
zf{q1?P%n=fUbPio-FoT%^7J+SikeM0v0`^}_MHv?fOKYKHh6WJm>}@!jXZaWbJLHu
z>Obg+MUM1z+cjmdw^m%Cc)diNnMkDU0){_%XxMrNFY52?#cB#BLhyktgE!-cx!HCn
zf&GH7-<v9@$Quzgs8UYo5@HWFYXfe+9?&aDNR(7Bn6}xn?HF076YxabC4h+-#t?VR
zOe(?e(w>uv-K##fAT>Mz368N(R0QkgePWano1zy++fu*2iEg%D8S-^_`5mo&H}FEh
zgZ(rAN{XJL)va;q$icEM^mx>3#%8vg_y)wuq;B`893QM^qXS{pPQ^YXqZ|q7Q4^8k
zvAdV$ZWkDxiUaWG^1{j9Fj4RG<&4Cd7=2{Eh<zS)0=!6Y>Gr#{TTD8(){CxCLOv_D
z2EYlcKSC+peV0x{CaFLXC1m6qN7G^P551)>4YF;=0QvD0x_#oXu-oSiB)|*&d&O$M
z_{OT9fmI%h#<Ro90c*5776>lNU(wnDF++qMPY{8x5DMW%>Pg_y=OJ%^atN3nniR-1
zq0im)c<@>@tSq<B8tNdS&w>?upt6*eTr`T>Pt%D=fq|xxHL-YXj=$RWeS_Uoo90A;
zVP06c>4XvmY?@7A^TdxTM*mf6M9qJk5{@y%WipKxvF*I|RR1@corbxy2hw*}(ieb7
zGHtp1q3T;!!tdO~{RzU&RaSF&b^KfwpK6gM;CFc)&Gh0nDsCoda8_Tc2st&MWqaJE
zzfEK7qF(oJCEy`v8W^dvK4ni?em6t=rYr_}s15k^Xe{WMmC78yV)V<d64t4i-^7xK
zrbbvT=Gwy3ux=e(TC%-u|8RqA*0}4Dy#0SEf0<LLa=^{U%gX?RfRl_@!3NRq(`usV
z*z5f&(~kDw-04?;4B!0R-CTB`O%wa6a1|zy<HP6EUX$j?B`C>EcC?T{JqCmmiU@%P
zbM7%OCg1njRNOSX_zu`>F_ZzGxlyNcY1@pU9YU0TuNY$NVDA)fSv)vE37DeY!)s!^
zMSi#S?Z@-%7X6Gm?NG^<%b92G{Z77H>=3)zzsgb_cgyuY+rK?EZV!r1)so$m=Tia;
zX0SSKS~4dvxH;W0j0q?rlf=w>7~GV@?KKy_i(kgi@y(a9S~JaOitZL(oo%)#xvpKb
zT`e#ys&v-o;k%&vmo9PGI_ze!?mkfu3{y-*t=Jwsgj+b;<$ttpFk&393EI%$8IMe&
z23F+JsxE~iE19MpO?V}YcbI70;LJi`bJJi6Y}33>`7I;hh5ub@cpMc>X4`LkD=GYc
z0IT5@Id`gZjk7U=bPs6$>X(wcFh@m1ntnfQ<UfKr1%HQE1E3_2%8*G5+Ezq+((O<v
z#z52(YI>##>Qp&LjQQu&NTkZhcRq2{ScJB!DQ}{9Kby`!1Tp8sq?ds<gQ4+|m2d}W
zFHq4yhtqt{4wY(UaPyskvomkmJ>VRa_m1&mMz5L?PNJ30dfIA?3BCK(Mk|Nf58H!|
zI~~*tClQ>u75AE^DcdTsOl~_i=-IVG-wfsuTs?qY@hUDY`!?$#&Qc9vtp|A(?=1>S
zga8R>9!c2IGQ7Az+G`martwlm|2X;#z-6+&EyMtt05`P;DnN<*KqNy~rVmGQ(w9Tg
zUD|72cAJ?QZmmZz46V4#->zhOj$asRP?cg?-V^PS!Cy;8c5S_W{55)#E;}76jiwE8
zIE|Ly+|zV9>)YsGWz)+4JVR!{YAuqN%dUfeGm${>_jjY%AV2%pcx`}O7(=yVHv^}h
z2}asyz7<miM}&b$1Nb^v9e@AeX3MlCg;7W^9Mp4%RK-lRim9^oA7Kp=L>n_)Q{4Vk
zUdMxjG?PQZt$Tf4?E)`{A+h~e>4duyO@jknVvOsHqZY=b1mN-cjA}u#!6oGXIAR@)
z(X#AFp<nXz61~fX)&Z#3YH2f)9~y)kTyYcX1n-zB!@=$gpo8>Jwe?@5T*Xeg+DSsz
z6#BdKDyKx)tz>3T+kruf{uF6DlG07JgaJU*D}`bza?rU5N;d0-iys@u3C$KMMdSV<
z(Is*&rN;Zcpg+tsY|jk<&%l9i*NP=^)_+_YR|Y9#kp%m%(vSby0Lww_lNy6S7YWuP
z7Xi#+G>j7ST8k+A1_0n4gG>~Veb2#5_m*THVN+@`Qs37{$oZs=MDVgZ9rwWZeO!i%
z;q27H(dF^}Z6Un%(USSF;+)8dyoUMX=(Zd%b~KEvxH|1K$^qeYDqmX<n^tX=cNQG#
z>z^0g!vGA@jc;84)GE*U%77Uyh^gj3m*bZy_5Cob=fFsnVI#{0PUcVAno8X5@V;@>
z%d~bKaGe@#1A0CU?pZBrLBgbH;QhfHp@o>A#b+>fIO<Uj;k1L>tOqF`CFGPVt+d_2
zYhbda(v?wxSMlkSEO@z(ELSkMxo-O~8?9l%xdFv80DVr3^nwU^SRwS+MlQk1onWaz
zr|ANdslInlM4>*P#>GutYC+;p<-k9B<*&vYO|Vx+#JF$_|JpNZ-R7ZvPh@ydq{LF)
z_rt9#r6W_Be+;OI%49o$U=$GdI!Eo$bM7X^2~{}10EFJSLI>v62z4#kT2LKn_Y7?(
zMN6#N0QDzCk~Akm9Csolm{2X#h$;iB6|T*-9O%jKb^O3#lSWu`^J=UuxZOX#)oxRN
zbH;m}zsdH3N%k4W14jMBHi$K82<YkEv0mb~dPpdmR~&9>fcn~M#cHOP<T+IB8A0MO
zuA-|n*d}|@ZqWQ7Y^?bGadm}mte#ByOE^Fcfc=stf6losOvGz*f=CJfD%AiZlJUpw
z{Co^PBQz9xFxS0~&u}!HQ+z)dLEAR_7|HtDf!|8~!71h$k>|f{uxRiadniKJY-xGH
zLp)-w)f^LZ95sX*Us9;+%U@FP(!H`fNNg2|gnOw!0fS`V(z9U>zpa6j$=Th2OSkKZ
zXBz_+JaBs#47pyf0u!%o%jMRs0cUxZR&;f@yApkus>q6Q(}w{s*rsJ4l&HVZ+D$l9
zlBI90YAfu`WO+8*Noo;{N3(Sc5T-AT<;sK3A<S@y-f4)YcjY8~suyRPfcZG|SsX}D
zulmfp?YVaPRTDtn^B(WX=4C%3p6|N`5~c#qZ3bc|=|MM?%~!!0t3)7$pf^q1R1M5*
zus#S$%rHb!BuPD8j2c9>t2q#OpQ);8bgTj_s6wxY1X`%B?5rLfpBdRA4b=^N`O<IK
zDkQk-trSda*9939wqXq<OnZVE^(Zb4IY{clj}u>WHnT5?|H2%V^e5N~cd+haObMVG
z)+BOvMFQ-@2;w^x)opHnew3buxl}zH?ID>YM}Gt&$HYTcb1aq{Uuh0IRSlM}-_kgG
zH9?-i4wYiQ?d@<lX4L{Bbyo!)hk&cfAsGSWOGLXn<z)nZP&XP%LC#rfP&OkDB?5$b
zsTt~Pe3o5RMLg<MFyk|H>e;LR%=!dxUXtwsS~8!dK@=T%M%y0Q76`O4Tf}P%Peu59
z!$Qzc1G;ZZ@jfY?c{)x_LsoO4_TIxXw77z#PT2^citZA>U3|avMa3$5NAMTF>1Jli
z$6W56x}}koUr`_w#Sa1o9qkrcKwouj0Z@1_QEs<wGgfdXm61NN!B&}<n3JjF@5o!R
zGyr+MIt3?Uq}q{^Why4=3RQ}J&Cu;ij7I@N@_^N3DxLh_X397JnI*VkJAC!s2H87`
zjr<WOgn7SB53eiRD}TxfwoGqB#mu$-i1C8Pr}{fddl15kDavv|5Ixtn8(J(Y$(_U6
zp&JCMMPZ~*J)h6y4*#lR593#(5h<h({Qq>aUoYK9Z>EV3D@H*1h*xNHxL7@k9r*lM
zijvw(iQtEJ$@N_n?-f0Y_d~P>Y`tPo&XAXv#WLSYBb#zI$eGkG07W4!43{e20>wg>
z8dkAI1b<%5s)17ORbo^FVD6Nn0>0#o#7d;t4Y<guabLN<`w$QgPFoMG`joplIR}-t
ztEYRts|8`4<psL1@<7d#6Rh$PxPiqeRJQ_)jR}Uj0!4i%+|9WTv=+E++o82g9m&tp
zDqVMFgcoE<&m`cKW3|Y@MIML>cX3pyJ5?>W1+RPEXX66z1_p>0t_efd&f^^GRaPmU
zKX3S#|9?Rj9jFOyPyiFoTWcvSH66v49_jb9J~k;uGj{Zh2D(6_)6tYOY}IS3D%6-;
z6|(4EjIHCu{C&+0$%j^|ei3#|?gkU-XCo^nuUa#XL#ru8Jx68)?n$jLRa(Kqiv&rD
zFIbZ<iVrn&cAmKvUDu)CVsCbvpX=r+?9BsQVD+R}fW}FS)T|(t6S8Z%?v~+C?wWl&
z`~9MM$%7kS&(wnyYVtu=CR(voSqk!$8w8)*z#($VQiBMTA44;%=&M=G7}%)$m#-ci
zsnvzp`im_)IxU#hnBMZv3u%F|slm#<pzAP!asu_`eQZOXqP&<8{bVgU5;rz?6`EL(
zCzX5@rmR%Z1->Fw^5@ZIw~W-{+_Qi=v6N~p-|Q<@iC=Wr@f}@mdQur_`ra5!j}Nc^
zZ&W9Cyk4Z9QiueJY&*bQ5Fr8cRR<A}^|FUNQ-IizA%jpn-E5dqj1YgW83MfRvo-0H
zJwFdEkL#1oSaQd=Tg=TC_NEI2-;2_Kw9gX`0*ZkX15E4<{1~cJC)(n1B$L2tNc2(9
ztNK9Tg@>%_>7*)j$#2&>?aZ@E%q;H`i|3l!bfJ%v^<^iHc+W=JZBBDoKH6Jy#o?vO
zN^S9so#(w0LXLJ)DPi3r4Zz}j&Se(O*xV7^c~U&%6Uw?1O?_HQSPkP6t^+{$DIlYf
zS9!tLXWU71$C-!wjg@Fdcqp8cz&5H@3<9cD5Fa3!`T}LH(hGC`>aa#g^TFKbHXM;I
zB~prgN-?j}Z}EOmE_$P0^+MOmO%hi6YJ}PA!)UyEcM8ofd;$I>d2H~wtn}j9wZr$~
zl$4b=#2wq+r9@MqL3f){mi0*nV9j7Dmq>+#9b|?#l)Zo!$?=`P&NPM*1=R_ns(`7s
zB2k~lMcyv05la>wHEU=FyDQR4C$72$mH3mhJ9RvFv^&<9JG@qb4*_#o4s<$G-<c0i
z`bum~X>Rq5&+UdX+n!K$m?ih==3l5IwwnGty5e_ari!#bM>)K7Hp?^mN#ZB0%{#@A
z;LAkO%lJc@%5pMDiw)&WM?+-uoI)K8n&NNkGdGe?{*C0Wy6~v`$iMfCTJ-|NC^Xr$
z9ozIB*|vLq?9rPC6=3$U)r7mW!6cdDN?XkgI)UGaI7PIKUl6tK_Ew@@wb~#{^aq8u
zib8#E*w|4E`d`ewYgkh0`!<YOS(%ZWwA@i@*<{KzxtZKRWo2e&WvOY(lv9dCw2>qw
zFilO(m}=4)9V0b2rAQ`fDM||JG*)g<QA`n>${o5W#Wf1_+|K{^f8XbL-{*KfJs+M=
z9hR{cYu)#CU)On^*Ln6o1PIJ0#e+l99^d~tgk}ua&)%mzWlq*HQVrh!C^tE6GfudW
zim3ha@YrrFI~JiiK>wMUqS3AaXh${Rq5J71P_1<-;Y#05;L3o{hlVoDfEU`MA7J`|
z0Uz9sS>%PxL(xFE;u#7Be?c2i?(-+--@h`+;D%Zj$3;J~>0Q>RGy4wkGrd%X+Kmls
z!89ir4TJ5TWP&7c@YigUo8(;FzBpf`PxTE{fWj}GhCB`D_;+QSogiY5DJ<TXK08gQ
zsZKV_4ZCq@K6LM?p?^st_23aM1vhzvt3O<Cs96Ov|7B3l0f>?8_&e8R;V^~Kh*^_$
zxWln@r8~$OJ(Ub~0T@hc!kFIg?b_18-AM)NOb>=4T~AeYmE(Z!3Z7*?T8pnjXd1vL
zuK=HXj%y~>(^ftQZ>JAPsRABcELvs7t6Br(V{|iYJ-cQk@B!6EjE$!2H>fC4=@vw<
zP&s3ta}Gzw()(vB)Qm!4cf48oXt&O+@EJb#{HvlUSBI+Npz(R<ig4g<Ek5!T530QX
zNvmVf%bq0%S{+^gKdlb<2Bm20V};A@;e;Qh$rdqzY3tAKzq>V`arEWEk-JV>#~pXC
z)8BpaC;|bd{8s^!)f&xexRXP{4(H-fRL|uPi}>tuW;HW|L-aeH)*|-69qV#L-Q*$A
z(H`3tjvq|=IFwTm1~UXMu_y0*eM2n%Fi|T|-t%-Qj{O=>-$SpNN-qFuy@~oobZ*=s
zA-UdRL>UTy-9CSj9Zq-}<ZBP?(G4a2KK8kP`-i;QoI6`pB`@WkV@=72U)_Gvc>vgm
zd_M!|_45F;XymxANqGVgD&Eg>Pw!3+%K>C4u59^AHs#UW5g}_kaAhnH0jPtC`wmjs
zM2&Mtvorfyqm;J>;DOM%YvPB{*8Ip|%>4)U$yw(}2%YEjMk<GhItAX8r)Gdq215F?
z+6ca{-6>(<@rtSjQ(8qaWuoc+*gWfYZQ3#X)1W_FeB4Ie>q-MROCPR(up9Mv-Xh7o
zf}t{4oEU+4Dnk>^%IP9X#NJMoTk&a43lJH+T^_C0J^Z5ULb*Gjp5CGvDoE+%e))xs
zH3^{+&6eAGXMqbsy8nIW`d-zZ((%~$g&w^Hbn?}$Iv;CP79j<Z^WfuS1htuYh4>or
z-J6Q`;lZh-lCU80hoRA$tlH{=CqtoQF8=$zj)}mO*X&fzRgXV@Y4b=L?D?at_iLM3
zJngNfQS8hBh*)2`a(7p>g`F=@vmyb%!jJ)c_Wq3WoZ^9c5g)sHDAdt7;Ib#t@busZ
zKk}vUjKiXxZSF~h_Xgv!kC?E#^}bH<9ulrm5eoD9Bfq=cj%E+|HO6kqDsMYO*iu<E
zD*lFeEn&=wryiVn%Jq$lC?W(lm_qVTtTQC{Yqc4@H}gM)?RON1rUT{m;}T@Fo^I14
zEeM;$wa*{Jm_qHzK#h#0&2KR8a2)V3+Y1D(%=W(!axzTzcR7v{IchuaF3v(+oP~>T
zMNPu{miK_hd?szhJtGhn!Om-SBwB(7tkO%dS{#t$z$>P8T5js(sIT~#1@>-tyg`sw
zSKTPX2L$KrBN3wqgXh2z=j672i%-Y`%f$O-ZQ3c$giE}(YHn0}OwyOLuaoP$aGv(3
z##~`}uZWV!AKIucrY(ugRwlCgg2!u}YYL)x>!{zId4@M_`2EJZ=DUS}Lb(XN^o8y5
zV0{GJ@xy+bA6&oJS@7=AfqXz&`dehIJ+GPG=O%a_Ie*&Hx~IWXb**DIlxBhH@*wzk
zQaxmT$u;xK86{Cq4J2XsSc^FzyAf9~HfQ(-Ula<boPPBpZ9^4d?j=IAEmC_nOS2*n
zERZ?XI-b%*IQ!1dx3|o21f|Rl8t-+k&Bz}QMlEvOMza$J!uGq{-6)s{zQ!ya3q0el
z#-6CC?6$W_o)WJ-s;#~Pf|tI!l&Uifa`E9QBy5}BKHR?Q@X!|ZLo(Bnl2Hgv-Ls}7
zwqlU*xrIniDSE@ih29Hf+&VZ6r3IU!*T8At5bZrP2e})h2WQ&aPC&|Ewgc7eage6i
z^Wa@y4|L9uV7t#P?UNaHzFoX38cJo{OZJ-_0Hj>G{n-U+FGD#P06^Q${mS}7U;j#%
z2Z}7uy=%=v<=DxA{|^;Vta89h_EdR1Cg1=<lRBSSk&id6E|8-8T7hZ@)sFrYUmYWA
z*dUssp{Yxt!j>B8LTSl4=7F9mceIRTK)FctITA;B6OCF+$aa6=%zP#Z`GBB5VIk<h
zFjdBt;1-eaHi^8ya5OjoF!=9LZz!DJ#$LM@PAKYYy;?GWpU=#@l$m*X&&3ClahI5w
zxff+;eM$#P)1QjHKi%uo{xY@bqpH0CQqIJk9HIpmwGay@aac}OFx3Y_9!NP&F!L|-
zEch@+H)5AZmsDBn*E4)y)^j-AN6oe&r!KOHQ#PrE$u7H*^7Nq28RptC*P@&3vDj;`
z@(9^vC4&`NTmP`S@X7f6kzyjqyb6JA)8GE5#!au~MY#87RR>;bBa(@Z&;1OWtqTxz
z8&Et(R43*IYrrvAg-f;Pgl++IMr=6_llY9#f$zOE5uBMMZBN1?r&S*LlJR>@HKObz
zNjGE+gP~C|S@7l5SPX5G$YJ}L1Y*e1xOn9F)se9D0szNLn%Q73-CO7cXbcm8V$Qvu
zKT&I3b%yY4RNR~K3=TY5(LIwJa=0N))^<$jWcJ<XO5SsBLR?7Oslu9<X$OCf{t5Xh
zMWeT>lM_dRw@8`?V<m@#KLIK90qxfLi=}1!aH4VP(=jj{%1Edj?KMr#zh^)A@zDe4
z$}*p#;19kw#s=fHzh+hl=0v_*b*6w}H2py5ESO}pZIw3{P1FYDu<-8|Hq$yptTUxS
z;&JB#U%eL*(2zrQ&NcUZwO$FyA!Z&vet)!n>X(Rvhe8}<zTa;ZPtW+b5_yJ&h?eOE
zV|3^MvVYsc;jZXG*EvBpQ?ARRq<v{>>Ft^b>)og>0>-S@^g@DP)}-ws`yN3dM_nyb
z*3EuxCtEV|$6U`I+RmByaU)^|Xl1&9yJNuC)AA?chKEJt8BZwaM)CXm;*1QILg<w4
zmxj?v6P*-hygi;{e@N_>b6Y;m;+B>izkYw$$#a)?TePdzwu1%g2iveG?U$z);%oPr
z@RoAw&wsISXz6XTs}DcbGn?TP)N`?blV-#`-cx0ko~}MLe{?QTRQZlf-d_3F)G!M0
z{~F(7%poO6)Rz9NE_L!C?Cq?&;nO(ZKKTz&)r&GM`u!X|PD)xkNCULul`8A2<?xm9
z@s-7$PC1NKlw!fq2ByF8=c@WF{*aX@8gEN<3+T2lM_>S0o8TX5YLX1%$8TWW`Q2~>
zqgD?dkIkWg*OQR_A!xLg{3t5|Qzv65YV;LeX--dBWoK%VLqi0Qw)8sD^$Ftif-r*V
z)YFo2@hy=Hu$nc9r-895(Y!MQbX}H~Wu0v3;tag=->c5k82IEz1zvNmF`0L-y@lCY
z!FzCsn{E42_;-E9eIK_PPUe<ZRWUU=)a`F}qh8S~k~0e6IOT42W;9XzkTBZAk`Ihj
zcCNeo@JSHBTZw-Vfh6Ax&b4ai%X^3yGq&G9^v38=kyp&F^MDHe*+qj~(Gl$i`v3Gv
zwJa{f>=08>i<RdArAKdY)R6zE{gjmlGlpYY>pcao&bg)T_Vjaw1QB3dH!CZPLr(9H
zcos&vy606x@^wyzhx|46TgU$;CAZp|-U#{^!+(<)Sm+40KkKmiAse$4wjPo20o5v9
z5X)<t7z}LA!mg>3Xpd@k^v<G;VP;cSV6bhHQy(|5@B=J7C8GKlMVSJF;IS;srXJ2y
za;PUCqL2<jkj`Uz;~x6(DDtkP206)A7%ES9(9cgJRLHJ|?OT}nl<AhEl+VZEjM71h
zso6bX3{3D8I{B@nT=na$(!2IW<WuuXVJ?5>7oK0l!WRVvkIyG1^YY_w>;MY_Aespv
zur(gVtfn>7^k6$E9GI*rY?Xa*AjA}4Hbcb;nC+kl770qt>`{jveL@-d4tqpRH)8cv
z;rWEv_cxysM01`eT&|g>c9BCJT93WR{?t6{2CcEv=z{Zl8R(8AWNA8>6>6|O6aac_
zR_H3tVXPvs<&jBZ3(W~mlCp2d=#9)mVeIe`36f&y*#o8wzBbNZOxjNS4*HZTEB$At
z_?3t)g(gj-U5vAxT3!)=se@Jbf5gqsU_m)D3?apUt=i<5@<<zgxUfa#1XqmEm&1XF
zp!fBPZEZ3P8=9dE5e){T7jXI#ipvq`Nd1%1*rDR$0kNNKMYP)h3Hf1yRU(NrMI}cQ
zO3`|tCHfl{3TTHNn62PcYe|J3ypEML@s?Bd;1H-FtWMF5F@mPpS4VCT1fZ8NW$!RU
zKpRY89D1XPmLZ{N{*VQ?UKov9Jvx7Yd2udQa+{1bkiZX_P0Ardgyt6-D0UiS>BBF=
ztUy;;csfV3f~6=JiLPZPa6QPjEvOX~+=z3El%4u+OU`oY)dIY!OQSsIfN)af!;qh>
z>Z}T>w{m%PxoG_bT03d2&M;18T&!7jbAd|hVp`JAXLu<S)LEd$Up+yuOhcyf0O1Wt
z`Nn=$*>q9(#}t-XbgZB)r#;njO-F=iMpO@Zr9{hJ_CMeYDHr=^?4&W4g$@PLX<F*l
zu&zcIbOn~(6LIy1-(3OJ5?l-0^i3I{#n+ZS`T=63U@&7CLj_^nb$>4KHRhY1kgTNo
zJO3_~UoUbkPcQb7k@VZn6%7uAc$be)8%CKRP;XHx6O?9^&ce^M4|I-gydzsYpd|NV
ze@=u#8vO^T9zeR$TUt*)sBlg-5o~aL=hKXF6;&}dfMTR!n_`(L<0CYcNIdrqVW4(t
znhyZOo({tOox<P;&5t%JzSohRM8u^`iWc^$_NjlRc~G~i3mOc43-}5!CwpgxZ3>4{
zJqwGf9*2dEz0k*GmE)5Mr!I0b&bEZq+Z_)v8+1Ey_q`I&$?*5-vF3CWcVo-h@EyL4
zp<W*mPlwc$ly8XK8wlDa)p@YSrL-QbF;ITM0rA1%;>>xM1o!V0+QY1(oZ;yt?CLW@
zdopu5ki=bTZ25f`*Ar?F=y8ai@VzQ19l3#(c?l|IejCC(cxe}^kmlninAKb;12FvM
zZv2g?8m3}HN;7Ky`*x5CO6L{GZwS|Ugz6HQcrdnA{s}X|d!d2K$p{VBf38`J#FXmK
z?o<5;(I-Dj(MSoLfLyCWcXLLD2T+OG_AS2`g;Llj6(<3OX==k+#k(TrmI~YSkFMRW
z29z7&&{+iiI1W-H;q4^#Mw3NiRbxaeLvv|HOH~SMYjiyq&Mvx(K__{4u+TC3IvC9-
zDbi*3L-o+W$f9T2S~yOlPc$BpRz0jqqV7BgQMk3?z#6y~_<_@t>Bvo8?*67s6Yp|(
zO$*(OmsU2*SU);sg-{oQe&SoqR-jmwOwj>Zk?1!4A5n+S-+?N_&ze>Ig%}C}h+ZiC
zlyzYLVNl}qku14Cam2?jRf5o1!Y;x7vUf|QMECvYiYRLaz(`>l_oTEAmjVXxm&jU=
zMpC_Q#5|6San{&zd&znSrcXacjxmG4%bNt>F?^Dfaa=(kPN1Wrt2sh;d7yufBaRW{
zdj5}}sxyz#O9s3kf8YDEmbYxN!!YC6^XtTs`%d*$=M5k0e5nGlbOC(O2bvK3+(mwF
z!CNB?#OMP?hF!Z@6soXI!$#5(l;k1o(mgU1DvD;WKxa(4hf3>7d%G@@+zp?>^kz$Y
z#bKZPfw3BmNdxeoEgK6QLb(>Qlc;;7KOy_&F&d;DJa9RmV654oPQe)CEp3>Gx;H_Z
z(sI>V1?e`&cV|du*NLtwy>R|KJrSIs<zoSXExNg$2VN*#QZCNA9V~oNEs9Pp_T7s>
zwn*SDz{&-wOaQli3Hag`(7toIsj^dy3za3^1&WyFc2JOvOJ2vgW(jh9;{?I#l)H|(
zG5jzK;HCQWO9k`JPYuxE-6T}XR9>&lxi>p*?Am4o7Uxa|RoY$Zjb4?BjAizkS;6Cz
zmQdPHb~uH)HEEn0U=|B*5jDkr{P;)je9Y}95UV|&6X&<q!t&F>>5(pylU;~i|4#==
z8|2wRe`x=+A9h)A1(0PGHkIr3M5P7WDsUsbwCEfcg-e<vFA0TId5^HXyoJ-GuD)?G
zi;)zayNA<emwVtNQJNh|ln=#x`DvlhNLz&2L~s0&H~bj2l4}Bdv?YdM?u{*e0BZVp
z_su_%{fuB?3rZVf1EPzih0r+YG0`))cNVKB9-Ako`8axS?)fPA{y^yA`&&Q7WB1dC
z!ORO3M!&;@4*4Ymz0%dApjm}d@TDmNq<OJGj@>76_l_AR;+kmgbsb<{4NgB<rC9U3
zR81QR6ms{2>*`XDcijNet6!oAa+jFNx5zqYEzW!F)}Hng12@9=@IMQCY3(Qz+H%+h
zC|txr=>c%na4tbQD-vvhGoDd*Gj~JNX>u@w1o}!lo>FZ03d?7GJ^6vLMOnpRVG?&!
z-@(b?r!N}fY^pCIKeY~%CT}jB)Ce=fHg)qN{QCJL^i~hIroaGW%+_v<p=yVM!MMQ1
z#y#U-y<F5kVG_2XbM{Bah0@XOQ$^J^uP8;C>uv7o|6=@j4HMvxKxObEt$j%M70ghy
zD-VJNw3dnmB}&(nilDF_{>%U<9>Le^<gblIK>*WI-aJ#(NG>_zp8n&xS6;9FxP1n>
z>BM8?C||RJ4FcG8une;_?erH`fItM|-0&YDkkBtK_FPwS@v?(lvk_!U!v;8!WXsPR
zAqFh8KH3CXzAB?2rJwIO$|>zK=Guuc2VqgKsYKu!OSwDkmp%1$ZwkLRc(+bIy)l$N
zTp@u@VDI26yZ}Q@6%MX<hI&YyhA~#15^-IIr_EGha4I-!V|q<9Gd`c57<nCR-=5K6
z3S;+nk|hR`$bc*5WumM(#pwL`itwT!Px=i~DaaAtq8gcfA<9nRO0vmTfQ)CpV950p
zIj<`SCJm?uEvVHEYvJjZ2Gh{1N0Pfnj&{+jxgL+lO)qzE&*QzgKh<&i_s1b6hf8w0
zzh91P0RU60@|8N<(brnQ<6tM-6p~?j3U$xZH~FKn)6KXfnj^I3Ug@|Z#A9SEmR2D1
zHSy)tbsGbX`HUw!-8K8J9J1~=dl66fL{*?w7J*;|y^&NRo6!9=E%eHWc-k&T!Xv}3
z26Nb@^(#F7RocKp^BJp7g^X&JKtnZoqqJ4M(diRl3sWw3wKhSNw1G*J>`#m*i&bpO
zam606sM!eW0C-~nX-G_=xzHPr07M5@nXXz5dA(+&5Jv3Krj#)b+ekv)D^lUFOaIoB
zT5KEe?*WbpeO&v3vA{W#`RZreFR-0LuP8kX*3X98`aJKMk?1360!<^>Rj0AAUGlvJ
zE2<78Ndo2;SYuukLzm+AIy>ej7p?gGnzkMWf-a<1jTz+gPD)%prR%p!wN-&lv0MN$
z;yJ!LK@FX=0hQgep$=b<h1l<!deqdd{bfX>3v%6M9%>%_0umhFOB-}F-IC{Xcj#w$
zDW-mR$jCIYS2FjywB3}?Qu!(xQuD_f^o8U$^jdhLk%p{IKLlM%96{;#Ejmg^I+Ux9
zZC2J@j@$ew(K1tOHmea#=U4;d25gfA7&*#fCUYT)tepWGExG933bddNcYB`6m%vBZ
zoE-8CoS}rW^AO}vQ4s0+o=seB5<6R-c$FX>b9#!N;^-OjvmKQf%dXehZD2E$gQ*K_
z1_}zWx0PaVs=T1$M&?qQG4;D{GIm`fm@%GkdF0s3^&L?Mh;LYH3_K!QOsgN{zatio
z4p}^$d8fmV#W0HZWyJy?48OHeVb*aBy<qsTwqjMhYr7WZb2DnSJ9(Iw8n&pLRpCy6
zzBWHHSG3=9Vpibivy@(G?zUy8CNwDUua#8<A2qnANz<yNLQ!9po7o^{;;%1gq66_!
z&}nV;5~@CU$REM>`jgP03*D_jtJda>1g8JpyXd?3f>PNOW)6QtJc0cM(<S(TERqbh
zdMpMDlEtfFhB6p`x3B;|XKAZ2R|b>cRdH&S&lS#jm$X#1;EcY+BS{8yl`?e!*Cb*g
znD$-_w8Sq%;f>mdfe|EXEf7Zx_DXX!!<n1uMF_%nDlFL}9?0DQyeDx9mkY<f3%A0@
zdL=v7YxBh(ckdNs5Hto%eadgzisSJfBg&sZ46~vA$>SiKNa8@LQLPPKpSA{W;I~+s
zr3-40_NsQ3v_-uTkDG4c6|J0{x)>cwKUl}>bn+}3H$76dEJHQtYFt@B_`YwEBP}vf
z9XO-#(%jkk8Vl37p5GAf8{)CXToQOZx$5T{EWI&M14y|C+`k*9>(#XQA#i}_OItzJ
zgCr?`D=-;Ie%u7s2tGbNJn!yGQf<cU=%E4^E$dcjd}!M}taKZo>3*93+!)@}YwDLc
zgIyC(KZ*KZCvIUh2?{VmfVT5iy2{8<=9fmZrJ5+5lNP)vUt5%@)iWgEUXRfg<+RZB
zv-sX7N!;(CYSilLhbHOdcB3)lYrmX|%8E_S%x<VC%^8>m-goy0@R_?eprEm7_`A<)
z>(9zJK*aGX3}X4)LPTsJ;6^Ab)Ma4pGI2HM(}7dmz;MGWMa0PRiek8CIOZ-rVkLKT
znS{cYp;M--^xOgzsCX+OXVBz?f|=~@mj@EYV3X9Jx*a_{$f4+yP<B5dAUi9$+}-nW
zR6MFLMTPa$=$Zk++-2%~5Hn6GM!q5b0H(f601xqVD>fDU!ISGKQbt5Aw_YU5n9XRw
z(%Gh{znhbfT7wrKskwfw(>Jd#^2!DWPMiIzt(!VoMDm7dr|5*1on=v`cS|l#mm}P_
z{R>Ab{WU8A+iKZwa2*I6S%7%TSV7$Zv0MB=7}>y?M!KX@^<@_4N16gNY1^P%q6sO_
z5FfT($hmP*X;dwAYF~@5y_<Tu`1GkLD@~Vt^NUx)hvl!a=NdMGRXu{`81sfn#-ns3
zFI)o9AEY~}j6y#lq}q?vNz!6lGk$`u)x_cL>r+y(Qp0*^&Al_S4IKQFkcCk6F<!cF
zZEeE(*%jqw8O=|IQNLm#ZzSxH1&$JUGb)8<r*i9PSVwUgVKgz*g4N8sj9XmKvJbHB
zDTpnI+<qb24b)GOLk_^G=B(`NVTDPGBhW$-xx29Nu}QU|k*>>&rKQt)KPr5A=?LtR
zh9AKlOTZMQfN=|}-+)rNs2|WwsaqB7461D@C1fA`AWmTx1Sh*2%**TWHA7a<AtDF{
zDvv@!?5EtK4`II2zS+8kj3vS_(~Egvu++Abh~_$###4L1v$X=hng_11oA)y*iMN5K
zLu->fXWs#ITT*h3rSo$*i~a=G;WzyFAP7D)g4B;xhMD)E$sY9A4XYHtX1S8mIn0%j
z$AZU#2U)znaxT`X_hEGDji;Vlb;fj5MktML40w-t1$y$TVx*Dg2rlPM4OBninkaN%
z&olVU4b*Fj>12%E_z((;xy7XvG&R`VYLvAnfiW<7b%D&@>?APc{Qc>8b{@lr+jF*|
zy6R;^Lia`;XmGKSbqEC=2GgYI5irTf1V|0`oE@Wo4irTe?#N-kwQ%VPm{b~t`Jn-h
zW5I#@6~(umup0=P4GlMJn;JHy2&&shJYoc48-=rOQqr^jj4Kn~_diYeRCd{OpfzAv
zX(u?Dom5xU03SccFr&4Z;wC>2``sL}gmbRv4S=}XY)o_M##lwo*W8LG9<sQu+WDk^
zyukpPElR=^mXFnLZtmr>Z(KLd4UZ}A9~kg0$vE(*HUNFp;Dh&4DeBu`Ml}WdV(vEf
zyaYkLB*Yjr#(`9I3FSS>Jc_=?DUQAbJhTg)R3|n*8+S|PRZMWbd-L+ulKuh8-4A0s
zaih$B<JuzTbrv`{ZdVN>cY#ODq&NP_1pTGq0$wGiV8O1RstftOMyCKxUXv6uBP}L2
zFs&S8H8JGc<!-^k4{e8dx8!W6_EnLWDL&pDMR`UZg?)n8nMYbXo<+0hoGGcwaN}1}
zm<JUbbzW+k=@2<at_AqgZ?QUHc68c=_I3yXgCu2@9}pbilU7pZah4L5Yxfk!l5(I$
zvJbLMEE^4WNvNuKm_7;&0x!$}(#Mv1;$|R8QH;N4BK}~~u<1dd$mu9DYf%FMx|G$z
zgtzIu22`MSLzNzcd(BMAv~&WR_;*C!ij$uOdZd=@M=4Pql)Wu_ekVZ$59FH$WOyhm
zN}`VSiHC56nk!=~)p<pI_$+1cu#Q+#2@I<06$``k*VtPU9e2{gRzNbXk^w!=Rh`_G
zXhD$1X1oDGHyWd@Ph7C&*VHr^3b}gac=7pCWQu)ssm0k)j4Eh6o5dPp<BLa?b7N0}
z5VTkzWr7{%;y|zmw~cIAud?jb=!0f-OcMh<?gz4ybIH*bG`e}z5E@P*<r6R_kfyGL
z0>+P(NpXdE%?3!4%Jnbqi*(&zRnJnlr#k6*;+O%Mt^Cx-@$_$<|97CS|7svjgn)pt
zqPhkE@d>*%0#ro8dH~KR4{dzKe3NSRwcG}NFoOHx`n7HUJn*iH`D-Cpnep}#M+>AT
z(3M<PRjW#$plr^Jqio6iiw;D`-g}?D>uv9VQx?OU&(9f`kH1?gkBA{hb_tGq63Lgf
z!i~DD5%h=uk46MO^0h_yp`}aK6rNpSy)luzc4K1WQnJo`ht9&Cfq_Q+Qs?UD%|s&6
z=$cZgR6O}Uq;b{uOZ?S4p0yesJ5XwVx#ijIv}ezZ5RXxBTvX;g#rQcK2dC0M0SxOt
z<VeI5K|=Ow<#S(Uy$6@P;Civ*)mLj0=B+xPDsF4g{@nIk`)>>JSk^FNk$QuO*6xTN
zn^Bc$!`>h*f6ub_2Z$u(XZLq?jn6=?jxvw)k{c8r@>CA+rFj2S1HPAxeC+F=h~~Nm
z_D*#+Zk7)SN<=$N5SmSqixMD<J-GQz;FC_<v!;OB1ZownbLmbsQySPZ@tgbTecToq
zcFE9+&nXnl=|3$J4*f=6{aXKJGN{{*E^2ao=LhdH?iIHK2zVi~8BbhR=7$9sOSB@y
z(_Fvm-P~jav{$M8c;D&d&Y`f=elg@7mgkz^e)Zew{-O?$g?kY6P%IRYRK?}hn8<gy
zKlijz@?Hq!1jl>UZ5M>pAo#iwi)6h7;#BP1zv<3XN?*abBfyM7e^gs_0oY*&^eXAl
zaT2`MqwvXEAe62d;8mTguVQh$m(|yEu@=-A^Y8bpj;i?2%XpS=1?WtOtvdW)|6Nz3
z1R%~39Wub4JhyOSuxu?0WW5}DAy;H)pqt8))7DWOLLxW+w)Or&;uCJ&{S~>tTg8=T
zWt=Sf1u(UWN76$=rk7EgTIR*NZFcRta6<3Y`|<Tt_P}4lG3Vt)`*Px^z%+_&>d<$2
z4=s0vU-JqGu!_g>hyGRK@tcO7(!@h3*d~VGpO>({unvBss1A7=o@(Ipd$@wsKawf!
zUY@<LCV9R7-`m?(AKUlDYFmj8XdS86xxVjO(5(C&oNv0x%3kpoBQ@~8a}%VEuPC?j
zsdpP@W{~wTW8n`&13tBA#A4<9OG~Ro*Pzo)ZydLdYXP#V%Ip;IfdiW=SbevsraECI
zsaT!wz&@9}e&qg_F>DkmBh&k8^yo8@A?smoVg9@Ct{VgSGepzY@O_BcX&CKMU*E1W
zuvY$Uvexs*6zTp9fmP&v+%_4?oZ_4R$bNk2bf;zb!)vvcCzE{<!C==KgoF&x!MOUF
zo1~@AGE$-h|C^`5zRfS0%`}_q#lIXdp$f6@wzISDy}IJJT}vi`t`rus{@u5NY?*lI
z`UMAUL|om5^U1q@eo;#o=M3kje-OKsI#u!e!@^E+I)1&!x;RB_TOaYzTw7HF#BGqu
z40Q^TCC8p^?>89gT|s>8*UuQ<agZoGc-GUlNwVtArl65kX<=S?l=i1<=Xago{9m*U
z193kHs5$f{Y}29Tb%{y|e4V&VxPQZ|WbyQ{i+q!P57+<U53S4IRtEq-!#fr4HWya@
zS=O=dsJ2Q5M9`KjN)aU4v)FW^q)+z#%aCrJ4^LdIjIFM%dX=_IUQR5AUrARK*St(P
z8CjGNnOl(g-MWJN&Oej42>|!O6L25Sf%Exy@qn!W*Jm(mKOEA=SVrrpt{g1ek^Vc2
z<s`XvMI6%h<FW0(1h>V-*>fG<ng0+v=pMy#FMN$n{a3mY`2je%ed-lYFYZc{{V}9v
z-QHNac67yu{pOvlcUhAail#5`rN{T5GZcsISvFYq`1&uW`9_K#d`v-FT^b6S;jUY9
ziy5$6LG#<~+xh6pjOF<(WzZET9bggj+ar}le0uL)uZ;4P>EA7Wc@=PGHxPhD&~14y
zF!u`ggWHb+d7Uq}ey1N}l3wALNRIQ!40xmT4fKa1CbiUsPX~y%ubU?4soBrewMzRe
z7rHn$g}I$ceED@Zwrm>+D<B}j_JdXR#j14=lv4@d_2uChreDjP6*fC`a*lKr{Vurt
z>@oiQy^r_e+y0!kHogXWkAMA#;R!+-c>gm1wM+D5v4miwD2|M6OmZm4USOtPYQIup
z)$ZslSxH-3#qmFE<ZW}wshPj`?%N8-uj`wB$6fljKYl<wG_BN9zdTc$VD_8eWXi(9
zzs|l)-E!v*35sdi*|_D+x(C#qt>&E=7q9Jjt98)<kCBRB|0|sSC#wFduk@|!e}9Uq
z8DMWjfTwkdegO?{2AW6VkZ`z~3DvbqR;eOnJ`%GbDh6gr-{Fo69eL*Ct`RBGZqr7i
z^FaLw49OS_goZ^vGU;+0VEsTmKeF#3v7pZMN?7vCOUP~#d}k-%<OBWcXf<e9<}NzM
zw-?1D|4;n&zn(l6;5c4prI@=3U~BX$inbCD?_o_`JANuywHHDsa<2maIDVU}<CVeD
zUntWu+jQ0USuz(=<>_%CQn|3b(KgLvbgTA1#Pbp7W6sB1+dd_z+_|G|=Z-h$&wAVZ
z@!(CnBSH*rpF~Omve<_;fM?p5E=8%o$Ioc>4bfY3CF(dopauR2gw(Sjq%IJY{@`g|
zrVU7{H7PQQ;UcZPl6@D@4hXNs)y&5*Q{d{@fC6SS*wfvUAG_^mg2*Ib3$rfyX{qNK
z^FSaf_~bNhD6%(Z-s3%6?~d!IJ9CdMlNR=Z_hXG+)C+!5+%!lUiD;ef$I49jk|dgG
zZPx{r*N9Kf^a_GF;O3UPl7Z3rec~=SP>}ucQ`VUqWnn>MJEF3BpN|!s=mr8gK2Nya
z7xMqmzN5}uGzG6A$t$GDwbb3}ERcnpt4>2+NnEglR@|+Tu`Gdxk#iDB7A-6T0u;+7
z#}omt@<PC<)7`A6_?Y?JM_HRE#i8Y_C+|vF&&F%7zeJ1zX#=o~kSZfjU`iKpS@A%b
zu70T5sB(tSoMYiJsBSLEbELSnW2Og+%eftqBd39;O(O1P=XSDLpTAFa&urv&PD(Gy
zk!2$12lPhg*mWRBcWPFs7XWJ87)#x>unzWljjNcR^c+S5?@|hcOjR9|GExA9+h7$b
z3f}zb_oXr4N5%3IXY3Y$yO-`y0D8!qh<%i2HDL`n`iUnSx@YV%V)2~wLQv<}YIIL7
zkiqZ+W~1g$98`+Ei0l(JVqfqkClshw+J-K!zl@Y3wr?pm$sjY4xW*CYN*FB&p8eeH
zmv#(}?IBO=22%?B?hc`mVG}M5<_oU4p;H66pqDyd+(4CPw0O)Lcy9m2#|WzMK67t#
zYReDz4>Wcr@7WN5xRc<q=Wjrl)KaYi>*iPR1>a+A;GIyNz|=)$h?TlDd!T|LbaIui
ztt{{kCkMdzaB-_RbSjH@xftf1?yv$XR_m7Mlu(kp4wAj|YQV(1oGG^=-1tGf;n-Gf
z$V8)iW`O{}ADR_4R{e(qkAzGR2TtaVAQO$jN501C!06rkpuc0g8*GGA=!Q*W;;E-H
z_U$p59+8Y&3Ddv=_RSL1Tr)isDZa$qTj~18{U`+LR3sLPnN}IO9O~eNqEEo61sgca
zUl^V1y4dM0l=`Lh1~YD>%O<5Yb-mM*Gr08Z^BMTKXCJ&at9z;+6phXQY}jrS;Ow0F
zRIe6617%yIH+}diu1ZI>jwFlWe*+%$(G}1|1|ItA-2jRB=wzHO7hBRtA?$voI6S{g
z;WQiH>x4C+R0fHtxVZdC9MSa=uVi1MkFabe&TYm0eJ>F+btrfvaJ>e3;tLKhQE3L}
znw#`i&;3$3#e+nLxd+S7dKZ9P<(Q(XJg<0g+mD9*K(%lv_>iS;$);ROCxq&&I-h=?
z4F-B&;F|UPhg;=lP^*BqvSG{UJncbg7$ro|A^ztJ-t}X)1Rq?UTY?w4h%uFgLwnl|
zqFga~H_m7E)`)+u^ePz>DKj5ink_B|tvQCu&}}3}ehO&ai(u3UyN}((0(g?x^s^wP
zsR0Q`i}e+H41t}WLC70G4%eA*_P$!&j(;3giyl~0S3WRdy7ZA**W)_T--_j_#G(&T
z0mG<)2$j2=W=$f%I=!hNV!h7w0deVBJT}dbaSd=eR7N{Bt4tJjUckd%*i3U&*EBd#
zeR=@T&hM5Ooix%xR@(}gNJkXxRRmq2p?(?QKOV!bR;?RO60+IkoT~H#kSOUQkccMy
zP*`4A`ckJu0u2NGR$HLzA@Eb#(TwO{Z|nv_%bPHuWN+NZ`<XHD;5all=>zSZlVRoS
zN=Ct$F-c*jyrGcXa$0}?>p`fwv0ib6p;+?%>j@~VW;les6wcbic~$r5tAMud)pLb$
zE>S8!;C-G)v;u6xH@(>5d|(G=<9g)j58x78G|T%r!Q`3rn4(4ydorH-;Db*0;V)~1
z;yc+7CzoEYuGSx$YrpQ=da*jjcjL|1*c6<WYONYDy@vsa$C(q<y8vT7pwxd={iI<N
zoFa2+@k^b*nDQhD9|(<SXQiI&#cZV1G@}TvwkcGLVx}>iY`2nmg6SnJP^_sbfTNm^
zls+4aCBD|_4gRcJ8=+bCRVp_O63rs}!es)bsby9P!Q^>lEF&I}I(_j)!9H<Ujqd@q
zW4I0|{@f;eZ@MY;>zL8AJKkGGs7~V_0)55ujWw5$sn~PveFMrz>MD2OApx98G<q<5
z1eFeqc)Vp9^dnH8kVu^IU5U2m%yv5w!$Wyp9AA%%=!?TuFA^q>rHyOCw*ecVzx_TU
zZlsT};Y~c%x<qMBqPxFBrv(i13*>H1v{fBWI3r5dvC1B*Hv0p9-Z(YFA@7-_2nf)d
zL}d>>t`0crdv&|%#oX)BXH&&LqVPsq%0Sgxf|3V9Ri$dpOIQvKXjZ;i_;Hk1g-#?%
zJGhq>ZjE6-Ks|znHIPdxJIr2Zx58Ud&%D!M4zyq!wsg%9<hH&Lm_SS~*Gc8@kQ1&A
z52XW4cpo{##}A=?t}dew7c!wMV747VE0PS$O^Pg)VW~9hHB$#~snt784OL`GHA&ZH
z)5g>vAkI;s=*h(wMb_XfFjoC5I2PtZlJV^KdBg7rzEI0Ou=P`CZ7QF4PLa)yB1hQD
zMOhrWrXN+aQjt#k3pip%DDF!D;-oyN$jp1}oi~<!B+<D}$$xTcaKdtP569Pj)@(*N
zT~s3^PJQMP2&bkpUJPu?jQ0R0JSu%4hfG}9r9uO%7{(pm3ljlJ2i%nXudZ3?suN_?
zGD^Y#fBxsW%wCi@J1HfJ>&F^bjAaT3_llGAYvWFhU27m}3Orc1OiZ?F&9tfv6E(X3
zES#e^IyS71k|1a%a3C0r10X|;<(66nF2#|Nj<Ha9yb~o<*`IDh-<AQ>qNNmGV@y^6
zW+Rsnw@^x?`G!x%T>Hp*wLQPK7C67esKG$u@aO4)31tnKSKUl|AIn%&bGrqaS~b!^
zug0)l3N#<Jn$ph=c}g)97`p@qrc<p+mq*x^aQngMLRDZv*y&Mmy}bNx_S;xu^V`_4
z!eT!c@lowD9&D8*2bIdQzrc`)jUU8TTBz@WnT(T~_Yytsb(y^_A7ce4=6}FHr<j~p
zSo}TYs=y^s-Prxq<8TP-_QnUn3g6arU^@3uVWCNlk)6nxzObD%GqDW;Xp?plxg31<
zv;sHjH-cND5iy_7#naCt`#-k=zaL%_IL{8iF$JN78c}sjj7eZ^MB;4Q052U3Z2koC
zQdFJ*5{zwQJ2RemZ($LhP-qfd!spP$Bi->>4DSq(@$^yttxm>9pqJC$HW)&v*XXoI
zD`4`L0s=6;l%*uAqJ}nixC1llp*>Q^S_sPk!VQwK;PZJ71u<vHPw_Ruf13VUEpp9$
z$Ex}@VAwoGWn`yWW2LSJL5f*9Rk*MdWT07%=p^Q9cVAXyaLwIGjUjxs`Io3iKh{7E
zRYfq9Uu#)e0*|!N9PhV*2{8YHNR9Q04*!GowcXKmTc^<x&rg*V0$*8>(_@Qx{X)%}
z5;fR+5$v0Qz}v9GmXGbPl#v-tl9gk$m7Uaxk!fAkp7iG0tQ5|Q15D{aXt-vr<hI5L
zQVAo)HqNHoT>`S#{UN$mz4kONCwFg1&a2m$?O;QItfKKUoj`)OMcl-ofR}ZrRB}s#
zq?xI(3cNzi12Yh#7^~+Tk&3j2QAUY5q_6}a9$%pOzBg=SUk7mDu;1zXLP)l7JG^5e
zMmW?T7Ha=Q`Pec9Vro{Df|qy*mO=xKIFp9;8erY+z8{(fZJ0^-Q^QPszY>ZyKV61i
z9o2cG_<%z1ZkCK;G+HZCI=?#GF<xt2fXQ7~RFgm0M~FR9lYOM%T-+tCuUPr11wC3X
z@3{s@@UPMIFqd!%Q1~%mkx@bj)6Ejx!`IYeQztobf0mI;W^np2{b;Yd$Bn0>R|oO$
z%13`0C$b_lYui(%XG3&-P-{oCOyhO_a?}!1>{>9J;g}KBO6qPXtkfB_Uzfl+dlZaY
zvuzYs@ykxGk2E7d6w*-@w27PisSD4MA8+aXvbCJ`x%!^;#G?&o9qwqUeMgy4%pAy#
zd^@8v-27p)1#39{xNxRT*WOcLnsQ5H*N>a1>8-BV6H_+SKPoYamRogA`#;)+zDVS-
zFs;4`_#rzpw~%vbOA-Gv2Qul6Aa3FP;B7d8M2G6Be!L07rf{ZHEKyu&jz66uS>xz4
zXx)TamvZU`W<)Tb#1(%km7xsBgNswAqjQ}<AAi|P-9tB8c_sp1IM5f|)cK>%r=G>k
z6rAEOQsh`gxN?U&uVFn+NMGvYqh~84HDyG74S;6m%X62ro(zQ$Ot(Ch(hVYG8<?17
z?;pr;t0rnCDdas%t7|&@qOuIeM7^fBu8E!_=l~H^td9U&_Z#BC*n%Zp>ZU0EhG6<4
zX#0W}T|F-3VBxLr+Eqqf9{!DJMT_$9u^O831O6_Uh~+1qS$><hD#zP|ABNNQl1>na
zRvy0Y`yTDUZE~`f`9CAo{e%?J|JT(cc2k1^Sjgvq1lKJlbQFgIKO6)|yFSH7K(}bH
z>mPz+Wak;60lb^4HG)bJis9q@Bk<Lj0=(f^?4ukh8yN)aybcgsyiW&R0c%iM-g5KG
zoDQwe_C4aeTYL7i#(MSQ{u>>{hPSJ17uz{s#{k_};sdeebg<05)n#0K3GC8H+XUD&
zKGdjQaNb%A=IOU)>a7o*N@Bg@^^yr0U3f4$)0#3<7bK4!I5lh6ri;e-+IpqQJ_mM}
zJ+4R0H+@5BR)A7-8BJJ5BI`2xK>d}eG|n=qYz=2qoqN!a%!0zMA8$V_bSILZM!6im
z9WccAt9sSI{jIRRkSly+eo^Zm{mUeeCtrgHJ)NrFak@f2gnT#vwUgW(I^V7C__Nf;
zf4>#yikDSsL8;x=pZ3Ok{&%5*;?SYPfP|VNzY3tamoRyRd5f;&z7tB9+4AXTlp2j;
zqm+?uicCeHg(T@y(JYsJy=0c|F(@WYW$|oU#K|?>UD<tMHssxrmL2(G-!r6h?pf?>
zTC)<l3xH(~Yb10I?=>k6g_zQqYTlz(N7K{840^aLWjJFM25M#et@zo}NMTWyjZ2+j
z?EnX~Npm(Bm(e6$rRRqZw&nX>Cq~fS#TS%;6Qme~&e#9ky3QzRauD1y69lwWnuxxd
z)$oJnJ?}-00G*1`ou17N+1;hW6Rt{0$jJHk1&`a-RadBQX&e;GZ({1s6yv-d9$qcO
zuMHa=WA%;CqXzD>^T(9|yUp9>$H1p{ssSV5EDrFTTX{e+Y!Ez^uvLnP+l*V$=ye1W
zOS4`_Gq#b1^W3RK{?~EZI+4>rs7pXY7m%twCfrW;-u}7g!px2HH=G;_x}3IDA;A8K
zXoqbARYoaFplY9|BEUKewp33z5vml-nX+n<RS~2c!)k3G(ZIg$i;fuqBM1D}QL^^c
zcTaAgCAbaR&-%EXiWYTWKu?~nz5l6Y>PLk8gc5YX6Ryw(cooZ2r6>bU52~^zLjzQ3
zT4T!#^WYGH>DwVxZ?vyhNEd4(ueS4J57n-0qS`gAbn~5eamD!gs^*NL3jDd!(_`Nc
z@$;jmf7Vhsfr{mu@Lve&PmoGX#KqkPJu2~&FMAv>ebBTsbxg$(8C`ZssqQ{TMJv}Y
z`_*gXjz7b<>vtENxoM=O>giat6aBXaUaWm=j`_G(G%mg3>)2%j+(W^^xBZU6k0Tjc
z*KJ}p9WydMzv+a*WuRg^1~pq^lO@RTd#6AzQ|cH^-Znb%xNmtt0N?Jrr9a&Jh4N!F
zf;`7me2)2s2m`3nXz^nt)VFw23fUSx5H5c`ObOStwYM<UyCS=_=E1&Qh6R6%r#E`?
zCR^wPKlM@i+O67B=Kt4x=Nkg6d4`z7!49^n{6OV2DE`)!(Z?hQ7H7&Ax8>HG>SW&J
zZv@`_3o2>1<r%Q5ZRvll<6QuPBQ-cR0eKVm`5QvC8}-rUzrVUE7%5GTW-hGkqmP{c
z1{fniru-0yPoH>S0L<8kt*1*J)CKgJchLEGY+^QIAxE<k9P-~Sp3anSi2kp%H@JD8
zyVh>h<ip*l&%c99f<))dN7`RZ<%KNXe3g4Rn7sYBS)?-q0IB6w^uNL|CiH$A7!;Nz
zPN2t80+ez9+4Tio#i{_$0_?>~6ok|~W<q{o9Jm~SV2c+!2i&s%q63q^g)R5!<Gzrm
z>KkGn)Lz2J$iFK!D?mQ|T`0gblX#QUvvhT2ySR1n7fSy77xcgad;sdJgi(6GY!o;D
zf*u7_5jkL3%?|vp1K7WN=oi`-+<ieW?PPl*==xMDVpM65Yyk}@4nXum;yVQ09<-7o
zrd0(#BXl(rE#Rq-GAjWj3}#cYs^4AY0OmPgxv+;mUZ@}==;<u5s5E6vh{#aog($!O
zhNw&XhUk3`PiW}s6Iv5IC=B_}J})^~AwQ=Ld_(xtS9a+9g93=me-<Tb3N3B_$Ap7k
z(8kl}Jwa0)jIL97s^4oS!Lb$L1mgO$$`){q>zqX#=l@;G|M^Kv4NC6DKX_kacvVbw
z&b5qhh*B*7S1nDFqn5@QC=-1{{No*=GIG<j=P0YbA$tB9nMc6q7kgg+6G*$*0aJq)
zJ$xI$jH$dn7tNnK$@H1h<ByTx90ek;A6H4L>FNQtrYhw%`|CHv#AD<u-tcdzFBxdq
zmZAQweKHH&C{n6M(0u5Py}U1}gAtnd$l-QPhQb~}|7~`07yoO^{?$vf3I!rsruq)J
zUa_fPQoj0$YLm=|Zb~s7B4Qiq>ojICL!*zq-C*8HBHM-f`9rFhtXNu|lojLI9Z`KL
z8lW>2oIrm}@5a+1_`+yyQ68B#jCz1mtY8C4Wlb7d4lv~uKWW4_#E-QItV|yVZ$YY!
za0B4NYnV;#n#<7$y1<GD9Y)P><yB)f7T6@FN;V3<>utbw{S7;FjDCTxa;58H|7q^f
z0>B=4sg2*$NAop(0F{r{7}LL|Ki1Z40_!p1C&1v|uLf%x8dHHK{Mlr;j%qJhZc7^h
z0Fu5C4p{6$_!QtnIRM=GR-k4jcwzfZl&wIUsTisRG@ejI+~>(ouxVQVovk^~Odnbg
zzr#NPG5HOfvTaHj1VA;KlWK3rEPLsw1}Ogdx&(Bp0_KqkfM%g1B70a7J@PnRs$)0G
z;X{$6^1^Pa6FqKCPE2t;eeaA`@K=rd6nJG~y4q+)OJlZ}c1=d840#%0$$SM=dzcMy
z>G0>*ZOo*hoiJX8GuSViK(17sgNkpvp9~+)rG;E)%}%s0`#_0k30v9iI7$sFIGlwO
zR@uD^KfG{0J%V1)A2}z|Y<ej|c!-qMV8#3j-t7}qHS#qUMSD*}(-TmuRY--W&jbD=
zw;tMR*tP`&d?$Is6W#aq=#4*2G+4p+WbmYFr>t#Ph>zlAb?zB_94qolSfq)|XU`sT
zhTCz(7hWHj%lN!Nr8l}_bbS{vDswIzIMSXJFto9ox?c*0bfO@3s_HZk>EP6sli?)@
zCfzJoxs5QE4dPvOZj<Xunfg(|dfl~|znk2ib_%`fQv-?yx?tz{utl+)1%jF}c+H;l
zi;Q^7E$SSa6*GairojRpn)4-@`#^+7%y*C|)jjkv{+&}J6vir}6w7ondXcNfgR_*^
z3d=$wdt;B3KE*I1icUv;=8LkYGRop<+2At)8zd41|2V=2iqA>hT?_iOHs)%Y2kmV(
zI*saw2Z$Kmau%sgxq70D7)A(Th4V4XvYMG3RAXq!X=vHq`pZwl`l1MV6H4RxsREgW
zF<(Gj{;Q*}kv7<{3BA;~#hA#&Em(U=K_eJBDS{S;k(0bK$^<{LC6@g<N3wiE9Fs=Q
z#mwvZG}f9l>v=YzEHO@DW0>_d3Xk&K($Py%mnftI-Ky~LybTUj_91?qaxi#iiH$(Q
zRw&gvTO|kfl}_Kqf!*-)^jb=(G$P%%jS|xA3W#vHMC|I;+j9HRaAL^5PTF_W0}$>u
z*<*=pufLyS9hkvPdgkb#vGZ8nf>Z0STA%4vb1DNc+^}w8IR(8N&R94}dk3BpAFBmF
zIQ4)pj!B=ShC^*KuN3(#C+)jDp_ANS8koT)5u_okL%V`T@4<O94Eg7(ZtG58Rqe&c
z0NUh10HXH<2g^_DCzy2<w~>e@RKH1x2r!xffNUyCoE?mlF<-M&va*Nne0j63nx&JB
zu~r?0veGvSowQ8E(YbrSde(4yX8y6C^>7Gz=Q=K)I*Qa@+}I$_)x=C{6;iM`HH#N9
zNRWD^aIe#^KY?+AV{jc%-$bsFL@C$aD8FGj5w^(GG95E@uGsuI^GmyT?{xH_*Rjf~
z`Z}S!TwX@9sX@S2@hEeKQR?<1oo~#_?$sKU-%YvV`uyXmpe0YPtoRemX~apVRTki-
zF7tv=H@TaKOW(ODqu`XQQa|Ka?9xZOU?7d$nhhK}PO2Z`*JTrE_T3y*I>xMvj9!bg
z@o{)sB94r`#H;&Z@SWDn%)p<JZvht)r&?$IFLqW6f0h>IDdtJKFW^-zBYeQaTu-%u
z-d7b+j)+bv0A*NNU2!HaDt0=(O77RJ*>+#DuWPC}E2!=(i*v)O_3-mbyC3Ti^Qhfm
z*<At8r}B{vF#FNRODe)jmowR8uGgx<m%mcfDWjl<8oftPBlKp=f?JcRK8gni6{r;Q
z!QouPqaEBmK;mWS!L=>Vd!iTY7UI$)<3XS5&4M`%<k65HR*aQ;CDOK1ZQxYMUzv{6
zr`WZkmg4wxz(uLbBcwSq%u47$-B3#XK|$iz<C?=Z0O~7;XY5tzsmD$x*ZUmrqVBbK
zoLC@)?!Vt3kFB=XQ37d>#9EYR=V`DhF}$DEhZ`Og@93_YHl$j10`-upKWrp~;6pTV
ztN}i@svkouDBhA%u=(N0y9>1ee^?n``mY)3VDxPXbQ}rxUiIoZ3FPmmRoo=GQyX|w
z<y1`Zl1fr!T?{@}kFt!FG00Zg5q)+maExe=7@wZ1oQ%K##qv`82-9c~oi^>1v1NX~
znNt#Nzg7DSFi!-yBYl;|ntBON9|rXwbA`&RT(t*Kd*o3f{tyz1NiG9lAy`C?t8Z~5
z1erwHT=p~<#nfc|uqV7YC}c3oG^vM`!D<%lMpf_th`%@@cZdHC;fz*-wCwZPZj=G=
z3`JD~?Jh%QuTZtu(IRj-OYQ_|3tosPX!;6bVL3a0!j$;o{J<%w_hs#o0%yjEUkc5&
z<5Tv#D#ogbFMWhy`<dYBM6Ms<TK0ig7qu3^w$ld<EI;08uBH_WM`^wTmFdi5<e$uB
zI&`vqAVL};7s>qKt&frv-c@L^TdQeip{>A-xAv5G95AAy_?@Wfn)wGnf~8HFS=ZJM
zs+=mis90&P9e>EQlKY&rk}t)s#8E(ocA%GQ|2Qg}qBBvW+TQ~<2nHOoF$?D4kS&El
z!qnaskF{PzZecqeIcwp2O&`rg{mOl_!b;SFGuLcG8L*rC8?5o#0T83v&d-n&<Kh~T
zrgD-_uywsig=4{mMfaY;5q=O$lFU*$VG;|*=6?u|bZ##IYIBu1dgBKibi%F9uFZ$O
zRP$%-X<)c!3`JeTuEJP*#})fJqRnG^FOSnro%D81u`H6BYom-!dVL)u9VVxKLTks<
zj%b>BPyl+sQ@Ku^kFnJV0n|eemoY3<SC|45iFq_5Et~u~or+S>PbrqOpThV33@8IW
z6+O{<M{s~0x2@L+4fv}zolY#nkP2=$Im1!nE9L3KOwZnU><Ja<o9cjW+woZdZP$W%
zL?D&YIG@Qbh>AVWlu6d8Y!tcex82ck^m868_HB+G$ygPr@JqVrlxuLkpquljyRQ^b
z#AzV|k=DJ@_P8U2T+AgTlQ(>uXTckOK5yH~V+?HqN6tkRHeGo~ktMKLgEi1}WTTo(
z2d!`^weO2Dyc;Ev4ZDErrs|vmCB5-0ZteThQuwz~f0w&?y|XW!nCl)C5uC^3HvghC
zvsuxm%mZ7p>M`u1*h|DI&DBf|3cmw35xfJ+WYRUSKqr!EM71r-*fJp>+6XOADWZu`
zYn?p2nzKXMIWhTrieNjze0)RNciW@m>YgO6*ZyZ8xW8-k#xqzV3f{6zBB;XxkoXjI
zz8-W1{X@nrcfdqNB0rd!?hd}m%FNvDJ3=Vahf@wJkV)=7`IIIPCkKwjfe_@{#wQc=
zq1|?}jQ`Qxm%lZ2_1gy#DNu+LP(g^+SwvpTbc;Z=C`c*B5i|%XB0`9mT0x?O92@`@
zk%|>6Rw5#UVn|T}79kPBP^-ug2^fS7RArPCgm5G$@qTE(&wcOrdEP(Z{+Ne{oSd`w
z+55BCTA#ISsUmdhoD<u_V5+%^f_Z>6HBEh1$-FGI{zmlhT|I<962q{=!%)+i=t-;|
zA1qVZvT=_Y^BzT^OK3pA$hJ7zrsZvJ7xj=0PF-FtJ)iR+Mrb2y_w<V@WaP5uaPhg!
zell(~rkpyh|C*JkH%UPq>JfYW+}EtqZBjOJ8xP~w%P8VZGu-b{$GQ>j9yG5?HI~ku
z!)whDWPZLc+AVKYM@8mb#_qs;y6}s~ofEA2J=<z;5hY_#5sa>aiQyNfZ$|6^Hp(QG
zzpE3SMU3K|X7>(?EQL#PW3U!s<*2r&Da^l7^|dzc9IQq_oK2UfpZd$j?QTI!!X2z?
zuY^4>(ff)rq&H%x$K^Ehit3hRW3&}cC7f5BCnA)V+0(B#=|Thai{2?lo9mf&Y=?4K
z?NlU_Xwo8lg$l70C9mju|E|;1r;zp42QkM3JurRrbQz;6A#a(moxi;x3TP?wkRVBa
z`D1B(+Dn2*W>13NVg(H8IZhvm;OV1v!vjc09D9gKx?ETo%IXxFvm6>Zi`2yQiP)9?
zM^)$v!9A=%Ma(FmnDz}71WH{u2Ci%kc*%cX5$N$EcF(}WnCb0h23Ww%&*tf0a8aKz
zY%Oz?hTag<77LB^PoWlpMk%au6}LWbRhNDlZjD8=w?-I#L}b(6X=(_3KI`dM5^WuL
zwTP7}-<Gr>cuQ8`TK)Kc{S{C6K<P2mn{0-aX^!p;o1|<#PZBUklx6q^lzdTe0rE_+
z2dz!W=fY(J^M-%$v8<=(zAZ*en}qHHRM3k%Telxnd**)Kl~H!Pdg)72z{{*QLm9^e
zwyQaa;=a6sT;DnekH#q4rHoTuV(xj5UBkk;Gr?^aMYFu^V{Dqz*L8>)_xLHCW$c|O
zH~oHvZtFq!Q-OU2`P9v&gIQqN8__$MP#JtRnXT3ynhDT7%Ewme(jc-@)~`XN`UL|V
z@0uD2<x^RzY2sEAc6?Xok)@2%3>)S=_69YQ;S%T&;&#DxvNHWX4X{_K)l`BsD90*0
z!FiLxG#^dWTik)+y3PI)qbZoF&V1;Eht>}oaX%|Yt}<=}+b{Pn&T>|^IAAxk=m6Fn
zhE6p)nGWigNO=`+1d{izA1k)S-~3^JQK>3mG^!yuw@gq%;2_XDf++a3%3$1b?K|a*
zn_8bCj!6f5Df%+>nUb7JGV$C1zT$OR7(Y0R<y6DCCu4Xoflg6@+^QGu8$0zPK*vd1
zwzY$|JX1_vpP9tRDyJHj*ozc$%pI%}m-fp|FlJMqo$iwBv0K=~EfTg*0m1}R>0fa>
z-c6^Vii?^?0mT#(tMn-<J~6DeroCd??>r>U2A7}s7j0k9cK&<<+e!Pq{t39J$Vbdo
zW9Ha0O(o{Y!<Tm95e0#KY)>ykXrbn$sO;RN3aZ@gifSya?@M*mxiNm+tG?NtaV4&m
zopJdI5i1KKW3BQJeMn}X-ehZUKND~_iflpoDPXMC5Vlgio?jddnF=l;4jBRaq?5H_
z<91}|2IF~mtSRFQ?0lzHW&sWxqa*X)zTKxxbxSaPLK0*HOwol~WzEPXN!``TFCSN>
zzFqzp64oM1&F)-gN%w@@upP^gPE`h*md%#tWTT-W+iYylAG~h2(C|Y~zaKO~hI3lE
z6~5_!74E}~`ng1Xn{efg&1dVmpHDoBYqc55`xkS8B07uZya!!hpkhKlk!+ml*3S2I
zEgj0v&XMM(q>NNfRmbYUX>lME_lbZv<u2&606A$%*Ifm)VtR-1J3qh%!ih4ia%$8k
zTx-pGtgya3A(ABqNhd}Pw_*Wyywu|RjHy%ie{3z5V~N2XPJG-65};noHpg@FzG@dd
z8~d#6Mnp->kBkf9#eJ_sk~x4^HMo&cDtFqMh<A%#0T{<EByjxL@fZ>OQ4eFhey1}e
zJKUJZc7>=8^Po^tW7zzztp%^Ud;LCaJw`8~SAn>q>JIHmdtbDENn5-fWwUf*kT>Z_
z+9mw$QPrcL4WF(y>;nzctMvY^(Ij=$CZJy2aF;Hj1ACWxd2j-_mAZWG(z7CsB56PL
z(lvt_+QqEknqyI$f7=gnl1M{t)79Iu0Iv#n>-Lu8%*D4z_qhM5hFc5<U*sL|j@{L_
zd?Hja&$Df{v+>1JSR4Zegm&uUvwBCIh-Kc9MGGx*#MR$^D=WLHPSnqrFT^)WJRL~T
zVi{W;!y&zNCEBufX((3I=xJ|m;@y=3@6-38ugZR@u2`gaf3D57nTD;Bj}#OxY@c+q
zDNd{LM-!=C6CIVi=OOt6;~bgylFT6Kx<9nO*NeQ*@(Oh$KgcSt++A1n=MO{`q7aS5
zY5^aGBXzXsVxI*D&WI|fCb<lH_K1sE{ryLTUy9mm9PdH%kWg(=c&y(pM3s=PU(T?%
zMBk-(29&bO0)xIDWm9;Ava)g&v9kLWwKrysV|8*8S4G6!o%Lq!%A3X^p!m^R#ayNL
zkvd!*nLE;auwJbzRzS^u_U*&m=^-zY7$A<PrP$R5YC+xX^x}aqQis5c8T5DqeL9Gn
zh#X_af*zXtfC8@knpRykJF=ff&_AOY)C8#AfdIESqVMT{MxV_53^NWye{vr!Y7Q^M
zGF7zmkjPp~4t-R6S>-^n2rOMMVpV$lEUiA$2C>80w@6Wd1Dd~qk!plM=7bACN@sRA
zQ|%X{sp%!Gv;#~F{Gcw+Gq%jHkbYt;K56}RrIQi+0BmKRo8v8Oe%zMJOq&SYz5CH;
zTWf#4Kda3c3XF2#>6w~do#?%11aTx2HESSS@o)pX0+xts54_xIPsiJ@Y1NK-*PPPz
zE1<7TX#Km|==qVOO6XrNPv8r0E}s5H;(IgJt0OsSuR28knGw8#C$Tl?yT(rhOZ^f~
zQ{R$Gl#)Eb$efE6eW;gPdK<ERr6VpOUvZDVjIFT+@8q0|IQ@ReVB5p6A-^rC{`T~V
z>qc*R?4Rh_?o}WLa?>}H(16w+u}0sHhpL=jIcV5Yy#wp`lj@YbD>L30u<VhDHC~bT
zX`3}A6^Vffs<caN%R9r=nxIsN$D>X@k6-d9dICyqdA@xeebaviBoh;`Q2^DJ!^7lr
zS`brqxVoyJIFi8|Aenm_6eCA4F|7@t2Q%zKLVon%+O5Y+UxUG^2!_uJyB7#zrljJa
zm%KQCpk-%2dMWT9nb0zBl)!Oe;2$7V|LpHB_X=oFxUT#}=q`8y*7-9bcBwRb(cz2*
zP><h4xlObRqp{PT8~EMP^J;&svi|}-Aau~((whu(mSM;442=(gW#s|xCbdyvtxi*=
z<T*4RAN00=fKH`t@`PO`Rt;v@L^U!3Exo~dQ**5c=B#1sei3Ba(N{IPBZM)}RXhx7
z;w+T_zQMM;%?|6tE!EBad!;v&qvX)4Dk<CX&Tys@u^0~9Am|wDjhD~G62xh~glU@I
zBwg!=)V;6?9@&l3e06}y9%@ZN7K@@{i9Y%!Yy*Up8}CL*X`XZ^af@?gahgluBKCgm
zHr%dj5=oO8{Y)>yh(V8`61jzrxa9_2C<B9-plh+;8-NVPngV@Z)|t(uSsY7@sW<i4
zdcpR_!3@cnuC~Jqv8BhAb_w+yXLavoZj>&C*w6wPj19-l|IX_Hw*(tr^XUp6v{Bbv
z*}QpCsB-8Y^`s;zhy82Z3_iA_Ky5&gXT$)s1{KvIi#XPtKWzGV=m(Y6<-8?mDo;fO
z4Ay{SKXj_{g3E`^^n32-gkR#j(BexjJ&s$ychB83U3vOoZsj$v?1x1+YFF*}t+tx*
zu}bp?Oqj!**K(Air5VSN1kEF#2xa)n4$ma7H{2A@O`bc^PlV>aMK32EK9eQhw5KeX
z!4ob`m^+7B-E|!Cu;P_;Gpwm>=OL@g-LE#gs3AtM6X>Y_A3gu)6Mh3O_I#$vbq3-7
zOP3B>%8#DG`GX=7P_ncJ5RvA3u1P$})IBW2eT5GM65B?Njc0Yxqw2B?Xrb#c$p*XV
z<+D9=b8S|SFPe9^bfC+Ay~Js?A%5xq%~H57aS~ADGseiDOOSBBcBRc2@DH|a#=jtS
zPvzq&%pS6Sv<ol-v0^VF3AWbRr9e9!f>qc{H1a1Ljmf&*VHUTDE#PmyQNPnzouL0S
z=ZQ$SuX-<mQ=xyt9Y2Va2kUZ!NBRNLPpGRfz~De_3}DosUkT?UuZD5hsyiKLWcnX}
z|C^CW+Mu;Up7wK|ay7?Ev&fTlR!}lob}*TI71HO%@WNGka{zQ6wp9Qza$a{CSQmh}
zK0JqGA1pY3jf)~FTDJhXj+(atNFMMMJx&JemXCpyk?>E11VGsDbJcLR?aWFhKeyIf
z<ip)mVITB=@avp(zB9bhQ()cxhtAN$BB6NB{0RT2$meQEIso%~)$fzZRk;M{H6>aj
ze{`u3?HBQU-PZ@&jJ-CI24<uJb2xB+E<$(Uy2kMUxIq)GbDQymwe~pj^eU$t(J;sr
z*7|!i>m9~e^}i`apu^w+L%H`e9UibJ0>s`SzHSEx1_>TD=8>k~xwOAk>qwg|nq2Yd
z7V#CgJ4gTBGmS4ikAs*AJmAv$pAGOyq)tH_&mf-$AsAb3PM+MXmjHe9gNs2YM%4Rd
z&Oy4nlycq1SI}*B2HGP&!hqx<e=LBr7Su^J8UGW(pBxoK&@U`890T!l4t}RqZ!!q{
zkwEMCi7+&Z0{K=B?FlQOQwaIEKSyt3082wEQ@4#A4PJ=?c#2-Sd*nBe611{Pcbx)?
z)5#Ey{AUAQ_zvTbC*a=N<>NW>bh##g1KY(=b%&@Gemt~`*bwyhMT%BAkW9@)?FQ}z
zWLiW%90QNkZ-}4|AS<qs#>?Gtt8|!I+8WFPnz%d&`W=WOnKXX275lGJeQPu_yjd@U
zYteQXkMD=EfLHb@z=~(ufW#Z*PJ^MAi-C^b_Rk+-pq^gTOSl@Aa0!f)7kW9Fe3yHX
z1nT%Nk?wTWnC@RO!27l#b+<|5muMG6nv<f1qRE}O;Voh>A6reqe{mlb!+UUA8-NV`
zqUI5hOY#2@#H5)6{A@oM%|LyfNVCb)`4gd#dX2y`#uwiN-Ze-EFW&oJWb(eZ(GFu+
zQobX8^yT6Un)T14G~dFHF;<uo@NAgaJmk%S>Q>#aV3wh?RZ$7LXSyu%UoYXR6s^1H
z3{aM3p6;7SFEVj^c$}*x7_1jjEvV!ZVGn84c@ycA6yJ?8V3Z9Y#!9$=MWaA_t|*pk
z3%>c0yqni<U{g<!Il^_rcbVaI%WDr>RHBPqb39U2S~b4Z$FnQ9v!N@;KJv}$tGz8Q
z?+pe>>iG#XP+%rhy{?kKp}-lMY75-e-_<t^W=q`P)%V|Y*Su9oT?{ht0bsmPGAtec
z@MZq;nd;dSI;XlQGvzZ7SN|8jclK_Wo=-_Am2rM$)m2T~wTQemOHZ8DB<im5qV`-f
z-H`gWN5OV?8&7U%_NpnTn5nki@!NZffEU5RhfdB!1i_i_utM!toT_eaaw36Z<W957
zY4LE5M{N_g0P69^%Jkc^-vh~;+ru9}t`!E7wmkez;+v0@#E>H0t5e=I+_GQxZ)TQL
z#Ca}4sd8-1*vLur##U^R){E2W(RD^|$@+0@$76KtoL~l8nd80O=a${B{?UX=>iWBC
zA7$&M$zBJ)#LDdVcBbOpRqe6s%hta?GO{FB^WOi-SE3jZwk{K2Sges@`;Va%O^&X_
zwUvZB)OJ?XGWVik*A>KbH1mmCcw4ttr|;-6J}*~BC3{*XsRGG?FGok?6CFvRpzKSJ
zJuKcX{jxlivc0^fiZBc_Zwy<XfLn%W!hqr-pOzaTQ2MbFm1(EfUCvQJ`O8XIR@Koi
zT*VUnU<2RURw0_l-igKblNW|yNWgi=qO@D)46W@ZNq^dR?d#%n-k<S)GJGLoWMU3g
z_`(p)5SCQTUZcB9rY9w+$l?t517{oP3LP01PE);Ybam>(=#(Qz@y$%M^oj5@@6~}{
ze<F0mJ*Ld}E{!arMeLA_^7zTHe1>AKFkxYZKO?{iSh%9~EMkT*bj)qoNpxz90F|Gu
zNJ5m9C$#g{({87~7Y5xdD89&9iaSDPi&LC#efNsX*J4YCbB+z3I$~8Fd8TJjQz=yw
zSgU426pbi4A;N4m$Aarbg5pskkG&U7J0rMT1AxAnk76v9OJsY+sumq7mgF1|wF|8=
zr#dR<ajA?B_=m^gLVn0l!l}Tbf_owKA76>@#hAnyeEc{wEe!JS49Ut)-y6(*pK^D|
zX8rHChpecT8TSX>t2~aD-WjTneV&keqPQr=?MI)4@REI@V)M>xqxZ`X$X+)tMz>|%
z_9Ae)=v?&J6mFH~FNxEw?b3AAW_NuD^~30$mqJ7RbB`AV%dLL!W17i_ZJO&sMnm@2
zM)wC*zZ3)vxA;yUU(q?)+4%gycM6i3zC(`g%<KUXH6}o(z*5Xa>x1<)lNNI3`xm{&
z*Qr->iD|e2QJmrD-+6zs$BXf#&kkeWhD>L@rP^Ba;(B2WV0G;-49CRXwe1u1Nk`wo
zi6j?Ua*~n>3l`K0b@bR+MP;U@?Rr5~>gr_-umsQqKYny5Wp=crw-=wAH#Btc-se@;
z&Mn8B-})D3`6hf%Y{`^0!^x`{IZC_m10JTkCv;@ctUZ(H`L9@v?VYZ6&SK7DiA(I9
zy231Tr_Es0I6*PT{5A;^FBI3-1X}x)dt~PyJ61BZa%lSG(Zz;uO$ih7v$RE=HJnz+
z5nH4#P!wN|2Pw0Bq0oM4xQs<^%3D-zm0OvCXikol&0_k;GLN`Adc2?VmsTYC_I=pa
z6&IrO*(yE4oG8`yta(DFK`QL>G0c&ovq$ud;t}rOj6QiaSe?l>_9LU=YDOd34nCdF
zl{b<u3ct!VnMvb5HV9$OCw}4yE^`Y9WHA4fV-^F|N!90FdJV<ZK{>bS<%c)gn#Dy0
z5!7q{mnMVw5Q*SotAj_cXbHo@^=j*p47E4}^FjK1J;VX(jQfBIQ8GNqDu>vWj0+Rj
z1x_aTR<t#}#?h^~(Cf|k;HkED$v(-gm*6nAaUfP;+Z{#FUTqLT+6ZnH(I~W+;!dS{
z*{K>2+WEN0qqaM9Hen80cPt>}^0S>)S<*KZ+y&Tfg(h7^BM!}4b3isUZNV=Zk}f#%
z`)|U^-!oS1AU3Xv%szQ2m%coge&=Llb})TK_Wmzwviz6LZ(UYC)5*4Bd6vJ6fgK?U
zgh`8mln^nQ-NxcRM>KQfn%0LwGi9&p&p1q+hvn3dV`ODj1IeNnOEq&y`q!|ON@^s|
zVM)GgcP-_)wNfOLUcui~N|*wMowI*M=c<~jj*9NlP2OiQ*vgH@VMVB7pTr{j$!FyY
zL`UoxdoV<8yyY<{1Shyed=+K_MgGpt3A@egT0egv)=I%VP-Moctbewv$|>@$xNtbz
zXQ!mNTEb*&%}Q^a+(aft|4)Tal=72lXeb$5+cnaRa_dQk`p@-UVGxz|1!hbMwXGA{
zt4U(o8DznF_Qrhic=v!!)CKR=Y&SLcVm_+LJUU;zsm-EN2AbIt$BLU4%@m1a?C6(-
z4^GgYYN~`An6G<WV{`{!ue%G7d*E>uMciV0AhRL6Z*DmlEVZUiJHD-&?Q0t_da4W3
zc53E&ZjVz?L)Q}LyYU!>2WqNvk62ax_;e#7kz7y001LBhRs@SFbJ$BTx;C6a1t%<0
z^ocwh6x7YcbDszV9JxD4wa6>-A_pLrz%K@?xYjX2x$(khj$gaRp1=pE*;du@*UvOb
zWqnJCc_4<t)>1}?wMex6e3UyH3!{fv)~r#)9z^D`81-t*2O3$%%w??9M28G_E$72G
zfc?si=+wR{Mp0jk4d+Jba3wg>-|3FY73Ad{i;BHBw6iyvZMbQ^*hMPYdW^ZQa>{DF
z*=2!vS)+^d7NshC&5qLMbw}^1|F~3kIsfM~2DgYZxj8H@aArXFb4^*uR`kVHEq$nC
zFptzR5|`v1nxH5i=~30j1UP!gHijJTWCyCaXRE=}LAOaf-?o+()(NtP9XFC%bdxR5
zvtTj&oYO5wcOX618ok>196L~Z06!|#I}L@+k~mFp=k&a0A$4J&w|RceD5b<6D}7do
zQIzu3niWb$Qb2IlpLOxEhoYPJy;Mr#o-u}p(_`K09eyBYtTxOCQGsWm!pV}wXtp=)
z5-?4%=DKRl6&3vK8=HmPKq>B}@|vZW?`?OjUA9xedVj>#%VC$GQV1LJm6eshpIKAz
z{eWpQN8$r3>T;xx&Qo5Tt*cmZD0Q{U_r^?RbM$az#;i5jZ~GN-Io9)kGRQjlR~DW2
z)wd%f&!3Ryuwk(}b5Y*|@(nuiGfo$IArg()4$CVj;{N<h1ALn#qK!?8S3F{St@|)o
z$+3jD<IDtN0i1~B(p0b{=2Y0VThzhnk=*Q(={LgLvZ7l@lfB_+e*UURAs|nj1emsr
z`vCb{UWE~xz!{U&Lu-}`!p>@sVtma-HS{0s#Dd<|BWCQNi-F4mYSG5BoAjjcIj5of
zh;Fkt?MxiWxFzD=Ft{9@p5U5OS>%0HYUA_yof8}XQd?9yJ@Ll>^X2ed-7Qfxl0g<w
z8u?c2<AA*^WgrXmYq7o|TmC%k;eik{dYO02>=TtiRL-@6SA*47z~V};Y^4_tc+ANu
z9LNp5Pme7g)U=g+OHf}VOk0B$Rw;ZXxWYHxP>VGOv0^^H9J^UWuTDLmx3o>!5$}-X
z_f2O_>dQD-te6d_P6(7t%K_^Is}t7a(O~K0nzTy0`@0T7<ik+Px00iy1oF=RxLbIe
zU@PElx7JmPqG&SfCa!>1?<6BNfkB;CP0}9MTM-+~!4({nG8a3YKWa6$D-%{~bzg=G
zOkGl!#{Kkq@TZ|_qnA|6M!~N#8~TG+vWiV4)&Y1e{(#~flEBjUBe5n@hhHMAu7FZS
z{_5bLZz8VSxHA%;k<ZKxm2J1YaPh5_b@clm9@MS-@wP`YbhA3cfBPb_qHe89)IiRF
zlWFVdyne(G-;Vvhvf#LScLVhj)wtm^&hi+KqSC~&UPhh=I@Q3lZPb6Erd_b!-|3q4
zZEJ(9FC$T9?)HHyeG9@cKWV(r34<wbSkH{@;R4a|Aphw&`iT(hFu;osu&woY8|tj^
z8v&8;&Yr%Wr?Jk1(=Rg6pyquYPFY_s;<<XQoo?Or+pm7{5%J9U&v!2|Za^L|@r7KC
zQkTZwt2S#AJtU5rsJLn1Cj47Ojw(=^e}}bE<&~4+q!L!Yye*y7El}m8c{1|ltn7`?
zbl>bzZyYRWSY4f6Y&yj8El6CfAVp%OdW$tM^`Eg?#niELlaNlaA9!H<Ye~0<e#8<K
ztzb9Q8xMWKCmqW|wyA07yyr%PN%Q+#UtSTmlw!z!iEHAb6Ri<R%pWd%NnoeU>~ewN
z-o)>o)73;}j$GAl#?C5zGy1iqfj*6S_E*K;2H0t3Qo!EwjPKJ9q=C?W0luc6LZo{y
zN!*j#G}d6_eIuL~W0S<o<047NBO>V#JJLy>hbW*7$JRMDQVc<P)q071WHhP90TR`;
zV&RfZ_!<)=3KWmi6EfdIvk-a6pwJmLuFw1&dnW#HVAGfx4NIhTOd6&9m9hTH^7!wG
zz;H&0u(dg(Q`%Xqh(>Qy-Boflcx}?o;!(V<sz9V(!g5z~8=Q!(s?SE05_yPZBJ-lR
znVOfHa<6Y6^%X=mO`8j^A1@7|PapF5wd%@XrNdDJP#M~g6}2=ph$}NwCS-Vjj_=X&
z1+@{%t_ClwVKL{c_Bdh+*+595F-{pxf23w-K<2p}?uhc!9pid~x@#}<qQc9lKKBM6
z_R@3DydInicI!yyZ2kvv0d`Rf2u<Blk)i~Y#FTm(5#U}EZ7?HmJ{GK8`4~2KTD?pz
zW}cDH2k{vH@P{`Nmn5btO^htUE{c6F9&8Q26%wN!$PLd5FY2b66wXgRP7<Vnv#{PY
zK+D9xBFz!e`LeVIZ!#9TvOK&DbR_<$Up+tdl-uJH`tB9dpFMYz>N97t>=CQM>BITv
zmAv9;{Yq|7`$+s_$BhRBzoiFD?mNXk*(gtzqoJ^Ez8h&pxpnf{-WHrLs^&D>tkmRK
zr6@#1R+=)Wj(EY^-mWdyw}re(g8QqTmE237yK*fukCcNa(ehl$;Hfz|MrFVX?HkOl
zl$IF0p$W!t%VNFhA}tHE-GW7dcCN!i-q1>5C5FQ7XN&8D!i>Q%xPL46z&7s|X36jg
z#1uDIq^Mo0*?~(tt~R9YP1}~8cq3!ILqK}zg-F7bQwj;CwZc)Y4lE_ju|RZ8(;$WL
zIoK4wc?eCnAQ+g7ufPoZM?<!^RZMOeoQ`i!uR+k#M*DwtDt}An-Ao@or73W|dCpCi
zR8hW9))UfT@Bx|8;2Lew)qs0}Zb7~GB9P8S$0n+(QgAa!T7vMe8qPv20o97FPEEGl
znMO3acWK_%7`cwRzKTzUk)J+sgEw4B&AxkQa5|3{QP{hm8YBBT_<Pc)F8zjo!=e8R
P`~z_G|JEn+r&s?CaL#(V

diff --git a/docs/assets/wechat-qr-group8.jpg b/docs/assets/wechat-qr-group8.jpg
index 540b751820ae87bb6eb25bdfc32697d2d7f0c55a..07b50f78b83e88579250cda861fc1f98f4db34b5 100644
GIT binary patch
literal 403705
zcmd?Qc~n!`w=Nn)MMMmpARt6V#12v_5v55~R8&N4=^<sILWq#E1PKrl1R*p+N-d#;
zf`D`)od^MikO-lvl0tfrpoAo)(vz(ac9Dj+tn)j+Gu|C%jCaSq|J*ljfMm0?v$EG(
zbItk9@0)A+-SQYh>-33JClD$s2*f+^gIE?K?j0u+t|JgGE{I(S1Y!+hm5L5R6&$I6
zAB2h#V%0y#2*ha><9{DtP}%XXYgQl-bOK`Kzpn8DuiqY^<!_(<*Q;u-%73+(yW&5u
zR@KQ>{r9o<w~sB)AP$}jB!!Z01(JT;yx;0O#KEJdTvmQ-9X$RyHvi{PtKa0_Faz;o
z<wT77uhZ~R>hf!Z_8L`fRUK6oZNv&~6;*AO<rV}A+{G%De;)sQ3_Pi<P+hrdwb~l>
zwHn|8mKI`#imK|0m8z>&eft`fXz)H_rS>YFEqjlw);)hkZR<_FeRuBXtuZ@V)wJP4
zk7V2aAAX8eU#oAh(a^|zyTy*3yR0z>Yz`i>bv$<bgwx4Wr!QW*?B?#_>E(a*+Vy}y
zLeQ<yu-oC}h{(9R@d@<Aq~r$=e|eOi@$2KvC;0`1Ma54`p1r89Vb#{Xd{y7fYiVt3
z|NW0Qy?y-ygG29z`9hKSuaBQTk55cOU%t*SNEhM1m%jB2jOTxJ3q1cv&;Eygfk9AN
zv2vyAO0{qOQdtrHt>fA&S8dt5TIa}lwJSGux9+>MM(^nTys9R3v;7w&8-DnyXRZD=
zYoR&xt!w}E?0>FfvHwdw`*+9wt6w7sM_`!$dyi$%$p2mo;M2<=fLZ!4^AYP*Re&+6
zY9nw6<=$~b?uwYTh#mjGc)=}qgF9AvQ#SoH`R#1ec|HB>*AHI4Y`EvolL(auWJ6I5
zj!T2hisi;85~t&Ez?duFRk_w&xCoa+yW1kM3^8&I^=)Ul@38zkIHDlPB_EFC4dJyD
z;xK9XkZSvh!4Lie6m(eGACkAtJof>LLnVBxZHO5BjBps$%aGftD%A^@5ho!<0u9pP
zs4OGCsvcJRzv47%gOZPukQj2^-O@&h^^(<n84fm+;^Fw>33oTDCY&$ZOLpeb)MrDT
zhp#*TUI<yl*rSUlnCq!qCcgUeRvKlJ^LY=+k3-!W`zV&8Idxy(ijoi&B>`VYo4yE<
zl<EsI7x@vzuh{*X2c}v^*QK{DBb=b^bTj8%@<>zW!pnYpOR=WjA2Qeylj=a{hfY<_
zcN$-=>klP%4tY`DzDA+Wsnt;5a#gTfsr}4N9DQXMPQ7ftV=hr(!1gbIcQ^k?^eW_}
z<QEk_>#P|K;upUCSlwqmb?Ie4`mY4zhCvo9-2uxx$Bl~G9fO>*Q*Its<l@E`l<Suf
z!b+%a8G#N|{kwG;5&Li%(PXFG3!cFrAxbdJ6Pp$b1v(%6$c~OMV+^&4?Do<4I3(b8
zX-yh^q8G!-CRW}_VT|>@jv`kLaxpJ6J-(7heA@JM+`v7Z#>bj+x)(YxsgBtqWE#@-
ziWKY)(D)Ht5Q>g^A!xSi)Hn&*q|IWC8y#D6%<H|Q4VrUwBnx->UCDBn@D;yjWR?<)
zFy*bSMM*`wCyg5ChRc390Ciwyo~q4HEF-jTD7#Vfk;@1*nq&wbSw>{ksK{R^hw(4y
zEpzX}rCIPR*>1`eBRd%MRKL-`C@7qR>fh2|<3c<IsnO?Y8(~~arthCtT_zbxa$^w=
z2`6i4{8c+JU(nx{QT}dXsWE%z(Mz>ILlNgx4x>tz5t7qPc-vw-65jQ>6>kC~g`{LT
zN+NE?t!3}OB63Y!Mrg~g_Tl;C56H>EC)%6p*FO{nTU{PvA1NbeE+bA2_&Be5(PJHL
zaeSZ><NJf=aXIb@d{=exqW3Z)?jVjp^fh*`@5bFA#oD$t1Q+4Eo=h0gW7xNzcm&ng
z9C-0Z(L^2p&+trk=JD(W5ij^wNqfO0<I1|q(9E!@W0r*o<xxuX7)ek59W<0mH6nj@
zR`Q@aUY9=1cs=@E4|SwCi1tpoQ<7d4l}nCuR`&E-&CO>!%5ZLdvoqL{LV@4J5Y?4=
zE&SFE=*-xrM+iN{Ikj23T!*Gy;|MJ(*H%hCi(K1KYbfU>22I@fWdu?lgf-&BjMj96
z(d}Hwl@T0jsoQG0xyKs37wA5?l#m@DoI{d}o9h-M-#!bTp8Eu?Vx^^F)aMm9CcZ~S
zQ2X!_Lgma6iN=^gD<d_>P*K3qk$d!GH;~bu(9BTG4K`YYTrHU5BNHsM+@O6Eqnn4q
zh^bpg&iBdfh$WNhZbPDtVRl(N=9|KZ=6s)HD)O9emBXvP-8-1He#SHy+ttsh{ajYY
zbdMxo`ZHwEUK!6^S&rQgdppDNW0k5?My93W?3)}D@{{Hv4~b3ELaJ-?QhgvltSd#1
ziwF=o<B{z*!%N2bZu!Mta3aCa+=xrBIfu;Qjy+{cNH#ON%ZQboutp)ZhhNu*q@#?n
zn=Ddp*l!WjC2zByksW;`zC(##cC@uY{?3r*$KRpt4@-lHw+aN=+sA_<F@M!xnkn*|
z2#?Ik&x@g9|FJiHOUnRGeeDYtqw^K}Wy0X7<?lIH7j^cWYv-Ks=%b{S)}OfK^YPam
z=7(|5@v2~5WeZpb8ph_<5&f(c&y<=lvbDZ8z9<N5Cb<CHv?zCCbqCRwTXU8Xye^Rg
z+P$t1^QtB*$+Run*(F7WoelK!-nqRt@Y9dTHUYfbLasd`4wvhYS_JB4N;C3e6LW*T
zHk5T5+BAxUy6#%e*5Ki%_Qu#>IJ+f-#lmc_NwNEjj5F1cLBfJY@Fm00&a)<-xv^Ip
z`sOwtM*e;pF^{^-)sXu`4WeQmE_NBQejdh<5>W=!&14%P{Z43Usmx*5$VG_3U^^9)
z-FddrZ6!}TgNrAg`w_iZk7|Y%7qvWx+s%A@UG%i=o~kVj2Y`tUq4r!D=Km2b3y^QD
zX?(y}W7ot9+f(N@*VdCCRagqy!EOT;PZBOb?LQ6HcG~XvWu)1oEe3Uu$->LE&7@Bi
zkGZ7EIQ;WfwX898qS8+B<a^0SFqljekDxz<O!cWHY}Ku&1peDn(Qe-h-i`jvKf{ja
zy4g;ON}?sF@M(}y$j^1uP1S>y7!3!@*Ej-Bq{-x~DjE2(Ii=Au!kG3&8iV@{3GXzJ
z>voCJ-vUiW|1#qGGUDEl(iGDC&>mkyN~9v7_IT2k3`Yn|Po<V%$_x8g6cubadu@<n
za|@M7*)L*fPUfH>lg9L7;xjmMX|g4VYSh?GIZ}?GXn!+zmBlW(E{Hc`C_}k6Smq2I
zWHr4h+mSbFQqPj)uz=Ys4?>sUpC8Xbz+u7}$74NVXk8xy;nw<Uk@I7UlZc@~CZ6fG
zKSYWuc|V!6<wZlI?|xpo*J7e|403$&zl|FZN$LV3$2KbH5=(7n0xFiSc{#{lB^d!>
zuKG7Wvj(_FT<+-RstddGmToh`0}99abb7FLNpKixL%V3k)ua2wqm|zghB9wIE;$t?
zGLGIZZ5E%(MGlt=;QhCxDamhUeR0w*7#%?~DQ`)4%RsHCko-wux9{)w_I8b|FBE$@
z+Ba=Yp9r?f{9st9-}gxSJ2kPZTvw)C!;oE2j^b;U5i=&T{li4;S{N54Gn=aa97hYp
z8N$UEYM=vILKKRSvjcL9t(jXjp6QwpW>_ire@dj9N!(M?P5e*%0$*r92~7Mco(TE+
z!C?JrsZF~z0^9ph*{2_AS{*JFj3CF-Ux_q)EzZB{uJLtzopZ3e43qkU#-YMK>xK`(
zXiRv|3`S!hw)gX8UyDn@SVO;=(5XJ;a3MktoM>zytx1bUK*Jz9w&M84!nVhvuGJJB
zmf}~;B?-NircLIYWV?mVB@Wq+Hazi!Ezb1X?<{$<)RKz6D|dGoN-RTvlq|3#?TMNT
z;z_q7uW_D~FmQw6$^j#_IQ#SEu!Xb)J|td77!Zu~3!lQbn$(&`w@XUNbsp8M^e7ba
zxX8uboq4*)VxTznM)`u}c>@<#PT*hM%+Y@5n_6nnS9_fiS4_>+3u468*sJf$UwHi1
zzIFEK?<2k^-<Q3KEZO`iX6rwQTN$^E7|Y;FNCq<-mJzGauv!VV*B0M~N&p^`v&n~C
zeO{7r$Ge3eQYzMrYO98SI#q7(S$ZHtIMr}XGI+l*X!I<jco{+Ttt~AZJyQB!a~JOv
zt2fM&qAFNM1mj`MLurBH0q#02nOl=VS31b|z$4crM4lJ$8^L3#D8~V|W`zZht2qp8
z_yB}ul)%i(4^Q-0u+8%L@8N_g-WMOwNw2nt#glGIQ{@1(vDe<AEG7ac*L7EFHY)PD
zV^0LtR&?1VFG>(hl3WxnBhoN)x&)@?wA?9wGH36g9A5w&su44e?I=1`&bBM@E~f7(
zmj~pL<9M}hMh)AmBA3iZOQajEqsonBmk^V<v0Q*1Zg6MJWNWA$qX!jF#V{mk7ds_z
z41EF@a~ve2@wrpjb%Qm`HIo@V<6p^4*O$=h;+xmXY9E*310_D=KW_|EFRKh8m8Je!
zi~6A+p$rWCcW#568WFn64HYska)*!`%l3o}r0MVx3A0UUCXq7BV1}?@)NqJG3Lgu0
zJa^ZpE`f#G0N?V&ub=X&eWZ8aJ803*H0xaViK2`j$N6oqidu<felb)JT9YSkED2@G
z9s9+W)?8@-i$ykfu-{Sk!=+Ira0su>Ppgh2S(uF%m+w+vI7HcBM)vl3#XSFD=v=p%
zvcH#dq{s*FdCIb=vN))Fyss&r!&ZT-4x_$THlwOsTe<KK^o)%}CjB1XXFY<~CBOBa
zQuw!I{*|hKXN<Wz@WAJDkn256K5FiBP0#!S?s{K2tq+s!CO+F!CjAhkRUbnutenOJ
zI|ul#X&?70TJ^}2N#J(CioyjU6TK215d*~NWL(YMUA7JM!)Nct<N$U$UK3VrHKG<v
zJ_|oFHQ)C&6<Nf~4<VDXj(c0$v|_EG;DP+03<N5O#(Rz%%f!z!Q13vb(cV3VT1I?l
zjrhOfw2FL)*7O5d%J1f4ZHIU`6J;+=a#n!kHZzm_*7YnfHj=s0+rB}wUxoA*2Q!yo
z{}$6N_3%%aiAolVuC&#!(=>e~jPkvXO9+=5op>aiQRU^RHxRQgUPdTa7<wAsAGqI>
zT>ss!H*bCfzn6cBU1PRca<db0AO^SG1F~V&X(Vh>8Am|_Tb3#4R1{foq6R|6%EM*f
zQ#(yHp>TR-O9IbN!c9_IlXo8*nkV+GyMHDa<FadMw(YOudwz=8&&}9+Xk9L9TKJ!6
z@L!<tKe1sGQ*KHaqp82698<(7w+)ZqzOA%{0suA%q^ZJ;mZ#>*?g6%iWYGt9tR$ly
z>$f|qS4*T-kX?J7bj863=W$63DBDx#Uf)O1bVF5^l7Nf5Fc8{lpj=xgQx7s~%fC`E
z0m-S779D($d%9HrW@j|%smJiqMVkx9S9C-~-691LjSohplnCn*t$W+jRFsXss3?O4
zlJFu{eh^o3krscz_Ii0ykPXKOBu@t8oUPT*xh!^lH|DW&AGMphHSW}4`OL=$!MiVJ
z@s^bF6|Gk&Kl`4_CwiSNx^HZ9;!VVBT>4ssG7dNP&hp}!UNE7Rf|azI1!GM+nG^7A
zZJlUWS@g$7<_OEKD`DwfO<$R^XB&;ct=}QyztvpS{pE^YaLpscGUCE%@U(*qADnaR
zWmUqKYBR+V`9YD?a>DvN3Hns#)S1RwZf(ltZrpX(SiXKk(J6<r2d$=gPo^?M^74ZQ
z&oqB_8MuKCo%&tGX65XN!D;=&(coANct6g)_X=DhiwN8w6iM;=R44)WiLERS>>V9(
zD#cIOS|lpB4^P=<r~lTQ(ov2($%a<P5lTjzR;CXc*pA*`_5OKBiRZR4)MzV$mXa~k
zS~}qcVt%O%KUJ?^Ts#$NS|>ZN>^9=0mQ5Jc^3xxI_cK}<`lAGX&f}-U9hgETlSZ(%
zadWS&b`A~;-gB{Ocgy&+%9oG-BtT0xv?iue?IRnxE>k=kzrMJ*qkKY8TbG6jc63Vn
z@?pVSbGH|4Aj5i&FJ*tqd6CuNi*sw}#*FwL_!4+wbm{Z)fm~L)XXsQ*jOx-xMLo-R
z|8WJd6=J8eNB<4$Y+Hf!8a!Stm<$Idat_nZL+g%sCskAwB(M2%ala#JP58w<Us~5*
zcRHSngd+Zn*TTKyDb*b-0y$fN!~22OghkJ5`a2Kp30_9{<A%A8Ig3vHmKeK}n96k&
zb4hUm+d04U*0nv|?a#<jEs<wSbBUQzFB^Kp8uy>;trW#By%DX6!R_UaO#(})0!^NR
zC)*a!Kd){a<XBTSRP~h2R?N)IvWO!j-9MiBcoEXSo_-+s;60IUz`r*rEwQfh@bvvq
zZ`sKHvRUo#yCC^mg$N=4a8d-J>4lGacRU%ge!T6$iA!k*dzBxuKfH@Sc6`<2U*j*Y
ze1O;<gL`jwwm(#XcdZ(z$(nMwc)EXjhGk-Np|9dfW8Z=aR=RQa##|Z6vLJnQ_U-Jb
zM}=iY@W%&+!Uu<bxZgAIt11j&R9q*^W$!!<wir#!OpTj5P@gel@yusJBO-*K&3PP6
zl$`DDIG^+SWQgcFyS|U5LG=D(t9MjNit+DP?*CPrt)&WI&PCP&m!DaYkw<GfLHpj4
z<lSFp9c|#GU~#WSySoo8cy~nO&h*ZA;>655R&xs`CzP`%gKw1W3BHp4X?FILNBK;-
zD4kGnvS%~~H~d2k?&oC$ybGDk-g^zO6gy~5TXep*L~7=bD_8effAF;mi^i_*T|jBU
zbs`0qK8@Ls{?V&#(T92Nd7KmLm9}e%OBBK6ms^d0?%tucAUurv)CZagpUT``4zQIi
z?0=<@XyjKMEo8iF7lzP9-j=v?HH{4tY28gITs)Wbea}J%k#IHZ)PRNLb0P&-$txBV
z82mJz`HAtYz~xGbr|S;2FCG6R4+>XWQ(pb2lmZY+U6i{3-_Vv(geNnlmT-O^9Mo~H
z-*V5a+_BtS{)2)^amF(8Mtqz%@oP(vbbE)&sjmd7y2JZOD|%T_rOvyFy6P4c<%3Hq
zayqSPxBRj&Wez^Lj8JN<N%u4BCZRkf6{Xh-%qyyj-ybNA0B*=gzOQbm+<G8cn7Z&b
z$szl_EnEMIXXtQwh(FuI&u|rj=4Y)UPogz(sAx%gCFuNlV4wgk7r^<v`rkNKif0Q9
z1Nef2op&GUDulaR#tr21@00A$3;(LEf5fU>&$mgYd{<{XnrRjK&bTFVP5Q*y%3=+`
zhduu}w^|Fa^1)ez>Vs1U5h{OdQ+nhg|8i7nrb12$EC%0Msd22{DY3@#JZp}he+)X2
zP=C9!SYSfrT_7(?>FOfOZQed7!%WoQ78l(em~P=m(E>e0Vuh8U6QO*$VCj6er)Ell
zcjvz7t;yc?X6nKK#^v;+hKZd^U)lFjr6V%gNO2nf?VGp!ogr2g72DD@$Yv2mVX2<K
zsLJgY>O3*ozCDk67VH+CjvD%UO<pJ~+h^#Zbwq9DrhCv~!(aYkIVM#A3VIP#53EeC
zV<+r<l$L)bD&h&{dw8UH$}K%3ebK=7xT5{u)q&g>1Dg|^(wk?acVFmZ9Sp7*+*!~!
zH(hyNlQqD85JP<k=HDx<(U=DSt1~d(9hS<*(uqv-d&`Kb&ok;zjzp9S_!G4ciCA;k
zUxZsvzI8HL^u^=K!;6qwVpuTxNY5T^{?z5cu-%$gZ9C^GEysRDCIffQcfp_P=Z>W;
zBVIV<WS2}VF6N;6X@S9JeykUbwe_!hFa$24@}Aec?e)r)I)7MYJ$25TinOXWc_iZf
zwB%M<6tq*jn#;;Ohr9%4UKv#HmjR+}oT3&4v)%s$v(NOJa@@>fx|B&8Kx4PUHq)8G
zOul)_jQgUW4>O=T?$4K5{(s**(03U1SJi(Z0@_RZ-GxSjmeCE8p(J~o(h2Hj$y}m6
zE}s~=zVS(rer9b-`FMS8b}+4Qa_L0L70cGN!oo>68!f+yrTAaI^8LJAHgvLIIPS7T
z&^8MsWNB$(yKIm0ciU~5k79}LOqBfMGd=+s5mH|`m{BCR1uog-G{339;MO}2-^u!G
z<uiYs$267$tg!COwv6=gG1TXt!>ADpxnTx?CIa~}1sA(*H1Kw~sjY+wOg@023g2p}
z0MMkDVgYIRz>SsUK1bHpBWtRm^;MGg*Y1m=lQ|c03D$GlPyT%NK@2V89~=39V;}IJ
z$~UH0a;|bUj28~gEXr<Du#yw01Yy@ISXcU5Q7AVSqL3cys}kabv~`p~s3IvhaPTO>
z{8ukR<mJ@D)aU7*+rE77y3grH&loH&7rET~4Ytja;O%Pif@;7+fP3wfnbRia60m+>
zTt-l$z`9jcJOP>MFj{J%D8><x>f_SPxn!yqWeXIL!p0Qg-=}yRhRKNN7vn<)FEHu3
zFZhI|)PdT(o7V@+Fl&PSUU%HEq7ER`{yq!$Dc25w7VRNHGKOhDL;)syCaO3naz?<P
zou(Mdj!@3Q(ZVQq?c*zW`DB~dqvilt#9JF*PSfkGNX;KUvW;`C{}1!`i@I-AI=-=D
zw6Q|`{Lft@U=8SWi9atRZ2AG(|3CY*ih@mRD#uGM;Q1u!8wq~KK!THIKtqXG^dw%z
z61$O@vlh-1Tl$9Kjoy>PTf5<u!w;L4+xiRp63RtUS?Y3>=~H`8kqPP2(8A6IyQ*i-
zVLy6F&mpHS#NguRV0+-Uak#PHa0@dspJl|jU^p`dM+eH9>Z~gq@ma1{s(fH5`-vv<
zlv9=wpO#{<N1@_Wb^v773W#|Ib}PA|Md<*wC$n~^2DF;)hl;q*;Nn*5wt?A^u))$w
zIK`)dGq8|)`eO_+W#;G?(d2c*2X59Xf1X=ClpsGPLazol4AJgl6vSrE9!UkO5C*ru
zLo!+tod>7zs9U?|a{K39Xom;qU(JMBqP%(*c6$dqIuBUOvZ7|NOQRYMr-U!#x1B@2
z;0ix;B^N4}P6o{Uv5ZIxfW9sxvL+F5@udNb!>x<`Vdcd0;8wEzmgX)Eu!1kliqG{g
zxVWBs`CxV#alW54`&Z_qbV)i%2nm^;y_PQeB=X#z>2&|Y_=;2nHJ8@39k{t)b3mMn
zeWvV<%y>;(D|hOlYL8=eB&OvMN~G3e;(a))buki|FpbgNfB1#3M$^wz90RPyKp0AA
zioZSQ#z)91o)l2r75%J(GUIO&Kdv^<i~z3vdq4B+K0xS6&QB3b=WDaef-7-XJ#XBY
zMeA=r(Cv#qB6A7a?>XZ9-O11ObXQLL=ypPWb$zJECRJDgVVLce@4SH;LKh-6DJLNJ
zW*UQ5-PJ+^a>d#(w5fa(Fc<rs72~63lD7N`xjpo=q%u{G4u3*?K2cw`cgpBehJJ=V
zjh|_*Xf5wQ!Jmz~jhM3s(P5PV=xiL^#{=3%9NS-Zn>vi$BVnXiySVfGc1r4!XoR`c
z`Z>D2v#|4aTQu6c8>2v8hFF7-%f>U?9*2b$2i3df2jBF6>hZpd5WaHotNjfXsX(sX
zu3Xb6X282MQaJmDCzyuw_&YcxM{UAXC##jSzd_<7(7|+6YLk~pT8uS;wzya^M7v}5
zs+P@?(32__e1pU-(yEE0ZErVDv(#C7-ajJWbB#e{d(1)ivQ0#(uCGybN`@G1Jh7x-
z93jN1ljEdUvzm-7k|;-l347}O=+DT_0%;sX88xi#pY7d!h*cxuG%9|3p(vQha5g^i
z8r32#F7}x)O3y18eOCS{BRag;_u0Yw`k&s2oCyQle0D!g-@bP2O2V49KwutG7EN3}
zS{kRw4znbBDwtF|%2jwnDV)|OI0LOOm5@ZVROQA=FKHIR&ew~uG_V*O)~Pdfsfty9
z{Z(BJ=K*<3c4lDDHuI;dJy>()2VAY7jk!8VupYaY`cA-dYGu$fzfOE1=BUCMvZEAl
zNDzm4Y@K?#&$E~5CgCPiyq^U|rc7kE#;27Qvp(MIyjJ4rh4<b#TP}Qrz`BE+0$0p{
z%`@c2&XB5dt&MCKOapnY>x^?AwTq((->D!!;R(~?uSn8d@7W3x=kcq^`MwgH#05n(
zy%n8sTdAuqMruxZxjib3tMCibuhp5XQ*)`!X(AoA6Tmy#<whUH%y$9OGcZGTk-S^V
z>A~8K$jx1FJ`nfL0weY!W%Db>>%O<4ii>{T_D4{yb4lHkOQRVjAI3*0nDByeiC`k!
zsBqp^9?rj(!zf1_0nvX9Se>8!P1$YbA2c9l1~Ck&Lz(E;DXz&g&n8FJByJBSr%5S8
z7vb%1pqea`DEts!w8+~L8Xa(9U^)!Y!goW4oCmj7_s)cN{2eyL?w_qm-K+|bPHZ8t
zm6{v}aP$-Pjo&s!8GEnnQXs7cd6$YJ=4^NlX9#8B<2rKGAO-h?Jk)B7x&z>Kpw2R)
zxev}Fi5^g{h<uU23l;gUpKN<8532n#spak09-;zcBpK3fMHN<s?B%LTS*s|+5lFG4
z>KT_ChOS9y&G<Bd9(5Dh%jMQNp!qB#JRkCu>!GuZ0#0cZ$=`p~=##;OFQ1I<Jc=Im
z^0i_%3EF7<DCr|bKF~OUi6_t%d7MKO;56>q$o!SsNEmo+eReeDq}0a4CuzV7ZU*m>
zl)9-jA0<!uUdijh)#6?#I~2tVMqzZ_TV+?xml*p4pn5{tt6WEG`i-k450;d^rlR3W
zStyw%q_v=R$v^RYARC@QL)oP(Ki9+F5?->Up{{2OG`);4!2+VJ*(scG#q!By-R)7m
zzIiyzKl)nX`zfPfR#9CEg6cwR^2d$E<FsgF4^2&ASIAgt&_(A4qT=y-n9|CXOs)1Y
zJ7#>&9*LmE*xTfyudmV9rWbIBXhTjOP%e0xL;-=by$Ztf&lZxNO?Xw(Ykn=Ck9Ka^
zjLI_A1k-j`DZs5~@6II~2p4CXWO&%1$yBd*#u}$Vwrk?n)U`3z0g1`W^6n4DCT52v
z(j>97iJ4RHwDA0fB4)9dH{ZMM$-y6vZ_GvF2JElM9I3+sBlfByiW6K48HgEes6?;1
zII14my%lFjHG{L-jpiQ`m77yeNNVG5isp<#`jqdV=S?)4s`;_;-Sa-qNcd0pEwc9h
zh@4jAaV6I+60In>JRi7Pxz;RyJZIO-p7}rI&iUkUsYfH^M4xA9IbU0u`Sx)hIqQNV
zkFw<{oZ|Gn-%B)fW+)7)4*M;-y-3!ORjwa@`2JK8KZa@!4E8vPKk-~+?)L(|K<cB&
zn8zn`knjjWc8y%hQ>wz+(5iV)j?t+Iaqz`fs)po1X&x+YwlSJZr3rOXoFFvA-nM&k
zkZKN@GM@$7KtaytIr-~L@+NXo{atj>_-Gfr6PuAco*6`I;^AvUVlr>vFM3xLCzPQW
zKLy%u<$Ll%>Q5wXR@BV@xO5`ZOh1yCYIa&PVC6PK?IHah1Z}H8;??!eSUfkaA;WXy
zae+ua%1cqoT1KRps&`YjjpI-h{4LQ=dz!e>NRPDo)G|W7Gb35<F7CW_cF-R8l>EbI
zUai)9@=!~6r|`r6<F9HttTg;|s<rAT+JBEma1i4j8xJ8{Z2^tX*-Wl%$vFhorC_`}
z!&|X?p|n@e$XTse^T7pmuPB8-9$L=|i!LSFme0@j`2`uJerWyhXIZby?uNa&>qBC&
z029XER5s@v0<US*!EavY8e;{y@|eV=J>^7kIh@tDv{1k=ue-}e3bVrcDV~)c<66Fi
zJ~Gq$MQ;n;QS$ph&B3t7^W`^47{%H)?`*%<s!M=uNkr48wsHS1rYSGYtH7l)0L`29
zxkO)3=kry}ge}_RIEN<itEraCKebw+TP@3o8u}fU!%xP7RTR5A793s<yNmF=4i{Y?
z5O!xNS4utQ?r`|_hr%pZ9XRSjFUH{~k*2F(@63F#^98^|rGf9Ha=!uID*87#1TqT-
zQ?ZHuH#Jm6-b8D1z>R@RSY0hBc$Yz|VA!CES(B;kzynd|>Ke9piTto4AFDe#x{CuL
z<EJ^DsJqi7s(vM%eO%JfvQ#!|ZEE?vH$<4xYO0yp(aayL;a5E%hD($MDvEvN6s0EM
z>0=*Ga!^B|uW(~R#t6FQR7oH|I}WC`xZzC25@mfx`o)pj)QaB)wQ02_`9VK8UMqRk
z!}_uI;@h*2pZZUO#AapvJNR#zrm~l*&9)Gd5|wE9IP_UcgHs{2a6L=Rh|95ukarh8
zpjvXY23Z0+^+26uD3!f4>dBPj>He$L1M`1aSy~0>4}?ZN-tsbW#P^g2B7796aIqj|
zZ8~C45>{%#=r(4Z`wT+_m=`h^s7rfAUFvYYG#ehSgo!OmqoHXl>+*2k=$394$=H_=
zIY=)jgok^Dlow38)g3TOjqhyD{>UEuddfJ4jBCcHat)O#<RaHia&`C>gd3|&E$R)K
zH)LOtWVDa&hHr`<hdLZ3I%g@2T(!t{mwOfhdPyOB_E=fXe`+`ozTeZ!+1g6l{Q?n1
z1A%HR4^`LRLR&kfTnWd^NXns6dx=x>d`Gqc7<Y&{vm0Wznr?u$r$*-ZetK95NBKa7
z()(qEjGG^=ZeWa^Q#|`Vrdw>(Q(5u^@$?qxxQ_fNc&;YnMRhIJ&}W{Yda;?AV5{KX
z$%oeEsJ?_tL|kx9*4bXn-!(+n)vaP2Jw1~|pPySF)a^HEy1fxP|I+r+;N!vxDr&$i
z!@a*o3ppT2Wl92EThJ>g+o5GdDppVV!4w69+O%elQ9lOM0#F<vr|GY_W`%L<kkJK=
zjz)dF>4^Lm980l_2rFtOTc>0()hCU@+Me&ZfpIR^b*XO{3hhRUL?BEpqT^6Ci!-}r
z2Wic~W2}Q@j+CEZ5CzmTq&PY7jFKX(C0Qm6mz(1y3|bHfPB`$Ug?#gplCF5A0Dpi^
z^9KMTx>UAb=6_jc@KBK#{wXGuroW81F*l+iUW|Vt!L^h4T<IftV5~ISs}CR71mddF
zR(>9+Yk^@SYtWWA!k)5mVw4`y=u9N*QAOTUZ?B+JfoRKI4m-i{f!*VQ*SI1Eyp<u>
zc9)731vvjH96vy4A>W`XMo({$OaZBi?Szh(YfJXwlf3SY+SkI-BFk{$V5w+slQ+Cu
z%x#LcaqbVMxClF=j`dht&9IL@bt&{TUaaq%37N5+Mc6UmJt(=>GD12BTgdd_cJWY4
z7rbj3(T*M|e$8BEe<YVIXc4SY+HzYh_n+*so{EbQ>WT$xz>xUMj>rRhDk=W?t|D^i
z)3USlJl_uChwzpQBjhAg)O7GwRrt*}pjc7)E>5ZG0PO8D@CU1D1Y{z&_H4Z5=%Sc*
zM}7!$Y!)Erad&>A_#D6?**Bj|D7Q%t6qmszoc;2Hv6|sN5@}(;GeMw!z4`k{Bi|zd
zH%onjG@=MsRlan|H#8_UhoB)j08-NEZXCfxSDM)k^ceh#y3{>vU2(&1Zu~_G3Q~(l
zQ;t?u-bK%Q<6uvmZaKxfcrx5=3BU`^BCjrU-Om#`BVJRr{73TojcOzK7jtqW3o#>&
zSv}N@x+l=41uG1MHp$eTWYn>5m<1V%9G)a48_^PKm>ayUs)eO)5L>WGiJ}oF_roDy
zPjLp#QkrYs>ix>Yq6)lxgQSCdgBHh7*?5Tu6W)wx;Km*TFtkyABTgFMgA2qZm|~%6
zng+)Ar2Jrp5SIjs{5qX@quU`8ecGLu3doT}$yELJD&d?OIsNwF*x<BzU*&xN^M+oj
z->~mn6`4%7kJeNV5_`dF`AYbTaDp~ghp%Byw__?3#0{@tHHn|=y?O!9HGU|v^}`^j
zLSSl6^3`T8O1d2T?X$9vdY50Ha*~`)Epo2>5R~e_z5K=xgDeEHnG2&ya-Cvnxgvpu
zj1?GTanup&0R`J02d#fgi_dfg!6hZ!)TR#39-9d`oYi7#Nq_Bs8ftH0rewH|0XID9
zx4C;kbAMaa>zvK~?DM1uVf1#V+5z@a75S%bwMBsbR)0@x2i!oEvXOh0q%fA90jC`g
zqyE6lO?HE{(Ogjk794(+@-0&pl)^Af$Z^8eh0tuDi26#5Pd3#Y7&;A=bLkW_Bt3ME
z94%}-ZFz8VbmJ>7vrQ+6-kM`NINwNfVV<cm@~N#;A^m_*ZUON3zfJFP|EHgxv<F%A
zD&Uo3bI7`_Mm8xmv=Lzajs0N`Yv*Qer(^dkaydIFM<k7XzZTxf8>ASEnL2P>bLK*+
z(|*yAXV2XCX?Uwiy|h`42occe+|aPa=Na8f<sh>PH{C8fNv?LP>1JPqXhP&&xv$7~
zU-MtS9<7z{hodt*U%t41qh=ww?_7UyNSH<xhIPJ}7n;7p`+l&r<TbV#2u=W;#WI%>
zZ=7*sc>*a#z^YVMcA>h}c-AV*eg7Yf9~H=OO~JH}y39JJB5N+0J0BL0p#9wWAGLY^
zW+Z7uf#f<#{!7=0K-q$iK`qhX(!;3HM+lmRKmsxuIhEFQkTx|UeYK3};Z|c1wDo%5
zXzzbFpr@j^N^8pXGnafyk<lpOJqxL{<Go=deQJm8XofHtePLkF4ZyKX-p1)Fjfw8{
zx9?mFvv;>`T_|D{2N|&jikKT(B!pUnjNZ2N+P*h2sPT?%_j#Khx@<kJce2-c&%KgO
zH=m?OY`eYXy!Mgn*SB0gvMoj(3=U8tVt*ym4?`rm9$pGTuJK`=W-X(J5Nd`lJ2{nO
z3K`HBb~^+d9SZfm2oOZdTxci$#K8PS#U6~q{`1v2#tp`@ou60@wdp%&K9aLdVz66t
zk+Y7<b#EXWx}_B;9HDC056yd%HcSy^)>HL12_YEojg%v$fjKCY$sX2>|CyeG>@Z^m
z`q(#7lvp~cU)#$k0HNdls_B2JqVN40D#ob>Jz*pra+YT=+fMjF^(=c3^C8No-_knU
z;COH7RD{)n=0&#w^vAlYzM3gxkHS~%#)ceYB9UB>Nw{Dga1IHrgIZe~1*!J<aH74<
zfjYk((5hBeCp*d7K>usd&`*x`x+gj}J?}8ybN>(HeYW3S`=LM|@$nyx_ZwTNIFB0}
z=IX=lcrauKs2yJG<3+xzUPJbprIhGyN^m~G_HFjlNe*%dgX24jKBt6!Fm5%9&i-=<
zz=$y9TEO)wx4-CH@Cde=t<k*YG`Kl_e&+OB(T_+HXi!Sd;!%yj!AUAVzl93QPgO<8
z1T8q=h>|~WBeZgct38=x-ktV1mw*b%LC#o`&g*~8GTGJjmeZhhCV1>&$4@bOxUm@O
zcA%31Saly?6-kc5_k?|x%<*RMJnCi_<I7b8#*UCaQ;gSjq2*3#T(kdtX0R-;p(cIK
zx$z6S{7HS?gFx-;_nxZ((XZ)G>MluJ8~{~8if7giw^}0Cr<RjPF2kyM<ozcH!lH3!
z2kd=;j9kNLMsJuj!X@0Wn%&Yc#PUXJz)^U}{1daVH7uM6k}Xb^^{L{Cx;kwH?a{wh
z4r*ptlG2*90TMKK(f#&Ga7m#^L$YHFXRTzgO4zl5?C#meb`*BfPO*C}&8r8jeQ%w5
z#qPtnU?=x&t81)!mBYVkmw*4x>KNQZSJ>Xa6>FFxby55x-(ZngvqOF@T6RnT7j-nd
zmcFw{s*vw5lw%<3!xA`o<Ordy1RD=%ySDp9_#ns|6JM0~j4*iXZH7%P^iu8bxpQhg
zf~vO-Psn&_y&~P-S>)^QELo)6gK`53awtqe`wyFQ?6GDhaW--X!czS&bJI0U_B;3O
z3I5#JkI@(w)>PNT60?&06D-1jKO>adb+{bu9aJ_?jxIF=Lbqf0$RW|I8g|XAr0ccy
ztXJ_l#wk&WzUHyyY*D&}r`h!r7Z0P_=j59VAsZnl2{>0jU>V4fDZCa%x4?(;ouWu?
zBW5I>3!?7oF53=AjFme}?<z7$)^i51Xm=^hY|h!pt&wCTSCp}4B0?3rCP#Q)@@`+Y
z7xsyC4E4_XLaY7xu9f#Y*Yy-U@6;{3@2r<>ddTd)`YE%}E%*B$UEA`@&$kYvK3@hY
z!yPz-m)SluEW-w7p5Q*2%<PKCU3a!a>Je;jm->GzqmrG6ABt1)t}lkBgDcGIduHcq
zvKm~@z7?EH;1jd4lcQ3-2mHW~-y{Ee@@+>8C?WVpd&ymdU7EBeAF3Wxduqul1~ZpH
zGhk!#vWb_gdK0Qe4&Kdh@4V&?fvcJ{ja6d3UqjQXuam>xd(v|3m;AM0T+b(ia&eH&
zp;DM@Nwl%)E_g@dM`nwFK6E?hpyHQMWCB*Bz81=$2h>90ElhQ?opg)q1|Sl(KtY!J
zjbhq5E{}^UPPE@$$Qo?O$K8?p)yLn{6gFP<1aj>!D)LCM40bBFQw|Pt$3PCd`$j#k
z1-UAyhb-n9wK2y^LIoQF!+T)vImu88XOm508O2Ik*IU7j$gOzv>_ByJA?7{bYof00
z?<@M@s}Q*7grelpodG!>!q_#VgrdiT2lJ9K=xr~4|7+XLwq)NAiI*?$X;H}pJu^bV
zI~Ef|kp{FTM;Zye0lw(dYws!~=_-c>EQ3S}M&ybNa*G_iBQjC-f`#I2XQv@+2miB~
zV%LG1RPVE|YPo%3yET%g=cX&R)Uz@@%$>eR-utKC4%c0(TsH~1$A47(Oba5dJT7ur
zjW_b3_MRs{lQr+1T#ABoI+~ZbJmiWABiF>)`3)~^%Q<l+ll9xHiwH~X+N9#qAfpq-
z0i>JeovDA`M9|!EMih4;X@z_<%oHPy$qx@pXm{C%#(-DgY=NAT!%}fPrAc>9gRjoQ
zY?x($_dtlH^@n}UAFvT~=#VRQNf8eYtAJ3n=|2iXfTIQeYgnKM2lxW3w^qL4Z%-0g
zB0UBv8=lFj-E#keiAYvLUJ2~#)emY;Q$~07&C_(=dAV8+#y`W8{acKXiPO`VgXJL=
zHI}4P1Hz<fjImwPYln-<^{YWChdtmvRwgK_w?eDAPsT5Rodrr0iGcoO5aVsK&n2qG
zhJ%$94&=n;o6odpmQ2~)9(1qM=llMgBPH*dElU0%j=g>u`Q_@jOyXU!Qr$*0x0c+c
zRA<N#L0BXRdUE&T34GPiv_NQbLB@-Gn_b~W043%D%}6yE-)3saebr|bl2;8f0E%;A
z5Qwm*sXs!Kw%cD72`0R<S>=lCmNhDWUj$3f2hQR};^jIZA;@GVTD#b_nC^n-Bn4#u
zqnv>o!5D^iw$9wee$4$mLWY6%=;Y^<&#yK1w=q|>zq2$931R<w@-{+IrHBXWMVEoH
zmG&ZpD|Db8hp_SCvO{vC*dZ^8w8X!hV6%UMi=5Zoe?CFe>Fmq;>P&CV({JZo8`BOw
zo*|WoSXx|q8GGy;@-s<^Tm!i#1cUiu;;O;q1VE<oYWG;A5woV8oxN=H1C_<?qF`4Z
z)&w?(7Qq&k#CgT4+0~^Hd4Z9Y$@Z8cqETaGStj-IQ!?GLy76VgXSe5RKO!enUYnvN
z%ogNIvU8hK70`#E5EcZ1s8d4}G}w_u^dcq7_lg{J&%a3c>^f*|66N%Y-OGx$TKdo%
z<>2UA|FY&){NTxJq2K?hB9Egri8(tYz0^+H3yWAmi>(pdEC$Y!a$YUo*zGx9$5mL0
zQwgfSEJ(c4-PtbvEz_i;B>Gy>`=CF9ZfxeVS=A4OAy!*cV{l#k7~D%xL9k!-n}C=v
z00N>JZCt>=9)qhl0<|Etv9IXAcQT(lDH6FLWtazf`m-2ZveEyrX>S?fM}oJy%b(nm
zt^>85(UMAK8aEf&{|qd2V?4YQz(b%muQmBcZ3cLAQVuB)l>LWM%l-eW=#-iXJeM);
zS|y!UOPA}lOI;P&Sj%lgI8BPb7;xW=w)$g7gE>38vAS{_sJK-oSmoy&9DXH=SV$I9
zR@<Y>@DoF|^*PK!Vt5As>I5w~<c*5*c|CIamCTy#eXQ3WBkUTU8cRzODpb!__ged+
z&cN<tQ4V&_z4NfnV7qG-i+)7g+sn)Q_$GbHu?<_3HfUcy!AA@Nem@dkwTw7sHwJWB
zV^?taB{>EO2UN!3=N&mnkOb980K(ew6pYUQ?4_zOC}xjiaj&3;xxxS*ZuqN|4ZBDL
z%`^?pc5;?zV6Le$5rPePQtGB&s@a5Bdn`x_Hi9YyQ?tI%YGMJc*?DY&ty@BH%N(e9
zWLi~0FtsqEa!W?vk=>hXBR$k4;=?HZqTDcR8DYL(x(G^1493)yOyw?+78V{xH809d
zY0C%{Q*suyBvn+<=1J3?hf%!v|I8DjmqB+{wkYDmaPSVn%p(a`>Rtu4GI*s({UWXi
zsR!3jzKK3PcSb^s3r%5a!S_Qo5A68UM!Bt_uk2$@&*pxsJ)uoe*0%&7%Gv03W2m7;
z`H^aw14t((<=24pA27yH`gE&}F`6pj&6W3*=Cr2omDaQ-s|8vbbz^T0DaOwjwSj#T
zBAxA7@Gf_ChXGqj(~vs}pR#ufQ%Vm8Uxia>*Px8owML&Fl}@H(jk-ggK-XsIiT2Lx
zQwu!Fzp5@aeA__*w%?2|Q1^j}s+Kq{Bdh{dC0SCyQN<d|kHcVCS9vLNx!*VXgP;wE
zqo*GglH*#b-@zRceuqy=OZ}(VtDs0;_}E^p=!1zvP5CW1Q(QNy<#uGzi}Xm#CsRw&
z2_+)*t~axC)ulcCxUqr2*&FC`ka@)BDu;ABZU)?1cRome%Hi${XN@OL(JSEh)`KB`
z>VGodQgF9^g@)>3)LXDm#b3F`MuZ#jmkubZxYxQ8xtr!)={d#<x*RV;(z$wU?=eu=
z-jXS}N5K=sI3pMdfW%!jm!aTL;u^4Dr3BXX9asp)x7g@MW*5dz*oHCbb5<B4sIovJ
zs8drk$@TW86Fsaj$>*6W=rmfZ_A%9ZXBao0qw}&Sf6%2Y-}#|?Y<r9TP#+;F>MxA^
zK=^^h3tmYVM#)7xCROD2Wbt7*Rkn{pfSD3La-+{U)d6-Db4@5aAylH$lpN>VXNeBO
zt%B3R<QhReVRz|A217!PXPizvh%$@zFZS{Eiq7=zv>p60ScLd<0DF)^7@VK_fbxPH
zAxHP#u-$|kEEDu4Kvt$;H0{n+zjWLr&8W4Btf?Jx>pOAUc_n0j!E8h5_dmWi#e+PQ
zb{Zu))&*~NdkALm0=ye?mBzqv5P)`0W29B`^Yt(&$}(u;7_lIW6bxQJkg6-8rBY5k
zBl>$kbnTg+LptTdGM-!Jmgnq#%x=XgOjq3q!L2^}Zv9KO3H*#Vpj3V)tBx&B3!qYw
zpqa`4+J@Z%wKvbv{Vd>=!f~7yTkQz}t2bC~zoE#7{LrU&ZUML6FUYGgwNn~bH0ieF
z(%BgQ{^n$_N7l<!Cf^W&{ifX?1Qb)fnq03~itpzVKv4wH6+)^c)rSWtVP&w*YpQ|7
z;O;d0RB4T$*6kX|szfx!)#@r5_Bs_&;^TchkFfL|=h6$-OLjl{?qbh74@5LUcAM7p
z6sxNMYyD~^165<w)Wzqu`0a&UUo#U%zk_+t$QMNcu{B-D@oxzm)|ecA5u&GAPigu$
z_fC1GGLxA+uM>Ib_#a;NUHv9o>~=u8bGoN7>g*#02%1UG2KYXt`}+BZ5ul22tR-Qb
zyge83O+vgLNVgNDf!YrYLqxska-B~e_djfXa4kI5@X^V2#}Td~MlxQPLb|g4q1ZKX
z)DEI%kRnX;NJVgdt8(+u^k#0daY|riUiAP=qm(>nR@YD;Yxhg)^^+kXTiw;Ip8?!&
zA=d%QMb{7wjMTd<A#G-h$aSPxtk$Fr)w%?<@zr9mYaJsL@x^c$8YkTJydK)NxHKAL
zMe&a~a3_3wk<@LU$H>G~fd?--a**-k>rDo7eP^ZS9Aq#}kQu<0(#mdJFew>@vL?m(
zZI;}EyP8l&V$P`(bV#F(Y6J%qPf}OBd@(>d9z;1p5Ha)vk<UCPOA7ctFiGb2#l$Db
zC^-FoSxh8y8U)nUPsr}lhl&T(Rn#7oA&rRCf^Aw+CSa4Jt4MiY=$hcSwvTco7pA=i
zn;R&&B64+;5jDRIe&%a%jtzOiw=P#@wVwAT+$R|Mu`q+F1$bhuZK&Utf!A0!FmbK4
zrdNC<*l{NHu2no$8c=(d0I95Y1gfPAaVWBT`>4(f$!MjNwDH4{A~NZcBzle>g0ZtJ
znPy$t<Mk=4-16>E6GP_(9zo8xinDFNwg69nu#u;_Is4>z3Fi?Zk4zL*wlLR^-(GRK
zs;36M3C=&+Tb3U2u|7K(Sj*Yb-ghpy>=$(suN>L-rDOl6QzpNvW<pN)D8Aw-IE-XO
zE^Wy{4_Ho%`(_r<dc@2eE^XD_i#|TB{+gf4!@_Qw{1$EyezE<=gFQPjoh{Gqe0ubo
zY8HT{4z8~7XQ=w*^QzuZ<~^L=d?)%$b#34L2OC#7UNo{>6WjboueQ3Xs=9U{zYgT8
zb;$=U%ge=S8@HtX6Q~a##A}fmE!aH+Az=c&DSlT{SV!xfkOihzPzKmX7+TxyM7&XF
zo0jj;`hJQOyv|Lce*KD`w$r*O|KnbW`HfhtJd71<OeCe^^uN^;r)flyv1V}F#?7&M
z+O6yMI+g9Yd0a23WK-a?#N-W!&#gj4)=e`dsv@-+P@_dLQRI}%qc_mgsCKaUtfYXc
z#ijvy@J{GE|GrPJI0LLhx-<1{RX2;rZI4Y95oYW)qHnEAdwig<VED~ae6E@ltX#0O
zx{Ed+$u*=&hG8?XvD#V%IJE}l8kCrpfReb+#o{E+3SBWXJ}ep~jh7V5Ex9UkuYu5V
zuf7XC934WYYpV;XRU2;L>8I=R+aY7uT6m{e=Ae4AhXo3UG|90M6jb<AGJ~f*6**8G
zAA^hJf{l~Ib4rH07_BtMt)zYV6ob1D0A9xQ5fKXB?le;^<_<RxiEQC+*hG#N(-4%y
zJ^37o5}=ngb4iw4AcMOhtdsuQCI)R@_I{Tl?`2xfd`J$`FQFCTPgI*XK2`gJCh2CP
zaN~7yfRT6^V%Kj$Kht9>b1<Xqh{(joW58NL9bA;19`dQ`x0=DE1Rp!~Sp&w{Mff)+
z%%48P4NAMl{L@bU`tvOW$SkZa+Pju4!KOL@T|dHo{|wV7zCO1C#$T=(qU<jZ8Z{Z(
zv##8~Y~1V7r~A)_ttHMxJFg&H%HZPdHlpXJ+FyA43^!+b;P?JM`Pww;CiGQY{$AJX
z1Bh#^Tfw*V(iim?QQC5UYXhw_shhex*JbjY_FQP|+;so<vb1||UYBf*u}=r2fMOCX
z$jtz>8d%~$WahR9d$)3pLO@xi18hPV>%=P9hjNdL(1uf-U670%D|U2tc5x}Uw!<Ue
zO>lIEP?sAr6$|<t=IPkp)-hs7){n^1f9j>OXzO&Fl-p@^R4t7WVo%B3{zSRH4s0o}
zM0$~rid%@mW`qMub9Q%_#)qJ;<2jP!`uP!s?*w?S5&I1NL7N9HwY@P^P^;6l7Gyn1
zR10vQDP)qE)&{DGGg@iY%)1}}l*u>M;MBkGx593QGg^sPa>>=6!ETepIpjnpE!Hx$
z)A58%Z?E5EW;(09=7q1v`0b?)W%XlfK)0FE0FLe%Ir;M#v!!~B0rLKKni09aqj`wm
zP6zd|>7!D70(SF2C=Tt(>Xm=L<eIq9c(%i({=sV}({leO#Bf{81ZyC_hvk3OS{8#G
zGyTS~Aad6aH4Ah&W@P=*$-X8m4yueRCw+2GnIdVBOMN8^jUQVGAKM-JZI3S$gzGvP
ze(Cjml&$;GjsIh=E;(PsXzAMI!7GIOMCdd*zR26RP{GL-F$~CYE&2x*dw34)@aOy>
ze*6I2oj|&EYlTm{(Vx%XyXw3=b=4gq1YeIlED^Lalc}10v?}%%2rW{Jw`SBhhbbNj
zxrSuM(LU<H!6Ob`??M|-3=Ylct`X~WevEjq^6>QS++2_)ZIB;@78zKeP^!15*<S(j
zVkL_PaBj1^D45uSALfS0Y(}U}ipr>PDXum;t#1Y&@I~1p^(NWS?wfWaXYo>7kP_g-
z1RJRx0#)`+5vbu}v@_^liwvbH02>uRq>MDKfun>k?IUj3`xX;2jf4EQ_MihYO>8`C
zYzN-gyTpzXJ4@d45V0O05d^BwSOZgX45v+NI>bTBw<?~@;DY8hDSJ4YkWI_4*tJ1}
zD19*}rESy%vPrZ@i;*T|>Q~-{<FtwicR&4?z3f#YkFdX9^;<U{<+%lGmX$4}1fNhw
z>#0he#~5;>`=VeV=*57dE>mD_Cpq?H$F?dsvX`a@<H!2l#lqX5F6}WIfV!srMC@jX
zvOM~Um(P3lxykypJGmbwzm(M%EN%aJk$$!gA-4f$3elQ2QXE0rG2Ek6r(C5=nNawQ
z$r!*$UO9P^H=kUS(-)u1k4Xecp;^A}tp^B2?~C#(2;oYNhF<>P_jK?RbxUVonm^d>
zazWsk9=t>KZw_GgasLl>Zywjw`LBxxQBe_spr9bc8C!&CWoRKL&ZrclRY5^W6_p`k
zY5|E7vJjL(#8j<P;RjI>5E-J3iXjogP-~HyKoBxjWeTjN5SL_Sd0+b5d*6G`-Fu(&
z+2?%j=bnGkin6lSyT0#te4gjU=Yw#|1HHCS`WWu-@+mj%9q{ACI9j|MrM$xT1dlHG
zLO4!t`a;mtu&?hDRp76lj-$@`+6DSd{3{F$g8*}=C6#7^*(08+;6$$D5so!_mUK->
z3s!BiS2o_tK^-<Dyku;Pvf1sRo1Z7PO0*%fQFi85ba6oF4@_&j>&k@uLF=qrNmqo2
zf*%o}5C+`BAczN(I3R71get`N{(S~ukUj|;<H^y$iZIt~u+QEuB9Q)P|KW)ddFlJn
zHdU5|FDwNe^<Y7~yF6)9@BVRDcX=#b$+$S~tU2J-xh%#XfONaVXEsEHMu)Ha<>;2R
zCvMxHh&t&JVu%5Cg;GYTR3h#X<MV=ahq<r$bAMp65=Ev+dLqYDQM_WmtK4{yWJ$F_
z$trz%e9_xy&&4&>?Lt!#g-UE2pS0;KrtfPn_wvx}jTS$9dWwMkahEvx4!qvg&>!}+
zA6s;8a^RT;N2Un+J^zDYSJ!{Jo$wB-t)zX(-~+za7}y9$XzF4DRJi(It6ON57-qAu
z-)N&suu!r0Ko8?Lv;p*w5B#rH&D;s7wt}{RVgk$Yd2eB({mA&0a>kq?d^P;3UQQVF
zl}%3gMP=tt7jWeLt-_Vc!k9bSIxr?;M!Qy1)56Ah55v;WRmX~S&kNZn310{YLCbgp
z$m_ol0N9)>1TNwU?F`MrpA!hL8?ZquV4LkI5ti0Fl=wr(*iyAoBE>|vVz9bNqA@)D
zZHIuf&8`A|-jv~(R(-VS!s{o>&ymH}O#N1!cV!I$f4$Za1;!R1z-{|NFc5+eZ3MbI
zwR=ESY>fHAPU5>53ym#i(-qohxlFBZ2Dx5thWZ{rJ)n}%Y@@DYw~8pc9V__?@uD!F
z4@1#bu7KWmPafuXwCeV*n@^3j%$S(q{3HFt0M=EJ$UhdoNi#V)ium>R9+B05eAD0m
z<~1T=g|lX|oIn0Kv~a`9mn$DRfMKIG2?jGJ4H5RJ7sI|{)Nxi`3gT5;^@&u@YJx1;
zItAscqAk<6csl{%tD90LV;L{_As;-GEt@1%`!=DM<E@mN`>A%>BS){bdz1Hcm5dT-
zr63<q+6-R<&{{#mg?Bt9P+thz)d?u&baQsnfzq}}A~D3;@z<$qPfC~>jkzwBSr3M+
z_wvKfLIq*IKnmk<uYXHal=HsrV|Pg^jV=fkOCU3dDVF6oiRO1{z^WOcaxD*4gX(`C
zvwQ3Q;9`_jFSZcUK{`@%H~ZUQOWE!880L9G#@gHkd$Ui3=x)SOfBL(P3_47FbfZ*7
zyXYi7#*>khi^NwZc2n03GAejixGRSTW?MZWCy!!tRV`q~WhmSTEO$}mKN?Qm+}<hN
zq7Ykz48_d3v6ehhu&jE0O~Y?b33wvl)dM7{30ws{Sqa8KtQ!2t37ieY(T_;b)>sxp
zbfvC-B+wBKe4?Zq4=wO=AZHbz3H8;lZ`}*gu1|W_=@PK>^&hgY?C&gyqgja+ouJY;
zMC>sO3w%-cWmUiNK>$~xr;!#oQDT+GUg!w`{nAia1-1ujKgqgpJq?hB4%nA=MD2Fo
zv_qw{%w2Q6$lvd%SJZ>yeE>k23pzgBuP}F%{&%OTx`LKsx1m*Nb5c#}WvJzK^0}`{
z0&@$|n=1Qy@g;mc%)7|3z3-1nt+Su2Xl7yOD$kwsxxNRfbE<F<uk`AeG=B9H5&1aX
z=I-8zn~b3;3Kj{fT}3;Q3EC2cI}peBl9qWR5K$Nv`ar%TDoP2!=-jp4E~(?jBidn(
zX5*10Pigrk#%T0cOK%MMHKrGAd)FIgS+>VO4bsgBe!ZB0df))Lquaq=*<k0`IzeB|
zIV$DOVKbHdM8SAasvlBPp#)kaN>83}+sV5<9H|w*Cz}X2R+S8=8(6mg(cWyXihL@3
z5<h6D;iD_78t6$hOGxn>?Qvrc5b*FLUe!>nbYzY(z!tu59nY!0DWNS8Sz`d=f0=Vu
z(SNS*?X&jDaUwG#wxOo~)?XWTyOi~YRYD;^uEAY9X!y|{H!VkRDM%nCsU^FRl0bVl
zb;88HiEn{BVXjcp08!ZaBd?xIPN=0WFYV?WJAZG;qxtQ-EM=PeSY3GZ54*Uvxi24u
zXsgl}1dLc8wE_&tWB-q_|KHrVJTbhJmqIl_L9m{+RiBEl!1f{M5)@<uG(x2>M3Wlr
z)^;vyr+D10Ef};OOAC!D4wHJ@W~b*vA;Ydey&3lH*mCUH(!AlRce3`c@;4JFb$5ws
zPpwG*kQQ7_!%c<y1dewMlJKGu_&A!5G6ETh?9nR$XWoQRXQQ<$@jPyi>{N<^xPVFe
zVER~^*F{~&p|+3Tzw!R}wkX;HNj}rpI#zQ#pY@}GK7F6j=i^{G{$v2h3}Dam<VfB4
z3+~r#9RE<jL%>|n7?nryJgwtasV5?i$2MB>RO7}2M>qQ|>gKo<Hc+n@_ZF6CoGA>C
z%Ii-SoF4lz*$`gy&!qKl#XCbC7(XYta96Nx_GW6|qW+Mo*s?`sf8_+aTun1U-QQ`~
zMroq!1{Nf!0&l5eBlbM`r6|4I-SnP{Z`v1D>i;?I)Kv4uJB#c+?-Dhyns6%YTPL20
z7OFh!Sr&r>#xUvPgrisefD;m&%(~YRNhc1v?<h~txRzfK_}b^&a8R*E)6V}D{$%To
z?+33MU}@lK?=lu~mj>W1{0ea`N?|Iy(Oi<oBpTVznKAXN8Tv@AY|K~iW}tz6jg@|s
zKhrNHB^?K&cBj;b!#-b8tas*|&Fu>-4tA=_aU3+7+z)2S`_O2Zp`bO0uaFjDCxQD(
z0=-4yas}ON*ls1ly5h3dxyHsTK4$Leb?O`M&e=t2^9u%!gj&1a2`d}+>n?+i<qY|x
zS7%LTJpk@A;=eO0(9tUk#w_G2`-`Hla0yfzd=+0hy=(cG&wv;WXk-}_>#>V5i|}k&
z)n(4|T()n$%-?$f)h8F+iuqu*D50q5&y|2>9PX;E8(Uivo|{IXWeHG<gNhzk3>_2n
zzE@zlW2+jySAuupmgvn~ww0#MEyW3&rKDdXEuB`qvP^R^_BI7FYe}H{(<Ylz>{!%*
z=RNjYGSEHY9|s+f&&I#ze22>6vKNpg*PPw58BKuIO<bFfit)K@iNvjK*xj`vk8YLz
zuCK+;+9uWixBSPQ<+_K8&d992-5<R=HQ`{kR~Q0#%6yc<Qu)Twl%Cv|G^6xJYeVb@
z@R$MtXV1+S8$dio^ZH(p;AE!ADyiX9_4d=Be5_}EN*3y^ygFHy#<9NpJ0@eoH<bL<
zR&nfv0XApfe})6AWnp%p909Wc;J=<&0fz>L0gLt-Apj#bSPUw<^U%u#9Ap97XxV$b
zfR|8ipb!67z>m>qZ(va`<shNzqv0CqbV8*#MBpxIHJbVe)tZX|+~{#IfE!(gCZhBN
zZtgxKR0e(nIQF-z`S8AR9hD^mzvcU$H)yB?^WyIRlM*|lJ~5b*^bCB&=Naml*lhjv
zaLUPWc#4*qF`nGvgQPWFt<D+bE`i-Hat<I44P`^J$di`30Dc{A(lsjd2#s(l;ZtiO
z@;wU%dP6l4=LrCr2O2(HutLt_!Kd6ea`b210L<eywi<oBRRDf$#Q6@qtXblAP{aMU
z9%FUO6=P3+lrMG^E%VClA*P%I5wl}^CxuB)us``23<CTZSI!Pz2yeQiMlwRqviGPD
ztw+0ri<lwfid}KE90r>3>2JZw9bzp=#U<%5@eAQzHc-ieE{fqT0b~^!v#e4>n1yiz
zX=#Nq>$1G;ebP!)0uq_zDbriw;p*{)*ow|_#-#y!7|gjaxA2FDhwW_J@RjnzoDle0
zN)gjND=}A@Wjgk%{=($#>#AL+%jLvj1*xqG+oA*a3!de^QWpU!U!g`{2(2xfNwrCu
zX5G3l#uIx@I3m>^>f#&=LS~FB#AzqtYPOW#ZV&6lDdnFh`f2{{QNgVxtcoMf{;#qe
z4wZ&`?zS!|HqClyT<8_<f3Pyq26PgB1!ep{9rDzVAgKl4QftCB1D^-LkU|U|MKcRw
zsXXIFHk@w|6P_g8u#PtSE!>!<P77+XlAYnH&SRcMY(e9|LgaPANo9b;mg?|t$i!au
z5AS`YQL+1@tPo;S5#}sor4ncnTo-U@zWB+{pe&q_gZCE#$r84qwM^x!5qZ*7QbUUc
z_}*yAenHQpfh{N1w!~WbEXo2^igT>b;x+BLoso<MTVn3*j<KxH2u?oW4Vez#C0zxX
z#uf&;tm?%$U;(@sPnDO`G#22t#g{0yO5znMGz+s;lH#SfSu4eB8ih26?a*Ym0wJYT
z$d|IMRI}69B&|tD47YSR2iWgv(+CFeK3}1z^IlcrAKjydlb+g_AXs^egJ_q<rP3zo
z3eAAJ3GcYgUqoFDFh{g{$VAXEZozRtSQ7nK@{FM}cK*?}sAf{Fcs9jIMc(KS<F_7#
zy6??Brux=*XE%AB3$vMaq_p&DJ9#sWDpn)`bw1MQCt$vd^}kjKWIXM!=u0GB(hWKp
z70_(XcQEUP#<P}cRo$i$S~!B9OBBn78Mq0JMeH1Zj=g|?+{@eC;q2(PnYX#DoqVRk
zmR`S+ojCAHLLi+4@Di{kx){CN6hzR$-;6=}OfH4nDp8SNuo45E(YCV>FcxAYVOg>r
z>VYC(kTN!?k-8CnvmQuCTE)5audJ6{yZoTvEzu>ZGs@91iph4a@!fN+<>1YuZJTMA
z_W-z$ZrXZ)@2V{&m5MbfIwEHkNK8UWY4UOt{#C9Eu#qas00~`Qf_(?4Ckn}m-=gL^
z+pgT%?b`&+6Rivb{A&Kbwu&_WAG%LRnb_?1+H~Oiw(xQv{;p?Im%FA$xba5dar?N<
z;>W?GJJc-Mdu<rnfk=)#N4E&rOF5h2q$bCp7u>a#2q}@ej6Gf_pFi;)j`|cQT7r3`
z?~s<WEZE{*o#deIbl;9i?>S*B=0^7E96}~H6V>PbnVAqL)}V{Pw_L;<qzoh6b^trC
zzb6heiBRD=$~4+RL^BP_H|Kl>Ly}{~!&jnacVNr!v0o{wt_kUOw{m1}`i6`PMgmu5
ze5|+VX;vBLvcop*r)+#c;4Xt|W5kNfpa)D-+y-3duMobLgFZ)AHi}I|tI)jn%A{nW
zEpmfCpGp0;ox+-ZQ@}3isIMlcQY@4V!w|QDMP1Ie8z!FfOy%soQs367SjVWf!W}9P
znuV=f-7?aj4TKA%I&zXbzmb$mnol(ksnWXpJVCrvq<GQNA@}S8FklOn@zb!~dF)el
z09a-D<Y<76jYsibhg5OdmQ78)>YFdG>~>vAfbIfsMN_meQ2QF7$Fhm325N8GKcv{P
z@Owk9xPz3lK_!R}TmW}hs1BcYR7;~+MD~G0s4ZY@Nv!R19yxZsyQ$Q8HFBNAZKu~%
zb+9OO!5jbGkNV@FO$_)D4_)>Nti<t_KAv{9{vT9BEJTWJfz?_V`ILxTaj2alC;#bN
z#h0)}>L!v27zQPdH2U!q%4x<SfV!&=gUll#^APC;`y`G>fh0(uuY9F(dZ+fRK*-5)
zwEF=b`25enAkXf|?`bOJoYz+hq7IL04jicI5XQg`UL9kTGcQ|y7;gIhnLgVkCe8h|
z>Mt+H;<U!%N8X{vtA*8RBRNO^Fu;ZZhZWw^LgdT<7c0U4<Uc0X3a(kd!oJfN15Z6N
zV1$V4`@e3g&vrp09%L3no=9Y%Luy?&b#AMW`LHh#r3G|h-#Vv~jQj&-!|r=87wpb&
z4hH&xkBNhQ_%c1XY$(+Blm3|)ev27`7Ekb9;(M}s95dVIjfMk%@DQ~Cai9Shx5E&=
znA?`U5V|^Gf~Kjwos8vnY%k@S^js`ZD)ds0TgZkoxIn^+sd7onuO%)C^|LF;Jv@}X
zM0$pdZ2({o+~(THLv7AK5(hi}?W<Y;?N@(8Mwg8zGH~MrGG;LcJ0tb1eRx`|{K<`%
zn3WHV|1~S#Xh&+Jq}Ge94aQdFs0vzh8FTs8d?J5N+F_CnRA<)xBYQ3gpR|7qpOXJB
ze75v{!spoLV|&2Ew_|MZ8N}{T-x{UO7Y7sP2pU<|98Xx3K8pvM(s2604z3xKyLdW)
zIz|O}9ER~E#C%Gs=EYC+NAK@CUBNO5@wJ9hCcUXG^-p?-{Pva@=$CvU)RV-pH+jm5
zRON;*6~{sP`4a}%TW&1~-7ThgD+C{+%M!G6(H2DFm#S<TO+Be{^lzd%qsMX&qpU{x
zf(hjOgAnclUR{dnImsp@aITQQ580VogkBAsioSZRysV?b+wl9Cm*Yj4C#aYfhB4sa
z7R=&CfXBX6Pjpgux+m<zkpRzJd03zaAW?^QUr4Q8(F58#hXkV^@4p#7=ksaJS0&}T
z*r46nA7<W=+3s!J?K8ZL`0<1OJ|Ld)%kniwNS~I|J(&qgHrfpCHyk?ZR){8e#jE-N
zzmlG4=PIRGKt)5{Qg(IK<Ib^(-K^7!XQYrT18jAsxkIZ_TI;`{&y6Ox04oBk5<dr<
z3qJXrS?Ckp4sIL65_d$s>IN30f@nCpmb(CTc*ypU$aGAREu4Re5~QM=p*cs9mN<Ob
zkks9~If>_N>#?o9y!h+J4<64Q1IK_PSzmFhFpisv_wnH{qtUZ4r1b`Ten?@}#Fw3t
ztCH&IiBzD^bH5fzs23Y^{1uLVO-d~<N+mZN^vk=Y5GMrAK<4{ikS0x}d3m>0c+kz(
z0oQdlC^j}f?DqOMNA?=P0&IZ=ZqhRiOi|n?l^&964(Pl%A?T~Se(b77+55{P8`MDo
zc1%2neD+=s+h%{KGs_}uz)cFIhKb2-OeuGHm-nMVzr6{$Y%a-kXlnbX3qV@Ji*N3E
zOu3#|46t7eI7~j8ucP3NG|-(7q4f&XEt)yh<(Ltub_G{`tKFJxqm@mm!X+vJ;4{Kw
z#VXcfc32l>7M!lsKD&qJ>2`IzeF}G1IpR+qWbJvq$?9O6qN3Zs-VY#bp<1y1iau6v
zq4uLbnL^YZ1!8s9-0wo9a;wSlrC@UzDoGb*Epb9JP&YBgXh1N8x<t;m8bCiP)9ZIv
zWW^jt$O%A$qB)W^nnv?(m3!~b+%K+v=Iv})1s=R~I{NZUn?}Py^gXP92q-J#Y2xx(
zpHfA}&~bK7eYPDcFX6ZYZV!d7D6H|3OEU6q-Y3rBIG_;)gWRuDe~>zd`$>Go;_k>h
z>mvK<o=@A_)rTs&BjZeH=xP>bW2|%F0(93CV(qw$slAS>bzA&VsXFSi{F<|)p(3#g
zeqU#22@5Wcoec2U+FEfEd0!_^o~jh9o<!vhXH*uK^vVY>Y^{CN6XJ8h_~pGf?9}>Y
zcK*Q6Wr74NTpUdA*{HQgc$z5PMl1}K7Vn0W0$@MP6OL~3X1oyD(-)w@D&jSv11#Oe
zuXX3eajiL&a8f`Ug|6!V`qTaj>G7^2m)P0fTfLag_WRn4H7*LG`WguDxDE;e1BzGL
zZ_qnBGG>gXBk$GkH6G^?e-&K<nQ*oup4iu93(nVYx@2U5I%bY=|NTMP>@+nw9```3
zvxt(ZlJp!f-Mgpq;%RD*{{bqx@{S1)2VFRkPQY@(8<>P@XNf?qSWBkP!Itaq(}G#4
z&>{*$A+W*@mZM}fX$}@5hHr~isn9|uZjMx4qj;!jCQOkLOpbHTZME7B&wifA^xIjG
z)ADfJ!<GjFhXGwo>U+DIZS<jcy81WJH-YQ_MnXV%n+2>?!0NU6LfDCSI2-6&Ta93_
zmPU7=m*4B-X`?&PX+Roq+m{a-VEaJb=>XMcGd}zX&@+%eYnrC=C`h3pK>i2+g{ESF
zAAsPWqp`evZOa$J^QbR`ZaTVXGbu6B02j*P?SjwS-;V+-KBZGK^tKSt8b4@&y8;2g
zFNDv#gRzAkcuS@hbacButEUJkKu~^>{vTDej<jHA!D?2WpcjlHT6D`ezQDKx9F%fN
z+R8vQM_Cip=sqa4Uc-CD*@Z4bwkh*3nF^wUnbG=Nc?`6r0Vj2kEBd!MPLPRxfv-x~
zy#4LvCN#k6iKBJVaO-W_Xi(36nnpgFre6eW76S+XB{jMb{EsHwv=nZtuRz}`?9qrk
zY&q2XLDz%~v+U!;@%3*w-$^kSQi4sxZiCj0C}d4esB);{gqTI_W45eGJ6qUL;Qz+I
z-avmDlI-HX232t&4klsBc9{0JY(9$WZ$oEDy^fG#nApcq3B|UUaX2hi(_ZwG6+{U+
zxhg&VT%ZxcXyDI5t+WT)Ci%vG>_=m-P0U}f>B3F1t?lLX1;go;)J4eN+?<{sl;Pj)
z#Gxy9RlEQwo`3(*{^|fGdL0$R9cn4Ia75dPK7nHz-RbqjMBD*=NK-CGvg10M@39k2
zjOze8yI+r|o~NvL%70K<oHM*&sJi(#{+{k4b&^k;Aj)Ko_Kzur;m2vghrdf!nvjS(
zdjSDi0|hM(P{8Rx3mfDM#EbZvH=LtwBKsq3dSl@7Cve5P0)-cEHVW0{*ZXbie(uE2
z8*%LpT=pc^&8Mnez#^CLJ~NTxlIm|08?iHe9|12BIdl6+rQ|x&CAk?O25iwkpqdPF
z=flC5CbO7~&SLERU8eN<k=oD|>)g*=RK99v)CVr>5}a9;*tENqLwhisF;-D<)Nkm*
z&dk_{{r-L+k^CKO+6ScamQlT;rROF<-8rghSE&S;)nKww`w+2jFa`@RuJ^IC5~aTg
zT#xRC8Fd)|SUr+<E&y<FG)|mt3euv`^q)d~tI}oLyDi(9mX(%Mjj2v|4Rq6W<4nC^
zn&fYYOXL-|t5h_Zh0>$~6vkzr8d#=&j!D-rnjp+=>eE%qk|Op2iTlp1oDeHn-jj#J
z)-B0VSsVA1RX%zA^wyY@+NogP%N2244{*oDv<j=yAuw}rZmNroQ2PQmiFu-Dk#v>q
z`>Pm9C0G>7UDRD3L$r}M6`}`zu*8=??U<dLJ95q^y|Lv$dmt{+T;S&9d!4n+$q$sh
zFqoQ7X_@*`+DZCMaD5lrnK_eSN@uJDTA80lYmrw<`}m1st44RvD-|u~*mkrKmNW#;
zhRKPMSw?kI>(^ybXN%Z8zbEnUkae^&XIp0mnp*EGqbE6M`TLXtZ@22vG>eN4DK3gD
zpwTuE1Z&rVg(1ziZ(?1pv|EJ+E5lhzFx#fk1n8@s@M|!8uo@D5)g2X6Y_q=|+Yyxu
zD!)IZK$S-JVezRB!Dy6?f1%Cu<W;^u5?6sBbrTS<$9oIJiW^Y5Row{b8qLH-oD40V
zl!G1#%2E>NvkSjR0;^O3pdW1usJ6Qh^QKVcvq_(hb<VumY!3!FQz0v4Nap-=U+>Ti
zY{c(%YJM1j^v>g-&0Qm%8)vq@0y+VuGG<d3gH)KPSq`)O;G|T}qPt-kYwpo_LfX9n
z%IvzuYbra-NoMj;Ky-D9rH&b=(Li0OCx0(>4%pj0?$tG+bKKgkk}V^?jmAw!^m$OQ
z+;-YMl#bT|CdV<@C=Fk0-<Udn#VXJYW&vi)q1Zfhp5z6-4$eVu9(mS!veUWWynVdh
zy{7U`PHo{pkDS@zKVlwoyE;vrG}#;Zn5cLiw`oLs2+2?6+Tfj}GN_(z9mePpnZn@s
zf&|<dIrT)lY1@AMCERjZw45D%R9ZnE)vxK+9TMqG(~m_(X*anxe%x36L73{{pPGKn
z3cSOhEMskv{x^#E{SZLP1}&&1@W#VHLOyqBY9OWXFvk}L>UISW!YY4}4^^lAIwV+_
z(XM^1GR{1|@79ea`)ik91j>kRxG|y&#$SB{EC9qO#nn%;=thtPGpC|Q1qjHt#EZls
zj`X^!Dyn0<XfbMa812_l(LBiksSAC+Y*-fCc+WmjWQP_8@+Iz@UgxSZZC7-7caqEf
znXCoq8SkTpQ+Sy^pLVK$=WFS{CxHDrH{b}vf6MvcD5D0t;ck=W;y-u02od*@r|fqr
z?c0w@91I8IXgtuPa?|ANz77RltDgX9!Qy~wzTB2$=oTj;uzdldrjcb6D*H!<_>#zu
zX}3;FT^VK#ER3=v*MDFT+3E~{Txi7puJPh=C-DEKp|Trt_O+4S<&`zrZwz$+CXo1x
zJ_}TmHJBCXTIMPsJh0X1gQ4yS-cKt17Fci|=<8p3iKt&lL7QL>HlvFc{Dp7@TCi@6
zH7;DBB&G&#g!!8AJV3@2BHme7r&f;|KLpv>+58dFns$}|TdnlcpTS=>_-RuklnkpK
zcjF+29BwC-iS<_Ec)+EI6oOXiD;WXbq|ldv-FFrwC4K>%U9_db*;LzCa5A@Lw_08B
zJ7uAKak{cgoJa@1rTlt5bj+BC?hb-X(~in{L|5VLtJP0B?>Ig*)Pbbx-+ipPx|Q61
zTB$Q12JFcWBnas9TvVV8M6Bg@Oh49TXaUQKJW5%hCZ<y7!Q#<0@DNK%5pPYJC^htS
z6fqt$KOIS07?xfcxB!WImvSszxhcjkvmtPS_fLjXx_|#`kr7}>Mf!5_$$)LRDd?8Q
z-$AEH*Rp3MypWe$Ca7$!6irtrH|_PdspFeXlIF2fYpt`N5R<TNg<FCiyjt8rAq&DT
z9O`Q5ugOo2?5BEflXMK<{<*LDTO+MOtZpyfoDqI&AO`|k2j=BZ9#>{-wZqVr?Ah0h
znO=vpV^UKdghzh8WB%F?yZ%z{-~DX^0pjIr5QJDOwxXTk_j#$rlH#99791*?1zvj_
z-waH^y<(Un4v-n!t&zW&1IoJj%wLWS->&q#^}xL{rQoo<A^hPH8Dn$$42S23offDz
z6L0=oXIMX5tZ0X13@rphqZ^PGh5RaaJw}70>zhg12cZ2KGd>4>UY`+tdD2k9UyM1T
z+mtOtc4A||xo~RJL7>cwnW)mJC)&pZXCiyc2VWP=`t`!K-#*<XRf9e71K?a}{ovqH
z6W#GJfalW8g0C%hVe~esi3#NooyToMtnvIu?3^a5p_H>+xyi!2t=w2cpRQ7bp2eXV
zCxt$@H_jOt(O9i9-c{nXf`HuvMjim%G}J2r9m)8h5dPdrUYgv5<AJPHCN;29yw&{K
z?EHoczL%r=P34UPt3?RuvWsD;${}t2u;1S2xz6o}nbupx?b#oi4z*_>QQ@S6rR4;@
z1-P1s+XEb^07zBekykd0o&){HwK}LCkW$pdI>yW)Yx}E_yhThfdQCw*lwkC<Tp^f0
zI7PfX7L|2sOnp%5;&HNC=tUZBHrkWAAF)biMG8zq-9?2b43KfmCP?SQZB7B^bzPs0
zFJ^FlLPPIiTTogFb{dFGL37Z|h78}!6=IVx(N`#ffa)RXhCgjVOD;7hs1UqdDygez
zGIr^(JLN_|K<LiTQE4j=cZ?D?dE&;ObiUkXOA@??BrB}TR}1Pi+v>j%ECA8Eg@77M
zWJXsbSr*K|HAwjQRcG6uZCBDeC>~Ld0^_Tx2}NPPzEx(m`G<RlK3Q2+{jxKMJ^K@8
zmaZ++-*EwwY>ZK!QU~!!^F~2DPaK#5CE0njM#+~9W?Oe-8`R#02ZYZ$CpI0}g)ADl
z^{~PD+=cAShkpHz<+rVGXFlv1b`S4=o7Pn$iDUa>OLKL8+&_V6G#UA%^yW8_6RY3X
zv(nr@)$&ZRjd1j3Y=1sl<&U@)D2dm^^SP_pnU<o(>Avne@8qyI)=rHT#FUIQ=ML_U
zu*|ye^gxE!+#R}b*XZ*vpc_IOU8ys~dq9u+n)o=c_W%QyYK-B;5pPBu-?)4UE>{D<
zzu)ET3MFk$XdsZJx%qHVHmSW+6q=F9Q`y=aXcrW_7#oMGo|XN2dhPxm!_T0`N&wY&
zsJQoIBlN^=6j(G!MHdSV)wC;qd<|VGzTz`r21CiGg$H7-;wU6IUF~@Ztde<{uiyNP
z#5*~%J~Xvyz_MeVW-?~PMt_Pq^32)ad#8N6bWQsUT1)qI#%rkKf$v#QQ-gupCcrh5
zm%8C;`n(WB-Mza+MHNm2VeZBq-At$_6~wkL1Yq~`9vY(HFDC#BK7k_ss}^)L01CrH
z69E8HO|`%|S3dmL(GQjf0_0!gpS|fC{ujbI;N6P&@Yiv)`Gbb~^I}B`<3mbI&qloY
zQ=NFq9gm~^@X!zohZLZ){BQ$c1f%tQHx2U(q3~nVgaO=4fc`!x?myF5{SOrvxc^^+
z&;S!;4!7BdR!Ig@2o&z0?)g^$YBU!MMQ`0_Z#;k;O3XABK=+5LxKUmDu0;OXs8H6X
zkA8mMv+g|Q{~rJDaLJm)cWVP>`-l_fVD9HFR@~x${H&ux%7Iqsb3YgsgB6_xX2kI<
z>^tyzj4P8tFUBu%Hvoza7^-bX-IVk+k$FPn0>76khEWeYwUJ~dG>%Z(`udlCaOCV?
zU6K#0z7P&qNQ2tTU703lq<i?@H{N??9_);xS%(--jNo&0I#ZO4&s(m$z*()o0|3E=
zM`2!EMIX(Q{k-9m$U44vQh#6zyyjxG%75H6)Ghs_rkp7@^E|1~sQ#-mBVBti;$@Uw
zR@66*zZ&Qpq53s)c#rrqrq36{;~_L`444uH+<ZQ_DbQAbk;dZ7R%*Wo8L121hJ8SJ
zs!B1!n~x^>m&QwuWNt=NU}-J1a3Xf&p=+|x;*uz`=@9N#1#89%2^C3x&)RdlS9C-^
z5Lt)cHG2P+z?FjxZI)PZ2f%>EihOZ}_$t>DJA*J%L5r<V$*Z#sQr&)*$6f*G=w@i;
z2{7KlZ1V;y2bPHvaT2jMJXZBvRAFI7+vM&NRR^ss=$cfM2Ij?DgD5b{xdYX%dt34B
ziu9m9Kiug-e2Aum*T5sbF%BJYJ$z<95k`JEJOA>D^<`hbtO{Cha*KdRK#E@>c&j*`
zR*|pK>md9!!;bnjdt@JaQa1;5iL4}+^chEn2FwvsL%?Cq7Bo#^Vo~qr-uw~0L7W>p
z#es-tDhf5`9p2qe;K;bWf3$Bp^+(6vX94>Rr`CYxnWDV~T|KEyE9?ysEz{>aZ#p&p
zy%-!FQ-$)C&4-+0_r@GK{<w?e^%R~Zw7xO)$$L@XVQ<QUz&WCpRZkvV9X7xtAv>zo
zOPB@({#fztBfC{c0EFHbEW3!lz%xH<%_c6Lz!o2db4GUOx{N)L9S<vhkomTwZ@<`e
zD^zCFmqW@{*zNyUED5OxIC4Hd#{i^Ka`BUf_nIv_FSJS3j~A+V$>8`M-X-iScqE`*
zxF{d>^@2gt*(<x;nDa0&M6~7^VhgOEb*B9-<BxX7i9-Kx!;e>0-)5%f6F~Akj|AR8
z4Yv-+FCFL0eAT=cw58b3a8f=0BFTumf^()L7!hA_W|7!TMu%u2o92hSu2Sgq=5oov
z!s?3j2KQ4b5jj0f?Npgt(xh=_fKT|wBNdfT+gY2bAbpPi8dy#>|4EDHiEb9=sxO8@
zX*Qf6yD8pCjvsoNmLzn6#{=7iCJ)#vB>;B==4?&MV;!tBWM|gGH)zhmZos``u&;Uh
zTCc9Tm0b{gzah`diGTLdFu^Vp?AjlJ=VU_1#(P;>B08kog|`H5K>L*PWZKMff3mHf
z-^Bf@4U15YFAVXKU9$EmRGu%_L8j>O_g>W^ysJuBCjC+Ll(}T$?Uevm?ZEKCee>k-
zZWij=q9y4ceIfkV5>F}@XiU_^wCrWTZ8tW%`5^cGP>Tk4AX7k7#?E9~WtiSk{#JB`
zvPl(_<ule*?q9rhJRsvk>ws55Z1yJCZkunhRw9T9@tuGpCw@{jO4rTge6KH>ZvHO8
zj<r(`z(Ia!^w|=CG9x8B^OuI;F0IsMoIP-Kog~lCJNO<N_+H|7`}#w)`&Iqfu)8B>
z0WxsHn{)MvpTpLNWw4Eq@BXDQouXii!HReR6V5sZ;tQ7~0H+IbTSXK!jeNPh5J3K`
zB%+P2LX*2pKh0!m;K0!kkvZrXt;;aIWpUKl-`JRE#&p{qK9e5(u>Yv==C?-5e9Y=S
zK8K}q1#j|O&RpFlEI^;Zi9ptd&=yix^AfVx!u0x7&Blg~9Yq0yGHFWr_>vHOb;ks#
ze7r*!x?VWcc=I880i5b_ZAjLLcO2-D*}RHrCCW*&z!e|JVebHkI;wRCCqgwYqcz~)
zJZXy@VJ&3m>_IQyMg6~*PWBY%1kew42wf>QV9|~p9_UXwRnea5+d1&Z>}zw$V_EaZ
z3@{w34HGL8A%gfgQD&$$g~@>7Xw_65eF-`(NUow82}ZdqW0M-Ic^8G-^3gJ-=(7FQ
z;wbO$DC?q%sbf-A_&?H=cfun-FVB>G_-(STx}=Xl9Q54^mU9nS&fhFSPcf*3ovO{0
zRupa`(<{1Ne#h;BXuWsv!K(5r4*EmRg%IKBmb^7Nkv9WM_$Kwpk-3-4BlcV`d~Ea)
zG;(K6Z-+&gx&D_ggfl=@t!Y#TTd4TgPE)P%0RX1;fYX*EZ?pNT@dcc(yE9d^I&o5U
zONyfV^a=P4)v1G(gXRPm9|^H?Ka&=b-yc%d%_|;|4d2e$L%>r(PNV1`p{pObo_jnH
zCN9@#-uSfch+>NuVYD!(v7i*6nCqwc#1md;Dfe>CR#tB(z4HC>-b2IB&HCpMkWZaO
zoeR|lLMMnlbS1fgXFDi20^|U21{Pu-mTmu}gF*-Dd_F$ayep9ci_q@se+2J*jI3@f
z1jF)xw_|Cs=W~aKa_B`3CjEKEv;Q%x$7muNK!GyBnGLk}AGKg2B&oRz4uh=*cu0HP
z7{rm8ax?~f*6J%X)Y$-OlAnwP!F^5OdK5>bsupHf4|JmGwX)z8N`M;tL%Kr4@GA`|
z<{WaooezVNmQMvT({E>7OFq-bFQD;`<G`)6g~M^Aw28l=oTU)Fjfk%KBmqLBpESj>
zu!pK8jpC^QnXjBEGDY*%(Wwgfl4YTav3N+d6iJed8*WkP?fq*)i#d*t@A45liEp*^
zZF|%^Z;$Q5_Tq`($0`oHgs(HyZTxq0h>s~Cv#Xsanv4AmUh`9K5C5^WL4F1I=;oT?
zzh5|0Q&gF&WZG`58`yxRg-3vcQ+B}3S=|K=%yU%hOkiP`O4<REth%gya#441d!UVf
ztlhxp+iwh~Hq-zU{2o%=F6#}DoGj#aRJz^td$S|-f*ict$aP~UQf?UMFzqEh>SvZ8
ze*N{uSju|3W7eTm01th`?PSdM)t=So(L(sWZ(X#AAIAtCK_V1?pt<G91Gf}kCB(zF
zC@xF;_E=qr>##X&P12@xH0TFQ-AJdbqN#`Pyr6(AGna<C<=}G=9TjZZeUl`aR|8be
zO64v)%=S=l7({1BhdPq!`1F<^zR+ERn6XQy9Dml;f9kfDUq5;O2>YAiwn(<~&(e=0
zbEDSeoT+A4RTJ<VLKX-<H=$aWNtO|s?hV^trG<<eq3yaIo#8@9RTiUZig=~G*f8*R
zuk`z_D6$DuXLCR6T;1!@2FHP4s~Z7tX5BBIP{`O#P&-sI{9~_ZKeRx1v|fd&tc_<{
zHvWD`C9iU<;x_k1yKcPtk5h49|2=JmPV(VxB-Bl+-L9{Jj-x<+1*r7$ty~;~8*vK4
zNTN6>=}CU?ZYr`i*13CLbn&m5F*#|hYqqNY#9a+w>6}EYrOdOUU9+s>Nn-oEpoo}n
zje1D%egW!gs9lJz)>&}dNw!=9I-*X$L|w(13n=CMG)r?-T|ec<6S}Az$;$N0laSR2
zmndp0#x^Pa3%}!d=Z78$t%i~vD|}*&z|m*>Gr#Y4T>i9u>;;t#Y|3Fel8T??Ysz$n
z*oNuw5lURbIo^f&B78qI_3V9iv~oPToIf*Uz_^u4!uBA%x`qy?6VF?P^az!=mrp0f
zB1ZL9)DMx#;o%kj0d|hAo*j9ef)^eF)B(b5SUNNO<rl)^;KmkNkd}=kHP#q5iD#`V
zr!V#jR<|r1#J>fNzAKSSCi`iUjP%66$|~XU#50kZ&*T9Woy9J{vz+i(Ywl=6o%?=c
zonRAOK$0eh!|9_QIy$$GHUk2+jm)BvVI%ZJjMV2Y(s(lB3^acyOito#xF_#_6_m^N
zlka^BkEe`9d1P&h92yh2jHK$$bvlvzS9F{X*W9}jM=8XOeSy&o;Y|?Gq+5cl)K=&-
z05l5PiI8hS+js&TRM%AR9lZzXzOLpGL0x`bF@8BUujftg;DF^bxU%s6aJI`6Wa)(h
z>;4MO?K?5|U*$Hq=CBHZIB~=Otpf*+tNl;p2mk*CJN^5Vv;X9{jQ_ZlOPl5qFj+=i
z39w$MH(JX_Q*w_E4-imDO)?7^aI=h#@aqRD0-CEJT5(n&R#(H@`@FiHqIL`CK0rT=
zHx?-Sn5&;6+t?iT8QX2U(hqq99b)}X4h;l6e_*vi?DTEzlx_J??N(ZlG1DZ%yR_?c
zF@R3);Vg%<pUo=P3!~TXC`5sB*t#~%OR3rO?O%s#+A8$+-rde47gy)q3t~nse0+Dd
z7z5?a-(b((rqid3J8}&`K#2vXi~sNWIjKpE*@E(K)@J>$)5l7SXFw-F8l9u^y+m~%
z4xEP;#3BhQw|ZU@byZS*;0(Av!#5#{HwO)>b9YOQeB~fEVZYPWUuVnxx+WccCDc_<
zAH${WuvgyCtZ!+>--HlI4PcP_Ul1rX_ykl;JJit<elK9J+2~es&Z5tYUn<3ke4yHo
z#snh#<du(Wx@b=#x7qfmHRi8Q%$n7#Z?3o*=y?{fNu*ZBr*H0FXkI<@N8;o@fNuvU
zOgM{&mdhWv;Hw2MXgCY>3bY`Bcu$kP(sK1BfL|k8jJS=yMeHSVOCbp^(=uUlt=x<)
zua$OBN#iHUHlZYQ(Rx&UFsUxk{_*Wt`-TfH**5_^vyx>NQf1}0<8@v}T5(!`=ebiV
zAXo(E%pf_FGh_g=HVWF!v$mtl5f8QWnlnEU#Eh|WS~7QLH6lnp<xe&Vac{YXt$xUk
zmV63a)AjB|DNucTT^P->EKoWAzzipCtGr%ed;G(zz459K1mXn9E0XxYH~zmKsgb65
zMk}|kW5_b`dAYhH*iYyZ)pOQT%n{jH1;5%3x1^4)yuE2-JsBQRBuQwA7x4U?mtPkM
z+w7-795?R|U+0w#Pwgw~a`f^K+}>&M`8#mPeG6v&R(FKkLMr8hZZ`FkHWe*a5)-mX
zXugih%r=0<S4GQ4Tmi&_61cVk5HEx$D(#jdiDeNd@3N0OG}}nrAN4Sp>D@kV7jF0s
z?SIW0FH-!&P&f1(?3M@MIW`s*pJA;5e@NuklNaR*rQhV{YYxG#_>el@^;Wm6v8f5P
z_p0VU-0ph&+{gZ-zx&v*Pu^);Z1@?JeenQqP`evCE;oc~4*&*t;CBE-A+43q1&RAH
z&PmV+7GDHxe!;^&P`U3FEA?(FFw9sI%MU;pS59@5lZ}|xNr~9m2VvG!zA9C}cKBvf
z^aH;=Q}UkjzE<M!7s65SB_Qpq-GFVnKVq#1(~*VtTF0kPS|@6@`PL+C)8}zbQNCYB
zhj;ny5APgFl0X~eT%n3=Hhg27aUTEPpmks_pv{CYO1yRKeC*j-!n>ruQguE+l~mp!
zmZfTMpoNOwk`l^t#7+GksN+)?Jr$MTsMA6wXbUKhgr4`B&j)?=O>cl#UYL*IZ0PcD
z{J(E8zVW*^fo=P5Jji==%w_{HvjzHOsyS5aVWVI*@?<<k(u?sFF;V2i9zW7e*@RT7
z7zsG&355>g9wNLG#tW1lUkG+1)|Px#-+@JGZ$(8ES_BkvH=u!KS;flF%YU%@A%Xh~
zRC^F?mq$QlD3yiU`)V?QVlLhbCb`iK#KqVFfZcV*YyfT^H^EM!Q3$g!L!Ksb05D|F
zi`WLBzVRY(RrjR7x4DV$k*aE`a9b>kl{1)eVk2M<o^NI{BMp!i%;pKW|F853BEa=p
zCz^%L186W`Yz{!B(iM4C2(%sHUlO@uKfs=KUPGCUavSbyjyJ3=R7R-#BetbBTv*+b
zhy~?&Mihk5&)a1dN@DZE<}#i4xx6p}SFZgDJOJQ3(Z|ieAJ&V*=t+SD{bRsLp##+;
z>N<35i&7d-SpWyCtt8{AfnRr0wmcfvx&x()YEm3!i(uH=Evcx;nfZB=Y(5P4hMfDM
zIGgYINt;)Ydn7RK05B3OaN+NvABpq9f634(Vxky))oD_%RB2UDzBFLd%_X6IwX`Lo
z^%xcPR;Akh{Hi{qveN0aGlRrV+5$!gw3s|*b)*bRaZYAA`#;0`@;zhpxw&EId^X!1
z0`n^H=4y9~e;iL{z#xIXCO70-;N3I>u=oeimST+5Mp*(N<@`kyBEsCChAly!D+Pe)
z3G_SdW=Nwt;mQ=IQZReCaCUx)%Rk(v$}8Oi;+{RtrY|$Z2L7e-`h~!tU*yBS40H{x
zo{=Co5rzioqPc%$TO<U++?1a=8-N>YsRLyNmD=ibtnAurpteT8$T_P@v#7`Ix=ypg
z#~j~Qbvh5Ko^8MOh46j0ZqM^lF-U$vHl!G0p=*hw;fP#G9L<4a6lBc;xJq4h6`V2q
znsk-AhLr%AgIs$wSdu-z1IWd*j0?IsL5e;NqfVQ>T+|h{>@?=6FSJj#pjX~JDDD`I
z9BE$h{vZLrFSG#G!vt^PI67Wuw*<+~)Ww36#2k~ZM0$G!l(%8wx*eRAuv_ZH(<q0-
zB{%7aTY~VAN<*&aT6d4uXYb6(Vfsa7>C@W1=EHzs46TFUvvh2sm(~TnrTYQYbz`_0
zCkBO(s_*p~Tvs`E0)1YBSs_j-$TmqJ3BH!27ROg#&MmjIhq?D2q0j+j;}Onxh~uBQ
zb!q3xu66eUT*i-ATIZ%`80dXNXz(FESmNY~O*ZxJ5VmlomR$8%T3+mN<VlrO9111i
zi=@lSy4ERcDwB@DO(~fF19rM3qv)sCDGvv!%iGJFBX$Xol<WQJrQ)immC1&m0iZs9
zXxc!a<Kxp#(HpGybr3F(Asw}HD~g3~DJL3kYT#WP_!jjpka4!dJ_*XSZEE`$3~PPn
zR)ldmA588SGb`<^(I{Z<mFdbt{f>#=2anrJ-liVDJzUpnIQ6m=d<y_yY-EjU$RH3+
z`|SO-G2ye`d=;ZR$RT#H%pH<%hqRCH?c{_rA09sX=v#|khQI%S-yhb-zb(IG=R&~0
z7c25e@DKc+Lf};5r@*ax;1rah7F+^2XkTpz+?b?nNfj@mF6|f86K8}};mf-z(4%$L
zZpqjRnTW3%akQZ$x6^3JPMD)pNyZ7W%sOUng}3X6#%072f86dOD4#)X`5=iap`o|M
z1b}J+0s<d9L0OqeV={VmT2NsEF%1Zen#y?fvBoNK0@srJI?xDp5rA_&eD@6x%<tla
z-v_{w8g;-C3Q6Vv-I{jH|6XrsHnq(WU|^1nMKb&MIPNiV9n;FXoZb^~_CFCo_i3mr
z4W#IN@d+}zR*=H+28=t;R;~r=p%RSttN96mB%~>|MA1&M%0>H*pts<dChLRT^@z*p
zFGGRmZRAKnl1wAOR{3=`l<-0eUgh<LS)Kc7z~&)=*2@2n9_}xo2blzRz*_y42|h~p
z1e(ff{uSIEoj$3ymM>#%lLF2UX`yIUpuJ>#2Gf^Il5%W{oHJTdC`V<~Or=dgkT+aX
zOiLQ09HQRHc+lA7eRWOo!`{QM4fLlNQ0))En(kD`-g=9HVbZ>qo@=|-g`Xj>xz?o3
zN0%222z}Zp?W?mh^HABy{?0RZ%!+H$E>|>Y-sC!Je#|&;?h0PQ8d~2?RnjG@8y9fO
zDv6D}Bx#j3FHS_}cJj-K4aAw?IU|Oo(YP7%sex~a3M9T&ezEPv&1ntYX@y7VE?IR&
z+ER~g-=r*vkK<HrCiMVi`e@y0{12#XmAukZ!k3ZNRTBEe3)1>3bdyRxD@<%fVcf+$
zU~W}DYEDXaXCxOLL-;_K%wF=-NUOKn){?o&RJ}j-htAPveK(&4rgIls3DA#!A4OIP
zR&E1lmIBNp+0q~MBJl~wpCxs&H8~{#Ap=JG`+zn$-e_Iq9#x+1n2!e6iY%t%KHYpI
zI&-G=IbKevG+J6kUb=sK^u}dIsCGDgLI3cDw9Zw(m9WOfR;+V<a*dg?YU{xdbA6T=
z-BVW(_WcWge47|`O~>bL(3xOg13UdGlr#hXhTADO#Er0hXegMkF4BsX;xw_ja5;Rv
z!i3z!UD-+5rtJ5vi^i#46Sf`=T5^beRTnX-q{29B#?;J&qm>;u_qVSG!<o%AMG?T6
z1EKSS40tc2k5ngGtS^ItiB|%_+2o+tc?9)PFbpwkv<d#Gl3%S5SaayGRWgt`=%U)d
z#N>*8I=!`6Fu8VYa@;&@y<bSRD}QF`(E*!hr%#u>pn8E#c22B#Abt#iR@Ca~7ZBKu
zmNX_g4w@zUin9bT21Bwp!n{Vo713<etH1+&rH1PHDd0#;?Az>3(nuF%XG*kEuq1Rv
z_<`+i=d|uczOsPv>k+5#?<0bX$B#m_-_w31F9a`#ObZn!GEBv%iM@TQPxZ7^KdU6n
zNWq`QS%OO7F9cOfiom4+^SzJ8dlh?nf}3|4>9>$*{d|)qm#~DMg_4sw{zvtxdzq4g
zu#E7mp4soQ1>gi~(4?7(wTczLiA$R#Ep~Vhzl>kUAYt~f7w21$;8Hhoj-e2o-f$s0
zx!g;a+54`n6@yeJhWo&gR_9MX>Uk5Iy{3J6P3w48Nzri;-qAkk@34#rqIbd-nj#l^
z%&I4%tMi-47in{+ky{sO)_{!~-i<E^$u@@hwWKR{bJ4081K6{%B@r}AcRWH1uvsO{
zU)WyTD`9!U<hR8xw&%Q@J10{{Bb!}43LZR-*+=}y{U>Sep954J^bi$)5>c>S<9U#@
zYBcQ&AqNW0AmD=`hNvUBl|RLQ<#B6C+7%e|h0p=OM~?{jS}?qwZU7$!zx<F?nlxGi
ze^LX5ES(p&2TpoX?A0h<w2r$TFlVnLHub-t(Jun+Zytir@RTGA)bj{pntw7>DKKQP
z&yZ(^REshnp_%o!wRT_8%?E}mCElXe<=&jXfiwSJ0Rvpb|N4&&SJso@Lt=D|TOv>Z
zsCVa0ht~Da9=A^P_4{b$VB}JsUq`ZJ-jwzDzl@;xc_vaERn0;5qUD_ruDSX<+H3|4
z{Gk0$H^@S@ZoWS>7{@{BZrCERwi1rkv;YrlrGF>}jqRihhhE<VAbz_IFrKEkcs|;t
ztGhx;zAPfZygITe+NgAjtg!<V(WVRZI1MEXw|!R1<QZ2b6BFNcx}1;9?;3wW`!3|a
zILrPYofrBaHbDMc@&Er)ajqp{79X{z;ZK?bT`1nnFC(W4cK~UTI{6ar+Ci!*kddT(
zXL5B4&$@r~v-CpdV8Veb>b*&avR}6|{f%FZc<H>1@2G2@c0{ec8v~9Jo=67$<zTVm
zDl`#xp#@)MrCI)k&=LZX{{W|Dl2GzA9IZpqgjqyr$I4Jo9W8*_hJB4@0&YE++_@=f
zW&;5uR@3K6DOV!=de)3EyLmuwF*i20h@H8svXi>>=t#!ig5sC@GFFga+r42o>zdcs
zrtn7w=;h6%M<AT-;PnWUNt(~#?V6w)bspF$QMU#FUHaHnO?DePD72raxH+mCd*yi2
z7<Rxu!RBy$2)TR{t-<`T=Yy~*(am*!{n@w9vLn5UJr2cq?`<{IP5ish1c1-4<7nyP
zUN9a%ult7m3OAjhe*h`6MNWw4wJ1Svj`nAG6^V4W)kjm_vJh2EE`UTE_{sdus8<pC
zd~Z#{4<Pfi8&T(Grx&AQ&jsw8^?syFPC*@+b=A_814m)lXcG7ovlbx11n_p9lYDF!
zSq4(W>^7W{MS%VRQq2VIQ2;vg)t$xL!Qn3PoZSNU^IA|{;LBd#WiuGa_kJ8M&?R#*
zA?-#iZ<>mxylb-4&liPuyZ`BaDyLv*>fFtfg#kyr9{Gn<JG-Ui9wBgcPmkja^faKF
z1E%z>UIsvfsN}Mn4FCiU=(xnCY){3`n{d?*;FTq@4)vmy@TogRBm6}t5xs<+c^Dxj
zR1_OG*a%&M;W2-256{xh@FG?oGPCMJ>Yvq7HAM<i7ZDs3(?dd6kyC_=RAM6AOF>Vi
z+MxM<FkYC)j&7PFH;U7$@j^xOnGb&)j%+dS84M(&X~ihx2;Wo4W~F;c%QH3KU|YjW
z?rr$v^<C0y9%dr|uKt*wM>``n;dYWNA?7BB2B2FA2=Ep(<!<&y<vYHLZ;nynw>6!X
z*1;)J^knPGVnukw4&+QhiTBLzYP*yir{}@S=C2zev!lb+P)d~Jw#`ELH=~IKNEL3v
z0seO{TcEVBcQjO{*U^A(C3+cB#?o;!`4vBMgZQeQa}CT$F23iM5m;=0i4%hmkHUhK
z@|Ft!CT2;<1yE5;-A+CG&@a?ao;aCunzAh~jth*vwrbjPftqHaR;SOvUGR2Vh2S!1
zHSc`C6IB;*%;4yY>#&n*vOx&dCZR5S1{$SqKG0AW#x+3flU({Ee5HS(*TZufjzR3|
zy}aPNUO(NIe#)qOnM>d{a^H~P@FdJ!vUz%V7t&&h*`PZ>mJEW?TsRd#R?RS5wSJ?j
zr9p1(of`&DE%FdAS)C?L<Uk<qfWspWwF|ddrjV1O*kk2yYZAWiaw;j0(YX1>|AD_T
z#H1isCXRt2t0!1~P$b85@h%9a(-Zj>3=Lhuv%pRv<4ul`%0-)*57osWM#_Q9FgQ_*
zNL_<Um4_-5a<{-Ejdn{j>)kT?<?&<K{zoGj6Q#d3796`DdLcYM)T;Wn&;T@V;KKsc
ztqGs|9Ja#ejsTIsFND!PSlU3Fg@45%0`=JB>T?xLpb{6%E28YrJ3MSQC=<lH=q*&V
zGzvX`%Y)%oX3)M=pSI&2E_$~kZ4)U$;%9BI%kGUVBfXactB3AOF$)rI0s>2XFlVd&
z673Wz6$BZ332za07A;1kigAhj8g~V9XuMu<g+yEzc^F@Z(zYQbcN77J5{9WT>Tc-n
z9MlaU>dPbkFW%lfs;RT>7lxunMU04of)FR97J;e^6(P~0A|l2a0U@=h3^ArwkSHNr
zK|n-ItB+El5EPkYhzJ3NkO*O@wa6R<3Yl7El${D;3(4-e==Z+gI%lottoN+5&N=_U
za#$Jeec#u84ZopqIQXzs>+z(aV5IE#p$hW^=(G^^*f2~d7{D`M1iD*qyESVPHCeiU
zu`QJRxB+`8NiFIIEWj?MuPO5@EM6hLafMiKx2Jp8t}ZjBOOlZKB-C6S&txb&9o;=8
zSK{OEbrs_^xmcX1bi<2QCyLQkWJxEq|EF2(d2siC1ICgAtH5isdoPv&i5kV6yrx!R
zxfWTeJ=9IM2f?Z{<G0wm^8->mk90mlQ?HU&hgvO12ku!m_q`o-wTn+_c$4waKTO*D
z=7lnl;Y2bH&my&?YFBaLVSlH)Etd0WhB#PS>+Y0;DS~5}TFhmVmtZZ5``Jp_Qr48j
z_1-TifD}U>W8?dz!V5+80sFSdx61YsEu|!kQ9K;9sw+aRn5nVxM&IP+(5HgF)Wbdh
zDZge>X=9Mv`i?dz_<b&#eqA~=Vpd{zPok*+Z(@6vf>XJ0r{YGDwc7G_+}wnR#o+}H
zEsq=4Z0YkAJ!^m0F`@G~__T9$;&oxZz#_xuctY1i9{|=a|J!)}&mEP(#~grT*&=^G
ztLQooPQfp2bu8^h>;ZbQ4zYA|P*9Ce{yy9-Uc652a*MMDTl=>j=;2t4MKxXQV~<Y^
z(-xOZW|;X(Z_+PK2UXLvhP%!C@f1oD&{*oz{yRx`;t(j_&NfW}GCAv7oh&XtP(5>4
zqNFU-y6ZBvb}05%Yu7qi6I|yU<OCv7mxY(loOyyJHw>)oir_Ez3*#&npiX05U`HMl
zc5%dipdhC|+`RJ&IjMjZUH_6Kok~LFZ$Zu|^92~7>}nT>a96Tij!GQ^eZ4!_G=+>y
zv-kkoc;33N8>77`OGA&ty)}N5y)m+A5TqOnhVJ7wXv+<uyZcy?G2P#^IM1m${w3if
z4IVsnBx3D2uf&4xF@qT-lqA^CS&vmJNIgWQySSEW$T}?XSCb?e+Z$X<vXw12(vGlq
zN(H1j*j*pBQ*r-2uH=X*Pf_i2xjY9k9(bMaQ{Wz-bdWeWqBPT*&!P+G+*JEsV+Vi-
zyLK^19uUpw;C|yczDT>PP2|X?t2gAyYc9Q$?wt@D_hQkF6k`G3a3m#Xz|rM!nCrlU
zi^2I{-|_$Dn=Qq^?I8WBK+bLA^Up~h%+2X<e)>a6$LiRS<jW^Baw^XE-Myu<S(&x)
zU;m8V`ye~9fW%>roi0{<4tW~^186~19NSk7kU3+{8djMEC$*Z*9?WP3Kk*7d((FGY
zd1tqgyb9b+%yY#>tS6K2I|XCZ`m_|?JwfsPYq_lGJ#A;px+ke7S7QnxCxOXQ+=YLz
zXp50=#(SA6v(ZWPeFM)xWXoQNd8))IxRu%`wO*VAp|>dV7ZF$m`Kd4E$!SYK2iWDd
zn@3JXic+`T=S6!XKL<H8A|iG5?dx7$-B~_HIf^!l^gsG)m!#wKt>JrMx<W*r0kU!8
zaBlBiNbj*G7+!M3>M!tLTVc4Eh|cW7kSu_4^HkJ$XAY^I!LekCB|arSg;aSu&jiNd
zRZ}LL(rQH9Qz2*OrP{rFqCZGN{lu8ddwfB|j2nb8H_<k{6?!i~-dP5<8V~)tdxyF?
zw}7d(g+M$pZW`vmKfww<ik_{`)_SUWNuwZJJSg0iR&FjzHq9u0J6vV|^W5L3kM`!K
z=Ihbn6-gBNfDGI4z6taJnqCsQyz)c|b2*5?=BS%?R$+GwMxqcC@&*=xii$Fx1d7sg
zSR~0bNrJ4zXa~~wwiTCiE4>Qo7luWvJ12_+PCUPRP|zkWEjL<b@C!v=Ek<_$fCcW3
z0$3sqb{7EAzv2tklv=J8dr>!T88lpVO8vf`c%zC~&s_{0p$Bq)ys!D<0zy4)1?wiV
zm=@}rxwTBa=WfZM$u4W3t%qAD18olme%o{uGB&vT_5(w~g@`Y>rzU{LTPoR}(@HXO
zI|dDVeiJ2DY=pyDqajsn0y=Aya_DU-&a<|9s0VoRViO6C=oXa~svfd3>X@u%7&!%C
z;{x6iS|4pB)z{RtH~#*$Y&|v+ZV*7cEEb<4zOB^QwjlrxrqpsaU^|sO0{bBPJ`QG)
z@71!~qSY9poR_55OaIE^FvVDSNXhU9O>>**$HfCFmldyH+ivd*3<xOgE^j{W3to15
z2H3s-EIj}BL^}V2Jog{JDBZ9V?|~1)&$>9usEln3bt`|+U=lzXjotV{s8u&^f>@G>
z^nBz<#nWOppnNWBCH(zg8LF{!W-fBxxX=XeN0FJ`_;1r3F;l^ysyyq&%UJ97s^|Xk
zz1OK6x@!vWLH6&%-gC@+4ff+5vF+{$yy*dj`9)UBfPk<MOTRj4pcSwgunk}%$CiTa
zoWJaPq{G_~Ri+^NVUWc(0do%aJ;{>gd+@gl&6d(6&^UwLF|Raa)0W0My5Z3NrI+ug
zhB0H97nw^4P=_yuVlws#(iV$%@UU}EEw~Fzc(>)@3t_A6F`PMoD4upxuzt`FeaFMT
z$kVNG7~2L#f#l@hda4LLM3RQUTxQ}Mart}P!ssG6gtqGc-*{2NY|nIF6C5==B#iWy
zqL^yp-I56i2_e`S6|HxvLt>h50(sf6Z`HB!BuC0TmaEZ4e}S5i{7ria|E{F!O<9b}
zFnNt4@arMBo!Pl}-8ie;Cz9WJpVh<j0m&N#F|Gx^(MNm%WKuygK?^|1AHY9+mqn~X
z<PT^hjuq!MQu%)LA&ABJz34gzVtV$NMA2f*>OR=!_#(2{)4P?}>o_y!Z?|D!m$36x
z`<<DYJ(><`K*j;O1^r(8Xr$$iz7r?)ko-z5nT9Wbfr{rOI7KRcYeO)d9^mNE?-PLp
zMaKJN=)q=_Mx-p{7DaIiGgP>YPRg0F{#@?4Z&KVgDqBnk2i&m&HQ|I9b(-ou^8)Au
zdA(Y%4mWaSb)oxa2dzgo{k>P*L3H8@<whi^XAEDZoJQoah`_U!`*s{(NJl+Xgr@PO
zUh<ZNyI~x6bY6jKft}BryNVc35G-~g8Vz1)NqX#eIB>hfbh^0z3H{1%7f$A;gxQ8i
zJ<ZLaM@OF5$5UkJCj_(h)sebKUqMG=D^vq25R}N`G$ZJ7@mrn;Eb6}yI;D5Kp0q?@
zX`l($W#P;FIBy0Bn7AmkuA@#Gv>xTgAt5wk0M^k!8EPpQ1lGA<F?)e}ZeF6Bw~iNi
znL$j_lAd7Id(e_(mn4D1A~0Tp#QNX8HU5nZlvH|c6}+)CaB&fJh2l_JTvSy>0V)O!
zydI{|q=@dnyD=`NBs9%F{t*^r6ca&jcd~Pq1m4}1>f3JTlpI4jnY_2A)coC#+2QY|
zyq@W4Km8M4@Jg|~OFTP1%9vTjO4mp*Waa?dzm>DdN6p=jZB^0?SY?eL8y;g;Q}}YW
z*yJ30ch&%Q(@R*hz20S`+GMY&ZBxlN0gMAJ2c((-NmK|UjH9oMVfEpL5LD*mpq_Es
zL#mZx#`v{N8*bh7;=+>31g(k6kZ6KQX!z@AY3c~3A$H~0;K-tp-t=9YCW^@$xMMD5
z9;@!|G;#YyU)zY(!lV&Bg1qHJf5c%d61}Urg|%g|7pl!}bGF(vw#*CXnVjZIaAUPY
zyui{*BJoW-&Qo5va52|IsarVxrd@Ry{g7=3#uE<;1BR{4@79}6Q*Y8FS)}%mMjmD#
zrCnO6sH~&i$aJOl*}z=UOY5YtqaP|mNg%pCG_VCrQrYc3_eY`++7c(+#=Ok1#H)*C
zuNiqgUInxv*TtD1Vff49o@^~QboV~-R1b$<Erb_Pil@%l<G+9dJxoM-y`C_P;mpI-
z;?VvOm2+~G`itp4iD<c+dYv7DwkT+^YbwzXVt0v0l+wu152HWv;tx(8?D1NhQ8Z{)
zb-L=2cVX@={h7F#C<qu~&`G^SD@`4v&=ul71NhV}U<4#b>bY}ZGAv%i_Bo{l=P`_1
zpSc~a$dQjN1j_Q5eQ;Q?dC7|~azV@mcfswuk0mirWc@qCLbm1;KKX&79cd8ita%!w
z)*qUcJn?+^`I8t5m=FY7o#j#20A+a$TdpJ}o0}z-lagHpsn?ZiBR-exz?xAuC2GCp
z$wMXYE4#IBy)L&I<=dw&J?oliSvr{3CHTNye9s|qGKFRE7LixLG*pb)c*3jB@&U?Q
z>Ui;pz(zv7C0@$ej0ICMx?DV0`+4^!ZEy*hUpQjwnm#;TZ<@MU@`x3%w<Cf+QydT|
z&is7skLM;{JBp-&K%4zFkg+;Ja&MpmgQt5u)E}^$KT}XDsfSP-<gR<dv0z)MVeS6b
zyGk=8&u2li&}_1Kdu^s|htLm=dpS+KIvI1I{f+lXwYzU!=K9oKR_oB))w#0YbH)=V
zy;npg#~3y^XRbyY6ZBDnb`^a1xrcNh8Ugm?XLUUCXPh=N0s9kX3A6^vXTzY;gBBi2
zY`A1)(JIt`vRi2hcGtP3j4#4)(zAO(O<rw`^=UEmz%GZWu(V@u?mcGRJqjvYSHGD3
z24Oe=LBF3RnJf`4(r#A&EUuu|krGq=r((+ui#=XKj^}ks-f|;oao5_XH@lC4XPt0c
zROFVoBmVZ;%*eccpS;-{GVc%jLPhb#Kvef3y(s7^;)DQyQoAf$<De@fFW@xu^pUf?
zluQfkPnD6OGB;Zt)!<qwd4N>1L5#}CpXFU2WYjS+7SfQs-ai`4qjfpG_z*Ep3?ubc
z-ZwvxgcPuNxH0BLg^f~oKwo<tw$MN5H-Zd7y{Wwx3h`(*tkQhlzmQPsEwd{n8EBJ&
z*Wg1rrY<RbG<0Mnb=o;Tf2b<++Qs4&tG0xP`8|V)zCON3%G)1`q-Q!djn7NT8J^DT
zajbqyoSXvz`87PiFT{hm_$*bsEzRL?JrYbIaR|zH5C#*bkc!znCM?rYm+t0g!`14e
zsdA7CAjmLWD*cMRQAGl?n{C)b)mX?8bou+<9HCUZF;AjiM@8RuGm9ebb!vA$q<;*p
znC8Vd#wi0?2I##1R3exygs1uNR(@i67VQ~-G*Ep}Q;1T=+|^sDm^%~fFG&k00gm{w
z;n8-7M0&o~x&}*eexcwQvu>R<L-7~IVK}+6)6LFW7dz;h#zF!+>;(`>&8*DY-S+D1
zG62^F2M@C*Bu2Q0)SHPbQ%5H+hdc~(y<HX+mW91?^C}4p2)lnVsD+WuirSHQ7#uA9
zSy`dwV`jTM_>+vo>W8Hr=SuiC2?RadACV6@U|&#1PoXpo9P8NBAT|ptID^`F>+(hR
zJwQ41D`6jVMH0(bYAN6(cC)gZW8Upl&7dCca1>iKgs9hfyx@9zS65rSEt)LL8=m6z
z$PYkA68nf7CP8@5Ma^P`$5eg@gBMG-r!E{c&xKNYe&tndU>=s&C|Vce+#c}L1Z5!z
z-z&~`P3n&CmA>|VwxzGu?)SDBP@U-XiCjYXWEt+e@p8UwV3%cZRZZ24l+${yk3YWp
zg0S$nhjq^vE&s{jhZVO^e0FaZmqVC_M69+_45ChNZR9kqNn?}d3TQCx!boyv12G=P
zirVP>@GG7TfnPf;c#Cm8)Ocm2l3@^p9xuCSJ0x23G{qb=-x+H&jhJ6|mA`i_xl4aM
zjIZd5loN$wc_D)OLCI4L{ikY8HA=aPg!2+)D}hJx4Q8Ttkn^s&8K8+LpQ?E`1*GL#
zKlGA7o?&}LSf22gw8aa}OC<Rs#;mfy&hg^lGB8Pe9kbTxVuMR234QZi|1ZAQLI$Vd
zEIbPido}$0M!Ou?pDvtsgow}A9>qvXV)7NUB(1wTz_$$jNt&f@Y9x`g$6MWY%SWn{
zA22}O_|+rUyOzB|USvsj9>(1(J@;Yamm*5(r29#OcEGBUW??2a%z6^Gfd+a4aSDeq
z542n5QZK%hMok2?%yx)>3nO1sR)i1bH!Cwp^}eoesx5PV-TjCaydT_n^S$!vE_aIP
zmo(;#$G-mebIyc)HLqK1d<0*pgJ=E@1tD5*O)%!C_SWQJAt;DO*2?Dp4yuv-Sds0>
z{Y<0oZ>14-`-ai*-d$#?#CeqpM#zD#a}MP((FZc4FYizFKl9gHdew1$&IvtMrFPXu
zSQ5tUl4t|qXR!8LT?S`92%yaa+Z$h%_y%WLXwb@5(bC}x@}@Y+eQ3H?%Sp*rtJN;I
znMz@01+>2tQ$10q#<)C322u=6gYJj`x}`b8inNq|MQ;{U?M=m?zR{ZOBVsnGqnG6^
zmUtI$k%-8eQq0!<sdDaZA;@3SI)s+Wnyn3Df^aUxk;Go<LuRnupUoB73ht8rP(nR<
zskDe`ZwmeP-ptIZ$L5q9SyG{UwjSpqQu`}{9_7FFR85T<<Z)VLdX!M6f%bdso(e>!
zaU-=6gub#PmFnXeieiJ8Mi&d{S1NA_=wbI;cE%1(x>F9c7F)jSa;hHsU_pJFexN<F
zPq)bcTlT+F1>Tck+kiz&2jbEIi6}B)pVg&mw^Hh5=6K5mwnw{=ist#$v=<4zN?2PP
zzYM+7)qTUwdR}4Vx0!3D5%h6FUk_>F&=gf^bjm4o9g3$G%53{S2ld<k8#ND{-~aQ~
z8R3YWhpl<9U7p+o($#M3a&ZY|)kHx5CDcz+$m)~)fSJ`*an{`lvlob$V<l7jS{<Xo
zu655=nrv6d-Ph&iV5O2wzr2IeS*Tg5`}w^1H03R*{YK~>Od4@y4X(UeBp$rS_VAU4
zU;S}ga!eXALfLxaMaOZL-TB22bb0Q-UpbxXTv2)Wt+lZ7c<V{GAF>Et<^P3b(m#HX
zBeb_BP0(CAHgk#7KwIW^F&|_xFk6Lqj6U-fHq~e@{?WZ#LyH%Z)XBAAz&bBm6L8{P
z)r*<Mck=>&|76<c?Ka?>x`?^%i-Uw2_kV~9|Km7vHfW+$XjJ^f-i_YQQy<Y7Vcus7
zK8f5=ss!XwNXBfh?3hdir&d9_3ARpW6#O~E2t73ZF#zqSTOe4FdUcsAGnL&lCe2kh
zKj&{6_>QQ|yh`qY!}=Yk#cF}BNPM2(6Rr6k`!TAxhecGrZ-^n(i8k>hQQw^yN!)es
zJd??o7=Z<TUi4mg^S7RKewnwm@ZzgYYtEkN-$7~bz}LWOiv?;}+Z_yIz+!F_AHNcz
zuZ74^TQ7b}dkM$3X>9DF_DfybL`txPWJKPe{R|Ch{6%P1Fk+TA$&D2hM>olq2?_Za
zBJt0BGUYltV7Zz7Rhg8L-970Ze56t=by_j+vBuahpzkV&c#trXr(M#gA!FNTzK3`5
z<QTE%VUxjybdq67xp);zRv%>99=UBISQ(EJ6C8xzA&MI6;b%PseW6zx`hRv#d)00~
zF?QU0UYf1ZfyStS>yUfy<Y9@4_<U$z?(tSIwXPH^@u#6y!Y9B1)CP;sP!dR`Hri!8
zO{VSvzR14JOhQbY?w07Nb*BChSv9%YkHdg1PF?~?#yoPI?onHl`&eS)B+()$G|jz1
z!8>%<vtu;iNOeu8QS+ZK3Ga^SAv>WoI&U^gnE49cV+Vynyg@e7<q5auWA7C};=b0~
zU0+Qz2pCDrOPt^?qd#L+*994tRj4iTYmvFw^`R=Z)fZJ=S#f)%jxPXCSLE~CM?brU
zjF$w>cq9}8WALgL9~kEucQtnCWcKen9Sx)CYN{%~N)Q%&Iv_ciQa_|HTXKJC-PzdC
z>o;@vKHl-mOVT^*nJ~5mDjOY{`347om>%2m@{?imQlPYWXwP6&MYQfxz~#w884<o|
zypptVaLQk(snAq(gdZ82J|;|k*4Nu7v3|WzUAuJ4BRw{FZ*~C`*8*;zUvxhrOz6ns
zQqh;XBDcBGYVZA+^(hqbKohUMS3BHbyC@zo$)8i|3yXd0&5H(%J0~2L1P))>Pa~cy
zc4P%hvpNpj1su7fY5eQd8S8w)<TVv=c+BwmpOnZ#u>Y#^9nA=lr%*xF*Uo{e<|dGB
z*ui(}$!0Y*g8Kt~L2bcmLcI~)<L;66cM-xet}hhYu3nFJ2}@sG74Fx^kCQjFE85(=
zlt!ilUe>U#lY#aN&i1|cHj3A3etc!$aP*_)+C?+VeJ^Z3x@fLmJ!sn7;zl{J{dWO<
zqGD<^PtDid&=qo)_p?u{$>}p+(~-GQkB<2^4A`Tx1UILLEUKcZPPWRq>=fbJq<B$y
z)D=x-KHF1R+G*VtxqW7SgpTCnLvCzWjF;G7oz+HRv|uh}_=4RzoL`Xg)EoFJPV;8%
zM)mtR@*<!)zrU`%tZ=v?TQ+F~fHw95MTTd?H0x$lBN+sb6PcR?7AeaeYy5j*SHIXY
z<Xf2(W|yI;ths8SZ2)*Hal8+oZwF5Xc4BM<-p)gPW-U0%Wn<Q;ze*KSKc3Rt-C((I
zT2(J{QG@U!pD;9_kG)Wh$6o=cBxC!_pmpfaXB+=&s{L}LDnt6bSCr#iTF~D#w_lVo
zH{)M=R%MVL+<_N20f3}v5!f}s>{ND}q%YDZ#gUeA7O}zs(VggaNI|pG?ve5i$54)z
zw|@|BEg2HI0=L{Toktw5=&irgue<Z>>*F{7`n4|F{XqZP=ioA-9i5$-&SL*#Pb0Nr
z9_r0s$$1H?A4mi77EjL_WQVt^d|&e7#TIOuin<a={3+Q3O@-PMKsVA}xTvVH*^iQL
zYONpoVN8ib5rpo+(CO3DMbb;JFBXPhiJ$n3x`PC@QLThFJ66VQx&ihx=XXv!t<0?U
zH7}O8gsrc(t@U4~hUtmOS-m(>WeIFkfhhj+8D#*`3X5y_etp`u+wLB_s#{AOFDswl
z`Cy?!7~hrd(ARE&XiplBMya?FK!;=ZuxJV!Ne!`qR_36!qb}`XQ9WI!>Zum&eOMtK
z+`huQk0)J@DGHZn64m^8?dFh8Q)Y{w_6(*iP7e+X{UN~9@TbhM9h3|N+r|Y=ju{hN
zLYjw!h;Q?rB}!sE<anM^meh?b5c<h=+Z!@%)DG93UN2zV0{IaTmr8X-q0;C3ruzH7
z<}Mn)yHx4eM0(8@g{jKh<$h`ZbAq~Shm~Z;O}nif|5A%!7U<oRB5{W!?IvvnXQg(V
z)XDDizLX=>b}duoV<K^l*QA}7zbH4;+)w+tqbI$Po_yiLDo(`GhME-yfS`52TqyYb
zKeI#A$lMDvR$-jgynXExI_H?^KxiUX_%H*~8ryCCoMOK9*{ZZp&GUK^PBj*GlBgXK
zBO9vIj+d8~U(Kn~Lr4%nFM<TFhXz`gv23lM?m^^u&yhNRzJzPUzKrJ8mnvzA45eLg
zeWqEP6D_`*Ml7~-;u`g1nd81{_ws?YmFl9rljWUGx_$M5VHMrxC(T*Ut8X48zO%YY
zhG}{1Sx)l+sJ0<YYEPWzJeCnz(xatde6@YYPBnB~g>lqw>o$gC4K<+pS;zPXJLbA)
zcMk=A9`;v%adiumd2y4par?cSN8y6mNBOrG44MwtI}xv?!GDow$|^;7!H}5I;ly9e
z-U^VOb+s~!Vy)Se;VIX#)N7O6C9H8Ja!o)o!a|O8_NoGTl2c?${}IzLr4iMyi@|qF
zo(V2^9c*+D910cIdK?K-yFeVwj3ZS7bUQ@Bd^ygY<`kE(?Gq)L&R9Gj3*Ogd?|4*A
zXPJ2g`oEUAHs*YDs;gK?DLnbFL_fTtro$<$s7wB=bM*8NfDjoZLi~oD9UQF(U$G%{
zBzmg4|JHMNg-`G5fNi3V^3d0s)v$0sLifJRrZ%seC?O?QbzgOIm><Bp{mIGQcVCBS
zy>=Z+Xz+?4bRIXn>`=ts9;1q`A?&TH_H)`;p5of*b9i{_kc)4n9_hh^z7FsZwUy8c
zYUu%QZv7b=3}<9x9twtMlgI$`M!y|zl3E!g2X+bFAF)ycJB2=vu&;k--JX$DUV*;g
zYp=Kf-mzzu?U5N@zIqbiCm2n24s-fhPU>4euC;&wHHRsDR$b23eA&9mYFMi5cPJ8V
z)J6pKxnyogIzMLqUdd>FURAkiL*>@KmihOVy<U{Ra)p7mPJE7f-HJ3TbxY^<^5mrJ
ze1Q+OPHX@XZaig{#JshDekY*0INXW^5LK6Yd{G-;ki@VXv$O7k?8CG-=4<Z&?|`W4
z%V`#@Z#SA>Wvk$-e6O{DT@9q@A1KUfac^}KB1n|XwA_@^2#Iwqi&!4DF60ff;u>F8
zl9t?UoW7r@wELPmKRj)oII3`HNM0RaX-^q@+_A2rQ(*JrY1MP*yZ%>^V`LZTe0+z<
zxdXOnViMaa8~^o^=(8?CzuCd|37I)~@<cU!VtXk9MqY=l5p<XD6?&=qqj#hq>ez6)
z3h?%Akv^_|>x}z*sD`dz5<VRnc7AmxpVrg(+pDnX$aA-_fmd_JmzFW~qn2b<=&f|q
zZ@;?nAVE_MSx6UByGDG9))%7j!Xz^uoGxU+2l5uylMc<bZVnNP+TEq4sfb1pf?bK%
zIV7#KI#H9E!IZ~DNzCJ=f?}EWYhguaE*R;~>>Vx7*t}`e=sTCPKt0Y&d;s+LdD^8s
z$b?H1$0#aN0;TL*wheX-oq}E}KPhO5y5+iPt@co7WQ=Vf7OAlFZA^=K@l>69OG{OZ
zfQ|!imygYf*pHr>zU|}Z<Nu}c6^97nZv1ujW*HyH=Wm8b;Q^cZBHk`WeRy%S@+K(D
z_s~*kCb-iGZMl>Co{#mJU#UM_%f*gRQJaQw5_?m71Zh#&fB`hL*O;2QBC)HxoeWb#
zW&#eUpXeMvZt;sFRy3NW2SL!zLA#_HUyz5o%#MM-*0L}IbcuEamW>93LgfWWtBo;Q
z6VKSGw2+8-Mer5}Vf3I5cBE3geCRIdALZS!u6j^ZyeaYob3#WBVC?(+@Vf!H7}43Q
zeIgG&cj*6jF(NBDwUlSH`oHyVQOZ<6NJ>>_%gySL6wzjN-YxQKtyeo!Tp_XpeJPP!
zHHtsTWtlaIOj?Vy+Z6>)(zf!?-#oC-vyOipWnPh!FKc#}=y3qXRa-9ux1@ijz(39`
zJb|~#p21)C;0v*-TJdtgN7LUr0@S1r0C~3}s8(Lk#TVZw5?)r4mV2+7UY~Z(H_cj_
zc;WG@Rh7PN;Us1(>+tU|_=2jL(&eJ?)mlInJLd*UlW^x^0rj%7HCO?Nwn?UAfc#|E
zC|fG}q8BS{bp7duS9A&eI9!aC32qJ{k(b?WzYd!vnepg)HwO&AS!*vRHAAbS8D1?*
zmrOZDgHBT!w~^OFQ8Y}|8OkhJGkzFNDI<j8wrWZe+q%fVj}?7X9mq|(#Ogk--cWr;
zX?vN`=Y6k8knfmY?3A@M?AyQk#=gIbkRtSTMMy1l!HwDLa@j|9LebKJVU91?jR8?o
z4um12L0QOiW+l)LqHf?DFnVJzuUEP*jG)<51};#h;*hk{&#UmhkBo2c+iq{VYB2Nm
zKf4D17=HYR_!B%(^>v*{8?9j86jz3f6{<a6g8xKQtY|&Ve9NP_Y*OJT6G-#ISpkit
z6~Z%05^<Pvrs}puA+s{fH6^Fz$BWC3NZx(AxaW?owI2K44$|MV9)$3^V>9@I1#ky>
zfQ<xF+d{yb#puBiqR9f0rGJ>n1dE*6iJ3`geTRYoE0FBfUT$fq%!`kh;g4<TW^ZI@
ze#usIub00%B^BD9%IOIYT1mF;U<y4{UlL_9>_!VdA4a5}g^v-%J>6sRr{-BRNaK~T
zPiE1WlM!6)7IAs%-+J4g=uwpGDA+oZ&Z^``80Y$GAa8u{1f$<wkOj{PhM{*?I|cm}
zAe!2D`EcFbxCILg5ZNnLp7=^yulL`2KX>Vo)W$rmF&B(~_d=h?cE$_&n3iRLuiXlV
z0S<H9@DK?*gM>NY7mw;8^?ML>4`tdta2@zl^2e<I)_W6vmH2<)Gm|!RIza1iN^4>x
ze}CP694D~uHi`wb+qvx@J~%oUg8rFkGsGj+lg5E#8HqRDPN_ZX239?99SgbFPEXdE
zNvt;AAE>prPN@4Zxw_+n9_3B9rdn4--puKfm6Pfzy}_!+!rXA)Qu4ZC=WhQyq5e#b
zXJUEa*8OnLu_+4P;vxRU=!?*GX6`Nnzw3W>I$0h$O1J&$ahH>i_rd7&zN^GEFlu9B
zHa24>@|GS4%{$#slu%gJ`>q4oa@uv;@^TV1TRJ3{G*fA+&>xDMGbVb^<a9MZHj8rp
zVZfp^y!%T*-OJWSrLWIR(h#ivzk8_JT1X4@a5J%7A?q8Fn}PVW=3^UqBS<IS7bqPP
zD2wpVST6E=dABBGW*c+T0hg|FqLucL`dzk?LJXb$&6K>R4E;pAq3LzXQZEK&?`|`H
z_sNc-r@cO*AM`Qr9VED9P!Cz3g&e>rwoq=Y#9Y)<s%B|vj@GUW5>h$OgcY}^{ex2h
z+m6U(Z;eqDGEIifePXFkWT92o&42h-)tlR8=0E`u@_0OV=t@evXUJEC>3RQte^B0Z
z;D#o^!`z~)gbnx@DStoaf-)lc*m24d0begnM66QJ<!a6rJQ)I%iZN!O2p$>FEfZ=?
zIcsZBA8B=t-@s-66w$r>p4|lj{<56r@*V%AIR<bjUQp13l%Ci4g7KLU_6~LB7)5F6
zTT5Fk`hvYgDq7i~Dzr2>p>|GJ_%Pf86cls6KrGP<?Ydp842x*~+F{}Ep=$3(p;dx<
z*L%9;-}`odV_zcI!~4#Q<tjk2*$Il9>ye7Hyy*2ye75-YYE5;I@UBbhJ#Q+cvT)3U
z&UpXk*R_dbX3ps4+oA}xscJVIv@N7Qipn8T94hXe(LBZgYGYw^#2e)|j`y0WNDVxr
zu&UmGrlPl@lqCR_iEFsBJG0pGakq2n@Nubmk#SH?O+A|P>o29=Yv*3l`;>c?@`Q*v
z`{E0)%>eGN)?Mo{<Hz#Ul&Kr@P{|%lb_$IPKvQow#k(C+$`<#@wDw4nb5&}hfbKA7
z5MQTus(4uBp<XB*-&>XZ^^0~*nE5T=sryIVe|WBk7i%F-5H`TeS_+*2Wr)S?);*Cm
z`8Os%8urgjm5Ud%EwPa>K2~_}S^52F9|O-SHAUh;#4hz6>I&IaCU`ELtg-b@@H_6^
zH^N%}$3fy>619DSDM&Rhp&#^I|7G~}K;aXQMb+%LkHq544`2QH*3YfpD;B0*zb|h0
zbktAULF$<W!1=*OjMc$CbBfy&pz<9ZpYdZK=mc7H@=;w@BtOM!h1w2)=1ds#F2YiG
zt7#HmJWfdUD5ntFF3SEONno3UXw^yCKuW;=(vI`zoYGB#5%=HBE)D9>IL$DS+Ik-9
zHAdI$);)IHj7l`z7g(9vpiw*zo`7K;`7^Ysj(_XQhT`H8m>^5D6&7ZJzD)?xZKERE
z!qPtQbog}nbi#{sBROyTbqN+DAL+s0>Eow6q1`wI4X-)St%(JVzipsTMZs(cb)=p|
z%>%3{U%M1AoSp&L!@QGCC4hKKQTDHEOrvo{cC0C7?gKt6<RFMElUA-bm70p2xjQ;X
z1(R))^Cx|_Tpn9p-SL6(;d6s7I5nkWG>8i`j>g%tnl@&JI%p7VJX)QtOl{;E^=RGU
z@=O4Fdbg67u;-4$q<7%q@dnoqe6>X_c~P69HKH)aGVA%xx|xI05(oYS#&9es?)~ep
zUktS4vsc>05AgZVz%HnRK_+6rsii$jt>dTgtei-(hzY(xy9lG9-VGunHC5tpQ?x!)
zbp)fz83wgWv20H%XB9?jyfRmo$Udaw>iF43y%{B?^tlqh;i|xl-z@U<up{_l6L<$H
zyaO4bbKg26J$y|7R$Tz7$|)|uI2~v;FWR&QYJ)mgV(bJ>KfGf4&t};TCTBe>pth`^
zTH=<JH(0^36i82Rkwla8r_U|v6AThi!7P5dfL2Szwo&i}#!BjS-r`B#N=|!}Y=PD{
zO5tt^ePE!(FW_tq2gbl{KAmovq4_a?80IaPl`RW~H*6dm@D3O=sW;P99zWc7pmE^x
zhVn{1JW4G8Q;gZpf*M$C3mA9L#a|&y1W0nXXbF}cr4DHjIaQz`$wHFC&QuCBzq_@X
zAk(92JW;_k9wx7?PWN*yFAmOn^~i7N=}U{_nbTvVV|o;>zuqJ$WQ;4F)6r<v`<E~+
zNo$VR6h3C#VW23lbS}&pO3*I|_h-hsg+0R3rX^ID!;)|ZzFou%#+cD>Z98o4Y;`PH
z5ps|?NdSJ?A5?5zQ0b%4=^EJ>OSG!0%dv)X=miSHya3fF>4Zgc-`<k5ZGyN*Y&&Ur
z@RP9b_euS)L17oL-{m`RjnTg8?q6U0%it3<ZQ@c9c`h`ADz(cf%BIn_N1R`SK9`Et
zU`ON*@tpPCC0frH=$mQ<bulZ>7t4;68~)<RH5$sa>zJUL{xV<@S4*`jiviN|K0(^Y
z!?%q-m+hq6^<71_EYqKIne8~-MJc1#W?1-dwDP?ALd&Q_D6x*2bUY1~z)rZ8&WtW8
zNs7!FzGD67K>C@;$TLQx(^ta9z4LzS_pt6f{%oh=r}jNX`uH93zsXoAEg!RpieP;4
z3Y`f540f5v-+D|RTV>v8e@qEowuo%bUWg*K7NnIUuI}#><!Wi3V%(B_K>g;Sl1mKj
zEqCUuE=5P<l$*@mZ(`j2ZIemw+s5tRb=WaV>|CyLmbVf{iP|NVnr6&tW<FB88>Ac~
zG2P`NNB|5^qvI(Y5?Fpzk?%#8xLo&b^4~Y)EZW%RnBlrT<=dIB+e$t=N#7iL$u+mU
zf_$#({Js3&8}Hw}iXgOq^HpHJ{}hf&EiR=QA?GRB=O7*IG(%-u#RVoRc=bN?m;O=L
zt<~0d!g@t{Ia(LYTTYA*2}(cUcjiuAcYRdQg6G{6uWcWt#h0WO_|+EFGV-mPg*!-T
zka!y*wa?+c<U?Bk?#m!HRqZ*pTj}HbQbrWnu~!PwxqL3e&Ak}od7%}Rd93u^>X@R;
zHSI!&Q$<+DXk=))S9!A6L?H1vE7H4qYqU{K+{uAnm>N%s(F-!Iaa#MYA3iwreewF>
zeW_HbbSHy_*qDi?Z)i=@WAE+M3ii6PvYBJAKTnX2McuzYK<D!=&I$N)2l3-d-BZq&
zp_FomF~-bcHV3WX6%3JAfDg-VEd#4nG~4<IL`Wl=2}&9Of3S|d9g}Cu)84g3Zg;2n
zS5}Gx=t*M@oriCnz5iv&OOoqB!X(79d9Ps~90I>=7^nOx8}pMhds~{W@amdfR4cGR
zC36AmPocGvZ^rsAQ0qnoZE|j+lLggaaKKt^ms?Qasq&82+5ZuGc*tj7YJS6IB;>nu
z*`Ps?&xVdX0iH^&728fhT#9jb>I%+cam9ma_74lf$OLqDigf!pdA0g%b{J!Q#g%zK
zMk~b$9B_ij!Sh^mip*T!y~r8*!7VnR`j<z?&p^Upo3iImW~AXr{qbGZ!m1a$&YeG&
zdD;5dxzpzl%2%xl$z^3Ngr^6b`3f3(g8G)KvDDq=e93tO)TqP;I}iE$BtC~S0s`1h
zd>Lz9Q;-AtK52q##xhWd<78f?NTO&ZfVqQ<L!)HG^XDh$NFB$>jnQ_&R0jF4VHW>X
zrJgQECq(25pxcs?zz?uDs+P7;9QvA{j2M&GvX@|Y(T+N+xoAtB_?D|x-V-`v%(i)g
zZTWR*l4->zqr8N35&c$y=ji6b?zB#*9nQY(-@s!;bEKM!SCIz|v&=3HEEz!z@-pZF
zYESYkpXQ<_SeJu4(zMHgC33_c%gYN2pd&=`dW`R_zLc(NNzQb~@^VH7EIQ$ep)?-c
z9Tpa%3N5$W({j@FK(<w3ZlDj7aq*OU&FiaIfE5*o8^Y4hX~iJK&UptwMSZ-5X2~Qw
zvJYczj|YS1w}NWecmfR0Hd`exQE#}X+&*qH(py<io6B<X;_iN0(Q5T(uj5FwhaWVl
z4t2E4_D9ny`eB1-#=|$jp}s<WDA-q2d_kBT0ZX3)01L=d{Rv+TNs`Uwe8&D9vxWp^
z9t$Su4P4{jUlp>gQL{uLfs*7{9HNk2V+Si{#6&Ekd~4BQ?c`o3Iz8ZF*ps1(sPC$t
z6W)(&S5Y7hf>9)}nck9~HgHE}Gn=%5on$B0NF!-Ed!4d)-}qkCte!Z3FlbSm+k*9#
z9aR1Rm?`k%LaJYM=X4%!*)2eIB~NQd$KQ3W@A&p+$5<9ga%}d~=OGK>PD6nGc8k1<
z<p37Ky2s;Cu4bP=ab6@}>!MDqqurY3C%IV^US7MspLnzj%<IP+f|hok5oEd;(?b36
z>@!j4THo-O-PWLbh>HyU9#XgEc^X@t5KP?OAamigiEsGx8+x=vRda|ENft7g@^Lek
zM_t-3mmsT7?Z#lmX>L<530P+Ntk{qj41dMwgjpLSV*FWtSDxs3+M8B`Pjj<~Ih51X
zUJ1|?JU}eoO_xhH7_K^-3OeVF*%u>obF1N|qGQqi9ZuVAQ*7!%tiv=d)!EnO3NZ;>
zLB}kP`%n(GPwsvuyzk?1v?Fp(MNK6fvt9fiF1{EZZR}}nFdCopw_X!zDXUv^RNd(s
znA2FTU_vPbv<|kLlb^+}!lxihL^fju)JK{BS+q2}nTZs$g6qEj{e-))?1X=ia60BW
zq2u4(M*r{Y=l|C=KSfV0=L5Koauxra4N8!sFa@5YeyZM_uC&X|QBZD(%SpF|PP*jf
zysMG(1q|DuR?%|I_h1#?9vIbdNfvyQx&o`*f78;eu5vo(e!AjEWzD{(dh#MYe03<~
zqyM-9|Notw|FN(0-~Y)#;|rd9Gj{A1x~CL*9?1YV*2bVs+6^)zM!DFEy`xiWae;F0
z5te-zi&6M^)K`I_H*3y;UVeg2SJBvM=>%nqVa)kArtOo2bnmK~XH~FGJZ0F$aZnG#
zZxJ+be@HgV#rSa;Y-b|1=O|~n*JaNL+T{dIiH?WQ8|)5Rh50H-Fvac`+9;|ErJW{{
zAG8Os?dZ6&q(CvY<=tM@&nyH+jf^K@K`Se&qYL{;i+jT^x%A%7yUZkKU()|{Y6qze
zI_nlQaE5plzGKa56K~yP+$xN>oNbHVm2ap~TSx}xsvW<Rv22g2cgt?Mk>oedyZL3c
zEc$_Uvt@s~_E^EdP%q>6<TIvamI*m-E?Z9YJ<>xiS0bn<6|;^XD{lT-_LMaG?1%oo
zW`=Dq$k+(t+nd}NCIZ1^N=D7(y}H7?M*SJ}X2;tZX#=6TyCPvBHuCy_igq0d8SkTL
z$}kf-ag2)X<QQ?<DHdc?%#j{dSU@+Z8!*7QO3I>8!zbYjnBkSZu|rqRJn0_*OUsV0
z?l3pHj2$H2A2gVL2RY_ZPzPrAcxXhBcqFL}p+xdf@KRhTga~n*)k@SMo{gLeQxZRW
zOT4*MdqAYNs=lm<9=U7>48Q=sq{gagSEqfyvb~5uS-L#Cf1oxpR9|-uQ{nTWcRQy<
z-5tk1B7e<$dr@-*?X=q1>J<1H)tE(6v?RJ&tL)~4R~+$639cL1(0=aQ&ImiiXRBee
z?GeGZn$)Kf+x7Xy7FUrUc{d$@aip5ClJ^KMp9cBre%k(u%RN?6v66$&1@Z4fRX3gQ
zWhd>w_2ZuSSGMLG7iO(Es;_&E)D|PC4;P5E4|G4`Zk$$GdB{ruL|s%*X&uj(p&_1?
zSk9v%kv&=&56%fK3CKb%bIyPTs>uo0+;;`2Bzs?%2~C<yuTGj6Bke5hNO-W!zqIQm
z<pLzKkmLJmO>7VAlA&F>Qb?Iu1!W~2+C6L{##PabSR)GNH6caLT*YG6XBwcQ9F-j;
z!Ja_9{-*LvPhIiD-kncQ{FZ9YDSPZ4^Emu?rL$T0lIMg!W()5luyP{Zb$lCAOa34Z
zC2>h*d6JgfhzVz{Hb7mHh&<7rY>kjvyk%Y7i6P%t?TOE3Ie2yz)2L{F`Ma5eos+Mt
zPn-s{<JTXScSYJ}xa>hcWB^9&CJ26s<v=j-iGz0-*FDwJ<g*QAm)dbF_F5>Y?AYI-
zHV}_74+;L6`cf)foN)u6sfqPQOY2mJJIY^u+XcD`7Ac0fvCJ&gJSFEhbAX3<4>`Vy
zU@q+)3|iNAmGZg@(5f&g<YH@@v`c}Jp;9ri4b;(YHBFg1%13!BhkD+vD^@R{{hhfL
zt5(>VHKmP&cMq)XocKH<#q|A&XOXQ!yPU8fQb$&YqowOtjCC(uri;6K1u4EqIvsYn
zl|fAb7sg@EOUgn-{u2orv7wY$Ss7JAyY{!<a`HS@qGCf0)O;Y#C{2-HEZ(W&fddwH
zL`huCdeh-uIzs_AqkWPpy(Z|_1;_gib+A3N2fOdP{_Jc7E+4-Tq_b>yY+aPrBm}qY
zn_10jf*SuBw~l*@;|?XEp(3P-XvG3rhRyW|B8gRf1VGDw>luVvxk(*o0zD6Ptc{yR
zVs4P8N<_vmi3p+3O}LhGqUFi!V%DRndMoR0JqiHC{}{)tTSnKQp7??x2k;`X0RYow
zbgL49dY&`4eWE#7VH%%@S-r0JH>)=~P9ly>lTsoW8+sgDmiFu^JrQ1I-QQJ34<dDr
z&Tj)9HU~d7`9X;u!mF9hEh_%j(?{etAV2a3!G*cF8MYp8B+cQhZc#u&6Y5+!;0h9T
z2od|Jbhzc@b?)2hE}^%IxIDa<#XAHus{_jMgD-CW+PA+oLR`M#M@5Rs4)o82dyjhb
zkXa9$aji+5W(#oI7U0c@)vN~iHGC;%rgCR0Gqcge2J;Y!g#}`W*)(ugRH3Oiv>|!4
zks#u;<QYr$v8?bay9QB)GH`>P!{JWHjPo<z>Rp*@1nulqnJYlA1o|KUTqy?QGR!)4
zbPDa$KxZ>Hp7SfIY`oC|+Q6WH<)F;v<*@qpwoTGA7EbxMmXB>c+WjGdGL~#vbw53%
z*wWgu_`tZ=^QY2pI~?r$_CW1-WHjwwK4JPM+#ozqA_jsL<rx=W$%Q28uZpXbyW(EJ
z9c-L2357H&5h~*ip`^u3_O=-pP8)Cjc@Xs_v8`GKd&_0>VUcP@D|I<e>0q>VV8tem
z3|2LP^JN!D5Bq++eqd$7baZtnFi+fF>dc$s9qHUfVIosKyp*D75d#`@`b$!eC-lvl
zVnN0#U<c_{ISJh-dkbb??+ST6ej?L7$XSd-BKGbi8(PS)td``ymp_2Agt2qGs70u?
zqb=JPxkgSb2f&9e$+wO#u8kHt0@oKH>0l)fD6TyQGf)sIewwuav<)@THjCu~S{bPh
zc{_qHj0UD-3(X*+#$zXTOg_E@GYCYvi2|b?!wf|=GYJO2WGk(2C)*`2$ZhjUaiY+@
zn58=0#&%dfGcbHV)1tJU;lv2=?|fL@HNJylmp}WsD1}VS3DL~e-2-_%Ub0LOa(mXR
zB!1enaW6iH<)H}T$tj;<?Y0bGMT>^pP}p(<rHeMGp;E5c%;E+DYhOPgY{1m#z;K}9
zzCh$;*V#4);ckW^CPeZLsn_8K1qLPPKHkznS6QM1Tw2_oN9__Cpr4j%MkIgh8I>~^
zj!30x#Xn13T+D5fw2o=MH?-RdB}S50xg)*v3UWuT>{d$h!+bSS8ua8YeSE*ToFdVg
zDO_N<bDL)9w(UZ}04rLN*GNj@5hpBa!lUUK-;V4?nJG@<#bHtAg64af86g)6T7q+H
z?Itv7F)8JhKAV2<>#cwFnI3CW4>^aRbdXVr(rnh{bLQafB$$GSk!H`ukScJUvMaB4
ze9;hMGBLwkhS}6{%mD1GpqbNXgPbKbaWl5~QvQ<gfi*W}N7Nghq=91W<4}Lj14RNl
zSy7<USAItva?xCeV_=Qc+Huyf7h`<+pSoM%t3`P()fy^4hs|IK$;qBLxx<Z2Vpnm*
zC;kMol;zpr?|$?5u-?X$C;tB7OLj)j%gG9VJtxiOrlSu)6%&dd(XJwQVrF9ogin;g
z*DmeTEXDv4F=zZ4RBW#J8w!!UO?wE-R#Tepn^y?bQC~k*H>4((Qxd29WeIHeESBw_
zu436fv^g$I)HPXH?d{t=E3~+a?%MF-ZZ<2x3;3`w={`=v)^W8a;n0uu9lNZe8o+^G
zfG=jv$bmf1OF}Hz1l4$4=F(QSfwCV^&<lhX#aOo&cxW4KJ-~9}E@UN5JOG1&764R5
z-S6(TDu}w6BT7-GlZc?ttM>_jNQ1CIN8n~y4jtN5*<9eHr;y4h5(=OhmXp825|!_2
zlzd}tAo_-@N@!D{ltu><m`(r)L}<x)^7bdU?FuY{V&E5EdB3%2s+W615c92O>QGwC
z%sQWTJ$F!j=fT4K1n+X0Wq~i?&g^9e0Cskh_H%5j+EzYrPtgJhNOfwR!-7H492jfL
z)d#qW*BPXf&)YZs7%4LxzCyhrSRpVX9=siJsoIBfR6w64;`13Vo#7)ViP63P^phb*
z$sfRo*R1|;y(IB7ejW1`&lum#+NV-RrGQX$blnvfF5BZm3B4+%>xcI8<eIauI(DKJ
z+}t78nA=>%*cTS`75jbti{+y3$r!qC=T$f8_|EpksrXBpAw~WZZv_&H#EQ$JB>Zd0
za*hF(tk_enh(Y92iH<abCZz?y*@93)9Rk81P0p^DGNl9S(2s-oSI@g0|JWE(6h_|A
zIzi8%oQU({)%!b(^zq1v|8RHxuYQsKacliwDJCY5;Pb0z=xj&bRf_x}ZJs!kf6M>;
zi)i%qfeJM=WP=gKTb~aF3dTAmF_F)9u({>C_x8q;$v(;=?-<j<C!xLJ89`Itv1lkN
z3r`Bk?Z1k!d1@1`*0>tK?b*P?zTs>~KF;b04#3is<K3e9vt5^mGH}Z{f_8g=dZ(P2
z6to(ROpGfM?rK9A{XqGzlsL@MZtQT|SrFi1zTv?|kmEJTyJ@k@?&5~ns=C24TKLuz
z?z)$R_q+8te?cpv1_4p^Yb4ZXywA3gvV;=arJk38N|cqgH5V1<vsF}LSk%CpyDxih
zsBIG1^qdiMUP46j_WmgU_DKsa47TeiUku)#GSis33W{g^sljtqyP)|rfYd_23H97g
z_b&Vi31ylOn*{W=xE(h|^l+z~{)y6EFa-<;3-r=b@AUhJ78ylHhlD<>N>49jdHkA1
zdRIJiQhN?YC1KRwLd{*>Bgc$+AM1K)O*DwyrW}Vbk$ER`O=qOhXA;mGn3S3M4R&{H
zTKoD2g2F1Mg_ojSoYCEjIy~0@xc1?p9VEAdgo!cewDcjhzTz{$VUZ<M!W|aiT`mLG
zpwmI#K14B$%rH>eCo0C6jn4kgHRuy2DS%`Yj+>*6sZX$^#H4egwbZCnMLhx3uv3)8
zKgz_{Ob*9>0QZ2O)ZJQ3GdOu%;Iz9P<73{Co8HFPvhwyoN#QNYG-$^c0V-1SP-S$!
z{a3$o@nZjxfzQ$N4;1~TK0%Xfp5a|m=Ger{+@JbSZe7277W~Bac#;xD>vk&D7nnDe
z7KA@~`|7>Lh5VrAs6SR#c)t5dIPUP<Un*JUrG__MdQDlxQ5W0@u8P<Wyb*w0<2_|6
z8Z?7WjAVX+T_g+CO^2|4xy*71-2FVcjx=LX*3oCXp;pBT+YFo9G^^60LI1o&nL?0R
zIxjnF&h%M9m~!RV^(w}|jU+HNm*8M({=H1Qbfg}6<}zjmAu*1(l+9Grl}s+#n59y@
zj}sb(p?oDRR$M;GBn|pzF7_UQ-fMTAIW=*j*g>MEe~-l-yA%DuA*7?cI^Ac(>w{f3
z<<EXL_~?NfeS%Lu$f=W+`i>sThmOA>B#BK!3mbwKV(Cg`IYzH{=FC?EZHI`>e2ram
z(fkV#PoE9?!{7~cS}UbX-;S7?Pd+w{sz|#HVx?C~@*H~y(iN@5Y7oBzlC`JSBtYpf
zYBO_CyIRL%GgP!&5OO)L>=jrt>L3xBQ4?XdYB|)q3o&DpiZPR8>c$sJsE<4kbllyK
z2Hh(jpciC^4aF1!3sKO)c3&9g?4JR_Z$gjwv1B&E5OZg5k5x9X3x;NWCjn{r8D*B%
z+GMo_+pVU^Z}W;-3#ayz7PF&4#;C!6|CO%s8;<;ygJ~_-+%^~c^_~bnI5L*ol07o7
z$*)7eARRfvjLPxK37`If00_p~2zX5qSO=KR@|@><1WUs&@YkX*)JOy0O8cFfAfa1&
z9(;k?q=>9S5h9HCW|Sdu96)8o9pW{S&D+<jjRyEp@?;0Yur$+K=|9lTs@^>;@N3Er
z7^;#JIzSJi1=~i#7nGtZ%~IV@93rPR(^1W@W!{v122>yeIr9elOJE;}R%>^4MCNl$
zSkyh}fge>Fg!+Mb=>6=xid2=mjc1wk&o;s5<+@;re@$bdVrZSzQMc7ceL$qIHq)-s
zhwQ#v2YCX6`1U5L2Z2_a%`J{Ch@Q!ewHuW%Pfqv<wyV&4ktI$OBqNwpIW$pmlValT
zPOV1~D;JNB*}l6Y!q6hw)_c2q)RFGUlrQK$#C_^73F>vTv%NgROCIKGi!V6D2LUPi
z6D<`>QOV-O#v9Ot6haDTWjL}BL^-4g0lQPz<){nTFHj?~LQ(;CvA%bEVDIawEc*RB
zZ$UQG@=ZomQ7Cz(G^f*Td(KsaLP5VLXia@JJ7KfNYwe+(W59XUo0yER_Jbxmq$FnS
zFtvj}TJb_oA%<1bP%d3$)Fw2_9^}|{M6@g$x$>Jjyf;D24{skzJAN&@$0o680v@f&
zuxn!tQ;rh<xc{GAN^%>#$0bh3z$)D>gwfJdsmW3&CJ4l4Fhw1&PlhQ%x@5pSvylj0
zRuH=#tdb1UdhhfNRk}7L@Sd~)W%Sa+=-k;n;fJAAf0+2HhVNe`4YmM?<SW=q7UID_
z*nUtG5L5uM*gmX>e>)4R1hV&NpNfV#G>rn3Ypx;6jMZK!!9j12D(Tkoa=ZGGXTm_0
z%n)W6*hm%}%{M<P>^yy9$9Gq@+Kb4;QB{Q4$mnZDSe_TU`(IU%Y{yMfO`9LH!1D|C
z?~R`kDDWq~CvSop$3P7|zzj%CH^Z)~Jug1H4F31^5cuA4m5J={C}$UFH$x3FtFyCU
zZ|M)%J-091tj(^as=UyUx8jO)Nh7{SIS*w~F(2PL`}2E#!Z*<{j}r#dm;PsOl-U9d
zD9uZhIW`2}Zh`JGbVpheIaX5kW;rD(b2S>zjhkpO_F0rR)|5!L&^m(LU&cCG*Qv^z
zUq!qgU*5yAA}wpldYmdoZ;PHqta~zIl;>Os{kXnaR<FL!8otMK8hVV@19Y<jHB*z+
zMhRc0c1gsoIIWyz7-y5nh84B9Q|L>K)q10k-Z#12H{T<c>kNHF>gAfdDhrC`uroT+
zYcBg8LL2w7-@qWaIf@HdiFHst@o$LbgMi<9m#ol5ooL6u0(QcsoX3OHnK^l^BRhbA
z`EAF4W9-eNn!3I=U??IYLMo^z2&r{IMMzs2DnnwOsHGT{3KE3WT4acjT0tU&Tm=CE
zky<NMC`4pb8AJ$FrVzqVOA(nN6f)3?3^6wf;g;N_-{$xG-uJKXUF%!RwYpr(Cb{RH
zv(Mhoe)jVODBTwle_Hg(v+j*(JSELA#=aTz87fJ2cRuzjh$Plnt+ed=8Niov64gI#
z_B+Bmdu&X(9@I61u?A(hLlU~gJ^?B_iW?8_^Uy)dLv%}4rH^v=wDH3<FSjte;`A^5
zETw0^wf}<>vLSP<ZKv)lc<%3@O9*N^+)+KyI|B$s(Lxk;9alyRXDOTTLp)3<;iu3*
zd_Zg+Vo~(RgatYkzfh?cwq$-ivYXnrWL?DoBw=>Ry4*VVQHV?TPg)S6X0ksn4H0d&
z{zyl&gu(ca!9hf@JCYvHT}RSxWFJv3c93o)2(tg?#%niC!-?L`vPaBWcf70beA!o{
zh9;f3)rFdbI~E*{zGAg_!?EF6CDUPi_3+91-bkX^?8VTD&4c?Xe=Hw3?Knkp6+r_k
zM?3*DNX}9PXdX3sOp+3<N!S%7p}qM7PzJMeBY;9wpe1OXDQ>tFiEn%<ie;G}0_QXW
zgKR#aKa^EI9ivHXO7G5naqZD-+C-JRs$qHG%Zb>oVSIBk#OzV*o_ZChA6W@JD82=2
zY|^8hev5DDb_oSU3vNj=1&b~Y`Ht<4c9ctv>76cczp$gEUiN}W7z?50zN*}iUex}O
zLEbv_O<&|HX<y{H=Sih+@>TK$I5it!_r-w}{ODe-;orb;_tBKH{UHyzK0(2@$OtKy
zH<%9rTvpd+W!9;+#;z%$bFsb*|E%~=mZgv;d~NRHHJq++BRves{=Mv0BqJcKL;J=m
zkYT)0?<Ga@l#hOg;AWMooA6aJ_$5s)|9p=n)+JN4iPML&4X()}RiO4K)(Pd9^_kK8
zaj!>M7i|!amZn?usebPunG|O+3qoGK^W_gZrn~*)RDZ@Lv*=r0;Fhh3hl8I?k^I8d
zrGQSG4q1oOJK?M>5r7d6MQ`4yGHEIE2hL{JV&_tD%KW&!D!}8YvNoZDMG(4-|73B#
zI`py8(Rtwix}NESjqOv*@a+B|WJy(_`xhMzV1iQG96@~=R)<X9#`&H8v<FfPWppQf
zbK^nuRhREz1ip3>oQTX}q5*fs?n=a|!xkF6c^~>B>!K{&;|w45;YtH+_xFBtDAmf}
zTe-5N3_k7bD425VXxH!j|4}IX2Z8vH8R&oiF-X)y8TA1lH$zm$O5f#@HW=dqyzK$w
z&U@GgvFajLUB`rzlG{PJo~MUBmbuE$x?KXZV*jy`ux7WHj_M}!Lm)8kT6{3{{<P`n
z^hbZ%jbk-xPJY~_?{s0|mWjj1xFd8aAhxCjlZzePMDf$)779SCW?BM+zLM9Y59d<R
zTDgL4J1EO(7jFh}8^_@}$7i@<euzz5jH4nE4=OuSf2@{tLC)K9?vbd|SpLiRFAWBX
z|0x0?*x_b_6iJS_YB&}5P;Z8Io@rx{(o<q1B&OxLC@b5=*R9{fDrFjG2eKC5^njJq
zwwJgTQwy~p4DN|!F_|>+GW2^X^g)Q~<HPH7Q@ys2x3?IyLb_IhoAFgZ>W9rSsHAoh
zuXCS@1q7I9BAerfv2a2XoRM=<{&nrTGiOe-raD|m&>t*fW%swl9J_W_*6lKR>{q`F
zXJM+iU`HDA-uUbOQ2C|OqSpq~0GlRg4ddX0-#i8Rv~P_)d^M^3^AsyAp#y+ySh^dW
zT}lM%+IWg_^LDI<uB5k7K+kfo(kcHDsJ&<{hNEUni-vd&;yJZB-^t}zo*f7xPl$dW
zT6J7cnWi=2YG6a3L*j`~mP?~sL_Ihu3CIfa)=+*;a-!C<xf}(rL>QPAF|5}rGp>@i
z&n|(&yd6>C;*(rB`>yj5%l07GbHLHx^|5Bxh9x7*((nbNUyF3K36x-H&JZA%Z9#N_
z_;|7l#&I**UK>EfVa+}EVWqhwSV&JHI}ekX^S?RTd7M&`((#MZ+}O4yRZ(1NV8EH@
z<bp@XGM{g|Y{B-S1r^;*|JC3fEVF?xM}Sl*TIi#E6%+d#C8}7MFY4O4_^*z&9cS(A
zUfc>je+})2cZZ&@l2C|P^XE}wLzXkO7k7ThaH0(-&2g#9&7xq{UryfRp-;usufxNE
zzf_962fGonVo5fUfLltrD?%wxkh!d~(B}2Mks6a8A7$m727TN~wja3PFYg;?!dwJl
z1B>dbw7Id6Q=Y`o`1=i1k|N$%{q>{w-BY030N6AzG=}G*(EiCv+{|K9N^Bt|(^qc6
z{!zBRlZe~xY$a1k4$LHLqS7WIob8L&yPijkF{e(Cm*wok>&Q;S@}89PNNgb|?aBrD
zn~GP-Uj2Pg#ytk01veem8iFQ>!6Ecju3A^yX>P%}RybX6cXMfKZX7H->j#EnPW|HK
z)Hef6N%QNDUI=|~ThfYH4dcwfg4MaN8bX;o*V(Sosb9Y%{O$Q)g2A{Z?LS@-fJDc;
zvd&2>TevIPJ5a7XLw#Tx7=>;aMM}OGicYm!Z$pzZl!%In{$e^!Hb;w^v+^<DHuFFt
z1c6+N_pqD$*^+=65A`RicijVf4*zwZIM|(xn;B^hdBr26q0k(l{;M;>lh4`Nm6cB{
zs?K7z4<{U)o)oTioG5t6+O0S-VE^UChj}XPn;F%c0I;_4a&5e+i(4Xs0m@S*%%s|D
zN5m^CD8U)m^NcXZ5-?P?W>Y5#tMPp=Yrx-pM?kDlyL+H<SMbA-3FDXYGPixw(F%t+
zmu|;T=iQxJjgKwubMzl69<*0P0IfP}Mo05CJoaX757CekR*CIK=5kQy$&$o;CBGGN
zV#F+pZ^rs!=GChqVVfzad~a3ml|@`Do+<7-eg0W*33z7IoGlM6KAhm&m-y;#RQ=G~
zAmASYV<Q=IMZu@YG?8Crqy3QE!qt8qqW90vA=qobAXRMWHWQQJraj%PhkZi2N-Jqi
zp@bOq#4AsK$o>c+3M5w1?eXJo8_d-!Nh>HfBF7lhWNVLa^Nd2=#y5vN&ZnqgtcL~&
z#@sUGMbK<rRBiiLr_CD!V&WghI>>f<wGD3Ot=csJUpPe?+p4-SMApZA&n&lj@%4Sp
z?zkJ~T;3`I6M9M~XD3RZYp4wH594g$zngE07Kk|I%AAhq7!SypV|$GKN>q+_Li?vd
z`M5v_q4EE(ug#?3>xU)2LgHwFcJ)#98EEP4mG(-BN!EH;c5NO3ZKc!0J_>P(r~(yN
z>{h_;7YgrR8~CwCuJUhYtjMl8k5lZ*d?rSIm#q)e!Dat53PAvHL~DF#nNa&JU1TIl
zmb(H|MKSjeT0NO@3&s%ZeOooU+K*U!Kf~@w#RTj)%R{KO{WZY6mHg3@A-BEf$^&N>
z3&&Zv+-=p7rv=vc7^VKFsipoCSCJF^jeH4|ai|v|1(57GNr11)T$Aax@0^ToG*i#6
zhiahm8huT(B{q5F(uH^aGaPeeXM7{+0gEfFZ%Y5;qd)!Wp)t7)dyj;_$$Ztp$nk5T
z<Wypg9x4;fEv>7z1DuIn*q1fGfdB7zSelL8RYti!M9b))=wRn$m+$3cwypHl%_f-e
z%VnP{oKeJxu}?uRR^a=UE0!v%N=5~b!hC>csq!`V3O&2-D_wQ9`U>nWdx|92qG!%u
z?QNGe=cy)Pwx@cVR{#y}aw0IaxOyB5wv)0VK}OVP9XzFECNJ2Tb&w6gOhjh)v3w!d
zqP;@O8#p=UU8VN9`%n;FJTXptp{w=$f00O}#0DsWTEjZ^3Jh91(Q14Ah;nKU{I}Vs
zl>h3qGuO<L$;!HPG6~;;nzvJ-PFzr=M1`+w4=rcC+dr(BPdDlJdO81kkDGfDHTc2k
z?{&UUMvXKcC!W>oysgAOEzlZvsf}0=9Q>41lhLh;QBMg)AWo&M<na^gr{WvwC{r38
z-@HDILAu%eDcb=Hm07vck@rGk0Czdkh<4tLI=dmO!f1?P=d~xwb6fnI!GNn|KAh*1
z%c}z_;!a%j7;~hn4c_5gxOyM{IdmI|qn(oB4$@|<U#5TyRfp}Py!C7n0ZB^s-bw1Z
zGe>1~Yb=^R2m|K}0f91Of>7n`ByvhAZr3kQ|0!IRQlf(^ASe8p4<JgFO{*BQF@b0y
zH2`Y>4@q5{BAK$DOblHzNCE99XEdwzUd23r^K7Pwcq5W;Mq?2?US44P200cU_bRag
zr$@s`&);a19+_<uGrMARwJZl9VXJj;6L<_SaA|9{ViU1&Nx8FXBW%i}q4!yoLp=KX
z?8BHj+9RXha(wvr)6^NoS4zq)H)!}=YSV5RWLCVfd6uW}9+-NIx7SqP8m7h%z4%k_
zpFH^4#mnuV5rrgLpctjdpm)$SIt62)AUDQJo2;R%asv$Az>S!X?}hv321qop=xq}=
zZ=<+|m`mpobns1G(4*-a7aG4<qRn;%U3AL1RC;FQV96NtHcx1cme(GBbfck^Xw2H{
zsYyV-jq^Q*Hm8+@_|UjFDZ!Q3wGK+3d}gtzonfW80W|>EFl^#OrFHf9RaZnwRpnv6
z^@$5z&)wVJ%ynF)+*M$o0=rWV903>2Lqu}dhrgQq9x%@xi(wGRa)FS*HLsy2G;i+X
zY{X*Q@(BHn(de<(zC)-Y;X+M1!AoiC$3CQVtZCl%q+c@lCO=bP|0dWXDC-AZjb8|m
zz!7XmWpbn!NS{W}>8UL}OJ36gxdkI#WiSS{itX|Ed2li9a8US;$1>tt*1@loE1Mp=
zeYBO%aCucyI%`q%JX7u6+}M;SleSRqKqR)W!_DrfK1QAKb)fAEtB@pqk8O^Y2)MO`
z&WtrMoTvaD)R>?;VUGbTt5p=;!MvKc#xyk094(`rPnLRxEeh#t*#}F)viV8#nolNA
zMpX^iw=ES_PyDHa_+<hPM#pyiotRsGllY&zwCa9!ZG7K`22ED8p?KWEN4e)?UiZRc
zygjorV)X}m118Q;qb}{3uGo<o9Q`%nFQInzImj+0nzR}PMjFP=9!r=>&|-8Jz_fTM
z#ppF>E7pM4Ni{!WgqC`3zH~fTW^&Io6u2Ef_eF}0M#E~YO?vGXW+}%0)5m8j>V~UJ
z`2)-dNdIan(ou+_$B0WFin*h(cS=x5tbVotdm}(HV4b7qykPSQx)Fd;#|m&Gv^D|N
zn;dQ__nlm9LlUxAcs*dd4zRCCDMs4CY+e!AEyX#Eh2{~_%SEO5TJ-P>o}|gbh+-nn
zkT;w?tDjeW33RlFf^k>i$_xM1`COw(p(xjBSAZ#`9<+tOBmy;aq!GUIWgVsZ8Agy)
zqb8)pgQ|FH{1o*jP9nZ<+2W(MQ}08MiRbhr7iF7h7~9p!PEuJtc|<GJ3iOWNU$#%O
zT5elGty0L*wsEmk<UQn{YtZ#r1DpLXpkx{%K^fTY40$k0kpw5&;l^lPD@cP_F@@x{
zPxEAPuEMu)TDQPy4Zh(Z-*%?)M_R~BET_YwN9FW$xhig}C&SDB<@WMlcI_wLsnONA
zAc8UkoJN%D6Iu~>BXpwkwPvinlRNI9k0tKIY4}zt^+vWeSJtC%bAyL$WFf8IGqmA^
zg@#x$ft4<=2|sr{z{Qw(j9=TYC`vxXOL9N*;`dj7>ZymD;3t2B2%Hv-Y#WUJJGpuK
z37z(*--{vSDJ+zii~Q`fl>FP}QN|R3Q=Q6L*XpKurmxfD<-Wvh5$pV++xsccnW`xe
znjyq<Ylr12C_^g0F7my~G37v}Q9~4x^roZDvn&!ja-;-ZHcc6w$aXyIt{HnC9p{*r
zR^;d3b>(}-#qX6h{jQ(S4d}iFGVOm`UPufV4eOk<f}<X(NhLe6FM^x9GtBFVl^bSN
zKPySCvvIzYM4`fnO|9x>TS*B?h#`KW=rk+#kh1n}`LxCQ0Z~te<39^t)Gw>+2BJPs
zPb~j?AX5}o^M$UO378rIo<0z)03C@VbX9GAKjoW@(X<xP6l4{_{Ioz<RGh}y1nl5&
zbhsniAk|G@636TyTMk5W%~>`=7i<2vPZ%`2+s!q}$Nk-DLOCt4NPjSKyuINna;Ipy
z2mB)ijp)S9xGHlXN|`>EfWBoauq0ZTH!17LpD^ef7kVr({v@$gtj|6*XiYc3FJf6x
zwk&ZHY;MiFvsl4Ls?pAbn(KGIc-elp{8izws9Z+968Yl3br$@75&ZrLj(}qU|2?Da
z7n?TfsXx^AP*!t3z-?Z-xli&}fM&cwD@B*RTWQa&_)OMqwm*a!m7$9vpEVCTxHj3+
z2ktkas&dCy8Bu#_;-ev?`B|gK$Blci4<TFhRp}3bG9`%PWq>){2g`))b&Xe)zAfEK
z%MPsr)&zz(^!4mhk63s72kgt<Y!IJOg0`aO;1@6D7v>vm<D7-rU#ViYCv~Nj?(xwA
z=eVIkM@hmyeXKPUs8?fVT0^>WcrvRMav5(4UC@(?=tuFdTZrS?{%Ei?D}l3)e$R~o
z9(^T3(%R7GZPt3d4jUU!6$D_x9TxcsUk*<;Cr}5^RSiZ$cQ;`FtK)=sk;~nUp%Rrj
ztcgENEX`9###CP?DOB4uS&hLD!(jTy0xO^?ecLLpao1?KvBm<2@pICEz3nmDq6$`5
zNAt#EH;>1j7t3aydl*)43bt7UWsF9aJ6XDa((!xW2Lu5hb7@em(cEfY!Rg??M|Q;x
zHNP~kg~awIw?>>yHl>FV4crW*8A&ca&m`OpxGmN`Y4t@<8`&BfGY?*859No0O#e%p
zKHg*XE?$7k$jpY10*pMTQub349{rD){gOg!2*I;bK;O)dKt|q4dfL)I@nT39+v%cn
zk}RRv^0hMX%=Fu^y!FcHHaa1Mrurpo=;XoZ^TXLe3*CHCcu=a0xc85wLqFKQG+25L
zjl@p?{iw|xQdJ=W%D+0_6sL+-l}|D<MwycIaiPZ=hQ+2gZ*XJx!GZR#HbvM6XUl@e
zxAi^W>iWdsEnx5ZYhgi|oOZZzzMI0$)GE$P@(LEDXL<m|^OIvJw*U&-iEhsak4wjK
zrm#-DDST_jF;tOw?Dkn{uB{IbyCnUUC*LbP5$Yt$5BTEMVbAW9D%o+uEaU$Qs1T|X
ze*RY{h<TO!l!>p4A8zGW^M$zvQn=u^vEPI7`teJGK-1a)l3*$NCe&CKxEI<{<($ag
z7qPVuw=I}BjX8h*tF;x>eKnr8Q_We&s;ZMD{`U>u{Rad8k3Ri?FK)q8@8G=P@(A)+
zW#6JI8S{`--W;MBYFGPX$pX;xx_y6o;v@8s#T1y;g-aP4sxNxJDIAgV*Piizy_j`k
z`rw&<rnIjz$cxsx)6w7GcI-RCn}2nV!;(QYDRAPs8p)kzm*1$`e0yzv@TGI#sVE>C
z6KB8hK|`YCZrOtSUV%?cW^QEFZygi=>QEba&DB3|Z!h}8d~N4$V3dgE&ryCWaRm~N
zj2TJz!ZF))=N8H;B#bUHkRsRSXB)=SznBrWTI*ufGR10E*zZ#(8m`z^zOjo8*zvnz
zWkkRm`@$o6!J$^7t7IAwkeB_T|BLQvrF_Y41pPjEj;{VdD-f^bpC^cjAYN_f+5xZq
z0ccC?S)e9qEz#k0Hbn;dJAvB=*}i8ho?m<n0#xSNP6eur_a{Q5X&=|{Q$H?lkKItR
zdqR`<ryk@#@h=fU2fa!x7pPa@RLvbqFew>c)0;+b<sBM!Y2`B+DTQMVZD<GPDi+d0
zGzDd}qdcRH^BL<|&9iM5d5=r69i77I;`-3{X`-1d+T$71=Rq5|mvt3%^cVqiF;i{9
z48dFdg;+;R!5y&$srZKYz2=SZ3K#luH&mPmm@Z-(A||*|idl>U%J7QEk63&`oyt5$
z%ROr~QFNbL_(#1v_G@k3V3a5QLwO4siiLQXd>0a*GUW>Oh8g11y18NW-Q?z_x{OAK
z6bf-rM&K5(Vg)hL*XI%4*?MNmocGcGWr9%aR9k%}zf`m%PwDBD!YJ}Pe2KN_T;0UW
z(TQtULk=(KN1o7I>7xYICFrw0mJZ8}q>2>cD$e^X1F6RiJ2pW|T+Qkinv2nL+_4zj
zOC65vjy|sBCz1l#pOu8v*0-t5E%uO#&P;d~r=|VH^MujuKYB1yC2pRkqQg)BQTqol
zxG2Gd(driN20K|_^T(kSb2tA<LaN1)L@8zN6<V3-c2*j<Rk-AoR=`Sb4}YBdHA}X%
zw0Pp#fCI08Wd@VEzT&<p;rX|^Y6Fz0H342jd>jpY2!hWl8PW_nQKCq(peNLL5j)76
zfsf#}Ws<pOTJ$0#*g9+9%SP|$Nxo6QtVPg_$fJ}-jh4!H%<Qbl9C|h2rPrXtS#CTb
zFe$^YF2UDzN=X9ZHF`Bus7R@W5NXrah6!Zc&G_-By=*&nR1U$I^;obJd_9tG^t!$?
zHS=v>ENLBlc*YHqW5b5J?1?Taudm|zu<zyj#72%jgp6m)kjfG_0eUj*0~k~NB}VOZ
z&bH@L(%6ntg&yYGo^6s+*;H>uJ=WXkc}Zy`th0D^j~Vr9duGwa{7|!T{~LehP<glW
zw(H=_Io&8Ch$QQ2Cn)B~H`KM97er&u7Ux6?jDlRk&ki_}QVoliD}m^g2>hU==@52c
z*rS(()2(xh#zrxdZf@K6VZLTvPP{!QUZ>Va=Ump+=wXP~1Zu7L;EC5R+ox_c8mPTr
z2Y%4d=P;HVedsB6Ns=DX<1u7YofJU*qGkw@o}cE6RHC?9uh5kxn%uK0EZ?7BMf+#s
zfDS^Ypg!>W2?E8KnQ9n5GX`{F^}v;;pY5W#M&32e-6Xe^xxdMgQcT%jDc5(l5w8Qe
z)@}C^`IdHf4SFl%Yp%ik_>Rs%m)d7n5Hi0spsT=7STyGGPzO2a1IhLxZniSkau<)V
zQae~{{*LDF8F$Vc?rgn@_TcDkI~Sd92NF_iWp7-sq_t)pm>{?x_x!7!|IJloI}r`+
z!FCf{nb>X{`94(93I7vrIZ0Z>cEY^SW}*&Q31t-Y*C@=eig(^a_V|giFmul4zRIXH
z_m#uP_ydK#a}O-uJao!me{Y~r{r<1FdUYs9rFsge9t`BSi#RRBy68Ez+Mh9D+yodz
zvUc5UpnX~!c>`Fd)s&xH6pG((-i&ohFE_*$j-T=WbL{Bj5Ep8CrQ2sk(~ActhJE>c
z@|v9TgP!sKEZFWRym_bn5NZ}k99~u}_h6*Os0WA{!C2fSM>=NTDVXiS?1wTSEZQYV
z&2J&ngCW}W6n)<V02h5hzfnilffA0J5QN=~jJn*LKb+})GT?g>+>p$pdIwj;FtB|4
zAjXZWlmZHt7OXW4|5xWgryT09q#OYeSH0HzrwaqFoxTh^0kyW)C`)|+j*2I^OENkb
zsHZ9!wc`t1q02l?tGySe)Dtutyu|mRzCs!?<LmyZTU{Q*Jhc>cJu<*U46M$1@~YC>
zEpm&pQlbD;@QVU3nEwCk`JhIU+~@Ngv*gw4V9rY}k9<#RS*bgXY;ud#e%Qy}9{1>Q
znfUdRSLU4}4Dn1mF%T}lAb&Lw5vj2jEgrum(hFx?x#U>XxOluJD_V!R`G2*e7d8Qp
z2}cAGNHDxL5;#5aR{~86YJo2Y*p84$#zeP?*I;AP#9L{y@B>!gix2g&ZDXYY=USJB
zs-;o2)v?B8yTGo%nxQu%e}LWTi>&t<u`tp%iPZrzaS`OY<>XD6jG0ITv>}vWfdgQ1
z{nCkKL7usi386`n0lCe>A3H?9ivyKG+*^&lSMsM%G<L{TZ+nE<-6QelsiF?Q!Y_32
z<-o6l2%><24K(}YIfXJ7R6`3J4U{L}3Zchh;YdmkG*y<gYHSZGzZ&+<+YXw-ZboG+
zI_;%nZfq-m^!D_3_&#96P)_p(9ZB*HL(B^$Po8LB#LIBKg#;BGnuJIEuc<enLDbok
zOj)VjtnGz)z&kMcMZc-FV$r>nB?<U;Nza<?J-6mvdsd&BiQ(V401`isyFBAeg}(Je
z8;rtNzYRFT*jV#&h<m}gRzjR=SZ?SqkLue&T?!11guDE2Do34F?}J9;UhPXhq1h#r
z<A&`j37arZf?eH{1jrT>EZK#fryGYO`D^2<Pbrb>B!}DsGOzOrYU4{$tIE}<|Hm1-
zlYf&A9oM<Ch;M*a(OwXtiXe>amHE!yRe#EM$9kh>^qcj=!r$13W%QJKLNa@OA?6CD
zHvtlBitGn||NUN^I%&i;4a;tRD0xgIROEipTV7Viv+X{$VEC%Kt{)6h(_z`8VWWea
zjDdgv&Hzjx2f)uP>8vycf8n+0ofe8d36TbXCX}@sT6d!+BeB`6x6%AQR^RVC$firi
z)RuhH&=~jTqKB`|LQN}DO1q-Yg+H39eW*VtAwsj@d)VF*z_(QY>S)rF=jzmsAlfF}
zQ3NrV$fCDf+bM(FKxJiOO%>XlB?&(u_Upgj=ODLi%Om{?@|t{hcj)eJa$0zyh}QM}
z`Q~hv-A{VhtL0Lomn-SPt>DU8@eh(n)}f~n*HA(UE7_mdq0M)LA=F`>t=8`=`AH7t
z-*=2(sF1y6`(Bx>Tph@uoq07LG54kdcP$K96=7<b<B)B$M;C*Y(1)jwpIR=rz{5(9
z)5AAJ&Wn?|W_E6_XoKu?OekY+!jISVvTfroRnT594JXyWNq9YB(d&q;PnnzOJjFf5
z2mVxb$TvB2*>M%OFXcQg)uF_&&EcPcxbdev(kd(h#sj$~{LmgFtWR;czryX5wA-kK
zvqpI&?E&Mhs6$koQ;6L{Ze*`nn#c`h1*P_Q=N#%g-&lA0RTh<Z8Mp$dnbrt!9sOQx
zlll^yqXBbj^{4nJN<43^CY`h8PyFj=4H#FGCDHhIT5lh4^F^luvRXfyh8r*KL2pft
zCq2mrs*2V_OX-^SHqk;$z=rL8y_GGL`{PFcy&lg8zRq@k#g_o5^5Ag9d=q(!)*BAJ
zbxS{9??R}2OV)`#IWH08mQ<9l<g)r{2Ok<4t&Q948M#N^DBhw&$)jSnMBJP%QOFb3
zQBe0FA@r+aLpIY!h>U=vT{6c`gtWFb_QNC&k{TleSjJyz<c~_h#m>z;SZZhA%`qQ&
zooUfEBN`vXmv{^F^{0Mva_SAdiX2iQ=w+Cr)B3ymG1)}5uiu1c_=>E{w{d&a{m;vF
zB-0vI?>Hg#rO{9ECzW<B@x*;!9sS#*0q#W?Zk;b~&X5{(5;0ruT#A~7Z^u5HO!tu5
z%-sh1l{N1rPA?4&+^DQ<^R&!8*zQu9qG(UN!%Fr<yI<r@>}{^<4c|WK7_zX>AuTqi
ztK7-%v&pAA;D{!(<6_(EG)6>ThSq|)0(l3{Y*QYS&?q!7kovY!Fni}Y_?!N2G)s`N
z@j2=Z5{9vqmT?N`{8bfCPf(O~@s4t{NlvniVBK?eg|CPL^*lvu{-Q3nfaS)p;1%Z+
z6CEDMDom&QX0w=uI>=#wV|suSpiRsW!ToOR98dX2{?g!GjyZ0AP9j4D(K}!_XF9i1
zHp9EVp3^Eui%f2iY6_H_IK+%Khb6sAqT2iqi;su@IAI)#S*qFlw=m}fvV`yTg*wO)
z`v2#rqYyLn4{ECBkukMOsmZ4>=q4B$z-x{b_PCsNfM|l9J2kLnV8NeCz}>Nn5=ElO
zN>zS|sozvXt7s}>?dWf_$jlA1x2s8$pN!i9NQ!sTb4Sbjgli#si$v`z5`4Zp<_*WX
zQS*>}MY(m7nZQ0P%SaNhC$A3#fy)JwZgFlYi`$yzRR1aqtWUqHMpX}^3rA;Fi=w17
zlZ-17qBnQ!ZaRxaAM>V0^Ikxqo4Tkq8HdIA`e0DBT}A?+ptEBm<q_MetFxrh*XAZ0
z>Oa3%E-!4LtdG!tMBVv$o<u<Tp)BZa;aJsGO3zjm7yAPVQHXq1Nt*m)@ou|0ZtU+d
zp7Lkx4CMV`8OGdHYqHWH{YAVZ_2~%Qg~pp_xsc8<)$6%qWSA3qI`&WV$*ZjJ|3%pR
zxafW=W-p$DkiB9+lhbSqw1^t+HID7LKjUAWO$*eUd8Wz?q4CxON`JbS4CZqz1@)cD
zj=2Osr9tAcpB#R|kdhf6m!jH&hsK`j^D{#XSG^Js$JYik&hm1IHpjIB;yUEp9x#va
z6(Gs<8p;hQ-F>j5la+}RR#nQn>uxp@{u&y;jbbumO<1=6K&Z;jRK=Ez&-!^e<=@!4
z#+gbNJkxg8h+UpXWUIg%QysFbQbyOV0`$^g6Q@)B1iCrU{7`vn3Yv-Ruo|VapqwGw
z=3<aS-t^kqN?Ck+l0d+~?V5U%ybB2ldw<q?CmPq29OY%>tt?+m9`m}%a9Yfa2`_$>
zef^V(o)SNuXvnH7v3;JZJsNlnDB{zhe>(RLRZkX|Ojf4*&}^<pI1+CF+qx&7?Jh+K
zf{N3uw3EtJ4SkJtnYx>PJT<_i=U7eehK>%`goj6??H@*D+UdVsS%RBZYE8b@q*8(^
zM|>spxiR$twi_ldWWg16D}iz~^PO}!sqy1Upa5|9SJgvic~tocJ*=68#=W_V#5h`}
zdCFINxhVG(J$WY`WNv9p|3>F+4`yeBZw>|Y4_Jy%lG~W0HmYzeN}2txjkpO!s1D1J
zbvU)x&0Ug95^$`sI1tVeuluICuN;OAv5u)WQ7!K=%U%fkV6@-LWT;hmylF7!__Mq|
zu~&nR))uCc2=hBZu30jp7%^(0R1;c|WbwvkNM8aiKs{km8l9jeVkKXo!3mAqCn;;<
zss$E~m5JpGR$xgm;ezu1me*FFEfg_U+UBnQJ%H^0kHeJnj(+*2s~peeau6OKdUDks
z_&TBL3U*MvPumUF042f27=4nQ1MHk;CoI1>ByWA*(4sJK6<m<lA`zpIX6s&_cs&x@
z{^&EM`H4ZE@%h<P{YW+U$kVF2eg)vq5%w2!D0i0r7gjR>Q3Dyjnk4^B?Z)Y4N?$3z
zMc&gog0yO#O=2G&N|kMd=Ma9bJe0jVEIgc5OL(~B=b@C#Ls_;FeJNjlqCe6CWbts=
zcoB$z^lfe3kF%{5UL3DWVD_hfNo$YZpW7Sd7WdA=y(ne0PnDhAkbeGc!MpbqZ~HF~
z>S!Y=;Uvs{xRnUwSEqYMJ+!Nh&}s?nt_9L{`qPrcd64&JMYq#3?@B8z@y~kSRB%3+
zU~&EYZK-mNt&o<OjPEHwHg>QdqW@{fT@IE<D|yDBxceOLZ=n=0|G$e0>^BHGf5IXk
zaf1X|f1jo{82bkm3aqz)W<1xB{SnFs)W;^R;=)+F_0HZ#l8m^C^)ps?rmyDJvnS~I
zL{TYAwDiL2y<wkWpCO@F^|PE)Fy)=*xu5Wx%l|B_W*EK%lw(e4P2rpD`Jv1d@;+=*
z(z6N6kyf_%Bzd%mIw~crYUG}6S~Gs{LP(=m0iA|1Pc`?>EzEkIT<Ud*{mbP|mQ#*Z
z-^_`$zvDeUbhI^&1k5#7YnZH`IKLE~KnWW^cs%LFD}N)y=8Y`t4%^ugX*91o6T`oH
zw&CKRFHFtro!+HIUHUjFAP0sL-cmw)ZuW6{#Wh^Hq57cbeVfGXm{KW}b#{ch*;(I@
zV&RT9?F8#tt#h2Nqfbr$n75Y|Pgr7qe`v#zd4Elz$bXaDPdez5&cA*Cl}4O@1<7?N
zC5SoN(WN!CLoH<wF%qiw#?qAyaL^h-aHb=03%bBfbri3gX(nJ(N@r<S;-JFqNPR)5
z%dun$-ykIBe6Cc!0@_&d%BVPYD1zPwi|YE?N4oRQxVfi_rul^pyJtn2rg9<9TaqCp
z$+^iC<BI0(EOT1F+m?dYwBbbdC28!>CTTJ|^V2Wo^YSlVyj=wxDs^c={f6w~+YiHH
z>>o2>654mjdH-f-+)}LmnA2lH$4wb3n(|v1VBH+R;>tL8CrMVAx@~!;vK;YKQd0j`
zE~eo7H07l;w7)FUM?-2zCa>#Hl^2={&jtsVd}dr!wtDkN2Ha(PjB4k(e{6755}>6S
zfQcu^1mDuGg*#&f+Y6jGW6Trhdk759#vwOP<&-o_n9gDNkDFML{Tsae1$mz+O)_GO
z!sy|B#p<Bu2SXmGVCZTVW)qB;Q|jSPt>JAL7wFCdz%)Ka+rES(lUK6sYZ7RhZ1NhG
z*e_cl$lg(18a81Efk3DrU_Bics**>uKA^Us%CBH$`423(-m|ZGwbrqP$9v!Jv+!^o
z1DOGCRjzhn8={MImMCM=APKr?W<rW7zE6FO<=aA|rr~>~vjmfwA3%(SYoguB0Pi<V
zk800lAJN^U{6`o`=sT00+cY_HCbVIGdXILLZQnxaar$2te3d31@(*VyD&#$Cb9@Ju
z{s8KtWd1q|gE-nR72m@5IZouCCERecoMhg#HbI9|9gZ?<avF?%UfB5_8c>vNYv^Z|
z@r)vW=?;z#|NizLSBZ13XTfe=r*G~;O}Dcoy4A?o^;k{qlP6U*V5&7@x2LR3>KW_r
zdHTcNzMbLn`{`SfcJ`Wn+IwRCsr~l}lat!jW9rS?E)k%EfG8NoN{uSx$$HdP+LxJ}
zO%31_?P<KLrqY=GIk%O(N4fG&K0l?#%0AY8x6<3=<$SuOcS`s-Y4qOt*>D@Wm-jJh
zHK_Okez)3E!qlwgCK9oT#;yPA{GP3&CG#(kMiAAP0~E=0<p@<8-qTX4myyJ^M1sc@
z0GX`k5NV=`5f-U~yMb*W<%+~7(Z!Sn`kK>p|B&Yqi?DT?EhboLLZ{1@n@yEP9VrOu
zW{q7OeoFSP@+$H*AI)zD;GlOCb^-tsh`RVg=($4cD<PA!2H%6(Ky35HN*>_bLC#%E
z49WWlB?yrl+7Ei&NTHg04<=Y+?V^Ccv^L5W7GIJyxy1pD;mZ$8XP!*^sC=@r%ZBS~
zh7=EHToMOc3?u>nsizmV0CbVVUW*-7CaAPn)gydaW`j!%VB2eQpxv+$Gjuyu;!$>*
zb*bGVBZF-ynJxc*?2E>C4h^~cF=kuLL>ALslRM_uS=!^s9etC!JSls_mtH;9;yLS|
zW7`u?SyfS{_#k^|W@u7cmrxY{N+feiW!a?6Cmr3AZ4>fW`rz%})F&U@-cRhT#NVf?
zTr@w!Z;FR<PjId*7~3U@^QS_m-w~^na$AgD+hW+wJNr52Eax*=ud)(sqLY*6#cR*Z
zWO|l*N}(Hw2%oTSEgAKI^ZSVzk$X~AcnJibTG6it3!3uf$%(oYhj6;E`2)-tW%$30
z(tPr-&f%f?aBpdHyrQO?{`sI?P}M+9_mSTxJ${^c+oApaiabId?2#m!@cZ!YCacV=
zlphqBQ<v%sO-{b129Z2LLV+!4d`Y`WF<E;LWk9wcP}F&odR4nQ3^AjGcv>CY-`A5`
z!ArR0F3%D&^+kWqF6B2Xw+$^h-`(-#dFjk!upo@UK*a{m{)eoCZCX7gw}pB=X6kxl
zP<~jRg>pv*fH02X)<q9yoi3dYb2|U3i(1#j3oQ@6yS4u5v)V@94`r&XkIr~(1_Q!h
z5J3q@>d*bFQ-M2Zc${4@scC+#@r2Ug=rV7Ab=v1jYU;czbKMM$B22g4-`9B9ATjcs
zOt(}}I5N(N=89YfM3FG?zvb5_y_C8No&&17o_*S2!5y3)+%$K!AG5b&>EPw)3^Y-0
z8)Pc{>yAxEZM6NUPg)_+f5-hkKP2MR<@<+btFD!uKI37M{{TzgKQP~o>>n(@z)Lst
z?qBe<^!!bS@-rWE2!=L+nJi-@O_hN4%DC6HE0xrCV}I2{C9zfAvyoM>zglTs*!&*K
zY^5ex+oFp}WgiZmRCOMG%2N_DaNkD(&x=HU<1_EXWA@b-5tH=%&f=@ceo#q6MyaYW
zrDD!mO=BV8aM!#c%;H<5TG7sYf2@cfU*omoZC3!AoZy(T9y@ose<8qPm^v6K_dKKo
zTK|m7JkvSzoiIAc%wV+Xw4Sm{YkXFdt<{0@M&Lkg_wt0KMkr^>mh~w>AzsdAOafnq
z;ia^GR&g5paLJw68p9Z${XxvTb@%?rxHz5iMZbPtj@7H8$6@COW@r^f(UH1Km*7la
z)clB?r&=$6E+t}%jCl=N^ClQ2&Iy#AvZ(||tG%t+%w$LI8vHQkjdrzLyMl*<L)<0d
z#ZX%N-HCLWmuUwhEu=CF`Y0tZg)g)80=)D^bs-FD-<B^o=^xV3{RoKpU+(2gej+|a
zZj_T(<4!qkL{pqp0YfXV8XmK#M~4?O*0DOjQXZ==oM2=ZmsI%Am_I!hS#IXhZ&%(I
z`SeMD&6usFkw3$qCEHK<@IN425M<LbP^3zh>noio2^4}u&kf>A2psWwAp9(o>j_<u
zqy@gwjCMCBN4unTH}Z_e-?MY^R2v5`Uy>{DAO&G!X7Bk-S*H(!ATKvNI1q^v-kC1n
zk|SHShTZDjobEt<4X~<=&4tAGv>Qf7CbTd3tMF5CDz5(P>~>YYjADTi4=JNldF39b
zhQgT(0S8YE;YZ8EvdiV&^1t3XEJjrQbnU|w9m)#6<PCjvOyZkFIV*;`andGHYX)9R
zVzWp@^jL@(?`b?M%^-|m(I?6JFqKWe*}PLpNK$wox%GRGcU9vst|#?6HqLWpbmiJl
z9{V|T@9EA*Gt;Fy$d`0o$~nbou#_O6C-RNSR@xr1VWT@_LoA|DbR?mOup%V83?18%
zyQcrljLVBU#zRKEs_J2&*Tshn&IiLhJI}!3h1f3nIsXBk@yVq(Z-K4cpf%}(n4rUo
zmQ>Eg!Tb(o70}G+Db5ISSh^!$rZ9Z%l(%8fk(un$a~(e_V^pr5_1GUk7So=9p#9H|
z?xtQoMqNF|e+DvOLh8@yP#Jygjz_whvzVpoxaJ<mlI09|Ezs9df^<isl%W6Gg`NaT
z`Rx*tNkB#JgV#eBPfx3g-yN^2A0P$YnpkH>4>R}mUA%K8%eT(g+1u0gDzcu7vPdnI
zco;+kk_jSXLV=YONI<E#+%B1Sk_<3@09u?Let%g+MG}PtJYt>f{OU<xdu`UG9VxMs
zBvbbywI33?k>^p9{l@e2J(8<>SOL6!FfaUX_g3>7cG?Aw3EO^IWI+E6=6WA|?8pg|
z8l%=`V*r-T5B9owg+*Ce40q%iza)#L;W2T$JvLa}?MNuCpNY9(QD~ldS(Mw9S6JJ+
z)bYDahcFL0RiZIy(BJ53&A^=l*Z!;Xw-<P8(4P|LDC!;la1#6Zb-u!N*m}tovL*0i
zbW5}^k=4z_aoWTL%T~ZOce^A-Mz<ax#=T2ev^PtWhw|19ke%=^2Hf1G<p+LWY~`3V
z56!E43|`apdlKD<_E&Y6rx03`FiVgz3zm9lEh|@njtFQ2-vZ4(${bT|KTScu1M$vb
zffJ&KuV8OdQ(lv|4K*8K2i|?*!cA=692Q7Y65}1lBbaNj*pu0c&#P}vb9N5Tm+u%5
z9SxOs+nmhuMCU9{#eW92(yH~b;9m0HK-rsl`9TTNYB^@44xOtkt7x{sTw)mwo~3z4
zIsQLy>$BK*|JNjs)R01-qg&5==pS9Di*pbGpIgPB<D28_w`z?j%!{bMAf~-!u2TIO
z>yDH#rw)=aJS*2vgLo#cSB^($9)R~lD9wZ`^KUx&d-xHi3EK(1b<I3A>a-(agWv1g
z?BcAT3V%OVLA%q^OM?YPC8wKGU6ShH9xNnp#f(tK8JOv+Dfc)qTod3e%}5|Qbe}si
zIQOc5!HaaFn(OhS(POIv9kN)@hS1xxJh+N)Z`xR{gQO$!&m;;M6Vem`Nh2c}8oB%`
ze2avB3uq};(txe<tfgcXJqiDK5@K{nwso#b<1@49-K;jb7sLoxbsu^AMmzQUyGr|#
zU!(7~xY_^DzN7TTYK_0s+ykD}b07%CklH;J2?!|D-T;OWXAj$x?55=2V3Uej8Fb|e
z>($EbiX_~oqzkDKmU;#iV93#<1^o_Qd*^6}d2b5J!=}G=jEkl<^K~@P{)!iHp2HP=
z3m}1e^x82j3+UsvX_Y#hZWvkB+OcfC``I?dtZ09f-$qZ=>L>{}*=uF#<^kwmG@t6T
zR|;pdPgT{|#s71`QEnYa6<U8-GsxasKI?KAGw4LnaNoIhwHutn6}L2b+U=e|SbGK3
z@tZFH>U8v&u|HQvG)dE)+hWA2j))N+4VEinVc(g++1{{E{QN?+YfxtLe45o(PxZ<S
zqp`rSw6mHjaBNPxuRB9WzcZf`s$FLQw?C>7Rkqd9^|h8`kYQvcH##cyT4<`<Qg@sE
zFu*BO6E?nf*=F(L-ow|Im*Qk!h{#Q4)6qVC-P_X_l8T~3V;L9MwC~hIw5upE;_!k)
zgmv-O{w5mAMXAz)S!6A)Z_|cYF=9%tN2bTpl+^UbgO36QkFW&aL0(tf!Q;>BGkd)H
z9mYbuTB`da%lCTq)r`fuyL9vo=@1N-lV&7{JK6^<qg~2(vLA6E%NDZ_VYV_tyw(Og
zw~Uv4-zl`1N?c%?vm>z}w5M(2)Kv1FFXOzw9Ky{f?P5I#9IP&c(bg<}5*j1zN9sU(
zQts`k^RLdwG5-^sX4uBXqYSbW%DG)CRHai+DPgvLOpSbUnyt2#)B1*Hh)xE#SdAmw
zZ@c~W?X9oI>z#ddf6~)Dz%A9ba0CdA+ojz1Fjt99s~w>=kMOdFZ_HwPBmng?DLC!R
zUI+i3ks7Dx_9O>&T31H3$iLn4Ou(P;=aYLC!P(JQ&glJP1&?~0@@>Xw?WF2&Si?_+
zOcZIg*oM?FI|F=y_sv6d%X<<KDFwS!h<j^t=DVE_3|h8k(OhX~{6b;=tdSYSlv!;X
zVP(692YqAF;$?dzz)f#yp_hMNJSrA~D6Uka2R!w1%L6ZK#;hz4_s;huk&T|hqT77Q
zOYJ(=AE|bYvv7^|w6y$m3$La&{!?lEs)AI9uMWd_(0+=f;a{Dq;W@!Y2;W!W7rKR3
zu}x9?yTzP-v3cVz;GMhy-33Sd<0AY7TAZLv1`hFj7s)KN*^2w+)2!pkLXQ1Vqbub`
z_}4t;hWz_hHiuyrD|fGuv$?jfh4SPvb97N+m&<F)EfJ8eUmmLc;c$3(xPcHc=rnF>
zTw8WruqL!{x5v5@4>~P&KYFzDl+K#t2LFf<!3ci^#}tPJjK9t%4RAKFDQM4C8>~R>
zfSv1@a8GNkj|o{qZZ!G@EA?cggtNmH4mk(111j#r$ZSVK@tLj?kzd+i|AS|Zeu}`@
zd;2L_sXEI88}Tdf55WMZN4t6o^s7Dv|4+GPr&h0dSi75*a~$Q~IQ!%5p#fe-GF`WM
z7w&<wMY%tEuA|*8zB@@V#E{c>zG!|oU;Y)mn^94BW`0pX;Ax;jKPtg@GOzLHk8su@
z(s~pM&fTEY1Zyjqq$G&fa10TFA0>pe8sCBXB*XmKtOZ3#u@bWo;pOhL1;h=k$(9%}
zob!7u3Vpnl7Ft<8o0Sz)G+vyuz9@Mtq9QnT$R_)MgqSp-tFc1_k0|eH-^ag$hsnaq
z@IVX!+R+dAPEDqE3+{tLpwBrnFrRKDThDD%#B24dlzU%4eXhClcp`MdLa9hCuNjHz
za{r?97@uD|JQx18a%IMYnHZMA66OE61Qpmeo4F`8X_}7G3D|DmL_5wZ%#^ws#+1;X
zi1C3N2OMe#feJ8!HFUUKPOl)Yc^y+TTpv(!@4-xVW=aXOHcM@EnBUmvK$;tOk;;G8
zQ|k{<f|-!z`8;Xv<592i4L}#jyZTxGf~8SUQl9azHO*B`iSmlMH|2l#igw8>!vFel
zlk_%i-#5`7C(91%AQ|TJX>?Y=g<ulF9HW3+S-L637@%x_^=VEo-K5b#`dg)=)e$>A
zL7pLyTnV7DekkMkpu*9Zw&ZSmuz$}5(|2F-n+GC%bRFe?cXxHUUS)Il6aVf1FV;2(
zj$l22vu?-rHSx$dVngk3{F)L0A#LIV>UG-U&2O=wNzyeDlHfQr43^pk9ok*kopKsW
z@ugDHM%7E-8~76UlQjj3JqOqncP;lZ7Bl5l)6h2`=W+1Y0sNTmELglUF&86H=`G`b
z1Cl`1l)1lA%gH8gI_J~Sk1>NYN<v4s>vFJhBT1=xGvx5$8&TuC*hWg5PEp+rH{a$i
zYF}iy>6_ut`abmXdDmtx`g7{D1R?oDohgdsM?QLqGS{o#plu@>0V7;Qk}x~necQw<
zL8mJjCxP@xeehNG(R@~xAiLsOob0jHL3&0f#kA1?d4T1Oof=+9->snbm-E7R$B~6!
z4sIE+d&7KF)9`_buhs}a7lZBE7f4;@+-H;gQA<@MOrlkO){He(0<G4JzX1>HZ#0t5
zQVA^o7O07O+Pbz#Z7F&%`|y{jmj4*b5iHr~L`GdJ4i#|{?H_MDpg#U<4MT@8nYuh<
zj`Gg}%~b&wO}6T7oF1`0jECuH9(1<x6Szi=ThM~9ny`Zpa0eyn8n4_|I+PLw^Bs&K
z^NGD!l_ZxVK0f5;UKm;@dUfyO170n+tUHcbBAys2Z>-V%rwIZbz|rw)HbBMkxg2=O
zYk(IxItwLZJJkR?cK|C2Rx&$4SEDNw6b%DidXjKw8Pf<0{tT_ikYrf0rl`O6+soZT
zE9tZKd6f_S#t&Z%Dx`&~2%EF&cI)Dm|4Tl30&M7w3mK!slZ!24k&#ezET?kzU!C`w
zKf?E7o%ye6UE>}Fv$Rej(IO<zsox>j$8*=&CNJj`O}!sfH^&}*Q19<o<n*>M-)cYQ
zr2%v*5?W!(=k0WMWc~2mJ9SX#Qd_Olk6}X=^hAzf*iuktu}aC)6z4t;V1M6h&-1io
z6zp-zPJfYB@MqvyVf5b681|1%g*wC@1GyTOVX~JJq5y8xT(vriZH{euBx1X1GGypr
z-8DB$C0HN6Yz$UfuNa5``y4&lFj|~1lM@8h)Y4g6MWVEzV8(inr@tMAs<bYxyE9{M
zy%E{~55(9_5Yy^{MA}RRUBFgz33LY!eWaz|)j?d48V}qYMA_)5AGA=2sCT6<Zk$O-
zMyiqPW)g9Hvn5C{dXg+yd?~r47(dh77yvRRYG4$F6Aoa>r6SO7>7Gj7(iZ`)dD!Jx
z(rQ{5g5K>cnOV%17|g?mu1x^eHS#)MJ4VC~u#LdfC+R*xrqHe)RmYu%+TrN3g(c*P
zH4_OEe||D&&47c(s70%Tsw$(6r&9hxDe?Kg_BT?>vG%g5XMJV3Z>7L?1{BvG1k6}?
zB)_WnTG>TYT7;I%?7q@_cWgN&)l+$DS0%%Gx}zYtCR9}oH-8Mt%oQ2o26s*KR`$n3
zoDJBUegU(%?$*2=dGd6xn}6YKp6QceN4N-=+GU_vu@uNHozCv4D?G5|l#g5qFST2^
z%PSf&Sa=u*N9{WNaJO?$8}4{%xX6Xsro(m-)~!QoVB|WeZF2@wy33o!aiVq9zPa%8
zzif*(|8BbedTsCCZmaaM2V*d^410bB4|Y5HnqI|~kE=tp{oKvk)nVEXv1oM^tEY_*
zI^>~5L&XJ!TPWJo9&No>DQ+X0ct{$E=Cc+nlVxH8AZfFw&=++jv)PNuj@znos7e6v
zws$06lG4qtA_oE?CL{=vuNia#W0<^F^9#bzTx!3(<n)k|1QJTG=_}oArSfxaAC2_v
zNCVYzn||`gSm#OfReEWdXL#r%h6uUNJ{4DZx{I6-<<j@Dtobfr4}jzqoEZHHlsRXn
z_RxyN>y~SY>()Dz^aM&ceWM3Z=^^1QlJ!-(c}ci8Vwh>1Evy_W$c>tHTHB$ovP!W}
z7C1Yx%oj=?!K|XLq&6oXL`!bT4>;>+-Y6Bg^(Hl848$$(;3Um2(8zA0%NzoUgWMKT
za0c5Q%@8&lHYtxk%~G2XHZbz60S8Nu{t{KsSbL~=6QIs^?&PhmZnf1<)pM(LF)FOI
zJ*>21S^XzIXqsDNBjk$+5=91^fi6yxZg#de5g`b7Ci94!LdayNrOU~2(k4%#wUg50
zdL$h2RbesPJdW24hqJvI<slXow>4a+6q!HO44xZ1q^BC5^u?_W)x_s0xAP@?6|8fp
zJAG1LoTQlJ5dCofUh+m(u=FV_Nu!?&@BC&I-GKcy;4hS_nxCg~PH{bZ9lYZzn|_K}
z5yMX!KFM4=twT)bqMz|GlCJ>h8)CTQ#MPa0Jv0I2>D)E}Z?}%V3Ad8<BxE+PA9ACH
z%i>~N$wnw81?2kz%sZML&?7%NtnX{omC8L2f<?y3fCE+s;?DPJTW3TwzfV$iG+vr2
z$b{zjqXZduu1+}y1AfTpqUwhnSr)v!qzN1BqVze(?lpH!<6eoC6Ui#Hn&p3Hh}T3F
zh&SL2na!O;sP^%ruzH`Iv-vKw7VSkzSyxI!RKC#`<@XIh*?p~n*2Eekz~cX{x$9Ut
zdP$Xz*(pJzh?6)er$aY|eGWY~ED&j4J!DM!ZEsK>xjh+f*~!_5uCqAYkytu9;t4{g
z8w$!gD@MZ>FUJ5X*du*Sf@@ku!Po88nv`j>VEqXr!>X$qF4UdGs}yShPNBI}a+9;>
z%q+z+G9$TpGfGc#GgmqbY5WBE**h&;xa-{*6=B+)Rj9W7ig{wq!#(rzT~RqX;dGyY
zhzpVT*c4ECU9-%dTXrX0Q2=M?7vwyBWJ>h`1|zhbUT6=yh6UPVyR$p5<E}DNd^TMO
z#?GL>G_fk@L{?z$LU;&kRu+79!QHI=#Eiv@s=^uCsr0<6!lS{(q4nJr<?BSeq2vOc
z?<lAr__&Z%F`6di8@h$|H*s~cfOu1+-`PHnw8)i4?f>dnMk-c>ypJKRP}f2kv3<IV
z<s@w3u62uCs^FJl1+5m2>GMltp`y$8?jxaP8$`DXN@;(F>JU5Kmo<G}YuowgWzt+a
znxXm%fP*`eJ#!khhli3Pr3xvl@lS>$$ZKEo*WjKKJD>g*ms9*iH%j@mOUBJ+JJ8Jk
z_{?mebzfw+=jnc?!^hTl%l;IHs%S|MgP2U@Qv;}<aPthU(J%^TP01)pN`#R#GX4Qp
zAn92JB63ZY9n4Lv%1NurL<eMT4+uD8&<-_3hm#xk7O-qO@;>d~*1Nsm4Ut)Sg8D$f
zv59{w%Oe?H<W^f&<+8i+H)MT?vtn_ThARLv?`0wsAHhTs^>d65JOHmgJT4Tya|AmJ
zCO~f)^=E>qcTS>7m6OCYFz)%ZFDfUN5qH)hmvO*6&nkO~NpPx?MfUZ#L32aK1uoM6
z!`7QdHF5TF!%$RI#0Ur|2vHHyBA~J<LgG?DMMR~tMMxD9LJX+|Btl47WEZGfp+X@l
zyKEu}C<G#erIjK}Sc8&<s_e`tgpn+LFYf!fpYwcpKeRo^dXmY^HUIUuDAYJmqhe!(
zh!exv$O#n0=VQPEoO5^F8mnt9(5Cuh40&uq6$L(Eow=DXzP+DnA*|M-G@jzgjEaLI
z`loFhmOiJF!x>wq`OHYFo^Had%zP#L-f?W00!?obF=`AtW7)>G?fB6iNohaE_>4$y
z#ttu*VE~x76$o`3^4js&lZh88E;yjqOjjcUOAf{Ry(IH!f9{H3fy62GSYzm6`wV3n
zm>{%7afB~das0yaaT7U%Nsa@BSGW+Bi2g3DXUFuGX~EWl-UIe`#8_Rb^F!`IV%?X?
zd@a~EjqOlE33cMJwV%?jzss2$FDV@tO!wSbdrwDl|E;oY@&9#|r#+yz?4^^Bp^?4I
zb4|cDDu0-Yih$Kx_|`xbOn|0DooPrMZUfTB`ab5FVu!%ibzeU5T-dN*{0#x0zc;gD
zoUr256iSdMMORR0X2+5Evq}mcR(uc`$yvy^;K%$yJavnu%eM?D%cj887XtpkU}x77
z)O?KIa-JOk+2Ar0K`{^kGOWmzGA61{47Xx~rHMj=kQ3PIpw-$SNT^=&bvfG`o|(K7
zUjGI_$b<cMvIeWH0BSfjsz-Y&GAv&^^J2d>X^qOt0l+hD;RyfWES{i~GG)6~Pt@Y6
z3#wlWqyU{jStO5wN~A#QrT{FP?HJYR2rP<DEVs~@^0R}Sxegw~elUYu>97!%9@>f$
z9hJF9iwsa5o^|!(x_tmDV^ecSw9jJBTHU=(?}|^@kVpOw01i(MM<ezoKut=AK{vlI
zbx@2(@R_$gFA=hQGVdzZPx(ZDdiLw-A+Vj!tM7EZ_SyC2tJfNi;dF9gaP8=uFIOCk
z1@=VJKGm<FXj@YZ(iRNL1m`)Hl%(jR8z|JK$BmIYQVO!%hStXHo?>h;sci(8N!NFo
z$V|a*kvWis<*02lE1*oks~MaUlauX_R!ptTHx&f;jRF9Uhuz<`liAHXfa=_$E?7v|
z+e$XDpyA{YFhxB=8_xNB&y4BdL*E#bZ_=w!r?_){I#aH`c=hmPKl_w8-E>0t9?MOA
zGBUBWt}dqzyo%WNh!uys!+PnA#HFsZpw%+r>l9K6tGOffu(Q~$ofPtx>pDc+i%5Y&
zCoB5cSzWbauV9)btWzL9CN;AT`P|T`qf_tmTd#LoZf;s^$o&l^Imi1Cs;c}K$qcNp
zhfQP}CW_7b{*zPY<qttl4<PfgLPmR!rZ>f{W94%y5Mba5A93QTC&DYH6h}GDLsZv7
zir^G1NSCeENxvhKdmUfVseUq@^WJbLkCk#WTpi7=$LP7bw7)^GmZFXzCr;x>(||?$
zJ%t0U2Nc0?(3u+469^1R+tI4kte$kfCwD;|v2AT$k0goY?p!}hSo;ZtZb$3SM1D@K
zw8DLxqaG@BB^DAig0pLg4OJy~2+y#I_CF{K8IV)YYP^q-$8oM<*U<hHFv%_GbUpcS
zs{y^!<c*;@Vp2jux9KQ$LiL%la4|h4GLF*P)rr@z->~;l^`v4SOk<Udc0J2;IX}SE
z=Gh}*@{@0;Nf%V=z###sx0Y^Bt?k?+=@zP|JR7L(#4-%RdbDLh3NFM+p*q9WE|6*>
z7|b!&dQaCWjDXjpI#nIE=v*~he9SV_a_+xr)g^T`I+NOYX<#WT?-F6L(N+Jl(kkC)
z^#=7Y0O&1Usv$F!KgI_2#G(xrz$<&U^=peBDw(#Cz(L7eMVVU>!||)7lXl}(&2~VL
z%FOcw?DcAZ<zV93S21T@x!WtO(IB$NJ7K92cu^@Cf^KAO7D%%X6iSM5PL10=>~;KT
zy)dZ*jbfxVEXN4|Ob;~R3bkIRSP?x*aRkhHD|e5*S&4`N8m0eC=Sb?s)f<8&IgjR>
zZ1PH`Fz6)rxG}fEaD!_@VCnb<-5KydfFm(TkF7uthxtYh9Vvd@XH7chS)UmFX+t27
zysIhk=-rzSw&kDJzCJQ3-N1i4Vx_D|P=I(5&&6Kt0v5BE=qZfak~v%<^@nWkiVHGv
z4j>DfH7IE<w=v%nx1Db!iCiP_NS}xldKr@WWb<{;G!4p*6$HDFe6zSyGWO1Qp9)x`
zsDU16?FT4n?xWOI(Z<l_0IeEBW2hvabIoF#3+&$N0_QuJ^V-IbAPHp%SHwwOGCS7h
zV-gF-7Y3&1A<})s4Y>57X9Zg^^>ler^_45GCG@uDZA#cDcoaxHoEOILVxPW8Y9+Vi
zFRbue-vifrg>fI-;fZV;jEOBo;&A)+0DCD^TSImSetj@zci*hF&TAIW8pN9o$hBpU
zm#J#f>dli6-(zw^lw}fn%LR^*?V~%FE{#%j&{-yL1aXn|NzDcdF2)S%$xs*u3AC5g
zj$!qvuCN&=O{P5oDx&Ipv(#PBfv$f1B6bd|I;GgwyC_Hb!46U{oFAq9!jR?!KEBlt
zXwoNFfENz}bn|$=PxDhLmNqJ>Um&UAaoz}47`;@~H1<Q{CpFwuvjc(WhjTnc5jJGI
z)nti{&lJ|OB7(N4eA@#K=qjY`{Ho>n+Vk>CCK;@mQ8dFDuxV51fhiRJDRn<&z_?e)
zOUht%n|J!as5F*CMEj84-twv-JxAI2E;yw6s(*11f2fjdn0~e7$`yQ9bZEHxE7gfS
zrRcvvC?1x-1f4V>ZIWfm@+w@*L?<AHhJzLtjJ%LD<jstTas=0zzZUl7Vs+B@LN8CP
z;{=E@w@-t_?gQl=WsNx;wYH9SsJa+~ebw`S+j8CiwB=g=Y0IsZ=v&dyW$akiuwtVH
z_#(W#jLBGg1q@p|(*k;_$Ald9Y1@k*X8OP$am9?0z_u(!p1Ba_!w~z66;nQ>=JKkk
zmCN0q9u-dO{xTIwD=5c#7nesWfBOKOP#KV8HM0MFI`}P2`Ad%IiM=nVMck20XaUq8
zK-AG+3<R}bSNg-nk40!rB)f%n2#{yeS~R93vmQPbP%_WLs2D30@@R&ikpKAkByUD9
zLXvntIy9idONssy1KwsU)5=yPo6Ld!;;zLTjw0D##<5dUgo8+ph5Q`UBt-D2@@a$g
zdQ?YsoE>X{TRo<$(4-@7_C`?SrP^W8?+P)+&BjoKY_~~!PWD|Z?DlOe2V2)(dslgF
zDdN`ig3}D!WdC!8P^ZuaDu_?JaSGH%@TpX8(X@LI9kfahOJ{C*`JE}4TB%P^Y?$Qx
zN=mc7*f0Xih&qfN)-z3eTc>AFt^HI)d^%&RW3ym90PM96oC(~g`t4sOS}$kY5`%9t
zvCxU;tG4-^fBXcApD5`-rO>x6eLy)9OZu3kK+uU<bM%8F&p%l1e~-sJF7cZQ9UZa$
z=j#XSibMJ-*MDz(p_<vN`tQJhhnGwHKp45E&;<<CK$#{=atB^Wpc*`x^s`2|l`<l%
z+m6~gCDCxKLMFVR>N#aN@C{~r1H7*2tFK>GEEt5TPp%l=59&9|XOPHNSwnsA1=G5^
z$I&2TwcKeoKy<~rGR+9dpFr~0?F4)-e=UNi!&)t&M4#}cMa5QlIB8D?Xh-tVuO8_|
zoA~nPmeid(%$(kyHb=V-EIAwweCRenCY69~&7QYlej=xW7xEr<6F^T}fE#;7!5yNb
z><z%^Q?+FRJIWQI+j?}(<4aEXo1`dqBFk_542RiQCk!Gf!##uS6V<^H>c*c6q7U#Y
znKnLQ>YH;*M)<fGS|m{EqN~eP#F>aO01ND-B(*3Ehk$@2M@(*gtuR2ErRVB$+i2>T
zL-0_nNT74-32_~^o*?lv?#nTCh&Z2k>*{lPn#-%^`ka~5{hydha*&nc{3t3dSapst
zk6vS&1TY6A-BvrZ<yj7dZLe<#N$^)sV0})Jk-*+A{{VcObNkm)Tf6#X_L+*{$am$@
zmS-G3EdBHK%&r4#m1tm=(INm!Z(61F7Hsn->iH(9F6|azgrZp%@iK!al(#P1+>*np
zH&W_Foc46jwq^s?Kx^9Fe(OB9*8Cj<7B{{58_XA@_7Ccu9{pWK_A%%?Vz|2fM(+1K
zrwY{1SH8n;2~v@B>{W#5wbTQUCs<Qcj{@}@VYM=10vZcj5m;&5?l7?Yq1Vdn`wwO}
ztv=Yj{cs5&`9#O<wi`!(J=bFiPS%%Q;7K^j41lj6manVWa7b)GegnSV8Zd{M#tW^P
zhQz~DaB-Pfkfbwy2yr&6j%RgEQp<DaG~c=DP#(?B75yepXLX+&v&R#&e^!-j5cO=P
z(81H_1uHfOtus(h0^6*B08IRb6BpGnywkmG?319Z3xo!nlxI^O8YldV33eWNB=Xe~
zg5<&}LO|den<3bFQ&6h1EE-Uy1+{_}3osyQxrh}e`6M<1yIH;Tg*jd6`6-SX#?JRl
zk>d^lKmbl+^|1lbs?LB*?uXjXYIMM!gqPEpE_deZ@#dKonBPNO)AJc?O99BR1PrF{
zmyAr=fj`MEBHX^+aQksFVd%vuVdXX>U?a|ZWMp(~&uvN8?W{gWGLcB$@iW+DZ9QF@
z`dnFdliq@-2QI{6KzfKz;0PbxHr$Kggn7SkC!#ZxLTCp^f_>B<4Q95D%1nWU0YPs~
zzHKcfos&FvzHiYL?c_Fhx@ye|=COZ~?}kOG7wI<@sU?6@k|l5Dj}=Np1{B^iyFrxh
zFG9syqt&T6d9F1hU7$sE2!Fyq^Awp8cgD*sq&I>M4dLMw<}=1mgW+Sx0IULyvIyDR
zP)}jGRI81=5AGGXSkHV=qF?__Srz~SW$i)>xQVJH3eE-mWlv$|ELdR0Ys#oiymhhH
zti~AW2W3ZL-4uU>VUus9L!Q7QXDUe4b1S1sa}OvFc8NFmE+s~FDk-|b?kfiv9-@+f
z5iAa*$OL(<JsK$X<(R~=O$}c|X>GqEQQWL8Q#lUJ^<aVURb-I?I7c`y-1oRKmud>9
zEoYt+`RksabLE$&#Hm&RKPbrp{s%lk&3#pD>O<(lJWsrwO*5YM)9EA2=)xK7=uGSQ
zRyh2_UCWtf186xtvm<RmXUfiDF}COh3)UXKOSLqAUMDpKwEDM4z1kACsYuh|>NuG(
zfU_Cyg;X=CM+*>63&yf{3A+iYZXMrQ6Yt(<f8q(z=E2Bx&iS&dzdSe*9uQ5if8n+%
z^_0;cSK}TjDI7V%zUl<V=CFkXLES>z40bK$Haa<r!~6jtFi7@9`D2nvN=5UI5hUsq
zyauCIGi2=C^b(rQ`6s2^Zz}60msExy1;W#*zOF@tOyIfo6P1YggK42{D?XX7)@({S
zb{qz!B@k=z^ys6yi%?q$y}<y1T;g(*x4x><<dP1N_&aHVDIMA5*>IzPNGKyL>(oo?
zhSw|0zzDD<pM$bT5v3axy#nnyndviU*yM`5(*82^)dPN2a~H{2exuL^o@$nDK-{Pz
zCwKoVU#)Y)>;N&zPk-CvT~TtMsFWekjQ4N;<8k@}74#M<oEMC_2$4lHMz@c8RaC|a
zq^CvlCL82;?b4GZoe5M8FfHQxJU?akBJE-?FlCyG{B%D`!zB;<BX7=vRFq0FTJ=EN
zp7XzDJ;(xabYUi5O<_ni1yS}Y4X9CZ8LB~s>b1ZDj|CY4ik!GN47r)x#@GU;>ZVY3
zDw{lE5ORH8v>P6HnU!7{$K%Ic4zwO3`70-#uc=|isC)%ITrCnVbkn4_m|NqM^_K54
z4Lmymh2DZ{X{Zd7=5xum$y6iVd+bw$0!rQR$-&g<mmQsL4Wy>L=GRxZw)VK&-OhIS
zz#azi$NGuttc6S~6eOlN+IGboMomuwplje9A$k%plY}DLEDD2kwoFMb&5T<>ItgON
z))`C3?@DvsVbv7tba&ifb%4dK=ra5V-z%rTy#4zPx~E5Gr~zuC7F#;d`IN%vCtCRj
zI2ud~{%~u)a=(4>&=xSfarPHhYs=7xNQ~Zs_!*p2{yEIo^9mG^7>-NZuwAIjcc^ST
z`(V5G8*C{$hQ3LGrs^Z65J!~R3J`AeH&~R+K-i?_0`=TwTNIB?`Iz6oar0Tj?>Ij0
zdHEH;@%O&Lc8?Z2aC7cIHnInn^m8jue);qXK-_E<o4+Ey(Dbq}V)hp7@wtVz<DuA{
z)@LJ7`v~{;&lSL~J=`YeRzow`pfhg4`uF=5Wa^QerDsGPAK&-2V}zXaj-v45qC$S%
z^W~q=!xphJ6eundX`7)=t{@2zM%e~J`r64zaw2=b2#@k=DGth67hmYp9#A~x6Oiz-
z&}Jwrt8dT6j<mjrLxF*}l@vQcrSPRkiDKfq>Z-PvpwQ{N2{L;rH4@4OO2tI~O?LB5
zqU!a|5aSZmoL-LaC^uWmij4wM_C4X^dtDn+g<$>fd)l|EAmL9?FX+O28qmjTBaeNR
z7$DITd1~ij=QwJF^e0+3MjeRAhf~(RdnmS0qcA40z&U$MkWW#~&MUwi_+fNJ$@rVo
zTDU7N+l_94-tF%?8yla1NBOzMqx>n5BZy@Gt5^NW+CVk-QQ?`jm3es;8+Pan)%7~>
zu#rH|95<c5-;tVHejMFVBGdMlL?U3qjvSFHHY5~Maz&o8OCO9TJnvdLM2Y7gmLar`
z1sCK|IS|Z59+ynoj@$4)rc~NHn`PvR$eX7U!cT|zH}b5A26o@f4_w8C|0e_^qw;F{
zjm#JTy@x>CFsmgR6WsM%^BP)iuO8)HK|aG4C$f(-Nm?DNV*L9>K$Y`iFPknlGa-*y
zqqp#<u>e#T?5XRHn;lp}ZyFU$*Z6(tj&c}LmAHb-4&cm!4|Y@Re&5LBh&;fm)(#tQ
zH1UNX81Zm+!>5y=>9Mv>aZJq@MHguFN@RP!U{g9?|091vdBhRz+H4&w8B|jIJ*k3>
z$uj`woet0dAn(LiW69O(Q($mM-2hBo@6u~&DR7r4D|TIcP>xA#vpG<G5!B=<nkE+1
zr;e#7J{GH0o)UA~Or=rDW<w5#rESagIX`-M9`x!8R+c}wpo*-D;<sGK7*g~_&N6Kk
z2@jz|!>y43ca0JW?yVI1p`q-=FvN<1n!LTt_qhN3y$?ap_n9-H#4C4ZrtC>gZK~R_
z%h`Xj;?%-2w3TE%|2GjWf>tcvPN9c<hXs!G1xRZ%3WAZ62>2sSuWMqNXI2RNAS!N1
zln}l3giuPlc6uC;{ujh%=Rf;2@kqvTW0wZ}Uo;H(H)fyh=l`j)@>>23sAOW1cF0uR
z!*xrgp+IoRWUGi5l#$HyF#4|SV)58C-@Ke;m}fm#li&Z*;L<er0*g7Y*obWM<a?9{
z20SO!+cYHPvHn&<|D7b;E)}BIi~<^@A!eTs2vtd9i)4B*Foi+%ec)$ar@)iZDG)Af
z0H#NWs*q5wr{3dr!b$%5S~2LUr*GHo`%9^5$Q($UpS%}?Zl*)-s3gS(1S~_=e3RF*
ztwHAvXmA$20DX<IqU5NX`qd;|VAjLB@ia6gzTI!@(A>oDXrmv&&q%R~w)E*IUkjQ)
zz*5tXO1|!S9Fz$+SJ{+HpzVwI2Nk(~D;{#@jB+|KdQfr7GfK6%>NVWe#?X*CmW*)M
z)c{XAu7HVd2cny{D{=(S#Q#+Q91isiV~aaYf4@0<K;x&BJvkpgD=p!XBmS##ni>i&
zHC<j=%?6S)x@{3)W@IVi7$Cd9db~)SpJ~lMR0A`T7KwPxAY0A-+2;l)`j)zhXKb^o
zcf2Gt)D`&ekHU2&2PjR_g|T!L6(vL=dpc+DSj4gSKSizqduDr3DkV&KFOo27ra(4m
z!gru*&YG-ET-Ml^dwJO6CKI>^JiNfZ6X<H|!m}EAd;s9FC`$Gy#pX~X5Zo4EKyw<+
zH|fOegA##EdzVP39&%};Z(_TZdY!U)EldvtD>5dkm99+5_{v?$=nD;yH-adtIpd>K
ze)EC+!Ak#}-lq*A2WD@uz(F@V``?U;9V-#3a#2Z~wTf-v;Nx2}RfEtdpz)y3%?SZA
zJOJq6mIN?tuI7A$uC+xKJ5~1Z{<8kK^v|62d_n0IkP;HQ2bTuh+n%8Rbe0*~LZ9Ez
zp=b2#j5PmNyYHyy(K?{ANV1stb8!rK<6&b_@vI)rPLY0-pB1jLdmXP$&Ahf`s{WEI
zsd!p9=h3_Ttp4eShrTg%Wv23C=d8B~rA|Gux)!|NqfFsBGhtM`3~1$0RiUIbEA<n;
zv(`Q8lx%T!LKrE+xyft%s2<O~e<7rz>axKO?y-dMYkDzQJ_=yo+|(v>u!(Hzf+;@(
z=yMXY345y79{ZFa$vL0$bTY@a&_mB7vtY_&%h<?Nj^AT{^4cs$$tbRc5J*_#G1S|>
z=`?5}fQ$#VS&6CzTgY@Q6zjQ|*MOB6c~8L9?Wo>}m`>b%7<4;Wpe;M}MCOlJh(4gt
z!h+xKqcokbiUeDN^9|#oU3%DxH#q{wsBE5<+^+vm6{#tU#j0V|y?j|0_wMbx^(2y+
z+0~5kp`oF1>(p^RfBmD~aqD;gkh<;K4;e=W0b%OL3#xD)sFkhcd5X12wPJGsIKDT7
z42^+{iEGpeqzmGlh8gX7sLRkiBdP#EMX?Fh3OoK}WM_I<nK%li@t*HPLAQEbsw!LC
zrYo`2PR}S%AADwiIEEewhz0?mZRq4$BndWSg{4EffV2^jB-?chwgn{oJFsPEw@7ZM
zei*AwJuxVw!{p;b_WtE3g73H3a4HD2?R~okm$Xv?2hDGCnBl6g2CB&BK(IRJdnH98
zT?nw>Nwl@dDh9$I`8nSX%1;oF0OWd?7?A!qaK-9&0{8k}z#0s)x<j=Diu2=B*W(N#
zxWl%G@j*G6S;KlBg>@@=X(vj3`0v}470(uxWg)Z<Y%TT;YBLDl!|3|Y2~6x=%$k0n
z1Dh=g?#Ecm4ns@D@dTYDp<8P6VW@MKP)bSbG}P^n%QY~<H8msE@aFjqq@Aa&Udt{<
z?|rDA=6Hkj2Ky3Bhb-yB47w6#1LC6Cybj#ts!=3RM2=$~!^R4r2k7{^$dH5p5&`N2
zHh$X(e3N9XXg%wPFZM^}MbCm8@>47%*Kpr_%nRs+xNmmhAKPnV=+}WyWeL$PT#;Gf
z<sIB`zC0kjcsj?gh`3ggS4J4_JwuGTO7{=nQ8%3BnbqG#4kzB)`s<Ywdw%WK@0hJn
zR#@TzC1x$fT~s{>gE8Du$S~omh^&IBNSftERBfQhGIjCyFwSO*dn;$VjQEriagulS
z#*I|&>HY%;7NtkJ4!J~825LIIRQ}OZ`gicZW1#8JiVc>ap*z3__t1fJ9SuNi03l7k
zLFA<J(XAiI?Oy?g3LhgQsK&FLpydo%fY>d$VLoqy=t|?Zc>r)z0Faj_CY>E*y3OL8
zphbR2c0@tl)1oUxpFdSgz^6I`x}C3@q+OobY_9kl3+7@02L7T?WpIhJ+gi%Q4nqtQ
z?=MbMN4G@0yD?nYXGKQ^HE6dr?|o$>$;!FhzVxks)&tOa%N<TUNqze>>YuMI;DQxq
zvQxZyYqAp63`v{F`~DrwoB>z>#Rk|Sg(>wtu`}-DY>0)GulWjJt*!2L-7BJZfcKDE
zvhkt2SvEhd2lnIH;%aU=?$|;yb`zKw>2zIu73GTg+JV^w^yJLQRRx*v9`N5y`0x%~
zd;Kb7O916+#C`v7Zxhx4_<N63h2ApcV>|m=x`(PM{{v%A`zx|O6I4*KK=25oGfA^R
zBH(pht^D(ipn4_P*rDR*S-x6rk=W#rIkvlDdcfNH<SH|3r+${hN!7tHsez%Is9;2i
z3i8ofFzSlWyh#@pqF=HZFF9QNXz{WL%#kjO7f_T;F)Ecxo`|CB5>Wxd?n|9`=+h&S
znuD54@6B0r^QEpIvwa4Z5(n;wb&+3qO+EX3!7eLbdBs2q;H7_~fh8AM@+f0;0ionP
zDub@OfYFp4fqGh_=*b*abL-y#WP_QR$oH*|4>KJL3ZZI?2|I_@r4@`gijO?>eqFEl
z;PTDv+RHjh1$a@8fJ(bT0O6{4&|6M4tIEvee}rKD0fVR(C~$ymzD0HgXbh$Cf@>+|
zZ4JW-Om%uI-<Xl0>8jE?v?b_vUB1oGM|ji2(cpT^ahv2U-c%p=muw-rt4PUVN5|Ce
ziC^qq^_(kP6Iil+$JcK_Jt#_uN9=Q34kEVPgR-;oRC~`->hUy3o)`uL<T%>?$raDL
zWcDe82J^BzqHaqZ^r^gp(BRPB`+%sg?(*Y6^#M^>eZB&ou+@yAfx$})4r~!}0B6Hr
zoH_e+0+obSInb<036;3PVFE3-#nlN18h-nX-yS3>yo%!g<D>Ad^sSU%+NrxX8LIW}
zN^`AA6nN!$FA>mQ35MNfZ?GZuSa3EUQ4i{EPPTWKq9{x3^H%9rlyoNQo}r=Z29}_P
zE3e{zA8d$<TI@gnR1#le_O(e^doV4F5TBzYa{xahhu#t?3zUW`hB!4zbGp!1VN%kn
zRJ24J9)AquL?#K;tL4Fl7DLpFuo8tQ>dau(Bk|8Cm;H9Ud<Ero6hP&zcB>lgv@YjC
z(gAw?d<gqY1g6@5bBwYy@9OIH$#zNAvn3_7M`0tW+iaGAkNpX07iGSXH~!_ulBdlX
zZqh|xmpVU|knQh`pYO3mHN;@SmVqQdEYSA=XC2wEI{Oz`_o@lWNo?IB#b385z!I0k
zt=5^zNo=Bvy><>%TlZ|Gw-UwbJEuIR%nM3`SBmlzSN7)K%yIqgwytg8j8<A2Xx1Ll
z#rszATK&eHn|RrV0s6Ng^yhCtoFz%>NN)+H9YQ7)Y6cKdvC)zswIg8EhB!AkD3cbf
zDs?R!O1Up{j(`>})&OsBO05gr{OkcC0$7H*CrywuGm^>(4TgDz6xxD9W7`7NLTuaz
zYQ8f{*n%D;)wUhGm_i-{jn8-CXhk>}Zvh^MLX81yb}7`3aG*<ayd=7R@rcZ5tpJFs
z#YR>YRCrVJxuWPS&}$j}$XiPP<>OB}bnVKUWQ+O0*V!lIPu2{HUCk$s2bq0p_(NqG
zr!X=_jDa`rQ5ZnJP`Us=@a-NL(Zwq^YDoPlNfL#;Mq#TM#_Wai?+ZyT;(3;6io`a0
zcExwxd(zJka*Lx{LKCev?gGEAJ^aKf`~5<>j@y>ti<L$B1=VND{H9iJJi6*o_c%xy
z&img&ktPGjT9q!WXa-?DE{O7VqCP1MKU%$7A#xIF_CbD|2CM<R=2-Tnc(Hj(h0Hv+
zZR*K%1CBrCx3e~vn@O0Mi$rZ1`w&!pOHw_1bk5q;DsFyUrm|vz+y`gpBK3GL7-;l(
zfx1+t*&}%XH8&O`L@#!q%o)~O@OD!U^7+HY(jlXALW=+`J2zl<ym+ngetL>rPI&lN
zz>dCl`i)uhEh<pCVm%22yK)$Oj+O+Q$x+jiTmr82)*?<?zA^b;b&1R<*OLkUcY@4Q
zZwg~D7-BATHEGZC%wL<|>WbMm%9NVQO?+(rvMDKZEN|bOuPnvGpB0;*BDn=XgE=W$
zxPa`n?F0xGFf6+J%X|-a+#2b+RmI_=)Pq-Y+l#%X#}C)@*czg=nYr)zQB0$AOxQ31
zQyxZQPA-ugs+xIQR3}PgThbJ2S0@;V3B47a1}31D)w4+x9DYQLVh?iPwxbd=BihqY
zVQ2+)rch6bGS?&ezVU5wW@_zr;XMiSiyS2+#C2193Bj|@r&`k6&@{NSxi;QKNq%~j
zef&v~OgjijxknLQE@+iqGeMiXF&vvrM};pW?T6JS)H_}ZP%;a`gw$W8?sj2N%!1q!
zZ@g;M3#pCJi6_fnU)`}HYq;*teqojMC5FEK|436uV&fH?Wxhy4aZd%JA_{Dy?+B9A
z_Y<;xs^euEVzTB`9sjq3IA52Np6F*&5koHoj>J2JP~*Y}6;o>mncdqmD34=y0tzJ^
zxC~TQRAY9^tdLlti|g4tX3UxD?G)QKzioA#*9mKCaieaPQ+0=Y-L{^4d1kA+(X)fM
zFO*m*%kL;arxyMxQ))%~i=hIb{NU!jJYPQ1qaoXf+z|nSv_+c2fO@<Zs!Fdy^hKXy
zixKx0-N^hTv8zd2MBVs){N^c-3zVEs!<R{>mj|D|0@nqc1e#s7+?2i%6>0$2ue#lf
z-f|WjFoPcjsHxe}C@7oT@HyQIs{>Rc#;xH>P8#d+Qz&`>SgbNR8*o6{B0iwxuh8d@
z1BMosZk1)e7;6vk_un!60MA#7E|&tc<uRHz5T&!GY9ZFJv%~?`O|uVxaz#A}&HBDb
z_8Yn;vj>Hcukh?qMK}tP%YW3IUJZ~1C0C<EpAd3x=CoZ3&c0w%MJ}p6ILg+URQ}cl
zPWf~2E=s}hqUADXgUkX^7G{o07K96N_S<2nVbDe=v&h<%29yp`;0b#qiQIH4mfRd#
z=H7=TlMQ~kPudHSuWj{qZ~eTdb(i^Zla+ztCAd*P$1){aB^3~l<J+mA?J$S-Cc&W+
z3wRw1HgST+fjS!38`SN`Tzh5O<<l!+yWhFGaT`pMnd)R*->iiwQNN}rSZ}BXlV|mk
zukLv<V=Ma)l`pyqwG-fyKW8g8W{Vhccy+cqqz?F-7{q152`RV}Dy{|ryY(u#>@Acp
z4p{fzuo>K)#avfa=YH9K|7XFTmwd<m3Z$0@=M)XN0UJJIv6WA$>g;F0pA>$ff9D8*
z_>M42vKNkC&Jg#7P0H|5!iCfZ^IQ?GN5i<nrQDYiaejzuSq4z+4(-A$oSK>QMGl))
zPZ8!zrhg#3SAlQ}wbkGOV3tX&8P0bVYzOFav$_m}Z1<nQRenDV;MYh=`-&h%u?w3h
zhSl2@MgGL1Nhs)c4n3Z^elcpB6{p_#eFJkj`)j*HQB$d^$UrGl@W$dEW~V$KbBwBu
z$VCp=GlMdB=$Lqz%eZH#*UwsP%sx4=1g4Yu2m53Mu*)6r(Dm@_C)nm>q>)LbodHpS
zw<W*)UAOGP+xl1u%W*JOY<>g>e0p5`0UUxgdGgAt!iE>MuO56p+dNRhGdGN)6x~@I
z%@q-?hO{iVANY8~-?;IIk10og0+MKwX>eu)G7khSSk|7CGq5417NgB$qVomPT_Z^7
z2`I3IoRSTYYO*~I`M>oO^_G*bA+gar>~=`(@<HRhA-~EVd#gC8?pK0O=w$Y=hmQ!C
zT=fR~3s9Ll%!#8f`ZK^|gkTCtPQSlZk{KbL;EVo29>JjsP@_YZij5=@Cl<4fH-V^&
z{%l6cY!U0w(iyv|k}9g%P?#XqP8GQLxrmQ}@v=Z;i9)lXNJy%lePG0>=G2JMWW5Fe
zE_bKFz3@)eMbNcsI3Xp9`)1N>;24}Q_*d!O%NXn*K^$Q{LmSBS;Vooaaf<CPjmlha
zfe>iM3A}2<0l#7dp-Z+Rk<Es<1=Be+^!kU3yLJLZx-r|i5v-c;-qJ{DjiEbZ;jQFU
z`jn=i&O)(f8Y`RGr}C`^0Ttfb&p@s|Q?c<I%mcqiOpo=`8F)DHIdL!I02>KEW<0H!
zvdc(<>YaHCP_^%1L7mA9^C6CmHeW-FI6viV{7`r$c)?B$%>(qGSv?EtNz(G>?SV#A
z=ReDwJi%=9UZ|L%Fth;W(bw%@<f%J{g+WgXWSMbPUu4-N<~!LB$kId}zI_JzDteb&
zMY%hwe7)J}QGs`C8PTV9Do5whj)sKE1X{mjnE(4rUZwu*?I(tJLZ#NUzATSn-E4*u
z#+vWrbHc29aImM9V*sRLNNY$3mUXqdo)iLZ-06Oo0~skhg5S+P-|z%w33VpeyHEJu
z7~?i?f`&L^!Itr&wya3qM5}0LzoC%+{tY2j`D5q$E2|a)U5LOE>Q&H_tD7`jtP=d4
z0+beg-6i4jCrnq%i$g5nA++5p8hyH^anPEC`w@^Xaq5;XyqjkKG&B!{>(5kf*2kIZ
zn|cMjZfty=V;V)I{F6h_vATT$r4Qzx*k@Q|calt(0>a*Y`weiENcCRxcl8~3fTq;6
z$B|(Z7dF(Bn%!z>)k_Vriq_@oC9sy>l?7Bz=F}%FFby<Yab7!liyz!w1}m$sKlpl?
zIjE_=Q)Ovk!d7NzB%%X@TTmS&HESx`frbjrXl8udz#@MA40cPi2?4nAET+5v7&DUY
z)~08X6sE4_GjyQB>~sDs!H32w=q`2JWRvtG?^%w^pD|cdjxZG*d3+-lF^*_K0Z`R)
z1~#yZbI)%h(5{z)f<%81tYIhZjm0FBHvU2);3=RrrdD{<d>X4b*k?~pV65!utpc-0
z`HbiQD!+yOYG5b3*418R(OI&(AZ5u+;T}l<B7odQ5wp=^pl-<#FLUYI)Wh*@<MznI
zVoDM>$MF6{)9x9r;hurwKBl_bsex*iJ{dKg^Ki1JxQs+LtU6HKq&3>^z!ai8hU0*3
z=UL?bDsg(_g6MMwHA<c?!OmqOCuPRflme-#)OijMQVt(K5*huk(g^K?L?7UmOC2TE
zH6QLAQ}md>QAg_lS}j+oZf4zMATt5TxJpfzS2wl1U~(+=qNv+!Vcsam>%hYcLssRc
zPK`OHcm7Eny<vG~hnC$guRlN^Oa@WyCir<VY`WBt)?uh4|81Ugm7a=c-j0WeZGML`
zTMdsOrZ&}TW0N3TP{HgVB`5LWL@ADIXvU0=9BWgU4QD*QQ_@w4>lX2feO!xJa|uIb
zWlFaNkO!F0Ms*69g4v6(iG<AK{N%P;el0ONx++mE&AR}!zAD<!Rd4KgU9;i7MjrLh
z8o#a3AD58Ul?m<;<Em{=!eE8ok3Q|Zse1CpHA?*;o_f$*+8J8_4soPh6gUe%2S*dD
zI7p375=P>w4!zC0Wty*sj3D`PQiY<Yf^gf=s6MyV?|=(=`$%Wyk-@BC_tgGR9loX)
zlFq-75`j!Vm~yuSfPf}+OJ>xeXK#toqbEBh`bf6amJ%^xn+!a5i4$(=FNwCg5e<On
zv5f)%O}T|KOsxGep>&`1UsO*Z&4*!?PP<l(wTOD^r=Xyz=;!<yz2mB1)c=oa?uv>`
z9o*$Ij0sV&UZz}z^e8r@!4sVdvs~`b3rc1OV_nIxKY|zg-e~#wV!)cb4i}8s06WSP
z?}vsGjm#fMh+QKm&c6D(IAxvgSm`<z^B;sWg)V%VZwu~9#uR-mMjfwsJ8mZboox*9
z6;g3n7Fye6Fa)z3$!?2ms;d;?TpHJZ>XRKR8Krzbb}mD)l|Gwy@~iu>&XoIwm+@yF
zj4!HuYkh)pL{7lAZRoWaGa&fTB|1jh`?Vdr0ep;!n4DO#G!s?cw0WV;@H^Q2vA9xi
z%!gUi%(JLsK3+2To^R$f-gAjJUtD{qpuU;;_<;!IP{u}j3vc}35Y<dn=?4r7&Pd&Z
z>wT(X3xYj?rh>J@C21@Fw`G1f>+fNOUeiMn^`&2s?t`<#de#FE{#@1z%i>vO{Ouis
z&8H*Z1GDKFarN9OX(a700n;&ac7&m_N1gzVIvtobA-?cgU)pkqogft}+5_R+NN3$r
z%zs6^D_5b%Y6wkT?OY$T(oSNaiA%pk3cL{QH>3`jT`OY>lqq5>A=2w;T!t2A_#g0!
z)l#oP^`p(akJStb-L@qTZ`A$a<DGbVc0EnsN*TdQeE`;5MuNX8HfBn}exSvPss-6{
z{d8;PzlQ-#ITl6JMGCGAu%Z}XpL>*jH9{N)C#6^w^PXj18N7kSic76rot^qcFMGwV
z8>2p0_(dI?i9W5e%=rKBIzOILY+NlQv|wO&=Pr4ZD~Wk1%42YwY<gP8^^j9g*P9&2
z!R2J?NqeIwGql}9VFhB6yV~Za33VJE&S34Sd^)A)l&Aei!}&~N$%iWd8nRNV+QEVT
z#xkqr`aPW%GOKYgz4#OvgQ);V%AfY3c|Z8CAC2#)D}S~JA?T)OCYk}E@CC62w>y#u
z0A%1FC>@Cv@!0N!!Vl~_z4ifxZa-z-u&y*${AFHQW%a??E%{vtFukk*jKOMQwtU;?
zcC5_aPYZm{;TY^D`i*MDoYB6p9^AjH%?H81PY25L!|>=}4pWdYCLB(st)uASw*WBY
zDTv>79>EnNcHoDWWqZAPjU<)uL6J}2TVIY3;wNT`k0rvlc(OyHS4(;O?QN9hJLzo~
zSARpH3vGmhXqAElUxDuV0tjco)O`-zOEyvlVHFz#rDtd(*@D{Z^lfD9&1&RqQU+$T
z%q$o0ragu6?Lrz)f)+L^d=F+<7Bu-X2=vXZXXIrCesYderu)Dgr-r{K;W+l0Yp7!L
z?{Em?+4M3*Up4q7>hG^$Hl3W;?*=8CdmYfztz%{d&4)+*hFr-c7rmJ@9x(BAO6@bg
z?|t@D3^qoPiQQ)JEIldv1?d5H&Ng<K$Kr(ythQpe>?inqu4u%<jEyZpGR63`rA$3y
zmYsH8L3G))&Wb~ENu}?J;uFzj!MgXoo!3Oz4u_h)Kcf2E1=W9t{xc?Cm2>%5$!h_z
zE$8MN0{7xy(KXB!orHp*he&2C%?egczR@4nWoG9a;rANYUE@sC$=(m%tw*~Ley#;V
zaJiS72n)t_wXC=^Ii{40O7;stU=$K0v8oXx+c{i0QEzj4d2sWVL2Te$XlrDCQPGGX
z*id(<noe-Li`fP+%MN$K*VNmYmqmyw>Auj?pd#0-a$v=<zMOFQtwit9N460CkqE*i
z{Uxw7^8^<Oc$Qi{62pG>p{GIPJNgBZ^KwRbATP}9aM$S<Bu_u&vdEWwWgw@&RW0iF
zfOQ`60%vfE$V2nP4bDsE6<^MT%-?wQ2D_0XTyWb=i3Bnf?NDaBr;kp0C{Xf{yn=Mn
z3n&@Uhu@N-&h#w-SkHEIR=26^;6Je}H3M7k*S(9lbdL_c*woi48tsxZzrT<-rw8-{
zY5&^{uijHRko1T<ND1YRgHkoFRKe9#O=TMBxAE1NJ2{&i=2OJ#=AGXC7KU&2=T81r
z#r)u;mU}F*mcwE-vj|s1*M4L*{cXHA!9WQ+%wN?t8v_O%tsk5fo4dis{o)ghR%ffw
zfv(jk)(3eko*@DUx5!U|c06zo2J6AGNc`&NyY1(mk~4;{C&(LJpaqevSr7IouJ@Tw
zGKpmyuJ|sMQvw}rl+eTJO7v`w%)m(0gQ7$Mt}Lt}!#<hh>m%_ZbSp|@rn_M3ww*tb
zwu{p{FKixW-F_LTQbx3W;mto4@!apu^6()aoU_&ZuRm;6`8NFj-UP)z9O2&#aF0Kc
zk$om<=3!=f6YX|(if%of`{FZ;jr+sp7C#JkcH%xnI0KHvE|OEH%TTqI`o;wh-dxpg
zCQ$hI-5d3)IQx7pMG5<=iTnfb%qW;{Hh>N97ZX>(_0n!5T<=o3ny;txkX4@3xQpwl
zbAw@BlT`;;>X?-wZ&LMvDq#-))A*{SUHa%Ym2W#ix^=cU7Wo3O;9R$u2&4gMU2SBk
zJMdghHnSqx32^j{lj9mZ@*;gxUAg*me0|blx!m2oi5KR7OP=Q+Q7X7H=F@KdfeVD|
zqF|HOd>vQ-JdqH~4uxK?y+649TM>7BFWXh*rX92rkxaD~n*m`pb5gh&+P8O!NbI)o
z>}RQYU$1N8EvezsTuS#)0uxV<K8V3)Wg?aWuHTM&@Q@=Fy@m(lkN5oqhg3>$P<psN
z)v3GsEBs-d67ZmaFyPwfL3-<+Ru-z2`2{r?mWVSor|mG0ZiO0WJdPF{{4)P`eTX&j
zo4FG9Y3A4%cyD0*>?x^V5N&@ildKt3kFNFX7|TsZ<9P>I>E==CwxXV7mV@1$3hVXe
zX2v<(OSQ~_14R_?IWmbf|75@Yp+95L6RQ8KTX^&qWngE!05|}<>DPt;f>i$$FeRF=
z5u1fGqYrnUvl~vfM(HE@$K(+nHW!Wqg2XqVRrb}L{k1y8W4#CAAB~;IQL7K*ceaJ7
zGD5MwPx|AGogj(n;O_<bRYEF$(CzZ)Q#N{uMIr|fCMEX~XOYWXAlGyF_E+B^pGsi5
z?I=d6f0(wrQdggCx2~}w=<B(a+a*!tBdXu7{EvmN{C_T(kA+<4R8GQp+167MHK;x{
z%-5tXe>-e4$B>#&8t#VXIVIjRdODn^M6|w4y<~dDoK+aS<^4!70REM{zv4A*7rw-n
zMAU_LlR`JWcsuz9J^Omct#&;}%{{k%NZWC%<Ec@GmHtHy-Hpkq-#ssFjg5`jr?N_>
z6G9-$M4gd0VgoCQXM33>OE1`YwmmRPOv1VG4pb~zX!sF0n(XkxspZJICANld@UV@Z
zFRLy$&_PzOIp&3H2~;a$AL@uf|7ER28wR<sAzv37z6YG<fqF|wx>&GzlD4mJVzAko
z*f-_3yZ@$jleKlv23ogZo6J+>8*m`pG%EM<AlnjzHz(L6X-PZTFNm*rSWMIl8{(&@
zSGFqAE7XC?mJJ{<(9ra@E6eeUEpF>X^c#J!wzJGgZ?CRcjk=R%HUXv&C-kY;+ut*^
zV&!!%Hsp*sAW9MsL|ZW6y4o??z%dTgo`Slp6cK835JtPNaIjg8xKKzTpXMz(99k0S
zu1YDXvT@=j!mL$S6wYIi?Ix}y`@puz;aVE(A@+%K0F^GXepf&b4?UtP2EpkH9t!MC
zvUhl{c#ma<)ISgMu_>yg_)7>;)#|~^D*=x_m5FBZ+{D=U#qP5cr#P?TTq^fQpK{G1
zVODS(D*tJ$$#FTu_cAE>3AO0*;K-+p(?#jVsXqpNOm+0kIQ`))`xm3{sxk`8O~0!s
zj9b6wg6bC)puM>aJYGYe(p!E6kFd#B4;^E#Rd9uBDK8E0QKlYYoQ0|qO1eSHf5Xq7
zQ<J*2lp>ZbhxuMyu*BJ4dO|2ze=1t^Vf_d}_ZG#Id+WV-Lr|m-KZcI?^r#yi8n*GQ
z>-F;<KVe<@p=jXHdz>%sic_B(DRj;AKDRaSv39G&<<5I<{yBa5_k*fPm0~z@Z@Q?O
z&y_F$%E2n#@;D@km7bCX_gNXJ{_uj;4{%&g{mpxjoKBa1t90`Y(<lSmbG(~B#l357
zeYf81=G;%I<Kz28=^Do|l>bHO|2RX(d$MgsAAp>nrO-F@Os|!%B@Pa32h8#8@%=+q
z^6xvkeuT~Dv&B=3u7|(2=_N2Vd}nNZZm0VP6nec6w!G3sDE8)$;Mlk8ptcxvAqVor
zZ$NMW*5a}-_SFrJNMvKh<?0qd%wt*HeYmqN(k8FUdun_?MCQ6_0tI_R<C?mGxvHy7
zAn8tZDI(BzLF2U{_owX)Ul)%A^L@Kn^1P<D<7i!aOKtOZXgme<rGbFuovzDW*?Yg7
z(sfz>#9E*Ww(XCuUM)q+aWCYB&E|+trx$EISH!lp`&1qXbOVD7cd!PmkA_suEt;X6
z`*%IIlH0r;S3-e@8y`yraST+FExYJ9r>x~_PQ!bk<yh)5vDw<C=)+x?qP5y|uv_d+
z)@HpfwEjn{F1NzxL_~yoRmqK?n&M1zlf}T2G(ss13!Ox%BN1FWbOt+;Zhs79(2X<n
z4cFkkFB{CW{fnxq#b*A#Lwg5VbLYHTlsH4IGmioW!d<FuRwRy|uk$@FTPX{HZi~rX
znVA@c7<taQRuRYbdaav?Z}^-y=q(fzufavqu}g#Y=;~=KGosaPeXyP&fu+_(n3rM8
z1r)coW+SNmQ&C}e;GJ;M9NnicFvr#Qa&z4uDzd7{|7!OAtMs#*GOz^!01&skY;7UX
ztE0E%t3xG8VbLnB3QeF0SVD>5V)T2Njq49AcIzJR4ND_BSUC5G&76M5s^KxEF2rLl
zl!?UgZDL19B?TBL3t@pe<+j^sf#f6{KdEPm)D2IRq}p2(#Yz3MxHb=k0S8)F^c)|w
zg?K}y?9{XI>Bx}0(hpO&-dCo#FC{#B-|Ns`p}AA_8`usGFkXNhfYPM_)I!a2g1zU{
zDS*x9fX5!}HY(+g?|}r#R$~r<$KiFcl~iviE4Lyj@>6ChH?(A$?^IcG<-J$14@nLp
z^^m6)|HG*Rnhgh4rKfOXErc~XbuUhlh@?%oB|}4S;Xz!>#`QoA%U^BBg?7D)Tb+8(
zckjEbe0;02Obr}{e-zuH4@n)Ik)-x4jA8FA+g*%J6l@Qx-hyQD&b+7}UYfH20(sDy
z<{iB7${YG&;8CJbU1Ie}SIu`TpQ56_cO`p9Z4;8tLhqDie*a-U(}0^-gP}gO3`SDI
zT5L_oLvgyQ6TJ74VHsS1CG*_yVxxh-n=7$ZP>b(y(?SA0T^vrT<pvDe9~1kc&%m1#
zXuEYIon9AB@#`37P4Y)9@McWQkE1`{2Qk%pwb}$z<2VjAI-c9GIsM70=fH|ikQ{zG
z%=d7oOWLL3rRqeQ0ei^05t${;4Sn?-tol&JGCM1}-qif+M$Yt|>&BBR5WrTIxgl1b
zt>fEZUD?(Nv0s50#B!hcr^22QftZ|1MMqam>CsBSrbmm@fr`QC(lwCaPm=LFOtWy1
zWyqS8a8|V0T)4_pN<6OLwdKVixf0-o`hSVRW>zD6&|F4RgRN|b0qC?+6rGSsd>8{c
z>GX=aU7jmS*X&eiXo<1OKHK08Q0M5)t9r`AKk(GAPvHX;Jk7TjRQY_6ic~pkUrFj|
zlZ>NJb8J(C0vsRgzjpuZnH~3Ed=EEhR^8k9^1=F5<>Cpjv|qae^ds!mFH@7V?TthR
zs!mY-U74x$25kVN4|OKmA1xXI#wV-zF>JcxD9_4Q^+aFTpJvPtMoz#L4M)Pd^e;+@
zQ3jZfaW$9IyW_U?9mfDl#=pb=McPComeT#S0XmbE)mW<N!Pf?M3Nlvc3G)>dY*#uI
zC|qd6rt0_^Gz~n<kGA9aHbBlv;jgUH$`P}W8!zK8JQ&B7R(^i4=Kk*67t~iLVKvor
z(NYKGMo$L^jSX<)I}7RY;p!p7Tn|Gtgag@%Be-sx1e6R(*TsPfHa4&tREK&tk3uWQ
z3E&+l^_jZxp-Cq3@hb?|Zfpq%-E$n>8zIvIc&A8MFsmlr3q(eLgfnL!J(E%Un{~&D
zSqzlyYLP7Hp-?Vi2<HMX<>G;k%gPDF8MaZUyVt<$%Brt$#Ye2wb>H<bgvk#_8_Zk1
zw)Q=)k_V0(7*n=%<%3B_TsrM7W{><K^^o-YNk%Q0;VX6#$F(@fL$N8yD4NuthCq02
z!R+g!hCi9q+k}RmH*aqdMS#E9$&FlBRu(*GULSfVpd@ea`U6kdjX4)kEtz*2HT1a@
zFb!_)2a^8SS%%aFh^bs|u8er%Hi5d!_>Q(ub{b;Z&E3_B@Z=w8-U&q{u+sNB_`Dsy
z@ZxnN&kyp$orn&!>Me{oSQ`^6(8C4@_<<6#+h*(>N@^zyM>ggkBzfEK1{PZw4bU`+
zexVdCY82<)q8=GP0x1$3#)1mG`!`oubu`%hJZQzE?2?Ap{HC&!A<x7L=kNxKRUUK;
zBL)jn$h9WjiM_8O@|zr0E(t3(On@bB2{tQ&yE6TfmM0Wz3o3X&*U)x>WKfLU;JWav
zeVtGmOufOm!iMKle4?*I;c+w=i~R)RgAfIdY>Nj?gKCFp2T1L}9TjlNs>nPxC4U!-
zp7IM7C^@9rUo8U8gh}i})^!a66h{A)s2lCn&vq4GZshIm5BFw8bvq4x@^u<=IBEub
zvG0I1fclRf`x=S7xp@!8{RC)UI3rOK4!jU6yIgXjg5uxdrzX##St2E^`9}Tbi6oY*
zYMUK8-h!F#fBw~lbGrQK5ADo1H;#I3>Qzkvo9OLut%L?UaN=n8GDD;Ua_NZ3ajXX$
zBqKONw46rMr{vF^XnM`AtsR<ML~ke9VahT0BO*$Ib-<?DBR$ZeJN+Mxb6@!H?kh!g
zCawx7Ko=N#Aet!-K@qdNqyb1R5Qy)ys@6ns?HE1z?--kz@g1;5lJ%H=wEGXkGHexr
zw*EEGIu9&x%qv+2rk8nDAvdkn^mC&cT~aDPWjHB)8xtqBVp9cc?5{=xSwlB2IvKy7
zN-xHZ_yzl|L!JsbniQ1|z3}2Pg0|#wI8a*Go@zMHB9Kc*y4C0IejVN8nf0LkR>+r=
z)AP!onacAFKz`paAs9V1vD^x@0YrBrcZ_3@qZ1CM9g6LBunoh!Tr|@qKQv~eH+WY!
zGJ5b`E}e8h5<v_s_3|sUWM=_ghcoIRevg{SoD#qYX6#?3ZUE)@;`Id8nwf!zeDQo!
z@n@N~sR;Be0BZuN#<F$AoY)2jP7F<(y7yHUek+CUf;dTNSe~_D4TaJ6`Fw9UT5EcI
zFHd1g{lV3(<7a}M_ENea`Pyqpky~)8fS{B01l{nj60D~y_Xi_>TQG0?>l)}gd&UHk
zzYtLOt-UN~*`I>nEsI{fgzMYQJh^lfO&hTPLIa*txZbtBl_8uL%{vg)^HF9tW@Irc
zy~=TpmHw$L;3;9)@BnQ5Pygijw%&?)<^qZ!+=hl`QOJI>+^AFX3CttTB7pSzx4IHF
z_nFKFNfG1G-he6nIfhE8mR%fRp8>f4kUVJ25vqIr9Fbmt>0>xo5FIXcwG7#4A*nNM
zNf(`Xz+^_qyFQ5FR}v)dcE3-m%vd0|Rb^Z27568kp>(k^l?tYaYyMTTco&1YfJ6hY
zb8LIHUJ#f|DzvFsnA6sioWCo7e)u?~%U#$=9JhpvUx!`|3@^pwCKWo+$Hbzl;Ly=2
ziD&lkEpM-G<EFf#!M|H}#(7>qm67Sf#{fd4e)#Rer2)E-!KnMhD4CMf>((zXb6#e5
zM!A@pnx4*yDsOBoldb<1=QDO<$HOaE&P{DSWOT;p`~6nR@UAtQ>vzVTSo2fdk)82>
z?p#t`x$xZu)rAPzmO#bEi&EfPgw;_TrnpOP%YU^Gl!lB_Z$kO8Wt1-9y{qr0OK)wj
zYd{F06&6YMq{85FHGoHSyZo}x>InN*^#~>I-9$@vPBdtk-{tPf$;b{3xVfx^?niep
zkRwTojR7L^UAiXKQB}4jR8oPMVA6yfjo>XZJd%$&5)2~9_AXNKl{4scSzvK6_N7G(
zQwk7H6w;f)@MA6udX#JLqKJVRGu|&_^8=J*AmqgXa+NpzCTgSyk9>s+gydP*3G&$g
z$Jd$1L%F{3f22}LQz?p=N~MmZ#d5ODR4SE33(7W?WSN*#h!`{CAf!o76o*mPvK51}
z4aRcHk?f3^MP=uiVtO*m`CZQU`&<6_{eJzSmlv<cJoj@y_kG>h^|{`kUf}3$V{HI}
zW;1^kWDSYYR3)M9<FDcT%C>uoc_<cqS>7hqp6?%5al!TK$Jy5k`u)Y+6;5N2o^bLq
zwuq@EkXc?(Cjza48=u(!T~Ju6AX$SG{UJ?qk7cjzV~Y<_Jj&6QBA7^*_LKtnqFF#*
zJu2HQeO$A_!{}SXd?@qdl^zKxYYc}xavq&|;V@C=X%sbg2wO`-waO)`ZOtq|<wg>e
zWh<PhZOPhG3J9xNW=e~3IFkg84QkfE%e0Ujx<3{~A@z{_!f&&Vf?Btr*UyT?9>OB6
zZ$3`zlQ!xPNOg-Q=k}KO_9TQ-qo~~sB*5r_3{U;Q*Z`7{U!~Fd#NRb{qD8zo5`SKD
z3=Z%f8}YmPP_ntu8NB0dP4Ua<ya0ClORpsAhN|vasTvq2IdDej3kK6ld|mVFuIz}X
z0$7luDovt!(m97I$Dvrpnw$dr@{YiROepJ1RM7>awHO`#_1>mTzwJVGV4KhL+SMJ@
z3}5-hzeqWs8>e&5@GAM$rzfGt#8}*G>#4_xYJF5QV-tw*85|O?`EFB|dj@W!<RYph
zwC49lEG^27PO<Kw->V`5t@(u7<8K2_2C4LcCEb6OKVh#6)9#b|uDif}vW0ERh{hX*
zt*{<f><(h5eqs}=*f3f+-NHXzQTCWeP#YttWuk-t5-)h7Xo`fx28JIY|4vlC(leKO
zz@etsO;fw9YxY`I2U)+sIAod2n7zY?V!0+--FX`C3*#OEIos9`?Vbq|U9s*ctz;ye
zLMudxHfU-gm*PabZ`>R0M_ht3jtU`7KuCXqUP3-_>#q_vpuR`D=bY_j+5yQCWvMEU
zee@?B;|>jl()P|S_-`-4gt#H!Ma!fWRJ}l>qu`yu5bcrX*Jw-dLVf%5D7l%2CAbsr
zYZ@Trdz*_{6&*9z+fA+cEQN6(IjqmlaSh3FK6xeNw}-_3L5EW<H_7@Qa-UfnsEa6m
z(lm-i4oZNhQb&u$$x|HjJYEF?1iZWn7v-`Sbr+afvdfJ)kx#vg#^$x-ph$kcs@=!H
zO#4D-dbjsf*6T#^=`LNZH>6mdCp?U(2qaN;rZn=*J*vt_Q(qpok1VPeHiuQ&XK_ei
zHX0SaU>q6;ibHVGa72F>8Q0tuD5=)jC!cwpHB{eXko^p5I}T0_^(Wl?+^%B~ZY*sv
zRi7d!JWW*q1Ar(&R2@;R6)qMJ=9%13iaj#ixPP?#+b1ylumJ7yhB0G&{=D;NQNTlv
z*K)6(q_vz+%`5YfQ@L_qX2Gj<DPAYAoM+L5i-7#uBGEo{hR1CvS|qVWE+l6?8h5xx
z)kT8^ae9qIn?fwkxW|zv?Jsuh=1jlKjPogIc&KXg1>nmH|B7rEZq?Es5*u9*Lg@_<
zh+=AdHZYTXQ0mO^XX90+qP$<-Wj*a%K(C|IBPq~2#}&02>P@8*TS}7G%R0OEiQXO}
z#9O1f*1$bEBI6Rv)X@x4m^8I?rvH2cL9uEh+)(7uMk#~h>?+t<vl&%B_QqWBgQ)Hj
zm{U)c?=1}>H3a2=r}D9!wwpZ0N;WpC)Jo+;NB#J(XNq26D6j{us)e;L5#+6=G#|3$
zXc3(usilAUX|vRRG6!7MeBq~VG7bZaH||51POw>OEO+vTiL&G$Y;257y~orf_oxA5
z6{$vEI1*;+nC{h62BBf(oQ8G1%Z}bzi$s!%H}OzaRqXll2=eY{4j9>MQ1|HT%{TSR
ze4vE%s1ZZmhFZuJEydP>12V;pkg58&(0D?a)Ii&a#-2i<{M?^X|8WApxvT0dQt9MK
zl=q-1m>w(~Q(F&*LPqp_S-3%VLMA$5g}8Nbq8^My*_WXK`1t*SYBtz$U)fgq|K8$T
zM!AtpK?2+AsOrCUGJdeA0_BR$;Xzptd<ZeX0kcM0E_M+-2oKUsJN+EV;oMcG8b#yO
z%_S_PCOiXJ6iMs?`Fa&QBkIoXITjXmuTR#Cx*k3IvsCJ6(^*I^UA8L2_qTP6+9W3O
zvK5a1U``07Z&|{%HF(<hMYN=mL%1`vx^*lvk)tkJDt(2$2Y5Dae<x9zH#ZZLrYKZk
z7b#QQ(pJ3|ZepyK_-6Fg%k-kFl!N)iW#|u=4u9IpajHhSP%}p#zf5RQB~u3ijZUSa
z!Bd0k&GPfZLY!oi7KA^#ou+1m<3u4=dn$#`os_CysDS_^ydi*y(?&!QBFl{<vi{yH
z@ThiwteR3k{Y^IT@|g5(#+}5yXBeD{+thxH!gmV@@*l(4Rm%EtCFN7^#1;~J)Kk2F
zoK{ATqj}G)2`m?Y6;UW-rJvr~izv5YXn(AeaHQcez+9e6*29r~o*P*p*_8*jLA{*9
zC#I?bXO-dlfFx0QVvlNK5Ktj5V@JgTcgd#13!fQbvFZ0Tci@midYoqdGh`-=Vp~YR
z$6b33{Xs(}Y86g=ESiCnje&43TKZ73SdXI0CzdR{P}v{RiMp%9=C5jgM~m14ABwKY
z$tX1tBi+OA2%KqRt&v>1xr7^2vpKN5A<amr+g*@vXxNM2EOdDtTtqTb5!vy*r#7dY
zWxai*b8-EZ^0>sEwa3mL+VuEe52I3wnly#rQN%I)?$pV0XNA(#YD~s8H<XoB3w7yr
zMG<KS(Pww~6J|#)rN64|)vZ!~HsR}O*xNbq$=uy+-m%elx3Yy|Wy5&7#*YSWpQGp#
zxDE|k!`N8^BQY1XM8wAun>1XTiOMv0R;-IW;*((bBAA@*8Sh2a7Fz$#tX|vXY;mrl
zv~$w6qB?qd#>aa~m)*8sE0ktVM9i`1?xd-5@owse8bdhotc2-oMEwQ69s-*}`NofE
zo<$da35RmL69Sp%!vftVR_=I(MT3$By!=b?29Tf(0ASLNk#mT(DDo*^_e{N&UgIkb
zi$)c!D~W#@o6q9qLMhw@%3lEwXdsV^B`l|0g4q#=euowUi(%^HV8pkPyNPPzAhGR{
z{0bDkuhIEqRBgmPY6~3EzaYNs9{d5JPlWWDYqnQ;+7@8XP3am`#_6!Xd9}C}c%*A$
z;d<6E+d5=}gpz<snm0&Xx5M{DiMzB~rY6x4y5AEZNpUqx2PmgH-H;_Lda0Bw&@AE2
zz<Q_6GipjTvS(EY3DE|vv||-jZ;<I6=-boFc}LFecj$vg+D|YfS3u53D=%-F>C0)t
z$;m)YyAy9LtEbALZ2}GXI_hq;QrLryF)pMRdfGul0aRKxYpx}4q_z>4%sLx2sddAY
z_P;o%Tu3U9M+1%s*H`C6oh~N~1npI5gE2ZoM~%(FPIF{36&VpZ3VSDGpGkts(Njqk
z3U^I!W=On}cvD??xqz7OCl(ATmZHam#!4io4g;OIYq)in#*??%&zm*HU-9M7bulZY
z0YuDqF8WK9WK)q)UA6+qZzN)IR0QF=lA`DiVnK%v!*Rm8xs;h$B_Z8eXh-L@DSNmW
zBF$0E9kd9RlCA_gLG~eE>G>0Ck9L&jj>miUB-=78Y=5sP_DaY74V*8zId?X>&s@Yu
zTY0TGfkho?u{t5BE<nCF5XiDx;S8JHKMa-ns*Qy-H!u5S!xsQprmqaNxB!TW$w60Z
zR!5PnF~q2EPDiIjJub<vvmsQ|SC}BWC4EM7x3WCm&hjAK#cixvJTB8J25`7p7Ude4
zQqm&T605U0XLNl^mDHM>IGWMEFE2SdukpSa;JOJhKe+m@u`L6KaPZhB;WH^H!{f6u
zbwm{SK9&A3S&mDySYC>Gu&sIfLKMBR41JeQF+yM9AN%`fwh9=lMu%|H$M_wiYQdl0
zUG16gQp3ghJ8udM<Jx-fA2?d<p|7!99x0M34#MJNBQ2o$m|60Q>gXJK(Kcc8q&k4p
zdJcf&Csjq_R4in2l}+7?CQ8uo`iy4ofXhLYggls#t-jC+CM;MF2bTn1xQ~I9&}bh-
zkMZwUW1mFQ6~3n)(qOUm?oqYjF>CREG}0CiI`#*)@#%3O4aC+PmEZo&OC>Q)8*!<=
zBCuLCK3+fOz?mQ7+CpP>+6TUa;*;)YPfz>Qg%Umz`6H4|CJXDNP%qRJD<GgzGomsy
zLdxPTNL7dkgJPO8{DmHBN|xq5?<dmgiM(Jv^cr@PG@(wmU2Gw0i!5Nl;z^5tKGc5<
zl&i;C<zl;0`Ja%c2^)rem*q)BcVee>`LTMiJGuA#gK_<dUyM3a%=p;;?@h_H7+3Tu
z|Lkxpft|La*Pn$Oui1wrg&GVx+6aRkM>*wD@uti9X1}oO6%K{9Sa$&=N^)MX8XF4=
zJl<0Va!%uTN3RV89XtlDY-%oIj;RXi16nb?IXKU<#WFXMM9On~LRtFplcUp-vE9lI
zt?OPJzf)i5wp;F7d4paQZnbO;+Ux)aMPjWBI4B6^+2;?F1$y$7BS_6#9&5v>s;b@X
z`3R<3ZzScUYc|Q@La(9f?edSuLfjNv+<nQu8$7N@f0B<)$L15R6me#n8LtASoDq_!
z7$s$Tq-_?G>y?6SS>f!Vt(OR|CFain7CS$4x5_o$*?L8l2wQ-fG^)vxJo5&c4L-!(
z2_WY=n(K?sHt=x07XQh9aQ=7p<BPk9E6rbkfz_Rbg@mpu@vlIAwI#dBacMh{-tZa?
z%2pH>sG2=JuCGcTG{Y2EqT)Ordd~mWBMA`v-0j-ocSkSZ&(U#41&#Fd@tcxA?Kt4A
z*0qT7|B5X%;ZU|XMhewU4}gc#r|O<b4x{Rb(M8br&Zv60Y(~`uGyUVu7QF+_xHS~B
z!ih9oufO$D)LEaf3e9NXD8zZ2TJz}GaYNNa&2_zn1wQ(BCiP}@Ev(<NihsjSmj8c(
zsV_JY1ax6vC4t~JMuv`maOjT3tD<^>A%KOJM<)$O)r*ymkMOfn$GQp!E`3z39oprs
z-E8lo1YG)<-jlZs%oH1&FMZT4)zB1Q&&wS^Q=kcj-A&_tA3W!+cP<Lzv@qX3Pfk~v
zYW(PYWS;nv6Uo^5L9XcA9>$#)9wJ7`?TCPveU8pgu2*$>`?snI<_EWxM%i{|J=WWd
zk?B$QQ7#Arnu)QDbuyzsnczK4fDJM&bXbrRSI8XL$!s+qY2>c1vU-7*HzcX3`QhGl
zPG<M`2fx$3@l4vCskCX0<lavC4?E@m`S@Q(89do=k6CA&C498K)OYrr>j~Loy*1mq
z;1M{J8tfAd4a<@oM6VU5_6ft;ue><jja6q`UV7P}w8I}~e=RCX3(lPlQ9s$a_N-gZ
zr8<m4I}UL&Gdj~v;3eS7uNkK?+;SVe5gn(lg6Aw|*tAKA#py2n$|)n8yL;9ii}_()
z9j4f#{-(ao(|@JC%5=h3W3Xg1fHhslW*{dDv`@9ucu7RWdcaKmbmwf!N!B&mT?b}Q
zh1=uO2xdhg3jwTsum9kg6S}T3y9{6-0&g&PyJ|Nh<HS5#aPH7a-7j6=-pl<QgZ0;9
zEZP5uWUaE`OZPOx?T&v2<vhAEcl3vm-76>SEH7os(GF->o9)kv`~12p>14No*?!Bs
z>oM+NhcU6^;ed<NF@VJd{Ci%tx*_+beDR`{?TfIR!zLbD{B{gOdo!Jy<2jFKT*>rQ
zQE{+K$hzb(#<~79$Dz(OXRIRR{+fYH7cX9NXkK5M`Z$$&){(;*XxyZNSZuOsihuqx
zl(vn4`2L8Z5MEMX@`W9I_hQrm|9qYW;w?15Hdwm<{nQ)*+bWp3d)-;lhIH>5X;Ab0
zo!i$s_nb~V<5OsPgz{4nLv!94t+xB-%ja8PZrvJj^w<VlTc=-MhAzt8Ab<D1jRFF7
z0)<o$&QVQ>vBLt;Fby56D3`8TYfb{t{omw!XLQej&o@iTDDt!VMSSi=#FwFzj3G3(
zK{d$s{`Ys@IiDsf8btBtdvb!lhtgJG_|NGbk`D^Bx>ssGsV{)JRkIxC4rJ}XG8+vR
zmY;hq_Rd!&UhVS6t4|#7wPAiAPMG{r*7#{)(7ZU%^7Vsbp8_zn7wa)JEk<z>6kSy%
z8f@4l)_PPKq#x(tCX)aP=TV>;m$RkA^t?bX68Czy%Vy!8Cw6`6N;K!#M(Qs5r5<le
zfyH_2wG$J;zWXQC?g5bZ4Qvc+;V!*U5<3y<xkSnOw^M#fD*dyph@|<lCm%iS_Lil-
z3=D4|Vn%vPO;jE%F${_<H+=EJDsRZ~XMph^6>+mkk52yxSP9FcH#ljr7V^JVolG*i
zOM6P3=`kOY_&CdxQRY6i?@IPqvUk3UF_q!!DNJaxap=F;@6fDNnw7=e`EX#MZryKe
z(5F0q9+8fX7?l^N!CSY_Z_wD1hVH!mdI#g$d}$`PSd`-V(kx#o7s%c*l#q%peR1&c
z#)`=I^COm>d-QZ&A78FuoOzw>F=T0S`w(_|hv<FVxsuAxQgus`6fffh>xdQmwpNr>
zmsCXaDwvg}soTIy^y_lXjl8FtyPgL;IC||WQ%>>-*7J;ce1bcoAR6uR)~`11wMh|`
zhG>$+!8#s#+dKT|OU6pZ9GsH&9WBA9W?R1;_w^K6X*phM$>pB(US}QfTSq9(KFzR0
zpRqddKqF^WHPk_eA_`DfmkxshRr}(yE@mq6WEV59QrE(=TYuuO?2<113Gu<N%<AIG
zNJmnhr(0NH+Aa;SXEw`SFclw%;kYn6XbhrjBYyCJrJ|1GpyM#3iIi$L&FNXTr_?0Y
zn`rf_>`m96t#NME$wN&X&imy)E*3EzLy8{#SEAP(BAjROUM3sH7sB1`r}3WIISf6{
zo-nkbHqw}1OO&$nT)lH0*zhLtdhb&X^QCq>_Xv`A&gm+;bj%KtkJlUpw<P<{Nq?PP
zm!S<R6+>v&TyT~6Pq7~U!-^y*Idd!s%WjkN2+~Z+8Lik6$73l%5rv-F4^PY`0Y*Us
zz;)U1uK#Jn0b4-BhisC&J87j|Pg(o1#cQ^mxR;K59|fjsnPc|E;+aX;mri5JAs=!)
z#SZLD&iH};0jm)2EXc~4THVYWOZ;)`Xz%K=`GTgnOzRhynkKwM3?FB=_^&H+^=ik^
z992|QjBVo*pJw$tcyfGFJr}TiJt|0lU*E<4`b1Hpon7LXMs-0}LDkJVGI{Y$_Tqh+
zXP-ZRnX4dFf>j`8tm2jj3$ZS^vU_)e-P>-0r<LLG1;>l3XBlUTndo+Z_bUd-eWw;T
zPhVQdO>eJn%+=Px0s3e2lMWmRrLFLj6ZJ}zEv!0A8R*WDNx6&(wUESu%yCv(^JKxl
z&;`#WvIXb@SHpDq{{y=aZ}lJS!uu{cNi^_gO%3=h082KPEnoa2Xlbn9e9>KfsrdyG
z=xDBY70u#QC|4Nf)vW!8n!e2(Pity&{^jfN-znCKA9^e;q6?n?A}785QQ;>94|PMv
zhV(4>{|sK0=$UMnlH-EXMS7@nJ{mdQ)YQ{4;oP$strG&y?W0#k>wkB&Q8ksQXN@70
z?_dW5?42i%Vs(u_EW;2I0ag*s;`Iy~oq<Y2A#EkY=2dZxw-H~j37E{JmWz9m*=M8b
zbypgRj(dDIEPri&)Aa1%;V&QJ+w@7BPde>Yn2!K0ldX6wN~pJ?)p5AUxeSE}iOKSh
zEZ4SGf$XFEJd$s?TL{U~5@qr7oM_XtS$~ugCn3ijc-NFD=<b=TwAMM-ZQrQ5)lr;x
zx4?_&g^`td{AYQ)xUjs@kekq@rm}HLUrD8Vma)RiKIpt7tZ#--0}7#k{rCC7p0swy
z7bS0cc2rcPTuAO~-0@7e;hQtFO+PY}P{{cgpU1Ucff5(u0N`NOo*PS3|L8Ynsw=i1
zm#s(sPE^CEUYBVg)gu6OykNkMoZV4g7RQWRI#y-CZ+g={D=P2I#^c&omVNNcllPI6
z`mNru{xZ~8mi@IEIjpc5YAp0N0Ceea%XXyZjQ)cuZJV;r95Yl2a(SF3Yv-!ZP8~Si
zS#bGv=j;@|ML>?8%Fo}uyC5Tm)A8X0XJ^5bx3}PdVxZQ8of$`MZ81Na{`Gv3;%K~&
zx<+S!hV)jLXCG7lUKh^1qBity4%h1@r#3laDl!Ri<!u6S+TeK89v^T0u{rN^By~@>
zK=18cMW4%$2DgOq7LZCdsSvclmc<&dYqss2EH%-V{z3CNIMilS8Yb%gT8y3*R1O?W
z9{PIlil?`p_tf-M=1v#ICtK3C7B@Ty#XTY*q&+D)muPibc=bUjTG=H9HA5XQu9s5{
z$(q$pUP-S4KREAEY(4IgagyxwtW#gCWULdLn0RsWM*h^A#%kuibcHc!9Z0e0@NYwR
zU?uBRS{yoNr>=g$_DzVQdbTjTcYBvAdiayEls!U2R=QXG;ed6oEpkVLrk`d{IGBCg
z38hzWeDk^DMD-TOI}harEYvUsa7X`O(5*ivqXVwwT)a3)f|?4`@I}F=evadS6G`n)
z0&}LxN=4V=Lh^<Vt0OX9b&wd{o1W%4{@w|DL)|r%GQ0Mpa^nnySa9G>7mN3hSjH7S
zV7Spl*eDlV*Ccg-w4}GMRNeYsjgolJGtZG`?fxR~s^)Kdp7onLa$Dj940+gZcK=bk
z$xAa?SDlT{w8PPi*l%*C!%wWMXI&;usad8NtYqAysPpS$mJ-E4|GB!OhagOEzvs0?
zt9zAS;y>T0JOBj$x3F@B!`{S2&X7ZcK2`YtUh#n;CZX!5UUh$FmWP}H;WB=S>|;_;
zO{zP!JtdE%WH)o9eUHET2{+5&i8#=Se?54ub4qhFc08e;gOBHPS1uH|aUIMl#ls(&
zx>^=MW72Gb?mhhwt<#-TlgvS#Q=K=ShqYOQ<m%TgOduMDsgo={uKw%aw;;Tt@q~j1
z&LoKJr4LJ^Iwu+SOldmhY_`KVoh0vN$hrLt897(M>f}}LOL=mm$j7hMSTNml&`$B`
z<nHWbqeneU4`IK5O~>ZZE=zSRducv;eVyh#vja-*$9ia9U@v&8dp6GQ1J|Zw&ROp)
zTFnz%nOk+`!}irNUq9dBSwP-BeI;?|>(HhDN~@*m5c#Zu_gIL!vy*cqDq6B-d*_p)
zX047%%!S{NAhMbt9NUNiQnC`g8Gg<8l1DPz>Cnjej@@5+{oi`~4L}9ID!J(;Qcuqv
zd|FE=9LM~FImkjym909V^Msd9!;rnf^T@H4D6&Al^yCG2lNPHQr?!?iw#6ogR5v{{
zy_sKLGSKJ1={MJ9zuRV)C=&hEvU1<^P}&Z^g^&@~{zIZxl0C+WlC00D-_M0;v15!V
zPd(t};8dRY(CJ<FxK7rXie>Ia)Aql50-k>mef#J<@MJ`#H^653;`8tC%gNF%$Vnc{
z{=#FC#|(+a3kVqZI1&`m+wFd|zVGasy&cEOqO)uDSt@8=9rx8AY1+c$e{L;1>n6}!
z^G-0Ma<YhYd&n*;j}<LB!ii{QlZ@lvz@iFL;V`&ECJ5s)X?3=cnw1hxc20r@kL5w$
zcyfJWs^^l&ndh9%N(Wn-y>G<V({K8l_8urs_w?D3=xKCPs}w`M@~_5>_D}nNj#v|p
zvSk_Y@gNx;RxVMO{;@~4nA$>kRWLJEfSB+JasHKh%LBuj>t$PBkt2Rk_p?~AF-23B
z7~QMV0Hm$Jwi;-!{(5Q+6+gR7EuS-#TikbK52+>9&!4$3H;F^+tkGX)Br5jJjMo+o
z#7Lqh+`yj@eHUZv+G312dZDr{6ekwaeBZwz=}?d6S5MQ8N^Q}CH|-Q7LhPRWf*Umc
zmN$0``4Kxh_3zv$EwDe+rHdil2Pmlge6TbIt~Q3_w26*NlWSCEtrcLu_d7vNpA|lY
zdyNq8N?ZksgT8ef2@cCtwDdNq*WA#ZU$twUgJBLK!Y?n7X=z1qa2O9NO!B<4r-qYO
zm7G|a7aB;GtQ(N6!b!8?@>xWTH|=_B0CZN&!00QHfv*>s(d@}zUP@D*s4+-j2N-gI
zK^FcJ{qtAkYeE*u2J#U^4Hb^Aqg_>L#}v_y*|DXYSsf_<J%O(vQC5_#P!|5+i^7GD
zyf(0f<_e71^mW_2!2N;|S*7%1$iv~2p?yN1Q(Lx+{>_3fRRM{;DsX6tqO3Kw{_@wj
zTsl@y`kZyO4TQcHnj2^wS5XL>ft=D)(>O-ibyKKN-#f2SSiR$s?t`pVDFLRm>uG{_
zWL=lwn>$mro^Jd0e(ig??@E}1m*O9H@#DjH@%Vpy-n1z^OyMlu>7&B@A_-);!ywsO
z7Yqd<Uw+cPXYl>8ajx3t9?E*Y^awUKF-;vNL8P~ATiwl^dIaU@Dx8Snp6FC<xcRsn
z-<s*@Ft+(qQm3x>4Yi@6&Dc7qvC)9BBU^D&*f~s|?9`ib760l)ZJZye^&`g+mQ*bX
z;F~nRc_Xy#y~q4HP1Q<uZ0a%U2#nOPLZYH(M`xG2zWKQOOuUxMSg&55WtIF477L$G
z0Q+=AWcc%oXt>A<RRmFG%ZW~JgX$oxGCFfC+_8IVk{@-ho8SICS){u|_tczrHU0F1
zZ__4=pEzW7O{|9Y9yo&W;O#{0=o|&vig%Di%!$VTg1Xk@<&mU%XVpt!l_lAW=w>FB
zCF5TVpJeW$kc$RU`q{gZvjQd8#uBJdiC9-Ft7HuwyD4Vbb<aFR4skR0N_8pnk6*#K
z8A5e>&O}}JRI_NMG;^f5OINojA4D#YNogE$7_3hiX!&wFz6JMm-94F8?xP)3g)y}S
z7>d2HoJVLP_g4y5Wg$7ky==k;$##^U!SPIv1Qg?@(efaba`Kh@{^nfIfcl<k{qOlR
z1v@V3P8WcJJ@F!?&Q!T6RMYa1I#ms%u%>PTU4?qQa=SmMsdE~^)0Yp9A;Cu>SzMYL
z;M_yr(#cH4o$4&mN*ouT>nfVoot(^{dVXix=X%VB_|&ew3Zp+H2chW)szJxG;*(G$
zs_F8O|G;u9;%JK!;5N_52Gq10O>pw>_<C_HdCK8}K>KE*B6TMk6ufH>v-RA2XZ0pc
zMd6aipO(KEZOtDozm@giZ5Go$k?NoLI@@W`p*ZWK!YmP@%7?N}!t8bKBCtY&Nd|sX
z>Dc$!{s7qupaCqwKnjjm5HvE?4DvZ+>m~xnSM(@txK?v307STp_he*J%u%0YTm(~k
zfPXvgN(P5;j~Pr`7D(bph3%Q7xMmIwppVsSUr)H`b<b5Bi<?v`cnS+_N$g#?ji0m*
zZ0U?d0c9M*y_=bwgTI(8Ehb!p7-c7;nJ~a;fbpb9Q}<Kc7>zY+(4R<iBUL$}u3~$4
z9&s#8PvP(t@5R(@h(TNE9Ai0ptE2Nr$Ha7+W`ecQx#x9o$jc!o47JXgRyWKoU71+E
zk3(%{$xZoWhFvRro6wX-c>7?8pWzl6Q1&;$<HR)`t-~Y7zP@}S=^Cs)M0iAx{Rgw2
z;wkI|l4)BUZLNWN2vMNg2p&k40^$RIODlZK$<i*0<8WLMh^T6|R+n|m_Ib}rjfY0;
zx(c%+o0^8y9WM@E4%-&J1|D9n{9FmN)50x=qEnFAOcN3tL(T)^PO?U*2iek%vvehg
zKyGb~fvN*VdBSBm!-1x-Kp0hd81C3P?H5d27x=u%+xQ^yRQKkd(@8x=0RVF}48;|@
z?1vLGn?@=CLCm)Hs_kMu$x6f`#=u$mT&ILEyiTYPE3wdyC=ISWdHGeZ;G=<?v(Cko
zlW+X0qt0}dd;Yj}<kiqIgOYd37^*$3ZZ|yfH(VxNvi2)3c3vUeR0$CeV?%59O*}*g
z91%v`aOKBBKl;7+Z7S!{5(|L0o#Wc99#7Ucx9X;tgslJixTe>#roAan-?*4`2$#)T
z4;P$a3}`jMVlMII{ezLCet`S0S%<P3YH+M}KfP!bhoXBD*WAEgW^Cw_tpcS3Y`k_D
zS!sN}kU`$oF?L(FrKF2_v}*}-zA!%jqWR6N!BCnZqoin(B)%Z)RR(WVkvqCXXfo`V
zrWk9@XmscQh}4_wqu`TEKJ9p7V4314Hp?%c@(d82*!IwBzoYdwk9X_tr)yRUU1iIC
z;gPIH*CXNv#`+pPYBNEz1_z9`5T<I)E+GhQ6kh<(QR#8xmomos=@)+Sf9dMtdjrVp
z%FjiF$!VvU#@82)%Zc6LmJDG^KZb?U7LSp&;a209Q~zSU8XTF*K!WRC%&cy4WX)`s
z9n1t+<0V%}{vm~<%4kCU>tjo6lEs%CCVso<#q#L(Q&DD=YUtT@OzC3q)o{fWTAeeC
zS6VSLc}d8q1uig*XNm)TG8)McMBX*3FN!9r6;<g8TB&9x@Z&Y<ZxBYb>8_1J|I(4D
z*<F<2tnmO%tmf8=Qj&DP*;R9XWvX7|0gs@XG&zaYztPFMf1|KFlx^_WTxfOXR8tBb
zh{PZlc+G8Q+#{|sbzIU2MF=;3+oJIR2hB<n>CVlZwt#Hs;^TX!?7sB~*1f%_ue>3)
zerBV^Wvn*rmacl75)rtNt&w%&FnDdrTD(34oV&Cea4U(UHY89Z>E5VF_DnKbBTf5C
z!j*DL|6aZ;d0W~pwY?AWYe5-TuZNnniJA~B8z+xyHxo-(b$T&1yBAs_qzac%`kj|(
zLLDdS{z&Im@it>o4!=n0m}-=MfrF^SB%u4sM_s=u6=#bndt;aQjJ~#2N!R3lF2r3B
zD})WpI&jE^R&ZMQy^72uMzItCi?qGhU09aH$1S$FQ|L^ht^N`=bGl4uS0W&;EogdP
zHh(-K0RJ=-4L(h`?p&E1SwJg*aPZ9h)=>=ZMcVR(7mz?|RjAk82<&z7KJZlH#`vW|
zh%7lge93=-?dwHeKi-r0`f!L~xrC7MqC-D8&dx8me^$ENBFE86KfbSSNpa)iL%0X9
zJ=(URyN#M@s17z7zs`kXgV^7dZ45lX>v<~pm7>lgF9|6+8|^={(JGU%9;KfXYQBnc
ztYKVWA|sKLn>$y&9t*nRU}@!j!)H!$Ao`GLvpL+gDXs2o)yd}`vaRj3D>%-X@5g&*
zs|i5=CGed{hFnsof#V5s{vK*;z&h32vXFeC<!7flr3OdI+vg9CU9-W;cT?oWwqT0!
z55|)g8Bk+@l7`8!h%<@x#0^lWe20h^koe&)W-i<XPnmm@l(Relo1wvu#cy5-HIuaO
z`JFgwQ(E>c+e_8XsKV-RU&|#^&oMMV2ZBUJTc$YTpXq6D1+USmo;j7bo%!y@zdMi{
zb(YQi-P3-8?D{(X^P|>1v3JHiwJHbl?p^ACSc;+TXCP<6{Tg(p$A8FH03KA7jgBFS
zY;bUXPH-E*DKsK1UfVs2@`16MHOO>JE7j3C2)m{}xh<CY4`x$~z>FF^b;hx;(EEnL
z_1DN3QCx7=z)-E+eANGaXB;UPeUrYSdB6sxL!9!>kvIyu5tBufV1cd)klpcEiZ<$<
zUivo`hcwod=Q*RUwRlYxQ4x6ZjaSfPDb50otI!PnrrV%W>fVrKXn5{oAhqrAN59Zj
z8M00Awl4u4LWY7g6D9%IOJA;z`i{jcpVEd=c_J-kvSNZ3hMd0<$g@O;Udno*GT*up
zhi$w5gL6D%O^3vd7f0<8?40vn8gjh$E8C@Gd(3>(P1hIwEg?BoiGX@+CrFN)i%<W9
zX-}c70Qvq*Go*@qLJ7NQ*SM$-jH4EOfUuH4I;c8Kc+Psm<S8@pY26=e?t02<Xu#rC
zc2Kuc^kXfM%pm)Esj_wZZuJH=jhrw)Yy^H$Rc943)8(+BAPp0HL6}%6P}H?-I!mg>
zbulD(1)1U(5D?*eSu@QI^B9>M0ff59IR?7R=yw_~m$ngfO20D}W2cnBjIZ6jnL})9
z3$<fl$;`I~vEGK)x{LJloOO;f!8cJ+w*EsFzjfEq;xiD1Z<%E%x4rZV`n?x2O}j}n
z<RSyr%gT<+8!VEnIpEl-)_a=u#`%=<0YTa`m9#6RiHAeB|8Bjh{GEq=Tkx-gnqO?{
zALR3M<$s=(h7)+D5alu^vEsAT4kFV(F`m~J6U3b&3e18V8BFUiQ_{16K;JV$VuQ}i
zI<%-srAD{2h;qO+XFN@@TOX&4b~Y(#Mn8|Gt#tMr+S=teXwLrj=^}dTAIu?)G`N?=
z6Vf>~Kg@e>%wqfXc$yJ~gJTYHg|UUsaK@?VE{n^vcGq|C$-9}s6e;E%&T%m{x-}LT
za;;og-;+Jvck22f>{kmuqjm<CS0RWy7LD)~>VW{t#5S^4yP&ZGM#Baw4z(f|QQHN&
zAv69nYrWK{;co63qdn#GqE}5OB*$R&b&1219RJMUj%*E;|5OF5@#1)R>Q5xb5Nw&=
z8K(6`iS8jI;gT&GL^P^_BYTF3ZB^9vL}fX?3wYs`RIv8sw%dt@uTS3e-FbY?5xUlu
z^>G;LZP-h2Z@I{+B2*7MwFWL)h`I?Cd2O(ELAOLT($<VOBCNeJi&L|H;bA|dDlDCj
z&Ilwos1-z3@<)4Zy1f0R%540GQpTxn2SKNG%Fzcir^K7e=hG`OVv^`NEG~sCk{(A#
zL`7dC+Q*~}yb@(6Etaa-15o^-gB=FsHE4-l2keD;2mQ$F2gWK0_XOS=MgFu^LtYL?
zReR5#;W!d$9-IcUu6O?-Jm}fNuEKuJCNP^Jea+kRO#G_{ZUue=#U1q~3kob6smo#;
zzmE@X?2)MY3N~J^652hfD2hCSTjS|a^RnGb<mynKbiQNHm#zXq*R)?=9OSY>&AyA^
zG#3sTXA+S!AR?hTVxuwKV*F}}N+<9&N#_tO=(zb4gQO<oSuWPp($zl`?W~`-qQ_o-
z)6VR#y7b)n)2LC<&yu&@esTLnvSD_Ir^{wzm+CCc9czhlfNT|BngdoVw36cy;@zG^
z1(}NEI(ml}2j;p->^z2w^SEq7k7P?0+T38Aa~~jyJ(WnqS^Da}PiPAf*b&}(rI~NK
zCo_9|n2oHY<E0(D^<S-G$X3WfK5d_@i%=dg**Hw=zfBG!E|)2xj)H6RRt&nSIX~6h
zN$B!6KhXMg4c$J4t#TGk)-G<3%*yNc_@Qdto$vjE?RmxQal%09cW@^8DTe^LqgCuL
z>y$0VDT6d{rr&zlzOg8Zp6>-7eNA{J#3k!RAa&$ohh2ZEiMrL%;}2a<Uhe&k?I$YO
zz4z14GWyQ9<!>T4ue1gQ#|mi)EK<-_t+%i|UT4IzmOxLYvzx^1SzuIi&6+NKZ}oG%
z=RSB_h&7dtUu@0oy7sE9qAIN8<T+9-$@1;x2S-cac!c6lK=P4L(bfm{ukx_qHpPlg
zpx7K(Q<l5Fq;{k&g}p13IkN&a8um|$l-%SG&~SnF^|w9+lG*byV-<@H=e5kB)W;e9
zHtyhDrQ+~+h3`1hkViQZN`-WDT_B71oQRy);{?>Q7T2thacHlndMDkHj<&{RdLvFL
z(B%g^XuMUZ)r{9{pR-=hnE*!4y1MPNHv<WWgoV{PbnIx7VPXj(#_?=#de`-E_Doi2
zh$>PJd`W3BMID)_t62vd?c@w%EnwZRGD+_nm2E~7f?uMs5D>)`<!gx#F5n0liUR|v
zyG6JE&PTiEEXk|-$12pllza^nGCf3V>#{hZR3}=UJ%LxoU}{U&`vR?nkGn@*1WpVo
z{POyiL5qf<fN;|_qN%GP<Yu)$RgJIJXm?Aji=qv#MYbGH5$l}(=-2L=qxES#C^AQy
z=WCcGy)TEd4{6ZYGn#=#e6Z?XBQ&WEDiWzapl%9ev0Y4&>u*IGM(1TsLgMcRDSE2|
z18iljJvX4rd{*|MM}NYk?bUdhD#x3fAPSx^Nx8J`ZY|-XRviPmghTZT3*hXq!V3&)
zRSalr@mc%=MH|{0hf%_Mrn>i?8U0Gf$ew~(ou`F+{4N@pZ>fnr`Q{CD_8si`a0!43
zeeyrc;dNiA2%e_#GH7cEKHN}-D#6n_teyG}r^>pPgapuK@|4Y866|l$eCMMR$=dfj
zn;lZy?oauYVl|I}UkU1X`umcWcYKl#0c(*yHt$@PM-~JRUXY(H11OQEG*_#v{K16C
z3|-@U>*3KP)m_6x+(1^tgj#ftC2i=Z;_kbd7b*Rw>2;>f18+kKax7j3K*m{g2EeyC
z0f*4iVNfuRsgds~vuo5)3k0B9Z0{XEY>lr!mKKEsyYdJ399}HjE~K&qxD9~`_BGLk
z5v`J5hte8)wqsU7X=*iwL}MqhczJ}`%Mh9|Wa?ALL-F$HGo)NVs3YLe3_h{3Z84g}
zZ*HJ1@gnr&brAd5*_3MK28UJY-u%i3O6FG8F}wKUV~<-4<}xc!t0o%Rm6ttgCHb!W
zAXjIjFiMcD9Txq$kgB`J9U$@*8o2#9@F6Ip?)P$tXuG=`zZSd734JWv>7l7}VrmZF
zutx8kqw_sa&E~QyhUx?wDkR71rQUe6Gt-xt9tMu;udq}0GTg$e_zmDcI1(4d3h|+Y
zCyajRj9ECG>2$DouZU}CUNcK5I|(YR8}zszLpxD|&{A|eivO;dwmQ&~EgDkqROiiV
zf?0JR#fq<uUU5UB>Q)~ss?*2si>T35q-&6<o4qZYbc-;wGh76P8I>g6EOr4_04@3-
zjFdbA#A`$w8X2#ldE&zo8p;yp4c|K<+XJB8A7B<IT+w4DXR522DhN*bd9};$cSO*r
zIQlN*<g$(=>k9iW-Nv-mQ^5s?oIahB<Inzkr241hzrq^WWx{W)QI#z#5^pSi`68a>
zk@N6nsB`m_qwvGt4;H)Y)~r5oZSokg;^jK|Q39%4oCioE0(tZM4cLBh<8C9&Z!P$=
z_iVEj4_CzhrKOdHp*`&W4}lmr33|W9LR;%TMbRc(n+(|oD0zAOYJ+K^Y(O0M)ediu
z-u7c#!aL|+D?&|5FTniYM^$@m1KmN4h&o64-;@x>a19S@qwe*2Rps%Z1@Mre7bdM&
zhWGvlGf_pH-v@qm@7LR|w_W#3?uwV`OKj!kF0900HegoD)i&*vN7Lcn{(em3J5p<>
zm_DG(9u|c<_o<h~DezA!{^^c+bo0+^Bb$Jj6gH0$C&-rn{t|-Qb4953Bjdab*(XNv
z)#AM?^9zLEYvmsQ@p=7bUf5m>g@aHXeD{Z(EEtCbcH~OowY^rhLf&X{xX|Y^MwcF)
zwpm{LMJ>-g#|K0V!8Quh_7Zgu$W9{;^u8+NyihLFJhXPN5^gd}*xnv`P(8le8Efmm
za<4sHH@{0xb_IUb{|J1NI)^G}rd%bDSZ8+wV`L=4=k5<VgV}iSSKOg=T&omAJI_Tt
zuEOK6lKqlsdzJB;+_?0}q3s(au2P0gal-r87Jh%#asIB}5D5c!@)!8BjgIPFUAQul
z;B)yUK)E|R)K_3OlB3cTum8H?%acUcuGiZ>Kk|_OruKh`3gj26mu-z_;bC^80{)@v
z(zn!Yd4@{`c?eeI@k{317R$FbXXI{csV9dLp3w%}Y@ujI;0#_e-z9yDH~qYK@g~Y{
z;iZiV50)wPeIGjn+;GH;13KrhlY!eJFdz|*bGwI8(P}UZRWUn>!5sJ#gBgp!NYBA<
zq(5gZG$OCqq+wetjfA*GTQ2mn8X>d>?{|6C@z4JD=H1TbE7!Mz>ZSUBa<A9Pfpyud
z<d?Dr!s}Yw6$JicmU~GAkV@7D9!<l@KRRi8>&zXPbt5A(EXEc%FN82FrVp-Mm2InZ
z_l*ukL7Jtw)9ldIn2YjZwkJQdAHqSFb^!|`H>Wy@hv6$@OokOcd(86E3tjQPcD)-x
z#dO<>R|glb{_XGvt?)lTDu^u>>gcdO%s*I2yyU}(S8vZazMtA>eDv1Zn1CjN2e)5u
zO^wCh;eS)K+>ZaKRZsa%VJ`0wZUoLy3ehj=10<2l<@5v87A;?l+zrYlG<4~37w@+N
zf38x1;?$NdIq_pykNaP;Bq|xAy{lf<8cnUP-Me_Hb-%@MM#kmOJ{GqAX10Iqt=kBG
zIoH#%-+nB_eYW<p6*EGDSHvJf=LK)V>~F49>31DJb5J{he&rDELp6qGheO=I>Coyd
zsfLNRuDD6i@PB-@I0Hu~mK;$za>s7x^wSL{8c7+eYjI-`RKK&9tQF|vkeg80IlnBN
z9DeJKjbWlNs=nY$An*0I*BZBcE4Sq;%oRXuy(bKanXNUt%U-h1V9gPrv#?5&U*^i$
z+7FM=Yi;E*@J}vu>C(MB<@ql$GB_Up{g{Xzq4Cn;@o4@cP3baR%F8){cAN_DT^xGi
z!*a~`7>sP-lI<UPnD@1LIvCqO?yo-l*XH|S%j!05`lx{3nqYlX@1afV<kH5Ry5t@&
zJj4Gf1d~BmD`Fl24=L=Ftls3p9_muh)4yR_3`+`BT<>3dz3tH*?X+7~m_U2UrnDF?
za*Q^xw>WRZfXLr(x7^NVQ31Lk;$fO?j7j$KRn2ar4SN-So>@3$z?oF-mz>GF;$MEr
zwZ)YL)PDLU6yCg8SH5rUrd22P<s>t-I-XaKY<V7X@O@Z|_?E=b_J&fOBM&#V=hESE
z`E^HXH?561bGraT`*Z!m=T+zhSz)8Sv<lkAkNVqNNDEolyRTi|c*${CFO03T>#tu9
z*Db#MVAU;H3{!LEQOJ^p|7~m0Fw?iaEUvkhf%~HjUR41$BH}_?=C0enEU(?&;CeG1
zD~JgtT!w_*-4&28T5?w!CBGAv9!2ejf=Eo<J7{gZpQB(3BO4TnxxZQoLn{DjSqe^~
z(esjpoNtR-Vtau#Nk(4(87g-hx4y<C`>R&s<$KWy38l6{J6C{}ASCe@=4j5#a>@Dx
zw)hVX7KVDD__KUz&AW6Z_D5cPe0Z3}tqt<hgK)k*C4F@D9!O5$(w~lplP67h2kn<-
z+$at_AX`56^+eUpZIPD(-ms0H?l}1g074F+pHYOj>c(T3(QNUZ2ssOhJ}!3eI?TZb
z4QWdiwtW`98-dE8r2OA<{y&}nEpeWgExWtGTMVJ>0)0Pg6%Ee$#WQRiCs;&AR3G^3
z=qjE=Csw6C8^d8G7J`j4ruJapP5D)*@=Q3x+tQmq<L`Z)ybfhpM3OgRS9#4(8r>p9
zwME<M+Q|38SQg<*e@He#u--6q5NV!@7jL4dOaG)@=WZlbC`3@TK_#rX^r>L*_Q;8@
z$Y<M&B22INUlE^_1Si$W77177c)O8bplQ}hsL#gIzp4)M4TW)eXqKs&;1G6%En1kY
zkmIVeV0kklt%XS<cj*(#F-Ww~MY0Tj3R!gs?d6l%QzjR>nNJF~cO@N(6}UgB(g3;_
z{@sigsA`xdmQoe7bL!H~<2Vi&&bWKYr7n!ec2J^mU$wEN2LOtBQmha5@c@K$1Pg4D
zOfS3%w^BmOaF{6n&FZG>l>#S<zOd-NBRl7;<(*EeH@%%!0A9NqY_f5BPgi}qhS6jT
z>=aNa2}`E-F_zD=9uP~KCtnC?>XKc({u<V&;S_V<-&#%b3+nGC*yZQ>Xy9Bm@+GN(
zs~KowCtMmurnq-NCTUwcQ_RI$<$KQ8(8(`aUV0=~XQeAF5ffnqV2+bneR}n>^+MK^
zv)BlNN2peK=DVQ5M}&SZTM<>dL{G|c^Hv)DI9EX9C&ftIvjQD2cI9WL&9FJ{F?(i7
z+;xtgE?XGvhvTmU-5ao3p|o=}<c#%zo@|vn;We!`7S}%@+Jr6_4)g57`O8fAAt?e{
z)7K8u?Zef<wbYHt&Wh~BZx@GT-K-_<U8aQRo?v8>rrMiQo7j>+Y8(<b8C3S>fq`W@
zwiV1WET#^?TlNZljEwLYY%cV;g9YRa9KlcC6bup@T@*WHD+ex)*C+{Dbg<cSHq>cb
zk3MG)+c#e*6XK%$%!2Lchd#Oq6(Su*&h+@F9@dY$;ArqARAB^$gMn^Qm8?&K5WOA(
z(d#HttPxmr0p$D2$LS3&O5G49%JaDF0!s%(+VH(GX98T>1%w9j^1%AG6FtvDy=pYN
zN;Q^tv^At@R&_|M(pz5y1_N`><P|oFa082Kv!<Sk<tAK|+F2yxUHo>`%zt>$_`4lq
zmlco~Xx%upQMfY5ncMGgX=c=f#|RZ-B-?jXXP)RO8JBGgaWg%Z+2<9sBQMwUHpizr
z!<h>fQ_zvzJH>*{?h+cyBiDy4aFDF&{Uw5=D1Y*zKuAg*M&pG(A*%Jbwa}gC<oWSk
zc3@6Zn#NmcF?9oYDo&SPyIfPbRzg5B2JgHJ^2@F1tg*q4K$l6K5E8C!!URE49bp+n
zM^tc?<tfcXRc(JU&RvGzMA7M-nwD+yf)qr#h;~n6ofDW~jiv|_b$y$RI>wBTClq=r
z4)<Sg_Y-5WZ;>9l^i@*DUkVARqf80XgkjBSGaJ82csouE<sA*JMq_{zn*9PY{|o4H
z-pp$A?1|)%njBY^N<LOqV*62YiSK;f#4$JFJi?99x570zXpFaIlY(3rFC0E`j>-v*
zn%eq1MSsDSuT$GKmvq+X19X5mIR{~<F+HqipX688n@VK5?A6d{P-|H=9}AFHz*=-k
zPV(B;HfEr)78f23TXfGkh8VeYkeODtx^q^>vZl@0!6_5js-JM(r~RHH!vMlE!c}J%
zLC1$4&ahn<b%W$atWCFe*t!_!<MU?PqL_}^+!?)V$KO_18G(3sHrd|MMBVa=Mg@kt
z1Ll}H98DR_0Li+xVdtbKfJyJCE$#QJP>tLT-rLwEl7sCAdRP=&N5z#8JS$2N>4VBb
zG_T<nz9io&q-eZ1=tqn}<y(J~p8{rb%ZYHSj>%BGVmdaLaJ4Olz>KP6aPoNM24epz
zvs)vg_;yo&SMXY}M5f^Yw0zGCf!=B~ZD^uC0X-cU{Qe2)wx(WtX|;9z{D(x_W7BbY
z+<~X*t9-U%WU~bRYZ`BIX8zd7q%{=Rp@uSl83J)H8K(y_^5lUGU?vRHFw}P3a#QmF
z@y);i!4d|08>$6t!o$z|1Dz+Y8&WqSjPOKf`*R&v(JRkJJ9cDbP|Uj|SHSYn1|dqE
z%v=R3<r&U{fn}reLj=JlJyaJf-RSm1hNJh#{)1syVJJ7ndu5&6(q740b5V7d<PJ|)
zAHV}MNX<k8VI_6D!~hz622xsa4jn0HU(?o64x)F{kA-B88yRbevYwCG%cxNWV`_f{
z82dafK!aVF$?EF!7-=OGFKSu5EY|E%!WD+Zkbxu2@7O7i(AhF2$U*V)aHY-BBM3dx
z^qAOO)`e4_iwkJh+@|J)S3^GATe)5lrCNaZQIR{sy<4@OU#(?TQr5ZK4MeNDtNz}T
z@a)n_QA>gG2cG=Y1Q1@0WQqrK`klFL;&l^i54(|W2JF8m@sg&@ne@hRw3ClAJN>x#
zjT|04^ZV;}$G$#?PeX(6&nY_I$%)tc4cl07-m+`f%=&D*e}VBo7>gdi*oo=`b{+nf
zmT`ph9dkO%KbO`($AaP;enoLjaYc+HuveZuPa6vS9O=<<)GvL-|BBV5duVlw7iv4G
zE{=^|Ch<iBV25durdG+r-nkdQt;5t4`gx(}-1`P|W>KI{bH#_JuFtYd_%rLc6jxMz
zwJ;#s)Qn%fwfVwFE#aAp@1vZhjNG!jH_9^3UdDDU)bz1a3|Ndz9A!{s?Hn$j)DaUT
zO6a~^bjPqc`b=oaOBmDCL!<dbdD4%>WW8w6Af-U_?C`M$HJ4}EL?=)D&R%8y^h;n|
z#!87Uk3h29J_enRyXD~pgjdiHtej|YY(;kj)Du@zRzVp+vKEa-TI_{7Xt@P4(ln!h
zvKth6ao2zD(A=C*ZzNj;Kjxl|>1|xAu2XQenOGrQl4%s=R{9}Ig|7RxjFYQSDeK`P
zz96U}imFjLp|Z#qXpJm)Y=q`2wBXqgYT4}YqmHpiavVG=fZcJ4`L?sliq{4ZBB1a@
zWnUb1(dn4Z>8Lu?qqe=Q$UmzE&mh0#I1ITo`pHSA7sA;rZgI0@%`oV7#9k6z>o{78
z{Ui%aK?#aEy>r$|7ttCqtOYA%ntkK**|F;r#^cf*Bv!)SaDT#TPrF;(?Z2mOY2Qtj
z;QeEr?T^yWC)l?e#Oj*LV?_%oFX+%d!n#6S<iUj$tQQ%qiHIwyI8ud#s#+}c!|y@8
zho{ymQG-2wru18{f9L1KnO?2glyWvwF+7WKZ|T!jdD~07Yf^N(8=1lext{|N;M4pd
zTDBelGveQpL<Xo58M+5Hpz^{_URnb0jVS>s5zw1PIsi4K&``4knd<%!&1Z*XyU2QQ
zOQ!cQz4cDNE^n9U6%s=A=XxbZSF$FSzX-gmr|iVSNMO4Po0D~L5eIVg&~kJm0{e`+
z_@D$YO~I?s>d)t)Ew#qDx&e}gWvxtKD2mH+@nCUkwh50#HIX0O%!z@BZe}e>B^iHL
zJDP%@$Ru&HpI2y%R}vfKBp*I53cVO%b8;I7^KKi0k>B<x5Q7CJvREAv!^;hSx<+Dy
z5Pq-G3N#Vz6K)4@hnsw<UZbY^+g?CgEk~{w`9CMw#S=Y~?1$Ea^`owQqr<vh!vu4J
zh+6%8EcuUJTcyuGsF--je<p%f$3$96;QdM5h~G5&4+e){4=@J%M%IDDXaZ6r(ml`C
z-1%Vo`?20cE8In(pHh_a!QmV%{xV4O{*_Lii9rP)USv6kgpS`{tt(C9U<hSJQG_y3
zI6i$L!6Q2|8Hkm2zk9>U+(09?>N^4U9=DGwkA@c(3`M*CR?+-GqC}W_flSku2DY4E
z8&cjNQ%>Q7XI?fkU2Z0#>xEbC6}cZR#>l(~yh2<l^u&xb63XpsTWKO5>c=hlF{ObR
z6XnrnP*;$Ua`r<@pe~G;tI6&bjn?c(&xd#lSg|0LTkTI@9mr)vs?~odC1BVW7bC$B
zDF)8IHT`vHLq{zk$4Ws2;c9q^kG`4OO;}Z$q;$Q8dAroTz%5RdKh~?aIPtePl|6m|
z(kefr4u8kcq1zeRhS3?N5yP!s9GA4KVxXn{MU$w64-+Np^oEV55?(;1c!?J3n+<TQ
zUf3E@*FzBU*3T$<zT$v-A?L17!I|<L24?*BkS-cQ7I@>prcdMi#jd%(pl`kwyVjXx
zY~p38muVQ4g`u9ZQK+K+O=Bj34YR^<8=DApH{v}lq^*$<;qaN$8!=~@veREjL3Q5c
z8DAP;(ajtaYRIAm)}T>ojxuP`MXGz~FS&=68krxG)?jEBMB)G7?M=g)IN$c+Acd%i
zaRmh-?r0Hdl|>O4twpL7qoSZ7q?RIJg#21SB7_Wz5EhZD6)F^>A|SFvg+N6hvPrGg
zup>dpf*bopA&g`)z88I-=fnFR&xiN_<^RR@&?7VV+}pLC*Lf}jmcB|dkv{@1X+rw|
zc#z)$I|QBU3-uu845TCEdbL-K;$f{N*(NBbCzp%o<6e&iwDRz_aQ7`;Usaf!1K1&C
z(rJ&<dOpXv&fDfxhWTohAjyLN4W<@EE7@k8s_#Zc*)g%s&%t8-M=UQ#CIT{KI1f2#
zO~%;h42Usz_7d<azC--e@C}zP%VjTz6@HH*HU2#^yhuKkTssTW^6rpM3ol|l^L2aD
zuZQR5Gg;<Ked+ZkG2`(Q;|n2aDrm}CREZ5@lW9pFP2S(zZM<`Us@@1_9<ajHK(x&o
z`4J_)oYB&2*SkS`BPQqcX=W-R%<ysiOL`-WO;*NkD1v}QP-)zh<h=SQ5se>I`PW?r
zPRr?6QJgE9#wxTa<jZkC+>P2`$<$+cJ7<R9764+N_9R2;zV#a{^I63D+n@>pn@O;M
z*CW8rgjAd>Jx<5hBO@^di8iVG{85FLxwG3=vuf#YW1$mHkl-JUnN0P2X`P)v7<`k(
zzT<b>DCPF4JtqRTQL&FeDif#`K>}V-E(2*_5KlNUfL=n%GcG#rQc;zHro=oG>-e!z
z+uqTrsiUfQNkmL3r}Sezxfna1!TYk~U3mt%$cpg|&|ghwXCzF#&+8JIA>aQ=(ID`}
z7@JNQxz;<IsA$QP?3Y<h#tvQyHcmc`4%y-aawDOq5+oM1Pxu(5?)w0J`Xmi6EX6CE
zqB<(N+VV3LLW7`8N#bPh+c>vYo08ogRTbrb=z<B5XF;WaA#En-98?OEyagklSlGC4
zJI^8*l<5W}d~_K|xtc}Rdu0j}LPKA~3A5M+oU+HY>)VOFiq{<xHO`&4R4dLHvWkbk
z8uAW!T@+|_gF3{x1Wz87;2XOy63dlobAoGUX)p84nRwdnj&L953Vg9b-1KL4pki-?
zL9kVZFIL@eiH|EK^LLd7lP3iG1xK-dQGnjx%{J+aPw(1EPn12N6N{(Ruq)5U;&D$h
zk&!HHE6mDrYl2qbGn`}JX%)eo3rTy2S*N;hb?+B-I)VxwTA#Ck-)PeDWN2Uy_PDFJ
zG4q8WZ&+HIal0>=XWqSe0;3iF+kZ@j;TFp%AfntoU;&SPIo#yUY>@DyHubMnr3)3Z
zM5ey;sv&P{{%AnFtyu`M5gS&zCWGu%UQo+EX+fg(#OT})-3?O1`~sy@sE;9aZ^xwR
zPFfaZRH4_Rd9+3o(=@O{*kd6#PIR^!l+k`_U#a4Wi~$QK7tjXntLk4&^L__HHq$2O
z1+BJbKL&-osfsb(C$8-bDXs=|%6C@l6M}a-y&HH(ECBN*06@@sXw{{sG9NG!iLWv7
z<1^{g{1jsE41CglU@+Wli&EX+pz#Ep#e8x#E`+b@u?y>S*<5tDA=j<oeZ}e+hS$Rf
z?IES1w<tvJOa;>g`ALAUl@Lp|s^4QqC7_+=t<9`<QQ0fTQiRVG(PCo;0Cp2<b%4KU
zn8hg-+KieEE19W|CXO!avzIpN9?obO@ThEin`032jSuU3Zqj2r<Ww5IMn)`2QE$Zk
zcs9H?*#kJewdRC%8nc~idseBTn{qed@h5H%RW*8D2^REreWuK-ju^0VZIA}MPCs<C
z0g&`jyz>#P)U7Tddn01}_dTegXgt&q+{9gmb-N+B*E}+*p!XC!_A}FF^EPmFA1`L^
zmPbQ#jJZC3u9#EQU~X0&RKTz6auCEiTN2yuJ;L5*#Hcl+n}$vH7nJtyz1!FGwB-5i
z-e8l^OdYr*>UN6da-i35Cg*;QeTnuoE1zUwTNMTMHU2(rw&LYrdcSZq8$fA&KqN^n
z9NpjShmBoTKHuFeSX8@~u|DZ0p61qG?Gjk<UhtB~D?4!_qVU<Bb*aDE$?1;da{=Ze
zgtIXkfn|MzztbS(-+pUV!g}G7<3pbPCaN<91L6w;S_$z@mHX5CwY4o1vLt5&OQ<Xg
zYL&S<U38dC$Z}3P8yy@I9Edu-5Ja2(Nxe?K1TJQAZ@YRn7_B(MM{|^X(Z3or5*TJf
znK^ugc(FwiNyn!e+J~c#i1J=fI~SF3x2o6|%f}5*Ri4Q}fn$1n(W^mY-kOSg-4+<(
z{fD1<H-toFiTDR*?`|L!t<t7B>!h6%-zyl=s+#3*($0-euoI9aq}_}@yAny^(rz-D
zLH(u=J13$gQi=R|V^zeZ41abWhv|dzGq<Vi<4@Z#7v_y8`geLXM%|&lu_uhn)W5^2
zZUthY%EuBu)VUcw?;fLNfeovKL;bdRv_c%$RpHH#<+289==*D1Zg<-P^ZrZXM|@yO
z&R1ABpV)i%XmBn4YE#sjp7*sYYdT!{`92>DzoItMXN%==2<9ogB$!7mRmCZUBVkHF
z$O5?5eQtLnIlogho(M+YQSZ*Mxp{|u#r5Je0}k*ndBqbxCklqte`ltrh84a)b8y(f
zwlkqJFRNtD!TU9TQa;(M>tN6*B+BmDCvw**1X7tiFv*!VWWJ-d)K*6A_d8X)RK-r<
zx&#Kq*a-@Kf^)WF^TkTxZ1>W^txfZ)x)YE}<Hk&@gaT0REWH+(ho|hS?w~ktzcD|p
zj@+!WhOo#8_i4_V*JbUvV}SMrp7yOOGTw1lfkX41Ais53e*vrby?4{aOIKF=1!v}E
zmyDKGITW|-Iks$8xsKK;h>1mJ0IBcZR-2eFAuAU+;;W3-g7nvfMz&~JY*71E?=WxG
zqX*^5(s#$ZR$|?wI*Rf6yYHTA|8{Enf`k6Ko9{38z1o-QnU;Ta_NE&Yf(_q$5v|)V
z4h9oUZ9)u*1KQi6#L|K^U7W`-<QTxLHXt+^9tQt&zFgBD;4HRF4J>8VTB@A-^OQ0B
z>Sc$!ZLJq_ihLhk;gpP=UI#?+JNC70q9BfUbY*CO0G7g>Tu8PeRNiXdGk#-<<{O}9
zbFh)k9)(;*f=ZYqVlQX@9iF{oSDT|r)yW6_oBmYI7H8~c8>U(uba?G>p(^m@JB?TR
zW4a82Y-_?S8_;3ZT1Z7;MHp04zBh_RE-~;8=?`Ji&1b|rb4_5d2n&t(Ta}`2>9QTC
zaaUtgkJ<A$KLo3J%iE=I-+rv)&Bj>;K0~#u;tpbKbNwEv=Eo_=aW_W~kYaJ~3gxoG
z2Ao2l9n3iXhprU;-?9oE#t0BGF7a0{hqqnDtsf(0Y4yy7KD<}vhN?GH4RgrZARhMX
zu&1Ae=JeALFqn9oO{dLstJ-D54&PEey2w?*<X3R6`Q>6N5M;PpDnYrWr<e1fLszo_
zu4K5f;>yH>#)A6@xs(SDI)mq1s4A5Lh;it|k{xRBY|mfi`f1AvpF%7CXxv?v^IFWf
zIZYpE+afwk<BEgRuLOBpP1PgIITnl>tiLFa<6l4Um|V~v9%8+x%f{VfH?UxUW<>av
zM#cs(@WdWHm_w`2lv}Gb^I(6K&oF+re!Y`^0k8o+nv-yc9!5_|j0zeg06AADX!B~n
z8p_#(XAI2QL`&e>huHk;BPnJ{$(oX(shnjP{rtqyLmSFR9o&69S|$obmf6Pj(}<vW
zsLJ_zl#aT;1WFP^Xx&K|&Y>=F4^yL9?qAk_JXFQsi#KU@u%x#u)OH_y8Rl6x-=oG6
zhOA>9=G(5Hp2#+@*BtH$op&ZGCj0rT)}3;CidThKRlsO})*Y#D@N|M8;^zSLL^Rtf
zZ}i&e?GnAtyuRY0tG&KH4AX|6*<04$`#W_-a%u5~Sy0&d-0|PV_n%<CPor<<%I@>E
zue?YRznS^*GiB%o?S@!hA^wmg>6MVrr<$144)w9yX!uGhadTL01}#%(l`^dleL;|}
z1d+cU|MX4eO#0%?@MlWN3CxoCOqqVKJCcU49Vc=DJOqzC$<{caLwB(n3J>n3x)$*V
zz9dzqK3Mw&I@E!U!<<jHP>0e$D2M!>rd|QrS!eBa_)9nZ%h(y^n=#p^Jr)gYjiWGL
zJY7gS9-vN$urhKlzadStfLQgJaz~xLlm5(=FrV|8vVN5YB8wg+4yN<)yC-ugWI1&D
z&D5p-Kwej%b<4yfst82u#?v`Koh;Z%ub(2!Q3yf>*nax7T3d=vut%Qnq&LL>TmBjg
zBuoQ7Q#KZAFCt?~@#Iy~0eX`jK!w#yi2mJYJ{JbN0}^AMh!XmPXFB8Z!J5C8eR5~~
z&!iL!F!+pl?}4`s2C?Ha<+TP0Mm07iuAeDh#`Sk0LG!H?{#e1lzf2=;gFfU^fP@J(
z2hgEGRUU=A^nWUc^!E^m>+?QS{<a~vp*<hDZtz~J20A_`tTim)#?6F`jQX^|Ts(OM
zFO5Z-?*3ODoi;g>JD89D4KsBD)vV1BO#gvb#X4Rk=kNba`OT8o^O-UgDxU75&k{>M
zQ{b0>hr%zR)eC*;MSh>6-Uc7(sm&2j9^!lxiwFd`qb_+c7c?g&X$k>(hb{GvMV?Q`
z+7l4`tZ_{M3>K0Lr}v387J0QN7P%tEw=>E8Aha9|AC?4|g`p?f^gFuK9XDvND@g;`
zAsdgv)SQKtu}RZHb$ZQzZKCP68?=vg@GnisYc(1m)7T2M!%WzBpA7%4tdSRCuDfWT
z+|t0#Xx7k8#gj&tVv%-rEb^PI$CC8ygztu}*>e%s{Y*I^#w}8z#(Y?ZNJr~7qi_6W
z_@+v2Qp#saAzGjLU;D%cexU<13{;*9c&20TxHd@GJ2w_7u7U|M67>3z3=6dgCL|Mw
zaThU~4$lyaqPJX$<$bXEwrb#(>UrrqbB-YNrgwHX(mpL9LZEz_mV`_^kKRfD2O&%h
zKT|gRgTt}}id3*84rh!2GNBf&Y$kpejuya)xvtp*kH}HMfG<KJ7Qh(-EF_J%>7)MY
zGv!h8XG+&Se3(SFhjoUSn4j#^x5lH-0Si(Izv@hp&+MtSGp&i*D`NTY^be`lxJ8=w
zcgaY`XUbigLQCNRo}#Xk`5}o7d#&dTZuyx~5CW@s8ue#?va#;*AfG>yv&kZw0Z5?N
zKsb92g-r(m2JAYRBG`4`gY2Sv0s5D7Gg&<<p7<VecCqlx0rW$V?17i|k27#6?mlC}
z0`~m7Rx|7nFB$ksdm<kIIdF+wR-)P?wN8K#D28p&tcG>E_7IXn0Mj{H3p=ipp#h?T
zNjTU~122f*gwBAG)Pde8d6&ljO-CCHMOc{Xx~Jj~nSx$~9PR#0IflrOP<YE*{*A)*
ze@35n@w&xoHqRKImR4|pIz9gY6_>(~AUFSJod7#9u5o5d;fG%D(%$PTGAW-s|Lbae
zIkWK%^1wEH0sA3}SosjAVfM|=3%i|{S|nOS&?uQhcw(aFOQVi@XN#Y$>lgdWw=;d(
zH#^!Zw5Vq~y6_awwBlO%RzSf8Hm093ijpNcy2lj9o)K5jh!t=U^;T*tob@<a>Igh<
zfWgl(!r24Ssg9g3dOS~$tv_6A*=qC2?@jfZBG#4RsHQgD$D_t)M-6*_d;A4yeQ-;#
z*HqYh`^+a-L3<fcIOg04Sfv$%;`@>D<>N0?6qOBWrsO}KybUTxbY29K){d`lI8a`G
zWo)~sW`}~vu~x}0*hb6vEqJo8Cu`%a^4c~<_n71E-~#6C8_||K=lhTb?gJ=DUmnq>
z1-2t>F`q}lkP%VjfMBk`ypPb&s_U+BxKzL{^mz`c|Ku`!#}o3a+6wF!ye>St#>C0n
z3EBBj^~&66tDEyfwqjx@?S*v@q(;}kl&15V(OJZD%?@IRO42aCjBvsuzmPJ|`6wml
z-l!^*xL+%NQA~{MALS&ns*X$mx5D^%NVRqTsgs|G?YT9T2@@$<%z1+*MyY`PWsbgs
z`K;5{!fkL%Y!J>qFEA%U<XQ{GnJnlFIdT_A6p<H<>+H;Jy22-pw9ubaT6lDdtl0ap
zj^|-_f~FVLh*~b)51aq6aIh-<{!RSHsa+KE0z54TSpZbQMd-_JxvlUqEgqR&?Tc+`
zuk-X2&$gANRU)(rhy%Ns^R0RYFm9NOGA)rbQhm|COw?-hqPx!6JN?(xpB1yiJ<A?e
zx5sBU#PT4^R~K1*0>=Bi8}QW2+TktvwX-qdIdXPEs_hQY2IrapMxN`?>AW`o^3O{z
z)b6OpPzcgP9ghVn2Dv+H4Mg46ry1%1Ny^FA(Lna-_8%!9=y3upOaO|C^6q-sEaJ;D
z6)5!5;ku;}J5DHkEt|xPYfUR5S9ACM^f#u!j+fh5(Z8~d-WUZ`EbH>qr`5T^n`?@j
z0*rEj>i1apScKJ&gf5WJZJ-lNo7E7_p8vfG(|o7Rb7bGFyx?pii7w>$E5;jyw8}Wg
zCFF*VbT?Moa`5xK6LNnR;t#B>UL@T<<z4cogJ;$j*lAV0opoEB<mj>aPaSO_S0BF$
zyY;lVjvZf;N0{Qvm4?>j0``1EYahJtEY{AzYwivf<v*@4mMyZ1kR*H0e?-5y+3Jfe
zthCbiYLnO9C7Y%jEe@p*f&@2>G)PnFk_Ky?H}fRYZeodWA0q)IIm=n2Z24mD%G$OO
zo@sFAXntkLSs@Ox>{I6mH>Kq^=MCP+d+<>ALvKW{yC+JvJgfgG^*P%6Y{eACY@83v
zG9<(;jrcd-XRebZlDc^MJJ&XwzRd%Tek*aOC7Eimvmns$c2!r!v}<B{>c+_!&+oi7
zhhnzwZJSV6=lBE9m(Mb2;~@&QwTS#SB7$D-ED&X>UCZk*w-<G<2U(5RPzVEZ(-;Sa
zA+ZBHk~-4T$Lh{8!!rH)y`{tbmer#Bf2x>?W9zHBBVJBGh9$Cc{1%7V;BfL+9W0e{
zhDmca=L{$%mw=YOT~QDpAzlIgRkO((egd&hVLkuo^Fme>`LOUsh1#1Z2%J^+bkhSn
z-`>+-ee>Y>aW}*2Eq?>QK3z2rA&j<?spEAB&La)bkD;jG-A?)+wO?Vzqe93LKnWT|
zHP^OR`)C}Xtf&{^ZrN<Us54~q=$O@bc;6n=-X)zjPAvDFj}19a_*v!Xw&DJTs(E%9
z-eS-+&D*OK>ano?oe`s}b|S|iF13W%OGXgn3pyUS`7`BH*$vt=12O((;HWT06Aq?a
zZ;3$JDI;u3Dr(GcvhFsYyo`U-U9XZl|0*^JAy!^7_yYftyL~MbV;X#j;jHar5k4jR
z*-Ku%;>15jJpT7LJWi9+2Bw<Qq!|OQjfj*wkdY!J!c-p01hGXT*GK8JQ&Es@6%yXJ
z6)2RLuYxnF{BSpDxXfAJGSX$WV;5vbK)d4ff}_D|Y$Y|dg*t3OEX-oU!AJ#V@F(qK
zK(!xbQ@aN5{aK#2*c&g})!DuuF%((zzfb=#v{$vqH}X(xH4?1Q#DrSS9p3Y(Llk58
zlPcWd3-6F;e&449QJAl{urUqakr!UGH$(0^a@D{peqfW-GY>oS?r>6k^@Y9py>6<6
zG0T*RZLDqU%BwE<oLj+WZz<dJnBLS}$9Tz9YhXBhUI((Q)(odB&@|`uyw=RXq-vH@
zEY&@v8l9|62(8{au(x{mUAmDk*8>tKV-u;?-^}#$z3wdTW^}P{bWW!JvI9Ro@{VQM
zEuv_0eZc=Z3CH2SiFs<#@Gs<Z(yZgh)`@4@L+;48csCa9)x~aSh|)(#CQ{c+o?P)A
zipp+l{NY~v=)p1T&>YL4gSW3i#5!A)ZR&-M3Gd=)qlstUP1dwgUQ8}4YJHi1ME<F1
zJ7K=BTR>s3cWGAi662~fc?EuTwt17OuNL%q`|h@?X*~GM^j7T27OISSpGGV;R?oP0
zNyqV4Bmjx)cHYrOnl}XXZ&K|M3h~G~=LPNT@%~i-H(Zq{sBPJ$#VFmf&YB)DF^uo*
z%A0?E@sP0{CM^d70(D>$4Y#)>=f1%*6yqti>+lqHkf_Us_Qm@Q-pa1<&y-ojey9Y>
zj3oI-H(Z&VK&Tv##%W=aqf2B6`>n5C)~(=5>BW{^8!JTDI}gS>{|4hS#2=9c=WgKi
zfmA;5EY$H#RpPpb)n2#zaP_kRT|Bf`5t^m488rIpd4#-IvJ7avJvR<$#B&SyKdMqI
z&Y@wE2tTCS)H-q0F^fI#pICY!QYmOeaEFsjD8qEnO==f&%`rjUuwd3HBiRygM`OL1
zv<P~#9i29|u9Dx>ygROez6glmmQ4(&8jhE6k3{CaZ|{GJABqVb+mW&~e!S!{a-IHC
zNX~|sLJ!=<^XG8mMr1L1l5yUm384}8CC!Sbgs+lqjPF*clZsfp@5}sNa!vt3XjfwG
zx~r~7mF}VL%lvlbF(Lz5XE)hzoqb2QQydH~9@rscH3Q$Fl%>&)(ZIxZMP=-$*CExV
zB6%7e_z^beDxMognnDLw4juDKv@Hpx83whk@x|kOH9GC#X4?ZgCZn^Q9Qxmmt)w;Y
z12<L!4%7K>a8PUA4F>Z^pk4#nA$9{Zq2FG6eN(lIGKjZyNL)UToP7^k9n$}-$U4-{
zokxO?69=5Re52`+s@qlTTFb=kxt*oJ-ny^jlE9yR;s>2~V$54?3O2bRs&eFFCUaDS
zY3j`NwdrHk5sC`cbIIe4)$7jQ9?Gn#(N@>ay^lW%lM78bwQ5<N3NH?hjMA(9vkFZp
zC8DVb>wfFwTxxEZ^-A|cff`Kjd58_`4ghKxiG!YQ6~<R{_Bxy3LsT(nMGmCVIW)zK
zn@V@%*LJ+MZRIpmPMk~E7<X&&9_728-A%FWw!^bB(=UgeEpTT?ZlGrHq$uVpoH59Y
zHIKb%O>}9XJQ{59yF}Xx>^09CYfd3nsi@z!PUc_Qc=|M#5h*WW`Iwu81pafyYEewU
z=@OA!kx$l+y{{j+K>J9(^-BXKkO*$1jYMNcGC)D07eKG+>kv81lpSv})!ZxOOVP$&
z8NcF#yYYoRg|sAcEr;2-D5y(na?Bh5X56z?@$eD$n}b#TE5FBB|2~~h5J~9`s3Hkt
znjdt_eA7VAjg$-Lap>|!zppw&34>tlEU`5Vd**>>+OS@RlyU>l%7IG&uWG@EB=v2a
zE7nvWR%J!T!XSIUEg8E+oVVR?ZqVNHVl71WtKYurS>7biSsWDd{rT6&la@RV`G;Av
zIO)vU^+^BOtTWul;NR<V7yav5ggnJi#Z}lO`n*}Js<Rl9AO^kmi;;qP5WFN$=Own4
zxMWW?`Z)P0)8mSE4VY$~SW<=0=+$|KxRkE#81=7Zo!d#50Is;83ATt;pgLZg#RS3>
z#dAg-eL?vnTY>tAHd5~?Bot?Jd7G{_R(TAW6f|T(cFP-hX}*;i-|qeai#la>qWGz@
z_lO8PB<=P7HoRdQb;3i=PC~KB<K!HS+s<8}{e5zI9#+YJopC_*k65pqY0CU=+CA6l
z-9?*dT5^=$rK`%U{PpO9;0kY}lwkiNr@oTfs|C9k9eb=pyg~t{4>m~eMkgA|>`_mt
z<*i(%f+j^=GU}`~Yl2Yy0T9PbMH+LPOw9VPp_mDK)~TG8t&>Pnq+o$p!vjwGX9}Zp
zl4+LBqfrMP{<!yknsIL88HF|&?TSNTf*M|XId2CsM|;)cWc%r31zonZxb)0wXgyxM
zxrjx3Vz41Zv~i9shP^cV_J3Yo_rKKj#lb}s)RK-JK@Fgd3X%x)UQGkjP#ntSo3Dgh
z`&8Pp_t4;$QBO;7rnDDN()Im79OEPU;I#8X7e$HN@fPdyteP{vp^)E}rskCKLb!V(
zrn-eCYucrz6q+A6+~7XT?+Yf_yg87qox;FEWrab;z=1+^sK$xKLiKYzMB@$RjeGBs
zNnOs1UiEd==7NGjaw&e+pJjBH>l1i)_t`L(GR=S`4X-q(15heG>g4?xbijS92Y~J_
z2j76O$mbALc`ihI`>dq3iSYzF=oSF)$dp__AgG@BQ^gIMgh3ld0e7(QqxvQP;3dgX
z+)U%n)$e{&DQ>e33YqjZV77{u&GV}A%QdV17*x9*g1nOXCtV)33-j-F+VuV&;k4M}
zLFcBC2!oZhE(V^gA?H?prXWZepIrV-OrCzPJAk~jS6_qMq?mxr&-rXOjSKIo^D0$F
z6T3H3`3JeSlZZGQrFzBL+Q<X8)wW{WY+YqdX>N1@2iXU>GL0LJ`d&K!vd}Ns*$6xG
zHV*5T)U^fmuWE6e-?fw86$wnm_znS?NFRv+OP_WDA*O?LaU~uG+X}Ly=aYDk#g$B8
zIH7r{(4+~vwEbu|)I7z~#V)w`mWXiP+!+xq-r?Em7_Bgr`esRk9ZG7mia3X4d&qy<
z%h$C{{DeKN#FTj#<@8(jVk`m>*}Sp8$J(sC)KTquRiZyD(+)hq?VhNgKo@@7hZaBl
z?uUQ+e74RhA-e-3L*Cx{q;7AjwV)8y+Dl@2p`fB*WV>oW$sApZ`71^JHwU0Z7E<zx
z2#!<QcsXywx|?eJk9S#D@3l^LjLwxYcS@Ttf*oIUs;czSZBC7~RrTHiUzYRgGQNic
zlFVh~56S8I(^G`mG5BKtu5zb9*K(EdW42-6De3;)d>>BAE_^#x{Wk7rG|;x#p(|A@
zQkn(2l3i`Dud&O=M?>gG+Ic-+AffH-5^nFYortB_ABwNK>Ta05OmN7Rn~<`CSX*%l
z`DM!?#&SR?36r^AdGDoMQ0<u9k>nytsy;iA>Rtat)0DHZV}8M%CRXI#<E+e{@-ACs
zb9h<Jp9g3Uxp39!OVK(eR}U`DMR@mNZRSLYmpfLPa%WhYkgc#zVH!C4C|S>(w)BjZ
z{?JnW^$i?yZ9d(T_6h4X>#yDJ@f|XLpfqqhn;#AmW5Dq72|oCgRs^0a6T4R~=n+22
zTw%T#zigEXA_`{QZ?Sj8dh>aV#e+MnO1LL(4=(BtuH?~GKeQj2a5|*fCobbNp~Xw2
zT9;k|@=jKE=XIuxn*e3DT}I9=fkG7s&>Q=5h82Oao2sJ~y@2l@@&h~p_LgD5-Pt-(
z;*C5Q5`rw_bEVZGrr}U`X4tDi43BfKNbzm;9CLSTsJfIU^a-x2`IQQkxzvAex+g8Q
zD~OPLFtz?1i~9a;xTVF#@<(D5De)sZ&zrDocV2Io8ocxsIj361PbSttUUW|0y99r1
zgttZ1GR|HXW7J#sVL1K%-JmP?sDl7sTRdY1SJ{t5sD^q6#Pw+xoEPC15up9UO!1z2
zY$@PR^Bap0z87tYpS9cUYHJm}$$2GzS5=Et-TlNX%J1^puKq<?-s!BY9WH-9Ow|39
zt4%?{)4>if;gcUbj5i@Y0(lrGO9Aw+Y4hzbIv#`q^lYwEt8K~2ZEvDA)&_lew@)iI
zNqqle@chc3Z{@uy&4~P&9T4H*xAk$XdA8<zv`!z9-(f!Rs*^1t&f;|%$F-=TBW+1!
z?N^=E3kSw^h&^Jg|01^`Lh0_a>%W|;?goc_7J|~@Cyj%dORqa5l!OHqG&%jV(@1<m
zh;JSzmY9-rrmzz;Xy|kOTQKJ`thAZgS-o2!FeDCQ+*(`47ZTyCXN4>&JFaw3*=@<K
z_a;v&e?F_U>@ze8*~Urn=&~&e3K^fQ@nf|Zj?bXpX8gz$-YamLCnY_-%JGZN=6Iw+
z0ICyTPCYSV8gLg|$JsKB2B#gLpAAuDM;?g@^U54(SbQqQ|E_HC%(Ec&*hIFo<)ft2
zMq_`!*S(;<hR74>m<PSrUj8;kH7sX8-Vi}cFkfFIF2|nK4A5tssMq~#E88y~l#~QT
zF)k9jb5B)e@B<!R@o_VYGS~{78g`NQdyc=Tcrl^#jO?LfduaHEf)P`!RyKeDj%!^x
zEy22^2S*R8_!o#7J@mv(uY^g%ecz2vq^nNn%<d93W3_@J*>nA?c|%pwW5F3!ozK%#
z4SP>T#iy1$hTQuMa0@>NwsMCzuL;pB7N2A$&<(4DHI7H$Gk?N2mXNKL&U5ao+PQWq
zfy8RHw<)JvX?%fTL}P6YjIVpSTOZc87qs8PehH3>jJIaiRXCehiYVaj8e|V3xHYc~
z;GlNxQ0MFa0*gF{2A*|{`T0MH!bN;R=(whs^S1v<AJ>-N<RjC^A3fRHYp~&D=Q_+O
zy(}y*sC)YMwCJxmk1m^<)$W^gCoI*AaY$}Z_cv))bM^R;E@H>^Z^B*Kax3Rv1wYZ*
zxsU7AUi;;cxlU!~TlyUP#1OczEP!?|dYjGK`y#BVzbtpx9VULraFJRW{Z=qK^#lEy
z0P_Q>w>tLZxE?Wo=4|HRTN}vP_;y;dElW&!$)%(7UvW2d)UG%Da(Y=Q5pY%xBoUSS
zuPT=o#0wf1;10cwUh1ieTGNNB-)fhaFYx2!2k%7u(Ev#j9Xk`odjUg66{gVoo7UuP
z%9s^&nG@ECl>5pWG_*?&V!opCL%EwIsRb7**$ITNb@J`DwiYH67w@T1@$MQ~F`Bl>
zIOjnGZ*wd{L*>=AP!BpU!Q&3$#<2bM_F#a|6zEEiu`-akHfiye06#PA$4i6XrZk$Q
z7Zq}LG&+BI?-Blc)wgHT@4dwN-WtCQMZi`((Ct3|n99BX4s=!>(9cP^HEh1N%SJFC
zj|Aup003Fj*$F8(p(q*ORaDIKeo`2*^wRa)gAM@~J^F_na&n^`jm{Vu{l`7xY=n)c
zTD8|E@uH6A;VlRp%9z;ER5q}j{w{{-dwy{1&~(V90&_tL_cZQwd)R0r%39jiGbHtu
zr7jwG?<h$>XgC@F_qwL+HaGT`;>+7^(Eb_k-KwT(3xTecmShrHFOe1~PUd0*ja6@x
zXo=OfoT`LtN@Olx^c}i!b0`3$;5GdqJJj{MEi})~@Rt|O2d_-I)CAq^2q}s0%zZ`S
z#_gnkLp}usae6M<#?%urdJL;iA;HmfdQb*kpWo1H+rd3zeesIFdYhF^&yA{fk(1rq
zSFh@nPWFDHDy;UVqA(&FS=!4`Je)jwTvziFAo8iOvfyg8>Vk2{e#T&L0$KxI$E<ia
zx*b;Lpf(3CzD2w?M8vC6N&s&_tFK{v+sU=qmMpc_4>H$Je&*2@&YsWx>R$V1A$QGP
z?!xW~_uY-tM!Eh9&2zV1s-$kma7T}`#he0PRchZ$suWc%og$X9Ngf(VBerIsL{AH~
zQT*WDDA)=;7i}Rp8Gg&P`DmaS+K4PfLm7#@4LQ-AO(mPU>pVF2BL{<{1m~+gZlCfx
zzzN)q({JI2Ok+%@4NsC!ns>EZZHn*-IoS@fhiCqbrFXsiAOFhY|K(q~XhoC2C-1E-
z;yIiWR0s(R1I<A{&d@X?rIouoLD}2rS*7fiHs>Gn@pen`v7UVt54Leb_-7pE7F^iG
zqwi9rF!WrFFRW?-b>HJqTCv7grzN8DJknfSG6p;5{E7D{c9rmagi#Yqs$&%3GHlKO
zu(aR+X7c!?7k>R`rIp7w*yIJzs1fgo?hDqNBWkP<vzIgn6bxQ{)hipy48f_Bd?h^z
z!6Ltp(to&`YoPtD#MdUqz3p8?w@iP0Qgg;<W3uGt%U4{`Ef|kTOk5P4es!=Ld*xUB
z)w6)`OD)@|pQed}5An-qRa=!-vL}1FOr&X8Xogq4Qx?PN@HxUZf38}ME;zLaS29g2
z9(|@Pu26AvEMg84`=rf;`~C;r1rR~IZE2y-*-8K0^>1}%*1xq$Z}k6XK^khW|6R_6
zS-~v?#P9SG*jXoIX3E4v85mTImZEiif)5u#F<X6>X@E?65NDxo6>wwDC_3;~Mm~a+
zWG<wzUggIk$u!*Y8M#+DLYo1_jp}};<kRAp=n%#SW(4|paM<b=AaCGyxrb^qvJHR<
zzY6G>N=Koel17+=KfQ4iPKUQ|#UPR4^=@?QPWs;=|I-+X9tZtpln?}tf=xMj?GB7j
zi67ZXf1fo|1S1x($wTkpxIj&+r+r8~-GY`w&#ZU24*3-mDu)8EnaW{c;J=ka1yl~X
z*WsrSE9t}edin?1DOQJ>M3Q%9bD;3uDf~?N%K$>vd;4>NT_6k!+Rgt*#pPwFyi@Y&
z+cdCyBNfEy&y<ejwpipaL}oCE52;W&h=hXU%#pfFYo5>{?aC<-pvz!>sK}cI@LsX@
zikn2cpX<BRd@p>I1^V|=F+4_7$<(rF=ML*kQHe$G$b$l~t{<S>O4mYWZPJCaC>Hq&
zl@FqyzGXDZG?p@0fl1p0XeLEZFh6avemOus_fbbd!EdhuO8-1mj?q5tNvlIN&PW0}
zeN!BK3Y--CA&LwuAX3duVIX806hBR8{`zMV3b_xy;0^l8L5Qy^(B`a%Em>r$_P#+I
zJ_LnqXr*f=^887|w=kl{Hgqx<{Rz5&%kSuZvVtR*1%>0MGRzgxSZqay7^=ImNXeHJ
z@({|h{^Y|X=fGWea>u~9c9&Rw(?$oB<fxyxXk8o3R|c9SQ-4=WMTZu$p%ogoj3*Nd
z94Bs<4e((a8^v0tpv;zn=1x-3%V~tMD|tw!IfM3`dI%HGYADzFv||P(preIzUUwb&
zum=9K6IO<$%@R+v&J3ht24XPZJ(AoVCDF!5(6yH7v0LuwYFCTpE$mNw0>N+BI0=(v
z)3?Qe`zYFvP_=m7goYp*8;R5&D%4XKp)uc;G-Lx};2Z9GDBu>UB%djs^K+q31I3P5
zf7;_kEU_g2DNyIY?0-Gr0PkDjJyU}|gUI<%YG%INP5$KvIfa7MQ?ZWF=(zv?13tK;
zJI2P>Q;A##IcH$zjA+)OLva`!tN*LjYMKy{3z#2xviru`>~|v&#T8}M!6AF`n+{<F
z^ZJ(g!2|grO|y`P0LTGQLq{m+5@?l}13Oh8KB<n^AW$E2WWdg^Y%bR!MZf8gr^Q%g
zAaVPnqEdTZST6zej5(kff^X0Utx3a~d3X>+SA$GDJkXl|9=ei){u@X#{=Wf9G)o{-
z-zI)NjId-HdokQHL(T25mQ;YBgrNT(z$=oO11PYcIe<kU;Q(UK0r~Ua67W*%mq58;
zsfmHFaj7*tPVn%ra|v6FQGcDg`woX)4=f@QCG;-X(Gw%1Hnkt)q#eM_O4H=yOZ$d_
z!fovS7yV`(gv(kxZ=0NT<(-66zTXgdVUCQzTuLNT!6!^hz?3f0@@sWCx$0l>RDUd5
zNox?!dNnvY@H;slL<G$@s4OmU5#EPhB-Pf}xY2nI7IvKD<<>D@;9t@gRB2L?ce}KR
zUF;XUSMeP2>ni_&mMIQkL$4dO52!cc9>LgdP#(({F@Wu;J;K-ZXq%%&3D+5SSDE+j
zuIlvOXloFoKcx(eB~IK8igIuICxjdB^yRc<kNcjX&y<77b=DCEy(zKt#--h)fiVo%
zT>H>@SwWpp%2HqLbd1KDHK!UHjd`@TYARN#=*lQQm3jDl%w`5$UiD>|Yg{SUm6hLD
z92K9CRVukNSdp1sQ(C|dHUdcfFR^qV@-GAng~7(D|G}wpq168IG`nt`Z?1!1W^XQ$
zTOt?x?Ns!5$72ALySl91@#g@A*5Gl!)s<)UwQHTZr17J!P@6|ubZ-KE(ctvyTB9!R
zjuO^Nb2k|33@Tv>ub+vz%i<mA&9u~M*9IUPwCt#MHIBCx8xt#3yh3F!Q)k%w{2uPM
z9Q%9STq}i{zk7T2k!{uO6Cu%zc9E~Xq2J$5#vp7H!enBp8Hqc;CgC=nA!;f@%b4{j
zmAepk0cC?I`vx|DI;fRPzs2DzAOn%;Rkc24#U(X}dnfT$aqU%%<aKT39q5BWlZdV|
zr~JzWP3-)^``#~oe0m#o<gyCrps`eAFzDF#ISVn#Xn;!Ni3=10U65dqBoMYN1)bkd
z!A2{}&a%~eZL>xfD?sCh4t=WCMj=l5g2Lf5RjFgwgCo(90tRdT&8Q5(YjsfWE_-m{
z>5n@PJbdNj7}C65@_kqiAVYw-Pe=O)Dj)rhH-~GP_O155^A{Xl7v?NHOhd0jOv2Fw
zuzO7cgJ4(p*ug4`Mk}9V+6*GPxQ|m>|5u%UX_e$+g!ad-H-7DhYgzba;DVbeGACh7
z(!lH%7x+yk((sM0X(6=;i)Y&!TJ3}xc;PMqxlb`L3*G|X%5tDZQ;Zwn){1uxEL;4V
z)!Unj?#|sfptO#+ix~5Eh1?y&j;*Um*BPC$KymJ<{I1CqKiu$_&y+(jlr?Da`zpVp
zXa!>t_n7M2oYfF@<@)RON%*2qj<%Sjk+&j-<&qiL9^u;JxV!XyYD~!XHc{&S$92)$
zsILJqYeCMrsX2_+Z6Vil0u{nhTSdttodF?juaZf@Atxcto=PN5apm9jJ}mZv9!_*)
zWYzwp|464Uu!WmK9FHja7;fzmC96QH%kxT8HKJr1o|^uP`gn;>Cx_nb{52jpKr`g-
z0*Txhb{%gUcBaf<NuLXvoKdMSu9m(x>A&vq>g7<BUvA)9FQZD&_SIE;O)p-|P1qBD
zgC>>XNq{YJg|5tV!4Pe$G}h?HbRbt|N}1|g_$SSeT%T^<cCrm!B$6ZxmN>fTWy5eM
z?@SCYD+zzT-ONU748)LbR@M!*%Ud=%_Pj1@;cf@f85dDgXWu`bd&AC#ZMtEux0CL|
z`x|*6euDNg24oH3Gl}KK3GI#IMZDERsR0EpkzrcFt)M91KejMg{g$ddMQ@Iy0Z?5x
z`PSI`No9;#O`o(!T2p)dMBz}SkweH!>i9e28@TfIzWq$ODN(yX?pdg!eWv`;N#VH?
zJ79MoCVT0Nkx=16w9a9|I{ueqWSg@=r^pgDd&%<3e^ytkk5ya?E;w}+LTcBP6BSh=
zP^62##e$fNizt1fqbpPa;$*Hx0e-02ySw^`Vsy<RiuOM+NibXTJA#Sr<X>Vuf?V~P
z@-g#YY1<^o-O0+Rz;U4f<O92j4o27Cvl9uF^%^LQvIjzpm3{A0#%$(r4dmAIf>YRm
zCG@2A<KN<Oa>-K8Zm*89YQ#7`u%g8=_%_Zz(#f?{S{uaN?JO1zgQzawQwwk``53=V
zWXtR=Qtzv=D(Jsc*2cBRqW5=(KCSr8AY|)-t7@bz_kM?k#orIAV;Jsktn}oQ;<Cf`
z(C)RBj)8A?0mY697LomQvkAt_v?n<hxSPhEV@reuYrHrE%285aeSX652M+&eyC~Ii
zARZbmw-0FPO*vb;9AoqgS&EwVY$|jCA=s5&5XF6ezIiV;p6ti~E}Fgl4%$Bu`B)*b
zcwqJ#Z6$J&vEZqFeD$tHK{LJVh8&M4(t)S9`)&=I(^M|qBPH@8wjo|{=*LY2B0SD{
zR(~L9y1Xm%LjU>}|H=^04&6^wEkse*m=#mRl7a!`3Cb7DCANp;<LwHw=aW;-pdB36
z<+w}XLz}~q9PAc3*;d;QIPGz#HTtbb7TS)6xv93I{;z_jOm3HP(8kE9;&gFO_n`yS
zK`JD#JJ|S_?DN&jl|p0bao%%s$Di1fb9aYZIa?pg7CZW)1IQA)YXMf{YI=OJtuVns
z{~9!}uU;IIceH=l;k13mmE9rgJN<`kbQ<BFo=t)!ste}&mvE!NO+Ei3_h7rTKJMmH
z*;dZHXucK)-*7hM;^suqmdBLN31=Gg;9gHq8gD}{lVDV|udWqm9c^`7l96MAb$9?N
zr^+sgp3L2G8~<Hb-L5X3xkE>eA%V1u&jx7HZuwLbeYWtN?RD-kOrz$uk!GC80VJ9D
z`ipPa3xb(65zUbIoM~9?ZufBgWwY0Ddoanx3GpKQ(hEx=jT0sF>5A~Nq8_4<uBbnP
zZ=4#10O$*%o$$})J!P6tqVZL<G~ww<WC{KYIu|!+t~C*Nj{M+uG~y9T<9>$;Qzk+z
zjz@1O8QDCUz4}RmhxneT?0)T|KSd8j2^88b(hepg8g^^3pxnM*vK&O_3pB@uq67_+
zL~pnE&em<!+p#ivTEi&AvvqyuMz)O*-v@-&c9=MM<h1Qt{zz0wMRtkQ_3q$RpdL+r
zHCS1BrjkO>6=S>Uae%QLUq*tzyNC<t{tE>@4D_9XvL;DdNbyVJmy~*w?hAzPK$fZH
zO{H5}e3kV@=SAET58Ga(&YKRXOr1=%U|^+}ONZ>ET=>0?d+*}xBXJEk=)N%K13VqH
z?)fxx#6y*GRC`ApEKCrXfS#)Hz7$WqRW1a*E6h25U^h11_|#5Z${Li*V(D{;y~SMn
zmJ+_2-)OZ((rBz+zzMZ{9@$v6mNWuxg5B;E;(IN`X7cm&N@!eS$jitUR6kstU~YgP
ziBuXg8giDZ=ua3+LEF?E`LiYTWPA1QLVR_*3&u_fjX-Jd9r|jz`PP$zZ4K^M8_$^3
z@(UO-cY;hNOoFIB8WvjjNCx=Hmp;%62F>yGq;vt58;!lIi=000Y)7Y7hbXO=aQOA0
zJioRgWx&k;I~DaDv2ra|l5i({)Y|h=TWN&TZuhKX_d7O+H?{yp9}}XE?_eA6oY8%V
zORL_cS;|5Dw8==YbpjI{o|C@J##)O<I8(t+OLx{+>6hIZd}doxQK&?8o0YP2h_NVj
zvEmK+NWXw}dywzly2+yJwBxRl!CEsnCvP*h_l&}>RV09%w)xbHAGnL*?!1AN(_+bO
z<g;n!CBo4$pnyv)!+5EAoIs!2>dO1rNs-EjfwAk*3-(nR@nc*!r-W-ae22zC#^8HZ
z-rM+jmxD9k7T$0>qw|TT*@o5ux=&t+Jcz6ZK$ij30*|nq&2V3NXAW%+&TbUUCl?TI
zR~xFhV`kyLrpNK?;1V^FtALFDCodB(e#zwFRvS+LcjZN<+kOJgY&-2ecwPyD9Y8@G
z57=wNG>3Vu-p!3n9h`M6qtOAq5H6u|x8Y$od|8Yo2X@^Vo@O`DsT@05lfA>~pY7F_
zoNEyQE&Xq&eOGPD@38*q58WP!G3%nl@?v^fLA_9)yA(gDIXdLcXn<<}q4$0Z+8kZ6
zO1YrX%+<B^$Mj=XHovJ{8|l!RsXEe?U9eW{-*$RjRCLEC+s@S2djF;F{beFitnNEu
z?^bedyap<Wbvq}-)F4Du&|KrAOygJUp^-&6vmqV&L#eUc?f%96y)}PS^>v-YWYE{x
z77-J=V`J#1)1sIkA;){Ly*PBdxOj8OsIXM|hwh}V{2gHer%vxXybc<x#7n%}<@WVB
z0mUTRl4Cec33{<hgOG*QNdBq6Lc{Ms?OSW0=uR3ToQnH{g{(q`LX+()dOnA}rj6@f
z@V<XdS!cMfBhb;{8&F~qTywDDPP`&)Yqd8BL}A6O7cV*aupLCG=?aU)al%)jJ78wF
zcl|?bb3qt-i^FO(F}}EXzfslLb@rVgBWYk__|vhUunJ*GKOWYk=9y8*d(Qgg3j{k;
zjp&ocO}EJ&gu*q<vpC1yVk6ckerP3)@i?U*!A3Sx<nMoz*x6;v=m~4~&I6XN@L`Xo
z6_uL{251XUxy7uwf664gN%{R@-A_>4KHoVLbD#eQcUAMXf0RH1LA)@OXA4qAdvY=(
zM<hzY`JZ3zmiG{Qjg!J(vWcy7L)v5KS$I%7vZQ3P7ZQK&g;`8$oznfgQ+^AgV>~>P
zEx#zIkjaGJ%*O3Iz%i}+&t6Rk@1On^SLk!_GZxrX+G%G)&ZB0B#m%>m<p%ZJsC<PZ
zWdm94#dz8G0d{_?ReIu7?g{;}qPnwp8kB+suD?_P@770f>hw<G;IZhXgRB1xGv1?p
z=oqYIrwGdV7X@`j%m@5ba-r`r7hvl3bzawMGrGnFHwy%$2p4H3whlbEXrA&mt4u7<
zLS}QAP0fvwJTsNuO+)o{B@B%3MIo=-Fnc8A{P*srd-rIoke_<>-M7?vH+y5_b)$@9
z4=h;=>@q9z=p*sPu6KscG@iAeg6#QS-@dh#a|)T8&c8iCdjs3G7QAj|S>&kd7DuKY
z!5@{%$c|dG7Vh!^>v+V3XMRdu<r;6=;1CqvYRkB=h~v@Fuh+(PDtJFVT6!NslTd-e
z+HilrMMZb0$lZBjNFaq?z#C}eKA>norX39!glk$4SfoEhkcq<@286^CmRbdin8@9L
z3$Q6=S|dA&UYT}@`}6Hy!bX*UJ@Uk@Q{IOCss3oBg*qfBBd~zuTE{dbEET_VcNgKg
z`yRAT$aI69X=zP>{7w(QK6!2%RUHPcro;c8MgK%LGjZ3MmYDZn0m&M07oJeid$-on
zD=M1}sp{#j2<9TP{UH8ZA1-O~s`RXkvQ94Veee0M!Fdg4I#^+{CykAbd$znTtHMrZ
z<OXHxCGc~r9ZaDiy|OCeZPE`qSPUh)d!$pt;6`cFNGlv2C>ZHeS^DB$s@)9-`+9@P
zwXH_=V>_}Pv<qzwjs03gS-|H|Yk_I;OVnDp@RDq@J@!1x?C&}|@>5P%|92F`3stUz
zz@Dx(*DD~`G>_DLro4b&gr$y=0}>PN0aZp)?P_2e+y7_)TKgr(YN2<WIHnBQ_s*+Z
zq-7ua9k9r!GE-k)dF6XtV!7z~nqQL_ZL4og{7vU6zy)WBo$&PqqmYi#+lmVSfs2&c
zCzQJ-U<`gnW51JX{F1GY*bsy*>;#ePno7@wDCrBN!BL&vYFUb{0V|7UfJg6bi|}Q8
zYUY;}tve4>!L#VH`GM9AwSl^PNPQVDZkQeu6`W!|m`V{Du5s;{bfeGZL@H%TH&oOl
z;igRmRTUT+Z=dXJ!eKRhHEi+^mY<#P1{z!MO_oGfE^ro>1V?fHtf{0B|AC5UDB2rH
zLb;HpTq=R7b#0>0a{T$OmE;_N6In+vVFGs-%W9l&yZ2Uxy9$XV*W#?ksCnjVu>L~B
z$=~cNqn3D+2_H{Yag9Ci_YWC;jE%WDz{a;_kp@dalgWG?h9rtlJALCsZK~P~qzwVp
z;LXcvakk?leTSrOZk=t_UJ6=#6g}AyiBf;4+I=_3;YrqA@2zLkGk*PhX@_o;Se}hw
z-&yzWAm{R-roY%rn{8uF4bCyZgV$ZlNOoS&^;E5!ig#RUpJL1Wa!69=VD&cZCZ6Tf
zO?XZpzA`-hn@K4D=X?&j*JmTwy(nl3lxk875_dX(#GgYBS_Fa&wez`_Dp?cb0YJrX
z(qbKV#3-}IXAv85zA`mZxw$4Uc*Ew1aO_f?5P;L7j6~aLL#xe`N2`&L;?0jrUHvy-
zQ>5-VuCjW2^`<N~0>O64AP6~by@GJY`%1w`ea*AwfC6^iUyi=F2mQ8p^1j-w2=M^R
z!CTXC+q+M4LOx1wk{LK#?acWa!kx&Q$2mfe)^c}qmsSzoz<WrV_xS3*@&mNCaeRa8
z2&5dSE-%Suy16YaO)LtmlcgYE*vRyJhY+J`1I+Y${H$U;QCiv1yZmOA>UdXVj*0dU
z(wNn4qJKTNDWVW>_`aR%8)BEI@Nx2M^F@w|t_-+WQOF;~(4u4+2=TmnF1Ei0lc|qt
zb8Q8Do{q}AjGoA@UR8+i0LJ2&SrYG~c?kmtF)~ZFqpp8TC06nz|4Lz(Bq3v;?=Nnw
z<)Vn1%=)LJkDci1U*QIVQeWL6goRwlS%Vv^o~aAFxGvbEC$svkmx53xN&`-I8+75z
z-m>kjq7pW+@j)cPfxgknUf`9&CSMe-Pb%8<^ZLRQoXdNXbq3LUUc>_Hf6>Q@+=UD&
zT@Gwl!aDKXN!o%_q&b#fqvAJ7ArO46dR1%wD9cTyUnC#40=h0M!6A%HDeYx)LO&j>
z(ir}cv#LEJW_{DxSb4}1D~bcHH;goV2P2N>)yZ^hWzyZsYXx<mDP~+dEWPk{59b9V
z4#;kdlWir`!Ki;E0U^rgVf(rXnqmdVPv#l3!?nY@yf<~vhbJG8wU=%_y{0YWU`H{<
zk)~$CLm{<Ww;!s^7plA-OL{)41)bb=SlO-)TSM2KSVax?QDM>e`-FbyJnORs@4X8e
zB^12Dr?q^I<N7h${6Xopiuk~oh&#+<gDt+NyxM&!VN9UhG6DgwuQd_e?GJEQ4TIO_
z-JDiy(lhMYzY3)WJI}#^{c2CAh-Fq%AW^!Z;E!YeoLgpF!hQNSKWk*%JvvyG>{@uV
zcNZ_|KR4*D0%9>$4*5LAU4RzoM}R?5|AG5s{_2RX@W9Sm1Kd)b(9Sh1#XEWCvMuh4
zQPytrue5?%OFZQ}JgijuRfjV@I0NK2?`Jd|>S6hrwT4uGT^v*?{gv7*z<g<ODCQ@m
za&_?lB^}>LZD#5bzi4wtiRj1xUGDt2dI$Rp#JYi^UIQ>I1^CTe4x*sfeVW{BTg0(-
zLv@FwB7Sms&7$dN-uI1jR&)@%^Xrr=X)grl#Te5Xx3nMmgq78y`p(8=S7v$^Hl-N*
zHIsTFT)c>DiLX)V9%(E8?qnv*$*S5*rK=Do5y$Qv3w~<<viy#%Q>e<OWV3<O8itWH
zAT_&~Lf<ySZ{i{A1x9`<9MCmt5k6H!9BQf7jXYb(@oD&#<MWs|3wt3bVt%7;AC5F%
zfwL9t*+H45RTaNTPOwUb)W*`hOM<XS|A4c4d2jw%6dU7?JtOBYfW1&ltj4GpYC%m#
zUEe9WKrFl^<wQ3WDJAhtUEWI20AF3lePrtE`ozx}=8CzDRT8Y<>l0lP?b{(-Q=VXO
z@aNaNz6jF!z!;4OOJk(1MCG>}B<IpbkEn!=^kthJm#?VuI#<0tSRtn3_6^dQx5DuL
zn7)kjkcVT{*RH5mZO&WU`qEAKDyZ9URn>!p=6$TGd*$V#MBPbQ9UVIbT=e!&{N`ho
zDWPNNNty0(JZooLL{GKp06VF6^8-~{yzIyW;9K$A@BqZ(hNs=r#rbDtKXn$5*p?iU
zcBwa(w5ibzk0`tlvX_bNll4ZEbA%x8CT>8Joma#iRCPD?7C|ZDocSi)xR?{y<mvad
zDm_~`=<p*R_IUcD1D#(DM$`a|9a*A?4QIue%RJA&Yjiew)Fyos;kNM)-DwTxI--Ef
zFk+WnJiEbS^pWOk4(~he*EhbMrln3u;`}zM@{?7Ao_C~-lxp`7&6oHKS)-ptd!k(w
z`G`G0TiQ@GbPotAmA(-czK7oHehP$@>E~{PKW}qE+=07Aj2&j1**DS5hW&IOJj6Xz
zy7g1un*`JdA@!IxM|SKU9+HRqG?-JdsRZ_fdqk@6Qn>}ji08W6-Crk2n)ESaxT@?E
z9NmQ!-q#1H0oX?+{Zj2Be4t*oh+NL8WMcG2+84uieycEGys;|m3nEuyq^RJpb>$s4
z&-cCfuGFd^^_-`)>HneZ-Q%Im|Ne1SlEf565mP9&g{>SuIZdUKr0KMXm@O4!($q#K
zhZ#{0Nj7bKVlzodPK7aHm>7p`t>l~$bJ`9LlWU6U%FJB*ecAha-{0@=_qZST<M;b#
zACDF@*Y!TUj?dTgx&HdQgorHd)9Ei@nD@VnU);2@9#u70SWc=XCC!vmTHP#F4*>p3
z%D~pLkoR{Z%e+n&j{pa}-`IrjcRJP%eMDsFY7-u{;?+8Jq_8%5<M#I|9YqWrncrSw
z#$2-HM7Ej=@`V4c82A9!&R8Bws*O_W<K_MRGy5XDC_<9d8PRGD1AM$Fx77Qn=Rm~d
z2(4nKEBK)C-SqZk2{k#$>GgSQs-#!B=i%FN|4*rOAkPTha-tl&cV7J~QMr4*i&Fs2
z?-w-y#-*vUx!*buY4Nzgs47(iGn!9uDJo*~m^KIeC;c^HdEro#xpEJhD$@$!cyHR>
z6Y;((*<U7TwKY)PIUKIl!ap%oZ<QP|Tl@6B{?{W&cOqxoqs}XF`Q!TW^xxqdEP&$R
z7;$bj46>4xP5=;q;h-+uJpX(<$fq!etFgtyLh!iw3^yG*ZwSnHwLt2LWO&HBlbamF
z=q};fF!+LV@8w9XpcZB|9EO<!YaYR1cw%f#oHG$Q=7X(}rEp}LV;N$u-Z$g(xfjLd
zYc%GPW%#LgaBd@BilotYsyfCQ*Tau`Si1wa@p5p@T}G`=Y4$fKHb<DAq7GZ|UXMF<
z4HH6oXSYYH^qh6Z*VNzf>pNl*qo(!koAO|v+uDy%V_q97Fbd}!J|heEly#)pb*IYd
z|H58_5A5v|n<h0fD3Smwbe$-M0}RoI#MawkhiQol&)h@Upcl8+;L>|zHPJ_nzhD24
zqxzE%{<~3q!tZDQK}ekHMlC=5zen(aY6}pl|IZQp0py(;BU^VKg|I-*m3^W9triHk
zxF>A~{?pNakO!;bpX;izMQwmDNGpMMV*s)kdfQHFm=Ra_1z;8P8R~_<)rQzo$VLhn
zXT#L6)&D6AuQ6u=1)UQxa%(Hl;!gcLHUj#?;bnjZxba%+bChB;;}6JBkt0;aR_=H3
z*)^)GT*&#MXI-{m4f7%Zxzp!rqH@I-?DxO$b8)KsjQ{xQ{MW-z6B(bgp{8Sny<+|d
zW6_DKLYTDg`)9ITx8ZNKJ3a7dGmK#gjRD<iuJj6Ep6>#{h>MU3%G^rnOL(R9`B%~v
z&8cCP_Hg9XDI~deKV#<BJSITzpBA<&6k`7Wz#WiorAaW%c>DZs+JG`QIL=I1SG5@5
z`R@JUwe#Kk74zNuZ0O#*V~e)KZzrq3cT8mlF(xjFC)7R@(e2LIq4IeNz0rEm9Po=>
z3|#8D|1nOjq2jr~x|%0nCrkyvxtbZG0F)$IX$mEc^-RTT#<2J!Ffo9xJ-qOJcwq+e
zGgo;Z0<}J@+W-oW1L+ED0D_dj22+(rAFw0OAol(Oe?}(E^>C~90J7wmIz}TPv|?pm
z_Y^GU+3LU58YyB;HOAT+b;UjS^<l;zVT@p$;(4X&^xtZ?pxIpp&2ADNiQp;=1>z`G
zrtMY1+_eCx3Y7mBiveu5a#boY1weDu1A8H;>c+C^uOrk|Z-6zu2IC7pUm>t6Rlf~&
zFjfBa?;qgqg=(nu3Bp&?-?lLMRP0sD^xtYfYVnNKu!^QNjNieKDVE220uqP9SHn)i
zPW^udG$?<13}flD@a+E$5eD3@BXD-)0P0u+ns!vhx_U>fjHC&u4a<3U%Bj0h34Q^+
zdorWhg)!C6IL%cZg2JiB=L}5m3H*OAS|!%WZYHUm!}`^+Q+D(0@1|TH;oC+$jyn~F
z6l2UXfJZa|5@0ht!7X5hnBxlLnQ~ea)OrSZidC>b#XIoLRHfM&xPaT_i(u@@NCIR{
zOl-v=Et&g2n2-NqCr%KM2wP<lP7<ZM!@P>0d&1ccQ!U~Dg)U+LU+5CYZ-AtMOGyAI
z&~bP(c)Poau$Z-Y4|tg5`P%_R8virC;6KHj9kE4s6?$N2A~+Wn-$T271>q!)-}!=D
zl|3bu*>>bKmFJW32D4fH=iDsN4BpS(LedJFq=jzGLOo?y?3UN`D{W#|l}}`ELH)ro
zI0hNjB<!=N=xTV^vDM@RNQ$PwS!ii~Bt0Xv;vu*MU4#$341S3GGU8AU)@o&}H&8QH
z2jueVe~WfYx9{Wwd6>^Om=AK-O5<3I;`{>%hwG8I^`B~j2N$M_W2m};LFoCRqrD*N
zJU2gb<_&xAi-Cg61(jgxFv4tQRDG3lkrDYB71QOS=HF@=FogF#T3q2Jb`2V7q1$EJ
zE*+s2yH~T(wX(}2EkU5;)ukG`QRZT=l@ifTksduNGyR%ury{mG4*3f4TVQ!EGQddN
z;CYq9+-8EoJgqptubIn&j8e$Od&twb0V21kFM^niZI!KFN@MWcHp-F{i_zl<9lvZe
z3?JU_VlT>A+Hq1mIjzkIo2*^>QZxyYdfsL6jE(&OxS9dO8inc32T-?^zEFy$rut{M
z+72^BXS#2>0F&?@L@Pr{kr`80q38RKxnC;wr=_4)B2pS>i(a8yo}At1PtLO#aBH#2
zdiB}QevwW28a3q{d>mZ=<`o1A7hQKN8JTWpte&;Kp63j#-&Q_Mp0RHRsM2Nx4$OGl
zw*PW`!nlmSbm*MRNfAR6&FuTJ@%0SI{1F>!d#H9^rC!dz?|sac_Z@${(1Qod5v5#_
zCL&#hRBQxpS8YbCw{0_!rDEA4>f-UJF;kQx_PTG&o3nm&+4$hUBe@3XrsG4EqQ0s8
zq*nv8)(1b+%1<V#Z@97Hwwl{c)e}ZIgI^$jD@#sRUQry2CChx<Z4FT3PH@E(o@35T
zwA;Ni4??@*+zMT5@8qK)2YMoOR#n=bH;&tj2@ZIB9Qk~%fLmXeMttUV0mtHOhmhzK
zyniD^nR7--cFd7valm-c>Ykb|E$=uAPq0KuENfyuI=-`bxV9WrGEoyB89pV_fz7@t
zpyXhsC6m$RJy~GE`l*%0&+9JWesTLA>OKHED#X`N<E_v-nFc88SxGfz7Do|$GcMUZ
zkh$k+&ifAmvc(_sv=Ksbgkn>iPD_(XUnS?T`1l7yxlfMIeVe+9iTY2Ex*mr`XXRf|
zSE>6knwbLRa6p5}rc&Szd)A(P=@L2o;>Dssv`?~m$UoxCu1xRXOAbtA*XNdiG|yG#
z?=#y!O?3U0p2L4n+rR$>K81uFW}@qdq`F`a+R&jw<#N@7M@Z1K7%_428??K*$qtPw
z6HEgC)8)jA7RQ6S3!B)FXi=?~?|kI{X_T|RkW!8^y#75p+}M@E=?kd=(lI6WkN=t>
zUgH`zSt_;BJ3{VFyp}Sg0<b&xkgq{iGT>hg7L8O^h1IWrcIvMVyFHl!F{J@1IRVy0
zul_alfOOdU{>%P>vdW0gkp|BlgkuEp8W090sm#C!5s(BFuGXuuc!IOiLg9<`nrWyW
zN>t^_b+YUZe@E$tye)&uXs{6Z17nPpW3<xNmyg}Wf$m2eI9{c3{({!a{<S5Aw8VY=
z(u$ct%5I>ib|n()dTnhs|E4kHj+sM_lmLNH&ol~_c#&-)UMbD^to*29foYo{8S}}%
zKQ<cGWUflV97r^rJgcV1B}(QfwvuYdwA!7nA$+o#MV+CW%@Af8=5#AVazCWwC=J-}
z&8un}*-c1yTE#43*+gyq`~2^`&dxPH(3&j(cQP+9DjdI8)3|>v9KqwN`{!@g8r@C{
zv>PMmq`y*J@%_DT)>4&e_n~k4Y<D&#Hs^X8|6tE6c2?nnkLt=l;RCE-be4;5!l!|u
z!DR$3Q>8a;zzuiE(^SlWj-Z9ANA!)fq4s#tbNkAMJ3nI`((LAPqkA`+1frksWgh8D
z3y`;c1Mnvcv2?qOrzqEURi{Jll?UYdcaODZa)B+xszYh&7$@W!4ckJxD)gxx%3C=k
z_1%lmD;Yw8;lz8%{)QBCo{=n$J;fF|XDmi<D4(->Ts)~_rY<pm;s}4@0-Crtb0Bil
zA)I)dFiN^zaS9%NJKavX`#EYVb8g2&6w+>L##pAbLbEA_jGrb7D_jU-4N4^lDHtDo
z79z$k3G4j`a;|UPBi9v99uEq5>2~jOLde}0ZY8n~rBN`pctB>-+_VwFr7^-uDeNXg
zS<%%eXfW(NBiU^g`m-E#D5r}0SYH3K7wFRPo<lRW^;OUF-j0!t@2AgrTCB7=^)qP7
z1i*tWoR|ATH&NRgJtRONjjk6+ao~Q2lUwQ|^HPP}8)lBO>6AjE2HMy9L-)cu_?Zq)
zvsp;IK^Sq{^x96kSK-qadpJti$w2o;qysTynF|q|z4rOS!mtN;Hi;FYG)TkrB7l=$
zB+KQ|?cnrXSDK?Agwl`~{-eohbUmg0;8`R)oxYwH6bkYO2{WJ)GCU%>|I8S>BX7|4
z+RKr(Uq2}hH>UtMZJ0jkcv#<f_5*ygDF8;l8cji1s%Zr|&&e*0wx;E(yNpn%x|<{H
zTlO)yrL=6Ge|T|{i~ED1Nq*#SIkEnu73mUdt=8zv>7{_?)4f$*5}Gv^`Kd0X=wnuW
zKmVGs-i;iZ)&s1Eg!ppNjd<x9q|zU?Q0%}4#+=baq_j1=e$Uqwj?wxIA$7@kw6b0=
ze_`dLo#iiug2l9GSdOyDm;lotYpX*I&wFo`7n5^-%c8~=k-r)WS2Lzc;b~n}jf_*o
zg&?8wx7wL*{?T@(wo*q-T*^+fr)rPSMP1{#=X;8epR<nWynntEv`Ug=_bj~qm^3ao
zjw~v^_{cgf?3eNSQxk+Rr^ws!8V}~PYG6)94iiUkqF)6IxuMhi+zx`i+sZ&njxY29
zO&snDxl71k81m!tXObY=5G_VJl0LCIb#zLZQj<6n-@3-0Y`>b`*@EKQ@`7>4+8s+&
z_n^(nKn~-9TsS9owJH~qf8y#`do)<D;R!9XyZJRaNJr*&w<wJNhJ_8@*$W=2k7s64
z-*c|=11mt0ZsA#1-HZS6c|R-TY5Gy0{!gFcw{U@p^n09CrZ|UM?Ln!ELs%~;4p#~Z
zI5df{Vm!~F-)?#l8s%<gk?_alLDrycSu6<B>$R1Ry*W-2jEq->i4_Wa+v)U#5m#yF
zAL_`SdDJkd8$+N#fq>jfo{pLzos#n6R+w57W!;tew&ak~l>{La9-4kYZ@L7Bh|1}j
z{Vv-XrENm)^|2oiRW&8YQtmWbUf#rwx<oz0pc)pe$a;|N;3LGFFy>_ilNq39uiy8A
zu7(!M8c3)+Sk7d^QWyU*^;#LV1?UuWk5#{Rp*Uoe(vtThpSZyi=>1vw-S}|gwbE5=
z>UE%@FG5B1-Vz#xj0GJ(p~^7<=qyg|1(yLZbIq^ZR;qF^olrBae{P2*Y9cJ(^uph|
zGO-C4dtmUrEIGZ&gm(DUS!6nql^$k0ED?v-d*pwVhMaly@iP5iLz`VTJ?to^1rVJg
zvoaRm`AHoufOGav1@u`JB+UxCX6!!r<V<>xv6hq|octKcT@d?&tT>+Ixfz5pJyNM=
zaWO$i9kQq6s+$obm{#4I6LdSIG%V=*YUE6}(sIu2>cerTjMQm@Xj$(}`34PG0Cjlq
zNP@5oE~U!~5iz+*PsMUGCu91^!K=VE%5$RUi@KBYEE@V|to2`66ZSvNJ|VMBuuqRU
zVtCmH8S%LEWFm^4w4va*4L<Y%E**{+W5h#VpsJ0fJdAZ$l{9UmK`%Ki*8V|<C_`_;
zX^w0hS#dqTP}=@*(0^~TsBzn#*AbFSago+tvjauBE8gdCxL#Rt-mMFyEEF+2;f22e
z*i*SZ|6`LGWR>ShsY8awdUuLLYaNZ{SCPIp|G(q_pL1~NqXb#W2v=trFn#ZnwQ||4
zX-unAZAk^iDBU5yG|Z9x)zN5cd~CW5C+U!8z{0Ln71K?^08N9fM@J+~={i`BrJzFL
ziZmP=h_rU}XiD_y=Xfs6K)~71^%K1_b|QkrbAQRsH+_9wbemG(hg(L8W~Wl$0`Y%o
z$q6;a1->KjB4Bzsi5|WA1Q<Ra7XQgBdeeGtmTYSu=hNRo(T~eLI`Bx9$vSTDx@*Z5
z-<+E{d5^xbH?8X=joB56p(hNC#CsGPuq%fnf!NmLDj|f)XSX{=N!LLb(GyKgw1(zA
zz!qhJ_mGfurTt$gKGtq}@bbyWriE<e>{XFhx=CQ|V8kR-n|5juHDWZxKdJL@+@T5o
zU$j1IDR)ZY#lc_|BtT67sYJmOyjsn${Ue@W%_5@fd_iJb4jv`pH{~i-3dg+ue3~L4
zY)+7jStu8x$wIubeMXYKF3!WvTxMF?PFR9gd=l&*tV!2ud8Txg<rSAOD525R)N_L7
z`nD=Gdg8;><*!2g;I#4wkj>f#8hk&gatO%c4}YsY_yqiT_%sG`06^j$9Z<g6WCW)N
z{OnEtPq0byR`jYkjk^-<69Z+_PeX261K{~j=e$H~=lY{h__MO(!(%sFSIlJSlJjsi
zLw4TAW4xAn$E)W~SJk{0s;RyQTj2^21;NY((z9f21q=c(zVTjb{pH)jMJ*W8avAtw
zO$l&Hf4VDTEDj}^H5mqsP73sANlR%t8!$6;+l!_Cs6W;rKA2xI?o(e>5-0M$%<G_Q
z*7unAL|7ABqZml`$ERKoM&9P4Q}KjAh8RbkN4&2#nmP$nWsD9ScHzS}I<V6H4)e06
zGAnr)+95L%I=1U-$J)!biAbr_(Ady5bXHg&(Q);8k#9|TJl=QWIO%xcNT;Us?f~b{
zJNy&wYZp!Z{=m$02cE@5+$-mmH;IZJ^j`4lMoI&!c<er+(N5BfT_7hI(6`XCTebEh
zKJZSfi9bhB7t#v$CiBdk>SWO<*BAMXJ?C(9Y|+rvX8VlA0kj;^Om3Hscfa%n;V}u%
zXr3=Ijo<fp(PRgAO*Br>aM>xJ)<$o2E3}&H!8|7@N#&|y4^FbeqNV8vwkkVz?L`qm
zKMX`e^3g1uAuT9e=V;#0v9wly3w}jmm^v1R*&ytcSY0usNLFq9b90V2lz6czrDe>j
z=hLI4fcu+T-SGVt5%($H&$IZ)rGMph9I2^e<?OS{G0I#YT6lYLgW9Ej^;!1ReMJ;D
z#CZCOC04}%vx`(>o9Ng?=$#q0XotCyo>_oD%ImG)e$81u*O3%UES$_U;SAJlq}p$o
zvA!I*VKRDM9!soC@anfd=d!0FfD|9MO?C;>A;XP01iJKn?OZL)3L7RZV}V~FEsHSW
z>d=OGa$`pxL_*w@So;#q3|~a`i6xv~1gJ`#hm%>S0<Bt&&oq^4W^wa_!u%Jqbmgf}
z!kpq>Yke$ME{&4A!-};lPoXig262?q;Ew!0!kB7As)$D8Zi{41&tyh^S2)`x-Db2H
z57yua5o9-TJlnK|u9TKJ+>M#sboZcK_t#(Fph=xX_CTa5+wd|Bx`3BF1W_)?tX&7x
z#YNeBg@i5rhU7}VHm7SfJLYXb3lOHLqSP^o^P`xlLG$;E1xo4lpGm`CMX`?jv$u=J
zt0$w!l5KBV8wB)5Og1`BIq^=|WWzain6D|tVx4#>fsaheHz0eTAwzPKs*poLieZX8
z<%|q87B=ZRx44=25Jcv6)vUg0`xqVDRWJ&B_~X|od6vTu6V{L7QX`k0Is3KKCF`}5
zS{T+xLVR$5c9LcwL)h}KV9O5EfINZcI8@WEKT30w>_<pR5#?UKJz0N|k5V+6=_`?U
z?JV+1>%OrOvVYCj`eV_*85%#W!utB`CL4C(UT3_?z;w%09Kw0R@K7_OrsJ9mMd22^
z8F6e4j)@V*Z36KNmq_aT{K#4UZg#EgoR8ZAG*WWkjps2y)t?(V$OeRjYj``;df?R^
zO30<)i<keQE8j&BjuA%EFzr5Mp+bHay(1<j;Fr@4(WrnPJI3k>$Py2W6;h8E7tmba
zK8~Yk6!2J4Am$-Fe%>yQ)Mng%NA!E~Ym?*ktO0vxTQ=W+_`p!8`W&?97qq}}fC6xH
zn?BZtUuZu)Tp<4oJ*lu$s>_;gfb(h62T)Fasi#=?XI^uV>lxYEJ7RAK6UJ4NVK@k<
z2uzB~#sES}FiH&%vM75y!Ok(f_jqC`k2c>%h1&L;K1?SV=@8<0gj6m}{_~-r!y>$x
zUV_d|9)yz6nR3r!sK?@fipxufVr_I>7IOVP>Wf^rA89;4sO#l{jIm9V(`;hxxFfZm
zj>+Xp;$`~>dU$yZR0e+p(~!@s!8H?-m?mq{G{x4~t<TVWk+&mg2qa)@QJ$EfT<;%r
zwZcO_`kf>oqnV)tP`Eb$Q#rml^11an&K`z+d0qjP`Z&#XzjK4h1>6mSu!w~0#_<)H
zHd)9_hRI91<0MHtHVzSpaW?{9WaVu`_lRwQHRJMi$(4xvq*mjQBzpyZ70s*J>8)e^
zSfXfpX;}T4F=kPi)6wRKBwl1(_~lypmw5WW=1+2Y(_&b1@OjMvKmtH$!4@FJ(n^_O
zH_uG>wH<Q_ExP+K@_|QKCh!lfH~rP=@;%C>3iQs4xms?i7bp=fS+DTxpPto;zxwHX
z(J$3cwf<n5FvyG%BW&?@S%c{9-)bh1@N~$pqTLm5(GZap&pG_qN2dT)ajV(d00IsI
zDE`6QWEjKv_&E%-7|iZ^exsKs%^sp$dJ@RZTE7D)9cl)(9wzD(*3sOgUo{WSesO<A
znR43$er<+W3U$YJvrWC;P1)pSeJ<YOk&IzVn=gzl>828^Cf&@LZDy9a0sRl_`ri$)
zQf&ebKUc%Z1Zej?6)0Eu?pM{j>BKs!YMa*b>0r?D46-wEq0$A!fV6mY>x8e(bej~4
ze^l~jj=D&fa15H*M)B4&I3rrswz7|3XpSw>-h*5*=rXUFU<X<B&vqiXI)MFkbI}dI
z$_KxA%O>Ua)j6T&SplBPGqNY1<)<_4LuzxpNLSg0-J6#jIO59r^5WGa-sanPFRLjx
z!CpWX-|UP*6`|SA4N#ss@&rgYJPr-n6SM&WgA}K^XqJvq+;GrIwhzcv*++&O#szr2
zW=%%c49=v7?B=irXRO!H+SW9rnkP_Jh1+~kLqSBFtxCj}(V@#?%7FYbp0tE<I^1Ux
z40p}>I!Qw~QAABGn-!pYPa|2?La7_9YJKv}vqNf8PoE-ClXEUbvyX=U)L6&#?)_9=
z9wFWTKD0&=kNcF1t;At^P-cAel-`9$H81_G_Bslh6+^8=bUi`2{HQzyUaCBHmnzL|
z(*)l!gK*B)5QW*pcIGm-jiA=ISJLc@t>D(MhEAgmk(C}r&~4iz%s}@}*NjLlcJwMY
z8gh%qsl_N|Kl0<R@~k;aHGC04ro{%XaqO1PJkf3oR|4VczoONYdNQ9>MG&mr2F5us
z7qqhwfD*prf@~B#Pci)FPLXbacfWrxVHtW>XT;RwV1qW}5e4Y;yW^F_;Kv=oPlmh6
zr8H{mGCn2x0MUAkxm0V2DO*ZX8rotRj1D}yGj`?QY9G!qvOny=Ga28((@w)ES{M)t
zDm*}~Ye2%(P+sUKh&DJ4wT7}RhgbpwMoX9#bp@m4Czr!|?2{6_w6h_xQ~+X7!KL5w
z)+BVaQr=Pc=RxXEEl&0r9-hGvKFuj&GKx-MZ%NBe)%KtJRAvLjj#fy4N54hFXD#;K
zDf>8!7l!^7ccX9r-bE=PXJ_SHzbUdgSMi|k#`Z%Rvd>pO)aOxh?-f3;d!FU_$;RsT
z`@AdfFIiT5Z@&I0>-g!jS1d1wM4kH6OF#6x@74ZG=o=bNi4>di3W6|=^sN8TiDsAD
zZCH;X`<c7l&z>QW!?6hMBmK4YyU$Xt@LzrIm7e_7GCe#p{9i|x_cW-*X+xw?pQpn>
zEd^3xU)ORSs~5KVFVgK&jX7UN$vrz48+~tlyfE^{hW_cyy~lR^+3csGOrG!U%nNKJ
z?0-8l%4oI)E6V(t|JMDIKGwmlmR5T%DA{V=#^l-R`3D75xBvN&67bxLRhM!fIpMx}
z>k}`NLN)poMsv@$W+UaYzttozKX)xZ5*X`+uF$OVG`DzrfNM~*DJx0y)RNxvM$T8=
z)hB;*Ur_anzSSAEztwEQ=0{%}FnyxtP)lW!uTS-!OW~J*UGC1v+nwg#3lMKnm&3lI
zq|i=}%}3h*ki9h7>h!~zb^Gkpl}{PXqOXRN3N3oq<#d-#k&e=fg(uw4^*(r>H8vy^
zv_1Y5aznqxb1ggbQ}6b7drqf*Dj(eIlk<ZR|AF*RM+ioz4a~)3-PmGCkQbm04S6O3
z0i=;cIq`X2-SfL^*lc#9q&xm}&XxDSlwIIKxy)<x%@X5{QEPYFsbhaESI4562(1<I
zRFLQ|5z8JID0o!gstUPoxi@Q>V=H&5UC_CovNHbs(b^1ge7x>w^#?e~1oWK$Pseu*
zw%esR!FGfv|K*0~!&?E&;cdsfXnDImt!S8S?B=XJ*H<Rp&9uA{cxa2?z;B{sz`d-t
z2WF-BF@y<2a!6O20|`Q*W`ex;Y?G=uGIw(Aiq@?rog28JME>?O9G13)Nt$2I=dRPw
z(_;6XFHdy()}y6{u^($FNd&4%iVdWzwj*0725INR&ojaVd~-4X{n+jtos{)xqeOdc
zo_2xt>ZhG1n{WT0b^i=);e3*ERhNsd0*?(kl-limZ_6io<^^0dUnNNZsMg9`+K*E3
zTg-F3Vy@lTdnnVz;CsW+-!^E?_KDMSDYm+_q|cwlCSG3NIG?)u`ntPoYHMo~TExfU
zmfX$Sa58Bfd0p1tW9cjIzuB;E2Z2}de=V8XKUHyHOS66BM6+R>oPIM#AwPV6oqL8c
zJnQ3U=^1=BLqxbH`9<qyRc59|yKr@B!KRbHUjL5~_l-iRJa)WLoXuHRmn#P>x{Ht0
zT>D*;KuDCDWgB=ba|>?McspX*`~9z}pVs((-`l=YW9|lG-PZUa!Nnws?BeLd4qAcC
zwz0Z6C9aKaoVh)}J?&o5Q|)25ZEvULk@i0`EjAUbSo2itGt?%v(um(-ZQQE1Qg8jY
zU5Z29E<W#f8+2;2TQXL6T(rAr@ZRN+XJpu&eNT>9J->RQ)O+PmxG(Mhyr2T2yL1;r
zE_C}*tHy!;o`3+*kHA-5`)XwH`!CH4mMX6xOESCcs#e_E@G#x$rA5_4^Q=?L4WQdP
zPXrD!5TEASZRh*qi#}U&ST{$MuKUhwyxo<gUFmXEcF)>8_fq2WY;QZS^BJsSa<CsS
zdndHN0p4K6WaSkWgP6uMxDl^(8K;Z-<loDRawF>})aBuO6~J*O@q2UP?9RW&#&o?7
zI@DH$=Lt!}D}x!Vog9rh9^eU*#^yRP^YJG9Io3<nZJ$<Ljr*NwH$DFLY7IKQf2omz
zFei<#?Rt>&&pG_ILzQXoY7aI?N<}w5_ulm~T`)xymTw&jf2$?+zncu+SIBHv5ZSHF
zrlu<6vyaY8Ed;L5`=)R96c5`h0qS@a%=(8YjcnjN2+Nu5)3smrxOhmyr%vrV?HO!~
zORiaT*8Ah}s5U$5^0eO`rO0Ym`EAg8w?d6UB_L<*yXw(mZ1JkILrcrw&S_0GU(zhy
zpCG2h1bRsNeSMeh^7FEE=neAsxcL1hOWVkEnOkdQaD${TJFMcjTgo5cWT#ctACf-E
zc`BI4D7qmYlR!v5>0;1q?zIHz1X!}|^4EV{&)oNDukWqhXFc{Vd6b~57CZ2d0m6Ra
zBB7QDlw`al>#Dj8PPi*5vHNl;k++xhxL-t$%A@zK%Ul!n=u%^2%dV;XGokAj`L&96
z5MrS-@l9B(y2c3KUa|hh*jj}Zy=TLjoZUBm=vA7_Vh?YO`ab{B-QIsSZ@;qY@Xvp0
z06V_xf3RoZC&3FZu*=iQKrM@>*1z^%K8bJEb<ke2)iPnbaB%kd`|E!g>TKS+$?{pP
znd6ZPjqjFgv@nG4oO46xeNwI6(YHI7u&c3GgM$}4H(z`i^)r)2Xx`M$uJt%W{t)2h
zRa$go&1Y*CtM%RPL%&a`e{}@y`S<*3OdIOw3qEHJigo^dN4`dN*E+}RN^p*ST@`91
z3~=teOdI}{NRC<{XKyihzw^?Pr~6AbpZ`_;8(3y7U*ZA=;#sNBv+VJ(?(WD))TSEz
zo@yyID=h6aZ@KBd|E0d&t)>4MNHENbV1-e)X7^N#Vk0r!&UdM&!ZB8F*iPT_nVTRf
zXr<4vxuFmLk7GjQ50GTvp!KBzz9Hd6K&8@vBK)y{xOmiCaUs_EdD3v<&WqNKl`p9L
zz0UW<*PdqX3;(O3=GK+N$IW9(BX8d=x(U23Jc!{n)#Abx>L&t*u~ES@@6opipU(${
ziR$ZZU0tmunvIPd{7R0AWnZ`5_28tH!9JPCPoLS><5jm<8~koG+?X^>hs_A4g71d>
zB4I)5wDm~`QjO2;7}~n$N!!RFwjF}_&K0A-UtXv~_V1Mj=N)?H?EhBt)X6)cTC)v1
z@E<(j6|NH(aM{yS)60+Uv8)9JwPZ=%t?kSHVrLR>GFGnNeSdjY>ewoayDM6<QhRsa
z{RzMnn;ziaGEfIG%^IZt1kYl#4fZSux0Pyr$LY1)*EdT4L$EqL{N$2%$2u=vvhzXq
z>U}HD+7PU3@$jkETn#{y_J}qq4B(q1V!aPv3G>2!uk~4^*=os}VQ6vGEwjQL-&OSf
zt1yba>fRB@Q}Gr6(tu}uw-Nrrd^8}4(M)E9Lv*~RKGjOalm-P{Daf<0d#1{A(;5yM
zscwH&>U#ejN1lBs(~@16;J5x*men3LrPDv=5gaJ)Kjq?!Fikq2#Oj`EE}-O@&JW^}
zsZgcUn86u@U6>47+v8>wyI)31s3{NeW3vKQ0tEu`b)=U`K>04`4U!t8%+{fW{0;f!
zB^O$ssIz3n@>x|aAylw1Bbk9GK<yPMu#MuA%7ZKMTCsc4atQ>_<k|aMY=Zk(+wH=G
zeH)%;eQu-L&|kXzvTdZMOcwsL=?=I3@R$S^30>ErT*kl_4@pRGDgh)tokT#6LXtyo
z$LluPyz!EGy}&PU!HFwV=DO}yCUVZ0HWfg<bJfH%bW=x@8Pc9wM*Bki0nM+`b+y;&
z0zTe|BH6k@rnoabikGue>rWDL0*9^xwV?*!c*x<bo3FW%kVCi?*jvFOrIzHeUErlX
zvW`?`47EgQ-Ou@X^Gvu#TfI@T@{+jQU_58`R&|LxJ}Gh}-TZSm2voIUiPp6lr5}x&
z)(yn|psp;KPf^b)=W!8tAlBIFwv=YU<Lc54F+QngepoztY}qrXkn5aPBHNpoOAp98
zNbTNwN7$)M_B|U~Q{7jV8I$_xM(^MTVcMUY^vyN*tH}hn7{CUJR~(-7U)Z476Z<n-
zD(ehH#+VMNKx-;y-r~4RC|$S%oCd|2uB6+JDfT*&;()-h6?yNSgZ1C;zwOed{I^_<
zaSX}?T;VGwpU~>2h2%9zV6Q%iqIg{6N#ljtC1}Bm%g{2I6|AyKWR;HWtFYxbVBhy~
zLW;)gRqYve=_jK~#<LO+)YT`1^c8ce6t2=2T7MNQmji5QQIrD8`px#3CDt9Z@VTt}
z8r_*ps(Dpxn}`|HGI$O>==%2(@sAbHpoQh8Jz!_6KgqW6_BFFY+6IzS&qrSCu~}Fg
zsXH|nOwM!>;-BW3L7?Z*<Q5caY${0QhEuQcjZ$rD(j6qNPV4U=rEO#8y)$t?$80z=
zP*d*MYJgVmV4ir|H_aFKcKhY->RHz>72T41TX<i|`9lo{MH(nYEA<JID5ZXYIEqJD
z61z)QndD|gGZMp|u+n2h*=>03-E)g4a@dJB5frK^8vG-29V>?VFOCwVpW8||YV!J!
z`IR>}c1Ij%CfPe!Jh)j&%tudabZmxZ3!Kw9oA%BFeO$oWh`Wh><<@1J&k4~lvQ=wX
z)iu|xrRDiM#cKK+)}))K?`V0bw&jM}H@x^mJ0p#O=UggLdZPl_rVhMelR3p<F0QCl
zLQSEsAK(OtV-$hw|1fnvP+K<`Sz6jTZauX*T*Ru0?|Qd$v1Yoj^$xR;9e6L8&#Gd!
z;YS$qf5UjdCgrN+eT)=_5y$<~BVd!p3d0|L^f$ZxFf^w!EjCzOe)f}i_w5<(BAP7^
zTPyQcCFQQbxTXFdKaU5Q^hPq5294Kyf7F@<6T382`4co3CQ(Sjlf2ppN(3z7e1@Ee
z@d(QaFtWq4&ETF9+~8MS6?>CfN{T4-)w1NI^;RA-=2fNVIjYiD99lE}=*}TTC6(qW
z;z+#udzAZlzZx#9mNRHq*caJ#NJD%>O(DUwp-#JC7HtH}Zl@})Aq`iG^h%-Ba?r)G
zoCXR6n2YSd#|Wxg>~>`I)!pJSY+bfT(uBZI=Bng>NCB1VMk8MRV(*xka#}Kxd6c;u
zX)I20A?C+3_6uYSGum-;Zrmg;dYS`9rF&sK!IJxvExHab9WRI3Ah-2chhQ<?j*tDx
zgyVOnl(Z_0q~GL1!?j0O?-UW11gvL17@njrsz*lQ&;Z+J03ijBWYfY-9lfYix<`ig
z$TYgdqt3gU`XY7Bfa;hH1-69Ma52a>GhO@p8O=1h-NgF$EuY_#zw+4~n<yp{d(N{o
z=gxm)-;cedQhpA2`TYLoPh%Sb{|Y!hy!)WKvJd`vBSV-CHj0qWWizC@NU<=ZW2Ac+
zCoY~!y&@rL#>S!VppG~(T@GWURkREevN=x+5h&Nxf66UK#f+6`8qaMFCGB^Xv+d%Y
z`Lw8GgZAF%D7vCRt=4#auU0x&cpa#y!!I@G+4Ka%1AmD1lbz1#NV1n&yI6~<OJgth
zD7TA!xxE!qgB`Mk<rJAotFKc~YMEWZ!GTB<25z$Y&6^Y5m-I49Ug{4YRLAIJZiwRz
z`byelJ6G4`5)`*jq9dXYX|Wzc>dH`Vcpr-}#aNDd`8B?F*$F=l9XE=aJD9IxmXg0-
zW`_4pS4K>7t-7lk>S}347xebW6CN_rH3En?<X=@!i_v#7s(iodY2@^q?B*uj`FRvE
zGiA&`W}8;d@dT@8Kx$;B{)8L@!FxiAi|ZA)<Okzk3mcwHHm&WSl9p3vt#L%;T~ed9
zAhp8f2X#f1;t(veHbYngQ2IQ~Hgp=!UmTjN@bb7QydOkvQbW0I%;ieQ2eBs-TI~Bn
z5bHsfI3qQheZA~c<eTuIzWrt!YuO-4TrucC2Y`#Np;&RE?*-v%J>=?hD_~81;0rhc
zQ{Ye{sI#W|TZbgncuZ62oYC&vv>5S_3z8#oW|T3zMnrj<)^Ie}tB2L4Pgp`W_MUA^
zx?ALse<iYHGAgy~&xo#V2cGrL>c(n}+m85Ry1uFcK#Bk`Bt!f`Y9X@aZxao5ti%?h
z#2?XgiLLr^n)4wvs`MrDp(V@FxH}`(^WkLB8rj+60znY!%)6XDX7wDIk)B~xkez&r
zK?o+&*1#c6G<rd!9VkEuNVq_%4y$3Tx);IZ7ZGpKHBbX+p0+owm4O{@@AOByrZZ-{
zjXz?#AYZr$&2DovtT#%vOHo=Eji7zIhd5h`$#b0IKv*@b_({{fGcfWNb95-)IRo9`
zs5HUJKz(VIDvQ2`-XHBNH9)>dE~g`9<2meGN(&gqIV!>`gN3;b`9%{!Rz0)2A+7w;
zr0S@LVMftjZ&4Z$NWQ=0R(Pd2@a=?CWJOwOygOKsFW@|a>2BC4x2iiH+Sh?z@)R@%
z@z{kHI8;8S;aYN%6Ip~5<E8>(m(y%b8o^*<i0_zM6JTxl!FS+X<lS22Tfj&|;MT#G
zIZVv|a)`OVZ^w2Vy0KDea!K|T)9zAip^#WdVlRVCAW;pqXmwlF+q7<c&hh%RQlo<A
z>><l)EJ6vqybY|x6SDQs@TpT)vZ8sAj_!o<<*dnaKd(x^u#)1j(0Mdgff~ax0zj2t
zUH|D48*qh{a~)Gx5tCL-7tRhVcE2hM^i)aTjgL7a884U%(OmH@Rz7OdGUiB*Ju3S6
zumRz=2I}x$k5QcVmWEVL_+P$zQXUS)ieu0Fy1M!YdtV9h|K=h=w&;48`r9Pmhejeq
z2~|o`P|;$!01Ypp!SHTC0R`}&xSOX3=&MjcP>(&qkj&r1Oa{&cuE7cKVwATFp{7*g
zkN2$i3%7~gA~y}&6w=reG@~&)DTfoDu$<8xQiB^F63TPugY!7_p2BXVGQlpllN2AM
zCnL3y^l1!{b;Xm6Cw$a==r}Uenr^}~ii);wobs8grv>#gmK>*;V;#Jljug89ignB}
zH6`551UMwk_TX9Hps{)=PvK906Fn`h6EclV14Q7)%>frNX8RmuLAzJ@tJrNgVV#Su
zgt?TK^hp=jnzK79`u*KXlzOy@{hZsw8g*`!o0(;ev}BuYQo|xPXp|t13Ba6V(cXkZ
zqlAr)3QD`1tBjZoWJ|7iX%79qs$5K6J~5bMmI$@p(6AvNryny$SYC<%Qf-*;V02t%
z?uW6!fDy|(YqaDR`S7f{c(aNKZ!<|Nvv#P()uQ$2cyufuyYo=FQI?%z7ia6A)oV0h
zC$%Cq$_Po7_KgmId@HVfHt<R5`~XC5pY4fpODpu+_U45;+70Un7cjvR>k~Y+l?Eyt
z=v~Xu;ugFS7%7Tt43BQ8y045A<v!=E3KtVnoU#FzA<Ug#L;+X#q!SW+Ummsrv{5a?
z!#-n^EkpJARJ*t%9iVblBRiNZipNb9?}g7_4e7<Xn)L6xxI)P9R?XDb^qmXOJ<!Ku
z-13d4|MnB>hDC62q*a@<w#_-|;<&s)v6qQe&LYWesr9{^8`PEmhPOV=4esWDm9J1$
zhetqcnJm9LL<nW1<k=(1*RXXoBY8@ljF4jM;ww%!Igm-j4R_NbM}vQq5tHmQv?eiA
zPVeUM_X9Rd1N_Ky6?bE5#~;+F$?#|lL%9NnWopfr$wdkja+NMMjC5D+5|A+Qn0y%C
zu~N{K-y_5Xx)tqCkg9}kAG_N-Odzqk6?>_qGSx2KqnW?%!_8Tk5qIiNx2+VAawIS4
zx=2#7*f0BFU7c*jTQ@wrN4X^=rp&vL+!xO{&qV&hqcAyc#g;HJt$BIZ4~?L(#~~qJ
zV7Dw7%@l#$1&=Q#@vCfC<8MwY0vRol<$tT4t4yS~&#TN`|75?ml+p6@*p@i`-M`SB
z6+0+g<Ss#OFfl0-V%CRn;|192MA%#~-;d<VOF*6lbn`I5@b$3<nyPx-WJ(|4A_tix
z4dUVi7m93KYu;)=-YizSXZzKmJR!+6%v<bAIwZ?VBTKAx#Cy{ufo`hEkMH5CB*v18
zXn8wJ-tuXgd_n6`vf0LGeXQrK@U3q(pjw~IhP{GYHNFPWQy89`B2d1@zx(!D3!;?;
zJU9zs%Cqp_DtfP*IqD^3ntp6r;;qwCFKC^<L0HZ?KNPek+p}*B({<y&i`X|UWpNEB
z$1G$)mBqt<=+BM*l=R`yV5I3zf4*}Jg8OLm6<gAej+owkn-eANK&qw>-5L~4g;U-1
z(At*X_p(!GS?v0z<o5cTwLX0Z^|yZ#_f0>lP0cx7U4MG%zqH;ZEA>4v?QmErHFN}c
zBzg!sP2VXmHv-7ig5D7oWQ|^weUW%1xrET|8QQcG4pB@{&q!)AO$KY5QZpLdo*}MW
zisIYWQzmuy<2C(1HtF}<2f7Cu|AyguI0w{KX6P4e5lkj%77cN55^FsIYUA6+SmjxU
z9&L3xLUV70M(AV#jnYPZOg73&6>*nN8Uk=N*5hJfXtd;jU01-7L>_-?(9p=&=<r8A
zD4-pUXE2M?V@<`xWcpSa71ng+xZn+Di`b^lPHWLh_bJXK<*TyA#3f<u==F8Qaoqj&
zjeWLFyprL-fVk>|oQ9`$pE;AxCDPG#7xYfW6X5&_GYN=0^%e<%UBW4UM6Zi7ZUkwg
z8<A4c<!2{_L!hBh)7fn_fo(t&W6qGv-_odikXz{`<Jp&?(<<s5u_m67nXyX9wE*~j
zZP%^$2F>)4xprK8K{(`Q2PfhIsfNoFT!V-|HVXM5FF^xk!R<|YNNuS&P)AgTeK*Ka
z!yK7=*x|cA@NyVwvsA+gzC&7hn2*EPL!kzgT6vCUd+ng1|ED@pqxt)<txkSgUvv-)
zd5sDxXlI69+-;{MiXBQ4YK&QXtyCVO8^-Pc+?hv;!2$BfLF4+5#_2amxdxG!<UV!!
zc4n~;w`x3nfb&ElLew-;H8we-CIRRfS+cxC^{8pR(nV&@?+}CZ^N0j@%Vm!!J<NI2
z@3vBl0lRQ7|L4z|Zt09rVjfGLU++1awEc(uH`LJf|EP=O%3;cHj9JT_k_ZRUC}>z#
zs2<SuXu7NzY3%&mdm9Ow(Y#>)elaWg@PNVI9#)L=qG@VD70c*S$70U=1!V0D$6su9
zbHeys)(5HU!_X#U)kCPGWZc4=D4j)JN4%*!UpH-t^^%d&?b0p$at5YO4@9U4fdjVX
z;jD#KSpmda4}jji&sy<|$L5q5rbf+>p>BXSo5Bq>?-UiknC5?gki`r6>dk?vapz_N
z4zs59wTu}(Z5%kSJ63q<%)@cxuJY?;LthUJIfgG-_U)_Q7tea%s0VspfQ3s3U|GLU
z(CR)$C>UaA39-Z4xy8so{p<BIw~flZGGclehY(ZhPN9|rksWg6#c`T<2c`^tp1wV?
zBXt|^yS;vEe|lk-2s6x!T^00LL&V`K(kZf%-cxwRIs)^)S4<jl32N2MT&awNYqliR
zknPL%Pj9QeT|nl)HFPliEC>n=v@?9&W^~`>=F;=#@h;U8t~5Y#0PA-QGHX&5G`Yo|
zK;K1)oMT3aONcUJN0X(DlZR*bKS~PUWx9HDE*<UboePMGYEb-;AzipAc697WxY{=?
z-j<vb`RQ2+d2a8096wU`$XwsSr|d80$=!`jdCnBS*x|8%nSTk%viq_=^Ivx^kDDGc
zJcOH~Gy?%LUWzM2J$T0Kbiz5}^*kL=l7BGni>*iEih1~Dw2G0Ixp$+#ZkwRv(^?0|
zw)B>>-u2r2mGxp`us-rWOR?j8_`{{YUymoOfr$z(vK!CehG`D~$w4^!Lu{akaO;D-
zsz0}dq3Pl-y2e5d<V?555SPI;hcWYNWFWrHf95tCEgm@}`;cJCk{OnkyNgOYsmnHJ
zl<?i|mbLw)uJS;)VT+)lsae$Hf){xk6HyyR8*}l?M<``iAD(AsBGc*!58ySej?uLl
z9H=qX`mr9(03ssdo?c^%;_>M8_QZ$8m|&{rpZvYKmgQ&Ew7vk!Llbh{gcESVcg`Ps
zXt;f7A*3_#6<kVX8iCa%NN`z)7)Xj!I2X%0%4r#`ThPQ^h#h^2%u#9OG?-sOGm|va
z*ACTqu<M;F3PdsK8iBo$_c!@F^~{Gz4(cjvGC<h4sP($q+~N_CtWT5tc$HmM6aQv7
zjJx{$=Bb;9JXY1zJZIb(q`I=6k=ASH^$rxKF5~mRYhR~^1v99CQp8Ee3mMHvnoQ{J
zFx2I?Z5Zo?vL83hnWQy|*K>10K_2XBtt{l)r-Fe9FTpZYJlz@vPRBQCstI42p#0IW
z^wAT_T-#uVDBtRuUH8(liRgoXewu^R`QKGAWEpKFWN-I~g%CIn(?o!|t84+R!f0iC
zxA8=dZ7V5(v6{0*yq)9t@Fg-$>{AjYIvHum72i%VQ#-6_VISR;_9@)ArTU!AnU>t_
zI~cT-YCxW=yf!-x^n^b${@d`Oty?;bB+9E`KcM})(+y}>#ME|@{sgmz%@dgVDfhyC
zB?3Y%000yXZBb@c3Ah!s0C8kxD!0Z`w)b}BWc1mB@R-NLVUApW&X0;Q@*U!paG-km
zX$6EvQUH-1Bh2l?OJUcOr^SwctJ&G91LaGfLL(LejD)AyAe*otcA3PK0A#j>4^XxQ
z$VhHrZrog7_{OM~TH{xDV9a6FL{_F?XC*pB8sq>Wr(Wn&a{amLiRh$iu^-FZM{@9W
z+3aYPml~GN1%1t%gqb*oE(3W<12dnejgjuF(KpcB;fC1qsq!jSgWGnj<tt`|*tT#D
z=zj{3Ul}b@^y-z%F2N${lF<72*EJTRK&t}{y|V-(MhmHYlw3^wGsjBqbKUh*VFirQ
zPGlWIqh~ba84$E2+S47|PR7~XRa{VRYV4O(*WK~1;-UnxbZh%3)!NI|EKdJVvaC`!
zCgtJ<iyLCO>9!+Ty@ppLPdO2WpW_*L(hB-2TDP#c4VQ{vh*^wZ{K!~}>7!rU@k=;Y
z9`1Qe=GXWWZYs6JrXDR#8+ye95ox7TtD_mjA-mGa-TihABakwlGIH?sHSBHMq;}z$
z`v2BFpQn$Xud~Zx`Z{43rQRxqE6jo|AxhnObM1F4-UMJTnF}H|PDjM;>N{GK7=UoE
zMlhD3xgI(1{~(Jpenh5IX3~9u@+a>TJNh8ID9qR=U$;?pw~ey{pT|WavYtH}=OX*4
zH{|}eN{ao0Xo+I>i&2XmHI0q6th&KjKNm*vWZ!rWv`kmmXXWc9Kb&;>v)0GU{?BNi
zJ0%mgORJwY<gCGc{`^l%Am`21i|UqY>r*lhs;T#9dJ5H??x+A+&|Z^H+Amvp2Zmnt
zii;<s&Dh1mAfs6QC}<?i$)~a~%%>-a%+I^`_;{ylA;x5c*g5+6)>d}`regEa=FPXA
zoYfc>@U-|e7wd=03$PY09%Z!b9lfVtGs41y+j9Pj&Z{o=b4wS6x&$KjAu^jMY~L*o
z_aE%y$IW$?jh6XGoc&|U^>>H9Yiby0S?@7Vi^$CFD}uH!OMH|f-0HM7v#jjV)~d`!
zYZ7(>^|Uqtxze3tXTk)oeHW!QwS3$FW$s1(R+GAlbxFKmCVYOL<ohIw13iQe_eEXQ
zBR#!m`!`2qEDbX=ka;JimIMa0g*+L9(wSkc0nshJWZiQu8SbBE<Gl3w!uJ#y#^VaB
zxzBt+!It9r+D>twBni4ojf21^`p4hqrUB)5R&X=V5UEYm?V1@xyh;JCJNN3gXjH@7
zgVGfoI1nMVI0!*;Q!V>f4OI}#x^f|$8!sn$4nTS~Mo9L8RB(TwiBQlCvBHfOIsdcw
zCZ7!6kZ%<^Iy0ct!f#^BFzL-`<K5Rc-dR(v&l|5@@u$rT{Hr)M#$gf?`ktE)ULHAS
zyPC{zVgX@o@(u23{0+X=^{GhHy|4cG(wZaXwq_(WZFt@jVM4k0FxPM30Rr^Md&C=S
zq^>qp^Vc<|6rao$PkX1&TfZRm=EM_zsYKT^Z@R1lOQK~DzQezuO6HM#Uf_=gmxe|=
z`A<fN^CtL$>l_cnY^0U%_U~tbTbc%9w_kiXxs*~L_c&{MU#@4rxPL7>#^m-=t=Y*P
z_}@L0ORd_2mJTw6aH)}?f7dWp(5OFVw{dG6K`2$UZ)Wt;fu=jHW6S%vp^S{fVP@-*
z&;FzP`9sNNXCOyB#Tl#-T`c0i6kBUs)$JXanFU~6BdjJ^%Wx^hLuMr{Py|7-v%dCT
zC5;iJdhAA^_!~An6!0f<+*kz@%oWPxaWE8fusC=#T%mi9hl!f+uB(3g;y>o!wW5tv
z<!<h*7Rv=~1HiH^yf|rmKv2byUV5<S3AuN&o&ob$qo)8&a!WouOR=`{L&FP>lbs63
zeyhsu40k@pc|BX|?IaJ?=gU8M46LcmI)2WkcMWbbw<AZMETU?_ARcBl7*VMQR9$(?
zWrmGF2Q~>hbhq<AI+@)r7z;D5tuCA3UmKJg2i+}v6Y!Q4=9E6$3KJO@yrG?VsP)qW
zyl55<CZpI<X<Sf72J?=1PV12ejf?KbJPsw9(zp6kE*oao4msA_kG?N1oVc7-UtYGA
zGZ)u3n0tl%c*OnkFP*OG1FX0E2EVjf#M7ae(d@(7`2eN-BO#!<s6W=DeB2BVnzO+;
zzAsPyb#AOMr0{rmC9PVdl?F`T;rb?}-^zvAzB0&U?&EoR_`bvZFUN;ifsP)1`E~se
z-o8^qshIAAp&C~b@H!~0$a4p)3&XN8!vSunw^pm%>2d)%CQ8)xvqb(YS|^T)gV~1K
zoZ~g=J`7#x6pgJ-KG?56_Q@L;)WbRrY_(pSQeU_>U^*RTWG85iJIY0OeBr)qw8vfR
z36<kYf=2ub<>e)4H7|>QKKty@)>fNH(_Nx09g_`SZ%6-Z*<gPAjkOwhjs(p~nBs#J
zH%XPMcjpP2|Dca<JTd3?Fk*6&B05>>NBh#28do@$OFm<mlYXbFaP+3aCj9>0v#HwO
z#k(Y9dVxcBfmYZep5pkMu$-psA^{8+sq$(Fy2D|{*9-3pQtV3^`~VRy)vDLdIVLqY
z*JofYGMzlDqKCURTQy|tc|98kJp)q*ISr&kn!sIvZv(gr_UzH5;A!y`8R+DT?w5^M
z(>qD(Ym*Q6Qo~s$tIj?{14S`9ZweZ!vnW?AtD9=;s_WBFTT`Q`uAKb!*L!vlm`v2g
z$gdaLGzpiK3tyidu=^M}N|g5@Zk0tJtHwq=O2L(+A_R#lk5%$!yn6!&Mt{;88M{~m
zwm)5$mVrWxxlY}w>?75lFf)*m<n%sG%t#X8V!cG=!Co?4a;&?Mp*@+ikefeYm{Xfp
z5n5lHc#=^_G2UBp(z@+dAsjVFXc^62|Md$$$e*~P3+~eQ;0M+N+UwP`M>`c}*vq*E
z{G$7MjU`xbJ+K^p%oGH8luj7$O-35p4E@JSf{SV%ex5$qGYu1g{$bg#cdn~tUaAO1
z0y~$~-_L}mLi929nd~WY>9`wSRSEf|YYYjF0d7|h@VH*hX=0U!eXZr6zw?OfL~Vsx
zNKip4DtSECshP(tCd)5)N5#ZMxi}2gzV3AS+_C)pggVyOudajwOmj2c4!I1K7fpzf
z6Exk+Xw^LbV@<lMVx_BuXw+6hsSmuFw*rX-mx5Q=6=tNlc$#+gL+3ASR=G~hsu_yh
z5?=V0o#e9X>FAc8$hGIyRk1+j@CLwk{_S_-6qm49#(`NS#X(`w_^AepA*<M55O9J-
z))y!b$!2G7`WHUh+Stxq_wLtcWB%*jUbOEjOTD;=c04GaaC<^c^&DcJpCh}Bcmm}3
z^qVJttC0p~8ui*G$I#LI=9p3epImzf#-vm^^sOkB7roop=+4e1ImIcldrHaC3zL7k
zH56R|S^r$%HAkbNEIEWgrENg8;Q-YLrgG2F6(i+3Gt(~t@<6ktelQh3BiO?6<7$>u
zO<F{5y(`hw@MWKJcdJe88aBRk&iu%Xx+(@<&YjWRUjHdoY>RH5mX<!IF^>1LMs(tQ
zg<01x#uS7(<lKK`EVvGiu`)4emCPaCzU$X&cf(SVK%Z<}nLInX{eLm`=21<ZZM-NH
zl`3Kw1Qdj5QPDEQDnms`R76CIL8%}hq=*UuLuv(y5E2xbM8x3}DioqJDnnEzg+PQb
zR4F1;z#xPqtuh6&EreYX();k8d(K^F-E-Hv|A;tbZT8;pGyaB;ffFF+UOM4;-HY_$
z^Z^}Bv8x(05Ufd{$oaq+W>weTzw(sK&nd1^>^A7B9?l&O!_A-X16r5O%u-b6-g6%5
z^5@m7CT0E|uz4|yYBpavuCb(Bs_~EZ^8Cw*GS(HLTC+SkSWG#L#3b91!8Xl10&g#i
z@;}clBE1oJuR6u(Vby#kq&4uq6O6nSEF@dywwvh%G%`Jm{7+WV3V4qrsvSpjz}btf
zcktRD2cKT^OM9*Mi@SxI+TN}C&HxGY0iB|Nqk}MrB?{65-`6-3{Cn)!0!v9`ML~q4
zr?j@9C|uxEfZ$pOa~LJX;fB9-k(nhzfv5JseQ9~`aA1JPdf8C~N+voa$Z;5Qt%{oR
zcLFhvOjvx3+XdQFm>x?d710$$mm7<G&yZt1^Rr1oYo5QK50HMh&7n3YvMNs0t@B~R
zcTmSIqI4w8v8%DL%A;tsPz^iK-Bv+8ECY~eT9Y|q#x4#sGkcH6(z*i%qemiDgGYO+
z15J*~J{8434PR_3iMMXNm0L`%_4#|0BpfBKtjH_h{qeNNrtca`HPKYBWz-Jn`26o*
zG(%)F;?X{_=GDlVl4JpYupPf)83}r4%eB!_)5v!Bl6>;UkQ*BceD1n$J$J~}>W}q$
z4`JI{GHGaBla%$OXjBmHf4+!JfvOwi)3hNQC;hqeVrbmCE0JFUM*IT<IycD&ckSaj
z+1zcNz6sRm-?NpQiX;S0utxs`$5p?RO=I(7w=ytGr2t_g7``c+$~m6{#aNt@v~+JH
zjGFB^^;e^a+V!B5{6qbxVoFrI@v3Uq9^;b>xBq)kzv#nDGLB?kkD{VhM5PYHIiwB0
zskczZ?jT{%k~ZB*|Ir6$R3@_aBE^3C#>8WY87JG}xP9isNqrE={27Ylgu1?&zhtVq
zO-Ab$Pkwp*-y`w`I<l3f2=hA7FvmX6qFa?Q`8#CNvT>mHLlH1Jaj9bB8UDT)V-Ufr
z_N+^qvvxiA$~&YSy(=NTfB4?E^NzvHbNjkN*OKO+7w_l1Q(uY&1d)N_I6B<?45HRY
zp^P|}-PW`*jk8Z-6M<iieD#J+J|Zx>$vG)Ymv`jy%=GvMl~<P;2H(>o#y&)uu3C6A
z5KZF*h|+8o0oMnst3VnDKJ=e3X7jt8_Iu^b=AW9JYnL<Q<B6s<=+1&k>yn`1pmgm3
zBBY>~vvUo76syOB$DiL$owX|YaOuLIRz2pMyfpt_+K=s@RT`UAj_0^3*Gt6ttfy1P
zK@XVX%%KMHtt3&IwToBviw4B7jtbK|24dHq`Dplb*Lp#1nP!U9J~2kevt(#n+sD}L
zN#)_}HACd=Ivq7;A&3iYA<2$p8lfI1;80&@j#V9>7~LV8d1R5gs%Gh0mj7sO)S^&n
z4t&ojElQkX%TKQ^Jz<_X&5-yiHsmVosUt!E;F7>%iJw4d2Zo(nWmvuiyftZzQPnmX
z|9KIb!pq;XRLu<!ytIFC&iP=UPmf)fz7Hyqlr34F>X{E%9cdNqjPri}^4bEi->M|P
zSKdpjq!iuVczj4hEKvJ*;C~s1sleSWmms@<$skafA1p-+Qa>>)LtIgV68g#9(_HX%
zv1MQLR-WdtT4M1P(W3GBinxG#;?KMtQSm1f0pQ2ix4*W}E=)Q%6=5=Am;92OOMIsG
znK@P}lmRm!gE{sacq5V0xe=sw48Ffb2Y0RVd%hAI3cL^Fl;#I2T?jQPl1!tpAoZT;
z#;*{(CEc?QF=%DjAo#>{rDXjBj~biuuHc_&O9zJv!S?2}LPV8P6epG1vOmE($3o%B
zcn?T4^XRhEQ-gRzGynlrTi)!t(-GOVe4m({KNhjqIc|j$_reD+=Uiq*Tq=DNK6r2V
z)Q1CB-3H}5bygX*fu$1|T0bO+u&@F78<9vH+J)#LZVgui$06wz;sVnhJ*H@*YE<=y
z>Lbh?m@0kiOQ%%rst>C69suietCH&Enet-~<lKGJ_Dx=zH<tlb0*7WCx~HlmpMbi{
z7CNx{+{kVWC>sx^b8yAWhzBFcHK7sgv>aU0dHxn7e(WJLM-KXz><dX}B!Jxa0d~Nr
z+eF$n@3c>{FGNj52WSPvhkB_gp%J;(2B%5WDIN;L955>4-gu+fPh$f8ClIk{JE3%b
z#Wxbocek(&XrUb?NBBzjkm62}8&bDy^37Y!PN_CMJc$8;o}AH7+J}23o=xv7&QSJw
z^(PRlI9NqA<T4EXyT>$(*MwRJ>G3h<D%$xLQ%fG$)i9;2VK)%80TgJctg4Cn?N=Y8
zwcSU1%Qvq*WPjQ4SwP3V7u(*fQJ4Iyw!UdMJqZ0ve1v`uVT;+VnK#XFb-fi)mP`Zs
z34p7qHq-8E>%A4v%yb@3ISt$Wvha&!pKSl6rLM~SY)kUWHtENngLhB=@g*V7HyOaN
znZqT`qh{~v=Ah#2A%7tQR~*X%GGh~n4>&m}4%35y9xv*~gk|j_=h!4Z9Iq$cw5}e(
z9`3ar4xkV`dgl}oaVA<OG;8b4$zPwaQ-i&*P+zr88H}7;$Yj{iU6AfJ+@{IfL&KAd
zJ!pn_gxRjL>Zi<g9x1mS!f{;16qg_QHlVFzEuAhu^O6%)Q+>@c%<%g&hxV^CPH>);
z2f$V{0v5gRAzl*Bcc=K~Y|oRBZZ_HX(se~kZmrqAhOz7NVxH`KV5jXP?&Zs+R^^o7
zm-Y9pDK<9eb^fuJao*i{jUAd*9)KR!Z!0Vf_kkZ;3D~|9RcoN!Tk(0>hI~cAQu*d3
zmXe5=97V5FfiKTahj}(Iz=GOmTVm>ki8Vks%;hcm0B#_<Ch+`JbN==|B|Jx6zwV*~
zVrvTJ7K>auH09tGbl{r=8Z7XfsH!#aw!4WG=b2)!Wq0LI@TL>qB{<Fw?E#6YGDr-E
zmufiMWa|dSUVToNki-Dk6R5T*Pos(WGKp!BrO6I9hlF4{jB^6RcTKAHB1s=zj>D|0
z-%jc%X<c0U-ILe~?6y|}6|V_TX3=X4suv#rs^!Fh6dn=K?4PA63VS*U-t90@J=0@`
z4hvIpRD>kIf-sY*N&?~{%C9J=h0ke6@bH_^%rWdnlzO77zIM>*y9!ScTc5`C38U0t
z>d-jfyW)1|gI6vjeSB!Z6-k&fFZLn<GrR|maiWCzubRE&AJvcQe`{WKVoJD4O;$ae
zI9X?VlQqyX+3UKTJ5rS7F``}sUKcr^<UEk~E-xCNAtqo($&2j|?B21i#Dq9y`QCQo
z$N1X!8eY3{{53wS5w1H$B^2Dx8_g?KedN}f!jy^Pe1AS;R=NjyI{8liZgTszPrWmI
zrm>Te{ot-6vhEeXBcA%zzgU{<?#IG2XkG_NH-}Jdq+CysCn7Zqui1jolS{W@NP2*F
zrVrE(ItZF|X_fe`<9n0`szJAN&RYMqfOuU=k||C$=C;-@GE<|3x`BjSoW19QMYa7t
zF$3p0b?@iZFq8TnTp49nx!$N%wGt^w{tTBp$LKe6PHe^NBZessSLtyN>6Ap^Tc`W<
z%uH{Uu`;$Z1+(p|G1rxcvNew&>)9gQ`ftM)vM-F9@?SerK*a7iyopWlL3(sw_%)q=
zY3Zp71LG%S`X1Rjo}7SeWvHV?;$P|89NOZB*{Ly%tq3c*dP$QPWRlXx#8k{%e-pq;
z$+vmQK{kzUtqM4DVeYS#9~$F53?E`&1nq|Oxm)R5Oe41DWL^b(ideUFdT7Ywa9@U@
ztck1GMI7tWZ*`n+EPOE$YyU*tNfH>f)tPO2(O=28be}Kf?5V8%?QSk>x}n+R;A`vy
zE?AeKTX9mNf)dU&!&@mg!TWqtv37#AhWZz}2e@;nms99d`e7s`l^tnI(3@mvDKrxq
z=1TJ{+*fWC*j0>{lunxMetGM2;B(oW{iqQ)EOa2s3p0!pc&oIb=ed@QmW&ZwN6c`j
zwOhxm0Dr~F!ET8SOY)mpSfgqp1Tj6FZ9pz1yqgDJ_4Ap66!H1{C7Shp;)Y(f9d1QL
z)~<-G`m@>Q$FAcm&Z?uJueIVbeC`U`uxbrY#u8IIv@!*I4lS`5n`m0%t->`?W%tog
zLR+RT%4!#cCM&-a&*~hoxsKmVx37I4<%v58Py1}$0L!ocbN}pY<ppuy=36Zh#cE61
zOQrC>^^lC|UoYh|cG1Z)O=-tt<w>wNW_<-y+BGx{(o((!daeY`JR-Y)v;K3c)VCdG
z!<(A6*xxI45lva2n03EJTq6va^v`Q720g8!<}2HuoK;sA(#@9&m|-NyU@AQf>LoP8
z@1g5K;;d6xsPx$AkIeN>RN1gfk2;N&5~d005rRm2(3UA>O;e?LAqoq{q0^8WnGxa4
zvtJk^(Vr5cNKo)bbPGBpG0AS%RC`o?z^HU<6KdKNkjpWvl|*z9vFI4xXk2rHXnL#E
z7L>cQPxiJKgqjZgaXI^OpVWThqGQ{)R_``xES`h=X~S&Ba4*aXV&twbmP#2L;PiPk
z?Nqg>)X`2cNe38=)?@I`p3z<SRQe^*#cdt^2E77k<BsoWE|QeyJi^h&Dwr)QT?)hO
zeRa?*Ic4{1J9v&iaq8-R)98geTS1Z?#0*o%vZqf%F3dE;!{?RL&o0#{O=KP?dhuIm
z=_1YcDMDI~eR@a{&lI*FHgu}UPw5To=Ci#vbn>H;R9JjXPoI^^Go9NLD`@G{s%^D*
z4&SLzW9|^HVMbsC*<)@gv!D$}05%Ft)*@Q!v#JQGHQ2Qv4*v!*5`9jAR1$qIxcK8#
zUA@C~C)Yyqpnuo9yut~8`r>c$?l`-w++gxn>B{@{htxg9-BM@8Q9AuuuPyr)tJ<Lh
zm*GfCnYFRg*7QWHkkAgUZn>?8;-!yZQgNgTN#>RZOw?uDkKaCh`h)9=zJq1!?>g={
zsU{NufN+A8LaJp-lVpi4{xJy*J=Fj_F?P%BS7BdBo`t9-0RBifz~(S3+x|)X#V3=$
zOpI=l4c@RFF?$Ota}D+VxO~C8?F~(@UN*ekecIFNrh1Fg4}L~ODEUjC`9v8FPn;?_
zRwSD8$ko>Hg3B{+C+V`Q_nCYsc*&{inNfz6PZ=4XEBc7II(IeRYhL@e+ol&~^*g;V
z2V@v&mEt^orz|UT3<E`2O^0-^O!zwA%;V)8W+hEiB5WgRq8=`{RH~_yO_^>oVG8FY
zI9;3xn#>*)+!uWCdtGO=knMXn<>kv9zx_@;F}t08lV!?r2^G&mmNtY%|5+p`uOI-u
zL_`Q}Br{rx7@K;*$(bAv792U+p#LEC_3f{SiU{=Z9jMWYw=wy3I=E@T&gA8o-)!X8
z|7iTNOxG;uI4J0h5&SxtJW+)G8qoMP*-3N@QJ{&3>~pfycOtG}k7QknXm%Yf?$Gl@
z(CRbQbnR6JQ;NqI?e7!|hRKUT*(JjPLqn&Ao5|!AyAIwd1>d1VXf}csFQiA~uy9MS
zN~kx?_VG`&TZgoBb)9@G(ZRO*^4P$n+U#PtC$L(rTg-n>&$;{{lw5MEXyDH>a&QEN
ztafAc>&N>skEaR1#jpExKjd7|1hWn+O)Q?sp%m35=armd^kI!JOkc3N0E>4IOG^*t
z#tv!(IfA<B=YW6%n|^LyOJ0AZ^yyRezp0sw&FF%-Bt1G4OD7`Sbd@<e+q&Do3zm5u
zP22eNVDZQ=0VXDaHg5w%S{Yj!`|UE0c{uNG?>tr$H~dC0+WwB;`%RY2#aQi^_3Bh&
zKW;8pVeReF*w7d4Y(F#X)mLMR{}i!Lp{3Y+SNu-?_REOmWlclP%Nu*8l|M!0tiH1?
zZD7DZ0S|bF6nK2i2f5=)!i8?-Q4D;i9A<q6n9&~vVu#i($k+4$vwg^IwA=~8h!*H-
znpyB6K?h?}NyFeU&1|{sM3#%h1oVfLG=lgc#5|V5LqSzgRol6dMgU)0uRb^Uf2_8c
zgtrNJ=ccB{0UXuN`Pi4K<NY-zW$98EucntdGxA0GOz6vc4yWPe6$@Zf=DTly`SQUi
zxj5#oTPO$&m+i+s!^&KVs6}@NxDDf^<VzyrRc7_E3dPPT>}tAp1^w_K!;$8NCX>ui
zf(J*V`I*aD1}G6&$_&}eCsPYe=IICe`2-VMxCwJzxN%$Sg5$Nv<BJKJ^La42Y<>k*
zR0i=Nzxo4Vj0;DmmXniwuXLy>iH*idehKsM4gAohL3Zq`lRhYWN_I@W{Q(rB^SrEo
z>(eg@l1%p|FdZO39mS&NENQU9T{X<DUTDFoG5SErI0(0tqy&W!NRNh$y-HgSa=1cb
zZPES<Eu{m%r}_s_YJ`YnM7JH7&v0lRY+8k66qh~ilwjBS4Ws9G8jDR2#vc|QZctOD
zHEn@wtz*f&sOxDO9cCNB=i`myn9?PsH3);)B;gY9o5u+z*2<NV)Om`byoIQVj*5u_
zN&CfS5mv9Fxrgp<n~y>K-3o$68)y-MCmjQ!(g}t%Tm|u4mkvGswcE-7$Qhd=SSEBk
znU>qqJ*68q0lx*!!D@OUA;-CBS~Q!+I#l((8l&wh7N*oL`0vE8L0kufY3C6uY^Y)V
zS^GujiT=X7uQlYro{*iV-n3<F(sI2~rh+*>x(8`YPAeUydA9^@S$be0!>5ToFOLe`
zqohXONK&12rDP+=A)@r-xBhR+OOob$LOxxYEje}rhH*KdUJ0yl2dSsx7Z-#r0qKk3
zh&I+U5Ck_1KSAHv?-Vb4LMJ~_9zj^Ck@`G_%>W&1lRG9%BYgc=oy@N0&ik4?7q5PL
zaJ1=Y1Lg4nvM85d^K!s80V5y??y0nw%f0KgM0q?~c4pbwCzDzIs7}^e|B<P|*fa63
zno%_g9-?lEY+!_)Dy=5!gbTRReTdu9zQ1lsj;0@fUs;3wYU=WF+O5tb5!t=Lm`d_P
zY%*5n22gpU48m9$NZ)LwN7pYEf~nDhX!aW88={Qu8ifWE+E}_YR@<U)3VolLt!w=*
zb6Go3R8f~QN7>^B)Qybd!sx)D_!IIkUp_=BzMoro`J2WpOVFv(-i(w?&nq01=fS5A
zH_UWJt16Y7!3bWp)pJZcP9Dn=C9zVS2xDEq(=pqbjM;bq;fZxY@Q}K0C_JX#v%1Ns
zz7Aq@9A$T0qy4@rW~90@28N2*evDF22x}wIQCuG)_XJ4~GQ3M%7gSS3O%({!%bP%+
z6?Cf!ZBi0=3+jqTVqW`ysuOD!qfcb*Lf$0@5SFbRnyCNbyNDMfWckJLdm|qzJ{nf5
zLriIQgCb&(ZOnkE^uo85Bq(bk)Tq*t-cHehUOS>OYUzV+A++o(Rbopgy~48n`AL;+
zNSyeBe=WOYQjm3vE6W@q`~Tn@8{PgW&aBS#9gA8Lz8_-HSl)7}K+51!0D<oy%9OfG
z2*Vf`)WoQ5%7d$mI=lvZUPWg5J@z&F?DGlZ_D1o>CY<uS^dAQ8_BBvEi)7OL%%{T>
zi**0!KXT?4vKRc%-&X$&W&~W+KC?q8J4X6IY-QDCClkW+H024h6y6B6rIw(lB$U#(
zu*Ot%567GA5TC>`A||5A>^A*4ninB1rW&ESuHaq#Eos^$SIbf;4ItNSsF>Ycr?x;G
z%2sLbLuRGN71ngar2^Gv)dvBlIb!yf*;lgeHi9-y;{d8lXnRyb)9Q%b&Jr_M1Wl?e
zvn39^Fv(yIbKT@+|64_m1mi}#!ZI(KrcW-^k)yI6Vy&3X0fey;66o^nB7|n>%kT9t
z$x@8`n#@<Zy*}m|omvv8w0MagVAIY|wTA1r<Rqs@a`l=l1hmSxsu|&lYX02-?z+?C
z$<DhYPDQ_@vICB&DI(+{(7GIQA|oAeP+X9EVoho1W2F^T0=Tcn@%WcA%@inauc)?@
zM@{;id_&D@L{kLRGZMd7iKm=V5ivm%F|jW?M4osd7>nX;%K|ch%W4gf^}pFFEvST7
ztcF)kFHS_{;WA`kf`^r^lnr-qbsnK7pN`b={8akrJ)YV3{YnQh(}>0xbzb(l6?@h;
zJethGTvK{jEw;w;bMd)AM?GhsZ58u=Imk(1SRNlJq7HY+B{FC(ajQ@Z`5#MV9IObV
zHR0oLl+3XdQ3V#_g%l;I4e5Jc+ZVXc?R~YgMH@dS=w1<7{@jgnu4F=9E6=*^wrSU)
zJ5MXrE+XMVGe8&%Z?V>an;9XEVUIQ=>5%N5v}BnrqdQS9RL8n#gHNs(;+9GQ1!qqS
zFC;V_SCe<F&!uJ{x>`MmY#lWo`YLC~s?T6|HtPiP7psH-MFPlprY7wd42tuWx{e)*
z!mL5#TvM9OR=mgCcf((~7Lo0<zC(SR`z)kaL|e04n#_)@x+j`2YRTW=+e@+DNOvyK
zSjr7oSAK%yc7iZ=3tK~){#y|TmUSBRXvHxm&mYXt{zNd>=~%EV8*I(xuAc}3!Q5l@
z>_q%V_hPzNE#j7@+B)Uv$xRC7EA2|ij@QlhAm?fZuLt*aJ?jgtV(}KkKn)gfVz1!T
zd8J$9JYNve?~UY*y;;32?*^h8EqPp%T#r7V(b4adl5=?S-ag(bzv~L;TrI856v@qW
zj|=|*RJ|88N@Rzbf)Z#ZWhY73xz9Ck5W*B#fu)!&4G9(rjc7P|8k%=SoU83kdcQ5D
z)!4qQLis}--%gl1y6ss%-4e?a>U?Mm(M+QUUMih1K78AD>U!LG_3&oQM2Tt(G;7zA
zn7u8m+EA4~%LLT&9l|uwVffQ>RV&L3j0c#ta;|I;YTbtJn+!Z(YRkL@7$gPx3GG^E
zJL7wRn~9yT*v^`wcWMG70uXEpV+*t8q$vIu&og^L0L-Kz-ses9KIp4&e;f|iPoR<h
zPj!$W0q;IIzZBCJI|FQ`^%4GcX|N3N3^*|e$Pa7g2@c<Ggc-=kZSRkckMJLu-&kp<
z?dvlTt(BfG^*GV=GXKlsmn)T#=d;LxLmJx?93jDX!mt!WCqAYPzs7%ySX@<xiptO$
z;yPMG^Wvuxm>i)@??n9Jg2xd8>w#NkMI_!UPFbf(LtN^D>D{$CYKsLbGbmnGf`n56
z$a@ly9eDWm???jcul?9PAk>_JXo+y?bD61xHJmFFLNdcy_OBY;xo32$Ownd6OmreW
zW`<8>*KdEabVp2DM<Un1%Uvoe2=~8rhbg!Go$;ZVG&*$pN>-isp)ss$IFv8UVd3dM
zJ5zlihCt&x5^|Vt6*<=!aAbf$Cf!_2e(;o>lf=o&Uc6io93$CF!CjzI&gBSZdOz)?
z%uxQiyYcZ|2k^|iz1&6o%l}{V{(sd@Wugw*ZHx_olho6aJ68jID=P5vR15qGE17<r
zQW$<YHlrhj?xxww-5Bm2=Ks;Y%42(WSzAeX4n>(0J;}RV8zYa|zC|0rJZ3QfwAoE#
zgGQWEmn|=TU(>A{mV>X8WCV;ECXIEOpXi^SuE7~h`BSA^Wa(`=x9*9CP0|X06KaB4
zON$FcwErq*8MMj;_L)z@y$@$)`RX51SNQ_1XnAGFtj(NONT9plj~dCC?TnR(eWC>W
zHJUEsCPtfTwyHJ^lt+(f_&vXO;JIr<pB=?MF4tseZ7L{Ve2(@Dxx0P%8^;}*U!Ypm
zOapV{U8;6yr?I>bbmBudNtc`aK`nAWB@yfUjI@4~=H`m}A-F>WN+RXqgZ2`etHo1}
z^0cC$$%zYm!^K-=!J%8HE?!z6sjj*LQu6=ZD5@`pLMSGKc9{|buZR0m3ddVQ&<)Gi
zm%Y1>NO;yyX^E||MOhh-Cpu$RE+th7!(#y{<CEqr9jGZJI{nVR=yd$6phG@tupfuL
zjG7%6-Iv~;uY&;H>9c4wPXsPDW&lgWPBUd-d1_zP1I}(IKDXd;#B`yV@`TC=*<|nC
zwLODflC1O=Ra}|NI6#^0b04hET}TKBH+=C{UHR($vQxLoPBC{a%|o>Yk$o#^!*A)K
z?_E_lCQKhS>iG;w-Py*}yEO;&s_f!SG5eq01whd3DL&Qj!d#>Ms<;M4NkH7Gq6hak
zXe@c|&`{=c$HXKfnlIc=nICT01s33GwgiLm5Fga~VO|KYz9_4z2;faLH~G(~GmH%<
zzEKeK#Y2<$O~~Q2auBeq)_XA572(lu+u54@rI!XmN+*_ah#HDRkT~r*=S0?)5(l74
z<$1R*uF8{OHqbQ2DxZi5TBLBkVbf*=KylW9LRD^as9$x*2@y`pM@@}Ysf+!5ozvTY
z&8fJaoxHw2?N<$jh|7K6TTYGkJR$G%?6V#A$X#+f&V7~quDzxGozcsN#>R%1G^vzg
zO_AJ<%Y87i<=XlyXQN%ugIt4#N*i4IWS?7^wRK9vUg3U3cs=@w%3ReeaA?J)yr0P5
z(#t-FaIac3cB=aBendN3?hKC{T?E20MGWu6U#x&$)j)|WHnrOKuE_U9)t&@q5XhAp
zUKMF;_#wVG<{|O}+4Iwb_zE<!)p6!gMB#Y-_RQh{kC@WQoXV1TEBnjF@fqbOK8}ox
zc&;~;wSV#W=5ZCg(XbO(b&Dox&W5kdNZhI+@S3k<SW^YDL=$$h^?V*aFrH)bl;-Q+
zJ0~<KzI`uuK_;Ck35h8gj<8hk`>U}o>x0FfE#N1^R)NSl6qxH6Cg|r5rjC=h2wrK_
zvL)YuKhM>t)wRX8C0~V|%7meh{+pO5Q^xO}T#P80;M<QocwCCUxZdNn^<6lr)>v66
z7qC_r;eV@^9@1B9rq1o<Pzo7CP2VArWuhH59u~;<JP}n_xgK3zFm7hv*y9sYIvf`J
zu0llBBj=odVqNbSBpi2aEaLPMOFkCv$G-2DDwf|`OS$P1+v$J=qch%Q`2OKiZquHj
zu5vWdyQ<grcXl)@rD=0db-F_nH%IGS{eWGZ!W4Hb;mxPfaHA}K*2K0}<nS0)qQ4wZ
zo<KKm@*RjNqnWC&MG72xiKnu7Z^zZ4;|EmEVP=l+=PLYLz!*n%`Bj;!hh^jxTtvoO
z^hryyW?lNDacgLq`;l!)#YNiH3$fd)iYI^GniZ4v<)tRX=w`Z;AE>v&Z?-Zi28csy
zH4)>G)@0l)BCfNkdFn^5fS&LqVwS%BfoQ~(YLNgN`bVZkAG2c5{hBWqTLz?kbG3J)
zpBmxK;r{{2{lAg9{~uon72W8bzafzK5F&{J6W(Gs#Bs|&By)OrTgvt7csK8=7yU}l
z_#(QCEWhf>hjDuceYZ<xf#gNkBL0&r)R0YIhRO0lqkG>3@XSj!7cIJ-44-*MN89@F
z`91E=ZLMFn?mDny$Js1$@$K@9uIt0Qx8B|TKh=jiI+P~ENT}#CY&}-~2o=JN|2RvR
zu3vUqd3vd2eio~=tn1?t3xa^2_<GS7dUyfTt6v#77B<!x1NeI@D?m|uOm&4EGO9J?
zGt7G;i}E)2R|Nfxnfh1lcz^X0mdG8Lk5f3~j`mK^)R+>z`y(Gc@0*k2->$ZyQrYat
zpnY*3`#flc%ealZ-~W`ncia5|g9rNww~45|x!8>-Wy*hp>*_ca#&D1ov*RUfLBLTo
zaje04AE|fNhT}JON_hpD{R4b3tjFrFM6=eyMXolx`Y9qd_B8p;Qe9ExOH$qNl`-sK
zXqu8J>Rw5UIgK!H+DWl3qXx2f+3}UM^w#_>{S~(Hfaa<mzG5@4?dv;0{p(sMv2U7k
z=B{{hW-{y{gp;jzel+~A`ir&(!cLsw!rVwO^*U>Gr)<6>qk>6Ru#G>`4x5G$@3lTd
z34UnYSRVE$@<YxyA5C59&ZUzAd|9#I)T&_xK5hv=)4MOx$>u-mOWw+#k?iYDX39-y
zk%VeSW9^rPCUWe?a0cN(awgsYcNi_+;`ZEC88M$p;q^@=&NWFH<>&7IFu12R_k)hT
z-0L;=k5J`CXbZS&0|AAs+DqF$-0Enh`mTo?F>4H(qOx+wyk!SUr@dm_b*#o*mu3*R
zhaXbvKfd^`K*ZJ=BIn$EzpZHgQ`*zv0FSMFhaCynCQx{vH9$j}S<f)iq6)O3)e)C8
zcS&KRjP6}k#)dZRaK3<@3QXPHgYTo-8n`)M8^fZLKX0OK?oq854}7E(jo@MLZewx7
z0WzYo@v?557kBIf8xl?{R(4qUfx7=a$NkZi@$6MQYGw{5qnfhk<cp>Or)?ELNno~h
z8&2d9)2ysZvZh@7qcK{v^aF^&{o+RkoCSZI=f&Y(=7ON+JqfXF<tBsW@Die0t*Z!W
z2EqLC`n9T^GExdaMt_aYIM#hEyA{8!5&4`ndjZJt`(8bcC;Gjr>SNE0^<Bt{cta_#
z{Cwo5PoHB#6j-XV4Z)om^ou|OMy1PyBH$amG3sjs+cVq16P@0UMmKEZLw{89Wi!vL
zKK(jT4-hTuE_wEqKSzhHWKQoNcWwL$vl6mjj#I=K%)B6uY+{mUwb7I|JhsQl1;Ly`
zwIMdEkNa1$gM-V^?$dxg2;*L7>>jAj)S4LdZi}g$bPT<&bYP>|Ue$fUukyQHdTN}H
ziOj32@_$rQ<f>L%ONd|7J_Br4p+1S%LJnUQcWN8S2}{2zjmm>)F}~0ElxnsSYA(Vg
zDy=10t;s#)zdyR26T?lsceKCSlzHUkcccl&nv8*@Ih~KM#~)(v6J*iCbSGRPv)S5)
zZv7NZKh#I}6oc~!R|}KmM2LUt=RXy+m4q1y_fM`D7(TFl6Zf<-BgEDrw(Nt8<4{1?
z+PcGA?{7>XT;To$92zvFUHIH>I#*24q@{q#@zof`KDudjEuZ83<inKl$u|C-F>9?O
z1C&SHXIXJ%8`}~8cEu0eq_eyIgdaxyk3H{RTlx_DPN+1~g^O4d0Jo6<t@f-sQS7+}
zyD0)&Ymvwy710g``n+-SEJeL}td$JsaRHEQt*Q_I7Vh9^m|ljK@ce^Hp0-_(`}i)(
z?~pG#U79p}vqSTr9)NW~kL;?zKzpsyUaAHW1FR8R7tqVG6Oq=a`bla|?qaI$R2^Rs
zlm<@=GtM-0+V*71arF6<QFrb9ydtuHbVZlyQGAS*4?pX+$3>^K^^tSxs`ptAe8-}U
z{F34z|4GNlf(U9nz|9<VMuvo^Mq08Bv$J9@&u%sHsq;Dliis{;Z+B@G-f1wm+@*=k
zLJXclD`Xu9AmFvZUh5GbsGpYZ*&^Q#oHkk~z7U(4HW%TB#);xXU?LbH1)*y@_nG%-
z$l?BSI-xRXXwq?TNE%r_mvMM<qraAWo*LoVc+m}7LH=s<oQ(zU!8sOw-(>Av@AQk?
zH+pvukGq&Z`Sz{L&dr|^2)BR%xYMnTom6k3+yssMiuxvq=U@`@LWXIf;95raa{B4s
zk3aa+_O&+c7+{9!i@;aI$jIn9?@{>TI543Cj`qzv)YLbTbi$-m{mO#yb84zKC^EZY
zPBqOnrn$5UWj|8B>Ht~`G*xLhkR!BK?v{}<tfQ=hcqdsc`M5gtD#C1aFf&5dUf%Og
zKuEQoTQ-vh**^4|%9P;O7x~xKU`|~O(6+|^hq53rUjCa`HU1s^AC`hszN*zQS6S7M
zx`7tEViQV~ze0Nyhk>cae}IsJkeh_HoGmimfj+z3DZ*NsW_!>#=*5a~vwd77@P4(S
zKwct&^5AN9qX}=~30dB>u?~P(jhExSPdC1&+pABqWG7gt9aq#bov1KYo>?lvuT}M_
z>|xc6Up?M~ekOsX7KroO8#|;r83p4$C|yDdCK(1vY<S1kAIkO-B;Q=9t@HQ%+mBdC
zVuorTb*3IwtAQI13)#er)6gT5hH^!0>0SwU*ixd|vKMa`NK0uQHIWgT&)qOJ|3Svj
zE)S#~=2P`gM_|GR8CD#wY^LDiWxh`Qwc#J)zkRna_tnGv^J;%_$DTu7PhD9z?X6f(
z>y$r}xk;Hwh{QU(xm%ZJM%+lVkT`aHb9x-B;}jthCj0oR*1YQVpV`52EkR*GyJE1m
zzVLFEZ_p;yP`>q1>x1o`o&);{nf}Z5eeBXr!dM?MiD1e+$4n5KsBo$Qmd+f;M0pks
z5n*rCIcoBlTC~X7mU_bsMAH?Pj>%D}IF2X9tRn8o5E|ptw`DML>oqO!3hTMpSoaWv
z#?~=xK1&urMK@~#4R|b@pw2K+0pA+$jHZh-uY*-OzFR~{=Kzpg>xW(^w~)$Z0NqxQ
zFo<TZ>lO`}0Ef$`ySZs|_25ta`TQ@VpW@8|okm^lzWA##zpr;|Wv2>Ov8aV%K?I~S
zt;qih_gtTCra?q~B#ZL7+xia(FE6T^k_A}DPvpvNUnHd6SI*sEa5t|}I~x(S735vm
z6*Edtu_?7R25B?RXq@4ektP>*1zhPplGXEZQvY<9>5DF>7pY$VoN+&Q$E)GhL(DAh
zHS|=P%^_oKE$j_!EvC%?y&*8nQQ2j_4$_h3f=QZQV>P9081<*>3~zsR>Cy1$#-IAA
zc45}IS?hvZlauW&e#;V4txVKPQ>k;AfLesM5kFYAkiKR(5L$(68T=p{mWY~CjNT~*
zX!ER=(zSY!{#~(qba|&J!@;ZXlPqwcE~9$&iJ7;8_+Q?}S)VrD{g2tZ1i~c_1k_bj
zM)%H#<7r~{u!Y3AJFV|XpKogn9xKCLosKfexN<=Rr*B(Ufz6{*zX`p`uRuJUuTm|3
z8SQ#>WAe+Vs4E{eWV!$KOJAW6qwe5k0fwDRd8+mF$X?YJnzwuw;ok@8cv5Q9mQy2P
zW?N(=&^h*0ZK7cU0g`u>B5E}E?mH_x9m6%?n3j``XHyu$N+MuSR@>)Z5d~a{vc{c2
zj%dzWrzkfzDr_q<?oP652_1WD?5gVm4@Y2D&{px=14L`IUR|iD)E;STEW9@xN3&?C
z&)IR*&ARnng}E9N2gksliEfLoQ|e{QGi5O?!gb2yEHRrmn+6?|l(Cs+d5T{>G?%%N
zd`A%O0Nw4Xd*WP=4asSim9I)Zj*c$~eo&n6tsJXutgdaSic6PaI=Sd+rV(NMiP8-)
z1`@#hE2{|Ie?MHO@6{iz?JuA59-y-AoDa)GUjl_%>&YxN@-rhSuB<E@6xM$G^5y7^
zwEy1z_2U|IK;u29(3ym5^x_Ujh_KV$Mf3w$t)B)z@#z6#%%%g{UF~&`X`!!U&#HFt
z|CALPPCZu!Iv3|tl+N3vZTYOw(oTc<5uRIwJRkuhbyIC|L8;)2VX*X^DKm#$@@Ku8
zimJjen^!6Q5D%5sHl#td8o=|J#?JYP@Go-33z<#3PEF+8|D38kAY=LT;5P#N{305$
zzp2`gi0tu6lsH_qh2gG$g#UeRvXT(hv<qZvSO&#u1rtq{YD@os)WP?JbKFHIT&56p
zQ$kxSS+9<2DgX=7ysCzq36XzR;G$YBM6@K8_aD*X<i5T117fBb-9vUhCC0u=g3<1X
z7R3`<u(DK?8IbH@Y7x-?7t)=~rn`ldPa0(zul+fqp7G!bn(^>iKYKqRK9W1u1zV5X
zf{*FgVIv7Arg(KyVRq0OlxbHUbJ*T+_R?BQs?{^A2IH{D`K!0y++Fzm`MQVL>)2%p
zjV<hDAnPz&-m;YE6smA>Xo<Iw>m$@Ol^KK?VM|&3v8i@E4!Oy|AzWUbDZ|XvN9bPL
ztK1WRaf}V(@iWgWkK`1_hV{-_lGcsjxy&-!1&u{r7{(cs$0*)B#^yd-kThpWPYCi0
z9*5T&|AOZ9x$!yngM*ii4CU!!Z8M>7U!@&Ir+aJ2$-d3~R_D3T91MYi!6|c8W2iBk
zVNRPex^1ZzYQx!KOHp?wAuI!QR#T<}#Yw2A1OT~x!cjE0EgwHX_myz912AiZQ}&Kl
zmScygNliOAuzr?K+m*4aX}@fJ|JcDeapEDik)*>N>mz7~H?2e%xlo;=JBZSqrD){>
zFQ<{4JO_`_BRFm>K>CZv#%zyjB);~+FN-&uHofG02_8^2uOEy!`?oVk|83dYhgcBp
zav`BxmH>+8-wk-xJh4zfY-4@}bZ%x_x-3?JyS}T_;TFeJVwg@uR<SQJpM;Y>fNJ+x
zy7jJ8)<xxHn2pRlkN*6TCsHsmyrm{}MF0XzK8L>9CLQI$6v%-JWVRJg$mBUJH0iu&
zeD}2tenW)6DyQIhUp3n}Z{=)snYE!xJU|KM+jcpe;=KPe%lf>j*6FyFy|~u|Q^MGF
zlFS9RnAh&ojnPKMA(SQm4Vit-)TEKbQNoqg*5)E(W?OJ2n$1%g$TDxyU7yf$K6@!_
zvZ<m{TP~J%et7@2cX0~E$noe2+~Z!#oI(?@+$W&KMeXX`Wtiz2q)&`ZAVkh)2H7FL
zJg`|aM>B#UNr^$)5bh>LxiZ8eJvz|R&)BNYF{80<^j?9`_3<c=d^yWsLLLMX@38B)
zyEJ7nP>x0|YG!akMMq|WWp(KsqNtQ=wl`Az-fqeF@U6)s_p^3_hGk_1KPJO3%i%wJ
zzNuQdS#QTzfpHy8j)-SrEHh0>7I*6ox%`rSdk6$k_;%?>DkV2gh1A~~_Ts!u-uItm
zv3P5q*U{%ht8mfQ=%3ad`~NeZumy_*pZC#P@c}LacBUpLt9P4t65ShL_0?#3+wMNF
zv#zl!%jDM|o_Sd9-cWc#_GT;P)yAxZeLI_Ml)f)-1YA*BC|&YbOK9hlsmAEtQ^hw<
z?gZWC#WZ*GJFDH?RtCEJtkBz`A@@~%?Y&$B^+VzZG@FqM*BOI!pF;J=unA@xWNize
zT%yr-k<hvn8iayeT_4B1h<55o?V=6qaiN(mVmFu`o#ApK;`f3~H?XYKI^oIm8c^<5
zU)n<}Q)%y!9WE0w^~kZn4<O2m@A*IrbcXi>(ZHW<JeVXr-q1H=J$<h=#~Bu`A14J`
zr{C!CZHGaScDDNOixCDR4R5P9YsxGno|+wms(;nmGE=!2-`3s<;5<c02pg1kgY(=K
z5&muW^JX52usWkC^OU1c;pU#2fDFS~uU_N0J#ity&TaL>9?`)O-|yPI>hL4PLmXLg
zF1mP<t4jxA%fV-jjWeuL8n@M`*7x$4weBkiD!P=nPal+|-1zZqaI^PsUYdl5DCj^M
zG(e%qGuzBp?q%9F_;tlSoUB`P{#cu7<?UQv=SY|T?H>7eK(poknKR^{ZX7I<9DHaJ
zTi41>706i^3#al4NNr6~U~1dwgEAUBs6R^aXl>8OgEm%dTygEMt{2yOw{Od+^<4jp
z&ETPMwKwmb0>tb!?w1^rIG$pRwkPdQTa3-s@=1T&?BlI}Aa0ko=Us~IE4=VWPhru(
z#$PLYkBw=A{VJiApnJ*#+$KBn_YB%LB&U7ui_Tm>m6Lb9Yel-PwRN6!n*YUi&o>^r
zv^Td7`5CQ!`lH5T9Gp}K*skS6&wMSD@%A30U$}t~#?q%d^gtM)Fk847y18tam*Z3M
zgcm&4(3yd4^{=}*k6V8@>j{iBkDlp?%F`PSyHMSrUMdV<$c`P9A4^c5$4V7Y=@iqQ
zmU6gfakseD#Ad7@yFGs=LVe9jQEfwCJw@TiOpbDP;N_dk2)rdjFy|e0=$%{gZLyDW
z%+C|o%4YK7qeb4Af@2E9{Rb*4lghdt4Ndl<EEl!EiKsbKY0`|5RwxWm7x{CfTN;n}
zj&-H96Le_<9D^~|wYO=1g7g^hD8QlOox%%g<5yk~F?EC>rG?*|O?=UNLjHD;7vlCR
z_s4t3`>9cln>8TvUjxbfm-eI=nbRJKi~Ls^R{8)ot^*y-?ok9ITFPsovCqaiXJ4L?
z|9^ruaPRT%jeiMr&Q1qaK!r&jK49u{-%J!bABZPU|H(<7+^h{^lbK4B&~u7o43HaL
z7H7e#1cVJL1CsLR+9pJvGDf|2hes8Sn6wO@=qMa72ztdoSCe}j$>=5P2Szy9XWb_A
zpLvvw%U^_>d&K+9Y5YMLd%==L{<Cz08G_SS@$<i0s#I-Pl6#xh(NbD8I!3k7;VvF1
zBw}yU9c06v{VHtWcxNfJ^DQnR;@S0R)TAKjMGhrnHu>y8jY)i@HSy4k_wzDL0bwkk
zB)i~T*UlUgj$u0pY1rC@c53qCLI*P?XgxX*JeGMa=rqV^&0cS^K$$-v%tWimnP}nk
zR40IsGPNdier&>Jnc{_>F9wS^J=JA-RAR4`<5HGDhw5@A2k!1FH-$Rm4>RMX63#}2
zFa0PgdQ6M!SY%#vB8jLsk+R9!i?qMaq__-lR>v2)N0Zmzo^<@-HhS;az&Eu4Q#+?|
z7v{hI+-pJvvc*AWNH=O%;*NAob7c-4O@yTel{31hjj033kvOqok%)Nx8^N$>Aw`0W
zJVvWLd#krpcu<}Yx8-M-`?;2rPW$^+KB}}Sid$J!!$A(gKn4oJKq0z?!;*Qj6S-eA
z!`N#XeT;qR-(%eM${$k3DjN%xr(K{>&QBD_Gh0S&knR*a?AniHV4L(-a=yD*MAL$W
zoYEoN`0}HY$&v$i+fC05pXkTBfSY*Oa^LK1GB(T8W=g1S-ASxfPCH`?$*LXT(`(X<
zUF+n)6l<k-dVbYOLKf1hyVr~_#Qw$43w}CjC~&PUC=2L%a{3fG_Wqyt?oL^?M)#fu
zyj5RP0hL?ZPG<7}W&@tfq5Ltc#(&bEkzRCaQcF}8h&?P5j|xsTuk0N+c5Y{v5{tqf
z(>{{@FAOg9of`Vb@I}yRj_1AvrZa0<b{XALlFmGb8Sa)JT*`GaQMlB#Q7q*X2#9TI
z$^P!(8dyhLQa7M3ZB#K=lfI9CPpsQ38lcoLF{ir4T+C$7I`(6ar6QZ0!Nrxrlxfz1
z7ksB9>Pvcl%;pjyW^+|_G85gwmeRH-3%)KkbURdArPrai^;+-9>?fLaV&b0%d*AlB
zzOcXZb{3|-WhyOrX;%#O6UKgB2F>Nl9yH;?nZ}&Gh=r&)2_d!McOg#RE|U8I|E9z=
zF9=8(ht1k4K7E0*TcvU%|8pa4)r;!|e)lO<y-y$12;TwN@S+mX(T__IEFhpV^?@G(
zJt#0WzPFs38ac6y8)Vzmm>yib63M2{R&H<LaO(5^xOaLa@U+vtk3`#>-B!H~?&i<W
zpK-TU_emhQF~|M`tLl}XmFuhIZ)LdYR;PH1tdF;td`FBiK_zX;ErGtLYGtHE5s3Mg
zb9NSAF!T-DF`zwA$tr4MM~4<pw1_3X4UQ@D*sz>Z&H2AUyyj;{Cv%QQ!U6^fg(Y$O
z4h@-!oC$|VlU5~8Q5tGWN|gGV?SxGn=fZJPRmpW5h7I~zT$dcxcy!7KF=~nT@I?K}
zXy3w6CGN+*$5pjxN}0csf?mPgu+0cksC2nnr(Gq7dpT~B9dpiWY2_LVpH-X3mLSWG
z%bEyG5mp9+v726+GN~dExXk~mO(!Wll|L^%pdS}oW83OKHxpC+7ZPS+8GIlvqHs#$
z{_<b7Lj#lx^Xol2_2bT2S1%aq)pQI+=EohGjs7~=<HKwGFaMny{rmoZ%#7yY{wD?l
zZ3rk`N<G||1ut_ot?%F<9W*-w(M}OJ-AuQt0cKYJs$H$2ZluSdY(&51;#AIsGJ{qh
zhPf;zEvhlZbs*Tiy24Gh-N&%5cQVK9)wz;{co@sCoIzQ#1rbZB$CSU$>`;C8o^IjL
zN=h+et);J|RFK-pF%oQQ&~|F|cs@oplB<8IJYulc@fiE*(zW)DMKwLPl+XZ<4%zr{
zQCzrs3$wYNpvPG$0ZwP=^z#CUF*&%@d1|sF=_W@5(emt_)r*5YIqe<J49bNrpy&G2
zt0n}wXk2T~s=5_>9vV6NJTDOjRA&u-w=dy}P`T+dV)+^ml$C1)Mh~DH-O_D6_1lC-
zcJR}xHh=|Hr=m6e6jIqBf<A7IYBPF`cksDMNdv{Gxyb+k9>?OJM1+Q(F}%_%o_wqI
z5c8!EZZ2U6)Rf7H#cPrQVVODj+${~LK2@&Bt&|eRAKaB3gVJz+Q*qFNV6hN5OR|MT
zsC+x64QH$QP7dODqaS;s15B>FOW9U``J700_!-l}M)ysLi3!!hA?z5tC1BPt3=*WC
z(pN!5i5)?vGMCXUh~bm5*;RB$^hp5?WbhVaXC6ewV|@Tp7&Vpq;ks9D*BSn(QPzQP
z0h(~>Kk9Z3EAov(lKcwJ<F5v~6B0l>XAY&pqKmn~X{88rgQTVOeT;q<ea?*1c4#wO
zhs2~%&AC0%OPW4)9%b4G+dtu-SRGq&`|b0Of_E<jBRuUt_8d&W{!Ueznj$<AE*U~L
zNJ}NnbInjjXDbT^S%LI3XxhW{>;}Hm7TMc{cEW1WbL3WCiJ$Amn24fqJ=CF%T%xak
zdQ$sg_?fq(%qnnb9P&+~pA@l7!TF0}FY`@}A{n9%?T+g*K?-V_eVmtHClcx}n?%Pq
zRXjvf_Vc4ADx;Q2uKcKmhCnxu{%IQv(2sd_ZIVy^>49kiArp&!pCZqKEd&Yu)<LOj
z={d;Qf%?1!CETBuissnqq-ul5LGD)wEu@suEoisG8qIbcRGzQh^)YYPq?rliGoh|a
zVcw!(+%dkgYI{!3<+?{7C*ewG?mwM~oyjhqirromTpm{6mXu#s7`}M&uck*ull4K5
zsHP*yMa4payIs+I(tKf0px<bKhjn8Y=XuxKOp`Jo0}sK#K#0|&uN2P?-y0)d1r|(~
zeh_%+vJ*mJhWl_L=FSNCQlCNyH|DWMVUBL8A?cQYXkjJQcv`mFFVf%P2+wN*amVkj
zujwx@{7vH@tN$MLr9a__M>K6kwL~dOgAO^fAEr}PuCmK{;tVaZFRx3(Yj9StrPCX!
zyTvgDMS<p~jn^hG?6;%pM+{z$-JVXhY+oMhbRVk=<uuf$y(SFoP9UTUKM>?4OL<i0
z*fe%Hrp<@Dfurq^)U=DP-9rck{D9f^!1G%~vnKR&vW{znvl&_^(fEf`7s`qQr%Hm*
zlaek?cVdk-J2kpXJBkUbmHMo*#{uC9SOK`57{R212@+QE2ur!?5yTO51e=7%q57?O
zQz!zosV#(+oCAeZwRJg0ZBS@>A4dtLQ~ohm?NS4)XZ5Q6L$50Ro(_GSh;guw<==Z8
zI9YGq{;1^FNSMoaQ`zO!4VGO*Z%$2L^@t;1tnli`Rc@(%@%%+~(u@roXES5=J+KQO
z-g2+B*&da=;rO3-1`I%%=O)087UXwPjF^d9epVU=^|_#BV^hN{L8zo8ov~Tf{T}KM
zw+liLc6dlXi_VI>LVlEC1^kZ@y{Ay`He<INg}u|A;a_OyYOp#k!8UguO=Z`IY05pt
zBs~;Fz&8ylgC*L`L$Z?VoSly+o3_CYl<x6#Xgmm5B`HysCK=uV5Ot_O<`4eRGZ%>c
zq2^V8bfE9?S9Q-}U0Z20^Er8R<5n+>gssy46<v^BYGc)DDh=I^zQ=C?8}5_n1Of$n
zvn<6UBJDyAE)}a?otY-AKKZE(YKBwcI)agrQxjP%9nQu}ObwplBeG_y^|qH)X?miE
zYO2?qc!_WoctR4>@moR2&^}{~t4=fGEwXPYgT)~G#w!WSH<it#gxY{X@M6*Q^z&hX
zpI@_8@2h>Ofp^M&|NTGe$~0zk0l`SMA)K_1Nnu~lV(gXu$<k*x5kAsMeM-&kj|{js
zqH)PaIRG%ZBgxz2_Ua2T%GQ0LB?!g^?T<oCTm20S%EIjH2Zy#HtCH&h*q?|9#oav8
zRgxy&9C)0~l0Xg7XCCz{n)i=<j;{oxA5@flr*J5h(Ww@*uegERPo1IIR+t=lmOSM%
z2rg9GMu%bXN}VqMtfmTJj&&2$n$#MWQn+E6iI-K@JzLR|hl~LzvvbR6`qI>V^BS3E
zdXp|)M^=}@30TTkoMj#AcXAzL>5l_Kw06(7B3166!uSX5C@7T@m@Wj_adsO1E7Vh=
z$rxnp0SC-3qh^L-x;zdo6Uq7Wiq;n|C^79p>jpSmM9#)W%pA!{1bf4-5xc+Vf;Hcx
z!p*0@e7fTC-77sCG?ZcgEnfd0Tdx0o6ZHT7j!*>%i}dCDqeVZzRHf3R-D|I3m4aA^
zyRSE`jsS`k_9<yw7F$w=OTMQ((|`!j^Ltxd%EHZz`;^`V;e(5=<=thb2J@!jqwVpQ
zE`zwJ_n28y8-9nZ`>Jw}7-x+3wK`f{r<;njwR|Ceg6spur{kbZnCxWtki1}A*#Kfo
z5jlnO`pAsOVfBGU{Gz9m^+{cgw^+fHi!mS!BjemqS6Oju+-|^jgDYUlGZF6fn(w38
zYtT+fcN^?eX`y~~w`djfR1BITHcG9DH}Sq^S^DtREt4h3FM`P(Gn<p6+)tjru~!3V
zz;^#rD}z~_tu)R<+(g0~%Nvy(Hy&Xf+Ra<!w&Ieo22JLyG_y5T{lQFqnmxu8E%6!T
z7%?lu{_t7sJBkE7h$!_CNl&*3f-3Nt>{F*kx=O>0M=BCDCoGhPq2fUv3Fd1av%?I4
z9)xB@VOI{Lv+@gQmn^rLG#pb#y$CkTBt3=+t%Mh}8n*G}{q9%FrUWx(QBGz1HdsVB
z+YfpVM(c+@3R|o#`bizhR+<<f`$P*j;ZkqIL%Yhc7EAR5kj!RjoP@gUmT|rv!TQO3
z>cq@Ut^s2U?U(MrXOya8n^$AP_2ZCuF6)-FDV2ZS7!}P-1IphE;{#DY<-bvX0qi&A
zm3`n-3R*V)nXQc)JmxwTb|@U&w&Nri6Cv8*GAQMICsL4d;yrvQn!FrU&9)j&BxNqo
z1W+r+Ci^VY#A@S&u>__*1FLk0dg%w%@3(1~wnd{Gl~CO1Hf=-~2i=-(P0lt8bzozT
ze^iFLwO%eTGCuZ-TpSU*z0!*M%?*zXqkx|IT+%*|feSV>2~Jw7bu{!jkk+8zJCd0R
zt7a!Zi8Tfo?CljXW87qw0qvN4T05@8xZ^q=4{ok0;$Ll@9qsOlBbXT4KAvM!O?mi<
zLdWy@cRu)i9Ca(5GPcV@H9x|~xv}A?ufqdHau=*-DBdFW&1%9%KY$neqZnC9TW?t1
z88K0t?uG`-N?Ob?2+++t&!3v9?z+Tl+6=apkrW$I>PP>Ytco*(v3SVbBMFR?kfDc!
z`cCR1&}fTJ;d#ci3Cyw)O>s=SP@O~v$^L=4i2sYNcMpUzfB(iwC5cHw5wq!_64Sw9
zbDByeSxtwHB4*2$Q<_?2V$6t~61Lj1v5XRunB*{<n2B-NvgI(2BgTx+=A3(qaj&`O
z-siI4=llG=&+qs9C-lc0?)!be-`DlJUI!^jKM-H^>fSL~X<=TVUwGGt42gG${{g$t
zg=Lql`exs2e;AkAzxV$xc2rH?ifjC}P$}y3&!zW~fQzWbIP)0osgGc(Fbzgu1dEnP
zeS3}l>rHfp4jZH;rmni5;=V^lZiPAe3q*tLD`h@onN1ndg@evo?<+tT_Z6n8>hYi?
zjSf_-WPSkX$4tgdV(W!Zi#P(J?hHp&vw^khEarq{fE6jeTBe>Ns^2jk^7u5G-o!I(
zzx!qKO-9dril8v1ym0*DA8Oe2zhh>nUzE3N0wpX!l&c7nc{1Im`5F@<LXF`EQf@G<
zWY=oLjsNTxnZ;ukGUs~HCw}qAgZ^6YKZ1Sbsnmi0w2S&%f0DgvS-k7rao}I(LZ}7A
zxi$+#gp`^MoB*H^72XO9AvFMjmz-$rW*jOQ+<?fr7nT-2o)BqQ7EnS9#^-G~1wgqr
z^erm<`0=zDtcxJz?uDDt3w0R>Duh|(6I_i>#WkVrSbUY+!!$>CHPQO=hRHXvtBSpc
z!s(@yI`9{uCrU@^So#5?#PrnM-{{x8r!__m6K@H><Lw-8M|~<<b=>{*Q%eIP;B1j!
zy%6R9v`-Xd7(P(BAcbEtl{)*23`)1YfdlvYeMD#9d~v=Sa&>XCm2Um?>UKL<qnEoX
zRajX)m~k`QR^M;oNl9Ulke)aUZtFcC)Kjq=cttFoumMvU$qb1|p)uEkRy&oS7~X0g
zb}dst_iMn3-A~Fa{bO4_UIyPx{_A^)vA^~&v2=bVJksZ#%ovWSAAIBU=mk;(c};+m
zR$Mb%o3|d@iA1+1(WF8PXkU_?cBLPxMAG9XOFu8~H;!sFK#a`<-K$zwS9e!BrX?3@
zrg|S2PJUJ)cg8|x!|8nuR?NRSxWn=}jSo8QYGdxA8-0%?HnIDJuBZ;eZnUX>X`9IW
z2J=Gv6Igz=w!VmGd}YA_VWrQ(aKcTZ&ZU`@tf&V<2e+$|rgVX)=yg!$H-HY6d#U`R
zVnRgC{TtY-44}uv-e-!)t8jybj;KcfcsF(p?0_Y-HT26eYZ3uX`R>d&749bwc0PK~
z%P%<V7P9qaXNZZnIl9QFk8(A5`|jV>M?w}hdG&wV|Eq_cWZ}yI_*yCg$pe=?=|034
zO+by`BjX;*lH#w1PeHW6^o?rH4F?N@1k4suH0Nwb13`M{=+?~F;+gWerNPWiNLnGQ
zu<o&Q-swO?!``f{Y%id3{T_EvWtP9tDnRoMy6?Bp&Jml~BC0$T9Z@*HA5M=oG)4bW
zIn~Cqo}g-BeiDiv-Tu2>-V@bJ*~A;*vu)EgL)1Mo_rNag4(IH+-QX_<?yuW9R*S-a
z4IfynmIc@22&=A~`jRvCNTJQxqAcPEw5IYa^b&93yCLb_8FaDO>K@o*-2{Vck+cj>
zkcnQI(3*`N<>@nAIxG3BC`AE=r9~0XPKyKPf4pXwkX_)M?;tm@%gI%J$Ey1gPLzIH
zU!r`4GJ*FE-a{-;Z(^t0HI*Q7K8Oa;?{J%7G69sq^m_s)GI~QoO|W?@N#QKQcA=r6
zkAtfzNe&mDj0;<y@yZLuqjFJd#g#tal8W*emf<f8$r*(T=%4GJipvU{()%{Z8E7k*
z&$Ld#gr0w!y1d3fM)j;hU8IzF<|@SI&N-REz85m)jodNtHDPMg71Re`!JRLae6-uz
zp0l#XE~jM4Ujz3Ovi&#Oyi@(V9M(C^>SC8*s_?HL-b!4-4-oeWA-##97hpHi7)7|5
zV}+zQmAKR~H*|?lf}sTCq%>W70ypT!w1!BD53bqR*x(x7m#j-j9v!phDMgi9yFND`
zuW}21edZ1MEDL%S)XG-AwcBYqV^=rtTf9wNxtS~T^Fb2sap;2z2_=cCi;^VLanVPj
zsJIYprEyEtdKfxzXF!8JuT?t-+3{~#mWEFhYo;;+2aQv{PZwk!Q<u(R26^~07X*BO
zBar?fZZn~81k97C*PxnGgY*oES#r&KSte`wL=H(<b1pm=h$kXyau`V$-B5=wZZAN(
zKBP)o-h+k2zD@_L>Vk(w{ry4u^PkEBpT9jP86pf268VTfchW3mh_-wmn2g+1mW1<@
zkB@r&gpQnoR<$*5&;YTXPUd|`^vI~sR8MwVg7T?CtMy^Nj&@pp4b@e--J^Fue%$`j
z3apbIs0fvcngToxSh>w3@I%iVvTY<J;oqX6vMS=*QBOmI#uoO9U=y1*hW8L<(rwD+
zcw&Q-7Q((!Vcx18Y)HKo_ViLkpM$M-VS#w8`nGU9GPUYah*pgHS2hg!R;$jcPkJh>
zeVM)dO4=J*U#y_fV^IBfcv1<6kbSb~!7R&iLShK#&vM`KxWftKjk9~Eo|k+!>299t
zK0e@ceMd`Fpr-4U7~<d@wod{3JXjPwmMB75k``1QvZP!05}OM#{c>ERMAC|G;!I^2
zydkP#`?`4>7<MvFJzt9vuwZ~tYP4EbnhsMjdSSE43XnGkH$`|I%FY{&tl}30vk8?&
ztg0}_4X(mUi)~-sUg7VAB$LneAJx9>`X6IMwYdy@nJs*XWHcI9sSnyLOaBfP$jD7(
z0#g^$KnfGW({%xn);f8h3Qd+O{hPni+3rYXTD+978tkx;o`jkAn<oUez$GPB5;W0U
z<M^_YFbli-ckUjnm7_m^G&2br67Z=^{cxky8$BtHRhCy!SAPsN{Kd(r+rb&wfw3lL
zZC2S#@2x_Y&e>M2F}^Cc=_#6cxUAD~aN<PUq=Tm<Wx(s*)=3M7a~{Pm$Rn57I*sYH
z;>(;NY2d5!3HdT1o?YPyb+#cIQO7Q$q)Jdq39J6Wz5VSq$A{U*LB5tiAj>iicI(DK
zj=eU}j&gG{4?V*f80hn%UmQ8jkEXiZGRk%g;rP5EGaN!;Cyrv)**a;-4iL3i0VL7a
zLuj03+%vP-O6ock^3IcMj0(~0=YJVm^xSeF=VHr{2i)S(oz%azo}C_Z+SG2XF^P3m
zbcPgc0a9Va{9uM<^7HZe?Hx~qfrj~b#`gB5I&PNi2#Y6oo7ODV*s$M6O{MPeAL^zt
zyGGUKGvS(Ovg(%b7PIP(@fI_Dl#j^)=_xFIY=eZl4D+r<NwA?T!wmRHL?X72w4j-t
zRzpEFyFq68dN_R%woh2tJ|g6OGn#oZ^+{l)WA<omc^8cozH^bt>x1fip5i>Ku0UKC
zQ9s=mG0bly-e7??Fi4Yfi?{+P!5pb=LUUufE(0cPF`S+^)u)<og{KnFw$~65zc<YF
zekB2s9{Kr!)$xhRAqjV$4W0?&dU!Qv|2FU5tB!14VEF&YMh>N;Ha+rSC5&p$6V;eK
z<O+5ZC(X-oq){2#tOooklvs>v)^`InZs80yK{=9~$AcukY(zjwdN~pKsa#547L=KK
zH=qU1v&apnH%=E(2hVQKR2?HDr^u*{nf%y-DbG28msu4flOr;LJfT{~sk7H47zP^}
zG}VRz^ov<YSxcL*RUfT<G<F9yl6VSIy`5#deS$JC7UoZ6c!5G@nN`2iWP1OuVEy^Q
zTdJ7re~F3~v_;ER&+F~m__K=I#(Qs6RxG$&lO5XB`3wu?FRVaunxT*$Iy5~w2To_#
zY95F~AfkMs`lU+U_k}>&<Qg18a((r)^VgzPdLrjV+S&nXqZ~90g53X6!SBo|;DbvY
zF$y?5U5;_0qs5BNcqduSI;n;%yC<ikLWF-d=i`7NpFSZeOu?+9EuJYSlBQ;TwhbOi
z-nZm8t=yGA?FvvE0h5pachgJ|anSXESP#G9Bd3U>d+=mvGPhyQ|AvXg!yousG3FwJ
zr(T&(8y4$45tSsySGXGqyjqiH0LO{i7f|^=sQFY^xYkL57s5XBqPk;hd&#u*vTz><
zwfR3_iqgtK%~n4!Xdk1RutJJ0PPp0s0=zeZ38v9GX+at^@V3vIvgwycbXZzzervhn
z#K+#cXJhw#>N$(O;_p>|Y*59%vKF%G;+R^>N^%IlpDhnZWwOGCc>@8bceiviAIWQ~
zPOP^NF+VKhG_)GH47VnW31M2!_4Dl86(s!trXKR22)5>IHp?^G8``}>sA3BOJUpsi
zihY8s_o~krNGa&<eq3WBR5HNqhr+o62C$FmRl^6nzCn29Qi=gX2drbl(skVY93nRt
za!`LaR9B+q*5GB4@T9xPt02A*Ew7&wRo*^1CeJZ#x3ttfQK|BeilaD%MIhlim<Q;R
z@=kSHScgy~=?x@9hC^q#yW{3G!3jP>O|~X!4F>5S|M=|eru@H}vNkooJes^qV5)KI
z?2cT5<G;8j+&RKT3%(5c#-)?Y51=;$PLw`XlqbIjHAwNklt!MdOg$ba(svIr9}Uqo
zT_26%>Ybbl>dJBEu5Rr55FuHU<2x~*8#5}pmRx{d(^@2Oe-Jh0++b_?#S6WpHbH?Q
z8D_{;Y-YBS%QBil^gxjRgnm^V;53k9pucqRk=+_TjP{jc)-Z#0I4&V3`mXDO;Y_QR
zv-%C@D$KEahPEom?r63-2*#o*Cxsh2LxzRn7Q{(WR<IqAU&<HG#s4kETlis!6Wjli
zY1cju(ErlBc>WXE2qUdK{8sN8kNCOIW&5LDpS~Rok63Q2cfw$E47m*|FY-bOpcMj}
znr5Ah2uB2`l1&ukjvYsZrvR(NSD^lN^NGpbA9P9vP^w@aNI?3*UQTf~xt2trEz?#_
zRL567Ot7y#I(`LIKtohapNKCzh<uf=R2GuYac+{!IZcGMXi6QsYA&?^J)TQ$dT8b7
z-+-&hx*rY`6P#9qm5HAhLXLMZ&JV(MYl->{a+H7I1xZTC`8Q*B4Z7}3vzK>c$hkgh
z_=-8$pXuHKUKadYtN>y^`HalL@MsnxX*OD|3C?QkM?uw-9#;xDMFG5ZolG@4=UAIn
z*3`bsmSF?>ibkhRH673YN@yCPc3-?PYZOEHYZ%vrCv<Tt3WK@DdGO#T9zw}7`zG>A
zTo(&P(v!l)D^4?xq#yVlO_XSPzbQu}j>rzNIrO;tc~SzyRvKb|s-|bkI$G_R5F<%i
zvNVHJQq_+OITt$4%k+7wDEZ&YWzHYdwU^t*;mcJOKVd4$JJU6OwlQIx6uar<4}58h
z_eKbdAqfEJV@X?+d1me=-9L1{FCF(KBEI=gMt2Q9sgABHi}nkBdeHh8Tb&*1bDLno
z2=Gyz6@Qcq5xD42IFz_EyW7-dyP=#ot4yfiqh^$;W?7W{3^JEW!&nls23s3Vuj83^
zmxO@R*WgN7Q~U)fn-It}Q>@U>3>itb^07aj=++(XzOC6^XdTsmCfwfG%r$n(>h(8-
z50U?4vm^Y|@n6l;40KL$A^c0?z9RreI3l_d?Q-yLGDo-#t+CbOCJF&_LujcCp8`7I
zPoMLKfkd*}X%qe2<HW`<qwN#(zGXvV{n5z#Rj(yQ*3m0`T3C<VpEgRh2xmKH5JE10
z=y!G%Yw{s%*o&)_rP#ORfY!KbZW6wUVO@*ThN#*o74n0@he`S`ODgMdJ6MF&XGAs?
zc%8mPEB(y*RGH$|F}eLSXV$IXe9PwF_i7VyEnHc~x&U}g>~Xv$XBl7lh^Z4`vIF(W
zL-}<kj!1KgLwGLT{wy+*oYBlPlbMdq+4<ipt%!P^RM3VwgHN*P{>_NUQy*=gS<v$D
zn%~^3t%hqm|7&kuLcuk_yo+Jk#t$Ie1Xe(zjOLA+Nv0EdE0Ks)fRTck>$@CCvIz;R
z!6#Z@Sl{DS)-hSZSBJnV!`creCC2uy1plSKW^jtfGf&0$s{j29XfB8oY`6p+$|}~6
zWL;JrndRqd)hhBFdICp=JP6%6<P$~d;hCa-^`h=nDNF_(7bb%~kH#YnlBX-OFTR_0
z0pVRy;O8Fwopsl$CZY;k!V5o&d_Jh68PK(#!@F4JG>|f!BgDa<4(c+#gp-DEnqXJ-
z+{9Qw%u_=-ZnD%-gcZj#VH^iJPO11K8Wch~+F^025^|S*dbedZs>LY#kk7uf46X6g
z;}!v`%GEe9O}P=1=VYWIA{+zj==Sm_s2)r5o+X)%|0EpgWNtz|1zwrf1@~!%)HCBb
z#xkczPe88(*$am{rYW5>(V=d_Ssxp`TlxY2F!*V$>0ZL8lel)L@;U1wKZ#v#Hra|$
zBqL4YMCwYW8E0xqpv-rqo~I@=&bVD5<Pk^t1l*K<1X8V<3MB=d74G_bp!9XzeN<?r
z^gi*jtFj93_`Us7xTZV7`*(=`e8yjd4^Yc88rVxwzh+z;Qt8x!eD!1r$%QZ><h@4o
zBwEYAjJS1K3|Cj&{dz#Q6pEQ@$C3M{CEXb%fz{07!jIb@WXL_Z$K4jGu#8wxC{B?O
zHR(Y5q&Lzk@o$_~g#v&RXH7`Ktz;f|hNvsg&`XWg1v%Tx5u0>L|CHOAw!yjm+^kcb
z4m(SoX$3a<%4Zvd|EYe^WbYdCd6NomHo8!Dke&HM_o({3b(jXM<U35rAjU1wVhYf(
zSc@6K$fqKy*dXXFecm&1=I!|!A)LaMHf5EsbHtR`PhSXCz7<PF^}Q`oU?BaAfdRB|
zB?NG9m;^Y?g`@!bz$X-n@%LIPtly?FV@Jh)Y_;+cYv{?KP7S(2wn0GEoe{^gUe3ih
z>7pZNkkro1g19G8{_?h9L9(hxl74sQw}(=s8kZdQ47X|y_=?fX3XhHu66dp(eadL%
zz=kuzFof{w-T!Qg=3#%2b0G)PVpxlvZ1El^HE4<a>!>Rj?hA~w<(Khw{piT)L;*aG
zo|3^lnf_dpewEXPt_S^sE92Ft(v!oA(V5^WuO82??MBCH+b6>{eGI%a->50_yB91t
z`Urwd8xAND<av+)pfuViB+X`1k7W&$1OlzJjC@f`H0%17bl>YMu66(HW)*7{vE`;|
z`47j`zW}ziREqcUUv@uKT!f96TG)d_uvxtgTvkeRiS00<E{eTwT$irh)661-wI)+5
zEb~|;V{^VcE88t5FPA)LZa{55Q?w^e1oAe2vA%XSPp2Sggrb7KbnsJL0ViEmq%aAi
zNjai>Lnhf0jz&OrMpF31sM9tu_s9{tc7$w#q%1A-LtUKN)T8t%$+ZN5TUl)<ZIdR=
zKQQ!)tR6JJq+v~k`^iS$*3QXIUnj$fIujA{(7%5=IO63S6yd4=<?oXlLtQ>Oo02oO
zZA{L7Y5KeQ-gSSeu;BDV0;yA{z#+&{ne60*>7#Knu7n@sWY){<GTDsgk>VY~rKz@c
zJ+>xlvWR+0EKj$M;S5m<cYSPKyT5rQBg9}Q3kF1iwsX~K_cq1Xh#Irwt4i`HPgR)n
zOtH9XWRfKz^rp)>U0}5CKa|X^K~;hH>tQ1zHLx_%JkQSXe^l1ccb|sNw<3G@KBN&Z
zDGl<3z1}+8)}5QsO!@uCyQA*k-V*I8*h~1bV&MT0lEHFP`I3CWn}BZYnS?Kq<pqgw
z3(-q1btSZ6aw5KwZr_x%vxA{qLXSEji)d!uBCc|<eJO4%511$k6!91K$e;(Jo<#Pk
z_Ja*`nO4;|BR{7<AFEO^>4Jl_U-^=M!3Y!(v?+f{04snUH{X-Y+k|cwN=9x#Y&F>0
zv6|ozcR2Ta!i)Ln+>_H|CaYg}TQAl+mp2~K<CWS~W9Y&5zu@@cQB?49phJCW`mgF!
z^^f!oPp;;<Zg~0FbgO^F`9+Vn#s2x{;pMrjTvgP7vN|&j+x^1f`Xe7efPTW^HYZEG
zBeG<A@-^b@p>LOSr*J&ePK<fUKHYdaI%g}7EQpi5{k)!we8{$LsQ%WQzgn3CBA8F}
zZa%i}tCI6o@NO2Md8jFMA&%Lx!=i*|f`0(#)AZzyrV#QmG+xFO^-C$Y!vi*VW}I3i
z_4%oDRG$)Zb)AmL{qd-wPlLw;nfF^Oeocgm@_2<XY+}j5vKQs$r-u*w=~uP&-%PO9
zSa;Yo^;%QXBOUd3&z>z+SrlX0w#2;F_9)-OZ9>z$F)Seaa>)<Bd!+URH`Sm1ZS{ps
zXSBbMi|bsjg5@cT`9q0t1Knw&IoH>5&D3(R`O}m>ytKWdpO{2dw<rO5{%hBY7yOLl
zX-3q^C@Sh==^+jLY+8Ho1Tr<-*`2X!Z^p5y8&VZ~BY>8LR3wBvbx^TtG_nUOyckiw
zc*+qWy0~RcMTY1ej3VFiRqM$0W(1jRK<+=u*x)NvjY_^;N!3ibQMhmAUA$?F^T#df
zU%wlby>2#r>1wpg?%Qpnqt{-({7vt|56+8rEvsv`Qu)98KXMTpwVIR1LbRi;d=Tx)
z$Ihc!KxVmz9apkH*X$m0V;ctD2{1fVE7dY+f~<Alye9?xr^~|ZHG45KkYjJJgxO{?
z&u!16GKKpeD|e{RFZIQHi7zi_Ux;{0WeWM_f7RZPFKPU1K!9C9ubt5JKAjnr{2M7r
zQ}5Q6f!-|^@!u}~d5hZL`fwa9W%h$-*5zzi!+YV+_v4x3X2`Okx+;qy+I1y%M#&Cm
zul4n%?>>m$A9CL?Or2UQEuQlHuG_)$!jr(v3-drdCEctnhH#gJiNi8?Jew6AdhYSZ
z!bEJp=$QI!Er;0$??3?VuYW`4^pvZ@F;GNI1RmGf?r;s}E`}rhxmC&L55dYq^6wLU
z?)s;7cMJv&oKJH-b1bR-w`VWZ(Mi11WG5nSpa3AAgx(mMa#8rzo7e%*fY#)s*M&E;
z3IQ6S(;9HHY$^BAIQa+Qrd8S#xq%r~T(V#1r76->jd=5yZq1wYpVjLBJrox#G?eSf
zL%jeT$*FDRp@&`u^<-UOo_RvR3l-GO*pUoK$CPnyhq0DS*d64i*0?_f#w}OoEG?S(
zbvAYPnU0!1i%NHGAGf1!#cs-7(oe=GkMhc6)MlLV<ztE~%w~KIT+%>XG|$WfuTZ0!
zE~Y6H3Y|4PUHXOtNNc(k$q;N$_$zsv84fbDn>A}C10(^i{i?^h=t<{n?GcfE?SbCX
zJGo;mQ5-r9#g4Rv4Y-}Cfc|!K_5Y}{7xbCq46ULw0fROOlk@bwJeqt2yaQ&<73r2|
zYEsONy*kFnY1<axz0P=QdI$U6@2+Qmm6iYc(`w3x4(q{ivDwKU;Ut1akp_o~{v!!r
zKOoaTDa;78N2vLc%xTxINh$9|PRMRgu#pL|3$!Rq%`fYmd_Fz3(Smk8cuB)g2V#hC
zfkksc;g7f2rB4A`v^c!BjR_}TV>h*&)|~A*3=XcXYSh-@77A3IUA!&$`|8r{k{|;o
zt;+79&dZ-GrW1T^Y5>$;mzj~=V7SYE^qsZOnsF6k_oo!aMdlwl>)U6tSqGJ%Uhpq*
zKGb8?Z|vvFPlO}6PV4i-B2i=1xrmkbd|elV+Np7uhR!<knDLT3dx`bwm~kCk|HY_S
zHUZXiwsq4fCd)xiL%zu;@HV%~^a+b5R-#$oA;pY+T@LC`=|?^&8oVeX#vV)XXPjS}
z_tZ7-Oi+ehRmM3bJF2*^w?Ej<ftySGBmUn3(Zn3K(rwtbemaJTc<}qwq!~?ALtuUr
zm?nXC;zk-FXpkgRYt>GEGR|HJ(Y7biaLL9l%c0nzz;3UM+YHa#z}@3LkG0GWyDg-e
z1u39ZCefz$k~^DmL!sOgtdug8Y(Dapu?K*tgc$OlF1Yp<v<E317Grv};ptSK7CNyX
zyneLo52F4<*D-g=!~fK_<;%!7FwH!AM5Em`cG0hS6<v89;jhhW?cCjtJotL#Rn8!_
zjC%I5K`ucs{y$a|;UD3@J=_0w(;!TP3La{`rEi&U#71Oju=@DJoMy2O<}VXBa6r7y
zFqUPUe2s8#O#uiJC8#3mVD<%c_F?4W!$<wSXsmZWQX7wXg@Z?VxXUY<_T!Aqm!|`+
zMR-JNKT!SRj~Te&T7N53S?AJw@10OSBVVL}OExl+#519b>*h(x4i>}dE4|R^gEC&q
z@D%Giq(Vm!zUe`7v?ThZfID|Js9O|Y)@5OB<oq<yv-()(2&Jncmr%_*M?<Z@;u;c}
zt=tiuP_|(K-8@@599@n4I2M7ooqq2O0(yZ*U>Zq-F_Pw3jy2dow`%tXX7<MR2(CpA
z@NRNnjz<_6miIapTV11Fmzy6W{0ZDXBYc^+ViT**j&%VjXyl6Y$z~4rop5uf)9x|i
zGH}djHJ*4u|Iq3U;Ls`=`&L-%%CY(O$_~p4`|Kr{X1JeC&h}ZO=<^m=H}4MY2t2|a
zBEF=mvW7ZY=;je@D=T3)cA^J&U>rb`Swrs$z^}YL!(Z1=H#*W|U3>n6<B889=Jons
zM`4UH^ZH_qzTM^D=0B80Xr(@13XUwD)0tBF6@q||e(QoSyP+UK6>7^|$<RV)6+6*F
zsdd`@Vb(1Tgx1I=)I=9~(;F?rwOj-y=CTJ5huw*dn)>Nc`HrdF_|h47H^H3Y<)Ywc
zno9EVa(?@Tj_HuuHv}<d5xiyr8~Lt8w~n`_!y%%W5iRSvJu_uMsgO}_U*fHImS~bz
zO}yxTJnq$)5nmD(?L{D*863D??ln60Z2V&VKwj0o<Ged2<5vhH)3_!ylZ)+?zp>6u
z-zL83j#pUI#m&{~@%&(NvH@{v_<N(~yZeS;r)va1$T3CSV`Sag&z|7MuR3#cTASNk
z$npMZAIQ7+yOzxUp`E|W8wgP*3yfn5dFVmpwYbND^ONifa?<Q;tqtzw-46T3dLc9S
zO2@0JuGBpZHak*=)V&mH7e%b=X{MBK?*6k?9{kg}WN2s{h=?ah8ExNC`^@BG*vmsP
zZ6zCMGQ+UHX_IOHsH7PB*SStQ1fL5TPW6{qasy?$L*kfOnqhCS>r*tm#;-8wfq2bi
zr8i51>NOfV#>Ln2lIR8FtqnFW=wWK}<}cu5f@jBl{canNxhiqRp}gx$@+)j3<1nAJ
zF3#uk@vEYms<_AtE;qR7)X0v#i+5yvk*ew)1idv>LB{|@X1yWbU?Cpqy<E9DYA>^G
z9$bgoE6(?$%+J>u&VfMxh4HYPd+<qE?8)akDj$}HJ#{!Fl8&AXviq^RfE}W|5mjX8
zuFt&?sFkO}I?R$ScLBph{06nc7B@KrTh0&va^}gukwo_RvONg-4IA+x^?^wSe~6XB
z+ta~Z!t4;Q$VZXtg2KGsV2D{I#@E>9VG-R77i6%<Gvvs-mIm8-8LIlsD<Ef2jqnm#
zVwm0}-$g||8&}bf`bl39M(6PLhv5oSSZ(HVIO+uN#8?YBEk-<pm8OZSidc0~Ry1_;
zEWcrz2ougTNDAYpuTLt3;^qfDt(5xe!rOnL-#Z+#^biF;3E4VxxaOMZy9i_~Lt}g9
z>iH+?$01Ab4q3W79o;ymT*MEcVGbq#sQg*0!de1}+qB;4dhrX=6inX_GT#m^lX-9;
zgNR|-U9%Q6vr)b;xn<p1`_NRRrH-m+RZBeO?VXYm)iS-J4;=(S$ixoi9qYft5_*<q
z<bj$LtS<Ugm{I=@DOk=dghs_yMGX04dYUjwYi6SXkc-$uL9ZhQ^-fxR+7fhCREX{=
zS<Wk&=|m&AM~7b@)@Ym&S!PJWknDkv)fdu|9lL9zpPn}8wt8)BDQ`Zjf<FfXG^;sW
zgUZSalH2W5J`OYXn){AlA++x0ZTAk^6;Pe}{`rf(p!Tu3LA@xWIbo@<c|&=POJ#My
z0fXgjuWvyS@vS(Wt;v_TU||4gem}uR?y+wY^_d$OmQI@t{pBQVBN^df=bqCkicken
z;p~CG#k=vh3YOeoUYai_R77Ve_RqajILBPKR$+b5M`$EWhax`@xA8u<2c4A_%d;RF
z%e%xtGM!o>jvv%V)MLOZcG=^gd!t@1DI^TcS+YxJgQpH=3Xdfo6jm5Tlie%JHCa!6
zeS^w<PS-twrjP*&jyUM5hqCOr0@Au(#tsP1NQWh|vH<z?WRM{HP&7<;xSmfB_T}FE
z*c)WXiL;y;SVUSicK-AMyR<Y&XAHf5VY{p^*zS}h76+w28MS?lFQX~8z|uNQ_9xsX
zS42$hkrI<_WoX3kwIWD~@m-3TRI107%y1#Z)yafDeF`#Hq=fSEIj>GpFM7v6PZZEn
zI94^ki_VnJPFn|B{}OjdMR`dHh7d#D(*UX7fCxL9NUd3{KFdyXQb+F~(-Lwj&lIeA
zyhhT#ku{}i&Be?ZiS^$W1~J#Z>X`Yyb9-gKkIC?XY~lCizn8i19oO%$l9x5TA&!JB
z%<C?*kOR}GZIs+xS^kg857Y!!C40(TN=Y%<0(Ee0uyoUhWQlk&nm|wu;Hg0n7^IW4
z>nl4pKD4NuVCx0hLFE~H8KYb+IcgOUVlf-#xTxR7zvFUv$&YG6{?KzV64E-kUa=Fe
zqk^bBV7hPOEZR5(93RNEbt9QHfKIX3;d(BbcL;{2GbJbMBQk%K8?MXr3o<Wuz8=i+
z@@ctR=rh)~w2W7gGcGzt7@A*zY*hDdj8WbA+d`sRjP`#rVcG46>(9rRnZs+x<*YzR
zQ_Ya->Hi&k3EG-54<O3hBAf=p?`%bcdYaaFRlCn9kJJ+qzT|-gMQT}o;oF**vEEiy
zNcim+)~^SGZFjXovUa@b_JFd-&rG*HHjR09D{uL;Je6%RDk?vy-nhM7CH%i<AG;2B
zd{6(+K}egu)81)kw?p*Dc%O&IiBtCzx=-x;!%7u9$*OB4BKumGPx$J{nx_;BBlP59
zgntXO;`(k=KIRcdZMNo*4sJ*0>$Ye1G!mBtcJDN@C+m;hdt!_4Xp>Zym&;7DojB6_
z)hWKh((Tv*RZI_1+5czyqN;$Kw|EKMiVF<jkj4IncTrb5sDcbT$FhTGgqfj~D4D@Y
zWG=QK&aIo_7ahe3^j#&i>XuoF16YK<u?#QKMCjX)eDTL1(m8!L?}J9+eF(67Ek>;g
zxCZ6wg@`5DoGG1i5soDdHry83bxW^z(!&qGdF_22+x|m#$&(AeI`7zd<m8Vrc`)Pp
znx`z{t#DR+%M`LJXp>)QQVoVT4KW&SZk&!=Nq-h%Z53GKPN<(wa$1i#_<ob&;x^@O
z^)URGww~kn+}+)dxf#5&DUQBoYM`w;H1pqPk4gXp>%ia2nbK#AFSk|f#!f5q_<`?P
zQs2iSQqz0SApnc@hTMN5EESDuN+^p_LQ`a6a;5PV@1P#9fu?HadQsqmd1`OiM6`+H
zQt!ObBG=--BTuW3XH30<QuH;vygk#H`G>fI+8~beYHfmR%5X)!k+^35YR2x;VEo&-
zW<&D<h8;4PH@tNwgd)hW^S#Zzmb1R1{j${_%k!O6rB<!n(n56+gsA{Sr_~S^D?R{E
z?=2!iQ=g<L0+?^en*3m*$gKfJP42^lRJ)#rs1mb%h-dN-$mW!xXmtsQSjB4@<|!^D
z<D6GlrNK(CuXP5#n_qQbCciu(vN+%49Cw7=w>xP5sd@x-*w<jiU*Vsl^ik#Ns913X
zZ#4vlkp^QQYUcL{ZFwt;NLerY6fdn^6%s{32J<CRSsKr+&V)U@e6*HU<Q-hawbecI
zG4SdexvfV}#IjssJy6tC@f&>P=rn3Wl&he8#VY(yzLApyJ!RM>-DwjRj_yQ;hnZzh
z!E);b5Hj(^U|DdT$SiG!y>zU4vA)y#>-XyIuDzl?`Z&?!m3NkYcmBh~Swm)GNHi^X
z><6M2T<Ytrp&R@%@uZHzC=jgZCtEn!iMDXg3K-dl<7!SyXzO6pSr^D8b=3US>hI@R
z`BfCaWg2!m*hUoAc7{5e6oowNrw*JM@N(XEX0Shoc@O`Chy;6Ly6h(E%jq}dbqwEb
z<{tWp)Fqv#hwg61&1IXDhktd@$@@5NvZvj`!K2E~KfxlbHptPY<v?ZEP`kz4IG1Zs
zHa5Wu-|?#Y{%W-^=D4;FJWoc<cPs=>i@uhjIf(PziKa^r-gGiW`|`0>GTIG?>(BQM
zud#Mz93P@4G3`5QeDcwhw@{d$2|I|=qVjwLI0fU^<~xGr+;(x`s(`!wU={y6dpWEN
zAsOBLAsHE|%cM3;>oDl(J=t>M-WQZL=)@6Ojme^p8VaYz_wu8nF<;F}Va+~+1glq@
ze{L=ec+Z*O+SnWyXnm?I_DP=Aj3Lx<P!b1QsgMKE78^OrE;nc(_uXsc>sXcO4ig*7
z5&uRLE!os8H}zmuv15MsE5G5?4Gqhyji<^I+BbGo60|;g4S0!{P0}vST5LW|^8*HC
zE@>I4E{Vu@S{v$l>pC!>XoxuzG=em=pbt%N^Z+8+BczKDMR3&N$DOmqEP~glXSZmb
z;eF}*2<>}Xvy+jGpGuw$eEi!t3iP2=#EXQk=Yko$A+r;r2&wVx@`wh4F+H@7&oyXB
z;m1YZXQvIvHFMe8;R9yP(Dqo^rfs)gHqEdmCqrl`bBEVQ{>{%z(?Uj&npmRF>Yi(3
zD#Uin6nK8wtUB}OR?(ZA;Zr3f_k?>p+B6AIcK-)0rxm_^9;7cXbH4uU?KwZm_b<z$
z_e(au4z{;)^S=12;BxWuZ*mDEWPJI;F1iC<qSy}W)0s8I7MDl7VI}7{wlNLxfgA^9
zM37ZXUE_5cZS_S@KINp>s17-XHrO4l;CgAud~%A_)4u5ru`)g(Jjw>Uw*KC<*U?a_
zUyEF$J`)iFAMr7~?pD((?k#DvJn?nT7Spt-0`$#`tcQ24&s<)ylYaJ~&O^arzuVUX
zyo1i|h0rn3cJ;yC)W;wV1s?S*<z3bf<aqw-8kR&H%dd=xx1yT3KMmHmqb1h_B458N
zdxa)nkkSZ&UbT(yQ*-#?B_x4)ORCY?E~`Iu1wBq1)2AZIkPAR92encM8QXsczH!b!
zD!HCh@JuG&=l`9NOOTf1n)l)VCsFv!i{C4M-vsu*agBo;WfTE*Ew&xuG*LDB&}vP8
z86kGk;iQyoNcW{JrA}0pFRSsW1|<E)=UH>&N}G&FXRETGdj%R)M|XX?ceQll8)Dio
zs`Gq!RWD^M4%DN%Ly#&*T(rRU*27Lpi7Oa;QlMvq=(oR+Cmt=}r00r!=V7~wen@bt
zI@BPM#l29QU{rGbQn*`|`Ib_@moME~vZ55<5T<}y^Z#4w$17~$ZPcMwn!q(5Dco6g
zwl&vfq0M%!Z(92bB{x~dAByt><c5SahwGB`RZwOxvSw>B_Pp-8cd~PP4VjfoNT0t@
z@M<{4!cKv&x_}&<>^9Luis>(xATQKsqM%{~?>#gAsGh=^CHW5xzo`BdgFx9@xNUGH
z>Q*?ZG9ux34zr&KG*fDFj+4v`hLOFHzNC8@H?Dkvq~GFgQgVE_AUtU*e%=`ROdx5U
zw1yb;*$w%<J}esb^ucw0hstuI4yoX&l?2pU6W2H%dM-M|kES>f$mQxs>^L*NRd&t1
zQ204NewbV9?akJ-u5Iyp_tviNO38{QvgNVkze4_QJKo7!sw=;uEZ_%l`lMtXa>_8O
zDeDJTc@lPd{#YBkQ3H7`RZn7Q=a@$8glqYPMRfP<H@p|<_H5jbV!OF5$lx)t;+?9*
zO7)-4{|nEVHHYtb5WesCu&HI=g<rlU|43Yh7R&!oX7hAWvBd06Yl2wa;rb9Ym1Tev
z8S7<fcZNv`gDcuF+foM;qHHdy!hVV>$oMKM!EZ=YP3)%#r(XVk`otFt-xg1yRU09m
zKlB#`-Ab4w$;h|{B%#N!)mcH5SoS*RR?HJkM&u)c93zw{GpeT=EPa>{k#)>ODSK70
z$<8i^B@ppSiMzDw-M1E2H)VQ%r9F~59vXX$%%&C6o}dX6P-k1fSAZ2?cM7Dh8KB6f
zOePivv#XjXn~~uLo+gBJtzy{9{9}0**cH?t;Wpc;r#Km*M$QP>UCxr00TFNB^3{?@
z-C_1`D^e+wA%zoO-#>^f$hzv7-x;!(c$<%eiLuq1@*U`eVl`tus)Z0ilII9Fz@|`f
zkRB`zlarS)*VEmkIrnqvzzSAF???ttOg9?N#ac%PyCTZj!Q$ameG8)_otJYv!%zEl
zel7{g=|7rtN(G13;9@Ik4zg}@De(>IrjsRCSxvscS*msNjgxWONIg{#qFr`_$+o5-
z^FhWr{q*7m@d7aogHY-$=gv#kZkn&JT&{pG9#r*~RuW(<;wH`-n|su%;Frlm<7{*b
zagwIki?@=?6W>r^Taw>I&&h_HMG%Qby&VZhKf_M~gxyteeuuHufLUI5D|0%PK`aUy
zTw5;Noc|oXwe$t@a{Od)*;tjQU1{Nkg0Z<s<EBzo<$lZwE`BwuZl@EN7uM%E2w~ax
znF$^^S+rG5UF+YA#wqqQHlfk*?H%_InBgrlYHZCJDOf2o4SOz~$?QMgQR%(RGNg3F
z6^B1=haOSIDp_@qgmIkG+b>OQP6y2kr;eY7tDt`ofVlT~V%W3M!heX9JVQvv*R<7a
zxGv=<{N&Z!DCI93kIYCU)tuSxw7BQ<Mx>TkAj-f0LTG8d=DDP+V&pfq`DaKErWXY^
zo>IPcfXNo<b8`7*`48AqcikgBliM*jg)6omNlcpBUYWASTGJaWP<*$^E~ZP<H7Bm@
zyK*OpXDr)%CqG!U=?kS`!Z0N5QOMPhmFi#Eu*EL`LYd6Q9DDeg&Z=9_IEiqFsR>Ry
zQL=oSGS`ZqN;JlTk+|bRrYTA~f>f2ug5{yIU%Y4uz?aQZOldYbZGM4_)U$QOLGvCr
zqQgxdI(Fa5_wltXw|P_u#aEX+3*LtUuYX~@Iy|8$82-{!CO@v~d|pDEl6LZg$g!C=
zdFu>*cDcGbV%~`}>}KJ8r1tQCPE`xT-R#{DHC^3QGWFbGr`swO)+WG<fRnkEHR)N*
zste-}{l+$OSP$k~L>(T1`A(i=Tmj@_vLy9Ss*Z!!leeI#oA6yfAeq)d_xn(f%AQA>
zq)W9Ro{}QjTA4oCQWpLAjwQb!$k69^^;xLM347sl2C_Pw`RCY}8#RW7iD4Y>t?**i
z9S43Xc!KQ-m6McD!)UkXZEunN*?rSP7xNTksM{MQn@lz#dfZg71(_BV9!~dcvz{^u
zE~c!e8|~wvV?&)in9n2YPg$#Nn5NZ0$F2+s``sT_dj(%IN<`dA^M@lQcLTf?j1c}&
z$r@L|4+A{1HF44ttTz9ah(#xese@~?<WU_=Lsx~JFXPg!Fjm5b=1@A(2cgOve0O|Z
znr<tg*SHn+_qob!>>nV<h27NE&d=Q>dhXZXkV{}7di@_2OxF#+Ypeh+x6}($17vI-
zz<3I-nW#8`ZGwT>P?5MYqnUgo$1J6Zt;sl9%CK$&eRWH~rdUCP1tK0|3#bW(pG%&s
zy)x%zJd*5S^xW-H(BAElRcV*Pzdd!X=HM~HJHrJmo-m<~Yq={c0YrdW)@3+j$`$k`
zF2e?KP8#H<>BS6dnhMxM_*NF8WXWG$fS0+6lMLBOVIj2U%)j1eB-D_K1_B2+Re`5{
z5@)90;-@J464R!?XUAqz&0!1rShEk-k~iEjKf3?EZp`H=>;e19ewx{2!Th285^+BS
zaNkFrrSBu79JhT4o_HEYSq^AjWNR|!R@|~!JCl}(?a3RjmY37p#zan8(NE9zi{7c?
zhsBkY2C_B~qG2WnM|6q_A*#<|lZ-sv(?m#O>PH{y>>VdaS`D%NGJ|9*7ye7q`tsV4
z-6yMTJqld4YCauKse1pX>QIHM@)fJDh|J|rvcT8YP+5R4#oO2w1OXuix9#DX1+w(8
zJy&J-nhXg7u<A{(FO~qwYrovss0rV}?*M;wsk^;rRq_b(JoAakH?M`3{K}aWEw`gW
zhkaK8=R8gXt<4aJk9<ds7i;joflct3vYLM(eN8{zzkWU+?zSm=Ic|?xppRsP22U;3
zs+a9Gn}*0s=*6dH#3bwJL-MGo)8CYrDJ&khY|bkl7^}9<c~s=3!m@=YEr^4yR+C$y
zY6=r*6_&{6<f*6&vO#Lf?11;GE8Hi`YaY}?eR6^E$RwdYNL<}DT^M2Vth*{g47|D~
z!&?)prNM@J`Tao;^h3uYZ&W?#`0N_;h76?&jg4;W!E_^>l^{P1IwWL;i2I_X+U2E;
z6)>a~6VTlfmu5-=akWE~l&FJF)K|0PY8(qknVN{pEo=75aZ`8yvoAxAeAZn0vOO%n
zw!1Pa%fg&eQxl_xWj%$}H^YQZHJmk+FMbgb!y0-ZUd&WuoQBNOr3@X&V<MkL!7s73
zp1;n?3@ng0bq#@*l9Nnc?O^|$euQc~A=+qS(e~NFe%RPf^hI$X>Rx`Z2Y3E*p;nRp
zN#B?#Gt7X9F9(odG2X)(`juL#E?}!Ldx_=Ejes|i4H)JZAjH9B8EP(LN#+_`R}Z3b
z9$lAaFTCyyqpF~ZKD@RXYrn#P$lLSmTh_lmudv_KnD(Hj<aw~64g0AI>({A&2Xixy
zP{{YQ>Kv!YA+-L?9x0)LxV%|Py1{-qoAXd+)O0*3GyFl3B%9Xk8PQ4<P!<PQdCGi5
zzWo!nUe{hp*Ul(j?+LLsCe?doKY3aIr3vPx2No{RR{*7Bx$wj^@~gV|Q^hi>#D6kb
zX8Lu=zn&O_Z--pafOF+-Ru(Q)S?jHu^~Fxf!$e(rnh)z}=iOxn4Ure~3elegl+%yW
z560TJWaLa7596xfW#pj*I0wb6;FaB2=d<ml+=l3FLU+*8Pd8R))VJOW9W#vXN=$?$
zurkob@G_^6o^dcuviLYFWYn<fVZ^iEGw(x#3&uZv5v}#mS$$Ylv0*Rqju`Py?-xjI
zF<p*)xr`0`;+tMhsm~Zkcrtbz&j{T=(Xi8~)<965k@8pP#*BuHd9TTk3t<ylreEws
zY^Q7jH$etRgV4&RmG-Ur7b@H}I;@UZGHu#~34n<jQw{H+t`ZJM2uLCWDKUX(Fz7Xo
zuLVD^Qq=9V%(|=Te(pq$QRj?zh@rjrY3t}CA3~TNU;0lfE@%DtqHj}Wec~0u%)Z=Z
zmo0`~b91`K*L=1pJ$H9ds&VJX1p4MfX{Rrw-f%U2VDsZ$+a*40iWg}B=5dmUTp?h(
z3U?)Z5YE~$-lDdGcBf^Gumn~Lf4PN+zPqif&-wq@ref>!-<q%sdtLk_H2t$a%}>T6
zBi*%=CD|^5>M-u^R^4|)#6*yo{U4ByDD=b(`xHLR5A2s2Qzf!X%yzaOxT4VxqOTCk
zuXRkA=rvgQA4Ljdq_WMa(pt@?U1Ru0Sphd3iYiUb0VC&5&m%QGwCB&mjZayGc}FF5
zg&W&-jH)TRfR$eaJI?!E^@<Y!WW~ng4KKaN<QcZY=0d!azqm5^@AVb&Blow5m6$hi
zGYbmoV@4KL?1H`l@!+2)L?1*^$s52K<87jR2+fxe)2LN!Fhb)<l<x<oWAGgyP9Q=`
z#pW;gJ77Xi*OON|nWN>6IYzH)g@u218-$LEYJcI{oFv+G`_nhJ<Q-FQ>HI&K-7u`W
zViv6GNq@vZz7y?742H#!MZ+3$X>g+g3P#nNoW!jb{7dTxhz;P@k}jad`|1iWGj>af
zM&t9A>80Zyk*zV-e^h20QK~ae2rcqErv0lF7V}4PiB){4@X&2sOgGU@8P5u~_aVyr
zl)pl06xYa7aoPsD=H^)5D(otHLFU%%`;82aktGu*%aOkx+y|ss4b3~#Q<`h{;g$d9
z;-?nuUMrt%_V2w<zN&mto)f0>kIELi1xCj={Gow#bSq_&h$wIkKV<h1wJ}}vddQ`Y
ze2cZjx;15<c)P|-#+9;f@K%XG5)H9n^p1=y5OL$dEy}*9;(*K}5kx6#$A11e?qz<q
zfc@Ni-0;G@cZ=5Rk1CNctPaJO2P#zQF#U>BxM4fcaD^|kmAZy$%AmG09AU;*=d>L5
zttbh&81h$roH&UVy2#dXMWy$KNIJn8k?IMPVQlT76Jq+k)3;h(Vkdh8SwSJ5r#dFV
zbM?<AKq3E8`JRSua>4YdxJElv9gD}5sSdlP)c)P_tElHNDV|!MUdN6zu|sT|ShxAw
z%vEU5LC~Gi5(d{Gw#hEo246dwWopsjsBLCWs`XrA&B1e8AMQOL^VI(e-j&JGem|=I
z4Hb<#SOFe@%8Zo4MkwBd8{{P{ppeD#*WsH1k*pi4WgThbEn^%;A{w7oL=)cVy0WBN
zCz}k}F|*mBN0FP_)m7|}$IhIyeZKUxaks{{5}KsFvL)3@ZT71i_ORGe=-{oPe{PkZ
z`@NG4{aRnd8^fymh>N7>W~F#3G=dWdU&2bSv6m7TqwqwrlB}kp>U?cvM^mL17LTDj
z`y~8)`I3H%S4U>^+4j%0is(a4Fxswza?GxH!F}A2!BnR6)bQ4SR8&|2tvC6`xG8^X
zD_s2BUbo3hu<H`qEhiIXI<{s5!iVWwEGJ)PcFRGpIM{G=>T~e~du7;x_8Ft%vS)*k
zWS<%5y)Q6iG4}^z$AXG`!4O(kS6V0_s4<*{tjqj9zq;-mbL2Do87barD@I4pAOfjb
z;zc@^Rcq8ZxEMzLGi)7t)EQx^B&Yk6=u7M5oYM*Mm}g|#orrT!2UJ))p|Lc>R-4If
z&;bdhS19p+!xpJa3Y%%VsKKxoBS044Q%BPuCF){ZC9O;Q1G%_yf-$9uN$3oxYBoz#
zl>01y<RZUBKCf0*WnIcFE%7TD6BXRJ`YeWZf(bBXEHqO)Yr-Xv86`Zb<iRLXYZah?
z`WaG9cVZL2!oQxRhVqYayPivH(~ru?fZs}$3zGPr=MT=&o&`h>X8RWfa__VRN6=Q6
z?P^p1!hw|nFI?xs_oF6JA>e0~zYppnYp$ajRS^1i4<CIb1NnOrPcwMltf6&9z@T0?
za}%?*dMYhDpPpAQ$_BJ5T&$N$lDOQu%yDo$_sp^TH%?wNv%6#b>SGm_r=2>c2jbOK
zsk`Punf^j&wM>~ZRiTUmWn{5YGz&!5`y@WsG#yWTFq#Mm=Ku+`F_WCkuq{5gVl*=?
zPHM5ittTw1F^keQGhwcXN(qP|-(#Z|&Dd(L+(K3e92s20ZFo9?Z&X79dN8q!-^kL$
zoYApi@y$8F<X6_{=8cLtjij5nwSt(y@RUH7tY$Nus1mjYRXpLr)2;0anR)#>#b@cK
zNqU+V^>7FD1a7dMQ7~OQdAH~b5#8cHx&P;ZenIFe9~kMVJ-58OXZXzV%a>?1S834~
zt~`6=9(bL$q^sh_qu&#@-f7=UzDou7Vh~-+w?Ok07f=3yBO*b(9m9T@eS=u;B2XHE
zVFPbFW^VyIv)WiBKj|{QL+m(`ILlv_eO}yDZF9q4W+o8Q<BlWg@;@pcSe&o#&{R^~
za^A&|OG#)XEZ+ZbyYk^Hu6<fr;-t##fl^}>^HJ=<_H{UIrJG6EZ#at?MqOCA<Y8W?
zgHb8HMZmN|Go(Ht*jlM(#9cun)3}@~gA{D_<e7(N?bg8)!GDLjy?1l<c04+x_BWbK
z0D+0EpF9^OD$H1Q?mT10K4orAL_TJPs3&8Z!~6t|;dGtD+p(>=^o%B1pvR!eE7>*f
zhD{mqn6<@JVP80T_4pU>Q759S@PurMJnL~?bWxuQD{mTeRKqo(CU@0VCa`1{OjQV#
zi{49oOPfrE^>SF5tcz=VD=Sz*j()>VsS;}6usj~sJBO%AI8DSgPZ7=y%Nl<;MxfE1
zKak1emrk4zc|qKvp>p~SXDulaJHx3=V_Vtgtoyx-{PI!P#;9)y6K=T44cLC6-+YqD
z6p+yeeAt`+=7CpXI<7&6_q9}}04Ko`9_W-|+uJ-_lq%uYlSE*Evk!sHtwtk=zD11y
z<h~iz01pKjxkJxr{2FNJAIqwm@iCbn5%7@*txs4%gVE{xDWnFw2U$-BVpwNHY)lWl
zyfdBzRwoogvA59l|5Yj6etA~&*NRpVI8$<q+-MhQoBnJco3}|FwpaRj^61hF6+)|G
zqk$v%P;;PPU}(72vESAI-pTCe>p=r1l(&I#s4aa_R6l1C!%ta=J7M1=r#|HWIDa|s
zs)Uq8)dQ49tkwE7u*2c*Y2Oy$75wCL=J02EdBxAW%hv~~{0$Zk|8)HyEb$+ey`bYx
z$5xVX4X$E8>=5?MWq3QaqNm=1Hq35-U=vL#YwZA7hcyyX*n~+3;*(x9>l6aM*aK>Z
z(Ni+Dy2$WPS(kIx-1BCi>M5CZzcz8Idv+N<pnacK5LmT$9UQlD__BR)4<?ik_(R!b
zJ#rAG&tKxfMVzI!by_URgFL&_*b%f?rtTt>$HRki%U1(E87&#O)*>xT!!Bm-?dWfk
z(X+nms<BtH>6d2`gtTsX>v8c9sx!dKfMk+h*fY;#2bHnpi|HUzb*U$=1QKY8tY6|E
zi`&rS8Y9Jx<l96-N!T)cBkJcOGfs?wOwZPM@=DAoZ}Sa_x7)8JU;>rf?ch=}{xxX6
z<U>(l{=k^YS_Dytz~U>m*ve*HL#f!ntnXo0noY8i=?0b>BM{*?`|7lZzhBxaB{oo#
zatzRWxnOvupDGE}t|c_m4Cp-`ZIvvIff_G%qBU7#yxQ?M`5f;XA;T??9_!Xh2=dic
zQ7(ax9|e}aEaXV5KHeZMCo~XJ#fxV7sqEE&wd$kSW&VwWjy+B!2w41X&M+PBi{=<}
zkD*?A0=^b=N7Cb;hp{vTr3WQb+YZkZc1}N^8J(_-nrKlx{7)|7Eu4biD)40j#R|M0
zXuSM-mdH)+f-L1Cp&s{!FWx~C8+qDP6NWQ*I*1K=>CN>f)-w0>B(v8jTROcKJbB6_
zudt<Z{kGBS_=1e0GZQ@)tn)qBY%*4>D#HIo{L9IRt0Q5ER3AmWMPB3pM~if0&hqw3
z>Kg2O8KsGq=1b_R@#X|q0lz(CZbLmpGHj;X*F`S9SJ?72+elFD@$j)x3z-loI_rf)
z5T=f0i8T7G8nOY`J_=XoTV@mS1*wjIgIM7*nIfUC#5Tn>vUPQb__uj$+=q#4vAsxX
znZ<N`P2h0q?&b%Et>9flFK#j<C0U#lgrY1Dp=r-$%=+0_$0*l}c~7D|>DEniIH8Kg
z{P$#Ey_b(rIDK3Jt4e*USYgBb6QbOfzJi<^#sxI*5&FOAdiQWB^ZpN<RY_u!qKK&!
zm6)v@Heo82B&k$Hn%Y(llV)vX%9tr~O4zdT#KTl_D2GuD#h8h4*j+2<(}+3PoaLTk
z+-qj;=l8bX=lNdG@A`dz|Il@Hxo7VC^SR%j_u+NeR}XWA*qqYTdb^v6p=MQG%tLlB
z^lx9Yd(l(zXuxYw*dL?^evVDyj#&jwn&(fbVyQx@R*FK$2YUePB{_t3LpwsbO%1&S
zM+L+r5fi@z8hE72r1UyUznI;Ok0I)ES5V!D^W!*%B@?y_fAX|R_1U&)stB4qOUAid
zdI)SIM!mODu8^M)mSuKYsx{bCy)>^P!!b9q&^<Scd|E}Z?{Ch*BD^F@Z84F>Rx)ax
zi4-qv6}`>YU>010=teY{Ej8hEsjmFqUT=%m`X7+|M2@Q1mH17N@s`f(Q*$h>F}vK+
zWHGOo?T)+PLyZk49INWEa&z6^73Rv&fg#{v99Xu%w}QZ!vx|s6B(fQRFgpgp)s~5F
z*Pp5ullsbJpOh~cenK^BO1<$;gi;Gi$`yA3i`9^rm!f-d%yYr=p~Psn1KroS*Bu05
z$(p`bVeA9C^@FCZ9&gK2PgQnU{o`}G8(Rgve~0*@6}17q%v<t3a7WzlXtZwdTPD^!
z?m;8uM3h*Y-oscio3d(>uH8Yq!J-|{Y`lFqcji9ltk}ZiurxO>UA&IA$FcCr3zX#D
zc0J6O9%&lv>6N;_V~(Ung+8-FN>CW?g?sYr<?IDkqO0=pT<g+_+aD5MjeCbbpjpcg
z(A(25njl%SXIDZ310^J!0Bw?hsGZ4;;xSKM=U0Izsrhw7TaiC|dn%-px0jXWS@&f9
zsEU0LydeT#lMzM4)4!wXmv@gym$K>z5Adt8bw1>Iy@dRa<eQkPG><Jl8g^^SBzt1t
zdiJ*2$2Dmk`!erU+!CzG_B&vrLRG3TF7S|Gib6*&vsUsjV|p9Yh(`wfvpC2E@7f3E
zE4Cux{N?t3!#EYHhkI33+bm(-grj{In;GZ05n&}+GgcLOev2{=cjDrU6ua`rE4`IH
z#m~{Wvo(lvK1PN3oRy46uK9xwSR;Npwh;{%=f7vHqT$fH1yui&a0(KkbI;vP3zw!9
zi;C&(OJ!NFSog3kG!Mu_Y0mi^S+ig9n4sd(R$lvcwq~%|IYd^z5FQ^|imL^)x?XH~
zr+gI#nw_4Ftq_H(5X(v_{p(Tm(<{))W876wwr4>7#m`<}0kt{Z5dC^e8rTJ531xN0
zn|jzaw@LBR01%+;Vjk%z3N_6(G%TDx`O!;-{u}lYo($-hr5;iKObnP=qcA{m#o)e}
zB_iFsXoDt*X5y=Gjf7<So|^VKN}OP;@Igl-W2M4%(UW2MM22U)r0o+j!Z!N+ptlW7
zzdrROFkVca^jg%x7<u^L=pXC}5ecHaALFiP)LI!z4#@=DySerXA3%Pb$h{KqaN-Nf
z;2S$fm;0J~*9c6j4X!`SqsD$c5tH?-JmvhmZ(|}7liuSy9RT*B=m1}52nGGj{%F~V
zGKb?LKQ_+L<J>|B4a8NH&`e=GW`xAXh+91Q2A^~M1Jdl$6RZZ@j%>^Aus={Z;B)@B
z$WOnSX5ONw+hsMBk%oLfo=}xL%W?Dup*rspvA?wzU*=hB9(f#fuG0t)4=*NnHiStC
zYtfW*{}`O)n)a4ly03Y&%i5<g(5<HETd%&l&2L^;Ms=)veiB!*P3;qI;0lyE*7Do*
z4@2K6GadJihwF23QrfOTub`@k7v3`<SCzkIl+WFROnq6FY((B)l{HeS`=X-qN7pdW
z8ne#&b9_HO5s$b7xaEq>QyE7L#A{<6RVfXmc>D%HpUj-B=>`Ea<J}!J2QVGd?@e<(
z(q>P(S+#Rl>nre_7)x*DM;y*=hzO&+bpE08oZiSC;$>c73c4+Q%2{rFzBNqlOz&W<
z#0&;~TJrd2ai7^fDXY+5jl6vdto}-WkLi?4aSsfB54`sI;oR1?4@~l(N9WVOJ(4@7
zCXHx-QjR%wE8<20dP7E6X7k9Dl<e;!j|{sb^e4|~yUII435I_ehX7gja93mXt4T@S
zm+xqD60t61$okz^)AD<TTUF@G7`4}kL9Ho^!x>5(Y564>QKbsmq*@-3nK+(>6N%D2
z^~TGk%=j#YYSCEw$w@jc*_@y@UN_Vu_l?`%oA)l`$kEJ0XHLoI!&I;{))Y-N{Xk&)
z1w{5P$GV0uxS-{6j9dD}^5GL>0f~J;@3-#u?&sIO^Sg8=*h)3#zxF1mEX_jqXIVe^
z(-E%{(QVMcm=T!Q<Jsr3SZJ>p8bfp9l(<;F_{3w07Nb_+p2UX!{%YERQg*k!8z_WN
z8t6YLwt{l;fG8qyQVY+|;HFrziYE-h8ebOLB)*t1HkNKwpX-(|Q5!P0yj224YRZ8Q
zqF-_N`-O^1a5+1YK1^CkZzGnUh2hAif(h@)hOG4a_748T#QWJ6NMz4DvHZ#N?($5^
zTGX?C$RHc*7_tcGFMLSry&e2s{i_>9V0}2fcF})bL`P~u>ikU`w8(4r)Z^E4@bb+x
zmpBpg9&JPRCMk)ZWmYdp&Xow`GtQ&YB@+y7aIXY(L+wj1FNM{r@gaN}C>?C1=uE7h
zaDD0GmshTW?=Y(;p*BQp`Ck&@H`Hpr<4WZ}t$8sQEqZChm*ZRmm;%ov<IBzB=U7X~
z;pg5s=b@?YZT4YO|9bkWp1h9F4?N9WrOOf+dBP))eB4&wD%`EY*bC50IN!k*dKZY=
zFFJBTU}nOzkxaAhaLrs1*IMREi8SSbBcAHvmeF|t;XSY>;3vF!{1hFkPa~9u`6-^!
z``gPaq+0p0RyBL)CX3yjL9Dr8%#*uD1-nBGprAG$n1+dj7=>SB#frs$V}BSSN_0`;
zxf<y20CCn2%3&j)+662XC#zsaf_M!`dL#^4Af$M!>UTv)(plqnd5N;j!DVufxI;bm
z)+{cRhTuN;9>!IRToLRm1fysnasbe;lxbI3i7C`q?m_Q@gfonnOw@7wZW2I9Y)vl$
zeGBaj8u47=*v7@vPDy!nnFQR}O~wjExTtkHt@}^p_>gJ0HA5#;p8K}@`;OVMYr&zt
znWt4|@u&q}vC0q#DTw-_*HJ5oQ9Z#{kr`@^+Y~r<8!g<gXq>TzPM~7V4OJeK6^{B{
zinS6gLkX)MZxDF1%IypFk;C^Eo(I_-iUa<IW4AB49rN8BOmgW~A+~biE*58Rvpi)2
zQ8d6qw`#wXn*f{K1Z_YJeb8<xG~6^e>xXC7)11K#j~0sf$=(&Ba_0)^FKG{{{$f@G
zP6H*nbSND3D)nP$k6yF#n%UAmn`oHyliaJ<w2K{43g-yA*Bo}gTnDRVmQiYn0(aSA
z<j6ZDYSIf8=PIDDddEFU5h+#UXM;kR=N(YjoIfFrnjq=gpNAF}*oF_qnDL*4p5GZd
z?Gozi&G)%4p1Q^=&wmRrFxq0y_8N~Iomr~bftbZQZlx{j#lC}%y$dq^%S8hE8mOC0
zWBc`mR3Yh!_vEP_d>uoZz5^xKayOL94^5ME0t6@0Nbc>^MHXxa&w2w+_ySg-s`wKU
zLV(sCCG-g~4OnUSe&KKm<kRk}Xxlm!49TF6*!_Xyy4GR*I#gcQJD)*MDMYK?r6XBI
zP}Sh>bNqA3U+UhV4DU|$`0Jcqk@@EXY;T`SdKy%by|G3LlZ6BS2}byz7`4_6zZ4B@
z0AJ}oH3;(9GxhY%2r~*JP(S<XH`vYJONUqe-t*1_9UO;Zl<5)2|4O#WNKW-DoUp0d
z0Eqegg7Mo8*^fhR8Rv%NkaYwVnW3r}MA`p4t#*N!@fX}65rf%o?Op~YqBWXVru@Le
z)iJ@L7pZJ)U5UEad(PW+_woxAzLFFp>h-VhZ!_ZOGz)8h*SPHAEz!%8SuKzHJs;6z
z3$xSgj<7-Zdb{i=ArjvUYSLr>v$cSW{EUIxLd9GohitL-FfRzE)>VY*19@ba0{SB)
z@tJH}Mr_s9niACAT{=`IF*-%V=kX;V*XDe#4frI1^bM(}D673;O6k*HGG|0N(Q&zp
zHPWW**>3$aZtANiR0x4YQQ|_{<Co(-j5kMeo?ax4&sUtQl0B3k#5z5Ks<yUtmzN$W
z9RGPzxGt<l+t<l0?J(y}%K3J7<o3^(62gr3oGjbpeM}YeBSAN@5Z~V_d!fuF`qvOH
zR7)M7AST10s~+tgo<Nx1)H%a(y0X{>jpyhDf<LBDa|q>1c%jc&i14G}fIS$J{D?H|
zjK4pnDgq=@&wq6foGFU}NP4=MMki8@X=KXxDb}J*^5dwXsHuJ?+Q!iwAtr*pmCYxG
zL*$Kc+Xr(HoBPRh<A9z8p%*fUrAx?bD!L>Y+m|Z2IhVr%gKzvWzJCKzv0*Xnhrx<Q
zEc%c{T~-7G9%vc89W-isr5?jqtC5t$$cMW~M|f}gk+@p?It;Hk(;GIUfAQGP%k80C
z+7w!h-2T?}HQXAhc79I(fqd&<GSYH$??l={P<slO?181Tg3gZ_V=5hyOMpKtqC_)R
zVcN7cC<D3D1Oj-4`%r&yE-(eF#$dC$jO4=nhUMVaOseB<ve77^lDs?TG_cMW!rI_M
z!5DYTn;r!*_YMs<wfZ_ntvBNmK81mt7>tnJgbDINs?Tsr1MWUk#}Pjmc$>s05HEIe
ztaGSp4F;Zx?7{HHjQaMzzJPP9YXiZ2vFD}5=gOi<g9oJkg+l@mr*t4WsVHIE9d#3u
z4S03`ag$fdo5~dP41nvc?Wl)#zQ?Q3*D7{N8F#r`NiO2nwPV?4XrQP@|NX+)+fpyq
zrS#+6u2AzNr-NO=C8Ket+piZ<mPZBVmRG7M7DvV4KOib#md;GOf@9}aC6jn{CK(Px
z;qU-Ypvi}Iv))cOE}OtMAWbm<{HDY^8gfXh$-9*gud#zkr==rLl+k$uK0=pUfW)%3
zb-Q9z{JL62Ii}1aimHjov6OX+<)H3p4jlk>F^gY(O#a^3An`0>R^MEmvI6~D=grN^
ztIeGdKxfh>R;C&3>ef|MQk*gB2Fm5QGclXHX~d$Sg{{-ExuL2GIEHE=D?mJiefhF-
z__qG6{(0F|v^hsXk;bM<(=mOsgfO1!p@ozvdkb+fzShwiapOKNLX$rgJ?5M(naDPG
ztua5;ac#~c_(i~ChdbV~eA6xQKR5@0L-3zb;@=9v$Au7da1hJ}Mr9t#r<i$jkq^xl
zpj{DsKxt-;MCaL*0mpQ?zKwoW7WeUnwvRzN;|aG3pQo=q5ZtS{Ij@<2UMS3rFu#MF
zQ-w}CWM^iKF(uKTr!e0F&VvRj*ixS8&y)dw8BO^P;7tqq$&9NkJ-6W*720-XHV20s
z1Jcot{T8fP+IdNhK8%0Yau|g{j?3Rh#MN{wcKHQLO^&zmDhN|n;WfSGk)h)i;TbD$
zAE_w@m%P94g+31^Nx}-=6wsp<<D=7cTBO_seLne~hohS*G^Lfbt|TLN+yKp11Qx8+
zxJHte!arw%`(1{4OqUgNg>REcb9$LC`9$Yjbl#+QW1?em;1%)fVl)n%axk7)MnYU>
z7KrZsGtgq_C;qhzU^QfH#Y_1Snzgc+Cwj(Ydrs>hH%Gm==oKkJ;xS>Y*~OkVb<;fE
z4FdK1+wJ#gR|p*H-&`E;@$RbHQdRPp{4zKDwejOyKUilGj&{3^qz9<}_1AuUSEa%L
zmVfCI<ztw9xq}3%5C(ri_;?v4Jka1srmLe=+S=h(9q*&|OP3WQO(&&ntQgY5)#S9|
zkdUWA89hu%-)D}s!$_7g4v4`)8Gb#l^C!W>wKEL->i(s&2&(y$QM+~4$k4Obl5w4N
zx3_1(<_Y6ftKW07LH4_%L4Lk>bGSvx!{>qCZapuHg2FX44`0q52Xy~JOlL!&KgGJf
zy-|e!WDPDXu5DZ^dIzc8tdXGU9n@pI9(^t4OPcC=+I^GAdBJ3bw|=rBf`#TBE$=A~
zom6_dS9BMbE6)uX9n&;&KV23pHBA;^U)H)N?6-FWom`-aG-E3+%h%C=<t--$lJ3G2
zX!JD{rQEl7lbSh$!k_PrrVzJ$)V#h*6=_ToYdIb3w0F5q*p%2{cO)mDe=GdiMA|}V
zdew<s3TQADnPy40z%&DT^8lK>NJ6*j^A~%gG%`hgNnwK~hKYqMCgx=zS#|mL&^Gk$
zu#wZ$8>f8qMxFNtaBCkTd)G{rp7;I@^x7Tce(<x4ttlE?ur8M62B|8fu-RDPY`Lfh
za!UD#z84UU<&{A8z|mGo{}7g6t(0aS;!6Jl_vGwt2=f7bJ>)!xY%-R;)2RNcaC%P0
zYq4F}gF9p${NFpnB3H~Df7fk4=xqUZc$2aTSf?RIt))bn#0zZ3t-yMTS`e@E>jCUy
zf|~G+m!iRuW(oFJ0765Zsar^oo^^HG<GQQwU|Z8m^37iF;_2?`;=Cs>U`BD_k5a+g
zOSmr$|0CM*KM66+aiMFGdcGsf9o^zS^%np$Y{Gl(Osl0t*Pe~+?7g|2*1E%kK?*P7
zkq0foKV4%5Ti)9}eS>mi<+GbdbMFu%{+(HGQ~N;Qsknd!Bj)0n`;O+c3t;jBqO;tU
zoqpXM7YTFKP}3D?n1@`t>hi;g%jnN9^wLU;(rv?WMm3z%e@r}3RXkI;!tF*eYL78Q
zWlSATh}?luyDfB5*xxHV5cRd5zFulO-8pQu=OR+vn;2TN8<dW8M9Ld-<I#HV%D3Gm
zbIZ+;kH(tp3iR=skp3az1YPGSPzip-wc+{!s`iI6hUed^b6Dy+T%665lNF)afh@MW
zG1l%Ge$fK?)RRxkcr-CjK?cs$blaO3XPtK2f6<MQd|8^D6I?KmD`OV)x9pU^C*Gi0
zBLm{zs41%~^V%U*#Pi;4%d!sxC)#Fbw5UD@+ls7$9Y1VZnw$JMFt^WpV7%vM=?*?6
zIB>(a{MGTphaiQ#d2iWLuVv?!?0)$30a29pfh9j4*dT9He+aWECZL$S+wu`!12KxB
z;kX68J~Cq7KMRtGdl5$BY#{5B<)xa`<Gr&Ha$C;b7dNB+Y#6Qk(6S-EDNKc7#i#^e
z$V2%?#kH~?+IhM0WV-MT5P%Y{%^6lRR+1(hH%U`qdO(fx>|u$>atH6P-co#2F@?e^
zZ`O=O{+aG=nv@e5qJ^(b3bWv!P*rTC_X*+5G?y=@o$KbVrgz}A=0Ix#Hi>LOkN3%8
zG@5oJum9*>YY14>w6%6Ot8;y8t=Yf-wR`K_qmNrFUi$mdQhg4oemVRfg4-HZB~aK(
z@L+V??;$fm%j9R!J+kL$l6u`f_Y`AY)H6bqVvHvDvG_n2yEo5RZPo+*O1Gbe&d*p`
z`1`z(P8W~H{K-5Pse97ExH5le((ZbhZJd>G)g6Xk1}F`iV;ThUH12%wXU6rED7zSL
z+=~gjdYOSX>m^z6Y1S_IpS^GT#{|ZYb1y*iv-qc<*M&}-pQv~Xei+7v`@Y-y_KD6N
zVmb-6EyGsi%JmeQ%IAPG3y0>eqgnp@K|H8_)%Z)R#n)@3mI9$`+n;UM?5{}A!KBO%
zdzlONs~Mh2=UOF>2_brqH>3-KKi>52?VHPtee=Lqg>iyw2b=seoRBmvQR^CNJtiP(
za4ykyJqz*{pdRn5UVwuUGhs_-vERECCxjcnvE0|)w|mRsvd-YEoHrE_FQ3bOKjoID
zNjBm}!ZEFQxY|>!0sn?o%My@9;nU{QR2S4p!qlbtQ<99=^w2jtnP!Sw!5Zis!iu%u
zbmPT1-K5+WIV@?xoodsY^k`!rwd$$vU`H6vXn&l1d0Fy9n+h=pm%>AQXV9&-cd-?;
z(^5C)bTrZ{vA`aSQdZeyiiokEsUR6VMCi7hGJV~lAc})mHe3!4do_^})6FjOn7Eym
z`fU8SEg9K7uyeM^!g2#tu@nD>FfpD96^0Num%=lRicqYDpWiFif?xDrtUVitZk2k7
zVr!)2LsH8asm;~4?|Ux+bdP{noNePA5KZ>ch1%?AHVMO-7MmB&b88Fw(8Oas7G|AC
zvaOQb&#KHaP)o3S!DAXNQYd1c$(?D2C{gZ4)gQL4Z+%eZ9H&qd<CZISy<_MEofI}p
zz(3N{Zm4EtYZ5m_oMn3)nH%SJU(M>f=$1b&OREg8l(l`U{ulRu1}Umo0jU%kA$kDa
zxdDu0dW+4FnX-gyK-&X?{g@`r9(=%Pn$pdfyB6Ba&)$SM$CksnO}^<}@ylzHlYwLY
z^9vuxD{od--n^at*daOBKg5FF<-Q*u$3Q}HinZ!86J;Uq2i{#~8E>jnTDc!G)PFDn
zfOK`FvOq!n@KQ|BMBQtJTA-z6>|??3eNw#A(WKWpCBg281?|+!{sjqEEru64-Pc32
zGVHy7RiAZ5QZUU<C<~qe!MEu>*Dh1`9^&-KXgy}oG3VN<qHyOru0vx)ljFhN6ppP#
zxmxGd`SX(*4g&WpRKdC8qOtH4+(5Yn*{i+eT9`QyiCi&lXc<POVT~lVu#VZEDN338
zO`3WH9gvV#C=T}0cTfv`k)5X}02?(DM~IyxY6J>S<Vg124cx%p-c9(N&#7#;YK}ZG
zRi3FqVZQ^zhB1wzJB;;K|ABffz^+*GT=~LrJ@zYr0C4@DvIO+E8%16;0vasU^Whl;
zWoV~bRu_y3Y<S`<M%_<jUZ1SP0?WDltcArdoYbp2<0<IMIQ$rCx61NAr*|7fg%>Cc
z{?uaca+c046Jl%MFus6-0&`xmAy6JfQ&GMnik{<<QpQ!`nhWS8c;}F!E-puRg$(DG
z+FaZq1#{iK5?;LH&Ym#R5?8CHlif7)Anx9>Hc<~-i+B|4?4C{fe)K4thxE7GAAr<!
z<^QJHv#+6R*?<iKXkzM=+=q6RBA`gLD(hHUitkaI?6pX1^4!>Zntt9SwqB}LnYgu6
zajLLx#xgc6a`%S`qt%~%wii*Xy`FdERk1nT&gXzD7hB^{3)qRP$!?|GE<a^8SMB5B
z%l<bawsM&g&A}rWb^7wHAwwg_=HuC4urFsH<g&9~=w28+{@W5A7xU+^rG4oAOnure
z82j|$*_0;M5+AY+eI+^we1lN5T5L$v5eU4{*iJrvHGLa3zw!3cikd5z8L#^KC%+B!
z?tbB&Tb!2v(%VP41sNa>9ZU$>rrz?4>c61tH1_|I5}tE{8b&lkM7OZwxax`>9YAZa
z2;}K14&(1~9KuT!`=z5v^o_0(;o6CXJf`-`f(b#Z!X(=a`5e8n(|73iQgG=t&CKuX
z&#lQ~ziRp>Lj|J|MI$V9%gmGu@LyDbXt$sKyHGO^wU*#k(Js43bGIQC(GrJnPlN)X
zbC24Kw$frQ@75Jb^>oBpw$w2_LL5*&=~J`E>kU|>79Sijaz4&^R{{3QD#Qm>Ds!Z}
zj!QbQ?KBFoy_<cid8O^3J8%}gC33qcKNdlqb9EpzV3zF)A|pKSw{S{$K)Otpaj)!r
zO-pWf)yFMY$+vQ}3{@B}TjQYg9Acs-pJSemWo+TSX2pOKL!^mY#|tRw4HX{mdc$5?
z$-fK6pX(_JriJ*CLkfc|G&o)U6=mg7<lpih8G4!cC8!X8rl5NV0AnKGMt{%HVfYdC
z>A!PV@X#wcipVxcLLaqSJk5PqFnLj{V-9!kw8Gqta1rV2{nVv6e5HUIi;M4lNKMu(
zhHBXL@occ=sB3A*=dIm8bg2;2Ua80<Fb%fcfvPWKDFN-{$LsHvgbF?qL4`(fzKv!f
z85TE>mA3@>Y9D%6Q&V2rWy<FGY$u#<o%-oQ)Aim}wf3wa<YT=5e%vh7Z}AMCD1|f&
zBUBs@DMc&)rP2x&(>-_eJDzMcC<R@@4@@3FgXPu%-ud_F8))uIrb1u(nzJ^d@B-P+
zGn#Xt1kmmh)*ZHmE=Zu>$vp3_^&15lcJH~w?wNB4!UoQCv%Mr;p2rR7%uA}M`F=c$
zfgGIa$BBBUYv63zjP5}Q!z1Z0p_I}b?VyDXCq?kRujgAn#3%fT;9_PtF8OGL7nkim
zy#&EtM)+%S*?LcI<Ok{7Ec1y7KJv$}UqG~MEu)?&1Ph&oT{Ce))Qbj%(`fX5d~^8J
zIK-!5WuoE~v_tgh-OSSY1P)Q6443&Sv#~Yszj)4eWaMl8*Tcq@3<*Vp{()-}{oZj~
z@3rFMFnQ}Y0d^@(4uMu<R!Ubl>Dun}IQxBpg=pL<r{W4=Fdc=Y?cW~^1@(V_GDzOd
zW6Py-eJbev=F5M=ekJK}2oh#IscdHIwOEVXn5}}~6KJPyKAhB@^p4{P6Hj#5Unv?3
z8Cw`)<)T4CiSbi`dp~7%K%SXo=KQvY5@wb>Km8Qn72K;Zgz9$5?RV^V75LYLyTNYt
zy8A7IY5vmh_Z8mQ8N4oA;4D?dr`G%Y5z}vU?(pef-v>X%eHwtFC;VBY5`<PDd*_Mr
z;h6we+P$8sN7tv<<JWRr5g3?9aa<)nHN@k+Q`fO=it~s?8gF=jrD+y72i}(L<?eB^
z-GR;dK?aVG!Yqz0EXa>@sO4RyDi|}2huX4Wo>4R=;3hL)r`!wm?+$HNT8Aa+HsRL>
zhh=SN75lM$U5{2Vn><hY1l=?xvAx`_i~l$|czDetpFi$j`4RU;pv=YAj|rFZ0%ini
zqR}`)n1eeXSQR#kv#9^GAiIxgZzk<xlSD+L$sxUtnXp^eg0Efsq3iQhd4U=4(TBzl
z-Ji41RkADZz1XHIIrHyxYVj9-Ob6~>8_vV+Ah!gJ5}=3iYFj}FE&(;vZxr6g8_u!r
z-_9$J7{;%mzT&$fxhZ$J1loSo^F@HMPA3OnM7_E%a`&hk;#TqQWpk0u>z5xVGqV0l
z#*B7b5Kp{OnPZ_ln-r@i;nhdtFpUQJQ5qTWYxaGL^(YhZ=j$<a><JRqQYx!4-B!QS
z?q*?NZmW3kr{;$2jZ(`e5#p9}y<SgPPw#)|J?T^EqnYV&q<i`w&^*0S{`U<G*(%o0
z$$iE==_`~u#P5Rx0%c%6FxN~>8Bz_%;RZX`+gTP<{KUBU*TUbY1fjdAL9(Xzgj~Lg
zYc*S{UA*O2WPD;mRmuMMdDr82*#G9)GpGOf<KU}T57MsM@3^zuMWpQpc81Jy_xso;
zsG0dp<dhGquSq=e42W#dOebF9>9rKl!a$t5xv<)taUZj7zi#$gzSDE{W^cnmr&E<(
zRyZ|*EBTgXQoi?O_P6QH*)#6PRInQEO4>RY<2ca11q=o&+E}xlZVYff?UdkWRL{EG
zOW#HD-AXGrl-Vb3ZJASk%yX@AKg-J=J>5+iecNTNS(w?JFmg%5aXZZ)bppXzDasnQ
zZNSIzR?w`i+g^i#(q^=YKeV!=ge9<fY$e|}qZ4EoTr=`iYT{y)RQ_o2*Zao~_N`H6
z!C+tF%x_I})az7)0HKqv4bYaFvoo7J?R`Z=-2kp7^5L0H)-6EL@cm0r`uxd`&sRI=
zG|8EoW0$LL?VJhDFMsD%viZ?gmFaD2ztJrK<b_9cT|2{ANkV-<LT&C~XTG~;MV?7;
z{0`}jDrRSnnYdivIh$aA_~kg?qpBk6%v*3k{5n!udD*^s!xjgXa5}io#3(|<O0x#8
zrqnbVhBGTBWg!!G`UxCDQQ!hZm$_oc({<+4X6HLfEX${ld^lKS@~-S{hTe|%dz=1H
z{lc8?m9L-y)+Q>3rY6;YPe{o&j62;ysjrH=M?3FNxo&?R5jKnmTXVC9@#+)1a~zWM
z{YS0BZw_!9iUVgta)W+u_4{e;DgMtV^6OX=V=dz{UH~lbsb1;LU-RSbafQdKj#RJQ
zeK?oeS?78BcWi?+JNAd)f(aK(54}saxtj4obiwPRWTXe|pHc(<77KpPLv47nrOFJT
z8IcCmB-wYt|MlRE1Rn*QTD@xN$Yarw9&0T_{?JAM_~?S8ZUV>6G|@V?GR!~Mn;dSJ
z#thD%Sb(`kP;H>YfUi$o&mXGFw?nWkxje+Vx_MvqF1aqc`Hw*#_iKcmoIvUK=FJ}V
z?yKIFKUPHUa1K*t*k~AU*V%gJYSQ~1@A03;<v##LQ#d7;Uj$&Ss=ZNoAqjO7rA(Vh
zo5i>o3VVFIgxxIEQdk2TBV}1Y`0bXKtm35H#$xaqs3;5CBj`Ur;7a}Kvb30U{2`=K
zUH=_lhTIi~(4bxdeetMB;7^olXUUJ!JD5v4hyCj*@j@NWjTd{+$_C@@owKCnV?(OF
z6wbc<z@fFBG?OCgwS!d|3Dy?ZCp|OIajI(qu0%!nn7c-tRgtG-D<CsjvIZ^-3Zya>
zWf3@PZBb?w(^mrFk$~7r{2N)zpz}^ANdGBd%0}y2my)@=-?Ul#5cMaAwzso@IJnme
zG_IrC#$N}S)_of7uy!DLM0G5DRQoi8Zj4(*hiP=n4+D?{TM6H|-1&VXBZ;(z4i-^s
z*}hj!OXKd-&R@AK&Ln=LxCA9(T@C&Kl9wemBJ)oU1l|awFK73#HLOX~!N-O#bj|7e
zjFo=^htE3>I84(MzWV|A?qr2N{Jf5}<2PVS>8&?O%jnx^>pQIQ8&Gon&`K%kLCK4*
zAB;^q?DvL?r|C@%8S@FDav^R)@8ZU{*%EWIkHcX?QMo)Z_}E9ME#WGLL<DpM&`msr
zu9Kuyp_>kNhV9a78TAd?BHcG^d+!Gj>|m}%2O6@iD&Lh=ch8jU{2r0T`H3AEd^^9C
zIIGNHOMIzMvtL+&bwk5+i!3+XqVbGc6GOx$A&2p(ng7({G24go<;UqCcxs&@n4H`d
z2<rwtj&TsmeR~f^E?UvlB-H1qB88r9_LuXid{3!;xPf0u)-X9K+%@w^q~V#0UaM-g
zt%`*URcV>GRp(d=-96ZH6S#1-)N@KxZlZ8OS@ON-74UVX=`sfDBCTws+en3p9I|$y
zS-hhqRgKSe=n8eP>#PItRAbT=F-!Xbne`mK*&W)%^R@gi<mPj#JIsY*t?{1dzz{*~
zKuwyamddwdwK7sU3Dn9@6QY=_Xb@v+v338TdejeX1NNKVShjtdkLIMi?l@-ItvJ%b
z{dwV<ZHCc@)Q}e+y;~h7d>y9Qo%`?nTN<W_w*nY3P#I9}VumOX*@RQ<JcWBtC;>Mv
z^Jdi(@YLR>4z#(^AgXQ)r<ZmRxI7ds^rpkX1&Pbnh)CW29ahz6zDyStU8=lqbrLsH
zhG~bujyQ)kFkj>9T0slabE**GlA<$M53r47k|yW8*iE<ITgDP8Dejev;^NKtRn2~q
zOlA0)a;ZgbOLbu51mCj){7OC@y*}Gt5*%Fey$ZH3K<y*%Dn4d`0PS6Yr|cF=kho5J
z0LG_bCYhu`*PmR-j@$aeyC>^8<gQHu^%!fP>CHZJSNXa*S63tNh$KhX0mFeq)ybys
z%HQ3yw^YSm*a0T5AJ&Z4J{xIvl+nkpGvJTk4o?23fXfC2#7ghRS3NebeQa_HFVqef
zdRbbV59<pk`LTkb?bmbDj*4Q|9eIjxgbKDBE;770F}OrZ5|$+w%FR(rxtJNp-Alzc
zg<sr;GPJ8-PSRI*SX1I`F<i&g90leil$Mv|1=_+iE5VmN=~MjEzf{~GeW@GzdV<}V
z`;Mo-AOA<N3g9f@+OL%vjz(A?13Bs5A0Z1y*`^$(7PgJH|1CIn;bX(r&1MD7JGa~K
zVxg~sEqgs8$a$qHo~Z{DU2DK8nIbObR7Kj2{I2jB+OLZJB9!9h6*`mH1K>_#dU!p+
ztc!rh(J6-)x^@Ha3Jwqgjrcdhsl8&JHd=XD`2>W#zvZFx5@wtp*DTv>mJI5K;9+@B
zdVJ^`<U{o>$_<I8`#0naX03&R!$An;r@J^#!Iyy{-aqcRsk1GhHCKgk`hPz+;{Wxz
z17Krm(mUk~4JmaaDo<ttQlSZ-iC6L3w7n_AN+y4q)IreS$_Nv&R-z4##)Fd~joBut
z;^~TFmix+^yC$U6ShpR5ffLO7(@mos5xy&3;iQD8b{pWM#*404F>wt%jB2Hdg)k8>
zUcZw#ZpsO&l&#8q##K@@js>Bw6pbvVs+~cSSPAUqVZlBwrRZZM5ym<VK1nJQr@YSt
zxm?`h+&G`19pmt)M-b~-pdeh<`0UjLFSzUTd*YtI564B(;D1}%|63jPKO(7fOQ7x&
zL0sPAm=F9WzovS;0AG(^&Y|F=?1}kkzL<C4QC)FMYRVS7QCvzB0h9H%7u%rNElrQM
zj<|L84S8@k0L7$hC159g?lj3~{C4KWaXl6M9T-&p6t2)Sf!-CDz69iD)Z`}A$$GrL
zC9qin9lu4ZoBZF?zeChxLia`Ps~xgJeADmcl%eTj;c{yJS?N+m_I9i<V}!py@|&g;
z<*}QJd?#$v^}MO-($W3K&k(1k3epP93PdiLFTKEYDV(2j-&jRDjXn8ZdN`t>pGs`F
z?H+%<Xy>2*j5n#`M4xyxG&r((OWL8p<@*~!TYVmmPXso%LMPR$E!54&Ls?|)z9Psw
z?_u7AU0lpuYyVf-FV#I9+lWZ;>g>5&<O@I<{djxZ8?OSsHk&dF+{MZWpLWyg$}~4~
z&#oeaAz*m@nF%x%h%+y+-yxUf#q-|G#}R*+fi#_n#KDm5Db1^@m%DYsajldPRZdt<
z#_MlIFK@YR7DpovN16bpkc1w7ivHAG806gqBB?$DEtfZSEd5lRDuhPyu25B3ibA(g
z_5d!HA`hYe!6;8pnQftXf%G5lewBVA%_ASZZtjzGJ9zcdcV)cD9Rk_Nhn|Tq0?o#%
z`#t39v+usx-?ew!7zVGe3lU8KVa#IiLjdwp#<<*z@ip-&P7I-P@%X=^Sj6ZjVnYUm
zhLrw_uNQkA^&nTliDsg_DG%5!x*kXeI(f3qK3qy{x*d1l${jb^bDNT2m9@0Bo*GJC
zXYZ0be*2G(v0l$!gRmF2=a2$*ahM9doKdU8xW>CjEDcwz@f3|tFO>>>gPO#Cv6;gZ
zAgTMdl~))4G+9@X?SOR8#6Fjv9ZJkU98wfibtKy1&)c!D{hpl<vYV<3^~CorT+F9e
z$oAY}FqqQS;ft9?3h-O3J7v(09bJr6wo`NPMwKdmrs3f=)}VJ0D`yg&lV^#5J&i@L
z_#uXer8(%;f2o}6v9}0>kssDNWY~#qMWbu0j_YIFGWmAhqwkvwo7zKzZBI#WKFOm#
zuXC|-Ep~FR>GV=txCLE}RG#R*a2EdcR|%61$<udLD%fS>B?f9?I~9QlG0g}$851zq
zj!IkkDgC3eA|#J3YF$AsJA;(uN*p|DCv%00eO;k$<VN}$1e|~D4_VNh_4&UA$ADD;
z0H=J%Z3QFQ>92au%`e2fRi7OXgL~P*sMRZ;zJ7g^^0g%)H%cS#eq*ofrt;;Zi7!WU
z{9S$gYtZffKUC_ke7?>5^XH!KAHr<)zdd9O8VXmS^OUlvlhyZC779xYUE5k$$G!Bn
z%Aq~zStM09g62rv?;9_b{(`OT;RIwaU8OjV<`1`+^N03AJ#%L#pe9qpi^mzOHg*=z
zDE2&`>`C+Pj!P{l=BD3VsQFoa_BYs6waq-_h!NO1%(>zPooA#Lvdlb^uphl~2r#FC
z<Vb%~RT(=?B0SV#CdJoTsPWq-ZWp!ZCf%!&RX-1CA9UB9$lzvvZ%McWdv%w)V4vhB
zQ(6Y}D5*64XeS}m*GwX8q}<2rmbc(fJ<?!nnYl}6lIDbK&j+S|5u{b5$r=aF-tU=k
zy%}IkeG%aD;N?@?`v0DDVz4zt_ZWz;5H%xAy@tp<g1X2pVUOssg;9*vbPX~?w@9Ol
zzK(WQDoX+>Gw5OI!FKm>@8viY&~_liq)zt~x5UOAz9274vg?H~lIKQlUR(3J%Ck~s
zj)LxVR_M=Q8YxnM@C(5+XPGjKZcAnuaCZQW=2JR<T9=<etaE>my*&C*l-z?2opzs+
zN#+_1kD54P^&QVT9GflD(hGtdH&%C9TkN&4O4#Xnx(kGgzIOb5Cky$Y*iu3_1D02L
zB_Aj77h9$MM9mlXyfYeXOnjv*9n0Q<%=O6$@ig-i=PTit!%fpm#(#46-&<K772x~)
z-TlLl*6dKlILz0)>01a{2Im@QDST6$)FQS<Ok6*1^OZD?4DxNj#%OiZnkyF(|NA@J
ziW{Fua5&+UYoDh}p5AFS;1_r&6cH@)f5a91-Q^{k5=C!`?5ixf5$uCKyg)#~>OcA-
zY`iUuEymWOJN~6|qUJT|GQ;ft*cZaGK5DXXS~efzo1$&`(xxoL&#1cP2E~78$ZwR?
zkX7pGa1kEqbq#L{Fb_)xQKFLl{3F06F?(-jGHH!z*Yvf`J(;JZzmSQs<%QLSS|hU7
zV@N^Ar&98}k$3SE`bR(Ac&$PV9#cc%0?|C+-L@OsyjA`Ju)ICB*?Xk^z#t5`XoKWG
zU~#O;5ryLy^`xWmVOg7JoH$bB^nB}j+4iEqv^V1m*Q;+`Ho8+4Q~sFi)7%$4s<Lnc
z(;}d%@-s9OfQs8vJBRh45LgNz{9*}X<s@UNz2UHy`Kk6Wts{~Tbzg|96;AEt)8{@2
zMu;n^8AHJa&Bu8U65ae}pRf%NrS*$Ap!Zu@pr)85il!+2owBN~f2oi`HzlOHO%XiI
z>Q6a^-Vn2v(`>4ck;g1D-2e@dL>zucSxaSH)U%5i7ns&a1}|Nh>{;Dn-dY?uxncW{
z!hVL|9kuykOpAtEfS&wXc;~OTUX~w5Z#2?ZMK|)+E6xrxqlVT?yXIF-+L7ukocNAf
z9aAq7`JP{(9Hu(Cb}RgH(B=yr<w+-6-7-(U?s_J5$STS>$GaSHQ&njQu3V6>s)u4t
z24+b_f95@WMR=UmdY*VMD6u?4TAQj$p5(r0eW|dOmP{6Z!_b-7e87U860Pv`cc@5S
z;%@knI)Ux=4WX2)DbRwy%lT)xMY!P#GdYmG_c6%Kglr3C!Q3>t7C@gn6^0y?fln!K
z)dHT|0^?p-F|j_wHgPJycNVuiFk>dMq+EF+;88%uS1RLRj~Tmb=2|YdBHC5ID&}W(
z+2e@C@CkcL-{M-y=cmfj>+J2*#n;W^PP|cO!To+W6Q*%F;YITA9d6E|3TA$8cV|J=
z;LOZaQP24`gT4d%jemfMv|A{cAJ$HkJ7GPb0|JpjD=;HDQ7lX*l{+``9@s5QDKflK
zIBrJ(H1b7LY02Zfpx6$V;1fBQuN2pkX~DVREZeX>*7-rsx9T5e|GTvR`0q(*Ev(aR
ztVviJmOj-YKMPntYz6hJc)p%!FqsiHH_s;~aETC)lSAE&C&Py}#ZDfmM$d}=rLw^{
zFx`8}1HsM8E0RPD-3a&m!GKD;`Wr#JfW#CG1XqZAU|_hlvYygMkmaF=5&Up?yrV76
z106&>fuKmzq&n?K4@fg>H#g2mQli;B^~%IB-YVK@G(yD0`HUIsyPcf49mCGfi7c5|
z_TA3VmK_vF$(LW%MgSa1Q0P+@8<OVmh`;0Fux4NaLBguMA!7Y)n$}?C=rxCn;py4m
zdO>Y<k<K(QjT9c8aH!!XU{a_xOx^kPb)~clWt{3%91P7m5N2daE<Ad@$nyCU72wlq
zTEmeJpzWxu^fmw+@&sx?WB4cChD<U5=3qd_EMdvGfp#jAKCFLtx?J-tyup%vfF7Hy
z>TMvXP)(eJH`i&YO)YD7;dZenvz*U#Dw4Jr>7M45s`SBCA%Uo6z!UlhPmL(bCY9yC
zPZ5|5-+Tv8CLf-RD>CVe43!}%!)8h1p64JG!FwaU9$iA)i86+hw8|YWYMu1q`@bTM
zb2papI_K7v%*IbK%EF9Js{P6kRsTIfH?y6FHCQqRI0p-?nWtwxlf+x?2q(kJBHMA{
zO2-{k^+Sl|!^Peq?+&(uG&!`X3r4$UwQ8r_P7{{mL41)Co9bC3znLo=-0#)bpI)W1
zQ2Dprf%+Oo?M^x#gU$0MrH+xz*f2K}#azSHfCStVac#)f>gD3Vz$)iL5MG0(0hNR*
zbIrK%MwEn1HiF<r8|`$}x}MPHTWr_hpt^nOue(G0Oz)b$RYBD;?Zuu72%0;B(^PBU
zPkh-m<uCLdWTpWvSTb{;t}DIzy5Rg`J4>XcUTa`>cS{;10vBj!5K5FK+qG54{iUXx
zK`-B?>UX|O>)5b2^Vq4pyjQ9UhsB2ZgbR|7X;a`6_EXEmO;L)&!|>c88y?p3<S#@v
zB{&*Tb3}}$*42~Tl|4%~n@{V_*W+<?J(N|O@oQza4cXWAK<`X($<&{f8E4;AM<i;V
z#Es%H?Xz&nYI?(>LI|JO-z#dGN*XSXfF{nyY`Y%18Om#-h};dqE_Q(=P!M0Dr<>}|
z$%w0I`^31l6W(8y&)A90)$X{;xZ=?H*RfjP&!5U(Xm(S<4vnb^KoF00-!A<9j9`xl
z*I0bzcumhNGaAf-v9*d*-B!UiM>lnaMec*AoD9CA7su0deRmHWj$j18a1A7H<?qz6
ze_j5E$;vZo%Dv?z&>6#)*S-o^IFTPI_nx2|)^vpq7|L6<CrM?!)4LpBKOOWHG=zja
zpXfv*#LKFmy1fki=~tO;#~2ve=KL16gq0Umm6Uqm7GTmLbyqiqjSSn&kB4q+YHaPF
z=#`z4s>g#oBJ(a?L&}b2NliQuRy<ArIW@-{1zQS-Q}CW@1sLz?w8F2?<;6Zj`pUYk
zwHW-W%|k)qdm3I03<aj8EpT6`D!SX$hlt2=qJZ%pJl|8Mr{#O-os8Axyj5glRrJ(w
zKbxZ0Pd%sU%3GDB>xB$ei^<J{JAPl7XzW=Sb#)7upY(Ex2%tP_nKpSBdp_skeqwto
zw)q4sl{uq*6coy;=skFaWK8X^C{zxwdm&`-B)BI{`X4-4$QbuzHnX20Qs+kq?|Qc;
z0aGlNS%_x0g1ielFLniRdWL#**ij364_vHOgfOY1ay%z!;UaTb%k>!2J)7{%JIFgG
z`yWs7oimC<5cL1%bhd&WT&S{$_*Vl6_-lbjwuRZ$Ey$MDS5eDke{rg$^~5)=3HECE
z_W_O@aVvt}OxUE^3~3{y(ch!RH$?xKW{7t?YGud|M4m4XuyUc@(!Lw|C}o9f$)N=`
z6^1+U|142Pp>S9l21y)<5;2fdB<LaKqM+HgK;i>@LwNU^{U-hU7UHsALMS5+zk;TL
zlo;KVHLf=`_z6vOU*ak;ce4pJ`0Dni+oFgfjiCIvM(ykE|3&TptNs5RyjLkRh$6r}
z!h?!qmcc%mS&r*t%4pKr1y3l8wOtCpZ={KjSEn6A6D2KI&U8w8tXc3F8tL2HDRaIa
z9^GM)2W4NU+8wfEp8L2iyDJXH??<@lIb*k}>R+L^p?(Ukx|er_*v|rhZx$nf0<WI?
zUG5U<%qjF&-ZJ~c`83nEa+Vru(r|HgH%E7vWjJtga%g4y&friN`?Jr;#_LuEW}9`2
zI_G?9OwRK<IL?+efqAH#y^X5E>3=~KgNs6FcX-;oARM|)eJTr4mkcK7zM@%y`dJ(w
zR1hm3znG}BGm;fQ{eA?ScS-Sly}cl?ZG!y6PJ-oZf3fv<MW4-rZRGA;z4=m@%g-q6
z$e0Ga!bcaB$qcCxrpNe7*pDA=fm^b~n($@wQ<q`EblYj$<+iACt2qBIW`VVW`0D^z
zPCNNTkkqOEjdsF%e4_C;Jr*3T=K})=@Ufgd41Z+wSWjG>BqGsbAGEDs=OpcON<ZFi
z1-igh|5>lUc|1V2V1WdynM_Cd3nYKUHCUfehY{!=4LGQQ2qeN4-6c->2E8IVl9)#=
zdw)BWv1SX(jF9+VpRBWM$r^cFfZpGV-pV;2P?h!PX;4xDu<GU>oe)~Oo(SK^fO1ci
z#6(<E@Ki#>#pN~17~)lTZEv)UzrczcmE!KghzeIrw`%J=`zGU$32d$O>fNXPla5Bx
zW&gaYfBPIO|3X8EU&P8imZG8us+iNz_D+jgk}jI!TpsA%>(a}P+})q=cPnFvfATFm
zCeQC^ckZtGyd!506CUXt(A>Yy>VM{=aF#5C7Y?d}%ghHt#66Rj0+|cIY+`suFmgDG
zvWFdTr@OJ;D5N4ueqyD%cv>iPkDFyI4Zuu0DYL>A11-wjf(e7Uq0C_8Ldm|#M86)k
z;WY6e(w%%?bzu)I(_$;;0DQ=ImJCrAvjTr#u?c$My6Ayn<~>rGu%R{Cc!_krmJtW{
zOdd8eZzQT?cxq}>)!N*~GV%0^!8vzLaPl^j!C&rsc{t4PWx(yEk7<m4?nZXo-1J7Z
zVGs_vfob^5)f9_doJ%11_Y~U&L28BLUVw#6OK^z>Gl`%LkW+hc9hw~K1<s?168$=s
zHX2cDlWo#IW5FRjJ^T!G@y>N^EO+j*rsxC-ibrx^Ug&Fh7Fe}S9qQ8BA9<o*;1Q94
zy||kg$V?Dw!K%W?@s?qm6&sKqrqs697$~cVypE}5@4W2Yi=dtimrm;>aI|)~2NSWF
zFkgaiS8*6cD@Zcq`ZlY`I(}0{Z@C-pOecspP5hfb)&=rSaf-F>!z{(>$>Do+N0dG@
zjEiwJj|e70pTD;F^nyf7t?~A5yQSS$jh?&4vTfV1Xqnz+HR;}cVl{Zeym<FSz|U$*
zAEF;qfUgC)%k(KJ5-m$cv`RoY&V3knx14AgXm_r(AfqBVqvlmhNKR1H&N@MCYS^fk
z?{C*TynnOO+FI1P|JNzi85nn|e}QC7J!<G;EwFn($bP<X;jn+C-1(L8z=q_XeIuFg
z9k*umUq3~6IdnRDr>p6~U!QedKl!_=au@bH=?j@x7S2FRnd*Pd0o^k~EKr#js6<J6
z1fNZ#J`ZUYkd{7sn_!wy@z0X6KhHTu|N5)w%bt!q_%){v7&xsA;jcONa>J?3O&bDo
zf}U@VIeS)R=~<O+>x`DFxa?nB0?uq#zECWJOT-`XzrTyxKK#+n=C`xGKTh@i+FGM>
zBL4NO=R2NnTv2dm$E)OTUX`e*{HU_d=)0%tC)LFS#fB%K`W2<j{g=w5Tzm)2Tpo(6
zprF{1@i&QYoD6lE5~?VIKrZV>3wY%zd|yq;XdH&4Y4fDK7>?Gk`93$w`|zQyJ)Bd|
zPzx5vQ|x<CFzhC^_rCs+6|`qu&!7lw#l897WRhR%sm{=W#FMxg{gbd`jsS3cZlC6~
z%_ycJmv3&O6nJ0gYc*vec=1pwV}tFFoYghSpjK_;o%e*AU}9bIEN{r0)PH>S$cG8d
z_~FMYiwZ@XK!IdHW{D=k8@3%TS_(6d(YiwX158~RhuOe@yXifYtmk}i>re+P2M@_;
z6XhFLJck0_uhyZh2Gq)92(NB>2meTQ_w>M_((0bDme2s4WF2Qu;i9=vrPNHJ0}fbZ
z2}^r&Xk8cY5~2S@=LzuleHCCkPd7yOh<MAX_j{VXUNhaR-nP+TbYpfz>KrpyaOv%>
zP@WEz;?==cuKw#1*y|o^I#p3w6|biF1r(`O#+WM@0eCR~;#gZg3lX=*3fEy~RQ3H#
z&uq=&bHTc`LpD8%eYvhLKMr{J4O|FX?KR%!FeQ_n`_b*Ej^EZ6SM9EUYP|P<34dcy
zS1juR<ti{1Cc@)DPD~O7n#18!-AMItegok?Q<oN&Pqu?bl|}$*wS|?Du6U$|0rQJ7
z`to*;TRth!QTI(iw%nuFvb_0F569)DkR_897K~@$V?u>El}M;_miogpc4E|i=Lf$-
z>AhTlG)z52JVo=#7*3&qW=SjGUvxyx;q51`R9wzQ`C{j&u$gsZGSAzUaaQ{%)65l<
zZvs=Eq4|7oj(!zACuc%m-^M%_&EWHgHn;D0gq;x`4#z?|zLZ!G^ig3gDTTL=cNKS!
zVTkRZg-F#KS|S>_rf9Q>v6AMT>6!vr-+ISQG;>52EgG|TeL->(XMJO&UaM!9^eOkg
zGXJ!6S#BXoIP}pc%d**3WtN3n@)WDfFpaNb9BOJd4K!wP%2W<Q61CQ+M0<P2(Kn%l
zM#eHO9`z8HaH`6U%{pk-A-Uvqu73Lzsoq$>t2||O&?%r|cRRLU-Z~Lj#nGTZc^y1m
zuuQ1X(Z@8LA&dJW#VK?NvhUG!siDjb<m^%<W{pIRR;g2yu`SvR1yvnS*WTp@I2&}1
zkGgeO<JXMM&p>*<V%+X}QvUfdY<+uL>#>T5gs_PC>zo6{<SK4~s)T`rm?>5_f%yg0
zCrj$k1~3cWpnSqz3%aF+h#{zRTDNMTiK5CV#V+I{ISq3}`N+K3J)W~~IFX<|Cad6X
zZ`;yt9|#SBcHb@D*(nkSlVjDL)~>#ej8%cR5%s@X+ZJn}ukz&(XYsHU8Fu<p{_<Ui
zi|CESvibU?8(ydxGT&&tN!r@Lh~ch46NZJW(Uc}f!%}H_ytPqyL-v+7mi4|iL1T4<
z-jg4UjfhSiCZ%n&5&JC6PP}2qt07EG8#3LfpXd$$QYlM^9b_nr2ZkY-8lt*VRYpLI
zu87N0hdmTPS3_9$?Tx^_o}p(S5<*Cz?GY<&noo4moSsiIw5`h9*j=s>eO7~>KAkfI
zr=#4q1%gGw4A?_#Zc?ls6+73lR1|g<$^>vcY{i2?<et3o)9A3IwXRhS%;8ccllAw&
zlrp7}z8gBJ*4XQkN&U_X!oh!>ZgMW&Q<5$o#5*C%v?n=UDhx{@5(fCTPMN*(34Ja0
z2XO;j6r_rmp=*b6t7-dt>AGmXE9&uVoU4I2CvdFQ<E$y`0@D{Nqh|N*b5qAw7n_~A
z|9J?v#>@MB&_de70-(>^8nmP(iM?i3aFSR5$-Rh&7@|~S8LJNFxIi@`$hTpw41>@X
z*9)kp)KFs8!?kHEFaBQ6pZCU+o}#cP%~SWMdUw32?6Ddo`Y;bfAM5^H?%HB|!Oir`
zyj<V2ea<QHmG>P+LF@ldPMHaZ+ZK8gQw3(5=(Yi1JcJ+@@Y?oErB0&sD7tkJm~;5*
z);a1)!xK2ZQr$YiT>9P6+ysW$5Gh6wx9m!axFC<|)^6?QaqbN=<xPy$J&ed6sG_*V
z2&JmjfX!5nf89H!l*5Rl_Rw7G3VMg}(%0w{QOZ4DS!FWadJI$ReKa&v3#7i}B&oXC
z_D*ObV?#i?P46l+m48!@q{9yO$8`S6&@@+4+}ckRS!)>^IXeSmyN!eyK__MjobxXt
z=}klw5=%|uqPxSN`Tz4aRx0nq(TiGuBE63&JlS!zm%<I*E8oJX^ME(*hL~C3pW5Vz
zV*?{PrM@S7eH^xW+Jsb59oIxek^;P2l=-m?@iweOt~J`nak`~^CW$1t_5cvKD9HoU
z(1p*g>Yg2RcBzJ4&G>)V`tqoz&b41CDk?%y1S$xzqF{@dRvB7`M5TgAF%A`k2&tvW
zWK30%2q96CSxl7*6$%j%5t(FG2ni5|T8hjdLC8RrF|wl&wq)piJm;S8e0Qz;hqi0A
zE7{rm-S7K6zvnkF{*d|2Tyltx{Hvba#7h)d78o{4IT`&Ph2eg?;!l@^8b9A$GL-c&
zJvOK)bm<eP2GfS{M*t`hp3lnrP){-W3c1!n8iZIil|Swjv9Ix}c^%B_T)lMvhSVcN
ze<S5EUJUpG!p_;gylX>$>WrOO$T8`y(Rq4Sy7gJZ9xt<!)w3Hk=)HTf|MdO;dai{=
zRW4IB1@~in<5H6_eghZ?1h>LZ7p^Z=t`U#zX&36fRU6Yf+w)u0+j|$LB60#ciL$8c
z)!~hp*80uE8DPB`MM?&aqx-)4{<0b#hDIi39!1_{Xrdp>q)qUILwP?j(H)7+JSZ!w
zCg&c|Lnl0OtCe2a09J9g(bD<#g;yieEN6*Gd9u<VkA`(amXgk%9$r*=9s`|RSz}rF
z?za4C6W!XJdoQOeY4_i^nzYcq*7~sZKZBExQ|TXotL3U<F)5glI!H<*B-Bui(Qr|B
z8xDhZwBk4SoSU0l?DBN2y-cwS>Ma=1c#`g2`-Jn9(_d0vSXnhdwGsEfjdc0KG;^R7
z8vjJ~R_M2`x%{Ki`!fn#MgmsC`$uCB2wq`JZ>BRv_sOeyq5@{!0d_m?sv{w3C!i~K
zsEr6xK)6OSY_cT%@E~JLhgfK&+$VceIN>TTnv>2uTb;&N$N&W43l66}IyGZ*XXvhY
zl(;?&^I&YYAKb%1<M5wf^`CM0bd_2czWZ9G`Y$%(MKoj#;0;xex>J+{_%fCWu|*o_
zipGgcb&km*94&cB8P%MG(VZFpv}f*IO<`(lEn)pRs*PO(!4VAS`NAJLRX+_LlmDT$
zd_%@lnmNFV{T<GrIL^^BNMJB-oyVeu9zBu%uKZl>N@z-;^L~ZaovNwKqTu+w;p#0t
z(g-j8nc<?9>0yEgv%!TAx}tU;s<^!S3iG$6Bw#>|#gK-StV+P+U}r0qlO4Jh4)XZF
zhZ*iUulbXg@lly?J{-NA9rYnJ=U2^t8Tx3dis7be@I(zCB`b3W6oz5gDq|_J2%Qvn
zBr7+`oZ8H-k?y2w>Z)0An6$;3P2uskBEPw@M(kxj538+QoVNeZ7~SK<L223@Y0lfU
zqLAg9g(Z_0nfEkep`lx81wZf(6HLA~KvBdL#EItTRAtKjC@_#F3Y*zUOf6>@ac8*(
zs0oH{<?|tIJ-Xw{BHMJ9VJQo^Vsn6Xt(tNHsLuK!8Af$knJIQLHhcKtmWhFng|y<m
z8XscRtDzv$)>OA(D;<;uv*Pl(e8rI&h9ep{!Mdvc3}pr7&n&yg(LH3C{b;h7okZT?
z>@V{hCD*36)Y}f5e>zZ2ac>u7#@pdAGszb>KM4^)X0R%3YPPQ4DsivNarN2{@C6%~
z&CbjaCTca=!5f*EUjQ?8ObXe6>o6sV;*aV&zK60Qg`@d^7I>&}&<5n-?a?o4BvSLf
z@tJOqnqKvD%KhoD#=`_<<weuKT)yOZWYDe@oY3_Cz2>xHTE@)=>0}90k4D`8q<+wj
zw=rBmNQ{Wx-A=Gy0*Y1RexX<Y+)ik`GBSNKqrMy+?NDC$BX#@=VR+aLkmKDDMnpJG
zxDt((YRWv_QId#yowu5SRXX>Zw)@3bf+Ey}m#DM~Tp_Sz-50Rx(Dc>^qY!o%^uX_w
zSLOK3J4!|m@#iZ*T$e%>uN{XbbWFH3vgh&?4z!q4DCR*|p*yogd4@X}(VYZ3s*Lst
z@9gjT>A0e<eA?#yV7M3^J^qUJyv#Y3a)$X?aO~DCm`eOwX0wP;5tUM%7BDf<J@;NV
zEP7i<iQVXDe^*2j>L`Qz7b)M|8?%#+mtVGOxm%t6TN&X(t(M2Yv4b6K`Ri>h_prH4
zgv3U7v4QEJUhAS*M@t2Na;6UbEHtvuPfxHvp>>L16w7qP+^hGembWdtHBzuCKbf@W
zOf;U8v`id9;@fKq-Cs{Hg<n`&6K-{DbJs-;?L}XB`vO%(3-bbyY4H?$=){!w-?3Yx
zjjvYE$B#Q#_3fN5DT!chqC3>oB4clJHv4?I^>R8x;I&Y-Z=3vrXN=Xzn;`FlR|rS{
zHKF<sRFlC(olNCf{rHXQCdNi|W%%Q18OoEVqv=6mwxm?+)Z$|HCv>}T@Uv$ht9f=K
zHv7A*ZZeDkN~o7+x6e5&-5P0g7%3ZnrKKGC_wY1^CmQcYKPNP?fio_pz^-7T?#<wC
zs|JVZi(;cZ<n2;>?xy}S`o8m`G;e-DpY!PgP;nafm!7jr3;%A&vPZb@)&gtyd#^@b
zMMK7m*ssZ_d^MOs#zG_lI=4@T{(L)wxxqB}IQ1&bHFN9~`LsTo$GuLly6t4`VP|H-
zCwgWV9$kTnjSV_eS#O%%5aRmR6>JxTWcI6d;uQ{zPIg_la%1pBl+;X&`xMm@Go?#1
zr&hwIYPLQa8!S^zwxmU4lZA%r&qBCsWae@CA@ch2WZSXe@6d{(>D@H`{&=f?yLsK|
z^<Ls{7MKPzj>0%FyOT22dH{J{`!>|XsOIrBZ=>28Ej-$9o8x}u3GyNpA#~JcbtKK7
zEqU{-rl&f)e8b6*0JGYG#mf>FvEu1)O_!-#!i?l|J1?KZ6{OTZGzeWf6XaGZdWx`#
zVWT9e+u^v4QX6Hq3eD+m@b658tAec1Q5!G~!?>2}cJ-h_@2;v)1%Ko?DQ0erAmzFX
z82r#Tu{j#ffBsLUSW8B?fX8RL+*Fmq`*DRT6P&Q!JJ`A$UvSm1N`-<(kCy0;oN170
z^SOBN&4g)3t7QxoJz%RSCGw+(6KX6j7lbVzt_qTy7H^8M2|O?y2`&|<dO2Te%7GTs
zt=5B{?Ait8G1c{dG(vfC*s3?rWEja(8~G-CjWY#t-;1b*uh4ywS@#|(_jB~(apY3n
zL|Rnq_|Be*S|fAa-bj)vZ1~&$or~b@vOLDUC2m&5Kb*<ROyxLgzK>GskE-=FRo4JV
zBBNFxYhKXZ<_<YW!LXLSg5xUtqT}#Db@>Wfwq#Y}#JnB|6Ea~ZN*T&h{XTBkw<`#d
zzP%GO0WGgin2FJ&+jot>tr~{x`d^36**31z`gn%I&HhN}CsGAOX#2qO=%OlH={hl=
z0uF!<z9`UFhBC)BW#lWithFK25?!a(`tsC83aKs2rNnqh{uM3Ow$tC((|6Iu_1IvE
zhr&EZFYl2+Bb?d1l_!$0QLDr`*rr#gVfc;*jp%1+98x7=HtT*eFMg5#P(UZhd{_%C
zgU~F0<#GaR!o`4ufSdKo#+y~ak8K)Xq!k|sg#PhG&SSv`zl2}wy&H<JT*fMm9n^X&
zRM)}B3bhipvPN9xrv{ua%3R^sY^EPT-gNp6MY6PM>EfYy$ZEr4@D||jQPa-5F#bjF
zkI!U>i%Mr0Yx<q79->j6H(z{8smbwajZSDdBUqUbC;1s8z72~Az-8vkPPHBd?$VF6
zi(nCu%h@iAgSKqF+DQ2wLTDkcK(*WPs|oAq;S(Vdje$+|W`);->MLZ#_-gAkQ=h)Y
zKNdo2q`N}6-ItBnMWdv!411FY#u-O67)}rcDnv-wm+#eU4HRF~ja1pZASd=FnrMn?
zT7q{#yF12#*jp#^x84gWW7t-V<`h@|NsrRwAt_9t&XZ`#td0(qN1jZ($-Xy=Ui!1|
ztCCmfwTt&O7*gdHINKlbL>aj|P_oE{DT#tyG38b?xd;xy>~^89B^orrGP8<vK2rN!
zujc+qw4ZNorf!E|A}VvEG!ISD@!vY>(>o4#6QV*BYCPuYgojs{&O+pThth~B{|@d*
zDoq<$wAPBxc{h}S1xmau;hD_6oxGmzA@1^QTK39Oy#+MS1>5XLNCYn|kW2<1jfqKB
zMUjTi)b-oO?tVFC?{{kav&MnN2auokj`=@m4HbOd31KW<bt|t9H#e#{hIY0rPu}1_
zkdow+aQqi=Md!}iC_N&@jpPG^N}Do&+T}=}I8W}dZ5l41ekdZx^cb(V#BNrF7ariq
zv=b?dYwWt5wN&~%$qoW)AygS-lGx~JwKcdrJM6{sg&%!@*BT=E>a|{qsBwB2YL<tl
z9!7mc<amZYY9lsdw!xevc$T1V!?7tt`E8DgH?e%LbD8EF`sWwfo5LIrC*Gei&Ppgf
zpEs37O^Upl7nUWRyiRx2L_7Y~<0$|XTCompThhmeb1h6gW-R=a>l}*TQV(V=R-(ci
z3~d@4d=jpC5x++n+|OiGzR-L+cQ<T*VdH(Uqj;|m6Y7@GT^@&;(B*z<WjPY-a{ZUJ
zMHllr#A6{^igQ45y9bB_i@9(Lzm+LYM4<)vYfOW=2NI0nnAV=_M|{+4Clo(3hJ~ii
z+b5v+U$26iRQ$OKzBF80X$jNia1~o(N;aS!fiXj_S=G~qL8jQUs?RO+5wm6Ya;DNE
z3;ad3m4|KZcrslekkvhc-J_R{9JIE<FTWd|&~DT9d(-#g%^TsNe)US_!4z0PxvPK5
zu)+W7?{ly};_2J@pAOVQH2c8Wof|^em(5cst?Bo)KU6RVc$*}ueAq<01$*R)ar{1-
z8-_(NQ{(8ti7n}2simFbB<>E7nqqERAPe<<Cqq4opWlD@)OL8#;JbcrRcV^wrEl^9
z&R+BN(AxF?@74~p_;Hg4A%i{dhhj+C9G;^}ynN(tz@fS*DThu*gJBF7nZv1ED<F&c
zv<eMp#~si#5%hE1ZQSfuykl>q%6pXPuvD&hC(qZPG*xeR{fJ-ako_NJr?kXa^qVO8
zD%A~VEqKH|GB6KKU{^UbGvl!aYGb+^8jg*3_C>PA^9lG(0jY$|w9W$vFFB&?5_Uys
zmLWU2dUR~J$gZ(G$!5{8A6F{o_I3UKMm(vZg2~9Wb8ywr$@$~p8(8Pw{-Y7tJ<`!u
z-<?Vb#>N5D!%IR<B4|UvuTC5AY4BT6t-Ug+#a)PP=6euzUD+7K2@aLNuCC5dl`J&u
zS(Q_`j}jP8{X~Od15a*{@Ugi_Lt^Bn=mA+Bv;a~hRRl$Snzj5kw9<Em@dhY{&(zyG
zz_FOXCjO&g5Gf7*Za9Jm;jX(f%j)Fi*A`53@JlDE8yfpK#ZMzXh!T%Bdh8|Skw-e!
zYp%i_nFq@%Q?c>&2o{*`1`p0vvl7*tw7g|J80QG}ok@?!$dJXGkyk{EYscFn>Sq#4
z%yHfTZdcjcU5j4FrUwh&*(g)LrbzE=s6q83nq|F=ksm@o2OH!r$ota)^)MN^DA_LT
zXdqwDD$7IiTO4uxMypeZTa^fxWWFn_^Ays3{cJT$Zze0P?3uV>&4TpOyjQwk6>txm
zacOBCBRyKnw-B7tKuf)57<u2!{S>i}Q*2;#MrAo%U+^dF@25H+M{wf88yt_Q@Iq1n
zC&~}Zdyk59NUZ@|2G4zRxlT}9RTLl`KjoZGbZRizi~SR5{ppHTj6ZTU(RsKFP4y^{
zSjCeqr)9#4JCn`bDc;yMN~ecP`(DmbQ7YAlZsQpe+`};q&!3VD2EIavTfby&@bh&o
z^H>Q}*MLqV_7Alp>|i-O0})J$5F%mSl%rL`Lix*!a!<$L#Dz46Z~Jc+DqNJG4@X*@
zF7V|ChD7R8Nyx*zl3C;S@o_@UOjeERZQ&#08-L;0t1-`=FEo`9Sa}&fFh^KX7f%p9
zAR}(`7#c=Iyr$lShRd5&_icr7OsumF(m`a2=i@p4qEgcd%-o3B^ZROK@_MF6FUPL5
z>tlz-*x4V6(WhPN^csxZnCX=(e-qxgYba7f{bUY86nO}-)V{s*aJ4D{N|~?13k4)!
zk`8NxFJ8IWR96$f<vKAYR-{NBea?A0+*QwcnmZ$2@;q-_<<tPla%Au>MXd_wsHdTC
z1$n@=5al-HAB`sF3YvpBSZWh2R+Qgh>(SQ~vb0d^wmr0qt;_P{@V`-NONU2a^$KoZ
zwT*o@iNznP|1o^)=Vg&AbKkvv`$nX-3~N2{GNTE^&diE=wFRM>s{S!VODW@trU)Z3
zB8Ryu_(oHtEKz}1+I@`D)1@C%-Q{S5JuBV-iM$=6HXxdX@eCNdQH$dPbb`2HpAk!(
zYArQ@q{Yx`%Bnv8L6aL%f*bZnPt7=-6JcMR&|pAh6bEph`Q~{6Nxk+iLJ$i(aGy*G
zH#n~e{AkhMPb0Mc65GJfddL$|wP)~KkV(1x)@Sy9Z|_iw{YFoXO+}YDM7uq@6`Ogy
zl2d(|@={B+iy$5+KQUH)Dx8afgP;o`{iE^Q$24@@Ji4o{i5!oua)6);c^yn2U0aOI
zKS6`UV^r~_2JyW1w2g!OaQsD?fhd@dNycxh?)xmum(l#7E`{S?`YJT*`*pRBF4u>a
z19Eg5<8x{_d$G5_*HqcU{!v1%(rzLM0_9S)(6~bw&s~q!70`F7a_zd!Xzu&~mp&V3
zPx05zN24ZyLEr*@k1c`{A3r_r&@wjJj#g4y)1Wg;a(X5i_~9x}YIAO@hWa0kG9Ebb
zBgD>8Qua3hP4Gsv|7f@t9?D^l)QO}e<KN4wk6re$=jtZB8TYz*iAc3Q-um+Preg<u
zj$r;~t5=7@+a_1tq@RE%2l(Z+2GqR+Y~KxJrp>^$BDS*){>6?5>WSk8bg6}*kGv?7
zF(-)Ew;SV4Wj^vU2nsni%4e+Uwe527mTkXT9Q*Jd=UHWjj^f#_U$vJ10(U-9HW?uj
z^+D2nwMfk;SMKYN?1GcpePCrGOj6lyTzkhmCAB_3cAo6zSV8&fb7sv01-_s_=sRP-
z=j^kJ`nqQ+-~6KWVK3BamzX~gN3`3SwK%0=-C;Bhv1lS2M({?mCvtO;i=r1S8QHZ0
zO}|e&-t5P2WwHb(=7PVK-7slSe;j@reypyuRVX%T(bKv#OkhpwrCc_aKfD*Lp)TeG
z!kzd7?m!f6vL)97IadSj)_)EO+*2Zef;CX)?1UJL6XPQlF)qjYNKVNM)D7U8wH&~^
zH}gw}wMSra$Z}dn{^<)9uLP&~wqXmJYRB<i{n7}K&#@0xxZUjhPNr8=C~$kxx7%+d
z%*TFcs_z?|#m=MmGcWiiy=uMfrEzgUQ#H$Mh8m#)GnX!dW(|EW>zp9WEh6j*<5oC%
z;rchwchn8xtx+h$)|c9{SI|7g#O8A2X}>e^_i23MkS)dN_2N91mNI*6(00@`mUukH
z)6}!`8Mu)h{82+CRyFcOS;8l)cnU+tpgs<QN$t@yOCG4M%(X4rA&IjR2^P=ufe}6h
zhAzQzi&P_8)bU=9uV@|<lDnnfvTA4{e9c2o7q=Z$sduc?k(5bd{j=I%wUoDa{69_@
z{k@T;B!1S5bcvbPQSj*=(?0%Ws2Y+hpJwzQ>8qjanz5ET9evVp^>#RE)bx+fp4B{!
z?>iZs@{L7M<ng`c9bnbb&&Kk?%1u~F%xXd#+mud{(JvJes|Gp2rDHRt1)&e$#8eba
z4fTIh-DlfY|Lo~gFT&w#L%nBmeOG+;_nCW`HUGk-)W5(29Gge2yA$C}0n`Edor@Fg
z1$G~OTqck9@oG4(mEYJv?XmAlM`0+}fp;YJ!njG}lk*R0c@uZrvneYdmSo(lU1IIU
zPB%Q55d<_AOfQco7M+B6yV79FqiMg|JD1@fS-I?(wWoZA(@OxWgvJC#QMX+bjFCLI
z8MI7qJLb5%N+aZd_&vAiQK%FtmWQBT6U;QYC?)wJ%@n*8$2QFR%Wz4N9{W3VIXX#a
z=k9IFK03H)9cP$utH5t(U42I0`IQAF#GNVN^_u~|tVD<$VXueH<q+X4bF-4pxjB0n
zjeVGh;F<|~<d>w-Wp*NC<CGw`Am$z^{Jda%<|{9WuG{SQ19mxKV(NBcUDyWFXcEOn
zDoWCNzyCjAz(;MB0_MMQhj{Q_jHJus)8#MFG?`Gu;<ImXEzl^dX5JdwZd{7FVXqRz
zraF+iPFQb8+~5%^CL4^*<eEE{O1rPy+NSzu9*#Zyr$8s0Wc_Fhx6z}CP(e0@3;y!s
zNeWb7W-@(!8Kae1IrxwTj)+HlBCUDr=xfkmF=oA=Ak4eZuj}H+A+PzTeH>S@%6sK6
zo$#^=?quWz{d}vNa(;7C!4*OV8@2P4Zw6PoJ@nP8BKZ3Zs)_I?j9C$EmJfFIg6Djy
z`G#KZ)@eV?HCvGSI<*~rImI=RMdntBrB26SSYLd%d~ufYm0d$|2<5Da>g<m(Q5x#s
z7(fec#sSZUx1Is^P)I<H0>*WM!;q$D(W>wH7_|`b_`*c>uD&;Q{cjp82RJShxK*^6
zZ)NsZAD<i_B|$QLs9!-zp5)!b-J_n)dYWpN|4N><mlK%H82EGu5AOQtaHEhPgN#A~
z&|t2R^*Iz7v8hyM+F_1E^N{jp@&=_>2`!&Au&d<lYkz8oiDkp1(B)J1(f(;Q3Gs!e
z{H6ra```J!>^Oh%vP+Y85(o>K2$A(Ny9G=;%VCgZipMhk!mh*{(T||krAqT*x;DTc
z*M)i<YlMHSmfg<YjNb(IPG&c2>6n6$qcrwGE>f4eNJ~E?TM-?fll!37vF6uHOY-wx
zd$DiY{@sFVD~#xXj$eahSx3Av7{(F#LOpdGp~}86pGM@@U%C}oL=%eY_}x%l4jlW`
z6@tqMCbUj|{cy6<qj;RSt<Ir7x9V|#znAR;?UUYLL*@DdK{Snh87M!9dWm>1>m=kB
z%oV~qH3qF}$C_nA8Il6T8?l##xIJBh)e4w)sE1&)MXDZ(?|1LnwMg>!2#O)-KQCmS
z<5SMtBoCNBr--g-EwhnCNO=a;iU@2<FE$Gt=3EtDyb8q|_eP9qdp(tDHxc92JBEWR
z`%1S~)@GlSfsZckakxNUxbsM{Fih|wKc<NMsyfpl^ElBOO0Cb?$j?i2+KMfx)4$^8
zT|)pPQ?EcV;(#>8QTl}ewVpDp7r${TgREOkFrrx>L~|65Q$stltm5)|7ji64vAzRU
zlHwb>`-2hRS)Zf+km~vFOkcGeE|%ZR6lKHn^Vf3ki!gJLo2YKD%DF#X>*#fb2M%He
zv&Jo*UNtE%1_Htaym;Iq<=E7|wXyj}2Ik8nbw=u5jgP&0_55SidY9Qug?BAiSkaL{
z5S4(tCuSARLPWTRH>2&5SE0{9JNu7@nbH&y9wuwjJloC9`#_Db4f%DekRM>A{<D|<
zO_4wCVq1M}X3<QpX=UHMovmW~;6gfi)MiwJNiq^5hs#kbX--Y!1MCywT-@J+W<w61
zIyZt`ctieT_0ZSK&Q#Va&-2dN8>v~Bf6DUi?6hdu^QHDXSExERemry4?XXQZxAG7o
z`>G$YiMbLD6m>{300hc}ZRPRfdR0tq)U*{Ib0UtrM=<&UzZv-}%R2|iWNGDm-nxBd
z(|#))gKj=~LiV_<)BTv-`L*_9Cp?XJsw=!H0A>P(N;l>;p|Z6{`vXv0x_D5Eu}6Z{
zYhl0QjVQz&iJ;)|kr10On$X-DU#D-Us4~R|ovG!(8I4M?OP$w4qjj@<;ujQBLbJfO
zJ1@k(*2ETuUzCRGimUU%uQZkKj%dGKQko`1h?kM-A>8spA%<=sn-HtxWlqhEPa*wB
zN8*)v-T63Gl`jUA(U7)Zcqo(q9*uL&yp$tx+5M;Fo#)*Mv#{}{0|VO+`W&lhxayn%
zWvK@Sjmn%``HzO1gTfs6^Lyx^BYtCfh0r;y*2z@h!OH*=nI1E1*v;6h41+oZ*D}8@
zoV+fwTNicv^Ub@-!#%-JD-pz*t=;QiPLnCQl5j6G`tb?fFfWTk9*mCs(A$2~CiI_Q
z`jYnPYyS;6$T1!gmN-|Tz%%-o0R47Q+$Sbms4JD^M6o->P=GD6cB_qEM_catiXm{j
ziJ|Ju_`x=IJ@P4)?o{S)nRYpH)$f9#Y(|!Ut59IHhVrP58l|tjl>G=eKX7l@js@}Z
zyO$NZj6V|kk5)Z<Qg0-zVzub#q*J4GMqk*>mpEf7u|eOYxV<ZzE2F%XJ{Yy*$i7RO
zfmCC5ojV_=t=y=pg&83^j*PLLj$moPO(+6S8e&4gs=naHhJnI9C02w>W$Xesz=-J@
z(+|O1UPkAEz7ooV#>U+6hQg%o^E=a_WujLA1~TyfU?2b;sMkD)`O!hhD+0Tr6AI^#
zsfN`UsEP#!-=T?M{#kgPtM3_w)bZ7;WW4K2&wJpYA0gC5nQdQ%nOmT7BA4Ue4J?*A
zwtT)AyUJ_pJE0fPH~wJ-lVW>D19OKbsv{uhjpu3<Om({t)Y|29V@UbL3Aoocm7!vn
zn07o4Z74w9o8^p8`<&O5g^pYH|IlO0(?R(i=`_}{;Tr1$RnHvi{8rYo0#{V!4ZPiz
zpYTdcDtsBI)+<safJWsHVO3qTFpa$$N=F-Oi91~U^#CpOXjwTQl4i8p@#_Zy(evU)
zr)I&KhJsnYrB+DEDX1C4xm698+bVKaVdok~8`ALBjr%{fX#8F4JyESQ46p2rDho!}
z!YVSKIMM+znBg+!!RlT$4gyb<WH?b$qkZBzHZH%bjgazG4(|Sx$*NQ_)0j3E`Td|z
zhe?_|zla>>ceMXzdMK3|94r5DrdmT4gF+dj{j<6`I;y!mA&cBLABU|56lnXD8q*s=
z-W0-J0r#3`g5rly_DU`Kw`cOXmLH`KxDx}_ov3u{z!r56^5Sk}usr|t7q4oH8lP$?
zKejZ>%;reE2DAAvV<X)F-2`vvS7<&^U783Rd?ZUL&Y`lfVScXZ5FlN22MKF+D8mqP
z!o|$>=!>D)uNDBs84s&ZXpEKUkgi4==CZ@{e;bl4HW4mybl`%ae{6P{SDK2myOV^g
zKxoC%MdgzR`d`Z!abm(My1mRN!M0q#rk)w*8)9xTz_p=~j}ArrR>o-#WX6i6<})!&
zo5G4~UbB0#*Mx{4aLVeM38Rw|;oNZvd8AuRZuP{jQ9ozu2cwOVF*1rRP6yoSWhaD5
z&Zdv*;`4d|W2Fg(5BEq*lxt4s#4g^QKex*+^--qVRoj6KrPk8FB;ipocZ{Cj*Sm}3
z1zOnpUb;KjV^*PY?tS!?NJBv1Le9DHuYVeh7;`xF6n%c5Sn~3u&{kd>T_V_Z%RY~~
zG3r8S25ygElcrL|Z1!b}I6@u5S>7lNL6&6iMcC$U6Oz(db(OIrl()(DH|~z{Q2Ztt
zxea5`B?HWlWyjV7QlJS}mXIy>THCKST$TPHR8Z|W-oT6&3>7fX7mgGZls>qJ?MX{i
znu(zm>&a^W)8A7}mBt4?>I|i9SKTS+Gvj^aLz(4k?FLI5-zzB<F)wW<aT^_|foF!l
zy8qWu?d!jGfK4$&C<OIuJi8iN#N$A)ddkoP6V7V5;J_(oLiocebNqlUa~&#_>^v53
zlE9NB?>ZadS#A`fHjMeErlD((>$gKSuX#rLVa8oQ)RhN?X{t6dTm9J}3|Y1m))Lhw
z!g#Dw)$vaGNDG~T1tx?g;6aDgyYhglYL4Md--B2sDYcQwCf;fQgM6BQrnSdlP*09W
zK6<f@i<fb@pM!ks!K)cZpTzR{NNQ4jZVp68&HBw5Enm75c+s-huIqIx@Y-3nn#%x9
zthk|i#(`>l#f++6ZJ_Q~J0O>;CRi)bOT%rTxldq;8&VI_-6>+;<|&^5)4|BDPjvT_
zD1`3^7o1}HAB{{63lcKJA9Jv$)4luYV%Ub|V=$Hh19~XJr?S-}1T-AKk@+4nBgGfh
zYvUAw(}cPusZg;`Jv5F*;(?Ol>>?xiAvYLiNPBUNUS6>;4SXf|ENwcjr)=@E^bRF(
zaIw^?**p48QBcT|Q5HpAaK6xQTsSIlkNH^>anWD^5YW7qDJsP3@_>?A!%F4a(0@Q2
zQk9{IP~y`<2^2>qZ$~il6T_*T-P>iDL^}ClxSv~c>5QXgX8GkTcDytqd(@PzAJVSl
z;zn^Zz5Axh)ASx@Hg{I72cY4#Gw$IRx3l?}(G72;Tkc9Jg=i@9c*r#MPTCE9uL$1e
zbAE!)gLF2hm)7w2-}p)Y(DxP^OeZ07=pPMq*JKM1RC4k~6+lg)Fpbo9rkqEF@;Mox
zLtt!B%httJ!-mixX4F}+xS!D!`+MgW%Js)-L{HhJI~RodxCpPq%l;SnOPAdK>^@#w
z-RSeQ@(5<i2cBLWe5NSdyWYP1A}s9dyqdQa<)rD%_fuJi^F^5WEKBy|uwK7TuzV!X
z9#IAj6~N4%YGfK-de{bg;&#g#^J&}Bp(N5FO{D^Ep()7iu-b&vEP<>19h$E=K(~@D
z4#z<q!c4Lk8vAoM<Ul0H{1wiLLRyD}nM~n)S?`l#$6N_Er-pxH4Qo6@Bl#sS$$p-B
zC!h4~I)02jcLmE;!|I9yXdp)(uu*0vyo$%D2gkR_N^4V#yu@CB?5~D?jExB!-*R)v
zyYH+WPyZ#|U$$MIT5xJS=|}EB$%5{WZ~8_GvdkRc9yoYXOF0=icC@DJqVLeSVO?zC
ziGfJ>I-lJ;bsq(IUFs=`|GvKU%#O{EGjwj}Z`-lzga*@_iR^`)58(CJu*^HaSa6s6
zg|M2+C#U+2r%TFj)U(>zYk(oKD_abKbI%{4>CNV!AoexloS3~bLW<JBh#g)yN_XtH
z^LOy67_9jmcV@7>q%30gKvmtdry43>RXIEbK*Na=pSecatQbf;*9q0!Dw#DbKH(<1
zBhm$_G;8U2B<lK>><+)}!gy+=S1`FpZH0E9s7-b2j|}hf(+MZ)jdKg4f>&krz3hNa
z=pJ@*@;{?EU?=`B#p_B9<{<*&PDa0uk<2R%Mm>6X!NQvm@Fy#ld&l|IIi5Oysu~26
z`qRhVxA_d^YURG05%5nUqTfb^2gEi3kXcWAJJGwS`wjKb4((+KMgt*L_e;L~74q<|
zgf%iT!MmpPy%-xR&lavE&m5sKCD_Emlou`YNBb9rt7iH}!+N?N<Qx(V$<^&H?)z`g
zcKJiTP|BV?8nK+!TlDv>_-XwgTNbt~tvK>Y&x+&SE31hvfAx}@KONiF|HrKZCX<^k
zZ+^Vvxz^6T&pV<uA}+YwhVDGJt>R$b#BF<@wBCdhw+1RJZ~YOpZT%lo=myQ;EZn9R
zVyhE7c%y}q$+_YQmmuXH#7Q11yAfc9kolBV^2pxB(nJ23?_f@bmxcNq7^ZtXBFz-5
za?fp5*k3JtTGcO338kLfb%pRd1c?7HK#7nKl9YM1juk>sukkNp^yZqX?t%B+L7Dqi
z_1Apl9}V9M@LL%5(mEwGPn6&i*~qUWf@#<cp@(zce){5rS$q6$-qY+8sjZ(!7LJ8_
zKLNKu!-ez_4W`?;{l6D~ZU$aoW;4kb#_?*%Ny<pd{h1A@`+gbm8l-2C`O$Sr#{{kg
zCug}^`x!Q9_L1J|qPNNi+<~1OmlA&xY5uk@{>|P;P1x%MWFHRQRo;X{EvbAS3tra{
zVFGqzWVa54)cwN1ftHG}#^$5d_mBOp#?j_+Vv1)=mN0>SRDxS6=qN}dxYiEtv{TqH
zBqIOV$1Rg?Uv;gV+l#H`!Q20q`SOcNu~n-l;W`;Qf>7Z`y61rN=f%^x>v{l*Aty4{
zBC&7liUf`E4YbtOWrsG5NmzYA=9xNN?1g1!LZoNIom$1lul6r}GNXZcU-MtKAmJGn
z-Of^O9#NPw{v<ycZkit{mdBw)#okfcdr?L_;p&zFwGl0*No|XCBy+wAirg;0C9!Id
zS;4q{#?P%ZB2uT=#dW{BYk*Sf*J9le`{Qd|TFpJ}4A{4VnWBmL5u$ub70>-l4M1xZ
zvxSw`J4@bVSFTZ*O81dnbVrzR5yI6V1BICyaW(x&-Lsw&C2oRjehOus9ExPG3SHio
zky)DOJ1q!$Ex*5Oe%JlF%AYY4{~<aqoI-&Qr5&wqHfHK^ObKn>KzLn>$6MOR{g7*q
zEL{a^|9pF{UO#=`y8Wh8U;v#K3_|co3i;rz3B`fmmstrBsjVresV)__jk1nl_+)e!
zOuKzV4v;B)P?e?BR(!3*p*as|WD&2`8|9Tltm+sqk-n!SEO%SV(4<=>lAA8>)<F~7
zGx87myS&JYl9-k<tPAU(-fY)3w5YlLZc1y3-GW7;%9RF{OD$Zp23bc7M!?@IyYnLT
zVV9)T09cb~u*6HtL$)I0mVJ5Q6n6_3<%vhff<0@vd-$h|#-<!yx?WdyI14Dh-$b@(
zi>#DJ4r-kWm`hHm3YkAJQ<+tDEmU&>pb}U#E>d;@i;}$Vqa=ScPEvZjowwHcM3ne0
zbP_Xa+p3-j>m7{s)0cjk4KJB-Sh^6t)MuX_mPM%_zrx(-hf|tO!iGHZtal+hCr0cb
zjd>8BX+pWN{Nhfbl7RY_o(#<@sja~07rva`pghz2daz`!Ob{MJIplBQd3*WOzUhTo
z%R8kK4RthZzeQNYzdN2;Gc1MdlGW;do)$xoHjYUUKH;S)U1U0*mFS(=k2Mn1+>7u6
zipXZOf)nGJ;@NJaP{#Ux3cK09-ZB#$CU}w2=gMlFvcqllPxfdp?4!VAj{+Up-?eoy
zyaYn6O=Ewv!K+a|(k(tQ@Z~AnurmqP8R*2>;q`5w{p2AS*ZShoFZ}hC6iwxvdIZYF
z`2?&9LG*-OS*P4+Ee>vGZhEEMp}Ir=>ON}Wg|O4?ye#+(N0~a+rJFVHeDv|F<_BGp
z9D|nSoGQA<U}=Q)iowXy@cjEHPYK8Uz!YN~*s(THJ2VhPzcClQcxTy4JKkEt2L<c(
zha=iDIEz-opKEETlX`88BJ32S2MoBhB^V8*GYpb(I!Y{ZpfL5^*`H+8BwMV`tolpY
z4jD1oR<$d947Yb+(Z#*JKE8g+?^1ag>E+9lzI$eteD<7Lp`pBS4>JG`Uu@};_~Yze
z+99F}JUi5Dhv|``9boDW<7C@@y3NHP;}l!)8+&1G9W%ckz0`j!W7un`#^10+T%Wj~
zH?R;+@g~?0%$i)Rj#{m$f|<mB3gCY<K32fpPywrf_xZ8E%4Uq%vymg%QTD_?8q)I*
z(Ot|$0ii7|ye0V_dg%QzFY=Lox|0Z#n5&PT7SE=6%XipFUsRNY<gR@(w3tddal4y1
zXlL4p|8qt@G-Nt@1#^9e){=vIwH@50@6eC+Z?&obZ$Vp{@PTAh&~LDfxF!x)BS!%Z
z3VlFE`7Og)ZpFsQ5nir`5qaZd8uQSwG}6qi&&J|d0(1RT-?V(#{rkF@$r{JV9___=
zKp>#1_4@QI?qNUPi1E^A`B(3#-Jx;^vL4<rbf_-#xlT<%!HaurQ|fs8xa9oiJptR(
zW=Gwmy9K8zSD(^SE-^z{H~Q7RylSQt0-?r2j-Y<C6CGfHE8J8@-$SJ@|8BmSElIq&
zIB(jOx39>98fuxRcgymrfF9N72T`J=WWl)6FYWitw*&I<-w^Nro_H8JQ*{?y*+xdi
zkRpbV#5_Lp8mJ(xMLh6oMbZ*d@4rOd-GBSGa!OuTH$1$wG?W?ru%;~BFK6&=jRd!T
zHmV*v8-M1Jff^O_*g#~C+p=7w^#R_(I1VqEcg+zu_gt|{d9H_ROmpA^6eT5u?BE)J
zl<2%zY9ib>L}i%K62(g_C5b6^IbD4|h*CD4q27jY?-oxnN4*8{9SOV2?B0uu(<}*w
zXc45H&0@v#bNw*-{Ty+)&NWfu!IxUd$FD|ki3@;QkoHv}87y0qfaH9^fuKN&ym-{J
zSTWuDmG#(+W7^o8f=6S{!-BN2!MP=4Jxyf*vso-$fnQIvAC+68#bPXsF_1cNSPr0{
zMsUf_UXYM2bOV#b&&4F_C$o&reRd}!Ue{G}SqBD`#PV0u!wyE}F=y?<|FC#w)OXod
zQ@OWCdx-o5Y-?93{Z;kMALoIDxIW?_-3#cAOlc6{0?smF!rNWcl6x}kIC{7&u6f*4
zhEH~RlNlLUByfE^m6fx2J<~B#nzOLx=b-BPx~C^!AHm4&`a#=>?K``(x)CQP@+l7A
z^;2w0Y^6>_#35nl+|He6#hx*q*49q3UpU2(JV~^PYXZUQiG<ZhEs_llPwXY!EJv-`
z;CyBqE<_-pe8W87v9Ou?Nw>IMu(rEpiD~NWpm#@(!_d8+B2lT%`wBvE5~*IhC&l{2
z`VfIRD{tm#XXxwjWuxriJoKua%@-S?^_YuO8xmXQmo3LN;h{PKYpe7g<~@*&<4W<X
zm6jh3^;g;=jU6p4O_bTBC7GXVK;BEbTb+pO1l;TbG*MzR4<Qn2tpVo~D%M8ch@W@f
zV_JBVxnZ2Q*M?57>cJW(Q{MU+`#Su#p+zbAn1(t8UR$zSmy3EJ!xL6YL$(N;sQ#R`
z$5l2SCmz$5kXv=FzLlAk%M;S66WA3r-0@-O?PXns2PH4mll<ku#@h0SZI4_dLsu1s
z2Gh4V*w^+oX{z&?$YX{vv)3NMsMo6j{d`T)V44D8RyY@`u<3w}|D<{pi%D$8Xc4Y3
z)+yIN0kQI@s8OsViM@*EI-z|-xkh0fwk*5>5WuNZo_QX&ejV-Pr0C(q>X=a-9)?En
z8?u!Kwm7;a7STv8QGTnn<@-R&Qz(v78BhUz6`P6Y)!qOcZ)G+IsSW7%D180Oy{al0
zcYKDNO9oNgZ~}LyE!PwwCs5K76P>>SN4-7bd0+rvx>`_NQ<i%FVMWQzhETs%zh%^0
z#szLOv5!Ap7&2sUZ*&iP7c@;UtGS2$gsTTmri+RIFeZyfCR%dsA&ip=?#v6k1c5Lm
z;%Q{R=qY1c7*C(V36HuLD##SrW}8t-{YvWx(-_IubC{%^)t^UpX?qRKRZ}<8ayxt=
z2ehX9s&J*V*Zmna)WXd`Hs@|Z<{?E?Wf0I4*`2617_9cE9vGx-e==yBM)u_OzTFvV
zgF9A{8{?$Vd1+P6sm>+EBt1y*af4f7!V=6kjT@n-6(<?}LS1Lw0^l5=R^mx1MpoQ3
zj_GBLJ_;kh1mG{TmAzrg9NPz=X=F^J>j|E^yDviFNvxfTTB?s9zBBo8KEX-<TDu#5
zKA<SgY%pzM=z!jkASKK4Tbb+Vn<Ru3CQ@fhNH9{{%k&b1%VzzeuGl!6=Fv(}l3V79
zly_#B?*^O?JgO}%dw5ItSFS~UKL;;R*59TD@{<d$FnvEx8iUG5Iwy!Nm}Kl)psX37
zR7tlcZMIqP=Bk9UYPLlXlqs0oH5ars-0ZkV-IF2UEfb#}w6oD^jn>P5NK52r4HhIc
z+zX37S5-JdCS75E$wWe;n#ge`-5@k^rH2dw`-k9<7L=+71Gb{4nG;@7Zs6s6QG{JZ
zw?My=z%d)}*GzI0<zeVh?p8n)QWi;h4@o24#jk{doHLaDE~c(twpz>DaF!;hyMSP)
zwqUdfYj_FtU?fKTrsh7VeO#12vK8Lt;@B_#4EK*}F<&>R^cBaRY57OPtG03=LUnwf
z%rdng+%ZU%HU_B-sx(gTpKE)xC#Xu3as@%Tfu&yaJEXz=g!+n7g-L7!ysgr;PS$;+
z#{ZKJ-(jU|kSO(KHFfoLro(cHPvz*exmiX10HLxv#vr^v0D6z1BD3EH?HU8*3t9_H
z>a{Y(SD+)@z!cpj*KOzB;Oe2;-{V)QGSy$xPa%<io10hmE|S*)osWogx0yR5#wiP4
z;jS#N!3C-70U5|%cFINr3UZ%4z!!>H`hGLHpAOqKS{%_p)782;s^7UQV3G!@saFUa
zq`;}$O2sNeWtjHzjY^{IQc<2@HhMnQj<rS^iQYx}`Cd`Xl81RVxjA_#uDM<>{o$0K
zZ$*zZn00*U$No%z873*x=7<(l3*bsz#cL`zgiIo^pok@rV7%y*MizI(?F7a%#-|o}
zlk+fae4~sTS2kVi7n}r%M2D{Zx%}s{i<8gbLh)6zj*&%OtT((U`%Oz7j&f>#*HRWd
z`d@wO|J6^}E~HU?5!GCDMqF`N^sap4<zkhkdiF4fwa)bKXH~a9AAWO!dT05Ov-r{#
zMgjfflNU3azh?$}4=}~6RFw>CG(q>!c;8?N7Z>IYgWEY<Ma-w1Y+AJ^F4cSd%etPU
zTXjr#u?%n5-=}&D)?SH)AGH1>$LJ^K)Ej4*N+p<zi2rCfJ=Q>p@_6|8$ME02C4@PZ
zZ*XWQ3MMDc)ZM4m3v|4gP4$?xNahN<?SKvCZ;$&4#DsC(r#&3~N0v9g$v$_z;Ptnc
zUY$5}g^~KvxL!0t9JP`g)b?>V(>)q_sz-QD!KrV50Y5Zs61B|vyh!C}v)g5tpaZ1a
zJd>LRf%((2(a?7S8qr(9Ow7C4N1}XTv)0S)?cx=D6kOHcjF-GBAL(nwnNVSM_gpU~
z`K&F`6awEbQzuHXZ66~8tcyd<o%<{Xq>-k&M;D~-N8|j5q$PSe)S_9VCF4sQN{oIv
z85V`K_-(<o3;vB65a7q6w&|kb7GCl{8g=CM@(s#w5p04oyhOQEm0M1CMV2R9>*>+e
zc*9|sx0ukVEzxCF4`2F!$ohG37u}&aENeHJ80ykhaI+xR@b_P0%S3-_suLZAtJL~4
zmwd9$6(Gf8ZeC%SQJs;4+<06YX&bw<c;^*y<zUY1lI8DzIVE`2yzQ4)q`z1jd!0JA
z?%rdg!MsV9E+UF%;Tq;S-so|$55G|lvkrQwV1*x}mxtl#h#P$8A%en1G{1^|S_Uy0
zd-6t4%@{jmF6oClT4o2HUbi$H<#W5^T;-`(-Fuu%G~fAaFwbF;U^x1&Gwj*&aj>(5
zGRY7m0!kCu^9{x14YbrlbwlSMwTiXrfXu>2b{G=!9@(^|{W5HaSwp)Ju6Rm0pe!mN
zjm8#G{6bD?DZZC2&5a^j64o`k4>H*yT*Wm-Gn)gx?y)25poRMyk(;Sz+~T}h?+Y(y
zjM7{R?lejtK=6e6fHbYERCPmQ-C$ZA{`B<Iy_mnDF4_cAZ0#AL1~Z&`qkgzWxGEer
zA*T4Asn~{>Mn7<WlosdL&)6Iipo1i)oK<eW-&Inoj5g1Vl9)x$dk-hD3~#7+G*lw*
zX&JG;Q0hhWULh3W1UPvBm`;90*G3zVPKi%5F@gI9;(mjHrR5(QUhwQ*Gi@|Z*FN<0
zX>CKrK*TJ`hV<>wLbf8ti_BMB^vo|vnfz$!&7ATOlici*=^=+62$bU?A>~b=+OM0l
zkxfqMRUqBX0%5CApD{3QiAFxAb&`5*>~el2L){_{Zoz^b1OL*yu=9`~IbCZqd6RRz
z=(%~0E|?Jb-R2f<pXy&|tJF}zFzi|e;{{d|{~5EHz&o3RX~$}-&1X$0iF0GJ#5Msv
zxMkV@&WjugQ;UZ2mnB}09CJF-Pbpc{B^>Xed)^O?u8AMZ8Q4(JcHcVl>g(htLPzC)
zNjm>%_%lDI8FoU|4eY;bL2AA|uq0eWx;s&!+#fZQ1-Bbtq+ROp8FcoP8B6N;;LrHJ
zBlnA;nzS$*ckcl^T}U^0t(0x=niYfy{HD34Jrpn?3=!Dh`a$!<c_^-Y=$fdd5b<)t
zrF=!-g?O=Ai3vheHFgBGXm>mu7nC0^SebZpdqW?GTresOJ?iUm{sAN@5&QLuz&W(o
z>lvrdmf}&$tOgC>+a4|D=oDmn%O9Z*ik*xXgcWK-Ispy|o`}t7twFV#@IWVW5K~r-
zwk%UVRQB(*u{d#i>BOLTAhI#)B=@(@N8z~^!;3b@Tk%_m&Xw16F~1+E$=NSohTaBb
z7IBq?VDi<B+%+)%v<l_v&`s~t_YN`egcjZ4wp{bREy&x75~basZECr`r`YVr$!|@V
z^0MrpQdj$eyqtaK&T+npd>q~_R;2AwZ*ZZ7?Zpo9uJMAISAZh(nV6-4T8Sq4Kr<mU
zXX)J$v(|;!o9p%*$i0;pa_LB@Ab@@DOhrbNC&>vU#^)?EBtJeRB?sLdd!>b5gKKN$
zuAy&3jBgN56O#c?zbvM%MrS3KX^<#<yu*A8@+Nat8X<WBmv~%h#6?a#ED!&|W<gQJ
zArM%cleJl?0BwbOgg@3XEq*>%t=bI`1N!711|$ih9I~F$P!=U$RzV^M{UD+$Oo0^T
z1HglV#oEsObin+L6Gk5;K}n``craUU^WL|c5@BQKVm~8!@%O&->(bV}DBk+EOM_Xl
zvb+Uzz1Dk3eu=5WHS_Zo>@zGaC@8;1w_90LQ@y_A2x+w0D5Ju4#aCN9HXeQ4u{rEf
zis9ZPnD<bm#8okLl{V-JD2{c}(<O9!==|vGV`W5n2m)_AgKqaj)`{|Dj&Gn$OJWtb
zWq3Y9LB<hNkK;EX+^YqzPWcK*c5~4`8H}4|SK08vCE;JLO8*l5!=S3Uh_DjBk$wi&
zc^2*Q1SBRY2@~_^_q<ABD=|fgDW!XbM1rbTs4vA^DvgottQ4PvS*`^$(J*vmV`+~^
zJ^jygAFb(I)ZIVYY7*O6mlP3eaH7A7(C7aD>6Iqp)T<SWZHz8QjM7*L%wtfqi+ES_
zkok}9%WICJ7UJoJ^13O)I^qrIpu&*lCFNE}`@HQ#*##d2=0!zQM&>8#lm{1d-4y$K
z64(#?Px*eWEw_541pAoc=_SG8QY2qoR#Xs{5#`7zcsPS!i8Mm+=E;B-`EZ8AkdNc{
z8B3R<F1>rcva6=`f~)gx=VSR6yPs&IuNmV)m}r6p(WI&xZ$SU1*8&;l3*nTnVM&dV
z`KH{>3G+vIiF~y#LTm@On(&t8Z9amU@w~_59R(p-L21{cqVK5Q=KcK3n(|$5&jon=
zuJ!kf#{Z22*Dkq$zhuF6lpcH8UFI09T(H%!J+`H@eP+*%$~&7Dp3h%hj@_Yg^6&G%
zroGa-cEWSr@_C_5`Rtx%{;e<l%``<u$DS<*E7iYh{Hd|ylLIN<rWxOS8vS?!0R~LN
z>J*J3_wT4~`=if&{J+XSEJE$CU~~(SsNuP~Jf#78`kwLvIN%dbD*XV{kE^C)(AW5l
zI6i1MoH#=f)<J!TE5x4j#>%}Q3ZX1?MGw6gC7GC)KO{zq?=G(4IH-7%rwb2chpRQw
zk4yytEEa_B2!B5SJi-R?6a_c4P2ki$kIZ&#p!>=klGQuC^4caS;T`%Rxm%Eo<a;50
zR@a^PNpy9*kcZiMw73%kAiX>?xM)UhHL1-n6!?XXe_DmKb#>p^OE}Ni3=31tto%u>
zg<R(u5zb%)ZhT1~jS0Ka^|!;~u0+09a8sz{PEA^5CUO%jsFRn?c@Bw_jlRMC7DKjw
z*qM@i1FP#Z-kmi62++KPOMMR?8R86W`%1q-h6Wlef(D*!LjMM$3=a*rJC24i4YCi!
zb@)NZFa46hC8H>;-X|W`<oYQi{HDGLwob@=;j0|)$?pdu&0LQge;Fzt^1i>I^<h%~
zuf1D8Uv07F`j4w!R=YHB)SP8kEw$@L$s^DYh&!NniMBa={A9Q$UaC-+@zs=xIS02Y
zwRo1fjuU(z9rfs2yn6b4C{uOk5jiA7UZ41~OnOfJ+?IFdX#(Z;4(%l|ke-^wgeR{A
zk=N_%=Gqjee8Vb7{GJz$gw_YQ==vP49xz`mkPq>{e})$2znby(Ua~w{N_}ga_C?Ge
zMo!5QqsDhif&LfGq_R+)E?WviCFrv=c<0Km6SSzdyiXV%GTM)$O<Zj>^YH=j1d<qX
zqH}~voS*3a7saXb>qEv3vfjQY4cZdd*|P}A$6AKk`K^BU!;T4Gp=X-3mH|FU;sb?z
z*#SGM1;8SC72$&n9JvhPi?ZR?|2o2KK2A7$Np+9ogvddK573x4eK*ts?1U_%n)8O;
zH>h+V>guB%?by+A$J_1yXdLMcl-ZX`s94%<@{<q)`#WIEoi_zckRdxA9dH{6yN6Bx
zRdabed|k1s-U7bmB4d=jh8gDN+6>0Yh%o*|qnK?%`>}oc?BXbE6;0^=3>i+wDQ#@~
zM_&?BBGT~7UdLT41`84o4N@rvhj^SmF_%InYN(;RmV8NmiBqRl$=hI+M2Wip(ZKs@
zs3X;@na$DL(2MZ93jXyb;33ecIR;shU+XayV{WL8L!yh)+qs)jLg5ryhl3MS$SupI
zi;HE+Od0OG8q`ii2`ASM(pfs_?Kf1zDZh*8A)CO1GVO#W!hIHc!&nZ#E&r^lf{Emy
zb`W~^E2t-4K=9rCXq>!Yh)L-d^iPyakCxH^lr_(j6?YipKW8=jxfMi~`JutzCA4(7
z_1c~pf@t+K!??L>FKc4ziJ?r--qJ<NQL3G(mw{{bv$#W*8Xp4xV5@1JtmQWYnhJPE
zE3DxTa%h3-H7>GD$=eDUP8`rEa}Zl~5LctjZ)M@A(L6Cuf{V8kYQCbyfrPkJ+-bu+
z+Na!8KJD-xW%=}SJnutnYa;CyIdpt$-{P3s>>1LL(nKiKWvVd-sw7IaP1r<>5RO*q
zi4t0_uGO(@ewG^-G|CQnVfAy~7xA|q&IWAl=YEEkAL+5pmhPiSYiz<gTGZP(eI>86
zmPhvvSzfiBy@C;8CNQmC;S<C*UJChBrAJV~G<PdnB{PL}V_+wB`u65qGb6sAY%;lq
zuyH2C?^~axsHNV}OLc-0Bvdvo3>YhTaNeeE?62lGKV!bRhnaR&uZBWz<)0|DPb;1v
zh44Ao$)@;q=!66Z)|%s=_2Vt3%(tUQ@ri_+wm8$1q4iM-)M}T&y|Q!9#A7<gk+SkU
z5=khSkw?GHDW=8v^aWLAd&q3q$$jseMc6uMhnOOSFmjC?Z%(K~%@kiUdVF}sIOjb@
zC+P&1q^poWW+1NNCF8^j!;FFn>+aR`Lo!VAWUnpDWsy{h{q{*6PlkD!zBd(wWb#`w
z%U?9n*Ko00;jt|!0d~CRuLLHA!dZC%#mNjh)H+ZHd$Mkf>&pl&2N3CG%1-*xa++r|
zWdGU6N&F#satFe_V|gWltw9Sv(i5q>8x1qcx{>v|HZS}UDd45o0}aLl2IRF|@|o+9
z9hV27vq+UFac)GWCM2^B)Fx=YxI1wkztdNV@1<)O9GEDzr|QgtuSJv?n>21Y{3hKU
z>`I8o`l?55zT8z@;`cJNE^7HiPFH*WIZXtkTyLS)Gee!=H@sHesVN_cnpkS;P60#N
z2po3S+!l?Rz{I(>2<}K13)6hxD!ua2VRu<!iqdKo`(l1r#{XgLy`!2;yT4x;6hulC
z1QdkW8AXVNGEx#05s|@IL4yz-L<kWx4lO`PkSZWBioys30jWxf2q98Tgis!35FtP$
z2q}z8l{*UY9#Woj`TU;uyze<{owd$Cz*?-8+~q3!+WWgdU!TSh$L2Izb#LvvP`<rm
z>fN$S<X9K4t_0*Sw2mV*(JTjea@<m8sW7SmVWV*Vlaz51WQls|scai~e<VXeXo8MC
z5D9ewkS;iliCF`G3Seb+AlJ2f)P+v&W<qajsyoC^+S_?eg<(;%1D8f^nC2J{I@b}_
zdIKyS5%3{UHkdb(8<8=fjk84cgThA|tk{EDM;=jaCijZk(T2mcW{Q<mqldi%&V7O-
z3$apGRy#_DS{I_SmR@TkRn3}i$ej`7r|lXFyJ6e!bY^hT&YGezL=!z0Lg5^MV!~6q
z=q8+N$OL5Lr=B82H_db*LZ~^X+6nh*B}S0+$;1w8ax1&#$+VPg)f=#Pm`OK!b+dxd
z>XTbJ$*mylb9;=R%a6_Kn}$M60eT((|D~$<KQ$J}Mm%&B1@Cc4qlq2}nI;+RJ>+lV
z<~Au%XLc>7w&rtl%*M#}L?h|PG+o?-w2TOAVrO2#o2s&D(^}5Bz&g9IW~P;0Raqr-
zQBIZyQ&G0l*X;nYd+HR3K00Yv{-{M&fJOEiMlk#JZ1&JcZ%5F*!bZ&GnfQJ$5;0{J
zB&nazbKZjG^Yz`~@tO}FdlPh=rG#$`)A8q8kh%N_<q8l!g$(2fH)BE&>j<VdfI1<Y
zvk|?E63CA**PVD(HZ2(F5}FdJ_9M1MTNxG4+3^QYz8L+~^pyDOQ!DZKFAfJ@?T@~U
z*tYL4^<BHwG<Mv-tY+@%k^n*{En0^r2>%<|ATyhIiU`CPm^;X|&R3)+VtTI?Vs+?m
zp%^{9dv0%l1;ED6I3Ess^s<1IVYjG1ZK5(8Y2uj7(FMOXSA{*ffPY8863jm^`~SYF
zMmr*0M-xerWBN!9xEY&5YXoS!YRU;bVwMgijwuc^fe$O$g0!K~)7KrWKddv*r>_3+
zfM!S$-LokYJ0HJi?sVSZ&P3j;f^*LSqis>O1{4ZcPkgrrTJ;j5^<t8do7p;KzQlw(
zkb$<#kqFZiUQl+J0m*ba;83pDVEg{s5YsoerU0gSWmlEh`mEbflU(WG`-~r<4CDeK
zdUQ}^1zb7My)OXXry-+F4JgdN%J+rhHQ74}c(AjBIBe}#$!LSv+Rq)@rntz0V@fDL
zHSr^F>p#@5lgJm>fYw1&dhk%h@%oRWJAe_2z0QDvSD;DSS%2u+EJG5%MdOQ^YRzeI
z-CtlYaNX_jda0l6d*4nlc!P?a5_$#;vyoyZ$w}rwS^jXwc$dXih>_xKE{WIb65#JR
zpBBdhxwZ@DCEJ_>mMt6UVqkmAXdP3>Q=HcmcM37IIDS^8->v+EdO-CWZvmPGbV2IV
znJcxF00@Jz!e+=0k-3h79#kO8-cei!Kez9eSd-2G`M|n%FUBPxv9th1m<1DHVRg?;
zc}>TRI5%fy^1Mh5lU$J{bXqSok9vGPxbi0NC(PfbYNor_1x-b6>bbb)dlcXM&&v|^
zz`I`?%%%L$yk5RJW}vi0{n1^`0Eg3m2Hme7sKinbyct(rAP>PjUxY3B3iB&+N09Vw
z=moPKt$IsuWcAd5a0;o;2KjGMKf4VIMQDT;>q{My(3{}6pP{r{%QKIptS*H99L_iW
zv*KX+jFkKYfG&or_+g8{h~gs`J8~J4WvEM83gao2{$}_fc-&i*c@c;)8t`%33S{$w
zYjsi`PbsGhYeM-2ZNyuw4O47nN2dT{?hJaZ6rZuM_-QoK{K!gt+&Ms#hL<v}ca8R8
zd3G_&Gm!}W1e#^vhFXoiza1z}IraO^-c@mb(^jh0YqS5*zmxn$WA~*TP!gjL0q~m>
z2(uLyW^(JC6xHgSDLQBmTj`Z3IjKu?_}e!rmd$W9IMNn&$?ocext)T7_;=7drUNXK
z4v!QYjqF{@`t8lsskg?^^x3(99iUe-?VOsz8%#?8?;wBgbzgmusVr(oKxU$WJI<>`
z$i#pH`I0wP48^5FcdQAV)cf(!QWnPb>02<O^rGE)3S`Cf%gM>md{gBlQ=*6Um2WnU
zPOWpcCs8h_%j-lm*cm0mJcmdr*WetmN%IP5UD^~(IVbCSJ0cL`_(5T;481$Z@w;SS
zA3obM#B{V&ygW=DROW`)gtXo$+nMwGjfFGuOX`XbpskrBYAF7mhJH#G%BW2EG*s0s
z)MIa=sJ~Uvb`?fTH!a;(#7Xc*lrx|Pso2pUUqvQe0wT?&MFhbZgJ?gbpPaW+G+GuJ
z8C^FKYT&M$XCGC91dG%HrxDwu43vc^OI4b{p#(V?Av7S;HPF@+G~8HDj=N9*@CSUm
z@1;VX^JzkPsDts(tSDLR9l<ZSOW5la_?HLecMevApcY=hh`_1v-JylBV!4c{thZjo
zO&Yhenub*R0fLT*!N<>21z$)RvI7(2-Mb@FKl+&+vdr@FWwL_zm1unl1}~uj++tA(
z5;~6%47kI<jxY_^%cZ3u5p0ub{91}uCHy3AcY9dPjE^J#wzJ>kxni5N<HL6TI@n=L
zsY#|?oRc2r*f6S2G<dyf#s(G4F8=U~nj)@5O&2<3nV=P`mj9n%_1|h#LBjSeiHBFM
z`}OcFqIBk8E7Wsp;1JLU7Ls4UHQb*8^$jn~I8tS*)kQ~;&^r_uX$}`*2z+jHOQ*xR
zq$xAx8ghOYT3?#LZ`c3!Z6zwxA>Ec?2&@cmT(_Iy|2z`0JMzVkmu4KkH9G=Yo-zh#
zG_G)-S}M(Q7H)yBKqVo8?TE%d67V+_oXg19Y1cUL?%sv-@?RB~Ve_~eGD7wp)mK7Z
z?7-_Xe~JXFnTtW_V+kH?DxKRMGEfSqGWh8@ex{Y00xIO04E^|LZ&to_72w}p<CQ=?
z<?70{p>&9hoj;^sSlwR+FqX_0GKNvs`-1b?k1G{hhiu3D-L3y7n)!S9FhPOLpOEKZ
zvhBwk%VuF_KE<ym{%%S8nR9O^^S%bGrz~ObCj#5dUf=-Rq?Nw(0+fnTz1U2S0d+q)
z&Hb&r=<QNgxP)|PnPCc=Fz?vu6!uBW-{I$?jSGHdx3{$$-#lV-Be;-Kum1PB|7FdN
zSO)QCQXt!mtN|*YkOydG9OzM*K&iJ%$y~`O6D%v=o9e0v&9aqG*>-eY)mxe|@Q)Z@
zTt9n)6FQ7{gVIu${54Kw5Oj@=js3zNWqV~-{i!j{fl($26vL?jc*o*G0fiv;*Xh<1
zaZ+M)a@x1<VpWcZ8j=Hh*cJurAHg+;3&@lHR{p@tp54qEt}QmZ8$_f1GGte@{N6C(
zR~mFfc#C2t62dz$^ZAd-fclS0TSiz+2LLy^EK*Y)dh*R;cYswPU@+Mpaz4zsbR^TJ
z;z^O2+u%|~TWictZ_LjPO-G*k9lfpoi3WuS-*Vn0$$_^s7WPZ%>&byfM=78lkAn>*
zC^cehDxDPm1jhJ%4@zjsliH&I7biTPI_2Fm;=B{EB)H!eZp^Y`Z&Zbo4m`ULOq2jl
z^putyRKE97bVNd+t2{aIF845mN{zs4PxI-|KD`{+Ffr4rPbXF3{K>gJ7(I%eB*%!z
z+VA&BC(F0XV%rGQI@pJuAK(2!Isf&q`NaY?#UAih*v>j4P?Li#dpkI{zZGvByg`W*
za|Bf##RhLFS8V7vCbtf?@0T!AImS#3NNvPcc0?NI)&e9Lw7k50`}gtw=(2Zj0u7EZ
z0LXr;tD#>t@wQRw`O2&d7Re^34zFbYsG)r6tOu9?K#w1tN<{)`@0(1KPy==VtE-b3
zzZQ<hvWAviG~9+3hWJ>XZ9jTsd!k@eux4ca`rl6a_Z@%pm%1XI)-j0JMsFf#$`Zj$
zIzem|-fFk2o};bfgcJhA+D{{&ZQH^hlNsW_E%w2fotz|Q-|)HT!?sog=hG6)=7!>9
z*<;KX$2&eK>%#!4UjJ4}2xu^A0@aj2k0Ed!480l0s3h?sVmi;b)hDxbI@aY+M`|wM
zRR-NZb&(*r_V5ac6m%t!u*$wU@2NY9wBhEl+a<_euv=|*0^3P%I!#nfgWSxN(PDZM
z(@B^E5`p?fp!qduq$iX3NpS|!Op|hC=Lef|bjX6EN5g18^Oi^!WX|zszp1^0GqE2=
zi+36m!gO7c?}AcNvhxFjD+zf~tx<(lxbb&{mH3o);0R%F|9i!YilU;5Ru2-9NL+QZ
zgGBma$G*<=%^}rKn$%U%NQkTj#<7?)9u6!QqHc+^OpZx0U6?VMw?{ATb79rEAT+=l
zP#>neeYpi78*<yG^l0wc7d%@XD|6#FpXdI1p6T_hvB98_=tl;E!Q=l?Lt!WwkpTGv
z?9eNOeDMj*0e0XeN@_3&a-gItD*~8qU|GX;O#{X-pePkH#5wD6hkv{0Zov>Mack^c
zwk@HGu2dgh{h`t0rtWWBv{p)h`mW(S1Q)LnMib35#v6~Y;M1bx5tvj=<7k?+M*KOW
z*qoPoS0v1|u!Iovw8wMwb<Qr8F_>R?6l~mMg_m@)($0!(44hfI1X;?5thSKg1P!@m
z31Z4arA>oOL=4bo`5_11-IF60rm!`^!8n<wzf9jiu^ws~&?hv<26G42k*j>*{Y1v>
zq#jRn%i7r~x>`VP>l(cwxMbg_m)BB#aeS{mugO+jnL7a>kA9cN0>%%=1jnozWkuzm
z>b)5j8Ftgm-G%v=L5;h!Vb|h@x3B9q-)-Ff*yr*~<P<3VuHFLCQohS&I*wp&VAWyd
zVV<+KXh4(7M>b(o+INeKj7Oc!kzCd0w^VC#qt{@B|DM-dwl(pZ`W;6nU%wV?*`7GL
zamv-`+$pW@;s0?r04Yh$a4?M=Rd2py@VoKw(IpM(E_{|LhC4Nt&$GsNYm4GQC5zZa
z6#rzGpU$Xj(zct+9|aijm@?*z;a?hC+cF5XdyC&|tbBl9K~pdBCV)5X3I|KwIxUdW
z#RTVIv45bu6q`&r4ai+9#;nQ#!geNeAxq$VGO*yM8+F0{`S!lQ`%RAZ>3wK2JgTl>
zf?F(R{{Z>3=D~4G0bFj`=_Xy?Bw33zIDv^bwV{(hy59U-q5=hxM83BHb|i**CUttc
zz^7#jVHi5v8vCziut{EQYl(<idq9omhJj8EfDs3byRGE@ux~GW(;&rP{E8Ed&lI#5
z*l?=GXK^tjl!GFFQdhCXaQBPX$J1%0aMB5$UEQ89`&h=NMJW{vjpfj>S#=md<1`<U
zbwInM!r+Ur7l%q|ayi&TTSv81c;)n{b~p0sO8M>Q5y_E1Ee+`S5n~_q*eotkTmqxx
zNM$(eK|ew#NHNA8f0U<M29zUk5=m^Q`~;bF3BMD^rz#bPq3on79i$HRm9PoXMbjIf
zTZv?sv?6k-=8B!tv`pvql7+36$8t~d6$d5O2l~zqEt~mdNH+aK&SW-yTlZQW`lK-1
z3d#m-1Mt}{s(#f0h@ZS<ZP-mWvSVbUw*e1m7pIdf)+mKoM~;>y!;PXaty5CtN13vs
z6aHqMXwyMkz5T&=A3fvEZ_k*tCETz$h4>YGmJ&AXC<eWriJq!=_h2s9)G~b+<dG0Y
zi5C6C%tBADkaWod$M_L_E(g0-Ht@E4RuZG4aFtb8j7viXFU2RF8QyzQFeIDZ<cfI}
z^}mar|63*bU)}fr{R>lvfNf1)vh}163uDr$ZuC~DC$o;6DgHG7DZG|!a&dS`9@p>I
ziECy~F?7kK^TSIz=_B-?hf%;HDb&%r`$K(S8V|L2UD2_6cm_0GSWS*yob`#0jVdFA
z(W->w*r52pxK+MB(aq7PZB6X+qZ(^E!o$K><>*2`e=qfWY<sqUgSz53FeG1KexT~X
z(W<o!Fc-Nm27%F&)5$hiOYQ|^m7ET*+qPa92Qldulb+3K8clfu6Fc;$feJ2Ol_p~7
zOtUnw`+r_JnWI^7O}>G(@1(jijo50OF8S^|G>{$<j{-zusqusAkXY5N`U|+(R-2Yb
zv!l5eLR-;{3ZeVWz{iBx2U%S*Uzy48SYiypx%u0APu+T8ZL*if1ThUtQ#CAXVkA3T
zR|rC=n;-_*Pwo_(L7&sBdjEbGvSOSjHR+1IcDG{8J@*3+Yyx#JDw<-Pwx*j{ZYn{5
z67G^Q*ux#!7Gz`07*SRZKV`26vAJSz-$2eQ=nKulK0j2o2fdm{HHUS&^4RM$apZy(
zA$JNtLb7|f)ED!J**=V$oc+A}<FjXRzanNo$r9mc5jGQ}p|VmOf(yk+1Pn@9RuD2h
zLb#rMw%gRdzM*thmh^M+#~p1A?b#O!{QUajh;wH5wZp4sjhkCj?!OJdjSsBTg8%q#
zy)^?OKFucz(1MeO5j~hRm5!!}y|p~0^e$2+W<$C3Q$}q>-vv<U5yD3mzSYxIlgxmT
zd;8<6$H{Rg4qlvY&Np<aFUa>D2-ZC_Yx3-*`U;qPt21Ge2$c?uW){bva3xyF&X_43
zthTBTl*G5g0oF9{W}x7)01Fv--}ElFu9TX&L)u<&jU%48(KGqYd$@Me?2iWPw&SDu
zzNb#AOVbo)J4MLVWM9>qMY$chky~v17WmF6PL8r2$(a&kP8C5W6L9V@UuXeq*G5s6
z;c4mWl`Sp9^|qiNig*N470J@BHu56gZM|i9;9x>5L$P_c2oJpMRoW(U{{Zlbrl{Kt
zXB{zKpFG}?AKOeP#f5`r+zT+D+v?4@y|nw|v3&0l@es2J|FcOmV?%${Y`*M9e^|8h
znFLyH#sBm)A?Ii0YGjiRj^4l3enE^K><mx`Q%j7{6;KCg+RIMy2rzQlg_XUJ$sos%
zxve-{9bYhJV9y?1R{EVCW%{x7ZqlCMC-MHCJNvupUn1Y|6&6M!#H#lIc-+YE-mS1M
z?UN#pD(e)MB0Z~~{wfd}c6tVhz^=I&RLN26$T;(JTUu4z5j&w4Oav*nNe`BsnnMgX
z^|1V7D1la#q87<kd)74E9xbYKRIT}3OH%lW`>gsdrcT#~*)TJIwAu22JhA!hzogFx
z_H^BJMJ{l~$Tgr17;OwKCOR9I5YR>tEjhy9fm^&0dXp4Lstjq>PXS`(D-|=2KJ?JL
z;}?O_zQgDRv;D`r-5WxmXaWIzFqj2@fk<`&1&&frQC;2+Tu1A)Y)W7ybqH<xJw0J7
zC))|vhoH4{Mc$v10rv7#mT~+M9+zc-lG+v=jkdOY$7x<1+V<GKTTQhs<iBDv4Ox;(
z?-OL1gx*2x_=OXQTno#=0(!^UR>1E;u1BXx%+bPgLlvWn^>Sy*B`GVJxx4npJ+GMh
z2!t^V@FSo>t!GZNqGIfQ*sd)bHI!EYFs2TeVw1qm_7VyC(gcPlA&*pB{MvU!;7@UW
z%H@~7!%tbfFgt`1=yQ~%)xl+5Cib$yUc=c|RYPR>lUaV8^Z3G%kCHFq;+XO%HO0pN
z0qnHWL<1b~sa^PHP=B5>kK>x!GywN<y82!QMTar#82@7OvDi##KxXr}g5|}u&y^mz
zUhN}IW`%XeE1%zX-$Xx%iMu>x=GXT}1;}K&^}Au8j?|(e>U>`F&hqS>yoxZVc}$%U
z(q2$d`&Yo^m)Ej4A9k=>o7!0Sj@yJ)WgibtncRK)?nBUbc#R_}rRsr3amM(fOajM)
zt?DGiN~CDZFH?s=K|C55r$sgmIUf>}bSWXy`gHMvmKXC<U2{=6!QQ?gKC89p>9}9_
z#($l5MIzs7{nuX{G1seF18@MVm*6q^cIv-OG4mA!`D%)%@=5z{D7edF2Wd47?2Onu
zpAOqvBP9-*fP-&#c96PtCnFKP<=tdxzhq!NIs4P$;W|XxgC#@FLi>l|H!J#{OeVzg
z6-I6<eIz_4os;c_E94j;_iRC<RQ<8E-XH7OW<&r?bMS|Y=UkiLMjj_cy7(T4CYpqx
zUxb9piZt^#FZ3i9{qj-AOD8Nq<-HB`P?l`basi13a1cnk#kQsXC2a5ob<8og5TH+h
zOr&s-x^^~T3sjYc-mWlem0H*5wc1xb_L^F=gf-%ZL5san94PNX0GubgSkXLOyRFcp
zb@2VnspA2_y6yqk&tKCzDCh%JKBj>N1a?71ZYpgh$c_3z13f@-W{)r;FHX4+q}#kH
ztt4x7t1RG$Rnt`M?8TR8jb~~8^e%A1s~E2TTyOUPi|Brg>#lUa8KYkoqOPbVBSoN&
zm)`0ON^4<|AJC&)|Df|vQwwuILvaWMGq&VNr;xDEHnua7E?Vxxd&@Y9lV65n>P&Cm
z+~DBz<&|l<v{5Yx21#+?&B;hXj$xoCwh6@@pgLd3z>`72ScRbkuSE-^1t~M-Sh=Oj
zz#8SP8dSYe4f0e%83r>?BR!LQ<jblZ5@>k9xl@=|1<EnhzwjEW)f6vf7C4%d=^{Rt
zww7XpH-Qg=iWpclqFo`29D<mpBXmex&RI>)`_g-!rau!KI`^|(W~SeZ^ERL7#m}0H
zoqkk9gY-(`Um!$y84ilgDoxNgPp9mZJ0TN+*GF$xAvU9U=Wx5*)O{)c_A-5aNB~l5
zlG^SNR5nlrEJ}GxMcZ@`Cgjwxi#D}Pr#3lbzA?<@j!(XJl)B>mDUHFuZrrnR*j{sI
z>Gki&VsG9Zz&uc+MX*<cvG6(~4yy_O!k2i=JJrll(X7D;*co3-#!R`S0;@aUuJwLB
z1;wQ$)3L0C$O$iCM{VOaK&+gc!_{@)zhV9Nu+8h3&+72^d2kKff|OjST6;+9Ci9U3
z??p`lO|#uazMEW+PY*B{YWJ3Sw#U~JLH+x4Bu6i_5nCVX7@3ni&k-ACAT?p?q`Aca
zHtBQ>@_e56)xEL?K?0QzgYqj1iVbnxMy`^9R?LC)+~YjoE?-APufI*-k>`A$H|uNq
zAC1i-^+=?Jh=-Btzpg|w7d}k9HxASFbvXN1j#UD6JFUZuCVGKf$GI^e=#~AXETbSG
zUoJ*_3HuH(lY+ZZNvd_yU5)WmS!XZ73B~*2$f>N*xn5vK&NgNaJ3B-_q3ngSvWozl
zHXt)DsH(Tt6WtOM{$#x9M~#(ZZ^795w3vlU%`C@r06SdPFkCG6;w>Uizg@-~^*s_Y
z`^(STeZIRJHu>%9(C5sDOaJKgcf@(5-}&-)8$br(AwL?t8`*_|cOw?OO5nC$3^3Im
zYvzj)2@yb!zZt$F;g3|oNmYW`Y-fD+tcBh4k%%0<yw(vEGdHfZBTW2a*H07|`-0E>
zFDLo;5~#6Yz1Tt>r7saVO}?s4m~_12FXX3x-fE@JsVw-4-F2Z<GwI2+T5u}ES-)>K
z?YYI6VYS*b%Z08t?eeNBX7~BwFHCfj^8~Y#yUUyp=)To-QH%cs77(7YMR6GX{-}IP
z-9#O6)Jj|$xJ?j=>q7t_FRCi;W(AuiMwk$MO|{bN02*I?-;muh&*o#k`*3}2q?Z{H
zmN*myO|(Q@M$9Ftw(p070Kvv^ile{?wEnH;_*zY|6$T5{>c8P4Xh600gEURGHnSQ?
zx2Vl@a|IeCUA~D|R|2Pjk36w;Y9^3+Pa+$j-pnBRg=f+?g;k0zko5>iBrwfQ&I~Tc
zO)HM1i~DVa7n)4>eJAl83xxVqcPx8pFs%upioCB5yUT(6qJxayrW(LNXK4Zx)mi{*
zO$3tJ0xC~%vPH~EN9rgJ)rSUbcEqGrJ%{?g0l!dEI`hZnf$ir8KT{0F)sbEccu!6e
zuGzGW8(7{SN0g}{CWs8!xmP^KY%#_^#b+5Wb?j>*GI9#G3+niJ!eHY4OmW0-?LYXZ
z2Bi-j%lXyAXV0*@;<)N9W)sCj?yiV}2js5g&fXJ4K;_>iq35vo!uj5BAGM?%1+Cn-
zsk=v<FV<X`Ss!p|(!aM-APnVo{F3kM>!5S}ZhBRo>wv3;+xKdzy7K#RUkjx2=|&h)
zks!E-o=7!T-gCYvzd-htSSuObn0ZV}?p!l{y~0|ew@2s(J&@JJ3P`EWBx0PXFzZlL
zn`d%?KK*7D@!322Ld?{N!Rsvu5Q+&jRQegpk|vN;ULT1Bj(xjT&XhgUHPDBVymYC_
z)J|dMXZ9wt+qsdeX(t*+o&AGMI_a9PsxKVA8E49^tjdVkUM+l4kt4ff0a~%(1u&?#
zf+b{-asm8|r|g0|<WA&Z*+HprAqXtp>nTTbr@UE;Jr|jB>?YWwi@gP$Nfml^ASiU-
zRU}4k9-ANso*GhUi8=ETjsdyhK~H*XHj$RsFzOcO)i9uH7e;~);iniGoFIHQV3&hg
zn~yhFt;GU2AQcPxh|NH5Bsu%u6d|-PQe44`pgbWz55x~C7e(F0GJg!NwGmPrAm?J!
z6^FwswW%W(^4%}dAUa9h0-kX=6-DjhG<syvuDKv(n?M2P0vX?lc6ct$OJXQCK9}lM
zGR1fpJE@vG$8(M`&rhVp1s@1CP0ax=FKwwV+LM#~3(NvD*)x+h>M|s79Z=~XhNWOF
zb%3X!U$`pmI%$rKoHNC^1?r+$99$-4Pj&lF8V<HwNgcSYy?`wnRx!rn=BT?n+#x9r
z(w=mPV{Sysn7n1(P?n=lgI?wgUkzzY>-Z7e`G*#cs2KmuB$;*<&=jA^DOcXIHxjA)
zp2L9Xyhd>(=Oyk>oK|*wpagY0cJiTQ+}n>!wPpeCAjyQxxD<czJWoGs?R4(D8J6R9
zmXATGuLvl!Ku@$v|4x#Ougp>HQT5Tl(ctPhBZY<EI6qGTiQ7%&K1n1eOY{`F+~)1&
zlXhgViKb0HJtZ~zFp>RmbzWI~^(BJLr;hq%hLy|Y+*em*0K2gNH$>t8EcgHCe_C_C
ziuFK`nO_55#BN&1fT7|SY)Uf?^kM<?3}7J6*-XaDf5YmMljKhF6TMxI=u#lqV&>Ha
zR!!pOR!-7o@G@91Qoo*v>myTpBQCePB4()HRET{r<$8Tjk$g4WZKpx}b+5&@smaWp
z_a^@+oUe=CjMR}7d!48EIcV!PydJ!9;ct(v_cf%!Ds3!S!Rp~Dxs_@h!|d(pqm7lQ
z2J<;A+MRYUshcFNlacaRV(rvpZ()x&QXGYIgX5q{KO)j}0Fk;B$GJ^K<y;)H^G952
zEj;R{Q(F73ul&7NHK@W<?ZKw~2yH)Yp(~AQBY`=SpsZ3jpfkl;aXx8X0d}L#7fGTC
zO@F5oZS6TYX;>%Nk4zD|Go&?aex<(`Hl(TArrcyS#l2IFriL_hj;~Yrz&SvCo0I+v
z4;1*j=w>jZcXCUbXCl#mk2$HwaT%<pkr$f!h=qlHnek|+g=6BqB>?{$5|(_rFWjl-
zglMxnxH3BA4rm>+3UEoK5NNYc2D%X~l9VN8bkU8*74Ez@nNymO!<`7kW}CZZ<WTrh
zXml&kHUmpz-xdAL%YhC4+qeKz;T8PcH0uNN>o_if+M)nKMN-!SU`N;VPHuuv%MFEO
zyu|W0<>2G#Vk0RsTZIz9Rh>ACvL~+Bvuo<e;YYy%Cer(cjv3*z%{E>b<#4%KTeT>|
zZ+Z&>mw-vj01(TS9x!EhfRPfZ+DGl?H0rm=ZDue}SzUMmhijoB%>ra<CkZN%kKWca
zsz4#SoF@EyhL<=<ZjdMkdGTjbWSrS6g?0Q7A-nvX0LRkLZ^rg(j4RTY*5L`-VT9R2
zBTgVG3%`0VM^uQ}hzY*Hb|QQD!~5$1V^JI~sS&Q72{4A!N<vo<8S_m<dpKOQF<4qz
zDt@*6Q~N>dH|?_4$k%-}mk6d^xVU#9BfwV}<g4^AVF0uGoxFqo%%cl2_8UHP1=Fb{
z^@IcG0DQ7)8&~A*N~ZM&90dM7-gs~6`Mer&j`88gvr)x+rPo>`lvwZhU5I(l2qk*z
z<h|J*|6@xU4DclKX&rC(sov8XzI82*;l%^<rIFARZ020qG}T6$a|gZ44;JrLAOoNH
z5m}=G&Aa7fY-g4}C+6`C?x_7r*7EX1R^6>(4Fb!-VEn~%tuKor{4L~WKz(um8e1+V
z32(&S7UC0or`2VWDZ;0L5518~tnnMi1q@WYpT%kBRF841xxv*J{QCm;z6v*IE|f1C
zbcgFaUyZd;n84joy$~eHN+G%g&yDl{g_s$??Ncv%mDD3?Vc9G5T!vS*?M%B{1))Lc
z9k%)DtD8oRC!q2M=UeCBKGiDtp7oj3`tD?`Wvz&U`16gBL&r*v!e9#YW*5?bAZr|h
zDQHWDMZ46W!(BAN!P>|UnaPSBN3n;qNhhwl*4B?`O<g73Rk1l>D|6(`_At|mKh==n
z$OC{<ur;!q0sn~Vq$eXA8R?ur{ASfFwjPka{K&TRx9ol#Dd(7h6utnF=Ikd5(`$FJ
zDHCHfF5<{I?g=SB{TO58kR7pR;o?$r=4sv|-e+s38sZ~5!FI_TH|IJUkrnmo3UR{Z
z?9-7tW3lOR)47wa8DA!Xvn(9QKR+$GYkYhxcdNhW`x4}|CB#?hr^Aa3g$s0&SwrjC
zP9tDULkk!wOHK=3-GF+yj5I+dD6sM2RUJDg+eAybqEXH^GU;4VdHdj0e7JAO{IwLb
zGcT-U>8_YRfz(z@VdN*lD>f8LFfS)GdN_?H>71Y}9TCv)2gQgNS1FF<Uu=QXYeMNp
zmJma+!|`JSx<<UHeYAB|9tWXtA&L9^@cNxnZwsbNPgS)}_133qigh48fKFy9?_om6
zpKobpD*pgAN3TM^KLVdOx3GZr&mzQT%fnT_53Cx5gUa$Y1qR(awEddLG2Pm8i7zb<
zN@#0gdWYlZGBIfr93BAWq%Wlhrujgh(wE}hT=@|#m5El>kA@?%d<48x&+_~(idwRr
z3ds*e1-tKWoY<7$(g?u$GA0nI`YRuCpjV0$0GSw&;Nm6QsC?o~154M0vRP%I8Um$I
z1kXpxcuCs;SN3%w^%SJACuHiZq_1moy%fX6n3JPVrB5{vD=@&!)j{$i%G^G#&6C#9
ze%R>2XlcdlI^00jB{f>WztyCha=56KeRQxpia~Vu&nS=<+kx%DQu$or27ViZK>A0}
zCb|{6mJi8QhSxw%Tccye|3goeGF^;X6Ea%78S1ZpTytqnYF&NNu1<kJ@l10g?|MB`
zt7v{{+$sL<DXmUh^#(C`$#7D4>u8~vvvwK>Xe{ov6CQzOpyQT@iYy}fyvRqNFD|Sg
zy!FR}oLka|alv?>m1w~&L+u+1zKRg=R9Vro3@~RcrB?q|dw5F$ta{btEY%wD$*X-v
zKrRE*gt)`rgG}+EZFDvQn((t^!yc8fcPv(ioVBI#g?}^`;8NO;$Z$RMK)dEP()HFl
zc3J7{ej(w^rS7nuS%PkmV;f2>1+(!F@~U@uJu8{6loDIo*kVeYMOriwt{W&oX(KRh
zx{kfk?dHyc_c6yl{<JG2IN7m#&mn*(mmHj8bT1mH-r~*J`xUX$qWavxDMXgg2w1cR
zNd5C}k-`b37lDJ1Z)PNI(_C|_b=`*v<wSEX=?T&IG@<#MFQ2t<tbG4Kboie3H|ifE
z)c@-nk63mGJIysv10x~8&R|Llsv{nTCT~3=S~!Bi5P~p(g+4>J@lM{uia?1ILV%KR
zlJ-UdNCJLroEs@I5AEwvZGbo_)^`2@er<CkJ(zU(t+>ec1rp0-sjXP4bPB~vjV?f1
z%^AOkSQip|tW7^3I(uHK`B1;HaxC;FL7+-`Oen}sufNb6w`zt^Grf|$4{(AXJkR)s
zZO^bO^b{A^#;S=hqDc;7+R+3g`DC{FM+a@QO#Nw{0e1Z5G21%(0c<Xge}nxaJURLa
zH&Q&b(eLy~y>)Hv!lz-9E<g7$F--T~{luLm2xoA+`3jd3A_h8!6>!duEO~D~KiqEl
zL^aU*DTS%$;r)!whDKS@@)Mw;y?eBw#Q#0lx+m+&C79F&7WTByc6yFpaV<?Qz=HVd
zgIYVQ@tBurkWxxS!+~6?A^5|O`m!K8rQM|zCSp0t`zjrB@k+1j&~;m)(|`e)^K!)_
z!}+4btS!t@hinr$uz_6YJ3?`nSmVycDT)3gc6xqiia(ut(efNnCc)~K2gz=IkMFjl
zEoTMIX=SruaYI{C3`P_vP^bxe@VQj{!bjd)KuZJpFwHL?wQtzQANk5%dDBoj5kUAd
ze(8P4N^?b}m(>{F-w*U|;%)yAG8Zx!AV?`rV5FOXuW+MX7HY$dZi5P}n6!a9CVaM-
zM)3j><4hiI^p*sPn8TYX^eX2ZEn3QEPhFZ3H0RV1_zw1_#Sdv=H-l(FH|^?%4LYpK
z)M$-AJbCnF+mmfSo^w|}fBu-!`C~skNl;U}tgrbK@DJ5ctsMg;l9#a@#bz)7SH*_;
zbpQhAKxTwepJrt4#*MX`k=m*@0qt+*2k8AI03e(JeA7PhKVfx$5AGOd53QWbgIsR0
zLhk;qAy)@9hpXVdwkl9!#`j@-l5HA_(@KkQ0TqI(`7nsvZLyy-WLv0b|E;@tXBx1p
z=4f*zD1(WM<A>30_1$8;4mp^6dR9=LA1#Gx+ydh}tnDX3kA8?6Chy7rgTD2ju4cs2
zM(}k%fnnqZTKD*9t4z0{ZPH_<;N%+3<*Rn&ct7)|esdjEZJrk7<(5v&>8K6gh{!^n
z=G)aMoxBS^%-1p^v(C&4)>LuYVq7ux_}h~v5I+kfpQkz|4?>^QB#Ud{n$Cc2(6@AO
zJdNMQ4S+t~UeXIZ-u85)$ve(%B<%B2KmPd0-r(ZC)4WI>zf7lb&k9yc>V>NjC5R7Y
zD&23;Vj4JGii*L3Kht{2+5%w|3V=1yciNq5$a&@mUSrmUQjyT74n#t1ep-{Y+r{H1
zfKI<;?a__iHEbJp;NwR>>jU4qa0?@M)?sTx5x=S{b*YoZ$hVZ!zz%@liUN?C?OixK
z{`{bnO)Rp!#Jj#6c0l5XNL6hg-WychsWQvFc(swkWWHd=Y`w;6V<mnx$UT}}g1m!)
zLZj1`%uy<B&r%}pMmpeM_NKEPDfm|DuDZa=F+nJGOAF7=+TjH6hFzPS9N0Qi#an74
zhS~QJ{|UY~)H$j1(<W=l@nMbSgQ~UQ_34tqIWZF~*Q<EWe&T+u?(a>dB)JFtq!%kS
zzFRdHWglP(`F3KB$!#6%?M+R?b)PS@`0bXGenX(lNR1>1db=H#f_`}-&cD09;tDYw
z)Xrx9|D3`8drZ@kfvTbAHLwQwa@J!=^o^6`IJY)wbXq%7?o6h+O1<CYUcua6a?$FJ
z?d@?|+z?WLZrQ8%c&5N39YxtG_Uos4KWj-HxX=m>fHh|0ja`FHe3qK(%e7RqKZ01#
zGY*N04{a^hF1vW8VAHws1~0?Jdmh^k?zsDW&+Lh(Tkg6dB}}>hbb&)Ehlmi+xW$`?
zZ2L910<G^filc8M%ndsECkC6m%}xM!W}-Rj_>gVe#=7~4iG$t^i8@X?IzMe;HZl{f
z;>cyGw(e^GNd8xm8N-`W>EXc|R1PNAPKs8|49?<iB}k9K-BS7)sr}=snLHm{4oEy<
zy6=Vfn5--;wC{gE`>h$b>tW@zEFYK5G8`x1;<M?x=>!4^C~L|&kT2LdgF$o#c?m&A
z#akMjW{WbM8AU#G=w)np_l}%-oVQ$Kg)#&#Eu7nwi{H~A0^F?6w|#y@_6F(6ta5Tb
zH@5x9g47ho4DLo_#e3YWy$^rA8ZE~N<bG7oG0+hdVj2x{K#88zuJzNVyY80u)=;)(
zcA3`3q6>p7E2|hp^p?@j%kiXBem`CIo4}uMz1A|!w7RwP!!mbM{k6O!0SV3~D*dYv
zD-~>a@OF;{Y%P(!`7N^!-vMwJpxX$udbYLsZq=+~PBO(UUVcnr31D+=;>@`|LVbkZ
zwXdB4yQK~(pPAl!{Jh3<^x;hZ!JS1*6Mm<fpM&Iy)%PQr@)70=9bBl1GLv?-AHj9p
zbyqxLFd+LC-YY9Wr&Ny3IQrKF03hSS^0*&Cwr*VD%6DKnm_%#-c&b0#nfI#oqW?RM
zf50<L>ZCY`=W@QA-N+?#Sz5>F-36G1hazCXXkl6C)sWxih)-+xgxsb^t0dN1Cr67l
zhijX{;?4k>_Oc$)tGOkk_Z%CVOp1<Q^>unBd^~~n=Y(1m5@8+2Xs3zdtj5VU^Pd%0
z#D#uset+DHBNh^~LSOG*_`Kx-Zg)w6WypsN_pA5puSV|a+NUKa6C6)IC?Vi(q?8g0
zsF{yKMvV)6a>{1xqgJBwD+mSg?NQC9KvX60(5uKwc~E=W4~O$}H+s>uzE^jDc}P02
zR>LYR!o^C>age`Cj3GY~9v#{uwPz6Ir$YdIu#|UQ!jJSe;eJsKd=u#BRL{OzE1aB(
z-MM&M;TBU)_~u|BAh2+<#+$(#3`6r7KWRa8uE+>5g7?{)>vUtFGl+K%T&m?@1bsam
z9iU{;g5xbOy|tTg9Pk~CECTRN2`i;;v1!8BYk2GPhT**^>%YmsYGC0b>p7^eJ&K6J
zfme7n=v2v`geN6?o+SK`uun}RK~1Foa`Rd>6^0`!2SVW0k7*qPH0Z?LYIu96!&H}0
zJA$@>{CfaQI@W5jMe2}j#}OFNfUmrt;n+_jkwRUpn6B3^Uckv0Ojh=?k%K#UH^P8p
z3h`IO{MrOezokll1nNy~2UW4v$DvUGZjN&sv_ov7zQ(MjU?uW}?VeA8;naD_1w|xq
z-5rF}y7KL#pn-bgU9c{p%^*pr;Lm*Dxl%Ii=#a5ELb<0$@LuDel>ez+R)Ec75Tgr|
z@ZgF6srY%ADMU;cjFyRn@Av?o+P;-mL+~-pT1=sMI&?241Z*hmvM_6HPb4h4+yDwb
zP~kVrJ<qccD3_4y<_ernMksMBlOhe}E?|q4KodQi1Um-`T=_|5YZI`bD)2~)@WKd8
zdUArxrg34#cPj+Uzem6Ev%;!opzq^6n(yF{zw5_y1Ccjfx+*?CoJhbN{7*?3^I!jM
z#9X0j%>(d>kCZP!m&3r=i76T3Km7@#Fh@=U?bq&-qVoz92{sYu+ZE<?3ij3N(j(!e
zlN^!IG?b1|X(=xAmPbYuXX}VmOX$6zGXy82Ta?ybaG7L1>VAYHlQrI9M0G;w5+42$
z-z|Js)eBe>@gQI+0!c0%7%_#es!%vd={>Y;TyS@M;L%}cr)oiHYuz^x5o)ut&}tMj
zNR>N<H!L#Uw7`rjB6d0Ws7!|_r!^mn?>_d&k?Gtmpluc;t5iByz^$mk2)QwE`bBY3
z@J`=e<Ty*r?*LXeaAv1U4`x7aC*i7!nPT%H<|c{sDsb1lqyne_X(n(p#Fo#pw+%<0
zer%3E!cldMF8Mk2ub=FX%sQn3`VkWW=|7l5!V0i5=XT|vXd7AwN@Yv!py{ZrfgWic
zxwn^QX1ka!0EWW9lg<2x*juLqv>|Y>+0@k(^PwgGW2g;4K`S+`2@eWqgaTdcT_xS<
zMM}z>vYjurw#!%3I!1&WI9HKlfnr|}5+G&AAz^O|S_h89LRz;}TL{RFA7Ga#;5*cQ
zsOrK@u^tEjZz~QVJMp)hfibzbPbYY&u-o2bWzU@BQPZD>mpmio{`fBHR<(ZsWe02)
zT4w+0B6z5JBSSV?rh!)uI&%k*`pei2GhjQ)kGUz`Gc~1^;T&X{vS_OWu1Dy!$DZI@
z#4pkkfy>#2#6=(JdQ<G}$eeZWx#BsZ9-fN}C}Pa0_NuAEfRqYR%eJ6)AX(UMq2@Gw
zJ=IXvEoA0*fuMhKSH{OFF4YN+0cf<#QbrQx@ahN3(fk<ubO}ul#+(_nyHIE6WH#aW
z(MxA8IZ^dycF4!;_O6UA2rIZ75Gmr6z!3t)#WZPkATxzOC_L*4`0-X$nrc7APD<xm
zlP(OR`QcZTjTJL!yTJ%ArP~R4e8oh*ET!BK7hga6as18K(g*7_-YLw%==-ANP`8o&
zj!1jKFatJj9nyis_Oq4aa~7MVX-S-Gv@DBV5bJhRCR0dwG99pGkYW;7KD!b&M3H?H
z#7}fL^?miQ(lu6-V!*Xf9aIDC9ZZPS%SoacQP;q1xo1*91L%5KOe?mAi4w1V{n?MR
zZ^m)Vw~C<h5J5#xZg_NHJW;dEsAjA`JUDVyxNY;-9j+E%#X{H;q1fQitwO#9OeV}b
z2iY4bCZ!!)HdDM6^zl-h0B4Uh+KvHENVsQ7X9k)5h>JW5;$~H-09{vgX<Rr{P?XZ$
z{XqGk%fzR#f7RpdYB3X8ISYnzed-`y-}x+nHd;8s+oj(`IoT?6%4Mi31-*~r^gWWZ
zMs@`l@|zfDWI!cSAg01lUc)vKHAQZqB3YWc^73M+48P}L-G{v|k&`*8G?8c#-aT3&
z<{)N)(e?{^Gcx_^u&wu=Wre%=uKX~LOv1<2=){cUAY~1;H()C<%<$X+vxPkxjJZ@Z
z?S(1Fo+{QtV*>3U9y+}UTlFp!NzGJi2~du#Udo@JL(S()17#jL9htz}C>myp8HNEw
z)jH-nH_2QVT*BTBcz~D<WZ-@jT`!z{>t&Lv*f2^(j4b(iYo{#KkQwLIlm%ddyajvF
z%w}T{f#m;2TiX9t>+4RiOdJ3cI$7Zdeln<|+$nyhv(^={SBtZqn3IfIquK!f^qyS2
z$fat7j$WECm;xy$nZ~&lvur0Rx<W$V1ZSRYAH6zw-Nw$^%MZ}Vn&J<7GKZQnx9IDr
z%x{4&u>QANIa&2y2&dzbn15~|`@WPQvfKT{C?i;_8}xR0WCJ}q&}#8Iac|1RLL;(U
zcdJc>7#wDUyG-4On;n~hDo5i2^Vvv*f3Vk!M52qw&%<HXjO+EKd6OU4RA$|EJv6H}
zqc9QCLETRpa7%<uD+U>+9Li0}i<9HP=Q4?6QZmc_QHoEu%j_K^luuh&yj?&s;{(sO
z((VbkCmUN@i&PgL{dT+r0kXN`cSz`raK$5Mp&vZ72hy+qR{O(H!Esdk$M+>t2W?5Y
zAY~UqePR-qZb3N#->n^pBbF)95Kyfho<f<;vT$L{{?BD$mGD_^E47S)AE+7|3-F)h
z60hvd%Nu1m7(Q`dRiA)74Oooe;fu;~@f9OVuy7kL$|f70Hn57n$Yft-r{TpgLNFoB
z&^tUbGTh;ofmvJ}`Sge482@b<I|w_1+yh;a>z_S4xV>h3nNh^$^AGNeAKVw!>|V9*
z*kRFBfm)baY+5Hi5owA>!;i45fc2A`)NRT)Yb(!&`IxdD%71BL1vIF)o8oqF$@uD%
z>k38X)`mW=#Ce5>8I8zsb+rbUT<^WEJ7AR%#{wxWQ4ye#V$@-xzqBeFbA>c+*1^_?
znjgf~!-d_&R?0tAc5pN|z<kj5oyFYgQM-v~UqD;QFDLjI55Bq?R~>5NBg=cbz2Et<
zX<i9p5CLyzDNIlxJ!*jW1`50osx~=%>RTr^BY!ktZ+@q5zyZ2ACxdcGYI2grYa&zJ
zE6EaJXMj`UqALd)sa?6j5_@}f<{J!Dk58MjGeJfH@Z>7try9$RQy7KCK`FL}z7~+1
zQOTGF%T$#CfLdFoF@P`&NX<>aX0m&xSere3WE?9&z^-PZv|DxUp4IOzct-C^Cp;!+
z3q6u>U@;qQT3ko4XR$3tTrt3}DhC6BeB^Bo<hhv2*?`vJymZl$-2&#h8ogSQ)CXmr
zQgvW>lh#RFhiXD1$Y;A83*Z9O50u0H;qH8ACoxhN*PIevCTK2-FSjYJn*B9%;lwCl
zza5m-fw=p*YC9!fS%gL@4B(q!@1}_s(^Xcm<poF$&Z<+8^Cd-9sY^&B*9elaH%UZ?
z&#-^UJUc?7pkhG3t=-5#`j)0areB|T=qK!GDNlI3O%3L#v@OAYXQ=Q1GyJkbU5c0&
z)=}SBSSU-`7W9pm-~sW{TZLDl7;#%+7B4|Ic~1E|`3{!>SDkHuis8eEF}_<Ja$FFd
zwv5z&-&@}u`Iwx_JwJ3^aX@_ubn=5aqUEnRt*pfaF~F(0k;Em9nQ?{c^=x~x+a(xq
zWpCqHJy9^{CJ7qv!MTGSP!Ura60orloW!_uR_1_|q*)sN$X(*sk3H>Zl=8VWyprHm
z-~6C1qy*XT(7_o)$(|@5E%gWElyuBBl0avwK1)147k{wJl-0pW!mI~Oq5|WJXbped
z%nG=iM9QH$+)O^-{x#oNmfz^+{MO2QbJ#{}S5v$REf6)XC5wk%u(DJxAl7ZF>OiiZ
zB-*pho20aE;Vqh>%8VQ^*JU!w;*a8tnmJP_ooT_jmHrRe`Hv@YGk5)&3*Gfa@i%o5
zdKKK4YC<r$supPS!{lpoJsfpR5JuoN6`gcFGLx=92?G_!%K;$eGH5?Ykmy)>na%aD
zoeO|SsdhzsfSjUXcxk+^=zw4Oi$vb3hUa;!Qa?|8P%8r^>f_29Ot8PzaXu{s1zh5i
zVWUzwQ59x&c$B&yfNpZ2-V>wCUS#wLy0APHZ3j(e5+38ZL{+X`(Vs)_J+u~!_apmV
zkuD(Vfb^l*E0bwA5O*f^huGT`NM#l+bO3ODm{Vk1j5+vcG1}%kxA7H^al>}Pl>m|(
zy~&Z@hNtZvvnodEWNXwlx%C3GyLQ|%^{6WX4fo0IRD-m}qRF%?pbz^8m=A4}ca46F
z1{PLuA5c8wb!`-Gge!Yb3H?K&Chgxgc`}J{yQ>ndTIP)<PK0Y2haOrS)m5LtgY?>E
z?0BPOAgKv+o4yuEU^xOls89ih1L#5$Gd3$Q%0H?5;DL_GtxQ(i^QX^S-YUGsLak6o
zn>x~JWyQ#S-i3ho9!3+)?#9-B-P;Kk-qK8wR&UOj5YMCRmb(HhWeaq$+w{%v#ajRX
zOPVR>+@WqFuGA;({P3~Jf>k-KvKwsjKO#S#dy2O>Z+M2u%IjzBWmx-!yEI9=)c=kE
zU0P$4-_QQPf&-shyFchMvVyASH_3y^^v=m$L$<<oAemciq0FZ`%;B_dgTwl3Jr57Q
ztxKRc<kC}ALojWo-z3p0XMIdejD1Ia*ZJcHYz@lqsDA~m^vQT*v^M<ut9YP?l!{!Z
zTCX_5E8%^PMEpQG3Hhcwub#3p3&V|CE$oqe<y!3F+1A|{)jRo`jI#abTEp>0>!1wD
zSVhLsD7BSqy(;Y@u-PI<_SP<2JE*k(k>3b4jVdFO;(>}A^DMuY*k(0n_56%v^vj!B
z#1EdU`|JKP*fIKTU0b)U&Ansucj{b`Hk9M=6{(fz(;X%)4R1oVAb$crIY>m|VFuYm
z;*q@kZ#50L@2F$S19rt_JDM(;jvZQlVLLg)k19whX>Ukdu=n-(cIuzsy*J-c=bq9`
zy;~mIs;U9tNaKgq#MsG38lfU&1${Rt9I$ojfeEmAU20+F4Dh{+j;F;%?)4eXi+b93
zGu*j>tBc+KWS^Em2+bql-6ZAqUfD;`h<O732iS@0sZpK*K+`#lVOqz2h$m5p|Dpr}
zvg|x%yM>-~6Z|K23k~Eauh2TzI<K<jNf_|YG!{nU{cp83y)vv!C}SwRRGlPDxGVB3
zjr$ZMs^Bc;Ajb<qX2@#l)4$dB*{VyA)l`HQ7*|zK7kn(Fl@T3XmM0&AcUf1|Lw`II
z`ylxX@E=^sN_qe5#6|qY_ubYnCMy0qeaUZN^Y8tp$M4)%Ka$|YNEPa+c2R<)dAZP>
zSc}Usr})503?)mh^OCODzLNoe>cR14ky&pZSDRY`BSzk`H|dOA^I>pw^`tVphxF{7
z;QhqFhw+ZR8S2Y=-vb1UYOPDfg~{21Duv-U**Gtv-+l-@m(#-}pclntk4D)W+yDBa
zdtzZ>qW4xHi`m3vWqW?U5q$5b%c%}|9_M_5)K+LJZ5=RBqG39S{_nvIDYCnG6C6}R
zxe7;0lejDBG^vv~ud&`!l;wMx4TTfGp;z<U9j4}J2y*2ot|L7y5@A3*jR$Rsq=3QY
z1rwj)d7Gv2Fn?R*I+(2S?Nc`ris9S=WD|)MR+H9&2BP49t8MfT!7({0cA)UY!{ukT
zA9_U2i_^KiWR1r|mHCimM{IujlDES-qF=u+S3tW%v5c>~(19)_NW#{}-5;@5!~D)b
zz*@2_<uf*lym%Uz(3DA{dpViK2S*g=rCvRbh>n5O;vLda_E)0d>nwGr)Qo)gCC;WQ
zymFfBH#&H=z#6T0pvP<6&pqU5v-GLfqwiaz7@Y0VP*2+w%|gY+G$Rw8O~hdb=5SJn
z%yzu|AcX+&Q=Jc$UFf;?VuU$Cy9k{xeo#)xyJ_VWNvrnv6O8xh^zYfSw*>f{M}yA#
zukxeBR(c927%UiI{(yc9_aQ(0D8&hi7PIcKcg?k)OwP}1jU(cU?*bER-0)u82g9h^
zTE8=`iDq`~?abzb+VxwrPa%BaB)JB4f~M_kUQam+*T{{55>XfA^slY4Y4@CB+{QHK
z_aHUNPTWzxZ=N8M+0!DSt%oru2W|hbvD4{uTC<D8W@QumYKRxcstSI5uhFm4qxNH(
zNDF4+^%p^Rfg0ML65S4U8Ak`~Yyy7FHNE%^HWZhz>Q}ZtCZ>N|ta;09iTDFm0n){9
z!VZT`wcOLbrx}&rnGh{B;9S9s(?q>VOzds?Mp__EP$R~0m3p;2oRr_i82cpobc<qM
zjxLJ<PVbeECA1A>53fO68E4ogtoHioXW911n47C>%|1O?pMWXFz+3Yb#wb8tdjML&
z%v5hMt3j~&C*BAH26bw&rZhQV*IOns(GlNOh+Ie6#g-~sCo6zf(rE;kK}Ap57uC+N
z_YB*99BJQVQB_Iyy};Y`RC*ozgk1JB{pV-UA6g?IIed-=+k8`OAoU6xqPywIlY77$
z@>E1C(<tWBDz6sUeTtM#Gh1S0tb9r<gGkv;MSh-AOk%rp@%IgKJxu&rO1rZZ)doy@
z3KznCTX{`+{GEdlTkDHJ7^0^2Wj_=y^HA1sLW(SX`2SW5UL4DjrNA?#A*RW(C)?^k
zw*^Xyltkq|nr-yUd>+y7cLwrJU9NF)I+Zt)_tDAe)uWcUD8s$i4wxp`Py)anO<WxN
z%JnHe2!E6Bp$=hIIU{McesFAWH{FD-sW=G}#WfSu&!e&xo?8?D|Dx;N<C*UN|M8Vd
zC9P5vvCireyDEo5R!NdXC&$>O60>G?IW1-rImfQ*iYwlXoN}0jjS`mgRW6A+PT1xu
zIgHned1c$H-_!f^`Q2{c-|hDO{i9pC^?E&D&%@*SINTriJJnZ|tYiPW&!{wL_{_J_
z^RW}Nx419sUZtqU_Jzi)Eb4%-4FVmv%uP6N-k>#T+^Qa93<6F+Jqb-C;>{@tojk{T
z7)Zs`RY5BlTV@`KcpLq!MYhcuo`D`+T#IBsY~t;Cb#?5VeX`Dl+K(Pry1D2L@B@`j
zz*GZf_je}9Y{2^$rt3;*@4d8?>6SQ9snBRMUx*9FCf4M)wXA|0*p#NT5IKGhAP<3r
z@j<@gFdR%4PT7;UQRue)+~hN>xe+eT+Fs0j4^M)*$CR@GM5qP;xkkT^tKcbgJEb~8
z-1ICI2Sh>`14|TQTd6KkWrMqIWC6^0PQ8~V@?io2X|?7c#@bIEfXd-g{c(m}uc4(O
zA$LO1+ftoSc5puP`UklO=jBHUcPr<(rONk8L=BkMm9sDd{PYF{c1^-Y>dKFF-`N-(
zS`h#WrRm$ftmuh=V%oRaKv%WdYcqtD=qKKS^qWM_{c1q4?I9+fol`T^7EYQ8nrl+>
zi#|mp*>eE_BFb+$^0a8guciRdp?*8)vgn}9D!gH^>s<MW>owb8(r()we*a!c-*Y{s
zG-XxaN;^<)h~}*VyI;hHe^HIE*Pxp9lX1f6QLbZacpbjMN~gz&28eVkVM#8mD!#U0
z?oe6*k2eUMneu(`lp`Ntu0ny*w{wWzVX4W}y8KTU1yk-1)N}#qqbXP>FMy6#m0XmE
zQLn?tMWaCK>WnmP+QA#T+^DS_zfW7EILD`YqMO$k(e@7e#kF{u^_ehq0F&sA(n)uG
zyvAE(`^%54-=LV(w1T#r5uI?>sc$kw9Er0q2AVvxip{ny=6cCu@;X`ru8I+_FcTXZ
zIQCOPibhQa5Ktvw!)6jn1lIJtDRWa+A*?5Ey4=mRP>aU~DNnt>C&7~RW4{Op-cR@Z
zhPHwLbb^DO-Yq`|^aJAJ>vbt0)7my0nPmy7wvf<3N`!_XBAWd{<P88v(oH1`<;+bK
zot8dxqnAOfvnLBCH#UTl{L>4b25#@;Zw=V}3ZSJ&IuZ2o-rP!#1L&>jEcC?ZbJj!z
z`pR9e4Y+;sI(XK|ms8G^-RUW)s7n9s+ew0HF5R&9{2%YagTC@#sfrj9N3cm6mAQa2
z6b~OTYhc3r<DzN06pX0<Ar0jY2R4CrhRt3{o$&%)M%-<m{(@f1V`C2f0)B&eTgqN3
zt#AydwJ(RBHwfddRPecPJkaag^Zm`QX1x?*dS?}<RlxJjexmY&c%)gmQhwqmYHs6y
zLFZBe_>CVx)>t7U%qj+hW<=|vul)jV9K)?~6;Std(Nz7lt=M@}z{#n_2$e1#JU(@!
zxKFD0C>u_5mL?aJh;_-Aq!%j7zNYW(_`)sr+8Y<AFv~faM+rQKQuJi6k8AYWD8(~s
zF9Ku|MXO0~r<9#+=}}4;(S<-m<KE|!Uc05X3AHCnhHY--ef84&XdLb_?BdpEVn3Ku
zxzyj>{Y565bY)4hQ+==ehAyZ7|0YsoY<N$cBvXDC_|yPI5nzaJ<1Ir}iA-IqU6c$P
zDdsJpOQU`0OIMB8m$o(I)h8D}B$N?pYanHPf@pLT%x=m$!dEy5lU1E7>iN_|r6U7g
zeuoDp!}jIpUz@D)`KT%b-rhz~S7`u$PIzL6!Vy3o@)4(8Vf_QSvP_{vwUg>gmeOBq
zm8Dj@DY8ycVFL0CNDS&xiDKUNN#6SUwICahjSo($yGWWf$qZ<3tX~F6Knd}jz&Cb|
zWd4P49VbYuGCz}cH=-2($x^HO!?HeqI^=+b_m3nMOlp6ql%r@v<`*924SG(7m6a4B
z?|HhnjX{<4Wt4r1#M-I8209qh=j<F(ZXXyLdUwwqkB03}&QEC{*{|CC?}oEGqSma~
z7`0j$h29a}gPAz728f#Q|0}18p1%sR1%#kX>;+)hvB=-m>9h>*8=-7}49ApJ=IJ&#
zB=|%$&%<%XTaT~TwZEFRwcEkgDd}_<CqmDny((2?T&I7Y-*=L5gS7bs#+u%6=k~#1
z47{gPGNhT~Lx|YIdz%~vS|<&2YR+N-L)77!M%m`fJ+3p;0iwjo51*HJknU~{JT>u)
z!3))8pjIt+bsYe64dSHhvE>z<O0yAF=~Lwdw<`A22!K&~w3T;+2YH`1)B3$_o!#Dl
z-h2s4H1Yi{akEM%Xz3?eHGW4{zn0@adAYfJUL%;%D_e8&I|E7Uz7wjy(Ry$z=U!uj
ze)yaTw|H&bVSkaI_2pAuhxZG-TV+Q0>#n!B_v!yrU`ETn!p8~+2)Na>EfelnlM9~Z
zPcYRL=)#Gb047O2GnVP?BT7Cj_|W>kdw4hSjyctdM-5roDZo26PTX_l>Qxlt2COfX
zY<3|-wnLf5C2-^if<3T;F$VxhIA-`8XfV9cOWUZp@VeJnPV7rA`>mp<EGS}^80kBp
zsrGJ;W$F?CIb7!!xN>`6zAW#azRl@4{GNY-A2ekju8wnjSsmNm+SvMGb2X=;f>V7~
zA|V<6mU0xR#HSqfj@fjy>*CcbDnE9E#bp`;zzIAGT=Y8;*0$ZV%*)EsU=sRLc!yQ@
zXRi7tycTuMVZVhA%S$?SM%KYWct_?xoWQ%s{22d{N8-w^UbVSmbLF&CapLmg;)lN!
zKSX7(L#;vyZvfh<$2|C`1t{V5fKM%?L*(1(jJP?6Q;wUE0Xq?MW8KVC@1RBCdPzX?
zVc-XgienkezL}Oh_b`j6p7^bs-O=(u-?MLB$ds}$EC7XL`GaF-ISX65fX`Ew<9vwl
zLDr7?9-Obb6Mn>+v@SHXu~Y0A|D2<hwmORVh^SK=BECi6sr%Tl_@DhMKR~Ty2&mAZ
z?fE7Q*bqJKMkpclY3G*$GpNfw%i`+ThYwM>$I-Iua4*X*{o$QYZ3hYT+$r;jSa$w!
zaZ)nwas`LSd2CSP=M%4@y!KT^(E!;0)YNn^uz_#NO)$}w5!OO>L%4haY{=nRHuF?{
zRrpYA!iG=7b#+{hdf=gZ={l6_Mwj-3B;SA1QAi$7*hRvg@4*47=?ycpb5lA)EDhN)
zxTx5#+AJh>!A$#1p;-&|e%Qg9lr-b6+ElIXuZ#7pymz6X!QSdwvA?O|PHx?+L?`rI
z7C<O@fWCulKWD(`=c3rsz?$>iw~CK!9`ScpU!Uo#;X3KwA5TMdlul~;>|7;Sa8A3}
zv$tm^=fH7AT0bLrPe<UPJLsu`NL=eUvNp#1Mm~T@|3s0MN9-#&{Gef+?1QqPwA5Ix
z=68Gg_H9Z1VYpQ%+}_?kC`FA(q&(UcyZXl2=gC`kI~6aFq#B&S467=(C3*iQ<3Uc!
zi_<L3<*HZ8w1b9R&8ir-WEz{R%r?T_&VI8$U>B$M6@Oa4rYglIR!r16cFQ*0ZyO5t
zD(Q{A=c&Fgjf;X2S*vV>Xy0z}>c(sC8}94moFxeAGxu$haZuULdFp=bMo5ayeo)1S
z?^9-uill81bHGX4U+W^?FHSVMl5&*qQhO!E*lEkg%`2}uZMlL%q1K{4|G!KGD$1)o
zp@0PJ<&u@7{T=FT9+CXCuR20*JsH-~k)L13S**|3k^sWeGf7T8Ut*0PBa4QZv)!B*
zGcy8@2OvDQYPqRd<t#l7__83+AvJYy?d!^aXDOfNe-lu5$Rmn}hpd0E>X*@ef&Q&Z
zd%5QEN%i5<Y<p7RR=4aw$O&C<eNZ{z3~qc`zBC4Fq)7~H$KPI5Y|rdWOFqZ6adL60
zjdqZjF~r!b(fQ`pZ`$F{LOTplH$!%4qrPF`V>cZ5Y@RTQ$CdO-VxE5fkQ^?z^mn&u
z=`GdLm~el{;{danxywUo>UQzp^13H>y}=Gf_9eFxL-||-`MyBXy}LS*^rtpUNR&?I
zOOu$`XYzGOYn40cX#vw01EAQe&PooFayV5f_RJWsEj6!$qE@8ry*G0!T^w>{mD}gX
zzMp1*j$~)2LQl1D0BoEUqwtnuJ0HTnLSOl9%JRm}i{XA=i+ydEfP}O4Cx6qB{@bx)
zHTxfPti!}1N~U*B#)X%UgF-8-Z=#UrG~J1skYrE;dRt?~@b<|kn7c&R9x9j!^U5Hu
zOvx;m=riA&%z7FFU>J8j+y>o-01ku2s=e4iUU9c+9YMSJ#eez2RFgoSU9OG1PtQwr
ze(WDY=M2xs6g-!G<SJRQ`4GF+Ogs50cWCFUsBUEJT=#fgRpRN`Ns?)!TeodxwO=Hz
z^KhiqU&^F|2ZQlL7}@#md3yr~`|~|K0^`1>c1k9lr2aWsnLOTtT{|>9=q0$eClwqk
z=WihC#gV>S2mLKQ_weESw;0Kx6PUk2Xa5?}D0&jGm+@dTnY~iYw*E;ohI<Q$D@Dv2
zw;QDODR4x&Ez;gW%9)fHuMalV8|F&xX7jP@WKNmBR}U-);MU<ELQFqUT+OUj=;;;?
zc+fuKE3ZoGp61tm$(I|xT}=LD3bh2%WW3D^I_dU8<@1Bpj^uzOvdV>TTXU`^9)FSJ
zr}ASfFohtFGE;TnbMdgD*0dY3*wxM7xywsI>3Lqw<3@d3J+G@H`wi|b`MMx&xx4*Q
z{>;-7*MZ4&Qum9jwu_bAx~j(p8Gb%a==r<A@;Hy4{Kyj<mGmPm-Jy&@n_wa6SMCds
zt)Z<G3}yP6J$Y2Jbz6=(LqXf>+I(vOAd8p2;ZL$+dqe@D#!;aeC*y-!o?Q2EpU3Qd
z?f+B>BJwny?23r^N_2y#uUpTaSi#ZUaEXTtuf8|fqU!Q-B>!G;MDU(!mm~K3RmJK6
zz73Q#B4Uy|C2aYHkxy>!j^Ty0f9_T>Lrpk`hh0tjThOac2Hl>~)%Lg?s5;~OtK}^}
zUg*AmfB2~=H-O%Hf4VS#F(UQ}@YF!HIx2GMUe8*(*Q@#^ZvT6+KV7=mr9*A0Apd0=
z@=h1<DdmGbM<Rhuw_^XJ(~0rL*_cfqRTu68SH;KGwK|4QR$eS+>0FL$##H7%a8Iau
zFluunu#kG=)vJn>=|aJ#?(ifJw=Y$0D-L&%SCl=3THh~IR(lP)`G>fK1>_QlF9?e<
zEKpmHk<_|`xKz2^HP&+eAKDTkpe<2vsr_5(puzdwVE3<J6$%mcRs5i@xSLqP?B!_3
zinvQ}lx5hUA=W8_v%BkG^EvETE7e!sbMhq4!)p#c1)U}Sl>_c)B`g0U$jaGUd$&%~
zepGedL27$}KM$(S8-p_48#_S+?zkL&bD?Lh<4m8L1hn$cQgKVXz4*avZHC<8%+H*P
zp<(w=HhZ)-*zLL0`t_gEWr}8?hZUlEh~8jYZ|r|}(A~DkizdKrC}o?hsEWasP0!6n
z0iC2<e2Gy&?~3n3t{p}GhX)%BIL;OLk$1~?4_`YHNdp<!hLaq*x}!{8$-O;qVBm17
z3uGVB0!?3TeO2ttU_J+S5VyZ^b6?Ya_F-zj)5*Yq&!N_L*Ihp2e75UPm2b9)y6?+!
zVECeJ6vj2&3QpDQUMnn>T-!5aD9MS9I5UIM{zT~V#J6i7Oba~(dfA*0b>8Vdml~2<
z^}c=G#$A!LKj{swb9F~tz%#t*4JTP9B=fc_+$5Qq^7;J#;WCI^66RT27gKcp`kajA
zB>MvX1I`=n#k+-*A<k*C$2P&Fb>%23c*?3Cf*>MIu`yJ3@^wXdCFgY?7UvgX>->t#
zjaoDBa0)Ak9<zF)E6Y82F)yw9(S*C#vjW@T-@8Ag(=u<|s!$`^Q=X&daWJ-(=}iYV
zHd<M2HS9wOmto_ySLOK1-uMMry`z()S`AF!x~lJw6iKhlcuxW~2XjY;wg)UZP<zk)
zAJE|SoucN8j#Bj7JC54}PntbcU;z(R(w<8#`(9svY`f?7+S-7JSG(>zUpl#B69E3z
zu}GxbBvNT9E4#9yGD^q8-rf}?f4SW1<m=T{RZ)A-W=E|Cj=<JOyHiZA*j&8|xO9@i
zD!v0ToC$s?7g=qZo)wqpe}Ikj*6)F2HPwrxOprKOuJ}#)N8{J9m#?BuzL;2RlI&`f
zLD8>NxzckYGNNj{6NS`#Re^T_Z?%06=#Cm9jpn5xrjI7mK=5>ou#o=P<5b#0h_-J+
zz3#P%Dl@ahC~>%h)tGayZ+TU!ZEQEm(J6IB@@#-MXiBJv#Cg$$Q6ZYzX^Ji1W!hCe
zw^=4?L2!O4es7(GW9F1UlLka))3csY${n}ISG$Mg69_L{Kdt=E!m>y+l96Mg6dN#)
z9%0~z2_3dbI?un26TYCWsVV1AgGLYbAX;>xu=JC_{Uq6nRb(U88M~0InN!rUj<8ob
z7k1`JKH=i<uyJKUMgc))006920C4kpBodd0hE2R0TLEsUQ)EXz$TIquU%wI%V(|a1
zsfrDKS+5<y@Wb97xe~&Cqgfpq()eZh6SeS+c<cBtk6cxhmcYaPRrv=%lb7IOi_6H`
z>xNW|91nG@%oK2=8#k<a;=P(*YcIyC(i#|I%tqIENsl|RW(r{77^Rbah$m8j?CcXP
zibHzY$!}HXnc&8%R%|jm@v(F%PlSdI)!hAR97+h*mymym5vCtj@p)XU-7wA5aeCGM
zD}&%_YL|mcrSdOiP`@+qOEsWA3;L)E_kec(pka$M-~=Tjql;FI!a;)hnJ4nwNUwW9
zTK+`UOV<fOK;{i;e_LvmIgNRPxZSib#5ttP2GG=zH#>n)^-h!anZ!SrNlj4npFRH*
zmren`9Z*(S34kV1&58rcKgqP!w7*Bow_~dCZ|M&Z)4sV`HDbRNAW80peTpdciwk0O
zf<jd*!SWDY^p$Ea>!7!ojhIllfELR-hq+nJx5pcj^v4;uqtMsELo4YGPB>vz)?sC$
z)h?<9=s*%?0T@^Xz5$yM7Mmc%$B%B2P|d`S8;sM}S1f?we|1oryR4i|u+mCu39YJ1
zRc(GUXcMSW?6-JzKDE4bVqx{NPI?0dCoI52?wB}SIr#yiN&5!_IZn|9V?y61+$K1q
z5m^Bz2ZJ)k2EVp5+*GOM$s*Y3xOLNFRrC$9>s$oUqbC4Rw|$P9LG*iu>}u<u&h?&+
zJO=J?ebD`dsOd<F04fI`lDh*i9T+b9Eja-(1v(gG=&c?Ux>rx!!&yti5&=ct2s&`D
zNmmt>4N*vR(LSgwP3)85s2#v6Hj9f*PwU8UFLCvXq~m^~meGZOjaGvS{7Go0O+5M*
zGiWh}Zb8SU7vvTLzbu)0O!PKL-CcgV#?-tv?5afBo4C{=6XjSiJUkHbyxZ_XxBLR3
zMUwov7PXxr(U&iyf!$I*69?c$G(NpD6fini=}2QsLUSmA%~pq??}D#kS+9L=nXC!A
z*~{8j_p-Y8=1UE{+eCkw=|Xx;W@=%e_sW0Fz4By2%#NkX^9WGi1e*b@PxO5g;CK`Y
z>q|gpb8jzOqAGf=P|LRwbtb2IX-Ub^g>a@wzH@I%f_VI6P-gh)uIJii&q&0BVJR`W
zfCaNouOr;LGTN?Z8c+&v0~@~<SKY7J{1YWh;lMgj5|F=6y`f|%)bd9BnVS@7p{pgf
zC=a)R>Rn(HA<AHC(Hnil7A*g7Gk{$a*}=3Wuk#Dbe3~CcNj7oZIDmI3qFfihRhc9&
z2WC--tLlui)Db1Cw2W5v19Y}jt$EQj2{;?GDcm)+z9I<#C;<=S&M+nFC+ajbQ{<aX
z2(8JB4*(aahlQb$LBbwQ(~#5=&l(iXjotvVT*4}_JFtq)(PI6#I9<5<B!q6%ArDqM
zgZ648Xgt!mwU@-1jlVo8I8zch=4pLV8aAaRV6~gYD$K~M;;6pR^r4A^vjrV{m7+gY
z=Ho!_8=}x9&kFs__c6<mfAE#ec<vkB-42y~mM3Mi@nMd#nG&M!I`h~{<x^iax8Rww
zFysk9uJ{TnJ>2dAxa0kY7kB=Keuo(vLezZa*N_n$hYrZ7Y$;LL71RU0yqoL|ge(&!
z(^6j;v8wY*mnC{kj@v}BZ&{2>CSxr<NTrjsC9?Sq6m-LrPZL&qm`)HkKP|TOcB!#W
zV1!sF*-vGDvI#+NQNCnN-_GVKpW=KCPc7=$Q`p#kXZVR9HXt`<lX%+QmR%e2{EO3f
zHOg?eF5-UVm*^9iXeM--3?E>(Vc=hIZMs@xX04uDje6*6z$A50u~F!_oU-e~%`PhT
zxvgb-R`G?BqT{V~EWoHT-zzJ*d$)MxpHzY|uv+SM+;YNO+)+Q3ucLz)Sw37Y-;8uI
z)o}jkDD9Mt0-zi3$Qtzz)0uL2NU6@9G^f4Eo*dZ(dI-2Ab7b3Nha)XkXz41Rs6?J&
zTG?kT_jD&&pXdRs)cuZ2HOWHYtv@8oz$whNQ~n1m3SD~SCn}AzOfgIwp;s-m%mS>h
z1Up6+1dg5e!tfOr#V_Unv>KX?3Hp~mhh7ciP9^|*C5kx4{HG__xLdNv+p3b~IWk%E
z^i#i<hU4Z{g7-ZtV~Hqv1}Ij7!?X+@2L45#GIx$AzzJ{Cbb98Wi0VAv)*pcwNt{<)
z%zAiMgw)Y<Ck53pT%Gu4_YVnQh*r9gtlEbKlb!e`Ne;HBIf?d39opkAUGpc<Uo(*1
zI!e}0)YophFHV6`oCjL45)|zy?VnM|oh_J>-BH$A8G?gxB9{RK2w|r58{e}V;4&^>
zgZ|aFjkdg)?O!pW6?Q8Q6a_L!9!;hrTD4Gr%&2WG-(*#<5s7nDGB20ha<INsQ-e~*
z*8qFa0)!$bNCDTm%0KD82KLW(q+5jNmMYG@(&X3Pe)(xD27l#0);rzS9eiIw8u&-W
z=LGJ_XcBX?f+%elvzyt;xJ@SegPHMoO~pO&XoA(TUdi;qpppp3mJzdlw!%(q02_Ch
zs*x-%#LhbRl#M60wvMRTUkQ#K*^{u*Po)zm>c%0f?c@Y{gEh{Fo<!efX&_%k`#_Li
zX_uNc2sFz<4gCBFrU#o-mGm}kF}XU%(tl)US6R^T<x?bW$8E%#OYT-Bn$N%`On&*g
zytcNSKVE@ClC2JbdGcJknHlS;`Y?n2iQcehx?XeW>&RN^zQViGed=nhUiukt0R^qg
z<qk2dIDSv;d7<5vz8>@iCaDbr4p4f<^qb1p)rU{L#f(qAzz<KRE!1Qx>LX;ip@H;!
zR)3FuFPr%io|Hg+b?IpC_kE8>Z(eNEo)N?sFMqM}9BT22%wL&6Ct`;*$y-j!f2FFx
zNm5oVS~CNi<O7{aBugx<Oj2tcemQ<lMj(}Dzv@v>9&>lkU~)QiS<UY>Y}9HZ!?9rF
z?p0N64i)M*F*Ov|0FQ{S!XH$;$SVcbFDUGmMPA(Q2!j*+@!G1F9!k4XEW5C}Jmt&G
z%Gb4iRvo??CLNz%4%r-hvFwLrsetD(3fVZq2V6j%SA?5>qThf6r%@+b)(WeGXdkGn
zQ1!(g%=JWbKlmP9+;L_>teT)u*NUf_6!~qS{CSNM*J2)*^vQqxYJboz>Hdm{Q^(gk
zs5(@j<^Wulq1ZfysCkUB2XfnZ>O2A#*5_7FKZUHtUR=@aO2sKSpD3E$FvSYZ8*LAc
zP>uSxrhh&n+yVNBwzr2fw6!zdy>CRK*J~VMzS!^7XP6ne19%$NU?G9~Amm!1l!?@h
zKy$?p{43Ri);FqBuT2D!-SkK+{b35d*?c!)@wUd$WHoJV%J&n!bGo?Zaya~IFMEL4
zD){m}LjHAOVZkiyd=AQT0Z{`zC@T+uC$&=Dl#g_TYzbMec2cfKT?OZlk<|(HhEj*>
zxZt|86q&p+J(I~$91`9O2DOYycfgtdz-u>DmLYB??VkwiD;v>~uf@O1RS&#SheB+Z
zK<6{zGEh8^Dg)&BLO>s)Lcjs2hwzy*kCWDfUk7VBE)Dv~Cz#%h=%lsM)<fa#BIf#Y
zw~akRPj?4s*>wlK@mzo0tH~ismt@@A>o&8mHdX9|{>KsUa!cmH$nBN6fd6z8Y$5+0
z`TG#9?I&uTw=^qPs^2Kk<;Bg102ekzVfNhLYim_6zQtWB;|8k1_9vueZ~SUjJ*9gC
zg`GbqwYjYC0>Y*N6s-<<&xBk$;iLL3m`Y~DaQG=OdQW%S$1u$tVZ<&6^jL6btmS3l
zkNN|C<-3O_tc)X6Z2E%?*N)1`j<JFXtg*U|J%qe`So0y~1}Se+^X^AgahyWyiR>GA
z(0^#%OehyX?}wQc&GZU%RFI>D9#2~V?a|Zf6-T#?9Eg@=>GV)NKz~JHe87B0#st+Q
zZ!+4JtOhj6|J1%jOelt9TV)QQ5l{03<^!NY)LSiOCeXG6tTJYULaQiKtJO+HdgeYT
z!c8sjZd6QI?S<+~2xWfmf0g$dk~!^s?_yWMu$se}_um@F-+v2`1Q?E-{Yz!B^CM3v
zMGqM@o$i_r?gXj~cl)^|$FYvw-uY%8oSaw2E%p#tt0Sc~SF7U-s`*+MYwXCYm@B%Q
zZtasBU#d9`xE>#4s&NX<C$c(a9Z<!>4Ytb|y&$SysW>V%o92q~XiBau7!bo!kLhvq
zDfVrBdi$a3Bp<2aKUsT|-1?}#B}C)^6dJQH?QH+PT1a7<zBd+l6nE<Ss_(K;bk}q<
z#g-?4L9eFUxFi)!=b?$k=xc<kBV73)1vJ_b`G%Ye0YewkS`7@NuRR&pIkv^ChxhpH
z;f*IS@AMU#NwP8}m+sFKAPz3Fe_?Z8<#;nAE^8$;{=o7G<ZX!y&b1Mas(Kw9*&F4@
zRkxerk~gvAxuhGH`#!Mm6^%A&44Xc=*(W7*21H^W^(>n&oYt34jm=KKlY1&u;a)kG
zKoX-FR$HW;FmltV8awWCi*KvT$Wgut7Ue&pioE^xnj_Vc1c2mIRvI@7k|O*&f}<mH
z@Du4B+>~7ZWy)T9Q$JlOnq53qp8;-dP;4;`TBcx8fx{N{5*Zl<M@h&+epS{0`5T=R
zke0+mm`wXFntcd#(sCQx>>*hkgtRtTTHqQDrU*Th7{j>O)U6~cNfX3u_0J@=)`XI4
z1J_!J`&B2IiZf<%u+h5mfPsf`@Ux$&b^!|c4cvn~0aFa%|8iT!73GV1(~*f#K+b<~
z%Go@tTA7gV_Elh-0sOpGk3{G-aJb#eip0I17L5oRv{3>c&XU%eJ`)|%FUM^?dxAav
zr<{7qBCW{T=zcQ1t5f1FzfF73<c`Z2(<Ts!?njR2ZM0k?#;m0j3Tv}4HGR9J^asXs
zjONFl?Jp)6gc6Dmkm)6ag}kicmK7BaU4RN6h0F4La;ib`+yx9js)F9oB&#uH2l1dY
z4!8@%h{H&5&!)Dv#f*WiB%eRLj54$yx_h2vo%<nvZ{k~X;NM?TgV!xXXrL*awhJB~
zQ*Bw|Hq@-wAIY>AyR=~9X(r%)LSG~u?zAEPL~VzMn$wvHRF5!$DU*1^J1>Jpzucp5
z?vwm9GxI*ZV#s}{Y3=E3JwO%1VnXLe;e%L-DsYIN_t*b&O|b_`i>%)bi1*erMRU@)
z`-*T<#LA4RkxglrfFQ$-=5*Sd90wn^+b|*39cZ=x2>M(b@e88s@}Y)f=IneqTXm`}
z8LT;k8^SkRZIBwph;W0W04<D82#(Nl;&X61uAO6^v?aql%=yEeD04UB6%T(6%m0#Q
zko3mG@Ot;``7FvKEGvNY@Q-uLzA+UWl4No)YfR(=OFAm@oi>phw#mIIX3bjW<mOHc
ztVdV#XQ)QjdcTNZG*#9A3WnL<6zaaW<zfASZqEHYYz&umW~Tp=!^(Nb^{#GqdGO=#
zkAOKr(1ff7_E=Q~Cd$ZgJBt#HtO+E@tthniw}NWfPgLs^c^!q_dW4GoShmG5n6Yi&
z{ZeAhOv2GF&IHh=lzVk?9aK&y<30Ls2LxrBe=|oZQoumb$S4!KGCSBWVz;uRc`wJO
z=~|NeP+cvdkZL0}V%!xeJ$D0TE+9f*rKkI*=W>hrN?FqJCYXH+3P=bLtS^e7>pq8r
z@Dm|@hWCo?Xv-Gyz$Ag3Ocd}i8z@G+8=VYoY>Okj&xbud2(`D+RC@pqhU%C}b)3Rc
zY)9QG?A-Pz)RwTiqHn$<(2nEjYu6jV(eER3-i>u>Tr&U9CHGGr*1;Q8#p4PM3uOH!
zWid{ePG8PN5AqxF>h+tczrh4F5ZSmYY<JXcVEGAnQDyT#%CMFfy@|!}h3^h&*Z9Gi
zm(I?+rg_@8ON=D!o!okoxwyN{5w*Y=0*#RjWd)B&9&8fFO^XOnG$<X`VaCw0^SI@d
zv6hidjApC7(k=ZU2HWK7NzgkCRb`OJEQVdq@aZChF0xUOeMi7?E6*F}`M^*6XcWZq
z8<^5W>4D{1;R@yf<SuW}G-!YSssJ2vbZ-m#kgCwEaaJ2<IzWuX8S3#eLhf6zoqNfa
zbTNH}4Vw~r`6Eej4%3|VOON7GXAuCOOljLwlH|u{`De9FnKzdKCle167(B?G9FH$|
zd5CPK@$ryj34L(4klf7M0HjKR-~Noal)xZ56uTb(N6^8D%BurzP*_vb#VJ8Oqwsxj
zOI1~!FQ0E)USIvH*Xi6c#T~%>^S``dm|V;{p70S9G{!vSp#cH<Wl`F+x3sBc6ivPN
zTtIo!Fmm7}^v|7%kzEjyU4JWsMPQQa%U?0=dnB?ELR#bKv>^FG)q?C&r*9zHB9elW
zER*ZgdYR?eB*ivw`5EeFI0nMDxPN{r4ZYu%VvH_tDQ$S}Pgqx7W5ZWgp6$u+4&Ex^
zaY{ACVsT3VXTn4WBzo;NYf#AJ+MVDeMAHOem>BA@TuKHASh8w~0DEM^4^jrUYPonF
z`#4j3vDi&uvr@(j1j=B|+5ojt{OQa><-o+9lZAqIizeT7&Qsg{mi+*J-^xv3nFeXS
zctBX6jIU(3GBy!tE8&xL`7cX^vr+DVQu42PB4(Z9#4D+44AuSxERfB%UL=NE?WnKq
zsa+#v)tFXQBidEbP35+lAP1sh=mS`Z`i8X-^hRaHZBE3#PB&#5&R3W0!r|X0aXo!Z
z(D9%veeqAta+`>vvS(!RwrqYX^4aH&=CADsO{4IYZM*aQ=a#`sg%C3^ynFyvft($a
zMo>~l3w<4I-?$hWX>3=!6RH-`n<Dmo3qQVZthwL(X8rCr<^|dP$S=};Z^RuQ4&7~!
zf+P0EB-h1edOx3V4#gIY5O-)A(uD~)$XTbI82*MnU_CZ=GI)i{hDtc#gO*=`&0|x)
zf?n_Ref!`3^*Qm_hR>c`qSvCN_&CkcDqn?0oJ;`UxR<XuBqcX71mhyJ<k}-IC>A1K
z5>*WwZ&HVMmtHNN5ZJ~&X+UgxM)bMTzNc*aY>$)K7XG2p&J@M*A~#~W`-poaoy>#g
zN8zL4$RF$i5QQ%MM0I4M=-V)mGhXmS_DWewC*kA0Oq5(IxSQ89#>}FojTy0b6}o!c
z=xT+HOjSP?XkkIa=Z=!E&ez>CNT6OVq7>sah=N%5JvKIhHdHWL80&F@KOKoP-LEpu
z9?+MG;0ACqrON!;ZE^=dzSks(OQ=1vD)%`NP{Dhp*8r51w{ZC0uDE8JW{=kq&HVhb
z!WA31Rh7>@2mNbEpX)eM2a}gI<!?~PA3X6Po?sM7)|UkWYX<=9oru>*)v>q+9&AXL
zBtuEa+Cx%(WUY&gp#oQrX|+21^1WenbM1i=3jP9Lp)O{`8WMyZIBPhVM9w=&EdHt;
z`e2%-Lp>I44HzX}fQG*Ui1ct|Z@=ZqeJmgzBt!$;&HpzA5%Iq%2zWvcI9rKyV99W@
z0pKs)5qMD4#I_8a-z<C<Cklq`o9i)gwoqXbjysFva@f;-kg&XWsj+%>YdH{EEYRII
zPaE<j>`kdw<}El<A~9@0`=w_f_r6A0=v$;um&lJ1`o9l;YVvtuS|Z&wf7|GD?CGjn
z)8FB!qh&3n|2)Yc=x&P0x?EENI==p$5~nruwkiDJ43K-*YL0LNVNE<;(=t^26O}--
z?00Uu(4FQkWu^d@b4qTDcEv>4aaPKcg0lQF|LXpzCj0VAerfZlZ#lQRD)Fe3%7bk5
z&))yVLoHFZ+@^nCJ6ay6{N#dg<J$1wf1)O{(b+s<74KU@=TIlovCx8FG;fSNiiUTn
zDspCJ0IpO4(g#Wp%m!TNPgHTF<#%K~Kvex{u#^d12;eRDVV3j2Z-7hnH#l<_=<k08
zit0GoEs#$yM2gw#oK(jd3SAIm?WZo~Wqfpmwg}5{{ZAA~f_tLqY3fUL`w@_D`u8vD
zQIK3kH)0kUgq~#zfF@`V@xB4~uQE;vsOG`jZ;WjL<zt8cA%_3|p=+cE)1g~hiu*j_
z^HG_G@=xAenk)%~eVUQDCJ-|#7+I#^EpM8ci}z}?*Pn^Rb;*%+O7KMl#U1dfFK`-o
z5n6UD8~qh8>;H**VytBGrU$K#(<e)$V8BUNmj+zQgh&iUj)x4mBX2<GU*Ai33ZW~n
zER*0NPt1?gbP1TAo6h4uQJ2W;KduDRIj(q)k!gYHv;(=tqRynHNdwafqKE(cbmHCz
z0LT`oP0$A}Bj=N3U~Vd%m07&`OO#WQI3^ReR6#E0LXJo$L&QX0kOhEu@Wm1`_U{~#
zqg-<ir!)cJ;BPm8-A|;ydqQjH$%01Z?`S)mRDTHn%d`>!MzDehz8pj@4VLujAM~4@
zN<0n3$TB-X@dM6gbPMiZ8Qo`8Zo*Vf;X$qWhk7>pQzvZNj$FPh-%1~Dp-<^6g0s={
zH?z^-VDKOEfk`qN)!<D(qN0DIdiH_hP^SM<*$zE5i>#Xf)7hacrcV#BaP$5!7T{MG
zzp5zJ0c8P+E-d_s`u4aJ-XE%Dnn{48Tk^eaZW+|EwA!kRfQvqJ^xF*_XH=OPGl~?W
zV?mY1lX~JO>JhqiRJMP~>YwiiSw-M;G-Qu{d)S!-Qs3ct4c@#R?ZcnT<l}PcPt?0a
zM1YqOm>e=vG`khlcpAX{jhTE0%A3GQya$AeX!$F)l88>>fu-v`p$EQar36gTN#qkx
zW*<aWy4J4+pKAAC4u}7OaB!cVfCc;`f}y-8013iB!6{Zn&^q8t&nO@BrpLIWN@sT^
zik|g99|9sM=p62cUB5zO4CyqJk-%$Si_U?CzM+jm>~X^9%x{&WicJ>C-!`2{CY`W|
zLO1}gHAolEbpEg#Zz9W&;A5DJRaTaCaDo67!SMeim;#4l+5gI^qdz$Ug)7B&w44H_
z<Y@is>S-yI-Yx_^RWYX8UvkS}3ouvP6?@0%o9v)ThY&>WD&6-?SOPkjsCIB*Fd+v{
z!uPN(ZC*^6w@-z<Bv!i!QvRs9DX4lGj9Nb{1D_lH7$?mBiK;f6{vqZKmb95`P0vGx
zZ}qIw-(z&~3JnOyn8R;@E1R63i|rXJ{LQNYVXNXSrxI#qg#rFUo=h_>cdDO}=S~<M
zD*x(|KJ%zF(g$gzLwDmO3!vQ6S%aSDLqjK(%zAyrQ7E>k#EY^QF{NPJ7H8wBy7@#i
z6{i{~E2)Tr78f=p-Lo{)t28ZS39L&e7OP4~5iI{-+e+v@$v6l8+e36=HU_#=C=r20
z)r8gV$xRimUG*voQ`n=7ShMf-n4y_4ExI;1+h5NDukIfbwh%Xm-wgf&XG*s*Pjyr6
z3MOcKqT0_Sok=D60<t7*SwK!@?C=TPbr2Fg;c*KU+jEHWO^QPwdBEBZj0@W&I`U%_
z2X?JK6el*5Xas^+gDe&mlWpSzfR^O74y80c55=zagr*w1+pM07m>Om=ijymj*c8DR
z_$>>m^_tPv5Tx2Z3VGrMzKB}?7;bP(v=9ki_#9WM)x;QN%7UfX<ngR8^vGYo*6)J~
z8C0Jf+X8>9tzF0gN|OydE<cHj-PgsG)U@5FnuM0ZYlm802x4_7SIUR6w;vsZ5c=~b
zU~7;C-t|tP3%EYF7uad?ec)QGr+Z@u<zv206V#2qTK8!Nw2x+9TLHSfb34Vndvb=~
zWZs{suqdMSV^)}`rZ{M-?YFcL+jqu>ZRt#|HC&Z2=EknQg6tq`O})h=;UGL35MQeu
zk{%uxl7WRTq%Q~b^GD%L-MaR`L$llng$$kVp>3j6wtTcI%mu7RJ(h%AstY_yDxsd~
zHU>sv`WY1)DqTK8SA&U8<-Md@-Q2>5WhOig6qN^!BkD^@tp?EZfO$aMOTo%a`U)XN
zN|3Gv$mYG0YPEolk+<o+eMu!l`6HR3bP-0E>IRJ`&22Mc-AoZ33|6Yy^ESNO{Mh~Z
z+1N-c17#WSH#F#m-6-Y7&~$+>uA(>zv0J>3b@8u3!8}>pgIaPPC97rjOZNznEyAy-
zT7#Q<t-m%mf6hQNC);DnkxfVnEpU86sH$45dS>`lb=XT2oSR_4(1IL-+Ttudb7?JM
zJ=(U39Npc`VOR9_z#U-A9BKY_qUH;eTr|+arr=sJT60(}%4N5dzR5kkmL}p%K%=D>
zL#><$8+i(l8r9B!plEcY2lH}VaznmVajl!S5+wFkfO!}ar^Vk6im-1)w2$~@VdGk4
z?sM&g{0?E~Mi_lnY8z8~{Z^0b*Y7r>OtN!&n`h$KDPH1`EB94-yvm%lJs9d8o{(eS
z`mE5uk6G@cFs;c?F32Tm7D-2C*FVl5WzB-Vr`Y4RHhuNRgvAdG+N1X+q4|@2n&w%|
zJ9{|1%Bq?~*9|J)EoAwCj?=GmpitbJ3t7vuVGkg<0;d&B)Lf`o)GLh0A=c1xa;HLm
z9i0$V$JM$4`P^nbwDiKWUFZAKv=Ht7d7=Z(mD4k)e#*l$(5}~b>IC{fFH|bvd(ihb
zoMvsH$T60_PH~_N9v7>o1P|kytTq4%Mb3|T&(LObS;?K$K5Zaqcbk21LE|4`(8iXn
z_X;V(6uS*7G9t3G9Bi8&kb3%y{-p&0*MUO0U*-GnW3rvfQWDPpk$lrNg_^V$&pjY*
zR2+AF;6S<_e9zK)Z`%{yPv+et%(V`}LDF5ewN%eA0?}<3ZL%a{5<MFC5QCO2+JcA@
zTrLg%^soQmz5`1EOansubJ>qVVdp@ltQfShIhaioMVR~b=Dj?^E2_&2*hntYaP^p|
z-_dQ-vHf-LsMnj`veF>Hv1RVSAs0<%8THMFqt_4?cOWCReWI>&qra+7_$sWyWxuir
z6xx7O(vhSDH{y>)C)F>V4cLJ+85;lr{0@MFjeme&UK=XL3eb*kq$^Y2KuuT6t01e_
zA_L}HTMIbZGB|K-h`r7aS?;Ol5mH{4(dwQWvo5T(Dh!t%>><}Nh(vd_&%&l4QEyu~
z=!Nf;YkAtOOlGzG+cltwP^Ot!^d}1R(@z6spwZ+s_mteAzhg+#w+#cx0iO?$iDct%
zdjgihnWcV<)u4pvc%px<&iZtJki)6(c6~u4ulHjYdV?}uF1&iocj5;dTFo2{m?i^E
zeX3yQ!<YSKhGn}RZ_BmY*d2M~h00tdvZfMzv&T|`Bh||ozAx?^Y*twHb2<~<_dU%8
zbv_`*K}S#3?}Ci#?uv$zCKOol8WPn|%v(W8>~Gf7Mh5yxa~W?in>>ah(!6>N=hY0p
zeu+Q5Y_WQb4O;*at>7{2Dhl9!CP(6KI>uEadp`y{Y~r_Bt%S+a-?7`^a}gIlc$@|?
zZh_RLjk$&LyKcDsVI|w1=?;xl7dGA7eCZRR`fS$aNSZ$KHyv{99CAU{>WUdU6U+)m
z19}tnR&Ooldi@^h2*;#Tm2#xX+)P%M1Gu@g3sY#jVMe2#I(`$;#Y|%uusJ&fD;!G)
zT!}TU&+<G8UYLIDZIo3R43gU`)_@)STCo=P9m6Gov<vPAi`MoQkLGwVfaLu}sI$cp
z+!-6W5!jQJl-8UQTOnW>z-+E{8#BDrcJBU=Q=fjfC61PE#URmHleaq00@<6XJ8MC&
z1{pR?lRO1);6m(X42rsp3)_#8<LDcyCsiK?W0ooW07|FURwU7AO)4Y^3>T7WjX@=^
zziF80*cZ$~pXo9t-Si}CEqczUB;}>@FU_>76{F->*&j>(B2Jix=cK)zO~5S=#;pOM
z615<5qL=m?h#qh03kW!H8gru<H#pGwP=i?ah;<K@B+YH3Vao9vzqT$k)nxXJXuqkC
zv+Kn&&(?I$d;1g#P;|4Umh>4Qw=#vSU#A3gYX4!XT$TmF4h0G{{0w5B?+^A2ZK%<2
z!>oqKnq5HicC&Vjj4L+OZ&*N9!fDW#@CdZ0bbUTuY%y%+h6qyB1LRKid>u!U{Y8(L
z>v=LTdC`9W*9TWkpI#8t2MgO4Re|SIEm}w+2lYu?W*cxT6eqiY3}+{LqBT4gaxN;S
z$i>yo;RfV&{_c<XT+fTfo>;qnqZwm+HLPS{&OVcD*ZUUdz!Rq601RTgOAf6W(S)j}
z9pxC11<U2#Vy}U#n-{g3=-a_1oUZ!7q|T`OP{F8w{U+$VpiOcFS~b<8hw3)TkjpdB
z8?bSf4rFvZ7o$N5z-awrX$e?IKcX$bCK*BaqtG1;2wHBwK`*BPhqQv-NFOYb`AOqa
zI2QQLQy5g4v7?47rPH&EY-ni<7&)lt`Z#34?y)(*l18dMnePTiH_56m!l(MLN%fxi
z)A~!VO*qS{vN3<NfCH+;ARRa;C{(eTF1rN-rcI&I6OrR!k~lRQVmF1*&`^I8putiT
zhZK$tDh}lZR6#S0Qh%$}aEI{tszr?Y*LEL~<d@HuW~3K(c@tGQL3LQ_bE9CjNHhar
zU2%{Heh7=KeJaAl0T%_a8dU6t9GiG?wA~r4Vf6ce0T$mv1Jr??+cM3Zx(-^phzXX&
zF;K&7k+GiprMJG$^LytD(k(ujS=Gg<{DPX=@O%`KfxE#TGC<ZB^#SY$Ix4*|lIM*X
z{62=iUsk)Z5Xe7llj6rfpcqS4mxi{{HphA-fp+icR_#^!axaBukG2PEmw`=};$%29
zbfQKY7st1gQWvatJ-J5K0Bm^ibO?_Tpb@pbQZpA=SICAB%)Vu>MLu|`@#g?{HbxD&
zKT&Pxd#pBq$R0!Jnad1qaq+SMP8^j~)koViA-E!2v;o=gvijY&xChijfw@FYWX;FR
zZD!iDNhn<AFH3RO`ZsU&ECCx`ryfOL9NMJ(9gree0<nczb$GVHYA^pG5D*6^ba$y6
zCAul>b3*#D9If;Vm4$<&L-)$<wKB<=XFAy+nw$92gslGow#&1@0XO$+RE#pg#3RYW
zo=BJnPC+bA=LWB*AZl}>hkO9QEU*sz-EV4xiAjI*Ia6vY(``NM4Lt5{UkyYk<wWEY
zhRalJ$(5yl1c0<FUDFCTsf9;5w9tf!;jICTW!BB=xdhEvVHs0|j-zc#yDW`+7;Hbg
z0Zv4KI40oD2?P+0+%lrsMfc7vQ3L_$57hylRGp#FEJPlH7{(MUbNq=KpE!Y0B|Jt3
zMj^Y-A)IwzFa}K=Me+QZgZ$>POVQ_~TgozuZC3XhC)FL6tx9d2x(JOwtW_IhteMhI
zePorNJz0|$S9@7R@}Hh?=g6uPe$U1LAcl0SmSS@?5+65x1bjGuiT&Vo3yOwOT!x>>
zy}`xqMJJUoH(!H8ro^)nL-{GVqRATK-LG9!V3X(Pe*EzxAHY`*(~i4b40l`$TIr1v
z%ZJ*<IBiO*2T8T5Cb&OA5iz#yAM?@pYbp{p9NUJdT?T43;L#aca{ZsE?{nGc4lD|3
z;c*>753#_FcZ0Wrx?cK$EkAE9Cb=}4fo#;5^6D<C^>d;-I$bcX*c0kL-}me}#n-k=
z6f+y_xCxHF%BPxm7u+xQoa`ceNISS}5tOR_uYQSicG^xJNb93Rc65P9Gj0R2#ZP9X
z1wYMmr9_L;TCfl3+Lk-T=xK-RgT4pCMUL@ao8zuPp$~&t)=jismF0b;T%aAZo~TWG
zoePv>jRm*Uv!2qH$&bANlQjy|Z!Ctb7C#J$RHyCpu6Yg)dw5I=LYpwjk0-USeQ%W7
zyclRJp>??zJl*^G&y;G@q9Q^~O4j$&N%wAq-o9CV2i@p+pIM2QJOdZMsWPYbZULY$
zi4b=RbjCUvCfIFMFPKqm1X!9^tqE2Sb*`1FCMtZ#@Y^VrSD>~i%flwT4gQzo1A>Ri
zXX9M@=M5aRY&}>WP5_;PlBWS;h5)8Q)3;GiTZ&FHArF*zyzZ{W=1h+4?2*)(NYiA2
z(!%%|W2I)}*rmF-6HsV$J$9<zNP4T<kjp8`rw|)!^eV;2Lw;lfeP@G<Ju|G^<0#k~
z(AC_>5r3kF*lk(+VWRvO#Re(51*Zk;p9NUPn7?{~_+X|%qwEmArC{~^=w^jYzhbw@
z6MN-#{Ug?#a{YJrIFFu=vgeDm%wWA|FX~>X4&gU|7;t13l=m7(m&4U!+(Y^e2Y*nv
z#GL2>Wujw><I-qZn6#Bke*RTf;WcSy9{PZamJ*wRG{Op5U%5R_23Ua&FJF4PJ8<QH
z^3OW0*Fe^=!K6M_mh*(EzbdRh@_fgD<1n%UetNvVNQ{leZ>v4ThMzR_W&K)VuVX>q
z{*?*E!*AYN9q6WBFeYMQ+gVMFhOUZp_rFPU;>n(1pz@m@`*7Lf8YvT556)6lhQb?m
z8DqxuWoaqXtTyseIBIP5PN{~-wrMm$hTBLr^M3J{xOX3vl{>~rwz7mq(uzhWc*O2A
ztUwXT+NnF6mvQl<kuh_F2O;c3)-qpYHAZd?_SJ2GIM5nPyAS5%8NITwsZ(Gp!YcNf
z;}R`{pDT#w7ZQY+Rn!x`L2pQg^SCuI6R1!^dIvybIvVYlZc-f|WPslUC-k4~;v7FU
zc8cFWy|9476k?!@48a((J_J`D*Omdqqhxv@6|s_v?z6-g-IwCUp>I7Mn`npOB;aW-
zBlbHl+9q7*@QndW&sgw$!TnM~XqvWJ68CQ!W(3f!P(WJrO3%N&)Z<&;OgTql+O?)b
zfoBDL_NYkOD1dq5lm8nZ47N36G!)x}9qw%>`Yk;`1~wKDIVy|=pXap9@B;$9*HVvG
zFIB#!TQQ-p@7-Oo8hY)uDG-{+UHq6Q-R^#gl5~;;6xnbDHoPlMu~{xV4%?SfgOoWq
z9|wBF=vt~pc;O(0(Nd$|jEiP!?0{xvd5o2*Ib!uAfX>EIdn#QoYT=Z@wp#mQLTZ*?
zWe?VP*y{V`sD-P1(oCdP6c{k5S2r}`KuJ=ADYU7c7D3Fj@D{0o=vH#sl=*mc5IY$`
zOFQGS)D@PXhk{tYv#a*N3yOxA-1KbMM=lefb<z@yN=^RkJ8#~X|6-W%-7SB<=Wt{Y
z9zZs>ljJmH6jM1K&%4EpuTh=;0r5nm59f7%8EfT(w317+I=VRv+ZFWeW^GcVc5C6-
zXd-W;WGB?oSDJpSGD0)CV8Xnm_e(<IkZDED`Sh}kA`~@4evsa<4HN+}Rm{c=atfw0
zbh;XZiy}{?x(KG9lZKQ7i6+%13(pX_ZAu5%fU$mHiH=5?e4{x`m(!oL<ODe8ObFs)
zKldG+PhPL??s?->-*hSJ7*nu-tT6y*XT37IR{c5EL0QbZ1^Af?!R@qxnA>D(g{_dX
z8)xGew^Y^bS@osgp`Tp81s-jcQm#jw*^?pP4*xlEXzG%O*U7wh;m4nTx`PU(SK<{L
z4Un}70L!uGqm?;znetC=r<URu>6QL2%8i!v(PnxyMm<-$**yq&EU$Yw4!gySX7b9Z
z#e&#?2UUIbJ1V*hKhDk=&hB{G6Odo=<}AvxN!ALM&IK8zztoDe+&P93bjm{dtu$fV
zHuJLl95}Q^v;J3@B*ip!vIrrv&`T4bM;j_>^*YM0H7pttj6~#~DhK4+$${dt2ZLWz
zk82iZ>GgZqqhz!9@qh&yHc*x5L(B&Hb}KaUx1g^M>J;l`7*z@-p?J6uG7$A5+}yT^
zU~f$pCdO)y!U<wLG&JrwV}HzO&ePiIqoJXRM9)Jv+$PPb%f!&)Vh!p?yX+kpGLbek
z3OVwHt;#amaw2`r!TO!*C#e_~z0pyK(W8)EYr3m+lm{tH5i`lsM>M4yAULo|!qK(A
zRN0r+(C?JkGJW<{HhO^ZfC+^F#Q7}XCd99zn)lQi$_*9Q-ar8{gltSaP+CARiYq;!
z-@Qyty~}M<@7JDM9qF3}E4|*}7t<|uPg_|;QKtF#tC~eGh=={ndq3n9jYQId|J!jY
zEXP!#6<f}YiGY^V3H>JgS{NtFu3<Kgu0z&QZZzxZLR7?{XJk@sR(rBUJgY@nXmMvJ
z2F$%lBBL8C;J^IL1JZ6r+k6a?*j|;c&taj$T<+6_BY5~AzL~y?;?jm_Dj#xV0e8J6
zE)Qm&pl?vzRA$z0DYFBa6Q@b@pmg>FDnT09gcw4f=Tg%)+TG2iFs!?SGgNPo>E6WO
zAD_;~s3Cp$mt;wxTwQSn8gFC>(uB<TdM(OStF}W`wMf^Hiv#M|j?xRvV2a>(j5^E|
z&AbtJuANGIIT}+@-_5DJ1+>MC3c1msneOqoUSE`ayom<|geo-2Eqa)bwGIVHi+M*`
zCg2D?-yb9=Z=@2G8H$}^wQxiC_iA!ilhHMl%CYrHVz%1U#*=rqhcV-*4!H!Y9bH)G
z2s1bSK@%NfhHIqNK{!JWB!hU+1-u|v#EY)qNi~oHtAi8J8?*L6=w|E#=fxm*T+*xw
ze&fE9LjQWz{(2n{^wj{keEkkPbbL+~{{#f+b&eWRFMGeBI9^S}Y#@Y{Jp#z4)~^6>
z-l@<nF?y8W4#J3c%0xD`!@Sk8im3N15J@Q+o~=r#=NA*=WFRl}A@fBi({!<ULfeh=
znn3!H>GN5c4w_#u$Xa{(EqcRMg$6kN*pGBSN5Qzg;~-D=H>~9&{6X6WJOXX2gu6ma
zoR?NL=S@#g1{oDm*o@h1X);D$HMO8U9$z*;lr#$V!udX~A-Q=`vnUK|y8C<p6#;ND
z8}BcPN`8%}HQ`{Al@)#NypyUJBf-dRY5ky-;DR06)Ygia@C$)Zn_N7S`<!Y4lc7=3
zhZvL8q#VM=5j<#EkHe$qw#^2sWgcnLJ}Ag4r1po+aEtH(HGP&2;?a$xqyG<QZywfE
zn)Qo@LPbT0f`Wn&=LsQQ3etr@97<6sj3WpLY0H5jV#)#}O2}3aP!Ur~30+VS5fKp~
zA_SBn5yDVvQOrStk^u*%z>Y%PlAY~Y*!_L?KIiN6+~=PE6f}AFyWe50^&8gV!HE~=
zV+#Kd5#i_Z<GMLqsY{}IH}WHsdLi)deC-{E^)qyWe$g}JgwrL?W|PL7Zm%02ekxEh
zSw{Y{_koYG<kJEV^n<*15!S{s&$}4MTw^e?^Z)b>xoDTxUVoqKK(x_yi*Ood)0fHA
z{#ve?CR8SSD(yRy#fep0Z-o*IKO)LSwyPg&oTSOOvHf1H-j-<xyEvZECTd>1I4wN<
zUgMP39STbBe@+lC6Dxo?<2p}e&#DEz22rl0&%>Aps#|amCEqM0O146LYse)`A`5ld
zU6M2Sli#4#iQJ=+bIU%ZI+vk`d+65njynclY?==x20)I!bbSR^|J??jtX&Hy6`(=?
z8wP6J@_&ngmLfF@{)ZnaB{V(MZpGufIsX78Z8sPcG-KaM2+tsVP7={<3F$&dxdO0J
zKOpDbMrxi?KBVw4XTS!}(DlKTml^*8+9oOi)&pEJ4(@<ABgip<&e;aS5ARdrO_at$
z689ZaQ^xp^&VMN(M&L5@rS$>Fv0ym~S$^&lUf8M-=+;+?_4^5X7{k8vv=njoQNkPQ
z2eBzg_f5<a(5Sp&lT8%q<p1EKUd^9<^N5*{LmvB?tam5=DmBoD0OY1ZY7QW8SAe!&
zpmRfHabHM2^yF2Biu+$-!ZD~_#(f9l`wIz`>%L2dip4?J#e0SmgRtD+Of5uSuH5^D
z)b`yy=*k=X?~c`gE{=;~7^cYc#gm?Px@BqniQln`|4(#v5|{im3uWO~Z07+e%z{9&
z{Wv`H3L47J!+&!gt^_%V*B4S%nrbQ_cqab^JafyCn(5-V4&sLbed-Kk+(ZL7ToF8W
z#^|JB^cT`<xCr4+-iS8C(}~rqH&LD^laTEQ$~3}r8zEHGU*{#uCz3p%S-cK@$r^?N
zn_VcJZIH+gH*gHTknRC|)^MIyum(PEDFt)j;kjb%FcfP#!{L`*iNS^+&YY)}1GQnj
zIkBCBt>Wn~h>!F24*FaDhPq;aAxj7oKnPQ=!_2%wx>a!AO=NM~{{0qyW{N*pOOata
zNXiBdmm1uJk-!{Gi$k8Tcc+39NzH+U+__xmvd3tYuZClHg`F-0etwtRDxS!zI=YE+
zgN8B@{I<E$S$~sp4VictX+_e*W5?zr&(}dSY=-tYt@IO-&s#A0)&X*+3>8DL>jH4<
zE~1vA-7?10yD|?LC=vAMs7WjxCaW^?E0#VFu=EInPtLeGfZTw=PJ!<)S)jl1g*3hy
zr`;kyr(rGy#9k=l>Kx=#kui0_9wRkx7{JsO@wzogcR9xd27g3(jzmO>6)5%dcK*{Z
zB%M1efj@Bz$YJR)seiX3sfh)E3GcvS0DTq5)5i2ipf~$R;N}M53t?ld?1XQg0^eM(
zaVCl=FQ1>M6}o%{X)DAZ{>cK0g#P!e-vFo{)pGx}E&s|P$nec6pY^}fhFct|`orMB
z)o=KD#lK+l#{U4DzbUC@d?=?uVy|0YNQ2dGBzgW7^8M@u`0?8?Fj0c#^3Ue;v~gpY
zTXu`l`0-7YH{Zf_QwlR#3?drsPh6PxR&Pgx&ta2nG=qQl4*#!XNlhnagcZT!YSM7)
z88g7Oh4US%^VR>Zc=RMmQTSfHjF=JE5U1>)Z8K9YG3g6n?bLWR*1lX4L{Bsio!y+*
zs1%p@v3Du3B|Q>vl*FlrFRzh;r#DmFEvWfwlR>UcUpf4oaE<k15pyZ{;*acoqxG8Q
z0(@~R{^Mh)e-?y(8?raB`p+!ma%rv*Eo{DW#w&7O^W_IsOSHEr&%Gw=h6CI`dSM60
zJp_m8boZG&h<KE?d5TVS#V=W8vHmtgSubd)<j-hWMxXUeGmScj9ruG~J(Kn_=^w?f
z*hPQQECNGb9F0=_=D^v!Avb)LQJ*tznRpPUO(yr}%z_@jNbaFvxp7}b=W*;f6HU|^
zh>Yo)sX0~tJv_6+>@{CV``b@oce89Qzs0zexvznK;fL)R5-47<!$vtQaNZvYddi=J
z)bs=?nk9yLn1>>g$b|BXM`8j$S_2NH4>?CF9$H0w^PF}0G*h&!xGSyUXTM7sfiB~B
ztcK*jG5qN24V5QIxFHPc4O>7M+ug-|^?acmTkUH*3;G${VGJ=yEMhhzBt1&vwzAH`
zs<UwPl2fxO)7GeCbnQuE^~+cO?9jf0RbktyvqL5V%H#7&{i9iHd`SH`tREv!q{iRT
z#_0Q&w^$sC)S30mwrAw-6tLqIBk_>}=FcJ0pJeWW!dKm|U-}&mok-cja$2oEd9v_s
zReH#x(z44p=92JkJy?F;lb4CrHJVDLpz#YSSv)_I&51$%yw;2=p5ruU+bJldL$Fjj
z!Ty<gg`fn>oZ7Z2<qHO_h~(Q$m-4G&x$et5PL+~Pww}%}<0}!9?hq2?t~UjZw8ZBX
zH8ebbPPf9%JC>D}mI<RF)QO!~DrdM=tu_w~tQL+JRtCKKb^T%JW>jUr{>hc;dme-u
ze74cCV7-@$@ww|&IASFZX}0!I@#h|5BfC*SVnp&%I&U)?b<vfUSEOy{*efeTmI>QZ
z_IDhslnO6@YKqDa?J8+L{ZmVBCR9)w=NgRDhc}1o4s=6A{7n(^<KDh--M;$1=o8rY
zd~zx%WIYQqtlvtHR9;ytd!gvYS4Co?r4lgN{Qd;SCRXtpenV5>0MkP}x*2934(66*
zoeiR3)KUm0Y<r469|>h)YrvfzcFcASL%l$^4J)YYCF!4V3{>n>ML-}ZO{;0cT$nr8
zMhIqN{yU3P8MBytLt(S=ixoEk9X(KP6_}TMIN<QBK<CRqx!AXdTr5_tX~yh4^d^jN
zXz23+1TVWqzK$GW$simRe6<YQZKO8REoT=ri042<;?c`p=X!;G0jEw}VHpkf8t69g
z?lP@t^%-H?54lqA;<H;E)wEidX=!(`E1onH?8o;WSTrnd9j)Gq9=q+H(Re=SKgi%O
z_=U8^c^J;<3&?cj^FvBA_|*3ywZH&j;d8^a)AiNdzu_?&a&lFOlGbDUo}pnSh-im!
z@3y{<p8BYY(ubb;!M1-#AMk@(g%q;vFbK2D;|d)w#z|xc@7@F%>a_We#sS~XHyqUo
zFqbr9W@k7v{AAWTY;kbcY_D%#%W%uq)WPoD<Qz+jrVTl+cBf~s)>)*^$T3^<+mh=B
z+eyT^DrO(ug0n-zyFx5xLqjcbQq}1`{+yveD*On98A6-zIxxDo%?&RYl8qGKJG{O*
zI)6}>`L=0%yrZa%9`5?++vUlm@VRjR3_HUOpwbs1ira*}Ch;QeI3t0NroUnvdOVU=
z1qniB(ljM~I(Ev&TNNE<)_6eUUU@p?PR)a%=HvP9mvi*lLX%zc9a4v|LYe%Bs#Fq~
zy3dD$xP*cFAXBmZP>ZX;$V&S&T@n|E+@e?gy=ItDK{dm24#aturhZ@oQ8U`BGq)qM
z=||Py{p@MG9$xW(p-a6cldfKIbIwzDdp(q56!*ntjkx)`A(cgj&I$X__<f6Lk<&d5
z56mmsq4IhWtbvOu9@iI@Y25M>$DL!njO(Rkr<-mE4q9=vto#A!@&1H$uZ)*1`qki*
z5irlc6A&{c8h>T;RgrZ7eh{_1FpP)Y>cxK60ZoIj@nt(V%A6AJWNjNG=4v9dvNvQa
zlYjKzo-XZSv~i(w;2zBgPMbJYXp)s3YJiRo+ru>erhh_H<hZO%t~#i5;H-?R1AWG{
zf-ne%X0u<^5i447veH{)U!N<wO)O}O6q^P3`VIvyf<|PoHy-R9D|8xhh)8z!ZXFq4
zR+i+`?$>WP0Nqj`@9e_o?bn{g!16UY&;?s?D>QHxb~?LR#h6>KU|e=L(KKETi!ipl
zI#^Mdm*8l!YsjY~EP}Zr!@D#2W>uT-z=o)<zY^?1oJs7J!+@_$Ii(jv^kPeb0xi9}
z1lqtCqoWepAUhZnHv~GMpUy{wMfvZ@P22kjZn4XPlRT&zJgnVp@g)52GHrU~YjxqT
zB^k}7n@<@GF-jY8>&bv{>SlckF$<IQ$tOLrj*m+CiCPaIP44^2SLCm<Emk(0)(TeS
zsR}(My_O=ebSZE{)HyL*>nc=!)x5-re-=3v{^;+v<oSg5m7#_^N!R%U-uy2Ua(rPj
zOE(u=L4GNgh)tdN-Ko^s?3>)VuemKhvsaj$a$DGZaw1-Qfqd1e$<8lBS$b|LG&%dl
zo2I)(1uMkUuKyI#AEr2O*eq5EUApjvv`F0&YgW(bW;F1!ZtaUc#Dq`Ti5lQ5H(U?D
z?~(6Ei#>u#R>npqdw-x!6I`9fqbBxsU9_E_ruv3`F!v+JlN?_K!RHwmp}q=(kY(B^
zEcgRRu=rx&RIEoqxll2U4+V#bWwy)FbZkgPkE<f9Hja|z>&sFe(3OSAK4ItZ+Q`bq
z76m!a&a!5R+fEG&r~lIP`uh%pj~?n)ctfdrXe<8vgi&l&fNn2mRXN%m$B8L;g+*=F
z@Dg0<+3ddB0hNFB#^hZzlhBFggptuO$AIX)ZNozQ{T}U+D}cOTs$c3`(Joa%jeZ08
zN{WZ`R1|EZ9kJkr;w4%h&ovw5S}?xpA5bO%;<ApO2pq|U4polV9|fD?J9+iCOWLcv
zdzZRw>Aqa#8W5c2P+4x#6}aXGGTSTv@NNSP&daIt4zOXcdLaJ>8Z_rsI3@gsqGbiZ
z4$7fpTPcYrFz2&<-MxeM`@BLKQ+fweqiFL?6U=N@bk%i*MTaT9MJyvf$-Ga=$16w*
zjwQ_FUoejWRi~8{6Lv$h!Z|*|nr_}-ai)@a8<VISFSt@wh3n+|g;z$bsbIK%p!0Ue
zn0?^%w+BRRk<)(^J$!8DA5cG6Q?bYhoJWC^PS$qlV~Iuh-?0$g_Z*v!Qob1{@G4be
zghsy2t20^I=y$K9FygnWZ<U$*Ys2z;21O1+QAg>eQ=D&^@0hFgPj0)&TtdrE>>;-#
z8xtn531Y>-qT?0vE@Vw>n^v3~GI6ghQl3mRDOIyPt>W+aAl<TtEZLjnBlo+{%1?Bx
z?S3VDUB7nf%e#Xl{11H@@P@@g7+AY%MH1Ssy@wr-Qn&@xTP@O%FA59nw@B);pc{F{
zoLDzcVvb;ba7sY%xkBxQ$ndZbmHi59vD(X&S?%Jrz0Eklf7jz`64r3u%}D7{k6e-)
zx-Y}*R1mLF=QG_60O234vjC}I&{bF3Ph}H#6AK3(eNO%Kx6jv`!XjB~(u5t3J-X;>
zs&{*lLus}5^H000DullqPJ9Dw>;mXeMHzGAOo!GCc95EUke#R55i2=9dZAb$V3fIE
zzQ?}Z2jM)07DBt~T*1148!O#RJNw$k?2UKC?dd42vR8;r>(qDHmda1@aC&e83iZGH
z_E-EPqn>crZ0nH^+Aiw?*T9|77R{1AnMmsAG$+uo7_Jq3-MjPd-uhHp5QG&*!z@^4
zG}PxQuY2?<nC|<in-x@xop~?WVN)~Z@#BnH0X=8a|0+-=?*@HIIy9f0%|78#4F(8N
zG5R?7%WDE;y*<o5zHV^Ccf$>D^uOQm0=V8A>*QsLfPiW#@P=>Te)`*@rPxp-VW@vn
z+B`ROg4%EikDB|*n^@g8&NQ*Pg?e16`qs4|8_Q7IG$#zZE{H)tZi)SlLph?XCM%_4
z6o1*nMrvf4=Z$*#nt4Hh3=;{03l!{lgqZN(WArxaDIm657*A{|0cwIrSkzs1VqbHk
z-1dcva#?Ox1%~H=jX$)je-Zx{qas_fbM`T93?=EDPdB>z{ia?!`QT_)3{^5=a&^Nm
zJ+h|;6K>J4dql8%7!Mv4jnb66I2$W<%M0tfx=)In@ePlwpL|#n!fg&ANjsV&H#9r+
z&VKQ3*Yk{o;d@5!6Nh7Tkw6+ockz;;8W%~8wO!l^^>WOHp-gL_#*5rqmUp<i-3#rV
z+esa!?9hCYsE-b7JXE73_Jzpch>XuUk2I8cfrIPjJ3X%@c}&sL_Q*x#w%5^w=|ABS
z%ZAR`mfV(T3>Df78wB8Ud)RLz4rOkNJKTCqT$0}A#@L=k4DBsW^ltatdp6HAI#2HB
zads9J`an%*FEmVnkFaHz1FN8bb6kJR6)G50x~^A+6=G@I9|4ge*vmtu&CUyDm<Th&
z_ew_vRc-=yxv!=nk9jmkvz^cm)jPY`e+=D+@%B8d&_sNUx!Wl?295_S`;bdwg}M`S
z(>Ti6TNPf(=TZ74(d)D5K2}0FepvX3XnL%J^wvbx%JGaYEWg@U{?U39QCIp{>a%zD
zh7|KqV^*mlP6U0#Ka1Mm>2sP=)V6>b(VBZX@{ND$-)Fo#_0bvEeXM-fMB28Aa*y)R
z8MiRj!Y+*sV;^lGjKCs0=9Y|Y*(iHme#Hry${v+i5bMz<-j(d)IL{}V4HxnPU-c9v
z6%I}u1h-{oTIwmW4D^PVO+Ne(kumMO;ecFbPMB_l54_E7L#9<B==ui4tjbU+Fyj2s
zatc^rFGdq-<h2|dRi)S@bmNcGv5ky5e)7WsF9GV_t=pbdXn()aX(Tx&=E(bPHZMv@
zY>#2sj#D4%#fSpZJ`<<rxJk_}%d`o7;iEBR-)^jdMN+l=cwZ*9)~`vnqoRW_aW3h3
z-EWb#<d+_B-#B1Nz0-W(4>Ya*hh(AWt_jcHC!G^dnkE|=!wU66nBrL5b$UK`=_EFi
zAhP9bEe%-OXpENESctySkS|w#yJEc4)#e^Mi7v|6$C$~!VW}fuDUIG~e_ONSYFD6*
z)b^u9cDFcJexAE{vPRjB;AWoiqT+sCq`!<CuyoK=T-i{fTQ4cVF1XKuFriryjm+^-
zO6&`oSc+6lLiwGcF3POFPWe98EKkSvFPFa<vXCu*)}m++Q$KahBa8#U)1gL^#&~pG
zSgzJ(v+3XKQ}1X*vAr9S?ho`?p0@%*HFDo_h!i?kUWknG9^hDIttDP$NdAWX+Jo(4
zTnbT!Ec;mHAEp=unq`5O0i#QVXeN*HD5!=qh1)DQC01e^>%?Tjdf>$^Y$42rli(WE
zXh&ztF7mdc@!;iRj0ufUaf1CEN5RYiXR53F!j@absP;x!ggw=>{p5MqAT2~5vF+Sm
zIl7mX$hF2i;hx)qs&Hp?^b(_f9kx{|zo_Pr0Z0kBHeEfI(QKJ}v#Cz@fgQ>1+7N&I
z^twa7y`j#27t6|>TL#Ll*hXU+x|u^zb&vdp_(N`xqWBaqnjOlYk%QXuDH2#1vTqoP
zu<7Q#M`wi}&bvszl%t_tiWr?^?bx#IYT*1dzf!L)$jlXqj-%^$YA<i1+0hhL=b**Y
zOdUM+A{cB|h?Qv)2)_^Jzfk<$om`%H2lEWq&~!`pdY<KkP~(Jd`@L9~irIUsc4W=s
z)rIGdajjAs3YC}Qt3-BZNJL2gH_$3H!!9HG#m38^+gy3&opey<yXZ;Tlh|#k#z|*Y
z$5R(5Z(8igO-|kM=3vA>p3gjwY_&Co`M-@Q3T??KKLKC;g=9=oGOidUjJd7fYP(dE
zSet3*uL*oy5%Bv4(1)h@>SCUB3M=1UJREv1rDh>mu-gAw@NU;TFgX`Py=qO6I#0*J
z_d=hP@V@4H|9^7!qx&3FlnWWA|KKaNDQKTR(b+y;$+yI|v~R7t7Gv2^K5;imsjF<B
zCkyl_+(B5Os>aB<=WNr<6qGyXsJIQJVN=7PFZ#+|8IAI3!e^yT8ye|pep1n_elw<3
zU8;An|IYiNZJ;&Pt_$^x`~K8u*7Mqi)}q{-g%8x(tG^*}qj5NUVj)PW*#yZPLl{*<
zPqJMFgi(Px(E_I4lvsSD&KYAV9d1$+&1>8pZ5OwVa9rV}-@mChjB{K?nJ>v5bguZr
zxq>Lazx9sqVYz$C?O>}DzZ&RM21Jups|wT1yj0X<_}ZT*3q7Iygr0NT#=CCozvmjw
z!ow;srK!zhVQ|TB-z>Q|6Nqw&xP_mNnCXP*j)m?+YP{?n*19`4D)=Vbl>Ro3hsX(9
zxk+P>wI?G!?DpXR>>PcTdlj)b?O@u@%Eu=(N!ZoUpG|h2TDph)Y>+fDs-5vfUvLt7
zc2mzs(H>5)v*@yPs&zKzX?d|_=RL1`WjFKlE@gML{oqTBJAoc$U!z`PKA5BYs9334
zq*)L!eGr6D6;#l?DMpZqIpU)N9B5g<B90*;OBfV{3027VlX?HtEgG=Xveq;<K=@<?
z;YPFN4p+a42Nqpi%MSe8sG}_A5k-%^sdI*ey9itP0NWO!qnd_PMAPpy-2(bmNYqcv
zveb#{$3`;bKi&P}S}26QR|~<f>Y0Y39#Zm?iDe>vu4`C$0fcYSs%Eo4C*Gy?H5vLP
z(aSTQX01iv)<GW{gdEWmU=Gb7=A(NOOblzJ#BB5!*Sw?^QO-tt0NKr_{D-gmsMc&$
zv3SIKe2XTn9vT>|m2x6A)++L)Na{THi+Y*9Sq3&Jft@3^gA>Ha9<ycgrNiaIvMa`R
z)&~-vH^^jv^%_TzlwW}e+LzY<doYM$3bL%9CTryC0knkJnJD4uX5+A`?rAeOQC@i9
zwlko%y;!#%D)1@{;+X^Q8z2P)We^7S?6^P0Z_<gUAb4^mT4)ph!1ivU)I|O_S}}?1
z(Ebyy^Up-w2CAd0Lp3b@FM?R{L~ti)yhOLigK>ljTt~lVOgcZ7*kRdF<WAE@-y)Cw
zGO2!oodlrha|Z1cOSi_)nJ5rU-DC8|{;N{!6a0^9N02|DJ0oQMM`+!iUr0NVV5n&;
zLFPq+zC(X}?qlh!tKd`eGGwGT;9^P<E1Km{qi-ZbiT*M&S)xA?N+RN+bcK9g&ye*H
zO(}g{#C`ERP>Paqt0$l)ypGcJsq$q0#C5+tlim??fmOd37#dUIFaxNd5E<W$5#R_d
z{i>q#2b|=8Nbv3%KBFn#jDFryuI7Isof-N<Dm;R&IsgAs-ue9hRo*eaD(^P<f$|RK
z%m|1X&+>>yik4kLBMMjx_ZW@m0ldJ#7YYDgfT^G22&1j*LdK7BUqB%-bdM1VVW!dV
zAmi(T-;Mz)6|IFxqdn~@U>QpQumX4TaGIir^4W_%eB=u$YTg&p1HMLjp4NE-V8Ke{
zv;S=!@u!+LPVWY&Ab%6(EgYUkE0O1+2%HbPa)$mGl<y80U_szyE5{c=KD{zScL3H^
zu^%$niGsutcn3(b;OmU;^ZoaXzMGs;E}J;-zTg&lluXQe2Fg1qHyQzS!Wf1^`CVQz
zJU|&hJ^vG0`hTRF21F$V-75I}y<iv?_c7`Yc(exLCR@vYjd7m%-(zHwVTi>3Ng}t7
zPBh3r1T!Ax=`*69f|}0O@)r4hG(m=J3`Cn`n80^f$XC(kZ-8%J_%CT5Squ@yugHfK
z0k%@C&teVtz#<N>jW8e@91Vy_3d&~T{N`aLthEc-$l!ad5#Ef`zfjQsxLeYo01BI8
zb=;(m_1JsRvECQJw*A=iUk(6Yp_jJ*J_PjLdRV~<_{Z2PBlTz0c)R|NX#Q)?Y%Cn@
zsrM^`_8#_xBfGgFaAB8g(B0sY<;m}p98K2OQcPXXQt+kZ2aWmtXVTJzy*H7w_kt^a
z|0RTX*VtwkZfLE=VbjBf#$sSA8Bd>xgPW7uIrFg#Xvt2^wB%cC@ga-~fwUz%b?9kO
zU6gc!mN?G0cnRJ1M$f+ywm9)-_YU-02|LE5oj2^G541g?=9IYH%=pVd#V85FEqaKV
zNxG$+6)n(4$53B@Z&uRcvn<m`=(Di>fmjsEQiZaAHtyQFqHWBEq2fyfRznlpFD$&@
z-pyvwJMG6zTvXA|#`GIx%%N@vk}I4`@Gd5OQMQO#v}wT<Q!#kn(1GISYNRYY!I(YJ
zOD;wc2|c0L=83d-{;jwJU1R)s_nD|0KZ)x2M^0qRTg?xCHK?YtgTICNE5>I(vxVFO
zOBNwaV7tU#=XL=5j<ANC+y?#>#82Q_U<FDY%aZLWVOVm`_BD|k&Dr}8{7Kko<`LJG
z^muot_O*^*NOME%nS%b)FA6ia1XvLb?<N{*Lx?}mQ`R6g9%991aTy;6r-PbaLo8YI
z8Az~|N;yxc<InKJ`V{Xk;~uIQBT28l=Ynysjgr9CP-e}m37pn3_L|OUdk`7pu_Zdp
zMMtkLZyAq>?mrc_t?Cw~O+Fl^vqNg6d$}+8Q#>TV3H4X-YoIaWh0+1s1Z~vDwc}I!
zXjg4#qhWRBmbMn{oa2Rq0Q@#Kc%As}O-t^>YEWtv;#;Lo;^}Pe&`$JPaURCl-!g))
z%s$Wk8&Y%5eFls<#C_pT)VU5p50I13ksCqokydcOUu=wrpvhx48x@}tU4t7Yblzx#
zK*=)3shD#}F78>~q81Aat2P(1t(ZJBcA#bZ7<Jyz9E@IP<&p5zorzlF3#o7>T*jCR
z_$(Tlr_Ly(CUC58hY&U`N5Q^#wEKO-#4EquX{S=lW)BA1Ys9tm*;qN_acr;Sr9t;a
z(s8$4$G3ePdAsKBdH0R_d}wY$?_m-%Jv7G3@n*H1Ca9ib>w5a`a=`_Wb+8535>#Ak
z3rDIp-@m;zj}0e)i7RjvO?IltvqRIo%hIfVbunj7v?h5ztQ1w0w~zHi?;*=ruu*I7
zfKLm2b&#Zj$c5d|ZC7*d+LP=MmulENReLr2RSQ8bnK_bsgcTjB6wL8d(&GYGqgCl6
z@vft}gKcb99kHavmXIn-W1_s<ldJVljoz}<aQRI6RbPtyL(GF>o;Zk_6gah=bEJ>T
zv$S&0MArvk9?|!)${M*P^nn?a(GvY@17~zZx*1FSs+*I>c)-Q}z9o`BYp}vJ<$>>O
zrk`oHO<_Zvibf8d0DB$N-{AgCg3;4Q$ABk21Vrno+W~<uWdX1HW&C>j6|+IV?>|{+
znl}7)&ohT((m8gP`d}G2>!$4LjC6AvS#teBq;b#wd4JxbT!C)1WNal*O_{6;V6Q1p
zn`N|Js6rYEAz79Kns&9yq=3N$e++qI<n+4m!9a^nVE{!UtK+|{_%n*ImOdC4kozl=
zA)9>l%;xtAH|h0)!SfW8Jw_e0Vn!SiBECcsGM>t(6Ac2@V_Ha)PouXzdPP^0e!0!5
zdTE_iWVN*5tiZjf*`_Gv78}|8sB>Iw8G0@UIWj<)J(P}&qq4Qm;4<G!$Jce?HZ>3`
zEY&9=Xgqctur%{clsW{Q>z*QIX%c?V(Y~NWgr!FIX%MwT?;;oem8y_%gn6&u)~Pj;
z)P^zY8RR$ZrF!d~kFf9u!KxX!^{oM}Ei^JsaOB%b_G9$gifbt`O7&Vpg&#=|_fISx
z|4v`UT|oe@X5vW0RytoAXG|elD<EHeLgwABE_;abE^tgvoK$msRIDre2K_uPMQju&
zNL9Ms#n8Z#B?(+5)Hvx0o-&grv0b8>Cddiyx<!%wkLNiG&tpd8zuiQ6im10K=`v#o
z*GiomC^Na8#q3(D%z2weDh$(H#6I}}UH?&EgMcP;+Nk!a`(@CjI`2}#?G;xDNnm?q
z0DXrv;zg3Zrw4FyD+@MW-sEa=-kpGlIg8XdibJW`YH@u`6f}iz&&I<1YkDaxbC4d9
z>r76JN)S_5!`xTK_ac^SY>V#>*e;eH?{qzQU$!#`V{Ju0B?@1M5)q=#<qylyzb>f4
zqPCIri5g4XYBTKkZLO{}VD_@EijT48hq`R%<qw`iE>>*>67)R5CD*;tM~=I70tjoz
zx4^BSgdR4Yd5WFl)xJ{We7S0)5)+*IM~ZJ(MCNy=sOqP*xyT86&(=wUh1gL102X&v
z=YrEULBo0tM2)3f8;(~C6-v)x+?ADRufR<>60d4D;Os!VuDCkNMiYb?(L;wEB2A_b
z`Auyf^p^T~BPXkOK6P)_fChVVv^>aDE^<5-h#9wgq7h$8IJAsYO^1%cc{>dWqE8zN
z%MI1ucqw0zrV<-*7PoK?Du=qt(!Y=MLAAo%LGA9^XzQVn)@6Ih_0N{w@U`^~c$?}I
zvh2q8pc^}Fk~UTruN@ioT>tIbKX)#>;YEU83!{3ti4=Fmz+N_=Xm0Rh4NnfiAM?t=
zh<DF*_34J}{mM~Z)psy$5sV<AbP4*tZge`<ytQq-IMnQU3~NXGuoLse^sr$Tb!ACe
zdF&$cZFgs+<}6L|fM4oUD_+2vhY59o%yV)H?~)5cOS$S8V5np~<t3&kl;pV8Sz5a6
zhg+|?7Am>yiss!NuJNUv560AI+T@4Y-d47b9~yNm80rE2<~%*<s0!e8puJpL8@K|s
z9L~{sFvYVt=Bn2}_S9K5##3Fbfw}8`KK*s6xxdZ+@7qLcFuMjV*P>b+d)ih=OIXq>
zuluI`2bcHSxZsKXex!5IH4&y=1n)B!(DWG`4|IK>SbbE$E>H$tomvXrLqu_CpF%95
zV>=$G?|k&xDUB4z%S~MusO&v9KTctWx>G7T-?WS~92Vyfd}7X8OrouZ#ERTO=?*81
zY4G9e^;g~Jc5}%3-;q!+=2N+`W3~T2X(?|85T{HDQ+!uhtHbz_Q<26oMtgy5JlX)3
zhdFeo$JGqe0hgOu7pCPxQ`J=2F_&uv`G*5YKY~vs>LbQhb*Y=t!Di)3^)}rPO#U2^
zweQdw(GqvlcH9`vQ;K-`OpB#1G0m42V?GM{lxM2ovF_86cYU!d0s9)gL<c+8hTRe!
z1afgXgoPAr17N4$>5g#>P^#Kmxtco_UxU)>Ud-#NGP;9@fp?4R`aY@|d&9`8l`U0~
zVcEcONxZh?5h}P+_}0019#mFLXnUn&k>whbqJQ?<fLW&h0g{Fe1TTDciuOHBa0tg9
zecvEXzK*Zdysy<W>pW`H8<V&*+2wUvt4dLeClRSl${xhpmt9`t{!Qn}FjxPja#_D$
z+4a1k^zZ!=Qrv$N$otPF6eyFzIEE9zaEgs4{$!vLZtsU#D1ZzKXLTm(0j6GF^qMoW
zyjnh}4{S@pk0(d9J5FJ;>)pFgwQZqR*D7^u@gF<YV_yCqSzU+FYuAy!%Fm^&neyO?
z;P!~=g*mNjNwmKqifY;vnxdRyiqC<7M2zki@I<rpw}?51*#$l=xM3l_FiuiIlkjJ9
zwpX;B8g1XDfzBfQIQbMM%W5dls$JM4o;5g;ml*kMS<9Hf%r_*x^N}R~<zu6v_rr<6
z_p0f#fGohdCb(*j?j&ap_8q9}HkX#8pem9Xd!j3oMBif0wJ8gZqwlWwB_H+I|0;4A
zx;|)}<94$?HNJ?m36|o_{*ME_7Sb@+jrsjuf%99>)65Y?)mMYVQi_Qa?E-fx%o87H
zwz|7vwja6<w290?J7Cjr;Vw==N3Sk@EE09Ou8&dDj5$u&chh*94Pi^{0uEzohfpKF
z3Yis?=G9Vlq$n>gQf*y(p5n@0N|-K$k8I$$qDTT~hLYd2(H9uv3779;QCk_aacf|9
zhZNquc}Lb5bksIa)w}>-Iw@w_9A#7bZKFfJ$^<~ZQ_nxAMYTWod}sua6Ugl5Qnb&2
zTr%0k<T67@X=It<UYbNn&lFh9F%~zKbb|q6PBOJ?KT~Xqg)7T0D9I)vE_I(;{SWto
zS)Z%l+mGELwIBCnI`&L0C+P&6AXZAIDN01vEv2xH<Yh&L;d%X5yEAXUe8q&Y0<x#(
zc|#@L1807E+2d6>DP1&jLd@AI-l@~)jN2e}er5SZLzc-KvJ0Sk7T;74aY-hORG==_
z?IT_@=7hQ1aXaPnt2S$phKf^3VanH5qx;(Njmp>Nk_r2=HVD#9Fz1?c;Pbse`S?`c
z{^<KQ#*&GM^oBbh2GdJ=2iNb6P*B!F>0~M?3IZ}>4QCs+7~)W{P$bOQjfXKrv+}9c
z>%2=<ls<|{uhX@XY^KHWs)7RF^T%#{x8!UX>*UB$Xbe-F^`0&+d-AB_arv)?T4!R(
zZg@G6O|-(6dso4I2BrY2e#08tF){_I*#)Hu$m>=kAnS&5wFT~5#C?s-c4hb4CH74#
zh{+vD_elslsd2tkwXM&1ZtE$0X&z@WaFkLbrMO{`;<Zn0346Dkm|bY})JhgGAet*C
z5e<kk6*k`pd15DJ7%CPQS4t?v`E(NDW`vuIp|7#-D3HNLYluGpb&3QFdRek6GrSJ5
z;q2Ae9nLJJnGEcy&*^>5@zDsbo_rwOp%z&OhPW?AZ#G{XkFoR;m329a&DnO_(cRaP
z(?wX+4)B_WgZ0u@L~$3|C?2H!D92qW^TiVskB|60Lukp|SU=ixl$fz!w~t*dqQKil
zN`ln(=zZ|*VwggZo<X0<zHWafg6Vd2lV;k5qC=1&jV4Eg#BI(G+20#NENaQS>ByVQ
zJ~wa|MA~}{M>0mS?~K7Y;NHvLkWZAdn;kzf{9gGsFXug_bw_!McAUy)FN=1g|A4Jz
z-W%xJb;F`u)IL%u2wO4Zbjayhnmd;aJ_v@P<}u~HUVtbbP^|DMCF8;`1Lyv#zT?}A
z0c1K_|AmxfyHx5ZpT<5jR2OybW__|end8H}!_KR-;$5kV5p2FE$qA92N-7$f=zQby
zS9y4tX?!-8cDRj1^TWL$Lb#69?2Q2BL)_tZSB7pGyLn%0gqM$ZJ5EvZugGVIfqizR
z+ND<Yp<TkIJk~_jh-b3*nXm$~=8sjcVVPq&k}TUR#Ng}k!ss3C-tYI6lRoQ+=`kog
zIax)%CZ~*nyW^+2BuaN>J&jzt1E=aXVTr2oqMNXS-+Ojuca1zKWqpI?)Ml;5LNq7Z
z-m56u)axqe)(zOq0H3X;tyTNMkloSQ*<#`sqp<~=kJ|mPQA>(MGw=iDQt_$LZn<iE
zvhxMkUFqWUT$6r;%=uR1(_rP>?m#Pbbpz^NV7vI}Xd-liQWfrN|4Z1mti38y8MDPR
ze`$Gf=dFr#`=^xWz`so)rVr?XpryncjF-=CmIYmKby74Zm~Xy|6{vz5sAf#tdFZjM
zbt0y(8aKM*d5ay?5V%~5AC?`gt01y%(h`@qmfEZ_KBI9E=E$+QT5tEopcm=$!L5qn
zN_U60%6W~*yu~8@?;?9L3FD4JHH<7W!#8V23N@5EmlOZo7Z%{UG>2WTq{WWKunxAD
z7N0FBN)RoM^OfFun6V43Pk5qYRxjP!L2_RLTb2d6(_Gk|WNeLPyepzH)N<(ww&s&Q
zA&fHgT6Uk{YTycuWrC|)5mxJO91y6h70qWEv)4DeWaT{w_H)n48LSxP-#zp)M0#%I
zs?~&N<`(O7q=_DFI!y5q*r0d#kD$Gm;4+0GRPWbD0niQZFd)f`y27ENyv8gyDIVc!
zpL;W-&Tr(mJ8Xf{Bet|~OS{BsQzhsbzG3FyGqK(+%Gh1f;h?(m*B){vO_4=Gw@`Y3
zF7E>-3p8u)%xx(DDZ@B|HwUS;yUnibV<c5=QzkJeOm8O83}-BKpI(geVmW6E<i6Oh
z1H~m>PRU2<t&Sl=`+fF+eJ4D*H(<M_w1woBp@ow$jwx2;AjNr4DGRx+z0@=Xqn>Wa
zaV#NvG|)4~vmtAPhI*B=UNOYZ1ADp7UI?}mxYMqEsufvYSyrLh*1$vZL(i?axwdz4
zMVm*WV<zGQdxb9}tuh?9o`mmW+hEpr(~dGOPDDKgZ&Ynwm#aA{*xoU2<MTb5T7r%$
z-q$^LTrkd9EO;<xLI<;^W^3j-+r(v304;cubGvhcltTgAhxT=-9UnWH_#b#uNqQ${
z@-Vw{e6GKC5R1v<tk&n#LXx9ZG)d-q|HQfwg_>4FF?P2OhWIx$<0Q*<GZQU%DgtK4
z#akhT#PwW%_I07Z*BVr)&18kKM^A5}WOP79aj3Zl`Vi6Zc^O(Z=BsFqmCvLxUo*Eu
zUGCE^E6cbs)@;rij0~2$tz!osXQ_I2+1g>rXk~pCRs67>XpyFS73B$fB{>6oy8C5*
z-2;<7_Z}Plg_L>VbDOpAU^>qGvp3T9MeejAzC{F&M2|kJbR)6-!MKUzoIB`p@q}?<
zAl-zs4&}u;+RzU(f7I?}rkC-N0@+JXr})A*7U4}(Zc%3JnVRJ3S)i-*x3)WbYLs<q
zacQaWf|c*csiI?t!qm#-%^}OveGc_)o0|D@)s$aW8BUx;opCG3odKue$GO_6hQL^p
z`<x(EX`B<sGS9uQvHcFasj=;8;F@O~EKV55-BblEQ_cd-hPW`5$*Lx;n_mx<5KE4-
zV&=Bg+&g@G#(cw%WbHUS(srU73{%NanwU<^;v7fCiJTAte(q4A$dt*S7HJaRz_r3I
zt7z(E>gH;co@jj#8XQz@JKg7Icd!e0X2xXGl`qcn3A2E2{AW<JJ8nU}dViH0oVHL$
zsoCpPXb2T8>H@gj=5#>cXRi(czFIYDQ!#ra5<Jv<<-U^0NTvSg_qF_K9J(?(8JH11
z?ZVZ#GZ1xy&3gTtfO|Ap5$-QPOyX{b&;q3+kk=D4oHczl+&S3G^e9mGM~2*mX7O7!
zh?086$=<WpeOb!3Cl4P#?gSFr<%m%ec8aIQ@<P@2mH}BqW?_Gz^`xg{{gDT<L(R&<
z@LFPV7s<U?2s`RJ*dmpkk!r7VW$UZFA8ut?zlK2IQPcPfk10$mr+W2h&5Tj%%Hw-Z
zR8(d$GcG%Ox<1-9GHmcUUblxUrImW9vo(x;*lXQx&K{{~E$4?$NBzbf;6x(Kx}4+J
z9b)x^`*!}F;6N+1EDdr5iQhrdz$sdZt6TQKnRW8lfrI-uJ7mX1NB-UDudzwv@8yb7
zSrSzFgriSsGl=?f*~m>DeK2dI5V=^<oG6@LTF_*CsQn~$Jb+PWDT}WQ_myEmo6+iP
zPad$Jdu@?@^mL!|NZNIvSk#_A_?N;^R|ake5QM}%rVT7Zih+^NpM^|(6Ksf`fyKbX
zC|WUgRu_y%qR<hyFf?nW{_ZW!$u5zb=D2=bl%2;ev)R6C6x_g&>Gb1A?+mnH<ijn?
z+edLrAT_T{d{D|Ddmhd4P>RVr^IqIOMB=z@qA<7;@KaVB!1^`D^x0qoUXqwNre-wA
zvQqM~3_mGnTg>S@?DbExOj?f@mv!RIzL?N9iFZXC=er{@_Xn(eGDC6){o)DXgZ>GJ
zn|YyDWd%o%|J`WR2;VZ9ojQLZ-OkrpfV!XsgD9b8;%h<XI{%RXH)8-Du878DQHXlc
z4Ak^D1#*=(9oh?hA;rH4*K9qMvJDNY<zd@xnXAc3!cmg}!oK1O(bKh!mssTldm<}E
zg{TYEevSLf8sn9nu3PiYb039@(cngWo*}($+)hWQ5RK{T*U9m3-xgiY<s85=P4gcd
z_V<70=;EE>P>yc&X#G*#v20suNs15fUF{uKBn!svtT#LTxry>;d9tguN|5OOttLn!
zx9PXai+5!y=;q8`6HQvYu+pbk%5efc<zSlM%1aR@fzS6WFNJOmfejybi-o@!l~<Oh
zt~B`d3h7<2;lCRsPl`jnko=JUZ1h?5AB{dibal5MQgSWav9V_X+qytV_}U<Oi3gF7
z00gM?!EL$$o0DJ=90%P*OF+&-YlHw6Z0wL{f5T2g^JB_I+PH1|J;Tp%lg3GqH*h-z
zk#!r@WWY2V8z$9GF6pF+^;$R>Qp)wIAcyL6hZBA9Pqdzd2$z$PReba(Bm7PuVbTss
z-|G~32qP^BYz9Z5>1EKrtQVh5S}(qel<R#fz<SZP)Ic{`RqdVx!T#m&2pHJ4Qn2y-
z)qwaB1PMNPZb7|RyG1k;)KEDGZjs+joTuF<V~$i}UzmnL{3%c+5=D&eQNUd$?iuQr
ztun-KKwc~Ukk;IjK|D`|+Ry!=nga%(jW<zxJn#iKL9_)x`6TuCM`#)ZP^aK(gn|Ce
z9<ZF`$|)aW7-f8YCV#SKQjiFE)Q98$h1SlU6c&C3%#3tPkQxW%?E+w&(5bp_p@L0^
zN%FY>oEam+G!5Xd?<b?xN7X0<@%s-28)}WT5c#Am(O;ttcZ!1q`U6?B0V{h?kYOCZ
z22W~KOZu=N7^}4w>}Ch4HR2De*!zk4YM6bmGvJ;Hl(ZTZ|HCo)qfvdPGx33OX|4gm
zcKq)#eI1&C9)?u&fbt=2(tt<19ja7=_BJFWPfbEriy!&mg$1zLU`!<oP$ME6LFtr_
zU!7(LK|%Eg*qh`4ipJ7c(uReH;pa|D841t4MTXfTW<eHvJ&~9RllKo+H;mL%91N1H
z;b6nhYhk^>58k{%pp@_xP|f3)=Kf3bn2OY7BOgwPg?xRM!xMNufwG!}91zc@z1gZM
zhel}20B3Z9;r$KfGT0f<Sr2%CKC7#4RKJf=l1t)#Cg7#~2yl-+J!tZ!+>eHr@)<@k
z4T?I?7rUDy-3PJv@Uo2d-Xgb&u{CLU4rue|LHfI2M@I(#smUZE*S;d)|7{39l>{f{
zEEw?}jyvGE@>>1`_aSVa&tJ89lf1N)LD)y%fHn`y0G%Lt7=&F?_?)R?^lTdbYxB#c
zL>+?%D-OX9Zlctie8tyCf^ciN;8*ACuhK?T;_(#1rNwCC(IkBUUP=oH(`d<Z?QZTA
zWbi)vmV~&K8t9?J7GM0~hWr{udz1!v);Jd$7s1nXZld(-zslXrd<bt?1F<h-C?E)>
zB=#FlwBI6Y;G&D=!vugYX|`O;kqZTcpqbKQBylwOcR#zyV}z&^D|j>%7ANLVo-F=x
z)EM8U{{=ZkH{!ma0X>d77t5&=8DdCZSSajP{-NYkw_BZf^ZO@a5+(FYsX+G^CbK*`
z?2$*iv+uk*JZKfEEjgWYC!OCTcski3jy4P{cd8gWt)qBp7+NWqTQAogB${cauHnjn
z{q<S%Q19}XTtS?WF=x=5n1<$E9j_+ufp~6&I>!%qBU@D&WD{R~R@l$F9aS2$-W7b-
ziBF%j3d$eVpgWt`iPDIfdiV-EeFiZf18r9gLpG{nU4Xx=vn~LV-S%FZF>`~<)XcZ)
zh8&=BpH|ULhpdvzelL&mG4mT3IIFc={)^=Jl-X0E9v`L6(~BXj<@bbAruz|{lv1N>
z?(2NnGrjg9(+5OLW0t(w)#@P374r6r%G;`Fx&0Fn74fgUy<0Y9M~1l#pJ|OrU(hyV
zS@L<e9wimrXrQSz>Z~k}<Ict%^p6NTpecd9npuwoAktTj5R~vFSqmS&s_=o!(xcwi
zMk>76>gegs`=P}#-)X_x2pco0WJ~L<;?~mF?zOKB-_vA#tx8`=3oATY>oTf7sOf6>
zLb9UbQ|}I*qsR7Xw$)#BVI<f)RTeO-!^XnM-xs%)ZnV??%ryBM)9-=b&w~|05ieU7
z>Ri4deMQRDUyPnl0`)_nP*zkRsJGm>-)dz-DX%9@^-1dkvMlGV?KI(1^pqIDzMz2(
zKfUxtf`=;LW)-?c`H6H+RSagQu+Vc)r*HxOqG|iY$cK=kg@(#e*?MS@l0#!6mmhMD
z>F>Bx*%DP(-3vE!4^)}~RG{8X<rTEVG2^5cua|CbQI}T6(7am4dh9*+b&LnA9h2-<
zF?>6nynZ~Ea-c(SYJ}vjeh3R%gVY3!^;p}x^l0B>kEBwIRH?W6>`{f+F3l}r{G!W6
z<2IhPmVU|lXV;w8_sU<r3ViJ;iq3zR*}I*D6Z&k>kJ7Hmg}l1go_#CT3pA73O$*WT
z!HP2}Ij^z2dgs6G47a_WEwfL(nG2m+H)#F5uiy2pTXyrLV}`NaPU?tY{JYy}`#M-f
zBj;V+&%4l!*b=A$aQu}#Tg<x7N_?@3sSwN#?p+Jb4kC;P#+t$<+~ue?n^h2eZiIJF
zRu#3u>TXKD%%5>6aPtzcu<$AS8ft!>N7DNO$omOS0fxB$Gj|oDNKwKv{MOOnW8PDG
ztXRmv=ap!?AEGvCNpCTpZYwCYZ1Yw0`JC<8Z>nimWYQO2#m>D;H9?nHsjEkpv{bED
z4$UreF-mlN*85^ddnr`eG5@We{!9~h5?M~3^ne=$x5=A&Pyz>O;3Cf4Mnc@><{T59
zH&U}&9LAf&Ud9&e#kT6`+@?Ug3nyKVqq@L^s1n;{Xl_yd9Y_H4XFi(>qvnL8AM2%Q
z(C@qOZj-0Pec6*1S9(sKEYfTFCigr4hsWxpJoFeQ>%h<k9y|n^a5-W@s<1U*NR4SS
zpUZ>;?t=+5(e+l<P1TvzQo;02JV2#BycsCtSjJ(EbJDoZ+CM4D--PKS?i^3+82`><
zYIXG{@+*G<w!U3E7At+nL|_SeR%Oj!k!t++aU`kbS)}9X5|6Nj<&>Fy<(J?8RJ=B&
zV$0Q<JCU23p!?CM3sB6I!WHAilliNrAjZUEtWt~Uv$^w_Tz71BpN>C0bRwqi`r&@r
zn{-PE=?a%5`$z)Uv@X$*6BU*I{<;{SokVx5BV+c<HKFHrry!vQ;|XvDO??Rq_X#_0
zJHP=R+J3CYmR~rKHnD9i{RgfIO59I9ck@A66!k7sW)xrgI_moliv_=T4^BAb94QDX
z|HiJ#MJxR<KWNh|D(Hl8v#nZqS+NCB!8wzNQhl*#MKc*++{U3HeS8~^XQ$BL#&CBB
zC%|1`c@d|vjw_oeb?!?<9pf*nHmWv0K3>);_bMrGbr6?Q3y)_t*g-EH%6wRN+0YJx
zZpsE(+oBec6Y-+=J849K<-Sfw@w9%wPj!_x%z9_(hDWdbgI&DdUlJ|spD-!Qx$kM!
z-QDycwBpR~X=V+lM#GfyH6-pa__+0x3=Cl!K5r`5E>t`t5*j<3R4qW`ypzEGL&L9k
zV|kai7vYhs%Ac^N4Oj(Ti~#e(E|>VbH^1#<30IHxgqck@5mueM+LgBY)GbO50>P1@
z4W#lulF`J#b(+QmVhz#6pXVf)+3!>FnkNw(VTp}0))mfS>5TVHci7y~hCoB~eZtbt
zyXC%F&)tFo+8&IYNDfPWLtkS>!XX%pg($Yh1bR!s-M1#{Jh2$UdN&m>o@UCm=Fl`h
zVTf}QcQw-rw;&d2>Z~^KRBjAO#fsmQAneQY{a9*mR0r*~#*NjxB)i*foO<k{tt)%(
zjUIVK(jC=ag^1^Xm__gYsEDc?O@5*A*M?*KFtohZPmnwgg!rX_8a4k)B%O?L&F`_V
z^zBG%09md)@eSXjMIn|3N<aFRq<%1-5q6TJ`&?M~mPGvcl|eT1tJOjaFf~Bt2a9VS
z03!24Xj8>Oa#^K{E<xhcrxL~a!R|BKyCmmC$=QdoxIGz%q-ooDbrq&U_mrS~rlpUp
z>935u=CHe>;(LSX_e!l2^6wpfO@b&y=#0-js_oSa$H+6W{n|VF9MK}qKTvV3FsT`o
zNs@D8727j!9b$fxZuLqzoZ*4?-n=~^%PMB&S!bB6-`^QF%8Fpxd-w|5PCSY`EHxW5
z>=4aFYK}}=H<bt^l$p2{=A>hAcB2dl)lf#ygVr8DH7Wy6G;eAzqB>AvSOM%5Nkv1R
zX~xw04qzd+H+}RSkiK18irGI<#`Z1(1oS?Q#qTlK_PEcc2<eS-Yy5cJQ<^NVM(e&T
zW<|Sa%W*03OkWrkbf@3y1n;i3ZtP(R^xcl$$x82)Ss(e?z6CT3FS~{zI+_A0Oxz9p
zTb(m!ev9j3n9oHh`6)6Zglh<9nXA#DhIAqy;!QKox9A@i!7$4bDeUGf(!9$$+ESWO
zQrupeyuLnNbW>Tq&JIfW`+5dsUe!=fQZ?e1EUg_ZvPT?qF*a3WOw1(fJO&V9Vtiy{
zr^p6(fZUHmk02JH^rXn|a;4*}8RV&<S(d1!cDq=Wxp8MnCzW$B4?D%iw;s6_lI~q1
zpy5j<mM1?pY7I1oQEvqgQ{cex67a18POv@=H!5VFbI80Onl)21O{{_B_b^(hR+su%
zTA2#YD#eL@e_c48A97<y80%Q;c$nvI=Q+=`{zLyf^Mitt2AjVbTOwCOmN#Vp@K<Xk
zt8O)JpxH92{k6kif=uUZM#~RZrR~sAt}T{ExS4*eStseUajs1-N_*fRfECpK$#Sx`
z4l@mo96FJB@JyM=a}&8U%oy4;=*2>NbB~Tl77t8w6P-NuRC;wsmD^bX=Rk+Un4PX*
zM_yHHkzkCU;GBL?{nu}&mzC{*J&+dV7xU*sM`_gh9@l*jjox&r8)0b2^$*2I=rX#(
zdH6+NG<^y*ZSqiWE(`|Bn2`!ebYHTL%}|k(#^Lf})vjlIZ_peRBnbKB!3vMdoB(At
zZBJU=Iq%<c9bGz;^{Kg$A=>g%lKylFOs5;d@=x;g9YKNx-Ro-KMF+2VT$~1wh-+E+
zGc(t+8(vKGk$=dY^6TlAslC37uK!ZC&h@zOdD=`wkt0XFMtKPO1LImM&5-LFz}^~A
ztueY-I=YbU+`u*LbQq@^vnwT0<(7V7^=~hp6DIHk10O@u-|_SN%gfTG$$7g^t@V4?
z5pake27nm9)L@J@%-2zIA3Y2$7>S2;j8bE=PT~#CMHv27aN18RxYsk_;+0vHd^<F2
zwPr(QL8#^0f@wFEf|<d7?=J~yiyc_+irYpOwXcmd+3x9YeV#nPBo?9iN@#TO7CFYl
z7vOMCzX!H)EK*8&Dwhd}8H;r%12FO)O*qF*e@kS@PTZkk#B!J6>$}pKo;}98qtQyi
zeD;|SJO1$`#=LG~xn%js1y#Trsekplk9$x+Eyq@tKB<26yJ0_qAqYNCNAS`h`JUkp
zS=mSPO$$NjY^@}#KkHa<@@_6IjM92y#RY7Z_Cai4gV+Y(nypwyeaWE!HjUmv{jmj)
z)|fZARQ(b<(Rj%o-*%rp(Iv6!<sH3^T^p@S?lWp19b*<+ygzv3m7xym42hE;+XPKR
z1aXv4eUP5^|NK?u{w7Kr13PgG_Z6coNUheiYd3aKUEOZu(HQj4k<?R4SJqLk1UgrC
zLFXboG`NeqN{V~lX;dL**mLMLMl6wzy)Wx<)Y<s&7d`1hgiewZW<)TF=0imk&8!}o
z?D>eQOM6+L;$(c!{?v-Hhlz)<CsWGX>&;y^oTf*jW!8s|J-O~ZH}zd`VP6p0F@Jv4
z9&#L9Xup8^*aM%pv|e6T-Y7QYHqgw&kmE=);}Ooa$9!~Ka8D`jV^W^Tp+v8|48*h7
zob_ENBkY|U!uqbO$n!a_owl`Y%@Xcnbi6EA(Sw-3h{<~$;y3Rj3E9bYg@+EAoDv!D
z0v?nnz~?0@(=Mg!YO|J<Fvu9oUt<}EZ!L0?UOzj%b&O)s!<m7OH^z@={_sp|Pp$Kw
zATDpX9PR4zyPxQH?TfP{BaJb*zyGEeKv!~xC3i9HsrU+aJ!Yu!r>6v9z8YJy>FWVY
z?n#kNSCdGfREIW<*n~^Y6%1GrDQkKHFHyZ7wEi^_@L_Az`d6fwZ~K}tdoezbp$dwv
zI*5L35SIz+!~AP)H?&03XR-OaV#!9q&G&;{I`5QO6{SbI8P!gl5QLcMfBpEsxO)3|
zruYAUTyK?1S|uFBDoW*Ib#ifHS>+%(QYm7w$`Lbbr(7*&6Cs3mIXLlV$#t3~X60%w
zhSP;GOeUMniHxxo>vinn{d;!4pU>_0y?y`j=gVHt*Yo*&T-`4MJ|0U^JsVj2!gc0u
zjIV|wUcJFV@jZ$0QzI!|%TO7(Dwb5`%hYk7PG9(kk~L7yG-U_$a1n^3eeH3iJP?@}
zca?R<#il4@_tn+`<%Y4)(FNr>V3R$HL|qjfb3Z+_GD_G!A4i&kH-gGpsSC(xr)3rk
zqq15T8E|Ax?!cHL;nk3KKw1xLeXE{G$ETBT4m}cH-I~h|+VY&c<h&Ky)cu;fOk9ds
zu{QRR-FQ#|-YH(NSxk?v!Wq~*0Np0cLcJmZh~Cy8gxV3~nCWlX&N>0mN@ET3Y87;I
zxu_ozNOd*9RRjUO@Lj`pS$1~X`<HGAGtV|LQlW|Wa?WMD_79&m$JO@W-LJ5wDg=$8
z-S8bC#11HeNM15#H^LZ={s1*}MS>7(^cM5Hsf{_JduF5#crs7I&r{Fji#h9Chx<P_
zjO=z}w5QH+J+Ax)`#^wp_bnU%!LS^v0fq)kBG$qI#T8<t{1<53Gy-nBb*|k`rYA22
z?RXg_6<-AuxI}o(u7FqowCEI0WLcf4f?@;4Y$B9LYlx4rs~5{zyj4od@~enM=W4Ji
z%PE~d0R<XM#D_A`w{%t*z|r<~QW=O2ipB>tsAy=?oQ~BM0BO?(s_Gm6lAS3NwVj^u
zfv!qt&&b>|r|gG!%TmVDZ0z2?=Fhq}a2tzt&vTc(?5=634_1R7=jST93Aob1bMb<S
zH2H5*cZr=)aF4pCeFyP~=xo~vQs;@%V+<MMkRCmtjeY|pnl0_s8>O)sjVdSaQMwr`
zwX5&!$QAC-zWc;qy&0+EF`^de7p;SVr-H^19u8UfE&N@r9(Hz=Q9E-oK(7dSnD#lq
zJEu;qKVM>DRCNd6dX9z#l$M#6+Bv?1ly$d!B&yh_C+>ZY@Hxqu$554&KK;;tJ9tas
zm;-mp^p(Pl(n*IiV<jO9B<YZ<%-Y$Eqyc#d1(|9CPHXHG6*OkXTCvfh+JS!&^Sc0K
zhmt`zlLCM0i)9~p5Z$G%fxF!Aj7KYiCeE}psk!yT^dQgu8qV=x!GS5?8bDiIg7$@W
z(zK=p>;XfP2~;K>J14sUj2hO{qzwTw%Ru50-%&FcVH3A;z=#;!RS=s`-c^jCS=ZT`
zkLu+0=iB`x+1<>1)PdRzI?3O=M=C#QsM0`Fy{Qe{{$0+7Qp8=bI@ApCv6b*rY>=T;
zlG4vgwyRl)^4k8!#L4qT?!_^rbq&tw4&wzgbxm{)h97jg+9*E#GU#dkK|Z7&6fnMl
zq2V;4n+1Uze7iDKaY7j?vlgVNw<_(^*nZ8&%IT3J#8z5b8q)GfK&O71kY*T-**2f(
zc{HQTkdDyd*AP!O4rx#bYS6$-0@;0MzuXxnt@xcP^(CaNn&*>^2Wc2r+4_1BLLbL-
znV5^Iw|_)~p3Y7=w?v8pgE~qXBdsTH(&lyN9Ugd9zkM1GyEPV>NU=kK2YdkJm@MJa
zMD0{sH)_I6gl9^;WMlIGFs0xpC!)4T(SN8Aq>?VJe^p7mKHOoXligMcxv2G2%rqog
z^qJ~294Z|HNK2X@`<vQ21Mj8?<gOSVcZQn2Cm|?;2aPsEm1n6QN-Xj>loxWmFrwub
z=+m-Vj~ib)rFEywiI@N2o%;2mMToWW3q7Dl1a^ATeM+Yz8A<8<vHe)L6gJ)8cb8G@
z=O@k1n;zIeWOXzbzpoGy3?QEiEhDz2PqDQ%<JbU6raz8n&j2=W^KouPF*c2_Z|usz
zZIs*y)qqSBonHZx`DXPHsu2bZGPQ;73&lX-fyFasn;uQR0ELK(65`d{(xl|tsWyjm
zGH%86QM(S(gfT%2iti5SOQ$=()tg-Dugp7EoJy_ce?)%>)SyIBrJzv^9c8K?u1JFc
z?0;oIopw+|4f1X<nAc>5!^fB89B39O+WskXftKV+ru)G_xTu%9mBRGCM^jP^GVoWq
zQHUSrcy}KJeC#ftFWlRo)tgs7Imbh;>X%qI`jlbMU2+f6(CWUhW;GJTfqOvC3y<KT
z<y@&>D(FlPm{xURvdQbD-|nf+-pX#x2LbII>2Rn1p6)IH0^ZUn9T$)B+H<QvLIbCy
zDT1_Rl_pykhmz**t>8bff5^-0sn(KvfPRVqe6S+Q90Ic*wbTn5*MookGm`370va&|
zPk=07k_R%Uv%~Ec#4!L+!~)_-2~tX66Mn!tTQte+>z~dC{57@>>Qlt~wIxJ)%G#>Z
zEnWu3;Id+loedPHosq3g-_jP0jSgG0Tv7^dA0hbCE#eph9v+|`Wmr5z+o{Mnwf=?F
zrXcQlV3+h4ZehtIp?09>ndWVO_VN|p%}wo%zwhm-U?1t*d2h|%7FI6?tQrQaa=mSH
ztcFiZ%wN1UGkEC#>#ZOU^B9{&cEe#Sc5b0Yb|UJ3jOYGm&IE%TX2jfi^@eYX?b^6M
zY;@>}N}xx&tMF)6+XzKZN&135V|M*ZsOtkmVQxf5UCQt412nz@mBaI5u0Xwkp}5w4
zGji>A!DaG$dDCGp+nXM@qo@prPRp?-hI<GuGv!4?OKaFw*d8A5<43)%otBTa{yz7=
zla&9fCI3I;70OAf6gN3a1Nn?%ip8tD(xh<j&dJtqQj><dXD7X+6aHWDrC$w66X`L`
zf=xFb$cvu>_<;B*;8R%uuF@W$oB%EbECp})Y!SaG^vp@r&#`VC8ZZjH1e)G!tq`<F
zqU#r5zG!cH+0b&A`Xf)gQ8II(@WA#&)E3ZO|M>l&+R(13T3KQ9x9hHC#1D)+T+DvI
z@p|^ry7Dy9Y}Z8kd7k~1udQd@zMiUI|7(h=+nOB=4a$=Wz|C4x>Y0jpfISNOUh6bl
zU%X2C@_tD^q^h#9z9G4uE#l4a3HSLwJ~WifrWYP4&A0c<zBK+|DA`i);3Z9=k%oE>
zHTBN3_TqD}8SahSz0;1jn_Z}n)+zJ)p*f$+gY&jq7X2}0J@a~9D>J6v`^VDk12%Y$
zn{VNv4){mp*G}BpF+U$yJRZLz_v2;nJuYjvo=o+)Ug*E6Z^t>eXJ1Y&RNt%kBV{ch
z!JYdKrV1MOQaF=8a-UD~`fpJgpGM~=dXVSO<olIu7@BTq2|LGgWwbox%vo2Ny(yN|
z>0894o=t?0E@do5EDN-W1?NU?NS@g$bTs|j+S}VoEYVJuPJxay@kK2yHRHRQnwpXv
z3UALuW&H4<{6XFhFmCimO%2qx_<^^(p^T~bEQ)PwQZd_i2Y&Q_HpCdwXR<&b3;iKt
z@j7#JNCtlqr~R2$8Fgv);Ty@GP#iW%gW>{bt{bHlECebpf8<~8#Ny!#Z)G1nZbsVv
zc0AQPMSURS(3dxFjS3!cY(I8KHa~uQ2#m>W{+}_~ckbF9X#JPrb5cYSL&sUnTkTSG
z1?_Bo(cVyES?l@MlV<uJhpR>ZVS4I@b=~f${Efocj7!DlS>uKQiKsjn<ka+qgBVB4
zZ5#8&Jj)su?yd2kwDJ=3m-(Ex!hy`Pw&ra8n`RUKuj4~ZM#Quou-oA;nr&rT8fpd&
z$Ua+7wKSF(*P^Shy=;2L%(Gy=WEQXe_rThr{OqvnfB;^R^~l_9%iWswfH;VNj#4fR
zTY*j%Pz=|aurt=iEG+TH0!Qs&jgu3da+5<OH`N~v)%@Ep5aZ9Z#%+KI=gdZeI_u^m
zSnj?K*gQD#4}dQz(0-?(rfM-#!qds{xP%5QhEbVb8=iSH9<PmUz949fU3j*8WMz$c
zb;R=DXCBpTpxdnV<(N1^=2Z)^#u}))?-O7rI)pqa<`O0-@{p#~nT<EV?+SUzUEDB}
zHN(IHD7re#cV=&}xsH|93-;a%2xBd;KV8mheK~L({*ofafBIAbydiSsHidFA@4dk*
zNOk?;q_<wHcWkx#Eyj3R<vjXp-h+UdRrL(-&3lbsm=3X9(I@G)f8JlCrh%z&5HK%E
z8D#)nDS@aOFz2TxNC%+3|6EpHZSTlh46Jq4m+{t`X+JmOuM>OH&cD$-a0NCS14hO<
zknQ%>H^b^pA+ij<_zRbp;4L?Uii0b=Z{FPTqu8KcNl^VK`he9!@PpCC#oRN)E85?f
ziOAZJ;M-AWPvDO{)>{1;yoeJBI*d`<*C3`%1BL&vv~$n@;1k_uj1TKgwx%xPV1^`X
z&(E}^H@&wbN(>(^{={r+=-KnG{`cP=!^eOQtT{zW;M2<|!4>5Lo-wrozyR}=qac0j
z_x9uD^X0tjBg=mPO(x!;*Hf(M=w<%gV6opX+xZh4@nw#AiCFgu>u-q^^xedb78<ua
zK5Ny?4bT4#hS&Av@dDp5R+E+leLM8#y2)aJ#6rdqa~8RmW}99$QAKGPdy_<b;-e>p
z8=pi!JP>?6`_y>g54Hd5fZGEX$6dh1u^@)7*rpz_KM;B2Ta$p{^8cU8jm{?Bp^<hk
zgROkOMP9<V;*UJ(Lju-?t`qu~t(vRNP(duV3g{Kxp-`d;A;BS2RJ}<)e{#TtQBhIR
zltQuVA02)7?%xv=6J0r0U*F8_JXhvncJP4h8uhM5a2QwbQaWi4zMvb@xrh9N%er^E
zULi8VbV}R8VXvJJdEOS;Hx{Rp#J1OQw@bJ){7+_i=XiXPVdCL8*&T4;I&*Pi!U+cL
zLnwEc#w%KI`^{DN!Pvpryl|07dlKL8DYVE~mN*WXKN>O;|5xK|GvoP-J0AJsFEiSg
zw#^pW{sxo1|IXeWb60N&iN?i(Pn@et3E<9X=cP@RP;p1l{X5_4jW)fibB)9w$oj+m
zCgEVCPuGWs2lO7g`mQ~z1%Cb;W|J>f>dKnfq+Q#B#;!Qg$N6v1q{iPXEjZhjBQJ+6
ztJ^Amzx89=BnP{ipi)e9m|kpn(b9ZySJR_G%|!~dmnJC&KxSPB^~Tv_DU*zaZE7~<
zMO$t^7U_3*?@W;t)v+2=7WU=jVrKN!>VU~hK^<&Q+->}^XP<Ms_w3U81jHCH(Ks+e
zh-CYIz1*qSGuuZ^KFm8|HPmM}++97d`zC+rh*q)ajwx1uSI-`|2OX}~$Kf-F|Cb{R
z4<L7p<rh*UqY8bDU=sb|!zDGB+K~52BKb>(4)EupNmr#2V-9|PM}Bl65D1%)4Fi_t
z=YGyIzhC_fP{pZ$p#D8uT@*J5Rw?!2>J3KBfV`9jEUVEzrzU)l=nG%>YSm>@0<`_#
z7=F6B4=&`$+_yQM5yh^&XLY0I`*`@oe~w5oOli6;8ixYOqypKg^G?@0M6riRw*2#2
z;nBT~`I!4CgT-qZGq%^H9(!Adyp2xll^6!+opARB)BC1G)J?#_2A=>0StAw#?LPIl
zm3!Y*91k#O9&ulbkEQ@(1fjmZ$uBQ2K=ef};=ku?CA}@G5i(PPu;=z`s?Y#H0tByS
zCu+g4$;zPb2rhEnpG>J%$AteoUH3ytVpvMaPJc<|mvQAQVQ|wWOvHoSw2Mf<Hl8~U
zAN5umZM+?d1Hu0=^m<+YB%_s=v*0STAMj4SElNcz*wD1%r*IfHWM?)#`c}Ta!Pvms
zHJ?D(tbLede7jf!#W4jy40pBm#b`Vz?bcmZwcfB=ywbv?@C<syxf5PHr7b^O3G;j}
zJ$g`hG?-YvCf#G((DOI08swmVfcBLC^%$K)s5gQqtp7;51wKl)`W-J;;!~rHm&PuD
zG1#|W@^0Cd2hykS!I{fd{xa4YSx$69k0|$w=z2i`VL;92UC=g;1c`kzPuAx=v%^-6
zt)OX|mqxF1q6T1Zg)}s~!!#HC!nGh@3RF9g!DeN#2|Q3XHIChBKRO4Xu)7*%uxur$
ztT%l-2ZcQCoI=>q>{#206yFgfUeu5BAGOsk%CcXi=mff#y{-;RyVNpl=S0Ju873X2
zYb1c_<Jtu9+wH(l^lbl$+{4#}K1qS`TfEFqz6(OjLfK?s*_70-r#vJ>^k}!3#Q*ZV
z#asI$^eyNGuwy5z2`jW=(!zP`%c|;%_GXvW6kE6tBj`&{;@Loj<~w}BK)LO!deaGo
zqq?sEjLiDHp#$FRrHLY;MHk%=@}(FOjYYBP&U?F%8%k`s5y&+lNjD(^LyFlRnCV>H
z<S+oPH(R74riM$Oa~EjQ%Oh9O{Rb!fa=kUCP*(|%T_j*yB>+*y1F8xoR^bI1OkJiJ
zDvx2O2i8IxNXT}m_$j@+IF83xbe5RO)-x-h`L0#pM^7QTXI?afwEMNNk>{MAP*(Y>
z`Vv%#Cv=;d0?5&Kkc)AdtX92|sz82F58DgiNL|@iA-7mGiRhwi!!MBF6zLe7uT9wD
zO{jug0*9CTz1eEZ2HB1DY8-xFTAg)eP33%{9%#eV(QLh9U0Y@PwZcQN8p^L2$aZ!*
zR&qdL51I)7)tE-`SRE{_XxM$S)}Y#K4g(WGm};df)lFKEx$tBRY2sWaiih2EHmonW
zz(pR3ub2lVOyz&($~+TPkE}oSkJ7r&YOyg=Ur-zF^6OcG_WE_@q)~Pv+8v0V)68y^
zA#qx**Tk%u3)<ccCD4fOy^g6_Pk{-Rea>UC^M0A<eDifyITXp}n4IsG>sAC}H{uhn
z8=Px+c?C9vxkHhLY4r`H!?oIXDo;R<fF}nM@}8y`6Mat0&b*RN`~snCN$zQ#?ty6v
zcW<d`Hp`m43pkc@S6WOCih5DoJj&*7ef9-l6nRO}<9V{h(6a@S*Rw?O6@W$nAv%R>
z$ePOK8$y0EOMmE<5SC5dNZvQkB(JCFe~w!>khn6iiR8*0Ua=;>?Ji^{GrTBl9|6`8
zfHWK1Jbi|co=?QzhW5^+(XnK+VUpu?*EeTN4JG37mfX(vZ89x37<&73kag>gs2L=@
z$P3oxY&0Aoe%})f-%8BAz!+-8>Bd)I4*1}o+2$taeVoJuqWve*k@H3OuKGRDK)s-D
zp>!5fegHl1$CD5pjG!YQLzVMxoJFKZ>1XO%l7|Ry;5If}pA;DE!9jY&%8a`W$h$bp
z64$zj1-lly4l!=}Vq>c1-;Kxi`SSq^MVhSM1j^sF_n>a@_YbH@I@Z<hC=;Z%TY<HG
zE$k-*KscFGcj0a6u(-J@`TCGGDM5&j>~!G0XFLPPTiUALD;@pIkA)wJ(usGI?aRGc
zA^s9BZ?_mE{RqHY$4$o-4oVFuMR9>dgnR(O^g!CFA`!e7ZWN~0lGe-CS2hFKb9MM|
z1l}cJ<ekHh0oZ_$r<cPWlX?CEu?`kz6?dbkS`5Pl|F%YzKw%qFwo*R-SA%2>C^M2e
z%2yG<31+G{fr$Z_ch!Qw9ja<O*f<kdu13L(Xy1~T5$UKcN{WzyKIYU%+0yD>4FnRY
z^w*C)6RN|>dO!-$LrB;G5qzcUdZ&*Q;(&GiGsV%h#2CfTV|Hg@1K}ETNI+WB2Ubqr
zY0Ahcgf5ia8DuLhp$F3;bWi&Zt{n^p6?7NQJaP=g@_K=ep`U(XenHKLkG;7(jQ{1%
z$hA*jxE_4IKGAs?%r<Jk9p}ZG+l^_WtId~s3F?T?nnD$YZM2lJ(jUxL@8^Oh7?jI)
z%v)@r<5p)%qd|LtORu@?5nCNzSXY%`^{qLzG$GmwWXuIVo;M?r4?S(O7vFUl0ua>@
zSb$*FJ&+O!CNkw+3@KrOA)D}3{h>rl=R4G9fZsyMaW)x?mcZHSHPRQVg05%$oylFz
zOR25y&%{Byxk!%+D8|dlo4fp{4}gC!F|>OajX2zM*n9yv)=6Ms*%@TB+;)11GQ~nQ
z)>V!LBz$U~Yp!fioan3+@55n(^&RieD^7}abh5??4U=!04Ejx4AO6(vYS-~8IGDnG
z2SBPfq$y65`54Bm#7tomZfYlu?VJF`_hlIZw06P>_Z&Y`rNup^(8Mn?_j|2|Rm9M)
z<}F!I=f=oCjkLOosGD(LC^#LoyHrjEo|l)n2u649TOmt__=l!E7aZkeTe8i>=eYj9
zRLTuOnh`5~7l&ckdaQh&rK$85_QNiW?P++lT<qj8+d`G;_BgES=f#to<h<;L5FvHj
z<Xp_H{seq!_}Alw2_0HraKeFm@Wz1!FIjFM511UL13*6|ly#rKp4;jVs51ctU6gyP
zth)>as2R54IG@!(!GM22x}}9+N~?6K`%K%(x;Bbv%$&0-ZE4CE!S}>ytibgEgAK@F
znI4t$Tc!j?<Vmm`naI7Otb>Y^GK*BCyTX+ez>PAYxQ<BvVt}S|u*V1zeKWWQ%ap%(
zO}HHryO#Uy&?%XhaoLZ9TH-Y2)=2fn9K}sC&kt^_wo$(oH2Gz)uCmrcdrT0*J`mdg
z7{Ve;LJFN;(iMY&eIZKIB8{|W8n!m5Uzi0yoh`s{8T74C5}&K%yVM=y3?FJeVXNNV
zE`6*enU$OXdkX~Wq&8x*oCGl|z#MnoLuf*A#<pbh$RbNfZQny=PFth_g5*uxA=3&(
zQnU$>129(l2+>Z(*DM{<T%8XL4Wx#Sxjh0r2cK@<&tvVoIf*E+UBT!QAa(aD>;iFP
ztOi!!(tXyy=t!S+#q{(W?OT<eKt{Pnc>-Vc+Nx<Q?mXmqi39h^c;i3&kmJ<*2+zj`
z>^;ADNt4rV4z}kB)QzS4CE8rIvGTI2ff9~M7r;oKCXLQ}fD?K<5-{8ecNrfdmaJEd
zPcbMkT)Ra(hw%fAF0m$D$zJ4M$Pn`lM>g(pdkp(`*#GH{t4mQ+#T01-syAn%MGlmh
zC0=wgN4*I$EK{DRUK$~-6K-@i#Q@L_LaAF7WU}Wio5!uH0t&cIg?r`n+7I(Mt+eer
zr{lf$jd`)!Sg8u1mqW{mTbw|G^Boec1ikH~Tk5yGF$r+%7%b6&R;DmuYTIpuVNcq;
z?f8b#i5}Px#y>K)4CW}2Z27kEk|VNToDVb<^%gGP5l(t~J&zB>c;j#M`DVOVoND4O
z*(Sn*RcRomjiPc;jH-n;X|6n1)+e!>qTI2V_Dg9TxYxcJB9l!6mENOf5J6OA9Ej;C
zG5>xu^zn^3Q7Z2qHN1r(vvM|O<eYCFTu$&j-88ni47PqTK#y$DdXJG_1pX$3X~4BN
zn_8cv@NkjMcT!B%COy;IFfF3m5~d{}*~<))7D;Zw$(^fh*^g=fc`-(9HMDZ<jMJo<
zzrwV%QoO43*Qy@d=nS(0GhbMcdK^_84j4@ezABG3bq6l>OVE|aKqs#LR|EC{8dDs$
zBqF><%z*#fPKY^e!xF;oKA$(eLDx#QRiOdt-UvAM#n<-#s15kTraufBbo=smCHM{>
zA8qw4KM^AGx}YfwR%_G2R(=Vv&%tl$i9jllg{4eb^q`pDcUvhpZ%eDX1lyc<5vjcm
z&~S(I;S4Vq_D!O`H%#dwE6B332JXc=hbD1_Hh^Wh?W2EtZ55Q?$6iIH^5L5W&`Zs4
zp;JudRxn*q2$$|sbs9Z$AnU$9dQ$FOiMDj5oV5Wk{3+Q+19#Piul0*=7<a6$uPswX
zNx2WIvF%1E*}<fFkHN-Cn{(l4Z>GX9$z4Mo!<uRV4om|R7IIUFD#i4m7=Dsa5p}}d
z8^{TH#d}CCdf_|g)z;vGsGNj0tpbTnX!}=p87otXqhSlL=Ne=-9t-wtZRA#RqV>lR
z!P(lL6PAs?!3F@d<9qO2w^Q1iUIyX1sZ6>g^D*fC^Ma_QpB+sfC{8JZhL>r^ZXEpX
z=bUBQk6mLuGW4an)#$ud{e0hinfp3M<2jejSfhj0TKyC~vYql8G(U}P-%G+lwK4<I
zEZZqF(6JXVWKYYe_gV>}xroMlcO5U5L7D8r?21}ry!|e-=gAWC#V4|VRfcJbwNcPP
zlyV3COao(h;k&_aQ*?1wR-=B5Zw#xkulFZB&D#3fB|MEL%;~k<dG^F6^K(CE)a(p<
z`gDiJWB7jMS*Tv-J{_B7he?MUI-3z^MJ%?-&4_6(>88xMCqR&eL_h7T^6##ilZl;o
zgZXFKQ~ut6{z3Z9sCfcz^VyTz%`ZNN0gn?J<tk#FK8*mGeIRM0su;8^CAR?f=`wU@
z8gZnHe299vsQUr58);G=PDX+n2mr4n7R(Wvpwm=e+RhaHSvnM`JVCL^F{KLUas4;M
zU7X)wi)HGaD6r<B{ZMfSbo)?BBk~|hwcU1&65uGkK%dPUJgA;7p~-5e=n@mzCQPP4
z_sW=0uOHQ5aiz^YXhePRbGt*Pdb^HxAMew9CgmxPTe3&CE{pS#n0b24PUj>*?Q^;6
zcj1Nozxx()AFq)f(;yd7I?X8826#U5Sydy+7|0x<p|aaji@uT#gLd@HxNm)dN7zOM
zX)8I&>J8FK{sW=Jv)5?bpk0=3Pe6Oi%{qX6DcLc!?7dlVf)ZOzEac<Qe07yF==Vr2
z<r<V<LA5Ddf-G4oE0_W_ou`K7;O#y?_y@Z&1N=|^2FI=(Xua$PR95m~^4p*_s>e4_
z*S&M#4O&WzxPl&_-ihcS|0FZv(}W6#D5)~8D#;G6gClR1rDej{@q+Dh=QdQ0kQ{Eq
z(pG3EzxABM^78(}hc^Rui`@XUt4gUiqj2R~`KYz$6{qH{Z&!$cfcd<mK(Y~6CZ^rQ
z+M0Qd-tdv%87&cbwcA(|s=O@EhtWdvU5A%WXU1x%K{-G55WL1|>crb=5RuvxZc1y&
zL2*JXsHd|LALh@=DBXe_*3MSLX|FJ-sH^=@E*nI81EuBCCRiHZQaaN%eE`e{;cKC1
zL1O!oUBk-VT4}9EfZ#}WgH1)G&`Xou0Uu)JfXfYtMz_UxwA&7rg6n^YlpuT8JaAX(
zUg0`LH-d8HDIBHo^hP@q(=Qy9Hj(L*Go6<C>u~E4(fU8Ijw?#?4w=*VoL{WpM&TsB
z%m_cI^|t~NbOK%I$Z2l_kgcX9a$3<--aBw=9od<DW=ud5fW1rGYh$0_Vzeoh9|N&t
zPX>JIUoj104E*f<_MjZOqA(Nl-?juL9xDUe4z4(%?r-MSi%{dU(>Xn?JB1+Sj$#i*
zOK?Is8>LTj8nvUDT2|Aa0L|&8jbfhH`_ij=3x@;yu(9UP-G9scao5e}#AC4{m~sb7
z4nYl5lN8}t4}8K;{tU{Tg6a7KcRI>iXaX#B56G&0*a2}LU81a_+cf=UUNZ$x{Z*Cx
zjr|PCGwGwNS#R`@hiNV|)f)}LCIW8i;Q07M7@6gCP_e9`i}J5_L!xe<nXn|cR?OFJ
zhVDFrn7wjG(<~8TJ5~x&yk)4A@*&XA_)NBtGP=XRedE;CMAI^lIdU)ylG9-t&I_t%
ztf^sC7Jz6`7p7&&(*sGMRSW-@^2#WAE71%MrBkGGLJBXZ`&IP7X5wj%7p`ZZ3ab1r
z5S|`^XLupH?c*wGRUanjYW3?QgH3-&L{zk93y&W~K)Yv^+d;600|@qeXIoV%DpUaN
z|IRA80`T`_J6Sg|)|Jx^5YZyrLRL?pXUAJg<vf3{>`dAe>>dTSEHU<$uBhe)k#^4Y
z3D0mmS{L-t!<MGy${4ak=p`mx1gilqlq5Jve|$*V3Vme|1nfAWgE>9)2}}n{D=HtN
zPY>Lo>b72#d7tLoXf>FM$Ms{_eA}V1K8isrUI-Y8rkb2R%`#g@6IFI`LiL=lQ5TVL
zwpDgIjBGsCfpVry{Q>&=1-&^ytYx94R6WZ4E}oQ3)+8GD1?`f#6-Wn8w@R&N*~NsO
zLPV1CL=EJ?4%#=O`-_a4QYvkGMm{pg0AYNtIb^PRl)$RDS@Fk5G`7%8=Pzo2X6;lN
zTpEGt&H3OU2V@9|cPW{}-vrG*At7E3(OVOQ``b+gB)d@{DG**D`^<FSH^eY;?^Rni
zjv;K@aA$}1yp+n4y<WcLEFo63o#qxBKQz*gYf96mzDZb$>*Rr;?YSM8H7p#A=P<>(
z^J#R+?r$Vq+A!_T_FhB0y3+4v>=~~LY(#7(W_k{9sfb^f^1ELw>$<{~9n&;#b$|DX
z<AxNY@9M6+xAKP^TLKJV92y7uSlMx~v}i*{f~G6<N=E3TY+a@qTrBx8-Vf~XD4BMX
z0h}&1+70KAuzr#uq>Y#U_`~?aL<hAld6LyM&_P(wQ#wJr6@hAwU;|P!_;y0|IMG5#
z?FA@2(+$#!3U!qO&(3lJ;JhN)ao6(*(G=9ul10Youdj-Je7E>lgT^hEF$?F-E0E_i
zq$@cRJ%u~z79<G~T4uQ|b#W;MU{oUzS<};O7(~hLQJW}FivE0Dt7BkqnI3q<27jyV
zm;11Uo$uzhuhUS2GkzUV?sBKo`f|p<3E{oeooX&HA9fYNGD<cMDdWf{Xp+@P`yTk_
z&;0$#3QV{DSc!E#lrC&Balg<k9p&a$iw7^wT^l|<vSibk87~R2Tsvy>&-STfNl#Gk
zqok)1X_(FA!(ysotA%U~SluFwSl!25*p8@_MdX@ikf%t8n^H%t>gL(arbdICp>W!7
z80jt?&?Z){4hIe+0!*CeyT8Se8*o)^@-&;LYgTVcGu4}yRF6r)(!LJ9B|tj`5;cVg
zHewqTd4>y6X>R~-3g~5oDL2-L&t^6V<LSm&%JwL0Aa2m~VC{1rF1Fd^KJQ=ihXoU1
zj(zu{h!G6cS<NpE>P`LNzOjbJ!QTc-QuF9+4`GAyHWV*w2zVuR&JiW(x)gO7@zZ2B
zAKE^W^?`@<Gu-Ox>x%GIvk9@0MMi|(e6`Wy0A@H^<<R|P;6$73C$0H{B+69(KvrB|
zvJz2CoRyD3lqtGlc-;D2iioN;$69YkH~2urU|Q-^6a2d6?FYTn3wMzBWS(k$h+D_K
zHq`hb8fGRr#Ov8ny<bzNtKK97KkxQG?T_Dq)SopR;17{UWSJcl<0$wJ3}n{Vygt+6
z?v0`#>E8D#z!}J{7CQM2EnBx(ye~&96KO#Ssohrv;B59hLBS0vf37*N;-%I*z((3J
zuik_L)B_J7Oa`PbDHF!P7}eUo&uz#SkB~ovSizN8$1{&`dih0_SgtQ0k->l8+x30}
z9&e2oWgEv6%To6b>0LbT912y)s-|Im@ST@QUeEv#{<G+z-uw0&wrR{631EGwt<Z3<
z?nKz2JH8zKTI9Vg+%dmy5E~<N-$LEi@?~NAc#}90Xx_yLq!;MWf#^I&TQN}DfyoCM
zjg3i`ICK~aOTGW#1c9&?w_~fzcH*DrH(iaaZuUMtxF_YTMvul#%tkU?%>lvvJe@Zy
zobBR*AfddVDrJSi4Y1@L$s(;@mMJ(HUyjxNN8;QvjWV3Sg#&8OKTCmQO%csaVkKep
zN6a~T0+GcbyR3_isyz#utDxm{???46AW@@+8~|Ws0)U-ndyd2VLzO!$<Oa|@_%g++
z=ldWt5zCkt2vv2*m>L3LT$<=xH|@;Q$s%^pwh@Mj8)_4A+LM{|cdP3ZX8T+-XcXDe
z%+3!j-2hz|H<>{i{f2FzccAnyo>oTm<IN~24!rz?`k|fz)Q+Mv%IiQM=Y68Jx|{j}
z)|UevoRyT7D)l(zUFquG%5x(~m+7Sp)DO=4agGJ|mX-%#*k^VG6XMr^{4a9vt<W@^
zW8LB9;O_aUO$NJ%ShzB>lBInr0Yv1pTFb8i`#(f^0+5VUQi9s7>D7NV1~L*+`52zT
zRG-8Qyk9rq!|fs&kF;W+DjighQK32d=!rSORv`TY*4v{E9T?x;Oi3s0p2n<)=-tdF
zM{Zu|G<*$2{aL0{%wQK{?lr#EiB%Y|n}c%d(BXxy)mnZaQuu(7Rz%^P1cK&D55awb
z5~%5Re)IG58}oBuGLP_s_}+G-lanKy%YlJ`mrrp%Uj8^>31(Hux-b2<bzeNpj<g&(
zVg!UB0M|nEe{4cwD;}Ud6pHi|_Q$F>yj2{Wi!)^bt2AoT3X2Ep4mv#CNb~JG+b*Tv
zTV#a^GWdrXgGf&-7CC05&x{np^@-@7L)d`w80Ijj#GBVMcj{E)9HaX?w1zO!%QS-9
zAZzNOfa%rCti=}EwSDW<LI3=MdXdE#E^XmP_xpKpmIL>3(XXz0W_kMoXZl8oP1img
z?W9_y?Rl#5W#LaBG(kz49M5Po_6M);OzxR06R%!>%5z9o;+}-hR|<Fn`@Cm7(goSb
zSb$r(b;$1@#4&@DXwREhqdx_@=&`qZY%i}b{0FxaiymsELuN1u_UhB{)$2tGqCg*c
z+z|3;D20LzjTPx!hw(5%*u7bft!I3CaM8ul-Qb+BNaE1iYfBc78UH-G;+`H6H8C#I
zPyl0kO_7ckTOjoWkSKM9u#Ip^ww{VtSdex|RXytT8h>$<@9MX^t=q~Wzn%c|F<;$}
zC-mt;>W(m8U#jv%Wozc`G92$rMVa_efLI^6NNJGcK*GX_<7ZV+I(MrNUJ8$Ee^iAb
z=8F0{B*xuMe&6Ixv2p5p!t?}u>p(?V)3@z?_O&%99)|_Yyt2#6@QyakDGP5dVmAdu
z{{@~_4W8y;*JjKHJXp*Jg3q8G{s?*)E%#8BM7WifV|ZfUeF}HzoY2e6x4|Ih*1(!(
zkh*G15a*b%S^seRSYN-x-H`;VQ)?iQQEA<tkFx`aVVuzBPGs#|{_0}AA_&qv$BFV-
zl3W{QcsczH1_gyC-~gT({xy$)h-ge_6q{O~7xN6SJkRwVHfw&U-`?ckfvTV;8O>yh
z2q2-{K=Kf_VLWA8X@H2q>M)u~riT^C3xR>g=VoS#ZIKG$$FcJSV2fyL#QFM{N%AiB
zo7)nE^}Y-d-+y<W34o-4;R@0RGe`rhcJJ}{u5U)%T&;9Q4zDy?W!BvgZhsTkT$dtb
z-KB0_UfPBWi23(dpiu!BG-(;Fh+tZ{J@?D_Tx^N?pf$ZR2_JmMGZFTc^%zD{{l1c5
zd0bV^x;_~jII^tLbs2JYCYg?|6o>k?H4R76%uWxJcSA8>&yB1cbNg}$Z)K~{K6Smh
zt*yE6`}JE<a{IhFfWyn{vrm1>+MCX~RN?yYs96Z{udI<D9UULmWtac>;^DLMt*3Sk
zYDq!vtMwni4`K#cgIyj^JUJ0GbOY&M3Ps9`Wc!#xqMfH<t7{qXLJy#J6d&nYmDfD!
za|#b2XNtT$JKGV%%O>X+dB!H!fN+p`<M8aOmxC)mNsgoLJ=IVh2T!!Z#W?^bY%TnG
zNi7|mpR|f@5F@*qIO2dFRo$bjdc75T@}jB}dp|8aN0*PSW=&R7Lv&A>isfQHciqF=
zPuw*AtAY8h&R|c4oLKB2I2UB7RhZ3Dlg5EVD+%sh@cNuC!4{~&8w@fn6#{K2X;!q<
zC(uWS1?^!lO0dgb*QUGL_e;mp9}nB@mk>e#vi4r1_4S{O&x}5^0oFqK0pA&5|8Tb(
z0amJw;5N)6uyR&|N^7zCj?{ao5bImRCx+<=37)>vQVY+ZY-V`Q<M(i|!7oSZtd;?E
z$xUqh)9gcjFHf`>;z|598vI;0Km|X6no3mvB=rS1_4gh_(wCkmL{`@-yZwmjF_1z-
zY4ub<$sQx-GEDOF01rOh=va`Uw9hZN)zl)SITQ4u^OllWPlJHK@{)bh<;Y1l-upu4
zaroGz1|^dqVb*;v*{^C~;pn==P=5}PL}G0t4-4RS0>DN+Ibv;>pc^=3N6Fw@j@Z&d
z-A1GSuCuZ`X6f_%C9@4cZ7kCz2)sq=3=eztfk~qCRiI~Y0xrCtR@#gR<DT+n>0gfR
zj}Z5w1U!T8IDXmVK1%p%e`*#@>A;DI!Uui(#oueC?oll!%t%u5h=SaRqeMRm=gMEa
zwJ#?ATZ3|$wH4_q1P6@>>*ZU?uD>dSg1h(z(wuaps|d3l%Jg|LL_!G#KvLIkvEtc$
z;Y>q~H@*t%=$u=HzAO;Om6S#jLav4oj*X7UPVC5j3>PZ?7dNp^gF*{cZnZ!UF<6kf
z!@@5-dwON~e1+11YwPvPT!EZ9eTEygWJ-K-%;glz{>2-s6{n4c=f8AKzinp3Tr4ra
zwoc<VOu3Uq{~Uk<uF>-6!;A!+2ZsUE6AK#ncZBgK?&lloTV?xN2nr9SInaE{e2l)_
zzhkwRrj-h`MG)J(D(7C`yse+|7#Gme)lAMyxT&EvL6v&Yw-aM~0CNcd+TYg*6DY2-
zeMLCMPW5}W@hdQy^X<D-&jc(Hz^@AKGDQqpv<z3hWTpj3t1_dG5xUgoobm^RM%1>j
z)ynjmPFxLkEPoL2KPjCf&HSuNO6T5IY^4}{mnyOI9%xL8IU`l2NK`c1VoNm-a2^9%
zo)6JN^N+4LO#~WyjxcbUX!8<cRKMe@`V^PT5nTWq^Uxa*gn>7u0WtXm&`&|60h#9}
zW;vLgneLTZ+$Eh54s82ulvh$;id)^%AXK5w0r_GBzv0SP!z+On7l#+|OO2DKdqwe1
z^GAiRnhGz4xL<*Na#3&jDqEi%tT?RhY1Wf7%l+rUj%P#?llt77N1jPm(34u-6xhl<
zYU_MVA*o^S<ogF;cADGW)Xc5e>>XP1ah_*oFzjMe`)e-1S_Pb;Rm}5(it57R@=_Z>
zT98meE1NgE_^G|DLfjlwhSvjBFKly4c|!o^5+=Y)XSDd!GtR`viMKlk-^d)DG$>nv
zZbTEK%mefVI#DDiF#quo89OcUTmo7LAF4+gMS;fWnUHmGRrr|WwKs$-!-%D*;`8s{
zs4s2jis!vp%q0JP4KGh6qEZU~_j*u)syR8*PNm(Ak@^ch)Si=>GQfSF@SZNCA7{36
z8J5QmzE1$3zk$%}txZI`rp~P5h<icHTa*xbO1gNbvWziPUkAAH52{=ut1)Qwn>A{B
z)Ef0=mNW_|!U0UQUry$HnV1LC3{*EJY1O8#8Ly&!#m4nl-H8Zk;Y4r4SylD{Te}&)
zXQnpQM*PEU%3taF7p&GOmw~~-VKBtF2iCM1uH3OCx?Vt=U$x1pA-<I#fhvTo4Om`f
zO>mWfSj+Zh0skbZefGF?vf`t3pbqD&-VQWZk>{KXD&3<KU}+==I_~`O<{LTHmnRY_
z<vkjdT>|Op0VBxaJXiw|G^XgXIli^DUs<wC+RLo^d?195_4B3)AT%hLb*xEV!R1y4
zXLxzDX*LlE+R6m(Fp~GPJoY#7#<lswDH`f_AY!uNdw$g#KZTE1Z>j)S<Vv!Otm^K{
zqt;l(*?ICY>CcXS_m&gfFaQ#A1}Gn3*&|4-@R9^!LD>qO=~3dRdRk?s|3=ux`vPZG
zeH`0SohJv@)8l{aw_+cxwtC0bc)a<c$CSoVbE($8L{v|(yp0P)<j7nML+c(A^>nUz
z@lKt32yV1etcxC^)1r@=`E%@0=|TJ2fV8yb`4{=|*6v;-5ml*+y{nwtGyo_59{u-x
zzb<3{2^jy?aHl}Fn&_cA)YN~d#>!)aT5Rt8s<$L>x)^hDPzVUymq5ghpBn3E@q+n`
z*s}BJ5zDIU^WCc}O?mM*H^=Z&dedvWvF0zZ%-XHMTwJ-s1wGVyOrc5U@#<J0bu}$8
zSg4YzxnAy<K<;W~_G(0}PptZ782?vmTfT7=_3Q}U+E(#HfcKA!t70B!-9r(v><a8P
z9I{IT*CPrtPwQ4Wd5tdjyPO3&x!zeI$B&30NNz0Inw**Mp-wdMVjA#kUwBstK7KB2
z&wbX3CH?!dS4DUsxpb#jXguEbF}$4h9Z9kcithqB=K!=H$gkpK-K2{}(Td$9lJrwk
zX`MJfz%{S$9)PP&W26Ol8~59+Y?MqD_{-cg7;OgK&O15N59raXtsn!)tUM82E!NNH
zB$CizzYfkfo6<q;a!r*RrLyqnFu>?mJDk<HFGYm2MxAYJYmqL#x~Vu#x-7G6&#Ie1
zds*?^YEh}c{|eMYE>+@<gxG!Qb)R`pPjZba^4L?RV6d;Hfs3=x1W!#?F<4C?`}9zA
zr9isD%TjSh&Fxlr`?EmjbLsh<BZXIyDQPaA%|(n`S+~Be%{l13&*Fn95%v1k_iE+4
zzSDhGS~SRIG4*K+1<xRg@37tEo^NtIWFD~sY!b$NhHtRpI?AK?qfPB#$M~}y4)qfd
zd6u^$d#t?Ew{a6u#RCx1END;yP7N4bG<-|7u`50Z+YVZ7O*zS6Owm33Jy|TQOcM^=
z5txF>-qv}?n1^4jRf~C#1)xyXcYI%lCs>yh+!h^M&sz=K$F*I4siCfJH2^yK#J*0x
zt}OO05Yp{&-XZf&Z3Mj*0AJWSY85>IBj$ATW(sgMpPS{$G;Ho9wz)m4c8+P!OD%Yc
z{pO(Wn3Badh{^3=JM?D<{54By!UT`Rvb0!N@Mh=68gV)S-n=@>w!R8}c)oq}{Swnb
zl8rT^KhEhuo!P4dW4Bja+sp*N3zxF8i=At#Tw-r-F5tf2ueAao2mvt-RhPn7T~#Hu
z<)9#G&VN)hH+B|-T?I|ewXyboa)Tz0Cq6dxHr~olpXvMM^*Z);^ZHYt-@IF+w4-#+
zf@;KWNvYe?{ckbvSN`r{JS9AkaBlDki;?R;yo|p=7?=0Cj?$wTzY7B93fq>_Ruso<
z)I>AJh)v_MYkZD><uKvA229xdPu027r{3U1`^*QO*`yYAx528MRvDImgcQ&=RN6MW
zB#D~vh^B0V40`ycQhA<9|6k9$R`Xlv;==1`WtVD;ib0JC>aYD(tu09#kE6KiL{z_%
zdJ9js<qnO~c^+w9`FVBbL2bD6c2zD}ml)p@V|1e;Bq3f{OrGsS8Ib(&rBEuDiwzx$
z&dkw<in__>$zCH5dGbI_wxenNPV1_0u7QCD{2fSb+~Lx2Iim~<m-^Dzp~bwWN0r`m
zk}lN$<nwRg2J$8!oa5WD)f<(~XL9x4)jOBfG!<2b2PA#)Pp<=?At7duy}V#cB79B;
z=oy;eEEo_Ax=Sp<d-sDor7DG?0_A;39a9?G?H7=J=jn%edwaf_G<4yUG`>@P=zmiZ
z^!Jp+n$X4H`%g-O*!G!Mm;Uqw4#<(mfRtq4KhQ@&Akq5o;6ElWuq)72K(8f3X8781
zr2zyw_d>m@dw{<@CL#Yo@|0C2;u$T)$1F0sru~w;3i%K8D~|o{=XaRr8Q0ME;_{h)
zzp$$NLDNNqkvJ$kNMVCCBtn)czY7Uv!QJ*ojYg`RH1b~MCE0BDvZZwl7oaH5G;wL)
z^>mYchb0Ug9(8d9G)zjFo_|IFfw{1mO9Y#39fr~Yc>&N|&<+~|lj@_2<0L%f1;%MU
zx#*E7cq&B?s6%@hpXG)y81)5yZ5*XFea_w??mzkV_V%|h18WPsaUr-HoImiTKWik5
zVkO4l9U}m=&urSEFXz6%z?P;j_i}e1cD5j$m9cWb6?V2z6K|(}6e6O<`Zhgp%OB5b
zE%2@Haq8&Zck8}yB8o16_F<I9LyD`)Gpa1|HWGG-HB}=p0D9?Ju<54cN@eh%^H$Qf
z=TO=+C}yI&<mixXmP>cgZkf(vrmRnB{|6FV7q+qTHEn!?cniV~o~Xip!L8nJ8qj;J
z^%k_%(12|UP$G)m>UYg>iR*Wz1OpjN{sEZE<mgQhL(zk3TYpI4F{WGxV`sUa9I}cg
zXu!6U{GeCC6n!SmAL~oDY0RGO8r!%oJB`Siz=p}@rr;6e4&X06AbBv28rPn3X9qd}
z$eQe}JOs$$6SZ9+TA9)ia;hY`kCOC+Ub-UJ-<=N+ZH{fmNY+UQymQf`w#C;5F35Jq
zlx$~YOa!#FH5oLQ-V^I4l5bKvV^C9Btj2<c!_rtGN}?<Clz)NlC?bf?OMQJpOApzt
ziC)Lh45elrROQM=o~y7(#REDnO4MplsLu?YY71e!#xnxfqdn(!_6GEw_oO-xYObWo
z13-omj>0D(<nfTtPL}i%A)DH;z)MS^DP2*W^khdr_N0%Hm3RYrF)~_&%QEZc<>g3V
zQr;W2$G%a)*)fDQQtt`+GL-Snw@{De9(Z1<DWj^j+dya`sh)h-WdlA)kP3*AaAX8Y
zjSyuFlDMie8KGxCKmaJ+q@nkM>t(1cTk017OGK&&*0cNeRBfAsw`@z5&LlM>LMOXr
z@A8o_Z8@}J3=ni8a9OR!9#=I{A_PEp0Fk1!R$NvOw;M?ZQkRPzj!T!)qF^}`J=+BB
z<AaUyKSfE*T!*5voO<$k<h=5^fCNTcc2VVriO$gA(6#p5!Jf^hGS;L|Ni3(mfe)d(
z(&jtb6ZGHVTh&KM@lc+0cxo|u8j+zsJf?I{h!(+&iD^GeweIS&gAR__*tPu{wi?}A
zQORq4HWqq@Gc}Hnc)jUl2mHgQG^JtY4Y|GdQ%dL0`xqm9&N#yu2OGyCp5d1YcR2j!
zAM}wt7?9BOsoZb<DM?+`^ZG)Oo<~JPQ%u-a&A&UrZPZ5Tv{Zub;@VO$F0hm)`$0A3
z%3p!vFJcW3QgpQc)FAz+)*fA4Fl#INnY%!85pJ}j>vlc~!mg_F7VN!3MG4_Lo}LQR
z$4kMHcD+U6YrYgH9r`4rAStU-fS#SmjdbOoZmc8x!#8=vcVy){YgMD#kUS6&%hrsR
zp~1j2g9Lb~Bu|J+!v(0`pn=Lo$u7{K$WmSu>6{k_x?GlRsSOn(HsK1m`3-@_ZIM1n
z1Ha(ry_<~x)IiZNP_i~?W0q%%QBb;EpxOph1FL{6IqM1?oaat^7LH&-ep_NAtIU)c
zsJG3V7_j;Jvi8iXk6~{`-s_;sjRd4qwYVMrs(Hk?yZP(H&$4-=odHcu?A6;lAB@ij
zRMe!(I-IrsNjAkugK3Hp$wB6vH%&+@LCD+_TSFheMXtg#TMg*qb_1DnmR)~EPs%%<
zZ(Hf)hw$boroMxpug~kySnapi$eZ}xVb>r0p!wN}HNlimjab_}Lwpxz<JHM~<$Rpy
zTT8%36@BWjn5=k**Xf~+w(<`VLzypA_y<b!OpgNgitDe}_G>O5QE!L_pRErPfCV*z
z6w`0%$zTFmS*5T*lQgAmsZ0^(K6xu<TcFZ|v)I0C0>mHQ`mCv}Bi-cvQtQ6}IeidI
z-d!)-`&YZ&AZ?*hzd0rMV*K)OsD_$Ky7@gPRP%z&q<)!7B)HBlV|bCh*g6P<8KQQA
zZpu<mh}16wSPtA+DC!PE1S`%%zavsshK_PpzL1WJG;E7%UqpFbfIa`HLD3NGXg48d
z3PHE@o?s&hBZott&IZJ#9>JDYZ&g9mSaYb-JZPhAeW{R!Q#i_=FmWw#iS>`O3k6<l
zb&jzL4rKiJX@}<B$1oS5JRU3R>r9AQ0;2w83#AL>EyAhxCHzal#^@k%BJY3Un9X{l
zpHj;rpG=C?1|!SGCucogf!529s|ohFw1&d3Ue8}W)GvHLIjG4&Vii}&TozElc?wyG
zEF=J92mz;{<rwLF$u?P4??5`J%6l7hXrJ1FK!5FHT!{q>fa4?p9EYHB7C9lQU%334
zLk%v*)mra=|38Y9lyelRC$QYe?4e4}VaAViu^3gEtngyQlwXS492aEW2;CIYjD<+5
zUUZhv&r<iy))P}E@%}RFo<6pBnlFFnONs#zgKikMtvy%Q_Pz+Wr7AM^*Bioy$6LOs
zH-Wvf{v|O-zDxDc*+M<iuBD=bR5eResKZFRN5V`|w~~IKqzpJDn>PnKT^MP!CJ&3!
z*miAWQHqIv>#4yd+hRxVYOmMHt2A_A0NP)W81Js!j#h6lQv{I6s*HBHdeC`0xELOj
zFsdAqrL5sRR~ac>N<poQ`mY9D%sa;Y{UMqd1k;Bq6SSu(T?zK^AH++-S5|eBJ%bFt
z<exc>+xD?;EkvoTH1B**cfbkMMuoG+F>)jq6^<~Wbe?kFujZL<gzQ8ZZB_<JS5`96
z=jhs(65+fH<k^BPwu0@%oy5#(gPvL)mkYUU^}az{$@M?cP+as-RiWBR(fO<Vd?Mu#
zWeX)7#luZ4r3tz)po|S;Wec>Cmix*gYhMegX($6EWhw{OPP=W=>QGqpnQti5FQ~FF
zi`A)k=I21e%O6cMnA!e;SMTp%5AT8JP)*1`QLcivs2CcS;ik2eW^f)wnnmdvg0iMz
zAZ6`xQZZCiRl|2A;l}F?wIEjjm<Y<RSPYMHMS+?CRfR3+w%ld~GruGv^Fa_%uYv(G
z9kNf8e;g#QB^`bafEr0Xq!?)3ZHv?^qXg$IB;#S{ePV%5>zdp2kC*3}aTcizPXy0G
z*i-T(Y5M%br3-D1Qr{GOG;K26$3^es4Lj|}F!mB;1E9m(wdHB5#6}QZF(&Pn>T&)-
zRin~wTJhR>d*?JN;}EgI3(6Jh#Cj#O$%ltq4--N}6u9!N0a>fCV?K_SHA>A`Q1{UT
z!)0E=&(0I371bI*o+Vg5sH#Wm3V|g^&}P*$3YM?|^673)XwMY_JqTj(G`+_}tDC2v
zcRk6{>xkP>6kX4Mj(44k`(fL}_&E9m{$CmodY^)lZ67eG^AS;c;almMWE;{c*-{Te
zuab%{uS!>&5xd#W4zf*izURHIOa5pcOOH13ITz^6LDxRAewH#Y{`lccY=$|u+-gnd
zS*;q94&)A?+5pg~hAFkAmw9;ReSoYx4^gDKU9m=^?EFHc>0T&D)Nj$r+reXu9QxRg
zuk3k>vwwlP>`FlXoA>O6`{ugRA2bzb8o+uTwl;k~%78)p^LpA8=;LF9{^~cf$?<OD
zHJ?a58el><?)`ntcj#T<u9t=HIsQ*BKJ>g~QfRKBJoeq<;Vuh=mFrY!|F;DNxPl=m
zs~5GN<ld^PiiiRp?1UccV3!dR3`-~v3Y-s!y?28YD)huH{V-5=`LhGqg_>v{HeiOO
zYPh<dYU|@4i17#sTcaod73WnfYWYEeJ1Fy=!ESnDpNRT{03CE!>eh-7%I%qQM%t7<
zOJ??qOxi3Zq_!UdXsiNZyr*E3I1VU{f`&}d@u8JKpOX%&S$)Z^epN(jhk92N)$7IB
z%1c^%cSy~L`6GR|4SruUg^>#2Oh1(=RT2uI6^1epJBl1N{>}^<V+izc{~ufL9uH;y
z{*SXNm6(!45mTvbIm}jMbC{`A$VyR;F<TO2Vzwev#*C6P*=n(|OwPoZ9ENh3!8mMd
zH5i8wbFk$&x$li}uNkwySMT@t^Lade-^bTK=HZXqJ@@^3UDx%xuIHf<cv@X#giP*(
zF-ex84*sxiB1>}iix<GdMtU{pTo_tr5IqJDyygs9hPq#P{hB=(p+BFrh+!IMfBHnY
zkuec-Bv>VqYj_Z_lqmLvz<MsvXoLc0z8ZpYkY{0Byk)fg30NcUrO)?IN8I|C8HdDt
zH$FyE^o?^=kIAp*dngvSE4K8h4ha6A_bIbiY%B$j9{Q@8y?*OjB}R^hXwujrT;TZP
zqseu{SR*1>EVibNlJ0cdqa_nHWb3i<wqu5dFy`UnqNQ1wtmAO-YCce5=;ro~Blo{}
zWI8RrvZ&}o&Fg}ZH83X#wR1Q#wDbjB{{32|<&$WDoeOdpu{{o732rQFtjkm>nVVMV
z@!YzyDCmX82a0!`&Z3%smGb>)Wj~>&k194fgZsO&R>C3h#!1pL<hTek1`>84PLtZs
zHiL0oTrx)wtLG{X_3hG8SkQpI1VYqEhr}Z%U}G-B!L46zA1TD`=&T4Cp_)QVcNK=0
zyl(<z&3=Bc%BnuRDAzwJBaol9P9BBkX>C7o2=rY501TSe3?at=i4xb4(Vg=zgI6+*
z+Z9Ldu9e$fs1UhO&WF>t){==G=PXj1+QZGfP_M2i(Y{AR=N6GYfUJakyV%Ja%MtOC
zsNa*LgdS<K1LQnhLLL^@p^FYGzMb=7cGxhYI<5DYWQf+*gYmoxF&zaEYum)c9Ol*!
z^Y#2Q9|^bY3$LuPgKCu4eug>nopc6aaw}|}56PrR9qjqow9fC;e0!cAj9K`LvgZYH
zY)NOpsbto=A^9etM!lTpO08B7W%5J%kUKt6+Ru23cW*Yn1;%@3L(Q34Ryt25UqXYj
zC;duIKG_?cm7U+<dHc6rTOR*(G#Sjc?Hoi2-KaGDx~gTc0%Fl%$S>c^9$`o-m&XP1
zhB!DVCTzLF`Cwr7yAh8!P!+StrEGl6#dcu)B>9WOx|*JS=c)j9z8YSX5M-C+m!Qs-
zhtzMWd|aJwNBV}4+W^NzcIf8pWE+t=T)jtQ5g)8pDI;U3M2b^6!SnWef$#X_=-XSt
z5@O^!tM87uXj;e69B9yKJhB%p!GUt47rSq*lnrJ)ZKtSvsT~Rwypr+>s!A`A@2G|A
z8B7GBST_xaH?6sM0}4kn7~L#X?(PG^b{FcPw7LfD!PigC?ERW>?+Le)%9Wyhzn0VB
zi{7K%#K#M&8@e#5jSX^bhbdJFu|U2V8m@-v9e^Tc<t4Z8r&vXSytt}ST}dv)_c2+_
z$29FF?vx#hTmI5D-+O`_))(Sr_Bq$EsiY@7C0tpAgU;fSJwcMovP;x%AB@Ca2wb<(
zotXFBHr!5%i@2PE5t3qc{H=#dV7qis+H1{&zVk9h6A>u3EvC{oh0D~vDbAwkDA$3T
z>|XJvoHGse>}MBQvXJ+!${@tG`ErC0>8z}Ue`MOoiu4g2Dc4#NuSgO^t`D<I;-*};
zQA`m2)hUUwQ_a9<<E-|l<l6RHqClT*O5h_+&N&@Fd;5+#7Z5PVl3o(o{!J?1@|Sm`
zc7rr~7f`G7_N~=(uG8Z<EaS(to9Z^gZn?RdKA6-wv>6&AhmAXRV%u)es%L?3m{^UM
zj7I77_z#*hB6gaG+t?Xjtb0}Chjo=yfS(*YTNNHn2)de3C_05E%*EA^l5s@Wjnu(a
z&u-FY`S-(e;~=nevw7{$v0C%i=aZ%YP0moc&yue0LV{6ZvxX#Nye<HF)C^fvFc);|
z_+iCEW>rjTk7cnE&HO7JypO#e2>ypG#!c$*DJal0$pt#C24s^nR*XUf*9zjrKC(mm
zm~)8diceKRIGEZQ9^lvIY^S}%`_Fln3=d#f_(?y1SN5lSML%g6i6gsssRDh>Qm^Nf
zRVOb=plj)(`OXh_b`WT{taSR@aRy9{b0kOK&t~Nv8UkY~wc}Mdni;F;iTyr7OSpOD
z1=W?yGCS~=YH1Cs@z~As<NXmB#FW-ek6F#&B!qsBK!d!YS|>;v>*kUYR^v-8R*R(%
zMA1Gy(o`fOsNDBtM3luymNZYTFZA=W(_(4-*!7?N{gkNtz(v6sLzs>R>I*h60VOU6
zHj(zgI7w--+#gUdEDOow;ySA70DCv$(2<#C-H>P@P*cNiC$ET~XSLS&&iTYM0;7Y(
zIiwnZR{L-pxvg?LJM)FItO=NvtG`&QZ?=NQTko&$mg{s&pCAFZ3K7?n{LfeeigiEr
zpg)3Y{W3ON4=NwL>ZHBwJc89{Y6QEP5XM|O{I#J4cW>X$efP0>srA1rBkEw2#e*ef
zP35C&XrQUHAKBi8V^JBht6;s?->B7X=fnXjh~iL>I9j)J82ep6#a)=L)+0&>%{Tc~
z*m~X-s-j22&g~7>9t?t*i2P~Q_`9OB=4nStA8N!vSFxpw5FUL9zZE<e`wetvPs#hY
zRbIiI+D*e2QD#>q*Fw+p&kZrzwli6cB{`w@Z^U<BZ0-+_su;hN{AtRW|0zSVTS*QM
z!4KnTZJV%W)DB#I&_cP)n0#jn6RW_CQAer!`hbHXse5I0{R;Q3gmSSA$XiaT4VzLT
zMS+9z8`;`<8CB#4$Jcd(b@Z)BoTZ)No!fn0g0@>F9m=xUP;l_L=55Jp@&~<!&-qQk
zd#x_|Qvc}tFn;ECfV=J86;0qmQ^Whl`OUR#K+oTwYSO&5cE_N~KSkiC>cQ7KO!?Yo
zC|@hCqsNS`bW9kDrEycJglt@g;2UJx6_P8qaR!^gIect7{__i1HE#cq{ET7j%lAkM
z*Jr54cMM7KX=vm>?Y^LU;cevpjIZ>H|7US9OS>i*O&0?>yHe?U&<?fsp`1EQIS2Y1
zzTzBEWXaDX3A74wCT!H#Y$nDh`D5X*H}~$`!d8pH3~U=fGsj+RcsQr9VbFYKW*P6w
zgQTMvA#k>*iMN;;E1qHiutsb=PFp$))MRpH(bR4ZI4}u+#nm^Y;evY7lT0d+ZjlB{
z<hlb<6EhzGKhymc&R5IF2$M%3)szLd$yH!tIB8zfkaM1sJ$`<eSqw?vgq_W)5~vZQ
zPhCJ+0|qU!*2tLwCp#ie?#N3;f5m$B0jwwwG1diS2%u)ditAngU&(1eq2E@FpgK4^
zu>0gd{VO+8%&>Qcs7Ye98Ug^z1GcunV%9iW?p#KucVi9eQ(T+j4M}R;NLu+sNWYr#
zW1-3_C`=N+tD~<vvJ1f{I(XOp`X|s`SrTWNEy9($tQBAnQ+wIiK?^_MF7yUU1cR*W
zH$*vZ+1r&+J~6v}y^H-1Pye1ASX^kR|NG?aCm+V`ZLwG5FKMKDskF{~g>~Tm?f+jF
z^8d_pl)<vFLKfSoz=+`C6-9d_dn1fbkb47m;b@9b@PKj>m%t*LdDx-408vOM792iw
z5Kqrz?k;P&VwA?bN2K*#X0hKtR`s5Tweqw+#Kqw3aKc%hJ{bq{5ac9CG}Iiiz4&4l
zdk|jf0EM0obtCjC|K+F;G0*G`w2~g~x|Il%qnxv^w+uZ_D)8aG3}FOrd0RUAviEMk
zX*Ee{?J~HtKyr6`-f{3DQqkcv5=(I?KuR6!*D`>N==~|Tz6cXPw?EXuNDc_)iFlg9
z{14te7Pms~YqXSvSYsIhMrOV7g@JbncXqj-nt6ea!$Xk`sg#3(U?(ghc0y;)wwd}#
zOITHc7p7~@<Z0!&)ungnF@b*z@H$;iNVM!x-(Rc?f<{`j*zOyi8z)((z7C9gW)5Ur
zZ;IQcvg)yxD<=sTlhDcv6nPpvq-4PJ1xRzcx*Sb=0o>YF8JP|FAyV4=yBF%DdU<rq
z&f@mYTU&<ti64U=0tKj&OF%^81nMJAfzpI|v3u6iIX7_ePmv1lER4FaR&3UMCr}t$
z;Z19Iza#9`7tuOeR4&1n?xS<p3c}UQNPhiG&spwartyVkzGItG7k+<%o-X|g5mA-`
zDqL+RRSz=$3QX03yHl4ZOxh<=5J{3QJB%<p^A3!FiGR4O1|V7q^yJ$r<{Lj(mrdB-
z{n|w(+>P{!&yV_Pc0HrGng8efuA76(ia(EK-EEN8j|^KKTdDV~hbBfReOwGW854{S
zqGd}jtHTs_CE1>T%C$HT_vlv?9(e_nRw6kN8CZ!OtWt~#YU%M7_-z1OmI!<~?XGwu
z-KY616X#y{_L1!A#}T<Chq{r47a7w7RV+I_@%ZKHh8D-bH~cEIMWeF~*#~#2{Il}~
zY78ic(Yy0DBVeDbPhLxH_JmbCseqgp@9qV5{;cguakK~TOn<?!oG7!Q_(7hJ>fS^c
zoboc;+YIZbQ0xJ&%Q4>RA~Pb|r>o0=f2FHZSy7{<tni~j;h5Cs{ZnYf#I>VVgwvd%
z?#F*MLcc5&Y^zTwADv6eM`}+Ekg|NC$ujBfKk9ux{k*cZvwZg1FU_x>%X7*Kemw#d
zIlBJ`qk|p=eS)1$Q}hip0zFPB>6;M6!9EL)9(k%2x4{y(0r9*rRLQVh)b=9Vcp*8)
z$)729#XO71`^{8?6#xFxVQib0<SMCb{K}Pe51tRI$ff|?&FVBiLOsZP&@?;^?Nr?~
zxa{ZY-t>^`!nYXTxUZ2tXsI?|zL!-~UCT=L1%g=510GHS$v=Xo#f=LnIAX1?*%_?U
zoj@Rzm6d91TsaHoUQAHv64D<7_B<~!JnA)RDJ_z_`n6vWl6|bUSm0aR7F8OO9WlgO
zPWxaEeeiYF>aR5_e}Q`bpWyPJ5iy7{gYydY46ukPu3&$KuRW(=L;|fDYe5oLe;#ch
z$4#xN{xD>^Xi3`u9E&B|FsUp1SeDoiyUBmvp?Qd6EVfhY@Cmo-KQ)qlwjwZ^^y%c0
znwTh{j?M4FZif=&n$FTcUA4*2PDArZtq3SUHk)U^D<+gWiP73~iaq_)d|Ru6;=$@;
zr3}HztI@YYOGcBzJ~q@ez4l5y#&1-*019=g{Hn-R2joK|TtFfPBev7+0Oe@wD({i4
zyGDAsPl)DMlwV}3?a8QU(L{)i_w{Hi@4A}7rTMo@^PTZ?Hoh{O_*Cv4l~<}i)7pBm
z$AD8SNB9_Dw-`?W>rU+qtlQxdAjBoeRrBZW7w6_NrqoGi*9rjoxW{uqZdJ-V<QKBi
z7!+rFyb4KHsD1k}%Eicu&HioQRvSQ?y87RVqO#%xZao;v@sc<j*`T{D5+pa{rT{&u
zqRro6sM$))Q41ON`SgG>TRWR6w&}IH#Q*fVw((J8^Z9ETsqPM@nvb#%ZaaZ{=8D+j
zyA&GfQlGU9>@Hlg#d_pHB)q!PHLTdI7^=a3o7J{T<8pS)c(T9M+mRzX9Sr<DisPS-
zRrsbH7&Le5KR_5heF61l_CL*cnXzJ1zc^ikj8<$`mu&(VdA(0rqV$c3z4Z6BUz=UU
zbWLK`D?%eCq51d=%1!8O1!F$Dt1uiMdr!E3{yE_et<3+!+g&=DnO|IwRtEq10=>Wu
zy+gW3T0c<)P51!3a4%!1uH3Grw|S<9YrFk)uU22Le&rKq{UeU4RjHRAwxYXT<=XaB
zn06A1*7iFcI@dH2C3byi5rv8O-_l=)Pi)A}N(#?0as6g)@>^K9^Pt=g_>O%N&jO9=
z$!d~VUE@=i`bCC+R4D%Z>kC&KAD&fGbOYs`L7Y$myf%!x1duyVWp)w;2PHILjE3f=
z=a5@MjG@nrH7m2+>XB_I2@aSlO|G&v7HidJ2NaXz$GL11XtMTB(d0ePda2%Ij%{DT
zhb|yWME%b*`<iX%@n1zl;e<E~)Hq%G0Q&R>tUJdM`7N1MZwX>^b`ZosJLgWl$4{n!
zXwCdsar}dzTZdd<P7;7J`)5XE==G<)8*&K|_x7rh_lE=c+8L9I3Ze-yrKcy+%v7>F
zbMEu!IWOT?-MeF%Q7K6u1Cw{`Nz!u)e3JS7lt<)`FVDr$41oX}zRUHI;_Kn;CD;Jr
z5)0QvFk3QbTTuDgU>t^fbXV$cG%%eb#y?o1r_<^_SCk{nR=BvIv_1H)9zIoWQtmeg
zEGr)x;QaZR>w)!eoPt$k>xNjNn3Ds`W_PX(R$2hbk5|n@5o!3#%?<pz787Sa<73mH
zrP(>fXGg}(o2H?Afd19rpS&azhWII=$gzL)1ny_huh$nRaOqnWd;#Q@Yh@4f;#htT
zVpWL|7^Om%agQ6W-nu7VR6aSyOE;vY+S=TFwv$EDXakL4TmnVn^LBr2ij3s^Wk0@t
z{2w5A7MWt}ElO8Lg79!@8s%gm;@*zc9w03*Y9cuu)@fDG@@IU^vq<|V3t!GP<}SSQ
z@p?b%duHE?uGMx2ty}pwt|o(ryw%`_<ENoz@2{$55hk-nPd0uFw+vQ3F1oHAxaXJH
zhZ<+^oY)D@jmjs`v;CkvuS7=L^;YDXIqleO{S?>y5cVO+xRaA|fz0P->J{e>zY%#;
z9K_=jq!WHL=VXtTf%t}^-y7qfuKe7Q9rv=wtniOLzn)fJbpdJZ0X+SX4SL>f7{GJU
z|5s@jU@9oK)xf$76)+zht9Xf^I6GiQ>S7-U4kt8qvQ2xovwts2nviJg!VJ;5?~zh8
zcCVpfC2Ny*GbZ7XGE9@}W2Rg;BEY^?B>N5_oq&&l(R!@tb2U88Rap01Oq?J1av6$m
zsHFDOb>soX1nS=Ehn{Z+FcFx|Nct&QJyo~*)QZnpMnLpNva!Pp)Flv3W19m+uA9Jp
z?xo$dA#F#}&p>OuR9m!&w~6c~@El~A8pFoP7|I<{F0eZt+vj<t`#@>s6~d~2akLKo
z#{M@%JFN7t(^pwQj4U54Of_;(yZ>SE!I|1Q)t<M%-}daJ7V=}BI&3}Dm|IeyFobWU
zRLr>od3PUY@4&B!`ogBV%te>xZGPPK6P1fw<3FkXgjx@7En6Nb<fwsLGoTUZ;2U)M
zYyf&ANj}}JbQA^KXX)bcuEz^5X~<Xf<2F$MF`c@TU;5mfmD6hsBpF924rSZ`ElFSz
z!Lwn+@XFz%AUX$tcm1`rQUImTE%GQKJsF2;)`wA|?qrbN=--gLxsCo!BG6`V_ox{G
zPKWA-tHa05A`FZ@_#gA$Nrx~0u4!))7eS`qOq_dxe%k<`MzBijSR~i=Jr2l>n?sV)
zR5K1C5P5J%bZ<FIYeXVPmCoqicbQJ9vUr9Ye*rD%6}>I3XPPy>&zX?EwQ<oZ1L9@4
zc#zW<cLI~}uNbIaldtpDW6!PvKj#h~?X~*yLSW%g5vu(;=jE(V+He1Z76q}kxyIi1
z$i62{CMqY;zvJY)m@r<H1yo8Fk-fXHyWz!0OZOC7iUGZm4qDPr`1!`@=1CPu8}u8Q
zqc=WvcNv-{JIQ<1xFea9o8i#Ts`9dZI<;I;?={EVfp*c)DzXjy2s0aRex+p^`a;c6
zU9QI;BW?rBF2_Ert=YKonJ*sC{h?@I9d-(3nljCblf}bxzy#s-L&uNt4rxQbsvs~}
z2~xn|cLx;<V(Ka1W@tbXTRp5Rr=lo7K_e*&lkRA-%b^K{K7#i~#vxz#frv%@%B<Z;
z&<}%vUpw!Ukvm*vwwHdMAI2;U2+0doqFw8ARsZw5592P{oh=;~dFvp@r(D}3FUTeF
zmrS3Y*?Xk<w$Tym?*jL24OWqhX~IR^4nPK`Ll*?GK0r>yp<w<#=K*LWr*A=MT|Qx1
z<vw_S1n<|3<ihqH9*x)*QmE-u!u{V?HCRQ&ZKM7htMtzgR)%$)(*HHL7558Z1c38v
zY$Vt>IAyRnuj2wx+sGpw*~X8S&=Oken5vYQ7-8aK<g6!1r3GP94N*{4=E%qZ_h#1Q
z9{7AyA(`gbKv<VG#x4&CP>M?V^+^nFcyA2uj}?Um9;6ss0tg@X*Itl7zaJDg!}l@q
zR86wGM`It$#Klc;9=3`HHah@R8m{)X@?*A5G~RwtNOv8&xi9d|tCo0Q-(SUf#%Gk|
z+khLOu|j<}3?>;M5UoFs#FmnooqDJQjAA$Scf6)8N*Lurx>U;#f`d}8BTbNQ=S4D}
z3s3ZH8?u~jJ}$y*5--f&%?tc%>~2!|mG14umBlA;19>sHZoWcIZ3?{^U@#P$X)+SR
z1!6$`z)8b}G_{gyZb1S(Nw>P8B^Qs$oo15#ulX#Sok6wD55hvH6W%psd!=-Uu1o<l
zKGuIW<G%y{d$Lt@(S#Xv=w@U)e*BKq1i^zAa@blSbuWSgCj;Ze2mx@P5&36`o?A?y
z+Q!Z|MT>|#C?})D6MBEoed%bpUlLa_ryF$ME4;~9jbZ&xr}6c}Pk;ZUfmdt>lZXvN
za<jD<+BN1b#RzUaE|`W!g!26(^36bhIib_cg!@X}vt5COISEv~_aDe-W$pLvo~Psa
zww_`@AM=|Soj=qVElA+h8^^DXU#zZqHPniG+IzIq-?%??j1SbRT8hRj7&ZXM*Hw5m
zjNe#b+pEqPJpA0xD9z_o&gez0r&^&(373HlOVvN<@$664m1|kOGK{pUII3(dhxd0g
zaF~=l<Nfu|<PTU<R>Plv7YK5bPUwIEr7lwI#Bw$;=``HSH!TPXURYWqxz(`Jitg-7
z&6JJ+Ek&d1$V1PAuKnqBAm-p)qx4M`@Nt^=sjrdF&4;a472YeeP}}3aw|(T!yKCN?
z5B?NqukCiH?!x+U)DEQSTwOBv2N<A~$9LHB_Wr@WGPoew^X2-zqQ4oE&*FI85yHMq
zm&B&Oo=ns%^q$a)Q1|s7`JA8QHN-OTpV{lfz4KBqf$!aQ;A~*rjmAvzrMT;vPPQx?
z6`NNse|E;;*i10*g@P~(f7_x&IK+p>qIccH?#osAfwT*B(=iW(&?$1h<XZF%^kz(A
zv)wJG(+l6px;{dd5BE&jq))fO#6)o_-xB!eh^FN_CW?)AU*YgJ3KQz@3N7RyTp|-&
z#c_xj9apIK6i$m_wnX1b_7&UZwTPk*FGdgrn`UZ2xBGx}q-%9cid|lgc~dFxYQ?8+
zx5vc&Cr}d{P>TLWs~Pm!kffUoh$!hRif>aK`2q0$m9LG2dB;9X#9y^>5h*R(od)Y#
zNEi7QDY+-E0P@7h>N{ps;0<WpFXa9s*zUs%bT4qj#V9sP0Dfk_V!vE7wiWbUNYq2}
z{m7b#w_}2Qj->s*tweqXnoh><bQRgqb`kRS#yavP051B%k2}TO9OADvyfmI@x%1;|
zctc9XjNW}R&1Iz7OBrFH(<yhh+~T6rY`wKE?gi4!NV=EfRGQWy2R*a7mwUh6{1W^q
zDJiX2ilQ%M$n20>>HD<`>?Z0vy~tDs1t%swrfsc5tEB5AWg$Kv^!Dlg=1<hU+vhkI
z&peh><oy9lFNv<|#eBY6$1fgSY9i1t)F~-IO)J(Qy<b#3=14QalgGC&DgtLz{#iw2
z;GDP()@>JnrgkeG2&q0)SQD%iI%@^CW`S@*D^17tOer3qA-7QW@ht?&*1WWQ_<UT^
zY<a04#i{=VVg&1qx8J9x-9yJWU$y~6Q;!jfX7=YdB+&`f3}3Owcr6b%^AEuH;N?3I
zBj9*Cs4Tw*ZovzH*2cd!^CY#fv6M(lB*D(7>uUSt_k@c(1-{NfVi)^%|Kklgmj)Qk
zK{qdr(c1k=esA!h)<zZcu+J;sl62mL>SRV7x3Du+`Eol3=LY;PIgkrD?hDJ&^#%zG
zk_cD>6OUDcrekcK;5*`=B*}un4L%9s;+AP!klTJnt&KP92WGAOO@PYT6i(f%8_S8f
zS`^&4uW>r@S7O$xUBV;zDdn}>w2obZYQdTTO=1SJAtz2C@99(hGB4AowQXRszm5kk
za|k%ZIH807xW3W#5y(w`CLL5`nAgEnnYnXDjMhg&Y<Oz3li&>U$o<qv{-A{bHJ@FX
zXAQl}7e^WRuXw$JR(*+$9vS7xubriHD<{x>1|#yFJ+i$l#vkv28fzUzm$9ygU^$!s
z{V_MJU#PEkFD&$GpXtXp50Brq?K=}m+}B@mHtV~in=Yw9VE9S`FV<|BMg)ci((bh!
z_C88<j;I0j@UOaRBXrSX2Y!eAAghtyh5a7>4SN(W<uW$eezPjcEsjqDib?6~kgO{s
z5sce5X&yE^>e4kvkuZ_mfyP9<R93gbXt|yhgt-7on@VQ{4M7rbQYAikEH^LXmiT)L
zT8u)SEWa}9s-8ObIhLrC6v3G3_jB4lcmE7v!tlzyO{G80WmBG+eNaO4XmU+s5D!!(
zYd~IPl)jmIOdgyg5+vZR33TkCrmigfX2~<}VYwe{bOFYvQ;r7W;udXv^T*#i2vhKg
zhoMPRBWI|t!tVaOB+oG3%y5J^Sj2C|h08&2YQt?suS5vu66py*^r{Q7rGy)}E4IG1
zCFUa<^KJ9uTS15WRg;8$b!skwbq5C5ZF*^ND16YUmQYluc|J)$hPns5Tuq!XHct<{
z`8)z}4NX@ZrjSOkJIN>^FU?G$Maaf+UCg=eaAYDSO6nU;^cco0W3;@S3JKJ0151R^
z(C~TRXxxQi%E|J%hV37EL@9U;2h|iM+zs}3;Oe>mDyf(%bP%abSSq;+UzdZW&{a`J
z{sxuoV-@=saxYr!tahV`zr@+$BEq5U#V$7XLwVav{E7EXeR35sSpmKYC*VDN;5cNt
z8zl_+FI_;LVbYPex9@52l1r3N|J3WidtiEksawkJ({^|sYQEchr*@*pPn{=s2ONk&
zzXV#QV-t-&M1P}^h$yd5zKIf+3;qJ9!TFJsk<);F)AK^_%;SM+ftNKjy|upc{86|e
zOPszvICGI$fTZ{hm|cHfwXc3)Ir>!lq;tIE6k$@|`PTqK_V)#8MS<pS-w#$_x)8Hv
z2*^>I-P)VtJF?8UW)n%+oqicO0<Meuus$fs{PO{?iC@;=I8hX%{Jqk58-QuA@>;K=
zn+_2oTLr1~nw3^&Dtad;1ec;0)PYGstJ@xgk9rJXcg!eI_zg3|{x$=^nB_(AYB>8)
zUl^;YhjH}8kVTK(wbhw6?cr+erD2bHsY}=|%KsFDO6qs;GB+TA!5jqP0M2(4lrWW*
z!rqTqb)mI?M2?Gj8gfT|I1#s<pg1tnyk9KPLjrsti6Gvh$L!GjDQkR8vugm;cg}e|
zXg)V?$-Xxjx)`BctVI1ot_n&^C$<4PmZm<9FlC|gXg+(N0C7DxL?IN*cU$Y^LOdsU
z12DeCETwO75WASW++R66P~4>8CHM~gIIu`Lv%fA|K8c3LL+nrRPvEw5gw1&9w1J6Y
zQ;G=nkftYBmYqa+Q@9u)?ei4ariV2YQ@rZy4eg-C6oy5wZ)Y|(zaV7Q)VVNZa_f)<
z(d^oo?0gdoFp4w)e~r=0=uTo#F5f{vI)Td``!A==dJtZGTyXj^PLEvw{nTYgFm;~a
z_@qFoEU|*3efiS*%NIaOQrhtXMO}N$xd9Z?6d&j;W*d66^gPTcjR$UR-QC$ij{;#q
za=;*KCfo#F>l#%-bRRwWEgNXhNz{I5jy7>5u2~znDNGE^r@i}4r?Wh2fQK|ktVsio
zhv{@_C)f+=4{`sv0MAZZ_ad?zAaFo=zCIfPL3iDs15~^BMD~ugB8rV}m+J=kkFeR}
ze5;ft+M~PH4xI*3U9S+{nfhu4uL+@-I6$6abGoR<&*VZD7i*Fs*L@i>)*b7KAF<$U
zilLpr!KzjZkpQ5JmpKEa4H5WwWJy^rKLh^Lt~bvVYOVlmv>?A7L$OT&y@0qXFxQWN
zJlz!vc_FuPJFAi#F{2wmO{8{WcAzvqZQdDx6bdFk!xtKYwa6!1aW7~{Y>w0hNF*@V
ziaC%c)by{?^ZQB)DprNorqX;8wo#~|;U2}NSaJGeA8ZZ?QKS6!6|}BA681g8$Dljd
zdl9>`S-e^VbNv|N%pHr*UiIU2F#OSJ9F0obi&rcCnQ`)ihsYxr23SnJst5VAlcq`v
za4PzL<#{A>jR};>T(uP)XjXccV6^rkTnxstPLNgiYIm%Ax4({y^Qi>Cy5t?x{D>T)
z(?=OKEuuU)8`R?WFSKydU0SkNerOn4PH_wv{M>4*<7$Y^c}*Uq5X5iyKG8dF^sM7P
zw|igMu|{i4*wex7a>fG>)pc7PUu;pwxebQrlr7d($R>_RcZ*GWv2#%-Wseg3e>Zwv
z|McL`PWp9W+FgI$@c5&4z0!x*FfXl2GF{gMCnSe4!tygGKaEXw=rs?o=zKA9u-MMs
zKks0Aq^oyVwPWQ|qa%$O`@U0M#L2e?DK^f3ttj1^o!~DW?86A4UdI}KgBX+`Rt|4S
z@ku~VOtA-c=r|rR-m>@ms%2;IIwEEZVU-jcku}uJ!(D6|G`Ap2UI3DEQ?imGo(d|J
zwnExwOO!IXy+^bn>6AJ0rgG9X=K7IS0<i_~2en;)M~tifBRqw)!)K=PiZvIxD@N=!
zDh~X5o!wA-FU*X=Jdk7-q$CHIdT0nPr)mp2N$VZK02-Bo*JXcC1RV^jA;k=?LvOY)
zQxmZ>N<;jQj>sbnGfK!=zQX`^)*(F_obB*vsb#yzK;=?}vyGj*7XX5n&uyRR6-D9H
zeb0!6sP}@$Xeg+=m7xpp#nB{T1IQx5^2`0UMwRpa8yb-Oe8idtpb0HSK2Bxh1VfW&
z?b+JQ#3hN5w=cos`Esv8gb5F2DJE7Uw2s2_BveQY`WYIsXCk{@WByZ3eZxMe=o9F&
zkCU53%vkwB`1~|jv5zP=kiezCO70XbHdAS5>%a*~%Rnp@q5sgr2ZlYR<Y}&lk9z&D
z4Z0(qujZeHXnM5~f6Nl1i}3ZHa=k#vM#x;Kg{P*h+UR2`Vs-_rBGTmo9kC013tG|`
z?vZ}m*krEIVDEgV|K9$^5~wPc$nc(=^EU+KJU<=j2i|&i?fw*juS=jb?FAZ5YXhP3
zYg<Sm5Y(grv9^n_gES9$4$+<Atj7_Y&4_Lrcmer*$>N9$q&+eGgfWk`8Is$F+O-Tx
z3#(l2Y=|wGk>Y~-mnt?40$IJYUpmr@$TwByfH+sTTyI&(1COJ+w40XB0Z|^jzSKM`
z*t3<Uj3i9$2VtLWRi6<dT+}36i9V&3kyE<HLem6sOB{)TF$iu@s`s2{-nORfKmJuZ
zH)z@9OVS9Lw&yR8r|Xc(D#)(`a*!T1j$iAyTq8OpM|vBlI}eeTkWWuMLz>G8w>JMi
z$2n9R|6{XCY@8Cc9Hd|3Py4G_VzWrk`o~vq8L-PM=JXzIdshZmzEz+2v%jckS54PG
zkgy#tw0XzI=;4zoE(N|VB`IRNNJrMw8?T>^I}a_ZsYSjHe{7X2s(TZE?0I4Gw__e|
zANQs?YoFPu)a%(n-8160W4R^DXIOJ0SHizMgki0F@Ym*j!5*K*5lO!tO1Qq+>rm`(
z0OmV{`w?iK8;ewd-V|D{w3d&xR`7wK5=viAMhGHwYG$4u;#^F=hTn{k+Gv_}2Dnbe
z`u@)(`PCOL6?6XICbT!!XW>$ABv10ry@J>GDiR8F1I`aH<jz$}lqm4t!2XVnWCQT@
zF<RgRN=ipe;FT`U*1G7UVvTfRdLkAW+7}0Vto~B3IP8$XwdTaK(3@s6kCh*LUhd_0
zvI=OnH|<}3Tuh2Cox5wLXPX_?th}<g0LrfoPbr%bhRl+(4QLWQlNKYaQaNznhNiga
zt<5J(C`bC`yYe;-=yo;U#P083O4D=I4z}`<j1zneOG{=~GxP8FsXJV5V6$1({DtX;
zng%5~8|?YNz@At6s)4_*1~G%Oq_M~u7<h_rx83v=nk?4`^9>-XKIW2@63zqOa@%22
zTC*9TT1|8H{PNPHMWf*~WpYV3KGscUSX?rPf3FGpO5-|>C53Abm1V9FUZHM)+zWyV
zTer%6)*7(bSy1Tua;+mq9@hzC|DL%^+hW1l?%ye$@H_{dfXyFU$|h8Pc=I|+&5Y>9
z0<HMvhS1xf@x1HV#ZXmOB{@i955YmPP5ma=^uJwHyqm-!L{MrpOrc{HmgIWUBdfbK
zU2zg1KQr~aYUh2<=Lb~G97`*nGu%8F{-#RYQj_^dH;~P)C|xTVZFUG1AKweTSN+@&
z!x8rL9_bivf-<twIAN}1H*h<~kVuEv&cleh{BQ|4b#8UI`pq0nKF9UohebG(G&-rq
z=?*Cua~ID%Y!AEpr=OMzgj1-2UAN9+5O;NPEI<k-!cghda48(%1dvXyK(+syIWSW#
z%I0@aw;@TzWR7Sh4ueXGz-R=oNC(K8K?qZ1GOjN{|Ijil(HZY}<(&U6G<-DT0%~SE
zR{#Z1w=!@i`W7tH$7`jG*F%+cX~+1N=-hrX?qr|wU})uwcxfogzA?e)O@DZjxtk|H
zJSQ#4gMPjy*!0uj;$Lx9#Y&1Oj<5_3o$3vcI;??SP=H`GN5tv=hrJJ2EY5(opRGEu
zU!ZB<ta<?h=T1LNirfhL;-B8l%m=O>#K~QC^v*o=h=oDWX=j)7zB`w3>XXRbA^Gt@
zFkX$Joz|g21oQ&H7XtV`P^XoUSGM_{G~kYYKn@M`e{#$SB>H;t&Hcwli?;mO5S5b<
zzqh*X?+kOms11_qa1@)0a6*8wX4Pjw2`)&*OF15*b&%qHP@Sapz@GK+J^$nN1B(&S
zk!`DB40e>X&d2XvF_DQlT+VWB8TfVlL$Igbk9qpU_n)s_Ky}Y4QQY2cdD6QjU8~yK
zS*zN{VV~RCwx^C0j@QF~+-cw#_~XXiF~KU8pnQs*6091?@!*p=>tCg}gUWyKY**ZS
z@7%Fy(6!QhYuDNFw=JJ%`|f%sq4?*zr#+^rynT=V{Jh|ubj?KxSUOk!2Zd>@E|6=<
zq;C_1r|H|PzIIgG(CQQyxKON`QWsoA?;?sYTjnRXLH7yNZyqp;`8l0H#{|gJ|H|ew
zu8a~I{bL%Xuk_sq!(}KGaW{HoT7Jq^W($x$Uli{-$YIFgU!{X(D*ybk_K+itjRgLn
za;;iv`C2^n5ao6PcM`Rh4yx^Mu~=BZl^Be7u&uYw13Th24wOh>8`U)qENzdvSN4A1
z|A1mF+Ff>J?A_wY0S>FUCAQ<(2{gwCP}Sbb_B&mrWP3_TvNJv*=|Q)%Lx=N40PK_<
z7sryF62B9#wvV6Yhhc7tULSsYhd?TO?{a5z^I`w7rpg&*xxPFa7@4C-r=}XZm@$TC
zgW;k0PP_`$jN$<P9_q`jndFJq+&gev<N=k4iO*p8L6(gH=3>s-mccsboZKUR_AY$p
z^_oo8rs}%iS{jw^nJLl!<^ON<_Fp9rG-8DpFLF`fxZ4H_m%v<9`=m8AT+5(*$F~g<
zq7!{w>Px?w!)}FBv39Ukk}r4l<1dTqof$GDsv}#26;|W$(T|Ybk|wFE_2udJspf$Z
zJzbZ&1Hl8mDA{SUu0K2yzqGhR?mwc~NXCmw<BJAgJoAP#--wv$bTyzT^swh_bpv5K
zBb>B>?A)REx%l28ZUBK4xNG|r#z#eNXgCn6u=p?4NK4stOS!Fi_vV_eKcls;Xp-Lw
zHMm~@S6+<Vf)hkRor}t3dob3-p~=2oR3&&ZVTq?jcIdP|z#!f#A>P+v-psmdHT-U%
z+mw3UZGHCGr*AQ)pLKkl$I0fxY%L|l8Jch=9lZ7p;pj26ViVA6au#C}bUV<Sv9^Bl
z>quI`=!dt!nHz-!MoyvQwt17AysHO9Ew6zo#3tLF;$nXOC2&T&XsuBw)pt(cCs9(g
zHe+B^E7l6)B~S=Lfj-%_(|;>`H?9bwf0YMXNd&^~Ct!4frA#f_(|)AR&cFTdC<Awg
zVT+y$@cw`dMD~F653zm@;d=a~yGn|!93jk16>OFV!S2%ih`k5{u<spoO|U^oQzMDg
z{fPUSX1zEN+%0&?Zj@~_C0e_^WzE}wt7XX3kv7A<gA5DrFaY9w(J$mjR7kKRPC$){
z3F4wy8iPBF6F#ADXQSmi!38oEUFhwAW!rEDLURQh<s@k6D|0bG>|A{ntYVGXk!_QN
zDfi)JUBk1_i`(wp3nQ^?x{|pr^#l@2Erqzl+<dPR==-@!dUX}CdU%EE7!6)kQdofY
zAZP50Gze&=%?aK+bgedYrK^mRF~ZV?<#M?)QZ1gfJV4q)RuiwJQ7mOY60%Vb<qpg<
zYO@}m0T+?C&?nIHb{U_^+uj7Ps|P|uO9UW4Q1Y|#S|%-YhO@L|0MuVt&>~3(Bg8vk
zMdGy-29(R-D^*jxnh?^InQGTCRTX?ICfMz4Nb+}xhn`h>^UkZZK=I<{EBKR*11<qv
zz0_{U5eWl0oLCRFC{ieWbB$s7L1D^r1(3yKfK^fo24#5YnPT&UvM~^ux*iDcVa*ip
z3~`7P^clZxQr)@-0P!><=!x`=%@+&E$M_e2GpC0#h>fnX%gcR?Wwi>+VHT0-sxeE7
z6dMGb9avUEEp;hA^wVYz7lX7MT?!~@FHlozicOIKk^U~v6jVjeaKa)$(;Mk>Ri5|P
z1zPcDQEh_t%`R6NZB_}?Z;|wNA9}m~8p#zp+jzJbdEn^+S*2L|nXkAu(g6YZS;2=8
zHo9rZVm7p@R7uf`p}323kG)&GI7o5G_aaDj_>%&`<lJgBBR2zhh1z{p*ju^S2Al@h
zku1LaIjeQp=&jMqgCXEO(u6TMFzi^6iBX6Nz#Y4pVZ?&iK-yU3RC)?^uY$)R40dI6
zbZz&%pag<L8UybJ{gD03-COgz$Eez1t}K35&@ttg!*zK{l#bmTb4X~mk1CF#1x)UR
zR~}H%qP56QKpkN|YQ~80YBQ@qKHNo2+D1-y=(qikhEt~doX@+as(I_&<@(&B;MKFa
zp|{FHfQHkp^%-#)%`2XF&a68>rz{6^ueMrFoo5?bQvu|Xyn1m?fGGCX5|xfK3<t1%
z)g{^J^Z-UqgT|c@fXVTn%QNn~$x4Y*d;TN8Qn42?pIdDYkM*c)7zzFOnm^@;(fgpX
zDg)*~q<FfTTwBaZ1n7n42oY@~S+{i(Jw&-IUeqGq@6E`22E^3uYqBm3ML5gipEox}
z**NacXgB&pMtL3Z)bsR@sJ}>H=7&r`Pp3rPl3M5&$|<NBy&a>#IRiOc$WB_Skt=p_
z7o{m;^AUn=XfYuR9Fi}AyIX1)u&iiOz5|*OYl;eyEIPts8a9lvR6@;7O)<MMv7pmP
z1)VLV0VauYj{uEqx;0O8Xql%?uJ9WQ6~E$}1~eRl_nuMVMU~CnPm^?3WfTNw`!PPV
znDd^E)Pw@UYCN;d+xxt-!Z`f@MBxAZr7HUhmatTOM=?i=Wy;iU>LDb0O0b2@<igZ<
z^o?>1wzxPXbKne7j9Z5ooq=d6btbPrJ~c_P^W?IP`z=FJ9@TH+O;TJ=wUYx=wY8Mx
z|AJuACdBDbK{n#5Q+YJitgcDJ9C18H=0Oe;pMNGy2|cBsOPz0}Y9LOag>7gAyL*p6
zXZIEnCU*k_OC7y#qJ=ZI7~y)TEsWh=mU96$J1xD3h@jXhTI*sQUYorgpj)!iv4-UF
zHf!L6L<eZOmP)B!T+L{4#s|%PHTIFEA&uvYiBW~~V}_-nfedn#-z&f>z2nMXj<%Nm
z@j>Mu(C3NevJcBm->l`)0%;F*@^DbgO6ObZ(Fyq_T0*@Z3sgPHrtDo~WOSGRHp3%B
z;p0}XvmE*&P}@OKbS*e?th^?@!zVshywL(JIRJGh;c8-VF^&H#_+$<u)p3eD5(&90
zHb=^K0swdIlz|$Exm=!_9A67G$1PyHIYQnpNK#dvKY!n#zOZVp_8Q-DAYd@U#$wPi
z?UZjc#))+=!ocJ2p7ZsMO))BKQJe+~{OT404MBsGMfZ#f(htaeMCND#SD{h67S|jY
z2^Y3P2u{dsHNyjsj|wrryc+6$z&--x<2bC(Sp|sh75JM|tEcsn=L9?02D8=^e|bJ5
z80rkMW|x>+005l-g8WqAsHEuO)Gz)2|5sPTS{W?}=--@M{8|~d2-6ofQMFK`jdqkd
zIBgT#n#r9fZ9>OQd5>8LkaN70DVnO<_6Sz<HPtvBcd?G2Wel#CE@}C{GfBXIGRY85
zIFA}{=*mRv*`n?U7t`pqpP$LF@^9ggkRJd=UC@Qu0EnJAegtn_Fm^ZD-RTY6n%>4q
z9J`S~S-BNFd1!EHNBCC>AfL`p9MS8DpHK_6vO8z~ReI3{YUl@2x||B^+Kd!x>tP4c
zbQc{t$du&3HX?^q3mjT*3*)=|e5SaDN1<Nv9M%BV&WL|rOxPX*j*MGn$0~|?qDv>t
z;u+Vz%r+L+oGBw@dESriW&J5c=Un=_qtG8f#^u1iB6e(q>?exxu$=IMfZo>ZPu)x&
zZ&z#`WQuEs<R?Y=4P4mB5%#Dp>ij9-@#^>qVE7<vigwwZ@!5=4Z(8znkIHi`6<IKn
z07r^w?WAvz260dafZ6%BvA=<g6P8`Ikfu)SNhTq*c*bW#8qw@?VVVEA{ZIZlN!tEP
z{Kk?uZ+__xC9YdJ(zzWtSmK~y*DmIxZXsF{3i-PxVs%+a6)sqfp7MmeL3SzD6}DXA
zx_Gt$pm~v@<-pSTr-m$#zEE4I5~qTB&+MSF?gY}}(hkdIzHbM6mtqiz2XP1((5u-<
z-9%AAngCn2yMwk7*)Cd%rK}g5Idu4cJF=YPOjO%Z`YOw{x<1X#JB(%E>or6&4acKq
z?gzGfVu=l+F7m_8HghiwTk4w}Y{fkXhM(KTJg(<j9M(?08vsO?@Y|b@%iIyV_&}{N
zC+)0$D3#Z$ID&XXQCzkj?C}2cmIG6cgUh^i<U(iP3Xj*m#NLCVX4%mzqkwEYDF83G
z3l%3&0~wf(uE!^_cavARhT46f0Sk696}zo=5MY_czF(wVoMI}^vo#><gFr1ems|HL
z$SEDGlNklGcRl)g?0O{&-<Ih{m8t%fAlGBSDWaf6a3ULX;2NO26*|pG5>yDRDbf+I
z$<2DKI_!QZ)zBKomWojuLiE^A?(EZjLNGiyAYx~o94?IaGrrW=zr1$joz%~jJN7Xz
zPkHquXp{Vc2%r=ZAk3;rC!4`*2lcy7N;kbWvJ3YpZ*$6pK@m})Eq4O#jrk6R4zQW0
z;7WaRa_v2aSuOtm;QALBfqqs_tRc#o3a6`Iy_AMbm2kh``0rE+wTysBgag_&&af|-
zN65B>pi$J_NI<8~<mR<3?0SkZOnx<3;LO}2cR+lh+IFfMJpIVBNxwEUx@2BYH8DJ=
z>E52k`Xo%HKi7BQFLoa*)Yz>_N&X7NP^Q9Mei-;jW$U1~L|_caVdG-m4nZ3G8#bgH
zORIa4(_#26U#@C9mX*3}chsffUKRQr)LF$Wq=kk&E%J$ud)JWvo_9NI?A>$HU1gac
z=oTy^T&O|JT(ATzPM%1RPB|<VsC@txCBDF+l3>lKtM92q9NK+?9yPlcUD@~aj9p1N
zKuiZ`cRi?_UAfQ+g8x{cByI5Gm6O0|^9u)Xy&eE9{U2%9Fr!n#O6qY49LKd;g0WIA
zPAi=EjgO!^lGzKbw4*m+k0GudhGyBr@Bgf~wxcK60sx+&e#&&cb%sO^&l2vfWmK?!
zR$VrOe5dGbi;wA>ZI$6D;G{s>O#UL`q|1+%AhGTKCVk6}`(A;Jkw~dm*XH^P2xDn+
zgPzu5tb&mGOrPNgm7{{0>`8hlD9|JTVDa}oaE~`BVTcn^$a^0k@|B;2It1GQnluTH
z^?)vC7U~p=&5T89c^PHopOBHu{F~~3u7<@$RdwGhni;X`35$?PjQwNn{Z7j5s??NF
z^M$PfZLB`U1qzCz?j@^qV|8KD1Nkk{nsKMUCX7w0d_PG52|6KSd`E<tkq5uZjp9s<
z4!pGmKD=3kznS>hKuhHxkjY~+X~Db)ik)lCG-0YVo72Hm@4g2@^1VSYQ4Ol8&WpY#
z6HRjgqpfsdsB9K{U}T{#D*Dvi_bfA<s3DDcGkiX{Dk3GvZ-cj(pKa4}ys8yfjYg5b
zv`(7$S>Uu0_b$*xvx<|u6cO0FAwiO@o!AWR(`S3~1@YKVbJo~5`SW_A%kOe42zvGO
zTO?Y^oQLlAQM~sD`v{`Nt8<S5v{_ZI%ay)ZquYX<z8;it53S8B;5%(U(MPkU(2wNz
zWG8Y$FI(<VY$M}4aJp;_a)kpM*mQ(UIu!W%lRdfj>B+R}svX3;iXG9$9iBen)>erW
zT+~Y?TA-9_3=QWKh_tJq&AZyZI;qxUGH&PV`lhbA?oHB-`bO59_*v0wpmQ?dWt=p5
z@LI&vW7h)#d*deoba%QFlK`Y7g$1-Nwsu0=jv4<$!&q&_p9)>bv%}d;a~U(<?r+wD
z#KO8=9twk@Pq7ir)*w|U$#Ip=H=a3}v8ous=BM3lPQO6+>{rtIZ`DR~;XnjICoi79
z8AP^H|3iErOTa$`1@byMqd{Wbc4h)@eC1lZpcA(Z!#*h2giCTo`ud}nyw6mIPz@kl
zviVXOCd>?wANbE4UOk=i8MNrdE~%`U{HyeTmlj_~uE!OF=vo2bjtWu8p|A?zmOZ&?
zsE#?Nuh4t|*<7w4no{&2FDZM(J;47kR<Sku+)0DX7AX!Dyvj)w%C!Cl6bU5Kc`!oq
z?c}VEr&XEq+AksO@1VzV#dAKB4Pv@RFc6x&dhg}jD!YO)n@!CsCftv1&Wc>kET%;Q
z)r+*aw4x&u{{B~bv|CusZY~x{dH__43{nN4WTSPa13j7{q!jvcr5?t`VE0pp1$DG^
zxw_c*`>GeUFe+9a2&Z)U?}gsIA*e66FcyxD)u)t=;@h-8GFXGRuI#<y%l(err}9^}
z(!XF){~u<CVi=f60xOG=1-dMl%KfU-5keX>nj%Tm1H^*Vd7$DNoM(t&swh@aR)XzO
zksqeRIxFsGc*`a7lqjep+SM0c*RZ;wxO`%+K5O;tZ}nMH>u_tQ?Di=)j?zb*um%T(
zHY_yAHYk8m6^EEUIx^+jJ%RT@PBP>`y_f7h<xvZL>Aa6mqF7BWCQ`MKfGz%pZy+lm
zx~hBMu%VckcXVJmDa`U<M1`8<&^tx1Stv$tQWRr1qS(X($J$ql-vxC+3wTIH8n>3u
zwpH}^!m7Z(lc`3zlH!CMX2_31q}b-eA{sgvs68|v6_uMclRz@VHURU3u$=n|ej}b9
ze2e*<(aCq*)A4HS2U)vOnKWTN8Vbu=82=im*B*c70F4yRlxx@8ZP#^VUONC93u3WW
zcm&l+V9xqm57!CQXBs9ohbfyN(1@!gM_uTP@O^fyoKWdSP9FE;FIxHd1$$aMWK=0d
z*UGlh+R6mgw663~6QH`qgL|gBB`0wm^i=#N`8F8u-GE#ayT)NPp|j5jur7CumTKXm
z_QL=Lfb_dpzkHZ!JXRf0GMAk(lK3&jeNggwG1N4C-ur6p2~;l=!Kli&0x>VJrUMl3
zXzI9N!RUy1x(lyO(3|dLSc!}QhY2pd2)QO%?!+{^02VA#cw(gaD1)ruir0|T$((`f
zSB2NS-i`8-kXnD|ve}Vikx~Nj7Aag=Uh-cC%76E0w6jc8(d!O6l&q{)+~`A;_8H+_
zWCYed3;n=0&vJ>rPNojXdh=v%>F1m)wwGNw85D{e4b}U5_+Zr!2Q51e>w>wnlqN<2
zxwot}UDS9EXw(1;7)3nzJDC<tLUxnlumH&v!U<v`2OJ)-t;ul;9qNFgGENVOJ*alx
zKbuo7KLL@r4E=Km4-n_MJ_EBl)@YzuK6Me*O4s%YwjPRqQV{HUWF9C;4O-;vPjIUT
zZS^R{?ltg)2(<p6*4}WSk8%~@{uJ~AC7xDnUY4l@qahdiIJmQgULk<j&!e|ePyvNx
zQa4t0#MYS@ND?>UHz5OKVwq!Kv*)p_(14;4_MU#D2Md-4cN~FizLhUI%e}s@?(pp~
zm!DNX+5Jygqb`GE;|9>U!f624dyX#Kf<WI%H6{y0EA4^@{#sBKgGmr<$vRmFz|AS3
z8KY}x%$Hjdi^vI`KImkMjcDSiV@~_Z*yA_1?uq>FFJ4SpXgm|g&RYRPk6_iMwJLD^
zJkU`(KcBYUs{!Iklx4xQhWqH}2KRvJM-|c|j7+R^IqI7^aD9NK9>A5Nm2J(Ut3b1=
zOD)&lp$4`}2wS#s{8Upv5}s7za!LvH<s*PjcgckGE?NqGLxhVP-*-^4P3{V>a19)M
zUd0oM2L7^E|3gC*lgO9ez8`d6KO9g@IX(S6xpTB6dFRD_`-jq$?#2Dj6QKD4#0cQ%
zrAtZR1*9n6TBl3S0NJ(c$b<-H%1@5S4TSiO6wSfrO`?E8Z}OoV)gvsl&fKI8FfuWc
z-JSPkH?pkHl%xlWX6l?>u%bnC)>~GvxUUu411|UweE*l68gwh>{fIOPS(Dkx@2wRX
zf%+9Ka(Jw;sLFw}{E>hu)OsKSj8~JJRFe6fSiNJ^O^5>su6)bhfHVD7j3xD8qE)8O
z{nAnKV0cQ3^K<jc80>9ueM@ltdQPpe<fBXjQI)<~D^ys@?+#dEQuPFnc@HT@kh2Fu
z6FFnHAa`2PTW!6eKb9%(QB$0F&bH|hR!aaLx?B2kjQ!NYM%~IGuWRzsASUqj(?OL1
zn(!rv#I68YxkmvQmpB3sG}CDk?K@MXhuMMYX_j`VDQpwO?^I~RR*%FjDbB+dHajTW
zpi)s6qX0>o215AuF2mD6_2t<2b+X<g^QWFHJ6eYB{)Qvhq$|{aUIX3Uo38Kg2n9gv
z!X7}M3mCQpxP<2chh^kbc8pN<K)I>VgMPcuco$b3Jod=n3UP<g9>bK==5^7|7Y8kK
zLS3Es{(=kDV1|DB*$=OWEH7xND%6ZY93H3siF-v_u!6rnli%2ulzT(V_(ytznDnpV
zrq&aQ7PsI!CU=2l-GSaDKg@F7GD+4Im2y*Z)qDpm7k3h}Ssjh#!wZ(`d&d;R-&bOE
zCVgX2Q*QsQ?!Sq_5Hiim=X|KykE^ly(S&PHzuzA~d^7dHFXpe8J5{zG-~HoVAkY5)
z(e>t0O`UDuC>9kJAqoNtLbRZ?BG4*BWs24Tm0}z!2neaQ3L#=@1&I(61(}6Zt?&wk
zs0fG<B0@kJ5+MxrQH&5sBnX+>GRuxa*d;^HMW54mowL^W{ZZ-?*WStA_kCZ}Z}3O_
zwd<xdi^G6u`~`Kt?k)_&he%zjsDfz9%j2Nu1x}KuTj%r+mNoF3cW5Mke(pKbaw2qJ
z=BDX_*g@yu_QoNt2lqr{pJQR-VIvt&Yl+t{+lw@)m!h+p)mk52k^T#)G}`S<bx)}A
zxHghI`eqpLkO4C0y0?^axjyA0``tu@5yHM&*AmRP`jL9Dr#$6gHviH*>lcY%nL{7B
zcfLQy07sj_pxdST<<gjYQT6)Iba&}7Ca2rq5WQmkKJA~utkq(W;nYW@nvk{vZpnQ#
z{xE8yXwn%T;PS$<i@f)8RsNZ-ZcRH*)jSi=X5LNOCo}vD4wvLgdaF_M5{)Hr1Rv*5
z$`L1JaP}-OozRfpjyKhALF!9XX9atK{EED6pTn;51K)3PTp;}zLSx9LFddC+@^R*F
zti%HhJTj6VXB_41Iuq8>eA77Ttk!Ve>Ivk^emq&BYCy8NL?u-ZHT9WE7V{dPpjQ!l
zeC@O56F-Na3_XF@ctsx@2n+n`@`k#?BfLDx=KVjkG{$a!YV`4i2DB`fYE2N(+~jMv
z(4NzmalfKG!KcwVWw-B<^y@(qCCSNOh0W#Kja34F!>J=kBBY${YE3Z8W?$Ev_Qzo`
zFHS$8gi2rZ)qx+zVRdk5%Uh$F1JKo^!R~b9jXtHllcGQA7yWH813A=3o@!dZ3@gW{
zNs&-MGtGhZtQ?nHys;4QbvClgG&jmcg;53!RW%CiHJbIP1lJjJv7Kfq>MT6-fI>d0
z`Yl@)nH8%uCp_+{D_Z(zAbDpWxz1@*_EF(s!}$$B%Ev)vNSF!x+u%G|yMqn|#r!&G
zSwY)9xk2A%jnSHCtCi?I%@^PzJ`d%S#k~*;xnp=a(1>Cpjj}c(%$&M9v0J!R$F{LN
zk@cZcg|nIH6mV)qx5_}qmg8e|tggrH#QU`Ts6~JMm%pun#?)e0xWP#(4t_qQ_4&Ck
zn9nP)*QtvTft=1ap3WHF0^O^4U1p4uz51{D&O&*N&3;7BQG{EyOO~emK4INoR#731
z_FE^W3CrHT8_Ub97YFx5UoyaooaeObU^y+8-R%6}yB+eAXT%C$RvU3H9!Brx58q0p
zZZ6I)u5KFofH<IdUbOB%0T&`o%gY1fRy41chBUF-4CubVz=Rksy~2yZfy@%3E24R8
zqgAv_WLmuvWmIc7s}9{mZVLDHz&W(N;|Odk1)V=-9Q4K=zjm~E+Z*lYa<tmda(w<z
zmSu^&n||b3+FW4Iq`vdx$#FHnkUgPCA)up<Ih`r2K{Qx>RaZMhUxR-TeHbMJ?fW`y
z8RZsm568~^8Hhb1(t4Lummt;m*hI_Fl(2W>q0Z@9KAx8!g><;*RJW7}yrMm1*pX*Y
z=>9R%1~|?&e&*v|IrTLUsb8R(N<w<Rg!9YM*2qT@6sPtAX4-p>&3?yM$Y6w^%=gvm
zZ>Vn-x6Qt31T&jP13e%&WXU+>YhE$|`Iea`wdQ)z-Y~8FK1V%UaTuQqMr{HU%5GVo
z-t0~Dak}F68>k0|cDEOdWciTgSi7;$p+oK%UN77_V}j!wKa@sq>wbu56Gf8miSxf1
zO_g^7;mHlF-YC?srtazE8UqB16O^vP2OwpvN{ZtV=q5o+WgGGdDKxw(dUYr$_YGU1
zt}@rv5yS*wI}>|P68*La-_KOIDEsrI!2wo1aS-YI{>w=<)HuVE@>qy;QrPei>Q=(J
z2hB7=4$f{ShoI0mC_h48v|PJJ<Y$K-3q-_e+C?hk4*JUTz-tiaa@T478^v*8ri7fY
zsBHDfn|Dr4yA^ke=wQ{5rl4H$2Hmtdt<C3}&H7I1V`(Q=lC7qIJ@cMnv`f~)%~TW-
zcA|o6s=F#ajT$HqV4Z!*Z!Er1)+J-4(oNlA`8r)@f$>*v&BcmnNmRXXx^6IMU1?v;
zECBA&U;ky+F8GzaMbr$S_UJG>(|%|uJSlSPwsXonUhtJe-}I>`xkQT}U)^w%4}JT7
z%Y&6>;Q6qs*%pFXBJFvQ-W+*{U4@Hs9W*|ndgWzz2YcO}U_{}|cxhV4hm;%V6xQ9+
zv>6kU%rlFVgWX-M#c#e-9!=XMCQqG{d{)f~cyW8=N6eqodgE!>M;B2zpBCR$(I-a|
zk?jg{JK0w2g#u*sK$@?;qFukP--je;n`yTeK4(?E!)5qvl+%|)CFG@7OQ?H#Ugt-1
z*VXZaF0tJQ&QH54o^dEwaK!}%bBqD9EJ-}IU2{<TiLU4z2la7^R|%C?eCD-!{pQBn
zTSw{<t#p-7SScmM{m$gZyy397Gon7dNPR<Kcyd|uy{(B24~^#jfs8Fpf;aAICK+<2
zdFcn|tg;t7#rv|`aaYurgzu`N9Seqg2?L$;VJ95&6Zzy#Q@{Vb@1^<B$!&K|82%;G
z)dCV7k|-F=FQMrE2TZ7?D`-0?<$4R|)G>LBd1tY$O5E;@J)m;TZC-TOLGM+o3QVgj
zwy8rRt}3QZ{eWJmj)*cpF;;B(<c539X8w`f&9%*aE(W;!WHbeiY#1@_<*WaMu|htA
z0Vy|NiWSjwaA4DCr1gd6`i=^Xg5*<_cx8U(d72rOhCGm3&0sRTL^n#`Q6YfyeVzCO
zE1%$MN^r2oq?jo$I^7jOLQc1b`rT55Ia>w3aVhVg3IF~h|I+GGb=DPZkH2=823}e(
zi2X@57wPhsD4=}a2te#?PHT~_wuXLS5w5|tLoh&U)4TWk(B;_WfH?Mtt+8rCRG&8t
z593;Jm-P}xmYc6rJFC2vSVo|v?5pYfUg#bZ8~|3u-a$?EN&5u*drv(J^yoAEn6;4Z
z7^*e;Wk=x7K+%N9c}({}zd`GRwm<`=coBLEVal6}y;VMRlh^4)rPS<Qbiqvud8g3L
zHokq{DvRoScXwpvP-`X0Dj_{}R@@>y_ebwmR@HgVVo~fH%(&p_LJX(Ne*I}otRiCV
zcrk^xp#e@0XPSlrx|pAE!o37XC=Ovxl{y!(n$q(=&dDk9)|!SO%X#i?-`|&SYWBK)
z{igG)o!F5n&3>viPxmW`domb=+TjXTC{#VDIlx}>TUq|?mn?-LCrGfkR{C71MmJA~
zKB;|r*~Qt}JuJsGV1h*a{btn0qEBxR^xV1P69FPL{r}sS_}kzx4&C57)uh=NLT}xI
zJ2SnA#H?esLjPSXKYIfhbBodGHm(<%DrbH&A+dsXnA}H&%QWks;aQD)IS)-en0L&G
z&7KGkJCytJKx06OMazVM9JglYdhoP~*N|v0yg+-yEK;3@;^hQz*__VN+f&0u+!dpC
z21xo9YNA|VI}r*97y<*kl4ei2(oK@v?hf(tO)HdRj3y+%Nb2ijr@kz!ZxDXkbnDx`
z*a@e*m`XVIe<n2WCc_}~w*qwFwC!42A7QbZZKAwkQiFhKNUqNgB_V^m7Qtr1p9JX<
z%ilD+D_THvg0J7+7i;_7rn2(L&ujWm)#m$)X8wwai-BJq7P>lD|7s}Xp*z^>KHV*!
zg~idOBDYGHf;Y!9ZK7(sg3-=MBOs|LPClJ8gS8u%<nWSxi1)$8+-j~urWuO1HTtHv
zF2m=AyKh3cM`z;8Y~O9YmuGDT6Nx)<hj_9AX+!yBhywH0Nc|Pul7oAmwB;k8P)lxQ
z0*KUK6%6QrWfbsScFl$aL&G07Rh`YLKodI(xH+r=K^Y}|Z{ImlNR^pH|5*u7Sk?$G
zIMrtiwD3_=s)6e>Kv&==9g!57fKOoHjJXclgCaVSzJj`og9sKhCb&C_F-8j?zrzGW
z5OD&e#^K=dl4DX|sl=HM4DPCo7ziIHCpr=H<}MKDQ^0eDS@dsF2~9(z(O|6^9h?f8
zS3ui$`t39<k`96S0O~4lxa#MI#s{hBS+i@&j=~v}E&JJ9ZI1R?wn^Uq>1}g)dIRZY
zX#=H-)jZggmnB(Vx)U=CgP*iM9sC@f!kr~+{b1aN`>XOU=J$AYBb+lSw9X!Q#c!~W
z1zr1TeiWx8s5|1RPVA={Qjee|B`@h!s8t()9zk7{Em3~cQ<tvtxP9jGgYkrKgQeDb
z+rbH%bI*IW)=}Qo&oN|Ag#JV!x5ogU;3NT&Fl%@^+w#e7=v+gW?Qa8jz!edh$WPcV
zUW&91r?qfYL}tTb`?tYP^tK$o5;c;G`7C_9-r`w|KfhZsZ8SC~;yMUpTh5qkyu;H2
znx2Loa1XbH)AK;VAC75~`N)R<*<d6a`uF+K!-36$n>wKJg;Cd#CX8aEjO>su)_yML
zx>9W9;R1fWN?l8q$6(qc<)RXm*<45cVYK`N32zb-ooDH{sdqZ2juj9D!zL1;A@D&M
z!6pBp&0);@(_y+M`uAkhQ3)@@ow0zUsq1xf-uAaaNWV+IlEDuss~6V23?Y-NmvESw
z)h_Q>db|nPkSrQbymRocA9ru9%6N`d{%xQMgY6DP2VS&Pa#2CPI%_HNu~1oo^+Au4
zw=8=4484q7A*Wk`j;$-$);z2)dK4Bie#s>1!MJ6<^O=VO5`yFoHM=Rw#cco2h9mzw
zy@r?qnUwoS^-J9^T8R9M2MH<q9lE=Eb1Dv$-{+K=c3b}rKXX7)#~43P$SEsSChdwN
ztc><B>JT@&bDx25SV#oDboAo*;n0&3{F$UpEXn0Hi{>FaUqaCFaNjdc7lJB1hUGz)
zFl4lbD(zm~|8RFuKSl5$T?5TMfT}rWa5umNouJ??MxAy)M&^<^w)D^+`h0d(h3rjw
z^y0J~;~q@GqeXFpI?w$zEiG3JVR56LFh<keaKobxe;Yi<UbFigxXi0itb)+WA}L+2
zsxYk(ho~3sqDCjcl=zfNtf03uO<oW&*U7Pa#C0I6WarZ3su20$HdmDT$2<SYxNzCD
zrgS{W<E|Yn?j`-Yr@YeuOj`UzSLK5()eEspe2yuknZqmU(91HyN(xrtnC1h5_^T+j
z!J<0d*8+S)j}}`&N=R*a`ncEK>19ihdUz1nr&D$T6B9{2=>`zQ7q8bn#hnHd+1tD)
z?BrRxBuvIm^&ud<Hi_Vh51>-kQ}@6epSlY;_x$$x&RXB=694R3XUq9N2WDC>2DH@m
zSAEym>w2$o>FfE(T=}O4AL!^;bLv6e4UPbH7@0Ce!0fJ$3}1dd^#IzzqON@dNh(hM
zw?Qtb<P4n-;UW25<TR|A&z`w2D1MqSYrCQ{%I-GnKks?4*&cUFeP3BNeq(iWe7?Bw
z^rc1m$iDw}JJ&2?%QX+T#!Z>2$Fxl(UqWEx)1RGq`Ab@U-}WEPs_opjJ%!Ou-ltbA
z-*DJSvlVsKuUM`zf$k(D4JJ|y$%HzV$sgX@6Fa>s>d82Lt&fphcVK4dsK~o%_rs`&
z4dU3Ai~cRE58j{nM&veVd$9AuCe9yKo~xUq7HRLpBKi$iFPJP>;3RDQayKegC3qg;
zm#t1hrypv+LtEmJ=^%WDrQJ%z^qzA1YC~Q^>7Vyxe~2c@<oC`rEai#Z$G7Zc1e&qC
ztaGY#%eXZu{0cn;%rAyCX6UUwJ=(qZ^<rMF?=XWsmO$e?7;5Okq}8+H%Es$|mY#TL
z6DBYZ8xC8?ip)B;WT@Hdi@XmbX`dhO*@?SJKwbT(1~m2)Oypaz?@fCqr{@kYRh3=U
zI08ngtAoJMZ$zADxE{zHA68W~)0!74wUkK1NnDGR;NG~Ly;OHZ(_!5)lCJf=TuGWw
zDq>|5h<Vdhqhkrca2?PO0=0p*FrFf6PSRd|kPHv*ijVmmoj}^QZ)$mUz-`;wKUClR
z)EVI!G_b`XyQn&=HSY@U1|9u;WJ;;oh(W)?>6brKMF^GRE3@o0T&*A#WX-gvLEfb0
zYtXFpZ1rMia(Ed9xkVP!8Cu-Z(g)IArcBskm|>EYBv5qk3{b{jZ07hf-cASg8P2Qz
zZ?S=-hW2Z6GOhFDLTuo{;JC{e$0%OjM>D0GqJ~w}Pf(`HKcGN!48f*x9nmI0s?_H{
z7=?cAFK<u0i<+;$ZCRo!kxv!ZDuyhlkHE}jq(5%iY|AB(cM+^E`pj_tkN^L@aoGQc
zrH`HvX0LO-srI^iIN2l6e~m<fy9zMvjAc>979dh&4B*o5<s1yATftmHi3T%ikylXl
z4OUu1OxgH_muKU`?GmRpk4KeS#*2+@wq2pE{YTA&eiWQ`a8tI(cA3#sgQ~0x;sSOV
z)fu~nYcNC!dp@6^>mKFfeV1gnp{MzbTxv-m9z_{PJ?2es$GX{KkG23=^T^|{kJ0M-
zKwqW*c^OtZH9gg;u^JNvC!~%{UC?arAf6^&xE%KxI)=0zv*1((`g~Y+PqpXP{-X|O
zKPYk!U~NwC`^n-8?j{D^z=Y-c=_nI9#zVK3aTN4iy%FfIYeHymiZ`Mh4GvA|im#<$
zVVyz4{(+XLyH5>?r^i%Ns-^pT>tgn!7lF+0o(-aQSs(YSOz%Zrri#4Iyc{iPJ7GW%
zO_-aKYRo8+yG7IkESi{EySFSyu5&sfnk78|=z>HwRoA`cHEBX~t*%Dp+&v}SO<MfK
zxuvLi?wG{~Sz1WQYEZA>tBY04bU%AqFR#wC-PK51UnzIBqy7Y_D4cP04Ds@J5}2eN
zQBKjrdR!%4N0P;dpOCt@&5L9b!r;Od^C^6|vB=Kd0FfBz-}7X>0?C~Ed-RCLQxAp6
zV*M8CMKlKCD~@+{j_N;ui_#UIS#AQuu1bo{VFa7(v&piygcRY(JoqLqzCk<_@Y2~o
zKp5xEB7774xQX|;zP7K*1*$3lYcizB;pw+wa%L+oi{_<TKz{pGr^uy-Xxg|g7Ch8V
zRJ3OoMu;CnLI*~NEs;Dn3(Y6=yRy&6R86|E%=h=X+q|q$q)9}<=RPw+mH*1${0{*+
zkDaR3*pCvB1H6Hca@Q<glr&{{8F~YuhoZu})SU>7E-%Zc7fpD%+*1g0Ay4AkLrkex
zC8@J@9H^pKsc5MW`IVzF6)<@672S6KJ+!{?;XtTCLcG?h7HmX*cEQPR(>b13XULLZ
zSwptZ8I?buYlmR3Qk`Yw4BA?ih{vWBOmxg!Hs)O*My%?atsD$EQCDPiyrr?9vn(dI
z@GI7ZxWqNL!n!^)`YZnbJJ*WyGwQ3FAzOnkNZ*++i1Wc&R9pq&kp0cmCPld{VqDy3
zS!-?*zxi>`d;3f~|G|2<$c<5kkd<%L&}n?G7s5`5tWN+3{)MM+e2(8A<8J6F>+|~(
zHQde1|E8byY0HzuA*++(nW@MFO<#P&j1tC$8T;=0PmD;M_xPm4jfY06GXRu`)A!+O
z#a*~HG`<w0U#UF>5-J39>X)zzqOhwe@3HB_8y~AK<-<fs;lo_Q^08G5R*fE&Qj(@;
ziGWZ_^EzH%;a72re98o5@FK|%$DY8EZ#}a}?Wi?>sURfNR_ccdHB8VR4*fl19hwM|
z#!S>k$+JOo6G?-=xw)<YoeTf;xT3`10`Z~xX5Q2EL&B}^&;OqFTBP`+ck?Q~{m;KF
z(m%_S)=y8Kz8pi2Cu_p=uX@9Vc3HHW(!8{;fr!BRrTOHoj(|_k?>kn%H~6IdmoGN%
z#NBX3Ka)<4Xf{ChWd!K$Rv*7F2epZa9SdQ~jQC0R&tWp=K%waYKkL+5?4W|FOJ@_y
zOETA9U{PQ4V0d6qqWu~vea)#H3-+A%PnY#M-U{Oi#R2_+ca3JpfQC|`u>tmkg!W2`
z()=vxAA>={h%oi#f*@=I2s!3Y#;7`9D#cf4F)8$=+!f=08!UnX@TjmFa&klYbS8H*
zO4l5v(7%C9NWP_(!`#<5^V=+VB`guf5iG{6;`M8KTsTg@_s>>>NcvRy6?z2o|D3r0
zKtL`Sb>Xh@>Rh!JVM-~(&zLf@2hEXH+S<t3SEU^h)<x5?HoVoS&GSajbRRsaG`cuc
zLb7bU#5oiHePeaL`=7TG5T86N@!^;oS3pDlAIa87WYkRq+R5e!M$Jd(N~qCjxokT1
zmiAi|3laimny%0mURs?k`2-@!ifP7Ij^!xAkFc6?Wy2l!Lc`&#8JFD79{*Hw0_xPd
zclWM>mP+_;wNjTI3zK%}5x^Yhj;uy_?mc;WGj_dx?W<FDwW;r2Hmzz^WJdndweq~;
ztM6|HcfM7|ZvlnOJvbOJFqdl2K+<@Qmkop5I6AuD&rW+>S4odzWcn=@>pLD2d4n_)
zm7rsKErr=O&r@GwkxoB)OD9GZl;%vo<v7{+ek~S!aCMG(e{}z0!#}nd{4M&YCxDrP
zjz|i0=057%rS+bZAe^DD)s?&BK?xs(B6aZ!3(-}%bUB)<l)s1eGM{Oxcc8qKA06#>
zVfvNFDW-zM`?MAhDUUuzH0iq<>Oen8U>Xv2U~^`o0%K;7=%}@b*PAqffKMd-t&{o+
zMA675Mm7$k-vnCUHR!F=7ul5FkuHf<W?hTf5mT0ID%ih&Z)R<JNPWvk=eTaK_f9(d
zqfcs{eGwf>>2u53X_yD8fH$n|M&{$lsUsQ#>KYxSzfmu^p98wws`EE$fI{lZFaEL-
zvCEV@TSBhOyH+=CJaB@@jEM=k=V!wVY81PcW&Jrm5_EIG*_m~2s`ttc4C>6&+6-t+
zXq{37&(30U$dlrWDqL%^C+Y+p)8@VfySMt0t^~(iHw;!Ah>+VVi_DJqaXUQI$!<;T
z^`VqvVQ8%<_ovYY>rI^nW0jjrOAV3?A-24M93qk@V-nWUPca7?l#DKoAe(OHw^<v9
zhCx&7x`bPLkMf@p`TG>P#x>IpE2QE}P^bNG+)64gi}V&k^3=@Bmc+w-=gH0fkIG6|
z#xbUCYCb>oGou$cB%FtCz)l8hR_WWV8B=)8m(e)$W*Y@P-OmfTl%v3{L~Glpl|x2d
zp%}*Oly_TA>qvCKnTM3q!JrHr7gPB*`jUCXz%YoYkfP@Ea(w0*BWmv&&@KJ}r7q~M
zjY^H0VdP^B$dxu}DpMkTi$$IQYRLXMc98d-zF*$~?YNiilE`#Ahga)22&~O0pq|sC
zbhVRMi3j%F2bw@VNZ2meiJ7?rFb=JCAv}~)=&P9rit6yW+)W}koqb?Uf3ts_D)F$;
z1ynO6A^au!h70Ay(3txCa>1h^e`l>IG=|fX`ruZb<&S&M-?)E;?nOXOU_q%Lbo3qd
z@94-Od@`Yy*N(G>-c!TW-v+9%0Cdyk2WVrDPy8e5Ch<8qiEI%|wlc>ltT4FeJT<&L
zT1{9xqdST<8b9!$yDXY!)%P`}`cHm)eO`p6fj;*fPSy`~U_UG8Hb<Ju-7y}2NtE{{
zJo=dSO#jqKpUcKn`-1tXtuva${b!nPgkIjrNj8oe{`%*=>vw?;C<BVguk7{9ZzKNt
z<##kkwVnuha*jo*rl$e3+F}=2+OMFrO_D<MQ``gXLtBut%E%Z+`VE)aZd}My;nHVj
zgn```OWzHL5BSGj{$XqH8$;yi72K|c8m~s2#v=;`KdR$&x2Tb@51;E-p(WKQccQ~@
z!<)K^q<}DjsrD;028gGPqU;C$aq+~M(-mm>A;edZS`|0QXyD5$i_W^PK5(Cs>Q?`T
zV}P0N(r*ld-F1Ne=9a1n()0)bKmPX1BCR-DitHu~jDv#MR0+LxM~r?WI!ljqj%@Q+
zHr#LsVki>{%l68hk9FRnZX&EPE;Z}e)OmYzCMGxRP~cfm|NL@u(M8rEw;^_s?lYM2
zI?<5>uJdLzPr7_U{I|hhW>;`mVRRv#Oq9F6wb!pO()iQ<<7cSyU@NAVP`?mUZ7$0L
zBMF>jaToyuDAPz8JF77$^N|g4Bw0V#CZc_n%{QO8kiAP`)bqMYmtRt}x2|#nMzG~y
zH2s1c=y;djL;~N=S^tuN9L1$$u`~}_pBIlYo8t&YY)&07wb%?zl(j_aR}JoWUpM3I
z)X~Vi&S98IbnN5(E_Q>5>wDZ-rpw%haQK|KFwI|aO+~xE2{bUA(<qI!*6_9$zY=k+
zC?CH;PkVMU(y*)EQ@20DE=BbdU30_UHAq9ocMYVX?Z^6>*F7rQCTO2Odh+WV(TyAX
z>%xk52j-1S@#0wTx%z&V0j~RNXjlVx27DrrUAVV=^`tI)nhwnh2~DF22KOw*bY_Gj
z!b}4NZddaF@R4jy@VxS;zPmB9QOF%gQiS8%8ya#F<Kq*~u|SN**BdXKnY|MS=HdpL
z6#WVa{7YZJA?mANLu<#@0hs+tJkyeELp_9AAdw2!E?e_pG4;%46=t_+ifcx}g{p?x
zGFC8O@@wPKE~D$QEv6H@>cx|@YuP^AD<V!z0H;A5<2J!I1(xMDdh2SOY?%2r9b|~E
z_*v6LxVqQ(RGyu~U!sH6+PzIZAb&t99(iu<c*VyTfiHBOX0i8vn(#rNi_fu#6JF`b
z<mMxntHX<2oJdLE^ZDw6Z5}xnSrgCg?m?w{9*)xs^zR4*Z1ocKqh>EnU``D}z^NqJ
z%Q>AfRi?t^xHKn1hjxE$A8Upc+-9A7`%zN%<noG+%C5^X)o)K`4?(9au<kTD>9q5E
zCcv*OA;-p!ZihDr$1#wXWK5hT{S?f!3zflL6VurQGp-{TSoy-~rKHtXM)`f&gvQ^C
z@?ctMH<eJN{>Y(Q@~Lg%-v%0`%(R>p?`c#md0*l_k~ted(osXAEJIWC)9Sv%WaDJb
zJY=WzZIgPfF3TVAIbTS%0Z4iVpwlq_c*CUmgeZvA%l9eLJ*p|K^`@s`MgEiV!`A&i
zo=NKya*AfNhb7UL`PRjE9ujW`dK5k)8eluR7sN4tkuJf>`UL3a^LLP2@}ctfzi4jo
zHq(3@OWsjlcGdG%xl-W>C$A!emIC0PSZvz6@7@_X%K`tRX#UW3_rSB`U4h9WTmO?{
zcZ<e;0NO6&$z&i&iJPo}=b}QaCdX9i>IgAy1BD)d=BvKau2scfX(m=;YzAJ?FPD()
zKI?71P(n!_tJ4L4^Q^9+m+clq*!eU(0N;N<e}9W`1etwZ_z1EB`cCe0c+5w5vV3c7
zigtSm`dX+Y=Qf9zMJ2@KXEvYZnR8r?yA(N>hI>Do4g3jfGFEf)#ON2%!P)M8)_Ymq
z??Pj@ZF<<;^rg+6ow#B$>O7)dZKyu4yN-*(zqM*5)Ou!XW8|3Sv;o}eYVOL3Q2*<{
zlQYaH_9unS;fQ#*pN}xkDaU^wS9GeW7G*AaiWI$)Py;;E4F^d-n}i+*m745W9O~|^
zU%tC+w7{?E(I~;r$Nv!ss4~w~P}1g<OLVD!HqlAMl~x7aL%BCfPmBe{hnBYgM8Ffv
zLPEyWA6_E^p@V}C7d|ukm<el^0tb%`u$i7Prl8BQ_&sW(@uTikb*1Xp>W86B1K*Bh
z%|X@4FHmU^im$?C(pPZpNMNZE_hQ!eQ)NexHH+Ed<ovy~O;Q(RPAq6hpS2*E4-vT=
zo(Q$u7U}FmU^73GA_oc+15UUAB>z8pg>lrzr`$rNN6pHHTU}-j4L|Wor%dXOp4`vc
z-bG$>*nY=})BD@Ng~dbK(4bu<0K_DuRZB8;xwuo(Ys}TaqQ)oFIU)uej%E?Ihiq`b
z8<BSxrIjjL96P*%Qme;3S9P$u*&VXN!fyK`qRI7?pZ+#DdG=|I$|SAOBK5h^3?yc&
zSn$alc%ui<A!xg^p@IARK?D63x~xfx93rPei{=~lV6s@oZl$k5v)f@P^r_YsVRm7b
zkNG)e?U<D=3Z>lY;NlSXk>vB*-L`${9Y|<2&y+md?b&WVCfW3RLIf}JE+Hh^v(cg}
zGfsx-nE%H-TLP1=IjwoV9NcxpYH17VtSaxYvw!2a7Q&)CRL6c!y*{6>|B=M?<sc*1
zp_gg)vNeeNY2rh{wGEB^ehw!l8gqF|i&(<}WhiZ$uMP@L`tuoC5xCM&a}2O4K`@lM
zNtkia!g<6Ov;Q{uu*rb#4#^{!N|jH}fmbUGPBmxs?My2OmvbG=CG;O`J=?wdf9}0s
zi<D>S?FR|b!?ry>uBX_f#<;$*doS+pRSYKTf<Eqfd_>{vzwbJqB-eTAlXe*39wbUp
z_h9|<?HA9)lSy)XZfMdgb;GJbDPL81qL{SqkIb7kzujwmTp%JkKR8qHRrRU7;e9)A
z?NQ}})HazX`<agH#tlrX*}7(&>^|=kUKAk%tmuOIxVKh{+!o|~*FmJHIbvx)Z7b<0
z^&rYYH2$jM8dht?gq7VI;Y=m&+MJ|WZ{DluJKM)0tR~8}$4KRrgb)0V4cMOg76>OG
zp7`0UFD6773tqy!wAq;52f?>musTFb;Ptu8*zSA(I%+GYGR!3Go9142b!^j}Pr1p0
zV|6glI&<|@OMUUc@0nn2%~lflO!Sy^9nD$mpogsVTDIPT+%C1F?tnk1XmA>PO}u^;
z!vZGv`T_laG?&VCcXaTdS_-_3Dd*jj5%dA>Q2Zadd(VCT^DoK`S0`9l4XYg0&bp@y
z{5yIyUXpkiy`#jKfw_)RHq}?oTM6uq4;0L9#4lZD8#K)qZhR_Cg*-BoLog#$Ns8Xz
zOWJh1DD~ISi2QQmmw_>Wk$7YD7FO_4GU^ejU;YtESFhKVay_(*THpx|D&n8BuNCh=
z#U<kf)7Q`IH;#ttm~GQ5qldo``IuLtiQgu<zDVhioV|Uq1iBht*R8nL{f>{tfn`mn
zPbJA&QHCQp^ixl*jaXx<AHX7bDQp)GC=$l2ygQ5CQE|0)e{=5)!I)A#@;ub>st*q0
zlOpmuq?Y&nb-#**Xr3mh8QD9M`F^&EUtYC(!lTim{+AU0{2<XzZvpBASdk*lV*N|d
zk+bT;N&?hzg^Kd4umR1UylEz4!Jl+{qw3F07^8;M@yKwwJYdT6Tg_^rpU52r6Of-e
zFE!OP_ukE9k)eGt_0ACZL0`g3km;Y(>*$jhsGu`+_sUSVayk=dqs3iNnZBoE(B6sX
zq1ZIHqJwIZiDR4f*&C(C(gyzrt!3^VqGu1oebto@$E}`ZxM>zcm3+kqJdZEKMQ3R3
z^qQ{8C7>MnM0Y37HM4k`D!tV<UOqJZ3{EHuv_Pp?nyE74^Hy;kP*3@{1+I4<29%#f
zj~(lA$J(5rlnKJ?ysA8dB!2hg6D_Nyp@0knkM?<3B7Ym~!@r%@o4|dNV<-*k6X+r(
zKAW$!YIn`_^G1)!cvwn9M?!qNF`V7RhDK&?YyjReiE#+w=DEhWwcz$Nh&H^L%%94S
zhwH~ee{kFI$wQNi{sLTsktw|ua1}rBP)FRP5+SR9*5$|HGOSlnQk3Tl5&sUop(?M*
zHD~K=nhJl_ZzE-Tzv@z<!uW+Vxz4+28P${9!*(OrjC&Nki`W1b%Om>=zb<g57|v~%
z<FwZ4@PS^zTjvuNL$}-fEP&p3D=Zl4v7?|3@QJWXtOr*&LPqgwmx@Xv*SJ@DycVgy
z?fxpaASlf}=lsYaVF{<6CyskL^K>EPFaC$8@u}xz16)_v1NeXp=@T_iIc)-0UrXD>
zYX#*Zr_KVV*3qLU`l93{sgaypmvd<xY*%ZGjgLR=jl-M1cA0elOxZiV_56%?cKCi0
z0Lmg$c(OhQx~Vu@jx!mva~A470UqpiKE3P&nhoV6Qpa&M1$m=Oq8~ddCMxd|>pz@`
z%B&c65Z@RJx+z#%e9O7&;_I5ruNG;i>8&K3ES*=&oCG>Nz14?nrSG-_G0POKjphP%
zUlY3h(b({ILHjzc?SurX%hi-ng6&wt$MFQ)xeQjEG5)$ogBiMSTnT~FXA2ansulj#
zzw}(emH1leP4KV;4ihDQx5~$9Sae!pa<D6~2F9-wg6m#6w}%^&NTfBM2`&A_w@U}c
zz@h7xu}#0L8{>*fubI8-2^rjVJ`?hruLwvG6s8T6A2qHJ{q{iZPp@S@cg^tgMjF}#
zgAH9Y8}tIboKogQwjtqGaNN+VGS@|<V*597FQ(n@Xai1H4xkG0iF!a4t}!3;>bz4C
z11aV0suM(-t%3fgGf&n}M;)3yL;y*|=6V9f{YZDbV`onE4wp0g`+s<P^Q*1jCwty$
zy>WAGNoGh^m-U9@hcSP?R6`6-1`}%D3ZATv{={=~HBjYn46QTbt!5+Dsmj3@Y*~%U
z^*Yy%c*%;edTaA>dAD(RU-eOGNTav}J$>0Pvw9*Swo+axFe@1v9o}5q6U0Aipude%
zSnyDXeBE-K4G)=xazL92cpkCVDgcnUNSA(jiRPzwR6yn`=&NBs#K_@Vpm-(jTAjes
zVf)0e(GwLu1G>A3>?Prp<aGk=ro4Gtxh!$&*f-*GVO`=My_`a4^CO%-_6&((MtY9T
z`FDEw?-22C@qas7Gr-_YiN(pvv5(`g(q;Lu196ekYyt<{O1{dp;C?c}vxp_EMM+9_
zJ9{zJJ|+~KfnCRSpdLkrn`DX7^^}zTb*kKSmlTC2-1``Fe_p^4CPFw}#mP2yBITHB
zLJZ~vs596NTIrXo9@1N(l!(TqgNYra0Fi?00R8=vVyBb`U-iKtyA{$aG*|SIrk(4s
zdEB`B*gnK4BW{pwiiQO~?u|2UIo(n4VQk){u<OhN=b7P+VjtXt=qu|9+EoGi6(r3k
z6i`sPtl6Rc485fZ1HZWKDy*!ZnN3}yBrgTNA4i6{M%xe=gkLwIcLoPDXYVc$03A^|
zrjhH&Ylt~Sg|CIHTYaDT(cVqP&c_b+ZJm1l6(0SnT)*PD#z?yp7DEX20&0aY)l~p5
zYEa~N4kgN$rpTl#Kp3lBM#v5pmA4YCY3sE|RHiiwHoD7a7t1v@)`o0KaXQve-#2^f
zd_h`6T-n&AF9i;BnDdKfK}FF<zha?em|OsK{7CzayGliv$^^o|r>d?tOft@tW{d(j
ze7&EG))(ESv~}tvnE2S-qg)Ir7Vc7wWXy!MklW^e%~Jv2Ocj*jZeo6{rqPlSPhyWX
zs<TTCsLt?Co#?Fxc&F%@OyrR7MKvAu)*Pm;L&tzkJkpLc7((OuQbXEC3SKek<#!8=
zyBh((7099th9Gt|tkGfP8p~u6e@{xgl_;ShbJppFIX~fS#p!z}G_Q6+Jn;G7*1@cF
zK+`F4<>MKI#WZ{L=LoE+76-cPgPjsoC=09ncpnY!Oz>!WWNdRb&*Evb#^f3>gs+xm
zo-O?0?6)h!cjCmjHYpP1if#t&C-BR%90OT<{M%uEplV;r14=f&MunfkBDY#29BXSt
zGn%A>z2bJ7sVY8eh5&mcq9OUuuQ(uH%-q)tCQ8xEFO*J%o=GbuT_mkC`fwXEc8Gq-
zMf#3mKwc#?;JC4GK7v##?XIerZP*&Cu5KqKp^I#-#qxT&8__K<`Jv(t02g=Gj1I2?
zJu;3r%ea%fMF^VNB?PW0c4&n<(Rtg%;hws%oWrE@P+{z0u!jwRYd?f*Z{y@_Kh)2{
z$?g$q_INaw=9HDhSXO8bYc1c*e#M%OQ9erp3t3U~nequQ-+BKntl|916Cu$FNzZTg
z>U$;QpP$-^kqzoi^K_3vW?#Znzd~`5u)x1X$~yxcWh1TowVPl-Y_0Vbxk)Xwe#~}1
zdzHoXbry7R(ZStKJY+80BrUu0?Pkv9yAi`+aMPS0x}>{zA~b@1>bphS&cjCI4DIUe
z>f305W+T1zFz6Y%N(_}{O&8?!)Ci22W*=3&Rpn-B9(@G8gv%r>rP*tpd)>Paia>K)
zV|+lYC6*G<tUpEGg_R~Nq(`{*Pq@VcTSs6`;F)NGk=8swf74d85)!S@1#;7$^Dq+6
zA?sIM&{#koW#mgqROh8D{Zc(AKR%%P-cp}yMhDDGsN3zl3tJOLuIBPE+0>p=0m8+u
z8UHclfNI|kMzS>EKr?|{iI?5ZZodUkB?yQx>0TgjIe4qrLBouLLMG8YYe4^>c&(*I
zodaJE@OwvjBrMGM41N3oGo0QgupohrxT`Vx$eZYVZb8^|g;>_Wr>9DWYadieo1eak
z!>*>d1~(%5yDzco>P#1AMaC(sfE5O`WB;8o{`V}U$MBG7{M26>EbTRK8IH)l0)q_4
zE@>KXk(SKX9uU%8DA99D$Lv^a+VFCfW9n(7E8WNTVd$vdM|J65DJ6)oW~`vu@<X@W
zrs$Bk-8$`7LR`+$u3%vu+5BD925g^y7Z%-Wr8T#b`?p~;=&NQigN5n{RSPdw>smno
z>qaweEP(Fu3jfUazh_S-(9&fvM?$xEBs65WPn|x-dsbhU`5lLW7b^3@!y;fT@CpA|
ze-(%`Z22df`x=9KfNF-jW)&6MjmZf^T0>N*IRpoU1;{ltbTHRVG;-5bU5bTUg^?1l
z?cM|Kc+>IW75&<HR#XAudW<sM^+>IlRcBM#62SNTc>oMy-j1mYrqf+!f5h~_%K@OZ
zMWTLrPZ_<{i++y05{*=M>WclGDME#GQl-k4F|KHrBmMvxW@Hz;_iIV2i(ps+V)_GT
zkm;*he5I6FY%L^nuJvgH6)}O%ZbkM7>V8eSKLX}2ZbkbIl}ywVf<UCk2*v1^#~}on
zRR>d2C}TXI&H^;4G~3JZI`vD{OF(VuS9e!9GW@nfXS7t_O>WJ%+aaDI(XFD6QRtl>
z9>H@7KDPu9NcCQ6%txW2`{u(%4;D=_k&|rn^J%U5TnId(Q=r^vqQ~lCI6u<qnt@x}
zy!|xt^0|H)h`q<d0n;(PCY+KI)HlVsL9dL`f1<K{26JX(qU7w=3j8AqJ1n<rcil5<
zTCVFRaa=d%o4zZ!R|}ZizYUHtPzUKhk4jhpt>XoSJY$rpZr2raR|DwOYEp-Qlq18(
zNX1tg0leDJt(Qtd3gshdpry6^E;5%(#XpD`A70z<GE-ZDMs`>q1nzl#{^gZ17eE`7
z6zZ3^=&wIu=RxJs3LD{+APXh|V}9TOrz@we)W)GDkP<VJ-DAwZMr~E*Z8$6EnQ$xl
zFz0kNg%PZ(u8{>shV@cyqI)7v41k!VZm6tWkvNfkLq3H&3gYyEi7;v?E?wxcwGe6{
zv9SOHjpYngfUKO4wHu(l<2{+XssN_&%;i6TP|VAv8|y8o`;l&4DR^l3VmgLDQ8i@M
zF;<O+Ru@);3`rV_h?@%^?ONj{Nar|5@*8t+S4ywY-3Ul5PrGKj+8vz+R@5=n9>FLf
zv1c&++`wx+!_NauqGi0SI;eb15OK=ZW^V;!d05!E-V4bqsX!0mETbDalOIAUeuF`c
zDwDk1-^DRjofs`RUn37Iq8iTUqI3ur7vW`p4@L$!V78a(hj~x%>05mWcZsx(94I5&
zF%l~|G-WT`-}@+ZZ>$>|vi*)?SD}x;JcsuDx0tv<o8ZUw%}<)LP86+31tqdzx=bNh
z@PsErT~-0t4i7{wD&v#&JI16><~qFvIZP|)H76HuT(~;Vm>6NvPmM#!N1pUT=0`al
z)PjiE%B4@hPRYBFZ5ldWHW8Q=zJ8p1MpsFGYB*ny2(%U{`sJAlsR>H&2qkFOVAbw*
zLZ86<#E1<-7Bvtkj*duhrgN2hp>fi_*8rOH?DYHWO>?;1`MgbHhO(c!UBSYD&qoTa
z!8+nuDN$0y>i^XM`+}#n3e&G3YOK(YaC$?&@~aBY(Cb_*+96}UEmWqb(p;#QRN^-8
zmzWH{<&WRE<Fc8b_$0)#mr-i@;)VpP+-CnWO0fJjJE>}b60M%+2exp9RNRFM#_Eo0
zqSsoZS#~)r%42ldor0p&+|n3${>Hk@(+!Y^vF|bt>ndo=iJmHc{0h7off&lpIX4@)
zO=Y$>tOyof9q-Bi_;UWJvs!%sDhdZWa*T|AE}cA{2p558nM~KxU|A$#6jrUS0|b5o
zCXM?A^;<NOkx{%{IPJ6h5oIDYZ=y{iy|$@;N_)8+O$<<Rb1o>H7)JDSoYFq8`kY8h
z;OxYQh8obru?Vo{{txk{I9R*BOGD5LKr9ZYT|+paf+AKq<f))1bIoXiVq<h83;oEy
z6*g{X41IShPGzMKgN}5wiNfZ<$P-m$+SV%l24d*R2uERNuX}h<*YR7spZ2?bE94aI
zH2iD)A4-WnjV>Et!fZxO*X7b>_a)LyUeq*}NH+!~XS|xCVz-)Lx{5ay4<15-)3qcv
zXdmuX=2#QfqgiUja9116x}^q9tQ@;ZDLiuO!B_!D{Y%`PnW<01rU-aAf_7v7Z-E<1
z(rN9Q5%m@!H1nDvFQYT;oKV3%syFJa35o*hv7f2-DEjM5WV+Ql74|D*Iq3y1D^6<l
z@<AxYRM76_f6bl5FvTk^dkWO=1Gn#fmi4mTnw59!Gox7!oOj3Ix_1(Sis+BR>8)Qw
z<B1qkH|SKU$*7Y8Y_+WR;fp1|VlHgGWWDc(GGHp~cnd{&h9it^a_ZhU|5ILlP=nP!
zDm<H{$k$*(-Y`j!;nC0OT8r`y-WvTj3SA~m{@Wmiom*^=b|8*jSSxbubUJqh7kPhM
zbx}DD*})Sk;9plqTNYriY6B}M1jX6xq!J*{&-cDO+6*EiYu!Cm#-jxhPZsG;QA&V2
z2s@!2u$9fb6)g}$O*A$U#NxGYX349@J!n=y%QXkzq=q0b=hV*9_!#;0QWVz_D$S;b
zRpZGq4x#uos`LE`J9{x(A`R$qYuSCQvA*tCLv1cDYT9;`u!a{!X25*f#nnHJYfp_t
zOO!m*oP$F#?yK)nc%Abj8E#kU(Kp|1;*1JsZRnh^s*hFMr*qEy?4mYMW&JzOgIDT`
zdZg=D?ADl2U0^fBg-{L9mm0iw9crZtkQ3T@w$Y*Ls}LQ5c(}T?YE-&<VMnC%6S|V)
z7`7AEn{Oz+zg%opANmLPYU1Tbl<)PTB`V9J(g9NO+7__^z|!HW^{{z^fpHUrh0!uB
z&$ePKT@5ahon7pKwjeeN0C+8;n9JxL)9G|8ZDb`ypkQ9n?v?wlAQc%thq1P+8+|1)
z-)iI-xUt1uJySvqjeGF3bGPVO()}pOU85IF<UCuura=vzGOd|dmj9fdjpGDA7bIiX
z=#3_%R<W*Y(O_kI2lf-KLlg8^uPK%O?c^*!I}!EMVJ~sr32pG*ca-?fggDmly^@wz
zVO*21e_-EtoX^j=j~bQ2$EW;L2wP>qs6|?r-v%9c0!J{ZQ{^jMA>Rf7l+S7zI~ixG
z$7;h>>m{%Bn|rB&9wlJQW~j1kh?7fKo*>#;_x;XOdDP`4?D1rkjgDP(si`6cS>3f^
zBD<yN7D$Pw55m(r4NPUz=0r_|UcfY>ZGa~JFFfPsi!w%z)XER5-KYv=X4HAVh}+>>
z$Fk`f-uR|kyIUUPe@HYlQRLW>U>$93@%t40fz8{vDf95&*vFXFP{?QVWM#a^@vx3%
z`OI}(1M235LsR<`TB(wTqadf~&Bqz~Z3f8n?*%{57NG(}s>sin6<7~ZYzQLf=8gAu
z-=+AeyYP)7hqRFpF?mK~vibFgwVcFm@SjvH%!Oxf>r!yCDo`d6n9(}1wI-r_nixHN
zm)RsI851-wNyE$0XDXn6wn;Pm)~l?pQg@t|3093s=8~x~3Kq8Ai=5Aj@)VRs1b)BO
zeaLo3N8j7X>xuLAn;$hq67{B!;OPLdfr;h)fWIQG6+FjE?B&5-j0}dxe-yip^Cd#)
zim*WM$r&c7Ya4bY*9HA_63y?RtrWTEfMX@c_oBj*q05$!Rfm1sB%I{L9HeZW+W6$w
zVQ2->pcH96MVI{#(^7ANVibNwnv1lT++`dUIen`;4&AMHhRG$^5h(C!E-P#jhm1R6
zvd+kkZK3n$MRyXHbd<Iq8w82k8vlyXgf!N@h_Oc2sL@9oNU7k!YTeB{P0ks%*5z=`
zwad`IkO?Iy%owQ(a5=-<xTuqYWvC#hXm`loy6OD+mqZ1OT%S!9<1`C9mp;xi_NJ6p
zB)S%Q+u;vFxlNG|h!SbqdH3g-@!;n?Bxo9HVup5|oUoqAYv`KHy!)2Y#Gl7!u-tIA
zv>x0t?Q*5Bok_%hY({55u+X(5!W9(L<>XZ-s@evF-f&v{1V@GB?+ZlZi}N;vb|B;*
zt+2$AqxiRj3d|JrV;0{P=~ro^k@PNSWA#4tWs-`m^vvLb*{4xE+jxw-R-|{(8i=c6
zlZ-oPHvQGj?rgLrmVJ%;StIw&R!;alS>m=IWK2UiW<MLygSocwCad8tUs8|Ab;j)y
zvUZKVdK*XBytibm;5{=&;VQw)vDbWdk<V0y?4pyFHpyKrDeS$f;MCcSyH9g{@qF&)
z9&nnE%CGb*tQyO+&f#=d?Zmz)*IG_2bbKsPfqun8^OX%U5V-4lEZPEU|4j;ZD)&=r
zoNBHuWQx0iVt=SNj+`l7u8obIUIt=|;^0s$W0nOz)8<V)@dhO4edVb#LPRKfK4uU4
z2m+E_)*@XD)G$yo%I=6omm1#CTX*BWcS!pnF@AXTqq+jcmPa@Quio0j5-}fAh9&yW
zKaM;vemyT4{vbO1=49)d-$w6Ze}h;FDN~YW4IUQ9GJPAaj-Jll9yRO@<IFE8#(NPX
zFy6$P+S4;4Ry^*f?ut{zA7&m#xGb4kWZsp4O`D``LTThxQi_M~`4eRv(M<OiaZvwE
zgAkN7p=X$Wmku=Zv5nHl0{td72$ql^8fswxBl`m<8If5{WkT*_=jWpPRhw9*#UnUA
z=BnNpb*`jL^98meDO9kiHAaPs;7s=c?P~TehrD7Zq~%xIw#Pze>hZGt9`~jR=Y11=
zaYFr-*da2sE$RPY{(u^|0R4mi8UFp|f4Or1{@wrktAGE+BolQkpOnh!03ROE70}Nz
zY)Azo={_4(3`O2TooY4_VXd*!I#`A}|Ms-0?@-R>67uC!OG|t?5As9}!Fga;d-GMp
z(G$a4H%ks<W(r}Hc#ba1lFppP{#8Tgr2lPzg8?alM}#7C<J@E^xUYR>s1AjdN2g$d
zRN@q9FEJ$q`I)XR-7&t0q~$e-je;tgC|mP2DRhL7U5Pfd2PafFU4B67rGDa3K+p8q
z9rp-L-&v=+HXJ+uhbWyKM_Z)Z2?@Ce4%thd-;U9~<w+p$GhrJ1i4-}>e48ydnp^}=
zdnK@SurhB_y>!KUt+yP;A#0H740oHH=!sU3VxRh^z6VHPZWG=8buDX@w!XmX2{aj2
z4UOA5+}dyX^Ta&&S>^8d>gb)=pMP0sE?~K^J<kiY=6rPme4#8D;JG8NQ|@IX+UMwL
zq(sJTP<=h}-0M&aixMjCvaSR;qkg%tjuqby&@AYOjTIdFRlhZfuK&FIbO5i3*LyC;
zvBmmaLw&<e>>%WFHpgM_gf-SSaZ=R2&xDcB>Wi1f*|<vV)g?DSw1wQKC|l|nM^GWX
zyrsMHaq(hqO-n8D$ddljS4-qSVm@xuJ=PmX{cTViKXpbENE6WP`e(7LqOgWEKW#Yb
zf1lLY9Q0;f@)|mdU5#_s>ZXnz%jyp5_5FHYcp&XhmGcc}ks@UAXEmwE4gTu9f_o@H
zJ+k%7PiZ#OTlZ3rYrduM)OAQbM}>uB>JtDQdAX)>Z6q*T;x2nL8+cmrfVryryiY*Y
z#PA}q)>Sd`6q#z^*N{qyc?m<+cYcyg4ZSWmk=NGd?8H5if-k}oCgP7bhsKDXEz&UA
zT}Aa!xis7zFF1Qu3GglICEfiv=m!+E{PF8!qJC2^V6Um6DywU=Vcm9Pik9?4D$Ddo
zM5`Rkjl{^UF5}O!ukl(NCOpA&x@_KgoUy)-V2LA<!Nyg&1O}H`t_Z%BiOKJzeTgQ@
zvprJ|^->QcDTn-zqA?2W3Y2$LwWcP(GP8`x21~Fn%g5%dU(L;Xa2|z^iihnC^w((a
z^wt_!0sGmO08xPb4vNeMV!bhC;xHn*@8hTn;A5?6K4{YkB%&z>JLskh#jd38LrWFx
zr6hH6Qln(N@lfskm+Gm_ih1cFUXOb)bW9OUD<1U#Y4L?I=`g+4v6Cmksh=UH4J!K4
zUO(?~>EdR4S&34RfyHQd$P2M6fP_X=Hc8j8runWGs5e36-g1eap*)ZXp6*P4;W@WG
zdBdGyLwnylKgaz5;u9dNW29fc>z@8MdR=@L7o%My(wk5N5YINudcaH5+kFj{o?V2s
z1Q0E|;$|aV%O|>~`#ES2Ef~Z4ZYKn;22HjO`u%`-%iE74PDafYMATTMm4fI*&cb99
z&gE4gk&PV$<pG|qj84L)6-;+Z*P>EIWR{Q9-O&d6YT72MFW_%==5pPu0#c5pYih(7
z$f0{x;}Kh)^#%UfbXifT`+ivB?7FWG(WPa*U=5LESlDB&-@x%X<ce;RUV&QxeymUd
z`A3TN^mBF=&yc&E8i<a_8EZ$GmbC5Yto!HCl(A{I+wl}R`%Es#BCKBU>bOT~l<vE=
zzlm2<QzMSe&a9dZFxhp#wy~G96Z0`0PEOn#vVK`NteYjUsiU-1_!&=Kth<XN;!;2!
z5tBu?i5-gUk`%X8QjeppGAF`H;s=svv7NBl>TVQs1%x!m{rUTZ-y@pn$fKeucl@g1
z@y6E=&-Mo&47A_hYv41eH*SUNW8uni3;4Z5@aZ|OlN_Y-B)U;$B};2Udi7CNewzTM
zopK-5>;YLk{B!9FcC1OlOGSBZbCg@k1IXZ`iyeA71XGWq*z<KS+=jk(nh4zGAbjq3
z7cP97-r7h<0;G2OR^F584xYqNCTdYh73?ltG9cgeJ1F^`Aoaz#&Rvv!@Rp)0xej9;
ziaPE>M%n}!T+=t-zkz8|<>q|S!)T9$TwYapsk$<$VsFgl(<MX$>_VCbUtu9-cAT3`
z)R>e{?Eog1JFHt&D2KC{u!3?itfvYvst166Ey(b~w%Z;O?D;VJ8>lMtJ0-c<6_ilL
z5P8OC+Bn+Uy;&7)-JhQkJ9VL~$JNJck#+}AEwJNOh`rwA7x*^&C?wekKgULa1Gyw>
zwCazBRJV%eFjYVYY%y;%;Dic}?PY!B+0T8xgrqtBTJyTQ1OD!VCr0Ok829(7Lw!rH
zS(lZtNz3VMIKKtpQ(OXXAQ4W6?_5(C8ev`R0joB<PtibZj^BoNFx^S#6R9yuS1gJ@
zPDl4?1C=n3vh*r%r>~;0JH7lfO2S>jjgCLgZV$Fw*XP#P^M0#aIOf|Lk!$n*McTA~
zThK;>IOGs^Ais@XkDuz&xYJ(Iyv1?TCg^sh(f`BTn?^NtfA8W@R8$I4QBV-lI#G*=
zR)z|gs3@q2aYjLsDpd$ErdE&$AxA-GF|~e$3WbQsBtt|9C_^H1TZ#;UAfb?fDzls@
zgi|u~Zrc01cdfgAcimV2wf=7$-XuBaGwi*e{p{yyguz%W`z%`ejI>-b@&mOhr7XYY
zaa(~zI;yIAFeyk;nN{|tv9lQG?S30Pm?vFq{6vNyH3t?F&@}2+2}gb>e!KugXPk}=
zv{tAb>mUs!aY0h#h<$&vNNzuYN@h6qyaevT8XINnZj>!7Adf$1x!i9QIAix^=~D|v
z+3S0zLX9IDEsP()_-;>mvS(vhYTC3@)o-J|nOTMBsKrIWdic0<{rQ=)1q5v(VYyC<
zphrP6hN7o)si?e)mO3!ZSo@&)0<4%}kC)0E&P|6u#c@%*&^7{%9=N~L&FjnDjFK@j
zzD88zX>xy~B*;RLQ0Ns{1mjd}iqaTb9Dcex5V4)?RnPv`8y*GK0D!O-ey6?1GEgr;
zpyf=Z^aaST6qnG5COS)+V6gy=Y)|+$G4e{gJIo7}y%MgXJ6NiJ*<12Nx0+(fHEt?A
zaPM5Oc<!)E#vj`T{Jo(oa1|u(p$J<v0uVPbkb-@|n~VgWBDY-ipct!^=hfqHn@gAd
ziACgK(dW<%PV!8oCk2qyygr(41Dc!nm|0EgnhxwuZ(QyvuVoylsqG0Fa2fnCGaX$(
zt-5Kb%9?K}@$u;X{sF?=>weXqny#%|C*Btq&(K{}aoYTi-3~8@V-!ipN;#*owx`tN
z<g*9HuLY;2r00)LIUJ}=alYQ{6{e?yC6(O~qWg)U`*$DqJ{;G&Lu?avmtm9CjJ;A<
zhc|a~N3YehKXp-+$qooMojb=mjJ2U34}k&C473(#7P!RA_<bVws*+NZI60l>8KowR
zKl@Rq^EW^AqGRS2ZZx$~h+YPsVX8k0AceQB>XaC0yflkVg*jBvqa2=GsP^>7;_6f9
zVv?J3xCtSaBy)|Al63ohXvR`S(2Vz1X_NIDFnPEn;79GE?d_QszZAXKBmQnX#A~Rg
z+$LHIwrgyjcMpq;1m<vy#h~v+XR0dic8#CrqdrM|#Mo~v%&FAvo*xM@`ziH=U(<$r
z4I7FrT)!;bX854Pa0Z@ZQ7=3=)F>CE{Zn#WOFKu(?~T^DE2(aH<vL>YAP%FOC)WhZ
za7(GixLCK%L*DMqvsHNw$TAR8wGhS!TKo}i^6<QKJYD0MN6kL{LeR;tJ#n<lp5>yi
zU8n*4IQk;I>U)CEz=_HAFwDytHWC-sgzIqPt(uKW&wA+Gv0a&!XVBQ{oc@gC^*Z9G
znuAydu(-!7OxrFwXlY(O(>piRbTS+lhZKA57N;NSo$kPWn41qGFYPgBk#6xdI5pb&
zX8L)ikUAw1%6Y(4!+I6=jd=4Qi>=8wl$HuogVb2Ft3zi!?#qd5bXf@@{k$y0)3>|k
z*mslp<FmRiK~#;ozO?f)Ygg{bC8=Mna+zU2Xa+$f2a-}GI;%3$=IQL&?b1bjkoLx}
zVlQG@L(HgdU~lcvZDD<@oN%dT*`e&0igDh8aot+1Kxx|SyRr(GWLMrRDseP+5*=19
zx)&azJ>GI6rK{_2y?x@{gh1GQ%aFRo02&eb&KlEfISGdUkF&lI>ztuGGf<-O?p_bQ
z)CBG-Ha=+3pp%W)oP@4;As#p4L|m!~mGOH#^4(VGHgwNWmRlV{$-&X2XMVP>R=tm`
zZ@~edk5dbfI!7XW6K2C`;Ye_*V9dD~m=!tbq1HXh*WBV!$|{0ArfP4pxHdkA#D>~0
z8lQ7+BE^F`_oFVxW95pmf`XuwG_sKTbVTwE=S1X}{yy^!oA#3V66oJL2mDJw5&;DV
z-xcfYq(&NJSOrAS5oq#+on5S50fvdX%~(2Uj`9|dTRZiB>wYz#wgaQcdz(l`m~(@w
z-K}lWL$K9#qn*#G3uHt_7L8FOipKQtuRS$up-x|LTYCp~66BgVVIYz$d~P2N`}ej=
zuuGXzjPjcC#&5ylL=!2ednj7=_0;&~VS_EFF^&Rn#%%EFm3%GT(-VT#xI4%49LD{v
zhe@5~k;i+_*7m+4-uquF1nNB960X_~BdU6|)xt}{z6ga$tpaZhXwmT9x1BYoikRNz
zn8s^S+!HM9oYEtUp7lp?McUo;iv_`_=S)Xasvf*gFX$hAPBz}_z2lgf^uh~0Fpv~t
zu`RmA#XuT6|F>Scx%v$9arzNX?yNIXs`XhbVTD52gC8~4+DvJq8M3q{5>2n?TGZ^4
z+b<gn^PPZ4<|JxP3<-_NOq;_>v%ITeCA7Ik53k8mYdalr%Lk;)SX<*mcFt#dLR$w2
z{@0G{X}td}Pybgbiu=3sU$)B$;G`3W@RLi1ycls50|GQN;MuMe>m-@xkfTRZntW?4
zz7sqXZS0wv3`z3K6*+j(-A{_>_Mx@=B%`NyP<)Fg-wL^FzQc7$v8y1VCe+>W8Vb~X
z!h~~}W}!!vHxp5yy3TF4Pv&Av<n6kkAb1IJtKp{c0~L=(ffFLLi6j1%^~gZCHUPFL
z11vCCU;sAU%v=lo@z|TV|DS#?E?pSJ!)yX4!J;YX`XI<W5HAYvP?pwg{(c>pH&jy4
zj6ZZM_&+LCRxV=cNu|f#&|L<eH3Gql*k01}9=@e*?Oy7tEm`TCZW6Y^0ula%r4Q0|
z5OF{{VD$H^PHD5)UsmuzG%AK-?gl>IYtAtvye(ey0<*pxI5P;CypM$bt<WNTFsVP?
zkLs)PJ7D8yMC+H9^}W{DWpGi=6t*Ewi)YjkHAYIveRp*0Yo6=6A&Wf2d2=6LfAk$B
zK-%xwU~R7?B?2zM>uZtmhbLx-gb8Veu|EzS=?(?nUJ$<gHOD@gwLWhkI3>Kf68%`8
zir{M;Se{S4&gWrKXWSfzHf!wU9Mg@JvHguQe0Q&g2;BG2VYBz6fc1Q$@%&rwcc33+
zay90|DglO9Uq<Q<2sUWQ+Dw*vgks*#$}<|o2gNPTrqt)uw7^6@$>7bvS(-&}?231!
zN;308M0IT3!5;f!hrUpU$`qC4_fgSVvj0uC9ptSG^^pB|l<qv)3gg%fNJVcWW4TU5
zc4EZpKE-(GdOwVj%~YuBX+onB@`mVU0!~?E&=ht$*-rH!Z_EXW;Tsd0=PSZH<EEpk
zR9m|7uT}8|>POYEBI8Ki`boPhSJG7@n6pd&9>=<<E{f^7fy19CKiTf**CHR<@bMS(
zZ?`>?ZizYe{h6bNe_dwx3s<vj)O&S(2p?(T>U$P8$dF`wc~~<qF%y^6X!hNxWCBK^
zXW?fu^Y(gQ0KpsGVCxBx_PuOh{JEeead5aTVe6%nCa>`JM-68lKxhU~uWmo^Ksj&X
z8j1YbTf$&UqM2~9VRHm7n(#SFO495P2+<im6qpMe$9ExnyZQdR81^CB>oe@nN1fBG
zsz(_Ck<>gI`Fa*LlpaV21m`=fRcADxWd4XEx4}yCiMEWrmRYKCeH`rj8<SG^Y<#XI
z$!+gk=#$EWk1>W<`oU7jjQqMK+XHhYe^Ac)wT5l+x*A4ba-+lGug9>PsGyZfEVZ8i
z=9i>h?m20vyn>5z>21W_X;bFaRZZP>X#J&TJ&*al+Ee7_Oh{l9k4XFRmz38Zgwa;L
zeb34FmAHrIl3T(ak6Bc{3C*8=h8r0k!fDJwXKaVeJ_c_0nAFLuGGT(b#5~r~uN9}y
zawro!PFZ6DO}~SguVG9`tw-y=uDqTZ+ky)fmG{qxr|D**2r|t=kea(EEK<+#Bjh-X
z8lkf$JU`WEsyc+p)owZw*CIq1#ddzFeLT~CM`E2b<Y)VaWupM-LI`;(cY%8V2*IE8
z{kaR|lzMcQWB13yuVkIi+i#s-806!7aWMbG*t1bRd<9Zz{|{yHlC)Ghxg!Tc$1{}F
zIAw+v%D9aT119B_5NF3v4s1#T*p3w@kMydWa};nd=ARi+ts9gc6;Dou`nA>`5=%*4
zc2m43*UfZ(H`zW&-3x%b+uxY0E^BYT)n*cdcpP7R9X<gJYm0{{%e-mIPg<ZS?gkwV
z6*_M|BRBT*s_e<?S^rGEsx7vfc0KJ%RxV}B!s3n3grcb{H;H?Nvb=ey4%@T|AeH%y
z$xR;}QvHm!{KMav=OQKv7qFJg7_m;_DWwV{-bxl3)MANxBXfLAY&UJZ;|NUD^BmvI
z2v?0&TBJ(o4z`w^*`tzo)mu}u#&+Z1?U_H9+3lL;;KS$&-!X{6m9s#sO^2!ZZ?!p)
z9?=wxx?;n#AeI1Nv`2Z5L$x|-oU$x9e8S>g^rnZ@B41$XcNaO1lb!|deYd2o+g#;y
z-6`z)iM@}kA$Ts-!TD?g4llt4PRCa|2i<F;J`&_@FvMsgCC^FgBk>JY#D?l!dv&4)
zv2G#sIDvPS`;v#X9_@M5nbj5I(aBmKnLRpn!I6G^w$V5D9^E>{p`kE%?x<l8T$5fx
zY%2+PMjr4zZ1yiwoL~c61T*>0N}Npk%033afW?q85>&n^9EB0XRI>ra$JH1W(k#MM
zZWg-K0_;SikBcphy{d=KUw<w1F~!%jXjEb*G%3!aKEfLyb<GIsWB<lT1r4ew_8+>}
z(z2G8TGJt<Q5Y{YtuZc=NLYl@ZeBUpXhfjjGdVL!Ii-v(e%e2}jCz#(<Oiz6ivM`b
zH?tuB_jj%<MMaL@9={l1`1x$OXI2J6M#H)#JBN_lL=%{cWA|DcVT}B-!DXEnyK5FI
zH?^PbfGud}Vf6LH)HL37G(7TdS+4t2>g@H8d$veC%8G(|^9v%g$0RA~*Ju%68-9!c
z*nT&V;)EBt{id?iiBWXDih>C*Dhr#eEwO?dN=B0fTm$9(Do{~!Snak^!7%itTHF;D
z?$7zvIWg4V{j8dv3DZu&2Wd}6dwr?~-u>8{_NhgOp)vvX%F2Hr-Uy@)3hN+V9OZeS
zW~HIZNBfw)^<Z%w+ABvI)w=?lec0BJE?4mB#QlOUzW>t5<Hj4W*yVM9)|GyWb4*zA
zoI11FLG727^JdJK(^ozY^1~9yIEInB4a5;OdkN%?lz5mL&3uHD#pz63U@|_iy}t#<
zMzdMFwP~z_`OIGVRDJtRf)TbpZ0KP~`-BvS!5lb_BiM{hof5k(3w%jGaSY9=<u%fs
z-IGp%dgao0>T{hlEu!i1V*QZF2wy#o@grOx5Bm(6yoP$IfF~YxpY<iyq~0?=o4Fhd
zMC4p6mP>by|DvDgQa}LKvnAYR)Wzea;*9J8gYLGS7QWs)@I)!U`;zFhpUAD>ijNNb
z;dc|ss{Fr1)^tQ;76v}F$J78n*ButZcnVP#IapS}vQ@sWL}xwGyS$RogzUlb6sa)*
z$8y6?<ujxDkC=yD+w+(ieHQh|F2aJOj=9CeIQ#O#<bZ>nj%OJm5qh}RIXxYRDC?8<
z^Hel#9Pu(Ev8r-%C-BQovsYj*(L*0!RpIW2S}rMJ*<>^04k?es3@waqa!$Df!ZrOT
zMe|Z8TR+&jsFs9Y;+MXRpz!zG=^<Brq^Lg^+Yp)jU|^j62W+e>r(cUBaw|&jH_nDt
z!eRRDd^ta^q1djiJIiSgV@3J>L%&*l@;lrpb_lu;tb92WC(r=hQhT@te6R<~%9iln
zI#_17ft%Zxu`XfGL!`AMUW=l0gT#0<!A|TQ?o-X4ba!FzR$%lD_yPE_s{BSszFl!B
z$D}p#@%Y@u_V`JAPTV8qV#Ar`Jf!XhBD+_$D6VMyIlEuFH1y20zwNOeu2;te<!N3?
z@aDX;ZA`I+(|wv;6k0G=8D+}IqpD=>5jQqCb$;?8{}Jv(4j3PN76b?a5lGSn@>cqh
z)&{95VH;ovw;uJ4e<$guIi)$@(NK#qj#ov`<OCzscD3WzTSC8BCyZ@BCgdlMZoE6F
z8e4Vn4+F5;QtySc^$k%576qOYH&7c@9JT}~3zRZ!vx2vb<r}A%jdg@{ZM64S8FvMf
zJzEFHrWapxa%qyo;ZI7Lc?Y^#gx*StM{(Y0=^vvm4<5WrxKYT@tz87&Jqy+i*rIc=
zcWhXeXn-Ot!9gk+sza8~>~gION4voJP15SyTNA1nIP#&{&)C%+eVrP4K6|t**k`tK
z+ur+QlIDBaXBxYt;}#_uxxNE~uk>}t96<kX7J%JFBk;lg$Tzq?5s=<<b+3ix&T!Ak
z;u_myg)3M$o|5}md!Ka|g>X$r1_`}9*1_ztL6e^8LOQwsbVXTwTQ2Q-Z-94?L+ugi
z4(epCbkyPjW;g)KR_)kUdyT23Km2%>PAoOiSwP;m2K!Zs8?t%DO^_~x2!_O(`DT{#
z{$Qpncu{=mB5HVZj+RG%G#VZl<F<=X<j7k&*6Wh?hhLD&XZwhR{gT)IWW?o>VJi{c
zZI5k%0MH<VKWxETa#%U8ia}>VnTNZ8FHCYF#+NhVuZJhcR0tVE+&joJ_Lo87uuN0a
zg^?Gm{PtPc-`x_DG+b*z&Iwdl+51%7KkV{d*Npd30}v?%eh7M&hiw9SBm>*To3upz
zWbKnSa>gB@Df_FDIm4SELr97{otB#yL1*f0y4*akmC!znT~FJU`#@goN<wE8gJZ;?
z7cbNon=>v_146Gd;~(LNt^VsSg~L)5Ru3|41~6EqG?Me8ShO(pIpz*|?QlHEE(bdc
z^s&^y!XPpMjTx^mxFLr_F&cg`v-(N@xXZ=gyl5eFPA`jtD)%oO<P?sDUshF?-9&bP
zP77YMa$L1l`<$>+*G5?Y^$NHmR8TBfU?m#wD{Zo0#f+=Bi2TU3-QAgo4i?H?tt@8!
zd)A9Ca+@q-W`0lY7<IYAjkL<WA3U4JfA{ljm7B#QLuKKA{ct?s6rfQp@sj6F#K8eK
z)~0~U@tx!2*M*<5*J$=;s+)ZVt-9{Md^#HLQ7s36_}I)()A7Sm<44On^Liikg!<9H
z_785)ISa$F0i$UZ`F0M~&v4Vf{@>z&yUt{bwn7M~NPn4b=}IoZmY3RB1Y0|Tf8MYx
zHA?Vl>(GsmimqvUbMPl%+hK8vT0bB3%*&t0(l{~aIW1<syDEyGj#h1$i!ICv{zz4s
z`z`@m_&EbK{C}e&|9~UJzq_FJHsE2AGSW)Tapi0jVGYyLvj*sIf_0d%fxG~$!18v_
zy2QRzaLs8>WIU?loTsn;>Kr*ZydsNwk+$HQnzHt_!A9GFQu>OE9>HNYsju3xO;ZzZ
zVTqB&ZaeZM%tTd#XOC{1W;c~sUgM=CDmM6D{%)*FRmLNo&m9;Tb@DkrD8aluyo{Z_
zIvj4eRoi{}`orwWv<ZVL$$z0Z|GS0#DQ6iI*`vG^U5xoO`EI(W0GYwm1Kl-51<`~V
z?Oi4gfi|a0+s~5grH^Uhglyy2+^3@!CETl5&lgZDRUiALXWJc%yT7Wl&DKLw@S3%N
zsW0e4hc%`gRd-aY92d*CGgQ&BzvP!N4hoKr)dQp>sH!v|Qk$x@l^5SFhzO)_NR|y;
zh_vy2F7kd|>hu7NaIvknZ5Q6FXz`OUZk})O-X7bOH}RJYFX5>^!j=g{5(6RSj0sax
z6oW7{wAxcXu-_r$(y)6-m7wN%S@)oL;!XNYnc0ay>K0cgif>4Mi}0&k*u5J+`Vy3K
z0Dg#a2eqOk%|=jioC09<;~9iIyc=Jar&)Uqq+Z&QXFikKM=V#!8g}M`qUmrGzVBll
z#d0faIiX-vVHW1uC>d_VC+a@wp5_?t`oj~(=NeU96Nk1-yIjw7^Q)`<15b-%O0rGv
zO33$eZn78s)5Tybp_RmaHVjygIvlCnJ;k<Uccm@L8^XmAjRlLCqM^g=CFMPo1D!Pi
z3VRdi|5Qeo*P1sUm%Iw43759uIE<O33}=t-a@*E{6NkFiRd>JbJW>dwLHNO8&DYm-
zO8{c<ut!sY{9h9WlL6o8kOz9mL!hMZP%*G;>UBun9weC3*D7DuyB?!~teLZl5?x$#
zu%LurM4clP%eAJBrBojaUSIJ=Vf4XN-&AkWd&Ua-A#W#f$5?9B-E395`VsDC{ygMF
zEV9QO!BL@3y&iJh&!N(wt532VNJ;ltX3sFkN1!Do87#~{i@EG1d_im+uMP9>o^ZHv
z+0j;erH)`ddOdtY-l@d;*Zs%EpUy?T{aqDi21@uXcYwXf!!`sa)ofM}jq22EvGw()
zSoHqxawhAP+?dwv5|&uAb88mWt~^{C$KdfN5B=7AR%E@uT9jKO;!Um?`y#n5<9AnR
z+<%BtdOTc|pr9-p5%U~UBp%g;)RYhBzH<1m=R9(iX7qb!%S!qV&lTm#Yma4p-xRR_
z^OFWkZxSoGn3KD1iMQH>{f7IT(mW-xR6W9+1C@Er*OBtm)o8$;u9~xjV;$Iu2J&i@
z(?E$Ke4PZNF|~_^4^#nO8F#jay&?Fz<aJj5m`hAGwdzO$J-3hgd{Y4-UtjGvZ^>W?
zdTP(uEy8j^nT*%xQx8Hqn)7mE6b#sh${AKnLto{7(6PoZW17~_rQUH!xST5vjbwO5
z&<ZEbjEsG|X1%HtXAf4@miL?fUiQfFZK}rdAsoI~?M)%I{f#wAVx!_<=D8X=mOLa(
z%yd9MdJiQB`nfpAl#}$y#<qt=8k?LE^Qv`cO0rdbQ~cJ9z23)Fx{niMl}FE>m7IO0
zKL@*Mp$i-qQ>1R2!@N@QOYn7RRRwnvj5Yf(M>Uak4jYj1EHz(?HG2X}_9!T~DYzQX
zp#d9@?f|7(mcq*BD5#s1On)&=SxNmc%Dv3>sI8*ok9UUVmrq{!#o$j!q@AI6qFXYc
z{0OsvC{1-=`-t!fRcOiH%=%6&_;O70K4)kk&^MCUU?woY>Xe3Za?&Fv)Ton#x6CrK
zTc0r3wflD8&6m6`yrHl<aq_3JdsO#BT@KH1a6?43BXy=w7o<szh_ZBHIk%Y-jW1)z
z{8OOvjQW7^4pVdbMOfnCoI>s0b9wq@h}HMT5yyKkJK7rqDAx2#_hrJb3;SL~HNXE&
z_uJTOaD~?>g8mB(KPr6Vs#{Ei*Irtyy(7E?Ec0QN4~THuTQGZNVGWdcvaPb6!{?bw
zndyE?99Xf8vcKw)yz@3c-Rbb+@?{?X<+RrNb^GB;FS~W(=AO33POocU7y>r3wjVw<
zPa7)?Xz#<zxRXoN+gNK#F}oo@p2T)9=3Fu=Skc43!LnCSi~!82Y$95;MHG#OPl|cp
zhfZ3a!mj4-$)=3<s+P6njivPnvIFyLsxHq38BRgU_D@G;iJh$dHpQgIv5@_%&H{Vz
zbTo5C=lzp_Uikx~o|mlgD>&!tc_XqIyF2UAGi|qqZ`5Cy@Fd6~($ur-vSRz$(X@-n
zcg$4aMz28X+VQ9t@lCdBJ7%MH1%^qA&eRj7G_q~5yf8Gi$$BmDTb}*_Rt_#3bSsp^
zJ9duMla}NcJ?|$q$8sqn((@JF)3u}{l~rAgJbq7+<L1lL5y=h)*y~5Qi`t)cRzXq-
zEkUGP_$4)-VNcI6BNUuwN-W-lKR&sF<`sFV-9uTKJWVtXP7U8TtMYwt$0DcpZl0Ui
zlnn3S-oO*m)r(-2VWO|gPczpn!|Rq9X9cAZ;)xfKINukY)3rn|i<0VMZ1%W#W_zB*
zJ;>2G;25&XRytPs7+*eSUh=fp=leF-FH>!I<6G=CYiD6~-fI6NJdaDFJfBT~Oo^la
z2Wv~0z!f7YSnO@6Nk-vdFk$htZnoI~%eB0V-~MS|FmOi1AsL?M_)2~^c|*)hYwe~n
zZ`;GwA|SlY`Cl0F(bJv#!eEMsL13B~Mn9@5v_j!UZl6fet{P%FV>wDE(LUuJ>$Tmf
z9%B0tnw`z5-arwZe}Z;n<L&Tt>h{suN~h9|n(OAyHb<&Ug=)u{e8V|N;u_+JvLC>n
z<pNBEA*gE$q7mbV|LQPA;gA@v(KX=9rY3M|WJGEryi{y(5)Eq*CKB~()+nox1^&Us
zg+U-rxe4aI6WI%aZnf~&YkECJ8e6-{hGJLW=p*8pUE!+sGd(j;%Dd&AmIpegZ{q4)
z=CchPRM^hzRpweQk-_O#`(t5hFD7zAnc5(X;g-$b(K-8J>-ta8ZQYfegb@39;!@Va
z+@Qf7KZ<daw00wRni79poFgjtC+)4R7KbFS+B&nd{8UeQ<VgedYe@QFh#t`BktW>=
zIOX$n;J=FS?H?ZD-f}>K_Mh7@kp&Hlg|%8>m|bj7uwDv>5V?ha&gSrFh%o^VoVZHU
zH^D2$!=<;UX|}{QQtI_NGEZSdG(Lk>sMU+@v=3VS&r(yXdYVf^>046u@ZArl=I3yi
z7)M+T`xZGr6{CuJFIIF9oDI%&tE{b1@AEd7*ljg$y7;In4tdDfwkGkE&zk<-__sp!
zCCxgtWkRb4bu_7djp^0G0c?jXb#k*(Bsaf(MYAWA9>F_@1;A;>t;C#nzYtGtnV25;
zswLBH_m|&4Ud0zp(DQ1jIZ?00HV2j&yaVeKJ|gP{u&;e0T7C7LPAptT3`SzNv&f9w
z2>R5`R@T0FTvC!vm5rZQE+tw8hl^`(<c)NVN|N8#2D4V>ou&G$2$r5NdoJiXH9cCg
z_54e|p6(fo0kxeP0CHBK9Jc~H(yt<*fl(!H`vJh+FHF*`D#nCBVu}qERQ$M@-)<}o
zc6nEr*H3f#_HO0%6_nBN<oFi}3kQ-1Uj8_E6!+nJckz!<_m<tM_M}CG(k*u`?E5V9
zzz;7^o!WXz|H9KpKg)N^cW?eDMM5G#&9p_cT&-K8Rv$v@h)}LNtL|W{@?fs{fpWcq
zc(*(~iL-XxSKg_y&BhGL0`%R39L)U?s(l}4#x>Sl@b~h2*^NKd9ct`x3Qvza@?11w
zr$-otXz&E7g8}!S$d>SLHd~CWAegh;(wysf@xn#yg_<K+4+JxobFbT;z~cQ1`xrJj
z23-W9pC{yXLZ#XL0;W&nj!~~{Ed5C8Ve|V`pKGnzW4>GYi!uuPAj^6?KMKYXq8?mq
zU7*JFgaXl+Myse;lQLDs=n#CRIgGW+mk>4ptxvejk+=Muv@V}!-fOlwE9ko*mz0>i
z(aben^pNTh(H26B<C_$}*6MNfc<Zmj-{9tduokI<<{J2X=o4jW2>cV69BP>pF#Qy%
zuLfvxa$#05L0`=OkErGZb!h4i9w%5uBjc4N=?d3cww<SE^g$(murk-_Ka#D*^F^!I
zPr+SOyTXyVe8ay!{>!q_*YTuF5!qlnwt;&Sv<M)9<4k18c?schAQqkXhJpdk>Qt+U
zJkdh17aVXO7}wcAbJE{n-~H3wSF8`dU*8#GXMUjKkBX{G56%Y|*B0sF+aQ+x1xK-3
zn}l4L0)|jvv#^gLccUx{m9A#(6$=1Fhb&6$=*3w?t2%6L*~2;;P~uOum~1Y-!B9ll
zwgx`)_9S&r6ql42a>|08%%As-R+{a`H*57G@+NB0hP@!6f0+GRy2$OsjY8_+8ZeI*
z$!!{N%Y!Wzh_6c~@5T&G;W4B>t@d5g)%-VOX)FtV3AgYZDYq>$H`wVadBa!d-VE;L
zU6J9(7|`#i`vj5wAlb@!GBTvvh+TbZY~x)j^2jTuk#}{6Cht2VX$rRI(`J>&YgIYd
z*Qxi<3_azyb^rMLZ#lmK;+X?CDkM#HuE<5k8_ywRqQ98kN-*HcuOum3Uk$pwP%>_o
zYcI?mL&@Bynw{Nl_*|-_J@)d<bwST`QrngG#^=0vdjHv%T_q*paxre~>|M+CdC{Xs
z{K-O33pIJvDRvuT{EvkU_5}&dKEKvb{I64D5mUiuf1F`9_cnw->I{waJkSADQQRuQ
zeUl=)_kqtU#5Nt@bj`S?uZljwIb2=ia!U8Gz|#Lvhk<shP~N~r4<K{fk=sJdYDlP~
z;XZ0c4E~~Mvk)0aTIv%EJ8y{BM^V|JQ@2^i9<zTJ;=w2ik9VV>%`J@|ERF5YpuJH@
z5VG>13^5w3bUHC!71l5iaT?nQH9u`MEG;Fc#QmZIXZj|HysoqOV#kR+VEIk_KfgG5
z#6UAelvN?mDRsOzAV_dRSuJC{vcn%khZ~IiU0<=CIy5_w0z#o-Y#w$?ZfxJ=n;ZRj
zz<UMRCN5;a{n(3W_wsHVVeNBKqtlOL=6hF$>uGNP(<ayb2;*e!Z}6&%+A1N0;yWn_
z-|*I-*h4ufT570JUb!Xnnmqo#p+5X|wSu^8kKChLxnJ-T-O=CMA;}W-HzH_}r<)~K
zKEKpf$720{Pk>r{BpY`2GFTJ$V3$Z$CUOB6>$G?7^}F8(sgg<#-O*^zwNHQ0<~EPA
zPWwte80+ZeV@qPcy}NsL35=Ok3NQ0+6V^a%q)kb9GMlLPGwHB-Sj)6e*gILDqZzaD
z@9Fk#?h$fstk6_*OxCt&%D+Z55mIebd}-LLlYXgZ>*ew`m#&E3Oh20C*JtfI4Bn0D
z{VkfuA>IS@WT<&krdu)uJ)bu9Mr2Hb0&w*Fl%D&wYm7j~)f+di8t3E`ef7tH|GD3O
z@ay+`mAqxv-1JcE%54o64nMZ8|I#Dz^~A~*kATMqDQ<KOQFa$Gb_?J!O+ge^7*oQZ
zGA7%_77(L=n8bwF82fUY`*%Kvl<hEEF4%&4#;;EZJd+2S%<cvKe&mf!w?DK*&_Wq{
zhS0KJZiCG8?mj~8?N0>W-PI61r17A1o_6l`x1Oe#G|xN#*<TN@ToE=;YU98!a1{MR
zYBS$$sM(hR?;Yp|+3ir}hG>h3e>HXJ|9|qShGX1`x9X#yjlyql@U~SzV%Db&1Vq|g
zXB|9Be@h!Q6;dyXuDma@3;p~tmhN7g*xpE3rgSXMnJf#=T&W~K$Y$R6NOPwaQcwF(
zw=CA5a?sb<BXz?dL^^*j0yf8ENZ@}Sy5FIX|MgMBKHwhWB(C+`=QiNTvqRS<aOs?>
zMe2lx?9C%&dnMt%Jf|#@J-)BfFUfoN=<;B5vlJh5m1>p|%Aj2fqps?IWtTSA-}X@f
zjEsW_mH;&h&{90Pz}y&}r==tTErqKyf$}cumS!pZc}F*B;nT$FYo>?!U}sU0EbunL
zaMb#%-jHO^1|iBFz#>|RrmQeTF#w&nfs}NGo$1~*O8j^>Rh+qAR6cp->f_e@LFyb+
zaQ8PoT*JS)Uw=F1tX2Ub3D$eTh_-eER;%7;g^(~GrIBnniM?c8V2|n^MDTt^bqrG|
zVy2QV*IX=QMjYhV_Rh3@(u}~81_rALYfHNwv10y-{L!>a#k=CW-oGMNasJ!K`gjYT
zCPgP2G}e|OSELd@)z4T&HZyuRN^BCw+nhs7QWg0V=ap-HH)Ujv=&YW-5X0bQq1w_`
z>tVGfbWM>RZ))h7GjhSaH`V|Ou?9f8fj-+Er?CXYXyFkp+#wlc8|_ogdbKZB>5I|j
zyu0CydOEEEzueC4bJ!khgTmRxXsK?UpFfjvrqfOT5qJWX`qSV=EbE#&)J+d@E#7MI
zm<+T%Ge+pQ@Ab8(nV@_@g&)3?NvqS@C=Fu~YFmK9CcfO?=tTE4Q6Jnph?A?bY3yx1
zMUxvd8yeEcydnGBg0*Pw!-&Fx4X2M%usE2FOY%%_7YL#jgh7*HK)ESDZ8$!3GWd(k
z#WTsYlRfLBJU&Hpvm$p%_D#Gv%@lug=eKQ#e%xlPccH^jbrupn2}G@LfnUdavqSX_
z)}!9Z?!_<T3vXLg@RZ{|SfAW}HCIowM+tein|B_QC!cB{elmbvv}3Pfo@jP?f3JAN
zhiGDXG9}XQa0RH?7++aE$%uJ-NBrR?RG9r-^y-vmMHpFo4+)xD3eE|SLV0&6D_Gai
zh!!rc29K(DWA@7adY`%1r9)FV3X@>;&~3kRy_|EKwLX_xwOX7`?s?no_{-LByQV=e
zJ>8q+lhW#4rKf3z+bJ9(6i{<WQ*Wdys~T+@5pMW|xv4sm1=CgmfYFJ^!IdCou!*$?
zdc_<E65ih_N4TFW_ld4yL_DEjmlUu1#;>!#c;5Lq!_jKf_?{ZE^O$OGwc(%?Jq~;L
zYo2ZiV@Udj2t!fcsQD1N7N$t^T5z|dD+z{7zdDI|J?V~ak(oKsOk<?Lee&y&F|CoZ
zl5NG@(a;e@Sdru#d13Cg=xA-Pqi2-VTNKi@wZzd#5BC6(MFS{K2C&y>f)58}3_GQ^
zV|NQzg-WCF%LR*R+!Yh+(m)lR+eD0avEh_c;)$zZ=IeM1xx-$t3d2J>Md@4LoGfqi
z@lvj%hIveRd%GXGf3#c>B6_upqBDZR`JayZMa^~CWK4DkqK^dHC%Z_SrxLlA4wm@1
zG-6x`avOR~HAW2ixYwkI)Ti6+B5$0#3M!=a`{||!<Mx}`=Z%_6xbZy4U4DnX=%0-y
z6$V!UD`xz^QpXhGGoEJcRd|F)XzxU*+Hszl-J%7$d80565^TK2Nf~!DbSj!?#qy8H
zh4sO?Ip#6HiWp(Jqf&Y59k-2ez|l@~|1NT?U&?zc=VScJ9=gNiaog%I^oZ6%*`FM2
zOX|dSHB;BhT?khLsSmH%%2!68?Go%7#an<zYR^3LRF4_fU=es*hi4r^_w(W|R$>`)
zAUlQ&_&k4>r~jcrI^Mgwt7uDz>wjtl=3yzSF@3cVb^iAZ?qkA?Q$q$tVLrJ~fs1B;
z{SwW*Z=NVvjb+QYEnG;capDQOxc+aw!`w!$3ELd2tV<gx^uF91PR@HgUirz#Loc7F
z>DoPeEM`4KuZWolw$oE*v{1cDC*>|dpc4Vrr*pEKyOO3`)*fF;G1Ht^t{{OB$t&xX
zU01=A5OZm$yPg)-$iZQxrn$=aOFD7nwWGC_=mgpFnFuNStX#~eADKN-+OeDXL!#b{
z5H#v1bSA7YY_l@#m}qNgF;Pxw62{?|PnAb(eq2!lr8;iN%Cd3R_hL??{87|9ow42I
zH)$7x9;ckVp}&9KO`@o!L5g0(X_j+*I~;Ze9M=}|Ig7_!Dmb}gAiS@{P0Xqf4A69|
zYlY8a$Hp5ZZ`)(Qq={QUYtfwK#>*W$fiW60KkL|7Tao6CKi5<Ku2T53!Cz35NB;-<
zn#l8E%}R!1YGNpx{hO~e-Yryy+$5~RV$&)cwWJ2?&(TXsiZ+JgKe|r@k@gK_OJ(N$
zN7!py#!`0~pWi(Ltf$V{tf#@|+dxg#h0J9XjXlD*E!2ywhP^hR%>^Tfwezj!GS5lJ
zA+04@X&A*`rtvIS;uAx7Mmhfxe9qnXLKM2oOh>nt9;+%Xg^88ulQe8g38Uz-fW~-k
z+3&vX1*nk60eR=XaDL|Q1|SI~-1(uquc5|X4f1zf><gP$QVe_)hR!Q#st|g_ahRSJ
z$x?3%3`a7z_f8kWey(h^gjrpw!Y6sE2CQtu&Xhk>E{b_H;H@-O+ju=!Zj6boc5vC=
z&4=bp#Iy)piB0~&5{cgf=1s)Du!nY!jm@OIKyy}`jVFr;t2Ex=Fg0~c(tanz3L1)y
z#^~H|BiRKD94f@E4%S(9UY@}%8&5MXmztPx3i_A~5?qi0;uFV9Mf^?AA_>r5hMe-h
zeJTosG9v2B?K71#G-e2xe3TNl!z|2Iv_XcO49j6g??+n_XNbmQgw5SGi_)$X$}_I*
z5h#T*H3n1#ciAtQ>*MN)ea*O~XP9^W@u$UGj-#zPd-8)-H}RrcNaEJ=V13S&J*%y*
z)bifX_$B#yrT^qmjq8)DvH+?%p0=2LrfAEP9>S;8s&B)>?iMmG&)v;F|4rF}<gf_Z
zl?@rdg69F|-0}p5e)(aOt`H!QL){KmhC_LiM#{V)>x8VaF26RQD|<Fd6RbBvt(z14
zy(ER7dQ?=ze{p$gL&c@ah@UP79lVqE2$z{}F!va?WROq>j^#EQQ{gc!2vUIin$Q=!
z_(&6&B<Ciu?35<`b%WcLucH|S8W+kMYA@To$AJ+iz$<-{=u<Q4h~?I-oU!deCxVnM
z*%ZGq=Zb4>c{#5PXY7XBv7KeQ#gpJ9isdzu!GB<eo50@G8M4dkcn1N`jF6Egaal9~
zfG6osQW_enuJDH_x4{8C<^Hv&=ZdZu<YUqPqL9|@>q*zXU-8vleVuQ3%x{BIDf!F)
z_*J*2Kk)eM`Ie7vSqImy$a=NmYGy{zC;vF|8P3}M3)g%HF_23vg%s6>q28|R5t>3k
zi6VcE-B21eyQuCzC2O1jL@{j0By{LLqxtAQ^GaSi3?Wd%h=dRr{GH@_b$}w>*lg$N
zse?5gjL<9skMZbcBz($3$jYMu=9HyUmJ`1bN|NN}uONiLv=6k**Ak3b?wF07yEurl
zgzy!%%HdbR7Z~vzdRzBZFUws?l1rne7l+`M))feHZd^PcnNOR`sqY(=uzx!LvZfp8
zfFC*Y{iKct-C_V%4fR1iPhbfAFSz5mH$i18usP$JEUt+ZMYc$nH}mCffpX_&yp<mo
z)$diEdhD4pHEu>40~+v*$H}-eai`Vm&d|)ODDg$1yX;TKjvugKsE+UoZ!%$1nn&x5
zptM*pt}TH5&jngG;H!a(%xYx=$eSBqlNaBaHNzW2`vKk&eng04f5|jg<h-xt4QfuI
z#He&1dVp>jAANT}hZ(%<$e;efUyZr^Tosvfn_8fUES&zIT3Il`QcuKow(6D`K~5OU
zUaYj?0Dip-&Utbu19yg`;Kb-`FdOAmlW%X-OgZNlVP^@94o=Af6Iqre4J(xn6&584
z#eeLN%=4yQ4Ws3Z;liE(%=9%R3*YByRt>A{VQp`+c4{*OOWD5+I`rzcxXXx^5LQ>#
zP?RR51<c-81ar~1wH<uQk~hq++P$%R@~I`v>XW^y-z9_Dk%n>i8&bkU=FXXgzb+{F
zW2^#vBR*{3Z7otevyPWymg;?)1z2yvs86^m9gP?w)k_n7W8==dIaNy9I1N*4N61?s
zik4hiRXq8AX0=1YmdW7^-_@5MZn$^Ib`ew_N9cw+6AJvu?ZI=_$%Vmq{@p@3O?%>y
zh;KRdDNS0|JGuF43G@5+sxHg)45PCz(Dr)La_mZ^&w(@_(af5fT?(r(_aEO626lyJ
z9Iq>$3e?jPAqfC^s@@49Y)K2?coISCH@r8VbyY^X2^5q}Zh_`-4{JLQ+u;FjN=mbj
z^}aO~1alB_c4)&j|Io(-oxa?Rf?)Fc4hLtU*rqn=U};t7L=nI3TZ6w!AK|KrvWFDD
zc{CAbWm;5JZJuD=h~P7&;Vs}qeV_+4g;QeImvS4w4+<B?Ikp=~2ZF>^4+dhAXH*YO
zUPyj+iF}=P-um%nU4v?T{nsz!4YbzKp$E0}O06}bqvcJW|6A|%)|<ps4o8am;reWw
zU^%}_o#=tb(MNMC@AA2QabPkR8G+(YDsQ6NcNxW4+2LNzdgV~PZ)%gBVVxv{&r7gl
zIX@X>(UVS;cQ_^!TAJoclI2MW8=wP8ITh^*I^|ga)crT#+diZ-qNp#jY_v5(*<-MV
z3qo!U`K8OR7t&<yi(vY%w_KfU{jtdmMq=%9vBTJNW9vEF$P)*<G@efBn+l##=X!GP
zzGUS7;agIcN3BYDDVp3({NmqsaMl#&3>uHFY9|;B1NBQ@qGW3FU<r-A6uYM6fGq9j
zS6TZ-EN2DId{kg8u7TNCMXQ+-7ss;7q3O2QJX7kI(igoRZm2RTbxbL}k@stXL^4vG
zKQ?#9P<6EcsuN)D><2*XsDQ8K+4BnvZ7r*->6V9qI7=Pj+xbQ?H>6qZAf=wgoS%#?
zmr{O7qER;$0(&Evw1pm-f7Ul)>oNmPD~vAR3HO;?r9Pz-QOeC?;Oay6VdLsOnn0{2
zd&J^N$GPC}O%If=3SxpAJ#W+^xrsNoWp<99TWS2@PqFkxieia1e&BhBVf%md|L*>O
zpe^i6NZlnzZ5U*Xs28rE=ZA{<PqB!z<=V^|s#Qtx<6!6T(|L5O>C<zOV|yY4wm2Wn
zc^lKy^PsEc%Y@0THWjHMU;T1NU$^_@zgNr3|M{1`whG?J!#Q1*ZmYJ2wRKMXRA*6v
zN?#?1OB>qq2P)zgy}a?1by)O%=BJSC&CilfRXuxN_WVWniiOo_U0veAgTAZR?E}xV
z5d(}2mwP*S7(fpe?nbhd->ys6KFl}3zJn71m;O(PzF@6RBt?(n`&>bAZUC0|3>K(#
zA2N*7>>Q%6KitD`aBZXP-W(cvBWF`-?yn{}dHeH=e|lb3E!ui{=8IyRpTQ#4IdlIX
zdiXI|Ns~&r7XpzkH{k`GW<TW?S5x0%_}3Ux_q%XDd;vdVEsVyOlRjm?CVV0ytcDtH
zctR=TCQGC@H9HqpWXOa-k2r@VDH*S-8VQTgnG8Ok8^dyp3_zz2^!PMf*Dr5#JtGto
zOBJH>1Q7CYF!*cu9~f}HD>dq@Gmg~$Kn&zaq^e0Qfu{D*IDi^xy9w)aYzdF$0gjj&
zM(!Id?p1hPVu>a|28@c9P=$2yn7A_BIdNiIi*E`qZqCRVcj|Qs6+EwEmx!MaQY%Qy
z3}^cyA-oj9^L;z!<dYWJqA~4NeR<bt+%IY8lTz(ZI%8^B!K&X$pK<~Vr~+etcZfR2
z6D%k42K>m9Ln|Wu;sfvQgl(EGyn@`$#9@Z&V5q|l*wzgQU1lFGEaySF8*9C^vWLMv
z(LJfzETbe4HlXcb%H_EE)W&Z63ti={XWlcu-T&hl7~tv;<Qu#V*V94&OD6hT?@bsG
zZwoX&>Hy6_ZMM#cX*v{}jUtDE<br&{q$yHkr%7uuL+?06wB}f?(y8<sa1KZ3GNTKa
zF@_BTD?}bWyy8u%9_254ni8MP-FgAz6qd@_d2!bzF<^m8*n)1&QZLl~I%rj@MB-)`
zCQvu%V+Lp;Ah(^L_Y~!n(S7RKAYFHRTDlCQG`b)es$v_zF8kuC%k~!%ncx1l>Koi!
zq0V@|Rt?oP3$5H%smYoEY!<bYL%P8Q>A9gTLIVx{ypr4Ci*H00F&T9gRY#H(>D2=}
zUJZUB;^UV>^rbu<^A0p_zq56^x;WxUSCOSBI{7XkkCwTm5~jg&8FvxTNWeDXn>bK^
zFK1gx!S}7q`PS!3QVid9wT24vgWLvUjC4hfZNy5-Wl<<3Cd~1A>s2DhTHM(#z7dV~
z%k_4`gMyZoRX`VPqcv2;7Gz6rB0oS<rmu@8qL+CZQ$%HrLHe`+tHHENp6U`tRD%9{
zBQJ^YRR^CQIE35;c>~|}Jskq8!Gk%>u!HE4<RQA{nJx`}LH4O`9$#I&Vt&YI*Mus7
z((PzuXVBmTaeCxmmB}6O$-~`3$m1()5;XRp%n7G>G3X>FslqX#vf&kb7w8410_&M!
zK_xg~?&xr%ZYQd(nS%q*+L7x&mbtoz=Wz82mfhf+*Y8m4<5~NX`S`hb(t*x605N<E
zXlog0zY@w~puIl@6YB9q*-ykWO5;>KNCdtj-H|RQd^J)fZRA>Fy+e$8p1$U+a)V^x
zeJvt?Gu>tmLyU2uNn8`m2Q(p^bNA<B6px5q)<(_U{D*eA;+fjO<3ha;JnZX2-I9Ci
zMHmnoLm{!Bswef)WV}~^Pkb^1e447M=y_cid1aJfC8@yXu3!ht1v{&-!!;kp?Duqi
z1_U;zTSKnnYRg@xHgXU37CE%JAFk#nsgH|J!c%<xbp9#Gh%A!`4vE;N_i@1N`HfM;
zZbHfe8;g-f=_hOpNDdnZzXky>id@))$1~#^VOzM_<Y3Z9pEThew~O*fAK$7<i{{!J
zi#WO39EV9GkJy&|UB&bewIy?z0Xn5K$%Q=|p=(CU;10V5B>E^!U+t>-5?ih`!Asot
zVy^j>bzB3Ohvde&9h6Deuy%k5zE_XZIhKWgLbdQHE2gGN8;VzsgikgJRS#m4-<N*#
zv7H{qu*x@__EQt!!UwjR>?f`fVTooNYMeK*OT7b|baRzyt(R!1$}kzPfs%-<V4cV(
z`z3pw>aC#+3D+?FPWFb@`km~a+WNlFLSbxkFzQSQ$(Rai`_lt9`=9CQz9q`W@t93J
zpf)b7RoZl75Uy`nhHntw)VYdvUktFUly;mt>8HRC00lo}$w4{M3=`Ln`=aJCMGn%X
z!o=z108*wc!~D%?1>v*qkmQ5Yj1?4G)%66qC1QLNS^l5@idu63+$<>4a>1pc2ag_=
z_PK*f^RGG5ajubWqvm*dmmB>twW?MZ9a<c8-PfbIgp~ca-sREb{lOA?Md79gt75d`
z`(ft`J<nhLKBUd_h;SPP`14P38W&)qL090w2W>o233I#1M<WnWGMqdH-&debD3@Y8
zuc_R$DIuiWD&1Ob1`;HUmT)FP`co#2+Zxd6wls4a489;#ZK!64JaRpWe~SeQ2#w*D
zuee6%Xo62g8xnuBj0B-kpV%B!l@#^_AW6d+NJRhpU<P}jt`1*jUdQO$p<5aOHnXX(
z><#-g1T3s5DAN#oz>sCE|JK?96~9y(?d3FDuM@G>=j>m5de91e8r*BXBZzG->e_{G
zxPEO@@*~OUoK;GCZl50e%YXaihlwbSJ8?tp!WMHY+M5m%gQT(67Fb=D#tO5F972|0
z_?B=oS3%JuGgEz)galcEy~YQKmR+;^l;8SZPv(ssAGKgt(!#)2+&HkrGe}aBn(Ggu
zkKt9Rnibg~W%_iqch0|8W7@B>OYA@Xyz1GDRB!D=0ho*5`HsA2W6kq3!E>Isw>Z+j
zoLPS_t@n5rh@o4qX$*7nx!${d|5tj*efvppG^wA5@h`VahGbzk?;lNiC0vA1+d0Tm
zmbrCtc&OcJ;u4K3R;UmzW?psNwXbD~u-nwLb3&||ZdzXTa>eTa@3&tVy!*GKFgdO>
zKKjoYYay2Vyb?-?s@pJ3sSh9Uaj4Bk@jJ3evok=MR6l3aNHM?y>YW5Ql#<NbT2A_e
znMdl@Y&TDwNe(=7fam6SBab{Tw(xjp!jbn6;7DS(vxf0EiMcq*4&7q7a~3pXT+~KU
zd8-5{9(~+b(f;U>7Zm~rY(MHJ7uL5Y5X`!#)u%z{A)+4S`zc^t5wX9=q3v}2>#5)T
z9!^JIlGrAL6xfk!c?QX+V@3}*oTM}MhaVrVYo_3l0A4Z_w&pF;zJ58W1&L2Z$}iQT
zcbn%yWK`HF#X(dXG{UZ-!Y1)@jM6~f-Z>L#v#)2yE>L0iT=K4x#?a>E_w|ja2rQ=x
z(n=W&siDVU@?r{t&RH#hxis4hQ?NBjhpR2Ao}y2%0k&J^UBWWfYK(zaw`Ag#qy~=R
znC@%z?O>_`1RDbmioYq34A@g%DK0O&wke}zL<Gt;8O2QxCJKPQf(I5ik_~Q%&`Vm-
zs*PrU1`|DmrL1tQQoTiEipiCvp%kI=n!hqGk>IRxL`h8%8M|1<%5;T&eLF4)CM27y
z7V*quV1kG!t0kyDv>ZC~XZKA1B<Wc9l`F@})pR!lm;jPN#)%%ry)kG&;4g{0BDDeO
zvz6J`apI+mLWCyp7^Gyv64sZfO+90|XVD%7-L_%JXxh6R83z~i5#!WL?s63LBd#FM
zLbJP(<Hbt5RJw8*&Bf_{zOUXDqz;G3Qs65{88GsHPrY5^sf6n~8Dw>B8tw07nx-pK
z@3O8ct3j$C2;q;%8(k*<ObejSc@z(EapTU`R?v0H4N9Yz+>?8M`X(r)EJs(iF{dRy
zbO7<`(R1_EnE)IE%E@(tPvCEgCP4d0uw2(FT_jkjIfWVXSewNfyn=K~Xu>i_v-nIF
zqP#C}sc&BqWbIszUW$Gq!K(M9?o}p>b8`E~?(KS?1OoS=@9#tX(q3|gwi^#Unz}FG
zJ>5spBatwVD*}ovw+UZ5JfT)zYZjUb1Lsp3%bKvE_GIB=oi*!>GM5L&B|?*$9Yefj
zb>{I9%rcID^hU)GB8n>RgTCNsuIO-ANQ5n2Nv4@w2uh#ou`k27v`Im7<xR94uQC02
z2vegZRUk%$Q^9E9CJin_-#;v3Ekg}&3s&}xOK^<`{YXla2Sapxor@DEmnrz-NK!5t
zV~_h*yzJKO2wR1AFv``tkj9koUqHojVhwDgRCq&|F@|cJ_9uF%J<tcKSaMOYbb$`f
zY@jHGP3=)aWA+!UJxZH+O_;nNZ^4W^)>}gbJ-4x{_mA<uy}azMi6_<mu6sI%o^?2Q
z?IP|MK{);nR|hQ{7r4aUs@Le+rO!QIQGgGNXft)IS%z3FxBN;B>UWY9O<0PyG?12J
z>2;agpq^p0n0qTIOEJ#_T_KS^jTT2<qEiPgY~rm4cOB}7q3L9o_q6e|4&7a^h))<%
zQq&WVZ8EPX#t=Ti80XbE_V0tPm7tM2;ZOmdQteTcPuVsaFXbt5!&QWbwYQMBpy1L;
zs~Rkf+|@SO;Lt%$3;!+6CvLjUvO(o?=^hBxS0Hs_?las3qW+p?r~QfT%5KN&3#>GY
zmE3p@Qq0<@BxIln+;0s+1DIGa6Ih9B0&+nIdjVR)&B4ys_~Zr)X;DNo2~}LB%6mf2
zg$c%i08)p>c2ShRhV*Z<2F7<r@-!>_RAHDuG=%Fskc&WYA0ppJ6u1~<xnSM7KCFMY
zC^W;fq1Q#l$-;aZ$(!lMGsPAW-htrA`98!o()HxaPR8`W#gNwYx+lR^rytX2ERW)5
z0F{dKgRQeeIBHEPHPo%+y=vE;4>HhzxAvb?eMU0#2?l^2)`+3*HF;j(S;j~tE~qhA
z@=l`GF>m`pxs$wI>3K)6fk`9t(X9z9kJZU3O9$<vw}jFtOW%}smfN`>?Jm;nq-SGS
zLy`>+=xOx-<#)siWqq7JLs;h0d9~oFSm-kXOKK$?v-_%0WlM7{?p5ZdN<KK#@-Wdp
zED62;Ds3Oz8J(Qrw{d_|9&lc1dZq^#7rIdQyHLEPJgnz@w?lPA+m{*x?NUT8p1+r-
z<~&m;_5h?_h(h-Lldqo6Lnyn?MGxD*Df5Bd43%Qte!)_#UG_d%=?rpt9H3n8#CD*q
zinIo$X`K@Vy@%cHt%o9b$@N=`>d51*EmHLEh|7SsGFB+J_ok?!xSk+v_=(KSJJ`jq
z{tP$na~eJvnviwd`Ng&;I(bA{=HGgyx1G`|xHoeBy`SjXki{X!r)_C!s$Jmy!@VK)
zOQ=<YN%<R&mz^Dx5VFrhBwy#+Mo@|0ug=?z`*2Ci7np*5k^SU-wXfz=6t7Cvd<KgG
zoH8B<!toky8MEpx6yl5X8hDB9FHr<6TtgQ|^)WzOE7`hzvNwr-rP7Cdxqfl<?W4Gd
zK?Z;K{J&5TU-<cS<gF>UlB-RhN)%3q#^@nGwCRPAm!X_Q!e`9NdYu7EjGIBsn4;#v
zb)BsBa-30+nX^T1_5YymO~aZxyS8C0Dk?%$lqd*sgjxjdDnn&RoKX?u2ns?<twM;H
z+X@mPWGf1Y2&r13g+fFo6+%QNWk`T9)LLW+1PDR~TA5)-A?%W&@8W)r=l$`0@AK#V
z_x|w^IF9U{Ywzn?Yn|&{=c%BqW;{As-ac)le?Szv%9Fd#TMSd;UarTA%aadJPT6gY
zSxwz?;9H#3$UtYrg2k$)Ra!mZI@h(vyKD}r49|QbA=W54wJ9zGDOY5N-*XCj8>7Q5
zin4<#zg1Txf0WNVz^5H|ez~|pvsVNw5%G`S(?Ap+9gZDC!n8m`F(hl&NOcL&@z4;7
zO8_gG2EvLh3H3qdtO)Qkiea0fu{_U0Sy2k#6(arc&rJB0a8Sn9k#-XvQ_5TCb1C>^
zOeAA$ABvwig%+GZ7fBN@ml=7~S#ALVbpRSQ*QnX<cYH^HnLeFxB`g{Y$3BNto{!Z1
zR00O=1qH#gF3FtGi$%e+J~D#oaRXHifd7~N(R+JT3;!EGfWaN)gHA>10`16g0~CH|
zz=67XNMjPOs}ayRT66VI_`Q5LApoX~O7oJ`maJYuN&Lhv@B|KF?SLsb_B}J)eUR1)
zPA#uwmAnWRw>aiKw|sCddVPxZDPY1!RT=s<m6Zu9EABN79v20^iQe0(uU#cjY(uau
z9@^DYi303`2DbUUN$d%vE)uq*bSXrvJVJ#9y9t~L2tcPq1#&?hvP5Hy^4}=3RPI5|
zZCC{0p)0CyAcMP@--utf$XyT5P!gOai_@R_4}_$OMg}a)l#6DX(!-11$y=7|E4}}F
z2#XXB$hs8UW(}HuR;d%QgZ6hJy)u5RxB+uzr?6dIjcu13S?=j14#zDD0C?cAoMT2!
zYiW*q5<68kL7W?_Pki!WUq0FBuRCdlW~q<CPVcIb9&#}P^!JA}tDFq|evx4b%6oH+
zZ`00Reu8ZsTryOZ@=fnxS)AuH?!<)@dFKK14<GhiDU#=<eJQNGiTsM6pef5+RgbmL
z1yr2Gnv7~&?~D^&nPC`D$!e~jO}pdE9f}9{VQlEUGQ2z?{COSif^pWhTwy`(PqQz3
zC5_j%8#(-Ye==lWM9|z4!h`+`sq-UUf*Lj`0e0&@ddqd9a@N-(CP6vqiTM`<^WD%C
z_BBOz)|hnJN9A9YSkx($&$%MWX=6Nmr`X!k&#$2UTS<L{A>$F=JMy>|f88{g0ar83
z1(;%IvKTPf)Ov?`SQ+0O@KwjOEgU++%;kx4asu-k-L`Jq%YUVMwjuHj;?TIqSw+ty
zU-rH&pv0Gp1|Lu6#9hVzC?m8Y8uKC8L8aQC;DK{=rrJE6sjgE(N!D!5)%alPgeJBD
zHdgQA*ql85`I$de9AME^y|i#R@?sgkEI+`vPtrSP<|J6?3^eQoVy@$tnq3k3)TN5u
zxB=;X3K|}vF)`eOog19+ktfYIO796)Ofc;Wka|2ip|fDzt}P$fuH2$(4b2(xW#69}
zGt6+Vm+ViycEGNrh|ekPr>33uNsYX63mm*$-B)S!HEqy=#Z7G1Eis3?{!4q06v*i*
zSE~ZG&jj*7jL^WsVW|qXDI=(XZw~aC!G4pbIcv6++2h(3!PlX;BaGz5@y2tC1+O}v
zW`dc`=OdkAEyonpaDV3mdTO?A83}ga*Ki`Z^0%>soYL7k&dnW~<6uAGG03aq+~w$p
zS>Vo~2P@F21MQ(YJI20wFQUQF3k{Kz84)JF*v`Y<_Kxc4Wlc?RwT8LeOpd($TGqKy
zAHH>4EvfY+YysVjK=vaEy-LxTfLeYqoG^%Hnf6y`I92fy=Dpc9t3=@({quXW8HBUS
z$s|RFMR?T&azuIkmlwmPcT-k|tfW1p&bnA-FQbgi#XY`J?$=MGnZu+P#G)7(QdcK<
zSuqg{37Z<rP=BfWBVOUm*3gv|6pSA9VhlR?$ptbalUkw$hA8bJ_gYir*qeU-RSL37
zIyyVB<Rw~`9Q*C|l(l6A{jAU4cZ1944!&NXah~T^4GYyPk-GN?>P26u`%O^7f!F+g
zC8v=d2gY?obLIxrT1Yl!c(=+2Y6hd0IO5_nEsN2RkhF+|Qk!qa9gRp0rjqSuGf&sr
zPL2n5o+9&aU75IaNl)__FfI@{ub6L$YF2wdYU!;0M)z*pVC(94S(>XNmLn!;(tU+?
z!B-6HHzqA(;1mY8N_mFof+dYSRq~rCUPVJ<i|^p6dw#CAra0rqkW;5QewRA*NOV4&
z_;r9^9Ci1T<Av$cgjpa2vOv5KSu)(l5XnDjc6C=@3zgGX_WF8UctMp!+z&JSGOX2P
z82Ta=QAv0|Pm4`cCpv;&z3Flw;6~Xuo}SeM%%ZLlL47H`9=c`DXoZYW%j><=+zbpm
zrs1F(MsWka#u611i;+dta-VErrS$eRvM88u(W!XkC#DyDD+cpZn(wbvGw%lr&9)||
zF+Cy*MhEL_32!I<ON0S96TiSi{G`pFw(k+By0yQOLI|rFe%{LbIF>Q<;7g_b-D<}t
z0lhuoaT@FXSd~~%p6K*c(EB+=Y{n|M`fQ{!dRk=~$^GkBmy7SY*+Rw~_ld!r1-zGV
zQlN*}bK9hN1Z~Eo|L8sVQvdH~+NUI06#<}-WPz-PP~rhX(eQQ{F|WOVytc$g*n}<O
zkE*1e$_h5fvbY-zX2vS$_fm*vZ$!(2R}JF{gtDj_{o2&Iq^_xZVN?3lPa%*<+@8_|
zUd_Yy>(4>PbvGBznFoaFQ+zuhNwJjx$ZUf62H$fLNBf$!9v;+QMD~PW3X{fnA}wp4
zYMiP?Zd+v(gAa_<@6B2hO4$p7i-W($_(O-!KA2v@^w_>b+7ldc%0I-^_nO4wm}m4}
zzYJoV{-^)wpy|)1>x=*&h)H4M;NM`Kn6kp{ntC5K^GlKu5xhwS7|<l8OM8iLqGjA8
z!hjAYC3h6hT3d0e%;?&&t|AB0__kx|F8(7G&Z^W_TKM;=^eYRr_aP?LiKOVEF`8>t
zI{hwXouheT6m{q}xg4`r3>VS!?pZ&yalJu5DgJ%eWQO;WoT|$5GLLXt;@$6XoAi+M
z?uir1G^r|C3$Y&#0Et=a?)3WW9802`hJv-w<g|<fj!|qQKR9_}753(JPtJ$5pBqtz
zJPK|fOU(Ct)*Sd<D(_17wxG+e?yk_U`>&2(Asch{(HWjne+hTDi)F&Rff=e#odsu)
z$cQA?CJECYr8iKP4EtC*iFi{%Xm@<Ic_C(V4*mGc@<?%FRFFaZv^L_PSmwe{E!-2q
z?HS!HOpSE<k$G}~x?S0=GtPk}3><;Drn5TFv=?ACVD7XTb3XqHr3gQxg8`_!AVG8B
z`MJaS)az#K`!JYc^^2TqVRz->n4dVa)w^0Wofy@ZWV1)P_(h7Z1!kb2Ys}#QSyZiM
z1Kdj~v2K+13RSrjONRHLH`f1La|w-4V%o}qtz$k?seyKd$1S&YFBq3TA8MZvlsdRh
z;RM1euVWT_sdnQtKfCQ#jaD+}cIi6wwEo&R0@)A_vub9OF2D-!legAokQEgT>;#U9
z&KOh6BVyg`Z=jz8P-5n+bfw1m8N<%&!bzoF)g_ga3leV|{$^(EnYUqL%|Z8XM#Lu!
z)1UnbO1U}n)CUkb++?6xzfQeO*USOwQ8;T~rB3Vs2)bH-kR1~_+fZP;(;J<=JwqV`
zXS$)Y4Y&j-SqnmoYUeD{yyWltznX2v58(N2Q{wR>X|{P))E7r98zkQM77W0%3na-D
z>>hnpI;=Os`~miTkSj!n6}ruu&{u8DHOqm7;0XI*V0HVTa&d;j>r`W9N<Pnb$LQC+
z*6|8aXqcCa6<;9e;`-;7ysW6HzBzB|x)mau8GJescp8)*9F%r5>iz!UE`C+HQx+dT
z2~8DWs^wy_Tl7<mb3|mHC+KjykTYgUC_7zR(KS&<F6j?W%c$Y!=7ywQ&(aIs=cQ}u
z0;J3e?otk)3rEGvp^4jYVnH?kNNuhA<7>?U?DiljX%6CUfjiw_Nr(+6$5#@BtwtI*
z>;V*C_d3QN8eOT6;;adY9LSYrxYn1OEs7aw>x1beATO5vX1)(hY!5A%!D&nqb;jSp
zrLHr#gZ{}S+-(xU8q0#AXm+h224G#j0d3Cmu`HCXFik4lhd!z|bG|tZS)=9VwnE!1
z)65+mrLOL*=vAM7A5aT@A5YB2OQJ(WUZqN_(gkR~1`p!ILiHL}KdCtRG0<_|anP65
zbcOvIXk~QYcOxq(t1wWTu}qX@;A>f-6EDo8f9RAl*r%0_s+{uc-f2JhK@p!~mZ8gk
zCfqR+dA(@CT%a1Vl)6?9>P0YQ{Vph(z0J2D<*d<}YmT7y^~fTIK_ie;uxmU_@{Zia
zG<@pII9xOhl#pO=YJN!N^$KIQ@tgeLUi$X$33?`^K07Co)?NKVk3~Z28W7Zv*K49%
zwiTd<by|2+F8=Hmp?L6w87ksCGn$+EHt5W3jDvOs=2OdA!8FLmJdU-6N9}t~t4M<g
zyFFcd>9fz_X|=^N0?zkbj_)6H)2&Z#vPPI&;KVMRpS#)&)jq6d_-tcqECt-%j7A>9
zjC&_yT)l6win4_9*j8*o@eoy0vqr>e^n0a0+i!YY8qIQdJqS_qjjg?-g}!j^eueMW
zn+BiZ{V*_vwSda!A{m48=_V<t6`tCwE>3dwfgFvSGOj{NYLu?f_+_1E*wsr<)U?y9
zx8-6xJ<yNO4QVdiKELz*v`Bu%*P^f%qDgkoh_o*ij4q(+MGZcs{%^^OP`Jo9q!12H
z*TAX3jmy=ipj54FO=8-hx0?lh0ahpsp>Hp&-V-ICpzIgB*>cYZlb^?mipnx<yt=Q1
zN82Civ@5N$y)svCWI1)dZ390#q*h;RNculkOCCtwb#PG>7$UM<N`+Tz(^O36dZlF|
zDyRkDKFwB?Qt#V*?{{BXrW+{63kL014=^N%ac-sH&V-|pPcweb`$3k!bTsXL8Zj}j
zX!PNTOEUPiMC<7*^X6+MeHAd&w!s0p1_Qm(g>Bl`Gr0TG^`(TBqtJlatXZQ(;6f&2
znQO=uG)sMU14xEO4YrV)zQ)2sb2*LPKaO&Y3QLVV4wh7j=uciM7rhq*Ib~mc>LJ$#
z>#P0#r+EC?3$6y+GiH$Wo}v#Cn@cI5nuu2xz(f>EsiXJV=vD>h1&qWHK!`)m>tXH*
zg~8_eI_*iYD$%YC&=L#&PnDOlwYRQbg-0}5jD*})2OUcOe6B)I_b42PxgelSNDYjR
zpbpL_klZeAMoVLPDiuA|_@jS_&x-m_`vOCqo@_7N_`3Rm_rN+j&vyIZ!vj(2&o<(|
zf&eO=@Kk2nLq{Q9`xHVb!_C$D&PMDr2z^gAF__kN&no}q;}aF^2HXk^)G^+2?Kn9_
z#a4IIWFpFGe;Y6VJ=~-o(fFPEemys!)czy>zePk?ACS5?E>?*O9JYOS{7fK^Y8Fs&
zf&PL?7t3CCO{=|*bXd@Yq!MxyeHDZ56F2Z_TNe8?3M*flVIR=$xNuKI&X{j#-1ETg
zc=7em4KURAzd0kCd+;_Zd=EZy9^a+@dQ3!3V^)4lSNr&lm|ZWieO#JW7Was&*@&gy
z02315#Qk*JFm1qR;hfPx{>6pLKFWvTwEeSJz3kGzNA-}57CnR}MK94cKehHrbq$o8
zggFE&*i9G!(FsE-3M5($3#t1C8S7KM0lf`DiK8B3y!t=70t>T2p>znIlx8(e<&N!A
zUK4ujzQ#farAd|+?HY=l_Ac=q%{J=rA)dX|t0tvhAs#6#x>OQtzrpiv$7s(x8gba_
z!FqiyMIgT;2m~S0o%G&Q5H1Jhgn#sQKm$I4fQHe>+fjSfMR@Jl82J#k6zvlt%ccqU
zkP`e&z8wQZS#Tw09&uL6kNHa1K~jvP1?3?6SBYJc{F!|zVF4r5E{ubNId{)d)7dm$
zkI#wD8N<YzxS_>2NpwWk4~LFmi6FQY`-)vF)zgFmTB!u^`}!^A=4MYhX;m%Q8}OB2
zux0UVOlQV9*Kw{fr6TY`L7(4%XZC2Z|A_O))rrSnRo*P!zCia20j&qXRJ*QX{5d>J
z<vjZI3zT*TAu?gsyzx+2PJ_KV31LAv?&g4Dr*0|qTnIUuNa*Hdp8<#+*oqYB{K`1J
ze&;*sf1%u&hPi{htiI8CUVj9V!|*s;#z%{i993x!{gx72g9Dy`Epl{gJyoz|*-qNW
zB&8*BB}`;(+)en6qcNeW7HHY#I%7*%zk5uxPC&WMDPS?`&M-NrWY-ho2DZI?)EKZ7
zO@5>BC(CUgPZu-j4W~wZy`KkBg9Zhw`htPt8v2|%x8CRaKYG1RVvy2m4OyW5p`TSp
zc-b|<ZOLdJr>bonYd)Cx9eb`OYOG@=>jr~!Pp9FQHai?W@$>eVZ`T(;G;{V@_WJ^z
z2T}oHpS(!376$lWbdF@~5RT3Yr(&gL*3G>50fV-aqn~CR$V(X{Mf^Pn9FDr}#xrtw
zbXeN;M}gGf3Vf<F{?zuphd-vAoUA2mf~l7ika;HSekYZ%n_Hq(ee*)kvQ{A!S}X`v
z7g2(cXaF)ZY&qAtDbhZEy7g|T^18Z_OOrzv<r(9~jKvYqehl3VN&VY08^b8i#8Bd>
z#A2`3T2J?$c>zwmA#IFXgdA9n_6>yMit#_fNNa*CQ*IR?7c{G|aCysF>KwPQJi;q)
zene?9y(qY1Y;~bHE$_jzb0JPU@4P9gj0^KPj{A$QGYZhc-n~dlfbvOjnRAb_TBpx+
z#PSCzM$D*GIX>QzkT8H35jUJ0ChCi(EeH*VbE#(5iQjfjyBbzy_ztxS#1qqhil@G-
zC@X#4Y1y$b<|ZkB>OR!n<Q{zmyIw%hkdz+40N5pbf)&)ym8U-Y!0?mfZfRC3JP!@@
z{&ny3US-7XX@8RjokiE>$xU&i&1c#jX@+XgyAKcLueI4t7@Sx8L!NRp<_79jtlxC5
z@Z!*UP2{_rlKgsH0<wy~LGvwkE02-dNHK9UkW24IbWk%51pYQc-z$#^_b)pZP;fmx
zz5@de<&ri049l$WYqkT~s;XNi4GZRLy+!BY6C-p&UqCZ&tGc@ewLh_-%?l`mdWYuU
z;EBXGVd%rW5Z?j_Ed%aA&=)oaID?zoMFnZ$h>Pi~&<V#0vz9VjOWIq9=!j!9uJyU%
z8c|V^?FW6$699td-G2Vj^I>CK;0gkjSsO&EbZK!wvGsT^y17BO0eh@=)R<y5gKQJ#
zZtNn+V)4IJ;@ChJc0!x)YXS=f80@CGfSN+vGI2$LKXPffEnr`Eu<sAPBfhq=$sF3E
z%A2ff^LR(G!FYlU!L0bX%2fI6ICzB0c@3@cgf)DNUd*qNvs_~!pNfw_sXFKG&{C2K
zRq}%2Bs@^2H0C@z+ql5fE7Itoxp@_X9yU`}>HYX7>3z(9ZvF!9mH_o)_ZZ4Kb<#Ng
zLbP=}LcNRp6#B^$i^q>!@3B^3geKjVYU#x_T`j6Ag>-Fjnlzz$-;06%59j>{M$^Ov
zQBl|2I@}(uEL)*JZ$)yuK=55_FInzW$LY0EOx1I43XF(r7@vKyS%Z4_YiB^QAk@Cr
zG;QeS3~3q0Y3La7eIF}#jo!Ssvxr-kvBNxr<Xb7q6&G&GRCP#nHm+~J{Woqjz7G1A
z<Q_sTaV08^VY;f#S$_aQEnszf*o6LJ7ik?iKGRBUCiE;z?&zH%uVf?&C3!X6QQZ0?
zvypkl&jv=FMI|5n`@MEny@Z4fPDcx!knk$#jvxfu;Ge*O&j)7M`&eyK3rE~-DZY@n
zZnzxM`e^|k!;_U$wQ3tzn<VSHciGf(mmDX~it000+z#aRog0H<V&%JME+dkN-da*&
zC=Q6lV7E)(->z}bVKtFnb($T!ojWq;l)9+7mJ(<76FMUC&vEiTL4Fnzu(q<3{xMmy
z<e}#~bwPSxs*z(?gQ)u9HwK^1!TUR?y(RdbU<5(<xImW7w?rdqIr^BP5Gms|OP7O?
zq#CF}k|+jV7_bYy{);kSg`lxD#prD8Md(Nxo=z1~RxrJCD6|2Kl8&;By#rBre$AWL
z9i@MV){?kmB$#eq_p-FCxJ;Wwx)@gesywEnp8$N~6RtU??OXm;(0WyVIOrF#!|{%m
z?T-%axv?bzkTRVIXvPwt=@<n9UH~92lwtewG>cK^c>Wq)dw^-Xn};%94%juJp0!NL
zdM@YE6jtfqePYmskEm(hk3+-rG18t=@#Rv_P$$v(dlF>g?3J9Fnujv|IS4*+tF-aZ
z3~3QuBx^j_cM#2QFg4Z#O8}dz#J&~?&$?xM<TV5tUPw3AY;Ple#cClg!~_aJx3Po0
zr2@mZgA)`5rHQmCB&|F_{@eLr-P&?N8|;tP(%|`pn7-8cEx*gVF5KwU@z<~QbUy&c
z6Kd*g0p{4Px`>&mkHOVEG^cWy(J-(ny_aTC&+AQX=HN91IR`Jv@Tpfa)JL!kG^oz(
z5|7LH;d-cfgGyzFXICGxEk#zI8;x`s-Ps$`)L3R=f9!Py91;6@SfG6mqPyRxIt}O-
z1M>hSZ0Klh5}=-(9-NApsxzF02X2jdzF@*qCV<q$`$*%OLd|;YhGN29<1cG9kTM=M
zST5_}rP&)Z9{Qg;(iK=HVxHih8x~9Yi?Zoijn`IoJS|D-Xp!mZUfUzz(t9qPcvU5u
z1noO=um1#{du99NNm8#`?p0M&)9JPR_f%8e>U#=<;QpAFg~cr^H!2=jocT%rZ)-R;
zm$Pa)uMF<Od6rK=&uaCXNMA5l4o(^C-jYi3cZsW*U!dI$u8WmJaT+68jnAOR1Ws;~
zegev@HE#<>%v1%0c;b47-{E4V!QH|ce>%CMLO?Sgw(ct1R-{KN?2pndoq|o0x=+m9
zRmf_hy!s$HCddtOv3qV*QA>|AyZA@t^#ZD6(zy3r@-Om4cTaMrC-tvGyfAf@U!RYS
zJNFNhoFASUU|^yw$}|K^BSb=0-N7Q{hSnmcwah-5VCsgKN4xk{75u&3%~ejf9GkOD
zxVUv@x*OlkqviGV?VgQDHR(UUV_lI|N>IeNINTH5B=AUgYLk$Qocoj#_JobH0$!?G
zBn~kpZkA|5+44*2g&Hq3@9|)tJ0xz%EjJTIr^tbV!(Q~Afzjk^;YDK+P!twl$lFs$
zX<U=^xMe!U+Z!a0v~C&}tZFE%>MGV!%}JPcho>UweJ}Os*5DN8v;v+XjPR3U+zx+_
zQa=YsD8npUG%n#OBV9O`n>0~Y)}NA_9a8R-^11f@!^Z<K?Bg;GZTY#K@T$Hdy__A7
z9i(7ZDe+**X)r#BA_|{|)&yiVYjYn~(kPgZo>O<zVjELq+&mHa)bbIDFZO%0UpcDE
z$fpim8FOE3<Yd_QE-`Upk6qE9Ccqel{^h(FfZAw`gn9}3JpAIpOnN0~ENUD;U&&r`
z9wjB{2$~%zX!ERQz)0?LK7qk*1eK{m%>h}G{T{KIq|Zn6tyxOa)f>d5BI?w&+%Z#p
zIetgoZUP9)y&=5hjfX4f7?k_qB#Ja~N_>E_13~{^W0Z9>pye$De~#AWntdSkAzjK0
z$I?-$u&w6<qxG1$DK?KfunJ`*e4lpgPUZD<+YdgG+{RK#W_DD>HwJmICXoGpJJr(+
zJ2}Qj*9i#N(0Co{TB~!y{Nz(O##HUVcI*Z!s;A(X`<`MC`x+&tcK~;$F?Jqlx2KO^
z>Ik1W`F_fy^HODpomjs0&8vq|QRlwXgB(6)J*yVl>EBCX=k}7Ce22#0pgWsb|H86l
zJC*omq78ViwANErRC^R*yz`w`ChX~3#MME$w6vt$G+*j<({f+;q{eb~zVM3a?@fzS
zF8!nrDI~~c^th^=KnihH>R@*heKD(rvRG#UA~W_}=K5|v0TaseVSEQ2IwQKGxd=X@
zY$0WpU&u*@op2w!A<`QR{_tZ?+-xkyo$OV?r`didmKdEn_6nf42?Dm&USra%G6%KM
zUkSxTp7nS(YTh6L;rU*+ETXa1oRQirSPtfch7G!nFk?iDvs|MT+%Joo0(14l-Qk=~
zp992n0=eV68up>KX(cT;SnT8yo?BD8oA3+hfa1r!)LSq^-O^?{Om1|KPoVK~7<bhJ
z_|)`)ymhr^Cu$wfvJ8NolQ0=JwQ8iYG{E>}dnj|y#puNu-=cLzeWTm*KlE)CXQ&QK
zf_~Ch*{D{*QZrcf{I%Nq$i)_7x5`7C86H=SnV|0)(vo?DxI3)HN<l(+XavYPb!g6j
znwyW(BeB#gsKG2(oK-|~iS3P=ICwR5eS5EDyQ#NIrTkCJq=!<RI$i)24_nMo*(|rO
z1=991mX#l?lW2yWuo9r}>Lm6zH+3=%71CJ3x@t;c@SK<}clEM9AkJ}t8m`(oDt|OG
zlN0`e>Pe5H<p=orhNRuc?<R<F^=#-S&o|ZN6d`?~#ud#Uzoy>hDW6(`MR>JOztNmR
z6Ki$fD7XHxV(+@587UqU9uR9zDBOJ~saxOhyUJPu{?R*L{W|4v(ChDZgDw?J`lo5{
z2`-Z2Sj)8cSX(uA7!K`|2i<o&r~C^tvrM&|9p@m87yH7EO@*cRN0-+4?MHtyBPK-M
z2z{~r(b=&_XPqj7*0i+bn8o-W`SuBJG`pUF9^>>_*Xq`wQ@6u#JrMNFtYb_4op*O2
zWx6GrT}tBuEhk5E;9_vNZBzg{nadq>Zd!Z1e>AN;E9#l_Sir|mqtw41^yvS+AF{m!
zB#_i=EhLpoHLLVJQF5)|3+Ap40kt)`GQVyrDUB?2-$aOyB;T(#%F&Ruzm`TB9(Ldv
zAi$CH<{JN^BsF=5D%{N^!hlS3^$BA3#*R`URDBnRLDxdi;~|_QK6)}T|IkW|Q=dZa
zbufMTKYDsPJf+nrE}ga}<JVJ^5KDZepeDtYapADtRM8cCJO88IJ6m>E-(R4CwsPIo
z`B?am-X3_PV2{^rVp_{#{0qYD9cZsf6F~w9Q4ZB-E)b>H4y;wS#!Yh)foQNTba|#F
zTAJql;AzMzpc<q#J$e?RvxG#-{a9~di?;J~kMFUYgl?mXaTB%CxjsM19<`b7_jij5
zSNhfS)I_HBFDYMcK0D~0LSOoJd*RC6JC00k=KRwCbIKFkpFz51UqkBjkDfLeMz1!3
zn_GUJAK@l{aT|Yyu8m^sfLMT9Vvsy>9n)6EHpSwFK2o#L?YXH!mSy_Uj_E4Hca-?d
zH5KCN3^VC5QFzbzWLyC)Op=!~`z@iHuK8E$I0-aDLe*a(3b%P)$;Z8r@<-^5BeZG!
z#kxN@=*e_<Lz%UZZLF~cnm@01ww7XAeL{{b>9epG8VzzIng9oO+gTV=X&s++HHQ(>
zcN};FPu=E7@e>aH1oa+!$1lfEem+r?b{seK!%fl+fvm5!cS_bhu@MrPy;zhC+ISS)
zG&CMoq7_0g{#gaoZ|p_SXn;AVk-xH{BNv@fl{`HHrM^U)nQ`@oZCm?HL6p|=qkO}|
z$)>@#2f){q^Phz9F6sZ15B`AEh3OVBw`zYD$O;H$6?MohKJFEY6XJ|%6vG)f;YnVv
zYe1#DNVl13gk4bDH>fI)NI&#@UdVZ?XkAN7bqQcEEXW)7WvV1j4?=@-&-VI)#ljJA
zz=CyK{1g~nkhTTW`wR!)bCvI4=#{nIxt<qeDw(=9%_9VhGrt5nWFeN`XgYxJ3U_52
zhA8_PQ9jk7t3Hjs|J|SBC2*m&ZXL+9<$ZB}gTZXsGgd9~vix~qbY6h233*kW;+vGw
z68qum{0PP}?)MMHpYRp04^4(LZ5DM^m7d&@qY??-j_&{Q-THe)PY8crP+td%EWM81
zhp65H7B+Sy)KETK&jyLxIE*IqUpYk&w{F*%%P5JN_NXAvA+IysHIaKzTdFlVQd~;w
z-#hwIH7p$J|KR0XoxI>vt{(DF_y0BI_z|fqCw)re^ayp6Hvj0IBMox(kb<rM-8DwG
z2v7!H^D}82^1-0!tbg=If5sZYT<+9vf@D^+4w?m9cd8)YEyl|XbR6ARZ3eTsy9xEP
z8cXCKJpu<<q;o255i(65Z`n-{#_C0%P_JNhaMczpu~ZMCD&=RC^~^O`QZ_>}SnqMt
z#g(SI9uS6?FkSL{>9I+Flt=7L_lz%nonYs^*@0}T1dLItIWX_Wz7VR2r?%>U!x3GA
z!9m>)I7D-+#<Wkj?1Y?veMO!~4N`uV4?##?$#lgcWb8Yj*<dT9;ntD!D(=tp8wxYG
zD~FOe4Fg|^rv0=R_P5Q@v=<bX1>dLHJu0H5T#vkxp8uw+Xfp53mka)0w40D4MGsT@
zvf%^KV@O{*_@Nwtta1^}(jBG8ajVI4WbJUk`Zp!F8;Y?DO>-9A@s3FsgjYj+oLmC3
zi-yZ9lAw)F%zsXGGOI?7h(l*PPRd4|o)9Ec|MNF`KUF)0+56nmL94y)3K7~h$L4)T
z8+U3pYO~zd;Oc6w)%sfUa{4s~QI3#H5K0Z)9G_qnN0N2(G~bFrk3?B&e7HMB=o~qj
znpK@PS(bN>@o;Ndap$l4bDIEf6hO+7MwmVzxB@yI$QQ`m)?od=`{ywySv3X62WrCk
z`MUZ`QX@Ua@?Ru?=0p1R{m_&OS!?`Ud6I%;f$4iBPt~Qx$4*U`DvgF95Um*{Ti<j@
zbZ1G%e9*2JR@`S&>gPAb<;696x;Ws2q6EyU!}mi?Y8|dGL@~4B7q0Cja9x*|lxL1y
zxIi~*{6H!7pDust`Q_=fkFGXvHzcK<E_;1(<-ZL6*04HB=GNL=5|u2`SKWQn_8nT*
z+)PO#n6T_y<v-g~PQ(j4GzXQLC5oZ;?>e`{Nj!(AL0|Que@(T~zc+k7dLp&wiRGHz
zgm#=}1zu-JKqGWZJrop)^HFRHZB>wy-4-aPys)c`wAT74WclcTJvx*?T>Ew~xU}jZ
zI-6L1LdG?NI<R}YCi;b=7F9adsM4?H_83MPVmv#e*9Ozkg9OaYT(?vk3IN~-hCUco
zBV2~U0)O&Ry$ksISfF%afN3Xlf6Bv*O|1<98`^a)44!xUG<B-_=NStRcy4c^XdxZ%
zLi7BOJ~z>0K>}3=>U>q4g@`Q8(gOT5EOg+8uG_}Qt|zVKZ)7J{8YHlm3+3b$SmI&j
zQOM{lW@Bd%BSv2%Yk`QfC-rE#|6b5VV_7{qUdAt{EiE<t&2i;3>bC@tArZ)?0DTG4
zt;tUk$!5p@R-eIcE0{Wq&d}<WIm|=zDX;+pOsp&K^!Ym9V*-CJ$#PfsbpNKl7Frc&
zoU?4SBK5lk7gm(04|m$`CbiB(X}W5X3~GP$-`(RP*s3Gi2Xw*3DTymYk|ymBWSnNN
z5`Uj*qL_-21l?kKr**NDE;&p30lXEMYj$J*mKY5rM2B8ZyV&$NLa{bH-E)N1Wt!yl
zbNp#N(8XG20GQ8dRx^h{x<HoLL;D#nWvzO^QCK$v21vwgO|z89ZfH767c;KGeqGJ9
zE(8VI0qcjbk^)oK#xW@Eo(9i#wG6~RwM(D{Jqw{-v7d=@J)7%!6DK#GZ<ql&Y;q84
zTe#FIRx=z{7f8KQ(8pK=S7P5*5NeUwfW_Fq=Gb);hVuOT)nGzstoa%(XUnFRV;S`7
zASFc(s*5yV@q-+{4`Y?<+UeUtT-Y5X04K!^S()B^#cLQ2AHPD^LPAgAdcPp`(o|P5
zSEX=&Y9rAN?Y>tX3I|M*Fa4I=Hp|$2hSi)A<=`un|5(N*Xb#a=1dOHK_A<>S7Tl2c
zIQY4K(^Bf&IrqTjxWOmfJRY0XT*t#)hg4?en2*ey43+TI#F-~daxvPJnvZoK!RT_{
z9sUk<EB{S?ANO$sAFs4d;O}IZP&yq78e?3C@n=9b>&ACi2*-YuY9EB#yu>wtJ;SU9
ze@%vHR`=CW^!RI7@1ZFNHYz^#q-Fd~Nc{&TXy)t?%1JmZ@ubq7|EQ30jg0b><m^R^
zlIF^g;S(ciIg+HQyY|&yYqTxX?Nl__>ECCGSulAp&al_v7He-70R^}KDo8y6tp(qF
zEx0l)(;jR@;pMrVX@zET6jo(-N5%a0%Ee_$QGFVpmwg~=$Sx!LIfK5xCbRDyErYn!
zbJI<hAyRh{wvAw^fR3=Cv~IA6CkUX8Ev_Cwd3F)YcCU1uM?4eez0EN`xHeF5;UgMX
zJGP8x!Wi@FVD6&P(e5L0wt;R3!k-U#6^@#hR&9A%L3@dlat(F3MUaMupASxRZ%$x+
zq3e}++|BQp{<}<Ty&v_dBdr*gTq?88A-{kL5<#?bNa$So@t2ECQ6ETDWUfcG;(XeA
zp9(Xp#}2K5R~BeMb@hxuR!uTSLUDcZs^!{j7#lHF<~=~iRK^%vK6P(^Akx_k45#7l
z>#P|Mad#=p`5S3z#Nu4c!$+ByAh%t$jlXsz&GK>hMTPweX}<@86!bTK-$Kvby+FIH
z7hZiCAOLS{Z7Ij+4cjErno?X;C>5QRh0f&G^zD!PXz14~2+knV-Z3uOug9P4Is5ji
zSz*VyKG(H?2M=jq!~G#R77?jCNBVvWEJdyB2y1ylT(AA%wrL}idcuksFT60*6}z2(
z7*T}!G&=j{1gz&PGjGXVdp;_Y^8=skqZMK)OD~AFJ6h~Ln>IJ-RjQ}Eizw`Y=V2AE
zT}khQQ^SZ;%h4qO!5(BlWaR|(BmxieBy#yTB8g!jR|(KD`4G&5GJ<4+n?P~EpC9?e
zc;}B!#c9qA^43A?n5^gndx|sd4(>rG#KaAwV&T5_8SW3i3%y>7Zi(%Saw-8e-}GNt
zVSqrE04X$Q8B%A9T(07=1uH<Y<+j3J2q%%1l2k{x7}4Qgiyk#a;^V6iD_R#|T}-mv
z#^{n79CccP$YPcy)imj8$lO5uMNk!WNp_5~dB)9of*ZHiL41W*Bp7Ko)xJj1Ud>W~
zLmxlE4I!%4@OvfGP0K-K1xQ)N#E>#dmU^EfkDs`jKPEX?At%NAW+p1g7EJdNFVDSV
zrY$kmAc3yIKViK3cur%VPnBpQe5G+uW84qUo)l$XFTQ;gf@|y)@}J=P=k<sms8W4F
zXkyJC+x#eVzt(uE{^jkHbW>}m^4W+sUAx&&VsFv0Rl6n?BHmx+37Ns;MH!|Bdb%iq
z>?bK2K#nIBM@&?xqae^&@C_LvA5d_<p*h@5w8dhCa`%A*9^;)nHG!kRH4^TcSte$W
zu<XQc_@@jW=mXvZxb{W=0G7DB)ArOc(Tv|AI$09-wwCn7KT3y#S}Eqb-*6;wu;;f;
zr66HLN7=e+QZ6lX8HmYf@u$R!(qE>zq_f@QEO$nVdVj|hU2GV-&!+^ecI`_04qvRP
z05_v7PxG6&&tlMqUp1zfZRFh}ncA23MVrnlkOqo5bANUFg!RMG?!%QzUP3r&)dy;M
z_s%UpeDLdOd0tbv^LJ3qXn5sf^R=(u=NEc9co4TBiul{#;-H>L9LbEoRM#e5%Kr+h
zs{0Q$-Jp@Q923g^65Ih!!m4wO#~Ko-s)P{Dy4~yt$)=d$QL`<T0k=b6oTI5Mt<vTs
z+A9u!Puo;Qb#^+m;rb{^95jMA?uej|6qXrigo>qoQ8twz;lw&d+t)=>8aPHwE0lig
zlDNz@=w%$pBC>^~b=5a`J=E)8fAB=Uq6Vz#oSc&MI&_A*1z4P{)z^Fuh8P9jwo4vC
z5Lu;bA)sXY9wq4_8{+Ixvr!1L1cRw>E0lbnxNL;K5QaZhzYHcFn>sJvt~rr|4K~A8
zlL}`gmQP0(XAmFXP}oF={63!kbLqM14<NJ!Kt$a>fo#+s3U1YHz;1%+y=rJFn5aEk
zm4<_Y`hWD+Y1W&un=Byy-FCB(^Nb-|0B;!bD(u$*Y^Ord;7>a(E{(Q1l@^NIXXf}g
zN%y4vFj6S-^K-B1F}R7;nIp14k=`Jcu{M^!p7k3L_o36oPRpx65nt>ke~pq-mqd`y
zCOQaAun4%_m2Q4YBDH!?=pa3TVti%Vf_4}Hx#z*{ebl$y9#HVU?%Wa{6gF#Gx}Xp4
z-UpF=<n$6$&DuED4%RzqNp~GZvZ=cXF|!S$7=}bnHQ5@<oA0>ol=BQFW7mlrJIkO-
z$16P*PR|R+q#^BLT9;-Ij#o#arP1Ec$2sRbL~>D?o)O5jS7_EN)tgvvDKBU12)*e5
zSZ`GycsIz2iQL+JtFVlByAqljYhiq90AE`9P<^nw=!#nq=pi+6vuUF8tQ!}f4_~GF
z=HB_Dsqc7McaW~*(XozNH-XL&iZFvMtUm}9>~UwMzUrX%SC*mXddCd;zKirGG#dSt
z1xHZ)okBNzxfIUI71djnF7L_9dq6GBx#5Op50_>JP|(DtkG98$om{Rwx)vR=S`s_x
zSGU5Tg9IvxFdV0H0c{C0pyPn74s)3{=LwiQY?c!sUXl?s9-5njgvE@+J($1Ti%>^2
zQ#v^7c3>swXTO(SGd1Q1%Bs5^eA*^2PfvIinF_sY${udLsjq;<0Gdd)YRCDZvhS1Z
zRo}v$uVB*KIKCM8Ho#<$Ehfsv@bv}Ry^MdAy^qhwD4wWC1MconK&5z!UKIEI>Wh9X
z($-8|zkq65V)tywQ%}26`%oYo=k>(PdE+gpy`0y?zC|dr1)HgO!t&~^sJcN3z;$yy
z8_%%(NMAT&I<WR-mxFCYBWWGefOq~tA=TGExgdgu$fFE8rl#ylUk7#Bjw`zCYDwD=
zSq*{)uput$mfb=P<ksU;Ftcw3a-{zH^^~<?ka=0!D&w2{2#c`@5PuT#4V6Q;z-a)B
z*p2!m={EEZP%Ewjoh|g#8L^{n(6Ki$L&rpgT!*($(-a_%6Ra~u>SV~vKVbaQOu7~c
zYL)Q7F0AQRAU@dviPNpcJO>G1_%dSFR;Np`1I)t;dJ@r~d&buC`h9<2C$2oyO4Svl
zUi~&KG<K#IV1ErB^aS6ap1NgcVDf8V5ePu7)SN(@@9>vt_R<qU^i#KUpPYhYB%W2C
zzTWNP&WWAo8DZ9qnM6@`+a{6uM0dc3D&_Xbq^_Cno=t6+WujOe*pk%9ahMxkxAgC8
za*FYJ#%CE};uh57p?I&<#!B*?YIBs<kck&n?^iu=Dh`rQAU@cHJk;l0J9kQhP4|1A
zKnG%@B7%#(uI2U~h4i1b81`PE01~fd;CmpD&{Res0PDuIRH_mo{pz{h+)XmQyb1e_
z2`A_(hPrW%lLV@OMW2PUk>nV#5y{xOAMO7YS?WM@4fQ6hkd8*MxuZY4%RgtE^y0i8
zvfIU8V+o;j;V{ReBS?v>Mf&y~>Ha9Xe6ic11xz#-mQ8H->iV-RVaCSD{(Lof5cRbL
z9V@A!a>vX31h`=zm!#6G{;k;~5C2dd*F%WlI!3_kaY9a?foe`0M+&irNU+F_nydLn
z8^@#pTfuB`s`4b%d~Hmc(%CPu+0sBcAjlt`3%WByUOUWM(E%-Y?=;H?wlJ&d84<C%
z+ofgr6;;vB)gxs^(J?mz-O^Vo@zf1;pQ^8-DtHs^nJwRfxxA_(?yu}qZpZx(s}G)g
zdu{m-lZT47l$73h;O$X<>*t1>gjT`?w6_-xq6SS;%tkt10YBhCr<c??BuB=%axT8k
z*E)t7T`;U$uavS&w_S0&aYK>haoUnlrHs2J_c}*W94w(d@s)(=ww7FMpMKY}SMD{@
z^%ztoJm5G5jHb?kG@Qu#K*BETATCb>Y^H31tK>qAPR1y@Ww+JA=XGtF`WV6k>5XVm
zq~@=~_Q||<HdgpD2fl`;pFBFMabOF(VPJbn`{ax*e!sZP%d;u%Cwdmu?0waRyt9&?
zdPnXN*@yG54gTcnv9gdl0*Nl2?}a=5qZbMSJFJcYC)BP&X;Ax;5!EoTKv|w7k1AN}
z=5s;LUUwjf4kRjkMc0+>VM!GKc2@J6{*>4kqm^6ZO3M9-p%Di^i%x=fLEHb7MXm!z
zrL_Dgf*!Z;OB@`UxE3m_z;5I-eZ|$=9mq?_&+WKT;P+ii!BuaDq2SOLl$;ZL?8=@8
z6AeXWp;ufFI5|mbv=iJrCFknsJ8v>=cM~9)+e^m2iWkzctq~KOl_m;&lYM-q6D0Yh
zM3RwTZRRG9{AJq|^O`)JYjc|2kY<{l9c*dU?PmLAOgt;e&2jPOhDIqemU$W)zHy}O
z;!SS%In=2~D)8E;!+im3Pj3v2wt9^2REcZ4HkZ7Kc7igimY_fV&b(?mR`Omld$K~C
z74DZr?1;Lx-p9F(8u^p>$EsF~*ukdqPd5=x>V&m2WlD8l`&38NwWY<yhspt~1BBX)
z{}uCM4cedap)xi<zDQ?{jrl8U-pA7rH}B5@ebk*acHp89ZF_A0@E&n^aB%XsCzb%L
z{nPgU48q7tgcoZwD3cShc6gDuYwr`+GS9$p+@K&n(+-o%(+R6F*9NDLv%8h18JANd
zAC9DT-3m)Q*->Oy$Zg8X?N12P9_#eXA9d>X#ydNSZX!I6W@7-nuUVc#61J%WBtlo+
zB(>0W#?_c3S|P`2Ru9(C3YIf*PcTbLqTtn#P?|_s`5ij(Tr|$~Qktn1@lCviAw=8P
zqVKNep9`tXk9S)tkBUAwUFEkn+<$L<G;$(th|*OSO+K!ty98<7JcjaL^+_=Y+bNat
z>Jdu~Q_CZM$&ktcNO$uaY`r7J>DG)0jNA?=Y<E}$4Are<dUWzP^<a`QVan`4bX<BN
zO%eo3FJ^<3m^NC<-15rzw=X=C3=eEku1R^eKszx8fVFNdWbEQ<TLmZHQeSBw$Mnn@
z^)<L#?aIUU2_^4idBeW*E^xf3W4;Ho^UqV~iXOcfnRPaGNlA~UyJyV&`q{UC-}Y6N
z|1wYlRI<38)k0b@P3Q~K8Ja{~K!w5`{hBW@WuC?ibG=cp=PGXiO1Sa@rL!vTRj0=B
zssC6v4AlAWZIw62Owhyq-q@8@6+|0<8Pu6!SGK4MfFw;g>M1v9kS@Xs<We>qKGwiI
zR0`r}D25E4Fs&lq;ce*zeRucvJkgAo(}Zd7mQO`o>y*t~P9AXEUVnD$z3-Dj?CcPf
zk{$G$g2ikhy)Q`7*es+k9VM)SAkS_=Zy!|_adY<-GHxHig7Si0NC}(JD-Vzt(XYI$
z57u<&Cwg~p6vY;1Zmtozk(>l}c>`uB<iuwUW-cgOVU&Iyum@)w*mr<30c9znNq_?z
zUZbGBN{_fQ|HW@@XAGB41f2adX7YDeFVDkWVPmgD%e-&_?YuB;giz9z!YK;&P01*v
zs(i|2gm>K<v!x(4;w~NEqu!?ps=*L>^gcz(8}%8+BY9lzV6>;_?GxfZQG?qM{?{md
z;;U`wj-Nhw1m>P&BsOPm>l#WV-|L-mtvQJA`o6~B=8&HrZkPo0e$+-LZIJemRc}xZ
zo45|!*^o(~_f9D)?&8V(w!#zNb~7zx{gg)j8gZzdZD7pgyLobPLaEp0^Bwf@$qkjS
zI!o1lKVS6O1B}1h|IL$MG~X*QP_ISmocN2F=2(#W3te;OI@DfB0`P5rx+)CwP$Z_?
zxG#IF>jt2OvH5@!NeqA2m;S8CZmNvD0t~Xc!nwy(lM3o2otO7Ox@gUA5_p|V@otlr
zg(881-l@SgsW;v11C^vbAi(a7c6%y|GIIS!<~~?1RHn|$Z(GAW$X~Bt`GwbX@HBg5
z<YlAJji!BU10(Vr(rCR&`%dG*M)UFfEiaf7yh^=Y?X1MBvbE_@>c2bc58~@CAaW5=
zH(=AA`SDYWBi#t&C<yUkUJ*y5T3kN19xwCL+Rcr26<xNQpl?|9cX`FXjy?bCCQ`zS
z=dae-p~<(hFmgR&R1F+NL&gO#LwA?+j2KaMI?MJj94^?*_9wF|?5yEPr}TV3s^l0u
zXGAPknO*uNkiO_~?Bi<F@|TSZ58Yd!0XPswE?@D+Ckl}|ACm0;ssZLElo_f%!D_RF
zsS)*_qVx+^N%%(g7sJSUQV`FO8tIexr2S)YjOtTgz0MsJrO0=`OD3#3&$u3Kzwb@g
z#}197Jl$)9zIszJc0*=l_j~J6k(-fB>*^)qhK`46iOoV^+uX-Vk8`%sX+c3$`i1qT
z<>hT2>z!2S(|yaoe9(07UIBD`{Gc%TH**U{MTb-v=BhvzVAew2%5Gq7y|1Js=r#@v
zn{ETbMm@-L;hS_eXk2<xh*+%N{#Vzx==+51U~aTUwGZCO#s7W;`RnqeANBt}@dVey
z#x~g3Q{trNutAHY#mz!NVt{dbb+nAux`KI1d0;ly?SOtjaAY#n{xT9Mq3ev(PrY2V
z#U&%}(I9ClhMaqJMBtZXeMZ-6cD?w*GpdhIinAVJ46wN+KDUwKlW41MNvS}${|RpJ
zpj35cemGXK{T**P;WpoZxRx#dMw|UeXnlB}yb)7KjVG#4vbH7}+~`2$TR?y8m4`C&
zkITCEeEZFfo|pL>&vgEzueO6f*whK8w=ses3H7D?XYNp0rMA>HlS&q6z&d%e`ZE`S
zjj!x(^-3^{Mnp(3IhMHGh4~62*8(e>87fD5aVNT&K~J$CXbBF%lO`uIk#h6NHiusd
z^V{4uKBtwZ#osB-F#arLt>Ns`)BPrpFGK0tWdVS1)tN$4I6q+zm#?!XU9|5N3JK^{
zyk@mj=!>i4eK9g%j)D8YBVTNr{I^nubT>wM&JZ>bmvof%YSumdqhlm()4ObtDt58T
zpi@IqB*uW&3`>^#UP*Zu{DjbJmj!aPI&NT8?r7#B^m=Yyh<B<BD?2~LavsFCAGhBa
z74^=h&oyzK?IhQZ`{zT$bn4*4b@GUNr@z1C4Um^Py>GUbh=cbvf+dj}@-2t2^VdR8
zmoDj3u~A?aJ6_!SM|prHirnUZjlC1{*R@S-t%j}V>2G~NR9I;HXVsh6Zy4OJ{LFKn
zReH=v;J6~ytZM<PEOO5dft>Lke+z0IHv|1E7LK&Y4V0|c(9FVIQgR_W8Zv&jPcReQ
zD^0SV_>LC!Wm*5edgxT2$XsGNDWjUcbO0|{oC%CDK=};rPv%&GjBcuNgetgsUdGTq
zxtjEX;n$c6hD7f9hXV^C0_K$aCf(PaUP;EM(|6wRaVpt!gZi)J(f16ythjlhITL^1
zwcIlQV*_h?jrdtn%eSStZo2pJbkYxvKTn*|-~LDQx-AdA^n%(J{MV^zFbAc3-783a
z`70Pepu?%%HG4Yv>#<`vbIo^3$o5w=k1CH!4wR`X6k4#DummlfUFbwpel#m}r(ra{
zE^|ejgTJ#^87<nbJ+z3I^~#Iv-8Dt8bw8yuUWIK$<C_T3tdvyvD)GX3MfYZ*yFO4z
zH46$X%sTo`qNz#S-2$_My$3e7+ZQS-Dogmf2Ib;6+2mIgtItQeW-N%4+qiZg6KY*>
z*aoDw_4a@PWTj-?ZxuRI=u%HuAII3T!^ExF=aY&1UU5z;BiL>Sp8NZT41C!=WB%JD
zJ>2%>Ah{zf$!gsd>+g%(!=g7Ic$wUHq+>kPw$=@%CTTE~5!4_+4@udaRb}kB0TWKM
zbfIPsN@*k*y7|*{_vO?0#$q>rWuF`o(pM8RkUVWNwGc{%#f%ESj&Ohcapy|gab8}C
zh&sV#AiF!m+Hjv{=lP$#n{`V+&qq5U4rDLAP~;|m9k?+Btgiq)$|_&49nE`-!ycVe
z((i-`Oc~iem9H!BDJEx6D-9CLYAF6<M?>Jx)$BXnd1cD((v7_9-{OWI>5SEwHJTz)
zZPsQI9nWfrC_h8#vrqfN%^9sarff>j+m|;+Mb%BDr9?+YNds~9o3sYM#%Ciwtj#DP
zb|xx#W^K`*9Yy1Ieuo~`g(p!RH{d>ZJTWe)1(g!sAYwpuxxZ<M+~sygKH)O=q546>
z_*8h5C+*qMAFF?OlCsp_xpB)6cH`LvdN2?n)-AzofSFZsn`w)xYY`*2m2&zbhV||a
zm~bT<Q;F+4WTG$<Zut7~5sCLN7gv^DI=da}#n|P^pZKjis9PRq^yp&|&`)UwSulGP
zxi1JL-LqVc+Q+-?8l1Z8>kK_DvN@K1K$In-SD$#IaY>iuPQ_d<yHmQ-cfdJ5NI8_a
zC~5r1Xu-Io_*L3Rnyc#)=>6Rb(NjC?mbQYF2*(tmOM43BNCO?$gO$`0RtQ3nTb4%3
z{MZ?itJ=9C0Iwu8v>J{0eoTC3cq1^Qu*}_MRPlafQ;IXg>VbaIcpHFJ5{7;)@a)7+
z#HDCb#^cA;PAS)~XRdFb;D*|U4xSC2;Bw`!&OWJ#*>Wf=ZtGb^(wdcfpDkOU2|?<P
zBHv4UOB$r;56v2r^twveaCE&<zA-j|O7|#-nkY;9gMX}u<y$cd>hW-7!KABa6U*Xc
z8nJ5SE8x6LxSj)DyT3Y^<h<ba5temvSE;&Y@4&RadguS?{QsMS)O8|@K?(pm^)Xrd
zoa?1uU`Xu+g<$+Ms#df%7*dw^Chhc6;v1rA^Msu0uZtLb|F0JN?`Zbv4ihX1J~`Gg
z;+=A0EV9#iz^d!JDy3CLQAp*F2A@NB6WT}`^R1xg3F1=NS3^QqQo_KpHn;FV86}>w
z628KzV@lh5A!(N$3{EZSqn>2=G@cl#SX6i=oNnYlaQH>=PKsZ@-6L*YU{R09;*#8v
zRPjy1DD3F}Ux<uQeXUJKF5z&nT%G^uRYVB2n`QYiwr)$&Q>w^f$da<_kls(Na`FO=
zFK~th-@B6=h_>i#e9@Il9hX0Z5X@Lx`Z45ydNUSLS3*;@%CwvJ!h%Hz^$-3JVT_8*
zi(6i#^ok&iQQ!++O3Y$fpa<d-Ks2oWB+FnpF(*gjTrV2L;d_Dsmey=cJM)el_*9#}
zyK9Dm^NmjFKlngCK|bCVhP)iXr<%fCJ$n=}(pil8UdhU)5x+nKxY?s(=g3Ro<;}vk
zO-=Wcy#z6yeiNkQ#g#A9#HuEh_*`hwgxz;3hCgq4xGtN~|L`WMNvirAT)n66a4LKz
z^3ekMK)gX5*qQ9ma!J9`_<==ef8lJZ_W*DRZWI3naV&Ff+r(s<d3wv<k4Dz}MVBvc
z%+!6F{1hxZXIB)Ik?EuNH%Ng0)BgWVEgfy6Ua#v&>xMy+lT1Txezm(i!@en!S4X-V
zNk|SvQ%Y_`<c;Vymy2?P0k`xz)@b#nBVQo8VmC2fcBV|gKFW`xjZD{g4-EJ_4eP4`
z;lB$T@q6Cf&elHIbbvSk1Mu%kpwXG=41q?sXyYT@vLyAzcgmq-80{KbQO7p|<~|$L
z;Hqs3{ug!c9uIZ;{|`^AQaOw$ikPBO2^}0ZhN%?EN~MU2NfKky)FKmOMua46S!^tm
zoRU)xLpjXEIBeN+p2>(g*mWK=QyT9zGw;2xKELmM|8sxu$NhVJ|NHfa$D;$i=Xzh)
z^*TKde{dYFGdsY<Md2r$8fm?2r5EMvNviOY;xbx24%GKwZ5*=706X_eNDw{W&3%~c
zR*j(eQ9CS!#1*|ro?;V7)uay*@8srvTuPVhE<8G|%vmV-iH4VZJpDVC_Q%-NKQM8z
zHJ=gu^h?-y7lQEr`rbd>2q`yp2Y=lCWcKebx}(NXuklSczIbh3>jbjGoL;q-s4b?(
zaUe(u^rW^*wPrEA;rnc}3lZ>L@}wCfIbH*q-2ttb)#V`JBb<}c+LcklWfn3WM)o&&
zY~qr1=hUbv{stU{N_h3$gcciZ9rkh@3&mU>SX6yrtu*b@*DSKgA_X!ATU|;?Nl3`K
zhJ0AaN6vCO!9J{6U<N*$k7`CP1j@Zb_5Ut-T<#abHrh^1E->gP(y=i|N`|VenHzmb
z37t*3nvcWp{K6_Hcrgq)ixDlhxhooa7qeH_0uL9ETE!ouwv()QfYgwrtY_>~L_yZE
zlVWw4OEF6p<~(`^x$e}z(;`5o*hQtHV}t}VqWUZ_(9n8Cd%GMcq^9m)tfc$hoc6D?
zp%~?wdo8~kE@C2-V^XHV$Wp%Fg)iR31OkuVlgjDNHT~8&=y+8t@vdb4j3k1w$L4&R
zI;nK|m^8b*s{NUU%Yx`-V`jkZ7uHXD4WAb;KG~xx#3;0eV6`#<58B<BCqGX95o(d3
zx>1|S8>N}uT4cY$Z`Aubmom0O#2zyu;n}>Mb6Fvj=Sd&5#;l#oJ@x9%5Zx>m=P{zN
zeK{NM>*oug|6K<@LueIQ(<D)0I4(Iy(Iy}FNTAg&_dxL8aT508E6HX~*C#a4Gdet^
zaDVakhSdk}?s||b=1ds3_D4KjbS}GFIKvy|z$Us0EE&9A(mNN}>3ddnlBUo~h1CGb
z5ZZ0qjsq>K`kpRo98HU|k94?;w<!n$H>#Gx1b#>B%EhI86R(Hd-okqZT0P33OrOD}
za)pCM79XXCBT>Gd$>yD{9nQlgpUt?~I2<7xIEp!sxj}^N#`tBOeWT%%O)Sg%xH??V
zxT#RJvoC4F6uSMKfYRklvUB)`x){URA(FQ@JMxX<pfKMP`#RHYz&gxX?mAS-PmFZG
zuBPEQB|p>f=5<?~3S<k?DXaYr`QGP!49*N$t9^Trm{nO>ZINwr<#c7zmd`t`tY7tD
z=MT=eLRN8dZEDL-)X(XAl?1AtGWMz2e>3bV-p7Y+{Uqe^Pl+2pZMT0|q_yt+1w{P-
zJ<WM{p2r~FZ05X^PH%8vc%=6G&6m3eopfIOVpg=t^p^Meqv~o1n`O`}8F2x!O2^xG
zU9D{sWp%y$<NcxcX;vYIaqZi+k4``8UmFW*dL<9;;z=Tt+i{81x|+AdM2sHuT3<$P
zPX=Q%(06ZQnPah#i|YMvm{s%H1&ASYg=yiu-A@ct>6xch*voUix{u5J=IvttJnRxs
z<@Umt>p$VsL$r^hTm@k;3d3)iSO<>7?_@3LBp4CxfmEeB0^EJ{Ug>$uM-%&`dR=`B
zsnkutTLSb;?zj5zY3d;iy&;7yfZSe--Y{F>D79XGU>UjhZ)WqbN&ogC;gD$Io9f6>
z%u}^66~ER*i!duc-?<6D?!BUhu{VNW%r;$p(xYY~iVO-X7W`WNmp-EWZa{3==~tn;
z-ggdLUA>s}g-h`9-F^M!<G`mI9|a8z|7hT5f^a>*>4y?T6cYe(2)K2Qdw_9ty`aU<
zLf(l}Q+!A9KFD2@{btSh$JD!3B-2j2sFa8bzpLC1`A>}3gNv38e;5yM|K8(y6J``5
z0&4HqfH#u31w`+JZfc-BO~?7Q)OI0X?mBC<6R3JjN!Ml;5>V>E92lSbx$zf9McK^6
z_F=Ru@cM{4UB^5;hF|$0P9ob!m2*#Oh(0D3yW7u75R_G5P0s@)2~ILbZERZbk-LKC
zpy~HqBpwrh0ml`njJm4{!<NU$-cpsGMuvmLw9`Y&Ha$6!etpo2y3RF5GTp&29B6R(
z;mf>_+a>fdp_+ITngP_3FnkGe<_Qbdlqi3ls;$qJ%WRd^{I+cN1orj*{jkBD?tyXF
z4c47rQC~?dXR=q=N8C!<{%VeWlyl(aPqI6eQ>ziM$9L%{iDxeo+UFwj6!bkT*b4bo
zD)xZ-)iMcS;62vNFf6mTqVJZE8G3k1uh&;X40FdXUr!D#?&6@GVuOokxfeJad!CPe
z8Xx!XyBllX_KWIY-U?%QH)tV8`GJrB9{}r?XUJE;i3R}mn?N{NQ8vP>DI+qYbxqO_
zymkOFn6IcJ8F*%k-Dy}!Uz)-|h)XK49$K&{4EbvaeVU;yO>eSI6jv9vy&6)uX=X;f
zob~O_)0oP-vq}jtoxsbz&Re;4S_JNzctCtojGtBgTC1nfyDr2)=AiKM43y~d6`0&H
zc+;d}mwsx-g9N@rqM)qt3m{TB$`nvXU-RuO*k!jBB}r{8WVQ#MJ2gta@eDP9QJmxe
zThW06$|ojd3Iziv&JhIFj)wr^zWU27;MFGXK|y<g1(J&IT!EIdNO2@m5)5+Qbqed)
zyQYs?9VDq|1{r!Gl=ZJA>9sFH58!inI!h7IF3A)CVcF`_pF_c2Pnc;9A52^&rvcro
zOrV9FDT9sY!8mxP4|4;^ohd*TJ~bDI$wz()ht>X|1{0xu7!gJuOTGYYu_mseuw@0N
zgNkr)A_cN~8Eq4!=9Y7Q(3-i1+F|+<N}oS9NOq@|c?k0LT%;#fI(;=5^%_&<)w4Fu
zYAn29_9*6Asu)6JWe3vVe{r{!c`3`Pzipzwj#0zT*ChJJW__6JoMKOWfsy*5;h(r4
zeoVJd{Uc)hI5y<zRC>2)AndaWWC{d;4-#k%E<H7Ayav^jhBjb#ZrbCK%F|{XBqg8h
zXMD19Fu4rnO*#;|n;UbAG>%VwQQ&=J;ilX8ve@RuxvvYiShBpQQ#>=oT_8$$6d+W<
z;AuZNkwANtEAAQB6Vf^`I^>@qg7iJB-S<}x4Y}Cx8qA#lE=u8;iEA7<Z;#suR9X|L
zf;P|7Qp#)V101iF{DQ)u61Px}&EWXkI8;9_gUOc?M=6-qP!&Uu@}6f@%>Yb;E1^Yi
z`$;Qefhaj1+hrcSZze<7QiCM*o#%KTO;WVmR2XH1aMM2g{_~ix8^P*b6hc*k03eDn
zaD(i>X?e4HXTb`|O763$eih$zO1P(UaHrYM_xFBlv^B2J-u_BuF+$_cd(}6s1Ca!`
zkj8&<^z0%(Yq_+I=#lGAyvWPX(hFB_+4m^>hd47Id~<s7phbQ_3}pZ@Sd~?|?5<zC
z!}r*RBS$;6)DY`etMmKUq*ke2u1%~aMud5N9N&;!Fn^|{DN*g!1&#f+`}SVnaY5JM
zx41*6Hm%ag&MBYsC(7>RQ>lL~d}Vau9XMH2#4ie-vF#T{pSkR2w<x2@-ZyS1c(Q!Q
z9S(42`KPy+op-msYHob+$J?x9I|q#Qu2deM-nn=CHei#>VJbHEz?$|@7*KKQgw>T#
zD2FK@Xu6KuGwvIiNZTcPj~ME^6Jo$VCO$B-0wrL@JVt+%RMDw_i7wU65%%dq4=3I)
zJ7<2EfMpSju<oU!bH0AEl4`^qp5&q!DA)_UMfc<z6&IAhIjX~dQn!*fS1IseY8?y{
zX;e2!ailE74w<m<jX>0%%h6wLv`MO474?!-J@@taP=v^itr*4MVFNGbireO&n`0R{
zFTQI?wwq)4Q#FaGy5t2nNrEf{8jxF(gQdw2;B})oNbiJ{*d8gFC=)O@lI*xMbGd6|
zwL~FPYi5~in|j6X{QOVs2D$TaLrd|idQN5af-~JTx#27l<h$|jzz^@Cf>it_^HWO~
zt`5`gG1?-`VD(Z{Crl*QXd7FDrF9P4BTHZcMRt^CBr|s6bED!KfZ7Ww^;|k};~e9l
zq$X+T{0M!tc&LG=j-3Z?D=D!r2{L_N5(4vB&0WWrnJUuNcP@`vD=dgCNgVkT%MqJC
zRX>xLV`BFEqp$2Z<F>(X4z};%fuWiOv<UVX3p1sECASp>XH9n(1m{fcR=yc)vkm+i
za27nlebzpPs&DG(8>R879pW@xJ*qp8mO|BVGyp7j@dGie=SMPHe#?C!Ig^J>YDfz{
zLDVHNPjf`+wS}{}H%rR#O)@YV44P~5=0-LazVzXa&4EUA4ocz&&;?W$588)o$K9va
z^V+HLltWNBAGel#E_u>2RpBaioIjD-m79}l1v=VI?M9mi(6)gB_b9J{1%<tC1`saf
zLGfbG?D_M<bdzUJWiG`)RUmc#E$V|g<6e!wli`Qbl!|fe`}GfFVr{;VuC02QxvjS2
z5B{O7U9PMj>=KUZM#$4}?GxJvBJW!LV;*U4aBhg+Yv$)QIJIsn)1%F;BG78*n8&Wl
z%&{$h9dtD~RQcdZQ5tA8#ruOkdO{l}n9#QdIy2wHtnCrm>ZL8B9g2E|e@XTmtsQCA
zMW2#s8D4`t&$G!ugnGHaDD3EGo5zl20R#$rEt2jsO$1c)pFzauNiJcK0Or~nDfxl*
z7PD62BgqtS-Wsa()Xh>QwZ*k4Ewqa;<6)Ge7RaNrW8@Bc=Y}K9kec{L6tdM?6*RnF
zgEsD$*l6+D<^z3Yqd+=Q^CZ}w?%Tqhp3R?U?b})FrkfM9^XDGpBv+Hj`xQmy>gmN5
zdsl0(vsyKesc-7`(5Cd#8gT8F8C*<qC7rs7ydDB9d*R0{L56n8w}SkNIsYG|Hd(@6
z4KpwK{%r1jUAxTLfn(^#FD`c2zUkwx8@8y(g<zv5w1AhrH7u;SS(%O@e7afOl(=}c
z;T05im#|5!-!L%d?>cF4#G-2Oc(2Bv*>^I~0YNb#TOXZTr4YfRG>KoYI1MH7VvhE~
z8w@3KzRt|VCgrb7RCUO{ou}rwBlOEG#a!BSe{iykn~~;{8kw){9_TKqNwIz`)#>sw
z+RPkWARjA*ZksFYE9RPA9xC!(TmS+z0gN{edVI=+(_&;V6bx<Z*LF}{o55=9L3M3}
zkzBxynOsypU*aXxB$eMM);cWQddgPl`pUB0t&7Od*f8gB%n4w(MpD=O$vwf?#{u(Y
z-p0^Fqaj*AENE@2O{$>ywRDXvEk-Ebh@gPtX4d<=qWDTCyq+$<0Whs4Hyu%~QVh#$
z<vNp(+(vTqXdxhVE<^U+lCe*7xykX1eq9NqCYJ&=Ll58yM;deEBv$o+2GWx4NPyJh
z;VR|R|Bw8oN`3@fEYa5DWQ@coBb_So#B5cprH_!!<)<Lf7~)Sqg0)FDD_?NB;LtkK
zN);9Z3RT<t-(tPbC7c;y><VG?R#Ue13Fk##>^>I7;&o>CKnNFguZUx1DtV^5<oPdR
zV<h|zw-iikw1n5gVA}FE@+j&f5ODqqtJU9@9{~g$Oel3MTp0D1K+}O-WFW7(UrCw-
z0hgt5OiT{opIvF7?2$w%c5obbv<x-$>Ex|nYH`==!f_{^;Qoe|HmOC9^2rL>aVr3P
z6sCcOy;PYcYWUzh=?)m{gqSL4HG?-mM#PPpY<K4A?U+s44wd@ABU4!A8*9_;Gh)&*
zykn5Q_XZztVKOB4w{E(H<XcWIcUx*v`u{~3!qy6^^m<;=47?YbmJ)@SZcFW1Bg1qV
z3OVb)9poB@!QIUt^9sAl{pWli`8uQ*Rec`AKc3T1Q_lIE{9)XG{LIe$w`kD*`gidE
zm_`*P3+#(+3LOFR0S}<LK4r919Kg_V618rgX-Kx#qzh=;_{Qe$<cfBJ#y5rTO7_#3
zZH+mNvrz=%k@%^-JEBt1e~de`!6@en0G`_e-x6XRYIS4=WDl@g(!x;M2K1U2AvA3;
zIx-|qs&<+iiCOv=xVSV5@Vo4wHRewzkz<5m4x-#4AF1QxC<#mOZKS#)R=o)mB1uoN
zs@k6&vam||;H;|jO^sp`1e8fd;`O7bq=NM}-n3PJLw!*}AVHqW-oHpOKPF*yMt9;i
zPSJJY69tFeuYctD80{c^ERH0ZjOd3`m>~dNo*suuw;Xlh+qM&MkiEU^%YX>hC21R)
z2znM~3l#wp-7Hj6M9B~u*nM=NKqwCERZ@Fk!&kbzYl8~!a-8CnbX>90ReW%~YWX2O
z^^a@mQ?n&!kqdX?Fn>^CHRAX9WCLP(1<Zxj0rD$MwVk3p$k^}Xm?NO6<L^XUB$m2X
z0+fjURGBir<kHDCS-(c*GD@h_oi?w!*1c}ddSb277>6+fjX$uU3ATzg{QU6AC{f9z
zlF(6r8X*(;mI#Hx5P74p%H?!@D~G%*Xwn@kyy0k`%xX^SJb!rx<hzftGj=DdYj!2H
zn~U;)y_0#0-M9bDD&?0s?wPEbS>J-h>e*Zh{W-xmb}ADPyy;nuMJ1tJuOgy(L1AfV
zbnIWAzBv3cJJX$TH#kzgk>mBHS6zxeGxHWDoR^1?0$CI5m9-cGaxKZl<&{L7h&GYC
zk?%-)lF*pqv69l9LQ>38s7RP^c5+~8?9$tGF6*bEF!Rbv(d4QfP4PeWuQ>}`YI4EG
zIf{c0=e%X8<ACmHJ@gxZdVyg$D{t~<8s7(fBcjDw3XBl5fiBM!6PcLl8<M8*Masti
zT4~6=>{$XF)gCUAN^&R0g$Vc!#gdExAU|9p><C3l%{u&1Qcj#AK;RdAQtEP_>{-Gk
z_^xd!8TWCU8lAHXTk;&c?DFRPrBvr@@xndTS4h=69s<mZFO%O#TupKuldV%egLfVi
z<ZD}^=5cg!YU{?A&^xQKb3!*TtOhixzPD*HEO_gi5e2jH-E+J?Czb5>aui>Rt7B2C
zc;oB-tgr7^T>=%?8dVAIK4m+Fg`)G4$hQFiv8%v{Ci@xcdg)d~N;uOvVl_S7>cBUT
z>eSaPlwn{0{lI^QJN2|IbR}r;MM2N`T6$|EY5JZKXs$c|N43b42-$eN1>>D2#YUbC
zFAYvcn?0K;Fol3XM}!pFX{m*84yr1xopc}`Qx?MJB-0batu8N4YLACD*}2?rwJn5V
z++*Hc)AjYw3k$nh`z)4kGzlJbS>k;k4NBA1Pn31nq`^rI9vk2Bfkj33gter&`C~qT
zYMG?)E1F+%Z+t5B({_7M5_=e1OCOF@bBlEzC~S6flaHOV99^t7xwQc$A@;;8Ou)B8
zJBbT-Zwqi5Aq*p0xBmt<IaoNl6l=%sAZkPP=cRX;0kJ}dn^;m&tcOqYD`3dCHBzlH
z_wUN3c>|o)F+6e8QKMsE&8;Dw_5#rJh_{1>96<vqamk#}$<(0J?m6y|tZggDH#S8x
z6X<Q>vImeGzbe>MB2v`SKW0U~ggiQP#mV&b<~uV)xnAXw1V`xecj>DAq2H~}e#7v8
zpV%PDh{If=eVSwytdp=)1@5Zw)-rx0UHSMKp3M!q$40vY^)%R6s`*03uI(|H)1PR2
z8EV&EaYs<b7$)AVUcC0?E*KF0^A9++?TXC;gYUvNR44_!Z(X8M2$L?pkKS4gG2HD&
zTThljZk@cfupNQ2T{2!>^|!$vOMbXZ5?T`7UUcNT?hr2|H?r3`sL2@!7U=Mk<Io!=
z^<X7g9?47%g((P|DkK9SFC>v=3YhC5?CJV}2tz%ORQG#bjkMBFT^bD=zPvN<Tr8jZ
zJnrr=(%TzuRrgx;3wX1tsbCR3<d*PzrcPc*?kXsiAe~!&`wQta-isj2l7L1Fi?@{&
zKi^SRRq1p#=V<2Tp&Q>K221i61jAQjUK^+57mdy$zl#2Ywv(ga^&EkR1_^ZRRpn{`
z#T9MzR7h2YdS%_pr)V=FQ-g5l7v9Xo4hio8#hPU5%CU0r?-2N^jUV<JvRJIN6z%p(
znqmttT|1xN4rb5~*=%k%m;3%bSIyr3#~t*B26~cx3;|0ZvG<r)JxlT0v;DuOmXm20
zHy(ePh=6|t8O%%EY6cPl<7OwYJ1)(_+o2$SS}03clMn$ERD+Vr1Z@_w-kud;#(hlc
z%wer0KQcFMBv7@+@m>Yn`frG?jTkqZ1sBcA(ijumJ;N$;6M%fFm$gD`B&U~QO^~j{
zQ$v<%8^~+Ii^)GJpMK*#qG~lfZ9QD#T1pxcmfcqv%0v91D4}Y~e*Ix?=)}IkYIrN@
zhee)uYZ9R-N?@)#h2L55;TniRXW}qvW7K#a=#C04)OtN2FUAJBF?k(IUwa7NIDU8`
zRT{?F;yZ6DJk==2{DKaN%!v(#wY6wm+?aZ#M?)-AX&i^C+xMS{8z=@5H$n{ABjF7i
z&p(m(NH&+INqS|0{fvVO^kA6ca0wWAm<h{LTTSJg$4Qwz@YYw@06YM)cr`;b>Dswz
zuev0&!f>JJrqDE<&<IkP+V4kW`}dAiJQ^jLgg0c#!$^nUI&SG#7zhjvCcR!-fsC8r
zP6y^Pd#yE0T}CX8hay_G6xP?qhaF#8oM{hJKU-P<?(goGcV4JYS^q!0_-6o)GQzi9
z-6P*e8K&s~79s*li;*Ae;oH-;QG<MFo8IxO4hwqX6iz{cV^zPUDWX@~E!MmUopwu)
zsLwg~yWfXR^-edX2&y*@g;wFyfENzDPk{kMKX;WLqjge`IE6<k@b6;m8La$PrFN+{
zY~NJC8d-kqCic)>?~P88VJ4<|gs9becltK}sr5b%^(PV7xA2+kxYTwG#ZGa&Q8JOL
znoj3&dEJg+isWaM5AaLFt>!=_kGA?76$wR)FK&#j3q!e#kUfPC&MXgnT7zEh$HH5W
z*WWb!q_PYO6AymPI!F$f%pg!wyC?Jq$llLg<Oj(_PSGG;X*cFsn~DY9^^A>xtQ6hq
zwS4Z~w&?7{8X#F*TjIYRn`-F%p1nA6YAVI>D8_`zAEEvL9cF=;ewqe+a!yDZ6G})e
zLRG-r`by$;vi1E+8e4=tlAct{B@ayv>c#Y3ZNtL;h%6g@v|hNYX8!6X<G~-(MtV=L
zS^<G;O(K}h5+4BFE%8`0tEWI4wE9vP6o-K)+0Rgd;1Be%5^iY9GidTVJ_3j?uZ5ai
zY|owMMm<2=R)6vh^*vJ_(m&4a(>2NIeG>9nMF_5U8}GNEcigAg*e45;x+J$AES#Az
zfifx;Q9$c2avT6|8b(?Js%DrC9$htSW>$c(v@q>vB(}}6gJRI%iV4{D`H6wMnOj3c
z!ZrLu#5WxDqf@*8MrpD_+f2r6mU<*L;I#ZmmK~1Uq#5^tMz9@sWs>D@Rx4#DHS~IH
z3<<w{;tM{vQ~zeoOT3iFwetR<=NzNqkU>oO<Sor)c%3O9m}r>6>&@j`o9>ej7eZkQ
zoa6&JO!&si&xYfX*-5cvfAc$Tj_u@r&K@|iQt;-56JXSbm-}0B&SQOi#<o)W2t<7Z
z$yBjz3@li?(LQh?pecg|7E;suOB&&T<z`L0SFi(I0OlS)(OcM{(KHW;S(pyoYC>*K
z(zmTw303>1FG(^|tox9m?)d!#02A}p<)|5N`m}1<R-tYC)(D8?fXLgWjE~^`K=M2$
zNlSjfyp}OK-Ls;sNnYypJ7iAihB1&Uhy%JLPFM6Z`oqJ(D2vt^U0PT%Z<qfrd+y7Z
zzYAPX-#>{^yaZ9G2Bh{HM0h=kjIV%#K?dN*C#F+1j3rSiHCAIj-+1ay!n}%cOy{eR
z+~UW1AMALz`uchxH7+VS6}h^uPJaFrJNwT#)KvI)VssO&L!8W53!Rh9w*!>GR>+M7
zua+Pa(DtPv{+lJqi4mY)W38-x9DE~{7+8vLJm(Y^w&CyM*vI1B;B4XbCwH$sj>BXU
zA^UIvC+?eNGUioAy0{f37^~6uqYS!9=H|P8p0x??)bm$i_Saaa)~J4-n>gF{TC$K^
zN#(i~f3V8F?f=f<&x0qeKd?ToQbv%l9k7AKC8+_WO0qvbNVXJU)bRRu?g^NhAzn6I
z0Eh_5b+7cYyPjEsXFp~Uf&v19)os{~{U;tfsfRvziBMmqhzD=87qyO|2hn6=@KSeP
z2Bs*En?|Y~Ehq!ceJqcZWxZzeUz>~^C2RAg!7^;aD@pRh=`Z)2*@;1fNva-}dkKer
zHP$XP_uUg;@>l9n)Tc99CHQFFoYI+Sqr8BkkY?+|f-K-ydNH4oUoz|KPa|$FNy;mo
zl|5$R0|NpH>R#+ScLq)p!-$*Cvh<xF0*vAv@KiAjHL{5msn9ip*X7$ZNygfvi<$aB
zTRgCxr+2MYB715^{z<|}mDcbZ9~aM1e%$?uru_-O;_|>ce>d9@EAscsp<4W2>{EGb
zyQ=I6k+`N<i_2wgrqdhFje%d?zqAuq@2O>}ALy>wcJ8Ep<?SB*m&W^EzBu~>aO1I6
z7z)1MV}US8<YF#Mrjr`{ke8(5h3`cn3Ak4_%o7ayHk0D}gu$I+4c~d+C7HB)rJx*{
zyyRfu>^5Jtt4DU{X<+EJgV+-Qqg(nP6d&~jPC{skM;lHOAv05!82Sl)u#ogS$wdIF
zEdwaPdi>DPg^Xj;qy&7?zlZ>c=9d0t?~}gE1G$TL8>&w4!nQdI;352e+jUQXkw!A8
z3wd&V1p+bw^cW7fBG0C&I78?7=7*0%1i9r5PmcklYW%khRxQ=6A$v%35~){Pcsh`n
zWk<f#i!UPO`LuqIfm8DrUL_ga!=!$DclBCKPY?p`+@k_bd_Utrz0^fOgMKuHH;fYn
z;-rZUz;#9&sf9{puMm?XdQUkTedkV3hMAp_sw#H8V%@AIMahBu4ReS{tz&aO4AtCR
zIAd;MdJn|am@zZ+Gw;Rj!(rx;8kn>6*LBQSZA}js-^<=F?v9@uTx3U*EW&PHc`SI{
z^wenY^E>G$uU!Y?%!iqhv!Koe-I;$8BH;ENPC~ZpYd#ea*OE+SoyyWyKtxmz$$oq(
zWMUhr!C-6Bm~+3Cp>a3j)hIsKIV%WX_R05n#b$a*>)Gxfj2|MPMbM}i`kyu`V#*eJ
z<tNCem6?th#ZF~0MJx2{40EHSCd4@<&Aw+9)tsMJ`Xc+#Z;>?{=06ni@J-8%jne9S
zw_lPl-MRatUO5So>j~fh#Z38x+HU+&RTlURZ1}0>2;be0Q4cX!)W*cxE@eKYZFir+
z1Ha7r?qXNJa<*1WGjShw)F9Z(^dp*%d)L>uj?m5WNcumPGTuD)4MwoRsP-e;1en^&
zq$qgjMBcxMk4AAw=+R^cW+{WX5u{u0vrL6x24pw?d;d`7pB1nNI;rghct4=;N79m3
zHj7zf9`TsfjynGH&Add$)>#lc&=;eC*j=YhZtQ*7OuASpYt~GxnOo7#3yv&?9I+nj
zXMcvm!TxwCND@*ZS8D)jNwHd`tf96)Wq$Dl;@I+y6a;k^JRr~!ioUQ)VM%SD2B;fQ
zN~{L2yoSgHzjKEF9A2gP@vLe;wJt-nRVW@ckO9LHxf@9bU=jLs6<eeqGbdvWoTWRX
zex8YL;D+0Il!YGeo*I;HZ>uj5^7<NIyH-t{c<ny5Jst2^sGX<(MbK@P+j+7su=>-T
z9&jQ{@h`#-0f$oYRLDYAgcN!}X3HI7XisCg91}uQLlfl(LxTCsi9pv#Y+(7|OnHgI
zE}JF1`B*4cC;f}K&{i**s+_PJ7C9awA3HE#OA2>NKHl8YkA*k3bPklHo<}G_7x=$f
zeT-Tp3bL5)G7v*%jrkx?`3V;fZ%m1(!oZuqm9=Mx#*clK+-`8=ZRmaOF-fg0ry98y
zhT3|obiET44@|Oi_a@&T^GIE=SS2q3?MQH?z>h@$?c&;I`!C{m2Lxp^c?Wox60$!8
zT1IO^pf>Q;xec=CSKSd$79@a?%6DqFYSlMCH@C(Nfq8Zs&|BncrU{sOt+rog83zX&
zc=rod7fg0}H|v&_&E+OmH+&(5vN@O1c^(Mm$ba*xwo@_h<1iV0T#rdyHwxMlC5izq
zRtaQuo)<)y0#TPJhDkE;GOa<*!^TfFN*`;`3sMCibVnnpTA@9zl8IzB|I4d$g@5_@
z&xM~P>ewA!l^7}CL>cw6X|io%)_I6*gM)%sbG)OXaH}YL$GBYXSoh%P%b)u!6Q6u9
zl<r>7^*%M3<};pkF%3cah1#x(;g<m<JqD;W8!@(H6$g~RM`E}%55V?}wLc-X?4YVL
z+6dBpvaf;#quo-~<Zl^ka5IiZ(no*fqV1X<ShTta-sUT>o3&}VMbyuFl*Lv7S?oT2
zuzx=A=$K?MZyzU7+cz`uU_A|WSaz~%wCAK>lyDzp%fgK|UmO?9K)#8ExAq(#6Xc`b
z!Tp>(IniaT1UpU>xnocS0G|PzC8<FtW(z=XpMu^9M}~&FaGP3VCXo*&cDoyM-5mC!
zohGSTbB?>&IX~6s#*~Led>f{_Jq`*p|Iqmh_U<|K*F#UYsKh@*&P>AVFyK8?A#jRT
z|5FDI09F)l;jXZ6OoxThTC8I1a~I$e>!Dnh(B=NO@!f`M9o~%X&2NCmi&WQ)x!S#~
zw*=3*^_dj<Zh=0ZZ$5PSB7?C0Er$4A8x1<rD|-z<yO<RH(hTtPA3#!xrx#B1vJalR
znR1Y)I5y1CC!x-cOeLJEV=FF}xk)VFo(t8jz05ngIsZPxvcITpWOpq+rmpTcQ^fa}
zAFl-#GRP54c?*Ua2jGvuP?32RV+fBLX-ZW)*Fyb`%=Kl`lgW=1Izm4xi?LbaSbw|b
z^Nc_6dm%;%(!9a{kTf~?EYD?Ns%|9g+upTh<eXkY$f}jcasdBt{{utEqyXweIz<yS
zb=(zEN}3St!#FxM*_*0IIWXtwzyujx1lY^#7@EU3zq#2n?}3L9l`&gu+0|Bk$epm+
zP=L{nwn6SG@d)+|pqgp_M^B*_UiS_xv_M&m2||97yC}2Kpz*a@3jEKmknH(=4_bdh
z?*f(q9LIx077FW9vXc~-;%E{IdUX5&SWn?m%NW@y^+-WG#XQILSSHitx~CfciIDdU
zeJtFgT0(8VgyHj1T<j#Uc#xXNsB9+xDQ^oVNJC{ZlAQ%o@=nwy*m?ruoa-NR&J$6#
zw@Nrk=HD>)aq0`+-MMuT`7-`%U)7u%u^7)?U^%shbba_mH3h7RErvf6>m=Kz`~}_u
z_Zm4U9}A&&uzQoty^l#U($I&cx5!82E(z7&)<>o}_V^6|OErd_Ui7!@q8D@T9BYEg
zFZoPdYNTx$yz;v7_3LJYkjZ~ZmHfO|3)Vwh`MA{&NQ0WmE;RyLi8v*fld#AzCKYvJ
zHc<sZp*hid_gVwMpw!MHQ;_P0QXy&coZ9jLnXG?$I1)R}&i31_)@C!&JwfPe!p2ee
z17mnq8BxB6+Wy&=_5&sunSfg3Xbg8b2~AUAZGf-muu{-?fk#?7-_Ha$pwKJDLQ$-!
zgpQRQ7IN$7S#GkzgiFcOt#)}pG#6W+S`>#}t!;YkW_AnNX9?|ZQs_<lfPGj6_#Hsd
z-$|Jt<_KJJ+ELmf*nB>Gj;e(fVp7P*gd$W2@PeZz2h<Lmx9;Mn8tOUK4FJ0y@8KJN
z4OzRjIm2N#A>zt_+9ztSke`X8Ojz@#vMQ2!kEUJ|iGz0HdZ=mK-~G2X4$@H%0Xg9t
z@_~L73%3my;(0kFDw>nH1Tof<R?HpsXlI`A&b~_R*8l5{Z>N4@Wz?Qusu~ce6z2C<
z6|~>7#}e8DIKKqGcPHl4d>6HrlL({cw8_36YKrr;PLLI9ld&~(x)a8dJNY%-%kvW(
zpzzJK`0YbuzC)tICdtS`&dQR0CgZjD8SJ_^%<uZ3B{(BO%IuWYWRK@F@Gc2wp;qof
zN@f-87+g|@ALT4z;!!%*VS1MV1mjfAQdOYK$PM)2+kxe?(fMhedd-x=Ahax}F|#W?
zZ2vERq`%!nUL{1OGHYp~U6Kl+a|Pcau$`vI3>H7cs51`Wjn+d&g0L7C=PZ=)c49|A
zWe4dzN*f|vNOfUP4o3P|DGyDZ`WMmvH)HT-Cp%|DCd)34dfkgExywxU`Zxm2Tuj+?
z>y@#imL>Jdk{e+Qf46Sj^X3VAf_iV+^Vp5A#E>1iQ^HHn_dW4ATyg3xDv8&qs?duP
z(nO|Ui|$kw0KYd_2RbM~CVzo@*><`aU=BlRsSb5K0A9^0P|eaUH?~h=Hu?CHe7>2r
z-CXX3w?FI_pBjh=8mKHD@?Kb8wh9027e_rqlWH?X?%<njfvK?Mu2ctLw{HE5z<i9u
z<Py1Ho|+&(24%o%Dw1A!gLO3-(GTlGJ+h#|GRQ%YG5WQODfz|aB_5-x4|0kGA#Vdo
zeu+`n|IJIP6fwJz4^9x~K{r)n13Y~~wPX2U$dj?Tqo_uZDQ)e!Pn|WI0Lfox-VpU4
zR==u%OqKZYQf9$NBmsEzQ*fkl9nME?U<5c!J5@A(6a{%wKcxuH6=rOUeKgrqbS%vR
zBd`Q>$zb`m`73{tjhn+`?;XWNV1$P=K&x)hq16TOI&DkAa5MQC5-5hUV6{Z~afk?S
z01p7Dq6dp8eJiL=-d1=h7mZUTpOZU6Ka%dz-LZoAm&gYP$h!o9OTqSvhASBkLn2sH
z;SkKBv7$fQiA2@Ss!8U7?4o3M1PrEf!d+Bu9{dYY4xp6$uR`#ij`Lw^7J|9~*I?Nt
zeuR;nC31PfobCs(kspDkhY3L%%sX1(k}(^|fP<XQKb;%nq0ADrX@0PdrFy!fSX`I<
zs2^RYNc$}#j|{FmQK7Z=q<FzwehuFk6`fur-%S~^(WlVBC{C#qzokC(0*+dDYSGIe
zweW;|wl_95#@puJor-w4<?&ySvo_@-q?W5mYCSj|v`Y|QoCK>$gFBIWq36bX%Shhs
zM%&nEZ=pTZAa^B-i|hKA%<PqC=IqT3Vp7MN;z!ur!Sy$H?^QoDw`u|CM@PypLxCsR
zXg48lG*FffSP^K4k~#e;X3acpwc~EQokjBVS(_)kx#sTLmpthDL=O;v?KQY7j?_3V
zBbo27+MYc%bxDvme$?^ycOp|U2HK&j&^4JX1M}w-&^w8NV0z&;i1~UQ1?Uk^;XEl=
za1Gx53VJL+Y5Dp<#P;TbmYDEokeSfRo3ZZAP}P#TW5`XkZNP3?joa1Ps=7Jzt8Y<s
zR0C77jU)G&MXh4&xjYM4Sbgcd)z$_y^~*DC%x3t|97f9;nZ#JvD%~VoS<_f6B&?^b
zg?=!DI#+(b(;W1OabUot6@<|-AB$bCx$IlWKX}j%Q-v;WvS$G_P=w+IF^FU`LlBZh
zj|Cbyp`OBG&yZkO&%+yNKYoT5a4?@Rl-zkWv6FTjik0pIlyz<+jUTou;!^40l53T<
zfu9d!{6)zib`(L$fyZf*+kGM+mojPs(9O%>T0cjQP!^aoc0($cA>0dvAJp}N^z|&z
z0dAl@U}x|F@2|zJFCK#oyFOCW&~{yXMl#Jsdj_dTf19A~&t7?0`06zRbOhF=fkV}!
zEW`v-NAo%{fRP8%=PQ^8%tp+8#hOVq+UAhx<@T5wJv>(&KP22WRr_*IAD7XcD&Ywe
zvpz>RR+ZsCLuVGSP$;f`bl&F4?h4tif?<_8F|^l1vCR|ECeA3+7>5*kG<f|zX@czX
z5XGK^^@R@BkbNQE-N}4UmOeGfaYu+<cZx9I#HnuB5ve#-N7WC74Rbt`SsYtO<JYO~
zq(!>TfHki6!C93KzzPQa0T42{_Oi3ev?bIiu><_U8RkPOeK`TvAZ2zvCVBT@)+{Ol
zOFulr1C}G%M~F(X%Sdj$WkpS7>Qq`<-xCry&2w_y{|cY6R3=-O{MsDZJ8Dz-qbf+Q
z*4zLKtbhk;4IUsxQIU~2Kz5R<2Y4G|O)_CP0<#8~ky5)Wc>1AsKdqc>>xEttHAudO
z-U1ZMev1NE-X~~@$-}15(@q^L!mo@~r`(d?T!=#h75V{Cm$-)FYF!r6BsH?j&^@^^
zOB#(!Xw>u9lhD%0meL6F5iD~}@zk<QJtxB4MIcUR3<=c?^4gpY+WdPj)YUN?<ZH)`
z*+PSqY6Kb#YbwBxv>-4gU|44gkY?T>%L{73#QW<*SyiOd^Foi5Ru`$2;-?YulBEj7
zWbw4D3{5)NGB9%7+<5OUfM1zEzdV;)wJe*Vxi-ETGOr8^Y9q`b942Kuz;<}`jXIhj
zy9fmHjwsxe=~tlg3WYj!7r?){$aM5BX(GkYXAWKqQJ>9DY?d4yL0gxTk4T4V9^6nI
zDY@h`AD!RWm>u1=fPB$jGD{1IxfJJk9xQJw$k)2;m_Ru~c58rnJ!3umC!484-esE(
z6fjAXJ{-rLv=rZ|dfOz`r-CqBR(D@}!Rq?{?GI(sXJ50++L}1KhE1>rF_?vc&AsCY
z%7*WWnX-(s6C#|E(pWX4J(E2dt*DB;u0gUlzvezli+oW~b*@1^pMOY!=Po7-=0z4u
zpXR)xa%1_8%{dDkc9Tu!jo0y)`c=}QG)a_jx_wLpG*RD3>V=q&4{n#}*&rAW!6qb=
z&WUx5ksDX?7QXu98w++1S-lfi1<;nYKVx^k>akrMACUkHa;^gOCKB?g1e&&DD-=~p
zph`{=Gcfv*PZjn=Vg*3y+Eb;f?ht-5&BHx6?2z0~Qjn+jw#MjWnU6<g@ct+}vi|{2
zQQh#>R=V4G?YgT71t{|4C&9X1qoCn&yNm^}>HEMqt9BYBzkwf6eE1b@YXoz>;!<WO
zH>VS+OUj*#^<=FOA87l9x6?G($RAt?WxUx&HhW?l(B#6>M@H$w{p{|~D$C)5WW_dt
z{1Pcu(07kMCWcI0M7yM#%ifaG#25aguL5?JRFn6Xa<CcPseiwgS|*4%vS{h)cEN}1
zUIeA_X6f!`<GO+^-BlDlk>)B02~H8{EX2Qu`<e6_(J{F(B*!VUtZ}23mz0mJKfz|?
zL%=Nas-^b4k@*NYsESnama!)fCnd`Ik{H`A`$NuO=0QCd7Exu<b95;0T@z<L$D-hy
zMx5%B0U(haX_A$3fQgAaC~(?0Q$vxP@(HYHqe`*||3i$>jD+c=a((@(re)$p19&S7
zJ1%I$eT4h_$K(X>@siKJG?D#+^5re$bU3^r89Zw-xB~H*u_0LiB(I|UIV-n<l4V<^
zrio~Rgv0OY?37xRO|Fq1;h^=T`{uq1Z>*GN@ZIET_ML~J7*=KoH!L}cY!{}m-tWEs
z?u!pEly8n=irQ>pO`Nj4dP(Fs4{uA9U&bj*-?Jx0+?y@ZO|zVWh>h=LZD=s1Jve^-
z{bW>rC}rrjJUL_eYw({}kbfn^YA3;yZGeivS6yZGB$Od_;X4<~Z6?SEA!;FcFNiQ5
zmKz)EZPOICMZUbyi9=b6u&C;g0=<@IHr*WCwUS;K>e;cPeqbg?|AHF9-UR0tM+O`)
zbq9GUb>JCg7zbT(Gy_@C-lHfxD1pTVDHHtzj%Bp3|67JSl*3v{n|NFUB#HEc7SpOj
zavN!f$8fXJjLa7-BDHkR#{1wqVpPywqQ-}YKcw#3c6I%0L3`#Nwf*3~2qJScwcVOY
z$XE>zJ8qFUXGo1S41QuOb_scFLYJ5A4$s3IfJ#?CDSqfAr>d|Oek<M3MNnUHtO4#C
zHeQ^At73|ASl68wRw*xoR4~|R<G+aF7!s(?wTU1tokku-ferQp6`(4&FhFwJ?#%#Y
zYWrEVlZ4vtXf{m2KwiWo)JDgRv$>@ug83gEb$vdO4-F~~76W!@)J8%ko?$kyAJ$Mf
z*cR*_j_~v9^L^dGDUSW2%lbv&(0`vTK0x(-d4}xDfJ~DWx;a4f?g)4{2b9mKgfuf*
zaE2^VN)%-R3~z{Z`YkQ7SBSOL>HWJEJ~RkG_}KAJA+X&D$ZPLko+*#1j%{Mu{fih=
z*aua7#>hNh44We`MV4CB_CI-ao1ABaT$<vDnXGz%THla%S}q4(5aP~b&+wRQbp?}h
zkINXz2fLeAsYpwa?_+r2RoAbcv_|e^-%%vrY%-&(Pe(z8Mx+UoJ!yr5B1N#Y{=0u;
zYJo*lzo@is;EEK}nV}mBALIxI78Wgt7Uov3>3-KmR&xB}Vrl%q)rW3R$MwAsU*-`1
z4*ySk%m26cA_6e~z|e{CKQT;<1)T>Uzzfs{s97*Ya4_lgb<C>49|me5o8IJo$6vd9
zp2?nePha*Ny1BECkrabB9r|Ww?|%Hf*MoP2SVCBoip%ZQ=eMh_`~%FF>cI{fXXs0&
zz}8t~58+>i<gQIEn)3%%IgYwePPcw~R>`H=<q0#XVNF*}hCi~Aqi~JFueQ~nq7wy{
z8z5YVB((YW9Pa^A6f0UYb=!RD%t|C3;4%9Cm#_h72eYFTTmJ#$Dw^mY>9W^wMC`tQ
z5f_1JOIfu)DaNyHNMu3R*sur+gB+Im?v;7x)`G1TR=ug?7GK2fEd}o{?R@j9`Az-P
zf(g9I739)Y0A5vr*QxO>RYEWlZz^P|&ecmm?|uG(pTSk>q^y%%ZuUryNVD@;N3y&C
z077=|<&aCq7hj*ZE2>G>TU!kUdx=XLd$@S-CnPNE$z|VDT%+H@j$&$7Kz!2e8w)<#
z-?~?Rox(BFl{BUnLqwLNK8T|ZGe(Az#d~EwGb_6H3PX6C$=+pneT&p$d_SNy`GYZ>
zOeV9tnIA}8lb`mx))>}l(?R1ss()Ts1t(A?!Mcghj{#%=hq61_d9YBry9^YIgyX}l
z$8>3Uqox-jxhPhe+1Y^z!uZ7iJ&vze232TCS#}$me*I*~qlIIgns+K7?|j?cx0q_&
z1B!t}{HS%+WX3uY^C%d>3oJK-3!Y&hbxBmXmRy==7)ni(BR}XagZ*GgJu$MqdB{3V
z@6yoC>IkK$+pu}{{zx^06p;l#cm1`rI7~JbC`ujeuLAX00jdG{(0s{nH&TayYD|6<
zp@Ho@JIlUJXf90@eD9a7vPNmnG^bboQl(tXd^TsaPkK_8T6X!fTX4w)DbxQ=ZPI#r
z+Q~(LW2KGtI1Qj(LHnP>wSCYKYl#~GFZnt#-8~YRlE#*nmwu*~0i&A<F1;&l$yT@C
zn*MiN+xVL&yAOPBSC@*i_lzIKbgldc6Lz5nvWa3*4Ew<&KBCo?mOr1dv&bkX_4+EG
zDO`n07q`KM2)TGODTyOXhiU|BVKJRKcYbkld{c!5Iy?+LNvD2k*{+c#M<dBp!t)-x
z*=A>2*v(ZUkTLkjs-564`HyLhOVLvqC4_^sv<+3?#%&zDJsO5R&#;#=bfKTcuI&9@
zi(3;*D@y(LeV$!Oe4W1dF;WNXZcq(w1jJ5&wfZlOE)``fyczVRU@a&>GTA}V>2IK_
z0WoY?MUtG{Y7I0|ft{*lvcln62m>{=G;ZM3zZ7Pp7H01{u#|7dod96M{pM8*l{cyc
zbb9=r9ci0X{;>v$Q+I>8_N45%G866Ym{#H;bO-Y0><DwSP941LXF~M#6d@|fXy-8c
zdxBlj!IAlTy#d-N8vgV8vGh)_=zLysgjwFF;5^q?F}Hw5?lUBaqJjCy6H<&QQf>wj
zI-4DHgeXl?G8nv|3g=hWzA58|a(BOZ9?H`p9}IXov(lYK-Q1O4Rx)?TR%bL+KXyTf
z>(BKtr~i50$*c%Lr2{(B8m8oK4k&R6(!;WK(y+$FA}myamDu(Gv%Pu$-3dR{rFQBw
zlNFXVioL_FhYLe<|GZ^UL@k1%&H)K1%O&$ei&I$h-OF7@#?7zdCt?ZbW1b;}NpTo(
z*YT5cbyEOU%?z_(UIHb%4AMo1VZE@V5@mkntSmP_LzbTWjL<xhN|m|I1UJcVW>n$1
zl$w(9yOh|Z^1xs!ey8o7{-5Gd^YuqjQ!G#<L_j!}uc~5`TrgDuK%Gtlksbz=9-JEb
z+@yosslgjoV}LV7%H{}ZJsxX)q2$ix>^qXrgcVU!g2F`LvEf)nXq_LAC19$PVveT^
zBHDD^>A->*3%bUjR4*q&Rvs)PebA-jm(jE%{eZHU5&b2YYFa}jLh9O3U%+2}!Gl~n
zf#klU3Up|`({W2{Yg6vzF^&ZpB@}Ol&QE#`7B?{SSQJyKX7Vl;KAK%ZxU~w-1Y<Oi
zRP0lz@$(PEnqUkN&v;h~*>`ZsKu7#zOF8N80vS`xbxeE#)q{js<7TTTwaB{d_u!ve
zrRMBHYIx1((JiKI)3%npvrnc#XnTvP;UeH;82&_GGGi6UqZFInV70#;6Zq71A(;w{
zvW(uBJfV_z3cv@;-1)Rsp}2-%(IIX|Jle!O|5v1dxh_<LPh3qGCp82H75OzKwC*1o
zJtBcKWk-?ovsr#VhE8TbR93F?^4hZR?O$5Qw#Oeh*8b5QL4C*+MLiFh&{tMsKw+v$
z3O_Xj{8~d$4VdmKon!qGZfbsJ&I49qW}t4XjA%1CHMnrKsTLS@+jOtnzp#HlKc4-O
zy{<|mOy4rFNoD#WIE_x0(BY#0+-HGAZhe>TibW>SamnC@_8c8)J*k-=tlRQ3#NPn&
z;VWHOT#KTLon|lmXYDi#g*BUSA>7ChosH3c(+|GQ=WV%?cWKxNm>0f*+67A0F6MfG
z?)L5iqg)|T4ayU6(poXV0h*NHUeAs|X@%JJCD9%1y$7t@On`o$$4Eq)x5t~;wZjc#
z^LH1-mD9Q0sjUH7196z&Xpoi4@d0xt|99Rtv@5Y__6}^!#@xs-nBg|IY0~hz^p|)e
z6l5zo^!4~4-SFHF?EJX>i596Ikh@Mbc=~taP_^~=Rl<*jnV#Q+0vT+w=f2>4czn{6
zu?NW~i)N!`S(Xds(v?N`!#+bIYj;PtDoX+Jp|#(kzZb*-1>=iWqBHON&ecABe#jTc
z#rlmkL}~RHBPgI9+g_=!n*s(CJIN~L_-MzhQZSE#dZjg9(%pptWn7;LDB(hb6en9#
zT2eKRWo=t&EF=_$tT?9<?^1Vlb=sZDDV?qTqw$W-D`3|89hmjAq%Rrm15y`I<;LH`
zQ}#;W6rtatA=wG&n~>mV->H8wsXj1Fh*?Xv<Fp3wL5Bj%4Lxuf%c_DryPCo0qG^QI
zb~ml)Jy;4e!wyc<hnM7TzabpW!Oa+~z&xAbNt`jGPUi-#+)YjoqkSrXLg{v?JDgWK
z`e}lc<KL((W|%|1JS=Cis_<cKuy+DDnUd*bz)jS9)0%n=XeSvT$?*VUM56yFCjHRg
z;2sXIR|RE3*vyJotuljesWIQ|A}gigUr>YQqp6)ZRb|4ZAqGdC7cg?8b(Zn&h3`M!
zcP4H;-<lco9sRv)?!N>Zxn?p0kg;h{x_EW|DS{8E)BRQi%h4wOZ*|~t9fwX2?FZ_E
z8Jd1)%x~-uXredi_<30WIdNg{l!sNl<FzQjl>&@&2@M&d2lSdzqsv|1`nw<B7N!}<
z`oNf?fvOG2fxR_&U)2<bs^ac&tLt-oGwUrkG5xVn!==N2Gn2hEhW)Mb8@5j!qRhc+
zDNAA2K#uq&XmbX$0MIu0KCn{YA!h(!F8RLV;4@Ni2N=J7%nW$;J^9(z-%#Oa=>+Zs
zfPUGh=6Cq}X*|T{oEdDW`W~;&)HcNr4z3Fmq+26kP>AqFed;8lCxnr!5bSc2m)xB$
zrOL`*OFE;g7PA5(%UuLaEmD95U5xCBb!g3TeNKq-wa5ssz`N~vHGI=5{}7?~ZgDN0
z6o;ucJp9v8guAWBKtq^g4~UPc2JVMX0|@o0{Z`|L-CxDqV+}DLwe)l|ti752rRR+e
z4UG?fH0P)P7?5Ui@*)BTV&#7m5s+RdugO-S#jw-{I6KPr)E;UB7}~9wB+;3gGb@#p
zgA%Ln&8(o!8SMr8+~h|%osK$bphH&Tp*h#_)#akpf}#7TM&LQ%1IJM!sM~Q8f94M)
z6X53--w6)O`XCP3K;RdO+o~W+rW42kyQ>5ulXIC}Kn9o^f=b}%dnb}lFW(8bX%T!l
zG}%?KkLJ<;%_*|f$6biiatk9E%-dxG6=Ph(e{OXbaH|7&2Xq9$EM0ajC$yT!>~53f
zosfFHUZ$W1Z=!spm;`GcS9iW0HW~3H*xIGH3EXPbp`WK&(QTu&v;ET&IMwFqZNl!X
zD{MZBBSKJfaSFp)0TUTQm0X~y&qZ4#6osthJfdC$wHFZoyi-^*d&e$T{E+MvHc3sT
zXg6|NT_W+T56?$`U?!pgLR7u|W$4d-xRV00=8W&5GtGA%myLm$-GPYzRm%Xu1u9sH
zd=Q~y<yYVlebHh@i9aD4xgaj;DxBBzjV<XeFFIMFa2gPd0Ho;pfS5Krhw}#55c;Nu
z+|6wdC)O>VDA!)|{qoiaU$*u^d&J3P47doOJ;9<$f#v!TUreIHOh6s8l>srjB=TXw
z_@UmD-*+V$^PEhSetZhNm37lf+r!H6c8-tBuvq-c^{3z|M=$wc+X;l#XHV+yQSH94
z>fe$7pZe_<P;UbqPm@VK7EfQX56TkEgVvD>$gd)4st}76ovT;Jw$h014#S+U|FzIH
zAgU>!JF&<;RlQK{W!7?p-<-7f7Zqp`w7L~rt0dtUrRmHUio?p+urbN(ZBEp4q9)0^
z8?{>D0N4!ChIz;Io(7eZ`rJU1ZL!Bcs73D(*6$?$!$x6!Obqsc*y2jgxfaAEsE^c%
zYScj|kPIrEH2{BxHjY3^*V-mBXLsZR$#RqLLW6ya02Gv9(7{{!<pX#l8xzie&cO0f
zRmHJ10deKjbtV{px0g}B%Acvg+q)%A%AJRCpqX%Gi20AQe-*fP14&r;$<`Y1za7By
z6!3rWL<d{JHS4Ml5*g_hD=|!sKu|lkOz494LlObJphx;qU<}rbfYZR?&*n)^W8zSf
z(|z}&r{gF(p%cc^<@8o+`13g+h6>mk?|H5b9JF8Mto~IWr@-g4zV4N`NZxN(V*lcn
zfS1|2*P=*h?&NMq?;mMBCp7EwI~IpI`$7c*r!ArHU&Q2Bcs<D7{CV^~I8FH!{Kc(j
z$eYSMY6$WHrmm)kmWXP=b(C9O16G|;-O(;-iv0z~L)1nqwS1S;zt+BDH;fbv657np
z|6kpGc~nzpyDt<K6%j!M1tE$9Dj*IZmLZWUDn^Kcih__@ix5IgEg(@sHfotfOw|e%
z3K3*b2AL9&DUrDj$P5w$GSq<~k|=~-GW0%t-?{hPv(`QTpLP3(xLh{A+4~)y_xVkg
zcf|zW?e1AZuTlSpGj@_go;-ZiTMb-k33}^e3vrr>gO;6$Fpg6Sw`lzhL%R-rjD~&c
zU0}lrVWNSkM69RvmKJrQ8fGJSrdgl_K?0;kUlQ^bk<v!0o}ftMp1B-H|JxjKiNQG6
zTE<M6iK_P%d)%D$>Z{u~clk~p>8ed$Qr4JYEl%mArC#a>{ZyH%nkO^hVv(;}`!MD-
zUc<<CG)lx;K{IU|F_K}fDak??Uoa~6xuGOxjWbMuKpZi=E0WU-G-4X!%K=j|iXWl+
zHa=?D>3BtD9XrE(jqtWx;KSuV$2hVUpr);(2Ff!JQHVLXq4Wkfjeu>v7TwOa0^R}?
z0pFw~XZM0Ps~hryVc##B(LH~<ck|*8RyNo-q7VCuyf#$EVC&&6eUCKY0h7d4IjAjs
z+B($V6TT=vX?-d|H$+M}3QzTOUgc>SVRB4?r6tMl%kpp2*Nc!?^)6K=)OIx1G1)*e
zdv$J=%%(jx{!nb)PSNP9V8^LA`>AE5nwjDD{8&z`zr&F}I~AUQkBYA?*HBk+5OlAO
zdTALcXFSp!Q1v-=KOa9tnyu0)7@xD1V6gY{?Dlm3SreDPSoK@@qdlx2Pn;cTws*06
zL0S9QcJiw{0dQI-x(UK>@5x0f7AVmHFfkTmAOO0@OI60OV7#5nzojJ01_YKd&ZeT{
zqA5f44>ETv3fJBxkuj;le>7t20!5g`F9gF;&D{0Rdadt)+FttCh(Vuyv6FW<WoB=k
zi-@^Q138ol>+{A9SPz9);hhB*H$d&PT$QKP#WID&73066Lv0K*RgOJI3&r~54%gK(
zTd=!&2IM5E_bAP$X=-s_-Tn)iyQKI0Nk*x^+9t9s#3vvaXC<4uK;4a0rnVA5x24B5
zrV~^TK{~GRmqoTvO+Ue<M!klt-Xqf;20Yh(Y^G!t?E#pWe|6<X?{<%-`Uc%E0_o`n
zLe!r&=kT<&5fhDRsv!b-$AX6=+R_izVvLEp5ve@%i}MCy^7h%YGTWPg_3osH&Tq8N
zF4<$HF8z-RC(=F?3kp4UyLV68Ji05IJ;tl4VsoyULyB`>S`2O<d~aw=O3xxm;5nJG
zThwuFy5mOXDu`2iBq~<3MAdbh3TW9Mg&z~Zc31CcReARYnfZM&9<HBk|KJ){oFIDl
zSt++rI8<RXlNvum(eahezE$o&FDljRx4p%Z(o$PtYqpk+{(?1Rw2tVYc-Tru*7n-r
zbm&L>)L=1<XG>kw`Iy0tvW?h<wWx=Xf@}88dk|#vdd@7b1R$bwO~u<;SDumr)_2>K
z&|L~N=;z@b0pay}A>$pUj2gqRhbW9ckaL&>UKO*cnA&QD7)4-olv|~<%}bO7>8n<_
zYi6T3?|~WrNJtgLB+l*%##+zoNZK83Ed9HS1eLwc&bD@x@3iasZAzZwypW3!-3Jp;
z&tG+i3#cFTaj!e5J2B;#uZf9TM08~{4x_fBoflttA}EPho6G7-X+HkdT#hUfJOjTr
z;h&IAJWH-X%JB%<d@HA-XGZ1c!6loWlk^-0rT3~&^YJe?)QgLu<W7apj$^d5%6*i(
znGFzL+tE@oG$1?#$ruyj28IplDlAFt?2vZj%*ZBHOlMaCvMK~FU|e10v7U%3uFR7M
z7=&Bu8H!c2(TWKlxdC8e){bUR<1_&tJ_Y-}4NGYlB_>RIi+R_Pm5AUz%LF;s5sx$G
zWN0^-+oNr=q$Z-Vtz9(UHC@90i>Ie_xFqhlj?tmJ<j_i*2Yff>HaixjRaPLz@zYFw
zKT?{(=x~EbS3?W!{+9ylUo90}{nVhJdO2*y*CExug4gKuf+t7<{eiLMfDFa9d1Ba@
zM%EJLPn}8~*$*}*?$b19|C}+#Dpdv@LO#f^-iB^qHd{6YY-Tm}pm%ixKJM?Xv(IfO
z3p3Vf0kuJ=1s>KB6$ha-NxdQAbd$n})*)XhJ#?KhEOT&0gJe!knJ)8`MyB#)w5m)<
zL_O1+G5XF6r6Y2J_L#~3fM65zWZ~3OKYm;BSz7jNv-vvN#uA~#sX>6bXTAys9x;D%
zC?kdSdaaDbs#snqvIhEfbAfqP!je^}kNiA3Aj0UP@dta?`z7fT_YZ_K7y6G~t$Yxr
zl_O7;8~Yel?WlRN>}jlTjI+4eTvL_9JC94^YV|QTD6P;(3LHH^8c+t8JM5A!^$z7O
znclTJ*M+0;oKGC0E-l4&DgC=n_TTm%o9ydNcfJVA8y<7$K6BRhsHNL8=&jUZG>`@e
z4nA2Q^*nRw01z^+F9s2!3(HrU8gEak3lr!qXLOrD=3LO8M~?<a@S=`|q;`cp`hL=R
zlgRS-arIh&r_uW2@TgaNO<PR<-d`}Rf$YFZ&jK$LkpwB|>MrcU9)!dj%x@-^TPn9w
zm$>KAv8qh^Ibp{tQl?Aiq2>huW*g8dT6|NJm6ihDD)In#56i8~^x#Qp>kXmGsi_8=
zOvxDw8@~&En9PkDXkLeU$pd(G>w7~bKsZ+~nN?gIJx%m;y>dP}NU=p3SyNG0QIi-{
zS;MK0f6mlx;WTf*=j!Y!!>=s5Q?X&|!{t<=9?T;WI2OfABBVVcL!2(?AUmM{wMGn?
zDf#YTp_49bOAMzF6$iicZLH{2o`h{MpbCDuiB!~`$r^9%c~ME(aJst3K6olzmq6e`
zNf@Iw&(e)o&8N4G1rUc!VURdBlt|yLQ6m`|hzV<c^$d~aNvb*ofb})Xld3$1Q2>3h
ztm^u-i<J-)uU;5Zv#9Xl#Hco?T#{7efS$TFqLVVCMB&t`kdaLkYD=btY;!$C)E+4X
z12LuRrR5nQR59Un*16<rFfRNHUtq+-tlNnQvcXyuHe}cjI7aCTclr+L=Nn=gmA<K%
zz6WJOV2+nfER%^fr6qZHMzni3^{XwIgx(p<l8{bXJY;msmM4omwsnih9)#~WoZcdP
z*7A{wtIG>CReR=PC@ggIbFQFJY#JcPq1arq4@g*L5KUtYSre&nuJBB8)TtFT%yXWh
z(oNysBJ#r}vviA<9h$+8-1NeCgX1-;nAbU<is&bw(Cq0Oih@VX6$@J=`8O{{c<6c7
z_CyRun0b3qSMXyPqahgSm8#o6mU5X#V45;$UL7aycE7h9YTqxv+c)E+gP)D<fAc}%
z0gS|)cOgc<o?ZREy6ncuo(r|H=8HKxmUk|$(E0*C4z}=8E<glZP{$Beo`iCwN%G5m
zkUgTemNCfBPr_O#FQdlNuZ`yGu+}naQhY+4zf99PN)QLJu~Ta%MphD+l1Ch5CuaMN
zGL8G`TQ3Qdqr6Ld?b4&a8)yQ>?py6?icDL*e8v2>^$Gipj9X2G<7FkhX-vl>+WzL6
zB6DZiY&<Slg@4XnlJ416a#19UOtzasFO)2RDYFDjF8za=FYj;7)OYZ8$@ojFd2Tsy
zXZ-f*ef?Y3k?iay+t50)6O9)sdV7_A;!#8NMr-Dl-t%mBDf1XaF4~jZ!~E*;ri&>>
zp?9aexYZdH>tX@B(r3lce#0#Z57%-ukb{WS6<lbjk`jf18)$8KlS7JC=zv@zb-49c
zIhys9ZjZteH6I4Ndp5}?^^o)t`VkZ&@eCm4Mq_@7C^px{x%RUWeOf@&ss2#q?kJ%u
zs;Rsr0Z?dT4MvZ;Z&dmdRk<qYi0Tiu?Yn%X{tbDIDizx$n2>BH@O4COvDm#6nG4Y4
zi)yV+fDAO_zq<uC`KGC5XGg#;$Dl#j3MI%o=?pLNvt3j%6^wCG7Y@YP{{(@J=tf(m
zahoVrX>d;%*<5n{GN7MzyJZtX=IuJzadjLHb(hd7xF$+uW58ZsC!4qoy{n?Tk_1yG
zW?@GL*f<?pfaaqSQhyu1uB-ih@|Wa;>XBo5bqE=BT!%!nk~Ink<vCPOKp50+#Arvb
zlGKa))n+5g{XDcOQnp*6)2Oy#-#Z|?`W8L%QAoWZxybP+G#S@Cy`M)MCYyUEUx_j*
z3XRaNz@OQ-7l>OQl}0*ph3Y;C3~-RPHTn%K%M3U<smxe_eoK@a)6DawQBA~^-T+!W
zrcI7tO{s;Va}AleT)m2ZvS%jRsktULv0rJqyeyv<<=0~w-?DR0vB<?je7L7>v*rv@
z2`gQ#1J%t!J7CfnE6<_?F=Ug0efZm?=kQ7454bC7AI15tdOCFf-f1Uf5$!|Mv2JIA
zpjfvqT52iGj}0#|q<uVecVZu>pUUw+HS5`ZG2#g{lU+sob7)EXG^9M#VnAu+r(SBT
z*u(hq)My23zPgBS86ASS*+%ASS_*CvZ9u3Ur{2;$s+TR}a-Kl2DN%~M89|KaE#ht&
zyW00!y;WvjC5qk_?M1QlD`)qA==sYr?%tw1=4qPmkOqig<gld2S+|k0pj+HUN^e+2
zr<K8~IIb!EEHL-!o5aK<)@r(gEM($HKby9xT4n+M2*U$R#$x*R&T!^RGXM6q^NgBb
z`y!$b1p98UCgpz`bLs34kI{QS0J&a7#ScKCWOKho^%a)tZm1<!Eh>(DND%A&!up1>
zMR{1tc9i^Ll<LE`=B|@Q#&VK3yZF8wI#&9uwg-+{Ki4RdU1v_@j*6HI^dG^3E`&GO
zgYTN@;Ooc(!C7HpFn2u<63XqFw^)m?8|XW`XWBjaqmoFI%go2Lp(eQY<s%DA=D=Xk
z8-HmPZz^-=8X#?A=N(}OrY5VQjQ>d)fPx7;Tq|vWaOEtGZ<#VsT1h>b0!uVGpZ;SV
zN;XbpQ+1kDcZ5;ttVKi0ZL;X6sRh2Y9|jKha1tkHUWCp>pL+B445zG1*t_y@sfKbI
z9wQeHg{xdExWsbTDtDmv5z<3VI89KHU}a@!`jcQ2<W?Yh=P6nx(#?!5fvX6=zAbUe
z86z09qd>aDS{d=Cb@8+r&f~{kTl=Am{ii@vVP-T6$!w_V0V06v2+o59h9-S$UkOf-
z#A7>1T*Gj`fR!IS7h@Vhd^uKtB*i^{m0yx<7j4-{tYF@zZw=a0P+2h7O*`M5YQFYf
zfWIe2$FtL}+6Ksy8jOudLm2SRS(RX2D8j^G^pIfO+m2RNX=J?G*xj}T(N^w3vxKa*
zZsHCTTI&Zn<Z=-bY>MD5YBwbnmMkWv?6Gw1vhy%)bpJlB5zU-9J5aZO;~X|!xKFRE
zLkphBd(5h7WD)A;4kADY!Kf*1$OE8@bC4zvS1R)e+l6C{t+Iu=zwHPaSyv`aL|sMa
zgoV)oGn={01B4YJvaxKWyd~QC_@h#7air4lqgv;V3}VM^WE1iWXiuIJqI;j~PzN`h
z#O_3Gg~_%jE73bwa+QZ`L1J4+C_sDsWk%IP%F>}`od`srx4<n>SlgkyJ@Fhl3%ubU
zyBCK145Cmc)KtA34gn~Hp=-;ifS%@Vd4{Zx&x=*!p0tZ`TC^znuRY3DqA}`pI{pbP
zYsDhf1LcK&tnt8zcLB<1uRABotL(m5yq;=6j$NJ~uBj9t4Y0ffMZ7BGwvM4uIRjjX
z@$&Fq-1&|Kpi=ec3QCNC-?mT;cWyMJ&R<B?Hw$VCz+tzdF_~Ct+YS05(O4bn>8Gn^
zZ&-lfEG~(o<FtRVwsUbf(w*OjA<BXhpW|{fY}Ly(VdzEvByfK~8n_6D`*^^}D6BF+
z7sS(a#|zm#er@ZyJ=wVOxSStKYppL@iyf2y#$Vas9TmZJd5(L)8v?HLpyFp5sP>Dc
z74kM2by7WA5#QD^m;qsv)L5hfX+{>Hc~jof{$Gqw_I{MIn$4`5O>AS7R1t~0t{oaN
zufnb@N)_r}v@ve(KSnzucCRb#vCq{|{{e)Q`CaNHb<QVs-omMYATa}CdK|*~xDV4h
zt6YVVSE(NJ1lgli#6;*4@B~k5rM05>S)JU)sHOa3nKVA3SV@sixOLh4A0g^0?R)K_
zz4!MxUlLKx-c5jk`;5&GQ$AhR9Dl!N$C<uLW)?&gc<3~l?9=`YX)47Da(UBC%uqUX
z?X1Kf|IyfCr}^a_Zn4_x9o>^Sf4D7UtS87GC{NKBu@(!Z#KcYLAL?(7KjN{=h?<*!
zAK6A-m3-7}FB(p=^f4CjO>u0!?J?M#|F&E6o~lE)LRn&Ff)Q&8eU(()#@&HFc}#X-
ztSv=@gj8)Pv@t7e>HG8Rn<M9R^KaN?V5gcR9ov6PNp+9RZOV6<sTewI-I*1)?;+*{
zkhcCGU%~QkM!4pTgHoR;A6GpFA}zxI=-mtFpWa|oGmk?^;BJBx?tq0d-XxIQ^w2zL
zxoIca)i2dy88loGCf2PNg8ys2YoD`m5ozmF@~#%4&Cf59<-TP8<=p(i7cP0ctQf?{
zd?R#QuE8uWbc~FTP<@93>7cww`d5m{_9s^}*UL7?Dh>_PB3+~W)_n92B65g><R(d2
z_E_k3#fca)e|=i(60r$4y;f4Hfv~1pIub{Ap@TA_D6*BBFwhx-tl(~^e<#ato-!Lh
z#gERrM|n(p)yCb}TX#~FG!bn@hy&FA`jlT^Nq!Qc9MF)L-x~4xtFw~z_c_Z!jM_in
zaDEHlntIDIfAXthpHc@^Ws~}^ax0_`VoVd}mgB*DkBdq`c$eRVGYw|gmG+d})k$(6
zc_W{4yU8CrSIfDdb-y`sMYX{eZH1$9DLNqi3PcANsaTxfnEdlVGf|JRmFA6?MaJ1X
z`L*vtRZOp6?B*!bd>8eTyhFvokuM^$$?{Wa$s$tCNXBE5<fkvbwL7$n{&iFMue>DC
z<X*%{Bc>!AA%?$O-U({sy>x6f7^N;#w=q`APBBF|AnWb%X;nbRZd8YE2o@`qK;(VV
z_~i-`L#NAGPvBw@Y-<hnBpzVxZFx0NmD`e>c_(U%_LtguR*<Fw-qoVfF}Vp#X~dM<
zRQ48y&Omk-)+I#0A)2E5Zs+J2rhK-w-RB7R@Kb}s-CvLPSr^UNVBeqc2t-KaE1|Np
z4Td*0)lXrp-$SD*VpT?NzH(JXYX_N337zFFQ0t5Y*w^WQHxNn58ht+CV`H*D^L<v;
zb)!uGFTZEq-1UBgD|ooMXdqrZX>cCvTohDH&L}hN%6U@cr5rUZf5REwZBgmLLFq?%
z_e53CGq&L+*fYmR!1>kIyO%vsT^XDgrTg7n`yWHYXAcT6V-EW;e-0>D5)XE-gSnUn
zy8~tU{k+D0;*!s{lYA@F)9tzPLXqB}+TTn5HfP_^@VFN-z#R$GcP}yjGWK~5|4L*G
zauyIEpmH}XVEdbZh-3mrg+{qp9%WN7@|6DR=uO3;Hs4ch-K$kuNO0t{?&%LVH|}wa
zXd3hN>o`w&?{|bxxkmea(C>G^&O$WQ2YCX%%J^W<{JjR<Uh|gZ7?{wFBSQ*E&Ebkt
zPNhizbnJEf<Ykya$H;pI(Md-)c*0-qwE5)}@6#Tn1{WCrz4i<*j6%Iay%Yqj#^K!F
zT|@r9@0#xoy&HOyY$%^y@v_*kv)z>abBjg!;ah)>pZFDAw6w&{hwH+`d&O?I_bShb
zHr}>7mT0oMjP^L8;G2Sin1TWg_)p7F^F^oj95DVGSf@^1f*%fQ=a8+W(6rbANv-Ug
zm*c8+iPY_(lh_4}H(_sm3E?XU_MG45QXbjo7&y66Y*drKX1nxG3NW2KNlOq3Q5dNQ
zPNm8#2P(_euX$#-QU-o<3!|=2f`Fh+33a=zT0eYyd=vBMjB<+_;cvTQkfaQliRwa}
zl;RN^%Tnrx$#Kuv<!sKgK4=UFN2$D`$id&Id-0g^EVL`PEef$d%)An5{vdCR|MS^*
zb`>_UvG=o|RdKG{X~-e#wl5=NN@?IE|KRruPv%si&I2hEVGFzyY;EY?!a>SYp~0hs
z&y>HuIc(`s-YjswSfu$-?~CLA)#rMrBb<r7oeCB*q_n_{rx|%;Bl^<5I9C2!Kk!mG
zf1dQ{j358ZAm1<Nvb?gg^w3%(xzyr6<G5ZT;81_=JP!0+Yew1wN%oT%PG80^#y<}=
zZR*|Q7~fQ4gnxX-%_%Fz2|pGt!TP-lkBIw#H+6VmR{U^_riu&#+tWi}2;%1&6cn^z
zPi0C<X&aS7rcg~<7IN77+gcW^IFM+#qq%VHrGo4&CyzbEywFyzZF)3j44nlZrM{ko
ze=0pn^+a)oT!YP**P8k<C1&fC2UQPt=Mt}U;rP=%@`-nE-(9K9m!uMFRLUXXvdzy@
zL?EzP=?1XE^<t!fXL}`wlu9jT^gEg-7S;E~7B_|P?RgS2g*AtJ=gET~&LesI_^n0f
zN^5rUTO&LU<lyB)_qJ%yw8H{~K!@3b-P>`3zo0$2;VU7RRAE0G18GQUWK)vv`~FlB
z@7CS1R0lT^F8EnbPG#lYRucY2uw3d=yWzWZ4cyZs8vkfGU{I$a&z?!1Adk1?X=qWX
zWP1ejZN4z>QQ=u%e#3&fye#8Zgm3D8TX8&POE-S#&*@^@qdgmHs!2f}IM1?*GYi3s
z;J5~2#r_X)bp8isC||jTdG5Sr5*$-mjyWl(?uJ}un5rHW+1MLb#+DR^M%WO<xvh@^
zDVP7exQ@+x*3GV-qGaD$Uz6@pni76zQo>)S_gNa_y5L9i#V(7dU9PHdjxby!%+R(s
zJp@$=FQisS$1lp%6vM}h??W`sANqd2XZU{L4RHXBK`J{7_EV|Ur5lgA8f-j%AZcyL
z;{x!h<HJYnho`ms>B~2`x9RfiUa#&!dz}(KYtqMOYytjCSkO6$nVFUw-5Xx8vYir$
z&3)WXT5!9|506A`+`^1-+N(ViCUb0k<&9EgIv%}6(2a9CCdDOLQzvbUMYZMJ^4d<S
z0J?FUjE&bn^nX}lZklxEjwsEN_SeCKfe-a$+VgCwUQ@Mha79HW%mO$1PFPlzRjgxZ
zwXAVmP5b`l){>_`$m;uk^D(|_VfC)V?0#->Hh#BrBFxT<MHX>(`}De5=r%R$+!NSG
zcH#sN<^21}d0AA<Bw2B2{Qn#(xFyPy1!F!h496^NK0GKm1D49sFCVA91Ssjtpy=84
zt%h16U>X**zU)yiu2x_O<RCHyn;)S#Kn(Hr8){ir6FZ4;Fs;RVoL-G>aEq!1Ct`)p
zf@go!6$S<dg{*a@EM2EPKZNL_qA8r<S7PPtkd4h#?knk#YduGCRG%Ox|B1CgcmG*?
zqy5mAi|5{roB*PuOM6-Chlk6dy>KolC=l92_f)Z7Z~FONmgv@VR~(024R!3_kJLUT
zL_}<BPS{vo{ebV6I2vAYq<!P<H?M=WKmhbU8rulD@6`(8yOGm_!|zBAtO`gjC4^Cy
zeI=!SVf5k_**&pk{~dTJ%Ibw(J;AFd;KN|{gGqaxi9KP|h)bq1$bFZ8ds$&V?-WX~
zO@}+}T&#|iRrJ`^?>^LHr*iNBMQM3y&!lzH!^(=XvWm*X5{b3MMs!<;Os0wB7N0+y
z?dEp!*nDt{-r9-^>fj-{Tdzs?V2MDLMRyNc_|;XvF7C~gkX!81m*cZ(S=Z3n_Mjm9
z=EW0+-F!cHi`@+?*J=MPJEq-FEcHlEd7=nswD2$F2az9-)i5Q2if`YJn?%pl`CRtt
z_d!-Wn^7Z!u8<ww7q%C_HgMN%sq1=S*jd|Vv1_-L22wGjfovd3{Z*!i=J%B*cqI!=
zz8>khICM&t1zfU|<U-RkLtfny29B<CcgUl6S=qOBrB(O5doy*MSiAU^z0|b5y~FQ}
z!Fn-R>u(eIj9Z`h2cXmlgH7H)ubVySJ1Z!11kCC@d3|kfct()?H;5gqw$a}`GIp0F
zHz3V=rDV2GhK>x1$iYW6{&lq9R`)uZ--Hi|v{kNr&ApRb-OKxtWk^m-q+q*})tnsV
zCROFVBYjiu3F*b&M?Li1JaETY(ZgwDCcZ=X6+IF<z&kf%aCb@;f8u`!-)R_UFdSZN
zXGbg#%&S<bV|uJ>{Ht=U)NuEBS!vSNCmy;j&0eG1x98lv^61K$O+P)y4A^KOn@7tn
z<EKp#)X7`DG}va^!$LD(-3tET3uEFvDiTgl@IT%_zK`tZ)b99oOJ(0o+`vqKpZ%80
z0U^4@As;?px&4S1sG%<ZkH>N-nD17lT)Q4hl^im~%A<<17YGGGY@<D8_Dnewvc6tD
zj=t4qkWQ^~SG?-54C1psvZB84)Sh_-nV~1)f7?-725JDoBX};yY<3?lXZNs&o#aER
zLTft}wsFK1Z>nR8yRCMqVwab*t6<VmY`(v}*G4i=^NBUs+jacp2`v$9+yhW$1OC;E
zK`o)trY9G{OAGNMk6=`PaMuM7;B=LQLZos3Q)sE&dx$iilZqyqU#A5YsW+APWOJc;
zqc@Q{7jU2aD5Q#O0!?pKNxoZ1O;Kc(qi1|rZVcnuJWqls^%|YCz?62VO$khvYNa7i
zA^t!6LrnpZZK*Wd3a`c!l?f=s=QVpcQa^cQ)j)V{J?6L!H#sXnjA)T<RwPETZg0&Y
z$ohf6YtJXb=wtl4%Ko&eSmJ^H>6AMWX7jG%>13NDy;^^_r<~b**FEpf`xKumfhj(u
zjVbP{D_(3Uv;I7ZcPg`f?LMD}xC_|cpin0a666ojYQ<_sC$fx3;$3s(W@OX7Q12pQ
zNaos_{_rG^sDm|?{cIbbM((E0nT&1Hg*9DD51|LRIejRUpP7s}ZEf$Dlwo|LJAxL<
zvD&BisaCxK`mNVf{?X`Kp^8JKd^-IfjZeQn)O$`CLgfAE5PV-PRkrgP#ZfxrnY2On
z@n*4I#%33*hO4GP<p@{<ut_K-oT!UN5o)>p_F+JAwBw$9!+ScxA8u;jm^#-YHr%55
z#Z4pni9$;~iow97{sV&nQCcu>uzRWzk)|@2k+F+qdhq}S&dM-1=s|+|t5Zh+YgtCS
z`SR7VF8fc`KlX>~=}jCDK!chC)())ac7=AkoC)2;E3em3jX-DZId8sCZ~%9XrQE~9
z;N~`O(fU#$kA`pdhQVi5<V)&hQF4X!O}=!r1st`UeaXJW7Jp0|c1aW~p0Nc~{Tb$;
zJKP*GvGyfP$Z2k=@s>b?B<@e$FT<ukIe&n|Jk9It7JK<g^?Lv238tVl*h(*bWk5Gl
z#TRED{wsO=dVoX+^R8tqE$XsqlUTY`r&#Q7wY(mTe{A4pVRTSKS)qbEjG$t)k~Qh3
zIIQj@a<rS0_X|sIJ40v~*`zIz`)x3oo~**=3wS0dgmrDN7X2k#Un)ISEAWVN?PX_#
zHLEQ^cd2v$miyr^Gf9R1hmQ7Agypw;wPscxgZmX15#&Wy8uwowU5xv|f3xWGn-6?l
z9|C$_R_UkOMH14od#%s+A;I-{{M|1vhA&d?d4c7>dGH;o_0!_lzwXukU_1$BE2!Km
zV5pg+t8l@XB-YYA)K8{IR6Vx;9jGy^BWR1DeZLQ&eThoaqH5sk4bfgMcGeUT;^r!o
zi-tnXcguoONjc;_nQLkG6OTW31}e7yCfC5^syDzGYY{=d$yEGIu`!HGu?9V&IMqGH
zp1>KRpe<}&LU$DorN1Jri}&q1FLP*{GN463TD7~;=avZAiF}V&-^5jsBKt=IYh#e@
zKC=V988e@Aqqjb*@7?~{w#0H<!iAdJ2OppPmJ?Ezb@z<f%hrOV+QnJ>mTG#%fOc7s
zj**@v4gu0dl}@!GOSqb!cnj#zooXAgqb8(gu14Dh9flLqV1|8l=QKe#gfGAL7&UF<
zE$2LY-#?853rs?9C?}b4y8DsG@;A}DnmlV+Ue9<M3R`iT(u@Gl&H|m4f+<D=1^=8_
zPK8uJ5%U-O60M0$EA)zVNJMAs>S62Y55CHsC<_jwiN(a*^xa@PNOCYvJDchV(LIN%
zD(lk7`sBx(IFlNfb|^nI6+DF&oNLX*s#N95SMsZ!ybHM4fVHYjhK15bdb>nq<K3`l
zbd9sN*x%1r8o^7lm*88js^fD)czTS@N_&SIH^63R>cg6eGB3XgelAB|7D*vJX~<~{
z%;U#I@G2vfYx807nyM-!2r*~89>GeH$#&_~bK=T%<vn$z0{SM9pD$`^N#n&!E{eI&
zq;Gq%>*#)HQqJ44w2aqAOypAjr^_`0ztfM(`X(RU9ow#fV>$k({9}%RhC%-xI-w1o
z&YA+;V$?$M94WVK#+NJ&Ho17i_O^3`v`uu2u|tNFQ)+zM3Ter7T^X;zT;Gw?d_12&
zx=)&U<J^Xl2j;AmyHhlj3Rv4<ZxqT4g%WpBvb3!cJl)wa!7{a_NF!7KEUm3cZHVp`
zbO8Sxs>fTooOD8^>|kw_xWt5hP^R0Tl{XgYQ$tC<f4eF_*kVL3A{U#Fqb-puv_E}}
zLj<3B=+-yagu{CKdl@E-R_;z-w_Tx`<JT6(W>`>Har(5|qBkRZH}!M=RNBbCHkq4x
z_#CIT_endIPT8a%L}#!qd1qY97icJZRj@GG^AFh&Cn7wzO&m4C2#HO@MEQmO3o@TZ
zT}#2o8}>FBSLtl>c6*i{In{h;O;VfM5@i-nm^2Rn0l6{V1AqFNROFiNm*Z&Q@+N2Y
zAtwK7q;lRkVBzkvp2^Usj1}r;eoK39Msaa#@nhvqbkHcPfIwa9w*67G`8|aj>FSBd
z)bb5yhc`dSBk`|#SQXz-&M3V(tbyCkqu@~MSxLU)XLT2*VnAXevpNRhwTOxO<=khc
zX!M$+USr8ZLN4miV7{}Peq1=Zy6R?ZYI4M=`NW+3NdZ~CLR#FPOA!(E$LB2XKjiz4
z&AG+0=YENNh<O4pX>?TTg?=Bm6|19e8t`&6yj1@h`nFuhqS@sMtMVUEcqFT+z?2`B
z-PMVrty|vgw#=PlsP*NQ94>{|->CU4cD|%g8Y!2_JaeT(jhHnIO}|emxFyq6P1<HW
zF`jGG6P{jwWNymC#4;&@XFQSCQkC$OQ+(0mXOGAhllvd+{eGX0DmLF@ZP2MTga7YN
zyhh^CSGh{{kSEAtVe(bkNbnGE2}o!CjAQNKUm`b+Xi2|<bp&^*^k8gs(FFJrI6DPJ
zJtn8ATJBB&UwCt^{p?L=cag`>WYy&_mVI&Q%hU7UYS0P)Tk|*H<eLLFz=A>eVuj#`
zE5+NcrMt>fC&3XQ`tmDLUhJb_Ko1;R5S@^KjZy}8Wc9PY?ao_^oIr`h(2+4%g*4L4
z)QatY@CixQb`y_hYMcAnk`r#{Ku<C-Oi(WeO!0aeajYgbxuntdE$d))U3m?=s^6|7
z4rlULFZ;>ob$3^DY_Kjwd17Dq1KZFaBWgGv-bZ`cA2PS}%NxJEeMN<Sq)KdSOiO~E
zv+|_4!+4xfgjThVYy^I)DES9`6yDvQs874+UDF>??=A_okyukQ6<+n#HRLEOyx-xY
zTz^j8j)H>^*Mi=@7R0>>z?PMkN`sCjoW8TJRO=|}ASQf6KQa)i^eLp_#11#=+(f#z
zM?e|HBIkIB{I!os4<&QW&=fe@k9V<E4tQ=wFK5_$KRFu9C;M;iR=x{3tHHQFuXMk`
z#tHI9A+TAj_l+-252O=Ua7lHzCulU-<`d&^hQwBL6A!OJ$>u)iz0P4WUaQ)`q-e*h
zb)4v^#;Y^8E{>c(eR%xVL(J<<^E+)kyqy{N)EML<4&D6m`QN-C){RVaR8yuc{DZN%
z58MG%Fyd=<fkop12K58E4p$|au?2K2dPm9^i9P#fETcU|wgw3G-H?B6UV6m&3$0x-
zE`{=f`K@UlC*h<%*Gn9&$WNqiQtY7bo`*1X#xu2LRS8%_<+tb!ir8v&Aua9=#kM72
zHM<^7l!b}*+&Fh$lx#Hq)veE#qTE~ao|F8pBRhl-+xq?J720X)2BP$mtwaoipH^ik
zUEqVaO4}wSG94juBLXoPXDm$;8^<Uw6_U9tD`k-h_Bf*n{^kb-V5FQS9j1n-cdR0(
zeM~S`8|ZkDPgd6TZ!a#MIm~`s6h5(UdAxi827ecFiicS8%K%EekgaUQR1lhY@uT{X
z&}dUfLLi_9E&{qvExsd(c_Ax89yOIbR_;S9WTqZv-BS^!PCDs>)9psDd^f*bO^Hat
zlc*NYG^!OQNW;td8_s->B~q$4*&)Dbt6z`m)3v3o{S!x|0fn+4;cT-hG<3$WW@+y~
zOPu%c<C~_Ekmcb?lHEtr$gI+{qn~^nh4^^pv3}dTPM20_n=0r?Lo==lh<Fb2sD4ma
z5^i$MRha<o+Q=@J35UH~<-A3pbnvh|Bg?3YwI6n9@m&;O6vA7f-b_D2w!si&0f|}Y
zEu_(&`f$9;Va_F&Gx7v`XOlervL?F!-^*Eh2E?}DY^z>+MZjB#o^SLmxrX}@m%wMn
zhx_T8Pqi_=MbF8;vt3PlN?vWCRZP2!`$qYbl<>=<lB+A+uhLzFIK8pt?E#}ltCqo~
z?+>2Ts{^&smdrQZJ-gJVG@|@^H!Ns}2A0l@3!d0nw_ZwaP+Ncj{9_u+ixcfgFd#>c
z?2(l;+ZwzZ-@`vqLAsoh;`liutBqn;;hy8c7^NK3dvQc#0ty4>D*8@Y#|`X8)cDlB
zeX^>i(fO;2`SO7uD$DCr-DEz$%p|!)HSyV(uVxf~&WPNcQFz)nU{hsQP-LLfcNVpr
z%tf?6wC18pVJ6I%nU^mcol3=M|D*AP$0<>NH=iF3ZXH5q>)WZBtq)@@Qq*!6TX|AX
z_@AGr%zQ=f?Iezk4Hxe8cfag^cjy}kn`OKmm7bXzBFG0+xm*nffM5FaMmpNE*~$6>
zFpmeZC4IZ}1fP1n&RFEXq4_HA=3g>xIg)HYY6en6bxAQA`CWD2I+<l+1jXuAx1^Ze
z?%-LOGHw;4*ZU{(9~Jr~H&f**Rs2Qsy<H|(xNDS=2CrXc`JOp|Vdv~vvT;LH!nvF4
zULUw*p>b35?{l(Qwa&MS5OAWX!ZhO0EyjuVgg9`?8kTNrbL&zYk<7KFct53+wDnp}
z$J4VT!CK$RJS#-)VLm;|LqG`jj2PsMt{nHx8@?(7cIP2H#U@;;*M~!I0YTdj(D(iF
zHGl__WMBW$$o?S)w~YaqNW%pl1p!1^dW;2hLwrPXkZ^>h*hjZ6jc?-Vfv;|Zg<h=M
zL~1F=-JCYV3#ZM^czqn(731cn5Qc4ze$e$&oRMA56|WfC)@#{A_s%Dfva!Eu&H>p~
zAH<M&<WmBp35Qa!SY-O>G41yk(_wyPs5o{!bW2<={C?LBFO*{2CJE?bo8g=8q1#TO
z-Vp-aBmg2U(y=-hBaYt94bpb*y?m0qbhJTyx{h4)#_9px-+qYT{18(>l&v;a8dj+j
z;wN|iqY>9L57HiJ(O{fX!d>}#Cu3-I2@XhJiO?f(u_U6=B3tG^8msNdqf6+AyX(9K
z33(`4glN195-4;xJYPwR+}B%&drHbQm)5gjhv^LVsj<8n-eI&udinRcfy9{yB@uty
z|Ekw#``<lRD_HP)|E_1YG2RkQag-8mqS8*5-@@cuD#Fx8>O`4wgZBtctA#aWa_cIm
zM0v#7>?vv$(1i%id)INEb>T|s9(h0dK?Jy}<l^j#cN&bGVJKrD4AL}-oB*9l#fsCf
zoLBBQlaw^s-lm3;Hr^@U)K@d2?l!(majD&rvZ|I{Q@P6`QSu?7E>u(5O7}#WV%uAY
z0b@PgA5AL4tWdh5PsB_k`XSi}xBs$Z6ghL3thF8yAuA^qHQ_5OdO|((i^o$3@;V4?
yPFdydzxSkc`eh$@xEA2Ke>(rw)cIz<E$|=u>i^k4{+;FhKYNV-^;zQn8T?;;nsQhG

literal 398421
zcmdSAd0bQ1`z{)aiii*f1qC5>K(q*H1*8Q`R8&+%94ZJ1sdZq8m{LHZglq%>5h1l!
z_zH!92#5?38KQuRkObOVWhM}WOsz6S_O1|iNwT@iet*N~-p@JrbI&<{-JtBPN!DJ&
zyWaPCp7&jgLyIz;>7o4x_v7^RaJV7xgIkp2ZtbH-Uclk}{BWP)aJc2TrF!N#eQ>7-
zesFr$xTXKx<8X)cZ2s&1xZalk_{=9bTt*~r$$xw%7+gQTK+7M${U2BTV!i)vvG|k!
z{ItGFvHpME8-D!Sq6+ur(Fj@`EjEJo-KQ?jpX0vVbI@<e$JW8?pL_d%ZcY1bZw<3>
zPnJw18~$q=-NRgbfiqjKZ>VpguV;q)#7s}$Om9($BY<8k)%)l5&)2{&y-)O)EL~=>
z+;D{v_&}p6?h`$I{ZE$YFJ1caF?vbhecTeWrRM9u*uBi+*cpQjF{`#;yIrz;<DR;<
z)yI3_O)lSlpJKSe(rV3GYx~U(Teg1Y>bArE%db4V_wL*8bKu~i6JMVU2s{-OeD>V=
z3*ixwQL%CHmlNn$uBKj3OV7BGdGp6RKi$pE``5kv`=t-c$}1jLK6+B$(AdO%`mDKK
zAQW|U{_^W@y?y-ygW{oKiCm%l<IlJ6#wR9`zdp>)sprwZ7e0;)%;&#{1%Cf~WdDzG
zfl1K&WXTf!B?ceIrT0m~$AOzIS-Sp<W#+q&8Jvl+*s%TD@>P3om(;ZxZge>gum1M?
zo)wmxT;=x2$D#c*vj1-bOZnd#*?$e}zsEI#^9F|bfA(4gjr^ar0KUCA3e57`MG0=D
zz8)|peKQ;xhkY@QEB+*T1#Zj#4=(t{Zp<ZG^|s|{%AjONzT#~}jVx_hSWtO<&X(?k
z@XIHUy~)Qd;{4d?#tN;CT;s~@fL3Y^kvr<UXrkOdXA##pbHg=>AY8~^#Ia`0IH-#(
zO*IvPefk9E3ZzTWoV5)RjI;8cd)h^pFo((JjdaOKP*Z;iTq8|u@SRfa(CRN7`yWgf
z%29VO;!>_KI~Q@>MclOt*k82|4r%A@EVBJ<$`|Gf*IZQeFt;&wY7YN;l}pk?Z<mX#
zZhCp$p8PI&GU2Lq*c<u@p^Ic+q@oKywcz_^f{P>k8NY~I>JOStq_<#(_cY(2UFt~0
zvK9Lr9`BiD-5{*c#%^Xi-y`1QS)q@T4oP<p(6)`araMs%54c7rv@_Rh^k0>`-)Q}+
z%9eB@>g-;ecKn~dYuquzDa|^1s(KNpd%|3X{W4~aTw=+57jaq5>Xy~>S#!S-FR5Jd
zMyNwu(I%9o4AJ-+8C`ih;PwZckUG~7^KQFLEHG;nfxU5~fgv!K7oSjj3I|0l;t&I?
z>54_1PoicIBzJ<Pi@3WDdZ>QoBCc)OoG$_0roOj`Tk<SRS$4f>`M_))5+GKzjB^bY
z4|yvqGH9)5N%vypbKIm&+9O$heV1mJhk5eReV2&LE``I7gN6^_(WeG8^V;1a&DKR+
z&luLtMtvFXi?~0dagY@OKIT894A3Q$qwzWXCp+pCI?v8}#zt`~*{(pL+aY<|u`^a+
z_a*F~PTGWeOfGaxZpjyf`5U60`?!eHb>sMoA@rv0@jl=F#?T!$eut*@6_0Sb1h595
zg8>j#i#XXMcB361ri7yR+}ov}Fi2>4HRCAq`q_iXUmww%G>4l8UHw-~T=hwFB7S<u
zC**Ifw<6S8flZyd>!g~chAiUh1@TwaNVmb<PO!eqzQbPDP`_^?HyLyeaSmG;9lX@K
z5q_U|>iw;YPJcX0vGI(&aLs<GZ{KR6`N1{k4&J|DQcSo;fe%a3Pv2H(qOcKmlmGN{
z<b*Pfb<N9OV?yT&Aw1K8&X!|$N%aciI`p@`4xS5)&k(=J<!z{Y(&xH}TiNxHZY8vS
zUssJ@3pvTH&+zHF*!op0sU@+7{*C^81?Xien9~ctx<-eQO_)Q{br)N`H{WCC8^7hs
z*m_Y{-O8V+pVa2XR!uY+J)lHcpR?*Pq)lIJ4Bh_z{eXRn^yriPz0YpwqhFyda9=1&
zM9wOpHtDL-33qHW>W|<%_{LuQl8XJW#FvCoc}tMZ74oF8nSIUu7vrAqd3W$>ziU-y
z!|+VQE04dZ?&-b-HecOSb?bNi<D<yscy#@|*3`Y74Sx+*hP`?b7eTxU*)qIg?h9-s
zS{4J-+9mj8*J$^XNLYp9xludQ6yatzCNXJdLA={%<>Rv~0{z>Udss&jU-=&G&kK#-
z?b;IU=^uSgf3{EE07ie1iPvt><ulzGLFjHxfcDS;_9?>|jZv^}NOrIg2LZ`4qfH{>
zr?~#A^{tukC={o=A~nN)l@Y-g%EHUSB%<$g^BV?TMkQ~8%7hp7v~JycyO!cs>FKhe
zw$I73A!0hz#G0nSZ1n^5mBtsHY0H;(M8rcDD7BrvlCe{+86|qd=Xn(|B@;U&e=g!~
zP6xmLAe^_#KT`QHYIFORxGG=jOJmY7$G+id|D_jS(ojc^*5;&)h&s$qpH=!x-pRzO
zwTeaD4a-HG;oQuUP6XdhuxN0yI$UrR?qo5ja%uX)`FE+rR>w1c@}8H|TSPoU5%8Xa
zgJS<?SUF|Yv`}qblz0BYRI=R%%_m?3RFaMP5sSECBN<tRM_#H+k<N6lvxrnKPGf!^
z3B1rTxo+7aP7t;ZCJRH2jv$n4aaF1l9oFZp%S#mv@axKoQF>#|bd770OK9`+?zk(B
zqvV6BB5T;-HwqjCq3%9y1lSKeA*>6`i>Jn$UZo(h<cqj<<6-7#s+^d4b=mFm$=D$J
zYlV}GAfKNaPc#Z~s%-9ayB-n$+##gtrsJslQR}pHPGo#(p<@_M1F3g`^*n@`GA`);
z#apI5gSKe`7zcY=6OprWZW_~mGM^}*8Pmg{<q=IJkKX9kW5tn{R$*KEUe_lkR76;p
z7f`E1-}um0E(jC4&eLr3hUb%+R4^Ogk!9D4%zy<3F-*}Dn%&xMs7m2~le7|HiF~0{
z-qvo?rxDFzd5R==;lj-I))1xt%E^T#*t!PRq1Nt#L$Fn5b>mQ@Wn=%gIm0-I$D#Wr
zYVE`>!tbNFRk))DiEx#CjEg{u3;}d~%(}UEn&E?Zck=LPLUGvCozanq+^f>;R__Wr
z^-%Mm^TloPo>NKAW115wp?eaY+>f^0?6Ln*(((ShZvqbctAU8RK<Z0bdwY}!QN==d
z^TL>k;H&hM`8}{ta>H};nGoLtc_*8DW?${1S}k0@8^dt6@0+H@Cmny^+oRw<>!)4F
zet#Z^T>?H3ggDqoLqj)piYTd)!0SAxE+kwY-bpb+*<ZtH(i^i+XK4f!qM%7J@)qLS
z3FfB8KBq;T-1d2|vwxNs`5}5XxX-z`^{JId2kX&zfWw|AgWAJ-=#`Iq1b0+#7vVky
z_Qel5zr$AeXu`Gbx;#kkkt**<tsS1ioREr}m}qlZm4r@gYa&P_x{9>fMcmfv_l#qe
zBiH+869z7Dd#f)zjXpFxX8+?vf{ZW}_&*LAmJob&W=I(dLdM0e9QG6U8(tv~(7$Hn
zmd}et6)1my%3rTX!r;zqt(BaUX}9uuYu)n{L)TF{>fK?zF3h1<PF0Z)Bb$P2*=1Dg
zxA&sMt0~D0$}YlVKD>{E+Lv*(t10R{gwjqiV;p&k2Ekw!ID%|%g?si~q16%A*GNv;
z#f5UVybym7uBn+dkElDcpsqWg@MtXRuPfh8Smqs-1iuM8EmRj1`lDyGYuhx$#=DXU
zX%oKlVf?bjry+(M1_AzS@;Apm3!|V*s^Z3mBE{fW>YYN<QOV0~yGwHvR_AZ;A}=A!
z^1!m~t_f7jbWfmY;xJ#q@0h~l=)USz2(JZh0ltlAH!*K5y`ha(YJfl8jY1_*yFN|f
z=iGU?31)z0U#ShOiCTDf<G3_9y~k^3SrGc|l}45C*Ko1HjNNk(&uG}Izap;w&RnCb
z<GBZ+xqc4E{PAJbF+<p{qC_&q3g15A?(w>?qV^8-F!FOs!IgL$N83QZ)|UF9;->y>
z<#A7U;bmRG=5^t6cOm}<dxh2~wmb~Ykh61IL%{5Xwf1aoe%4bv$6iKV$jET>E!?13
zc<IMuA1>1P6@l4soieJ74%_Oyt>!}bHQblMACWD7q6%A{27t$M7}BnGlu<+kiIt+F
z6EfEl;e<5O)=|c%a76}27;g@%RD^m9uNtJaIx6uNRJ-+05!=#<%lSlgLJq?{ykvKI
zLDf{%Q2eiM`e&Bbq)g%nrTiv$t@Rl=L&lzNLBvXO+agX<rP$9^@~=~jy@C+3e>b)X
z_;r}>8`8&ES~^Ov5(e-4Q~J?pRRx|ZZ^1%9MfCmA-K&LWRQ$KJk{$cy{rV^!fHiV0
z5#2=5+MJN#(JcnkXJl;2JEeolMoGwkwWq|bF$BRPZaHIncZ1)dP)~u~CkXcj&n7C6
z`2`O-nbXFJ3Uh*4H=MV{>C7(0X(%SOtOQcUj<U+IiTuwE&I5e84>-p&JZq+iTnC9L
zk^)(m%1Ozwo&-yIXD>p?)NVyQ1sI{OFP^__Y*Nj$>z8%Yw2t3$19+R8_=B!h8iH#1
zAHDCZRq;k!$9ky+)RCijW$k|x3QWzj0M4?Iu>2Cq8r?jl^ijnln+Z3?OxwO%Z4wn0
z2uM~1auqA{Qi+vydV$=iYxTr;DC_I)*<bCkuKL0F0^7}txDa2ODst9IkF!7P8$GlX
z^!yj#dDqetF+)E&D}}v^xmHUXWPYao3N7PAjp+?EaBL%*JjmH`1nY_BB=L>tcw-Nx
z0M0f#3G*sScDpqS-M5xcN_Ny#2$7~|;k94Fu)&84;CR3$@x`MK+$_GV9BRU+k}t4L
zrn+Q{IFmv`AbJfs(fP&1Uz6XX?s6zCyf1oA74Z7iM*8`Ixt%A1x?3IOGu&2>Z_zB_
z)r0-^miPC5ho9T0%K}cbh*GzRo7R&>cv)ziwU#g^xuW1uW3ToYvW)s=BPWYs%6sK9
z*4V}3ZHhYPt6-Tv$p3jhxUf8Zz6o0e&(41@q5BIKmi?G3iGFGz`RSvV{10dOpFZ<d
zg4U9V8N<4K;LOsQp6IU{H^xr5;sr}GFIXVeDUv)EaWAZwcYCcxc<NspS*BrVh{7s`
z@zqKX*Rd~<3ndVviES}kW5$S%t$s7{7=1J&^03d&DfmVYJ14gM5PaI78f)Vn6Ybjc
zp<Rhz)!pK=?ULtqk0+0(_u;&E5f*!}2(m2y>V<+DsBQlu?i*vmslMsP=#2roCg^;q
z%gNqG&jZBSQGY)^IwkWAQIU_<HRptcj5xjwI^WdN@a*OR=TCn;a3NcHIRNmu^H*_O
z^vZsUdFE5MaiLr9ImF}V|F2*4AA<caCu4Ze-iD_Da-$BHxRwQHEE^vJDAP!~`!EU_
z9x1O(DjOH`>qp0Kmybmmt!a7oxVLt0^wN}HeSRRf?&)BBP)+Ggzx}E|allD@q{`%P
z$+Bd=CC`Ro3JkG@*-18II-y<OC?xZ>O;m8x8}XKC?$ork$-OGAH)@ESkV~(xA8@k_
z;PyGiQ`VqWyL#AP^AnRC{X9~nQQ{^5q7#~Agekv&kJA8&=U{zgoPpN1N}f%_EZ<#w
zomsAR$WzmJgW}+84OB|b2fBffgr}q(pZv|npR$H?i=$$!CEZo0+H-G(wr>5dhn})_
zb|{(L5IUus(+(z+f6c;7mZEG}qr_`hYt%0har+|9Dx$~(zPPZ6YiF$tp%)19vK~fo
z^WO=i$&?jLJGA3<2lmAuVYQh`q7ijrmH0Bt?e44B1+Ihc?g6x=!eT;pzn<<S*y5#R
zbFID%LbrsAXhw9tsM#UIYc~?8jz$cwlh#dKeXa<4L+=!M&{zyZrHvFn&b&1AevaNs
zl)p+030WNz<CcCWX`9(gb;3!o_&x<HAOGHIn%mAJSl5xhxT%mVmG@EJvy|SBj*ecd
zr!B3mEl=sP#>U1J_acQNa%1|MV}INpSbc97`4$Uxp9hrRNC7~xRBIU^-iy}Are3ln
zG$lKWxt`fox8q@MHUhPi2xuoVB5Llakoh;2HBa>g(fvi%J~!Ei8Xbb}2n>!ROFZK8
z_os2fBEKOFyJs?v$vI2WSPGJHi?OeS?%z(b=y9W%qZJ~O{Xm1xNKj-AzfC(!s;rq>
zz@9xi9Xyf0BeQfOm+O&J^=Q&PV9+BeyJ0>d!E{8h>4qLgBs39jwYnfSYOb!5xt{JA
zkP!ycfJ_n5l|8l{&V5E({k!FYIGy2-xCj@<Qmb|w|6wWqLGW-QaFBa@UqUo3*7|Uz
zm)RlPRr>Ed{t0xm-oT;nWIAX`&AJTG5G(a4y=5=$=2Zh#kOIn-aIYCF9B$Mw322Ml
zs*SJ$O%&a4_v6Iem!hmTJBOZEqm}nA&NTEG0}!6AE>J(lkB4I`+z^)+1VjEeGm@DO
z$h<YQ1SPijFuT~Ry-1R==ZUt3ccwspFW1QNhU1UFcr)+8$@Dr=8-Wpe;xzO>oBQLV
z554|PvNpWXEScPq^Y7q*pGyZ_y~^86*H;j<=DzA9b+CU{gTJ|y;RX*rgO#1?;Lz#V
zF*>>PYG7u3==Yj--lvV8;eBp58pvi5)&LgWck5sQ@>NrpD>znPbQEs~8Z2af#_)hC
zT5}6^Dr|ML^=!#_kt_Nuhp`IoYM(J03;S$}xnr=^5&0kw6q3y)5tq%X?{wLv$)rZq
zt8c54Hi#;Q1ktqUn7BMi?mg;dJ$0wnOrV$-5N{FS!-S!PW9WHhv_Z#Z-csE?(sIT|
zq@<@-$hBLI=D`Aa!ga=0B`}ec-%j3~KPZkfj%xopw^zNKIa2;6GGF~KalT3YgQ&n_
z!aWKc&lM3f!mNPzI1|R$ju_n1lFJz0Xblo8f5SInSj9iw!?Q=SImz1HXKLu;V?D0d
zovy?`Ku`Gd`ZgiUIDb0dD?3dMUYhpj8}|i_MP=$~z^X0jL+{D(H$fBw($UbANNTJF
z%he@_)Oav9!mZ7`v_#v{8h)minJn9?ZH(Amdq9}m%uUxGyC1b+S$F2U+oy*ngOdgt
zdN!7<)YEFg#+DN-y!0Y9E3qz$!F#We`+$ZB$&KMaLm9`GX}%@j;4ln8e7w%K)_$QN
zudcbC_#k6npVw|BWHe!XCFYN^SL#PUNUo@;SDjvvUyprUe*JO$u)An%9c-ZT*SMlH
z9o7##2-jOJG`kqqNW#tdsvGY&r~1I}(y<L_Y|!A`L3u;E;{B;O-S*d$?+>V=-#v}H
zQT_SLt$V-0t8c^nn_8k0GNvbX6d56#uL06)K<9h+GW_LaOFHFLU*jUqn9ddi>(Y2t
zCG-q|<o(^4__C>ByT-Cn$z<@6n)1=pLs2`dcFgA{ScJS<m!qczPQ6V@w&YpUIm(Rb
z7&uQr+5uyHgdlfFC2f!5TePl!AoWSAqMMH>PIk42%zPqJ#Bo2Y?{y=ZM;6%(xE0u1
zzmJ%UDJgV0{j@IifVjbN^ngD4`+tgucqs?nK~sb$lh%MI1@nwX8GDdRnKF&PHQif5
z6!;s3PR(alNT^{Xq$A7nj!bGO3H8f@RGd{)#wJ<CK`%G?Kbi^*@Yt7E_)r=Y{8|qy
zFA!^{{;t76Kh9{aGzzYOolSuQ*&`bj_;%KsaV81gH})JZ6$FqzgGYz@U3Yp1p@}eF
z9w_Kq6Ee}9^4ZAb=MmU;xR!t4cE6~ikM>7j(ahnN=Y4M*TYuI^UMG{Q$*8NR0uY?F
znk(8!n08Yea-W_kBCO_zw@6L2U-ra@2<uysB7QObrC{vyLDx{d^G3Gns<ZNFt5f1X
z`jmH6{$-IKcmMdp*EqXRsE1`qimJ-Sn=h4AQ?2i&-+2(ZBk*c2@RSL;gVvYsl@IN<
zA5fP(q=X(cZY;c8Sbh9W=;#~YRhIC+O??M$m+r(t))bgVR5`*nLMeQbjXLdT-)EeF
z3rA;EWX*nhfr35#_oew);SM6{ClLheMO-9h_2hyyW#4RoARrNVzjuPL&36v4E<GKy
zZRUwL^ih1f8#OiC^fk5!;Hg9zv=Ytg;JG22Q{{wZD0$C-_L!o}l3ozlH%l-^&k9I{
zzV~j?2}07RVz+~;xKW$EJ#j6*HNGbY;*AOtZAtAC#rya4X!(^@`r4pHToh|Hn%K#1
zm{-{<S%y(D)UZ_uyOW)TIl`~&mn4|BRnZfL6jR2&s`2KZzX<iF#jgrni2k#&KjzIy
z+jp5;f=X`g8ZWjp{zpo}Zj#~fcfu}Q7}gFENTw2$yEjjfkj{^SRx$R9y-bK^4DT~C
zXbli1JmpejdbuCT@5#Z^sOEPmt;fptT`?$F=iYqy@#(*bZV!LfpYOs}#D4ViD<D}B
zzbX7CZzI~`4bw7ep$jv&NM?-#@h^u|PPN)&N{-$X&je1$P`TW5o`cNkr6Ij>J2$kC
z+COdO^HbI+J@5Ubue}6d5`NABxa4nnTeMyXTWfBlz6v{}wVo-N3fqo)a<tKKrx0+;
z;joQUVTOYM3C}AkghZ2|sazBD#B*XV8$}`hbnndSO?5nObG}VtUTfc+W8yA+0BAIW
zw;9!!&uh)S)ir$#szPNUxXKc~G7wNqFv6**yt=kTC1D)}ZP|+~<)(X)qx8Efqh1w*
z;63;!m%CrH<M#c@t9M^|ho6n{z(GH){<rS%QKG{}_)AGd#&#5e3tkY`knnWrE;Iw~
z>cp)3=4O_o0zpF76~Ol6e);D6vXs+7(xI@n_;RYp{*tBToD%Aezy;^}vu7Sn%r_my
zLF*|nT`VGJIKd(6L+DmQwinr5RECz;GLEz5)7IBr(DIk^5!9ao7jkYj+B%zmn8;sN
zq4>I`$Cawv9erQyX6q2j?RoV9O+0N)H-L$|2yYCuYctCtV}S+*A9K1Cx}!am>fZz4
za<-%Yz#sM8q~o2wgET0@_c_I{zTes<A^Oat(eYsW!Lsm`m9(Uo(#R91JGbS>mkRZC
zLx4pXkMX6HR}r}X<;%*7?B9~E5qgttfjvUmKH63Fhx_6v=oYDJ5m!3CkdzB{G`Xou
zb+SA%IN)C7()5Dz$R>g<;|ld`#e{lCorrq=d^mMgz+i4}kI&Lpv(A-YJcxKyOt3g=
zu-J=HA=$qOfBo2nI<RzX_vyQfxT+5?!1Db1wI0mYu9{LpEb@gJ)IkaeWv4uCw1|xu
z$h+F`Yo?0K`Z*;}i)<Z362GVjjzUD#g!5lK@6AUiJ*Y{=`|L`oRC{6Ijw$<wVuDhn
zB-_wC74A3P*f!c-NZ^fDnv!T1n$!}81ZKGvdJFB=57L$#3#sX-sE*=V1<pU|q%GNj
zxQT@6j`Z~@J0FXzKQ;K`|Hj1(=0$)%r!f23HY9s`p!$)nkO3+ELORICm~kY3xtA~8
zF(S+_udj&;TbU)SQb<=y>4CcdPV&qOb!lr_fUdiS_iD-K&n~f!ZueIQnM?LI?ZT@(
zlF4Z^sMjJ6Ba>x6ljl^L(~G!q>2Q8BIb#KGAw#`Ymk;#0ixdf8Mx1Utuc(6byAY0I
zbG9rUNgBMjx!x+HhVy%U*ktO#o0Fo(t*YvpTI<1Iq(MHh@qdWiMjH-)C^ndHS;Uz#
zK~!?(k3VI;k)q#YdW*POmu>?Dtn1Pm09dGW8fHk<oEN|bFZibMT{omAtyH*5K(;0k
zqL|y#+q|fy^s~aEtw>iYS#FKo9b;8QEZA{4k<C(p>H<wwXyMcAs`EY6+UHDu(l8>3
zKaVr`<0OvB0*`edpNZaxt#HxAXgBNfy!@1*zAx-d5m)90gq-cQyCfv!H2MST^J2lR
zE7MKq(5`}_6U$GbcS0UNx#Qb2mlWbZ;QGq?{o9?#=Y0mxG(>+ktFNH|9h?lw@+q?*
zw{eN4{R#pUV`1&MK6()h=U>bY7-}Pfcl=q>Cp+1<&LdbJTyPqG*3AfsJ(nMkRmnMa
zS~8p`l&-AhL|Qs2#jZ1Ww9Buzad_LnHfOgi$Ej@6m(}ImeK_>^e~TYLdIC(bl8=7M
z)tZLL$lBFFIu~_GHmYx+TqL%gv<7C0UP@CiQ<&A3_z|`whUJ9;l`EBjS7t*(<|Z*C
zMn<{ek<@WJrb4^BC+-#DK<{j#qp0=C0Ff9^-Z-86B$@dT8-n0S?sO2`q7Fr85FZ(>
zlP^i{Qa}P?dYB`cEw4i;LjDS`P?@7#7W$b|<iTUrM(|8Q{*!20H`w6kc&xW!M1waU
zfzCy7bAxMM<#Hm!Np~;n{rv$zN-#62^hI1a8Qs!3eeV&opVGkU@XuxvvM31lOeV$A
z$+Gk^8O7*e=`i|P<i*x~m8jqp@=h?5X;k}WiaUSVdtY78MK7{tMr3)YUs7W2s~Qol
z7?%VT$)(Fd<0qkWtYmUsg~}Mws4t@*H2WQd{>f4!uNb7Hfu9Xz3jx`RP89N1qi5uy
zXFHfqaCak2ZYO6nzs*w^hwSZnUkbl}5}&B@7&&>sDSqc>Ute**Yd8L9AiQLg;b_iu
zpXLfCv|FmHg(8XBly$R-Gg%Aoav=E<IOByb<OOMU11wJG5m1c?S~;h$7+J*GG2GDX
z9nWg1qzy2$qH;LfHZH`NxG!;edGwKmNm*pE-5t>V<DmQBLg!|N@oGEtrRE6pHQxsC
zu0)OvV^!a@S7g;V#kx_NK1PJOnOcIaA~N`OM#VlEEsbpA7HuJ{iG38=oO`e4&E!>H
z?&C<V#Bc0+S5?TA$CjlKYVV-6S+8-xhS-m1+GZrF>YM1O2B5Ys<;f<FV$^0g>R79F
zhgs=fE;6*yGu!B3Pve)`SQsQts%p?5#>N*wA;#2><{Va;uHg9N-kOGE&Ua&~CS~jJ
zTFXGpxJh>p`lf3rp_AX(H7!LdludP&j8Da01|Va^zs_{0+ToCsd6^71<sy!No{-=D
z0j_y>jkH$#6??DP6*5IT4-GiyaCG%&DkHk30@J>kVlMSDz61aWG91O9zN^`VbwKs+
zRC=0y+AF&IQiVe&E1hJ7zOuXv2Zo`Ma{N;CY&%e4zbHld?M&+*M>@%dr1jK%?u~}$
zHUV6_4TE_n`x=JlzPeD?7nj!9*Z1|nF48WrWk-RdXkpj0wH92pPou7q4={?<dJY9d
zfP+W<J27Ka3X+^6V$BeJOf5bHV`Va3_zMV++0>>c6i*&|Q+S~>xKHbC^89S2w^O$I
z8tH}_TaUx`MgZ6{yA8Dm9{d_66jKbDgfQ(TT?s!bI#$t9BF}a|j=U~~IYPD}!xlyw
zUmYTHeIw;$Jj#`EbF>Ge%OW4Y@h<O7sHPXGKb*?#4Lx5yySLwJPv0)G1z*;}hW8Lt
zA^0$4s9l0qX*{(Qv;Z)cPqcx^JMCvXp?0?QCb;RD;?>5E;}gwYH>SP(OVNrKm<8<2
zijfz*A{@En*8<PYq*(wt&2dxz8Dv>KwRT5=yc<8t`UGk#l0FXQrg}LU2&EFdx@C~J
zUQ`lUsSFK#QRECnOV%<9`mf+lU0sZvhDTFn{#lK$9QGtiJvBSJ0ublMhdxmoH7955
zt%~t&{^&N2)-+4bo;E^0s2$KmjfeIdM0}%lt>zp$M!UZ7JtOkYu0gH8jJ+-r+X`Ez
zCe)5i6)l6=DGfCz+Vg&39PEC_?JI_Vw|;(Ivj5Sh=l#dkJ<+?!P^%}H-bAR)tEQD)
z5<;(6r|Rk(`Kv?57tYz)4>CLzGbwgfFvd|VuP$Z<_0JMlPEtN$P#&TQKK%Xw#nj<$
zAg|Hy&mVk}Yh=VRqsET>S{aIiz97J1EOZk=(1qF?h}bE)Yy*-5+64#@#0p!BFiYj5
zo{Dd}-(%}hpVMdz@%qKq6Vw`dYP-ZLt<_y&>v$?pv~a1cICKa-ySw!<OC=$dM$#9O
zc+aYnnahtF3`ie~r=KTiBC)|moF4yt71=5TUE!Zi@~nq{9{b{1?*p-gpox6;`GDKb
zLp$vppYLq+eHy3QF@9=@S8~R9U@AlqlN7FhFviqizT|%vWk1v*GuUzhNY6^);I3ql
z?1u~)v4a)pNzHzAyZ<fB63tLJZSK%0@Yk7Ek=8yPI}?OOYsJdGZE-9UDwC9szc#k5
zFV2s4q<5BskJ>(o*$xmJlD3+Zl?CIVy&sD-X0#T*7+{mH7I7Iw8DSCU4ak%S0<{@1
zK)M({eULBvSGY3ara>D$E(S?!z3i%T#4J-81dk<QE_N%d91fFK5zKS$Y=M78D&b-H
zY5#8I8`v`h64~w|^!R9ZYe3lOUBum&YGNVzOB8sN?yg;g*Im<#An-0Rf#-!B)G1H}
zfCWfQ=XLsBAf&PDGg3|{eQq+>qu~diJVrn@3brO{A+YT^RS;$kYlCZY>g1zFo%Oqs
zzV-m?_w^4auJSV)CgNCTlh(|;RmFXABgOdf0_;;Aa1fDD&v&|KeE3hTKEO!f#rSuD
z>W|4<6S})P6<n*Z0m|dR4q`U8IZMu&&OQUeh=}<G8d)~Mv_ZOrz69=gGcj!g{DEHK
zk2GDAP1PqTvK>w$hW&Bu)$L7^%cb`xTFQ7$;%&*~5}h};5-6xC-~D<f(e5syRFBm6
z|IzTwZ^wtD$oz}KBkjF9d3^n|=Y7#2j3#YX9&JdGbvnJeWnEj~_GSyb?_rQv)_2K-
zcN3Ze3~Rm)gslh`i&Fo#vL={*=LBkjlq&MtYJ7wNmVH5|sPlj{dBxPCn`eTb)IYuA
z?BwJYl5OHUMU5PNo3gfdYiQxxhx(#_Wa|Ge?9%^OF_Yp3{AQE1o}hXMYDM(b&vd1j
zt2Uu$jtrt9%Ri;n9`-$jLh=y2F`fE?VCr=e{!PU=mZ0RPLuR#ZuVMocgVe^*fZ^FY
zrKch#UJFUBx20h(zgHLA^0lioFyo(eKS5_{L$Qh()jps&Me9mvj5BbslZD9oT?Xbx
zWdk`%&at5HnK{(}zpr=@=?g+3Wa8#$A<RswnYdb(!%28ZwLa6($C+)(wt3xOGZ(r=
z-ybss$*N`T*ssz?{`7A6tU6zJANvyPR%7nyNZDyrd9a(eVv23tx?T>F(4<LdT4%AR
z|68Q1os((Jd!{(`wy)9H=cL%F(aFX)qS4W5L*JgjUWdWP7kDC=m6so9g<l^&y;fsJ
zSE`$J1td3Z%%C%7N-Z+5Bf(Ioamb6X&zcZoI`%1j9#m+|zJ=3EWaM<I$@%WNS5`tM
zv3Jg<fAH*JwOgnet=G`CMdKOQpG^7zw9bIq9`T<LJ7<Ra)O1v*@z&CHrECSUla&^>
z4DHd~gU<>HD_b|pI6zWRWTZ7fYta(|$~lDJPQ2mqwt^GsvAHhN>P9?UmAI4i?j$uU
z$^FpH-q)V0UHXa{)ES_JE{zA&_7(Y@&PrXZE5N>BP?41$?m{Q4HWCTW=+ODU;BCnZ
zY(z>dv331gLKSKupAp1&zw4g4NEC<E4OTOD+dZRJ4!=B;P~v;PYgwz_!g|dHsI8n*
zM-g@nvt;2yeh!&Hj&hXVB%6aoUWfvp+11XrU^u|6<clL6l5=(ry$yv1dy#}TmK{Ca
zttZa!#F5^3BbB#M9DZtG+e|!_y3?*#ZM@-y{$B-{Q6Jd(mMBOKE_sexz%2C*T_NVA
z4Mq~uyh4$vP8mN-yB@i(X~RB6R+82Ot80x_X6p-!Y{ad287*VsqKB&oO`xJ49(2t<
zvA>0<i66_ma=x+^pFq8&r`Zj&u$6!7GS8ynvJ!-=&d^oPNwbK>r@EA*{_^llo;m6x
ze>1lJsdr2Q{(2nVQfrRzGoxLpW}lr3IZY+m^LYK(?~>}K1^<yipT{^Y&@oa_U?nEJ
zmEiX_hCS@A=$h6b;R-0*OCKQ%ud)TtLF``Z0M~Mr#*Q7<m+w{5bMdAVc3WWo>#YX&
zyX4Qk_g#w{jx&-PIaiiV<{CeA=2rz%sTC18!tZl9C<Zv*3kF&y)aJvV8c~D%Sr5PA
z6%LAX)zh8=50yfV4jo<Tyw$q9P&frg?+btv1kkN!8X%kI+9OTySY`EibKWfl+>81O
zc92$!-#4g^jEPUc(H(4s?);oTer%{~S=o1R(j%XyY}L>DsO^8sk^fYH>Q}(w*{x^c
zcOq-|Y>a?b3B#5nc^Q{@qs3@d`_<PaauBk{#pzq4B}y>uRaqgLt>?H!)GNVb3Kyr=
z54$&ypTE6MUzY)hJKsioMRNf3nzV>JN68^uyq})K-yoaumeV~?BbUq08VgM)n<YVo
z9y5VII##s|r@enPxbawjfoj=SH=C+TCq)xCLUkXfc>*#9Vr&Hj>N~c9HOPR5KQIUR
z3w$qV7hz?$!D8S4n@;dI&`6d7_4lVE%rOWg&OQTkItU~LZ&y%Y(;OjvGOr>koE-eb
zS~37)apE|qs1EVhJ##fSatBtUpF=<&t;9FW$;Yq1y1{UIrkdvTM^0i$OHdj2Y5LyW
zwYF=6l3n@o+fWoBlRJnK0Q^^Sge>gBI0$m-`*c+x@(l4KXxi<3bMoH>#roJ<D>Vmb
zBi{lz3IC=A^YivnG9En#2s@UYr3MKRfg`eU5qGZ{htMqO6ycbW*bTpu-YICFxvuqn
z@Y@fQJUe8^?S~N_Z|}MOAc|QRoPOs~h(tQ<Yv0=a`u3X;Vb{vKL&c?~N0+U}K~yPx
zfu{YbYeb3(DanKd2qYZ|V|Q_okrckNi2G=2UqZmto_#d6dN&+ovPy3O3}Q(>%7x#_
z{I#nx)L)^`kXTWGodHUdLD^xp1B_6GD!}tsS3Z8?d(o8&ps7af?~uG#7%g`uI=%W+
zo;)%Xa*s$m&#g~U$Z_PsSj>7x4RR5sY#m?)vsw^=-u?^`e@iC6&cIB5)|Fs}%pL-K
zoU(jOi%0LsIXA7t+q;GnUyu!3V`|VnlYW7M1&YwtQ^D%s*hG=+o*+w(LEob3zIYRK
zrhVSMIU{{$E@|`N0`|^3U+4D9A-Jy^M=m&o)BOUtSsc%u;eaj$c5n(^tMtFc^XTTS
zLw!zuL?E98qXj~-`Kj?^^oou#<NgMM(S#(Y^3R>Qw=JuxPmc`wR7Uj<PXv7EGHrd{
z6zKB}eim$j^cEc;e&g>zBxh-NQjDR$9~R^P0$?X)juD9lX?6pv4~D2SH~CAokq<yd
zC%&3WS-~KeqJmxS+asEJW$*_XC?3rqIa!|^c=epG&dw=R5)7vn0IR!DKjHEFWyeS3
zAp69+a`xeA9CP=-O9%fe;cqbiH;9FK%mGkKN)d2|@{}`elpFkYBpb#~lzmon0`Q4j
zMXQl_H{-gNy*Z8IMSMf%3e<lOvg{tD2%4?gcq&~fB<Umj3lqX0Ou9Gc{;1y37o`r^
zA>pxhq6Ra0Dvc(F*-0|jWs;**{-<;myk#$qXI|iM^430X=;i@QOBDRNjDrf=@;lQQ
zZVx7k2r#d*daC*E`x=GuS--yG^v)wcm%jOXewpK`^88Qnol?|oMBSpx(|!T0OYDE0
z>5R_9oHmL%(~j{in)Z;+ZMXXh$;p=01Rm+r(jGcj$)ooVd!0-u6;w}18t>kfgN)YR
zg5wP-Z(mQgzYn2mB5V5fXJ29~M4DKvlk_o*7R?;V4F;Mt9JYx28coxD&WJ+~%4#gy
z$98smMJw>;j6G->+#+Hc!sLtwDIVRfp$wKK1qy>j+0O?b3>ub>?^reyikOs?MFd|i
ztqe|P0LgyYC^pQ0l2Zu!U7%xQ=2U5eLp$JZ2T`{gMmUgagpdJU+7V2?HpjtFlAMA3
z;;ryW|NSyXZ0@lN>1(7J&|CKOtH8UYno^_88P`aTLhPDN@q3I@vr*?R6<f2}8?;`l
zt8U#&)$G@<6Sp2iT-tW9@m@x9z9C&B;JJufeH1!SGdE{sySeKCT!?WW?k^Yk^v_&s
zv}pk~1pW<A@)g*E#2&wE6<?OJh-;!v|15<MafW@{t@sU;HZWX{JTEPtjib*9!km$r
zjMlZaXo4so%ACvoR(ZIkmk|WrmmbdW6@!|d&_ll&6@IoLQE%PGsonK`v7H~#rq*M_
z<R?X7!!P-lt{7VtK?V~+vt;<7f*OV;m<R#KfbP(dPt0!Qm_~(J0QsD+Am8AI&=1Xo
zSnpt$(LLKe)RnQ-Q!`}|Z>iMK4UQA>HGv2EIJ-!{g5~pNjuPs+ZjxmMggUo$w&pNn
z&Eo;4E%rNjAkPeydLx0XIQ$ZjzJpA8Rty&yklbjw%2$B7@Vece7Wj&13!X;1xjs&^
zq4d2fYLSn6pX`oz@;u&*(}G=_T1=+S495!Du%EHN+$xPk(td_i2sxPqOVYYGsCye`
zfaGQ?qbXn4!$+P|Yw6{fg1jPh$}B>1>2`%L$R1FCoM_rU8X6Qi$hDYsZ)$py4E^l(
zF<<Z-q)(=?hu8q3ccrsUy{t4Rwaa*L=S?r0k|^uL3mjqB3N+-TnbDS-ilzaEo8q~@
zH{zZ#=j+&#n6=Y)zj!v<C9sbe{jR=$TlD)g^ltsXlR<|$WGXbA*9klq{~YZ)8_)Yv
z`z4x+;C%rOF%Z>+2zYvkJuCY`4`w$}WP$jnU-I&<j<U176WHteQ^D!};<`RpmCw<}
zfw|n&W9$QcGtmu&0U&!a$!~+WlxYfL)J_6S=Q>DBagwdDwaDeH3VOz#))r7KQDgpI
z={pd8w)IKw)P8Y%jY~-HrCa74iR&ok$m9O%3)1MMNLuWw+gl9&N(8;xhz+x!3^r;4
zpf>wJ0cD++fzl0Kio839wjoTK-Xu-=lCng*v)?NT-v0h&aKE$G*5p}aLVPS0*o}y5
zMu!d+ft{3X^5Z6~bL3%U`LzB*fA=CTnldyaY~IXL?8K|9bcON8R+QdZ9nFWIr6da;
z<Y+(_H}LvqHXhU-T=h%djy%)fvs{n;_DFWn`pff2@p2Ak@~5tX96pmn0S@A9SB7*M
z=7c&bGH#O0=wzi`DPk>sk>47&xwn;w7Z!A-<=L&|wu1Po=C6DcmEXv@-uUv@xKQ$`
zmVw!VE!9M~DqD|{;GXmSI5KMzr`rImb~oc2lnUdq6`>kiZ73>GjC#I+j2UZ@sKF@_
z^YcM-q=AJWjtaKp-Vcegevlg={$3JUH|bHBPl?*zzOA7pFz;A@MMGcBrP})dG@OD^
zDu0-a<v?m6xC#bf@ggq&CJx(2rs7AWYOgz(NwzK>a|zKhVYiufatfgytAp_hkoh7d
z`5Xh;HPUBjOFO%<<KBJrDs9yesOQ{K_N^P?7N}pVj%TkP=jP|7wz|dFP<AWGrjh<~
z)@tLG`U_M4ld$&32K-2>+Lr*w?-Ywlk#{dP%Fpqa8%%52<|bvI!#0c%N=6fAMFOJ1
z^#)1yl6^oqT<2fHGAoeF0|s#Qq2K-f%Pl<}un|Eh26p*uEC^bim>nmbukAl-@RyUu
zo+%~Q4FPk%&%eaF^??D#mDf(rA=i)H2D#~Q;j8`8zK3CA7U?s(r-1Neb72j76~8LV
zI;knU;#2`x0jb&aEX9%<m`_V>^^dtfB$C%a0icflD0LS>?5}l`PP0KZ5n1B}$tO{O
z2Vd>OL7xJs?MohEsSoC1Cd)u0dD=q-N^x>rR|eGJe2o(!UFH?fnRG#cL=UXiML}2+
zm0#@<c%yMD+WlaPOF2q8%?AZyo-b|un6Eok)+;4H2kzi}X)q^E)SShBk;E5{l_YA8
zGhf3&Lm~cG5<D3Z=%ts&jn)2Me?6(ly!T7ameF7KU0DC!ql0?M<X^niYBW<O&609`
zR3)I4`Zd=olWC_ts;h<~_&17{AnPo->d(>CHl7>WrX-l7l#uk!lZ|x)+Y|$Fen&bm
z&(K31udz`F)3M-@H=BMaHu$ywzwpAp4<2Co1UPy|#nOBh3Bd=U;VJnMzGe^LF>E32
zy0y52gV*kbp=<`V1a%AsYN>+HBCjHCq|=RPmSGWmiQ1Zz+Da*oYLf8MCFQr@j-H-4
zPVuRZ1eMR{^d`W3QV1h1A8}sB*USOZ%E!9<JUl%^#JA9XC70@<cmc^2d6&@|UW;al
z+{1|7@xL@og*vt;EDTJWmESI&oS*l&JG-O#<lW~#WhW%*MdTheo<Y|`s#1+TNOHAp
z<DcUgb!mJUHr-l3xbKC7T%6PTm7<G4PiSif5A`}*66Kz7HTQN>Dat+C<7R0X`6yDH
z+nn9lun<rher4%kLDH2=Q}#G|xOQEZCLH_CIzww7tDJA&X{1g=K~_JLvUZM>8b$y(
zSGt7Wc>sA`uQ2v$Tg2IdXmb#8^fkEd+$ijB7<FhHGZVXcX48bU2jexdOLMbKN}OA&
zBNn1j0|_5KI5U!`_CVaV7F6~6Cy#aIB%`4y2oLhJ;9wYJ*cy4CUJ7;q9C*X)E0D0H
zwa=^oVH30KZzU^jR0hFmvuv{nv3gK)bBJ`icBrQISutfY->$S`(j7<m7aNX)RI!@R
z(F)A)nL#^wIpZoCq@-mMOi8YE{S$D-b%wFh)~2Jm47(@G$}02`dED)WYX<9RrI8DM
zwWSq*=QY1sh;9_U`m^Tl&s_I<`xYGYSFBCSB}~UC@k1@@Qv<UU2_%aO*$vysp^REp
zV^?O_YPhMcVyeg-PQNRsnN0+<GqlGZMM%_nNoCXpQd!06kV)(4mU~WzAOGF-*FMi=
zrXJKLAvdz72M{YD92>yCa&ad<U24kPLSgpv)}R%HG_R$KZ1;}X5xP-35ZT@6z5sev
zK18FU1NZmbPZg59U|vD^`KrkPkD|x(+!Nz!cXczVF{UCJ^5YvW;%GBNEJc?9#FYcE
zyDA7K9EJ04F+9tsf>#e#A&%|Xs)69&6sBG^fdV^c0PR<y312tewQuT=1Jz^A0gYv0
zf}J^KXQ&A)A3rqs>l%n+-(drUdX@;ELV3bzn@Oiw^K7*~Xm$nTYcbD$lDQ7XXU5H}
zDRgKf!<kf)RaWr89L2=1ay<WNi}-@Zgk3RdeYdHyGO1|cZF`5J?+E`X7l*AL*VnLs
zd;6TM{D7_42@2SyPu#I=U3rAQrlc4z<6`*ji?|=}X_i1kSwQn##DP7u;-NlTQfw?;
zi2@4fDs~0D5_rGnnJh2gszdNZm>vB3_Cu=VZH4Q1FJm?ZGw+m*j8ev4+P1nJK}JS?
z`*r2<-(GC+JZb=rG6^<dfGEsfq%^o=Ybluo?W=A*&|H=#5Rkq)X15eQ&)fukaNlL1
z-A+_d7IFJU8gEE`7rniR11C`k@GtyENM~cEG6o?cP~o$PbBWU{sK#DO8~7P<g}xNT
zV0s4W+tb|;VpDVC)L<j~dJ(C2w$Q<^F6})r-q!c{^X^aU>+0&cIS1d@zAwKyHnwIg
z=)vBA^EkK}6oTol@MW2lzcRaqT(DR3?feA~ESY@#p}sa6k^!vwG5^0M0p$Nxz;#!B
z=$zGqfh4ln|G&rj^%kT6O>RVO;1P8;aQpSl4*m+vY21`v@glHjJJOjwM=>7jq{fy_
z<+Iue*U6?BkxuayUnJJhw#7rnV|31o=1nB~ZcfdGC*lUH{y3`0QrruebItVUBHF6&
zc7s1Fw#9gZzx%9lmFr@PPwqX5`)tdKV%(Rj^z8rRa7zb8Yv%xa%70?lcTP8I_KW06
z+q)FlJ*4S_><y3jxbAWNfEzz!Y%5H-<wf0`rtlnhvN|S?ZXlS^oh6`9_dBW7mnwhe
z<*l^pi!R9%SwFaw4B_JRbR4Md9{;ZsWE!L~W8xs-mldEO?CRHgS|Zf;4k-VCIxYcd
zm_w6*f9=P9@7L3Q`Ja{K29s7=vo19OCTLd?)eEQ(C?7wHI6s%OGn!xJWiiewCKxWO
z2qVpdSu!GijGjByzL2C7rtCEFH#4&DJ1-6xIm$lF&5u-FJpatJbr)e2uibMGJP^p)
z#RQc;aMMK)5J&X?eu^4_|F%b0EBUDNyy~OmFoyVxXttw_Pe84N9u4W4sdjy7?Agiu
z5@z4<a)Z5v%>=>LxgIDcQa)8<P04A##IB}KjvVT*5Kp(-Tpa`%f`NB8i<{wJ3}(T8
zGcAWeA;GwTW*0bc^9~>YAgL_kNWhr#rt3?YpzNrrQ?**-M2{6UvvWX|d_pHjt}_sM
zj1@+fQ9X*Xpwfx34ZY&PhQ~#TmIJOD+Y81nM|n>ybMtFPe`+q{<&_HP`6quc5Y7H`
zUa2=vYXgL)C7HTHzN}(wldfF5Pjhez^Pm`Lm-X?iCawmiv>HDY$XjZlP_)8<b!me*
z9>01O?^$CbJX#@mSr9QBlH}A;MdEQ|qXII^oXU&!bURRx$n*e)N|~~=KsMi%Y1piy
zl}K3W{ipztrML)$Kd}&|(?Xs$<nD9{c?$peHv0^<wyk{3)%`@Ii*$H%$tu4nniHc3
z)HvnyZ@6-%of1QOyg=bQbarwf_pX}l_>0Czo%F|G5p?IR-yeUE`QQ8V%9Fnno3603
zXZ3Ca2xXwP83qIU>Z9l(E0xwm9R!J|x=;*`DS#t{*%Ede(U5NQqWMjjaZ_(W`<Om@
zMfp5Xl%IFQ(l%fwn0=aHesMO@Z_TO5riE=x!qex8uYyA_ed+oQeo#8H5i<s|XG$!6
zqxz(-n2`uWU!$Wk;HK~-3v@)`kjC(-p{u-N9_)r>PRr&+oQf#s+LpdJdZUrkWwFoG
z9%oxOPtUA1a~2PSf4Ssz)(0%I=V$*u%ua6ULN_I7ZBjJ`SU=^l`-?7#k2-w-Bch!O
zLdU2}Akvy8_qVD@o+TPZbOwRrh+Qj&Ck6*SUQTA8b3Hg`RCxLQq+^z*=19a~$8Up@
z!6mp4U8oaSXo1Fp*+G7c2UaBMR8z%FM>Md5ur!{Z;U3IORg%p+m7`XjR}F;t%pzm-
zq;rlPHQHR+KEJSUCVN`zA6*l&h@*DKo3P@G-$ddjyQ$Wn8zBD_^#NIO!I!ZH#EYZg
zAcdN+f<y?>`VV3r+5_lyhU0@bsG!q2Ax8;szNgrERXt3k%{1_r4NXYi*xB?BhNRNU
zBb{od5(08R59v&*o)q&V`kis)WspqHK{q5!^T9%j(Gb`{nK#|3@W0XI;m`7duE3=t
z2;X|8Dumv?cFsaRnkZVJ-D-d={<c0+QuflgDJ%AVRKBq&rz-s6gM|wvXA|!GS4@6B
z^@8wQ67Fi=i<xvj{0wtr5YU}Eum_e)wNB7Y3Ldito@$@2P*<l*1++k%<;nuPJ{mfw
zYw^YUv6t9@CPAH`E-F;dY@C)}s{g?3P9}_NN&wn>NPrKGdhYF+)rFBIHbRfaoV<$R
z$$af1&hmcW1+kk=$bpjQgPZ#rW{g0&wr}N|2izw?r$n}eRj<Ek%>ER(TnrEmSuGj%
zCM1)egsXtFTLPm?VFQJKP6Iw2;_^j!6YZzXkCE)MitKp)^#!hW8#|4RcVk;cUX}5>
zDWWEiLaxX$^ukE{!rk&aI|?3-yZ7MD$A+j)mwC20EN2=#pdZv|th3C092&`Qu$}AQ
z(Y-JB>LPAU{^*QD&ZdL4`OCewKi(rYcRbYHUbX7HdjBUN;QigEYvs$*q_}@F3Eu!-
z${7lm6NNJbI#t%GiZ6`_+xYb9U=0ZRtLXyytFoL@#d8OtB<yzen>Rxv^pxm$FN@eK
z4<<co3qL`xemE@>r9TfZ?~DZQe<L8#TiNizt_3};n~Yuo!v+E~ISWFaJGB-pIVhJP
zsNdA1_He9dY!gBj_}_pG7>*#(bTuKX_?mXNEQDxI=PL}Zy>DHeq%cbSv54rq(^vlL
zJ@<^ls<)N=y{qbK-=5Y!n)B>eT5k@Hx&5fYWS-XSj@lB1fKp+udycKeUXxcdd=+?O
zhR3s>)*xjUAm8o8bw&XC`@qimZdbGpXDZ(utQWi!8vi-`X6o0-%F`3-blLE5(i7jr
zs_*dceX#Y1fm=8Nb>r0lnF+ec|G<uas<OZ4pXC@cUqIY<DhthK)J4?H$?@6<b3@>G
zak`gx?Sy*aQp19Qkd|Jw0<C-yvCt5}4ZJMQXQfSh(G1dwZcj-fs~Z(Pe~9~hy7P{Q
zTE5W#F!@hS`hp|acUQ==ANik<We*_>kc17HkvNLNT%Ul_2Qr;1|G>G%F!r*xtWfSu
zR6M{un)>2xq-%c@-x-%su9v{})4dUD4_i^!4O(M?Atku?VuSB<PvNJ80lOBUBo;$$
zj*YhXpuX7%&@{zl%1Q#LNf|wbkoCpn_v2UZ4*cAGYRW7U2-=$-_iyTRE^_Rz<N4IL
zL@cq|(*4WSE<zVxYi5NlkJo&OjgW20G=d@4%X3G-iA@I$L3^MHb-O=7S{lJv8l&|4
zULzu#He6HI_<ZdiwxPL4)>MzuzD#Yutk79gOz$~}FJQlA({_=IKh`U?Re-|{ezZ1h
zbFY_05;FAy`~3f+?oGp*I=i;vSk#D!5fM-jQs*inwM>;MDk>^sDyS$3X`K)vq%9y(
zLN<cT0=3*q3pYd*L`94U0cDEJwG^3&MkNDI43WJnge}?GzKh;>pYO-_Jn!)y_rK>4
z9+KlAd$_K3t#hsOJXdeH=Z=m>i!ZD2^t$yT^hvc#dGZamPr%}uZre7_0^gy@la{Hu
z7XBW4O)u!Kx<72pT=xPf-9eLT@zJ`PGT9sL&+nCzKc1KU@#ku8<>-s&4x=wC!$O`o
zEIkpk?i=a^WTmsAl2xyd92etXNJiVSKy|vdD54|Tu^`*JrQJs^xj-1nL(W*wKKyP-
z!JLWHTFw<Ei}Zi6n((U)ee2IjI#YF`E=z6YDBF>``O3Q&!(JnL7TGhViZnoitQWG-
zy~0G~zJqEBW+NZCg_S*$E#w;$bZo4dK94PZo1WQfYU9t_gbrLETw5N(Y>Ye?nqmG@
zkQ8F;mp0e$mkCRDnvH7EyYj>9GLOTL7#(x}EnFG1CUs#!&VEkT3(AF~Ca8%zMVoJz
zanaQlPs7BGJ;c@rpn$4lP~N$kblaIdK5Z+U^EBvSh2tOD8R{eFj%PXePN;@o24_{p
zw^?1u4K&KVNU`vS?F0FGT;wOpQSs9@^(_3d<}lfAu?#N;83WI-pS192=PkvGl8#|y
z>fk2|Bv<%lc}KiwfxB(zJD-4sz2%;6E&TysR7k8^D)nDiT#8m`au>OlhTJ{%Ilbw?
zbg42$Pzrq?)8`NlUtt-e4^h1q5P*r8X`~Z=X;2m)Fb^O|3gK}b4qaM-f3WMOE-Poa
z@WA-d@s~%fzG~f8(f@guRb_BwrOBnBHY9T6!-tpm>-@QfoDbV2b}9dN2D+F2tW7?t
zqH8vC<CLyBCP{VnLCDM+pg)?kH*$Y}eju~iVkVwASZmoV4NS_mS~s>$u#J^4nQiwb
zMS7+vq-3?29c}(TV?(m7X(#o)LxUK%eNO6@<P%?`0hcj{Blrkrsni!FjvBVOI`{B?
z%=@gzd7rRmtH1mHZo(w+n6Ob1y<yj@<2~UAB@@qc^cKaMwR3!G{L*&Fbv^<&Bn}#s
zsf;ojVd(vc4k3*EBX2pL7<i4?jwJ}uwr1BE*g!EgwM*mySvPhd@uF>p;YUY*HIyii
zi?X)&hA$bl)AP7j#m^5sTi70g%)UK?xZ6pcq{Eu{7HNG;EQ%s)p=PT!)9is?yKSb|
za|jE7|Ep}&b3Rc@P2lB`0@COkDh8j)-V#fmO@jfXtX1Wq+0h1I;DeGZ!YVrCF9NK^
zrT1$3Y?+Az#wb0GU|Ym1+J;nS`#MWRV+P#rH&8zP=_zYFTe-{GMgF$8<VIG*)RCVk
z$jN^TMBQyS9@)Oquz4xECvEAyKT=nEwaANGSB5U}U$Sf7#ku!ZTIhpd#Dp*jlXDt5
z&!C~wt~tT8#CKiYqTtLpjJG`^9lC2APMDWeWaSStOzIX8&Umdd&3fy-Qc+oHx3fc_
zQf$ut9%pYY6(zK7>Ga;)b*K0Fp_bkmAD3;WkF>)|+x=Gqwq5`YSR(+PlJOZ+mp9V~
z0np8YZS;>TNWGhQ^rM)~(z5axS7`~SbUyX{hxkqdaAP)96Mqjzj?pv^gxceuDCy-h
z$UFaj9E)ZUKSOL#i2sCxw=7Yct4{nxxqWO9nx(m(|53yA-(|KL8V~qpE!i!YjhtZM
z>r5WWQs@>$P!Z1wk2qVv1>vm;->&~<NR5L+6{w`fTi4hrMm|v%1>dhZ1MRb?ePbcV
z`gyx<dCb0a_3-1>#dlsF4mwy_d5?k=S`(14le&eUD7)rs6A;Xb4+#E4^kzErH%FnU
zI%}&od0dQdx~{I%-n0{5l-kEZH#-X7Qb=|nv^pF1@3u%{H&@c=O4I)8{I#@StTY>1
zR*sH=$le#q;nn{1R>xa$TQzoLi4)NQgS)z{-;1oAb*AKi*x=Bz6%Q?w-RmG%2_G>?
z4nXt!40#EiPA&$5JGxIOZ5x!;M~A*`66^7o^L9gSI}1-4+1+dFE(y<F(|C@SI9q6Z
zx!6w{Tye%Xtv}<3vqkQ=o;@9&-M|jAK7IObfZrhs!|7jC>3g6s8c|ENm!VuHGvq%L
z%!iXwmL{X|XAdLB<72S_tI^eBjMeOG66362>_^yeQYr$z=zfJ&rf|l^^PjTiaHed1
z*j*m=9N!>HJv6b)cH-CZq3c&^qmiu)^q>r1Z5_iiQ)ZY2Gb%eq6YoCddT;4--V%8Y
zHv@XD`=D@1FdB65#{t(I1u`4=X_gix5lmq~Qe8*kyX+0QXKx0Z{JfpR(R1pg!Z&e+
z`zrdKy_Nm}9cRn??6iUVL|+wUEvu;O4GsPFgP~O^am(jiXh_MW%!{3~K_n3gyjUTz
zh^n^3bu<>lS$qaIslJHsLRTo4^Skpt#~X{>u<NbBbM^<6Zosu}{zTCu7vLLOSo++Y
zma4k6Ya@=$2@lapKhMCeqN)(Dmfr_=_s**6&+^_CJVPVYL?iVFAv4XXG8sLf@p8@4
zg!0<}4vTWbfWsr0%|+@FU2+rgC4PNSwgAs)4KV5jt1K164Q0hTd*8tm_tEZ*Tw&e{
za65WB+;gpUL`lG#w%t8r8{`13R!{vKTJ?C7a}L0Zw%5iuJHZwgYk#dX<+(xqAy616
zTR<*2Wh!YDn&E2(S<Pdx#pV#6?7N4#iC&U^&F(HDN@+F!0}E{@FDuRM{hgYoY<;q=
z+9m3Q%j)vJ@#uht-*kS5n@|eywSl8_2$%S(qE^~@I+Xo_JI*6!{Ix`=gl}+)ua6eh
z(^6b#<CSNF;9J~VgutONB;1Pek{Vs%$UZL94VVmZ5tdQ@Zim^3$|ZP&*%OZ6^?(1m
z9PY>A@B5Kd%hwP_W29~d<{)ovWSAd@ZsdJQ+%)lMoSp2v3iBHjHhiMQiw&F|&W4<>
zFilTYcFe$K&5jO9<K{kld#yHv6nGTVOM?yEjf?YT!Bs};oZByBkd0zAqDb{oV*w-w
z9pt1q2I9_J)hx7iur+<0lQPLNao*0T7n+;`^|U#(d)*YE8@KPaVz;_35clycLzMo^
zL%qMMYSzrZ6{ghl-0*lJ?PTNb9uZ^y3w8{>$(#}uIodv`(orx~%QUVaqVfx{jt5zK
zD86rSY+*%ih`N1CIE{*b*o@7;*Kf~1&I+zEJ(K%mNJ-68;$zK&nx>ZzH!~!(Mge+Y
zdUvGoT=Kbs>GV5}Y&lrPNg5Ba_U}>ExNCOtR-%zfA)^sdU)bsGw3E%jtDAk-q!3nj
znrAh*-{yujN$oEw%@<C9Mz_R<*;^87wVXokg%?>RM!h~!o{C!qs5kI)g%|lIJT}_e
zLYql8i<c7C7-z6DoxhNEn70+(ds*?)LkaN`F*j#43|OKs``*V7auy7MzYw&oMof_e
z;e=ka{ri!<o$ooBEPs|q_ajD$B@JH}NEkZoE4|-q1z(vjC|&tIOX@dJZw@XSo~Zlo
zx^%OfUfiE2_w*9%pj$ze!9TBiaVXgMN@af-wX(W0LAhzgH?&tp<lI15*ml|!5e>J_
zA`IUSzKtjCxsgh0J>ywqqpwLqoi(u^XMc{z%cH-VY;qK4*d;tb-_$B}?V=cFLsRo}
z2K`Nu1uwZ<CNl25aK9b&rTf{EpvdggP)wl_E;|2RB!3J10;&yPf|S9<!hV@$(#2zH
zz9zPG^Vf216pT?!E{x3{ORw4JY?>82(P8=ys8k!cl0(Q$Jf%Bm9Dp(R$KM-Ur(6Z}
z<no6ryC$r>diIm8RlVWR6L;#Qy#<X>C?X#aNCV|Xqu1dZT=4A}eQ+{uyaTojO(dSj
z{h%nrWlalL3E~MCAwId&lin!Fv+BQbYP7~ik$G$JRZu?`dvNmca|0Ze|GCM%T_qfm
z<!0LWB{(MpaIF6S4vI!ZUMVO?8d%aEa&D%^2Lhgn(gt2`Jb%5!)$CNBF}7Rkd4jDp
zKxJ}aBPV{UzqGLVd*h&R7q_N>d42E0^@bK2_m1ycZ)Z4@9{lG5oj>#b1=WCV6Sohl
z3DDA4@58G#hq+YsCA?WKi}j%|t+7PYCl!;auB+MEtT?{;OMl)vfihQ?9PZC<&DOro
zNaWcRzdVFb`&^Cts$R$ERjGXwehoYqQQ2MI{*8_%0E1`%)*`72KxyO`y<+)QS!wP-
zuA<gtzeJ?R)F-=HbBJR~%N#3<mgud+vdw75g&Lm{ZgI0?Z>L|)IaZ>x&Gq1c&-=%+
z^=)?aSWlQ0M;+eG_y<HX2M2QQMvWQIMqBt-g&Tc9I&w|q5m~A=SYFSdPeXL%pii<b
zEy2~KpIB4G?NPpb`9=__6dMg!A&Isf#)ZNr=KL4+isBMa&Y0ZvPWJaTo~y?}%(oY^
z407&k2*=HMq+DRc9r4ma9*Qh@ihFGB6^-OlAJNMl8klta`QZ%Dil1K%@r_Ux@GWn1
zGn%9-?4n;#)s9Qwg+)e&t^eWnI+F;9kaTk|rBf|)UsYn{<*?|;AB+_Vf4+I}^R^dG
z_WeuDGt6&(mPSFiGBj95EYeZi;Ch-RL@2I@jj4aax4@~kN~l_)q^BC65t#Bn=Q0(c
zsY)7^+oljVh;@e~7E3UbG*OzFyClNND)5o%t8-7%z6)Djc*Bob7|<3P!nv}IGF?)N
z1@=!poHz1+I{J)SY7R@^$tpTVn=z9n3rk!FtTiSRoQ=@T!Hh=hlmI7;n!;bswK;_P
zB(5(PQt=hdrcY`kINGwihueySEsxu34R@ta9_-r?a(eyy4GVOL{J)Zqxp2FCGw|h9
zV$me2I|+NFexvw=ERpY`y~hX?T!0qa0^E_A5U>e#ZxN@;Xrux6c59Qb`Ka_l<+;$*
z!7+nVK2?(moN?_j=ELq9?`zFb`2oL6st(n9vUl{4zjW4V63dlhd~L?4`JfD6)zKo3
zL3G8z8L{-GuIq>}iR;35dHSgM(O7cb9Q>h6EN(c+Y~-X^tmx+*W1Npros=~=F14^g
zqqT);Z^~9K9G1R(oggTbzP#Cc*A}IHxG=3Y>km{ffG2hrF5kg<i)IP=hl6RNs#aso
zV}L16EMtDns=K(2vbB{N54lB6v;xwA6^)Ka9I>T{Junv%sc?=#P=ZyUTV06bu(JNN
zsCMmWM7!x5jeGBDP9TMVcp7&bb_7yd)H?P|NA57HMXBmk+!GsAT9Vz+L2bRY9c8uV
z8RPj1*?g{L17n`6HFvd|2}<Gma}}l6PEGaa-{o!X@^SCn5DK+u&gl@5|8~{Y@`}nU
z!2H;aLrO6V>OQeYc?WTS(7$DKR6UyYxP4D^o_Wv2c2v;JN{5SgUCi5#zG$asLiQ$p
zlxKqlWGby`Y{!TfHqsaMk%4Nz{Dr}$+usyk4+xsN{FM4<7ev`3`~mTOn#u&tQh$pt
z)3^`_egYe8$+N&yOLzw`D@ncB<Q;usjk!Xm*P$p0Y_K<;5~n*ayBR!S64xY6xbxw$
zN&NEOx02EE>H~cfspd9&`*<!t+=)RJme0_(!ejr1KHX-SWij1md1f}<X6dn=q3!IX
zqL3R?e?=be(Z(`Hw?q2)iBbfy5V|wpbW*1*LA%46#wFzl;F5>axJ0g^Ab$J*h8Uzb
zg8mpu+$d6ae4<oGe4_L-aih)jgzy<;jSSr;{J8Dy=n}AP)F@b5bD+oG+CPJ|7o$*E
z__!;OSmZ=@<fvgY^?e+iqTnZE7@zw8*PyH!YUroGRfnJw)p-q@-;R_yToh@;8c0LD
z4Rd!xBa`jM<`u?q6PaD1@y-3$rd9-BnamD%Ea<QJ`T1dg*&&(q8Pn0fqe#}OTlP;K
z?HYhUbbNWGc1a?6nx*>g6Q!d&hLOdQ#*uR(VWoMKdKwM1%oxtIgxt6FvN9i)9om9O
zb-qDWb=QHGn)=AsI$@k6rTR%o6K-I0-txNMiCnimlH<6J-IYs9p+U!OJg%{V|5f{2
zVr6BXg-6K|ovCDyp`J$MDYEgC^pB;82u^y&ZVGwC4#Afvj^>BJ@|b^0d{4i2ENxJG
zMI_J@tL6;M4hdCz9+fm+!jB!qM#VGpv9bW9VLz$QE?JKsr7vo`<<NA9NB=s7wde@m
zU^ob+s+(}mB(#!qN?`H9z2%r_4j~`LuhL#uPt%HGmyvB2U&1bqMS_^1pH7_+E*+7T
ztr>kQw`63f`6eM=(Kb!44xJHW`owJPU>cekfF)!`2Hp*l8ea~>o>;9pi0w^w5v1C+
z(;CvuFHa`g)pFTYo2e5k0BSsiEnp;m_Xp#{QD}3}Nd7-&5Ebw{!20rJ!TqczCT>-!
zO4ckS0(xsAF*h|&dx@~Q3*JfS`;w9)T<})C#J>5GtG62+h#wR$!e_s2kk;Nr3B(}t
zo4Vc_6YKaJk_pay=}xQi+!f!{bsf@~N~(j~35K#x))}8G@MWbF{aG#`GOaPaoS`z%
z?AsMp<Y{ZYG_wDPVZ_wVeAD|9^Z4c}U=dAZdYbB0JKfZKB&WamPQxOMy2U4DQnC6M
zZC<z)`x|U^GHN|2Ywoz<%Sf_2WmO{b5A(ny2HPV+f>cq+IXSDqVJiOaC8NGq2lGR^
zm4}Uu4mDU&ctd{+!s*Yf2{SgF$wAsA28Z#iXfRN<LgUXh^uz0;3V30Cu5-AIM`HA!
z5DozHB|2|pE0`3*9($9o>`>7X0@kBQl3fW0d?dG>V?3PzpEom)d!04!PKR1Y*gv>W
z(f&jGkRg9Qjgc%;HJ|gl>ek{8s0jdj%;AxEPE80#tCtys(=H-QiNL7q!!laAlXyw%
zF^2^HDlit}T!`?rY}$9~M?B0oeR6x$)9~Dbf4<#b*Dd<xw4LQQv_Dw5!*y~_oaQq=
zyx7tWMIdqQ2f>akZD0e)q{ItBsv^~wG%=uO=e!C1unmt2v(H`I<)iSq$TPad&Mry~
z6<JrXC3)+_eX5YpyKOBQ^Mk5ZCJP7fpLE7p_*yYxmOl+4QR`82%|7C=R=}Un7SE`&
z<jupaFv~$<Ld~&j!~wh=`^@SvFhN%|S!}97U8@!16xKp#zpIb)@rEAvoShGP%Qc>i
zfG+D3_xjg!?uOhEmb)C+A(WtlqKz+xWxo*?;S6Z22_Q1dA>p0@wFR2gNB+JN>riI3
zX!HY>v-9r;%N9Y4@UxzVs^i(U5=gjaa*^%$0gPJjyJyNZhn^@n80~$eypOj%>JB^m
zR@Qz`3oE*NH^o^(>H%7x3CCk>B)<(o_d*3o#26K#)qc1cMw6eZMWy6>X{*w`nUQpE
zO_PhB(xjQLL#(Umw0q7-$#cYh?P9rSw%o&WcJ~qXQxT2K8_dGt?}Lq{7j1^VrGEpL
z|D{;|l8&#Y!Rhy{>{*;rrqV^D0`N(Ir$zPRM3%X;`=CBsS=7Qz>^vnyD|kj%x!rA#
zs;CJhFm=&{L@+wicpkLcV9xZe=&jjuH(2i$+ax<)boqUbLOV}KA;7<OpALZ(vQ>6(
zoDK!)(H!(G3#WtQpv-`0t*Aw|mg9*SUAZQqZuvW8!Gx2!k%?c1QV2|iTkm{@7w(oo
z{h@J^H0ljc_4vik<xFeSxq#}GQ?n)$HZyi1-^y?Y8kqJe=}%>9HkQ?b#7qJE3?kzK
zaz1XTWL*UPuWWJMChmqYuRb84ooj6=x#0)Rm!c*>oJ`Mdo`dm2lf>{J*w<4vxegwp
z>VA&M$~Wryvqy~S7yAm_znP;h8Y=$}!7KziEziszIZEoa?g#LpLc$P3V%^ip&xy_G
zSjzgE!*Y7kz@~ec2aD&4aV|!v%zRPkGR~*(^6+2d6}Pi@G-7B~RcZQ%y$MRW4&L{-
zUWRs6d|Vvo8>lkT?4M>Rm%S0)k#WOz;3~~#!W4HX<|cZ?4vctrmUkq}3~DyXbF_hb
zE2@_FD>ZvW{jY1wV_#|W{E}9rpKj^cOdl#KLh40ybo+BF*On)5)mv)%-dn9#h1|6Z
zaR=$r&E>szyX5i9v-Z_x?84g%hxQEw{FW9Lo*kM~6f|Uex8jWbl?JD93b_`UE}5)h
zj!wWj9MYE7=*i*sGxzq_SfP!|v3d}@91u3X^zrW}yo2N}2YZ@KWw9bFhb@?ON`wo$
zx#~t{ahsx4xtg_b#8ITZQgnM5;Bn(lPy3cfI_T`bkk^EGIv5!8R%^wGJYS|u&LDow
z^2<~l4RT$Frz*8NTk0NkZy-X7c&<Hz654s8UE30sD4Mnn+jGm}SK)9Tz4{)u($u!{
zvErqlTmOms5|HVSNyufTux~7pu3wNh&165F(0-vqs1SLH;6D940!b161)^H3u_QM3
zN3=&OCL8^u>LUkeHQ2HQ&mViX;9vsv2pXoRZOwNK&s$yS5U<1@p}&vJ`^mFpdx3lL
z5nt(%fX8eK^{v(4MlT3tQz2`Jg*j@dPsb*WFhsNrgw4_$VJ#%=(1Xtv;B9P!c1xP`
zHlX(L(Z$nhoeS0b1kKqMVifwUuErQoQl&3E|3pw2ba3ir-6hA7N{MfwXuQAb-18X3
zOJ=~3KcnF*WT`w|<=8yjLCxuh!d}^tPCFNeMr5J06V|GZ$1Fthw9w)Ho#V2FK~vOp
z{(5d^gK6*7fvyz5XP<Z3>Dy1)Mg=LE8&4+be1ya=jsuH4O;DPslA#iHGCra?g8MbG
zOhRg?m@6xmKMxNwxyU<)Y8tXnS4{hues>d&mVJGs8J^lO@KqnN-T7RN>Fi5|;-nDX
z#=@bJyGMo{8A%bI?%Qh7d(`n6nypCvec&<D40r~(pb(63^p*5j`hw#qzvL_|sFXYt
zyaVfLaTLc*s8-WeY(0g7lZ+S=esb}Gpe*l0X*L1fB7YN=NtM33aDHkr&Iteu<a6Ip
zKO#UiqQ5{0vuTj}wKfJQ`A<*td+DN#M!^E!_n4pwNpiJB$+-Lg-Zne~D%6bm;ns=g
zo)juRSR|S>2uyIx{SrHtvH$L=#3bO)4Er`0LNzO{2<PnTJYFH0pc%$QLk(rtHh54G
z4EZlC8bnI5G)y@;Ix!t7bumA=PlGj`_dPlWW^*ax#dV)QA33JrT(FZF%fJ=g)eOId
znY5U$c;{+W-c#7~x_3M$#Inh8b%AZWZ;#i*du6>)9ii~xP0WOF6AOR8-U$h2;cHk8
zGHI5&2tQmx{D3E8jRAPpO+UA2=vBd<GgGMJQH?SyjWjyUMYfjVK7-=f`rnBH(LHsm
z`|LOd=39qCBX*XzyIPugy1eS8xKK$wcleIk@EvS|0zV^p;o5x0$&5Iu<Pqp3W?F^Q
z&7Y1q`ZQao4lwRxC$CJYGU6w!XK~|p;Ki6uOO<~`W;8vi=TOFh&XRKRg2Tg87QYyJ
zW$n!I=@wCFAKw2fnCWQ0WE^GU_8&;yEw@Q%DU?+vkzW!s`|E58PfXCjn$6X;unZui
zTojl)FG23IEnK=vc*m^n@R#6hjL{H4>n<15+)J7jwF}J|+tUB^r0)X9%rQ~gkNzG$
zwG;x<z__2q@-%v>2?%WMd4}48X;Glg2r_5GL`J%!5A58<+&TDQt89VuCM6p&;_4}x
z8R26lcMCC_<~(c6IJM-R7qKa8N0hmPm%qt@d;Q&K*Mm)A#RH(?r~Uqy^Wl32IS>9&
z22i{vwNd=vWK$06U$4^MC&VyfWw>)2xjS&w0D7y|0MWDzV%=4m5<cqkBj^43iIPdx
z0^T1T6Lo04>C{s?Q_}y6^nd2S<!6dt+c7E-?Q<b{A9-|}LfC+})f;#ztB~K<Fuv{3
zILPLLCTwJiqTPL!h5^cog@V}c9t;SPYMx9aB!wOHPHLm=j8BsPJ)mn6K$nv`29MUP
z=ga8#1u9)E!2hUhx_Fa1V1cc<_<mgf%Mr(tgxFc_@$U;m3RkK>4C~$~c_*$Gl?6rU
zo>sj#*;`&$XRr35(1!pM)2iUXcp_aNd60WG{5<xF@)Pw>`WAp*mxa<IQg4Q4;V@9i
ze`p;&t2x1Cx701i0!Jm9O}xbqwRyZK%)POWp8mnT?k}@MjmMB7E@?Pe7JN{8w;CO3
zFcFkfp_Zvw(+7)qbmG}nwDsa!RFF{PZB&^cXp+<WtO?f<Qr8aj0IyLh&}==#By`cD
zser-u+X-<?_tAY0#L{BO!=HafOF9STy0RUY(AVO?RAK7l{N2u9k}Cy|sygDHw_H)Y
z_uikWxGYYxI}}og9qzf}UK%?XP|^JsMJxN(P{?AqkVzK0OE|@_j$z<l{=j9OLAt+#
zF!*P_#sR4hU>u!hh1dTk5M`+@!K8+fDjK-dY$3k5ug!xzg|#0}nM?UW1K>;@H*LN%
zzj=^l<mZmK3a=9mn0*Oq-Sp)<({V>|Cz@56?7ZS8F4&9?<TxaaIe#@n3-sQ`_hNY_
zYn;!bAZS7LC(0`wBBOH}1v-(s5P)Z$)+SHu@n*f#!iT|#8L_30r-SOK3($mGc}4=%
zKmxCNUVqmWz(u_9Aml_bUL{l61lO5#Ir{{nBL{ODGlPwF_ALzdHP1>a@1PAkMB1OB
z(EAQZ2oox)yD^9zb_V95L_YczCU@Mmu=Ef6rmE`lcWDKuR3+c`6y&{8G+a)Yv+s5G
z*3y=Xqs5!)uhTRf-nVF$N>_7|-%q!2o|#?Fr{Y~2cY=)<$zMrE6+NP6RGd+_f}7fG
z3iCto4P)}s-j-i)`$boDTRwlFde8gqpz_=EPjy~P|JACROCe=2Z-I`lTQlmWSxr7>
zEENX|q^!ZvIMlt>hU_{gYYAESiPD<9L7-q7;@&Ovd883{xtR;quR?P;2O_@^eZD`(
zzgt*hiy7w>zw<eFqW|XczI<4<p-3o5_-Mq!Hw?&Tb9#ui8b6*R=r4ta#6mm`>;t(b
zidx_U@xD_6cXzB|Dl2Z>!{5R4ij!X0Oy4V&A>i}wKOmJ3Re9E`^MCjvz3*}iW1U$3
zT!vdxM-4TO<Rcq?2djKKXw3t8>}6OJ%GR`qkyPuXksq!P@mF^e(PyeEGH!Dj2P^!Z
zha5Fyl==@zU*EaW>ebCrUU+dRm$9##Gxmt#2An1V>L<ik?}bn|^P^T+ql-?e^HEld
zbrO9s64;T7%yg#7nem)8Nj1Bol)_Y!f|<Y=4KKA>Pr=X>C!XgNarbVmvi<1TzH~nq
z>fSnki`FC9OzDpEw_}iBa;FI<KZ((80(^bsG}}xFCL`)l+zCU}*(kGKm@Jq*ZXT!@
zn^yLJwQF2|um9GbCda($*_HWc^^lNa{Frx-Xk>NI#Gz25>^GJgy=p)BQ5;VBK*PT_
zA?Ir0vM2Co@bfpk2h1hrYOnFuVwK?It{<tePgT?!D)O^@D?6<SJuLAN-6#Son@^_3
zG_Lw)TTQLckJ(1)TIF~_5O6O(rM@?`W)CUp8;_ygVaTtD|9UV15b9@6YA-ocF+;Tg
z4XhU@F{rLHc<b;LgBhRk4xDv%QhG2J5i8I&iG*(PaKFJ}`)Nk%BFwxcC1Ol>#Q5Al
z?t|4{{6EjNr^hLsq5~VH-%uY3&>tj(QI2}H7Mzg;K6D^`f7EQ|1`Z}RbtC}=02<lP
zp7I<#(gHouC&_YiUwy>4k2q2MqA=}7T1fbPzo6_@cbL()ho>&LnfcoeWuFn<0zcv+
z**ykftRZ!|;?ls;hv1;3F2^I$#^!<f_!6`Sf>=t8KDJyr*hp^Z1n{S6@b!tad%!7w
zcfGFCKFcvZF)Zr3%y;0$^I>0?_B0|?aO%seRHc|$s)3-e70MNC`ZGg00vBrw>Cz`k
zi_CnxX2&~Z@kFtB#`>y^c)~`(r1ETGYgVU*AifWc1%VP#E=#%N@`m`rXU|z5r}&re
zz8p3&4TNz=w<!p%_wQ2XxOmhL<21-9jMJ=VPJ`m~qkT7Ei7=&*oiz&=yIqyKA$Qvp
zoJ9H}p4A|If%~<mFJ2ycJ}}%-@J_-m@;$;j>=wrTF2S$*_?cV^qi=2psh0>Z@0YqV
zQEi4=g&Te5|9s1jKMk<YrRBb|bl$bDIU*?RhT9M9u*KhJK4&iUoSCn@bf7Peg3P0%
zVb-cvjRPNM>0~tO`>9W2FIa})gpw%_&5`RzwfcG%7hQ-D7!13vhcoY0TtoK7?o};i
zK{tX1mfgGGJC@zjFSYv4dc9RawSAZ;xZM1OF{q<3q{dP$!dGd4|5(4f&X5SuUai?4
zCLc@4&Pu3>K;M3Y#Xc3OFDpWrt>?b%F860Qk^8R=H#Vpzm0yU`0;E!6=*uTn@h@)=
zRZL2*T&2GQl>FZup|n34ZV-&x5mIjp6i~j<mVtG>SmdBGLmel5`uIk;%pZ@whPxl`
zFYoK#AkuIWSX9!2x3<@Ldr*<~_Aocxdclb6oL-S|9-NI&C)gSKvLPSGCz;oR%K}cR
zH`BAq|9)}WAK_j~80bFMGZVFSwe~LGoZrhZ8t;gUq#L_8AjY_LbAVNX2QrK0j(&6o
zm)$C(CzYW+Z6}mVGSb4^Uao72GO7@lmiHa^=*w#lc}pS7i3nJ4gVUJ-POq=~0!z}C
z)fsc^Yi#m|eY?5dk18vHRC}>z*J=UVs>zogKYnah!MXJ6+dESOZ#-w7JrO+Vy<J^B
zV)>m_FHBDXew!IQ@LAin@U%`?$Fa&g9*se~H~tlMYqt0T@BBnDbzWP-Rrj;$v$<J~
zj+OCH)-X$3u?N#n4K`?2wj1v2oHbCGKYV41BP}oSZP7GNo|6M;^_@c<_s2evdXHhH
zT}R#PSt+hxlxl?_6WZQuE1rqR4CU$IfmX8Qnkc2p>wSZtzRhN|?jm-`_sDQ|uC}kX
zJZv~S@6xrP-~J5teP3GeP8}&tdqDl@3<`g`EQ2u1gzFB{o@WHg@HG_zjT4Y~A*JC{
z2~Ru_vu@4KB?Z`Or(Cl=n0@M?_RNQ-?A2xR_JC*BcP5HGPDuwn`b$nknX`8GS?N~y
zn0WMtyD$$>G}YwXLioc_7L7d_EJK+r>EI*!{OM_3vw6qycq~KCY?8(1fw^eIjjX1C
z71bD{nKNr7Pp^9-WUEuhXo-^t497UpmtL(bIXUT-;^A-HFl=to=8u^_NmHoy>%4}^
zJtO2?Nbn#&uY#YgxTVI47oojYvj$}<i|WlImHnwoPnvRH*7ihyD7Up((}@F}HCyB(
zBdp5$JMY}LVa@56qOIzCM3!`eAm8Q!X`uRhK#}`(x&ZE0%FsjL1G=VZ3}2n0GDq3K
zFWe{>UX&TSe)W!|qqGYkWPGw~LbXG0$a&v&JmsyQL>h6gqTAW##!#I_t>(<F^?&YC
zKQ7nkd3Y4Jy<7Gz?Zf%M;SUozN}o2-S*RRTZ`Nj)ID2dSV2nhdGK0o5#-rr2h0wHi
zX>LudIR?El?utfV<bqwXi_e}ECrx;|r^mL3RXrP2)^|rItX4;v@9tOb+;Dx}3_J>o
z`3$5UtSaczHnj(C2Cowqr|CE&ZD12v`E|M4va>T{e)e>0a5aGxk2K{SK%Fam)epl@
zOX&t9+2W?$ucGyK_o(bvW$x*k7^yutvUBZqH)u31_>0Xp4WyTxhZZf6u*Rm;+Dqbb
zj>-m9H~JK0mKZ&o1<oH&SAg?J2Dp<T_<_yzX87b<C9wpOztuF2JJg0`Y{AqG*ZDAw
zO!Qv`>(>r&<!cb2(4GE7(NwagIdtdu&%gu!b2?w={~pYvo+Jzd)lujgmA{6|Z)24S
zn?6Q7sH4Lmu(GQ-s~O-)I&1q4w)d$YSGB8N13TZUM1DW2w@kCNa^s`WWtDk8<v;6P
zGHRe8HzEm0Tjs!Ny2ELD65d=+3WJbA{y(JI2T|0NakPVm)HfmbO-8pUTy$D247J(Q
z1<SZ;Aak+K;vKo>q^HS#^h%s&_lSw>Y&1`F>shern_M}^5QI{l-iKo~-}DmhY>pCH
zwEZfu>z`bh`hq$E(Qp1N*zB%AwoE7BZ8qd6vw-XbS}zfsj=GOMt&oxP8J&!yr<_+Q
zcZyG1u@pUIrvqKj2fUh?8D4SqjvW`7jqmId(}-<?`EUBhA6$#xBnp&d?aq$=%6dV;
zXUk*gy~6+g?mj}QT7QypA|qZ<$|4q3tMj!veBI|G#tc0kwS;i#<E^;C&Q9tRma`ej
z3~HSP&%3tsXz#oQo?(Tj9EEAZ@sL@<?JWgW=2vnpijZ5uYa?#Hr0~D%q>jU_%$D+@
z8<z<7Wx>2{XpzcEVJ1wnn1vret$p##8~73tTeW60W|DLQOT6H05<*XY)qSF@e?z&-
zv7_0iD!1^4;C4`<i0!9)xA1`|!DH7W#)D!Z?w}#(Xd~ERrx`~XiRu=m?o|`}x^;NI
zQJ*;1%>C{2odZr0=}N1C;~Vxh?7ZFVw-``V2RWw$VqJ_jmH#zT4^aOmol1U<yEn0n
z`6gr&-H7l&s}<m>womDi<6`Z9uNuFO1wN{P!z`l+Z8|p_rbJZPC!%EYc-MC~gG@K|
zimbMh8jqSQ<{M8_7&rAfr2YqZjf@drd*OBAsK30{Tom#ZOlb3GZNrczjZ2`1gZjQS
z&3$K0W~+&Tbok6_R{7H-k2#K8A{Kc$e|7sG-_qXLkaK_zH8WM4ikw2gW@v7Nf+nRu
zl2*0|b;(wN$sPV&VguB|CPu3Dr~h^zFB%hW$!X5BWX*w<V;6CYdtcv4u_Mi>pu)#7
zG+A$WYBX{Cr5im@@@8l^azURqT?TRE3LE$<(RRUT95_tA9GTisSm29SHt?<R#1JK-
ze}pCV2$}!zD)TnC(x+#6-}vK|er?oV+u9w!9ciRX@7(=PrWb?!Ly$cFn=Nx8p17mp
z?1{>5yLP`ll|TQOaQ5?i;s>JSHyaCn_%-0`0|j3s#Xnw`^1zqUc$KD#B=vuREAS*6
zk&4LC+<%#U@fWmWf@U?N-1Q-PtZ~W#jDn+>D0Gq>6xIo{xy1L`d6$duWBWQe1=wuS
zEyBGwB!b=U;ni!kBe!5^!BD>=uhDC|xD<?p((uoHh=sR1;BY96kj)_5s@62fOu26I
z$|j~c?$a7T#eC8RF^hO1ZrEs=l{#K2vRH<#NwN)6S#xX;m8%Z+Yj#z6l&pKN9<Z6&
z-3sQ9uPX_&LU=1@wJ}gSe7cS$wSjpht2kJhlAg|A3*#D+cr2y$!o%<C47;3Xacyf|
zTN|XD_z2egkJSARnJjjeZ^4wP@8$2l1%|%9zRjnv(yt<@H)q;tc;RFt<K7w-2V0@=
z86Er%Wh)u=f*86n>A<yV8K8i%y;yV|1MPSsxg2|+lRtcLz)}LICJR5-6lrRDs%~Xj
z^hRsh?wSXg?!Dt_2Q6K8_v*arz&~dZ1}swdnPw|&aJ#zs{BBt}<54w|CSJsM7-1RN
z`9q<vC2u8WbvH-hXFY?*!q1~Z_fF?!MO@|qwD(}Pf6K4(9Dj~ircZR>{whg?=k}~`
z5<N0JdrnhaIHVrro-;SYs|+Gm!q4x?ZiXp;4*5jN0q7{3&D$7=ftSxZl#yKHzpC$b
zf6nb^Lt)$~|8i_cwbIiO>K)mIH%d3viPE1)i6hSsy?8ck|Ks!5FmfW`U&4)Ple15h
z1L9a18UUD`3F>*$oEsUSy*v(+QGnfLwIm`V$%27Jrib#5DOG#lbUU@F*a4Z111r(@
zu~}J>4h!#9bd_6K?kS7e9(3Y_evQGk7{p18{s>Q<qh6s+uQTEQ!CJyNA&dXOGwBEW
z;-49D7S`Y_Ot^v9w}Hgg)2*>?8RjWYI?+RTpH=E<m_|XBzWeS~*7Zzyc<7aUrIPoS
zw>`Tvu1VcY8?vcKP!41!^afW0R1!ai9B1lt`#)^%3RkTjYbJp=*<>bIglE5Lk$$~K
z;=IK*Q`t`U$UNBl8XWN)LoeTWn*92QpkpDF^hFf%6e6z^qdUi*mZ^W3=ALEO(LrlV
zz0ETMRz(nYW)c=O&~@Bdwc_rO@OFn5@tpEscs_~(ED{(DzLBY`pfg$Q7G~EskbkXR
zn|1AB*8xS1gPh)z5D$U*BT`Qv_cV0x@>5%*C(ETfvWkY%?y&2u@!Y7A;g*JOOK)g3
zUcv{YPPJZmv$|yK8z=6<sD~#mFH1hOJO=rah57<Flsf8<t^xONSPLTD8?|f*SPt~)
z9`$RyT_J=zn6a~o0x@_IFyuHthm9SR3uA=NyX3kx`;5i6Pt`5&x3x~5${YqKIlGbt
z!M;1dD(|}V@#@>zKT#(P1K~1BSiJN*qpA?vsE1syj2$xTVO0(0)2u7pu*YCMa;oYw
zFT%7f%wG1@S>vx8fB&O?kvYga9wPPI8S)H4Dd#*x{s6g$j0(`_4SB2a2$ZHSLDh*$
zR#M()XlwHOw7N_7sl{B`ZgCH><o3uuwrPLrcS<&M<}>qej|7{hy>ReNFOInGALP|`
z8k}%%aq#c034=-UVx&S$E|M)mKGuONz*}<udhG?M`T-oHs);VrjNg84b%}xjfY|jj
zuEXFDsHeJQLs<cC&5{sNn8%~4yf}qk@l)C1)P^x?W3hhlK*y2ZiT15M`}^%qeb+15
zWqLBFD26}pFEcUz1X5o`zn3+t)gXM?xwnmo)W@xl=Z6j|A|KI!!3UQceE;1P^CGe3
zDzO>&k-Io-#Uk2&cE8i6NK%n2hE03b=PZh@1)KQZ%_!JzUm)GpTmBrSjp>m~_2AV-
zgWsDu&H-|hLo<C^Gw?AOwlw^|o{k*tpu@kwb>Se-e3XF~YCJHyoH3eveMBm26u@w|
zrb&;G;>UMJ0v2`MSx*GsdiTSrsVAZ!MKQzpWnH?}gt@)auUg-J?9hY0RSAQt&GcUX
zF~V#beei4VSC`RCtz%BNzbt9KSA8Fp0&_SadoWv8Q2DPl5zCt+pr2wtup@o*&$ml=
z=&&hBR;21On%Ibxjj5u+w`mr7qQ4|s4j0QP&uF#2;JT<*QdChT;W#^>5+#!2yd>YB
z?Q`%<1r$(3Em_y3Z8tmE#{xs_2HRH}S72XljiEdIt*8I@fHvxsE>f=}mZt(GKrE$`
zy4O*b`e$uEU*|9pj2B{MzPRxAh_B!xu}hiCrt2TZO$I?a9G`6;r*Ls<sA^46lyw(&
z*BAud8K&LJ_4BHdfV=P(#Q2|8{M>J6yhBi58NQrB7#@>L2*WUF2@aw*>a#ukc?1);
zx&F@85$#AO43!+?Hv9Z9z}-mECZ@5~{4XTVyNYDosBi9LvzjDdZea)Vv-;0Px8J=U
z^2%}V3=up}cuBDqAOPV5H*FK+r1&D>7g&@bPJ^IVy*OZysdP`N@fj2t;tw~dICiNc
zsf)qSSqc;$C`5m!s9i1bhzU{)PlWLU^VGwdeKmQnswmvIgh|g|+@zT*Z62VzY-s-=
zLCCW~`EmM8{ujLY{iN}5)%LO2nq5kd5}W2LuC913)SnawOQEQ>c&KiDpR=d=Kvu{N
zuJo;c&#Erj_P&q^l{GW4H?X@9!Y5E6Km6UlnGX6S6c^-w&~WJN$7Uds%F#4fo=8wO
zg?x8P2Z!`1?ho;+8~l2@dO3l7qVz!CbDKhbaY{#PB$jtrfBX`WGRP;>!xs8BqGw_l
zCAa^sErTm12ydK7Z*L83)t6PDC?ji#xmRh8j&RZhaPZ|m#I-Q>Jm@1tqe3!We3jOF
z8$K}u+6&Yv3d+d2Ko<#Y*Z6*-3=^1^!UOyUQ}q5Xqc8qvOUoIPplD;O8y;%Ui$krS
z$<$>TjTHlyJ;0G`0b=k%0j*=+hZn)1Zj;2r%S{j)WV-E)@Lb~E{1cbf;<};=J<+V1
zRC^Yse%lo)Dz@_8nK0>53s<|Ng9aP+4?4QTCD5&Vnv)>xBi10df+~C@b&J9OV^Xv8
z#Ymn-RaIqr(0E9|V1rDzW|!iY$jaWG?eQ#}zF;KV?Zx&LK~p8#TPbh8(MRxPr@t0}
zJ2c6%ho;GCsbG$|d@sBopa8rD)p8Zo|EH-tK$y!EPZQ?O0*mpkV45-abrpr7Tsbz)
z-m^eRcF{C@@5u&eAu;f;$4EU7jU!yG8?g!Hs5#oqReiibv`kTyVP~C^_Z2QuGUni^
z^?>3sxfKk3f83|R7v|pz7Pdjv;CZ8zpQ+?5_Ec79m~b8T^oq>=3CHZk_j|@mc7*VB
zKDtA`8AZ-(|I4ri0RGcdROc_l79((T>4q_bQ6!D=R}XRx4SJ9g2J|3L!mk@*T%qg~
zdxqbYXP~_Vb0%odGS!)wI_oYwU@p$Uytl&8D_fbqdys3bYw~9=4$JB?IniN(L19rL
zvj+X$*e);c`!9CwP$&6rfupjZh}f13+Y^X3*8zgGhimUJJ~nq!KbUFuBK4u-;|ybX
z1dn9*GgKOwH+fbmdzPaP!QJ7o^2b7iiJb6gc60y07jR9dO3V)8APk?wO_A-!RytA>
z3vo?Im_@QMXo{IE%3<jSueNghebDP(<u|mUw*T%O>3qD<&ybgkOI01jQn!4*%zo0<
zAxnLzivR#IV-+6Dv%1}Sv!lpUu42`5u#@zewO6rU(BqL+SNnaoXKiEAcPZYPdMkEL
z44E|EoS}6Aa>Xtgx}7rxvNuA)ls0~%{L`O;<N+uD69sDA9L;nQ(j5sBNaGZ<Djsss
z9_5BgxeKGdo0|@;SfAc;K_XqZMh7j8(4^TV=XfSIW#Y?`1&4wp=k4_L8D66D-lGYm
zWztVNAADmN2qJ&Ugt3LAL-0&h+A`;}gJNlvZ$H%eB~ZL_VJlL(W4qBe)yg&om93`~
z&*gSEegi}06`l^hnE(5%o3y#@*DUd<ZGB@_5&An?qH?zNTv7ko3v)-RA-G&-$Wza#
zD;*Y)PqR$^tmoKv9g^~&0PlI7f578Kr-y=0Ps(PkAN^UW_=lTbfWK6FC;f)<%^bJi
zuhRdBBn(D?2%xbbpG=o|@U_fVYpLmn7G!SSLXapea^8ixJtA!c4bqM@??-%QlQ@O%
z(#><3o`NvDv8irtR4!)^et!P1vte?92}@MkKWc2g!zp_8pPt8<6!O=I4t!G-Ij6DU
zT~$l*cbdb)d28x=Y-`=VxsMJcYFzl;6;qO=&{5T@2Nj*;Q5g$)%OMaae%ogkblpSW
zH3SLhvOV<v{qkrZpPthPm1+v@jewlv2i3-GZJPK5BE3$|^%xXN<NPrYIn4wsO{3GK
z4NhzN!1ZW$W!y(!WV6!iHsXoo0-<4$Sby54DN}P)!^BI2PfvI<+#Ylphv;~vtA{&O
z2lc-IYnMT5d=q?yLeZg%X9l1!=<5z|vt&Hl(5ttcr32G9tyN13*nF$L^{Q2Qt&P%v
z;z8PlI&<`HZglaHf-?sv2bO^>ae3bxLl$exXHGY%A49mA`!kMU#^Mq;!+K+3NpMxc
zH^1$FJnvlm_+-$c_#X=g565owF2A?(xWVSdK=FoB3RtM4hv`pQ>Ur8MS6lLlSk&4S
z!coi?6%*0@d^@gpa~eD*B|U@Kr1ZCLM&^@?anrYrrEX|zL*7>s+gy%YHU7hf!XGx2
z-tZ0b={N1We^{2&=9GG7n$B6lkPnLSl^scp<A~G=%tm3GdUBLwO~_K7IW`&NOqbJO
zekVSr08v|i%~?eoNZ)*)41A8Kp>6e~K~K1L@rYH)a8Iz~M2+f3kmQG;Gt%_pRabJu
zXMBXCZ?+nO1Vb)BN-Ib0!ZddLKG~uPS!|sH%4!-j#;@<}<+z#x_k%n?m}}UY<?ekr
z+yku2=VQ%av8{M~C+&(TNEzj6bW(HX*RX3xf`6C(^W0|YfDH8#<6na>Ss)y@PZ{cB
zoQYZv^2Jy+kSoW|vlfwaxZd?rS_3W3Lf1Y^Y)t4WX`dkthe33x%xDzP;{GVxg5G8a
z9_lSA5m~l#_W5z|*w%g(`0&b`PMy~*d>P1;L6p<3Sr2bu6S<IV6NpTjb0g(hO&PJi
zvZm+y(!@qEsbzHWBCZ4HNhwYz*BxRHScoBk%`n@Loqe2dXJOH2D>Jy88KqV^s4702
z`W>~qNi9a|k0Nrh0Ns<3K}VTTAc6TwLs+FBF2TG9eG>1~(NE<q?IITfugclfs8(Ib
zzAfWc2S{Ak!c-vFWNmVx+jZ^F9#-o<QM@qyf$O)1ZUq&%#Pr!&t=A#O|34>w+JxbB
zft(8Prhb_-xRfgfN(RTk;)FiOnf-&pb2-D1u*KZ#X&C{l`iW&Fho7&ytj>y1(h^zo
zoLTbrlLmHWM~0@-la+c8?v4+sR#(UE=`|hOeV;<|VbwtAl{4z035S8{*#OWV2iRfs
z<`3wkQp!7tWu=Q1voK+dvvpzPiK`=|aTyv?nAIev;qJ}nijv-oMP`Spsw>bx@gG~6
z#v1{!nqGc6apk8O+QnSZ_d~lNb`v+N0W>?*WF)9PP$5f-$Ti&C8zKITn<#fs8QmG-
zFX-E#I(kLZD7{f4@3;W4`9{&%LQrFPL@QL02fFWG42Z~mRq6<t7YC77!zMz&6JMyk
z4*6NG#X4=4vzwB0v5uzwiNDUD2*hM5FjhN-m{Bw$yal46gZJxn(f7HS<rcIknSQwZ
z9)2ur)tjQT`CIZilJKXaV?qo4EdZ(tJ*nh;7F_Sf;3<o=;$XTcy+py*dV^}xY-}D|
zRwhxc4ZF+z@lW*=vz%P&;RmoSnFe@pw9n3LpPq>&H7-i?NVlK=90=@=$n~l(84IM4
zfr$LR0QF@&)u=P!FDD@NHm<h(CzW{{@e;I1y%4We04Zh@_RneAmZ3?;Hu0i5ePVN;
z^G12JPU{pWf$%nelUB(4@<C5vZ;i*bQ)hg#`)`*9jr>sfOy750XNq%w`ltX3d*s10
zSvKTTAIH;^_MJ@o+$d-q^!^-h$ivoS<rN=J5zkoMGw`PGX}!}^S-`XMn_#~EW?|;n
z)DKG_>_V)F?E&ttp;#_LN~wTtQaDR_9$JC;cstb%mBGly8(cqcw7+n0d+!8eNwD-y
zp<Fx{e=lnoSiS)Nk#4ps#}5}UQB_OH&3BVSM`sJ{(hI+zp>;+6+e3Mt82z3@EYh1c
z3lCIdJ+4;#CpPS<%7%^vnNH0z)NL1*F1{|qBT2)Nj`{eYGBDkm@V|yf`HJpg#%WiN
zFq*b?+XCluNP4o`LG4^QS#>hc`e<2<4%$Cmwb7Y$Aoa)Krp`}i6R~0Z0n^In45@20
zvJ*dyS<6|e<ecETuR6m++?o(HW&lrYWzDOJ{7%`<Zj`RNo3C^^wk4ii3R4eZmS<0d
zXQ<(w`kTH%S&vWHm0zX55dRN}6g<Y6Bh!zP-zw9C<c3~pt%}DI1|gB2M^Z?M>E7CF
zI1{YH;zdluVGBKf2OqShGGE4(Gz@$u!k9^a1gwZ_2s!!_erzwcNP4iS_)sBk8tyYy
zc$GRn2<Vs!h|0ujy>P=-?Y&UZCRIu3hGjjckw8S6?(}l&p`&M4l$K?B;Z{XMk0Z_u
ze_k1-(O9m!vdzKgOeghM3geGTbq(Hpjf4zNlmW9YH*-0Adc&FXi7@RoS3BY;Jdf{6
zWCy!#S;^vsJdZ(t>pgv@U9UtTI~rR3V*5Xq6#V?+Mf2Kt=~ovY(VhOP2`u_|ix(`Y
zCa1CAbPY}gVd`t>q9XVjdIS9#qP~jP-sLTVQMcZHcz)4u*@+EfsTMBX&Ors-No5Cw
z+aM{V2NU%8yxCZ}{g+R-3`T&LXc70qkZ(+{?ZePfWzD^+^qqgP8=;y%3xun&C&|uf
zWSjvYX>3%13H|Usj5)aX*L?1ZU7h8E3$n#E`fP<}J7%1v^mJ>^R>SjsWHG1f`ObTB
zo5>E%{7X@{*b=C!6rD9a+|%RLyPjeXwHg`vJr(SZ<RA)egPCFmnr*~siK{M1cP$lX
z`R43Avwl9rbF9hqm81VFiQ08TXGBMQ9tCSj3U>)G_a5y!99%gSm~?tV-^nXw%-wIs
zjbPuOs6Qd~kub#x0L0!5X%4B|gB?@*K^9;+A~UO70W;{yB~NX$kw$t7pVH+_y-qN|
zPMMjKC7n#-kU%7<XGqz%TjfIBJ-o!BaaVCbbfuT(%yqS%<(FW_6APAz(=+2><%4SB
zKch4j!}x2%zj2T=n2cru4!ZNYkGBLZQ?fE_Whr1vCQ@_&4r-yJ7x4<FzAresSGi||
z3-mqia8uqkN)s{_0&2U$BV!Kk;N4rU@^{{rEwAmF@OKQM=uF-De@A7s|7WPDv!V%@
z7*xU_V@D?p@!P8{o<NLQLscQFi7c4ksc|8@?WJ#%LQ6tkW$T;me1I_<IQn=n7))L=
z?*83Bs>#vfr>uo7(uCsgf>%9E(ji{Kp;92OFzQf!06Y6Gy6B&I<`w7-0d}m#o{pw+
z`Evqe2lt}1^E|7oFzW5cY^CRI_BwLC;1Pd5`dV`F{d%GJekkGRDvG%FEa=>}eqaBe
zsExh<so3uSI?(ceM)m)-EB|HV3l0nasly{5Iu7-VKp)7wAgfqIEYhgGwRz;GA(Me+
z_<=zyL}~m`IX3_4Fs+bo@SK1Ft(c+m?yriMTh)sPhHUkt{LsC>7U0=ty6Yz_#q$S(
zuVkMrDv)(>Zat$QMGk~x2I!?fQFcyhFN!g<Is>pM`5Y0v-AsRMTnXXifi~qD9B}{S
zxoE5#(R7F=J%?~Uh#hlf^@oad6i=}`7P|d4p#w|e8s8XlXbq1E@4`mJy79ybv?1tz
zhr-OygERB2t7(kR)Jupl(;d`}$dCnSlCsDZkqr#;IQ0Vo<|Mx%au{$F*Z|T?a&D^T
z5Kjj;yV|bc#DhmVwXrs;p>FZds<CfTC2tRIhrU(9%+{c=-O20E&AueWB?o#4hd>*q
zYwlGTiOidfEc0`DA*Wyd$6wxR_4klc*{Djx;=e=;){CK4n=ob4ESyIy$909g9jN4d
z&3A!8C0sKv%u{xeN0)Q&*7zx+xAu>CV%zg_3-ICtRXyeHUYo*kyUX|bj#uQpWtRUL
z!>BWp;VWAS!_UYk?^__&N=74>npE^i_o!KAvIea^w)|mo{w0;2xl^NYReb#K*E46S
z()vWN@8k!H9wdbCTA=fB0|Zh!JQ8chQ5hYn_hQIz2h6~W(agOdil>1$y(|T6jP=nq
z&E6q{%-PR}9E+Oa?40SzX{lS<dk48sL@2FRGz`pyTF0)M?d-GHhbF6T6e^cpYg48&
z=8c@AP$%M**7!;XV&P!31zqB7cMIf^;^W03PEC%kMftK9pgBikYF2=2oR#nIQF^z=
z8AdpBTbJ_zMcUCXHmuCtgV7R1B`a86oP+uv?x3tOW3z8k82<o4kbu<9(U=l@wD%DC
zEvb78a>2p^S6w3?vlg$fo5TCO)Ag&Nb9Crs2PxW*De0~H#*<B^@bn{Gmi`~+-ZZSK
zvuzg!5m6DMB2YnyiinDkstlDWDk>^s!~q0^R8b+sm|8(1gakn*5mRd`k64I`fC?ch
zlQKmJLzOCXkRW8BRT%;+72+yMR=<nqd7t<D-s5=p{;`j5AAA2&f4GvB`@XOH8qNWY
z4^bAW=#3oXfnZSR|E{^na4=>{ZAfum7Jm>o8V`~aJ|xsu(uC6o@zyVrC!Fy*SsMxD
z>W(7Qt?3>>%9VXg0@>@<$Nj!%V(1GQ0%5)7QxQ~dM(%IT;{u)*4(^Hxk6(6p)wd<r
zz&gfyeK&22Y=Uxp$~RY(-sDHk(8~6|{_I?rdha}S!OuVY2OnOs@6_p?hyGf1Wbrz^
zd5OeoI_k{E7WAsWVs(<Axwdk}mZ~dSZoQ@EBAO&AzgUGt?BmG4T$#e9gXvvsGS~{X
z$%t7Bt}tx5(((4gk(@Ji#bfLx(=mO{k`2@`9?`GUN$vBrD*0gO9=$K#Dm5(rPIiNH
zO#8cHRlbGmI9ctXap^0^13F|$Elt+Gg1Hv;my*(~J&}(YOnq6F5AdA@oy;H^+xT5n
z<&CWH9c5`ppKRG%M9uN2nsMY&E)_<ZU+hX`?PoWX2@pTxJL<5x#^l2!ly<GSe!eWQ
zm7F12>gB*_-_bM8$+BLAOg7ax=xs+YU5w`9K4A+xHGu`AaS<sFAF!^T7^Aq!eU+I<
zmA2E(4?(_h%*ap};P$n_C%{Egu?5i9nJce_mx#gMu{I#t;~AibWpLeV39FrL&iaOd
zYnAA;EKoZc=UO>`Iddf%FDF|^y4)NKTaHZsl2ep2T~oI#GH(O&p~z}5b#^L2igX%e
z_3iA7zKi1!rGtFbwsqV@X^AahBUDuq+MwRVT!a3h3>>Z(D8r8{>FJm=3iJ{a<1Aca
z{U*&$G*BkNp=-OFEo`+_Dbe%GiTdKGoRqq2G<GqXcBGdO<GFA2tpm=lbDJjzGt7V&
zfJ-qc9`f7;9QA(9e)PP0EpsvItTd5+Oa&GlF#45M4V*MD9C|{&$9d4^XhoOt?UJal
zr5#hRnA>Hchkg4h>}erFi`D_B;ta9ySgIi{erLzDpNF32&BIwMZ5#Li5*+c>Z0Ron
zkTLP!f%sRRqxJ@CKJ$dKz4>pQMB+lPZx~-%C6>Tqv6r*2#gM<!97k|z9`w>6@tBt#
zGCe$EZQ3#6eBwSMP#C;FAeeP0pQ7p>a(pCrAA~FPSA&mLniaF@-&<`8wirImgR8m>
z5Jo4>2GmsPEn_zm=2G0eDv*$ddTW$I;YR`mFy7CgDVUH|PG3mLIrp=CV5e`0k<X6m
zUYf1Q!}($VZ%$SuQg?-98AXg3jHYQ!`u?@#@4AR5Ci@R1Tu^O-i^vv);qh}=77S?r
zVOzm~sOY6&i6&N#2RR=kFB=qKhN6ZxD1FlS(_0lc1N%x9Qwdwoa7dj_k!PK<Ttwp6
zZ|DD{r_{rYp{We5))su3U_2SI0c%MvF`_+{JBPKhRqgYMZ4k2wNp1w0f&`hsgyG&o
zUWC~*x;|q|$wp|zeu&S3Azc;xG&iEktP*KvpAKj9j``Ut>Uy7zNb#M-mq6))AgGq5
zHIP!R=O(MxXme}hn4Z!>v!SsTiCO(JhKW3|iES1Y=<?`c6ij=;A<SPkpbZS{ou(a_
zm{1)Xj`y_OcRjM4Y!o?To;szl-}OWXI}Pc|C?B;;8>g$CHOsU)7?Jf>psO)JY+5ZO
z&GzldLu<RSrIEoAmziMru+UFNScY~rehx;wE=Qb}3FUR>fn6U{+neKJQgeBuZo7-U
zZpcG;Ea7hCO4xE8%r^2r5=*@)ke~?#sURoqW1#SHpQVj!l^m$!xhbG0jIHmdc)4^&
z*9CvsULz`ZH?j}tJLg1JWNqH#9O~8`NZa7)?qA*IIPT1tQs2ohh>8o#SJ8I#=xO(}
zWj)|)N}ll%jKj;M4<eA#-`0bn%j_@&6lJzXs9d$MI4393b&yz)`UMRx5+lGU$Ew&!
zV5?QgOE=dWpuTU&XanegGVrB%kefI~jgK@DdYKBU&`X8X8|b;M=gvCiQjd!6b!7V@
zvMwj1m3n{u*J;lafwY(S&PNrj<$HaN^>P;zDfATU6=;V<S7V11w!XAppv1T*<iykw
zw(`udoK}<$eFwb$=*4Weh>U68mIH_<kCQsDyeh}*nz)5moVA+0B!qDxs6&TXL0Srj
zVii%EZEcTy5XcfpDjn_3vq0X9tS-I$FchUqIf)u8xqFDi$(97S(cx{%*em6JCe2}H
zB5Bfxz0v$7Xhd)q*jP(8TI6LtdN=A)*#|!H8@R~1>{-0LGx|uq7e2x-aG2cCzDRTN
ziS{2DLCnOVhwm{@cR3NQ(FhXqHh-9ORTNu2Q7p>>N(e40&*{f*S^Z_2LAq_XjT_U|
z;x*-BrOlB%aGxfplabw%vsWN}4qEjxR`P^D-YTP#%^B<?9kxn>P?Ai<c^D0IaasFB
zzNbY@TRFgt8RuGqkT2;@eK+V%bq8Ah2pbw*_uJF=+fG;gr1ux(ZOOp`=`Vt(*$NzT
z0ep-m!AoL3LTKe!pz*^Vg1H)p6UzAQUA32_d_$DDAE~-h8y*v%&#(`BQiF`5Wg)#4
z>Gyg(0@)|nCC5hG{7P@iYO?0E1}IO3t<k}LgpMa4XuKK|JvsTM;3_shTV)H!Z0^j*
z%hSJ?DXSXkDIoeqQQ{lp3bK9yOsyO@AMI|ex9*;%*&XeQ@wIpFN!?3u@;mueVTXp4
zKUTlICnmxCAZ$dN;D41^#7;hD1es(~7}h{s3JXfs2T!1Hwb}JJ&3C{7ggy9z&!}mV
zSa|5mNEsI>H&9C$dlFMv)*Vbd?rJn`H-1s%;!oBKp7sznPEDCx+!8z-txmlce_=uQ
z#_}gPUwHO7tmH<4l*@v=JLv@0g*UBVj=h5LTE7U4lbj1cR?04^HUbHk^<DA$YHX}{
zyF9^87-$jjB0=Vf^SjyPW!_WHSsLXJ9h3m|0j}*RrMh;>!062G+X+#+vw5{QJopHF
zil;MRV*^1G$6jtXo{e}9gM;=pmI+tRx$Z$%=FdKV9plzVav#00`}&;+QDKgq&g(sh
zvQT@!&hjx&8==LzXI-=c-@%g%$J*_@v7Gvcx^gmd9zxxKY5^JpAJu@i!YW&9Z+n?A
z4I#ILDdyo)hHn#CFc`_mso^2Xtw7wi0$(M3TJ8A=S=Q3VzUJV$IlvQ(p}ASU%Rbbp
z+4W!~HYcozdcsRkNKM3t!#7_Kf$s(vIbc7_p&XBq^Ubhd$#XDAR3ev*e@4=VW3L0k
zAzxOM#9E8C1t_yYQLf%n`9VN4u9CBHVQ&i2h~2fKf!#<|TJ-M~Pr9aj4ZXjsPOZ97
zLXEp?@ZqCoMLT?Zkv7fC2vXK^0Y{=IIMbd&o>RXT)ENa**zFW?RRen-<ARKro$iE7
z{~i*d8B$g>d*Mj%xm@}4Z)tcxL5JhC@1+=$ahNxw+Clp>prP#@j_YZ(pZ*<J)e!Ig
zS9~7+qul>@)&IZ9EBv1tA%6a-IHC4n&{gGNZR&!(VLA2^rU*DD1&x&xbjf2mr%uKz
zmQ>tvz215(si!@Pa3K4k15Z7oh>fhia&YgdzKg|MpKrr`zM-trSirW^KaKQVt*FBZ
zVSMSTG}+$GU*r~;#q?C(Y@C5>$8z`et>Ja$T^bmQ&zEGBEc`2VNIr11leXsi=<+6`
z*hq)Tb2?k;Xo>_g)B|I;5U^^((^K)9Iv4}5iiIux@^76^vst^Iv;i5+d<l_oa??X$
zr#vA}?W%{|U#3D~?%O7YS+F@9-H6jJp{EMag!-@8f2tC3|J$BS<P%WWK5YJ^(hge?
z4}-_PYb-C6BXr}mk~!_tU#GbXQJW(*P(DcU^BKFl{p-6th-}{bpm)JkYXa7<bg8V?
zwq)q{r73n5JaF@>;ScOp_3B_(*Xf~Quzg^sf=|c-;jB+cMLYO}+y*O<@BY~l(gMRY
z=`du-rZC`_-X)i@735*QVHCCr2^8WMqtDu#XB;nI($A~TTMm5q;TH13n8Enn<^f;K
z#J3*F9JaKYhuJ?triCLNXx`YaOyQ5zdMm#pW8z4I83RbV{E3JUAjLOI;D$q*nJ|q1
z17uOR1Pe6ghN`pG@Z~N?lhJi4Rmn`q(aOBCWF+(;cYv_yJlZ(cc$49N7&+S7G8bX@
z2TwR`cJMx$9a4pa47z4acsNk4e!Jh^)JKrH!xT9iTMY?w5)qd844MsPoV^^Dd>z#8
z7*SfnhU_z$O^1OjNnr<w9Ct)jCgaXw?guHxaptN*G&S;+Xu<;!)iQ2U{jw1^?9rkn
zyUgxflGhORn&r34ZK-9l4<hyx?%`hU0os9az0Z}2L?9wcC3JMXK?9`qRf^1ELOQqH
znF9u~;mX6(p%+NaVP!<>M!P<O#}YQE)!U^qsRd)^dCQ+w-8tMBJ-B16F?m~_r$e*i
zikMe_pEkjxmHO)t%i{T{8xdPzK&M{tAewuvC;Kik@iqOq>ScTSqYIbToG&Zj)eM33
zbB3o-cbQ*I4DIYQx7!n|(mm33HJuRrRs)<2Uq&B?>|GxRKT4{Gt-YsNHO!u)*`Teh
zU&-LgZ`~;Uw1jIlieFffj;#S+{N;NvV6-s4StK3}#<)BRck#5*YWgxp+*U^?{^Cfn
z$7b~8*iPlVB0joPZ|0x~UVQ|RbphG=Q8Rg5<rewJ48oLRGlsPZtBDOb%aEuU?O;Jk
zm6_Nv`@GzcX0komzjtlc#<OQc(>(m1s~;HLL*Rg6n>PXDU9cvH-$(zs_O{>@K^%`Q
zgszI}UWZ2rG6|@PN<ot^Im^wuLY5g12UdyV$Xyz`GO#K9r3LRg=iWQ2MUSh9Xf_dE
zp^PcK9lj9ceolW#iOLc0ElgzZwswKFe@K-6WMPo3@#mpFt-!X6m*?7T?~TD3GuC#?
z@L3x7^YS;}i(XS^N$31A@h;FrWmCf*xR8pY4ry<a_U23+`*7@<qb_zTZ)GpLDn>yM
z`O~XS`?Pp8nBUKo5XU8A^P8c6S;uDMa>4L|eCLl{A83+43NId<w@ZgjhD5ALW7ehu
z@Ilfg?2W*J9f1=+W?P_}{bGkx?<s2<>fMl!sm`1gBXNI1OM#55T~NX}px%Y3xL%L$
zks$_I9;2G&Ja}{IL}>_mb+jXE?eLCkW83h2NoA2{1*9BvUn|Mu+3KAPf^;$ivjv#e
z?O_m?V10wm>MP8v5|YdrYoU>TRH;gim+9B{c#z~YYX>{uZl|we9>pm34xS@8o-OYm
zpBixI?TC+Dq4zl)n{NoqGN?^wLs)!Qd{Fxjb`(`&&Gb+bli}XXZ)Po5TBk|1^wt^N
z^>V!R>*`;I_Oq5hdEVo(wHS>!_$)_w_(?BM{C4K;7oVQ;tN_)e=`6xF9rYcU;KRJ)
zpEK9`wU`iJVbIXt|F=#6Xq|)7Oe-mwxEPy<#tZxE^^_!GosCbj{Nt4hj_#P3tEkpj
zPFuoD$xfQ0eXnjZo3TpC{g5xu3U1qvh}-TR8_gct(6P;n3_rCcy8&W8KoTL^&sC#T
z^*XG_yxtR~4zrW2SD~EK`C}FY(5O@5ywNlnKb^ePgRBgegjKN@jS$YuvV3><Flmn%
zf&K{gAp86qu)E4z^+Z&9y(a!X<E&l}oB<GoKkuV4=~i8Zk7H@#wRwUFPpaIm3955}
zWjW1VHk}0(P$JV;Y6R)f(TPX2;wWsh$eFur<h$*$lm`RQ@H<u68U4JpBJ^-T&(yn%
z??$MP#w?B*Aa=l>Vc#p#m;_?R$KdhNOoBE=aAuZ$W>%~OH{oW|WwJr7KH^SBwAq(E
z{FUarMT&Y8M#vt-D|0x@q^bU^&H%}{*Otz5s!`lW@1C<I6$C@7YcN0cw;UC>U}R{c
za=rn4RfJ4J33lT|H4SUJ0WM6>dOvdNS2K!R*-JEba*)`|3_(~G01yDnHB6_Db9}EI
z+2mcrLzHt&>6mX@dAop;v+Hqxa8SrtT<O!2k<a~+)jk<I#9dH}qg!Eme@80mH&mTR
z%v;DN%zY3ZU1b6|*>jjqP|4V!RQaT(ICzwd^YA<&?R+#cv=$L@9J3!$>Q_~DuIwAv
z35joWr|omM+99?apmc5{t|3b0e6UR!zX1EwP@Chm2zyI>#%s^2rJTR7Ip1CHjJCF5
ztHEGQO0(aV*2vOBFH325jiMZ%^s^4reisfZ4K;gedy9H#SlfyF1B{E7;o73}yd@8G
zSaPN@1dJlKG~2BmzGJF54St~|nnNf_X+|>m^c`bB_M2ppCUlsgv6WNp*Nw+y5lBi-
zs?)_zjeox30HxH)D$YJ(?dKz%5g@Z(>nY=fQ6;#MyZA%_a-OR(W2<Jf_)Mk)s*BjE
zj*wO`s)a8xVh`{dy5+7Jnym@a1U#wM+DcSwb)R9ktHZf1S~;)kQ7AZZ22a$Kkm&iJ
zW*m5ewDIyswf^xuDn*Lme((C%d}mIg7odQWVzF+q!T1R^jrB%SVQ^Kmsf5wiC^2BI
zp$tKFmgeCZdpd$IL0R&*>RqB!9g;)+MaQWYtlY=%M}yDYVaF5&MfFvFHxd}!lBqvD
zD%yts1b6C^op8C}L6V}332z`YRl0-HItUH=up8n8()-+nL}`JfYA12ImqDcU%5E=H
zjVtOd!(Xmn0_vH%&qS<M0}Og|n5Pmd%?#!i+h5GBanGtnESu5bd7OLXu+f~Kf%`Xx
zTN?HKCvjT3Bhyay1lJt*|D9fa0??rmK;@E3v34S|zdaLQe&D8h|Hv#P(F*GbGeLAJ
z&>J#8w~tMKGPX2H7M{~kV+uzs+LN8sTb;9feUw?*9Opf$g8aebp(s13(<$DbiyO57
z7e)tm<F|Ox+B%3!`{6xpoN{qNz0vI%WOEPFBTCMJ{D&0Gq7#_W;_d*YsUr86KC^0T
zfKgb6nry4=iJ=T%Z)_PpE{e{ww!D-6pl90C>s3Sz$m>Abm1NFtps~+@I@NHyVp2{Q
zb9O0Xg_4C>pJa&x%L$DK+3LJ|N;BMi>Mal-O?mtZkUmGdr$Q~dgL+clWH;RoYiqtJ
zj^X9MlJ)1;b(I(w(EiY2@2rRWB>AC0`V(N00<Ts`^kD;m6rTBr+q_3?8D~xi(@t5H
z@`v(b9gVUvClI2bY)#)3qntL!;lT8XiszyjoQsjm(B5-zc*Bji!0yWvV!^qO8Zd_3
z2j7|rdb0Pu=CgXgLnRHjtcfTW-@?(?>_A%6CN-BHkV7S(EX=ROw9gp}HcL4ZqcHdH
zmUWcBq3;mMs(Q<_E{ey<Wj&I{zG~}hd5${TVf6EV{I-tef@HkO1ojn!BhPN;q!%^B
zO+(&g)c{5b_47%ljO;^Cvk!DRDZE>(*LB%+)^57b`=ciiXp9>zcoTQ-hm4xX5z{oj
zCA&_@w0rb49WdDZCnoo!K$=EGzOx&*RIg$;c-EU^ui51v3Wg_B!HdFHj>`yeyI7Qu
z+BXpw&o(_S$PJnVUoiv9`xHR+yzNwPRoBI5o@dKw-aC4_*qfYu9WJ&XdEpl|yszV>
z`y{$CP_u#vSIJ-60;s>qD*$Fo=obb9-F1sRuw}qgufatnhE|QQ)C%92<HkrnpmZ#j
zYXgre4`j~`M2<Dfrn+g-ew)_z@TVPuf4xa5@@BImb$Rf}Yp{};L}?zo4Di-)vEYCq
zziW)Vgk`QdfUc6M1!-=n+;Ay=DXR8Sx?~rU+aE?^TRLO-3rDgS4+Mcq!2N;upQ=k-
z;!1CpP{g^VZ@hgi!d^U1ykw^_x5tbPv?)ZY0JZzr#Oe1|h1Do0n*^4ij)W85ai9V$
zaTQ<V-cfJGh>(43V$Wv=aKmzI{T>){O`~##iln()8guAr<xS60Eol))mDcx4#g&&&
z+(m!U8zrG@p%{J&ukbs1LcNI9CNb~=lK+zWWz54M89<gvUV^DaT-!^p^=Qh2s7|I0
za*HGNv}wt4g&1%@^KkgEC*J$1a*^0U!7I&|<sSOtkBq(I1&v$`Tid7O1v9^-zjfFR
z7X>G0%~c6q#52VHGwN3MVnA}YU$wSSre$b+N*UfEh;f=U0rzqTbs**z-h_gXQO;4N
zCsqKQztaUfZe28sWAPtGiE~RjDHi9-bu~f%#?=4MTsGc<biwQ>Ar=LMj{Xjmf@HT4
zb!vTNx$eXKm*&b};#^ah^v9u}z(wWD6^~F#5jhIOKM^U$ClyX?^S^b@q7geo=M0A=
z^$EZ1n3%8%5AATsR|834l|X4I(3lxu=~Y6q#!Iq@_*eWk1I>;}_?*js>)dyk_36b`
z32|81th?f3fCn^u%l?$fbcWcgKp?CDgPz?4LptOberC1Ah>fV3UqgYV(82$2dvc7|
z0@$blut7`eZIuBT_t5MH@;uDylUtTF?WmHU&f3f%AM5h)jC}fPV|G;>IhiP1qjdg@
zzA<EAfD-KR{>M;1om`%SQM2N?!Hg>l+E!()sgME*`pcx*<9#x#Lx1apB3~NlX)G(m
zH1)-!mX-C;hAG=KS&^aG`DMqiqdCc;<ifnFSZYzT$3@@R=qHA0Iy1(J#Fjp6Ayg6T
zA*oDCWA}e%i3BqO50I=~)L{VLj)Bl4ZofKYh2qrVtXJF>%oA3>4=qKV!4rHw%9E!@
zE6>sY0C6zE)i6^ftI8_9I!D|yw6`$wi~U*0b1SPpU%k}5YkBNJoGPu$Il->U;y^Y(
z(ycI;_bF~D_jK{6YSE2&+9Qfv{mn-qyDk+)<%H!&Y!t=L#Ats(2K&RrehwAA<xfd-
z`6l^K=4Jg`Fz){a$N*da;~2!pObr7uzs8Ov^&6-zbr6Pom@zQ8YH!9{Gq<a)ChlCK
z-1kwo9YxtR8Qy4gi8#zJp#Z(_K#)00GA5^T1G-+*(cR1t>EM|@g-cw|=5+?jvTd_O
zzI~izvN1dtT_+g7jD*WSrkzyMh2(Vna*gMGR48;c54?3zJn_SgF!HNHP_=y@JY?wp
z=&bzu#5d<wt9O<8p8LJko~OeuPSdy#&w9?}uhRY?P+H7dj(z@$nEeO50NgMJJFwsI
zuwPGu0n^76CsMy!#!vHFhSKHP<84x6X1zV|(o4F1kh@CJBc<ywA<5Z+v<>VEv-8oD
zZ`IzjlO?U?w({;Nj^ZnR%s1otwLSc>gSd~YK^liB9U?=S00oW04vvW*YK43m=0FP}
z!&?7I2g?TignBpqU^!_#8nzN4CQsuRGiViqwy!`Cu+1-6G&K5gXYYxcF6T{)D|<@#
z4nc}{dRjO@G70{Pk9Ik398&f4UL@jgoqxR6fd&yDEY4oCQ}AUZjp+r|a}-3n8)n#v
ztmObTLqkhZcEgOfpZ3PRK`5ZjK@E|VL5oheyG4IOImF;MiwED{c`)$oSfuK3LjmPU
z2t{>Kq|{;U0n#y??0HXs)u&6OkOyky57^e28R{b!-9~Cuv3(vFWKfuX-cz9@q&U?2
z#}4!LP|pfKQlq#e*3G!KBa*eIS5{Uf8Yl2dCW<ost5V(7AtC9B#EyAm*aC@KH%$D#
z|2?Y-|7=sz!~$O764qP%e20QfB+FeZugeD-mmJ@|%7=Dy`^F19-~G6LNiT@Vzp__p
z(9_cPBtaEXaRZ5$z5Ov7#5oO#Q3MV&@^Sa>)Ij_hXD?v5%h?$kqD(<hRCON@8`LK6
z?N&JKdh`3|<G-!`Z1?l;5f^p-f~A5B0d>k&?Ve?yC&a7X!R%!i)cD)4#eESP5-xjL
zAWnD_kP2i-gkoc^a<S%ko$`1GBe3aWH7D&%FQEV-q=hF3zUV&F6Fn9mU!36eLF}-5
z8bFi3d4xkeo=tM&7#|z+Y>;zRV4c|ZbtJaFGseN-Fc%`@9IxeQNN8%?k&0Vy<urU#
zo)sdx&5sQJ#s78t>Eg(ll)U^C-#vXVJ}%sB^UwfxO%17{iy0_S*wAd@?y#lFO~j3`
zbpN$e+z$gc(WkDh1e-PfkF&oIO@H6?qo2-&9$l@1-SCk6lrVl<c}L}lepa>)6UP5S
z@_}V_8-%ZLOPTAFgVACs2Q08FyJ~SVLJEFfE&0JnoOPyLZ4|z{GlCZ1irLik#Q3?q
z9yr`He5<8vW|SK0@_L;Pks+Y7(Y2Cs05ik%{ZSQ^A@15cnys+~Onnrr`|xCh&>+xZ
z7&ONb(wWPp+7J*i@0ntoqVC%}ncE9Vr+J@5Ccjq3UE4$sc~G68iFGj#H0w%a|7bNU
zsPq#XITxWZQLF5gbj?z(l+eP(!*0~~vV*okJLvHBF)zWq=BmKB)<L=DNX-j`-b%<2
z7<sryJRoLGy*cmU`rsWSuwll-U|)yHfv43yUIWFULa+RU^WRCWAwAds4VEV!6VAkH
zmVQ(fE8F2<ohBx7aT+R8)lkV@tij1AQ^|%N%aMVmYS)bN+z3)Puh6Y8DVk<-P|&^h
ziOAV7M1k{v{-TpFI(2KbB_uOsEAJ(-O$=oY^a-H#1UwF4CK-0Y$cXs#Void24O2&1
zl)+jH{gruMUo(cAxl1uqP^Bkdod&~gDB$Qajs>I2|Ao@-dUQf;;MGRIh=3P<cHR{=
z$-6tIey{8<FSZPcJi1Qrb1`O2(_SHlbJ8S;U!4yq<`et*(!NHJn=<yYXL>w^PBm*8
zz_i<izU||aE2x!Xe1_BDIlMll+O{a;EMepQs`&T>meH>0w&zPH_p4V-e)mNO|1oH`
zq<`||C3vD3XiS8%DzJneGU#BRoa`?;)K%*)RT#e=IHW9U;Oa2c&2gD~Pn-6N?#Xdq
zp>5kmwIsPwfNDY>UtH%M*h_F+bL-H<kvY2-ZNs-sYOJ!<%dpqPx$KC^{yQ+`BPWs<
zc^PYV^muI=)Hw7`6H-`9Ix##Y?ql+~S`)d%%;9>4jK4rU;$_vtAD^z<uwXo<jprB|
zH8d1otozV%c|gAoG1X1y3%UQoOKb(2tKN^j6&Tf?pg7)>;nT@htR*PE*=2F)`*);x
zS-Tl?8z^k@#NG)J8(nW5dOwnr(z9t$>}UF>?0L?DLq~iL;-*JB1kyW@t&q6JkvYV)
za{fEEYJVtUd)JiK(l2DP|FbOYX<Vg6=!1X&>ZRf_YqR>^Y2SPFxhIGHdkK7J%YN_o
zlF;|>Uv2zNR|CkDeo%1*9X}UPK)T@(gBVIDFJs1|lCMArjMXML1BGGlG9>NFbRkN)
zgwzi-=3D_y68STv<>uoCid-Ak=ilR$<=FBuDC2C%(fC&-cfrl%##J4yIc(iMfJddM
zcR|Lr2XYfa62L{Ban~U3Ps;0fX_*>_n3(to3ZGKV$|xD56q5bmwj8`;c<0ULUII`4
zJUuM<lIX{qi~e-bVL$%(KfW$6!F5T*+620S(;Rf&Wa<>L|BI|Dt=^OYO|bEPDfyc9
z25?`e37*xi%X1fb*)mTeVPIz-FTD6iG~4i)Byva(`RsQOWpy9u%=Y(H?6&->w8FCL
zJKRUFMB)XYAQAf~r4ofboJb$kS4zIln$v;VGVHt&b`vT6Aj79g1$ML67Cjz*Qr?mn
zqOmVO^4UbUW_w}KsQ$T#j_J(!K}-M0;mku%YbtSu;2Y-p-@MIoP}u`iuYMPpq25uQ
zgx{}(C6ef428`WpFM(sQmB%FXG2LZGE+My_>K1;K6JAPEiA!tuQXaI%I!&H_z%^wE
zLb&_7PQ*OzEdPsFp6g<n;PzTHv=a9!SO>eymiDsy*-{*|?x~v7++j&0-++0%3=Kk-
zjx~e11(4&WsKjNALv2lNt=E{IGIt*7AX3UVm84C-%I|c}+HJT@R6d55I7Wo-c>4`O
zS_M!}^(UzGlP+Q}-BNxYOz9inuC}>D9Sg~Hzicr62a?(quK%0gqWhLLr1=f8)b&{d
zZO<$7ETKc_z47}E)euMx6#Yma^oQmVX`t+ABmE+Lv#Fe<!(69*EQqA1*3awAo0vS9
zVAFu<qc0$s8UhX^Uj5fO0zXH%tE+?-JfXTYF|mI)HRIInL68=N7kxvNc5$Fjc1C;m
zfwl~@Va9-|>ew(o!^?UvLTwB)B4rGjb$P_xjSMDb$<U0)j2j9Mf;=SDSJ--_{soen
z`gCmb$g`+h0UgJK`$Iz-;^S9H@$Up#kTKmRA|yh(^<pLDTa)j&s?f^L+Q9px7RE*A
zWrE9Gqkm%TJokxxgNizt{xYu72y11B^PWTA4!3yuQ7*w*KR5b#R{VD8zFQ*ux^?l~
zivZ-K&9^tI(Eh$;z3tUjqox}zhMP9-IjXnj$G9Ia<mlW3^(mspA{*}JSM0B#c*_!4
zvNo~W$qQH@mRF}O@*p9vV%o3P>jTQ`Sb6(AhPRB<NHX~}6P8xM5Rybrxl2h3z7^x@
z*g-+pxPm_IocDGJ8<k5)&#u1LgMEuFgdA|LM4RNyeMeHgV6ej{``d&T+%#eYCo}IG
z*cR!~9F2V$rlSl4GLSB6eq5QB3d;1&5D3ac<C@2(2hAF(=_>`kwB5aHyDR3OJL_2L
z@CV#4wmHBO(9RB#-%q~7sWvLvnx!16K?@0w{YIS2vSa$8%{=CrK4#1??kd|zW2dwa
zsH;ZOT1jwA)_PJ4-VD<SA=db=5|8y#t=T(@o5j0h$H@*KiZ9F+XHCBmCdSb<=9%CK
zqh10nEyR~7&XnV>uuszyB{&FXd?9A7lw8)3kycr3vX><zbFb1!kQwc15M3=uicVPi
z<xtmz6OVnQqPAmtYw1*GnUkwYe?@QZFNhBNAEC2%d@0x+bD%aKH!pxN_6<}&x#!f7
zk8zo&Ax|Zi5gKrrL#|446DP%bA$n6@$8IH?dM#&!v|1B-N;P|j6D&hTW^ZX1f@&<n
zvh?2v?@lXnsJv4U6fE9$<DtQaSj~zrYC~45z?dlgMI~8|nPYFD^k2r@H{0da{WN2c
zf&J@-ghS6+(SE)N<?Qcs(3lo}y2V;kR-NYe^v5pGI3pkRh7Wq@3+`+^=O~uyX%J}T
z;8dGY5-crboJkio4k%5^h2gw5lXxb}dndw8i&m@_9#nE0xM`S|^0el=MhoA`#b{eg
z@a*h<$>^7xwN<Xwg%yv7hDc5&`-?3eMCodPjnz+n${yz-?oz>ch4QA9`;rclb<9g8
znuC3;<zv|bLl2vLrdL-?`~0F5XU?*L;4$mvNI~IEnZn!undro3F*VyFe9V7<<a}8W
zZ(>@jgBMoluun;l2%lDtF2f!0mwZ7)E(`N?ZzZo_t<X3sKME%+!$vAE=DcU?#gNm@
zh8&S0uGQf0uHvGrwq4jpF(Xg7w~I$O1CyGF#<0zzbM<c`?!U3oVc!L7)&C09p8eNy
zaXtS5%HG@StcX9-UG9h5+0Bnhpaz4{WBH)np04Nt3f<Z2@R1(6ZR%U$fhT22)S7{T
z7xybGDz658{CTy{to@QXXMiNHN@IDj-bpIBt$2ghOTcE_jCJF!0JIinwJjtQt(^sG
zXJ4%)-}hlUoOw}Ueq$u3`PutSYKB51#rAi#EP1E*Ax;N8H8*|In|TBa<p;a$4R@K~
zBquc(KmJjD6g(BU<*^Oz3))P%LaqfRSdqeQ7Jz2}#p#_-QjTBnkOQ$5GwG1~9X^OO
zg{|y8tJ#}xS%8##*<?4USQcHi>vYvn>@8ui!87SoHU@u3sr8GY+WcE*me~ylJSm*r
zNzj(T3F>36`djDY-#XAi*(HO$1EiY!<XQf_tQ7SICl(Cm_nAU$0mQ<cf?2N{VJMRJ
zw+>ee%@Xr8jfo|e!B%h~&#sZ-{?;MR00e*lQ(adr46X;D=Vuh#h{xDd&~OO@S7Z8&
zEzBj^n8oB3B4E+}Nhz-dWpK$9G{(<DW(r1j?7#ljnQh$s|MmU7PHKyYQbcgsE#iu!
zf*9W3UnY;uWG2KH3>I>ESVys}U7tY|RtsH!K7Afwh&l{75q+5(R|TlgsxHDv<)=PB
z1J(B+=D}5f2ZxM09MLifW2<s{GhsQ1Mo5Npsd8d7KHZ{e=3^$4%-?&C9^?MklgB@Z
z`?rHGr5o+11*W%d-j5WySU6@DZKoAdT+D(KD(cF&SqE*yAH{^+^2b;!xuP8uKuCLK
z0m@puKFj7)y>ktc6Xor5C-mvF&%DVJT7^qRt*?7kS#_>r?JZH{uGc%u)@9^A)Kibn
zM(qFQSH%7C7ueduj8lL1%D&04#};O(BZ8Qh02oJHf*Q#BF4r$c$>3(ks||O7MO?s6
zFDDx_s#=F!vzx8gbUS6%k@j{tTPn!%wU17iWfW0^6?G8H-jUW8d-nD=1xWFnXx*70
z*f-a;FEr3#1E+)P`em#hYiHzK*)SJqq<ziSrpnYTSxx31kG*smf5oRjmSt~+0O$SC
zms%7R*OEbJh=0DG#ePT$$SHr4kV*^jGfAk_!6}OVM_Uyy#AyJ-rE2XG&|#O=sFJk2
za=d|rfrAp(beccERW@ljn*C(dqJooFj|cUE*hcNVvB2k*{!uygWe*q|+CzHJDy-$*
z2YQ?>bG^D$GeaWx{+C|!@8ZM)bQLJ2eU!D%Vy&Ji>CM0-oC~l~%u=%t^($dID#7JU
zy>_g{+9HVQEt8m!<cPBFQ>*h*9*nj49d1<R993jV(xb_1+x)o)lSVI<bhW@yAD+c*
z)XpXpO7Z(TZX<VK!w2Qc+X~u8l!{#MGR*ur>)PTs(Oj#EJn{O|hAXlSso!_xFE<-H
zSs#+f=8_b?%4a0;VO6&FF5vMpqURzdTq~9{lZ4h|UtLE>DY6eJXV{P0+`2P#*WC*0
zbk|$HY88XVd((d7<5wpoPq%qkClc?2y4n}a&=d*57Wm7_V(-1^U&v><Yi6y!a?B5<
z#TyHd$^qd_`&CfaC8RE83^}+p!j8Dp<h8V$FqLqzy>;g1;HaT|o#Rwn?&?>oyC?70
z=PGoF57=Kp9Fst@WKUekxIX!kJ&#CrV7F9)_?YXJDbRAZlf|Yow?0Nw9BgT8TSJw`
zca$7(@XC7deklE<pr@pkSTYzK;&gL+;oz^ukTK_4*F1K4QA%~|ZmgUviK@Q-Q1$7<
zuFDmMuS&(HKcqN5U4GSILqXE-mw#NRw;_@E7=qkN$PLm|(XiJ~V(naWVgy~hMV8(C
zhP_8gZV82I6mXA7rXRx3;7blE@kva5DUB`+#**a%bB2YXp}QeDEiUX)VU)_EzQEyk
zF;DxmC^zy}<rh~SJUqVw;*(XZ+EC*QxI_=l7IYJ+TIBTB+cJI85U^wkTV91`$jAUI
zM`CJ++&UdK_6eXRqq?j-+)`ap8|-qsI4nw}s$^N!CLH+lt;Fxr6k5tXSOr%LaW-#K
z!&EA1GyIId;-3|Pvz{T-UHc<360SJGigV8V<Qxg7yOCv&ZqH{BS}f?9;8~$3x67=z
zdw-lN%ClEW5*?ZDC6P0I*QTwOx`*Hu1D@XdpFQg_8qDp<HjC69VIxP0=+<JDo0dmB
z!OfDC5y!tE99435E7{U16F+w_N?@uXN{RCr;X*Hq9L(x)V4tiSX>B6oqk`+7&dmwU
zz0SQ?c^f2u6Y8l0S!Z;M3JN|MAj;Y59AHQYiG;dc0OLU%uq)njb%~MqWKey(qcoTL
zG=gTcdES_el%~-irq5?^wxcIxp&&84LU|;ZbJc4N!!V$`!Y_Vrr()7Mcfl03n6~8*
zHGRAyVMnk0YaQk#h+;3{2&J-5!%D9U9A|K!^^HrA;^CtyK%|YAahIX(&62O2_)tAT
zZ;XC<QYvz~Loyy=nJD?32TCJV%|oXj!d|gs?}mI*UCcY>`}hs>QKYUW0T`F~Pd5=N
zW;~%y4o8nl4cVEJx$G$1BIf=wr2gj<!+s_&z0A;Au1*m3mf2Xu_e@tg?Sh=26q9v$
zU-e?!Kgy!OTz*1vYk2&Ek9&w^TOv-#K?&^|bGun9TO9N&a7mIfm`Pj>TY+$ef)$~f
zgG$0R%rS%kvebX{rH5?q^H_gEmIb0}rb@f4vyy$8ej>YGdW>4Kq~U_Y@W6;_X5*$1
zzl4jrn)(id0*yI(;{rk-Hg9BSisFt~D4@2>V9f=yuKUN|zdB7TIgVO3TLflEyGjYG
zuU?|9?6K_<b%p#xnzP5|cEO$pr{}-Kf1=)FHw?kD`Kfs(J};E!4Uz%9-AetI?4tJ4
z5sSb?pb3l5{9NKoS(cM`r-+)3w}`gPI@8!PT~t}#8__XEsjy_+uerIed+1C#3~XVD
zkfdfegkq*(d+fDd1L%b`A!h|pJh?APi%@af{yr~T_Q?@!i}K<N<p#FF5cR{P(95c~
zc5nVCw}2$(@}m9`Kl6;~_`0K|e7@t&1Ka6m?&90EItdrl^H@Dgux3G}`8epH9`cjf
zDF^ut9DEQ82eWZg6gB@iHHX?yrdWWgWTC3+X}`pXc=$zL%U<4@D%T%`R*mVwKHG4U
z7yjEjMf1-te5;SfY#0DGQrKV{Toqipa!l5q$lMP365N!S2_sxub(zNuy>JpED6Nxa
z0#JQu$pU%#5%JNt`H)^7>2ao~2N(Pp8GNR!bRcM?`W)A0^h;o%x#41i-;H!wx$K6O
zY&zbM-SCaz96MD~-hRDyIS(CsSsnJXoUPAj--k3e{}N^gU9zll*@MwIKwLV+tS^}w
zBp>Uv8Azbq8@0&eP>TN{ejOUV|MQ_g;gY2Pw=V?w9KP`*Tw|(VpTMdlvIfcJ1`7HE
zhRfJX3%lklY9r+?113fXIY1}{g;F5K#=>i-TH~MhmP)VM(-m3ayOE>UtBS?qOQJYd
z!NWm{DmJ#VvNP;}E<)2`4YC^+fXF7<XjZSi!u&dGttK47U#q2pN(-lPK$7OQ`Z*d0
zx>47dTO8`E3K_+FdZTj<$h{uK2h`5Ns5poEn-7Br8Ju15zV0J2_Lul;%R;^2p6rBF
zCAkia!Tf_lUlnQWw9g2H;fm++mcINn{QPlRDSzo&DwUeqgN`v(-;uuFQ&8<|-&&QG
zbGqXBhSeY?JghBbZShm@#=3~*<_g2}_k3iRFn0|d<tua8i-d9FpS-N@$kRBGtXQ_)
z+x4*4jL)|IVP=@39IC6R33Yg$d-uwVtZg1U5{dc$x-HiuzSx4GN1zw90)^8uDJNak
z7%5wDI#d_X!waO!6!a#sc{*mzZuF0!6ud|2O|U4e+?f0^7q87dcHASGO?zXD1}PVx
zti2s?I#t%M!`{tuh4-w7X}DR~Vx@yb*q$V*h)rk4((jKhMSZ-L5y@WWC|PJxlpY}V
zE(oGxtGh7p2|v_Xo>8hP5cF(>P(L^@@E1ovrRnn0MB>};Rlg4n4GwLd|7Nha`PH`X
z7q{E*J7|)$<JQYH7p^IDbc(m(d)qaOeK5l|^*8K>&4LKxRY6%1=#sa|v6><VXV|(x
z$!YW=pt}kghnv1!7-HOM7@Ch<tdI?|y_Mu^9!6%l^X}jho!<EP^=@?b^qYLpOXoSB
z-6(o(n0Xi1Jvrcu89&peVjHp7_;P$BIf-jPq$C`clbShKK#Mh0Hic%%=xJd%Bq1G5
zk*NWWJQ^(G@ldv$n^kcN6Lw8!z6p5S(kJZ0i?b_l%|urPN4st&gMX7Q)N}@_WXLa}
zGD+q@Z}D%PcYz@EKvS>5I=KrlxA#=&3C8f#{n3bK{QPo~K0~li8JJefR$4YomaVB4
z@ia$=B|3u)_OY%Qwndc1>i+)Hs)+caV?j~)vlTD$<gZs6OR$B_@R+ZmI<GVscYq1S
zx7xh=rC5hui^PKFL|#Z9!<%^!rKEW%9d5`<(YVL1N7RemC|PdDsjvz^7Lv8J^}w^v
z2i;R`du@8o(F=R!E(=bxbT!_ym&{PC#$*yR&eLYr&&67ZWoa+z9Kk$D=XkEr+T&ay
z;;@B-?=>5d$wUu|47d0bl-9QSAaY&5zN!Z_VC-MURb0>Kk674NU{CMwz5j+@5OwJI
z_6TqWD_kF`C+DD!0JOlXzh*b=6r2hrz_-7HnQ189rOxf?LwIG;HBE>zc`w4ga<8L=
zxh!mK_furzwv1?j{xz+x`~J_FKL{Us9Lv9oj;GESoA#dWae<w>YWAm}vDa*z-LJ%N
z+xTf=Mt8u!3@1)&l$ad2{B52~2U8Cy2SZzsuw424lZz!jGOh`gYpPjZ5+&YQ%8e|$
za|n5R^U|{KGbz&8EARK|{?k(y);~$Ygx61kR|Fp@Qa^x*oAE{{{P(NV<n*D{N_KM%
zXl%xZ)hVs88xI+0`h;=BR1bSO*&@j02E8!U>cGd)TIDj=!$Tx%u5s2}7fyVfuBQ2*
z!6S_cI;bS8zDEnB?OEix9v67bZ_s>*<j0baBOnXA+@X2mHrx2<kJONNj#F<!{OT_M
z@vOJp?+nzxyF}$96VY#i8^4fVJg@voPhFt>2PE#Z6(skHg9Gs_akhfIQk!tPK)m)I
z4{P_8wOgRXrr^e^pX1Mm%LI6|t)aT_%J|x&>a%9CUTc+SMLeSF0y)f(uCTw0D`NlO
zRwDl&De(=YT#e~X%=j!?0PX3`eZ&Z2|KSGfHQHZT#*Ak{XE7T__tCzy1TP289^~1p
zM?09yo>5%>9Km#uycZ@TacLQH1S`HI_d6x7N-0#X2m=E;$Did-aDN2P&bma<Vfjz>
zhX2aynEjX56gJ)-z!JtQ`Pjlh^;a54lqd7FX=UR8%PJI_g{?;}3JeD$!&Y}I0wxcK
z5`v!wo#Y(qI_FqIYsoJNy&bIx=<q9wy4aVK(EFz3E`F>PRK;6me65K@4>AVZyI?Y;
zgOPvMVc#KYtY`>H=F`AM*Yi^*Sf&h<ZO9UEN_W(Fpih-c2ZRB<B1-*gG&3G1`#zVQ
zai*0wmT~*z&g4I4&>{D%>doF=-pz}l?Q0xs3eKwQOP|iYa1<nwZ-dFzJ2;timI>1Z
zh2W(hiR#~F`XlGkhIxj<YFv{b-C}p9+@4%D5-_wG@kyHYywK=2RULiZfpD&t$O{>W
znmHAV3<eL3Uc43Cs24+_ZPdY!ZvW@IRB25n|MOiyul^^t#(Ydh5VDi-NFaT{MkZ+_
z8+;m?gE$wZv&<OxTY>a-S>fd89t?hQcp1Hkvz%0T?Dm>8zlz>kioAU>b<;?|9Le4;
zK{>IkJl@`DgXs0^9zEp{Fyr{B6JPqJaq=n=IY_!XGucF*gT}U0a~s?HtD39{XaXU9
z+~jC-BRIeVk&R>!MinQdh}83X283QVeNO*yoS+rm>XIC;rf!)#`C-<=IaIS24P;X<
zgeQOji&pWoqE?iBE0(ngQ8e=gc}+B<=88A9;^-gR=^h7^ev2L|+bo~$xpplek=W{s
zEnE&@8twu%ojh<@Mi=ttbvFud*a~1UmK$8wERo$Yc=2PaaL5FyY9^aT=HWXx=KUFe
zr?R|js@Oin{=$Xx9z**VeAuVB1*GTyK-vBK4?QhWAnh0QOQh#AW;-Wfn!ce`7Lhd2
zDzRXCD~p?n%RE9Ke!3-oTO%I~Z)96Ra^-|{50OXZGa;cwZ-ks&Ze_Q>(@A*xez2c)
zQOT|%$0|7v6n5_#z{I;D0T{MP)()`0Ni5M!X&qAhvM-J=WY0Us+=E#2aB0z6_oGPB
zbtkJ>zo*?EKKG-7&j!Sb0+keT%hLz%F9psq)Zznrow9aV@?8CED}I@i4T`R6qGkzF
zrCCZ<9T1h1QdkBRBGwu-JQU3s9t>mSjzziguWG2pjG~|}I@7yk)a{o*5NYN;h>UZ*
zagO(O)zhx>T-W_ilf*5rhvw@1i9@$$s^ZaACGdq;!xe~6?-Lj@m({zY&R}o|vfHQS
zZ;0OIUC!+bsDOZ*1Qvc(`X5j0yAHjkW;)OtSerm+4wMTlKKoQ(8jsm~*78`#l&80!
zj@lR0<H00H2ZdB&ZmTwpr!hs+Ugm67O2*$HA@a#A!kP{TXIfx0ajBO*^Bbf+OLIv+
z7#k$Y_V2B5@Cj1RdwQ|Mws-tij&;_&n=(3XfD&fjQSNE!r=#hGqxO)cqge*soTQTy
zrawJpXh9{Kfz-gHN_bw1x1dz(UkBrJqY#E9Bw2_Ny3bB~I@<eYl+%||ZipS9-Vdu2
z-GJU>WN^92E&#zY<G<CNQNlMJ(&pCB)oj&X{#z$pVvKH)5fY>QRu8M90p9`|#v13s
zA-{Mz+|~G9N_M7mjasq8utu#t9Hw-vdOT*4^@rlO&+W1C>m5x_t}_4yD62n^EmGCb
zYGYPA_p2#RDz>Dv-Y$||0sRS!k@{I^d#KGZ&da<l=w4-Z6J~=n|CaN8i1$NEl^AgM
zwd)_l;MesK=wYAb6}&oComX0Q7vD{X7Ud?aoji{<A2{ftNUOA6$X~!PX$aFtCbDFM
z^FSH>bfZ|@TIB8V#Wg22U;hJ-M|CS0{}Nm&kXxNo`}YCnkR0VUA$T<E_BKC0AzD{c
z09!zc*R5X^Nd}fUU&-GFh#Cn_6OcK)J0GbeSw&h{<)xL5;&CwqJ(S=4BZCyg-RHY!
zdT_0<DaXU2CE2*bRE?hb6L?c3S-(?(lAO^UsDsV>cl_6z;$!m_NRg}^Zg+Hj`*;Mb
zmn3<LjMum;NiBx@O4nqMy=UnlHD*u4?-s?V{ai!4eIHoVa~ul_f?SI3j~aU2<OQt}
z2b4u56oiHKAJD~K2#^w%1<<BE5hAuU7@FTJ|J848Qy+)q?%A7mja8s}5n~=X$=U#V
zIJn`6m!aOORKT{Rmz-OP#AdO+Mj=bCD9yi%wjM=l&HX<`{u#yA_p%(#Th+O-#DVEL
zY!$du(Ccv`f2<mm*T@(6iR^GPe5@tA)9XJ!wZlMJMOWKmZ_+U1)@p>KS<lg9H`<st
zo>1@hk=YdJ$xfqUiLrxbA8R$vcscPYyNW1V_p|2M<FkHAXgSB!;YalH;X?;;<2Nx=
zj*vcMHw53e(HE|O-z{{23&uwY+y*EP$#aO(QgWrMke-Yg0VV>S*V;rh)Eq8i_zF9H
zY4=9r+MBqS$%gf|=&Pwa3v6#W*pYfP6#3-hQBn2UUmVK)jP0j^BTn?~+*q!4gSh|a
zzp?kkDk8e2Mq1QJUw)i5AX%mf1&6F5J0KqnBZnKjOqDKzf`;ND23u&oIa9uyFV7|H
zy{aKaoT>hBPew5IW5*ahBk#{ST302me|`G$OJW5Zk3k2jem%pcnQQF9Mv`R`&|L;z
z^=O_s)CH3oy9c(VynACV-@h9*qdQlWm|twSt!@83Ea-R$x&OfGny1y3HL1%x^fdl4
zk*h0vW85RnPr1yb{Jyv_sB)L-Z;vb{PX0FFzpZV{rk1^SYZJG8($hjQ+)231HK-uI
z3mI;2u?mz4t~j$Z>Q`zX)%qc0N0oVH`N5+zO;A-uG`3&yT8&6j?`9tg`A3P<8{%<g
z-_;n`Oj2quf1<)UVeh0@Lm|k{50TLI^l=3OOk$167uBl{=4mARrJLw>xZ0I@LK$;q
zGlS|^#w96<mun45(bh({2`;-xNMWCN^vT+`)2S}3apLXhg7D|%yUsAej{TzdCmAz3
z1q_OP?bw3L`OJf)l)U-R(M;uGd3#e8nmiopBUD*brEC0fNlYIYhs>w+RTn-o9qb7v
zq)y#9Z=H27XfO5tJ0KlkPwC(0w5CrF0F-<RECbBd&P?4|xbNI1ZPh(+D<$ZTPD+XW
zv$3&RpdVJ0Ha^7*X%sBM%o%!3VVe<Rrju2Kj~_9h+u6b9c$d^9)AyYsrp|0Q5UCW<
zAA@prpHn=7gVB?;f3p9J^!g2Wb_U2(tPTR3jKhqN!{+HM7qkeFN|RIeo*^O1GZiur
zjWnsZMB}Jx#ZkiA)b3qyUDguwDPq6mV2Vqj__P1j<``N;aD7jr=V8ovkro6@QP8~E
zqz)Jpw>P%yy{B>)0Z@;d9;PdzX^1BZN9&g<Z*hkm40cxbl_&W4UG16>kAD)YsvaC~
zfnJ1ya8&T5E-Bvk_Q`K?e?I)TVAz~QqPR-hH!e`SgZ<#q*(Q=}qhyxdZ-b~`TAOxx
zxXQ@5ew0e8Gjltg^>{<whewZ_*(GB+byEtL{8C0*SWgUbF(WgmM$qT1J$zUcV>mYQ
zlK3MY^)QhJHnfAlwDw1A3nLz+_%%f3Zqil2afZhXhwAMr?~LL3zTAxZ9#tLztpiXY
zsK^ZJcA8ugQqKczo#sn+X%iI=m&&(BPk}dv$srwV(Z7?E|2AdT1EbV`Wz%+7#UD;P
z7}fsy(A{^J$*=dG7%w>bt?~SC-hQ|JBXQjvU)p({d68?cY-+rHlF{J#o#BS0^8<f{
zf6z&Vlm67Ipy#o*JvC$T?*`YGTOIi3o6|dtaRzyw4|RWR@c7Ead!y~MBfgfcHCE?e
z1b*}DTjGlI&vljJ(AP<Oc<0vae%p6_ftB$BgGCRwH_TmOJ>TY<h0gV3XHt^hEW5GE
zGO5jSck}nVw|)EITGEzlr<SyMeY@b$>pyoH-^zBpwz=eoeXoT*U+<Xz#o)6%arKYu
zPtb1qtU0h-@yurTI}g2z#BbJEpTF)dPh1;f-*@y>dG+aUmj}`Q*zkI{_xkzU=dMUH
zp8tD<lkVIbuS}NRa?NU4uy@Ig)Jw|)bgo_ZS)uOGTc<a|2Ghx(M8t4`I9p0q5bvVl
z`<10d;J9U-G5n8O+hR#5<)XDsRrdo%g^{&iz-#-=tPNC!n|#91)Bo)B+-`c<kSbxz
zktBoei9}*89nFLR7hEs--)f(-5$-={v0;hCAIRuNiDp?IbSiGDPZ3+SIN4yIkf00s
z0yh<O44e^Fh1+q)>#>HR<x1Q&kFc0_t5=kSgnS=)LP!&g{WnTZbc9CN;kWx4?pE(E
zdr0|$trBe`+O5-@@_{awI+~y{;i}%FzH0v=hBYZ25THUTJd2xBQks%ib3rOuK{5BT
zP+Co<oVgXbF{IheFXi)SoK@cAk%Fk~%0~s{LCOz9mAr3twT0{^^4~g7`m~k?3V53<
zaH-(2xG7!Dc6Ni0;H)nwkC-c7D92P4&yiDJbI6%_v!iJhA(>WsrpK<6xk*Z&i-yaJ
zl6e*Gtr6z+tGSK!MxCV^-}8}AD4)@*!-sGBmObmv6TjBMU9E3`_On+Y8#RK)n&n+w
zAIR{77N#0*v7|s&Z}pcJlBH&AFSbVW4Ww(W07D+Gb8oCN`;H;;>7IzmGHH%GP$gSe
zLG#|<QDOLNt+y=8vCY4GI&*BDZ6}}pv9c~zB_7)Pl2~Hjj(Yg0%zb@}x<S8<E`I$%
z>+q3kPi-SyF>}c_r<zzsI`U7T+=qS<^o<QRd877*BM$O2x7^*cx9cUc=i<xBEwl@&
zTiSc|-(VfVAJU3Gg{?xzlo#Z#&4b~>YLl@4hpl&yXL|qRz$cX?7KvO}r;AFgQ!eGQ
z<p`CdbtMz4BxbEu$jWR*j3lQzapEwSSYjj_#hANOedRKjOm=fB*L+qkpJTK0d;5NW
zzsK+KyZqCm$D{aM-tW)*b$edUj^S;K73*4S1StTSZtLBixj@o&81YT-?+;+dB-=<2
zZ@cih13~@aACzC|TG;a<?mr!r?Wd3J@lQU0KwNxuRm*Ba?rJXL*z$+&yZ+<5;n|bh
zpM19vH*DW%w8?#~#>UVMZ#Dl^<r>swe+m!s4)~*+{)2DuQ`ym#XL2<kX;~Gw?>E#~
zs-eM|fSlA)uNnhAF)P)E#XF1(om%R@1YA@DC0V@-rS0NA;t$k~nx!8hj;x<%JpwEV
z05$1oF>xdo+a~@QnjWON6~MKvnTz$T=c6aQ+2KLvtV5Nr0dx`PS=Z<Ci^doVItA2d
ze#|izUkWZzQY4jH4amXy5hJEtka{DN5)Y<s2CDO5`=Eb?<`emA2P(!z---(wr2<nx
zh3<Dby=5UNtB~jvHHi;;NYP`*a>PJ#>X}<E=>RYccp`uzsvD3W2j;edEo}=3-K_fE
z6XNZ#jb){bpa*A3At<OY7fx&3J03A1!W44cMsTKpg4;tosr#kk#TY(2^*%oR@ij7=
zxX{X(<<=B_NGU{IWk6?G@P4e64fG5RVc`-!s9uwH0xF;dD75ZK<fs(&&x|Iki#6y3
zn#Kr4k9Jr{=9`?CmT#cm7gOW?6qLJMoq(a?Yce62SLzj2P*$>Hi^J3LiT5;S998Su
z)q2n1^-7GoO#)J|&}os@90~3&fv2U8&4Se`(^m>qqc=rsJV#IA6-PH4b)qEDbjt#P
zMsmB8Wkmt}in3;`CYGIY`6s8G$2ZIThv9gy*FB~7uW37EUC2jRX%!&gYBd1~fsDxl
zHvK(TL%oc44D!sDGb~1PY+>dI`hI&eK58nFC5=h4$LfWNS9SBv0H?L_c@PQTGUZTP
zO3F;Q@3bxJSv&jVsHkrs=|hR^9P$k#7zaC}=Ptom<t~~Q?4f9%qrel6E#(QQHL4v@
zXMg}ciMnl1&>Wx3S=PhhTj!GSr^L33c_wdyluc+}@O{cCB@Wy`8nJ-SDlsIM5wgCn
zHy8C31qCu-baYcWyc63Xxy!2TY>>pG*3vY=-~te@s^Rw|$aN||hF$=i4$K&}?(zY$
zVNDpuROqq^+&7U3CYK}A2IHo)>f)Po$`shnITj=OAnsQO9?+aK1KOk(3Z;XHhJqu`
z1LLYQi@9X=E@F;h54YSBb+<~rtY2*gmhQ-HBB-Y0%Txg)Q#vi_B8OKt!F{>iQCZF<
z5<S<+9LvW+3Ltj`XZayiN5SEvU^GVXSAfQhH$-T}#$#8~wPA^@ycrzV+w0+MIm$qF
z=5=?z;zR97KsKld%QEstGqn<;Vk3U(;qL(D^MgD_Y$<_stB51_A)MyDs_s$Qgvt(=
zsV-@#25p{<JdfnQi9EOZRim}FW>?}WH?0aS7Hu`+-l4*TDj)NQn7vg8FJ87}l2+`)
zyj}>-ZdhmYWa7mueBhp!Yf7uWKMC2q>G!)E<MiCLmS5kS33_6GC*M1gW_CYh%ZdAY
zG?qeK+^WC+UVBr1+seqXW!bK8Nt-vO+&r{#X5-}k<uU3=jhU~Le#)aHRt0YAJcORh
z@8)l2!$YTFtC0@p)+uRS_`<XYPq8&_XqYIfzaJG75L1$B1Zp+UUP`{uKAs)^atxm$
z3U_pJs3cKrGj3=s4uL}M|37j}s&0W-Iww{EcyU~(3KU&&*;JDBtP|rlm}lsELD7v^
z9T)dvZzM2qff&boFgwFAyL(msB_Dx1jswtJIK><ZO`FB(>2BN4N6T)WgXn250^mkF
zGRa@D@4v2g`b>HwYlbY~0bUeF7oetwa*<!tkuX|!X_O{<3zia#(!9cwMYaA0dw@RK
zTl+(uEok@zvsppi>T=lP>rfgqKwds~ktk=uUTP2}R%MN^;2YJ954}|M0Q#vwVGKAS
zU;yRWsJsC3LhKTvDyI&3@(Q5ijG=X>!FBG?K^bm|C6V15t8z3S%jc80M%^kC_NPzd
zHhD0iL9GKY^n{iE;l{#B3olUjqP4;@EUg5*d!0w?6<ZcK{ZERB_>29wLY`}Zw%|Dd
zz-(CyR4cRoMWlAEh)n%_?qR`SQ`yh&1wL4LbiJDu!r-dY8b$npby;RoZHMRs8jpPV
zxd^96H`X9r|3&OX#O?e0Nt}n-Utjkf>dXG$k7#aDG<>~>$Sy5E?w`{$cG~UIrRv{z
zJ~!Fbl8Zp>IlNEv@%>|3Gddt=w^&*&>N>TyTRDy1rM3mQ&*&CLBE!7YWqtA6=d^tp
zUK9&z47g9^GsTLk)YU}swgEefWuT{Wt13gjNKyI>9k1%0q)bK@+ZcTp$NZI#P$ytE
zG8*NKSEqpI+eOxD5Q|YFz)6xH0fSf&E{ufo<pkYGmgal;W8%(Hc55b+N#9Ju&sd@!
zz|FSL?P489j%Rjnt>*6b*?G1>Lmj)W?gRT~)b*E@9Z@dx*S#oauifp6yhH-$q`tpJ
zjz*hrpLv{#NS*v9Kk*&^$ulMO19a%#o~wKQb9>Dr#M|*}A3P8Y9GDOOB7o5uO)Pk;
zq#^B|q*Bn1jRP!1ehiR^Q=NJPf~91g%8H@;iF$9S#d0H5p5TI#$Lh3*LQ_=UvO0S%
zbq4To;OqY)+yp(}Iwt)xO#ABdND*uL_xdB~>2whTy5Tt4smPc+3C}|j(&$NvqDLb4
zYVAzK*ua6$!m;ZgH#qsl*^!V*rmh1CE*_lmJwUtzSS?&Bw__mzk#jDE9dM>yS6!)_
zS~okJopScqTof?BT+fioJL4tLQP!Zt*Ezq%T+DLS5yb<Rj9@;Y-U(kD!Nym@L32M&
z2wf;QBTA`ho{FmE5yCp^B{Q8VWPs(3WKJ0V$zpwV;W%(J9S~VEqh;k&3?oD=0EjIK
zs>HvjN6@<k71izKgJ0)vE@oqPkJY=t3P{-^ScO)3DE_3PeW0`iKH$B3^t#xOq~7Qm
zXtdm~SXs%TzCh_o#Qs!2+#h3jj~resNp2A|eX64C3&cvg?c%6j^%-O-n`x$t@z@KL
z74*Nr*TV??7m*UQ`?1V8iFO^B?J*nwpjkg}ErkQx)eZ_&ONo+Uat40is<t4Z*N$PV
z6*mOL(5QT_=tiDwq@daUNqPZ0NIbF8q8iZH)OumCvGSt2g|S``BDoFtmx4BiE;VJu
zt&5MA;|x_H@r?^d<7Lw;{m1*ooBPn*?KGfKW<Ut9-}$<}Yo=~5?v)@7*Tb2d1{`Mj
z_!qL1<WTQzY>Ei6eHnG?N>Ly*gxh&BwYzz9nb+|*$L`<%zIV3W5b<cJbEO1hk~f@P
zf0<%A^?JDadfByye@6cGVUHui$=UnOvBT>*ElGnSMdRkY#*MNktM+Y-k8fOlE&jlo
zbnV=YK5Jg4n;hRoHrd>}a`mB38vV>afbixl{i?EDp>zP+@EYZ9(}TftcdFoOWa7*O
zA!)O0E9>?wBQXPGRhcqblU^t-VHv61dt7|Tx#O>z7ui7m<Hr0gCbNHX^yEa&7P1}8
zJdIERxtKW6$ZWi-S^<{Z2Lk+Mkn*oo>ws`q-ONf5ec>q9f$XT2$PJ@Kl)(e1Ue-aw
zMXAri=tlif!#X}t(c`?g_ET*oH%r4!s{|$E#YCg0viI0Ebpt5~Y}V&j{3t(f?+j0k
zC+T8eU#;Ix$E|g<Shdf!BJ=+ab{a!J?QuZ5^Wy%rY&Rddf9@ON>E&{Ncbh_?HR9cS
z$`0QXdsb~)wekL1w?^~(UCRwX5g7c$((&w-!-fU-Z+o7;y?JBYp8d-$uW#4*9dT@h
z;3bGdolhicO&?&VIJ&ID%kSq`yMJ?NN;q_Nu&sx^#>|D>7SX;TR|ot5I$?c%eRnpL
z?AZCPA<<WB`P!>)THqHWwG0uzBmVY!80T5~t$lS;;nTF-<BxDJQ7l7^&`A&!eteDw
z%~v5qQG+P{p9iqkzg_=l>5c81SL=R)9OL=mI9<+Me8fYohC@9db>2vwR$I`|io$PC
z*h7QEFuV06%|me|*(%9?DCu}e@9fEf(M(J_+BWm>Nt|%k<?eKyu;2qoXYfI0s&v3{
z1QyK#OJo^RnaxhyDuEQEXrLiYpQ?4XH&Pjs?bl=~<|z--wn4rX#V~#0pra|dzgUJf
zm=L1`F`>t!i^4N}h1S-ajv>Fdf$j%(&{(aVAf;&0K;QsGk(Ny49o1f-(C=Bhm<~uC
z`O`jKk;+)7o{1Lv&oEI|Zb&UT`{tf#Uw^D$i{($C2OsKNpAp;oEidNUHJ1m|nF!TR
zaI1AHUFpO$Y$a$EBn{-4bYG#}lnF#7jXCSOXarl<74fDX{$6=`qQGbts~={BFY4qq
zKbvq$OLTFKWn9>zbeYGy-k(f7qyJoU;nZRl9Yr;h`86Qp8OVAw(7;r$guD_l=F}ta
z4?xukGqpZu2YaSIcTZ7lJva%!A8V)#lAIk5H=f^W`t?}vm2a~;gQ0abud^Gl=>*ut
zS~hU|8x~*^2BYO%u|A|!9jRD+R!X-BpiU@l`)DU}miN=mXh#&51v2A)-=AY0nO_IE
zK6}pu+7d7Fs(Z=eanZg@HMKVzupG&9>SoYw)uo{T{}%*Am3=<!*l4NOUFza2qpXIb
zan(IsS55bxsh$Cx(5?g1y}6pltBSKfG?IF=G1_*r^8o5Emdav1lm&WNf-n@kC8w4H
zn>FJf@PInhy?XfkNGyKDyUHo!p4zf`1R3AsCSANSd;E&M#YzzXY9>#W+HMKsWZ`@N
zqk$Q80E!BlZe3iQPS`ESMB3hG#2icLD>IVg{0pSMlYeH2c*`L<pJ?>kM<U+yago1=
zZccU)vC0ARKXXRpzMfZDsvpp3;9&}!va}@7O<Z%DMi^FKa2}UjV|5pRfmCh)GdV5V
z?52?1w_DsJ5(X*g51|Fd9j`_Q`X)hw0ok9nyB-bPuw1GW4^P?f{5hL{7qwFi5vW!h
z1pRkLqs7u5P6mdn(;u@MK%}MpoKNj+tltQa$x33Qo77u`93EN6zp5&6L2Vs)@>l+0
z8}yXNFo)ksiZFb6<ihE6$6x+xKuzi&Kz(6>7(!CHK#ss!k{zVg%Qum^YBkL-sjyuX
zFbQi_u@QM={h|oCy4?|Lq;{qrooLOJRz0w<A1G5f17bPRFZ2G3D_5pwVjNyS@_+LA
z9P+dJHkQVaijbPHGtj^GBiybEvV%UP$g{9WfEy`Kwe$7?Yud}<3XI^B4Zy5L#?tq1
zj54qAC>b>^1yenb@#mRM>Q!i)9P6auhX`yh_>HOMgI;s7Fp30jI7B@xvJe1(rF%XQ
z9?7x8-Ur);8>ZS{lxo!|S+BwYE|c=a0A?dK#^*bxy@;9*jB(&6BXx(y)4R5|))&ZQ
zk1llQ);`)VN2uS1X{r)I!?lX80pXgF@J{v=AmcKF47+Ih(kYajf0Afv1l2z!<&T<r
zlYkRyTW#^Sr_VmN>!!0P5hdZ#^F{qV8_4<TU)+}e>{VrtP*s8^f<(PW2He{N86#;^
z*@|@lg29|+n1dIMY#erO$g%F_)_M;|G|uJh>%(jdpw?q`C7(RDEV$(S#O>miSoq3Y
zb6?lKta30oa`~I>xj!|PU;85gJ^2=<L^iz^$U@fUl4{6vsbyieI#SDu3nrXA*<_pa
z!ou*HkjayS;Z9fbLR|VY`W>(OkfO<UFVA{xIXc>al20fv!2!+nD;Hlf!l#$R?p_tp
z{9P4Fd4v|ZbO`9~(WexR0zC!LzeWOayKQOghCLfAgmy#TB<n+NEmz%4*Gw5|{0IcJ
z6Qs(dLyBCEo}5tn(@t0#b|G7m>Gol21jXDTBTT)Wusi^KgY=(ptKCbvo(mGU*c;<M
zL0^B3qfXh*F6Y(M-XoTl<{*$0StF?Cat+m4*iWG;D{q-z1vA=nG!z*LQK`nQmimgL
zPsycWc=6L~#Lcdp*@REm-M76Bz9$!*D{;;KWHg`ts5xr+x{X@!{r^j)<9}WSYH+4N
zhmcImW&fRvHZ9(boCZc;;L+kI`KOgTY0Kd>`56~%Q2_CMIXo{nZUS>Xc3Zt|zv=M$
zSsO-6jk+-UIZzrJ@{VwMv?ZWltV6wkP=RVFzSL!fw0tcHBD;73b5hRwE*`;z<^nfD
zuK@<tv4&i_0IWxiTj@Um>Kx7};RXNFkE7L!l~2u$GCMf@x8&ljg(-opyV4yf2(5n}
zgWE<;@gTHJatBD8n!zE^S6Rkg8US5sz+R0(s2;w(46Q><ufZe~oY}@&(`II^vrnF2
z8k5Yft<8Q?hNfJxrIc^Y{3gFyh)|zoNT;!hYK=NrS81m5u7RSNm*Bftq7EZ*YUE@g
z9=Q%^&fpsBtp}!EEUuN7l42ud1O1ca*|5lx<Y!!NuWm=*v#UNaw*U)y02NO&0|4fn
zb<o#4E;_PdR1;<ml$gq<f>UM#w3twzkssz{`Ix*u2Q;K^#pZiah#{e*HCG$g9D4D*
z?rktQm;pZPGsKiJk{P5lc=H2x8Bhi@%_#&OgXBKU2AW6jmB^Cd*bxG=ilC1T9i3Ed
zk~{MbvQBkP3fnL{yaTMCTG%`e>g~5kiP{LhE7ZYmJBn_Y2*-5U|BRTa#pLSlY4+&i
zS^%}zBi-CUvm?BF?Z5U!X4|$|$5=T3DlE;7`_R<%VU^A0sdM+l;_b3j{R7wsz$(m3
zN@<*4TEsI9DRVw^0MwS_js!~v5v2pxvfH&S;X(*pAk9XNv`-G_5$WcN=F%hLpM;Z<
z*bQ)oN41all)<)#FFK2~eI5l2HE1lRiST&hTzZv}QPrHUgD-^l_s6?g@CpkHfv6gf
z!{P4yZD?qyDcNxC!DRE}`R%4Jwi{}wD2&F_pzJVFU{&VvAkC>3(mWtRqp3Jc5#1=V
zeWUO`+N*Ld5);8e&tvF-<8R$0AN!p8?p>JaP>Y{wNJb(b8>|!l@DsD5dvaHi0e;8}
z2xo@aX{d=P=mx+eYtXPDEy<xeABVi|+96j5seBfH2gdha@EuHi(GW3JK5Z$c`NAVI
zZ;3G}B|O>Un;=#OYIvC9Q{VfHz!kSX!@rOG{^_43n<w1^s4g#+nTeFJ5}sDC9)jXf
zCUEdU#X-z^$hZ|{4qvy3z*Y6;b<=`n3?yedQRTyKjeO)q;fy-A5W*JX(4xqRzwdqT
zmcL2daZGdZ2#_8fT})$yGVTDTqs1MNNiXXH2;IA4&B`vdk@`OiKuU^fY9nCUjn1%^
zt9%vF3D^tDPJODf86Vy}XJge;^W<wQI>|5fxyaqTYMyT0SH{6~xIE+^Kz#%)22%-i
zxbqHSB_9nU#|E(8r|g#Szq=vNWVUJ(@Kt=F+VxWC;#wp+qjK)0os<(0XGrsO-O9uj
z)zG9Uo0()^hq=)+Ql-NlukPQSG-Vr-a2xwd=e@J5=Z9%ruZ>OlBzlTnSzp1Avo3Ld
z@BBPRC(FB**mLNLP1&Z0vK;M)@^mZe-=3Z!xyTWgT6YYH9Yr?_pwkrC*5+F>By6l9
zOBx6wLJL+`t@9~h^u{lQ1o6s#x-(sfw=9;iG;0rb$fiKGaS-xL;FA8Bnf~dp9mjO&
z=$;gZ*Kt>ola6P*fG5OgjUZ8V7^Ev3q3NW^+QoH2T~W0<fqtI-GlBRXlJ3bvecbn>
z>{q>!9Y@-3PEJo!HfHvJ>nD=G{q)GhVuPmYjDUpF3k%X)EEW(ct6;*B$}aw186oXo
zgo(?3+3-4ClH2)$Q9P=Jpg)%B`6PIi+{_h=<5hF3lCGKW&e!{0Lkj4mp!SDC{hB43
zUdmncUe@}@K<pl6FpUjc4##32d;p<gCq<J81S3|+opIV;96O&_EvAsrN8u$$zTWnr
zXW}^Z$~So?$=RwJp)M1IA(=TV;Bv@aUfnE6rW=6s`vD)gU~0e_J__Rmm*a(^2`9_)
z(8Y{v*UY2SjUT?%spEmLQ02GU=u4Yg)W7iI4BCeC^#D>~`@c!0<{~I<q=Q%uD!NGm
zc~J)0t#os!ikS~*$uIE~11*HLQH#z;tE&1`!JJV77u(8OK3bEJL>Y05DE>sm7(o3A
zvPG9qe@%oIjaAJ-J9R%dxB}(HbxV~BD8QGeES95P{AJn3Espe+P&w0uBpu=e;HvB1
zK!TJ~8cEi%Q`mCL@Q3I3v6>dApvsc5l9=%BUoYD`D;*-pQP<3KQGb8^ul@s|WLbl-
z0N@Y6ZRT8uV*>`{{+oj3ghBKi4NeB&4NaeF;bSmKZ$aP9K`KI1`Tivv^uZJ@Na2{o
z^Ir7x?JdIxq+}(}Wvp#o6Q=PG=(K5_1Mrp1Y1KLnT0|*KaPL)xNYM|lx>AU64{bL=
zoR#Pd!Bt<TaSD&J<QGn{WlaMu4mXU}PB^?gRJD*KoSCml{=1@*dK-ILa1O0W1)4*X
z?#gXcTm#*to3=?-f*YKcITTXzU<R&QX!nta(x+N`0*6bw4f({rj&Hp3@tT~<7lAcT
zr)Qm&wL=-{@|zdWA-|H;$kh-su8eVRdT?5PUv1R&8BWQk4_F#NdQV1tg`6dfVFi${
z!|1A_6v!kO8@<xCfvLz-fYB-A;J+RXB}Fg_L}&B2yqJ`t`m~x@Ow2Oa0~%_?u2CDq
zUd`%dz@W2SkC=%}aM>gy?-@GO6=}1rXZWDQt=NQT*P0E|LvwB(;m-S=#6?H#8aUap
z_cmjj0J`zDnZR7gXqJ5RmamwPr#VNAq;!h*V@$==8lRm5Y6I&|=Df(_8}FKQsLnsw
zxH`zfsivN-m*MgXFOr-MIxA{lGcZuTPis~vLu<pq4Rm8@K906Nmk5qb=3Oq?vANy^
z>W>em6ou93B@~D}f(yr-d|5<u-~Jm$Mpxa*WXc+%`Ekz|FZSmm|JG6K`NNJ-Nh_*4
zO{MQN(PD{!s*0l&DRasFAfTSAdDBBq9Y_NT9s(n5$OQ24#_V`~@IfrWqk^j#xNpO;
zx$^89MJtK7??T7}>5JQp^EH^XXVjR(Ju|wR-a@Xcj=Qjw8*A**JxS(vSa|`ea9AmK
z3hgbtoS)c<6LOXN&U0VA;wD;?0>UoDt$MV*+fWnM18Gs48kCp^V5QPr<<_OzDqBRg
zqt>b|XlE*bl_Gc8w&#6-B0&%bD2i2d1IsOf>U;ZVlWDHO06Is15<wGw5{(JBvCNx3
z^!JMq$Pv%m*wYMY5*De_SGcQJS1OIDo8^F7hcu@;`oek7&yI_YfLtDt1B!-B<2!tR
zxyAPITRy4?|M0c`6W|5XtE#Vdkhk<#Xy>KxR=m_&m;%Tlw(^7u0dKtqzJoAzbEdgu
zHD702vSPE;s9KTLUgJ!S@KL`5IBbfp%3-n0o@^{%DJc2}72L}|8B#*q4|%?@4@km)
z8387SS<eIQ=99O4zs(5wT|?~)&b{k`JA4Z%8nzZpX|ZAJW+!yQWqS#dwnLF#5t0iS
zP2{oyxxk3#+BI9g4vrfa_ieuC6F}&<EsOHOL%EsCV{cybU!$+tl{KK^W;7PT-1r$N
zZTKK=z&i#W@X#AzVAkw9-%J^_k~_AbG|o=kimEEGy34;tQBb6~yHk9>yv4#T0Twp~
znsaOwwvUO=Tk^m351pw~I=5Pv-qTP&>D5rXN+3VU(uZ5FG8~x`L5|J9Sa7sn7Xn&p
zu5gpk4Fb_t8EgGZH+kzL@l@$dokPz)&Smn7)|MVG64~&WJOA0wUK>swLw@+*%oLc0
z19rENrUChlShXhEJF^m4+5p7qUDX{@6@TV6q;(sR5w_bsojyU_CF}hReS1>ub>8OF
zjd>*5LU{1UvvqcE=~g>6BHCF9wUcUBj}6~V;Vi9gWig#rd@0mRC34^&vd;UoP0s?u
z=Z&f}suoUH70PwZj=o}@$a#+w)F!s=5RZEUBHG>L{Hmv2nhTvE=K*q~4Fq$+rL>Rb
z4cN+r4Ar_4`Sg@~9&LRu-%W<oqaA{+qvR>Bdt6Z`dP5X(VHoQ~p{zY^%B(frxPEJ0
zCUJ`Ax_?`D*~|^6gL;<oQO$JlTi-DnV=#{Ne&GF;mMjS20A}f|!f(zO60{Kvs7}cB
z)aen|&g5ycli-EOr;(~(g)`{oh11Ovguh#vj~u5R7BTJ@?P&T};4&M}ejA4!)0=zA
z2<(&2WomHOmYD5fJ#dPQ-H1(L>APT8s1{C%ra=q<ecKv4r$Vm7fU(o%nw&epRPwlF
zXh@95xn_N+)_0F0?|QfsXZCs}p#>GsGNvz;@QkKDP*!c0u~b`7l%<L&AzsQ@2k%u<
zl-8335o-_yJsi75nah}?%%x|~fky&d^k8LdhR8+03z$Zz`x)mX@P4xq(4-Sw#NC$Y
z+5)c%mU+DkyD5#CV+kKWufR#Crc=l+`tnpWSyeVgI;=;vDS%IoP|x>sxUrUPoh=uT
z`hjlS-mIAE8X8l)OE=0z{mFm=DX@)K8)^uMeKnO2cD7<Gur0{J%}oy2wL<yu=l0g2
zw6$VtNt@}{1g=d)lgK5=h>U9tT2@)r#T~+#PWY5xX!d{ortWojOEmtv+m`5DR18fY
z97D|`5Tyyr%+Uv4CI+A2N;xt?WnD;(X#vc3$2M<@HtZL~@6I))IRV=b4yD0zNAJw3
zx>waa;D`2FvGPULeEIeCc^vug1cWLZtam4)@g^?~-Z^j^IPd}lTZ0)k4yy}#XdU(2
z#<4?~Jrqm0xy90%={W#o$`)C^uexbFo{eElD!ORy#s4fsgjFv*$a`_t{W>rPA+6`t
zA{GHC^DsDo-09tbPZc5!q?}#at?F)+zCFjQ86Vij87WVgSMLR`GxCmuL-|1yVq_H~
zK4^PPpw98vhi!L}16pnkR;8-qi^VtT5ePbX?#57ow320py*!<YdX<y+LjBHZdh!J$
zB=s8I7DhKRjJ=YgK;@FwW}1-{>D<@PyTiz(E*ISS8?&tE@~+F5BdKLpHPr)$2hQ-1
z;SuyYDnpIj4e@X3C8O?v+=D*d^7a|ASZ>YH8WCrm&-*k{61uAIn;pr*U3R5_5nAZ;
zTqoIX!W$U&eG_-&C4Tw#<>JjhHU9y#owzP=cNh5XAho{&CqNM=3GoY*#<WDqGA`P9
zkZRR@otjA4K&?>*z^PVuixgEQa@@MY#Q4HbgNJBHSuF!e#50(?P`}>O^&|}gW&aZg
zg$>yC+cifigN}0#fSNf|d6;IhSmdH#Fq*Sbfon{&AX+;1M56UMvTpliyDyKNQyq_y
zbW%uvUEo*dd|Cdc`j5k;y{*?b|9SA-Rpb;(y?HMj1*VhQBLvkUG8o`xYpWUA2!<^d
z@<jpJ{uF_<1k2+H+84cKWh`jOr<<k$KxhnImlXw)K=`pg527>W*!6IJtBX75k6pqR
z`i@@O@sUpbck}q5lzjgb6E4SA^6Smg5P<;k4_3Y5>s&2>I{7UYfT+>FG&cVdblX*^
z)*e=dQh_vIvXTU&=8{pm11&Yv&AMK#L2DG#&1j>45k#Px`S?(O=`_u1Bn|mbWk6P^
z4%~b+&igN$t$lVSy*<1XiuI}PZ^yS)A45)9|39Bh3p^R1Wg5^>U{w@A=nSN*D=08H
z{#SVRV%AWd1F#lcB<!2x3S)^S;kT|<!QSWdRrb(4b7p!CTy^}`Wg4Xjl%lI>IuWtJ
z5A`6>YR50w(2%-gRif5c!~>{WhQfr^T)way2eMGPdl*4A>b2yI2#+nY>-Ve9fD7MM
z4+z%RJHLfy%j&n&Vikp7lVorN)a*IHci*y1csQ=7-Lot5FVB+l@b94R?%qh6;3Yq+
zjq#p3CK?Q=4H&w8-4XlBcq$}>eC_5<C7Rytke>eA`-rHh2<W8zlu>_w*Jf|m)|T&Z
z$c4lW7knT2Uko|a?LQnBcWMdqwdy^1+*<>n26!Y{U%vw`P_Ng^R%FS(wxz8Ja{?0o
zcJ-UGnk=m=dtHn%wXrf?zh=x<GB!|Xb3SpR<yNWbx9no-EkMfk?2(JTz3ZIhEwP}*
zz7Yfj=?|24eQF7ti9N^C4}cT6?`OM0`_))t#w|Oix4hqp*T?6oP^%{?Ws!eP^O=I`
z$~taMW?#qy@fYo<TaF<CB6S@tXt5OI0OpWwOsP#wJ7FDWC$+O3YvkfBV<o8d6)WqZ
zaZ6jp*6CyyuZTh_<4D@szNttv8yr3?*U?~j@t)ZG%oR$=@5v#E>T>!!AlosYzzsav
zLbn1uBNsTLS!9vg#^#Vj^G(Pkyl2WYV%4>$WwW|K3&zEn63qT6YU0?m4u4X(Ef2r=
z$m5s~f(}6BjbQ6ZYck7K2GLED4H%P&e-RpFx+Bo-E|BXWE%5En;J17&`J!gq9R3C?
z_t)>?1DU9Mk=eNBXp!#yBazdSB-dYrC#${xnBC7Q3*jXJ0E%3ovUCC4n_@aD&<3(Y
z)+`;GS05kCC<5A?IZp6fvRtAahHsrDgr=MxZ~+q)%_dP!Eiu^q(I;Koffl@T(9wtP
zTW5B2QxBk;vw@b;7z$ahM+<~`i{${OP$C1GMae8EZ82UMqh3FMM}-@~PU5BrRX}6#
zUjzxj^Y#~x69xq$!eC9>N6g^gv6Yj?g3uqB_t#!(62MbeO4>UU@!J*XmNd|qFb4VU
zRk0gemjV7smqwKN7>*lzTZ=xX`UQ3G+U4{4ottxGxUI`S=_Yu)^JY_sPDrZ}4SLh-
zr+8+P1i>n`mFh@k_t&@q-&&9n(N2$;k!`<>@84Qg-5UyhdtB@h;@Wcj@UFF=xF@{L
zue*f5dl0s4APu9Tih}*01yJMV(T$W8tX`x}#}NxtVE_;fVr_uk57qR2v!S5LGbLp2
z7E_1p5KN(KI*Spld;erzZ+ewuhW0uS^4?qxDUemP!0Z?^b^<5^RGh>JNUk{G@7K6~
zsg`1ynB8CuK`dz`6JszL5yjLP&)&<@-t(1$irVxx|DG?-q@ly2t@plIU0p54!kd93
zl1CAXq41U=Tak%XPIWE)nWv}IRGM;u7Ct=shN4s`8k@KLsVDLy<;uo{bpO1nn-}jn
z_*?w42iUK_1)B-rGN5Z;r?eo!oFi-n1x>59*^2nNw0J2lp5_Yqxx;J-GtyeaNQfe=
zRyja(X|hi3GZRL~fm?3;@}Rv!nmw_wSq@S(c#3CTm3BJbt9ztAU=;$h1eN&&wrnJ@
zNEb0G(M-lA-RQY>aEfv(9MGoT%T-(v$dReWL0jwkRlY3bmB>1;UxhB3mU&VNv)^|F
z*Jp3-uR48mSJ1{tUQG}Ar}(2J32&d)cg9jtepLWYQK=#U8faRAEkw%&lU_g>A*lv<
z=?!mg&Dr|DB!h|z?6Vv7$m@%wteF79V!rIWA&J`>M+0It=BGaO`|Cg2*H6CO1&W+4
z|MhkcB2(0>Su&ujs;BxHTHP)M1?SzIpDD?e+p0%QTw>*tweajNdmFv>E9?+3TRb9k
zK?moD`z`aaBN}HuQ5RmnVs?sG#l0uKiX27B0Jcj<x#U$LxHDT93>*)Yp0LulSM_tj
z@Hjw_lb*xx&<JXoI$&R_xK0WraRkYhNaT0~vqrd)vX<njLp-s$SbX`%CryZ;*4YeB
z%xqYqyrAx4yz;vjg&GVvvzTs+z36(AZbQ{-5E!p(abl<NK&L1iWLZU3qRym#pwO$?
zDScB2lVwU9XPj^*%Q@N9f|`B9H^&gfZ^n{(xt5#iCUDlFZ7uf(jg#m_HqG0%T9&Ql
z_qc@){CGpK@lo@=+>(Iye$`fInob{{vSys~v!E-4j61Q1cvAF6!2fh*D?$y#GNdn9
z5Wf5Yi|05cP;OIE>K8MyvOn!nAHCXultl*AEOTs`Q5Y4Dm<deM3{|f1)2N$@Z2=w5
zjgITWO#39aRoiMXj|)dl&7o0rRAf}l7%$A~6=IQH33AH+@Yn2`^2}3e!WGl4+-3hv
z0s@zfskI|tA1%W7?@$|b*xl%G_^~{~XIHWQ=|_H7KQy2cBvmMtF+=V(we<RSE@lJU
zB(Wa6Lx$6|nyfyb7belgY=BeF_R@|;#afD|&-U^U8{Y@*Qg@jwDyB4u$|f*<YP)Ar
z9b8TSGnN<-cvRjmD{H_OvEby&k?O@w(Q_?em$UC<7f@lE@D$kfAi-~RtKY(CJjA%1
zN*KYmq}@${Y#9J7eQ4>r2^sOH8SAOIrg{SfGR5V{E`Cf*iD)ch+;T6&03K?o96#xv
zOT8iL{}AYW#AnN4womLWjekf7P<h~6^+pYawqsvvO>rRB++9ek88~N@G+v95noTF}
z&OU4}F$HFvMkwUClX3hvyV@9K3B^SG57a74#=f%u>scROhZq_2`A^SWl!&4_IH(v>
z|5mHKz>o^tP>V<)vi=Fswx9r@(5MEnAg+xT2>wj+QaTfZ_AAn+HWi}cg6tM^T=t@p
ze*%^q*osPklm=xhOlb5|086@3tU+WUjFxIV53kNK@8d+({UT}kjh!&V?I)k~M5rHv
zY-C&K1IbK+WC(1$l{veC8dq#C^2^t`rR#m9U0+Jcfo{7}Npw>>1OVS4^b~_ECtJ5k
zH0w81CrK6NH+IeiZS6h}N8en*OyOzqp?TF$nUSJT0}Ct5YSPolrNgW2GQz%a5$aTX
z0G5@E)Fr09kf2ri?73IM%=bR^wSn&bpsQ$^cCLT!)ql|T{#p&r7c$AkZmvI4vaVMZ
z?^xHGI<BFbVEosXj>oVNgrp6H&hg-Z5anK$$m`f*ttteNKTw8rLz-<`%Pq?N%lykZ
zJK<!-wjQO7TXics_1i{3Op8|Nw2qaInHJqCJL{8|VwP9>(dSvGZLY@RYN|x77Z1<o
zQunrsCV}Zznkc$?Z&>|?f!Q$r;Sq9Z+c9`=^LJv+>0vo3$Mz|GCDFz>(JuWiVWOw3
zr09>Cl9(dXg!C0n2*ygM-%-ZcaNK>=T3|FSK)@;O0)6^Va6uc^(B-g9kca`Wrli8^
zHwtXh75k1`-<#cfej2b3@LAn?s{gLOYfFYT(R}W=vqA5z3tq2eCSgO$MG;N6wgGy}
zdin>3g=(*?!{7ti-G4yk2BpaLQo+>SXrd-&3U|7f=1LAeAG%B>JUe{WV-4y3YXHND
z#7gg?Ab)g<0K#FBw2LrOh8omqW%0`I@?%Qbtu5UcBb;0ZouoEYtmmaAs?1)5*WAtY
zOQ1!OVx?KxdxY-Xi;oWo%j|}4cwbU~e3N!MVEb(>5hUFxc>nxdiV(Acb~Ni3uw72j
zZouxP!&IOs&;u-#Lh2Py2AXkN1ZvzFJ8Lqb)qw~-ZoH%x?~hua*o*_yjFN+<i5v&k
z#eo-<zh6blyc<y3^qnfdH@&4muV616uh=>56{nLOG|*tVMuEByhGL}RE%*9IPQ*9Y
zTq(4<Z@i~<*H!Q9554Rj{`Iip;<W=7*!zr2K#~<D6W;+bC<&!Ox1*Xh^&8+@W97hj
z*H+P<7^$;^Qg)&8)r09X{akAsCy{sUTPc@!xa>IlP3HEWkh_xZYjmnG@P0+Kd|*zX
z+F72!Fu-hMG-2nEQ`4}YSWB@qTCc$J=tGMcOF7l5FB!#4mnAYTjbqO#Lm$p{z6@Gq
z{YPoj)}Tu;S9eM*>o<hGm1C0$%jtmY4b4<{5g$&7_X8~<toCS6xZiP{eN|3oksyC;
z4jp?<m(%+azw3+q42S(_-{7W)ziTe!fY%EqG>tKINA+7&1)B*<SZlSmQsF&U0wkf!
z_2C-OMIDjWbtX?1_C$6jVQdw~EgYaA^3I=zh3|w!aJ=M{^`y!%zjR^P9j?i)%b$gp
za^CrPPHKY0FAmI>mb{+K!9yTFvVmRY1PC6>zrc0M-J=3CG#9&)%9In@N(6>tphWet
zY9O@L&lH&;t$`_09USaEYogjuwtqI@#8Dj!o4eI3_&9&G*!8)VB6}%2pn#L|C<EU2
z1Nc0j2Lo7L*d7#?%Rj(xl^$-;-iCTpct<|)yReFo4<WTDf{ef^Hf044WFRvyheJl-
zpA>YKjDz*AR=D(w7KXx2Z#(^I>YKKH{LBFjV1H<=sn$sWG95#USuUHDdqEESvbu#a
zXx${<q4*ERp?_9#e*m+E->(X^y6y3MO;DE9qnD-wso#lh_ROF4SNTP3ahi!U>o5{+
zpAlXcenQaissRcWx?VlCLM9jt267c>fixX!p?36<;t->t`}kPSYE(*$MSyaZz`lK4
zg*wkD7(zD@Ot;p3a&WS#OBAdL+S;3+*5Z))qK$ma=E-ZV&ww@`t=4f<Fx9J9K;<&6
z$q9Mq$M$yYD=*MLSFFUQI_lH>vsxT;9DpeY7o|t7Y!I2}pt4RujN6k_E;j6?Q-9}p
zciF>|Pm=JSu~f?fwg<a|OxI9uf{fLA%*AIe9#Dkr8%K_Vw*Xi0v=q#ytmgi?1xZU<
zd`8aRSKwV*_#I6Tbodv6hf?pev|Yj%=-JmIh&$i29q-LfPb&Yed1ZQE?Db9qegY1D
zkkZF>s4gz@DU8tR#QM#P4{12%wlIbkuNQuQUM5M|12c~)fYiC__%&O0E-*s%Isvuc
zmQ_PreA6BKe{NpMjK21qbS(T#zbw#Y@VV9m@-9~Teb{KIsouO=F)+EKG+b;K?;$*|
z2r8DPJ;2jbWF1~DKZ_1#*3B^s#u>Wy9QPwVW##ENCnJ@^!KdC-R#T_G2x_UKXoTuC
zxVs{-aj7m~#aC!8N#b2ZrdqCmx8|wLgxCw9#^?ZTzH(r7BR5M+a!P!oSgmYbN;?Yx
z)%!?Od*j?dkcrZ(8M#U{IGRaL%!)O~4pAH`_l_G$&LPwfTtG)a>wxO!fXh}H`3eEv
z%${<Wo7ku6jb=W}1PRbA%LFI0xi+io&_BgX(>W?x#@m+FT$A-HCGv2<alsy9rRYsv
z&07Eu`vVEvVu1vhJX&Q~Fd_lH1sI171y04mJ@jR;FA!>iB+b|j-kd<1cifNmE;zac
zv$2m)iY^%y8|fIaEwl1IQA2S&s4TroWbGAWFMck{^hRjOZ4j~hl_u(5I(qS*ARHBs
z;-T-@*=V&|ZU+qdK7~yh)5T}5JD-$3;6zq4ONoAui34B`m>QcuE=sK{ROwBz#c#>9
z{_5f@{Smhrm$3hzMg{JNYE%;{mjhKjZ~52OPS_f}at6GknyFq1v{;VAu534`1ZbPB
z;^_tl@cYyz6HeF`!m9CGmX&hvL!58+j3lSwjMiyWOhy^eX~l!A^DjP8=^Ipgi`@%9
zd4O5VuMEYy(00ngFVj=W;H}~|FlI1dC=m=6^`}J+#){GCDY(*^EHMMA^xc8_WeUjy
zzE`fw3D_IfS+?W*XnqAq?Pj7Bt3%y;tTMC5CfHx`!_18Ae5Sgpn>$wS;<2T_>Xyah
z4U@f^4OrO&21&4B&kz9sz#2x&v^r!|a}qck4@@m8_Nuix%21Ii075m!ls~|yrSkRV
z=sV)wuve&M1yFul3p%DjKSAt!p|7B`qL4&RbP@dSeT#Y-H2E@%g(P*oKd;9rd|&u%
zpn~ub!8rH-`(%)}(pTLbv~v**@4#t#U&1X<ok=x5pzv!;vz(wi_1j_fY(%4(2N$>v
zt!!eOTK?txq03VRahk3z9b5mCG{0h#LDDhJuK+R(s9FE^ER7i!k29o$<*TU#u(cr1
zw82pSE}CQRXr|x+Pax845j*rnrlN4dDD(#EgZ8-;m?M3UUP~=n_#iebUrV|{M?$Ow
z{tnWM@t$GH5Rf&(uS_r;D;x!;S+BLa3DDVLO<?n<G9b)-i6?a1rC!%{lopkgk9AF$
zl5^NbEMN|ilTjR&IsAL{%Ma-_^=Z$C8X1M*$5u_-DL-DQ;bxl1y^iT=sdXp1>}+(F
zq!~=!=ZDoCP1{x{Lz_;B{?7Ex4rSL@mIcyIDC&6ql`ra^?XD^)IXmP(IMn%k_$g&u
zV!vp|wu^E0$Nmdh%}`-;Cs2?lR@8i=Z^mcysb1QS7wXQ;uL;w$77icg=9_N~4@~WV
zQkor|+U`U}tf?GbDC|sBxtGKASa)0u=?&K>;!Mx8r=|ARLov6J6<BE+7&v}S07_<(
zmzLQ;@L@E^R5&dNLC1-=)m3!amFQZ2_|ZZK5Q&Gt4;jp<298!&#l=!uEv@?P8TxR_
z=_i)|A_4|@K3;ykWwuc|Ls`iOu&xa07y&uzBv2Wk<%z{5VVR!nV%SeEXtW4!Hhqv+
zG$@w95x#uIXC{+k@3ZpT7ws!{sh-o#3u0d0S@GESp|hO@;|n=Yca?`c4;*@@u}}yi
z=f^HP^cwIPx?<0FST|?dK9((_)h6h<m|j68*T<>z$V+wi0A@Ya58q#|ejB{T=wAf6
zZ#EkwX}*27d;#`Y@AQ@FZ#e-aPd{Hp0xFfW@IY7DQu{%&O647uKjw(p+zq}G4Wbi9
zaE<NX!67;Y)j`!GHf?W;#xhHP<IScfR$`d>9WMq&o$Koh93B?FjW+LOi?|5Xm-z$h
z0&WkiwMMvQZgewQZhUMB^t^9lS|>o?$TRig^WcDk-5`xkH9G=KJ5{cQAHx7-X~xD$
zc&OXX)%br{CA-+2O=d9`j{n6f^)xlTTSX?@oCjE?E%)p^5bEt%=?`7aUvS#=M)7tZ
z<HNXhXW_>q_3;t%t-{iQz}H=qTtOl}Atx16y3zD*&FR9$*{P|j?5*$p8>4SVMHpJ!
zw}5G4)7Jk>C7KR8pN%y+#!%;dth5qU;hQFx=#2(#?;+2Y->=^i@2xO;c%C!XMNMgB
zRc5rIHo(}R#P=tvYpT-l5IcoygKWi^^%-of@8WwE5b@#+*Rn!3KJb8s`XzX30s)FF
zyOS42fP5uM*GIv66}&H3ZG`uiPrM@H$vLcTys}R){mX~1_`aN;4FM<m%63ieva#wd
zUo-z`2mq$GbgbuY&qaMGT)JPaS<od~$p|wwDpt}}w7ywa<HNmC1YP>O%+K>od*?-`
z57WoG&=mD{)!rU-xt;e=(#1C*hDK&hbnN*iZ#%U0jquyI(xT|9oKxqJGZ!}Q-r2C$
zZMpt$Zc@PiT7K0Hl>^Y9m$A~KTY5|x1>Qa|H6|-xGb-|9()Q=lKMJ@xsd?b)*~DjI
zHMS3nROb~5McIIRdHSxyoYRf$^Taj2{k{%hL{Fj^UTrk+OuDB5Eg~4#1<)nWJ9#)O
zl_9DX0CRp7Z|xbFyVS+))c0olzbzw*w!HyD|NS60>7I-VO(>tTtGl2)&{b~lgV9Oi
zpucegx5>ZlC=!-}LHIXozaBf*S|UCtzMPmzug;tBHO@R*Q4l`oD@uP-LcEp0PtRDm
z!e)!T><ecTW=ng90tbgZZ0b7rubS;BW;MsO;JZ}0SS)PIL34R=W~2auAvI1c5{c~+
zbz-Pdq}Q^zRl%npY`>7|yKf}*w7%ia=f{@azCN=gB#s&b$LvZrcnMFz*I3ZS%XakW
ziCiSK2rTI6VPKqAA-p_gZ$qE(=>=$kqi_1Ba}%98zVhZHT%Pc9QGNPNn@A-oW}m5Z
zSa9kA><RGcm12yb_7w1!KUmN)A9QQIc^Ch9(ML5%!MKcjm$}pWL{oZoa41lSq-|9I
zmXMj;Il$+L_=^reHwW1Otdk)%)bE~MuN?~f&mdmmC;YgtQO3^*nj^T?4?tk_ma$4d
zYwmO(7l#ByfRYiPP@qX`d_T(7`p8S+EYgS?_kJ!7u8^6zMz>U_r$e76YFgO|E@-g!
z0pYivRr|f9#x&PhrWlT~fpm2jB8I6lE;!J|cLT2=b+LL~P<LcD*)A>NH`2n1@P(+H
zXEm2<pTXtL)uz5YHs|lXIyM2nvgSqf0`lh||M$xGH}mOdmN8Xp%?@;d@yZtL<jKW^
z{4po=+(0uYl+cfT6*=VUtn>@)<wwa2o|EtyA7#v`1>QgRHpe_4zFD2&x$i$eFfDc(
zf1{uXWTMI$MAJqSMtFxGzAG}2a0<FnuEfCcO-||T!jBRO91v8y_>67<pO_ASK7a0A
zcQ!1uZXkj0Bgg8V4aZ+huYMe6s;(}0yO${9%+@t%4Y8oZ6dh_XXdgkpqF}2p89-tr
z3}Y;$2!bVpUt1kT(agwH?7<4Y0-H()B}=P%kHVs_D2qa-Tq~zmx7LVx^0al~-`f@v
z>*O|sQ~k36DZp8y_Ra5_KQ^oNin{D9{M6d^BNl{{AfkHvLhWs=csw(a=e+3f;m2`k
zR-Gr`5$UZQ)|-=?*hXg60xywXyOi22?TwjVf34@gd@An$Lj6-y)$(7}1_#w%!;`@F
z9Ksn!xH(i8df4sBe`{EAn6d1zVa4kmTdr?5j68Sx_b2DvS`m!bMk)EDYP0T{awGt`
z2qP^te_6t}taI-!B}W3k;3a&^<jfTMi16}-xc4|=sm-QDAkx*dip(MBKiKfogDn8(
z@HbAaM}e&FsN9vlj7B5iszgbMY6E>K$1(u<?I@+j9O@lv#ehyyLaK5<qZK9J8xy*J
zz{Lh6=6ZsE5r*obE0HWXdwgV)q1aOgfJKDo$p%}l<+q!M7n_IW8Q2|IufP7l>C?y7
zp9YL}1mePNY@7skX>JZOuY|LdE8rU8fo>a`e>sdAQQs+pb0kM9;(_~Af{Yv?a|K#8
zc7Xx-d&BlNUWcL2^C>PTZ{`uJGxiRSfi5=?xMk^bMIZ9#51?8t5cC&d_aON|uz{ss
z{Z_dqObt|1($<cl6=iLUGj$O@m3`c=_1!dVISKDN;ZJD3c6s2|(F*p*a1psN<wHep
zDF@BDm^dyn`Au{2#;B%hX_WSju^J8rpvIFDW+t1d+Mhd$XQcutfgnM=Q&Cg^d}!%U
zW90z6+NkgwVaH1qsC%}P9O>(U*-_e78AxY?Y=Tcenm(4+TyNTCcks38rBrqR{x-t~
zpkM&DsIg46GNGK&cvih0^9Fo5@56xV&K}aj=I|PFPQD0J8zM8=^s1j*5WS`y*T>mZ
zTXS#V1owOS#s^>I`-%=`9%w*~TLCmOdolquf(rp#q!^^!76Aa;ypl&)MSr`1Z4qd5
z1b1gv`86$>_)?_hAD_^OBLFIz#GNrkr}BdY2AECd_gqdFrI4cumM)4v`Y6*{_v{5#
zw;6#z)QJJ^awlI?>SL|e!+>&)?~oxa*Cujgp#Ptlk?6x@+QsaZ4ZF7n*}-IN@-%ld
zCB%5n<7?8FUY<5@A{#p?4F4_>zkTld{?i9wz(ttMyW^|z<c_Z|B60b-IOKBuMy<Gg
zb{eWX;6il*y?Rs_3ObF3(Xnj_K%aB8QsunJp6z6Uiv3Fupo9>GRO5zQ8B^<&KB-=f
z7`^llZCX(0T}peLixHaUn4e{1IZ5?uUKV4eZs<|J(^#avH$2(8WnH^@SBF{a|Gub0
zg<BpR`naAttnKHy!vFB{wTA!z%}lM!gwSy`tnvuBlS^B>XcjWE0YRHCtU=#VS#NtN
zTeR|Ftbup9#3&CuftXD3yALb7`L^tX-GHfj)IkJ(EO_h>&{jXd+l^oZI*FH{m!5t6
z{c@kp-U=-yZ_z>NIS^@crAc_Yo5w+&tV(}>qK8M`vtXTK;pNl2>q}<OLfdz3&XuXc
zbZt5HS>!q7-x+G%Wl$$`mmmZ+q}ggjM|In{ct2P7;bhtFEe@j7cTGXY;Ibc*G&wPu
zeC*8<k1HATPTLX~a)Q1jOmu1hdA=x!w9wb_gugC4qw}i9;z=Oz`<2N*52eY|?y3TE
zN5wm!>SVelweuGRDv|F|I7qs+Qji~BZ_!)I^FiUeXSdr%PMti`d--c-&%X#<eN|4+
zcai_O*NKO+yKiIv0D6C#2f8={04X<j!BO(Z9MoI;fC&V{JS?+1>AbL1K49+y@N<sP
zp7~#T>@EB^1t^F2dhiv-Nwzb<G74A*PGm=)$@#E7q<1>#DpG=lw-?>Xqh`&mSmZ^f
z8HCl~lI)7HA(XU?@*>i$sGJgZ-M5EOZOcN{lN)n>U7rH%KRkW$aWEWDn?hxUJjdh3
zL;UF72gf!3*#zQdIm~eDVMrh4X!ddI)*TW?5e#X;aCb4Bby5hN-d){W@K4fGP`_04
z+7As;gJ1Vem(I9a|Ju#DGOK;X3Q)8rbe&8LdOnCZ+{PYeNXr1qaRA^ZGC+*i-P=mH
z=;Gr*jQ>kw$v+;#hM9+ivnAG810dtlp5ziB1>YQAH10dUJ75Bc5Ba7PP_vrx{GW^R
z@~FT!&_3H%K5)E(2i%zC64-&!T#xEzNbj>=Jtzi%WX$7YxYl<u7u3w_$DJ-c4GE5w
z$KDXmJ%ZoJNP(ml#~Ux*uW`cr#Ty_A$m=N2$4>+Xx#x~LIXpCf&mOzsJ14aS$AOjx
zcmo3h>2Iv6$0U%rmR2#PSUu8$b$CrwPJU$Sjb=IOu0cCqsQYQJnJ&J=*499HocFzK
zs{f|%j^B<bZ)4xa0Syr_$evzmNhPT4Whi(XP?wqb6=E~F*fnF-fC)S)k*5q}n?*i}
zsUgvFf{AJi#7g0xmz$ONIEY2svz_bV@_>Gtk30~6MhqNI6?&ZF34CE|e*q&ZV!PI7
zpmTQ(*g9pX4A{r}c@`iawolVl(O|D@vSIwZPi0N-jP|T^D(TnWqHfC9L~o8Q+1)3H
zj9KtDITurFQpkNx-1u<h9C8TtF%)DpKP!#tZ*QRzxq(*AB4Cp)fldvME?8!TJ{!A{
zI4v7sQm&*{vCiw(JzM$ZyIlS)!f?mevz>O|ucZ6kK&WqklOJN~QEz=!YkvhPNY%(M
z-E2ir8ekbYH)nb!7YTP2D)gSnrVVIddRYvo{37IK+~Jwom=SvUJ7lr$c%e<%g;#yx
zJjxA}xVbD~vbVn0n)Q%^Y$SAv@t+p&Vk{fhX|e=Gdm<OBM-6DoG49!Aht!2h%_7^U
zBzBlc?@r#B?_B1kv;v}2Y+c=hr-ftvRs9YCI7=ceKjxW~i~0+zvUHU#t|SaTo;#p8
zRkQ7(Rq`a=8Ln)e3)&p(&@nsVss(&fW1o-T+FDlDmHi9gDM#s|4haOp|AVdfj%q4x
z`$ln4Q4yk`pdiGKiomFpk&>v0h=^FJLR3Z}1k5;qL<xzCbRnaT@Cc7YL_np4k^n*=
z(nlGjw;-f27W$4t*plLRG4FfMTHjgcpIOTh_h#>X-`9PWU%6D_Y*W>0cA~N(#%ZD;
zV<YAp@)YwDf02g?Ff>)biu0RZL18UWg++92WjC{QE|v?Uk5$C7o9}OnHB`OOQjv+3
zNBe9m_EgMgS1`NwKJmJusGB_~0|<V8p%JGt#$y`<FloZ!qa9n4bbc8*clhwh7jaR6
z&vuE<ojb7N>4inNK~?}UgBALS5^;cycF8m;IeqpWlU$cV>Rz<v8Oax9mUd_Mg(U&u
zY6oHhY{jHA?#XMrEj0EWr~)MT6x&<93gSl<a}_D1zj1L|!MFFoxN2WuN-fAP)V{94
zwo_f;Nc^uNVWv$hAk8t({7V=isdB;+m?-|Q2J8z^ZxCc@5z|+Wul5qy+pZp~F_3I$
zJV#>>b+6T#KH6tqZF8<DZCLq^FW!imjR39#To<Hkx6+Yt*M@M{B@`#aHtChb=CXSk
z8#;Ols9|)3RBJgmY+iQp*Oi95x#isuK;;greJ+U&4$bdm`P#hfc!Mump`vsE51SaQ
zhB*(l0U)sb(#OcRH~dhXj^g1AFWz@uOmp2$jpx1_(4>*JWy*#SbfkHH<@I?g@j0ch
z>5Tjc8f}#TqJ4>x;SGC1!2WdL+#E|B84Q@v!b;e#8_m$&H4sPrlq;Ud!k`t>5z52_
zlrh;>Nxof2+h+#tjGQ?U15bG{EmdC@Jh>^NYCJD}FeQ2IzM&7UAv<s6gkQk?{qBD{
zR9y=ls(DCs?rf*m2H?ryy(2wcp-5YBBLaS>sZs!D?yJ!}H~JFvp|C7bq6bxv=sXVJ
z%MloiD_2TV@(`IYwQ&gV;{#Gty&N%9(<MJAmNhCF^J=`Cn${by6YDP$VlKcf%ILMf
z!47<e*QH-#VdZPlD5y^|VNSmiRT}{zN4c#ew~3xKk8ezJci<sYS-~&IQioNLEVNIE
zt;1l5xP21)0HlSS_hH;x(Zh?G;c3@qqu0W0^6=V}UseBs-tBgle8Z%~NV-_@r>(YZ
z7g`EH*Xia~eNmG1bucp5SVqwKggU(#rD^nrtq+?;hO2TMKx}dwFU~?8vuf<-Y!5F^
z%<cFm)w!mq%QW=uRrB&53l+_9<qDX{su|0j;5m|%?`k$F9?I=xKLck{Es9HLq3);9
z)WSB&X>y`hTf8}b2_^NYgcmEfdG=heQfYWlbfIP+GIcwD%&Ww*AR;0d+_zQ?c=-ly
z|DxK9ztDzSmjf;%3Ius}D$;P9X>V)Rp@2kOYHN2<h+Rziq2i2ITh*!e0XAU>*Wv=e
zXE5sS2cyn|MLl5x4We}NIcVEojC_{l?^xc6=a>_@2ZKQXqG2NzPp|dB3rENx+j|B-
zFkCPFwVmgWRadqVG-vT^Mu&Hzso`b~-ps^|9g=j^_iOW6#5d{L*cq5c_AsK%BW*lm
z#@!|A+aHQG{2Hu&rrhK=yCcJ?xoDKD<bv85Z$S!4y%o0N4kUL1YK}KF19(LsoF#y0
z6GPLZ7@t5d11pEA#%A90a*VRQ2om#u*&2yj&X&Qy7?jx8caePcJJ@+<n&a~^kHxS3
zy2E_-ev(Go9Iwg{cc|d4=t3?Nal;Q1q<^E{pr~Qg3?JHP4$uVsSkX{<k{NDC{d4N2
zPTEE%F*(7|80mdT7gcYU)mQd006e(aG7TGT-ljYL$5`5RMm9+!f?n8vK2Yyb$-saY
zj8kA)NY%g<$&_Ms7)?a7q$Y}dr4bb;F}Kpi=}Y?R1p{p(YDu>GV)Y1{!GgV0k=hN)
z4G1mkSzr<50Pbm#4Q0B0%QYsmd!FZ)4!+e>x#8c08IX-kPkb&MH8en>Otlx!y<usM
zTL<(3H5>?}uIuG{dpSw#&5Vlmno^&mgAN^L9F5%s@HdXE>0Dlb>kGaXbmd#-{Z*>6
zaufqgPXjjOX)4$yiZWhD!oD#Fd?MaA&{wm=)Rbl+-`iR9OF+g?XtveB>a7x9^vn}o
zsk>x2DR;C|wh4Ryw>0uUJ=#$6&V2lN>DOSPit;92$Q2-`dHgQvIG|kJYw_&ZiI5R`
zf4Bn*Nhqm-hC%TX`(u(neQ|vj_zi^Z%tDHE+*8t4&x__4e2%qHC#Vy>w#Vo8qsL5e
z@4g-B{TxX+_nI3JT7>yq0CFY2;DwpPrtRi{Gd&|+sVL<xoH;~2a-6M|*cC%-;pxv7
zs5a;=E%n#T${J5IEY3j<M@}ppIj*nEd0k<~>WPWQ<2G?u3;e-p^@z%MftXP{ok&;Z
zUJOCLjkwnd;sncV>HegPkvD|o1l%&o0x@8nmuKJ~iBI-^{alaR-DUnHP~GRqP>Q%t
z?7cSTtB%$n_l14CT4x$4{X=ZF$s3hgmpz2n`9nof#&Iz|Tgm~xnd=F~Bb@c{=zKCW
zV#WCZfyb~nMaMa!%BG5Vse)5k{@|#8%;6NHU&F4bd`}m{Y%zhUCcpNAx(DSTZDLH_
zbiB1Q@#QN3?Ia4@R-;DEdVVBJx5|`1Dr4`;opXt4v+0ne%_b?+Om}a#>UB>kcdH4~
zZru753;m}0BD^r0H^aaVLNjr-@yO>NDnD=ePCL8EReBa}{<nzPzhKQ7Em%w4i46K8
z(~|~>O|!cm5wyIF-=xhl;>cuM_sl?$-Lb0Yt)^hl7L`ccm~@Ep%h6JIq_Z)Y=r8uc
zxm?k3Je1Ps9_6~=8kz!LCO_bKsdfFKGU`Jg^!vInwVPkTSQs*)B@1DX*2!e^<ZB30
z8OV<@<LQgJ4njt<;dV(_Y#mme*2>4+rMiT`Il7pk0VWxKb@*jda=VZ$Pf8c;RjnYS
zYuV#p&!Ztuy%y6tZPXx;WoU8Ax80L{>o)>2fdL&=#g=C2ClHr9hJOE{^0$TxHTRj^
z3{4di;@p_a<oh9#djZuu0^W<0P=<}MHoMDFxQo|LCtiI0;2lAoPcdx<O#HUyxM$Td
zBq#Hu?7r>?pLT8}o!Vu6Qmu#i|96w+O2QMBn*bCoRjwdNjFihAWiDfc4YtO}x1;Ez
zY&5F2Qc!Oe&s!<Cf9WDJZjGofcb8f>=<xj$`Wz%n1a~c3v5kN_f05pdNQ(^`3mz$x
z!gDc`OSmO~;vw^d->PZO#uYOH)aWXM_@cU?&cla5>(Q-@e#99+EbbLg)nNukj%UpG
zu7Brrji{NO+Y+M1-6Qa_DFDpMdb%FYgwj0nxe4qzH`HuuyBIbixJOuR>o2iyD%bP5
zck{|)d;<4|*ucJFUS4@UeR)9sZo=8_skF}bmcN$WYF>6_dF3tJ_qXs@V2pxCJTY<5
zJj3Ww3EiP)chfL%n#a=hLtR&Tp)GIH7zxjjr3KhHxjL=_&UVA3kpQa6$o}1appEA)
zPB(FONUtwXsr=jPx%T>rtD!B#|ESLCHuI1h{tYhvwYc4#G(%dgQXjEOp2cIvdJR`e
zGOA>UhbW&N5mwyQiR`FjlBHR~e^6bKy*MIxyF^^`(4MRnP&|fn9LVO~*=g`X_4^8x
zfY^g!TrQO$HZTIxGd&Ty7bJ~>>3g=0Pl0bvgmoMbpyuokf!C#dY09ijRR3@<Ido`4
zAV2%bLqc0H`QqA-vrnG>>3nT*(4tW#PH~HO74{1b(}&wcJ*7y%ljt$Si;%`w1WIbN
zAx`mM+#ZTet<s?6!6*G+rY+jE(AZi&E%7=3ZFop<V5(m9B-bS5+R8<Lmoz0W`h;J~
zyCUElOYc?p&H(dIh;3pf&&S3T1e2+b7a=_RC)13EQQEtC&y6Kjy^~b!%<+&>xAKRL
zyDduv&sU#!-f+KR;!Dc`!$b*Is;Q_@YErB`K;Ji9x=)c;vsR8nkkVj!GaWb*{^Z1A
zHRNhcW%O)W>V+_dHkw|icO^bYee&4XwiBgR<?ZU}<5i@i;U8RAUR|VEM6Xqc{Hh3B
z?l_St!%+_@GH}c2wfk#!DFr+Y0N{I*bw;gtOF|iO(#p?u!DpI@ui6TUhL$~YRU~3$
zZAw8drR?*O#52fU>q4d|>CEwTXUS;|$A-$to=42+TQ~@>cfcbl9B%SF!x~&t_Q;JT
zu5vBMk+um3;q*QJ5&&uI1J<bHncSn7y5C>Oio5BSEt=M$;E%ZKE8hdknY%9+WDCH(
zL>iS#vf@u=hUa*E7)#aLo@^n>9{1Xz_BmIs)uz-ugJwY>5h+qb=>yIU%u@GQdVs4c
zMV}zqo{N;aC5l7jTYyQKg|;+!wcV4uimER;lVf<RE=a-(n(uKB=8yAFWdD}t_A)!k
zOLnZ{b&vU9Y*OSpRW3XOfP`v+<e~LL<tlT)UW}RG2-^l6>zRv!YK&{rvnaBr%GkzH
zrK#@_x`I!%&~UBy#dd53Tjr@j`(BGAuReP-abmjSSC22fl}%5G&rGxPJjVI!7UL19
zNl<H5vHJv8W`wFsJtVOc*&+esCcUmIiQs~$-J76+g4Toi<~QYYTil9~US5_1Oz;hA
zs`7|lL(=N4G^0B|R2;2t+I@PI<MXAB{(Oj()~>c5@+)XVMLk*=xjW)77m%f=kk1pX
zBEi61EzY(NCic{mz1z`DqsD4-qnBBfts^AO(2VVXN7bMi){1sqk}zZ0b|L3_Hu-p;
z?)K{}2u;5cI)oc>XPi}$()+!Ynq_D)sFb%5mgBFq#r;qz@sFvoJ5ODM6f%&JTKcNc
zwtE;PW{MC~v$`|i91rAF0@71nN5F!!KwtEX^SV$=iCso!cG>G3&(Vj0{IkOw6W#k}
z-(UcbA<P#b*Zdm<zzUp@JyW*cw3_%RVgc{=AEjxjB(}jh9=GKKD03R!E9CCqR?v56
zrh3ci^fy?|0$YRUqc`KbIVP0t>8!wvO|SJ<T0+N`J-N@T81w)~$o1rYd#MO*5l$Mx
zNxUE=nvWJBGGD7Gdq~~L10&+;WU4{_6Km;+3s28AUcN`9;d;2+B{_>2c9F7sI#*^g
z$!W}&8O0oJS8W5g*j57Df8ujkX1}tXsREhRvTBJ%^^hQDLb(@KdtbdeYZbrWX^mB%
zwE-`QZKCDlHT;e!N|+)osYvEKJ#%`zzWrylY${%H8-G=hXozW7Zj$c?2ndM~Pg9ZD
zvCA{`Acq1eqUI6Zdt9to|EOu<ZvV=5xr<1k7N}=h5Uep<(DUEYe%}uc20fg{s*1Gr
zt5s}y;_^2v24MUh6GBb2M|ib_MEXzEixGaoVipFaLrzIpN44k+v)gQP<Wr}>rz@18
z|E1DGn)Tek^#r%X=g=@eLYG@o#r~ESusuly&mzQv+>d)hr1qO(tq$cDWgSglGRFwz
zVMebTnn}u{W%ff9%u$JdoQcWis524`MifYJCelUgV%=UlRx2AB4QUOQn0>Y6>+QP(
zo??^n$XW0=3U2}c3Z{uZkS9)oW?nt7bc!L{Irh1Uxq@p#5-+3e2s|l2R@o=t&l>Xu
z^Yl}%D2{b*mDT?(L5*vr^Yoal2>WL6y_@GohFo6O6#N{gI{!Nw0{QPsdhIE|P|4n8
zYy?4YjO+~6p6P>-V=UsibmUXLG`b6irF`;nJzQM<u*q<77eVSK86Q<@NcO$w_r>fc
zH2a#9T(qQ3OC^N3<Nof|DoS6xumV!^Q)GUwRIYd?U!6niB$Qgk@%(1cEh5iQo{F*!
zXVGDM#$TdcFF=Y4<oJ9_YNO#Euu2gEp9D=k&y_sqo5o+ud<OosX*%hmCpJgQy3AWz
zkNJc*3~yCIA2chMLl(DWWA{Y<tcjI!`FGjXK)vgkBy!|Mx}R((^?FrFO-WU}5r<n^
z8TE#-q_yC0Ek}#$22+WP_VfFtTXsIxbQd`?7EC5lBkbg5L?)&RFcxjmOt#U4Lafkl
z(h*>4exc$e*x2d(sgGT~pG?e}GL}jf!`B20H!)swEPJcR#}3YZ^Cze6>>au%u6i|}
zzNI?f51zDb9J6^x6NYlze<A(VIJ-y=Tv6zSKE<x53-j@uE^3&>|8@`;|H}6ZZ39r#
zBSc2Gg%#k27Q<bgGhX>ATf|&i|H^yR(z=hqJ@b;1-lV6@r5Ct7AM_cU@2xUPNy_?C
zxk1k;mR+Q&ul!dm!{mp`bBgkV0F5VL@!xMh)nN4dODoX<i1m32j(m@#u1(aC2g*8z
zRV-8=68^S$h~XlQz_~-!_h&G10!&!ktce8&v~hm+_9&bP;&>P6Ons}PZ7C~z-9xo0
z7~l)gh?6SHEWCK%q_gsViyx#5{`em%_UBZfU|tL1|1+&qu$(7+0plH>Fn2ySii;5o
z)=`6tDiC}l{jQ|R7B6}dBK%T<m_B+2+zxnC4_$g@2`d9}I$bzjxwW!EQrSON$?44%
zd9Z9x5yj4S{taHfuNKJ)AT?zM5@wRUv2y4AkU#6aP?e-AmkVGKP!w$Hg7TgXS|IbG
z=u0EW{BrT!<Yl#cyOleXZTRJKGchUHuW|m@KODso#`u^$|6+!;Y|n{0gx-vmqk8vW
zryh{x&(YR)gptUr>{=)P$uI(HLJo5ky|$K)oHf87=rik5YD_7LLe)w-EsWWH)PrQ%
zq4Qt#jJ-Ww_m0hftW-AhwOyYRvw^3)tarxG<j;Lg7C!iJK9q!>c<A*b=b3y}=~6{L
zkI3Zvd!i8{d=f(I$8D3SCGi3Xv3>3@k)hc(!!g_r2_uQkT7%j&dWFYwPbimHw9C(o
zu-4p2+k;5UpN`QCdpR1LBTY3<V=$mx_Y_-ZXar|iD>oQqCs*+)3)?{ysoFT_WmrHK
z!H!|FGx8R|9W`6i>cn;!_ddCC4i$r3$r1<ax^(k<znw*t%n?w88MpkoE!T^ZdMM+g
zh4V>F3m)CPpa3cDQa}|G;L0btq5EZ9(Prs%51m++E@m{cq6zA@cyS_qgE!jjEZJW0
z(q4i+UWJAspT#b{iJ}%8mLVnaM6dZ3#4q4s3oAgZuGk)o;~N)Y1S|+`zxB!28r3t^
zYPOAoF!Lb*GSh_)!>Pj7n`48(Tc|c3N#O|1qQ7ms`wYK<lIPR|lr6$fqk1v-MZH^2
zS8#f$K2Jv<d|y^R*Aj3g`6Q;!4BZHBwQEVzHbufGRD^^`X^MC`S#|@pYA(%fEQk>0
z)+K2-tBSF=<QKIAe03@$pQTV7LQe(8vxR4By$b(Kqunm}QaK$p+&_LF^_@Eie&1VN
z!jDUSQ=4?1Btpzw0eQ|TbMipFc=iJUaUet1>PeJuyY?K**B;SHl;kyFF|@S~tRb&2
zXV7%dPFqLWKKWi`a%kqaz`dTRzfudkZs3cXau>J5l#^uEFdu5=s{>;6YIGq(fDj0A
z0_2!kG*3&p9RJ2ZReB5c8(|vI>)v;SzNKw+M!*(IOVX5?89-YnF&UMt#4SN@RVo>U
z0W=+iyFBZ|sGC`~FLAH0SK!LZq>oj%A}3`&^jiLcm|FleB1b^QJeF6?ip6P+3v}g}
z0=ab+8lNZsjVb=q3rNyF#O<*oi!KX4q5FkL%`AeQ>*gv8A7v9hptm=6kXaXchU?E*
zI$i!n4ItXJ8gyYXzTAI;C9|dsg6-T+2sr<Mu^COi55eE_lUPQ-kgw^e*~$mN>hfuB
z<o42+q%>@D7(+#lMeB3N^}-V@H0(HZHOE)PnsvSAZ}a7z+JPBHou4}=sGAqfhRfIL
zD%D@Z_TB`j+X){DNo17><EbAi2K0;5OQ`{!Q@GXW;0Uv+T36guDnhyXBL!w>JE^Wh
z7KW7sxjyf%a($Pr_lVE>shJ3aD>AR1!kNiUvu{J~R@)v3Wv%+6VhF)&@fiqU?`Z;h
zssBV2S@sJRmeCzQ00LLjbmZG4^!P0ZIf<rD#A@$mie_;8`@r#3Z~6|^=OqOr3~!v=
z=goaBagCehX%Thx?(%htFZ<=S<i4v+PA6w8ZmGh7c;^kgt{|Q;6T5+TiM5Wp0(}g(
zeSwM={EpFDu*Rd<H_>%z7NhvJVJ1fBJA@HDZ5Av{_0|#kE&4KZJEO*%Q<<W111F1p
z`K0i-A_a!PE^beWXzZQ2h4}~yixYmbi?nu}ZiR&Rh73A+f1-oJDwj*s^?knJZi$$Q
zV;h+2gCwbCuT?qUpou3GsE_L%w{Cork()C#H2T1&09?*9{cPK}x?i8(vDClGbzq<L
zrQ(VCkiO?a*WwDDuO>Xf5ZeqUS=IAdO|DV+)ivuzE2UY)pN4#h^A>YS-2KnI#=^^b
z-<Rv^q?~TE{dsTeR^och0c<C40^+us5A~b^`a+j^QIK+x8wdki>gfiBHOnb@dyvG$
z#95P@oN!v_&&z*7u0Ha6O2OCz<CBaqn#<hN+G4nNx%_|-N^;kkqTt`(y{j8P)1~jN
zm&3}tMO|1TK@bMxYPQj9Ptty(kfgtN(*0dEm2Gs)Mad&x5;t;-+%a9;7f1Df5wKiW
zzUjK2TlPY0EB3l_RVN$NxdUb1$#!@jo@DLc{0-OVlcW5ek6ov2Rgn>-o^a{cwCz+i
zsQp&Sb<iZ)I!efhS^~Jg86QQ~@K(=|lOM`WITFhx5heM)h!ii^;w|NdX+C`AiTd^(
z=?Z%}Np-yDpC2d<=MQBkCz4+@XL+d5!s)da@xp2z>`h@lRuhz4)<a3XS_DE1*cCJ^
z+D|>vW4^=oIs_-Gy;u<E<^`I*#v+9mVa*2$_6?yw%`!^F(?QeToBY)5$dnzDd8VK0
zo;79_6D=z#YSYsb@PKLy(23JrXGB%xR=m*UJf(P!4>W!&-$^82lO2?A?EumU9q!qf
z+Lcq$MHl_tK0{uq{2RO4*22&9Y1!?t3i*C<%MdtNXuh;e^m|Gy@j@e<RpfhNSwla)
z_B1}obuji6@Hb<n35o>nHQ6%M{*9$OQ_CC^&0EW+Z!l|c)kjl3nO;ak4bB?qT{Hu#
zG52BZ^-7=THHPf~#HoE7tn*qeffWWEv^$<NNoI8$u@5tJ;0~d1hlA7*QMG!L?+QgU
zK8Uf7V&ABDF1cF7TubqmUP1@NFbPbw?=cyvf+4Z``A({KSWe))TNZJ*yPI_~Gvu0o
zIC*P`ck9*@$!`q9UZ9TBKNJZxODew4HUg;^yT36@!fV<(2nC5a_4b;d<>nH#J6!wA
zFHjPptWORiD+rx2<ARHHJZk+u;lZK4o54+wUML<!_-i+nHa*4m(PN<@MPKg?j$P%6
zcp=kpeJ}S6IcxL}N~$L^H)-|?^*hkRLGzz7JiBM`8i52=Tfz%8!jaeQ_G$ch`vMj%
zW6r50MO~e>niNvIJ^Qysav40f4_;V6hioceu-<lIlBOfKLIkw}=qRqR-E#x1Pw*O{
zc30@@0=-U2mUoinAdr&VTz(TDYa}_r5^Io-aV&}cA{Hp+VPa<{^_|K(O*wJggMiXf
zp&e^q+$;Sy)V8D`UmNICtp?Q`4wq~`r~SA1mkW2+)jRF({HtZdwWj>3iM0nWEm4WA
z1r!Vfu{)3qblTFd0)3CgV9MVxK7K#>6RjBw3pbz*HDXK-BB^3#RLxq-ZF~Up4q??a
z*UqRGzX9FXV2LyC3B#}X!speqbg6rL<oY2w&Ejg~2H&lSAYqoba?oDqPh0!vfj1u&
zNSRmoNd@fCMG7FMz#@hXlKVqtrjR#T{GHZLS1bVxOzjr};%+wR3!{=#FO(l(mz1(A
zV<(rhP=RtyMwV=&(Ovl|ICz5l?pS$H@eH9x_H!JTY<N%-*yq$aVGamLv%8mjd7_J6
zIk`84`a|2jSt=h?=&npiPN6h_(@bH^k_FKSY%J)KpH$Mp)p8ehDf}+wz%YFSav;pc
zX>_O6JtY=B)4<fCnGB9WX8>nOU0+q4{$~Cx{2@q;oQThXNrJ`B&;r7FP!kq<;MP*@
zO1ikN5jo?yjVZD^8~H`GID)%GqvrV{8N^3OcIh+8r2i+`ZC;R0_-=^CiWz(x<%%t`
zbJRm<Y>s@t#Hf+S$BfL~qn;U2*uTLp#u=iFhRU2wnzYaB6N@au{)Ao;G~hO;IwI2e
zi?$PL((Iv(q@0!)f%DN_jW?)5gO~+)btin*B*4Bai}Pu3ux0NbJs-7n_ey#BDv(gZ
zYW6m;ap}sx@L+6Sshl5wQw$Jw&p`*1#-5&r`?ci7zq{<q5BU2jR{M{$fVEqEXIU*k
zYC-#%vXRjOy3dP#bpMOj2NfrNu-Wl0czKC}l5ImVPcHg}6%v%~{G9R-e}8iDwfw-}
zlwG{_=0`aOrvv<)EYwkUF!pHY7H$>ss`l~DneiomczN&}SE)gh2|2H>ZeXumzE2kJ
z2(yX^1Kyh?nsV9Hr0Dfga=sb6rAq&=2fv0TPrV!4Q5bBxYI#B7=HvjMt%t+l!)~@-
z7}G9DHbV{3deJWjwi<x7E>`(izwfQ<rv1e%O?p#SQXbR0=vo94RXbPyFz&+95pAF0
z^XGj&{H05s+t+HF|MlGz(0lPncy#nV9^!(DPP<p;_FznhP=>9KAlZC35k<5(L*5gO
z*Uy+A?j8N3ZLu!v@~?B(95y@t-g~`Z@9XlrPt|5P$nSN{$KZS}b?%%fFdy3If?g9w
zXxN-6Dv#-Gs%vVix4vAR{peA4r6ZX{B#}4#<~>-u;kWt~fE#@F>V?|ZR*3L-iTqGO
z5oAc!uUal%Hht+YJ5Njt%gElAkD-%t1DVTej6RHA*Xc`IUva19R7EFfFil<xyE7GR
zb|OW*-|*egAFA`c#l<CEyTNtc@;xXlvt`~9`s(WXl!D#)K?R$SngmTuUN|Z&1IcCc
znBn0yM>FHKe(5-ME<pAB7C0O;W?b}7qEL@5CPyf?9IuXamM-`TJ4{WOT!rDnk%x_f
zpH`+hjJs&37wokU``x$hcWM4rBa_wNo_|=R_<h%_UC(ws+Z=rskdJ3Co;!PCiOL0)
zpVd^?tyv^bfhw#<ADM!My2J)<6|uEDR6|GUx?0&!1dK)X)FZ#p`MKC&dVpE~Yyn&2
za_*fYJ?7paVhu`dHsOZ!=O<+MJ#X-A7Rc_7gUjiCI%;efojC*_y@7xnxn2oF(v<F*
zA)Jdtq4~H|`pJjKAlJP2v2%Flt+sw{S9a32BH~>7{?&#bn%;pMtPlK7k7<3h^~g}O
z+#nAgxlQI6I|CzZ4&Kjo4IrhyvGbPG*;FSuQkT+(V-HG}C{fIyMfECxtHd7dxoX>@
zF#n>rsWbySk%!r+I^PO-I&VTd+aA7T7{%f}BU|^O^d!^g{`)6aJZCFt8kA?tII(0S
zlUI$4SJfLngC@u+2fe?w%+IMPE8zodRy^YF7r{VOIE6uXlsaYx{Ka>jh!-(dk6t#f
zT5C;?v*5+xi{v-oSLNPUvAp@7g^lALO3Qc|{82#2smd?-@U`&eO(PX$IpE--87Aaf
z>R3bSJt+NL)-^F1WHKlodNSfY;9XBr_Zh=2MUpdL_^f++v>jM^y6#qe4<CKI$};tT
z{Un3<q+j(b?*FwnY)@6L{8&`%I)Ih3yF1^5q5_L=b-3ttx6bg|nu_8g)L%57sK0-z
zZuv(}X+?L~^2y+T?q`;#&3`?5%J9?m-!S7@P1aYR<fD#_*0|!_fk6I|0#R#-OOJW=
zv0n8_o6}t^c1xc3B>rS^WipA>V%$Q!TwckkNboS-_~7W3q><~#p#G){+X`@Xc+?2f
z{N%Ka@zGhEwn1_;Kl0PFl=cEePfR*uBn_+R$}c3ZUD6;;(bX$^Y4?a-*v@Z#Noe_L
z%kX&s>e^$=w<RTK%hoFU+`N*W6lVHcO|(e*TZj>4jUILmHpb8>W6M@(F6~bU5U1>Y
zcl}uWW>L?vTeP2HnY}90u@oRq%oRR^p8Ua~K*ENaeQhs3)RI@a>wX&?w~qX;wr{K6
z?$p!u#Kk(rPBu2p!HZ9BS(bJ90Hzy`p<OYlIdH5X$9d=upPYhRkFo2;G#LGHG+(YQ
z%Oa8^$U522sB0xToM&Tu>O(f%&z9cLCrb6oQm?-<-ECoP>^$zYxw0(g9E83N{~P*1
zu}xLMq+f_oH?WfGDUyO_#%+9Xo%jKN;o|$CuTxJ7dT^e)3(0P+f4*w#HRHBx=H=RZ
z3rDY{c>Zd#rRrz3Z{J|C-tPB!3+sOv)qVNapR_&OUls(Me0I0tuue6nq?@*s)}cM7
zbA2u-hGIg_?J^%=nTW#@#(Z#1P94LY3qdCyy#WqW_*=FbaOCLR^o7wNzTW!!;~Zjd
zk;mx#b>`(~1Kyyi?&<9aqUukcuupmO`GbucbPz|-LX3O$3icw{p-6T1(wdkhIl0>&
zWsSKp*+Y}jIZvesXSN_Y3t=_6>qS4R9^6zB)2WO!JDwpO-l?Vkl0ClM$jR{i&@*@~
zw(nHt{iVjm#Xa~S`oO;9-4l~x23DsOIW*P&F}=uHuGMv`UMu<<xiLB1{|5252M5DQ
zVT&0{8o3>BSGHF*Z{EAlScT38q1nv><Ts<(8919(l*9H{I?<mIbxYtF;9Ld0(6A{0
zQKt5?^$C2u^gJn8+l`nR@?unHvXFE|!xCxrU)^hAzrk3MdHwRgTU$QK6C&g4`sBex
zDY3e|lym3XDMgAX^3a$*<<je#2y#LOzN{?bZHJC`Zh5)G9i7Mj>^YRD73^>hLJFYA
zf5QtuXxO;+;Du~Lad27gMgJFr4mTv9PbCj4d(|tpbeq!$=p$DOo(rD4uYRlNOT1a|
zC?z-7XIK0LN8QGIkhuAEdBVcFabJKmnogtEmQC-Pl`Ezt7Y01}1L=Zj=Hh9VMgiCI
z)0C8~%HQ3Wx_zrFZtPsbwiL0?H|yqg;TK-4QT;CbS9Dd$r3>G~(=Z0Tr5V)~rJRg!
zu8RMRkknrnh*CZ^f({hLRQ;j9O_p=e)s5TN|BYFnvgPC3*P48|xBWc)M~{W>jE+uz
z1Sf$Zq%60IH+>%Eq~{QMWr9i1i@C&Jo%VtLevbk9b;-y7&zb3ca03WZ6W1Jl0c%FG
zO@$tgN3NWUPNcX?f2efx-}i8KaP4K*9u6<`DK0Z^R(j+no5aLlrrxdZ?7cBrkefE-
zbMXO*vNhB{!SVoRvQql4?Nn)1*Q~xXNr6-HBaFxO`!`pXR+m=B3tzLV%ARbE5%a~%
z4c7}F8}57-o_zS%D_$zfV|ZbEu+@nu=|M#yXUFc{ncY`;q{K<fPfBBtE!7oWK;kl7
z$~<0_F}ljtBIOA#@0E)mX$xED!I=A3?`L)&Yk$LxrHf;j7xU!iXnb~HndMEOA)>mC
zm9*@fF`f3|{y-hw%B7jXH~b>~e}CXTG%z&SvQ^izZ}r=i$X}9U_wKy|{desJj`|BT
zxnA2vKO*ekM3fjp@+Sp{yp;Q(g7BB;y$9=8&PR9SEGxRiuWM4wJx!-J7nOj704e5%
zR%a)Fz{7s=(OcN(5R}|Z_PO-%g#V!<CrLi;uEpJxmlV)<31~fG9DJx#y?;wLn-GoL
z0lM{ve!1$GVqVi31~JF|c-1-W{y?|u<-H{iVZkelRjBT;Te^u-9q6dF4gB=!ebf8S
z5jU<Pb5_GGf)sEe{S1#G%|zR>9V1^jYi$`GcFZ14yPB42WwQJ2#oYdZyu=7^O1mn=
zOCe83$4Y=4H5&|{?7d#j^h2*bCGaC(4eK*X1m1E7#D8GggxgKuJf<=I&j*LHfVr|}
z{Unu8I&w&+t`Ec<=EUw4o$F;zA&A#IrO3oYROX#HJ`~|o!R0=_c(kEBJfx~M<Tp`H
z#uehW@awzZ7%l*bb`#Trq4l^rLdvbI>6##4Wjjv~d_L1rcy)4P1=FcJ8-PU`0i9!d
zzjht@>OpV<j$`4YZ9{nuHlvjpnU^~Cy$Ao34NH7i+W+RJAH3^tUP*sO2|w7u4#qVf
z1qm2k=PvUC<Kyh|qOQ<Z%ep3YZv(t*F((<E*Y%A(o|UoLWeGMBBuZAyx=wQk;H!)%
zHG4Z}T3B}kMRt?#pZHy)@Hmx3Qn=l7tq+BdUr<gH$ul3Hj1b+L=Dm&glTB3POn)uq
z+{n6qXY(y=Z%;u1Cy7)2=n+>Z<@z7?BqEWt^12jIwUYdkkb`RFp9F>X`}QjXi$TSF
zbF|71HDnOpL`J_y6SyfoaoIh2=5!^N6BhmcX$n#>+n97)@!zT4L7%IZ8Kw2Ui*!Df
z(K+lG5S+uSez3-|^2vWy(SU!$gyJUb?dAO*V|c{9tv^t3vXsLscTMnW{d({QS)+Sr
zL=M$jQkb1Hlz%4c*${C)DZ4<C^yVjT=Rxm?yl^K`QoE`m7z(EKiWgM7r+B#mWXOx9
z{_Qj2!R}HQiCJ9Oq4~=X4IBv_G%Xsx<IDWV?>|4hkx$%%MjUXlI#VHtxRACzxvcbX
zWpL^rixeRz)xMgE4Ac)3P@7z_cVSYtalOolKVJMxSAM-i!3U~7vO!nx@1V`^0!wSd
zLKgEA?%&vLrQP(k<T#iu^f{=||0K&dM8I;z%XMO<UF^=#aRbv{I1+AKKQH5lWmiAq
zR%X1G?V+yi<rEw_8l07E#p|{BU-IgJOH<~{;bFqiTa%u@JB!rBkbzz#ApUmIFoWjs
zCND?YJ<0Fu#g?|kb~b(Wru<r2;@lQjdD^ESyFSY$sN89d({DwU%X@$6^%1Swp*F7#
zJV4kawa)BGyd%8lWP0rZ^Q6snZO)x+9yAB@y4bDzPH^rtFO&e-<YC*glA@xLvZIsv
z6BCoq5{5yQ_ZMOL9rJ{(XC2O|peeWTKYIQ}yRL+bU4silxz6d6Yv)R@cj2#KHRLv^
zvxEUw2At}Mv*<MpW76UY)*UfmB+RzDH)d={W;3!uF<H+i!ns?1v5@4uJ%+BO;p)*f
z9hN9l4|bJl+8G_|yk(~<{Rp{#Ixol!q;LWkn!zpM2m@3@G3xTu<>ei=VPgE!gW}+D
zkf4eRx8>(X=Qk(Lx}0(8%<BE@yp7vylFvL>R$88+VJUtm{^C1$i*}6GhDBV+gU!++
zWGhb_n#HaIWHGOi5!*ou9|mcVyS#eq-T3~8B(GoHO2#ZL!_%T$(*$;L+&eZegSaxv
zRWE19M^`UYM62wib-<FR4>F_<NKC3kRr*lz7`KzU5jjy>=pZVvX~Y?KJaf?sz8T@2
zJ{Y{qS*D*@VPa-l5H$6PoiO=Sc6#uH$=^xpuWntHtHOJ{0PpbtFVHO3601v7p+SzN
zTVo{O*Ar&oeyo!kEK;o4+8!1$r1_<vwEX#Spu460*{BoUe$3-l)kV5Grvg*L=lxEY
z&Bz8RD*G{fkfv40h_q%e-5BmE*$G-JZw*d^;@_ml8NMw734NaZSGI|>Pid*LJ=H<4
z`d)cjWMP46M!9aUb?{^(=To--#aBMW_M!UcW8_~KDX!3Kf#m%Pi};eT{Q@EGHj=1Z
zo|mKSWUi27g-Q4~0!`YUF+;4xDE6xD86k6V3{oEROlF!S1_{sbjsWWu4@n}FQ{`g1
zy1+5JF!P$l$A9K@LvGQo0S1OnW}>^=Ko1T)q@m$7m@dV06o1fkTt<BCn}-d%c2n_r
zPHGF?M1RN1j@^Yhk|R~G&^zAysm589QqQ9^c9t?%-M1_|X(svR?jYZ8)!A6-!a6U5
zS6a)5Wz&Ipp98T?=(xHlp4#rYCiK~k*PxQRZB4{1H6OVPGWnkeE%p*>nr5n)feDZl
z7G!&SxoBoT3rM>XEna5JS{0B|JnEI5B7}K7YKEB{g>2-o;@Ko^DRrx&ig&pm|Et+g
zqv1Dm8(2S~dM)*Oe_m&<vL$3UM~c!}y4dv;fT9q%+zKRvAzsf8N177zJiSIGXtIfW
zgLUvkWo}F%=m3Y{mH^QWPBSrP4OI{I6Wf@f+i;I02`%1;Yb?juETOLkD<MQr)ok$`
z8f|YOjX25iIcWLeF7sx|8V$o27rM+N_Z{E-k8^JSpy%7gM;D<+@QW5JcyP^J<~o`c
zt@U@>0HJh(Q2aR#r&cFegIh*1Y^m$CU@NyX8{D*gsfQU}lC#6xaGNr0rk4lkQPbA+
zrCOW**Ze<e(~kZ<A8)+Dbwi^}Zm2H{Bvxw1=aQJE_=zF0U10sut{@J5RdsWN&(7JQ
z)4lK4S!i5lS7Ei%Va9C3PMhiXWR?s(Zso2^*!mRn)^)H;seV!Bqa4Pw!zU&|r0%}$
zYJ}yXct|~%L+O%6BDuHC)qU&_A!dwxxueKTmw<MTjW-sJd*vo@U`TAZ7zu8CpDK0+
zRKQC90D85lss2!z>`L{u0u@?SKNJYevUAl*kE-V;I5NvX-6Ah<`x|sf{NhuXS1S|N
zI48E1IEb$#^iA%KO`nkLbA*n$$+}lBFJRu9@%@$R+hqRA0YZ7|8^Yigmk!{pkndp^
zPs_JuD%+TvTvgF>+f!MiUUzTi{x{Tv-RfrN-r#G=la$ACY-WM|B^Jx{o_i5uW0>Za
zT}5iMnLy5i&R|pmZ&ZC=?c)etN%<FvDlet=1KfiN1oRk?npI*Ir8FxP?*fLn9<<h<
zi5Z|uQm5hlMw&9OTQ7*Uvc@NP&52s2kMkREyh5YEayC}E3;i_pt<ftvFH*d7LLOn6
zEdp0C#FKJv<|L*Yi{A5>z5&JA6N+>^LYClvsH7cJkryDq8lX#2bOaViAYwJyh1A!k
zsU_oy(=bT|4J|d~OkItpH8a+Nu}IMWfpQgl*UjzJjf{;M@5!1&!-K=<yU*tct38j+
z`EE@2C@JN9HF<-7#X@i9$~T<*p>mYajyKZ>m$zCFTGJM~%GdZSSKP>=*Iu>_lO3lR
zi@?5DDux-DONbCqs*Hgq*Vt`aBt|ha8Zc+FYpZ=L-%nb?ilbVPgeK}D*SjCdYdiyQ
zhR3l{>Q5E|AUvEZVm6xO-J-kFky%&tmptVkyr(qZUw){3zC%y_d;nW(Hc60VjW|wX
zWJjr2&=#44y$KUQnj64NnhS8$HW4_DZ*RAC&Ush4wk`S}B+J|D!xxMwfL&p09ol+i
zd#?$-L`n*`N~@@@s!;j<b)mzd`o(OZMS4b&MJKV=jo~2)yaH`+E3|b)1A92VA+07}
zSg>2rmi^@<h<Z4^9JA7TyW~+)aaC1$S#;sm)rCfnE|oiNux!WVQ!hh;5(q&m3t)<=
z@wOp=#q3WUNl6m9E(=IYjgvd()!g>KVF*4u(g%XTn|I49BWHUiIy?tzEgD*a$>ufZ
zgU)H<E?@|74G#!(L3kn=-F75ZVpWG%x7~z{i0Spr1YId^OSfEGqS<n~%w<bcuZ}eB
z5+&DBq83v))B2mmr|7`66Pa0ox>o$NcZQqh-)Z2!>i2<FqYG{qy>>`YZk1fK0d1+R
z(LfDgl;j@Ib$L4crP8q>Skp|GlIn$oHO}9_6b8&=6T^bf)a%8(BwqbyfU~1J_n5z!
z;_sXeZ9TNi_dUqPPovv%<+`p?*sXWmsdivY&JZzg)7Hz+fL;@*M}j14lc6peP0I6p
zE8-ap1*BnP!dmIa`fT@v=a6)FvMBVr;dNas^8&X|b1v-QrM=U~?$nKabBjEnI)&%k
zD>bVWY#JVBtl5aG3yMXsA`<lsLSqSi9Gh_)2)ZQx6yqu7!4R9L1!Y9duAW(wC55vt
zKaHH~+)`OnRH<x}(FZ4=$$U6fPnS%in?NCdpK`@G;wrrXp#E^_Zbf1+J_vtDsU?}X
z$qwho##-d<04?y`#*|dA<f^BGl&k~2w)=JCus%9cuMhKAGA;97QbNu5t`82K3^`u@
z6vLtmbAh-EDoJI~RFeC{h|>%;N@mK8<a#J06JIx-fL(76<Ad><O{uPkV?)4aB!(yQ
z1oJOYpE4(7YDZd3eB=g3aZ~0E)kW6t?4JgDxyMbLCmrfmMgI$VH13lECiKF`KUB)g
zC%qv~D|K=wrhyCN0YJVl<2M<xmn5+<Gag4`!}7n3f<5Y!q~WZvD;A3`_5D#B5^|}O
z??5TnF~JY+o)X?tHIn`TAM3huP*9?KcZO`B>=cyZ8?jNt8hx{k$oq$4x=uic<Fg^k
z9cP;-hYU83=~(Fkj(E<}Ej-mSWsa;q)aZY`w~kQKR-`JPhs`5<qPWdlQ0w&Vr~ARU
zlkZ-~L$}k?WsU$H=(`=dpe~I^Tj{_WM6Z5s^3_11T0|_(<3Z-2Tpw}lHRD)kXqAta
z!KG%W^4Rl<E-oI`f0sWv|9;W;M2KQyMKz=-c(!Xj?+!r?0I9qItv=}?)KB-`tXaI_
z+V%-5{#80Xj%I@l$G?CX$+?G()>AK89~>5}CG^Hq5}y*&qVHNQ7oT}CR+icp{Jizo
zMf2Zeun`u{WD#Cl`JSL=F%6r(_Gj}pzIy#U<2E}!6q8gL8)NG#Qs*UDZwP1)P@1P6
z>;M$)kk+Dt(GG8)#>mV7FSn?II>~sN!JpP{Spf-)77)2h{!vtc^`3xz8`Vd0r4s1z
zDDK;?&7ucU4<Wj@gXAW!>itIqYigxDjWOTdkeYT8x-G^NWlRmC^{X#mDFla};EkP^
z`Y!cw6u3_=<oa?QAr`=G%4JZJEdc_K2(uEMt7R4&H5-uYeD`#i3$!RCPsV}L(nPoR
z*+dT(yY-lU@S*um=`UtMpJF~?*xvSA?6;DOmY#ltwUfJ}OJrW~uz1=Ys%`p+QQb7i
z{6Shu#orLMB?vTmqJ8bVxggzvh7i0b)f&>yySI;}E#+vYv%Y-k@^W1}`yy>9m}6rU
zLpJ>lGpcJ3=U+W9*hWL!vACCa#dV;R&>O_A#&x;%(K;ksjw$)wlareOl;fuSn<KGJ
zsU%C2I-PGw)%_zP@HP`jm7|`83eAc30pwn>kk(021pv?dUHN#=62!lrw}#eIvlW?(
z=lPQtLr~=h@*VHmMqU&%)F~ydTJMIpF}!-YetF}{od`YJKmAyrsafc{$xvsFeJ46L
zT3I(X6)sZveS!YQIWP$;{Cu>tP+z&MCsXivW^jGdOc~Cm>v{Fw!NZ@XTyU<~=50|Q
zQod!pJM75u|JmAj6Eu2UV3iaJ*s+rzWmlAg)>oObOY&viGz>KenT~;qaZvPmVoo%@
zEb#uAH9#u#qw)f7UcasV#2Ye)Zd-q`9qsG<yN~4Acq3l7?!nGZ%VM2?MepeK$vj~J
zVdfIn0C;DxZoc;aP{F^yWg9E~t(P7IWC(xx8g<d5wp%spDd}~*GRNBKxUw3(4&`b}
zRxK+JjdJT%ZluuY%ZDgB-|9-e+pfJ>=!m!{O|c{Nt2buP@ZIAJ!UQW|%_n6CA}aKt
z|La7xf)h3B0Jfn`zGhGwt;nSlS%ZWT{{|*}f!bJ6Zu2h|GYCDdW*q~=i`5p@q>Fyh
zJr1Ggj)?tQ@Pgnys&{%Y&SLV|^r<Sz$}`)GDx+JUe9YUSRtqXWiw<B51&9NSUn>2e
zNTHM3CNcfq!ZBJq6BHLv?FQeq635zjE<P;Zo5HJ|r(Q#oy{n!$x@6R!LpmvBw=VO^
zix#9{?-S(}Y0G9Jx_+<xujSMtMIed(Ki_chNY9kJa#`OqVk<d^@V@e{o1snj$KpL+
zEgQKEm&E2y=NC>v?(dz~johCaSiJ0B=aLJUZ*%BtiFPwyx5ik00xgx`W+8ge*Wfl$
zy2M5eb`CRxF6(D88_>RnG-f>2`{uk|bU{+`gE=o{?u!%r;75<1WXJ!(AM_fm*E;;v
zFya8V0E;+d(B0Tc4LI?$`f7F#Q8yv1TeMB6<H%B`2$f$HlH+tzCH+o?=rJEh<!Yvu
z2kEB9dnRjOXf);K6z_smoicxJ#`<O2SjSZU#OGV8vwe`rAQZJpp4e;|CG{Y}n)oiW
zMO7Qpni5|SD~*z7Mn)pTPa-+lH-fk7R4QT^VuP!5hq_szuYImg23sWBv|19yN#tPD
z;Fj7QYAtx=kl7%3z$eOV%bOX|f+E&Lwb~?IICS&#aWqw;R;yd1)1A@vhW2x}OKxnw
z9CD83j99W9f9+z3_=&Nj@-J6)lHQY#Ww|=HP4mF9?ClJF^#`9@V1V9>MclFAxmQmw
z4Q~o2HP8`f#XczwnPh-qnHZatMvs=C8d2xP=&k&cQrUMet38aqhLY&;I5c=~MBZc8
zY%At$d+0B2F5%v#smHp=(8biFL&;$!JFf%}lSj+}x=^iwkhF(_m6=n@#%t3K4S9Uo
zOTq@i2vwozF6(s)zggyf`rwsPPM7`ShwJWciBP#Y-Q<dH!^qc=!A$F#*fo*2e&Im6
z2dqDm5H%^3pAsv)?aR`SwdYT<OeQv0cMqQ6ax?gU`S={%F!#V-N;*fk{^XJAeqUul
zBvu$pKu&@8&*xgkKs|h!r9ckH_P^?rHlSMo7-Bb>^6~}6-@6zzx#PLs8olLWEU<*~
zAYHHu7F+dvj3BRu(e1s;vSJahtbS{%4*$sOXZ*v9W?kiL)s-tCWm?kN!@I;wRBEEr
zu!v@g6c1@DsZL$mA_mNa?s<jBa0IJb{Dp0C%dd%&{OeA)i0vX8t<7R4<u{f>$XJ$$
zKKOh*`D^Pe2;OM89+Q}6Wf9&i`VRDy#h)Q6C(%i+5J$l6P}!0JrhZ7Qc&?tYltkOw
zt;FIP8~bLG{A>C2M2_N2qjD1>w;Eo}>!g>>$bbr3ITv@~b)S~(Tq)C|vP;BM{uSj?
zRHQOWC)3gWWN9Uo$5$A7w7>O$;1Gph#>GlDNA4PIzA3nKNn*-jkur3<%(TxvtY1~0
z$gw-!;#A&kL9*LEHGa0J%*At4S8H~5Po?jPnMHFzEOS<_fEL=43dDWlln@h3C?&|X
zKQ&8BAUPd$16(OGEzZaiwXF(pC1(*I@ISN&`%Py+0+8$?vExP0>W>dzmaMrRu4}UU
z>lc1XX4uOwefORkLb<Y}00Pzn2xz|o!{==Z{0};5x<9#1YK^K(&NR(yri)ptMwR+K
zoHZ!pCFO*&O{^9zR}T@JtsXbr9$SBCkbrO)_bxGxTH~q;%476;ES85FlUEVTh1j<y
z;7>5W35iuM-vbxkjLsq>bpl=5DrGZ$J@*<i*wlM^jHV^I{y5Y7U=C?M$UW5(%eM~b
zX6>HxFG>@4(u;@VmT+b(lE1$5ocMGnTt!0Q`$@L~uGlYvvBI0yja`J>1l8Pz`j>4`
zmXe+qWaq}6ITGP9`)e0@GW&IL#%C9+UY8pIMzV8U_mom6t@>-~MQSsS2v4c`RZ(fX
z7MZI9yVcw`)3>l|sb@s3nk`3rYqpHvr<B)w_1&AAc=%R141$fz#wy*TXC~dG+u~=J
zaq(dMX+QM6%VRVxl6!vumJ_VBCARP)hn3w>(=J8rb0Cu`2S0Q}b<`riWdsmg&Z1Au
zhzNtZhUF{EBq-0V7j$X!#=4yRviA~G^tQ2kD|f|mt9YF5tNvvXDwxqZk(zvMsZw*R
z1SI@ottUZZkl=(qCg)R(>%AWF8oU7^X1Kmm(yd$RkllbYtw0p4d+aJ7J@TsN&0{6R
z-pZ>?QedC&InEPs;e4w0EgF7DzM=#+ZKi-@)`X49Sg)wT`%~zbt6&bJ-p3)pPpk;0
z;^`MjCM?FRhA9BGI`OLl=fK&GRa0ekCsbpX_vN0?UFHPT(apwL-?(My1gRa9#wMVf
z8GxN`(8E1s5$Q$D=GW$}WS8QenNd^jep1f)w|+0Z8gB&5>0Ql@B)uel<8V9Jz1GnM
zoZ08mPpisfDE}m>;I=EC;;&3IuqCX9{mM184*CkJKN2C{pm*f4c#(*#Ke~??KIf%b
z^5DrnudZKh@@IXvPdSrX%)3Kd606L+*$P+ZlwaWwGVk9oT2C?1clec;M9_mgiOfGE
z<Ta58-mNFoegP)!O}n;wpY52H^g5zd9M>tY3cZP0;V3dMuc(r!QpyDG6-axRIosvx
zXPNtz=&;NA>H2@E;H%01SBbxY{;d|<@^zue9|74{cjb!keAq^p<r+}sw~6dg8|go&
zlQ>deq+8D#0COf&KV&-AV$!SuI6t*ts5W65ZE;*j;s_H1qL^nB#Z^Pjr~0Oak`9Sl
zH1}XGs1aVAd5RgGRvNy9Im23dr|t}<1!Alm0T9F=?LdqcAZPx<3pv)YlSa96J%|s3
zsa_H`{P3*n07JR<V|{&yC^15vfN?^IY>!7&d(y>RiuY0WpXj882gk!CbQ(Qw#`zvf
zC}Rt;U39tK8Kvef;8vJ@!KNntQ28zdnN}0YXEz0#E_{wHFK-x}){|RHfJzcXPGqjK
zFi~&7s#8sb><$YB))NhT)+kzo?8a%Aao7(X%Ym_vS<FWRr9R~AdBGP&@f^HvAU~!g
zEYeG;I)E27gI*$Qeh(&@iSF!xy9MEy9}jFOmup9X-i7QiyvyzQ06f^`q9hS8K`T>=
zK@wC0w~K0wGM|m<oD4M1B{*%XVZN+>-9>d5MMl(R>|iHM9St@u*hVZMn?JeqKJ+2@
zZoT%3l^Yt#E`R7Jc=yv<=%rWEVT$m#r59tcX4`P&ohc6=6Bg~QReXv*tK{#u_<`)p
z$&ndn@2!qMiTS7|W;C$Y%deo1CAuSO4Z-KZkwmwVZh%&a-5C}lzuZwjZwWJ*d+-G%
zt5L6_%RJHB!1#n-%IjAIUv-1MO>M61Z#8X~N#vmWb+<NbQ=$Lph55n1aI9XSAT9c#
zvLiwf%bUoc!2H~;xd8(}gR!R=h$T@Ec^_8@%IJzgmXZ_uh6R5y{uEP!7d~Wuy$98E
zo8mEV0=luU^6J+t`aS|*9T)}gusAFFz!7xy50$(#^*lJ?`VL@U;Xxbz`_K6P5ar)8
zDX@Tg%!IF0<nX1Vs^}lrF*SG-Uu$&WzPYFbu*-dQZQr+JHSrVn5V*7WVJdVJEJ87o
z|0i|=Y9Rka(X`?WbKMTr`L3rJag-9X_lL>@l1vqvINxLk=%Z00m;o*6{x`*aMMn-}
zzB}V5uz-U848LF3)q(@q@u~yZ&+zkVx9RVkX;7~Y+>=A`-}7B|{D%tjhsrq>`cC#D
z1tg8Nh4inf(@{L>ahx@MtgIJM91gJfZ4@c^kHHI&MJvT)!fpDj7wt{=BE_YXYTviQ
zKZ>A#G-H-qDIS@?ZO`@Hd7=7M=ie5VEDs*}XWl<><t6aEMa+q8SnWKv4>+8#7b&s4
zRrr6Xl5$1TFkGgq^`pw~=KmuH38}}@Li)R{R17>v`G~*rx!a$M=5ygP_#Y~N68{fn
zZywdu`L+v3QBe_sBA_6|5wr@?3Zj77C?ZvgQBe>OQcIOdOsyahLN+oFVt#6c3WcBu
zs0b-CRYW3$p-Pb%Bos1Gt4y+^5Vs`Ro*Vm~cb#+Ach>sOKV4lW**yCh@8`a*`?}CN
zN5Oa#L=x)5sP0A$RY(8`_f8AoJkUX3tO2SWs$8GJoB0)gqJnCkdm7IX$={Qo_Et^6
z%U&G&Oe#KwZJzxEbma<QZjcp;K>Ypt4}l+7Y0d11FB~_I+o<vB6SV#r^4bWQ2Z?>0
zfW*;gf;#`6#!M>4RHc|M2i1C}BQ)Hnc$T*b3N)%rbo~76kmbQwE9H$O)GKt3Y9Ctn
z26+#6``yU+DY(^44Pd6xNL&y}$s-n_pGli6py4bSmG{JR-b}3ut}5d<94OD3s^x!?
z@nkz<Axx_u{$Z#O5Z0hpn(sh)L7#w}-e%Z<>b42So7up+zGtIaZWfIc1p&xQ<>Iys
z;^>6jj(Bbe30d{tkhdD2djBO!)WUi6lK078EGi^gQ@UUg@BuM^iB=MgwD(3MO%R;V
zHVU!;F^OpZ2TreGMqrORP?mgA@<H!7t5yQJ&1}2U6`K6YXLk7j|CrL#*FgTHtAbhb
zJvSMdYK7~_pNPr`hJNFpI1G({h1~8l=~%}2hy$e-t!h*K!k>WIaOReBKRhBwo<`z)
z1MgD|x6UMboLF(3vkU&ct~)?uicc(tZ*F`6Es96`e<r%bGX?hk4wT{4S*Afrvr2c2
zII>x}5bf9MM5jI!AJ&YACp{Oxk7o`b#6%w`pb8}(Fq+ftnx9<ZH7FB^(inYyoAW}T
z2oY<b(<gA>Xe4_Qx7Q+$6k-U`mL)AD?jfQx(a6gM(ROG8`u-@5g1(xR($&a`!<tHV
zyXJdOSWzaQNzbRzx;e<Wob3X8K%xRxCqh({h;k5Muz(5lr{M1bP8~(Dc2>L(y1V`X
z$n6GbDD;Sh&^Mc6)QQOWT^0o1$C=y!4RtWgyKQQi>95a0oQ$Y%K_Sz$8!-s$(;tvx
zPbu}2H&2GDZ}swED@v5U{&$WQ5YHL!D<P2xiMT)gpHXIJd%!+GW9CsV`TYv$I1&2d
zgn)@CcOp=a^0vr`q^kTfA3pcZ!mCpZ#UA()yg{8K%A{(H36=>?Gy2PX@LLkH&KM6%
zW8k$Pn|MoT#%~RcM(Y$=+1vMa)4syRb-JuOZ(QT*!>&owdu}*J7Oe<ND9t+j$R$^&
zNO2dQxfQK*MZO1~sv&O`5+LsP_r;v+pKd?V73%8WD55ry<0yI|p;}LU&Oz0w3X1Uy
z!8U1{s}r!jEm)nyK2j3cYibmG;%Uc}OPZGn!>3~lXexyZBv-^0nyOV!(zaJsdokWP
zqFl>1Qp37C138%H1`%B-UcqU%$<&OSwpi)|;;|R%IrAR(LgqT!#&-j@JK+g>kI`6U
z7B7p8q%R%itZA3ZcM&h5$oomJ5lI!Lyic`?ESv0KOr6IO^ByJEBmGs1({cuP_9CSY
zm*~HQUos8GY@MbBNo<Ogmo!ttRqkhVvV=pXi4E0<vP<3;oe!37_F**4xZj%7U9maK
zJ9s_`Bw^Q2PWZvp+1Sr%5G)C$_B%r8zg@YXc<E~pJgLQAji)M|23cs`&{y0#(Q<e9
z9lrY5ucGD&J51}aoGIjKwU{*Bl5&?lm!i6kORkM_mY2$-UUTCorl@2R`zdUaJ?eac
z<Y^9A*+6-%@hqi#n`)Q(7A!*gQr6I=clr1n(_|TQG3#Sf#QKOcx1~|*WW3aJ##LVV
z@>-(|r?96zHH)NAp87v?=WKmSh<kK+!*=|6UUaE0`FB*3C8z-CWtcqfiLIlnbCB;T
z(TFK+en8H$R3Ti~X=bX(Zj}vyElFPDXsea4JK5U<&9WbGdU^Ah{2J>!f$0}#sBzZM
zRr5pCrP3$bJKkF`eBxz2mLy~cDtRg{w^11k%cziCr7eaT^b6-D0}!(_;@C;qQ@;k^
zC7rZ|wbx2mdQCiCtEXSPXhlx0WM%Bf2jwFc_D7^@trNX#u$PJ9aP`ef+wRdfIWZOD
z_D7E54-JYWQDx!}9b}DLU|G-5#g_Kll~lGbBs?`7DzVnW26`%kOf&OUImvZ03hhe+
z-ZXk8UZ!nlX$T_<Zs!LgejR!qvGtX<1;v2{13|v)Yx?Y6!ivU3xth;-*ijVU(l>Dp
zo`0|szm!X~FJoI_;nB55KCTaO6wFq++E7wS(|#hq`DeJ|C)Olvo^gUE)7|nN#j>QS
zkiD*Rg)il6L2U4*f;a9%rgvNOmNG`cXS#5FObK(Qu20nbj2Bm3m<XFVPXH<M-E%*a
zK)mU32W_3ozZYtE$SJipog2DjAvO&|_Soymi9GDlM_0LN@eik-)Ec5>ws}}+r`AB)
zSG&&n9&kW%0An_6;^CXQP2^PGJT~lD&^abj{$;~zB#!@%SOUf|&LMt9?5#a#`YK}m
zWb|c$v^5<xb9PYTN%>HrCGXCNk>V;FJ%1^0q#8}QWxqYo?6-^viDm}QAhf$-{QhJK
zg)|fSIj&NFY-=EGV|zJoY2c46F8JgPOT@au!r+SrGdF+snvAn&$kDxW|M;+9CQ80{
zr3-U5c33f&280*UZWWJsaq@#N1d=qLQ7SaYw<|q~CWgTjdKoP*tRw4#M_|6p+hW}j
zjGs_5q1U7f4#Pg#Tc)1duaqHkf@W1UulR;IHC?lZ;+YEXRFm^&?US;~9!bt~65?1c
zz-_b$Eytpf>WjsJN&|*d@PiYgpdB4SJlNpRSm+&18Bz?{{o>ah>JvPCi1#qi@cF6-
zRS~|$r%vBLadMFbwb-KMPWo~ZF7}#*MVNft+<YPn8+i6nyrgywd$qchZ3s%!c#)Kr
zELECl$xO?N#%9|3&%tm=4yZQRq^XSMX4;1$`Qw4(<yw5bk*=WRB9_aE3fugv{JY-K
z=y?jrPJjlpdYy)1C7dG4I#j(4Wa}&tNeROMWl~Z<lPdcfOaS|&N;iR|OFLoGImKAS
zO;ALz4NSGcmE6uo&;vU0Z3zW!40%XGp~Ud_-s!Xp2m8kDPs!f09npuQ)!joIda2Bk
zlD{-Qd>u`@sRmdk7`Y-Y)ts0Qf?MhMqT&;fwqD9H84U^Z*D3o>1kUr$dA<$3zL0fD
z3H{^U*>n7w?Xu#v-o=LAsfW5li+#3~{QY}JSQ^D6p~bC&L?oiJt<+i7przzjuoSfm
zo7;%w6p|_mXTscLsw-(LI77rnm^a)2fv#0CU6Cw*t?pDgxJK?%dPLh_khBzqXt~0H
z;whtOy%GmjnM+@%Crg=&L4`Xjf6VqwRjvqRg8M|~NmlA`=iho)lhhF5Bs~*IK%r?L
za*C(g!J{BEW*arI8}$^jAOxA^g!s$+Bw`&9I_0YGajb$eC$FlGUpPCYkNp{b-Lqev
z=hj=1?Qw)x&mh-mOIvrm6b*daMGQtt+jLH#4Lo7y!Sx@Fe6x0H4u%V`kV%yRm;UI9
zfTysmzOJ>|JN0qiBQX843<~G#m%Cae2Nnj3jV&v*_l{g!JkWo_>#rf77w%f#mkLAE
zo*}j{<#?}{igNXDoUca(Wgo}K!0wNsOIWfZ#6Hz>kGMZNYgXrIRbd0I%!kj11-kec
z*u=!wEVc++aVS|=&Z)Xn@iE!_5!M<r$cjBu+T~AD&zDnF#t<^h&%&w_E5v$1Xz8J{
zumb$T{_g3)y#qp?5#mo?fhWjXzIntu{3LcS#*M4pI_A4seyD7V!F%Td)&-$0Y*QxZ
zrgOWjd?3m>Qe9c`v&I{^6_`_1`iKG&9Wh66a6mis6q_r4HWSBKYSjV^Eoc0+JXPqs
zrk7255aer6({1d~Gp)TH7B_~ZSWPZx9rU3$7<h$N4y`RqSrPX1`!=`Ir=Hhf)Q-u;
zDwD_1W?MNgMs-|jV)G1nL>0Dx2+UiflElDa{#^D>{IOx0{W@Bqzr`I^Y<(H4Xt+5=
zWwSt#4@DID^kNp%yGv4&vdO>e+|4DSfQBjIeo#jfgn$r#cybN1kn;kWXMaEru0T=O
z!CcHsteA|gF_dPTRCwc(%Bmjw3-WahIl9=7a<j7Y=XVd?l7{xdk^VG3p{i&^<l38&
zI~JZ!qPVM0!u!ud>wIVn*j930qc{n!2QLMFV0$@Z(VV36hP<q-@EMvUYRb6n`3MaN
zDrLc)ypgJpw;e0%lw9n#zEmDHR~2aMRH3N2AC+;Si$59SKs%*Q6G$={RgglSZ|{Fz
zxsI*TOIScEm<+<wjWc4^2867dFKspZcw9$edl+m)#RjbH4&7mobJI!&96P5s4}Pzu
zUG>pmo2Tu`othnpi9iy^!;Vk(^QFj@S{v0V^|gwp8d9Ec!q$S(Wc%*2+(p7@@Sf27
zCbGqQQ&?clW^6!)rq(bn<c~~-ne>+3JMq@TJ;L;+{y$X@TmA9^Klb%XObS(cS%g-z
z5*BgY*MvTvA>q{plVd4R!aG*Gj$sgJYJf|nV3(32eirfi#mT~?bM`BvB=jVP_OweR
zYEU-v5#*uxzIg1Rln?vMYT7MA?TQ^6j*dl}PAK7ku4|=WN6-O11uBQj*s#optO&=Q
zC2c9TuFVPT@DkNBjNTBU)l?0mP+=FGMOliQy7~dO!dY{|lf?wD^{)eKH~82%m-SSb
zY%1(%D$>cg2TV2zr43vw=BP8!x>aZpg6}MIfRcU-Df3mH0>P<DXHF~4K+a4qXCw^S
zsB<Sn$qUCKj%RAyemsU{#B6|ok{4~m*@&Ze$2_XzdwG1W4l8|#qC4tqhW%wq&9+A%
zC;l<f!G4m^ic}r~v-lhf_4RRkZ6!*)5HCj0@cVg<Id<(6HOGroa~^ltyA<MGCp+Fv
zupI$YRejrQ#S~G7r$h@9gJs%ZwK1^i;!f7yHgCCE#u?Y4vaozFFA<6JH3zz9-z5GO
zc>={U_TeK+g!3Ze;}!5M$s8pHguWKN#9Dy<0}YchTz~c+9JSTCDW}V*G1C+Ndkpux
z*r7{DL_RMsM@9yt{(kpQ4hHsNqUcM_vj#%*AR87F&3RU9i1E|lI3V}8FmQ&XZRKd6
zNGDO&f*7)Q;Mb(3B`4}aLPOIoc;m;1sjC8qmUmBU1*h{IO6A92re2Vpcxe6D-p=%1
zEu~K<bIweN(h9BX5MW2(5}6@k2$|8D^myb9k`h6#7wC9_G>h+6{IP_ZEGp#sV@)?e
z&#jtPdY`p!7`bd^{MOz&&mtqSJnLudb#3m<{#)N$d$-b$7}}<_Yl5`dQ66qlIFSK6
z$3ZMZIGHG*gwU3;%%x&b)}s$wAkPHzYp61TPJq$ml>t{l$60$%nZKORrL76JnW;^_
z6Kphe?M^XhTL-4QNBr~fP_{+S@Zd(xL1Y0c857`}n(Ha?wVJqJq?FqqE}N=d&>q6J
zGi+d{BIMeQ43)Fo`f85v?yrX%MHw+PYnGv~x}?ajFe>9<l&`p6VRW@v`-<&V!TBOq
z%-HeXFcP^93J(lb2L6iKEAH(UOw=;`Hyn*BLx~{Xt>q!hLn^2PP2AcQ*ag;0DSz$n
za-xK=lry>Z9uM&Q<wd`g8`H~Kg~ZYcW0!Kj+_y%)`44g4kv<agjcN{DHO|8NIaIS$
z!d=Wlj$-EH*W{*3q0xd{w+C4tnxXENWAPVD+}Jr%S?ZM?*%)rR9G?VphLdA6Nmot=
zg?l+ClzZD{6{d&&7X74%#PI?(E1*A!;S!+FY^G>e@VE+MUgrd7)ku{{Q`nZk&}3W7
zObqL0I7PC^mhB~D7c;|??T>)UNDyt4+$C_vfETreSogRxGRp8kMVHmU+NuQ-jUl!*
zWPKpIs5?{RDQ(qgv}KID6^jCMHgtp*qlYTwRLCf|)a9(JEbZO$U3bXpJ{4t{oH}Ee
z%HC8gWS(CY0imDUoq(Zr?fmp8s&{9(`cUsbog{JsXBVfHSLv_PTc=3GXj$?y>Bm&m
zpUb7q?S`-`T-x;D<It+U@3@ECE4-<?xLXrvu{<N*8d=UVZq&LxHWNBGGF#KTcXg-z
zo`S)*5e*lsE3?tUhB?Z|h0t0tVC8n3wT$g}v9RM?7M~9c3<;qX%?e8nm=J|lx_6I`
z8g`5@%6)I;H(z3n_StMI7^#kmX<b*GotFRm)j<-nnb-kBNr)tuQe`;t8smbKXV|)6
zB^`G>j&T#<+QwY~{(AdwN9E&ti6-d{Q0Wkg=LUzHBE72pgjt`piO1odDc&-;q@%iG
zJl3tNAg$ap#47bLd7MWW^$|KfkazozBSdfpi~5;Vum)@j#1r?G7vRql%h5VFf%Lv0
zX!#R-v+|s3are{&EI(bYQ#tpUm~6i+J>oBS8rWdn0td1*^9G8h$~hN*(&*k6<u7Z~
z7vXQdm7_^vsa(V0@R`^Dlx@^}+pO9@A66gSChn|JE&=i3a{SY0QpYw2N+M_taMp2N
z@h}hmK+ssjM^lq0V2kL&X|LT<+QHr~LFbPAHezIu_WfOuv8m@!xbEFKZS_2|{h~Wt
z+&fvRO*tE`5A4O>WrxX_rg(jLs<&J#I;!F`Nf*cpbwTLcKamfRZukKbA)KG*e7Y~8
zyed)@;n_-;=SmaSItlY?7%KW++>ptSo2JCwI57|~w7SDOP3zB)kQ(RklEFamSS}A)
zyCU=BQTYx*QDCjnqpm9v*)RE~ye;8d=FE8fU;Yx@eCt-LPQhE#z!aFNH3?oyg86(l
zL+R3-%j&B`^lIk<OYFnj9Q`L4k-VhO>)j1`GW&pxA3q^EQDea$0V|h6aZrvOw)=0+
zHs}jll_;*d1rPUxWD?t1Ijgb)mN7nAgh{q?Wnj*sv<EKgd}*6LiwXknyw|TlsP9~R
zIUQ%BOVP8zJAU~v^>j0_R2{C|JG0XQDV+vli(53BQ`LwpQ|*!S8YYv5w&E3+N`e51
z^B8V31j)|Rz*#N6TPEM|vB4y~0XTNUc5S--t@Fz(t6#Szy{p(%5gZs&{CAA{-CEY#
z(;IVFnUJC`DJh&fw4!-JJ`9UTOK}jV7PEcil(_OWGP+)>&jk=xZ!g#0@J{xqGRnIV
zy3gJTn1`>1#DBGx9qhEUZs?glT~(X)ZRwLl*Y5RIBxS6OtTG;eo=kvq1~p*s2SL8T
zVkaqMUVtqxxyH#Rk+YT4=DV{ux1&7LlNx56W>-(s#H(aL6pWD#^{zZayu^sa2SILY
zk!${&j&9T#LGjgz6R;J|&%pievwy+>%>}AxydXd@&)0LL)(kI{Ft6;$^v%W+>xV1?
zr&>4fm%C=9Rq#{LdEa#q>ql*!9*Uf*;?ELmU2IZnwgulG?W<kf+g0c8^(LN#oE4nq
z4;T|V_c{fq#c5RpqK*^zPsVWOCDs{^4Kq^2Wz!!M?8D@d&xV%fM0%skf+3<LvX#E<
zpl*F>M}7^=V(mm>NW{mw+ErO6<nhJggu?b4jS(v}|3*~0h$0RShJLmUMs217aT}s<
ze@3F9oLlcG%ce98*>=#ZE3e&QY1Hv_!**K^e0#$U<0V&c)6hA?S&c)hF-6*)0aoJP
za;Q$Z6&hu{x7#w*!agd8kZ4Q|!-Y}ljn=)KRIXrOdIXr@smXpwFVO3>8Fe2582X^9
zJg-}2JxoawX+~GH6h)agw2J~G{3k->l`~xqy;em}(hM6#uLaT6tBKN7wTD}jhfwZa
zTk+i-Tnoa7QE2)!@s|K<*yBVWpNV7L8S{ztY>RHy-l0wHYzujFy{V;qIgQjyO&h?k
z)8~(xYT&V$*uAPu9@5YoUOki{)0)%`O#e7@(uOcC2LmhmvQ|DR(qjTP6U}XCofCRi
z08MUYlqIHEG5X&~DKQ+gSF`oerelnGY&|)7ubh_*;bzE%Kt9W0*i$ZU<Rw+Q(^krz
zDxOuyjYf<PWj!4A3jHad*)!FtJ1pDgC<&)3ATb@|H2e5-ZHXdYBeOqP5!6epSMBPo
z7*TDvxk6Q40H?;<w8&!7zUyMo02_+FeYhlDZlkz3m3r(kHX4*3aeAOQ{r2vP;Vnz%
zlq!#-bpVe_^3hVH{yA+2r&I8Vm{p*v6#bJm>)ImnXrRVXmOY#baq+l1G1b>MPUyo@
ztpuKn*{F+6DP4E$qJh!e(JI?BT(g4AlG1!n-{`1VB`Asg!N3mFU%4nEF~N8j@R${m
zIEcJItIAANt?m;TLnmmQl+)wbc2SB;e%Stu2e_t;FO0O~YmH>4jM^6bT>a0jqOr;g
z!5+ODK2eMN96PPP)1eZJwV{jW0dpQZ(succ;v!yl3UiTW)E7IS?6MZG3_vv48-`IG
z7x~gDW2K3|Fq3g*QWYlOEVFLyO@sjej{@JdT~oy?%Uv!_x7cYr9w$084t6?4Yf4*Z
z!|p+}4g%z09&Wo7(3j{VY+ZE%>Myv8Xr5&+)wv1kDH+YhZjdv>c``mobHyueNt45#
z8oH@Vh{fXP1%cJB`6XQG?sIRXy<GET_PWBioV7N@2BSMT&x5484I>D89s)3JPo}NJ
z4JBNBlVJRlgx)WZ{tyAiuKdK>mAGYSv7fZ+3L7mL`6zN6tKA@{rOC5~A5w?YG=$Yd
z{KB^)?Ki1b2hL8J1Rw9Vu(w+qWE1goE~V9k<oT$kx{GgNt+n#+il?QIW8S|UHR!jl
z=y`bGx<<b9^$!Wh4y-%%(R0s)0|j#bKuHD5<4t|BHO5lrqETOx`ai^KG0t@847C%i
z!rw>*jnCPqWg}B98_)hNH%vK=@tb*z@pB=ldw}b^;vLD-VlCHnMd00v&T-l4%OqqQ
zZ24k*Gk*eNbf9|-V9v6>2DM8)p(FQyR@8EUwt(d#ITS0Sg8817JiGVFo#3zWD&fUU
z*ymN}Wkp=$;7qV9+4y1TFILKwRgOt}arqPD^%d{mkO)DoDW^}2T`ZoAwkKbLC~-i2
zo$aC!XyQR{h-FApgdj$>bXbkHb)3y72IS3<W0C&Op`i6^hP6G=ff^Sn7k6MURbMWq
zN9M!7O8JjaKTkl)5bPw9#=zY8sb~c)8IBwf*E@Y0b89AavHjT;Atj!s)3qf8NQG$K
z%tR$G>_IT1ZSR<mH_Hz3hU0<C^FyEMHu(xXV>q&fvfOhJ|N0-LV{H8nUtR32rc6zW
z6pue17Kk*Zya_TE3x>cCb1WF5%|gPa(;VMpc$vM^-cR;qa^>JRB2M<*x5UyA>dDl`
zqhp)HcicEHeUfc_ysU4_<T<M+t+wxbM<c@lQgc8+tOvLAAg*2h63;|Q1jH}#@G|Hs
zG!W9hCLdJ>-t|0v+FI7;h8$SrF*iUHt{RD@tyGzI*l!8}IYn(##ejELC_lkeqhn2P
z*i-Y9_;x<--RNsxnbB|<BymBmOto3Y(8Ze%<ClwE9*ml9{#9e<A*jbecoSQJj;x^k
z)<zf(!LB-z1YnT197qs`(0?1%zW~`8(A2Y(E8ioDg378``wLNbR1TPCa*eeyYcZlF
zT4;5jrbCPMFZ#>GTQV(<w}4uw+|eP5JifR10qay~n<3;U*3YOi!_$7%n5rVyL1uYY
zjHhFEMPed08(^bfa>)>6ymC_v!Dj`k!|>m`uFAulmTQCTNOcu$mrL;pTu?t#d(+Q6
z23UtC<K^2x9${5~<rB$M!}?iWA?tjQ4&D0dB$CQDE@XYxRqtyUN!A_tdc^(fcFpO>
zaO(+%9VZAxfVR$N>ZmpFeqFk`<PWdaw`=_6g)&MrHHFxr&O0Lq2-`$;V3?;H#4zw~
z^4bI<KkMXwX1p(W8eEKrE0F^}b7x-2O<Si<Og*(V+4P<FinGPHFRyVR8~=-ZwSN(g
z0sX`Q3Sh(Ir#_Ry^=GkRdEdXN@mnfx!B^e6pa3R7Srqj3)!%Y;H2&ofM5q(d|K<=F
zkv_EHyX=U=V0QbNGzck(u@mgY|8fTe{|9%Ve(L{)I{=USU$_Iv>lNs~+yNA*10NhH
z|Fk&hiQwRC6{y4EEZlEFLLa-5&<#B7LZT|Y4PR%d&ao`~OuEl}_SF|e^3y(;NYTh^
za|(8jr_LGY&9oz>HlMyAqtoGlIs3zvj&NTC0}J@?tBvSr_%P6o0n1cLPzgr;bbtwX
zvT_?Qfj1+7)CcqokSAX6_-{#$5(M8aAn0WZxO|r#>_(^0v%ktEPq~6#KpC;n1^~|s
z(1I9rd}NxT4nRZzyB6ER`dUF97$)dNica`hnK}=h{t<7ArhN-P-3s5|^_ledOEgHV
z+?56x@^NMyVDO`T@Q?G0(O2e>Lg?IePva8+B(Vtk+6Y~RjDM=#08NWk--2%%s$u#3
z-HHY?l{@HM#>@kihXX~{1K2U}f;DHv5V&h1uXTZ+AW&a-X;U9!`#6{$fLUmczR(xI
z-C0@1PzRGQGv0h*cl?OfS)#930xOnIRl)|`PX}1r<MKw051NDyy!OxgRFIv1^b~`G
z&Fut8p40+6VeS_`#3=GAoS=Is;FGdEH4nP|EbCx2BH96T048q#hS)E_%?s73;_^x2
z*IEr=11$woFApfQpIrFkn}G`v!%#c2j{~J68Ae|TZA5{C0$fFC##PmJm@SjagRnE?
zIZ!%yDx*5+@AEi(<p;mvaN<r!yXFiBfa@&f2K0qUfVq7cN)kG12w|E$mpu9+8oAzv
zZ)j6JjD%eU7JunBbef90IZ%4DNod-?@bXbl_zdv4vVYXY=ro5#MAKI0k|)W;lINdE
z*C@ndP2i+5#s}e=$xS;pM_mbj5q`2D9-#6}q8C-Ls^1U~zz1fI`l!kQenM^%D>mXc
zK9j!fE1#p9y+`GW-(P7<1=@WiLr*Y$fb;U_Im$OmHu^k;5TS}dUOAJvKe?h^6R(@)
zb&tZ|T>zIq7%V@s@^?Or)z$JjqYTVf{Ar)zL@T_06@+p<sX)T{Oj`dxE8yWtJ3f<c
z>{Z`H#s_K_z;yWy1BDGcF~%}f<<TXmnr9=NWtfz=lF(nZzf6`s9!BSXLKv@7iI*P~
zuv7K4N@neS{6Ppt3zdAJe%i$Q%~_o!pn#Yd%#a7sNQx0jJsZ7ipfA1?oN7~Un$=V7
z@gAO4o$z`=BECfffs5sRgILrCdH>*HuKF0%)Bp*{vwIG462U^Lssi$GxcUa~GG*pL
z%`OK@TL=kthZ^lk)!nM$MD;Ii4FWZTSN31acm@Gh4(Kk2Ag{MDs(9*ODJjsF<3O+Q
zhRy=M#OIDL1=X|2oH=yTkAG7hrA<+O)5(x#yD7Zr#$(RUT9uAA2{(inXM{sTJY#2!
zMhA{_R10fc&2e?1dCDE^epX!vdp~peb0gvKCRI>ZbR=1&p9Kw%z4^B~g|@a)$p{eZ
zl#BZdd>r@DuNYFw9%EaEHZT`|%Gh#Bp2xBSe`!auaHaJ&*q!RVH#|K2s?=wPHs`$b
zc?HX#^hO}zX7Zq_ojmR%{RaKshaw%yS8i>VG4#msU7U7p$-Rnsr8WVgKN)2Dl?qqH
zJwqzOuZ&K7*Z#2jAbwfpWSX@)+1HBnS|BNp$N-uEGJYwXJR!e}>wT+EUoWqUN2R9@
zU`uOE%y>I;Gb{2~X4F&*38WC8(if18v=_TB51vaQBitMHoWQ6{Z2RRJAIudV@P2XN
z<12V%SVvvRX%hoE4)<t4bO=hF*)2&D#~e4N%ilefa<#cz0*7?F*pByo9Pd*W<5Bv>
z?Cp6&E@6g=p#_P1I@g!O?eA`&7fUmP_)Cm=Q}B(D-=|7JeLGkYgWt+66l&WrxD6t1
zY^@2)nU0xd$R>RM*cW=h{){NJY>1W6A}o6-N=VE5>#qW?4&N%GwI_b4DF1DE^$E=>
zSl9Ew5=rv*wK|Q^Fn{K%CA9{a7*{PVY{p{76wzp+ob8MzJb%nyVb0JWGcaAl)GCPC
z;`XfVzIV)!j*o7?eJ1l&b~Lh6AbC;^zO?(_NSSr_P)R{1Gr_9ua%__*E=QjpYc3>X
zLuj&}bG6U5nke&FW`!0Yi7H$6e*0yaQ>8WvZ~SR_K);~E#{v0elyvyue_njEI%eU{
z)mQh-x=pT*{RAR1x5;zSx;7MZ=gnnpuP3y)vO*!>pivq^KGc3kZgZ6|9HE)Za~|v5
z3Nd+T%T2L&J|8*1_i4#VC!^ZDhrYLKyGy>!2=8nQ-_o^H^BG$CQKe5;^uX+nVGT<&
zxM%>9a!AChD-Wz)87Ls1rAJ#)7mRfVxzFUcT?zHpUiS7t;IK<pmbM9_q2sT#gDXN^
z*KXbw691o}IWy~|fNt436N?AI$j>a%yn!26t;*bStzd*+g2zh4iB#)}z^SpFA;#{#
z?<US|2`Q<Fa=LAkd9(3p+OK*;u2#Q^2AWzHlQ`!Hh@_7p0}RCw1nGUlADbqxWWK<a
zlA6rpZ|bf|%y`ctH0wi{2YW&XqwGB}rBnO6yjUS;yP$6>M9;IQ=2W1$YJKKSsHp$F
zBy7iTSaagp@?3J~7#X(>hvxbDo&JH?jc>oVJ3GIkNGw(vU{e`=#mvR~`obT14-Pnd
z4BxP%kE&f!W3m15)rJ3guu=1wKvw{~`HirtYbnIIwY;{gnfA4uG2x#-Hl%~KjepE%
zn|CcpVQ+Xi(idoUqkxTI#mQN&U3op$o>Xh@a_hIhm-eJ7ip-NYWbE~*tRfN55jbci
z@3=Ft5ewjO!r<hA3ShzpFzP<IpGFD>+?tM}buMfALIeTFft@?tSzI#D@fn;nOVVBG
z#L}eNC22c6YqoNLvJ}kIvnNY;<#%n67va4=-+Qvp5F0O&R83zF(-}v_5%qNrLJTlg
zPLZS0GJoNq8&u7NL<~(H4c?4cb~(fIr+P12)Aey-gJGJ^H7QshmHE69ogB;T>B+wl
z6mj)tp7#OJ1)TATf2BE&s`kQg&xbhojx$yU_!>_rAiNK2{?q)7401}dGs>Ch@!is+
znzQ3E<~aN&IzfQ7$QaS8z&rWxvQdA#JsTzyRQ}S)D%*>KyQwWvn;SCq|8{fnw{9#*
zm06HMki;eU{xgJLB9M%d@y#Kv#jTI<F-dXW$vswDVZoS(a4hU>XH!RN>Y4PJfOMA2
zqBVivr*B((pEc;Xfy8Q7Ep3r$sth!md6kBZZAlD_ZsEs}ziFaV0*yYVB7tOGwlio3
zA@M^1pT{L0>j^7j>azX1Rj0!=6aD4sd9s#bfYJb(t-8i~F?{@Y`BwptXt80#0U*wH
zOBD<^jk>{9iP)f=W~Bb*`<v|Te5<4QrrO1Sv0m(2a5MBMeUY~~xXRrPzh$hQE4&nP
zKG^bs#ZlR!+x}_MNSe6cjabyEWWiJR6JLX|DX*TMKzt?VH&RHW5e1Ls;s%Dk^<%ch
z1*v%D7>Ld<$n%pMH=5dKibknPwX5aY8A-2s-}JsSZkWj?xH6X~_q<%GN7Gl6AFCj?
zThIdFYRyV1eJNh~M&ch^p+vO<s?#5zzr%8tHD9hdAj@_)`MT5l`B{7LVMN@ne<peN
zTKXm5>6$89@pp~jaX@kLo$G;1S7^*4)l1>DonPEpLFVp2uy0+zdhzC2hxS)UY6RN&
zwr00x-56rx-5R3vvsKw}WHIgKfb3xe!qdqQk@oizbghRJEPdd)K0nU)FAYVXBCi*b
zOw3W*v%iCWPu+vl{iI!zs8ejmaNyesM>w{7a;^4+-KVXf#!VNA4f!bvznqKzc}S-c
zUEz>(mRKIZ-ea2eHHl+C8;XWO)$Rs<G+_g&(s{zJ8st9PfN2=`h&75_p<ro+^}ld7
zqJDuz7YVH!O&+~QEIi&kUNgb4DOoz=E3es+vxvE@`ET?1K`=r`&#A#9B!}6rH~d0%
zroDFQ3HDla&gdrj{xJoLCO%RfOO<|jJ{K1#7qO`i8LXthw%jaS<zdD>+gFMosCd4P
zb<_74i3k8zCmCPIm{3EnEy7V5B}GscUT<gO2JW5H-Jt!1rrCSvvb6U1O_!&5hHa)U
zKFPZNt{uM;;JrHWWOdh3@7=cV6r!dBBJ5<{xjAFJ@@AFsM|jvC^$lVPt7TZ+NWMIC
zC=VNxPAB)WgTufz%6BCmUktQ^|7^KFTD!TMy<3{qGUx*a>H{alN944}CJ)nTCLOZs
z-s$ACQ<28XvBTuX2eY-m>tKBM1)<na_KZ?`%v$voD`ui?#(0aVKz1BIf=nzJT9oSL
zx}xoDABOAVEyubl?sJR^szrGLM;GRI?SC+%vi-LCP{Pp8XnQ4Szurgd8uW-i(#R9j
zck%5IKl~uCN@(MXB^s=QuBK70)^<CvZy75Xbw)Y2SvgBgw;5UGP+Zwg(q!6de!P(n
zVU}7yK-xV?EQ);q1KhThXhb#Fs&7p(NTZCh1}`K7JM>18jxKN>=Hu>nb|O;!RAFLs
zL?uslpQGPcxS~rMJk)6RbB;FgXKdXg-dv$H=?>|W9if#5O+(Ki{>WU2^ylk$s>};G
zt;NHw(6QKUNXIO_QEy|q-6fKN@9UF|*De-xpX+?N%j;9kQk_Z#VUooNPF{aNwTCHf
ziq`n#_GMqazA-=Ngd}E{S!Up}ji-{04xCQkzX)`CbIbmCxA)G*Eq^+Yu7jWF3{EAq
ze}R6k#s}(Y#`1XnGr>X@XP{xmGP}h4ZO%5lSi)Vx;vbB4tGN2kn6i`=ezaTG9lHDb
zp<V8FYV*S>#sgZ{HdJ(Pqp!M_t64{>gpB-vq7R<PU_0W$l!-->LAsQg%yuXmM&bp!
z_Ik3SD360TJh7a@K>J6yUo&TUO+Y!^9C63PQO0gLqE5wtR|ided-U2TmrMS3B+iYu
zC>9DBrO>IvD$10ZOj$TR5}Hk=cWvmiZi_Wt$@A|0;kWXHo@t-&gI7)|H&ysJ-Lc7x
ztGsC7{>Z0w`+&%M@6qKXRk^wvmE1upp!U^YMvIkG6?bvC%Pg8D?}e_Dw#{ex?d!UY
ziKA633s2hXjX~jay}M56n6^hlReEn#j#=Li%Ka536$#h;qfoP(xh$04`HZ$EmmH-|
zH&fpMj4VJ9dx7)Zze%XLp4wb(tXc)+rf_2y+3@h5^F(xYsFQDJ@P2Na&rcRU6k+FE
zb2n~7(u_usivtDnFbaXnq~kLQ5*Xp1Nhm=EA&diXk@uMRgaH?<OnC^VoQpvE4bfM-
zKt6d@5W-7p&BY_1(H8$!@j+#N9wT;Eq^b=Vv5fvU^Vo6D;(%+Ov$?2}$I_yBun~Fy
z*OO)TPBJB4Lk}D->LJbe5o>;gajHc-*5PomOKg*hLC@r##)mU6Cl$T$i9I2bopxnP
zJSMC$bDw}WmA{{`-mTSOYnrdKp(^`$eusTH*43Q3KKAUj1GMZ1BUOve2k$PpAGk!}
zK)J`0>mw?CK9NYhEXIGBLI}^pnlC87QJaC?0H%2`&%e$ZelwmdgX|Ccpt`cw46WZ&
zta6a+L)In`;}m09<DHS2rd#qDi-RZFlmgY#cE3{WQ0(ouwQGZs#Vp3r4#Fsa&`CTb
zH@zYG2DC&TPEMe>T^<q7d^JgY2Je8+q<^kQBe$ry`4B9l`NeenD@v0cufJ2=>>;QM
z5waa1Czn})3rylTM(G^|?!B5#`}$s&VfiI#2G!LoG2N74AKTpr*xNK?<ayRLI&;((
z!4V+m+HDnbvM>Sp;r00f#!c`uk3AavRei5d@m*&m>2&<`)*sI<3%HwH61Vr8L9NXs
zl-JzYjPuMJ(PWTiqFFMpyl3x~=c#;{&_dXf>seww05Y>!I6k0c5N2X5gQA~(0>7bj
zBg~KiBt*%ap=UYFRt7(X9bvCAq>6hA8w6=CaI%z@c1<r_j}^pmwtK4_2_Z#uUh+L3
zv|itmZ=O=}uzaVAeY<9Vt-e9k=7+T@Ltia29+ABTL17#DlM`?cs>+ann2In;I(gZ>
za$Oy5tum~w?f`A2i~OP%b$ozZ0W5~ydMBUs4m1Ta|FKDgT!KYGZ^jYb9XD2XJHb7B
z9r_z+z{V;DVZxjhG?*ZYAe<YV&kC3AZhShKTBA8EAP=zm>X)&2^lf#N)Q6$Fz4qCf
zr>0#&UWsyw3)%uLEAsQRa|8zY>SXE1P7<vfhp0^x@<nwgXqGB#d7;n*(&3kD3=8nF
zJvG=+p^TXz)}G>PvL?UnvfiLO>MS(fQvQT@7(NRB!N1g%dC*|y<t>x$st5}r>p`Rc
zJyA3}UO5jQ$bdXMf}25YJyU}A^JE68rz8y1v5P|+d+qgyxl263w`+&*ri3Q3%VYVD
z*n%Lv`f5wyhq>Fj-zxF#w?%{d1FF~CJhxG}raH`-5>G&mMAH}^d_)jPiRI96V*m+F
z7hsdIoDFYnfN*sBjgX%h;UCL(3zt51UK$*+fuHoS<Q;X(S^GVO#%ac0E=QJERqvjd
zPR`u<j`5?WboXrKr&6hh)?I)?HNkJ@b=~+Pj3Q$syum&EN`f-Mn4T&(tn2l)t-?Z@
zo`hNEmz-eHLiUfYEY~KV=zYhpag4g-RR#XbiEcg9zfZ`z!_tn*#x=qfkhhKb2%HZ=
z2>g$ic>JS0L&k`knoRKB2-SaW1|z7BJ-HA!QZ`=n`j#ICZnx;M-yZ*7{S@o2PAco3
z3=IodQ(MzH1<Gw!y&bO1jhe$2&{`#ZmI5STV8<w;Cz9q^+HTcWe9c|hZghw>uPiGh
zMf@a=J=QFo2yXB-ethC}XU*|KJQ6lluO}?O2KVdE_gVg4*L&@#x^F*tjYaIs$aI>H
zpLnLpCH|sd`^5tvh(#k%y}));->qGCVuYciaxQr;y(vdyRNlGx$NlYLWlP)wdud-i
z#s&w)s&$Dz9=~%PfA7A&+2`OtP48ZA>Yey5Mxrs&cA0|x1R6%$p@Q2{LW!x>!}BEc
zWw^Jr@^Xljxnz{Ll(uRlXPcab5x;htaSMWSHq_L_d^pbC*OgY8R^ZCoP|ZE~TWM8}
zO!kdeIO&tK0*9V_GTY3fu37*Is|#w^j(BlnXq2FjzU$gm+7hmgH*0gf4ehJn%N}>F
zk)L^z7ueOJ^H{c<`i-D_DvIpZZ5n8`d%I^}NN9eUYxoHp3FX$YIo1^wjjtP@W@p#*
zg@?O2g#?2HY}@$@=j~<{6@|;n%UrFlmNqUAYFqc{&Zh4*NE{{ZNNE2&+Za}JeXWW7
zwBVU|!P_0g`i{`SpR^4dc?LCFQnB91;nDPKzD}oP+H)bN=`vyHS#coF_Ug@u<nU9W
zQ2czyRj-)DwopRip>7w{j{y6*Nf7I+i<e@<jkSyL;^9HJ1AUyic&zkLg-!CL{efXu
zN`sMWZMHww)kvG0`OmvynN1@50FdMpziB^b*l6UQ_YglbDq8ruC-i;^33-Gp2nH>5
zKNeD-Mokc$S#+AI9pJjYb~`hsm)LsUF<+E%qwz=2;L6?~SvOy$_nj)Qtg7T5vpFzt
z>Arg@b5xKbtn;&nZ0-Cgpn!f49;}+G<#zQEzzgPV$D5tn?bj)H;Z$i8uP_MFn#S!N
z?~PQ4yyRj(wbWhr#nEH(Go`X8Pi^~}7p>~^-In2z;ZWXt%W5Ipa30At3l_$LC$rmx
zWk~TmL`r9GuTt(?>iYLd6%!BF|I_qr5aHT@ir%#3>>k+gZT9uemWQ@GP{636G*PuY
zR-pktFuLH`*B8xM%_1whs^sK&_7QA7d&lqPeI+W_OAmIx2o#B9tq07iv9@G;OV^Ue
zd923C*S}+TZ7*iaip`rkEE7XY933eA^#3g$xJ-eK=F?rMnKc}~ID3>8G4U;e%O%9x
zJ#sSy-}E!byyJ#MofE$bZWhjx(tP}~#RSK&xv(Z@5!(M+Wj3_ibZgXCf%YqDT=T}2
zs;KjpWmK;JcjS>VIB;};taaO4VFy=AZY-ReosfCfSMDSJgu}*70Hs%p!{nM0n`VTB
z3!Bj@dK%lSgT>odqqNAmoX3iI@p7=dIQ-k5hP?VAQ+#tS?xwUwb;c?`CQIQ8rkGcm
zGv-$Fjb$|LcNnFUh=k9Z`i3w-r5|vJbXtN)sxI7Bp7<qZbmY9UB?_g^a%Z@!yGX5O
zs-o>LNy&O6KN*|&?d=)vn%>M?f;S7pPg@C$SmcJ^9Hnh5SrPs=nFeL6Ov&=e_{o2Q
z;cutRnYjt{_St#tjlBH{hj1f-?g+(L*Jcf8IVU-7j56{>DRiX2x`53*g|!^$BX+TW
zlHb5nWr>Ys6IPj58F<M#+F$=`XpHz;e(|BA+A=A#;0_j0JwJAL`Gq0+>AbhS+dKz8
zUCgEAL2k|H6FiOGHBRM2!2YdjXRT5@yY<a0h-}k%I`5d1v{tQFg|{&}5%*!za>ph2
z_DT8<|8G88j<;({JW|*eGKL0=*8q&QoXZb^x@Jo5t3b6_{Q9A_UFW8lx~$-aT1vO2
zRd%>TUufFi&5`QOo*mOJF2#0kUCi%d-Zd$PBE5gf%QSa_v^)88=l=~8>y4(xz&-(J
z(+hJ1>d0)w`smxS#Uu$LiKe_y<O8tr{7ou4eU`oF|ErpIHuJuz8ZKw*EJzXMpzps!
ze|w|8^>Mbs^#P;q*c|*goQN0E7h4Hqn0RbJpL*!>f1;7r^#6%1&1#}e(}{(b;Yt2#
zm~Z1XZy7ToJ@+)!;efLI7e3|x?0><hGD(En7w`pnK*p`8#L*BrgZPs#OC(Ad{qLfY
z&b`sdb8|v#03OL!KNgJN4-n6k)aW}<{!=~&im>Z$G2SBtM7Iia;w5h;0&j+p+X(<R
zp!kbbIb4-t9?@nj6wg53D_8_L8K6)Q&&M7BylD_UM_1a1&_9z7GsysLUV`!cL(2<L
zrbBr^#+#LWZH8@w108Bb?1Vzg+4{jAP388(np0FIKnt^AiCA%#XDXOJjze+g3RKe5
z_Gup%-haGO1+Y|iN@p~347#%rY9`YV;Iji3Faf`OKyIFzL+mL3e?qs8&H1RQTK0xG
z!h_)OJ-|B@H5?4nPON3o$W~M`f_~aZZxAati#6b1trMb=mVdrrT4+7*y%mc|2xk!D
zSJ1^(Hw0+lNze%|(Z8W_F%jr1;p`=3q)M`zgf9HIPWitvE$FQ;n3ny2VOszHDqAQ2
zt!$lC@3r_+*h(I4A(p5CdP`@+&7^E4o&lwp9~5T*KID8s9v5AJa#>SY)u#pH-!jxL
z#BvysLZ~2x-uhBf3@#8*Qv68}%uq9OkX&*?fQC{CFYz_{w==v1^!ckkr42fgHw?wn
zAyB)#DsxhmFwIjg9z|w6EJ&xnU@L$p&O$7+up&Tgbz7l!7{%xmz)Sl#14u}T-l*}O
zOXxrr;Aa;WpJ=J7W2o(d0O$GMYW9~V0wMBg6I7&(hhv2V?;)&~+5nADuohyk!i<^`
zNTPWPR;?M#6QOeD;V*9hh^?Uq;ie6P21~5$Mi(+2MYMI#Q3w7DyUkzznRGJ;CdoB{
zVy~rOYD`K0_tl?sClKhApTKGuCR8i?Jj@%O;$1Fz%yt$9T!g;(3#=C5qnG7SL41rt
z-uR^e{XMMT*-Ck9r1DFp{3G-kl(uirC6BuiOW;m+<Dr_5jt{A*FanfAFaWD^$#Pg8
zF)*!OxXfxODA?i(KEZFJv}+2j=6vq@f<|@0H&%0A3a}rME8vtH-bBIZ0+IJKN*Oxd
zA|tOFrAt#0(SkOih`2lq<zqL70!_E}5z7K<H-c<R@9=>RtHE<GLdcB~wKvIe<*wn4
z?j9Gn36iY&+GDYfBn2Jc+&ta`Tg=)3N~z6Nwv*D2(+hr*0nGj);mo_sMQjhudHjRF
zl)4B{Jk)N{l$%a$mOu2;9G7C|$K}q#C}a1GL#e))%5;r<i*8VcNHfKnve31F74)%T
zXaz|%SA7#Y`H>hq+V-kY`U5f_{CGu)-Wa8R%+>F3U+Cn*Q2`lF`2%Gg{OKcey4SUz
zBQ~jM^2+<Uf#GfrRLb5C=6L9~`zINr$%STl_dzF-wDJqZ8i=fmcPW2T*;L|tfNRlZ
z3u)AZ^qJSZq`$F?JP9>UtYek!;?ea;6w*{H(6XN|xurUwleNt-Gb}O5th-!kvS)2~
zh{Y*Ef^j@aHCqLaJO;N4^KrNnYVH;jkY=1~jr5NxIzY<MPU2oFU1-gVW9ZOmfiz&4
zH0)j{eOF{vMHtjvS9+^&65B^BIV*e1vr<F+>Z*6YxoRFl6&hCil-ur446>MdMM7+#
zhLbWEl~h3vowf=TA)Qsr+Z1u2{Hce9)OZ)Yt<~<S)!HLf8-lhuo*0?m5+33=?5ZIY
z%qKKAG^bPyYS4QNu#(byZ++LjFK?wbT-;$>o7p+o?;DM7>n7zItU0y}@=!k=uqSEm
zT954nult#EI85LLFgfcE(^j*z>P>eF<mTg#vChfH97<Q%ry318MMi08A)DeZ%0nW%
zyB+q7LXco;O9^$gW0YMz=IU~&RKDQe7RzuE-FDFN{4x?J7_HlbNd7~qq^tBIW#;va
zMAT>sS;!h<UUgB><A*lk)S_U5idChkj++*R+#SLf|1maXfF&mNHKpqXc`bQA@)LgE
zqGW>YbeDDmy??L|8<9}%(F|Y-eS=8uLCsuSqP5zk3FrdmF%>2k_I6sQIo8!~!t>>3
zOg+}Yk8WKPljoqGZdc6)%)61MpW)N)pFLIVOJ9O#HE<|VdwZqjA>kffX|=b1obw4{
zz1ig+^F7fm#=fN_*RH@rln37uD}Ik{&RjyQ!K38H(pk1oqLhENIJC=;oP3sz6pz^&
zCRm5{*;AtKk0@y7?bAH+h;2c(IxlbZ+Q7-TrmHc6|A54aIILL?HOhwg>tP0LM~m2-
zl-q@}=L9kalw~!yem%CMSbbU6Aa4=xpD}rv$~T^{w9xsdbHrd|I;)sYFYTO=X3h{Z
zy)U$qK|*~FggZA;$%J_3fd4q0l5rFvkBBy!H8D8Hf7L}S&XYs_D$#IUs61{~Djxvk
zto1@JcL5X#J$-bej-hL>ZCz4omNASZ_N9v`aqL~vwphZn%YK(^VDMY00Iat~E`JAQ
zpB_H#Q=2EqC##}0rl`c4h0sBnXortF8KTrTY`AW|y_8FSGoYwbU!&P@gp_hJ7dZp$
zF`**UumPFN_^RUNHFg*Sl9|H3fj8J>8o2V58{7!;T`qUeT-#%Hi9e+__o__r=wdtF
z381Yh?FscJk#B9(7!dfQBFACwc$VB>NP(oDKO@-)vNnR09Nl#P4seM5aC&=^<&77$
zozqbikFxG^GSs#GjQrkHvrFc>`FOi^z&4%yLZ5we4{MHoRPD=#;k^&?x^16Ht)c20
z5ZE`iYc`1?8XZ5c^qCD=(V&p<XNY##k>R$~+AWoGO2cFdVnCy^ioA%Xj)#7k+wbFT
zGHR+GU2c=~#<t`Mn*Y}QjL^Av+GWuHL|3lM`bUNy?$MM-AH`Szs#-qU`QqIu89J);
zYT@pR;zkgV<~EX3ONU063H6?vq}|QTc;<>6aw)1hGXIHK-0!*N(VFTfmC^Qp%#rg|
zODAWwPhuW}!P;4s`|SFJREpfGZ(J%Lko59oZJL}8+9o{t{M`W+h~t~yx)*F}npFqz
zlXh@DvaB4@59%A*+A(Q`F2o}!Bv#k)a`}e1p)Fk@p~ckt8F8wWE_tLGjNsvD(PXws
zsK!u(eHfT9-i=h7ID406EPtuu8rD^pvs<orAkX*CTi=E9ICz;v;amGnGWE&dx>VLO
z&zeX{Qn|$$S<A5-jf9bldoRdi!z=f9DF)S#QAsvqCC!|bD4{nBj8(e0;QrtkXCeO7
zuOtA{-abwF4@Zn9+IvGMSK)RtG_l4rcL?V>$(PusWIMZeoavj2+8c7*f*<0mJggTT
zl|0PAcSaIgCUVVsQ!~sa89h7k9Uj>@V_GO}J<CERed8mN!4O#Co!-V%ohlE>WSlKI
zMYTI}LwV<2BSB(CG1cSIMZFVZ??d<3MzaHzrf3~-TSAzx3_axO70L~&NI9kc60yd!
z&VSg|PD!o<4brwGqt1Wqigq7T)<G^;wSAbf2&SRa4<qXhd^g4JPi#oPXqcIk5%R#P
zV6^&Xe!FHbs*gw{08#ceaT7UIDCn9TFmEuVEtdb23gF#xFBU`U@r;q^HK<69s$fnj
z87tYgxTln{@@@O5?t(|%I>|C^Tki?m$fsYwJ5a71XbE(neWy-?6S4q=VpMuFeNA5B
z<6JpFbhs;6OUs%*HfAou_(Cy-b-}H>{H-e0#~0C79m2S2Ru<d6y$`3m1xM@$V-lZN
zPV?gjUpM}$yN9INK{19$)_|@NBHAuxTp<>-z11btPnl9kC{mSrO-5#yF}{Q@Y*G8~
z5B|l{(yCDIA>_t`ux?mR_Pwa=kg!M##HYNfH}vtjsVH~5R<jw!3yDS}>L<p(604Sz
z6`DY#S7|CYayqIfh2;4xfk%1YG;gsl%SOs;K*=Rlf%6n%QMK7kxknvmXBl_`sq~U6
zo^Y2q<{gmDF9SYX)uB6~A*=gIz?e6I6<h;L;x5pj7O|bM?ZeFzetcGu)IYWL0bW!u
zG8A&*mZj~SRBW;S!;OQz75sRy4wSH4IPb~v;iFPzv9AyL*tR|D{KCOcx(lO`O|$Yf
z-Q<2Ip=AdT|5}|&Ebmv5)xRP^yMv#JwX6miM|-Dui-N>DgpTT9We3&zJX3v}nLA3+
zr<t+_Jlo3y|EV<0gW|fp(^5QabGFN|s;)KNVIfCH$2Ig6mC)L!FvZYw+{BB>A~c99
z@;iyAVWQ@fu)V0(h|tTN<tm$w3X|{uKpSeu7>QEGWwtJ1=DLGEmHl;B!_lBhuaI}t
z@sQ%ly?-6n^n)O}?i@O6<Ne4PYN=IAa4qGDU_uXOkIfUBAy)DPdn0LUXv8Ke{*DO@
zE!Oh{mE|{0IcqwnR^)42a1+l~1caJ=eW2uruJSRDCy&35z9g7{%iw%pXlV>FG_(|u
z7@!J@5MMl7!d*0GNQ1hq4gQkJ1XNqK+pOyRk{x3Y#xm*k{Q0<POQVN~z11qhq&a0x
zFGE=W;h62xuB)XFvf9a=)c!m|8?I+D*EwChxrDKb-4Vv`Z<eBo#3uaWK;zI#ETgf_
zl)bm3CX$k1z5h~;U2%}eBaX8SA8_uPP`T!1fjGM24I}HY(T>9JXYzAy-P_&73!3vD
zQcqlB;eF*9*t0F!R7}|{C?~7FnluEl>NNgI+}TzBrmjtob)%tnRfqj)1Ky>Fo-CJ!
z=Ej`Gm}ODHSj13rL9lI8!s;$+sCs|1WAC@&V;2ffdf(IhOE4c6L=OeuG}%Or=gi0R
zFFYVxc?&@VaXvrUf-q5e!<uVwHJ3RjOik>osXj)dcBs~2+@@;F<RZpMLYI3KnOL^D
znBkN_m{1$iz08v>tfR=TBwT}7Yy&&^1$CJ~k`az-GikIDLIX+)Xq#Ltv!&!@-U9Z4
zhj?CHUQ_x}AD0V~|3TQh$1~mk|KnV)QlW*Sh*c_ep<U%vVyje=w2p+>)xlxbtS)3R
zdx;{1D;34XDmmq_#H^eabGS-!o=i5Iavocl*JX$6_jJ8K-|z2p`yPJ3fBNI9Yp>Ju
z@OVD%C#}=+BLW)mJUAk`<9Sh!x2epfU9;)=WYzg$n&xEH=bUHcYOGkSJ`afvrLLeP
zDz`wdlABd_0{;Z4pDn0+pdKZ+)O$RHyzi+WB|j^{)^h{#ZVhZUKm!j($~MZK>w4|o
zUvmGp$!Kd@NTGOyqqd}))%r~f_bs{kAV7LT{S0ho%SI%E4T27`<5|GbEx8Xg{h}FO
zq!|7hDp)?QdQi5x5Y5iSV%L)iM>?#Ku|Tj}p)hT>yIPfeH$qqxU!#tPUR?;xHh3^!
za+%8=v=Srg6P99hR_D~CZ6tAQl0G@Og^#E?O(&Z*E7x$$DF+24Js5YsrqkY0AR@Uw
z4Kla(HgW6z9xZKH<b-%^e#?ApbgcQ9ALxQRgMO1Kv?N@c1<;*0<|?T7Z-l7+%^pq}
zNS89<6i}^F`|I|=v%|IS(m%TyBFn}Mr>26^sktoDL00D<O}Sh+%(e4c#f%ml#^%_x
zTPLyZR5%#08w&F;^6;!L%?;8C?kPm)%#xRs#@T;VoWO>eF)lL&*Gqhc_zQr7MoJX5
z8v~5OCG25ViZwkRw^q3+aCVaVizKLuc;#JP%@cW=)bnO0@k&mBrwwg|i-kTrV|i9C
z3?1m+#OSJUwZwK4iJ~nkKaQ&?z=1XTIK>)tHFqcnkgMl#uqiU0f&7Wu>FGu*CP&E+
z$u8<qwZzCMqCqpe3B480>sv%7SP|OecG~2>#D`ZVm5{xf^y;?s&bw-`rD(%G>p`qj
z_pT^lxefaQ9)6fI)kCHWDoAzl=szmYmPcXk4cbco0N0Iy>g_Q^WP&jU7thyLuA%m4
z>q{{A?JXscr^JDCdsq?X);AxPhSBAcg#%5efHDuKZ9c!jFU7sAu9rx0$+`G-*8^eX
zPvd#auFzvqXf_KB%|9T(BTPz~rrnU?y<12S{)Vr88WJ41eMP@4?hSfQ-WFkjb%9Os
zg?MIQsveWoJuM;?kF30bzoFHL-x5XLG3m)E6T14lN%Zf9x;kF$n^%CIh-aU5t<R6)
z)4icdSI$?Z$<Fp#I~<yJ4x$5R2<ffq8PYD_RN=^ohhK)%gTW_id!jHA&`=Cb9Re=R
zx=M5T)gH`HI&M8+W^Ey=*JqrkHzV#LbwGtPQ>W9my0EaOPFwuBM4*5K^d<%7yd>|%
zBJ~|4NPKIr?jU`bho^2e@$MASb7KI-Bc6((egF<5=lS)h1P-@PG%4FhIo_EsM#f+1
zRU+jE9rBd|QbOIHu7MM84dUXc$Vn-(4EQ=ax=KzK;zvCJhhJ$gX2{d`Y^zNxS@x+@
z9lRgR&eRJdY5Um4<L2>uT4}p|-M1XvK9fnl?l?VqGq_FV$WpsRRdx`pEF$pr5Y$0{
ziSY0GY=#HLUdnYy_RQTXr+bh<uLG=H%%-|+;x^!vS+qM896+|BSColK(e_XguOB`X
zP<(BE5a-!FXJj1d<d%3sJTI*-2vGh~36_|0<rhdybO!*w)Dl)51~IoyOq{CHoNOq_
zrAbFqLTJ%wD@oryxvzk>e8ACuk)J$0htZe+D&A@f96)ML<+jI<cFt?LobRl7=POzE
zIn{pO%gM#MN2;Tk*XnY^d09A+i7A)oi`Iz~hKE>e*4>OWR#AZQ8cv-Jnc0jscq@^S
z!xu-7NmkQ`WI#Z>UoyoEUmh>i04tCdFR<!q*QHFKZiWK}tKWqWkFQV}0};ruEzozU
z$<&nXi!-8~60=kAItfb9ekas>duwy680eI3B#3(y!<<PS7rgp?>o&_~NXuSL1NP)!
zu=9(Df^+zRRk>NxcX?mia<z;d&YtT&fKdkxQG_U8x$=e#SaW@<qD{Gq!#ow~tZRrn
z$Z~L&5CNY7>>7#z93gWY&t5CRB<a34_zSFx2PLbQcn`>_CP}$Rhtimw%7sKYwXr_5
z+3QN80eQX_$*#29UY^IBh(d0J>TgoP0H`NZ01PSc2PEX79DYR{XsU5-rO+D*C+7<2
zVg9s9JQ`PHIz-wy;pQ10ppVg=1Be|0*0x~;3pD~l_v3z=w2OT@?1EVRbzHgSwLWic
zt>nlf<DDuJTz{)lD+COhN7OD5O>9UB?V4`~x~`i^pk0%u+|^;fK|*SwX<I?}^w35<
z-!rg?Ku_so0qPFbx-&!|bX^aSa+h+fws+u~fW^w}jNZJ5#Tue5f2j=ve;QM{HbL43
ze*GdjLa>m;3fQ6C05b(Mjgfw%4NE$`m~4<C5?^EXlKk1wP~<sKU$-s23FHXal;o0Q
z+&kuKy}UY23|v2F72&z)*PQVC>2^nRi9xD=?>vA=@YtNX@A(5^nyK^UG}C}@3CF(d
zaW*W}OunyXQm9$1`tuqs6>1mRQn`9FxPum0y}`#o>=cK&rohS68tjbI1#N3V=W;pZ
zk6AxS$PJKQ|8ikhk&v~XvbnG3ywL0$BYN9Aj{T96z>Fq&LZ98;`L@;%W-63@GWVr!
zb|q3&4@_=x>!3hHa`txk=`c-YTs&T<-g~8+f*K;A)a#f12)qnwl7Tk<t^lDG;Q5k!
z$EGj6it{vQfM9U9?eQIE-vTPXKk`qt83zsJY8!By?c}h-opQ`2SzsVj&%ii6e@uFI
zlJzrixL8XF=Hk;HczC%MlhYen%jZejaNN1n_1g1V!MNT~3zAzko;2@$NU9V@!~v{G
z7$@?V0rA&iOd#rRoi%)0az$v`Oy>rllbGJF(GdH1Ylq-gOxQWaf8&J6P|E`NS`^!%
zNK69|fVnF8@mJr}&DL1w2GD{eMvc79y`|fGOX=1d4q%u`rc$u~0rJA}ZqO*HKL%`#
zb*ds$GcCLtkXrK=Zl4kZ>KQ%r>lAlFeOWygpwa5XD=jLt=>6!tw+H2z7^kB2!32Rk
z37Xi$0%UfSiDv{0Eh&cNav>9(7Mk6CRC*wPAg;r#q`2h4{>LQS9$g;6XiP#Ytg|rA
zu)AO;PPtw@lAlXX&<Y<RAt(-AH4d)=c;<Z+kU*M=n+$t~>|x3G(B($e|EM^d|J$XA
zfrI~1=}<d>Y*lXoR9EqZNhEAezf)&GIU-59Z|?}IUvmj6xdOLFj)KcxkYhh$5CpEK
zUU-}IvBXp$r4w=jc!t0=Z5*xJK{*>y5Rk^x?x?_NkO_w*q&xB>L&PoMVtsOpAXNou
z#jt+??`D8Cm)iaXR0=CFaTtY)m8v{|+QZVu486p?ZkMmk7uq(`llXe_O9I-!(!AJU
z?^GoB><+cqe-2nRNblbm9IG0+jkkF~6nGN^wuy3U>xW}J^&X0euVAOWewg|lM#@j)
zX{UVPzz(%B*8jOSNnrWm`qQOg3yx+g`>IlI+pjDbl%IiTB{trW5Zg$Phjiu@2d$D2
zM;Y(R;u<k)lqTei{YIB%uHyM5WzmbV*IJn4J-fi+;9LjAQXtwgGQDu3`-z&A`G4#L
zkuj~a&k%8}p~uKKO!>MTHefA-WB*!3eCRtckhz&doQK0DYQwmDHBj&itaw<!OT4s<
z^RQqX(yfruG$?1p?f1>CYj0JEOzSH-0G0cCmYlJ0NJ34h45y};CW4%#3CAYnn{>HR
zt!Zq{5zr5+Kgzo5>ie>Tan-=-uH0HYa6q!_l~04<D3Ao-#D0lrkc?G{BpBbWP`tg1
zpr@PkomoQ+bH3oJc&q-mMDE(5+ys<+PK`({xktG~FH3S32puIpaS}_cB*q()c#XOV
zZ#S=qyI(9nwb124QEp*KjOuciSN5fT2;ruB8^#-7o_fC#z*_$mrT%|Y#EpSSqW@hH
zhxoDKztm0tE3^j+`Tsv?&lDg7DVfkBP!HYr1iQuW0I>rg!6@Qy3!3;SN@nj3hT|E2
z)VY803~?=}<H3k*8I|kCDQj5-n!<1iFB1!Z=kEX2`Sv4e2@^951aJCR%v3W40%ocH
z^0ffvDEb9layOvR7b(y53i-0lxMk2>=c`ldvyuOnC5jv1|H%U2S|qE2smO540hmUj
zz#Ra#^FTMY{XYQ9&tM0C1bSTc^%!Z$B3)U56ruj3m%6VnlKi7$+AG6@Zc@LplePGk
za^(PW`~Sd*{tGJlpNNs85<qEJab+!v4Cd54czF*SKo&S)wbc(He<UHJAt?pY1lM+?
zb^(0n2yCl7f>;H8VLk`oS}AaDeT)DJl1f*MbT0scn!wwi_aY1b)z>MvV1{OCe}kq@
zHck4gvYWL?gb@dj4c1Fg)qlH<|EsJBJnoXLXg#=>5a>Ht7n%Nwv?7|~XwCiu$cGh6
zKZ4{T<r^OUqp}497D8n+s~@aiu1JFdH5u_4Lj0`{`es`UP&D_`K&|&KK<$@*!9xXD
zyM{QRlX=**fh7Bd1)8MuzfD;E>$0)z40y4=Q2im+)JF&pJdlk6%9H^8pVgXUYCXX5
zlJ(;rW*}4fAt(uaDSdz{E1dzb_CK*WK$!m*i$g78aqLAEIryM4uUOx8cmSPyBNDs+
zqjHkVP@#TNHuHZ3;NIjbGQ-~U6>i4*pg|m=MEnG92rox~w>tuZZ~6)$eF}uBxBoNz
zK~)8osi8;EkB4+%d9KJNO$~s%2yS?!s%!?UCqNjFV7~ja;H@OZABi-Dow9rGKPcT5
z85rarLDbAiNM?!K2(+Dw>HxLH&%n7=0B-O(^!-=JkTvzE9JH=`&kKNNECT%X8}L^^
z?YNBv)Q-*6Z9u*zS3G64gWHP2bT0lY<l9P@7bC&u@ESm~#h4`!`u_*={7=@Vh}91%
zS7Br~luf*K68+oYlrzJ15rV_?a+uzzA*_vH8ylxP)pX2IPFPKPZ}GlmH3(9;O0I<x
zYR$0SR*FM1YyxNaOnFyDV&oy0CvzqHhzIPjT;L`EChxM9iejbVMG8^@#%&-go~4W4
z;4^99R$Bn0&SoC&s_^zY)A21Wa`SwFy=~6e4}wib=(qSn&++hLX86VM+U%#r8kVo{
zcD{qp)W;U4)`2pJtK=e?^eMgo#SLrVYuBk$c8F1p8nqW;!;^4I5xHu((b%NJD&p^u
zTa*)NJPk23zQk$}J?i<UH)PVw_2iE}w<~!rq1K?p(R*`JH4faQ7I?cMtZNW#N}Bp!
zqU<r=3*Q!>1&#?M^-1c+u9`5QW$t#9obzmtnX2)k<Lh)gtS1MM8(@F7$(e4Hy+_Fy
z)i~8b$J_BVqpDXFln>->`&$Q2Ax0O$z*i1~nTQd)Lh#;0qf%>Ft5~iJwzzoUIS~S5
zg!E+>;C4Yu14@tJNxwG_>M&&U38ks{Yx5`;_8v~OK(~5#TYE)9*bb50ac^gd_1<FN
z^6sE5nOLTZ9DuOVGgOd%;*Pt`*F<Yl+!ZVqK}$ng2A?GjyJG8&^?T$Nr9SLj06(_J
zTO}r4=JuTu*X0g@a@?V9At3~(5jcY{?H|u*>EF~*dTrNCh#-uxY)su-Oj2r@DOhzo
zDHdWNwTTe&0X$lMR>F+CX77w*&*%XtsJF&d5D|GE-J3tYD4K}@R9+ZAZ`1va@vb_~
znZwv0vCp4i8D`#b{G8e>Te&I{ocxX{iZDZI1_(A}D91_E*{FMf1Bl)>d6w*SQqs=W
zy5g4B;w1TWGd!725?BzNBz`FZ)|w+>g&^$eIWXaSoSYe%<E(Xep3$brn!4^ar~;j2
zse(2Y;O)i5qBSVH#M5A9TIL|uZ?G^sEXKrzw4ngE+&YWUWH-ZZvuSsY)<CEShAZ+L
z5bHc9Y<-L?j)hdFwl;?MK61HM$qB#PRIz)%3WUapeGvT!<tl%fo%{%FIt+AsVIo8x
zwP)opZq;P=Mi?hCWiN`_nqzWkS`)hi(c8t>&;~vB`-dh=kf)i-!7l5>!IQ|<k(r)x
zr{CP2C%mhmmwTvCI>AJTce%^g<u@#@1}+aK(h>NtDr{UxlC5J`-)U&oWK}dU8~oEo
z?+|F2_u20+B!oAORWk2+2Ua!bK(8irXR3QpL8ad_0KL#%h-~6>fsHpt=0vf_Cg9dk
zyk!Te9gyxkO@*==zJ*Dc_uj*sn4ZN+490wxi{1XXs{BjLkF%<#>B1R!w;ky&UFmL|
zc~{cu2SM{%#}`i_#`4%o%{fJN>9uR6Buv0eKi0MSZ3SRxolHLsmjzqg{q*|f!+z&r
zyqN3a6>s6|cYCxl)#a9l<{#BZ|N5l*_d(e)s2&Ls+rLyxMX<IE$;AO?62?&ZYoHIJ
z4?tt|dl*f7|KR5V+|PyEU+HLt9q*gJBkqg0H!Ofn8#8?QTp%vAuvz2~H-~z!cIi$1
z@KtR|x*fN)uYW?$Jwe{#FN`)~<U`n5fCv9gRpeoSMXva~1_Cy>jRKw`_xReo&|9fI
zNT1QZ0wj@pNM=vKQE6$)%^h+JLJ4jR<c-adbibA+7LlEf!T$M_trC|bFI!)Xaiw?F
z*@eZRer$bdY#eh&MfnU80R42Zx?;P!z*h0M1ndcW!L&ZBw1nzWOZ-~{(4sNk4y3Sq
zU^>Vfm3hjs5>1|s1lf$zhCeWnE8&#)3kFxK*cA87bE$*YnOKc+rEd4rIZ$tV!QtIr
zo!6{dajV9ZdW`6g4Q&T7pj#wdJp(qkWRetY7w_r!k@6|<oG*X~+ZRNnmHCU-NnE6t
z;DP*cZdfDh&f;L&WBT@#!h=Nt3!HGy-CTfQ8b}{PstPHf@2;F&MBWRTdzUb9npxhv
zxw6;%n)QyLsgn2TkY@-E7B;b+>XrRY?V?rM&~laU`Rgo{%PAMdrqTAULPdm7`Mk6>
zXH2OnK0Hno)H=#8f9`YbBT<g{mri7iJbdo-!V8Y@I$B%D=qV-s7I)HC`V86URs^Ox
zs7hj<_;t<i0G*9lan)4orCaMODnOhiv9~kg)>^NDz}<57%G3toWl90*%*deVs&AHm
z{2z8vkR@My9Pwqpa#hwaYk)lr7CFpSRw5++#7DCH#_ewmp}6~n9M<sfA#_BbZT41<
zy~8UqvhhKHl!|%>C-Z)h<j2sbEuOooHF|FKWX4+5c!%D)Qh>KJnpA<D(Mu;-P;7h(
zQ))?wcYqqTJuZAMy>3HaiAl$t1)<4Uhclo4uB%kwZRR97&#ZUV8D-m*zW8im1x#+d
zChblvT7T^f{B`2y9xsa?;Lwi%au($ZhRh2L&%<bxoC+Tta;{Mqm!DQVncpm+-RCYe
zDuRaafb0E<J9@7M<2zI!5QnBGSX<!SYkKUBghR|K*OHN#pV7#w)JP9>Z(a$kKH+~K
z8tQ-sX4!RXCC030lpBgCHNhog++Dea<33uQ)=<2`%`#!8%*;8+qQYnw==GyjyXMSX
z9nYm%mzUGrdy1{bMjsnY|KP6qQK0@KG150QkH^FJb!0{iq9=qOe=NW17d^r8j~425
zmNz%=yAooaJa+uM$D^17>;A)}3&jj&@Wls^+!^I6Uop-LR)~k2S?a*3$f`o(+J490
z_7w%&D?heSXVq(UdkdWAjXWXtkE38iFI{<dF?0WhY3trD-r~e~bCy<*Uirlx>Kz!y
zsN7&i7NYz>D`z!=2GJf;JVup@B0~c8*if7i%x~Z$LTR91lh^v*$Dn(fk+L2xZKIF`
zSdFm-DcF0bO6S|Kt}*A7U#hxGcEzS#Da5_Bu~k8~od?}Tg|4yzwEu9Td|9Znji;%|
zx3`s;4&fT0Wt1bCXWxo#9!Lz`C6Rsi7&BV<1x&vL&i_k{yKC=qB_F?-oKGt3@BcEP
z-w`MX8GZMzELtPe|B>2bFkV2RP+!HWbeHSWr8j$7z|t3<9bz>>u~c1-9Ft3y;$l5n
z30r#Q>+r(b;1gnc97E)UmE_0P{2FS3IwkRAynsW~4?R57LqvrV_Gf0U>vsDg?NAf1
z0yTodWGOyi8Q34A)2N?;K(@w096Zz~f+Q~W7)`l09!&#er2*U6d4iGJ$+tCcLEPcV
zx02;|Urqcv-tl#?U22A?w9cccZOgi2!@15Ttx-<|2Y6<_=&p=FTam)04KF0uSvn4F
zennI7Cuc|6XxSc2_mY`P8NF%gFYt>#S<=aGW#tKxhX@`dPafCo()CRTjZ~m3pjL+D
zI>XA<2gNN@gW@X(#QE~Ine{kT%FbLEaimhrtcUdA7<UQK$F{H!ZCOObph8;_cd54B
zo(>w$5iVw0X2&HbOJ0(LPbT!SGfuo7=bkSqd8;mLk?WJBpp=cKQxJ8qx&-XBYBJ|>
zK7)4Gy5AZXx3onFSh|C(xEgJt=s2Fy=H6gZAI^%StPaT{H5uG|jDIx<7o8M;Z}e0o
z$K>NZIp7qs_H&%CiuyF@Ys1?{<s0(>PXxTq3N2fZLN|oCTXi#O2-3o5Kx~pW!C*AO
zny-4n1Ml|Q1Gq0rma*#jx&wjCI^)V@i(P~w@K4-|In_jl*<X4~o+JI>W~Zrt0V>HE
zR)4FIUQYuBDWDPt7}-kyq_yx6oH?Lg)2%SNIWl>uET+LAsbnUBVn`H#v%zZk(2QeU
zx3A=AQW4I_N$^*R^&<}P_(WKro+bOLD!luEQC|ZfAS-vnA3)!i-++t@cbCpIA`<HC
zfUPN{761iSlqvfqamk?y4BL1^SKR>Qz(}G=V;QeJJR?h`BfPGG&$Ffe3G2c@-yyAC
zsX42t4l)<{S1Dd%e9bhTik@W%n_d1<Nj&?(*ZzT78-A;lul17oRP@d7ZZ0z{_UIwW
zeiO4(>H-wtsVi4jOGcF|<0TyS5UGXGzJjno-7HSd8m28LcfZfb>IL^|?<J@nNG!1t
zPJc9VYjx?X7@unkJJ~ZwXm#~>e*JW`%+@Vh*dXKy-eb@OYGbs1Td5CBmjzHeks2&N
zRJ5IMY>~uL*v!0@8?a`A`?&JK%YM%Qu5po&u1nxnKL7pWYdm#>I6J14oOs47<Xw;H
zo37EyuBlM1<6bU?QHXI!xoH|OdB;ZnwSbhbg6scL`TRKw^CxQ{Lb?a8m;FTTLOUp)
zC~aGwvyv#<7LPv}w8UC(E`-CHfHizc`YB)|RN?V0nWr?=3O<o)_O>`Q(a82fnO|z(
zsn^U58%@<8-YV25Q2kcW5E`(RW+@mo>H_)~m*!!Cdkac604(fGm}PqpBQSamyAKtq
zf><VPINv?PFw*f%Z%EPK6ha<(&jP#34YdEW!ZGWT>|{<fN19u9kD3fj`TxD5ahjDE
zsKM(M`E|N-UwDJ;ko+=?l{p&rgZyq(3vW}ma)-}^&lY18@OQ@rlNYm#=!0;+D69*P
zh1RrEtUp+178R1_)e0i>PxVJyGzO>&z!4jqV1EV!H~Ory3q%DY@A2%!nD>b@Ka<@Z
zVcfIvjL}ByJ({*Pp&F?P`^t|lRv548Y>SP*0-R;f_fpOVKbyq=2A(0**LV2?D7c9C
zh5jXVN=+I8dTlXifZ-A?9XX*ECequA$8zT){GwY<WF9%Z+YQdi_a<=f=DzIi58!ZP
zi^L-XE@f|fcU?(tHmp55!fW6<a|rJQOy{lOw3ISL6Pd|;Kz0swm)wzbo3&Ps7pn^^
zGj~;s%Z2tn8(3YXC(6lTIGe?mI7Xt!FsEi;k<CN;_#O+!#1XPZUIN~#x>Ku%zC*o>
zx*t3(s5R@)DYwC>CJcf?kP+lwz4Fb&-s)$?E%9?tSb}w3tBamZx}|;ztRhU<nZ|{P
z+&G4lJM$QC31*Y{?3GtjKCPH4Rt1%3J&H9H4>V06Inm_^{9qUpQ@0uR1p?-Fw(FSz
zwgD}<&UDhC#>S47R7y0rb`xhO=D=s2B*=T)s>?bUhJY3dQZfgOjMsy@>$ke9+6=D<
zfYQ<v`C>c>^I3A_Mj6TviWiz#{cK?#eP{-OgJTB-Gj|y6M&s!1l5^o#A$(1@mD$XC
z*zBPAQ+STYwojZJ1OrYwA=Ju@ApPrQmWB#s2HG>~^WNZV?^DD;L*+C*j6ceV;-QFT
zU2|2JI>Wld7^HQL0V%QONWp{w)QHn3U*--wO7!C^Fe~v?4T;>?h<1F<7dXtFQ(8j7
z6q5hEfKThzaz82NJhUiK??sBwLGX64c#p89JK<Vk3fD|371Kmmv6(<gBS}nz^ahmr
z<RZxNq}v+}Z3kh<=?U{1kzU|cDQuezoT5HIMI=sBY;Tl!UvxpI;ETo$Y;sG-xR*Dn
z$3pe%Sid1)3uYs&UlY)K5+Nc^Q~7~k&Tph|gn?~4J=Wg46gP1L=DUeG&x41s>&Sgh
z9U&}L@*-;W`zoNNrBf_!_NBZCv}<aQL-$B+?I;Gs`S<EK!1fA(Ap!UR^&vIuWb4Rm
zArc@DH_2zE1+c1kp|Nhg1e>BXB4fOIDqOPmaP~i)E3s_$%uUV}&%D>G+ul`S;eW1s
zn5ZvvIh$=Jn=}gQJDMG7gu14J)>Xt|hPX)J_#sea$`LZx0E`axXZdz<SmX1E0@x5_
zCKr?IW*Rg2cYk|KEUs}A!)6WH+qx?Tj6A3J!^PK7^D7v4V_QYGX?lghK^xV;P>YU-
z>Z_4UM#lNl@E#VPZb;@2^)=CB(fXV@3)7YboThb(PSY#0USE?P=cxeFn&g&d4U<;G
zo~~HuUeJ^PFhEOOa!G*)f1=V||K@HyL||2@z}O*mAjMR!vXEI&c6Zik0yc9ob-R2Y
z>@66m^;`hQ^llt`F+1gXTWO%~1h*#KjvRBOH^2MZ41-YA=0-$+B%5O@==7Pc{-7DU
z-=Au?6$PLd_5xYS5*59G&$4k0Q<1(zZCF3fUi(#`!Dy@%LK~aw5l|JxDC9a`3NE&J
z{0v`pBuQClbRX+`sUYx_kN5b^^o-ofrxt(OHNQ%KW?T-M4;m}MC)=%{)op-XhDI9@
z0~$hF4Ap?Fi+y+u1TAkOX-!D8kzGDNM*g;{Mb9)EEH5l<$>X+#S%rtj@IK&k`&U>E
z+L?KyIb4nkLQ_!)1<i05q<ypoU1cxQSRO2)Dc7uLTmT!iFn(?<WCj5RIb=@ijxV|;
zUdkOWj3|Wszc}40aLD0fmp#rc|7sW!aOD6ZwP4BM%Z~mN*`x`hYfl2kFviQfeEZ}C
ziCUA7vDhhQZii_(BhyoYO_+~xRc9}ru=NDl#CI#I(n=t_|Hg&Bo0ZpV8eB4;Y<7Qq
z0Q0I=U#a=GqSjgq>CEbd0&xBA2Y`%nz_8Zo(7RshPX5;b=7LR`YuL;7$UOPpx83yZ
z-KEAZ`+|y1vp)(1c%on0^5ml`a<CFdrve!Qgr~t<7n=T2QH3psw=)C|mneiB=KVT-
z$|=~JKA{7Alz1E8b-Q0oZn8GB&}ae{?KLJv{P9A|Km*rQXK9g^<I%dBqfbi?><9WW
zaHx>4<92a*9OOWbP!P*qQ6jYDl8q;>Y}{RpANBSopCM#Ey;(48`ZmpDgz~{E#l*5h
zy`B#Wqd<sjIh@k`4G1!K%Kapu?m*jnO;8O0eKMhZa>3L8eu#s6eQaCJHV~F@uG8=Y
zq%lYijI{eadnlcqbHdK&`A-uzeug6eC6o;-k)YYR3{2jfQJ4;%l&=EKZa!d)l-ah(
zh+s+|S`r&*lF-JKa}q3=Jw#F>OQ*#C^fUQy64OL4XCQ}y-uobFjosvrlZ`k)Fr&v&
z)y3XT^J(cXJ*zGN=LxquLop}b>iT$<WfVj}ibXhhUySmhnmAJ_he7rK=Q0&&%~I`$
z1u--LI-il@DZj(PvdeI8O@!<K3S3pNU6S626pctWBG+t|oG&)u+#NR4I&?u)`n=n^
zO=qHc^h6iRO0j+PP}vVFzb>mUQ<ux{sR>@GDE5J8I!tY2RmO>|Wdt&cjd>lH(k(!?
zAbx_w8X@gbxcUa283%N@+3ID=cECEXIZ{-kmy!3p7=+9B-JeTYF-VSZ?U)~*Pl26N
zxiiPpkJ&wLDgaA9s69ck7V`u%{wroBYo`4k^!NLe(Z2!ku^DU=f+ca)&@1#(A^ubz
z0K3W@C_bbpB!l)If-kfTk2ceF$Uj^?*~h?fi{{E{kGIw^#H<fQYJ<o9jT|fe>~dp!
z96i0a)V${Wt1R17U03RWJJ4gfBlvM}l8Jc|6r%NeKQINNY0htd+d02i|716*#^w2h
zt;ph0XQG)_Ao6xNrRs>N^U|`?!gY#A8I<XCeAu;)_&?O-3hE9yM#5|$#nZH@>*Ow7
zqa8{Uxut}kScjA!=nNtet<ADbnt7U%<<EgR_IQ{<(%oKBl6;X`oyX_8MEKqc!-t3~
zq<v=_#?7LxKT`c~0g;eW>+fm?*fOFWl#MSqBfM{1Shv|G{m{ysCj;I`B)FEgZ52Wr
z(srSBstx(-z!tOTzN(L2t7k*?AJcDEF6E04=oltulDD(oDzZf8moox{snT&wASpU*
zh8U3ivCnqp72jLrjt1i+jEbtazif_nKZW>_v!u!B2VsD{VT1_qjueWxUFN04=^@M;
z{V6_zMz9K7^EZd3USmWE*3Z<nyOp-^Ya7WfXmG8>S@ZT)rz8KBEjhiED;Di1N4-fM
z8AR=3UBkte4|v*lmb5kM(N<CSmh^NSxZq;t))pGb)H!<p4@Tophw=gzR3I1Jid`aW
z#2voI%+xO8%rz3#2;M&Z@kdv{G%-lDi(;MUN(v_4(6B!{(5~_Fb(?O@@68iqpNh3q
zAagMM$qu4Fq1XH=cK(MjqLHFqbn7K=z{6f*G1!z9*MLm8&iAgr_IZ06_ao5>n=no8
zd{LRE{JbyAcw*Ug#H1T%g0slsE;f&7w3_|3xvHXuk+DC~tH|pfhY*oTxaT3vUMUPo
z+wdYR`NE+0hR3%-3MTNm*j>%QfVSIjncBfYq_fQ!WGVNPE0UYWan%)E-TjqOH)G{h
z)9I{p;@r`$qhsseygr2(;zpqdm);Pt{02fD<dVHZf%m|L3m2#ZtT##D=jXpkJp23m
zxpK02?SgGsm}SlNfdMbJVVnJ|-I2A&ejJ-fXanJl07dz0RK70GtxE(ZiVy{x7_=AS
z#n#DB{nCr9zt{M+(dCiD$EMuI>|YVN(xc}pbf#=~eSAIR2flNuor>}#M92z09QUs+
zf3)x4AQ49Y3+6IkKOl_f_dI}hnKPfVoXWp)tP_CMEWciB$C9y}liefzVG)Y5Tt&tP
zsKVm#GbG0vxF}>OOL9{H?pL1>YNql*w(To^SKg1WdnQsThLRIy<Hh!$k`4;fcAoik
z`+DbJ$tF8Keo|H305OPQ4XFPsJuRIt_QVbxC72aO{B>q@NGr3IVDGNIjYk8Oz?#=A
z27ZhG`FCY?mG9ovL_M%z4Aw}ye{t1)5k)luXc7}(FX7(Ydf6>%XXWh00rrgu+4hOD
z{(AGy7VEEn$S=ZPH>_@U?l=1^@oL%n!~FQvAI(2ruPB~SRVDzZ$7HDf=lRI(v&vPI
zU?E@ha>Zh+i0;xS9EP_AafX;rba7!So<jjIX=h$*A0PSApx0CJJ>v(zjhV#ISo0$$
zbh#KYnH+_Az=v&G+`C9DB5+RXeA6>0s|Q(gJY?@2n-D>~Zf&%c;-)BO3H>j9KQ5dF
z%~Na{fF_x<7OZXyC_?#g^$=q6ccD<@m}ym2wjseQ;Og6V@7_Mx9L-yC>Vws6+vW?x
z*d4tuQ=K=Q)^^#wY9$b~sY)haX77{y`Jn2<#%yzmZcff}CnpYSgZGBti;G{b`|bL{
zzdi@3J^U9L1fU{l?pymzb0Byt>ke_~9Wx^Wm5ediQX9Q9Czasr$C=u7IeB8MU&O6#
z%rvumUFVOIeUr~GGx7%VPH3nwOllV<*9F~*4L1sWJii<?opP3)z2M~Vz0u}%t+Y_=
z*u3cX)Gzh(SW;NQg!|2m$fT-=*5BuQ8M##sjh#7BP?7?4!IYI?rXF;u_F}<XF;jNL
zAma29Rzus-uHmU!C))?1>d7^p<pZwY%Wt`_N&WeCUBAgz_0tay7&`&X{TE(87mOFZ
ze^jpR*cBuy8R;p7{39&vHjE~0AkCO43el@35P08>$@I|QGa~QK&(^Ela{K&w`rETu
zuKxkVkC*>}NYxbY<*E_>g=F1&&*ZEyB9zaEUD)ZBww$v~q5cv6p*j6nVi-PD&0gQ8
z@7H4w58CgNxat-^C^rGzmyaO2Zy>@SF-4adc(jEP*L~$Pz9&uDyus>Rbn(9;9&IYa
zdAF$TO?4scBTZeY&N}~s8PR(9X=mvcV824}x;Vh|8sK?+bp#jCbhlx;b-k1>*v!6Y
zUDj07X?euT^62E&GtHk;P0VuEZF;RP(E`u?r#F`g$RIR5v*4h<G6JTe_G{(kfVQ5S
z<zM7lu^LY;*tb5AtSbAok63O>cD5Kf>_`4{hq^fH0Fne=*Pc?5IiSk`1!&QvEHlE)
z5H%1cJyTs%Q=PG&;N{{4B`bf*0Q63w-?3-R=&g9a4EJNgqz!|Q&t(8!g0BJiV?PbH
zM^AG|12Iy+%GeQ}S0<)E$hwA^5b!O#GaoJ*{`<MtlgIb}u<Cfzy5{kz58680zikF>
zsddi~Uoo)F59w#NQo~uM*B%*0^!+&<gDg%Zyc1T&&sd}SNy9g@@;$dc++%W)KcVkd
zX>)4lo<X0BUflO|`?4Grs0i4Mrh}J`3?qbs`56YkvH)YomEJ&)c1z!~v?C548H#XA
z<3bjhAKoTiJ({|~=C9iwZ<1OMAV1HmK<B`C3$Rcm(d27ehqY=4MY$!-MKT@A$=6*&
zZ{NnQWSEU9ZK<Eb|4eh!K0daPeq+2UD5t=owyJf{moGkpZ!{u2z8yf!#RC|8Cs?$H
z2e~}(QaxEgt%+ut5!JzxD&=N};?A#!d@DPw3<*!}lvzGc<&A70j=B!K$lkf-53?Mw
zPMzscmxASG`4zs0laLSZIGMR^@KvBKb)(`bs^prna9i!WH^4G4xdS&iz)ja}Blx28
z^VnfG46NL`CiHfH8e4Fi7(x#AZ~Dpk{l?UA)rs(sMI|5>nByvadl?I&+cGy^|Hb-S
z{<mb#^5Ck9>ZQ$#P((<HSMEsD$ixf%63C|UT^Ib~GxnMIhFmVrjY3}ove*Nl4zioE
zKuWhN3a;r)49=9W0%L9kUoCI!yD3fQuS6R=`i45ZzGCIJ@DRTs@oe8>?ymEN=cKWJ
z;N%*$#dq-2Tljp6EquEmP~VMXqlaE0@%}Da+Q7ITT+cDv*^7hT7e7nbBqC{*eR;d(
z%hQKbwk8)8_oym2^(+a)L5){mVtbQ`6d$9-t~nS?vgcs*lzY8+Y|YLO7Fmtid#h@a
zH3~YPibhhqM!4f!9-roNg)4j3=Q{m{=%T^D%+IG~fno*p>!V}72I{9({^~5-pzPAy
z-FEASRs}YqP`*v#lbP55@}ZrHcc5L;U@7fN(95>4h+q;SD8(KuOqBEB!}RhzFaBq3
zx$+mWw4@XqWuSmWheJC|6Fja3@uj(NU%|GLZ#T-V8LeM%9zMmoKR+%(Sp*$=60{{u
zWgcX7l?;~T%XJV^zU+KkEt5+%7;{VG2W0G}c81zE;+6x;gj@IPh>g`=t+5VW;OLi+
zf3`YNx#CI~;TE|6hl;zNT_e2l-(b^AcuTLgjgwlvrPZa5!Ni?OPn>R$_Eem0fKxZD
zOFiNSf<zjiq3?uAGc3GiR1`xByG0<P3qxi5zl{HJ@uH(9H)#rDAnS=IUG}g478+6g
zvb#d$cq$^|`mDv{r0@L)msLzhA-}u)M<V_&??!c=Hifw5pHCgcmHGXTVuS;gKmKpU
z$R%;e|3@(*JAkZ5$&D|C1^lA|Iwg}oS1}_dNpUQr(rNRw0PZxeYoU>*b*a26<LmAW
zvxs*UGPuMq<icp`$LYOKdEDQkkWH@tD%Ph><%VHlcwaErUn&ywYO0tOcc;-9?pEem
zr=Lk-1=LoY;gq?>`R`ZV-qzN=t9(;&M|WG>V55z=sLed!J#wP|0P=e|ST)guTu^1z
z|5j&b=#?4qfHZ`>U75a|7cjEM`=Gd-o#;@(^TIs7p|R#ogY4@4KkW+l0(uSLFTJ9{
zRyxwpeE?UIBx@8^6Y%q>FDXJ|T9)Q)lO}WFf&9AS&rtn}H_1-!RaLI&2Bl&s%D%|o
zH!S4TLE`>r>Whwmk_C=UKd1Co6s5p>9hDj<Di^b9`*DdguZwNdx-$8%f$B;g#=pAK
z%rK?w!w+xZq6bbS<^wCX{9Bp*qhinw?|dxE&INB_6ByaIC+tE88A=)?3sUwn|KFWT
z!fz?(4syK@{5Tj)4E{OZO1EKVZKs{H;hSFrRp5ju%s>C;DldX+BO0{c>MQw%5a2(T
z@5+*$o8TjBHp?&+2MO&S#qp*5mp3)y6MS99KPnr?(X0Ecu`A%BCR<JhHmSw}amT6}
zYY>pp7i*QNbtWPy!tGrLBk~N<^hC#1F|SB?009cQCDB7E-vGLd>Gu-aiW~(vZdg6W
z$Q-S65HCa;leZ~1^5wtwZW8N1kyi2J?J-4s@??|LfK&8r@FJdh78vaqZJ5_uGpQdQ
zR1{o-=laK4ixKY;G5kuJC{AV%`;FG)z-|;s=UNWYV(6iSr104W+DfH0#R-lOw3Y--
zYj}B;Tpm6wrrnz>u_2xu;ePzgi}>3jsi%WGaAfQKKbqJ6#B9b5Af-%2j+KQifHf)*
zqJy$Sl<Q&+a520#Zj6NANge`)wzsZJud;nxzO<B<ORjFTt4+$zk$U7+%7`_)zuw!H
zwt0I?=x>OzMCn?vg1Ra9QTzCBMjL2cTr>Dh@Gj8HOq(Hu2RvJEtePTdnrSjRP2D&t
zty};nLgc;BHrp27+AhG(Zt}d?N_P|#?U=t65~;J`<V`yLMq<w8$J*Pg4ngAcSlHHa
z7$eukNXcc2yy7~r&<xM8OKh7maCgxrUY_JVGC_KLjUI2u+sf`5Wa-lGC8X<nkgE^(
zSm&o7?sMxq*EQd^T)M#SbIaJy%JG5Y&WrD<PxQ%k`N|bIFu+bq+^2%YCM`Zo<eyqf
zkRsLIM1rh02y3LRpe%=dh0uLF+FdzPfHBUOZ}TyH>p|HpVZG-WGI}XaIf0cvTRB#P
zs6#9B_!H$G7x_MX$50Cu>J6wq3^VkY#!Q*IB`zPDX~A(_q;qhL?55oIorE#N-tX-t
zgaCmRw9r{iJd-XI<p^lSarIM_CX~YwS*A@@xI6P7NDK#^#m0W00Gmo~*27#;Qj-dG
zo7`b(v?+PeN{Zn#IgotH0;#=xEhQ56<hTHwz~nux!n7%6B`E7SXT7lz7TNKFL5-%H
zc1P0*+rIa<bq{>u9@KvOHseg@_nW^Vw!@vWqsk6kMQm9P94Ea4f0slIXV(fuHm-&T
zIdv$Iq!-ti<bJqodsV8`8|BQB#FiC%<GB=OYHOH9*2~xR+t?NDhR4EyG@b1DuRv|t
zGB6?|)$5Jb6z?#E_GPeT1J}1SQ9xS>yGxT{)-y7R&2@Nm*$fbYI<4sX-0>=(Ec_a6
zFAoo|dg9N&Z9TmuszP-Hy&HZmJ5KG#td(o|gQUdvCKMM0=ES4q`+=a?F29K%?+F}w
z7<^lwzGZ2*1w~jLvg~4w-O0x`?}{zWgC}gl&%az?>Ic{SG7FB3oOGa{7-~Z$+JcCc
zU2+fEO$xe$az6CMc$o3FjtbOm>ShT#{skNzv3?sT1VlP9f%&n;Euj(WWRIt?9ox4H
z1osYPd3LR*k9JhV`$wWx5CGVM&BEk5X2S@%4ps=UF`DGQ7Uf1@x+MdR*7=fPL3$HH
zYg{DoN^&_bKF2j;rPy1R02f71&OEewLaFywVjD}}ROjt<rh_qvZ1g<;IlU<Ba$jQ=
zBJKb>_%-;{*<k5%wkk5TK%G#qKnu+R<JwKMD7KPmptupk=Rts7(w{p?cz-+*k>q9=
zK?pEOUcV{cZO7%q$<`}gtyN2g2`{MKd_bb+_6cawSK+6^_5@l*3Ye>gWNf{sek1Na
zM!UwbnBa8wF8JL@mqs54$ub^8xFe)})wtVAJC~qPqoeJv-8y}a-E@@B$A;^O=^W)o
zfRin|_K!+#3<UT;asy=tOQAcbDi4F|FJP{sxS*FJk_8idRx6&>Sx@rU*O?K(w5{7q
zMoN=`)d1b6R+7?)TRq{KSCj)sv@p5JbowOPQrwpqlA;Tn`gH6n4$bn5JnPyc-z^m(
zPxsnm(6>tiRgA%Ei#P#Z%u}cfFtLa%`EgtlxPgIF>drD%`6@*L3v|7i3vBE%kVxGv
zgb*Ot4lSt#Jd6^OG(lpUL~#P{Bin3a@6>_(#wLHs@re#{i;pDlA;CZR6@GXBq#KvV
zq$?8o8Ckz<C=E^Agb<nhua9d;{jbLb8R*It?_?L{ppc1vEe9J-^bK;6P(79<Aj%zT
zd%=Xh29JZx-eIuXL0YIOxv8+4lt}Y`*E0-6aSZ;(aUck<QAcMA97D2AmduNrZ*sDK
ztric)rVHt70yY6(R>^YrWY+kmrA4Zd#KHVM2R7Ms3GO{qL6_?iq?K@-xDIpAj^9A%
z>VtIFn{<I84Jp@=C~IE~I$AVmuM4FuhX)QkWb?Mf9g#T2&U-}+Tnb(uUu<N0-T=C1
zMKn9@rTC>s?afl(?KxC`oKzBYjRXxngDOh~v%cwi4stIldoYHkmG3IwCOyyQ2{+gW
zcD8AD?r$+aW486)r{q<sJJhBy@D`+8cUD@ZsKww>1{1)<K(wt?`5_FqTyDJB*NEgA
zveDZlC!Y={t-=^<c{z31n+YQK*HgCw{|;c(Pv%X!_V&5Y+B-fcM_|R%4@z-?i;Y$9
z#51w>Csh@W@T78u8W?pq`Y5`?S~^G=g%N2FdoWTo$T2R7^>u*TCDP3!+cv!cP4mGQ
zWdEkBM>r$}w~Hpox|M6-QyZy&M}B%+-s8~F>)A$}etp*}73Eqhgt4-VUxo!9-k^R%
zpiSkj3K}4d>3T^>4YZ9Dw3X<slRm2@%RoUAJ3n4QS_@yst&?N=h)0WZ*`)z(8(*}a
ztLZ|0E03M#x!k*3)1x}hTRJX105jLoK3Gs2R$phOr~>LPJ=mqm;QVx)5UWXkD1894
zOJE4s8M<RDqbDSZ;M7xd=|=uUxUZu4jTi3%Z=j7BtX6aO@K{rT+6)TbYARndDO`}R
zd*}j}4M!RZ7w%A(Q+|QZL-}MkNT1+iTrC-439<L=vT939vp06x8|D-03<yM%<Kk~E
zXZ!52MFh?kvsUno<DPmCgqC4KGycjbYN;HwEMx4c4rDU{DOrva)1@pivWb2Vy<W`A
zDTS{HvU9~5ps!qm-pA_RBD(?y4m2+SV<LN}TsXq5*J8`t%8u#z5*vr*-uO8ga6%MM
zr`(7T8tqVn2SL{X9R=@{T~PKw<=*sr<`6LCzzoyhC!+K&;uokp%V7tJe+#5lLU9Ux
z=@hm)J-BoL-tXNh>@BtWLZ7)@mhrbKFqmw8bo+tdAHS+&C0C@Q3I^34Mh^>Sz#7J#
zls<*oLuS>JMkgohak@%7%1H_T&UC2J9!Hx@=!O8KTW6l@@~?UQ^nRtg4%dqF=Hb>|
zDXl704){C(KOVp)EhVe<#~o9=n#Xc=8;~kB%Z8yf<cG&$@4P{fRVNIp9=1T%S4oS8
zz*CcHr(#Zk^oq^m+$7fhIfr02h%78{4lSNI6OfTyWSvaQ!9K?kqKtrd0dRJVf?H*p
z)Q_|^P#{iA*`2KkkLOW#5-r^&qcM=+B95}VXG*RW`g_PAwvlUG5;@$i?=k6_mRLAA
z)`p1%0@!c0ozvD{;OU4iC*E{0o*~{Zac3%9L@6={*p2j)e3_z%1qN<(-KuxJ)AO>F
z6_g!tKhPX4#QOD-o>egFIKCY<rohd_CGyM<ZbLI~LQ&${Bkt$6m>2(X^pz?ou|S3C
zq3q=DdMs$?Y5+RLGwMEa#GxMCg-$C}B5OT$ll*AsT#~0tSjEG$-Bx^kIL^JitjD;Q
z*H5>2mMnM{cITtX<z&^_$4gYN5b8&a7*7IXF+)J5J}BvKK{A-pXv8E=Pp<t!eux3z
zB8c+<m(nu8c%#Jo6~RYWpJ!GMrwAg<YR{e)w~ai06?oGv1NY#ik5Ajn66p&L_SO#I
zPc3!_5t8{$G<X}5jf%w?SR;~n>tK<X-J-O^XofoYyNHw8*@J`z>i*h}(DrrY;1ii_
zCUCz8+(6ttdyD|L&fBT@3;)G9Gu-gYgxhr^N0;m=wOP!2r1%tlpikfwQ-O?wG?s8G
zE?dwSMKSXWnb9Phz6WJ3stKgPVcAs?Sc?y39dd`~@S7Iru3}~94SSFoQ&tg;w839p
z`R;3n`U8r;;zb=s*}2GjD8zAfhoPqSWa^d<tICc!hcMwnBS~NG)H_F9S31HXnjY_=
zTq>Ga2&ZQB_1Wqt`4X($M8Q_&Pwppwes4S=00xo3s=)L;)u5vWMCT3UNbAJV9eY%6
z|5&zxm>CNa2kzVH$JJnR@Zyr%*oS~A>z^nJ5m~yvVIGd|YW~R6AOxH?iQRhS{4>OE
ziESg6>keF|s)rmbh1e!cJa{twrhim61S<7m@1e-E!qLX8u;%bNKr8CI+$FabJOQD>
ziko7*=f$d#H$M|X3q8hd&hW5d*TqM>|E;P31~=4(NYuAm9e+beA7BYal7xv#Ca!=`
ziiuM$gC90>S3jh?_^VAC1jP$oorKss48$6|o?XmE&+)23zzv{S-g?#Fv`o<#H-{gM
zwE3zgb_ZxTI72>KVh({n8RE$XV=LfX%1YoZgUbbNPK`88v?+YKnWW(zXv@>39jgEY
z_<8;^ULd!*P*6f>Sd3-9xHvG#enl`aX1<uLvX*8QYx$vc$Pw({kZ2Du^-qDm;9_W2
zDeV&2QGQZXOck3GpOwEUuTT`Atp~VVPtV5JUS3`Y^^@Fo5QpvpC-x+_y~9TipL(`z
ziQgU8L;^3*K<@uaeiUwz7`9;6)oq$g^vmc=Mw`Ip-V$aa<7#*DQ1_JX83{5T#W3=j
zH@{|4GF75CGJU?15p71k*?2EO^?k?ky!cXr&jwBiO&bn&@0mla39w5_D|<o6u$bqh
z7Xw{v)(s;bt#Ca2@%`667XtNcPag^PzeTWe*XwTC*zs5DFK?nE0mttDTof&1eMy(P
z!T=>%=B{9X_|h|M;YKD+hl(OBRnK+X<(J^+C4oLWd(A@}_Tjt%BAhZmkmPa-_*RZK
zHgvRGCqLpo3R7<FD=ik07)izr1VtEDMfoR2s7VJ}p{@fprobDNUkuHTKSMO9^am?f
z%*ukmF0+gz37c9eo)t3E>k-NP^3%0&k`OG|$a=IzkGZ~JhP@($uRZ}zon=EsDXR(L
z`uDAkoSF@snh<e+z)(YmD_}`S?B{Rvx&X73+Fn{FO&Q72s*1x9`z~v!gf{n@Bmzgc
z7#vq0<b_b9Ft^*ei9@E1GyM_LSimyFQ2f$e-@!TJq87XMyES+yXYvd=(Ybd%;?~^{
zeIac@LbHg$qimnbcT5g(m-T)Zt>5Y+4ZtYPd}T41^j1B(LtR9duK{$s?=o-dAin~c
z0$R2>=^uU2RV&zZXdt2;sq8>&1CmY%Z9{;wL``<ZMGO)dEnmW>P2j(utPUOau*a0v
z<v~oV6s_@aMBKbr)|GQaPn;$&QI0}(_oaZz69pDFqlov})*S+{ic6>+y#1LT;`DoS
z1vT2kDLT}SMgQm;-(5L5JWnS9PJhB#GTV&GC*v9|eg$dRlx%IuSx>xsy1Ry;?Rv9S
zD=?bHC|54E)olL#>RVxk>?mL;!102VC{On(<}1^fx}D_o3ta*@K7u6KHF>cw#09x*
zOlj0X!M<R>YQQz1E#9#t4y=1nnMl`}k=!vsd^J#U07>Vs!3?#5Q4_9zTkcUpaZpsq
zS4z}c?67h3u1*cv>OD%$!0eT8BsZ)5@#c$AoS!5Fa6dz3q}4_~LhG_Px9TpG`P4|p
zK9Zi<`80AA2F)6}!xFpT1~R1|Ny(5tYl+X-#DAS1W3Ls87w0$9wCjw>naxrqkRT7M
zD?dr>dCP%ijlG0*J7`1<p!dRJ>p}mEK!ZP2?(KD2{5>Uh4$^Kl1*gRAsxn8JJ5;X%
z21^EO>boSm2TXfk>Rx5{I3mVc%Z=186NV*Htpj{C;WFa$3eR4k>$h+R-PDb8q9Bnl
zIT?v|7ylq<vVV|&pKSbN+$MaQF38#*!PmvBAY*9aV{{N{+(d_e>1&vY#~DlkE}%Pb
zIzs&ff1_A-g%Yt1`j|EIEIpXl0vu{wg)S><Fqee%m38sCV+P0sdy9R&GxQOITpmN}
zfc}h~5*;P0phb!j%uqKn2~$o3E?qIhEzuYP?q~U>-nuogi5DCnDVB~3T!BJ3uFrnA
zz|7g2uI~_+Ku4R9^F9uo>ylggznb8N-sPoj=IkoI(sft#i22~_CiU6<;<M5>ib9NE
zt1E<6WC5doFe!h!X73(+>6S1N6~ot~+!AxU8{Natxt|(O_x#R`VTg>4+(xmn(rL4u
zGpV<TFRHTldh58msf?p7s9&MVl$Q1tF5-VwhSNnPnG5BLcq8|2a*1uUa)<nPplIi>
za(#tQG8yOIuQLYp4~FY@mr3<Br}C<ZqZz$}+4@KK0TW{cVCaLf3gC_C`#_)hMvEoV
z76aSj(-N$7E$kxkYWCTlUZ1@Rb{FE}gKZnvicgjolGPiH_bo*SAQAwNVy;bxOgSrP
zBQ-2uwR`EATpdY#jxBI8N`8P&M88x8G~aq3*3f<6YC(&}mHFSVvz2>+%e|0aR4|nr
zfW$;S&fa4fcZao(;vzZI?b=xpKl)bum5LTC@{>Ua<Zwr5%9=5Q<l0MDt=gwVsMB`4
z%8Ge-?w{#;gqMNOkgW@V21Ss5P|)mmnno$rlpJJ5Ts`S$*CHO_2MoNZoB8n=L=9^D
zy8=f%5h_N<2(UVMPp`oAN~zwjgZxZf#n&VL#EoyN-rrW)qqG9;GzKKv{BmqjU9?hm
z0_YY-!FlLZrdx*<DUq+Q+(dB#ZZB>?`SozZ6U4D<K^H2zXGSWvbG=%Ry?7h(`z5^Q
z)m#<I<bQ8+e*s++z*;t=91x=#W_}tkDu($&?0w4aA*6c1OvI(U?SS9Ae)1;TSS-z0
zOfCxc&%;kf7ERcsl|&TqJTG{zJh71et5?p)DCF2mkm0-O|6%Lh<Dt&qKW?o`5>qKc
zOb3TrVJnACm`akYro-kKvn4U6G21!~#!O3230rM!EF)(zrZPh@W-tz0lJlsMVa6uM
zd_KkatU2uc_Wk~Tzd!E#{s)hThw(YQ57+y;Uf1)b3tT;%A>8c<AJFxQVR<D6^*bCa
z#Q%agw-oGA6h)%d5Kni_Zv{hgJF&+pT$XZcHW;+N1}7uBH%hS^$yePOmI6UEB)$7K
z0yO1)<N^0SFcAI$!~cqv(7p8{6--xF*fZH>EL_}jb2ebDqR`=@#A;ip(grpxPbeO+
zMsFrxY!~7(<jxZ2)+zgxL`!DGyNDM9Z2`NW&!ysguM<uEOXSEv2}sNQqzZ@Las(J*
zZ$+-sSosdevTG&1&l7K)!a&cc2g%QeTd6x=!e^fdt&&-tadG+1;KX#il251z@SAE_
zpB`8-8(TCTd;J;XgO9fd;c-aA+h;b}IZ<mAQQ%On7hn&7!oQM1u6Ya3`(Kq$1IGaS
z@h})=-%*Fr-(be8dFq()Kb^LNRrm$hlDvGrpSp*lgDi-<!xmas0x32Fi=cLZw9?Yk
zNkkyrYdsIn8k@;x?g(ijFT=IfJxa98$OMY-&bl3m+A=K!IY}2LDDcrBF$pmbRva*p
zd4auTM4AL(igX~)0Az&ovICT#6&XAtI)kT*3CS|TwByoNyi#-8R&v@28H97gOr_a0
z)s~&!u8+!!Oz*xfyD$vs6&|Ibp2Fm&azbp9vb1b=YruPtikW+So$}Z<5JQDZr?u?H
zT;&N}rBezPptyHRamY)W41>(J80{G5S`dIMNJM;`S8wFPZKXQ2G?@YH6WWwUPCEs1
zM@c-+zj2rnDDDBK*LGk(G_T6b+G6pxIIawd?eQIAL8v*}|2x_8f4QY^DbD>o`~qUe
zn-78yw}2<FP4S1yrN1G&Cvdum0S-xn;v|^V2!CRv+d4r`%@~>1$u;EkagICXNHPvd
zeN65L4=gYjN8RSx45$9-g&TWR=9W;%{!f4h=Jk}@&&G|&q<w=C-Dlr^!VX5vF0AI*
zh8`-C=B$V@K`{hOhLJ&@UscSt1c~}RNv@vJk?r^XIH$(H@n-JLoX;QG*RQ%C*1rGd
ztef$l_s_ch{mEJdsGI)la(e+Y{vHs;NUM^-L(11e&lHKKw$Gq^dkwXhst0H1m(0}Z
zgG|<Kj$5?s6y*~9keMR)2*%&E=}2UJK%CpT+u=*xhfiGbG`nQEhgk8;(Wn8NeA}6E
z)hQ-o=~-U{hO!%Jr0mn>p~WVBk!(D(s>lahg%jd?MFii;DqwbKdXHf7cW-G&Wp!wd
zXG7S-E832t$F!U4@=Fe1_Sku2jnZXRsVv(_YuV-CTu25vJn%Nx0?swZrY1zWdw{{a
z2CklK^pe-RbkxH4^%xGyN{C>pBel*2Gp%u{djt*#CHcBO&~R$RD`US=U0i>pBl<$Z
z@cCyAb*ZXfhm~5t3l{y&mFg(?EdNJvowl+zo(@$lguC-OkH@NQgx5bKO>|jpxs10r
zVYl^lKbiTNOglbo^S=7PR>_Qofy)qZFSrpg`%0psI1jFcIGbyg${R1>Jrz}o6*%`{
z>j9auvd32SeBZ*n%~9?6V$g|PmR0p$qj7(5y<My)^GbZ_jHkreCbKvwGVqssmq)tv
zRjAu(Euvge`s&?|AZ}t=KF+;<n4KkDZnn?9SA?zbb*`Feh)RKKCl1&TDf7x+eJcWP
z^Ir+R4!)&B)rVTjUsd7njlR;r39HA^lVAVCE?A&FFJqP<H0fhS9(z9S#{rgy#z|xu
zit`e%83ED}kN$`ZGY=$1JTmI~<B*NPt1Gnwi?bTvn>IEzHRhTF6-;SC%!PfUgQ|+^
z;`>L6GrddPu0GT`U7GQ5;=bLvSH@u_RmFf+Q&P2m?bZ#Tza3-`TRwqR;^S~Scp@Sc
zdw9{0t}_*|Q&GloXCS_so*kquQ_7uiKsjXP4%P9VOx=4cET9)5ITxYeyVmonmm2Gm
zJAJrNc^c7r`g54I#f78iP?B$NVZg#Ro~|!S7Xv6`=bTv;;Oq1+T6~KZs<vkL&-lK5
zj4#8(muJq8;d3K7IXTZ;Zaf&9@ygDP|J`F(T-9t9;k1t1WX29v1qE>8g_!ZrV4(#4
ziQon1Qw|MS`^TLcTC!48cHlH9M<nwY_n`x%1&)QpfSFE5JNOd|k<9-7nDRcGysVAn
za=wvSqWj<ko14QI?d@e(j1%p=2R?_XV6sD1l)r*2eHTx1=>u*BW2(Hm$at&MN&#fn
zk*|FQU>8_Vl>-7cDtYDI(|&8vI^eE566rp$t*F0s<W1wtgD;ZJ-Yu?CmV&35Onpt;
zOj(DK8}h+nM*Xw{Nvuw9$2=E2fMoprAn3;%fJ`|Q3<_!Q`e{4Jdr$n>6j%kkw|}EJ
z!E+)LNI;in1fNK6F|vH{<8wAvb9Q~N>dIH3rLY0FJxhqSN~Mk0pzBW+7ly6`ye#j8
z(;{-XeM=f1XS;21D8!kszrLx=ap?EjV-3k^ptzNpUiCgl*FKC<K87ED#*ZO5>|68C
zVbBJcBiDP(3<0a54)DlX*mRlT`-72*0C1l*hgo!#N5%VgU_OIRaqxh3v9K1q9B*}K
zOf+q;`LD_yj#VHd)K>82{d9D}-d-ZJEP)t!*8LW0A@&xgy<R#p%))F_z8_=vq{$Cf
zPY3J;6B|U13t7O+hT~iaN-W$IW=Jfr9k+c(|7>k>sE{(OqhI#$iT7o{F}yG%qfHuJ
z7tRkST0ecA*^K_KS8YX$*7B$CWV+p4smvb<GsL;)wE2?e)y0hP^SxJjtOveN`yzXi
zS3Hu_t3=a;{akkcQrrS+R_g07hfGQpqO__Jq5A<Lapu?>#V_*XFgk^U2HaVszP;gd
zhM2Sw@oP0Q0Vi${Z#!P-IteYOP#lXwh8qglHM0$Za>u&-k`UpkJVJOyDA4JKlY*`U
zksL=qz{j;4fGO+Je{me>nH->t=pm=`SH|R99!M_?SQDdNhnCQ4vly0H3dOH{Iye8J
zVj)R>JW_U=;tdn)k|gGSK9ls5f-nbjN!BJLSM%_NOo0@<$n+C}z+YMOzO9qvsvsC0
z=QN1YAA_m77eoBVrU~cXH!;ZF)>4G;56w*~E67b|SCQ-aQ4OB=t_}avR_|L@8qq~8
zpN4cBIWMkgvM&5}0$@P)^!``7pnMCoP2J%xFnZ2JrZ=Mmio2%hGj!nks<~FbAcIDz
zoc@X}2NboAeA*_jx(hu-<2v7@(xHqGcymYgM|L}_#WeXO=<@lbM6DMr`T^R4S2IQn
zTQ&VNImJ`Ka@fwm`)(SR-kY`0&R9L4qK)Pv=l!t#qDx%R_u@Xb6^ZKc;?*U%``gaq
z`iKiA$^M@0mMWOHXZ}MMnMS>v@ay9omia4Ri}u1s%rY{KFG4FyoYV-h(k8~35btZ7
zR*c7Ka}Ls;gsyNaX%<bHd1d%I+pi+rn5bu6X@1Gp50~9{9z0s1COZd6GoZwx_K2Kv
z>?QJ0rixq`x!m{J;d~KdApI5AdM17md31lI!t5CA#Dj`GAkoXpsp-R^w)&XVNVGb+
zhVMN1nIU;T#H1XQ82G7|(_IGde^5mV|ErDz0FfymKn@36l!0>NH1ymt5G-?#Y<Nj@
zy+sc_8*`bv?$A;dU9BseSb|TFv^E78lNa^1jV}^fd)=cC*w!EF)G*%q{1&Yu0|-NL
z&(UqPlpGus#glLQl}L#h@5%=C=0_#+@1Ym<@Ts(euvr^MmAqHFH>X3S+IuqkO=OlH
z;)F>-Z!UqcNgyO-5vXYF8l;;|FtCBRbvINnHLH-G-D8Nw+xj9TUAd7ji<~L=&ujmI
zl$kqpXU5)9QC5C+xZ%{p;%R+$?&y0D$CnNLO9TUOa;e`MBk;}0AA0!OC7g8N^qPMH
zkD*5}a=jdh6>5ZXT*2d*h1X0;mEQ{FhO(pN^i$BAmHgiWb`8lf;&{@8R-S|y{X<_#
zex!i{&2Pv`mz$N(Hsmu{b-o@8cN~rqDzGG{`Z9noUjFUPlhQwuF0Fg?$E_!Y*Y2NH
zQCa=+x8xS)HyUEQw}Yz*tIdPV(Yic;wRWzaV5A+*Ql?GdHr3o?;$!c@x`{#X!u;Aj
zaM<kwpFi32lCRmn&D=X&?bKJwlh)+b%_$m2x>b}7HW`6#ko3V5!iuu8JS0{pr5p#k
zuh`W%KYZ@ltdi;Mei0}!R#padX%^7S@zS3?qT}PEtvv<VeeMolO3pWe7HoGg*KZ*y
z$C?xmXgAPW?`Lye#!{_&ge)ZGLhn4=eE(7g<``_n$8GdR!Y^|N_T(=Rtuv_0txA*H
zKAZjH?iQZ2{D%3ayI;FY#!6qPEn(p}TrbBQ%9EtraX8PwI~hR30OpDe;{bb-tvJ==
z+RHN3aD@cr6`?BvcGb*bzv-2L2c^@}WnE!raXbjffO+xd58c~VNBvh&_FI385NpvR
z*Up(pNg*!9AEIr>115f^O}y8MWM#j9;1B(g3yHXI=B*vE=LWWVHq{O+<uOqNsnBEo
z%@)5<JAKn<nt#^1m5EAJ&|DgH-jL)1EzD`k2%+3vV9C&MPnTXqfP;!<X*Gx!v$u?f
z(ljXNOQ-Al0|L6%HDD`3qqB1(?^^7-|9R!Juz&R0ivsJPP;fSwH<+QLO3lJymPMd)
zL%YljzjBscGLxg+KEw<0P;1w*k17t1ixGE6O-LUgFD2>mx&d`{xjw86Uz#TQ0iU}&
z<?P^A(HDPIKp*>BQnih{d0MmMMWxmnFbTDl>S{7jUA{515^zt!97k(~<a$X99^<bl
z${9Gh3l#k>A_Fsjp<Oz9Vfl5=TyA{*qv-IDZhyDQjDW37)anwn+86Xc-<(Pn$&m_;
zR$5)>T%3fyZPpi?%sD7#3Uj3K!*W-N1?@s@-=c-;i9W6c+5P;`5`*A1c)f05kzsab
zVE(fe+v3cMMB}Kz_ogpj=I*-+8hWJw-Z~zrL>&Mrw5+?pSf(?%P+(mtcP*iOhxF9U
zaM3B}SP%RLtg&0jRm}n;AQ;!&Z$g;0Fu%-$cxg9S@h2uXfH0K@JeLF)x@{j&v&Yfx
zfPeIY23%;HbopbT=<yDiSFqy`pM07p8Ty=|`I$+>mkHgg$q$;jmcU?{Rq>f*lB_$(
zUf3L(dp)JtyNWFU@x85m(A|ro(UInH^z5%dEpImOHnFg3QmPhCZN}SWIGAZ8fzqo(
z6jjNOIc>4_b}5|53G{7T-6rK0DBuNyto1<Bv#kaEO}Ds53zr@r=$GD6p#9*7+LzcZ
z)0(ks6!AdAejV&%Z|z0tHMEwWs7`h1RnxJp(^O5wq9~MDIwlO&C@1&^w=QV5SK@Ui
z`+ZyrD$8G=^b+VA`Hz;|Hiq|Z-lqxybZjLPv372=U!M*Zgd+&OY}S4<t7OK>QgN5M
z4~c8d)-Nazx)LXer;bP#nnC3dkbT$<x%&YOc&t^l1GY*F9<UyK*_3_^lD@2V+Xy%<
ziuM<3EAC*Y1kUEymzsde0W{c-)O!IVh0@sukIs42L<n)oQC~T5aiBcABg9%Z^|<MI
zb{yWgmdAeiyy4`-T+wGy96rHA14vl^>n%h3x9>krDWGDXU<Ga*u()wTrquPR;)#PH
zxbm%FN7_L)o3KlbT!gZ2D>sfHBVL1?z%t4akpEH|%}{s22*{VUXWbUq2QAU>ETXqe
zi;M>Tf)8|;RLxun!1K@feXFv>L%!w74P-J;`4&Yw)r1lY>&mx*g4yzXIPiL8;9)Bq
zf`#k&oeiGJ4YrSnfS{3c$H6MRS{{lp%Iz{D;yl8<tw#tM8b8Pa9#qWMO*7wf(t;{g
zXu1*Lcqi=wr<^w+a~^{M8d-p<WwxR->;d`445a7h@{1`^z1BT<bJbd{5_B+|ZD?A)
zWKyTS>AeavApl<Y`5s&^_5}Gu^%{1eX`bmz0_db~9}p*E2lD&}1BUuPsD1>p7>m`^
zx%3akZ?x+k+R|be9I%1;$9%aMmEv@O4GCU8rr=p{*+V9xgHBz^Oe*pY9Yb}dQukAQ
zo^i9h1=Wj<SRJ8BPtxagP1$L&DZcJ@cbZlIsfW<>ezNm&b7-hM(P;;@pN6LHBxA6-
zpC$ZOsw&bBpqfVd&t42#261==11F&6H0x1IAz}7aX=7uy!O6J1M?nSGWBl`P9kEK|
z87QsggqQs!r$cfa@)!<VIF|5v<U|9KH?f+G`SQu7j(1;=#8`YJzf?8zWx6-Ook%kI
z;7QsPz4f@po9e#Z=TKIKYJ2ny_g)T*`cZE>`+Gg<t3uRgjb<KnJ+rEkY{$1xX~T}Z
zMQuc8mR$xub9}^14P}oxc+jX2`$g%rX>rN4(S9CaP5CuZUw4QLM24O;t&nc=-mgiw
zH@s%8LBI=Imj?#iw@8jseQ$+)`{2ci>^yiF1Y;c)4wnK;W|`xUK(o*TSJ*32>*38B
ze2!8Nr;YT#_BUDV**ukFA6BcD%8}*e3|d%PSJ|-YUo@%6-}cgom=SbqgHF0QOG7E3
zu{x7MwXfUkY%ef*9tF;y?H1@0y%CN^Zw)bSeJp=7EF8p6&MBFW(t*6Eg^?L7ohZ+r
zor%OvKewe88XcVINu_Ug+K*&^?VxLO!Y9zF%7cSfYZK4G!C4L-3^K2+9>PnX`FK0W
z)F276^Fx+J&z>h39R2=N<2?(;l{=!%zjdS*?u-N#<fUl2UDkXjfMn-^{JrEP1!PPn
z|DsvFzGY8(Hw!#UfedQh0R>CBL)l|bYeQiq<(;6)pD^Kr<iK`50=Dcn8ydbXcZO9v
zMEi!9jy|%{B(>SI%Wre`11C^n&o5z-O`Zl8humccqewrgthQxHHhHKi@0(SDpUiz|
zi_YiNBsS&pEvgea3B2)VR9)}_2xP*<=cFQ};H^JKGMq#U$<XTb>tlPM#C2KaJrfz2
zPW$NO>d4cP7G{#Ld*xFLfDY1#(q*ujY4eQifsR+#wY`s_rs>MvY{fI$v;(@%N~t}z
zjkaP5+`4WnUeJQAK#uw>ZzK<_aao%wXB&sOmXs|pH?iiOJOB!)t(n#rl;4!}0LHi^
zE0J^aN_G4b^k!hc#OdYu6@?1#d7L3A_O=}g7;&w_IX(&1RoRLA|9g`Es#v|f<pfS3
z38%m!_MHPrqk!6A$rAI|T&uQub1*|Wy3q0^<lzL<V2n&9>4tjhYi3uKkbmhI;fuCs
zU4j<vC(Gj`Xi&xd!jF+y=!gb92(utq?Xh9mdL2XecMr?;(n}ePE+63O#a3r}s%Mng
z;hukFv#aY**xJG$J~+e58Sh;&QPl%3#GA(Fv+wPC^!ur1Q1yV^0r^OGey{9|a+J;j
zl%<|c%7H+sKWsH;C86n%QIhBmUh;haK!B5Y=~}#rtmL2ZfF&}|@`w|EUQHw3`P3@f
zS1+(JAKOkQ66J@D@3|2wx<O9$`U|y1*9j1PhD+OE-2^#KECtU%q#WQL^pEE2EANW7
zz`PXYzAV7(k97R@^Iu4K`zIyn#t&3($+&@4JYs(03#XK?UpBtYsssqk-^bC-cI}vy
zfZYfNJ}R+m#pxQTN_a^k2bjiZYUh9ZaUr5sf?kUxo`VFeh>_0Z(a&>QrDc~DnIGrJ
zW9H>AeRrg9JEx^}%TY~S-_E?lThH#|Y0GyZd9a!on?_oEv}mxfS#AqN%5u$`fRJdf
zZ2P3Q>Csi>z>EE)&(?YA3acNu^s~9*xsRNI>ac4`Wvu!Ll|_=Cau~->X#>8f+>J<*
z46Ez~Sn#mMottN=TVZ+!J<Vw!^!C|y#whnOK?krFsAjx=_J(=pJdyO1d!t*nK_emV
zkJj!@VTEXiRjy?Jf_$r;QnPP$9~zUAhG_UKZRJ32baU1QfAa7pDEL=a{9f^G`nJf?
zU$C1Fk09k2;BPJ?v*LMrip4lDw`0U5p??BLzj&M$9<BKOH{Vi3ZE&n^S*{-=A-#{5
zdLi#YjnY=}9AsqDbIY5@RLI2=UMdIlmM44?Kjc=8V^pSmbM8=X+CGrPq0^KY4D{Qy
z(y*UNViEVuIwueKyiAlidH8wU4=MWz^%2M}=hflmaYk9y6^JyE(t)~Nr$67#o~#do
zx+J&^2Q_^4==*kK+Z<m;eG<ESkKu_)fnMnyVH_*hdr$W1i6GaXnsuqhKo`b}?(o+d
z;G@9`5Q56!ZRglrsXET|M&f{c0$`CoIX@q^xUs;J5w8!pfiq{7x8ICFs$W(fxV~7k
zA;2ZLV$9F=5I_3o%r%l9{|ox0Mbe&j$_?^lIHX+aj%=Su$06plPTc#}PKn(u7A-9{
zx`mf0B(?cto4H#3%013tug!e8F5`1PEE6}~6_yp36KsXdRBo5p&}qk#Z1j}Li$N(3
ze_4fk6-?-8-gqXC<vM2om5(paqhO453SOQsA6JA+)a3i`MZ=*Z?G4d)9W*2$D2;9t
z+4ft=9SIT)FdPs!LZWA7WbL*?p#uOiZCn?dU-rlVU;ipjns*L0X@ASY`+axCn9sCS
z<{+D`iu>N7Ls$^`=G7*@ck92+8;$<Xv-wp^$39gV6~f8&=oO(xTcFY9EFOu>IXpq=
z);;?Y#-&hfWcJKEi<+o_T)`0=N5Jy3S?-{3@}Cvx*m+p6xm7pC^ZM>n6S`_=*<&98
z_=YamAt^VsNN|WTl?QqBbj%-~px>f??@exXRBbbB`9<ys8|6r_Yuv=ku<64}<R@}Y
zM^vzf43+NS7+xAGRql-;ndY3Ydogf;+rDl1Cv;vcz^?-#o0oGR<)AoA*dzS|8cXIJ
zDVY|6#m})&9*vY1PsM7b6u;+}Pup9jmrN@U)IIHA%(rY6i8{{?R1?R6R3yQG5ONhr
zYgGP%Y*XNLX|JM0sUvp~IK<bG7bej2sxU^J)1p9kfM~+Ohe^&{nQe2jgV!fQUt2Gb
z^V;>>Rs=6r&So#K_!qzKj+N@W6!Gz4eJz?zDzs~LH0Zi*t{{q00oG7vA&(HEzoLP8
zA0?W3Yrx-{_Xi`a9FYavbhE-qr_FNv1wKWW?z@K==9;L;k1Cj;u1*Kp!0Sw)ADa6I
z#Cr%--vMNpCmR&y)e#mradf*O!FiCfok%G0AD#6jrG^2nlb`#7PFIP4h!=>dRfR&l
z{bZA(Hc%`7TWnBxyhVPY+Gmpdcv>M)eVkmP$z2Fm%2eP1dl&(lfVDf30jO5Fkq5;A
z^+CDZAHt+Ap|hL}acMX$?sp%iV>2_ZQn$XJrf+4_H_s|fAxgA8qvM`r)TmRe*0$j>
zlu^+1L>O9MXYcSc`Mv@1+Nh5Tb&}S$BNwGG#)9Hjn<wC{P9+zjJ_31=woH%W3RdsS
zN}=e0g8n!12av9&DRpO@w!>q5<{gnbsJ`nDHh7k0i_9SOo$&<G3emNt;Lw2JsC!pB
z@$lur%tVH8p`Shbce3c8TMoragH9<3`-;1PoDSaOWJUWLd<=awgli3FCChz+CVI4x
z+O`I@%!uxv$SEFhK|0{<;nJ-Yl*=~nh7WLD0;AVI!&hsR5$;vC#2HS#xSrSZbw`s*
zJUF~-PRMTltI{{A92!IJp>=uxJpT{l`gcHc)8aSNH*?~l`Zj@+4H7hwwS!_0XFoFh
z+n$t8QJ44=TAfS>iUx_Mz$v~uasdUBs*I9ofv%m7T^cER>jxp$hSef|*w^e>9H0Q(
z<qg{Qkl5j52P_cu4Hy}NbnRlk>v0&B!d?KX>uu}|R6y@i`Vp4G&qct>cW%$I)h~Mh
zvbC4JL6^-EXEj?3RHvJszMg6}a)o9k^tOfD`Z9zmwrZmpQ7qvf8sgvHGfSfyf`HCR
zefaNwl1Y8R!VmF*eBbPx3NAg;rnF?(*5emqdA300b~QTL^cd<AjG2ER3qVHrE4<sB
zVA&;Qzmp}zOuZ4@zXWz}gg%kgrikOOOg@Tew2YX?of@KCiYX6`vQz(p#m5mHIaOa?
z8EEZOmGYGvj)RdFuPEe^=Ft;oopey`tRtmk0#O=d?TfhE7l1v$4I}eGsxg_5Yh*)X
zci9-N(f8o^Lf>?ur$t8?v7%KP9v&^Jn&b{Y9w<sbcBPzK9JcC%?m=s*1s@hx3u#L-
zKr@?;#zcK*RU-*x(>>{G%0pn>M(~nF4vo;q_WD$d2-4P2FB(g?jo|N~zWCRIb>0Yl
zJ>h5H*}8^nU)n?Ou@x0+P&d>yLF%9-)W<Twy39-GX)Cvm5$dFZ+>Z-<D>Rwe939(T
z`se-bV8W9RWIwNd(?R0AX)d1lm=jZ+;1+b>#Oq#{N~H2A7?Pp5I{|u45Uy=ZcyR(~
z2-QL_fTbA0cG7kz_mCU;_P2%cAMB)CMN>|@V9VmtQTM=j5-Bd&SbE=){bBQm)(au`
z234EEkVDM^D&p!9aG#=r7Rr40$yrgs*$!erBcxoW4_a)j(kNb5NgPe+YEQ>XwaDZt
z5)Xvv6uUu=+XQV6l@7SO2M$DDk>E6D1^OPp)xm2!T@r*V9;b%qs{%Kx5y3}=fvKsc
z9KzHN&v{KO2zA>r(8Vn9hwSAf<;KuhbcTZqR6lVkD|4~Qbl}X37Y|zR1MjU`0!^Q4
zjvpZN-1FLg^BM8&E}FKmO|K**I7W>&KO4N|@Ia|P43c4Wgt5AwxqDDOI9QI&#|J?~
z?sxA-$@JC$b?8$|9r7npt}~#>avii8rOG5Y{!;Dm!e?TnURZ>?#kb1-*6tf<+4Y&p
z$w@)8Y7b`o2?hdoHJI^y-1Fc&7y@>^a!^R>#AwLv1adPxz{$pbYOP0ns`22$<$mDc
zr81@8lWfL@!J=f2+w!42U4FjEXD0X3cyI3T4-I)g)-`enZa3bkj{d816@yrRZKJbw
z=a`VIGy`}EU3*6{9&$QDaf0gGX(&V&)Q{F>wRI8Ao4J@?*1|SqkH1&j^4K<qZ?LJL
z*X7AO(X72kU5Z6nM&yx!iJ?f{WS`$vKVlK{a=Ag31dW(l&3!DU_KWlt<sf{@RBlf1
z0E#gRsRSg>Hlf8)jgPUCD<2WR^SxU~I%%74$X$syV~7=ggma@GLJm)-Nj1`sKPheR
z_g0}<vsTjsAE8F&CLwIp1buB;8EeOl6m>R_ZHXjq>^uiYC(6;#W@MR9)gSsi@wKdP
zk+)+8qs!5amh7uOKat??A-5`ab$tDXIG;Ouwcs4;6$&v2-5Hw+9W=<DK>Iboq|eDI
zglFWS4mY;{LixUKkjdGC;jbz)B^xs1WO3&C-(a+n&#f}PSFXJ=Jo|JO3TUBiAAQ)7
z{9C&FNFnMSa|3XN9**X2hvq+JVo0UX^4%JizwJc3Jt~D3Yz#Xk78Abux|mj#PAT^`
zA;aRv?(nnEn(z#UjUOE~Rg2?qz5J@ohgG&#MScYg)FN8T2CgwMEdrw5SLk(={V<bH
z-+6;}gQwjEeHBNiv9TH-C<mJcsJng0#m!Wm!3gH|kejny`}(K77iJ~FiJx!Cj|Vew
zT{qVXpXQyei$AjNo!a8PaVBCLEo}n{pG1mDAycj+lhUDtDXLy?L=r?#;9%gBh#g<m
zqksNDN(#rACa!R>$B6a%PNLs8XgOdWXU#Pdeh671$zzVKk<Wn@<UD5lE{2sdCzi!3
z-|*H@++-eB^B76i2rwemhH!jr25;-%uv5;223@;`J<dz6*THBL*^Fq3R%!4R@hkap
zaihNh=&{44d4A$=9^r52=GhiR{B;WxG|wA<<G-K55CRkgy22%@_heX6og&Ag#-ixu
z!ODW8alo5s#N9#N^5Y%61>^7R?`oivZ_XdX<f1|BD%W0};AcPspc{f>$UXYGmQzOG
zA<@N@vyfHhfe3YuS;dT#5pc8%=SO=gcR|&;H9Vc9C+|Uh&3C8)bVwS83THk14B*I3
z^%vgz-lBlR|Nm#xtSv<4v#s>Woj!2nSes^Gdx6OiC5Fbt++lKvm4t@U<#Z+mYqB8y
zvtVx{Y%(+`?C#*KWXXR(d*?1Kt#A5Q#of*Vv#<>y4-pc2BuklPC#?Z9I28fE>dsf8
zykZc1d(tBF{n`Td46z+)ZTiY`8iUaAnN5p)GHWlWeKP7EUpXVJD~~_0EX*#i4CrzE
zs8Ia<)jz=B!=k<IxyRl{mFvJLG+Mr8LaK^90~33@;&}x9HhKf~u)EBOfJVu;)KEfU
zREOa~b_(p302F-jajo3#@$Su1Umd2n+xa|vjk^c#NjWe_yx1n%nQ88xe?sXIu>JXW
zmsMzBw8EOqd9aYWje#5jRDcwNxZ-D8&ZlE&AX1<AkU5Zf(jS2Q{GhVCz;Q6bKM;t!
z*E>Wr$hwz-rK!yu;BpyR@@Bh@<{|g4IQM6Sm@w#rakMS$vF6_6d+v{~t3cnbrp*7>
zh2DcU{@yCpNDcN{y(I#amCW%IE27&mn{4Qr1x84^c+~1rEl0r7X3T=~Kc<~&Fclk|
z#(EbN*JQNd4P~WSTWy)XCu&EHu=39ezPx*-{p=j7h&SFywSiI+Kr!?Iz3vel4KR0_
zv{o<Z!9~a`d3}AQ5YLdHb!V4tUlk$2F7B0AiP+17%AQ}Ou|c^2CFWUw(Kx_^^<|gZ
zKf6}Xr*mt-c1DChC2)7qS}bW-+{aWACSPd*(m->aP<S(S51qflD0q^qn?cz=ZlMN#
z1(h+SM}q95Qyq?0zyC13Qui=w52v=k!F{tAXs++UBKFapMp|I*%D2XKDmM>1Tr9*p
znFAjjj99b$SGiq9Xq{)nLVB3Pk%>|5HltlxeBqA+CZDUVJ+=yoSkL>f^@<1P*Zwlf
zIuQcU*M9&AuFAQ!f;k<@`m5hm_Z>95r4niU;H`?PBgP)o^L{3&A)T%C%@lJna52?w
zi?vFZ8%VnM@NrNlsH;^7XI6BYibA8NBg<!UJ<Ed*2y*JYqP`eE#jdT%WDFXCRvS84
zX1W}L#7FZrq`HtMFU{IVPAVbb3@DeLAZHEF2(X*+Tz$bJpj*ZUWYvt}-S#)J``P}k
zE<<xH+55-tagF(wD?5y%+4<*Gk&FLZH9@@x$y~egPOdrv(k$!J6n8m3uts~VS_0>w
zQ7xR#??)2bz_U#+c4i<W(rD!6I9(n8Ak^+l3tn?9mE$KdMDZJb{N;7og6GhU8xwEp
zH?Y<yp96ix&jiqSz}*ULc6j2WeAujI&)c5yojkQLFe$~x{oGe1*q4?Bnqwa$;Wj-&
zV1IXgg*{*MyMz7bhH`0XoA1p!8DRr3iAMuTMFhC}6b?a*O2t6l3nQ2|?t0iZMY4c0
z3>+U$8TJEuK!7yFG7vk^lj1x+wtX5;3p^m`4*<@uzFKVYyzjPq1wEeq3)N*BHnkw*
zZvlXf@nG)UM!H(524I)?ReqzFa$Mq}>muMp%Dy8s=q6e>UA(}4#)Z$auYi7=u~cS6
z{(7Or`y<fu5Y<i(MW$8HwbiSa<A>|7@73hI1<J|yH*c;h(H`~3YO)!uLzgdq_;C6+
zpcLJAEjMQJx9XeD+d})@jPF*Yg3{^QUNyK64C}Q>7esFZ8gV*evBXUW&B?JPs}Bx?
z&^yM|_dEwjUkCbDj!CgR99gOgE!Yj&m%gQVlzQU>OnYtIs~E=qt~z;7ggCCn&NqeV
zcTts3@VUU~7r5aSUn!mvI%bF}t3rjPAG!20eC%~P$z)VnTroEKYCGd$#>46hA4W$%
zbQw0WITt*v)AWz-Q$re*!T?h+GcqtYaKf$*r>%e;w}tH0PG|8tY1-uAHhq^tFX7on
zF`$&^++lkd`1CLQbUk?iFld1gXvDn2r|3mp!T!LjcL9ha<o^cRBDmYc3l4a(AqmLN
z0>|gkZ4E}{k{(q#5h((S!A6U-{S%j=RwVCY;zejK_w%D|jF__ans?4OqXE-m)6LM$
zBmOp3T~d78F?1yj@<OA@W@6w|qbrpTa-t<YDC88s4f7l`j~X{zKig){D0ryFo*<zq
zd*PHMhwWlV3#Li>ymA-pn!4nHIn`%fg*)^`xia&8VVW`)Oj0BJ|EngdD*oV&=Nlb@
z=vkPbnD55gfG@9Ux`eSo*^ORjO`9jGUSJPJz*S^m)eD+)B$@|ns{g)k!t0CdK76j<
z#{HDJ<Es2DIDBV#>r^4Sr$=stngA$iYBO5J3H^cmz$K;A9)PCD|5e$6ciQsc0vop_
z)My(t+(OS3TBSO;;!E^g7KN5sRbZWq4SQT^Y(XH#GeEWbv}r>ckXTJksS^0%e4@nS
zn@P#ZWQ};jnSz*-pPsdE^6GWCe{|=%lP=e<o2@x+wxbXQK%wP#<Oe5so2HDcp#WY9
znc3>}ZT|rvQ_>{o@K=)Rs)`5=mX$=q$^0kNz7Kz|^%cDn3A=Vmm%lp$cNrvmg4ui=
z#3vt>hoJmvMWTaRu*5@Wwu6h#ktV>ljbiusGXf&b6^xm*E6DM3B+h4Wk@cI%2j4Kd
zkP<oTZ~0kboGc}x&$~y36TUl!64%^vdIjcO1X9i~SPy<kP_`D>z?m;gfv30=N&$A(
z>zHli^0wU3zxAWi#S2;?XnnbM6(M($S#g;YC9n^8Q09AiY)o|7{x|_oI`E~T2$&Sf
zz5@uNfDu1{AUYn6k6!y91W~6WyPE}9KfUbNqiuchxb@lRE(dP(y)pm{qMy7~kty)s
zE9AjI6F7z(K`GV!;+d2)(5Z|-h~Ls+n+_W-UxY0m1O<;f`n4PFMoK~Q3e!G(an#rd
z-8eMQaenOY<NU<2s+&+Xy}Wm`zl-@TTHxRsIaxVOGgNAT{P;V-=)pGmE=bC65n0S+
z;A~^s1SNK^{3+VszjuJ62fMdZH5Dud<p_9uZS~y|7A%@h=rV4rd<`ME2<NW(^#j5?
zUjJPhd&8Dy%+nb#P%SXXk<N|)ZI~|K-ZgPjv~_iCdQ*;!lah?IhRb@F%>B<=>}{v+
zgdR5Kq&gg_aKj&{Brrm9Ue*ppO#6gYTMo_F6y3Q-{!R5C+5gVZ|EZ#*7LC9(wdX{R
zzoG@9gb&0;<f>z&)F>RwntG%G!b%x`z&`|R8geoqqmDg=-TF51&k?@?8lWW$lgJ<I
z2{wbofPT08Q5ic|2|DlubDjJUVgX<5<ZW@dR7l?25}*s|rY&JWy}TXF(6quS!Io*e
z^LapzJ!qOBcyENiT7TPZU(Dz0$-;H_V~R4GF>OWvE%2k3Kr3Ei5Qiv60RzsKod9O7
zNv46W%36t4N^ECm77F?5JP>)*y~(RpUsNk|0e+U*4@!|ct$G2U+&F{s{Spt2Hrvf2
z7j6G(d&a{#1M#DPTaI2zEfkz{TW$gt<21!n2IV~11o+EN2ceV{huz|%@wf}@r}Vah
z{am;+Inn@&3b}Xrulu2~?H%;e&}evCO0ekinI5hW@J<lMY*u{?2GmAmpw;OR_`#jp
zVJ^mOoucj~sml*y*OMPx`=1>+Pt!u`U51u)hd4G2SHgj;GD0lHD?8jDU!P$9g0Wy>
zslQuuP;1;s9aQse$;&MPAk~*}l-jS{2BTLqtDuEN+lKyYfDr&OD6p4mYXuZMV+tgN
zTX6=2*x+Q=bg4Vz>Vg}H=a$B{gr4_t+5fyhqOq|n<DN^yEvHZ5(@vAWw%|6?#{b|w
zbt)YvZ4WWBcnSvKT)ONig7R;Gl$F6x_{GR@Gj0Q*V_@~kUKiusf^>ikK1uFY8me#0
zF8%ONbhfVaKHuT=iEI@)sF)-&Il*EJU8Q;i!0yT2i}2h7aD68x`2rckj|Q&i+?SFN
z&cVp|3UVe9^~3#3oWaMv)in&u$QZ_zYzrszM&}4P{>g_kYn0a)S7pj^l!Necg42Gv
z0~FkbOBNjf7nsRWo3PTFj$KHi;Kcr(J(nRVuUIs4N-9i#_+<J^H$IxQ>-EB&6M^@P
zlaJl+0E_RddbwdetkK*+;*;Jvx9BRZpn2w91`mG;Nema`*>T43y82%u6zjj9=D_hC
z_k&~+MusUrK8%>C>e}ezIMYSk$+SLPatu9;Np|oMkLe@fCt%ubn{M+q(RSGBLHVp`
zC#;i1BR&ZcPNqK*w#NaBchBNrV?n(@SMb0koDfMe=UX2FZS>U}Z_##*LBH_Y>B&xd
zibfD0r#>Yoc8aw7%>ZuPbr!dkYT6QC<9!@+i=#?|2~yvNXK+gTZv5>AbjpGSXS-x1
z-T#c@N?ie3i?FqQugUKpRWMKE4__RJY_h`&B8VqCz50L@%maI7D5C3y)#51DgO_l$
z%Fr3hW#9Mn8!_nex%!gTSeJd;a#uF+$DD|~uA+3n0ADXXCvAkL)BuU1wP#ZNkgRcr
zB`y)T1s$G1r5_X_S?<3o4ahhjWCX%p>W>^VsQLihIl_v8J+beQg=Hk|xv?-TKb-oA
zbt(TA=2@y)!pw#+V%Z&uNV4x!{fmT?x$5JO*532j^ej8mdsX3lPw!q|;{I=s1A8wZ
zIZfnng1|%p)7qJ<IaOc;Ry4+}(K<yoaD-XV0|1d?LVTQ<82eR1YDaAmP6?NqIM3b6
zLc^!@MOoFZK~YaX7#_X&tntemyHyvV{Sp6Ty0+R**izzj1R?=0cX<G2fZ`*`SK~*6
z<_q36Oq$Vp$fjoXI8qBNWG?{68cj(B#iGz;@R=btAde5MSxsx#KO#)}cV8(AJ>0I%
zU?tqb^cUU2bPfPgGT71O$G}{oQ%95sA-gnd(4&C8jL0T5GIZMtb`COZGPFJGlilOo
zEUib+cKB2;5CxMWGDU{JmR4Z4asF<v+T_sc!9nfcfmPv&pU3dhs9ul<8uUq&=HDy#
zw>!^y=9Bx~3F{(3$nCqo{;~V#cIV9p>3@9V;o4TPTd>QI=ocVhyN7)A=^r~kWX1f+
zZOAy|x_3=*w#~!9>>qu;Nl`bxqcwc<82TN+MN}y@e?u@bqOu*M!3(8lqFJ~$raA$m
zXAJ8!ig6n$`++s7;?ZOBQMX|d$0ATI)rx{E4E2f@nKlkC8sg4362JGuM`i2AM&88`
zUev#AdZ7ZOAmdCrL=0}Fz0;8HhkNG3K^p8fk}?sD06(*D%(5JI!xzs&{gw<d2~8g3
z^E7YNIP8rV8)|rbha|eg!RZ{w=*Zw|rZn<X3a>6Wd1d6n)925Inw`K_nea2Mg-KOW
z6w(6G0ROAoffbHTSS3=t;E5JrtM++J3mC0u(*nh)O^98mZ%{USyy=kgYrC(7pp-#w
z;v8{ITE4ST$QrO_V7!{>eBU2qyEA`POLsW2=Bt`qr&g&s38l=b%S>Eko)l9>8R(Y1
zFu>86Agb~MoS@*2KO!2d-m_@v8C(1Hz%Lu+3k@axsS}(1P@;Wh{maJ$-*DgASld$5
zD!fF~bh#CpqFSmbPfvmK^+NEtm0S;O{irtddZ!)Wd0^-LV2b=lAbhmOY(_+=q!qh_
zIWBryC~6EgVpwK~amX3DV<nP)u7C0S8gXCoFgwOt#@p%^XqD;*%JTjm4u?xss9*tZ
z2?r1Tw$Wzre7q?3hz;B*Ms+Lz>K{S^nTLAJM$kM0A~F52oS=z#RL7SP-?8)v!{8G<
zsN+#^;S5mjS));eY~QAW$HbCQrP0vhyeVP7{9>>qt_}KG?Q1Ck$X9fH{MzwBlB_Mh
zz9WU18U%mBg#^)#&eM`)^M{$%h7Y&@82gLutq3PIsOJvXn(_mr#vkzyvUI?LOEB7o
z&>n|U_YX$u-LSAhZ=V&!>ioU}Y{P&6n)`ql|HODWBRD9|!FDpnqPph#9y1lCl;a2v
zW4};epPSO(>13{8@Iw4u+qdBLZ%~Z~9UKcOc6}_3`S=5m{jYv?2C;@lz+goFp4s!d
zho>8e%9qumckdl+>wW8r9adQa<K^=0807}@Xc<cRj`j>Q_Z14BxWvnp>&eK-m>Y5)
zYP^i(6HOmVXsVRcMn{n7ajVTJ5css37j~Bhkavf1zeTJr_pyPD$G3~=MlwrVB#f!I
z1Fr%`a0gIWO3_fT-CUAk#_zG^^FgxHqceE?jogf(<SdAfefE;;ea;`WkzFPeethwa
zl{@Zc!v1q5yV!<x;J2>$sHtJCHOLwn0O_osROEtpSqAK0hUfM|%!%J)7ZPcNzvKsR
zj$@1fYWY3KW86K4O&CKVJ<6@~hxyrc`nc5Kr!V{1j=_BOVy7%4#=4K0iBDb?y&~L{
z7(7KynJafqD}YpSYKDjJk$;0+`d8&mkP6Ls4DudBO!;8=nDcI6k>GhV$zh5+giUwS
zM{pAuK3Y4#&+uq_ol*<99!bX3Y1hc2x5Br>ZuRildy*a%q+r`iNIo1JP*q6#iNJ%+
z2H6(QeBT{vlO(y>s<+c)eme#^7dj@-Ifjk||HguM)zK9IqhvQJ`xUt#krWKS%WC@v
zB(cNk5d7NJ>9OP}b`xUm-T>oLdy*gC_b!DqD@oU+xfY)*_jr5H*ttI$Q?L)b%?DCM
za3XFq#?@jKMq{hlu|y02ky{-@^B3gXqNPWNXg^^`0w+GrJ*+}r4@<W3)a9-q47*N#
zD-cQgv75=kom35|r;Vp3n#qnnSnNZ-OTO6Qd%$S_^ZK}Mr-8QLX6l3irB9~&d}n~X
zW$U?hc}GXOohHq@G#c{^{?f3v^9=7IhO1xO*RfxGE&I@4Z|<J|{r9Wo$-8ga(K|$k
z@A;tHMP?C^`=(Z;PhQXPH&vHSC3~(-*wCV;=Fq#|@S#HbDBSRKUR-p!$eH639dy%%
z@h0G^^@W)5X83i%wJ?|~Fu3<#>r(1Znvdi`64@Wu>p&$v&C=rYp8Fc9X2UjaR|@pb
zbsji;a`}h*F2*-NYfyFO-Ali&y`wU@y4p-FD>wLorSLn5Cg1MYiZP%bkozIS5?nGy
zi@JlH<%UE*4#8<fG+8cpG%RN@7rQW9XYA`3mE_!x<rDo579}BGo}N*jwo&$F42h=S
zrG|nyo~92Hx{q>sjm#fT2R3Ag1|F*I9OkVBkh-z-F8DgXb*1Jpq_nydi%T>^qT?h4
zjbP3Is298vTWR<rIcIy>F}syrO~ckF2bWN&(ofRAjnJ?;$TC4$p|{Y@r9cW+RYm|^
zS)XWuv-&j;q;!z&exI8(nk96gAAa?f+jSs-^l-B4<3D+IG53ib(hqBFA4@=CP5_K&
zhA77wGf~{DT~ea+B_5~#>$&gT9P-ls&U$m~&35VMb8prdWCG~0yK=+7;Ka0EAU~ww
z@qm0n4M=AUF(DX3#0Z`4v>RsOG(p89m(Ty&RYtzpY;*`l@#8PZI#yEdT5J66w0npX
zD8_7Yzfu}<u)FLX5~`_t?xlca;}N!e3VNqjOk3qlfRa@r{aNRn7aS)oL=0rE@*iN=
zG^&QrG}j7NOX8YO7i_mjr&6|AN%|v4G>w*9_18b5m66NzA{{Y5_J@&Nqz|Hv@?(lc
z$FHrFa_dV~Ksh`CywH}XJT=UXg?CkAyLmUb6O@-8iGc%kaJmnSO>wYTZGd>%$H9!h
zuyN1OaD6UVa9G{1g;{qjEf+Je7Y9E*)rs|BG$}G461M-H8{fgKRQZ_>c`YEe_2TF`
zRhbSlAbklg_yk$jF%9LlIjLny%o3I6Kzaj;A{!A|2gm`F%0y&Kur%sx-U2Dc04tc3
z63iW7w|Uqv^M4`O{T7;?Tks&TlrWC|D}I#^Ge&LaL7_dZV|UQc%bQ7eXxnKwFj-VX
znAeU;=ISDOl?Y9|t-x?VuJ+iMa%^B1d_AoMe-Oz!(Kz%ujHN(%4KUbMvP6=hwBG1(
zI37>Jn>6fGn>3T_0`>$}oQ0T@T7Zz5<;o`sb%7D%0)RP6{=}`PU<)ai^&`N!n&T=#
zfu6+<ksjz*j4#9se6KaAPIK45HaV#lHf!sFX&(A`Zp)HE+{jY@EsQr6G(;ARt+Bz}
z=4mbAGH7g4`&SqT>|}tmsT7^mfK8a^8hMk`e`LGMM$K9+Bt4r%$b<8J5rIE9c+@mj
zXMiq8+*M*M4n+=>ohFB$QIP|3MFPkzv}~lH!NjbBTw4H!ZG+N|oFj?m)6=Nm4pQ~W
zDPTF?vdFOP>=3GDFcvf1+yB#KMb&#&+Y6{yp({FhmG47sbp`sT7~*a}w`VWvIPfL<
zov>ZdPikKqi4!QD_br+X`W=c3o<P!XU&pSiuROkX%dS?}O$RSm-|Q$(I(g~R&NYf&
zt#a{jBF7INmhkwrWPK`o6W0QHJi%Nqw}q4pNw@oj_(MIOK!{ci9AUewamNW&Gf^v!
zHIJXP+bm}LQXhw}t0-{yGpJ1Pd%Z?6Gev`f(R2Ch(~4UF0_T%7b;!Y0E2q4jITMRc
zanhf%H!Ws#;x~rYuQ;X9iplq7F8vEu*>M>dw<cJpDZ1R(O*8*3`-z9f7!Wmq6{Y1o
zZ#=OUII7l_&-ux0<Y?qQI@3W{7K!xm>6^HE<V4A(L_BvNq?=VEj~U0N<gOsofRf|%
z;0gJJ`B*AAh^^16Ayb7G*Zq9t#~%kEzDGDm0Uis)V|M@{y07Q`YYmNkRv6-faK`Ti
z(W0m!yLF;DTW9O#&W*-je7w6J<J^NnzEs(;OLB(q`<=L;+wkJr;qTSHfE@9<7vNn6
zu7;Y8iYFXLsL>f=RIdtP+7^-<ux&l-k;L{s;{eB}Z2jy~v16bsOv#R_TXC6xqd%6y
zv}ENe4!G`YFd5BY43+3cUFiCG%|Ae0uHKWuoBA2XD!1v^|Eprst0v$<Sk!y%HVkx*
zHWEJWHCI`VOrq9?Vs=olHLt3XuU_t>XC_>rPYJ-e5SK=^8JsIjGNu0rAB1ue*)QZ)
zL6J83nZ*)(M3sk^SKs3M1seiD+x@Ge+`UJUOPi7c^$1XHA*%nXJc?COM))Z=xW>eR
z+j|Pmp$S+0DdfY*y6V3XUL<^-Xz9a=35R|mp{z2-+#dXJe~9JdWbP6CJ@j`&$@BW8
zjDH@qPYO;SgThs4$9S+Bb}ksmc`wP%(#CaLnaaTb)+-Xyl%4vWtG>I^USvVGXEwlc
zfD&idYPEUlCZ76T|9nk#;IMrE1Z_Q;Bymk3F&AYoiin4S<V*BjZxMVphhzd;amm>h
zzI-=<O}C}6$E!&Nskwy-q>bMJN>YC-<wl0=EV)XIN#~k|qBnt-NNa>x0hpHDN^zGt
zVL^YU*9knvz!QD)Z*%iYMM-#bg0MSZ%BTqKyKL<1@o<Qd|NC&xv&%vi+QoX_YEXAe
z>V+?-3NWmPHHFf8jVs}CB@`>}^ZKTcKYV+lgVd6(rxz@){#lZv^K?e%(1(+ZP0`sk
zUG^%p^*9!)Wi%R;NWQ}LfYNuWykwSYg6P4~5^T%Z7J|JxhluhTrs|Qqd?8O}<rJgB
z_dPD(^k0>8eU_H2iTGeV`NqfFAA~IjL1ON&3e}Zwz<U9W%er!N@RqI)J2??>+D=yF
z6fyA8`?bz#<3Mm7WRjT|vr02-l&me-^|H@*Kj(OPsJ>=aigmYDtNlc1CiEdR+G{!Y
zN6&l5NroTW!TaKZP&@Gmh>s>AuREQ5l#o9`L2scwwQ(Mgafm4;Zv>n*=y!_}Mo}j?
z4LgeC93w)sajCn9O#980y>+aZFygL;Tx0g1sxW8?x(MdQA&}Z1FI8$I(||9Fn^y&A
zGyrl6oY+C#JeBL(`n?4<lj1UAGY|oKa)f2<YJ&7)$ck4Ys~dg3kH~6r>hA=0XKvM@
zcJ*El5YOS(y5EpyRVi%(2uR(b=ct4+Z4y<RD#W3gToXKX^UxA=-Sn7lR*DTa8C05!
z{PF|3T;aP;`n_{YvleKtxV>fWHPhym0pw7>3XTiFXPu3x6_1`%g#i_o1g>`@vO29@
zk?rtBfD&ql`5hn%*e%B1$w8}u?>))c`X-%eR-glx?A0pz4nD<}xc6+E*3W)KDmFaY
z>7@Ux*COJt$)=Z_6#u+)*{=-<+jziDQc(-YF4$Y(qj^DDS!g|~hH?Nn-r88DVm5#^
ztX2Z_^%U%YgMn3IWD}-Y-(~m?$E6teN{rR?CPYQ&(o<NBvjZ;N`j~OH;M&vsD}p#Q
zYn=*c4A=lRiuF?z8!#X;sIPU=Y}ZbdP_@(Pn*o6Dq616@SlzkXrhV7e3u1#4!Y2D2
zoU4&xZ<zY9(yyCVO=ukNi}2TKHIFxU>(9B!9kwC#Y_ZJ}A47qx-FP90$U?JP7Tz~X
zk0M`XCn;+cWlkmpksY#SH6;zqd{LX^0Rt3E(D+JHm16+S)@_1e)N>vRPM(j9H)|(~
z^E6M$TBCuBqy4GUns@J!aBqKY?64V3N^Zv7QP{QVOYh$AEFr{lAMSi>6tXya=1aRt
zq`{?+em+G$hF%{xjsNz&+Rk&TZ1ff+#XHG@9Utd2WHIqOcBg)3WqjPmA1bD5jlB-P
zPT%Kde0)#E&zUn?dPyp@V6X-N1b>`(Vg8a#o3dL`O0}d8f#MlQok=0p@?cTg_(H<i
zyC@?Aa3i-Z!)VW01|FdkZ9<o&Nv34>c7KhHVdzS~x#poEs~ary@2!$EOq;52#YD?>
zuu9E0P|lo<Oc$tl>k((!S@}66KNzC5Q8lrt0Q2`wc<oC7*-xT-*WoBM_QN2^*NHRq
zMf>D{n%LRyWI)8a4ezcWV55P;%szwrGU!Q&tv))f*(n3O#8^O+Mx(e#lpSL#P7d-w
zMGe&&!GK!6k&^*(al(Uno4e7y$d`PWPemblh0~xB%<19Ho09x*h}aA8W$Lye>%1)8
z51pjo()Z*9iR?tb*0ZuHsmOF##c6erh-fW5>S}@@mfBUYQ&Fzm4mxSHsozf9>$X`O
zZZSFn(K~|rKSypMPDE@*Xx@-*skr-4hfo-&i9M4$)@C2@>_*>Al$|t3V4t7SaeF0<
zvqqi|dXmvoXb7j&)I)H9-qgH>;t$$1Fg|iDZPRppfWuSdxLwK(>W*oySyRe<L*2vi
zBp8!&4c1&pS!}FI8JJ@;u4@8U){P^EQJ?rqg9qn{svatGJ8+?2Xf0bKFo>yIigG>3
z!$kuK7H@}q9gOiAQtl+^2e*eD=*e<$lqgJJFSiMFS57e=3;jZb^xKjC2J>~x`jJBg
zk3eAQGjM;>fWGDbA?;10nmXIJZzw7%LR1tKgjiA0B19`g%aEv45h=zI5QNlHgb*RM
z5{VMB6=W9TP~k2V0wN#+Mu8AzNEiaNQe+5&1R+x$7$SQsge@8RUfk>czt6qi^}K66
zYdv3J=?4OPU&A>Z=kE~Ha|0T8=xdatXj}Wx&z=;r9Q@~KP{*y7C~DQ@&-<4gzgE6(
zcW2DgPKzBYQ_~+6>J{pz>rFGwP)rB57TZBgVlSV~j~>*7f#Vx{oo_~`1|Z2LkF2(I
z1tF5O+Mbo~b1dE#MTJ*_)X~16xT3|m$UZBtJa}}ZN(itBuP3uVU4xh*Aoxo>C<t#b
zHvI1C5EP9Q*U$J@_dAaIf{9WDwP{;0epwO~zRG3TVtXR36!>#(zwOlTvpw&@*{S-$
zj=b}|Bfb@pUmuvidkxynhJyhmw4J9}D^R4gHtlT%E8VH*rodR|Mt2DSiN+jmlh})b
z*tLlz*P|VS&D-l;(%y-Rf(_61m+D4(fy`;DK2{Yr!fP5}d|QrQ9o4O=AgrZ7F+idi
zRE6W|?+_@hZ_R;64uVII9zAS*^sruUhk>5{wQn{w7p}7G>gqo5HmFNokvIDM5Ap|&
zZT8!@=TDz9-t}p3*O$v56*lZy`Kb8X7uWm>F?HZn`5k%+)-y0!R1Kj<YMTI*FKV_!
zE(t9bB6YZi+FWfd(THx@g0}^8D3+Pd9UESg=n2#ns9Rty+?_89A`gdr`AoEV5Lc^o
z`oK{(6S!<Nu}rlWNO&J<%LuTM3?xZ=e%04}eoun;H)NjF84-c9pvB=a{@XT8TaU>^
zCIa$3`R}fFe=6MAi5OWEuH$mxw$fBpR}n|3&ak2!g$KK5MNsR`(92ZDne}zW#+BA4
z0zF+KL2kl+)uYR*Q2h=jRB%ZoO~)}q#1kCsUubVN9tStbN3ia{VZN~7Wdc#|hDph?
zMxXl*nF@~a<D!yGYO8K945ct_=;o)N)jm%bzxxi^T401EUvocQEbb{MFW9D=2lUs*
zL&DtC`PqVUJx0m@CLo+*Yu4E6R`@@FTKu30fOFP3A#9=2N0!n?N`g!tyT>VfJ=@Iu
zc;nv=Js6-ZXM8KG!nP_-*EIC*I!>$jgX?kW#Nhn~yON2S(g1S**kncd`)2IGc~BZz
zc8U4NF99U466O%8HmUTXDt2e-*rbI^oAII6A#Ksc@Qd+fqjajzGk#67w9~#jpI=ty
zOIz8vhIFQ(sujdK1S}InPgK!SB~l?Z%%E9W1|a^;k_^%s9fqFg2T${AQ0Nq5*hbhe
zg<m;DvsxK-r1SfM^L-qe)!Mi3zRx)(icyd3D!KllGRpSrphCkty@vk`fFk(fI4@xk
zScH$DoiL|^1bbsf!uP{HtVUb~1zP1O*oYd+O>Uc1M46SyFdNzw5>xbct#R~=H-*n@
zn(nsgY<g)GQOLidXS)MCJ`SBJ%(uSg{z+#N34UA+klP%_iEWy5C9K9hp$c5a_-6D=
z8I)YG(Y2&;q30&8$C$xDgAr4q+0}!Y6-39hV*1`z{N`br-AJ~j(cxY9dASo*uCepb
zw84}B-7?=vOcbmWNOPd4jygT`whU(qwHg2~H#^i<5f^6_BKGiXC9TD8qGR{L?`}3)
z$?d;Js<>7*f&EUF=e`=11UA<fWX2VvcMsn^27h>79LbYn*#uxl(E)A%aCRgF(aU66
z9K^KMPq2n*ukl604BMznGS9z!C)DjG8la;6h}TWdY^FuO_soO7M*Ctfs!OWVL{ZAY
z{>O7v4B3STPXbiQT-HO-R9oycsE_Kp1XfIAO@ua|X#{G<{s6R8@GWef0e;KCnf-`E
zA}8SNt1&I>d%$3sE<2R%R^@W0cP`J$>i}YwSUx&3#oUA}%PW6xp-g61PVk2Oq}VPZ
z&^I6zGLPZu2KCnr;~K#71erw!Pk{Xr<zU;iZl@BDBUXa8OiS52;o?wH=gFFC7Xz<8
z2X|l2tM|E1FDq3f_?9GS>UM-tIn=sG?pdM-vD@|H!ly;@e1m35EwveAN#`8*wQ1Fv
zpd)ZaJAUingXFhwJ#hQL<(^e*6%;V=6R$e??Z=pEU{D?%Xz6q1Ls-DgpFMX~rZ!`h
zRx(x^WCA2a91Ojy1<XsurZcw5$1vWAOH$)v!F=s|F+Wj`GocKbEdXTa`&@43-zwLF
z+Z7Wz0GE~b@Jx?Wl`>!G;{5T?RS&22HSthO8^raR{v?}0zXHO)1EQ0FUAq60+FsZ1
z>feDCueCGE%MaD9_iF1|4IcNu7~aK{0=szYp#?We-i!&u8A(Y!*``unk_Xh<85#em
z@X9!fV3Qxye#T4_zefZKb5)ByJ*qiM^6Ph^*aa^(^|~Q%fr#eetXuw}l4guw82S)I
z>9Xr0|M-mCz+3F<-T9xco-+XCu(`PD85t4%#!a^(whDA146n~NnW`AoaCcdUHd5h#
z6Vxb-9NbCrOem-~6sfCNeW&e!`e-62qFy^Xe)gdC?ZU`x*SAkp7QTP^XX!7Nt6PCo
zVgd7BfI2+^Xg~ndi39))!wzgR)(o`R@Mcd?iXzIeL!{ZF&DLQ7toY`*b-jzKz#Ppy
zhxjPMGikWx!INvsUO8~%?b`U?!c8x$%<?Z?vA!4o(6?xE?I@)_gj4!T5BhpQU)==G
zDzWA`dIe_dR*t}i0q9-17I<5ErN!XVNSGL3f1x?$Tp0;q`SGg;YB7drOvsC+wH7I9
zPNNmR=7)XCf5`fDy0Ka$|8;CU=->{+h2Nq7_YZLV&mVA90@@z!#1sfLY@{5hj>zJ#
zrwa}Oz2Rd}$W96|uSL94qM2j&B^1a+_XXJ9GzD-t{d{UaWRj^MtV9#Pi#pI<CgPNc
z9yEv?W@0{9J$|F7`Q^W*6}r!mv<G{Wy>gnlL<eHjrA`<uN;<kIA~m8MMoTc)X!e1l
zL}c51+n)?8nP5eiT>Dk)oHUB`ov6{9YMt>oc;dX0L4e9prq$2ncftZ|*IR~jTtuV*
zqM_>&L*`aSAX)=9vu+tmlM+`f`m8gKS5chH!^#5MFZ8x=`Z>s{T~`L2nQBJKSFKYX
zh(o5Bn};|tT2oKaoH6NGb@ek)DqZ&<m;zzIXR%*62H$N5rzYnb)+7cCkl}np(h>zJ
zh{^b!^zSE+2U7T}hTMaYck&z|wCdoaiFrZz?;}&d2;_WPB{`6L|Mi4RX^_^{=-pt9
z?=PK1y?H=&pYI?gg@CG0f-iGOWo?gMmqmfjuiPu~0@DIDBGwO9fr;Suara?bo|Vt{
zaNYIL=ucyjuC)t(X;qUS_fw5BJS-0la^r^UL@}eI5A}9{YoAZr2<Uqf-3mK^s3=&E
zfcG|+Pn2<zX_6E?UKBMK6fuWcjw+5Icuu8+9v)o%oF09_>6=;V>WIL<j{B@F8NXdQ
zkz4ZM?kkD7XNMsR{LF5F1=AEI0hpP3Kf_~~xtacBXD4<eSQ81%4d^);N%>7QSFn*1
zVusGaJh@An{cMF1q1IOwk7+4bJ4~xOdGdKsyhC@Ca@YCBV4`3DE>1I{>k&}1{G%7j
z0d~$E&<*gw2|o~C&9qzVp-D30x`;i@m+a*l+{K6F`lccu(i+sZ#R8Y82`&opbieg_
zWD>A8@o5zixmB41yI%)NUJ=*b&Mf+u0c@Z%(V-16h`G)QMrNe5_;2B{9-$UeRf5h(
zzFmu1?yu&#b3NBIR`6Z$`rN(bIb7~uqhOn(h+!7P?m<RICr=&qw*1Y+6isDySbPmS
z3baZ+ovcKXCEpON`6{>=NZ}hV!SfyC%X?{5V>*B#O~0uY)R`R@2k&=0>26*hT~!k4
zJe-SfDvGSD3zVdAyNtaK3_EHG0V2+YLOmT3Y%sXzreq}!3TKayq?su~?8-@k*&DRy
z3UXYB1%LD7VmSqu;um6wux<!sdj@0Fw$I`%4+s#4!ustgS1K&GAy&G4`Gy$a+8~40
zLZG*$U#mYOsb<}DcY!~t9%yqlkiy>Ak+__WRm`{aY@k=1$u??uSj#d-!{xRqPF0sq
z-Wh5gpImse%dyL@qAcOX(Ay7Tshv?&$G>hrGgK26t5Iz|8_>A@NbC*wIH_Pgo!B1e
zoU_Q8WVbPQ_RjTS=s*zs=B7nK1}6geK*wJyow9J|l)fH~v<N9Ld;K~<@@i3o=KjRj
z5*XcegTBLZCLrXGr+}Rg7Iy+}bP{XUh<&T;0^H#n{GH5RN*HtDk!Bn0{2URe=t#)D
z3VMg{S9X8YPE`nu=s-`f-D3F_h9@Q^YPS0q#gP;rK*n<59>YxEZ|h)Ufb^E@i)$~i
z7^v+&(k}*vhyxd##=iR4q3ig#?pbY9bpx;d&iG{i<oMxtb<Y#Lzbx3eHel@by?+^K
zCIr$C#B_-Xelt@-054j~+V~#-)i6jIUy4b|_$?D+tB;Xu>7K&C;mk&VxfXcNpTFh=
z<~T3OGA|t(>P~+-zd9f?d+*uK)%7=a8-C2&hkZ(d_YpF%CU_uVY6$`5x>S;xd+2@C
zuvrBzkaprK61_s`zr72bJM2_}K69t$TR6tz-seM!zIB6|aJc~UzN%c}#Lp?ME98l}
z%B<g(4k`ifqvL;_-T%3KG+{xy0d`HN=3o&GxP+dyUJerd%cLX&6_q6<h`}-NgG=W@
zG%iZE7jCA+9r_K#+1^MDRr;pJB_xR647Kj4aY@}6Go+{MhGbje8Li<gNn`N}LKeU#
zwFQUOqWQOE6L8X%)DeWl8wFqYF(4@@s>n#myWG#nx{@1v=j_8}!_CwrwuyVF35W%M
z7*IO0H=;zLh2zz#L_j($Q(YNwj8l3Zd0xYRrl*N5#7xfUjLp#sSkX-2rF5`Y(1$y&
zVv-sUBL1qYP4IkM)!rb!FP^l4A~w9Kag!@a2m8XFjYM5~G=hc#PMPS3^FigcW4Pnb
zfluM|V~fq0S>gbLB30TD`GZ`l85-`>U)$xD?{#8;YZZ5-S~RP~zu4$N#c?<e(Q;mG
zO)W1yC?hW~Ei`#~=$$h^eRn7f{J9oAqv}q8Aud<P>PE4qI_s&rf*nA?z!FPTw~(3Z
z8s8syD?;VC<@7cM_GY7}tm^Wg4l-W7k1y%qzy+>R*mGWj?A){cj(ZMUtuy#LT~8+^
zNMB+zNX85gn)+wPj$xqPQ(DS#89gmTO8{~UEG=4}Rl!01Tb?ow_q(62B=33s`8a8R
z;iR<#{MzEzpTD1XZVRaSO}g6c$TjRJPKdiHSjk*Rw`>=z1&+j?pzy6RloBzM1v|lv
z!CZcHhw)y|-WZBEm1cEdqW{b`TJrezJuTFA!~Q2XD62LXyp6d31Lp6$I%6Ynv1Q`*
zbwiS+?*O5Zf=h2xU3-Q;$6VuDoiKJ0=17d4prybsK3li9zgD|%)Vt#S<pP`j(mrlO
z)vj@<^;;;u&{MutWGU2b(hchA9ummdEXgw6O2!hj0r8RZ7W)F0AgoMmTq^hQ5{7Ia
zcIw)3p|U8CnBCeT-f;g8rQ64U$jPU{%DipCEGH_i3e5nbhB3nf;4%(9{uErsy7Q2<
zmzp71<u$z%nUZQim_8;D&X_O<bhc<(CAxj)M1m-!7AD-}n=!0`i;Cu`y+b3rcEUCL
zxs<hz{Nvlc4@;}w{@O<}3Z;dr3Nhord9ADiO2V#!q-;VRDa}0|F={Q?&<FZ^=Vxx>
z*VOO_XmR^^{2j>fwK<6)ov`m|!iw$Bn+6#N<?+-beKB2j0bvF5kE(6UP2(OK{>{=@
zJVn^DL!g7Ogx`<fFafP@+<6Hxm3g&8X;}CvW1YCYgqOzH2Cf+2ax|r-KDpvSaHDxz
zF<N{iUFB;Ol)N)0^XSy!;n^;q5gKt(mO?k20NNa)g4fcMM1sG^j$WOSgEhDUJ?DN!
z?ZWsG^_D)Q(gL>g5t5LdCNKeN7vd7STiZg|?dM<wDLilpr})eHa*bCh*}0yVI+q4!
z2Ta~yeOd8?zRt52q(BScj%@itw^y?R0o;RF)xjEg@fw=qNle^V*tQX^Uj;_0G9J=B
zJNecF(HtjeC7RGGlQoE(;-cIF`nYuEhazI#`}&uxssL`sy+^NtU+d9rHJc<zo6J0k
zAid4TGA*Zo!fY|elw^VvuLW8Kh&HJMKQ<0Gk}K(+iq2L^DgaUVh^Cn$*8miBAJ+|W
z<AVa4f}*V3MZW#-_`amz-b$y<7|?r?-ojepF`850+6ZN~nFCFV&W7$U?4{eP&Z6sK
zcKby5qy5H`WTp+n9u1NameM}~{VV%w6yV^J_9JGuuS6rkK?kjieo$F_xM#0QtRTDI
zdvExLrLnq#WXPiLf|u9#1U&~SB&!Z0MsjM0L_Y+@wDe8Z&4Xc6JX`AhZlE!|98h7(
z3oiFJ?xj2eS;MGnWvdmwV=Az3m+f=&g_k)|G5R{nsl^oYCqO=)heH+YR+b(k81+W>
zwpzQQ7ZqS$kzBADW~awQg}fS>yc+e_m&@;rPgHRMO7Tg3y25v;)+409GpN@o&rNH3
zRy3<65u2)kulYfO6v5mi8G(Ke^H0)JP;$Z2Lyx1C>~&ngxHPvm5OIUzJ%xT)jMt4h
z!O9@C;ndTbz4^8W2O19zTR5lD$~_8)Ikin!t=5C`zszblt3Y3~=9pnW;VCZ*^wGOi
zP1<|Rt>`;H);^fnHY4_uQnTF8J?^5$T>$_cpxr$R^PA+xfkD2`;!nrxSx5UXILug&
zxAsq}XgAs^QSQ^XcN?l*=#bnNRO-zlTy4`E?GzkCAg{OH*6%1;O}`{$VnN_m`5wQy
zmzMVp&B`XI&neS&;T>@>CexqzjK>$z>@3r!XDZ(%za1j~aL)=D9uQG?TLreYXA`pz
zTTN=iECYj?_?^g1D=CF!io<V5Df<SbgPg{d_%A1!`U4vCaCvO?-axWzhoJa<POkEC
zBJJng*CE(veKd6wUUCSrP2te?VHA%S1=R*Bg3ee2{1fJ-63zNgDktP!JI*|UzZCw-
zdNW!ji{qHm)87ZYAG-QZNW8{g&$L3F`xid9By@OCI+$O<x)dv=!t)&2xnzAu5sebM
zzWpyf>=XuEu(m1Cd%}INaQnf-V1YT8+cK<}t%@PQm&3C(z98daHCM>;sj{uunu2@s
zGfw|1hL!W3mc$f32CfvWk`Di5RDv}nWH`oqwwl$IPJ717--p6gzlzX=Ns;gG25L|-
zzHzrrFpKSjV9GhbYI$#<$s<Vl&<5rP4IONhXS!GHwV+TSItaY8K!<Hu2kyl05h(fH
zotb@uTqp(m1>Q{Kf+S2>Bp%#kQO7Ptds;&__eXJ?oF3QuM%yhNthMqy*+<>wWLb#m
ze4(cUi%#0xlP)pV7^x|mc-ZS^V|XF3pn}#jmw1*kzUkvu{4M(69`*>tie@@H#Oz*?
z_r+@QCxGnV6ZVjv5ao1UO?fXqU-7VINnLJ8k^Mu%1&c^<r2D0mM!Jsk6d0q31!q=h
z?4w9Azg%u?LlikS?IrT=eE3K2_yG082N}2eX*D-JD6gU6w;y?Rymar<+csW{gDV!2
z(HXg6B7YY^>eO)nu_pJ8AWetW_-L!3h?!LDWr+RnE|*ncbSU;Fe-FJ&7_xEL{s#fC
zmY*!~>!aD(p<g!DavQSjl6>;$=P?%7829#J{~27Aq^h@phv^7TusT5vQTax_nr;g0
zzaB818JGHT%-s|w=p)`RZviKW6HyO6G2CXo355`YcEKtx2K8~mSOfpu+s=ZjsgTVu
zv*ghkkoa^K1(2`0*X{Pzmd9QEc}UM1?BS*Rz(olp6F)&Co~kXVMD4@uAp!T1h(AHT
z;RPsp?D6;Pja)%8a}Uf;)7X^~ZdbiGdqTI7k=mj{ze7MWNvUn@=Z?^PNk=oLU0kEa
z6LG5C$a+w=T?DB@F#`A~3w26SeWxuZfU@w2T9u?NV!G@4l!&2%*Tynpob|Pn4)Nfw
z7QPAGnaqeUB9CtYSjXJq4#`Tq&D2$XLn)c}hf{Y<<U%x?7H=2$D&p4uA8~V=G1&rX
z9TtwxnH~YpVNRPB4J1;6kv0Xf)9M$}5_(VTI2P$iWV%FJe}SC6s=KGCq5^U$D-LJ{
zn%NkgrArFe*ywcqr#ZLaAKQeN#c$cMx{OOjXD5Q33NZ@Zzw^Zdi+x2nf;zpwl3{_8
zs~G3CMNniDRi4F@YAw$qrA2V3khEO0QM!F_F7MQUSkz{1h4{Cyv1oG7QIY)zsp#O#
z3VG9^cc*h-28T{BxW`W1Cl_KfAUH&Ve(BPJLAQ0bauNyPsfTki1nU{0(jIHge!>b3
zQTmVGO%du9f_UVleQ5kv4s9S8Yy)N@QkEfVctqE7_XynnAqN6cn?=qs?f|~)VbD}g
z-EjXa@(<W9V2lp#1TM3iy^KSM=n>mVvD5Qql*{8519&$8v^xVwb_!$bswHPo<|jFn
z6@yz6I2C*OnD?srZ1JfDIjM)T>Z#Agb(mGZ*gRQW?fdcxx>XBcS^nI4F3h?DQK&{6
z2Nbn+zDGV0k@@EQuUkK8zdYCoJg1`x;qieAVr_xc+n#%K;c<!61BY8a4?`NGewJci
z;56p`x)ovY3>f-Re@{1(@mg`I1&+vk8!la7yctv_ZlEk}N~}U)+<orR7(M)K|D5tt
zn=3Y{k-+hyRgi~)X6;HDO4=Xi;i|Iw>Z4foju=lmrl&bnh^dF9xumDnP|H3j8hZ_@
zcIwQ;%093WN)X~bq#>F7?i4g;+g9)e3dtpD{B0Je6aU;~O1YYKUE1w)q*tuuw=H`b
zA9|5_=gdL(3;Nm@pbv`$Y#iKz{Xcp<7u_boHAuT^R)5itum$9kKTt7Hi!&6BNyXN<
zBr*Uga6jykl_BG70-hp>Q&pxQUCFRhxKT2cb_bAC3#Ylsw;zGB)nV(-W5bS_cHfD(
zWtmQPQAXdH+n0y|X9%?VmM*@ye{UX73A_(NZJ<^x`qg}zAfm}f!4b}+SuaK7VAJo>
zOJpqz&V^Qyfvyvq#<cZToN>(KpobafWK_$DTxQDsGju~gi_9F2jf=~|y_aQW@wp4F
zc0O!(g9SGPz^#>P{nsE{x&;hp3I!LeEIUs|<o*iU{ERRKCPB9iE?~=@Yk!TH582x5
zNW7+7H{_JL)^g^{IeUT+;*bJeirAJle3JXG2aohoaJei2YKeq3jP>B_zvz%E6-@&z
zZ4z26BN{R`p$Ygk??V6u19xK<vv$gQSNe;#vwQ?!C8utp`*e!WhFB%~JP$G=VMfqk
zn%$_H!|UR_3YvgM#Lo<sJ?%Z{-g%WZDLLeuyV7ALM(r0tSXZTSdpJhNo<j5Fq#Gf-
z;Z+ve2ixEF6V{`#t&*jH!(^x2GV>zNEv4W6Wa;=TZ4qsQ=$LwA|4cJsBP30b!27A!
z2=FP~HG&y9@mOLTxugTLf)2HkHsEwds8=gt>5Rr)Hg;}~g`wk``QHpPyyPBno#6Q=
zg~gTzk1#y@X1i?<iyY%!CoQYoPBb<Syh#qCoCXB_MN*K6`ic$Yel3VZp3*{OL0o&b
zuqT<c${o;Z+aS2M(Fe|JA79!;H2{xz$G~j<C15h#!q%Jmm>GV!pEKKFIf^kI$+tVv
zP&@F!o)$#$j%j#;>EWPTFdEBFwKG_P2f@)D@2R@4E#`mCp!S*oNs!Rm1a`TBUlAE%
z06*-jWSH*_n5s`npQBnaJkYz^CR&x`thnwj<-r;BvXxnX>*dC0LvIH|eK#0P3(y@{
zjYWlev*rtJCKSP8Nor;~+2TWlRJJ}4nS4?lAqzG-%_QS@!ytwE7H(+G?aX8xmt|MO
z#8yJe)wg+7Q?AaLw5URgXJEsVrvu&fkroFBD?gqM)MLB@D}(}Wn<(f!VYEvHt}FFf
zU7y54=T5d@cNkMUQ(Bm7&}|hA0$jpM219k2RQxV9jLzTDgbcTlQs*sHyh_Tr$pDu^
zb}TA-MXo>Co>}{J()`X@pGf@)@FIb{(pKfIy#*?9l1xJFyXiSl(YXoAIxW6H>6e?8
zg5(9GWI4dBpn0vgNe4@&EUbRDUXGrG75;sVo?FHF$wj48mnQ2U=WPm%f15`uI<oM<
zqV$%&=Fq?Q<A1j0|KB%5Wr}9CK)2!|Jg-|>q&`L;l~IA)BlBw@(I+NjSK&ZkvRJo%
zShbCp)p#g;C`Mugfa%w((42z^{(505E&lxQseu_9cGXm=!uRPjk$qHDH0S<6<uyX3
z&kVYEO1DC=?cU#4sh!a1FQVgdK{uY%^Fg7dIsecL@!b83l#5r&TGXx+mn4C0-+DXj
zk`2^OME~fY>^9{^d$terNu@2p8wWFALbc(YGb10=K|BBmYi4Ca>+!}R^gI3iK1QU~
z!HnI=P?IzxGg{n1KA-zS;+N+chemD7J!7xPKX=DJ#-Z7I=RRy7RkPX#&~D&Z-Ae8w
zW*-P#5riNoUDxQt&XVRpUw#^#rD$Cs+;jpXbD9GnSSgqx3V_me4_ubz802B-CDK@x
zw_ho<O)ed9vg|(60r-x1OUu-meT4h0O^dS7C%!$2jlQ7mCdR0m`k0%2?nmyFj`??5
zJD^T-$S{C@bJSaV_oAGNc~AI)VN(?;-V$<!BzC^)pB5AJ+5RT`JU{&yn2Em}Th|?S
zCHDMZR#gt+b>YVjH0-zgF2LZARmW~&zM1O3W(OwHPlCm10S>O^x*j%sa%SY6yiB<s
z9A81`pE6&|Hj?=qHj%#?&S{DFY{73D=qQm13{hN%>r5)cy9!k_L#vh4N@`VO+yk=s
zP);du^;6YM)ZZI>TST+!uBz3;mSO8a&VF6JUW3*CDu}>jNS5H;bpw8qwam4euMkeV
z@iJUGe;Z1aOAIEDGw{9C#-NJ#^?a5Lml&cy+}KU=>c`b~yBw=Qw$%g2x<P>04=)cK
z?JgVBV}QG9$q}%%E)&l8pgW*xCLxjq%s>g9#w#?z3YIB7w0YbF-S!a0w5Ao2`Gy0J
zXFVd-?YV+1&?oZ7Zw9)gty#ei!(LBeB|k0nr?(&8oqaZV+VL0$SY{PT;7G}In%aZe
zL8`S?E>(MIu4s!za`R?ZGX85+7$dk@|E>+U0d*0MZ$vN3nohPex5Izb!d|V^l)&+O
zk0-@`zd2qtd9Ho>kgUp0I7odMAsP+w_)wrPCBTQkrX5uUYa0dUSSb*<Q)!NrDc;_$
zWRQk5%<(ngJPZz%y-RYGtU@m}V^?d=z#Vejnlbu28Cw`v6&p0j?O8T?wQ=tR>wZ80
z+27BZO1(mNa9C{sq!0;@!3kN-t`483s*N>2Y99*1*_ndc(=#{uMxzn@orATQo8oui
z<$}?A{`&f%%0{<xvPBGYIqDBfPWLhPIm|V=op?IrK(h}zY9@~VkdMFFKk2-XovW|$
z{qKu<G0-a4tU`n0kuF7eizFd8q=H-&32ngd)Zo#eGD;5YOA9R~G4>(Rw`Fd=ek$=;
zwp=bc`fN}E5ckW@lqQ>JIh(vVWuRT=NJRI7Zpz5A%m*!U0t=wC3MxR+y=ysl?BsVy
zS+fN5UYuQHRq0(W0ZtS1%{V}&$_;xn*>mySgK;`bXdXzbynW_1<!WVb(_FLR$9WLs
zzXi_%U?9QQ<C;*^saRuy<||mK1S8$IpuAi^o>Zps^<6gA$zMCDSwWMH?G;|m<)t>-
z-KT>AC>s$i4oo9O25xI-C%F@7rLEC18B_5Gr|%DOH)C4T|BW?i1Ou%Ac-)k-s5_a^
zvKOzVpbi(Nejk1pg=q&o4>?Dx!C={G5jfbfDFrw*AJ|}1;%=!Dg9c-WOC|3Y?7OG^
z&CFaM7m?%QDY0a#Q*9ykHNfJj!Q$@!NAJEweF>6vp@#qH_4e$;3W3CBeTK>cxRK-&
zc(``K2&Hx0X^;^w!>;I*vDTmjq4nmv+ByWQ*)skOtYxJ;`q~LuW&6WRNt6Yr>|%g!
zm=uTP12Q3Zuwl|U7k}6I1$jt{{oV0D6O4=Bu>TA#CSzKANctKxTBh;<ANMO;pT7#_
zs8|4ZK}eG<brReR#0Wu*a|jS+;ZJ`3RChAcBZq{7Rj<ht3ZHHhKxzpryTJ%94%uEK
z`;!*@mC;*4Uo_{-A;+pit-S{CF{u5Fa!kFkOtbcriU$|utBDK@LQL1$GF+Nas+44e
zn#&1Ej5s+MU~3cpB3wA17j>WRa&l;HN7P?tE;;`7+_6fFL%&g?>^q9$DI5HL#(aG7
zZ#@UNj#j84X1fJI+@DnK>9bUofa0iRHN#oUW}0bik)Gtni-=9@xE_K_alZmjwYZum
zH=Zsg(V>p|?4-&oe)ajkX96;3xC5(d;-h%7-bq(f7QFu#DRwE?T-}7a;c1p!fNm#d
z064j=Dg*UI48f=<HWk#ISc&dfc&gLYP-yJ8FxrCO+vk2<9)Cc~u!^tRUr5dkxlL{2
z+FuQJe);yJyvMgD_ua9^gpq56muvr>dHu*5>C~;XRj*(iLXF_WjsgqqV?p?@eOy7x
z_=dO$#z7>sCB$S{xxKnyIXkL01`EJ`$dLpL%Szb~&y2kSmN_r)g~d}YQMdlmy1Qy0
z_OBj|RlfR1W|zPWI*%D?lR~YmEP*j|C*ymTVgS3I<A_Pt?d;dkmfe#EV`Vc!!t&Qs
z7DLZv<T+mhuk1zDP*iq)Nn~Jt-P1=~Bq3zg-Vt(rl28xZqWpKVH7Ixj30ccDmfB~6
zP+|sPdqJodIAXujRsehEG;6nEerNncz%HY^G)v4Iv2w_C5~Rcn!Q8hc@!Gum<k(?$
zs7UF+dECg}(l3rnIs7jJ?d1!EXwIv=lTWJ$Dg_{b8c7baKhQ5;==VbrxPDpo(1&#e
z<A;(J?Q42g&>#5i@!fRk(9u8Foc$Vr@^*s$SFo-h`hpOF9o;KEp96cz*@^tGTv~gs
z`vM})WXO^s`$iv`(grv^X3z-hCUVb)Z0pZ`w{H+<d0=1{CtBX`WH&SY>5>)qb6tZZ
z8kq8J(_`|$t6#x)2a}t*1Zjn!n$SVWvi@2GDj#3NIxgb1e^_&_!ZXg{?)?zWLDU@a
zlyQ>E1|K}FtH0Cc^9+g2n6<O_I`cfs1Ls-&oPB19<EXXnSXg*%pgk;*@t{!5f}3C@
z5!72}T3NbCP+}S&NdLyN1cp!q8~w^l*ki6)gXpd!xYiI07}Lf{0SH@nyI*KnlRxDW
z!-@GJzKv)$Khnwdas#z=?6rNxq}aY&ciW?txV~yuxuijlU>NaV_63CM8PqXURjSSB
zFP)Oqy=#+XVmD|E;9{X<Z6)7;p4W^pJQ1^esn%BLN@^1!S3BDUp@^BlDJ5kH(691<
zFgdJ0d_X=hQ#Et`xoG-B)U5VE5NHtslsK3wV804#W&(mhCc{fj(slPmSg-4&;Z{@D
zlGz*iSTylOu*(r{_Q&ao1?%ga$iVTZSI;FSJ^t+hdA>e#y2CBb?aaH|Hh{hxq%%GP
zq|RY%aF7}cE^v|rrg%3{=Lu6lYc!0za$s4&Nds8R#-+;|q*k8$`ZONaHDJ(m7yED@
zcZG6}Lam9k@Tk&=hYE7cVqJ0>&b(VkrPu*%2Lat70bE<2jKtD?N#}v8Y=Kvb`%YPW
z(5XT5Ho<z0xx#}<KQSWD8a@cKZ#czMg}N<+REKTJLv4q9Ycsu0@awa8*hhukM)qO5
zaT<$@>T_V5tprP*&4QNjcWUS;32u{zl_|aD)b!9c_8JYTm~O5dUkbe7sfpHW`)Exz
zrx4$vd&N`u^8zW(G=LO9j-3Z1zbc=g%%d;+hfj%Y8}zhOTD}03l3!)CVV}Av{o~`*
z{u;f3ykn>#LTp_)pCcos^No<4R2peDy|blWkmUYt2|2_PF5py7iSG@Sa44>{J5|~F
zuA`O8*qGikEf;^jhP_3CDf7x=wJiz^)Sd|p8CTSvjIBTm3#d^Y*wjT609)WhY+-oK
z$tZqr$3ns+f8#*yTO?kU8N~^Rbk2^w{&;rh+=dH}tIpR5;(SV0KQo+&)vS-xtu$1x
zr9-+EP3j91RP{;Cs^K|7s-y<niM;`kiZj=BTj@cax^0L#OSe<A8zChy%<sRV$F>A!
zH&y;?W={L#OE+y`(2m)7Bcgd=$8)HR?C0-)TaN)scFSbU*X-(LV4Ex{M3=&G022g(
zdZ51MdvtFVBdnMCC7mF*&C(EHwLegfp93REkdSTS8-}?#6Z75hY!k5+@6d-U9&#sa
zFE44ovJIHa$C_|TBc1&Ut@}XKAkx-Dp=ktZHpGPzYguBdl$F5<MhGpJ*%)^t8TAW>
z7tCR~dvfR;|Djs#f&LCF%NB6~?_p42RWj@0*m&gdkV<^;hFRq>Po<Wh*+=NQx>*1I
zubub5{TJb(1a-1g-A31|@w!ox#V)=J<2ans%0)}yl~b+!<%8~*DuU2UZDL+(40R(t
zwmnCDYJBTJH$U;g81%#Yh0HgPrYtfOB;1O?Gmi7D^$ph`C|1BDP7}+{j7^%eLEUq@
zZGA~*?R?G&9AKT+I9^uuxr?5qW7c^)me?FRw`tFxcDL&s!@sK3*L^480fmhr<45gt
z!UahN+k{I4lZrFx5I0t7ieQ`T7sMg29G**OHZekwl(fb@6;)Y4S^RLsp#*TnT<(jG
z)pDD7rk`E>dXL`ut`NJU*HD!P-d-jXP&~_;RY1>bsR;utD$pMxrfVQv3(K7DIx4qK
zbCfKb$knAuAL4Du%<XqNh4?SQxa3TH=@{Cu&(J&G*U9H!xRA;ImvI!gKckun)g((m
zG!~pAr0`cGIMDY4ht119^tjeQha%1t?g8UR7?b97ybQpMg3o5UwCSvdX})nmf(V5j
zx#ax<?L$etn^#mg#qr~o-G-<rQq)d+6zRXa4vls)`cuaE`a?P;ZEI%T6TjdW&9Zv|
zF`GA~>-B(%`zf6<LHh&>lO#!=%y)nwQ?d^40Xkx#h#gV;(ET{#Kr{xELD^|i{|4AU
zL$`sk1s+PNBD<!fKc3CUo$=-h4Cr@Wd=MRJYUGP7Uap|o1s!&>at<oQyk?<01j^6q
zwP>6QqveDsR8{EGN3W+OHJtXDr4d&NH*{ao_jVL)8Dbn)aK4~`6peqo1ijQ6$mc$m
z^psN;hVmmqMv3%Y_p^PbK1W@!|KRYWo~9DyN}*5`b;Pa}3;P;lqyTpr!M;JlFt;-t
z(PCr^WR7~taaoQSy~xX#nJx$zf5onfbcHnA&BgZorqao))ZBx*MCTF;B{qsyCh>`i
zk5*0UFPMXE1B%cI*K|U$xyCeH)!)~n^o7A3#=MX{(xotLB^aR8W-xrH!6|_95zXk7
znBuKbR%^&=P^$5e=KF*UxmR?Dp5W<v2TQ9n4)xCdT|dZe&=P<>Ohc-{-vrdfR3*{g
z(tuf_CBK6pZVk!<Hl5!}iD?AGIZmd9Axncrj5^0R!OLojC1{O;C!9&uS>G9wbXX*3
zYI&uTA#0H2l!pf^-iIF-**wpkI+8o-;eT{smvWzno6cxZ{fn+M7J`pR#CgqPta1-b
z?6BSos(2C%-Lx67L9s%r5q(~0F_RYE7+gdFiYQ_t*CSH(vftiz{~$GbF8+XJ@b;H(
z!8tBZeLNa}xd!Fr|4&8pKc$oS^=d4tZWXKqOxTfFc}^DByic<R9#y5I+Y~b!CXo?R
z<S%6AdN>vY(P)OyHJvO5F;dw>kF48eA!otyO{T?P?ptneU-pbH{{b^M*9TFFuM&k8
z_`4i3q0W4|{Za|#YE%}d^emy1l<ds9ST^bRG-Tv^RSthUuaQfRD$6>=Yv3ikT|0gj
zZvP65xx#HARwC;L1T{TMeNfvz4wG6i8Gz3Bw2H9>v{oF5sh1dpp{hmzQ@Tt_b!A_7
z!Wsp5%kwvW&^X0E3Yl0~s#OmCRvMX;BlfKc__Jbvn6~&QVAyth^4}TKFobTFbj&2N
zYj~RVIVw*e87%7vB!N#&vDnT-PVO6OBt71!=&J=GUMlnjekbD_xMGsG``~WiUD;z!
zuQ?zBbA?aMetQr!_UEI>;mfYU`EUN#!%l(%i*bW`1JpOB`wNRg%yrNwFiZay6l4uC
z3>xaK_5{(|X{HBVEiKEcC8mzAsP5xipql~U>}1o2>sRDB1G=Rb{4Pydn}6(3U2b;)
zyDDI8WP4RfSL_3cqp<@!j;8M&VSrfw*WqpO&+z|f#v3H44M$_iQ7_RANMIsZ{ZK7W
zX~En<|0KtD{K4>*_ZMK1l7IBB)e=`k)LHKs)NCt7Lpq85)_+fyVo@*K!N=T&&)Jh7
zru?$U-GYLAd?FqifFfSPYw(K$9qJRo^hL1PKLdG;pRW6BfV?1P;a5%xjB!rJwn9FR
zkGxG&WEymWLKDLZel+Fzn-kf-6!_!*MpI-EOh=~teB<6`u2p>ZOcd<&(?D$@rVx_;
zCV`_c8dHe^JH1Ek4D5UhZBY(_lgD<Fk_s?rcV%QQE|aRWjtIe4qqhsmeA_<F`eHhC
zC>!;OlKFnE8~wgvm}_+i#P7nZ)sca(c)hi1C85oAhvA=CI9P&i#!VkruhF$Fu#`mg
z?hx=>`={eKp))OFmsHJOV3O6NP#SbzHDt|=5n9U)d@AB|jsx!qS@)sIVSf?V7cc+#
zLe-@X^%|J<`E91Qin32nw{wv>Fq@C+gZl%VVJ%<FP+OSG-%-{<O_Qv_xtkV77JQAo
zCarM-y&QUm(4zfj;NxOiDc#dkeTXgVwqC)p=seVaP{)Z2F9{s!d<3{|4{@}(UQ8PX
z{U%Pg{GR$NsO4K7MzaF_tagah;bC3Af|QPhOB>I@GaZ3{6*yP(n+6(ja`wjeI_Ex(
zPrUu(isE20Ob`4=&vUSLqja!V8)@%(Sn!11HtgzLf=#<dD8%YRE#+9)hYgs;tzz4(
z3(UR1V6q^mh+G%46RFqu4!LhLPv^e3FZMlomIw3iM1#&JCUDX`fvj|-#5KGTRTbEI
z4d5Q6%>ZOc93*`%fxjb+uvNBbyV@v1P-C8^iIUC$yB*S+$4nzMaX*szmteJF60L!_
z2Hny@um-M@Z;KyHx+e65E8gF4fGa<VN8R4<_90h{I2Zl0+F)S^xPLVk#f!mI|E!hi
z_d~#1s#7TL$bUetbLFJr@Vlohq9mzKc0S)k%>XHq+u`aOpha*BdiX|A(Di*SSET$Y
zzp$E@JhCNIk8lq{zbOWiSRf8vk%ZW&eg<j6c_q}YkiAnH%VyG!^}wGx{Jn%O{8b3H
zbtfO|RZg*>W^R9;rS|J@3?(C2->_bq@lFSZTX}@Vy@9|F73bte9=2_pu`k#E*I{Zn
z-J@BZ2dYJ|K)3Ro`WH+B$-<o|_b`y9T;s0=hd(I;m<T_(yfBkBt=S_d8K4JxTAcY`
z-jNY+fIowX4WL+*Hc`tcE<Gg?v0^herBpI?d3<~CK0+M<O#*?d)jxU%3_DmF5B?4y
zIuHNMjM3K&Fk3-O)RPFRq&>hwLe;Fj!M6h$5*R$d8#4bauo~8c|9HWs2JXCx-$EXq
zA73hJv@1jtL;62h*jp?1WytMIUUDnn2gVo(dE-`J2Tp`oR1dO`KGD<t>L8E~3ec?&
zRJ`3msGTD0*H8N$kBxgG6~Yr;<XyL`y)Lcucm5RQz176;RF-_>5102<3*VpFV4zVz
z6k>uOyT)JXqxRCh9J1d03<+a3v$NRib*s<N@6Qlf-VMn5vNqPHse(0i!w$92qB%vP
z$4-Z1ZZs9Vu<LrLe2`z1B|o)qTL04<J;+A@M?;#mo+^-SB;=uas(b{e+*?lX|Fjrn
z*Y+eW9A!yKhLP3u5Z~Akv<$~`Fcn(lq(_Ct9~hUkU4~3PME%egbwL$*3B49_R??h%
zB9L?qBI3c)PCNlL4cV@e8w{Uf)YBUkNul+VSFOuJWr7W?^s7B-UP*IZdEfphavFwJ
zk8DKTKW4i+l0O7*{}`}&z$Q%@BF8v>e+~Qgy4=`KZ4@#zOC%^suNL?vCGll1KH~ed
z>?=-X?7u(Xy@HRu`}Ru61%8OKAXE{r_tXDLALG9|kpG`nhrSjJm$WoWU~r|380l8p
zsK3^n)q+hE>BdR5wqYMe#~v{(fOB=DjogjBWMW}ch$-xK-97vfJzIT7R1l~A<r4`?
z&CdPFHRjexU_>v<^hvsVJTJhm^cu5@`5J;R5H+T8Ae6-@v51ZIFRVG<n&AUd$GA?(
zI)<G**h_9wuE^X&Wo|;L$B^Ia@g=gVbIK~*1ps2W|2o3Ov}CYp==a<d)x8Iq7b9=I
z(Eq$xJ_N1xgr&N663=|v$6V>HCXQ*2AZ2NcI3So9w+0R+410MVOFtrHS#P5O=r~^u
z5H5H>A8_}rpx-@qX3j_Jbu9Pg%Z``!c1J`pskYofr}&=@rrGFDFO4P8VJuOh2i3+p
zP^7fP>k$zWC{6#Pcb&At{Ss0G<njWGNbDL%`>P^ZY_bzjmRheEa`&k8ElaJ^1eZ+s
z2Rc0#oO?J5r17VpiMR?1CxAQ;_!;}~zkuI*3)Ipic`~fb1fQZogVp}b{!a`rqLRsX
zni8y~I(A#O;q9AXlQba4)DY0$6xbxcg{_`PvOhp;Ns+_+<xR-Jx4f$t%$Cnp1g{+S
z*<ajU5h=BLr!h0o8TV<g3(jL-87Nr57RnWB?SsvQ)C9jk^Gq98K%u2!tl#tP`bvgp
zXN)JA>joUhe)OSEx6tb~uJ;~4KewmxX=8ttf)dwdm)Aw!M@R&fU<2(6Ncy_~z97(;
zcFB3u1oduB1UhdEM2RF*oh!o}y@a#{gCd<}<l+p81tx>Jy07ud19Y!9{NXmfkQF6W
z;(}{?!-sLWca6YqAv}(g=W8;2oC~XN>BAh2d8cmqUbVTdmGrbAXK|!zp0GxP<)A@w
zYBH#&u~q@PrFn>ZpN3qFPIrZow~R${qT*yt#5Vu>Sh3RKg72HhB^2mkz@$ao_c2N@
zUp?I(kdR_#>lZuN%K%p9Yj+P=)MDWxl!1}@9HAT5g!~lkk*^mBt^AuWhwMTun`<KL
z`FYZ&E%66BTgBfGpE#U*^hSN%^Gl`Vata0FP<Y7e$$0>uWotGa2k-3%Z8jv$<LhbJ
z{JpxadNwP@7b~~D>BLS3BN*`t`zTEq&~k;{m!K8CNH$CEGsGLL?Yd5hx^zFXeiITI
zNSh5kB6yN>=y~;kC`3<pD#Bn`5H0~4%_hEwW)1qK76eJlc^U^$aWn>o>#am>j`lhD
zuXmbVgpKd{Yjoqfc3odT0pz{a;9RdIR0G3^T7eQ%qrIy>)b&#R{XXo(#`|DvKZ0QI
zCO5DC7_ARD;x{$!fB0&m&N+5rZoVV<$CvX#O<ZoeWmU+>p2JT>vlT&AM`GgsRMvJG
z+2dE7r&lU}s0)zq!~8v}GXY4igi{Oy@HLb{LDv$(jbl5!WRgzSQhLov=nH!PoV#bN
zRIr-i#)pS;%EtiS=5pe(!5C;=n>@&Ju%AX*fs3*C>pY!pb?I3DT$I~k_`Tt$rvIgl
zSf{UE?AdJqpAf?US5v}o%-0sI7ARBqC9<6bcglKNNah+U;+!cvP<M4W>pn0uz+2Nz
z+FE+i8?Uz(tgmCAMDK=kCN0LQvZ}6tO5S5fOTbyljP{5-q^BDIV=?Rh(L=Y!YL{az
z2(W4q2%pJ*^BGukzSfPCYM8gxo0%in+Suu?LOT06lAQ<#$$_2Nn)~#;fG2e#T0H5n
z=$&`W$efSQ&eEFTLvC)VQ8T5ryGMgxx7oioyS(OTwx1Nc_1|qI=%3#IiKhE!bjxi(
z7U`nB?!E{7fsNXH{5poWwu-5z*?_X(^P+Zu)8QrJT|g_$u+=`EcE&yIF<LJ=*&73<
z*y$PH0b=R~ejnpxsZ&|%?CHk-(PONWeQye^{JjS*R5gDCX41-ZEB)1mC;*hK2uIqa
z{;iOhBlYi?Nheu?C33?RlgQW!d&=3@nfBvi>=LkpX^5B5wI_ohTQWSyg-fqT$$FMX
zULF!>KZzPXKJ;O>+o9DhC0Fiq3{y^!-eSY2IjC)zL}Qw$Is~Vr1O5qN<dY1O#l&dV
zqL*O*&T#`&fn1W!gR6AIM99}@xOB{@t-iaxAW6})=KXNsyCkk3FXbfsE`64uw88+s
zq<T}%<$^Co?)!`0H)D;!QhfnJkQ1y|Bzd^T^llJHgiV+tu!H%on$tiBj%oI1T7i(R
zxhFNm6m6guld&d^L4|0UP%O!E;(QUgFrF!`SVK|y5<GdxQf<LgdHxaAL3li;A|N8f
zZou7LUq_DtZM}sl=3fAL4TgsNg@Tb!()mo#Y>g(2BsL4g<6poUmjYw(aROOcE2!^p
z7>tQ??47H^v@^dz-lfeF*GAMQ=U0GP&AuM{Uvu#d;Z~ef2JR81z<jVaih4{>7fp~(
zve6y>phLM&qp$s)5Z*JQR{W#aMrDEFDZEplCK6dHSu6>~$w`0=FCDXMVG`i)ok2v`
zXj48}u(1yD<5Z$aKRp4=VeQ)n%7ckv*N%qpV)8;xvMsXQaLx#p=vICLOG$|4NpZ^=
z`$Z5HGeT$`!td#I9Aiq_NNYiN005XYafJ@W(Rb@u@_+OU(3<uIYARzdXQF>E=>3J1
zg|B<^`n$Kb1tYR&zZ-mx071+xg0vWVDgbvKiw*nwU=y*Hpe!%OjSMT+cXndZ10^kB
z$URn0O>%@*fJ%g{VT9~gfP?u@<7N4t9VgnPR?N3lqn1bUf}`B{?TXXtRjwTcV0!<w
z4s5-Ir{E>;aSxS2-~s!9e<v_I%`B+tF;-aNRT?W@5HWLuzXCaUFN;?;I(a#}U@IJ+
zp*ek@Ueg*l*VOda&r{YLkVBad=o$M5)+&w+&2|$`aG%$v8la2SpT~k|XoRAA3Y>Yi
zGMuz|OdQ=u5eA^U7)ID2sGN4m9`hccow7=Eg88V-xHH+&%AhlMsaBULkB{!?YPPud
zF0Hut11?6pf@^Q*^K5_}!aCaz8s>lJ{&$wVupE3A8E7OW0L|K?Sr@GURa$D+ERfJF
z2XkGv9ng|mmNh*|Rt<-zxQENBRvH`<l5|m#e^pMmcej;M{$LnCoQTDLH9%B3r#+NR
z<lr|y@2|xueW^Y`lJ^}By=tg2_0iq2Qm+C>R-gtPxo;P)5pLtq?UF@rTh&g`2v5BB
zj~<mEwiU8BIzoDymD+N~#>aF!8K#|@cATA3u#!K(AjHF+rxVoefr6V@FIKZFA<c0n
z<?6J~su9VJxYK>{Vlmk@|8Y*$<VEsBeeFdF)N+y_{jHvM?`_dVa9*v_rv9DKF(m&;
zpN1l#1lN+OHi}XAmNOH%;hE8MR);2TuN-|fp~~^+U0TPh<>g*k>kNMX?d;JqIUuNb
z=)@9kPbW4d$9$NnkG83O7(b)=(u%619lm={JO`2y{#Nv^a2)$gAUeN23jZ<6?nG_2
z{6*+n@r#*N|B8v!`|Nj(zySxg<0sX)_TE2wVS@F#5v(y-C7Iv{T9s=^BD@j3xVgXv
zt&+zZHRHb+kfK1qx3030_~0yE(Qc8IBU8Ev!R|IP@~rQxjhp(z!KuP0K6rXn4Y|ii
z4+<T}gH`x!aaA&{>9*|!t^)!pbp$JPwq6bED&%%mhRxt^Z6#poqk$>jHQC6lU<Jr`
z3vdG(&~;l)0=|MJ5m%j(26aVOcKN|x&%1UQe%3=PPVhkWQtlhl^Ot&i1!v0Q9_RO>
zZE6oy(M6hJ?)86dEjU%t<hk4Lk5xY#>HYA38^Ft;mI??yMtapFb(y}1w5cF;UVVtM
z4aFd4J*v!Mox>TBYymJb8dOMUwT$lt=QXd@mBBYhaGA7BORr&CJmCx)U$y=D{WD|E
zC8gqEvUyLmiq{dKM~DI^0<eP?ptdF%>J_>nzXca%g?caJ2xu<izhE3gV`Y#5V2nwC
zStN%AOdmL@I?SL3BkS_TwTv%Ejy`>SHqhZI=S)xKBs<L4<v^dD4<>agf-HBwIfm(C
zqt1!Cm0oIN1`fOl+K8?PfH)xX4De^??_}&ma}=O_+ROZw0p^oh-Qp>S&<wfNNg>{H
zh_R*;oeAi3gf@zo+s{-wjYfT;`s4=#mrgyzI<Mr_)VNs_Ah;|N3ln%yi$5gI4+QQz
zcU642EJ*-vuNnD#rVghu1T6@k<`4ta3W<|R+QG+9f+tiiC9FY-2cFgU0?lDm$jl+Q
z?w*G_vS1tHSEDkv^buY7yDsbPJZZqu9&=jnGcf!F;YC6Yvqkp>_#VVC1rI-5RgPLN
zUb@Z7IQiQo1=fgh5iOFEZsf$afzel;4dVo?;>rw>;Z(<n#xsRIvKb5VP)^RmxB0bA
zzx13C(KguEz3REDKLK>bSafI4^inXEw+(pL*uV|4VdX_NL319>Kyr?NAveJiI!>C>
zE=U28B!-tm4I!<TW7=I#xk|dG@v3?a>gQtSZCU<NaO|2+d51qZ$Pk~;wEC;QqvpY@
zkZaIyO#nBjD+3qs5ghu}jK;JK<g*De%uef#h>J2)?WWm=uv@7k66s6}&I-i<uQmc`
zSuWR50M}fG1z<V4rSJp@(JWE+VZlJ7OS$BIPdOSctd9&P2lBz#3_~67Cpq0;+l%RD
z0pz}J<sS7K2GFo4#7~g)bSrft(lWjq!xzm&;##f0?4PAxm#kr6k!X=;FVpHTs>bsX
zfH1+^xm6PdCh4J7<ZLFEI~-l*gfkuUX2uxV9}w+BwhjHNuVc(E-tjsHDBLHsK`ndm
z4j}X~7iPMt-e_|)7>azxBp?!klQqC}73RpOLXOevY3E@v<|e?QW6dUVRlqhpw)gCr
z*IrJIV%kExbw%N1;LGdrrI8>5=<?E7QPuIxKLGK$wPz$nN(7R`8JVDy1z6_tWi<#z
zI1I|P?m>kbZ<vtcj-$!CsVxgp1yzck<&zeiq+%qbq$2*&PjF^k8BK2Na=3;SFkBgv
z=@tYxbpSGu?=eHZ?geQr!wn8s6@zPRH@$_n46J@OXqJPynv$4|Q%!?GZTw|m)=sjH
zLMc7-r$=S%)$1b1hN3Xaw(ff3r8nPwYW;uc`tqozuC`w&Dk?&pQBdNH79p*IRE9)F
zM5PdwDiVg&qB4o81tda95M&m4)dCe>h=3RnLPQc!1R{i?mLfC3AY`B_Q{<#VI3+{x
zL%;XC_q%J|>mRysEly7M+2`5M@Ea;Fp2Ey>k&o(ik=kWxGA1SvZ{ACgJOoHjW<{>d
z(bQEKuA;2c_CQg)S!N0X8^0MI=`oCk38La$ii~d%^7Y{#?@r`zf_(cCHR))**Gxyq
zx4p9#-f72U3CS4Lu1Yzi`GpXI6X`315c1TJBCLr4fIF!(ifO9^TvWCo{ajlM!%)^w
z-|0uidUt_w5juD5#Y>Ryurb(d?qrJxuOZ{w$9D@x$U`W7`a84Tz|Suj`yTsS=>P19
z&DcX0_?uS9sDddUv?~@H3u&%kf_u1IyPmpVCY%}{&4|k}zN7Yt2q~rlDEl!_VJbDg
zGn1sKNx^-x<W4U`ud9gYjq-6;bJV{}i_Zto<$N1euC$A287RJ}t4-h|GZ=JNwq}RD
zawBwqc?*!Fj#(YX&vWXv!cmrhFA7j<HRW1I+Ri=-FC&q;mcE}_)T~|BKfBrL^U;_6
zbp(e>@4<<mf=q7z7;N`b@Ukmc<?;yAXx}3iHwujhvLcUoU(`WK3yFl@-`)SI3>JRS
zY=mj77`ggUy&4XC;?yeD*8ppKNMC`*k8)bbcgV}?Rw-D``IbV^q5T2bWM@x10Ru6a
zH+eCYA>c1>*h<AYr5!@*>t$X;;)$#rR&s>*hrS4l;dA!(Z2P0#vG{KwTewM(Br*{q
z^R2ORWgkBn^VU_$N~SLb%w0ApIX?;(IcGO#q!3ot*(eN-ph+?}Y*P<uQYl_nM;;Az
zap|M&cX<7T$~cWYE-G^R(r5C3+1B0&F)vV<Z>pmK#z-8U(fERooCMNP3${wX8JkYf
zjo{oCuhH(ItwygY$SqoXA^mIhPe^FXK&isEDaSMYkM1e8JtC9^+;XtE@Q4~})7%wa
zWRwAz?n|te$R{Hs6KmeNzrx;!pmc3cz3RSlttJ7o0Biz*%K$^eNpJLEg{wkv4CZ>A
z<!uT*8Lk-vW)R;hGQjX#mgal)10_XkrO2-;nl#(|0x=(yuQ}Scmpi0#ygD^;;LJOb
zm(Lb`Ma-eqNAoXM9&=xGZ`*47tKYv+?>~f{AOqmnaA9EKNF}}+S&Im76E4d`z@mri
zX5iin++x$_e>gQ{Oo*TLKq$N02D5U)#Q0{zUMi)@&Owyf`QV%0a6=5Sx4bY=E=&2%
z;m=rx71$NPbH1-U0vD!ss&KT!ntKjg*|e{^8opvCgWt5Lpe$np+TKQ5L}JGJBX8J2
zvX1>EcpkWQX!X$Pe!1E&yu-sS<|p4(7rMEVd3LR>6QL(vpJLvh`=2@LY?^lI1Jwq#
zxu%{WDI_o92k`G;*d0jqe0!_eH;Sui4=0RGoIj>n!=!3t^Gk(`dh47?$L;F*ii}5S
zmiLAkcEFjgPg6FNF;=p%F_5HvVpG8i*44(66^0q=Ro>d$g1>bR;FM4Q*7-Po2;1H^
zwNQ*4*W6$52-IJq?Ij?@Y2#osJ0asT)DF^NX4|lBlN)<DsCN2xI1@yqCB~`NoCFv!
z+z!tz!>xQvjXqwBeh6=$UNu&eg|{3CXDn~oWS5^_Ho0%|fDX2gpmy?yk2nX4RbRoY
znWiZx{55|{|4*PhFdEk~E^?Cjh&OWx2jhd9YonYLewBFYfixzp6-q{+>KJscn8Xv}
z&(xtH6&!t3(Uw}Le@z;Cbwiz_aWlF49T`3LQDAHGfhAS#*_kSEt83`_x88g#G-2X{
z`I5BAbCK7(=xsH2;llO3jYdV6R7dH3_x#SgS`#-#R^Oe#nsCa^KJ*U~zaXC<@#0oK
ze8GEutIkSS4IP(8XtztCUVi2xUl=7XbWt*BhMGc`+YJ`9?V4NkU1+Y9af`M=3;M`L
z%+;5fGC~V3Nkm8nA118sM3jDNsOgd3x-V*fClPPWvX?kIHQNq6n=tMfBZ18S>?_PT
z2Xs!az^r3c2C2)Y1M8;wIU-|OuwC`t(x7TH3uI2dOm+O-q;_LH|5^Tku-R^NO{#V;
zIDpQXw5B_hmW)3|?+fT#x^~uA-?T}`oa@bzHT{VByk1jC-{7TQ4Z+BcwxM^{JMX$c
z3b>*a{))X3?d?=H&L)?jgMwceySgkgXwf}ENLY#BQSl#2q<zP!_Wf;}?xdE#GCK%n
zA7r&Dob-!sYHkyt^`6M&;@WVc$;Oc_XqEoWx-b@PH^LD7QWrW3*Yo@~YxGc;np{E^
z&3%VbWY}e>;H*N|mD|OAxePQL63e;cyy!HI>G^)EnY3XYy?G0?8_tJc8I9X$o=8#K
z2o}AeB22=6IfRu^Lr#Mk!)c_gm6L(rI{-D3cZ;%~a4udzSk<tHTGp5|TarH<%5$^u
z>INXd*_NsG#-alyO42~SuGZIj0Wb=Tw<s)fcpBX@r(RQ~EQSYoowip~$`7U_)K0fy
zl9`(#I#WCclyfls2UwJ2Hy#_v#L)MEr@L={{KL0u3q@z#o2Q~i#2dYTuD|a1eCBWO
zCcYZ4y<!(r!Q3Hws9y%##GfyT#UkH|Z;}xrR-`{Fo{}Q|-Y8b#A<0VeSFAaqFuJQC
zk76<`>s&7RmpBzo;0+W@z!*`6N#|bdwh4?V=G)y#4=6_Ow4LpqDYfMJ7guv01xv6W
zEB{ZAEj)h%5}8&PS^|>vwoTe?ipx({U9zJja(!KW8qVjOmw5RJzpZ|ew{5@cT0j47
ztOq-SUWS!C#Pkwxk&&aoSz@)a15|687?nvaY?H7ba^lG9<CVP)>jHoBK3<~ug(ptV
zNlLPQaOv(2&*R%)20d`Uj`Zoy@YPOGg)Pp4*Y|tmqjm>o!DqX3Uo8F#%7=~N2y6O;
zwz~hmi-IzBNkJxM%FR$Q&4$~Hw-~EDY%+bnbD&{!u-~p;%lBvhy1n0b$D=QfY+Csc
z`-|T;@Z)m8(rd|SG+XEydr;542Zy!5`8z4}flq%P%Qgro^&axsKssKWerc(Hz#Zom
zUYkxW`QLo3wg2^mL27$3qp=o?xHI4OYM1X(0mu<y$qA1_=vHVDk|xp2HQS=m#b~@Q
zl9!Rri*ac-A;xo6jv!&Vrr(-i95jFVw&?RD(gNAuiI?^L)^hxaQZW+`$}_S0$~^ET
z=V1}&p&^4wd&*mI$9ev;>P2<@*<K(iF+_3Rntef1YGL1A|9<-Z;3%K$EceN<D>+%Y
zCFdQww~d@19(rK;PEQT}u@FXlj^~tIb&lT4r~>x67>#!VP}LDyAbPMUL{xqb3C<bG
zMB2cjp0<V+Jpc3h=RC;M&v3i9*43pB#^l?lJUV{Oq*#YGx3DR6H8HUDphJkbWDHg*
zRp?>G+~~ACLNdKlO)|rv_l=>Qr?37dqg88-=qFgmV-i4P*v+X`n8Oq>R-(j~d4BTM
zB`?ep9uIcPHqdNYL1j;T`~pR-rHo>~F&%6dxeeF={@P_5!P6DZ1#T~@E5pWV9T@tP
z#`M)_fs~O>-dyKZjyn1DTIPQDv~N2i1Sx_M9OC!F-(kQXM7uitk7Q0;hqR;NY^Ngw
z-b7*eQ%n<FbyB;uS7o3b7C-B3#ffZ{&(TOW?ZUtnynQgd{B`EiT?)wM2s+frCK2Tp
zZ5fE|c+$5fev|^{&6FKH-<fPh-<oG9+Z=HEWzUSt(&+8fm8?(74-q<=>zaDL<Q)^;
zX$~2OKTZ_TMp)9IJIPo=-=#i);(*xCh*!rvR9{3tj+(wS^px@wZEz-SkA2WcnP;=u
z81*>SQ+G7Sbj;-Gi|(9xF|qF|Xjiuzx|@1G*C8B)6G2Qyw+hv3J}dc}gaQqV5j>rk
zzXcs0r6e;~){!5MiJU(+Gg1f`nk}MoLZjKiX4v!A7K{Wx9O7P39*j4Ce!VXOg50`b
zliybsXJz<HH3X+WZOZs7V`JcXE+)Xy6#<`<&Brjl=ZoTHb5rn?1IXwag{OqlC{8Ar
z(rjcJjI6DdXx3780;y@7|Cm-mTgQQ~z-%UN4BR({x2WkQyS?D|md^|`j@N~3c5m~D
z4)K;_J$3$KYL_~}o4Xa>+;BR8MBEv-U;=@apFo)2=&%Aidi|xs_LMUp%~g0ywHXpO
z<5$>qv@qm}0CYN&n)sWkdu*KhgpHOmM<N)xC^J6}*^sAHt1boj=RU<8hRZ@Hpz(_Z
z>Sq<i-I~!(xju-Qn+!B8rJX@{`aeWJx(&>5Qu!MkZUo6<96_p?8gLr9&M%^Uhu$0w
z-L-kwJZ_a$No`hI(Blwg&g1mQ$-Mo=?N7#Y{-yud4D{%+V-T<x!KcJW5G2`Vj+%H#
zE*WVAGwt#a{-%a6X%rNT2u3qfX_qQ!B(z)N{PYDlcE;$nok9uD$TXbo(CR>DOpI?m
z9Jqh%S^dkWbpx|rmY*UVolXr!QdmKf1(1Y*fE>*j)K}VQQmn!CSLu$z<<=;Y;v06O
z0Zn$wj39-njNFXHpmWX&RqhV$+cX*HHZ7C^0e=1So`(KHU(|2TCGLZz_j#UhiWeuc
zd6TF+pP>RZ>l!g~qJykFsmZH5p$L;K;lX^1cv}lPS8e%UqbVG904kRnI{6IHA`3*+
z2CA`uX{a?vT^r~9ato}u`PlA<z1(lC$R~QH9uHW}`d;>RI$N)!{sGqH9$%79emXa`
z5$3^bHIE1vDY_xdr8b-WN2~86E-fR_1-&)h2ErT;wlZ(rIvN35H7{}NOo4%G0a|?4
zF=0oT(#D>}71^bNqKR`RLvD_@Y-@k=@ztTvFUa`E`@>X0i$O0)7>2YX8s;pdg4%C-
zXpa8+sc<moj(WC%pAz0ixWnmMNr<i427vAoo3w^qmVe}5j(6(`_cd8t*}J8xroMi_
zX7_YN8iM(lt2MHKjdMWTBCa$_QSDK?Y3|kSk>TP8$m{95Gve~C5vZkZH*7(J$3Iln
zD;8&GSZiElp2;A^B)4xq-P{u>%F4wiKSDZY6Dl$s?_@j*zAma)*6C_Cq2^jcIKJWz
zQbQWG#t2Y%FFS&KPcqk6|76ds*bK@wAUYL=(7*1VDwo#uIk-L<H#0<eQt|SjNKr@M
zPvUn$+RcEgHhXj8caxX|-m@LSy6QnjV;CQds-Iz|cq$**@CO>qwCy<oDR@JwsZxY8
zBN1{deZAQZ7}nTh^!)<0coZj11d0a__|@AK#;H~jhOR`k(K=fM{-4XZKfgfU-yfH?
z;HI}f#Ei!uf`tx%C~%u}Afa&FBx9-oOfXONaPw^4z>1ZxIzsO`Cz?*7?7bqbej%JK
zV;Im#z|;S}pO+$waXFJD$lu&$y_;io*=@UX4|levGFA`OF6<8A1~IBI&`uj=zOoR%
z^*FA;#L@H=lZ}2~_eEe6O=?mi#2W*(hC=$LVbs+nf39g{r-EM0MtfoiEnia;9f_xV
zX|9}*o^jDTyIWxK7FtLipI?%wtA5+1KMYbe;<sUq;%b&$tg@lE!#3k}t^~Fi=z*wj
zSY^oS$xWdbj8iUj&14u&=I`#a<htga8Tea=_^dDD8*4}tW=-n}XOi5aJ8P<QOJaWU
za@W;n{J)ErrbxB%N97l&IRt}oP5npIQRR4me+emT<1eF`D_8>UYK0LilH-Q_1>1zV
z8NK|ukwi}Bx#o66`gK_kWh~--N@K|EUrw)V@h@!w?Xt%;H&_k45*_-kQ~FcJz#mm&
zQOIx>>%#WArFI0R^sz}HdHKxra<m4J^B^^=IXUX|LQ!9H)5HB`TBGOuC#GdXRpFT5
z)_l2TgxpCWjEYP#KIvUzZRmfb-@JODT!+wrLla?e&i-5H*oD7!a*b8z8J}ms{|#b)
zTs8eyzeNk-Oi}<w)66M0(nb>UrjtO2sdLc?dStG-gJM-5TA+48y(N^?ERtDq<dw>n
zk`8II8uIg{q6w{AU2U`7x1{10HoN7IEQJpJr+=oJkS^)}-Sa=&7hmxunPkL=f$kzC
zG9>xpXORL5V4=BfNpvHcGirknr5_uarc`s8--GgT(mVWiG(hTzZ4%w7e0(6yUuKB=
z4yoYpjO|z3JQ<oG2R`rlRG8%1I}>_+$fKK!U{d)K83BdYTD@jknFe3(21w=pq{*i{
z1`$jf%xS05n-YUze4A98T{awqH|}xJm9e+C<h-dIwIq90bz5@F>|aKI*TeM=*$V8i
z$L#QY_ncbatjZ@K*iZ;95h7{@n4nQtO%mf0b~*L4vJ}Z^>NHh5p!(1qOuFrWQ7jku
z_NW2YlP%@MamkB9h&$~39<YNxk4GgI6c9_sJe8u`g{ot<l`nEE>>um`l^r$YT=5V1
zk|zLltdWPPOx3$J`G6Orq}P&L`I|dchhT{IxHLinyY#-mZzIwf51(To@VrKiKi4mx
zNwJ)bA)i)^{1R?&U|@OFM>Ia)Ja<1xChDgg0#dflJ>yj!Yt!$oKK|}zU&8n9`wqR)
z-?)9ku1kNugKDfb(t&k4j*1%_HYjM~YV1wg8W{b!5zaFkwRTTI#Ap<^!Yzif>CZ9x
zuHGx*F@8;*-n~06bNjYE?T@h6y|#vzRS+HA_3k%abrHm*ZZdL)I0$nmQJV5w^qR_&
z=24Bdgdr6lWsKXjOEQjOkgyWn*M!|Pgt{E>=I*xfJp(EZpPNtfZ_OIWkG(P6Q$AI0
z#eHph>c%H+=SuxQ_y3=Q1cv?w@aApPu<-`k7AA6r6Ssi5AxuV&7^6Sbx@0&Ql%r32
z-9z1b1;%td!kbH+$%`Z>Zanh|V>lRW{4YF^izp>N<H}>MjTaog`u$g3Z88(lFwh+o
z4VK)<QBAin)$LvSe>SS15!U!U;|Gcnqp^+5%a9k#2pdr5Va)@`!g04mj46$TpK6kk
zcyc`F@=GaWDg6z8GZBPx-D~=+Z0aqf!sH0z&HQa{nDbnajlF6?UPX0RHT#)%?fs}&
zp*7W6=$}jHA<a52p2zd!$#dc~!e7}BG4I2)%cda!T-T(ix5K|;%}YWE#*8}JYz7Dt
zfLf9DC+W-45XG975tIBj_o})s9wsp=;W2yE)WDwYbRPMTCW|H~MU_$MUg0XX^QAtn
zy&L1(E{+u^bOymp{4}XGSg50Jb9pan2{pD&8(X+*d^T8mv<Qtomih;+IM-#KFxTO5
z^SaY=b<gqN(q6+&6=|2k?<~HiNyQt&!hFk@lw#N8t<h<3^aRqWe1}#+a3bqNRZhm#
zMeWKfehZmZ&1i0@ew)0&cd{mbqheR(LogkB)Z?Gn`(4)~K7cx`rhTjU_nm464iQS~
zDOv;Qg)d6&whkqe7(<cLtB-SzJzzY+=N5XQ?cWVVEPl$%l0)x%pSbD6=;^*s&ASW?
zHt6R?M(jAJc>f0pwy_0MM3MO=D2kN#GzIvtsifX>Pm#`+j5~0vJJIWH<hVCN-)CKQ
zk)y+m78B>kybu<7qBf?Q9m<-hMkY?3pNPu*H@Hb&7ta0biO)%0>5Q%>o6-0bi+qP2
z<S1>x!|^x`qbX^yBB_nR5Vm2*IC)*2r3~f(Q7MRLvh`tU45rDp*5=NOB0(8ZKQ(-E
za&ZImWZ%p%-n4$#pBDAIRA-_se-OI@&{6vpqwy6JIl=gXW~KO;R!#^35t-xsF7^H=
zzJnl&QvHAvLbq2$C~5-ta<K+MAWHCXe9eR?{rB#}i*nw)EF2ps$eH%+pBc6@$Q_I&
zyq^EBrXFSnc1;}Qk{9`syuWq6fFUguIE>5F8BFX9BaX0Es~^Hx$IVz7L|!>F?B3JX
zTs`853ZP1<NRnX|2it9~u3ukP*j7XpbvpO)xt_=R%V{pf69d!5_<N#bl}}=$06mrj
zqVMpu22t3Ni-y4e!AQMHQ|w>^Ib}dA(cmrUN@m=mZyp!DDJpR)nTTTNm+pE|;aWBr
zc-@YiX#LXB<UP;vM8${aUhgZbo;_`-tB)IgMR@ZcFJ#za%TbSJ?LmcEx&*cz8tJW|
zq^g}6OR^tQLj+O2pLi9Mq|ElvxHgbm9J`9+RD2-(WDvOH?$hHw7A88{PQK&;0SU%e
zj)s~F#2W~bLi&z=wJ|Gr4{OqnFf}W&JTih?;~V5T@7O%9-<+||rjC!K2d^aij`zAg
z9J7eHVGtzDvP+oR_3@$(_HEnLq-ulqH}NxaVkpgAWe0OW3c_*a@$!Ftheisr0-B8n
zYHT}7iA%uI=@6M(<dx{ERGkq#2{FEQWO8NAo!!!uZ94N;R{Z#lS>Hkv0gIz|Gb@Qx
zMJf^+JlDkMy1XL8DX`Xhax&WWSiO+u7=lT$44uLm6<k`9E0g1<%=YxiCH0oql%WLA
zn(E9y9$0P7+Vk<wDU1w|zfhMiDWMigvu;+<{1=YB5C|;I_4+4Lr#*y>fawjxha*SZ
zeer8!<B`ec6YIG6y*V2OCS;>W2Ud5UWo`{`PkX&?@1Pzk6sidoR1cqiK&XdeJrJl`
z>IkKNW1<g9<%93WYpXNLf@)Tif=#X#vqoGD`!i=V`_42*gj`!2c6gulPurea9NPHb
zU6TK_!(7NnsJ?s%GBW|88rR}W1|Y3~W{qUDbjC%}7kAZ#F<3r+R1ar`QKl>p(`tZ8
zy;@H1E(tm(Do#v_^e-Mc{Fp4T;_NKW?B*Gt{_Pd^oh7KUBte(J|59X>xW>H6wICqm
zT6k!Ap(3VV{;DRW_$v~rO?q=@M_+-%OX|w$oO9=eE1F^n?Vid`^o5im(o+gFWm*TS
znc)w@MzSd(h<t}{?65UdX6hPZNEbt~wi>@1WwrWY<9#Zt>igJxdCA<o%RP=KdxWR?
z)z$T01#!xW9Vg!DeR%Q@xdX~&ts&I3agVeBhpB9P#T1!JaB?Tb^&tr-6`;|<AbG!0
zp`XTOA41KWqZUuc*KL=y=b5?*tpj->$uy5g6L@U&klg%iul3;7@VsMhJ|Ao7_v`hk
z>Cqt+Veh~>LGDC%h~u>@)NYFP*|2Y%WXHf^X}_-tIaa$VD1Xa<I!xB#{^xJrhJ>TY
zKyGPJ)UHgcqL>>ID_jq7*n#toKOgg!dw<u<oeatSHJ0!NU-A}ObWCts*#-m3jf?=k
zh%)Mzjd-+SR7XQ#GRzGTZycXbrTRC+@IOPqPxM<^UERft*(N@h;~VDEk2edx7ZMet
zx%2OT4Nj1Db|kzhyv)xa>S*q1_ykEU199~RqGpluF(SUXAk4Ltc3J^IjzwxBs6^oO
z)Q-Kga?j>@VG4d5O7KL^rCQ2o-S!{tm4RJ};ZNdI1Je~e`|zjTa!N(_)yt{&Uatr?
z1j#TFwdho@Q7M0f<))4Et61_?ijT+9?TY=<n&ynn6WLjGLa$ATuX&3JA%iywLxOou
zJTKIwmlXe9&9mh8$CKBEWyKRwmy2~i@5Q>+_wY;+OfBTUrI4BelifU-Az_kv904bh
z0hwvT*XpC_Ys6f}Xe2K}w@dRMln2*NX?McZKQFQ|$FH(<^VLp4?YRe1BE~1U$V+jo
z>{_Yj$&gFci;QEv5gpfK_B-|I;Jx5(zhEphZXqb^LU>{<CIsLz7+kX?#6!kvw4})1
z+?82kWlQp&h+vqeJ&3jelm2lEhe|lr&9?b9!gp<8gYDBE+z1LPlFa1r4!{1Hw%)`C
zPbLnTr9+ThNanj3jkff?a6sGe1I2O7#eeGrVGY%n&^$%<u`UOFDRH^lp?5a@$e#lW
zHSrPk&PQLxB2oRFl%QfXgxITgyq=vC`@HsrDzudu5ON{HM)su+<KLMJ)Baor@+}#)
zid3)BKLQ`b(EdusH0+@F(oIo<!ay=THHRcgnCWVa!oqF9x}Gj<!7gpUQo~-^y(#n8
zq+F71#+^bM_%{k%*;LQ(;?JnuMv|ffG#pl7jwqO98LR&>QoZR0e2uG`n~Wgl;I?)p
zRrBu#`!PuH=-a8IfD)pe{1+AD-fv~iFc_nMkrnFn9ba+1w44<9nq_!&;`#u|koPkw
z?^7|g#$~F@>-@;bA>H|U)fz@)Bteo1FVL^ds;hajzjZ|XM)8U|PbnuJi>ccvqkN%0
z@>IxWu1BNEh)W_DYMKe9C^P>-@gynozN0qn+Ku92ui)&gxp}va^qHR$o)136!UQRd
zsb1%y+^pe%)<tI=wu(R1qR0}AlG8!^FVA4~*vluVtvjEx6dE@pD<NO=e)TzMex$P8
z`O!O0iVfRacI-h|VNlN12c?JRFW;{i4z3Y>m-5JaLW1oQHf5mSY}YQcROm_hadiRF
z@VdK7>!*|J99hA}4Z3LN<H=eaI6Oxow_ZY!PUQ}py9sBgHt7ds2SY2!$Al5}CSwm@
z_SnR@y620OKVm-WX^l?9b9<s~X7b1hjEjUsaCL3Dg$_M|9%Va#o>;9p({bTttw?@~
zbkfakT7U$e2{D-%%LtQcPD&rwaeMZbe+mud4pDf)^I2Jx@Lza3nDJ;JP?9sy9gH-Z
zg|u_+3Dsqq15%#9wcEPmGMLOZv^URtrq<!-)Bo*BEJV}XYPvY`sR*`B@qwsJcKxip
z&i2RO{^k3wd3At}7R=@98OS-xVA*JmJPGm&F36n_l1Uk@;$_-a@rDRYI(fa?Nn*I^
zMDcK7ZCf)0zHK!KKfZ!?;)b-c9DQSmlVXy0)>Sr`;FCgkv899F&5J*Q6GJR!!oV56
z{Va@qcx>#60T1N}>izgJ`|;pJ5G&+d{=QzDw8ea0>i892=z-BDSq#C0w>lYDe%UOd
zxW{$T0>DhW4?@I84!WB%#a4x@f7Ik!6W)f%7BSaZGj9Toeah@B#Ykqc?_27&xwB|S
z3Dw@C*P6Uyg2WmGcBIPr8Pdm**(Y?fXVUh}T5QI*dGzr%*p#_#(ff<`5Yxp#cM|00
zi143rZz8>&z@@Zqv}tF6T$pwXIQ0BBC&=+seqcWiGMP?LAC?{)*w(XNCK^4(?fxiy
z*l*(<>hNxYQ|vVYE$DGkMTw<#`%}yeoMcIp5DvC8#^$w#4Dmv2_}~Wur)2b-GUdC4
zdgAIdy89?&H7EzI3dZk8Balf+c3i`X_R)}Z%NanjYPTcew1#a|&ba}H4K@22!DRH@
zH+9$iA9)AYR_7MH6Hny$acu4|uN5#ZhLE1?OBd_V`x%WofSS6=uf(d?M!&)uGXgVK
zl2Iq=;~GiECfdGwMMA@aU8Rqyp63+hCRgl^)yR_N#oDeaq|WvLA)r6P4c~s2>1O=Z
zh|l@-0~V7*hcGkP|Ib(HXww>4s?LJdF$6$KF`tK#??H})MomitGHm!swZvNyxYa>F
zj@4%ILXcj_CI#XITkY1QZ|}@&U47RyllXBqhGBy3r=lG%lMN?KzMcP+@i1hcI53K;
z|6%8UBTE?nWfZSj0-phzamUE0c~V;jx{K8~E%F`(oN<i(Xi^K|PL8<6(%Y{OWMM^l
ztq-KGMA*m1+O4!b-42eD(EWlrJT}9%o7F>G7g907e$w!wT#RO%>%SE0=V)TN1^^h2
z@O3uA-gkxV8bpI4H13+Vmtjm_N$<$Vq6ZZ?iST9x-keHk#Tw0qMhVWucnW&<Iyns#
z3`AH)68jy#E*laPmvA1x{vq24+I2*5j5W1)9gKxbp<5T`zR@5frhxRROy!{d2^~@$
zq%uZrA#1rkU<Nu=sWhTO@4JCdA1m|4tuS&=*gJzW8Uh$|LeOLC^>%P>der6hdhz?w
z3FD~r;Wq{LK2MJ7!fyjASpugJ;x3Mbh8zcEmI7V@Y|aU_gqdUo56SjKKJg@$9$q!o
z!tWI@M@SMI*wh=eRGSPdUo2r2E{LK)Y(D$!PP+<siYuHM-ZdVv{;8XjTVE{x7g&a~
z@EL{#$uA?j;fHAL>xKF0Zh8j^(@IDdZ=^4$IiT&MWK-ILVWkTxyP3Sk!Mq4%o$BU3
zp8>yY(4dm~egUgG#WW21G3fCJ!+isLU^M47@F~L5Z$?kXLBC1TE?r;?sWkuQOY-Sk
zG)4S?jM({rMr;b-K)Z$dMQiKlSESaeCHH0N+uO8X_BfcA2Wr3Wv1uRvN$kO`iW|3a
zTmRwJIH}^n6A>r7q#-+|Y`peg`eQ8h8liS6e1SzZ{rn5lZ(Um&95q=E77Ah;b`@S%
zZGkf3t8bzm0&nFK^uDJ8*UVWAhy6g&4Ui~y>SfQc?N12<dc!SDLl5980|&AW^mg0`
zzd!O$hwcQ+@;ehbNgVW6x@hj;*V4O~Rk%hsTOj)uXdXJ)BV}i~$W_)8Mw5+<vI6aV
zwV;pf8gYPM9O6l8t_q$%RwQw=3AfkaRqiWE6L!tUUF4LhkuJTtFl7`hHB^%34miYC
zdMvG6`#OIudcWKoH5Sy^@iXw-Ch<E5XrZ!tPmf+{zl~);v+ew4PQf@aIx;%i-m>9-
z;kcb!!qYebKp@L4+3YU8zs8~0^>2nGlTnGCx`7xdqkw4o6>Ucvq{$J$u=t8*qOeU;
zZ!ep`NI0v|XitQkt`1nwD-EpuqqgInpG6O_uATf@!8v}VkB8hIO?WDE-sF|FFG;#q
zq{BEd0vS&{ogukrwhW;pI&3FQK`v+7DeW*O_LwV@?nIE+Of-D0a8RBbUm^OK!ZRdz
z_gJggAs%;0pR{g-lf8Q#{_?%TRoP!k9od5Ukfb%jz!DG_U`ni3F=}p&t?CqnaN<Zr
z`F=&*q=ePni9wCe{~UNP@Ou7kG>oF3!nG%?YLV^grCqFUaO@9#)VDL|^U3Fl?JmY9
zJ30ckztds3`#~&=gF9{9#sz!2uB55c$dH$b)!oPA+s_MU2`0f&$|u%C-&}#tD6jrR
z-D%Tcllr;)O7_XWiqb2lcjo+*dhyGL*x!lj^`qKli&bkDj9%m78I8LeHqnfr4}mvQ
z<2AJnc0v3_&;_w=G?_PC<I)|@Pvz@4tTRugo3WC)(<?`)k*y}x35s}cw{tN^KKmhm
z)YM{=D015VfN+Py=E=~MvB02P`0CZWnp%HrrVGT&D_Sy(c@Jy(^@`%**<Y&@wi+AP
z5M@v2Y{M3Pwz|5Bl5_cn>Ed)9h9w{IprAWEr%p?7s3j0IMwNkRhy;jOoLAGL0ij@y
zu@;X-?VInD#<OsR)FiJiD;eTDzzTg5oWCilx%T?aU>k)}_118>MO#qR{%GXgUt_u&
zcL?6ee92w%%nxGyzjdakZ}a~udx((;v_=k^BtigxaK92l&_alRTO=SQ#nH{wXEgch
zb&6-xjjJcpOULl575EpBR`X+djuwrHAFy&)%nBbb+BZG3kASk{>RrnnnDwPh<=nQj
z7$@O>)<xGH!aijpM+k2%Bz$=p<fnU39O62vg)TlL(ee@Xa~r8Mp?uc7M@}O~NU#QE
z>iv^lyvgJrqF>k9mISZ=(S<!Y=o2&-sXXH9%#Yhs><NvkqZss>v3j+I_O>@1NE(eI
z`)?haa9u5hkB~5L!=x@#P{l8{)|3(gus4-<)tN}uE0ItDgA5X$S8C`t?NoziB4L0)
zc62#h-Dk+-_Kww>@kT>kPav|9w7ipIfimh+b!lm^=(eq0@u2?u|I(+LT?LH-$O#(l
z373dNRigy?ei;U29`>m{dgzN`STuwZUPa}zBmE_5a-z(4?oPPIgQT!Y{P{|R?+<X_
zRY-9ieN((Dc<6Xlu16n^Gt=RED#^JPiqvO$6z$T@5aUt?W<trw7=!nvSy{CWV7GpN
zRT%7dpw}kvAVq$OXDd2Zgh~BfL}vx=QaL9~9eN!UvB{&=;2{(lo?@<8;AQ|Ty;F4<
z{Br6?*bFHL>grASz0fj{Yx$0O123ZssB7AC;ArBe)dzocuY_@YI_V>^hy9^1pt3i7
z@*u@5$g(_i>&2Qw7|cIbP}(7aWN;eY={a=}bctS*O`(TN5k*V-Gg>(&B6>Gzx-s3r
zRY7N!VwRyGBen`)9IUpL;;~xyw6I4$oMc`er0b;=cCg)@qLNqhSML`L1!a*g-VLsr
zh{aZ8YhZ8#Cn^~;6|HieG+Uwh8T@1fEg+e?M`7HCH&%2CG@i{QN-7r%I^Iq5*=aK=
z<yRwoy}f(=L?8avagJ*{%dPME^pFpp^ySGZEUzxTKijm1aLC0u(_b;T!YKoD`6@uM
zF6(JH09q;^TgWEVs1xeQClh~;Y1el<EWV-1EFRac>X~uvSncR&g9Vt{WQ}dlM7Ah>
z`fZ!2pz_(XXFMGZyf$%AfHp3NJmwcW<0)O0FYO2#q_Peq=+n1?a2b<srM`*~)3qiO
zpq)}NgfgYZg6UQ0oJ;qtE=NqwIN1keS<`wWN8=XKMbY;!YrAn*-(-{qM!h3lt@&Q}
zPojF|8o*k>Mwmut;qNYVzv={yjxH{yg`zBlfP|Knh0L>>4L#33e~R?i#5R1TK7yVt
z3^X(7<(k%iVTp6T?}E7H^GX>(2dbWoplRRr2ZWxrF763W-=ZfZNVtHFA%ce!pgMMa
zl<!g8mx!l^q|@<?HF!hRuTzG*Rp*V&ofYooeC)ICIM?ZV|A=tw0B`g4HV@=YX+ZhA
ziei@OaVrw_3TH28>gtp<|38XzyT2G=UWj=j2F{9a-at`lu<<Fc^XJbuTK2z}zwb*k
z<gtsndv*wo*Ze-Y_Nx}t*E?>Pq<Y1EkC}nPJI(-XRMm#6FKBy_k8%S=l|bO9c?R>V
z>xNEevVAMle?YNP`BjlYa@}Gn8!y9h&r?}b)9=wyzkFhi+x3nDlC!`6rJr!G2#@Uk
zheQ(QJzs0I5Z<?=9?CY<U&a(oDkG4dKrt^{5VMuXUpoea`Hoj`(r+vrpI-MN?ZySx
z(d?gSF5Oq;a;rMaiq@Lm;2e5hnACOB^fe_s)X5nF(18;LIijG@PuuP-lVlwah`Sj0
zAu;gZk1AbF6R3Zr_uuXA_d37s`=#4rxBXvMYIg_{5pK{)8LX)#Tp^~`+RE)EDfpdK
zC#iX(J%95UeMx;^#TA+*n;L&s;hrR!&22d_&v-j)=`M7AI`C<l+wL0UK}>Wc*?YGa
zT(9nKJcNC>Zd$z(AU|uOFGXHtTo5N5DEu@a>wEXskJ=+rzVkWSy-{xE(Q*l_KQJG>
z-^7QXdGhOvFL&#ys~K0OZ_$kxN|-A+(MySKoO%DJI%C9D`7=QEGn$P3w$xTP2tUzq
z$dD{4m1g>oSV8uB8&sX0Qzvpy587265yCp}?c>M&eE3qxnnz1@Kl}dgY@dQfuCUar
zS;~zX4&x&BHWP$T4<g>~X#Xe`Vn+-^YLxCjx|!$!zy^PTpD`d3I}`nIHMLzcdFv-#
z@*Ts@_v5z)-wlDGAETtr=1y+m&>(5N)!;819n4$I5Rg0<+UHz&O@3gCvYQ*0Xfo^e
zATL`R76ImlAS2wWy9VdjS%p!aEY!G}VN{1LLwk??xvQV&8|IcvY~XiEdS}Zl>i2~=
zbbsQo{iB24Cr;>KIw+{EH{=9xZLQ`JU&16&<Qr8-)k}M{w!ovmuh`xeb+%uaVH5g8
z==LTNAvR)i+9=4xGkzw|XwE6gt)?N_wKOEscKXQ#DXVy2VndqyGl-~L7G%{+3CIzs
zA$FN35hP3okJHRZBviR4AQYK-Bj+Z0jn;;0(F$5L5it~Z;Z}ut6MxZU!@geYP&XTB
z!i|%%6KGEOpKA#zGcUM}k=GvizB^GgK{9(`^ng96^AD%wKk&ML8swA95SG^PPuTe<
zssA)VOk-5L!1dW}E(w|-<8vc;NJObg=N00#=`*W#j__r9PRIHk2t{sX6Sk{QT>CM{
zD!wpKIh0V52@;>Q1IoKPjBg0YPcXh^DtBsrrdg`C0^}nHzcwQ-irLJ$&4i;Z=pl9g
z`3C&jfjUAY%NLC^yfKp(Gy6J}MrQf!tv*-F&Xm^|x8_0<-uv6WoX&5ve$|`zK|u9c
zAA~Zb;71rHSgmaZey&dgwmW>-j0n_I4}~8K*k7+%B<J9HVKUFam*LK<AK)EG9trk5
zAd1Q4*8KFFQkm8DbAk>53LO+jRIm0{eu)~YU{>E~Ni#<DrP^W;*d|wdwi-G~I4v9_
z6hqqX%I)SdK$u%?PmwY856eP`t2djrdW<uSBTx<wm+RH_X-5yu{_C!Fa^BV_v5ZqD
zIQ2>bylI7F^X_+`G#6}k3(q^y_N}igsjn^+1W4irNiD%RUg$B(x)jQ+MWrz_CVKa3
zU*8jZKj|G@tE;Ys`?&-*JB&(~Mlrf)Zh?gW`AcKQ7nA&D4aQoqu2S0|;)QVNuu*o<
z(;2o7CPlo$VNDnt)mKFcee01oe0Ct-roqkYeO<q`7j8yw``xqdE1dTOto~PoQf~^n
zMXX-^rARa~NEa}cvDPEbIyoOETkre)zAfFO<N1TSb0%JY3^jP2zk2V;??0Y^(PXv~
zincf>db4&RPR_!wJ+p-&whRYjAO;U}Gn|4|A4hLUiEG|@4Zigo^JK2yJ8ezYpRmmm
z&UYqpv1^9Z`?`gGDK@6{XAatg(mx93s}mx^{10U5YEJ!sQqBOa(QZw0gATnB63$ap
zt%<fH->k3B6q%Ia8gYwhm+v>)+JWpO?v{hIjA%?dihxWG)#g)yw!acAR3*`tB%y2n
ztmV}Y0*`*1z$?5B;l!zQ>`5K<)`u8T2D-(3DiX0*LN_Pw4yq@`$T1JaXpQu7%0mCd
ztpQ1>X6?#+jB>t1zO}nD@17*P!S>g7)gmn|9dpbl<Fyf=vagk-1%~e8o6u^iBfrOv
z9sFCzXd7J4nbDoLfT`j)Ktt<8MJ%C1s5P)qeF-9^0L73LGkN+`{m3y#`j9jr7Nk~d
zYi@;4uZB=&2jDmbPO2{urwT{R(md|8HhHs61+_KlvxXRfTZv0Vd7HF@a3aaKf41YY
zy*vaA8Cn2Wv|nrZKoiHfOdet?pQ7zSz^z%Q-34HhxyG?NFX{9b!6um<*|&Hxk<IyA
z<C`*W$kN>Gr)smF)H)~pF&AaSwd19;8=hR?zf7E!hu+h{$gAL~EF8GoA`A>BmuQl-
z>)xhK+UM?%WR0K$J=#8>CL}l4^tt-nMP6MjAvg5Lc-sCikH5GC8KyU(n%sn4LGN4;
z0hD_oYZ`4y{d4j7rSu;1Chbb}q^cS4`y*THkTwB1MY|ih93R2)8&{f~O&H-_D-Nu_
zH<5kL&M!CM8trp?=!F1-oppz>2mWKBtf%@NZp;YY2sk7b`uxv;0xyszLBsGnn!B)J
z2_!lj*=m<(+<HDrQ8>xW;uXe6(G=(dFxFYxbbK)_^}MMLvP!c`9@)<@oHQY(6!c!c
zF=fef+%<WortfO#Oe_Yf!nk_)h(^GFXQTuEn<6rokf$aUOh4e%dyGcjdW2poq*9zw
zH%0ub>Je<buYXv~C~;K?e;rL%60<hYZm&t?+drOmSIjb2LH8~zlM+&t{xvTq#98ML
zz9f~8kg@14&eSv<B9j0Yw%7K6=szDO$M|K9pu0{UH{mpK(ncJfDctj-Wo-WzQDj=U
zp}&+I>k#_*aPhkqng65LtdL03<rkr)<HnyvVdGUnqJ%MhNV^w<rdQl2(3k>}Fluhz
z()l)8>4&~#tFNG$iYi}}%u49h8mrGEMt3E7*jF%KH&l3>Rv7V1XdVbIuAuJ+enz97
zp!RyMRM|J(p=EEDi%93+{yL|FJ;rFXgk@h~Jx&WKgWHuqp!TXmv;c+vD}E|duVFQc
zmGDy>c2=l&qHUwkBO=jIX$)3yZp0c++GP4VwWFdU!Rn?gd2f$W)aFswqjoADVQceZ
zifxLk^U5c;U_q7s6$9}BZG$#>q)I=S`3%}g#ftsS1XFc{!nTcW&_C;Yt_{Xe%%l+$
zG^PM9xhq5V;3`kWOa(3TV+CasW;^p2^;#R+H`QLRSsOwr2QlizM9c6r;>uWh9HWuI
zkc?uX6&$~i7`$aj=UOu|qQs4y6tO|WGLU-pfZz(zb_ob~w|)?wU4TbfG_DR-(zl`^
z0Cmu=<M+^x)tXF-PQ{<scJV6vwsHHflt(PJvh36Qlc6=j!}51%n;0-6VIpP9Ynprb
z?IDZ}vtte4jPcj2J!HRtT(L9CkWMcfr(=-FJ2YHq;jpv9smX7}fK7~lvn}4<IEzv+
zE)+#1<fl+=Ob4%Cos#^B8R~osvLA3_#T^4cwH|(*ulhJ7rA|mdTP14l)JyY5+FJ;V
zwDw>MisZj2BJIkE2{2FAnyB|Hvg2l78kAl!Viiu1j`1C`NtQ~c6`M6i>h9xiw$?)|
zv_>c3!fnuoso^v-Vi`JsFx^N^l8sVbWX*()>I(`(^{P<{1cL5tcZ79Yz3zgf%-2@t
zndGoj)<JGIhCWS&pO`eZM>=fp9@k_LL;kLhGd;yUg&E^W=hT~qVXxm%fP29n2-eyj
zlCWud?PS#YypjdlWOBn2dRGI?S2vdX3>8h7nf2L-^#JW>ek&q{J9K}C-kC0&dMEd~
z^fR(Or(Qa()c*{DbTMqIxZmlJ5b@et`GW?hAi+B<!`&V+)?_y9CMwEWN34j;(3jFr
znPu<%(A-y%cTtQ}Z^I5C-)eV<UKX{#T0Kk-{*1<0FY=B2Hnnx`)bsc=iCud0rx2lf
zQw!YiWue2thasdIxn~(_dv*Zy&A;nYZ<S%*&ME&@FRZhG?!#BUBUFla9Rh6J)hKD&
zv+L8Y```9e0GOMwl1h(m_j=#WtM_ydiJpwbd|+w~2yo+1HFp_7gdwqZS*9XP8Om4>
z+*e<f9_?a}_5ii5HRxeTzFv~dVLqvub92O@uWqxXUcYVLHmUCPrE7&j{G~g30|wM5
z3WKgk*1o9&HS2($8E!xC5N15r4VrUV1W8&A>>asK9vxleGvY-W_6ah{o>HiY?Iq(L
z?+$NzHeU1RICcrocbDtX#?9=jk9uYuUEOcU?v`_=EpL0Sj%9pJ0Ob$Vk~o#7@YfoE
z@_|-}UCfsr0CKje(xDoWvr^RFkI}F*NHJ(rv=+02>Dz@L5JG~QaY;&9b=1K|KiTMK
zkCxiV#G&&8+_IU<J%tdkvLAvJvic~*?SH6aoj@H6U!ab)bm=1<z--WGG#<t;wC#@Z
zDTX*%=hS<vmrtO18-Un0VfAJx8$)W{i=?B9FD3;e2hrS7=oT3VnQb1J;sVDcYVBv5
zi^+l90GT6!IPlSTz1zt-VsFFn=7bV`X|WEy60QsB6x1~0r)2e7BADDPQ#6PCNVBZ0
zRAj_Cc(cdsB3dgWrS_O)v(0tLD@DwkbpLg&?D8PIY1UshZUOFHa@_1>x|KlzOcftL
zw&V_htdTB+w)+s&#WOHl{i}k>gL%X^wNL@tL#AmVl!qeIN*J-m-PZPEdB#oNo3Ac}
zub8k`B1Sx4y1jZmskNwRA?`?s2|rTfCIp(xIr-*{MJHtTj{80ui$b$XL;dNC<@K)~
zVmfO7!9t9CXbr32l1y#;!aRVOPUh~)Rh<jLZ$$_<@s6ndD`iwbv)n>p2Q!BmivA?i
z(25rH#F>RM1#}~TN1M1^l9kZTC{3=iq{9Z@p@j3iXGv$DR(DTNM|7;!oBvCpuigZC
z*CPLJ?q<sQUVgBK+>(=+`6!r_nUp{ys2sHbRGwP^Du1ZuA=;E{GS01$jYzXeLzTk`
zR!|kVB+#*4Kh(WQm`$gg>>ZG4fiKenem5xtAfX$GyTjke9sY9iNN<A`%^zmxc7me~
z&r?6mxja+MrSm%1k;XkEPwn{8XE+E6ejRk}+VUM9t_H77zTC&wp}t?JA@!A>&}b9E
zBfYrb3Jq<^3uwRUAYDjU8Nt70@|dIe=!w3S;x;mMX@`M#lH}mVLLm?d2w#j)FIeI?
zQaxJjl;E`Hi8V4R+u6!~>^*Lho>;T?dd=$_7cA=}*k_Dt2wTyx2>C+BMWV>QiMf;?
zXh<2wHgh(C0IXOrt*^#+;aAWikaTTjIaMW?8^Od)5LeNTqyAFt((#<Dw`zMsM9sB{
zFBbRZoO=+t<Ze*u#Gh}2Y7Sw45hD~&^?ERz`CCV2suc+NRRsA3g}pCoK1x^w02I&E
za7VvsX<IWt8E>ZelrpMf^`(tf(Y{0?(>dH2CxP+$C7nK13b(8b!=_-8^T5sM^63G~
znUxrz$~-0@*8%`V+Xia+aw3u|F>hr@k1|_`cd&X|bG0E%bh(6E{Eh0RwJ~iioqE*x
zS5?$DZ-sFSHVJR|4~L>)fO)?DSrxxt7~%Cjuh&{`e`)wlF)Nk^@7$t=?mEI~gza?+
zj%sof|7`%c9+Xz7F=!e>@If;#tN=2HA$|{V!W|fe>ceR1C<lPe%A3&$=hcX{-H9H8
z)S6-xT<e*##_dH2`+%j3+dXa1{L$W5j%2ODLK>rm&$vvx4u4bWU1VM8)25q<A=sxf
zO~Wm)Nl`9ITn6+lH_(=aN{8&_M-2T>DVWJNovBQWdR5VZlt+R>c6`vh<EK)Y#jxkO
zp3&+aBj}cL9_cXhL0tj1(CkjwLQm<9Au1Q`+o+Fnr%^{UQ*k2mne*dxcAz}W!bQnX
z$M4RX)2`H`Tse&&(oYJPuW4@BR{K2ey00w^eWpCCJB>;=LKMh<sHgs0C!gQ``61@d
zaky!~iIDiA)2W1-={DRlAn~wTGTs6n6$Y7{%_vK1982F!#Wjy?K@Pg@Zz5F%*)~`T
z?_^$M`ApVkr%#9X%DgQmCCCtHMxM>jSwCX?{H2ce4P;*<*r7;}lWT*=pamgI)nV^R
z5+|c!BRc7Wo)fRJ@!n8=UsiFq&?_h>@qz68$R_8KV7t(U5(gWZq5JLvS9!qk7kQ(`
zmOsAHRl!C~W*|Q%$!{n)N=WVEC{&>=;}vEVMxW-QFmER6sP{cn-2Q6Ed`$wkbKUDQ
zpNZO<q~=M>f0M*-x#XwbJ|o_~f>6WR-@6-?kE(OFU}V4oONXcDs;N;!J+yeECbz)^
z=p%D2m{g__odA?j1{lPeEk{#E4ZT}(eETy}DIdB+BZka{-XNvL!x?s#wU>KW-@nG%
zsm>awlya+|l*D2u^bRdO^!<0Y<Gwn)aS`?^5S<4AZ8i$|kS5WZxS*7%S3*04n5AEO
zsQy}0X5HZ`8%cUJxX-dWcQhGiX^H>R`|uT^u;#9F37UH<t;Lz;YJWOR7LsfE<$$Td
z(!ylDzl8r+BQ6e>8Zv2gcg@s$Sn5d)2QV^K%7+6sfU>edUm{T|=_KuNkJ^z#t!`_K
zYRv;*%hm(NQ4nirJBugtt@yn*SzXLSiDaX(ocjL!(vm@9bin$5*%%&srKfTSzlHY<
zbelXgVfKBEoN=SfheYyu*H|3%w@wvb?zCCUvR+wN8Km47%wH1TVP)SgJX>8I<9eod
zYJJcu4vuZvoV`?6dkOq}S{==mDVj1yP^U=$P)~%R-Vt<MbwnMAwiS+%xYeJ7bFA(w
z>}4(~w2;T+c0UgkvoG~oPdZ*T1xfP<>_1*4p1bwSZzei_P5d`yolr$tVDmxAYCvxy
zJZo#kzU>4yUm9C&Ho(!^PhvMZ?2)x0`prZv8rfnOkXE-0`P^9Jhm8|UlWx^rVh5RY
zCVirt9ViI1s$zMKM=DA0pA3%F_h<I4)t#5CV2K)A#mGqj%C<7Noi`f{)iDFweIPb+
z7a_~A0?bmX!C}-!(b+f`mB?0L1t!e6!oE*5XN9>m`<BBV*0`UUZ|JQ2{BVdx44%pI
zA&rB8-p>OA_haedjK&5&;zLBug;NaG@<!Fy^nURg+F`^6LWhxdD^=jvJsToUT$pWd
zSx^W`Qs|TV91c~%L9o0II~uLQo<e?~5M8goAj>s0*?8~s@%k>@EFVtDE*(6aH*rix
zV>6t(uARw@r)0S^V6rf+F^o|b1Xscmz#*(gI&WFyAh<d#Gt0!a;PgQY^|>OyUWQ9$
z7^#gPIzObIGdwYC@p3bM?zC{$JM&rZ73-F`iMew<0M9-0-wy%AC_prE)(nO5v;ILw
z<5rLdZf`W(f!<UdnuNGTqm)sjniy-<R$v!E%%EEg)U9JbqC0ET!(@~shJk~JWH@T+
z$ArhdJl{2>e0%wUXxFrMH}lic_1k{c`|ATFiooS~MyL#s*B8)#W2^v-6@NXNHfji&
zY^wjLXSxIAGfT<00b&;1Ur<%wwO4Jx8W*pwvzHRqPvE!R+cN*AprlRu2hyLJFmQiy
ze&v%1Pm}trIACW{p`L(^9QO@+zX>$L^ivo?!{9NM9Kkkl?VIh?MdKy5a^vz4I;Nj<
zMaDdZjFgp8?WMTnx;>@hz_~N7{?{1N;YiQ!Pk+RAUSNb>9pA3QI6y#rrqR9A@LbPm
zg#^ScBbof{Q<)5Iafv3SVYjb30KgTV0>G6<`^!{p|2FYrwL1+X&D$@7+}Tz}wXw7%
zq69m?NmBmJC3kmrCQtc4y{Fhq+3`JQoN)+N1crpb&1y|3oDe0+FO*R|PxV{p*`ICz
zSRI&i^+eiDCr;zar7vD|MU-V2fCi6wBCDT!qd10eI#<xJO~~DYv-}XVoz%bAWMp2V
z_t(#`1`V*=g9#VOB2(@11%SePbXMh1la9BbZP6qE>L);Eo2CxHCfSe|ahijy@LOr$
zD3p~CQH)^3;VG0jsi8w4H?Ur0En=pHla1O+sEHGwHsgCjm$$Yzn{?^Ve1?_Q2T|$u
zfE}yYrKz;qyDNWWV{zq6O&&kkv-a7&^Zg?|@2BX?M+WO#s=iLVTvhjy7qlw9z7P31
z^A!QU^AI3nyg{YyFx;+8+lH<FTc;`60lYZ?Aow$Fb0KQb43;%@_BW*Ul(v5bdlJ^*
z)Q4r5MO4qWA5pUR9So*TaWFJ=W_tY)dU?{j&%r)s6NNQMK0ooTuI4DC`Ggp8rp!A4
zG)71i3I5jkx33OkIiT7&L!TuX>b0KAx$IHQf@a0C#eme-rEOnufzxYg*xFMuvy8q4
ze3?8(JJ<N3y(bZ6DJ7_4jI^YPke<_atWvQP3^X@hndt*}bc<uP4KdqZ=_$U9C43JL
zGC^FU4^32a(2Oyc&b5&<7()Zh<+DI4dMRb5I-HPd_I>nufw=MS`1i6efXi$_kisX#
zZXiMW*Hq6(-=~N?zgTvlCubtYz(r_t+>#rDV5XC_+h9f>XTj+H2)(^p`T$lf1NR&`
zU&0piKE?vrYvIgDlAA+63fIk(8-T}AeOTjqzm-)AyTe8=BMO0X?Ij^6T+jJX6m+G>
zh2<){gdA4vh&qvTgPUw~p4*-ae@?J|#JoAFqfG)=EC#xJZffYCGw6x-%Md;fM3-QY
z3;>@5ERw)#4z(5J|1Y|}JF3a^?;DDWh!7`e5aNWktf~wPn5d{o5ph%y5K^Veh%vQ*
zMhJ<DED`ckt5hhUB1=X@2nYlMgi!~w!xFL_te86r;Vv0{zx4O~p7(vudES5Y9M3Vy
zb>G+Zy}si!*30P`!gdmGt~t=^DFvu`jdR|05|eg9^P<KIedlb$5U1CCr<PBdHu)s-
zBZu6g@m;vVH~Fw}tYCW@7u${Ond?{7*7H9V7oYzmtsrlQSD$~XmmQr<x@?|su;)FW
zZZM8@@#+7(amdg8$wbZB^t2VN{X=ng3+{bbkNIK+@|oL085KU#<4R9@=X~!$G-51a
zNp<BJ67yRk^--z~dnd*Na(!HLmP5~U%>EC(`rz5Rt;aw9<)`Rh*54EBZN9#EaGw_K
zum3nStJlHu;dz={OqoiuQF9EGBtt7fV2FzZgBlNonJ#PbB(<7tLZyhH5of$81zM*!
zvsd7asH9!U7G{cyP&9}-?_s*mt2;f}m%ArDwU#yEGn@V<H|7jUBz1Pxn(aWX+f*x{
z7MGubXZ%WCK;J+$RsaQ7W2oANItuS=EI~ktprcty)fK{VECw^DIzHgBhuW^V?0oo^
z%4|x{$}XC4i0Zh`*%fKM=(D?3<nL2tP)?#o`*mL-y#C?;#`M3n0=x#3HF~=6RWD&E
zyi;X{1XN8qE4Nao#_?ZunsemYEwXC_1H6^$fP8;R@nBwU2`S4;E@QfEEuk`fd+n`*
zj@4JEj>tB4RajcE5m{VCiEa~&+a8V!aqZbEQzCrytU8qt%o_ZnxTt<a2=2H-Fwp2g
z!}Kuv0@KJ?=BvUYX$kdM6xXc5^m10pb=r((oo27nHsyuV*FKkf-zuSAKK)cqE{V&k
zz4SQD#|h89Trv<!H;&~!!14Y`p67KqVg&G2O(+KWsK|mdah3i;prx@H@1JYq*(O0|
z?m__lv5>j*MbQsO!{&6h^v!&@m)@GO8Jm@9^vH_;W<qwbx}x_HJ1Z!EbTII;;{`3o
zlYW(xQlppqx7Go<I-V<EiP!#H>x<4V+@H`(roh)dQ76G`ioFXMOy*$Fe$+EmL>wGe
zq@b1z@RD>#2_k*a{ujo}8P_8)L&?4jLn`q=x3zT+lExFPB&u|g3~FqX-|~v88v-Bs
zzO?vHw4G;S@)`l!bP}A@VBnpm-qfbR0=eTL3UBGPffgf!rCMjNw4p6m1J5=ew@PD5
z?-*TD20%__^XLl1t7WS&#&{VR`O!DY)g_92F;Ig;<WKz2pr(|<eb)RG(ax=>J2~4I
zHg<6w&*W00Iy}1V5KQwDEzMPkQ$yK<x<ZVU3E8qqb`zt5a@7iN4lsDH2G&~D`EHkm
z;sx<v8nZUbv*V%E<Tj<Ru1c*iNj$@r6XVW_<*g5&yhVKu|E-neP*pGxdar&1yHDj3
z8KD28)<5c%kwDk?(A<(J4H#l`nhr#*MUXjTG>{wZq<yD`D@yn%n|*0YjS$_rop>W?
zMclTNEf{mUS5|;t`?#lzO)(6?Z({BXAf3pP`Suo17tY+DvKuZrt31*tI8?>f^!CnJ
z$}cc}(f;fGzeOzQ5L5EGWx7)=<x#X;@h5sm=|)?P7`K^v2sQT+|0c}>M9@N98WOk@
zF}$zaqKoE4i(^iIY|wn&!}h|21#Uco%(_-|v7?pW=Xa59?Bkv;Z!h5dsjX(hE(Tf(
zY=jmR1~o?1l}FXrxIZ%u2dG>yD@r&IGY2ht2SLw8M-pRX>i5Rqp^s)EAugf1ddP8c
zD%VpVV~X4XKC_3f^y1vGOgyu2>n_~8h2jzi!G5`0l3ldxhKg>sG{}>^{kzMab*T@-
zNqTpi3NA0bV53;_Fk|!Ae=gCE{b!Y$SP<dPR;^41Ix!1=5L$<-<@t&;sH1#%-kLBO
z#9yJ~FJbaJ7SsGdF2^>(=h-;jw41gvhbr60uV5`|{JM{AB3Kp>;$2yjf5X=Nnb~@7
z@40D=fiEcV=0K7O`2xBb-e3NYaK0kw16k%s$JAwbZyV+LO@zToiEbN48~q|=G(y#Z
z1NFbh)P50$$6Q5~@H)N3xCK<AdmR8)pNx*{{2(X9+q+)Q4IA>5@*X=x_2s1$kN<>w
zpYR{@CvJQ`udJYLsX)VFJuD<Yd3~?JOn)o!24k5jCVFjE>ZUw)ij;Njr=EMqU%hR8
zivAd=`>$)a17F^Fxc>wgUeEg>u4Ryk=z5@!^ebd&d$?RFvAs$o=FtxGefGw-49#Al
z1s70{64nldcqixkfoST0znk^rp^VVZ!SVJ|*HwPMKYLnHwe6Yfnq8P~E)*W&Fk`R)
zq*8DL<;ti*8Dhc1X^(&4?dm+2MM@a4ijS6h9Oc&BCXM*`_MIOE{>}0FbW-~sh41<E
zn?u)?YemOsQ3X<ML`MW{AtV9HfUh(=sDwlEHl9}^c4upf*i`q(p@Y8`D)BjaBc(QW
zbtI4H%LSp>x;rh=`9xQPcFvQ@UAX&%GL~u?gzkRjBGqX^1+K|f3r&@Y&2B9!$Hd!n
z6E)kpax(L3@yw~PXKzD{qDrl;*d%At<tZu6?fW$E_*aLyi6=2ToU}ZZevHN_t}q>@
zS4R0y&|@vQwKf_{)&4HFKH2dw0HaLYlA&5C2~Phs_Y!$KlIi7!q?C`PVPl#mFB+SD
zlYF8~J%EkqK5*-)?#Bq&CV|{xiNtE_IQLnaYB^VNjsLTp#tlJF0Sxa@VbQq8u-{Jq
z_uT64NNHd<VZqqk`Aoyyvm0to^tT=L+rRllPVaf&t^u9TGR>0vNV!J84I<HAFt3MJ
zg<uVYhx=v*$k(Wk#F=Fpinl~#0OTs5R)*vwn*5wVH2ifRjZyF>!oQ=+wQ%IbV9SS-
z6EMCrZ~9653gNEo2KVW#Gy!qmS1Y$@5e#NXD7+33e00wlp#qxQkmH#<c4T7P3#-F^
zDS?th{(5F2(ZBqkopd^69APC&`$hNF!Qz|8e=GXt+m{XTM|Z4`y|&n8+5VUdH?)5E
ze=t1rq()6M*n!IiD2gA|`7^e|y5cnHTEs*2w^o~Vu;?5^kF!<?ogrVO^r~E^!EYb4
zd9$2fB;I)f#kKgIFA@!Rthi5Gp5r$jC4K+fY|YN=H6@kle8Er^^J`s&p4?cYhxsS!
z+!cBmQ+1B2W4S*ImYzUCJ|#Qh6WFv(Dq?`AJKGkuBFy`lzX7oc?}+4Ix9eCA<SuNq
z(@1D~{oR;_EhW82%D$Z1wnvDQ$O?zsLJPx;Zk_*JLMfF>Mt>bW>9}HlMq-0Cd;fuT
zS=0wh?6lQzwu=~`6gbc!>7N2=f5laR^E#=_!3-L#OmFtrFCTaXBo2_^&VjWWpw5j9
zL%K1wriq}Bl3HsV%5uh{>T`-!yZIR>`>mv{xdnqm<3{FUOMi<SLLEiFW{D%L>k-74
zUnYr9)1+rE<j`9f<!(H$WvGYHq6L#!ZzOMn_;QW7w0<=@%hP-deyM8zHnVlL-KtZ<
zZ2eH|`?{P-tU+cyJ2xY*CvpT!QsaJPSC`eLn`^16;kFJT2s0Q@`&%#|S)MP|k*6tw
z0B7GX&IZ#0`i`DRX|yDbC)1;yWOvyS6Yv}QTy}~|Od95FQ>V!!HzXj(^+F7T6%gWZ
zv4(piQon#8+SEJaY@pLriCwG<NeJQ%adHc&G#9}&c<onuf4wDA1wcW(Y6CcvgHZ%-
z72T1l+s4(QFQ+-9yCpj<TNz6@x?)?Skc<6MvsXFW9|w>Ejr#JQk}aD@SM%!yITPvR
zcWGPweW|gBIwMEc>%8kg9gk`BvO(1y5)=vo6-i6>AW_JGfO3Pe4(^@gDA`TgF?pLP
z0aV>bPGEFs!O#t@;?-EhO62_sGrw~z9yE$%i$Z79?qT;d&E?fb7l!$zwERiZkJiE*
zgkKIPu5l~jCtD1o(H3}Rm>UE`#?RST2#e?&RcpId&T`{MGdpwxk_K<O$#%J0aiciE
zmbWrA{X@QxU>K5y-;7i~%t5n{r2?h`+cO%vLXdaAxQ%RB4k+<B(AoLpAN{m{=%cvF
z8N^?+SOzb@8Qq8EG!P9cWCP)fpXBXT*J<CM%EPTy1)ysY7C1C;SB;Pz9p_+}pt>x<
zEuM(_#4QO+>o<11!%15fS`+1Ab_cv>9TTSP+M)jXN4dP@Z>^ua26Z5M`-4HnC3RN)
zSE?PLQwwH6e{1=o?!f;Mg6A|YUb9GU5htZNm!NG2>-splB5UU#5Ku+&>`Qs4C!X|l
z=qL70C;vH3Sw<vbFUE=dV?a6mkN>plFkN2g=Bg<fQZ+Ar2s4(K#By0{9iT9paZBnq
z(e~Dq%c~NmM}m(cGjHm0#<Es{MvMPm5H5aR&aW6Y_50{r)idLqY4o?2C*Q}jx(0iw
zFn3~+;4mAKr(;C)e@&kL1yzU#>;dJfaRw6ZHT6(w9l~8)Y=;}{kqCIEUWz2StTA&1
zW2!@ob(7;P<PN#Dbci|(LoWWS1(Sd`A=R%(w~C5N{2QXe-5!BVY1T$~^9ezn9Q*Lx
zkh$-4XW;!BLf_z8D5Kkjaf+qd+i``VY5>s$3lRl1*PS{}P_2_naD(X|g&&yVN@p}&
zG)<@|%|MP`^g+o`NB6bG(kvy95ov#%>Q?>;%?dQ^t0RFrKb}Kb^eWetES!{X`_j-P
z;cdUd2+02bB)*&AhQg^<6e+d<tcxXODlJJky%LuIr8E5valsTfgc8qP>=JqbcZ0JM
zmkcsl^jAYoU>1ozR7MKNC9AYW(E^b90|eitruy}cWjpI{iAa<c0n}7|19$s>VJ2fW
zrZKPqyZ_dDOx5s+Xi_#j_P?$^z`P@B^ycGIi#pjJIFZJxRYYOc&3c2e?3MUs8Yl*k
zJK3?grS;!FCM;Ji4}ujNCzf!&<|1j-=obD^NdgmE?YPd!S|!DR(G+A<rUu!Wgy!2Z
zMJ-N;Zj}sbG5oOryJu<i?v#xCWu-u?Yk@+2<6(JUg>q!u1bH6XuwA6~wj?P-$-#FH
z_E+F^Lu)=H6>L6Q?i)7ekaOzEc-2PBb|(e@^P1pYn9rxwY``KP14i;)r9W*cvZgn!
zL9mDr%4HJuRBLKlguRg$L|zHR)h<3FjA4q;;S*%O@+cP1JZsBZ$oXpGWBVVjM(P{d
zU$$s5{_TjZgdXKJGl&Qv?l+Hm)>eJ5zQYJr5)%a&6%ip2(F6d~#q!M7^x`*$FqYHo
z<txR6n|Mp}%1vETtMi;qPsaT6Q`opA0xBI1<Ij3W?N1YXm`3^9Lo)$G{aI&_AS{MK
z5#*OL#dY;nKwZucwlB|nvQUz;*ST2Hu>-!7c->x(_CqxIApe6eo3REk%eAHrwUu3D
zD?jG|%)yH1y^%5AvtAY3LeoiMPJA$KU-BPq8erj%yD15<hF)MSC290%R=8E?>$lQu
z(d1BJijIdo`^p_rD@zhhG^8fDJx%_hmmDE59@94jL1eSbQ$xzVef(GMb)0US;@rLn
zYn|hy5$vBjNRh_S93IX9{Us4O!ir_+5Q1fcBv1Lr#0uzWs5}`r>08khiGd+w!N7Qb
z4I_?rTv%e#=tqcWuPL=BpO+nuZSjk*Et<UJ`8agQ%IPBW)G6b{(#Seb)py#e-~aRT
zb^EiQ+DgC4(X=rtgQq0QL)2twMc)Lw*B~)HR$_gL=VU!onh9j(on`4g$CBM^>Tmel
zN_SYXENY)tavb<o{oe8uZ;9hi-{K#h2OSiFd=)_NY&ACst+uMIn(rQ9K2#~70K4{y
zrY+~HjAIor%)EA!Y78pC_Od~xA{ZrsPJ@Aj!>#O8kt70rYTABuGKX3u26T?HWLwCz
zWwv3JRJ$kuWi-^>ReeF9VZItD%@uns>X7I?LVnkshEjUDCjhzr)*8!EorZe>CxKka
zm@8y6s)#)3Eu~3k<R*%EbT@3Ky=X|58C1&L#R1fumsNb#@mwnQWwf?LKhtbSEcK!R
z{ew6<#nH8<x(+m+n#;3~-Rn3~Q$1hJzL?NbLq>aT1*36qy)mQFj&c4BIw&vV1#axe
z8>6!#$7K2vY85DgZh2EJv?Q!V(;76k<)E^Z5I87k;e!R-m2-A6KD*hycG2i`=6Pjc
z&-qAC*S(bp$Z)GG7|q9s$N}!$*U(ttB5f#$4Rp9^mRKu~ju9%k(rTp}y*JAUDP;*+
zOKGRjs}5XIhXM7P;?3V$floUl)D|Ad2c}Jx%^$H|u|B;OY9qn%-il$p8Izr6pA}^D
z{u6xRGtWSkj`+Vu><o>;YgkUDrkx99yOo-r(Y5NlDVH<(C_&PihH$;RIG02Q8!4+Q
z<5)Dyw6=TWBDGf&|A<ZQPHvJ_{l=3c!;{`s`*&`W@WgLEwEo<8`*VZNT#P*b-yNFL
zPSqwcIk*WcYbCBji#$4KoMi^+R{Uy`28;iu-@5pHnn$NsV&pG#XXDdz#k^qilIV5(
zIohx6xA$hh+Mojx@%@SRMCnMhKVQWJl+-z(3>PVgjvY!zMcli7x?ARZ-bXMeOZ)KG
zk;@sE{tC_fP5air%X3Kf8lev$<baL>amrR{Or*cYv6m8;(^iXZ7t=iCgk+cPkmOUn
zXWMFQQ!0pN2kkBID)A}nj7LrST<l}cDjX}LuALkTGfGQ8`!H|fn5TJu-nbU-0;AE5
zEBpY=O=gSNz$HZ{x)ssa7-hq}<Oa@^z7%NwCJ%vDd@Yia5M`c324iY$|5baYNtk96
zza(<;=x}3=cl9Nf|CoaxZFbb6cWN3Um43;Rj-wp8!wqds^na8uv^BX5<Qz2kwu-^Z
zF26Aax2tbMuRTti$`uF4(R@g2PMO~-eIXu}Eq6PGe}DMr7+gTN?6<u4TLap@1aH_y
zc;NS+^5L&?#WPSlTBLzrxj=P9KC8GcPsxv^>4@&$z&IRzHj%EVqHf0e#M2z};#W?Z
zt?$cCl055?Uj4PuzPWvM@ydAxrH0S&Ob>xJmT7nZ101qiaZj15717OUpphCuKDC~y
zG4g7|=#P&LeLDaWp*{8^-*bZU(JWGOYoFa^b|f19*q+^9oEB)!?J7Q7r=^}&CozOf
z+*6CGr9)@g2ti1{dRcCHFvS~ple^6N94A<QbS=IkI`o1ANP7J6`jrSM{S5ocT$0Em
zW<}ePBx}tu*?G7b40B`PrQ6>M@HKU{{HnNE=c~ny3(OX;|JQC|D#lMsWeGe3;V8T@
zhBPOrnB?Tc3$Rp>QFip1f*7XQr_n&i4e4XQsfrltd*{@D6GlKSdDQUM^2)N}OxF{&
znH8)Rq{D+J#(St)`u?N~TDpIIW;D9P=DLGp6IClM+I|gXtWi1G%i^#f6YULfqN+B`
zQr^zCt15~q=d7Z8D0K5~LcHpT`TdNHj-?aBHaWLPRpUJq7aijNY9M^~Kb@>Ke-MOk
z1*m1!R2RIfj$X)-S)guRiQnGi@{PO_a;uG<w96s`Gsfx^%aik63_Wrzm2?cLyY5l=
z`^>Pdi6?_pGW_-hCD=S^%iWRuxtO}<UAP`XDpxoOpvHSwg&nI%^d;ci16gXzTwq*b
zAR5%DBf3~8IwCH)ILi0wp8kgBS@gK({MALd)D4x-`8Lu|IXw?9+q7g#n(vjvvCLHW
z4^vpS4ws3f+UGT&XDOdme`N(^C`#2CicdqeWtllU4lnub-%76>2I4Opm~Ux`K-V!q
z{RbiJ04+w8G{Z<4%5DW=gZ`#0EJt3S$#NBUETFDzOlQSYB4WP%nl<e#z;Jo5JP(=f
z4`o@+{O+=QOHE#;L+YUd?YS!Dudo~65Mi`orU7Gw1RgWiQD8*h1pI`D$fY)cKF3m&
z3>jy7$JObNbtqF*=hpZu37eJ_`MlJs_?*l4q>>KS$)?JF<EWca7kbV~{4*-<Y7qzo
zVJrcls~|YCUY)d2eGeo@7SlIVp^Xd^J+W*VmC{_l7Rmj{tiYLu;0b*;99OGk!<+Z!
z65=Bn1``JOG|=C@Y3zN8A0CP=y<dE?<I<CHtd{N|pv_q5_putik8+9vtIpLdp?63?
z_VnLzV+Hl2Fe^D{(oC<9ZW<D0kl%t^I#G||(<sH%WdF)~cWc^)+_0*s_R`o>`LI7S
zykk8(4c^3^Dj-s`UA6vtrCA&Yd4Vpy2?8GAg(pP}kOex(Ou{dK@^ELg*fZ;X5r6`*
zY0POaGq8cuZSGj3I$qVkfsEA;<v7MX9!15oO|vyykouM8DWRo96R9=LbKW<#M;VPj
z!J+34U=)AAWx-HgP-pzD75qKjg0>r+Gb&&0L4I^ErCR)m7$%E6u{#-u<mUO}cDG}E
z@pJ5L-_ol_8RUoKh`Mra)|-7Rzr3u9Qv>!%cK<1Fpq~c0vB*|s3VFbS7P&ExpfgEa
zS&Fv>P+S5-ROdj%(wq}Sqg9euUW?IN>rX_IHyx7aC6n^UfjxbyHr1`${vC+zWqKXF
z-7P!Z8DYA|ziuOtgaHy2djpPXIrkY?wJNp&S1xO04xZ<=MQLt<aVoYSp1qN3kDQ+1
z7;E*QmlEMGTN0XO(4}%LcnoU75#-YIk#+w5nbRW<O`9H{2punZD+o(@pvCy6_rEwM
z+KPVF$^=DWC*d?<I2LfQg&ZG|XHe^?5ftDZQq~HT#Ots0#;Ru%X2_TmNM$)b!Td3I
z5WKbS=98+N>hI@*MrWm8pY*!ZPJY#cM%rB872Ua2|4Sl}ZksBA+3=tePz8bDn<;^&
zhKP}Xcdk<d)G(N};1y!)c*&@Sk)k4tc1AaWgX<QS>SzVhd+%u8^$1dSDmE+s5!LL=
z5l$~{UoO?Dc>>!O7wNUSBNv6fW&j}k@_-b}m_DM}$`CQ-aas&J4W#DR-f7+pF;vDM
zn+3>`=ngIFUxc#&EI{|t7AsGBk{nacxon|`Om!PCa*YH{c|+z|L(z3#nTAa^E*Iog
zhl-Sgf%>o1Q7>EwQQB&&|7~G{L4b@_Bl?XDBtSM4u355OB8v~)fyf##LqVbp+QL*5
zOC@C)wWon@jJ#nYmiv+X=JsQ|D|*&5{cGg5s_mLvAY1>{_@!~j>p}9qX}?QJsxua`
zP+(qvt}}OZer2!={>Ren3CJNFYD1VBN1QcFdX(qs1KC)bo}^=u%2@r3D>BDMj^2Go
z<u-E-=seaiHLdAmv)`h-B>hPSa%*>P-u(io{olR<@PLBF2rE*TKW@2PG<=2O?w6o4
zb%T9;r{ZaSZ3QS4WO{$%zxg2U_h6&nh)>u=S|*;lyy0n8mPX8PT`Svsyei&*xQKM%
z-L1e6;x)(L?ZSMyqAtX5Zvnhk52J!8#b6SCMy?ag=+4lp=rF$izR&n%T9bTUgi?%K
z=O!AoXZK9s<!|mXK8YnwB<F?}71$TnVq^aGyZ-~->mZ%^-wxY7A2o}Y1Kgzzn>JtX
z{siHSFqkGxOW|CQgP7{26i%eLBavX}VkuEG{N)&x1+?OO;erXHwt4bPr>sh*iH74w
z-ZlF(th4T%v(BQPyZvF}gYT{#w&)H4NZ2q{_OS8{5Y4kj9Tn%$twLN9ZZVs6Z3tYu
z=bfKLvUoaf(#do7M!mCYD|&&|79K8C6ZSjtGYhF6tyt;xnnM-#2KF`<>|PO@d8}v3
zM%sXfHp{g=5bW{X)7BRAf)i^=cjzyn#jWxb+a@u}XPX4c`0wS8Ogt6^W%?w}J_#4>
z$vZh7;>^G=&3Jog*9H9ayqC4vlW?G_HrB1n4lSu@H*0#?I%FBCg*s{sgVl+Ip9zb>
zwv*#4Pix?or!`>`7%S;uYlNP4F%g4-z~}<#U+_i_y%}!RZ0~Zhh2{?Itm{r~`(m51
zXY(JwB|Fi%hPk1kmlx*c1g&PPD}0t{Yc9-V@RZBxZ(zT94Qv<nHxRD_`0(S@Ri(4%
z;}9-}^WD8!n1s0tv$5281!=@aaFp9?&s|Ne-OmTH+OYKahnFLxqYEanxzcyDEB|bF
zXivO?do56z-dCE?UlA9B_39ufMmG_!;tcSsX&z~k*SIB=NI`to>TZ=Txrl1wgT{c$
z<E+ym_5;+<z!v7`3TSi1PY<^{`}9V<N(u5zVHHnN9z5%%kUwf^mWAjHLO{VS4#6#B
zgup!FD|tW$=t9f6t&F(QWpeYZG#_u<m<QCf);Xh;V&7cpO@4nRGcrH$Z9|p!rDXyB
zX)A`?SG`PqfSWRbGl*KqrYuD%x}YYOqFhIR{auL0tlMq`^TV}|LL$%e&<9gT_wx9r
zR?8H(W5@_Ur@+&+gyU}g>0xAebi_o@$XhRGPO-M?0PKKa!L#5g5e$^w)XADnGy`;}
zka-=j?rrcjsYABSAsSo=e{>}xODw53@<e{3+Kh8HJu1nMn^yaHCAZaYs^swP+RZzT
z@=J1`Ciqs@ds-YcdVp(d*P>sa*FC_fzDLzC7+9xf(hXH7k#^S2dK2mwiCaPh(-`%h
z6Mr6R3+xWM@mXClJZ`5<CgnY=&U&+oQ{~?6Tua%;7rImI%AV@ZHNs9Ypu_Dl9n5{!
zuh}GPqG*0@`>ZO^`D=r^6eMd2W%uE3%9=;@Ua1sl)7IvyR-+%4_^@m<`qwneu8nn_
zDm}3mNHQY=DW!1SDG_;dCo(v9+{wCSwvmufh5dNFf<(gUQ?FKxct&P!oFgnJjTb=2
zM}Y8%Wd!wF*%WkZ6O{;D)%O8ov3I5es4Tm@P^VxXVL^}3@hWtu3soEMD6Z6@$IY_j
zs+}3)>o^Sjr&W0@2y53~+pX$0Y4(dOWm#N5UB+xWI<hIr&LKYZ;V+oUa?Ki&!UBvH
zK!1cQ$I(|ZzI+4Y>#8X(od3VnskQ{+7<1T7xDTc)l!al$h4o8lm~Q+|nge?LiT_Ag
zpjIb-3!2|Zcve|m80IA+4Hs6#`0tPPL0crR)SH@|T1sZ)?0jbooRzlw*`7MCo-R6b
z<FIG3^W?Iz4#pXl%1v-xpnCCdE7e1gqG*<=w$0y!LTCoCXB)Y(^i|~ufk#-V@;U$x
zh^9`Y7ZoF4b@(FO1lqpH{BbU&hV#6t=TYxWa?h#L77jz?4A=aDwuN`ubv0UaQm5`r
z2TTg@(O+hlR{_AIR>78Y+ib6c;Uc?)wjQwhuP6zS94?FSr>sV!c`~{25ft>vYTqMy
z&ulpM1)%hWU)y6fHM8^B4|Vn3*6p7|w-1``naS7Eyo=<5IJ>djD5VHx_^49=VLX{)
z8PH=p9dl?gT}QRG?B2X`)V-IAHLP<k_T-r0&G&j<CPkhJr(8P!+PpIBo4cmF2zQ96
zqbo3r@3?p<e}=;mP|OKMY#SKMrU++csY8@TK`fTioVk&Z7)6YA(JP!M(p0>fTx{2|
zCi5)sXz$0TC|L+Bx&t%O(XwUx3^RXuI^nJ^EL0ch%vH;os+F}0L%AT%#ZAavPH$tB
z9~%q&wky&WGcoxXY!#wK(!=9JC66n8f)DkB{s<@#l0-}2@N2Se75IiZY)|}j?$d)T
zyIZ>mce7D@io#ZXx89uQpngXGhUNuu3LsOba2(~Ih}Q#6do^3oAWylvG*)O$*xjYt
zXLjpxNWE2pPgjI8BhybJHJ)p)%r>fGnAYW%@E=;|7JE-<t9SjQQF)%;AXr6T4W*1|
z7IM8H+29~;r<kQbF%+0<8xL*|mW_cMtCFNyCrYOYMyRV>7tKpF;{8Va_4(pRG8oUy
zm^lBQb5H;G!SG$Uc7h5U2{Gyw(TH%G#blV&ThbPy0dfy<K)=*YOpGImaY=!OT{LQ?
z*+Q^KW5k--bXAaXKgf>*FLUg54e&%b9x*Wmq4$h{d1ynnW}Cb!3a~wNtygC@U-1`Q
zWHdT2%Y1$pht*oL2Dd9>x_|De*H#^q?@ueDdWZ<uIIG1wEt+8(d66aVFbqrgO5#}L
zjLj)B!t+Tr4w+Pgdk?=l`Per2V!5x^1<DTHzl@-jhZ~37d6Agj#4Qtm?%;1kt@^Df
z4{BUzu&4@dC6grPb#mQS+;Y`Ikt{K)vM5?8OU+)XF`@pduSW|GDzQkIu5)Y(T-J52
z=RoJC9=jK;6|+9o?2O~UZ#u8F6B4vs<zjm4FF=kXgvr*9WtU?bpxmHxMG4oW_zkE@
zOQ04?5_xG+llK6&rg#8M1<OcygC4tpJriA1_9;Jfe>qV9{CT&nsCuKKRrDzC0d&D_
z{?RDFNQX5Bi`DF@ij+%|wy8~G^&$QMHG4|1t{&5}E%f5XfS`ld2pE-DSN-tjt}v%J
z`A^1EgzZ7@JsWRCKJ5XGQGfQg<p;jjQP%vsruZsXt-hBQbh$9h=b{2j&n8`niHW)N
z?QT+VaH#&<lOreFH=Gb(8(sV^J=FB>rj)e<aSJ+i<-sD;O&|t+0ZN6c=B!Qf5iqEq
zBn||%^bgr4aJCzamnVaJ<J}?Wv%PV5dtSuY-h5nk=SbftY5tAj9}p{S;GMJ5@RCt*
z4;%a#uW}U0bg2w5bh$pg(}IUzgM3H}dIauiLx!25k3-VUnRzf6%^#2QP77LP<c*C<
zDL&#q<mbm*WrVceYQ1_KAYzS5fBGol8Fa5ipm0TCyR~K;s4RLo$1dZuMakqt!+wC%
zUN$n+x~1CFlBdCfG)kCwbTD8c{}F%d_&ui8k&(cr&l@{+PXR!fpA8C^_YpoWnOkn#
zLNrwQp$zlFf{;5TzZDbSKG=)pxhHqB6=}s|QPTK3VuKYkYZoYxiJ^e|y>@?<*ar}#
zegV?VcS790!@4avHsB3?6x-CX50M;tAJNps9x0t|TO{Xfc{l>SpJuZSd|^+zJ(nB1
z2PtKihFz>VUjA|;nRvLeyk|?b&$FtUdozBcS9VSciEXS{ZUum;3}`=tf2GbYGy@2T
z{O*7dGb`lX7xyz4pT1ViE;|Vjd{V)9dR(!b;}~_e=**ddp#!xx<ebe*v^vy}xWU9&
z2>X;q8J4yfl?q23+Xx1<%X#j3lTkJgv41^%5%1vF%8ah)cubnx+2}7dIZ+-Wvzr{q
z$ubsoH4t7HYnEJAYExwzy;=}SlqoLC&-F}bOyjtsZ_(qDwL!~a7#WJZI#E}j%!}&%
z^G2ELlf71@5p}-~S+!7#PXun>+!S<HOQrZ{18Si8DD3SRWC`7*`bsh_go8@J>jaEb
zf>3{C$z)5QUN`O1V}I%$UOF)`GJ7q!#ayZ>X^W5C_q@|S`PPF;Y)a-szTM>X)7$Sx
zeXZ-JetElIcUBgy)TQ(0QZh%gFDXswuWtJZ{Jnz1v9zyHUmdV2_FDR9d83H>F)rQl
zjPI%2-v?RH&X=zKO-BWBk%CJwGeo~vUeF9?FRnKohv&>dSkSL|gkMKB-fes-O|loc
zbX8+Z<-xF}d!ZudLS#W;isRnysdFtO>b~~(ZMQxKob+_&q-uW#X{HbY5+a+*RqjxQ
zQ-(dngjOb~VAfkviyBs_)*#H-JTygA;@BGH9s39!!X*ynCmnsotKV=95~E2*!3gTM
zi!db1t1luie0;Am?HB)m(Y9Z-)wiesQS4DJqU}Kvl4u5E;($y+ChN4+*gSkd(%FY@
z7h;x9NW6NbkJ;5^+vdP^ofUP_uDvV1*B=V2!RMSQJn^RRLU80#c}{^Y+BflZAL&V$
zcW3DUSteT_=YDp0mE#IG?5ESdPoFG0ac{?q&F?xF!kj?O753r=CKbMDp%SAykM@An
z9IlCbgRmkJGsI}Y8Q_|UD>%jv(V1eEu?Q0n7$na}Aw&B!#kHP3KXhI9>rVyc$jg^=
zef@|NXFm;@{xC6N;Ouqdt<EgKp{*e$QmPYX{?-D;6OJzfu4+iH_t$n3f+@+P4xMb)
zV(<zjUZc6?%=-#2=%*1yG5#Jv3ypw&Zdt~m{^<ZGsicaVsy}f0UaQ73Lq8+=@-D&)
zL%@Ult>ux8I^v+6#N<FjazU0lyWW=C2DO*H1i*5HHIb|o?EIy43d|`Xf6}a<#Ik3v
z*E`b=p%l?r@h6v{Q^k;lhSpH7b8rs_+8&3H@<VS2xL$hFL9!_<m@rP;Wd=#r!f|yR
zA&3N&;!9Ew2^XVz%~(J)mUzY0n<BHRDt$3G0dN^AOCe@i2z_&<{9@cg>z5OwhCO!v
z!;{}sWJVt^2NhAh(u$0V>J=vkJ?xCS_iAg1|LJtk*GOAvkWgMD(;L8F5{p`h`mb|?
z1cQT|?_rcUK7_w(kp$Fh%hvjhS)+?x?fKPW*_u$S;D(FalaYg;K|XTs6RRN1r)t{^
z`}W?_!NZvM+ck#0>VGlL+Qw!tWSn8%1a19AkboYO>mEmQOI3D!dq#Zy>TZsHa51`r
z>UBbX5PP2W06i@@*lBN>vGcr6<e8$;&~lPd*~tK39<9;`a~^=9`?O+KE7wzXnz*aM
z8Ov+%l8BO8@s~Ygf$9hKqk275r`734pQ@U3HQ8~rAh{(EZz?y;Hp|I737UAcw3<WU
zdXZKW)5n$;{a{h?Jf7OU7hYnZ+F0?GIv!+4#+?lB%qJlHxxl2nfpP4)6(ABG6l3Lp
zB^P^Nyx<Yd5EW%iR&T0`w~H<s&Pc9}KW5$h`SqJAZPhkL;}Gr{-~^yP0!TXt_@pAt
zHTsH4oH0jR{w*QVTY#zXrz}CEn^)5Cz0l>R`l&gVIa~7ME7V7Oy!vHRr8B0s9_5_A
z68?)wUzT4}yI4zeAVg=Hr&;_SOf?ezaTByt|Eu1B7K~)3rPi;dz7l(iQC1W7kN$s+
zr_X0_vXy97n^&)<F+B7_c%FMvNToqRsMK*V(%C-a5ch_-bwWG}F0uaqTQ<*p|JPyN
z&p4$Aq_YG@P!R!ja#ZX<m!CpR8l5POl$+dzGZZFnIem5Ly(%Zh6?<6{el4Oa-6uA6
zKIXM#@GUQA+|O=K&_vJ)b7EbuNcP7qnOr##rgOCG)9L=m3a*xhLlDJtPc!DW3kD%&
zS`H(-zqPjg1|%aQ@{6E>d7V+t0zF<y{}sF*YO)s%7bcIGh**%Ki&i0TZO=S7fhM%!
z7j=OZcj$DAm9t+6-)F8}+V{?Hf7<HOJ3j@7L@1s8f4TLwuGmwHae#=BE=>(1j*7dm
zxBo@0`T><A!#v`uX+oT!T$fpIg%WsKTc2Uu;>n!Ld7x-*D@-By_R*YwZO@^mI)hn!
z{gxZU9`c3va&z}FB1un@ZKc+Zp0yRQY4&ELr&t5onwzr<KY)V7pq_x_y{{o=YBBEQ
zt5$mfMv{9a8#zK5#t3Jdhz7${f{1&C?ufEn5k_3`M^5##&WOm{`UMfMzM*_N|0yoB
zIBi>7=+ZR9O1{`K<f7}UkSn<C>3?K&{_gxQ{}lqe1KkY7@mET7O$!)}bTnar78!?b
zQSKE`YlThJ1YQjxk-l_{VL%HIb*w;xj>(Pk#YLvaj#5li$52Y)Sk3gM8V#Tj#~p^~
zto#gruu(QW*&c(>{7D;{I*ovH5WdSE3{ren$I&;>!ywAJjg%ps1O0g0Ne0HJ1<-k2
zIW#9E?~aINNYxcvT-R8%I9#O&8A;p~w)P{G<9yEAypV3ciRB^p93X3%`8*mB&_W4m
zFoP0u!2}fE`P`oggB?(lWHW+ULm1%ctj}IXU!ZbCSWR2{=zzdjN;?BPnM!JKGRhPQ
z4A9?3sKa6|FNSiU-`>-q)qy{~0UV}`(#m$W$5)3hoEQY-Eo(+2Y$>5wFj%BnvRb(=
zaK3hAHd0dk)@dB&5D#`sm}_a|9>~EDa0t0n6Mt|Xe(Z}LJAha;W0Gvermg{f*7T0T
zlVP)?>ngjfti#ERs>7e?c3mMbC+2;7_39VE6B;Ex)i4o?s5DuAM-c@)K(C}Zi`eOa
zm90?>9>EZBv)NbreY#3k9wf1rQj=Ri*+56E-|l?$8sEU3JVRU(+V6C-|JQNz7+<Sn
zzFaL8Y@cfi_~46l;HDqZtfH+&*UsZ_(GuZ&j;}9Xi<XHQYiMVykknYQf5(a;lme*w
z9vAxuFgXIjV$Hn>yKa?N^b_LbP(sov?sKkDO-y|Pi5zULd7!Q09@dQklgujOlKQVf
zCi-De{_w;s7YK1enc3jDPq;gUR5(H<H2YmjBu^_d5|6*XHmV5t-a0RR^W}}H-Vxqs
zU`EiH&jUmZ)lIdsNwT}kLhjRm878>PUFP;@I3`ZBFpwND5+h8v2i|^T+&8UWN$jQL
zsX>SP?UHxyF14N>Ij!UcnsIuI#qo+s*Y4oVDeDHpeHLn)pfWNMfd+Si*rH(-YK?H)
z7#NK)y<^C@dCfHF^)XeO6nMNmIFbIXyU?9>AQEQ?o)UN)M3Ima;(;g+usb#F;*>z;
zF;e^fIZ*P@E~%J2jQOazg3nhcazlLyL9C&Ez`o<NR(q|(T;ndUpqO}xEP6BcJE=37
z84DGeMg`WC`o?hU%-0`)!}RHN>ibjMT{rIo@@E|by{Z2XRbVec@d1*jPz3Y0)}zx`
z2wB7-V~zfMp)84j_;m~lG)u@r#?`<rUU9^72JZuE{eVW02bSfIXD_1#A+vtn^>$+#
z3pt*pzIC}21g13G4$z&cS+d=o#q1Kw-c(N=P=K^A<jW2}--Q_?X*PWYn<A9awM-2b
z%R}>!`mx_1U_QqF2>&dn;p^Zp@i-1S_9uNY+CpD4rZFMtiV>@tEGTXD_e(?(S!+Sl
z!8T=cdB6emkS)%{`Vg5;Sjf7u8TmZoW}J}G+M&l-aaea6kTc7#0+fO~mPm)W7I~fw
zF@5l`?iVgX(CGIGxd}wXpTYzwP}WM?Qu$u!O#z6<YatH_4?q^h6^;8amV@S*#0{Bk
zlo^DWS$6vzuIq8xUP2vw2x&ySmk%=Xp*nZ$=&O>+s55Da(%YkL#~)zEV*h)InE$av
z;jBWTE*w@2sh?`_nm!zoh|%K7Gul>A@4adi4CSA^v%AMSqHg={?&4B5qilSV!BA&B
z_VX+_x$g|=e1G>_{g9(?_f}|sHr1lfAF731VW|KVhkqj)<LxIHYwOpbAH}*nOltiq
zB<oJe1aYbVu3EY5`b>7hEZzcWWfyYM@D@Ko9JDb^x1UIBaU7zv4For)P3j!%*nL)K
zdj0t1jVhfvIv;`!!bB~8#yYSF33x5~P!uciRFCcZ&WJinBSVKn$O-d%eeqd++Nq*R
zJ^@Gbh<Oy6mR7W|PQwZobu0@At$gNjner&Ce9t{cEgT3gyHQXZD0Bn^&WaRu4gFhs
zC!Bv5Mkz{A^vh?sEk*Cp?`Y0q%nB6K>U8NQ-kh4=v#X-p<pQYRk4JUHmx|HC;-R-;
z<<!)UAItCT>)Fiotn(iRT##}Q^k`fx6kk;$*+~{CLy6Z6_;sY7>WcivWkW7?9(%h`
zWiJAsVN&Qf-PSJdtTC>ci%-$moK^qm4`F`s_eCYY&JA_G+ERKy^1B1S>mV7L#Xj(#
zM$m5{sCR(jFtmLYiC`w`(L%?dE%L>*lbtjVBoKJ%vCZjjH{O?(b;>wfi%?RVnKdvn
zED}ESSl`q1HyhC{VtxR*rvZ-#f#3!<ggvY)?P%emF8T^nN<7_>39bZkrT3&@l?C!C
zha^m~6cgj?ms6b^e6TaU=0jbo<6>KVRhYa#F+#nuzdia@T(^tmlfXcAW(2C?DOgg=
zU6@wj3siw~j8Ip#Vpgcz!W|UAk9C(PwA5gd>E8)dAqX?MUVi}C@_scFnvIChRTm7L
z)8;7SRF_EP^P3*eif8EM$6-;2Sa~FD%IjID)ZF09d9JG*`VVQ(<tPIgje~?T+ZNnl
zf`r=yr<1Eq2#fAWnjd1IJW+o<WH2G1^J9CRX7ID-`>s-sZNbFQhbj?xH@ftT190wr
z6t;(@C1z=0rq7XziXMyVZfWU<K5H$)mHE3zX$ha{z-W9yEXPclC=Eaw_|`w>5N44v
z$Ap?HNtaMyOk3Ga$5Eg0nn%~c?6uj}NOh=|vC@}1DfZ$;r|9~3%?Q?p`FV2ud=%2u
zoX5ihBknfY)T(7~w8sg^j{@}jVGy5Y5l#tGh~+r2f^b!&RKnPy?pxrV$5+YI_P_!#
zU|QAGE!g*jgnj>qMh`8KZ}Q>OcCQ;c6BnQH$TK(8FQQB^GU4bqWt-QS7j^~L{Er@^
zZn>s|fCH)TSJ_y+sfvbf7k^K)ly4F-ldN1kL?yn~Qp!)p4!`Qyr{?4fc1H#khWcd|
zd7dg9pRMc}4j6pvvFg?zvAb}Sk+9u*;8~=qAQE5uP4i~d1Z_jA{GV3J<1*v3^JxKS
zkoC*_Bs!KV^uG$95*J&Y6=3xFy?HJ2rrJ33OmV1}{$ufH%VE+ln9jL>7|_if=ngl<
z!#=_pF1n>ns$GH-k3H?-kmNt~c%a{i?l=@hKc4tAdxh<>J#zCRQFX;|vj4|^pq^cx
zA%}Im`hB;_ke&_S;}`i3-8@F)GGI9u*$zN2gRT4?T|{=`ceG|XAh}hon8aC!n%Idl
z0a`0QxNK4>uDiWv-R{r_?T-fB&KABK@}T@ucF*Qh1Fm>lTXhkF7eE>hF^1X{tZc=3
zp!9yPa^};&3n4DC!x&L@TI&}f=YE~2|GxX9{A^WT*pN@sv_QXQSv5Z*)bB+_yLZ4A
zS)>8}%(Lq1r=H)P3~bPzc2t?bQv;!ae8|DC64ubyYr50VS0f*0C7MFfPOm1yLUwHd
zI0k(H_lTXl+{Ciwp%<(A^+X^Y`&(Et*(R=FH>q?Wv?d^tzrLd8Zm~7UOTX08EN2Km
zbf8-trTKEMqPUYmVq6*3k#m6&BWnqSPVE(Y+r{X&uP3uMp#H_^S^c7r5;ASO;lm5X
zMCzsH>gs+#Oj@{mm^ymb)+GG6^+h=4!Y|rN#(Yl|AiEW~sV&L{VObdU<A@BPSxt%s
zt+vZ)XUY&=1yhk)EyNj2XjUP_>k;kxEp)ex+!N?EwaPSHe7ORwx(+iBJ?oz$N4f()
z!HkuALW`~jkn>fDtYP$*QN$L^K(=UBYM&c&>xIN?utU7m58Oyv!b8tks4SUDXFJ^c
z$g&)2+?z6m?W*y5<2&wEQ0a?()elQfx~{aI83Y5y)PLGe>N41nfJ!`~F=I5saSg+m
zsE(jjfOMb}&`>!+6eHthuY~wst>M+kI})%4q=WK9%%Tt{izGH{X$Tg{_U<Z)s5|uP
zupED#TroMEa)=KD-j_SK!F9ufD?hf8A<U2u2GnOFn-p(rdspy9Q`QtZPPMpas+8hw
z?oc^<388mI{ig6PKeQ=T{K?cw;~#QAFZJbk=Pob>mnnZxovBgh5JCh@P$l2;DM2@$
zLU#t$wj%jG8Si4%uf!pgJ}G9TvIQn@fws`yvY_f|=(b7bDTB99UAMgc#j0b~xv3l4
z;s|XutQ1_y%89ygx7K7!mqUMpNmvSZlB9vK?g3)NBA3!ORUwsSVzo}Q0K*VjR6OnZ
zh{$eoe1v4|mpyzdm!LwAONDOY6Kn&gFP>#LOt)$DCzH-yAv|K5z~&bbp6;xQRe4-M
z1PYp(#b)95J({o;N-bM8%K<pe)D@sN{oU1f$YSEM5TYq3pm-c>IeM8m<XA(DkE|Ul
z;qb_(>~i;MF*5H;U(|7GIX^FFkG!6>y5YV!`0o3!^%^&L{Ip`*t`{v@-VZPnMViI-
zaG`ygH*FODPAKQL5C;4Ixg^qBqTG_`--Qv@a5jhq*X9`4T-*vxU7NEoh)*nAfT7;m
zD{o`s&HM%iPYk2_?!6J2#}4*Ix_|o6%Qo?7$M;#6lm=_5cc{zZlP94Ol`qkq$_G)q
z4d@ocSn;?T6kVZrpF%et+Xni0f+ogdbdx7jY<M+BWbN<QH^bDUoslazo4X?B^W2_d
zE0z5(HF>!tQvTb~(8~T50zf|KR6rL;L4?yyfsJyTai(LyQDKaRD>rGnU;v1pnCoa%
zQ^a3^e|Pr62u4DdWsi%er~{{Rl?OMEzn8COrP9r5j<ucaItzb!R(?(kB`>ckh>`0%
zud0zbeA53rT{1kMlkn;35aC$En-o~IO=+X)ATHpB6cN_aLfBn2>nC70RY8CY8tI7V
zSd&ViU_aV7{g=yf`7!bSqT<O9ll#EC%G68(e!d^7dTk?3QqKI`Bb^>Opo6CWdw!q=
ze-R+{5e2Kv43viM$Yf)_#26YY-eb5`#=D*-w_&|_UItKTC0rrXb}!gt(jx-SM~;Me
zmE&44)^D(;hOHSuO4Fi4EF8AMte6opqD6<3*GOXspK}+02yXonpq*qWXsDO`SYy3D
zC^BdIh%FLbj>~Tgn*5A!*yC0a$DI=5OCX7(1~uYs<ci;F4D#-Vt8?&mG2#gL-TK*6
z=(LFm*-`0wTuXEIYn?v)Le<ea)I?q-1bWDJcXmJ9Hde4259;+j)6SDgWGi-tAYs(H
z+r>BZ@o2!V+g@Z+LC0gaV33}2dCJ@V0=xZ5i5BBQeKN$RSopP0AG@aSgDJhPqNkg)
z+aV*!raCVKez^&2Z0=&&mSV5Mflw#uY@5trbkdKUJLyFUDhi}t+FjF2h8ekJU-yUm
zQ)Ccd=s;}=s@1PV&{+wW7&m4H2|IYWbt*i13dX2r=3RC>UB%&JMp--MXIYY3mf=L;
z#v15>hyo}rcr)Zv#$zwhu&49BYdtMdYJRTqP^ABO#VjY;t!Ecu;h4@8Za`mAL>Y)x
zw4w`@$05F%fzx{<3yWJO09vKLa!Ek+550B){=D?M%siH2=WaXo?ufdu&l1n)>8%rk
z6j7z|VfXXhu=Gn@`5NPSCUGJ|+71n>9w83;EG=3LX9kub<c#W}fU#Rxjlwiwp$p)X
z1gnNs8$nlfZT+&4EG<4e#(Y>zxIteRHo6wA6M2TWM1dqsnAzGc&UtIib~M(zo3=f)
zbRuf$_K+HfJD0_z$62#JP>bC8?^@)4mRsUj&5}0duVcUfpbTe-1yT=@*TS$-Z6qOi
zBhr@OvH@b=vJv06=pDELb<n7`ra7A;@!p<bPLGwn^z5rc%%h;~vHeJ2h1&eX`)Q?T
zkoS$jNRum=H%qkCF>qUKVKn|g+XQEpt$xO$;{m%IBlb$nHdK)j=o>6lUC2jm$lp<W
zTst{#Vy-qiL|B0y<(=$}AY=UdiX*cV(mn5t4b@ja92^->PkqEYUQrW2_`8l$8?Xlr
z!2TpoyMkH-MddKhd6_f+S_j>zW&@&iE#Vwys7*2}{oW$(P9p)S#c!U}I3+i^7dn)w
zuace|EDFwh@x;D_Is9pTMf~#cUn?(mz53-$$ir0YWN<zFhvCKey9=69I_f<P;UMOU
zV37*0yai0uK)!ts7{mE{CF0h(?3QOV!`Ov$$|l3?Aq(yB0c0rU28@Qjj<j|?LaG+^
zaCQnimV^v>-+DMMJ@as&U0qVVJKww-gbgSB3Us>|NTAm>++rF$tOYshr#2iSB5A_D
zm+@E$#*CFT-GY;2_byBXE`xM8?tSXcl`V9$Uh-{yspW}^ie9#-jeoLpV!hx|*xZ}A
zf|Ajc;xNCM0o}js=SQ}aIq;c3q54RWC_x1@NArXR#!?kd#FNMdCq=<6*(Ps?#`rxG
z0H$KfH#K50NiM+>%(98JM<0*&&14df)_lHAnk>BI(RFT`VGtr8*T6U=z`Q}{%cRCI
z0~mA(0q}<Xsrh1hKK$sF@N(Vd&Z3ky9>ZkcBi}(ZyU9|*#D)YK$?wMBEgo!JI5AfL
zP1l)gri|U`p%nq%U)&KzN%ScPmM9w|2>l87gn)Rkt`Qd3V<9#;6Hb@tHV6!9n?&uF
zKdSFT3>!XHS=M!KkZo)9&on+k6)dq`Heu|jXWs`3Hn^3OQF*L_fDtdNXD0);Z8)%E
z&1q2Hf@oe#Hw4biQ=djkav7@6a}ca_u~r^JeHzj+DOS_Zts;jpy3`&~e~UG#S+maA
z`x>qS%yCMD0HxmMH)`Fq`%>;c`~1OC|C}AV)3=niG#%6u2~tGDpRYueCfNe&riQGQ
zuqQ}6^?B(Q2^FZ7bl+&&qWr?qw;r31j!Z<osV*jlVP%PI_0bQr{&HNRy|ovyKhnU>
z7slTJ*nkF^5JohF#Z%lff<dO_ZUV1EKa^{1MaS<$9uaWkQ75s%iRbC-NJI>N6SZE}
zIG5XZr79qJe-+r!6x)|z1wI~pL^{)2Ymp#0Xl5b*cH#l<<LrO4(qUi-2EOqyLfa0{
z)`JlQQ>N9lEjiRLB3W|%4r*9i3*Jz^x@x!rvpke99}U}dkYAxVlW?rN)aG1Cize;j
z7GU@tv5wCnN1h75K;EG{r-DGZMMRu4;y{Px8rd0$jfZvRY~>kxTXwlo6@>WX^d|g*
zKKv4N<75Na;}L?}-6VhrXDrHeI>51%aFgqGkq&8eVTjpQxo*P4=gIE1nQUAv&OpXi
zZ}u~f6)Wo&i6t#V-qp5=E(hoS)Kz#ub0#g0G3EzQIgMV0Oar<Dt!KGPOZpq|z<G_d
z#S=t_sB5S}M^R4;sY#6Jw=Rj7;YrnnD$tI@tjce$j#zc3+ban)(_-?IKR!32d-f+w
z7^_b<Iwo2?@6FZH09{420%583=gn^#9WwvcY6TJh`HYDRB%*p#nh`9vjy{OjLXU|I
zj2q~Bm2%xC)+%3=$g32b?m7n~cCI$4^zM`2eUtsu+6O&CzDux}yNtvb<a;d2IA#7w
z5fzYoFVmpp4=r3Oq?w1|dmc0NG$yM3@X@g<AGvWVC|psiPM|(Y2Q(JC;22x`$yL1!
z(MtLLe2L&Is?!%@cgZJ5zqThYM9k%r=`NRU@3!Le({qLFke`2lu?siWepyIaFyU}1
zivAE<top<O;;>h6OweVK`rC;&pWjSaT>H@dX(-xv!}H4L@ow={bGI8OG9|axuDy4K
z&^oJGf)j#x-Ph`R0+|tyGo049T|(6r38Vqa-BgRlz%@NI*^~_0l+XuQO*{SwW$b;b
z+*|&}YP#;*H~g2q9(K>HzFQxBTJHfSwLnLC7S7-f`f}AaIWdWQKKlmU93dn`LIlU_
z05pZ_+L-kX-)@X;;5I+ZQmRh%x}3=mf%0OT{~&YO2o=}VUU0JIyltTAM#~?oJ$ye2
zpKECZs!K?)$gx?r5G@k*Gd1f_#}@ixd0WB^QJ-4Q^J`0(o=n+(646wjamaoWns)2*
zx2-0%9!aOIP2BAEU4QDa>d)I>>wex171(W>9_oZQ(F_xewg3mzLy+XhX#0rn&Vzu{
z{jiVbnoHZ(Q(<b-T!z}Z_uAXCJ#s_RYE+#QLnHNn@TFo)sV(mdNmfu5uX2g##7y)^
zvOx#LL&9j3CE@hyEmbyP4y7@p%9@;7<HXrZ!{$u$2klMtN&-XP#eeAZ55oo)<_Efx
zpM*qxx^?+fDV5>(tY@YjbEIb`2LDp=R_8A&JiuLa1DfS?fRTnUZuSR$g|y3BtS>2w
z<Q6<rk2d4E|3lY%M>Uysf8RK$sEAQeP!M9Fs0fToQCd_)P{b%I2newugcvgpEkZ~T
zqzFPr8DNB=DAI%wk%TBE5kk3@L3#^93QCV$Q3%(NGS6{->weyMz3=n<C2P4>xX5+R
z+57DM-JkDGo8>vS3KY?Vip|>xEyeG6Q?F%|mL4Fo0GvdxY`v8=_><qy$1mE{>-zsz
za}?Q?DBpZRKy5;Taw-^D4-r}*NrypGTy78gA^aA?M)RD~piJ@=UElz#S59O#)pop)
zPHXh%l?&&!rn1l0y}<C$tNPQ5N_d|d51!I|9YaY4Owkp}XM6zkc-Q&BU@KV7&T<tv
z^*QLJ&`Q#jmT=rS8nDXY*Y4(e;)qtCwg+r`ATuTipN84Vz;*3oW+Woc-sE}EvghMl
z13c$+09`zHxtLyw%Ub?T?G2@o;<%1vC;^}$oRrmPe+imzifnxbphY!EP135;jzS-9
zDbb}ZQk!|L1e>>~iy-z?Z?L-<=QglN+vQ!5;radKKp5U&(WE!bbQTwb_;&w)(s9+f
z&Y=s^uZjX7oTM07T2L|7OAphYmh*P>$bE(GZqb7e9Cr~<-+P{Q4&Xd28yd}Te<c-V
zeo*en&U{GzZN?|yuS3lz3Xrpjvdzlw3*-U*>%?~!yt9){Sq5wB;0~yrYhc>|(YWsW
zrdYKD`J0zA!)-3S_;p6t<I^_1Q+;`dKNgl)F@?#yZ8Bq!=YGWQ{|w3vHm2tfQKff7
zz1OdmxjwctCou!zC=tc<ueR;K3D>qAQB6-!QD&n8EdI9Q57#OGW74SPNYNy_qXx47
zp8Ko78-c;0sb=(#%7+~kEQ!*&#6>7BEA{?SK`CE?oM~V7zXhV1Nu|a%7!6c&2r*w$
z-ja71^1lyGEil@YM<+Q!^B#k@FPx{W!STQ`58!qB7@zKfH+<acvIt@74X-Zc*frcA
zmf{QNYicq#H@pGx<L9@Y2`p5D2XuIz<sbtJj`T0VhLp_s+<7MK*d^tjd({vxrtc>J
zug;sSIz}BU)72bblI9wi;F5gtX1FJKG(F^q?49FA_<}4#34X0Q+h8i3y%j=m2|T{^
zHwbZGZgqW0(;H}83=n{nZh;`;oT{IE#pSS=J)wTKADTwLR+_vC!gqC8zRn6)`FmFk
zip7Tyr30fNq~<936LL$vlYp{eHh+`70hp>ZX&T$#&j7~|nyb{7{EpGIqHMwHy7}FE
z<?TcdHqeAVE&u-Nc$Sx{D<i%{W?O%Dg`x_8@{OPr5$is%^63>>a4D<dx_5cD5U4c~
zwBbOnuG_}FOq!ZE<4ODZS8vyD4moMedMd9=!CtLn{^1N7*sK2f`L7t{dmszc2i^3Q
zd=(Ck@MsCMp?+^E=@N<ox^ZiSl8LgSV=sxxZNf^bfU}BNIntQzE`4t9>(Xs5cPV$T
zm<{Kht9IPYu7c!aJEPCRH@G)|BDaKsMZ{oMIa<nB0?;N)ln)XWc;ubqK?sqwz~2ZH
zyu0?_WYi}(IQq_-mKrA<CWLliT>8ZOnRLV~?^1szOE?;Z23!gCbG^(|+g5N8$vsN}
zPH_Q5!Z=U%TKVp7jv#B<rCDJI#1zkfKY*{OtvOwy)%tpBAPb<DZW^qXSQiTUtEZQX
zX~gu=Tx8So#jM9uK8BhtFR)pWY|cv`Z|9f9lq(H=Dkw1Y_!_06RF?zQd+b%^$N<~%
zM>ST{BIX~JTl0@F+VU+915^UOlz0JDdy$EGMv}n$@@oK!#sw}68Rb*8AM-b2_kR_p
zT<S3oBWTQ?4|dcWw4&`krveWuH8NlmD4m-Rxe|uwMXOVxrKXxZYq&*(NM-MVb3|Dn
zpe}N@&iZeK7bQ-@&cr)mzOwGSsK?KVhnj3xrxarcI#xdo%4FI6He6iza%PYvFenEb
zYaK}&b|1F@<C9|F3Sy3MKHka?Bh0%mq$iP8`fqlN3;ODf#{E#Oy4vx0k(uUl|JApz
z`%tgsPL)%=j9>ruiu9~1onE?&#@@5vze4E&+Tm);OCTlKLH<d;4F(zZ$~Hy9e$pyv
zu*q?IVk`gk<U3A^fyI*%*Vu`rX3i$|UJzeOQtR)D#Dw!4nddWLrnZ#COlePeGBe@I
z5Ia~Z)LfI>j`mpQ9(<?ztzEgH7Cr=(TmWBk&=3h-4;cEl;CQHWJR+u|e(m^H%N(2o
zg=<Smo5(*S$$VNeqm2WraM<67*~6fUQ}>1Epc`ttL*0+#ZgIL9BRS^~-~E1+Gk^%7
zZSHT#ML=kx0<F#(r54E?3XFB!4y$r?F^Tmi!c-II8l2xDcV^6igQNcHxo(&G<|}W$
z>0{C&F4uDg?T=NAVP+%07M2Dt$BV`9)V`U4?>7<jiZ2wCHY=X6EwL1Y+^k4`iIVKU
z1IC1mH&~pi=_NT)pug))Xv9jy+F(}Zan<r59wBKw|8ln()3Q$4*wAnFcc|wpFiDZ(
zuN$KVx&8NSM3!P8XZiymD`Fp}G<u+JU=o0kMW+DR3WSMJ50^rS)JDgBRqlX=xeL7k
zq!$KzfbHV3!jI&Z%AhvyZpJjzO#Nc=yz`*huB=l7b5{DhzDZjJs)`WK{~?3?$Pvt7
z;wb9mjg-c7&+>(o`}HUR8U~3!aB2kD6Vyh0z12<24!dT`rbU3pz5orp9bdcfW-GQP
zvbCX@=;D;_pL2%!+MVE?AZyO9h{)SLu-M^yPDP2|qq@8n?8uvBEztW0m)})>a3EH4
zs4-G4?RLHT52u%A{@Q7!QI$LTY_~jGs2*)hSVychvmFo1Xr&9w+gbgV>M8#*U;UWY
zSTb9qPN={};uj0lmgD{}8U9u!$nbR%!Cyojse5OOYQ(4x6Lkb7bKkE?z6()tI%l5%
z6_C1UFs<H7wlkQ#LlTi_kGgBmyY#5M6!2UgM-*VygT{~$i6=)0^-Yh1mqX#2oK#W1
zr~LoFI=B-oRXgA`T+NE-2sj+*Vh8dl3|w4oPAc*elPN-%sc!6A<HrEHq=nGA9Ax`9
z<eBx$x1lLYFr=iH6T?U5GN%<8Lh%JKxkr74)nRFaqx*4iK0>~VHeH*RLIX#?Et^_C
zG&&twlm3#3bK&%cxmzp8+}y-==c{TN*#pv6>3}!BQfz)bb8KSFduO&y>L|Dt+@=ud
ziDMgJH(8jHm%mP_KNYUr3UrU1Qih_CjU?)D!_)n*@ZhM%vGp)_9JzrQ=v4Ej&zxW}
z$?6FOGLNQh^vbVvqqNbRZ{OzKx_4RiGhp8L{HQuC{{tdmtQDoPRjHv!K;5v=AOoe!
zHqI?75TR7CHxkoZHRV>4{Kl;dWs~(_UJa!KCyE@)i%EcU>P7bf0^^=~tca=!wEsAt
zl><BgsmC?woqh``(#nPHpsYiDrTU}6Tbd7rV7O>rmed4pky(?rD>8t+vPCmxduTf)
zk=ORf(TZ{v3no%0;}*BM&nM9rQZVW`pA0EeG%aRKEp(`(YjfOs=6K4<X0Jh?<RF}|
zfv5@>{Wud?ov?|TTz?ZZ0_xk3$g6;zjqVS9;-fKhNyIzK$|=s8+xC9YsZf2VMx_Zv
zxF0&=00<Mb#r)*O5i|4&$uH0+Ag>nHt+~VWGd(x3KTu+wZk=*Xv<6fKx)6V$1k8Ns
zm-$!}VSad@#V}e3EP+4;A~SzHUyn#>W}_q}t!0c9yLP<ZJKNMu&hsg@DwwP)o!RI=
z6Uj+(ey}{zK$|)5GZkt6)I0+#6knIMoCBm`6&YFzGNiatvL@imK5<kb>BCIfZqhvo
zh!zOa0pL@S(z%JWGm&eXb)Ts)6@H}RfQk^OZ3Zg!L%{>t8DK7WA=MgBZoQZ{HgW}j
z^ztXGbl(;gwMiYhj+ausT`&*t#k@m<Y9E*c>jV+WrirQ^#L*Hf&55jLiVk4Lh~+Mn
z3L=gRxHg=GPzu<=`u$-Vhp}e3am+@4VuI{Krf<pHIOm#PvAEE8xKah>4SaxMyFlUU
ze8^6CD;-P$TPX_6*+xO+_1z?gad1O_;MBC-$;JC#ffip+v3v#}n3LQqfvhesgBE??
zDxk~iV&5J40f)~@z4T`PeaiR1hE{-l1m;1(C?f`(>VlGd1c=b<;2V&7D`ySp#j3X2
zptS2x(d0gv{~><INS*{`gBt@7A5l(2%EGYcSjSDhmhMr_I+5&Wl#q&G_U-|~LLF|8
zy%|>MJ19v~`yNFQ614n}ZRsybw3;o)cAe5_VLvYIT=}0!dykge-Tz6f-u<&<J?Y)H
zL0<T?qQA_TcIu<Hg4Wkb7PLUdAI&WpH#c2z*`8p1Gt6s*k#TkH$hR0QSBTpDiMyqR
zlTd%mp<dEvsl_b}_TX9`EFcyoUu52Va%59n+pa^q3s-v_TOD(du%8e*o51MX|Fy#W
zH&X}Zm-+$L8hxi{L4mHH&rLb)-KV;D<;|<FRyPq{TAn;V1rUhNhQIEs|J699tk(AM
zr^-h)Mc&@70Re}1e7>m*V5q}7(j<w^oVV<f9JKTnI@N~ZtY)Mtd*_tnVS}}j{j~`x
zc)ITpYdJhM<Q`!YyT_!DkyD<;P+XXccwgezfi3MQni=R~=Z614mo;CZyyh#mQN*d>
zM4%>8<bz#m--~1?K#~w??<`SQs#^dh%Q~!(5+n7oi09nuT<<O44iTDAI(&?ih`&*8
z$nJIAGo`f8Y1RFhU;4fTOVP4Qp`>y)eXZXcUF6*<%wOY<jKwok5p8Rq;aCRyRg|$5
z(E-d5U73oLg4z*>vkvulEs*DMf8-6{9OmWP<!8W8&z+$IyWzVpu!TYgR@1Q66Qxa#
zppF>4)EHqqxBOw$_yK3LaaA9|{`~43UF15SQAJLZCdS`sCEK!AMG4}||LK>A(v|B>
zWLJYh$?6<^BxJlqd;=AG6#~Mbt@2aC#V*pOqK>ea=ofHcqrW=vze2AZ8XL7cvkY_}
zP=4Hk8&z|3xCMVLTI81MG49$M+F|YMZr!K)84Wv;F#o6=F9C`smzR`pMk?gj;5!5-
zq@XyH54mx8Z9XuIPBQCPnh}v8$8-QIGnIrA9=Vay7H&&gu1pnyx+@eKk>$yA7B8|J
zgwfV~k5~P9hfTW8ncMJRX>>EOybCdVa7npgQt`*L>bmS+>3#)0pf;Iz&+K`_YdHEw
zpjp!i@%o5}DmYu}W*7L|zRocH+>w!H|BKAr-%bdS?>faRBq7aU*Z?8cl2nfm(0=qL
zTJjAX%}6KVx(ecrCP}bPc6dfP2@Jwijq9UNcRvxib)3fAoyobFr|xZDl=qo;^z{{2
zOw>8GKit7i7~z_=v?YK((#DhD(e^y+qRl^ZHM5?0-;BECI-a_@uI}~AeVNx)jAKw?
z905p(AaBe%N~3YTuVlGX6xf8`2y~-Z$*c=xxcq2rRedj>6e8qnlPupzJYf9Xv%y6N
zo1<*#Ye@-lw)wZ&U(lAizuVOCjQUgG$C{4Vy+TZdwEj@mwaqmm<LW`VYXi8mQoS%6
zSI4~s8HSEp>LN06z+gjq%jyr;o+CE<P5JNdW0r<)>2t4}DLM5z|6G(&w%yV6*RC<h
zhZM*O1)C>;s>RCTUQQ4?fxm^kg2)vO#)5&QCPWJFP8k%7J1~ycAdX&Tc7^4ddUV^n
zlsdndA+PVZe0=S0$&B@Kac((GxYYB7Q5V<ZIkq=;ylDp#G=w>VuapPp<-6eojvAQs
zLQ|z+SkWAG{Dz2{OQHpXt-a)JShi8$RcqZ_v~esL(e=&WI5uVL-tu9_E8F1Fasa4l
zwY;3tR_=t_XE4xX>`~++@W4pef&y|p*r=otl|rfJx1wYH55SKF)NS$$IpaVu;{tv7
z?wr`-6Oqj9TuXFobllrbatRRS;@o=f$Wg}W0t<CakdE!mOkP@kX$?pFc{Z)4sJJF!
z#d4Gk+z=Xhoa&_(I;b0GHBn>v)reL*izM*qj(Wrr;m5c#(m6JCi4|*^RDZYV6Y+-6
zKo|vfw!c({WBrP?)dud%y8gL=D@{vh2Bg+rUcBf(2X$VlP}XOYQ_E+R5mL{LvS3Q!
zH&E}Llj)W7cX#l=+~eO$##sFI?en)KG5-tulNev1g&{^^dUwdq7CoEQ4XatCigkDa
z;ui)tVm(pTqBY}VjhA13{dD|KRqF4m%V0nu))74T2aG!9s>RR`yx?n#HtMjfO=+DX
zv`Hf2!CiVQ$*>-pIrWlwp-p*EqSl=1(bl>g@rdMHvX7W}N<vMsciECqUeIokLlNer
z>Y(3r&oSLKWtSy8)Cxh8%@Ir?V)->TbC)DhQVhHWh)aMa)kC(G_cR+JQA>8*&nJ4A
zsdL$DZ6v`w>9fLN7}XqE^Xw(D7#rGva_cc8xF@6sWv5Os?}bG2F6wH(ULn8vZ)a%p
zia{XIw=HQ#7!Xa~`52z-q!IZoV|q~9V~vjH@bK@!d4>bG8F)w2l((l_aO<-oUcF#x
zzHa+TJL5l>ZX89<NF;5_b!xH=ltw*N040{A4tg-NZoT!#1jq+tz!Ltx<0_)X`NWod
z&9HKc#?;2C8N6lEttYc*p}7d3OA5N&h`lS?&Iy-tt2%Aj@3dRgws$BhhIc`^;hmzP
zo+8QPx1g#ssRHzU)anH+Ls%?7Fu>3-6<O0ou4V(RcvpC`RktWL<FB4zoyYt}6(~CY
zL1vrF+t{I;+|z3PMJlr0f)crbvqTHsV+E>@L7bt^MzZ-}-m-BQfxHg1U#`FrFGi+g
z*P~a{i-{A1qWCXj*_AJ%y4U@;%?6O84(X`*Al1+F@V-v@c0AOpTz6ik2j)gF48>#n
zQ&2l*P>vQ5w5G`R{p`I#jz6;?#oz;y`?ZR({gF2vf9kf_witbIZ0Y17-(YKkCT1Iu
zfA2M76d(st@{Jg2YcD`GQDEc2cMXx>n|J%dR4B_iPSDn}wQ>V>brAtj^?i>8yzoaC
zV<R*jauZ5~afR=TuZ)d&qs!Ez${*i3dhoE?9P@{N%?|`O_($!VDY$IjQ4Tp8z)`Zj
z@<WQ>7|6{J0Dh#m)l+FD2?W#Z4aQL^=y>wV=q`6rl-e6S=4_P&^~k&eonW!M+Sl*w
zc;lF1ocJ^^q-BrV-=9DgZ<PwU4J>jk5Mat|fm>?1G*{x)LftC2>;r6*!*CWfavr`r
z9&N+*${ZkD_w1lv?5#%^%sOtdEfQzON9~)fwaQJPmCW>x7-qXK_K)T+*km5?306V&
zYb?nP4#>8<1cWaWz?9S(znQ&wyCENbFj75KW}4ITu%kjJ0wS_J@;>meO)d_fY{TR=
z-G@5#GkOc|zeB|l(l}d47i4FYT^L=Z?acD3+^iI(J&=|?l~Dbl$#^_dFV*7AfYOM_
z^_8?%7YF@vrK2=B@l-FtDyKXOS#xE~ujtVxy}GAG-o{rEhjW_9dutMWQ>XwIrcT`b
z1Us2?vhR7q*6YW=weP0~mu<iMJnM-|zzOI5%_{CHWI#6pH&#Kl67;!a&(7u}Lovz7
zHT5nacc-_RB31=o7=_n;KT`wB`2f<l>`oqWcBRRk%BE{IK+}BD-L!=#nn@niUd}C2
z<fWTcWNG*K`<ALLXpQq>`y0|*=#?-H_`H6g=-(mlrd$n<dnX|-or6|o#iEmaK3?iJ
zl=!tJ*87&?3Xdkp8?DQ<AKwns%Q^g|hLPQaeezWW(Tst20+d_|IF}%|{MGVbL1!~Z
zkoAykM6!pA#&MJs1EfTatMB4gEy=q-Ued$pTt8cDTvbFYzwo--in4ZwXPoiEf7)ii
zCo`*p2x1LW57&;_G7J|Fj5o$0Ut_j&1Q2@o`(@ZcVsa8Tk?oV;Oc$|PLJiyr$dI#{
ziCT48ZvRTMx+-WHUs)v@2Vs1MY{=<eI2O9x(i&fAoF64}x}JxmHalwT<`A<$!EYTy
zvHMbg_KBW_4yOymOFlP$Xr^?Hem%}e!EdfeZr)fFvodzY_~sSC-?`*ny|giavau>x
zzx?5$Il;0{<{N6>xY53M1kgLe*A&!v|FP%&4q)$e2}D|da2HBZf`WeI5zb8+br>^V
z@(yW0oOOpdX}~RzljwgCMwbyu82@RqO>LH!WJAihpI*yyYdVkur&c~R0q%W>b9sEP
zp0Jy}77R0k?_7KZ{7Q9(3hzP7_5DCI^*2Qt*?|l=b1IZu^oPsHG)Fr*N`h<x*Dx*8
zRW<~o0M|ebz7Hrugf^d!ynF#?GbVVsEqRb@vz(gvfOhLmZ)mEGALq5ixXPGSG8F<l
zHOCl$y|)t7595AkYmwh!s=Q(;HwkI^)$`40T}o4t1d(<VjvhxmSYqoTd1G6EZ5qi*
zVyql&wKlMjY{>cy$DNi$q|`g(11Zl@Qv7@((wUj#&gfgH6T4ke5u*fUV1b0t8>u61
z(mgOu2Haf~xnvXAw;8!DAyG)zgaN2%DgH+H0%FxLPMf`}|IUIbN)4uZHuRCsheQ`*
zBk$yIcqVn&H_#(H*Z1{ieReDVOoNKjDhL!>#eC^c;Mr-8>wbJORg-hT<;+1IsmNyU
z#gT2njC*erW;Fm~L&@Kp@Is)Run<<pUlSsK!d)09wzqitv_2KxtKa)#+EZ!9O7k7v
zCu_E@O{go(-F>!SEI&{XLy7>^B2dMQOLE)_fMckD26aGf(TDWf@_y<GLnry5Qk6T2
zED<OwC4MX<;005kbGWuPaiN`SW+R!5-kI85MSpAE%h`zYE+v<-zg)&H`xoA=JXJ;{
zs{VcEUy+lGpiQnn2&GL5(J_WFSEfs%yn&0536|{`gE7($7WDBM)OKFt{QIs>&wkPd
z<sOLxC#j;|;pM0=yYR+yoX1QyHSx);Z1rTbfl<0UVdG2;G67sj(ZFy5_<EH38^C%H
zRY-qF(3S6m)VLZrFF3VghQDR93S&S_Y}KWuP9}sZ>|A>+)kivX+@Q>i=Q$%F%FW0w
z_JfjR@cEHrIAJ?_y}M2FJ5+9vy{Rar^!nQxXp9p=u*dD!YAl>N<Yal)#_+M5ezl9?
zofijd51Fd|cJJ?)Llz8~;vl6u*wZFE`eRG_+|od=5Bdu`oRjg(<M&ms!fQTl-yXQF
zK*N<}A}UXMo`+Zu#|D|C8YcvW;!nF4Cp#mySGi^u8K#}MIyH6r^{W6wfJWK%?ZbEU
zn<qWWo{844W_ftpXU&l-&J(-dBcHCH-d@JG@z(k^^*=M*eIG8XVo6BR;H6NAl{9>L
zwWpufg?%5mJAY5{ShFK`4Y-R2?uv1IqIk%`0-TbviNc(GH_uBv1G#5C3Zut59%f05
z_%Zb^5v4>jY7<r`GEDkVq>qq!j`1euxx8Y~rwQ~(IWZW}vzUX|@=8D3KVR=4GFA6Y
z-5^($frX#+2Go`~%Ljq=4cMitkQ)GXmR^7u=P1>|wp*oB3l8^O<uGqhyb8e$1nqL9
z25~o_Vgk!HmkV#7EVXWeZJKQJlb8&^J}0KL|4^C_*q;)0ZsK>|c*Yx^_F0{3o+5l~
zkz}#pJFi20p!%&f26c)eNawJAfDW)qp1+Es#DcWa(Gd1*bCn?O*GCI+zVmaP8{Gu-
zZ6n996~TEM*_qD0=`FT~H3N~AIRO=|%V%pcvus!O4<zs^{EfPgqN*_PBQGfk|Ajt^
zQqKH*6IFQ!a8w{g9!0>m1wt}-Kc$TT@10L0t6{Sf!KF2bzm^Z6*sLbd*7Ca1oTm*t
z1Kfu?gSz4h?CUpRbvU#GEpkl3L2klkrFkC{heNN2*&>XdOJR`zsuaJj{HCkOE{go5
zscg$XD%~`4A7*Ju=<<(>&BYaR1vq6vYAmQ-;($rP&EwKyMGf0fuKETTRZu|EbGi-m
zl1V@J8P!V??{kCS15b5uiP8(9k9uRrjBQCgzhbJ0E)MGk4b|IU>7-LdK+DL^)k#>~
zftU&em*}`!&aEi?q4RHhIoI=fW8>#oRdso-{EKn#bk9C@`0V-Z6n;bD%VQ!9&uHt`
zQyH3HmHLM~GCz*Kc$3y75ov#mp{&3l$v?w!(nMG+DIW*L>rk<ti^Qu9m4ex%{29)1
z1zGAVnBoR<_Rg)dj#dMq;&u9GmpuBecUOez-<cRWLp|3=nD_XwNBgUE=9lkp)Sdum
z>fV3FR_-XlFfws$HB=(sG%39;p(NBB2^H!sn9X7NY2=-7s>tEcX$E7Uo<M^s0JzE&
zM5}v9tc%vWMU;P<8ruksB??Cm(2ah-Jne&TpuI{}O;A}j1^6#Pz8Yu)tvw>cQkpQr
zRQ2YzCd%3{lpfKK*>JGegR%kU9(_}T*J)nfJ?d;aojvh~`JF;W-yBcx&9mBCmNzLS
zCkb@Ge*1ASFDk+MvnHxFq7a}1hI&QIx)1sr0F>wh=SXkDN5=V^xIk&q>E;*JI%W-N
z$I)R{OJpM>VRsoZuGyz$v_)C|a%>yjd?HNqjK`kGDkukvV4AN=1QyNEsee?EM6MrH
zbHAKeEnEVXfCpaW)e`e(Mc$)0w&oj&3DpvXfaB#3FWa^Jr`;-pSO=$T>per9wF_}y
zTq3rQIoBOsu?&v&m2FVqgL<$$R?aJu7SO9;f-_X}I7GIev__);F{fa9pf(`4Ey>>N
zM}yi>V$HPIe%zWKoUP=%1P}~b^bX)GbW%DoBRXZAF&cwf#}UjERufMzDc6nzncE;)
zulo*(Ae`s18XdQG$-S*}gOxjb>W_#h2^5_$<i@FR+p?rF-)Wy8O2>LsROyh*!4W^d
zpk>mxlRdsCKdeyfQ+~`_31PUX7>*hV*xxnPs>PDF3F(Oj8>_lVX2R%wohP~&IiB77
zzuru4bAOerclpfHg-?E?u4NOW{#UN}eX3_2>M)I=?B_s4uNcy%yD~#%d%o5!C_nKt
z{P2d%Z3tf7+bS;d23zDjA~uYkK+z<DUg{a#^_}D~Wc{F}nTc2W>8ONi-T2?V?lz}e
zRtk^<lW`<HAu2I%Gc<pnv{u-m(`2w7%A{TcZ+JZs!>tXgOn(++Yy6a;UzuM7mf7#;
zc*Da!zO9d)Rvy^3kAD2uAl1LY#*TaLs6#p;QEQur4a2Kw@NTYd9(|m{L!E>1;|^!P
zyS&aiCqc*TmLxX5-35i$5wF?kW+gsLZ;q64i$?8hx@xM+{wT!MpzBqa72Tou-P~-)
z4B<RtIx;-5V9FMsmij!X);WWn`(kSO<Wt<1%$%a>?C2N2@Geg;NB_Bz=k3jF+0sB`
zoOfD})!YTHI3Rge(~xVzP9hY%Pe;Bnd&v*R2^u`-ffJ_N4XAf~OUHcT!gL9oE6~>i
zB9@|}X~#{H<^&C;Vb_A#qRs#3ULf&xy1U($k`!iV_!BQgH->UGJUl!*x`-AZPishx
zPp#Ju_w@Y58IKLb;x)N=91g$kg|$=)J$GKYX_xb6*Q(Z+$<Jd@X;c6pZKOQNGX&pL
z0!NUpJ+=eTf@rr!M9hS^yAtaW4*)c|hadl2eqbD_H3X9}TaP(ZJBv(u_J=lDH@#<G
ztUYjf$b0zFh_4e+8{Ak}p$yK4!a+dWBA~;22V<BPYlvRQei$M*V}|vFom5gp*t6;I
z?AxIC0Eh%Sj`pwzWeZM>-HhS+D1g@0L`XB3y!e(MaW~*OR^o2@_ZsjTBmY&1DF37g
zdI5T7cN>@@LTd8i_9ik?;y%gc4C6#DRJpoiLy`9kRfy6XmY)L3{W_F(5bAdF`4VDm
z`*Dd&5@>69d@}k{#HJC=zC8TQ2RI!H5U$P3wGe`mCIkqajqUl+MKhaYaG)Ss&mHKN
z$Gs#r+*G?W&_G7OH351fvCtddtCkc-Su@;-(`O~lF9z9P61hdaU3f$D6Ei!`j)rsZ
zS>9fuNW0=YGCI<UjaX^p$vW3g2*KagbSK;;9JCBMW`EGsW&gp}4v=<KJlTD)HpB2|
zH3|5JR;mKVa26<0L0<W=*_YObKvNTW6U1;fikRPsTvJ>PeSNw<U&G$0g7hoA_#&8X
z0NI(<kgSS>b<qi-8vABOPFa_mKP}=-&*wM?ZC90T><^_``1LHBA+Ge^w#wD<eg#}f
zqjz7bX7z<Oc)9hNePMtmo0;R+BQ%Q&3)-zr-nWkvd+}fKUoy895=WoJpjvvR-B4#@
z{TA7E@&Le;Wu}(E5lwlTiXyfhF_7zs?7<gS_b@CFL8#573q?Th{4{XmWm>4>kUOL1
z_3N64o`=l}(hOJp0NwNgMI2cCtAB;{8p~xi$^nXIVmt#0Up^!!bk`$HQqN}HBAq4a
z;eY`It_$`HD_qN=9@8ED(ps^6C1P!$b;0`x%Y*Lg5gXMOJ0v0R4A#IU5Vwu9L1_pB
zwTLZbk|H;)m}2jNsL70S2LgBbYerbWp6qsyUJFt7z=Y<9Cniq~rUKLU3WFw+k8D<z
zpP2d~r04>R|Ga#QPy?Y{i@z~$hUD5BJQeY`gL#z#`v8%z*})$E70GepjSC=c`|LAO
zw*C5dkHq7z@<fBKu`^zY=;WCxpBJ}ggnz0oS}50j5g=BQoIz;1t{meLsP-lWL^hYp
zdF>+B7+3r>*lg=pT&4}=jw&Q@<|NCvh&uM(5v9)=?0`5)3k|5t-C=GR^RJ-Qd1PnC
zufiBq+mrvtbB*-tsr8RL)>AiE*}mUgRds6j<E;l>(?Bx(^ZJSxTduCz@u+L{{6o37
zh^mM40&pX05|guecKJc76=)Rddwjp#Z~o=R+dR>-5|{Gy@{>~*roV=?x~qf$y~B#5
zNLD`N1PY|4;niR<)+q|;pC!3$ng}yoE|T<GVp7=KdSATBlX0tkKJA;%*8~eM;fZ<!
z?r4IysINkEW!<2qXVjiM+7rBwM~<TU28DzcR3b)?j0CvGk|x4702*}Ehxx7y;5IJ;
zhj{R&U>|d45$2>3tCsmD>C4#-@5LpqcjmroyZOG^`8L`0H&xER8-EXYOX(;)dIT--
zngiZjEgS}-ty61cDsLOK_@aBNcKe|bq!#gebEkSuhG1T8I^Au1c5&UykL9`*L{_hu
zq(FOQjx`P31CX3dilE>hm74kHe0UE^jF#+{{ti>k6a|u#MP?v>&<`s!FAIbwg^L*-
z?J({g&%H0)C)9(7{rOYJ{-s?XwuNb&{rZo}`M2NA?|gn7<GAO4KcLt}xqc8r#9DEZ
zF)WK_ha2E<>bDOQpw`M&y8-QM)ai6}-Jsm02o}l4E#$`9{sw)M$!;`b3r%{w9Hm_?
z-L@kNwk-FJN+51|9D}MC-*D+6IlY+4Ud<_*ULK3D#17V;WEKWXJ$XQ9Gi{r}sEJH_
zS~flSxC2Wm;SYCM(ZsoZ9wUCfZu<|lO6-bMC@DH(&`w1(p_pj#0U>%l*3(ueq5gpE
z80i+Yl*n*6IBI4&s^`>A-c6)}IT@Pcz>X^4%hLne1JcY)$;%hkP@AsG%T+3*f2C|I
zl#e)2;8L8u5xB~%l*6-<)g#=<{RT${Q8?;0qRVATs885SFoy#=r9fw@*)K;4XFD#t
zNQW8G$cqwm(xL_meb1fQFu^SS<f7aDE0{oJV;~RAYNA^k2SU$}I31PH6BaOAf*t~+
zm0t#L^e`2+gBPo)KA^uu*#xI>vl-z_cipx}rX|v`+2K`1{<~-`X@vp!2*NIRO<N#-
zbpC%;6aOtLu27C~);l6$q|l4YSp~q4IH3gs)_Ui!0e#JSM)Ybj*wRz6fJOxAI%K>y
zVkTr24LNJjD%NI(Z)&Uc&hwtY8fSdIiugRJ-0%sG5V*SuIdeP5bAYsl7(Uw?fnj9J
z?Q10$dCob+*x7g4332zzN8#g>p5NldZHWQ>H*}MF0&?d>4fiUqCm*T2V{i^JTiB%B
z3Qfk6jugPC#%1jcA$1)v_Um0hY#@dle^t}7;D<QTgTMZ|*OF#>wmMDES5IBf^?D7H
z$$GdmVQY`&rAsSfP`_c|BN(9x7okNS1rg&!6m=s}ttq>qt%c6B^MP>^TaoNURW`){
zRz-uZxtY%p(Wxb5YyBwU=<6B@D}^Qwot0*<*(ougZ$4cXweOXhRI6w@@>XIomS>()
za(Qam`tc1cAW@#p!V*fRv;Ci5Bk0r8a!W4zxM<KaQZoR^%*V&qc}oMc{ycX*Ru`l;
z67VFez5-oS7D%8k)8Sn=d3-Kq)yxxlAj}u$tI2(zeCO8Q?39=`EnBp9#x9>te?}B$
z59Mo4^TGj)40oCl=PC2x76)rhPb(8VR;egk3u4tT?_@F)OmVoN!q~B~H9cE*#BScy
zvi`tH?ZeNLtuCfnUOM5tu3!%kI;0`ty@W>81B0F5M9-lJ{@{5wK<)2%AG0JjLeC5l
zKdJUskucYI2`w3XSZ`KFB2l@#$&}l7%zOr$bu%+`;^bx;MIX!bdn<HTXQ}HXe>6OY
zm`ek;mwe?0F4)^71o#6_cGG_(rU=-7R)m;qgGSoM4(9+&z(S1#lS&6={|N5VnCT$7
zZL`yP$tr0opt_+O`ps3x{GEz;dQSsFEsi4p`rpQr6hA%`$N_tbP9EkkvQn(*8dJ5b
zhd?o;j(!XIH<V%rSdsMjJ0z!ZI}pa-c3IqdIN4JfhS$X|<orE1w(U;nNJ`3HKUzt)
z4bZAM<&2m*oc=g}whwPcUy#YLbMy+r)#RCv(vLI7Kh)*}VMKF$<<-Z+ytR)-*(O1s
zJx}feVsn6F-YG<`C#ovft&oMlT8*|FvV`E8VIpl-6xZ(t{}mMe%k;8EqWu9OC)MA&
z8?Yc<Ua>C5wgLagayxevx;kD{59da_mU?Lui1iV`_q6X{1<h|D5`yYwV>{Ux{1m2q
z&)%kZBFD?jvHa~MQ;6>)@#Aw*nna2yL~bz<+JI<Pnn~2C^~VZ{#d@8pq@zrU{s$tb
zMYn$<<K?i%Dq3h=DWkmHuC+Q@dhTDVsYLMUy|$g=LYbl5Q<0@aD*t1hul5CgU*saR
z&?b(6yW3V@(Yb2qQtwk{orC((UgdV;N?&5E(sh49^#CEvch<~tP~5_ZYJZ9^VW=pt
zled#Uq8Jvf4hBojU=T)CehV%uz}A8psI<4xxDc?n?-mZ>Ht~34?~D9r$lJQDOilex
z+nJ7-va0ezYu$X?eG`(L?avA}%1;5iC`Y;OtKKk7%0DWq%AZMldlpmPTPk*Y!0AwL
zYu@Tt{RH8IPwh8~$B6kSd(GzQyI8C5nbBT6x%pt5_fHz&f)+<<JVX(Q5ImMJVh#tz
z35viZ(Gm!uVy_qSwU9Im3ONP_fR8V=WqT!B*xLy3TBmyJt)9WL?QZZPi3=K|8^lw^
zR?V_J$96K@PadfV(|R^d4_6Y^+QHf33tWl3#7Nmy@?Sm{bF6XTpfKNz8tQDqY^wJT
z6yYN<aBsx8nVY|af!ttahVXp_#{Vnppf=&9j3-#z{;{kGQG2)A!wH$y1T|oL<l%;U
zU*9<n{czzCj3anlz<<?wM@iJ?K&R%@D2(XDCb~)xYF#M(5mGG-ft(&&EAdQ$c&$ja
zpwumS`H+Rk>UW<paG#O_QVegT#S1j{cw?W8inEQhH>!|<Ge<ZW2u3k<#KQoO<1#lZ
z(UEEcFY&GL@lKJN-0Uqyc;^$b`kVxl7RFZ(%I=J3<ijUTK&OC`pe@bTrUs7t1<Jy9
z_FBEKq|+@!q@zd7c<Nn<H|({PMv-mXeWfPJ0V1>@hkhMwb98`8;u)L`Ftrts_2x+G
z!p=>frXY3oXkRpxRsxl@va;3vh8l53;uN^hGd@f;%;?1{Z(z$1yy9;(I4*t%tNuH&
zM7gd`KzP7k%gB$>^?FB5$k!lU=W7!11X74iGZmPXw>=J8o=jkj#1D#~wpdHC2{)U3
zU!-yNP+{@?sHl5oR}?k)>xa!~bAa2r4t4;SNE`ByzcK79FpKg4zr&i`joK2XkLK$7
zwLSyx^5infu6E&k>OA@5!w3<2jkmMRp7_z!LF?k1Q-D~yTjI~o{4lYl@9UN=L#j}m
zQXK^zma2G;x{Xeyyl$CH;oOX-NFCoQG8aSPIspdogMbc6d1z4X`;wS=vL3BDGfxMs
zsXwcU`>^(_im=P%+(6;bUs;|$v(}tndX3n5E0(*#WgWI3;AyCx01k-|dN$Rqxog_?
zw*RiaPz&C12jmIP;En2dE8Hm3l@0Hu@v%OB{qUQ7H0W^U`p>j>i-1sXaqaV{w?|Q%
zDS{UqP;yS@uoA`IvK`89<rdgVh>pv~%sG$y0hgCX>dG0Oc(U1TWIkyVkt<wET}*Xr
z^EXU93*Gb?cvuRwEbHxe;{u*xBej#3!*lSZFS0YlV=o4+1;`#YSgvXoN<g*+mg!*p
z4;Z6ye3V^1p|gB(s;WPn8EWP$_WY$&QS=-Pp9OpO5Lk-xvw*&r3Pv8c17&ORD24tD
zVsf`~-H#|ysCZ5`r!=~=e<BYqx6O3}Pw;Wnkl21NUVw?=Z`NuaWE<ARk0>?8=N%3G
zW^65D7Vi~FT;zr}I<<$qfq0xhtVD9UCmvdvc=i$Ap|BLuA^Q4%RC?^gJ^>+c_hriW
z7~r|2rd$U~Osn)Io$@U>>1&pvz>1T=BXD!@7Vq+OVLPZ($WNS~w?F?9JBH{cIf+25
zm1YmH2W&&&@)licvVE9n?-$OiE=#uvR&6h%-EXI3%jBpE3B0)VW->e|jOLR2kua44
zCa(TYN49?}K;(}!8d#!rZMYFoVzQQK7qI}|DgTMLx`J(q(KV+jV#hWT)b);4S|saS
zQFFFk@k%+M%aXgL7S#V`xne<0{xe<t7N8NsWEUwS2e~hB@%4yt1W9?Un{qUND;Ouu
zuVFuyTo4X6rcfWTO(e#NH2FG7R^t)8RXcJUOm~skBmwURU}w@qC<b1X^k?ugatqPv
zsBXw9Vg5#&TwKJ9D^oVB7atu(4uJ}J-0u_|Vfk1f*r2l<E!6U6P*I3iq@x6N`P!&J
z49FQkZD>zcGFyXa(>6$9e9Wo@#u*V!9a_G9^+;TxaJHPP!6!!cHnR8DGeEBAr;HB+
zV~K5Hl=7fj-mLX+GeHA2UOJL1-YVoTqm;%;T|J*qG=Nqf^h{nX_`|zBOm^1iiceeU
zjcWv>zc!K7YBGZ~{b-g4u8h1ly!P1SVRCH@c{_+=w&299%iqko);XdFoP1uA&`@9#
zMJE*0_FY<lNI4CtYY=XO^!gQH*T99MW$b4Opq&cPTJ9xqlLOMd*NUSzo5_mwr$57$
zc=VVg7}iy>nQ77()Ey=u-S9s6>3LCs`W{_Zj@<aZ7*iY{MN{_NoyoQ;el2|skUQnm
znW&YaQDT=ftcIW6DAxkZrz5;F%gh?sg#nfiLpG{O3d=_1!HP<y4ao&mg&hrug(9yO
zbh5vNq^%`i3%(&l$JRTEa7>QGE9oo1=lLpZxIP+e=1X9b8(CcQUeEQ;?y3ab<-ppA
zfCv?y1UVNb^CQ|F>j!w9d4PjUgIEBNSTY*S1Fa3Y3xpEg0%f-BOTW82d@U)T)y+?!
zEhuczjCfsK`N&8TzTlzHseluDrK-{r<(eNySTsEU<95P;yCD~0$y|ttGh)KUY%<3y
z_gx{n2t$D{v(k|0cBN-mSG`e`$S#GBAnJ)ukHW^dwT#?@(y`else3@>DAvP;zJncY
zJEsctM^Yf<0U70O0MyllAHT!``z|CEsk-P4eQ8O{kpzw#Jd@~ofHIz+lUKIJuJ$XE
zvpIJmb)j50mEmR6?G$j$=27S#y49%){EOPq3>uJ$#(<F@)n(Ari$#Jre}@9Z9qrOP
z63SeM05hZ}vJvMBk!tV&dfT+^U}Fw_E4Ft2{!KV$Iit0(7@nI#ttamt9y><kPgQ?{
z&kDtItAj2jxS9^dt5=0XD$yV(TD1c_b218t1kYZ@Y3+<-fx%wFBg*T6r;^S__D*;&
zUG4{u+#4VDZQ^0#*+u|T4t1tj(ss370Dv_1JDBSYfstO&m#fRybT`PkJ2B(p-0xlx
z3o>m~0tXZc+Nh7DwM78P6-&`^G##3X0O7TNl8Z?IN}>KrYFNbfbRXZ~ECZeH#lxX8
z(9z5ECEgj^Yn*n(!0@I^uu2_pYr}(sa>G<6+ZcWeX^o?sIyLyguYx=scfhGob(^DF
zw}n+*j+^-S$Vp~D$^F@MjgBs@CE;nAe`86@FN44GuuFpnn!0$O?2j6l{dcI~UopwQ
z%8w38<9?2yCZA~ms(fD5rm<~rsiLg8=?Y@9en<;Q$mHk4yLtP2P7LtU3I%4-!n#`M
zY<2Xe1Y9+CRcm_bsJG9l(&_Y9Prs-r|3=+F!-v(BYv0PQPT3wqKjNX^<tMSUqZacM
z^7ZB`?DeBc_`ba9PKrT>sQhhj)7Z{lXR&N}+U7B4XePU~Iy<84Hu~#kRcU4$m@2d*
z-dUKPb(7(euD^+mvP-&iEqg4~`&#yqoe^LRbogd!Uq<NF53ajn%)8XKjnk9HRA7uS
z7t>1FB*zH}KM~!I-Zy7<YQikPUP}$cDb_uYmHFrU7TwBy-CXmqHy-+9&!0(4J_xMY
zhamn#pgh)BJ0)>>u-IYRoToR)kh%Mw7-ZPV@Mzb5MjgDnwyMukeEj1n8YsYsi;|;o
zNk+utgcDD!ZwBmJq4YsQz{Ug6@<d=_adNzqYw^f`UqAR#Ayl(AV4WQju8jR5L`baH
zc?o#f0|k9xFCBgCH{&zTx2)|<LUsbdeSvjZ=<PY0SfnD~_CIwK)lx8=Vvm&|n`<$#
zU^vsM#lT*YRx`NwIgD=1UR@59^E2}S0U>4n##seZ;jG#snGbd#B4WuDi`yIf0bpzV
zemiDbs#b>~H&bfJPXho99P`>j>`*ezi>9?KDillaERt(7J*_<-+b?-#WnF;1choRz
zVviWVdGoYq&vln4Cog(hu2>qBZvt-7t3;qlkkw32aokZ2I~B@t@I48Os|0?vVZv?o
z?x<LMw+&^04tOdAaLKu33qQSPX(TE93C!|O^ywwkA1EuP;lc=?uS~P7&v))oTR_k$
zjS~aaL6Lv?1Kma}`4d)Yn031E2Bc8d$z0pYgED<ac&BSGja3z0CTVpOm=5MVxY7Dq
z$uLgWeN_D14UaDy>e%OZVuk!P$yGA(R)Q9pP{}65KfNs;f~rk#i=(|{-E`(Wwz%@G
zNb#$z8Qe6)H?t?)a62ibSJd6^nVS%=ejCRY1(?6v{y&7Q1ut+u-T_aeoaI2L32{hG
z@=vpv>fEe0$_iqq$i1^AdR?@gXg8Q^Kql6E0o@GOQA@JfYx#k4gQO#q^?YpFaXmCL
zEqy#)>o<@SwV}{5i&cer0US08Fw7FUeq9-ftjGZqZyVryvMtUKA1LYB25^qBOhQj4
zA4VXtksA`n@#d2Nkzb2Z2gM|Hdo9OjWj2XS{nPrpPD(Ur4QVB2w8f5w1?|p&UslMm
z{}qU>IBGBsf#djw;)T*I2nl79z+|NIu>1_f8o3k7hfe`Wk+Ed{(E>uOcR<T;8U#+q
z?OjX_J8@09y;%rOn(w&6^5o?%TOE}q_$g#M9?^)IL&H}nYL5Fz;C}ibOXjBB)Cqg%
zBS^jilo*ID39l%)e^jnhnl8MUrtmn!7+!6lG;0XxuCFP3Udg;Nr0vlH121s&PzXqM
zj^LYL$Z`0dK%pbz%pJmw6OwqI@xUIB(=w(3gU?%Ikw9{(@NxOvS%Gy#^s%+z58t`3
z`1=gMVSj}Sz1^Y`|2P(E_Sg9xYM%*mZ8b2Y0M_I_XVyFV`YDvk0_DErO4vx$20tcT
zD}{N4hyF$qM6=fR<!I(;>sv%Zy++9pe5=zXG~Uvcv3I_NlR5J(n(*Gb<`)%;Q$BdS
z2|7>KjM-qXP6sHttthNT(o!}j-qP&&d>fDiGbs<P0Z}WrV<4BXUug_QGbq(rDFClD
z!8Emg_Tp%s$zYG(UQudT)R*&j_oxYM<k~t)btBnH@&JXYHb))jYbrlP(&tiX<W}2H
zlr7|~ax0jw^N^XZJ>!31p#Fk@vbh~tRqKZ|@ip!cNG8z{P<2yHt!GAnP;3XNWy7|k
zBmAAORTTHSDT41&TNk2@QJW}@j-Z8p%pm7__Lqqi*=gtEpryzrpXS<(kLksH(#HPz
zP=$3=w|$MZO?G8T7&f^3*xge9zo;Pq&ubyyYy<kv5;y55MKvb?$!lu@EeLxf=t-OO
zpv3(CI4X|)Q-9bjX!m}a0kdUtFCjs9)+WzRVrgxFpk98}Z$)1-tz8p&hx#lCHJp9o
z;E5%#!9gwmF13YDKw)b~F=-PyC7|-fO$DUrXeY6!brzD)3z)@;?hW4sX=vv3q;lJ>
zd21WH`dRcs9sQF%Wm=0;aTPJamyUpK*r)79ZR7~bk*g_paxX{;Rq(d)&SB7V0^wV(
z2dRpDh}pB3tD$9+hhfo#GjM8DR1v(}C*4c3owCW^*&%hYB+=eJlx7X8Kbd-Zlhsiv
z5Muf=rSSub$x`g7mbS>P_z&|Hz=2&JLTS9rxkG&fOzJozfxdvpr7mb`Yvga9@;Unu
zvS<V+15NzHQ+FHebsF>|NKRolgoG{nZtgwI)R4AsaAAv&DEJm?J$$dDqowjOUMRb8
z^Z7Z%AAr{oPr-LCAENUL|54dAFXI2pTmHU4UMu;NeF&YniRjY&jpUTxJS+G^u4Zum
zCFjv+NzP2+arBy!_<^q3R8jcgn(nNlzFIG9UY`8ZOhfoBNOcMcUn7hVl#gbmrJ#ct
z1+)IkJ|-;{5bau&rV{7GSbGa0MiWe8Wmgs{Qj5Vopli|LMvHFREB$fXO9}T&d_K(#
zX8-o&$ZnZN!;386?%ogUA8l5hLjT`BI~wSsSGs~XlltRw5*tSDtDQ_zZXtKtvcxAr
zEs3<Y4AyE!snze|ec?2l{W|EJHrZ;en;1(71tr{%UxCTzq-(n8;Pvz--8mZrU1oor
zhShU-k1o~aDqy#@y;0^f9l81~xS4Q&Lj{i_WOlB7bWTmZ6P<KMcQsY&cBB%;v;uv=
z^_(IwIU(mTXE2h3y__ylj>5JV6?7CKuozEl;b_Up0Af!W=cGRG5lHe|ImwPFm?fIB
zbi>|eTqdC<$d+u@qcE6}a^$P|B%^1%KP-pwswVsE%w;p}Juluo?fTC<13yrx>j#Cp
ze_>byXr+d@3m}G-YyOsPbxbXsj&z#^)SH^O6*W&wc$ckdG(Y)8$zM8=t;P6j5BR}Z
z=Xku9yQO~H?o1@}RzA7qT6jt2I|n`zbsWeq;oS&vKq(;hXO;0`%q2x0lds`FqZ?f$
z<|i`is5~#BPD06mrCm<ai=0#a#?WL^{jmb~(#!TbzXoN0ttzso-6$Jt+@m%G#)T0Z
zU<%l{kQ-)5)gAg6UkFE>eXIE0QJt7PiSA;wn;Cx?Z#J+1GlwF+Hm;gCbd0dFwk_HI
z5^dJe7@(;Q@liAwnB^|!o{plORL)GCLv#{g+Y3(JVFcI^)nev!v3sH6G<YQ_ZL%7U
ztk=Nl6<e6gQ5BzvUpu*3x-}0&?ygVA+Wx6D7+f4(jgzUdYO_ubF!5$zaQY{|tv!mm
z2%vdB1}Q=?ZC5g9Qv_37dKS!nCcj5je=M*R>!BIF`<<oLP)Sqm$ErxP{m)}R`OVa}
zD3s-8SJpHS@-oEzi|y?pcP-Oaz@T2L78w+223!XTLX)IBjA-*oOg9I|SDCJLeCwEx
zwXQ0{^5&a5A64Tb$vI`G)cuEsaauvymbElmh2&W2sTb2v{Mrr;`7l(F6W@<&`Nj-x
zG*vm4z2n%nl{)8+sqKh8yo1_lxk4#gHhx%0#GUN1KO*edeWuIaL8v&$J<%0vrr9)j
zx|`vrcbb{Z1vTE(gROh^Ge!@&SH-H^sjDB}$*cxN`6yyxf~B*H(ga*wziS|zF>1=j
zJR?7(8)g$)grVAQ=Pgf5<9u?QnLWy_{E?t<GqIbZjkEC4_adTJ=PhYqw~Y3;{PoL=
zUe~WH<U7x)ft?4PMIfde&A`S>Bsb=5k$66QLCoSB82_N!1#}`{DmQOO@9o80wPxK7
z)e`PIUU=1WT;$0@jgR@jfU`0`<nFaHENkHVFyFh=iq?0q(X>#7Qmvsv$+M6f?0hy=
zgQ_9SacDzR%YJ#)bn-`?^2%UoZFCX4q@prIqSqYG^O+fhnzMY8dhrvP>MQQ;Z~D0H
zW-`CsB>=R6z;w=SieMCI=t6*rj5mF##7%Pc{&P6%40Awv5Y8L~J`Uyj*IP%L$?Fw=
zvVSIW8<*wU*^hLzp;_`~$({ITa0%C^;x0`ZFLFSh9$0uQ4s&qqnNUG2Qh-%FqS-(V
z0*6lHXddFJe5Wuxn=%ZF&Gs~*!tlLKsu`g8q%{q;e0$3<Gf6h9xIH&VlOO%U48oh4
z(Z=gsuRh$Yx-18uV<Ei&au9V2Y?r89w-F*D8zD|SC7{7ngiJ87&<LtxCE8QQG4bGL
zSOKs<t+DT~m$*t2Q+B|K<1h*MAfe`fH#%U_UNb0*4$m_hh@VnhoIZ;D3{s(0{ap(f
z1f}r`>Q1WNQLt+e==AZ8{druMUa@7n4Is6EZUJstSuCwNe@r!4ccP(e#%HW5^4zBx
zFnt(R=HKq{<<s}WYM(p)mHaPRfOvdkDsq1Z_~><#{XEAki=+kMAsZA)<{0M(E%&FT
zROF`(F1JzxUouWEkGS;{82THQJbHz>W)_tT_<a)-dvEp93{((bO)mn~b;y~%P<Pzf
zssT&<^``G`{R_DsJ^XXMR_=$+v7Yq&qjI+Iw)yz~3=?B%|KDNazjuMCd$Qg}IBEl2
zUHWO$%NtUzReVzRKPKLp^sMfg!!zxu8{mk>0TvnA705|g^L3&-)Rac?d)vM6*2vm6
zpp{wf9<cIYuubY7wZ$ljIycWiLX9Ea6(V(lY;BV3O+@rHU_s}ZKy672b^0OPvE7jL
zEl8@f2jb{KwSVf^-l;0Y>Eiprdd5b^Gh5Q0-MH&e^htB1eb>)wFy%+1ej4Ozt4qMV
zYz~N21zlEtb}l`0R;W#+2)HFmq;a|(&0ul{3Ae-aO<iBt4G?xD*rlGG={!|c)gumU
zcybTFFl*<#C)bQ7e5iuDfD)7|!C-L;Xqe?g=b|lI{E^-EZpA*z)_ex#AuV)%Bi2*5
zBc7Ec-vZ^d_#c2Gl6ElquD)R<`a=0B41L7^qU+7Wq1^xf@o`itX<9@P(<YUebF!Um
zQ>R6drjD|VnA1@)CQS}9Wy};s8%`T14x_{<#@Ll@lC5%N-$u;hU9wDOig9OV?tV}2
z&-(pc-|ru})Rl2BujToAKDGv@HQoO4v?=`ZPv8=j)k=Lj+LQbvhG7d=`3_9T1vu66
zdkXiiDPOJq9oG2O<Af62b(L=p<&y7%Ycn?)d#Flhm8UGetXg7U>9wBi(-W-PDyA)=
z|E}Zy>)kO0c#4Gn((a!YCf!IZE5|@T2Ep6JJ%;1Ufz|=0W2ke-^j}l0*KB4#rW)sR
z1VM{9<0RrO#?FW=s-9VdZY~9!hYpn6F&|-ED|dFEDNEXlxdd3*CenZ9W&^?ChyNm3
zIK?1amEO!wVR867?nRlV;tEnHJ2T>Uz`y4sz^Yo{h#%!`UhAcQ#BMVuKvB53&`b3p
z>gM?$7p&I&#6lv8D%}}05zZ(;ysd*c`tO)za0$mY;Nx-nOh{!oBJXX)->9)i9u1p&
zZ%lNTJ1080=OLNC`~=+e(ZL{6!-v7HH#phGx5tU=cW)}t`lO{=*@<dvE8(D2Yiqr#
z5HTID<*Bw+b!T;}cFO=dr}jD-jg=?ckbkS-7ZfTFc{11ZoGwpjPvB;p=&!C9Tu8A#
z5N_srtSCd9CG)}p@!<+zl#MHyj0KNA+9JkJa_lRv$B0OHg|TKhap^d7Q<2={8IoH^
z%Pkdr(l1N#xc~K2l00bn9!k#8fM95h;Bb$ULc4#*MdRDi|5Wb$J4O%oEQ?1<8rpHG
z1x?Hv8k^Occs=<D;*6uR-eo<m;mGl|Nu+xe{mx%zNYo&`y#liJ-vx%1?uv`5*9mXo
zmF!J{F9uj-s~#+rKIr0&%1B@t+1Wgp3ug#bw5y+5!C+wh0xM1Y%3s>15)+*4I;YYM
z_ji<l2GXj<>`*~@c~NJH(u{7toxAR)K(P8z{PJB+7XR~p7yqx9j#c~!`^*u9R#&47
z-~0{-4J*F(Cj&g_jCg&m3Yy&HU0TNI1v|(1rt4LwAqp-XFK6-{v)S{jR#N@8$<Mvu
zBAN9mPwtc|UP#RSkM)%9{9J1O%jb{hv2WRkoe;_k9AaX_$qh1aN@hJnB8Del8FDq<
zt2?C@r8-N;kFX)i{c~948_C__L+LYzDk?hjKNj6xWO3HQwB%v>5M?=l&q;GbQ?mfM
zNDYnzSVGf#$fq_UAYvH1L@-EtUw?1l!~l`&z0a|_ensv+tCf4D|0b60|0f~q;1Zxe
zTsreG`%}d^Hl)i%CEa^MvGGVb^B`-qtiWqja4z-aybEP^OtwFDtw+xVj|+wSXjCdq
z_q<Q-+Vgb=`)@weP+7sS8-c=R{&$ROCBMGl)9eYS4c(9r=Z5{YSJEln*i&kx|4XWZ
z#c!L6lpfvSGhU6~Ujy!XG$52*{8vfm=jp-UKXz<6(>3WQ(nS8qz{1QBB@2viNPy3+
zKcO!ct_YkZUw0sI(OyvEm(7Kf4Y4WDKF!voM#{;r3j8Ru=?|lH8Xl<Q-!GND7x?bB
zT3J82wy?s|9K$MtKkFd>1Re~s4gBbqGT}`gJs2g%Y7ZUES8Z;0aOb`W&!Bi>!5F5t
zVp6IdF2*hoinq>8+v6+a_QqE23>8=VO*FF}wPpksQ<C+HC?3Rf5NZzg&05M|>6$M?
z;RyifQn0Z_#9MR--J<?$nutRle2{%i+(^IGl&*v9Q~tJFj5Qd~QydBh%OMXehQ1Vh
zCK3RmHE4{}kFGK?ei#{)zP7y~Lu>jQ7)zPPsIVe9(}+IvuYYxhYkdOAZEKl7mp*VH
zJjqKMvhHGP)3-H(PoLt8wp$zWc(%#CE05=}d$}9wW9N~YvJ|Pf;`zZ{1Rf~3_Y?eu
zvBITOt%yAlUF?!VyIiHu;l=V#No^&>IFII60;6Z2aLXN7Vr<`Cnh`RyZ<$x470-a)
zLxbM%vMf36=2=F3X#F4b$wp$H(2sD_x|pe<4uuD>2sW5&GD0*Us6V@++Gd-R;aW$F
z=z&zBEa4yrVYw7VX`(A=H%Rk);j;=2hPszN01Ec}-r2+D3Qa8qkUVQ@zW&P|P)lV7
zR-OhgCy^dehc1I}V$mVLm9q4>Oh9sm^x=3OgkK6t+J45J+e>^k>xOXcuwah3wU;<z
zojZRk>nusb9qfbx*Q#a5E5Xp)S8s<5eY`eAZ`y}JK$Gyj=f93IIXGnVq-w1Y6sPmm
z4;)s(Y7nD1ElX?)))qfdyr9XH4P;r-IdpYUif7C;*CqHO!<y^m4K4~E0`(A^H+D(d
zU4DJuY;b)=@N`mY_-O|LHOMmq5E>OM6X?>T2;f)q*Qk>mb}P3~SjDWXHJWsMQ_VVA
zewN&fbW38?TQ8;73rwS{oU`b?yJSO2_$qDDC&o`Jkk&dlKv)}jK$Mm3oj}>>kJahy
z$Y;)%G-f!e72~LOGJNt*=$q*?Oc6H`4b09P$pfJ;*$XBJ;^TCENB|}*X83f5Q5Z&|
zaeG5J7nzdpy=2X=*?@R@$ep9D>K4R><n;yF?USOn7F=cQesThNV9i>I{Hgg7hd^1a
z($hv4Yb%eSEj26EX-@X6T6?FBXf0u}>f-Q$X&4TGlIlC)<<`^uo4qxf_YU<~;g%o-
zA0!TJHq#$wQigEd7VAN|E9tP3M${W*y+TN<!&yrM|D+0Nw=O$D2_GE^6DAx6cTUX;
z5R}cMuY4thBU}Q%wDl@#h?pKmg2lK*vNi)RPj-`WZabKY;JIG)tn+Brk3r`l%DM=<
z@;EEsZOwHl?=rKHE1kb~S-s$$JDbNl^Wxer!q0p_$z;db13X0&;w_615v4{-P1SyN
z47%2bF8C@5F1sgpuj4O!)QfJRSJtKMn~AeZ9mM(|F|tl^@c_kmMTg2ee_sxz!X)-F
z4Qw6l(+(?4AhP~EXb$6qb5u0Gq&21lf1RyO_?<6kmJlyH91S*~jI9b0;rj<9Gq+Uh
zC5As+a0*i<_sC7-RJfc^0&a<CS-Hnu;>pO66(<H-HGfPp-HZ9czs)Lcl4>e{rjl%8
zl)IoQ%9okd+kH+K3|)DwI*Cw+@v#+UrB7-jOj5@x4yO*g>F=xTD*41anbhIh{PUSI
z*T06e?z`mO)KCXA?4UY*?PU4Mc%CdFPL5NU$%yqtV~R1Z(@LmE|LTf#=g{?<8Vx?A
z<z1K=+H|Y7jj=_p!;2MqrP$Ow?>Jj}t5VzNVYVx_*!!DaA%^)QtCq|c74rdG=aMF0
ztp*opb{%UTYQ$L6soG;2=ddypNuaGAix@JOhxKfg0O()yQ<ZG;+Q?nOuxp#jkwZz*
zsfnirXP3rLPn2J}I-A11tksx;Rju>~`v^%IcE6ku%leH!U|a8JC^vq<p$_5X3*vy@
zcecC4H)3!1gt*I!>+jsX-2oc{VGNhjuGQ;TM5*t875I^es~W0`_H47qTr4qgmabPW
zWwr@*RIU<s95g!g!HZYa8_zUWos<Q{)|jhy_NdGyZX4^JR>>En4P!N_<wFbQJ&7m7
zqq16Z0~HZTGU4c5kZ3G>v&iSV@xI@%pGWG1GV&y1w)s&;U<9aPG5jDmrmGZps46O=
zZdOaWhMF->3_ZOBemto~X*C{9dlF>Q@-bDDN~+rvVD(d)`;l$uAWHiPOH@KG$4QCG
zNM^5qnX5d=e8=3RP6m_p@!E7lnN~Ew%q!r;XuwKzFnKb*RsV+HaQz=hah>rBxd%U&
z-s;_Rrf2HmX<1D?MK9*!qtS}f*P3^S=8dnz{RCBHK3|jtX*r4b0f6<EyADGa>_;n&
zRuoQ5YYBloWHSLGKb6BCsiJsy!0ns({lg8(MM3PPObf);y&XSX-pkne6!C0yS`7JA
z4*O1XsDkaxZ8F;%)71;c#Opd8c0Un}19jTA;sP%?d(1<G>n5o7(}wZ0&aJU5xk)Jz
z4VltF${(?6PxGnl8+@7PB<u{e`xrX1Tl?g+hL!-o0)!@F_t(9$18Zuc6nv6X9^4;V
zQi$x#^rKulK5}zfXgF?c+!at3*Q95+y&|hMo<=AO12@+_kIc)X*I`iT8;Vh~%mX*;
z$x~FqrxWIK=-P63;oi<%hId^eEG>Ttf(8ACR%FX}%uRq4sHk33y=#l7xV4dgg@ne3
zirsb)V=sY>o?#X&`}4#g<t{Miq1=eJnv6}?EbpxHQv5-`3YKC$Gt3_g<wmhjC5hPa
z%eXS3d=39Le-!7m2KtOi-GpyVu=&Nwsc_ILVXJf#6{Sd={Gbz#%34JTBnlv_viw%Q
z6Hc`ZVe!VxLtAK^SYN~1^o25&-v;@nS=(zW+pOII=gyh*T3>lG3TZQF;j=N*Bi;EJ
zyK#77rYhZ}#-5L}AmW)(27C8=*IIWE4)#v)<nOepKCp&SZ{51_LAGJvl4X12w|BfA
zT^o{XU-azWE*$pY+CSfHvfM9sU0L!+!-k@RYp*x>?OcBORM>CFA6!2D+ipzs7LEHF
z$_CiDP2k3FGkf_3oQA~P=|<{g)~Qx~roaQYx@u!akg)^E4ZdS`$z!vI?S0sB$rX?3
zK20PhS45tV%$(@78e9aHxkh-8(&w`2#yd|f_(8oZ1!Ql^SI~F|$Zw%bVF*N*1mYGu
zZKQheWqVixdr`}~WD$S4U#*<hl&+7=<kBt0c?FaRi}au6HV<=|?`m{AcvG|`1qRj9
zY>vcD|8R<-M}qQ5ba&PzjLH~358@t<5zgWJ#=VelvR*~FI^N-=GJ;N(K+KOPP%9H-
zYgWsv(48{p+rL#5w4IXAQdxjz43DSM7EukN>PdR#kEu+(q=sp_>Zb^?npSsrcm8P2
zc8t0}okI|b_=uTPjM7Qv-Nl75b(@7_omu2wJA3UhXz*87t(O=3%80M_b^Sv+m2TM`
z##@E9qKjqR!FS0<!)37!M<olZY?s!|`ZiW()8kxXzt#zIwB##6IUS(R<OeFbe>5pB
zA)0c|aOq^Mxzs{+kRl5eN5rF>Paw=5^x(<D7d;}G-!*P?*6zsdEB8^%ztkGl-*LHP
zx#PzS?0zI(smUC~X)z4*RQr%}<!ZE>t&QU7A?8_fEzsRT27;bSU!-1aHZTxu_s-3~
zzGkD0nVLzt5s~9Z@)~gbFrn@Ep{2UyboN6yIrzdI-h+->h!#wl&A69@Wzg;-V;oH6
zGvZ<T+sVe7AMTDc>64c*_K2E=%ktufjX*}~UMOST&XAwEm+J??I+u35@1u~?uSBR{
z=nB%yIgslU7yHubFEuPeqH%mYzcg;58Vapo8Eygs39kIAIx9;klnpczmTgATLgX$e
zHWsz$q*)Qb(qWHG!GYX~ir|D?2)!N}qMt_+#zu}jZ<}gycCT#T&UJ8B$MZgA7_w#i
zXvp?tm9DFTroPJ(|BZqbjxBQ=Iz(Pnqf4(N!w@YO<71sn8VGd<RH3<J=?-$OD^<i?
zl|7gQY;@}p%rw}crIKm`UrLE^S>L{Va^J!5r-A1`*`%!2%7)d&2d=-AFZ-2t8_HH<
z0=k$1M~G-IhQB%vOrU*x!f^BG1H-rm;Sz>7gqoT!_K)N?i?F}~pM+ck8kS<bMQ+`5
zgX%!aOUdT4^sYQXqI+H2J<u;gzcvgZ-tK>$Gyl7}@V^hAbN{H0fZw?t9mJIgC(M<;
zI9>D~LNQvdJVw7I3Ah4AB*ay!A7t6kEA(%4+9{Lf`8OOrLH8JWWo#&qxM3CLTxU=g
zcUofDJb+(H^|<%x0;v?*MFzh6o>6|o^(4S5I$s69p|I~$O2ZhdmJfbLPS+KeJRXIm
z^t{MG+mj6}{_IiQbE(KKJjXA#N$4ECFn|8gqs3#hN0U0X9trX=sp(v%CA$%kg|>gk
zl<P}Z$xZ74?xzh4;{h>4t>_~Xd?R)>-A9b8<AydEZ|r6`OL)tIm^<V>g&gQR+U?JZ
zJe@T#mQp(XFPS%``Q#HHyL!g;4ZC+4-^+*BU=6R~ak_rHb>d2TvSP8inBgdHT{=pN
zt>lf*3McC1#V+k(jw=tABz?ym@1BnORryk(AYFKv-8ax0$zok}&?~!8;2ILL{e0u+
z3}X!$OJv)G6RfOHW-dj*!bQSq6zY3XLaE6^dWbVDcMa_2Rr>-S546&#A-RKrHP{a8
zG#BBa=#QU!hN$0y@AmBc{M(HWo+;Mnv7zz+)k-!L%Od=e@fs_6>%>pWlXTnKA^lE^
zX)qPwHIR!v8);Z*9|)|kx;ZMi5It8Ooj28D=2m=#M9m!^&oSppJnniQ)d<2MJ^$5V
zS`1QHk#OP)beY;o7EdLFex>3!^&{p^I)og19_T5Zyoy`E+{ifCUXtc5?T}hk6WwLB
z*y&s|qkY^{2_Mepb8i0Y<>-&s8$V5GL`Y^Pe3d8B)^z=HIlqb5@2a?in2MUKNxi_F
zrZw<@*0|Eih<;|ox4OKtvba5CE_pcK&^7sZWobdpi?Yt)3hE0{aYfS4-sT^|Fy9`-
zWuk?w-|>iD>o9rZ5g6^SQ>QW_l-m*e;lKIwRO>St*0Q+zg-p};Dtygz@aopF>D(hT
zj^QGa5H~F0+I>AP<Hc>ytFniKpboeDw%}tLhca`iA+7cLQf@wV9S*uKfJ2JJt+!Y*
z_sPpchU&kiD27fH>DRq>2nZf#8I|%9ENV87qn2G(3-8nIiG^L0RYsydhG|ydjHg{$
zW^Pt#!qc4b8RBDSy{t?xs2dZnUnXp1u0>z+%ZZKH1)so^bp_gpE2RPbJ8o!G!bjRt
zWL!KsF)gPxGO@jnimG39(oEW`T*a+gV<a1nQGVv>izh=(9!!kS|G;f1xppRY?-8sm
z(yFvV+u6m}KE`p-Ha-TmVl3jztxLN{Vkc^TQd!9Pb@u#aB(LVR`sE}Oe!P|A3SW<*
zca+CB$EdpL_7_d!O~L~ph;T)Qw!kmzVrI~#3xyn)bzN4u<8CgEp=<xRPTPKNV@2ux
zh8+iWqjyT2zkG0xS4hK7n*?eq?Pbm?V>fxEvy28DW@Bc(@j^K-K5S6)V1b-`+lrlF
z$B79O>LSq{Z&zEBmwD3<LAk#I`9sHVdUK7No@3~-TZg}*%{mk9`{Q@vpm>ydwj$e|
z8?cBOEx~Cy)z}Py^wt<B4aDRT{c%&Rv1YsVH%0)%deZpBr<K5*PieZHKZVut4bsW2
z72_B6^--38Qj{53*WB*dGcpuJy4EGaC3I<w^5-)x=&d4bBlenbZOz(2uYNkr>zR7&
zLZD{&4slK{&CMP_GHVT{6R%J04A<E)yo}txIg{g)n!D2_tKRt3zGNmateS!eqOW9Q
z6K)ZiRZCE947pS$<9=x1NDcG61+8I)InPrB?`Sc$9fE=8EfKK-pYb>A;*(4(o}ae-
zd5$t?3+r9Engd-;KC%^GOGLIfUu9^Cct5CiAxqQsWKA!H*R)SZ$TfGDww*l}{xlp?
z1G8t%$U4*^+j~uR?Ar_<+S4J*9VEb~v_L-3!+2Fi+q5~}ts9_QXk^5Fn;W;RQ9r(5
zj$;U=AsLM9xEPiNu7s@8+o*toJgyR|(#2T0zSuZb7BkG6kTUsLhn-40NL)84`_n-~
z_O|x`Fej%cuL3N-Y}C&Awgu2~bu=Zm39Z*5T#6#NP#wUd7mXZ~^*j`(nH>W8Wyz0N
z0TH<^Y$Q)5vX_8gpKB0XHT+3aHhch9cQM*wKvb>rbcgS=u=D9FMj9@?mx_HoMN>C6
zG1ojtHiYHkv>RjsoUU_#x-eK`NLV}yz>?EOZp;a`UVj6ROh2cr`!a-Vp3t1Zp&M=G
z$?A<Gbp+(D0G{Q~vl!JG^*z3*fL|spSFI{;WR>?`saZb2U?Fm)OYKvJy_`KUBO)ve
ziZCDM$NoAxge`@Y7T{V90iC=@j=NRTESxt=&}JGNY1S+3E>ub)hedx)I{2I3T<Ilu
zq3*(UnW_j-XaVN!GL81K5L5MIU{$XIqAoBCqW}2!a&eAzO(=86#*<50FB1ZMgaY0$
zL3$jP7!kxn*)ev?$Ty^_-4cTN=PJ+DvQ^1ftL%q?Snr9h>dAaU8XCM<p?_1S>6+Ex
z?{)QO++02qbOF%nh=8uuT&RT1!_B@9{KufA$0{DnrjiV7p3+l*gIYyU?)ODldm??-
zjQINdmVz2`H#N=hP+-Gn&bf+@w>!OeJNSEa-qL=3nb0~T5!O$x0pTcDZa<8#kNgDo
zEi5piqjyRo60Pl{oLUc-cQFEhCKCkR<9$;G9%=K-*x7p`@`K8Ims1orJ&FqlHw^gf
z*8OS27OiyfW9a?Qrq)~w7;<JsclB&Y5upA+7k#5~`UQQprV}x;#j^*tOU0$vCc}xb
zD6VVTz9~U>FO}<jw6dZLpTBxd{^YrQi_b<QDbDAyt&p~D@vdV8U8E_$8JX%6d7}hK
z?7|;DPi#(Kn3dG{nRtU_9rM2b^;m20d4+9x63xnF6V<gc_l*CNFB>m2bKqszot189
ziP-#t57iI2)oIVwe}Xyqx2t*u&a{Oo<D!|E{QRshkB<>;K8{_?KeuV1hVmhaqJ7}=
z#D75B5&eRLFn?MQ-zXDqRdN}-3}5FH>C+UwxuPuktC-ldpfYwye7|{#ryC`x_ov3O
zd!?l>?*A0)n1SnPtyS8)*^BY7qy%DVSz$pT5-v)$H#GZsLs?02Nh!>k`K4TL$+kZS
z27F%K&|S9ohVIb~O$N`l-Nc|?1d&|Za4X>?u|M<IyB*!rhD1Rpv9OdMNl#G-nvZ}B
z)UT0B*T~1Q^k7;*r&WKxbU6IxM_;GLgLj5{2LIGlO?=Y)MD9245hxY;>c1v<!J?|-
zD%iTU1%m?LJw^?s-K9<Si8}w$i*JA~wN$t5ZQ|NH#T#?Cp4^3#9((re(Xsi*HI5&{
zJj?hEvjBsc`y%@NGT|N;`5FI9JDxA%kYzOcp-;2NhsW7vyV^=Q6`foQLom_?%M*N`
z2%K=@tqzClY}3peUtnZ6(M(y>UAo~8w%nJ7K})u1elvs_Q!r}a)}&gy51#TVYCQgM
z8gHuEw1$$$&9dcj5M|?CFYA8#U++tAUr#*KNwazPtZm}-67Y31!LU-xRYub%{R3br
z-GMlUP)<{*A<xiy_7d9kL8(+69qckoh!>Wed1xe66>b11_tLpk4rMgte8)d!HhLa6
zB||+6+cdv<LEaUxNf^Z?Rd79ghQ895Tix5wT&p@?Ri@m#oT!L=?qo>atexY~K->0l
zMau`Galilj3qQUA%p$V{JlM&yKa3uvL2mOsMMrdFhv2RL3q<phOt5=Z74hOzW;1J^
zwa$L&@U`UzAHQRcRJ^FE{yWCJ`$PSVWo3(H<z=QZ*k-{YWx*wH0a1AoYF$ggKud_f
za`RY6{|VQ5zq$o%66!nY4Y--)<;R;;Hq*8jxX6ku>o(T^E3>FTYj#_k7BU1ei)W=)
z061>-ROv2meAP4bwy{;wrp}fIZ<hkT)YBut-X7YKU>HfIA3qtr(EoVCmdD2vtd8V7
z+O=3i_5i~QW692#q-A=+wAo7&^bGPumFlFkqUyj6w&w-Db;{jt;nY=c_E=q*vGne5
z4*9{Z!Ky5&<G^j%-q#xHy7xW<Lq7kfjQ|mB1njKb|7{~+Wx4;qYy|A)Yy`f*8D_y9
zFRxk%-hJPD-kY>1+*BG7deY<{4_VWBg^kmq4wIsyi+AS5Qvyt+|4J(RkYX57`6BSB
z!9~~0EYEcFg2HZxt&(6%_o9-nutDcKL3ivUj&PtZ!k^`TG5h_%V85T>#HOSfkK`i<
zH|gtrZQ5k{%jDYYum8!@P!+)~vOO+PV9*UAlQ||?MdU%|0Dsx`&$PP>lfFpa)rklb
z9~|SK%&ec+>Eqp!Gq#endt-^m7va#G#Ty3?ztd1JVZQgckPHVhnlzjmMWsbj@e|GR
z_iutD=6NnV;E#|cH~jHS-pXGjcy%0m&pCBH;rZOSm3)|^Uq0(q8M^;_<jy;xPRuvo
zE)5Rowt!g^sXiPTN&hYNXicKxG18gsd@*YK0p7(6Dd*BSqcC#)P8Svwmw4(a3N~OO
z162A!?>fGsi;R?^+z;I9jscZ1^|ju|g`8!+19VQ^T_4|HOq`d$A9y|Q&%>#wZ!~@y
z^jUD3@cQHbl=uG|PX0end;}f=u`GMnK^t&aWK^W|4Ef~Z`x7<>gl=Dc(DBi8BvbU9
zW7BE(aGhm?^6BkE>1SCRKa(L0s0}0>cX5dA_}=zB{=e<c&QtqG4Nhl%;+OV3eH=I$
ze3GI`v4eqHLYAHi=&)+Mxyi=hRFiYZp)$Q}vx7^MIr`VtvAw@(O;_z&7rg^J&-m&k
z<7y^54a3^VmYvPNljVhWkY%L0)7cb7z+p8Pj82F)Wga~r>s-jjXnSQ?v!(8V;IL_>
zN&dhVhsu)*Dr2AWFU4h+PqIf@c~7~GXIYz{x8H7S?qF8ePwz>9Ozv+#;d7#PTa|mQ
z!(qAGk{tOP!yR@-#ft&rUCIslWt>!zvpDxz(Bfwqm<->y7|eOhTFlRyS9Yxl`%gni
z4K$Y}3qJlJji*{pQ#hszIs}3!ml4JF>aH`<3m+w+UkHMG!ybPpM-=UUHsiUK)92Oq
z<ZJQ+;Fz25S!kZI7c)&j@Z7Yl5!DK;LinF6kYS)_k}xoOE7}^NRZm`U(e}v2>!{m5
z_Ni~v9gCV?l>PiZP*Zh3@INR4P)f4;^51pTDeTnu&9?^!PjFAFQ){%odG!3bFPNqW
zo;u7mcT~?$9*ehqJ-IRX=!^cpKKxaTVcCNhj`@SX*)q59n9H-b1U^oWsLFFHLQyH7
zzJc0Ig|pEWT*;{!#h<>qmUY3APN^KXh<WD<Pc)xAz3KHNRdb!zw}$_rJ%fp54XbwE
zb}4KSJbpo!ep%VfpS%X0KcpusqRp-+jn#oHmzQ_WW9RX<6W(MWA3xF|%w56Q!gK3S
zrECg^NABYSU#$6v{oTe!FanJcx!!WM_wk-4_CeqExPs$YUG-y2j?h_dHVkX~hp9V{
z9S1uo6&Ki?tcE(*9esWM0<C2}yA7b){rCI9bvvsJwEa&*2Lm>WhLDH=YN%7Pa=Geo
zO{eMe@>ojAc)yb^`i^ueIcdj%+lpi&C&(@~eMaxYW~$kE^DiH@AGW_FbZodxxWh*_
zG4DJXVAa0D$w(d`fFHlm*)Y?$M9-t$5MQp^-?phnxjw<fMi_i=CYgD-wS?bdqxg84
zkUw`z22kq9$0xy}F&_sz&6UxL;Iw=;haxN+k^1;^Min+Pfwxybi4h@}R&&$RxE0P&
zA(Sj{(y6Z6@@L)RO(BmTKWo#f57YSG2DO%^l+_=HE_$OpkM=_VjXtzFPJ`aAT!I6A
zD&kHiFCGVv{K1;!;75JPeeiCoN?8o_CQcS<XsoQl7fsC}_d%yAgyTJya%^Ta*!U@@
z^re=oaxW~7=7c%#i6UBEWa2HDsf3BAkk*@AXXfbd(iV<22<oZWpY<4;ZO^~dK5@<?
ziq)Q;QO3PTD{q92`??-W=sa}KqoOkmT5+6bl(OXCa2jpE1rj8xRzT?th4B2z4j`(t
zug>9mtl!8>&~DrhD30U{rU%~g(1!H25Vm<ST#VB!@iQurWwS${0DVO7p(M@hWrtU*
z_<)0JaOPmE`MU=ZnGj@{ng6LGw_f8bPNk1kDB;PzV|c1l9l+*KF{F+!0XH8JA%PLO
zBw0{?t;+K0m>zC9<G47GtJ){#EgE;S=&m|BJV4WF;T#OOC<!*(U-CkRawT`3jOi~s
z_>{sl=;2B*N;10W16(*zz+$4!`Tpd~0(>pVkDafw0$Z;->B`&^qifcv$a1H+JbJ`2
zfHxghw~7;&?hP)Pyun;l*tLDi+|mVHYZG1sXZ&KF>bt}KTmH26!!y-?Yks|jYF8`I
z!(%_;WXHfmuRB#StG;JN>$emiL#?{1Ld5Zwb);3Q3R*pWEkZr;yj^;ZS9SCmy}W4!
zX$bMzC-*2ws#ukf^(3mu=z?VSOY0H63&kW1vjBY!HbDT0caqf)nTvylu<&$(=+48!
zn9nLLfH7W~$blzi(Cc8B57G3c6>q3wp}ue61!yp@;w%i0GS)VWCwO<Le#)X4n|8W!
zZcJSt>9oG(T6r1UNJQ|abMnafUWhtaW+`@7>8?}+bh1uO{?Jd%Q|&>bL@X>4^u-Y?
z(Yh7({BxD<Q#!ZmbS^!yG1(xND|W=yv-&}Y=OWj+Z)eTEkvHv2+aJ*zX4r#4EMF32
z`x23Dv<B=v@MOVX;s4INB@o6q&@x7AOl4&y?R1)pFL_r_@bA?fr3b(<h(+uYm33{;
zj{V#<*#Gj&fSc}E_Rgbynj<)v7sYrfO#XRFge&{zWT)C9FMo-@q2OgQ4kO|Cn^w{t
zEGOd9@mIl?ejOH%?|I1-&t~^mX4Uszz?=7%-3j(|FZ78VfB<gwaykpe&Qn)~Rcr0-
zv`*}wRGg4o@HiBM;Do0V`)Yg1xwHu0m`&380U_1Xj`?6%8N8!$`1p$ipV7RjacZPC
z#WXN@UF_h-_+5l8{BtbCTuXXK8O7|t0rILXiIYXt@m8YEHS0SZ+?5W<9x*2t%v(h?
z+yMRFtMskU<!8+#N%GC*lHgEZxoI@RC?wQhqOEq{d!Wh@3^ix1t3t=vf?c?t3o-Cw
zeulxCWD(}5_kl0^lfQIY?|Dbq=)e(vq5N=s6r-cRZhci%hY2$1Z}A`^%&RpdyZLm0
z$?bOv9`#(im5YW7CTZ<H0*wam;RZ{@AuOoDs~E^HLRibFw98W2*nr5k7CcIR@bzmw
z===LeN9TQIGBi0VTvF{S`4PFs3rd!^d>AK9+#U1m1@D1>bxux|6@zWT-vseTg6xlS
z_4*NUoLVJ^Sw#p@#kGZj8zi8yqabbRXTxDnnmbHei4HP<AYbJhs<blbEO8!g;d<FO
z*>qwZb{=Kqh@2HyWu4XJ_%8El&}^`}H{P1HnuNq1@0lKtKg~GOdjWdh8!0wrmvIlR
zG^SY-2bHH7zUpWe1s^9YnXKJvwO?L-`7{1;uvvY@A7e~oIX=$1a%UKS1w!_|a;m&K
zw$8W1!eaaBnhxG}YwF4kzLc4sul0E^aqTmz{iaG9sE!NJx9pj5$;fw%0||p(s@cZa
zrG5rXMO<0a4TlR1lN<&~4Q+f1an%4T05JoVv*g<6<T|EqN&A$W_AedWXlF_WvQa#F
z^(;4_JKQza#?MIhq4m1M(L5K~SVi&WsGpz=F@l*}3BT=@>cn@<ONea#>bc99sDxlc
zb_q|l!e8-FZd)&m9n$XzRs~a^K(ds61M3<@ZP-2&?2e?;atCUjiix_TkKObeYV>;<
zmXhxnY@ctdPS(eJ&-#N>94h=chCbEOdzYCbzN}iYuzY(@`Hur=3%RH?t-iobSD!+a
z{~l19a-jeB7Y726*tWNAJH0)2K6w1cqf@_Li@~sVqT0wwC27tVmO{JkiCY3HxyoU9
ziQ001UpeGr@{I*_%e_T6y+2QL{~#{|N!aYOf&7PJq4uXl-gw)9dBgh(zq=Lrg_)mh
z=9e0|yB0pj%(8vp#tmQ~lByhGu}8C%+6;=_g}7|;xc;yk*si|FNj10W@fmn@^6{q>
zG&65pKYJl=qQdVEM;LVJD(ahcEv@@~;V#iCf+(3S^CSrD(M4_&-c5tvS|csMpyO3L
z<uM0gKqWY6%W-a9pRIh<#M-Z8U+Bboy^6%RQgi)!J-dWB>~(<1*6PhZ9xX4M?XK<G
zo`0sSAf-!lTG&XCMf6H1CHTek#NE(NddcfgeJS`@{CJFX=H9Tm;UVPK)3G7FE_|>_
zd1-G+3!&cFwrk41S-s6$?@Nc!vy(S9YI@VUs`$m_s_hzIZB@%S3K86O9%ES#D-d?Z
zm%`%UIBBqWQrG68e4`{e28heI%G#=oBm>Hvk|@hY(?$auz9^|9JaI+8_YlRSMvvb+
z5_6)s13&F%xCbYTAJ+#8MIW;Zx<|(e$j@J2v5I+(U}chwF3J^6US=A!S3$fak~r)c
z>)@D2uk?X#D<W<zAC7dyx&!~yZQDK>`d6>#%%y}vaa6$mwzH3(_m)N;%^odxf2o0d
zg~fHPx|}b{<7+T<<aJ_G)k@%%dbGnrfsdt0TFfN2@ecM9$HmiO{J0@I`Q}7_aZ(Q#
zeAtlOTFbOO4Fav`l3Q!6wAKFZw<d=4eVyGp&;C7@?70i~lw1zz8kicb!WHQ^<q~fZ
zfOoG2_@eeSPh-s35YX;8ut6)9`1;o}m&hFoAjl{A&rv~K{iK1{Zd%lnF;9{kT6j_1
z+-C*U)HKS6Lghk!DF)R8B?(qIiI~z<YmX~Wv1;x30a18`zl?mvNk>IOPK(`W<ZdRe
zR*rX(o78Yck%U#$OYECf&KdCO(bEtF=JYfx$j`iInzuZcekI(^<=u=&by+FjZM!!`
zvCAk~3iq#N!4we6@e>2Xtp0m`NC0e<wlQF+!1f<bqlrI1kPHZyk2Cd3{u=V7A2*S+
zZ>Yc<wv5D8*@ZWJest1bFaM5LR7%IJz&<znCGK6+|KBz0za8oS?IHCae`8)_)xvmq
z@*QIgOliW}X?(m;bGrjhvK24{!#Vn4Z>^JkC)5zul2)uQaY0tV{B9_wvZ=GD8}H@!
zjS3pldg61v-fSvkovPONuxvf|5?5&p=LDLxHRN;zjiR(+zE$YE3*PSuW*KoBsBuNl
zlQthX*D*9KG4y$-=vejeWEyFW%e)6JmJ2Y5A-V{L!+Z@G(-{a}(Tk{uTl>bv!R1nK
zd8#4{km6&|nOZ%@Tpk;RZJ537XVUB79xAsyUM+*>bCzry64@YJRvK26-b8L=*oH?A
zZ(-Qlq_HmM&@c78*PJ~dA5rNl(WPFU4D7JuK7#13-#pnsAKks)Ggo4?a*v#RE1Wx@
zYjx{QWAPKZhj4gvd59#~-SsDRMO|H6prAz1-L;%jNJ;KE!OhFSy#+80B(|PPZ&-GA
z)@)W?MDB^~aTvz2dy0Eqy@1l_F&yQ#`(C)=edX^B8cVq(dXHeFwm03NYpVLNcH&AT
zeKRn7bF9`p>iMvOa(ZHFrWB*zFXyX_CY1~%^_8&+n3_3hp)F3B-qLFQBb`=k!%vsU
z_2%y0vMjZ<<WHY*fd^YcFc_<tKa`n$Kr;5u$p286)yH%zrSF4(){D<$|Ak)6dXYlC
zk;>?7-qg8sv2C+i@|}W=E${z1tUG_rOAKbq58E)aBMR8;Ao~D6aD-k#?5B#f5}ho4
zkR_uOiE>ig$7^5qCwD42$j&$GBPWkcNeQW`b~SwQs37*EkFfaVjLr`)=iS$sU>op7
zcR+~8>K_oZZ=gRxll@QTHZUq<M@zXphNooUb(j&62tWldcnX=E-V$a`Jyuf=cwNPn
zbG&$7|MuTQLnE#9-fYUz_|`Dj0NKTo9fnrb&*h2+7!((n?^0|hYDN4w=m|NQsjOuQ
z<q~txm#%VCSGi+Np=bcFN3CGrRPD*=6C$?tkiFa0iLdhEjx#qLw0=Epw7+B0v$C|j
z#`mY~d0dPgai9rZ`m4H_b#CrF)JQJYzm6I(mLfzE`+Bm$F{ho~HO3UCd6j%AUtGOI
zZoNm$A~b?L)hH>|pOs4*^(>DNgs0W;%H3RjBF7^mb06H-{OYO*hfDQg)$V3dK_tlV
zQv*ZvH0_3PCA#MQIEfQC!3cQb6F7ST7W<0z(T;xRn_0_(1bfC5vr+#@UX2{>+)&Z!
z-)%mvvt`K0^-ver9J3RgTO!a!waO5*k*V9}5TPV8TUg7Tu!v>-Ebt#URG8j$aHeGq
z21YP9*+uo_>cwr&d>nL%Tbjg)$nFcW?a@pALTbtJp;Y``W_G?JeDpGCFrodfe5Sq%
zU;$Jevh(%qBGZ>XtZQVM+oTrS##&Os)}Wv`ge6a`7Z?|dxdBbaI<oh@cGx)UMN=&V
zNknwsrsz(fuUb_TJd0(6Ag8cWYWrT$uXfu@eve^#uxjbwG3Nl8!#DBf14|HkxAQUT
zq_D((Tk&Ih=5ZuZ#9M-d?yj=)oI9_C9;|_YJ8A39Qlc(hAR04X*5*KcHaaR++k1De
z_W{kO^YKo+(bTQVBiI(+HNI@W5ZOA@$cyvSL5gL~3QJH5vf|jwN(^zjkTdrN8&{G`
zTMiisiBf~Z)f@pe<>SMrPWSS>OGpWcERz(UAc1c~b}q*?oa09tbkX=4A>FN9#q4Gk
zo~ahobeLUyO-8uP$3tFr=VCs6pM#G-O@UoLDhQVJ1;uBMlYDy~Ws?0UwmV4iWY<`A
zspDoNSLe#Evr?`#cXMPLHaTam;bQL9H#8OjV%yY!@SGsKYu#XG3vRaM5#_z*e>?%G
z|3bm0d+!HNv~Ji#qb+tQb{Sn8`0j0q#w<S=HcJy2N-ul|d<N^3+NzUZ&Sl(`;O&T7
zq?QjY25)ew!J!iRx!@0ix__c2TR1nqt}V>WHNh~{A{v%C0Q(<)AX0qWfLw<+U|6dQ
zo%HF#R}n+=kcd3wCzy>oRI;40d~^ucRx-I*P?zgG>`F80qw>V#_C&1phn^h4lQKK&
z?wXQ2j?c9epeM#cff@6FKZ+$RAxw_kV0}|2e)t9^c~HE~H$@78D>w*p8*b!&bq>0G
z+|O8@`=qOCtIYWooUFhI*C-^5jM%(#eHc#GR5{7s{pt4|<JB7+?vuE>RT7M^CuQ?^
zEs~!dj#Lb$mxhSP(@cV2+ToD%ld4rh^fp;Cg3d=ae#fL#U=W*5g{S)QBy>WrC{6lR
z26AbubkmSETRfuL`ntp{R{j_%>U!PlvBHa$d-Gk-yEUb^xEBug?kbZ_fTS(T&4I9T
z%td1+S@m-Sx)?rYKVBaC9rJ@~`FBi<FNV&Wa8#aUc7kU%ThL5Gp2|jc6|_5<BEPma
z66V*KGb|9cc>E6K+2|sPk+sTKHrZ$p5@lcShvRoJPKyTh6c?>-sd2uY;k>2$DAu*b
zQLe;Fj2bHc>#!-D!_L~^`rT1A11j{9n*{cUUAR99MFA?k7{yCKCC@^RA*)Q0XnTdZ
zf#Ixv#1gLu?qR2xw+0CbW*7|<rMY~mE7n3-r*E*CE1pF5PhZc&hb2xp9`5`n_O;g-
zU+`nAlL*^uz6ZrFQCFM;AKX0tnaO_gq3Y+wFQPktz1b?^cBMphwN+i1X&>-q{BpNP
zEHycuw(f;<w8w4d9ad+XfudMmFT6ekeK4pbu??-)E9&TR@C{)ty%>Pq(wUN?f~e3&
zKigiO%1sh=GB2!|>S*_-)RE?1Q%!Yqde`yxee1sjKD&R|bU>pHV88acR+QSCAR54Z
z`=xy1<abQOs_z)?NqMgdfYBVyPk6+fr+OT!fFiLtO74j!6l7q(%(-e1`ij9{{X1q0
zjH74<EY+##JNE3es-Je@(h0IKyz0@{;RyA8+7;Yvse?VrQio~GX2Rrw54xwRjw4L8
z^3Noye?=E(U|;bN`*QT?4cP$NY9^+k&sd4N8ftUK_V1Xx;EjxeHy&%uk#j`r%Unqo
z&3bd4`41GR^co=Yb?=l%UnX$vFz6P*^zq*|^9u;-L_&!c`j?aL5iObTE*yx_e<XY`
z0Xrg`(uvk@_8sFnav4z0yE&TQ;8#R*AuSt>B=@nE^Reo~Dk>bnp<VqqR%JZ@J7%jn
z0`0ytma@*dACp?bjeu=`Hgv>bBRqza1(H=y1|)p-LvjOFeS%*s{PrC)-KI5r;E2|@
zO;CYEvOeJ1<+kbv=1{sF?~TsU{GxZ6P?m^TnxW2M8v#6j7=8Wl=|uACPnyctAYO=8
z*AV^%OATIWPY~F`@5SDRbfr1n(jM4c*yy1V1zdCSU!DAE55xuflUx?Mi`1)*4#%lC
zrd%c@LGynGJ<5^Sp{=PBGMWQ^0+$JoSOaAAP^Y2{e)JRq1@JRoLzo6?e(e8NgzEl3
z{}Bh5tXgy9J7yzRrRxl*o1#`Unb{Vmq3#19s{|DYzg#4g^3;F#HnG(t=C%y%!+-a<
z2_0sr&Vuil`)B52`HBSyY{1W470@&g5(Y-lL!Js~SQH;pXR@Y=bdXszF8&Xo13L|k
z<7gw+TNBnvtaAM&BAOol3?l>aw>^4<s|@&#83f|(xEEtFv>{LkRK;wqn8UC+km*MI
zW`*zfL|ZCFG!&=_5TsZQ1Lz9ttre;T5B)0xfQ)V}<)JpMX*Uk*wNn#XC1p*yz(CW4
z{|Bw7H<`>gWJQQz63sPd0`7ih?wT}VX+lhJswd;<BKdbrK&sN_J7(;?EDOUbjK{EG
zpdBTC^PU7`2eKG8jDQl9U!umaNMRbPzfgG5U&`Tt#YX?>ZNkkyg_TEuL5t^xqAXd(
zZIu(yf5wS$S$kw({ynbYe&AkhQFr(MzE@KfOq#m?CjR|rglrEyCO}Z;ss_^-C~mls
zwR{<|wLe)rBHgOAq(?N_-Da+-QfK5(;jqB$m+L)s{9HVY#i~qtR0riVBF9EvW)P`+
zN-%kIDt-q|KTx1`6Mv3&he60ilD$y@MnOc(gi>pGH0wd1TWFi$V6Xfgea&CU3ZV7p
z*4rtrJOS=(>%`<mF-@NyceL%C`;kc2BDx?L3uLhwV1|opN^|#dT=S8e;9&6knrSK)
zOD92d!DBY!2G7A-0={-ig$LXSMB%!8#{{#k6*8#m6u28Tt%<LlUz)aOcW0IFGe~0J
zEfX|*@jI^K1o#XA!ySncaox!s(ldX1AI$$$W-D0J#hsig?J_*t8LsVfWXYtU7nlgJ
zB^s(@nT7(DpE`$iCW<C*t#jr6(OL(TR6-Mb5xQ{{WU)E15NTI4XBTsEn4+>>nz==}
zIW0=EFs#K1RSyG7p3P4(i@>0_38MRiQhn9h;wNamP<sk8X%)K>XXRezJ0~OMg)6d9
ziI&tbQp{R}6k+F64hB#;h|jA~s<4FrGM?Ok(_!q~9$~{=CZFFMTZ)(uQ-#_TC-aJS
z2kY!lPDYq-EL0nUKUuX56-{YR*Q|wCdlc87`w~|iFd@uEB;J#$BCKj-`bJrDq5~zX
ziQ`9iKa3Pg*jN<}`F0UVXtw&Z$yXTmk$H&zLHQYuP2n>)4!zl3cIHlqNQV8Jf4UXf
zIf*WIRGKjsAT*^@pq<u)Q0`iXTU<o|?aU&2=CIZkpj|uJ-FkKDh>{TJU=QlTx$e^y
zt6NgSE5R?MK!deKf!aCQ@hAOhIpndGug;y&{D4Qc;#7LWiZ*zakLk8ASxcQ9>tva=
zgr!xQ6758NA39FNk9BYtbG7T47LkxX<|fDAOl|bDL#{j<vt!3i<*NM;w`CS}O%2+;
z6Z&=!`DowDz5o2Wrj&L?C<`Y;REmiGim1UbVeeI^IN|Yi>K_K`Y{<({3x*?fY``^c
z!M*IN!oXZfwdYGP({PwCR{I}mpGqwFbdZZ(LK=rusfWSO=$s?HD))<d^tfYlC*8#d
zVT9aQ7qLW7mopsN`GNNQIOYnOe%;o5YuZxPPY4LMBVVBlU&!M-grwHt!3%g@1l+?m
z^)NgttVd-i+eCN+x3_KTL8URS4Q?W`!B!yC`qWwn5_wB>aimQ7(rKB@DN{`BCrg4y
zu1@LL?n;$t)hEWWbSJAKCBxZ1CeNr$JYQDcIJxkXT`d3N+MwB_M;s``UB}~RLI(_=
za*~c<|DhpUz=|<oPW>CrrMHT+AITMjd6Y5&)=J6M7XO<T6_aiN*<2!JaA<u*A?qwX
zRtI12XDV;KQA*IK|F!$^sQ$0662n`>Lh!xIzn9f_Xl6186UmQ-!^a>N+1`6oWuJj$
zx~OkX)2;X`0xSHgv+H=^%9mPYl3#Z+&#N}ayMashY#^^Lq3O~CJQ9W^)?HNui5t$P
zw}je|dbr1Gz-YhVW6wG)C~44Ua#^x!C4RW+@)TGMlCeOzw`ZJ_l}=tmw=;J1uIq8w
z$=yVPo?WC{KwXW6jF3>ZG7m|v6?BipSu3><o=M)*JH4pHD5%S8tk9eMN-?IPe3-?m
z9U{ow(+Gz;^DIz(W}|_0F#cLr+Pm^+Dhq_K$H_b4<I}K2ke#V_0~YK3?T`6goAy^$
zCPGA1^-mU?ADp!sH#@3RvJ00aG$x2R>~iRNjw(YL8`L?$r5B+-pwP6&&?Rkz0OA7G
zVp+U$)M-KYRP$ellOHqeWq#!m!)g9LFTg5tq^75I0Kam~$>JWlE4)&@LrjeIbd#a!
z8o(^C^MqPpfIM}Z-xmi9ix9(_stwdc;6X&+D~AS|;yHYGJBYbJUF5U^c|<tdx`HTX
z#rbI?`eO4{=d7Z%>)hR<qQG=swXU=yT)1lV(p-W=$ymiuIYnY*-%zu;v(#R?r=Drj
z<KUhnByxkoG$sggokW!$2fYpd)dsJCZDj<wXm<(5PCqbySN~OGhBS*Jns^v0dkMOY
zu5~=s8I0RXr%EGlx&HO;_sW8<uz^&me!YQl*3xDvw!X%=tCYADi8+)qaJ+5WZI4?;
zdBxwFuLCv5$$iNR0iuTTPNmLpuvR*w@0>OkwmXD8BKZZTl-=QZHRpoqWx7uHnPRrD
z43|)Hz+y@nPkvSL9+2OV5S^r~tf1KoSscoxnYhw;!+O&Gd%1lW=ImUa2V3Tjo83q*
z#G;1y1hRUC={F{9r5y|k0=uQ+I>H5K8o*~A$gE-EP1Z_>Jr^ZxLkL5RA(p)83C|t8
zwF%hZ-lJgn5I~!E#G6vFKb}LGb-KgxAyHC}UrS<Bf`gZ7{dGi3YN}fH71lP@Ds3@Y
zx<|5wB}#@qAs4lzkJQ&_RTFQrwH;2L&gRz&m(lkeyg3`J?}0qXr!sdSv@H5B!*wZx
z;!4@!8vb&IA-J<gix8JarB|owXdXhWUx(|~uO|pP!QZ`Hrj-ytL`;bjnPShFT6FV6
zFyQ>^394-}4hhL@r}>6YYSQgk1D+CHr|t6CKaT|&uaW&TgpvP4`dmsoo%IG9%qy}w
z1ItCY5&p0*xnXFXJo#4m<aPauq0HeHTD?HQ8xG!6-x4;okuSfH^=!}&xjR#@!<he-
z8bSJJ=H3{WKEIuRvE}7TeO--zz+%c3UfptJcy9GWDEW*(WHYK2unZ)^S`bKH5M<|(
z%w>4UY#Ux%`Pz#<Uy+1Wc1|z|l4incdW<BlHqeTFBb0LRVy1vjbw#drAepZwp9Q7x
zVyvfR=kDaw_iE1QD_*GcS)y?&zCUw#U+-=3HRD|t&Q}@fUzxU)z>6#X$P;7r8K-2<
z*WTBsuj^51XHp2It&K(}tyhP|R^6QRX|FLFuV}hf@-Q5`a@75kK|*4%#BH^vycJ!z
zQ7%Na{Xz3VHgbRhe_o@Sty-zv$JorSzvO(~X&pUc*r8%`qO2FprtwzIM)peTtDz0O
z=nmD=tMm~c$X$8dhs5lIKu+$P&<qMmN0F6LpF}#7aT)iFAUi@3<f2RCo~sj_9Q#!v
z>g(tapvbb#K{iL>CCT-ZmoM?JGJNFrb<7{SCeKbdxU26x86}h^HwGUzH$C3|*<y;O
zH?Bv(PTR+8z9Pkzb2n#-TMKNjhqYlp&=d|Z_1#&uyZE%k#q`W3a#7sGhkO-LMvj?|
zbkp>a`wF3MQ~fOa)-$>8`3v-IyEW}*jkRoF@=e-Au(ZBnu>9J`9uwIYKZ>)TFWlGx
zC0#2UKuOtNBC^eS;=!Cv{#w)leKR|A6|9V5`@6|-f5dP`ev)sYU+DQl-r(p-YG>-h
zp2@x*Hn?ET&88@cVf6-c?4gUny}x#u>$JSMuX$a42l|L)*-`QUPmE^CJrzFc6fpe4
zEe)&wgSOOlSQ}J=jO_^RF?rnMY0Yf&t{2GDVfH-MtE1|akfpgH;?izzSZ<lC`F^TT
z`GFIfkJUi&6y1WN#+}$#C*C*NgcaB-NIfd7j0bKigZf_bbBXemqRINosHKyhKD-HK
z8tX9PDaSSndagZovwm8{S^=<OavXQso@?pyqI-Q;Y5eAn2@Q4;*eoWZi~W^>s;wo6
z5HetzQ-ldMdO>!LS&v4Y%)4vWt3cHk%pDrl4pu*Mis7h^A#tKKf4_F_#}|5g>Pb#%
zk>YQq_P#`y8298~JHlOE*DWCkgy<q2m?Epy*J_Nt7~XR?a0bMHO?6RwPL#_e$g8?0
z^5U9JfdXbR{Yf8*`c-8n?~NDMnLYj4X7;r3`aRd;E*`7xtc3-Qa6SW<dLN=_#}i-j
zko7p#Dwg6d;x3wu=flzDR4|ncA>5jWgZ*n~KUd2kkfg41kaj?MsHZKc4d`jWtzSeh
z6CUFKX#MV9j^C#XJt^-}P0F}gu8~<oB)`KNUuUFuU>>|tzkr9#?qTY5LwLqzgWgxc
zhLZU$({Wd)r{(0jRvZ!mekpy|8hRjk4+J;-#!H(YaJ7H!Et|C{j5_&jsIM+GDuCjc
z#jS70L|MvG(S?iP2}B?R5E=xnbfz)dh_0)Y5fa0wtmSkMWdm-NlO|&)cr~n$KT$5=
z5Mn@K@+*k1r)~wi==w;_r@5L$yYvSkr*r$X(=5=pUp_%_@Bj{7)S?UmGX6AvAqDi?
zFKNqE8$qkBXdF}4&Q_&NMyo=^ZV?kJ-^@o-DZ}9Wx>+7~RlnYjS^uKT0UyHMBXQNS
z`FaQvH=l>Kcpj>Rc2xT1?fu?<L7qt|7t$!9tQ_+D+SC62r{|S>CYLAw3SGXWq`5BN
z`}ff0o3|{p*((1|<LwDJod>BLp_Tm+cI*HLVn!fyQzz?p?(YMK<xB5mk0<F3tw*|*
zwsdE5c~N&>2ER1!gp6|&{c$c3=v|?%{=$^xxT=Ghqju=6OU0uVjSu~E22PObHDvly
zOXWglFRM`4sG}(|m9CMQHR7;LGo->uZ@4yH-?^P}8W-PLum7VL#Y_ZGQ|q{#c&&=!
zFq>9Svg)bP@0s>VHH!GBt#lzboPN4!7q+buhuF-Z+Ri!s-eY=jBn$33PbLiv?J=5Z
z681;9Rv*Yec`(zp#qw9ApPDn;>ynTg;-5nr@Dm&|9vT~3Gkn(yqk5x$N;t(9;1y;F
zmnCymun`}w$`pCPp$N_u2=tytKB8XmoOR-zEw?c!i;*Nk+AX}8Dz|JG?SX?i^oSE(
zQuA;#AL-`LUe<1Qv+v$(j@V%)VL7n?aE~X!#h@!yrZVOW*j%ooPQBYzwy=9?(a*I^
zPNzkB*ZfgHBK?2Fy?InqXWKp+N)-h$3J3~9tP@(Q)XLBzvQ<=6#8?MV5aLi}h%vQ-
zL<rdkLIgyrR;f^kih#-x5dz8-APiMhW+EVDpvo*e2w_W-?eE6-{m%KV-}ip&th3G^
z=MTHO6!!2u&wif!zOVbbu1zHe4<7vGX-V<Z>t-ADemrB%&t+tf<gQ&x(j>rdffAMg
z89zn&l!rb+A<N%IQV-DHI4euh&H_R-gi&fUm6;aS@Knpy%RAEH$cjITI7G584?0)I
zN%Q=HnUt?sh$j#W`ms9oK@_{e(?_d2!;x)5xfzHRP&JFV#A(_v?=z{PIUF%7w^T#_
z1Lh?s#}P&#7!+M1rCjd$N^I@;Q!iNuzxBcm@oWrA*6BLy8_KX;{BY+;?lFIcb<T<i
z<%<i$ebK=r*(&Y+(GFkbc3^8Vn6ZV(*I(MZqLL&vycqk=Q<*vFv4P;uxlzY5{ie3%
zgGd96X>6(2qkfC|*z4ql2LutSYR?aejL=8khy0ZL-Uf8WN8PN@8AyTX#4HTHz_gar
z%pkLbH-#TuL-kyfJ9;1ElOPvg)a*>xYxwrCe+aF%zKpuB<d^tcouWMj#pR`crkACc
ziVa-MNS5mP&T<#naX@<N7-;ecF*nI2L$(`!_na(c|8~3&bCvH&WMrzpPj<uNUq7Uu
zKx*QEh}IwrN{nD{mI@8L1Lm{#5WRIh^AtKt&FeIonZK<UGH<ASQTrz30VReut<PG-
z#QN$cwTamss&DbFl~VqK-HslZ#2vo?YNe?Q*ZBoE0IPx=Ub@J7Bwb-@ZNh5V)}=`Y
zK_*vhvhLbY=R3jGKZrSsE!~A&jusJ0tZj3o=Cb(JQ{wm!6QLj;Ib`uoyMSs!V}-vh
zEDM!~Iq!Q`BK|N@SX$H3_95tS?)%pGM%B*J3s>+z%1Gy0r)ydiJ_U2*<7*N}l3{y%
zhViP&TnXtOey|teqVpzHOt_j!ul+Oymj?Q9>#kO{>;R4NC}>`st7s5uy!NzBben-z
zNXoC?0mWC7QQy1$eJUrbtmRLSl5<gi3GM(|`I}XH)wA$xn6?*m6byG`MIzw>$BpM?
zfPv)8bi#>c{REu)m%I*G>0BN+w>}7}ie&TtcH`7lO`YJz+Bzf~2%-!#woh&RVbZPa
zy44#J^4B0#p2icEkfBCwK`XbTXA-y`Lip%UN;-H)z!SZ*?np5vQLi-RUWHX_-!x%<
zyk>Ljn!wqdZ&{<22CSPl9kU8s`HmZmAD+mh&3s%|95Lb3y~z#<00l*RwUH1ufP?20
zMat`%#324x>@|7d<f*q`asGya3>2#@Z)26a7jO8JV2Bch&MReP`8jNRS@`M~u+<$<
zdd>++sZB|Dd+72op!j4?qt0mEblF~c8?cE4$BimO)_M_|mpL4VMJi)7N$ibsWIix;
z9GNO-ADmX@N!(7WDh?Ev8(>?Dp<IQT>{B43c*<ekzNby>&0q)P`n5xQnjD#P2(Jny
z&-G%_MI;M1_zr}cG&ta-=t9nmVk8nww~%}jQ9?(N@}$D#YT%#h{iq7@@w51*iG5bC
zzxI8@VGQLGRzpsU@y{g1`(BsEaZN~7mp4{>`+@LMVEnlnJ3Eg(ogcF9_|JxV-ts^=
zp~pj2Kcbb>g|&UmjuI&<VqWxQa?w-#*bt;@bgmcf0(Me04O;A7ZNw4@>)h^Je(H@G
zL!FtCoOQU_mR6VO@%<-cIcvv|xn2S5`=|EsRu+Y3)7>5fOiC#W;gs1alnN+?zUl?b
zL_%`ueAOnj>M`_^3Av_ib+H9Pu5f0ly&Ro`dmK{ShsxGA{uQ+=C9ag-+kN7oV&=8G
zgT>`B_Z;YU#b-eG!nC5GW#7=j)-z{FP9JduwpwTiqH+w`>oBUwOQWas#mml0Q)ae^
z>H$OO3+GsZ5Q{<SL3-wg*s96ekOtt3;a1z)C!T)CX*hN^2N;$U8&5I}_bX<!=kP%{
ztPI!b1Cj!d(3`C~idOFXP;RkV<@^?sVPOQZaC5MIw9_Is1?wr2C1~>u2Y>L+$m}ii
zM2zsPIw#AvQjZJiZvHa7XS90c&VcFmq)5?}@r?&`i`A{RQgZ#bq@rWT!X8Or1M|Mw
zlm2kf<9xg6`IKV}+jkS1iGQ9m{ZF3sKXd(vw|DoEor{gz8<)Lue0^>EmEo*S6hV@S
z+UzE*i4=teH;u)mYGMUmq58qQS|*aM!h(C5!(tiZH$AsK&1PMGLA*Jv<ldFn<kYzV
zc_N3Ecki+yceU7-Egd=4GU4s?g6NTVE`j}j73Vn+l2Nr`kunXZN%@y4x=!DyjWn5o
zr~%8Y4xPEQX-|w?<LsfZ33<&6lcvyR{L5-XR4$ptl23`N^E%#KF139$bg!=Z)<-<}
zU=i0NzpUjrbbb{ibc%?%U1654CtxRP*IePp`M2+83ebgYq$P-6#khwAwAsAVl-Wc*
zZauTU&!=PUjr5$H`g&4Jc7&c^IPwP%*din6;Dx<05PC@4qPdIEyEgD(@&Aq69+M7@
zMuk{L7HDSnRq*uHYkZkO7t%Ik(w%(BHWROuF3Ry4EMHcvAS=1CZ1g@W@?d-E!8>>a
zJ^5JZ-A+>2Bxrze(8}Fte>|re!B3a}gpTj{0xiCKKRwD22}fKd#6oO;LljK_@*%I>
zRkcWAndHiNj-E8}lB13c%22ajbJLQ;=(~%c9g;fRhjt{LCt3uRUb4}E(~6?@iLAJI
zXJ;|{u-tkPes9#h&34q_EeSmaA6pyzIWN{MvsQis)vU=1ispOh(DSq*Lr8!fo&{gM
zAed(`&i{&awU5yC4pulY=L|yJb`txLO6Whs<Z)q6y|O)-Cs&qGxH(X#f689Kpr?~f
zg$dvrxuK#^$(uLAvFaSW)h?NLk3>M+Aj^WQj_{|p(}tY^-5U)@rj8b9soijubW&}E
z5V`;e%^=|^n5q`)0_DruKWj=H!+OK~%a`HShab0;T0=84KRSCP@cBs4joc&s93#vm
z!qM!`A-^e$xU&xir`^=aa}MJu7|$GQuKn{#cvuifApycs8G!b`L_Qve*dHJv&L3Kz
zS};B3JPjZ5A591m4p(BXQY0SA>s=xqb`7mM2nWm0ZdMhOsdL~U`FSl;B$WNw?zAMp
z#~71DaB9w;352W4tl9(7B6_f~>0F*NhrSQ`S{{=dQ-Cl9!FvQa<ea(tsGC!h*xWgA
z%OfP}rKfLQLI>BgH9g|R?6s#7s7>Q&yhmqw4qH)O@1Nlh*5^0X?>BgvdBxp69#w%D
z*@jsj1X)Px7I9#g#>}fJNUz)SP}79#&SBe)RtH<ooXl^v>E2#D_+xH1fB1|nseP>Z
z{i?pgr?ERu#V_A}kkoL8{BI}d{{TU@hdV{UQ$l3)!V+O3DtpNSw0}sKBt@j*lrb*<
zO)&AiFAkkJ&E9;64998Y4dFXoNg=A~;u8XH#Uqkx88Lgqe@7_67wx|xl<c22QQnCF
z)B6H^QMPmHgk$HShhD7t%eRuEIh?xi4q18s4p|mTkYP_v0P$V222^;EDSPE9`0J{0
z<N&Ol%apNO=o=_?zJ`DyquVna5ub+-RRZ9HJFMr3qiDw!ICy|ZCd5|-kx=&oTEuY*
z7UZE$&#DnBx0LICCJm$=0K=WB|DyT)|A-Ze{|~GX7s2P1i@sPs?N4{IsMnXc@BW9@
zR3>~BFeZOMoL%WG9Ii#_G|gTPa)%s^{x?{;J$z#pp$A9ys^2vw$Z+giK+arcous?4
z1ulkbI1^P6HSDxTCVo-`kuF%O7emCm%6(dt_d_>2k?k}Ca8<WyKEeoD1%vhc8mEq;
z43OlDiAU5~dv!j3gaa=e06xxa0QeN@^?;=5t6YJiXCjq+GMcUp9q)k(Y(_ooCA(3n
zg8JzPW=Amb8lu4q*5F|QeZZ!qsRX4tz|?Ki*~f4{Y#pCT8ZQe2SOW1NdRs*3K_z+h
zAy{!2gu@D(1dX4h1NbF5-%kHF1$W#}P<@r&fMy>4OzIIRfVK5|CrR@Xe*QH2&KAkz
zYTkMfPtZC~_<8qTBx2XdXVSYfaigmB1@O3tF96UGd;B5!^75-6{@2UjAmHU?08P_S
z%-2Po${g7b^@kc5_AHM|KyssDt4acODY)2bA&9YPQW=v(fyW3JuICLVozxN71ubu=
zJYi&Bu`j@_GUbm*pT5XG{#%&zKehtEoVgNuT`&(3nrFh{Tm6!$JobW3=HMwkMEq=}
znuT`gH6!DSoV_}*>MNg1#-f;A2r(l5O!5>-55k*t|8ISdI${9g`JWKln>gb2M<pE|
z<CSz8w)KUPa7CoW!m&S@_!1q>U#Sp0W{oO2cgRC~!jac$1R0K;8=o|PA;XO})|w-L
z>hx=WT6u^3wgI=Rn+8Z1qTMy<kfl244te4in5q0K+E@_+__}I+4y@3FI-(cAU4>tA
z(_9z6W6<!`FtL9&gd-Dr@Nu#L20poo^4wQ#;6b?0g}-?dMu8ckaQn5VS^$@aLoR{`
zyAeF)U5Sz{5%39q1Eo<%WTW+O6T<0l+_Dp`6g?qc*gxS^c$6>7*W603?R<kR(cBe_
z7_x^!LFHu@cId_W-Y&1KYtl-2!^k$pe*A!CBu)OKVqcxG_Gi57s7@YQc{m$(ly{dj
zu}({okqam`II8q_bKc6lGN1E0twMqS!SV=e^mp`gq@1M77db6ldp{6>Y1iv*ofU?e
zJLR()xQ6b5B=v61?_fa%4S<w4k<!|mn2r>!8JVO09{T{{m4!*8I&_-pF~-z$&U(3a
zG>|%X&~)6;$3NAAu`PFEhmBvloqKU~+Jgqh;w=Mh;Xgn>BHU#yfd5n_#Fy3;O!!EQ
z$3qjM5~q4@=Hii6Ju@($Na+Tq@moKSUk5{0B*v|1{3ap{-QFxn_A=+xZ!f=K(?6kE
zzpGupgf`&GR!Yrz!zJ+DlF&-%EBu8SK^WpQu>9UVaSzo$VT;L`thEht<RY|f>Kp=<
zf{OUlj;qsIk=5T*vs`2h-5-fpvR4N5+arz}GZ&6CmU#NLhn(m6X}zZvj;f8J4hWMw
zV+PK+&!%YZm9HI`<jom>738?{f>iPq?y?1&drh9=)4DY<ru1kkC87s4@bWXPo$OqD
z`+?iaMBhidZBOMV?$2*oJ51Wxr)0rb9EeIE@Ct;Ld@X22v##RL=y#fpC*JL1rB%&i
zZ^c1K+`77x8yz(76v$jSZg{YH#Y9G;+<arsM2c?cHM0Ou+mWm3M#p<T7#}4k3z-PM
zY;>dnHb5E1k954Ca#jD>1i;W&tiB^pvD(C5>esB)y4oJI7B$uUui~40E_?Gs|I0D=
z0;XzH{2xlduI6uEXM3^TW96AXw~~V-b>*EIq&(d_*LRS#uJ4qRX6{^$ktnHt+EaQE
zCz=_;XwVgXk&f$nca$5j5$rFY)lD{<^Pn|8Dv##M&_#Za2i>0s&E?5a{qC-^_mMeW
zbxSkurb$i<TXO9?eMI`L>$ikcz5>oIbR~9q5VM1O(P*wR3i~5fyH)KTFXu(0^VwSR
zo9zXbV#hTPx?Y`Q-oqO<+x5AEF5CyN9c}*<>|}r*xw-R>wl(IrPF`O^7M8*Xs)L}F
zJ~m+D*C>?zrgm%><^{&v?<C%c34NB~&*C8FaMzEp`U)m;oQLOWgzn{IoVJHPpVoyv
z8atdhc7szxQV(i!kTaAn;Gx`AWXWov$6^6!jZ><3u52zhWt-zCrDdcJzrtd1+=QF`
zZtgZb6qAU4O{U<kYBV?ApyfbGOSYwg9LGEjIb8Q!A1}Yo1vkT?@WNG_!W_*wTb}o%
z4CT^vvMt7%dj_(Zge}X*YG~!ts1<gJd7Br!T-V)|`2E}E9)`8~%P!s8raP>Kxxg24
z6vX6;)P^6G65JNs(^8RYgC&gkKNte98)W#?L-wlH#3KL_IK(%vyzx+tD7L4X>~34y
z60~E~1~ppIck@_!Se$!gb>7P8<|9W)=*h1jcj)^}x+5Mwhu2_mqTO`)L;x&SMKrey
zF|T#-s8M*RPR(p5D_8jcZ^QPBbfl+=8U8ab6Ep3~m)c!dFAuZ$v2-ynf6(7q{u6%b
z^n53anxnjhI@OKWGpje<p|ptKpwbWMls=~pnH-XlKa;-o)Bdzr^9Vg<jem=L$vmJt
zd-$VjJC4-&Y}7nshspg;_qF6&v{Pnzu^jXcTiYZUu&4)~98#~jtJZHUUAMS6Bl*!l
zs{6G}|GnNhZyEBRAA0W6niy4Yfel~=^E2tLiIhiJNamtrs|fTaiQ|KVTlx*vY4&za
zK7`6|Ohi0wHN26&wak3`l%zIweruZP`5V$49cp2VV76nJTxj@uW?UNkr?Tb=Avqv~
z62CUrW1C`4QLLjSg=^WyEcK9et=X$Rp+|fJXLLjnX#d4wROq8*a*<C)DDom4`KtUo
z^-3t;Sjs)(oycq&cBTkZ$$dp-oJo<>51>n)6IGaXk8V8o>&Lt1zngXykCBzN*t*XC
zP>^$C_p|)Ag5<95AC%1>_L3d%kUM$!H^UU{AVdTHltrj0=hV|eg(u6@SrLI6rC1S0
z5v-$veymFEN;9glkNQO{Ib<)Ay*$3!(OX$5Umdu@f)ZDIeXEwng*BZq4mr(H{L1yv
z{AqDQmcrVaI-3^J#Cr9Q!@>3%>`KwpX}fiJO0xFm>tly<_8(MP9ocbBCj^dHgldtn
zIAJmVl1;Vvj$%+3=eX7Bn*@vaqpW{e|Ike$Ytm{@R3i$+;yY7_z_{w=&TzoS)G6z_
z5Qs`zwzg_LZ`A2WhnK-T?a>Gj>0dwKa_bJJ{EClhqtnv#zfxCYv{)N`tJ+k(l6D(q
z%xN_hOu<8};@qri<{#b~_%JBPepu`f{l~zGhnhkwbE{zzg~8qn`{_+Yngbp_7PwGW
zo2h6K`53ma{qKPo%Fhb2h!;(mKr4Vvm)^vDAMjmV==b~P9Nc&RtvB@yV?o-H&H$y}
z`nUdxg&xnD!Si(fraVpn?HFY*OzqizA3H2@Sg6?EunF@`m<VOgr}yY7e51z!AKqte
zSn12iaFxfKZ4=*16>n9{O;11MpR_0ck$;t5ysul+xU1WaZkIIw<Bi&b)>kFiSya8i
zRT+i5^fpA4+u}{KFf+)a3~a0t=CCq`Dv-I3)>6LF5f(>tEhy~U`sz;G(vXZ~M$Vy_
z@p!M{{myH8ZiI%Oe1GrA`c+T@6bZ4z30;%K>;Y`Dnxc#NlH*Lz@UT9bII+533RoJ;
zb*tiiylmvmj`X<wrPyDl>h(gdhfnv{o$oSuOApg}4tq%i(38<!)2Ne6w9v3$sp<vV
z%E!2MuXQ+T$g%A&1}pN*?rZMh?GjntMcC;lk0>b7xduCen6n3+mSV&1Q~4~f>hss1
zXW(hhv2rV9et(O%pJ$bKf6-KY)Ek`vo_hX1K&&ZHcDzn~V=!4|hd!wXy{2Uq%aoB8
z#tdDzpM%UQdwub><v$e^m(XUCO{Vz@F=nDD$5oPf;+o?dd#tD?r%B_ZxK%t)y*QaN
zOzjnGp4gJPCTRW-Lq6t+ajz!TB?1`F<WJ%)oz%r>mANlH7ZI&!-}9&Ajt32ydheT-
zx2HKc_!N^oU{;+wAjtfCj8o$@3w;B5xU42~_yr`1G32VtLceX;{vpP_Pf9sK)q=9Y
z3E!X`OOd;H`vaR5bCUeqJZNFx%>7IGL23~O>-Zt8?8wVYHP=k3U4Szs@}5-TT_R`s
zS42Z^RZLplL%YmVj(~$NOsq7%RTM83^-_ipVk-JO_4mSg$yLYQ%2zV=m?U+JCQ&Hu
zfyQ_72m_;53MruMw;UoB!h-Gmgy_Jw@(k6?47HO&Cx*Sw;eHbJip}WUA>+OSkh<@$
zE^J<#Ci4z>uNTTR=)dj>rnjmy7atBdr1a}tCm=xrF75O>>BV}t;AJXj^|~fQS%!e0
zFsFOkdp0gmVm{zx+@5P-*}SIo=+wUZghgca+LlhgkofLrpde@F(z3j?sP)WviT5V$
z&hoF&N^r<MFxt@~gVwHDxLL1Dv@JSAZQnSeUN76J4#WCH7Iq3-9yfc@jU7$EEY9(&
ze?)uJe}1L@G8fn9CqvDbzNoESEMm;tOTLYqk>FO`k$M=+#n>cJT2)l_-aN5-fz<p|
zUv;qw7>>(QmQ^~LB-a>r92xi>Pd?l<zUoe4yI^Gfu5uvUnC)xb`qAH%lb_?|FFECQ
zVxQ`ej+h3So%9`W6sT1+t`8aazpoC&#IXhZulsMMS~O1pCM48XTlJ!5l7T`}-Eq(Y
z)ST+{_N`8e67X;Mb=Kx>Y|jZ>P`W=LxTxsW+29{_YS5zK>8}@Zk_a%=>?B%wM!g`Y
z>}0OV?X4naV@2F?{tVW)U0&rM(@GR>liY%Zj1gPZXyYYGhh69E2WLLmys~V_YvxoM
zr)Q)7B+mK9nHe$Q`m?A#FkwD^&ZEr{kyFTnw@iD$UL$cb#6ABW-QnO{k0~Gi{eW8r
zT@rsd`ofqq-bHEtz`Q%UD?xNP@0Ec=IEUz`VSzg81$|qaY{HDxC-I={lx40h<N4Wi
z;SBYRu$;k+s%A6ihjf#NnO^Ddv)IQ}Agp)`1IA_k?#I;&mxgnG<Fr$-{j@F*WfLyL
zKEfs?Q)Ky+z!An_n0}Pa5J$En+WkUZ0fW51MbHJ{D$-c$0G$dy$wO1n9nFGQ)M}+)
zu`>OEzr(tcRtxc#rZwXjxj7U>oU94mkG{TiKMr)*m)I3Hf|goCgpYR8Sl{0<$5q=}
z>ra^0pR<$vaN(;Z7Y_fqw2wjJ00CH7L>{qJao9d+ys%(2;k}~nio9`rbWVSx*P+h-
z)J0(7SkO3XoB*5-|9XqWyB$X))C*aIv;7Uq2>t^fNw?$mm%8EXo0}~1Fzeog8d^t|
zTyhZ@_VX1P`EVHXL}82|$!u2smS^<PA-#;kXDy>6EBCUqG?XJvqe136)t+kxsTuTX
znW~M3?t+pQTfGwh3gnznz8czC>og0HOG5laDU=ERhGN@aP{yQn9Yz>XFqol5i%$Za
z&8CYk?2MN;-|E}WFsk|vmC@{@?9gMB=(O$HTP$?#xI4Yq9e5PKdHbC^lng{+l&N0O
zOT_Z3XzF!6fcO0aFy%{}j`5YSVMUY?Z;Ca%sFBixs!c>Q&*Z}dkZbyCJiEJcQ||dW
zY;`z)(>{iMLT+_U6ECH4Qy1hj=d$cKnOGmY)32C54@mf_R&O7ix#cNIvkg7~50KIZ
zvF4@ITuo7ztby1@X#msYdPz81kT{YD>BJwJ2c;(;upL?*H-iIV!$n>-We#U0ZdQ}D
zF*hyKXY1lMecaL$GRD>;{pH_0E-Z@$ex5bAbB(E7;tGzPpR(UahlZ1z=>Ta>uYu5$
z!Ka+osIBwu&lee2eW;fvhRezXALV}KP5$c-{hjB%S@^2xkF?A04jzw>FVF(`9NSKV
z&9m|-v6N`1EmTAJ_VoZX%0ZurN3G{}n9t7rwG;#X$OJ9QY1vc7%AD-Msq-a@<b8@i
zOR@J^3hg6`ZGADe<ga>YVQF>tNl|t2OdA&lnJ|QYlqs6x9anAM3Z%hx#(dQeJHNp)
zFJC%~&*#k9*2_J2-+P2Qv;IP+vp*%a<8isg^+CU!77sgy&BKMkd&#{e%1tmSCpq1q
z%xWDAJAA1v7AaE-<ksfuA6u;_koca}xFE-y<rYXb9h`zHd{102K=J}pwR(H|L^5^W
zk+=Pwzu%}f0YFFd{?28k2b2}h<GqA_G+ellMS-?1#TDM{atqcY>p6Z&SDyihMOL_O
zQCMHGeNa&EzxG{A>3Z3a-?9?1ZONZ<zwwc!F9q+@erxLV+_vUr-gYTv76A?1J4d^i
zgsu}iG+6b6`UgRqqb=6y<&D&E>=n5sC#4B9z3{6aU)&<=3{1Vxy=#jayBzzzZ9?D7
zHDb`)WLM~hva{oD?SaeNHaWH8`B1(C7_0J7`FysWf>%A_DxHidJ(<BW+fu5qcqkJ_
zOAKsii}0a+EjI5A1C~J`mKVLowK^m|{rA*QHr^}F2vW9N`7;7T^<DPgYOa-P|3iIa
zP0XI5`VFnz;kdq+X-2#h&JB!rt?2oxeMG%3o7Ga=W0{9}L|Z%Vx4l{Z@SH41=Rj*y
zTKhzq<*xGPiH*O#s9C{STIbocQs{>WvS(E2w9pCw#(~n$3>Of<nai5&O^7cy!mVhS
zugF`sx5nbT0z6n@=%UDsg;s*h<KA?yLhL>7>tIksznB>p@9TNJb?1t!2`9rI*iiKg
zN;V<7(^TOh9x-dW6F_HPy=sZba#%l18i#ZoD`m*fVxKq&dA8HdmG_Esq>6m?5}IkJ
zw+}y3=gMbNq1eY^5mn#5dWPa?T<~RawTiSM0k?Vwp$r#dfnG~Z!6>n~n|Mi=TkBI|
z^N5DXO8>02f1EjGdIDFo9GY7Wq0zn7ln!T)!=`TE(cNTyZF>)AU%f-QiaepIO)?2x
z50!~}0koGwC_-BpXq6DnF(?rxS9y9=lfQzd{UXAoWnyNm2lk$uO>cC2a2P+;JaA_1
z_$!mw*IRajHj&l*8OfWWfze6@uUE-{lk*-@)KJADfG>zFwE0wST%U7@-Z^@Stu5PV
zCR3*LLT{JcY{Xbxn<l#ERWFaHY-`KOu^n0O-1bZI&O(KLbRs|5zO5i^>4(3y+Ym_h
z?9&L{VAUaT;icAr^dx0Ad(9oT6P}Q{vP{awlY4XQE1Z@nOrk#A1ff&!6S8ifw}U6D
zh?V)**LYMF*HnM+g(qxDt*<t9>9W~Kb!$CS;mA}D!gpd#NGRAI2{&~y5Y@J+Z5rkH
zS-E+b+S)QsttEej)Oor@PdxwTDumND%>!rer&4J1B7^2e1qYMgF!?sBEbSou@mubb
zcPP$k*vTUyfs{U!6qr<5Yq9;oMknEG*10O7fsG#12={e^eiSp1IE_o*)avQdG_i&%
z^1wDK6OD^9<HCG*$9}ATmbgop_bh3a#i=Ng(|%1ED!qmlfyY4b77U3){TrgEP9*{h
z)l|^HwSn#1s`@;~7K<0g9?dUqm17yta{SL`n_6C;*tk-(zir&j`sYI{+s9v-d6zWD
z%l$%xZ^E5k;57IM!7chQv6{UR<ZZpEk>zu+gS;!_8xRmy^^()7y)7%9oSKFOMjx|B
zN<E~SJ>3GP-q4!U$5V$kx9<~sHeac#Ka|%pvFc2APKA@Hrc5Zki54cP4Fk}xo~!n<
ze|*ver7{bvR*WAH_7QsEW&iEa;g(c)A(r!@Ed8SKP5I^T_5sCp*}m9zH<z8aM{P1&
z4fnK(-AL;GJNgW5nwY&hce<UaP>{u<SNE8;6?CJb@}-ToR<9`DjketuW9BY9+6%mC
zdy=~LHVYV5dkc%oTY{|2E?a*GCSdP7{W4<AHz8;s4R-(+kdJA8Q+s~rtW*C8JoSt>
z1DOZg%k@~g9}l&@iqCe>1hx7WDtJs=wU~4=bN9`14}Ey@=J6}vZzHMYnujo>8N$M%
zk$A;W1*IUNmKPr~QCCB`biF?jnKfE!@jJ-);2sbB?3E6$a`U9-dLnrX6(dT5a|hZz
zd$RamX+x&DcYQPCx&}^<r!0M4p*^0_Ma;bltFN@n%L~fdRd4XaXaCu3g!nzfmq~wG
z>pPZq;A8G`<6X;By-VKx`p9(qDc$u^B=uFz6NHh_xk0G}87f7+GFdTBI4DGZNzCX#
zLG<e`7i=`z@u&0)&7J*D3$XX8*Zh;_-V#rSMDv3fCv@Xpo!H+RWR(a;xh_Y^e?Zf8
z!<(f@XF08lEM1H~Rw%X*ts}iB0e0NgW3VB}NNBn}gS}%aZHNBvm?yr9b*+4<`B4g)
zOd=biRXgTJ1bwrK(rxmu3e6ni|Eka=d{jeyTUP^s3iP6^?i+?H&e(uQDn9n|5*%q#
zYFB0@XN|97dmeiYe_Ac#x3SmVHbSz0@sHcVh?O&YsNBdjNXWHurTaFnz_6D01y{uf
z@~^&c)gF@IvHJ;Kz&^H7W!A*P(XY_46(r6HHWZs85;<Lz*(iN<9?|Wy03VeP2>oe`
zjs)<qzgWH1CeSOVsEq^a&u04wwbz}1ncilHu?10uF|v9Z8UI$^$O^7%CycO5KBjri
z+$gY_Z6vqw{^RX@Ij_;_Sj|g$M3Y|Xukun`;~o6xiW0f6dN~ElhvZ=4atrGg&T^R9
z9b-qj6HNO}i=U^{m)8C4XX~aHR!VzgQs{nSr}6n~wrSy<>w~~ngv_~bZ_8-5PK_km
zZl?0}`$n3-<ZJZ|=7Yn@fBwQ9abGXEk~QNUaDwbQPsMIFdT#dTTm5V;e72mwfR$Y5
zvr1tZulASg`_`ncQ(P5hv$ASZS1T;ifz!*aE?=pbd-rVCP|p%^Q2Z9JIE}~Q_8_nN
z9G3&FeBaa$Q&aNLtlPgNd7LLz0314PlKLNEm@kY>&;|V;8JW}6G)*#mFRAF*QS@=2
z=Jw=p1CZ=!l?VQ%hk71;@jYRNcD$QrR<=<UAZ_;QR=A}A@XTa%YLrY|@q|LrZ%O|r
zmy-Pdl}ou=DB!DevLODe090%dtRUhpaFPc}MD_#iPgY{#yE6$h(2kUDKm&OS25{y6
z&{C%m^^~zfh{KJNiI@Be;ZzQCl=%^U0uFP7aOAn=7ffn3dm58^=qH)VEnNVV-2yF5
z0a|&RHii%qsAE}9lTt(Qx=oaxZ6x%H$q3xrvTgdL?C2nxgi}x1CpJ-5LSNXwk>434
zGz)6vCjjhn*IYq9$c2D8I(#Mp?Bh)e^-!C*5I=vTI*)cNc=nmpnkXvJawcZ|1V7Ey
z0QNO}-3J{!Cm$q@QU5zV@ecVZh}a-w5LMuoiJCv*$1`DetSTV=h=jldikdH$a#q5V
z`QVh#q=(ryS_IAJf97GfC8`&xz7SMp(*)IN877au;a6V>szgGo7T9%R-jq+S=m_K=
zCm;1ezW{%3qs~7gU?2{$`6){^*fal3QE7APktuK0=0=@K7z;qZ%n%r(=`!C_n5>#6
z;Ilev(g8gH2<)GHLSGL+I9p9NJia2RL30q*2XqX)lRlG{QsRZfKPxPW+kB`KbKyAN
zEPS_!2Nj`VWw|9fcwLjSN_(<FiNggJXrS~m3?{=8&HkQs)1237N^#o_LO%~sU@J~7
zW%4X-s-0r)r`;-)mI=o$BVEbF^E2@P37WuqCU(Ne=%`kp)6`y5+BCIy9j^n1-~dGg
zI?`!y^GCvW20d1Q;g4WYHrmrE01X|YRx;*Cdy=V14z7@B+$~J*koy49|7se&R+Hg%
z-{Y_}9+8!|?~n(R0gU=REJ1Uj3+?|CHdUx6Mb<)I*ChOfuljLXlkDIv;U-F7{{Ovr
zjDV2@=ldI&$^i5PS@o2!fp(6o1zJS*A6mo_*lDcQ8D!u^-{1i+`cWx#9W*fhcX0HJ
zxtR9&3FQ{pQw1pC=|@Mk>F6AoL1rh_2lt1zk80CC_41;gdF2=l!15SV{la1_EOlsK
zW8kz~jgF$!$>eG4z4_>A*Z_a9`E%mgn(U0WW+mP1r!^H0{LTbIZ!=7;ttP+R$VW}q
zq#*%ep|uj-2{)QsyMQ;VUq~kAvDXR29}1$1iG~7&#a%2@HX32eoA38MHAr)(XJPw<
z*{FU)7AS+lfo_*`w_kjVMA=VNL7_ZhWKx9^4V{z`E3E4Xu7wF@b#X!7o^_SWdV{a1
z(K~o#ZHRmP4{yBjqAe|K9gHuxnU9~G_*1ZPZgW_`XVQ)~a4a<3m$YVeL4M|-XZTEO
zwUHj!MQci-<P1{Z&|^u7Gp(!O#nAKuy+gM(mY#g5p0D6uE!`X@T_<<j4juuJ$7PYt
zfv)#klb?g|@`U+%C;?8{fL=__U=kx|qU?Tf;m4;scL<nHj6s=(GMh9!=)Bv(+J8us
zO3Y_b<Od(Lm(IA){#60i+j_N5mKftzSx#+yZ;6{(1*+?`wDS;)R-M=IU8*^Qd7ycs
zY)|bQ`p$bRFFx#dD9qLB6=FYA@g>}85uvY}ao2n7K)fyp^Obv40njneGTL#QTzIkk
zdxh_18Ga#4QudeABC45xxg(|{Vw~!!s}XycxSOuzgUm*?r(14%#`8?p^-0lWXI<1C
z#VnoCV6|bW(hU~mU%ANfhKr^NfWk1@S~wZA^2Gk|gqf#CqZAvVJ}#77#7XskyAVX1
z<Nf?W0Pl%!tx84Frzd%LmkXpCgWftZ(qUmLY+)>Iwpr-DaV?4biicYV4^P4(d4`|E
zMx_Z?zSwyBiW)jyrDHh%5G=yTAT(m#fGH(hZKBZL*Rs64C{MwQ9%n`%TKk4-oR%~O
z=A2^Ap(mzVDD1Cg_**P_T-Y8cbO^O-B)?x7PCEOy^y+5w2ii)IEL1Q425xl;KP;uq
z2AWIoNMa83ihb?p5FE|^N#}C;JWd1Wr}mt2#>(zBV2<Tn)AJMVDo0G{&0U^#i}k=5
zDJkQQ!o}1zc*(X-Eyd`_HWdSC=-575439i2^tX;BR^kf9SFhI~vPn^xfkc!#56k5-
zoyxKqf)>Y((gd!L8ODn;^cGKqszT{y?&gN7bDrz`&wEB`+6t31D*d!nKxxKpJP6$&
zIb{y(T(v2$n)gOh>2T{AG%?oRl{Ofu_u@tNG3sSu4+oT!MVy6-#Xa+JeYsHAmG8H{
zVdc%NdRc-I>xQT~z&KI=-q2KS5<_4XPW~HkL3_2K>lXsxUVxe`FA<Jt)y5f<F~c6U
z=xoB8{f)w+>><9ax(GD(n|<5Os+^X!1yW|>X>JOa@QE-NmpIS7R`tfagPq>5-X~<e
zS@SwR%P$1lG+T;&)r+U=+;^J;yOCW2$W_w?E#EP0RQ^FoIP7+F1rJ?k{4u}FdF9>g
zA!G)BBHr^;Z;a>Y{x&8*$m-L}L=SPW{l5D3;hbP~sOA|;XLg?Jea9VfR`7d^;!6)I
z`nECW+D8*h{qy~MX0|#m?lFw*cH9VEe`^z^dSpFTXhqtd)VBcv<@1_twmlP{u_e#*
z3CldvW^2B^Uwb^1SPENgL@Nm6!RhqAnDZP?dpYnytfN1ZjD*s=6l^c>Tqz=|Ic_HR
zsHVj5ifGlS#efNgtPVc*$e%E7ANTgHQrbI|dS3lw%C<0G#?!*BD~QF-L2mS)^P6qD
zt*cTku=3>W-BYJSe(SE1Qo2y}4<2fB2u5}ynrIZeh|xZiT+71|IG4Met9jTy<V`4{
z>($G@3`jGzhHp3^EV94ov}9XvE8YU2pF?4y{PLN;>%AhUZ?WBL(gujd&u|wxL;plk
zBVjJV*Kfhv5+Y9`WQeP{K9qtdt)=F_XpKq~2Eo%@%mg@HZCk!@F-<mEz%l#vNF1Si
zSakxebg`jWaQ@~kVDCj4hymSmv|3`s4pOWvTWm^;9^d}-NxmX6o@3SB(@!jI9_1|F
zl9Zc#k8WZ33`>l)d37EzkX_iG8`84#4Ch_gM1_tL_W3zCA+&&PwV4WpJDz$88;;}V
zQBZ26Nnx-Jzj!n<ITF+u`6Y+$nndo*5}6jol~PsCxTrTXepFz-p~~d^`pT93Uh-v*
zQ`0vJWsdyE(rr+xTXQQRhjpr@)_`^WV|B<jP2Aglv0*@=l=8?!g89L={i6BB*dX}|
zEzcrzqadfI+JTW!JsPj*88i?XJ~xm5D=BgKUFN{^p!0)Eib7Q?s};Al+IyUD)VWP^
z`VQ8G6Q`bnxqm{=kYj~pi2Y1ZkuCcIZsse8CCzE<`5upZ;Qu>NHQ2Z8J0;N{*b5Z2
zP30I`qfe;~?o5mu-|%XB_PH|g)ic@ZpVKq1oMw!NBDyq|(3wP}5X(4!)3EabaOX4c
z1S?>Z;Y4|4kW^yWl`u#BQ*)`IlzG`_>H7Y}Jbk^2R9og7uB;hHYCX$GhhbP*>E%oC
z`D`TT?cspBTAzi+T(2h(Ja6Qg_H(|&8m^Rj$%Gbf2B&COOE=0Hq0WkoWI5T9J{25i
zlj8nCRDIq-T72r6X<0@d^8)i>*xe+wunzgF)~zP|rzDc*AiO?ITIFIu(<u12r-k!I
zg}wziU1t3?d!4Hn)c|@@pUb^NMLx4{)Od{e+VP}r6k<LQ_CMBm7R8<kj7v_K=cZ)p
zp;gHJ0XrR4D6M(I{DjE#{8OzdOYl_F-voC^VXwfC^)h2Z&=}##(YQ&A*^RlSTO|5~
z0fcDsTj`2rHFmdVEN@-oNJ+;Vq?s2>k*p!(LW+Ou@uoh7ZS>tN7vHtXce(~UHLq`{
zNy6FYu$tT9!mBtPH0*$I4ttBDufi-L%3?MijP?0MRyiall-uAST5AUV;k`R;RQjhr
zRuYRW^f2pcbNbI>8wS~<NsvPyG2M7IG4l=G)8+O<v$8FnZ52-Sn)^a&JEXKG!(z-{
zPOS^0)}Z+&HEt#{CU<QqO-`A~UZxnW*6gpF<d`+5t}b<c)E~l(C+4v9HVLWvev&f^
zi!6WZn4F;51!3Q60z=(A-0eIM_Un8Mg#Zpcf@0329f`!;uN3HTS{AF9m<@en`_yYS
zNysU50c*&ES2g83qQ$s}-`J(76{fxI@w2d2SXOCFyfmrhh}&Jic2DK)pgXL@y-;Yq
z<RtP|th{|rSCmWh3;sADwMd6mdl|g(q`hl&lq(c4<_vO|j<gOuMQvFpYMe~l2}_oV
zGUN%Iu9s{z>)kHeZeSoaJ$7+BK>nBHgJ;Tm;<LN`l~a7KOAOofYfmCgmSFf6w|h_4
z-zlffA#t=hFCd^foPe(m2AuK{IReS|9dXXV4P_@&iypEfcVky`uu1svt4q91_O>r8
z@ZN6zl}gSRNz4KWN>lF1e6L>FE5p5yv2o9w_J`Td>2;5W9Lh%UnUpWx9uQzg#Dbg@
z8C=k50_zd0T=q^pD4qTozeUk`!!nc6L}A90UV@l=Ps+tP<qL3=O3UiHJ#WVb+=*q3
zePY+*3)VI`<4pJaU+0RH5NStrpp|=tzfdj}Q!0dzrYLj7rQcv#A`^SDg(;T$3>%V)
ztDlxSB>izuKIGOI#EeDfmeTotQ{+x|eHL@Be`k96#bd!iVZkRdx{eH*G#?>ds2hRQ
zV+Mr$5#fZy$rvlT2s)PJ&J8r2Cl$^d6c;OFWE+rKYCD`Ms})-xEff%9u?;QCXAb6+
z0@}CKqC!6#Gl@~xkiCUzEc7r^$vZRF3UlH&X@BgT?#lh@(2}J0EJjZ6h0Le7eq0j0
z?%BH}kNGvGtNtk|`SyYNPVF)hN|iu1A#G*?Bz)D8EJGF!`Z#E=bIc@o+NS1-F6bQF
zgvTq+Na`%+C+;tZ9qzaIt`Or@@Qm@_#I%-6_ap}d&5o`)hr7J*KVG4JWoAlJ*G<0>
z><JX)bOLT^T|<ooQ%k3He!!4YrYVNgxmAcE+o;`fvs|dh64zK|4Ro#;y%;Exqq?kR
z)mgpzcB&(ow7BI=sXdcn<Fl;kev9=4*+J?V&dFf;68ZquM5GM$m|?`TN9>)Nc=m#a
zLk<wP1UTs{>}!xX6QAYSO(N|W^TGugZ=N@6gA|ElFFTjhZ*RCWJs=<VsPS0|N_5IZ
z13%7^_P|;}Yc2^{g)sQ|a@xpUl@7RD=_03Sv7C9>WPB+@@j<nz+39OMQf85l%4uJ#
zeZ&(ZURyCKCcb1#nb)5>Uwm9)aYN3Z?{8t&9!N95&xyqC;^OG!2VfH+d*$maw%tT-
zA3?sT3Ps%Rd2^`eh?=H}2~3VF*+9QN4wTT~+79dS=b2F}5~<}kc4<;<H?DQ9w>)3?
zEX;mi>vyJp-PxnLBQJyJYJFOyaziVZ2^qAGbIKQ(^{}-(LEDeB5${&~!U~~9eq^r~
zzfP0#V$XAyemokt4=cLNrX7=J#pxqE+P)K{P^vwA)-{)Ym$afiGK=Oj+_<mBqnM;Y
z0jEPyX}WOS>&xl;6G}m*7J;9VwXzo^u>8olC2vHFPrOD7&PQep_}DfVbW!H_CrP;0
z9{`hwUAWRy@cORrJ$$I5^Hq2BjnGG|6YizWwqCRDw+5yx^8l&}@XLc<E!)*zQ0B5n
zK>9TEi$c+O5i#2mOH*QaiHgDgsR@;)IIS+mbVdyC91iIDmSV6{7%i%lklA{tlnx#-
zYBz;#?l>3~iJ=W@YcY`FhaBdn$*hel<*wbnyD*I~YNFe9e_qQO5+b1Bzkpts2XP%$
z&4KO<ZK)7Mqe&<a9a$k2UggatHmW@_j}cpP>|M};*w~x$TfMwby>e<)y~5(#r;2CA
z^!Vc{PsR7GL6_Ao=N`QJUg#a7@3BwNzT_EqZ$Wu+;j`Fak^-8rxk@)pfiQsl=7ju!
z!~{8s#7#k7Lox61D=J^yW~;weB<lI5X<|fIgNCMqPDsxWO==fugJFm0N2u=ZiK{l9
znWnjx<<&`d_&LArbdL2Bl4hR5TD{mC_J<^eFV}H1m{%#=+H(qo2K`BV?u1psT=qiE
zUu-k^!tZR8&Eg%#7&<k?JRG@;=T{ZKbe}YEN|YmdLm|lJf(`E?_csN(A^QY{C6~1!
z&68e2W(uV_l7+;2HC+KQy>%~_TRt<O*yYmcV|a@Kk+;3Nm4(&qL+1^S`2c~fQyH1d
zUXM4;E$dA=-nT~_L?c7JG`z=W;Jha@W;t`d-@rrHnUAzI1|a;HCsCV6J^~rcyi7Wj
z&S)Js<eZpLskK2Doidlu?@u+t5^AWX1N#ON^&a5#3a4fHnm8vD?*Wcw+sK^ukR$E9
zd8I3YmXGC>mFF{To<G&bP7t%KR8FwQe4Um<uwkx-J@f15_&XWc>sBT)%DB-^-+?vd
ziuS|@>ZJf%-hI|0ShK9kJyo}zSfD-==YikO^!Hdl2(IyUvbXzL`$g*qJ@<gzus+*A
zv!7!{((pA;geMwshs=GNM2=ktu2K$bc!V8pO#7Nv6wfgt8g5ybfU3lFx6}4TBbkb|
zaZ(MsNAo+O8(_UW$;Kle^a@+bSNM4l>#%=J>mrA<)oww#HL{JrYJZxofnpF~14W41
zaH^#?ggKm`0Q(7?dY`@NY0Idi*PWs$Ckqy!<Hf0I>2=HPLJFMB@e~=^)Gx{XN#R)7
zb&x`S+%n<SwQ6LTpZkHahH*DsTjB)iOJxu$&7u`Zs+cBfGX6^CMfX{XpXeQ0SRh=;
zLbu@Fn7yp6y(HZwXvW(lH*rk4sd^oj5Zl|#OzmC*;xNE6)2CBI<E=c3%39XuX7`as
z;Zai%Y%{GZk<dMc@o0E27VyR3Gpg9*GAc8kcAc%S=~;{YLz!oryzG1`m})zq7o8~V
z9c>>@tCu<2xre;Z;=f^qx;_=Q9c@u>xWM-r@Ue{CL{jp*3<-T6Y~Qg&Eef&6RiPi`
zPjn<-Tmwby^?5gFiVyJ^QY)EnJGuy`SKe|L+k1{){Se4BhX^p(H%ykG*VP3KU#A2R
zUwWOG>AJF@(=o{+IcLywuTG`#38G%mMd+?k>9RMra*R0jXhC5SCV^(X+y?n!M+z#X
zMbQjw=;mj}Y_CpDZjO{^UUWR&v&i(?*5v&HY&gj~HS>JL6j16gy;#y4%_E`o3E=Jx
zT{PJ*Lg<w6r*=kqDMqWha?ZIysa$4mB^#|GM;C^?PP^|CSR5Fl>8k?a>Dg`IGT&K$
zUi=W6;s|gQX1I6lZeQL)IoNEI)wP8D@{4%tSr~^y#B&Mu+q=Huomi+Rgj}Z^B53)-
z;ZZr`2da^JF(_R*gTSW3_ew8DxqM6C!&zYwsmWJ;$3EZ6Mx<n;u5OgU+ORpXW-5@<
zA$H4o!=mqL5tM9rwL`m?iCgOo_rVU*iCI=8L^;{O{jP#4r9SG9hKG1u4RY0U#tb%^
zh&T%{ldHCI8-G}%`%%t}9;d<Kov#|2O#P;?s5QHEb}oFIKNe!ug-(`_O?u`%Rs1rK
z^;mn{^-J8j9Ib2=Vs#W!CcaE{j?;i@my>C%rRMu(+$u>zh(|R0gu=P1=j%3sp2k%)
zpC0l$UA0tA7rL$A-@G;_h&S7>2%Rs8DYcjBJ8!{0`V*!^y~V<&a0E1M%4zw~7tfdR
zqd7D1211vq+6-~$@3_a>k}TE<*=S6;Uhd5_wGD<=>pN4++i1|U5FN;jq<nRkx_GE(
zag!j-d7GG7x;n@8!X3Y<Lf%Qak(<M$8_3r-T#{fkus$xTq(l??xGS_G)rqs!`ci!Z
zv4~^%SYcnq4;Rk2jkn*D_qLdG+y08vQuTKVk1GPYx7|!H{dGaSc>!xO2F@!z-QqT9
zfSt-FtugLM5Dd4r2J&g?J&RSC(_NK2o1w6*4Wm`r`HDE&O*1b_B{M)Fi{Z8RIz6VK
zL0fGPQH0|X_RehYBO?C?c#@kg%`l+d&U5WG^wHaa5Q})<qgpC&DGj%Q<U6R>dM3zN
z6(=SD`+&+VB359;jofbBq>g6bw02uBGK>1?u=52=F8d%kilfcS68(xt?(mPll`}U+
z?j7tFtz48QXtQ2=Fr@;qM5Xt6*e-r&GBMk~m#@WIuS}qlhC(1K)jQCxo}ti_xtHa#
zxD`IjZ-~Uk#>BUcIZQ{;dYZwCme8<#y6K$awySq#Sv&T1fuF_cwfsB9KP=IC|LVW0
z#9{ub*(^O}3ZA0!QEOw=VP7=cpHk41(_8PFaH;cs%%hB$bFyyVt$F3*393QQ;PpBi
zW2k{hq6^BHM-*P&o;@AHsBz74t1{$g!G&xH(n|UN`ADBb!}gK6sGy;0w9B=(E($rr
z_)S%V7L;<<6}LHt_L{}-TH~=>@mI);+_XEa{3?6nc86{0!izy8x}ks)%os3EGKtO^
zC(m`w?B6Lv=h*!<wIEza)T*Vl9=1~H5{(q>XX{Sw?V7((-!+u&<%*j`{6jp`TU>hZ
zLAPIzE=GwM_lkF@cUNS_2Zid}d$yi-L{2;yGPS#zV!f^1)~lO#xVa!_y=$4UbxqDY
zl4j(8h_}WJl|RF0x{c^W1>%ulg`V<Tj2SUbCb50+4WL0_tzH`nwezI$PU=O%2(7Yf
z?xf(m1P!wWIQFefv?!?Qm`tKS9ejX7vdSHRmb_Mv7g)6ee_Fz)z08Zyhh#A#X`s_R
z^TA=YrzSRNsKnf9Y)tIj%&}Daf}=$)gK<Aq-*R{I5lw2Kx4|0cpKlt!250R<&4Kry
zCE2ywZZO+y+q#MJ(*7#jP~H%oY6rsj2^Reh+$i=r$OxgNic#Yo*JX*6VIHE?@34%V
z;Je^h&?=pA$ssx+`;d?S<l|`O+V?#Np4a+m-vT7@zbqY*cIbW40*oqD!xavvvWkGy
zR98&~C~fF}=1opxT7WM6KPkIT^Cm$ciHdys9(i+)c&Spt(bHxveMC}!3q|4*<lRD4
zUpPEgZj26Q;vY9r-q%l~C0gUY!!Y8OOw}5|yK33<;g@d9Vo9G#0l)$?5lZ3Va5dci
z*Uuzz(RA*ahMo!_5sOz%6V;G&pjT`C$&LD7dbQa+MLVEJ*Ta#Q&cxhDfaVBTMa178
zl{Ae_06>Wn;Qv7_Y$iZ-FWkxj6Y99B-V3*^SHWQq2PbgU?nix5?sRMTbQpSaKEX!t
z8(HH-ycWV%-}Wy>SP=HyEd1mOtv`mqR-?jghBgz;<60Vj5I(KsNGM}rv_hUHg*Rdb
zC>6KXMr-UO3BAizFKYNqT6u1I-E_S4mrP}`S8Sq)-G!e?OV-edN{0mE+N({Jdde3#
zZ&eE}gR8%qhVu?khT$I?g(H0UeY(mE?RdftfyeQX7sE&yKbppS{{wIK-#~GvP+E+P
z#gM!5iNA9ii2LQ{pxnC-h7VHMf6@IUSf)DO0v`4;0Xtu&SpZ!1tSRsjVWWMAesTa^
zqD)Qd$`W`RGo>fMuKU0pPJ&xEsMAjn`tRX5t8PXo($HUGfmH`UF3e@bU+4=sdtDHf
z<qrVWQWcN>&5N{`On+$vxGj1RFN0+~f{%8><!+izKMZ-Wo|vP7X}hI{3C~}IC&Dd1
zDo+7xfp`QD<uVBWSw_LvCaBYeN+`cQX@e#4K+N^i9y|Xf;ZccTwf%tp;{uNW`TiTR
z${rm^>xGGB04wqqT6q^8J0%qGG^uN!0l>$XL5_YvI1l;9Sy2Q8JLnZ?u?1k1I|6Hy
zxC=!TI;y^BC<EPI+EsMwagZrV1Is4jA^PG6s7uq7Cy|0l;$gxfn0fgZEnxVy=QM0L
z`P249wP79c(pTvUGo^zOaOA>p4)Q;3Es6!mvxL0>?p2txiBgE<6{(X<hO+>@?Z)h3
z6(&Rh%Gd)hQXzb2ifY48e=0Xc2O~8Z;1nnI(=Nh&Ka*B0lTB(s;RCKR0c*DC6$zb7
z!7e~C7yeZKhz|8B;SHN;`L-lful3*X@xNfn4)p&GDv7#7%iXB@eo-$MIFi*u4ULy?
z{|V6Gy*g6}NaP-dY~d#Gj-U)7Eu_G}w{c}tU+9%;2KWtu&h2%;Hi9)g`w{x|bk>b)
zVeqj3azC4z1)~XFgT*w#sM^R&8Qg;UOXjdQ<2$inSwieYS@16W98zu7%{<svdf}wZ
zn|Tn+j49oGA_M<H<dx{$T+m?BA0m!E9#_rX-Nqjcj8k<nZ2I{b0U>vE(CL1}CupJl
zu&c@zl8&TuJP)JFC!@+uHZyZrL!$E8&lKC^<mQ%@U8&~#YwUQ~pMFzL$&YI8y;izi
zxZf#3=|?<|xH+ZJLv8sTD@Y(9Hfs`Iw+kNn4SS0wu5>jh4<6E#2R3x9m%3E*3|YKt
z;%hu8i$3-K$<(U?5C1!ZsWyU^abymDuU_QdSu40VXvga?@ILJG$}ZWCADp>m>i1Ns
zHVj}yGg|qRP@0eG3Qu(Luh0aOBP|((7$KD}0%iDOUYvSaI(@4BPsc@J@-X+73Lj%d
zdJi`jI%Y7|bp+q(crb%?YE`z^f!6Vd>@Bum=Ows#?;{$uJ5lK^3Fg{>uPw}1EnqKK
zBvw%HRofF)pcR29oII<rlyNIHwCdu~%kKpkdUdPCk`~9q%$bogp0OXXut4#58M?ql
zmh8R9EZN`oC&9*ZyIa`X9t|olYkf3Po9Ga;VWXPC#W%tjBfXX*JXOG9&KsJx<LutQ
zm$VkdTUJlCr!cYJ>hkYgX>)OAO=7u$xPYSPiQk;~=>ufGpwzAim=Z^$g0&|idc-c`
zi7o*NgxFx`n{gDzC7x)Y=mP<iD;17}DIzNneaB@B+CVmzl1?|aH+7F<god7dK=sei
z-zVDpRPe+;(Zg_?@8Tgk<Gs!KMv-yr9r8*|hVTp@Ty$R~RQ=9rMGDB()Ofq{nPGcq
zvk$ZC4n#8$XWk(gx)0d}Dl@v(Hy47<Zx-zHab>P(jQHlO-M{Cjg`=BL$m^RaUCHv`
zss=5!v%;lzv}00ss;HMb*PmEkf`{^t;Pus>eNju>(p28jx3dA0X$(U2y9eVk>-}w~
z`ipO+9is=?6#h!<$)5RsFZneM|CXknPgbVFYaRq=dtm~x8ZVL+RfEqX&A|4Vn&RJ!
z{x7QDKAh?Oj~~}jM<q=WMXXY(<7VfSo0Gd$LXlRS$lR=s#H`urAd|5o_vDm=6Nizz
z#H_MWjD_Kp<bE>QY&#`4V=Lx;?B@Jl&gc96UDx-YU6((+_ulK~dHZ-i9;v>odCXh-
z_e4)emTL){=bYeDm;C#*qqA-BA!`fJtheg5SDHi=kwYGTm>Dbg%=A)ITwQaI7uIGe
zH`Ie?Q;C=pfKK?4Y7%KgT_SItF^EX6Xpf{}S1aEdT+0pBO1^7rP*PjT3op!)awpgi
z_~E_<F)P2C1q223|MJCs3VswC6OzRk@H~BGd7BZM<PIf?U|bDZ5>!hgAtAVAb+Nly
znZe_S8}F0u2I5z?N!Jn4yXbxDo!qmk15%UcDe;KYN#{A%7QyH9kI}3($B!c`;sB9(
zlWgF{v*$0`l#f~0vYljc9$1>ySDe&t{{5uKX2-6F%}E_U8|LE8tdL=MW4*6`HR(7q
zpdkR=`X1G$htgryrf6xWD<Cnf^_7q_O{6h*uQTye7$c&AN*J%vWw$@~Ox0|1l-Ntt
zi0sB3jGn-W4}O~P8K!m(B$~}_s>eq-@6njHRwF>(T|oyVhz!8)MfeuSr6n^l0<D-c
zQe-mIvkVh}1?4!VODVtoNmw)Q{$nmP#>Swe;PHe%?>*1|uU!9tcHP0JQC_9+YQ97P
zavy>c9s_U%3fKVhAD83sKjFG<hZU}%k_hYK>jC-tVK!V_wIBNG_fo2nsR$JopTv6y
zj79rXpN#3pc>ge=tL?U-IQe(Y9rua=L+MO&G=rL4%%C6Nt)-UmJ23GFk=J0L)hDY}
zG7{iKq->vb5b~7PzFLiFkp7_hp0d3u<q9AYoZMRnWWwNjlb*QgIfJgskv7X=(t#TS
zD$Ikku>4tZE=uWk)@gS^Kr4`R>q81SWXTPR@*tsuUyzObXFO+mO+!LMM8*6^;(P<Z
z`*h0Npkfg$g~Ax?pcz24GtwqDuy5l`xBBo^e#YeoD}kH^rq5SCxx)`9iqpbc&(&tf
zhPJig-OZ@s@5TZ$!tlo(Iddva;4(IZwlZEeyim3z9NTF*Rmi=eS6lA?*Od~Rj0?ME
zt5&|+$J{RGo-mJeeNU`#yBMMd=oyhf3FM^eEmEff>XWF8H14(SP+WL9yiDB(7{uFl
za26~W+5YZQoi3ZEs<|8_*J63X$o&g%*y|;obGh~Qtjyr%)5pzK#lbOZ8eBAAp$Bqb
zme9!1cfcAo(ID!a0a7I7^4Y_ow3*e56YpnlJ|7RH*4I>G^U+mBzjD6*wTCrKut3az
z9KR77z2WVJH@D&WbbvxyLIKwRXvKjatmf0B$9j+%@TVy834(k-(b+l4RRUwfjl+!(
zjtGYpkwTXTV{ALrU6x?Wz*7IVfN=f7Zy(0lJkw8K#v5~tjE#as?t{^XDFI{nM{3Fz
zz|A-H04e!pC6gRV&T=vwV@*}xvK6l@omG9y!CUtyqA}?XE&{{Fj9Z7(oTyW2(c)0h
zP#d)9W>r`AWpQpTrdbth`X%~B;lpJ{i1SRVb&6mB(g)Kyc)3BJ@Fi&c<xsQ}HiP6Q
z()gi%=9DC&W=Cs58uA%>1`w?pImvimy8Wq0@mM;RXu(<7S-)__kNL2|T}_q)@MAs{
z!1Ud-n4&raIZKmdoluvElESlTNIfSFy&G-ubN7Vj*wSZ$1+AM>V^dIlDG+tVx~l??
zdv5y;cXdOY$6wX-LLzXmpz2Ws0(6CH6o5MsiRdvgpeaZrZvq4A)=hu`^{#^jS-N>K
za3mVBYZiUzz60vUl}e)9S&pSurq*Wh{Jewsm-qcOz-V!7Xjq)Ar4&}ix(<V^TV$ik
zTo6zrGcfe4aJ__$q@M@dwnF~C&>azBBV;+p=IW<gw80_&b1fVNPFU<jFu<aXvmcw@
zrE3~a-jbirx!@UmVR*j2Y=CO*8Q?eLI|a{THDK02Lp)^;$*i6Tmt9j<wjER$fyv-y
zK6Hjb*#dcAYzo}|m3<H_K!Kk@LOC`bj{{~}=3^66;B%whVqVYYhe>*GNcbML31u01
zstT}7@x}g<WtEO<;9oTcXl`auv_5j^{n{UZXp&uP-K_&a^HP&CUt8=t=J9+OfD;~c
z_}5rc>lV4fH};U&dK+FgXK0rB3v2`gz_u!_M@o=4M9{{o+mUqHeQEGiQwMS*=}Z9_
zCbdizW#;J28K{~Bc&E=ZPl;6_l9c<k?`M3t`8D__fEYPu>`blO){-XQ{KmQ1Z_aBR
zUh@DTG>s(VK=&zhUR0+VaXJj;Ns@#sodgYBg3++kUUJ8}XrUIuPZE-v87)S1I2lPd
z^rdE5_3fNP<5x15Cp9}8PL#IFYC|IH&=}9lQEAa;N(c2(Al1+hS@(dgs$1JCkfzbE
z^YxrIl6DU!d=G`XOQ#bZ4v0KhIyfG1w`3vSY1mH^nz8s%;*(b&#{CscfweNm%&lUh
z^#Ny{-IpPYo5LQXeG7S)*G+*M#v)`pEL(GjVT!FofE|)xNOFceq>+MZ#R0t_9clDR
z=R{wO=ZHc-zTUw`wX>ydh>58R`#NWEv+1#Qcj3@y&-m!7$pdu-jUK^~2gIcsQ;h#Z
z6jar=miYGqv+U($L_~HveIp4KH%VJuBn3%yN88SXU4vujVOseR-O-q1W`yuene!f6
zM0`wq^KK`;)YjJfucz#^t9yNJJ6%v#AaO{phpbHslt=m8P?2eN+ficE$pMjsmsv;b
z_ws*jmA%!zB~wt1ZETeKUmABl@Ns0t_FFFJSVYz3l_T!KnU^)*qXF@Lk7{!(=;OLc
zWO?$NBw~)oKvXNzb=Yf#t!KaxUc%n|?frNqueNrkfLmYvYop|pDX2e8^qrKQAG2-p
z)j#suOpO#MU6fIjWyo+u`VB>}va}5WiG(cnT>MeD!Rw?DVc#_z)!%(kf!sg*nH!Wb
z5MRPS^>ldAl4iZr!s-w6DFdpiy!MDq^<&=TxpguyFr%-o+T3>qiwnlfZz>}7I6ebt
z|8xf4c=o~u=9w)g{fnpuxT5s+VP(@V^8G$ue{Gdxa&$oBE`$tHHUQIF&T1^^+$jJa
z2%Z6Fu)0vYAm`%}+Z+W-gn`_aTLJFv!wr-`>^0nFW}QepH{9M>=#9(&`Wc6h39-mp
zX}(B(_tNgbdkxtd|I$|Q$fPVlwsbT>Pr(G8=yz{Hvia^dG8+y&`20)xm4r8#M%q2a
z0XYGhQ-N8T9C+9&yi1dug%g6Hdk^$%ih5xgknobb@}GbB$L?J=E+l%Y)xUj!NC+BQ
zvY*`MU?%glKWl7gutN-Kd`ezBFlz(V+wB2x{V6DP@F%=qsdSX7YkAw|ToLlNm1B%B
zd92%33Rjr?LOLvQ{bM!euJylaJ0{QIfeRm{F7vbLWDQS2pQZ<A(K=7+JI>Jh9*UIz
zD*H=a{vALYft0Mho4oXprI`=}>eAEK{*y6!O<1c}ua8tRkk>I2iz3#1a4pVQPcq$2
zODf=5N)h4>QbVCe)-|b9PE|mC^+v+>fH{NUS(S;Dv68*4jP%Io&2qSNKiy|kk0?%A
z{ZrZs1aQ%d<f(W46Hc0DFF`^cjvOyhEg1Tz<FC6^v*nn^fF2zOJqos{<C+<n?yd)S
zIv<=#{$uLNeV}24=t8EH9Dxv0dm*x&pVo~2Ox8}&fxd!1kd{OAqe^jpRUtBq31pny
zI#i}Z!xx4vE$QMDQA&b)8{L1>Y4+2b`IDyf7lj&UcB?0q!XA;Y0eKHuuJSjBz*=Zd
z76SE($VtX#V@tL`VYC)H>g8|Cv9fJxVi_b<V{d4UCeL38LU-P{zM|J}T~XFYzaKlS
zp|)DvgOvDz$Q;3@Xb>qNxyfeXY1z%wNs7?2*&qX{Q|3WNwVzAvXLMIxKDwmH@!i8J
zKfW6w9&6P&2EW#P=kG*66U%My&uf6Q)L<(vlK+&@&F#+sTR0vkqOoC#g_LZ1uMxa!
zaf*tW&o9~kbg2IC)}aEwp@m1yL$rF(xz6mY;P+o!O)1c;to45%=syw8{S(M&o+Nn#
zGt&y#_!6uY4$_#8oD6tlOgBxB<N#VbHw64$#GvVbhNsV^`l*ZVTF$3NJ`GtZon&~^
zpOVqNzQb)JjfIU59XWY5E<jgplKXDm(wJhqNVO3qN0HmT+YA-Qp>|1s4_Q;C2L$|V
zv-&$9Gu@=y7yVia*lpGggHhydxMrKYa-u(Kl;Lq{$w-G?V!&(}VO%n=i<t0FoH&~=
zi*r0<e%on4S&f_;g-xJjzd{;PZxN%q8}PjAPC=ei;^3ZUej?MtHp>d79S%BwT@{5*
z83d~qz8+}FrHmOMK&js-bl%r4naRC-6BZIYjqxNzOu<tz4M>G9Og5y<UP9_Xp|UH=
z3a5h#0|`Hi;qMs32IcLNX9k~d<-ZKR#wFRk9*Q=^$u&KFJk+(a7s`VP_}Ci1acn*}
zYwY}tT{v3pCI*fK6g~i5$juS7l}nODE8<`&K^W6%6nq{)2ZP(~WY4gANp(SCzV~O*
z_TjST!0c4np9VLpwHj-1A*A7PmnVMM)!&+Ix$)UuFErZM(CAC4a!qo31F{h=ZU>Ma
z9a+(En>k5$jrcJAb?g&Jzf)xk>JAM;BTUElZyFno55F{q4K8QfyC+?0$vp4x_}#)+
zIoc3+x}G4u&YQ6qP)`M$4vbWLGn~O!=+w%hN6Elc=_p(v7b!^7??$((dqC-?opXIL
z?xPB=U}0a3hlG-%I1vj}Ud|1|{fCy}`g4V*DIZfisWsso+rqBw<?bS7wsCb0_A<Pd
zEICVo4zLvZabC&{l_s%a3WPPb?#eu;EeaQjf~=#`CmD@0o$HAy@wV;oZC-Hw&&H<d
zfWnYSJ3U~*j1H;o5p87J6P{E~-r)q{37$iW6ERQT``;$TfOw$~ynZ}*{Xo^`gnrgm
zr|&@$(HNa0z9R|l;5kuT^$LB{qT>!Z8A1(R`92)9aZ{|IIP#=~d26X~>1NETb$!hh
zLM<O6TD-M4pSPYoc~ebs13Ceo3<^q#4;1PE!GpPr+(^ET%1Y3H@Kc$)qWU)xJ<f5=
zE$Nf$XY;>&lFMz+;l0nXT2fJo!i5_lA+lWjmFvOJpJizNxTh&i9VFaX+C-d;u6$na
zU>YgEK#BviQZ)+At<@TL_et|>c63ov3(#?X)>x}ar+2(}-G;@d-j7>+oF3;c5bMNO
z9t3MK50%0Pra`eBvT~M*rA?iH`m?1QV@M9=Cj+?^<J6Ek(4)7OQ+5(F110#;+1Sn#
zoM_s{u)?0?#by6P==~%62dv|L-S5r!YL!%zx10fl1)nGi-8t39bUA2Tv?C@2dX-Xr
z@UmNha_3Qz<ugQ*!dAGLiq2Ek`Czp79r<9Iw2as9$}hB}ZE0%u>Zy5;^N|FG)z`-2
z;$p5uuHSTXof4_o1C|ZoT)Ik(p^K8~la1id=V3@K3p#l{g!62KV#rjei9Ob~q3QXM
zg@r(pH<pHHYSy9WjzS5ChTU^7Fh;@6s$v}R=Y8mSZFZXs%I6Y47Gw(2UEM`NjM!do
zMa0QEAc4O4juePKHKhtt=j9?Qvg<fHyjfK&%vN`6fpCN>s2;8f+teRQBe_VZZ<|ZX
zLaT^z=Lx!QH@R>7gKLc()EDCQ0kTQSSfs}vT=7*_k*{ULe3--6BN(2#T~dUXom2S@
zoNiOI-w58}patO_<<~D<!->ll3rvcWwn>!kx_|WL1h95H0Q!saK2!D>(vW{g%s_oZ
z@{}UQZna@SMqqr4wVs%058nzXO;+1l%ZOfIJDZ+D6=BV^WC9(v4a#u^fRr)3#Zp|R
z#kt-K!^`$ht<CUO>dUGL)s{JB!-2-8e37h5`A{6OKk=|B!v>>!P;S+4Kz|xL2zmDw
zy#96YpJ$2(_z$eZy6XTz_i6A#dMw=H_yiat1SWm`N-=4Zhy@D6M%R}dg9WhkCD?Z7
zD#)xW!Ep2{N4yNz=6#r}38^Li+S_RhDt~C4&#n5xX8KcNLhO>g))gB41>rdIX8_mS
zN}e!O-D{DBg0CQSAypxV)W3v!fgL`Rz=Jms6g!-!`18A_CL=pn5n@}RQLr1}jJ6l{
zBr&fQqEbyIDcN{o4p^)X{;+jw9G=`cK=egH(LhGzJkWYM(%*%T6`0LwnYwaZ%gQ|J
zZj&#OC38THx?h!RD<JfCQxx-`)gkap5_3sv%1ThwrhuklPA8l@*Htal?;$GO+YU)X
z*#z;5bRX$tqcpn0U?E9#8ZkW{N5I#AZo27fv+7ias}2hL<)2&5GmRI<UA|ExA&$eV
zDU#EKak8un00;0W4G1MOg3_F}lCDYMDGC><&5B63WFHyk4=@-`MF$@WwBp#l*9I-4
z@evc}S<?D+!7h@0`OK|84yd$m`rbqA5OyJag>xJ}4pZ3mtF|8fSFNHC^8X^O{#VWZ
z2heo-PEBRBOx9Nc4C^`6gud{XXAnh%xXWh{I{5mKs6D|+3Ti}`n|ZXyI0I&ZHdOBc
zMmqlCX45jSGu<Ono>{HFVm_Gt;^F8sYZxE#&X%FJ(&wzw1aaPmtE1)!dT;+klc?Np
z)+WYA-{aecit%%tv0qx5Lc?B*eY`J2-nv;PFX=B5KWVHfw?6^1;`v8<_kTHKHRRB6
zcG3L#8}a@JuTAt~_uo$sjrrMcGX2`mXZAk`Tlf3A|0Cykku}A|qdY-_DG`zI*Ud(|
z<ZLk~JznmNE$m}dPPX=S->>nIqevl~pNE%!ymJ5Vr){}zqf1n@y$2&hur%q7YP-}&
z6*B=lEogdfc-8hC#H)#CRg*)QAoRE!@)cS8Qu~2Pw$E#8@v`h8E;v-@t+cMdx4^3l
zkBvyKeDNZ0Z@RIY%jK==Dy@~a=dIws9aU`MyDyyiaiU?jk8L7XxT~*n9=U^g>&y6u
zwBon=7xq7M$p13`Q1A5kedn6X|M9uz(dwwksZ2_vR_o|TDt)zhY+f2%)p_H_mLs#a
z&r~Di4bg|q=Y#K$E-d7p8(!8rAr^POZS=7%a9OW6+^iO#4KCQdktn6NY7<!d^@^9n
zh`MFNFxFM%?dGTgJ=^n>?Z#ylq+<h7#pte&O|d2(eTa+CnZwqGK3A;s%dpX*zupgM
zHxFO;&olthyJGy%<n}#n-}_Gnp(ju^VBkYPq^cdf&CziE`-;<p%eySh|9hG8;d#U&
zZ=?E~Mjzjpvx%D6Vl`xMJ?K-drQ=CWGP~*yWO8B2!&son(45mrS&x}nP0nW9-t^_z
zChQuvv_P0IP<f{<@e!BrA8dM&%-dBK^}zOO2xx#_LQYAIPIe&Q`^&BkRkYD_eri?L
z%|~lGS}$Djkhf?Zom%NK!@I9?`~D0-VXHrcbAQqw`@vPh^{knZo|CqUo8PQc-TeJO
zCVV`w6js)nTBfSapf$H%H5%<d=Xum)7>Q?%qt1^oEKYthG}ChG=oK~HULYW7G|M3S
zI1djGVnxZPPq8K`8-rs*qEB5r50hOig?;S@2~`)Zu6ixE3Gq0Du(-y2s{GU1J081(
zeI(E?la(H{_rb{IMEOH}*W0im|A%=FfBS^3e3yG1-lP1#;0Cf6SrS%XS$zq-8Y*EQ
zm&YIX`!I)m*3;!^d%CH)IguCddm&R;{fZjouVr&MaDQ8C&Y2;Gr<aF+NPg5XeL~JT
zfe*d05A<_EH}5`hOZq9Ry}*Sgwj_L5F^K<2U2ayOpVP7P3;SLsN6-PwBIMekdf%)0
zSE8_6#r^c=%XVG}W0ENw{?1e9(d`7c|26kObhoNQZvV51gOZyha0<hN&~4>-xm#Gl
zn2qKQouG+v4C#nuxi#-^S=n1Dnun?m*XDk(GxzQdj@^B35r3pqW4T|X<%Swm91s>`
zd|A(j=*4E8g}m~b*<0BodUgp#)$eBtd~KUnR+_wA@S!20c-<y_U*GLL8<^W(n-A>|
zds_+@d|U&nR}&Nlweca5V9Op#im9z1sa>36X|Kq^AepYe&BHNkc+M{VgEsHvy&-h3
zb%i9*Wp}UPYl4;cp0G(HKvRsIs#z^5ssJktI<!+|G3ffTkg5p}xlY0e`YH&$Kj{5(
zrUr-E;D9Utyh@4$H0y-8T3|5kd>)3?g|bFy7T58?`JaS4|4>)_@)$I4ml<GvH(~rR
z<o3M)=K3`x7Du#j(ht9B>&g)t-oeM=MKnE&uHv5G7yq6-&Ni2Qxn8*M_<j97=QZw=
z+uy7vCl@HTMao!>%(e#li%}XfG#lxj`03NmgCmO~<>Q1c;m<G4NZmiLG~J)Mb*-|-
zk@39u$R+H`SXLsBBRr)hk5g^(u9<0WQs@A}XK{38xSm~c9p)KfzPHLFvU;*TZvCzN
zOi5(>s!c=nYis(0?gH*P+Lidq@S9m3aa!*0X4eR+sZ|*OLIwy6Zmqr<Q*GKS{f7JL
z3x_xD1@%hKO`K~g5grO<y-e*QM-=kj95%YzTw-SCU;BFBoxmXuFD~VRuI1--s>@OT
z@4W81RglxJw`_YpyoL;YO68Qrg8By#fGad3(1QY8@ETkM(?aNBcF1A8<VVF^??h&t
z$E7C1i{=tTV&2ERZGb@94oqpYR9lxvmO%RvI^5I|=WlefTQ=tcLU#R`HH-d1UuVYd
zch)X)nCCSMq<6|LV-L+4D^Lp`4W>6=s*bny9$w5pii^dYm%`utch@wQ&wy%c((EmK
zszP^ID5lEFf<vOI2_VAMS?V+3E-YxqF5}%1+2n@C21`nnvsL;5<<c$J+$Xco(dfE{
zs-miJ{l1-yhL`z!U`ttGFgRGXDU|xT2`Ra;qR=~xXT)0y7_d!26Ekz)mSGRKy%=JK
zN}4UaG=JFrHsacFNK=VDRK}D2dg4fcIo>c?P4)7#x*{B$$11?%P_57<1FrR&nSy+v
zu<=+mL1BcbD331%IL8FX2ggYHJxzKA`7t*a544U_N4C2;wz9WM`ZO!<x0sln*I@tO
zJy@su4K4{YTK=6P@uXxMM8)Jk57#3%7O?GmTh_lwUc}=ODov7FM)$06^iuzZ*7@d}
zWjiXqJnD)(kS#p<jx&5$P5BiZ?L?qPz<){**Tg&yLcd4T=F8;Hr^ajxwxK8LnlPJ4
z{y4m$=h2>>4}`N}_^Fc<RVA0ovaIf9yn>5%t$|(EjK?&&U30Mx)MKX}ke@cZ=b?F(
zP3``MhN<)yDT2$b&&L>lA<RF81)bP2TJc%(VdAA<X&(C61ta&z8h6R<y$1Qk!QdbT
zDrtBEZN6?Hx`;n6@*ET|)R#6<E{^=HtOnue_V?JQef!SD#~J5V%obMUH`bcZRAZY~
z`gS%pya4<3k~NiYmtXt@-29`+sgeS8pfbM_uRrf8x5PgGa4GOa?D|{xvH^b`+Ld-?
zf8*kQY+NPC8M#4~;crc!ja*--tM@W1!j_+hy&*t$-K%dVRGS=W+<+i-d-P+)Eyz}n
zg12V>5P<O@kn1J^SFPpTfw#Z;yI8PaZ*Fl}PdIwVpy80lKiO;S-3tgoAIQ^4j-_)3
zPGuprScAsw%2{+!P1WRy`08+U^m3NIk6j8S9=D$}mhYQC)O7<FO)!5NaAJR?vq|^t
z(mKVT<aTazNfA!sFWcDga>SgvFd=*4>50GAoM@Im90g*%{vE2)rw*BBetsTtp+=Jf
zn0;K2+N*`9u)?kDl-DN$CW1f{&+o&D7;MaXUz;YMp&my@A6;7aG{C=K$IAPJ)w$;`
z=GO;b8=95xxO_?dA0y!69$1TEXO+#!sU$=V&d#T#P+yD@ddB(VCS8X{qvEyNzEAjT
zKhCbKB&?fKxvet%Zn*6=!;@AMUk)OJUwi>t&469O6*<K;_>_JH#8#<mrqe?9ta98Y
zTYe&}xx2pUR&r$v7VR?Dvv}tjcee1i!mBoR(QgaS)$G<E+h>NQc(N{iyxH(#8yHyv
ztB?hxV50l<V9+r@5%_(>>}r5Tuq0^0qt!23^E9{Ln-fjpp0hAH*9<#kv$9&(oL_8Q
zgteT=oI%WcagL#9)u!NMj%s8RGGi;N%v5322aee?jEX%J#Tq}#=6+jY=+)p|jce}d
zKurWLW$Qt^?$Ae<e;Qjd9gdpFvHbFnb?X6YSzff6$&VV#uK|fZIO7_Q{55BAxy`P~
ztk=ICH-)?-Tk{2GYra6z(20!<J(kXY-Q4u6UR<n=htB2G8RrhE|Fg0-a}TCDMxx{h
z=rE;Aj_aMX_bA554nW1#Seq5!^X*PGk6nO5P1I=Rv*Aa1Lmm@<Em09(BRtM{$U`fo
z-Kz9Ae{{g<+wd7c1@Sl7t_{^~&jEixEfPrN702SpSW~g4NcZ0C8=+Y()>s`!u&a<9
z?e5zm^;rL;?rfynenKixB~ZNj4<+?KUFFZPBn+cKjFKOl;d1WF9aTeoy2h(wQ+7ck
zw;+wqO2X^{7}oEH8A{hT8jJ=Or;e#3blg61v6bF<Uo5VtJt`sYiOD#;-R5ek76t^f
zWO1teI57yWt{^JwkXTH1$>zpUvBL?%)W2$(6r+Sgq|*|n!E$oz$I5$6uvA5`Fgy56
zrtfq52oN&%JY%8vh09ZY*%^9zp?>>$*sQ5)BQR3yy}?0B22adnnn^_hknSNxq4O3J
zzHlYo!A(g1mUI|GP!$*3hDpwq*p+QWFEX6?XyO&iC_yKz&@CO5A3C}B@~x(a7{zXK
z*r~xqMD*RbilL~1t-dNv6!?N`N{~-n>wo`cMV18tueQMsdMzgc!9PzCT(eJv_(pM!
zqdJ7n`NmlkA9)svF9YC}TQNCKHVX96a?w9PPYJKnSy<Vc+?ZL*#jf_t?s{Xe9PR`3
zZL$?>6PUc2Fr6|@MhezL`f{{t7_$LT6I91i$sLB0B2j-AGBrq7^?t-_{fIRIa$~}U
zRQPGtaGQt!RVGUg=hl1iHWd1;KcuZ*0`U4jB@BZWQgquLtlT+a@Lx6K1P3(n9Nu-h
zgTva@hESY<$_Rqm>_BtjXuZ`&5<zGbVPSyxa&+o&bPYUaQL=1aH}tX6KkTF$(Ha24
zlnY=gS3<}E0zGGyg>75e<S9CZZaV)IkT5ikT~Sh;wgOPZ%~pwA5Ym($QO|V730h4-
zg+**6>F+GCOKThvvZP*6T)XU+7A=zy-Ro(1QR-8)ftImc3hRbL2wTN=8lWIZHwO;s
z7v&=sp0ZoTGgg<z_w{s8O@yefz?dE{qFk_;`M@Hsi=)y&!N8BmmY!TuX)6h?Pe-H0
zCVmnCVMUM0!~5AjcB(t2Z%N3<P@Vce?WJ2O?Ln}yw!OsOj-YiC>LUzP-eYV!K!OWe
zc12L@9<`1!J)dyHnjI?&3Ldm$!wT$@#dJh;w1drn*~8HMAMZ~d2gn&s;5QzYIJE*^
zQ-VW?Jb{Sn<RMxH=tYzrVaCSFKbHx5VFvKD>8DKv0fS(eh_48fB(J1L#UJ&KtF^FY
z>$mAhx_AvC>+Q1pQ=`t*V?3MG)<#YeL7LXSWld-FJxumk`4D+cY0^`o2Yn>SuRsN^
z65IJ@(VW?7r`=90>GnCcN>g&}nE<u}!u%xFPXpm?ce)UjW(*5keoZ>@gc##Jz&vrK
zru|8KjUON#8&E^mz_q{^w6P>V729`mw^D$n#144?@ur8CzDENY1`*CHA6YUT%N(g$
z+BVsxADYD2QtR%_s-1oL1;+;H&K6nPrvVLl%==O`RTz1y98@D%6TX19K(|MrKVL5T
zSB-0c;r0soVw`?re+P}LFKo(SdVbp^oU_S5Yznevzb5$$fx6;hiIBK;(U~<QOm;XS
zI@lt)ms>vhS@XcMKvJK-PJRFs5w6T(mhO8Zfb!0{#edZveRmtF>Gb3OmIs@27tGWm
zQ{Z6c+_a0QA*EzH*<u?LeuPj`uQR@#K|47rZ3g9Dv}2qQmbSDh+9>#<q?La+YB2@A
zjS?Wa+`_T0?d{*xixZr2IJ1=@nCJ^oUqPw%baGfT`wB6teZ~BL)lLD#q#59@z`REZ
z5el6g85K&BTPRLTw<d|q`ZcwXfq+zuY4-qqiP-<jY5zTc{zmA5=v0YtVX@PoPxfaK
zXm)6R;LSRp;FPkSKI15yD_yP#jeb%G8XvO`J49pyz&sdqN7SDhgaGUXq)0)ayB45|
zJ1X&EJ%Rk!%3k7gct)T)8*Mb1@~nK;=kMGNvf@~L<hEn?F1{{>(O3eIj7z-utEXec
zz*(i^q`>?Y3I40wKnX&j@QX06<>ja5=H^2G%%Y<7pt#J;^vTM?*iZKh&r}t<Vh`lI
zhTb19e*f&i?Y*Ti4hz~31Rval;C2@YS8^OQ1+X-gA>;^dlK_l8fUN+t)_L`xzY<%{
z4^>EyhRd8b4Umpb**gYzjs*chE9cs<u}=&BG;Lyx%K+U7acN|M5xblW{y&9udYw{@
zn5o+GMmpM*x;#PI1Y}-G2dK~!zT3#O<Xtu((C)khs8E;5+Abjug*FfCp`x?Upit@7
z+3cu#)F^8%X{m-#UHZ)~zc<Y4l^AiRn>=kkt4ndJO=Mt{k3y5c5*t7>^0OrPXxjmZ
zAR`0QceNFx((cbPKHNIE7XtV&>A^X6&|wL$U`njfiFV6S{D7-JaU*sLW#AbvyySq=
z%e_J<_x}S)$M`&VS5rQaPAhiRN)fIS-;8BKDys>TtcVm*k9Mw7!DupR7gg0?(6(`i
zbWv#NaX55{i6o0Q0GJpBa>Xyl(KEW1n<TPldd1VqD%`F|*#Mb+AC}DDO%6kjXLj-S
zjwXDoz(P$xwGlAym1qNc14*P1lc_Sq73M$0*R<b=E}cd5?=V`8zj_TJ8Bx6+omU)3
zyY3d``xN|qFn?pnao9OP@}ZQ+C@unNM#+jWRZIgkV5cRp3=6$ZHn<v#;=R(GZewlf
zj*I~3oB8O)6sEJtOljyt_o$7F%WE1jufO7-w)YR${pm)>oldV|=AQ7Oy*Y~QnliBx
zlnFywX-K;5D?Z@t??S%U5l}J|c!I$3yPm1;Ch5U=g797KRM_&5)_uX<g~(3ew^<wK
z>BY#77&|r^bGK@g#`JhH8yOz--HmEu<T=LER_Tu#?=ceZ90(}A>ejwuJtKD`GfK>W
z^<$83DjOAs5?tpBOP@)Qn2HXvq_{H@@nT||F(?nEk^DqjM$Ab03DS8<ccqZLKFp_p
zxA*BFjqah@>fSN@Q_{)NBDRM60PrQklc379>J7^8Me@t4e%{U(64WaUw?+0lbYQBt
z@8>zTZNfItJQ^0Jb`rJ(;#L|tKEBN#yTSa7ZrJKit6d*UimK6p;a+I#c^OCVyvNZl
z+&8DzIg8-p8*(4jpxwFL(u4sdeOjz39X>e_y(v0S(*^30mJ8k3VpEsVgH1LK;plTk
zBFwfqpIbM}ENX0qcz&H)ofEm5?!gCks$&Fh;s*IO!2453)SQX|Pd!K4B{9F1yg-8|
zs&qm3rAD&YabvbQJ#E&Y5Rf-InGIP*k09QDUo<h=;9pd(>l%CYebMn_{h%+#K#CpZ
zZYKnC4A)S05Be(oG}aLr?rXfG5h#O`g|M!j4o97y=3kio3MIe|p;Z4I*P@F#p2MP%
zis1+2iw`<pN1!h<Ztu}p-XK3nZm;0$lEVn&ol`44s5E3FGG)!J3;Bswn6&dGyP>wt
z0SZ)Rr)sw}<oR6CHvNPjGKJHL7K@BPw@!T!p4a;MhaD!AhwC?dmSScT*|Yj;@O2;x
zCQl{8x3i{x2jsguN#TSXCu2x1>FnXz0jfVtZ8(RgUL?535+IE+VFoK1%wyHIsSyr%
zQCU6KU@=u;DlDRiYdz16%oH>u-xKO|<j&__0199$2>6R{V-y%EzXPL290oEnU|{zy
zOIvYK&;ry=`C3-+L|crmxx<dgC$&LnVgkz8MM`eJS+Z~Rder#!+@Kf3RvVZ61EXfq
z38_z@oYM`@rN;H^{sA6&0~nf2+^#@_&z~+SjHN}O)ZWwsUYDZJcums43NzuG`z6C{
z)o!Rr*Dj@2KV=!Sfln;&wpl@cOBGC<c>KA<e3<0@YyV?EV$vDux5)x}1CW~$PQk{=
zAmfo-W3j~q0Dj;&?NdzxB!Yg9H3~L!D>aj;^C+Qzti*1JX-b>qx;Rw}<`BE!*+F_3
z9hZs^E#pSl5HRfb7$(B8^~oz~%k6|?z&T!EO{HKAKx$pY-^IGtpWKZ3uTeH&fD-%F
z!a?LK^~_J!?=*5Hr~5Pml!TR*NBin@N;E-_ST%8)kwGwkoP?e1FHrGP?|TN0(VXLn
z|4u~I5W`YfQ*UX;lf;<gFQuSRqTXSrpBWJqXi3%$D=|?1$)N0jV%(&<obS(2XV4lM
z)~KvDtr6y#M>DIr0bJ}YRT&8BH)C*m-?u-Wgb2<rUdA68QI{C1Hj9Dn&VnkzX90kw
zue6s~LOFu|EX-CFf=IYH*0xLGF=&N#*h_vANW4JzK<<Xf>=JbVP;-kBP`x{w@3AUg
zV{Z^>b6m^TvN;2vGVGHRwK>|v$j(>r`y+sC=6TQjKhmQzs`8POw(1>U<KU15Xqfv+
zs~!r-8^aA$&us3LftpcC$b2D>R)^;DF_*C119`<9T8zy@K)dxa<+W(Ys?W_k&cp0B
zY_UPLdjmKZZvU!Prv0miM<_Na%l=hcJpwvDZ@?*ep<-j`w)6V(Fk-L3SA1CNvncA%
zQs5t9Df&!D>DWciav+Wk2RygJVpQNj6qrJ-AZ7wFf()x1-QviOAV4juG-RVWHL<vw
zFkc-kXvPWVs5)$e7aE@~s>Qc}g<4RiB!Kc_y9)rDtZ~pj@9(5&hb6#R(z^w#taK(;
zxIV50up+@af6?;jHa?K#k|KOJ&E~chSJYLXl(e?W9x7YwUI$kP&Y{08wq9tdyiNWI
zXn=le49b^hbOA0*s=EMw(>^fBa#~ppM67{>1q{*SAS`R!814jUw0B8|Wiis5e{hj(
z+T9Y1QM%U2LyUf{8RPFIzS&G8Vf^N==f;*c0fk(e&gWZyYg7ADS{`M41)5yU81`bc
zf_8JL${0L#g9T_gr6zpfL-{N?@}IW<h`aL>j1_*s`sMW4z;%EnJPX~C^ay<l4whR!
zl)?mySzxxEwR>i0POrenfZk|qA>ox*&B-2w=i4^rqcbP?-D8afF+M8?FNHqbsXo)Y
z2p!G=b+n(Jfqn)OI;1at37QSr)UJDF)%=7}mQnpYp)NuY7uRAB<_3*kZ&<6OIq2(s
zHR-gnl>U{K)q5NcTE+W-<~tb(1yd<IR3;D#aOnaW39?|i0}jL5t*{r<xeGa_Sqvj!
z%(`Lq6GX#Km9fO4u~pErxP7*5|A>P<wJ$dI29QOxNq+R1Te-YYV?#rv0!|!l7#|5r
z>JJkf=@NdLB@-?uLmolW=*ILXABg@ZrSSQWbzr2NJC-JR`Xcw#Q1qhi3~LuN_%VcY
z9f`JXY#6nc!!|-sR$QMK#=DMn7XB@JT@|QC-f3(v!K5V^68YVjt%|@<V~Vg}4XR~3
zX-b_aJ0__LAE&*NMp|syoX-u6pNC`K-#58=*>4ZWU>!J3n-g)dSJMaItLOb!0Z{!3
z>O5qLJ7OYKHUQzI<)WVXWqCZ1)B?U4+h)}OdB@f(_Hh#S<miyjNmEmo0?oQ^)dNgo
z3HVA$nRp4YIZSm#q8z<fO$~1@ZDEboQ=|Iqkk4jq-Pf&#fTQpYIAmJ@u7`9~ZcMr<
zrKKUKo`KxeR2(f}rIu_OaWWwmP3d<{Mv5$Rr&xx>&{y^jenS0{=`IRAl+D`OTMLoh
zh6p4Vf!xTuBe(PMoZZFZteDk{Y{{%Pm;j>xuOJ<7CdrZYuk~g^L4e*rMZV2vkO4&>
zs@)ge3YMR=SCS*5b-{qx%8Ri@ab4Xa<Fx|$UsQ0mxm8?MT#cTb1yO;xi;?`h&N(Ui
z)qS;Vq^n9QGMvUmoE@ZNxPUYfpakv1ct&j$Z!kbB%@x_Q3F+Kx$u)t;Eg~3N2A$nJ
z6OK5lcdqE7KXzgMQKB$R*Li>T&P~S+S(|}b;ZHbE`Q9y+Xtcw*0DK4?oASWTO`e-*
z$81(PDSV(ffmytVS9I=$kv$UrU8ZjZaI~1e(hrC~+{8H!KVmM-mp<0`K}wNTE33(2
zkOLCGmj1Jhog5}0_ds{@<_QH5zm;kTvy699{5*Cpr!$fI*$QWB&!gU2w<_%GnlsfF
z4g7<YpPM|t<G#{XZ~qM18}$wvV4u{K%mh86^GPUP(jyyJ);sMcYIev%QIh^d2MzgY
zMX)6Gu7myMYx#e_{~Tlhg8!^KEBwB<A5f0%jl=WQvZJ2nRY$%YeX4O^@w2kj$su9T
zK=x2b;i`*5yZY}Xm<~oI4_J}6DSn3TixBC}vfR?jkGw~P2Ori#V}2Zlrq*6-&AGXc
z!}y4O4gS3oE%((*gxCXWGX7dx?!uZX<!Jzh@TtWOs!2*C>aK%{ApX0alajGyCIWPN
zuY(s#b+CVg&6jeq%{HlJGfp;)VXI;@6g|TXXJpsG<qZw-eiSsN{5W{wxWlxUlq@!p
z<48D&Tn4QO$!t~*-yp$+nAy(S#N0tuT!sp0&=}jcIVU|@9<R}nU`W_WIz9%NmBf4I
z&_iyUdEq`>pFbm}U;fs<?M41=WD9E@c+XalgtuzG;%yoD1dhEzHNx9a<SMC7jjCa8
zn{xD(rH?phP0d6p_q`iJZHA60fvLxAa9ja=zyrmmoj`zvzsZ_&KQz>y7<vMs%nM(q
zXe752SW_h!hTFV`+ygoX45G4<vB>>I$Trr=WE-n1%M^h$;&ZtWk-kr2-I!iF*JdoO
z2Lb91;uyPdYxPuZOY4zd=P%4)VLa@-q;f2EF={fX$J<~!+2Q+j(qfuI7f>I#1>*@J
zYuEK#Wz+op{8S2OXlP7EgQNsJ4o@)X+R)0}MwI@XvT@(3jGe(3@BKJ>LHE$Q<4%Fn
z=`KtLe1}8iV-gCYNKJZJ+f)a_$82nyX>6o1v6Joez4TpmY}E+@u4;1D*j)N;`D5Hl
zfn7YKva&U6MgNNjb_139z159&gU1@9ND0Vwp~D2_etQ{MK{f;W=U=rxsft{zMyjbJ
zc|pZOcv=Bce;Ld{^X$i*%z4l~<W3&xJjVee)Itdl@H5Mr@2w(s1VG%C^AvUibkFSl
zBW6xOfp@&8<)eFoh`WE~9EV>7oEiNfo&vlzzb#GxT>kbk(e%G+wj=ALtPBTlA$d13
zHxN+Kk=$s+&MwvAQQGpN4xl_XXe$%Kwi9y#M<cE>N3E$b0i*Sn%Z?bI5!%80S-?L#
zVp)$sScW`^ORvnE{H*@%Z9D!qAl3x1LsDQF1QKrWOn)F6U$T>Fkdp$Yc~IMN#@nPZ
zsf=}oYy=&-otW?y#fd6v*L{A<vJSE54>yx4NnOWnr<dS(Q@{c9AkXaOH`%HV(0ck+
zgw(H!$Le4VHW!4P9<+3_#0SYWVN*7dj!I2jA%6jD1BAQ)-2pJvo2*Jtk&&C*vy#x^
zs6$o+4YzvY&AG0^{xp(r^p%jC2c^d8xXKw=Ew0HRc~qR8l3cGwKGjT9?8*^-j%sxe
z)KP8L5%f8uGdjL_?(4j$d>HL$=+QR1o#*<rVT2Kfy4Nh`<z0!qxi96bSL2{{QKn(c
zgIOc9^A8Tt|5S(ipqG-CZn(P2OmPk}lWu)8;VA`396-2d1qF(V?cS*X1@}{F>TQQJ
zH4uu;@hL3MdN3Yt!)fN^#;w<v{rVagyZt~HGiOWM+jY|b2Qmyur2m_g=D4Y}=Es&S
zB2^pZ@?AZTaOiW-4kil_2A}OffSO%Wy6W^2EA{Bnw?*4LY0N##O{m2aVzG|h#W(l0
zq!`v>uO@qijo)_os@jSHkAbT;_Q)^IG&eFTW^UzVFfij^oh7X)<p5q81m*fOl$8nF
zh=tQ`1New*8S%jv0ZT|K2(PqJ)icr$fnATnZgo@ldt9js`fz-m%E#(|zKPtp_^Mw!
z%*h-&EJ^Az2AqyL+o4c4MpL0q1#vI>+se?o&*+8BCq!R&pt2SZ_ZhBw`E+Ed&-Gnc
z#5`fX-jvbOn15LO@qww^W!Oiu3Z^UlPx1NZobk90TLW3PM#gduH;?32LHrr-)s4`e
zZ3BD=9fY)7p=k`Uy-VzvSKA<6%cCm@NG(vkxLkiDOF6r6L*<er00;VpYVhgg<HpPK
z@8%5LQpw@4aTeQn&uEkwc4DB-kp$;hw-PS3H4a;4!%u@D2;$8ZuhD2vciAQLC8a&8
zAraRyH}_J|NN-H>o6i5S9LSHzo~49ET*(mfF4bEs?7J6cnsO?CS6QBVm$_Hj)dz>S
z<%#a^x<8n7cu&%C_+QnE-AAQng0WOERLhqfk0Wan<?U!)fRzU3u?3UH-?oS2;9WM8
zOVkuBRLf5!yg`n)*-I;Yn+90P3d6_XAZdswPa#TxztQ$Zl{SBevSbwnxiQGk)yRQU
zDeHbu@lmT)|Lw%z+O8+o|GLpZKA`bM9oRaYbny<I0{xhy+PF|i%TkzD*(TGKn_)Wj
zWkL(%KISoGx@r%x1E%F%pIP+&-F-w_=!>RQ=bZC;{k0wr7iQ*u{qpFk2CzloN6^Gc
zQhPxoxT6|aa=Y!{BVe73yOEm{Ua!(RF}jY^nO25ZC44r)2(p(=pwuCC43;J`0E*XF
zK?P1_j7TP#JuZrmVOxm$zt!5;y#$q?k`pzSM?uF4e1nDuj;jZZz=jAYb!#RSYsYTZ
z=zt~N+S;O5@OXT7dswrWm0C}TunP3EIG9Hlqctr~b}ZoSB+jursN#ynjTxWxe}PSV
zt<94EcW)SAKGA~>*gFA%Ry5=@7dR+pUZ^M8L2w|9VEAHWzHDqc8`kNxAIc0CI)-`-
z{#_ic1z0zgiy5S&q10KM{9!cKH^^iFzxXK;k3o5WBr5jd1;5F>ZMqFD+E1R8o4@T@
zck%fC2ft{T?gk4EVvKJGAo;7d{YpA=>V-yUo0X)bt?fr;)e_8@c$kja_Ib5bO1?8J
zq=}FBi;$W{hP`)a&;{QvV}ol_z2762ZaX-a<;H>rK2H6Yb;_7<Zd+a{7M<TxKYJ@7
z^HEr%eqsHyy6~|^ZbTlqyz$I}nAQBs$3Y%imC4E3bw@t%f&x8vv@)1po>rL#_J=f}
zBuFUaEq1pdni(aAwf+=cVxo}yiFc}yC*<ML3#UU9!^X?=cLj$$IA(Iq&DF=}yAzkU
z2K_gVul$ibH6o5XIRd=M@93>LRdawCs+LF)(YiH}+pst7vWt1;rGc|{`44NcvgXm>
zb<RXq24Jwh`Gv)Q>JOec@QxCVkNc(-3?aXQ*H9!ra9v_(2Pl1`phK25!v1Yx;Ho0X
z!2~X{Lv|}CjS-J@dDbGe%}&@3(b`p75;22Uc>_;yY7z4F<_ZzX%%c@9CbI@BY0KG&
zQ$y4RhU3X0?s=GW=)XAse|tU-=1RZPJ_j9C-X#Zn26x`#<O;R+0d?ppN4i~AIygto
zQB8J)PWYCY!fd85=O_xlUuKY3%%j9@cMsyoI6_YJJ>u1DH6(=sIT!{FfGmHin5Cxp
z;RY4^J+T0&STptOXM&82E;Qr>j4YvGr0vl1722F#!h<hV<w9N=pIFqHkM1tVug@>U
z^V5I^!|N+W7oUN{GYbbGatC`6A{k(S9sB{t(M9T;?0}j=Z6YRh1|5`qstK+qlG%1!
zX{GNmGj_bxx|!TbEVnWD$)yh`;;O@a^lkNG8gpGD@m5d&y7vnH252YE2r*kPCA|Gt
z?O9AJfuYpvXY2DBeo~A4WPstGnA0!WEt$S;JqOpGlQmx*t`v7?mhzySPR^}&wOe4p
zm6JHGb?cJE^U0;kR~pMr<v2UHG<r6IZ44icnv6LyW;JIKe2TM#o5Q0{bF7Npxn_O#
zfGOMTaD@4?mYr%SETWEvH!bAOaxYCM`mSYN|LA}Ydyyh~Drf83AfQXMR3nRNR%V+7
zP};3AJx-Q^!E8I%KS&l+_oari8~s@ht_Z?jJJaM;g~_T6$l_)OnyU5}wng;F@W2f!
z6HMwd>a*(al?@K0`1<Vf@!7SdZsVS$#I3HxQrJ|B3ibn#fQwKaOlS|<Mju=9r|tOc
zqygd(p;lz4-YPW<(96-`x^t{e^A1O;vt0AY#>#4}u?Y+C?bgvP+yUU&F=(;VX;0(u
zrx!)8BM&~PLyt;fqXcNLj8z6W6*u?FHD^K2L#M!IJfzQiP<WL8$n_<vBVn1U9yAz*
zJJ`x9<h>7^<-RMsQZbX?jj@w^w>3Ot+{4xWapf1-G8X{rFknqyD!c_b+91F|B^YCG
zX{0R~MS4rz=3^vH9XzXHdOQX-vZyc-#^q#Cj2waqf_`1JUjXVxDQ*~Y>uTE}J!|J$
zYgAPRB&a+D;u{w49@fn?*#gdycr~&!OM<I!Eeiw09LVG|RB%!6txk6=W;Jh3YpyR3
zt!{i)&m+2?nO_RDi1>7O)`0OrufW?M%PGPCE%gsLqigxwo1fH`rvQAX6geea1T>9Z
z6p0^g!uO)2k@bjJ;L*fM(1dQrdw}jiO2ZY6GzYl+N0PB5Co}3W&1z=BLc}3i2wP!j
zNl)5R&wWA^N_)njDzl~?SA$)-IjELk`ky)j`8q{%Ei|2Z3=44Oa!LH!?ZD^(`CMhO
z!ljHDB)a%Cm5m-tRhZQ&t_&+K)MLQ_czyNb&nm+a2aLepi0s|aSlH{vl)9zj8Jnn|
zI7=fh)Kp)tKKL>Cf#22BkJ1g!gxt?Fxo73ozyBWlyM2eu-?G1Zy#Kd#R_jz|NCvN|
zoLC@xs;pMH3HmT+#}tk<)xf`M28>pXph1K<I?&L6kby~eItWy);!S>fmM`q_8n!mu
zHN||&YAA{G@AVVDXv#l*6+|c{|1&p(!zwK`ptD8+0yaIcEfaHS&z^LvoC$c30f#Dp
zq79Elw<27D^s!>g^8p6l&HYTFs`o61=3p<>3_Pg%w2>NZSgd&|@tt4gFv3d>lvAKX
zC9P!;PPReGh$d{CL!(lcfcFo<<TQGP-{O^rR$^yjYe|+;*W603qj+h+-{M{66W%zs
znWS|n|Lb`sqoK*qGBm>$;8b^I{9lro|6cb0r;J(6l^II6-VwkjFfu18CS$qJq|-@X
z(jz`2M-o%nCHtiyS}PATh7VX_GM%=MFtQ^9IM%zUbfxL(p{O}rrqaWU^&;_I_ZwbZ
zZOx-Z(`fKzVU;1#zOKG*=ikgao0)B?HQSO{u{&|=#=k@N-A3NYfgEUT1Ff-c%6meG
z42<AM0wjSTryEc3lgu0B{mEUp4=8!NoHjg{EYNCZw!P&h0|BcbVlX?u&_X%N^eL?D
zPi6dN9#Rr`P`O7<W%>X9qC@JdfJ-jP-def2Q`VuZp&N>EXP%EaoRB+Uw};tTgLT6{
znY-~BM6vYDY`>*!C+veouRu$laMQBh^OP$gTO_@|{(MIJsmAKg2fBJc@Azr^+jDB_
z56=9kw(j+QsrWct1kkk`j6g`rTtob9Q8G#X0*e?|DJq%dEx!iFXiX&j;9x)T!zCDl
z`7H)3TXk$?DKO?FhyHpYN{n$GU7D!HJ9~^;$%``0<YsA>V$=Lh7v8IjzEk^8cmBVK
z<#`UYpP<mz6fKGm%XdJUvU{MU3A)w#<dAH2kx#V{w9F#~0Ca}Z<70EN1`*|^NyBVo
zv%*dxp|izG8ls#|q3tQuj6dpiItu5w+lF?ufI(OLNM7UWJCTzEe~y_C7Gk)$0U&ix
zA^9ll9Lyv*b{njy3$VEM<Ak+(Ls5%xs0p;gw5*imcEn@F87MvY2DM9w(hKw9=2ghJ
zmf~-5@)wL_*BU&X=7FNdTIa2S@E#BYX?+K$!{>V>&Y~tZdBR2nXy}}dkbacVx;82d
z1@NRsmCcY90tPL*(E%|770$i|2I@8i2F<c0_ht*P7rw<kI)M*);y7Ad*|p5v6!!~|
z-B#%Ng4@Fa@9Rr~L2>fqU~()I$oSn+T#)V?7KEmoN3+y&Qh6o=3Xt!S*-rZ<lbk$U
zh>*PV(wu=yU+P_^vtF%rm#iTAN>uaD6B8Jhm>UNkYY1}I91@?45-g@hEowj-vb&II
zio6L6$EjXRSV<~#2<Su`4XOC?ku`jBXjq|TYe<z}e3KWGIbx~m!^63V`h|#3{2LBK
zKWgZU`qTM336?k;G`|a;)@BFg(a@K=9=*q5v>gJ4uwCJeXmnt}WM>t6HfZ07wPA0(
zoqg|IZ^iSJpBg=iT532yn15+eBjZ#Xz&W<Ippgs(Mg3`Dp4<iWk7A=A&8!$(4loZ$
zY=+rwy9Ss4!2{_tTW9Ik8tKu_<`gi}_@SX4Uo-g`eReD@@#fP;p2>MwCk3*wRc!MG
zrGP|tKvgmtwRlgDW!MH+;F7v-B@{j3K_{4+!eYa&pv`uk?-;?cW&U#|hlWE3uMIo6
zJnE~O{cSFB!T;Igi2&?VxApq^$KiQ}2*5dT5hAz_k?aM0E>4y-;D9W}=G$2&mxZx*
zsZ3_jHksu!H=kXaDLj{3bqTtsX<>hMxULkKi;j02@py|X89d%0LH4%e4n^H1_CT2<
zM;pk92u-s{7e)LXm@b^w%33492-D@XhndpNv-dbuzg+z5g8agZjCVsjsQ|Yuc(C?}
zH1n{GQsb^*Fy_ly4aqAhsse(r^lOxAtgKOHqo;>7Y&(ed1N4KZenXFsbK8Yi6S*Aj
z#v#Kv;)Q)F`%jB5x?DJJ$ZuHeKxLAfrp2L>+9@VWJA#pu@vj<O5hDN>9hOGXWhlw)
z$cldKj=N||T6AsWC`0US0Y5pso%imWukIX~4f^VKfB!myw#Evm%WC(nxs;_M*n~d#
ze`DK!)jnsJ!aj}3K(8}#uWFzKWPFKig$ej1vcx+o0ToS;_&|A=w6>i^M`ngd_Zuv=
zt$Wr0J*+2|cNyC}%byDz6+)@yT@p->xOzsf#AI}evxq1C*u&=jjI-U2{r~9t_IN1s
z|Lu`V5|fA`rV=V)%V~3%sU*p2DjOkY%NAqOY|CU~%!r)BRvR13Bsmmgl0i8Q#$k6=
z&ZiM`+RE8|7vo-Y*yq#t_xzsUAJ6mjhgW}%+dZGp`*dCJ>q24redVqWGFM;<a1Cq+
z%XO&&z&o*z!=;mv{W)`P5&>eqIR6ZGmoku4*baMWcHLa_Zm@)?Yi96k^kN1FhiRIu
z31(9}$IsUfR?gFivHR+C+F_%Rz)UZ%l7=iluD%&Casx_p{anOUU#^n?%7gD2{N@4a
zPtd2VC32F%i7a7wj5wzqV;Gi8c~=)xgy`_1dy;5QG@6ZQ)bu47<C)fvIA0RUJT2{I
z7kcOPhGXWBefl2%qPTceZTT>GaaX7s%KIu}!1s5z1n-V%iK6Q$|HMJZfMo>7U9Q_B
zjR!C7Cek3m-)YnW+quRME2&vx-wq6VDmN!h#~WI1>PossbGRWCXb5^l(#FA>a<&0A
zEbti5cR2DDC%|_oK4>PwF97_;g^UsT_8egq>E~-)vOw1(dgpI^(~-IPryXG{$LwW}
z7rW7&+lw>T=Y-~-EX+QBw|dX%783wW5Of+%V1o1@(2B62ee(hyE*3G;an*|*m{g29
z1-FBC5H@Rge9^rUvAH<ntS0tkZ$gss;h2jF-wkDtoUQZi_<bb$ykvZ$<(YGD@0wX$
zP1k&Y*wW-Y81AOvh+Mu-U@v9DQRY6p<P{=uZ_oHzc4wUC2UvQZ8j2hjX!nGa5&4O~
z5BL)<Otjk7OmO;JozJ<M6rt#KptRh812%$sIAIZZpUQ8MJkiR$r<gH@b3?X*<Gf*d
zau+P%{ZTW{PKmB9g^w|`n-d=sed--j<+^IgKtam5Awq0e&feno0Z%S+)p}GGTjEiH
z!aV`3Gz@f2f8IijNydKLyTnBf=+B!-<~>1ySaSvFn~JfIBq_9Y;_k6IGfx5<X}bjX
zv?pP-W~zU!9=Zw`Ck+43EYocKT=xVw<X2U>j1q1yIWa_WF`nzZzQj8A#jF0CDymmU
z#+%yeZTSzkOAZ~M3^=swO6&fo;y9bB|76E<CbC;izIj%XJYNp<s@T#zsApaTW2CMS
zJH0U+mtgCqA?&D2U99QZ=D=GSw5)OQ?8+$qI+J{x&xsBytnea>JkRH~AG+m`J2ZHI
zI%zt50fps(Q<ceReU0HTc(_r4gwc5cSmg+|f%M=+xJ_4wF`aKCMEK5G!nWy2-66RJ
z-~;lz(wqZgi-X?Fy^+*#%-zVIO`|h)#@pjR@!;_phu8fdhnDU%IaHw-oBx~14jAMs
zmt<Ou);bJ_oDTRsg4;pPdCHB2@VIa<@<6DG7GEiC%Ssr=+B5<K8IB<3X1B!1Y`AR(
zbJuu%Qtav3?}h<rdkjLZwrR89&v@*}`QusaPb&YUf;a;hMDd4cA&R(WZ8=8q#5qJp
z0-9+}P-YXnmA>gax+M?+$8DoJw9|J(f;4Ax5n9Ww91)1uv3im~B59%Tc6^iioT#st
z`@6v@R#KtST%8^Y)3bPo3&I3HpvBmDpwUE#=VK(y_(t<0RvXcH8<f+*#ZbvSzJK7v
zd%}cS{*$TI<$}D+bq*uGzI7Vm;hS?8K8inj4S1QnP{RP{5rU4=mYU}=*lbDz<}*NW
zt)?j}DRLr4j7bOcMg5uV+)IO2A=Uj)hG?!a&jbNPpVg#ij9W&(9*WI1OrIV9O{jD6
zO@ACC2B@qFM=|^W9#^wbvv5Z6)f<fOBwBb@j0C%L25B15h!@<hL_rUid~RrP(FisI
z=Cys4@K!I%=55Eoc`)j8mQni&bKNeJ$Kt*U=d}LF72XvXF@k#l2IdKMR>^!wxSDXm
zd{m`%8yQ7i5sxETr{J535+n2WX5BtRS6F+n@hH6hr1SQ*+%3+yTcu(4219@MaaJKm
zT}!eCuy8&Sv;idZA3$x)L{n|r996&m8gQx>HJXz}8LB54n-G)Za65JrG)n}^7I~pT
z+IQr%zBfVJ`oA;d9l1Mg;ODh}a_Dsal>}f7`{hsYJp-^i{s6G?$p%OpP$X~_W|qpn
z!|?InD;j8*MC2r{hSG|5nxQ@2e6S9F1mk&&Nm2H=EswcF&Jh&y<EbdR6Lha{IUI=5
z%neLwL|n5iSLc+m7FuwjbD+|E!(E@}>0L$_G@E70$B&SMs}=d2XDpM3gXa8m!$jpb
zt+ut@_RH}ekCS{;Ogwb2`{}CwQwW}^h0$t75g?`x^B9pJeubfX0BcS4?&6{&7gHwJ
z!*`-L0d1#`{l$aJAS7gi8ci_1oabew>}fZ!D#>R4FhU{4yxmt(`S<<dkA8DP6f&YT
zbd>@MNYM*LF&C22!1~w6Cvnbd?Z&%C<N>T1;K%6mx`LY5o;$zXSqcb_?FRV^)vQ^A
zhvSa`OzC@m@aik>pmpVs!KNJ(??3n0-2Z&?O~jFHODd~?Qoi=3BF*`hjIQJh)B&2>
zlg!l77f#l=y#18LrtfuCJYD?+7(>ak=oAWiGxeC@RQ*8Z0xhI8k7@=rdRBy<t*oeB
z*+O!RZv9lICT0GAvwno|lYDcs#JtlQu}JPhBW9qvv`0Ko4K}Z*(j{U6_yaQzUYJ>x
z*E4yV{#~Mi*M+2J3^X)5dXZ%8G*XE43ALXiF+L-avqn~{v+ZEaF=W!m`Y?0^7r_v3
zVyiIvk2r(bLdpjap}%|pjzBun*NR+ufXtZQ|CLCCHzEN#FYP=O(#cOwr~zg(;Z(la
z%kZN3g>LVGVddoT=WUCTvIfso%j>(o9QbrU!25t$`^H|icabWCh)oyP4gm=Prw_bn
zlhbJG;-<q^PX^>(!k*1xllrjc-KgQ}3zJ<Ttk9gB{turAfq6wp<S!SWy!Y?1Yit!g
z?2B_D`72o5Fz%L6eqA!nP3A@KjRrW+vf_};Z6wl?B*C@E`kol(#GV@tFv5Ebak>|^
zd#;p$;oPrZ#sn9Fj@q#%D*DIYyX`sT_>Ef6um2luz%!s@c*F$VnKeEOwk3P`=B?b?
zo-7bmtv7%!Puoy9rz$eyrdrbiB)H8$r@wgzoc)sKsdrD3l{{QKX*^&H*0n=1qnWGO
z)i)?*Jr(O;4oGU!NWEy#agCQNH5(K~&ib-F@+c$`P+puQ?5=hs7?K4cMKMs3WNX&l
zIk~2|$wD;rd-K6z%SEeFgexiAH54AnGWaaxv2aQ3OX1Pu_)NbFZNBoo>K6y4`gSlL
z{yPi<o#T#WlKIJ<0?vEfI%i83!V7@daWtHWolJnL?B1RNgyW0TL1shFc(WogcimWM
z+)Q5=`H3I#^X$)o{v8pwVq8-1PmaZ5a}<CJB^>k=jFF^gkrA0Y%}T)@5ofX?r<P_D
zq*RPqiwuaI8R)qh#u}=j8yCi8Xx#(lMwhYOLz*YCaC*fd+Bh$&sN+)k1W&<?cuow8
z4%(@f&S>4w5b`a6_9tU5K`7u0x(GFg<OY3Mb5hWuIwV#^*hI6zr}*FHtK9}VLYU;-
z=2CI`Tfo`blyGv;3N*)FH(hX^1Crt0;l_qW$0TRc#Q!YGj%YOiuWaxdn!9D1^gl2<
zj4)=hpe9cqfZLGcJ}f5)1zY77=^_B7B`Tkh3xg&@9XoR*<n4;`pz6V8uiYmj8|JZ{
z?`B$Nv?!i2Dd8e8{yFuZ>R=;EIRNG)09v&@kF}xq;MC|=at}p~6-`5eP6fGOF$+xB
z0GBJle$u8lQo~yRf*U*3KejHF0+=Q`O+!{sdaaju&;M9mclVnaR!lfaT7Kb&#@|)H
zL@6~udAe482q*lNtESYKQ=!Fq4Kmy%TFk`m8JC-k0PF@-^&4d!j%s(8vo=wyJA;g~
zd8eykO#0G%@R7zoXHD_<gXAkik=+wcXVbrncfqb|9`j7!i5?Op3ZSch^Luz)wJ?Dm
zBm5s{bJ*luZw0wASj1G7>m_tzfedANnS3_G{5X8N3f5_h&gK#?S7v|u{xvjt_xeYV
zE18{p{T)&ABoK$&8LjIZ-N4h<*C1#yQ$rpz(CmQdOUUU=(NkYXLBdlcM$ACdj(q+!
z7#^JCQ9UfbR3bovzPO)%AoH_Jk3BJPCO(E}d+Ud6jS`gNR|p6n7nKB3eR(-pM@2)8
zi(zMufmNPE8i%<_uJ&?-=2SwB4>-y6dC_Obau;VNGs=lKb6B=|{uv)Lir)tXJdN5i
zEzSJ67A4mMk2k<*HK<`Adl>0-wWHy1$$%szj_yn}KKy_e{h=$-uoY|G-{=bQ$?E8>
z(|m67lVO@?siqx^MiD(*3Oqd$SU?&x{62oBt!wVgpV2D++<QtN!PP`1bMmc^_Tq>=
zeEs9S952W2lYNnaCK7ymhK)zRZN5F<!o|t6e`yw{%?r6ydI4}*Sq~pRJs99W?xwr>
z_`Th`<8G<lbtXxyQ|P+~oi9m%E;EwXg|!@N{=<%-OXUR((Y(Z#-(BzvAl90k8D1_g
zpE$iT=TFHmVG^ZzkFamAkiv;t-PGL~C}8{rMpNi2#t-PxFC7>l2X`C7OHV?K)FsBc
zS)6_ii#|!%I{V_{#Av92S^{l5*n6N`4i0zr-r{E#kwrLlQg{)uApEIgLA6vvBTwPT
z7YEG#gr3t-?)(eVSL{*k07pF2-}+w^)*mI`+s75&!ELD_AQtaH4YiiT$OzJ{OW>`N
z<p%=YC3}09)qi9punVUP_SX$r()6V%?FHDp<HOf119)4gX)bz3mrB(-wp=)7Wr|Xa
zfJAbr5ey(aP%uMjk`0Q~9zgrps9eivU8l69fr}eoB?kpzJORm)n8(YlDPUlDnw*B)
z+-y1R7*xtW8U?*v!6U%{<@JWxiPukOu1s1FS11q3T>uwg*)rH`V96;xOM550{%Niq
zC-;@wLaF@dL!tHRNj31>;2j)-lEzU%KuNI{famf1X;kDbD0{w96moy`#PNf0aY3ev
z46f(^)(Me74azM}Y+Z*(2PU=p8KR4P{tSK7ppDpPxTtnSDG*!g%o$@EhFA=7*g|a%
z3e!jDg3!~c>@z4xWD(23=RQ`HFW(#lutq!4QJEo0wY5AmG4>WUQ1cYSF@j^wmj0B6
zd#rmXA|1ZEW>|vtMln<vJCxc;9_XaU;AEjg#&z3r?sfnHmBK*PH2pfqB6ZQ$iKzn?
zB(AfC6VZ|r4fQoIU)T4S3`LTj+0Le?J9&Jn4!x2)tiJup5%d9|@cz{+`akW>kW8sL
z0e2<HFM+>4NpT-!C=F_!8w|dX+mYz)z_#wDzfWO!3`NAyZH4ta>IduBH;^}FSUq}P
znZ+U+Jg#my`H`e~x^w>g<JXC!s_#H*_{iQtb>iWGmN%coGu{Q;rxt;h8CwmR@Fv&v
zE*qWTkDQ0;bx)LiIQ2$i`E&uM>b~2n!39o_IzkGB*U4}8amON?tY&5|r^LNb`{(l4
zz0bJ}@PIt<q{^M3qIF_i_KIpzn)T6qi}>_z#+t^1lxLy-iM2&UlGu6!%@*oO0?_vR
z?(jY7>&qWglTQtD!u>k~bM*WZA9iryqN0uer8D0ozaf-i5c9g$p5&+kv%c`gC^3#-
z-b%OVZQNy5c&%X95SS%^8du*|piLU~_j@oOL3Fe)1o6x-Out)yY<{68eS`5)(>7BS
z<97<m>w4?;omam-pKE_P8fD~RK6UspdSwj|;BVXo9N&x$!2yeN_I!eLwPFwURR94_
zvMv&Jrfw+Gh2c76**}XPTxvSj?-9PhvSR)1VRGNW<>m`tpHnEMIe4+3*@g&q(Or=Q
z<aCidw^#6FdbvCdzF8&OMlmGPj)G2v@B)b~4$YMo78m7}ds+JqaxBBTPdDUmvFOg&
zul#mX(r|bjrmg9}H0AJe?eQ*SEd*5c>u`!x8W~n?Uo}slVII>Wp~2NpsdA69aiXJM
z7CAz5`Hq8QLFugn_SyEVC<<BQ;`_I{+S|_;-#cToS52ncs|F9rex&zuRc*nFFBr?J
zudrvhdbD+=Q-n>pt6n6bpgr*VVtej2M|?beAHr+n)@I}+$<@T+ZlCm`ajABmJ!v>}
z`0fGr)uaoRw16TW<!=wC{V2v|4)8w~KoP*5hGr;XA{OrLpCEE7*b{RHYc?R;Xo`up
zmZ!$O(_P`5WZQ0p<|@iK72si-IdZXg!8~)sci_iM5v4(7PD7@}Z&$#s{--B#IFNsA
zC1Ug2&Y(Y9cMR4{&S(q-!-|c8@{@|3W)qqdw8K$ZN-AdRQ31DCjBjOcxj=PyCB5G5
zxwtvZz&ufYlyRx#c<0PNwhh0rOtOW0&c!iGj8F^%0rVXvlexap6Oaom8LfCb0vhaJ
z*w+-(d=W|out~{$RziL7UDE)4CpDps&ut}TFg&1GxlR*1g>2hRP)D*CLYH1&kK%_$
zXS}zxY~tMSRg=0!M1)@nzX2Gr>xzq?Zh1cuc(Hqj-tchmiT<7&H=HY~T-P2n@i_4E
zP}h#IcXL}k07Cr?#Ik$T2A(kv{3ntAe$o*--BgT}woV>YRB}VvI*4z3z3F@3RfiO3
zr%HJMe7&@Y<bQr?Q*RKFU%-qY1Cb6LTVK5|?gv6h87&w+FiQYoVSNZtvRS=ZC5w@}
z3_5!~8KX)%d<50()J8jzC+iqrGbX6lc^3#HFS|M%n;(>V?0zp8Md*tiK|7Lta>w=r
zm=AM+UQXD16YzP40A)uAEkXJ)8aTU&HBH)p!)`%F8Is&SX$t71OHKMmdzbS3$P^dQ
zU0we>jsLE*vw!<_D=V{m0CBr~;c^_VJ)pDBXGD1j4qyJg?>#?=nio`G^D4E@&84QZ
zJjzz*grH+bm1DgF<%gJFHJh({^(x9oOeoAcv(b<ZTF7vkb`iD6bx<BG#AGmZegqml
zb2S!z%ZnOr;-=G<c%IH|uK!80?JRlo1^&eQsTBw9JqBrh1Pwpa7>lPVs>{}ZmJjQ+
zFf|#%-?()J#a~nTlrg#rc9?r4J1TdA=6h0r_>-NTz({@!@sOa^5%V_xldmGfT?w#5
zN{y$Hg~vd+PXO3CTUoog!!|`l>7x68<RH{!){NF~<zJV4QwT3`b2r5JHQ@5Y*KY$e
z(IF_<)v@_@SwPrLjS7SylHL|^wWrTr4Di_RUN+^geE2Ms&-(ptou1>vjG^MTJ-zj3
z)V_QHCo=&Nv`V=z96$pOO-kDN2e8;-pm)XHfQ)-U5i?*L${)~D4?+==l0-nw8z%;Z
z@C9!D6s8_R@@yJ(W>>q#vMvPZA9}O(2<}}$oPDE%vwidK-s{)*TnL|EW?9|(5OF7M
z8~O2lza7%=-41lUSSx*umVSn!?mAn*8f^teaL?^V*CM2@wb`l<9Ei<GaJv%2tsAoS
zig6uc6*Ue}0<F(*?vrA=ExP@JbJfN79`-eCJ{HH=MSvo5I(m|@h6)x4ikSvi8zeoO
zh`BjDG~eQTBp=qn*AKCLR$3WoHg-3?haCdOyV`s;;!@Mbd1s6`xu&`P`!tcQkyqiQ
z<(2&^iiFVm;ViKi#sgqzlyI9MNZC{}I_qfM@I(OC=&?0LGuc%HVs7n&XQSOWK$}>f
z@hcQ`LEzWp0@}pBivitx4uN443`926Hps~c4#W|}0xjPx?E#AQ!U@M&A%5Oe#7H4*
zXD!&xuFDZI;%l<9aMjme7b6e4HkbyB-rCEKgKCYEcZ*_O&B;A|@5ZwY%FbT=UNxx`
zF^a?>g~tX*kYldIkToarKRgAee1iYJvpV4Y_{C#Ay3#Lg(+6yhFYc&%S#M*ZdIa<7
zD0mbaRnn?7Q#4`MgHCkPtdG*f01q}dUOH9qEm+Vv!IuJlS8gW@R_(-^3`BwwQ7vk~
zPGds#{D9qW2NoI|k_X6h3-T(>H&#N-pZ}4qRa*iyi}fAg{!gw4F{M_%Gp94itk3x%
zI*q0Zdjj|5yo-b3oKXsU8<olH4iWWin*KcDu_MZ0vLTv#x!)EUeLv&C-kSgP=l9*Z
z->E2{0v!Shy^G7SZh7me)M^DEdV4k-1JcH=C$zJQM;u%NPK%Pq*g|{>c*h7!WWABz
zF$~6uYDqO)U&)MF;@Cr9L{aUAha<Z^igQU^^%?1K+b!YoAJB6?akxJWl^S*u_IetK
z#qmYTabpK0R-A$EEI^N7ZD%r`AWWYB!^*0{FnE;ccp@hX`{=o!hh6@1BPbGv>iFST
zv(=5&4tnn28jX_w@jrZ@uX0Q$Fo?}crxM+uh{HP34%fo=>A0*&41c84_|Py7V_bM`
za`ymjpE&CdcbzR6O-)-o^#wbkmsJrqsSBIs2h%UhoJVr)6t5n<xx+%y{{c14DcaXN
zp3H^tf^l3s_FM3gA{Q;-*C!z-i-#zR6XV~#%nO7GJhnFYM*W>_-Zv7hirLhJ^8=CL
z`~NyLqR-EmuVK|YzXasDzk${dOCnfDO;)P=iL%yC(f9XK2-|4RNHu)U+K38>%A8jt
zjb=1&@mtr6(7-JJ`=9eB?9rQvPK%MGyx&af2A|Y5=-q!K^-V>oO<T+LOhC588iMDv
z=3egxSQW@D%FP@YKld8ui3CX{@cL3x3D_iB?BZ%V<3;TCi2I3vN7~EQo2gkBxwQjJ
zO^5of)EBtlT6=j?{X>eX1dZ6^yXc!>ce(b6G!$Yd)6N#o2ALwn3i(ZFv0YQ`^k8^p
z4N!=V{xq)*gISV&p4f21-wuvf-j$22w@d}?92ov+s~>%}G(1ApF=tc-Ai6*0WIAJn
zg0IG*F+?#}C$!nP0p=z;9~N@e_%o}CH4nQ|<$kdevQ}7jfl;rp;P?aYVe<jo*nqPE
zhHlw6KwlbkNF&DY?<45XKmXS^uByoA{(##-#fh!w++=1{b_*yIX@R10?%1rzDxVDS
z-!rvCwqq1DnreOmk~aNd#R@u^xRAjH9J-9>{?+Pp6eo=ai(k{k>cMBwpGZoyI*_HF
z=l&oVTNK?<?(G#LsVw>kb_@LRp|E5yJUNxzs1J~0h7nkHLF*oUx+uHUyTpp<m^A3W
zUZb<EHb8Op-B@68)OnP$47(NRAew_{sN9I;KwTZcobFScGg0)`CJ-u3ms>vL&l+eo
zJ)IaYOj^MY9+*67=Jgl!=8+$(@^bF*$8WD+$~8qPy%@szo>VMqfNrF0!=jqutmN=U
za)`{mv^}p!-Qzi*(dHT=)G*RoaeEDCOx`zjsGT$l49xRNKVPt6-irLVp|&=gSh3KL
zLeG}A6#%RvQ+^Nx8w129sGsI7!svzaqf&sWfY<s}0r0+@(D3D?$vlTRtP`NrWnZ(N
z`;_!?_@lb<;Y;@dF97N)4<|PcmN3+2=zA2v$&d)b7rBuvGIEkW0IOfLeZ;Z=d?gZd
z4E~+D#?smR`K&?Y&vx&aA!3Uxb!x8V?towK5{z`tghuVzGzfe*{*M&byuRG9Tf$VM
zfeJOglirEl3x7)G;5SfzBH^|*I`coJP&C3VPGtqa?74Y3s+F!YVA|Yp--24%cvK9S
z#s!#xEgt&wjs?#`u9edM0xn9yWva+1SiQ1N0R4&Db=r|Zwf4oejF1`T8kTY+k$)RD
z{_TJ@-HI;<i|Xk(UJPmAr`mqxPrD|YGkxph?&lv}F87N}5yl?3tVS_@{7*dWWPXi@
zF-ol_@RadLvKvw@w8S4ln6iVR0<~r%(#@bf10ns+;jnvavz{WoqR~r8*c9e*xO&*x
z{plpl3P~i{Gq2e8d*bfYq_7%S>NW~7qbwA|kN~-7eSJ<jm~5-91$Wv1y0a5(-ReJ7
z*NH|>y0?|*gCRX-g4^ybVi*u}OH**7O$FQe*4kjmIStlwp9g|*SJS(RL!DpF1`gk>
zeiw%solqz;bAoR@n~BP<zX_Ir-xFpG5*6*BQLwlFrKw}$!-ol87nwvNt^FB)<A&4I
zZ`!i<WR_J7swiz3&>6utDnX2ym&tyn{)=i^mF9_=>!=dIrzvs1Btq*<)$IeYZdRMp
z3>lCFl6b4q2e*ua8wMz`X3~K(Rj=>P6%32_dG8m;VO>C9I}G|-)l~q##e?ZtYb{0{
zN9K-pwE^Rad3AVE?2s_8w4^3?o{@h8kz0$QH#S794#JRNv}xZCQ_#j?K@L#ns|VC%
zKR73mc4YNxmS_rB9m(A^HnsY2`1P}}f?Z9$^1Ujv7|5H8*a?KzbN7Hl&J{&TGYWLG
z`V_7{O}l>={IO2Nyt^5(ISYMCbJi(+D<y0p8k`@Amz#*1@W<hErt_7oCt<#faRaXb
zVw5qad7$FNYfLH!g%*F*m>oaAFZ>qe+THO-J749RUTrZ<>)O3$6!l~LPbkTnIQ2#H
z^?26M#L!>Q4wO58exrLY{(BFTxRb(r37Ll<Z{&Q1{DNfws&0KIKw)hFm<@i?LKS6L
z7h(Yp>411`xUI{Yh9aY`cn(u_%HOv=&|sir(y;H^Wtb4Z+!Qu@cEH)Cd^)>cT4*=u
zGZM`wxFlBC@17_|$w6rwKf`EUi#24l9%@#heWNJCZlY0;doZSL^;3r-;ZDIJ5QQX<
z1CjV~KfsZ6b`xi9BGI=FHtrM6tKkhU`ZR06>$16*o{t+A-iRo=IK6VNlWZwQDf|%7
zimi{QzcpBCB_tVuwZKJwvZQ#VBWp9_;0B{J-P>L{t2~iAR}I&Ue?RoJuW=tqyto!{
z$8w^B63DmKr{peF#gd}L#0oQb7eKZXb<X28LR&E4z(auq1dI*hfQ}UtP1m4ZLrmdP
zFw@ee?~tE>+Xd=!FA+QKX8nF-9AIO7vj*{mMqqCZLp{{rKJhu#8%TrTDn`TjHw#OM
z_1xr|aHsF;tD9giX6gb<zD-5;5Rxc2DS?<PZJiLo?xPPAIEh{DDRP%$P-8`y^U}G=
ztN6I&G=pLL;mc5LR!XD#^VvQmdUClW!86CVDfZaR@V5&KkE?T|UIJ~Cz2GgsW3+Cx
zwMNW8bqL1LJc4So9g;4_Br-_WTi-%OCotO$-ca+}nA!&#kBTzvYBW84q2%OiOXJM7
zL44%Xv3q(W$AOv-Fy2l2Cah{=>?sP<7_<Wnq8+)x7o1%lw~80}OljT_%~va<xI-N4
z%>(G(MmbJ2@7aEEv?X^)necdqt_Ir|KM5Vlz5o6_G5SQI7`K@~tUYuzB#JdtxA{-T
zPbvr~2-kh3`fTiyY179rRpxUmfQjXb^t1@-n3<7TcR-T@xGgVOb?MHkurBqJh#N;c
zHtCqxhBdD1TgI=8Ef=#Bmgf!qdu>OT2d+=<>0NC6W)GyysieMAT~!?b75=-P(fdvs
z+m-=*AuVefGO4chI`svQQ@8EbXjn?r`~0!X>osz#{5??`@m}4uw(8Xo<uGg4kMV)W
zmVq-pN=f?{MaCmL|NbgwtNTUjr?{ikmfy(pfgI*zF^LO6N0*txKNdu-7AYF*S)Y;{
z0i#AeJSXYek{71K#&2S(zNAi+*e8KLhuM$R8XFH0PG$ckX|H>X>BGy9Y09=T`iAMF
zT*Mji0(Jnv3g8z4a$rQRa~+46*3CaOZ?QBKyNm$XO%>_>>YZv!vxBXwH;z-^2|$JZ
z)yrphB*CbIcqQa1Mt2&!4??FF%5ElnoX%~I=j+w{J++!yR7Q;eWEhrmWQaSpuME7D
zaIj~Ed5rEwBc?fXhk&|_p!QQ6b1dpC{H6fa>+BCm7q|?$@47l^QUf}nQU7TmHK%>J
zz#yJlc_6RDza!(<-0SJL$}4h%@?)s=m4)PIu0Qh614ddD=*6OxZOo;gflflHQcVt^
z%TInsFg@lii^$Hmi|y8kC8jeAG1F^;hg}?67}b;DOV)1;hJBCqf501%1RJb5m?U7g
zn*B%=X#DxFK!a{EsL|jDEzu4sdxp%&o2Zw?IDJz6j|J9Q$NQErI&lm)CcMF64jd$R
zKiOsQ*L@K=fEj@!N=e~fW+S^)<=|oBtLXg%2v1IB8k_aY4P|?YL8dT118Yii>U;N4
zEHFaCts1RMsNYcWr$$60k?f76+@}T3&}6YVJ<x}tJsNtD|5b{<jQWcr;o`5Vt2-OP
zeK-OvL_7{G6unebFi71oW0s|!9*cI?iN3=>O*ns7`+3686<Tcz=nnm`{|mn(_KIoy
zsXo(*>Te&RaJQ}bPQuD+nFGC-u!9l8)+QN*q)@=%l&KGdy><`R%<DOoaWY8XBNXuj
zq0M)-HfQV7naQq8Wf!NnOz_>KbfeVQmR0ZmW5*e_yFdjVpu%ebTo->B@l<ZCkyvM~
z=CljaC#{eGXk2KP4t81*tYOJ-1z1o6Db3zfS#rnP9Oce_N`@L9`j}ISpxe*QX4pM^
zS408iy?_fHJIq!W-m9)!epO}p7bUZrpqh7pYp%rwb|F_sx(28*KKS)`NjEz=nj2pP
zAAXr9+l;WidK)#Kk{k+*!(HcQ%iW5@d~%aV@4hAO%0IhJ6)IA004HRvF@%%re)3Q}
zR_>zxj0}jm$;~Q2U;HFihiIVImhNRFza&OuVsl3VhA0#67h!s8`BZ(#9b1-OK#V2M
ztG0KshN&Hv+gKN+uhio}ZGK3Lsx(jHAm2VMvmKZ3hZTaBukk;h-7${Y6qfTZ3Z2z)
z1zKMUiD%nuH`{$kdL-FP+a)x@v`cf1U-a5Pi~@MDevZ;uzle~03_d)7PqsUP?qVXl
zeC3-xMLF`V=0Y$v;Ok4GI+;dtEaaO&-;akv+Kjg&zWT`$*bUH)BCXY_uAR!gBQ%dP
zq=DDGv;T))eGhmg$yTwx`@7l)XPXAS1DR)-USKoVWcUc~443p3`>T_NA$Zw0v`DbJ
z?J0eTe89DH69Ji(<_#P2q`0kWaTIISuqvwIcgzlh$&3n~2(xC&QPG&&nNU0veLd%y
zAHi`ty6J6ZVbrB(W8?3MD=3T_qjd{TILQQ1-C6utK!BpG`CB;yVG50Gf{@$gh_z_t
z4t7(P)+oV$4B69EnzEc_I5TMtt)y5kR#L)!R=3$|njf#?q`MC+HRQ<@1fSRN8e+kA
zlnkxhxD{mDO1TcQPG(4BAPPudnuiQjQfGw@Jcb@Eq#hD<mS?GlVKrfgc;)sf17><7
z<;i%DuxH)0LFWVUGr47PSd_7L(=UW+-{@slc0z?)F_HhaD|KlzTGaX9yHFcZueFNG
z0y=lsaU0`J-;Ii17kt|(dG$-`{=I+h`CZGSC*p{94}}tWzOwSV)u}a`du$(URlBeI
z$HI|4KgOMiom$g`x;QXbJjkAloHDS@Ret9GrT^=TRMYxLJ2Rf{uWYlsrSfyxobHyb
znLymOP@f0B3L9W=cBuw(xWiJK(uWzGnx6J;jV@2w8CMYo1zI@?IZ>H&H;jlh(^8TW
zcwje>(eCt+tWyTHg*VDPuHN&E`ru{K3V1IKAg_T%*?4=zRjG~_GvW+Jc<6NHH%JjA
zkyPeLVzK;j@i`({BG5vrMeUP@%!@W*#>Rb1;b1bti!RBN1gbCHHhS1x91<H+;YO|7
z>~ZDB5lo!N^ROFF+>MJFJ3^nQq(=QzmhyPr@$<j!e;&7{3<drL>#EEMszKFY$&lVt
zJO-{)s(p41Mkeh7qh@Ql4RZJiD0tROV=Yb&V@;9n<IstR&u1||X3i*<-r6tv*VQ)%
zoV;$8@pOwN=g?nU>`_YDHJq^5dX#TrxVHw)@0QlT=BD*eI*q4mx{8AGgI)N?(j)A$
znGSJw`zpdse{&ii>n;;?himLP6g1&zyPzV6mG24AF;xgGs+P-alr4-+Sf?IfjUugm
z0ljMwGQk?*5_2A>Peq@InE>SU-{9-{qS;uTQ?SpolD9%d)OjFE_+5b!uu^O6Te9@|
zax|1}2kbr*xnfYHj(RII2~sfsYXPyCE1v~wjvtXl5MVYpAprDSmxq9n!`e28+hq~3
z2x@HX_GF3LZROrs{*OHpw5Hr>fWt_OUc4JA*g92D&kKJtDfjFzME1dIo=|`2=MI3c
zcv>e=V$aRCma}G~9TMYkg-j%YE7b)wpB$h<0O5q-*E#-$Qbw~t;z@wfh-En_p1<*x
z<iBBT3a`i!Pa#a>>~wf7O^<+flZ48hj8a}2WAJH3r|&siE1Le!QZGiZHU>6F%7r&k
z%2cj+GkLUJnOQ9b6=v(FHnQ?&q>3C1{_n;Jo&a*U|H!V<q7?U+F$VtB1;!n$NpDh?
zB+!0x_H=ASo6-RaNowAMSjo=3%r}X3XeWs<+opa&nE0C9FZcnuhgLbU7_8_$(kv*y
zsRFa5&ET<*dbxw@;ySp>D0<s}0!KDqO}^Dz`WW_YV;a#shLi?!TjUBfat?r~F^lTs
zet1cK*mgS?T-&NvhRBbSf%ERQoj%>f@(XipE-D`tJek(h_p!fe9aH8SQxeBGUk9q_
zkdQey(~Q5PLx7*&dH*mx>8IS-37Onv@LD)IS6?qjKR1@kV_At;hqu4^`MqE3v+04r
zW9+q2!`Ekjio>*gnpcA&{1y4lSQ=Tu1VUHSz+|p@otyy7z#<64O9yY-1_t{hS0pZ^
zR{zTKry7VQIVq=%5c*(ZS}f&HF3vr0lLGNA=P;GOfwtm$Myne5#_nRl&-fQ4F7S3r
zC+N|9p>a`Z%Q$)+@%|{yF~J>s7zP)2=bvJYe7y^cjh;_tbJry&0rk%|1JU46g%!nV
zTsE=aiSROjcgq&|ab#tI4}HfSJ3&}Wt-|Wj2MHX@oc08f!dtnS#KeHBSv%ycjY;$A
z_vv#_KLC&-nfpj_uPJx4+jIM@vZH0Kp`YLTTekO^a)AGg0CGhmJ6CQ4*O&rL<P#hP
zn4WBXniFyhs_X2Pn?Wnd*scDdJrb9guCvqr_|zI!jNh<4@X4%!*+Y?wg)5+MXj*?)
z)mLK_+#X$79vc-^M)m1w8<rN>pcIdgSrEw?pl8Cj_M|#?wW7baOzaMpew$-wjSz?U
zS5Z}ck*HhjDe2p10n^4-bx_vrNX!;K(ct~fms10zT)PhwpOPk5aoT3L#l`&s9#9K_
zOxFz!J-b@-`c<tJDq?N_u?t#9f(;9I>inYqt@N?F8ITiAdE=|U@}Rw4FO&4>@4F8V
zuPyp(=HyQ8d#&5&_NrvB<lJmfc2gq4KZXmWw~CYLZ{`Ib{>ZCc2!H*~VMnl8oRN!S
z`L7KN<m(G2o3^>TwD&*$VZ$apkH9F@Nww{$d-s0-Mop>$?mejb63AF><s_!cAs)aJ
zS(yY5u7ka{u48dCBBZLd3fBJ!b=-+|Pi)2@<LwMhG9b*wO3)glk}vI!>@=|1rcrL;
zwRQJEg|nmWt&--Z!5YJHBVE;6aAYch<ql&VBbYgw1y*BSAqQy|@>a~=Ow)JNPjhw`
z5$^UQ`0smxD9`v?|8ZV)aY3R(f_$GyHeu1>GgALC=h^g1&LX4uqThuX|MMLz4nL#0
zyfp3t_~;;T+1UaW25E7$NVqcZ1g}Vw5a1G0ExF2!kpyb+a2s|*SD7NgCd4eJWS|jO
z90n%RP;#oBWk|=l+WgpZl0jk~(ckOk%+1`b4--XwC9u{jm5(^+0voaCiPYxQW%|?x
zX}yBk>>~GoX$*CmtMFB`DdHqCpaw+^$@hUyeLE5*YJLza40mtEYWMn}H%}=K!i3}x
zgON>iy#b1~=EYfkDZexSdFV}l_tZEn*g%M<gC_@b18yjJbXH1NJm!X?`A(AcIg-UJ
z+$OmRoGk!pR?R(ru5lL_@zOkdZ3X&>p=++BvsrDpCf~bVI;lUz8I$|o+Ww-SMUmyr
z>$@kP8(0D}d{P`{2cz{GxLuQ&I}FGR@W+k<`RO(C2oRIPtxq9|PpKwi%$;T{o+v#}
z)<E9AE174|6~9dQieO|*A50r$GjFYLDkfz|-J7X(tYJx+&xzhs=K#SRrO;OV!W9m%
z$7aR8a~+V4*te6w&ygsY?OCZ9O}P!M(e5ABM#@@CG)DEiXCBxMcG-%ie46(|K6UKx
zA~STr5PbrFuDKaMAA5P^%#dY;ZMoAQw%tIo8k7}Qi}KA8V4x}2Q3YOz7(N&=cVSX6
zTjbgjblNxaZ7?}WX~npFky_^k`!tAf!0dx(AV{KEZ=5nPzIQ`3W}Br#E#MKV2In6S
zUb8bP#FzFw9}kO;5B&l2=9+(Y(OQzOW8&OFbM+m*-dzUq9=pz(o!`Ev0QKjd6<d|H
zD-Qan_q=|U`|(JjYLCTVB9+UVZ8PV<%9!qsHE(`8<cae0^7c;E`*zt7k+^NVS3J@7
zWdGfD=lvd@Kk~Jv_{s6iI$~+T2YGku$5#(jXn#JvMF^d8aB}(~;`Z-a6H{yc%Ss(&
zy-Un7Uq3}1mqfmeds&bmR@k&S2n?LV(Mea~N_I&g>1Kg`zh&gSYY?neW1Jik5p3V^
z?81}*w$whO(Eizz0Fr+_a3cWxz~s4w(&36Y+-t%AJK0jPhrmf&zkmfZiB=*V2pL&7
z;^4Q|G!^*Mi7fF*0(O5`y(iEPaDf<j=u<mapUON1TV-7#>ZMa)>r))y91Yg!R}8+d
z0>ELNwFvlvX^6Hh=M#9%+fmB9xc_GozQAZb$G!9qL-_l@C=dcVdd8v$x_*`)?Q6u`
zcudV{owRyYM>4uO+ZJTscdgM^ROaldd*f)Bvu`nR^{ylRbyV@40qbQ$KZ*<1Vw=?f
zo`XU(WCWjoQIAWCK;Kt~lhfmH=W)Wj;CR1c2%lkUPsvq>l_rz4Zy;O(eLIy2wksH0
zLVqdly1PI#6|px{acvq;kgZm8?8r#izFeGzp@!KvkDRxCYjM;o%6Ib&KO-aQc6l6w
zfcgJ)$XYm3&)7(iB9jqD$Rt#ss1lc>^+<%ZK>sPZ<!6L<thTBDn*6BV!^55~mj(Fx
zY|p0sUat7uNmA3n%0-{Hj{)i1YK%^8IJY{b`YC&e;&YDmY-Ur%#+Nl8{`5Kb&C&Hg
zZ!p;z|BbtvtqSw2i^RVpUuUce978z9;9CgEDGcB<tD@XSWa`R6t)`&?>{sbFV5nP~
zu&f!Ri3x&|*b+=8L#Npc37F3|=o&R`0%l)AuKrYR$wRT`9>SD<4q@Ct*D>$wLb_@H
z(pO(TVS|8!Zbh$SwC>|x)4=EeHnCM+8O;qLQ=p!f+#g`A{FvuRLs#>@S1D5k`e0sE
z+CwP|i!Od!lT`ey$B4zbH(hV`pn}BzJv-X!-ZKI}j`85_f4PNV=DxDAxj=JDP3{U}
zUX&8(wIt9jsQLi|OUyB*kQ-0&+YRgGldw5r0g8qN!^8yVV3Fcfr!ppBR@3_kY@hs`
z=sR3@v+vvNk$35DYk;x=Sbbw4PC1g~HjSQ93n9170?5H`8C04gOldyE&RoK;C;E3(
zma~GWPOSv3=DkysX0T3csmIUR{#SF#sRKO6n2Q9LvikZVlccVBFEX`Oi0Rj#>i`;2
zYY?8yNv;R#qydRO58MTl4u)o<dF&HXeMnm5JzcTjWbMGRhGDm7d0x2t$>F6ypLeq3
zUspoYoiw9((aQX1p$5{tQj%l%a>gsQ&!FN}i=ojF>*w@0%$JL;MkeBrJ9gZ3eFjGt
zqvw7*(j`dXKXO31BNT&H?nF+=I`|yNvyI8e`zxJ2#DPxkeHg!jHu9FqfZ1-*E6Vo}
zI}LLJrF^M0ruSjiG#{Yqw-L4|jpP@B<tkg1I?G!nq&e>s8{yhl&w;IdvnrC&hYUWC
z0x)f&h3npcJPjEs&=p_rR{@mDNq?Bv9YOz{tkhyCim_`!7r@b%Zz(#)NHf-J8m4Q@
zqneR!*xa+v>I1xWB|&L$k;)Stzge(vXr8md?(n(Ee;T)o@0DIS_Ht%5S!z06HBh<c
ztH%7Is3!xb)_4ibp*xy&5f+Flbba^)*wsnr(RcMZ1L<x2i4l(G^-fK^`!FZt)WEsy
zfinYkUXC9pSKC&H{VW&e&C{qqQlFmq0sXg*QfsTC5_fe1quh8494GIzPk?4{r!r6K
zt0=N%-xY97LaQgKX<%fl)#wVBN`cl!7K?gca-@1tsJ}utMhFrwhEh8g8z9gNn7V0j
zwJNHxwUk=amg5NcKH8;nUnHP>^ui1u-_AybMF*9JgqIQPvzZc%*5qiIp8kvCxB1H%
zA8LzDn<nxn8moH3BglJx>DiQe;Pf9eZ&bcc%vuAvB<ry{9>7K2<y#ip{kuBJYxvYC
zX>2vrRN5)noZ)vJjOz4_zk!3e<x~44Mpxfj*}mQ3^<=i*zJX!d(VOMkOL4M{2#mEk
zm2bUGRb~dp>RHeiWpdAYh6rEyFX}S|#mEEd|2N=ru&smxE+dKaK<;eu2rQwQC~~mI
za&sj0hNz)rFmh3g=JpcMGfKN0lN0w0UA{Y=n^|0pkh_}oUJY@p78d6@tW(NQJpNtj
z<nF%ZCTl!O84{|x5(0SfK<iQfz;XH3QXv>S;yV2?w>dcNDR9VuxoTHRCAWI1oV^_|
z9-<2pMMi79j=9N9^93oChV(#_?_#D|tObfwgVVa-1A_wG_NuMkXS8)8;9GP3lz@Xu
zd;dlK1H4i)m}7Wg74{qW8xvT#aHg?&r$E*EHvN!%^8h0R@J;M<&QYCrNicV@T9EZz
zY0+%Z#(ue%vvz3w4B)pdwp;2P8C+nqIM({4XuHfTk&Ac0V56rfAUyQ{^WqG+(0A5+
zi8K_}m+t^D#X8^{m<|lteU(}WEW`r<NjQ@JWH=bFLGy$$2{q(9QPCf=669`&x{63=
z6bUT_2L_kIPxUV^v2}_5&bjO)>zWM5kDUubRoU(aq!{YPbLzQVBtz(FVQ6uya?#pK
z9w?HLfE80HpOl_g{-|bM(&XfZvmbJA`30xh68HR&b}EjM3C83$VsrxifO1k$%kID=
z`zuP*8dZRD221gnc0<V20TMmg#=9YA8gLaX_lJ~qKi2&e5UAnheX6OZxmM=ZsB_Dv
z@cy35z@FIoF?v2mxoH~dfl6Bek+vSIkMO#b+aPWhEw+@l298Q_c3{u^H0?__g;sbg
z2)G1)$xh}j@vhvQ#MHw*iHXa<M&bBtH2uiCYO>!Aug3g@o*(bRVdxux<0v_ezKgmj
z?%^$NLabXI*Mk(QizJ_eeKNBh?Gv8(d4Z&m*z=HL`!0L<7tftZliL?Uu3QLzoEw#C
z259^^VLz9z0mN2#gz;dJ*9w@@t4-sym(f{WV(BB{e1vbpu@O5)Qf?(+v0uk*3zbH<
zR)rJ5o`1Nv=Lp8j!JB&hi#H?>+Li2yHG|+mAPC))iQ{z5DIjlfV%xLQ1iH-!ziMBC
z!g&o97ce5ni$R{;0=yK)E(G}fk-oKrS@JffoCNxAie>YoLMr3<i$O3()+YJZ8t5gI
zg!y+CUJ3qI?ekar;q`aqKO?vjdOJ{=Zq4u&<L)eFrTLrBpBLj&SF_@4GJ?iEhP_*i
z4<YUlp{>9e_Ns_Z4>(#jol~$I$Xs*sk_So~a!%F1s0$3T&>dRx<)W1FTp_s098Ak%
zlHdh<{)RZqQ0@yE-!4RtEsE=s`=yfh=y2Y}+2(Jct85WYBXrp3rcI!LFp~>Z)F~{B
z<NXx}Sl5AnvxY2mcS>~{N=^b-==)|TxdEsI<F9htmXSQ+IB;d()NCt1_6imxP&9w;
z_Jq}v4>U&5a=Q|io!;Wk-R~zxW^K7J76uZS<+^u|ZryrHivH2p{al|N$@2&rAVG+Q
zV15^5C}PTW%%vadVQvRob*fyFHO7!+wc*tQG=CoO9&E(J7;zmBvz2Pt5~R~-n_;x9
z>3eptrUwX1pZO!a;_sS1PT4YU%WRziA&KJ^;`;);*4_Upf!F-c<Z={R9@O(!CdW|B
zABGbvh;_bO=A%9f>zb1MejL4>Uwh*2_*uX4ZD%}y4gp`%!r-7=7E_fQq0)9TO70KR
z9%C&cInv*FRz%o5J-M%6vw&Sl0=l8ob-fiUXD;$S1)R<>1&Syu*)RXe9=Qo!>^QJj
zMGo+zRxwy;*G0O&S0rQg5KnMXV23QZ4!R4s9WZVjwMy5Q$A|=))Cs!YG#$uf5D$DO
zy%`+T1VyC=zu;s~lb>dJ6il;xhCOe6LMiu5sm?M+HM*2&<g6@;-htC?-bKo8-Ugw0
zWMF)J1768=_KY!lQyXLqF%pyq!LlaSbi_(r9slvOXP~*;0GqsE!l`}rn#vmcA>Qv4
z*ha4Ukkf%rGI;o~q^J}aj_4JZ&gj*y)apxvtfA$Jhw~2yJpnJSc+lYPFBkdmTlYi+
zyg#<6+voVF;mdD;4;|2VdQPaRn;Q}dkZ&85>V@LBArgGtTqA(J+9r2^$#a%&?TZIg
zk|?`cViYB|DlGIzc!W9++YAHy0q0AiCW24X>!tvVRw$oi(3P?f$vS9WpQ0)Qpy~ge
znsyKX@}DEK@&_+=i20%`>nbuKydfmSGgRy_pjTvP6mbj48>ki%z&|yW1x)kx6DVXI
z*K4c09@*hCa9Xz9%_RGrl^`RCUd|E_=~lzGPN2v|UXC9{DZ3b=V7c?ZsKPI;OvHPN
zA<sVo)^@q`!7>L%yPreQ0q{s~g_lH!={o4Kcet(je(p(zlAq;=>!3f8pPi3+%P=w;
z^4tNspAZc|xfbgA>scw=ZHH0HKe_++Cx6fc8DbgXLOqf?`PLq3Cvp!;==67JN2?I1
z$)c#lrA0j?8f0`!?+XZ!gBOu`gzfH61&wE2pN|p?Y@wVK+w@q{X$MEE8l$)&j*;uR
zKJqn+;bU}HJxW;t`tm*?K8n#$8UQ6wgGOsuwF_$m-Fyw>rO{0wGI!&&30=j&d1PL-
zlfDDK&MG4M<^%<%&tx|n^xFjzuU&ba_VFXni<{ejI5EGo1-*2n82}<&&#K13Wn3zD
z%>ZY@aab%nGicp-Ni^$eXlQscNWAd*^Md4Trba+OsL8ELE3?R?ZD;?!H?%c34%ek7
zl_9r55KYI_k>|@{yy)ZWa4`c#^Hi`Hp^GWT>tV~^eSh+&CbudNAsrHHZEDEHns~5Z
zxM~<4;5Jx67N$vu`3v7xZnd%$Jqof#{R4b4>IjGpTjJi9wc#Rt{43_|3#;;s4S)}e
z4&>cAxfSYcc-C4>0NiY)X1e&qJ#oIT$NhgEbDF%+XJB&ju0hMfSENy2pW0XUA4ffG
zj{wdem>7oQZ!<M$+Txy6%x1c!90zgZoi!ha73_t9Q!z%DhzstwwKV7tm_H%CFuzb*
z|0<LvVwm;+H7Q<|Mi>=m)O5V>Z38?@hTOmcmI*7Fkeaj>v3pKC4bd~;ll0y#w19+`
z)sI!-g|qd^yjXH8T?=BBrZ2^W`&Hxw^jp&0o?M(Zn9FsY>=xy93(#HSlbk{^dlPWb
zSj|=x;fT06+<K)dEf7>-4xowX*+A8A6`<u_&#4K7K^ngJ&#fG_?+W_+hx`BfOT6ek
zY?mK!_BE&PD<#07`^-qAd!=BSua!_T<M^&9_{vWzO3Uy6_g-WfPHuP@UJ=&TfI2uu
zQJ^%wKm*8{+#IJyI||pefn+DQxWyWq&K2CLVe81L;1Mvq7h!q^zh_5ykXTfkPRI4t
zB{SKcl;XhHl0|&lKQ&&M3snOxE_kJu7P0~bv<V;&2EXpu2zD=Z|3Cop2n=I1L1U(s
zrPmb9cur+^Mkx>W)^vxfo)}n~CR;7AaaEC;WZzepwv3MvqrH@cF}8ZyFaL@&0=xWp
z35W)`?TpsFj32$6c%W}ZGoHy0Lp!*dw5Z~`6kD04cUzDnwD9a!L^%=?I6zTnS#uPp
zG>p7Y4gKITKWyphHnfyaI-R}f0bE(Hqn!1XS|N(UX0<5{bn;(R7E{yCIxPrXR{)Gl
zLQ;T=6+uM4a{z3*5dvX)l?ao`-9!i8RM#qO6JjkZ^B;rCW%VQLIjR1)s@{r^Ue+h_
z&ILxbV~qzWXV9;3!e0cOsFti$0x;bky*%3rhTP~1c0A*X;5Jvik#L<d?&5S78fhma
zf(1!SA;FmH?cWa)gPn`hxn8-)6TuNKu{v|yXCMF%Yo%g~MH3<JL+louC096Woyk?R
z1Xn-ThoI5Z&Q-feb44D)4K4Zw>!F)W*4Rw$O3F27O}pV|63x^7U0&HU7dT8U|1keE
z!1S|~48)yh4eWnkF*!SI+f90b=92+qWnLZF0~6+OGIMHOi$D(uQlQa2kecXbn)Q66
zd&&536s9`j?g^Eqa?-m!r{~EPc3!IO^;WFH8Gh_CNB^clc0Pr8V~eN8b6^yWgQDuX
z2nqGfId_?}d~1L69xC1!dB#!>8Sg-fN`VH}5NkR73K#%8h|D{))RE*42jDb4)cmN#
zAIa*P)aws7^e%W8etBkfDzuMKl3Ix^P*KMG55XQR7nNZkx1Mx@CLMrxt$-UBj8DVp
z%R>smoSq^Qq&es*P2jpT>-Bjeww84&;E*#m0@HyM$}RWNB^PZ9i+no$dw6}hWl8em
z3*Fdic9_A<j4QE>FcoDT7pel%?Y;j9d*u6;aLUtQT^cWaqIiM3`Ym|vv&>OmSF$AJ
zHl_t^d2R|LRIjvi4PBpam+umx?_#ZxDA~Cwe_T8Tr*l+iDm(@>KM^gCT1{pCg!fa;
zx+66)6Z#$g1wi4H+@Ti@=;D4LIblSf6zGCY0I6Vt@y6dXpuVxRM!x+b=JK-c;vgS3
zU%#E8A-__H%pU3GWF^tp4B4@@CStj#5;~OYA>(wBK!55+m^OQie4U14`%Q+f-pxMr
z-k(=CHsP;+cX(iT99_RxZRt-?jy?gx*uGGVa$~r-oREff>~-EC(BocVr!Y1)8{@^E
z)ulur|DJpcb`r8PuQ^-jJv+b{t2M|j7O_>3l37m!)<k0SGe&9a<LNK&XIE>pN(ga`
zr#<omjAZ5#mJ0CPjj`x|Q4h*g<q6<@Rd98b7<nkDDj$5+*Vn~vMc5v253gsNJPJ-K
z7U8#r+PDlSi!Bcw7FPv&pJ)mdd%1ePF6h7dVvuzw+wmd$A*1yD#nJZx?@z1z^VJnq
zSLNT{|6YcxWg~moazi)SE@0vOqONt3|KRJ~UUt+SG<`7gzvz1RcqsG!e_X3lNfU}9
zrjxXZ*~+1i>1@kNWtSpm%NAqOY&SA7W{R9+wr$HU%Op7^CNY%5Ow3?gTXJT^9Nb&Z
zuB#YVX6EYmviIlyK0d$4<NN(%cmLT3m+N}JU&rSmMI7lLhj1te;Ax!XTs<nN;y7Cc
zJoIl?w8jH!#?Fl96IJ)cXD!c~F1fIM{4bNZlADgF>VB!J`hH!3+Q<{v6KL)T&yjmw
z6%<f3a$@>oGuITvSV@oQrSnnHbeVg9gX#B>Q6L(0!BXX<xG`F;hn$qaB}`761sv<D
zr54aGDnIyLeEremNnHmnqKEFS8{cO>0de;|l-xe-01g<MY}aH%LLy0YhrA~Yqfp(U
zDiLL=+Mh<aDVY@kB-~X5P9it%j|es)vvJ+cFiLXS5ImP(k~`AV*7%rKQrs&EHg4T^
zCaC*r_e<*+Ixqo8d?}bipz{0q4FRhuUCO77OVQAw%Q@F%bQ1;)#0sEz9A)XE;Z;et
zTr*lmM0`aJS8r56K**v#rW0^cvffnJaZXmCiz>^{{fIV5+#8c!?k`YZ1Cc)Ba0s#q
z*E81KoFT`u_3Y@k$S@WTChIfZ0Zad2jJ2~%V2*L+oEY_Lm$Jta*P<4kc(nshZGpZn
zFBqw2djB}m=8~sKJvOQ-A)dN@iPdY{zmL#J!AJ$_l{^_qZJ?4n)N|5=<yDQ~p0fqv
zrr{g8Hw9afz(y5M7fbN3LiMEawI_%4Na8u;B*1CXwNE!bWM2f9@-g8Xx_WQu)pQQP
zj%hm&+A6(d#Fni8IuA#Gry{Uk9fZk2DLD}2G2&{!W$F`}c!_hQn9|zQ)pVseL+|cX
z)|F^BJ>Rt0uC6-mb$570yj$T02a^78;{A<UY^D%h;tfp=p4>bEWB7!FvQ`*QyquTk
zW}8zGUm>=oIhHI-Csu}}zo5k9fB+H`68!gI2j#%MU0Q?wV!{9ufqCQks%F8`I{=sM
ztccoc<=Vq{GNZ@`i`eE>`9T@0`Q4e1P9K>2uC9yU^5+6fHGls9577v|LmOoB`7U!|
zD7FKN&C@7pg7`=s34U?J`oRU5Zob;#Y03f2J5)YEY-DYOr}*Sdx5<pQOaz(9)-}|t
zCiZcGGCg;a?F=%|_^u$d_>8k-+)XdfJO~#_LqyD07kqXj<R1DGOm~Pr5t74@3?1%#
zfMk~|cqYuPs6%{(aAn=Y;)fI(PHe|@83Cud!&0I;mS@Cgol{sFO-^=QNS2-|zx#8r
zmU=y$Mgw;J(s}u^`eU_wREO0^G!JkqpxZ&=?LuH4CN2Si19of&7AT6GEK&qr+HTiB
zwK^ELK-uxmp+DGu+fjPQqa4w26E@ane7Ht>-?Kjc<#tGobR3dmeGc(SEUb>6WBbt_
z<wMA@y|qq-ZyA=p;O@hXciDxw->ai7eO?ZYfA<Z9Q}5Va^ziJOjP4QJ)>WWLJ3^Mo
zf4*8}bmuxdEAM|s&wb5meJ-w7r@0H3-mSe9xfGm?T$%pZd!Rj>@2+Ly`UtmvAfVoS
zCD2FY(gc_TIQt<D?+7dX8NwIDm6w?ZACH;z#D<#%TV;_|%UV3zr?x-#=~j+hwkgzZ
z7eaT1TuL90Qf<aX6jL^p+c!0&GqKD$6!HAJ3@sVFjnc(Lg8G7-ZOFK2iiOot_Q&)$
zaP?Tk(MT7*ZAR8zCAZY2py<qt?Kaylhs{r44U{jmvFLfly;=aI^3*2v02_+b++qh(
zINS<ClTfk^D3X@V>^Sp9SerGsA%rcTim4^a>$DZ@xG?rw2ECz;id$h9Q0>#5{1C#?
zZtDrVk}ETrZhmg3eB;a7w}+fhe7yjjQX2ssc}Vjs2=lYcMp>Q0a&{v(H6yDvju|EA
z>M}YSh-&~did6$oMc^Qe{komx?C^+j@CCrben2$Jgu?B2q>Y6VMvUIY*W;T>4__6;
z3$;{3N;`;-Cxz#v$-<{qFNn!P6M-$>k&!OuCbO5-u10r>J&^uJvL2HtYXO0&#Vw5)
zS2?-E*<f5UlzM*0gAt#)dv~uzT~j#a7D;{1j_&ZKB5xbdU0(1h1g^;xoI^eQH5WvN
z`-bGC2}6}5^8{9}u(oO>uML}u1;>?yCOx+Xkob&(T9{$k%yMXh1+yli!9@>QXA+&y
zr6V7|?XcSm@9|idMP251PiiVVtqoo)24&hxZ&{Dp#8kDU1u1^vKsLr5S)JLNvCM1o
zRQTVUs#`_URm>d-CFb%>iz>YKIYo~_qX5e=n)Xe5$-<Efm+i=_g3}|;zm*>A&VN4+
zu?qx0D4;aUd%?ymq#||<*@PU(PNu9<L#|28cBsK93d&-&|8qo`Xs06Um&TSdN=0Ic
zWio86INH6Xx9xw+ZOt1DG9EO|nA8==o{05*7C-50x}Nave@#%fYEO}{Ee_-KbMT6^
zG}XfS;JC>fO_g4^^++-4Ng;xUWXJf%PX1mekw6QJm{-hLU)64X+06P#dGYYzGC^Bd
zRB@SIR(wIBL<+{o{l0G0tva*Nf3J)K_&Iy{F-s!E!d#%znRW&OvMc<e2+hq}C>j?2
zTk{;Z#Q$O~LG$@T!i7N@>^Su~*{c9?xAG(-yGP{W(C+Em4#ogysg+8{i^U~DKe=hR
z(Iq32i<}F^wG^;(ZNK@hNsI8;pZ{np^mDKc;I%m=ht_+SG6zZy7z4YY={Epa0|3n^
z)KvVV+Sze$!7a7BMN?Hi!xvObqa(y79*Gqpi=9F|eX6>`O>0{9#zG=4T(J2qWYNQ(
zq(X@n`wUcwL1eX|mz&kI>G}S<G9*98qNL&Uz<~M)=ESDa80gOavuAso5rYP|7RJRd
zw|C!`p4lr7ev|hf7;0;-@;A(mJpQ)|+C*~s!0Q_0WE+=-%*(Li2p$qYIpdP0lUM-j
zhF4Mb24hb~K6r#$-1Mo)Fb&r4+xto+$$N35;O<W~T8z~B7^O3_6kgvlIMQp>Pz}fA
zsK3H`&>CeTmIumCE(TciP%l(nf%U>AmzgB_MC6$GsC<gRs5*(-KUZ*o&D(55dblN%
z*AHUddYpvyHTOPFIL0;cm)pPT9k|XKU|xc|cu088%Ht+ipCllt!!(6z2h_nG$>%*{
zkWOQ93QjzLA-=2R=lkwe>tpF6ADspd?J=Kw>5=!^Pq%6^6{$9ptrJ%4wKev_bJdWq
zod5shJ8~^Z<Gxp$)T!1o8Jb(dKmvzCWZB|vRZ@MHlN#uQO~u6?aV{IMYrqS`q7GpN
z^1Z|+m_F5-z&v>kLv>ovIc-Mt;g@xXKeu}Znr=sJE<SCqP@P=1Tc?qXoMmGUHOc^Z
zJ>mEt63PS_go(Ydo=2~8)JGuq#Hguq(yd5dth2BA^MIiP%4*0a@iV|PGL?S}GLD4h
zSI6jAqh1+m$40*Tz`*oxVecKU>kJo+-+_`kn<XLx-{vCa21Os=#SGRIfIKi;U$6#q
zRp`K%U56FRxv^^FMa`)dQ53^IYKHj@1?i^1p*tj}ZTi)zmSfMJ3s7s-Xhda%<L_6f
z$l#XDpaq`*-@0i2*;ar|4e|{cs%JUzpHOuQd#<o1G_uzK3NL2R8i{DqJJ`Uo=zLwQ
zATMIfHal8^+l>MolgKabb$c1va|w2Sq;K11^oS?3M~A>6KE%!`XreSEP)k#QLH_|9
zjs_z@8P}Q`H%_Gq`Ibq7EuXc%KMf%%R6Yx@7u!|ufUnQkVD}LV5II7dLN=xOcyV<9
zu%6i1<$SW(|J6EjaQ5l!P}=1MSSUPpH$0f38m@WFr4dklO#}5Tk7TLg%+xX_6^oZH
z;ZNx?&v8LhzbA}q_%bB)@fk+(QIrV$Wf{$~ZF9$+abp&-2ANKO;_p*3?fAFYq4mP|
z3sjAA!aoJc2vts5A;HFm0w=DNGTNnwJI<s2<#M(u(-M)wXIt4!H5i?hthiC6UX9x4
z=2DFv8m@(D>{VjNu7RxL!+K2x*S0y2|A!2b1W#$ew9v$ZGEA?PoH#y(Ml@H?>%Lwl
z5Z|gdgACtT4nXlC2m9tTI^^DQbZ6Hq#SGU2h<kjEeC!WUH8K7%2pzUJN&P*;DA#l}
zomS{;SEw_s_W(+g`&{I>ZV2&MRS&)k@0C>6EzS&B!GA<$Ib-{CMl$Y|tbTm75C%2Y
ztuH374t-r#TYIL|+V<s4-FceswN3o=Z-tDE(H{wax8S-1aL;dJzVPottQqk=hFPM-
zW|!TNrCS@!ExW@~Hz`iHk!opjvw#;7taTlB7)k9WuiGT@Atl-l1XJ{Vf=%2G%A*a&
z+`a{=vZma>4;H>&fD!i*&%=X~*%x3G0_m~eN~SYjOuj{YVZ>hR96U(utUYJ+OZC9(
zgoh)NEhP$f|98#DqH31#?AC_8GMMafPm6jM@-wa&^!>SeWZPFdvrsAhU*bLY{U-?d
zpslj#5xns$0GVHULq$EyY84V{qj}(Q90g${dkrR(!7{=~(tB8;(G?AD?NL+Yc}R0I
zsUkB<Z<AkFMV(uH<Sk);wg2r0KCo4-+#VL~^0&>#`-GSON4i?`2mA(TLhHA)U})qi
zq>>XMU%eWdCpcQlxefIA)S(hqhrA`I+r<vuJ6Q7Qu)L1o(GHwJYofT?J~rfB(LiHy
z@SOohpwB)0byr2r>G3VKCRv3#GZBUC`uosdxhGvBJ!r>wu=?&f{$3feW2C1_xDsD6
z>UA}uRktLsYcR|BMTotxiWU{SuDtJXVeip!1KXuh!LQ5j>wKDKwF?)QvI9vH2Y9IQ
z*{ITbMM~=pqN&R^wMh+XUGhstcvWI4%NQH;M-I(RRC2e^?(E%P?3N?Q(fg&!!N8~a
z$0yDoo`T6#(i@%6ZU60uJ9zjKQ&lwH=mQ;8jq*ImvPmU(WE9bqIrGbQrk{+v4q_5T
zJf)-FgD$?qBbs69;<oKRl+^H4gDKCB%VBhVs`u6E*XgSV@BG-|7GgH!*EdkFr2_@K
z&Ki7>U6!8mkI7Djas6kl1$YN{A<Ke!467?)8oy!c${=Wx4M3a9^mHc){?j8*7pJlm
zcz=ClX=Ru-$pa~f<<~TK@r6&Q9|jt!dG(=Na@m0)yLGz2YMFy=Z5_9S*K1D>pb#i{
zH(N_>s$j=cv|Nmt7O+-y*`z*+M2Og{Fm^L>1#>kBpo=BptqHZE#lwyj-6uzlJZyd|
zk@&m~l62jyoR#=#It?zLAizzQy(9Jul@4gL+R&kqy+~k&!}}L(Wgf?JQKCE-b8VpL
zI<w`%B!>?Y2C>P<GTGU^h(?f=xSr)BgPG^@d^t9=V#AR)qsCQ6N|P%!)e&jy2_NUJ
z<H)@Sm9V*w`4x_vi(mtDF?MiBkDzSPWZF(RoyOSmc+PQfs3k987&bbFfYCHPf7Ik^
zot&_iCb3MaFgq?fQC?kMT?S|D=)JGMx&63uYB_+o+t~HJ+)CkiE_j^%p!r>}m}!E2
z0++y9aiWV;JxV#*&N9NPT(Q`Kpur{WE=1-5<fbI8N<m&aFp8VC(=Ufl8Bmpyt4UEs
zqQ}yG=~Zt|^HYDXTDCyF<sXs#`NCn?Qf-hqWGUkI&Em^;sEF!|kXUvzHzEBmh-=kO
zk1>&W*1jkGYPHc%sQ>AsMS}+m`UeIyY2CCxeyF);b!`#<$-Q^`$_`E5CytK6cvquZ
z!fqSGUlOsOiBO4rDhEpgxbLwKAhO;d@^#d!A{sJ!UJ#P}O(7#n<Amjw*KvJDd85mU
zTEBpX+~!D%Sb9sayR)K>AigTN$WhRI&2*aw*X<fJC)Rd`-6(XA%C{IB9I1NJf1SO%
z^M5tM^J5{+Pw)vIviZF6K9vhiTG=WB1sbjim@N`f9q}0HhPee|D>P8M=P@kz^;AqH
zgrNUwX}s-=<%%PGA`;Gbj$5ET3Fc-S-=9i2)oDF>xztug`?W&#?z*<h76pgJT+qmo
zQI;_{O_3m!tRlJPGGJ-JpEzZ$JH!=v7>=Fl9l82+@NDx#EJ7r(=$x4dJ^Az2-?mSe
z5It%;>7^!4G&gGgZT;)ydj!lbMLD3k!&;?w(3Iguuz~!9v_cJ{_CVixqzsxq1zEll
zOZmGj9tNp-f1BE|I_)+Os~&TGL+9)IdA&UxeZRi2vWm8-kw2cn?j3l)k1#SeWUO8_
zhA$mMMDjpREnDHy@1(p`*XC?3kM{Kxlp*XUvKIES(c#Z~t*h)^h)6_i_yoPtd}9~S
z#v)$Q@=aS<asSJAclRZoa86!;@0tFeeL)^f8Sc)96?`?EbWi3YY{!sLLX%aAJd&h~
z?Rd8$jXBH>s2k87ag)(|4*ol_zflK;cY@7yp*o~!n5x)oc>>t&(@~s>kOecQy0ni`
z4+mNo=LUpdx^DgoQUd%FbAu&Lmm+Q)N%;%hRP%_XjeTt5u41mGA|GGi23QDsuwJNN
zd$fd+>)n0H&XmR;rz{*Znal|&ID9U5)WKUam`kVSp0=pY8<_TdD>=Md=hHv4s?mPP
zm@r_A;jkJ^AOgfHt=nvbG>_{n0&F$NeN{3c1haJv*v&T*7pv`2Z_rXls=y)7d97k%
z=a?vaPq(f0dAF_MSzG?DD7h?o?Pu!Ok==i)ozAniJQ}3^u>fB|*HnWlED?fNI5C!}
z2l}m~Snevp7N#o{^^+=*`D*M8gnB*Z*L5LIFCd~nSNOS|Nw4=wtD?$lbgjM&>DJ9+
z4IOtsHmPvh>oAe7yK~=yxjK0AS$OhPR(<vC_#V}kJsO@c&|?K9hz)||?8RdlI%%x0
z7`iW5U$!ybWbB2*gDX)Rz@|}}OeRx!)DL~MYHLmHsk0+!J^S)cqecdAd(Za2-K`_1
ztIZ-*RQylk8uoe44dOxp0e?eT=3>MAx>{3MYlj|l*Ok*#)ns&;wF7{WF;A2;uRT%{
zJg6@Ksc9pR38^`Dxm|R;bE+iV%>A;><R$CC$_`%Mb?v$R^AwOp4)EMj>SJK9-qY-2
zt|@0<Y|+~!_FwU4%KDP?Ih6ClWg+SwYw?R$mAwfB3H1eDP_`w47Y9Vp_m;fNdQA0-
z*x|0LZ+fWhPnh0G)n>O<LHM6s6JemVFH=@f&*89_vq<WL9r#W^^{K83VVuCa4PQ@{
zSjJj24HeR*B{*L}Ugj4(Xx2fZ+r9GAjnac0$MLC&(XAOCUvz7+{5m;q?thtI5W2w`
z+_jk-M=U3+SJRcQfLaqaD$N&Q7vvLkMOv(aU_4s%qvUu(IBF;h1msD)U~P3*US;yd
zGVqJ1q)a=7cz9)<5*;ba9{R5HJ-_4eWa&oec22Zn^r_y1IESKy5=;CO2Jhw-ObRms
z)$2S|`<UjMhk!kWVk-i1YR({vxeJGJBP?9D6cjQuITM5x6fC{o#WcYc-Rx*yzQ*1}
znH5;nZ2j1AkhAw4r*KWSpX1!9^arTrLjM_%YxYAVe8jDodO_|JDSNS3baV*NodN?1
z2vIK$my;LM1TNhn&O79^sg=WnJCNBFo9UXVRihsO2yrNDdN1+hv!@}nlTT7kWG^@u
zxVh(}Z~vbQG|G9D`~l(jS&n~Bov7ASl7DFAm+_y~J`Z9Cac@SPdTi8Y+X2%1OuxNd
zf5q6I|H*g1o%mIvJo)Hah<SfZDJMX{dg_+6N@wB@8Y_QS2)X;S)@smwm6$3#Zt(Lf
zYMz7y)DJphH40c2Fap1&nPMTl$7wkaM(=rFY*!BI)&!95gf92o^x!(P=s$mIC%e9Y
zTv;$)fcPpy0e-jyve+!rEY}hHwx-@zf7?DSO!kL^K^&3v#PA7UfRdA2VUS=GdZGJ{
zeBhL_<7}JF1Yggn)ieDJ7`Qo&Tw0X+=UE_kj-Zegp%h(+VOJ1OMS5!ZRR1pJrB2%t
zoqF^2&$u4{iKbJHjyKaynB88HtQ&H|;<0LJQtkdn6#uvV5+CZ^k-OJIH<w$j`ufzF
z6WVIV|7ehc_T&8A<+GMI1+xHJW~frXODOxDQg$RILgk~@LO6*6Q~WQkHe|>C255n|
zF-Y>(<XZBOFpj&t)>_6{LygE@hYHGbXp6h0XWMw>a=XM!f4AG!?J42!-J+cQ^WC0b
z=hb9aL~EXte;_786GCIhlA$9Dnu-;!cCld04w0_Ua0pnye5SBN%}2tx+O1a#86dAx
zfcWQ?NErWm-L7}6$%z`?H;op(eH)$mjp~OtZ!MnbjJu9o!UZ?i#MB;Dt!1@TwXu51
z<@avbabED^{Y^Tj$)?P62;qjaXYQB))WOmLQbWyXj$@wV1r2U!FTE6AXL_RYWOTuS
z^dB2n&)j)?`fUH%V+*hiP-Ob!66sTR6RB4yBfXHuN-GEr!W5xFDLELpW2Z9@VZKA|
zI*Qem=`#9K=9fUv)}w&sv~Y=(X0j#4iH5r%f9GfAje093`9<q`s;=7Kkx;A3_bt%a
zFyWbFvf1^{_?Lh}^AMAl<9*Wd3-{s_(iJ1%9erVlaErA7u}psaAbTb6f`XvKXz_1z
zJ}H0Y^E&A7N<llnZrh(q3F9~ajWuT1$>~DO(OWqPDf~;!N@;~r5$=#w<dNcU1L7ia
zm{5^PiOc@79UK$}iHP;RJ5l$|4tn*}ZU}uG<P{nBI={W~!u^)Q)PKFxy*6cd-01wC
zzd;;E4X<F){ByDxLk%ECoR**pX0_ZN9{jQ`Y=G^?Ig5>fth~=(S4~PDdRMlAxgknO
z3VRiCurna}2e(&Nr#r@HtaNW!@c*vZ)iivc_@}FS-9c3(>kq+pO{GxwQ)Jb3fg?!1
zUcEg}e(l6}FlpT`#x#4Weg$A^HhE!Lsy$;yhM%=AG4{-4?eglr&;j7TrVkz~MvNn>
z2Wq{%*wiOUe81giwb-ZUNa|JI$}iBxoQGpDQsJw%x@4A&R5}W>XW13T4J9@s<Kb4P
zdDiCd-MgH>3k33w-omzuZZL$)n|T-q5;QT4e<x{?<EJpEP0Di3?|=}2LBUgqQ(vgR
zM_ge53;o1(7YhfmnXA0JDo`QS4N51j3@3jv>aw;Y7iFbbfVI2d@o2JWwkKWb=u#Bz
za@(}8`H^*AW9N@xwCA~xn8!t2*=a;wn9cwi?Mu#h5?U}sP7bLxM4Ia<2BghsU<y5i
zcloicu6tBHZi&?8=N0C2Ln6YBG8Y$>oX$Ej^F1R>wdo2wEP!8`eF*OCx6=Q6FwY{X
z*Zr+>XX<JS*|LY-*&8rzC@-X|)H{%VB?~bIfHlTza3D*vjo9mk{q3<FMRdUNH_XFd
zRNhfUS?M`7nQZ^p7>qqS!vcl07Tu_k((N`sgZN?0e?e~KA|7T(Qs!v5Fi#=%YY#R3
zhDsH}SQi6QBR$4mLWr^BC7N_`<CxY(H2<~e-l}9f_nlLXk$-jjo3&jA^SAAjrH?mt
zhnsFFYSBJD@=l?VSN)=`>gXiPa=1@i($7T~4YK;lPlNkLx+5HBLv$tx$j=|bD=XqA
zErTwN*ZN+$7QQvven-ELZ)>QNV(W%`ULf4{!AVms*uroc@|dVm1*ikCh@zJzOfpuk
z`WAm9G<4Q|+;ZVseoHaKshMr0rYN|}ga1X9+%l5Hft~x7;(#!vcX#*fy^=3uMwb-0
z9@hHgbDjJdI_v-Foz_lan*!CQ%@BxjO@UCxr7VPgUgCNTOiC;j<fdLgXU;}jHT!P>
zY>C|3sJYQZc(bB)8MT@oAHMa@DYq-~B0jBz?)kIZSj&LFVvVA_3=BH=tsvvN2{8N8
zu<C_Rb<~DE3hsorYUhY_CCd!^D9aZjujf8%9q+CU;V}T2-;+?wMjfC|Ty}Zd^ck?t
zTejQ?2gzeaOQVtFU`7Xwu+N_zu8L%~jp>g%p3p%=|6SD?9LoNotT{{YLt<vx@AU7V
zH?M69z4Z~yqDDk8-NW_f>1W?zp)YX5H%u^)NEYg=10N2XT;L?vMmaQktiev!`YD!J
zpLh4Aa6~36N~>KHN@h&k>>Be^ewf`ca*wB%NeMO(S<Jl9`3N1)qF(rU7OcOBWl-$*
zdV)Bn9nTok77_Uzu`e%Xa3eC6Oyc1i>gCawTgBN+$`TZd(~D@1jrnDffltx7gVAzY
ziYjW4?>_!L5Pu(>Ltv5>BA<eW1z&0b54PoQv3f672Pms=+HD8Oo~TO^TF~TW!cCmf
zb=n;=6+UpJdEfJPTPv#x|95-Bb!*&>k9CA)UYp#UaQsPm`PU%|E&LQ&HbllYOUFOL
zXMKrfsvO3o<t{~v8e#&w!U5Q{_2IDIiI{cSl35Qdl!I4fOZa=~N74M8=q<%XBj&rx
zFisv3bDeSf(uV0&46+D<s-77$2k|`<A`pf%GyYityy0RNuH)C_^#1qwGHumv)=PX3
zdYmVdE@FBB#gydiS2ApL!heh-=f=-_EnWbZyEheV{@MP1YIQ-1ZL9WM?374sn4e3C
zx8WDox^9V6tZGk-E7D@$r>GD74bOf9EOf}|LD*&$h&lM#H##4kilIm%kT0qz*lt}I
z;l^C;XY@3usBFhvfWaI$9roMiWREox>^Kp`vh1E=F4;D!Q*T=e+@kZ`9_%0TuAmtB
zVi(`-w(xB=@Fgc-)*|PVu(%d{srF~BLu^F?PV`73s-J^d5M2h)D3S6SDpVV{C?Ryl
zgfq$&gfu>>uSFS(Y*Sw|>V8w7kM%U08={0bd?}VGqAcUpdeYfh%Y(exW))dv3fdUY
z4K2dBUn5>Q=9v!}2fszb1w8pzgpoV=hWWY1zRy~1L@Wn(+#L$n&ssJfAJoIzpE5Kz
z*|G#mc|xNHW=))kQ|YQtqs^RJDnbNbjM+qWV7_mI5}>dVVt0p=Lc~5xZl>L6zUfV1
z75>*VWI`zRb;|-*w}JQ!XU`%==<AAhwRJ&o2i1Nbv3&;CXY)N<{4@UZ7-AfG_2Y}#
zOLLNy{X-nizn_)g`?_yab&S)iW20^FsxBIc)4h6({u+M3*pgU#X#sv&%IDQPk^73l
z8vY?UFxrXo9QEfSmSB0$zG>uQS@$HxtrpeeiU9N=(C2qgPWRf-*FSmQDQh=SM(w^l
zdA{miMDm`8hgZBH?u8{d?DZEb*!32WK{(i#>|`(nUd8G(z-oLD_KRpM`PJJG7&;A-
zuBn?HzCHLh_o0@%s8O*Zb<3og|5m2m1!VGFd(WYYuX8#}oewJeTe{r0Iaxg+jG8t{
zk>K}g13;&M>bJ)dY?nfKz4p6D!;X0g3C<xQD7}fbDYGHt@2=n9jIh>I2xHX`B`%e=
z#oh7fbk^ZTrT1^!J$!n=;^R-+pGKg6iek%PlKqrD@k!2>L_jd}yfy@iVBBRcTN)AH
z`ax}^@_CfZ+L|;G1`6jibLZ~xIwN#u;ut<T_)g^7X1m5_TC>Tu%4A}&0MvA>-{s}L
zl>bDKl5Po+;MRFE3UL{0J(alJmYmF8D%j|Ud3yt1&Pw43bk@MM9N@y<=SO7`y*r_6
z-h088yJ{F66s__ZykY&06aI*5AU!jZy&fQXcK4na02~Q!NwpL?B<xk;%gj^`pm&uE
z2$EmWs#}x;n6!|okI-*0?Gz#2FXk@B2v#FRh;3$L=GKDlX;UnG?^TspN8ujNq2~R0
z&&$M2m~gqYCAi0AJm8>~CR)QM%X+7<Er9^%`=M2`sY$5AbOKZ2baAT|a}(MuCNE($
zQIh<vP<}~#k<4uI$HuXMLa-5xEFJ+R2;Tl&_xqzura~e@0*l<Q75GU;jg%c*bv}vz
zqf56y0}JGOB3m}V!z^1TEa9lCF+<g1ysg?p44WSV+<_|TNh>X_Xf<b~yl^DPRU~vz
zRp?pP&w1UEXC2?lE14b+v+T49uRDH}Z|!=ji=JrY6XtUjwm$D+S4GDhhLi@HpV%@k
z*-#iP?MrS|=!m%MnEI%Wh&JGTv|Am(WA1;WX3JX>$p*DVB>(;X=N|f_ArA4p>6Fh}
zroD`Ok$;EJ$c2={f;XhF-<qmIiig(|MRxO2x~beJK+G|nf9y9XcRWG0hoKrGB?v5;
z?pP+e35u>8E*4l-;~VwYsCUfv$#7yK%lrxYQ~UJPa*X~R=bMg-DT43Vi6HyUdmI0r
z5M-p!#r@Tj?s->BeH#v9GFg_yE|aPaTa{GIPUXt_^9@MXc8sytg-yj|e}%Xv!N!O&
z<ks^5rCi6?Gu|IX-LuPhQum_a2%N}{pUwDY?$Q^N%|2D=DhEr|&Y?qOiH!J%o>mam
zo-E18&&>ZMa8;(|1O~hx|H$O>-@4M@eTo|T=q%jDdNm@vJTR68N_Cn3FtU#I63Tvo
z@;flD0>JoWMU|LfG~&1-{hWfn?kw{(njZfHda))XaFtIf%qf>l#yx7x9X>glUTpW)
z@ksXOs*aqWoen>%-eLONKJu@0Y&VS7EL1z$^|mw8zLZ9|ZPNmqH-KqsYF7Bi@)+8U
zjsvqP=i9@j@pM^Bo5IgZEU9}tSMRa%4C8~Y=_`Yg3sq&A2hx<UhxLv`oz^1%I;u4*
z?DLep;!T*TPOxAIR{lyUydw7{afs%yXkA;29?rWNS<(|f!LkHTr>PhlyRi@(TJajb
zRjRr5m6;`%Eb7YBKDdQfMHLzy1nupIaa^?tYzh}9R95h-xN`5t=mSwvK^rpgF$kWy
z&jt6k-rijMJgxa;`O~zhbWhutfmB-XQzsCuUU@TVA31~4KZ`F3hwbPli2X0|CT<zA
zfn<u!)|0;w(qNUu+T1x|vpKfWWg8ZHp&&Ths@>W5Ax05L&NPaG?=aH(>y3>w?DJrT
zb%+u0UC$30ie_=-#Vq>6V+%ApVD@1{LB1x=!4F?WM&_6>4f*>IoN`x-Z9qZ%Ihdt)
z0~gzpFwsh==iR_T|GyY1SGd+om#F`R+`FN;HAn-+@!F#baFjAVfjAFZMD-`B&jkV!
zXHRGN#3sMGr|sdU(L}Mm%eu~-uBmBV?rQ9&HhTWQ6*O#!wCDE1!3YDF4sv;qdR31?
zIH6z6>Hx(Y5{PNG3RWQtD#1N-?*aDmS3_h2wO0+wFU>5bneTd1<L>L;rY2sH?L9>q
zH`~~*D_j{oH+cKn6@{LY8=}n3VLaBJtM3uYx}mmVmE_QT{L>Kt^TgX(yB+PkWIJUr
zLN-wcTziB?&V6`Ii*gVBrUG3!*Bu*PNZs|)Op{evl{;E}Xx0clTtuy^46&=YPkikF
zIUZkfN3{bGj^=DSeL1VsXDS8mji+)SmO?{(MRPiFlT!jS(U2bG>qg4TigXk&Djc4B
z^{y;Gg+_{R&r6T9=Ia)JcSr1bG^&_lwiBR~8hz{|t_RECm~R;=_5R!5)UK8jlcfab
zbHzcBf#THRI*s(Tj2yKE@2roT`CVRBJbwTzQCVg?r$ymcaw)%_>ns`ixnsi1W1F9N
zff{4i*GQ4W#J*klGDD<8nSe=E-}y0ynjGh8R7t4X7zq?fb!k0<h3${0w%h9IHcF&v
z;U(<DHI9?zg%nXKuzwSB>h1459KPCJ4TyV4LVMrwbE|H?ATtEc?E1%S#BIPs)+!#O
z#LW>J>2XAT@A}A@_c4ME%_ynS#UZ6(aC66{3!PzE2Twpw<-4{!yFcI$Joc)dOt5IW
z6IB#cWvs0BNOay)+!DZ}-Y33Gf*PGolOp?x*m~ahe$^#hyaVrK^DTs8Vxs>x>;_5z
zeOBasf-T8-bWjVKy<SU}=^cMBdbM0nUh@Z^WI%JV=sY}F{3tks|Msf=y^}#1M{Ykj
z?Gf;J%w@9{i0>?;K=}Y8Do1=3-XN`LZGv5k2e5*<3hoQu&1?s(KZjO@I{_}w-Pn(h
z`O51&n;d&?%(UuZnO>(4r{A)T-Zp!f-(%Z9X67a`dDWDzAd&n!DqguZWN(0GbgvJb
zXw^KP$(3DSO+-8>04LSLv{n1@HXjc$d){u;0b`9RtTlMnkaQ)ceFSMrFOs$vjF{`S
zRe%WTj>F;9TnY8O;=NB-U`>}@i0{eH()}G3<@rI?r*(d2*Z+$wlTvyq$^-CASRl6l
zn0#T_nT_-}3ANP+k<pL7ZFXS1E?hYcOI8ys0o^p;Bwc)y55)n;%h+W#=!1JSN$APb
zQ!A+@(aV(*`y%<k!Gq63t~UE2y*fzG{71;08mGdWf|y#rv({bpCEl7%!s_KxC}|7@
z7T9~aLrg8mgsg2wtr}TND?9mgv!Hv~)=_Q*T}J44?jXl*yPN-Og|+?G!O_VmGke{-
zW6F<!c6j$A0Tjh{7vM|os@B8ohaE_W0f1b>_+#e~+0=wIwVGW|Sj*5A3pRH#L-WU^
z$X$k^LWg5ZHy)XrtSfYT6yz{Sgt|SXFsP^cn=8^@S|z@*yf$^3mik3_&kOQT$y)u$
z>r^<b#3X03e5yjjQAGewiO&B-4pNbnd78R(36o<_Aph}EEwyY-_^ZGC73b;<d^>j!
z5X31KBFD^h8(h}5G0(_&$+#nW<Zcethn-kU4MjtnSVV54&p_TUUyWw3zq9|%j8io6
zup@ueJ<_(s-lF`;nS0%f!xF!i5nt2QM(^<@DJnbGA6$N*+E6Ixj@N@5ui6EnPl!;1
zDVd=BAtRqAO>9AC#U`$4Fj_pLj?SY5OWtJ_k9E(brZ<_MnPhIbRzyV`L*=eCch(ZV
zGUaP6{B{@xvr7kKs{Ek2<3Q=(4Z|%f4cWb{tPTP+TGez_l3x=+rL8h{Y|0DC@yHFj
zIy?7!TiwLJP3&*yjhsB|u|1NNbs^|U|DgryJMe`YiO8|3zK{6QOjIa4h`(}7PZ`I}
znAZ?;^30cj8?HHZN8HXJiP<aogcTz`S(6D0)ypGgg~I|XK1gv#hWTAK?Vlj{KItwE
zsoj4qmlo-fpx(YfJ^DtcpNqIp_4$f~mC}i3l>^@5PePCLWx}OQe-vq}J*gn+Nlp)7
z$*rR5BT2<rfp6uT#f1<xW=ed&c~e>uZROp$eTHVXVh-24IJF;LR2MrOAtMf70Yt-d
zcKv$xFh_j?<ibW!$YAN4KC!-CpgzE^k01m55!?ndz=`*Qw4NLT7@0&qJuZ6><}D|t
zn(MbYf7=pO!dTYP=s0_eX&o&~V!FPs7~EdgF~im#H7QLg8SEXY{vCK;1;Zv!$9%FA
z!WF`m*IBzx=!^xb^{tc!*ac|q4KzX*A`3c_wc)~*Bjn{U!B<Qr`G3`+-aZoe7!$f9
zd--`{*75{js<U*(nX#U#%Cg|OuGG5jVk3^8COb{yUmSITN8LvpaQ%PvuLtJ~oTV^e
z5(0GM8k-8Pu-+VeBPJC~%X`LK5ebF!lLh~=kIpT1l$>HX3>?`R?h@u#pk!PynyN_+
zm2<ElGxH8{wqx6P_fXRg%mDY>C1Nc}Z(7M+dY$biMRn8F20C~mBrAg2g=;|m^e=Y$
z`+dZ}=H*&K@g-5v4TM0jshVedmCZH@*MdYjdEq?C13R|jZhr3{*(*_FF|P`X?-%*Q
zM)GE^*m1SuER~3)N=9=%JIV5O$<4UI-cXP7bbRximH)8!_r&&m=wTQ0+4UPq+eszX
zEMv7#`{m1zCqqhRe2Ho1jv2GxWHbD?hU<RKcbYf|w3*jOd{Y=Ry1M<w_cr_1xc$2P
zr)N5!ssQ4;c%$ZbGI+4=QZi!2I~mo)>ryk^M!hDX@#hg*PK$yeFlO#U2{(q&<r&*3
zqeTyomTZZ)vuyAAwlm#>b|<K6HilSnY=Inz3?2WSa<!M^OGxmAUE%L$&nwv7P&ukM
z!#EbS5HS*JDQhf9VJ;f-Sga1hZp)-`lK0Brvv>B?`UMsT8L>z`wtWCkP0^S(nw+Zu
zV23hAyYO()$gT>L?7Pv_%L^Ld)`{65f!u4QAgc}fhaz6kZ<6_>dQPfz74ATT;x~-A
zgh7!Bp*2z;uYO{_6nlkyRB#jRghs-f{H$Z-<v~WcIdUZT0<AFkF!4kWZ@R?3Y4D2m
z-;F=%d}{iyVE4i&&(eY(UYa->5SsSPd*M*Q?scJ`PUy_xOd!w1G=pdiv=+Jz=HxQi
zmtG_;m0%*#+(n^r9KMMej9rnD%o!1?BYl>44g<@))>YxVH&7(Of7?`-omb$$Use38
zU&-Ik`3##tE!-Di9YZ|qOY(RKN*QWZ8=miwaho{Hm=Uqce_{3D<*7)kLIQo?u-0P~
zH-tZxjGMj;e9(&(AL`0OlsQ93?;|T}LP_z8&U+vZ=)N)9E5v25|H}d`{E_qgw_v~%
z`+=yWiy7*lsbaHUdYMEdO<P-v?TuWv!XW-5jHaGG?S5=MW9sXn&p6l^ImuCQmW@>+
zXE!@mB{&~_NCiGJD;<O)@_R?^tBl&T*hW$$Jbgm0+Ro~sz&PlK`N31UM<Yj%NzIg5
zCb;Yvm9AulAhVtw&K^j&lkgTG(=tUYbC?vShNX<vk;K)LzXc$(Cj{sLxO&v~3d%&P
zsauE_d*wle*(RX4y8UNt>PeO*Q!08I=)E8DWzmpO-*DH>q)1n&w;@-BsO~|Oo;Y6d
z$<70FU61{SL?|p9>UN18<9=UJ<#9jA=Y49$D{pc6>E>&NeOP42x3y4lc+KfX+k=jb
zqfkBy_@{3;b6<Om!$(Nkg+zST$^d~t*BK$U&2s!Z7=*u<Pe~$)DUvX0dFgFL1H+RV
zVd|Ab1@a#CmXDaFFUUIHBj}sP@iXN=m~ZRa@FZQ~!*1L@cgYhIbSv4~iO%jI00NZ+
z0fr1QKd{>mu+K}?N4cOl*aMUO{i>aCqQ7IGkG8^Be6IoP$dXXSV;7?4cVQ4I&XGMn
zA|u|)nE16_O)yTWCCQ0><)V{}T(Kmt>#snOP!G6~%#|pxzlPj~7p2yfR>@Q8;x|~R
zXx6d2`2KY^{8`8h8{6Wl*=(t_hPLH5%n4Su(OT?HLc|?53EMozPo9G_@>xq$D-4=4
zRQr`7gclr1dOZw{V?grcJ1jLA*G8fNvzNfb*9Kpeq$kf13||(IZ`e{+QKc*RH5|PG
zMzx;#yQ4f?cPpRrHoLl`VSijFmt;yYD{#-&^(e0qa`9yZmFdexcPnN?Ez&2}BE_d_
z86^*{J#=$-I*uOh&MEZUxnbp*)4pf@{f?c|J-sFSQ0jH^%lFE6SQRw#9BCzYf{wPz
z$E$DQ+E}yd7=Vm(WY1@4MjduXYpsTaNiLgFhk1puo}ay+2<{x~obVrg_3wzv-?EL)
z|IxYNL!%bk9|k~{6K$$(_@DmU0IaeORDIXhu126B99of%P{jB`)ImJJ{u&9q&fh99
zeu*Av5lgIlZt+!PdZzB^s#t|l%C!e05#{2!#=O!em;OylA(q2FIT>0IT|H=4>oB&A
zw;EG`7AT^*$8-&plL(`N4bR}zU&kHPyV2&<@MqJ-U(!vF0)kAvN8zT45DV6Wsm)U`
zl251F4QR&8_OJ14?9~1g4&5E>sb#tBGVTk?LcB+)BOo)cBBU4e)r|fjD>WUtnuDfL
z05gR-hy{e&_Arj_K<|ja4qc?-#k;0VM;~$8Q>wPOR^&tT0X4%^U(vm}N$vy2(;?9d
zVh5p_h;474=O=kL5E6weONAlQzUJm4IeXb?6$0==QsY#D)BxX%J^duJ&!8vNn##D#
z8ELcMb@NMnPdwv4t$JHoeI%p&Xfej|YIAlf7|m$BuJe%t*{Ku`^&w#Zv2RFu7@JW!
z<8NS*Ci1vJTzN;C*5k5^>VYOS;^v?d$1!9$G?AAJ3>h1{U`oa|9F4r1{)i?yUWL5(
zc6=A}w2@6K7<IJCp_xroNMhkSRFkXT0|^~pT9U(Rr0`9t#LD#XF?5q(4~QxqK|B(i
z2}ru){dJZFLnUTy1_@m|;vy_kbQs~pIUg(xp1qwF;Qut;OZdUq<4pyFH&f?7+UnLZ
zIe8vR*{#rq{Nqm7p@T1hrgD)R+=6H<5MP?0vIDsN9n~4N9<~bw``nZgz>ZhN2yE4E
zpyfNIf4JlfZH|+8zRT9np>b~TH}JNyDx!kH&6W<P+rwy{TQ(YQZBD)4T@gZYf1>q4
zi0w|tm)%e;VjiB4&uS{Bjl?Q*FekKGQPAwpmfOV1iObciP^b%7mMwYBGRiIP3Va(Q
z!5__Pj<YK{LRdDua@a)|B>XSW=otI(678&QM90gXSDBPd{;~l7*S7$To2z2i?<LDh
ziHLhvfYMxZcLPA0LkNAKRGA3e4NG~!b*6`mo&pQ4MSyPs*$%R(b?FG$fa_(K$jPg*
zc#&6CRY<`8nrCe@tK;3tXWR0h0OPheQ@3}^_XKE(F~<aa*#^}b{EhUf&I?Z8tTI}Y
z!va<$7Dt-ckfT1|33zW0hDapTXYQFdXK|2o0lGLyG-RYV%;o3hQ%weoO4LW%;^T5!
ztfbP@y<^@Vn!#c6QqO&2L#kGAP{eJjq?=QCR_CkJ!5Pv2ZurXN;OdgMyZ+eZb;0Xj
zx1XFiv;Wc;A|UMYxbu&*-9v3K3yv{ri=i4~f0gnq@~R*ObPgFYgcZzvSU)oKLa_Ud
z=eHHfV=7`}HbAG6wuiT_V8kA$>g5+b9JMcNrADkOi`{;1%a4SiF?>ZeFi0+tB*kYn
z9GA8DD^R7=M@62PI}MF(9NdjsihvSiZi|?whoGDA)q|PxI&;!m1`GeJ1qQTh=wHwr
zGAcQN&gE1iZ<BATUaiWwb#ki?s@g|9j*F$M)s~2<@-NNL0DqpDS)$fO0zna37xiuW
znQG*EvMT`LidvJiSD_J!+;2K={*<ZNZyRlnK7M?&&9wOTsxMAgP2DHVq;<?QRDlL$
zeXOD7WEGsJSXQ%s|ESTuo+qw_tTwW)Z6+qKj<ZZ6h1G#lVq|va)ufFjuepU1A8FrT
z=8{Q?ZsJ22oBa%R2v@y&lk&?>p{$Pm#CSqiPEM&LuEcd%e`cE@v+;mb^29=P)Rx&R
zDr!*k;-RdIirI!pZv2H#*R*Nra;pFCb{i)6e>~`V7xPZ))mBj)5<uy=Y@4rzKO_G?
zGA{K0bZiez*)+cq29^f4wKQG9>k~C8xdycaBt^+aykAUEnk5@z-q#DZg4-Ux9@G<>
zsv=~2FAu(BfY^zzDLv8WVv2Fn_i1`gUfp4J7ekiLPzW}+6?$j2KYjQIr}95=6}*fr
z>mv4-D}6M#SzqB@T!N5FPXQr@?Vq*Goh^}kl^m)R!TM1jc09{;?`#7VxAbQuh(OrB
zviMpEObO3)PEVOi{IT!HLINMsJRSyT90-1cCBGL{y9gF&im^=aWrK83jd0`D`xRLp
z^IN;k{#1cUo1Gu~L<Q2??2$0I6Se3{OFeg`aG;;TZZOyHu@kPwihZ+nuWf9vb&#i;
zdZR0zv%2RlrsM~k-0k8&1Q<lR+B6rU(l$*h%Ls4hBAx+g@sL9tzOWbXV6U-uaZrER
z!`el2oR_3t9_+HFgGojGKg=HLa`t>Ywp2c0)pT3JbVW3OnVY41Ms%KwJ#*)qYJtgj
zO>YRJ6a`UjM8cO|o4+B}=)~+qpNfR#cQlw2yPWsKGSi%S3A-{RG^35>`?UP4+Tmuc
znY`6taE!GH{7r`|BmL9QU2Z=+;I{I%?7Ewy7MsLHXs+s20m@yV%&>w5XY>nl5Se4H
zjS+?@E7gJNLxFKq_*abBuMwS?+LJPkTf?9}65f@aI>cTn^<iA8^?fiZarUHO$LH`C
zA3=M#Z?v!Is$?Smw&JDQae-zF-bO*r0N0BkBHv)IuBAJ`;(iZfdYHAO$G@YVvXo`R
z&{af;*{eq*l=Qq26P=q(Lpf>Xs7Vv=(P(wvL{`S1Z9c;iXG8Z=2G{#d?XLXMxk2FQ
zADKrL&jG`ePeeS4y}oh>wP9teG8#OmzhPQpt5G+(x46|T*l{oc<uwV+uyeH1VWGaA
z#!bvx*R9qsVbpkb*m8{f9-pL8C4ZN4uGyE%vyS~q!oIdGaXQ|^v?`*>h|!QGeT1?S
zDRSJ6f>}CDM9GOuSUub?;GMi5f>;VeqlMt>L5iUmIvb)MO^yY(SXK;RudQsmJULBY
zI@Z%3G`PC$LMP=6>YBt)+8*}G;n<T5Nw?oYab)}rxh6<k{R|F0VY&-K!g~01-vYm}
zny5CkQU(AHl>kB?YZ1DFST9`Kiqtf_EWtWZt9q%fvpYB<E>rp)=9_K$22HEVYf%uF
zjb>ct7x;~sZ*9|4azb}WgFc?^XT%=rsYu<fEf&fY9BdnDd^Jjdo)6_Hnb>~SarGu_
z1oa+zEkp_qBAf*H`5zl7hR_Uu4@4+(0%f(ctAe=BpW*E*<RjTP%oAk&C06d)_>oRK
z?#j`O3)y$`{d((p!9HtrKD9t=MjX>ofjqq*Tb3c%0Q9PhU(QhaJ(OYCl@cm(Arus3
zvAGV$M<ZSk^_XnAP#-fE-E&!vF6NeE2OIr2KIz{6#h9bsbcWy9J_)NP_vN|L;T~_v
zk-UH?fRYl`W{`>(tpa{&5W8=a%wc>=<pRVuJ<yXnK$q+~h_w~FAyJJm*+~FLaK<hu
z>zCu!4D)wnaKsgv<mcp3v)6ac2otM4gCcb@?Q^c=k5qT(Mw!J`L<R(d`)Q+ASoVsp
zk}!fX=IvK!z`vKGa3^@xoYwy#t0ZjVc=rd{fm>+tpXcLl2E9&hz3#W)8vf)q86DdW
z2>03M!Q}`qb(~Bm^-)CKENcY6qp%9mX(q38S;w$!irns4cgx{r9;3Lyd=qLGUk4(e
zR0aJhs2-LC(xVF~hwUoRgafCwKlwmuc~dCMCztWW?0!#tsXI_>VM;lbR!ta>MPpRp
zR6t&-UfUH$22s!+QHE5^xt^g(yCH8ir1~_gH&p{&u;&;sFx)aH49vWigh?xh;a0`f
zN^YWkT5K=e9L^ienQYYV_k&oQJJ_=O?5Eb1Szxp2-aT#&s)R%G_c!^fC~L3RrmEB7
zt;-lZKbUICv;4Q(=-ZJ9*d5n)zQzQ-*uhV=Z$4T1jGw5D-Gaw1B3~x=MJcPX&sr)w
zh68No%H+aSeaM@}oK5I#Dsw?J*zhKNS<G}3AYSDUg24E;GRt|6l)|@mI0|*RM1Ay%
z{3YMa@W}J7?bA#7u*551a1SDg&WECX#0PBTC`V!`j~LH_ldwkf3p<FM>QkC~Uu}hj
zqDE0dQ<~&rY9S-${k}H7RF{#^z$<<EU_}4ynB(2}lq;qEqmlg5q=2F^dY)v^jQDjI
ze+Mn!?>f7PsNPG#m%>`{=u%Az8{NWM@mcF51q>76j_X+9y+keHB_XzT2y0eeLF;&8
z-WN;~W+CInRHt*ozB^hA!XIlG0Zl~xS`VHdW_<eSLk~mD>kmeEt7|2CxZ(=c=Ura@
zXu7}*%w<}J2iJGKATQXeJ*$iB{af=$po9NGMm$OJQhi~N$66n?6L6Hcix^V*8MLXy
zT)LbQC}ugPe8Wd3bB4^mscx3HE<0N2W06*($ZXT3%K0@Zr%|)l>GBqL-!mQi$ZZ|C
zIS*pfAD^`z-ozV)*d4MC`xEaz;orr|Bk<)*ad8<0n?K2w<O#nL^(o2{{589RUhhi*
zma?#MYVDb3IZp?4(j4|_ehq`{tw=q1sy43H5}9pG7cOx2gfUKQQuwnHf2-(-25*;b
z9ksjkCQBu2bY_bGU!64E+=chycSBPUX*tj4US^HfG)avsTH`4?LK+7<rc=*L;;u3x
zX<<93aQ#*TAMC*{#ROfPZf_)jq1;W*fj0W&JcW1ZnRbCRT1i^*R+G?ZQu<rYz;*T+
z2~WKmcoXd0k;r>Im=i2oq~UC-Xn#zyvns6MNety_HILlr0d$MM+F${c1mYh)-K4?Y
zzg?Ox+1N1qZKuuhtM`o39YPQ4f*dSoq6iIa5E99kIFgQ`f*Xqq1v*%V>KhO!DwlP2
zj}LXs<RLsUFhaM1xI#Sd-0D~V_Hw-6ZkMv7@Jw?=xEWuXx$NxgLW}PSzZGhK2K?iH
zh9z&v_!4;Y3s=I6phDS)9Oqq!EdhDL5~274nbvLSJ09#Ai^d!QL~_e~Q906;nx10E
zTS^^V{U(eZmrVv&2b*-74oq_@20v?^spy<(Np<^9Xb^nRgX8h!sn!r#Rs*ICkgkl!
z=Z}CKt5<p8e-U+NgfT)xmt|vY-S8!O9r%~bGw9@<A?r=eTqC9~!aIfF!hE$S+LKx`
z{{7R~W*xB!D_1_<KC`+r?AH*R{OTvw8C$Qrq{4&y!O^LKxrG}qiT%WNT!<zNy@%B^
z^G9$U7s?4YSi2aRjn%V_(p%X&?mO8@F2=AQBg9S<3F_@wtSsvbJ#Enr|B}?ZgE{Al
zXmhE}{iGSaGda(mc7#14q>*JZBDO&YI637Z4Y;97B9z}^ehNa2zcWT1YF$WmOydTi
zB;b}2K>z6wc0=K3*-+j$rsS@!JvWr{YTHLq``i4YoKbTlL7Vn(;Z}REcARm`+8Mn{
zdzvsW9skctHhZTgS$JUzj8|Q>Xp}XqE$R~(5$RFzZaIgR0<inN+_d-=klk;FaZNq)
zBn-B^N({PKUZVLBrIfYV=FoF>$5Kp}Tn=|@>Hkz}vqt*^8(*;(Ue7L81Mx}KcsjyU
z-qQTcG8v=jFb|TN_Y&l!B((!kOimmmBeTiV+%*h`W`E0A?;4P=wL$Ys9**L~YGk8N
zpB~}FlX>oJrgXy8DJ6yWrA!OADf|zV`=1ior4@e9Rs6NTfu@ul0_6F0B@LY{DH+bz
z#YCv*0fdumN7mc>&}T-F<oMQ4T6$;iOx-{pf8sAA4o$C9nSM05Lvz3X_<8-Wbmor1
z)XAQV9H!6hBB*<X5~xhMd0K2e3i2bU3(m^OYD2CPX?HQiUnwP%sjw&ae!<mIUk0P4
zQkr9WV)J!g?fxNNl3-z{vsEr5!LPQn*7b4FNuellCR3Md5bSf0uT9%EGV7B%ef7t)
z&vfK*TC8$*y*|v@$v4?m>FQOUGU@myv@N_?7?(a5k?I_xs3RQcoDB2jt?py!h#~}A
zJeCg7e3+FI!JUVU_^7SZ6X!o`9jNW#4~O-Yvdj4Hq?5GhBc0kRXzCI#v1Q59>5Ifq
zWo&-JXD#wEm>W2gF{{~eFk@4$g;$rx>L5RzZ7?mlJSHy?Wzk<mCdA$mN3bO(g3O0N
zr16lEl5Y<io20N*CsRb83<;gkJL+&@YHHlJ#rM^Lqx6Djx381!{&T1EIGBC&{QSX&
zU4MkNi`8b5FyWiSh;3#q!3eUcFZ`%PJy89?66zyK$$VjwH)~gi=SgsPX0Ck{<gzQR
zU$heYj%WMIX<yIucY-dG_1|5krPDQ5shhsl!s}+Fn0*5N|MB&vQB9qF-zXLp6(LT5
zf)HC2stB}|!6GCoDk6ncQBV+~MTHPCwSYtj*$OfUB2_C?C`3g-MTklQ%8)Qq%dN;1
zBnX+RGMc?Bgk3W9{nPtAXPpnvd%n0@m+Q*j*S?1T@EaDjmPO>X-7M9;sNtq4r#<Yx
z@0qCcy~BPj<dwHo%LZ!)z01q_Lsk+{LkH*h7t<j&v;+U>QPNthi2X6%4wEw9K(F2j
zbNL@X65ezEt(?q1sl7^$%oZ2vmUv6SKg|<!ZKKTBwNXv%NlQVcxf|!Uk_i(mABQpp
z_ev-P43`F5YB<e_NYn5JbN*EhS~xfnAHb;y9w~QCcV6Qd#UOQ@c%p~w)j7c?I|&Kz
zRjc)A_T?CYk?uck?ah*9bT_Nwl956;*h1}GvEyNp=JSWcK|Twz(|PrFZDiBB-LjB<
zGv3dc%41J3<CHR*8D&xGY#Y<E>jL>VA@1s_TO?DjV!sU~XdjR^u|<VOm|5E*_G;E)
zMv~4D{TixwP-}~9w2y%jb6lZwy#S}liHmUV0nDW7t<AOYljQWk=5qlnBEJFV=GCI;
zlHpN3u=Qwj#9e%Jix<nYQv~j>Sqs!2%w#EKn9c;FNN-v8Wq}z!gehBQL7epdaaR|&
z`qDJ^7p(nQc(U{TqQV8KYTte*yZa2Mzbo$WIljUKU%%h=Q6HUA6)ZJZb~CY>Gf|6`
zsWP<{B+GHcY&y$Y@%{-K*u-AWNGC3<n<wi8!KhW>`_a)J7;2q?q>}8=GtbND@ss^6
zaXq$afqf2B`G!U-h9)K!yqj!oy1@Q}JxE2*K+MV5uDu3jVH3>;Eyr1SiMU)tK;znl
z%iM_yt-gZN4w;p?OQqD&Sb_`0L%_1KkTWth)(-$Srm~BO=eb=?Is0Q?Xi=QQ&DfH$
z2PYo{>9NC*#(ECA3jv{o$!lt(A$GTfAJ;S)rwGidqhZ@x1!i4S9i5lSD@nu=s|8)|
z3u0ortS&RqvNqD9x;_TW+XJf;RcI*ZAKm+``Mavulf0CWfRGdVN-DmQp|OAnVLl%v
zOc2$FScmcDs8=ZdIYyCYHwZJRYu)V>_J(q0TlU(-r=MiD7g;+LRcKD7OqoGmUKcJK
z%ra=bHj-5o>3Xgvwxqg5d)LzQyWZ~yeZtSp`>R^B40g&682*FyflyjNgyv!-MVu`o
z)nc`BuQp&-Ma`Dn!M4duFE~*@i-1T)XU80ug`_6S)P$5!S9EW0?m@}|q-poVNcQ@u
zfKQV(xo=|r(R(~_<cA4;AkI9YqT9*14W$79L}`;o*tjYh-&hWASr5>_W)%QpsLNqg
zQ^D8xd!u-9`+=%%hURl_1hNWHG>ToimcBb8(!d7Qjj$4CYUhFOsR4WE*q&EqC6O0Q
z5NQ?+o()jKb|r4hn9yQs)m0drMTc9pY_G^Yt_)8O1dHa(2GKB)cjKtwHEgp*BW|`$
zo#|GKy7Kq*9DnUQD~S}j<p|>*M2fFH@ALaD?@WH_h4a-KGw62C1z_*AIb`W?LLhoZ
zIu69iY@VYOIi=BqAxpt^oj3;zZWoiUIw3@`%5iL}_uLMN8Rp+ka>@3~_RDN*Z*e<S
zER#&s$`VWLZ+;3rJp4`Yg+xyn7dooRv0$MI-D~nO<v^Icznzm558IrWfmrAkfjiZZ
zoU@uPF(Ylk*B%am;rCnwyQI(WG81Hs7Le_UH_~sqMmN0oCS;h_U-R)E`Zm%$r$qjK
z_>bT9q0hT@i*8Xe{LbInZ1V9yZ3%MHF-1JnNLdTz19Gy)ql{KXT>%`(?dS}s=@TP!
zYOEV823d!&v@E4lnZ($4g=8dGU{>E1K&^^AS2J1h`1<HiBMrpns5zYCUGn@n%L078
zYnos=%dMNej@=o$4sTY_k;S7cn5FXY43aA=9&M{u7)7cE7~E+e4uRzcvSY-B5s%OJ
z+eeksYHTh>=Hx}y|K^(OR&qBtkB=LC`UI)NoQcI+<Oc@SDB36bAn*1@!_#%k2<eEa
zzqI{I9jwvComr%HOsapz%#MDI|4D_9kK{6Y9R@%a;c_uFv`E?K!x?fLbVyYg^Y<~}
z=j`kJUH}$zMTGfC<5MB(MK)rRn@L2>b>hV%FfBFBx=X7$_gvArOvBXPjfrBk&XyNH
zItxm${@w0tu<&N~svd{w;G5S!1``M)K>;@-PW~0OS$-Mn5bu(8#-VU(1p>GO^&6t9
z4gqfShIEoHD@?{J2IZVIjXyg3p)K@l>{T-T0m~U~g%zsKmYRSkm;n`|WUdp4Zewq&
zf=W0pwWJ&75uz=lqI1!d_>+3N!z215*#m~skD2OSY!SKAU;?C}JSh9S+&!>PfN|NO
z38A8xl<LIby<Kb@mN(j;H0?|A@ws=sk8fdU8JSSF;rUgc=;&2DBZj{j1y(~T+%XIL
zkVezV)06h$+Uzs@jg#fKlcM&_sM59f6?MX#)z`muJfr9lIK82b#>R|=7i>O#`jIH`
zES(mmxA%K}9FC&oOt`2DB$c_Em6fVSJWeVZKz54&={hKHZ!B<?yK2_CfrFmX^bNl4
zFb{J9Va#z~gBGjJz0;kh!=p7^jdd6Or*^qzTwo2qmv1;??{KHb^pCdJ`hVlM3EfnD
zz3s#ebX)~J)TApq*e6ewt+hixwL?6a$Y_t#eMPdU3APOXzDu_jM9!40-Z6$D+sjA=
z#LFkqU7=R>z2#|xym3pv_o~M0D#JJ^6_Nkf5J#s^mOdjtL7E6}>~u>uV05Wj19Q5J
zm~t&**a-WO!t$sX%Z-26e#xGdaM!Eih0Ma9aUgFzsBelvc)8_GME~$QL2um-hrFDQ
z@<?&j-CXmVuMPf;{a5#A$`U5}JuGCm|FWCD<V?n5c1={iX<9iD<AhDrWRRo?Y%mYM
z3=3k>8)oy7UU#n|oYXc*#SAXRdKk8f;?G^vKAZh>IWr-o+reQPOj{WhrQKN{3*zT#
zOQ=xDg9x;v7HlezH@b13!ZDG2*vPMa?nB-a^pxb8UEMamb()-Io?5V>ujui!YTunr
zvoA`rOh3MQ{~5Z~;FB$!4&gAzo7uk;c^u6u@T8-m3{@5%8d=#X)W;xQgGfIlxm!41
z<_q;(6{=_W9jpi*IYYzXvdDezuJUw-Q;4JNp!pT^z*K&@`5&K-h=M|P24`)dMA>Nc
zXW>;e7BKnq!$dKbjJ-X`Nu%JV_^W02B7>sRGGYkgm8$DC{VeB%#Bk?wZn{%2V-+hH
zBc`5ljxs;*zrW}9oax5olHd+zSl?8XKZTyTv4Q*_TSaGchvOycTJ{!}ZBML4In@t8
zj#1^d%^gNTvtQn>@7r8wBG-mBpR39G^DDO8qU?>+?;p>6kv6lx!|ookE=cdMjDI;O
z6Cc0~0Vcp%*MwBZO+3JoRT<iHoy9nHb?i7HJE*@=vIIX4o}9Z;gEW?7G1I4kYFrm~
zwj%fi+T2>WROB2I9$Jg1Y{(MRgKnzwPoBIxkZ-v9%$bUhYxSoGRT%6QfPG4Tv0A0g
zBGb5*ETWb(&4p8Wh0a2=3eN=6l5X2;_7+VH76q(o*0*TI1BFi_NdXDP3X%=8xhXz1
zmy7&hNeBpjxx(l780}8E!l(9e?+^Uibp207I-?nQe26m}A&WXqc(bQRm8UHO(jdUh
z-D5FBIq}Mry`x_}h|q3<`hQxT!Cj_)kN}+u5F2ruxT~38d^%K*t*Yf){-kbo6?eC*
zqQ2?b$?NJi@{2m5KM9SKevJhmzTY!ER=q&i%Q0hr23e-g0Qx1LqhWH#HlZOd+=16(
z`R#`H-)bCCcC})$`{xx*sKvC9&2e_3e(Tq?tP*O-n^6^brr3!=U*rDesOVD31>`rl
zN#;Zhh@+5V&hPzy?n5?N3lnsboJq7~8;lDr*c&xbxCvUVh|AENtk8twebO8B1dQGw
zAYyOOl5CkW1yud&*2utSvFUP!Lsn_XQCfA7=x)_tk>-U(c5jRMw+$K~GXt$aJKbWn
z+ML}y8#lR8{Uyu3pR@!A6}(k-b}|q8cRc(C2qP@Ks3=(3e%&MIWh5b^@Efdt_-2Ca
z`BYcj-67@=%01rw`}^#tJE9J|+;sSP-fWiI3}*is5%n&ht9-Qu8Xt_RN)QPgS$nYD
zCgNxKcpGsU=r)%rpuK4s9fZBQcv3$2Yg(FMt;P>cyX4eiL{y)Q@vt%4vZLx2uiWKT
z$bk<B`tAvOx!cLBh0;Gcz_6RxqF%`EfclIuqH};K`}iD94iu3*Aa0tkIU<!Ql<6cg
zD!Ck^G+}w*`HC{?iWkwCYb*QfeqKSe=X3nWyrbXK+zP6$A;%xR+|YNS?rAC*>`17W
zB<N{Gv%;{6YQ!>;bppZ~POCP;8d@l1;{Y3wtkj&r{|5L)TYS&%57hC%LQDKS=F?QT
zv}*<J&xi@$OT(SKq*qOL5e_!J40!HZJsluY-@ys)H4&`VW4VAmp_A_S;YIzrmA2XL
zXCJW~G33H}tTU@FQI_ai?quoTdd})AelKY~p4mFQxySk4GMCK6@F=;yY_OhW??#Uz
z`t_Di+YLd#%jAFhT?E*((qAP{Vd*1LguxzFxb|1U`bgcn*BS#Xti6&3H;ucUb3t`_
z?yfG)w-xx^+0MPSz4nYp6Ab6AJnIshJ04jhkIk}}Rk@CzZ3hV9I0Rup&1*Cfj{JxG
z3G!q*LC5}Oo@OKb9U?qNy$J1$&cPwjVR-cfPyP<nB07_G%kY<XnO-gC^-vONh{lUr
zNginH%q6GnWs&`6dAdpvFP2_I?hWDBLBqCRp6stSE`2ywc_eGkh(2a@fqWd^A_aK@
zX!=2*8ZI%B5-uXdqJD<XWK_2t%WmPW!0FrjDtL=EG_#~HdOjXQ*+mtj*9YnGdr~SW
z%%8{O1eSts%}%F33oXqKcX8h*ALQxjW)Qgr5&xoEyCzL{nmP$T(%F51{3~}LLAU6#
z+L~FWGuGFZ36Bx1j^fHTq|$3*0KF<v45!J0JC}uy<Vi9oS^Mv@Ux{C3qvNes4rt%2
zZ29UKvavTdn?Q?w`5CxMW2V&xmrgIut=bZq`}DTK)c<Yzz&sO5kJ3yk)bCoA_-5kd
z2iSG=DvaCec#-(zgJykrQz)Ug4k#xFl<h=u=(;LYlnSK`L@yK%Zh;lQs88_Fc`G6_
z>tk)xmOUC(eG?ga=4WwgCVQUNHIj-(ku}TDsr`gc`P!ekF$wt{c4fhdRA22KfM5L`
zYq=>QeSHS>kL{@nhq8Mw62h#@`yR!Y+<HLkbl+b-ney&Q&hYnyPxg>y8q>&?)sw+$
zKX#{hVflUftXYE)?2Ww|Uz&yV-K|bLB;s-A^pkv~<*os}GM*vb^v?Z(k)MY{cb_g}
zSpKK`(Yig$zBlMRIPagn|0!K|Z3EOVY+EQQCY@nH29b1{-HCk0c4NPur8Z_~5Eq_y
z_m>J+fNPJHCFbM(z&l!Dnb3MJbR9bVAvFeBc7%$vXDHYPK5xt0qemnqcf#)v9;LnB
zyxix<d7yC7$U>x*LMVue&2)<kuu9dBS`LX!lbFMq87UI1q`8^ikO~RRJUa?Oj1xhp
z9$cB@U)9RXJzK<qY0@X%R4>%y<Fzm?NBiLZ+wq#5TZA_&8YE*bdPE<j(GI>{EduIx
zi;zZ=@FX#nY>Grox&q2SJDIpZKxCO?xk<Wpcz7%AVOE^1G{p%q45iojcBV`rD`@7~
zDVm)sqF6u_`0jQrY?B@9<4xKfs;=)T-%hfJ!yf9fQdk%$g(D8uEmm@MF9B|s-EP6i
zlB^KeLNlbnRrQ+b*eqC|?1dIylM+^qTG{o*Qq3X-U-r0@Eq^n=<Wg2VQdJWaDb7+A
ze|xGj*{@P4;OlAUO2w=>fUGnp$QGyro0!|=j*~m?ur^^InmHGQhQOO|ZqT`*{a5bx
zPjQ#CoYBxsX;x6wu+{6>$uB<a>s7{V<a-$ZHRylyBQLXdW5u1PwdW_w8_3phx^?1q
zt`i&8$8_z;5+s}pb}7!)Z5#`4Ox-LoiG}ZN7!foLP4cg0oeObmIU%*QN;FMe@g^cp
zKTzaMu%s!AjsO$?m!HI=VqSmGo7JbgC-m{u|2f^}#3$6ry2V`eP9{NhKwF2L<cMwM
zNpuD}BO|w#8?;(EGK>#<Jp_{1+2WU3@7`U_-_Tb&nAhsK;7?JPpTnu@q!YXh`A9PZ
zyqVyRXx6|)|4f`>ah3{E4u0z&z5n>?AqE`uZ0TeVGy^5n>h~AHjfjRVELITHsD^+q
zmMqY$%x~)tIw;<gtspEPL6(s=;WGzBEb9dmmmeKvp0cB+&z{RN`N%IB$*p!1+<4?H
zD6qNiG(`DcPqX|sp&#%Lp9fAx1M*`%e2nXwHMjzs3FxichBn#TwzC)ZvnZvbPXS=?
z1B1v6RX4{o(w)nE!qssaYw^kHKey21%%iG`5@})Yk2aTvEGk%~uU#sX>42a_m?cqD
zsW?UR-9LKoZ7z^sZP6JztNmG<v^=4-_#ZvK*`zhPXFRZ%WQr?;@bmX@uS23K*}dWM
z0HKk9z;efrByv4VZ+*0>?v9<LHoB!gxos$^96J!<T60=l$SEHCCWKaXf%vP_zp+Wr
z939UBHnF+(CUQ&&PGnUnYJXg=l%=L&J&hcKHOk3WI)!)!pl5D9WI5GiZFlZRfJo%7
ztN(!Ew!`!w)uf5#5p8@qp@b4$8agoMDvtfnY!LMV5;iN*tcBU0f1xWTih7t>ReCWt
z`rc^n?62K1lqH&d0#U5zak_oK>fE&x!^RiSOmCCeO^8g(-R;iCZr;BpY-tEE-?;cX
z=;E}i?B-<3=>&YEBvTkcwHy;JaNnptuAx4``_Rgk&~IL!VK{YI+U>(;+Fr&pmf%k`
z>vij&^|%L<3NY&KoNhzAM4w%^rV7rHCtD*<FT6cZ`wg>QXS@==o+nOeDzwHtN+*+L
z<kdqF<_^VWgG@?Os2Mgb$#D1fNO@GfY^0D_)m!ISJlaDy|Lt0N@uj%g9L}jTC$lF5
zs~#(XqnD?|T{?72TGcDqzZWjlmI3LeN3!Z9Zuda53;!JuNEUMPsuA=0nM>0J#xq{s
zns3QzH}<3Tg8BrS{H2?`&#@F#+RG;#Vg|Fxplo!KCrs+qpLM{6P%<z^8rK6WRoKqn
z)CGl_`jzrC+`D-A!ROr|aPI*fW=D6rT)SgZY-n%T{Fs@%163tCTZ~^Wx@;@r4_WWy
zW&fw9*V!=m@CJBN4g+@y)-7pN8v(`cDWgpSkiR0lk<f^&4%Ky;e`rGp<5o7{j{(_1
zZgZ#uP6sXF(UMWO?9_?a+CFSy=0n!j-U@z#y^n9tBvKh0WtHfr-hY#Cm*}LgDpf(9
zGzsGN#!Ubz41?}%;4aj0(&x5jKgP)vEYZOKrGQ)?bt(P|SutJ%I%%4(A22=lU46|=
z-u^m<8FgA2dq37FXly2cceT@-U;ms!inuQRk<dZKUA=UM`f5F0hw$-t!phP~TTIX+
z&26E425l-%dJ?m}S@*@WE>_@Ors|X0-%o&66w9()sb<uH)ISm|e;V{p+gJOvh8~b%
zShlSrp;S-10G>4;p7lKFr3<XJ(0QY0r;!a2nvtu*v4wF(SP56VFo|S{dNoUom=C5e
zvj80~gM3@FpoAWOvppk*vvfpdwHkf*>RDd@WiH1*0q13I`*kXD%i+FvPrE-}Ao;*=
zfHfr?Rnh`ZrBbtUuD8*r-l>V>;Tte7DVvY^?-TJLr@<3i{At4*D<SEJUm%+}MInu|
z*(p5ba<7Eq9mPy>|E}H}0lvh8ynbH&zOPGtiUs)(BlWDRVgJHgBn=^r&ZNyq<5n`w
zF$p#vDDKqT!FwpL2v%1Da+A7*Y1Uk5rw%E8U;J=j>;^MAqy}@zmQ8M>pu@SeqPK~H
zkK1bV713wI=;5WIzA@<+OvutqA{xxVZG=q(+~&i?JJd&kOqvw4*5Dj8e5c4=U!HBq
z{Ln1e<my`OGOH`D0EEeo8Wh4ROA?&Uc{dB|8I}dT)dAH_fAxG{Rohb@I>35O_y(T$
zZ<zTAL|TCG0N>)HAcJ_GhbI0hJ^)?MGkmmkUzd|)K1|BbZ<wcg8aS)jM9o1_tkNu!
z1UICINzM(28`8{r3%`)fk+TJ&`Uj)eEZyv#pu1E!Z<-1yW}RU>%z_Z@pU_utV7cNC
z)Lx^Kg=}lqYTOVlljddtM8~k1w8=Nb-4o4k0H`|&LeN|*({2`}2)c#X+Sx61lDWXw
z*YVHp3Tfuy9;d`mi=j=w>q`L&%F!7TVE8#@kYjcn&^<VV%jj6O+_lB=GJBDzo4k;j
z&=N4~n&QNm7YTi`())NNC|2alrg^^JCo(Br_A$T5(gz27ws=QHg@wnSUuJ;P<_KwJ
z294mr0oa3$3c@ACxXuggOX6*t?ZXeCIakEh5apzkOt5m!70reRgFzb#RF~x-U4NUI
zywg<_7w}i9*eNPHpj-L*UlkLMAInRw2I%R4CG;*Ew*&bk^>LPi_E)x%t^;_mf8srl
zaBIbSWDRJeP?j>0!;ewGbkcN|Alh*3wJrFgMcoM<!nyu6eQZfo>F8|KP*%mQ@C|LH
z58n93l?)DFK)eNT#wVvB(rZ?ZXm+Z`|Gb*Y3~UT!uj`7L3>|N>`U=eZqTCP3@-xQ|
zf5`X5jH+^F1;O8?1@^2z#}oK&JJ@@g-L*2`XZ-#WKQJ}=pt014^}KOTQt?bVMYR{~
z6U#6=o#|V|;Byd(q^`l+_jd6^T${cox12>)&3j(QsLR>?`}!EpwHr`}qVr{KH9JRD
zRW+$M{v0!NT^SM#%GtK7=1rAOoW$aq$(1vc7u6eC=dt3d^7B$<5|x+RAjvG;%zGU*
z`Ej~~YXmEWBSY5Et7e^xhx)S0MddEJMIm0L!AB)W20NLrTb+k^r$0gTkpXbyM)q9z
zVV09q4ZK95@g%7)YC-1!!`&5gu&8B_*5^*le4oAGtBm)Sx}#X?vFl~`!>&9wz~;fJ
zzL7o5sSKY~s849V#t0M53JXqp;bPnu_430L%a~*KHZ%Ls59#hZ66FAkYCA4NCJ*uZ
zl&51l9G8h{{WEdmfIOl2b?BhDymy&>#|6Z#ciwCqEXfG%Lz0QEm5Lsa0PyApK0xA!
zqty-Z{Vkv}FV0CWbtp%Qf>_=-86(I-a_Vh<J7Zt`ygSAyxJ_jKN>H`ugTL>><^#F=
zdiWvU_D&s-2~+2wyz)1&(8wcygRZTNjBWWx@7FwNqk3fHjs}wnpn&!kcJwvYQG7s6
z9yiav%wFwv8(j6wT{F167cu#aRc~>^j!aLeDBczikyXje=>2sWN1TGo{d#-_b-Y8*
zZ}?STJ)C)g?e;IB2iZeJqXH)<fmPTD{>x^q9&suTcC)>iyFe3++X0G{*zQkrt>LEf
zED;}U&t=7;9>^I6z8<EV2ILhNUXCpt?GJDZxSbY|*FCJ9c>Ge8qNf{DB2ppfy&Brt
z)pp`hooTtL-6HviiJVY#JlA8g|Jq6)Rl;6Ml44~DrSgyJ^qR#RPVOAP-aAiIk2J0l
zN+H#G65ar)pInWJr#!cvYKCXZ2+hbKM-eK-a_2-ekH`ipcv*%%Pw^*Md;7WJHJFCI
z`Z)xjcW}Tf3O0>;`kKdH<=?UN^b(zRnC>`2^>PE5n@?P%u>sPBy_SZaqFBC`$0C$h
zWfw=f-5n7VQrPPy^t>lM6Yp!yPi397O`cRhTkQ(<Bpjyl`Oj)|RtH5S=YCK4t66(n
zw{DbZ3P$e?&^cB6?rYwG-@*`iV2kC7_QO}jmZ2ScG0v4~?()&9yhkp9ajLVC0jl_4
zzLI#+5))46Zrs!u7ro5;H~ruLg%yyiI&qiixv<7i*G_zD+eQXh#a;Xb1Esb_vtPsQ
z-Kr({V|!A#p?G-9umzUZEJ+PrmeJwW%W^$lK4iq$(<`tV+d?;uznRMU?C@CLE|FQF
za>G=>b`S}w?$nr->K0QU>RLH`Vv2yM>kTq%g%%D-owi6)bt_QUi>xh*jdh-nm}#I|
z?u;xLbzF`uOu0=nojq5OP~rK29vByYk9eZn-Z8xT>c@9q@P5(%1Rk(Muohd9Ml$&n
z1-DfdsJH66iEHiIi&=Z|vmjg@RQH70**t9htgG%w5v~puV5YYoFntc9f_(Y>+H5~h
zn}YJe$ZIrLmFuX*hVs^wcQ+>+3}Aty2f-!=6r1!x*PWsicgRYcIAXFN{t_c9$PJyB
zg$r0~q}(*Y8q9y}B^Np)0kzUWqqu|5F+Wh>Ao`)gv{QY1xbkfudJA<PE~3LRb8*6l
zr#%iA$S<w_D-}SPYJ;ag0Y?i{2vLdoTvT#`kw#u6q}e-4KeSMjk;<7Sa#E-hD9I6w
znB~stfDg`wpd^j8;33_Or8Dc&co#_kA?6xnF-|hC_w{BJcRSkO2<+h%1lbLJ^IHE?
zr_LC5aFUSSfbbnBEKaK3bT1K$Ns<f86UrCa2F!x?WFBGJV1!^5v~xH2&!&9Hh$XHZ
ztuYwLKNPjk(8GA}yR?JP>z-#|A2LLu?%)(X?O|;OA{9{4ed)*vWI*VR2`7DTvmCJO
z6rB-^j0R@7FII4u;@yOmOe7TbN}X`u@X(XxWTYS3^{%?6uB$}Y{qd1A{da~_S*_jO
z<JZHh)Ag|}I%66<=o5A`QbnEMpgyW|+8mwZZmg(PMdrDrVWlnRlGGUcGwn@mb5wFk
zU;*ymTSnunisZreEB@B(E|26apBk_KqT{=sSi>D9qvkEM1*(FtdhDmy5k`Du6wTVX
z3jWWSq#0Sj6b5J?PEk@plS4L1QXjw*F~cT-QzgbtR*IKf4kyd^x_jJVW^UK@0NHTw
z$^2dY{H#r*ha6(Gd;aQ<C^<F<r7(uGGN~Arbd|742nw&<i6@x9&di}ws!Vt5ZzY=G
zMa^Q<%2Gft^f<VG`w;hQ-@)0BS(aqoe~ah+HTI4_FRXMlFyLIx!Os#VcZ%s{7W4}Q
zMc)4iNszY-r8gx!ZZl_2zlNZ8V0RPE7S@o=!F=H&s3^7}MzjZy=%(g-p3AbAF#~)9
zB>P-lo>Cj{`Bbz%j5Mvf4hmwWK_PID-;cBrw@LN2cEI=e-;&QHD!w&YrN9@c6OhIo
zE9G$$gB6hidoYarBrQ$SErrB`cPl2!t}RHJS{Dq81wkdXGCTT!SzvyX+Wjo8_=toa
zbS5(~0Vy7fZY-(#MSP~1JrCc%oyddMws6o^icGk|Wxoa`v^k0`f*`{}I}W3iEZv&1
zQ2Qs{@B1d|Z0|G0mM%t)RLrtG-=&n8TJEr!RUY(d-_t(F(_zo9j*Kd4CcP-=Vj&uG
zhi)<4tX>@`L^se!z0A?H0A=rk8iL}J$PeWNo$-25v5f-n%gi<_f;JC;5=kPCp1TQV
z7=kwbHI)_IWKNjqDH_Bjt$8lFi4W*O;TP-t&!Pq`D@Ni>bKJ7i%gZ&sGH-WJ*^tq_
z{vKdG7LjE-<ln@d^8ZcTbGQI<*O<(JKI2(<#XMLPDS(?;rGdUeDs?`YF2whyHIuEF
zmCb>B+P!scm^~+bB0K95)Mg68JfV$xgVJ5%Yc?^<F0RtaU$qD5I`UXw8ceSQnQ{aK
z70nY<rXhQG>2DragoQ_+S6Pyq$tylODoHO5U#fyFqNUGTW^ygu%OZSk=Y;QasLlM|
z;O|)W0MSh2s@@5pbv~uNbK$_adE6z^R#-!8*^YQ11zT#GQ=`pJ)osxDVP03Jwt4&{
zYMMFlq)KET^D<Io<Y#EVN7rr9o41WVc>j>?kA(aY{eMJI64ciM3tf_pTh9UY6d(iO
zDg8%pas#H28l>sIWgWzo6&in$yXQlVZ(c}fbCal053k4cWqVR&!p~@VKX!lK#oOq_
znLkJu-|01eQa%=HBZ@s=D!Q6UNaK0T*B>HFpK{RMP<gTGgcDJkFX7F!W?zD$nr$-M
z7=jsBDUd$!Ep5os;h7yGv%~10FU&{8?c&nj34XTWxM}W8K;EnD*i&uai)O@$qJpx~
z*)zov^B_fNG=lN2Qc*uf1|0FegaL^nyp1tX27$*KkS03y1fynYj>x%}ZInTEyqe^;
zcu-~7%p((a)4-hN9`j7|cWB=)IpUw1-6xUg`;w5*w=bEk+qWY4Rs-E)$T8=C!l7Y0
zzZD-+dukSI3xKf_C@*dFjh0#QW#tL7ju6`N@$Yd72%^Kt@gI}rgWF!ju8z$z;*r-%
z#&UjaR2izt%V;$oe+FH6l6{~jb{(Mvp7|F5<p4nB6x0aj|E0Y_`hvAj`zwoxWy|5F
zPT~**TbPP=@~TiJ6<g4MnQemydSL-Y_eNiybhuVZBblJ;$i;W@Ft4XQiiD_5e;8(k
zema5~y?;_Mc7eDO=A{+ZHIVSZCO`|npzMc)QaGRnYLBv!a2YCrq|Y^EUQeuJ>Wo>9
zU%otw*slAso3)`Lg1x0nd9wErzijoonzVqfietXyBi+ski*)S|OK#jBpAD#(r_qPr
z*uR!y24$LssLeIZOOe}{of@QlRTO?(vm584;|+O3!`aS!0hfM{S=%~GPMfwXa7Y;R
z-TBILkD<p-+UZlZkL#<hzWd?)q{9ycfa#XSrNOkoqCmYVga|jAi)IrZXu_dPPml|=
z^6+ml6~E_mBlnNy{5Y^dSN$k-oN&G@awb#nSucNEbwa-Sg-uOC-VxB!`)daFEPVf@
zJ-Sx10eD_hQE#|lCG+bRm$A%I!ekfL@f~i7<wJ>VIw65f00i+3j4Cxt8f--flg<T>
z!8e*oTl#o}D{g&)^0U#TC$ieia{cC@o5GYy=Xr7;?n*u6fGH96B;)HVIAJG`6DRD^
zeebtf_|To6343Dm$Hy;KrF?#b3wrvu92gGo7Oj6?^X$6!N1O1x!0=P206syMmU2*U
z>YJiQuziC-hdUud$7QMqXumXVl17(x2s4Dnn&n*Y;)tI~$#VPf?KPQ=Pbu_7M8*UY
zSDgKdyxh>|dC137Veiy=r^Ew)`G|pmE|j%Pz(IBPE1<x_cC+pk{vEZQ_=j@R9~J>i
zdpQQy^`Oc_dqv|c?OXw3Ky+=9z;KBDTHuZ!mqD?DcJB>cX9SqONyoC6QtskVO3BeN
zv01awbeN@wN;K<hyoL4scamFlTaud!H=uQaR_2tY7m$NgRH4Mz3$?3}21K)bjH;;u
z0171tKEpnCE0nz(|6mif+3WDchdb0xk)WFxtV*lFcjZl$Hhasrx*I*hTkA|1)<J?Y
zVzXTqvM=L2YjdpWt<AR2UYGL^JFQ%JOV3~$k~U+gOeFb$x?q~d07kVc{ztDPQtux<
z7Y=UkIMIl5R4(ujeq;9$E2|qOxA}JoOmMpp{QM)_$Fnb%FnNTxnzTV<iN|672VQSh
zerNj0`_4#^B#Uov+k7@uTehE%P8a6V9*hN5-C6Le^xV9^{}spnx8f=S*WNyu$Vu&W
zBr1Eku3zV-y{|KU!#Yl07z3F!$rAOt#M&Rd1>ZCz_>$Z*-nookb2Xc;O33mIt)!;q
z`R1fWJKU~{Pb?`aXFPshQ&ai;sh+OJJsbu#hsXYo+0hib0sU2*DKKSzkKgd@ojQb(
zlaKZC$fo%DX}fR1UkVjfFe-BW`kmT-38m%!6g1>%^!96aQT1187aPd8Am&GOi|Oi>
zx?aHoZ8>{0yBk?_n!S}?I1h&|#*)Cs8pmu#cpdPAG|tD1Mhn+J7nR3YI?=8jW!47P
z)h2bTgL`f3f_=Yfva?^(xhKRkH1UM~ED3)Bj|gXN5(QYDfeL_-h}pkGJaG2BoM0F!
z3LtslrySkCRVWQ4+FS1*Lk+??^Z9fXssC{IM|sjmu}AP;k&{oS{iE1=;-T&{jF|D;
zgukNx+gZ@pLK#9T;o{a3&B`7{oMxq?w13hPlc*BFCL9_=oV9#O#%yOgKl}0lN*PE@
z4>lmHN$Xe}U)ODu7LXc7zaN=h8KGOm6HS}cxmA=Sa$joT^ZY=!eIt1;8S_A%CkQS#
zvSww13<MvjsvNu?O;eph8I8ir$U=={7)ET=eT7Gynex~VaNK~W-G6pDKZ$cGrGX@V
zz!T9Kd7sm*@@vB<o(iAVJnfB9+db3U2#aq8Ja!fb^&?&edOu~LRzYkd4saTUYXI?d
z;&m)1o#X&YmR$aL{4YT%lJr=QB}OZEn%<yQ)lgDnUXpiIhLC+ShW-q`#Z^{(<T`RI
z9M<ap2O#rg+!|_)J<>F=iUfIFGt^qe1mR)F49<LK$t7`Tnlm@G^X$DrJW0|HaCf3+
zQ$LHWurqw$D-$_6PEgl|(oGlBwfPU;;F;cCACCiop%URwl^@jCe2M^I*z|gB66kP(
zGS&m~50ZiCBUtuCzLaoT=Lq`xovEB<?uQhd^cM+SW@RX7Oc8;hyhT(Z5LP|wi3;fM
z-{0@BIVQm_*n;UaX(euJHTjQ`(`{lV8IA7OtoWcJYN4%sf&ywKL=b-Q+KF#a+!98-
zBuL-$!=*>gY_4;ZGnO!clhR5ye|vOX?5qgo&8o7>G_KuuL8@q5?dQgvhvQY%DsgTB
z)JgS_9aMdxGzpRu!e<&H9wqaU3=kTK%ehmC!N|{JBzHVlrCg5Bw2FUGogI#Jg9Q_t
zNzdBU24eckGq%t3EbY9zoq`v{^i26$@9VZd%~StK_yEZX9hP%2yG8Pp(*$K7h3iBQ
z%5IjXrE9{l-&khYxlHM{!Ayz)p4}Y8Npl9t`Cz)4j@T>YDUw@joOM5|^4QfSlw%H4
z^?qX=RGvuG+}sH&5I(xaFfc6XMjLk%2&9(cyL4@2Lrv(g`Rl166U`w-1mG>&tgLVN
z@iN4|j23ZC=s@fJ@jPg2<=yNxJ$J4<#CPMI5Z_;u06e<_2g}8|fI$M~i)=AnxA;~O
z>oc5g+n_a2adBZHpgt=uqVIJUma8J-8Ckkzv~$C@=rE`J@c7R(l9LO0CBNhR^hOb|
zp=v_NJ6+vYb)Nib<~FgH1Q+i7FX36eBg}2G@9a<;Y1Z~a>93yb4IR*<RsGZTXJ+l)
zx-GUUowLICi#|GoYWnlNyTqxbi2F?L48ysv_bJ7$Ru8d<OAHW~)f0zMs5p4Ruw~GC
z01O!i?%_0~ngEd<%M$O9a^{WOh0Df`tUBbtGWqN%Gq=H|hJTgonxZ*U2DU?~4;Gef
zIT}f_%A48!njef92aQF^?YPVJkb|ZO>Iv|T@|(rwdF&?6d|Mx%2>a^^FC7op*4{dH
z`HLfGDn5wTgLc>Uiyxld8a`4Se%&klRHU9RkSr|{qTY^gI89VEg#5-rbqqCY)&|Qy
zG%&<v&0>Sgf-hNHQEIwPcMQ|Pom_@1_SN-hi0(Pn@tl;YPLsn-Yv0V4{R0w@4+V*j
zs3U<j#zk>Plh6Kt?j!h7kU+AYnedUpHN5qcYNs}<&Q&U0&Wuw<YKut5!@4djka@bt
zOo0jSTn1jfR9;1;W0JddoK3#VlOonu%&!PFY`(!v+s)bE>wNz>=6dB3Y#p-EVT!Db
zu@q(m`CqQwPtV|cs&p?n3&;Q#!8cN&9g!@ooJspwXN|s6Zbxlf?6)+1L*?u8Wr?2c
z0%F=xQ4Gas%@00hj!T2aR(vN0?D$#sYzR+yJV`n6RZwuy1-A3Q;U2P=h@Nhr_*(74
z9+XshwT5g_<)iD7m313YXi+P##t=Rm>;K6MY{XiEsxx974GgnQXsU5b(Gws8i-#uP
z-#k?<s(L*(PQQQDD@Jv0<O1>SO{Hd8k8ZJD;>kFunmpz<TEx`xpYhKFfaixlR3^_Z
z-=#%4+D~74#;dvVZ9>AYmNrR;j)a|z@!w8-m!b~WSfj!Q!XQEQ7|0pt`3al_td-hg
zwj2C?Vtcy7q;h&x<A_S+*%>Sg+28!yaUT!2?wP<`?=G+puC3~si2BGdr`@UKXNl(P
z{r&I)xq^&4SLzmbslU*P;}Cvl3q_nM^DDrvDr8^b6d8E|?%x`>(nngmTDPwBD&IFc
z<at*)yTe17ew?(VXEU#CKq(eCwJ8r}oeoWCc?PZ~omi)4S)gw5*9v4I&S@N1uK{KE
zXgt@mmv<N-QW3F6hHWJC-0%50!}ih5=5@K%k4I<U=dRB@U-I_t8%fZH-u>E&w!hwV
zM1hj5ePqCk@cWX1mXIQTeN9!?y>+$gSH4(bw&`K<AGbFjI=J%sD&tk3-TW_jZGj$g
zr&MF1hTVw3qKIex2!DoYR%!1Fwy|Fgn?kR~UvaJ$qaVR+s<F>M#xkA0bT`5><pxdl
zhTGA^tQ(_0kIb&_awmk9NxZ-$;{kw<5B7b0-}|aCrrd6y-V_73|Dai3t6SWT3U!N%
z!QVC<|5oh;>0D=vBsqwj23lW^rYskAXy*N+;GUgDY_4{*s>_Xz45$HNNc(LquBkKM
zT_66IJ+P3INIOr9JGqoMj}H%g3?3B(#av0BgEfxu6crRR0If=0s5t?E!5d90H2bjZ
zE9?#VFQWs@E2{4w9dO9Jn|Wkv(8IcEc6ZKA8spxmi>UV6%OUM_AE;VVB}es`?V7a^
zz|22CHy0YXx|2?6!n8#?eNgYT#EF={G_)2iJA!`XqTSxSOve>sd`1pkFv#lMlxeK9
zrIAGO>v6Xg5jxkJey6S<VhX}2m`!%k+Z~ULKA#>k3(}hfZ916g`8#3k6Olrc!X40W
z=PW0mR4&vU169amRRZn>!go41{5BYEEg#0q<TEh7F(68g^lX0j_=Z={6r^T2TN#o_
zXv*`gD!e{0;$lh`SJ#MY9m?lYy8;gS6EH;*R7<qbHatcrip^AUxPh!QiMYbu5Q}aU
ztj$o$-d4MX-jF96ws%uXBgKr&sj?T&t7A_*iTdUhFs*7XK60EYYppq4A#UH_`>3LU
zd|3E{BmOy8vqDT9Fi_F!us~o}sR1ePz8j^=lvnC}6x@H~f##Obb(k;}I-X{9*Z7KJ
z#@P}v@9dac-^+?yG}>`Gtz`83!=s|t_gwCOsgJ64#w?f%xMRsr11D~wu7Ci(C0H^7
zso2@G>Rlt81=BBG8!BI(lo3}k{o9B}>`k~lcrsyEy*lPPGuyLIXF<!EwJIx>(0<Q5
z^`t@^SyfZ%k_{o9b~$SUj10Y5Tec-@3rbFMKu%EfG+s4mf9lkb%cpk9%H5K5!8&G}
zYO9HowOc;)!>bUYUyX=Qe_&Hr>uc@R#q-(o%aMp0(#?B=12oZX;!9W{mGJp^+RK3Q
zR2l;I7!v7Il1l+p{psv<$r?f<)qJFIUVUC?Q@k=&88gmZHb{>i3CfEEH!$J88lOxb
zk28PJBR=v5o5RcBjE$F$WJCD!-LNq{D&PP%Xoxbh5gw>pT`ddDAf!2YY}rlPfTajZ
z%b8qil*=oNJtCHO8D#3gSw6wNdDiD23>Wixab`Ds)(5=a14f0&R~(c|#y1cqf}xrU
zp>fg?CRys*oX@$aGu1vNIgSA@-vRiIZFd&r+*p`d1lF?4W#f!h_|EpDJ=5cfE8Cuq
zB4%|vjNWN`gQ_xPW+`c>a<_jI6zN-b0oh;U2rlZn#kO}ru`!b{;fzM=EUkT?bjt;z
za_7mg!*v-=BD=jGr=uXP3ocY2?EPrE+*wtW;NBnCPqBabpQpb61_MO&NatKI;E#e1
z)m)5Gi~FF_GF2&5x^pMFm}@hT{J&um8}bxKB24qx1(+vTzMpZHd=@-b72h(v3Nz-*
zlop}E<BqFl^48AOgx-1-6cG?qH>=gv&C~7=M*gk(To+Y|R2}NY8snQ$(u@T;AH4fM
zo;h(i>~Kr2*-E<6=1<Q;x?kEkUH|>aQ0CX5^9U2$xScG$PJBX66-ouj<Ms)Tl&eR#
z(${jxkp%q+WEsTm&M1-|-W~HRqmG<_g}$2Eg=P&TDFV^<G)*8KZTHG-`SHydS$u!C
zI^99@Z5cCO_pxo<S5F6{|F5}s16i~7xOx>!Pn!Zk+?^s|+ziU{JLj{u;nz@~M)I2X
z=-0h|cOXny#LR6e+>EElJi@%u1D$%kF`Y}^+FpD#U6x2Z&>NfE6B`wLxVp!2bDg_W
zh`}BJ|NNUiX?1YJpFw`03@BBjup*Mib^6+3*2c4nIa6^%a(MPy7X1n8lq(5CKV)bQ
z-PLTz{iQ~Ze%QUQw=?*ZrQ##3y?xHYiE_xS_g+_qbn~_#=VR}-J{+leW-wF#e^0r;
zB7%%wgQFh11F4>K!632hd`}V6$V=E?<3&vZBM2ZJC$mC3cU0%u<y#ome?K_rgJ?OH
z{cp-YR)i%CL>)`vRxliw&ir(N<vCYRn)grtTs2bN4zFPZC^?YN;5_{RnUJh{;(_{*
z#=D=rfT@;(w(^P&zg`C0QbWPBZnO5i23)}RSbuA9VzlQoJWxtq-FZ7CVkO?jFrvG;
zUcUW=X5LN_IVE}?%seP~@><WMQn%zEs2Lc*`LTuM1e#5-=O`D!m!Qo)0Tll!S4n0_
z3e>Ees3}ylI(?cf-y<$@xJbcSK?e<?dC~$)p5+RoEfdH<jmfLZIZL)aUIIPQ%HERS
zxh!JcT8?J9kIwJ|Ed2p(A)q9L`hZ+xh{F{NtI=&>3$RE-k#^ME9mIpdG*(4&=vLNI
z%9zc5Sn9<xklHiIavBf$=AFCWtdlsj_G}3~r=}$HzPD-(@A=fwzA61Im>(sq<~ZQR
zk@=vO!jTIno~!LOhebM9V7v}-Szq_ub0IF(*=fjKnmK5_oRdV_B*8O71o#6fWkLJH
z3MiZ`a%0kcyX)LzEtFMIk`cQ~!k#`pes10rRkNZ)XFPYp9%pUUCXr7ul7&3SIlTBn
zybN`e1ttlWfEq*mhbGPy61lqH3|#M=5aT0rU=nNm5c;Vt$a=(T6Q6hWqrGe3^KO<`
zQRLakypZACv!y|!p`Z6(AZ?vXYY^#kxF$P6mU5*)n@c`PNFV+JS11^l0Rfp>Sx!Gk
zH5OR2wxR9KS%$Ly^eM(Fep@}cm9Yr7JJ|0`H96XDl`9)^ZHhltNnh#`uPTDXe|v(5
zfgiTl0Dbx266L(@R=3dLc1V9<U21IbqS%s`kHi`m{FanVJUVJRvzT`F;UK=P)h#gn
zRL`;6>l=&sd9xnhmWMsNzUF}0%@Yv?2aEKO(*6{o^gRW)-XoM{8`En#Cn@DjVxWj;
zX&unVGLusVfJ&YvzzCO|?Y$_~bpjONVUYc$SZzeJ-dElZ@pZWQFoYT0GHi{$Yn{IL
z*GS$+Ziz?5oge3EUc<KpFijQbY22i(8t|b`I(yyA{Y<X>LzCo<p<>|;tg_Y0$<3u&
zx|;N5=ooRiZV?kKh0yS1CxTT3_>RU@-l0hrExZ9dWZ%2A$CB}y>6UZmC&Z*IMmZhi
z=g#HAYTpb$W5zey;wP-tRw$>ol?__>)E1Z>)E1Iy1AGrFAn1Kt(mlN<hMJt$mSwNw
zSo4eD=J|0S(z4I4$~u03So~`RP`{1=m=QsPlmo8vYK`d@)#us@!Qx=%puD;Pc{40&
zK3DiT7Lb33iu>%xf3C^l-pBJ>{Fy780Li|YWzQ978+po2yTY>D0!VA3qN!ce^ZE3s
z&qB7e1WJj$RL!me*fs(G=oNK>bYhJ55&7>{sOf%EQ{d?#f<4JFf&V~+CnfloW*2yr
zwRkgRRJR0XooezJ$-277!HK#IS9)PKS?V1Tc{8nqrMOQ^Ku~CPSn<d=EcSH(W(d<K
zr?|_Qshy3l9CDkh<23=GSv?KG;c{DK4r%`h)IvhYfV4jwGf(pzcE;S>x`8;EWfz$-
zNT*o5P}_qP5Hf&iV#Fp>@%5c)#i*cM`Yp-1S(*be#HDg~^W302m=kGrt`9Z+26NB6
z^@XNYSWJ84YdvJY5L*$aSstv*hW4d%kLvM1dLPU{oFoqF)-l=&Hc>Z(p!=y}s;U@2
z1W+|<Gv~7TOcGQW4R*`7ULQOne66!!*#oJwjIu2Bi0#V~@YX)yZp`vw+<O(I^yc^7
z?qP%|?ZeOMX(ayx-X)CL>5PhCN8e|^kf44XQ(do)pe=W&ltb>zZI7~(g;vWtF9)z!
zVT`OPU)v-2A=?%UTHTgMIMM)gM6XN{vLZ;cOC5Ui;Xp)xP*l-~Yk>G(jxeecfQb*4
zR!HMZaLr;E;vltcjh0S2J_5!GDNUvgJcvRVEg`TLYwtSQGumoi-u$g{ba+koG}l~X
z1AX6^{FgsWe(@yj0A^KNOf&U$6+1G%NOf_Vr%}MCeh$-rgz~0cwHEE4+>Pd{sxWf8
zj_^iv051gK9cvA?+}%<^NDnou$%`U;qkS{YS|1;rA(O1a+kLSWo@;~N-+1VnW{bAn
zDHV_B%;r3~6PXilk_IMXcO0{XXf)^wZ)qYgX0KzW$%O4M5d|YVMrjmj&_rHRw*?JT
zv?os^=Hva|Dtq$2>{c*qH)T>A1y)a1zAb<Mq-<=qsXjHEj+`x_<*6$2*va7YllwpX
zq2X}NvgrR}*+8Na0svUtOOca^xKz%5j=IXt8iwNJ9$5uL%I540>T)M?dW~5NIfL{q
zUPj|a1X7o13>CIrHeDyMd&A~^Q`sxLO8@hTCaS5(jlDlO7HB%V-QW?@cmisMfbdIe
zhekqnyYd33lF{bDP;gqwS+mY*%>|ClvtCWYD^~OPXd5RHF|B;SRJ6E#Xr-nNFX?*M
z<@77hxd*9q@~IDQ$(?QE-}72{J<n}C{(Z(gf8C-Nuqq*kOrmM#!=G`Qg>$NLH0qUj
zNrNPVI^Rhf-e7(;rHo~V3l(b0s?jIoW}#p7u%cvIx-76+X-@kpV)hsIy2OpV`ZG!&
z%p`|<H}Y<j{nTZrsIWl2PYm3VpfO9+Egn=KfUmucw2|FGe%jt@AFar4p<H#FX%05b
z&m^WwOh{G{LIRJRCRtTSzydx|`x&H7OtZ$cBZ(n(Cd5=;xotC~ndNPzE~O8AkJC$c
z8{eO&F#|*rag?eyfU(;VbRX4N2Vrw1H5nLs=S2cT@Nzzn#x)>D?#EGeDE=+h*%lXn
zrVJf#7FjJx+&9?5F=DS_);0y@+>~#f+N$v^;+H(_7tNk2rPCfAp@|=v<+w<R*$Da*
zMPnMMvIJ24DRPpqGHoJDp=Br*78kS5bqkzvVOw$o#Fs=ox=BS^i4s~6{lj?3gun*(
zX%wp}%b7_?`sBlQ09jX#nnztt-W(X%9U8f8aPR_K$yxw+Wj>(vhHY_YbT9}~U}Xz&
zejO4m^K~GYY3wj^WA@eIulh6=T-s|$S;owx@lsheoVcdUEiLA(o+AaGyZU$qCpr@E
zhSENbiK%J)(%w3c;tL4GeCXMJjVVRtsI93pP`j{9wAVELa!RI1Xe{{B3#)8HR;))E
zS4dX)fhM0Qi<Z!pJ(_tXqsR)-t!J!>6j<kM`<p*R^`{z%ajI|6sn_LGL-ZE&a^3Ue
zvSWmi9*Ar;Ylq-WXJXWg8e2KVjNJ_x6hIiq^T0w3Kv@0h>;<~l!|OyElSf11-3~>v
za-R^?tBJ83_d5K%`%GT&o?eYdMPyLO$mKIp6)t<1Zzty?bL+-54hm}!dDF<aEoUxk
zOZ0Ccuc@<8Td{ne;e85%8ONAeCKKh#GqwI8eCo`>x5pT5k=v%$dC2cO+mqU5(WE<E
zD)YQkm~Hw*SP$oWx}Ej{vHL?RB7F~Kc!zqKkT9Odo%F9@+WCuOeC-bPvOslV;FIb~
zEoOU(3$DZo9i2<@r13`K5&)1H7BF@^%ky<S^bF-@uzY0Cxszwszt-${G@2FlAVd%O
zhKwFTaC_=Rf!Z6Eq$eVUG=2?4hl}c{SeT4Fu^bC)CYsglS9soy)XmS9XZ3<AEP=I0
z<ZdTL2)J@@m%D$d5y1~XsZFzaE`MpZ+t;%tsQ6E~?emOpg8$^Q3kanK(X0i$+x(FF
z$4}~>Yq?yf%*@(t^jlNqo+_sH{sv)>P2sAX5Ynu#o%B^{@r&~(K8pGsOU8myl3%Xm
z7fcU5zbb1W=fV|>XiVEx6db~b1tr=m<kQOJoX~IaVpLzXqsxh4G_JGhp0X1z87D56
z_Hs4B<#_f%0EyQnM#-Yi46wd6yK3<rzY;5`PI=cKTd-ty>$}HY6;s-uek6=-(|zFw
z2Z|li1#$BG8n%e2k%L88oc5j&xX(|kuOLz>Wgr>E9HlQ;wv*OtZwXIvQu~q0cQYAZ
zbboZ>F2l!nVWw&7?Kl#Ib7e|{@qi%q^U{bK=l1sMUMHa;U8Ev?+0WxFI-h$^VAbb5
z)$MefFlPO~{w_XuxV_bhIg9_%V{q{=(^{3;|LEx#iQeIdXX7sEh`48H|D!WbnZh-r
z5(4igiemhd%ZUprxOXFlzq~#)9b)LyKe^f6i*b)~g0-VKLR>pMqS7N?@BO!P_}W!t
z0RcB?oWTV!7qo*+57C6(Q&U(iBd1c$bju`~ZTWJWo43acH$6oi%1i0uz$;VZlSp&u
zs&0O#S!7Ts-{!)wWd_A4qJ}?t73}Q#U2`@TW%(TFX(010eRRf$;SC(#jP}n|3Hg&B
zE2G0t#>O)4(S()llVsDPhn)=l4%7VO4qTMJuRE+>aLrUC^7Z%ciTSheAbn81?YMo*
zcH;X(>LAvM9&&_GT&nt2dwVLxT-}`K+RhLgDqP!qZJWjS(2&R=(_0u>?t0lh>NtpZ
z1l$gKE1{jM`7^*ZdT`$S{$<|l*X{Y^OZ^YfkS--l#T0x~`@}U^jUW5wlq%-wM1oBs
zfjN_*I3#Rlti;3Qhq#yOsEUFmoq=<Bo5k#cvohb{9XKLWuEJ|9hR*c^1J69*0psq`
z2(%&%p+6Wp{4%;U|H6M&G}lUC?0A%Okrgbb8nC+osO4xf62Gt%4B}*+X@Z5i*8(e1
z9lbnA{KBR{R=+J2Yj0v0Grjh34%QqlM|heY<$#XP*!H&5Zc&ThJYCRi%J22U`nrQ(
zXV%u{|9t7s+lAr3d~U6G(<o{ChcybPc?bSqJXbwfz|3gOfE3lQwg<l!fhoI#%6Dz`
zWk``0>c!camU_}+hQJ(zy;F)HWcP$Jpieu|<aFJRJE0mo)G=$}&oLz!Phj5X#95x@
zHZeroKNiHw73C#+m0pN9)0k%J3^91WK71}=o&OP^RD0-Nl2`MESE;Mmt^*^a1&_O8
zxG5a7x_RL;UuWlW!pgDGE!e_JED%oKBwlTnO&i(R=7!b(;qJ}DnmW6^VJIppLKGA#
z2(eD62x(<%0TUG!5iu$%3PP$B86u=skO(0gML<MM)e03Jh>C~<Au=mdfG|`oGK4V*
z8K^SDjzHX!!FSPTxXyXMbH2a7>-(cvt<BEf`@Yv&_gcRp_5Qn&%+(bg#hh;&AJsps
ze->OuU%*o?>r(4Mez^>V3jB;@Le;Iw3&LObngj_Kw$`)`E53}IPz<blBPEFaMVVUt
zH4;g?;pCX7+=L+mA!gff#}kf+kQCM@%i5e=b4HDc`AcS<hX!|b*;eE5@R=XsBo9s(
zq+)ZWL8Fv5#!*->_IELVfIh@<p7Mu+s;UA|`vb4mICNkq%;jCGc`HJT`!0-1b1pGV
ztX>jd5@JuGovbV@*y6Lk`_8Fj9bB7kn_f5fK&_EUYy(BP${QX{1!_KKs@MW2ye}Fu
z_DRe@<|&S-A;cqEPGoT(RYGb&%o?A#p{yEX?MopQK@aFGNdzA;8ZroE5{g?NbcTc}
zdV4L;?|GRy<;r`0%fiB)a#RD;QR|t&O}tZAvr9b3$XU!kMFjzM8RrLRNfiMyXMQF@
zW>`)I(*rWU8OI>DGV!F|H9r1Tn=$)2m-Z)E$*8BoDlSMuHT4p<>EgZ1WqS9s9EOfD
zztK?bQ6&PA8c-zaJBoGClV63^$fmr&xxu=Iy@+8XCVZ{@p-Zi+442(eC*;y~_7tOG
zrQczxl2Sg-5F;HG*kaRrl`apOaz=mYYs?zyw43cnxy|7}9tK0i>lE}CPo*IR4rmon
z6mTy?SqN1LhbC1`uw-xcVUhuy8AwbFOeUyJ&?asiLrZ2+eZg#*aYSA7BFwqYp|dpa
zjcnyiN~IvIt2OMI?y?_KW=9l9>>#dHu@^uf8-#%z<vN&-8`X)Hsfkq4Jmp1bi8as+
zm78T?6Tu>W*8w1wU5|PXwZ4~m^0{$LbCh=VY$x4#&=ndoKFR9a=lsq;9u}HCTQ5(@
zi9wu1=sAkg&_ljeRa(UA@sK2p-IgND7^ehkeTF+Fxyl;5qQ=c(m6v!on{r^fn9IZm
zl~L+gdKjevFn(zZ|LU9xIYR#hx8!)xr!v#3^jvCLb|(}gzv6~qO{3>2%4LE&HHdp&
zt?*FnAI0ldxaH9i*N$-bF!eXsGR3aZw86_WNuwJ>ZShNj%bG8%^)Xhh7e}5Hv92t-
zAxqK}b*z<ZrgiRA^trRLN)5zTgr0<9o2B+xvf{A1i!!J6f0b0w@#$*SR?JAg7P}h`
znAd&_8V=YAof!im&L?D(HQeQ-OHTHW7(3C<Sm`s1J}bUhu^ZuzWSX+vZVlFTKFL`>
z9U0PI5QFUZHH8ZBcSL+WO_VSVWD?c0aQ4Drhbq>i;K+n4%H0qX+KhZxqm|>T-;6wc
zO}j!F=4e*E*@_pPHm)CTySERb%|L&We5Qru+}_g_9`XZ+I{`*=lb8imXNHBK4{#q&
z^#G%rWRVIh%&ajEsG~1~UL@;kmAUNqmSTbyq245kg;#!$#c~3Pnjp<nq{7wPeK%xi
zrmL>GeN2{;B;h}yr$z6x(A`Sb3lh>2mAf=m+o3H|^O}e5E`R3eeHWx4EHWIZNrC3+
z<chge80=D!pAwkjx@Ce*#w?<L{A8Ecut?Z2`>`o|k6oAN(%<ev8G`f*)H?o(jSxT8
zI&q5C%y*PUMU!TX1JGOhsd-^w=2u-#&JTwo%vN@(*9e2Hm98LIA|-r<c{V<$dmbxs
z|B95@<bNug{+gsi=8iB;%98T{ynU#kV@PWj64TY&yg7}zi(fQ8=dp_uzG!@3rlHn{
z7BR0BzB~=v*f>5JE=!U}Cs1BO>l7bnwgTHE;Th7C4!mrcAb!JIgyl5)uCI{2O_wz7
z6AHXh`K70Q^iJ<>I_|O+#q6uu0-N4w5AU{VQ|Ci${_H_*Y24pZEE6tDlVPX|=Kl>b
z{7Y34j!(iDd5oq7)N&Jf^PDKCqmL{lA$!C@!Ej>N`PyUDfl5+?12@6O&D5>VL7qT6
zk4nOP4m9#hjLP0E9rZh!|GYi@K(rmOrvC9i-xzcpnz4=A<0cZGa8xc(Wg|f}?LaS4
zJY$nAU0QloNtHC|)Fq$pUo9x|*?D|G@St<g-EIAB!|e5(3Xgv86TZH^Ud<N0&e4%K
zE!*$m@&B9+e`)y_wH&<i{)@KZe}1QcDepz-95#=C2RFPxbxW<K^l8hRnT$sah~Hue
zzu&fXOR;00akSsg@A^bOL5Q&IY{_i$b$ehUdV4>aR-}8sFHSiX6i)s5^oy%ns-rwf
z7o1((39~M&F>AQjJ17o#Eyj=~w~?_Q3gvs|&Z&Nr*v8TXrM2P*hSMAp%wF0!HYjE#
zJAAstu%L!y(=B$%@``0^rJpVppA++RyTQY^-vCujWT2mR^UPMYJz%-!cZ3$Z+LT9G
z=p;oG0gxfShl85Neo7vUSu3DXRdcXv0hkqh5;u{gc>XgW5sQ{uDOYedzoVb8^J?Z#
zE*8<#`9kDc*b~2$t~xX05Z~9G?o__l^<Re6s|#<qn|qa1wuN%fhH8-7($%JyAeps+
z)+=4jCt-;cxS`LNK<qU_4ioarKI*#J9ObH3g|GUJu&btWEd_)uG?i=Me+Z<((p?Zf
zXw2hJ%W@JczENz&ejQ@2Mpe@uUKmR<k;GvH%Z_%k#32XC_lt{J3DePMEd8AGE9Wq&
zqe*I0<bS;K$40nrp&AN<B_w|~wy}BK55<YAlENj;ad1XlZ<%mexh>-9i1A-(hBu$l
zX**<Jw@N#TsY#Vyvv1sAc3N$j9u9ZwRk<mMI!CH_Rb{SugBr^5zZ+BPYMxlY>%J}b
zR6SOb75>WIfJa=YBx3KMDAx+A7GVL^nRqDfLv$L|^V>M;4ZM0c(emH|Y;C;*bIuU1
zPFuY~9T)O&)Tq<?-B4%2$j#von`~G5AH<DCGy?Dwk8L2Zlq;p|dBK$D_G5|ny6J^G
zI-E!m90<%8Fc&d-<?zzrl3#kNa^N(JdDc2mt}4Id9#3QnvPUDWvH~6leY#nHj<&Vz
zpf(g17}vd|Re4D2zNYz4#fCfFQR5J9TJL*>E$9!1X#bA+e7tzbN-iu<H`n_9-jc-{
z>Io3P2l>{?F)B#Fk+3Pnb_P?GLDUEB*{h)Xn#n^W4x|pa#K0lmh2OslrCcEzDZi0%
zt^*^YF*z*RZ+B~PhVw}*fm2e*^%5o@o^9xL6?95<+)fOXYpA+ZRgi{%Ls0j=DETJU
zleGfmG^r<6@}clPIA`1(AmK29gaDW>ybdE;BGRYhYK83U726&MGHp<oxFTd}(Cf6f
z2|uM}{ASNP)n$`f)oPpM-DiHVqVNSQJoEqT-+ymvEmag#6Ubz6)!$)35Oo+^(e<eS
z3bCShf{--H<ucib;fWccJdoL;==b+|Tipj&c}v+~veF`#&hqUDH{Ch$VOaP<cGhO-
zr=-0tXKj)}Sg<Vw(vb*r5Xiq$-GJjT0=uA)(#VB_HWLd#@r{wq^;GT^-!-L}t;AAC
z!i|N)^(MwQQqf8;cMf!y4UIkH%w=|WbBEsok|Nfv7{JhXB4>%E$g`j_&v?%CQk+!(
zKXv<#xu+)5P_I<Clh8wi9(%EQgS**i9Z5&Mj&ZoCjS+P3#7ODvI$?jZU)IR%yE3<t
zvLl_s?Bu*GyHwqbX`z2#%DpXTUU*xKTBKYXS&f@<hU$R=!N7($Y({$CtX|_;O;Z0D
zsP%ch>M2Q_!ppaUbf^6-vq4m#PD0P`Lnp^%KqNNoAO*6n@)lJ5ux7|t<90*l3RE=i
z%E?QR^l9&p7xwZ=xZ*w!aln;OTi(23d_Wrm`UT5|)3y%H?g1~`M_@WcLC2u^m#SLZ
zI46f%w-3_>9R*$R9BP5-7IK;omnFVaHzkO35^!UmaQyp<y*V}3^UNg)O7n!8gY*H#
zQq1v{u{Gm6vyFGSF0}(xm<+kd&p2%eJA?j6H2V=Zn()8HhQHYIgAg4~sOwTi=r5Dw
zcNGLGMLUeA&uqpQHr80$gB093lvekVaMfwPQL@ts$z)H!aR>a>Y0G0e&uGi(T07dA
z4p>!)PEA^~u&73lEvY1(Q1=MJM&Gz^*P8AA-=69!xGD&ZZRMTj0I~cH<P;rjnUr@q
z6V&2?(0IJnX$MDX2J<yLTP#tWymhqBq4`SK`h>bN?IdYOuJU})y<uOg4vx}MJ87Vk
zSQ7?v`__HbGM|(jz!`HN!<*cKi0`I7Vn;uM+74V@P9NvYm^eN&Nwk^lp@}nZK6aV^
zjzF{M9ubl+=g#<8$=2RX>pCQ$S=#Dsx_q+dUCsIBzueRQ=m#-%Zjg3HUEl8nzox>6
zd4rp@o47Py{T-bk-;9le>LIu_FmSR9(7{ar85e$9PQ8fLzrcZgO}R<xW>Trs04Ajs
z-=PBM{MH%#vTonrpi<AY%+ipYyb7BPk9`_yuF?&zbPuj@8Y|>yu0~68;P;<Z$(A-E
z{h_qHOOJgps+@+oibczW-J^!~#^HT1)22x9i-$5T(7e(mM*6PV^xJ&nw>PDxdY?mP
zwi$T{W-Pp^FJef449I^)H^iak@H%JEH?>lf9w6yzU|l25Lx<X}=D){UD%K7pNAPF2
zSCuc@X~kW@&go4`zqDlM#nRVn+<TX6)erq`^iu(zkTmro6`-IZRmq^k$iO~<Yw$PN
zq|9(q{;LdEOLgQX6E)DBdP@U-zaC2CgHE=k;2zB1okFrk9f)yHDOA!@+n2VS;D*j^
zZXU(4`|?x7UfsC|G!?LL=NrNk@PKFheK@V#Ltgl@m3JEHVM!XVLPe|%F^Qmq^-A#7
zUo_$=I!<$P0Lzt*XlVWbP0x4O_dAG*(;*i+dldmY3zIwryL*FX`){wGxcStp@3?QX
zjt26Z<-fsI{}c!tCH&o5-UxlXOw&1!1d|YF`5INKdi98qTSG|5wCZ96$pXX_Xn0;D
zl4M3#E6zzcqz2#B?ctLq^xj%w<JEBM4TX6ktMs6Aj7|r$TPY5PNz_wWK_!OJS&jwg
zH&3O(q}&GFSyw~z{hnGw{g$@~%BS6Ap$ly81vBOtK}^<R0MPBKa)op<9@>W?bin49
zUY<_I@9MOzbUcYgWtp1P85y#LB^Qjm@-i&zn;y#Zdo&PNiZ)5i;-UM=agZW(&{6j}
zoPs~k*o#i)mlz+H(dv;)cpc(KPz~EMif3QsVEo2RYc%tj6u%Ut<^B@%y(5QTC`q||
zL{JoEO4wZ}D0;IU_a3-(r2sPi3Ev}tre=+-Q6347OU+_ZveRyvffwc>^(Mt;E^Q$i
zW7c&{qf)f9SUOG|^hE8i*r?2F1$6d-juh!erKjFq8dntL>H3grFMO2o5W67St)X83
z_iBRVq%|F&UW5naftBhhBF+*OAk~Cquk}EfF=RMniQz#5WIbW9@J8H*%IrX<fee3b
zL9!hu>z!Ay{Fp;Ve<IcY$(wB7?qHV#X(NuhI~&HO6{Q*=iiOAEGzh{5>YD?KC7^7%
zo}mRz$^|i`n=B#VdoL-L2T{=Tw6RnLA&|GAC<F(!#5nrwi0ZymH0rmDHpWY6hD+1e
z%72r2$~VMHM!z2@LO=2Q0(>EVQ7gTxBY#ZT?(NnWwX1c!h=uF#8TJa)o`D)m50>WT
zAf(L+ImK4);>IA#Y8Ze1AfaI!$YVzVOfoe<>Ul5#!8{KMVB;9}3Gy2P=3=t(E3}0^
zF<1lg0*_lm85=wlR)dmkUSjc^XWh(|?mG1Ern@;67U2)yVLzNfr|;pr@JfJ618fga
zA2L-uBGa$Zgt@2IcKj=su_TBcg{njowcZI;A>z;R6HnZc@<45bj+yu=wkvHh(ttT-
z1>IQGK>QX3l2PHa41+p{4aK@0ylYAwNv{az5kxceQ59jVO$VpzP2Ea8I9$33#IazL
z^0|<H(<sv{e0Kn3GYc`aiN3YbR38D`1nwmfz@^SW3l=v{Mb}C;q(<CV+F*V%c0F+=
zdMqjGi7(aOc+aJI`6qjV5{|U{vkz5Ws}FVORMxBNn?`%<jf4}Sq4RFP(5?;pyY>2|
zbq-T9j_V#!FB(>yW{QX#+Lg8n3nflQse4i3BzKdFjP|6I;rNr<I*Rl_%Pg7wjhWBj
zTHhV)(fG44j-9Z!J=E#Y)1V6ud0AOQk;!?tpST8V&W^)CdoE9$_@Xi7h3P=1%7TXW
zds_{>Y%xo@f~}6@#_+I6n@P3DL3pzN|M<HMuHq<CqrnqDMhXa*!U>7}ju>o>MS~ED
zaDku7J|$JSp`LYic!SiMvOO7!H!6?1G{ax>v8PbB=H80-_Uy8>G3mqYXw99p4T<s)
zYza97^W(1rftHZR`;jH|be*gJ&a!)&<r!TSmXEP6XXuC7JIg>fI(qG)lD6Uyifi%I
zxb4?rZ+hQECE2u}E-X(Qd971?P5AM{!rZ|Mfiz?C9&BP~9Ci(`sc_x|!G5lC>ukao
z4J+1^a!3m+g*}FXz`Gi<MGZ7-LYf>0C^d)<J(bT}0-nM~D7yxyGs3jI^|h^NRWBCN
zKw9Q>@#2657suBy(~loGgx$P&uX||gh*#gADMWlpSLkH!MEFY^-Q`-c3o#_9iNrTZ
zB|yTOgD{nfY6(IQDJy<Pq_5o8nyd5?Pa3&M?ygq9Yni5)0o;@CN!;{YFtO&RE<B$X
z;&UKmk<}I}TgSjN@oh6!6~DjNP(zzQx)}&ojUYB<#zWtX;FV?g=8yMq9|U58(#TKj
za)~6aAQjP+%VX<Fi<J>UFrrC9b$Qh}MfvTyws=!IzLtqcn`>}OhA0MkHY=WA?y56#
z_*3*%QJ?d1)H3f$&Pj~PZ}5E3SjRN4LURq7<{Ii-|J!A!KENYPRJRKW<N1oS;0#qv
zh*z3FrNj6Cnh|Aw)dr_CnwI?N2`8w`GM<%9kJuM|dZhO2vmQs<w}b`SZrfS=ifajE
z@t&gc5YOZBO}5k)T+-veYlLhN3!<nO4=Wsyns1eE3U}<h{I?e6&rW#RpgTr+8bq{1
z_oQX6f7xOyin~RZ_ixiVgg#Z>ni%P-OJOga2z}7WDYi8}GW(U#{ZZeB+|pwjctOH-
zo*2sH_5H~bl74VM4sWWYN-OPmwR0Kvl9kMrZzR80xN&-gZX51Ca0j32Js+EQCLFFf
z&N<VOw`FpzKzef`IlKAJU*BtgevHK)RrhrjSJM6fr|t&slVG0z6a$VcNT9EK#9tTt
zPZA?;4_;)_?ik%IMN;neY+t!tQ*{njS|tfRN$#-+ytKkzd0O=kBuHf>wfeQ{8?5h%
zG6ZGas91KNwNe<|SWnc#E{fefYa>%G=?r(3t#61Ynw%IlOslSH=M+Cy?l}LGJZ*p3
z8u#27<_l&I1r385A*q2^kTX7COp28w#uZUAb1A--W&+hsPJA(<`AQtUdElUIA~s55
z*d9(W5cQ4x9MtKsq9mXA@|R~h{U`hDbL`kbM#9hs;jnoeUjN^H94(bOQ3t8%g0rT(
zv&5d?%f4nD(1?rYEp3bgjgYS~Lw<G0K&2x;a^_CK2}<`cbE_b)D2b*&yvO_ex$Kd_
zJ*`&UE#@V#q;|K_lHaBWYhnaAn?SU$ft=vqjBT>76<xw>k<Q?8%3bYYTun?pC2dS1
zenTJJn^4m!pN&B$DkZwsHD&hkKcyaSFFpbKb)m(To<1+i+s+oX$GQQazxdUR=^meX
zTA$tigM2AK#DEkjUcgcqF@*?dPwkcx76&uGhrCt8yLy4Sp^HIyFk)BcoBuRW&>d`S
z^~ff@e8{}OAtNK@3Gx1^fQxdf&%Tj1ONW6&ZIZI+eJxt5g~<P7JCd5GU^|Y=p?<nN
zsazzRR2tFbLGYU!n2W^a2DeI+*@WnsV~bN#XE`_S4zSJW9(7(ujXt<KyaA`kNML2j
z_#xu{8`-BL6|Ia#;ZK7-=r@{c3`wCfQrv{nXIoC32I(Q?e+z1#OA^#N=?ap$(&#mU
zZ5(CT%RVWsbNlu2UlmwwVcqbk;n&`zZ($q<cv8UFo0We)Pd<woDE0@(x`f1fhWPCH
zts37(R_^wJ)DK7d`>6w6>XmbP@Ttz9)kidyeNc9yzW7VNU%@SnsReLu7JaQWho&cr
zlc!=-T(wKV^N!qb+A45r&Ro^XoEHeV`t<PojgP#&uxnGkx5W!mq3xpI>><cTJGeIp
zaS7L)JkLuO0&Y=LwFap>3e;8B>`LY~M3UN0`W!}Lzu%5;${B<FGXJd#u*C4bd?7dR
zdZPe059)k=;>PjlN29ZrxskR_tZPbdRNDXMC^}IrNmo&K6_peuP;UE>7xi`nta#78
zSbmqV_Op?fD*1Y8TMV+-9!l#RrT*pq*Ar5K7p8dZvxDl?*||))s;u;uT>5>6r07Oe
z#s$Yfvk$wE9}D_xub-9Kv4y!uv_99v6W9e`<~%eiK)1$TJ^_D_sEknEt6BvRNJN)J
z<6evW)ZpgsQuFD8+P;%$KwSj;QB-G&uMy^5ExQm$NXoT!qa+!n?QXm_-J852#Qrck
zekGx{>w?+p@-nnrd)fz7Wni=I<Jg0!jH&UIJVs{5J(V47U*?&>QR@@aiRDkcdYZP~
zNY=}GGAf@9xl)$Vw%gxy;=YsJG4A)7BS$W+o7>6utYl;vPx7<UA1js76ej9rBFu|o
z03u58ufX%gjU!_O%w2i(DVDA<QFx9y1jyNP_@|p!L@ET(S;=R7kU}@-t~^X*YV+Uf
z)T5<p-ML#HP`|>X2auk0Y4aFhe}eGKrZ3vElgqdbltuKe8V3zoMoIx3F3B;<l~3s)
zi@rLQT+wP(1YFjjCpAyfIXin#BvDd&{}A}M*^g|;KNUgB{98k6-XNBsSi@{(>k@TO
zFal+Rb?j>tZDkZ%&Np6AD0V@Kzgnr+(rJg#pM-C7q;3k%VGB2so{;KkJl5Gd{K?+o
zcR|D5kiVMfrQd2G8Snr5p>3#Gfk$du0S1THR=+_sDhy<i%>$k>%yo1fz_uzirOiu%
zh+o}qG(P$$OB|vvsJ;BjUA8-}KXpNlAE!4ErC!J`8g)$H8@@ch;!-H*(LLNBH0*nC
zwN8@49M**kDS!Z^tAw$d`^w!NS?FX#pY=dQQpLrA=oO5W)Q7w{2oJdGG|wwx&3b=^
zoAiYaoTMZgr8Rvh>YDX0NyI0NpY<#3T;H{xy<0=|3WM{k_G$QBo8rlMwN6Ksc@Sk4
zaV2ACC92L;e}@{f#jZ|Kk3g4p(ZVD!qTm@HKN(m8bbjfJWcL2fw+Z)8ju_%-+a}_&
z`nNTt2Wl!+NKG9c^&<Bm>ct*nTnuRe?~J9k6b6$F2U&bRC^S=+I-P%5FIni}QP~=f
zTii`2?M3Tu1smVUGVcjJ(^+g8DV;h{Sm==xBtKS`+vPbGq=A3k@$bhR4F&$Z52~j{
z<nAQ-J5>e}j2O_}j>?+j)i~_^3~wo&va>zJripf_WhO-DIAABOlFvVOw!Ko8clT7@
zyI|pkj7Yg%TIKue4(@Nc51b=sD}U9VT?E~&|2sw?>_LbT35_JoDyNzTT_Mm`4ParL
zaPdq-?Bk#uQDrK1&!Inr5V&JooWchvi$?nmunx&Knl#K<voN!32YYY&05j{!u-Sr_
z9kx0ggp5X~iRiI>PxZ#kH+&6z8}dKJM3>KMz=ndAlv*c4K^hjJ5SR>*8kan^G4>e=
zK=iR~%=ve&eW<0F9;fdV)u!QME!7tG@l8cPzgwBzvZgc7X>r=aNKn3x+Ppj0H&`B&
z-3Nkfh-^iKQr}M<Phn9o{~4Ux2RHcnp!QUR!WM3g4)AxpTIZPpO4b^eii;?_(E$&f
zP>ST5Qrq}K`qLh&+8)KnJK1I_7q(Vd%ho9NB<(LK?wVxmA_b_dCVf!b_^iNwL-MMA
z=TlOy5$Vcl+6oAT?Em?)pZ`+#L6iDMs)C}1Xb>=Ne;=b9M12!wIa1cu3R)IMIo2LB
z<KyAdHnZr~He&DLs-lwOqSS*?ZuEeP8=dy0#V=Caj)!tj#}TYFi2uyUU)t2W)H)z|
zOKPNDM;28rq;Iges0@(ZmIlPASJ3z9lt11QvOz|wBP}2HUDmRutg?&_o)CX^geUDv
z8~LzTT$-GABExTwKg2eFT#u3510yL`%#9~-@Z2vGSF}12!~oq1?7Z;l*3fK_V8Y2;
zno?MtRLA^5w&b?Yh(ml9=y_7S(^Y#EM>@jYI-EmtI8!~xy>>6vZu@QS%=ovo#eew)
z`F&EkY7mz642pnycrfNEW!K^sVMq;S9*>G&JWBiyE-LxszMx2?$2f*=li$r@_<(N3
zB3qpX!E{u+%>I&+8f07fi1h&GG<3o7mLeZ36GYE#Z46>(^ItBBZ!J|Ck1HG)%T!s2
zINPi0F1WDs;?*06L`z5kcr&FJdghXJG$@>;*Ui}8TD4la9?iVX9U<axQO0Nx&d&_>
z+sGF81ZA$v2TDTpo(}@A8#Un>YxlNq(IB;!tH1sv-wW7kFV#O_c=m_V8oC<3F{IaP
z)jBIssw8zx0lC&j^_;nsVS?Vs5EJ4v^{{(4K@@P-vES~dMBx)q+ixmcF&=-%biAp(
zB=Yn~S*0??_@~31_&Y)Cyw2PW33wzFdU?k%gAQuXyodJGuj)T3g<u{-NroD%@rK%3
zxeoQLCoE&EodYma637EhW;lakv#$XwpZHk0t3Vds$Bhq1is_+)N7{2MY_m`7cs63Z
z`@@s$6G@5?vng_{XGhz#mV({+MdLKNyQ?nJjw>0b$`7jkK`V-m*w1S%rkaBR$%pk7
zf^f$ZXSp0NZ$y`W&iI{I^Oik(*I)YySN6lQTA16f2iql=F;9gB6<-pdTrnZ46KPfG
z41jTB^8l1JQQ}HAtEfvho_eVYKZ58Zf$nzDEGa0IU7vl=QH?hx@DXh<($(VM!}0nH
zZJsQ%4L5$omABwV4H`(#6UICTM2qRH8sbJUwhSl-)9b?B0J_Zc>VYRfOp1V-xbs$z
zZzDA~Fmgji?r?<Vytk{{!#Fz|4;7~R*Jt!q)&*^jK{mmQ3TBPPDZZnBlH`o1%Uq<|
z)sqR}7#a@UOIDk5ZA&<q2CXW99-BFToV2}F>8y9@VNm~OcZ#cE|7?9td3(5<<HGO^
z&oTM8!CuK7B^iE8H1O@74FDG&93#oRB@~w06zh^7#1>tY&<ru}V{OG(!;pC2<!I(}
z%fCu49*$mHZ>BG>AsJv%M~X5xh8B%ew|9m$QQRvoo0RK}M*W_3Q-gF@gxT=r`&DVg
zb-=2}6K$1yF;lSNBh-zGgz0r69ZJ0!3C&9#aOE%-N$^*A^D9o=A2Rl3OTD8#_qGni
z)|olU_GDd*$_|oyrR09<YzZz+EfF5LIX^~wk~OYS=r9{Hx2O_H!F~2eRjF0;dmH_r
zr<;>lq!8hh)+qbROr<pijff3LR$$a)ZOR>z5W=3Wu-+yMN^4Qy&XrrjO%Pj-y7}Co
z*Bd82P4&+9e{Q`w!_cLEa!b`MMACs2u&;;XdK$&hP4$*J)(V?h$_Oc(Z?yQCwp|s@
z(sGFOqsH4Bvd%xF7x2BRF0XH!cHi94wZ9;<YhQk8Ve*#TAN#)f8Mgs28^0ocxE_)#
z)JpEm7K$OmQQ-tH9|4*2vaT9rDZ^2gaH+!J0Uhtv5{@@yL|~`Tfx4aEtVLddSzdw}
z5Fg<A3d~z){_3!~lPT@;jDNi?z^#ot7DM{8^Iwv4@&lL=gr+YVs;f*R#wsjGj9Z|7
zP13Y<vX!tF3|%lj>BZyY7hzmay70Bd-HBqv0OPuKD&3{JhvgGdNlh*%x{9OSj<(ax
z(?(|HQHj1T8fq{~9_K<~8;nsDPRu_k#$YkO6ec;nQlGAdC|=wr^?HEkB|FxHJjINs
zszEryJ23L?9m(UON`vEuW$HU2$fFVC%)1d!hkZluhdiQq34_ZrD!aAO<n3lt3Jc7F
zPtix<aMZ(>bS2vi<kB4*MP|&Ubc_15y%jvcjVBWB3P8q8#N`e14}!K_v7<p$wy4ir
zr^(@Co4U7Yieq)}#oqVZadN{JAg^`{_+A@Wk|vy-top}U8y_t<!L-ksdKgds0G^<g
zo7+rGbatl<^3R{#S0aDDd*Q8%{&#CbQ(S&&-j3%-C{61X1a&j}tEz9Ajl8AACBPr|
ztQ8qBd{Lyq(ot$trPcNg+Hg}!uQKjeT9%?AO<nOetOEL(-lJ{f3?EKUbMEl$?o7_J
z6R%DM<@S#l&f2j|W3)d)GxZ?}-Ajt)=`u-3jT_?Ee1-Hi!#oEYmB5%|i%>}C)*2V3
zCT7zwzj1Gw;e?9F9r~|7v{5+@?#}y*sN+P}s>UZ?56hVMbvxpknu_j$DKpGnqZI29
zAfCTPu%DPP^qV4V$N#|{rzkYljfbGJr92<3p;BUewVz|oGM;!rzHCa$;)4{MvpZ^j
zjkyT}IzVyNldRD;x>v)jXiwX;yq&3|bgb-jGJnuBT(uPZXIY5-RU6YoN;m2G+!(}%
zf;RFBTvWzgV~_~rT_o%;8e69|l~+KEn)%9Ht@jYbe3)AFh00Ayl7*^!epq1GFe@fi
z`i8NsRJKD#P_Ef9sL&o0p*R1S?M7ea6PNq!O}hVJ(Tc?}h_C2>{BX4w3H2ph0^$}D
z0FICN@d%V9W?!D>C9rjiz~+o{)rPDc$fAdZm>j|qQFAaKV;NfAo<H6s2oi>Wy6)u7
z9XaM@o6dh2c%kd&(CmsE=?}WQgXCiTO&d+sKB%D{Qwn)CI2OKSvVr3=V9&<^F%O9o
zX;^_jx;Mcj=pYum3nq!VSTnzBIj@5!F>7b2bPiWUYk9U8DK6TEI4H)}On4_Po8Rr)
zuBFnX!FGp{<)MOd!6f2O>3JRHsPIm*ctNfq#s9IPq%84X=9*T_f8C*V2Zm0Vt_po!
z@O*Bjz{6G};H0u{M1*>Xur09A@Rx`SWEYYZ8<{Qr-(c<vQXtc=@TIII0UfLsmNtOj
zVr^<#NPLpCoa5)#QLF_xSE4~Hhv6zUai`S5<jAw7J6O*5>ALYyQ+1Xq%EyfbNkeca
z(EgY3nQuLXgsV0jmtCD((#56x$MZj=KJ95b_1Np~IO7N1Ki5dxq{pw9Ozn1x`o!P7
zcSXCF@*)ZL>H_S%q-)#~bkK<Ch0HM4Ld*a-Cfo&>_dfdw;U$674-yt0Jjz?9r;sP_
z`hz_i-t5mWF0qe{>+6_lzBB0auKDMW`>M@W{>}AN$B57%-dMWAhOt`}ul}BK21`Qi
zCG0v<Vk8?{G^}_5mets=53~65+LsyMpyd)=VwkCpdx6Zh<XQGGaIc}DvsE=U-0|~|
zdQz$UZY0(7`Ec3U3)}H8+2|o|cYxepMjA6wP<ltepsc#r)rQm~7yxpmj|-ot%dn7G
zp5H5Txx~=U!+5o2Z|`z3@BOXe<vJXTItRN9CeOcp?X}?_sg6T=X9Hf8{-*UYN39#L
zy20~@QlQ4#hLEJTgs#MLV7^i6ny*pxPk}nCQ-rwEsL{A8CrHdT2sSfAE8}uOpSW{P
zt4-fpw<&!~`<+Sd`Dqg)Q-{k+*@r62%YM_Ec2qBZuUMpRs9Fb!g31(@Wr)UJq26wt
z%vI{Q_^+!h>39m78soH0j4Y$mq}qH^LgqRdEw)%?UuUM9-x3b}n!*{5UC(4#W7Tb!
zuCNc~t+p!Ck=AgX-bK}<SN~2GGk_hqOjg&j^SQu)PDk=rsMv5J504J!H_SIMf>vA7
z1wP;@H>rn->WFLSz{(ON&WSb<f*g`*Uq5TxcgEu>J?RARMUmjx=dcXDI^j^6E^I5X
zP>O!6{lQ#mYNA-Jep6)t7XlzqR1Hr<y#h0ll4FQAbS*cuG>M@t?lY<}&PYieh)T+E
ztTzrBRIW)W+g4S4>S=FK=ltB6^5{MNogZEc<@J`_H7AC&l!Gws!^ux$WJq(fs)Q;7
zAZe5N$UNpNz$$O4*d(6R8!od-T#yfw=_<=kVk1q1c!4Wr8xE&Uf`Y-*ldnI%8*u>r
zr3{bb?UNhQrVduUe3|A7#yvYBMZ+w>pVU(>38*3Tcn=uW!Z&B@ffOmI-)<Te>Dq!9
zG6{W~A+C8ww@@#$^s8Sw1je<JKf;=DN9`j2!iNZEOjLFQM+Nou<HdKT4I|^mE5!KP
z4vpxQ3NvVhu~#5eq=zO!ZcG<)Fuc@dd?o5q?Yp)0nBtH?k1HX6&Damq?TX#m$!>eg
zpLY~ZArFJ?Q!XpqstVdemQ+RG=_~&8-2NE+n9c)r9WTE$p(xsXdn*slJ`Hd7woLb$
z;`bGhFZ1;Lz1{8i7hikb(BuCCeJA+ixwrH3ovzs_0gK99P2X(OKy>ivg}H^LCH8D&
z_c#I%Y5`FngRps(XsIM&cX4%lP_txh$ZQ5A{<ueV8ggYaw8HkG4n@y9IPC(PJ7Q-L
zJj=Wj@MNUqbZxI^Syh5-TT1(!{}E0=!PZhh0uWzhu3SDSCt^Ef>9xi*R@F+3Cp|i;
zTyLh=={pvvULCs~1!O2Wr+cLJ#5>`u=<E!?-Gc0Pn<sxoJ9-w~2q7FTu56o_JUgL5
z>frq^$CY0x!T`CR>empSco^vxh&k+P@>ku;)mS6y;fcv)cu71vDB_fuq|Z1A+~G-K
zDy41a6Uxc{3-<MCp{SOuIg(ZyH=VSNR2!-Ka3{*H{6Vm;6u->$h}P^Zq_=IVTcn{*
zUI0nCl>+16&#8dFTU*P1&KrZ-6dI1Z!Nk2njj9hT&0EyC9kMSPZdia7+otNPB8(e>
zeySy!r`E;R9`><|TVH@BooEk#>||?uy=p~qyZ?<3y}RPwygfl0=F@+_66xPpqR6+a
zz=I>5f;r&iL)bTv0Cj4N*xF2Obu+ZwX>q(I;ep|%)M~W>mN7ulW&Tl?`I6I1r+T&%
zik^-CK&Y~1?0M0mG=JtDY_<%2*?HE3?`3!!A7Alp+PB&>t^cea%t(?HUH}mpNo35O
z0)IqEuVYBRa<O%+F?+>27G?#lxD`5*8BsN&N%hr&X@z7BX};46sgDETc09nh>=sr^
zZkeHsiE#95gGbszWm&;x@pm5~RId?I_k{@Zf+SVur4`#rc^NKHTeHG_hzhrMl0UiU
z^#}gp!k5o0OKF$cx~&0474dFSzq{2-9>3qQWvhc>a%<OxLme@5s(#;4df!MIV~Kjq
zcSs4XmXKh)6_U_kEl*f3PsGlNNjS@itS44+;$|(SuPh<niI8QL^{j8ixOjFr(k#{Q
zG$Gtg(YI%4$6$ZoyLT0Z-)q0N(flG%QxWm+_>Z@mfiJ0I+mGG(qVa618q7mq9nnmZ
zl9vVg;!t^|6p)4`UPkd1FdfKT1J+Vc_Lm4Ru<i$@SdV~CA@cJVjdg}zOm@h*h;VC0
z{tlf#-dO^}OHG2P0*y>@YUUEzjY>&0u0~W`T5oExr^4Hfgr{psX#6CaHvJCcs{gI2
z9Z4Yg$<m<zd4g|q>xA`aCa!fuN>tFJ;>%Im#g#8K24DjBEnyDdwG7t_@mn_saAk?t
zG)VuS{ZmzkDi%~XkwPQo@(9TiHXQ8FPz;01-rmmk85WX~85YtEy#YS+d+ee#O0}Wa
zlL%UCzkck83PWi3{GE;N6O493hK~#1G)}|skQs6V7QXxuR~o2=L60pK`aA=mv%~+Q
z;VUX`Rwt|OKGwp1{`ahB&Z0;a2q7F+Z_VBccoXx=RE76c_mn}X;yA`aKh-0;6)tF$
z)bO?>Dt)7q|3kV*z1bR+c5Q=<5NkO@?X%w1QQ`bBxN2eBelN4qr$NS{+??je$BBhm
zC!45G!H?jyNcOeS95&=CGTsDRSTF})*i{e4MflQ$aq@XZ2(t@jw880YZN6Ab#%}mX
zPwTCD9^9PA!UdJgo=Lwy?7*1)GbQp|2O+C%I^Ct6mL(Wl{el;D*D{x5DYOXF_`D{D
z6iE`tg7P*EWcv0Iu9H@Vldgk^T98afLT&^%5XxSe;eE7e+L3$JcUdPxlax4vU*a1G
z)`JI1C5RrKwZ9|Ji5&fi+8NQm2~~Bnb%di{(eI~*1%Y0FXwPUuhqgw7N69)NI$kf(
z(lM1HkZQIe*0uc%I&qVWIf{|^B1=!7Yi|SEY{sc|UJ;FKaGzdqJNmI@Wl0w2I7X>U
zP4oFjA;mk;xUOYG2FMu9F_dadN#b&mF7l&DNCNfg9K|lBnXLJ$lZk>#|A0?&c#dsJ
z(|akUeT9h*$lx4oa3V1BLec<h1>Is_htlFAzJA+<&e4M}WtJt})3e0e>+B*%!|Bg8
zn4jpqYTP2#B~AridQrWK*~}}J7Y<-ymIufSf_&}Jgc|k|jC4@8Rk$yVN-@A<cVd&$
zCaOzIHt(a62d}NdHjmOPT<P28{_^)V-)c)h>gJhRryK<|TE+ur3jlARGsnJyH(+>+
zL0W1XbfaE^?7z6ecSRTDXcqmo+crn%O0?mb1X)Edtxj`qj1QeoN5*w1OHW{rgVWAr
zol>!_E<N+6x*TrNAcZo&g@+-g<gW!4^>)g9QUI8<`(T`NlD?gS>au`(f-Yk{itu~F
z6@RGTgpiULJ0zrJC}`I|y7^<F8?vp6B}p3XJH)xY@5X?u5hr(8jK3~IcK}_QTusB)
zPgc{C*oD0DW$10`WKxAS{3r#dqHm;=m*r-<GQD!Maw&cRW>O95EWye39yZWO!R1;O
zrALzh2>xVfwkkE3;=Ap={7FF6qlLS(+ccPu)!iiY0(s0+<|6mSCed;+QcV_Ko0LX?
zpug`Hh`T(@tA8bSNJ7wrLr(2^fD(Bh>zHYx){<5#qom8#4XxomE=L8qXPvCWRh*|M
zdV(VCBadePHOu)`8(sg;wyL%qcJMp^9mPU0`)RU!Qoah?2B+^<(mW(Einmf}Slm&u
zK5JAozladuZ-q7jkliZhT;8z5+Z^*7#Ldd@JHp8N(S^r5Y?_?+6br(mzx594H0G2P
zwT+}2ANW<X8lJm93G69*Zp)`s2@FKBmiZPxpXoR>n_90rU+vdWWrg)VgrbhaiU&<T
z+*PyXSo#@;Wq_ERh%C#qZ90EkrX5>UY4tvwHs-DC=#r_Hnzs}DOWn5P2E6{&b(yxr
zHo;Ve$*fD^EvmwwV4MXqN^mqzTEdnjTf58NW}u~fWD&y;ow03lz&~#amynmz3kS%T
zoLs}RgTM3UKZeF1-M3-N_11)sX<qT2=kDjhp=<}lE~pD?!sce}hn1QrS=>1G31vwW
zVx1PD0}VzL1Eq`fi^lbQx`(qYG)LMK<`Yqy;%m|h{9v{reaa<)pW;R2SmlIE0g|)=
zxbPzp=Z0H>;8fh2ez*%HVi#*nBeA??lT~`klh_Gagqwh4n@pAj)FJa2E`p+@&l}<!
zk5r+g#G+;cub{3%@0;gVWY09Dnil{0>$0uR7Dc<h_t=gfB1tAOCv)|p_vh~gMi4Dj
zY~<{?QN6t}F`Wc5!#KLLI3aOb*PN2_+Njf}30GH^+K4P1A%4?37H;?g-W!}Z7Sm6E
zI#zJaM8U-c7QQ0_B0yOO_a2Fexop^u;%6d5;vyfV33h6LoFH1v{0a+bFh&w)2#E>K
zMOd7)@4VEhYH6ix_uE2fh3ZiIH>0A2q6{;N_HfySOH_Yp^o5UV>*!}AM#tO{+Jm6&
z_)F88GYFv7557}_Z$)D@MVQi6`z>9j*1;y4>u+NY14nK<Q<io|-}tnzeR`<)>Nw%;
z-3Y6U$9=ZRqumr|T4c$`lP7$(7kIzcR6!%8?nfYd5oV!8E45dfkYf;)!E#OII3o&P
zBSxo6K@^}=tgT!=P)qr0<`3d>^;_S?x5bU|z@|?+_8c5L0j_CWbyIeGrwpGsGbkVw
zBYJ^Mr(3uiz839a?l^KsI1P9FO%@ilA3WD~Iix)MSyQF|pX;u{|JTco!CZR26y1r`
zoLdjq&%}e|4{83RRzyO!zqBCxAyV5yxw4ioqkl_p_sZB$Kd9WRex1nJ%UI6X=k#s(
z66^?F62elhpVm|vApg3v|9%CKN`kh@**N(081*|mo<#kf0s6DY8D3pZ->DKMi)alw
z7a!7T)l3bP%_l5Df<>Eitw&SUX6Tu_Pew&Q9Xe%L7!|F@PXBtmNrUm-c6>1#b;e_x
zNdT0BBCOcxdetVN4_t&5j#qw%vC-EGNn=t1zj=%baEYIHJR4STY7J-U1y-%=tgx1-
z=uMo!lE`CEPCda=cYL%dhdFTD#}AX_B)4`AQZBp&%n1xA`KEDWX_RWDH+0J5M%(-8
zQO7SD8p=h2vsT<rBdQy<Z;wcx*b!=@aGjWU?qq*W_K1g9?WEH&BbIURYfU9+^3`nO
zi7PU-Ro4J3#_KJVU&CamcYWj_pWE9kwW^f))z2cej-0h8WL!SU&~-qR2!OvZQ)_-?
z!1ZvTsQGS2r&B4*!;`f=9oSc=b@%o6ckS=Y%`U&yIk~GnhIEewvzr<T2_-wyaHFMW
z`g7Z<k6M3h)-J~${5F?ifYOa;ke*_fEjEev2*O4BL2NT8@5dOjr>gy!u*;(pzU5*p
z?bE)3lqdxmH)>s-7E-PKc>?x$LbNPG%B!2aHk-+&J`AQ90LxJzHM^gE{FP0oga4;w
zhU*jT)+D(wMSS;taRK<CQ7>-T5D>pEXwfeXF-{-nLY~&_BY5c`$`w_m0kAA2Ky-~)
z$Q?I8Zx7&-Y#?i%<YD#VNkgTfKxrhkq$s@Wn9ERFY{d@Ar2Y`|d)XlWjiaT*TS2v#
zT~^jen(wnGC*Pe6HqOYFv*-ORJo!R<xN-a$L{y3zR`J&)e;f-~2*mk-c+Qz1ZeVzW
zvn?S`xQb`!WQ*q1`p$0~uUb76QKjEGQ|axACNxmYM#qUs4}xdobFzn_adOAj{jl(D
z?S#UuD3gk55Ldw0Uk77v=#;RO27I|Q(nFEo#J-c2`kLv>8m~gf55JPJRG`$6f{|GN
z_wC&9%BTY}X7WJuRlIJ)rKo!&XO_1SihP{w4pKXfujKdl1R5EyIY|}cz2MdD;)zGd
zJ?8Q_z<>whdp-dkSXZ%!R7bc0B|C$HUhwf8IFNt}YJhm!7)M-7KYtW0y;k97+IXpI
zi*i@z3~T9d+JS6)<=R=3Ag|DLVwO#WFr^?xcz!tYg*M9hSMvM>Me@AQkUXFAej>+^
z@^i)}QEhn~T+1b=jvNC^05IGqN00?!xOiUzN=bCGMxnPwx~#O29*P)1l6biACVQWb
zX?NpJ+S0&AmkPnS?V)qT^ruZh;iefe+VwzXC1KzD$$x?8m8^axv>)RESj`mckqiNo
zG15Gl5e1twSxCFYu-tHyDlU|>^oBE+wmB^VQ}3OlrN({Zs?VL=@bpPs;{&hZlAGPa
z(L$<069^-(h2g69tm&L`V{8rY^bbU1`bH%c)Te@zwWVc&hTqbs+%Rtm`${GOyQqCN
zMDRyNYAtcKETExT3%fP7r}AUltk5)oZ)YT=3BBD?qCLl)J$V|+jqp`5cn9a0knw6f
zD%L_9(SA&Urq3l!ZIoY^mQ&}B)FUfbqmL4#;~w?G8+RXL!8lx?+6W~lF)n5~OWx=j
zhqq_Lp!{(7HnK-m$Tl0@&0TwpZ&YY1-yYO{tklD@=YDjcu>-z0vwNtKr8NNPC*jna
zf`BEq1r3_5$^txDeHuAwOHujf@%;0;DfiDm+#M8d`EqLD@(Hso-+MuMydzm#javxc
zH{xVqq-`TaiGVK}y)JuY>t>H-*k29H(5~TWDP8UlNB&jvYZWIau>YHOkXDBk=F^tT
z6-I?Po~T5d6Rc(&_uj93*;1646HR=l_4y)vBGBwlR)GqWC(&AI*2&ZZW3n8+D2}4V
zSS#Iz<EMge`(G`vX|QrnSw~|+IN5+gWtyQ?#ZoveP!F_)R*-_S1CJdeZj!Bdd!M$V
z;pJn>@mEh8C936G=r1wE3V`zmm$SNK<u#a&;%F}&SUh<25#tPFcZB%WOh60t2ihi!
zqCNR#4Qv|6#s3N7FRHrD@qP73<oamDP%gZ3p}^;OzxS4s2~Cyc-wEdbN}a=uV7Qkl
zx~CMh4|>G_XZ^%yYcY0&plq>G+y`ujM3hk0&&}~x?vlCGsyz8@L#25hmg7Y=>2v0L
zky!qPSd-K}z!iOeBmW6KvUYG^%d~g%vfx8Hs$YQaYY9xzYTg|9d>1K{rnF<jOPSrU
zQR{P83nH#yE)kH#FNmw*D`dU{fVdNTL51smLXCo}x#KAy{tM5l_3I_$CN(8$>(Y3)
z88jE*>mKec9EOX1>`$^KX2zMb-YgySWJ`{aWVl*;`Vjp0OQ7e*8%j{W6Ja4l%`Y0$
z`vK5VI)`p$RM?}vY8|p-2U6p%Ud_<y?3J*_*NWGoes!RiW%}%RaHbO)z)!}zVYUzH
zo^@W!(>mm_68KQM&=I-hs}JU6sc`r(jElA_mTnB|b9Ub)ICE8N78=R_x=m-W;`^`n
zDTI5AMr!C4%M^A<%|V39?u`X6Y5a<l3>#HGNwOB;fjPAzof*@$b->K}g;e}NhQ9*Z
z%&TR-IpSok29wF6QC*WdiqN4ej#2K`TN$x`>I@Kc)G%q#89`9Gz0%;8rTxLwJ+Ms9
zQbuImeXp{Qk1*$9Mh}Ne%Wmyhdt4Z7%;ApfaD0MN?2UGA44u&lF*%m`TKm=q)2-^g
zDV<<^Ee9Ux)?j=QWn5P_D39%!_9p2C^GvI(m4~obPq3&1FES^|E#aV9Z{NiTiF(lO
zb29Gb%fhya@K<L;LakN=q%G8U-G1TJb~7k4zO?_pHGDpYK-p9TxxpNvZC#|TUiqp1
z<PF^HD2_~<YSKV{t^YTwY5BjV#Z>44o(UqM1t1l3?lueCQKhl!LbDupzwbE#OqPaP
zw9!gPWiTRZ1og@UbtR9=R+%WQ4{D>5?f5L12=d}7I5h|yyYc*R@s#DtwGUvp|0#)S
zkA?E<iFz{2G|)ho8D`A$EQ=A?R@zafqseZWAKv0hgHjU#!xIV!+uoBs<a6MptXLSG
z(yNZX_eFyT%S{H{b!*bu<{k_A*)FJ|M{(WGHEE4CY%LLRHYj6L&wz84FL5p6VULsu
zbm%izs-72b!!`7;Z)rOsu!Rsh4y+?R?##0vEInOi?t=;agLQJ_3gO$T*~i)d4D_ab
zmdC19E?+bn07_p87db=fnTx+drcnz|a)`bv&?~j}A`+xCz9{Ut!LBlF92eu{ES<q}
z?0$VANUt9sFwvo`BtKF8ZrgnQP=)8u1@y~7Gb^h}MTCN0q`3(HX@sP<-;Vzax+~gW
zF$h@HoT|J+;ZHY^L|h3Ye}&nJDA*xs6lDo^q4lhdH-NeD)ucFpMEG6wJGJuL<Bv)Q
z2+Oh9lPPaoPvsZCXwSY}+u8ZnF)C1lWb!w4h*UtvtV<>4e3B6ZQE`czv7Bmf&NQkc
zU&;Im^YB9(>(kz5fNBn1k94(5q(9wk0%xU(l)$iP*oAxI{O<RUUii5_*XoiT_g=5a
zISY&REr2?%il<L^sby|OCwLOv*K|LAzXh6lZQ93!&)kUe5^a3!ebC875KlSY48nd3
zcn^Y8QoTa+9{`WI<1PDXP-I+j{f+y6=eA|PGw}XX_FNmQVs`s3L7Vw3p-BD^ixP7-
zTWZ%-X@Q2kJ>9z2%e11@qb7?U0AmXSC-Q?pha=Yg&EZitUKj3w5$vkc2z#T$>o$Kf
zXtHp+t~r%4x0JPKS0go<a9$#s?oi;=t@xE$=mjY0bv%4k&z#)R#-p-#DXxU8AVi2c
zON?p=E9g<RZqbC_JB79hKwpz4pW=iVYDPsr+0yl4s5|JvA6m1}<GXxaX^Dl){Gc(P
zr!<kRttr#K&L9xRKFd7nwD)w5ttl&F`9eilOf$mBUZtN8d;56uGdH$OM<aXMEgxQ+
zBzJ`MI=%@y9C!$3K0$LcpBXc#6i!zy18fH<lCBkN13wpo*@yDHEXNm0SlTtFMM=Ri
z2mrZsw*e98*)fgSUhNyE^466=GLB^svI5KYr0eh>9be~JS|Sg6JZfD3en|Tz_%*WO
z_8Gh2YrCmCKl$3Dp_ioI0JPG}$5O>6O$TZ>ah>o3<2uI+08eR1j~v^4GAOd6>L!<3
zX6++<V{&q+tUv#u&!XwR!?T?~<37@$14-%{R4*I=rDIwx(9Vs<9CMU5C?TN&A2Pu0
zxh+npZ#G7L>e+k}WWOnO&|gyP%K~mx1aL*}gZ(3AA1XN`22QE=rTR&_cB1_)Hbwa@
zHX&=>i!_vP;9fYy<w`pl#MZ@A($I1-TW^H2RJ|Ok`v@aG*O;8M14uZ8E0&Cl-0q=F
zTR~BXukE#uB3Ie54F5+i+~EZ$Y$^{A?ryQwdE*+ctF@=BKtlyl9aR0`rJ*@;4b_c`
z_2?kHv{>a2=3~PstKJ~U!Sc$n&MvccGTvny%GY$BPnn~yH;4o>H+IfMM|kpHrg*3K
zxg31?B5h~$H4QZr!VOA;m4pi=o#OV44lJp{wXo`OICV$nN({`l-f!_^)!Aig$r5VG
z$-d^$<0bYjO&)A5CM*SZim=@4Wa2I1r+p`KmGNbjitXCdDuv@5i5ImN(`tEFL<<?(
z5^e%O><q*l12?q!N`?I+zJK;`$wy(f>aV(xi<8CMygka{q&!YNlsS1^wxIlRu-8Os
zH1cf3zN;_>*&ssc-~tivrr5@O{Y7IHREqKUuu7u_DmTtuX4t#Gv{>dN;zzOP(Yxy3
zh&kkArF%ndX*h5vD+)QkOE6<sk-(o#$>zQray|eU&nqMM@YVlegfgMVs#ygf97jw5
zDaA>3UA>ZV9K8@L)0PZgBNDuJOKJ15N41uoeCC=W0cc@*l?aOaHVoLMRo&ij|4~n+
z8d$~W9tEeoS|6VibTQ}MN#R>fHIL#C(*$-PX|f$rhQ^StvxN#kS*3^LF$a-+1)2;}
zGFtEG<N<QEX@EQyyh8)p5|nEpdB2em7OT6BOOglrkew$y_my?r;GzkV58T|^lAA$Q
z8#<;}hEw#rM`q)Tr8>z+v=nv<%TlERmJ%}y+U#MP>f^xb7V$|M3<9i`62>q2*hPt@
zK}{!-0CP1~qS^ZVma}cOZ;r`CHyHM2b5Zx5R~_?h8Sk3y%e-*Tg%4j#98&TlqM!C{
zN&VCnVGzUA20_O88pv@H8koQ*B&cmw6>1x-vA$|qtJ7{N5=ScRo4i`JifUY$=Ieu5
zQ@WJ?lF5Zs<IdQ@&}(mwRzks=8%TJ(?##$G!qN6zNy<iU-m!zYY47%;ZAK>q-05h)
z|3lq-hBbNjf5RXuDnb+x6ok0ZGE$XcS<#{lDaKKmLR5+n(wJI7B7{UimWa53OSm8+
z0wPO<fU+XHmLftRNRTWXtjHOKa2AsE{(4>i`^9rS_wl@V-rcWiZ4XG!^Y{DC&j2)P
zpxMc1_1s7=+;OfHH!Jl#(j4bW9?@Dfe!Q)=@mXVSW<X47K=S)I$;xfle+e7SxPtG5
z6r&*`tWa1g8#$Cp$j`Ip5N$Akc(}Oej_S2IZ{Rixr(sSE;2Hb|$55!kw8y<o>D2_e
z(^gmRbj>2so)q%MlKWSN@ZwX=KmG?>21}(BArd;@hDoaBJY{upQV|sYBQZs=O<AHi
zhRg)W+I+jrlBtat(M$qMv+<C)Qj4vK^Vr-s+jOy0uyZiDrtV8Y-n@4vnd2m?u@zyP
ziO7j`P~K2|2gl8c^J}jb{m{4YrCc%uKGtoLsldJdPp^N}BIwf$Uq;W|pqo?<=ayI&
zm5Vw0VcFhwkAwjp>pBXRH}-U*tIO2?2K><S$8<B4EM}tHKi`$v?MK{_tb3E02F~Vm
zH>|EBnOf8W(Z%itMWHE43)qi%v&zZ37Ik&@gaqsE+#hk6@mAm2@*SW2hUSdT_pz~S
zrm~_$*hfsnFFl^4)ojIV!Eq>4*c9hw$jpsR2zGiD(7wXB9G@x=t41@KxwyEEsZV3I
zm|7!qv(AS;->w*sW<Q*+uX>RrT?pirJ_t{VeL%Kvz8|eFV=0U`AjPl~1RF(W^-#Lw
zUQv&x8*EuDLANzUWrpVQI`Fli_J$J2K6L<4Vq*hu=DlvOeHcR<DN4wnxa2N->vw=`
z)6w)SXwp6x#D$;0b8LgpX#z!zYUSod?@37Dm*OQRp5nZCab+^t#F@Bu?!q-<$6_#s
zVbRO#Qfjo=KLbN~IXJU14`$L#7~Dr>`@EdrpA8G%9ej!Xp#9%|{Xa*&wzq{4&(v~W
z`i+6!iiuY(MP}M&5}VZ!UhV^$XRE2nQ_sM??%e$J*L1_L6_sqQ#a9)PPN9AS=czVn
zQNB$a9=mi(>aUW25o!Dl^;vx9w_K14?xY#A3hYv#L`%9A$A%b&1lf|2BZ(vJ^BkR_
z*68_EOS(x(_;1@zgh%V#mv}euW&=$2zw5}KG^%a7P>^aS(|I1Lh7pDTcccyZ>lj{i
z9YzSv#tJBj;~uFxIjftkXy$FgwG0z9T|$}7+Y0@1#CT--YT9)t&6c3=WIJ+$CE5n#
zPKkAon7@WC(B~I+lq?h6E(>tkkyGX?oXGOIbm9uL5;siYeBxsk=U`Q4`~V~QBrj5C
za6%nesDqx|61gYTbX+CSM;j2LpYj1?J9;Xt&n(F?RF>05#DGeaa4m_oCbDVestMqC
z<ZVF%M8vh^)wQ?zwDfi(>-ta0<!mn>zags4CXCd0x>opAs;OK^hcU$)&A)x%?fxNL
z4Wo2WeIHvq7zX)c`$KfEhs+=Yz^TjGMPUY{GiPGQ2qvhZtIX_1qpSQjh*y+=9KYQV
zUr=eW7O+<3(hsw@b8<>kwyP<2Jitt}skH6TW5}3<snGx05e>Qm%f}htH=-V(Kz9Hw
zLBw+-2bhM}R9oJHedcD-s6)p>WZ5HrExU*o)hRH8My2AxbJbrj1`<n8*Df^O%!v(G
zSAhch|1;8K(5=kr9z>&sgZyTwShp8Uh+B!v!m^{Lzruw)fNm&yJF(WSm<|(=YYiQj
zoK0k!icOizvbn$_MLt%SqUUkb=vh@S^0Ble%;<D=Kdz#zP)*f6N5zcWt1?Q){XeHX
zBKz-P7Yj)CooS_{+UU%TQj&jKO=fiBeUO;U{OV7fn3v!6B3}-TTwOcl-T!K}%<;(h
zOYE4#B9o@sie1G#4-*U`Na>C047Hi6qm;z}Rllh^f=?_9l6c~DP!|Xu>%T>D?XXL~
z2liaNB(Fb`TI}Z=&@|XSudQ9bp(ykC=a<-RM>YQ${QvCJpzm77{zvWJ5r%*%r#3_Q
z>*GOqb+J~Tz-lsd(RnBVnMvS)VG#B^ElYy$NH?aD#q)92+n(1x3-oLkm=BgmP<CkL
z{wNQK(caS@INGrzzck#=fPX&YY?eJp_)tU07wpxT-bNV32H|1|aXkCb=Z3|jFtx|>
zDqw7!8{m>oKvPPK(jWIM@wi-6R7!mi(DJza-n4uwX7!q`2))<tw|%!<Av4=Ive=bM
zldkD0cs29wmH)#5|DD0(%tm3WD^+?zUC!TL`!y8@UM<3Sr|%u(H3uco5C0E?T+>Vn
zU)SxzqCNOZILXZ6YY(WSOn3r#xSFmiF4&=Q)}wmv=t!h!W<5Zx9tCZpCPEjWP%j}w
z=9A}}b&Yn*oKs-c_iuxs&B$x^qvB+1@?-JfugvPXRP6(yZ|0m_$Gl|AGOw%u9lRgQ
zpI2;vmE88d@_BGdHxy~ASgP;dXwDbz$F|NZOyO5!SwNUtkSi;gv()Jx0L~_;#hNXe
zGWw(Er!OxarRyk*>3hXZTRV-0S_sMZxSN)Z<`wS*ek8`Gq$9T_oPIM7x0gRVfvcHH
zeQas7Q_>h{KPR0z$7S!_be8~q>ldcPqB0&odm3MBrdmRSo16Yd^DArd5L{uJB6O@5
zwa9A0qq`VMh~`g-;5Jwd1!3YDYtSFYjGMf1`eghn>a6g3H2$V>XLd*K?4^2Ud(&~@
z7`5G#wR+MhD6e@V@<>Lr(k8YE_IPQX%IP?bZRW_<f11AkkD6=RBD4cy4`k>cwM=-{
z+85zrkMP(W)ba?->6ZP#ZB}o?U$dCbM-LP#ut_Hy>Sg8gt>)!RzP2o%Up%{#Q@tH6
zjS78oYAQ1`Q%({8Yi>E{ZIAp>z|?!E#&l)L418Kx3*Tc$^Z>Tz2ye6t+UHn!n`x@I
z{zFpPBAFhoESsBI?x%2UK+7eTD}QZV7wR<1rA4(hYaql##s>6o+lhw8+wU7?hKeoC
z+I>YbulL7>-;Sbp0=+-|#I??~4+z{dpds;BYbYkw->i&Tp7Us8zP_j+;;&ksQDoVC
zUES*B{`wX&Wh3{`SNhbgE5^<~zVT@lkQz(xiqqR4-~Ny#{&aKeO>5G&JA{=}f82h!
z<n?E1@v@&!F1!D)D-U$tHLTSa;iE6LgwOq~7yiIThh+X!-l$obf{HR_Q?34{sghX3
zm-9G^Z0|vy3fnEw4sOlnBpiR=^Dvx$qJmTT7A-wEU|DV@5R7>Z)r>~}LAx~nqimn%
z?39FnIuON2a>S#|WBp7K3pPS0ChHlgPXrSw5>J-)c#sL@M_%XU=`12oTF#Ei#U3L6
zOJY<}N-Ye(I3ahAedixL)mjVePBp9{WBU}x$k~EUKszKkUOU>_VVk%a9g+}}%OY0b
zEF;V<qq-Q|1{B9i`C+y7X{yr40VG>~V(A5)oMrOjk|39Jx4JGeFYjq;e_(ofzY*W|
zY6W_I(i5tk`r3vVeeFogqO{_m@Tg<_N4F2o?>P{%ti5E3r{h}dzv67}gxz{dTJ!z#
z&H@n_G{{d(`g7vwfv}j!H~I+pVB}*}NXYrhEeF$_277LNf6&xVciSHK{6`T7GDB9Y
zD~;g1WALKppf&K6eHHp>)uOY)8wHbz>!z9@gkhe3BX8Z1%5-w!+<i&;Uf4rjYupNW
z({a_N`1Yu(2}1$)t~+9wh>O@2@u3>n|2u~69;JAX9OHK0P+y>Yi#IJJ_~i^MRS(u!
zrAIeaW;g?<a1CRp!cInL%Qf^tGbH#`uSBD!!p?<LstwTY9T&DP+?|TLOUgEYXESlh
zHvN27c8!7UeAK1d-w6;jS3|+8IS06$rAbhtWYCwvpMaEbLt(PGMG+3h$wZ)tUR!{q
z9D-gL!zA!|X~n0)O$}x9Hx!3tTTfQW*h#52Sj#yjuG7>~w$z_dn(tJUds+OVhT{Cm
zt#;6wJQ~`*-!%2xU4-B8KxLpB##b>rgu^kSy6L{LZw@-~V_uoLV(c1dv2Sw3Bjwor
zh+lK+$swF|0A{7|RSZ*-@{t>%bU1u-A%L=@-+W}$ds+Zmrnf<~AIrCkcRV98C*kOL
zF+q2#_QDa~v(a(BX-Ub*q2F(Jn2)@2$|!92u<vl(Q)3}Hbkq0Wk9~f8xppc@S4K=6
zi=(ck1-IKTwX^CA@GK9j&&)DuPtMQVx2>67=NG7-_{)vz?{2wkWUHy(LZ1viUJ=Vv
z5I4Ckib1fF%IV;5#%n2npx0=_FN0m45gilY(P$#UY0_=pMD%LWwx|}k?O9nq3!yha
zxJ_v#>|Aqz8C4i=^xiONQ~#znHPUnNidJa8!hbUq-lylOYzAa2#ateM#w=RUJyAO_
zV(#*HOKqe`X43QmTuMBGMGmQfgoFK#nnhtZGwTeavU}d0pe1<^R)i#ZaxFJ;rPit4
z<*_zEr~f?jwo;{&1zTO>@CgyV4U-H>0^5~th&Dj#r><7)X_gUMvD4igby{4nSe1jh
z77^%k*k0NeerYHx+bX@dr^3(6<}dH)vGDKxPkDqrm8yMP_Q!o@wp@g-i|zu9{54{A
zT^x)PIm!5?^zGvG>)$IvWjb}T3u3~$Dd#Q7e1fB&C|!pXw7#Z4#ON1iY^s-RKIJ^f
zA<*lhhWxLG?e;aX74#l8daOCE`I3k_IJAP=wYZT95%&x}J$k6!9JgvBn|Q;975~Yr
z2@NSD^BqGyn+F?>1e>1U4S3c!x9iuQ>1eBx%cVgy2I=FQqM^ng`4@(4)G+W_|D!nn
z5rgh3zSg{ou8TxXPmJNN3IG-_aS&e5?#!13eE=KnEwT{7eHci&SA&%%?$5s2N`NCc
zeXMelDhINg3neDuUj%|-M?11OHB;uR`L!hknUUxelBmpLnqjAp-0s3Qc~))EdR_%^
zTyCAeNsdXj*p?WU>%ME-`SF+U^|IAk24|hfZS!Z_g8JsXbkX*^sg^`S1NZ!2x(2=<
z4d!pP?7r^mwsJ?$jbm|l*|k?93^+Q@TZsN6LBlky&a6zITP~5LD6%;Ayo5K&lh|Ym
zKJsZb^Vex+DgD0ZQUpJ24T(7CePaJcLCK@Z`t8&8=h;Q!My>^FH+s)J@q6bR)Vd>W
zM{+kgQh#sf_Jn@l?oPYT@u_<u7U~0TNVnvtzAkG#hJL}~_`_HFRp^Nz+WWMDJs!pt
z|329_km!B<<h{6+OO4d#32+bOH)KiExWxdvzVcC-<65!=qfcKg6XZyS>B}TDQm^Hf
z;eYYHLZ5^U`F!7Ae={ZO@wk5>f5N}ikJwQ}^a_4*Dr{l!-+M?=r?I0+ibEMlsOpBM
z9NyJS!YY`BFQ}<5GN53Bbw}{G>Veb3M0efHMYOztS+r=2Ml!U)KkZXWWu$wf-xI}-
zrhdk*FffENnmS6{o?F?jbj76+*Wy6l5{675l3de=?)?eyM}}#drv@6m)fZ>}QCoYH
z@rpGYCafW-^jX@>Z+_cd#ekfZe;5EsU16;dRwe#zVi{t~g2gH7+PFc4T{`0BTrF9K
zR3=z#hEx5z$q@%Q1sw0;p~eAejqg@&d8HNiFqikYrQvao8hTf?4lq~?X3l_HXmuk(
ziAYiV-Ijl;;4;%Ri*zO?vZUvN+&yB7?DvV2Im677`%X*JDon@zTIQIM@<?Di{YRTx
zq!1}>-T{T?4>F-j7plsC)Xc*)=E$lQX%JBDa#Snh7muTNB~CM~Cc$I)c-43GeFG|E
zw4u#(ZN@{H@{z&3JjkMNj;dMK&kPX|mRIEm94LD``P+1?u0;NsHz}C>bKmDH_|kHa
zqVGe2Q%iiuXS~F+U)0w<tIvBI?$Typf8qJ{mD{cng|1fbtDo)pF17Tr)GAMa+4D=?
z{adatu`j7oby;el@}aY%f}(ujc%q18k4tI(K@o`Fm8G`(+g_<l$tT&*v<o+ogKP$8
zd)7r7mr4&r<Y>DD0Hnx!Vc`qn*RcY;*8k=BTK)ac-}W^|3;)U6AHU`8?B<5c|IOP)
zg7B!_0o!i3&+Gm-Z+Bbowl0g?y{#($^y{lvY}hz8bjI}=>o^Yp&!gr?YS-rEx*UhJ
z9UO9gd*;3^dq)F(+m`<5@#yAy#VbSlGdH8pQ754-gvaRxkF%c(AwCDM(QKi5-E5=G
zZr)6X1!gj1r<W|ft^QN1*;U1{f+^Kj1e5@bB~IoYw%Ij3Mcw&MNmm_zh!QWBuB&d0
zTkyJMJR@Ck-Xg$DO^H)}LljRCRw@X}yDBI8cj$#hT}2eaOm#L_*uW}uim;AORQ1##
zW=RlElcNK>uGx$R9J60NRdPx=JPy&xDn4YR{7oP^o^bO^WX;}!D|9<Z(MKSa#zk=6
zZj~PgY<7Aw^BJd|b0eA%??^2}OIu8FsHIa4|2j$F+}OyoDaUrzdq3}?P-8;MTQ1rq
z&82PmywfJ|yDwh0Gp<z)$k$2L7PW;2)vDdFx^WI;ZUhNl;!UACW1Xs#xL$>&rH^%8
zrMn>HW3u8-$RI7EZv!>FWJgK~^u<{VvBgPN<uh}H^{mx`aBsodx;$04CwDF<mAPiJ
zkDSd&#V5=GzY+4rKEQG;;HTXd*U|9upU~9B9iXxQf`ml12icmgkX5!^Bz<3xd}_xS
z(NZOWb4h7Zn~{{QaEPL=HwH*n{ECZ6u`HuH+VbJs{bF=8C#Ga-ze$~99aE*_ip)zx
z;prYz-e+uN`~d`<^+5{q-5-&xWI9Fm;O$6Qv|B=X<UYFBW4Mn_%j5U-FeM`m<x5(*
zgv5ognkn*1wwEhyX4|v4KSdg7E35|W)3(BNYe?!We1N)i7>y=nBe8YvZ)^e&b6=;E
z?qF+%hkG$O>mzZd%83_I>Mx?yPVy9%5~g-+j!GA=Ll$5cskw5zv}x<n{^lV$)m(}_
zw;0Lhu-;!rE(^TjF27D?2zT451#umhjpc^_X+m&Ch^aQQwx9l5bk2vNgAeB!>s5y6
zUoMg45NqAPPjp!9`SsRxhN*2^{wnpHa*!$x+L*cC@z8@Q|JC!mYif}x|3G<`W&7a~
zBj4cWy1L83K7Vf*^FAuvwMn)gD`bH#wga&hTE$h48W&`qa%jKH=&q(lTxlb@jBXle
z|4E!!E^*jq>t9qNx+*bmNW0W^VBkDO@P+F-SUHy})#{Bk7z>hVOneGxQd7WDjFUm2
zCc_#tE@vFCp;|+8kw?k0Ue0LH_YBSvQtUH6bp%|aV$sx&Xm&2(t}Q4v<qn=<v$1w9
z3zyR6!{?fwQ#_9k*_3j&tb>ib(=OQ>&9B3u$R~+GKA9R@jOumz@a%r;x<I-dDo#89
z5kgi7MqfU^=B<bRn?J5O{@(ui=A%7#Ry<g(9dM8rp~ZPhu6HedC`|4T4k`5wBn_S2
zu=hi^oczb>obJ2iU+<pl<X^g*$X9<eLbpRxV<^<ip(3nNAV08WT~GO7T>|@+w1QHc
z77`~Be9Nw3J5qS=g=wSP(lYw)yIZUGgadBvp`fRTY)?_$E(y5I4C8|Pd8*c1$MJ$Z
ztUYgXXJ~3qoNrM&o!q=@>+Ptmi4Sy2oYyN3-_~_knbJPGzduQP4^7%%H*eaR7g+uK
zWX8Qj@1=1%2Y%>Li<zH3v*-!dXj;n3=2Z-?J@YEX(Mv+SDzJ@j_aR~w{tLxPcTaJt
z5e-tqz`k=$iF(Wj;XbO3Jod7_$otmPBSQDV?OZmwM~nEhmgNRCu8IF+bDkz^P-(Fx
z>EBwG&~JJ&EnZTFx*v@RjX<^F7Go_fKqTOlgzu7!x{1Apl7Kht*6|E&^S>!EH>aiy
z@q~trm!E`H7L&f^*PeF_{XVv(T?Z+D%BU;lC7#KV?Cu@jt4cGLLl541S6umznk4}K
zg>Xt(s&^o@e=L2(Q_>|pVHQVGnSg>PMdJWce69bBm&;M`@D`Qpbhnur<+R&%`qTob
zTy?+Lg;`-@v#DRy{35fz^#_Wye^R9Jb>RyBBu8|Ug&Z#dv0glTit#3kqjUEgfG7~@
zZWn3-87`bRS0mKx63yt6RcmBd1{HdbJuiays3g#?1Lj?S<pniRn4s0JHC6AHRUB@V
z$f|@n8IP!N{b6wjv#)^BhewaoZ6JHI)fg+7EzTTKz3El}`iY8!Y>c#cj5#b-L=`ZG
zu}DU`v0^VujETjkHg1NQ&Sps^lrybsBTN6JM2;1C76y<6yHrE$YSo*k+5e~!xtuCN
zr;`ETTZ{&QxsAJaDcid^GGtMW!ApywfVh{xRT+JEG0An(nDk4XQC_~Tp!-bm{gcZ+
zOnXQD?mu$5y0C0IRqqN@or7h3k0yc4>y)e%I;zwfsj<6^*o8|au2p@HvOJLYK5u9-
zo-#~(@A@fc8(xicx%Lrog3a$MV_Tm8IO3UlbbxI<K7ID8)l9`F-BbHC@4V6chxh+;
zuD1wtndML>{uvI$+QsLU%3uCbyIG^ID!cbTni=YfJ8<O0oG+*0xFsob<<NUR2_9Pq
znm=A@OtKI;M^)VG9TBS9iC3@-Otf@AR*(TqI3aQw=uHe}%Rc7Ri2MbVMVx9IHKvZf
z`a&=yMKY3}K!^WhnVS+sl0h3bEYA{Yu9OMeJf5IY?a?85)ek3+@mpe<6cg2brglf}
z``-lokw7<-cB{CsEqB#3;I~&Q)tK463X>KQOOxiJT6GbbKL!<F4MtlCiw5}tlsZP;
z7!;Q6m3jYyWM=&<S<Ki_!Y?vHa$$9%!QkBAAWTQp4*Pu)2=~JgJzAdCcg`jLx%4RJ
z1Mdo+!4VCE3uZtk7V$~HY6~cX&#4kmU>bojv!hSJfeM)9KC&mKG&+bZ1CG9NJaA^+
z`x9=IvamW?;pdFU2X!Y~KU=@3&D?d{L=8W{zk+`yROxI%qOK`c!neMytX4RQDz(QM
zdT*F))oSuTYHtN5{nN9t7G%cv%6~I3G){;AleceOmOTSc(GL61)e@6)AI|Dd8g-U3
zAD^npvOD1}!d{<MSDs<EJW%N(b;)?q1N=sto~X8ZtLie;Tpl=NQ@J8MJ1-|RmMM-s
z3oIvMTkewipWmFXIFm^+KU)80E|B1!_vMx7IrvxLEch<V{`%u3cAV?D=3Sc&`>)-n
z0^S|krq|*~ve?`9oqpzqhrhkrc6=-J8Kqkb)}1~844RuW=q6k%J|P>USoaCEnVeIR
zsg~%UVNSpa!|0+o@u^x<qkhUGU^ZA1$LhMu9ezfHai-?`1?&6R+74}|rra58rAe8z
zxT>#a%3~{;>?;9XdGll38f7q{xj&Mu<#gikpvC71DdDF9%IRkAoQbo1gJq=!wX7mI
zlmGekXMvyPXG+DEJ1fO^Aolm&_XXDjJcXb=ZmOevh9?tNpeJ0pbWnF)1%hg(j&@=|
z!q@&r;ycGb2xICiP8NmnZSNNIA6??vpU*1xAMt%VJkqt%p!VsZr8}!0KDk1NG3@vT
zxFo-$cC8+Z)(jqVjZd5X8rf)9mzQBnHLYv$yKa>($#HwA2%|G~sd<C_rwnC*GC`+`
zdHKnXdu9eizFyOCaxZ&8W8ni@Dq=2Ic!J9WpekLE$|MC<lx~3f1oSx)#JF`N1N-@;
zNadC<t-rkBvMF1SCrUaO`a@d6&To!<_jrok7q}naZvVfxNvoj4@S8#H=39dd5U>{C
zE4R&Qb2jOt<8jv&E6dR8_AlcLl)PNCWcsnkXji*;mS8jQ5j)XfU@oV@%ej>|cD!+K
zU^gX%r19t3+JrETKk%ZD%;hw<b|&J6;WOK#p$3SsB)4NRZ042vf7Gr<HW56ZH4W0S
z<&&UV6xxc{oUE@*ocX-@&Xg->pwV376w_8WWUJd^DM$lF8M<^kd!Xv6<_Ht;SW8gc
zODyse{;k;&1fSsOBsMl-$~}}UdSrz^?V@{CpNQv38mmlj)|0v2Q20D?JF{AgDZ%Qa
z=_dwknqqwFb&2888Sm$PE_#{+Tl6m`YG2tR(BnbTo?*IO7E~oJ*ZNt8k7Mkn@5pLV
zZRYe(SFkx+uOwLALyyQk55h10IA8B0=Vc0q7oH3gmI(RZxkNmBxalb7EvU4FUZY!z
z(%<ft+r4o#5sw<S^0%n|5-w#Qdo*rDDY{$C45!6|1VE%T>X>cj(UF%_b{h5AfDPry
zcz)jEv8MXQ7k2_uM&D}u{WnzmEsa~nWEN`n=_S_W9WClmPG>z{njjLcoCvbG`%^V@
zElFS~!-9E_Q71<{<#Z<BPQGAO^#l!Q%g!t;>iDfTD~oTMb<rAUb5G|AcEGG9eJSc7
zhQ(B(U@00arf9S{Yk~H3;}1XtXw5U||1|<yFaMC{EXw=06aGhXw3{+Ao*9IG5hZB2
ze{o-Y6m>~Wb%G<B!D-N}=H(y@PLGNb6ELS}JUstAM#C&Mq;DGA9^8^$7w34QEIdfx
zzB?fIK%-MkDJj$F-h#_1n|PsrM+8M70wtpg%xXYg<*h<KCW$ec<MwU|3UhJpcU?as
zGl{d>&O;u3)|SRU)!yVD>95J%)49`P+QNcz_NIWx<FC(8-1c+YI#&RLV&F05sK9(l
zhLMsWAA~dw(Y3{1LGu!<bbG17LH0qA|6rod$9Xqm!f7WCizy1M#P35LDY8=gW%DlC
zmbQXPZKoTamEo=XehxR>0#QT5iyI*|KJv70Hb%?R+@rs&JYp2*$)%jG;?|7Xcdn3@
zm04Jn2VdvE{_{0|XStL@k=)dxZN0fO*uC%MetbIU%Q=V*TYF+ut2pq9EbDpACN$j7
zFVHrq^Fm(|*L`Y61a~jmwWlv55wS2tE8qJQQh9S*=HN(&k#^#J$&5aUmwm2E-r#Ft
zBR&3lUqaI~;LGHjsnlhU*7);VwAtk~yGKR>0y=NCP?zr9nz&-~4T}pd`r%bw8^a$b
z=l{G6=DV^{NDoI)7o-%X5b?J;qI>e}Pi^T-!{w~CiVcrInVk}eTOBrEE3g}E+%3Uh
z{|${gE(>Yu$Z3;kjT)F}98B_hKBznC=^K%2zy4otp-UcU%0ay3V<Gg56mauo00}xS
z7d1Qv85nLMEToc&&)nLWCbY?!ANwsLN)*H~k7f&cBvK|Ymu<{Ex}VQUh8jPCZu5{(
zD%>zr#Er1D;&}+ncb-(kXZ@+By2cc}#jQYnIsml^jncIeNu|zs-d2JR-5#xyNY!nc
z_Vk|cGVZX)Bwpj2CD*h!UO)MaSCjJo@@&sxwXDp&EPK9h;i_46RRQRoFc@9%^qqBl
znJrM4AV;NEU1I7LOY7bw)-yqZEc9h`B<I?!`>&41GJJ<%tuo~kD4Aha4;S95>vJSl
z^vcX7OBeDu#U0d=(Vj89uBT<UN2#FU3iC9`$we?*b~dl2n*(-Du@RE)vNP;A%^OiO
zH#XSWmXnX8F_a=S)a_Xv;+!v`uA@7~x7#)ACJOrZHR3Op2Tb`lH5XdltF4TpmJko@
z3acmrC7<^5meLu^Pc;p3#-#y|L+W1CK2I^LdtR4owCh3MhIIwm8w$?d^nK**vG%^n
z;XCU!6rmi^L)CiZQyfzSy;vPJ-VvKW5wsr3y2kvK#gAz-H9&X?!IZ*r0FQsXDy!=<
z@=nPg=ZF0JH$I8)eYeOzz?a0ctvW;@g;KQ}*FJJj*^f2;uSrn8p<=_Jh_m9*;&#;l
zXYE#``AVL1v+`j95-3bF^r(Wj^Kh)y$fu34gq$6fxNV4@F5U6w*SXx#p9fF(Gq`g7
z0o>>Fig<?^@NxV!#)@mi%8W(59S}L7I$qFBa|CNnby_i$rwNV69=!#FQFgIc!RUR9
zIVbaDaUcKuvgD6DOY<~WT3qNh9S(Loiuq`#f&+(SC6t3ktZ<{^B1JrEfH5Ky*`LxJ
zElbe~%RPOLE+r_rjkSUS<;wD_v1JxNE_`wW%$go8@gFrWZeecuuQN7H$0aN71dJs8
zh7rPoQWN6!81=1&yzh-77~*w@{T@}faN}G?KU=w{*ZZj#SUPLdJu1hI9{LM9tam*Q
z%l?>CJh^aE@*uD6_%n86ZN&4dP?>Gzhz2V)X#^Lz6vt3}hrb<=a?RUS`#{R`_p#2P
z&D_~ib1!PgUK+EbuHGuaEZN3=v*)PqIRD`83BGT0cI4CQ<yyyd9ZJ<0cbP3jg|?^{
zFqJJhKrTCAjA=e?D$8eZ+NO(TBVG3EDwAtcP0nf?cQRI>p%SX@x8Haw>djxZrl5Yr
zDfXQ*GOZ+kAd>16%6x3A4{iBy#n}qNz&XfCcpdn$#;|ahSsUhT^k$Y4)3w0qDra^X
z@$MH64~OSj@n%_kJISYO)=fU`QF5d!vWz$(SciO$7mpa{{2iJ(<l1kobYAXB_ANMy
zISD^D-f^p#st-SQ3;x%DbX_#+(9mZ`Gm%gSt!(`|WfYQ^Z<j>(3K^?h?duP!Gntbc
zh(GZtWs#PyuT5Ng@*6xo7rP_xxm>gd&1M@ofY|9naCPq?Zt;zp@P|(2)rgs;D8QL=
z6JIQDQoYWz<CQ5K9u1QW7V2)$F9M@j^_?v1dgRWsGgqmRU=)GgJvqPz@3-f=L6h0J
z(vA=B`g_cs)EH1vwhZO1K`P(?FRf*DWY;BGdwF)4YNJ!g3;K2mSi8Oc6oB;8ZcZKL
z&Y`nT$9=QEdZq_FtE*!V23Kcp<HQLB4*6T!Rvg8Q;NI?Sbv8ikrU{EXXyleWD45K}
zQ-oomNco{QMXa>ty7!A3cy!HtvVYTnx9x71^L6$`Rga0`+1Dg^+pk9<+dn5+ncZ<!
zQ(fYS5Y}?^@Fy_UVKFxKipy6~O~ygd6%!A3q_j>is~&}CG0n4`wXE53im?e9%&R$L
zf6d6Cx{L;r5k-ZCUBA^vMJ*U)L|NmUzGeGCOdC~$wpYx$;%EZrMl6INErP#sX{+~6
z5K~vsPPkXSfqGVI)Y`wZY_<pM#ywqI^%UG(&+fB)kfy%<sbB8DH2$`Q*ITR56y>^s
z<e<qIER<K$F3ogQtGHWVUPQCU+@59yv0CiYlRmROXI6TZS}$Lq>Wqf}cIdHZ!7B$}
z<BmnbtsP)*u6oh<gSbbd)o6LDn6N4ge0~%FK(Oj^fzOsS>!1blZ++GjE55mt-QoV4
zk)8Q9PeCGj^L2iIKYynvZhim0zGM5pX?v)2yiq@7sGU;>#_UUoYiL@n_J48onIub)
zJZevgwAA>iA*(BINflbRXg=acbLe>H^=oe>`g^~yGsrS-#C?D-`Exzpqug!dciCzE
zKn{%~EyO0?J`-F>^0tjWmsR8kRwCzfibq^R&J@4(`!SPu$=3GLE0d<e+``6VEfflM
z<8LjiN&4=OpFB}lKxx|&<Gfa330MSC6%jf31Dlh?ST*=f!ndmp01t)Rq4=#yEe7}G
zSnL?Hh2n7djpMKVd_a8MEhecp4_Pmoo17LLpawq?`X5ZCICSmDzP<N7Eb6@FGPk8`
zTyM2N1L3lI_fB`ob?a5PyNq@oJb3cwldB%60XWlyh#aqshtXc75dEP|wKBGNim9!@
zluiJtQKe4`GM7nj7K&qy<lUWMGtyilQ__E^q&?wDUc1{!eGU;;qGz3K=YPIF8RM(K
zKXTK%_O#9&$ZFZp5$qMB4loMUMxqq!jDKu~$lHh)mvT%Q-2l;|js@guc~tcm%7`~A
z8iAb9HWai=rZMcYa*%!?G9SHopuZxL+-tue>2~LevO_(?;;u0FSpV-?fbufn+MCxR
zwd}=TRQ)P5o}&W@cWgz7FSTu%E6AWt5*k%XI~yC*DYtj6bB<>^9zQj)H=OVJswiCd
z?W?6(mvp;H4o-~~H`G;$^WL>}ygFMu-kTu5paVALqqzgS-}#UFzjJ-_F5uM2UzPd@
zL9g+I%Xf~ycTV3dD?6mdyfLHDKhfH3gy0nVdh$tx5N~Z_*4m6gqNM4IN5ESwZ~Yq!
z%bIenwmc(bzO&bO!pI>0;Y8+zHd4`qy>k|cTs%>00GTuNznSyc!=svA`s)7-{ogY^
znGrtglInp&i5bYV;1>_movQk52pbeevgW&Ev6?^0wl{U~5=sI|6;oEMCoZImp_eGQ
z@*U6FcRb0Dtu}o<i2SiFZKuW}%=ePhI8?%d&%7K8w^r5|42TaLQ!#VZn5INf#Tcm`
z1LPf3J}}U1Mh`+aUq-MU0&S%EDq`NsT2ja!s%Q)m<!ZGxZ;{z0gA}6V6&s$r|Hl_&
z0W5v=Q@fpAbvGofKUx>Mf2w^`9{lXaVfC*}g#%Z<2=b_=%BOglk@H?q*4wb(L^zFE
zJfk=YIXF<oZ(a+-8wxTQ$uy#G;nDp>tYrMk#u$SVkur#^g;E>0$~0QCuVsP6M`fHN
zF;p+yi0%`em{39xH(h#bLTFn^u6@o0YlX)giS-Kngz=YeqYp^PE^zT+KUeD}#mUI3
zRek^m@>J$mGO&9U$H7)6K%A<rAx>(e;Cy73qCiY5?B*_raGGcgfnEEYry!Jfi7Qv5
z%%3u2$jh2!I#09g-b~b1MrR&X3t_f3;i;U3-7_N^u&*o_!~dhU`=0t-mSQb*6PmJu
zZ^kHrcInQm7`+SWQkOEoCGU8Fa89Ay#T@B4ojRty;j;xj7^~Rq14G)bG`6R9sQZAz
zJftk}6*ivkq0cwTET>pzJnL2#{-Um=K>LmSt||QxTo@iz4mokPvOFTAnmcno=j5Qm
zOO{bnzMCQ~yf<l-&3Zd@M7wzSnw{N)NrO!zZaeKVIaA=V2=u8qKL~;$_;CDin_Q|a
z0=kR29L7Y6l`@cBk$_6+lqBgTCy@s_*L0wNmq+$)q<f|RjD|#sIja@!gEbA<)u&Ka
zhh2Sh&IQqo{(+0)UtWCuz%8mu_peb?U3Y|(uDO#TFf~TpZqN_eDb{4ka}Y;=%>=qj
zx#t+sgm!mqTk{Hp9_@WMD%R{eJy?(N%306P(Of)tWm2%&RYpk6sL63)+pBJ_9H8vS
zUn9+OZgOgIU6|xNGXy{p8|Z%M3z<tt&^{C<<XRvqiA`4cm9Xbi6fThxoPKyVGocX|
zQZ|_xy{@RVJmX#P9U<YmgtxN7;}<LS0a}6FM9Fr<h)1cNrq;?^_;B0`nrE9oMZgCA
zV)(C2;BmqFY~0A{n&pMqQgXDQR18Ss!`xpVxaECbSoo+F5O(ZQ_Rohb9$=qgkpr-O
zHcyh8EoyYhSfZpB*4ye1X6;N;^X6BY9RWgh1&-BeAKK2+oU-3D?!2~97Ezymt=WX`
z3v>vN;ERvK_!$}V@#Wsapr$vU;@fLoC4qZ=)RY`$0VJsp#F42syar?Yq#RzpD-LXA
z2m5K~W3&iq#Pw`Ks?kszGbyURr=vM7v=Ys7AAk;(m>7Mj&?qo`4S%B6N3icrxm9FN
zuKlj}jVUazCN-7D<Nq3o%2^4_YN~XdjMwWkz*wQsK)JGX0;23;XEwzmmEzEwjLpO2
zSy@#cPPs*ukzz}XPrTQQhPVwywQ+OeOxnXc?zeB7+*<<tJnV3=JQu}2@Ix!d2-6>A
zV`5AKTl=iAjc2+YEkNQWm@C#=QpV@*qXXp;4o<-x3~YbIRPNbNNBScJ7Gw7qCpBev
z|1@A#kno`Td4!q@4!7tI6A2=Wn2YSDeMHzR&fj*Ee)QAI>P8UP`I!e^NWxU&vPeww
zg6-|#A_sr;A;_{6VYKNQXh-2Yw9AdE>!ci<j#i~xESOe3xGXTKjj+#qqW+TE63P_4
zAhLmv=eCFq=R5<|2PV3M)q#DR`jWK)><{nB+`tc6K;O?hPd^iaEVipm(X=8o_@z|B
zio<JKEA5UawF`{j*m#|jJEX6D_v%qVQ=ISH?eDX0sIjUv6(;e(OY)KXp}T?MeNdTZ
zjZZTaYACe9*Hf@wHlNhIuNTRU#Hi7*hqwwmQI2J3D_5}@y}Pk_Q-6fEEtfDbH{x~a
zwJ;!TOC!aobD|<hr16o7nuAFdc?`Osy6Mr7#XVuzXYv$)FlVX0?{^FwYa$*+D=*3}
z5@lMnAPIB~TBPjNRf-?b&=4`19Qf0z(Ww*f{Ao8o`4FB4_<KC;phQRR$5b&x02+9=
zgQEtbZ1K#cj<JiF39LR0Det~C-H86~co}X2e-$+mT9rOWli~vpXyG3Tnx_CecV*#R
zAttHJx;xO{S8*bSS`vOVFx*?t|J9CE#J|Fbg(!2DBjN->2#%`+4Y^RniYx!E??24!
zB*8K?U9%%LFa*uPcTm@&S)KMiiFAS(i!qK3R;|G#8Pw~f7L7Ms%f4^qy52246&^Ko
z$;a$yO*+Bg>lFrzz6mPbE;>~Nfy;C`QrUrd>j}POV>3Fmi%0tCUSq6Psy;)kjx|nS
zNUDm>u*tzM4FV&;_kxWv-M;1To1TJl7EefB{8{e$=j$-*k^PuI@u&qxVVKp$K~7RM
zM8Yf6&1y8JNV5&xF)f(MrG@zP^UdF(1?|i=%QEu|{KM@`&8V6R$10dJpUI!p3pgO2
zVy^CuvdzB`^*D$;|2_LAtN03|8O5nEd%!?bjMXLyoRn9rIR+@N>kzlx@uVaj!{F-C
zz=TPsVObd%)OTiy9XMBlET1FN%>0OFfi4Bz63T@#144D$;Sa|Gui!W0MI}V&>S1Yz
z9P7QoddBI%Viao;;mbgr+)ZWyBD)*W@Trckij$lH=gp&NQmeo6Gh2dNi%(!+M+9Lv
zR2oP*yEw^G;qWVOVtMg4ev^3Mn8g)*m^BV{ocS4aSw$c!tJgpnq`T>46?arlW*dU|
z)`PI@%sP`t9#4dz_X>^eoFqW1=h@io_t{#xWxk!Usewz`b{*QW!E*^S6>4~WrsyGj
z#z58$JcxHu7R^-L1#F8@Q(;)GOl=H&0AT)IB4gH?Ao}6^3YfmMwK&@k+7LIQRW$^S
z%H%Sez!*4riQ>Ax*%@t=VY1haoynCN4h{ME|N8;9&YOu`o-HATXD2E2G97YeYp+r(
zEdEg=yFIIU-r#!+6vaaAriUJTkth}|@8fs@i^Hc=?(DMq9B34(rub1=0r8~)5A%Ie
zI=XY{B?jH;me>rW0C7>_;vT;+e?n_zLVd-H$LK=KY^r&A=&>OwJyi0Cb??$sQ}d>q
znq|1;r9RO?3F5YbiFsRtH-|1p6*m`LQeOnj&)Nr&5Zr}XpbPLfb74J9J)z={d&~sc
zv=|sYc_>SYl#d*#A}<Yb+Rb!Ppccs13Bl<sw=3DW4ICQfbrPoTTR(E%cQ2myy_XS_
z&4v`A5?H$qo%r#M<p<C17;`V9PF|<}X-v<gn(|v*3}g%o^_iz<MtsDEU7Tz9)jnfB
zsdta&z!Ow_x9{#r`=Rz+oJ8+{xIwraJu-HX%Wm@S>WuyxcpzBpFaq|ncYJ}~eHHmw
ze{&)5ji$U3zJ)PEz?!Z6Bn4P#0=|=~iUWXU7+hW!YUw8R5o1sbyACY6b9u(1!vsfH
zWy$EPok0kloN8QR8QqIqPBvXxTL&AU86AZ^5;%G@RYK4ssqlS<qWLS9ozDfjLsoNM
zJ|2V3BjQV5XJd?i!%SRMZLw80;U|c~5kqK_m^XyVW&ica;WAzl5x+`)yf{mtzc@yf
zri#;ti-ht!X!;`YfFu{!g|8O2t#CY1Oy)P;3ZUvw)UveC&r&gTx1s3@#~sajPX}x^
zR5<RE6b(2!6;3VxV!msKeRCez<B&PX?^x-FB0%zdJFo|^{5BU)ZS$i|vD84BU8i@S
zbtJnc`_iCI0>0|?J>$dN_H#2wPdp(#;2-+lPJY>LE$GuRtOgji3_dJJvf5`%#_^a&
zHyL)!2PT>+-(0xKK`T*DQ4h0yA$LBxkyJ_MtZ6(ATS&_#LO<T?yG7m1Cqc<)J==;V
zY|AYNKAK-PJF0WH9sjgWS|>KqI3){B#RpgN3%*SVJJU<hr1s|RGH{%gQ4hUwbb1h0
z3n=K$7ZqgttZUL5shJyOR&uJ6aDwwZ?$6dg1u>;1597=t)nu$h<_eX$f+W+=!=OJP
zT@u3%mO)3+yQw`WQOt@{c#QR~bt@S5qAdGZx+6tQvHN*|>s6B{e{G!evDV<JR}^LA
zvw~jT=bDwYO8I7G4Uk5g$els^l(&FMgjtTdv_;2umP>%vTq(kIP<2r1f&OxzSYB~C
z8DQ#`);%~vEg?_x1?s0TpO1G=ZhWITJ)>9?uUaKr^i;L@hjxNm5gg~UtaYjp!3Npj
zf+Fw*f^VH@3@)O(Bj*}IsN%}y;SBTV1N5!H5b6#@w~P_e_xIz<Dixd0)ke>C-gc@>
zmU>MuoPVsoNLVC53VJ21s{mGmBv%6evZ2|5@%q^*XjOHwX{-&A#On*aP(EduZmVY_
z(pt8}#QcQvzG^**AK%njYQTEPC(=G0tYNhq*8hAFWb8VL?y$hS2{-N=Ama=(9Q!s{
z>;`?*@R(?3T5k*pJLxU_%5<Nx)wTGQ=Nl=7fZ~N$?(qQjl7r_JhhoIIYp_WkYeYUb
z6w|gINOiAm>Z>uU9;i_sagQ{gYm6Zu#q`6E=~n4rmCqF?7PrDg-s;=@D;Awtw1OFv
zF6{W|IG(c|{mh{A&MDIs$fb0d(Q@Qc#ra=tDnW1eT$WW8STpzV(!{TDj-kQpnj4sB
zF3O$!@&j!}8sc<xiy4Rs$*YvNndf@-RDa>MIDnd7i$70XPSfb<r&S*2Ij;_)&AZ7U
z^`X8)(Y)f=LR3yzMK?veLmrRN;!pO^8TYO@b;_T1d~zw5ejxmpA<1?8^l3~fKrXPz
zZ%k=}%n$(BEy%@oJaQO&178Kzus!XfH@aJbyTLK0s<uxxZ)C$<NL$OdA9kQkOS;<e
z)$^^|n;k<X7#-VE>O*26Efbx1+QDQlzxw!8K*xn&)Ir9{75r#?q|8MtMpri2pCaHr
zSs)|GM-a1?N<CT;ZZ++bsAHzx#E7}lPqAO-%8_ADAe^-Hgyt3WU@qI_I6)W92^yG<
z8LCG<{24aC+xJzmpzz;OW$GjFMo)oM3BJ~?Yvyfr7qNQ&CI|ebArhU1hK5catide<
z$Q!3K*F|DmT^MdpY2?z%6~<y;x+kJ1l4nsQQh%zp%i{yl3!kg4?M>4w%AB$HS&IZu
z*uym&GP<!fGhNzCzIHH|aYAwF;3jKXJY{HV%8}t(XRcw_(3uZ>r{tObjKau#0oha^
zQI!`5kPY~k$_t6_NOw<dpSJbSV?}N=U-qHl`Eq6lakxRAjOvjJguoD4DJu|tNKZa*
zH9e~Z5>i_93&<DlsfMT5cU6{0#IOv;qYnZn^WS!BJfoJ~?Xj#macJA0CEppSsoFrW
znuYw9CFQ_uPi}+mLQ)}r#r>o>2XX^=#Gz%uu!X2Y4@1qFvb`<{*ts(k>p|p`wF<bT
z=}F%*LTa=pt)We2T-{$5xj04CZ&4O*ia(ljkQ@4(>8LSAMXhiOgB*FevWgi>)KK*h
z*TIQ{6a(OK)^b{PXU`Z}dScA-)6Kcq7>QGFo2=L=F<0c*=!Zm!MvGV^aYOGKXzV5|
zDfE*UE+{L-Z&%kZJ=FP3eTG?$RhS5Y@`{DSgN<jc!Jp~bDq*Im3{buOh<0zfqtoJ#
zJ;=yUvK={Mhn=$oj39maDaBgZY_`)E8UscYgO||Kqjj9YO#l!+!v$gNeyJMXp80J!
zNMu5R(BkW?N8f{*kQeR4IMraWny#)m7%yoqU&_)A{U$h|M;q}(hOW~$i~r6a!izP~
zi=_Op=yUO7MBT#Icd~5@FO(1k{sNDZ7Lyy7ZmKW7T6BP)`X_9FK3!+5r0?U+;6*pE
zrkpT`k#wB{lvr7@NM0ffK8R9f28*6~u#}Tw5+l;~%7f92V$!Xis9<ZjTh6va6iYTa
z1}*<klX8LpS_U5Q(%v&$PBTfuk&C|QGKlY8(}9xow@F^8ONpB-%LOs)@R32Auhk*g
z+W2BnfiI@DNt-RvC?wOpan&tSc4AsFaDCQ1_bfl(7MRJ@3$or#s^72qdA^l}{@^K}
zm*Lv*YG@o0-7J)Dm3f0@js5ZhTzhYl{ilv8j5=*0pxjpA=NKqjG$szab@F%&lcCX^
z<NXwhB2eOfy86ZSo$T@hYXG|>!YT~Fa7k<NxN4Be#!TmqrJJf=Wp_;nOTc)>CrMJ=
z+MB@Cmw@K#m{z6X6o`EIT;C=Oy$%!1tIg{K;X#H2RA)n)_lQS7MPYX4{4LT#m*R-c
zN?dNa8a^Kn<CvCL@Q9O=6^3HW8i>$Kw*rZdVgRba8h)vr3{9C?r+cHJWPHx+yZ*l+
z0<FlByUUJuiDNH^8dY3Ll`z*nnee%Eg<Sts<LGlWRU}^Yn1lEc`Kj{j$|eY$HwAl@
z{~D5?kY!EVNpLG^-Quj5tduphVs9BEOLA#Yu|c*c&`lBxW+!&Yn9o2t{g`cnxKz3I
zNG(V?oM9u6c&-Ak!!Z*!-A^%ZyQ!$7GLt__#f$!(>Lh8=9rXgbr%idy&=woLZYmi!
z-FMltM%VL&B+j#;IMLQu@bS_Kb2WykY7mPArl;X+@CyBE5ka9(ZDX#WYa=th%AA^9
zy*9j7v;JiL>%y^I%f{WIcGs=gQiskU^E$3#!{y2#H11QEsrku)*(SX<>LY#-=_!B2
z<6@EV2&@6k{tw02f6cirz{7=wF9jfDc;q;Bgc^wE%G^ZdLoK}<!!8-wy=1MVYt}p+
znt@4SlU=K7%g_fd_-9k4f!ISb&1A+V7!($tO8364uoREnXB$7SX&`7%l#rKYU!f~u
z?lSw0U^Cvu`4yvZO}_ypZ0AwUKeIn40P{S6N8c-<7@z!)*2|MgBg14ze8t3kv};{H
zIr<Rb;!6w2_TKs0O{)7(CbH!72L6ex80xao3{ZVJ)u!K9zjOIXwTK{HBq`OADG4-g
z$y<tWk{iimn6<(~MIgtLr`u<P)1_qv4HWm@Egt6^q*E?G3D4qEsNeN>@?uhKb8r9K
zNNphoAd!pE;r697-eS=-ECh<bZ#=-%;6*8boWwyFfDj1$0-qt(O4Vz7j+DrhrGmf2
zRTzz3RjsA28KEDLIpw7+8@f?8qtGj%1-CMs2c|0>?VQuCnkqISZpqTmjk|-(4q5vL
z4e(~)U?#bM&iUO=ItEfTL4$zSi(3WaA0}RVT?cJ6;h`!#Ww#Yh`P(yY%v+XC{UNOS
zc)h%U6t_3#$u3^RE#CJ>bc)Zg*ay`WOBKJO)e=@Za|6Rt5h447o7E{aayFyQOL}kk
zxYdxgH_?hEcGuY;OLC3mZE4fyM{4utS#_ipoI1jj3x3`~I&63vv-<(&pEv*aOwSjf
z16%6dR}%}ieASC9NztD(il+R3;b0Y(7p!tiefg8#drpxMVYog0i+|7|n}(j?$Nv7p
z;XnIkY8z|o>Jtj`*1tcBnS=HC`xrR~jTM>CpbkE&mCtbWwPLLn34VC1FKCWp*)*!_
zbCp0g69>Y~zuCnpsAYfGdMQhw_*}tCQfWA^mu;VCm5pn*IP2P<lol(tX4?&`;VX<_
zgM*tv?L%GrW?86tRQt-Ba&s^4cAiRyzJV8cKVs21V3$qoSt91t+wLcmREj=@S>h1_
z3$ItP5h3+40p^~U?zK@??bQ65zaKk5P#8Igr5gTlO!Co@<2-Axt=<Fl?Tecg-mt-^
z&RN>NUYKvQSN673<5c=E<i<xvuC5;EH+3a|eGx&sr-al?xoj0L(Z1+*=Nxw~U@GPc
zX14f03%!+vBH;>O2mw7T#QVNQqq(@@2Wvv2e`iyHQ$<oyK=bViw6dMG<UIXYIVo-3
z6B|IQd*)L8pM!?QiFF^VoGVLu9`{_>t{gd{u8aW-c5Qe!D-fUf2m)%(Q5fb08n*^*
z=np}d(v?8cLk|b;J<wma4XL}v#__RZ?fmqFMtgbfE!f$1|4rW|CQ&22?568O-sKs+
z*_Jmr;>JyTt~vJ=e0%T;V>c1FsKk6zMvfcXaaD|8Jx+p&5kJ07wF<dIGBU_2s!UKA
zG0YhQS5QJ*X$V=Z&vB1ilB2UuLQyKkB2CK;8-g9a6a)m!p%PO4rD}j5J6D|vc`{+o
z&fw*Mu2e>uA^%cgG4a6m^0@?M#=yk@SZf7%S~d-qw;yl0u=LI$YpU_Hqncmb08E&M
z#_Z>+G#I1yO^GRw{KAK@>}Xo_*v~cGU!`*!X0<h1YNPxOQf#Kb-~Ly<YwE=cu-!b8
zv#mU|m{1me(XVB7);x8e=G^768O*q|1p=CpmXcgOcNs3x(Nm0Di!$388)eILLd(XT
zH@%6>HT`-7UOm-q;LHo|T;SG|+|TDNY%Fb6f*6OXA3n0{6MeTwoW>xE|BAe8C{Hj&
z!yqy=Zf~bpn<^&^M5O6?^s_Mr;n3KcB|DyoEt;skWS6&nsGLK>r3M+)@#etS{VdCO
zP=s_P!p8WINXtW?saxLEXdAkFWD)wyDAJcs9F^9qg0O`lg|3}kl<wDGGwSc;Aa=BW
zotK@PR{jOR55!c*A1)S!*8=hF;mC1r#mVy))clo^q&+E=4{4o~YWZ+NR>AExR;|=t
z)J?-4=0@a~C~SE)x$dM|+uE&1c{UhRTGh;4fS9cR<IM5q+b3sm#lpznCyhv_60FtV
z<B{Lx3Hjf)C$2bt_tC)`iunl+Qd_#{G}XMJX~25XbA+Qam4&S-ZpE*DN48(r^Vgo9
zN8!~d6$V>~f}fZtpZ`59`*U@nW6zl<K_eg@<gNcd+tL5`Kd^lmh0z#%WsYJUS4^Jd
zd*?iHPDe_|T&o{B7X*`|`QB9&(ccv5T%b+G*?Vs%j|Pm6wrJ0lT%X)|{`?k?lRIvo
z(onjLYy54hyal7@RYNKr9-QFYYyj$QJ}+3WykkvG4l?>4f=x0S)75N)xJ~1+H|W&-
ze@)+;aK_1gVXmRaU{e}B&d6g!0|~}xQ>5oep=`%99GFHJsi}U%i!z$EkwhrMH38Dr
za(WwA0r%MO4INiDX=FS+9vxCWUZ*mX)wMaWbb}@=mpw57c9@~v(2&t+2kWkFsm+Ih
zx|zMb=5QKk;Hvp3jD;fN(s3qo5{Kd%`MCH-%Yq&elb`O7;Nm{?!?yaZrx>$z5({RR
zj_`eu#>~v$ny-q<ACb^_{@1nzkLv#O0j+sPq_TJ8{(fvVRnrESC1o1sOUlaBSFdPU
zYPw=;9A@cnVH$t0g30e$x{26COMVxg%In%BG2qC1#FhNigGf}8@!>w}o_*t{Yty?p
zHJj60`I~Fl|BJeJ4U2Jo<A%qIm86DHlp2&ms)Z8m1|dnZt&|#sHe<{}X{s@IN;^pl
zOD*}=6eX!C?Ph2<?OTM=o=MH7McU~eG;Ynz?K!Rg@x1T*;W?fU&+&eFzQ}H7?zuMS
zbzbNB+gus(UwZB1w5z*LeZvDY`Dr${`_k2Zz_2~7q?zsR`^xdy)))Gc?9*Yxar)xg
zYkkS*m1uwG6wQ1;H%+jw%f`a#(`t@Yg<{P0L1j&ORXm6s1)qu!$})rP^Uqye>zCJ|
z_T;x#^7_6BYd_OIziuSt+v_l`kp8{pv7Y?bU=`lgXj@0>pxZ3Y@ompE+g1Yw#Nw|s
zyWl~=o~M0N1>-sKeh0n}6Yv7uGAPn2317(Ei}odjUb1R-S}G$piS&aa@yo@*@(gZr
zaZnX6e#%_S%ca*EfK+S49IXzPKFMm|*EM-8tMhYb1gH4K%_V+|)xJZKIChIQ%}4~s
z=(1``?C!2(eU+4ct2Q6c0*-S4&4^PF97$?mU-t5`yo)@{b&H5No_lmm_`Wqg@SJtp
zG;{h@p-t{N*N21F*`zuI-KR2e>H9%AhV=Wo^@Vb5eY#Gn{)DoKW`VWJr?r27=}qvF
z_mXnl_CASn`}@J=;m6%)CalKuPFhi;sPr&36SQ@7#&=@~gpWT8o$kV}{sX)85WsDB
zk0VmjHN?Qikv07s?hTViyE!#Jp>8y1@24@VK6FoVzWSN%?p#(~8!?>h20U}8&AOe>
z2TcenXza%D7*Sh5z)j~HK1bsLcFVcb!8zZT^*5PR<4ivefPJ6J+jV@2Rs7&G870o<
zZyH_lB*r43$!S$b1){@<I*_9KZAahN%njaMr@7r{EY7YVVCA^hz1Q%W`0OTyDP_cG
zXZiyXgMCPq6DEM|AlFR`XD#pLK>3)STxSsL)n{oTxk~do6x&p1^xAqheR5Fx$x&~6
zr**}hGok(F41(i9Toc;gLDK@I4pH8V_dyf{drYX$CfH<JDR#FC6$)GLQY=|KSsKD6
z1z)9<j(W1r@K4q8K7Ts)#pH9I`{WiwJ>|T+kRW*cYbB$dk{4XH#|w7w@m~79uC=r?
z#<jgR$b4#_u(<GITIqJ4U0QyWH7_#mYs04!%ab>w?wq{+_M=(@BK`mhz50F1`Kj{a
z?#dLROHU<f_86&Ll*n9-6hO<cuWoVQCnT73WpLrsJ_pBtbAzguwzwJ(DdlHwP(q8c
zyeu{RH#exHDj+v_3ib3qvy5IlKxcnuE6hpMNS#54bt-YBk6fBM-X}Fk)>_~W^?_oW
z9|T?Ha?oy69_GBH9@nbT8O2RyI{_GVt6BfneSfN*oKry6zt(3LH`UXeO}b4&!?-E;
zM@i^zci%&N02>W>Y{e8PYuLH_>^SW#y~6kISZ26;?UT;4AFjHk*hRgx`yg!`_1(Pe
zru4Zq>c|ms+V*3_FUCK01mA6FfC&Ql8*vWi(HLozDoND@RC6RLp~eOn0>NoMmX{%K
z+R<eZI$+=oV7rY5G<(;MubFm2Vbh+jwHD$sfLz7*_Abtjo4<t&5~cR^raDqLOB=5j
za&vM%eiIfUm1hPGQxDX1tt}3ltt1y?-bcqG_5Iz|-kGKr9SzoZZ!LJRmVKhzw9ESY
zS@G?04&;9vmHpnXuPIJ#uAOJVRndG;ITygowtKnp?H*kfid6yJ^3u|B?sfAhH+wh6
zJsy|KySnLE{3d`HZ9lw^_>T*&eGpJF4m%VVkcK%YWa?LHHWarEc?hGLSsJn{k*%?L
zA?L7?h8s$X>eg+CmC{4C6`5h8x%V)3^VJOPhn5w2M$7vM6|Ec=04VB!2c{39qdnA5
zpLmV^n4g&48TvPK>m%iQtn1!r<hZA9>6qR1lx#*}eY#Nh7E+Mw78UUzh*xJKTlC@9
z@pBGoRbjn+&e0<+bA_BQpwXiH=Zxw1urijyAr8ohNyS|6u?)|<MQ>VUr+*N<t_lv9
zR(8`)^wc<t$&0DezZMwQ{&S!)<9b5zNXEs=T>nSOnYN(n-(8d!|G9JUBqYneqd!lv
z5V9J>6!?;N<uf8`NRnVmGrLS)I>erDoki+ANsDS7)WLQrPB=>_i>W&}8a)mNB@dZe
z;)hJKRCDNDVNeHy+}JVFck!7-wGw~^C6VyX&_%*Fx5GB0V{7%=S~|XRY+e048jx8w
znXaMz2EOwjQuR|CC$-uihVUADSH%tHU0SB&Px1KR=eLPyU0e^xD*}A6|G)q`S3r3a
zHp73I`@6#~>ACjU5a-}fi&zNPKux%8gk??)$4~XAULz44tj=+QY;AvQ-<VqHAz|w<
zlAFpy?4tVp-EyeH-diUBrX4Vnxp@R+ISJi`K)HPnd<1~7%XNb57NLV|vxIn_Dq3!5
zbSG$<q%@)EFv%CBYWFK^ivsu9y%$VQrItpJgcn%yZ?9NEV3L(hl(FIA{`hD|ii2hy
ziB}Tuu<m}a|5CIsflMO`Z*4`tB~%#N3BU`@km!O94ROe>9ThY)k9c8|TW3YJW>l1+
z{oYbu3?S=g(>OU-7vET@CY>hy==i_qW;lVAC$voh6uzwuBoZsU8k4|#CJ|Au3BJ!5
zYUKA%pMY%eRZgx)EjaV;iJ%Qmy7pN354m?A=={{Q-`Bn%7qSD}{cgUB--%;<-1s-_
zJ}4f65`mKJzx)Sbn6ia*6($@JR{#P@ZvyI4v-V?~;n&4z!WHI*JmqohlvRS0K1iT%
z$YES!`sFmBqZ1BZ5|xW&?xZSRFNql(Au}bzQ9l1nC0l2WFV<?|*2bfW-Ad+Y88mQN
zMg;s307j=tsJCc(i`4|wt78PIB&7sIkn-U7Id~7G@5G681yy+hYf<cB+9R?21(Kd+
zC@gh#OKS_arf<+~vnI{jDcqYRc0VCHTJ~6`h4XXkjVSY|b`u=VheFPPXh1k3G`eAW
zCwnBD#D)zGN6*YORT&bDfOL5m6c>qaeI>adLkBJhe79bwMO2d78KvVxM#6rqNz7m9
zo*yF2kF~z?I&{FJ1#p7e90^Cg#mBT-lBhr3<cYrgtEXs6q#=-!=Tf6dZ_|}zXI#?&
zTB);CKO1vLWJ5m){{gqXb)cEeRxUaySD;?XMIKVoM1a^MnxohOJkW|l##j?y7mCuP
zUl|LUb-gk^{84hM&@7Hg%KhjAw7o!yG1@uQkY%LH3-`oV^yYRt*j%6v+1Jt!blX^*
ziY7lW^ujfv-!kiZMdy_H&jHk6B3(Yh#?Rsqh<UP4LmrQR>wmVame2EuiHs5ihIk38
z;;hEAyythEok-UBL+yJ$yyyUA)d%_XlFMu!0!rIdFq=_bQXFIMQ<Y3I0mPAt{8D2s
z&ZIePg$i;>qH^m{pR6rTJ-UWmG*&m~2})0NaFxyvJ7ttofE@rG`B<;cF!#As4GCpF
z<Cxm?78y^ecMI2Cp2OJCB7BFS+vq8*`L|rq*4jrdQUDl)58;Ip%3LRQo}XWSBGWyu
zpJ{?tw&qDxi|*;Cl^>@|>Dn(N@_mo`?kFB1t{9z1K&&X}9zJHNHvyT-%n#UG#V#e~
zR)fDTHbtE9E3itgTh9n@_R_6WV|!t@s8Z4b#;v`w-Wwb&u!;Bk$Mwz;L#g^r5t3Sa
z=j0|{+B7!r&6{T+zH)YkV#W}HIYbQ&mIGRB#OPO5ijx7uxYg&u<wqm9p6oW@hf*%I
z$g>vp(bwk1?vc$M)MeNE*zgm7O$|5k8q4(yNxR6K{H1@uO&)%GvD#-}T*DS7r~?~@
z2Q5t=vQ4n&#|_Q}Q25x86EAou^I#*syeANKs?28YuJj%^lkH8B)-KrDb1mca)0|<C
zKBiScP&&7D%pJw^B+&N(F@R>zEOUZtH`V}K;tJkTw-NIj5~wTJscwO2qp1w+E;l?1
za$17j4U-uk#Nwcwvl1^n+w0Pz>om8gM&tg+D!e?`_od@tTyV+J0Y-$)!*R<n)q>_o
zYrR3E9s)THxy%Oyr-j1(-IyFH&#wpPv8A7CR?oUENaBD}l)a3Snun_D?wfQ3f1v`i
z%KV^RXn2|LtF)Ah%NJDWB=W{DWgBJ6HsBf}MI=)X-T4$4FT>-(ioHr}EK2ehCtpTN
zQC>h@q)-en&)FIgLCg0M6pmH3C7k&>;Iw42c!Fb`Hu}MYnw)q~tG0We`Yd#Ve5>ja
zKe(Md4}4tN<3qCQp$BY<0mrGm1)_)szJ$@%1_7p~=Ux?iPerd~&4&A<zXyNwdVR$2
zC3RMN%i0d#_7&#KOrz~el0}bQCaM+Cog0&q+pOM_<kx}BgttyNx!1}{nvqzR6B-^@
zG^OQ9FCR$@_xV(t?H$bhW*66LF)qz`Z}j1!_i?WqJwa-64_pI+ow~6y9JbMU){97w
z@xpM_pn+t>oFOim&q(*gjw6p4+%d^uwYZkl>hmE_I;n$sej3_|KB(5a8akG$Pxbkh
z^mV}bPzqQ?T|y3a=5<e2m?OmCs@dvr^v?QugUrJ1z&HRjIY@8m+f{d!>L_^^_DJY|
zV@R;rmodB_OD^=sj5<GtM6%;U{cI1TsR?I7sT1`5<(<Y)WJ_;?x}lGQeqI_ofL1WN
z(dWY-Gp0yN9Wz|h5I$fVX0KR?k;H8ce9V;8TmmwV^u|k&jA^4TErJA=K9(ME{6Wx%
zC}f^(bY)@5Oi-YXkK<6Y4ETL?Q@gT3?-1hs(a0Uw^8;+At_kZN%@`J;K7ardC>QeO
zS5!AlR9Uza(y+O18Qw%z$Jbz8P5T*wR`R@>4YFUQ9*OrG>^P~={1Q7Z@CJt%f%=G0
zbE}k11iE$i=?>vgvt111V&C5QPl9di=8Zm2)W2k+v7l+dh1(oyR=;v5wnSmV>fq}s
zXM`h2o)4o>!fz0e7;TMxK54gC#U3o>_Jtb$0yLc`Rb9i!XZ^G8Xm!8)U#Ab<I1;4x
z7xrGUjMamb8>S~f&CW{xJ0?QGx{KDMN{zQ6CX?ne1H|T5^ZZAC?>`!{G19Rwse-m%
zYuo5^&FbJ{+C=Wnpq#ADhQG{v{;#n540&pk2s6{00No*K1Iq}^2Kn+essg8Fm|6?h
z_z<*rfitl|>XOJ@Ck2$jTFr++RfFl0Y7Y58SwwcmrcXtmOk<o4&YYj|4kFP~^63(x
zfjqGHD_slkAgKW&LaR@?BkvjKqdvI>Az%=DuJi7<gj-yx%DN5a&Q^Qw?kkIzYtT+V
zsXP*JHSF_0r_RSjJM0ENuA+JyEYhP8>s^0p#N#ID<oFVWKh;M)F|?NK`+6#KgFFh$
z3x|`>i4(jC2j$Oizhg%vPs{jaSwI_0%pA(l2)McN<gp;N4<5-BwYm+=nX+b3hqYy{
z#uC7S&SYc8*&MUWb;b-b1r5L2+ve@D!L=4|=o`0IxpTryo|QiF4OrCS>FxJ+=|1&t
zId~efvDIlg!Biwb0g7nh7rlN0?FahtSE5BgQmcHLWXgLIa|kUo`Qzn++#7!vJ^%Rp
z`L4~`#M@5B%mr8zibz)q8m*v%%vuKE!Gd6?+q4VlaBJPXz8c#hMse61TCw#mgC_mT
zxCdpYd&D&r>Fz0K+C>&G$ftECcN3<&a6?Df0uDb2xlGWJ!>%KXpgHnqHZi$w84x_b
zHB$5$36i!J(kv`rB5EdTP%^DrjONIS;|dsoElx(=+xL6O4Fk9JTAZ1(u>08Hu%O8H
zVu$@!>w~M-{e8WDDUEQc0OJ04)ss3?q`@8uVJ9G!W{m^J+hiL{#KYYc?0F1w^Nop4
z<|%Qij?czBQW(y>g&RZ+mSSJm$-qvB9r-R6t;vP`ZwB8%@$rn8&<GqhoRQ|!q=m@G
zCI`sT62_Xz%CV1XGNM?d)YFs~{Ip1(Wsjx*{9^2#sLNF*B74wv01a=U$LoxwRoTXZ
zR5UA!s6OIE!cOIdqzNw#K9!V;GszNu(@u2w+W0>Jm=>m9t{5v>GJtUfzOw6gq+5vn
z0_<9oG*z`YFd9KsjD#PA%u588G5$9j^@Tchpxj@@$2YP>86|Px0|d*n;!l=Y1=fX5
zOnAgHZHj`cdfsPoa)R;sJ!dAuYJD5mVYY`mluj9kn?>j!exs3=ndgp6H&3M;+<%J_
zttPKh;6zKTcIEAVBI)C1=wR3WDBmlOtLiY3^wPHH!l`@bsOKV%t2Yg-j~eq1T=(o;
zuy$U4`vskvbs`^oP9uSJ0BJDciyu*VZT0+qD%f=uptfSu9K~toHdSe{(pP3MBx(Tm
z{f2{f!^uo<2M?(SiI`-hcS|xHAC?)|0JhBY82v5Vq>XJZ)u`XA%hH!X@wZ<7Xsbl)
zLKA`1F_}sh*FdM$P`!R|L*EM6UW>qD^k{}{92icw4UzP)3qzkc60$~JX0G2reo~D`
z-c~fdv1^oN^g3hyBdQP6$rSyES4HEztcd*d$LEx7VB_--yp1{RQkX@0>f7?6;R&lp
zV02loo<u%NyC6?>me~$jHNl<gps&$NkHx`tCOu)ZolJ!T(7U}@OHTOuagupX>Q3I@
zaRUA7Wbout<ljC!9<=8l0s7zcznacdNW;k*do)4n`4r%oUPI)D)uDn}So|mQH6tsO
z-%7jCM4p@BxRJ>iI?@R$c|zTkhi@?|Sy)0X3gJfX;e^~j7<`6_feJD_=)dqH4>BEj
zOHf|KTz;ZmoK~uyGM5ZdIb>=6RVO3NtPx+wZb6956a3@oi#prXW`w9Tm)?EoK$c!w
zqiMLn>owEmp5NPN4?hl)pw^uydAeM7I6oPHp8SwW%nA@0W;;P~V%;DN%FGC?Qn9}O
znK;F3PZg#b5@|5~p;3e{@EJSds6W;kp5c<jS^$Zjt*!8Itui&oReEW^a$R5v_s%7$
z1*tj1qH;0;(8Pbk-FX=_Y!|8Fb7m-(Gp%8zlI2HL@eYBC^Ge%p2kLQ|^T7^>SrU;!
zI|!%9viSE#20@s>(S-ta;+g>K>A>W#l-Z0(p_cJcZqnLMHJiR=I5v}MJ<=+I%2LIL
zIulQXdh+M7+W1Be#zRERB)lc{ty=@`fNs2xD&Tf)sEm@NChPMPY8FT+hG)={L|#9m
zMB)`!WB+ST@yBV-a6$#g?QqX_eLuW#meLb00_c`{(p*>{M6$R@gzgu;Wy^n;<%4xA
zcnLWvX^Jo<;18~|!M&b?erY1jJJG{hG@7;9?WLO^+Ll;3IRi6pjb!nTmr&l4<})Hi
z-ep}iTXT=POBcWInc`@F+0y0k+l(oXpW~u=3Sx-Aj5mHnhDZ{c$=FJMv*=BUWVl6T
zjxX{^1yQzbXnylc-@WB1<@)lcoeu8emn&<+(5A-0MIBRo(umFgW53P7wxNCeF8Cgv
z^tnF4xJCL_nPv2h?{Gz$*#_Co&AQEy9q><05akD-Vl%|Z^}$)FEeJw9Qd;-eSS=n@
zI`k?*tXn|ot_hHm=K8mTU2pR|EaMeLpPID{3~~xWG=D8QA)NSdd*%BNH-hiI9ob^&
z1vD&N`*&<u!N8y6cB-_{)VFQ*Y_$rjt9o`e>8Ukd!9yv|Qd3R=X6wdJ1^e4qHv%4E
zE=|3WD_<2BjZCjicUq=H8R&-$uvgcU`_1Q?Pgd59DQFErebfR5W*6qJSjZ$}_GmJ$
zfym6{z1VT|*5N*;rkH+>qFu92X1n)s#cP^LWls)j$~z}6iO1KYIIjddFy#FtrSdP!
zul;W;++OMkyt@K>is)ejL2A$WVlYGWD#2DmM^Uk|Md83?!WLrywOPIpbCmhEX3W6^
zE#!GjtD$}nx=&Rb^+B#fDaw%OgIz|yG}^JE(^#utS5TIOlm+>RCsi85CC4Lq|6}x@
zEVHgKRNG6w3dX#U9Ax#DEI*EI1p&l1c`!<BBVh+v^Ez1u7`g2W<C8+tT0m|p(RkDU
zaqt&ZUYQe=HK+IM-2vxDC;jrrXtVz^F4esD0+d$z2O>2mb?VBcT96meu{8qaQY#s#
ztVf{6P3-bqz8Z58YAhMxr&u`9hmdjhB7f!9K4vhI-Nb9u539?6gwdNiFp6u(r%#pO
zy5^<{EA?oNowZxRNaWeff{|%d{maXrZV{JA<z`Af9$X})6lncPEa8vyMN*(ftnYK0
z(|H0A*q2fAl{yPXR1-z7x7GMqmP1)b&1y8(AI-b{sxGZPqOc^+N{Utpn?&!h3$7@h
zY;!&KK{U$*wo@n~&gb*^6M-eTfKTKHm%LSLW<PGdjJ|RcUCo+}T^gcmVqB|5Sbyt=
z!J|QiLnAhmiB1dAnr~1_E-HGJlpCaP8K-r{=XPJB71QM*Bkog$rqx^m>x=T|!SDq>
z;w0qracu3%r-(R-q+e(0_6Rd?^7_m?h_d7BHU<qY!LEL@+mXu|qG`Hz)e)(}i<x=Y
zUp#qBW){0>)KeE7D7qMazJD!<OA1nzx&io{I0f@(Az^a-84N=zr93bZInG~<KYvDS
zW?!agIrvE|ys>n58H*!L)y87Rq?eQ;9i_p2cWIQLvnO^ztnef6szb-|g_X&Tom+Zs
z%SU~>(~ptzGpv+GUb0782ClKql*gjR39sgPBWd%gRawchTP=~lraT;*FKo`p#Bb$L
z80O7DJHHbVY5L@GC*5I3$v|*#*^a<-oRIQu-@2k%aD!>^Ld1pqB@hrf<RvT;_z*kI
z0Pheh4dyzu87E>Cl;6<h$GCdQX}CH3qV1q%pABDE^yclD(JC47Y8cgGy-*W$uv}hO
zTq5p(n#_i+`fp`cNe-SfhI&QlZqW10o2aaPpRZg1`=sSbWp#}CU1}l{NWWU<>{uf!
zdi-)>vSeGy($cb;v$=)lzx<RQ9b#!=g>p#GVlJ@WQZ$uepj$38YZ3_Q;)Lr=a!HU#
z6Vh#mzMLMbN-durniS1Xa?p6#l*>p1!SuF-se-SrD>_d>1ILohxm%)1wR7TDoh=EP
zp?U_$yRT$%DgSFUMQ8<)f^9_p-UR3YC{w^#`15J)6wI8Lz^4P|8mg<-g4iDf5;@Rs
zTYtTgp(+b1YW6DAJ_)>yJ&o96WYou6z<6Yc?CDZcE)`%UV8!4NPEK?<UgS)dnqLZN
z?aSa@If2%tK47?PMN#$f1m(`-G8g>XhI%r_s&W27cvTlozT*LoF?TQ(JkJ4DrP525
z@vVNr7+)9P#7K2U1<`d2n3k_?v{-n*Tjw~9xmis4g>kXTy)6Bx%%2l*|Hu*HK*&uW
zr~AdDE57XC$ld3zoq2Kw44-xu3}F`1=>*CUN*6Lz5S7pO{mNG^NR_Lw0f_Nz6(=7X
z0&qj{bZhPLYz9v}*&?`t+n3+n0c0AFeZAJnqInGa{dMVkpZ3)(kZS3*`V-MX9=%{h
z-Vw4<Ul4z<bBgNcvaO~s)M6LZlYkcb!U>{SM?6CvAOL-d2pIRN|C6p<5Qxv=DHseA
zKF33rEN5eG=u*6wyab_|BZhuTA52qBRHwRyOABoyn8&FX#6dO7?*mCDOOJ;k5f6?G
zn0#n!UN?yO3-&*jE$|;r=i;Va_2j(Nc`$9^Fr(8KFBgYsz;{}LP3F|brxy4ZS8_fg
zB&$$AL(Z88{|U*c{SW!q(1^2NUpnLqCnxUpd@V4myy|`HKxv@fIs(G(Ye`LF*<c+q
z=uWj-CHdT>lIFA4GPlUmoB5;=*$7wPA+iLtZ=@C=9k8bR)~-&@nb6wRR+R&u_(<r$
z#^<jZo89D8d*3L={iH1pcr^J(=l?YY?4RfZ(i1jH8_3I>RO;T6TgJ<K2R|)*0%Y2Y
zH~h95HV232<LwlK$#KiH&4+u=t}WqkN@!*TS6Vn->&4nzI}9GGPjmOFe~&{Ny3=~)
zP-*q#FR7U4ta(&953{&%zGM51yUFn#HnTG#o)b>})wXc|9g5|FO|Nf0yu5|{pWOuf
z0a@H(;N}L`PEqr-Vhh?Q(=HGvC13TrsPl5}`DdptLdUP}mp6_*_p8c%k2<DIyuanH
z;i}*HdGuXre8m2Ga_5O?@=YRU`YJOY(l>P*q`~i+r|!AC^ed@hX96nYv}${BzQW0I
z>cy;mi;J!NN8f+?kg9XEvUy^|<~!{K#24gaQeidCvL3MO$LEZ}Zp5inP4kQJ9Kp4L
z9$i9B?-d(2E?~W8R|L2RoZdf!TYkG}t&eZe?rk4ly)Iio*RCgy#YB@^Cgqcr+%nY@
z<V>NxJ;P${1UW<?H0tf_>|G`1a=Ee6$!jY>QeyV)6Y;Z8?6|(_{^9GJdiF0|6P-<3
z{rX=|n)`g^l5ey#Y}B29otI4iWk8^yE1kJnBPXsMeMt*O4dnE+-oYb{Nhf23zWvWE
zq!)uEH$S}}Ivo7oa)xRyt6$#x4Jkz?F3`hf+Wtl!Z<oER(VK7b`l(0U;OZNiE-T8`
zxi0cMpHF@CxM`L346F&7=|#T2@MC5g%Iw%W_n@EhcdTn=cWHBy#fuwbX}`IwY`&WF
zfg!%WX@Bn8XA6V%|F~MXh4hGw9=dDqHi?;rD;KUe==Y8K`yg;S9?^BoAFg<kV)+$-
zigla$kE^`jdmVmKTF2$pmj7plMdd(^-fv~@I(E@W$^-#CLU?3!E0r2W$4toMo8^q<
zu>$Py!=o?%X}%G`)4|4C9vpf9M(;(&ff+YF+n*9jH_eK6NQGu4FsmWLS+L%e31~Av
zzY!?x2adQ|uY0yKvmFNp>&&984?P1%IKx!?_UfG(D{k6U_Pm&N?clC!Ghl%#b?RPq
zw&5CZ8=v_#{(0}<D?Qa!@~N@5tG%;1(x_TzaY@YN<fn{Hw-*)DON!6Z>1NB?FNB|S
zeDUJTZZJgo3qeEQSJsHoU82Nt_nGV4gJsF$YuvJDIu2=_&!khlo4(=4e3lpu24{y~
zE3{tUzCh>tbMPMeLHL<6J+X?Opq+s(V!OF{(Ax1L<!TAQA>6zJc$JlvypC}xbZ28$
z?#hmtePc!Z;v2@-Z4T`?d>G8j?;s7*-rflX5CQaPGcCf^C$^rWX?1Onml{NY{@JFq
z(b*5yoVspsXYGVZmdPpCtlqc(cm}OlH3MgSo$+;Y+>K6;P@Km9mZ$#?TC-tL_?`Lx
zhz_x(C2=b<G$c2CHs@q)40?Zc$H^N@Zgdwck0uNEMw4&Az03-~^WYuq5>LKZwDD=z
z_*sJkDo%y_hW)`479VKN?g{eis@rpYE{)vWXzRJoaHp~@c=OExEtSN(O&B;hL-jjg
z*tWvfvhNE0j)>t#jTv{OH9mI^L#J1N+LQKp^OLN$7RnO;=fUmEH@KZfx5>+P9hnfW
z%2*L^Z9PLp2gjf)q(P*6F-?RXBwtzJ>(lT1@*&<VnoGCQI2N-iuddo7g<avFmF{(O
z=c7K`)yD%)oh*Ohf4HK&k~?=fFKM3Icc1?v)&5Ig#^E3ozo5E#$tcQ&mft5hgK|-m
zsC-dg?U1v9-&Sf=0W%`wv(O;sfj8&V`^Tke9~OpPk66nwI((6PC0qU5`JD`h*ar1l
z0%Af!&(vk+3-L}e>hpyf5P0ScpPFf~xBNGs2I5<5*^mHCXEzQWrT%jywY(wOo4ds!
z@!aCiw}RBCD$mhpy<6Zj;JoN%<%<Kp?|k3wytVb*%)dKc&VBtiXKAUMf%SRVw00ZJ
zS08XDAS)?o&<;)!QaU_wF5Iv}Bg}T<Qi1U0`9E5DI>NU~OLS&hTIZfeCJc*{wKX>f
zbx&VcuYMYI+b6;;8ac$*;m}Iz3>nkU<%62l_WW6(4DzXSbnz#PVotHO`Nw=H>>Unz
z5EGOs%>V%^C@Y4o*>#Ng!5G(?$>n)qrunVD6)}sd*zz7Mb>=s79nGX{E@rN9tgTr8
zVxg;v=VVwYy7SYs1@B&U#BFdA|5RLBHLJ2#G`?IBvh`;?;*Do2w%a?O({Z2AV9m$s
zf{wPWDAT<f)am`^T5jUa)n11~2ufINu|6CQq*^iCnU)!gmtXbeCsUT1R;R7Hx!Ll8
zhoQf(NuTy3j&%WTrtX+Y-T+K~?ChcKKzw3jYyLgQ7U<z~=4-v@)V^D-Sd4du2QTVg
zC(!pBfwoJ{5#)Gi!I~;g%k8Pk%8A^14U6Il$&<L7LHEO;d%si&mg=fdzBvA3uUv$>
zdc4_B%Z?v7g&F4`eg1g+4UMywHZRW}8UAD0zAx^^OH6N<eYV#-?|rl02+~~jH9kH^
zVT<VgAe?di?@9KF92ixtaXM!6$+Buhm@dwX9q`#T`jYm$+?L06cUWmcb*nBs(YoZl
z3w-z*JHo1;Ym@x$f^$Vh*H=HI#>U>k=dGZ$J+Zckv+O#^<8%r;SJ5~$TF#;P!NI|W
z5GPD_NmF#;82PD}GlXk*l~>#qv&ZM3v*6T#5quQ=wCT;+S^I;-B<A@~D|OayNRCS2
zT^^1mt?`U8y|K7CZVQ>iIDU0-Rdx(0@67I8d^}EfQ_fWzjivi{UOupCXvgfttB)S#
z93p`4r=%JuI&pb`Nf7_1k2=#ld;{KlvCD7mF3XiXE~)$s_qFS9`^}r^D|@>C*!}_*
z!aIi$j&)o;Ies@mF^p??ffh4_fDJIUEFnM^dpK<qw-lS4&(Y55c+5nf$*7IVCI_8Y
zRGe=e-Cbo@R(5moF=ahzoW6zhOkKH<vbPI@Xe^s7z8UYPxmiolu&DNl6;<tS@=LO}
zDsQmy(}`zy&YsEY?3gh7qk{XAdiHhM;uXUG1`nX@HoWUi<3fURh)8g!)95pKAap+2
zSXe!BJbqJdO_fKI$YA`yhl!5E#b<S&zk2oZ^j|f}R4VQ4V&|E=vPtbJ1Y{Q<4auyn
z`I+R<=hmRk8+??%VuEvLI-76W)Yd<KEm=_S=iTyKeDFP;w#w%7&+l^W<6&a=R>3c;
zt+377KMx*FS4B|MDJm^c^PO@=4TE#+>Y!P5H*%^ZMn66$w4?bU=fWlA!iA`a&A<BI
ztxo!MIxqtym6Q(I#BqCk?t3opmb_fW`E)X7iKPWUuteLUW>UwxcZ}RjTNgO*`SX*B
zdmbjQO8IlwBIi$Ya<-6PUj-AzYJ3irN)3R)H-^EF^?uX8HSkoRf{ypdxoH<4x6$EW
z>9V1=$3KMz8w(cB+p1%-uSv(`+|H|sj~>k;Ft>tRbJzc2S~~z%!MDM>fUHwTV)|p}
zik?YCiDXSC7#k+C)cd3{!jZ3_8)EBQDkCOTt_zM@)N)(&CX8m+DdEtUWp%y}`0Z%Z
zT1!wxoYKsOX%z86-_Hu*aRXlBgz;Na+TNzU<>lQDI|>+XQqJ|9Vt?O;rCxTG6KM%D
zx?2awvgEx>Rh9_!H$t(Kf3^h&&zxbrPm7LS+W^@B!0JL(sbn<sr#GnJK{WCIkH01Z
zLk*w|=;2ghIzH#t5GZjL$`hWVr*C8{*Hy@7<u}n2C`4<G3Mh4N!Jbyw$_`J|ROR73
zsh{uuK6aDOoPmKcA)fco);u5I5!u_;vreyPe9!+sGy|gs*=awOaxUxul(n^=Z*$g4
znGsmnI~k$!*nEGg{)gIPs@@+X(|eQejo2}5ZKoe_9#P);z8MjQrPO>&=iO?e(dL%#
zPOK*tQ&2GpTWh9T{H@tTY0g@Re7UrRv{|WJu6hETJQBK(6kp|a8D9##RVV`S(EC!S
zB#B^-(yE7PrJh*h3@|<E&TDlBW#|b;<nl{&Da}@zdZp&9(C}Ku%4Si22I*=J=w%iz
z?6bR=H&0y-i78PV_B>4chz^B7M$G^j@$peMaVSAP+()L1`n&KsTZcfV_cdv@4P07i
zL_JIdC{ij)Z1P`t$!MrikiUc1I0(X{Y>S>Tfy8gawkPhV+gdZY{G#CL{5SvsT#<fh
zNf*wl@AX#eL?rcO)Y}6zc@o)}rxLETAEu)>rDCRn<`QfbY5ZqzO1r~hgJKnPRc~d9
zaMbZ&D`_UvL*ankZCpPZZe&$f_QXA)jZdrzykFaU<Kf3D|76>kd$PUNQcc6~rc_BX
zU4x%!S+h0Zp7-d2P3m$e!ThhjBDwtw1oQwgKvk+iX9u{X*=#_woZ*}h?Wj}bIxQdd
zUypiCXrc;fTlA#0mf8NNsRzp|x|Lc|x_a<U>|k@9Rt>t5FQMrVYOQZnZ11hOE1KJq
zH%8oqck-SPRNhrEt_={%vu_FCHK;?idf5>V>jgWs{sEjq+uGin&kRh$*X_6<OQQyx
zT>ksE@soIO!#~!R+Uf3uLt2%@7ng~+khLrJD9@`NDm5Qs#!})na&U^*Q5mr<RZHoL
z_WQwxBqdd5M)}G1_!~b>Xygs*_J%qhbdi}Qfhw>&j6MBG=b4Kk;c0qYuQZ)D`aJb9
zU5Lx-2<&rb8w&%kt_lG_AIJ$|<|@!?^pO3^mUtxVrB549^b|ez8PoNQ6toPu?5e8n
zGP`NtPo*97sO!qln0a;j)#%&Y%k^Y-NeogRI1vl;wgd!f<~z++u9u}wfY<R+b~9TS
zUwQQ7?;q2&hOy-4UneOtr|O5IcORXWbZVDKErPG<wni-v3lEh~``umZv2+V*KPJLw
z2g7>>U|{dJknydBU+U64M$}|%*xJMNklHIOeCze6US3bQcf|eSXnJYTAW6n5;Eb9A
z-Z(10vh(X$`!k)5pJ@Z}y@c<!@<Xb4K9$lR>nEcpAg9QeS=N}KfI)QankrfHO!DMw
zzXhpD*QfR$uHAa7ld<gAocma0+krkaZnwd<4%6<wBfS%$^m&wEPrZvyM!lb`QQ`xq
zwMfGv1Y|zca05o4^jq`fn|^6v0?Saj8HGwyvIAYZ%7!?Tk;Jr@q^tnXKc{7NT@F^#
zOsWsw`g+`x=H=IYtShgw!`jzPMLnD*aP68bq1BVO^Tn|Um#kd$MVueQ+RXgfX9~k#
z_%Bfv;7gFk!}ozNElQ|4cke}(5lXzSbj=kq&e>#=TXeI?Sn!H5Ckr45$6B{9`KnnP
z?&-RgX=QXjAop#B?YDFSser;OQ7-htwKu2Aw_xAYTPc`Xev?%+MI(&z3k5@@UM-+;
z@h!_#2CdTh(#@Q&RyzK^!QaSB>x_MU-};aEr1ah{8uK#J>0XY?Q;|!YXXo-bNj+zx
z$z)jK@f5B=se4}%2(ITO2{Nv!Fk!gKIoJ{joz!&6X1LjK&WEPmSj3Qr&Kp4iwTc*D
zb2wOLCOH{7)mwhH>NHQPr9%}h7-XC}-9a}=b*_*(CiZM`s)iu|3}nN0L@a^C=0xhX
zI+7|EIZjCsl@sedmVT5mH)G{8y5vLhIjNRUQv+pQW)0~PMmg|=kG08mwl_r*Q-3Wb
z#abzyZ4)@A*Zt0RxpsvOZ1C#&D*saryZ190%t?I{fNSrC0DGMLw!J}AZg#~%9VJTH
zm+Oo?3Yx?z2c@a;%8)@5fLn$cuzC4$C#q4G>q>*;NM7*tf2MCw-F}sq?>9ymz2JK^
z<btsOt@GI#?MTBmL@XuuL&e%m;W)}Kw`#Uhhl&j}q+0ZQFBdXK`z0<3Oy6G%hp2Q-
zst^6DgJaI<bV3T)J?<>;3>7U3651xleB3``%k!E({2#CIa&L|Ce1Zx#M~olx?~v>w
zpGb`zG*V>%QTr#;yOLN>{$+$m)@ChW`eI4<jxvzLH7LF5yI!MRc${@%A@LfbIbP$D
z&CsYws#y{sUFATI*l;u`U1*wLJZjgP@Ng}GWCr7Xo=+2C7U6&x?1y8fak5_|cR|_X
zd8l#AAeoxVQ#zq409`7#$<pJ;#l1{NiC_Vv?2FW;1q6A+b6a%tq(tJ!-zkg}iWc)g
z&fxZp_vvwA3p?w{w<96{pT3DfWKs`78g{Vsl{P3P+C~u1F1KxQ_h^`&b^S8A*~$R(
zkS@wkt~qS<pR66ldD6wqB{K8I!Nqn372eCLz>Wb=*LwGd!BbjYmv!eR^<kjbg3`T*
z0#fIOL!tZxqlMT&F4GFt1H)mjZ>;4V03f=*r8jiK_<-#8``S+#xMgppl`fV5T<fRZ
zw6AV&E2strmri$WujHnUo_pY^>gI*c_^!FdkQ7_vCnXaY)s2JpD63#&f>bmUgN}4~
zTxB6+;sYC$MB=CH{Q|f5EQ|kSkn9R{JbQcJCqq@dtbxI0<<4t&bVQS1yVOJ9G8MDa
zS2Q>gYtwNJ4>Z>A=9k7nQq?VA+35rh!>Yxn>0R(f;O<B%>VB+_I^8O8PO|y+LU<8&
zdKd)cpS%uRQXE=PVPWd#`ItxenJX5HcogL#`(_chufD_(?<Z+ZkWUG&lgigRX=8Z`
zN986k**aE%mc$Ozb%KpnmSVRhcU6=lvcF}W)WP-WteB9<l)kG<x14^ek#-Gw&o{Ua
zOmXubst<sG55rcuP<QZE@8GZ;QT;*xw2T|GWHKLZYh4^zo3ZNl%IXYrk85f28*b-E
zyIc(`=K0=#>V4w+Zx6Fc;Ohh7;Gq1u>H%a7C2<JvI<JsnUeDKK{py_kR=KPLXqlJc
zw&)ULJ)lqRug+YrwW0Z2opFy%HDw-Ubo%|^6Xw>UkZ_%p)1$)1OHRE8t2kT8{$%NI
zf`0I-PU(_6z`6_{g5J1O2DIc=kKyDd3JdW${feVOqWSpppk90()-=>0A;*d|>hzSq
zq5q&GLZ@4%PaoP|fsUVn%a=;W@B?~It7Lo2k)_igIGiyrA(tPu@>MP^rLy*+`fJE9
z{};(vI--l~Fn41_nRzQ)z3w;6$`6Z>*-AcCgZ|zUhHY~i`(#gryN`fsec(|A_nT+B
z=jW|RUI=%=K(J5m?XXjYBYM0lzp1=;Vxw><SpCaWBjq8eI|*CEo`BxT%rY!xDAkZ9
zKrvEtq(}3Bru%C!(sICV+!KWi&X>6;jRlVc5=YO73X6kHgJxZobj_n<8850%PP-%)
zSqvv1=5u>2!WNq(EhDJ@>;r{)5w_}VLC%=n>2zrKyQ01M4<Vk%XG$Gy8`+CW!VG_z
z{``s><$ktN;DbFa_}CX-b-4M4NZ21DJe%{t!$D)wRLVf%%d=uq8fd$DU>154QSg`_
zuymO~>eaLzyCkz5l3(xEYesaLj<SF)-BzKLd6>|U;@wMQ(w1gv_c|CB1q%l%1xXHW
zi@A@x#T}*zepN@lrZd(Wb*p{-)+$27>CnAyaheBY$*<%qNSPoSJivE!TXSq%2N$Cy
z&F%d849`!~LN`X(fVQX^K--m*M7KvHMbZx~VVQb|x>_1{o;`EcSj&LGf*9Gb0TFXa
zm3*ZRWUJ|t)L2m0CMG)lg5?!9Njda-k*)(7xO96nhZvmk(C-cb_eP!O%k-`|?4TC-
zf9%y2I;!GYOC#<b_1#L{)U~3H>-K=4(#GIKQV;rhBH?C`=J1+c>Phm!sJeW=EInbe
z#!;`CG?U>W)f!H&vC@9P4y*+=BVvlvN=AN@+M$ge=V-KZk1*uW)sA7s(T&nk&4?3(
z_hfM_pX;L3)fDrZ_$eYyM4Txq8;%3b9we?5YjTzKrC1||LFFykn0gz_xML#JwA-4$
z(1*DdJNY?eaLsF`ah~sBkgZ*BnQ=KfQJfR}z&nB$?sbfm2P=3V9b1*ETzX7Y+SbM)
z4}l!lFg&pWy+A>COvbUyl)k8TYJ}8dKIT=Ao8JW6>Oa~7FUXptJ1Vbd76xZzwk8#h
z-NFt`SUcM8uj+33@TdG)fe(RY2o^GYv6$Fzi)$31UI$d{y2W5m-qu2lx03n_7GeRr
zuyToL!Mgzr_@5`UhMUu-b@RokdYI+sF^|5<f07S8<;v8?etrJgjArS(>TL0`Kh@rm
zsZh7vJSN9fCFDSM5~=)pzL@g%o5U;*U;EK^P+KNQ#1~@$pknmWqh9zv^VMA`dv?Qx
zp%Nnu(kLj3FB}O!80=Fy_27n4r4f6rEI1>LZT-?NnstQL&PVrn^!Ld-(Y>WIWBGAa
zhC{e4pgvMB@f7;tzVzjq;U+uF_&Q^5Sw;8RuTl1si^i%J`s7Wdq~#oU$}vi#|C+_?
zJ@K{vo9C!lpI^aK>g3~d7AcH=T6o3r6}wpNSx(p~w8Lg#LlYPz)K#O!wYkv$tKgB}
z?h6q}tmch%1<9wca7#{63ql?XgKv%=^d8xUhWMnhsTXHV+bHHC|LTsA$L$rHF`z-B
zyl9-DJdAoYA>20@$s5a&l<2b;1UczFy<tgnFy;BH%Z6h^RnBgmbff7g&0072s$MRo
zwz4<>0*w~9l&};KAy&BdG8GpHB>ZwbM`6tb^hyIc4$)M)a)KiH*T<pHdZA@sh`)Vo
zlRgY5P&Fe5?+>Le#(I4nja>nnoy)jkj81?2mL8dwelnd`{>FrR5IWq@*n;3SL*>r=
z4bn~?BED}#0H8B*7N7_7p)Ydq2wImAcu&OKF5|~JEf+GXTLdSv_C&TNN>F-p3GliU
z{tVrfwRd--@>|pk>usJ@9Lc-!m)e(9e9mFG0B}^rWO06(a#aP!e*ny;Fo@(Cxpii6
zn870>UXMFZ%bH)VrJxxhJp4DA`ZXIxt*6L6sG`t*@f7vaoI&B{)B3*t14oZOQ6DL}
zLI$4=*a-=sVmhF91lz1w!|3<y0OYV+cg=AragK6dWgl~YR6y{e%GTPVenz;Io0Q#D
zFk05y$Ljz#<edkc7oExWn%*0?M3Zhni98iE2gO==(8DsMi9BD)>~b<<cx=a<?_;rh
zP|{`A;*UaZx}?_hOUsv!U5sk~w4vsV;UwjbOOLS2ATCxNl@ng<mM`r8c#)d#{kDcz
z5;{W|#7DORjJUV<{)pZC)bR~6A59CYdudORq&Liiz_{QQ-?zW=>gPcVucpD}viS6p
zk3N5%+mm$ZJ~iWPW>IkXHebWNt(|g>iPviHt@M<-sxrR#KcY%<ljDXq{#=I(5dJf;
zD5+HfqRY|?)*p-uEF9IV%GFo;q(;}cOKd9j1#rX2cb8t$r<ty{c1xk}z11A)R4JjB
zRSl*Vj-*AC-Z|ZYFRcS}o?`;72H<>eK-YYHb}Hz@hwnCic5-pe{L-v19*8jh<@nh=
zvlmawqwIH9-pSJCM&~3E$bW%&R=OOr%9xT-5qg*($6iur!?dUd(d6?=QZ*JXAwgm=
zlWBl{a*ynH=k>j>LNqaQL)K!d$Y7MLL&Hr%ST?<!o@Fpy2xrvEtggeF`o@yOSzAOP
z=Zi2#xY7_><hyQSGoVLim;QsWV;@cd?<*q^_a-Ka(0$~7SYpdd7=iLa%$@TQ^5%(G
zB@(L`mVqh@c!nCGg{iaO4(tg7M+LQps!dOO!n6W*_1tZ>lBQ@jrwb<&1xZEBeOV?v
z*&;md((&`zhHc7C>bRx`FpC^zP^X?FiX$mS`_%u#YIItz;`5Ke`TH%_!9wB4T-G-X
z3aREpj=qu|-|9ih#C7T}dyxS=gtQ3tND6&ZT$IN}Yd<BQo`zlMXin)U3Pt7$k;Zd0
zX|>ibJyUT6yp1f8h|o}yYK0q^)z2KIs1_ZXq1>xH0i98}i`_?f-<mlaTG`r4ifn;g
zh!x26{NZYt%vuu6(&M4SiJ_GFN}EpKCcA`KQ}pY7P`u%0qUDWsvnfQ1;YEga?0w7=
zj0Zx_5BQGieU83l0Eh<|%$P=`BbB)w5-*;_<p;sGdqy}udq4&SA{)hOmXNg!?Hjj3
z?dSl9Fbw0*!MYmQ3s?kfxG{Vr;KDu3arkNP!8UeKufzO8Ona=p&a{Gi?m~o=t@%V|
z_XgXmr1(?k1%aV$514U^?}1OWMcw7%qh?B-C~;cW>tOvq+mZW6MyKVaCpwPok$&0z
zTB3ST8Bv+J`%Ot^K;DkrQ2_nBF3ODz8+&1q2X#lXRTAzf<F!zdDD&`DOt&7(FhL>+
zv^iXmij1I?<y%|9eO%M)KpWCxfyS)UnjXvXGZRG<Yd?i)h41HAXLa^=_6i4&_%F7|
zPSROPkUUiT(fz+I(T4wwTf8Sw_=(wv4?=g!=EX~e6QeS1v2jG+sg&`&KZ?%9pD<1_
za#?nK|C0VWxewL9Yy8`o{(sd9)aB2hXB_DJ%4r2_uy3bETp`0syr}BkcMti+OdG+~
z^A5k9i8y^KrE_QE#wi!iW#+51iIeN2$#Ihy<it1`6pF}G6N;ly#uL5Gh$bh@A*c?*
z11&?I9|3Oo4}!wVP7l8u76K#WCj{j)gi87D3tB0#?M`nP0_XB=u!wTHXQ+-qN71VU
zc|KqSaHev5NPT+9Qg}rrNM_or(#Y>=a9FRlRo$UnMy7mN_3)At08}u6^e75>Z^h=>
zs%~4r+Bw`8^HA-x?oWR#HANu=j^FtIXu(K98|N`xDglVjuka%vzgNsqron4-e-J*O
z<?~3Ytd03U2oG%&fUQ~6_k-}yEDrL<Z2u2J=jMlM-vi)%$jEzr;0ug@uUq+pFdD16
z^H6PCPgM#3^(8{3D>izhQl=j%y|$39k<pN0<vo{rfJ*tYHX@@tf}zEZpfE1qccv>B
z+T$+*<-h>!QI|nMptbkER$fFoto5Jlf#(}wM6xJy_{=gk{;=eied-^GN<#?#tCFz0
z;QbLLM(_uZp@Yi&pOdNHjXa)IW|fRXoh{Hs0X34*Hz)+53K{{K4JLd7WeNhRv_g*`
zEK+S|s%I0WEB+mzZyRu}vLA#$yYW`iw{w(fSPX_iYN{iv)Rc8(@d)zWjo&<}FrldN
zr)KlAiNikseb!(8KR?t|EBNBq^zS<ZTVS>wOOiy>x%|N01l1Q+9r8~LLbFm>3xtrh
z9Qt-GNKJVR<fe&JCt*C#An)ghN)uG?yzt6|Hp&-x=xid?gJYnK|9lz$EM2j($`&u8
z%=$UY|MQ#vn+AYGQXd=jDEUsNyh+AieUU>R*Yi^Rvn>N3jJuJ=Rie*-(XnOfs{drc
z`B6A2XJr$|p!I!IfUU|`7JY-554w$I^Dq1$<Wq#KXfnr+fbT&dlmG5}3)c|9;-n6x
zst$o@7!2W&ZdfY}H{5d=gZj|vFjy#~IatINQZMM_ujZF|DLJsvX2GzRFG1Du92jeT
z0$v2`1~`>5yW#6JKyK_yybrHyLRAFBCv*nBk^k?4a1H#qAOv^iu#kGb4^0!W(*QZ@
z`QL5)^x~jM+oZ4V0ZlC9&I(mH9L}9nT13AN8|p5rubhCLJsi`=J=UDPt?x~^wOv!1
z=1CJ)7M8|0HSY%J#veL)(UX9mae$@rD*($H%$dPMhDeK@g<!%8ZQ9dYvg3V8v~q?l
zpy?LFzA3t4;dx<@*3e{vk-hBv+m{aK2mh)})uj?=ep}xVY{6w4=G}hyQ#E8B#NmeD
zkdOE9H?U7bab4s~a<&@2d=ZQQgn^D7s!|w(5haYsu-+DR<u-Ge0~nTj$qHELk}eFw
z#Vbqb*Ia?%5DUksp1cj<dHHBL@I3tpB-!i|<pOp5s?|g)Ffu$Ofj<bFst9E1d<tet
zR4t_R!!u~J8wL2ePy*7t0<v$?^eR4=j2n{U*h=X~SR08u5b<B+ultcRh|&(xB!6#t
zt^UahO5QW@7Zh~w<P~!?P<|Y>X^Z=6Fjnmt&}y`z&n9_NhtV%3U8RLq`<YS}VQv0(
z$8Lp${~?SJy^S=y9w)I_K}~)F2RTRkd3Z%Ou^i~~{;;}X2@QS0HJW}9{6&=lJmqJ&
zz<$prI%96K0I3zI!)2*sZ74uJ(=X#If$?Pu-eEJba#vl!rJS+p9gXjf_`A?A(IfH)
zo1X6R%D9*p81*2;^St1A!4ZG&ckg_ksDEVx4LA&G@Zf*Ugku^D!B>Nm!q;r#-|S>E
zdRWj;9a5iY2Z_&B7prCNU#*0;_2C&?unUO9ZF8tdUFnE&Q?v`H#3qnE@R|PN8E=)~
zlaiX~us=XbpBs|ylk4<bY|G$pw_0wEd9haaS(a=e`|+ig0G<A(TEKrZ3{*)<3mIqq
z2`U~Du>Mb|D(QUs--tN(7IQ~Asp3>gq9@+5qH_;Iq&euOeGYa*BZ(Tx0&Av)lWrPa
zqdm{580ukN!))Iw*&*Ea$rD*XG>eBc`%%z?lhbBMsQ}mKUqzIvRcc?x<d&*ZzPNy|
zkBA>O$#Ye=AN1ktS??%|ZD=Pz2Wn2R`~YUvW~7nPzWZ^HgQiT)y*mscG6I}2i<}^R
zQhaFg1`Z>&Dbgc)0t_IvoVUx&5-KOPv8W@D33vq}$tR0HA=55_;}8?#c#S0d`eh|F
z@d>y(Im83dVp;3KFnt|^Eibv%s>A9Kwq2iUFS+L2CbYxCTQ1@@dPaNmP8DF023l)C
zv+~XCoYF393$UIG^&`3R9(PqZI<@cOmT?o+8vct4xQK|ah@i4xB+|myGbudSCqBy6
zoh+M>$jO+{B&YQZVw>pAMz%&u{GEpYZfP`-66cNin_;nNxl3n_U*0<rBc`umOfRKq
z%5Piy0ojgP?wv<(i?g}eqz+!IK$w7QzloKoH;+_O-UP~-sBSvxGIQ^AdP<$n7+aI+
zDkC>$Fgh*qekqX<<P$z|PNufM$H6zxH-eY3sF*EgFBCcD%>7lco&VHZ49YeNTtfo0
z9HXk>i~q7?H)D0bP@S~<z`gH)Hyw=EhllhMY+#4DDg*Q1ZRg_lrLnFu;uWRqea3Tx
zMYXRhH6|RKwbP4(d5^M8J1Ub^nvLmI1a%R6F<CrH!PZ!{@Z*g(VW-aW%ZD5953z}Z
zSO@~HA9a9c-iF<f6dJnksLKlz4<OB?g*AusF~s+2mvGpF+b8Wf-5a{@;&e%Z6|_&@
zj%2)yR&OGsdqKh-+Lk#GXzIYCoHUaquoY?7xIlI)b>dN_9N&7fo`X#>BfoLl;~H(;
z!aA9~m=QuGGRhl-*Kd_j^-VK#KUR(3Kakb#1^A8mR%=hPUAl@b>YW-@_Yv_hA6reI
zFawe;xjr*QBxhl?Z03ISecu(PtCW8QCjg6W=x+zxM-Jy0vAa9MQgxVnWf$)}Xp=gU
zCbEor&Zcj_wJ+7B2Tt~~66=?{KzA;iWQ{a9AmS=A&sMp>Lz0k$&sAzyVZK8i@lMNR
zD;PX?G`*FgF@~=xL!D~R&3z4+^9C>fC9>3*Fbg|T3tMLSq_3iOx5B$KPM%78_>pV3
zF{gl$HtbLMMic^|WFM@vKUi-Nf-(ZG{dJTWWG)Ed+wY|l8Iy-GD={DHDy>c{&@iE!
zcC9!nC90XM<8UmEr6=<%%6FIfJ-8ciDysM+EnL#yE=Tc_;^4?^b@9);`E-)P3Te>e
ziy!d0^u}Z&6o%R3l^kqHa+>of#BOJbbbunYY7oS8r{BN2^^b+>RonyRK`cqkq55{@
zWFe*biJ_d0U$#8y{vXX<`CC)x)(u5Pp%@%dD5Q>P6}c9HD?)-=MT;1fN`wfhqC$w6
zT0kO%L_ry(NQDXtm0+1fgs2cu2m}a2)r$;)M1qh3%RD5C@ko;6xA6|o{o(!r-%mUb
zLpbNW@7eF(Ywxv|Ezioa*9-a#9$h69Zcy;kK;#A{MnW|f$oUX;lqN@iJG?EPV!9=~
znuy&$U`1$Q8{^jo&73K@XO$T)NLYuE1_YKb6t}`RKJOW+>|d4S0gB&7Ne9cSve9D`
zuM8&$Jy>)hv;|^P&=wqqZ=&7Kz|&&{OLQixmn~Y8x=2nlcP=7q^53eG#g?RQ02zAU
zG1Lkqc@!5F6yy4p4^{aE#i#F4f-LNMm`(vjHgVI@M*BK1xlmB!mGGK~^;H6SKE;H&
zT}2v*9%`7H%e3ooaR(yx8L0kZ@rxz=O@RY7KX?A!ODIC5?;896rmiTuCuMjx>HDwd
zQ8Q-nDeH6Zd)%j0Scr4;5dSeZOg#dJ+#D;o>PKh?$5>~nE>_r#CzjASrs&ty0J4hp
zl&kvzS)zKY_3g;ZJQl(W;@hcl%J?gMGOb|rizVTC{jy>23TbVYZE10V$HjtvsozV3
zcONETN^6c#50!+RGeeJkFOb4+7Nbjs@vgP}P9TykRnvuB91?M;`@z>vUc(|JRuTV;
z3pJN&A@a$SRAl1Iq6<eOG>(-S6^@mT6(lb=gK0^F3~Xsp<B#eL#n2VjMg*&IP|rcX
zREv{BfMn#y$W?Odi1EIEO(sXDKN3^}PD8wwy-b~*WHr5tzS-+|`?eA8wvQ9xmdE~j
z$mc!z-SEv+FAiN$uRRN?24PZ%qiK)p=BSMt_VJ@bBF-yJPwRHdQ@#Qt-P8usb?t%J
zW`Ze`IDj+WsWfpo93HO7YCR)sbesv(MCMhUq*jVaUYD4AW_vC??6ML37F9)&e8-&&
zFIt@G3Dd5->oc;=qh9Gesmf~CgW>^UCEhCS0PqQ}(H_zk`Mk)(bI{DH7;+X-b|nWp
zy-;N|u^Zspur@hyF8ta<;&_`fKC8k1tD8EH0X<PZ6bnP=>(kuJ&PZTXW<G%?07q@g
z^3g^hS;M*XE3%~iZ^MyIO@p`1uP`0cg?k@k(37wr<^J}t;N{FP{R5UIgNz#QR%ILk
zeT|Dur(EEdIMt`bXZpqEs@le_H`a<uwn!A4YZt2NjdyU(to7=YL`X`N>To^Gy!$BQ
zC2Kl#Hf+Z`h2R`-y`sZyJ!Dt0ATwK@p}A1m&T5iu6<!RP`+DO=wN^tGaTjk&NDt~9
zBX;2(dnvDu-~aoP9vPY3@B7@s<ksrjR!a@v*=q{*Hwb`Hzv3wKW%U$kyu!aym8INM
zkWomZ{SllYU05A(Z&>;OAAY?g2Ptgu6(oS-kmvS4)5SCycC6}VO?G}rRKEXydeN(X
zshh#OXiPLoi)B=5a#T(eROkT`9z_chxooQ5t_9je_oihFjwO2?6+65b+tIh<NPB5{
zkI&{QokJ;dZpydQg-X5uY+?L)`B>it+sL4>GqpD{glgzmw;?+?=#3ujSCDMdRq-$<
z^v5Ma3RWsnRO*&iYWm?BXE5Cmiu#?xCW*gC8v&ZEf2t;i8eE;Bi5u2tO7_{is(qWC
zaWJ-|kKyz^0y07iTSD|n1I64Gqt=Vr#=R-#WB$(K#Z!mXuER#PP~$to04Zn29;<sL
z=plT<aPl#%?eKmc1vgE0BV`41E%H>}7oqsj$ia+7_*<#tWBDGZG!`$f7E43ECHuKG
zrS2Py+jnl99+H>ca^&F?URRhlE6cJt>N7C`3f$T8LVP34JN<~0Lb0h;yC>>!+O^E3
z;#xZz-lRh=VUpI>*2vrD4O`<xlas7xCmjgp%-w36D}0-fd%^Y#_TJ9L^Yo93nyBpa
zg|CkHj!542UW%?CU?WaRptquWSC6h!OA-YErh(|9srkcIDGA{f;HpOG>20o(QX`L+
zXGC;TvzMp>oBG&I;QMjCf8*K|4<LSlPVOFNHF<m9H@_LEW#i!xVP5Mi3G`mUN?-ID
z0mI*;K4TZJ_7(gRo-zSHWGrczv1%GGvdT_74_vE6mJKK)7pj+aKB|fpIz~3NB%Bt>
ztGYx7LY!Ytj$*LItZ&%$0;nlS+*sT!_(W=vJ*rHw)h&~IS`0PfH&m+xO_WQ5Md8&}
z%U@7yyKDjF8&h(w@dF<SPnb9i=4>NkN54HredsqDaYI<><M+DJKvSqQix_a%nHxf?
z1G#&0zcp-(le+n;l$N&GGNf|9*d;WN`6H*H%3UZh*6n@L8FF^83%szAYUPLeTWi(V
z%M{gC#<C_~?;E9KsaBSrs;2&;Jn0+}{VT(1!7PNopIzTUf>}jDOY)8Z@J@+Vg~}y$
zdSZQqZ(tKQf%1g|JwAIKl9bEDcb$oAYdYk6454d&M=DFnK^7G$4&pSWo<vj~eO*Pl
zN_U9r3AbG=-N*x{07Wg7<!GfqevJ)REmu(Hv;KUGfIf;|>!2ebdad0s>a1R&I#;Zg
zeyFcnn575_Mm5nM&A#Rh6T6#nR;Y3RX#dJ5Y6o#{@mR&oDeJWzVS*JhTC$Zmt9aD8
zwWiJplH<9t`W&`=fU_8F%Kk<*HSttytJ{j0XuqZTZ&WpL8rzmL=XAMXm9C_t<v!<1
z!&1Iv3=$Wh?QDzpeprPbt)>_Bk2>cDMb5o4Gnu8B0AQxEXx@V`&r^oT@a%{LNf1Z}
zQE_NBYaSq;3eI(kA>mYOR1?mGNnI)dYjAvx+D6V5daIXnOg_>cP%S`hDAC$fy>2r0
zLQjZ2CEh*6oRsJr^3BZKr586CzJP8m4q0bDYZnL$8OM*-l2|XDhlDt&w~jqkp(#pm
ze}Q{Q$tkF$&vDvRK=b7^a4i}Al7<f%?FT4(;~S^)?nI4Or4DoG(VLEt-LP#I|9tz5
zF{3WnBF2lo>cT4yDe)xMs)tByJ|kB+lX02OU;RPND1FiF?aa%U#BI@SU4QcvX30L?
z?vRqE0LN=H^qI)u{b$AOk=4#np1R2lSzS0)!~vLYW437xS^w}~OJ&+AK3X>VZ|_DI
zGKkGp@9=3sttAX$!$b6y_566D|HkeG+6a)nHjmNamM0ezBMRLWbZq{UPFoBia|*bk
z%^YO201g3q%H{r5dLG|INsndourav048dcraOz5?|LybgHq+67;~np<ERP~<F3RB|
znfp3)G-YyVOS;$``0oK~Zt^V6ZGnroKenrM+r%az_!6gIGSEAWu*;`(R_)R=zXJ(l
zOuN=U{b5<a#rxp;fpUua(&#I-2XlWERJ{DH!s*>7ObNf-&)$<vi%(s2;*1%&(LmRT
z_7N-u@-k-_jiV^I*HKr7Q#0jDf;<OZR)s_dYVkT3<Y*2Rzq-@K^+(gL+7%t>q7i54
zs@XTxZdVluibk#1a2myBG<181%g%ej=-)b+KI>Y4?cNr32s>(yT7;qtp;pbiz=9f?
z%v=Rf<uIWQ#_|4oF%Z!#KsJ{ERf<>-wKRSW!@b1<5>4Swb!mLA&KB|eV>pwU3AU#i
z(fcG<JH-bf*q-``UDg!o7Ix`uiW!gFe7Ya-NhOTX#(tcb8KPt_W3+j9h0~WZ(g8_K
z2FmR3aKt`^fk!J2)U&YJ=d)*=0n_{n5oj+!B6EO!8aTZX07ua%$q^ZVVh}<gk3gh@
zq865!dP{N$@S2f5t$d3hWM7zx)xmcM#ORm)2;S1xXy=o57mp~1sra-5>cBW=s7+#;
zr}_?tl?1QU|0ts0+9=F*%R&L9cha6mIFP8`)p@ZO!Ssh~m3WB~e|NxSdpL1E*nQRV
zmS=<jJ9#PNWW&3CiM7_$bQVrklW|pNm)ke8yx+7E1j~%B<agvl+s!t|XslAVryD{8
z9sr$)&u45gQV0XMotN-{^TZrQMFJp_Eo0a3WJajDny)*#grF&DmJ&@F;FvMbcDO_=
zziciPBv`C3NE@xXUZ{4~{-7oZiN=g0FZN0#2fJNXx`JEq;`IL2k2{z)Ir`#*AnBC-
z7?e5~X&S&mVyo7uCIzc!6GQfC*RKnb?*F};2~zyA(xHU%h6?)|_kt|eaw;Mc*N7d8
zSK~$bBXmXIMF*4NobnL!AAFLN>x@2r)OmK-uA%{E&ss$jm~YW}vejf?bxV>1JyFu{
zU@mMX3Cwu5k?6bT43@1$W<j2d=XvFR-bS9{-fD{J(aBnI@%cex3}~%=5~I6WSmt3h
zu?|`x922|)!(wm~!IJqkk}OZThR0TCnnc|S0b(+&lr%8Og%E1Xdu{HRv1n&8)iL$i
z+*V!_|6alNoODow!D`&}N$j(BvFu9H_=FrMwU=ikP7}<alUfz>0N#tRJI8}7Wmta1
zJkE)5WlFsNhW(%$>3$Gqh0fW@_x}hA#}-pZI?t7Z0?No(?pT#yQ=L)w53_8+e@%q^
z=L`E5PWKfLR&oU>Zi}>3B(#n&k59Ubh~(zuTtzgg-Wsc>#M5oxhgddK7V!h33P)iK
zgOWS8XvEt#^pAZrMzPFg1@6>)NYc)ll)6-;Y-hJr)|A#G#jv-B{nx+5bsOm{%wdq;
z5#a);N>W33A=!<8aKnwPa>KnzgKL1a;I~@VYnkSUa=M=6Zw$zm?`+t`PIA#N8$Mxv
zb<!;*qYdoG8E7in@tc9Zq1^~!>D)eHZoF%jX`C4FAw;KggFpWpJ!Y2xXUr@VJ&e_w
zfK|_0{wGY=P*az|8;<Jd2;E)stUP!%WGmu_$TBzFUrz9d*yV(A*v9MkXuo3j6tmhW
zGes_Njcsi@YXd;#I}jTHo?BG#hd($?*n;9ZC6@i>kcz8Mio~H=wn2s;x55r>BD{Gf
zI4#pU)AerzW`MA(f(%CquOd()NdwtoS*{-T@%yuk?}4S|2vD^Q;4EE!0BSl2KWywI
zyw7Eyx&~0yJ@`wuTuuDw%IS$fTLV8~A|;K0H}4KIoQ3lNX8j*<{>M!KFx{-O6O6wU
z!DZ?Jxc2?c0NOFLH(gNppPMGm-gMl**U3N+X;A%b!rL|Q1s>}-O`j#0?oi*qM5ut)
z3;^xzf{*qTX&c&RejM;?lB)j_;XWk+_jVQ1i#FjFvqv&Dmk77m$Tmy#@NG34ZKEk8
z&?38@&PxR5?4k5=E2Wo+w%ThTQg*uzSYSS3R(vx{+VLUCdvPCkRgRzdgo#)N2geDu
z_>!v!YSIf&JVyUiFrGdvn|Z{9%YBnJyGDS*FEK<9L)4k0o(1Cdse<=A5lAOCKrS@O
z{rFuaAk^d4O!zEOMTr}3aLvCrKh7U?Jp^y`?2~rd9c?|Z8%a(v!-o1h5TyY?iWvm}
z|Aat(38(ovG7#kodS?FFFM!+sgY&jb22$qepL-<e9X53a)@K-&TMw7<*Eu3$L(t#m
zUMIZwLi?a!6$qV-pWsQh3*O!$B+E1hS##K<_f>yk*skTDsk^TVbt|EZV&kLrhpkzI
zP(ES2@ps&C!`t0(0}z;ITMWOYv+H*Y#y`TKv7VAm$ic=18Ge$WTZautWj%qKH+tCL
zCqvlYYMb##>aiBVyeZx^k7#xb`56UeZTu?7B~9l8oDy6txj_CmlWcjA>3FSk>S#N6
zOUZ*t?)a+Pn|YhGAmZBrFn;0=)Wqu(#vL|h=7<({`DaXj^+9+jU4ZEi!8m;t>lwUH
z|HRkRKwE<_4N&mMQqE)czX1BRQ;025Z_P$&h2!u!pE3Ubzn`nJlP*C`sPL%4r-5l&
ztOF{!_5||5M`f1~R$YT_^tV*S$Kx$^YagnYC*IrSUKE6W4S+GQOuu+d%k(Zh`}S3E
z<b`6_?(F=6<9^hLN5sP8uYI2zd_3{*?e;m=8nxrf>?VlXoh;BtULKZmod5%=I5Xxt
zg!4xaW#mHtn)b8<wJ}=v?&Wq9rY4R4R+4cC7)>Y>en{=@>1)ej<n9q~qdJ%p4s^Aq
zXyUR?gq|~)xeZB-4ZA*=J^T*V%8vkTHt2^KATl*U$!@euCYbRlYKl_ui-QcubXQM4
zy{IItU<ey4JA*C6)emI&k;%zP+|}=PTJi4WSM3HziTV&Q0TPQH#Tqr{r_W&lcN+32
z81(8j*BGd=NqnMqweFm_)-0IiD%!j)WhJ>6Vb}ZHx4XDg^V&i~!6Onz)NJDTpvIr<
zu`gAlqdGt9h<lVTEDBB+JBc;YJ30~u7sdc0upR8He;~!e8A)6?gaz;T1Cr_L3EZKK
zUC2gIQStJ<{^D>&s`#&RF!v(MCsUN3hKJ0aH;YK^;UP}mqQRcfLYeRD=CrSkl)t@e
z4c#VjviCTD{`}^&*F=|;&7#&#x7TG-kC#2$oNDiqy2HNu(V4ZWL0>?)`6q>R_GE!=
z-II%&1i%Jx)BlQJJk0(AV!KRQOjgkwxL>}Wl{IOIY!R|!af{cqn|pC4oGw^w;i`8l
z+J1Sjx8Liu-Xkk|-U~3!eDvf=b#@D}GX3qy5T;3A4B`e*tR6|}r7OZ@a|zTGDbNG}
z)_+k$@f5!&%pGBUfdI$idkKA-c5ABqveFwN$+2_#8CgV;!v@>%C@Wl}xo`RnTFJ2y
z=|3Dd-KUD3(&f0@KR`Eh99s{kMGA0B<aR>4d0@>Jp#72NOA=1SSFJ0I)2+%In^kc9
zg6Re>4)f}nH9PhLSEE>I-XK_tRG=?BD;JzD*nOXtQCvuE_Z_Lg@41>^!gs?FSg&NN
z9|XO<8dUY+if)zG7j2hHn&=A<oDZjwWvSx(FGNCAT46=@s_f?jo)+&X6G3RC)>!0F
z6D&H&7l@`?z5IAx-100d;?eTX$<6Za@D-DF_}>u-4@So9`jf1c3>!GgvCNIyAli`7
z-?ZZ_lW>>a;HAm{=jF@FrJd8Sy!&6;lA2-O4Ky8ABG*SZEL!c%NqDa(dEH(#N0J)y
zJ?7&M&7ZJ&ZlSM%Og7)e>a_MatKH&5(;b_-C14##6b=YM4+R^yt=0W7asAk_v<BIi
zOdEL{HaPMf+5B-lrF*(pA1orK4-m_1W10t*{fDquHyFCRgN8abc!rX&&D85~`}+y(
z;YXi6G-{uU9HMa~(Uy}nqHs^UBahQ9TM36nQ!td>JkuFe8nWf&HO9LA0q%#eQvD8e
zAptI~gBlrq{dS0!>i;67&`0{J_t`z&JpC<)<X!u0S9vh9wWRJ^D8Q@o2iz@q;@qNs
zzftot^QSdc*@Hf(f5Kj6Q;En1!9<zXpXrB0sb!iN{ax@XVqfDdINe#wT8?BkK<mO7
z7w;UGT<l8|TeMvUtAU|Cs*J0ATW&J#pvb{PU^bk&F1@lyM)mb<E{u*?f3wi_iBbRG
z*!9nFDqmXAs>&2i`_0^#4T`-S4O4%!wD45o7aKE2hvZC&)3?9oJacV)+-5(x|5U`8
zNQ|yaUks(SKuXgLAeo#MAikI6ENN;>Fbhh@TR!UM**XcctwrV0MhB^<Dmue(#)#7%
z)zB3_;ncY;Tj=NRc5K^Wz`ob#7YuL+Rq!-hQHKx6!5&1ms&kcv<5Oz)dbUOF0>+RZ
zxStUfgQX5_MhuZKVgddBuw+oGY<{yLbNhr{x!%LGy0+7y1b3u@-|5f_CDtKmFIi4(
zLEpYSgq2MF&tnW5Lqd(WYC~)$g4yS;>hJ1;3Bl<Cr&cxjPnG)4UB}&?XdT|nd85ie
zbxd?g)N(21DlukH0(obS$xkqI9>s3lFPla8T;TMR5NF{%=u)%Xn5U6ea3G9B?hX)=
z36?IQT-|;oUu{AP2?cj?wL^P#HxFhw%6faqac>9W#GvRNHs)cwW>3fT7|nIfu8y<Y
z^yYgXJ?bpi?%44Y_FKS1KI42~CKbRzHbhL^)M9A<b`rrU%5`T+gJm0zs<EK|a#o=N
zlOY;pYi2w1TDQ#{g)HJKl(PX%sCkH&2d((e>4|f$)~;uo0Vh0E&J$dd9IA==30tW<
z4DTVNMD?e2Clsxr4OJ}@g%5V;AxYoYcJMYbT~!p#c~#t#bl+rtdZle10JsFBX|P3)
zI<)9}*=cZ%dqB;sxl#=lEhVLk)*Zs8fY=8#h%2FXFc1!S%-UeYs<90vcFJX~1$UMD
zc@$H`M2U^#`FTHcx#!Rb{1mJ)Eb2^Pg752fcO(g6$&NyD?ZX%ev9|WfV_rpNg5hXe
z0tGAy!6Qx?e_7|HnraeMumn&@xBN2gF@>d#DcDy&oAJTj@6QiD#H$&1ru?EaROJe-
zzg0~%s_cdOTty%I`>x#NzSY%klV2GQ(q9ds#&<y6sm|Y0O^Fqp5=e2r$WaB(l6DA5
zY4kVGsF#_tzD6R48voX_v!J3nAeVVaMM(~uz#gjx{x<k*c<iba**VZ$ojfYK*YV>$
zM4erRGS;{7ETaVS5)Q6*1*1(q)HI9C`gWt%%v~K@Kr_=6=Y||snJdt{4~EUh{t9;9
z%_vk1HME&9DxM3yDr5oo$<(U9ev8b$<0`(*9(v_>ycd#(*+Pw##d^+G`QVU^#BmSR
zV=NHi+$VOHG7J@d>D;2RNJ`9m0*1K;xsg9in(6M!n0cZafc_eLfGjhm&SV#!4=?T?
zo-yse1EwBM((7fmNx_-P`o6k(f(d&#?n)s<aagZ_qQ$+;DYu#MDnZ&5q{J=dT9DZ#
zx+8Q|fP(J~DD!dU=*t(r-7Irppq;6{KRj~bkzZ?$EI19!;k`8(PMOh-;tO1i(O)-b
zn}QM*<WmqP=92ZdK{SvcXV-J3W0ZFM3dGPe<vUeiJb#Z$Bu{B9PFXnY{Rv|mcexN)
zr4d5n3Z%f*(7p25_%^Eryvj}{A-|rMH(YVS;&cfw4`c18g|wZ_mfxK<_Pe}|9!KE0
zPuP^`Jdo(Sv?L{&Fdv4P6@kL!<zwV)OXilKPpK+yUH^Q_5`6Ym+4o6}@!pl4f$32t
z-&&Gy58kdLY!CWZ8er(PTjId|a?IB~(Z#8FG}~Hj9?$b69B+5fV-Hn#hL>P{JI^Tv
zoxJEZM<1s5YY%j9>m6g*h3R)aXKWdtlwTW^9ve)wawE{r669}ih^=+jiPME-R7(1p
z{K}W?vvb`iOdYW&>Zl;q^4O92*&lxB#vA(wN8apR8!T~}N$%^`ziFD>G8y<Jb^kF#
z1yO4MIa0C2l$Cq~?M`OY=eSQu5*Xw5XDQ;ZO(P)f`yF!e;vd23GyR+*hK*3LaGJ6J
zAqg#>bdQhoHuVMU?b!U@(_7QrFmRM#llr_P2cvzCL$-rLF>%h}U7U(5zx>*KW0R-W
zmG!)G@y+C28`CeMM*Cel&Axr-xi<CBo{Lt$r~inJskH?b6+47;olstQg$)%+BB$K_
zx&zF2)fs(fJr~I+Tz^$z**33UF>-FbC=8^x80`8gLcDHG4s|`bZ<il&FS!5E@@d@r
zqZ6gR!M4T0XNC=@IR86DU(%6b<17L#tx&D^FuURt<{BX=#cGtov%5M8M$TK+{`R?4
zNv%c2!^btE6YW5Oyt8TlBh|rp`NwiS$>(twb5TALEUKU3mDVWdJNPZu5X@+sA`Lza
z>At%IA6*1(AgJ0~!}MuTw7@vf8$k;Qtzrk9COp)EO@glkLD&QfS>x2T+U@*n9~x_I
zC3}8Z(#Naed#7Kx;Cn7D5R9U&Zxs3nO|x&_4RStn`;QUt^Lwa;$H?SATHLH>!Gom+
z?`_6!YJ<@(%0q5rlpu-lIHReLrZB(Gvof9%`j*};9PwYFc1$Z7COvq(zmNu;o7zNR
z{f@QQyPWT*PCW>6Dx;FrP4}oj_sI5U7#qy&26)0~4ZEI7w=K0@r!NoOSDKUA@6OY6
z1gEnsZ(e6eooG?Lb}?rDJ}>V#3d5-`PQX!3Ul4F}QJ0~b+}OWfZJrE@^4JxKz^_|(
zSSedh%dAY~A6C-Mf}MP8Yrr6$R{6oApt5u<k~du@3y!Si7Qs1fk)C_eMMA2~SaSTe
g$J);7hx4p3Y_R^@I{cpu`oBj5|6hI+`>E&u0726@jQ{`u

diff --git a/docs/readme/README.fr.md b/docs/readme/README.fr.md
index c9bb161fe8e..a64b1af58af 100644
--- a/docs/readme/README.fr.md
+++ b/docs/readme/README.fr.md
@@ -243,9 +243,9 @@ Associez-la à l'app de bureau pour surveiller et piloter vos agents depuis votr
 
 - **Discord :** Rejoignez la communauté sur **[Discord](https://discord.gg/fzjDKHxv8Q)**.
 - **Twitter / X :** Suivez **[@orca_build](https://x.com/orca_build)** pour les news et annonces.
-- **WeChat :** Scannez pour rejoindre le groupe WeChat 7 de la communauté Orca.
+- **WeChat :** Scannez pour rejoindre le groupe WeChat 8 de la communauté Orca.
 
-  <img src="../assets/wechat-qr-group7.jpg" alt="QR code WeChat groupe 7 de la communauté Orca" width="160" />
+  <img src="../assets/wechat-qr-group8.jpg" alt="QR code WeChat groupe 8 de la communauté Orca" width="160" />
 
 - **Feedback &amp; idées :** On ship vite. Il manque quelque chose ? [Demandez une feature](https://github.com/stablyai/orca/issues).
 - **Confidentialité :** Voir la [doc confidentialité &amp; télémétrie](https://www.onorca.dev/docs/telemetry) pour ce qu'Orca collecte en anonyme et comment désactiver la télémétrie.
diff --git a/docs/readme/README.ko.md b/docs/readme/README.ko.md
index 1de67052fcb..01c8cd71ce1 100644
--- a/docs/readme/README.ko.md
+++ b/docs/readme/README.ko.md
@@ -238,9 +238,9 @@ yay -S stably-orca-bin
 
 - **Discord:** **[Discord](https://discord.gg/fzjDKHxv8Q)** 커뮤니티에 참여하세요.
 - **Twitter / X:** 업데이트와 공지는 **[@orca_build](https://x.com/orca_build)** 를 팔로우하세요.
-- **WeChat:** QR 코드를 스캔해 Orca 커뮤니티 WeChat 그룹 7에 참여하세요.
+- **WeChat:** QR 코드를 스캔해 Orca 커뮤니티 WeChat 그룹 8에 참여하세요.
 
-  <img src="../assets/wechat-qr-group7.jpg" alt="Orca 커뮤니티 WeChat 그룹 7 QR 코드" width="160" />
+  <img src="../assets/wechat-qr-group8.jpg" alt="Orca 커뮤니티 WeChat 그룹 8 QR 코드" width="160" />
 
 - **피드백과 아이디어:** 우리는 빠르게 출시합니다. 필요한 기능이 있나요? [새 기능을 요청](https://github.com/stablyai/orca/issues)하세요.
 - **개인정보 보호:** Orca가 수집하는 익명 사용 데이터와 수집 거부 방법은 [개인정보 및 텔레메트리 문서](https://www.onorca.dev/docs/telemetry)를 참고하세요.
diff --git a/docs/readme/README.zh-CN.md b/docs/readme/README.zh-CN.md
index 2e11413aa2a..d3ace8a6af4 100644
--- a/docs/readme/README.zh-CN.md
+++ b/docs/readme/README.zh-CN.md
@@ -235,9 +235,8 @@ yay -S stably-orca-bin
 
 - **Discord:** 加入 **[Discord](https://discord.gg/fzjDKHxv8Q)** 社区。
 - **Twitter / X:** 关注 **[@orca_build](https://x.com/orca_build)** 获取更新和公告。
-- **微信:** 扫码加入 Orca 社区微信第 7 群。如果第 7 群已满，请使用第 8 群。
+- **微信:** 扫码加入 Orca 社区微信第 8 群。
 
-  <img src="../assets/wechat-qr-group7.jpg" alt="Orca 社区微信第 7 群二维码" width="160" />&nbsp;&nbsp;
   <img src="../assets/wechat-qr-group8.jpg" alt="Orca 社区微信第 8 群二维码" width="160" />
 
 - **反馈与想法:** 我们发布很快。缺少什么功能？[提交功能请求](https://github.com/stablyai/orca/issues)。

From 32e4c6be4af73d4bf3a8852cdd47ed864d065106 Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 00:22:59 -0700
Subject: [PATCH 29/92] Auto-focus editor when opening new markdown file
 (#18071)

* feat(markdown-preview): autofocus editor when opening new markdown file

Users should be able to start typing immediately after creating a markdown file without an extra click.

* add e2e tests

* add e2e tests
---
 .../actions/markdown-preview-actions.test.ts  | 64 +++++++++++++++++
 .../actions/markdown-preview-actions.ts       |  6 +-
 tests/e2e/tabs.spec.ts                        | 70 ++++++++++++++++++-
 3 files changed, 136 insertions(+), 4 deletions(-)
 create mode 100644 src/renderer/src/store/slices/editor/actions/markdown-preview-actions.test.ts

diff --git a/src/renderer/src/store/slices/editor/actions/markdown-preview-actions.test.ts b/src/renderer/src/store/slices/editor/actions/markdown-preview-actions.test.ts
new file mode 100644
index 00000000000..526d787ac65
--- /dev/null
+++ b/src/renderer/src/store/slices/editor/actions/markdown-preview-actions.test.ts
@@ -0,0 +1,64 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { createMarkdownPreviewActions } from './markdown-preview-actions'
+
+const mocks = vi.hoisted(() => ({
+  createUntitledMarkdownFileWithTemplateSelection: vi.fn()
+}))
+
+vi.mock('@/lib/create-untitled-markdown', () => ({
+  createUntitledMarkdownFileWithTemplateSelection:
+    mocks.createUntitledMarkdownFileWithTemplateSelection
+}))
+
+vi.mock('@/lib/editor-file-operation-owner', () => ({
+  assertEditorFileOperationCurrent: vi.fn(),
+  captureEditorFileOperationProvenance: vi.fn(() => ({
+    generation: {
+      route: { executionHostId: 'local', runtimeEnvironmentId: null },
+      runtimeEnvironmentGeneration: null
+    },
+    ownershipProjection: 'explicit'
+  })),
+  getEditorFileOperationContext: vi.fn(() => ({
+    settings: null,
+    worktreeId: 'wt-1',
+    worktreePath: '/repo',
+    expectedExecutionHostId: 'local'
+  }))
+}))
+
+describe('createMarkdownPreviewActions', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('hands focus to a newly created markdown editor', async () => {
+    const fileInfo = {
+      filePath: '/repo/untitled.md',
+      relativePath: 'untitled.md',
+      worktreeId: 'wt-1',
+      language: 'markdown',
+      isUntitled: true as const,
+      mode: 'edit' as const
+    }
+    mocks.createUntitledMarkdownFileWithTemplateSelection.mockResolvedValue(fileInfo)
+    const openFile = vi.fn()
+    const recordFeatureInteraction = vi.fn()
+    const state = {
+      activeWorktreeId: 'wt-1',
+      getKnownWorktreeById: vi.fn(() => ({ id: 'wt-1', path: '/repo' })),
+      openFile,
+      recordFeatureInteraction
+    }
+    const actions = createMarkdownPreviewActions(vi.fn() as never, (() => state) as never)
+
+    await actions.openNewMarkdownInActiveWorkspace('group-2')
+
+    expect(openFile).toHaveBeenCalledWith(fileInfo, {
+      preview: false,
+      targetGroupId: 'group-2',
+      focusEditor: true
+    })
+    expect(recordFeatureInteraction).toHaveBeenCalledWith('markdown-file-created')
+  })
+})
diff --git a/src/renderer/src/store/slices/editor/actions/markdown-preview-actions.ts b/src/renderer/src/store/slices/editor/actions/markdown-preview-actions.ts
index 4919ae551f0..c31880a13eb 100644
--- a/src/renderer/src/store/slices/editor/actions/markdown-preview-actions.ts
+++ b/src/renderer/src/store/slices/editor/actions/markdown-preview-actions.ts
@@ -60,7 +60,11 @@ export function createMarkdownPreviewActions(
         if (!fileInfo) {
           return
         }
-        get().openFile(fileInfo, { preview: false, targetGroupId: groupId })
+        get().openFile(fileInfo, {
+          preview: false,
+          targetGroupId: groupId,
+          focusEditor: true
+        })
         get().recordFeatureInteraction('markdown-file-created')
       } catch (err) {
         toast.error(extractIpcErrorMessage(err, 'Failed to create untitled markdown file.'))
diff --git a/tests/e2e/tabs.spec.ts b/tests/e2e/tabs.spec.ts
index 369d11ac81c..b89e47d4079 100644
--- a/tests/e2e/tabs.spec.ts
+++ b/tests/e2e/tabs.spec.ts
@@ -18,8 +18,9 @@
  * (dnd-kit reorder); in those cases a DOM assertion still follows.
  */
 
-import { test, expect } from './helpers/orca-app'
+import { rm } from 'node:fs/promises'
 import type { Page } from '@stablyai/playwright-test'
+import { test, expect } from './helpers/orca-app'
 import {
   waitForSessionReady,
   waitForActiveWorktree,
@@ -118,6 +119,65 @@ test.describe('Tabs', () => {
       .toBe(storeActiveId)
   })
 
+  test('clicking "+" then "New Markdown" focuses the editor', async ({
+    orcaPage,
+    registerPostElectronShutdownCleanup
+  }) => {
+    let createdFilePath: string | null = null
+    registerPostElectronShutdownCleanup(async () => {
+      if (createdFilePath) {
+        await rm(createdFilePath, { force: true })
+      }
+    })
+
+    const preExistingFileIds = await orcaPage.evaluate(
+      () => window.__store?.getState().openFiles.map((file) => file.id) ?? []
+    )
+
+    await orcaPage.getByRole('button', { name: 'New tab' }).click({ force: true })
+    const newMarkdownMenuItem = orcaPage.getByRole('menuitem', { name: /New Markdown/i }).first()
+    await newMarkdownMenuItem.click({ force: true })
+    await expect(newMarkdownMenuItem).toBeHidden({ timeout: 3_000 })
+
+    // Why: require an id that did not exist before the click, so an already-open
+    // Markdown file can't satisfy the assertions (or be deleted by cleanup), and
+    // record the path here so cleanup still has it if a later assertion fails.
+    const createdFileHandle = await orcaPage.waitForFunction(
+      (knownFileIds) => {
+        const state = window.__store?.getState()
+        const file = state?.openFiles.find((candidate) => candidate.id === state.activeFileId)
+        if (!file || knownFileIds.includes(file.id)) {
+          return null
+        }
+        return { id: file.id, filePath: file.filePath }
+      },
+      preExistingFileIds,
+      { timeout: 25_000 }
+    )
+    const createdFile = (await createdFileHandle.jsonValue())!
+    createdFilePath = createdFile.filePath
+
+    const editor = orcaPage.locator('.rich-markdown-editor')
+    await expect(editor).toBeVisible({ timeout: 25_000 })
+
+    await expect
+      .poll(() => editor.evaluate((element) => document.activeElement === element), {
+        timeout: 5_000,
+        message: 'Menu-created Markdown editor did not receive keyboard focus'
+      })
+      .toBe(true)
+
+    const sentinel = `autofocus-${Date.now()}`
+    // Why: typing through the page keyboard proves focus landed without an editor click.
+    await orcaPage.keyboard.type(sentinel)
+    await expect(editor).toContainText(sentinel)
+
+    await orcaPage.evaluate((fileId) => {
+      window.__store?.getState().closeFile(fileId)
+    }, createdFile.id)
+    await expect(editor).toBeHidden()
+  })
+
   /**
    * User Prompt:
    * - New tab works
@@ -376,7 +436,9 @@ test.describe('Tabs', () => {
       }
     }, worktreeId)
     await expect
-      .poll(async () => (await getWorktreeTabs(orcaPage, worktreeId)).length, { timeout: 5_000 })
+      .poll(async () => (await getWorktreeTabs(orcaPage, worktreeId)).length, {
+        timeout: 5_000
+      })
       .toBeGreaterThanOrEqual(3)
 
     const initialOrder = await getTabBarOrder(orcaPage, worktreeId)
@@ -403,7 +465,9 @@ test.describe('Tabs', () => {
       state.reorderUnifiedTabs(activeGroup.id, [...rest, first])
     }, worktreeId)
     await expect
-      .poll(async () => getTabBarOrder(orcaPage, worktreeId), { timeout: 3_000 })
+      .poll(async () => getTabBarOrder(orcaPage, worktreeId), {
+        timeout: 3_000
+      })
       .toEqual([b, c, a])
 
     // Activate the last tab in the new visible order, then walk left twice.

From c05dd5f4bb8f45faf5844064e2ac14049f18d42b Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 00:26:37 -0700
Subject: [PATCH 30/92] fix(tab-create): prevent file creation for spaced input
 (#18054)

Space-separated phrases without path syntax are web queries, not
file creation intent. Without this fix, accidentally clicking
'create file' leaves empty files on disk that outrank search results.

Co-authored-by: Neil <4138956+nwparker@users.noreply.github.com>
---
 .../tab-bar/tab-create-entry-classifier.test.ts  | 16 +++++++++++++++-
 .../tab-bar/tab-create-entry-classifier.ts       |  5 ++++-
 2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-classifier.test.ts b/src/renderer/src/components/tab-bar/tab-create-entry-classifier.test.ts
index 9ff42235ad5..64fc0ef4e03 100644
--- a/src/renderer/src/components/tab-bar/tab-create-entry-classifier.test.ts
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-classifier.test.ts
@@ -190,7 +190,21 @@ describe('tab create entry classification', () => {
       getTabEntryOptions('type script', readyFiles(['docs/typescript-guide.md'])).map(
         (option) => option.classification.kind
       )
-    ).toEqual(['search', 'new-file'])
+    ).toEqual(['search'])
+  })
+
+  it('never offers to create a file from a spaced phrase without path syntax', () => {
+    expect(
+      getTabEntryOptions('release notes', readyFiles(['docs/release notes draft.md'])).map(
+        (option) => option.classification.kind
+      )
+    ).toEqual(['search', 'existing-file'])
+    // Path syntax still marks intent, so spaces inside a real path keep the create row.
+    expect(
+      getTabEntryOptions('docs/release notes.md', readyFiles([])).map(
+        (option) => option.classification.kind
+      )
+    ).toEqual(['new-file', 'search'])
   })
 
   // Fuzzy matching is a subsequence scan, so a short token matches broadly.
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-classifier.ts b/src/renderer/src/components/tab-bar/tab-create-entry-classifier.ts
index 1cd81df6f9b..78de06106a8 100644
--- a/src/renderer/src/components/tab-bar/tab-create-entry-classifier.ts
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-classifier.ts
@@ -252,8 +252,11 @@ export function getTabEntryOptions(
   if (isLikelyNewFileIntent(trimmed)) {
     return toOptions([newFile, search, ...fuzzyExistingFiles], actionLimit)
   }
+  // Why no create row: a spaced, extension-less phrase is a web query, and a
+  // stray arrow/click on "Create file" leaves an empty `release notes` on disk
+  // that then outranks search as an exact match forever after.
   if (/\s/.test(trimmed)) {
-    return toOptions([search, ...fuzzyExistingFiles, newFile], actionLimit)
+    return toOptions([search, ...fuzzyExistingFiles], actionLimit)
   }
   // Why: a single token is still a quick-open attempt ("btn" → Button.tsx), so
   // only phrases promote web search over fuzzy matches. Fuzzy matching is a

From 0f2fe13374275e3898584667cdbdaf148fedb1c7 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 00:31:03 -0700
Subject: [PATCH 31/92] fix(remote): stop absence and rotation from latching
 terminal UI state (#17945)

Three latches that only cleared on an event that could no longer arrive.

- attachHostSessionMirror read "no terminal surface for this tab in the
  inventory snapshot" as removal evidence and surfaced "Remote terminal was
  closed." with no recovery epoch, no parked retry and no path back. A
  snapshot with nothing published for the tab is a client-side view of a host
  that may still be republishing: keep polling inside the bounded window and
  expire as unknown liveness. Positive absence (the tab's surfaces are listed
  and this leaf is not among them) and a host tab_not_found/terminal_not_found
  response still retire as before. Refs #17825, #15141.

- markDisconnected() cleared the retry timer, dropping the pane from the
  scheduled-recovery registry, while the deadline it imitates deliberately
  stops the timer and keeps the pane revivable. A UI latch was strictly more
  destructive than exhausting the whole recovery budget. Refs #17824.

- confirmSurfaceInventoryAbsence folded publicationEpoch into the fingerprint
  identifying the surface, so the two required observations had to come from a
  single publication - the same evidence counted twice - and the count reset
  on every host republication. A host that re-publishes between inventories
  could never reach two, so a stale binding was never prunable. Refs #9585.

None of these retire a live PTY: removal still requires a fresh-liveness
inventory that is neither truncated nor host-scope-unverifiable, and a live
sighting still resets the confirmation.
---
 .../remote-runtime-pty-recovery-state.test.ts | 22 ++++-
 .../remote-runtime-pty-recovery-state.ts      |  6 +-
 ...nsport-pending-host-surface-attach.test.ts | 62 +++++++++++++
 .../remote-runtime-pty-transport.ts           |  9 +-
 ...rphan-absence-across-republication.test.ts | 89 +++++++++++++++++++
 ...-session-terminal-orphan-recovery-cache.ts | 10 +--
 6 files changed, 190 insertions(+), 8 deletions(-)
 create mode 100644 src/renderer/src/runtime/web-session-terminal-orphan-absence-across-republication.test.ts

diff --git a/src/renderer/src/components/terminal-pane/remote-runtime-pty-recovery-state.test.ts b/src/renderer/src/components/terminal-pane/remote-runtime-pty-recovery-state.test.ts
index 07a9199d307..d71af0b9afb 100644
--- a/src/renderer/src/components/terminal-pane/remote-runtime-pty-recovery-state.test.ts
+++ b/src/renderer/src/components/terminal-pane/remote-runtime-pty-recovery-state.test.ts
@@ -135,11 +135,31 @@ describe('RemoteRuntimePtyRecoveryState', () => {
     expect(state.currentPhase).toBe('disconnected')
     expect(state.isCurrent(epoch)).toBe(false)
     expect(retry).not.toHaveBeenCalled()
+    state.dispose()
+  })
+
+  it('keeps a markDisconnected pane as revivable as the deadline it imitates', async () => {
+    vi.useFakeTimers()
+    const state = new RemoteRuntimePtyRecoveryState()
+    const retry = vi.fn()
+    const epoch = state.begin()
+    state.schedule(epoch, retry)
+
+    state.markDisconnected()
+
+    // Why: the latch stops self-initiated retries only; it must not un-register the pane.
+    await vi.advanceTimersByTimeAsync(300_000)
+    expect(retry).not.toHaveBeenCalled()
+    expect(state.currentPhase).toBe('disconnected')
+
+    expect(retryAllRemoteRuntimePtyRecoveriesNow()).toBe(1)
+    expect(retry).toHaveBeenCalledWith(epoch + 1)
+    expect(state.currentPhase).toBe('recovering')
+    state.dispose()
   })
 
   it.each([
     ['healthy', (state: RemoteRuntimePtyRecoveryState) => state.markHealthy()],
-    ['disconnected', (state: RemoteRuntimePtyRecoveryState) => state.markDisconnected()],
     ['cancelled', (state: RemoteRuntimePtyRecoveryState) => state.cancel()],
     ['disposed', (state: RemoteRuntimePtyRecoveryState) => state.dispose()]
   ])('removes %s panes from the scheduled recovery registry', (_label, finish) => {
diff --git a/src/renderer/src/components/terminal-pane/remote-runtime-pty-recovery-state.ts b/src/renderer/src/components/terminal-pane/remote-runtime-pty-recovery-state.ts
index 0b609ff876c..fbdd50e443f 100644
--- a/src/renderer/src/components/terminal-pane/remote-runtime-pty-recovery-state.ts
+++ b/src/renderer/src/components/terminal-pane/remote-runtime-pty-recovery-state.ts
@@ -162,7 +162,11 @@ export class RemoteRuntimePtyRecoveryState {
     if (this.phase === 'disposed') {
       return
     }
-    this.clearTimers()
+    // Why: same latch the deadline arrives at, so it must be equally revivable — stop auto-retry but keep
+    // the parked retry registered for online/resume/reconnect. clearTimers() here would be strictly more
+    // destructive than exhausting the whole recovery budget.
+    this.stopRetryTimer()
+    this.clearDeadlineTimer()
     this.phase = 'disconnected'
     this.onChange?.()
   }
diff --git a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport-pending-host-surface-attach.test.ts b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport-pending-host-surface-attach.test.ts
index 48ec214db50..69c8d5c437c 100644
--- a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport-pending-host-surface-attach.test.ts
+++ b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport-pending-host-surface-attach.test.ts
@@ -212,6 +212,68 @@ describe('initial host-mirror attach against a surface published as pending-hand
     expect(transport.getRecoveryState?.().phase).toBe('recovering')
   })
 
+  it('never reads an empty tab inventory as a closed remote terminal', async () => {
+    let hostRepublished = false
+    runtimeCall.mockImplementation((args: { method: string }) => {
+      if (args.method === 'session.tabs.activate' || args.method === 'session.tabs.list') {
+        return Promise.resolve({
+          ok: true,
+          result: hostSessionSnapshot(hostRepublished ? 'ready' : 'absent')
+        })
+      }
+      return Promise.resolve({ ok: true, result: { terminal: { handle: 'duplicate-terminal' } } })
+    })
+    const { createRemoteRuntimePtyTransport } = await import('./remote-runtime-pty-transport')
+    const onError = vi.fn()
+    const transport = createRemoteRuntimePtyTransport('env-1', {
+      worktreeId: 'wt-1',
+      tabId: 'web-terminal-host-tab-1',
+      leafId: 'leaf-1'
+    })
+
+    const connect = transport.connect({ url: '', callbacks: { onError } })
+    await vi.advanceTimersByTimeAsync(1_000)
+
+    // A snapshot with no surface for the tab is a client-side view of a host that may still be
+    // republishing — unknown liveness, so no terminal-closed verdict may be surfaced.
+    expect(onError).not.toHaveBeenCalled()
+
+    hostRepublished = true
+    await vi.advanceTimersByTimeAsync(HOST_SURFACE_ATTACH_WINDOW_MS)
+    await expect(connect).resolves.toMatchObject({ id: 'remote:env-1@@terminal-1' })
+
+    expect(onError).not.toHaveBeenCalled()
+    expect(subscribedTerminalHandles()).toContain('terminal-1')
+  })
+
+  it('keeps a pane whose tab inventory stayed empty revivable instead of latching an error', async () => {
+    runtimeCall.mockImplementation((args: { method: string }) => {
+      if (args.method === 'session.tabs.activate' || args.method === 'session.tabs.list') {
+        return Promise.resolve({ ok: true, result: hostSessionSnapshot('absent') })
+      }
+      return Promise.resolve({ ok: true, result: { terminal: { handle: 'duplicate-terminal' } } })
+    })
+    const { createRemoteRuntimePtyTransport } = await import('./remote-runtime-pty-transport')
+    const { REMOTE_RUNTIME_AUTO_RECOVERY_TIMEOUT_MS } =
+      await import('./remote-runtime-pty-recovery-state')
+    const onError = vi.fn()
+    const transport = createRemoteRuntimePtyTransport('env-1', {
+      worktreeId: 'wt-1',
+      tabId: 'web-terminal-host-tab-1',
+      leafId: 'leaf-1'
+    })
+
+    const connect = transport.connect({ url: '', callbacks: { onError } })
+    await vi.advanceTimersByTimeAsync(
+      HOST_SURFACE_ATTACH_WINDOW_MS + REMOTE_RUNTIME_AUTO_RECOVERY_TIMEOUT_MS
+    )
+    await expect(connect).resolves.toBeUndefined()
+
+    expect(onError).not.toHaveBeenCalled()
+    expect(transport.getRecoveryState?.().phase).toBe('disconnected')
+    expect(transport.retryRecovery?.()).toBe(true)
+  })
+
   it('stops re-activating once an activation outcome is unobservable', async () => {
     let activations = 0
     runtimeCall.mockImplementation((args: { method: string }) => {
diff --git a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
index 62c3ebee134..a4290c5dbd5 100644
--- a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
+++ b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
@@ -672,7 +672,14 @@ export function createRemoteRuntimePtyTransport(
           getHostSessionTerminalSurfaces(snapshot, hostTabId, {
             matchRequestedLeaf: false
           }).length > 0
-        return siblingStillExists ? false : null
+        if (siblingStillExists) {
+          return false
+        }
+        // Why: a populated surface list missing only this leaf is positive absence, but a list carrying no
+        // surface at all for the tab is a client-side snapshot of a host that may still be republishing.
+        // Keep polling inside the bounded window and let it expire as unknown liveness, never as removal.
+        nextRequest = 'list'
+        continue
       }
       // Why: a host relaunch republishes the surface unmaterialized, and only activation can mint its PTY — list-only polling waits forever.
       nextRequest = activationOutcomeUnknown ? 'list' : 'activate'
diff --git a/src/renderer/src/runtime/web-session-terminal-orphan-absence-across-republication.test.ts b/src/renderer/src/runtime/web-session-terminal-orphan-absence-across-republication.test.ts
new file mode 100644
index 00000000000..a39eae58ac7
--- /dev/null
+++ b/src/renderer/src/runtime/web-session-terminal-orphan-absence-across-republication.test.ts
@@ -0,0 +1,89 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  ENVIRONMENT_ID,
+  listResult,
+  makeSnapshot,
+  makeState
+} from './__fixtures__/web-session-terminal-orphan-recovery-regression-fixtures'
+import {
+  clearWebSessionTerminalOrphanRecoveryForTests,
+  recoverWebSessionTerminalOrphansBeforeApply
+} from './web-session-terminal-orphan-recovery'
+
+const LEAVES = [{ leafId: 'leaf-1', handle: 'term-ghost' }]
+
+describe('inventory absence confirmed across host republications', () => {
+  beforeEach(() => {
+    clearWebSessionTerminalOrphanRecoveryForTests()
+  })
+
+  it('prunes a binding two fresh-liveness inventories omit even when the host re-published between them', async () => {
+    const worktree = 'repo::ghost-across-republication'
+    const state = makeState(worktree, LEAVES)
+    const call = vi.fn(async ({ method }: { method: string }) => {
+      if (method === 'terminal.list') {
+        return { ok: true as const, result: listResult(worktree, []) }
+      }
+      return { ok: false as const, error: { code: 'conflict', message: 'unexpected' } }
+    })
+
+    // Every host publication mints a new epoch; the surface identity being confirmed absent does not change.
+    const first = await recoverWebSessionTerminalOrphansBeforeApply(
+      state,
+      makeSnapshot(worktree, 'epoch-1', LEAVES),
+      ENVIRONMENT_ID,
+      { call: call as never }
+    )
+    expect(first?.tabs).toEqual([
+      expect.objectContaining({ leafId: 'leaf-1', terminal: 'term-ghost' })
+    ])
+
+    const second = await recoverWebSessionTerminalOrphansBeforeApply(
+      state,
+      makeSnapshot(worktree, 'epoch-2', LEAVES),
+      ENVIRONMENT_ID,
+      { call: call as never }
+    )
+
+    expect(second?.tabs).toEqual([])
+  })
+
+  it('restarts confirmation when the host lists the surface again', async () => {
+    const worktree = 'repo::ghost-relisted'
+    const state = makeState(worktree, LEAVES)
+    let listedTerminals: readonly Record<string, unknown>[] = []
+    const call = vi.fn(async ({ method }: { method: string }) => {
+      if (method === 'terminal.list') {
+        return { ok: true as const, result: listResult(worktree, listedTerminals) }
+      }
+      return { ok: false as const, error: { code: 'conflict', message: 'unexpected' } }
+    })
+
+    await recoverWebSessionTerminalOrphansBeforeApply(
+      state,
+      makeSnapshot(worktree, 'epoch-1', LEAVES),
+      ENVIRONMENT_ID,
+      { call: call as never }
+    )
+    listedTerminals = [{ handle: 'term-ghost', ptyId: 'pty-1', incarnationId: 'inc-1' }]
+    await recoverWebSessionTerminalOrphansBeforeApply(
+      state,
+      makeSnapshot(worktree, 'epoch-2', LEAVES),
+      ENVIRONMENT_ID,
+      { call: call as never }
+    )
+    listedTerminals = []
+
+    const third = await recoverWebSessionTerminalOrphansBeforeApply(
+      state,
+      makeSnapshot(worktree, 'epoch-3', LEAVES),
+      ENVIRONMENT_ID,
+      { call: call as never }
+    )
+
+    // A live sighting resets the count; one later absence is not two.
+    expect(third?.tabs).toEqual([
+      expect.objectContaining({ leafId: 'leaf-1', terminal: 'term-ghost' })
+    ])
+  })
+})
diff --git a/src/renderer/src/runtime/web-session-terminal-orphan-recovery-cache.ts b/src/renderer/src/runtime/web-session-terminal-orphan-recovery-cache.ts
index 412d6323475..97245c962d2 100644
--- a/src/renderer/src/runtime/web-session-terminal-orphan-recovery-cache.ts
+++ b/src/renderer/src/runtime/web-session-terminal-orphan-recovery-cache.ts
@@ -141,11 +141,11 @@ function inventoryAbsenceCoordinates(args: {
       surfaceKey: args.surface.surfaceKey,
       expectedEnvironmentPairingRevision: args.expectedEnvironmentPairingRevision
     }),
-    fingerprint: [
-      args.snapshot.publicationEpoch,
-      args.surface.handle,
-      args.surface.expectedPtyId ?? ''
-    ].join('\0')
+    // Why no publicationEpoch: the fingerprint identifies the *surface* being confirmed absent, not the
+    // snapshot that carried it. Folding the epoch in required both observations to come from one
+    // publication — which is the same evidence counted twice — and reset the count whenever the host
+    // republished, so a host that re-publishes between inventories could never reach two.
+    fingerprint: [args.surface.handle, args.surface.expectedPtyId ?? ''].join('\0')
   }
 }
 

From 3924b7276f9ca2c976b36c231c1f0a58f4c19762 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 00:31:27 -0700
Subject: [PATCH 32/92] fix(automations): report an unverifiable process loss
 as lost, not failed (#17967)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* docs(exit-cause): pin why isProvenProcessExit(0) must stay true

isProvenProcessExit asks whether the process ended; the cause resolvers ask
why. Their disagreement on 0 is the design, not a defect: login(1) wraps
every macOS local PTY once the TCC preflight passes, so routing
hostReportsChildExitStatus through the predicate would leave every pane a
user closed with `exit` mounted forever.

No behavior change; comment and regression tests only.

* fix(automations): report an unverifiable process loss as lost, not failed

Two automation readers consumed the raw PTY exit code with no liveness
check, so the -1 unverified sentinel — on SSH, a live relay whose reattach
failed — was published as status 'dispatch_failed' with "Automation process
exited with code -1." The run was asserted finished when all that happened
was that we lost contact.

Route both through the existing vocabulary:

- The completion tracker records no result for an unproven code. The run
  keeps its non-final 'dispatched' status, so it is never evicted and never
  shown as Failed, and stays owned by main's AutomationRunCompletionWatcher,
  which already reports a genuinely unobservable run truthfully ("lost the
  terminal for this run") rather than inventing an exit code. finalize() is
  never reached, so a terminal whose process cannot be proven dead is never
  closed. A later done can still complete the run.
- Both runtime `terminal.wait` readers defaulted an absent status to 0,
  minting a clean finish out of no evidence. They now share
  runtimeWaitExitCode, which defaults to the new UNVERIFIED_PROCESS_EXIT_CODE.
- The background-session exit handler no longer clears the tab-PTY binding
  on an unverified loss, matching pty-exit-hibernate.ts, and marks the tab
  so orphan cleanup cannot sweep an agent that may still be running.

A proven exit is unchanged: 0 still completes and finalizes, and a real
nonzero failure still reports dispatch_failed.
---
 .../hooks/automation-dispatch-completion.ts   |  28 +++++
 ...omation-dispatch-unverifiable-loss.test.ts | 105 ++++++++++++++++++
 .../src/lib/agent-background-session-exit.ts  |  32 ++++++
 .../agent-background-session-test-state.ts    |   2 +
 .../lib/automation-session-observer.test.ts   |  46 ++++++++
 .../src/lib/automation-session-observer.ts    |   3 +-
 .../launch-agent-background-session.test.ts   |  25 +++++
 .../lib/launch-agent-background-session.ts    |   5 +-
 src/shared/terminal-exit-cause.test.ts        |  18 +++
 src/shared/terminal-exit-cause.ts             |  27 +++++
 10 files changed, 288 insertions(+), 3 deletions(-)
 create mode 100644 src/renderer/src/hooks/automation-dispatch-unverifiable-loss.test.ts
 create mode 100644 src/renderer/src/lib/agent-background-session-exit.ts

diff --git a/src/renderer/src/hooks/automation-dispatch-completion.ts b/src/renderer/src/hooks/automation-dispatch-completion.ts
index 098d1167a38..933f3666ae1 100644
--- a/src/renderer/src/hooks/automation-dispatch-completion.ts
+++ b/src/renderer/src/hooks/automation-dispatch-completion.ts
@@ -14,6 +14,7 @@ import {
   UNCHANGED_AUTOMATION_AGENT_STATUS_ENTRY
 } from './automation-agent-status-entry-change'
 import type { Worktree } from '../../../shared/worktree/types'
+import { isProvenProcessExit } from '../../../shared/terminal-exit-cause'
 
 type MarkDispatchResult = (result: AutomationDispatchResult) => Promise<void>
 
@@ -33,6 +34,7 @@ export function createAutomationDispatchCompletion(args: {
   let pendingExitCode: number | null = null
   let pendingDone = false
   let completionMarked = false
+  let contactLost = false
   let unsubscribeAgentStatus = (): void => {}
   let unsubscribeSessionObserver = (): void => {}
   let releaseReuseDispatchTab = (): void => {}
@@ -85,10 +87,36 @@ export function createAutomationDispatchCompletion(args: {
       console.error('[automations] Failed to clear retired terminal identity:', error)
     }
   }
+  /**
+   * A lost PTY is not a result. Record nothing: the run keeps its non-final
+   * `dispatched` status, so it is never evicted from history and never shown as
+   * Failed for work that is very likely still running (on SSH, a relay whose
+   * reattach failed). Ownership of an unobservable run belongs to main's
+   * AutomationRunCompletionWatcher, which reports the truthful "lost the
+   * terminal for this run" instead of an exit code nobody witnessed.
+   *
+   * `finalize()` is deliberately never reached here — closing the terminal of a
+   * process we cannot prove dead is what orphans live work.
+   */
+  const abandonUnverifiableRun = (code: number): void => {
+    if (completionMarked || contactLost) {
+      return
+    }
+    contactLost = true
+    cleanupRunObservers()
+    args.releaseTerminalOwnership()
+    console.warn(
+      `[automations] Lost contact with the process for run ${args.run.id} (code ${code}); leaving the run dispatched rather than reporting an exit.`
+    )
+  }
   const markExitResult = async (code: number): Promise<void> => {
     if (completionMarked) {
       return
     }
+    if (!isProvenProcessExit(code)) {
+      abandonUnverifiableRun(code)
+      return
+    }
     completionMarked = true
     cleanupRunObservers()
     try {
diff --git a/src/renderer/src/hooks/automation-dispatch-unverifiable-loss.test.ts b/src/renderer/src/hooks/automation-dispatch-unverifiable-loss.test.ts
new file mode 100644
index 00000000000..87adc2860e8
--- /dev/null
+++ b/src/renderer/src/hooks/automation-dispatch-unverifiable-loss.test.ts
@@ -0,0 +1,105 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type { AutomationDispatchResult } from '../../../shared/automations-types'
+
+vi.mock('@/store', () => ({
+  useAppStore: {
+    getState: () => ({ agentStatusByPaneKey: {} }),
+    subscribe: vi.fn(() => () => {})
+  }
+}))
+
+const markDispatchResult = vi.fn<(result: AutomationDispatchResult) => Promise<void>>()
+const releaseTerminalOwnership = vi.fn()
+const finalizeTerminalOwnership = vi.fn(() => false)
+
+async function createCompletion() {
+  const { createAutomationDispatchCompletion } = await import('./automation-dispatch-completion')
+  const completion = createAutomationDispatchCompletion({
+    run: { id: 'run-1' } as never,
+    worktree: { id: 'wt-1', displayName: 'Automation worktree' } as never,
+    precheckResult: null,
+    markDispatchResult,
+    releaseTerminalOwnership,
+    finalizeTerminalOwnership
+  })
+  // The dispatch itself is already recorded before any exit can settle it.
+  await completion.settlePendingAfterDispatch()
+  markDispatchResult.mockClear()
+  return completion
+}
+
+/**
+ * Loss of contact is never evidence of process death
+ * (docs/reference/ssh-execution-boundary.md). The exit sentinel these readers
+ * receive is the same one the terminal panes already classify as unverifiable.
+ */
+describe('automation dispatch completion on an unverifiable loss', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    markDispatchResult.mockResolvedValue(undefined)
+    finalizeTerminalOwnership.mockReturnValue(false)
+  })
+
+  it('records no result, so the run keeps its non-final dispatched status', async () => {
+    // A -1 is a lost relay or a synthesized host-shutdown fanout. Reporting
+    // "exited with code -1" asserts a finish nobody witnessed; on SSH the
+    // automation is very likely still running.
+    const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => undefined)
+    const completion = await createCompletion()
+
+    completion.handleExit(-1)
+    await vi.waitFor(() => expect(releaseTerminalOwnership).toHaveBeenCalledOnce())
+
+    expect(markDispatchResult).not.toHaveBeenCalled()
+    // Closing a terminal whose process cannot be proven dead orphans live work.
+    expect(finalizeTerminalOwnership).not.toHaveBeenCalled()
+    warnSpy.mockRestore()
+  })
+
+  it('still completes and finalizes a genuinely exited process', async () => {
+    const completion = await createCompletion()
+    finalizeTerminalOwnership.mockReturnValue(true)
+
+    completion.handleExit(0)
+    await vi.waitFor(() => expect(finalizeTerminalOwnership).toHaveBeenCalledOnce())
+
+    expect(markDispatchResult).toHaveBeenCalledWith(
+      expect.objectContaining({ runId: 'run-1', status: 'completed', error: null })
+    )
+    expect(releaseTerminalOwnership).not.toHaveBeenCalled()
+  })
+
+  it('still reports a real automation failure as dispatch_failed', async () => {
+    const completion = await createCompletion()
+
+    completion.handleExit(9)
+    await vi.waitFor(() => expect(releaseTerminalOwnership).toHaveBeenCalledOnce())
+
+    expect(markDispatchResult).toHaveBeenCalledWith(
+      expect.objectContaining({
+        runId: 'run-1',
+        status: 'dispatch_failed',
+        error: 'Automation process exited with code 9.'
+      })
+    )
+    expect(finalizeTerminalOwnership).not.toHaveBeenCalled()
+  })
+
+  it('lets a later done still complete a run whose contact was lost', async () => {
+    // The loss withheld a verdict rather than settling one, so positive
+    // evidence arriving afterwards must still be able to close the run.
+    const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => undefined)
+    const completion = await createCompletion()
+
+    completion.handleExit(-1)
+    await vi.waitFor(() => expect(releaseTerminalOwnership).toHaveBeenCalledOnce())
+    completion.handleAgentDone()
+
+    await vi.waitFor(() =>
+      expect(markDispatchResult).toHaveBeenCalledWith(
+        expect.objectContaining({ status: 'completed' })
+      )
+    )
+    warnSpy.mockRestore()
+  })
+})
diff --git a/src/renderer/src/lib/agent-background-session-exit.ts b/src/renderer/src/lib/agent-background-session-exit.ts
new file mode 100644
index 00000000000..0234da01055
--- /dev/null
+++ b/src/renderer/src/lib/agent-background-session-exit.ts
@@ -0,0 +1,32 @@
+import { useAppStore } from '@/store'
+import {
+  isProvenProcessExit,
+  UNVERIFIED_PROCESS_EXIT_CODE
+} from '../../../shared/terminal-exit-cause'
+
+/**
+ * The code a runtime `terminal.wait` actually reported.
+ *
+ * Why not `?? 0`: a wait that answers without a status observed nothing, and a
+ * fabricated zero would be read downstream as a clean finish.
+ */
+export function runtimeWaitExitCode(wait: { exitCode?: number | null }): number {
+  return wait.exitCode ?? UNVERIFIED_PROCESS_EXIT_CODE
+}
+
+/**
+ * Settle a background agent tab's PTY binding when its session ends.
+ *
+ * Mirrors the rule the mounted panes follow (pty-exit-hibernate.ts): only a
+ * proven exit drops the tab↔PTY identity. A synthetic loss sentinel retires the
+ * transport alone, so the binding stays for reconnect to adopt and the tab is
+ * marked so orphan cleanup cannot sweep an agent that may still be running.
+ */
+export function settleTabPtyBinding(tabId: string, ptyId: string, code: number): void {
+  const state = useAppStore.getState()
+  if (isProvenProcessExit(code)) {
+    state.clearTabPtyId(tabId, ptyId)
+    return
+  }
+  state.markUnverifiedPtyLoss(tabId)
+}
diff --git a/src/renderer/src/lib/agent-background-session-test-state.ts b/src/renderer/src/lib/agent-background-session-test-state.ts
index 85def0ffadb..06f553ad72b 100644
--- a/src/renderer/src/lib/agent-background-session-test-state.ts
+++ b/src/renderer/src/lib/agent-background-session-test-state.ts
@@ -49,6 +49,7 @@ export type AgentBackgroundSessionTestState = {
   closeTab: TestMock
   setTabLayout: TestMock
   clearTabPtyId: TestMock
+  markUnverifiedPtyLoss: TestMock
   setAgentStatus: TestMock
   registerAgentLaunchConfig: TestMock
   clearAgentLaunchConfig: TestMock
@@ -114,6 +115,7 @@ export function createAgentBackgroundSessionTestState(mocks: {
     closeTab: mocks.closeTab,
     setTabLayout: mocks.setTabLayout,
     clearTabPtyId: vi.fn(),
+    markUnverifiedPtyLoss: vi.fn(),
     setAgentStatus: vi.fn(),
     registerAgentLaunchConfig: mocks.registerAgentLaunchConfig,
     clearAgentLaunchConfig: vi.fn()
diff --git a/src/renderer/src/lib/automation-session-observer.test.ts b/src/renderer/src/lib/automation-session-observer.test.ts
index 69c75319fed..3ef489314c5 100644
--- a/src/renderer/src/lib/automation-session-observer.test.ts
+++ b/src/renderer/src/lib/automation-session-observer.test.ts
@@ -1,5 +1,6 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 import { toAppSshPtyId } from '../../../shared/ssh-pty-id'
+import { UNVERIFIED_PROCESS_EXIT_CODE } from '../../../shared/terminal-exit-cause'
 
 const mockSubscribeToPtyData = vi.fn()
 const mockSubscribeToPtyExit = vi.fn()
@@ -153,6 +154,51 @@ describe('observeExistingAutomationSession', () => {
     expect(onAgentStatus).toHaveBeenCalledTimes(1)
   })
 
+  it('reports a runtime wait that carried no status as unverified, not as a clean exit', async () => {
+    // `exitCode ?? 0` fabricated a clean finish out of an absent status, so a
+    // host that answered without one was read as a completed automation.
+    state.terminalLayoutsByTabId = {
+      'tab-1': { ptyIdsByLeafId: { [LEAF_ID]: 'remote:env-1@@terminal-9' } }
+    }
+    state.ptyIdsByTabId = { 'tab-1': ['remote:env-1@@terminal-9'] }
+    mockCallRuntimeRpc.mockResolvedValue({ wait: {} })
+    const onExit = vi.fn()
+    const { observeExistingAutomationSession } = await import('./automation-session-observer')
+
+    await observeExistingAutomationSession({
+      ptyId: 'remote:env-1@@terminal-9',
+      paneKey: PANE_KEY,
+      runId: 'run-1',
+      onData: vi.fn(),
+      onAgentStatus: vi.fn(),
+      onExit
+    })
+
+    await vi.waitFor(() => expect(onExit).toHaveBeenCalledTimes(1))
+    expect(onExit).toHaveBeenCalledWith(UNVERIFIED_PROCESS_EXIT_CODE)
+  })
+
+  it('still forwards a status the runtime host did report', async () => {
+    state.terminalLayoutsByTabId = {
+      'tab-1': { ptyIdsByLeafId: { [LEAF_ID]: 'remote:env-1@@terminal-9' } }
+    }
+    state.ptyIdsByTabId = { 'tab-1': ['remote:env-1@@terminal-9'] }
+    mockCallRuntimeRpc.mockResolvedValue({ wait: { exitCode: 0 } })
+    const onExit = vi.fn()
+    const { observeExistingAutomationSession } = await import('./automation-session-observer')
+
+    await observeExistingAutomationSession({
+      ptyId: 'remote:env-1@@terminal-9',
+      paneKey: PANE_KEY,
+      runId: 'run-1',
+      onData: vi.fn(),
+      onAgentStatus: vi.fn(),
+      onExit
+    })
+
+    await vi.waitFor(() => expect(onExit).toHaveBeenCalledWith(0))
+  })
+
   it('stamps the exact SSH PTY in the legacy renderer fallback', async () => {
     state.settings.terminalMainSideEffectAuthority = false
     const ptyId = toAppSshPtyId('ssh-a', 'pty-1')
diff --git a/src/renderer/src/lib/automation-session-observer.ts b/src/renderer/src/lib/automation-session-observer.ts
index a953652fefa..d96cb49b14e 100644
--- a/src/renderer/src/lib/automation-session-observer.ts
+++ b/src/renderer/src/lib/automation-session-observer.ts
@@ -9,6 +9,7 @@ import {
 } from '@/runtime/runtime-terminal-stream'
 import { useAppStore } from '@/store'
 import { createAgentStatusOscProcessor } from '../../../shared/agent-status-osc'
+import { runtimeWaitExitCode } from '@/lib/agent-background-session-exit'
 import type { ParsedAgentStatusPayload } from '../../../shared/agent-status-types'
 import { isMainTerminalSideEffectAuthorityForPty } from '@/components/terminal-pane/terminal-side-effect-facts-handler'
 import { resolveLiveAgentStatusConnectionRouting } from '@/lib/agent-status-connection-ownership'
@@ -93,7 +94,7 @@ export async function observeExistingAutomationSession(args: {
     )
       .then((result) => {
         if (!disposed) {
-          onExit(result.wait.exitCode ?? 0)
+          onExit(runtimeWaitExitCode(result.wait))
         }
       })
       .catch(() => {})
diff --git a/src/renderer/src/lib/launch-agent-background-session.test.ts b/src/renderer/src/lib/launch-agent-background-session.test.ts
index 42df8332882..ea7b1a30762 100644
--- a/src/renderer/src/lib/launch-agent-background-session.test.ts
+++ b/src/renderer/src/lib/launch-agent-background-session.test.ts
@@ -474,6 +474,31 @@ describe('launchAgentBackgroundSession', () => {
     )
     expect(onExit).toHaveBeenCalledWith('pty-1', 0)
     expect(unsubscribe).toHaveBeenCalled()
+    expect(state.markUnverifiedPtyLoss).not.toHaveBeenCalled()
+  })
+
+  it('keeps the tab bound to its PTY when contact was lost rather than observed', async () => {
+    // Same rule the terminal panes follow: a -1 sentinel retires the transport
+    // only. Clearing the binding would leave a reconnect with nothing to adopt
+    // and let orphan cleanup sweep a tab whose agent may still be running.
+    mockSubscribeToPtyExit.mockReturnValue(vi.fn())
+    const onExit = vi.fn()
+    const { launchAgentBackgroundSession } = await import('./launch-agent-background-session')
+
+    await launchAgentBackgroundSession({
+      agent: 'claude',
+      worktreeId: 'wt-1',
+      prompt: 'run the automation',
+      onExit
+    })
+
+    const sidecar = mockSubscribeToPtyExit.mock.calls[0]?.[1] as (code: number) => void
+    sidecar(-1)
+
+    const tabId = expectReservedAgentBackgroundTabId(mockSpawn)
+    expect(state.clearTabPtyId).not.toHaveBeenCalled()
+    expect(state.markUnverifiedPtyLoss).toHaveBeenCalledWith(tabId)
+    expect(onExit).toHaveBeenCalledWith('pty-1', -1)
   })
 
   it('leaves no tab behind if PTY spawn fails', async () => {
diff --git a/src/renderer/src/lib/launch-agent-background-session.ts b/src/renderer/src/lib/launch-agent-background-session.ts
index a1d9f1df654..6bc6c65e420 100644
--- a/src/renderer/src/lib/launch-agent-background-session.ts
+++ b/src/renderer/src/lib/launch-agent-background-session.ts
@@ -40,6 +40,7 @@ import {
 } from '@/lib/adopt-agent-background-session-tab'
 import { createBackgroundAgentStatusConsumer } from '@/lib/background-agent-status-consumer'
 import { isWslUncPath } from '../../../shared/wsl-paths'
+import { runtimeWaitExitCode, settleTabPtyBinding } from '@/lib/agent-background-session-exit'
 
 export async function launchAgentBackgroundSession(
   args: LaunchAgentBackgroundSessionArgs
@@ -145,7 +146,7 @@ export async function launchAgentBackgroundSession(
     unsubscribeData()
     sshStartupDelivery.clear()
     if (tab) {
-      useAppStore.getState().clearTabPtyId(tab.id, exitPtyId)
+      settleTabPtyBinding(tab.id, exitPtyId, code)
     }
     useAppStore.getState().clearAgentLaunchConfig(paneKey)
     onExit?.(exitPtyId, code)
@@ -279,7 +280,7 @@ export async function launchAgentBackgroundSession(
         { terminal: runtimeTerminalHandle, for: 'exit' },
         { timeoutMs: 24 * 60 * 60 * 1000 }
       )
-        .then((result) => handleExit(ptyId, result.wait.exitCode ?? 0))
+        .then((result) => handleExit(ptyId, runtimeWaitExitCode(result.wait)))
         .catch(() => {})
     } else {
       // Why the incarnation: a relay-recycled id can hold the previous owner's exit, and draining
diff --git a/src/shared/terminal-exit-cause.test.ts b/src/shared/terminal-exit-cause.test.ts
index 3fafba16faa..504c1fae602 100644
--- a/src/shared/terminal-exit-cause.test.ts
+++ b/src/shared/terminal-exit-cause.test.ts
@@ -109,4 +109,22 @@ describe('isProvenProcessExit', () => {
     // A host shutdown can deliver -1 for every PTY without proving process death.
     expect(isProvenProcessExit(-1)).toBe(false)
   })
+
+  it('answers whether the process ended, not why — so it may differ from the cause on zero', () => {
+    // Deliberate, not an oversight: an unknowable *reason* is not an unknown
+    // *fact of death*. Collapsing these would strand every cleanly-exited pane.
+    expect(resolveUnreportedExitCause(0)).toEqual({ kind: 'unknown', reason: 'cause_unreported' })
+    expect(isProvenProcessExit(0)).toBe(true)
+  })
+
+  it('keeps a shell that a user closed with `exit` tearing down on macOS', () => {
+    // login(1) wraps every macOS local PTY once the TCC preflight passes, so
+    // hostReportsChildExitStatus is false for essentially all of them. login
+    // forks the shell and waits, so its exit still proves the shell died —
+    // routing that evidence through here would leave the pane mounted forever.
+    expect(
+      resolveProcessExitCause({ exitCode: 0, signal: 0, hostReportsChildExitStatus: false }).kind
+    ).toBe('unknown')
+    expect(isProvenProcessExit(0)).toBe(true)
+  })
 })
diff --git a/src/shared/terminal-exit-cause.ts b/src/shared/terminal-exit-cause.ts
index 2e3ac7919c4..ae2bca6e9cc 100644
--- a/src/shared/terminal-exit-cause.ts
+++ b/src/shared/terminal-exit-cause.ts
@@ -34,6 +34,16 @@ export type TerminalExitUnknownReason =
 
 export const OPERATOR_CLOSE_EXIT_CAUSE: TerminalExitCause = { kind: 'operator_close' }
 
+/**
+ * The code every surface uses for "contact was lost before the host could vouch
+ * for this process". `resolveProcessExitCause` reads it as `stop_unverified`
+ * and {@link isProvenProcessExit} rejects it.
+ *
+ * A reader handed an *optional* status by a host must default to this, never to
+ * `0`: `exitCode ?? 0` mints a clean finish out of an absence of evidence.
+ */
+export const UNVERIFIED_PROCESS_EXIT_CODE = -1
+
 /**
  * Build a cause from what the host actually observed.
  *
@@ -108,6 +118,23 @@ export function isDeliberateTerminalExit(cause: TerminalExitCause): boolean {
  * Negative codes are synthetic stop sentinels; they mean that the host lost
  * contact before it could vouch for the child, so downstream cleanup must use
  * the `unverifiable` path instead of treating the tab as exited.
+ *
+ * This asks *whether* the process ended; the cause resolvers above ask *why*.
+ * The two deliberately disagree about `0`, and that is not a defect:
+ *
+ * - `resolveUnreportedExitCause(0)` is `unknown` because a bare zero cannot
+ *   distinguish a clean finish from a signal — an unknowable **reason**.
+ * - `isProvenProcessExit(0)` is `true` because a host only forwards a
+ *   non-negative code after its provider observed the process end — a known
+ *   **fact of death**, whatever the reason.
+ *
+ * Do not route `hostReportsChildExitStatus` or `signal` through here to
+ * "narrow" the zero. `login(1)` wraps every macOS local PTY once the TCC
+ * preflight passes, so `hostReportsChildExitStatus` is false for essentially
+ * all of them (macos-tcc-login-shell.ts) — yet login forks the shell and waits,
+ * so its own exit *is* evidence the shell died. Treating those as unproven
+ * would strand every macOS pane that a user closed with `exit`, which is the
+ * mirror-image regression of reporting a lost host as exited.
  */
 export function isProvenProcessExit(exitCode: number): boolean {
   return resolveProcessExitCause({ exitCode }).kind !== 'unknown'

From e02347ae9ba23be08d2b622b2fbe75e808853b1c Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 00:48:51 -0700
Subject: [PATCH 33/92] fix(ssh): keep the restored relay session id when a tab
 has not rebound yet (#17881)

Hydration nulls tab.ptyId, empties ptyIdsByTabId, and never restores
lastKnownRelayPtyIdByTabId, so between restore and rebind the persistence
layer saw no evidence a relay-backed tab owned a session and dropped both
remoteSessionIdsByTabId and activeWorktreeIdsOnShutdown - overwriting the
handle the local file and the relay snapshot still held. Losing them is
self-reinforcing: the next startup has nothing left to reconnect from.

Count the two reconnect maps the orphan sweep and retirement planning
already treat as live ownership. The !tab.ptyId sleep guard is unchanged.

Fixes #17743
---
 .../src/lib/workspace-session-patch.ts        |   2 +
 .../workspace-session-relevant-fields.test.ts |   4 +-
 src/renderer/src/lib/workspace-session.ts     |  21 ++-
 .../restored-relay-session-identity.test.ts   | 143 ++++++++++++++++++
 4 files changed, 166 insertions(+), 4 deletions(-)
 create mode 100644 src/renderer/src/store/terminals/restored-relay-session-identity.test.ts

diff --git a/src/renderer/src/lib/workspace-session-patch.ts b/src/renderer/src/lib/workspace-session-patch.ts
index 17fd11a7787..4e56654a8f5 100644
--- a/src/renderer/src/lib/workspace-session-patch.ts
+++ b/src/renderer/src/lib/workspace-session-patch.ts
@@ -77,6 +77,8 @@ export function buildWorkspaceSessionPatch(
       'tabsByWorktree',
       'ptyIdsByTabId',
       'lastKnownRelayPtyIdByTabId',
+      'pendingReconnectPtyIdByTabId',
+      'deferredSshSessionIdsByTabId',
       'repos',
       'worktreesByRepo'
     ] as const)
diff --git a/src/renderer/src/lib/workspace-session-relevant-fields.test.ts b/src/renderer/src/lib/workspace-session-relevant-fields.test.ts
index 25c96b3bd2e..2dc1346f534 100644
--- a/src/renderer/src/lib/workspace-session-relevant-fields.test.ts
+++ b/src/renderer/src/lib/workspace-session-relevant-fields.test.ts
@@ -37,7 +37,9 @@ describe('SESSION_RELEVANT_FIELDS', () => {
     defaultTerminalTabsAppliedByWorktreeId: true,
     closedTerminalTabTombstonesByTabId: true,
     sleepingAgentSessionsByPaneKey: true,
-    clientHostedBrowserCloseIntentsByEnvironment: true
+    clientHostedBrowserCloseIntentsByEnvironment: true,
+    pendingReconnectPtyIdByTabId: true,
+    deferredSshSessionIdsByTabId: true
   }
 
   it('contains every key of WorkspaceSessionSnapshot', () => {
diff --git a/src/renderer/src/lib/workspace-session.ts b/src/renderer/src/lib/workspace-session.ts
index 31ddc63704a..330a150b636 100644
--- a/src/renderer/src/lib/workspace-session.ts
+++ b/src/renderer/src/lib/workspace-session.ts
@@ -61,6 +61,9 @@ export type WorkspaceSessionSnapshot = Pick<
   activeWorkspaceExecutionHostId?: AppState['activeWorkspaceExecutionHostId']
   sleepingAgentSessionsByPaneKey?: AppState['sleepingAgentSessionsByPaneKey']
   clientHostedBrowserCloseIntentsByEnvironment?: AppState['clientHostedBrowserCloseIntentsByEnvironment']
+  /** Optional so the many partial snapshot fixtures keep type-checking; see buildTerminalSessionData. */
+  pendingReconnectPtyIdByTabId?: AppState['pendingReconnectPtyIdByTabId']
+  deferredSshSessionIdsByTabId?: AppState['deferredSshSessionIdsByTabId']
 }
 
 // Why: shallow-equality gate for the debounced session writer; _exhaustive below keeps it in sync with the snapshot type.
@@ -97,7 +100,9 @@ export const SESSION_RELEVANT_FIELDS = [
   'defaultTerminalTabsAppliedByWorktreeId',
   'closedTerminalTabTombstonesByTabId',
   'sleepingAgentSessionsByPaneKey',
-  'clientHostedBrowserCloseIntentsByEnvironment'
+  'clientHostedBrowserCloseIntentsByEnvironment',
+  'pendingReconnectPtyIdByTabId',
+  'deferredSshSessionIdsByTabId'
 ] as const satisfies readonly (keyof WorkspaceSessionSnapshot)[]
 
 type _MissingSessionField = Exclude<
@@ -222,8 +227,18 @@ export function buildTerminalSessionData(
 
   // Why: relay reconnect keeps lastKnown but clears tab.ptyId; the !tab.ptyId guard excludes slept tabs (which keep ptyId as a wake hint).
   const lastKnown = snapshot.lastKnownRelayPtyIdByTabId
+  // Why the two reconnect maps (#17743): hydration nulls tab.ptyId, empties ptyIdsByTabId, and
+  // never restores lastKnown, so on a fresh process they are the ONLY surviving handle for a
+  // relay-backed tab between restore and rebind. Persisting without them republishes the nulled
+  // row over the id the file (and the relay snapshot) still held, which is the client's own
+  // bookkeeping being read as evidence the remote PTY is gone. Both already count as live
+  // ownership for the orphan sweep (terminal-orphan-helpers) and for retirement planning.
+  const pendingReconnect = snapshot.pendingReconnectPtyIdByTabId ?? {}
+  const deferredSshSessions = snapshot.deferredSshSessionIdsByTabId ?? {}
+  const restoredSessionId = (tabId: string): string | undefined =>
+    lastKnown[tabId] || pendingReconnect[tabId] || deferredSshSessions[tabId]
   const hasReconnectableSession = (tab: { id: string; ptyId: string | null }): boolean =>
-    hasLivePty(tab.id) || (!tab.ptyId && Boolean(lastKnown[tab.id]))
+    hasLivePty(tab.id) || (!tab.ptyId && Boolean(restoredSessionId(tab.id)))
 
   const activeWorktreeIdsOnShutdown = Object.entries(tabsByWorktree)
     .filter(([, tabs]) => tabs.some(hasReconnectableSession))
@@ -249,7 +264,7 @@ export function buildTerminalSessionData(
       if (!hasReconnectableSession(tab)) {
         continue
       }
-      const sessionId = tab.ptyId || lastKnown[tab.id]
+      const sessionId = tab.ptyId || restoredSessionId(tab.id)
       if (sessionId) {
         remoteSessionIdsByTabId[tab.id] = sessionId
       }
diff --git a/src/renderer/src/store/terminals/restored-relay-session-identity.test.ts b/src/renderer/src/store/terminals/restored-relay-session-identity.test.ts
new file mode 100644
index 00000000000..e7e2ed15296
--- /dev/null
+++ b/src/renderer/src/store/terminals/restored-relay-session-identity.test.ts
@@ -0,0 +1,143 @@
+import { describe, expect, it } from 'vitest'
+import type { WorkspaceSessionState } from '../../../../shared/workspace-session-state-types'
+import { buildWorkspaceSessionPayload } from '@/lib/workspace-session'
+import { getOrphanTerminalIds } from '../slices/terminal-orphan-helpers'
+import { createTestStore, makeTab, makeWorktree } from '../slices/store-test-helpers'
+
+const TARGET_ID = 'target'
+const REPO_ID = 'repo-ssh'
+const WORKTREE_ID = `${REPO_ID}::/work/demo`
+const TAB_ID = 'tab-ssh'
+const RELAY_PTY_ID = 'ssh:target@@pty-42'
+
+function connectedSshState(status: 'connected' | 'disconnected') {
+  return new Map([
+    [TARGET_ID, { targetId: TARGET_ID, status, error: null, reconnectAttempt: 0 }]
+  ]) as never
+}
+
+function seedStore(status: 'connected' | 'disconnected' = 'connected') {
+  const store = createTestStore()
+  store.setState({
+    repos: [
+      {
+        id: REPO_ID,
+        path: '/work/demo',
+        displayName: 'demo',
+        badgeColor: '#000',
+        addedAt: 1,
+        connectionId: TARGET_ID,
+        executionHostId: 'ssh:target'
+      }
+    ],
+    worktreesByRepo: {
+      [REPO_ID]: [
+        makeWorktree({
+          id: WORKTREE_ID,
+          repoId: REPO_ID,
+          path: '/work/demo',
+          hostId: 'ssh:target'
+        })
+      ]
+    },
+    sshConnectionStates: connectedSshState(status),
+    sshTargetsHydrated: true,
+    sshTargetLabels: new Map([[TARGET_ID, 'demo host']]),
+    hydrationSucceeded: true
+  })
+  return store
+}
+
+/** What the previous run wrote: a live relay session recorded on the row AND in the id map. */
+function persistedSession(): WorkspaceSessionState {
+  return {
+    activeRepoId: REPO_ID,
+    activeWorktreeId: WORKTREE_ID,
+    activeTabId: TAB_ID,
+    tabsByWorktree: {
+      [WORKTREE_ID]: [makeTab({ id: TAB_ID, worktreeId: WORKTREE_ID, ptyId: RELAY_PTY_ID })]
+    },
+    terminalLayoutsByTabId: {},
+    activeWorktreeIdsOnShutdown: [WORKTREE_ID],
+    activeTabIdByWorktree: { [WORKTREE_ID]: TAB_ID },
+    remoteSessionIdsByTabId: { [TAB_ID]: RELAY_PTY_ID },
+    activeConnectionIdsAtShutdown: [TARGET_ID]
+  }
+}
+
+describe('restored relay session identity (#17743)', () => {
+  it('does not republish a hydration-nulled ptyId over the persisted relay session id', () => {
+    const store = seedStore()
+    store.getState().hydrateWorkspaceSession(persistedSession())
+
+    // Hydration deliberately nulls the row; that is the contract, not the bug.
+    expect(store.getState().tabsByWorktree[WORKTREE_ID][0].ptyId).toBeNull()
+    expect(store.getState().ptyIdsByTabId[TAB_ID]).toEqual([])
+    expect(store.getState().lastKnownRelayPtyIdByTabId[TAB_ID]).toBeUndefined()
+
+    const payload = buildWorkspaceSessionPayload(store.getState())
+
+    expect(payload.remoteSessionIdsByTabId).toEqual({ [TAB_ID]: RELAY_PTY_ID })
+    expect(payload.activeWorktreeIdsOnShutdown).toContain(WORKTREE_ID)
+    expect(payload.activeConnectionIdsAtShutdown).toEqual([TARGET_ID])
+  })
+
+  it('rebinds the restored tab to its live relay PTY and keeps publishing that id', async () => {
+    const store = seedStore()
+    store.getState().hydrateWorkspaceSession(persistedSession())
+
+    await store.getState().reconnectPersistedTerminals()
+
+    expect(store.getState().tabsByWorktree[WORKTREE_ID][0].ptyId).toBe(RELAY_PTY_ID)
+    expect(store.getState().ptyIdsByTabId[TAB_ID]).toEqual([RELAY_PTY_ID])
+    expect(buildWorkspaceSessionPayload(store.getState()).remoteSessionIdsByTabId).toEqual({
+      [TAB_ID]: RELAY_PTY_ID
+    })
+  })
+
+  it('keeps a deferred relay session id after a disconnect clears the row binding', async () => {
+    const store = seedStore('disconnected')
+    store.getState().hydrateWorkspaceSession(persistedSession())
+    await store.getState().reconnectPersistedTerminals()
+
+    expect(store.getState().deferredSshSessionIdsByTabId[TAB_ID]).toBe(RELAY_PTY_ID)
+
+    // A relay drop clears the row binding. Loss of contact is not evidence the remote PTY exited,
+    // so the handle must survive into the next write.
+    store.getState().clearDirectSshTargetPtyBindings(TARGET_ID)
+
+    expect(store.getState().tabsByWorktree[WORKTREE_ID][0].ptyId).toBeNull()
+    expect(store.getState().ptyIdsByTabId[TAB_ID]).toEqual([])
+    expect(buildWorkspaceSessionPayload(store.getState()).remoteSessionIdsByTabId).toEqual({
+      [TAB_ID]: RELAY_PTY_ID
+    })
+  })
+
+  it('leaves a tab whose relay handle is unverifiable alone instead of retiring it', async () => {
+    const store = seedStore('disconnected')
+    store.getState().hydrateWorkspaceSession(persistedSession())
+    await store.getState().reconnectPersistedTerminals()
+    store.getState().clearDirectSshTargetPtyBindings(TARGET_ID)
+
+    // No live PTY, no row binding, host unreachable — `unverifiable`, never `exited`.
+    expect([...getOrphanTerminalIds(store.getState(), WORKTREE_ID)]).toEqual([])
+    expect(store.getState().tabsByWorktree[WORKTREE_ID].map((tab) => tab.id)).toEqual([TAB_ID])
+  })
+
+  it('does not invent a session id for a tab that never had one', () => {
+    const store = seedStore()
+    const session = persistedSession()
+    session.tabsByWorktree[WORKTREE_ID] = [
+      makeTab({ id: TAB_ID, worktreeId: WORKTREE_ID, ptyId: null })
+    ]
+    delete session.remoteSessionIdsByTabId
+    delete session.activeConnectionIdsAtShutdown
+    session.activeWorktreeIdsOnShutdown = []
+    store.getState().hydrateWorkspaceSession(session)
+
+    const payload = buildWorkspaceSessionPayload(store.getState())
+
+    expect(payload.remoteSessionIdsByTabId).toBeUndefined()
+    expect(payload.activeWorktreeIdsOnShutdown).toEqual([])
+  })
+})

From c91edafec0025361a159bc0c0124fee1653be493 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 01:11:35 -0700
Subject: [PATCH 34/92] fix(web): declare a socket dead even when its probe
 cannot be sent (#17838)

* fix(web): declare a socket dead even when its probe cannot be sent

* chore: land the shared liveness policy with its first real adopter instead

* docs: drop the reference to a file this PR no longer adds
---
 ...nection-heartbeat-unsendable-probe.test.ts | 31 +++++++++++++++++++
 .../web/web-runtime-connection-heartbeat.ts   | 10 ++++--
 2 files changed, 38 insertions(+), 3 deletions(-)
 create mode 100644 src/renderer/src/web/web-runtime-connection-heartbeat-unsendable-probe.test.ts

diff --git a/src/renderer/src/web/web-runtime-connection-heartbeat-unsendable-probe.test.ts b/src/renderer/src/web/web-runtime-connection-heartbeat-unsendable-probe.test.ts
new file mode 100644
index 00000000000..c47b20190db
--- /dev/null
+++ b/src/renderer/src/web/web-runtime-connection-heartbeat-unsendable-probe.test.ts
@@ -0,0 +1,31 @@
+import { describe, expect, it, vi } from 'vitest'
+import { WebRuntimeConnectionHeartbeat } from './web-runtime-connection-heartbeat'
+
+// A probe that cannot be written is the strongest evidence the link is gone. Gating the deadline on
+// a successful send disarms the only branch that can declare the socket dead, so a saturated or
+// half-open socket is never judged at all — the wedge fixed on the SSH transport in #17817.
+describe('WebRuntimeConnectionHeartbeat when the probe cannot be sent', () => {
+  it('still declares the socket dead instead of watching it forever', () => {
+    let now = 0
+    const socket = { readyState: 1, close: vi.fn() } as unknown as WebSocket
+    const handleDeadSocket = vi.fn()
+    const heartbeat = new WebRuntimeConnectionHeartbeat({
+      now: () => now,
+      isDocumentVisible: () => true,
+      isConnected: () => true,
+      getSocket: () => socket,
+      // The saturated / half-open case: the send never leaves.
+      sendProbe: () => false,
+      handleDeadSocket
+    })
+
+    heartbeat.lastInboundFrameAt = 0
+    heartbeat.lastHeartbeatTickAt = 0
+    for (const tickAt of [10_000, 20_000, 30_000, 40_000, 50_000]) {
+      now = tickAt
+      heartbeat.runTick()
+    }
+
+    expect(handleDeadSocket).toHaveBeenCalledWith(socket)
+  })
+})
diff --git a/src/renderer/src/web/web-runtime-connection-heartbeat.ts b/src/renderer/src/web/web-runtime-connection-heartbeat.ts
index 251d97945a6..177d7f91454 100644
--- a/src/renderer/src/web/web-runtime-connection-heartbeat.ts
+++ b/src/renderer/src/web/web-runtime-connection-heartbeat.ts
@@ -69,9 +69,13 @@ export class WebRuntimeConnectionHeartbeat {
       return
     }
     if (this.heartbeatProbeSentAt === null && now - this.lastInboundFrameAt >= HEARTBEAT_IDLE_MS) {
-      if (this.options.sendProbe()) {
-        this.heartbeatProbeSentAt = now
-      }
+      // Why the deadline is armed before the send and regardless of its result: a probe that could
+      // not be written is the strongest evidence the link is gone, not a reason to stop watching.
+      // Gating this on a successful send disarms the only branch above that can declare the socket
+      // dead, so a saturated or half-open socket would never be judged at all -- the same wedge
+      // fixed on the SSH transport in #17817. See also #17823.
+      this.heartbeatProbeSentAt = now
+      this.options.sendProbe()
     }
   }
 

From 6d61305a963d3e72c21aece645ef805d066dd6fb Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 01:18:57 -0700
Subject: [PATCH 35/92] docs(ssh): record that an app update strands
 relay-backed terminals as `unverifiable` (#17972)

* docs(ssh): record that an app update strands relay-backed terminals

The boundary doc listed two ways remote work can stop and omitted the third
outcome, where the work does not stop but becomes permanently unreachable
(#13852). Names the mechanism, keeps it in the live/unverifiable/exited
vocabulary, and contrasts it with the daemon's protocol-versioned endpoint.

* docs(ssh): cite the boundary's sources by symbol so the refs cannot rot
---
 docs/reference/ssh-execution-boundary.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docs/reference/ssh-execution-boundary.md b/docs/reference/ssh-execution-boundary.md
index d24cdc38e8e..d85dadacccd 100644
--- a/docs/reference/ssh-execution-boundary.md
+++ b/docs/reference/ssh-execution-boundary.md
@@ -40,6 +40,14 @@ Two ways remote work _can_ actually stop:
 
 Reconnect re-attaches to the same live PTYs and replays a bounded buffer (`REPLAY_BUFFER_MAX`, a 102,400-code-unit tail). Output beyond that while you were away is lost to the client even though the process was never interrupted: **the transcript is truncated; the work stays `live`.**
 
+## Updating Orca strands relay-backed terminals
+
+There is a third outcome that is neither of the two above, and the vocabulary matters: the work does not stop, it becomes permanently unreachable.
+
+The relay's install directory — and therefore its socket path — is namespaced by a content hash of the relay bundle (`computeRemoteRelayDir` in `src/main/ssh/ssh-relay-versioned-install.ts`, consumed by `resolveRemoteInstallState` in `src/main/ssh/ssh-relay-deploy.ts`), and the daemon refuses any client whose bundle hash differs (`handleDaemonHandshakeFrame` in `src/relay/relay-handshake.ts`, exit `EXIT_CODE_VERSION_MISMATCH` 42). Two builds whose relay protocol is byte-identical still refuse each other. So the first reconnect after an app update deploys a new relay at a path the incumbent was never listening on, and cannot reach it even in principle. Every PTY the incumbent owns is `unverifiable` — running, unreachable, and never `exited`. The client's leases are attempted against a relay that never minted their ids, expired on the not-found answer (`handlePtyReattachFailure` in `src/main/ssh/ssh-relay-session.ts`), and the pane falls back to a cold-restore agent resume — or to a bare shell when no resumable provider session was captured for it. The old relay keeps its directory pinned against GC, because its socket really is live (`hasLiveRelaySocket` in `src/main/ssh/remote-install-gc.ts`). See #13852.
+
+The peer model does not have this failure, and that is the concrete reason behind "One host, one model" below. The daemon's endpoint is namespaced by a **semantic protocol version** rather than a build (`daemon-v<N>.sock`, from `getDaemonSocketPath` in `src/main/daemon/daemon-spawner.ts`), every earlier protocol version stays attachable (`PROTOCOL_VERSION` in `src/main/daemon/daemon-protocol-version.ts`), and a daemon holding live sessions is preserved across a version change instead of replaced (`shouldPreserveDaemonWithLiveSessions` in `src/main/daemon/daemon-replacement-preflight.ts`).
+
 ## Control plane
 
 On an SSH host, `orca` is a shim (`~/.orca-relay/bin/orca`) that proxies **back to the client's runtime** over the relay socket. Your repository, processes, and files remain remote — only the control plane is on the client. This is correct for an SSH target, but it has a consequence worth stating plainly:

From 75dcda438f3aa54ae3f664a966df353e79f56bcd Mon Sep 17 00:00:00 2001
From: hwantage <82494320+hwantage@users.noreply.github.com>
Date: Wed, 2 Sep 2026 17:24:29 +0900
Subject: [PATCH 36/92] feat(editor): add Show Whitespace toggle option in diff
 viewer (#15120)

* feat(editor): add Show Whitespace toggle option in diff viewer

- Add `diffShowWhitespace` boolean option to `GlobalSettings` (defaults to false).
- Pass `ignoreTrimWhitespace: !diffShowWhitespace` to Monaco DiffEditor options in `DiffViewer`.
- Expose "Show Whitespace" checkbox in `EditorPanelMarkdownActionsMenu` for diff surfaces.
- Add unit tests for diff whitespace action menu binding in `EditorPanelMarkdownActionsMenu.test.tsx`.

* fix(editor): apply Show Whitespace to combined diffs

Honor the persisted preference in DiffSectionBody as well as DiffViewer,
add a combined-diff toolbar control, and extract a shared Monaco option
helper with settings UI and unit tests.

---------

Co-authored-by: Neil <4138956+nwparker@users.noreply.github.com>
---
 .../runtime-home-settings-test-fixtures.ts    |  1 +
 .../codex-accounts/service-test-harness.ts    |  1 +
 .../src/components/editor/DiffSectionBody.tsx |  4 +
 .../src/components/editor/DiffSectionItem.tsx |  1 +
 .../src/components/editor/DiffViewer.tsx      |  2 +
 .../components/editor/EditorPanelHeader.tsx   |  5 ++
 .../EditorPanelMarkdownActionsMenu.test.tsx   | 36 ++++++++-
 .../editor/EditorPanelMarkdownActionsMenu.tsx | 16 ++++
 .../combined-diff/CombinedDiffViewer.tsx      |  3 +
 .../review-controls/combined-diff-toolbar.tsx | 18 ++++-
 .../use-combined-diff-view-preferences.ts     | 10 ++-
 .../diff-editor-whitespace-options.test.ts    | 13 ++++
 .../editor/diff-editor-whitespace-options.ts  | 10 +++
 .../editor/diff-section-item-props.ts         |  1 +
 .../DiffShowWhitespaceSetting.test.tsx        | 73 +++++++++++++++++++
 .../settings/DiffShowWhitespaceSetting.tsx    | 69 ++++++++++++++++++
 .../settings/GeneralEditorSettingsSection.tsx |  3 +
 src/renderer/src/i18n/locales/en.json         |  9 ++-
 src/shared/default-global-settings.ts         |  1 +
 src/shared/global-settings-types.ts           |  1 +
 20 files changed, 272 insertions(+), 5 deletions(-)
 create mode 100644 src/renderer/src/components/editor/diff-editor-whitespace-options.test.ts
 create mode 100644 src/renderer/src/components/editor/diff-editor-whitespace-options.ts
 create mode 100644 src/renderer/src/components/settings/DiffShowWhitespaceSetting.test.tsx
 create mode 100644 src/renderer/src/components/settings/DiffShowWhitespaceSetting.tsx

diff --git a/src/main/codex-accounts/runtime-home-settings-test-fixtures.ts b/src/main/codex-accounts/runtime-home-settings-test-fixtures.ts
index 6cad595f866..2872ecf15c3 100644
--- a/src/main/codex-accounts/runtime-home-settings-test-fixtures.ts
+++ b/src/main/codex-accounts/runtime-home-settings-test-fixtures.ts
@@ -130,6 +130,7 @@ export function createSettings(overrides: TestSettingsOverrides = {}): GlobalSet
     terminalWindowsPowerShellImplementation: 'powershell.exe',
     ...overrides,
     diffWordWrap: overrides.diffWordWrap ?? false,
+    diffShowWhitespace: overrides.diffShowWhitespace ?? false,
     localWindowsRuntimeDefault: overrides.localWindowsRuntimeDefault ?? { kind: 'windows-host' },
     leftSidebarAppearanceMode: overrides.leftSidebarAppearanceMode ?? 'default',
     appFontFamily,
diff --git a/src/main/codex-accounts/service-test-harness.ts b/src/main/codex-accounts/service-test-harness.ts
index 9afd6a8ba5e..ed454c7a149 100644
--- a/src/main/codex-accounts/service-test-harness.ts
+++ b/src/main/codex-accounts/service-test-harness.ts
@@ -151,6 +151,7 @@ export function createSettings(overrides: Partial<GlobalSettings> = {}): GlobalS
     terminalWindowsPowerShellImplementation: 'powershell.exe',
     ...overrides,
     diffWordWrap: overrides.diffWordWrap ?? false,
+    diffShowWhitespace: overrides.diffShowWhitespace ?? false,
     localWindowsRuntimeDefault: overrides.localWindowsRuntimeDefault ?? { kind: 'windows-host' },
     leftSidebarAppearanceMode: overrides.leftSidebarAppearanceMode ?? 'default',
     appFontFamily,
diff --git a/src/renderer/src/components/editor/DiffSectionBody.tsx b/src/renderer/src/components/editor/DiffSectionBody.tsx
index af740f5b18e..78d2a7ff896 100644
--- a/src/renderer/src/components/editor/DiffSectionBody.tsx
+++ b/src/renderer/src/components/editor/DiffSectionBody.tsx
@@ -11,6 +11,7 @@ import type { DiffSection } from './diff-section-types'
 import { translate } from '@/i18n/i18n'
 import { LargeDiffFallback } from './LargeDiffFallback'
 import { LargeDiffLoadPrompt } from './LargeDiffLoadPrompt'
+import { buildDiffEditorWhitespaceOptions } from './diff-editor-whitespace-options'
 import { buildDiffEditorWordWrapOptions } from './diff-editor-word-wrap-options'
 import { monacoFindOptions } from './monaco-find-options'
 
@@ -39,6 +40,7 @@ type DiffSectionBodyProps = {
   isEditable: boolean
   diffEditorFontSize: number
   diffWordWrap?: boolean
+  diffShowWhitespace?: boolean
   editorFontFamily?: string
   onCancelComment: () => void
   onSubmitComment: (body: string) => Promise<void>
@@ -65,6 +67,7 @@ export function DiffSectionBody({
   isEditable,
   diffEditorFontSize,
   diffWordWrap,
+  diffShowWhitespace,
   editorFontFamily,
   onCancelComment,
   onSubmitComment,
@@ -204,6 +207,7 @@ export function DiffSectionBody({
             fontFamily: editorFontFamily || 'monospace',
             lineNumbers: 'on',
             ...buildDiffEditorWordWrapOptions(diffWordWrap),
+            ...buildDiffEditorWhitespaceOptions(diffShowWhitespace),
             automaticLayout: true,
             renderOverviewRuler: false,
             scrollbar: combinedDiffSectionScrollbarOptions,
diff --git a/src/renderer/src/components/editor/DiffSectionItem.tsx b/src/renderer/src/components/editor/DiffSectionItem.tsx
index 305842c1e1c..c9b67bc92dc 100644
--- a/src/renderer/src/components/editor/DiffSectionItem.tsx
+++ b/src/renderer/src/components/editor/DiffSectionItem.tsx
@@ -373,6 +373,7 @@ export function DiffSectionItem({
           isEditable={isEditable}
           diffEditorFontSize={diffEditorFontSize}
           diffWordWrap={settings?.diffWordWrap}
+          diffShowWhitespace={settings?.diffShowWhitespace}
           editorFontFamily={resolveEditorFontFamily(settings)}
           onCancelComment={() => setPopover(null)}
           onSubmitComment={handleSubmitComment}
diff --git a/src/renderer/src/components/editor/DiffViewer.tsx b/src/renderer/src/components/editor/DiffViewer.tsx
index 36b515b8f53..2c09fdf23f3 100644
--- a/src/renderer/src/components/editor/DiffViewer.tsx
+++ b/src/renderer/src/components/editor/DiffViewer.tsx
@@ -23,6 +23,7 @@ import { getLargeDiffRenderLimit } from './large-diff-render-limit'
 import { useDiffViewerLargeDiffLifecycle } from './useDiffViewerLargeDiffLifecycle'
 import { getDiffViewerLargeDiffSaveAction } from './diff-viewer-large-diff-save-action'
 import type { DiffViewerProps } from './diff-viewer-props'
+import { buildDiffEditorWhitespaceOptions } from './diff-editor-whitespace-options'
 import { buildDiffEditorWordWrapOptions } from './diff-editor-word-wrap-options'
 import { useDiffEditorRegistration } from './diff-navigation-context'
 import { preserveDiffViewStateAcrossModelSwaps } from './diff-model-swap-view-state'
@@ -426,6 +427,7 @@ export default function DiffViewer({
               fontFamily: resolveEditorFontFamily(settings),
               lineNumbers: 'on',
               ...buildDiffEditorWordWrapOptions(settings?.diffWordWrap),
+              ...buildDiffEditorWhitespaceOptions(settings?.diffShowWhitespace),
               automaticLayout: true,
               renderOverviewRuler: true,
               scrollbar: diffEditorScrollbarOptions,
diff --git a/src/renderer/src/components/editor/EditorPanelHeader.tsx b/src/renderer/src/components/editor/EditorPanelHeader.tsx
index 8aeb972baba..0e9af133b07 100644
--- a/src/renderer/src/components/editor/EditorPanelHeader.tsx
+++ b/src/renderer/src/components/editor/EditorPanelHeader.tsx
@@ -95,6 +95,7 @@ export function EditorPanelHeader({
   )
   const activeGroupId = useAppStore((s) => s.activeGroupIdByWorktree[activeFile.worktreeId])
   const diffWordWrap = useAppStore((s) => s.settings?.diffWordWrap === true)
+  const diffShowWhitespace = useAppStore((s) => s.settings?.diffShowWhitespace === true)
   // Why: undefined/true mean wrap on; only explicit false turns wrap off (#9974).
   const editorWordWrap = useAppStore((s) => s.settings?.editorWordWrap !== false)
   const updateSettings = useAppStore((s) => s.updateSettings)
@@ -327,12 +328,16 @@ export function EditorPanelHeader({
         isMarkdown={isMarkdown}
         isDiffSurface={isDiffSurface}
         diffWordWrap={diffWordWrap}
+        diffShowWhitespace={diffShowWhitespace}
         editorWordWrap={editorWordWrap}
         shouldShowMarkdownExportAction={shouldShowMarkdownExportAction}
         canExportMarkdownToPdf={canExportMarkdownToPdf}
         canShowMarkdownFrontmatterToggle={canShowMarkdownFrontmatterToggle}
         markdownFrontmatterVisible={markdownFrontmatterVisible}
         onToggleDiffWordWrap={() => void updateSettings({ diffWordWrap: !diffWordWrap })}
+        onToggleDiffWhitespace={() =>
+          void updateSettings({ diffShowWhitespace: !diffShowWhitespace })
+        }
         onToggleEditorWordWrap={() => void updateSettings({ editorWordWrap: !editorWordWrap })}
         onToggleMarkdownFrontmatter={onToggleMarkdownFrontmatter}
         onExportMarkdownToPdf={onExportMarkdownToPdf}
diff --git a/src/renderer/src/components/editor/EditorPanelMarkdownActionsMenu.test.tsx b/src/renderer/src/components/editor/EditorPanelMarkdownActionsMenu.test.tsx
index 9078af7bc2a..b68c8cd6cf3 100644
--- a/src/renderer/src/components/editor/EditorPanelMarkdownActionsMenu.test.tsx
+++ b/src/renderer/src/components/editor/EditorPanelMarkdownActionsMenu.test.tsx
@@ -54,12 +54,14 @@ describe('EditorPanelMarkdownActionsMenu', () => {
         isMarkdown: false,
         isDiffSurface: false,
         diffWordWrap: false,
+        diffShowWhitespace: false,
         editorWordWrap: true,
         shouldShowMarkdownExportAction: false,
         canExportMarkdownToPdf: false,
         canShowMarkdownFrontmatterToggle: false,
         markdownFrontmatterVisible: false,
         onToggleDiffWordWrap,
+        onToggleDiffWhitespace: () => {},
         onToggleEditorWordWrap,
         onToggleMarkdownFrontmatter: () => {},
         onExportMarkdownToPdf: () => {}
@@ -81,22 +83,54 @@ describe('EditorPanelMarkdownActionsMenu', () => {
         isMarkdown: false,
         isDiffSurface: true,
         diffWordWrap: true,
+        diffShowWhitespace: false,
         editorWordWrap: false,
         shouldShowMarkdownExportAction: false,
         canExportMarkdownToPdf: false,
         canShowMarkdownFrontmatterToggle: false,
         markdownFrontmatterVisible: false,
         onToggleDiffWordWrap,
+        onToggleDiffWhitespace: () => {},
         onToggleEditorWordWrap,
         onToggleMarkdownFrontmatter: () => {},
         onExportMarkdownToPdf: () => {}
       })
     )
 
-    expect(checkboxItems.list).toHaveLength(1)
+    expect(checkboxItems.list).toHaveLength(2)
     expect(checkboxItems.list[0]).toMatchObject({ checked: true, label: 'Word Wrap' })
     checkboxItems.list[0]?.onCheckedChange?.(false)
     expect(onToggleDiffWordWrap).toHaveBeenCalledOnce()
     expect(onToggleEditorWordWrap).not.toHaveBeenCalled()
   })
+
+  it('shows and binds Show Whitespace on diff surfaces', () => {
+    const onToggleDiffWhitespace = vi.fn()
+    renderToStaticMarkup(
+      React.createElement(EditorPanelMarkdownActionsMenu, {
+        isMarkdown: false,
+        isDiffSurface: true,
+        diffWordWrap: false,
+        diffShowWhitespace: true,
+        editorWordWrap: false,
+        shouldShowMarkdownExportAction: false,
+        canExportMarkdownToPdf: false,
+        canShowMarkdownFrontmatterToggle: false,
+        markdownFrontmatterVisible: false,
+        onToggleDiffWordWrap: () => {},
+        onToggleDiffWhitespace,
+        onToggleEditorWordWrap: () => {},
+        onToggleMarkdownFrontmatter: () => {},
+        onExportMarkdownToPdf: () => {}
+      })
+    )
+
+    expect(checkboxItems.list).toHaveLength(2)
+    expect(checkboxItems.list[1]).toMatchObject({
+      checked: true,
+      label: 'Show Whitespace'
+    })
+    checkboxItems.list[1]?.onCheckedChange?.(false)
+    expect(onToggleDiffWhitespace).toHaveBeenCalledOnce()
+  })
 })
diff --git a/src/renderer/src/components/editor/EditorPanelMarkdownActionsMenu.tsx b/src/renderer/src/components/editor/EditorPanelMarkdownActionsMenu.tsx
index 7b3589d7ada..0982f6f7e4f 100644
--- a/src/renderer/src/components/editor/EditorPanelMarkdownActionsMenu.tsx
+++ b/src/renderer/src/components/editor/EditorPanelMarkdownActionsMenu.tsx
@@ -15,6 +15,8 @@ type EditorPanelMarkdownActionsMenuProps = {
   isDiffSurface: boolean
   /** Diff-only wrap preference; ignored for normal file tabs. */
   diffWordWrap: boolean
+  /** Diff-only whitespace preference; ignored for normal file tabs. */
+  diffShowWhitespace: boolean
   /** File editor wrap preference (`settings.editorWordWrap`). */
   editorWordWrap: boolean
   shouldShowMarkdownExportAction: boolean
@@ -22,6 +24,7 @@ type EditorPanelMarkdownActionsMenuProps = {
   canShowMarkdownFrontmatterToggle: boolean
   markdownFrontmatterVisible: boolean
   onToggleDiffWordWrap: () => void
+  onToggleDiffWhitespace: () => void
   onToggleEditorWordWrap: () => void
   onToggleMarkdownFrontmatter: () => void
   onExportMarkdownToPdf: () => void
@@ -31,12 +34,14 @@ export function EditorPanelMarkdownActionsMenu({
   isMarkdown,
   isDiffSurface,
   diffWordWrap,
+  diffShowWhitespace,
   editorWordWrap,
   shouldShowMarkdownExportAction,
   canExportMarkdownToPdf,
   canShowMarkdownFrontmatterToggle,
   markdownFrontmatterVisible,
   onToggleDiffWordWrap,
+  onToggleDiffWhitespace,
   onToggleEditorWordWrap,
   onToggleMarkdownFrontmatter,
   onExportMarkdownToPdf
@@ -72,6 +77,17 @@ export function EditorPanelMarkdownActionsMenu({
             'Word Wrap'
           )}
         </DropdownMenuCheckboxItem>
+        {isDiffSurface ? (
+          <DropdownMenuCheckboxItem
+            checked={diffShowWhitespace}
+            onCheckedChange={onToggleDiffWhitespace}
+          >
+            {translate(
+              'auto.components.editor.EditorPanelMarkdownActionsMenu.4dedd55efa',
+              'Show Whitespace'
+            )}
+          </DropdownMenuCheckboxItem>
+        ) : null}
         {hasMarkdownActions ? <DropdownMenuSeparator /> : null}
         {canShowMarkdownFrontmatterToggle ? (
           <>
diff --git a/src/renderer/src/components/editor/combined-diff/CombinedDiffViewer.tsx b/src/renderer/src/components/editor/combined-diff/CombinedDiffViewer.tsx
index c429396ef86..fb9e61e4d2a 100644
--- a/src/renderer/src/components/editor/combined-diff/CombinedDiffViewer.tsx
+++ b/src/renderer/src/components/editor/combined-diff/CombinedDiffViewer.tsx
@@ -89,6 +89,7 @@ export default function CombinedDiffViewer({
   const preferences = useCombinedDiffViewPreferences({
     combinedDiffFileTreeVisibleByDefault: settings?.combinedDiffFileTreeVisibleByDefault,
     diffDefaultView: settings?.diffDefaultView,
+    diffShowWhitespace: settings?.diffShowWhitespace,
     diffWordWrap: settings?.diffWordWrap,
     registry,
     setSections,
@@ -308,6 +309,7 @@ export default function CombinedDiffViewer({
           commitCompare={entrySet.commitCompare}
           diffCommentCount={notes.diffCommentCount}
           diffCommentsForWorktree={diffCommentsForWorktree}
+          diffShowWhitespace={settings?.diffShowWhitespace}
           diffWordWrap={settings?.diffWordWrap}
           file={file}
           fileTreeCollapsed={preferences.fileTreeCollapsed}
@@ -323,6 +325,7 @@ export default function CombinedDiffViewer({
           sectionCount={sections.length}
           setAllSectionsCollapsed={preferences.setAllSectionsCollapsed}
           sideBySide={preferences.sideBySide}
+          toggleDiffShowWhitespace={preferences.toggleDiffShowWhitespace}
           toggleDiffWordWrap={preferences.toggleDiffWordWrap}
           toggleSideBySide={preferences.toggleSideBySide}
         />
diff --git a/src/renderer/src/components/editor/combined-diff/review-controls/combined-diff-toolbar.tsx b/src/renderer/src/components/editor/combined-diff/review-controls/combined-diff-toolbar.tsx
index fb5bdd54b8c..a73d008de72 100644
--- a/src/renderer/src/components/editor/combined-diff/review-controls/combined-diff-toolbar.tsx
+++ b/src/renderer/src/components/editor/combined-diff/review-controls/combined-diff-toolbar.tsx
@@ -1,5 +1,5 @@
 import type React from 'react'
-import { PanelLeftOpen, Sparkles, WrapText } from 'lucide-react'
+import { PanelLeftOpen, Space, Sparkles, WrapText } from 'lucide-react'
 import { Button } from '@/components/ui/button'
 import { Popover, PopoverContent, PopoverTrigger } from '@/components/ui/popover'
 import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
@@ -16,6 +16,7 @@ export function CombinedDiffToolbar({
   commitCompare,
   diffCommentCount,
   diffCommentsForWorktree,
+  diffShowWhitespace,
   diffWordWrap,
   file,
   fileTreeCollapsed,
@@ -31,6 +32,7 @@ export function CombinedDiffToolbar({
   sectionCount,
   setAllSectionsCollapsed,
   sideBySide,
+  toggleDiffShowWhitespace,
   toggleDiffWordWrap,
   toggleSideBySide
 }: {
@@ -40,6 +42,7 @@ export function CombinedDiffToolbar({
   commitCompare: NonNullable<OpenFile['commitCompare']> | null
   diffCommentCount: number
   diffCommentsForWorktree: DiffComment[]
+  diffShowWhitespace: boolean | undefined
   diffWordWrap: boolean | undefined
   file: OpenFile
   fileTreeCollapsed: boolean
@@ -55,6 +58,7 @@ export function CombinedDiffToolbar({
   sectionCount: number
   setAllSectionsCollapsed: (collapsed: boolean) => void
   sideBySide: boolean
+  toggleDiffShowWhitespace: () => void
   toggleDiffWordWrap: () => void
   toggleSideBySide: () => void
 }): React.JSX.Element {
@@ -187,6 +191,18 @@ export function CombinedDiffToolbar({
             ? translate('auto.components.editor.CombinedDiffViewer.a4420ca1f7', 'Wrap On')
             : translate('auto.components.editor.CombinedDiffViewer.dde325ddfe', 'Wrap Off')}
         </button>
+        <button
+          className={`inline-flex h-6 items-center gap-1 rounded border border-border px-2 text-xs transition-colors hover:text-foreground ${
+            diffShowWhitespace === true ? 'bg-accent text-foreground' : 'text-muted-foreground'
+          }`}
+          onClick={toggleDiffShowWhitespace}
+          aria-pressed={diffShowWhitespace === true}
+        >
+          <Space className="size-3.5" />
+          {diffShowWhitespace === true
+            ? translate('auto.components.editor.CombinedDiffViewer.2e91bc89d1', 'Whitespace On')
+            : translate('auto.components.editor.CombinedDiffViewer.2bf19c54ad', 'Whitespace Off')}
+        </button>
       </div>
     </div>
   )
diff --git a/src/renderer/src/components/editor/combined-diff/review-controls/use-combined-diff-view-preferences.ts b/src/renderer/src/components/editor/combined-diff/review-controls/use-combined-diff-view-preferences.ts
index 1ff70d76026..b32c88d7806 100644
--- a/src/renderer/src/components/editor/combined-diff/review-controls/use-combined-diff-view-preferences.ts
+++ b/src/renderer/src/components/editor/combined-diff/review-controls/use-combined-diff-view-preferences.ts
@@ -11,6 +11,7 @@ export type CombinedDiffViewPreferences = {
   setFileTreeCollapsed: (collapsed: boolean) => void
   setSideBySide: React.Dispatch<React.SetStateAction<boolean>>
   sideBySide: boolean
+  toggleDiffShowWhitespace: () => void
   toggleDiffWordWrap: () => void
   toggleSideBySide: () => void
 }
@@ -18,6 +19,7 @@ export type CombinedDiffViewPreferences = {
 export function useCombinedDiffViewPreferences({
   combinedDiffFileTreeVisibleByDefault,
   diffDefaultView,
+  diffShowWhitespace,
   diffWordWrap,
   registry,
   setSections,
@@ -25,10 +27,11 @@ export function useCombinedDiffViewPreferences({
 }: {
   combinedDiffFileTreeVisibleByDefault: boolean | undefined
   diffDefaultView: string | undefined
+  diffShowWhitespace: boolean | undefined
   diffWordWrap: boolean | undefined
   registry: CombinedDiffSectionLoadRegistry
   setSections: React.Dispatch<React.SetStateAction<DiffSection[]>>
-  updateSettings: (patch: { diffWordWrap: boolean }) => unknown
+  updateSettings: (patch: { diffShowWhitespace?: boolean; diffWordWrap?: boolean }) => unknown
 }): CombinedDiffViewPreferences {
   const { loadSchedulerRef, loadedIndicesRef, sectionsRef } = registry
   const [sideBySide, setSideBySide] = useState(
@@ -89,12 +92,17 @@ export function useCombinedDiffViewPreferences({
     void updateSettings({ diffWordWrap: diffWordWrap !== true })
   }, [diffWordWrap, updateSettings])
 
+  const toggleDiffShowWhitespace = useCallback(() => {
+    void updateSettings({ diffShowWhitespace: diffShowWhitespace !== true })
+  }, [diffShowWhitespace, updateSettings])
+
   return {
     fileTreeCollapsed,
     setAllSectionsCollapsed,
     setFileTreeCollapsed,
     setSideBySide,
     sideBySide,
+    toggleDiffShowWhitespace,
     toggleDiffWordWrap,
     toggleSideBySide
   }
diff --git a/src/renderer/src/components/editor/diff-editor-whitespace-options.test.ts b/src/renderer/src/components/editor/diff-editor-whitespace-options.test.ts
new file mode 100644
index 00000000000..793914d4799
--- /dev/null
+++ b/src/renderer/src/components/editor/diff-editor-whitespace-options.test.ts
@@ -0,0 +1,13 @@
+import { describe, expect, it } from 'vitest'
+import { buildDiffEditorWhitespaceOptions } from './diff-editor-whitespace-options'
+
+describe('buildDiffEditorWhitespaceOptions', () => {
+  it('ignores trim whitespace by default', () => {
+    expect(buildDiffEditorWhitespaceOptions(undefined)).toEqual({ ignoreTrimWhitespace: true })
+    expect(buildDiffEditorWhitespaceOptions(false)).toEqual({ ignoreTrimWhitespace: true })
+  })
+
+  it('includes whitespace in the diff when the preference is on', () => {
+    expect(buildDiffEditorWhitespaceOptions(true)).toEqual({ ignoreTrimWhitespace: false })
+  })
+})
diff --git a/src/renderer/src/components/editor/diff-editor-whitespace-options.ts b/src/renderer/src/components/editor/diff-editor-whitespace-options.ts
new file mode 100644
index 00000000000..4c860fadeb7
--- /dev/null
+++ b/src/renderer/src/components/editor/diff-editor-whitespace-options.ts
@@ -0,0 +1,10 @@
+import type { editor } from 'monaco-editor'
+
+export function buildDiffEditorWhitespaceOptions(
+  diffShowWhitespace: boolean | undefined
+): Pick<editor.IStandaloneDiffEditorConstructionOptions, 'ignoreTrimWhitespace'> {
+  return {
+    // Why: Monaco defaults this to true, which hides indentation-only diffs.
+    ignoreTrimWhitespace: diffShowWhitespace !== true
+  }
+}
diff --git a/src/renderer/src/components/editor/diff-section-item-props.ts b/src/renderer/src/components/editor/diff-section-item-props.ts
index 29d327d100a..e5ef73860c2 100644
--- a/src/renderer/src/components/editor/diff-section-item-props.ts
+++ b/src/renderer/src/components/editor/diff-section-item-props.ts
@@ -13,6 +13,7 @@ export type DiffSectionItemProps = {
     terminalFontSize?: number
     terminalFontFamily?: string
     diffWordWrap?: boolean
+    diffShowWhitespace?: boolean
   } | null
   sectionHeight: number | undefined
   worktreeId?: string
diff --git a/src/renderer/src/components/settings/DiffShowWhitespaceSetting.test.tsx b/src/renderer/src/components/settings/DiffShowWhitespaceSetting.test.tsx
new file mode 100644
index 00000000000..294d627fc20
--- /dev/null
+++ b/src/renderer/src/components/settings/DiffShowWhitespaceSetting.test.tsx
@@ -0,0 +1,73 @@
+// @vitest-environment happy-dom
+
+import { join } from 'node:path'
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { getDefaultSettings } from '../../../../shared/constants'
+
+vi.mock('../../store', () => ({
+  useAppStore: (selector: (state: { settingsSearchQuery: string }) => unknown) =>
+    selector({ settingsSearchQuery: '' })
+}))
+
+import { DiffShowWhitespaceSetting } from './DiffShowWhitespaceSetting'
+
+let root: Root | null = null
+let container: HTMLDivElement | null = null
+
+afterEach(() => {
+  if (root) {
+    act(() => root?.unmount())
+  }
+  container?.remove()
+  root = null
+  container = null
+})
+
+function renderSetting(diffShowWhitespace: boolean, updateSettings = vi.fn()) {
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+  act(() => {
+    root?.render(
+      <DiffShowWhitespaceSetting
+        settings={{ ...getDefaultSettings(join('test', 'home')), diffShowWhitespace }}
+        updateSettings={updateSettings}
+      />
+    )
+  })
+  return { container, updateSettings }
+}
+
+describe('DiffShowWhitespaceSetting', () => {
+  it('defaults to off so whitespace-only diffs stay quiet', () => {
+    const { container } = renderSetting(false)
+    const off = [...container.querySelectorAll('[role="radio"]')].find(
+      (button) => button.textContent === 'Off'
+    )
+
+    expect(off?.getAttribute('aria-checked')).toBe('true')
+  })
+
+  it('shows on when the preference is enabled', () => {
+    const { container } = renderSetting(true)
+    const on = [...container.querySelectorAll('[role="radio"]')].find(
+      (button) => button.textContent === 'On'
+    )
+
+    expect(on?.getAttribute('aria-checked')).toBe('true')
+  })
+
+  it('persists the on choice', () => {
+    const updateSettings = vi.fn()
+    const { container } = renderSetting(false, updateSettings)
+    const on = [...container.querySelectorAll<HTMLButtonElement>('[role="radio"]')].find(
+      (button) => button.textContent === 'On'
+    )
+
+    act(() => on?.click())
+
+    expect(updateSettings).toHaveBeenCalledWith({ diffShowWhitespace: true })
+  })
+})
diff --git a/src/renderer/src/components/settings/DiffShowWhitespaceSetting.tsx b/src/renderer/src/components/settings/DiffShowWhitespaceSetting.tsx
new file mode 100644
index 00000000000..998274b84a7
--- /dev/null
+++ b/src/renderer/src/components/settings/DiffShowWhitespaceSetting.tsx
@@ -0,0 +1,69 @@
+import type { GlobalSettings } from '../../../../shared/global-settings-types'
+import { translate } from '@/i18n/i18n'
+import { SearchableSetting } from './SearchableSetting'
+import { Label } from '../ui/label'
+import { SettingsSegmentedControl } from './SettingsFormControls'
+
+type DiffShowWhitespaceSettingProps = {
+  settings: GlobalSettings
+  updateSettings: (updates: Partial<GlobalSettings>) => void
+}
+
+export function DiffShowWhitespaceSetting({
+  settings,
+  updateSettings
+}: DiffShowWhitespaceSettingProps): React.JSX.Element {
+  return (
+    <SearchableSetting
+      title={translate(
+        'auto.components.settings.GeneralEditorSettingsSection.f1b3ceeb98',
+        'Diff Show Whitespace'
+      )}
+      description={translate(
+        'auto.components.settings.GeneralEditorSettingsSection.94a479cef3',
+        'Show leading and trailing whitespace differences in diffs.'
+      )}
+      keywords={['diff', 'whitespace', 'spaces', 'tabs', 'trim', 'indentation']}
+      className="flex items-center justify-between gap-4 py-2"
+    >
+      <div className="min-w-0 flex-1 space-y-0.5">
+        <Label>
+          {translate(
+            'auto.components.settings.GeneralEditorSettingsSection.f1b3ceeb98',
+            'Diff Show Whitespace'
+          )}
+        </Label>
+        <p className="text-xs text-muted-foreground">
+          {translate(
+            'auto.components.settings.GeneralEditorSettingsSection.94a479cef3',
+            'Show leading and trailing whitespace differences in diffs.'
+          )}
+        </p>
+      </div>
+      <SettingsSegmentedControl
+        ariaLabel={translate(
+          'auto.components.settings.GeneralEditorSettingsSection.f1b3ceeb98',
+          'Diff Show Whitespace'
+        )}
+        value={settings.diffShowWhitespace ? 'on' : 'off'}
+        onChange={(option) => updateSettings({ diffShowWhitespace: option === 'on' })}
+        options={[
+          {
+            value: 'off',
+            label: translate(
+              'auto.components.settings.GeneralEditorSettingsSection.bf16ef0af2',
+              'Off'
+            )
+          },
+          {
+            value: 'on',
+            label: translate(
+              'auto.components.settings.GeneralEditorSettingsSection.3f6892f307',
+              'On'
+            )
+          }
+        ]}
+      />
+    </SearchableSetting>
+  )
+}
diff --git a/src/renderer/src/components/settings/GeneralEditorSettingsSection.tsx b/src/renderer/src/components/settings/GeneralEditorSettingsSection.tsx
index 6b3b211f628..f4221c2823d 100644
--- a/src/renderer/src/components/settings/GeneralEditorSettingsSection.tsx
+++ b/src/renderer/src/components/settings/GeneralEditorSettingsSection.tsx
@@ -17,6 +17,7 @@ import {
 } from './SettingsFormControls'
 import { translate } from '@/i18n/i18n'
 import { RichMarkdownSpellcheckSetting } from './RichMarkdownSpellcheckSetting'
+import { DiffShowWhitespaceSetting } from './DiffShowWhitespaceSetting'
 import { EditorWordWrapSetting } from './EditorWordWrapSetting'
 import { EditorFontFamilySetting } from './EditorFontFamilySetting'
 import {
@@ -232,6 +233,8 @@ export function GeneralEditorSettingsSection({
 
       <EditorWordWrapSetting settings={settings} updateSettings={updateSettings} />
 
+      <DiffShowWhitespaceSetting settings={settings} updateSettings={updateSettings} />
+
       <SearchableSetting
         title={translate(
           'auto.components.settings.GeneralEditorSettingsSection.8f1afdfbd8',
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index 38e352118a3..99805af4c89 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -7002,6 +7002,8 @@
           "45c6e85c4d": "Editor",
           "8f1afdfbd8": "Diff Word Wrap",
           "4aa4d9fb73": "Wrap long lines in diff editors instead of requiring horizontal scrolling.",
+          "f1b3ceeb98": "Diff Show Whitespace",
+          "94a479cef3": "Show leading and trailing whitespace differences in diffs.",
           "bf16ef0af2": "Off",
           "3f6892f307": "On",
           "b82f86d7d2": "Rich Markdown Spellcheck",
@@ -14299,7 +14301,9 @@
           "724a13568d": " in {{value0}}",
           "6094135eec": " vs {{value0}}",
           "a4420ca1f7": "Wrap On",
-          "dde325ddfe": "Wrap Off"
+          "dde325ddfe": "Wrap Off",
+          "2e91bc89d1": "Whitespace On",
+          "2bf19c54ad": "Whitespace Off"
         },
         "ConflictComponents": {
           "f338288514": "Loading conflict contents...",
@@ -14390,7 +14394,8 @@
           "561251019a": "More actions",
           "8c8b7f5ff5": "Show front matter",
           "10c39d58c1": "Hide front matter",
-          "1eef809708": "Word Wrap"
+          "1eef809708": "Word Wrap",
+          "4dedd55efa": "Show Whitespace"
         },
         "EditorPanelShell": {
           "e2c4dec350": "Loading editor..."
diff --git a/src/shared/default-global-settings.ts b/src/shared/default-global-settings.ts
index f7a05d8c3f1..313e9fc6a9a 100644
--- a/src/shared/default-global-settings.ts
+++ b/src/shared/default-global-settings.ts
@@ -157,6 +157,7 @@ export function buildDefaultSettings(args: {
     notifications: args.notifications,
     diffDefaultView: 'inline',
     diffWordWrap: false,
+    diffShowWhitespace: false,
     combinedDiffFileTreeVisibleByDefault: false,
     prBotAuthorOverrides: [],
     promptCacheTimerEnabled: false,
diff --git a/src/shared/global-settings-types.ts b/src/shared/global-settings-types.ts
index 5b746515548..49f9be8baad 100644
--- a/src/shared/global-settings-types.ts
+++ b/src/shared/global-settings-types.ts
@@ -272,6 +272,7 @@ export type GlobalSettings = {
   keybindings?: KeybindingOverrides
   diffDefaultView: 'inline' | 'side-by-side'
   diffWordWrap: boolean
+  diffShowWhitespace: boolean
   combinedDiffFileTreeVisibleByDefault: boolean
   /** Bot-marked comment-author logins (stored lowercased); escape hatch for review bots on regular accounts that defeat provider metadata/heuristics. */
   prBotAuthorOverrides: string[]

From 99d9111653d27621b36e00b4e2c79009952a342a Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 01:29:26 -0700
Subject: [PATCH 37/92] fix(relay): fail an over-budget RPC response, not the
 connection (#17968)

The relay's control lane is a shared 1 MiB budget, and `sendResponse` admitted
responses onto it with the fatal default: once the lane was full, admission
closed the client. A ~900 KB `fs.listFiles` reply from a large remote workspace
therefore took down the whole remote session -- every terminal on it -- rather
than failing the one Quick Open request. The substitute `ResponseOverCapacity`
frame already there only covered the `legacy-response` lane, because the fatal
close beat it to the client.

A JSON-RPC response is the droppable class of control frame: it carries an id,
so one caller can be told and can retry. `pty.replay` and `notifyControl` keep
the fatal default -- they are never re-sent, and a silent drop there desyncs the
client with nothing to retry. Both response enqueues now pass
`controlOverflow: 'reject'`, so the substitute error is what the caller sees;
in the corner where even ~150 bytes will not fit, the caller's own 30s request
timeout settles it and the session survives.

Old clients are unaffected: they already decode this error code and message
generically (`ssh-channel-multiplexer.handleResponse` rejects the pending
promise with both), and the frame shape is unchanged. What changes is that a
listing which used to drop the connection now returns an error on it.
---
 .../dispatcher-capacity-degradation.test.ts   | 96 +++++++++++++++++++
 src/relay/dispatcher-rpc-routing.ts           | 14 ++-
 src/relay/fs-handler-file-range.test.ts       |  8 +-
 src/shared/file-range-read.ts                 |  9 +-
 4 files changed, 116 insertions(+), 11 deletions(-)

diff --git a/src/relay/dispatcher-capacity-degradation.test.ts b/src/relay/dispatcher-capacity-degradation.test.ts
index 7bcf81674dc..2c746168ecc 100644
--- a/src/relay/dispatcher-capacity-degradation.test.ts
+++ b/src/relay/dispatcher-capacity-degradation.test.ts
@@ -59,6 +59,14 @@ function makeBoundedClient(highWaterMark: number): BoundedClient {
   return client
 }
 
+// Why: the sink accepts every write but never settles it, so control-lane bytes stay retained and the
+// queue fills, while the writer keeps pumping the other lanes — the shape of a peer whose socket is behind.
+function makeUnsettledWriteClient(highWaterMark: number): BoundedClient {
+  const client = makeBoundedClient(highWaterMark)
+  client.options = { ...client.options, supportsWriteCallback: true }
+  return client
+}
+
 function decodePayload(frame: Buffer): Record<string, unknown> {
   const length = frame.readUInt32BE(9)
   return JSON.parse(frame.subarray(13, 13 + length).toString('utf-8'))
@@ -464,4 +472,92 @@ describe('RelayDispatcher bounded-capacity degradation', () => {
       bounded.dispose()
     }
   })
+
+  it('answers an over-budget response with a capacity error instead of closing the connection', async () => {
+    const primary = makeUnsettledWriteClient(65536)
+    const bounded = new RelayDispatcher(primary.write, primary.options)
+    try {
+      const clientId = bounded.activeClientIds()[0]
+      bounded.onRequest('fs.listFiles', async () => ({ paths: 'x'.repeat(700 * 1024) }))
+      bounded.onRequest('workspace.get', async () => ({ name: 'workspace' }))
+
+      bounded.feed(encodeJsonRpcFrame({ jsonrpc: '2.0', id: 91, method: 'fs.listFiles' }, 1, 0))
+      await vi.advanceTimersByTimeAsync(0)
+      expect(primary.frames).toHaveLength(1)
+
+      // The first reply still holds the shared control budget, so the second cannot fit under 1 MiB.
+      bounded.feed(encodeJsonRpcFrame({ jsonrpc: '2.0', id: 92, method: 'fs.listFiles' }, 2, 0))
+      await vi.advanceTimersByTimeAsync(0)
+
+      expect(primary.closes).toBe(0)
+      expect(bounded.isClientAttached(clientId)).toBe(true)
+      expect(primary.frames).toHaveLength(2)
+      const rejected = decodePayload(primary.frames[1]) as unknown as {
+        id: number
+        error: { code: number; message: string }
+      }
+      expect(rejected.id).toBe(92)
+      expect(rejected.error.code).toBe(RelayErrorCode.ResponseOverCapacity)
+      expect(rejected.error.message).toBe('Relay response exceeded the bounded transport capacity')
+
+      // Every other pane and request on this connection keeps working.
+      bounded.feed(encodeJsonRpcFrame({ jsonrpc: '2.0', id: 93, method: 'workspace.get' }, 3, 0))
+      await vi.advanceTimersByTimeAsync(0)
+      expect(decodePayload(primary.frames[2])).toMatchObject({
+        id: 93,
+        result: { name: 'workspace' }
+      })
+
+      bounded.notify('pty.data', { paneId: 'pane-1', data: 'still-live' })
+      expect(decodePayload(primary.frames[3])).toMatchObject({ method: 'pty.data' })
+      expect(primary.closes).toBe(0)
+    } finally {
+      bounded.dispose()
+    }
+  })
+
+  it('still closes the client when a protocol-critical control frame overflows', () => {
+    const primary = makeUnsettledWriteClient(65536)
+    const bounded = new RelayDispatcher(primary.write, primary.options)
+    try {
+      const clientId = bounded.activeClientIds()[0]
+      bounded.notifyClient(clientId, 'workspace.stale', { blob: 'x'.repeat(700 * 1024) })
+      expect(primary.closes).toBe(0)
+
+      // Replay is never re-sent, so an unnoticed drop strands the pane: overflow here stays fatal.
+      bounded.notify('pty.replay', { paneKey: 'tab-1:pane-1', data: 'y'.repeat(700 * 1024) })
+      expect(primary.closes).toBe(1)
+    } finally {
+      bounded.dispose()
+    }
+  })
+
+  it('drops an unsendable response without closing when even the capacity error will not fit', async () => {
+    const primary = makeUnsettledWriteClient(65536)
+    const bounded = new RelayDispatcher(primary.write, primary.options)
+    try {
+      const clientId = bounded.activeClientIds()[0]
+      const settlements: SinkWriteSettlement[] = []
+      bounded.onRequest('workspace.get', async (_params, context) => {
+        context.onResponseSettled?.((result) => settlements.push(result))
+        return { name: 'workspace' }
+      })
+      for (let index = 0; index < DISPATCHER_CONTROL_QUEUE_MAX_FRAMES; index += 1) {
+        bounded.notifyClient(clientId, `control.${index}`)
+      }
+      const framesBefore = primary.frames.length
+
+      bounded.feed(encodeJsonRpcFrame({ jsonrpc: '2.0', id: 94, method: 'workspace.get' }, 1, 0))
+      await vi.advanceTimersByTimeAsync(0)
+
+      // Nothing goes out, but the connection lives and the caller's own request timeout settles it.
+      expect(primary.closes).toBe(0)
+      expect(primary.frames).toHaveLength(framesBefore)
+      expect(settlements).toEqual([
+        { ok: false, error: new Error('Relay response was not admitted') }
+      ])
+    } finally {
+      bounded.dispose()
+    }
+  })
 })
diff --git a/src/relay/dispatcher-rpc-routing.ts b/src/relay/dispatcher-rpc-routing.ts
index 164a375e1c6..a6e6c24190c 100644
--- a/src/relay/dispatcher-rpc-routing.ts
+++ b/src/relay/dispatcher-rpc-routing.ts
@@ -203,12 +203,17 @@ export abstract class RelayDispatcherRpcRouting extends RelayDispatcherFrameCode
     const frame = this.prepareFrame(msg)
     const lane =
       frame.frameBytes > DISPATCHER_CONTROL_QUEUE_MAX_BYTES ? 'legacy-response' : 'control'
-    const accepted = this.enqueuePreparedFrame(client, frame, lane, onSettled)
+    // Why 'reject': the control lane is a shared budget, so a reply that fits the 1 MiB ceiling alone
+    // still overflows it under concurrent traffic. Fatal admission would close the connection — every
+    // pane on the host — over one listing. A response is the droppable class of control frame: it
+    // carries an id, so the substitute below tells that one caller, and pty.replay/notifyControl keep
+    // the fatal default because a silent drop there desyncs the client with nothing to retry.
+    const accepted = this.enqueuePreparedFrame(client, frame, lane, onSettled, 'reject')
     if (accepted) {
       return true
     }
     // Why: an oversized response must fail its own request; closing would kill every pane on the host.
-    // A rejected first enqueue either left onSettled untouched or closed the client, so exactly one settlement happens.
+    // A rejected first enqueue leaves onSettled untouched, so exactly one settlement happens.
     return this.enqueuePreparedFrame(
       client,
       this.prepareFrame({
@@ -227,7 +232,10 @@ export abstract class RelayDispatcherRpcRouting extends RelayDispatcherFrameCode
           settlement.ok
             ? { ok: false, error: new Error(RESPONSE_OVER_CAPACITY_MESSAGE) }
             : settlement
-        )
+        ),
+      // Why 'reject': if even ~150 bytes will not fit, the caller's own request timeout settles it.
+      // Closing to report that one request failed is the outcome this whole path exists to avoid.
+      'reject'
     )
   }
 
diff --git a/src/relay/fs-handler-file-range.test.ts b/src/relay/fs-handler-file-range.test.ts
index 3ecca25ec4c..0d601b9b9fe 100644
--- a/src/relay/fs-handler-file-range.test.ts
+++ b/src/relay/fs-handler-file-range.test.ts
@@ -105,10 +105,10 @@ describe('readRelayFileRange', () => {
   // which the writer refuses once the producer queue is busy -- so an over-wide
   // cap fails with ResponseOverCapacity depending on unrelated load.
   //
-  // Fitting the lane once is not enough: the control queue is a SHARED budget
-  // and overflowing it closes the client, so a full-cap frame has to leave room
-  // for a second one. Anything wider lets two pipelined tail reads -- or one
-  // read racing an unrelated response -- kill the connection.
+  // Fitting the lane once is not enough: the control queue is a SHARED budget,
+  // so a full-cap frame has to leave room for a second one. Anything wider lets
+  // two pipelined tail reads -- or one read racing an unrelated response --
+  // fail as ResponseOverCapacity on load that has nothing to do with them.
   it('leaves control-queue headroom for a second full-cap window', async () => {
     const contents = Buffer.allocUnsafe(MAX_FILE_RANGE_READ_BYTES)
     for (let i = 0; i < contents.length; i++) {
diff --git a/src/shared/file-range-read.ts b/src/shared/file-range-read.ts
index fe695e9a2c9..61401f6d40f 100644
--- a/src/shared/file-range-read.ts
+++ b/src/shared/file-range-read.ts
@@ -8,10 +8,11 @@
  *  frames to ~350 KB, so a full-cap response takes the control lane instead.
  *
  *  The control lane is a shared budget, not a per-frame one: two full-cap
- *  responses fit alongside each other, and the third overflows -- which for a
- *  response is fatal, it closes the client. That is the same exposure every
- *  control-lane response already carries (`fs.readFile` frames any sub-1 MiB
- *  file the same way), and the two-deep headroom is pinned by a test. Widening
+ *  responses fit alongside each other, and the third is refused. That refusal
+ *  costs the one request -- `sendResponse` admits responses with
+ *  `controlOverflow: 'reject'` and substitutes a `ResponseOverCapacity` error
+ *  rather than closing the connection -- but it still turns on unrelated load,
+ *  so the two-deep headroom that keeps it rare is pinned by a test. Widening
  *  the cap spends that headroom, so bigger transfers belong on the ack-paced
  *  bulk lane (`fs.readFileStream`) rather than on a wider window here.
  *

From 7eb13c184c48d61d42f058eeddbe8e18cea0cba9 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 01:29:30 -0700
Subject: [PATCH 38/92] fix(ssh): keep remote PowerShell commands inside what
 sshd's cmd.exe accepts (#17947)

* fix(ssh): keep remote Windows commands inside cmd.exe's command-line limit

Windows OpenSSH runs every exec request through sshd's DefaultShell, which is
cmd.exe on a stock install, and cmd.exe refuses a line over 8191 characters with
exit 1 and a localized "The command line is too long". `-EncodedCommand` spends
2.67 characters per script character, so five commands on the first-connect path
were already over: the stale upload-stage recovery that opens a fresh install
(23,210), promote (20,646), cleanup (19,798), the install-lock steal (11,798)
and reserve (9,434). A Windows-to-Windows `ssh:connect` died on the first of
them before the relay was ever uploaded (#16126).

powerShellCommand now falls back to a gzip self-extracting bootstrap once the
inline form passes the budget - these scripts are repetitive enough that the
worst one lands at 6.5KB - and throws a message naming the limit if even that
cannot fit, rather than letting cmd.exe answer in the host's locale. Commands
that already fit are byte-identical.

The real-binary PowerShell suite in ssh-relay-upload-stage-commands.test.ts
exercises the bootstrap end to end, including `exit` and here-string semantics
through Invoke-Expression.

* fix(ssh): cite the real command-line budget and reuse the cmd.exe ceiling
---
 src/main/providers/windows-shell-args.ts      |  3 +-
 .../ssh-relay-sftp-namespace-install.test.ts  |  4 +-
 src/main/ssh/ssh-remote-commands.test.ts      |  4 +-
 src/main/ssh/ssh-remote-powershell.ts         | 50 ++++++++++++
 ...-remote-windows-command-line-limit.test.ts | 78 +++++++++++++++++++
 5 files changed, 134 insertions(+), 5 deletions(-)
 create mode 100644 src/main/ssh/ssh-remote-windows-command-line-limit.test.ts

diff --git a/src/main/providers/windows-shell-args.ts b/src/main/providers/windows-shell-args.ts
index 74e5af534f2..70fd22a06ad 100644
--- a/src/main/providers/windows-shell-args.ts
+++ b/src/main/providers/windows-shell-args.ts
@@ -14,7 +14,8 @@ import {
 } from '../powershell-osc133-bootstrap'
 import { quoteStartupArg } from '../../shared/tui-agent-startup-shell'
 
-const CMD_EXE_COMMAND_LINE_MAX_CHARS = 8191
+/** cmd.exe's own documented ceiling; callers that go through sshd budget below it. */
+export const CMD_EXE_COMMAND_LINE_MAX_CHARS = 8191
 const STARTUP_COMMAND_TEXT_MAX_CHARS = 6000
 const POWERSHELL_ENCODED_COMMAND_ARG_MAX_CHARS = 28_000
 const CMD_UTF8_SETUP_COMMAND = 'chcp 65001 > nul'
diff --git a/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts b/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
index 4c0874979b3..10ebce2dac4 100644
--- a/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
+++ b/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
@@ -85,6 +85,7 @@ import {
   RELAY_DEPLOY_TIMEOUT_MS
 } from './ssh-relay-deploy-timing'
 import { parseUnameToRelayPlatform } from './relay-protocol'
+import { decodeRemotePowerShellScript } from './ssh-remote-powershell'
 import {
   abandonInstall,
   finalizeInstall,
@@ -155,8 +156,7 @@ function issuedMarkerNames(): string[] {
 }
 
 function decodeCommand(command: string): string {
-  const match = command.match(/-EncodedCommand\s+([A-Za-z0-9+/=]+)/)
-  return match ? Buffer.from(match[1], 'base64').toString('utf16le') : command
+  return decodeRemotePowerShellScript(command)
 }
 
 function execCommands(): string[] {
diff --git a/src/main/ssh/ssh-remote-commands.test.ts b/src/main/ssh/ssh-remote-commands.test.ts
index b69715b23bf..363a87a645d 100644
--- a/src/main/ssh/ssh-remote-commands.test.ts
+++ b/src/main/ssh/ssh-remote-commands.test.ts
@@ -13,6 +13,7 @@ import {
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { describe, expect, it } from 'vitest'
+import { decodeRemotePowerShellScript } from './ssh-remote-powershell'
 import {
   lockAgeSecondsCommand,
   tryCreateInstallLockCommand,
@@ -63,8 +64,7 @@ const powerShell51Executable =
     : undefined
 
 function decodePowerShellCommand(command: string): string {
-  const match = command.match(/-EncodedCommand\s+([A-Za-z0-9+/=]+)/)
-  return match ? Buffer.from(match[1], 'base64').toString('utf16le') : ''
+  return command.includes('-EncodedCommand ') ? decodeRemotePowerShellScript(command) : ''
 }
 
 function runShellCommand(command: string): Promise<string> {
diff --git a/src/main/ssh/ssh-remote-powershell.ts b/src/main/ssh/ssh-remote-powershell.ts
index cbc3b4faddc..8c94fd3c483 100644
--- a/src/main/ssh/ssh-remote-powershell.ts
+++ b/src/main/ssh/ssh-remote-powershell.ts
@@ -1,9 +1,59 @@
+import { gunzipSync, gzipSync } from 'node:zlib'
 import { encodePowerShellCommand } from '../../shared/powershell-command-encoding'
+import { CMD_EXE_COMMAND_LINE_MAX_CHARS } from '../providers/windows-shell-args'
 export {
   quotePowerShellLiteral as powerShellLiteral,
   quotePowerShellNativeArgument as powerShellNativeArg
 } from '../../shared/powershell-native-argument'
 
+// Why cmd.exe and not the 32767 CreateProcess cap: Windows OpenSSH runs every exec request
+// through sshd's DefaultShell, cmd.exe on a stock install. Budget under cmd.exe's own ceiling
+// to leave room for the `/c` wrapper sshd adds before cmd.exe counts the line.
+const WINDOWS_REMOTE_COMMAND_LINE_BUDGET_CHARS = 8_000
+
 export function powerShellCommand(script: string): string {
+  const inline = encodedPowerShellCommand(script)
+  if (inline.length <= WINDOWS_REMOTE_COMMAND_LINE_BUDGET_CHARS) {
+    return inline
+  }
+  // Why: these scripts are repetitive enough that gzip beats the UTF-16LE tax by
+  // ~4x, which is the difference between a line cmd.exe runs and one it refuses.
+  const compressed = encodedPowerShellCommand(selfExtractingPowerShellScript(script))
+  if (compressed.length > WINDOWS_REMOTE_COMMAND_LINE_BUDGET_CHARS) {
+    throw new Error(
+      `Remote Windows command needs ${compressed.length} characters; Orca budgets ${WINDOWS_REMOTE_COMMAND_LINE_BUDGET_CHARS} for a line sshd hands to cmd.exe, which itself refuses more than ${CMD_EXE_COMMAND_LINE_MAX_CHARS}.`
+    )
+  }
+  return compressed
+}
+
+function encodedPowerShellCommand(script: string): string {
   return `powershell.exe -NoProfile -NonInteractive -ExecutionPolicy Bypass -EncodedCommand ${encodePowerShellCommand(script)}`
 }
+
+/** Orca-prefixed names so the payload can never shadow the bootstrap's own state. */
+function selfExtractingPowerShellScript(script: string): string {
+  const payload = gzipSync(Buffer.from(script, 'utf-8'), { level: 9 }).toString('base64')
+  return [
+    `$OrcaScriptBytes = [Convert]::FromBase64String('${payload}')`,
+    '$OrcaScriptMemory = New-Object System.IO.MemoryStream -ArgumentList (,$OrcaScriptBytes)',
+    '$OrcaScriptGzip = New-Object System.IO.Compression.GZipStream -ArgumentList $OrcaScriptMemory, ([System.IO.Compression.CompressionMode]::Decompress)',
+    '$OrcaScriptReader = New-Object System.IO.StreamReader -ArgumentList $OrcaScriptGzip, ([System.Text.Encoding]::UTF8)',
+    '$OrcaScriptText = $OrcaScriptReader.ReadToEnd()',
+    '$OrcaScriptReader.Dispose()',
+    'Invoke-Expression $OrcaScriptText'
+  ].join('\n')
+}
+
+/** Inverse of `powerShellCommand`: the script the host will actually run. */
+export function decodeRemotePowerShellScript(command: string): string {
+  const encoded = command.match(/-EncodedCommand\s+([A-Za-z0-9+/=]+)/u)?.[1]
+  if (!encoded) {
+    return command
+  }
+  const script = Buffer.from(encoded, 'base64').toString('utf16le')
+  const payload = script.match(
+    /^\$OrcaScriptBytes = \[Convert\]::FromBase64String\('([A-Za-z0-9+/=]+)'\)/u
+  )?.[1]
+  return payload ? gunzipSync(Buffer.from(payload, 'base64')).toString('utf-8') : script
+}
diff --git a/src/main/ssh/ssh-remote-windows-command-line-limit.test.ts b/src/main/ssh/ssh-remote-windows-command-line-limit.test.ts
new file mode 100644
index 00000000000..c104078238e
--- /dev/null
+++ b/src/main/ssh/ssh-remote-windows-command-line-limit.test.ts
@@ -0,0 +1,78 @@
+import { gunzipSync } from 'node:zlib'
+import { describe, expect, it } from 'vitest'
+import { CMD_EXE_COMMAND_LINE_MAX_CHARS } from '../providers/windows-shell-args'
+import { getRemoteHostPlatform } from './ssh-remote-platform'
+import { tryStealInstallLockCommand } from './ssh-relay-install-lock-commands'
+import { decodeRemotePowerShellScript, powerShellCommand } from './ssh-remote-powershell'
+import {
+  cleanupOwnedRelayUploadStageCommand,
+  promoteOwnedRelayUploadStageCommand,
+  recoverOneStaleRelayUploadStageCommand,
+  reserveRelayUploadStageCommand,
+  type RelayUploadStageSlot
+} from './ssh-relay-upload-stage-commands'
+
+const windows = getRemoteHostPlatform('win32-x64')
+const owner = '.sftp-namespace-123e4567e89b12d3a456426614174000'
+const pool = 'C:\\Users\\orca\\.orca-remote\\.upload-stages'
+const stage: RelayUploadStageSlot = {
+  poolDir: pool,
+  slotName: 'slot-0',
+  slotDir: `${pool}\\slot-0`,
+  claimDir: `${pool}\\claim-0`,
+  deleteDir: `${pool}\\delete-0`
+}
+
+// Why: sshd runs an exec request through its DefaultShell, which is cmd.exe on a
+// stock Windows OpenSSH install, and cmd.exe refuses a longer line with exit 1
+// and a localized "The command line is too long" — the whole connect dies there.
+describe('Windows remote command line limit', () => {
+  it.each([
+    ['recover stale upload stage', recoverOneStaleRelayUploadStageCommand(windows, pool)],
+    ['reserve upload stage', reserveRelayUploadStageCommand(windows, pool, owner)],
+    [
+      'promote upload stage',
+      promoteOwnedRelayUploadStageCommand(windows, stage, owner, 'C:\\Users\\orca\\.orca-remote')
+    ],
+    ['cleanup upload stage', cleanupOwnedRelayUploadStageCommand(windows, stage, owner)],
+    [
+      'steal stale install lock',
+      tryStealInstallLockCommand(windows, 'C:\\Users\\orca\\.orca-remote\\relay', 1_200)
+    ]
+  ])('keeps the %s command inside what sshd\u2019s cmd.exe accepts', (_name, command) => {
+    expect(command.length).toBeLessThanOrEqual(CMD_EXE_COMMAND_LINE_MAX_CHARS)
+  })
+
+  it('leaves a command that already fits byte-identical', () => {
+    const script = "Write-Output ([Environment]::GetFolderPath('UserProfile'))"
+    expect(decodeRemotePowerShellScript(powerShellCommand(script))).toBe(script)
+  })
+
+  it('carries an oversized script through gzip without altering it', () => {
+    const script = Array.from(
+      { length: 200 },
+      (_unused, index) => `Write-Output ${index}; $slot = 'C:\\Users\\orca\\stage-${index}'`
+    ).join('\n')
+    const command = powerShellCommand(script)
+    expect(command.length).toBeLessThanOrEqual(CMD_EXE_COMMAND_LINE_MAX_CHARS)
+    expect(decodeRemotePowerShellScript(command)).toBe(script)
+    const bootstrap = Buffer.from(
+      command.match(/-EncodedCommand\s+([A-Za-z0-9+/=]+)$/u)?.[1] ?? '',
+      'base64'
+    ).toString('utf16le')
+    const payload = bootstrap.match(/FromBase64String\('([A-Za-z0-9+/=]+)'\)/u)?.[1] ?? ''
+    expect(gunzipSync(Buffer.from(payload, 'base64')).toString('utf-8')).toBe(script)
+    expect(bootstrap).toContain('Invoke-Expression $OrcaScriptText')
+  })
+
+  it('refuses a script no encoding can fit instead of letting cmd.exe reject it', () => {
+    let seed = 12345
+    const incompressible = Array.from({ length: 60_000 }, () => {
+      seed = (seed * 1103515245 + 12345) % 2147483648
+      return String.fromCharCode(97 + (seed % 26))
+    }).join('')
+    expect(() => powerShellCommand(`Write-Output '${incompressible}'`)).toThrow(
+      /Orca budgets 8000 for a line sshd hands to cmd\.exe/u
+    )
+  })
+})

From 5dc1195a47b6499ff1e099b6f1a5840e3e66dbd3 Mon Sep 17 00:00:00 2001
From: Brennan Benson <79079362+brennanb2025@users.noreply.github.com>
Date: Wed, 2 Sep 2026 01:34:58 -0700
Subject: [PATCH 39/92] fix(native-chat): keep disabled CLI models out of the
 Claude picker (#18055)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(native-chat): keep disabled CLI models out of the Claude picker

The Claude CLI advertises models it cannot run yet as disabled placeholder
rows. On 2.1.237 `list_models` returns a sixth row alongside the four real
models:

  {"value":"cc-update-required-1","displayName":"Fable 5.1 (disabled)",
   "description":"Update to 2.1.255+ to use Fable 5.1","disabled":true}

`toListedModel` never read `disabled`, and for Claude the discovered list
replaces the seed catalog verbatim, so the picker rendered that row as a
selectable model and `/model cc-update-required-1` went to the CLI. It was
also adoptable as a launch default, putting the sentinel behind `--model`
on spawn. Drop disabled rows at the parse choke point, which both the
native-chat picker and commit-message model discovery share.

The two adjacent fixes are the same version-pinning bug the placeholder
announces. `compactTerminalText` strips only whitespace, so a point release
keeps its dot and the pinned consent literals (`fable5uses…`,
`switchtofable5?`) stop matching a "Fable 5.1" prompt — the switch would
degrade to `unknown` instead of `interaction-required`. Likewise the scoped
weekly usage window matched `display_name === 'fable'` exactly, so it would
disappear once the scope is named "Fable 5.1".

Claude-Session: https://claude.ai/code/session_01SJy4XGrdre6YaU1wYNKak4

* fix(native-chat): make the Fable consent match version-optional

Probing a 2.1.258 CLI shows the shipped Fable 5.1 row carries displayName
"Fable" with the version only in the description:

  {"value":"claude-fable-5-1[1m]","resolvedModel":"claude-fable-5-1",
   "displayName":"Fable","description":"Fable 5.1 · Most capable for …"}

So the consent prompt may name the model with no digits at all. Requiring
a version would have missed that, the same way the old pinned literal
missed "Fable 5.1". Accept both.

Claude-Session: https://claude.ai/code/session_01SJy4XGrdre6YaU1wYNKak4

---------

Co-authored-by: Merge Sim <sim@local>
Co-authored-by: Neil <4138956+nwparker@users.noreply.github.com>
---
 .../claude-fetcher-fable-usage.test.ts        | 45 +++++++++++++++++++
 .../rate-limits/claude-oauth-usage-request.ts |  6 ++-
 .../claude-model-switch-confirmation.test.ts  | 42 +++++++++++++++++
 .../claude-model-switch-confirmation.ts       | 11 ++++-
 src/shared/claude-model-list-probe.test.ts    | 26 +++++++++++
 src/shared/claude-model-list-probe.ts         |  6 ++-
 6 files changed, 132 insertions(+), 4 deletions(-)

diff --git a/src/main/rate-limits/claude-fetcher-fable-usage.test.ts b/src/main/rate-limits/claude-fetcher-fable-usage.test.ts
index 2a84cc4f2af..50617d95bb4 100644
--- a/src/main/rate-limits/claude-fetcher-fable-usage.test.ts
+++ b/src/main/rate-limits/claude-fetcher-fable-usage.test.ts
@@ -144,6 +144,51 @@ describe('fetchClaudeRateLimits', () => {
     expect(fetchViaPty).not.toHaveBeenCalled()
   })
 
+  it('maps a scoped Fable window whose display name carries a point release', async () => {
+    const configDir = '/Users/test/.claude'
+    const authPreparation: ClaudeRuntimeAuthPreparation = {
+      configDir,
+      envPatch: { CLAUDE_CONFIG_DIR: configDir },
+      stripAuthEnv: false,
+      provenance: 'managed:account-1'
+    }
+    vi.mocked(readActiveClaudeKeychainCredentialsStrict).mockResolvedValueOnce(
+      JSON.stringify({ claudeAiOauth: { accessToken: 'oauth-token' } })
+    )
+    netFetchMock.mockResolvedValueOnce(
+      new Response(
+        JSON.stringify({
+          five_hour: { utilization: 36 },
+          seven_day: { utilization: 73 },
+          // Discriminating: a passing scope match must beat this fallback.
+          fable_weekly: { utilization: 12 },
+          limits: [
+            {
+              kind: 'weekly_scoped',
+              percent: 64,
+              resets_at: '2026-07-17T20:00:00.099908+00:00',
+              is_active: true,
+              scope: { model: { display_name: 'Fable 5.1' } }
+            }
+          ]
+        }),
+        { status: 200 }
+      )
+    )
+
+    await expect(
+      fetchClaudeRateLimits({ authPreparation, allowUsagePanelSupplement: true })
+    ).resolves.toMatchObject({
+      provider: 'claude',
+      status: 'ok',
+      fableWeekly: {
+        usedPercent: 64,
+        resetsAt: Date.parse('2026-07-17T20:00:00.099908+00:00')
+      }
+    })
+    expect(fetchViaPty).not.toHaveBeenCalled()
+  })
+
   it('surfaces inactive scoped Fable usage over the legacy OAuth fallback', async () => {
     const configDir = '/Users/test/.claude'
     const authPreparation: ClaudeRuntimeAuthPreparation = {
diff --git a/src/main/rate-limits/claude-oauth-usage-request.ts b/src/main/rate-limits/claude-oauth-usage-request.ts
index 9565a064514..e29bef5f48e 100644
--- a/src/main/rate-limits/claude-oauth-usage-request.ts
+++ b/src/main/rate-limits/claude-oauth-usage-request.ts
@@ -32,13 +32,17 @@ async function ensureProxyFromEnvironment(): Promise<void> {
   }).catch(() => {})
 }
 
+// Why: the scope name carries the shipped version once a point release exists
+// ("Fable 5.1"), so exact equality would drop the window.
+const FABLE_SCOPE_RE = /^fable\b/
+
 function mapFableWeeklyWindow(data: OAuthUsageResponse): RateLimitWindow | null {
   const scoped = Array.isArray(data.limits)
     ? data.limits.find(
         (limit) =>
           limit?.kind === 'weekly_scoped' &&
           Number.isFinite(limit.percent) &&
-          limit.scope?.model?.display_name?.trim().toLowerCase() === 'fable'
+          FABLE_SCOPE_RE.test(limit.scope?.model?.display_name?.trim().toLowerCase() ?? '')
       )
     : undefined
   return (
diff --git a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.test.ts b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.test.ts
index ed4d9f725b0..c0fb5d3aa3d 100644
--- a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.test.ts
+++ b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.test.ts
@@ -159,6 +159,48 @@ describe('Claude model switch confirmation detection', () => {
     await expect(observer.result).resolves.toBe('interaction-required')
   })
 
+  it('requests interaction for a Fable point-release consent prompt', async () => {
+    const dataObserver = { current: (_data: string): void => {} }
+    const observer = createClaudeModelSwitchConfirmationObserver({
+      ptyId: 'pty-1',
+      settings: {},
+      expectedModelLabel: 'Fable 5.1',
+      subscribeToData: (watcher) => {
+        dataObserver.current = watcher
+        return vi.fn(() => {})
+      },
+      timeoutMs: 100
+    })
+
+    await observer.ready
+    observer.arm()
+    // Only the versioned consent line: the generic "pick Fable from /model"
+    // sentence must not be what carries this case.
+    dataObserver.current('Fable 5.1 uses usage credits and needs a one-time consent')
+
+    await expect(observer.result).resolves.toBe('interaction-required')
+  })
+
+  it('requests interaction for a versioned Fable switch prompt', async () => {
+    const dataObserver = { current: (_data: string): void => {} }
+    const observer = createClaudeModelSwitchConfirmationObserver({
+      ptyId: 'pty-1',
+      settings: {},
+      expectedModelLabel: 'Fable 5.1',
+      subscribeToData: (watcher) => {
+        dataObserver.current = watcher
+        return vi.fn(() => {})
+      },
+      timeoutMs: 100
+    })
+
+    await observer.ready
+    observer.arm()
+    dataObserver.current('Switch to \u001b[1mFable 5.1\u001b[0m? This model uses usage credits.')
+
+    await expect(observer.result).resolves.toBe('interaction-required')
+  })
+
   it('reports unknown when the PTY observer cannot be established', async () => {
     const observer = createClaudeModelSwitchConfirmationObserver({
       ptyId: 'pty-1',
diff --git a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts
index f9664bacfa5..e97daf9cd23 100644
--- a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts
+++ b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts
@@ -62,12 +62,19 @@ function hasClaudeModelSwitchRejection(buffer: string): boolean {
   return compactTerminalText(buffer).includes('keptmodelas')
 }
 
+// Why: compactTerminalText only strips whitespace, so a point release keeps its
+// dot ("fable5.1uses..."). The version is optional because the CLI's own label
+// for the newest Fable carries no number at all.
+const FABLE_VERSION = String.raw`fable(?:\d+(?:\.\d+)*)?`
+const FABLE_CONSENT_RE = new RegExp(`${FABLE_VERSION}usesusagecreditsandneedsaone-timeconsent`)
+const FABLE_SWITCH_PROMPT_RE = new RegExp(`switchto${FABLE_VERSION}\\?`)
+
 function hasClaudeModelSwitchInteraction(buffer: string): boolean {
   const text = compactTerminalText(buffer)
   return (
-    text.includes('fable5usesusagecreditsandneedsaone-timeconsent') ||
+    FABLE_CONSENT_RE.test(text) ||
     text.includes('pickfablefrom/modelinaninteractivesessiontosetitup') ||
-    (text.includes('switchtofable5?') && text.includes('usagecredits'))
+    (FABLE_SWITCH_PROMPT_RE.test(text) && text.includes('usagecredits'))
   )
 }
 
diff --git a/src/shared/claude-model-list-probe.test.ts b/src/shared/claude-model-list-probe.test.ts
index 86305b45549..056b41e0a98 100644
--- a/src/shared/claude-model-list-probe.test.ts
+++ b/src/shared/claude-model-list-probe.test.ts
@@ -103,6 +103,32 @@ describe('parseClaudeModelList', () => {
     expect(parseClaudeModelList(hostile)).toEqual([])
   })
 
+  it('drops the disabled placeholder row the CLI advertises for a model it cannot run', () => {
+    // Captured from `claude` 2.1.237: Fable 5.1 is announced but gated on 2.1.255+.
+    const parsed = parseClaudeModelList(
+      controlResponseLine([
+        { value: 'sonnet', displayName: 'Sonnet' },
+        {
+          value: 'cc-update-required-1',
+          resolvedModel: 'cc-update-required-1',
+          displayName: 'Fable 5.1 (disabled)',
+          description: 'Update to 2.1.255+ to use Fable 5.1',
+          supportsEffort: true,
+          supportedEffortLevels: ['low', 'medium', 'high', 'xhigh', 'max'],
+          disabled: true
+        }
+      ])
+    )
+    expect(parsed.map(({ id }) => id)).toEqual(['sonnet'])
+  })
+
+  it('keeps a model that reports disabled as anything other than true', () => {
+    const parsed = parseClaudeModelList(
+      controlResponseLine([{ value: 'fable', displayName: 'Fable', disabled: false }])
+    )
+    expect(parsed.map(({ id }) => id)).toEqual(['fable'])
+  })
+
   it('ignores effort levels when the model does not declare effort support', () => {
     const parsed = parseClaudeModelList(
       controlResponseLine([
diff --git a/src/shared/claude-model-list-probe.ts b/src/shared/claude-model-list-probe.ts
index fa953d3da16..9be7f5c3a12 100644
--- a/src/shared/claude-model-list-probe.ts
+++ b/src/shared/claude-model-list-probe.ts
@@ -53,6 +53,7 @@ type RawListedModel = {
   supportsEffort?: unknown
   supportedEffortLevels?: unknown
   supportsFastMode?: unknown
+  disabled?: unknown
 }
 
 function toListedModel(value: unknown): ClaudeListedModel | null {
@@ -61,7 +62,10 @@ function toListedModel(value: unknown): ClaudeListedModel | null {
   }
   const raw = value as RawListedModel
   const id = typeof raw.value === 'string' ? raw.value.trim() : ''
-  if (!id) {
+  // Why: the CLI advertises models it cannot run yet as disabled placeholder
+  // rows ("Fable 5.1 (disabled)", value `cc-update-required-1`); selecting one
+  // sends that sentinel straight to `--model`.
+  if (!id || raw.disabled === true) {
     return null
   }
   const label = typeof raw.displayName === 'string' && raw.displayName.trim() ? raw.displayName : id

From 4bc20cb842b784f9202d1095575b7bc92b406a75 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 01:39:48 -0700
Subject: [PATCH 40/92] fix(wsl): name an explicit Windows cwd for wsl.exe
 spawns (#17834)

* fix(wsl): name an explicit Windows cwd for wsl.exe spawns

Removing the worktree Orca was launched from broke every wsl.exe spawn for
the rest of the session. The WSL command builders passed `cwd: undefined`
meaning "the directory is inside the command" -- but CreateProcessW reads
NULL as "inherit the parent's", and the parent's was a \\wsl.localhost path
Linux had just deleted.

Fixes #16463

* fix(wsl): name the spawn directory at the six remaining wsl.exe sites

The first commit fixed the WSL command builders. Six spawn sites were left
inheriting the process cwd, which is the same deletable `\\wsl.localhost`
worktree: `wsl-availability` (both probes), the WSL filesystem watcher, the
agent-hook relay launch, the UNC delete, and the local worktree filesystem.

`wsl-availability` is the one that matters most, and it turns the bug into a
latching false negative. `isRetryableWslProbeFailure` returns false for ENOENT,
so a spawn that failed only because the inherited cwd was gone is cached as
"WSL is not installed" on the 10-minute definitive TTL with exponential
backoff up to 30 minutes. Git keeps working and Orca reports WSL unavailable --
worse than the bug being fixed.

ENOENT stays non-retryable. It is answer-shaped for the reason it is meant to
be -- wsl.exe is not on PATH -- and naming the directory is what removes the
one cause that was not. Making it retryable would instead re-probe every
non-WSL Windows machine on the short window, and would leave the false ENOENT
in place for the other five sites, which have no cache to correct.

Three of these are also on the `runWslProcess` W3 migration allowlist; this is
the interim until they move, and matches what #17837 does inside the runner.
---
 config/tsconfig.tc.web.json                   |  1 +
 .../agent-hooks/wsl-hook-relay-launch.test.ts | 25 ++++++
 src/main/agent-hooks/wsl-hook-relay-launch.ts |  7 +-
 src/main/cli/wsl-cli-installer.test.ts        |  8 +-
 src/main/cli/wsl-cli-scripts.ts               | 10 ++-
 .../command-runner/wsl-command-resolution.ts  | 14 +--
 src/main/git/runner-command-exec.test.ts      | 12 ++-
 src/main/git/runner-wsl-gh-fallback.test.ts   | 17 +++-
 ...tlab-known-host-probe-wsl-fallback.test.ts |  6 +-
 src/main/ipc/filesystem-watcher-wsl.test.ts   |  6 +-
 src/main/ipc/filesystem-watcher-wsl.ts        |  7 +-
 src/main/local-worktree-filesystem.test.ts    |  6 +-
 src/main/local-worktree-filesystem.ts         |  5 ++
 ...e-text-generation-local-subprocess.test.ts |  6 +-
 ...ge-text-generation-model-discovery.test.ts |  6 +-
 src/main/wsl-availability.ts                  | 18 +++-
 src/main/wsl-interop-spawn-directory.test.ts  | 90 +++++++++++++++++++
 src/main/wsl-interop-spawn-directory.ts       | 70 +++++++++++++++
 src/main/wsl-unc-delete.test.ts               |  5 +-
 src/main/wsl-unc-delete.ts                    |  5 +-
 src/main/wsl.test.ts                          | 34 +++++++
 src/main/wsl.ts                               | 21 +++--
 .../wsl-probe-failure-swallow-allowlist.txt   |  6 ++
 23 files changed, 357 insertions(+), 28 deletions(-)
 create mode 100644 src/main/agent-hooks/wsl-hook-relay-launch.test.ts
 create mode 100644 src/main/wsl-interop-spawn-directory.test.ts
 create mode 100644 src/main/wsl-interop-spawn-directory.ts

diff --git a/config/tsconfig.tc.web.json b/config/tsconfig.tc.web.json
index afe5e83024c..56253527c69 100644
--- a/config/tsconfig.tc.web.json
+++ b/config/tsconfig.tc.web.json
@@ -31,6 +31,7 @@
     "../src/main/wsl-distro-retry.ts",
     "../src/main/wsl-running-distro-cache.ts",
     "../src/main/wsl.ts",
+    "../src/main/wsl-interop-spawn-directory.ts",
     "../src/main/persistence/applying-settings/ui-state-read.ts",
     "../src/main/persistence/applying-settings/ui-state-update.ts",
     "../src/main/persistence/applying-settings/ui-selection-normalization.ts",
diff --git a/src/main/agent-hooks/wsl-hook-relay-launch.test.ts b/src/main/agent-hooks/wsl-hook-relay-launch.test.ts
new file mode 100644
index 00000000000..6ed9cf2625a
--- /dev/null
+++ b/src/main/agent-hooks/wsl-hook-relay-launch.test.ts
@@ -0,0 +1,25 @@
+import { describe, expect, it, vi } from 'vitest'
+
+const { spawnMock } = vi.hoisted(() => ({
+  spawnMock: vi.fn((..._args: unknown[]) => ({ pid: 1 }))
+}))
+
+vi.mock('node:child_process', () => ({ spawn: spawnMock }))
+
+import { spawnWslRelayProcess } from './wsl-hook-relay-launch'
+
+describe('spawnWslRelayProcess', () => {
+  it('names an explicit Windows directory rather than inheriting one', () => {
+    spawnWslRelayProcess('Ubuntu', {}, '1.2.3')
+
+    // Why (#16463): the guest path is inside the `sh -c` command, so the Windows
+    // cwd only decides whether CreateProcessW succeeds. Omitting it inherits
+    // Orca's own — a `\\wsl.localhost` worktree the user can delete, after which
+    // every relay launch fails `spawn wsl.exe ENOENT` for the rest of the session.
+    expect(spawnMock).toHaveBeenCalledWith(
+      'wsl.exe',
+      expect.arrayContaining(['-d', 'Ubuntu', '--exec']),
+      expect.objectContaining({ cwd: expect.any(String) })
+    )
+  })
+})
diff --git a/src/main/agent-hooks/wsl-hook-relay-launch.ts b/src/main/agent-hooks/wsl-hook-relay-launch.ts
index 9f32de10bd5..ae1ea9c20d7 100644
--- a/src/main/agent-hooks/wsl-hook-relay-launch.ts
+++ b/src/main/agent-hooks/wsl-hook-relay-launch.ts
@@ -16,6 +16,7 @@ import {
 } from './wsl-hook-relay-sentinel'
 import { addOrcaWslInteropEnv } from '../pty/wsl-orca-env'
 import { runWslProcess } from '../wsl/wsl-runner'
+import { resolveWslInteropSpawnCwd } from '../wsl-interop-spawn-directory'
 import { listRunningWslDistrosAsync } from '../wsl'
 import {
   WSL_HOOK_RELAY_BUNDLE_NAME,
@@ -137,7 +138,11 @@ export function spawnWslRelayProcess(
   return spawn('wsl.exe', ['-d', distro, '--exec', 'sh', '-c', command], {
     env,
     stdio: ['pipe', 'pipe', 'pipe'],
-    windowsHide: true
+    windowsHide: true,
+    // Why explicit (#16463): the guest path is in `command`, so the Windows cwd
+    // only decides whether CreateProcessW succeeds -- and an inherited one is a
+    // worktree the user can delete, which kills every later relay launch.
+    cwd: resolveWslInteropSpawnCwd()
   })
 }
 
diff --git a/src/main/cli/wsl-cli-installer.test.ts b/src/main/cli/wsl-cli-installer.test.ts
index 717232509ba..a728e0acafe 100644
--- a/src/main/cli/wsl-cli-installer.test.ts
+++ b/src/main/cli/wsl-cli-installer.test.ts
@@ -340,7 +340,13 @@ describe('WslCliInstaller', () => {
     expect(bridge).toContain('$ForwardArgs = @($args[$ForwardArgStart..($args.Count - 1)])')
     expect(bridge).toContain('if ([string]::IsNullOrEmpty($WslCwd))')
     expect(bridge).toContain('$env:ORCA_CLI_CWD = $WslCwd')
-    expect(bridge).toContain('Push-Location -LiteralPath (Split-Path -Parent $OrcaLauncher)')
+    expect(bridge).toContain('$LauncherDirectory = Split-Path -Parent $OrcaLauncher')
+    expect(bridge).toContain('Push-Location -LiteralPath $LauncherDirectory')
+    // Why (#16463): Push-Location moves only the PowerShell provider location.
+    // Without an explicit WorkingDirectory the started app inherits the caller's
+    // Win32 cwd — the user's worktree on \\wsl.localhost — and every wsl.exe
+    // spawn it makes dies with ENOENT once that worktree is removed.
+    expect(bridge).toContain('$StartInfo.WorkingDirectory = $LauncherDirectory')
     expect(bridge).toContain('function ConvertTo-NativeCommandLineArgument')
     expect(bridge).toContain("[void]$Quoted.Append([char]'\\', $BackslashCount * 2 + 1)")
     expect(bridge).toContain('$StartInfo.UseShellExecute = $false')
diff --git a/src/main/cli/wsl-cli-scripts.ts b/src/main/cli/wsl-cli-scripts.ts
index 8eda355cc93..8875a81d18e 100644
--- a/src/main/cli/wsl-cli-scripts.ts
+++ b/src/main/cli/wsl-cli-scripts.ts
@@ -88,7 +88,8 @@ try {
   } else {
     $env:ORCA_CLI_CWD = $WslCwd
   }
-  Push-Location -LiteralPath (Split-Path -Parent $OrcaLauncher)
+  $LauncherDirectory = Split-Path -Parent $OrcaLauncher
+  Push-Location -LiteralPath $LauncherDirectory
   # Why: Windows PowerShell 5.1 cannot losslessly splat strings to native argv.
   $StartInfo = [System.Diagnostics.ProcessStartInfo]::new()
   $StartInfo.FileName = $OrcaLauncher
@@ -96,6 +97,13 @@ try {
     ConvertTo-NativeCommandLineArgument $_
   }) -join ' ')
   $StartInfo.UseShellExecute = $false
+  # Why (#16463): Push-Location moves the PowerShell provider location, not the
+  # Win32 current directory, and an empty WorkingDirectory with UseShellExecute
+  # disabled means "inherit the caller's". Launched from a WSL shell that is the
+  # user's worktree on the 9P share, so without this the app stands in a
+  # directory Linux can delete -- after which every CreateProcessW it makes
+  # fails ERROR_PATH_NOT_FOUND, reported as: spawn wsl.exe ENOENT.
+  $StartInfo.WorkingDirectory = $LauncherDirectory
   $Process = [System.Diagnostics.Process]::Start($StartInfo)
   if ($null -eq $Process) {
     throw 'Unable to start the Orca Windows CLI launcher.'
diff --git a/src/main/git/command-runner/wsl-command-resolution.ts b/src/main/git/command-runner/wsl-command-resolution.ts
index a70c0ca2bc9..559e1821bd1 100644
--- a/src/main/git/command-runner/wsl-command-resolution.ts
+++ b/src/main/git/command-runner/wsl-command-resolution.ts
@@ -13,6 +13,7 @@ import {
   type WslProcessGroupTermination
 } from '../wsl-process-group-termination'
 import { translateArgForWsl, translateArgsForWsl } from './wsl-path-translation'
+import { resolveWslInteropSpawnCwd } from '../../wsl-interop-spawn-directory'
 
 // Env-assignment prefix for WSL-routed git, where spawn env can't cross the wsl.exe boundary; values are shell-safe unquoted.
 const GIT_OUTPUT_LOCALE_SHELL_PREFIX = Object.entries(UNTRANSLATED_GIT_OUTPUT_ENV)
@@ -111,7 +112,7 @@ export function resolveCommand(
           ...(linuxCwd ? ['-C', linuxCwd] : []),
           ...translatedArgs
         ],
-        cwd: undefined,
+        cwd: resolveWslInteropSpawnCwd(),
         wsl,
         wslMode: 'direct-git'
       },
@@ -130,7 +131,7 @@ export function resolveCommand(
         {
           binary: 'wsl.exe',
           args: buildWslExecArgs(wsl.distro, ['sh', '-lc', captured.command]),
-          cwd: undefined,
+          cwd: resolveWslInteropSpawnCwd(),
           wsl,
           wslMode: 'login-shell',
           captured
@@ -142,7 +143,7 @@ export function resolveCommand(
       {
         binary: 'wsl.exe',
         args: buildWslExecArgs(wsl.distro, ['sh', '-lc', buildWslLoginShellCommand(shellCmd)]),
-        cwd: undefined,
+        cwd: resolveWslInteropSpawnCwd(),
         wsl,
         wslMode: 'login-shell'
       },
@@ -154,8 +155,11 @@ export function resolveCommand(
     {
       binary: 'wsl.exe',
       args: buildWslExecArgs(wsl.distro, ['bash', '-c', shellCmd]),
-      // Why: the `cd` inside bash -c handles the directory; a UNC cwd on the Node process is redundant and can break Node internals.
-      cwd: undefined,
+      // Why: the `cd` inside bash -c handles the Linux directory. This names an
+      // explicit Windows directory anyway, because `undefined` makes
+      // CreateProcessW inherit the parent's — which is a deletable WSL UNC path
+      // when Orca was launched from a worktree (#16463).
+      cwd: resolveWslInteropSpawnCwd(),
       wsl,
       wslMode: 'non-login-shell'
     },
diff --git a/src/main/git/runner-command-exec.test.ts b/src/main/git/runner-command-exec.test.ts
index 1974c4e2384..27d7a72c747 100644
--- a/src/main/git/runner-command-exec.test.ts
+++ b/src/main/git/runner-command-exec.test.ts
@@ -626,7 +626,11 @@ describe('runner execFile timeout handling', () => {
       expect(execFileMock).toHaveBeenCalledWith(
         'wsl.exe',
         ['-d', 'Ubuntu', '--exec', 'sh', '-lc', expect.any(String)],
-        expect.objectContaining({ cwd: undefined }),
+        // Why a concrete directory (#16463): `undefined` makes CreateProcessW inherit
+        // Orca's own cwd, a deletable WSL UNC path when it was launched from a
+        // worktree. The Linux directory still rides inside the command (/mnt/c/repo,
+        // asserted below).
+        expect.objectContaining({ cwd: expect.any(String) }),
         expect.any(Function)
       )
       // A read also warms the direct-git environment probe in the background, so
@@ -659,7 +663,11 @@ describe('runner execFile timeout handling', () => {
       expect(execFileMock).toHaveBeenCalledWith(
         'wsl.exe',
         ['-d', 'Ubuntu', '--exec', 'bash', '-c', expect.any(String)],
-        expect.objectContaining({ cwd: undefined }),
+        // Why a concrete directory (#16463): `undefined` makes CreateProcessW inherit
+        // Orca's own cwd, a deletable WSL UNC path when it was launched from a
+        // worktree. The Linux directory still rides inside the command (/mnt/c/repo,
+        // asserted below).
+        expect.objectContaining({ cwd: expect.any(String) }),
         expect.any(Function)
       )
       const shellCommand = execFileMock.mock.calls[0]?.[1]?.[5] as string
diff --git a/src/main/git/runner-wsl-gh-fallback.test.ts b/src/main/git/runner-wsl-gh-fallback.test.ts
index 57dd86ba26c..5f933c60620 100644
--- a/src/main/git/runner-wsl-gh-fallback.test.ts
+++ b/src/main/git/runner-wsl-gh-fallback.test.ts
@@ -99,7 +99,10 @@ describe('ghExecFileAsync WSL fallback', () => {
         '-c',
         "cd '/home/jinwoo/stably/noqa' && 'gh' 'issue' 'list' '--repo' 'stablyhq/noqa' '--json' 'number,title'"
       ],
-      expect.objectContaining({ cwd: undefined }),
+      // Why a concrete directory (#16463): `undefined` makes CreateProcessW inherit
+      // Orca's own cwd, a deletable WSL UNC path when it was launched from a
+      // worktree. The Linux directory still rides inside the command.
+      expect.objectContaining({ cwd: expect.any(String) }),
       expect.any(Function)
     )
     expect(execFileMock).toHaveBeenNthCalledWith(
@@ -382,7 +385,11 @@ describe('ghExecFileAsync WSL fallback', () => {
       2,
       'wsl.exe',
       ['-d', 'Ubuntu', '--exec', 'bash', '-c', "'gh' 'api' 'rate_limit'"],
-      expect.objectContaining({ cwd: undefined }),
+      // Why a concrete directory (#16463): `undefined` makes CreateProcessW inherit
+      // Orca's own cwd, a deletable WSL UNC path when it was launched from a
+      // worktree. This global call has no repo directory at all, so nothing about
+      // where it runs changes.
+      expect.objectContaining({ cwd: expect.any(String) }),
       expect.any(Function)
     )
   })
@@ -501,7 +508,11 @@ describe('ghExecFileAsync WSL fallback', () => {
       2,
       'wsl.exe',
       ['-d', 'Ubuntu', '--exec', 'bash', '-c', "'glab' 'api' 'projects'"],
-      expect.objectContaining({ cwd: undefined }),
+      // Why a concrete directory (#16463): `undefined` makes CreateProcessW inherit
+      // Orca's own cwd, a deletable WSL UNC path when it was launched from a
+      // worktree. This global call has no repo directory at all, so nothing about
+      // where it runs changes.
+      expect.objectContaining({ cwd: expect.any(String) }),
       expect.any(Function)
     )
   })
diff --git a/src/main/gitlab/gitlab-known-host-probe-wsl-fallback.test.ts b/src/main/gitlab/gitlab-known-host-probe-wsl-fallback.test.ts
index a3fe62c9063..40da88f0c91 100644
--- a/src/main/gitlab/gitlab-known-host-probe-wsl-fallback.test.ts
+++ b/src/main/gitlab/gitlab-known-host-probe-wsl-fallback.test.ts
@@ -76,7 +76,11 @@ describe('glab known-hosts probe on Windows', () => {
     expect(execFileMock).toHaveBeenCalledWith(
       'wsl.exe',
       ['-d', 'Ubuntu', '--exec', 'bash', '-c', "'glab' 'auth' 'status'"],
-      expect.objectContaining({ cwd: undefined }),
+      // Why a concrete directory (#16463): `undefined` makes CreateProcessW inherit
+      // Orca's own cwd, a deletable WSL UNC path when it was launched from a
+      // worktree. This probe has no repo directory at all, so nothing about where
+      // it runs changes. The native `glab` assertion above keeps `undefined`.
+      expect.objectContaining({ cwd: expect.any(String) }),
       expect.any(Function)
     )
   })
diff --git a/src/main/ipc/filesystem-watcher-wsl.test.ts b/src/main/ipc/filesystem-watcher-wsl.test.ts
index 13346047d86..84d8d0a2306 100644
--- a/src/main/ipc/filesystem-watcher-wsl.test.ts
+++ b/src/main/ipc/filesystem-watcher-wsl.test.ts
@@ -95,7 +95,11 @@ describe('createWslWatcher', () => {
       ['-d', 'Ubuntu', '--exec', 'sh', '-s', '--', '/home/me/repo'],
       expect.objectContaining({
         stdio: ['pipe', 'pipe', 'pipe'],
-        windowsHide: true
+        windowsHide: true,
+        // Why a concrete directory (#16463): the watched path rides in argv, so
+        // an omitted cwd only means CreateProcessW inherits Orca's -- a worktree
+        // that can be deleted, after which every watcher start is ENOENT.
+        cwd: expect.any(String)
       })
     )
   })
diff --git a/src/main/ipc/filesystem-watcher-wsl.ts b/src/main/ipc/filesystem-watcher-wsl.ts
index 86f10c2ee68..a444113c1cf 100644
--- a/src/main/ipc/filesystem-watcher-wsl.ts
+++ b/src/main/ipc/filesystem-watcher-wsl.ts
@@ -14,6 +14,7 @@ import { parseWslUncPath } from '../../shared/wsl-paths'
 import { createWslWatcherProcessExit, createWslWatcherStartup } from './wsl-watcher-process-exit'
 import { reserveWatcherChild, WatcherChildCapacityError } from './parcel-watcher-child-registry'
 import { createDebouncedBatch, type DebouncedBatch } from './filesystem-watcher-batch-control'
+import { resolveWslInteropSpawnCwd } from '../wsl-interop-spawn-directory'
 
 export type WatcherSubscription = {
   unsubscribe(): Promise<void>
@@ -244,7 +245,11 @@ export async function createWslWatcher(
   try {
     child = spawn('wsl.exe', ['-d', distro, '--exec', 'sh', '-s', '--', linuxPath], {
       stdio: ['pipe', 'pipe', 'pipe'],
-      windowsHide: true
+      windowsHide: true,
+      // Why explicit (#16463): the watched directory rides in argv, and an
+      // inherited cwd is a worktree that can be deleted -- after which every
+      // watcher start fails `spawn wsl.exe ENOENT`.
+      cwd: resolveWslInteropSpawnCwd()
     })
   } catch (error) {
     releaseChildReservation()
diff --git a/src/main/local-worktree-filesystem.test.ts b/src/main/local-worktree-filesystem.test.ts
index 52b1d16f21a..c9e97f72e90 100644
--- a/src/main/local-worktree-filesystem.test.ts
+++ b/src/main/local-worktree-filesystem.test.ts
@@ -188,7 +188,11 @@ describe('local worktree filesystem runtime access', () => {
         1,
         expect.objectContaining({
           program: 'wsl.exe',
-          args: expect.arrayContaining(['-d', 'Ubuntu'])
+          args: expect.arrayContaining(['-d', 'Ubuntu']),
+          // Why a concrete directory (#16463): the guest path is inside the
+          // command, and these run while a worktree is being removed -- which is
+          // the cwd an omitted one would inherit.
+          cwd: expect.any(String)
         })
       )
       const removeArgs = runProcessMock.mock.calls[2]?.[0].args as string[]
diff --git a/src/main/local-worktree-filesystem.ts b/src/main/local-worktree-filesystem.ts
index f5d8714e196..1078b1f50bc 100644
--- a/src/main/local-worktree-filesystem.ts
+++ b/src/main/local-worktree-filesystem.ts
@@ -3,6 +3,7 @@ import { lstat, readFile } from 'node:fs/promises'
 import { buildWslExecArgs, quotePosixShell } from '../shared/wsl-login-shell-command'
 import { removeHostTree } from './host-tree-removal'
 import { toLinuxPath } from './wsl'
+import { resolveWslInteropSpawnCwd } from './wsl-interop-spawn-directory'
 import type { ReadPath, StatPath } from './worktree-orphan-gitdir-proof'
 
 export { toHostFilesystemPath, toHostRemovalPath } from './host-tree-removal'
@@ -36,6 +37,10 @@ async function runWslCommand(distro: string, command: string): Promise<string> {
   const result = await runProcess({
     program: 'wsl.exe',
     args: buildWslExecArgs(distro, ['sh', '-c', command]),
+    // Why explicit (#16463): the guest path is inside `command`, so this only
+    // decides whether CreateProcessW succeeds -- and these calls run while a
+    // worktree is being removed, which is the cwd an inherited one would be.
+    cwd: resolveWslInteropSpawnCwd(),
     timeoutMs: WSL_FILE_OPERATION_TIMEOUT_MS
   })
   if (result.timedOut) {
diff --git a/src/main/text-generation/commit-message-text-generation-local-subprocess.test.ts b/src/main/text-generation/commit-message-text-generation-local-subprocess.test.ts
index fcdbe4719cc..c124cb85779 100644
--- a/src/main/text-generation/commit-message-text-generation-local-subprocess.test.ts
+++ b/src/main/text-generation/commit-message-text-generation-local-subprocess.test.ts
@@ -164,7 +164,11 @@ describe('generateCommitMessageFromContext', () => {
         'wsl.exe',
         ['-d', 'Ubuntu 24.04', '--exec', 'sh', '-lc', expect.any(String)],
         expect.objectContaining({
-          cwd: undefined,
+          // Why a concrete directory (#16463): `undefined` makes CreateProcessW inherit
+          // Orca's own cwd, a deletable WSL UNC path when it was launched from a
+          // worktree. The Linux directory still rides inside the command (/mnt/c/repo,
+          // asserted below), so the Windows-side cwd never decides where the agent runs.
+          cwd: expect.any(String),
           windowsHide: true,
           env: expect.objectContaining({ CODEX_HOME: '/home/tester/.codex' })
         })
diff --git a/src/main/text-generation/commit-message-text-generation-model-discovery.test.ts b/src/main/text-generation/commit-message-text-generation-model-discovery.test.ts
index d54f1d995f6..7ef438c06ae 100644
--- a/src/main/text-generation/commit-message-text-generation-model-discovery.test.ts
+++ b/src/main/text-generation/commit-message-text-generation-model-discovery.test.ts
@@ -235,7 +235,11 @@ describe('discoverCommitMessageModelsLocal', () => {
         'wsl.exe',
         ['-d', 'Ubuntu', '--exec', 'sh', '-lc', expect.any(String)],
         expect.objectContaining({
-          cwd: undefined,
+          // Why a concrete directory (#16463): `undefined` makes CreateProcessW inherit
+          // Orca's own cwd, a deletable WSL UNC path when it was launched from a
+          // worktree. The Linux directory still rides inside the command (/mnt/c/repo,
+          // asserted below), so the Windows-side cwd never decides where discovery runs.
+          cwd: expect.any(String),
           windowsHide: true
         })
       )
diff --git a/src/main/wsl-availability.ts b/src/main/wsl-availability.ts
index c44476c9d60..1d14f526413 100644
--- a/src/main/wsl-availability.ts
+++ b/src/main/wsl-availability.ts
@@ -1,4 +1,5 @@
 import { execFile, execFileSync } from 'node:child_process'
+import { resolveWslInteropSpawnCwd } from './wsl-interop-spawn-directory'
 
 type WslAvailabilityCache =
   | { available: true }
@@ -35,6 +36,9 @@ function wslAvailabilityRetryDelayMs(cache: { retryable: boolean; failures: numb
   return Math.min(base * 2 ** (cache.failures - 1), WSL_AVAILABILITY_MAX_RETRY_DELAY_MS)
 }
 
+// Why ENOENT stays definitive: it means wsl.exe is not on PATH. It used to also mean
+// "the cwd this process inherited was deleted", which is not answer-shaped at all --
+// naming an explicit spawn directory below is what removes that source (#16463).
 // Why: a non-zero exit (wsl.exe ran and said no) or ENOENT (not installed) is answer-shaped,
 // so it earns a long window rather than the short one a timeout gets. execFileSync reports the
 // exit code as `status`, the execFile callback as a numeric `code`; both must count as
@@ -95,7 +99,14 @@ function probeWslStatus(): Promise<void> {
     execFile(
       'wsl.exe',
       ['--status'],
-      { timeout: WSL_AVAILABILITY_PROBE_TIMEOUT_MS, windowsHide: true },
+      {
+        timeout: WSL_AVAILABILITY_PROBE_TIMEOUT_MS,
+        windowsHide: true,
+        // Why explicit (#16463): inheriting a cwd the user deleted makes
+        // CreateProcessW fail ENOENT, which this cache reads as "WSL is not
+        // installed" and holds on the definitive TTL with backoff.
+        cwd: resolveWslInteropSpawnCwd()
+      },
       (error: unknown) => {
         if (error) {
           reject(error)
@@ -129,7 +140,10 @@ export function isWslAvailable(): boolean {
   try {
     execFileSync('wsl.exe', ['--status'], {
       stdio: ['pipe', 'pipe', 'pipe'],
-      timeout: WSL_AVAILABILITY_PROBE_TIMEOUT_MS
+      timeout: WSL_AVAILABILITY_PROBE_TIMEOUT_MS,
+      // Same reason as the async twin: they share one cache, so a false ENOENT
+      // from either poisons both.
+      cwd: resolveWslInteropSpawnCwd()
     })
     return cacheWslAvailabilityProbeResult(null, startedAtGeneration)
   } catch (error) {
diff --git a/src/main/wsl-interop-spawn-directory.test.ts b/src/main/wsl-interop-spawn-directory.test.ts
new file mode 100644
index 00000000000..310e5d3a5ca
--- /dev/null
+++ b/src/main/wsl-interop-spawn-directory.test.ts
@@ -0,0 +1,90 @@
+import { mkdtempSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, beforeEach, describe, expect, it } from 'vitest'
+
+import {
+  resetWslInteropSpawnDirectoryCache,
+  resolveWslInteropSpawnCwd
+} from './wsl-interop-spawn-directory'
+
+// Regression coverage for #16463 ("Removing the worktree Orca was launched from
+// breaks every wsl.exe spawn for the rest of the session"). The WSL command
+// builders passed `cwd: undefined` meaning "the directory is inside the
+// command", but CreateProcessW reads NULL as "inherit the parent's" — and the
+// parent's was a `\\wsl.localhost\...` worktree Linux had just deleted. 1805 of
+// 1806 git calls then failed `spawn wsl.exe ENOENT` until the app restarted.
+
+const createdRoots: string[] = []
+
+function makeExistingDirectory(): string {
+  const dir = mkdtempSync(join(tmpdir(), 'orca-wsl-spawn-cwd-'))
+  createdRoots.push(dir)
+  return dir
+}
+
+const ENV_KEYS = ['ORCA_USER_DATA_PATH', 'USERPROFILE', 'HOMEDRIVE', 'HOMEPATH'] as const
+const savedEnv = new Map<string, string | undefined>()
+
+beforeEach(() => {
+  for (const key of ENV_KEYS) {
+    savedEnv.set(key, process.env[key])
+    delete process.env[key]
+  }
+  resetWslInteropSpawnDirectoryCache()
+})
+
+afterEach(() => {
+  for (const key of ENV_KEYS) {
+    const saved = savedEnv.get(key)
+    if (saved === undefined) {
+      delete process.env[key]
+    } else {
+      process.env[key] = saved
+    }
+  }
+  resetWslInteropSpawnDirectoryCache()
+  while (createdRoots.length > 0) {
+    rmSync(createdRoots.pop()!, { recursive: true, force: true })
+  }
+})
+
+describe('resolveWslInteropSpawnCwd', () => {
+  it('names the app-owned directory first, so no worktree can be the answer', () => {
+    const userData = makeExistingDirectory()
+    process.env.ORCA_USER_DATA_PATH = userData
+    process.env.USERPROFILE = makeExistingDirectory()
+
+    expect(resolveWslInteropSpawnCwd()).toBe(userData)
+  })
+
+  it('skips a candidate that does not resolve instead of naming it', () => {
+    process.env.ORCA_USER_DATA_PATH = join(tmpdir(), 'orca-wsl-spawn-cwd-never-created')
+    const profile = makeExistingDirectory()
+    process.env.USERPROFILE = profile
+
+    expect(resolveWslInteropSpawnCwd()).toBe(profile)
+  })
+
+  it('always names some directory rather than letting the spawn inherit one', () => {
+    // Why: inheriting is the failure mode. With no configured candidate at all
+    // the home directory and system root still stand between a spawn and the
+    // parent's cwd.
+    expect(resolveWslInteropSpawnCwd()).toEqual(expect.any(String))
+  })
+
+  it('re-answers after the directory it memoized goes away mid-session', () => {
+    // This is the incident: the chosen directory was valid when the process
+    // started and was deleted underneath it hours later. A memo that is never
+    // re-validated reproduces the original bug one layer up.
+    const doomed = makeExistingDirectory()
+    process.env.ORCA_USER_DATA_PATH = doomed
+    const survivor = makeExistingDirectory()
+    expect(resolveWslInteropSpawnCwd()).toBe(doomed)
+
+    rmSync(doomed, { recursive: true, force: true })
+    process.env.ORCA_USER_DATA_PATH = survivor
+
+    expect(resolveWslInteropSpawnCwd()).toBe(survivor)
+  })
+})
diff --git a/src/main/wsl-interop-spawn-directory.ts b/src/main/wsl-interop-spawn-directory.ts
new file mode 100644
index 00000000000..daa8e08d830
--- /dev/null
+++ b/src/main/wsl-interop-spawn-directory.ts
@@ -0,0 +1,70 @@
+import { statSync } from 'node:fs'
+import { homedir } from 'node:os'
+
+/**
+ * A Windows directory that is safe to hand `wsl.exe` as its working directory.
+ *
+ * Why this exists (#16463): the WSL command builders set `cwd: undefined`,
+ * meaning "the directory is already expressed inside the command" — but that is
+ * not what `undefined` means to `CreateProcessW`. libuv passes NULL for
+ * `lpCurrentDirectory`, and NULL means *inherit the parent's*. Orca launched by
+ * `orca-ide` from a WSL shell inherits `\\wsl.localhost\<distro>\...\<worktree>`
+ * as its Win32 cwd; Linux can delete that directory out from under a Windows
+ * process across the 9P share, and from then on `CreateProcessW` fails
+ * `ERROR_PATH_NOT_FOUND` — surfaced by libuv as `spawn wsl.exe ENOENT`, for the
+ * rest of the process's life, for every repository.
+ *
+ * Naming an explicit directory removes the dependency on process-global state
+ * entirely, so a repaired or unrepaired `process.cwd()` cannot decide whether
+ * git works. It is never the cwd the command runs in: WSL invocations carry
+ * their Linux directory in `git -C`, a `cd` inside `bash -c`, or the `sh -c`
+ * wrapper `withGuestCwd` builds.
+ */
+
+let cachedSpawnCwd: string | null = null
+
+function isExistingDirectory(path: string | undefined | null): path is string {
+  if (!path) {
+    return false
+  }
+  try {
+    return statSync(path).isDirectory()
+  } catch {
+    return false
+  }
+}
+
+/** Test seam: forget the memoized directory so a later probe re-validates. */
+export function resetWslInteropSpawnDirectoryCache(): void {
+  cachedSpawnCwd = null
+}
+
+export function resolveWslInteropSpawnCwd(): string | undefined {
+  // Why re-validate: the answer is only useful while it still resolves, and the
+  // user's profile directory can go away on a roaming/mapped-drive host.
+  if (isExistingDirectory(cachedSpawnCwd)) {
+    return cachedSpawnCwd
+  }
+  const env = process.env
+  // Why this order: an app-owned directory first (it outlives every worktree),
+  // then the user's profile, then the system root as a floor that always exists.
+  // A root is fine here — nothing scans this directory, it is only the value
+  // `CreateProcessW` receives for `lpCurrentDirectory`.
+  const candidates: (string | undefined)[] = [
+    env.ORCA_USER_DATA_PATH,
+    env.USERPROFILE,
+    env.HOMEDRIVE && env.HOMEPATH ? `${env.HOMEDRIVE}${env.HOMEPATH}` : undefined,
+    homedir(),
+    env.SystemDrive ? `${env.SystemDrive}\\` : 'C:\\'
+  ]
+  for (const candidate of candidates) {
+    if (isExistingDirectory(candidate)) {
+      cachedSpawnCwd = candidate
+      return candidate
+    }
+  }
+  cachedSpawnCwd = null
+  // Why undefined rather than a guess: inheriting is still better than naming a
+  // directory we just proved does not exist.
+  return undefined
+}
diff --git a/src/main/wsl-unc-delete.test.ts b/src/main/wsl-unc-delete.test.ts
index 4ca6c43312c..a902b4b6d53 100644
--- a/src/main/wsl-unc-delete.test.ts
+++ b/src/main/wsl-unc-delete.test.ts
@@ -50,8 +50,11 @@ describe('tryDeleteWslUncPath', () => {
     })
 
     expect(execFileMock).toHaveBeenCalledTimes(1)
-    const [binary, spawnArgs] = execFileMock.mock.calls[0]
+    const [binary, spawnArgs, spawnOptions] = execFileMock.mock.calls[0]
     expect(binary).toBe('wsl.exe')
+    // Why a concrete directory (#16463): this deletes worktrees, so the cwd it
+    // would otherwise inherit is the very directory about to disappear.
+    expect(spawnOptions).toEqual(expect.objectContaining({ cwd: expect.any(String) }))
     expect(spawnArgs).toEqual([
       '-d',
       'Ubuntu',
diff --git a/src/main/wsl-unc-delete.ts b/src/main/wsl-unc-delete.ts
index 9cc62c9b236..b094a152beb 100644
--- a/src/main/wsl-unc-delete.ts
+++ b/src/main/wsl-unc-delete.ts
@@ -1,5 +1,6 @@
 import { execFile } from 'node:child_process'
 import { parseWslPath } from './wsl'
+import { resolveWslInteropSpawnCwd } from './wsl-interop-spawn-directory'
 import {
   containedDeleteCommand,
   rejectionFromWslDeleteStderr,
@@ -69,7 +70,9 @@ function execFileWsl(distro: string, command: string[]): Promise<void> {
       ['-d', distro, '--exec', ...command],
       // Why: a generous bound so deleting a large directory tree on the WSL fs
       // doesn't abort mid-delete, while still capping a wedged wsl.exe.
-      { encoding: 'utf-8', timeout: 30000 },
+      // Why an explicit cwd (#16463): the target rides in argv, and this deletes
+      // worktrees -- so an inherited cwd is exactly the directory about to go.
+      { encoding: 'utf-8', timeout: 30000, cwd: resolveWslInteropSpawnCwd() },
       (error, _stdout, stderr) => {
         if (error) {
           reject(wslDeleteError(error, stderr))
diff --git a/src/main/wsl.test.ts b/src/main/wsl.test.ts
index bc3498b1145..6ef8adbbb61 100644
--- a/src/main/wsl.test.ts
+++ b/src/main/wsl.test.ts
@@ -392,6 +392,40 @@ describe('WSL availability cache', () => {
     })
   })
 
+  // Why this site matters more than the other wsl.exe spawns (#16463): ENOENT is
+  // deliberately non-retryable here, so a spawn that failed only because the
+  // inherited cwd had been deleted was cached as "WSL is not installed" on the
+  // 10-minute definitive TTL with exponential backoff. Git kept working and Orca
+  // reported WSL unavailable -- a worse state than the bug being fixed. Naming
+  // the directory is what keeps ENOENT meaning "wsl.exe is not on PATH".
+  it('names an explicit spawn directory on both probes, so no deleted cwd can read as ENOENT', async () => {
+    execFileSyncMock.mockReturnValueOnce('')
+    execFileMock.mockImplementation((_command, _args, _options, callback) => {
+      callback(null, '', '')
+    })
+
+    withPlatform('win32', () => {
+      expect(isWslAvailable()).toBe(true)
+    })
+    expect(execFileSyncMock).toHaveBeenCalledWith(
+      'wsl.exe',
+      ['--status'],
+      expect.objectContaining({ cwd: expect.any(String) })
+    )
+
+    // The two probes share one cache, so a false ENOENT from either poisons both.
+    _resetWslCachesForTests()
+    await withPlatformAsync('win32', async () => {
+      await expect(isWslAvailableAsync()).resolves.toBe(true)
+    })
+    expect(execFileMock).toHaveBeenCalledWith(
+      'wsl.exe',
+      ['--status'],
+      expect.objectContaining({ cwd: expect.any(String) }),
+      expect.any(Function)
+    )
+  })
+
   it('shares one wsl.exe spawn between concurrent async probes', async () => {
     execFileMock.mockImplementation((_command, _args, _options, callback) => {
       setTimeout(() => callback(null, '', ''), 0)
diff --git a/src/main/wsl.ts b/src/main/wsl.ts
index 59e74a7f4df..579031de934 100644
--- a/src/main/wsl.ts
+++ b/src/main/wsl.ts
@@ -7,6 +7,7 @@ import {
   _setWslAvailabilityCacheForTests,
   dropStaleWslAvailabilityFailure
 } from './wsl-availability'
+import { resolveWslInteropSpawnCwd } from './wsl-interop-spawn-directory'
 import {
   _resetRunningWslDistroCacheForTests,
   resolveRunningWslDistros
@@ -76,7 +77,8 @@ export function wslUncDirectoryExists(uncPath: string): boolean | null {
     const stdout = execFileSync('wsl.exe', getWslDirectoryProbeArgs(info), {
       stdio: ['pipe', 'pipe', 'pipe'],
       timeout: 5000,
-      encoding: 'utf8'
+      encoding: 'utf8',
+      cwd: resolveWslInteropSpawnCwd()
     })
     return parseWslDirectoryProbeOutput(stdout)
   } catch {
@@ -93,7 +95,8 @@ export function wslUncDirectoryExistsAsync(uncPath: string): Promise<boolean | n
     return Promise.resolve(null)
   }
   return new Promise((resolve) => {
-    execFile('wsl.exe', getWslDirectoryProbeArgs(info), { timeout: 5000 }, (_error, stdout) => {
+    const probeOpts = { timeout: 5000, cwd: resolveWslInteropSpawnCwd() }
+    execFile('wsl.exe', getWslDirectoryProbeArgs(info), probeOpts, (_error, stdout) => {
       // Why: wsl.exe uses numeric exits for both guest results and host failures; only the guest marker is authoritative.
       resolve(parseWslDirectoryProbeOutput(stdout))
     })
@@ -181,7 +184,8 @@ export function listWslDistros(): string[] {
     const output = execFileSync('wsl.exe', ['--list', '--quiet'], {
       encoding: 'utf-8',
       stdio: ['pipe', 'pipe', 'pipe'],
-      timeout: 5000
+      timeout: 5000,
+      cwd: resolveWslInteropSpawnCwd()
     })
     return cacheWslDistroList(parseWslDistros(output), probeSequence)
   } catch {
@@ -283,7 +287,8 @@ export function getWslHome(distro: string): string | null {
     const home = execFileSync('wsl.exe', ['-d', distro, '--exec', 'bash', '-c', 'echo $HOME'], {
       encoding: 'utf-8',
       stdio: ['pipe', 'pipe', 'pipe'],
-      timeout: 5000
+      timeout: 5000,
+      cwd: resolveWslInteropSpawnCwd()
     }).trim()
 
     if (!home || !home.startsWith('/')) {
@@ -382,7 +387,13 @@ function execFileUtf8(command: string, args: string[], env?: NodeJS.ProcessEnv):
     execFile(
       command,
       args,
-      { encoding: 'utf-8', env, timeout: 5000, windowsHide: true },
+      {
+        encoding: 'utf-8',
+        env,
+        timeout: 5000,
+        windowsHide: true,
+        cwd: resolveWslInteropSpawnCwd()
+      },
       (error, stdout) => {
         if (error) {
           reject(error)
diff --git a/src/main/wsl/__fixtures__/wsl-probe-failure-swallow-allowlist.txt b/src/main/wsl/__fixtures__/wsl-probe-failure-swallow-allowlist.txt
index db6392e21f3..f0a4c4f1082 100644
--- a/src/main/wsl/__fixtures__/wsl-probe-failure-swallow-allowlist.txt
+++ b/src/main/wsl/__fixtures__/wsl-probe-failure-swallow-allowlist.txt
@@ -23,3 +23,9 @@ main/ipc/preflight-command-exec.ts
 main/ipc/preflight-test-harness.ts
 main/ipc/preflight-wsl-agent-detection.ts
 main/wsl.ts
+# Scanned only because the filename starts with `wsl`; it answers nothing about a
+# distro. The swallow is a `statSync` on a LOCAL WINDOWS directory, and only the
+# positive answer is memoized -- and re-validated on every call, which is the
+# point of the module (#16463). A failed stat drops to the next candidate for
+# that one call and is re-asked on the next, so there is no value to pin.
+main/wsl-interop-spawn-directory.ts

From 81972689560b8af2759a9b67ac6f1c8029809b90 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 02:23:45 -0700
Subject: [PATCH 41/92] fix(pty,remote): close the pty master fd leak, and two
 remote-terminal defects (#17914)

* fix(pty,remote): close the pty master fd leak and two remote-terminal defects

so on Linux every later child of the process -- both later pty children and
plain child_process spawns -- inherits it and keeps the /dev/pts device alive.
Measured on Linux with stock node-pty 1.1.0: master fd flags 0404002
(cloexec=false), and 17 -> /dev/pts/ptmx present in both a later pty child's
/proc/self/fd and a later child_process child's. Extend the existing node-pty
patch with pty_cloexec() on both PtyFork spawn paths; after the patch the flags
read 02404002 (cloexec=true) and neither child sees the master. This covers the
app and terminal daemon only -- the SSH relay installs node-pty from npm on the
remote host, so it stays exposed (see the report).

rejecting inspection as a renderer-global unhandledrejection, which an
unreachable runtime produced on every cadence tick.

path cleared the close intent for it exactly like a dropped connection, so a
host that keeps republishing the dead surface re-materialized the pane the user
just closed. Keep that intent and drop its TTL. Also route the banner's
"Remote terminal was closed." line through translate() so it stops mixing
English into a localized banner.

* test(pty,remote): make the fd-leak evidence positive and size the close intent to its RPC

The Linux 'does not hand an earlier pty master to a later pty child' case only asserted that ptmx was absent from the captured listing, so any run that produced no listing passed without inspecting a single fd. Block the child on stdin, emit a sentinel, and assert both the sentinel and a real /dev/pts fd row before the negative assertion. Verified in node:24-bookworm: passes with the patch, and with pty_cloexec() reverted it fails on four inherited /dev/pts/ptmx rows.

The close intent's TTL was a 10s literal while the close RPC that can still answer tab_not_found had its own 15s literal. A host that answered slowly while republishing the surface had its intent evicted by the republish path's own pending-check, so makeWebSessionCloseIntentDurable found nothing to flip and #9194 reproduced. Derive the TTL from the shared session.tabs RPC timeout so the two cannot cross, with an invariant test and a regression test for the slow answer.
---
 config/patches/node-pty@1.1.0.patch           |  61 +++++++++-
 pnpm-lock.yaml                                |   6 +-
 src/main/daemon/node-pty-fd-leak.test.ts      | 107 +++++++++++++++++-
 .../terminal-pane/TerminalErrorToast.tsx      |  12 ++
 ...ection-queue-rejection-containment.test.ts |  72 ++++++++++++
 .../agent-process-inspection-queue.ts         |  18 ++-
 ...l-error-remote-closed-localization.test.ts |  24 ++++
 src/renderer/src/i18n/locales/en.json         |   3 +-
 src/renderer/src/i18n/locales/es.json         |   3 +-
 src/renderer/src/i18n/locales/ja.json         |   3 +-
 src/renderer/src/i18n/locales/ko.json         |   3 +-
 src/renderer/src/i18n/locales/zh.json         |   3 +-
 ...runtime-session-tab-activate-close.test.ts |  79 +++++++++++++
 .../web-runtime-session-tab-lifecycle.ts      |  21 +++-
 .../runtime/web-session-close-intent.test.ts  |  19 +++-
 .../src/runtime/web-session-close-intent.ts   |  37 +++++-
 .../runtime/web-session-tab-rpc-timeout.ts    |   5 +
 17 files changed, 445 insertions(+), 31 deletions(-)
 create mode 100644 src/renderer/src/components/terminal-pane/agent-process-inspection-queue-rejection-containment.test.ts
 create mode 100644 src/renderer/src/components/terminal-pane/terminal-error-remote-closed-localization.test.ts
 create mode 100644 src/renderer/src/runtime/web-session-tab-rpc-timeout.ts

diff --git a/config/patches/node-pty@1.1.0.patch b/config/patches/node-pty@1.1.0.patch
index 9ee2ebd39b4..348ce6ef7ce 100644
--- a/config/patches/node-pty@1.1.0.patch
+++ b/config/patches/node-pty@1.1.0.patch
@@ -176,7 +176,7 @@ index 181ccabbbe9c4948a9725fb1db907a68e9de01fc..67f31facf85562b67adbfbd04ce28ddd
  process.send!({ consoleProcessList });
  process.exit(0);
 diff --git a/src/unix/pty.cc b/src/unix/pty.cc
-index 7b4b9e1f990fbf95b51528bb56dc9717f5b87532..383df0c9c48355547c65e6c9bbba593d15c4dd44 100644
+index 7b4b9e1f990fbf95b51528bb56dc9717f5b87532..2ae787c5bd4f3eba470584dc658a01a52c690e0a 100644
 --- a/src/unix/pty.cc
 +++ b/src/unix/pty.cc
 @@ -23,7 +23,9 @@
@@ -215,7 +215,17 @@ index 7b4b9e1f990fbf95b51528bb56dc9717f5b87532..383df0c9c48355547c65e6c9bbba593d
  /* Some platforms name VWERASE and VDISCARD differently */
  #if !defined(VWERASE) && defined(VWERSE)
  #define VWERASE	VWERSE
-@@ -237,13 +258,23 @@ pty_getproc(int, char *);
+@@ -228,6 +249,9 @@ Napi::Value PtyGetProc(const Napi::CallbackInfo& info);
+ static int
+ pty_nonblock(int);
+ 
++static int
++pty_cloexec(int);
++
+ #if defined(__APPLE__)
+ static char *
+ pty_getproc(int);
+@@ -237,13 +261,23 @@ pty_getproc(int, char *);
  #endif
  
  #if defined(__APPLE__) || defined(__OpenBSD__)
@@ -240,7 +250,7 @@ index 7b4b9e1f990fbf95b51528bb56dc9717f5b87532..383df0c9c48355547c65e6c9bbba593d
  #endif
  
  struct DelBuf {
-@@ -367,10 +398,11 @@ Napi::Value PtyFork(const Napi::CallbackInfo& info) {
+@@ -367,14 +401,18 @@ Napi::Value PtyFork(const Napi::CallbackInfo& info) {
      argv[i + 3] = strdup(arg.c_str());
    }
  
@@ -256,7 +266,48 @@ index 7b4b9e1f990fbf95b51528bb56dc9717f5b87532..383df0c9c48355547c65e6c9bbba593d
    }
    if (pty_nonblock(master) == -1) {
      throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
-@@ -684,15 +716,73 @@ pty_getproc(int fd, char *tty) {
+   }
++  if (pty_cloexec(master) == -1) {
++    throw Napi::Error::New(napiEnv, "Could not set master fd to close-on-exec.");
++  }
+ #else
+   int argc = argv_.Length();
+   int argl = argc + 2;
+@@ -445,6 +483,9 @@ Napi::Value PtyFork(const Napi::CallbackInfo& info) {
+       if (pty_nonblock(master) == -1) {
+         throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
+       }
++      if (pty_cloexec(master) == -1) {
++        throw Napi::Error::New(napiEnv, "Could not set master fd to close-on-exec.");
++      }
+   }
+ #endif
+ 
+@@ -586,6 +627,23 @@ pty_nonblock(int fd) {
+   return fcntl(fd, F_SETFL, flags | O_NONBLOCK);
+ }
+ 
++/**
++ * Orca: close-on-exec FD
++ *
++ * forkpty()/posix_openpt() have no atomic O_CLOEXEC, so a master left without
++ * FD_CLOEXEC is inherited by every later child of this process -- including
++ * later pty children -- which keeps its /dev/pts device and buffers alive long
++ * after its own session ends (#8362).
++ */
++
++static int
++pty_cloexec(int fd) {
++  int flags = fcntl(fd, F_GETFD);
++  if (flags == -1) return -1;
++  if (flags & FD_CLOEXEC) return 0;
++  return fcntl(fd, F_SETFD, flags | FD_CLOEXEC);
++}
++
+ /**
+  * pty_getproc
+  * Taken from tmux.
+@@ -684,15 +742,73 @@ pty_getproc(int fd, char *tty) {
  #endif
  
  #if defined(__APPLE__)
@@ -332,7 +383,7 @@ index 7b4b9e1f990fbf95b51528bb56dc9717f5b87532..383df0c9c48355547c65e6c9bbba593d
  
    for (; count < 3; count++) {
      low_fds[count] = posix_openpt(O_RDWR);
-@@ -706,80 +796,118 @@ pty_posix_spawn(char** argv, char** env,
+@@ -706,80 +822,118 @@ pty_posix_spawn(char** argv, char** env,
                POSIX_SPAWN_SETSID;
    *master = posix_openpt(O_RDWR);
    if (*master == -1) {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5b5b4c054a0..1abec6c0590 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -115,7 +115,7 @@ patchedDependencies:
   '@xterm/addon-webgl@0.20.0-beta.299': 94687e89a0115e6e6aa102837f986debdc029c091527ee5eb4a4e17ceaf9473e
   '@xterm/xterm@6.1.0-beta.303': 98756bcedc402bcdb7c6ab7b015d2e59cd18e97b03a2c06a27e95bb3ba429d9d
   lint-staged@16.4.0: 7333b3837f80a7fbd045964db6d76ba4fc118e49134bdbabb00585b6b7b60673
-  node-pty@1.1.0: 572a46f539dd9da26e259702da974e1e693329e299625c97eb7c28e4e642500e
+  node-pty@1.1.0: 40b6b6b814c89a8a29c995495ea86cff2cf6766f42124b5702aedf4ce0565c0e
 
 importers:
 
@@ -156,7 +156,7 @@ importers:
         version: 3.3.1
       node-pty:
         specifier: ^1.1.0
-        version: 1.1.0(patch_hash=572a46f539dd9da26e259702da974e1e693329e299625c97eb7c28e4e642500e)
+        version: 1.1.0(patch_hash=40b6b6b814c89a8a29c995495ea86cff2cf6766f42124b5702aedf4ce0565c0e)
       posthog-node:
         specifier: ^5.33.3
         version: 5.33.3
@@ -12194,7 +12194,7 @@ snapshots:
 
   node-int64@0.4.0: {}
 
-  node-pty@1.1.0(patch_hash=572a46f539dd9da26e259702da974e1e693329e299625c97eb7c28e4e642500e):
+  node-pty@1.1.0(patch_hash=40b6b6b814c89a8a29c995495ea86cff2cf6766f42124b5702aedf4ce0565c0e):
     dependencies:
       node-addon-api: 7.1.1
 
diff --git a/src/main/daemon/node-pty-fd-leak.test.ts b/src/main/daemon/node-pty-fd-leak.test.ts
index 91958b49975..f021f7d48df 100644
--- a/src/main/daemon/node-pty-fd-leak.test.ts
+++ b/src/main/daemon/node-pty-fd-leak.test.ts
@@ -1,5 +1,6 @@
-import { execFileSync } from 'node:child_process'
-import { existsSync, renameSync } from 'node:fs'
+import { execFileSync, spawn } from 'node:child_process'
+import { once } from 'node:events'
+import { existsSync, readdirSync, readFileSync, readlinkSync, renameSync } from 'node:fs'
 import { setTimeout as delay } from 'node:timers/promises'
 import * as pty from 'node-pty'
 import { describe, expect, it } from 'vitest'
@@ -90,3 +91,105 @@ describeOnDarwin('node-pty macOS spawn fd handling', () => {
     expect(after - before).toBe(0)
   }, 15000)
 })
+
+// Linux is the only platform where node-pty takes the forkpty() path, which has no atomic
+// O_CLOEXEC. /proc is what makes the inheritance observable, so the assertions live here.
+const describeOnLinux = process.platform === 'linux' ? describe : describe.skip
+
+const O_CLOEXEC = 0o2000000
+
+const LISTING_READY = '__fd_listing_ready__'
+
+function ptyMasterFd(term: pty.IPty): number {
+  return (term as unknown as { fd: number }).fd
+}
+
+function isCloseOnExec(fd: number): boolean {
+  const flags = /flags:\s*(\d+)/.exec(readFileSync(`/proc/self/fdinfo/${fd}`, 'utf8'))
+  expect(flags).toBeTruthy()
+  return (Number.parseInt(flags![1]!, 8) & O_CLOEXEC) !== 0
+}
+
+function openFdTargets(pid: number): string[] {
+  return readdirSync(`/proc/${pid}/fd`).map((entry) => {
+    try {
+      return readlinkSync(`/proc/${pid}/fd/${entry}`)
+    } catch {
+      return ''
+    }
+  })
+}
+
+describeOnLinux('node-pty Linux forkpty fd handling', () => {
+  it('marks pty masters close-on-exec so later children cannot inherit them', async () => {
+    const terms: pty.IPty[] = []
+    let child: ReturnType<typeof spawn> | null = null
+    try {
+      for (let i = 0; i < 3; i++) {
+        terms.push(
+          pty.spawn('/bin/sh', ['-c', 'sleep 30'], {
+            name: 'xterm-256color',
+            cols: 80,
+            rows: 24,
+            cwd: process.cwd(),
+            env: { ...process.env, ORCA_FD_LEAK_TEST_INDEX: String(i) }
+          })
+        )
+      }
+
+      // The masters this process owns must not survive an exec in any child it forks later.
+      expect(terms.map((term) => isCloseOnExec(ptyMasterFd(term)))).toEqual([true, true, true])
+
+      child = spawn('/bin/sh', ['-c', 'sleep 5'], { stdio: 'ignore' })
+      await once(child, 'spawn')
+      const inherited = openFdTargets(child.pid!).filter((target) => target.includes('ptmx'))
+      expect(inherited).toEqual([])
+    } finally {
+      child?.kill()
+      for (const term of terms) {
+        term.kill()
+      }
+    }
+  }, 15000)
+
+  it('does not hand an earlier pty master to a later pty child', async () => {
+    const first = pty.spawn('/bin/sh', ['-c', 'sleep 30'], {
+      name: 'xterm-256color',
+      cols: 80,
+      rows: 24,
+      cwd: process.cwd(),
+      env: { ...process.env }
+    })
+    try {
+      // Why the read: the child must not be able to run its listing before onData is armed, or an
+      // empty capture would satisfy the negative assertion without inspecting a single fd.
+      const second = pty.spawn(
+        '/bin/sh',
+        ['-c', `IFS= read -r _; printf '${LISTING_READY}\\n'; ls -l /proc/self/fd; exit 0`],
+        {
+          name: 'xterm-256color',
+          cols: 200,
+          rows: 24,
+          cwd: process.cwd(),
+          env: { ...process.env }
+        }
+      )
+      let output = ''
+      second.onData((data) => {
+        output += data
+      })
+      second.write('go\n')
+      await new Promise<void>((resolve) => {
+        second.onExit(() => resolve())
+      })
+      await delay(100)
+
+      // The listing is the evidence; assert it arrived before reading anything into its absence.
+      expect(output).toContain(LISTING_READY)
+      expect(output).toMatch(/\d+ -> \/dev\/pts\//)
+      expect(output).not.toMatch(/ptmx/)
+    } finally {
+      first.kill()
+    }
+  }, 15000)
+})
diff --git a/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx b/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
index 11543b96ccc..dcb838007b9 100644
--- a/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
@@ -19,6 +19,10 @@ const STALE_DAEMON_CWD_MARKERS = [
 ]
 // Thrown by ipc/pty.ts when a persisted pane owner can't be proven alive or dead (STA-3536).
 const PANE_OWNER_UNVERIFIED_MARKER = 'terminal_pane_owner_unverified'
+// remote-runtime-pty-transport.ts surfaces this English literal as a wire-level marker, so it is
+// translated here rather than at the source -- otherwise the banner mixes English with the
+// localized chrome around it (#9194).
+const REMOTE_TERMINAL_CLOSED_MARKER = 'Remote terminal was closed.'
 // Why one source: the test and replace forms must match the same token, and a lone /g regex carries
 // lastIndex state across .test() calls. Capture the leading boundary so replacement can restore it.
 const TERMINAL_HOST_GONE_SOURCE = '(^|[^a-z0-9_])terminal_host_gone(?=$|[^a-z0-9_])'
@@ -127,6 +131,14 @@ export function humanizeTerminalError(error: string): string {
       'Reconnecting this terminal — its output is being re-established. The session is still running.'
     )
   )
+  if (humanized.includes(REMOTE_TERMINAL_CLOSED_MARKER)) {
+    humanized = humanized.replaceAll(REMOTE_TERMINAL_CLOSED_MARKER, () =>
+      translate(
+        'auto.components.terminal.pane.TerminalErrorToast.remoteTerminalClosed',
+        'Remote terminal was closed.'
+      )
+    )
+  }
   humanized = humanizeUnreattachableSession(humanized)
   if (!isExplainedTerminalError(humanized)) {
     return humanized
diff --git a/src/renderer/src/components/terminal-pane/agent-process-inspection-queue-rejection-containment.test.ts b/src/renderer/src/components/terminal-pane/agent-process-inspection-queue-rejection-containment.test.ts
new file mode 100644
index 00000000000..639c457016f
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/agent-process-inspection-queue-rejection-containment.test.ts
@@ -0,0 +1,72 @@
+import { afterEach, describe, expect, it } from 'vitest'
+import {
+  enqueueAgentProcessInspection,
+  resetAgentProcessInspectionQueueForTests
+} from './agent-process-inspection-queue'
+
+// Node emits 'unhandledRejection' a turn after the microtask queue drains.
+async function settleRejections(): Promise<void> {
+  for (let index = 0; index < 4; index += 1) {
+    await new Promise((resolve) => setTimeout(resolve, 0))
+  }
+}
+
+async function collectUnhandledRejections(run: () => Promise<void>): Promise<unknown[]> {
+  const unhandled: unknown[] = []
+  const onUnhandledRejection = (reason: unknown): void => {
+    unhandled.push(reason)
+  }
+  process.on('unhandledRejection', onUnhandledRejection)
+  try {
+    await run()
+  } finally {
+    process.off('unhandledRejection', onUnhandledRejection)
+  }
+  return unhandled
+}
+
+describe('agent process inspection queue rejection containment', () => {
+  afterEach(() => {
+    resetAgentProcessInspectionQueueForTests()
+  })
+
+  it('contains an unreachable-runtime inspection failure instead of raising unhandledrejection', async () => {
+    const unhandled = await collectUnhandledRejections(async () => {
+      enqueueAgentProcessInspection({
+        priority: 'cadence',
+        canRun: () => true,
+        run: () =>
+          Promise.reject(
+            new Error(
+              "Error invoking remote method 'runtimeEnvironments:call': RemoteRuntimeClientError: Could not connect to the remote Orca runtime."
+            )
+          )
+      })
+      await settleRejections()
+    })
+
+    expect(unhandled).toEqual([])
+  })
+
+  it('keeps draining the queue after a rejecting inspection', async () => {
+    const ran: string[] = []
+    const unhandled = await collectUnhandledRejections(async () => {
+      enqueueAgentProcessInspection({
+        priority: 'cadence',
+        canRun: () => true,
+        run: () => Promise.reject(new Error('unreachable'))
+      })
+      enqueueAgentProcessInspection({
+        priority: 'cadence',
+        canRun: () => true,
+        run: async () => {
+          ran.push('second')
+        }
+      })
+      await settleRejections()
+    })
+
+    expect(unhandled).toEqual([])
+    expect(ran).toEqual(['second'])
+  })
+})
diff --git a/src/renderer/src/components/terminal-pane/agent-process-inspection-queue.ts b/src/renderer/src/components/terminal-pane/agent-process-inspection-queue.ts
index f7512ad8c60..6dc1dc4ccf2 100644
--- a/src/renderer/src/components/terminal-pane/agent-process-inspection-queue.ts
+++ b/src/renderer/src/components/terminal-pane/agent-process-inspection-queue.ts
@@ -63,12 +63,18 @@ function pumpInspectionQueue(): void {
 
   activeInspections += 1
   inspectionStarts.push(now)
-  void next.run().finally(() => {
-    activeInspections = Math.max(0, activeInspections - 1)
-    if (inspectionQueue.length > 0) {
-      scheduleInspectionPump()
-    }
-  })
+  // Why the catch before finally: an unreachable runtime rejects the inspection on a cadence, and a
+  // bare `.finally()` chain re-raises it as a renderer-global unhandledrejection. Coordinators own
+  // their own failure/backoff state, so the queue only has to keep its accounting running.
+  void next
+    .run()
+    .catch(() => {})
+    .finally(() => {
+      activeInspections = Math.max(0, activeInspections - 1)
+      if (inspectionQueue.length > 0) {
+        scheduleInspectionPump()
+      }
+    })
 
   if (inspectionQueue.length > 0) {
     scheduleInspectionPump()
diff --git a/src/renderer/src/components/terminal-pane/terminal-error-remote-closed-localization.test.ts b/src/renderer/src/components/terminal-pane/terminal-error-remote-closed-localization.test.ts
new file mode 100644
index 00000000000..12ff0dbda82
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/terminal-error-remote-closed-localization.test.ts
@@ -0,0 +1,24 @@
+import { describe, expect, it, vi } from 'vitest'
+
+// Why a locale stand-in: the banner's own chrome is already translated, so the only way to see the
+// mixed-language regression (#9194) is to render the message through a non-English catalog.
+vi.mock('@/i18n/i18n', () => ({
+  translate: (key: string, fallback: string) =>
+    key === 'auto.components.terminal.pane.TerminalErrorToast.remoteTerminalClosed'
+      ? '远程终端已关闭。'
+      : fallback
+}))
+
+import { humanizeTerminalError } from './TerminalErrorToast'
+
+describe('remote-closed terminal banner localization', () => {
+  it('translates the remote-closed line instead of pinning it to English', () => {
+    expect(humanizeTerminalError('Remote terminal was closed.')).toBe('远程终端已关闭。')
+  })
+
+  it('translates the line when it is accumulated with other errors', () => {
+    expect(humanizeTerminalError('Paste failed.\nRemote terminal was closed.')).toBe(
+      'Paste failed.\n远程终端已关闭。'
+    )
+  })
+})
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index 99805af4c89..c7a66f2decc 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -3088,7 +3088,8 @@
             "42b283ecfc": "Orca couldn't safely reconnect this terminal because the host couldn't verify its saved session. Orca left the saved session unchanged. Click Retry to try reconnecting now. If it still cannot reconnect, open a new terminal.",
             "e16012e31e": "The terminal daemon that owned this session exited, so the session and its scrollback could not be recovered. Open a new terminal to continue.",
             "sessionUnavailable": "Orca couldn't reattach to this pane's terminal session on the host. Open a new terminal to continue.",
-            "sourceRestoring": "Reconnecting this terminal — its output is being re-established. The session is still running."
+            "sourceRestoring": "Reconnecting this terminal — its output is being re-established. The session is still running.",
+            "remoteTerminalClosed": "Remote terminal was closed."
           },
           "TerminalProcessExitOverlay": {
             "capacityTitle": "Git Bash console limit reached",
diff --git a/src/renderer/src/i18n/locales/es.json b/src/renderer/src/i18n/locales/es.json
index be6e087060d..e55defa7518 100644
--- a/src/renderer/src/i18n/locales/es.json
+++ b/src/renderer/src/i18n/locales/es.json
@@ -2741,7 +2741,8 @@
             "e4aa243f8c": "Reiniciar servicio",
             "a7e2fd2699": "abre un issue",
             "5c8ce20be6": "Si esto persiste, por favor",
-            "cc6d997c65": "Reinicia el servicio del terminal desde aquí para borrar el estado obsoleto."
+            "cc6d997c65": "Reinicia el servicio del terminal desde aquí para borrar el estado obsoleto.",
+            "remoteTerminalClosed": "La terminal remota se cerró."
           },
           "TerminalProcessExitOverlay": {
             "capacityTitle": "Se alcanzó el límite de consolas de Git Bash",
diff --git a/src/renderer/src/i18n/locales/ja.json b/src/renderer/src/i18n/locales/ja.json
index 20e2fca6553..5d97966fca0 100644
--- a/src/renderer/src/i18n/locales/ja.json
+++ b/src/renderer/src/i18n/locales/ja.json
@@ -2741,7 +2741,8 @@
             "e4aa243f8c": "デーモンを再起動します",
             "a7e2fd2699": "Issue を登録",
             "5c8ce20be6": "この状態が続く場合は、",
-            "cc6d997c65": "ここからターミナルデーモンを再起動して、古いデーモン状態をクリアします。"
+            "cc6d997c65": "ここからターミナルデーモンを再起動して、古いデーモン状態をクリアします。",
+            "remoteTerminalClosed": "リモートターミナルが閉じられました。"
           },
           "TerminalProcessExitOverlay": {
             "capacityTitle": "Git Bash のコンソール上限に達しました",
diff --git a/src/renderer/src/i18n/locales/ko.json b/src/renderer/src/i18n/locales/ko.json
index e9b9c48fcdf..795d359bce0 100644
--- a/src/renderer/src/i18n/locales/ko.json
+++ b/src/renderer/src/i18n/locales/ko.json
@@ -2746,7 +2746,8 @@
             "e4aa243f8c": "데몬 재시작",
             "a7e2fd2699": "이슈 등록",
             "5c8ce20be6": "문제가 계속되면",
-            "cc6d997c65": "오래된 데몬 상태를 지우려면 여기에서 terminal 데몬을 다시 시작하세요."
+            "cc6d997c65": "오래된 데몬 상태를 지우려면 여기에서 terminal 데몬을 다시 시작하세요.",
+            "remoteTerminalClosed": "원격 터미널이 종료되었습니다."
           },
           "TerminalProcessExitOverlay": {
             "capacityTitle": "Git Bash 콘솔 한도에 도달했습니다",
diff --git a/src/renderer/src/i18n/locales/zh.json b/src/renderer/src/i18n/locales/zh.json
index 49560989924..3aa8333b872 100644
--- a/src/renderer/src/i18n/locales/zh.json
+++ b/src/renderer/src/i18n/locales/zh.json
@@ -2756,7 +2756,8 @@
             "e4aa243f8c": "重新启动守护进程",
             "a7e2fd2699": "提交议题",
             "5c8ce20be6": "如果这种情况持续存在，请",
-            "cc6d997c65": "从此处重新启动终端守护进程以清除失效的守护进程状态。"
+            "cc6d997c65": "从此处重新启动终端守护进程以清除失效的守护进程状态。",
+            "remoteTerminalClosed": "远程终端已关闭。"
           },
           "TerminalProcessExitOverlay": {
             "capacityTitle": "已达到 Git Bash 控制台上限",
diff --git a/src/renderer/src/runtime/web-runtime-session-tab-activate-close.test.ts b/src/renderer/src/runtime/web-runtime-session-tab-activate-close.test.ts
index 6ed42c3c841..b535bd31836 100644
--- a/src/renderer/src/runtime/web-runtime-session-tab-activate-close.test.ts
+++ b/src/renderer/src/runtime/web-runtime-session-tab-activate-close.test.ts
@@ -9,6 +9,8 @@ import {
   recordWebSessionCloseIntent,
   resetWebSessionCloseIntentForTests
 } from './web-session-close-intent'
+import { WEB_SESSION_TAB_RPC_TIMEOUT_MS } from './web-session-tab-rpc-timeout'
+import { toHostSessionTabId } from './web-terminal-surface-id'
 import { ENVIRONMENT_ID, WORKTREE_ID, makeSnapshot } from './web-runtime-session-test-harness'
 
 const mocks = vi.hoisted(() => ({
@@ -305,6 +307,83 @@ describe('web runtime session tab actions', () => {
     ).resolves.toBe(outcome)
   })
 
+  // #9194: a host can answer tab_not_found and still keep republishing the surface. The close
+  // intent is what hides the mirror, so letting it age out handed the user back a phantom pane
+  // whose handle is already gone -- and closing it again just restarted the same TTL loop.
+  it.each([
+    ['tab_not_found', true],
+    ['runtime_rpc_timeout', false]
+  ])('keeps a %s close suppressed past the close-intent TTL: %s', async (code, stillPending) => {
+    const runtimeCall = vi
+      .fn()
+      .mockResolvedValueOnce({ id: 'close', ok: false, error: { code, message: code } })
+      .mockResolvedValueOnce({ id: 'list', ok: true, result: makeSnapshot() })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await closeWebRuntimeSessionTab({
+      worktreeId: WORKTREE_ID,
+      tabId: 'local-browser-unified',
+      reason: 'user'
+    })
+
+    const hostTabId = toHostSessionTabId('local-browser-unified')
+    expect(
+      isWebSessionCloseIntentPending(
+        { environmentId: ENVIRONMENT_ID },
+        WORKTREE_ID,
+        hostTabId,
+        Date.now() + 60_000
+      )
+    ).toBe(stillPending)
+  })
+
+  // #9194, slow host: the close RPC can answer `tab_not_found` at any point up to its own timeout,
+  // and a host that still republishes the surface keeps querying the intent in the meantime. That
+  // query is what evicts an expired entry, so a TTL under the RPC timeout leaves nothing for the
+  // durable flip to reach and the pane the user closed comes back.
+  it('keeps a tab_not_found close suppressed when the host answers slower than the old TTL', async () => {
+    const startedAt = 1_700_000_000_000
+    let clock = startedAt
+    const nowSpy = vi.spyOn(Date, 'now').mockImplementation(() => clock)
+    const owner = { environmentId: ENVIRONMENT_ID }
+    const hostTabIds = [toHostSessionTabId('local-browser-unified'), 'host-browser-unified']
+    let pendingWhileHostRepublished: boolean[] = []
+    try {
+      const runtimeCall = vi
+        .fn()
+        .mockImplementationOnce(() => {
+          clock = startedAt + WEB_SESSION_TAB_RPC_TIMEOUT_MS - 1
+          pendingWhileHostRepublished = hostTabIds.map((hostTabId) =>
+            isWebSessionCloseIntentPending(owner, WORKTREE_ID, hostTabId, clock)
+          )
+          return Promise.resolve({
+            id: 'close',
+            ok: false,
+            error: { code: 'tab_not_found', message: 'tab_not_found' }
+          })
+        })
+        .mockResolvedValueOnce({ id: 'list', ok: true, result: makeSnapshot() })
+      vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+      await expect(
+        closeWebRuntimeSessionTab({
+          worktreeId: WORKTREE_ID,
+          tabId: 'local-browser-unified',
+          reason: 'user'
+        })
+      ).resolves.toBe('unknown-tab')
+
+      expect(pendingWhileHostRepublished).toEqual([true, true])
+      expect(
+        hostTabIds.map((hostTabId) =>
+          isWebSessionCloseIntentPending(owner, WORKTREE_ID, hostTabId, clock + 60_000)
+        )
+      ).toEqual([true, true])
+    } finally {
+      nowSpy.mockRestore()
+    }
+  })
+
   it('fails closed when reconnect routes a lifecycle close to an older host', async () => {
     const runtimeCall = vi
       .fn()
diff --git a/src/renderer/src/runtime/web-runtime-session-tab-lifecycle.ts b/src/renderer/src/runtime/web-runtime-session-tab-lifecycle.ts
index a7381f10d6a..56800f3cefb 100644
--- a/src/renderer/src/runtime/web-runtime-session-tab-lifecycle.ts
+++ b/src/renderer/src/runtime/web-runtime-session-tab-lifecycle.ts
@@ -6,11 +6,16 @@ import type {
 import { useAppStore } from '../store'
 import { hasRuntimeRpcErrorCode, unwrapRuntimeRpcResult } from './runtime-rpc-client'
 import { toRuntimeWorktreeSelector } from './runtime-worktree-selector'
-import { clearWebSessionCloseIntent, recordWebSessionCloseIntent } from './web-session-close-intent'
+import {
+  clearWebSessionCloseIntent,
+  makeWebSessionCloseIntentDurable,
+  recordWebSessionCloseIntent
+} from './web-session-close-intent'
 import {
   clearWebSessionFocusIntentIfMatches,
   recordWebSessionFocusIntent
 } from './web-session-focus-intent'
+import { WEB_SESSION_TAB_RPC_TIMEOUT_MS } from './web-session-tab-rpc-timeout'
 import { toHostSessionTabId } from './web-terminal-surface-id'
 import {
   captureRuntimeEnvironmentCall,
@@ -134,7 +139,7 @@ async function callWebRuntimeSessionTabMethod(
             ? { reason: args.reason }
             : {})
       },
-      timeoutMs: 15_000
+      timeoutMs: WEB_SESSION_TAB_RPC_TIMEOUT_MS
     })
     const result = unwrapRuntimeRpcResult(
       response as RuntimeRpcResponse<RuntimeMobileSessionTabCloseResult | undefined>
@@ -157,8 +162,16 @@ async function callWebRuntimeSessionTabMethod(
     if (activationHostTabId) {
       clearWebSessionFocusIntentIfMatches(intentOwner, args.worktreeId, activationHostTabId)
     }
+    // Why the split: only 'tab_not_found' is absence proof (see the outcome doc above). Restoring the
+    // mirror on it hands the user back a pane the host cannot close and whose handle is already gone
+    // (#9194), so keep the suppression and drop its TTL instead. Every other failure is a "not now".
+    const hostHasNoSuchTab = hasRuntimeRpcErrorCode(error, 'tab_not_found')
     for (const hostTabId of closeIntentTabIds) {
-      clearWebSessionCloseIntent(intentOwner, args.worktreeId, hostTabId)
+      if (hostHasNoSuchTab) {
+        makeWebSessionCloseIntentDurable(intentOwner, args.worktreeId, hostTabId)
+      } else {
+        clearWebSessionCloseIntent(intentOwner, args.worktreeId, hostTabId)
+      }
     }
     if (isLifecycleClose) {
       const { acceptReplayedWebSessionTabsSnapshot } = await import('./web-session-tabs-sync')
@@ -171,6 +184,6 @@ async function callWebRuntimeSessionTabMethod(
       `[web-runtime-session] failed to ${isClose ? 'close' : 'activate'} tab:`,
       error instanceof Error ? error.message : String(error)
     )
-    return hasRuntimeRpcErrorCode(error, 'tab_not_found') ? 'unknown-tab' : 'failed'
+    return hostHasNoSuchTab ? 'unknown-tab' : 'failed'
   }
 }
diff --git a/src/renderer/src/runtime/web-session-close-intent.test.ts b/src/renderer/src/runtime/web-session-close-intent.test.ts
index 92ab8dbca96..418a8544840 100644
--- a/src/renderer/src/runtime/web-session-close-intent.test.ts
+++ b/src/renderer/src/runtime/web-session-close-intent.test.ts
@@ -6,8 +6,10 @@ import {
   isWebSessionCloseIntentPending,
   reconcileWebSessionCloseIntents,
   recordWebSessionCloseIntent,
-  resetWebSessionCloseIntentForTests
+  resetWebSessionCloseIntentForTests,
+  WEB_SESSION_CLOSE_INTENT_TTL_MS
 } from './web-session-close-intent'
+import { WEB_SESSION_TAB_RPC_TIMEOUT_MS } from './web-session-tab-rpc-timeout'
 
 const WT = 'repo::/wt'
 const OWNER = { environmentId: 'runtime-a', pairingRevision: 1 }
@@ -26,7 +28,20 @@ describe('web session close intent', () => {
 
   it('expires a never-confirmed close', () => {
     recordWebSessionCloseIntent(OWNER, WT, 'host-tab-1', 1000)
-    expect(isWebSessionCloseIntentPending(OWNER, WT, 'host-tab-1', 12_000)).toBe(false)
+    expect(
+      isWebSessionCloseIntentPending(
+        OWNER,
+        WT,
+        'host-tab-1',
+        1000 + WEB_SESSION_CLOSE_INTENT_TTL_MS + 1
+      )
+    ).toBe(false)
+  })
+
+  // The durable flip in the tab_not_found path can only reach an entry that is still there, so the
+  // TTL must outlast the RPC that produces that answer. Two independent literals would drift.
+  it('outlives the tab RPC that can still answer tab_not_found', () => {
+    expect(WEB_SESSION_CLOSE_INTENT_TTL_MS).toBeGreaterThan(WEB_SESSION_TAB_RPC_TIMEOUT_MS)
   })
 
   it('scopes intents by owner, pairing revision, and worktree', () => {
diff --git a/src/renderer/src/runtime/web-session-close-intent.ts b/src/renderer/src/runtime/web-session-close-intent.ts
index 012dfd81d26..5a80fdf87f3 100644
--- a/src/renderer/src/runtime/web-session-close-intent.ts
+++ b/src/renderer/src/runtime/web-session-close-intent.ts
@@ -1,10 +1,19 @@
 // Why: closing a remote tab prunes the local mirror immediately for responsiveness, so stale pre-close snapshots must not rematerialize it.
 
 import { webSessionIntentOwnerKey, type WebSessionIntentOwner } from './web-session-intent-owner'
+import { WEB_SESSION_TAB_RPC_TIMEOUT_MS } from './web-session-tab-rpc-timeout'
 
-const CLOSE_INTENT_TTL_MS = 10_000
+/**
+ * Why derived rather than a literal: `makeWebSessionCloseIntentDurable` can only flip an entry that
+ * still exists, and the close RPC may answer `tab_not_found` at any point up to its own timeout. A
+ * TTL shorter than that timeout lets a republishing host's pending-check delete the entry mid-call,
+ * the durable flip then no-ops, and the pane the user closed comes back (#9194).
+ */
+const CLOSE_INTENT_ANSWER_GRACE_MS = 5_000
+export const WEB_SESSION_CLOSE_INTENT_TTL_MS =
+  WEB_SESSION_TAB_RPC_TIMEOUT_MS + CLOSE_INTENT_ANSWER_GRACE_MS
 
-type CloseIntent = { recordedAt: number }
+type CloseIntent = { recordedAt: number; durable: boolean }
 
 const pendingCloseByOwnerAndWorktree = new Map<string, Map<string, CloseIntent>>()
 
@@ -28,7 +37,27 @@ export function recordWebSessionCloseIntent(
     byTab = new Map()
     pendingCloseByOwnerAndWorktree.set(partitionKey, byTab)
   }
-  byTab.set(trimmed, { recordedAt: now })
+  byTab.set(trimmed, { recordedAt: now, durable: byTab.get(trimmed)?.durable === true })
+}
+
+/**
+ * Why no TTL: `tab_not_found` is the host's definitive answer that it does not have this tab, yet a
+ * host can keep republishing the surface in its snapshot (#9194). Letting that intent age out
+ * re-materializes a pane whose handle is already gone, and the pane the user just closed comes back
+ * showing "Remote terminal was closed." with no way to dismiss it. The intent still clears the
+ * moment the surface leaves a snapshot, so a host that recovers the tab is never suppressed forever.
+ */
+export function makeWebSessionCloseIntentDurable(
+  owner: WebSessionIntentOwner,
+  worktreeId: string,
+  hostTabId: string
+): void {
+  const intent = pendingCloseByOwnerAndWorktree
+    .get(closeIntentPartitionKey(owner, worktreeId))
+    ?.get(hostTabId)
+  if (intent) {
+    intent.durable = true
+  }
 }
 
 export function isWebSessionCloseIntentPending(
@@ -43,7 +72,7 @@ export function isWebSessionCloseIntentPending(
   if (!intent) {
     return false
   }
-  if (now - intent.recordedAt > CLOSE_INTENT_TTL_MS) {
+  if (!intent.durable && now - intent.recordedAt > WEB_SESSION_CLOSE_INTENT_TTL_MS) {
     byTab!.delete(hostTabId)
     if (byTab!.size === 0) {
       pendingCloseByOwnerAndWorktree.delete(partitionKey)
diff --git a/src/renderer/src/runtime/web-session-tab-rpc-timeout.ts b/src/renderer/src/runtime/web-session-tab-rpc-timeout.ts
new file mode 100644
index 00000000000..876ff56a9c0
--- /dev/null
+++ b/src/renderer/src/runtime/web-session-tab-rpc-timeout.ts
@@ -0,0 +1,5 @@
+/**
+ * The budget for a `session.tabs.*` RPC. Client-side suppression that has to outlive one of these
+ * calls (the close intent) derives its own lifetime from this, so the two cannot drift apart.
+ */
+export const WEB_SESSION_TAB_RPC_TIMEOUT_MS = 15_000

From 34999e328e03e42edd8f0ed2b78dde82edac221f Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 02:49:09 -0700
Subject: [PATCH 42/92] fix(orcad): stop demanding a spawn-helper only macOS
 builds (#18122)

node-pty declares the spawn-helper target inside binding.gyp's OS=="mac"
block and pty.cc execs it only under __APPLE__. Asserting it on
`!== 'win32'` made every Linux orcad boot degraded with
spawn_helper_missing while its terminals worked fine.

Route all four sites through one shared `usesNodePtySpawnHelper`
predicate: the precondition verdict, the prebuilt slot install, the
+x repair, and the prebuilds build script (which threw outright on a
Linux slot build).

Fixes #17844
---
 config/scripts/build-orcad-prebuilds.mjs      |  7 ++--
 src/main/orcad/node-pty-prebuilt-slot.test.ts | 32 +++++++++++++---
 src/main/orcad/node-pty-prebuilt-slot.ts      |  5 ++-
 src/main/orcad/node-pty-precondition.test.ts  | 37 ++++++++++++++++---
 src/main/orcad/node-pty-precondition.ts       |  5 ++-
 src/main/providers/local-pty-utils.ts         |  4 +-
 src/shared/node-pty-spawn-helper.test.ts      | 14 +++++++
 src/shared/node-pty-spawn-helper.ts           | 11 ++++++
 8 files changed, 96 insertions(+), 19 deletions(-)
 create mode 100644 src/shared/node-pty-spawn-helper.test.ts
 create mode 100644 src/shared/node-pty-spawn-helper.ts

diff --git a/config/scripts/build-orcad-prebuilds.mjs b/config/scripts/build-orcad-prebuilds.mjs
index efbafbe9a1b..2d818d5d255 100644
--- a/config/scripts/build-orcad-prebuilds.mjs
+++ b/config/scripts/build-orcad-prebuilds.mjs
@@ -177,10 +177,11 @@ function build() {
   copyFileSync(builtBinary, join(slotDir, 'pty.node'))
   console.log(`[orcad-prebuilds] stored ${slot}/pty.node`)
 
-  // Why spawn-helper ships too: on Unix node-pty posix_spawns build/Release/spawn-helper,
+  // Why spawn-helper ships too: on macOS node-pty posix_spawns build/Release/spawn-helper,
   // so a slot without it installs cleanly and then fails ENOENT the first time a user
-  // opens a terminal. Windows has no spawn-helper.
-  if (process.platform !== 'win32') {
+  // opens a terminal. binding.gyp builds the helper only under OS=="mac"; every other
+  // platform forks directly, so demanding one there fails a healthy Linux slot build.
+  if (process.platform === 'darwin') {
     const helperSource = join(dirname(builtBinary), 'spawn-helper')
     if (!existsSync(helperSource)) {
       throw new Error(`[orcad-prebuilds] spawn-helper missing at ${helperSource}`)
diff --git a/src/main/orcad/node-pty-prebuilt-slot.test.ts b/src/main/orcad/node-pty-prebuilt-slot.test.ts
index 00880eee1e5..85aafddc7a1 100644
--- a/src/main/orcad/node-pty-prebuilt-slot.test.ts
+++ b/src/main/orcad/node-pty-prebuilt-slot.test.ts
@@ -17,6 +17,14 @@ const LINUX_GLIBC: NativeHostAbi = {
   nodeAbi: '127'
 }
 
+const DARWIN_ARM64: NativeHostAbi = {
+  platform: 'darwin',
+  arch: 'arm64',
+  libc: 'none',
+  glibcVersion: null,
+  nodeAbi: '127'
+}
+
 const dirs: string[] = []
 const temp = (): string => {
   const dir = mkdtempSync(join(tmpdir(), 'orcad-slot-'))
@@ -48,18 +56,32 @@ describe('resolveOrcadPrebuildsDir', () => {
 })
 
 describe('installPrebuiltSlot', () => {
-  it('installs the slot binary and spawn-helper into build/Release', () => {
+  it('installs the slot binary and spawn-helper into build/Release on macOS', () => {
+    const prebuilds = temp()
+    const nodePtyDir = temp()
+    stageSlot(prebuilds, 'darwin-arm64')
+
+    const outcome = installPrebuiltSlot({ abi: DARWIN_ARM64, nodePtyDir, prebuildsDir: prebuilds })
+
+    expect(outcome).toEqual({ installed: true, slot: 'darwin-arm64', spawnHelper: true })
+    expect(existsSync(join(nodePtyDir, 'build', 'Release', 'pty.node'))).toBe(true)
+    // Without the executable bit every spawn fails EACCES at the moment a user opens a terminal.
+    const helper = statSync(join(nodePtyDir, 'build', 'Release', 'spawn-helper'))
+    expect(helper.mode & 0o111).not.toBe(0)
+  })
+
+  it('installs a Linux slot without claiming a spawn-helper it never execs', () => {
+    // node-pty builds spawn-helper only under binding.gyp's OS=="mac"; reporting one off
+    // macOS is what made every Linux orcad boot degraded on spawn_helper_missing (#17844).
     const prebuilds = temp()
     const nodePtyDir = temp()
     stageSlot(prebuilds, 'linux-x64-glibc')
 
     const outcome = installPrebuiltSlot({ abi: LINUX_GLIBC, nodePtyDir, prebuildsDir: prebuilds })
 
-    expect(outcome).toEqual({ installed: true, slot: 'linux-x64-glibc', spawnHelper: true })
+    expect(outcome).toEqual({ installed: true, slot: 'linux-x64-glibc', spawnHelper: false })
     expect(existsSync(join(nodePtyDir, 'build', 'Release', 'pty.node'))).toBe(true)
-    // Without the executable bit every spawn fails EACCES at the moment a user opens a terminal.
-    const helper = statSync(join(nodePtyDir, 'build', 'Release', 'spawn-helper'))
-    expect(helper.mode & 0o111).not.toBe(0)
+    expect(existsSync(join(nodePtyDir, 'build', 'Release', 'spawn-helper'))).toBe(false)
   })
 
   it('will not load a glibc slot on a musl host', () => {
diff --git a/src/main/orcad/node-pty-prebuilt-slot.ts b/src/main/orcad/node-pty-prebuilt-slot.ts
index d0623689902..7dcdebba3da 100644
--- a/src/main/orcad/node-pty-prebuilt-slot.ts
+++ b/src/main/orcad/node-pty-prebuilt-slot.ts
@@ -16,6 +16,7 @@
 import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs'
 import { dirname, join } from 'node:path'
 import process from 'node:process'
+import { usesNodePtySpawnHelper } from '../../shared/node-pty-spawn-helper'
 import { nativeSlotName, type NativeHostAbi } from './native-host-abi'
 
 export type PrebuiltSlotManifest = {
@@ -103,11 +104,11 @@ export function installPrebuiltSlot(options: {
   mkdirSync(releaseDir, { recursive: true })
   copyFileSync(source, join(releaseDir, 'pty.node'))
 
-  // Why this matters as much as pty.node: on Unix node-pty posix_spawns
+  // Why this matters as much as pty.node: on macOS node-pty posix_spawns
   // build/Release/spawn-helper. Without it every spawn fails with ENOENT at the moment
   // a user opens a terminal, long after the "install succeeded" line.
   let spawnHelper = false
-  if (options.abi.platform !== 'win32') {
+  if (usesNodePtySpawnHelper(options.abi.platform)) {
     const helperSource = join(prebuildsDir, slot, 'spawn-helper')
     if (existsSync(helperSource)) {
       const helperDest = join(releaseDir, 'spawn-helper')
diff --git a/src/main/orcad/node-pty-precondition.test.ts b/src/main/orcad/node-pty-precondition.test.ts
index fadb144d1ff..76d842a9456 100644
--- a/src/main/orcad/node-pty-precondition.test.ts
+++ b/src/main/orcad/node-pty-precondition.test.ts
@@ -31,10 +31,10 @@ const realNodePtyLoads = ((): boolean => {
   if (!existsSync(REAL_PTY_NODE)) {
     return false
   }
-  // Why spawn-helper too: a slot without it is legitimately 'degraded', so a test that
-  // expects 'ok' has an unsatisfiable premise on a host that lacks it. CI has the
-  // binding but not the helper, which is what made the previous gate insufficient.
-  if (process.platform !== 'win32' && !existsSync(REAL_SPAWN_HELPER)) {
+  // Why spawn-helper too: on macOS a slot without it is legitimately 'degraded', so a
+  // test that expects 'ok' has an unsatisfiable premise on a host that lacks it. Only
+  // macOS builds the helper, so gating other platforms on it never lets them run.
+  if (process.platform === 'darwin' && !existsSync(REAL_SPAWN_HELPER)) {
     return false
   }
   const probe = spawnSync(process.execPath, ['-e', `require(${JSON.stringify(REAL_PTY_NODE)})`], {
@@ -240,8 +240,8 @@ describe('checkNodePtyPrecondition', () => {
 
   // Why gated on the real binding: this asserts a LOAD outcome, so it needs a pty.node
   // built for the Node ABI. CI's shard never runs ensure-native-runtime, so the copy
-  // ENOENT'd there.
-  it.runIf(process.platform !== 'win32' && realNodePtyLoads)(
+  // ENOENT'd there. macOS only — it is the only platform that execs spawn-helper.
+  it.runIf(process.platform === 'darwin' && realNodePtyLoads)(
     'degrades rather than blocks when only spawn-helper is missing',
     () => {
       // node-pty posix_spawns spawn-helper, so this host loads fine and then fails ENOENT
@@ -258,6 +258,31 @@ describe('checkNodePtyPrecondition', () => {
     }
   )
 
+  // Same staging as above, read through a Linux ABI: node-pty builds spawn-helper only
+  // under binding.gyp's OS=="mac", so demanding one here called every healthy Linux
+  // orcad degraded while its terminals worked (#17844). Gated on a loadable binding for
+  // the same reason as the macOS case; the ABI is what makes it a Linux verdict.
+  it.runIf(process.platform !== 'win32' && realNodePtyLoads)(
+    'does not call a Linux host degraded over a spawn-helper it never execs',
+    () => {
+      const dir = stageNodePty()
+      cpSync(
+        join(REAL_NODE_PTY, 'build', 'Release', 'pty.node'),
+        join(dir, 'build', 'Release', 'pty.node')
+      )
+      expect(existsSync(join(dir, 'build', 'Release', 'spawn-helper'))).toBe(false)
+
+      const verdict = checkNodePtyPrecondition({
+        nodePtyDir: dir,
+        prebuildsDir: null,
+        abi: { platform: 'linux', arch: 'x64', libc: 'glibc', glibcVersion: '2.31', nodeAbi: '127' }
+      })
+
+      expect(verdict).toMatchObject({ status: 'ok', slot: 'linux-x64-glibc' })
+      expect(verdict.reason).toBeUndefined()
+    }
+  )
+
   // Why split: the "ok" half needs a REAL loadable pty.node, which only exists after
   // `ensure-native-runtime --runtime=node`. CI's shard runs vitest directly, so copying
   // from node_modules ENOENT'd there. Slot *placement* is the logic worth checking on
diff --git a/src/main/orcad/node-pty-precondition.ts b/src/main/orcad/node-pty-precondition.ts
index 7d633bd0f9a..ff41a14cf81 100644
--- a/src/main/orcad/node-pty-precondition.ts
+++ b/src/main/orcad/node-pty-precondition.ts
@@ -19,6 +19,7 @@ import { existsSync, accessSync, constants } from 'node:fs'
 import { dirname, join } from 'node:path'
 import process from 'node:process'
 import { runProcessSync, type ProcessResult } from '../../shared/child-process/run-process'
+import { usesNodePtySpawnHelper } from '../../shared/node-pty-spawn-helper'
 import type { RuntimeTerminalUnavailableReason } from '../../shared/runtime-types'
 import {
   buildToolchainProbeCommand,
@@ -302,12 +303,12 @@ export function checkNodePtyPrecondition(
     }
   }
 
-  // Loaded. The remaining way terminals fail is spawn-time: node-pty posix_spawns
+  // Loaded. The remaining way terminals fail is spawn-time: on macOS node-pty posix_spawns
   // build/Release/spawn-helper, and a missing one turns every terminal.create into ENOENT
   // on a host that otherwise looks healthy. That is a degradation, not a boot blocker.
   const outcome = readNodePtyProbeOutcome(result)
   const loadedDir = outcome.kind === 'loaded' ? outcome.loadedDir : null
-  if (abi.platform !== 'win32') {
+  if (usesNodePtySpawnHelper(abi.platform)) {
     const helper = join(loadedDir || join(nodePtyDir, 'build', 'Release'), 'spawn-helper')
     if (!isExecutableFile(helper)) {
       return {
diff --git a/src/main/providers/local-pty-utils.ts b/src/main/providers/local-pty-utils.ts
index 5649db65534..735393449f2 100644
--- a/src/main/providers/local-pty-utils.ts
+++ b/src/main/providers/local-pty-utils.ts
@@ -1,6 +1,7 @@
 import { basename, isAbsolute, join } from 'node:path'
 import { existsSync, accessSync, statSync, chmodSync, constants as fsConstants } from 'node:fs'
 import type * as pty from 'node-pty'
+import { usesNodePtySpawnHelper } from '../../shared/node-pty-spawn-helper'
 import {
   hostReportsChildExitStatus,
   wrapShellSpawnForMacosTccAttribution
@@ -82,9 +83,10 @@ export function resolveUnixShellPath(shellPath: string): string {
  * Why: when Electron packages the app via asar, the native spawn-helper
  * binary may lose its +x permission. This function detects and repairs
  * that so pty.spawn() does not fail with EACCES on first launch.
+ * macOS only — no other platform builds or execs the helper.
  */
 export function ensureNodePtySpawnHelperExecutable(): void {
-  if (didEnsureSpawnHelperExecutable || process.platform === 'win32') {
+  if (didEnsureSpawnHelperExecutable || !usesNodePtySpawnHelper(process.platform)) {
     return
   }
   didEnsureSpawnHelperExecutable = true
diff --git a/src/shared/node-pty-spawn-helper.test.ts b/src/shared/node-pty-spawn-helper.test.ts
new file mode 100644
index 00000000000..4562c2bc9b7
--- /dev/null
+++ b/src/shared/node-pty-spawn-helper.test.ts
@@ -0,0 +1,14 @@
+import { describe, expect, it } from 'vitest'
+import { usesNodePtySpawnHelper } from './node-pty-spawn-helper'
+
+describe('usesNodePtySpawnHelper', () => {
+  it('is macOS only', () => {
+    // The predicate this file exists for: node-pty's binding.gyp declares the
+    // spawn-helper target inside OS=="mac". Reading it as "every non-Windows platform"
+    // is what reported spawn_helper_missing on healthy Linux hosts (#17844).
+    expect(usesNodePtySpawnHelper('darwin')).toBe(true)
+    for (const platform of ['linux', 'win32', 'freebsd', 'openbsd', 'sunos', 'aix']) {
+      expect(usesNodePtySpawnHelper(platform)).toBe(false)
+    }
+  })
+})
diff --git a/src/shared/node-pty-spawn-helper.ts b/src/shared/node-pty-spawn-helper.ts
new file mode 100644
index 00000000000..c3e40df101a
--- /dev/null
+++ b/src/shared/node-pty-spawn-helper.ts
@@ -0,0 +1,11 @@
+/**
+ * Whether node-pty execs its `spawn-helper` binary on a platform.
+ *
+ * Only macOS: binding.gyp declares the `spawn-helper` target inside `OS=="mac"`, and
+ * `src/unix/pty.cc` reads the helper path only under `#if defined(__APPLE__)`. Every
+ * other platform forks directly, so requiring the helper there calls a working host
+ * broken.
+ */
+export function usesNodePtySpawnHelper(platform: string): boolean {
+  return platform === 'darwin'
+}

From 0da52453a75cc75b369a0a71969780625921d485 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 02:55:38 -0700
Subject: [PATCH 43/92] fix(settings): surface why CLI registration failed
 (#18125)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The Settings CLI panel treated every resolved `cli:install` as a success,
so a refusal that arrives as data (conflict, missing launcher, unreadable
Windows PATH) produced a green "Registered `orca` in PATH." toast while the
switch stayed off. A thrown refusal fared little better: the raw Electron
`Error invoking remote method 'cli:install': ...` string went into a toast
that then disappeared, leaving the panel indistinguishable from "not yet
installed".

Inspect the returned status with the predicate the onboarding and
agent-skill flows already use (`state !== 'installed'`), unwrap the IPC
transport prefix off thrown installer messages, and persist the existing
main-process reason inline per STYLEGUIDE (toasts disappear; errors the
user must act on stay inline). No new error taxonomy — the reasons already
carry path and remedy; a conflict status, which names the path but not the
remedy, gets the installer's own remedy sentence.

Closes #3952
---
 .../CliSection.install-failure.test.tsx       | 154 ++++++++++++++++++
 .../src/components/settings/CliSection.tsx    | 113 +++++--------
 .../settings/cli-install-failure.test.ts      | 108 ++++++++++++
 .../settings/cli-install-failure.ts           |  40 +++++
 .../settings/use-cli-registration-actions.ts  | 127 +++++++++++++++
 src/renderer/src/i18n/locales/en.json         |   4 +-
 6 files changed, 472 insertions(+), 74 deletions(-)
 create mode 100644 src/renderer/src/components/settings/CliSection.install-failure.test.tsx
 create mode 100644 src/renderer/src/components/settings/cli-install-failure.test.ts
 create mode 100644 src/renderer/src/components/settings/cli-install-failure.ts
 create mode 100644 src/renderer/src/components/settings/use-cli-registration-actions.ts

diff --git a/src/renderer/src/components/settings/CliSection.install-failure.test.tsx b/src/renderer/src/components/settings/CliSection.install-failure.test.tsx
new file mode 100644
index 00000000000..414a5ace240
--- /dev/null
+++ b/src/renderer/src/components/settings/CliSection.install-failure.test.tsx
@@ -0,0 +1,154 @@
+// @vitest-environment happy-dom
+
+import { act, cleanup, render, screen } from '@testing-library/react'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { getDefaultSettings } from '../../../../shared/constants'
+import type { CliInstallStatus } from '../../../../shared/cli-install-types'
+import { CliSection } from './CliSection'
+
+const toasts = vi.hoisted(() => ({ error: vi.fn(), success: vi.fn() }))
+const dialog = vi.hoisted(() => ({
+  props: null as null | { onInstall: () => Promise<void>; open: boolean }
+}))
+
+vi.mock('sonner', () => ({ toast: toasts }))
+
+vi.mock('@/hooks/useInstalledAgentSkills', () => ({
+  GLOBAL_AGENT_SKILL_SOURCE_KINDS: ['global'],
+  useInstalledAgentSkill: () => ({
+    installed: false,
+    loading: false,
+    error: null,
+    refresh: vi.fn()
+  })
+}))
+
+vi.mock('@/hooks/useActiveProjectSkillRuntime', () => ({
+  useActiveProjectSkillRuntime: () => ({ canUseLocalSkillFreshness: true })
+}))
+
+vi.mock('./AgentSkillSetupPanel', () => ({
+  AgentSkillSetupPanel: () => <div data-testid="agent-skill-setup-panel" />
+}))
+
+vi.mock('./WslCliRegistration', () => ({ WslCliRegistration: () => null }))
+
+vi.mock('./CliRegistrationDialog', () => ({
+  CliRegistrationDialog: function CliRegistrationDialog(props: {
+    onInstall: () => Promise<void>
+    open: boolean
+  }) {
+    dialog.props = props
+    return null
+  }
+}))
+
+function notInstalledStatus(overrides: Partial<CliInstallStatus> = {}): CliInstallStatus {
+  return {
+    platform: 'darwin',
+    commandName: 'orca',
+    commandPath: '/usr/local/bin/orca',
+    pathDirectory: '/usr/local/bin',
+    pathConfigured: true,
+    launcherPath: '/Applications/Orca.app/Contents/Resources/bin/orca',
+    installMethod: 'symlink',
+    supported: true,
+    state: 'not_installed',
+    currentTarget: null,
+    unsupportedReason: null,
+    detail: 'Register /usr/local/bin/orca to use Orca from the terminal.',
+    ...overrides
+  }
+}
+
+async function renderCliSectionAndInstall(install: () => Promise<CliInstallStatus>): Promise<void> {
+  Object.assign(window, {
+    api: {
+      cli: {
+        getInstallStatus: vi.fn().mockResolvedValue(notInstalledStatus()),
+        getWslInstallStatus: vi.fn(),
+        install: vi.fn(install),
+        remove: vi.fn()
+      },
+      shell: { openPath: vi.fn() }
+    }
+  })
+
+  render(<CliSection currentPlatform="darwin" settings={getDefaultSettings('/tmp')} />)
+  await screen.findByRole('switch')
+  await act(async () => {
+    await dialog.props?.onInstall()
+  })
+}
+
+afterEach(() => {
+  cleanup()
+  dialog.props = null
+  toasts.error.mockReset()
+  toasts.success.mockReset()
+})
+
+describe('CliSection install failure surfacing', () => {
+  it('shows the thrown conflict reason and its remedy instead of a success toast', async () => {
+    await renderCliSectionAndInstall(async () => {
+      throw new Error(
+        "Error invoking remote method 'cli:install': Error: Refusing to replace non-Orca " +
+          'command at /usr/local/bin/orca. Remove it and register again if it is no longer needed.'
+      )
+    })
+
+    const alert = screen.getByRole('alert')
+    expect(alert.textContent).toContain('Failed to register `orca` in PATH.')
+    expect(alert.textContent).toContain(
+      'Refusing to replace non-Orca command at /usr/local/bin/orca.'
+    )
+    expect(alert.textContent).toContain('Remove it and register again if it is no longer needed.')
+    // The Electron transport wrapper must not leak into the panel.
+    expect(alert.textContent).not.toContain('invoking remote method')
+    expect(toasts.success).not.toHaveBeenCalled()
+    expect(toasts.error).toHaveBeenCalledTimes(1)
+  })
+
+  it('names the path and the remedy when install resolves with a conflict', async () => {
+    await renderCliSectionAndInstall(async () =>
+      notInstalledStatus({
+        state: 'conflict',
+        detail: '/usr/local/bin/orca exists but is not an Orca symlink.'
+      })
+    )
+
+    const alert = screen.getByRole('alert')
+    expect(alert.textContent).toContain('/usr/local/bin/orca exists but is not an Orca symlink.')
+    expect(alert.textContent).toContain(
+      'Remove /usr/local/bin/orca and register again if it is no longer needed.'
+    )
+    expect(toasts.success).not.toHaveBeenCalled()
+  })
+
+  it('does not claim success when install resolves without registering', async () => {
+    await renderCliSectionAndInstall(async () =>
+      notInstalledStatus({
+        state: 'unsupported',
+        supported: false,
+        unsupportedReason: 'launcher_missing',
+        detail: 'The bundled CLI launcher is missing from this Orca build.'
+      })
+    )
+
+    expect(screen.getByRole('alert').textContent).toContain(
+      'The bundled CLI launcher is missing from this Orca build.'
+    )
+    expect(toasts.success).not.toHaveBeenCalled()
+    expect(toasts.error).toHaveBeenCalledTimes(1)
+  })
+
+  it('keeps the success toast and shows no failure notice when registration lands', async () => {
+    await renderCliSectionAndInstall(async () =>
+      notInstalledStatus({ state: 'installed', detail: null })
+    )
+
+    expect(screen.queryByRole('alert')).toBeNull()
+    expect(toasts.success).toHaveBeenCalledTimes(1)
+    expect(toasts.error).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/components/settings/CliSection.tsx b/src/renderer/src/components/settings/CliSection.tsx
index 32cbb3e5766..364a866df5b 100644
--- a/src/renderer/src/components/settings/CliSection.tsx
+++ b/src/renderer/src/components/settings/CliSection.tsx
@@ -33,6 +33,7 @@ import {
   getWslCliDistroRequest
 } from './CliSkillRuntimeSetup'
 import { WslCliRegistration } from './WslCliRegistration'
+import { useCliRegistrationActions } from './use-cli-registration-actions'
 import { useLocalCliSkillFreshnessName } from './use-local-cli-skill-freshness-name'
 import { translate } from '@/i18n/i18n'
 
@@ -81,7 +82,6 @@ export function CliSection({
   const [status, setStatus] = useState<CliInstallStatus | null>(null)
   const [loading, setLoading] = useState(true)
   const [dialogOpen, setDialogOpen] = useState(false)
-  const [busyAction, setBusyAction] = useState<'install' | 'remove' | null>(null)
   const mountedRef = useMountedRef()
   const agentRuntime = useMemo(
     () =>
@@ -132,8 +132,19 @@ export function CliSection({
     [mountedRef]
   )
 
+  const closeDialog = useCallback((): void => setDialogOpen(false), [])
+  const commandName = status?.commandName ?? getFallbackCommandName(currentPlatform)
+  const { busyAction, installFailure, clearInstallFailure, install, remove } =
+    useCliRegistrationActions({
+      commandName,
+      mountedRef,
+      onStatusChange: handleStatusChange,
+      onSettled: closeDialog
+    })
+
   const refreshStatus = useCallback(async (): Promise<void> => {
     setLoading(true)
+    clearInstallFailure()
     try {
       handleStatusChange(await window.api.cli.getInstallStatus())
     } catch (error) {
@@ -152,7 +163,7 @@ export function CliSection({
         setLoading(false)
       }
     }
-  }, [handleStatusChange, mountedRef])
+  }, [clearInstallFailure, handleStatusChange, mountedRef])
 
   useEffect(() => {
     void refreshStatus()
@@ -163,78 +174,9 @@ export function CliSection({
   const isSupported = status?.supported ?? false
   const isBrowserManaged = status?.unsupportedReason === 'launch_mode_unavailable'
   const revealLabel = getRevealLabel(currentPlatform)
-  const commandName = status?.commandName ?? getFallbackCommandName(currentPlatform)
   const canRevealCommandPath =
     status?.commandPath != null && ['installed', 'stale', 'conflict'].includes(status.state)
 
-  const handleInstall = async (): Promise<void> => {
-    setBusyAction('install')
-    try {
-      const next = await window.api.cli.install()
-      if (mountedRef.current) {
-        setStatus(next)
-        setDialogOpen(false)
-        toast.success(
-          translate(
-            'auto.components.settings.CliSection.9cbcd31338',
-            'Registered `{{value0}}` in PATH.',
-            { value0: next.commandName }
-          )
-        )
-      }
-    } catch (error) {
-      if (mountedRef.current) {
-        toast.error(
-          error instanceof Error
-            ? error.message
-            : translate(
-                'auto.components.settings.CliSection.a2b13efa94',
-                'Failed to register `{{value0}}` in PATH.',
-                { value0: commandName }
-              )
-        )
-      }
-    } finally {
-      if (mountedRef.current) {
-        setBusyAction(null)
-      }
-    }
-  }
-
-  const handleRemove = async (): Promise<void> => {
-    setBusyAction('remove')
-    try {
-      const next = await window.api.cli.remove()
-      if (mountedRef.current) {
-        setStatus(next)
-        setDialogOpen(false)
-        toast.success(
-          translate(
-            'auto.components.settings.CliSection.af5540930c',
-            'Removed `{{value0}}` from PATH.',
-            { value0: next.commandName }
-          )
-        )
-      }
-    } catch (error) {
-      if (mountedRef.current) {
-        toast.error(
-          error instanceof Error
-            ? error.message
-            : translate(
-                'auto.components.settings.CliSection.d77352f2df',
-                'Failed to remove `{{value0}}` from PATH.',
-                { value0: commandName }
-              )
-        )
-      }
-    } finally {
-      if (mountedRef.current) {
-        setBusyAction(null)
-      }
-    }
-  }
-
   return (
     <section className="space-y-4" data-settings-section="cli">
       <div className="space-y-1">
@@ -336,6 +278,31 @@ export function CliSection({
           <p className="text-xs text-muted-foreground">{status.detail}</p>
         ) : null}
 
+        {installFailure ? (
+          <div
+            role="alert"
+            className="space-y-1 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive"
+          >
+            <p className="font-medium">
+              {translate(
+                'auto.components.settings.CliSection.a2b13efa94',
+                'Failed to register `{{value0}}` in PATH.',
+                { value0: commandName }
+              )}
+            </p>
+            <p className="leading-snug">{installFailure.reason}</p>
+            {installFailure.conflictCommandPath ? (
+              <p className="leading-snug">
+                {translate(
+                  'auto.components.settings.CliSection.installFailureConflictRemedy',
+                  'Remove {{value0}} and register again if it is no longer needed.',
+                  { value0: installFailure.conflictCommandPath }
+                )}
+              </p>
+            ) : null}
+          </div>
+        ) : null}
+
         <div className="flex items-center gap-2">
           {status?.commandPath ? (
             <Button
@@ -408,9 +375,9 @@ export function CliSection({
         commandPath={status?.commandPath}
         isEnabled={isEnabled}
         isSupported={isSupported}
-        onInstall={handleInstall}
+        onInstall={install}
         onOpenChange={setDialogOpen}
-        onRemove={handleRemove}
+        onRemove={remove}
         open={dialogOpen}
       />
     </section>
diff --git a/src/renderer/src/components/settings/cli-install-failure.test.ts b/src/renderer/src/components/settings/cli-install-failure.test.ts
new file mode 100644
index 00000000000..dfd39f15649
--- /dev/null
+++ b/src/renderer/src/components/settings/cli-install-failure.test.ts
@@ -0,0 +1,108 @@
+import { describe, expect, it } from 'vitest'
+import type { CliInstallStatus } from '../../../../shared/cli-install-types'
+import { readCliInstallFailure, readCliInstallRejection } from './cli-install-failure'
+
+const FALLBACK = 'Orca could not finish CLI registration and reported no reason.'
+
+function cliStatus(overrides: Partial<CliInstallStatus> = {}): CliInstallStatus {
+  return {
+    platform: 'darwin',
+    commandName: 'orca',
+    commandPath: '/usr/local/bin/orca',
+    pathDirectory: '/usr/local/bin',
+    pathConfigured: true,
+    launcherPath: '/Applications/Orca.app/Contents/Resources/bin/orca',
+    installMethod: 'symlink',
+    supported: true,
+    state: 'installed',
+    currentTarget: null,
+    unsupportedReason: null,
+    detail: null,
+    ...overrides
+  }
+}
+
+describe('readCliInstallFailure', () => {
+  it('reports no failure for a landed registration', () => {
+    expect(readCliInstallFailure(cliStatus(), FALLBACK)).toBeNull()
+  })
+
+  it('surfaces the main-process reason verbatim without re-classifying it', () => {
+    expect(
+      readCliInstallFailure(
+        cliStatus({
+          state: 'unsupported',
+          supported: false,
+          unsupportedReason: 'launcher_missing',
+          detail: 'The bundled CLI launcher is missing from this Orca build.'
+        }),
+        FALLBACK
+      )
+    ).toEqual({
+      reason: 'The bundled CLI launcher is missing from this Orca build.',
+      conflictCommandPath: null
+    })
+  })
+
+  it('names the conflicting path so the panel can offer the remedy', () => {
+    expect(
+      readCliInstallFailure(
+        cliStatus({
+          state: 'conflict',
+          detail: '/usr/local/bin/orca exists but is not an Orca symlink.'
+        }),
+        FALLBACK
+      )
+    ).toEqual({
+      reason: '/usr/local/bin/orca exists but is not an Orca symlink.',
+      conflictCommandPath: '/usr/local/bin/orca'
+    })
+  })
+
+  it('falls back when the main process reported no detail', () => {
+    expect(readCliInstallFailure(cliStatus({ state: 'not_installed' }), FALLBACK)).toEqual({
+      reason: FALLBACK,
+      conflictCommandPath: null
+    })
+  })
+})
+
+describe('readCliInstallRejection', () => {
+  it('strips the Electron transport prefix off the installer message', () => {
+    expect(
+      readCliInstallRejection(
+        new Error(
+          "Error invoking remote method 'cli:install': Error: Refusing to replace non-Orca " +
+            'command at /usr/local/bin/orca. Remove it and register again if it is no longer needed.'
+        ),
+        FALLBACK
+      )
+    ).toEqual({
+      reason:
+        'Refusing to replace non-Orca command at /usr/local/bin/orca. ' +
+        'Remove it and register again if it is no longer needed.',
+      conflictCommandPath: null
+    })
+  })
+
+  it('keeps the registration-lock remedy that names the lock file', () => {
+    const failure = readCliInstallRejection(
+      new Error(
+        "Error invoking remote method 'cli:install': Error: Timed out waiting for another Orca " +
+          'process to finish CLI registration (waited 330s). If no other Orca is running, remove ' +
+          '/home/u/.cache/orca/appimage/.cli-registration.lock and retry.'
+      ),
+      FALLBACK
+    )
+
+    expect(failure.reason).toContain('.cli-registration.lock and retry.')
+    expect(failure.reason.startsWith('Timed out waiting')).toBe(true)
+  })
+
+  it('falls back for a non-Error rejection with no message', () => {
+    expect(readCliInstallRejection(new Error('   '), FALLBACK)).toEqual({
+      reason: FALLBACK,
+      conflictCommandPath: null
+    })
+  })
+})
diff --git a/src/renderer/src/components/settings/cli-install-failure.ts b/src/renderer/src/components/settings/cli-install-failure.ts
new file mode 100644
index 00000000000..8ca55a43299
--- /dev/null
+++ b/src/renderer/src/components/settings/cli-install-failure.ts
@@ -0,0 +1,40 @@
+import type { CliInstallStatus } from '../../../../shared/cli-install-types'
+
+// Why: Electron re-wraps a rejected `ipcMain.handle` as
+// `Error invoking remote method '<channel>': Error: <message>`, so the installer's
+// own sentence is buried behind transport noise by the time it reaches the panel.
+const IPC_INVOKE_PREFIX = /^Error invoking remote method '[^']*':\s*(?:Error:\s*)?/
+
+export type CliInstallFailure = {
+  /** The main-process reason verbatim; installer throws already embed their own remedy. */
+  reason: string
+  /** Set only for a conflict, whose status detail names the path but stops short of the remedy. */
+  conflictCommandPath: string | null
+}
+
+/**
+ * A registration call that resolved without landing. The main process already
+ * reported why in `detail`, so this only decides that it failed — it does not
+ * re-classify the reason.
+ */
+export function readCliInstallFailure(
+  status: CliInstallStatus,
+  fallbackReason: string
+): CliInstallFailure | null {
+  if (status.state === 'installed') {
+    return null
+  }
+  return {
+    reason: status.detail?.trim() || fallbackReason,
+    conflictCommandPath: status.state === 'conflict' ? status.commandPath : null
+  }
+}
+
+/** A registration call that threw: unwrap the transport prefix off the installer's message. */
+export function readCliInstallRejection(error: unknown, fallbackReason: string): CliInstallFailure {
+  const message = error instanceof Error ? error.message : String(error)
+  return {
+    reason: message.replace(IPC_INVOKE_PREFIX, '').trim() || fallbackReason,
+    conflictCommandPath: null
+  }
+}
diff --git a/src/renderer/src/components/settings/use-cli-registration-actions.ts b/src/renderer/src/components/settings/use-cli-registration-actions.ts
new file mode 100644
index 00000000000..29737764e9c
--- /dev/null
+++ b/src/renderer/src/components/settings/use-cli-registration-actions.ts
@@ -0,0 +1,127 @@
+import { useCallback, useState, type MutableRefObject } from 'react'
+import { toast } from 'sonner'
+import type { CliInstallStatus } from '../../../../shared/cli-install-types'
+import { translate } from '@/i18n/i18n'
+import {
+  readCliInstallFailure,
+  readCliInstallRejection,
+  type CliInstallFailure
+} from './cli-install-failure'
+
+type CliRegistrationActionsOptions = {
+  commandName: string
+  mountedRef: MutableRefObject<boolean>
+  onStatusChange: (status: CliInstallStatus) => void
+  onSettled: () => void
+}
+
+export type CliRegistrationActions = {
+  busyAction: 'install' | 'remove' | null
+  installFailure: CliInstallFailure | null
+  clearInstallFailure: () => void
+  install: () => Promise<void>
+  remove: () => Promise<void>
+}
+
+function unknownReason(): string {
+  return translate(
+    'auto.components.settings.CliSection.installFailureUnknownReason',
+    'Orca could not finish CLI registration and reported no reason.'
+  )
+}
+
+function failedTitle(commandName: string): string {
+  return translate(
+    'auto.components.settings.CliSection.a2b13efa94',
+    'Failed to register `{{value0}}` in PATH.',
+    { value0: commandName }
+  )
+}
+
+export function useCliRegistrationActions({
+  commandName,
+  mountedRef,
+  onStatusChange,
+  onSettled
+}: CliRegistrationActionsOptions): CliRegistrationActions {
+  const [busyAction, setBusyAction] = useState<'install' | 'remove' | null>(null)
+  const [installFailure, setInstallFailure] = useState<CliInstallFailure | null>(null)
+  const clearInstallFailure = useCallback((): void => setInstallFailure(null), [])
+
+  const install = useCallback(async (): Promise<void> => {
+    setBusyAction('install')
+    try {
+      const next = await window.api.cli.install()
+      if (!mountedRef.current) {
+        return
+      }
+      onStatusChange(next)
+      onSettled()
+      // Why: `install()` resolves with the post-registration status, so a refusal
+      // (conflict, unsupported build, unreadable PATH) arrives as data, not a throw.
+      const failure = readCliInstallFailure(next, unknownReason())
+      setInstallFailure(failure)
+      if (failure) {
+        toast.error(failedTitle(next.commandName), { description: failure.reason })
+        return
+      }
+      toast.success(
+        translate(
+          'auto.components.settings.CliSection.9cbcd31338',
+          'Registered `{{value0}}` in PATH.',
+          { value0: next.commandName }
+        )
+      )
+    } catch (error) {
+      if (!mountedRef.current) {
+        return
+      }
+      const failure = readCliInstallRejection(error, unknownReason())
+      setInstallFailure(failure)
+      // Why: closing reveals the persistent notice the toast is only a preview of.
+      onSettled()
+      toast.error(failedTitle(commandName), { description: failure.reason })
+    } finally {
+      if (mountedRef.current) {
+        setBusyAction(null)
+      }
+    }
+  }, [commandName, mountedRef, onSettled, onStatusChange])
+
+  const remove = useCallback(async (): Promise<void> => {
+    setBusyAction('remove')
+    try {
+      const next = await window.api.cli.remove()
+      if (mountedRef.current) {
+        onStatusChange(next)
+        onSettled()
+        setInstallFailure(null)
+        toast.success(
+          translate(
+            'auto.components.settings.CliSection.af5540930c',
+            'Removed `{{value0}}` from PATH.',
+            { value0: next.commandName }
+          )
+        )
+      }
+    } catch (error) {
+      if (mountedRef.current) {
+        toast.error(
+          error instanceof Error
+            ? error.message
+            : translate(
+                'auto.components.settings.CliSection.d77352f2df',
+                'Failed to remove `{{value0}}` from PATH.',
+                { value0: commandName }
+              )
+        )
+      }
+    } finally {
+      if (mountedRef.current) {
+        setBusyAction(null)
+      }
+    }
+  }, [commandName, mountedRef, onSettled, onStatusChange])
+
+  return { busyAction, installFailure, clearInstallFailure, install, remove }
+}
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index c7a66f2decc..a641c2cf7dd 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -6754,7 +6754,9 @@
           "8a9b784c60": "stale",
           "d363e5929b": "Checking CLI registration…",
           "cliSkillTerminalTitle": "CLI skill setup",
-          "cliSkillTerminalAria": "CLI skill install terminal"
+          "cliSkillTerminalAria": "CLI skill install terminal",
+          "installFailureUnknownReason": "Orca could not finish CLI registration and reported no reason.",
+          "installFailureConflictRemedy": "Remove {{value0}} and register again if it is no longer needed."
         },
         "CliSkillRuntimeSetup": {
           "04325573f8": "WSL",

From 62e9949141f6de571f8808e0d819bc6af5565f80 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 03:01:07 -0700
Subject: [PATCH 44/92] perf(renderer): index worktree owner lookups instead of
 rescanning every workspace (#18130)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

`worktreeUsesRemoteConnection`, `getRemoteConnectionIdForWorktree`,
`worktreeUsesWslPath` and `rightSidebarShowsPullRequestData` each did
`Object.values(state.worktreesByRepo).flat().find(...)` plus a linear
`repos.find(...)`. They are called from unmemoized Zustand selectors
(`use-tab-agent.ts:263`, `use-visible-review-refresh.ts:45`), so every store
write re-ran the whole scan once per open tab.

Measured on a real instance (10 repos / 423 worktrees / 382 tabs): the `.find()`
predicate alone ran 1,320,424 times in 30s — 44,000 worktree visits/sec — while
the app was idle.

Switched to the existing WeakMap-cached `getIndexedWorktreeMap` /
`getIndexedRepoMap` from `store/worktree-repo-index.ts`, matching what
`connection-owner-resolution.ts` already does. Same duplicate-id and
host-collision semantics; no behavior change.

Benchmark at that scale, 200 store writes x 382 tabs x 3 lookups:
  before 2.762ms per store write
  after  0.167ms per store write   (16.6x)
At ~20 store writes/sec that is 55.2ms/sec of renderer CPU down to 3.3ms/sec.

The new scale test counts worktree `id` reads: 160,000 before, 800 after.
---
 .../src/lib/right-sidebar-visibility.ts       |  9 +-
 .../terminal-workspace-routing.scale.test.ts  | 98 +++++++++++++++++++
 .../terminals/terminal-workspace-routing.ts   | 25 ++---
 3 files changed, 113 insertions(+), 19 deletions(-)
 create mode 100644 src/renderer/src/store/terminals/terminal-workspace-routing.scale.test.ts

diff --git a/src/renderer/src/lib/right-sidebar-visibility.ts b/src/renderer/src/lib/right-sidebar-visibility.ts
index 673fff6e01e..4eb9375efb4 100644
--- a/src/renderer/src/lib/right-sidebar-visibility.ts
+++ b/src/renderer/src/lib/right-sidebar-visibility.ts
@@ -1,4 +1,5 @@
 import type { AppState } from '@/store/types'
+import { getIndexedRepoMap, getIndexedWorktreeMap } from '@/store/worktree-repo-index'
 import { isFolderRepo } from '../../../shared/repo-kind'
 
 type ActiveView = AppState['activeView']
@@ -37,11 +38,11 @@ export function rightSidebarShowsPullRequestData(
     return false
   }
 
-  const activeWorktree = Object.values(state.worktreesByRepo)
-    .flat()
-    .find((worktree) => worktree.id === state.activeWorktreeId)
+  const activeWorktree = state.activeWorktreeId
+    ? getIndexedWorktreeMap(state.worktreesByRepo).get(state.activeWorktreeId)
+    : undefined
   const activeRepo = activeWorktree
-    ? state.repos.find((repo) => repo.id === activeWorktree.repoId)
+    ? getIndexedRepoMap(state.repos).get(activeWorktree.repoId)
     : null
   if (!activeRepo || isFolderRepo(activeRepo)) {
     return false
diff --git a/src/renderer/src/store/terminals/terminal-workspace-routing.scale.test.ts b/src/renderer/src/store/terminals/terminal-workspace-routing.scale.test.ts
new file mode 100644
index 00000000000..998ad871d86
--- /dev/null
+++ b/src/renderer/src/store/terminals/terminal-workspace-routing.scale.test.ts
@@ -0,0 +1,98 @@
+import { describe, expect, it } from 'vitest'
+import type { AppState } from '../types'
+import {
+  getRemoteConnectionIdForWorktree,
+  worktreeUsesRemoteConnection,
+  worktreeUsesWslPath
+} from './terminal-workspace-routing'
+import { rightSidebarShowsPullRequestData } from '@/lib/right-sidebar-visibility'
+
+const REPO_COUNT = 10
+const WORKTREE_COUNT = 400
+
+/** Counts every `id` read so a rescan shows up as a multiple of the row count. */
+function buildCountingState(): {
+  state: AppState
+  reads: () => number
+  worktreeId: string
+} {
+  let idReads = 0
+  const repos = Array.from({ length: REPO_COUNT }, (_, index) => ({
+    id: `repo-${index}`,
+    name: `repo-${index}`,
+    path: `/repos/repo-${index}`,
+    connectionId: null
+  }))
+  const worktreesByRepo: Record<string, unknown[]> = {}
+  const perRepo = WORKTREE_COUNT / REPO_COUNT
+  for (let repoIndex = 0; repoIndex < REPO_COUNT; repoIndex++) {
+    worktreesByRepo[`repo-${repoIndex}`] = Array.from({ length: perRepo }, (_, index) => {
+      const id = `repo-${repoIndex}::/repos/repo-${repoIndex}/wt-${index}`
+      return {
+        get id() {
+          idReads++
+          return id
+        },
+        repoId: `repo-${repoIndex}`,
+        path: `/repos/repo-${repoIndex}/wt-${index}`,
+        branch: `branch-${index}`,
+        hostId: 'local'
+      }
+    })
+  }
+  return {
+    state: {
+      repos,
+      worktreesByRepo,
+      folderWorkspaces: [],
+      projectGroups: [],
+      activeView: 'worktrees',
+      activeWorktreeId: 'repo-9::/repos/repo-9/wt-39',
+      rightSidebarOpen: true,
+      rightSidebarTab: 'checks'
+    } as unknown as AppState,
+    reads: () => idReads,
+    worktreeId: 'repo-9::/repos/repo-9/wt-39'
+  }
+}
+
+describe('terminal workspace routing scales with tab count, not workspace count', () => {
+  it('answers repeated owner lookups without rescanning every worktree', () => {
+    const { state, reads, worktreeId } = buildCountingState()
+    const CALLS = 200
+
+    for (let call = 0; call < CALLS; call++) {
+      worktreeUsesRemoteConnection(state, worktreeId)
+      getRemoteConnectionIdForWorktree(state, worktreeId)
+      worktreeUsesWslPath(state, worktreeId)
+      rightSidebarShowsPullRequestData(state)
+    }
+
+    // One index build over every row, then O(1) map hits. A per-call scan would
+    // read at least CALLS x WORKTREE_COUNT ids.
+    expect(reads()).toBeLessThanOrEqual(WORKTREE_COUNT * 2)
+    expect(reads()).toBeLessThan(CALLS * WORKTREE_COUNT)
+  })
+
+  it('still resolves the owning repo and its connection', () => {
+    const { state, worktreeId } = buildCountingState()
+    const remoteState = {
+      ...state,
+      repos: state.repos.map((repo) =>
+        repo.id === 'repo-9' ? { ...repo, connectionId: 'ssh-host-1' } : repo
+      )
+    } as AppState
+
+    expect(worktreeUsesRemoteConnection(remoteState, worktreeId)).toBe(true)
+    expect(getRemoteConnectionIdForWorktree(remoteState, worktreeId)).toBe('ssh-host-1')
+    expect(worktreeUsesRemoteConnection(state, worktreeId)).toBe(false)
+    expect(getRemoteConnectionIdForWorktree(state, worktreeId)).toBeNull()
+    expect(worktreeUsesWslPath(state, worktreeId)).toBe(false)
+  })
+
+  it('returns null for a worktree id that no repo owns', () => {
+    const { state } = buildCountingState()
+    expect(getRemoteConnectionIdForWorktree(state, 'ghost::/nowhere')).toBeNull()
+    expect(worktreeUsesRemoteConnection(state, 'ghost::/nowhere')).toBe(false)
+  })
+})
diff --git a/src/renderer/src/store/terminals/terminal-workspace-routing.ts b/src/renderer/src/store/terminals/terminal-workspace-routing.ts
index 9148b9a5f7c..ae07c3e7b8e 100644
--- a/src/renderer/src/store/terminals/terminal-workspace-routing.ts
+++ b/src/renderer/src/store/terminals/terminal-workspace-routing.ts
@@ -7,6 +7,7 @@ import { resolveLocalWindowsTerminalShellOverrideForTab } from '../../../../shar
 import { WINDOWS_GIT_BASH_SHELL } from '../../../../shared/windows-terminal-shell'
 import { getFolderWorkspaceConnectionId } from '@/lib/folder-workspace-connection'
 import { getRuntimeEnvironmentIdForWorktree } from '@/lib/worktree-runtime-owner'
+import { getIndexedRepoMap, getIndexedWorktreeMap } from '../worktree-repo-index'
 
 export function isWindowsRendererRuntime(): boolean {
   return typeof navigator !== 'undefined' && navigator.userAgent.includes('Windows')
@@ -61,9 +62,7 @@ export function worktreeUsesWslPath(
     )
     return folderWorkspace ? isWslUncPath(folderWorkspace.folderPath) : false
   }
-  const worktree = Object.values(state.worktreesByRepo)
-    .flat()
-    .find((entry) => entry.id === worktreeId)
+  const worktree = getIndexedWorktreeMap(state.worktreesByRepo).get(worktreeId)
   return worktree ? isWslUncPath(worktree.path) : false
 }
 
@@ -75,15 +74,13 @@ export function worktreeUsesRemoteConnection(
   if (parsedWorkspaceKey?.type === 'folder') {
     return Boolean(getFolderWorkspaceConnectionId(state, parsedWorkspaceKey.folderWorkspaceId))
   }
-  const directRepoId = getRepoIdFromWorktreeId(worktreeId)
-  const directRepo = state.repos.find((repo) => repo.id === directRepoId)
+  const repoMap = getIndexedRepoMap(state.repos)
+  const directRepo = repoMap.get(getRepoIdFromWorktreeId(worktreeId))
   if (directRepo) {
     return Boolean(directRepo.connectionId)
   }
-  const worktree = Object.values(state.worktreesByRepo)
-    .flat()
-    .find((entry) => entry.id === worktreeId)
-  const repo = worktree ? state.repos.find((entry) => entry.id === worktree.repoId) : null
+  const worktree = getIndexedWorktreeMap(state.worktreesByRepo).get(worktreeId)
+  const repo = worktree ? repoMap.get(worktree.repoId) : null
   return Boolean(repo?.connectionId)
 }
 
@@ -95,15 +92,13 @@ export function getRemoteConnectionIdForWorktree(
   if (parsedWorkspaceKey?.type === 'folder') {
     return getFolderWorkspaceConnectionId(state, parsedWorkspaceKey.folderWorkspaceId) ?? null
   }
-  const directRepoId = getRepoIdFromWorktreeId(worktreeId)
-  const directRepo = state.repos.find((repo) => repo.id === directRepoId)
+  const repoMap = getIndexedRepoMap(state.repos)
+  const directRepo = repoMap.get(getRepoIdFromWorktreeId(worktreeId))
   if (directRepo) {
     return directRepo.connectionId?.trim() || null
   }
-  const worktree = Object.values(state.worktreesByRepo)
-    .flat()
-    .find((entry) => entry.id === worktreeId)
-  const repo = worktree ? state.repos.find((entry) => entry.id === worktree.repoId) : null
+  const worktree = getIndexedWorktreeMap(state.worktreesByRepo).get(worktreeId)
+  const repo = worktree ? repoMap.get(worktree.repoId) : null
   return repo?.connectionId?.trim() || null
 }
 

From aa3ae6f56ec54d9c28c6b65f257c36d1e207fe0b Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 03:02:27 -0700
Subject: [PATCH 45/92] fix(ssh): close the pty master fd leak on relay hosts
 too (#17920)

* fix(ssh): close the pty master fd leak on Linux relay hosts

The app gets the FD_CLOEXEC patch through pnpm patchedDependencies (#17914);
the relay installs stock node-pty from npm, where no pnpm patch reaches. Linux
is where that matters -- it is the only relay platform that takes forkpty()'s
no-atomic-O_CLOEXEC path, and it is also the only one that already compiles
node-pty at install time, so the fix costs a second compile rather than a first.

Ships the patch as a relay asset applied like the existing Windows console-list
one, and rebuilds only after the probe has proven node-pty loadable. The rebuild
is non-fatal by construction: the working build is moved aside first and moved
back on any failure, a failed attempt drops a skip marker so the compile is
attempted at most once per relay directory, and the caller swallows the whole
step. macOS and Windows relays never run it.

Measured on node:22 with a relay-style npm install: before, the master is
cloexec=false and shows up as `26 -> /dev/pts/ptmx` in both a later pty child
and a later child_process child; after, cloexec=true and neither child sees it.

Closes #17915.

* test(ssh): feed the cloexec patch exec to the hand-rolled namespace fixtures

These sequences are positional, so the new Linux-only patch exec swallowed the
READY slot and every install/repair case timed out waiting for the relay.

* fix(ssh): patch the pty master before publishing the shared native-deps tree

* fix(ssh): refuse to publish a native-deps tree whose cloexec patch did not take
---
 .../node-pty-1.1.0-master-cloexec-patch.cjs   | 318 +++++++
 .../__fixtures__/node-pty-1.1.0-unix-pty.cc   | 799 ++++++++++++++++++
 config/scripts/build-relay.mjs                |  11 +
 .../node-pty-master-cloexec-patch.test.mjs    | 229 +++++
 src/main/ssh/ssh-relay-deploy.ts              | 122 ++-
 ...ssh-relay-native-deps-cache-deploy.test.ts |   7 +
 src/main/ssh/ssh-relay-native-deps-cache.ts   |   6 +
 .../ssh-relay-native-deps-install-fixture.ts  |   6 +
 .../ssh/ssh-relay-native-deps-install.test.ts |   1 +
 ...sh-relay-native-deps-probe-verdict.test.ts |   6 +
 .../ssh-relay-node-pty-spawn-repair.test.ts   |   4 +
 ...h-relay-pty-master-cloexec-install.test.ts | 336 ++++++++
 .../ssh-relay-sftp-namespace-install.test.ts  |   8 +
 src/shared/relay-artifacts.ts                 |   5 +
 src/shared/relay-optional-artifacts.test.ts   |   8 +
 15 files changed, 1865 insertions(+), 1 deletion(-)
 create mode 100644 config/relay-assets/node-pty-1.1.0-master-cloexec-patch.cjs
 create mode 100644 config/scripts/__fixtures__/node-pty-1.1.0-unix-pty.cc
 create mode 100644 config/scripts/node-pty-master-cloexec-patch.test.mjs
 create mode 100644 src/main/ssh/ssh-relay-pty-master-cloexec-install.test.ts

diff --git a/config/relay-assets/node-pty-1.1.0-master-cloexec-patch.cjs b/config/relay-assets/node-pty-1.1.0-master-cloexec-patch.cjs
new file mode 100644
index 00000000000..f4f4f87619a
--- /dev/null
+++ b/config/relay-assets/node-pty-1.1.0-master-cloexec-patch.cjs
@@ -0,0 +1,318 @@
+/**
+ * Relay-side pty-master close-on-exec patch for node-pty 1.1.0 (#17915).
+ *
+ * The app gets this through pnpm `patchedDependencies`; the relay installs stock
+ * node-pty from npm onto the host, where no pnpm patch reaches. Without it every
+ * later child of the relay -- pty children, git helpers, probes, agent CLIs --
+ * inherits each live master fd and keeps its /dev/pts device alive for the life
+ * of the relay (#8362).
+ *
+ * Linux only, deliberately: it is the only relay platform that takes forkpty()'s
+ * no-atomic-O_CLOEXEC path, and the only one that already compiles node-pty at
+ * install time, so the rebuild costs a second compile rather than a first one.
+ * macOS re-opens the tty through uv_tty_init's cloexec dup and Windows has no fds.
+ *
+ * Non-fatal by construction: the working build is moved aside before anything is
+ * touched and moved back on any failure, and a failed attempt drops a skip marker
+ * so the compile is attempted at most once per relay directory.
+ */
+
+const { spawnSync } = require('node:child_process')
+const { createHash } = require('node:crypto')
+const {
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync
+} = require('node:fs')
+const { dirname, join, resolve } = require('node:path')
+
+const EXPECTED_NODE_PTY_VERSION = '1.1.0'
+const ORIGINAL_SOURCE_SHA256 = '5e1005d6bdcfbe97b486ee415419fe7adae99035047f07340fbad36419e0bae6'
+const PATCHED_SOURCE_SHA256 = '97dea52199216c01b62070758f0f38621ae53adc16c221271dd35ae2d8ee3482'
+
+const STATUS_PREFIX = 'ORCA-NPTY-CLOEXEC:'
+const SKIP_MARKER_FILENAME = '.node-pty-cloexec-skip'
+const BACKUP_DIRNAME = '.orca-cloexec-prepatch-release'
+// Under the caller's 240s SSH command timeout, so the rollback below still runs.
+const REBUILD_TIMEOUT_MS = 200000
+const VERIFY_TIMEOUT_MS = 15000
+
+const FORWARD_DECLARATION = [
+  'static int\npty_nonblock(int);\n',
+  'static int\npty_nonblock(int);\n\nstatic int\npty_cloexec(int);\n'
+]
+
+const DEFINITION = [
+  `static int
+pty_nonblock(int fd) {
+  int flags = fcntl(fd, F_GETFL, 0);
+  if (flags == -1) return -1;
+  return fcntl(fd, F_SETFL, flags | O_NONBLOCK);
+}
+`,
+  `static int
+pty_nonblock(int fd) {
+  int flags = fcntl(fd, F_GETFL, 0);
+  if (flags == -1) return -1;
+  return fcntl(fd, F_SETFL, flags | O_NONBLOCK);
+}
+
+/**
+ * Orca: close-on-exec FD
+ *
+ * forkpty()/posix_openpt() have no atomic O_CLOEXEC, so a master left without
+ * FD_CLOEXEC is inherited by every later child of this process -- including
+ * later pty children -- which keeps its /dev/pts device and buffers alive long
+ * after its own session ends (#8362).
+ */
+
+static int
+pty_cloexec(int fd) {
+  int flags = fcntl(fd, F_GETFD);
+  if (flags == -1) return -1;
+  if (flags & FD_CLOEXEC) return 0;
+  return fcntl(fd, F_SETFD, flags | FD_CLOEXEC);
+}
+`
+]
+
+const FORKPTY_CALL_SITE = [
+  `    default:
+      if (pty_nonblock(master) == -1) {
+        throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
+      }
+  }
+`,
+  `    default:
+      if (pty_nonblock(master) == -1) {
+        throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
+      }
+      if (pty_cloexec(master) == -1) {
+        throw Napi::Error::New(napiEnv, "Could not set master fd to close-on-exec.");
+      }
+  }
+`
+]
+
+const REPLACEMENTS = [FORWARD_DECLARATION, DEFINITION, FORKPTY_CALL_SITE]
+
+function sourceSha256(source) {
+  return createHash('sha256').update(source).digest('hex')
+}
+
+function nodePtyDir(relayDir) {
+  return resolve(relayDir, 'node_modules', 'node-pty')
+}
+
+function inspectNodePtyUnixSource(relayDir) {
+  const ptyDir = nodePtyDir(relayDir)
+  const sourcePath = join(ptyDir, 'src', 'unix', 'pty.cc')
+  const version = JSON.parse(readFileSync(join(ptyDir, 'package.json'), 'utf8')).version
+  if (version !== EXPECTED_NODE_PTY_VERSION) {
+    throw new Error(`Refusing to patch node-pty ${version}; expected ${EXPECTED_NODE_PTY_VERSION}`)
+  }
+  return { ptyDir, sourcePath, source: readFileSync(sourcePath, 'utf8') }
+}
+
+function writeSourceAtomically(sourcePath, contents) {
+  const temporaryPath = `${sourcePath}.orca-patch-${process.pid}`
+  // Why: a terminated install must leave one of the two known source versions on disk.
+  try {
+    writeFileSync(temporaryPath, contents)
+    renameSync(temporaryPath, sourcePath)
+  } finally {
+    rmSync(temporaryPath, { force: true })
+  }
+}
+
+function rewriteSource(source, reverse) {
+  let rewritten = source
+  for (const [original, patched] of REPLACEMENTS) {
+    const from = reverse ? patched : original
+    const to = reverse ? original : patched
+    if (rewritten.split(from).length - 1 !== 1) {
+      throw new Error('Refusing to rewrite unexpected node-pty pty.cc source')
+    }
+    rewritten = rewritten.replace(from, to)
+  }
+  return rewritten
+}
+
+/** True when the patch was applied, false when it was already installed. */
+function patchNodePtyMasterCloexecSource(relayDir = process.cwd()) {
+  const inspected = inspectNodePtyUnixSource(relayDir)
+  const hash = sourceSha256(inspected.source)
+  if (hash === PATCHED_SOURCE_SHA256) {
+    return false
+  }
+  if (hash !== ORIGINAL_SOURCE_SHA256) {
+    throw new Error('Refusing to patch unexpected node-pty pty.cc source')
+  }
+  writeSourceAtomically(inspected.sourcePath, rewriteSource(inspected.source, false))
+  assertPatchedNodePtyMasterCloexecSource(relayDir)
+  return true
+}
+
+function assertPatchedNodePtyMasterCloexecSource(relayDir = process.cwd()) {
+  const inspected = inspectNodePtyUnixSource(relayDir)
+  if (sourceSha256(inspected.source) !== PATCHED_SOURCE_SHA256) {
+    throw new Error('node-pty pty master close-on-exec patch is not installed')
+  }
+}
+
+function revertNodePtyMasterCloexecSource(relayDir = process.cwd()) {
+  const inspected = inspectNodePtyUnixSource(relayDir)
+  if (sourceSha256(inspected.source) === ORIGINAL_SOURCE_SHA256) {
+    return false
+  }
+  writeSourceAtomically(inspected.sourcePath, rewriteSource(inspected.source, true))
+  return true
+}
+
+function rebuildNodePty(relayDir) {
+  const result = spawnSync('npm', ['rebuild', '--ignore-scripts=false', 'node-pty'], {
+    cwd: relayDir,
+    encoding: 'utf8',
+    timeout: REBUILD_TIMEOUT_MS,
+    windowsHide: true
+  })
+  if (result.error) {
+    throw new Error(`npm rebuild node-pty failed: ${result.error.message}`)
+  }
+  if (result.status !== 0) {
+    const tail = `${result.stdout || ''}${result.stderr || ''}`.trim().slice(-300)
+    throw new Error(`npm rebuild node-pty exited ${result.status ?? result.signal}: ${tail}`)
+  }
+}
+
+// Why a child: a bad build can abort the process on require, which would strand the
+// moved-aside working build. Why the reachability check: a host without /proc cannot
+// show inheritance, and an unobservable flag is not evidence the rebuild was wrong.
+const VERIFY_SCRIPT = `
+const pty = require(process.argv[1]);
+const term = pty.spawn('/bin/sh', ['-c', 'exit 0'], {
+  name: 'xterm-256color', cols: 80, rows: 24, cwd: process.cwd(), env: process.env
+});
+const probe = require('node:child_process').spawnSync('/bin/sh', ['-c', 'ls -l /proc/self/fd'], { encoding: 'utf8' });
+try { term.kill() } catch {}
+const listing = probe.stdout || '';
+if (probe.status !== 0 || !listing.includes('->')) { console.log('UNVERIFIED'); process.exit(0) }
+console.log(listing.includes('ptmx') ? 'INHERITED' : 'ISOLATED');
+process.exit(0);
+`
+
+/** 'isolated' when a later plain child no longer inherits the master, 'unverified' when /proc cannot say. */
+function verifyMasterNotInheritedByLaterChild(relayDir) {
+  const result = spawnSync(process.execPath, ['-e', VERIFY_SCRIPT, nodePtyDir(relayDir)], {
+    cwd: relayDir,
+    encoding: 'utf8',
+    timeout: VERIFY_TIMEOUT_MS,
+    windowsHide: true
+  })
+  const output = `${result.stdout || ''}`
+  if (result.status !== 0 || result.error) {
+    const tail = `${output}${result.stderr || ''}`.trim().slice(-300)
+    throw new Error(
+      `rebuilt node-pty did not load: ${tail || result.error?.message || result.signal}`
+    )
+  }
+  if (output.includes('INHERITED')) {
+    throw new Error('rebuilt node-pty still leaks the pty master into later children')
+  }
+  return output.includes('ISOLATED') ? 'isolated' : 'unverified'
+}
+
+function rollback(relayDir, releaseDir, backupDir) {
+  rmSync(releaseDir, { recursive: true, force: true })
+  try {
+    revertNodePtyMasterCloexecSource(relayDir)
+  } catch {
+    // The build that is about to be restored predates the patch either way.
+  }
+  if (existsSync(backupDir)) {
+    mkdirSync(dirname(releaseDir), { recursive: true })
+    renameSync(backupDir, releaseDir)
+  }
+}
+
+/**
+ * Patch and rebuild the host's node-pty, or leave it exactly as found.
+ * Never throws: the caller is on the connect path and a leaky relay beats no relay.
+ */
+function applyNodePtyMasterCloexecPatch(relayDir = process.cwd(), options = {}) {
+  const platform = options.platform || process.platform
+  const rebuild = options.rebuild || rebuildNodePty
+  const verify = options.verify || verifyMasterNotInheritedByLaterChild
+  if (platform !== 'linux') {
+    return 'skipped:not-linux'
+  }
+  const skipMarkerPath = join(relayDir, SKIP_MARKER_FILENAME)
+  if (existsSync(skipMarkerPath)) {
+    return 'skipped:earlier-attempt-failed'
+  }
+  const releaseDir = join(nodePtyDir(relayDir), 'build', 'Release')
+  const backupDir = join(nodePtyDir(relayDir), BACKUP_DIRNAME)
+  // A backup stranded by a connection that died mid-rebuild is stale by definition:
+  // whatever repaired node-pty since built from the source now on disk.
+  rmSync(backupDir, { recursive: true, force: true })
+
+  let inspected
+  try {
+    inspected = inspectNodePtyUnixSource(relayDir)
+  } catch (err) {
+    return `skipped:${err.message}`
+  }
+  const hash = sourceSha256(inspected.source)
+  if (hash === PATCHED_SOURCE_SHA256) {
+    return 'already-patched'
+  }
+  if (hash !== ORIGINAL_SOURCE_SHA256) {
+    return 'skipped:unexpected-source'
+  }
+  // No compiled build means the host runs a prebuild or nothing at all; rebuilding
+  // could only take away the artifact the probe just proved loadable.
+  if (!existsSync(join(releaseDir, 'pty.node'))) {
+    return 'skipped:no-compiled-build'
+  }
+
+  try {
+    renameSync(releaseDir, backupDir)
+  } catch (err) {
+    return `skipped:${err.message}`
+  }
+  try {
+    patchNodePtyMasterCloexecSource(relayDir)
+    rebuild(relayDir)
+    const verdict = verify(relayDir)
+    rmSync(backupDir, { recursive: true, force: true })
+    return verdict === 'isolated' ? 'patched' : 'patched-unverified'
+  } catch (err) {
+    rollback(relayDir, releaseDir, backupDir)
+    // Bounded on purpose: one compile attempt per relay directory, never a retry loop.
+    try {
+      writeFileSync(skipMarkerPath, `${new Date().toISOString()} ${err.message}\n`)
+    } catch {
+      // A relay dir we cannot write to will fail the cheap checks above next time anyway.
+    }
+    return `failed:${err.message}`
+  }
+}
+
+if (require.main === module) {
+  console.log(`${STATUS_PREFIX}${applyNodePtyMasterCloexecPatch()}`)
+}
+
+module.exports = {
+  EXPECTED_NODE_PTY_VERSION,
+  ORIGINAL_SOURCE_SHA256,
+  PATCHED_SOURCE_SHA256,
+  SKIP_MARKER_FILENAME,
+  STATUS_PREFIX,
+  applyNodePtyMasterCloexecPatch,
+  assertPatchedNodePtyMasterCloexecSource,
+  patchNodePtyMasterCloexecSource,
+  revertNodePtyMasterCloexecSource
+}
diff --git a/config/scripts/__fixtures__/node-pty-1.1.0-unix-pty.cc b/config/scripts/__fixtures__/node-pty-1.1.0-unix-pty.cc
new file mode 100644
index 00000000000..7b4b9e1f990
--- /dev/null
+++ b/config/scripts/__fixtures__/node-pty-1.1.0-unix-pty.cc
@@ -0,0 +1,799 @@
+/**
+ * Copyright (c) 2012-2015, Christopher Jeffrey (MIT License)
+ * Copyright (c) 2017, Daniel Imms (MIT License)
+ *
+ * pty.cc:
+ *   This file is responsible for starting processes
+ *   with pseudo-terminal file descriptors.
+ *
+ * See:
+ *   man pty
+ *   man tty_ioctl
+ *   man termios
+ *   man forkpty
+ */
+
+/**
+ * Includes
+ */
+
+#define NODE_ADDON_API_DISABLE_DEPRECATED
+#include <napi.h>
+#include <assert.h>
+#include <errno.h>
+#include <string.h>
+#include <stdlib.h>
+#include <unistd.h>
+#include <thread>
+
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <sys/ioctl.h>
+#include <sys/wait.h>
+#include <fcntl.h>
+#include <signal.h>
+
+/* forkpty */
+/* http://www.gnu.org/software/gnulib/manual/html_node/forkpty.html */
+#if defined(__linux__)
+#include <pty.h>
+#elif defined(__APPLE__)
+#include <util.h>
+#elif defined(__FreeBSD__)
+#include <libutil.h>
+#include <termios.h>
+#elif defined(__OpenBSD__)
+#include <util.h>
+#include <termios.h>
+#endif
+
+/* Some platforms name VWERASE and VDISCARD differently */
+#if !defined(VWERASE) && defined(VWERSE)
+#define VWERASE	VWERSE
+#endif
+#if !defined(VDISCARD) && defined(VDISCRD)
+#define VDISCARD	VDISCRD
+#endif
+
+/* for pty_getproc */
+#if defined(__linux__)
+#include <stdio.h>
+#include <stdint.h>
+#elif defined(__APPLE__)
+#include <libproc.h>
+#include <os/availability.h>
+#include <paths.h>
+#include <spawn.h>
+#include <sys/event.h>
+#include <sys/sysctl.h>
+#include <termios.h>
+#endif
+
+/* NSIG - macro for highest signal + 1, should be defined */
+#ifndef NSIG
+#define NSIG 32
+#endif
+
+/* macOS 10.14 back does not define this constant */
+#ifndef POSIX_SPAWN_SETSID
+  #define POSIX_SPAWN_SETSID 1024
+#endif
+
+/* environ for execvpe */
+/* node/src/node_child_process.cc */
+#if !defined(__APPLE__)
+extern char **environ;
+#endif
+
+#if defined(__APPLE__)
+extern "C" {
+// Changes the current thread's directory to a path or directory file
+// descriptor. libpthread only exposes a syscall wrapper starting in
+// macOS 10.12, but the system call dates back to macOS 10.5. On older OSes,
+// the syscall is issued directly.
+int pthread_chdir_np(const char* dir) API_AVAILABLE(macosx(10.12));
+int pthread_fchdir_np(int fd) API_AVAILABLE(macosx(10.12));
+}
+
+#define HANDLE_EINTR(x) ({ \
+  int eintr_wrapper_counter = 0; \
+  decltype(x) eintr_wrapper_result; \
+  do { \
+    eintr_wrapper_result = (x); \
+  } while (eintr_wrapper_result == -1 && errno == EINTR && \
+           eintr_wrapper_counter++ < 100); \
+  eintr_wrapper_result; \
+})
+#endif
+
+struct ExitEvent {
+  int exit_code = 0, signal_code = 0;
+};
+
+void SetupExitCallback(Napi::Env env, Napi::Function cb, pid_t pid) {
+  std::thread *th = new std::thread;
+  // Don't use Napi::AsyncWorker which is limited by UV_THREADPOOL_SIZE.
+  auto tsfn = Napi::ThreadSafeFunction::New(
+      env,
+      cb,                           // JavaScript function called asynchronously
+      "SetupExitCallback_resource", // Name
+      0,                            // Unlimited queue
+      1,                            // Only one thread will use this initially
+      [th](Napi::Env) {   // Finalizer used to clean threads up
+        th->join();
+        delete th;
+      });
+  *th = std::thread([tsfn = std::move(tsfn), pid] {
+    auto callback = [](Napi::Env env, Napi::Function cb, ExitEvent *exit_event) {
+      cb.Call({Napi::Number::New(env, exit_event->exit_code),
+               Napi::Number::New(env, exit_event->signal_code)});
+      delete exit_event;
+    };
+
+    int ret;
+    int stat_loc;
+#if defined(__APPLE__)
+    // Based on
+    // https://source.chromium.org/chromium/chromium/src/+/main:base/process/kill_mac.cc;l=35-69?
+    int kq = HANDLE_EINTR(kqueue());
+    struct kevent change = {0};
+    EV_SET(&change, pid, EVFILT_PROC, EV_ADD, NOTE_EXIT, 0, NULL);
+    ret = HANDLE_EINTR(kevent(kq, &change, 1, NULL, 0, NULL));
+    if (ret == -1) {
+      if (errno == ESRCH) {
+        // At this point, one of the following has occurred:
+        // 1. The process has died but has not yet been reaped.
+        // 2. The process has died and has already been reaped.
+        // 3. The process is in the process of dying. It's no longer
+        //    kqueueable, but it may not be waitable yet either. Mark calls
+        //    this case the "zombie death race".
+        ret = HANDLE_EINTR(waitpid(pid, &stat_loc, WNOHANG));
+        if (ret == 0) {
+          ret = kill(pid, SIGKILL);
+          if (ret != -1) {
+            HANDLE_EINTR(waitpid(pid, &stat_loc, 0));
+          }
+        }
+      }
+    } else {
+      struct kevent event = {0};
+      ret = HANDLE_EINTR(kevent(kq, NULL, 0, &event, 1, NULL));
+      if (ret == 1) {
+        if ((event.fflags & NOTE_EXIT) &&
+            (event.ident == static_cast<uintptr_t>(pid))) {
+          // The process is dead or dying. This won't block for long, if at
+          // all.
+          HANDLE_EINTR(waitpid(pid, &stat_loc, 0));
+        }
+      }
+    }
+#else
+    while (true) {
+      errno = 0;
+      if ((ret = waitpid(pid, &stat_loc, 0)) != pid) {
+        if (ret == -1 && errno == EINTR) {
+          continue;
+        }
+        if (ret == -1 && errno == ECHILD) {
+          // XXX node v0.8.x seems to have this problem.
+          // waitpid is already handled elsewhere.
+          ;
+        } else {
+          assert(false);
+        }
+      }
+      break;
+    }
+#endif
+    ExitEvent *exit_event = new ExitEvent;
+    if (WIFEXITED(stat_loc)) {
+      exit_event->exit_code = WEXITSTATUS(stat_loc); // errno?
+    }
+    if (WIFSIGNALED(stat_loc)) {
+      exit_event->signal_code = WTERMSIG(stat_loc);
+    }
+    auto status = tsfn.BlockingCall(exit_event, callback); // In main thread
+    switch (status) {
+      case napi_closing:
+        break;
+
+      case napi_queue_full:
+        Napi::Error::Fatal("SetupExitCallback", "Queue was full");
+
+      case napi_ok:
+        if (tsfn.Release() != napi_ok) {
+          Napi::Error::Fatal("SetupExitCallback", "ThreadSafeFunction.Release() failed");
+        }
+        break;
+
+      default:
+        Napi::Error::Fatal("SetupExitCallback", "ThreadSafeFunction.BlockingCall() failed");
+    }
+  });
+}
+
+/**
+ * Methods
+ */
+
+Napi::Value PtyFork(const Napi::CallbackInfo& info);
+Napi::Value PtyOpen(const Napi::CallbackInfo& info);
+Napi::Value PtyResize(const Napi::CallbackInfo& info);
+Napi::Value PtyGetProc(const Napi::CallbackInfo& info);
+
+/**
+ * Functions
+ */
+
+static int
+pty_nonblock(int);
+
+#if defined(__APPLE__)
+static char *
+pty_getproc(int);
+#else
+static char *
+pty_getproc(int, char *);
+#endif
+
+#if defined(__APPLE__) || defined(__OpenBSD__)
+static void
+pty_posix_spawn(char** argv, char** env,
+                const struct termios *termp,
+                const struct winsize *winp,
+                int* master,
+                pid_t* pid,
+                int* err);
+#endif
+
+struct DelBuf {
+  int len;
+  DelBuf(int len) : len(len) {}
+  void operator()(char **p) {
+    if (p == nullptr)
+      return;
+    for (int i = 0; i < len; i++)
+      free(p[i]);
+    delete[] p;
+  }
+};
+
+Napi::Value PtyFork(const Napi::CallbackInfo& info) {
+  Napi::Env napiEnv(info.Env());
+  Napi::HandleScope scope(napiEnv);
+
+  if (info.Length() != 11 ||
+      !info[0].IsString() ||
+      !info[1].IsArray() ||
+      !info[2].IsArray() ||
+      !info[3].IsString() ||
+      !info[4].IsNumber() ||
+      !info[5].IsNumber() ||
+      !info[6].IsNumber() ||
+      !info[7].IsNumber() ||
+      !info[8].IsBoolean() ||
+      !info[9].IsString() ||
+      !info[10].IsFunction()) {
+    throw Napi::Error::New(napiEnv, "Usage: pty.fork(file, args, env, cwd, cols, rows, uid, gid, utf8, helperPath, onexit)");
+  }
+
+  // file
+  std::string file = info[0].As<Napi::String>();
+
+  // args
+  Napi::Array argv_ = info[1].As<Napi::Array>();
+
+  // env
+  Napi::Array env_ = info[2].As<Napi::Array>();
+  int envc = env_.Length();
+  std::unique_ptr<char *, DelBuf> env_unique_ptr(new char *[envc + 1], DelBuf(envc + 1));
+  char **env = env_unique_ptr.get();
+  env[envc] = NULL;
+  for (int i = 0; i < envc; i++) {
+    std::string pair = env_.Get(i).As<Napi::String>();
+    env[i] = strdup(pair.c_str());
+  }
+
+  // cwd
+  std::string cwd_ = info[3].As<Napi::String>();
+
+  // size
+  struct winsize winp;
+  winp.ws_col = info[4].As<Napi::Number>().Int32Value();
+  winp.ws_row = info[5].As<Napi::Number>().Int32Value();
+  winp.ws_xpixel = 0;
+  winp.ws_ypixel = 0;
+
+#if !defined(__APPLE__)
+  // uid / gid
+  int uid = info[6].As<Napi::Number>().Int32Value();
+  int gid = info[7].As<Napi::Number>().Int32Value();
+#endif
+
+  // termios
+  struct termios t = termios();
+  struct termios *term = &t;
+  term->c_iflag = ICRNL | IXON | IXANY | IMAXBEL | BRKINT;
+  if (info[8].As<Napi::Boolean>().Value()) {
+#if defined(IUTF8)
+    term->c_iflag |= IUTF8;
+#endif
+  }
+  term->c_oflag = OPOST | ONLCR;
+  term->c_cflag = CREAD | CS8 | HUPCL;
+  term->c_lflag = ICANON | ISIG | IEXTEN | ECHO | ECHOE | ECHOK | ECHOKE | ECHOCTL;
+
+  term->c_cc[VEOF] = 4;
+  term->c_cc[VEOL] = -1;
+  term->c_cc[VEOL2] = -1;
+  term->c_cc[VERASE] = 0x7f;
+  term->c_cc[VWERASE] = 23;
+  term->c_cc[VKILL] = 21;
+  term->c_cc[VREPRINT] = 18;
+  term->c_cc[VINTR] = 3;
+  term->c_cc[VQUIT] = 0x1c;
+  term->c_cc[VSUSP] = 26;
+  term->c_cc[VSTART] = 17;
+  term->c_cc[VSTOP] = 19;
+  term->c_cc[VLNEXT] = 22;
+  term->c_cc[VDISCARD] = 15;
+  term->c_cc[VMIN] = 1;
+  term->c_cc[VTIME] = 0;
+
+  #if (__APPLE__)
+  term->c_cc[VDSUSP] = 25;
+  term->c_cc[VSTATUS] = 20;
+  #endif
+
+  cfsetispeed(term, B38400);
+  cfsetospeed(term, B38400);
+
+  // helperPath
+  std::string helper_path = info[9].As<Napi::String>();
+
+  pid_t pid;
+  int master;
+#if defined(__APPLE__)
+  int argc = argv_.Length();
+  int argl = argc + 4;
+  std::unique_ptr<char *, DelBuf> argv_unique_ptr(new char *[argl], DelBuf(argl));
+  char **argv = argv_unique_ptr.get();
+  argv[0] = strdup(helper_path.c_str());
+  argv[1] = strdup(cwd_.c_str());
+  argv[2] = strdup(file.c_str());
+  argv[argl - 1] = NULL;
+  for (int i = 0; i < argc; i++) {
+    std::string arg = argv_.Get(i).As<Napi::String>();
+    argv[i + 3] = strdup(arg.c_str());
+  }
+
+  int err = -1;
+  pty_posix_spawn(argv, env, term, &winp, &master, &pid, &err);
+  if (err != 0) {
+    throw Napi::Error::New(napiEnv, "posix_spawnp failed.");
+  }
+  if (pty_nonblock(master) == -1) {
+    throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
+  }
+#else
+  int argc = argv_.Length();
+  int argl = argc + 2;
+  std::unique_ptr<char *, DelBuf> argv_unique_ptr(new char *[argl], DelBuf(argl));
+  char** argv = argv_unique_ptr.get();
+  argv[0] = strdup(file.c_str());
+  argv[argl - 1] = NULL;
+  for (int i = 0; i < argc; i++) {
+    std::string arg = argv_.Get(i).As<Napi::String>();
+    argv[i + 1] = strdup(arg.c_str());
+  }
+
+  sigset_t newmask, oldmask;
+  struct sigaction sig_action;
+  // temporarily block all signals
+  // this is needed due to a race condition in openpty
+  // and to avoid running signal handlers in the child
+  // before exec* happened
+  sigfillset(&newmask);
+  pthread_sigmask(SIG_SETMASK, &newmask, &oldmask);
+
+  pid = forkpty(&master, nullptr, static_cast<termios*>(term), static_cast<winsize*>(&winp));
+
+  if (!pid) {
+    // remove all signal handler from child
+    sig_action.sa_handler = SIG_DFL;
+    sig_action.sa_flags = 0;
+    sigemptyset(&sig_action.sa_mask);
+    for (int i = 0 ; i < NSIG ; i++) {    // NSIG is a macro for all signals + 1
+      sigaction(i, &sig_action, NULL);
+    }
+  }
+
+  // reenable signals
+  pthread_sigmask(SIG_SETMASK, &oldmask, NULL);
+
+  switch (pid) {
+    case -1:
+      throw Napi::Error::New(napiEnv, "forkpty(3) failed.");
+    case 0:
+      if (strlen(cwd_.c_str())) {
+        if (chdir(cwd_.c_str()) == -1) {
+          perror("chdir(2) failed.");
+          _exit(1);
+        }
+      }
+
+      if (uid != -1 && gid != -1) {
+        if (setgid(gid) == -1) {
+          perror("setgid(2) failed.");
+          _exit(1);
+        }
+        if (setuid(uid) == -1) {
+          perror("setuid(2) failed.");
+          _exit(1);
+        }
+      }
+
+      {
+        char **old = environ;
+        environ = env;
+        execvp(argv[0], argv);
+        environ = old;
+        perror("execvp(3) failed.");
+        _exit(1);
+      }
+    default:
+      if (pty_nonblock(master) == -1) {
+        throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
+      }
+  }
+#endif
+
+  Napi::Object obj = Napi::Object::New(napiEnv);
+  obj.Set("fd", Napi::Number::New(napiEnv, master));
+  obj.Set("pid", Napi::Number::New(napiEnv, pid));
+  obj.Set("pty", Napi::String::New(napiEnv, ptsname(master)));
+
+  // Set up process exit callback.
+  Napi::Function cb = info[10].As<Napi::Function>();
+  SetupExitCallback(napiEnv, cb, pid);
+  return obj;
+}
+
+Napi::Value PtyOpen(const Napi::CallbackInfo& info) {
+  Napi::Env env(info.Env());
+  Napi::HandleScope scope(env);
+
+  if (info.Length() != 2 ||
+      !info[0].IsNumber() ||
+      !info[1].IsNumber()) {
+    throw Napi::Error::New(env, "Usage: pty.open(cols, rows)");
+  }
+
+  // size
+  struct winsize winp;
+  winp.ws_col = info[0].As<Napi::Number>().Int32Value();
+  winp.ws_row = info[1].As<Napi::Number>().Int32Value();
+  winp.ws_xpixel = 0;
+  winp.ws_ypixel = 0;
+
+  // pty
+  int master, slave;
+  int ret = openpty(&master, &slave, nullptr, NULL, static_cast<winsize*>(&winp));
+
+  if (ret == -1) {
+    throw Napi::Error::New(env, "openpty(3) failed.");
+  }
+
+  if (pty_nonblock(master) == -1) {
+    throw Napi::Error::New(env, "Could not set master fd to nonblocking.");
+  }
+
+  if (pty_nonblock(slave) == -1) {
+    throw Napi::Error::New(env, "Could not set slave fd to nonblocking.");
+  }
+
+  Napi::Object obj = Napi::Object::New(env);
+  obj.Set("master", Napi::Number::New(env, master));
+  obj.Set("slave", Napi::Number::New(env, slave));
+  obj.Set("pty", Napi::String::New(env, ptsname(master)));
+
+  return obj;
+}
+
+Napi::Value PtyResize(const Napi::CallbackInfo& info) {
+  Napi::Env env(info.Env());
+  Napi::HandleScope scope(env);
+
+  if (info.Length() != 3 ||
+      !info[0].IsNumber() ||
+      !info[1].IsNumber() ||
+      !info[2].IsNumber()) {
+    throw Napi::Error::New(env, "Usage: pty.resize(fd, cols, rows)");
+  }
+
+  int fd = info[0].As<Napi::Number>().Int32Value();
+
+  struct winsize winp;
+  winp.ws_col = info[1].As<Napi::Number>().Int32Value();
+  winp.ws_row = info[2].As<Napi::Number>().Int32Value();
+  winp.ws_xpixel = 0;
+  winp.ws_ypixel = 0;
+
+  if (ioctl(fd, TIOCSWINSZ, &winp) == -1) {
+    switch (errno) {
+      case EBADF:
+        throw Napi::Error::New(env, "ioctl(2) failed, EBADF");
+      case EFAULT:
+        throw Napi::Error::New(env, "ioctl(2) failed, EFAULT");
+      case EINVAL:
+        throw Napi::Error::New(env, "ioctl(2) failed, EINVAL");
+      case ENOTTY:
+        throw Napi::Error::New(env, "ioctl(2) failed, ENOTTY");
+    }
+    throw Napi::Error::New(env, "ioctl(2) failed");
+  }
+
+  return env.Undefined();
+}
+
+/**
+ * Foreground Process Name
+ */
+Napi::Value PtyGetProc(const Napi::CallbackInfo& info) {
+  Napi::Env env(info.Env());
+  Napi::HandleScope scope(env);
+
+#if defined(__APPLE__)
+  if (info.Length() != 1 ||
+      !info[0].IsNumber()) {
+    throw Napi::Error::New(env, "Usage: pty.process(pid)");
+  }
+
+  int fd = info[0].As<Napi::Number>().Int32Value();
+  char *name = pty_getproc(fd);
+#else
+  if (info.Length() != 2 ||
+      !info[0].IsNumber() ||
+      !info[1].IsString()) {
+    throw Napi::Error::New(env, "Usage: pty.process(fd, tty)");
+  }
+
+  int fd = info[0].As<Napi::Number>().Int32Value();
+
+  std::string tty_ = info[1].As<Napi::String>();
+  char *tty = strdup(tty_.c_str());
+  char *name = pty_getproc(fd, tty);
+  free(tty);
+#endif
+
+  if (name == NULL) {
+    return env.Undefined();
+  }
+
+  Napi::String name_ = Napi::String::New(env, name);
+  free(name);
+  return name_;
+}
+
+/**
+ * Nonblocking FD
+ */
+
+static int
+pty_nonblock(int fd) {
+  int flags = fcntl(fd, F_GETFL, 0);
+  if (flags == -1) return -1;
+  return fcntl(fd, F_SETFL, flags | O_NONBLOCK);
+}
+
+/**
+ * pty_getproc
+ * Taken from tmux.
+ */
+
+// Taken from: tmux (http://tmux.sourceforge.net/)
+// Copyright (c) 2009 Nicholas Marriott <nicm@users.sourceforge.net>
+// Copyright (c) 2009 Joshua Elsasser <josh@elsasser.org>
+// Copyright (c) 2009 Todd Carson <toc@daybefore.net>
+//
+// Permission to use, copy, modify, and distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+// WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+// MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+// ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+// WHATSOEVER RESULTING FROM LOSS OF MIND, USE, DATA OR PROFITS, WHETHER
+// IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING
+// OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+#if defined(__linux__)
+
+static char *
+pty_getproc(int fd, char *tty) {
+  FILE *f;
+  char *path, *buf;
+  size_t len;
+  int ch;
+  pid_t pgrp;
+  int r;
+
+  if ((pgrp = tcgetpgrp(fd)) == -1) {
+    return NULL;
+  }
+
+  r = asprintf(&path, "/proc/%lld/cmdline", (long long)pgrp);
+  if (r == -1 || path == NULL) return NULL;
+
+  if ((f = fopen(path, "r")) == NULL) {
+    free(path);
+    return NULL;
+  }
+
+  free(path);
+
+  len = 0;
+  buf = NULL;
+  while ((ch = fgetc(f)) != EOF) {
+    if (ch == '\0') break;
+    buf = (char *)realloc(buf, len + 2);
+    if (buf == NULL) return NULL;
+    buf[len++] = ch;
+  }
+
+  if (buf != NULL) {
+    buf[len] = '\0';
+  }
+
+  fclose(f);
+  return buf;
+}
+
+#elif defined(__APPLE__)
+
+static char *
+pty_getproc(int fd) {
+  int mib[4] = { CTL_KERN, KERN_PROC, KERN_PROC_PID, 0 };
+  size_t size;
+  struct kinfo_proc kp;
+
+  if ((mib[3] = tcgetpgrp(fd)) == -1) {
+    return NULL;
+  }
+
+  size = sizeof kp;
+  if (sysctl(mib, 4, &kp, &size, NULL, 0) == -1) {
+    return NULL;
+  }
+
+  if (size != (sizeof kp) || *kp.kp_proc.p_comm == '\0') {
+    return NULL;
+  }
+
+  return strdup(kp.kp_proc.p_comm);
+}
+
+#else
+
+static char *
+pty_getproc(int fd, char *tty) {
+  return NULL;
+}
+
+#endif
+
+#if defined(__APPLE__)
+static void
+pty_posix_spawn(char** argv, char** env,
+                const struct termios *termp,
+                const struct winsize *winp,
+                int* master,
+                pid_t* pid,
+                int* err) {
+  int low_fds[3];
+  size_t count = 0;
+
+  for (; count < 3; count++) {
+    low_fds[count] = posix_openpt(O_RDWR);
+    if (low_fds[count] >= STDERR_FILENO)
+      break;
+  }
+
+  int flags = POSIX_SPAWN_CLOEXEC_DEFAULT |
+              POSIX_SPAWN_SETSIGDEF |
+              POSIX_SPAWN_SETSIGMASK |
+              POSIX_SPAWN_SETSID;
+  *master = posix_openpt(O_RDWR);
+  if (*master == -1) {
+    return;
+  }
+
+  int res = grantpt(*master) || unlockpt(*master);
+  if (res == -1) {
+    return;
+  }
+
+  // Use TIOCPTYGNAME instead of ptsname() to avoid threading problems.
+  int slave;
+  char slave_pty_name[128];
+  res = ioctl(*master, TIOCPTYGNAME, slave_pty_name);
+  if (res == -1) {
+    return;
+  }
+
+  slave = open(slave_pty_name, O_RDWR | O_NOCTTY);
+  if (slave == -1) {
+    return;
+  }
+
+  if (termp) {
+    res = tcsetattr(slave, TCSANOW, termp);
+    if (res == -1) {
+      return;
+    };
+  }
+
+  if (winp) {
+    res = ioctl(slave, TIOCSWINSZ, winp);
+    if (res == -1) {
+      return;
+    }
+  }
+
+  posix_spawn_file_actions_t acts;
+  posix_spawn_file_actions_init(&acts);
+  posix_spawn_file_actions_adddup2(&acts, slave, STDIN_FILENO);
+  posix_spawn_file_actions_adddup2(&acts, slave, STDOUT_FILENO);
+  posix_spawn_file_actions_adddup2(&acts, slave, STDERR_FILENO);
+  posix_spawn_file_actions_addclose(&acts, slave);
+  posix_spawn_file_actions_addclose(&acts, *master);
+
+  posix_spawnattr_t attrs;
+  posix_spawnattr_init(&attrs);
+  *err = posix_spawnattr_setflags(&attrs, flags);
+  if (*err != 0) {
+    goto done;
+  }
+
+  sigset_t signal_set;
+  /* Reset all signal the child to their default behavior */
+  sigfillset(&signal_set);
+  *err = posix_spawnattr_setsigdefault(&attrs, &signal_set);
+  if (*err != 0) {
+    goto done;
+  }
+
+  /* Reset the signal mask for all signals */
+  sigemptyset(&signal_set);
+  *err = posix_spawnattr_setsigmask(&attrs, &signal_set);
+  if (*err != 0) {
+    goto done;
+  }
+
+  do
+    *err = posix_spawn(pid, argv[0], &acts, &attrs, argv, env);
+  while (*err == EINTR);
+done:
+  posix_spawn_file_actions_destroy(&acts);
+  posix_spawnattr_destroy(&attrs);
+
+  for (; count > 0; count--) {
+    close(low_fds[count]);
+  }
+}
+#endif
+
+/**
+ * Init
+ */
+
+Napi::Object init(Napi::Env env, Napi::Object exports) {
+  exports.Set("fork",    Napi::Function::New(env, PtyFork));
+  exports.Set("open",    Napi::Function::New(env, PtyOpen));
+  exports.Set("resize",  Napi::Function::New(env, PtyResize));
+  exports.Set("process", Napi::Function::New(env, PtyGetProc));
+  return exports;
+}
+
+NODE_API_MODULE(NODE_GYP_MODULE_NAME, init)
diff --git a/config/scripts/build-relay.mjs b/config/scripts/build-relay.mjs
index 506036ede3a..289c7a957bd 100644
--- a/config/scripts/build-relay.mjs
+++ b/config/scripts/build-relay.mjs
@@ -57,6 +57,13 @@ const NODE_PTY_CONSOLE_LIST_PATCH_SOURCE = join(
   'relay-assets',
   NODE_PTY_CONSOLE_LIST_PATCH_FILENAME
 )
+const NODE_PTY_MASTER_CLOEXEC_PATCH_FILENAME = 'node-pty-1.1.0-master-cloexec-patch.cjs'
+const NODE_PTY_MASTER_CLOEXEC_PATCH_SOURCE = join(
+  ROOT,
+  'config',
+  'relay-assets',
+  NODE_PTY_MASTER_CLOEXEC_PATCH_FILENAME
+)
 // Written by build-windows-process-tree-relay-addon.mjs, which only runs on a
 // Windows machine.
 const WINDOWS_PROCESS_TREE_BUILD_DIR = join(ROOT, '.build', 'windows-process-tree')
@@ -126,6 +133,10 @@ for (const platform of RELAY_BUILD_PLATFORMS) {
       join(outDir, NODE_PTY_CONSOLE_LIST_PATCH_FILENAME)
     )
   }
+  copyFileSync(
+    NODE_PTY_MASTER_CLOEXEC_PATCH_SOURCE,
+    join(outDir, NODE_PTY_MASTER_CLOEXEC_PATCH_FILENAME)
+  )
   stageWindowsProcessTreeAddon(platform, outDir)
 
   await build({
diff --git a/config/scripts/node-pty-master-cloexec-patch.test.mjs b/config/scripts/node-pty-master-cloexec-patch.test.mjs
new file mode 100644
index 00000000000..16013cbf0a3
--- /dev/null
+++ b/config/scripts/node-pty-master-cloexec-patch.test.mjs
@@ -0,0 +1,229 @@
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { join, resolve } from 'node:path'
+import { afterEach, describe, expect, it } from 'vitest'
+
+const require = createRequire(import.meta.url)
+const {
+  SKIP_MARKER_FILENAME,
+  applyNodePtyMasterCloexecPatch,
+  assertPatchedNodePtyMasterCloexecSource,
+  patchNodePtyMasterCloexecSource,
+  revertNodePtyMasterCloexecSource
+} = require('../relay-assets/node-pty-1.1.0-master-cloexec-patch.cjs')
+
+// Byte-exact src/unix/pty.cc from the npm tarball the relay installs. The patch is keyed by its
+// sha256, so a fixture that drifted from what npm ships would make every assertion below vacuous.
+const STOCK_SOURCE = readFileSync(
+  resolve(import.meta.dirname, '__fixtures__', 'node-pty-1.1.0-unix-pty.cc'),
+  'utf8'
+)
+const projectDir = resolve(import.meta.dirname, '..', '..')
+const cleanupDirs = []
+
+afterEach(() => {
+  for (const dir of cleanupDirs.splice(0)) {
+    rmSync(dir, { recursive: true, force: true })
+  }
+})
+
+describe('SSH relay node-pty pty-master close-on-exec patch', () => {
+  it('adds the forkpty close-on-exec call and reverts to the published bytes', () => {
+    const fixture = writeRelayFixture()
+
+    expect(patchNodePtyMasterCloexecSource(fixture.root)).toBe(true)
+    const patched = readFileSync(fixture.sourcePath, 'utf8')
+    expect(patched).toContain('pty_cloexec(int fd)')
+    expect(patched).toContain('if (pty_cloexec(master) == -1)')
+    expect(() => assertPatchedNodePtyMasterCloexecSource(fixture.root)).not.toThrow()
+
+    expect(patchNodePtyMasterCloexecSource(fixture.root)).toBe(false)
+    expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(patched)
+
+    expect(revertNodePtyMasterCloexecSource(fixture.root)).toBe(true)
+    expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
+  })
+
+  it('refuses a different node-pty version or an unrecognized source', () => {
+    const wrongVersion = writeRelayFixture({ version: '1.2.0-beta.4' })
+    expect(() => patchNodePtyMasterCloexecSource(wrongVersion.root)).toThrow('expected 1.1.0')
+
+    const drifted = writeRelayFixture({
+      source: `${STOCK_SOURCE}\n// drift\n`
+    })
+    expect(() => patchNodePtyMasterCloexecSource(drifted.root)).toThrow('unexpected node-pty')
+
+    const tampered = writeRelayFixture()
+    patchNodePtyMasterCloexecSource(tampered.root)
+    writeFileSync(tampered.sourcePath, `${readFileSync(tampered.sourcePath, 'utf8')}\n// drift\n`)
+    expect(() => assertPatchedNodePtyMasterCloexecSource(tampered.root)).toThrow('not installed')
+  })
+
+  it('keeps the rebuilt addon once a later child no longer inherits the master', () => {
+    const fixture = writeRelayFixture()
+    const calls = []
+
+    const status = applyNodePtyMasterCloexecPatch(fixture.root, {
+      platform: 'linux',
+      rebuild: () => {
+        calls.push('rebuild')
+        writeBuild(fixture, 'patched-build')
+      },
+      verify: () => 'isolated'
+    })
+
+    expect(status).toBe('patched')
+    expect(calls).toEqual(['rebuild'])
+    expect(readFileSync(fixture.buildPath, 'utf8')).toBe('patched-build')
+    expect(readFileSync(fixture.sourcePath, 'utf8')).not.toBe(STOCK_SOURCE)
+    expect(existsSync(fixture.backupDir)).toBe(false)
+    expect(existsSync(fixture.skipMarkerPath)).toBe(false)
+  })
+
+  it('keeps a rebuilt addon whose flag /proc could not confirm', () => {
+    const fixture = writeRelayFixture()
+
+    const status = applyNodePtyMasterCloexecPatch(fixture.root, {
+      platform: 'linux',
+      rebuild: () => writeBuild(fixture, 'patched-build'),
+      verify: () => 'unverified'
+    })
+
+    expect(status).toBe('patched-unverified')
+    expect(readFileSync(fixture.buildPath, 'utf8')).toBe('patched-build')
+  })
+
+  it('restores the working build when the compile fails, and never retries it', () => {
+    const fixture = writeRelayFixture()
+    const calls = []
+
+    const failed = applyNodePtyMasterCloexecPatch(fixture.root, {
+      platform: 'linux',
+      rebuild: () => {
+        calls.push('rebuild')
+        throw new Error('npm rebuild node-pty exited 1: no C++ toolchain')
+      },
+      verify: () => 'isolated'
+    })
+
+    expect(failed).toContain('failed:')
+    expect(failed).toContain('no C++ toolchain')
+    expect(readFileSync(fixture.buildPath, 'utf8')).toBe('stock-build')
+    expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
+    expect(existsSync(fixture.backupDir)).toBe(false)
+    expect(existsSync(fixture.skipMarkerPath)).toBe(true)
+
+    // Bounded, not backed off: a relay directory gets one compile attempt, ever.
+    const again = applyNodePtyMasterCloexecPatch(fixture.root, {
+      platform: 'linux',
+      rebuild: () => calls.push('rebuild'),
+      verify: () => 'isolated'
+    })
+    expect(again).toBe('skipped:earlier-attempt-failed')
+    expect(calls).toEqual(['rebuild'])
+  })
+
+  it('restores the working build when the rebuilt addon still leaks the master', () => {
+    const fixture = writeRelayFixture()
+
+    const status = applyNodePtyMasterCloexecPatch(fixture.root, {
+      platform: 'linux',
+      rebuild: () => writeBuild(fixture, 'still-leaky-build'),
+      verify: () => {
+        throw new Error('rebuilt node-pty still leaks the pty master into later children')
+      }
+    })
+
+    expect(status).toContain('still leaks')
+    expect(readFileSync(fixture.buildPath, 'utf8')).toBe('stock-build')
+    expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
+  })
+
+  it('never compiles on a platform that does not leak', () => {
+    for (const platform of ['darwin', 'win32']) {
+      const fixture = writeRelayFixture()
+      const calls = []
+      const status = applyNodePtyMasterCloexecPatch(fixture.root, {
+        platform,
+        rebuild: () => calls.push('rebuild'),
+        verify: () => 'isolated'
+      })
+      expect(status).toBe('skipped:not-linux')
+      expect(calls).toEqual([])
+      expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
+    }
+  })
+
+  it('leaves an already patched install alone', () => {
+    const fixture = writeRelayFixture()
+    patchNodePtyMasterCloexecSource(fixture.root)
+    const calls = []
+
+    const status = applyNodePtyMasterCloexecPatch(fixture.root, {
+      platform: 'linux',
+      rebuild: () => calls.push('rebuild'),
+      verify: () => 'isolated'
+    })
+
+    expect(status).toBe('already-patched')
+    expect(calls).toEqual([])
+  })
+
+  it('will not rebuild an install that has no compiled addon to fall back on', () => {
+    const fixture = writeRelayFixture({ build: false })
+    const calls = []
+
+    const status = applyNodePtyMasterCloexecPatch(fixture.root, {
+      platform: 'linux',
+      rebuild: () => calls.push('rebuild'),
+      verify: () => 'isolated'
+    })
+
+    expect(status).toBe('skipped:no-compiled-build')
+    expect(calls).toEqual([])
+    expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
+  })
+
+  it('discards a backup stranded by an interrupted rebuild', () => {
+    const fixture = writeRelayFixture()
+    mkdirSync(fixture.backupDir, { recursive: true })
+    writeFileSync(join(fixture.backupDir, 'pty.node'), 'stranded-build')
+
+    const status = applyNodePtyMasterCloexecPatch(fixture.root, {
+      platform: 'linux',
+      rebuild: () => writeBuild(fixture, 'patched-build'),
+      verify: () => 'isolated'
+    })
+
+    expect(status).toBe('patched')
+    expect(existsSync(fixture.backupDir)).toBe(false)
+    expect(readFileSync(fixture.buildPath, 'utf8')).toBe('patched-build')
+  })
+})
+
+function writeRelayFixture({ version = '1.1.0', source = STOCK_SOURCE, build = true } = {}) {
+  const root = mkdtempSync(join(projectDir, '.node-pty-cloexec-patch-test-'))
+  cleanupDirs.push(root)
+  const nodePtyDir = join(root, 'node_modules', 'node-pty')
+  const sourcePath = join(nodePtyDir, 'src', 'unix', 'pty.cc')
+  const buildPath = join(nodePtyDir, 'build', 'Release', 'pty.node')
+  mkdirSync(join(nodePtyDir, 'src', 'unix'), { recursive: true })
+  writeFileSync(join(nodePtyDir, 'package.json'), JSON.stringify({ version }))
+  writeFileSync(sourcePath, source)
+  const fixture = {
+    root,
+    sourcePath,
+    buildPath,
+    backupDir: join(nodePtyDir, '.orca-cloexec-prepatch-release'),
+    skipMarkerPath: join(root, SKIP_MARKER_FILENAME)
+  }
+  if (build) {
+    writeBuild(fixture, 'stock-build')
+  }
+  return fixture
+}
+
+function writeBuild(fixture, contents) {
+  mkdirSync(resolve(fixture.buildPath, '..'), { recursive: true })
+  writeFileSync(fixture.buildPath, contents)
+}
diff --git a/src/main/ssh/ssh-relay-deploy.ts b/src/main/ssh/ssh-relay-deploy.ts
index 54c64a80b20..fc65af35c0a 100644
--- a/src/main/ssh/ssh-relay-deploy.ts
+++ b/src/main/ssh/ssh-relay-deploy.ts
@@ -727,6 +727,31 @@ function uploadStageNamespaceIfSupported(
 
 const NODE_PTY_VERSION = '1.1.0'
 const NODE_PTY_CONSOLE_LIST_PATCH_FILENAME = 'node-pty-1.1.0-console-list-agent-patch.cjs'
+const NODE_PTY_MASTER_CLOEXEC_PATCH_FILENAME = 'node-pty-1.1.0-master-cloexec-patch.cjs'
+const NODE_PTY_CLOEXEC_STATUS_PREFIX = 'ORCA-NPTY-CLOEXEC:'
+/**
+ * Whether the tree the patch left behind still leaks the pty master into every later child.
+ * `fixed` is the only outcome a shared cache entry may be published from.
+ */
+type NodePtyMasterCloexecOutcome = 'fixed' | 'unfixed'
+/**
+ * The statuses that leave a non-leaking tree. Deliberately an allowlist, not a `failed:` denylist:
+ * the script's `skipped:` family is mixed. `skipped:not-linux` is a platform that never leaks, but
+ * `skipped:earlier-attempt-failed`, `skipped:no-compiled-build`, `skipped:unexpected-source` and
+ * the two `skipped:<errno>` forms all mean the patch was refused and the leaky build is still on
+ * disk -- indistinguishable from `failed:` as far as what gets published.
+ */
+const NODE_PTY_CLOEXEC_FIXED_STATUSES: ReadonlySet<string> = new Set([
+  'patched',
+  // The rebuild ran from patched source; only the isolation check could not observe the result.
+  // An unobservable check is not a failed patch, and treating it as one would disable the shared
+  // cache on every host without `lsof`.
+  'patched-unverified',
+  'already-patched',
+  // Unreachable while the platform gate below short-circuits first, but it is the one `skipped:`
+  // that means "nothing to fix" rather than "would not fix it".
+  'skipped:not-linux'
+])
 // Exported for the relay-native-dependency-coverage test, which asserts every
 // native addon the relay bundle imports is either installed here or explicitly
 // declared as degrading without it.
@@ -1213,10 +1238,35 @@ async function installNativeDeps(
     }
   }
 
+  // Why this precedes promotion: the patch renames `node-pty/build/Release`, runs `npm rebuild`
+  // and rolls back inside `node_modules`, and promotion turns that directory into a symlink to a
+  // published -- and by contract immutable -- shared cache entry. Patching afterwards would write
+  // through the link, and `.deps-complete` would already have published an unpatched tree that
+  // every later host links and skips.
+  const cloexec = probe.available
+    ? await applyNodePtyMasterCloexecPatch(
+        conn,
+        remoteDir,
+        platform,
+        hostPlatform,
+        nodePath,
+        signal
+      )
+    : 'unfixed'
+
   // Why promotion is gated on the probe and not on npm's exit code: an entry is shared, so the
   // only evidence worth publishing is this host having loaded both addons out of that tree.
+  // Why it is gated on the patch too: a refused or rolled-back patch leaves the pre-patch leaky
+  // build in place, and the cache key hashes this patch's bytes -- so publishing it would hand
+  // every later host on the machine a tree that links, probes loadable, and skips patching.
   if (probe.available && cacheContext && cache) {
-    await promoteRelayNativeDepsCache(conn, cacheContext, cache.key)
+    if (cloexec === 'fixed') {
+      await promoteRelayNativeDepsCache(conn, cacheContext, cache.key)
+    } else {
+      console.warn(
+        `[ssh-relay][NPTY-CLOEXEC-UNSHARED] keeping the native deps at ${remoteDir} (${platform}) private; the tree still leaks the pty master, so it is not publishable as ${cache.key}`
+      )
+    }
   }
 
   // MISSING is non-fatal by design: the relay still serves fs/git/preflight; only native-backed ops fail on hosts that can't build the addons.
@@ -1227,6 +1277,76 @@ async function installNativeDeps(
   }
 }
 
+/**
+ * Re-apply the pty-master FD_CLOEXEC patch the app gets from pnpm to the host's npm copy (#17915).
+ *
+ * Why it is safe to rebuild under a live relay: this only runs from installNativeDeps, so only on a
+ * freshly created directory or a locked repair, and a relay already serving PTYs has pty.node mapped
+ * -- replacing the file on disk does not touch the running process. It keeps the build it started
+ * with and picks up the patched one when it restarts.
+ *
+ * Why it is bounded: the remote script attempts the compile at most once per relay directory, and
+ * the directory is content-hashed over the relay manifest -- so at most one compile per bundle.
+ *
+ * Why a shared cache entry never reaches here: the caller returns as soon as a linked tree probes
+ * loadable, so this only ever rewrites a `node_modules` the relay directory still owns privately.
+ *
+ * Returns whether the tree that is left behind still leaks, which is what decides publishability.
+ * The script exits 0 on every outcome by design, so the status line is the only evidence there is.
+ */
+async function applyNodePtyMasterCloexecPatch(
+  conn: SshConnection,
+  remoteDir: string,
+  platform: RelayPlatform,
+  hostPlatform: RemoteHostPlatform,
+  nodePath: string,
+  signal?: AbortSignal
+): Promise<NodePtyMasterCloexecOutcome> {
+  // Linux is the only relay platform that takes forkpty()'s no-O_CLOEXEC path; macOS and Windows
+  // ship prebuilds, so forcing a rebuild there would add a first compile to fix nothing.
+  if (isWindowsRemoteHost(hostPlatform) || !platform.startsWith('linux')) {
+    return 'fixed'
+  }
+  try {
+    const command = commandWithNodePath(
+      hostPlatform,
+      nodePath,
+      remoteDir,
+      `${shellEscape(nodePath)} ${shellEscape(NODE_PTY_MASTER_CLOEXEC_PATCH_FILENAME)} 2>&1`
+    )
+    const output = await execHostCommand(conn, hostPlatform, command, {
+      timeoutMs: NATIVE_DEPS_COMMAND_TIMEOUT_MS,
+      signal
+    })
+    const status =
+      output
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .find((line) => line.startsWith(NODE_PTY_CLOEXEC_STATUS_PREFIX))
+        ?.slice(NODE_PTY_CLOEXEC_STATUS_PREFIX.length) ?? 'no-status'
+    if (!NODE_PTY_CLOEXEC_FIXED_STATUSES.has(status)) {
+      // Warn, not log: the script exits 0 on a refusal too, so this line is the only thing that
+      // says the relay directory will leak a master into every child for its whole life.
+      console.warn(
+        `[ssh-relay][NPTY-CLOEXEC-UNFIXED] pty master still leaks at ${remoteDir} (${platform}): ${status}`
+      )
+      return 'unfixed'
+    }
+    console.log(`[ssh-relay][NPTY-CLOEXEC] ${remoteDir} (${platform}): ${status}`)
+    return 'fixed'
+  } catch (err) {
+    signal?.throwIfAborted()
+    // Never fatal: the script restores the working build itself, and a leaky relay beats none. An
+    // interrupted rebuild leaves node-pty unloadable, which the existing repair path reinstalls.
+    console.warn(
+      `[ssh-relay][NPTY-CLOEXEC-FAIL] pty master cloexec patch failed at ${remoteDir} (${platform}): ${(err as Error).message}`
+    )
+    // An exec that never answered cannot say which build is on disk, and a tree nobody can vouch
+    // for is exactly the one not to share.
+    return 'unfixed'
+  }
+}
+
 /**
  * Drop a shared-cache symlink before anything writes into `node_modules`.
  *
diff --git a/src/main/ssh/ssh-relay-native-deps-cache-deploy.test.ts b/src/main/ssh/ssh-relay-native-deps-cache-deploy.test.ts
index 61e6133b9a5..cafc82960f3 100644
--- a/src/main/ssh/ssh-relay-native-deps-cache-deploy.test.ts
+++ b/src/main/ssh/ssh-relay-native-deps-cache-deploy.test.ts
@@ -85,6 +85,9 @@ import {
 } from './ssh-relay-native-deps-cache-commands'
 
 // Everything after the probe on a healthy install: stderr cleanup, stage cleanup, launch.
+// Stdout of the relay-side pty-master cloexec patch, which runs on Linux hosts once a
+// freshly installed node-pty loads (#17915).
+const NPTY_CLOEXEC_PATCHED = 'ORCA-NPTY-CLOEXEC:patched\n'
 const LAUNCH_TAIL: ExecResponse[] = ['', 'DEAD', '', 'READY']
 
 describe('relay native-deps cache on the deploy path', () => {
@@ -165,6 +168,7 @@ describe('relay native-deps cache on the deploy path', () => {
         '', // chmod prebuilds
         'ORCA-NPTY-PROBE-OK\n',
         '', // rm probe stderr
+        NPTY_CLOEXEC_PATCHED,
         RELAY_NATIVE_CACHE_PROMOTED,
         ...LAUNCH_TAIL
       ])
@@ -214,6 +218,7 @@ describe('relay native-deps cache on the deploy path', () => {
       '', // chmod prebuilds
       'ORCA-NPTY-PROBE-OK\n',
       '', // rm probe stderr
+      NPTY_CLOEXEC_PATCHED,
       '', // publication is attempted and answers nothing
       ...LAUNCH_TAIL
     ])
@@ -235,6 +240,7 @@ describe('relay native-deps cache on the deploy path', () => {
         '', // chmod prebuilds
         'ORCA-NPTY-PROBE-OK\n',
         '', // rm probe stderr
+        NPTY_CLOEXEC_PATCHED,
         '', // promotion attempt (the entry already exists, so it is declined)
         ...LAUNCH_TAIL
       ])
@@ -264,6 +270,7 @@ describe('relay native-deps cache on the deploy path', () => {
       '', // chmod prebuilds
       'ORCA-NPTY-PROBE-OK\n',
       '', // rm probe stderr
+      NPTY_CLOEXEC_PATCHED,
       'DEAD',
       '', // publish the per-launch credential
       'READY'
diff --git a/src/main/ssh/ssh-relay-native-deps-cache.ts b/src/main/ssh/ssh-relay-native-deps-cache.ts
index 934aaff63a6..8400a467a91 100644
--- a/src/main/ssh/ssh-relay-native-deps-cache.ts
+++ b/src/main/ssh/ssh-relay-native-deps-cache.ts
@@ -23,6 +23,12 @@
  * Windows is deliberately excluded. node-pty's npm tarball ships win32 prebuilts, so there is no
  * compile to avoid there, and `node-pty-1.1.0-console-list-agent-patch.cjs` mutates the installed
  * tree in place — which rule 1 forbids for a shared one.
+ *
+ * Linux's `node-pty-1.1.0-master-cloexec-patch.cjs` also mutates in place, but it stays inside rule
+ * 1: the deploy path runs it before promotion, and returns early on a linked entry, so it only ever
+ * touches a private tree. Its bytes are in the key, so a patched build never links a pre-patch
+ * entry -- and a tree whose patch was refused or rolled back is not promoted at all, because under
+ * that same key it would publish the leak to every later host on the machine.
  */
 import { createHash } from 'node:crypto'
 import { RELAY_REMOTE_DIR } from './relay-protocol'
diff --git a/src/main/ssh/ssh-relay-native-deps-install-fixture.ts b/src/main/ssh/ssh-relay-native-deps-install-fixture.ts
index 922b8bedf61..5cd20a03438 100644
--- a/src/main/ssh/ssh-relay-native-deps-install-fixture.ts
+++ b/src/main/ssh/ssh-relay-native-deps-install-fixture.ts
@@ -15,6 +15,9 @@ export type SftpWriteCapture = {
 
 type SftpCallback = (err: Error | null, resolved?: string) => void
 const NO_SUCH_SFTP_FILE = Object.assign(new Error('No such file'), { code: 2 })
+// Stdout of the relay-side pty-master cloexec patch; kept as a literal so the fixture states the
+// wire token it is standing in for rather than importing the module under test.
+const NODE_PTY_CLOEXEC_STATUS_PREFIX = 'ORCA-NPTY-CLOEXEC:'
 
 export function makeMockConnection(capture: SftpWriteCapture): SshConnection {
   // Why: production attaches/removes real listeners (including prependOnceListener), so the fake must be an emitter.
@@ -196,6 +199,9 @@ export function makeExecResponses(opts: {
   }
   // Publication is gated on the probe: only a tree this host actually loaded is shared.
   if (loadable) {
+    // The cloexec patch runs first, and publication is gated on its status, so `patched` is what
+    // makes the promote exec below reachable at all.
+    slots.push(`${NODE_PTY_CLOEXEC_STATUS_PREFIX}patched\n`)
     slots.push('') // promote the private tree into the shared native-deps cache
   }
   slots.push('', 'DEAD', '', 'READY') // clean stage root, launch, credential, readiness
diff --git a/src/main/ssh/ssh-relay-native-deps-install.test.ts b/src/main/ssh/ssh-relay-native-deps-install.test.ts
index 16144fb2cf3..01625816170 100644
--- a/src/main/ssh/ssh-relay-native-deps-install.test.ts
+++ b/src/main/ssh/ssh-relay-native-deps-install.test.ts
@@ -630,6 +630,7 @@ describe('installNativeDeps (via deployAndLaunchRelay)', () => {
       '', // chmod prebuilds
       'ORCA-NPTY-PROBE-OK\n',
       '', // rm probe stderr
+      'ORCA-NPTY-CLOEXEC:patched\n', // pty-master cloexec patch on the loadable node-pty
       'DEAD',
       '', // publish the per-launch credential
       'READY'
diff --git a/src/main/ssh/ssh-relay-native-deps-probe-verdict.test.ts b/src/main/ssh/ssh-relay-native-deps-probe-verdict.test.ts
index df946dfe346..3939c954f65 100644
--- a/src/main/ssh/ssh-relay-native-deps-probe-verdict.test.ts
+++ b/src/main/ssh/ssh-relay-native-deps-probe-verdict.test.ts
@@ -85,6 +85,9 @@ import {
   type SftpWriteCapture
 } from './ssh-relay-native-deps-install-fixture'
 
+// Stdout of the relay-side pty-master cloexec patch, which runs on Linux hosts once a
+// freshly installed node-pty loads (#17915).
+const NPTY_CLOEXEC_PATCHED = 'ORCA-NPTY-CLOEXEC:patched\n'
 const NODE_PTY_RESET = "rm -rf 'node_modules/node-pty'"
 const WATCHER_RESET = "rm -rf 'node_modules/@parcel/watcher'"
 
@@ -225,6 +228,7 @@ describe('native-deps repair probe verdicts', () => {
       '', // chmod prebuilds
       'ORCA-NPTY-PROBE-OK\n',
       '', // rm probe stderr
+      NPTY_CLOEXEC_PATCHED,
       'DEAD',
       '', // publish the per-launch credential
       'READY'
@@ -281,6 +285,7 @@ describe('native-deps repair probe verdicts', () => {
       '', // chmod prebuilds
       'ORCA-NPTY-PROBE-OK\n',
       '', // rm probe stderr
+      NPTY_CLOEXEC_PATCHED,
       'DEAD',
       '', // publish the per-launch credential
       'READY'
@@ -324,6 +329,7 @@ describe('native-deps repair probe verdicts', () => {
       '', // chmod prebuilds
       'ORCA-NPTY-PROBE-OK\n',
       '', // rm probe stderr
+      NPTY_CLOEXEC_PATCHED,
       'DEAD',
       '', // publish the per-launch credential
       'READY'
diff --git a/src/main/ssh/ssh-relay-node-pty-spawn-repair.test.ts b/src/main/ssh/ssh-relay-node-pty-spawn-repair.test.ts
index 12a51ce6bdd..8981b6319a8 100644
--- a/src/main/ssh/ssh-relay-node-pty-spawn-repair.test.ts
+++ b/src/main/ssh/ssh-relay-node-pty-spawn-repair.test.ts
@@ -103,6 +103,9 @@ const ABI_MISMATCH: TerminalUnavailableCause = {
 
 // The relay dir is complete but node-pty will not load, which is exactly what the spawn-time cause
 // describes. @parcel/watcher is healthy, so only node-pty is reset and rebuilt.
+// Stdout of the relay-side pty-master cloexec patch, which runs on Linux hosts once a
+// freshly installed node-pty loads (#17915).
+const NPTY_CLOEXEC_PATCHED = 'ORCA-NPTY-CLOEXEC:patched\n'
 const NODE_PTY_BROKEN = 'ORCA-NATIVE-DEPS-MISSING:node-pty\nMISSING'
 
 function repairSucceedsResponses(): ExecResponse[] {
@@ -116,6 +119,7 @@ function repairSucceedsResponses(): ExecResponse[] {
     '', // chmod prebuilds
     'ORCA-NPTY-PROBE-OK\n', // node-pty loads again
     '', // rm -f probe stderr
+    NPTY_CLOEXEC_PATCHED,
     'DEAD',
     '', // publish the per-launch credential
     'READY'
diff --git a/src/main/ssh/ssh-relay-pty-master-cloexec-install.test.ts b/src/main/ssh/ssh-relay-pty-master-cloexec-install.test.ts
new file mode 100644
index 00000000000..66af01fa43c
--- /dev/null
+++ b/src/main/ssh/ssh-relay-pty-master-cloexec-install.test.ts
@@ -0,0 +1,336 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as RelayInstallMarkerModule from './ssh-relay-install-marker'
+
+vi.mock('electron', () => ({
+  app: { getAppPath: () => '/mock/app' }
+}))
+
+vi.mock('fs', () => ({
+  existsSync: vi.fn().mockReturnValue(true),
+  readFileSync: vi.fn().mockReturnValue('0.1.0+testhash')
+}))
+
+vi.mock('./relay-protocol', () => ({
+  RELAY_VERSION: '0.1.0',
+  RELAY_REMOTE_DIR: '.orca-remote',
+  parseUnameToRelayPlatform: vi.fn().mockReturnValue('linux-x64'),
+  RELAY_SENTINEL: 'ORCA-RELAY v0.1.0 READY\n',
+  RELAY_SENTINEL_TIMEOUT_MS: 10_000
+}))
+
+vi.mock('./ssh-relay-deploy-helpers', () => ({
+  uploadDirectory: vi.fn().mockResolvedValue(undefined),
+  waitForSentinel: vi.fn().mockResolvedValue({
+    write: vi.fn(),
+    onData: vi.fn(),
+    onClose: vi.fn()
+  }),
+  isUnconfirmedSshCommandTermination: (error: unknown) =>
+    error instanceof Error &&
+    (error as Error & { sshChannelCloseConfirmed?: boolean }).sshChannelCloseConfirmed === false,
+  execCommand: vi.fn()
+}))
+
+vi.mock('./ssh-remote-node-resolution', () => ({
+  resolveRemoteNodePath: vi.fn().mockResolvedValue('/usr/bin/node')
+}))
+
+vi.mock('./ssh-relay-install-marker', async (importOriginal) => ({
+  ...(await importOriginal<typeof RelayInstallMarkerModule>()),
+  createRelayInstallMarkerFileName: () => '.sftp-namespace-00000000000000000000000000000000'
+}))
+
+vi.mock('./ssh-relay-versioned-install', () => ({
+  readLocalFullVersion: vi.fn().mockReturnValue('0.1.0+testhash'),
+  computeRemoteRelayDir: (home: string, v: string) => `${home}/.orca-remote/relay-${v}`,
+  isRelayAlreadyInstalled: vi.fn().mockResolvedValue(false),
+  finalizeInstall: vi.fn().mockResolvedValue(undefined),
+  abandonInstall: vi.fn().mockResolvedValue(undefined),
+  gcOldRelayVersions: vi.fn().mockResolvedValue(undefined)
+}))
+
+vi.mock('./ssh-relay-install-lock', () => ({
+  acquireInstallLock: vi.fn().mockResolvedValue(undefined),
+  RELAY_INSTALL_LOCK_NAME: '.install-lock'
+}))
+
+vi.mock('./ssh-relay-repair-lock', () => ({
+  tryAcquireRelayRepairLock: vi.fn().mockResolvedValue('acquired')
+}))
+
+vi.mock('./ssh-relay-gc-claim', () => ({
+  releaseRelayGcClaimWithRetry: vi.fn().mockResolvedValue('released'),
+  tryAcquireRelayGcClaim: vi.fn().mockResolvedValue('launch-token'),
+  waitForRelayGcClaimRelease: vi.fn().mockResolvedValue(undefined)
+}))
+
+vi.mock('./ssh-connection-utils', () => ({
+  shellEscape: (s: string) => `'${s}'`
+}))
+
+import { deployAndLaunchRelay } from './ssh-relay-deploy'
+import { execCommand } from './ssh-relay-deploy-helpers'
+import { parseUnameToRelayPlatform } from './relay-protocol'
+import {
+  makeExecResponses,
+  makeStagedFirstInstallExecPrefix,
+  makeMockConnection,
+  type ExecResponse,
+  type SftpWriteCapture
+} from './ssh-relay-native-deps-install-fixture'
+import { RELAY_NATIVE_CACHE_LINKED } from './ssh-relay-native-deps-cache-commands'
+import { RELAY_ARTIFACTS } from '../../shared/relay-artifacts'
+import {
+  computeRelayNativeDepsCacheKey,
+  RELAY_NATIVE_DEPS_PATCH_ARTIFACT_PATTERN
+} from './ssh-relay-native-deps-cache'
+
+const PATCH_ASSET = 'node-pty-1.1.0-master-cloexec-patch.cjs'
+
+/**
+ * The relay installs stock node-pty from npm, so the app's pnpm patch never reaches it and every
+ * later child of the relay inherits a live pty master (#17915). The compile that closes it sits on
+ * the connect path, so what these specs pin is the blast radius, not the patch itself.
+ */
+describe('relay pty-master close-on-exec patch on the install path', () => {
+  const sftpCapture: SftpWriteCapture = {
+    paths: [],
+    contents: {},
+    execCallCountAtWrite: {}
+  }
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    vi.mocked(execCommand).mockReset().mockResolvedValue('')
+    sftpCapture.paths.length = 0
+    vi.mocked(parseUnameToRelayPlatform).mockReturnValue('linux-x64')
+  })
+
+  function feed(execResponses: ExecResponse[]): void {
+    const mockExec = vi.mocked(execCommand)
+    for (const response of execResponses) {
+      if (typeof response === 'string') {
+        mockExec.mockResolvedValueOnce(response)
+      } else {
+        mockExec.mockRejectedValueOnce(new Error(response.reject))
+      }
+    }
+  }
+
+  function firstInstall(cacheAnswer: string, tail: ExecResponse[]): ExecResponse[] {
+    const prefix = makeStagedFirstInstallExecPrefix()
+    // The prefix's last slot is the shared native-deps cache probe.
+    prefix[prefix.length - 1] = cacheAnswer
+    return [...prefix, ...tail]
+  }
+
+  function patchCommands(): string[] {
+    return vi
+      .mocked(execCommand)
+      .mock.calls.map(([, command]) => command)
+      .filter((command) => command.includes(PATCH_ASSET))
+  }
+
+  /** Whether this deploy elected itself publisher of the shared entry. */
+  function promoted(): boolean {
+    return vi
+      .mocked(execCommand)
+      .mock.calls.some(([, command]) => command.includes('mkdir "$cache"'))
+  }
+
+  /**
+   * A cache-miss first install whose patch reports `status`. The promote slot is fed either way,
+   * so a run that wrongly promotes reads a valid response rather than falling off the end -- the
+   * assertion has to be the absence of the command itself, not a downstream crash.
+   */
+  function firstInstallReporting(status: string): ExecResponse[] {
+    return [
+      ...makeStagedFirstInstallExecPrefix(),
+      '', // npm install native deps
+      '', // chmod prebuilds
+      'ORCA-NPTY-PROBE-OK\n',
+      '', // rm probe stderr
+      `ORCA-NPTY-CLOEXEC:${status}\n`,
+      '', // promote into the shared native-deps cache, if this deploy still gets that far
+      '', // clean stage root
+      'DEAD',
+      '', // publish the per-launch credential
+      'READY'
+    ]
+  }
+
+  it('runs the patch on a Linux relay once node-pty is proven loadable', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    feed(makeExecResponses({ npmInstall: 'ok', probe: 'ok' }))
+
+    await deployAndLaunchRelay(conn)
+
+    expect(patchCommands()).toHaveLength(1)
+    expect(patchCommands()[0]).toContain("'/usr/bin/node'")
+  })
+
+  it('patches the private tree before it is published to the shared native-deps cache', async () => {
+    // Promotion moves `node_modules` into `~/.orca-remote/native/<key>` and leaves a symlink
+    // behind, and a published entry is immutable by contract. Patching afterwards would rename,
+    // rebuild and roll back inside a tree every other relay on the host links -- and the
+    // `.deps-complete` written by promotion would have published an unpatched tree that every
+    // later host links and skips. The ordering is invisible in review, so pin it.
+    const conn = makeMockConnection(sftpCapture)
+    feed(makeExecResponses({ npmInstall: 'ok', probe: 'ok' }))
+
+    await deployAndLaunchRelay(conn)
+
+    const commands = vi.mocked(execCommand).mock.calls.map(([, command]) => command)
+    const patchAt = commands.findIndex((command) => command.includes(PATCH_ASSET))
+    const promoteAt = commands.findIndex((command) => command.includes('mkdir "$cache"'))
+    expect(patchAt).toBeGreaterThan(-1)
+    expect(promoteAt).toBeGreaterThan(-1)
+    expect(patchAt).toBeLessThan(promoteAt)
+  })
+
+  it('does not publish a tree whose patch failed and rolled back', async () => {
+    // The script rolls `pty.cc` and `build/Release` back to the pre-patch, still-leaky build and
+    // reports `failed:` with exit 0, so nothing throws. Publishing that tree would be worse than
+    // the leak this PR closes: the key hashes the patch's bytes, so every later host on the
+    // machine links the entry, probes it loadable, and skips patching. Stay private instead.
+    const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
+    try {
+      const conn = makeMockConnection(sftpCapture)
+      feed(firstInstallReporting('failed:npm rebuild node-pty failed: gyp ERR! not found: make'))
+
+      await deployAndLaunchRelay(conn)
+
+      expect(patchCommands()).toHaveLength(1)
+      expect(promoted()).toBe(false)
+      expect(warn.mock.calls.map((args) => String(args[0] ?? '')).join('\n')).toContain(
+        '[ssh-relay][NPTY-CLOEXEC-UNSHARED]'
+      )
+    } finally {
+      warn.mockRestore()
+    }
+  })
+
+  it('does not publish a tree the patch refused to touch', async () => {
+    // `skipped:` is not one verdict. Every form except `skipped:not-linux` means the patch was
+    // declined and the leaky build is still on disk, which is indistinguishable from `failed:`
+    // as far as what would get published.
+    const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
+    try {
+      const conn = makeMockConnection(sftpCapture)
+      feed(firstInstallReporting('skipped:earlier-attempt-failed'))
+
+      await deployAndLaunchRelay(conn)
+
+      expect(promoted()).toBe(false)
+      // A refusal exits 0, so the warn is the only signal that this host stayed leaky.
+      expect(warn.mock.calls.map((args) => String(args[0] ?? '')).join('\n')).toContain(
+        '[ssh-relay][NPTY-CLOEXEC-UNFIXED]'
+      )
+    } finally {
+      warn.mockRestore()
+    }
+  })
+
+  it('still publishes a tree that was patched but whose isolation check could not run', async () => {
+    // `patched-unverified` rebuilt from patched source; only the check that watches a later child
+    // could not observe the result. An unobservable check is not a failed patch, and refusing to
+    // publish here would disable the shared cache on every host without `lsof`.
+    const conn = makeMockConnection(sftpCapture)
+    feed(firstInstallReporting('patched-unverified'))
+
+    await deployAndLaunchRelay(conn)
+
+    expect(promoted()).toBe(true)
+  })
+
+  it('never patches through a symlink into an entry another relay already published', async () => {
+    // A linked entry was built under a key that hashes this patch's bytes, so it is already
+    // patched; re-running the patch would rebuild inside the shared tree.
+    const conn = makeMockConnection(sftpCapture)
+    feed(
+      firstInstall(RELAY_NATIVE_CACHE_LINKED, [
+        '', // chmod prebuilds, through the symlink
+        'ORCA-NPTY-PROBE-OK\n',
+        '', // rm probe stderr
+        '', // clean stage root
+        'DEAD',
+        '', // publish the per-launch credential
+        'READY'
+      ])
+    )
+
+    await deployAndLaunchRelay(conn)
+
+    expect(patchCommands()).toEqual([])
+  })
+
+  it('leaves an unloadable node-pty alone rather than rebuilding it blind', async () => {
+    // A relay that could not build node-pty has nothing to fall back to, and the existing
+    // reinstall path owns that repair.
+    const conn = makeMockConnection(sftpCapture)
+    feed(
+      makeExecResponses({
+        npmInstall: 'ok',
+        probe: 'missing',
+        repairProbe: 'missing'
+      })
+    )
+
+    await deployAndLaunchRelay(conn)
+
+    expect(patchCommands()).toEqual([])
+  })
+
+  it('never adds a compile to a macOS relay, which does not leak the master', async () => {
+    vi.mocked(parseUnameToRelayPlatform).mockReturnValue('darwin-arm64')
+    const conn = makeMockConnection(sftpCapture)
+    feed([
+      ...makeStagedFirstInstallExecPrefix(),
+      '', // npm install native deps
+      '', // chmod prebuilds
+      'ORCA-NPTY-PROBE-OK\n',
+      '', // rm probe stderr
+      '', // promote into the shared native-deps cache
+      '', // clean stage root
+      'DEAD',
+      '', // publish the per-launch credential
+      'READY'
+    ])
+
+    await deployAndLaunchRelay(conn)
+
+    expect(patchCommands()).toEqual([])
+  })
+
+  it('connects anyway when the patch command fails outright', async () => {
+    const conn = makeMockConnection(sftpCapture)
+    const responses = makeExecResponses({ npmInstall: 'ok', probe: 'ok' })
+    const patchSlot = responses.findIndex(
+      (response) => typeof response === 'string' && response.includes('ORCA-NPTY-CLOEXEC:')
+    )
+    expect(patchSlot).toBeGreaterThan(-1)
+    responses[patchSlot] = { reject: 'no such file or directory' }
+    feed(responses)
+
+    await expect(deployAndLaunchRelay(conn)).resolves.toBeDefined()
+  })
+})
+
+describe('the shipped patch is part of the shared native-deps cache key', () => {
+  it('mints a new entry, so a pre-fix unpatched tree is never linked by a patched build', () => {
+    const artifact = RELAY_ARTIFACTS.find((entry) => entry.filename === PATCH_ASSET)
+    expect(artifact).toBeDefined()
+    // A windowsOnly artifact never reaches a Linux relay dir, so it would drop out of the key.
+    expect(artifact?.windowsOnly).toBeFalsy()
+    expect(RELAY_NATIVE_DEPS_PATCH_ARTIFACT_PATTERN.test(PATCH_ASSET)).toBe(true)
+
+    const deps = { 'node-pty': '1.1.0' }
+    expect(
+      computeRelayNativeDepsCacheKey({
+        platform: 'linux-x64',
+        deps,
+        patchSources: [{ filename: PATCH_ASSET, contents: 'patch bytes' }]
+      })
+    ).not.toBe(computeRelayNativeDepsCacheKey({ platform: 'linux-x64', deps }))
+  })
+})
diff --git a/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts b/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
index 10ebce2dac4..81142743cd1 100644
--- a/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
+++ b/src/main/ssh/ssh-relay-sftp-namespace-install.test.ts
@@ -105,6 +105,9 @@ const RELAY_SUFFIX = '.orca-remote/relay-0.1.0+testhash'
 const SHELL_RELAY_DIR = `${SHELL_HOME}/${RELAY_SUFFIX}`
 const SFTP_RELAY_DIR = `${SFTP_HOME}/${RELAY_SUFFIX}`
 const MARKER_PATTERN = /\.sftp-namespace-[0-9a-f]{32}/
+// Stdout of the relay-side pty-master cloexec patch, which runs on Linux hosts once a
+// freshly installed node-pty loads (#17915).
+const NPTY_CLOEXEC_PATCHED = 'ORCA-NPTY-CLOEXEC:patched\n'
 const STAGE_OWNER = '.sftp-namespace-00000000000000000000000000000000'
 const STAGE_RESERVED = `__ORCA_UPLOAD_STAGE_SLOT__${STAGE_OWNER}:slot-0`
 const STAGE_PROMOTED = `__ORCA_UPLOAD_STAGE_PROMOTION__${STAGE_OWNER}:PROMOTED`
@@ -256,6 +259,7 @@ const POSIX_FIRST_INSTALL = [
   '', // chmod prebuilds
   'ORCA-NPTY-PROBE-OK\n',
   '', // rm probe stderr
+  NPTY_CLOEXEC_PATCHED,
   '', // promote into the shared native-deps cache
   '', // clean stage root
   'DEAD',
@@ -275,6 +279,7 @@ const POSIX_SYSTEM_SSH_FIRST_INSTALL = [
   '', // chmod prebuilds
   'ORCA-NPTY-PROBE-OK\n',
   '', // rm probe stderr
+  NPTY_CLOEXEC_PATCHED,
   '', // promote into the shared native-deps cache
   '', // clean stage root
   'DEAD',
@@ -293,6 +298,7 @@ const POSIX_REPAIR = [
   '', // chmod prebuilds
   'ORCA-NPTY-PROBE-OK\n',
   '', // rm probe stderr
+  NPTY_CLOEXEC_PATCHED,
   'DEAD',
   '', // publish the per-launch credential
   'READY'
@@ -703,6 +709,7 @@ describe('relay repair writes on a split SFTP namespace', () => {
       '', // chmod prebuilds
       'ORCA-NPTY-PROBE-OK\n',
       '', // rm probe stderr
+      NPTY_CLOEXEC_PATCHED,
       'DEAD',
       '', // remote credential generation
       'READY'
@@ -733,6 +740,7 @@ describe('relay repair writes on a split SFTP namespace', () => {
       '', // chmod prebuilds
       'ORCA-NPTY-PROBE-OK\n',
       '', // rm probe stderr
+      NPTY_CLOEXEC_PATCHED,
       'DEAD',
       '', // remote credential generation
       'READY'
diff --git a/src/shared/relay-artifacts.ts b/src/shared/relay-artifacts.ts
index 18c88135a62..273f6e059b8 100644
--- a/src/shared/relay-artifacts.ts
+++ b/src/shared/relay-artifacts.ts
@@ -51,6 +51,11 @@ export const RELAY_ARTIFACTS: readonly RelayArtifact[] = [
   // title request with no title and no error.
   { filename: 'wsl-transcript-fs-process-entry.js' },
   { filename: 'node-pty-1.1.0-console-list-agent-patch.cjs', windowsOnly: true },
+  // Only Linux relays run it, but it ships everywhere: the manifest's only
+  // platform axis is Windows, and a second one would buy nothing but a fork in
+  // the hash. Its presence is what moves a host to a fresh relay directory, and
+  // therefore to a re-install that can apply it.
+  { filename: 'node-pty-1.1.0-master-cloexec-patch.cjs' },
   // Optional because only a Windows build machine can compile it. Without it the
   // relay reads the process table through a PowerShell scan instead -- slower,
   // but correct, so a relay built anywhere else is still shippable.
diff --git a/src/shared/relay-optional-artifacts.test.ts b/src/shared/relay-optional-artifacts.test.ts
index 74f3530b2d1..0b8b750dbf9 100644
--- a/src/shared/relay-optional-artifacts.test.ts
+++ b/src/shared/relay-optional-artifacts.test.ts
@@ -31,4 +31,12 @@ describe('optional relay artifacts', () => {
     expect(relayArtifactFilenames(true)).toContain('relay.js')
     expect(relayArtifactFilenames(true)).toContain('node-pty-1.1.0-console-list-agent-patch.cjs')
   })
+
+  it('ships the pty-master cloexec patch to every platform', () => {
+    // Only Linux runs it, but its bytes are what change the relay content hash, and therefore what
+    // moves an upgrading host to a fresh directory whose install can apply it (#17915).
+    for (const isWindows of [true, false]) {
+      expect(relayArtifactFilenames(isWindows)).toContain('node-pty-1.1.0-master-cloexec-patch.cjs')
+    }
+  })
 })

From f37d2fec9711c9945600527a95cd605157ea7c6d Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 03:08:01 -0700
Subject: [PATCH 46/92] fix(linux): land the reviewed Linux packaging stack on
 main (#18100)

* fix(linux): give the CLI one entrypoint by extracting the AppImage once

* refactor(linux): trim AppImage CLI registration seams

* test(cli): assert registration lock serialization

* fix(linux): fence AppImage terminal shim mounts

* fix(linux): accept extracted AppImage runtimes with APPDIR only

* docs(linux): make headless AppImage extraction runnable

* refactor(linux): import bundled launcher directly

* fix(linux): reclaim superseded AppImage payloads and packaged symlinks

Pruning removed 3215 of 3216 files from a superseded generation and always
stranded resources/app.asar, leaking ~105 MB per version update. Electron's
asar shim reports a *.asar file as a directory, so the recursive remove tried
to rmdir a real file and failed with ENOTEMPTY; the .catch(() => {}) hid it.
Reproduced end to end on Ubuntu 24.04: 519M -> 623M across one update, and
519M again once the payload is actually reclaimed.

removeExtractedAppImagePayload holds process.noAsar for the removal, counted
so overlapping removals cannot hand the shim back early, and the prune site
now warns with the path instead of swallowing the rejection. All three
removal sites use it -- staging cleanup and displaced roots leaked the same
way.

Also reclaim symlinks left by a packaged deb/rpm install, which the
extracted-cache-only rule turned into a hard conflict on a deb -> AppImage
migration, and name the remedy in the conflict error.

* fix(linux): bound the CLI registration lock wait

`retries: 1000` caps the attempt count, not elapsed time, so at up to 1s per
attempt an IPC-driven registration could hang ~16 minutes against a wedged
holder with no feedback.

A legitimate holder is bounded by the extraction timeout, so wait that plus
slack and then fail with a message naming the lock file, rather than hanging.
`maxRetryTime` is forwarded verbatim to the `retry` package by proper-lockfile.

* fix(linux): stop re-extracting the AppImage on inode metadata churn

The extracted-payload cache key hashed ctime alongside dev/ino/size/mtime.
ctime moves on any inode metadata write -- `chmod +x`, which every AppImage
user is told to run, plus `chown`, an ACL or SELinux relabel, and a backup
restore -- none of which alter a byte of the payload.

Measured on Ubuntu 24.04: `chmod +x` leaves dev, ino, size and mtime
identical and moves ctime alone, so the key changed and the next launch paid
a full ~519 MB re-extraction and a multi-second stall to rebuild a payload it
already had, then pruned the old generation.

Key on content identity instead. An in-place content change moves mtime and
almost always size; a replacement moves the inode. The existing
replace-in-place test still passes.

* fix(linux): stop CLI commands from falling through to Chromium startup

* refactor(cli): remove redundant command membership check

* test(cli): cover command-named project selectors

* fix(cli): redirect the open-url command before startup

* test(linux): cover AUR serve wrapper flags

* fix(linux): tighten CLI launch detection

* fix(linux): respect CLI flag value boundaries

* fix(linux): strip injected Chromium switches from CLI args

* fix(linux): report a missing display instead of dying in uv_close

* refactor(linux): read display locks without a preflight race

* fix(linux): preserve unverified external displays

* chore: format reliability gate manifest

* test(packaging): split runtime resource checks

* fix(linux): fail serve when no display is available

* fix(linux): do not treat a lockless X socket as a dead display

An X server writes its lock beside its socket and both survive a crash
(verified against Xvfb under SIGKILL), so a socket with no lock was never
left by a crashed server. It is an endpoint published from elsewhere: a
container bind-mounting only /tmp/.X11-unix, WSLg, or a foreign PID
namespace. Declaring those dead made the desktop gate exit(1) on displays
that work, with no workaround, and the serve gate refuse to start.

Liveness now splits by ownership. A foreign DISPLAY trusts a lockless
socket; Orca's own :99 does not, because removeStaleDisplayArtifacts
unlinks the lock before the socket and so manufactures that state itself --
adopting it would resurrect the orphan-socket bug and stop the cleanup from
self-healing. The stale-lock rejection is unchanged.

Also correct four doc statements this behaviour falsified.

* fix(linux): fail closed when a stale socket blocks the Xvfb rebind

Readiness only checked that /tmp/.X11-unix/X99 exists. A stale socket we
could not unlink still exists after our own Xvfb refused to bind, so Orca set
DISPLAY to a dead server and Chromium died in Ozone init.

Measured on Ubuntu 24.04 against the pre-fix build: with a leftover :99
socket and no lock, serve exits 139 (SIGSEGV), the socket inode is unchanged
before and after, and no lock is recreated -- it neither cleaned up nor
respawned. To a user that is a crash, not a misconfiguration.

This is reachable in the documented topology, where orca-xvfb.service has no
User= and runs as root while serve runs as User=orca: /tmp is sticky, so the
orca uid cannot unlink a root-owned socket, rmSync fails, and Xvfb exits with
the display already active.

Readiness now requires the display to actually be live -- our socket plus a
lock naming a running process -- so the same state reports an unusable
display and exits 1 with the existing diagnosis.

* fix(linux): recognise abstract X sockets and inherited Wayland fds

Two display setups this gate could not prove were refused outright, and on the
desktop path that is app.exit(1) with no workaround.

An X server may bind only the abstract namespace (`@/tmp/.X11-unix/X0`), which
leaves no filesystem socket to stat. Abstract addresses are kernel-owned and
vanish the moment the owner exits, so an entry in /proc/net/unix is proof of a
live server -- no lock file needed and no stale entry possible. Verified on
Ubuntu 24.04, where 139 such addresses were present.

WAYLAND_SOCKET is an already-connected fd handed over by the compositor, so
there is no path to stat and WAYLAND_DISPLAY may be unset entirely. Its
presence is the display.

Both are consulted only after the filesystem-socket check fails, so no
existing verdict changes.

* fix(linux): never treat Orca's own display number as a foreign endpoint

Recognising a lockless X socket as live is correct for an endpoint published
from elsewhere -- a container bind mount, WSLg -- because an X server writes
its lock beside its socket and both survive a crash. It is wrong for
VIRTUAL_DISPLAY_NUMBER, because Orca's own teardown unlinks the lock before
the socket and so manufactures that exact state.

The managed branch was already strict, but a caller that sets DISPLAY=:99
explicitly takes the foreign path and skipped it, accepting a dead display
left by Orca's own interrupted cleanup. Route the managed number through the
strict probe on both paths.

Found by an adversarial audit of the asymmetry introduced earlier in this
branch; the documented systemd topology is unaffected because its Xvfb writes
a real lock.

* test(linux): add a packaged-artifact contract for the CLI launch paths

* test(linux): avoid buffered serve readiness detection

* test(linux): signal AppImage serve owner directly

* test(linux): tolerate readiness timeout boundary

* test(linux): add startup margin to shutdown oracle

* ci(linux): give package contracts timeout headroom

* fix(ci): route all Linux packaging contract changes

* test(linux): poll shutdown readiness without tail leaks

* test(linux): bound shutdown cleanup grace

* test(linux): assert on CLI output, not the harness's own control lines

run-cli-case.sh echoes `RESULT status=N case=<name>`, and the two cases named
*-skills asserted `expectOutput: 'skills'`. That substring was satisfied by
the case name in the harness's own line, so 2 of 8 cases asserted nothing
about the command -- gutting `skills` entirely would still have gone green.

Control lines are now excluded before matching, and both cases assert the
rendered help header, which only real help output produces. Verified on an
Ubuntu 24.04 host: 8/8 still pass against a stack-tip AppImage.

Also register the gate in reliability-gates.jsonc, which #15085 added a CI
Docker gate without. Red/green is recorded from a stock release AppImage
failing 4 of 8, three of them at status 133 (SIGTRAP).

* fix(linux): require static AppImage runtimes (#17319)

* test(linux): reject a wrong-architecture native binary at packaging time

Cross-building the arm64 slice on an x64 host silently packed an x86-64
`pty.node` -- the rebuild logged "Forcing native rebuild for linux-arm64" and
shipped the host's binary anyway. Every gate here inspects symbol versions,
which are perfectly valid on the wrong architecture, so nothing noticed.

Observed on a Raspberry Pi 5: the packaged app loaded, then failed with
"Failed to load native module: pty.node", and the launch contract reported
3 of 8 cases crashed rather than naming the cause. Swapping in the aarch64
`pty.node` took the same build to 8/8.

Compare ELF `e_machine` against the slice being packaged and fail with the
offending path. Checked before the glibc pass, because a wrong-architecture
binary's symbol versions are valid but meaningless and would send the reader
down the wrong path.

Release CI builds arm64 on a native runner, so this guards local and future
cross-builds rather than a shipped artifact.

* test(linux): judge per-arch vendored binaries against their own path

The first CI run of the architecture gate failed the x64 package job on
`@parcel/watcher-linux-arm64-glibc/watcher.node`. That binary is arm64 on
purpose: the package ships every architecture and its loader picks the match,
so its presence in an x64 build is correct.

Judge a binary against the architecture its own path names, falling back to
the slice when the path names none. That keeps the case this gate exists for
-- `bin/linux-arm64-*/node-pty.node` holding an x86-64 binary, which is what
shipped to a Raspberry Pi 5 -- while letting multi-arch dependencies through.

Dry-run over the real dependency tree flags nothing for either target arch.

* fix(linux): move deb/rpm update installation outside Orca (#17318)

* fix(linux): complete deb/rpm package metadata

* fix(linux): preserve CLI link during package upgrades

* docs(linux): document local RPM build prerequisites

* fix(linux): move deb/rpm update installation outside Orca

* fix(updater): preserve Linux recovery across stale events

* fix(updater): fence stale downloaded events by active target

* fix(updater): preserve active Linux package recovery

* test(linux): keep workflow order assertion in scope

* test(updater): assert stale recovery stays silent

* fix(updater): preserve Linux package recovery after checks

* refactor(updater): keep Linux marker message with status

* fix(linux): describe the right manual update path for deb/rpm hosts

A remote host installed from .deb or .rpm now reports
manual-service-update-required, and the guidance told the operator to
"update through the service manager that starts this server" -- which is
correct for unsupported-headless-serve but wrong for a package install,
where nothing about the remedy involves the service manager.

Say both, keyed on how the host was installed.

* docs(linux): document orcad update restart safety

* docs(linux): scope restart census omissions

* docs(linux): use absolute service CLI launcher

* fix(serve): validate in-process serve options before startup (#17683)

* fix(linux): stop offering updates a distro-managed install cannot apply (#17918)

Closes #17702.

The resources/package-type marker is authoritative but never checked against
the host, so any repackager that unpacks Orca's .deb -- AUR, Nix, a container
rebuild -- inherits `deb` verbatim. Install feasibility was then computed
after a ~165 MB download, so those users got check -> download -> a card
promising an install command -> a dead end.

Validate the marker against the host: a deb/rpm marker with no matching
package manager in the trusted directories means a package manager owns this
install. This reuses the exact lists and resolver that
buildLinuxPackageInstallCommand already loops over, so a false positive is
impossible by construction -- any host flagged here would have failed with
no-package-manager after the download anyway. The gate only moves that
verdict earlier. Verified across Debian 12, Ubuntu 24.04, Arch, Fedora 40 and
openSUSE Leap: no false positive on a real deb host, correct on every
repackaging host.

The release is still reported, because the user does want to know 1.4.194
exists and to update through their distro; only the download path is closed.
`externallyManaged` is an additive optional field on the existing `available`
status, so older paired clients decode it unchanged. downloadUpdate() refuses
authoritatively, since main owns this verdict rather than the card, and
unwinds any pinned-build state first -- a Linux pinned jump resolves to
'release', and stranding isPinnedBuildActive would silently kill every
background check for the rest of the process.

Note the fix the issue suggests cannot work: electron-updater builds a
PacmanUpdater whose doDownloadUpdate looks for a .pacman asset Orca does not
publish, then dereferences undefined.

* style(cli): restore prettier wrapping on install error copy

* test(linux): re-pin the child-process ratchets and the batch-shim allowlist after the merge
---
 .github/workflows/pr.yml                      |  35 +-
 config/docker/cli-launch-contract/Dockerfile  |  34 +
 .../cli-launch-contract/run-cli-case.sh       |  84 ++
 config/docker/headless-pairing/Dockerfile     |   1 -
 .../docker/headless-serve-shutdown/Dockerfile |   3 +-
 .../run-appimage-desktop-startup-case.sh      | 265 ++++++
 .../run-signal-case.sh                        |  92 +-
 config/electron-builder.config.cjs            |  59 +-
 config/reliability-gates.jsonc                | 132 ++-
 config/scripts/build-linux-local.mjs          |  65 ++
 config/scripts/build-linux-local.test.mjs     |  85 ++
 .../scripts/electron-builder-config.test.mjs  | 337 +------
 ...lectron-builder-runtime-resources.test.mjs | 308 +++++++
 .../headless-serve-shutdown-workflow.test.mjs | 144 ++-
 .../linux-package-maintainer-scripts.test.mjs |  18 +
 .../orcad-operations-restart-safety.test.mjs  |  42 +
 config/scripts/pr-code-change-scope.mjs       |   7 +
 config/scripts/pr-code-change-scope.test.mjs  |  22 +
 .../scripts/pr-workflow-parallelism.test.mjs  |  13 +-
 .../run-headless-serve-shutdown-docker.mjs    |  54 +-
 .../run-linux-cli-launch-contract-docker.mjs  | 264 ++++++
 .../static-appimage-package-contract.cjs      | 260 ++++++
 .../static-appimage-package-contract.test.mjs | 225 +++++
 config/scripts/verify-cli-bin.mjs             |  19 +-
 config/scripts/verify-linux-glibc-floor.cjs   |  99 +++
 .../scripts/verify-linux-glibc-floor.test.mjs |  87 ++
 .../windows-cmd-shim-spawn-boundary.test.mjs  |   4 +-
 config/tsconfig.cli.json                      |   2 +
 docs/reference/headless-linux-server.md       |  56 +-
 docs/reference/linux-glibc-compatibility.md   |   8 +
 docs/reference/orcad-operations.md            |  66 +-
 docs/reference/ssh-execution-boundary.md      |   2 +-
 package.json                                  |   3 +-
 resources/linux/bin/orca-ide                  |   1 +
 resources/linux/packaging/after-remove.sh     |   6 +
 src/cli/args.test.ts                          |  20 +
 src/cli/args.ts                               |  75 +-
 src/cli/cli-command-name-parity.test.ts       |  25 +
 src/cli/cli-version.test.ts                   |  36 +
 src/cli/cli-version.ts                        |  14 +
 src/cli/command-suggestion.ts                 |  27 +-
 src/cli/handlers/core.ts                      |  51 +-
 src/cli/index.ts                              |  12 +
 src/cli/runtime/launch.test.ts                | 144 ++-
 src/cli/runtime/launch.ts                     |  45 +-
 .../serve-signal-exit-diagnostic.test.ts      |  30 +
 src/cli/runtime/serve-update-supervisor.ts    |  17 +-
 src/cli/serve-electron-flag-parity.test.ts    |  17 +-
 src/main/cli/cli-command-installation.ts      |  49 +-
 src/main/cli/cli-installer.test.ts            |  50 ++
 src/main/cli/packaged-cli-assets.test.ts      |  57 ++
 src/main/linux-package-downloaded-status.ts   |  88 ++
 .../linux-package-install-command.test.ts     |  51 ++
 src/main/linux-package-install-command.ts     |  10 +
 .../linux-package-install-diagnostic.test.ts  | 271 +-----
 src/main/linux-package-install-diagnostic.ts  | 146 +--
 .../linux-package-update-recovery.test.ts     | 121 +--
 src/main/linux-package-update-recovery.ts     |  79 +-
 src/main/linux-update-package-type.test.ts    | 299 +++++--
 src/main/linux-update-package-type.ts         | 115 ++-
 .../startup/appimage-cli-redirect.test.ts     | 211 -----
 src/main/startup/appimage-cli-redirect.ts     | 209 -----
 src/main/startup/cli-command-names.ts         |  73 ++
 src/main/startup/cli-launch-redirect.test.ts  | 357 ++++++++
 src/main/startup/cli-launch-redirect.ts       | 245 ++++++
 .../startup/ensure-virtual-display.test.ts    | 410 ++++++++-
 src/main/startup/ensure-virtual-display.ts    | 217 ++++-
 src/main/startup/main-process-preflight.ts    |  39 +-
 .../startup/main-process-runtime-launch.ts    |   2 +-
 src/main/startup/main-process-serve.ts        |  40 +-
 .../packaged-cli-entry-redirect.test.ts       | 157 ----
 .../startup/packaged-cli-entry-redirect.ts    | 128 ---
 ...serve-mode-argv-cli-redirect-order.test.ts |  59 +-
 src/main/startup/serve-mode-argv.test.ts      |  21 +
 src/main/startup/serve-mode-argv.ts           |  15 +-
 src/main/startup/serve-options.test.ts        | 161 ++++
 src/main/startup/serve-options.ts             | 134 +++
 .../startup/serve-signal-handlers.test.ts     |   4 +-
 src/main/startup/serve-signal-handlers.ts     |   5 +-
 ...single-instance-lock-exit.electron.test.ts |  48 +-
 src/main/updater-events.test.ts               | 274 +++++-
 src/main/updater-events.ts                    | 114 ++-
 src/main/updater-fallback.ts                  |   9 +-
 ...ter-linux-package-recovery-actions.test.ts | 193 +++-
 src/main/updater-mac-install.ts               |  59 +-
 src/main/updater-test-harness.ts              |  25 +-
 src/main/updater.fallback.test.ts             |  17 +
 .../updater.headless-serve-install.test.ts    |   6 +
 .../updater.install-failure-cause.test.ts     |   7 +
 .../updater.linux-externally-managed.test.ts  | 155 ++++
 ...updater.linux-root-package-install.test.ts | 828 ++++--------------
 src/main/updater.mac-install.test.ts          |  10 +-
 src/main/updater.quit-and-install.test.ts     |   1 +
 src/main/updater.startup-scheduling.test.ts   |   1 +
 src/main/updater/updater-build-selection.ts   |   4 +-
 src/main/updater/updater-check-failure.ts     |  15 +-
 src/main/updater/updater-check-state.ts       |  20 +-
 src/main/updater/updater-download-install.ts  |  34 +-
 src/main/updater/updater-install-execution.ts | 107 +--
 src/main/updater/updater-install-support.ts   |   7 +-
 src/main/updater/updater-menu-checks.ts       |   2 +-
 src/main/updater/updater-package-recovery.ts  | 202 +----
 src/main/updater/updater-remote-status.ts     |   9 +-
 src/main/updater/updater-setup.ts             |   6 +-
 src/main/updater/updater-state.ts             |   6 -
 .../LinuxPackageInstallRecoveryCard.test.tsx  | 361 +++-----
 .../LinuxPackageInstallRecoveryCard.tsx       | 129 +--
 .../components/UpdateCard.error-card.test.tsx | 104 ++-
 .../src/components/UpdateCard.test.ts         |  31 +
 src/renderer/src/components/UpdateCard.tsx    |  18 +-
 .../src/components/UpdateErrorCardContent.tsx |   2 +-
 .../UpdateAvailableCardContent.tsx            |  58 +-
 .../update-card/UpdateCardStateContent.tsx    |  11 +-
 .../update-card/update-card-error-model.ts    |  28 +-
 .../update-card/update-card-visibility.ts     |  12 +-
 .../GeneralUpdateSettingsSection.test.tsx     |  37 +
 .../settings/GeneralUpdateSettingsSection.tsx |  60 +-
 .../settings/RemoteServerUpdateStatus.tsx     |   2 +-
 .../status-bar/UpdateStatusSegment.tsx        |  10 +-
 src/renderer/src/i18n/locales/en.json         |  23 +-
 .../child-process-import-allowlist.txt        |   2 -
 .../windows-console-visibility-allowlist.txt  |   2 -
 .../child-process-import-boundary.test.ts     |   2 +-
 .../windows-console-visibility.test.ts        |   2 +-
 src/shared/cli-argument-boundary.test.ts      |  33 +
 src/shared/cli-argument-boundary.ts           |  96 ++
 src/shared/edit-distance.ts                   |  23 +
 src/shared/serve-option-validation.test.ts    |  72 ++
 src/shared/serve-option-validation.ts         |  89 ++
 src/shared/update-status-types.ts             |  15 +-
 130 files changed, 7056 insertions(+), 3563 deletions(-)
 create mode 100644 config/docker/cli-launch-contract/Dockerfile
 create mode 100755 config/docker/cli-launch-contract/run-cli-case.sh
 create mode 100755 config/docker/headless-serve-shutdown/run-appimage-desktop-startup-case.sh
 create mode 100644 config/scripts/build-linux-local.mjs
 create mode 100644 config/scripts/build-linux-local.test.mjs
 create mode 100644 config/scripts/electron-builder-runtime-resources.test.mjs
 create mode 100644 config/scripts/linux-package-maintainer-scripts.test.mjs
 create mode 100644 config/scripts/orcad-operations-restart-safety.test.mjs
 create mode 100755 config/scripts/run-linux-cli-launch-contract-docker.mjs
 create mode 100644 config/scripts/static-appimage-package-contract.cjs
 create mode 100644 config/scripts/static-appimage-package-contract.test.mjs
 create mode 100644 src/cli/cli-command-name-parity.test.ts
 create mode 100644 src/cli/cli-version.test.ts
 create mode 100644 src/cli/cli-version.ts
 create mode 100644 src/main/linux-package-downloaded-status.ts
 delete mode 100644 src/main/startup/appimage-cli-redirect.test.ts
 delete mode 100644 src/main/startup/appimage-cli-redirect.ts
 create mode 100644 src/main/startup/cli-command-names.ts
 create mode 100644 src/main/startup/cli-launch-redirect.test.ts
 create mode 100644 src/main/startup/cli-launch-redirect.ts
 delete mode 100644 src/main/startup/packaged-cli-entry-redirect.test.ts
 delete mode 100644 src/main/startup/packaged-cli-entry-redirect.ts
 create mode 100644 src/main/startup/serve-options.test.ts
 create mode 100644 src/main/startup/serve-options.ts
 create mode 100644 src/main/updater.linux-externally-managed.test.ts
 create mode 100644 src/renderer/src/components/settings/GeneralUpdateSettingsSection.test.tsx
 create mode 100644 src/shared/cli-argument-boundary.test.ts
 create mode 100644 src/shared/cli-argument-boundary.ts
 create mode 100644 src/shared/edit-distance.ts
 create mode 100644 src/shared/serve-option-validation.test.ts
 create mode 100644 src/shared/serve-option-validation.ts

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 80d3d42a8bb..c17ad60d5d3 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -623,6 +623,8 @@ jobs:
     needs: [code_paths]
     if: needs.code_paths.outputs.package == 'true'
     runs-on: ubuntu-latest
+    # Let the serial Docker gates reach their own deadlines and report cleanup failures.
+    timeout-minutes: 90
 
     steps:
       - name: Checkout
@@ -678,14 +680,45 @@ jobs:
       - name: Build native components
         run: pnpm run build:native
 
+      - name: Install Linux package tooling
+        run: sudo apt-get update && sudo apt-get install -y cpio rpm
+
       - name: Package unpacked app
         env:
           ORCA_REUSE_PREPARED_NATIVE_RUNTIME: '1'
-        run: pnpm exec electron-builder --config config/electron-builder.config.cjs --linux AppImage --x64 --publish never
+        run: pnpm exec electron-builder --config config/electron-builder.config.cjs --linux AppImage deb rpm --x64 --publish never
+
+      - name: Verify root-package marker payloads
+        run: |
+          set -euo pipefail
+          version="$(node -p "require('./package.json').version")"
+          deb="dist/orca-ide_${version}_amd64.deb"
+          rpm="dist/orca-ide-${version}.x86_64.rpm"
+          test -s "$deb"
+          test -s "$rpm"
+          deb_marker="$(dpkg-deb --fsys-tarfile "$deb" | tar -xOf - ./opt/Orca/resources/package-type)"
+          rpm_marker="$(rpm2cpio "$rpm" | cpio --quiet --extract --to-stdout ./opt/Orca/resources/package-type)"
+          [[ "$deb_marker" == deb ]] || { echo "Expected deb marker, got: $deb_marker"; exit 1; }
+          [[ "$rpm_marker" == rpm ]] || { echo "Expected rpm marker, got: $rpm_marker"; exit 1; }
 
       - name: Verify headless serve signal shutdown
         run: node config/scripts/run-headless-serve-shutdown-docker.mjs --appimage dist/orca-linux.AppImage
 
+      - name: Verify extracted launcher serve signal shutdown
+        run: >-
+          node config/scripts/run-headless-serve-shutdown-docker.mjs
+          --appimage dist/orca-linux.AppImage --entrypoint launcher
+
+      - name: Verify AppImage CLI registration and serve signal shutdown
+        run: >-
+          node config/scripts/run-headless-serve-shutdown-docker.mjs
+          --appimage dist/orca-linux.AppImage --entrypoint appimage
+          --signal-target serving-electron --int-delivery pid
+
+      # A default container reproduces the hostile AppImage launch environment.
+      - name: Verify Linux CLI launch contract
+        run: node config/scripts/run-linux-cli-launch-contract-docker.mjs --appimage dist/orca-linux.AppImage
+
       - name: Smoke packaged CLI
         run: node config/scripts/smoke-packaged-cli.mjs --app-dir=dist/linux-unpacked
 
diff --git a/config/docker/cli-launch-contract/Dockerfile b/config/docker/cli-launch-contract/Dockerfile
new file mode 100644
index 00000000000..f6a618a8ece
--- /dev/null
+++ b/config/docker/cli-launch-contract/Dockerfile
@@ -0,0 +1,34 @@
+ARG BASE_IMAGE=ubuntu:24.04
+FROM ${BASE_IMAGE}
+
+ARG LIBASOUND_PACKAGE=libasound2t64
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Install Electron's link-time libraries without adding a display server or FUSE.
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends \
+    bash \
+    ca-certificates \
+    coreutils \
+    "${LIBASOUND_PACKAGE}" \
+    libatk-bridge2.0-0 \
+    libatspi2.0-0 \
+    libdrm2 \
+    libgbm1 \
+    libgtk-3-0 \
+    libnss3 \
+    libxcomposite1 \
+    libxdamage1 \
+    libxfixes3 \
+    libxkbcommon0 \
+    libxrandr2 \
+    procps \
+    util-linux \
+  && rm -rf /var/lib/apt/lists/*
+
+RUN useradd --create-home --shell /bin/bash orca
+
+COPY run-cli-case.sh /usr/local/bin/run-cli-case
+
+ENTRYPOINT ["/usr/local/bin/run-cli-case"]
diff --git a/config/docker/cli-launch-contract/run-cli-case.sh b/config/docker/cli-launch-contract/run-cli-case.sh
new file mode 100755
index 00000000000..3293601f22f
--- /dev/null
+++ b/config/docker/cli-launch-contract/run-cli-case.sh
@@ -0,0 +1,84 @@
+#!/usr/bin/env bash
+# Print a parseable verdict; the host script owns expected statuses.
+set -uo pipefail
+
+case_name=${1:?launch case is required}
+extracted_root=${ORCA_TEST_EXTRACTED_ROOT:-/artifacts/squashfs-root}
+launcher="$extracted_root/resources/bin/orca-ide"
+command_timeout_seconds=${ORCA_TEST_COMMAND_TIMEOUT_SECONDS:-60}
+
+if ((EUID == 0)); then
+  # Reproduce extracted AppImage sandbox ownership as an unprivileged user.
+  exec runuser --user orca --preserve-environment -- "$0" "$@"
+fi
+
+# Guard the restricted-userns precondition instead of accepting a false pass.
+if [[ "$case_name" == *-userns-* ]]; then
+  if unshare -Ur true 2>/dev/null; then
+    echo "PRECONDITION_FAILED user namespaces are available; this case needs them restricted"
+    exit 90
+  fi
+fi
+if [[ "$case_name" == nofuse-* && -e /dev/fuse ]]; then
+  echo "PRECONDITION_FAILED /dev/fuse is present; this case needs it absent"
+  exit 90
+fi
+
+unset DISPLAY WAYLAND_DISPLAY XDG_RUNTIME_DIR
+if [[ "$case_name" == stale-display-* ]]; then
+  DISPLAY=:77
+  export DISPLAY
+fi
+
+case "$case_name" in
+  # The bundled launcher must stay in Electron's node mode.
+  nofuse-userns-bundled-help) command=("$launcher" --help) ;;
+  nofuse-userns-bundled-version) command=("$launcher" --version) ;;
+  nofuse-userns-bundled-status) command=("$launcher" status) ;;
+  nofuse-userns-bundled-skills) command=("$launcher" skills --help) ;;
+  nofuse-userns-bundled-worktree) command=("$launcher" worktree list) ;;
+  # Direct binaries must hand off before Ozone initializes.
+  nofuse-nosandbox-direct-binary-skills)
+    command=("$extracted_root/orca-ide" --no-sandbox skills --help)
+    ;;
+  nofuse-nosandbox-direct-binary-gui)
+    command=("$extracted_root/orca-ide" --no-sandbox)
+    ;;
+  stale-display-nosandbox-direct-binary-gui)
+    command=("$extracted_root/orca-ide" --no-sandbox)
+    ;;
+  *)
+    echo "UNKNOWN_CASE $case_name"
+    exit 91
+    ;;
+esac
+
+output=$(timeout --foreground --signal=TERM --kill-after=5s "${command_timeout_seconds}s" "${command[@]}" 2>&1)
+status=$?
+
+if ((status == 124)); then
+  echo "TIMED_OUT seconds=$command_timeout_seconds case=$case_name"
+  printf '%s\n' "$output" | tail -30
+  exit 94
+fi
+
+if [[ "$case_name" == nofuse-userns-bundled-version ]]; then
+  version_file="$extracted_root/resources/app.asar.unpacked/out/package.json"
+  expected_version=$(sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$version_file")
+  if [[ -z "$expected_version" || "$output" != "$expected_version" ]]; then
+    output="VERSION_MISMATCH expected=${expected_version:-missing} got=$output"
+    status=93
+  fi
+fi
+
+# Shell signal exits are reported as 128 plus the signal number.
+if ((status >= 128)); then
+  echo "CRASHED status=$status case=$case_name"
+  printf '%s\n' "$output" | tail -30
+  exit 92
+fi
+
+echo "RESULT status=$status case=$case_name"
+# Preserve the help header used by output assertions.
+printf '%s\n' "$output" | head -200
+exit 0
diff --git a/config/docker/headless-pairing/Dockerfile b/config/docker/headless-pairing/Dockerfile
index 8feafcc6e82..03664f68b0d 100644
--- a/config/docker/headless-pairing/Dockerfile
+++ b/config/docker/headless-pairing/Dockerfile
@@ -28,7 +28,6 @@ RUN apt-get update \
     util-linux \
     xauth \
     xvfb \
-    zlib1g-dev \
   && rm -rf /var/lib/apt/lists/*
 
 RUN useradd --create-home --shell /bin/bash orca
diff --git a/config/docker/headless-serve-shutdown/Dockerfile b/config/docker/headless-serve-shutdown/Dockerfile
index 669bb02b00a..13b1ed2b69f 100644
--- a/config/docker/headless-serve-shutdown/Dockerfile
+++ b/config/docker/headless-serve-shutdown/Dockerfile
@@ -22,16 +22,15 @@ RUN apt-get update \
     libxkbcommon0 \
     libxrandr2 \
     libxss1 \
-    p7zip-full \
     procps \
     util-linux \
     xauth \
     xvfb \
-    zlib1g-dev \
   && rm -rf /var/lib/apt/lists/*
 
 RUN useradd --create-home --shell /bin/bash orca
 
 COPY run-signal-case.sh /usr/local/bin/run-signal-case
+COPY run-appimage-desktop-startup-case.sh /usr/local/bin/run-appimage-desktop-startup-case
 
 ENTRYPOINT ["/usr/local/bin/run-signal-case"]
diff --git a/config/docker/headless-serve-shutdown/run-appimage-desktop-startup-case.sh b/config/docker/headless-serve-shutdown/run-appimage-desktop-startup-case.sh
new file mode 100755
index 00000000000..59a6bef0e5c
--- /dev/null
+++ b/config/docker/headless-serve-shutdown/run-appimage-desktop-startup-case.sh
@@ -0,0 +1,265 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+appimage=${1:-/input/orca.AppImage}
+startup_timeout_seconds=90
+if [[ $# -gt 1 ]]; then
+  echo "usage: run-appimage-desktop-startup-case.sh [appimage]" >&2
+  exit 64
+fi
+
+if ((EUID == 0)); then
+  if ! state_dir=$(mktemp -d /tmp/orca-appimage-startup.XXXXXX); then
+    echo 'FAIL: unable to create the AppImage startup state directory' >&2
+    exit 1
+  fi
+  if ! chown orca:orca "$state_dir"; then
+    echo "FAIL: unable to hand the AppImage startup state directory to orca: $state_dir" >&2
+    rm -rf -- "$state_dir" || true
+    exit 1
+  fi
+  exec runuser --user orca --preserve-environment -- env \
+    ORCA_STARTUP_STATE_DIR="$state_dir" \
+    ORCA_STARTUP_STATE_DIR_CLEANUP=1 \
+    "$0" "$@"
+fi
+
+remove_state_dir_on_exit=${ORCA_STARTUP_STATE_DIR_CLEANUP:-0}
+if [[ -n "${ORCA_STARTUP_STATE_DIR:-}" ]]; then
+  state_dir=$ORCA_STARTUP_STATE_DIR
+else
+  if ! state_dir=$(mktemp -d /tmp/orca-appimage-startup.XXXXXX); then
+    echo 'FAIL: unable to create the AppImage startup state directory' >&2
+    exit 1
+  fi
+  remove_state_dir_on_exit=1
+fi
+stdout_log="$state_dir/stdout.log"
+stderr_log="$state_dir/stderr.log"
+launcher_pid=
+launcher_start_ticks=
+launcher_pgid=
+launcher_status=
+launcher_waited=false
+tree_pids=()
+declare -A tree_start_ticks=()
+
+read_start_ticks() {
+  local pid=$1
+  [[ -r "/proc/$pid/stat" ]] || return 1
+  awk '{print $22}' "/proc/$pid/stat"
+}
+
+identity_alive() {
+  local pid=$1
+  local expected_ticks=$2
+  [[ -n "$expected_ticks" ]] || return 1
+  [[ -r "/proc/$pid/stat" ]] || return 1
+  [[ $(awk '{print $22}' "/proc/$pid/stat" 2>/dev/null || true) == "$expected_ticks" ]] || return 1
+  local process_state
+  process_state=$(ps -o stat= -p "$pid" 2>/dev/null | tr -d '[:space:]' || true)
+  [[ -n "$process_state" && "$process_state" != Z* ]]
+}
+
+collect_process_tree() {
+  tree_pids=()
+  tree_start_ticks=()
+  [[ -n "$launcher_pid" ]] || return
+  [[ -n "$launcher_start_ticks" ]] || return
+  tree_pids+=("$launcher_pid")
+  tree_start_ticks["$launcher_pid"]="$launcher_start_ticks"
+  local -a frontier=("$launcher_pid")
+  while ((${#frontier[@]})); do
+    local parent=${frontier[0]}
+    frontier=("${frontier[@]:1}")
+    while read -r child; do
+      [[ -n "$child" ]] || continue
+      [[ -z "${tree_start_ticks[$child]+present}" ]] || continue
+      local child_ticks
+      child_ticks=$(read_start_ticks "$child" 2>/dev/null || true)
+      [[ -n "$child_ticks" ]] || continue
+      tree_pids+=("$child")
+      tree_start_ticks["$child"]="$child_ticks"
+      frontier+=("$child")
+    done < <(ps -eo pid=,ppid= | awk -v parent="$parent" '$2 == parent {print $1}')
+  done
+}
+
+process_is_xvfb() {
+  local pid=$1
+  local command_name
+  command_name=$(ps -o comm= -p "$pid" 2>/dev/null || true)
+  [[ "$command_name" == Xvfb ]] && return 0
+  local command_line
+  command_line=$(ps -o args= -p "$pid" 2>/dev/null || true)
+  [[ "$command_line" =~ (^|[[:space:]/])Xvfb([[:space:]]|$) ]]
+}
+
+signal_process_group() {
+  local signal=$1
+  identity_alive "$launcher_pid" "$launcher_start_ticks" || return 0
+  [[ "$launcher_pgid" =~ ^[0-9]+$ ]] || return 0
+  [[ "$launcher_pgid" != "$(ps -o pgid= -p "$$" | tr -d ' ')" ]] || return 0
+  kill -s "$signal" -- "-$launcher_pgid" 2>/dev/null || true
+}
+
+signal_owned_processes() {
+  local signal=$1
+  local index pid ticks
+  for ((index = ${#tree_pids[@]} - 1; index >= 0; index--)); do
+    pid=${tree_pids[index]}
+    ticks=${tree_start_ticks[$pid]-}
+    if identity_alive "$pid" "$ticks"; then
+      kill -s "$signal" "$pid" 2>/dev/null || true
+    fi
+  done
+}
+
+wait_for_owned_exit() {
+  local timeout_seconds=$1
+  local deadline=$((SECONDS + timeout_seconds))
+  local pid ticks alive
+  while ((SECONDS < deadline)); do
+    alive=0
+    for pid in "${tree_pids[@]}"; do
+      ticks=${tree_start_ticks[$pid]-}
+      if identity_alive "$pid" "$ticks"; then
+        alive=1
+        break
+      fi
+    done
+    if ((alive == 0)); then
+      return 0
+    fi
+    sleep 0.2
+  done
+  return 1
+}
+
+dump_logs() {
+  echo "--- desktop startup stdout ---" >&2
+  cat "$stdout_log" >&2 2>/dev/null || true
+  echo "--- desktop startup stderr ---" >&2
+  cat "$stderr_log" >&2 2>/dev/null || true
+}
+
+cleanup_state_dir() {
+  [[ "$remove_state_dir_on_exit" == 1 ]] || return 0
+  [[ "$state_dir" =~ ^/tmp/orca-appimage-startup\.[^/]+$ ]] || return 0
+  [[ -d "$state_dir" && ! -L "$state_dir" && -O "$state_dir" ]] || return 0
+  rm -rf -- "$state_dir"
+}
+
+capture_launcher_status() {
+  [[ "$launcher_waited" == false ]] || return 0
+  [[ -n "$launcher_pid" ]] || return 1
+  if wait "$launcher_pid"; then
+    launcher_status=0
+  else
+    launcher_status=$?
+  fi
+  launcher_waited=true
+}
+
+report_launcher_exit() {
+  local reason=$1
+  local observed_status=unknown
+  local exit_status=1
+  if capture_launcher_status; then
+    observed_status=$launcher_status
+    if ((launcher_status != 0)); then
+      exit_status=$launcher_status
+    fi
+  fi
+  echo "FAIL: desktop launcher exited before ${reason} (status=${observed_status})" >&2
+  exit "$exit_status"
+}
+
+cleanup() {
+  local status=$?
+  trap - EXIT
+  signal_process_group TERM || true
+  signal_owned_processes TERM || true
+  if ! wait_for_owned_exit 10; then
+    signal_process_group KILL || true
+    signal_owned_processes KILL || true
+    wait_for_owned_exit 5 || status=1
+  fi
+  capture_launcher_status || true
+  if ((status != 0)); then
+    dump_logs
+  else
+    if ! cleanup_state_dir; then
+      status=1
+      dump_logs
+    fi
+  fi
+  exit "$status"
+}
+trap cleanup EXIT
+
+mkdir -p "$state_dir/home" "$state_dir/config" "$state_dir/cache" "$state_dir/runtime"
+chmod 700 "$state_dir/runtime"
+export HOME="$state_dir/home"
+export XDG_CONFIG_HOME="$state_dir/config"
+export XDG_CACHE_HOME="$state_dir/cache"
+export XDG_RUNTIME_DIR="$state_dir/runtime"
+export LIBGL_ALWAYS_SOFTWARE=1
+export ORCA_STARTUP_DIAGNOSTICS=1
+ulimit -c 0
+
+[[ -r "$appimage" ]] || { echo "FAIL: AppImage is not readable: $appimage" >&2; exit 1; }
+[[ -x "$appimage" ]] || { echo "FAIL: AppImage is not executable: $appimage" >&2; exit 1; }
+
+setsid --wait dbus-run-session -- xvfb-run -a "$appimage" --appimage-extract-and-run --no-sandbox \
+  >"$stdout_log" 2>"$stderr_log" &
+launcher_pid=$!
+launcher_start_ticks=$(read_start_ticks "$launcher_pid" 2>/dev/null || true)
+launcher_pgid=$(ps -o pgid= -p "$launcher_pid" 2>/dev/null | tr -d ' ' || true)
+if [[ -z "$launcher_start_ticks" ]]; then
+  report_launcher_exit 'its identity could be recorded'
+fi
+
+marker_seen=false
+deadline=$((SECONDS + startup_timeout_seconds))
+while ((SECONDS < deadline)); do
+  if grep -Eq '^\[startup\] updater-setup-done t=[0-9]+$' "$stderr_log"; then
+    marker_seen=true
+    break
+  fi
+  if ! identity_alive "$launcher_pid" "$launcher_start_ticks"; then
+    report_launcher_exit 'the updater-setup-done marker'
+  fi
+  sleep 0.2
+done
+if [[ "$marker_seen" != true ]]; then
+  if ! identity_alive "$launcher_pid" "$launcher_start_ticks"; then
+    report_launcher_exit 'the updater-setup-done marker'
+  fi
+  echo "FAIL: desktop AppImage did not emit updater-setup-done within ${startup_timeout_seconds}s" >&2
+  exit 1
+fi
+if ! identity_alive "$launcher_pid" "$launcher_start_ticks"; then
+  echo "FAIL: desktop launcher identity changed after startup marker" >&2
+  exit 1
+fi
+
+collect_process_tree
+xvfb_pids=()
+for pid in "${tree_pids[@]}"; do
+  if process_is_xvfb "$pid"; then
+    xvfb_pids+=("$pid")
+  fi
+done
+if ((${#xvfb_pids[@]} == 0)); then
+  echo "FAIL: no launcher-owned Xvfb process was found after startup" >&2
+  exit 1
+fi
+for pid in "${xvfb_pids[@]}"; do
+  if ! identity_alive "$pid" "${tree_start_ticks[$pid]-}"; then
+    echo "FAIL: launcher-owned Xvfb identity changed before cleanup" >&2
+    exit 1
+  fi
+done
+
+echo "Desktop AppImage startup validation passed (launcher=${launcher_pid}, xvfb=${xvfb_pids[*]})."
diff --git a/config/docker/headless-serve-shutdown/run-signal-case.sh b/config/docker/headless-serve-shutdown/run-signal-case.sh
index 3cbf594ae1e..2d561629170 100755
--- a/config/docker/headless-serve-shutdown/run-signal-case.sh
+++ b/config/docker/headless-serve-shutdown/run-signal-case.sh
@@ -6,7 +6,9 @@ app_root=${ORCA_TEST_APP_ROOT:-/artifacts/root}
 signal_target_kind=${ORCA_SIGNAL_TARGET:-app}
 entrypoint_kind=${ORCA_TEST_ENTRYPOINT:-app}
 int_delivery=${ORCA_INT_DELIVERY:-foreground-process-group}
-startup_timeout_seconds=${ORCA_STARTUP_TIMEOUT_SECONDS:-90}
+# Packaged Electron startup can approach 90s on a cold CI runner; leave room
+# for the readiness line to reach the log before the observer deadline.
+startup_timeout_seconds=${ORCA_STARTUP_TIMEOUT_SECONDS:-180}
 
 if ((EUID == 0)); then
   exec runuser --user orca --preserve-environment -- "$0" "$@"
@@ -41,8 +43,8 @@ chmod 700 "$XDG_RUNTIME_DIR"
 
 case "$entrypoint_kind" in
   app) entrypoint=("$app_root/AppRun" --no-sandbox) ;;
+  appimage) entrypoint=(/input/orca.AppImage --appimage-extract-and-run --no-sandbox) ;;
   launcher)
-    export ELECTRON_DISABLE_SANDBOX=1
     entrypoint=("$app_root/resources/bin/orca-ide")
     ;;
   *) echo "unsupported entrypoint: $entrypoint_kind" >&2; exit 64 ;;
@@ -53,18 +55,50 @@ setsid env -u DISPLAY "${entrypoint[@]}" serve --port 0 --pairing-address 127.0.
 app_pid=$!
 app_start_ticks=$(awk '{print $22}' "/proc/$app_pid/stat")
 
-# The inner shell expands its positional parameters.
-# shellcheck disable=SC2016
-ready_line=$(timeout "$startup_timeout_seconds" bash -c '
-  tail --pid="$1" -n +1 -F "$2" 2>/dev/null \
-    | jq --unbuffered -nc '\''first(inputs | select(.type == "orca_server_ready" and .schemaVersion == 1))'\''
-' bash "$app_pid" "$stdout_log" || true)
+# jq's `inputs` waits for EOF even when wrapped in `first`, so a tail -F
+# observer can outlive the timeout and leak into the next signal case. Poll
+# finite snapshots instead; each parser invocation has a definite EOF.
+read_ready_line() {
+  sed -u -n 's/^[^{]*//p' "$stdout_log" \
+    | jq --unbuffered -Rnc 'first(inputs | fromjson? | select(.type == "orca_server_ready" and .schemaVersion == 1))'
+}
+
+ready_line=''
+startup_deadline=$((SECONDS + startup_timeout_seconds))
+while (( SECONDS < startup_deadline )); do
+  ready_line=$(read_ready_line)
+  [[ -n "$ready_line" ]] && break
+  kill -0 "$app_pid" 2>/dev/null || break
+  sleep 1
+done
+# A readiness event can land as the final poll races the write.
+if [[ -z "$ready_line" ]]; then
+  ready_line=$(read_ready_line)
+fi
 if [[ -z "$ready_line" ]]; then
   cat "$stdout_log" "$stderr_log" >&2
-  echo "FAIL: AppRun exited or timed out before orca_server_ready" >&2
+  echo "FAIL: entrypoint exited or timed out before orca_server_ready" >&2
   exit 1
 fi
 
+registered_cli_verified=false
+if [[ "$entrypoint_kind" == appimage ]]; then
+  registered_cli="$HOME/.local/bin/orca-ide"
+  expected_target="$XDG_CACHE_HOME/orca/appimage/launcher/orca-ide"
+  actual_target=$(readlink "$registered_cli" 2>/dev/null || true)
+  if [[ "$actual_target" != "$expected_target" ]]; then
+    echo "FAIL: registered CLI target is ${actual_target:-missing}; expected $expected_target" >&2
+    exit 1
+  fi
+  if ! registered_help=$("$registered_cli" --help 2>&1) \
+    || [[ "$registered_help" != *'Usage: orca <command>'* ]]; then
+    echo "FAIL: registered CLI did not execute the packaged help command" >&2
+    printf '%s\n' "$registered_help" >&2
+    exit 1
+  fi
+  registered_cli_verified=true
+fi
+
 bound_endpoint=$(jq -r '.boundEndpoint' <<<"$ready_line")
 bound_port=${bound_endpoint##*:}
 listener_before=$(ss -H -ltnp "sport = :$bound_port" || true)
@@ -72,6 +106,7 @@ if [[ -z "$listener_before" ]]; then
   echo "FAIL: ready listener has no socket owner at $bound_endpoint" >&2
   exit 1
 fi
+listener_before_pids=$(grep -oE 'pid=[0-9]+' <<<"$listener_before" | cut -d= -f2 || true)
 
 tree_pids=()
 declare -A tree_start_ticks
@@ -104,8 +139,15 @@ fi
 
 signal_target_pid=$app_pid
 if [[ "$signal_target_kind" == serving-electron ]]; then
-  signal_target_pid=$(awk '/\/orca-ide .* --serve / {print $1; exit}' <<<"$tree_snapshot")
+  # The ready socket identifies the serving Electron even when AppImage's
+  # extraction wrapper rewrites the command line before it reaches Chromium.
+  signal_target_pid=$(head -n1 <<<"$listener_before_pids")
   [[ -n "$signal_target_pid" ]] || { echo "FAIL: serving Electron process not found" >&2; exit 1; }
+  if [[ -z "${tree_start_ticks[$signal_target_pid]+present}" ]]; then
+    echo "FAIL: ready listener PID $signal_target_pid is outside the entrypoint process tree" >&2
+    echo "listener: $listener_before" >&2
+    exit 1
+  fi
 elif [[ "$signal_target_kind" != app ]]; then
   echo "unsupported signal target: $signal_target_kind" >&2
   exit 64
@@ -138,17 +180,25 @@ fi
 kill "$watchdog_pid" 2>/dev/null || true
 wait "$watchdog_pid" 2>/dev/null || true
 
-listener_after=$(ss -H -ltnp "sport = :$bound_port" || true)
-survivors=()
-for pid in "${tree_pids[@]}"; do
-  if [[ -r "/proc/$pid/stat" ]] \
-    && [[ $(awk '{print $22}' "/proc/$pid/stat" 2>/dev/null || true) == "${tree_start_ticks[$pid]}" ]] \
-    && ps -o stat= -p "$pid" 2>/dev/null | grep -qv '^Z'; then
-    survivors+=("$pid")
+# Crashpad can exit just after Electron; poll all owned shutdown state for up to 5s.
+for shutdown_poll in {0..50}; do
+  listener_after=$(ss -H -ltnp "sport = :$bound_port" || true)
+  survivors=()
+  for pid in "${tree_pids[@]}"; do
+    if [[ -r "/proc/$pid/stat" ]] \
+      && [[ $(awk '{print $22}' "/proc/$pid/stat" 2>/dev/null || true) == "${tree_start_ticks[$pid]}" ]] \
+      && ps -o stat= -p "$pid" 2>/dev/null | grep -qv '^Z'; then
+      survivors+=("$pid")
+    fi
+  done
+  owned_residue=$(ps -eo pid=,ppid=,stat=,args= | awk -v state="$state_dir" \
+    '($0 ~ state || $0 ~ /\/artifacts\/root\/orca-ide/ || $0 ~ /[X]vfb :99 /) && $0 !~ /awk -v state=/ {print}' || true)
+  if [[ -z "$listener_after" && -z "$owned_residue" ]] \
+    && ((${#survivors[@]} == 0)); then
+    break
   fi
+  ((shutdown_poll < 50)) && sleep 0.1
 done
-owned_residue=$(ps -eo pid=,ppid=,stat=,args= | awk -v state="$state_dir" \
-  '($0 ~ state || $0 ~ /\/artifacts\/root\/orca-ide/ || $0 ~ /[X]vfb :99 /) && $0 !~ /awk -v state=/ {print}' || true)
 
 canary_alive=false
 if kill -0 "$canary_pid" 2>/dev/null \
@@ -170,16 +220,18 @@ jq -nc \
   --argjson signalTargetPid "$signal_target_pid" \
   --arg endpoint "$bound_endpoint" \
   --arg listenerBefore "$listener_before" \
+  --arg listenerBeforePids "$listener_before_pids" \
   --arg listenerAfter "$listener_after" \
   --arg xvfbPids "$xvfb_pids" \
   --arg treeBefore "$tree_snapshot" \
   --argjson waitStatus "$wait_status" \
   --argjson fatalEvidence "$fatal_evidence" \
   --argjson canaryAlive "$canary_alive" \
+  --argjson registeredCliVerified "$registered_cli_verified" \
   --arg survivors "${survivors[*]:-}" \
   --arg residue "$owned_residue" \
   --arg corePattern "$(cat /proc/sys/kernel/core_pattern)" \
-  '{signal:$signal,signalDelivery:$signalDelivery,entrypointKind:$entrypointKind,signalTargetKind:$signalTargetKind,appPid:$appPid,signalTargetPid:$signalTargetPid,boundEndpoint:$endpoint,listenerBefore:$listenerBefore,listenerAfter:$listenerAfter,xvfbPids:$xvfbPids,treeBefore:$treeBefore,waitStatus:$waitStatus,fatalEvidence:$fatalEvidence,canaryAlive:$canaryAlive,survivingTreePids:$survivors,ownedResidue:$residue,corePattern:$corePattern}'
+  '{signal:$signal,signalDelivery:$signalDelivery,entrypointKind:$entrypointKind,signalTargetKind:$signalTargetKind,appPid:$appPid,signalTargetPid:$signalTargetPid,boundEndpoint:$endpoint,listenerBefore:$listenerBefore,listenerBeforePids:$listenerBeforePids,listenerAfter:$listenerAfter,xvfbPids:$xvfbPids,treeBefore:$treeBefore,waitStatus:$waitStatus,fatalEvidence:$fatalEvidence,canaryAlive:$canaryAlive,registeredCliVerified:$registeredCliVerified,survivingTreePids:$survivors,ownedResidue:$residue,corePattern:$corePattern}'
 
 if ((wait_status != 0)) || [[ -n "$listener_after" ]] || [[ "$fatal_evidence" != false ]] \
   || [[ "$canary_alive" != true ]] || ((${#survivors[@]})) || [[ -n "$owned_residue" ]]; then
diff --git a/config/electron-builder.config.cjs b/config/electron-builder.config.cjs
index 13633ed8e01..06d41bad344 100644
--- a/config/electron-builder.config.cjs
+++ b/config/electron-builder.config.cjs
@@ -1,4 +1,4 @@
-const { chmodSync, existsSync, readdirSync } = require('node:fs')
+const { chmodSync, existsSync, readdirSync, readFileSync, writeFileSync } = require('node:fs')
 const { execFileSync } = require('node:child_process')
 const { join, resolve } = require('node:path')
 const electronBuilderNativeRebuild = require('./scripts/electron-builder-native-rebuild.cjs')
@@ -18,6 +18,7 @@ const {
   verifyPackagedNodePtyJobOwnership
 } = require('./scripts/verify-packaged-node-pty-job-ownership.cjs')
 const { verifySkillsCliRuntime } = require('./scripts/verify-skills-cli-runtime.cjs')
+const { verifyStaticAppImagePackage } = require('./scripts/static-appimage-package-contract.cjs')
 
 // Why: dev-channel builds must carry the *release* identity — same bundle id,
 // Developer ID signature, and notarization ticket — or Squirrel.Mac refuses to
@@ -104,6 +105,29 @@ const winSpeechNativeResource = {
   from: 'node_modules/sherpa-onnx-win-x64',
   to: 'node_modules/sherpa-onnx-win-x64'
 }
+// electron-builder replaces these defaults when `depends` is configured; retain
+// Electron's loader requirements alongside Orca's headless-host dependencies.
+const debElectronRuntimeDependencies = [
+  'libgtk-3-0',
+  'libnotify4',
+  'libnss3',
+  'libxss1',
+  'libxtst6',
+  'xdg-utils',
+  'libatspi2.0-0',
+  'libuuid1',
+  'libsecret-1-0'
+]
+const rpmElectronRuntimeDependencies = [
+  'gtk3',
+  'libnotify',
+  'nss',
+  'libXScrnSaver',
+  '(libXtst or libXtst6)',
+  'xdg-utils',
+  'at-spi2-core',
+  '(libuuid or libuuid1)'
+]
 
 // Why mirrored, not imported: this config is CJS loaded by electron-builder outside the TS build.
 // Keep in sync with isMarkdownDocumentName() in src/main/ipc/markdown-documents.ts and with
@@ -115,6 +139,7 @@ module.exports = {
   appId,
   productName: 'Orca',
   protocols: [{ name: 'Orca', schemes: ['orca'] }],
+  toolsets: { appimage: '1.0.3' },
   ...(devChannelBuildVersion
     ? { extraMetadata: { version: devChannelBuildVersion } }
     : localBuildVersion
@@ -235,12 +260,21 @@ module.exports = {
     'node_modules/zod/**',
     'node_modules/yaml/**'
   ],
+  artifactBuildCompleted: ({ file, arch }) => {
+    if (file.endsWith('.AppImage')) {
+      verifyStaticAppImagePackage(file, arch)
+    }
+  },
   afterPack: async (context) => {
     // Why: a Linux runner-image glibc bump silently shipped a node-pty pty.node
     // requiring GLIBC_2.34, crashing the app on startup on Ubuntu 20.04 (#9902).
     // Fail packaging if any bundled native binary exceeds the supported floor.
     if (context.electronPlatformName === 'linux') {
-      verifyLinuxGlibcFloor(context.appOutDir)
+      // Why the arch is passed: symbol-version checks pass happily on a wrong-architecture binary,
+      // so a cross-built slice could ship the host's pty.node and only fail at runtime.
+      verifyLinuxGlibcFloor(context.appOutDir, {
+        targetArch: { 1: 'x64', 3: 'arm64' }[context.arch]
+      })
     }
     const resourcesDir =
       context.electronPlatformName === 'darwin'
@@ -254,6 +288,10 @@ module.exports = {
     if (!existsSync(resourcesDir)) {
       throw new Error(`Missing packaged resources directory: ${resourcesDir}`)
     }
+    // FpmTarget replaces this with deb/rpm while building those artifacts from the shared app tree.
+    if (context.electronPlatformName === 'linux') {
+      writeFileSync(join(resourcesDir, 'package-type'), 'AppImage')
+    }
     if (context.electronPlatformName === 'darwin') {
       const architectureByEnum = { 1: 'x64', 3: 'arm64' }
       const architecture = architectureByEnum[context.arch]
@@ -273,6 +311,7 @@ module.exports = {
       }
       writeMacBuildCompatibility(resourcesDir, { version, commit, architecture })
     }
+    stampPackagedCliVersion(resourcesDir, context.packager.appInfo.version)
     prunePackagedRuntimeNodeModules(resourcesDir, context.electronPlatformName, context.arch)
     verifyPackagedMainRuntimeDeps(resourcesDir)
     // Why: boot the packaged daemon-entry under plain Node, but only for the
@@ -522,7 +561,8 @@ module.exports = {
       },
       featureWallResources
     ],
-    target: ['AppImage', 'deb'],
+    // Keep local artifacts aligned with the release pipeline.
+    target: ['AppImage', 'deb', 'rpm'],
     maintainer: 'stablyai',
     category: 'Utility'
   },
@@ -536,6 +576,7 @@ module.exports = {
     // Linux host — Chromium needs a display server even for offscreen rendering,
     // and serve starts Xvfb itself when present (see ensure-virtual-display.ts).
     depends: [
+      ...debElectronRuntimeDependencies,
       'python3',
       'python3-gi',
       'gir1.2-atspi-2.0',
@@ -557,9 +598,9 @@ module.exports = {
     // Why: see deb depends. RPM distros ship Xvfb as xorg-x11-server-Xvfb (there
     // is no `xvfb` package), so the name differs from the deb here.
     depends: [
+      ...rpmElectronRuntimeDependencies,
       'python3',
       'python3-gobject',
-      'at-spi2-core',
       'xdotool',
       'xclip',
       'xorg-x11-server-Xvfb'
@@ -584,6 +625,16 @@ module.exports = {
   }
 }
 
+// Stamp the effective channel version where node-mode CLI code can read it.
+function stampPackagedCliVersion(resourcesDir, version) {
+  const packageJsonPath = join(resourcesDir, 'app.asar.unpacked', 'out', 'package.json')
+  if (!existsSync(packageJsonPath)) {
+    throw new Error(`Missing unpacked CLI package boundary: ${packageJsonPath}`)
+  }
+  const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8'))
+  writeFileSync(packageJsonPath, `${JSON.stringify({ ...packageJson, version }, null, 2)}\n`)
+}
+
 function chmodUnixCliLaunchers(resourcesDir, electronPlatformName) {
   if (electronPlatformName === 'win32') {
     return
diff --git a/config/reliability-gates.jsonc b/config/reliability-gates.jsonc
index 0c2337ba36f..83de3128ecf 100644
--- a/config/reliability-gates.jsonc
+++ b/config/reliability-gates.jsonc
@@ -16701,16 +16701,17 @@
       "providers": ["local-daemon"],
       "coveredPlatforms": ["linux"],
       "coveredProviders": ["local-daemon"],
-      "coverageNotes": "An Ubuntu 26.04 amd64 container extracts the packaged AppImage into disposable HOME and XDG directories, leaves APPDIR unset to preserve extracted-AppRun direct serve mode, waits for structured serve readiness, then exercises terminal-style foreground-process-group SIGINT and the documented systemd KillMode=mixed main-PID SIGTERM in separate containers. Local evidence runs under Rosetta on an arm64 Docker host; native amd64 PR CI repeats the same foreground AppRun identity contract.",
+      "coverageNotes": "An Ubuntu 26.04 amd64 container first launches the original AppImage through dbus-run-session and xvfb-run with startup diagnostics, then extracts the packaged AppImage into disposable HOME and XDG directories, leaves APPDIR unset to preserve extracted-AppRun direct serve mode, waits for structured serve readiness, and exercises terminal-style foreground-process-group SIGINT plus the documented systemd KillMode=mixed main-PID SIGTERM in separate containers. Local evidence runs under Rosetta on an arm64 Docker host; native amd64 PR CI repeats the same startup and foreground-AppRun identity contracts.",
       "motivatingLinks": [
         "https://github.com/stablyai/orca/issues/14109",
         "https://linear.app/stably/issue/STA-4051"
       ],
       "invariant": "After packaged foreground headless serve publishes structured readiness, one SIGINT or SIGTERM exits successfully without an Electron fatal trap or core evidence, releases the exact listener and owned Xvfb/process tree, and leaves an unrelated process identity untouched.",
-      "oracle": "For each signal, start a fresh unprivileged Ubuntu 26.04 container with disposable profile and runtime directories, a random loopback port, DISPLAY unset, software GL, and the extracted AppImage in a fresh session. Wait for orca_server_ready schema version 1, record the listener owner, process tree, owned Xvfb, and unrelated canary identities, deliver SIGINT to the foreground process group or the documented KillMode=mixed graceful SIGTERM to the AppRun PID, then require wait status zero, no Failed to shutdown, SIGTRAP, core, listener, recorded descendant, profile/AppImage/Xvfb residue, or changed canary identity. The 30-second bounds are failure deadlines, never success conditions.",
+      "oracle": "First start the original, readable-and-executable AppImage once in a fresh restricted Ubuntu 26.04 container through dbus-run-session -- xvfb-run -a --appimage-extract-and-run with ORCA_STARTUP_DIAGNOSTICS=1, and require the exact updater-setup-done marker within 90 seconds while fencing the launcher and owned Xvfb by PID start ticks. For each signal, start a separate unprivileged container with disposable profile and runtime directories, a random loopback port, DISPLAY unset, software GL, and the extracted AppImage in a fresh session. Wait for orca_server_ready schema version 1, record the listener owner, process tree, owned Xvfb, and unrelated canary identities, deliver SIGINT to the foreground process group or the documented KillMode=mixed graceful SIGTERM to the AppRun PID, then require wait status zero, no Failed to shutdown, SIGTRAP, core, listener, recorded descendant, profile/AppImage/Xvfb residue, or changed canary identity. The 30-second bounds are failure deadlines, never success conditions.",
       "commands": [
         "pnpm exec vitest run --config config/vitest.config.ts src/main/startup/ensure-virtual-display.test.ts config/scripts/headless-serve-shutdown-workflow.test.mjs --reporter=dot",
         "shellcheck config/docker/headless-serve-shutdown/run-signal-case.sh",
+        "shellcheck config/docker/headless-serve-shutdown/run-appimage-desktop-startup-case.sh",
         "node config/scripts/run-headless-serve-shutdown-docker.mjs --appimage dist/orca-linux.AppImage",
         "node config/scripts/run-headless-serve-shutdown-docker.mjs --appimage dist/orca-linux.AppImage --platform linux/amd64"
       ],
@@ -16718,7 +16719,8 @@
         "src/main/startup/ensure-virtual-display.test.ts",
         "config/scripts/headless-serve-shutdown-workflow.test.mjs",
         "config/scripts/run-headless-serve-shutdown-docker.mjs",
-        "config/docker/headless-serve-shutdown/run-signal-case.sh"
+        "config/docker/headless-serve-shutdown/run-signal-case.sh",
+        "config/docker/headless-serve-shutdown/run-appimage-desktop-startup-case.sh"
       ],
       "assertionRefs": [
         {
@@ -16735,15 +16737,19 @@
           "file": "config/scripts/headless-serve-shutdown-workflow.test.mjs",
           "assertions": [
             "PR CI builds an x64 AppImage before invoking the packaged shutdown oracle",
+            "the original AppImage desktop startup oracle is wired before extraction and signal cases",
+            "the bound AppImage is readable and executable before desktop launch and extraction",
             "the documented systemd unit uses KillMode=mixed so graceful TERM targets Orca before its owned Xvfb"
           ]
         },
         {
           "file": "config/scripts/run-headless-serve-shutdown-docker.mjs",
           "assertions": [
+            "the original AppImage startup runs through dbus-run-session and xvfb-run with a bounded diagnostics marker",
             "SIGINT and SIGTERM run in separate disposable containers",
             "both signal failures are reported before the oracle exits",
             "the exact AppImage SHA-256, entrypoint, and signal target are published",
+            "the read-only AppImage bind is checked for read and execute permissions before extraction",
             "the launcher exec overlay isolates the related STA-4017 signal boundary"
           ]
         },
@@ -16754,6 +16760,14 @@
             "SIGTERM reaches the exact AppRun PID under the documented systemd KillMode=mixed policy",
             "target and descendant identities are fenced by PID start ticks before signaling and residue checks"
           ]
+        },
+        {
+          "file": "config/docker/headless-serve-shutdown/run-appimage-desktop-startup-case.sh",
+          "assertions": [
+            "the original AppImage emits the exact updater-setup-done startup marker within 90 seconds",
+            "launcher and owned Xvfb identities are fenced by PID start ticks",
+            "cleanup sends bounded TERM then KILL signals and preserves failure logs"
+          ]
         }
       ],
       "evidenceRuns": [
@@ -16774,11 +16788,20 @@
           "result": "passed",
           "durationSeconds": 48,
           "summary": "The extracted candidate AppRun passed process-group SIGINT and systemd-mixed main-PID SIGTERM under Ubuntu 26.04 amd64 emulation with status zero, no fatal evidence, full listener/Xvfb/tree cleanup, and an unchanged canary identity."
+        },
+        {
+          "date": "2026-08-31",
+          "runner": "ci",
+          "platform": "linux",
+          "command": "node config/scripts/run-headless-serve-shutdown-docker.mjs --appimage dist/orca-linux.AppImage --platform linux/amd64",
+          "result": "passed",
+          "durationSeconds": 1336,
+          "summary": "Native-amd64 PR package job https://github.com/stablyai/orca/actions/runs/33360129768/job/99389831915 built AppImage SHA-256 999d43bfe123e87a77fe917a5f46be1efd5c45a5205f99f02998a75136d8a793 and ran the restricted original-AppImage startup oracle before each of the three signal matrices. Each startup reached the exact updater-setup-done marker with stable launcher/Xvfb PID-start-tick identities and bounded TERM/KILL cleanup; SIGINT and SIGTERM then returned wait status 0 with no fatal evidence, listener, descendant, Xvfb, or canary residue. This is CI evidence only; no fresh local Docker oracle is claimed."
         }
       ],
       "runtimeBudget": {
-        "p95Seconds": 240,
-        "scope": "two fresh Ubuntu 26.04 containers, one per foreground signal"
+        "p95Seconds": 1800,
+        "scope": "three AppImage startup/extraction matrices, each with fresh Ubuntu 26.04 INT and TERM containers"
       },
       "flakeHistory": {
         "status": "not-started",
@@ -16805,6 +16828,105 @@
       ],
       "demotionRule": "Keep experimental or demote if either signal traps, returns nonzero, retains its listener/Xvfb/run-owned process identity, touches the unrelated canary, or the focused gate flakes without an identified product or harness defect."
     },
+    {
+      "id": "runtime.linux-cli-launch-contract",
+      "title": "Packaged Linux CLI commands run without FUSE, user namespaces, or a display",
+      "maturity": "experimental",
+      "protection": "partial",
+      "owner": "runtime-platform",
+      "layer": "appimage-cli-entrypoint",
+      "surfaces": [
+        "packaged Linux AppImage",
+        "bundled CLI launcher",
+        "extracted direct binary",
+        "desktop launch diagnosis"
+      ],
+      "platforms": ["linux"],
+      "providers": ["local-daemon"],
+      "coveredPlatforms": ["linux"],
+      "coveredProviders": ["local-daemon"],
+      "coverageNotes": "A restricted Ubuntu container stages the extracted AppImage payload with no /dev/fuse and with unprivileged user namespaces denied, then runs eight CLI cases across the bundled launcher and the extracted direct binary. x64 only, because PR CI builds only --x64.",
+      "motivatingLinks": [
+        "https://github.com/stablyai/orca/issues/13719",
+        "https://github.com/stablyai/orca/issues/14229"
+      ],
+      "invariant": "On a host without FUSE and without unprivileged user namespaces, every packaged CLI entrypoint either completes its command or reports a diagnosis, and never terminates on a signal.",
+      "oracle": "Build the image, stage the AppImage payload, and run each case in the restricted container. Assert the preconditions first: unshare -Ur must fail and /dev/fuse must be absent, so a relaxed runner fails the job rather than silently skipping. For each case require the exact expected exit status and an expected substring of the command's own output, with the harness RESULT/CRASHED/PRECONDITION_FAILED control lines excluded so a case name can never satisfy its own assertion. Any status of 128 or above is a crash and fails immediately. The per-case timeout is a failure deadline, never a success condition.",
+      "commands": [
+        "node config/scripts/run-linux-cli-launch-contract-docker.mjs --appimage dist/orca-linux.AppImage",
+        "shellcheck config/docker/cli-launch-contract/run-cli-case.sh"
+      ],
+      "testFiles": [
+        "config/scripts/run-linux-cli-launch-contract-docker.mjs",
+        "config/docker/cli-launch-contract/run-cli-case.sh"
+      ],
+      "assertionRefs": [
+        {
+          "file": "config/scripts/run-linux-cli-launch-contract-docker.mjs",
+          "assertions": [
+            "the bundled launcher serves --help, --version, status, skills --help, and worktree list without Chromium",
+            "a direct binary launch reaching JavaScript runs the command instead of booting a GUI",
+            "a desktop launch with no display reports the missing-display diagnosis instead of trapping",
+            "a stale DISPLAY is diagnosed rather than trusted",
+            "expected output is matched against the command's own output, not the harness control lines"
+          ]
+        },
+        {
+          "file": "config/docker/cli-launch-contract/run-cli-case.sh",
+          "assertions": [
+            "the container refuses to run unless unprivileged user namespaces are denied and /dev/fuse is absent",
+            "an exit status of 128 or above is reported as a crash rather than compared to the expected status"
+          ]
+        }
+      ],
+      "evidenceRuns": [
+        {
+          "date": "2026-08-31",
+          "runner": "ci",
+          "platform": "linux",
+          "command": "node config/scripts/run-linux-cli-launch-contract-docker.mjs --appimage dist/orca-linux.AppImage",
+          "result": "passed",
+          "durationSeconds": 40,
+          "summary": "PR package job https://github.com/stablyai/orca/actions/runs/33360129768/job/99389831915 ran all eight cases to ok on ubuntu-latest. The unshare and /dev/fuse preconditions held under moby's default seccomp profile rather than tripping."
+        },
+        {
+          "date": "2026-09-01",
+          "runner": "local",
+          "platform": "linux",
+          "command": "node config/scripts/run-linux-cli-launch-contract-docker.mjs --appimage dist/orca-linux.AppImage",
+          "result": "passed",
+          "durationSeconds": 60,
+          "summary": "All eight cases passed on Ubuntu 24.04 amd64 hardware against an AppImage built from the stack tip, invoked against a copy of that artifact outside dist/."
+        }
+      ],
+      "runtimeBudget": {
+        "p95Seconds": 300,
+        "scope": "eight CLI launch cases in one restricted Ubuntu container"
+      },
+      "flakeHistory": {
+        "status": "not-started",
+        "evidence": "The harness is new; soak history is not yet available."
+      },
+      "redGreenEvidence": {
+        "status": "complete",
+        "evidence": "The same harness run against a stock release AppImage failed four of eight cases: nofuse-userns-bundled-version at status 93, and all three direct-binary cases crashed at status 133 (SIGTRAP, the uv_close abort of #13719 and #14229). The stack-tip AppImage passed all eight. Corroborated at artifact level: the stack-tip runtime is a static-pie ELF with no PT_INTERP, the stock runtime is dynamically linked. Caveat: the two skills cases previously asserted a substring that the harness's own RESULT line contained, so they passed independently of command output; both now assert the rendered help header, and the green runs above predate that change."
+      },
+      "performanceBudget": {
+        "required": false,
+        "evidence": "The gate is CI-only and adds no product code path."
+      },
+      "promotionCriteria": [
+        "Collect 30 consecutive CI passes or 14 days without an unexplained flake.",
+        "Extend the matrix to arm64 once PR CI builds that architecture.",
+        "Re-run red/green against a stock AppImage after any change to the launcher entrypoint."
+      ],
+      "knownGaps": [
+        "The preconditions depend on moby's default seccomp profile denying unshare(CLONE_NEWUSER) and on /dev/fuse being absent. A runner with a relaxed profile or a mounted /dev/fuse trips PRECONDITION_FAILED and fails the job rather than skipping.",
+        "x64 only: PR CI builds only --x64, so the arm64 launcher path is unexercised.",
+        "The harness covers CLI entrypoints only; it does not exercise a full desktop session."
+      ],
+      "demotionRule": "Keep experimental or demote if any case terminates on a signal, the preconditions stop holding on the CI runner, or an assertion can be satisfied by anything other than the command's own output."
+    },
     {
       "id": "ssh-managed-hooks.node18-runtime-compatibility",
       "title": "SSH managed-hook companions load and install hooks on Node 18",
diff --git a/config/scripts/build-linux-local.mjs b/config/scripts/build-linux-local.mjs
new file mode 100644
index 00000000000..2328f00bede
--- /dev/null
+++ b/config/scripts/build-linux-local.mjs
@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+
+import { execFileSync } from 'node:child_process'
+import { resolve } from 'node:path'
+
+const SUPPORTED_ARCHES = new Set(['x64', 'arm64'])
+
+/** Select the local Linux package architecture without relying on builder defaults. */
+export function resolveLinuxBuildArch({
+  platform = process.platform,
+  hostArch = process.arch,
+  requestedArch = process.env.ORCA_LINUX_BUILD_ARCH
+} = {}) {
+  const arch = requestedArch ?? (platform === 'linux' ? hostArch : 'x64')
+  if (!SUPPORTED_ARCHES.has(arch)) {
+    throw new Error(
+      `Unsupported Linux build architecture: ${arch}. Use ORCA_LINUX_BUILD_ARCH=x64|arm64.`
+    )
+  }
+  return arch
+}
+
+export function buildLinuxElectronBuilderArgs(arch, extraArgs = []) {
+  if (!SUPPORTED_ARCHES.has(arch)) {
+    throw new Error(`Unsupported Linux build architecture: ${arch}`)
+  }
+  return [
+    'exec',
+    'electron-builder',
+    '--config',
+    'config/electron-builder.config.cjs',
+    '--linux',
+    'AppImage',
+    'deb',
+    'rpm',
+    `--${arch}`,
+    ...extraArgs
+  ]
+}
+
+export function runLocalLinuxBuild({
+  arch = resolveLinuxBuildArch(),
+  extraArgs = [],
+  environment = process.env,
+  execFile = execFileSync,
+  platform = process.platform,
+  cwd = resolve(import.meta.dirname, '../..')
+} = {}) {
+  const env = { ...environment }
+  if (arch === 'arm64') {
+    env.ORCA_LINUX_ARM64_RELEASE = '1'
+  } else {
+    delete env.ORCA_LINUX_ARM64_RELEASE
+  }
+  const pnpm = platform === 'win32' ? 'pnpm.cmd' : 'pnpm'
+  execFile(pnpm, buildLinuxElectronBuilderArgs(arch, extraArgs), {
+    cwd,
+    env,
+    stdio: 'inherit'
+  })
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === resolve(import.meta.filename)) {
+  runLocalLinuxBuild({ extraArgs: process.argv.slice(2) })
+}
diff --git a/config/scripts/build-linux-local.test.mjs b/config/scripts/build-linux-local.test.mjs
new file mode 100644
index 00000000000..684c83f3265
--- /dev/null
+++ b/config/scripts/build-linux-local.test.mjs
@@ -0,0 +1,85 @@
+import { readFileSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { describe, expect, it, vi } from 'vitest'
+import {
+  buildLinuxElectronBuilderArgs,
+  resolveLinuxBuildArch,
+  runLocalLinuxBuild
+} from './build-linux-local.mjs'
+
+describe('local Linux build target', () => {
+  it('is the package script used by the local Linux build', () => {
+    const packageJson = JSON.parse(
+      readFileSync(resolve(import.meta.dirname, '../../package.json'), 'utf8')
+    )
+    expect(packageJson.scripts['build:linux']).toContain(
+      'node config/scripts/build-linux-local.mjs'
+    )
+  })
+
+  it('follows a native Linux host architecture', () => {
+    expect(resolveLinuxBuildArch({ platform: 'linux', hostArch: 'arm64' })).toBe('arm64')
+    expect(resolveLinuxBuildArch({ platform: 'linux', hostArch: 'x64' })).toBe('x64')
+  })
+
+  it('defaults cross-platform Linux builds to x64 and allows an explicit override', () => {
+    expect(resolveLinuxBuildArch({ platform: 'darwin', hostArch: 'arm64' })).toBe('x64')
+    expect(
+      resolveLinuxBuildArch({ platform: 'darwin', hostArch: 'arm64', requestedArch: 'arm64' })
+    ).toBe('arm64')
+  })
+
+  it('rejects unsupported architectures', () => {
+    expect(() => resolveLinuxBuildArch({ platform: 'linux', hostArch: 'ia32' })).toThrow(
+      'Unsupported Linux build architecture'
+    )
+    expect(() => buildLinuxElectronBuilderArgs('ia32')).toThrow(
+      'Unsupported Linux build architecture'
+    )
+  })
+
+  it('passes an explicit target and matching artifact-name environment', () => {
+    const execFile = vi.fn()
+    runLocalLinuxBuild({
+      arch: 'arm64',
+      environment: { PATH: '/bin', ORCA_LINUX_ARM64_RELEASE: undefined },
+      execFile,
+      platform: 'linux',
+      cwd: '/workspace'
+    })
+    expect(execFile).toHaveBeenCalledWith(
+      'pnpm',
+      buildLinuxElectronBuilderArgs('arm64'),
+      expect.objectContaining({
+        cwd: '/workspace',
+        env: expect.objectContaining({ ORCA_LINUX_ARM64_RELEASE: '1' }),
+        stdio: 'inherit'
+      })
+    )
+
+    expect(buildLinuxElectronBuilderArgs('x64')).toEqual(
+      expect.arrayContaining(['--linux', 'AppImage', 'deb', 'rpm', '--x64'])
+    )
+
+    runLocalLinuxBuild({
+      arch: 'x64',
+      environment: { PATH: '/bin', ORCA_LINUX_ARM64_RELEASE: '1' },
+      execFile,
+      platform: 'linux',
+      cwd: '/workspace'
+    })
+    expect(execFile).toHaveBeenLastCalledWith(
+      'pnpm',
+      buildLinuxElectronBuilderArgs('x64'),
+      expect.objectContaining({
+        env: expect.not.objectContaining({ ORCA_LINUX_ARM64_RELEASE: expect.anything() })
+      })
+    )
+  })
+
+  it('uses the Windows pnpm command name when cross-host packaging', () => {
+    const execFile = vi.fn()
+    runLocalLinuxBuild({ arch: 'x64', execFile, platform: 'win32', cwd: 'C:\\workspace' })
+    expect(execFile.mock.calls[0]?.[0]).toBe('pnpm.cmd')
+  })
+})
diff --git a/config/scripts/electron-builder-config.test.mjs b/config/scripts/electron-builder-config.test.mjs
index 347cae8fcfc..3f055ce222d 100644
--- a/config/scripts/electron-builder-config.test.mjs
+++ b/config/scripts/electron-builder-config.test.mjs
@@ -1,4 +1,4 @@
-import { cp, mkdir, mkdtemp, readFile, readdir, rm, stat, writeFile } from 'node:fs/promises'
+import { chmod, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises'
 import { createRequire } from 'node:module'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
@@ -10,17 +10,8 @@ const SRC_MAIN_DIR = join(REPO_ROOT, 'src', 'main')
 const require = createRequire(import.meta.url)
 const electronBuilderConfig = require('../electron-builder.config.cjs')
 const { FileMatcher } = require('app-builder-lib/out/fileMatcher')
+const FpmTarget = require('app-builder-lib/out/targets/FpmTarget').default
 const electronBuilderNativeRebuild = require('./electron-builder-native-rebuild.cjs')
-const {
-  createPackagedRuntimeNodeModuleResources,
-  findAsarEntry,
-  prunePackagedNodePty,
-  prunePackagedParcelWatcher,
-  prunePackagedSherpaOnnx,
-  prunePackagedRuntimeTypeAndSourceMapArtifacts,
-  prunePackagedZodSources,
-  verifyPackagedMainRuntimeDeps
-} = require('../packaged-runtime-node-modules.cjs')
 
 describe('electron-builder config', () => {
   it('keeps the packaged app identity aligned with local-build validation', () => {
@@ -280,8 +271,9 @@ describe('electron-builder config', () => {
     expect(electronBuilderConfig.linux.desktop.entry.StartupWMClass).toBe('orca')
   })
 
-  it('uses AppImage and deb as local Linux targets without changing existing artifact names', () => {
-    expect(electronBuilderConfig.linux.target).toEqual(['AppImage', 'deb'])
+  it('uses the release artifact set as local Linux targets without changing existing names', () => {
+    expect(electronBuilderConfig.linux.target).toEqual(['AppImage', 'deb', 'rpm'])
+    expect(electronBuilderConfig.toolsets).toEqual({ appimage: '1.0.3' })
     expect(electronBuilderConfig.appImage.artifactName).toBe('orca-linux.${ext}')
     expect(electronBuilderConfig.deb.artifactName).toBe('orca-ide_${version}_${arch}.${ext}')
     expect(electronBuilderConfig.rpm).toMatchObject({
@@ -290,6 +282,33 @@ describe('electron-builder config', () => {
     })
   })
 
+  it('retains electron-builder runtime dependencies in deb and rpm packages', () => {
+    for (const target of ['deb', 'rpm']) {
+      const dependencies = electronBuilderConfig[target].depends
+      expect(dependencies).toEqual(
+        expect.arrayContaining(FpmTarget.prototype.getDefaultDepends(target))
+      )
+      expect(new Set(dependencies).size).toBe(dependencies.length)
+    }
+  })
+
+  it('validates each AppImage before electron-builder publishes it', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'orca-electron-builder-appimage-'))
+    try {
+      const appImage = join(root, 'orca-linux.AppImage')
+      await writeFile(appImage, 'not an ELF')
+      await chmod(appImage, 0o755)
+
+      expect(() =>
+        electronBuilderConfig.artifactBuildCompleted({ file: appImage, arch: 1 })
+      ).toThrow(/ELF header is outside/)
+      expect(() =>
+        electronBuilderConfig.artifactBuildCompleted({ file: join(root, 'orca-ide.deb') })
+      ).not.toThrow()
+    } finally {
+      await rm(root, { recursive: true, force: true })
+    }
+  })
   it('uses a distinct AppImage name for Linux arm64 release uploads', () => {
     const configPath = require.resolve('../electron-builder.config.cjs')
     const original = process.env.ORCA_LINUX_ARM64_RELEASE
@@ -367,286 +386,6 @@ describe('electron-builder config', () => {
     expect(electronBuilderConfig.npmRebuild).toBe(true)
   })
 
-  it('verifies packaged main runtime deps from Windows-style asar entries', async () => {
-    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-runtime-deps-'))
-    try {
-      await writeFile(join(resourcesDir, 'app.asar'), '', 'utf8')
-      await mkdir(join(resourcesDir, 'node_modules', 'yaml'), { recursive: true })
-      await mkdir(join(resourcesDir, 'node_modules', 'zod'), { recursive: true })
-
-      const sources = new Map([
-        ['out\\main\\index.js', 'const z = require("zod")'],
-        ['out\\main\\agent-hooks\\managed-agent-hook-controls.js', 'const YAML = require("yaml")']
-      ])
-      const asar = {
-        listPackage: () => [...sources.keys()].map((entry) => `\\${entry}`),
-        extractFile: (_asarPath, internalPath) => Buffer.from(sources.get(internalPath), 'utf8')
-      }
-
-      expect(() => verifyPackagedMainRuntimeDeps(resourcesDir, asar)).not.toThrow()
-    } finally {
-      await rm(resourcesDir, { recursive: true, force: true })
-    }
-  })
-
-  it('normalizes host-specific asar entry separators', () => {
-    expect(findAsarEntry(['\\out\\main\\index.js'], 'out/main/index.js')).toBe(
-      '\\out\\main\\index.js'
-    )
-    expect(findAsarEntry(['/out/main/index.js'], 'out/main/index.js')).toBe('/out/main/index.js')
-  })
-
-  it('prunes non-target node-pty architecture outputs from packaged runtime resources', async () => {
-    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-node-pty-prune-'))
-    try {
-      const nodePtyDir = join(resourcesDir, 'node_modules', 'node-pty')
-      const prebuildsDir = join(nodePtyDir, 'prebuilds')
-      const binDir = join(nodePtyDir, 'bin')
-      await mkdir(join(prebuildsDir, 'darwin-arm64'), { recursive: true })
-      await mkdir(join(prebuildsDir, 'darwin-x64'), { recursive: true })
-      await mkdir(join(prebuildsDir, 'linux-x64'), { recursive: true })
-      await mkdir(join(prebuildsDir, 'win32-x64'), { recursive: true })
-      await mkdir(join(binDir, 'darwin-arm64-148'), { recursive: true })
-      await mkdir(join(binDir, 'darwin-x64-148'), { recursive: true })
-      await mkdir(join(nodePtyDir, 'third_party', 'conpty'), {
-        recursive: true
-      })
-      await mkdir(join(nodePtyDir, 'deps', 'winpty'), { recursive: true })
-
-      prunePackagedNodePty(resourcesDir, 'darwin', 3)
-
-      await expect(readdir(prebuildsDir)).resolves.toEqual(['darwin-arm64'])
-      await expect(readdir(binDir)).resolves.toEqual(['darwin-arm64-148'])
-      await expect(readdir(join(nodePtyDir, 'third_party'))).resolves.toEqual([])
-      await expect(readdir(join(nodePtyDir, 'deps'))).resolves.toEqual([])
-      expect(() => prunePackagedNodePty(resourcesDir, 'darwin', 4)).toThrow(
-        'Unsupported packaged runtime architecture: 4'
-      )
-    } finally {
-      await rm(resourcesDir, { recursive: true, force: true })
-    }
-  })
-
-  it('copies the Windows node-pty ConPTY runtime beside the rebuilt addon', async () => {
-    for (const [arch, electronArch] of [
-      ['x64', 1],
-      ['arm64', 3]
-    ]) {
-      const resourcesDir = await mkdtemp(join(tmpdir(), `orca-node-pty-conpty-${arch}-`))
-      try {
-        const nodePtyDir = join(resourcesDir, 'node_modules', 'node-pty')
-        const releaseDir = join(nodePtyDir, 'build', 'Release')
-        const conptyRoot = join(nodePtyDir, 'third_party', 'conpty', '0.1.0')
-        await mkdir(releaseDir, { recursive: true })
-        await writeFile(join(releaseDir, 'conpty.node'), 'native addon placeholder', 'utf8')
-        for (const sourceArch of ['x64', 'arm64']) {
-          const sourceDir = join(conptyRoot, `win10-${sourceArch}`)
-          await mkdir(sourceDir, { recursive: true })
-          await writeFile(join(sourceDir, 'conpty.dll'), `dll payload ${sourceArch}`, 'utf8')
-          await writeFile(
-            join(sourceDir, 'OpenConsole.exe'),
-            `console payload ${sourceArch}`,
-            'utf8'
-          )
-        }
-
-        prunePackagedNodePty(resourcesDir, 'win32', electronArch)
-
-        await expect(readFile(join(releaseDir, 'conpty', 'conpty.dll'), 'utf8')).resolves.toBe(
-          `dll payload ${arch}`
-        )
-        await expect(readFile(join(releaseDir, 'conpty', 'OpenConsole.exe'), 'utf8')).resolves.toBe(
-          `console payload ${arch}`
-        )
-      } finally {
-        await rm(resourcesDir, { recursive: true, force: true })
-      }
-    }
-  })
-
-  it('includes external main dependencies in the packaged runtime closure', () => {
-    // Why: the main process imports '@parcel/watcher' for filesystem change
-    // events; if it is absent from the packaged closure the serve host silently
-    // stops propagating file changes to clients (regression guard for #4851).
-    const packaged = createPackagedRuntimeNodeModuleResources()
-    const packagedTargets = packaged.map((resource) => resource.to)
-    expect(packagedTargets).toContain(join('node_modules', '@parcel', 'watcher'))
-    expect(
-      packagedTargets.some((target) =>
-        target.startsWith(join('node_modules', '@parcel', 'watcher-'))
-      )
-    ).toBe(true)
-    expect(packagedTargets).toContain(join('node_modules', 'proper-lockfile'))
-  })
-
-  it('prunes non-target @parcel/watcher architecture subpackages', async () => {
-    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-parcel-watcher-prune-'))
-    try {
-      const parcelDir = join(resourcesDir, 'node_modules', '@parcel')
-      await mkdir(join(parcelDir, 'watcher'), { recursive: true })
-      await mkdir(join(parcelDir, 'watcher-darwin-arm64'), { recursive: true })
-      await mkdir(join(parcelDir, 'watcher-darwin-x64'), { recursive: true })
-      await mkdir(join(parcelDir, 'watcher-linux-x64-glibc'), { recursive: true })
-      await mkdir(join(parcelDir, 'watcher-linux-arm64-glibc'), { recursive: true })
-      await mkdir(join(parcelDir, 'watcher-win32-x64'), { recursive: true })
-
-      prunePackagedParcelWatcher(resourcesDir, 'linux', 'arm64')
-
-      await expect(readdir(parcelDir).then((entries) => entries.sort())).resolves.toEqual([
-        'watcher',
-        'watcher-linux-arm64-glibc'
-      ])
-      expect(() => prunePackagedParcelWatcher(resourcesDir, 'linux', 'universal')).toThrow(
-        'Unsupported packaged runtime architecture: universal'
-      )
-    } finally {
-      await rm(resourcesDir, { recursive: true, force: true })
-    }
-  })
-
-  it('leaves unrelated @parcel/* runtime deps untouched when pruning the watcher', async () => {
-    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-parcel-watcher-prune-unrelated-'))
-    try {
-      const parcelDir = join(resourcesDir, 'node_modules', '@parcel')
-      await mkdir(join(parcelDir, 'watcher'), { recursive: true })
-      await mkdir(join(parcelDir, 'watcher-darwin-arm64'), { recursive: true })
-      await mkdir(join(parcelDir, 'watcher-linux-x64-glibc'), { recursive: true })
-      // A hypothetical future @parcel/* runtime dep that is NOT a watcher subpackage.
-      await mkdir(join(parcelDir, 'transformer-js'), { recursive: true })
-
-      prunePackagedParcelWatcher(resourcesDir, 'linux', 1)
-
-      await expect(readdir(parcelDir).then((entries) => entries.sort())).resolves.toEqual([
-        'transformer-js',
-        'watcher',
-        'watcher-linux-x64-glibc'
-      ])
-    } finally {
-      await rm(resourcesDir, { recursive: true, force: true })
-    }
-  })
-
-  it('prunes type declaration artifacts from packaged runtime node_modules', async () => {
-    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-runtime-type-prune-'))
-    try {
-      const packageDir = join(resourcesDir, 'node_modules', 'example-package')
-      await mkdir(join(packageDir, 'dist'), { recursive: true })
-      await writeFile(join(packageDir, 'dist', 'index.cjs'), 'module.exports = {}', 'utf8')
-      await writeFile(join(packageDir, 'dist', 'index.d.ts'), 'export type Value = string', 'utf8')
-      await writeFile(join(packageDir, 'dist', 'index.d.cts'), 'export type Value = string', 'utf8')
-      await writeFile(join(packageDir, 'dist', 'index.d.mts'), 'export type Value = string', 'utf8')
-      await writeFile(join(packageDir, 'dist', 'index.d.cts.map'), '{}', 'utf8')
-      await writeFile(join(packageDir, 'dist', 'index.d.mts.map'), '{}', 'utf8')
-
-      prunePackagedRuntimeTypeAndSourceMapArtifacts(resourcesDir)
-
-      await expect(readdir(join(packageDir, 'dist'))).resolves.toEqual(['index.cjs'])
-    } finally {
-      await rm(resourcesDir, { recursive: true, force: true })
-    }
-  })
-
-  it('prunes duplicate darwin sherpa-onnx runtime dylib aliases', async () => {
-    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-sherpa-prune-'))
-    try {
-      const packageDir = join(resourcesDir, 'node_modules', 'sherpa-onnx-darwin-arm64')
-      await mkdir(packageDir, { recursive: true })
-      await writeFile(join(packageDir, 'sherpa-onnx.node'), '', 'utf8')
-      await writeFile(join(packageDir, 'libonnxruntime.1.23.2.dylib'), '', 'utf8')
-      await writeFile(join(packageDir, 'libonnxruntime.dylib'), '', 'utf8')
-
-      prunePackagedSherpaOnnx(resourcesDir, 'darwin')
-
-      await expect(readdir(packageDir).then((entries) => entries.sort())).resolves.toEqual([
-        'libonnxruntime.1.23.2.dylib',
-        'sherpa-onnx.node'
-      ])
-    } finally {
-      await rm(resourcesDir, { recursive: true, force: true })
-    }
-  })
-
-  it('prunes zod TypeScript sources from packaged runtime resources', async () => {
-    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-zod-prune-'))
-    try {
-      const packageDir = join(resourcesDir, 'node_modules', 'zod')
-      await mkdir(join(packageDir, 'src'), { recursive: true })
-      await writeFile(join(packageDir, 'index.cjs'), 'module.exports = {}', 'utf8')
-      await writeFile(join(packageDir, 'src', 'index.ts'), 'export const value = true', 'utf8')
-
-      prunePackagedZodSources(resourcesDir)
-
-      await expect(readdir(packageDir)).resolves.toEqual(['index.cjs'])
-    } finally {
-      await rm(resourcesDir, { recursive: true, force: true })
-    }
-  })
-
-  it('fails when the packaged resources directory is missing', async () => {
-    const root = await mkdtemp(join(tmpdir(), 'orca-electron-builder-config-'))
-    try {
-      await expect(
-        electronBuilderConfig.afterPack({
-          appOutDir: root,
-          electronPlatformName: 'win32'
-        })
-      ).rejects.toThrow(/Missing packaged resources directory/)
-    } finally {
-      await rm(root, { recursive: true, force: true })
-    }
-  })
-
-  it.skipIf(process.platform === 'win32')(
-    'marks packaged Unix CLI launchers executable',
-    async () => {
-      const root = await mkdtemp(join(tmpdir(), 'orca-electron-builder-config-'))
-      try {
-        const resourcesDir = join(root, 'linux-unpacked', 'resources')
-        const launcherPath = join(resourcesDir, 'bin', 'orca-ide')
-        await mkdir(join(resourcesDir, 'bin'), { recursive: true })
-        await cp(
-          join(process.cwd(), 'resources', 'plugins', 'launch'),
-          join(resourcesDir, 'plugins', 'launch'),
-          { recursive: true }
-        )
-        await mkdir(join(resourcesDir, 'node_modules', 'zod', 'src'), { recursive: true })
-        // Why: afterPack now fails hard when the unpacked daemon entry is
-        // missing, so the fixture must carry one like a real package layout.
-        const unpackedMainDir = join(resourcesDir, 'app.asar.unpacked', 'out', 'main')
-        await mkdir(unpackedMainDir, { recursive: true })
-        await writeFile(
-          join(unpackedMainDir, 'daemon-entry.js'),
-          'console.error("Usage: daemon-entry <socket>"); process.exit(1)\n',
-          'utf8'
-        )
-        const unpackedCliDir = join(resourcesDir, 'app.asar.unpacked', 'out', 'cli')
-        await mkdir(join(unpackedCliDir, 'handlers'), { recursive: true })
-        await writeFile(join(unpackedCliDir, 'handlers', 'skills.js'), '', 'utf8')
-        await writeFile(
-          join(unpackedCliDir, 'index.js'),
-          [
-            'const args = process.argv.slice(2)',
-            "if (args[1] === 'list') console.log(JSON.stringify({ topics: [{ name: 'orca-cli' }, { name: 'computer-use' }] }))",
-            "else if (args[1] === 'get') console.log(`---\\nname: ${args[2]}\\n---`)",
-            'else console.log(JSON.stringify({ executed: false }))'
-          ].join('\n'),
-          'utf8'
-        )
-        await writeFile(launcherPath, '#!/usr/bin/env bash\n', { encoding: 'utf8', mode: 0o644 })
-
-        await electronBuilderConfig.afterPack({
-          appOutDir: join(root, 'linux-unpacked'),
-          electronPlatformName: 'linux',
-          arch: 1
-        })
-
-        expect((await stat(launcherPath)).mode & 0o111).not.toBe(0)
-      } finally {
-        await rm(root, { recursive: true, force: true })
-      }
-    }
-  )
-
   // Why: the .deb/.rpm update-recovery path keys entirely off the resources/package-type marker that
   // app-builder-lib's FpmTarget writes. If packaging silently stops shipping an fpm target, or adds
   // one the recovery path does not cover, getLinuxRootPackageType() returns null, autoInstallOnAppQuit
@@ -680,5 +419,17 @@ describe('electron-builder config', () => {
         expect(source).toContain(`value === '${target}'`)
       }
     })
+
+    it('keeps the pinned FpmTarget overwrite for configured deb and rpm artifacts', async () => {
+      const source = await readFile(
+        require.resolve('app-builder-lib/out/targets/FpmTarget'),
+        'utf8'
+      )
+
+      expect(source).toContain('path.join(resourceDir, "package-type"), target')
+      for (const target of RECOVERABLE_TARGETS) {
+        expect(electronBuilderConfig[target]).toBeDefined()
+      }
+    })
   })
 })
diff --git a/config/scripts/electron-builder-runtime-resources.test.mjs b/config/scripts/electron-builder-runtime-resources.test.mjs
new file mode 100644
index 00000000000..d2407776fa7
--- /dev/null
+++ b/config/scripts/electron-builder-runtime-resources.test.mjs
@@ -0,0 +1,308 @@
+import { cp, mkdir, mkdtemp, readFile, readdir, rm, stat, writeFile } from 'node:fs/promises'
+import { createRequire } from 'node:module'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+const require = createRequire(import.meta.url)
+const electronBuilderConfig = require('../electron-builder.config.cjs')
+const {
+  createPackagedRuntimeNodeModuleResources,
+  findAsarEntry,
+  prunePackagedNodePty,
+  prunePackagedParcelWatcher,
+  prunePackagedSherpaOnnx,
+  prunePackagedRuntimeTypeAndSourceMapArtifacts,
+  prunePackagedZodSources,
+  verifyPackagedMainRuntimeDeps
+} = require('../packaged-runtime-node-modules.cjs')
+
+describe('packaged runtime resources', () => {
+  it('verifies packaged main runtime deps from Windows-style asar entries', async () => {
+    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-runtime-deps-'))
+    try {
+      await writeFile(join(resourcesDir, 'app.asar'), '', 'utf8')
+      await mkdir(join(resourcesDir, 'node_modules', 'yaml'), { recursive: true })
+      await mkdir(join(resourcesDir, 'node_modules', 'zod'), { recursive: true })
+
+      const sources = new Map([
+        ['out\\main\\index.js', 'const z = require("zod")'],
+        ['out\\main\\agent-hooks\\managed-agent-hook-controls.js', 'const YAML = require("yaml")']
+      ])
+      const asar = {
+        listPackage: () => [...sources.keys()].map((entry) => `\\${entry}`),
+        extractFile: (_asarPath, internalPath) => Buffer.from(sources.get(internalPath), 'utf8')
+      }
+
+      expect(() => verifyPackagedMainRuntimeDeps(resourcesDir, asar)).not.toThrow()
+    } finally {
+      await rm(resourcesDir, { recursive: true, force: true })
+    }
+  })
+
+  it('normalizes host-specific asar entry separators', () => {
+    expect(findAsarEntry(['\\out\\main\\index.js'], 'out/main/index.js')).toBe(
+      '\\out\\main\\index.js'
+    )
+    expect(findAsarEntry(['/out/main/index.js'], 'out/main/index.js')).toBe('/out/main/index.js')
+  })
+
+  it('prunes non-target node-pty architecture outputs from packaged runtime resources', async () => {
+    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-node-pty-prune-'))
+    try {
+      const nodePtyDir = join(resourcesDir, 'node_modules', 'node-pty')
+      const prebuildsDir = join(nodePtyDir, 'prebuilds')
+      const binDir = join(nodePtyDir, 'bin')
+      await mkdir(join(prebuildsDir, 'darwin-arm64'), { recursive: true })
+      await mkdir(join(prebuildsDir, 'darwin-x64'), { recursive: true })
+      await mkdir(join(prebuildsDir, 'linux-x64'), { recursive: true })
+      await mkdir(join(prebuildsDir, 'win32-x64'), { recursive: true })
+      await mkdir(join(binDir, 'darwin-arm64-148'), { recursive: true })
+      await mkdir(join(binDir, 'darwin-x64-148'), { recursive: true })
+      await mkdir(join(nodePtyDir, 'third_party', 'conpty'), {
+        recursive: true
+      })
+      await mkdir(join(nodePtyDir, 'deps', 'winpty'), { recursive: true })
+
+      prunePackagedNodePty(resourcesDir, 'darwin', 3)
+
+      await expect(readdir(prebuildsDir)).resolves.toEqual(['darwin-arm64'])
+      await expect(readdir(binDir)).resolves.toEqual(['darwin-arm64-148'])
+      await expect(readdir(join(nodePtyDir, 'third_party'))).resolves.toEqual([])
+      await expect(readdir(join(nodePtyDir, 'deps'))).resolves.toEqual([])
+      expect(() => prunePackagedNodePty(resourcesDir, 'darwin', 4)).toThrow(
+        'Unsupported packaged runtime architecture: 4'
+      )
+    } finally {
+      await rm(resourcesDir, { recursive: true, force: true })
+    }
+  })
+
+  it('copies the Windows node-pty ConPTY runtime beside the rebuilt addon', async () => {
+    for (const [arch, electronArch] of [
+      ['x64', 1],
+      ['arm64', 3]
+    ]) {
+      const resourcesDir = await mkdtemp(join(tmpdir(), `orca-node-pty-conpty-${arch}-`))
+      try {
+        const nodePtyDir = join(resourcesDir, 'node_modules', 'node-pty')
+        const releaseDir = join(nodePtyDir, 'build', 'Release')
+        const conptyRoot = join(nodePtyDir, 'third_party', 'conpty', '0.1.0')
+        await mkdir(releaseDir, { recursive: true })
+        await writeFile(join(releaseDir, 'conpty.node'), 'native addon placeholder', 'utf8')
+        for (const sourceArch of ['x64', 'arm64']) {
+          const sourceDir = join(conptyRoot, `win10-${sourceArch}`)
+          await mkdir(sourceDir, { recursive: true })
+          await writeFile(join(sourceDir, 'conpty.dll'), `dll payload ${sourceArch}`, 'utf8')
+          await writeFile(
+            join(sourceDir, 'OpenConsole.exe'),
+            `console payload ${sourceArch}`,
+            'utf8'
+          )
+        }
+
+        prunePackagedNodePty(resourcesDir, 'win32', electronArch)
+
+        await expect(readFile(join(releaseDir, 'conpty', 'conpty.dll'), 'utf8')).resolves.toBe(
+          `dll payload ${arch}`
+        )
+        await expect(readFile(join(releaseDir, 'conpty', 'OpenConsole.exe'), 'utf8')).resolves.toBe(
+          `console payload ${arch}`
+        )
+      } finally {
+        await rm(resourcesDir, { recursive: true, force: true })
+      }
+    }
+  })
+
+  it('includes external main dependencies in the packaged runtime closure', () => {
+    // Why: the main process imports '@parcel/watcher' for filesystem change
+    // events; if it is absent from the packaged closure the serve host silently
+    // stops propagating file changes to clients (regression guard for #4851).
+    const packaged = createPackagedRuntimeNodeModuleResources()
+    const packagedTargets = packaged.map((resource) => resource.to)
+    expect(packagedTargets).toContain(join('node_modules', '@parcel', 'watcher'))
+    expect(
+      packagedTargets.some((target) =>
+        target.startsWith(join('node_modules', '@parcel', 'watcher-'))
+      )
+    ).toBe(true)
+    expect(packagedTargets).toContain(join('node_modules', 'proper-lockfile'))
+  })
+
+  it('prunes non-target @parcel/watcher architecture subpackages', async () => {
+    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-parcel-watcher-prune-'))
+    try {
+      const parcelDir = join(resourcesDir, 'node_modules', '@parcel')
+      await mkdir(join(parcelDir, 'watcher'), { recursive: true })
+      await mkdir(join(parcelDir, 'watcher-darwin-arm64'), { recursive: true })
+      await mkdir(join(parcelDir, 'watcher-darwin-x64'), { recursive: true })
+      await mkdir(join(parcelDir, 'watcher-linux-x64-glibc'), { recursive: true })
+      await mkdir(join(parcelDir, 'watcher-linux-arm64-glibc'), { recursive: true })
+      await mkdir(join(parcelDir, 'watcher-win32-x64'), { recursive: true })
+
+      prunePackagedParcelWatcher(resourcesDir, 'linux', 'arm64')
+
+      await expect(readdir(parcelDir).then((entries) => entries.sort())).resolves.toEqual([
+        'watcher',
+        'watcher-linux-arm64-glibc'
+      ])
+      expect(() => prunePackagedParcelWatcher(resourcesDir, 'linux', 'universal')).toThrow(
+        'Unsupported packaged runtime architecture: universal'
+      )
+    } finally {
+      await rm(resourcesDir, { recursive: true, force: true })
+    }
+  })
+
+  it('leaves unrelated @parcel/* runtime deps untouched when pruning the watcher', async () => {
+    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-parcel-watcher-prune-unrelated-'))
+    try {
+      const parcelDir = join(resourcesDir, 'node_modules', '@parcel')
+      await mkdir(join(parcelDir, 'watcher'), { recursive: true })
+      await mkdir(join(parcelDir, 'watcher-darwin-arm64'), { recursive: true })
+      await mkdir(join(parcelDir, 'watcher-linux-x64-glibc'), { recursive: true })
+      // A hypothetical future @parcel/* runtime dep that is NOT a watcher subpackage.
+      await mkdir(join(parcelDir, 'transformer-js'), { recursive: true })
+
+      prunePackagedParcelWatcher(resourcesDir, 'linux', 1)
+
+      await expect(readdir(parcelDir).then((entries) => entries.sort())).resolves.toEqual([
+        'transformer-js',
+        'watcher',
+        'watcher-linux-x64-glibc'
+      ])
+    } finally {
+      await rm(resourcesDir, { recursive: true, force: true })
+    }
+  })
+
+  it('prunes type declaration artifacts from packaged runtime node_modules', async () => {
+    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-runtime-type-prune-'))
+    try {
+      const packageDir = join(resourcesDir, 'node_modules', 'example-package')
+      await mkdir(join(packageDir, 'dist'), { recursive: true })
+      await writeFile(join(packageDir, 'dist', 'index.cjs'), 'module.exports = {}', 'utf8')
+      await writeFile(join(packageDir, 'dist', 'index.d.ts'), 'export type Value = string', 'utf8')
+      await writeFile(join(packageDir, 'dist', 'index.d.cts'), 'export type Value = string', 'utf8')
+      await writeFile(join(packageDir, 'dist', 'index.d.mts.map'), '{}', 'utf8')
+
+      prunePackagedRuntimeTypeAndSourceMapArtifacts(resourcesDir)
+
+      await expect(readdir(join(packageDir, 'dist'))).resolves.toEqual(['index.cjs'])
+    } finally {
+      await rm(resourcesDir, { recursive: true, force: true })
+    }
+  })
+
+  it('prunes duplicate darwin sherpa-onnx runtime dylib aliases', async () => {
+    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-sherpa-prune-'))
+    try {
+      const packageDir = join(resourcesDir, 'node_modules', 'sherpa-onnx-darwin-arm64')
+      await mkdir(packageDir, { recursive: true })
+      await writeFile(join(packageDir, 'sherpa-onnx.node'), '', 'utf8')
+      await writeFile(join(packageDir, 'libonnxruntime.1.23.2.dylib'), '', 'utf8')
+      await writeFile(join(packageDir, 'libonnxruntime.dylib'), '', 'utf8')
+
+      prunePackagedSherpaOnnx(resourcesDir, 'darwin')
+
+      await expect(readdir(packageDir).then((entries) => entries.sort())).resolves.toEqual([
+        'libonnxruntime.1.23.2.dylib',
+        'sherpa-onnx.node'
+      ])
+    } finally {
+      await rm(resourcesDir, { recursive: true, force: true })
+    }
+  })
+
+  it('prunes zod TypeScript sources from packaged runtime resources', async () => {
+    const resourcesDir = await mkdtemp(join(tmpdir(), 'orca-zod-prune-'))
+    try {
+      const packageDir = join(resourcesDir, 'node_modules', 'zod')
+      await mkdir(join(packageDir, 'src'), { recursive: true })
+      await writeFile(join(packageDir, 'index.cjs'), 'module.exports = {}', 'utf8')
+      await writeFile(join(packageDir, 'src', 'index.ts'), 'export const value = true', 'utf8')
+
+      prunePackagedZodSources(resourcesDir)
+
+      await expect(readdir(packageDir)).resolves.toEqual(['index.cjs'])
+    } finally {
+      await rm(resourcesDir, { recursive: true, force: true })
+    }
+  })
+
+  it('fails when the packaged resources directory is missing', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'orca-electron-builder-config-'))
+    try {
+      await expect(
+        electronBuilderConfig.afterPack({
+          appOutDir: root,
+          electronPlatformName: 'win32'
+        })
+      ).rejects.toThrow(/Missing packaged resources directory/)
+    } finally {
+      await rm(root, { recursive: true, force: true })
+    }
+  })
+
+  it.skipIf(process.platform === 'win32')(
+    'marks packaged Unix CLI launchers executable',
+    async () => {
+      const root = await mkdtemp(join(tmpdir(), 'orca-electron-builder-config-'))
+      try {
+        const resourcesDir = join(root, 'linux-unpacked', 'resources')
+        const launcherPath = join(resourcesDir, 'bin', 'orca-ide')
+        await mkdir(join(resourcesDir, 'bin'), { recursive: true })
+        await cp(
+          join(process.cwd(), 'resources', 'plugins', 'launch'),
+          join(resourcesDir, 'plugins', 'launch'),
+          { recursive: true }
+        )
+        await mkdir(join(resourcesDir, 'node_modules', 'zod', 'src'), { recursive: true })
+        // Why: afterPack now fails hard when the unpacked daemon entry is
+        // missing, so the fixture must carry one like a real package layout.
+        const unpackedMainDir = join(resourcesDir, 'app.asar.unpacked', 'out', 'main')
+        await mkdir(unpackedMainDir, { recursive: true })
+        await writeFile(
+          join(unpackedMainDir, 'daemon-entry.js'),
+          'console.error("Usage: daemon-entry <socket>"); process.exit(1)\n',
+          'utf8'
+        )
+        await writeFile(
+          join(resourcesDir, 'app.asar.unpacked', 'out', 'package.json'),
+          `${JSON.stringify({ name: 'orca-compiled-output', type: 'commonjs', private: true })}\n`,
+          'utf8'
+        )
+        const unpackedCliDir = join(resourcesDir, 'app.asar.unpacked', 'out', 'cli')
+        await mkdir(join(unpackedCliDir, 'handlers'), { recursive: true })
+        await writeFile(join(unpackedCliDir, 'handlers', 'skills.js'), '', 'utf8')
+        await writeFile(
+          join(unpackedCliDir, 'index.js'),
+          [
+            'const args = process.argv.slice(2)',
+            "if (args[1] === 'list') console.log(JSON.stringify({ topics: [{ name: 'orca-cli' }, { name: 'computer-use' }] }))",
+            "else if (args[1] === 'get') console.log(`---\\nname: ${args[2]}\\n---`)",
+            'else console.log(JSON.stringify({ executed: false }))'
+          ].join('\n'),
+          'utf8'
+        )
+        await writeFile(launcherPath, '#!/usr/bin/env bash\n', { encoding: 'utf8', mode: 0o644 })
+
+        await electronBuilderConfig.afterPack({
+          appOutDir: join(root, 'linux-unpacked'),
+          electronPlatformName: 'linux',
+          arch: 1,
+          packager: { appInfo: { version: '9.9.9' } }
+        })
+
+        expect((await stat(launcherPath)).mode & 0o111).not.toBe(0)
+        await expect(
+          readFile(join(resourcesDir, 'app.asar.unpacked', 'out', 'package.json'), 'utf8')
+        ).resolves.toContain('"version": "9.9.9"')
+        await expect(readFile(join(resourcesDir, 'package-type'), 'utf8')).resolves.toBe('AppImage')
+      } finally {
+        await rm(root, { recursive: true, force: true })
+      }
+    }
+  )
+})
diff --git a/config/scripts/headless-serve-shutdown-workflow.test.mjs b/config/scripts/headless-serve-shutdown-workflow.test.mjs
index 6590596e41c..90a3f73c77d 100644
--- a/config/scripts/headless-serve-shutdown-workflow.test.mjs
+++ b/config/scripts/headless-serve-shutdown-workflow.test.mjs
@@ -5,6 +5,17 @@ import { describe, expect, it } from 'vitest'
 
 const workflow = parse(readFileSync('.github/workflows/pr.yml', 'utf8'))
 const headlessLinuxGuide = readFileSync('docs/reference/headless-linux-server.md', 'utf8')
+const signalCase = readFileSync('config/docker/headless-serve-shutdown/run-signal-case.sh', 'utf8')
+const shutdownDockerRunner = readFileSync(
+  'config/scripts/run-headless-serve-shutdown-docker.mjs',
+  'utf8'
+)
+const shutdownDockerfile = readFileSync('config/docker/headless-serve-shutdown/Dockerfile', 'utf8')
+const desktopStartupOracle = readFileSync(
+  'config/docker/headless-serve-shutdown/run-appimage-desktop-startup-case.sh',
+  'utf8'
+)
+const headlessLinuxProse = headlessLinuxGuide.replace(/\s+/g, ' ')
 
 function readSystemdUnitBlocks(doc, unitName) {
   const escapedUnitName = unitName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
@@ -40,16 +51,112 @@ describe('headless serve shutdown PR gate', () => {
     ).toThrow('Missing closing code fence for orca-serve.service')
   })
 
-  it('packages an x64 AppImage before running the Docker signal oracle', () => {
+  it('packages Linux artifacts before running the Docker signal oracle', () => {
     const steps = workflow.jobs.package.steps
     const packageStep = steps.find((step) => step.name === 'Package unpacked app')
+    const markerStep = steps.find((step) => step.name === 'Verify root-package marker payloads')
     const shutdownStep = steps.find((step) => step.name === 'Verify headless serve signal shutdown')
+    const launcherShutdownStep = steps.find(
+      (step) => step.name === 'Verify extracted launcher serve signal shutdown'
+    )
+    const appImageShutdownStep = steps.find(
+      (step) => step.name === 'Verify AppImage CLI registration and serve signal shutdown'
+    )
 
-    expect(packageStep.run).toContain('--linux AppImage --x64 --publish never')
+    expect(workflow.jobs.package['timeout-minutes']).toBe(90)
+    expect(packageStep.run).toContain('--linux AppImage deb rpm --x64 --publish never')
+    expect(markerStep.run).toContain('dpkg-deb --fsys-tarfile')
+    expect(markerStep.run).toContain('rpm2cpio')
+    expect(steps.indexOf(markerStep)).toBeGreaterThan(steps.indexOf(packageStep))
     expect(shutdownStep.run).toBe(
       'node config/scripts/run-headless-serve-shutdown-docker.mjs --appimage dist/orca-linux.AppImage'
     )
+    expect(launcherShutdownStep.run).toContain(
+      'node config/scripts/run-headless-serve-shutdown-docker.mjs'
+    )
+    expect(launcherShutdownStep.run).toContain('--entrypoint launcher')
+    expect(appImageShutdownStep.run).toContain('--entrypoint appimage')
+    expect(appImageShutdownStep.run).toContain('--signal-target serving-electron')
+    expect(appImageShutdownStep.run).toContain('--int-delivery pid')
     expect(steps.indexOf(shutdownStep)).toBeGreaterThan(steps.indexOf(packageStep))
+    expect(steps.indexOf(shutdownStep)).toBeGreaterThan(steps.indexOf(markerStep))
+    expect(steps.indexOf(launcherShutdownStep)).toBeGreaterThan(steps.indexOf(shutdownStep))
+    expect(steps.indexOf(appImageShutdownStep)).toBeGreaterThan(steps.indexOf(launcherShutdownStep))
+  })
+
+  it('keeps readiness polling finite and leak-free', () => {
+    expect(signalCase).toContain('read_ready_line()')
+    expect(signalCase).toContain("sed -u -n 's/^[^{]*//p'")
+    expect(signalCase).toContain('startup_timeout_seconds=${ORCA_STARTUP_TIMEOUT_SECONDS:-180}')
+    expect(signalCase).toContain('startup_deadline=$((SECONDS + startup_timeout_seconds))')
+    expect(signalCase).toContain('while (( SECONDS < startup_deadline )); do')
+    expect(signalCase).toContain('kill -0 "$app_pid" 2>/dev/null || break')
+    expect(signalCase).toContain(
+      "jq's `inputs` waits for EOF even when wrapped in `first`, so a tail -F"
+    )
+    expect(signalCase).not.toContain('tail --pid=')
+  })
+
+  it('gives owned shutdown state a bounded cleanup grace', () => {
+    expect(signalCase).toContain('for shutdown_poll in {0..50}; do')
+    expect(signalCase).toContain('[[ -z "$listener_after" && -z "$owned_residue" ]]')
+    expect(signalCase).toContain('((${#survivors[@]} == 0))')
+    expect(signalCase).toContain('((shutdown_poll < 50)) && sleep 0.1')
+  })
+
+  it('checks that a serving-electron signal target owns the ready socket', () => {
+    const ssRecord =
+      'LISTEN 0 128 127.0.0.1:41235 0.0.0.0:* users:(("orca-ide",pid=23,fd=7),("orca-ide",pid=25,fd=8))'
+    expect([...ssRecord.matchAll(/pid=([0-9]+)/g)].map((match) => match[1])).toEqual(['23', '25'])
+    expect(signalCase).toContain(
+      'listener_before_pids=$(grep -oE \'pid=[0-9]+\' <<<"$listener_before" | cut -d= -f2 || true)'
+    )
+    expect(signalCase).toContain('signal_target_pid=$(head -n1 <<<"$listener_before_pids")')
+    expect(signalCase).toContain('outside the entrypoint process tree')
+  })
+
+  it('runs the original AppImage desktop startup oracle before extraction and signals', () => {
+    expect(shutdownDockerfile).toContain(
+      'COPY run-appimage-desktop-startup-case.sh /usr/local/bin/run-appimage-desktop-startup-case'
+    )
+    const startupCall = shutdownDockerRunner.indexOf(
+      'runDesktopStartupOracle({ image, appImage, platform })'
+    )
+    const extractionCall = shutdownDockerRunner.indexOf(
+      "'timeout --kill-after=10s 120s /input/orca.AppImage --appimage-extract"
+    )
+    const signalLoop = shutdownDockerRunner.indexOf("for (const signal of ['INT', 'TERM'])")
+    expect(startupCall).toBeGreaterThan(-1)
+    expect(extractionCall).toBeGreaterThan(startupCall)
+    expect(signalLoop).toBeGreaterThan(startupCall)
+    expect(shutdownDockerRunner).toContain("'/usr/local/bin/run-appimage-desktop-startup-case'")
+  })
+
+  it('preserves startup logs when the launcher exits before its marker', () => {
+    expect(desktopStartupOracle).toContain('signal_process_group TERM || true')
+    expect(desktopStartupOracle).toContain('signal_process_group KILL || true')
+    expect(desktopStartupOracle).toContain('cat "$stdout_log" >&2 2>/dev/null || true')
+    expect(desktopStartupOracle).toContain('cat "$stderr_log" >&2 2>/dev/null || true')
+    expect(desktopStartupOracle).toContain(
+      'FAIL: desktop launcher exited before ${reason} (status=${observed_status})'
+    )
+    expect(desktopStartupOracle).toContain('ORCA_STARTUP_STATE_DIR_CLEANUP=1')
+    expect(desktopStartupOracle).toContain(
+      '[[ "$state_dir" =~ ^/tmp/orca-appimage-startup\\.[^/]+$ ]] || return 0'
+    )
+  })
+
+  it('requires the bound AppImage to be executable before launch and extraction', () => {
+    expect(desktopStartupOracle).toContain(
+      '[[ -x "$appimage" ]] || { echo "FAIL: AppImage is not executable: $appimage" >&2; exit 1; }'
+    )
+    expect(shutdownDockerRunner).toContain(
+      '\'test -r /input/orca.AppImage && test -x /input/orca.AppImage || { echo "FAIL: AppImage bind must be readable and executable" >&2; exit 1; }\''
+    )
+  })
+
+  it('gives the original AppImage enough bounded extraction space', () => {
+    expect(shutdownDockerRunner).toContain("'/tmp:rw,nosuid,nodev,exec,size=1g'")
   })
 
   it('keeps owned Xvfb alive during the documented systemd graceful stop', () => {
@@ -63,4 +170,37 @@ describe('headless serve shutdown PR gate', () => {
     expect(managedXvfbUnits).toHaveLength(1)
     expect(managedXvfbUnits[0]).not.toMatch(/^KillMode=/m)
   })
+
+  it('distinguishes persisted state from live work during a service restart', () => {
+    expect(headlessLinuxProse).toContain(
+      'Every `systemctl stop` or `restart` therefore ends live terminals and agent processes'
+    )
+    expect(headlessLinuxProse).toContain(
+      'These guarantees do not preserve live processes. The service restart kills every terminal and agent in its cgroup'
+    )
+    expect(headlessLinuxProse).toContain(
+      'A separately paired runtime is outside that boundary; local execution and SSH hosts reached through this runtime are not. An affected or unknown omission, missing scope, failed request or lost connection is `unverifiable`'
+    )
+    expect(headlessLinuxGuide).toContain(
+      'sudo -Hu orca /home/orca/.local/bin/orca-ide terminal list --json'
+    )
+    expect(headlessLinuxGuide).not.toContain('sudo -Hu orca orca-ide terminal list --json')
+    expect(headlessLinuxGuide).not.toContain('Two facts make this safe and predictable')
+  })
+
+  it('uses the registered CLI name from ordinary Linux shells', () => {
+    const commandRule =
+      'The registered Linux CLI command is `orca-ide`, not `orca`, to avoid shadowing the GNOME Orca screen reader.'
+    const substitutionRule =
+      "From an ordinary shell outside that service user's managed environment, substitute `orca-ide` for `orca` in commands below."
+    const censusCommand = '`sudo -Hu orca /home/orca/.local/bin/orca-ide terminal list --json`'
+
+    expect(headlessLinuxProse).toContain(commandRule)
+    expect(headlessLinuxProse).toContain(substitutionRule)
+    expect(headlessLinuxProse).toContain(censusCommand)
+    expect(headlessLinuxGuide).toContain('best-effort dispatcher at `$HOME/.local/bin/orca`')
+    expect(headlessLinuxProse.indexOf(substitutionRule)).toBeLessThan(
+      headlessLinuxProse.indexOf(censusCommand)
+    )
+  })
 })
diff --git a/config/scripts/linux-package-maintainer-scripts.test.mjs b/config/scripts/linux-package-maintainer-scripts.test.mjs
new file mode 100644
index 00000000000..f315f2fd2ee
--- /dev/null
+++ b/config/scripts/linux-package-maintainer-scripts.test.mjs
@@ -0,0 +1,18 @@
+import { readFileSync } from 'node:fs'
+import { describe, expect, it } from 'vitest'
+
+describe('Linux package maintainer scripts', () => {
+  it('keeps upgrades from removing the installed CLI', () => {
+    const script = readFileSync(
+      new URL('../../resources/linux/packaging/after-remove.sh', import.meta.url),
+      'utf8'
+    )
+    const unlinkStart = script.indexOf('link="/usr/bin/orca-ide"')
+    const upgradeGuard = script.slice(0, unlinkStart)
+
+    expect(unlinkStart).toBeGreaterThan(-1)
+    expect(upgradeGuard).toContain('case "${1-}" in')
+    expect(upgradeGuard).toContain('0 | remove | purge) ;;')
+    expect(upgradeGuard).toContain('*) exit 0 ;;')
+  })
+})
diff --git a/config/scripts/orcad-operations-restart-safety.test.mjs b/config/scripts/orcad-operations-restart-safety.test.mjs
new file mode 100644
index 00000000000..60f9cb05524
--- /dev/null
+++ b/config/scripts/orcad-operations-restart-safety.test.mjs
@@ -0,0 +1,42 @@
+import { readFileSync } from 'node:fs'
+
+import { describe, expect, it } from 'vitest'
+
+const operationsGuide = readFileSync('docs/reference/orcad-operations.md', 'utf8')
+const operationsProse = operationsGuide.replace(/\s+/g, ' ')
+
+describe('orcad operations restart safety', () => {
+  it('distinguishes PID-scoped preservation from systemd cgroup teardown', () => {
+    expect(operationsProse).toContain(
+      'This makes a PID-scoped update, rollback or restart non-destructive to live work'
+    )
+    expect(operationsProse).toContain(
+      'The successor adopts the current endpoint and routes supported previous protocol versions through legacy adapters'
+    )
+    expect(operationsProse).toContain('`KillMode=mixed` does **not** preserve them')
+    expect(operationsProse).toContain(
+      '`KillMode=process` leaves service-owned processes unmanaged and is not a supported preservation mechanism'
+    )
+  })
+
+  it('fails closed before cgroup-wide maintenance', () => {
+    expect(operationsProse).toContain(
+      'A safe empty census is untruncated, has an explicit `hostScope`, covers every execution host affected by the stop, and lists no terminals on those hosts'
+    )
+    expect(operationsProse).toContain(
+      "Every `omittedHostIds` entry must be explicitly accounted for outside the target service's execution boundary"
+    )
+    expect(operationsProse).toContain(
+      '`sudo -Hu orca /home/orca/.local/bin/orca-ide terminal list --json`'
+    )
+    expect(operationsGuide).not.toContain('sudo -Hu orca orca-ide terminal list --json')
+    expect(operationsProse).toContain(
+      'A separately paired runtime is outside that boundary; local execution and SSH hosts reached through this runtime are not. An affected or unknown omission, missing scope, truncation, a failed request or lost contact makes the result `unverifiable`'
+    )
+    expect(operationsProse).toContain('Orca does not yet provide an atomic census-and-stop fence')
+  })
+
+  it('does not refer to the unavailable shipping design', () => {
+    expect(operationsGuide).not.toContain('docs/design/shipping-orcad.html')
+  })
+})
diff --git a/config/scripts/pr-code-change-scope.mjs b/config/scripts/pr-code-change-scope.mjs
index c296ad9e893..67d4f565afa 100644
--- a/config/scripts/pr-code-change-scope.mjs
+++ b/config/scripts/pr-code-change-scope.mjs
@@ -167,6 +167,7 @@ const SHARED_PACKAGE_PREFIXES = [
   'config/scripts/smoke-packaged',
   'config/scripts/install-electron-package-binary',
   'config/scripts/verify-packaged',
+  'config/scripts/verify-skills-cli-runtime',
   'config/scripts/verify-linux-glibc',
   'config/scripts/run-electron-vite',
   'skills/',
@@ -180,6 +181,12 @@ const SHARED_PACKAGE_PREFIXES = [
 
 const LINUX_PACKAGE_PREFIXES = [
   ...SHARED_PACKAGE_PREFIXES,
+  'config/docker/cli-launch-contract/',
+  'config/docker/headless-pairing/',
+  'config/docker/headless-serve-shutdown/',
+  'config/scripts/run-linux-cli-launch-contract',
+  'config/scripts/run-headless-linux-pairing-docker',
+  'config/scripts/static-appimage-package-contract',
   'native/computer-use-linux/',
   'resources/linux/',
   'config/scripts/run-headless-serve'
diff --git a/config/scripts/pr-code-change-scope.test.mjs b/config/scripts/pr-code-change-scope.test.mjs
index f9411eed956..9a1c9e649b6 100644
--- a/config/scripts/pr-code-change-scope.test.mjs
+++ b/config/scripts/pr-code-change-scope.test.mjs
@@ -181,6 +181,28 @@ describe('per-job path classification', () => {
     expectClassification(['native/computer-use-macos/Package.swift'], {})
   })
 
+  it('runs Linux packaging when an artifact contract changes', () => {
+    for (const file of [
+      'config/docker/cli-launch-contract/Dockerfile',
+      'config/docker/cli-launch-contract/run-cli-case.sh',
+      'config/docker/headless-pairing/Dockerfile',
+      'config/docker/headless-pairing/run-appimage-case.sh',
+      'config/docker/headless-serve-shutdown/Dockerfile',
+      'config/scripts/run-linux-cli-launch-contract-docker.mjs',
+      'config/scripts/run-headless-linux-pairing-docker.mjs',
+      'config/scripts/static-appimage-package-contract.cjs'
+    ]) {
+      expectClassification([file], { package: true })
+    }
+  })
+
+  it('runs both package jobs when the shared skills runtime verifier changes', () => {
+    expectClassification(['config/scripts/verify-skills-cli-runtime.cjs'], {
+      package: true,
+      package_windows: true
+    })
+  })
+
   it('runs shell contracts when live-shell inputs change', () => {
     expectClassification(['src/main/daemon/shell-ready.ts'], {
       shell_contracts: true,
diff --git a/config/scripts/pr-workflow-parallelism.test.mjs b/config/scripts/pr-workflow-parallelism.test.mjs
index c69b04d663f..92d4fe4c26b 100644
--- a/config/scripts/pr-workflow-parallelism.test.mjs
+++ b/config/scripts/pr-workflow-parallelism.test.mjs
@@ -102,8 +102,13 @@ describe('PR workflow parallelism', () => {
         .split(/\s+/)
         .filter((token) => !['apt-get', 'install', 'sudo', ''].includes(token))
         .filter((token) => !token.startsWith('-'))
-    const jobsInstallingPackages = Object.entries(workflow.jobs)
-      .filter(([, job]) => (job.steps ?? []).some((step) => aptPackages(step).length > 0))
+    const requiredShells = ['zsh', 'fish']
+    const jobsInstallingShells = Object.entries(workflow.jobs)
+      .filter(([, job]) =>
+        (job.steps ?? []).some((step) =>
+          aptPackages(step).some((packageName) => requiredShells.includes(packageName))
+        )
+      )
       .map(([name]) => name)
 
     expect(shellStep).toBeDefined()
@@ -111,11 +116,11 @@ describe('PR workflow parallelism', () => {
     expect(shellStep.run.split(/\s+/)).toContain('--maxWorkers=1')
     // Why the whole workflow, not just the general shards: any other lane installing
     // these shells would silently start running the real-shell tests twice.
-    expect(jobsInstallingPackages).toEqual(['shell_contracts'])
+    expect(jobsInstallingShells).toEqual(['shell_contracts'])
     // Why each shell is asserted: the live tests skip themselves when the binary is
     // missing, so a dropped package silently empties this lane instead of failing it.
     const shellPackages = workflow.jobs.shell_contracts.steps.flatMap(aptPackages)
-    for (const shell of ['zsh', 'fish']) {
+    for (const shell of requiredShells) {
       expect(shellPackages).toContain(shell)
     }
     expect(shellInstall.with['native-runtime']).toBe('node')
diff --git a/config/scripts/run-headless-serve-shutdown-docker.mjs b/config/scripts/run-headless-serve-shutdown-docker.mjs
index f3852624854..184713c41a0 100755
--- a/config/scripts/run-headless-serve-shutdown-docker.mjs
+++ b/config/scripts/run-headless-serve-shutdown-docker.mjs
@@ -17,7 +17,7 @@ if (!appImageArg) {
 if (!['app', 'serving-electron'].includes(signalTarget)) {
   fail(`Unsupported --signal-target: ${signalTarget}`)
 }
-if (!['app', 'launcher'].includes(entrypoint)) {
+if (!['app', 'appimage', 'launcher'].includes(entrypoint)) {
   fail(`Unsupported --entrypoint: ${entrypoint}`)
 }
 if (!['pid', 'foreground-process-group'].includes(intDelivery)) {
@@ -54,11 +54,19 @@ try {
     shutdownDockerDirectory
   ])
   docker(['volume', 'create', artifactVolume])
+  runDesktopStartupOracle({ image, appImage, platform })
   docker([
     'run',
     '--rm',
     '--platform',
     platform,
+    '--network',
+    'none',
+    '--read-only',
+    '--cap-drop',
+    'ALL',
+    '--security-opt',
+    'no-new-privileges',
     '--entrypoint',
     'bash',
     '-v',
@@ -68,11 +76,17 @@ try {
     image,
     '-lc',
     [
-      '7z x /input/orca.AppImage -o/artifacts/root -y >/dev/null',
+      'trap \'status=$?; if [ "$status" -ne 0 ]; then cat /artifacts/appimage-help.log /artifacts/appimage-extract.log 2>/dev/null || true; fi; exit "$status"\' EXIT',
+      'test -r /input/orca.AppImage && test -x /input/orca.AppImage || { echo "FAIL: AppImage bind must be readable and executable" >&2; exit 1; }',
+      'timeout --kill-after=5s 15s /input/orca.AppImage --appimage-help > /artifacts/appimage-help.log 2>&1',
+      'cd /artifacts',
+      'timeout --kill-after=10s 120s /input/orca.AppImage --appimage-extract > /artifacts/appimage-extract.log 2>&1',
+      'mv squashfs-root root',
       launcherExecOverlay
         ? "sed -i 's/^ELECTRON_RUN_AS_NODE=1 /export ELECTRON_RUN_AS_NODE=1\\nexec /' /artifacts/root/resources/bin/orca-ide"
         : ':',
-      'chmod -R a+rX /artifacts/root'
+      'chmod -R a+rX /artifacts/root',
+      'rm /artifacts/appimage-help.log /artifacts/appimage-extract.log'
     ].join(' && ')
   ])
 
@@ -108,6 +122,8 @@ try {
         '-e',
         `ORCA_INT_DELIVERY=${intDelivery}`,
         '-v',
+        `${appImage}:/input/orca.AppImage:ro`,
+        '-v',
         `${artifactVolume}:/artifacts:ro`,
         image,
         signal
@@ -129,6 +145,38 @@ try {
   docker(['image', 'rm', image], { allowFailure: true })
 }
 
+function runDesktopStartupOracle({ image, appImage, platform }) {
+  console.log('Running original AppImage desktop startup oracle...')
+  docker([
+    'run',
+    '--rm',
+    '--init',
+    '--platform',
+    platform,
+    '--network',
+    'none',
+    '--read-only',
+    '--tmpfs',
+    '/tmp:rw,nosuid,nodev,exec,size=1g',
+    '--shm-size',
+    '256m',
+    '--cap-drop',
+    'ALL',
+    '--security-opt',
+    'no-new-privileges',
+    '--user',
+    'orca',
+    '--entrypoint',
+    '/usr/local/bin/run-appimage-desktop-startup-case',
+    '-e',
+    'ORCA_STARTUP_DIAGNOSTICS=1',
+    '-v',
+    `${appImage}:/input/orca.AppImage:ro`,
+    image,
+    '/input/orca.AppImage'
+  ])
+}
+
 function valueAfter(flag) {
   const index = args.indexOf(flag)
   return index === -1 ? null : (args[index + 1] ?? null)
diff --git a/config/scripts/run-linux-cli-launch-contract-docker.mjs b/config/scripts/run-linux-cli-launch-contract-docker.mjs
new file mode 100755
index 00000000000..901e0877e85
--- /dev/null
+++ b/config/scripts/run-linux-cli-launch-contract-docker.mjs
@@ -0,0 +1,264 @@
+#!/usr/bin/env node
+// Exercise packaged CLI paths under the hostile Linux conditions from #11609/#12530/#13719/#14229.
+import { execFileSync } from 'node:child_process'
+import { existsSync } from 'node:fs'
+import { resolve } from 'node:path'
+
+const commandArgs = process.argv.slice(2)
+const appImageArg = valueAfter('--appimage')
+const appImage = appImageArg ? resolve(appImageArg) : null
+const platform = valueAfter('--platform')
+const dockerPlatformArgs = platform ? ['--platform', platform] : []
+
+const suffix = `${process.pid}-${Date.now()}`
+const artifactVolume = `orca-cli-contract-artifact-${suffix}`
+const tagArchitecture = platform?.split('/')[1] ?? process.arch
+const tag = `orca-cli-launch-contract:ubuntu-24.04-${tagArchitecture}-${suffix}`
+const base = 'ubuntu@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90'
+const containers = new Set()
+let artifactVolumeCreated = false
+const CASE_TIMEOUT_MS = 90_000
+const BUILD_TIMEOUT_MS = 10 * 60_000
+const STAGING_TIMEOUT_MS = 5 * 60_000
+const DOCKER_TIMEOUT_MS = 2 * 60_000
+const CLEANUP_TIMEOUT_MS = 30_000
+
+// Exact statuses reject silent no-op launches as well as crashes.
+const CASES = [
+  {
+    name: 'nofuse-userns-bundled-help',
+    expectStatus: 0,
+    expectOutput: 'Usage: orca <command>',
+    why: 'The bundled launcher must run with no FUSE, no display, and userns restricted (#11609, #12530).'
+  },
+  {
+    name: 'nofuse-userns-bundled-version',
+    expectStatus: 0,
+    expectOutput: /^\d+\.\d+\.\d+/m,
+    why: 'A deployment must be able to read the installed version without a display (#13719).'
+  },
+  {
+    name: 'nofuse-userns-bundled-status',
+    // No runtime is running; the CLI must report that itself.
+    expectStatus: 1,
+    expectOutput: 'appRunning',
+    why: 'A command that needs the runtime must report its absence, not abort.'
+  },
+  {
+    name: 'nofuse-userns-bundled-skills',
+    expectStatus: 0,
+    // Why: the rendered help header, not a bare 'skills' — the case name contains that word.
+    expectOutput: 'Usage: orca skills',
+    why: 'skills is a pure-text command that must never need Chromium (#14229).'
+  },
+  {
+    name: 'nofuse-userns-bundled-worktree',
+    expectStatus: 1,
+    expectOutput: "Orca is not running. Run 'orca open' first.",
+    why: 'A runtime-dependent command must report the missing runtime, not abort.'
+  },
+  {
+    name: 'nofuse-nosandbox-direct-binary-skills',
+    expectStatus: 0,
+    expectOutput: 'Usage: orca skills',
+    why: 'A direct binary launch that reaches JavaScript must run the command, not boot a GUI (#14229).'
+  },
+  {
+    name: 'nofuse-nosandbox-direct-binary-gui',
+    // A missing display is an expected diagnosis, not a crash.
+    expectStatus: 1,
+    expectOutput: 'needs a usable display server',
+    why: 'A desktop launch with no display must diagnose it instead of dying in uv_close (#13719).'
+  },
+  {
+    name: 'stale-display-nosandbox-direct-binary-gui',
+    expectStatus: 1,
+    expectOutput: 'needs a usable display server',
+    why: 'A stale DISPLAY value must diagnose the unreachable endpoint instead of dying in uv_close (#13719).'
+  }
+]
+
+try {
+  if (!appImage) {
+    fail(
+      'Usage: run-linux-cli-launch-contract-docker.mjs --appimage /path/to/orca-linux.AppImage [--platform linux/amd64|linux/arm64]'
+    )
+  }
+  if (commandArgs.includes('--platform') && !platform) {
+    fail('Missing value for --platform')
+  }
+  if (platform !== null && platform !== 'linux/amd64' && platform !== 'linux/arm64') {
+    fail(`Unsupported --platform: ${platform}`)
+  }
+  if (!existsSync(appImage)) {
+    fail(`AppImage not found: ${appImage}`)
+  }
+  docker(['volume', 'create', artifactVolume], { timeoutMs: DOCKER_TIMEOUT_MS })
+  artifactVolumeCreated = true
+  buildImage()
+  stageArtifacts()
+  runContract()
+  console.log('\nLinux CLI launch contract passed.')
+} catch (error) {
+  console.error(error instanceof Error ? error.message : String(error))
+  process.exitCode = 1
+} finally {
+  for (const container of containers) {
+    docker(['rm', '-f', container], { allowFailure: true, timeoutMs: CLEANUP_TIMEOUT_MS })
+  }
+  if (artifactVolumeCreated) {
+    docker(['volume', 'rm', artifactVolume], {
+      allowFailure: true,
+      timeoutMs: CLEANUP_TIMEOUT_MS
+    })
+  }
+  docker(['image', 'rm', tag], { allowFailure: true, timeoutMs: CLEANUP_TIMEOUT_MS })
+}
+
+function runContract() {
+  const failures = []
+  for (const testCase of CASES) {
+    const output = runCase(testCase.name)
+    const statusMatch = /^RESULT status=(\d+)/m.exec(output)
+    if (!statusMatch) {
+      failures.push(`${testCase.name}: ${firstLine(output)}\n    ${testCase.why}`)
+      console.log(`  FAIL ${testCase.name} — ${firstLine(output)}`)
+      continue
+    }
+    const status = Number(statusMatch[1])
+    // Why: the harness echoes `RESULT status=N case=<name>`, so a case whose name contains the
+    // expected substring would assert against the harness's own line instead of the CLI's output.
+    const commandOutput = output
+      .split('\n')
+      .filter((line) => !/^(?:RESULT|CRASHED|PRECONDITION_FAILED) /.test(line))
+      .join('\n')
+    const matchesOutput =
+      typeof testCase.expectOutput === 'string'
+        ? commandOutput.includes(testCase.expectOutput)
+        : testCase.expectOutput.test(commandOutput)
+    if (status !== testCase.expectStatus || !matchesOutput) {
+      failures.push(
+        `${testCase.name}: expected status ${testCase.expectStatus} and ${testCase.expectOutput}, ` +
+          `got status ${status}\n    ${testCase.why}`
+      )
+      console.log(`  FAIL ${testCase.name} — status ${status}`)
+      continue
+    }
+    console.log(`  ok   ${testCase.name} (status ${status})`)
+  }
+  if (failures.length > 0) {
+    fail(`Linux CLI launch contract failed:\n  - ${failures.join('\n  - ')}`)
+  }
+}
+
+function runCase(caseName) {
+  const container = `orca-cli-contract-${caseName}-${suffix}`
+  containers.add(container)
+  // FUSE and extra capabilities would invalidate the test conditions.
+  return docker(
+    [
+      'run',
+      ...dockerPlatformArgs,
+      '--name',
+      container,
+      '--rm',
+      '-v',
+      `${artifactVolume}:/artifacts`,
+      tag,
+      caseName
+    ],
+    { allowFailure: true, capture: true, timeoutMs: CASE_TIMEOUT_MS }
+  )
+}
+
+function buildImage() {
+  console.log(`Building ${tag}…`)
+  docker(
+    [
+      'build',
+      ...dockerPlatformArgs,
+      '--build-arg',
+      `BASE_IMAGE=${base}`,
+      '-f',
+      'config/docker/cli-launch-contract/Dockerfile',
+      '-t',
+      tag,
+      'config/docker/cli-launch-contract'
+    ],
+    { timeoutMs: BUILD_TIMEOUT_MS }
+  )
+}
+
+// Extract unprivileged so chrome-sandbox is not root-owned setuid.
+function stageArtifacts() {
+  console.log('Staging the AppImage payload…')
+  const container = `orca-cli-contract-stage-${suffix}`
+  containers.add(container)
+  docker(
+    [
+      'run',
+      ...dockerPlatformArgs,
+      '--name',
+      container,
+      '--rm',
+      '-v',
+      `${artifactVolume}:/artifacts`,
+      '-v',
+      `${appImage}:/input/orca-linux.AppImage:ro`,
+      '--entrypoint',
+      'bash',
+      tag,
+      '-lc',
+      [
+        'set -euo pipefail',
+        'cp /input/orca-linux.AppImage /artifacts/orca-linux.AppImage',
+        'chmod +x /artifacts/orca-linux.AppImage',
+        'chown -R orca:orca /artifacts',
+        // Use the AppImage runtime's no-FUSE extraction path.
+        'cd /artifacts && runuser --user orca -- ./orca-linux.AppImage --appimage-extract >/dev/null',
+        'test -x /artifacts/squashfs-root/resources/bin/orca-ide'
+      ].join(' && ')
+    ],
+    { timeoutMs: STAGING_TIMEOUT_MS }
+  )
+}
+
+function docker(args, options = {}) {
+  try {
+    const output = execFileSync('docker', args, {
+      encoding: 'utf8',
+      stdio: options.capture ? ['ignore', 'pipe', 'pipe'] : 'inherit',
+      timeout: options.timeoutMs ?? DOCKER_TIMEOUT_MS,
+      killSignal: 'SIGTERM'
+    })
+    return output ?? ''
+  } catch (error) {
+    const timedOut = error instanceof Error && 'code' in error && error.code === 'ETIMEDOUT'
+    if (timedOut) {
+      const message = `docker ${args.join(' ')} timed out after ${options.timeoutMs ?? DOCKER_TIMEOUT_MS}ms`
+      if (!options.allowFailure) {
+        fail(message)
+      }
+      return message
+    }
+    if (!options.allowFailure) {
+      fail(
+        `docker ${args.join(' ')} failed: ${error instanceof Error ? error.message : String(error)}`
+      )
+    }
+    return `${error?.stdout ?? ''}${error?.stderr ?? ''}`
+  }
+}
+
+function firstLine(value) {
+  return (value ?? '').trim().split('\n')[0] || '(no output)'
+}
+
+function valueAfter(flag) {
+  const index = commandArgs.indexOf(flag)
+  return index === -1 ? null : (commandArgs[index + 1] ?? null)
+}
+
+function fail(message) {
+  throw new Error(message)
+}
diff --git a/config/scripts/static-appimage-package-contract.cjs b/config/scripts/static-appimage-package-contract.cjs
new file mode 100644
index 00000000000..8a11cecf880
--- /dev/null
+++ b/config/scripts/static-appimage-package-contract.cjs
@@ -0,0 +1,260 @@
+const { closeSync, fstatSync, openSync, readSync } = require('node:fs')
+const { basename } = require('node:path')
+
+const EXPECTED_ARCHITECTURE_BY_FILENAME = new Map([
+  ['orca-linux.AppImage', 'x64'],
+  ['orca-linux-arm64.AppImage', 'arm64']
+])
+const APPIMAGE_MAGIC = Buffer.from([0x41, 0x49, 0x02])
+const RUNTIME_SOURCE = Buffer.from('https://github.com/AppImage/type2-runtime')
+const TARGET_ARCHITECTURE_BY_ENUM = new Map([
+  [1, 'x64'],
+  [3, 'arm64']
+])
+const RUNTIME_ARCHITECTURE_BY_MACHINE = new Map([
+  [0x3e, 'x64'],
+  [0xb7, 'arm64']
+])
+const ELF_HEADER_BYTES = 64
+const PROGRAM_HEADER_BYTES = 56
+const DYNAMIC_ENTRY_BYTES = 16
+const MAX_PROGRAM_HEADERS = 128
+const MAX_LOAD_BYTES = 16 * 1024 * 1024
+const MAX_DYNAMIC_BYTES = 1024 * 1024
+
+function verifyStaticAppImagePackage(filePath, targetArch) {
+  const filename = basename(filePath)
+  const filenameArchitecture = EXPECTED_ARCHITECTURE_BY_FILENAME.get(filename)
+  if (!filenameArchitecture) {
+    invalid(
+      filename,
+      `unsupported artifact name; expected ${[...EXPECTED_ARCHITECTURE_BY_FILENAME.keys()].join(' or ')}`
+    )
+  }
+  const targetArchitecture = normalizeTargetArchitecture(targetArch, filename)
+  if (filenameArchitecture !== targetArchitecture) {
+    invalid(
+      filename,
+      `artifact filename targets ${filenameArchitecture}, but electron-builder target is ${targetArchitecture}`
+    )
+  }
+
+  const descriptor = openSync(filePath, 'r')
+  try {
+    const stats = fstatSync(descriptor, { bigint: true })
+    if (process.platform !== 'win32' && (stats.mode & 0o111n) === 0n) {
+      invalid(filename, 'artifact is not executable')
+    }
+    const fileSize = stats.size
+    const header = readRange(
+      descriptor,
+      0n,
+      BigInt(ELF_HEADER_BYTES),
+      fileSize,
+      filename,
+      'ELF header'
+    )
+    const { entry, machine } = verifyElfHeader(header, filename)
+    const runtimeArchitecture = RUNTIME_ARCHITECTURE_BY_MACHINE.get(machine)
+    if (runtimeArchitecture !== targetArchitecture) {
+      invalid(
+        filename,
+        `runtime architecture ${runtimeArchitecture ?? `machine 0x${machine.toString(16)}`} does not match electron-builder target ${targetArchitecture}`
+      )
+    }
+
+    const programHeaderOffset = header.readBigUInt64LE(32)
+    const programHeaderSize = header.readUInt16LE(54)
+    const programHeaderCount = header.readUInt16LE(56)
+    if (programHeaderSize !== PROGRAM_HEADER_BYTES) {
+      invalid(filename, `unexpected ELF program-header size ${programHeaderSize}`)
+    }
+    if (programHeaderCount === 0 || programHeaderCount > MAX_PROGRAM_HEADERS) {
+      invalid(filename, `invalid ELF program-header count ${programHeaderCount}`)
+    }
+
+    const tableSize = BigInt(programHeaderSize * programHeaderCount)
+    const table = readRange(
+      descriptor,
+      programHeaderOffset,
+      tableSize,
+      fileSize,
+      filename,
+      'ELF program-header table'
+    )
+    const segments = parseProgramHeaders(table, programHeaderSize)
+    verifySegments(descriptor, segments, fileSize, filename, entry)
+  } finally {
+    closeSync(descriptor)
+  }
+}
+
+function verifyElfHeader(header, filename) {
+  if (!header.subarray(0, 4).equals(Buffer.from([0x7f, 0x45, 0x4c, 0x46]))) {
+    invalid(filename, 'missing ELF magic')
+  }
+  if (header[4] !== 2 || header[5] !== 1 || header[6] !== 1) {
+    invalid(filename, 'runtime must be ELF64 little-endian version 1')
+  }
+  if (!header.subarray(8, 11).equals(APPIMAGE_MAGIC)) {
+    invalid(filename, 'missing type-2 AppImage marker')
+  }
+  if (header.readUInt16LE(16) !== 3) {
+    invalid(filename, 'runtime must be an ET_DYN static PIE')
+  }
+  const machine = header.readUInt16LE(18)
+  if (!RUNTIME_ARCHITECTURE_BY_MACHINE.has(machine)) {
+    invalid(filename, `unsupported ELF machine 0x${machine.toString(16)}`)
+  }
+  if (header.readUInt32LE(20) !== 1) {
+    invalid(filename, 'runtime has an unsupported ELF version')
+  }
+  if (header.readUInt16LE(52) !== ELF_HEADER_BYTES) {
+    invalid(filename, `unexpected ELF header size ${header.readUInt16LE(52)}`)
+  }
+  return { entry: header.readBigUInt64LE(24), machine }
+}
+
+function parseProgramHeaders(table, entrySize) {
+  const segments = []
+  for (let offset = 0; offset < table.length; offset += entrySize) {
+    segments.push({
+      type: table.readUInt32LE(offset),
+      flags: table.readUInt32LE(offset + 4),
+      offset: table.readBigUInt64LE(offset + 8),
+      virtualAddress: table.readBigUInt64LE(offset + 16),
+      fileSize: table.readBigUInt64LE(offset + 32),
+      memorySize: table.readBigUInt64LE(offset + 40)
+    })
+  }
+  return segments
+}
+
+function verifySegments(descriptor, segments, fileSize, filename, entry) {
+  if (segments.some((segment) => segment.type === 3)) {
+    invalid(filename, 'runtime contains PT_INTERP')
+  }
+
+  const loadSegments = segments.filter((segment) => segment.type === 1)
+  const totalLoadBytes = loadSegments.reduce((total, segment) => total + segment.fileSize, 0n)
+  if (loadSegments.length === 0 || totalLoadBytes > BigInt(MAX_LOAD_BYTES)) {
+    invalid(filename, `invalid or oversized PT_LOAD data (${totalLoadBytes} bytes)`)
+  }
+  if (
+    !loadSegments.some(
+      (segment) =>
+        segment.flags & 1 &&
+        entry >= segment.virtualAddress &&
+        entry - segment.virtualAddress < segment.memorySize
+    )
+  ) {
+    invalid(filename, 'ELF entry point is outside an executable PT_LOAD segment')
+  }
+  let identifiesStaticRuntime = false
+  for (const segment of loadSegments) {
+    verifyFileBackedSegment(segment, fileSize, filename, 'PT_LOAD')
+    const data = readRange(
+      descriptor,
+      segment.offset,
+      segment.fileSize,
+      fileSize,
+      filename,
+      'PT_LOAD data'
+    )
+    identifiesStaticRuntime ||= data.includes(RUNTIME_SOURCE)
+  }
+  if (!identifiesStaticRuntime) {
+    invalid(filename, `runtime does not identify ${RUNTIME_SOURCE.toString()}`)
+  }
+
+  for (const segment of segments.filter((entry) => entry.type === 2)) {
+    verifyDynamicSegment(descriptor, segment, fileSize, filename)
+  }
+}
+
+function normalizeTargetArchitecture(targetArch, filename) {
+  const architecture =
+    typeof targetArch === 'number' ? TARGET_ARCHITECTURE_BY_ENUM.get(targetArch) : targetArch
+  if (architecture !== 'x64' && architecture !== 'arm64') {
+    invalid(filename, `unsupported electron-builder target architecture ${String(targetArch)}`)
+  }
+  return architecture
+}
+
+function verifyFileBackedSegment(segment, fileSize, filename, label) {
+  if (segment.memorySize < segment.fileSize) {
+    invalid(filename, `${label} memory size is smaller than its file size`)
+  }
+  verifyRange(segment.offset, segment.fileSize, fileSize, filename, label)
+}
+
+function verifyDynamicSegment(descriptor, segment, fileSize, filename) {
+  verifyFileBackedSegment(segment, fileSize, filename, 'PT_DYNAMIC')
+  if (
+    segment.fileSize === 0n ||
+    segment.fileSize > BigInt(MAX_DYNAMIC_BYTES) ||
+    segment.fileSize % BigInt(DYNAMIC_ENTRY_BYTES) !== 0n
+  ) {
+    invalid(filename, `invalid PT_DYNAMIC size ${segment.fileSize}`)
+  }
+  const dynamic = readRange(
+    descriptor,
+    segment.offset,
+    segment.fileSize,
+    fileSize,
+    filename,
+    'PT_DYNAMIC data'
+  )
+  let terminated = false
+  for (let offset = 0; offset < dynamic.length; offset += DYNAMIC_ENTRY_BYTES) {
+    const tag = dynamic.readBigInt64LE(offset)
+    if (tag === 0n) {
+      terminated = true
+      break
+    }
+    if (tag === 1n) {
+      invalid(filename, 'runtime contains a DT_NEEDED dependency')
+    }
+  }
+  if (!terminated) {
+    invalid(filename, 'PT_DYNAMIC is missing DT_NULL')
+  }
+}
+
+function readRange(descriptor, offset, size, fileSize, filename, label) {
+  verifyRange(offset, size, fileSize, filename, label)
+  const buffer = Buffer.alloc(Number(size))
+  let bytesRead = 0
+  while (bytesRead < buffer.length) {
+    const count = readSync(
+      descriptor,
+      buffer,
+      bytesRead,
+      buffer.length - bytesRead,
+      Number(offset) + bytesRead
+    )
+    if (count === 0) {
+      throw new Error(`Unable to read complete ${label}`)
+    }
+    bytesRead += count
+  }
+  return buffer
+}
+
+function verifyRange(offset, size, fileSize, filename, label) {
+  const maxSafeOffset = BigInt(Number.MAX_SAFE_INTEGER)
+  if (
+    offset > fileSize ||
+    size > fileSize - offset ||
+    offset > maxSafeOffset ||
+    size > maxSafeOffset - offset
+  ) {
+    invalid(filename, `${label} is outside the artifact`)
+  }
+}
+
+function invalid(filename, reason) {
+  throw new Error(`Invalid static AppImage ${filename}: ${reason}`)
+}
+
+module.exports = { verifyStaticAppImagePackage }
diff --git a/config/scripts/static-appimage-package-contract.test.mjs b/config/scripts/static-appimage-package-contract.test.mjs
new file mode 100644
index 00000000000..2addc675482
--- /dev/null
+++ b/config/scripts/static-appimage-package-contract.test.mjs
@@ -0,0 +1,225 @@
+import { chmod, mkdtemp, rm, writeFile } from 'node:fs/promises'
+import { createRequire } from 'node:module'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+const require = createRequire(import.meta.url)
+const { verifyStaticAppImagePackage } = require('./static-appimage-package-contract.cjs')
+
+const RUNTIME_SOURCE = Buffer.from('https://github.com/AppImage/type2-runtime')
+const LOAD_HEADER = 64
+const DYNAMIC_HEADER = 120
+const DYNAMIC_OFFSET = 320
+const FIXTURE_BYTES = 384
+
+describe('static AppImage package contract', () => {
+  it.each([
+    ['orca-linux.AppImage', 0x3e, 1],
+    ['orca-linux-arm64.AppImage', 0xb7, 'arm64']
+  ])('accepts a dependency-free type-2 %s runtime', async (filename, machine, targetArch) => {
+    await withFixture(filename, createRuntime({ machine }), (path) => {
+      expect(() => verifyStaticAppImagePackage(path, targetArch)).not.toThrow()
+    })
+  })
+
+  it.each([
+    ['generic filename for an arm64 runtime and target', 'orca-linux.AppImage', 0xb7, 3],
+    ['arm64 filename for an x64 runtime and target', 'orca-linux-arm64.AppImage', 0x3e, 1],
+    ['generic x64 runtime for an arm64 target', 'orca-linux.AppImage', 0x3e, 3],
+    ['generic arm64 runtime for an x64 target', 'orca-linux.AppImage', 0xb7, 1],
+    ['arm64 artifact filename for an x64 target', 'orca-linux-arm64.AppImage', 0xb7, 1],
+    ['x64 runtime under an arm64 artifact filename', 'orca-linux-arm64.AppImage', 0x3e, 3]
+  ])('rejects %s', async (_label, filename, machine, targetArch) => {
+    await withFixture(filename, createRuntime({ machine }), (path) => {
+      expect(() => verifyStaticAppImagePackage(path, targetArch)).toThrow(/architecture|target/)
+    })
+  })
+
+  it.each([undefined, 0, 'ia32'])(
+    'rejects unsupported target architecture %s',
+    async (targetArch) => {
+      await withFixture('orca-linux.AppImage', createRuntime(), (path) => {
+        expect(() => verifyStaticAppImagePackage(path, targetArch)).toThrow(/target architecture/)
+      })
+    }
+  )
+
+  it('accepts PT_DYNAMIC relocation metadata without dependencies', async () => {
+    const runtime = createRuntime()
+    runtime.writeBigInt64LE(7n, DYNAMIC_OFFSET)
+    await withFixture('orca-linux.AppImage', runtime, (path) => {
+      expect(() => verifyStaticAppImagePackage(path, 1)).not.toThrow()
+    })
+  })
+
+  it('does not scan the appended AppImage payload as outer ELF data', async () => {
+    const payload = Buffer.concat([RUNTIME_SOURCE, Buffer.alloc(16, 1)])
+    await withFixture('orca-linux.AppImage', Buffer.concat([createRuntime(), payload]), (path) => {
+      expect(() => verifyStaticAppImagePackage(path, 1)).not.toThrow()
+    })
+
+    const unidentifiedRuntime = createRuntime()
+    unidentifiedRuntime.fill(0, 192, 192 + RUNTIME_SOURCE.length)
+    await withFixture(
+      'orca-linux.AppImage',
+      Buffer.concat([unidentifiedRuntime, payload]),
+      (path) => {
+        expect(() => verifyStaticAppImagePackage(path, 1)).toThrow(/does not identify/)
+      }
+    )
+  })
+
+  it('rejects artifact names outside the release contract before reading them', () => {
+    expect(() => verifyStaticAppImagePackage('/missing/orca-preview.AppImage')).toThrow(
+      'unsupported artifact name'
+    )
+  })
+
+  it.skipIf(process.platform === 'win32')(
+    'rejects a readable but non-executable AppImage',
+    async () => {
+      await withFixture(
+        'orca-linux.AppImage',
+        createRuntime(),
+        (path) => {
+          expect(() => verifyStaticAppImagePackage(path, 1)).toThrow(/not executable/)
+        },
+        { mode: 0o644 }
+      )
+    }
+  )
+
+  it.each([
+    [
+      'non-ELF64 runtimes',
+      (runtime) => {
+        runtime[4] = 1
+      },
+      /ELF64 little-endian/
+    ],
+    [
+      'unsupported ELF versions',
+      (runtime) => runtime.writeUInt32LE(2, 20),
+      /unsupported ELF version/
+    ],
+    [
+      'non-type-2 AppImages',
+      (runtime) => {
+        runtime[10] = 1
+      },
+      /type-2 AppImage marker/
+    ],
+    ['non-PIE runtimes', (runtime) => runtime.writeUInt16LE(2, 16), /ET_DYN static PIE/],
+    [
+      'unsupported architectures',
+      (runtime) => runtime.writeUInt16LE(3, 18),
+      /unsupported ELF machine/
+    ],
+    ['dynamic loaders', (runtime) => runtime.writeUInt32LE(3, DYNAMIC_HEADER), /PT_INTERP/],
+    [
+      'shared-library dependencies',
+      (runtime) => runtime.writeBigInt64LE(1n, DYNAMIC_OFFSET),
+      /DT_NEEDED/
+    ],
+    [
+      'unidentified runtimes',
+      (runtime) => runtime.fill(0, 192, 192 + RUNTIME_SOURCE.length),
+      /does not identify/
+    ],
+    [
+      'out-of-bounds load segments',
+      (runtime) => {
+        runtime.writeBigUInt64LE(1000n, LOAD_HEADER + 32)
+        runtime.writeBigUInt64LE(1000n, LOAD_HEADER + 40)
+      },
+      /outside the artifact/
+    ],
+    [
+      'oversized load claims',
+      (runtime) => {
+        runtime.writeBigUInt64LE(16n * 1024n * 1024n + 1n, LOAD_HEADER + 32)
+        runtime.writeBigUInt64LE(16n * 1024n * 1024n + 1n, LOAD_HEADER + 40)
+      },
+      /oversized PT_LOAD/
+    ],
+    [
+      'non-executable entry segments',
+      (runtime) => runtime.writeUInt32LE(4, LOAD_HEADER + 4),
+      /executable PT_LOAD/
+    ],
+    [
+      'entry points outside load segments',
+      (runtime) => runtime.writeBigUInt64LE(4096n, 24),
+      /entry point/
+    ]
+  ])('rejects %s', async (_label, mutate, expected) => {
+    const runtime = createRuntime()
+    mutate(runtime)
+    await withFixture('orca-linux.AppImage', runtime, (path) => {
+      expect(() => verifyStaticAppImagePackage(path, 1)).toThrow(expected)
+    })
+  })
+})
+
+function createRuntime({ machine = 0x3e } = {}) {
+  const runtime = Buffer.alloc(FIXTURE_BYTES)
+  Buffer.from([0x7f, 0x45, 0x4c, 0x46, 2, 1, 1]).copy(runtime)
+  Buffer.from([0x41, 0x49, 0x02]).copy(runtime, 8)
+  runtime.writeUInt16LE(3, 16)
+  runtime.writeUInt16LE(machine, 18)
+  runtime.writeUInt32LE(1, 20)
+  runtime.writeBigUInt64LE(0n, 24)
+  runtime.writeBigUInt64LE(64n, 32)
+  runtime.writeUInt16LE(64, 52)
+  runtime.writeUInt16LE(56, 54)
+  runtime.writeUInt16LE(2, 56)
+
+  writeProgramHeader(runtime, LOAD_HEADER, {
+    type: 1,
+    flags: 5,
+    offset: 0,
+    virtualAddress: 0,
+    size: FIXTURE_BYTES,
+    memorySize: FIXTURE_BYTES,
+    alignment: 4096
+  })
+  writeProgramHeader(runtime, DYNAMIC_HEADER, {
+    type: 2,
+    flags: 4,
+    offset: DYNAMIC_OFFSET,
+    virtualAddress: DYNAMIC_OFFSET,
+    size: 32,
+    memorySize: 32,
+    alignment: 8
+  })
+  RUNTIME_SOURCE.copy(runtime, 192)
+  return runtime
+}
+
+function writeProgramHeader(
+  runtime,
+  headerOffset,
+  { type, flags, offset, virtualAddress, size, memorySize = size, alignment }
+) {
+  runtime.writeUInt32LE(type, headerOffset)
+  runtime.writeUInt32LE(flags, headerOffset + 4)
+  runtime.writeBigUInt64LE(BigInt(offset), headerOffset + 8)
+  runtime.writeBigUInt64LE(BigInt(virtualAddress), headerOffset + 16)
+  runtime.writeBigUInt64LE(BigInt(offset), headerOffset + 24)
+  runtime.writeBigUInt64LE(BigInt(size), headerOffset + 32)
+  runtime.writeBigUInt64LE(BigInt(memorySize), headerOffset + 40)
+  runtime.writeBigUInt64LE(BigInt(alignment), headerOffset + 48)
+}
+
+async function withFixture(filename, contents, check, { mode = 0o755 } = {}) {
+  const root = await mkdtemp(join(tmpdir(), 'orca-static-appimage-contract-'))
+  try {
+    const path = join(root, filename)
+    await writeFile(path, contents)
+    await chmod(path, mode)
+    await check(path)
+  } finally {
+    await rm(root, { recursive: true, force: true })
+  }
+}
diff --git a/config/scripts/verify-cli-bin.mjs b/config/scripts/verify-cli-bin.mjs
index a9fa71ce2e7..cdc56401262 100755
--- a/config/scripts/verify-cli-bin.mjs
+++ b/config/scripts/verify-cli-bin.mjs
@@ -5,15 +5,14 @@ import { chmodSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'nod
 import path from 'node:path'
 import { pathToFileURL } from 'node:url'
 
-const OUT_COMMONJS_PACKAGE_JSON = `${JSON.stringify(
-  {
-    name: 'orca-compiled-output',
-    type: 'commonjs',
-    private: true
-  },
-  null,
-  2
-)}\n`
+// Electron packaging restamps the channel-specific version after compilation.
+function buildOutPackageJson(version) {
+  return `${JSON.stringify(
+    { name: 'orca-compiled-output', type: 'commonjs', private: true, version },
+    null,
+    2
+  )}\n`
+}
 
 /**
  * Verifies the published CLI entrypoint and the module-type boundary for the
@@ -49,7 +48,7 @@ export function verifyPackageCliBin({
   const outPackageJsonPath = path.join(projectDir, 'out', 'package.json')
   if (fixPackageJson) {
     mkdirSync(path.dirname(outPackageJsonPath), { recursive: true })
-    writeFileSync(outPackageJsonPath, OUT_COMMONJS_PACKAGE_JSON, 'utf8')
+    writeFileSync(outPackageJsonPath, buildOutPackageJson(packageJson.version), 'utf8')
   }
   let outPackageJson
   try {
diff --git a/config/scripts/verify-linux-glibc-floor.cjs b/config/scripts/verify-linux-glibc-floor.cjs
index 55ec8ca7724..3a138ed894b 100644
--- a/config/scripts/verify-linux-glibc-floor.cjs
+++ b/config/scripts/verify-linux-glibc-floor.cjs
@@ -164,6 +164,78 @@ function findMissingProviderDeps(importedSymbols, neededLibraries) {
   return missing
 }
 
+// ELF e_machine values for the Linux slices we package. Names match electron-builder's Arch enum.
+const ELF_MACHINE_BY_ARCH = Object.freeze({ x64: 0x3e, arm64: 0xb7 })
+const ARCH_BY_ELF_MACHINE = Object.freeze({ 0x3e: 'x64', 0xb7: 'arm64' })
+
+/**
+ * ELF `e_machine`, or null when the file is not a readable little-endian ELF.
+ *
+ * Why this is checked at all: cross-building an arm64 package on an x64 host can silently pack an
+ * x86-64 `pty.node` into the arm64 slice — the rebuild logs a forced arm64 rebuild and still ships
+ * the host's binary. Every other gate here inspects symbol versions, which are perfectly valid on
+ * the wrong architecture, so nothing noticed. Observed on a Raspberry Pi 5: the app loaded, then
+ * failed with "Failed to load native module: pty.node".
+ */
+function readElfMachine(filePath) {
+  let fd
+  try {
+    fd = openSync(filePath, 'r')
+    const header = Buffer.alloc(20)
+    if (readSync(fd, header, 0, 20, 0) !== 20) {
+      return null
+    }
+    // EI_DATA (offset 5) must be ELFDATA2LSB for a little-endian e_machine read.
+    if (header[5] !== 1) {
+      return null
+    }
+    return header.readUInt16LE(18)
+  } catch {
+    return null
+  } finally {
+    if (fd !== undefined) {
+      closeSync(fd)
+    }
+  }
+}
+
+// Arch tokens that appear in vendored per-architecture package/directory names.
+const ARCH_TOKEN_PATTERN = /(?:^|[^a-z0-9])(arm64|aarch64|x64|x86_64)(?:[^a-z0-9]|$)/i
+const ARCH_BY_TOKEN = Object.freeze({ arm64: 'arm64', aarch64: 'arm64', x64: 'x64', x86_64: 'x64' })
+
+/**
+ * The architecture a path advertises, or null when it advertises none.
+ *
+ * Why this matters: some dependencies ship every architecture and let their loader pick
+ * (`@parcel/watcher-linux-arm64-glibc/watcher.node` is arm64 on purpose inside an x64 build). Those
+ * must be judged against the arch their own path declares, not against the slice.
+ */
+function declaredArchFromPath(filePath) {
+  const match = ARCH_TOKEN_PATTERN.exec(filePath)
+  return match ? ARCH_BY_TOKEN[match[1].toLowerCase()] : null
+}
+
+function findArchViolation(filePath, targetArch) {
+  // A path that names an architecture is judged against that name, so a per-arch vendored package
+  // is fine while `bin/linux-arm64-.../node-pty.node` holding an x86-64 binary is still caught.
+  const declared = declaredArchFromPath(filePath)
+  const expectedArch = declared ?? targetArch
+  const expected = ELF_MACHINE_BY_ARCH[expectedArch]
+  if (expected === undefined) {
+    return null
+  }
+  const machine = readElfMachine(filePath)
+  if (machine === null || machine === expected) {
+    return null
+  }
+  return {
+    machine,
+    actual: ARCH_BY_ELF_MACHINE[machine] ?? `0x${machine.toString(16)}`,
+    expectedArch,
+    declared: declared !== null
+  }
+}
+
 function isElfFile(filePath) {
   let fd
   try {
@@ -312,6 +384,7 @@ function readImportedSymbols(filePath, objdumpPath) {
  */
 function verifyLinuxGlibcFloor(rootDir, options = {}) {
   const binaries = collectNativeBinaries(rootDir)
+  const targetArch = options.targetArch
   if (binaries.length === 0) {
     console.log(`[verify-linux-glibc-floor] OK — no bundled native binaries under ${rootDir}`)
     return
@@ -327,6 +400,28 @@ function verifyLinuxGlibcFloor(rootDir, options = {}) {
     )
   }
 
+  // Why before the glibc pass: a wrong-architecture binary's symbol versions are valid but
+  // meaningless, so reporting a floor violation for it would send the reader down the wrong path.
+  const archOffenders = binaries
+    .map((filePath) => ({ filePath, violation: findArchViolation(filePath, targetArch) }))
+    .filter(({ violation }) => violation !== null)
+  if (archOffenders.length > 0) {
+    const detail = archOffenders
+      .map(
+        ({ filePath, violation }) =>
+          `  ${relative(rootDir, filePath) || filePath} is ${violation.actual}, expected ` +
+          `${violation.expectedArch}${violation.declared ? ' (from its own path)' : ''}`
+      )
+      .join('\n')
+    throw new Error(
+      `[verify-linux-glibc-floor] ${archOffenders.length} bundled native binar` +
+        `${archOffenders.length === 1 ? 'y is' : 'ies are'} built for the wrong architecture ` +
+        `(target ${targetArch}), so the app will fail to load them at runtime:\n${detail}\n` +
+        'Cross-building a Linux slice can pack the host architecture despite a forced rebuild; ' +
+        'build this slice on a native runner.'
+    )
+  }
+
   const offenders = []
   for (const filePath of binaries) {
     const { versionNeeds, neededLibraries } = readDynamicInfo(filePath, objdumpPath)
@@ -375,6 +470,10 @@ function verifyLinuxGlibcFloor(rootDir, options = {}) {
 
 module.exports = {
   MIN_GLIBC,
+  ELF_MACHINE_BY_ARCH,
+  readElfMachine,
+  declaredArchFromPath,
+  findArchViolation,
   VERSION_FLOORS,
   FLOOR_LABEL,
   RELOCATED_SYMBOL_PROVIDERS,
diff --git a/config/scripts/verify-linux-glibc-floor.test.mjs b/config/scripts/verify-linux-glibc-floor.test.mjs
index 603e4e85c00..d8d82165053 100644
--- a/config/scripts/verify-linux-glibc-floor.test.mjs
+++ b/config/scripts/verify-linux-glibc-floor.test.mjs
@@ -6,6 +6,10 @@ import { describe, expect, it } from 'vitest'
 
 const require = createRequire(import.meta.url)
 const {
+  readElfMachine,
+  declaredArchFromPath,
+  findArchViolation,
+  ELF_MACHINE_BY_ARCH,
   parseGlibcVersion,
   compareGlibcVersions,
   parseVersionNeeds,
@@ -321,3 +325,86 @@ describe.skipIf(process.platform === 'win32')('verifyLinuxGlibcFloor', () => {
     }
   })
 })
+
+/** Minimal little-endian 64-bit ELF header with the given e_machine. */
+function elfHeader(machine) {
+  const header = Buffer.alloc(64)
+  header.write('\x7fELF', 0, 'latin1')
+  header[4] = 2 // ELFCLASS64
+  header[5] = 1 // ELFDATA2LSB
+  header[6] = 1 // EV_CURRENT
+  header.writeUInt16LE(3, 16) // ET_DYN
+  header.writeUInt16LE(machine, 18)
+  return header
+}
+
+describe('bundled native binary architecture', () => {
+  it('reads e_machine from a little-endian ELF', async () => {
+    const dir = await mkdtemp(join(tmpdir(), 'orca-elf-arch-'))
+    const file = join(dir, 'pty.node')
+    await writeFile(file, elfHeader(ELF_MACHINE_BY_ARCH.arm64))
+    expect(readElfMachine(file)).toBe(ELF_MACHINE_BY_ARCH.arm64)
+    await rm(dir, { recursive: true, force: true })
+  })
+
+  // The observed failure: cross-building arm64 on an x64 host packed an x86-64 pty.node, whose
+  // symbol versions are valid, so every other gate here passed it.
+  // Real CI hit: @parcel/watcher ships every architecture and its loader picks the match, so the
+  // arm64 copy is present in an x64 build on purpose.
+  it('accepts a per-arch vendored package that matches its own path', async () => {
+    const dir = await mkdtemp(join(tmpdir(), 'orca-elf-arch-'))
+    const pkg = join(dir, '@parcel', 'watcher-linux-arm64-glibc')
+    await mkdir(pkg, { recursive: true })
+    const file = join(pkg, 'watcher.node')
+    await writeFile(file, elfHeader(ELF_MACHINE_BY_ARCH.arm64))
+    expect(declaredArchFromPath(file)).toBe('arm64')
+    expect(findArchViolation(file, 'x64')).toBeNull()
+    await rm(dir, { recursive: true, force: true })
+  })
+
+  // But a path that names an arch must actually hold it — this is the Pi 5 failure.
+  it('flags a binary that contradicts the architecture its own path names', async () => {
+    const dir = await mkdtemp(join(tmpdir(), 'orca-elf-arch-'))
+    const nested = join(dir, 'bin', 'linux-arm64-148')
+    await mkdir(nested, { recursive: true })
+    const file = join(nested, 'node-pty.node')
+    await writeFile(file, elfHeader(ELF_MACHINE_BY_ARCH.x64))
+    expect(findArchViolation(file, 'arm64')).toMatchObject({ actual: 'x64', expectedArch: 'arm64' })
+    // Still caught even when the slice being built is x64.
+    expect(findArchViolation(file, 'x64')).toMatchObject({ actual: 'x64', expectedArch: 'arm64' })
+    await rm(dir, { recursive: true, force: true })
+  })
+
+  it('flags an x86-64 binary in an arm64 slice', async () => {
+    const dir = await mkdtemp(join(tmpdir(), 'orca-elf-arch-'))
+    const file = join(dir, 'pty.node')
+    await writeFile(file, elfHeader(ELF_MACHINE_BY_ARCH.x64))
+    expect(findArchViolation(file, 'arm64')).toMatchObject({ actual: 'x64' })
+    await rm(dir, { recursive: true, force: true })
+  })
+
+  it('accepts a matching architecture', async () => {
+    const dir = await mkdtemp(join(tmpdir(), 'orca-elf-arch-'))
+    const file = join(dir, 'pty.node')
+    await writeFile(file, elfHeader(ELF_MACHINE_BY_ARCH.x64))
+    expect(findArchViolation(file, 'x64')).toBeNull()
+    await rm(dir, { recursive: true, force: true })
+  })
+
+  it('stays silent when no target architecture is supplied', async () => {
+    const dir = await mkdtemp(join(tmpdir(), 'orca-elf-arch-'))
+    const file = join(dir, 'pty.node')
+    await writeFile(file, elfHeader(ELF_MACHINE_BY_ARCH.x64))
+    expect(findArchViolation(file, undefined)).toBeNull()
+    await rm(dir, { recursive: true, force: true })
+  })
+
+  it('ignores a file that is not a readable little-endian ELF', async () => {
+    const dir = await mkdtemp(join(tmpdir(), 'orca-elf-arch-'))
+    const file = join(dir, 'not-elf.node')
+    await writeFile(file, Buffer.from('not an elf at all'))
+    expect(readElfMachine(file)).toBeNull()
+    expect(findArchViolation(file, 'arm64')).toBeNull()
+    await rm(dir, { recursive: true, force: true })
+  })
+})
diff --git a/config/scripts/windows-cmd-shim-spawn-boundary.test.mjs b/config/scripts/windows-cmd-shim-spawn-boundary.test.mjs
index 0c192382d7a..a8c2cb3f4e7 100644
--- a/config/scripts/windows-cmd-shim-spawn-boundary.test.mjs
+++ b/config/scripts/windows-cmd-shim-spawn-boundary.test.mjs
@@ -47,8 +47,10 @@ const WINDOWS_SHIM_SPAWN_ALLOWLIST = [
   'config/scripts/ensure-native-runtime.test.mjs',
   'config/scripts/live-remote-freeze-rpc.mjs',
   'config/scripts/remote-agent-session-authority-repro.mjs',
-  // macOS-only build path; the win32 branch is dead code there.
+  // Platform-local build paths; the win32 branch is dead code on both.
   'config/scripts/build-mac-local.mjs',
+  'config/scripts/build-linux-local.mjs',
+  'config/scripts/build-linux-local.test.mjs',
   // Benchmarks, repros and e2e drivers — developer-invoked or Linux-only in CI.
   'config/scripts/build-orcad-prebuilds.mjs',
   'config/scripts/run-ai-vault-typing-bench.mjs',
diff --git a/config/tsconfig.cli.json b/config/tsconfig.cli.json
index 93d556602f8..1b9600188f2 100644
--- a/config/tsconfig.cli.json
+++ b/config/tsconfig.cli.json
@@ -127,6 +127,8 @@
     // Why: serve-electron-flag-parity.test.ts checks the Electron-side serve argv rewrite against this
     // project's serve spec; the module has no imports, so listing it pulls in nothing else.
     "../src/main/startup/serve-mode-argv.ts",
+    // The parity test keeps this import-free list aligned with COMMAND_SPECS.
+    "../src/main/startup/cli-command-names.ts",
     "../src/main/runtime/runtime-metadata.ts",
     "../src/main/sqlite/sync-database.ts",
     "../src/main/win32-utils.ts"
diff --git a/docs/reference/headless-linux-server.md b/docs/reference/headless-linux-server.md
index 3d7db834e8e..7368678c2e4 100644
--- a/docs/reference/headless-linux-server.md
+++ b/docs/reference/headless-linux-server.md
@@ -8,7 +8,11 @@ Linux, the packaged AppImage still needs the libraries that Electron expects at
 startup. Current Orca builds start Xvfb automatically for `orca serve` when no
 `DISPLAY` is set, but Xvfb must be installed first. A separate D-Bus session is
 not required. When `DISPLAY` is set, Orca uses that display instead of starting
-a competing Xvfb process.
+a competing Xvfb process, provided the display is usable: its socket must exist,
+and if an X lock file is present it must name a running process. A `DISPLAY`
+whose lock names a dead process is refused rather than replaced, and `orca serve`
+exits — unset `DISPLAY` to let Orca start its own Xvfb. A socket published with
+no lock at all (a container bind-mounting `/tmp/.X11-unix`, or WSLg) is accepted.
 
 The supported deployment matrix covers Ubuntu 20.04, 22.04, and 24.04 and
 current Debian stable — anything with glibc 2.31 or newer (see
@@ -229,6 +233,10 @@ clients should use.
 `KillMode=mixed` sends the graceful stop signal only to Orca's main process,
 then retains systemd's cgroup-wide `SIGKILL` fallback if shutdown times out.
 This lets Orca keep its owned Xvfb alive until Electron disconnects cleanly.
+It does **not** preserve the detached terminal daemon: the daemon and its PTYs
+remain in `orca-serve.service`'s cgroup and are killed when the stop completes.
+Every `systemctl stop` or `restart` therefore ends live terminals and agent
+processes, even though their persisted layout and terminal history remain.
 
 Exit status `3` means another process already owns this userData profile, so
 `RestartPreventExitStatus=3` stops the unit instead of retrying a launch that
@@ -324,6 +332,14 @@ sudo systemctl enable --now orca-xvfb.service orca-serve.service
 
 ## CLI Install Note
 
+The registered Linux CLI command is `orca-ide`, not `orca`, to avoid shadowing
+the GNOME Orca screen reader. Desktop-managed terminals receive a
+terminal-scoped bare-`orca` shim. A packaged headless `orca serve` also makes a
+best-effort dispatcher at `$HOME/.local/bin/orca` for the service user's own
+shell, so the Claude Teams launcher can resolve its bare command; it does not
+replace another user's `orca`. From an ordinary shell outside that service
+user's managed environment, substitute `orca-ide` for `orca` in commands below.
+
 On a headless host, you do not need to open the desktop UI just to run the
 server. Invoke the AppImage directly:
 
@@ -376,7 +392,7 @@ at all — the built-in updater only runs in the desktop GUI, and no paired mobi
 or web client can trigger it remotely. Upgrading is always a deliberate step:
 replace the AppImage and restart the service.
 
-Two facts make this safe and predictable:
+Two facts make the persisted-state transition predictable:
 
 - **State lives in the service user's home, not next to the binary.** Persisted
   data is under `/home/orca/.config/` (Orca uses both an `orca` and an `Orca`
@@ -388,15 +404,37 @@ Two facts make this safe and predictable:
   state into the current schema and writes it back in the current shape, so a
   forward upgrade needs no manual data step.
 
+These guarantees do not preserve live processes. The service restart kills
+every terminal and agent in its cgroup; an agent conversation may be resumable,
+but its current process and any in-flight command are gone.
+
+Immediately before stopping the service, obtain a fresh census as the service's
+OS account and home. Use the installer's absolute launcher path so `sudo`'s
+`secure_path` cannot hide a per-user registration:
+`sudo -Hu orca /home/orca/.local/bin/orca-ide terminal list --json`.
+Replace both `orca` and `/home/orca` with the service account and home used by
+your unit; for an extracted deployment, use its absolute `resources/bin/orca-ide`
+launcher instead. Proceed only when the result is
+untruncated, has an explicit `hostScope`, covers every execution host affected
+by this service stop, and lists no terminals on those hosts. Every
+`omittedHostIds` entry must be explicitly accounted for outside this service's
+execution boundary. A separately paired runtime is outside that boundary; local
+execution and SSH hosts reached through this runtime are not. An affected or
+unknown omission, missing scope, failed request or lost connection is
+`unverifiable`, so defer the restart. Do not allow new work between that census
+and the stop; Orca does not yet provide an atomic census-and-stop fence.
+
 Rolling back is the case that needs care — see [Roll back](#roll-back).
 
 ### Record the version you deploy
 
-Orca has no headless version command: there is no `--version` flag or `version`
-subcommand, and `orca serve` prints only its endpoint. Choose a release tag
-explicitly instead of following the `latest` URL, and record it next to the
-binary so upgrades are auditable. The steps below keep that record in
-`/opt/orca/VERSION`.
+The bundled CLI launcher prints the Orca build with `orca-ide --version`. For an
+extracted deployment, that launcher is
+`squashfs-root/resources/bin/orca-ide`; deb/rpm installs and CLI registration put
+it on `PATH`. Do not use `orca-linux.AppImage --version` for this audit because
+Electron owns the direct binary's version flags and may report its own runtime
+version. For an AppImage service, choose a release tag explicitly and record it
+next to the binary. The steps below keep that record in `/opt/orca/VERSION`.
 
 ### Upgrade steps
 
@@ -877,8 +915,8 @@ refuse to run there and print the command to run on the machine you want.
 - `dlopen(): error loading libfuse.so.2`: install `libfuse2`.
 - `Missing X server or $DISPLAY`: install `xvfb`, or start the managed Xvfb
   service and set `DISPLAY=:99`.
-- `Xvfb not found`: confirm `command -v Xvfb` and use that absolute path in the
-  systemd unit.
+- `[serve] Xvfb failed to start` or `[serve] Could not start Xvfb`: confirm
+  `command -v Xvfb` and that it is on the service `PATH`.
 - GPU or DRI warnings on a VPS: keep `LIBGL_ALWAYS_SOFTWARE=1` in the service
   environment.
 - Chromium sandbox errors: confirm the service is running as the non-root
diff --git a/docs/reference/linux-glibc-compatibility.md b/docs/reference/linux-glibc-compatibility.md
index a11506235fe..20e9b38acb5 100644
--- a/docs/reference/linux-glibc-compatibility.md
+++ b/docs/reference/linux-glibc-compatibility.md
@@ -6,6 +6,14 @@ Packaging enforces this floor automatically; keep it in mind when adding or
 upgrading native dependencies. (The optional speech feature is the one
 exception — see below.)
 
+## Local package build prerequisites
+
+`pnpm run build:linux` produces AppImage, deb, and RPM artifacts. The RPM target
+requires `rpmbuild` on `PATH`; install `rpm` on Ubuntu/Debian, `rpm-build` on
+Fedora/RHEL, or `rpm` through Homebrew on macOS, then verify it with
+`rpmbuild --version` before packaging. Cross-host builds have the same
+requirement.
+
 ## Why this needs attention
 
 A native module (`.node`) links against the glibc of the machine that compiled
diff --git a/docs/reference/orcad-operations.md b/docs/reference/orcad-operations.md
index bbde9829514..2901a5bf0b6 100644
--- a/docs/reference/orcad-operations.md
+++ b/docs/reference/orcad-operations.md
@@ -4,8 +4,6 @@
 whatever supervises it: what it binds, what it owns on disk, who restarts what, and what its
 readiness payload actually proves.
 
-Design background: `docs/design/shipping-orcad.html` §00c and §04.
-
 ## Two long-lived processes, not one
 
 A deployment is **orcad** plus **the terminal daemon**.
@@ -14,18 +12,22 @@ A deployment is **orcad** plus **the terminal daemon**.
 | ---------- | -------------------------------- | ------------------------------------- |
 | Started by | the supervisor                   | orcad, detached                       |
 | Owns       | RPC, git, worktrees, persistence | every local PTY                       |
-| Lifetime   | one supervised run               | **outlives orcad**                    |
+| Lifetime   | one supervised run               | detached from orcad, not its service  |
 | Endpoint   | `ws://<bind>:<port>`             | `<data-root>/daemon/daemon-v<N>.sock` |
 
-The daemon outliving orcad is the property the whole peer model is recommended for
-(`docs/reference/ssh-execution-boundary.md`): daemon-backed PTYs stay `live` across a runtime
-restart, so a restart, an update or a rollback does not destroy running work. Everything
-below exists to keep that true.
+orcad detaches the daemon and calls `disconnectDaemon()`, never `shutdownDaemon()`. The
+built-in remote deployment path stops only the recorded orcad PID, so the daemon and its PTYs
+survive. The successor adopts the current endpoint and routes supported previous protocol
+versions through legacy adapters. This makes a PID-scoped update, rollback or restart
+non-destructive to live work.
 
-**Consequence for supervision:** orcad's shutdown path calls `disconnectDaemon()`, never
-`shutdownDaemon()`. A supervisor that reaps orcad's whole process group — systemd's
-`KillMode=control-group` — kills the daemon too and turns every restart back into data loss.
-Use `KillMode=mixed` (the default) or `process`, and never `--send-sigkill` on the group.
+Process detachment is not service isolation. A daemon forked by orcad, and every PTY it owns,
+remain in the same systemd service cgroup. `KillMode=mixed` does **not** preserve them: it
+sends the graceful stop signal only to the main process, then sends `SIGKILL` to every process
+remaining in the cgroup when the stop timeout expires. `KillMode=control-group` is destructive
+too. `KillMode=process` leaves service-owned processes unmanaged and is not a supported
+preservation mechanism. Service-restart survival requires separately supervised cgroups; the
+current deployment does not provide them.
 
 ## Bind policy
 
@@ -76,6 +78,25 @@ a live daemon makes worthwhile.
 
 ## Supervision
 
+### Process-scoped and cgroup-wide stops
+
+The built-in remote updater performs a PID-scoped stop and keeps the daemon's install version
+pinned while it owns sessions. A combined-unit systemd stop or restart is different: it reaps
+the daemon and every live terminal after the graceful window.
+
+Before a cgroup-wide stop, obtain a fresh `orca-ide terminal list --json` result using the same OS
+account and home as the daemon. Invoke the installer's absolute launcher path so `sudo`'s
+`secure_path` cannot hide a per-user registration (for example,
+`sudo -Hu orca /home/orca/.local/bin/orca-ide terminal list --json`). Replace both `orca` and
+`/home/orca` with the service account and home used by the unit; an extracted deployment may use
+its absolute `resources/bin/orca-ide` launcher instead. A safe empty census is untruncated, has an explicit `hostScope`, covers every
+execution host affected by the stop, and lists no terminals on those hosts. Every
+`omittedHostIds` entry must be explicitly accounted for outside the target service's execution
+boundary. A separately paired runtime is outside that boundary; local execution and SSH hosts
+reached through this runtime are not. An affected or unknown omission, missing scope,
+truncation, a failed request or lost contact makes the result `unverifiable`: defer the stop. Do
+not admit new work after the census. Orca does not yet provide an atomic census-and-stop fence.
+
 ### Who supervises orcad
 
 An external supervisor (systemd, launchd, a process manager). orcad conforms to it:
@@ -127,11 +148,11 @@ An external supervisor (systemd, launchd, a process manager). orcad conforms to
 
 ### Decommissioning
 
-The daemon outliving orcad is deliberate, so stopping orcad does **not** leave the host with
-zero Orca processes. A daemon that has been adopted stays resident after its runtime
-disconnects — that is what makes the next start a reattach rather than a cold restore. To
-retire a host completely, stop orcad and then stop the daemon named by
-`health.terminalDaemon.pid`, or delete the data root and let the endpoint go stale.
+After a PID-scoped stop, an adopted daemon stays resident so the next orcad can reattach.
+A combined-unit systemd stop kills it instead. To retire a process-scoped deployment, apply
+the census rule above, stop orcad, then stop the daemon named by `health.terminalDaemon.pid`.
+Only report it `exited` after verification on the execution host; loss of contact is
+`unverifiable`.
 
 ## Health
 
@@ -145,7 +166,8 @@ nodeVersion  / nodeAbi   process.versions.node / .modules — the ABI native add
 platform / arch / pid
 terminalDaemon:
   state              live | degraded | absent
-  ownsFreshSessions  whether NEW terminals are daemon-owned, i.e. survive an orcad restart
+  ownsFreshSessions  whether NEW terminals are daemon-owned; this supports PID-scoped
+                     restart recovery, not supervisor or service-cgroup isolation
   pid                the live daemon's pid, from its own PID record
   buildVersion       the build the LIVE daemon was forked from (may legitimately predate
                      this orcad after an update — reporting orcad's version for both would
@@ -179,11 +201,13 @@ Named here so nothing reads as implemented that is not:
 - **A continuous health endpoint.** `health` is published once, in the readiness payload. A
   supervisor's periodic liveness/readiness probe needs an HTTP or RPC surface over the same
   `collectOrcadHealth()`; that surface does not exist yet.
-- **libc slot.** §04 asks for it in the health payload. It belongs to the native strategy
-  (plan item 5), which owns libc detection; there is no honest value to publish until then.
-- **`degradations[]`.** Plan item 2's contract, not this one.
+- **Systemd-isolated daemon supervision.** orcad and its daemon currently share one service
+  cgroup, so a combined-unit stop cannot preserve live terminals.
+- **libc slot.** There is no honest health value to publish until native libc detection owns
+  it.
+- **`degradations[]`.** The readiness contract does not publish this collection yet.
 - **Credential administration** (list / revoke / rotate devices, expiring pending offers,
-  structured security logging) — §04, not delivered here.
+  structured security logging).
 - **Pinned-port fail-closed.** A pinned `--port` still falls back to an OS-assigned port on
   conflict.
 - **Reconciling `webClientUrl` with reachability** under the loopback default.
diff --git a/docs/reference/ssh-execution-boundary.md b/docs/reference/ssh-execution-boundary.md
index d85dadacccd..45b307411f6 100644
--- a/docs/reference/ssh-execution-boundary.md
+++ b/docs/reference/ssh-execution-boundary.md
@@ -82,4 +82,4 @@ A listing is only evidence about the hosts it actually covered. When a result do
 
 An SSH host and a paired runtime (`orca environment`) imply opposite boundaries: the first is a dumb execution host driven by your client, the second is a peer that owns its own control plane. Registering the same machine both ways splits its worktrees across two identities, makes `terminal list` return different sets depending on `--environment`, and reliably confuses both humans and agents. Pick one per machine.
 
-For work that must continue while you are offline, use the peer/headless-runtime model on the remote host instead of the direct-SSH model. Its control plane is host-local, and its daemon-backed PTYs stay `live` across a normal runtime restart so the runtime can reattach; an explicit daemon shutdown can still make them `exited`. Do not register the same machine through both models. A detached agent process outside Orca can also survive a control-plane outage, but it has no stdin, so its instructions cannot be amended mid-run.
+For work that must continue while you are offline, use the peer/headless-runtime model on the remote host instead of the direct-SSH model. Its control plane is host-local, and its daemon-backed PTYs can stay `live` across a PID-scoped runtime restart so the runtime can reattach. A service manager that reaps the runtime's cgroup, or an explicit daemon shutdown, makes them `exited`; see [Running orcad](./orcad-operations.md#process-scoped-and-cgroup-wide-stops). Do not register the same machine through both models. A detached agent process outside Orca can also survive a control-plane outage, but it has no stdin, so its instructions cannot be amended mid-run.
diff --git a/package.json b/package.json
index aab4c660c48..9846604fab6 100644
--- a/package.json
+++ b/package.json
@@ -75,6 +75,7 @@
     "verify:localization-coverage": "node config/scripts/audit-localization-coverage.mjs --check",
     "audit:localization": "node config/scripts/audit-localization-coverage.mjs",
     "build:cli": "tsc -p config/tsconfig.cli.json --outDir out --composite false --incremental false && node config/scripts/verify-cli-bin.mjs --fix-executable --fix-package-json && node config/scripts/install-dev-cli.mjs",
+    "test:linux-cli-contract": "node config/scripts/run-linux-cli-launch-contract-docker.mjs --appimage dist/orca-linux.AppImage",
     "test:repro:skills-cli-runtime": "pnpm run build:cli && pnpm run build:electron-vite && pnpm run verify:built-skills-cli",
     "build:electron-vite": "node config/scripts/run-electron-vite-build.mjs",
     "build:electron-vite:parallel": "node config/scripts/run-electron-vite-targets-in-parallel.mjs",
@@ -94,7 +95,7 @@
     "build:icons": "bash resources/icon-source/generate.sh",
     "build:mac": "pnpm run build:desktop && pnpm run build:computer-macos && pnpm run build:keyboard-layout-macos && pnpm run build:notification-status-macos && pnpm run ensure:electron-runtime && node config/scripts/build-mac-local.mjs",
     "build:mac:release": "node config/scripts/verify-macos-release-env.mjs && ORCA_MAC_RELEASE=1 pnpm run build:desktop && ORCA_MAC_RELEASE=1 pnpm run build:computer-macos && ORCA_MAC_RELEASE=1 pnpm run build:keyboard-layout-macos && ORCA_MAC_RELEASE=1 pnpm run build:notification-status-macos && pnpm run ensure:electron-runtime && ORCA_MAC_RELEASE=1 electron-builder --config config/electron-builder.config.cjs --mac",
-    "build:linux": "pnpm run build:desktop && pnpm run ensure:electron-runtime && electron-builder --config config/electron-builder.config.cjs --linux AppImage deb",
+    "build:linux": "pnpm run build:desktop && pnpm run ensure:electron-runtime && node config/scripts/build-linux-local.mjs",
     "test:e2e": "pnpm run ensure:electron-runtime && npx playwright test --config tests/playwright.config.ts --project=electron-headless",
     "test:e2e:workspace-session-golden": "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/golden-quit-relaunch-session.spec.ts tests/e2e/golden-terminal-file-link.spec.ts tests/e2e/golden-worktree-create-switch.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
     "test:e2e:multi-client-navigation": "node config/scripts/run-multi-client-navigation-e2e.mjs",
diff --git a/resources/linux/bin/orca-ide b/resources/linux/bin/orca-ide
index 88b04e9e47d..f191f27c770 100755
--- a/resources/linux/bin/orca-ide
+++ b/resources/linux/bin/orca-ide
@@ -38,4 +38,5 @@ export ORCA_NODE_REPL_EXTERNAL_MODULE="${NODE_REPL_EXTERNAL_MODULE-}"
 unset NODE_OPTIONS
 unset NODE_REPL_EXTERNAL_MODULE
 
+# CLI commands run in Electron's Node mode and must never initialize Chromium.
 ELECTRON_RUN_AS_NODE=1 exec "$ELECTRON" "$CLI" "$@"
diff --git a/resources/linux/packaging/after-remove.sh b/resources/linux/packaging/after-remove.sh
index 0f497024613..a23426df446 100755
--- a/resources/linux/packaging/after-remove.sh
+++ b/resources/linux/packaging/after-remove.sh
@@ -4,6 +4,12 @@
 # /usr/bin/orca-ide a user or other package may own.
 set -e
 
+# RPM passes an instance count; dpkg passes the package lifecycle action.
+case "${1-}" in
+  0 | remove | purge) ;;
+  *) exit 0 ;;
+esac
+
 link="/usr/bin/orca-ide"
 
 if [ -L "$link" ]; then
diff --git a/src/cli/args.test.ts b/src/cli/args.test.ts
index eeedfbe0428..1ac86d99e12 100644
--- a/src/cli/args.test.ts
+++ b/src/cli/args.test.ts
@@ -93,6 +93,16 @@ describe('parseArgs', () => {
     expect(parsed.flags.get('repo')).toBe('id:abc')
   })
 
+  it('preserves a project selector before the project command', () => {
+    const parsed = parseArgs(
+      ['--project', 'github:stablyai/orca', 'project', 'setups'],
+      [['project', 'setups']]
+    )
+
+    expect(parsed.commandPath).toEqual(['project', 'setups'])
+    expect(parsed.flags.get('project')).toBe('github:stablyai/orca')
+  })
+
   it('preserves a selector value that is also a registered command', () => {
     const parsed = parseArgs(
       ['--environment', 'status', 'worktree', 'list'],
@@ -113,6 +123,16 @@ describe('parseArgs', () => {
     expect(parsed.flags.get('environment')).toBe('worktree')
   })
 
+  it.each([
+    ['--project', 'project', 'project', 'setups'],
+    ['--project=project', 'project', 'setups']
+  ])('preserves a command-named project selector in %j', (...args) => {
+    const parsed = parseArgs(args, [['project', 'setups']])
+
+    expect(parsed.commandPath).toEqual(['project', 'setups'])
+    expect(parsed.flags.get('project')).toBe('project')
+  })
+
   it('parses emulator reinstall as a boolean flag', () => {
     const parsed = parseArgs(['emulator', 'install', 'app.apk', '--reinstall', '--device', 'emu'])
 
diff --git a/src/cli/args.ts b/src/cli/args.ts
index c4c373a814f..a934915655e 100644
--- a/src/cli/args.ts
+++ b/src/cli/args.ts
@@ -1,6 +1,12 @@
 import { RuntimeClientError } from './runtime/types'
 import { unknownCommandData, unknownFlagData } from './command-suggestion'
 import { specPaths, type CommandSpec } from './command-spec'
+import {
+  CLI_BOOLEAN_FLAGS,
+  CLI_GLOBAL_FLAGS,
+  CLI_GLOBAL_VALUE_FLAGS,
+  findCliCommandIndex
+} from '../shared/cli-argument-boundary'
 
 export { specPaths }
 export type { CommandSpec }
@@ -11,51 +17,9 @@ export type ParsedArgs = {
   positionalFlagConflicts?: string[]
 }
 
-export const GLOBAL_FLAGS = ['help', 'json', 'pairing-code', 'environment']
-const GLOBAL_VALUE_FLAGS = new Set(['pairing-code', 'environment'])
-export const BOOLEAN_FLAGS = new Set([
-  'all',
-  'attachments',
-  'children',
-  'comments',
-  'connect',
-  'current',
-  'dry-run',
-  'enter',
-  'focus',
-  'force',
-  'full',
-  'help',
-  'inject',
-  'include-archived',
-  'include-visual-layouts',
-  'interrupt',
-  'json',
-  'local',
-  'messages',
-  'me',
-  'mobile',
-  'mobile-pairing',
-  'no-pairing',
-  'screen',
-  'parent-current',
-  'provision',
-  'ready',
-  'recipe-json',
-  'relations',
-  'reinstall',
-  'restore-window',
-  'return-preamble',
-  'run-hooks',
-  'show-profile',
-  'staged',
-  'tab',
-  'tasks',
-  'text-stdin',
-  'unread',
-  'value-stdin',
-  'wait'
-])
+export const GLOBAL_FLAGS = CLI_GLOBAL_FLAGS
+const GLOBAL_VALUE_FLAGS = new Set(CLI_GLOBAL_VALUE_FLAGS)
+export const BOOLEAN_FLAGS = CLI_BOOLEAN_FLAGS
 
 export const REPEATED_FLAG_SEPARATOR = '\u0000'
 const REPEATABLE_STRING_FLAGS = new Set(['label', 'skill'])
@@ -69,25 +33,10 @@ function setFlagValue(flags: Map<string, string | boolean>, name: string, value:
   flags.set(name, value)
 }
 
-function commandPathStartsAt(argv: string[], tokenIndex: number, path: string[]): boolean {
-  let cursor = tokenIndex
-  for (const part of path) {
-    while (argv[cursor]?.startsWith('--')) {
-      const assignment = argv[cursor].slice(2)
-      const flag = assignment.split('=', 1)[0]
-      cursor += assignment.includes('=') || BOOLEAN_FLAGS.has(flag) ? 1 : 2
-    }
-    if (argv[cursor] !== part) {
-      return false
-    }
-    cursor += 1
-  }
-  return true
-}
-
 export function parseArgs(argv: string[], commandPaths?: readonly string[][]): ParsedArgs {
   const commandPath: string[] = []
   const flags = new Map<string, string | boolean>()
+  const commandIndex = findCliCommandIndex(argv, commandPaths ?? [])
 
   for (let i = 0; i < argv.length; i += 1) {
     const token = argv[i]
@@ -112,9 +61,7 @@ export function parseArgs(argv: string[], commandPaths?: readonly string[][]): P
       continue
     }
     // Why: a pre-command flag must not consume a registry-resolvable command path.
-    const startsCommandAt = (tokenIndex: number): boolean =>
-      commandPaths?.some((path) => commandPathStartsAt(argv, tokenIndex, path)) ?? false
-    if (commandPath.length === 0 && startsCommandAt(i + 1) && !startsCommandAt(i + 2)) {
+    if (commandPath.length === 0 && i + 1 === commandIndex) {
       flags.set(flag, true)
       continue
     }
diff --git a/src/cli/cli-command-name-parity.test.ts b/src/cli/cli-command-name-parity.test.ts
new file mode 100644
index 00000000000..32bbcc06add
--- /dev/null
+++ b/src/cli/cli-command-name-parity.test.ts
@@ -0,0 +1,25 @@
+import { describe, expect, it } from 'vitest'
+import { CLI_COMMAND_NAMES } from '../main/startup/cli-command-names'
+import { COMMAND_SPECS } from './specs'
+
+const specCommandNames = [...new Set(COMMAND_SPECS.map((spec) => spec.path[0]))].sort()
+
+describe('CLI command-name parity between COMMAND_SPECS and the launch redirect', () => {
+  it('has commands to compare', () => {
+    expect(specCommandNames.length).toBeGreaterThan(0)
+  })
+
+  it('redirects every top-level CLI command', () => {
+    const redirected = new Set<string>(CLI_COMMAND_NAMES)
+    expect(specCommandNames.filter((name) => !redirected.has(name))).toEqual([])
+  })
+
+  it('lists no command that COMMAND_SPECS does not define', () => {
+    const specNames = new Set(specCommandNames)
+    expect([...CLI_COMMAND_NAMES].filter((name) => !specNames.has(name))).toEqual([])
+  })
+
+  it('stays sorted and free of duplicates so additions are easy to review', () => {
+    expect([...CLI_COMMAND_NAMES]).toEqual([...new Set(CLI_COMMAND_NAMES)].sort())
+  })
+})
diff --git a/src/cli/cli-version.test.ts b/src/cli/cli-version.test.ts
new file mode 100644
index 00000000000..6ffe60692fb
--- /dev/null
+++ b/src/cli/cli-version.test.ts
@@ -0,0 +1,36 @@
+import { mkdtemp, mkdir, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, describe, expect, it } from 'vitest'
+import { readOrcaCliVersion } from './cli-version'
+
+const temporaryDirectories: string[] = []
+
+afterEach(() =>
+  Promise.all(temporaryDirectories.splice(0).map((path) => rm(path, { recursive: true })))
+)
+
+describe('CLI version', () => {
+  it('reads the package boundary beside the compiled CLI', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'orca-cli-version-'))
+    const runtimeDir = join(root, 'cli')
+    temporaryDirectories.push(root)
+    await mkdir(runtimeDir)
+    await writeFile(join(root, 'package.json'), JSON.stringify({ version: '1.4.178-rc.2' }))
+
+    expect(readOrcaCliVersion(runtimeDir)).toBe('1.4.178-rc.2')
+  })
+
+  it('rejects missing, malformed, and non-string versions', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'orca-cli-version-invalid-'))
+    const runtimeDir = join(root, 'cli')
+    temporaryDirectories.push(root)
+    await mkdir(runtimeDir)
+
+    expect(readOrcaCliVersion(runtimeDir)).toBeNull()
+    await writeFile(join(root, 'package.json'), '{')
+    expect(readOrcaCliVersion(runtimeDir)).toBeNull()
+    await writeFile(join(root, 'package.json'), JSON.stringify({ version: 178 }))
+    expect(readOrcaCliVersion(runtimeDir)).toBeNull()
+  })
+})
diff --git a/src/cli/cli-version.ts b/src/cli/cli-version.ts
new file mode 100644
index 00000000000..0918ec763fd
--- /dev/null
+++ b/src/cli/cli-version.ts
@@ -0,0 +1,14 @@
+import { readFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+// Node-mode CLI code cannot read the package metadata inside app.asar.
+export function readOrcaCliVersion(runtimeDir = __dirname): string | null {
+  try {
+    const parsed = JSON.parse(readFileSync(join(runtimeDir, '..', 'package.json'), 'utf8')) as {
+      version?: unknown
+    }
+    return typeof parsed.version === 'string' && parsed.version.length > 0 ? parsed.version : null
+  } catch {
+    return null
+  }
+}
diff --git a/src/cli/command-suggestion.ts b/src/cli/command-suggestion.ts
index db481de6ea8..6bc6d6eee0b 100644
--- a/src/cli/command-suggestion.ts
+++ b/src/cli/command-suggestion.ts
@@ -1,4 +1,7 @@
 import { specPaths, type CommandSpec } from './command-spec'
+import { levenshtein } from '../shared/edit-distance'
+
+export { levenshtein } from '../shared/edit-distance'
 
 // Why: rank the live registry so typo recovery cannot drift from accepted paths.
 
@@ -46,30 +49,6 @@ export type CommandErrorData = {
   nextSteps: string[]
 }
 
-export function levenshtein(a: string, b: string): number {
-  const m = a.length
-  const n = b.length
-  if (m === 0) {
-    return n
-  }
-  if (n === 0) {
-    return m
-  }
-  let prev = Array.from({ length: n + 1 }, (_, index) => index)
-  let curr = Array.from({ length: n + 1 }, () => 0)
-  for (let i = 1; i <= m; i += 1) {
-    curr[0] = i
-    for (let j = 1; j <= n; j += 1) {
-      const cost = a[i - 1] === b[j - 1] ? 0 : 1
-      curr[j] = Math.min(prev[j] + 1, curr[j - 1] + 1, prev[j - 1] + cost)
-    }
-    const swap = prev
-    prev = curr
-    curr = swap
-  }
-  return prev[n]
-}
-
 // Why: one bounded near-match ranking keeps command and flag recovery consistent.
 function rankByDistance(scored: { label: string; distance: number }[]): string[] {
   return scored
diff --git a/src/cli/handlers/core.ts b/src/cli/handlers/core.ts
index 145540bb627..d4979ff2ae9 100644
--- a/src/cli/handlers/core.ts
+++ b/src/cli/handlers/core.ts
@@ -3,6 +3,7 @@ import type { CommandHandler } from '../dispatch'
 import { formatCliStatus, formatStatus, printResult } from '../format'
 import { RuntimeClientError, serveOrcaApp } from '../runtime-client'
 import { stripElectronRunAsNode } from '../runtime/launch'
+import { getServeOptionValidationError } from '../../shared/serve-option-validation'
 
 function envRecord(): Record<string, string> {
   // Why: the `orca` launcher runs Orca's Electron binary as Node, so this CLI
@@ -92,43 +93,29 @@ export const CORE_HANDLERS: Record<string, CommandHandler> = {
     printResult(result, json, formatCliStatus)
   },
   serve: async ({ flags, json }) => {
-    if (flags.get('no-pairing') === true && flags.get('mobile-pairing') === true) {
-      throw new RuntimeClientError(
-        'invalid_argument',
-        'Use either --mobile-pairing or --no-pairing, not both.'
-      )
-    }
-    if (flags.get('recipe-json') === true && flags.get('no-pairing') === true) {
-      throw new RuntimeClientError(
-        'invalid_argument',
-        'Recipe JSON output requires runtime pairing; remove --no-pairing.'
-      )
-    }
-    if (flags.get('recipe-json') === true && flags.get('mobile-pairing') === true) {
-      throw new RuntimeClientError(
-        'invalid_argument',
-        'Recipe JSON output requires runtime pairing; remove --mobile-pairing.'
-      )
-    }
-    const projectRoot =
-      typeof flags.get('project-root') === 'string' ? (flags.get('project-root') as string) : null
-    if (flags.get('recipe-json') === true && !projectRoot) {
-      throw new RuntimeClientError(
-        'invalid_argument',
-        'Recipe JSON output requires --project-root.'
-      )
+    const projectRootValue = flags.get('project-root')
+    const projectRoot = typeof projectRootValue === 'string' ? projectRootValue : null
+    const noPairing = flags.get('no-pairing') === true
+    const mobilePairing = flags.get('mobile-pairing') === true
+    const recipeJson = flags.get('recipe-json') === true
+    const validationError = getServeOptionValidationError({
+      noPairing,
+      mobilePairing,
+      recipeJson,
+      projectRoot
+    })
+    if (validationError) {
+      throw new RuntimeClientError('invalid_argument', validationError)
     }
     const port = getOptionalServePort(flags)
+    const pairingAddressValue = flags.get('pairing-address')
     const exitCode = await serveOrcaApp({
       json,
       port,
-      pairingAddress:
-        typeof flags.get('pairing-address') === 'string'
-          ? (flags.get('pairing-address') as string)
-          : null,
-      noPairing: flags.get('no-pairing') === true,
-      mobilePairing: flags.get('mobile-pairing') === true,
-      recipeJson: flags.get('recipe-json') === true,
+      pairingAddress: typeof pairingAddressValue === 'string' ? pairingAddressValue : null,
+      noPairing,
+      mobilePairing,
+      recipeJson,
       projectRoot
     })
     process.exitCode = exitCode
diff --git a/src/cli/index.ts b/src/cli/index.ts
index 2a8921a2cdb..c29bfff7060 100644
--- a/src/cli/index.ts
+++ b/src/cli/index.ts
@@ -8,6 +8,7 @@ import {
   specPaths,
   validateCommandAndFlags
 } from './args'
+import { readOrcaCliVersion } from './cli-version'
 import { dispatch } from './dispatch'
 import {
   assertEnvironmentSelectorResolvable,
@@ -59,6 +60,17 @@ export async function main(
   argv = process.argv.slice(2),
   cwd = resolveInvocationCwd()
 ): Promise<void> {
+  // Why: version audits use the bundled launcher; Electron intercepts direct binary version flags.
+  if (argv.length === 1 && (argv[0] === '--version' || argv[0] === '-v')) {
+    const version = readOrcaCliVersion()
+    if (!version) {
+      process.stderr.write('Could not determine the Orca version for this build.\n')
+      process.exitCode = 1
+      return
+    }
+    process.stdout.write(`${version}\n`)
+    return
+  }
   if (argv[0] === 'agent-teams-tmux') {
     await runAgentTeamsTmuxShim(argv.slice(1))
     return
diff --git a/src/cli/runtime/launch.test.ts b/src/cli/runtime/launch.test.ts
index 235b2b2ed56..7931e489e3d 100644
--- a/src/cli/runtime/launch.test.ts
+++ b/src/cli/runtime/launch.test.ts
@@ -13,12 +13,14 @@ import {
   SERVE_REPLACEMENT_READY_TIMEOUT_MS
 } from './serve-update-supervisor'
 
-const { spawnMock } = vi.hoisted(() => ({
-  spawnMock: vi.fn()
+const { spawnMock, spawnSyncMock } = vi.hoisted(() => ({
+  spawnMock: vi.fn(),
+  spawnSyncMock: vi.fn()
 }))
 
 vi.mock('child_process', () => ({
-  spawn: spawnMock
+  spawn: spawnMock,
+  spawnSync: spawnSyncMock
 }))
 
 import { launchOrcaApp, serveOrcaApp } from './launch'
@@ -86,6 +88,7 @@ describe('serveOrcaApp', () => {
 
   beforeEach(() => {
     spawnMock.mockReset()
+    spawnSyncMock.mockReset()
     process.env.ORCA_APP_EXECUTABLE = '/Applications/Orca.app/Contents/MacOS/Orca'
   })
 
@@ -93,7 +96,6 @@ describe('serveOrcaApp', () => {
     vi.restoreAllMocks()
     delete process.env.ORCA_APP_EXECUTABLE
     delete process.env.ORCA_APP_EXECUTABLE_NEEDS_APP_ROOT
-    delete process.env.ORCA_APPIMAGE_NO_SANDBOX
     delete process.env.ORCA_USER_DATA_PATH
     return Promise.all(
       temporaryDirectories.splice(0).map((directory) => rm(directory, { recursive: true }))
@@ -391,32 +393,6 @@ describe('serveOrcaApp', () => {
     )
   })
 
-  it('preserves an AppImage no-sandbox launch for the server child', async () => {
-    process.env.ORCA_APPIMAGE_NO_SANDBOX = '1'
-    const child = {
-      kill: vi.fn(),
-      once: vi.fn(
-        (event: string, handler: (code: number | null, signal: string | null) => void) => {
-          if (event === 'exit') {
-            queueMicrotask(() => handler(0, null))
-          }
-          return child
-        }
-      )
-    }
-    spawnMock.mockReturnValue(child)
-
-    await expect(serveOrcaApp({ json: true })).resolves.toBe(0)
-
-    expect(spawnMock).toHaveBeenCalledWith(
-      '/Applications/Orca.app/Contents/MacOS/Orca',
-      ['--no-sandbox', '--serve', '--serve-json'],
-      expect.any(Object)
-    )
-    const spawnOptions = spawnMock.mock.calls[0]?.[2] as { env?: NodeJS.ProcessEnv }
-    expect(spawnOptions.env).not.toHaveProperty('ORCA_APPIMAGE_NO_SANDBOX')
-  })
-
   it('passes the app root before serve flags for dev Electron executables', async () => {
     process.env.ORCA_APP_EXECUTABLE = '/repo/node_modules/.bin/electron'
     process.env.ORCA_APP_EXECUTABLE_NEEDS_APP_ROOT = '1'
@@ -444,6 +420,66 @@ describe('serveOrcaApp', () => {
     )
   })
 
+  it.each([
+    { probe: 'exits nonzero', result: { status: 1 }, expectedPrefix: ['--no-sandbox'] },
+    { probe: 'succeeds', result: { status: 0 }, expectedPrefix: [] },
+    {
+      probe: 'times out',
+      result: {
+        status: null,
+        error: Object.assign(new Error('timed out'), { code: 'ETIMEDOUT' })
+      },
+      expectedPrefix: ['--no-sandbox']
+    },
+    {
+      probe: 'cannot start',
+      result: { status: null, error: Object.assign(new Error('missing'), { code: 'ENOENT' }) },
+      expectedPrefix: ['--no-sandbox']
+    }
+  ])(
+    'uses the extracted AppImage sandbox fallback when the userns probe $probe',
+    async ({ result: userNamespaceResult, expectedPrefix }) => {
+      const platformDescriptor = Object.getOwnPropertyDescriptor(process, 'platform')
+      const getuidDescriptor = Object.getOwnPropertyDescriptor(process, 'getuid')
+      const root = await mkdtemp(join(tmpdir(), 'orca-extracted-appimage-'))
+      temporaryDirectories.push(root)
+      const executable = join(root, 'orca-ide')
+      await writeFile(join(root, 'AppRun'), '', { mode: 0o755 })
+      process.env.ORCA_APP_EXECUTABLE = executable
+      Object.defineProperty(process, 'platform', { value: 'linux' })
+      Object.defineProperty(process, 'getuid', { configurable: true, value: () => 1000 })
+      spawnSyncMock.mockReturnValue(userNamespaceResult)
+      const child = new FakeChildProcess()
+      spawnMock.mockReturnValue(child)
+
+      try {
+        const result = serveOrcaApp({ json: true })
+        queueMicrotask(() => child.emit('exit', 0, null))
+        await expect(result).resolves.toBe(0)
+        expect(spawnSyncMock).toHaveBeenCalledWith(
+          'unshare',
+          ['-Ur', 'true'],
+          expect.objectContaining({ stdio: 'ignore', timeout: 2_000 })
+        )
+        expect(spawnMock).toHaveBeenCalledWith(
+          executable,
+          [...expectedPrefix, '--serve', '--serve-json'],
+          // Foreground serve must share POSIX job-control signals with its CLI supervisor.
+          expect.objectContaining({ detached: false })
+        )
+      } finally {
+        if (platformDescriptor) {
+          Object.defineProperty(process, 'platform', platformDescriptor)
+        }
+        if (getuidDescriptor) {
+          Object.defineProperty(process, 'getuid', getuidDescriptor)
+        } else {
+          Reflect.deleteProperty(process, 'getuid')
+        }
+      }
+    }
+  )
+
   it('prints recipe JSON from a detached server child and exits', async () => {
     const child = new FakeChildProcess()
     spawnMock.mockReturnValue(child)
@@ -599,6 +635,7 @@ describe('serveOrcaApp', () => {
 describe('launchOrcaApp', () => {
   beforeEach(() => {
     spawnMock.mockReset()
+    spawnSyncMock.mockReset()
   })
 
   afterEach(() => {
@@ -618,4 +655,51 @@ describe('launchOrcaApp', () => {
 
     expect(child.unref).toHaveBeenCalled()
   })
+
+  it('adds the extracted-AppImage sandbox fallback for open launches', async () => {
+    const platformDescriptor = Object.getOwnPropertyDescriptor(process, 'platform')
+    const getuidDescriptor = Object.getOwnPropertyDescriptor(process, 'getuid')
+    const root = await mkdtemp(join(tmpdir(), 'orca-open-extracted-appimage-'))
+    const executable = join(root, 'orca-ide')
+
+    try {
+      await writeFile(join(root, 'AppRun'), '')
+      process.env.ORCA_APP_EXECUTABLE = executable
+      process.env.ELECTRON_RUN_AS_NODE = '1'
+      Object.defineProperty(process, 'platform', { configurable: true, value: 'linux' })
+      Object.defineProperty(process, 'getuid', { configurable: true, value: () => 1000 })
+      spawnSyncMock.mockReturnValue({ status: 1 })
+      const child = new FakeChildProcess()
+      spawnMock.mockReturnValue(child)
+
+      launchOrcaApp()
+
+      expect(spawnSyncMock).toHaveBeenCalledWith(
+        'unshare',
+        ['-Ur', 'true'],
+        expect.objectContaining({ stdio: 'ignore', timeout: 2_000 })
+      )
+      expect(spawnMock).toHaveBeenCalledWith(
+        executable,
+        ['--no-sandbox'],
+        expect.objectContaining({
+          detached: true,
+          stdio: 'ignore',
+          env: expect.not.objectContaining({ ELECTRON_RUN_AS_NODE: '1' })
+        })
+      )
+      expect(child.unref).toHaveBeenCalledOnce()
+    } finally {
+      await rm(root, { recursive: true, force: true })
+      delete process.env.ELECTRON_RUN_AS_NODE
+      if (platformDescriptor) {
+        Object.defineProperty(process, 'platform', platformDescriptor)
+      }
+      if (getuidDescriptor) {
+        Object.defineProperty(process, 'getuid', getuidDescriptor)
+      } else {
+        Reflect.deleteProperty(process, 'getuid')
+      }
+    }
+  })
 })
diff --git a/src/cli/runtime/launch.ts b/src/cli/runtime/launch.ts
index bd7d939be5a..a326ae333f5 100644
--- a/src/cli/runtime/launch.ts
+++ b/src/cli/runtime/launch.ts
@@ -1,6 +1,8 @@
 import { spawn as spawnProcess, type SpawnOptions } from 'node:child_process'
-import { resolve } from 'node:path'
+import { existsSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
 import { StringDecoder } from 'node:string_decoder'
+import { runProcessSync } from '../../shared/child-process/run-process'
 import {
   SERVE_UPDATE_HANDOFF_PATH_ENV,
   getServeUpdateHandoffPath
@@ -19,6 +21,7 @@ import {
 import { RuntimeClientError } from './types'
 
 const IGNORED_NON_RECIPE_STDOUT = '[serve] ignored non-recipe stdout'
+const USER_NAMESPACE_PROBE_TIMEOUT_MS = 2_000
 
 export function launchOrcaApp(): void {
   const overrideCommand = process.env.ORCA_OPEN_COMMAND
@@ -29,7 +32,7 @@ export function launchOrcaApp(): void {
 
   const overrideExecutable = process.env.ORCA_APP_EXECUTABLE
   if (typeof overrideExecutable === 'string' && overrideExecutable.trim().length > 0) {
-    spawnDetached(overrideExecutable, getExecutableAppArgs(), {
+    spawnDetached(overrideExecutable, getExecutableAppArgs(overrideExecutable), {
       ...getExecutableSpawnOptions(overrideExecutable),
       env: stripElectronRunAsNode(process.env)
     })
@@ -50,7 +53,7 @@ export function launchOrcaApp(): void {
       }
     }
 
-    spawnDetached(process.execPath, [], {
+    spawnDetached(process.execPath, getExecutableAppArgs(process.execPath), {
       env: stripElectronRunAsNode(process.env)
     })
     return
@@ -86,10 +89,7 @@ export function serveOrcaApp(
   } = {}
 ): Promise<number> {
   const executable = resolveForegroundOrcaExecutable()
-  const childArgs = [...getExecutableAppArgs()]
-  if (process.env.ORCA_APPIMAGE_NO_SANDBOX === '1') {
-    childArgs.push('--no-sandbox')
-  }
+  const childArgs = [...getExecutableAppArgs(executable)]
   childArgs.push('--serve')
   if (args.json) {
     childArgs.push('--serve-json')
@@ -121,7 +121,6 @@ export function serveOrcaApp(
       ? getServeUpdateHandoffPath(getDefaultUserDataPath())
       : null
   const childEnv = stripElectronRunAsNode(process.env)
-  delete childEnv.ORCA_APPIMAGE_NO_SANDBOX
   if (handoffPath) {
     childEnv[SERVE_UPDATE_HANDOFF_PATH_ENV] = handoffPath
   }
@@ -256,8 +255,34 @@ function waitForRecipeJson(child: ReturnType<typeof spawnProcess>): Promise<numb
   })
 }
 
-function getExecutableAppArgs(): string[] {
-  return process.env.ORCA_APP_EXECUTABLE_NEEDS_APP_ROOT === '1' ? [resolveAppRoot()] : []
+function getExecutableAppArgs(executable: string): string[] {
+  const args = process.env.ORCA_APP_EXECUTABLE_NEEDS_APP_ROOT === '1' ? [resolveAppRoot()] : []
+  if (shouldDisableExtractedAppImageSandbox(executable)) {
+    args.push('--no-sandbox')
+  }
+  return args
+}
+
+function shouldDisableExtractedAppImageSandbox(executable: string): boolean {
+  if (process.platform !== 'linux' || !existsSync(join(dirname(executable), 'AppRun'))) {
+    return false
+  }
+  // An extracted AppImage has no root-owned setuid sandbox; mirror AppRun's userns fallback.
+  if (process.getuid?.() === 0) {
+    return true
+  }
+  try {
+    return (
+      runProcessSync({
+        program: 'unshare',
+        args: ['-Ur', 'true'],
+        stdio: 'ignore',
+        timeoutMs: USER_NAMESPACE_PROBE_TIMEOUT_MS
+      }).code !== 0
+    )
+  } catch {
+    return true
+  }
 }
 
 function getExecutableSpawnOptions(executable: string): Pick<SpawnOptions, 'shell'> {
diff --git a/src/cli/runtime/serve-signal-exit-diagnostic.test.ts b/src/cli/runtime/serve-signal-exit-diagnostic.test.ts
index f5d348798c3..cc47deec3f7 100644
--- a/src/cli/runtime/serve-signal-exit-diagnostic.test.ts
+++ b/src/cli/runtime/serve-signal-exit-diagnostic.test.ts
@@ -134,6 +134,36 @@ describe('superviseForegroundServe signal exits', () => {
     expect(vi.getTimerCount()).toBe(0)
   })
 
+  it('forwards Linux terminal hangup and removes the listener after exit', async () => {
+    setPlatform('linux')
+    const listenersBefore = process.listeners('SIGHUP')
+    const child = new FakeChildProcess()
+    const supervised = superviseChild(child)
+
+    expect(process.listeners('SIGHUP')).toHaveLength(listenersBefore.length + 1)
+    process.emit('SIGHUP', 'SIGHUP')
+    expect(child.kill).toHaveBeenCalledWith('SIGHUP')
+
+    child.emit('exit', null, 'SIGHUP')
+    await expect(supervised).resolves.toBe(0)
+    expect(process.listeners('SIGHUP')).toEqual(listenersBefore)
+
+    const killCallsAfterExit = child.kill.mock.calls.length
+    process.emit('SIGHUP', 'SIGHUP')
+    expect(child.kill).toHaveBeenCalledTimes(killCallsAfterExit)
+  })
+
+  it('treats a child exit through the caller-forwarded SIGINT as graceful', async () => {
+    setPlatform('linux')
+    const child = new FakeChildProcess()
+    const supervised = superviseChild(child)
+
+    process.emit('SIGINT', 'SIGINT')
+    child.emit('exit', null, 'SIGINT')
+
+    await expect(supervised).resolves.toBe(0)
+  })
+
   it('does not terminate an exited child when update handoff completion fails late', async () => {
     vi.useFakeTimers()
     const missingParent = await mkdtemp(join(tmpdir(), 'orca-serve-missing-handoff-'))
diff --git a/src/cli/runtime/serve-update-supervisor.ts b/src/cli/runtime/serve-update-supervisor.ts
index a5a303dc1a2..f791ef2ae6e 100644
--- a/src/cli/runtime/serve-update-supervisor.ts
+++ b/src/cli/runtime/serve-update-supervisor.ts
@@ -86,8 +86,8 @@ export async function superviseForegroundServe(
       handoff?.phase !== 'install-requested' ||
       (child.pid !== undefined && handoff.servingPid !== child.pid)
     ) {
-      if (typeof result.code === 'number') {
-        return result.code
+      if (typeof result.code === 'number' || result.signalWasForwarded) {
+        return result.code ?? 0
       }
       throw serveSignalExitError(result.signal)
     }
@@ -114,8 +114,11 @@ function waitForForegroundChild(
   code: number | null
   signal: NodeJS.Signals | null
   readiness: ServeReadiness
+  signalWasForwarded: boolean
 }> {
   return new Promise((resolveWait, reject) => {
+    const forwardsHangup = process.platform === 'linux'
+    const forwardedSignals = new Set<NodeJS.Signals>()
     let forceKillTimer: ReturnType<typeof setTimeout> | null = null
     let readyTimer: ReturnType<typeof setTimeout> | null = null
     let readiness: ServeReadiness = expected ? 'pending' : 'not-expected'
@@ -155,6 +158,7 @@ function waitForForegroundChild(
     const forwardSignal = (signal: NodeJS.Signals): void => {
       // A Windows console delivers Ctrl-C to parent and child; child.kill would terminate the child mid-teardown.
       if (process.platform !== 'win32') {
+        forwardedSignals.add(signal)
         child.kill(signal)
       }
       forceKillTimer ??= setTimeout(() => child.kill('SIGKILL'), SERVE_CHILD_FORCE_KILL_GRACE_MS)
@@ -188,6 +192,9 @@ function waitForForegroundChild(
     const cleanup = (): void => {
       process.off('SIGINT', forwardSignal)
       process.off('SIGTERM', forwardSignal)
+      if (forwardsHangup) {
+        process.off('SIGHUP', forwardSignal)
+      }
       if (typeof child.off === 'function') {
         child.off('message', handleMessage)
       }
@@ -200,6 +207,9 @@ function waitForForegroundChild(
     }
     process.on('SIGINT', forwardSignal)
     process.on('SIGTERM', forwardSignal)
+    if (forwardsHangup) {
+      process.on('SIGHUP', forwardSignal)
+    }
     if (typeof child.on === 'function') {
       child.on('message', handleMessage)
     }
@@ -213,7 +223,8 @@ function waitForForegroundChild(
     const handleExit = (code: number | null, signal: NodeJS.Signals | null): void => {
       childSettled = true
       cleanup()
-      void stateWrite.then(() => resolveWait({ code, signal, readiness }))
+      const signalWasForwarded = signal !== null && forwardedSignals.has(signal)
+      void stateWrite.then(() => resolveWait({ code, signal, readiness, signalWasForwarded }))
     }
     child.once('error', (error) => {
       childSettled = true
diff --git a/src/cli/serve-electron-flag-parity.test.ts b/src/cli/serve-electron-flag-parity.test.ts
index 4213d360a41..a4964e1a824 100644
--- a/src/cli/serve-electron-flag-parity.test.ts
+++ b/src/cli/serve-electron-flag-parity.test.ts
@@ -35,7 +35,7 @@ describe('serve flag parity between the CLI spec and the Electron argv rewrite',
 
     expect(normalizeServeModeArgv(argv)).toEqual(expected)
     if (takesValue) {
-      // The equals form is the other shape `orca serve` accepts, and getServeOptions only reads the next token.
+      // The equals form is the other shape `orca serve` accepts; normalize it to the internal shape.
       expect(normalizeServeModeArgv(['/AppRun', 'serve', `--${flag}=value`])).toEqual(expected)
     } else {
       // A boolean with an attached value is not a truthy assertion: the CLI reads these as
@@ -53,20 +53,19 @@ describe('serve flag parity between the CLI spec and the Electron argv rewrite',
   })
 
   it('emits the same --serve-* names the CLI spawns with and the main process reads', () => {
-    // Why source text: serveOrcaApp spawns a real process and getServeOptions is not exported, so
-    // both ends of the contract are only readable statically. Without this leg the rewrite could
-    // emit a name nothing reads and every behavioural assertion above would still pass.
+    // Why source text: serveOrcaApp spawns a real process; keeping both names visible here makes
+    // the rewrite/parser contract fail loudly if either side drifts.
     const launchSource = readFileSync(join(process.cwd(), 'src/cli/runtime/launch.ts'), 'utf8')
-    const mainSource = readFileSync(
-      join(process.cwd(), 'src/main/startup/main-process-serve.ts'),
+    const serveOptionsSource = readFileSync(
+      join(process.cwd(), 'src/main/startup/serve-options.ts'),
       'utf8'
     )
-    const start = mainSource.indexOf('export function getServeOptions(')
+    const start = serveOptionsSource.indexOf('export function getServeOptions(')
     // Why bound the anchor: an unresolved indexOf slices to EOF and passes vacuously.
     expect(start).toBeGreaterThanOrEqual(0)
-    const end = mainSource.indexOf('\n}', start)
+    const end = serveOptionsSource.indexOf('\n}', start)
     expect(end).toBeGreaterThan(start)
-    const getServeOptionsBody = mainSource.slice(start, end)
+    const getServeOptionsBody = serveOptionsSource.slice(start, end)
 
     for (const flag of translatedFlags) {
       expect(launchSource).toContain(`'--serve-${flag}'`)
diff --git a/src/main/cli/cli-command-installation.ts b/src/main/cli/cli-command-installation.ts
index fbabc3bf6dd..a3b5e9a0523 100644
--- a/src/main/cli/cli-command-installation.ts
+++ b/src/main/cli/cli-command-installation.ts
@@ -20,11 +20,9 @@ import {
 } from './cli-command-filesystem-transaction'
 import { DEV_LAUNCHER_DIR, LEGACY_LINUX_COMMAND_NAME } from './cli-install-constants'
 import { buildWindowsForwarder } from './cli-dev-launcher'
-import { isMissingError, isPermissionError } from './cli-install-errors'
+import { isPermissionError } from './cli-install-errors'
 import { isPathInsideOrEqual } from './cli-install-path-format'
 
-const STABLE_LEGACY_INSPECTION_ATTEMPTS = 3
-
 export class CliCommandInstallation extends CliCommandInspection {
   protected async installSymlink(status: CliInstallStatus): Promise<void> {
     const commandPath = status.commandPath
@@ -198,34 +196,25 @@ export class CliCommandInstallation extends CliCommandInspection {
       })
     | null
   > {
-    for (let attempt = 0; attempt < STABLE_LEGACY_INSPECTION_ATTEMPTS; attempt += 1) {
-      const before = await readEntrySnapshot(commandPath)
-      if (!before) {
-        return null
-      }
-      let target: string | null = null
-      try {
-        target = before.isSymbolicLink ? await readlink(commandPath) : null
-      } catch (error) {
-        if (isMissingError(error)) {
-          continue
-        }
-        throw error
-      }
-      const after = await readEntrySnapshot(commandPath)
-      if (after && hasSameSnapshot(before, after)) {
-        const resolvedTarget = target ? resolve(dirname(commandPath), target) : null
-        return {
-          fileSha256: null,
-          rawSymlinkTarget: target,
-          snapshot: after,
-          managed: Boolean(
-            resolvedTarget && this.isManagedLegacyLinuxTarget(resolvedTarget, launcherPath)
-          )
-        }
-      }
+    const inspected = await inspectStableCommand(commandPath, () =>
+      this.inspectSymlink(commandPath, launcherPath)
+    )
+    if (!inspected.snapshot) {
+      return null
+    }
+    const resolvedTarget = inspected.rawSymlinkTarget
+      ? resolve(dirname(commandPath), inspected.rawSymlinkTarget)
+      : inspected.status.currentTarget
+    return {
+      fileSha256: inspected.fileSha256,
+      rawSymlinkTarget: inspected.rawSymlinkTarget,
+      snapshot: inspected.snapshot,
+      managed: Boolean(
+        resolvedTarget &&
+        (this.isManagedLegacyLinuxTarget(resolvedTarget, launcherPath) ||
+          (this.appImagePath && resolve(resolvedTarget) === resolve(this.appImagePath)))
+      )
     }
-    throw new Error(`The command at ${commandPath} changed while Orca inspected it.`)
   }
 
   private async restoreQuarantinedCommand(
diff --git a/src/main/cli/cli-installer.test.ts b/src/main/cli/cli-installer.test.ts
index 1a5279644e9..51d5cf05e35 100644
--- a/src/main/cli/cli-installer.test.ts
+++ b/src/main/cli/cli-installer.test.ts
@@ -370,6 +370,56 @@ describe('CliInstaller', () => {
     }
   )
 
+  it.skipIf(process.platform === 'win32')(
+    'removes a legacy AppImage wrapper only when it names the current AppImage',
+    async () => {
+      const fixture = await makeFixture()
+      const homePath = join(fixture.root, 'home')
+      const commandDir = join(homePath, '.local', 'bin')
+      const legacyCommandPath = join(commandDir, 'orca')
+      const appImagePath = join(fixture.root, 'Orca.AppImage')
+      const foreignAppImagePath = join(fixture.root, 'Other.AppImage')
+      const cacheRootPath = join(fixture.root, 'cache')
+      await mkdir(commandDir, { recursive: true })
+      await writeFile(appImagePath, '#!/usr/bin/env bash\n', {
+        encoding: 'utf8',
+        mode: 0o755
+      })
+      await writeFile(foreignAppImagePath, '#!/usr/bin/env bash\n', {
+        encoding: 'utf8',
+        mode: 0o755
+      })
+      await writeFile(legacyCommandPath, buildLegacyAppImageCliWrapper(appImagePath), {
+        encoding: 'utf8',
+        mode: 0o755
+      })
+
+      const installer = new CliInstaller({
+        platform: 'linux',
+        isPackaged: true,
+        userDataPath: fixture.userDataPath,
+        appPath: fixture.appPath,
+        appImagePath,
+        appImageCacheRootPath: cacheRootPath,
+        appImageExtractRunner: fakeAppImageExtractRunner,
+        homePath,
+        processPathEnv: commandDir
+      })
+
+      await installer.install()
+      await expect(lstat(legacyCommandPath)).rejects.toMatchObject({ code: 'ENOENT' })
+
+      await writeFile(legacyCommandPath, buildLegacyAppImageCliWrapper(foreignAppImagePath), {
+        encoding: 'utf8',
+        mode: 0o755
+      })
+      await installer.remove()
+      await expect(readFile(legacyCommandPath, 'utf8')).resolves.toBe(
+        buildLegacyAppImageCliWrapper(foreignAppImagePath)
+      )
+    }
+  )
+
   // Why: the privilegedRunner is injectable so the EACCES→osascript path can be
   // exercised in integration without spawning osascript in unit tests.
   it.skipIf(process.platform === 'win32' || process.getuid?.() === 0)(
diff --git a/src/main/cli/packaged-cli-assets.test.ts b/src/main/cli/packaged-cli-assets.test.ts
index d5c17123ec1..1fb71e3e00f 100644
--- a/src/main/cli/packaged-cli-assets.test.ts
+++ b/src/main/cli/packaged-cli-assets.test.ts
@@ -305,6 +305,63 @@ node -e 'console.log(JSON.stringify({
       await rm(root, { recursive: true, force: true })
     }
   })
+
+  itRunsUnixShell('keeps Linux serve on the CLI entrypoint in node mode', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'orca-linux-cli-serve-'))
+    try {
+      const appDir = join(root, 'Orca')
+      const resourcesDir = join(appDir, 'resources')
+      const launcherDir = join(resourcesDir, 'bin')
+      const cliDir = join(resourcesDir, 'app.asar.unpacked', 'out', 'cli')
+      const launcherPath = join(launcherDir, 'orca-ide')
+      const appRunPath = join(appDir, 'AppRun')
+      const electronPath = join(appDir, 'orca-ide')
+      const cliPath = join(cliDir, 'index.js')
+      const statePath = join(root, 'launch-state.json')
+
+      await mkdir(launcherDir, { recursive: true })
+      await mkdir(cliDir, { recursive: true })
+      await copyFile(linuxLauncherAsset, launcherPath)
+      await writeFile(cliPath, '', 'utf8')
+      // An accidental AppRun handoff would skip CLI validation and fail this contract.
+      await writeFile(
+        appRunPath,
+        `#!/usr/bin/env bash
+printf 'unexpected AppRun handoff\n' >&2
+exit 97
+`,
+        { encoding: 'utf8', mode: 0o755 }
+      )
+      await writeFile(
+        electronPath,
+        `#!/usr/bin/env node
+require('node:fs').writeFileSync(process.env.ORCA_TEST_LAUNCH_STATE, JSON.stringify({
+  argv: process.argv.slice(2),
+  runAsNode: process.env.ELECTRON_RUN_AS_NODE ?? null
+}))
+`,
+        { encoding: 'utf8', mode: 0o755 }
+      )
+
+      await execFileAsync(launcherPath, ['serve', '--recipe-json', '--project-root', '/tmp/repo'], {
+        env: { ...process.env, ORCA_TEST_LAUNCH_STATE: statePath }
+      })
+      const payload = JSON.parse(await readFile(statePath, 'utf8')) as {
+        argv: string[]
+        runAsNode: string | null
+      }
+      expect(payload.argv).toEqual([
+        cliPath,
+        'serve',
+        '--recipe-json',
+        '--project-root',
+        '/tmp/repo'
+      ])
+      expect(payload.runAsNode).toBe('1')
+    } finally {
+      await rm(root, { recursive: true, force: true })
+    }
+  })
 })
 
 async function waitForListenerState(path: string): Promise<{ pid: number; port: number }> {
diff --git a/src/main/linux-package-downloaded-status.ts b/src/main/linux-package-downloaded-status.ts
new file mode 100644
index 00000000000..df0c9b32e6d
--- /dev/null
+++ b/src/main/linux-package-downloaded-status.ts
@@ -0,0 +1,88 @@
+import type { UpdateStatus } from '../shared/update-status-types'
+import {
+  captureLinuxPackageArtifact,
+  clearTrackedLinuxPackageArtifact,
+  getTrackedLinuxPackageArtifact
+} from './linux-package-update-recovery'
+import { getLinuxPackageType } from './linux-update-package-type'
+import type { LinuxPackageArtifact } from './linux-package-update-recovery'
+
+export const LINUX_PACKAGE_MARKER_UNUSABLE_MESSAGE =
+  'Orca could not verify the installed Linux package format, so it will not install this update automatically. Download the update from the official release page and install it manually.'
+export const LINUX_PACKAGE_EXTERNALLY_MANAGED_MESSAGE =
+  'This copy of Orca is managed by your system package manager, so Orca cannot install updates itself. Update Orca through your distribution instead.'
+export const LINUX_PACKAGE_MANUAL_INSTALL_MESSAGE =
+  'Quit Orca before running the system package install command.'
+const PACKAGE_METADATA_UNUSABLE_MESSAGE =
+  'The downloaded package metadata could not be verified. Quit Orca before downloading and installing the update from the official release page.'
+
+export function createLinuxPackageManualInstallStatus(
+  artifact: Pick<LinuxPackageArtifact, 'packageType' | 'version'>
+): UpdateStatus {
+  return {
+    state: 'error',
+    message: LINUX_PACKAGE_MANUAL_INSTALL_MESSAGE,
+    recovery: {
+      kind: 'linux-package-install',
+      packageType: artifact.packageType,
+      reason: 'manual-install-required',
+      version: artifact.version
+    }
+  }
+}
+
+export function getRetainedLinuxPackageManualInstallStatus(): UpdateStatus | null {
+  const artifact = getTrackedLinuxPackageArtifact()
+  return artifact ? createLinuxPackageManualInstallStatus(artifact) : null
+}
+
+function getActiveDownloadVersion(status: UpdateStatus): string | null {
+  if (status.state === 'downloading' || status.state === 'downloaded') {
+    return status.version
+  }
+  if (status.state === 'error' && status.recovery?.kind === 'linux-package-install') {
+    return status.recovery.version
+  }
+  return null
+}
+
+export function shouldIgnoreDownloadedUpdateEvent(
+  status: UpdateStatus,
+  infoVersion: string,
+  pendingVersion: string
+): boolean {
+  const activeDownloadVersion = getActiveDownloadVersion(status)
+  return (
+    activeDownloadVersion === null ||
+    infoVersion !== activeDownloadVersion ||
+    (pendingVersion !== '' && infoVersion !== pendingVersion)
+  )
+}
+
+export function resolveLinuxPackageDownloadedStatus(info: {
+  version: string
+}): UpdateStatus | null {
+  const packageType = getLinuxPackageType()
+  if (packageType === 'non-root') {
+    return null
+  }
+  if (packageType === 'unusable') {
+    clearTrackedLinuxPackageArtifact()
+    return {
+      state: 'error',
+      message: LINUX_PACKAGE_MARKER_UNUSABLE_MESSAGE,
+      version: info.version,
+      retryable: false
+    }
+  }
+  const artifact = captureLinuxPackageArtifact(info)
+  if (!artifact) {
+    return {
+      state: 'error',
+      message: PACKAGE_METADATA_UNUSABLE_MESSAGE,
+      version: info.version,
+      retryable: false
+    }
+  }
+  return createLinuxPackageManualInstallStatus(artifact)
+}
diff --git a/src/main/linux-package-install-command.test.ts b/src/main/linux-package-install-command.test.ts
index 368e6620fd5..c76c062bbce 100644
--- a/src/main/linux-package-install-command.test.ts
+++ b/src/main/linux-package-install-command.test.ts
@@ -252,3 +252,54 @@ describe('buildLinuxPackageInstallCommand', () => {
     })
   })
 })
+
+describe('hasTrustedPackageManagerFor', () => {
+  it('accepts a deb host that has dpkg', async () => {
+    install('/usr/bin/dpkg')
+    const { hasTrustedPackageManagerFor } = await loadCommandModule()
+    expect(hasTrustedPackageManagerFor('deb')).toBe(true)
+  })
+
+  it('accepts a deb host that has only apt', async () => {
+    install('/usr/bin/apt')
+    const { hasTrustedPackageManagerFor } = await loadCommandModule()
+    expect(hasTrustedPackageManagerFor('deb')).toBe(true)
+  })
+
+  // The #17702 case: an Arch rebuild of the .deb inherits the marker but has no deb tooling.
+  it('rejects a deb marker on a host with only pacman', async () => {
+    install('/usr/bin/pacman')
+    install('/usr/bin/sudo')
+    const { hasTrustedPackageManagerFor } = await loadCommandModule()
+    expect(hasTrustedPackageManagerFor('deb')).toBe(false)
+  })
+
+  it('rejects an rpm marker on a host with only deb tooling', async () => {
+    install('/usr/bin/dpkg')
+    install('/usr/bin/apt')
+    const { hasTrustedPackageManagerFor } = await loadCommandModule()
+    expect(hasTrustedPackageManagerFor('rpm')).toBe(false)
+  })
+
+  it('accepts each rpm-family manager on its own', async () => {
+    for (const name of ['zypper', 'dnf', 'yum', 'rpm']) {
+      vi.resetModules()
+      executables = new Map()
+      install(`/usr/bin/${name}`)
+      const { hasTrustedPackageManagerFor } = await loadCommandModule()
+      expect(hasTrustedPackageManagerFor('rpm')).toBe(true)
+    }
+  })
+
+  it('ignores a package manager outside the trusted directories', async () => {
+    install('/home/user/.local/bin/dpkg')
+    const { hasTrustedPackageManagerFor } = await loadCommandModule()
+    expect(hasTrustedPackageManagerFor('deb')).toBe(false)
+  })
+
+  it('ignores a non-executable file at a trusted path', async () => {
+    install('/usr/bin/dpkg', { mode: 0o644 })
+    const { hasTrustedPackageManagerFor } = await loadCommandModule()
+    expect(hasTrustedPackageManagerFor('deb')).toBe(false)
+  })
+})
diff --git a/src/main/linux-package-install-command.ts b/src/main/linux-package-install-command.ts
index 60a8ecdca00..728ffcd1d92 100644
--- a/src/main/linux-package-install-command.ts
+++ b/src/main/linux-package-install-command.ts
@@ -52,6 +52,16 @@ export function resolveTrustedExecutable(name: string): string | null {
   return null
 }
 
+/**
+ * Whether this host has any package manager able to install the marker's format. A repackaged
+ * install (AUR, Nix, a container rebuild) inherits the `package-type` marker from the .deb/.rpm it
+ * was built from, so the marker alone never proves the host can act on it.
+ */
+export function hasTrustedPackageManagerFor(packageType: LinuxRootPackageType): boolean {
+  const candidates = packageType === 'deb' ? DEB_PACKAGE_MANAGERS : RPM_PACKAGE_MANAGERS
+  return candidates.some((candidate) => resolveTrustedExecutable(candidate.name) !== null)
+}
+
 /**
  * Builds the interactive command the user pastes into their own terminal. Every token except the
  * package path is a fixed literal, and the path is POSIX-single-quoted — Orca never runs this.
diff --git a/src/main/linux-package-install-diagnostic.test.ts b/src/main/linux-package-install-diagnostic.test.ts
index 5b8e1b1c77b..14e82a0763b 100644
--- a/src/main/linux-package-install-diagnostic.test.ts
+++ b/src/main/linux-package-install-diagnostic.test.ts
@@ -3,7 +3,6 @@ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import type * as DiagnosticModule from './linux-package-install-diagnostic'
 
 const ESC = String.fromCharCode(27)
-
 let diagnostic: typeof DiagnosticModule
 
 beforeEach(async () => {
@@ -20,64 +19,35 @@ afterEach(() => {
 })
 
 describe('redactLinuxPackageInstallText', () => {
-  it('strips ANSI escape sequences', () => {
-    const text = `${ESC}[31mdpkg: error${ESC}[0m processing`
-    expect(diagnostic.redactLinuxPackageInstallText(text, null)).toBe('dpkg: error processing')
+  it('strips terminal escapes and control characters', () => {
+    const text = `${ESC}[?25l${ESC}[31mdpkg:\r\n\terror\u0000${ESC}[0m${ESC}[?25h`
+    expect(diagnostic.redactLinuxPackageInstallText(text, null)).toBe('dpkg: error')
   })
 
-  it('strips ANSI sequences with private and intermediate bytes', () => {
-    const text = `${ESC}[?25lworking${ESC}[?25h`
-    expect(diagnostic.redactLinuxPackageInstallText(text, null)).toBe('working')
+  it('strips string escape payloads and remaining two-byte escapes', () => {
+    const BEL = String.fromCharCode(7)
+    const text =
+      `${ESC}]8;;https://tracker.invalid/report${BEL}dpkg${ESC}]8;;${BEL} ` +
+      `${ESC}P1;2|payload${ESC}\\failed${ESC}c`
+    expect(diagnostic.redactLinuxPackageInstallText(text, null)).toBe('dpkg failed')
   })
 
-  it('replaces control characters and collapses whitespace', () => {
-    const text = `line one\r\n\tline\u0000two   spaced\u007f`
-    expect(diagnostic.redactLinuxPackageInstallText(text, null)).toBe('line one line two spaced')
-  })
-
-  it('replaces the cached package path with a placeholder', () => {
-    const packagePath = '/home/user/.cache/orca-updater/Orca-1.2.3.deb'
-    const text = `dpkg: error processing ${packagePath} (--install)`
-    expect(diagnostic.redactLinuxPackageInstallText(text, packagePath)).toBe(
-      'dpkg: error processing <package> (--install)'
-    )
-  })
-
-  it('replaces every occurrence of the package path', () => {
-    const packagePath = '/tmp/orca.deb'
-    const text = `${packagePath} failed; retry ${packagePath}`
-    expect(diagnostic.redactLinuxPackageInstallText(text, packagePath)).toBe(
-      '<package> failed; retry <package>'
-    )
-  })
-
-  it('replaces the home directory with a placeholder', () => {
-    const home = os.homedir()
-    const text = `could not read ${home}/.config/orca/settings.json`
-    expect(diagnostic.redactLinuxPackageInstallText(text, null)).toBe(
-      'could not read <home>/.config/orca/settings.json'
-    )
-  })
-
-  it('prefers the package placeholder for a path inside the home directory', () => {
+  it('replaces every cached package-path occurrence before the home directory', () => {
     const home = os.homedir()
     const packagePath = `${home}/.cache/orca-updater/Orca-1.2.3.deb`
-    expect(diagnostic.redactLinuxPackageInstallText(`install ${packagePath}`, packagePath)).toBe(
-      'install <package>'
+    const text = `${packagePath} failed; retry ${packagePath}; config ${home}/.config/orca`
+    expect(diagnostic.redactLinuxPackageInstallText(text, packagePath)).toBe(
+      '<package> failed; retry <package>; config <home>/.config/orca'
     )
   })
 
-  it('replaces the bare username with a placeholder', () => {
-    // Why: sudo names the user without any path around it, so the <home> rule never sees it.
+  it('replaces a bare username without corrupting short names', () => {
     vi.spyOn(os, 'userInfo').mockReturnValue({ username: 'devuser' } as os.UserInfo<string>)
     expect(
       diagnostic.redactLinuxPackageInstallText('devuser is not in the sudoers file', null)
     ).toBe('<user> is not in the sudoers file')
-  })
 
-  it('leaves a username shorter than three characters alone', () => {
-    // Short names would corrupt unrelated words.
-    vi.spyOn(os, 'userInfo').mockReturnValue({ username: 'ci' } as os.UserInfo<string>)
+    vi.mocked(os.userInfo).mockReturnValue({ username: 'ci' } as os.UserInfo<string>)
     expect(diagnostic.redactLinuxPackageInstallText('ci: incident in circuit', null)).toBe(
       'ci: incident in circuit'
     )
@@ -92,34 +62,23 @@ describe('redactLinuxPackageInstallText', () => {
     )
   })
 
-  it('truncates to 1024 characters', () => {
-    const result = diagnostic.redactLinuxPackageInstallText('a'.repeat(2000), null)
-    expect(result).toHaveLength(1024)
+  it('bounds the result at 1024 characters', () => {
+    expect(diagnostic.redactLinuxPackageInstallText('a'.repeat(2_000), null)).toHaveLength(1_024)
+    expect(diagnostic.redactLinuxPackageInstallText('a'.repeat(1_024), null)).toHaveLength(1_024)
   })
 
-  it('keeps text at exactly the limit', () => {
-    const result = diagnostic.redactLinuxPackageInstallText('a'.repeat(1024), null)
-    expect(result).toHaveLength(1024)
-  })
-
-  it('returns null for empty and whitespace-only input', () => {
+  it('returns null when no visible text remains', () => {
     expect(diagnostic.redactLinuxPackageInstallText('', null)).toBeNull()
     expect(diagnostic.redactLinuxPackageInstallText('   \n\t ', null)).toBeNull()
     expect(diagnostic.redactLinuxPackageInstallText(`${ESC}[0m`, null)).toBeNull()
-  })
-
-  it('returns null for null and undefined', () => {
     expect(diagnostic.redactLinuxPackageInstallText(null, null)).toBeNull()
     expect(diagnostic.redactLinuxPackageInstallText(undefined, null)).toBeNull()
   })
 
-  it('uses the message of an Error', () => {
+  it('normalizes errors, objects, and primitives', () => {
     expect(diagnostic.redactLinuxPackageInstallText(new Error('pkexec failed'), null)).toBe(
       'pkexec failed'
     )
-  })
-
-  it('serializes plain objects and other primitives', () => {
     expect(diagnostic.redactLinuxPackageInstallText({ code: 127 }, null)).toBe('{"code":127}')
     expect(diagnostic.redactLinuxPackageInstallText(127, null)).toBe('127')
   })
@@ -130,208 +89,22 @@ describe('redactLinuxPackageInstallText', () => {
     expect(diagnostic.redactLinuxPackageInstallText(circular, null)).toBeNull()
   })
 
-  it('strips an OSC hyperlink along with its URL payload', () => {
-    const BEL = String.fromCharCode(7)
-    const text = `${ESC}]8;;https://tracker.invalid/report${BEL}dpkg: error${ESC}]8;;${BEL} processing`
-    expect(diagnostic.redactLinuxPackageInstallText(text, null)).toBe('dpkg: error processing')
-  })
-
-  it('strips a string-terminated DCS sequence and a two-byte escape', () => {
-    const text = `${ESC}P1;2|payload${ESC}\\dpkg${ESC}c: error`
-    expect(diagnostic.redactLinuxPackageInstallText(text, null)).toBe('dpkg: error')
-  })
-
   it('ignores an empty package path', () => {
     expect(diagnostic.redactLinuxPackageInstallText('plain output', '')).toBe('plain output')
   })
 })
 
 describe('createUpdaterDiagnosticLogger', () => {
-  it('retains redacted error output while capturing', () => {
-    const logger = diagnostic.createUpdaterDiagnosticLogger()
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture('/tmp/orca.deb')
-    logger.error(`${ESC}[31mpkexec: /tmp/orca.deb  not authorized${ESC}[0m`)
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toEqual({
-      message: 'pkexec: <package> not authorized',
-      reason: 'authentication-denied'
-    })
-  })
-
-  it('ignores non-error levels', () => {
-    const logger = diagnostic.createUpdaterDiagnosticLogger()
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture(null)
-    logger.info('downloading')
-    logger.warn('retrying')
-    logger.debug('verbose')
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toBeNull()
-  })
-
-  it('still forwards every level to the console', () => {
+  it('forwards every updater level to the matching console method', () => {
     const logger = diagnostic.createUpdaterDiagnosticLogger()
     logger.info('a')
     logger.warn('b')
     logger.error('c')
     logger.debug('d')
+
     expect(console.info).toHaveBeenCalledWith('[autoUpdater]', 'a')
     expect(console.warn).toHaveBeenCalledWith('[autoUpdater]', 'b')
     expect(console.error).toHaveBeenCalledWith('[autoUpdater]', 'c')
     expect(console.debug).toHaveBeenCalledWith('[autoUpdater]', 'd')
   })
-
-  it('retains nothing outside a capture window', () => {
-    const logger = diagnostic.createUpdaterDiagnosticLogger()
-    logger.error('unrelated failure')
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toBeNull()
-  })
-
-  it('keeps the last usable error and ignores empty ones', () => {
-    const logger = diagnostic.createUpdaterDiagnosticLogger()
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture(null)
-    logger.error('first failure')
-    logger.error('second failure')
-    logger.error('')
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toEqual({
-      message: 'second failure',
-      reason: 'package-install-failed'
-    })
-  })
-
-  it('hands back and clears the diagnostic when capture ends', () => {
-    const logger = diagnostic.createUpdaterDiagnosticLogger()
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture(null)
-    logger.error('request dismissed')
-    expect(diagnostic.endLinuxPackageInstallDiagnosticCapture()).toEqual({
-      message: 'request dismissed',
-      reason: 'authentication-denied'
-    })
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toBeNull()
-    logger.error('later noise')
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toBeNull()
-  })
-
-  it('drops a previous attempt when a new capture begins', () => {
-    const logger = diagnostic.createUpdaterDiagnosticLogger()
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture('/tmp/a.deb')
-    logger.error('old failure')
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture('/tmp/b.deb')
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toBeNull()
-    logger.error('new failure at /tmp/b.deb')
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toEqual({
-      message: 'new failure at <package>',
-      reason: 'package-install-failed'
-    })
-  })
-
-  it('classifies the original output, not the redacted text', () => {
-    // A user named "age" turns "agent" into "<user>nt", which would hide the missing polkit agent.
-    vi.spyOn(os, 'userInfo').mockReturnValue({ username: 'age' } as os.UserInfo<string>)
-    const logger = diagnostic.createUpdaterDiagnosticLogger()
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture(null)
-    logger.error('Error executing command as another user: No authentication agent found for age.')
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toEqual({
-      message:
-        'Error executing command as another user: No authentication <user>nt found for <user>.',
-      reason: 'authentication-agent-unavailable'
-    })
-  })
-
-  it('keeps a specific verdict when a generic line follows it', () => {
-    // electron-updater logs the polkit output first, then "Command failed, exited with code 126".
-    const logger = diagnostic.createUpdaterDiagnosticLogger()
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture(null)
-    logger.error('polkit-agent-helper-1: no authentication agent found')
-    logger.error('Command failed, exited with code 126')
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toEqual({
-      message: 'polkit-agent-helper-1: no authentication agent found',
-      reason: 'authentication-agent-unavailable'
-    })
-  })
-
-  it('lets a later specific line replace an earlier one', () => {
-    const logger = diagnostic.createUpdaterDiagnosticLogger()
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture(null)
-    logger.error('no authentication agent')
-    logger.error('request dismissed')
-    expect(diagnostic.getLinuxPackageInstallDiagnostic()).toEqual({
-      message: 'request dismissed',
-      reason: 'authentication-denied'
-    })
-  })
-
-  it('returns null from an empty capture window', () => {
-    diagnostic.beginLinuxPackageInstallDiagnosticCapture(null)
-    expect(diagnostic.endLinuxPackageInstallDiagnosticCapture()).toBeNull()
-  })
-})
-
-describe('classifyLinuxPackageInstallFailure', () => {
-  it('reports a missing authentication agent', () => {
-    for (const text of [
-      'Error executing command as another user: No authentication agent found.',
-      'polkit-agent-helper: agent not found',
-      'polkit agent was not found'
-    ]) {
-      expect(diagnostic.classifyLinuxPackageInstallFailure(text)).toBe(
-        'authentication-agent-unavailable'
-      )
-    }
-  })
-
-  it('reports a denied authentication', () => {
-    for (const text of [
-      'Error executing command as another user: Request dismissed',
-      'polkit: Authentication failed',
-      'Error executing command as another user: Not authorized',
-      'Authorization failed for org.freedesktop.policykit.exec',
-      'pkexec: 3 incorrect password attempts'
-    ]) {
-      expect(diagnostic.classifyLinuxPackageInstallFailure(text)).toBe('authentication-denied')
-    }
-  })
-
-  it('prefers the agent reason when both patterns appear', () => {
-    expect(
-      diagnostic.classifyLinuxPackageInstallFailure(
-        'No authentication agent found; authentication failed'
-      )
-    ).toBe('authentication-agent-unavailable')
-  })
-
-  it('falls back to a generic failure for localized output', () => {
-    expect(
-      diagnostic.classifyLinuxPackageInstallFailure(
-        "Erreur lors de l'exécution : aucun agent d'authentification trouvé"
-      )
-    ).toBe('package-install-failed')
-  })
-
-  it('falls back to a generic failure for unrecognized and missing output', () => {
-    expect(diagnostic.classifyLinuxPackageInstallFailure('dpkg: dependency problems')).toBe(
-      'package-install-failed'
-    )
-    expect(diagnostic.classifyLinuxPackageInstallFailure(null)).toBe('package-install-failed')
-    expect(diagnostic.classifyLinuxPackageInstallFailure('')).toBe('package-install-failed')
-  })
-})
-
-describe('parseLinuxPackageInstallExitCode', () => {
-  it('parses electron-updater exit-code messages', () => {
-    expect(
-      diagnostic.parseLinuxPackageInstallExitCode(
-        new Error('Command /usr/bin/pkexec exited with code 127')
-      )
-    ).toBe(127)
-    expect(diagnostic.parseLinuxPackageInstallExitCode('Command failed exited with code 0')).toBe(0)
-  })
-
-  it('parses a negative code and matches case-insensitively', () => {
-    expect(diagnostic.parseLinuxPackageInstallExitCode('Exited With Code -1')).toBe(-1)
-  })
-
-  it('returns null when no code is present', () => {
-    expect(diagnostic.parseLinuxPackageInstallExitCode(new Error('spawn ENOENT'))).toBeNull()
-    expect(diagnostic.parseLinuxPackageInstallExitCode('exited with code abc')).toBeNull()
-    expect(diagnostic.parseLinuxPackageInstallExitCode(null)).toBeNull()
-    expect(diagnostic.parseLinuxPackageInstallExitCode({ code: 127 })).toBeNull()
-  })
 })
diff --git a/src/main/linux-package-install-diagnostic.ts b/src/main/linux-package-install-diagnostic.ts
index bdef7c5450e..c65c62679fa 100644
--- a/src/main/linux-package-install-diagnostic.ts
+++ b/src/main/linux-package-install-diagnostic.ts
@@ -1,16 +1,7 @@
 import os from 'node:os'
-import type { LinuxPackageInstallFailureReason } from '../shared/update-status-types'
-
-/** The redacted text shown locally, paired with the reason classified from the ORIGINAL output. */
-export type LinuxPackageInstallDiagnostic = {
-  message: string
-  reason: LinuxPackageInstallFailureReason
-}
 
 const MAX_DIAGNOSTIC_LENGTH = 1_024
-// Built via RegExp so the source carries no raw control bytes. Alternatives in order: CSI; then the
-// string sequences (OSC/DCS/PM/APC/SOS), whose payload — an OSC 8 hyperlink URL, say — must be
-// dropped with the introducer rather than left behind; then any remaining two-byte escape.
+// Alternatives in order: CSI; string sequences whose payload must also be dropped; remaining two-byte escapes.
 const ANSI_ESCAPE = new RegExp(
   [
     String.raw`\u001b\[[0-9;?]*[ -/]*[@-~]`,
@@ -20,28 +11,7 @@ const ANSI_ESCAPE = new RegExp(
   'g'
 )
 const CONTROL_CHARACTERS = new RegExp(String.raw`[\u0000-\u001f\u007f]`, 'g')
-
-// Why: pkexec/polkit print these before any package manager runs; matching them keeps the UI from
-// blaming dpkg for an authentication problem. Anything else stays generic on purpose.
-const AGENT_UNAVAILABLE_PATTERNS = [
-  /no authentication agent/i,
-  /polkit.{0,20}agent.{0,20}not found/i
-]
-const AUTHENTICATION_DENIED_PATTERNS = [
-  /request dismissed/i,
-  /authentication failed/i,
-  /not authorized/i,
-  /authorization failed/i,
-  /incorrect password attempt/i
-]
-
-let capturing = false
-let retainedDiagnostic: string | null = null
-// Why: classification must read the ORIGINAL text. Redaction can rewrite a pattern word — a user
-// named "age" turns "No authentication agent found" into "No authentication <user>nt" — which would
-// silently downgrade a missing-agent failure to the generic reason.
-let retainedReason: LinuxPackageInstallFailureReason | null = null
-let redactedPackagePath: string | null = null
+const MIN_REDACTED_USERNAME_LENGTH = 3
 
 function stringifyLoggerValue(value: unknown): string {
   if (typeof value === 'string') {
@@ -63,9 +33,6 @@ function stringifyLoggerValue(value: unknown): string {
   return String(value)
 }
 
-// Short names would corrupt unrelated words, so they are left alone.
-const MIN_REDACTED_USERNAME_LENGTH = 3
-
 function readUserName(): string | null {
   try {
     return os.userInfo().username || null
@@ -75,16 +42,10 @@ function readUserName(): string | null {
 }
 
 function replaceAllLiteral(text: string, needle: string, replacement: string): string {
-  if (needle.length === 0) {
-    return text
-  }
-  return text.split(needle).join(replacement)
+  return needle.length === 0 ? text : text.split(needle).join(replacement)
 }
 
-/**
- * Turns arbitrary updater/child output into text safe to show locally: no ANSI, no control bytes,
- * no home directory, no cached package path, bounded length.
- */
+/** Removes terminal escapes and local identity from updater text before showing it in the UI. */
 export function redactLinuxPackageInstallText(
   value: unknown,
   packagePath: string | null
@@ -101,7 +62,7 @@ export function redactLinuxPackageInstallText(
   if (homeDir) {
     text = replaceAllLiteral(text, homeDir, '<home>')
   }
-  // Why: sudo reports "<user> is not in the sudoers file", which the home-directory rule cannot catch.
+  // Why: privilege tools can name the user without including their home directory.
   const userName = readUserName()
   if (userName && userName.length >= MIN_REDACTED_USERNAME_LENGTH) {
     text = replaceAllLiteral(text, userName, '<user>')
@@ -113,97 +74,16 @@ export function redactLinuxPackageInstallText(
   return text.length > MAX_DIAGNOSTIC_LENGTH ? text.slice(0, MAX_DIAGNOSTIC_LENGTH) : text
 }
 
-/** Starts retaining redacted error output for one native root-package install attempt. */
-export function beginLinuxPackageInstallDiagnosticCapture(packagePath: string | null): void {
-  capturing = true
-  retainedDiagnostic = null
-  retainedReason = null
-  redactedPackagePath = packagePath
-}
-
-/** Stops capture and hands back the retained diagnostic, clearing it for the next attempt. */
-export function endLinuxPackageInstallDiagnosticCapture(): LinuxPackageInstallDiagnostic | null {
-  const captured = getLinuxPackageInstallDiagnostic()
-  capturing = false
-  retainedDiagnostic = null
-  retainedReason = null
-  redactedPackagePath = null
-  return captured
-}
-
-export function getLinuxPackageInstallDiagnostic(): LinuxPackageInstallDiagnostic | null {
-  return retainedDiagnostic === null
-    ? null
-    : { message: retainedDiagnostic, reason: retainedReason ?? 'package-install-failed' }
-}
-
-function recordLinuxPackageInstallDiagnostic(value: unknown): void {
-  if (!capturing) {
-    return
-  }
-  const raw = stringifyLoggerValue(value)
-  const redacted = redactLinuxPackageInstallText(raw, redactedPackagePath)
-  if (!redacted) {
-    return
-  }
-  const reason = classifyLinuxPackageInstallFailure(raw)
-  // Why: electron-updater logs the polkit output first and a generic "exited with code N" line after,
-  // so a later generic line must not erase the specific verdict the card branches on.
-  if (
-    reason === 'package-install-failed' &&
-    retainedReason !== null &&
-    retainedReason !== 'package-install-failed'
-  ) {
-    return
-  }
-  retainedDiagnostic = redacted
-  retainedReason = reason
-}
-
-/**
- * The `autoUpdater.logger`. Every level still reaches the same console method; only error output
- * during an in-flight root-package install is retained, redacted, for the recovery card.
- */
 export function createUpdaterDiagnosticLogger(): {
-  info: (m: unknown) => void
-  warn: (m: unknown) => void
-  error: (m: unknown) => void
-  debug: (m: unknown) => void
+  info: (message: unknown) => void
+  warn: (message: unknown) => void
+  error: (message: unknown) => void
+  debug: (message: unknown) => void
 } {
   return {
-    info: (m: unknown) => console.info('[autoUpdater]', m),
-    warn: (m: unknown) => console.warn('[autoUpdater]', m),
-    error: (m: unknown) => {
-      recordLinuxPackageInstallDiagnostic(m)
-      console.error('[autoUpdater]', m)
-    },
-    debug: (m: unknown) => console.debug('[autoUpdater]', m)
+    info: (message) => console.info('[autoUpdater]', message),
+    warn: (message) => console.warn('[autoUpdater]', message),
+    error: (message) => console.error('[autoUpdater]', message),
+    debug: (message) => console.debug('[autoUpdater]', message)
   }
 }
-
-export function classifyLinuxPackageInstallFailure(
-  diagnostic: string | null
-): LinuxPackageInstallFailureReason {
-  if (!diagnostic) {
-    return 'package-install-failed'
-  }
-  if (AGENT_UNAVAILABLE_PATTERNS.some((pattern) => pattern.test(diagnostic))) {
-    return 'authentication-agent-unavailable'
-  }
-  if (AUTHENTICATION_DENIED_PATTERNS.some((pattern) => pattern.test(diagnostic))) {
-    return 'authentication-denied'
-  }
-  // Localized or unrecognized output must never be reported as a missing agent.
-  return 'package-install-failed'
-}
-
-/** Parses the child exit status out of electron-updater's `Command <x> exited with code <n>`. */
-export function parseLinuxPackageInstallExitCode(error: unknown): number | null {
-  const message = error instanceof Error ? error.message : typeof error === 'string' ? error : ''
-  const match = /exited with code (-?\d{1,5})\b/i.exec(message)
-  if (!match) {
-    return null
-  }
-  const code = Number.parseInt(match[1], 10)
-  return Number.isFinite(code) ? code : null
-}
diff --git a/src/main/linux-package-update-recovery.test.ts b/src/main/linux-package-update-recovery.test.ts
index ec2738b823b..859e80e74b2 100644
--- a/src/main/linux-package-update-recovery.test.ts
+++ b/src/main/linux-package-update-recovery.test.ts
@@ -5,18 +5,14 @@ import path from 'node:path'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import type * as NodeFs from 'node:fs'
 import type { LinuxPackageInstallRecovery } from '../shared/update-status-types'
+import type { LinuxPackageArtifact } from './linux-package-update-recovery'
 import type * as RecoveryModule from './linux-package-update-recovery'
 
-const { showItemInFolderMock, getPackageTypeMock, buildCommandMock, hashPasses } = vi.hoisted(
-  () => ({
-    showItemInFolderMock: vi.fn(),
-    getPackageTypeMock: vi.fn(),
-    buildCommandMock: vi.fn(),
-    hashPasses: { count: 0 }
-  })
-)
-
-vi.mock('electron', () => ({ shell: { showItemInFolder: showItemInFolderMock } }))
+const { getPackageTypeMock, buildCommandMock, hashPasses } = vi.hoisted(() => ({
+  getPackageTypeMock: vi.fn(),
+  buildCommandMock: vi.fn(),
+  hashPasses: { count: 0 }
+}))
 
 vi.mock('./linux-update-package-type', () => ({ getLinuxRootPackageType: getPackageTypeMock }))
 
@@ -67,9 +63,9 @@ async function writePackage(name: string, contents = PAYLOAD): Promise<string> {
 }
 
 /** Captures a well-formed downloaded event unless a field is overridden. */
-function capture(overrides: Record<string, unknown> = {}): void {
+function capture(overrides: Record<string, unknown> = {}): LinuxPackageArtifact | null {
   const downloadedFile = (overrides.downloadedFile ?? path.join(downloadDir, 'orca.deb')) as string
-  recovery.captureLinuxPackageArtifact({
+  return recovery.captureLinuxPackageArtifact({
     version: VERSION,
     files: [{ url: path.basename(downloadedFile), sha512: SHA512 }],
     ...overrides,
@@ -80,7 +76,6 @@ function capture(overrides: Record<string, unknown> = {}): void {
 beforeEach(async () => {
   vi.resetModules()
   hashPasses.count = 0
-  showItemInFolderMock.mockReset()
   getPackageTypeMock.mockReset().mockReturnValue('deb')
   buildCommandMock.mockReset().mockReturnValue({ ok: true, command: 'installed command' })
   tempRoot = await fsp.mkdtemp(path.join(os.tmpdir(), 'orca-recovery-'))
@@ -103,13 +98,14 @@ afterEach(async () => {
 
 describe('captureLinuxPackageArtifact', () => {
   it('retains the downloaded package with the digest from the event metadata', () => {
-    capture()
-    expect(recovery.getTrackedLinuxPackageArtifact()).toEqual({
+    const artifact = {
       packageType: 'deb',
       version: VERSION,
       path: path.join(downloadDir, 'orca.deb'),
       sha512: SHA512
-    })
+    } satisfies LinuxPackageArtifact
+    expect(capture()).toEqual(artifact)
+    expect(recovery.getTrackedLinuxPackageArtifact()).toEqual(artifact)
   })
 
   it('ignores the event on a build that is not a root package', () => {
@@ -221,7 +217,7 @@ describe('captureLinuxPackageArtifact', () => {
 
   it('keeps a retained artifact when a later event carries a malformed digest', () => {
     capture()
-    capture({ files: [{ url: 'orca.deb', sha512: 'not-a-digest' }] })
+    expect(capture({ files: [{ url: 'orca.deb', sha512: 'not-a-digest' }] })).toBeNull()
     expect(recovery.getTrackedLinuxPackageArtifact()?.sha512).toBe(SHA512)
   })
 
@@ -596,7 +592,7 @@ describePosix('validation coalescing', () => {
     capture()
     const [first, second] = await Promise.all([
       recovery.resolveLinuxPackageInstallInstructions(recoveryFor()),
-      recovery.revealLinuxPackage(recoveryFor())
+      recovery.resolveLinuxPackageRevealTarget(recoveryFor())
     ])
     expect(first.ok).toBe(true)
     expect(second.ok).toBe(true)
@@ -611,31 +607,6 @@ describePosix('validation coalescing', () => {
     expect(hashPasses.count).toBe(2)
   })
 
-  // Why: a verdict handed to a root package manager must cover the bytes as of the click, not the
-  // bytes a Copy click started streaming seconds earlier.
-  it('never reuses an in-flight pass for a pre-install re-proof', async () => {
-    await writePackage('orca.deb')
-    capture()
-    const artifact = recovery.getTrackedLinuxPackageArtifact()
-    const copyPass = recovery.resolveLinuxPackageInstallInstructions(recoveryFor())
-    const installPass = recovery.revalidateLinuxPackageForInstall(artifact!)
-
-    await expect(installPass).resolves.toEqual({ ok: true })
-    await expect(copyPass).resolves.toMatchObject({ ok: true })
-    expect(hashPasses.count).toBe(2)
-  })
-
-  it('lets a later Copy click join the pre-install pass', async () => {
-    await writePackage('orca.deb')
-    capture()
-    const artifact = recovery.getTrackedLinuxPackageArtifact()
-    const installPass = recovery.revalidateLinuxPackageForInstall(artifact!)
-    const copyPass = recovery.resolveLinuxPackageInstallInstructions(recoveryFor())
-
-    await Promise.all([installPass, copyPass])
-    expect(hashPasses.count).toBe(1)
-  })
-
   it('does not reuse an in-flight pass for a different artifact', async () => {
     await writePackage('orca.deb')
     await writePackage('orca-next.deb')
@@ -652,77 +623,43 @@ describePosix('validation coalescing', () => {
     await Promise.all([first, second])
     expect(hashPasses.count).toBe(2)
   })
-})
 
-describePosix('revalidateLinuxPackageForInstall', () => {
-  it('proves the retained package still matches its release digest', async () => {
+  it('starts a fresh proof when the same package is captured again', async () => {
     await writePackage('orca.deb')
     capture()
-    const artifact = recovery.getTrackedLinuxPackageArtifact()
-    await expect(recovery.revalidateLinuxPackageForInstall(artifact!)).resolves.toEqual({
-      ok: true
-    })
-  })
-
-  it('rejects a package swapped after the download was verified', async () => {
-    await writePackage('orca.deb')
+    const first = recovery.resolveLinuxPackageInstallInstructions(recoveryFor())
     capture()
-    const artifact = recovery.getTrackedLinuxPackageArtifact()
-    await writePackage('orca.deb', 'attacker supplied package')
-    await expect(recovery.revalidateLinuxPackageForInstall(artifact!)).resolves.toEqual({
-      ok: false,
-      reason: 'hash-mismatch'
-    })
-  })
+    const second = recovery.resolveLinuxPackageInstallInstructions(recoveryFor())
 
-  it('reports a package deleted from the cache as missing', async () => {
-    const filePath = await writePackage('orca.deb')
-    capture()
-    const artifact = recovery.getTrackedLinuxPackageArtifact()
-    await fsp.rm(filePath)
-    await expect(recovery.revalidateLinuxPackageForInstall(artifact!)).resolves.toEqual({
-      ok: false,
-      reason: 'missing'
-    })
+    await Promise.all([first, second])
+    expect(hashPasses.count).toBe(2)
   })
 })
 
-describePosix('revealLinuxPackage', () => {
-  it('reveals a verified package on the machine that owns it', async () => {
+describePosix('resolveLinuxPackageRevealTarget', () => {
+  it('returns the verified package path', async () => {
     const filePath = await writePackage('orca.deb')
     capture()
-    await expect(recovery.revealLinuxPackage(recoveryFor())).resolves.toEqual({ ok: true })
-    expect(showItemInFolderMock).toHaveBeenCalledWith(filePath)
+    await expect(recovery.resolveLinuxPackageRevealTarget(recoveryFor())).resolves.toEqual({
+      ok: true,
+      path: filePath
+    })
   })
 
-  it('does not reveal a package that fails validation', async () => {
+  it('rejects a package that fails validation', async () => {
     const filePath = await writePackage('orca.deb')
     capture()
     await fsp.writeFile(filePath, 'tampered payload')
-    await expect(recovery.revealLinuxPackage(recoveryFor())).resolves.toEqual({
+    await expect(recovery.resolveLinuxPackageRevealTarget(recoveryFor())).resolves.toEqual({
       ok: false,
       reason: 'hash-mismatch'
     })
-    expect(showItemInFolderMock).not.toHaveBeenCalled()
   })
 
-  it('reports read-failed when the desktop file manager throws', async () => {
-    await writePackage('orca.deb')
-    capture()
-    showItemInFolderMock.mockImplementation(() => {
-      throw new Error('no file manager available')
-    })
-    await expect(recovery.revealLinuxPackage(recoveryFor())).resolves.toEqual({
-      ok: false,
-      reason: 'read-failed'
-    })
-  })
-
-  it('does not reveal anything without a retained artifact', async () => {
-    await expect(recovery.revealLinuxPackage(recoveryFor())).resolves.toEqual({
+  it('returns missing without a retained artifact', async () => {
+    await expect(recovery.resolveLinuxPackageRevealTarget(recoveryFor())).resolves.toEqual({
       ok: false,
       reason: 'missing'
     })
-    expect(showItemInFolderMock).not.toHaveBeenCalled()
   })
 })
diff --git a/src/main/linux-package-update-recovery.ts b/src/main/linux-package-update-recovery.ts
index e5269a2077b..e0bf530bb65 100644
--- a/src/main/linux-package-update-recovery.ts
+++ b/src/main/linux-package-update-recovery.ts
@@ -3,7 +3,6 @@ import { createReadStream } from 'node:fs'
 import fsp from 'node:fs/promises'
 import os from 'node:os'
 import path from 'node:path'
-import { shell } from 'electron'
 import type {
   LinuxPackageInstallRecovery,
   LinuxRootPackageType
@@ -36,7 +35,7 @@ export type LinuxPackageInstructionsResult =
   | { ok: false; reason: LinuxPackageRecoveryUnavailableReason }
 
 export type LinuxPackageRevealResult =
-  | { ok: true }
+  | { ok: true; path: string }
   | { ok: false; reason: LinuxPackageRecoveryUnavailableReason }
 
 type ValidationResult =
@@ -45,7 +44,7 @@ type ValidationResult =
 
 let trackedArtifact: LinuxPackageArtifact | null = null
 // Why: the renderer debounces clicks, but the IPC boundary must not allow parallel hashing of a 160 MB package.
-let inFlightValidation: { key: string; promise: Promise<ValidationResult> } | null = null
+const inFlightValidations = new WeakMap<LinuxPackageArtifact, Promise<ValidationResult>>()
 
 export function getTrackedLinuxPackageArtifact(): LinuxPackageArtifact | null {
   return trackedArtifact
@@ -117,24 +116,24 @@ function resolveExpectedSha512(
 }
 
 /**
- * Retains the verified download so a failed root-package install stays recoverable without paying
- * for the 160 MB transfer again. Only the in-memory event metadata is trusted for the digest.
+ * Retains the downloaded package and its release digest so manual actions do not repeat the 160 MB
+ * transfer. Only the in-memory event metadata is trusted for the digest.
  */
-export function captureLinuxPackageArtifact(event: unknown): void {
+export function captureLinuxPackageArtifact(event: unknown): LinuxPackageArtifact | null {
   const packageType = getLinuxRootPackageType()
   if (!packageType) {
-    return
+    return null
   }
   const downloadedFile = (event as { downloadedFile?: unknown })?.downloadedFile
   const version = (event as { version?: unknown })?.version
   if (typeof downloadedFile !== 'string' || !path.isAbsolute(downloadedFile)) {
-    return
+    return null
   }
   if (!downloadedFile.toLowerCase().endsWith(`.${packageType}`)) {
-    return
+    return null
   }
   if (typeof version !== 'string' || version.length === 0) {
-    return
+    return null
   }
   const sha512 = resolveExpectedSha512(
     (event as { files?: unknown })?.files,
@@ -147,9 +146,11 @@ export function captureLinuxPackageArtifact(event: unknown): void {
     // Why: an unresolvable digest only means THIS event cannot arm recovery. A previously retained
     // artifact carries its own digest and is revalidated on every use, so dropping it would force a
     // needless 160 MB redownload of a file that is still on disk and still verifiable.
-    return
+    return null
   }
-  trackedArtifact = { packageType, version, path: downloadedFile, sha512 }
+  const artifact = { packageType, version, path: downloadedFile, sha512 }
+  trackedArtifact = artifact
+  return artifact
 }
 
 function isInsideDirectory(root: string, target: string): boolean {
@@ -244,26 +245,18 @@ async function validateArtifact(artifact: LinuxPackageArtifact): Promise<Validat
   }
 }
 
-/**
- * Hashes the artifact, joining an identical pass already in flight. `fresh` opts out of that reuse:
- * a verdict that reaches a root installer must cover the bytes as of this call, not as of whenever
- * some earlier Copy/Show click started streaming.
- */
-function runValidation(
-  artifact: LinuxPackageArtifact,
-  options?: { fresh?: boolean }
-): Promise<ValidationResult> {
-  const key = `${artifact.packageType}:${artifact.version}:${artifact.path}:${artifact.sha512}`
-  if (!options?.fresh && inFlightValidation?.key === key) {
-    return inFlightValidation.promise
+/** Hashes the exact captured artifact, joining only that capture's in-flight proof. */
+function runValidation(artifact: LinuxPackageArtifact): Promise<ValidationResult> {
+  const inFlight = inFlightValidations.get(artifact)
+  if (inFlight) {
+    return inFlight
   }
   const promise: Promise<ValidationResult> = validateArtifact(artifact).finally(() => {
-    // Why: identity, not key — a fresh install pass may already have replaced this entry.
-    if (inFlightValidation?.promise === promise) {
-      inFlightValidation = null
+    if (inFlightValidations.get(artifact) === promise) {
+      inFlightValidations.delete(artifact)
     }
   })
-  inFlightValidation = { key, promise }
+  inFlightValidations.set(artifact, promise)
   return promise
 }
 
@@ -305,38 +298,12 @@ export async function resolveLinuxPackageInstallInstructions(
   }
 }
 
-/**
- * Re-proves the retained package immediately before the privileged installer consumes it.
- *
- * The cache path is user-writable, so a digest checked when the download finished says nothing
- * about the bytes `dpkg -i` will read minutes later. Re-hashing here does not close the race —
- * only an immutable handoff would — but it shrinks the window from "since the download" to
- * "since this call", and it catches the artifact being swapped or deleted outright. Takes the
- * artifact rather than a recovery so both the retry and the plain "Restart to Update" install
- * are covered.
- */
-export async function revalidateLinuxPackageForInstall(
-  artifact: LinuxPackageArtifact
-): Promise<{ ok: true } | { ok: false; reason: LinuxPackageRecoveryUnavailableReason }> {
-  const validation = await runValidation(artifact, { fresh: true })
-  return validation.ok ? { ok: true } : { ok: false, reason: validation.reason }
-}
-
-export async function revealLinuxPackage(
+export async function resolveLinuxPackageRevealTarget(
   recovery: LinuxPackageInstallRecovery
 ): Promise<LinuxPackageRevealResult> {
   const validation = await validateTrackedArtifact(recovery)
   if (!validation.ok) {
     return validation
   }
-  // Why: this cache path must not travel through the workspace shell:openPath API, whose execution
-  // host can be an SSH or WSL machine rather than the one that owns the installed package.
-  try {
-    shell.showItemInFolder(validation.artifact.path)
-  } catch {
-    // Why: every other failure in this module reports through {ok:false}; a raw throw here would
-    // reject the IPC with an unredacted message and skip the lifecycle record.
-    return { ok: false, reason: 'read-failed' }
-  }
-  return { ok: true }
+  return { ok: true, path: validation.artifact.path }
 }
diff --git a/src/main/linux-update-package-type.test.ts b/src/main/linux-update-package-type.test.ts
index 2a2858c2c68..7453c727bb8 100644
--- a/src/main/linux-update-package-type.test.ts
+++ b/src/main/linux-update-package-type.test.ts
@@ -2,16 +2,38 @@ import fsp from 'node:fs/promises'
 import os from 'node:os'
 import path from 'node:path'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { LinuxPackageType, LinuxRootPackageType } from './linux-update-package-type'
 
-const { appMock } = vi.hoisted(() => ({ appMock: { isPackaged: true } }))
+const { appMock, hasTrustedPackageManagerForMock } = vi.hoisted(() => ({
+  appMock: { isPackaged: true },
+  hasTrustedPackageManagerForMock: vi.fn(() => true)
+}))
 
 vi.mock('electron', () => ({ app: appMock }))
+vi.mock('./linux-package-install-command', () => ({
+  hasTrustedPackageManagerFor: hasTrustedPackageManagerForMock
+}))
 
 const originalPlatform = process.platform
 const originalResourcesPath = process.resourcesPath as string | undefined
+const originalExecPath = process.execPath
+const originalAppImage = process.env.APPIMAGE
+const originalAppDir = process.env.APPDIR
 
 let resourcesDir: string
 
+type PackageTypeModule = {
+  getLinuxPackageType: () => LinuxPackageType
+  getLinuxRootPackageType: () => LinuxRootPackageType | null
+  isExternallyManagedLinuxInstall: () => boolean
+  isLegacyAppImageRuntimeIdentity: (identity: {
+    appImagePath: unknown
+    appDirPath: unknown
+    execPath: unknown
+    resourcesPath: unknown
+  }) => boolean
+}
+
 function setPlatform(platform: string): void {
   Object.defineProperty(process, 'platform', { configurable: true, value: platform })
 }
@@ -20,19 +42,25 @@ function setResourcesPath(value: unknown): void {
   Object.defineProperty(process, 'resourcesPath', { configurable: true, value })
 }
 
+function setExecPath(value: string): void {
+  Object.defineProperty(process, 'execPath', { configurable: true, value })
+}
+
 async function writeMarker(contents: string): Promise<void> {
   await fsp.writeFile(path.join(resourcesDir, 'package-type'), contents, 'utf8')
 }
 
-async function loadPackageType(): Promise<() => 'deb' | 'rpm' | null> {
-  const module = await import('./linux-update-package-type')
-  return module.getLinuxRootPackageType
+async function loadPackageType(): Promise<PackageTypeModule> {
+  return import('./linux-update-package-type')
 }
 
 beforeEach(async () => {
   vi.resetModules()
+  hasTrustedPackageManagerForMock.mockReset().mockReturnValue(true)
   vi.spyOn(console, 'warn').mockImplementation(() => {})
   appMock.isPackaged = true
+  delete process.env.APPIMAGE
+  delete process.env.APPDIR
   setPlatform('linux')
   resourcesDir = await fsp.mkdtemp(path.join(os.tmpdir(), 'orca-package-type-'))
   setResourcesPath(resourcesDir)
@@ -42,140 +70,297 @@ afterEach(async () => {
   vi.restoreAllMocks()
   setPlatform(originalPlatform)
   setResourcesPath(originalResourcesPath)
+  setExecPath(originalExecPath)
+  if (originalAppImage === undefined) {
+    delete process.env.APPIMAGE
+  } else {
+    process.env.APPIMAGE = originalAppImage
+  }
+  if (originalAppDir === undefined) {
+    delete process.env.APPDIR
+  } else {
+    process.env.APPDIR = originalAppDir
+  }
   await fsp.rm(resourcesDir, { recursive: true, force: true })
 })
 
 describe('getLinuxRootPackageType', () => {
   it('reads a deb marker', async () => {
     await writeMarker('deb')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBe('deb')
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('deb')
+    expect(module.getLinuxRootPackageType()).toBe('deb')
   })
 
   it('reads an rpm marker', async () => {
     await writeMarker('rpm')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBe('rpm')
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('rpm')
+    expect(module.getLinuxRootPackageType()).toBe('rpm')
   })
 
   it('trims surrounding whitespace', async () => {
     await writeMarker('\n  rpm \t\n')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBe('rpm')
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('rpm')
+    expect(module.getLinuxRootPackageType()).toBe('rpm')
   })
 
   it('treats the AppImage marker as not a root package', async () => {
     await writeMarker('AppImage')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('non-root')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
-  it('treats an unknown marker value as not a root package', async () => {
+  it('treats an unknown marker value as unusable', async () => {
     await writeMarker('snap')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
-  it('treats a pacman marker as a recognized but unsupported target', async () => {
+  it('treats a pacman marker as unusable until recovery supports it', async () => {
     const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
     await writeMarker('pacman')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
-    expect(warn).not.toHaveBeenCalled()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
+    expect(warn).toHaveBeenCalledTimes(1)
   })
 
   it('rejects a marker that only differs by case', async () => {
     await writeMarker('DEB')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
-  it('returns null when the marker is missing', async () => {
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+  it('uses a legacy AppImage identity when its executable and resources are inside APPDIR', async () => {
+    process.env.APPIMAGE = '/opt/orca/orca.AppImage'
+    process.env.APPDIR = '/tmp/.mount_orca'
+    setExecPath('/tmp/.mount_orca/orca')
+    setResourcesPath('/tmp/.mount_orca/resources')
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('non-root')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
-  it('returns null when the marker is unreadable', async () => {
+  it.each([
+    ['relative APPIMAGE', 'relative/orca.AppImage', '/tmp/.mount_orca'],
+    ['relative APPDIR', '/opt/orca/orca.AppImage', 'relative/.mount_orca']
+  ])('rejects a legacy identity with %s', async (_label, appImagePath, appDirPath) => {
+    process.env.APPIMAGE = appImagePath
+    process.env.APPDIR = appDirPath
+    setExecPath('/tmp/.mount_orca/orca')
+    setResourcesPath('/tmp/.mount_orca/resources')
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
+  })
+
+  it.each([
+    ['executable', '/tmp/.mount_orca-shadow/orca', '/tmp/.mount_orca/resources'],
+    ['resources', '/tmp/.mount_orca/orca', '/tmp/.mount_orca-shadow/resources']
+  ])(
+    'rejects a prefix-collision outside APPDIR for %s',
+    async (_label, execPath, resourcesPath) => {
+      process.env.APPIMAGE = '/opt/orca/orca.AppImage'
+      process.env.APPDIR = '/tmp/.mount_orca'
+      setExecPath(execPath)
+      setResourcesPath(resourcesPath)
+      const module = await loadPackageType()
+      expect(module.getLinuxPackageType()).toBe('unusable')
+      expect(module.getLinuxRootPackageType()).toBeNull()
+    }
+  )
+
+  it('rejects NULs in every legacy AppImage identity path', async () => {
+    const { isLegacyAppImageRuntimeIdentity } = await loadPackageType()
+    const identity = {
+      appImagePath: '/opt/orca/orca.AppImage',
+      appDirPath: '/tmp/.mount_orca',
+      execPath: '/tmp/.mount_orca/orca',
+      resourcesPath: '/tmp/.mount_orca/resources'
+    }
+
+    for (const field of Object.keys(identity) as (keyof typeof identity)[]) {
+      expect(
+        isLegacyAppImageRuntimeIdentity({ ...identity, [field]: `${identity[field]}\0suffix` })
+      ).toBe(false)
+    }
+  })
+
+  it('requires every legacy AppImage identity path to be absolute', async () => {
+    const { isLegacyAppImageRuntimeIdentity } = await loadPackageType()
+    const identity = {
+      appImagePath: '/opt/orca/orca.AppImage',
+      appDirPath: '/tmp/.mount_orca',
+      execPath: '/tmp/.mount_orca/orca',
+      resourcesPath: '/tmp/.mount_orca/resources'
+    }
+
+    for (const field of Object.keys(identity) as (keyof typeof identity)[]) {
+      expect(isLegacyAppImageRuntimeIdentity({ ...identity, [field]: 'relative/path' })).toBe(false)
+    }
+  })
+
+  it('prefers a package marker over an invalid legacy AppImage identity', async () => {
+    await writeMarker('deb')
+    process.env.APPIMAGE = 'relative/orca.AppImage'
+    process.env.APPDIR = 'relative/.mount_orca'
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('deb')
+    expect(module.getLinuxRootPackageType()).toBe('deb')
+  })
+
+  it('returns unusable when the marker is missing without AppImage identity', async () => {
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
+  })
+
+  it('returns unusable when the marker is unreadable', async () => {
     // A directory in the marker's place makes readFileSync fail with EISDIR.
     await fsp.mkdir(path.join(resourcesDir, 'package-type'))
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
-  it('returns null when resourcesPath is unavailable', async () => {
+  it('returns unusable when resourcesPath is unavailable', async () => {
     setResourcesPath(undefined)
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
-  it('returns null when resourcesPath is empty', async () => {
+  it('returns unusable when resourcesPath is empty', async () => {
     setResourcesPath('')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
   it('ignores a readable marker in an unpackaged dev run', async () => {
     await writeMarker('deb')
     appMock.isPackaged = false
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('non-root')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
   it('ignores a readable marker off Linux', async () => {
     await writeMarker('deb')
     setPlatform('darwin')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('non-root')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
   it('caches the resolved type for the process lifetime', async () => {
     await writeMarker('deb')
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBe('deb')
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('deb')
+    expect(module.getLinuxRootPackageType()).toBe('deb')
     await writeMarker('rpm')
-    expect(getLinuxRootPackageType()).toBe('deb')
+    expect(module.getLinuxPackageType()).toBe('deb')
+    expect(module.getLinuxRootPackageType()).toBe('deb')
   })
 
-  it('caches a resolved null so a later marker is not picked up', async () => {
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+  it('caches an unusable result so a later marker is not picked up', async () => {
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
     await writeMarker('deb')
-    expect(getLinuxRootPackageType()).toBeNull()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
   })
 
   it('warns about an unknown marker value', async () => {
     const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
     await writeMarker('snap')
-    const getLinuxRootPackageType = await loadPackageType()
-    getLinuxRootPackageType()
+    const module = await loadPackageType()
+    module.getLinuxPackageType()
     expect(warn).toHaveBeenCalledTimes(1)
-    expect(warn.mock.calls[0][0]).toContain('marker is not deb or rpm')
+    expect(warn.mock.calls[0][0]).toContain('marker is not AppImage, deb, or rpm')
   })
 
   it('reads the marker once and warns once per process', async () => {
     const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
     // A directory in place of the marker is readable-but-unusable, which is the case worth reporting.
     await fsp.mkdir(path.join(resourcesDir, 'package-type'))
-    const getLinuxRootPackageType = await loadPackageType()
-    getLinuxRootPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
+    const module = await loadPackageType()
+    module.getLinuxPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
     expect(warn).toHaveBeenCalledTimes(1)
     expect(warn.mock.calls[0][0]).toContain('marker unreadable')
   })
 
-  // Why: AppImage ships no marker at all, so the normal case must stay silent.
-  it('stays silent when no marker is present', async () => {
+  it('warns when a packaged marker is missing', async () => {
     const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
-    const getLinuxRootPackageType = await loadPackageType()
-    expect(getLinuxRootPackageType()).toBeNull()
-    expect(warn).not.toHaveBeenCalled()
+    const module = await loadPackageType()
+    expect(module.getLinuxPackageType()).toBe('unusable')
+    expect(module.getLinuxRootPackageType()).toBeNull()
+    expect(warn).toHaveBeenCalledWith(expect.stringContaining('marker missing'))
   })
 
   it('does not warn in a dev run', async () => {
     const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
     appMock.isPackaged = false
-    const getLinuxRootPackageType = await loadPackageType()
-    getLinuxRootPackageType()
+    const module = await loadPackageType()
+    module.getLinuxPackageType()
     expect(warn).not.toHaveBeenCalled()
   })
 })
+
+describe('isExternallyManagedLinuxInstall', () => {
+  // The #17702 case: an AUR/Nix/container rebuild of the .deb inherits `package-type` verbatim.
+  it('reports a deb marker with no deb package manager as externally managed', async () => {
+    hasTrustedPackageManagerForMock.mockReturnValue(false)
+    await writeMarker('deb')
+    const module = await loadPackageType()
+    expect(module.isExternallyManagedLinuxInstall()).toBe(true)
+    expect(hasTrustedPackageManagerForMock).toHaveBeenCalledWith('deb')
+  })
+
+  it('reports an rpm marker with no rpm package manager as externally managed', async () => {
+    hasTrustedPackageManagerForMock.mockReturnValue(false)
+    await writeMarker('rpm')
+    const module = await loadPackageType()
+    expect(module.isExternallyManagedLinuxInstall()).toBe(true)
+    expect(hasTrustedPackageManagerForMock).toHaveBeenCalledWith('rpm')
+  })
+
+  it('leaves a real deb host self-updatable', async () => {
+    await writeMarker('deb')
+    const module = await loadPackageType()
+    expect(module.isExternallyManagedLinuxInstall()).toBe(false)
+  })
+
+  it('never probes the host for an AppImage install', async () => {
+    hasTrustedPackageManagerForMock.mockReturnValue(false)
+    await writeMarker('AppImage')
+    const module = await loadPackageType()
+    expect(module.isExternallyManagedLinuxInstall()).toBe(false)
+    expect(hasTrustedPackageManagerForMock).not.toHaveBeenCalled()
+  })
+
+  it('never probes the host for an unusable marker', async () => {
+    hasTrustedPackageManagerForMock.mockReturnValue(false)
+    await writeMarker('snap')
+    const module = await loadPackageType()
+    expect(module.isExternallyManagedLinuxInstall()).toBe(false)
+    expect(hasTrustedPackageManagerForMock).not.toHaveBeenCalled()
+  })
+
+  it('probes the host at most once per process', async () => {
+    hasTrustedPackageManagerForMock.mockReturnValue(false)
+    await writeMarker('deb')
+    const module = await loadPackageType()
+    module.isExternallyManagedLinuxInstall()
+    module.isExternallyManagedLinuxInstall()
+    module.isExternallyManagedLinuxInstall()
+    expect(hasTrustedPackageManagerForMock).toHaveBeenCalledTimes(1)
+  })
+})
diff --git a/src/main/linux-update-package-type.ts b/src/main/linux-update-package-type.ts
index 5acc83a4cf3..f58c6cf16ad 100644
--- a/src/main/linux-update-package-type.ts
+++ b/src/main/linux-update-package-type.ts
@@ -1,57 +1,136 @@
 import { readFileSync } from 'node:fs'
 import path from 'node:path'
 import { app } from 'electron'
+import { hasTrustedPackageManagerFor } from './linux-package-install-command'
 import type { LinuxRootPackageType } from '../shared/update-status-types'
 
 export type { LinuxRootPackageType }
 
-// Why: `undefined` means "not resolved yet"; `null` is a resolved "not a root package".
-let cachedPackageType: LinuxRootPackageType | null | undefined
+/** The packaged Linux format that controls how updates may be installed. */
+export type LinuxPackageType = LinuxRootPackageType | 'non-root' | 'unusable'
+
+// Why: `undefined` means "not resolved yet"; every other value is stable for this process.
+let cachedPackageType: LinuxPackageType | undefined
+let cachedExternallyManaged: boolean | undefined
 
 // Bounded by construction: the marker is read at most once per process.
 function warnMarkerUnusable(detail: string): void {
   console.warn(`[updater] linux package-type marker unusable: ${detail}`)
 }
 
-function readPackageTypeMarker(): LinuxRootPackageType | null {
+function isAbsolutePathString(value: unknown): value is string {
+  return (
+    typeof value === 'string' && value.length > 0 && !value.includes('\0') && path.isAbsolute(value)
+  )
+}
+
+function isInsideDirectory(root: string, candidate: string): boolean {
+  const relative = path.relative(root, candidate)
+  return (
+    relative.length > 0 &&
+    relative !== '..' &&
+    !relative.startsWith(`..${path.sep}`) &&
+    !path.isAbsolute(relative)
+  )
+}
+
+export function isLegacyAppImageRuntimeIdentity(identity: {
+  appImagePath: unknown
+  appDirPath: unknown
+  execPath: unknown
+  resourcesPath: unknown
+}): boolean {
+  if (
+    !isAbsolutePathString(identity.appImagePath) ||
+    !isAbsolutePathString(identity.appDirPath) ||
+    !isAbsolutePathString(identity.execPath) ||
+    !isAbsolutePathString(identity.resourcesPath)
+  ) {
+    return false
+  }
+  return (
+    isInsideDirectory(identity.appDirPath, identity.execPath) &&
+    isInsideDirectory(identity.appDirPath, identity.resourcesPath)
+  )
+}
+
+function hasLegacyAppImageRuntimeIdentity(resourcesPath: unknown): boolean {
+  return isLegacyAppImageRuntimeIdentity({
+    appImagePath: process.env.APPIMAGE,
+    appDirPath: process.env.APPDIR,
+    execPath: process.execPath,
+    resourcesPath
+  })
+}
+
+function readPackageTypeMarker(): LinuxPackageType {
   if (process.platform !== 'linux' || !app.isPackaged) {
-    return null
+    return 'non-root'
   }
   const resourcesPath = process.resourcesPath
   if (typeof resourcesPath !== 'string' || resourcesPath.length === 0) {
     warnMarkerUnusable('resourcesPath unavailable')
-    return null
+    return 'unusable'
   }
   let raw: string
   try {
     raw = readFileSync(path.join(resourcesPath, 'package-type'), 'utf8')
   } catch (error) {
-    // Why: AppImage legitimately ships no marker, so only an unreadable one is worth reporting.
-    if ((error as NodeJS.ErrnoException)?.code !== 'ENOENT') {
-      warnMarkerUnusable('marker unreadable')
+    if (
+      (error as NodeJS.ErrnoException)?.code === 'ENOENT' &&
+      hasLegacyAppImageRuntimeIdentity(resourcesPath)
+    ) {
+      return 'non-root'
     }
-    return null
+    warnMarkerUnusable(
+      (error as NodeJS.ErrnoException)?.code === 'ENOENT' ? 'marker missing' : 'marker unreadable'
+    )
+    return 'unusable'
   }
   const value = raw.trim()
   if (value === 'deb' || value === 'rpm') {
     return value
   }
-  // Why: electron-updater also supports pacman, but this recovery path covers deb/rpm only — a
-  // recognized marker is a deliberate scope cut, not a broken install.
-  if (value !== 'pacman') {
-    warnMarkerUnusable('marker is not deb or rpm')
+  if (value === 'AppImage') {
+    return 'non-root'
   }
-  return null
+  warnMarkerUnusable('marker is not AppImage, deb, or rpm')
+  return 'unusable'
 }
 
 /**
- * The installed Linux package format, or null when this build does not install through a
- * root package. Reads only the packaged marker `electron-updater` itself uses — never distro
- * files, executable paths, or available package managers.
+ * Resolves the installed Linux package format. Packaged builds fail closed when their marker is
+ * missing or unusable unless the legacy APPIMAGE runtime identity is valid. Unpackaged, non-Linux,
+ * and identified AppImage runs are non-root.
  */
-export function getLinuxRootPackageType(): LinuxRootPackageType | null {
+export function getLinuxPackageType(): LinuxPackageType {
   if (cachedPackageType === undefined) {
     cachedPackageType = readPackageTypeMarker()
   }
   return cachedPackageType
 }
+
+/** Returns a root package type when this build supports manual package recovery. */
+export function getLinuxRootPackageType(): LinuxRootPackageType | null {
+  const packageType = getLinuxPackageType()
+  return packageType === 'deb' || packageType === 'rpm' ? packageType : null
+}
+
+/**
+ * Whether the marker claims a root package format this host cannot install. Repackagers (AUR, Nix,
+ * container rebuilds) unpack Orca's .deb and inherit its `package-type` verbatim, so the marker
+ * describes the artifact Orca was built as, never the system that now owns the install. Without a
+ * matching package manager no downloaded package can ever be applied here.
+ *
+ * A false positive is impossible by construction: this reuses the exact manager lists and resolver
+ * that `buildLinuxPackageInstallCommand` already loops over, so any host flagged here would have
+ * failed with `no-package-manager` after the download anyway. The gate only moves that verdict
+ * earlier — it never refuses a host that could have installed the update.
+ */
+export function isExternallyManagedLinuxInstall(): boolean {
+  if (cachedExternallyManaged === undefined) {
+    const packageType = getLinuxRootPackageType()
+    cachedExternallyManaged = packageType !== null && !hasTrustedPackageManagerFor(packageType)
+  }
+  return cachedExternallyManaged
+}
diff --git a/src/main/startup/appimage-cli-redirect.test.ts b/src/main/startup/appimage-cli-redirect.test.ts
deleted file mode 100644
index 99d5024a517..00000000000
--- a/src/main/startup/appimage-cli-redirect.test.ts
+++ /dev/null
@@ -1,211 +0,0 @@
-import { mkdir, mkdtemp, writeFile } from 'node:fs/promises'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { describe, expect, it, vi } from 'vitest'
-import { getAppImageCliArgs, maybeRedirectAppImageCliLaunch } from './appimage-cli-redirect'
-
-const commandNames = ['serve', 'status', 'terminal']
-
-describe('AppImage CLI redirect', () => {
-  it('detects direct AppImage CLI commands', () => {
-    expect(
-      getAppImageCliArgs(
-        ['orca-linux.AppImage', 'status', '--json'],
-        { APPIMAGE: '/opt/orca' },
-        {
-          platform: 'linux',
-          isPackaged: true,
-          commandNames
-        }
-      )
-    ).toEqual(['status', '--json'])
-  })
-
-  it('allows CLI global flags before the command', () => {
-    expect(
-      getAppImageCliArgs(
-        ['orca-linux.AppImage', '--pairing-code', 'abc123', '--json', 'terminal', 'list'],
-        {
-          APPIMAGE: '/opt/orca'
-        },
-        {
-          platform: 'linux',
-          isPackaged: true,
-          commandNames
-        }
-      )
-    ).toEqual(['--pairing-code', 'abc123', '--json', 'terminal', 'list'])
-  })
-
-  it('does not redirect normal desktop AppImage launches', () => {
-    expect(
-      getAppImageCliArgs(
-        ['AppRun', '--no-sandbox', 'file:///tmp/example.txt'],
-        {
-          APPIMAGE: '/opt/orca'
-        },
-        {
-          platform: 'linux',
-          isPackaged: true,
-          commandNames
-        }
-      )
-    ).toBeNull()
-  })
-
-  it('keeps direct serve launches in Electron when Chromium switches are present', () => {
-    expect(
-      getAppImageCliArgs(
-        [
-          'AppRun',
-          '--no-sandbox',
-          '--disable-features=FedCm,DirectSockets',
-          'serve',
-          '--port',
-          '6768'
-        ],
-        { APPIMAGE: '/opt/orca' },
-        {
-          platform: 'linux',
-          isPackaged: true,
-          commandNames
-        }
-      )
-    ).toBeNull()
-  })
-
-  it('keeps clean serve launches on the CLI path for validation', () => {
-    expect(
-      getAppImageCliArgs(
-        ['AppRun', '--no-sandbox', 'serve', '--port', '6768'],
-        { APPIMAGE: '/opt/orca' },
-        {
-          platform: 'linux',
-          isPackaged: true,
-          commandNames
-        }
-      )
-    ).toEqual(['serve', '--port', '6768'])
-  })
-
-  it('handles a space-separated Chromium switch value', () => {
-    expect(
-      getAppImageCliArgs(
-        ['AppRun', '--disable-features', 'FedCm', 'serve'],
-        { APPIMAGE: '/opt/orca' },
-        {
-          platform: 'linux',
-          isPackaged: true,
-          commandNames
-        }
-      )
-    ).toBeNull()
-  })
-
-  it('does not broaden the Electron-owned exception to switches after serve', () => {
-    expect(
-      getAppImageCliArgs(
-        ['AppRun', 'serve', '--disable-features=FedCm'],
-        { APPIMAGE: '/opt/orca' },
-        {
-          platform: 'linux',
-          isPackaged: true,
-          commandNames
-        }
-      )
-    ).toEqual(['serve', '--disable-features=FedCm'])
-  })
-
-  it('removes no-sandbox before forwarding CLI help', () => {
-    expect(
-      getAppImageCliArgs(
-        ['AppRun', '--no-sandbox', 'serve', '--help'],
-        { APPIMAGE: '/opt/orca' },
-        {
-          platform: 'linux',
-          isPackaged: true,
-          commandNames
-        }
-      )
-    ).toEqual(['serve', '--help'])
-  })
-
-  it('still redirects serve help even when Chromium switches are present', () => {
-    expect(
-      getAppImageCliArgs(
-        ['AppRun', '--disable-features=FedCm', 'serve', '--help'],
-        { APPIMAGE: '/opt/orca' },
-        {
-          platform: 'linux',
-          isPackaged: true,
-          commandNames
-        }
-      )
-    ).toEqual(['--disable-features=FedCm', 'serve', '--help'])
-  })
-
-  it('spawns the unpacked CLI entrypoint with Electron node mode', async () => {
-    const root = await mkdtemp(join(tmpdir(), 'orca-appimage-cli-redirect-'))
-    const cliEntryPath = join(root, 'app.asar.unpacked', 'out', 'cli', 'index.js')
-    await mkdir(join(root, 'app.asar.unpacked', 'out', 'cli'), { recursive: true })
-    await writeFile(cliEntryPath, '', 'utf8')
-    const spawn = vi.fn((..._args: unknown[]) => ({ status: 0 }))
-
-    const result = maybeRedirectAppImageCliLaunch({
-      argv: ['orca-linux.AppImage', 'status', '--json'],
-      env: {
-        APPIMAGE: '/opt/orca/orca-linux.AppImage',
-        NODE_OPTIONS: '--inspect',
-        NODE_REPL_EXTERNAL_MODULE: '/tmp/repl.js'
-      },
-      platform: 'linux',
-      isPackaged: true,
-      resourcesPath: root,
-      execPath: '/opt/orca/orca-ide',
-      commandNames,
-      spawn: spawn as never
-    })
-
-    expect(result).toEqual({ redirected: true, status: 0 })
-    expect(spawn).toHaveBeenCalledWith('/opt/orca/orca-ide', [cliEntryPath, 'status', '--json'], {
-      env: expect.objectContaining({
-        APPIMAGE: '/opt/orca/orca-linux.AppImage',
-        ELECTRON_RUN_AS_NODE: '1',
-        ORCA_NODE_OPTIONS: '--inspect',
-        ORCA_NODE_REPL_EXTERNAL_MODULE: '/tmp/repl.js'
-      }),
-      stdio: 'inherit'
-    })
-    const spawnOptions = spawn.mock.calls[0]?.[2] as { env: NodeJS.ProcessEnv } | undefined
-    expect(spawnOptions?.env).not.toHaveProperty('NODE_OPTIONS')
-    expect(spawnOptions?.env).not.toHaveProperty('NODE_REPL_EXTERNAL_MODULE')
-  })
-
-  it('keeps a clean no-sandbox serve launch on the CLI path', async () => {
-    const root = await mkdtemp(join(tmpdir(), 'orca-appimage-cli-redirect-'))
-    const cliEntryPath = join(root, 'app.asar.unpacked', 'out', 'cli', 'index.js')
-    await mkdir(join(root, 'app.asar.unpacked', 'out', 'cli'), { recursive: true })
-    await writeFile(cliEntryPath, '', 'utf8')
-    const spawn = vi.fn((..._args: unknown[]) => ({ status: 0 }))
-
-    const result = maybeRedirectAppImageCliLaunch({
-      argv: ['orca-linux.AppImage', '--no-sandbox', 'serve'],
-      env: { APPIMAGE: '/opt/orca/orca-linux.AppImage' },
-      platform: 'linux',
-      isPackaged: true,
-      resourcesPath: root,
-      execPath: '/opt/orca/orca-ide',
-      commandNames,
-      spawn: spawn as never
-    })
-
-    expect(result).toEqual({ redirected: true, status: 0 })
-    expect(spawn).toHaveBeenCalledWith(
-      '/opt/orca/orca-ide',
-      [cliEntryPath, 'serve'],
-      expect.objectContaining({
-        env: expect.objectContaining({ ORCA_APPIMAGE_NO_SANDBOX: '1' })
-      })
-    )
-  })
-})
diff --git a/src/main/startup/appimage-cli-redirect.ts b/src/main/startup/appimage-cli-redirect.ts
deleted file mode 100644
index 2ca5f54e155..00000000000
--- a/src/main/startup/appimage-cli-redirect.ts
+++ /dev/null
@@ -1,209 +0,0 @@
-import { spawnSync, type SpawnSyncReturns } from 'node:child_process'
-import { existsSync } from 'node:fs'
-import { join } from 'node:path'
-
-type RedirectResult =
-  | {
-      redirected: false
-    }
-  | {
-      redirected: true
-      status: number
-    }
-
-type RedirectOptions = {
-  argv?: string[]
-  env?: NodeJS.ProcessEnv
-  platform?: NodeJS.Platform
-  isPackaged?: boolean
-  resourcesPath?: string
-  execPath?: string
-  commandNames?: readonly string[]
-  spawn?: typeof spawnSync
-}
-
-const HELP_FLAGS = new Set(['--help', '-h', 'help'])
-const APPIMAGE_DESKTOP_FLAGS = new Set(['--no-sandbox'])
-const ELECTRON_LAUNCH_SWITCHES = new Set(['--disable-features'])
-const CLI_FLAGS_WITH_VALUES = new Set(['--environment', '--pairing-code', '--disable-features'])
-// Why: the main tsconfig cannot import the CLI project, but AppImage direct
-// launches need a conservative allow-list before bypassing the GUI startup.
-const APPIMAGE_CLI_COMMAND_NAMES = [
-  'agent',
-  'automations',
-  'back',
-  'capture',
-  'check',
-  'clear',
-  'click',
-  'clipboard',
-  'computer',
-  'console',
-  'cookie',
-  'dblclick',
-  'dialog',
-  'download',
-  'drag',
-  'environment',
-  'eval',
-  'exec',
-  'file',
-  'fill',
-  'find',
-  'focus',
-  'forward',
-  'full-screenshot',
-  'geolocation',
-  'get',
-  'goto',
-  'highlight',
-  'hover',
-  'inserttext',
-  'intercept',
-  'is',
-  'keypress',
-  'mouse',
-  'network',
-  'open',
-  'orchestration',
-  'pdf',
-  'reload',
-  'repo',
-  'screenshot',
-  'scroll',
-  'scrollintoview',
-  'select',
-  'select-all',
-  'serve',
-  'set',
-  'snapshot',
-  'status',
-  'storage',
-  'tab',
-  'terminal',
-  'type',
-  'uncheck',
-  'upload',
-  'viewport',
-  'wait',
-  'worktree'
-]
-
-export function maybeRedirectAppImageCliLaunch(options: RedirectOptions = {}): RedirectResult {
-  const argv = options.argv ?? process.argv
-  const env = options.env ?? process.env
-  const platform = options.platform ?? process.platform
-  const isPackaged = options.isPackaged ?? false
-  const resourcesPath = options.resourcesPath ?? process.resourcesPath
-  const execPath = options.execPath ?? process.execPath
-  const spawn = options.spawn ?? spawnSync
-  const cliArgs = getAppImageCliArgs(argv, env, {
-    platform,
-    isPackaged,
-    commandNames: options.commandNames ?? APPIMAGE_CLI_COMMAND_NAMES
-  })
-
-  if (!cliArgs) {
-    return { redirected: false }
-  }
-
-  const cliEntryPath = join(resourcesPath, 'app.asar.unpacked', 'out', 'cli', 'index.js')
-  if (!existsSync(cliEntryPath)) {
-    process.stderr.write(`Unable to locate the Orca CLI entrypoint at ${cliEntryPath}\n`)
-    return { redirected: true, status: 1 }
-  }
-
-  const childEnv = buildElectronRunAsNodeEnv(env)
-  if (argv.slice(1).includes('--no-sandbox')) {
-    // Why: the operator explicitly disabled Chromium's sandbox; preserve that choice when `serve` launches the Electron child.
-    childEnv.ORCA_APPIMAGE_NO_SANDBOX = '1'
-  }
-  const result = spawn(execPath, [cliEntryPath, ...cliArgs], {
-    env: childEnv,
-    stdio: 'inherit'
-  }) as SpawnSyncReturns<Buffer>
-
-  if (result.error) {
-    process.stderr.write(`${result.error.message}\n`)
-    return { redirected: true, status: 1 }
-  }
-
-  return { redirected: true, status: result.status ?? 1 }
-}
-
-export function getAppImageCliArgs(
-  argv: string[],
-  env: NodeJS.ProcessEnv,
-  options: {
-    platform: NodeJS.Platform
-    isPackaged: boolean
-    commandNames: readonly string[]
-  }
-): string[] | null {
-  if (options.platform !== 'linux' || !options.isPackaged) {
-    return null
-  }
-  if (!env.APPIMAGE && !env.APPDIR) {
-    return null
-  }
-
-  const args = argv.slice(1)
-  if (args.length === 0) {
-    return null
-  }
-  const cliArgs = args.filter((arg) => !APPIMAGE_DESKTOP_FLAGS.has(arg))
-  if (cliArgs.some((arg) => HELP_FLAGS.has(arg))) {
-    return cliArgs
-  }
-
-  const commandNames = new Set(options.commandNames)
-  const firstPositional = findFirstCommandCandidate(cliArgs)
-  if (!firstPositional || !commandNames.has(firstPositional)) {
-    return null
-  }
-  // Keep serve in Electron only when an Electron launch switch is present.
-  // Forwarding it to the strict Node-mode CLI parser makes an otherwise valid
-  // serve launch fail, while clean serve invocations retain CLI validation.
-  if (
-    firstPositional === 'serve' &&
-    cliArgs
-      .slice(0, findFirstCommandCandidateIndex(cliArgs))
-      .some((arg) => ELECTRON_LAUNCH_SWITCHES.has(flagName(arg)))
-  ) {
-    return null
-  }
-  return cliArgs
-}
-
-function findFirstCommandCandidate(args: string[]): string | null {
-  const index = findFirstCommandCandidateIndex(args)
-  return index === -1 ? null : args[index]!
-}
-
-function findFirstCommandCandidateIndex(args: string[]): number {
-  for (let index = 0; index < args.length; index += 1) {
-    const arg = args[index]
-    if (!arg.startsWith('-')) {
-      return index
-    }
-    if (CLI_FLAGS_WITH_VALUES.has(flagName(arg)) && !arg.includes('=')) {
-      index += 1
-    }
-  }
-  return -1
-}
-
-function flagName(arg: string): string {
-  const equalsIndex = arg.indexOf('=')
-  return equalsIndex === -1 ? arg : arg.slice(0, equalsIndex)
-}
-
-function buildElectronRunAsNodeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {
-  const childEnv = { ...env }
-  childEnv.ORCA_NODE_OPTIONS = env.NODE_OPTIONS ?? ''
-  childEnv.ORCA_NODE_REPL_EXTERNAL_MODULE = env.NODE_REPL_EXTERNAL_MODULE ?? ''
-  childEnv.ELECTRON_RUN_AS_NODE = '1'
-  delete childEnv.NODE_OPTIONS
-  delete childEnv.NODE_REPL_EXTERNAL_MODULE
-  return childEnv
-}
diff --git a/src/main/startup/cli-command-names.ts b/src/main/startup/cli-command-names.ts
new file mode 100644
index 00000000000..2f1b0e4394d
--- /dev/null
+++ b/src/main/startup/cli-command-names.ts
@@ -0,0 +1,73 @@
+// Kept import-free for main/CLI project isolation; a parity test prevents drift.
+export const CLI_COMMAND_NAMES = [
+  'account',
+  'agent',
+  'agent-context',
+  'artifacts',
+  'automations',
+  'back',
+  'capture',
+  'check',
+  'claude-teams',
+  'clear',
+  'click',
+  'clipboard',
+  'computer',
+  'console',
+  'cookie',
+  'dblclick',
+  'diagnostics',
+  'dialog',
+  'download',
+  'drag',
+  'emulator',
+  'environment',
+  'eval',
+  'exec',
+  'file',
+  'fill',
+  'find',
+  'focus',
+  'forward',
+  'full-screenshot',
+  'geolocation',
+  'get',
+  'goto',
+  'highlight',
+  'host',
+  'hover',
+  'inserttext',
+  'intercept',
+  'is',
+  'keypress',
+  'linear',
+  'mouse',
+  'network',
+  'open',
+  'open-url',
+  'orchestration',
+  'pdf',
+  'project',
+  'reload',
+  'repo',
+  'screenshot',
+  'scroll',
+  'scrollintoview',
+  'select',
+  'select-all',
+  'serve',
+  'set',
+  'skills',
+  'snapshot',
+  'status',
+  'storage',
+  'tab',
+  'terminal',
+  'type',
+  'uncheck',
+  'upload',
+  'viewport',
+  'vm',
+  'wait',
+  'worktree'
+] as const
diff --git a/src/main/startup/cli-launch-redirect.test.ts b/src/main/startup/cli-launch-redirect.test.ts
new file mode 100644
index 00000000000..7a4b29fe60e
--- /dev/null
+++ b/src/main/startup/cli-launch-redirect.test.ts
@@ -0,0 +1,357 @@
+import { posix, win32 } from 'node:path'
+import { describe, expect, it, vi } from 'vitest'
+import { getCliLaunchArgs, maybeRedirectCliLaunch } from './cli-launch-redirect'
+
+const COMMAND_NAMES = ['project', 'serve', 'status', 'skills', 'worktree']
+
+const linux = {
+  resourcesPath: '/opt/Orca/resources',
+  execPath: '/opt/Orca/orca-ide',
+  get cliEntryPath(): string {
+    return posix.join(this.resourcesPath, 'app.asar.unpacked', 'out', 'cli', 'index.js')
+  }
+}
+const windows = {
+  resourcesPath: 'C:\\Users\\me\\AppData\\Local\\Programs\\Orca\\resources',
+  execPath: 'C:\\Users\\me\\AppData\\Local\\Programs\\Orca\\Orca.exe',
+  get cliEntryPath(): string {
+    return win32.join(this.resourcesPath, 'app.asar.unpacked', 'out', 'cli', 'index.js')
+  }
+}
+
+const linuxOptions = { platform: 'linux' as const, isPackaged: true, commandNames: COMMAND_NAMES }
+const windowsOptions = { platform: 'win32' as const, isPackaged: true, commandNames: COMMAND_NAMES }
+
+describe('CLI launch redirect: entry-path form', () => {
+  it('detects a launch that received the unpacked CLI entrypoint', () => {
+    expect(
+      getCliLaunchArgs(
+        [windows.execPath, windows.cliEntryPath.toUpperCase(), 'status', '--json'],
+        windows.cliEntryPath,
+        windowsOptions
+      )
+    ).toEqual(['status', '--json'])
+  })
+
+  it('ignores normal desktop launches', () => {
+    expect(
+      getCliLaunchArgs([windows.execPath, '--updated'], windows.cliEntryPath, windowsOptions)
+    ).toBeNull()
+  })
+
+  it('ignores the entrypoint when it is only the executable itself (argv[0])', () => {
+    expect(
+      getCliLaunchArgs([windows.cliEntryPath, 'status'], windows.cliEntryPath, windowsOptions)
+    ).toBeNull()
+  })
+
+  it('applies on Linux too', () => {
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, linux.cliEntryPath, 'status'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['status'])
+  })
+
+  it('strips injected Chromium switches before node-mode CLI arguments', () => {
+    expect(
+      getCliLaunchArgs(
+        [
+          linux.execPath,
+          linux.cliEntryPath,
+          '--no-sandbox',
+          '--disable-gpu',
+          '--disable-features=Vulkan',
+          'status',
+          '--json'
+        ],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['status', '--json'])
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, linux.cliEntryPath, '--disable-features', 'Vulkan', 'skills', 'get'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['skills', 'get'])
+  })
+
+  it('keeps user flags after the command and malformed boolean assignments', () => {
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, linux.cliEntryPath, 'status', '--disable-features=Vulkan'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['status', '--disable-features=Vulkan'])
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, linux.cliEntryPath, '--no-sandbox=true', 'status'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['--no-sandbox=true', 'status'])
+  })
+
+  it('does not treat a later positional entrypoint path as the launcher', () => {
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, 'file', 'open', '--path', linux.cliEntryPath],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toBeNull()
+  })
+})
+
+describe('CLI launch redirect: command form', () => {
+  it('redirects a direct binary launch with no AppImage env at all', () => {
+    expect(
+      getCliLaunchArgs(
+        ['/home/u/.config/orca-runtime/versions/1.4.158/orca-ide', 'skills', 'get', '--full'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['skills', 'get', '--full'])
+  })
+
+  it('strips Chromium switches node mode would reject', () => {
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, '--no-sandbox', '--disable-gpu', 'status', '--json'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['status', '--json'])
+  })
+
+  it('preserves desktop-shaped switches after the command', () => {
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, 'skills', 'get', '--disable-gpu', '--no-sandbox'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['skills', 'get', '--disable-gpu', '--no-sandbox'])
+  })
+
+  it('leaves direct serve in-process but redirects its help', () => {
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, '--no-sandbox', 'serve', '--port', '6768'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toBeNull()
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, '--no-sandbox', 'serve', '--help'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['serve', '--help'])
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, '--disable-features', 'Vulkan', 'serve', '--help'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['serve', '--help'])
+  })
+
+  it('treats help as a CLI launch even without a command', () => {
+    expect(getCliLaunchArgs([linux.execPath, '--help'], linux.cliEntryPath, linuxOptions)).toEqual([
+      '--help'
+    ])
+  })
+
+  it.each(['--version', '-v'])('treats %s as a CLI launch even without a command', (flag) => {
+    expect(getCliLaunchArgs([linux.execPath, flag], linux.cliEntryPath, linuxOptions)).toEqual([
+      flag
+    ])
+  })
+
+  it.each(['--user-data-dir', '--proxy-server', '--unknown-desktop-switch'])(
+    'does not treat a value of %s as a CLI early-exit flag',
+    (flag) => {
+      expect(
+        getCliLaunchArgs([linux.execPath, flag, 'help'], linux.cliEntryPath, linuxOptions)
+      ).toBeNull()
+    }
+  )
+
+  it('does not treat a serve option value as a help request', () => {
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, 'serve', '--project-root', 'help'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toBeNull()
+  })
+
+  it('does not reinterpret help after the argument terminator', () => {
+    expect(
+      getCliLaunchArgs([linux.execPath, 'serve', '--', '--help'], linux.cliEntryPath, linuxOptions)
+    ).toBeNull()
+  })
+
+  it('leaves a plain desktop launch alone', () => {
+    expect(getCliLaunchArgs([linux.execPath], linux.cliEntryPath, linuxOptions)).toBeNull()
+    expect(
+      getCliLaunchArgs([linux.execPath, '/home/u/project'], linux.cliEntryPath, linuxOptions)
+    ).toBeNull()
+  })
+
+  it('skips flag values when looking for the command positional', () => {
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, '--environment', 'status', 'worktree', 'ps'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toEqual(['--environment', 'status', 'worktree', 'ps'])
+    expect(
+      getCliLaunchArgs(
+        [linux.execPath, '--environment', 'status'],
+        linux.cliEntryPath,
+        linuxOptions
+      )
+    ).toBeNull()
+  })
+
+  it.each([
+    ['--project', 'github:stablyai/orca', 'project', 'setups'],
+    ['--project=github:stablyai/orca', 'project', 'setups'],
+    ['--project', 'project', 'project', 'setups'],
+    ['--project=project', 'project', 'setups']
+  ])('preserves a project selector in %j', (...args) => {
+    expect(getCliLaunchArgs([linux.execPath, ...args], linux.cliEntryPath, linuxOptions)).toEqual(
+      args
+    )
+  })
+
+  it('does not apply the command form on macOS or Windows', () => {
+    for (const platform of ['darwin', 'win32'] as const) {
+      expect(
+        getCliLaunchArgs([linux.execPath, 'status'], linux.cliEntryPath, {
+          platform,
+          isPackaged: true,
+          commandNames: COMMAND_NAMES
+        })
+      ).toBeNull()
+    }
+  })
+
+  it('never redirects an unpackaged build', () => {
+    expect(
+      getCliLaunchArgs([linux.execPath, 'status'], linux.cliEntryPath, {
+        ...linuxOptions,
+        isPackaged: false
+      })
+    ).toBeNull()
+  })
+})
+
+describe('CLI launch redirect: spawning', () => {
+  it('runs the in-package CLI in Electron node mode with sanitized env', () => {
+    const run = vi.fn((..._args: unknown[]) => ({
+      code: 0,
+      signal: null,
+      stdout: '',
+      stderr: '',
+      timedOut: false
+    }))
+
+    const result = maybeRedirectCliLaunch({
+      argv: [linux.execPath, 'status', '--json'],
+      env: { NODE_OPTIONS: '--inspect', NODE_REPL_EXTERNAL_MODULE: 'external-loader' },
+      platform: 'linux',
+      isPackaged: true,
+      resourcesPath: linux.resourcesPath,
+      execPath: linux.execPath,
+      commandNames: COMMAND_NAMES,
+      exists: () => true,
+      run: run as never
+    })
+
+    expect(result).toEqual({ redirected: true, status: 0 })
+    expect(run).toHaveBeenCalledWith(
+      expect.objectContaining({
+        program: linux.execPath,
+        args: [linux.cliEntryPath, 'status', '--json'],
+        stdio: 'inherit',
+        timeoutMs: null,
+        env: expect.objectContaining({
+          ELECTRON_RUN_AS_NODE: '1',
+          ORCA_CLI_LAUNCH_REDIRECTED: '1',
+          ORCA_NODE_OPTIONS: '--inspect',
+          ORCA_NODE_REPL_EXTERNAL_MODULE: 'external-loader'
+        })
+      })
+    )
+    const spawnedEnv = (run.mock.calls[0][0] as { env: NodeJS.ProcessEnv }).env
+    expect(spawnedEnv).not.toHaveProperty('NODE_OPTIONS')
+    expect(spawnedEnv).not.toHaveProperty('NODE_REPL_EXTERNAL_MODULE')
+  })
+
+  it('refuses to redirect twice so a dropped ELECTRON_RUN_AS_NODE cannot loop', () => {
+    const run = vi.fn()
+
+    const result = maybeRedirectCliLaunch({
+      argv: [linux.execPath, 'status'],
+      env: { ORCA_CLI_LAUNCH_REDIRECTED: '1' },
+      platform: 'linux',
+      isPackaged: true,
+      resourcesPath: linux.resourcesPath,
+      execPath: linux.execPath,
+      commandNames: COMMAND_NAMES,
+      exists: () => true,
+      run: run as never
+    })
+
+    expect(result).toEqual({ redirected: true, status: 1 })
+    expect(run).not.toHaveBeenCalled()
+  })
+
+  it('reports a missing CLI entrypoint instead of booting the desktop app', () => {
+    const run = vi.fn()
+
+    const result = maybeRedirectCliLaunch({
+      argv: [linux.execPath, 'status'],
+      env: {},
+      platform: 'linux',
+      isPackaged: true,
+      resourcesPath: linux.resourcesPath,
+      execPath: linux.execPath,
+      commandNames: COMMAND_NAMES,
+      exists: () => false,
+      run: run as never
+    })
+
+    expect(result).toEqual({ redirected: true, status: 1 })
+    expect(run).not.toHaveBeenCalled()
+  })
+
+  it('surfaces a spawn failure as a non-zero exit', () => {
+    const result = maybeRedirectCliLaunch({
+      argv: [linux.execPath, 'status'],
+      env: {},
+      platform: 'linux',
+      isPackaged: true,
+      resourcesPath: linux.resourcesPath,
+      execPath: linux.execPath,
+      commandNames: COMMAND_NAMES,
+      exists: () => true,
+      run: (() => {
+        throw new Error('spawn ENOENT')
+      }) as never
+    })
+
+    expect(result).toEqual({ redirected: true, status: 1 })
+  })
+})
diff --git a/src/main/startup/cli-launch-redirect.ts b/src/main/startup/cli-launch-redirect.ts
new file mode 100644
index 00000000000..88c0e8062cb
--- /dev/null
+++ b/src/main/startup/cli-launch-redirect.ts
@@ -0,0 +1,245 @@
+import { existsSync } from 'node:fs'
+import { posix, win32 } from 'node:path'
+import { runProcessSync } from '../../shared/child-process/run-process'
+import { CLI_BOOLEAN_FLAGS, findCliCommandIndex } from '../../shared/cli-argument-boundary'
+import { CLI_COMMAND_NAMES } from './cli-command-names'
+import { VALUE_TAKING_FLAGS } from './serve-mode-argv'
+
+export type CliLaunchRedirectResult = { redirected: false } | { redirected: true; status: number }
+
+export type CliLaunchRedirectOptions = {
+  argv?: string[]
+  env?: NodeJS.ProcessEnv
+  platform?: NodeJS.Platform
+  isPackaged?: boolean
+  resourcesPath?: string
+  execPath?: string
+  commandNames?: readonly string[]
+  exists?: typeof existsSync
+  run?: typeof runProcessSync
+}
+
+const CLI_EARLY_EXIT_FLAGS = new Set(['--help', '-h', 'help', '--version', '-v'])
+const DESKTOP_FLAGS = new Set(['--no-sandbox', '--disable-gpu'])
+const DESKTOP_VALUE_FLAGS = new Set(['--disable-features'])
+const CLI_LAUNCH_VALUE_FLAG_NAMES = [...VALUE_TAKING_FLAGS].map((flag) => flag.slice(2))
+
+// Fence recursion if a wrapper drops ELECTRON_RUN_AS_NODE again.
+const REDIRECT_ATTEMPT_ENV = 'ORCA_CLI_LAUNCH_REDIRECTED'
+
+// Redirect packaged CLI-shaped launches before Chromium initializes.
+export function maybeRedirectCliLaunch(
+  options: CliLaunchRedirectOptions = {}
+): CliLaunchRedirectResult {
+  const argv = options.argv ?? process.argv
+  const env = options.env ?? process.env
+  const platform = options.platform ?? process.platform
+  const isPackaged = options.isPackaged ?? false
+  const resourcesPath = options.resourcesPath ?? process.resourcesPath
+  const execPath = options.execPath ?? process.execPath
+  const exists = options.exists ?? existsSync
+  const run = options.run ?? runProcessSync
+  const cliEntryPath = buildPackagedCliEntryPath(platform, resourcesPath)
+  const cliArgs = getCliLaunchArgs(argv, cliEntryPath, {
+    platform,
+    isPackaged,
+    commandNames: options.commandNames ?? CLI_COMMAND_NAMES
+  })
+
+  if (!cliArgs) {
+    return { redirected: false }
+  }
+  if (env[REDIRECT_ATTEMPT_ENV] === '1') {
+    process.stderr.write('Unable to start the Orca CLI through Electron node mode.\n')
+    return { redirected: true, status: 1 }
+  }
+  if (!exists(cliEntryPath)) {
+    process.stderr.write(`Unable to locate the Orca CLI entrypoint at ${cliEntryPath}\n`)
+    return { redirected: true, status: 1 }
+  }
+
+  const childEnv = buildElectronRunAsNodeEnv(env)
+  try {
+    const result = run({
+      program: execPath,
+      args: [cliEntryPath, ...cliArgs],
+      env: childEnv,
+      stdio: 'inherit',
+      timeoutMs: null
+    })
+    return { redirected: true, status: result.code ?? 1 }
+  } catch (error) {
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`)
+    return { redirected: true, status: 1 }
+  }
+}
+
+export function getCliLaunchArgs(
+  argv: string[],
+  cliEntryPath: string,
+  options: {
+    platform: NodeJS.Platform
+    isPackaged: boolean
+    commandNames: readonly string[]
+  }
+): string[] | null {
+  if (!options.isPackaged) {
+    return null
+  }
+  return getEntryPathLaunchArgs(argv, cliEntryPath, options) ?? getCommandLaunchArgs(argv, options)
+}
+
+function getEntryPathLaunchArgs(
+  argv: string[],
+  cliEntryPath: string,
+  options: { platform: NodeJS.Platform; commandNames: readonly string[] }
+): string[] | null {
+  const expectedCliPath = normalizePathForPlatform(cliEntryPath, options.platform)
+  // The packaged launcher always passes the entrypoint as Electron's first argument.
+  // Matching later positional arguments can mistake a normal desktop launch for the CLI.
+  if (!argv[1] || normalizePathForPlatform(argv[1], options.platform) !== expectedCliPath) {
+    return null
+  }
+  const args = argv.slice(2)
+  return stripDesktopFlags(args, findCommandIndex(args, options.commandNames))
+}
+
+function getCommandLaunchArgs(
+  argv: string[],
+  options: { platform: NodeJS.Platform; commandNames: readonly string[] }
+): string[] | null {
+  if (options.platform !== 'linux') {
+    return null
+  }
+  const args = argv.slice(1)
+  if (args.length === 0) {
+    return null
+  }
+  const commandIndex = findCommandIndex(args, options.commandNames)
+  const cliArgs = stripDesktopFlags(args, commandIndex)
+  const command = commandIndex === -1 ? null : args[commandIndex]
+  // Keep direct serve in-process so signals reach its full child tree.
+  if (command && command !== 'serve') {
+    return cliArgs
+  }
+  return hasCliEarlyExitArg(args, commandIndex) ? cliArgs : null
+}
+
+function findCommandIndex(args: readonly string[], commandNames: readonly string[]): number {
+  return findCliCommandIndex(
+    args,
+    commandNames.map((name) => [name]),
+    CLI_LAUNCH_VALUE_FLAG_NAMES
+  )
+}
+
+function stripDesktopFlags(args: readonly string[], commandIndex: number): string[] {
+  const boundary = commandIndex === -1 ? findLeadingFlagBoundary(args) : commandIndex
+  const cliArgs: string[] = []
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index]!
+    if (index < boundary) {
+      if (DESKTOP_FLAGS.has(arg)) {
+        continue
+      }
+      if (DESKTOP_VALUE_FLAGS.has(flagName(arg))) {
+        if (!arg.includes('=') && args[index + 1] && !args[index + 1]!.startsWith('-')) {
+          index += 1
+        }
+        continue
+      }
+    }
+    cliArgs.push(arg)
+  }
+  return cliArgs
+}
+
+function findLeadingFlagBoundary(args: readonly string[]): number {
+  let index = 0
+  while (index < args.length) {
+    const token = args[index]!
+    if (token === '--' || !token.startsWith('-')) {
+      return index
+    }
+    index += 1
+    if (takesLaunchValue(token, args[index])) {
+      index += 1
+    }
+  }
+  return index
+}
+
+function hasCliEarlyExitArg(args: readonly string[], commandIndex: number): boolean {
+  let index = 0
+  let positionalCount = 0
+  while (index < args.length) {
+    const token = args[index]!
+    if (token === '--') {
+      return false
+    }
+    if (
+      CLI_EARLY_EXIT_FLAGS.has(token) &&
+      (token !== 'help' || positionalCount === 0 || commandIndex !== -1)
+    ) {
+      return true
+    }
+    if (!token.startsWith('-')) {
+      if (token === 'help' && (positionalCount === 0 || commandIndex !== -1)) {
+        return true
+      }
+      positionalCount += 1
+    }
+    index += 1
+    if (takesLaunchValue(token, args[index])) {
+      index += 1
+    }
+  }
+  return false
+}
+
+function takesLaunchValue(token: string, next: string | undefined): boolean {
+  if (
+    !next ||
+    next.startsWith('-') ||
+    !token.startsWith('-') ||
+    token.includes('=') ||
+    CLI_EARLY_EXIT_FLAGS.has(token) ||
+    DESKTOP_FLAGS.has(token)
+  ) {
+    return false
+  }
+  const name = flagName(token)
+  return DESKTOP_VALUE_FLAGS.has(name) || !CLI_BOOLEAN_FLAGS.has(name.replace(/^-+/, ''))
+}
+
+function flagName(arg: string): string {
+  const equalsIndex = arg.indexOf('=')
+  return equalsIndex === -1 ? arg : arg.slice(0, equalsIndex)
+}
+
+function buildPackagedCliEntryPath(platform: NodeJS.Platform, resourcesPath: string): string {
+  return getPathApi(platform).join(resourcesPath, 'app.asar.unpacked', 'out', 'cli', 'index.js')
+}
+
+function normalizePathForPlatform(value: string, platform: NodeJS.Platform): string {
+  const pathApi = getPathApi(platform)
+  const normalized = pathApi.normalize(pathApi.isAbsolute(value) ? value : pathApi.resolve(value))
+  // Windows path comparisons are case-insensitive.
+  return platform === 'win32' ? normalized.toLowerCase() : normalized
+}
+
+function getPathApi(platform: NodeJS.Platform): typeof win32 | typeof posix {
+  return platform === 'win32' ? win32 : posix
+}
+
+function buildElectronRunAsNodeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {
+  const childEnv = { ...env }
+  // Preserve user values without exposing them to Electron's bootstrap.
+  childEnv.ORCA_NODE_OPTIONS = env.NODE_OPTIONS ?? ''
+  childEnv.ORCA_NODE_REPL_EXTERNAL_MODULE = env.NODE_REPL_EXTERNAL_MODULE ?? ''
+  childEnv.ELECTRON_RUN_AS_NODE = '1'
+  childEnv[REDIRECT_ATTEMPT_ENV] = '1'
+  delete childEnv.NODE_OPTIONS
+  delete childEnv.NODE_REPL_EXTERNAL_MODULE
+  return childEnv
+}
diff --git a/src/main/startup/ensure-virtual-display.test.ts b/src/main/startup/ensure-virtual-display.test.ts
index 93f4bb14f77..ded8360bce5 100644
--- a/src/main/startup/ensure-virtual-display.test.ts
+++ b/src/main/startup/ensure-virtual-display.test.ts
@@ -1,24 +1,25 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 
-const { spawnMock, spawnSyncMock, existsSyncMock, readFileSyncMock, rmSyncMock, appMock } =
+const { spawnMock, existsSyncMock, readFileSyncMock, rmSyncMock, statSyncMock, appMock } =
   vi.hoisted(() => ({
     spawnMock: vi.fn(),
-    spawnSyncMock: vi.fn(),
     existsSyncMock: vi.fn(),
     readFileSyncMock: vi.fn(),
     rmSyncMock: vi.fn(),
+    statSyncMock: vi.fn(),
     appMock: {
       disableHardwareAcceleration: vi.fn(),
-      commandLine: { appendSwitch: vi.fn() },
+      commandLine: { appendSwitch: vi.fn(), getSwitchValue: vi.fn() },
       once: vi.fn()
     }
   }))
 
-vi.mock('child_process', () => ({ spawn: spawnMock, spawnSync: spawnSyncMock }))
+vi.mock('child_process', () => ({ spawn: spawnMock }))
 vi.mock('fs', () => ({
   existsSync: existsSyncMock,
   readFileSync: readFileSyncMock,
-  rmSync: rmSyncMock
+  rmSync: rmSyncMock,
+  statSync: statSyncMock
 }))
 vi.mock('electron', () => ({ app: appMock }))
 
@@ -29,15 +30,39 @@ function setPlatform(platform: NodeJS.Platform): void {
   Object.defineProperty(process, 'platform', { value: platform, configurable: true })
 }
 
+function mockLiveXDisplay(pid = 4321): void {
+  statSyncMock.mockReturnValue({ isSocket: () => true })
+  existsSyncMock.mockReturnValue(true)
+  readFileSyncMock.mockReturnValue(`${pid}\n`)
+  vi.spyOn(process, 'kill').mockImplementation(() => true)
+}
+
+function mockXvfbTakesDisplay(pid = 1234): void {
+  let bound = false
+  statSyncMock.mockImplementation(() => ({ isSocket: () => true }))
+  readFileSyncMock.mockImplementation(() => {
+    if (!bound) {
+      throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+    }
+    return `${pid}\n`
+  })
+  vi.spyOn(process, 'kill').mockImplementation(() => true)
+  spawnMock.mockImplementation(() => {
+    bound = true
+    return { pid, once: vi.fn(), kill: vi.fn(), killed: false }
+  })
+}
+
 describe('ensureVirtualDisplayForHeadlessServe', () => {
   beforeEach(() => {
     spawnMock.mockReset()
-    spawnSyncMock.mockReset()
     existsSyncMock.mockReset()
     readFileSyncMock.mockReset()
     rmSyncMock.mockReset()
+    statSyncMock.mockReset()
     appMock.disableHardwareAcceleration.mockReset()
     appMock.commandLine.appendSwitch.mockReset()
+    appMock.commandLine.getSwitchValue.mockReset().mockReturnValue('')
     appMock.once.mockReset()
     delete process.env.DISPLAY
   })
@@ -76,6 +101,7 @@ describe('ensureVirtualDisplayForHeadlessServe', () => {
   it('reuses an externally provided DISPLAY without starting Xvfb', async () => {
     setPlatform('linux')
     process.env.DISPLAY = ':0'
+    mockLiveXDisplay()
     const { ensureVirtualDisplayForHeadlessServe } = await import('./ensure-virtual-display')
 
     expect(ensureVirtualDisplayForHeadlessServe({ isServeMode: true })).toBe(true)
@@ -86,48 +112,75 @@ describe('ensureVirtualDisplayForHeadlessServe', () => {
     expect(appMock.commandLine.appendSwitch).toHaveBeenCalledWith('disable-gpu')
   })
 
-  it('reports unsupported (no spawn) when Xvfb is not installed', async () => {
+  it('reports unsupported when Xvfb cannot be launched', async () => {
     setPlatform('linux')
-    spawnSyncMock.mockReturnValue({ status: 1 }) // `which Xvfb` fails
+    spawnMock.mockReturnValue({ pid: undefined, once: vi.fn(), kill: vi.fn(), killed: false })
+    const { ensureVirtualDisplayForHeadlessServe, MISSING_LINUX_DISPLAY_MESSAGE } =
+      await import('./ensure-virtual-display')
+
+    expect(ensureVirtualDisplayForHeadlessServe({ isServeMode: true })).toBe(false)
+    expect(spawnMock).toHaveBeenCalledWith('Xvfb', expect.any(Array), expect.any(Object))
+    expect(MISSING_LINUX_DISPLAY_MESSAGE).toContain('endpoint is unavailable')
+    expect(MISSING_LINUX_DISPLAY_MESSAGE).toContain('XDG_RUNTIME_DIR')
+    expect(MISSING_LINUX_DISPLAY_MESSAGE).toContain('`xvfb` on Debian/Ubuntu')
+    expect(MISSING_LINUX_DISPLAY_MESSAGE).toContain('`xorg-x11-server-Xvfb`')
+  })
+
+  it('leaves an externally configured stale display untouched', async () => {
+    setPlatform('linux')
+    process.env.DISPLAY = ':77'
+    statSyncMock.mockReturnValue({ isSocket: () => true })
+    existsSyncMock.mockReturnValue(true)
+    readFileSyncMock.mockImplementation(() => {
+      throw new Error('display lock is outside this namespace')
+    })
     const { ensureVirtualDisplayForHeadlessServe } = await import('./ensure-virtual-display')
 
     expect(ensureVirtualDisplayForHeadlessServe({ isServeMode: true })).toBe(false)
     expect(spawnMock).not.toHaveBeenCalled()
+    expect(rmSyncMock).not.toHaveBeenCalled()
+    expect(process.env.DISPLAY).toBe(':77')
   })
 
-  it('starts Xvfb and switches to software rendering when none exists', async () => {
+  // #15084 review: a container that bind-mounts only /tmp/.X11-unix used to serve and would
+  // otherwise now exit(1) at index.ts, since the serve gate treats false as fatal.
+  it('serves on an externally configured display that has no lock file', async () => {
     setPlatform('linux')
-    spawnSyncMock.mockReturnValue({ status: 0 }) // `which Xvfb` succeeds
-    // First existsSync (stale-socket check) false; later (socket-ready poll) true.
-    existsSyncMock.mockReturnValueOnce(false).mockReturnValue(true)
-    spawnMock.mockReturnValue({ once: vi.fn(), kill: vi.fn(), killed: false })
-    const processOnceSpy = vi.spyOn(process, 'once')
-    const processRemoveListenerSpy = vi.spyOn(process, 'removeListener')
-    const { ensureVirtualDisplayForHeadlessServe, stopVirtualDisplay } =
-      await import('./ensure-virtual-display')
+    process.env.DISPLAY = ':0'
+    statSyncMock.mockReturnValue({ isSocket: () => true })
+    readFileSyncMock.mockImplementation(() => {
+      throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+    })
+    const { ensureVirtualDisplayForHeadlessServe } = await import('./ensure-virtual-display')
 
     expect(ensureVirtualDisplayForHeadlessServe({ isServeMode: true })).toBe(true)
+    expect(spawnMock).not.toHaveBeenCalled()
+    expect(rmSyncMock).not.toHaveBeenCalled()
+    expect(process.env.DISPLAY).toBe(':0')
+  })
+
+  // removeStaleDisplayArtifacts unlinks the lock before the socket, so a crash between the two
+  // leaves a lockless socket on Orca's OWN :99. Adopting it would resurrect the orphan-socket bug.
+  it('does not adopt its own :99 socket when the lock is missing', async () => {
+    setPlatform('linux')
+    existsSyncMock.mockReturnValue(true)
+    mockXvfbTakesDisplay()
+    const { ensureVirtualDisplayForHeadlessServe } = await import('./ensure-virtual-display')
+
+    expect(ensureVirtualDisplayForHeadlessServe({ isServeMode: true })).toBe(true)
+    // Cleaned up and respawned rather than trusted.
+    expect(rmSyncMock).toHaveBeenCalled()
     expect(spawnMock).toHaveBeenCalledWith(
       'Xvfb',
-      expect.arrayContaining([':99', '-terminate']),
-      expect.objectContaining({ detached: true })
+      expect.arrayContaining([':99']),
+      expect.any(Object)
     )
-    expect(process.env.DISPLAY).toBe(':99')
-    expect(appMock.disableHardwareAcceleration).toHaveBeenCalled()
-    expect(appMock.commandLine.appendSwitch).toHaveBeenCalledWith('disable-dev-shm-usage')
-    expect(appMock.commandLine.appendSwitch).toHaveBeenCalledWith('disable-gpu')
-    expect(processOnceSpy).toHaveBeenCalledWith('exit', stopVirtualDisplay)
-    const readyHandler = appMock.once.mock.calls.find(([event]) => event === 'ready')?.[1]
-    expect(readyHandler).toBeTypeOf('function')
-    readyHandler()
-    expect(processRemoveListenerSpy).toHaveBeenCalledWith('exit', stopVirtualDisplay)
-    expect(appMock.once.mock.calls.some(([event]) => event === 'will-quit')).toBe(false)
   })
 
   it('reuses an existing virtual display only when its X server is alive', async () => {
     setPlatform('linux')
-    spawnSyncMock.mockReturnValue({ status: 0 })
-    existsSyncMock.mockReturnValue(true) // :99 socket + lock present
+    statSyncMock.mockReturnValue({ isSocket: () => true }) // :99 socket present
+    existsSyncMock.mockReturnValue(true)
     readFileSyncMock.mockReturnValue('4321\n') // lock holds a PID
     const killSpy = vi.spyOn(process, 'kill').mockReturnValue(true as never) // PID alive
     const { ensureVirtualDisplayForHeadlessServe } = await import('./ensure-virtual-display')
@@ -142,14 +195,21 @@ describe('ensureVirtualDisplayForHeadlessServe', () => {
 
   it('treats a stale socket (dead server) as no display and starts a fresh Xvfb', async () => {
     setPlatform('linux')
-    spawnSyncMock.mockReturnValue({ status: 0 })
-    existsSyncMock.mockReturnValue(true) // orphan socket + lock present
-    readFileSyncMock.mockReturnValue('9999\n')
-    // PID is gone: process.kill throws ESRCH.
-    const killSpy = vi.spyOn(process, 'kill').mockImplementation(() => {
-      throw new Error('ESRCH')
+    existsSyncMock.mockReturnValue(true) // lock present
+    let bound = false
+    statSyncMock.mockImplementation(() => ({ isSocket: () => true }))
+    readFileSyncMock.mockImplementation(() => (bound ? '1234\n' : '9999\n'))
+    // The orphan lock names a dead PID; the freshly spawned Xvfb is alive.
+    const killSpy = vi.spyOn(process, 'kill').mockImplementation((pid) => {
+      if (pid === 9999) {
+        throw new Error('ESRCH')
+      }
+      return true as never
+    })
+    spawnMock.mockImplementation(() => {
+      bound = true
+      return { pid: 1234, once: vi.fn(), kill: vi.fn(), killed: false }
     })
-    spawnMock.mockReturnValue({ once: vi.fn(), kill: vi.fn(), killed: false })
     const { ensureVirtualDisplayForHeadlessServe } = await import('./ensure-virtual-display')
 
     expect(ensureVirtualDisplayForHeadlessServe({ isServeMode: true })).toBe(true)
@@ -163,4 +223,278 @@ describe('ensureVirtualDisplayForHeadlessServe', () => {
     expect(process.env.DISPLAY).toBe(':99')
     killSpy.mockRestore()
   })
+
+  // A root-owned stale :99 socket (crashed system Xvfb, serve running as User=orca) cannot be
+  // unlinked, so our Xvfb refuses to bind and exits. Trusting the surviving socket set DISPLAY to a
+  // dead server and Chromium died in Ozone init with SIGSEGV.
+  it('reports failure when a stale socket blocks the Xvfb rebind', async () => {
+    setPlatform('linux')
+    statSyncMock.mockReturnValue({ isSocket: () => true })
+    // Removal fails (foreign owner) and no lock ever appears, because Xvfb never took the display.
+    rmSyncMock.mockImplementation(() => {
+      throw Object.assign(new Error('permission denied'), { code: 'EACCES' })
+    })
+    readFileSyncMock.mockImplementation(() => {
+      throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+    })
+    spawnMock.mockReturnValue({ pid: 4242, once: vi.fn(), kill: vi.fn(), killed: false })
+    const { ensureVirtualDisplayForHeadlessServe } = await import('./ensure-virtual-display')
+
+    expect(ensureVirtualDisplayForHeadlessServe({ isServeMode: true })).toBe(false)
+    expect(process.env.DISPLAY).toBeUndefined()
+  })
+
+  it('accepts the display once the spawned Xvfb owns its lock', async () => {
+    setPlatform('linux')
+    let lockWritten = false
+    statSyncMock.mockImplementation(() => ({ isSocket: () => lockWritten }))
+    rmSyncMock.mockImplementation(() => {})
+    readFileSyncMock.mockImplementation(() => {
+      if (!lockWritten) {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      }
+      return '4242\n'
+    })
+    vi.spyOn(process, 'kill').mockImplementation(() => true)
+    spawnMock.mockImplementation(() => {
+      lockWritten = true
+      return { pid: 4242, once: vi.fn(), kill: vi.fn(), killed: false }
+    })
+    const { ensureVirtualDisplayForHeadlessServe } = await import('./ensure-virtual-display')
+
+    expect(ensureVirtualDisplayForHeadlessServe({ isServeMode: true })).toBe(true)
+    expect(process.env.DISPLAY).toBe(':99')
+  })
+
+  describe('hasUsableLinuxDisplay', () => {
+    it('accepts live local X11 and Wayland sockets', async () => {
+      setPlatform('linux')
+      mockLiveXDisplay()
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':0' })).toBe(true)
+      expect(
+        hasUsableLinuxDisplay({
+          WAYLAND_DISPLAY: 'wayland-0',
+          XDG_RUNTIME_DIR: '/run/user/1000'
+        })
+      ).toBe(true)
+      expect(statSyncMock).toHaveBeenCalledWith('/tmp/.X11-unix/X0')
+      expect(statSyncMock).toHaveBeenCalledWith('/run/user/1000/wayland-0')
+    })
+
+    // An X server may bind only the abstract namespace, leaving nothing to stat. Abstract addresses
+    // are kernel-owned and vanish when the owner exits, so an entry is proof of a live server.
+    it('accepts an abstract-namespace X socket with no filesystem socket', async () => {
+      setPlatform('linux')
+      statSyncMock.mockImplementation(() => {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      readFileSyncMock.mockImplementation((path: string) => {
+        if (path === '/proc/net/unix') {
+          return [
+            'Num       RefCount Protocol Flags    Type St Inode Path',
+            '0000000000000000: 00000003 00000000 00000000 0001 03 12014 @/tmp/.X11-unix/X0',
+            ''
+          ].join('\n')
+        }
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':0' })).toBe(true)
+    })
+
+    it('does not confuse a different display number in the abstract table', async () => {
+      setPlatform('linux')
+      statSyncMock.mockImplementation(() => {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      readFileSyncMock.mockImplementation((path: string) => {
+        if (path === '/proc/net/unix') {
+          return '0000000000000000: 00000003 00000000 00000000 0001 03 12014 @/tmp/.X11-unix/X10\n'
+        }
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':1' })).toBe(false)
+    })
+
+    it('accepts an inherited WAYLAND_SOCKET fd with no WAYLAND_DISPLAY', async () => {
+      setPlatform('linux')
+      statSyncMock.mockImplementation(() => {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      readFileSyncMock.mockImplementation(() => {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ WAYLAND_SOCKET: '7' })).toBe(true)
+      expect(hasUsableLinuxDisplay({ WAYLAND_SOCKET: 'not-an-fd' })).toBe(false)
+    })
+
+    // Orca's own teardown unlinks the lock before the socket, so a lockless :99 is our own
+    // half-finished cleanup — trusting it because DISPLAY names it would accept a dead display.
+    it('does not trust a lockless socket on its own managed display number', async () => {
+      setPlatform('linux')
+      statSyncMock.mockReturnValue({ isSocket: () => true })
+      readFileSyncMock.mockImplementation(() => {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':99' })).toBe(false)
+      // A foreign display number with the same shape is still accepted.
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':0' })).toBe(true)
+    })
+
+    it('rejects an orphaned local X11 socket whose server PID is gone', async () => {
+      setPlatform('linux')
+      statSyncMock.mockReturnValue({ isSocket: () => true })
+      existsSyncMock.mockReturnValue(true)
+      readFileSyncMock.mockReturnValue('9999\n')
+      vi.spyOn(process, 'kill').mockImplementation(() => {
+        throw Object.assign(new Error('no such process'), { code: 'ESRCH' })
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':77' })).toBe(false)
+      expect(readFileSyncMock).toHaveBeenCalledWith('/tmp/.X77-lock', 'utf8')
+    })
+
+    // An X server writes its lock beside the socket and both survive a crash, so a lockless
+    // socket is an endpoint published from elsewhere (container bind mount, WSLg) — not an orphan.
+    it('accepts a local X11 socket published without a lock file', async () => {
+      setPlatform('linux')
+      statSyncMock.mockReturnValue({ isSocket: () => true })
+      readFileSyncMock.mockImplementation(() => {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      const killSpy = vi.spyOn(process, 'kill')
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':0' })).toBe(true)
+      expect(killSpy).not.toHaveBeenCalled()
+    })
+
+    // WSLg with ELECTRON_OZONE_PLATFORM_HINT=x11 has no Wayland fallback to rescue it.
+    it('accepts a lockless X11 socket when x11 is pinned and Wayland is unavailable', async () => {
+      setPlatform('linux')
+      statSyncMock.mockImplementation((path: string) => ({
+        isSocket: () => path === '/tmp/.X11-unix/X0'
+      }))
+      readFileSyncMock.mockImplementation(() => {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':0', ELECTRON_OZONE_PLATFORM_HINT: 'x11' })).toBe(
+        true
+      )
+    })
+
+    it('still rejects a missing socket even when no lock file exists', async () => {
+      setPlatform('linux')
+      statSyncMock.mockReturnValue({ isSocket: () => false })
+      readFileSyncMock.mockImplementation(() => {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':0' })).toBe(false)
+    })
+
+    it('rejects a lock that exists but cannot be read', async () => {
+      setPlatform('linux')
+      statSyncMock.mockReturnValue({ isSocket: () => true })
+      readFileSyncMock.mockImplementation(() => {
+        throw Object.assign(new Error('permission denied'), { code: 'EACCES' })
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':0' })).toBe(false)
+    })
+
+    it('accepts a live local X11 server owned by another user', async () => {
+      setPlatform('linux')
+      statSyncMock.mockReturnValue({ isSocket: () => true })
+      existsSyncMock.mockReturnValue(true)
+      readFileSyncMock.mockReturnValue('4321\n')
+      vi.spyOn(process, 'kill').mockImplementation(() => {
+        throw Object.assign(new Error('not permitted'), { code: 'EPERM' })
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':0' })).toBe(true)
+    })
+
+    it('rejects absent, blank, and stale local displays', async () => {
+      setPlatform('linux')
+      statSyncMock.mockImplementation(() => {
+        throw new Error('ENOENT')
+      })
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({})).toBe(false)
+      expect(hasUsableLinuxDisplay({ DISPLAY: '   ', WAYLAND_DISPLAY: '' })).toBe(false)
+      expect(hasUsableLinuxDisplay({ DISPLAY: ':77' })).toBe(false)
+      expect(
+        hasUsableLinuxDisplay({ WAYLAND_DISPLAY: 'wayland-0', XDG_RUNTIME_DIR: '/run/user/1000' })
+      ).toBe(false)
+      expect(hasUsableLinuxDisplay({ WAYLAND_DISPLAY: 'wayland-0' })).toBe(false)
+    })
+
+    it.each([
+      ['localhost:10.0', true],
+      ['build-host.example:1', true],
+      ['[2001:db8::1]:2.0', true],
+      ['tcp/build-host.example:3', true],
+      ['garbage', false],
+      ['build host:1', false],
+      ['build-host.example:', false],
+      ['build-host.example:abc', false]
+    ])('validates remote X display syntax for %s', async (display, expected) => {
+      setPlatform('linux')
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({ DISPLAY: display })).toBe(expected)
+      expect(statSyncMock).not.toHaveBeenCalled()
+    })
+
+    it('honors forced X11 and Wayland platform selection', async () => {
+      setPlatform('linux')
+      statSyncMock.mockImplementation((path: string) => ({
+        isSocket: () => path === '/run/user/1000/wayland-0'
+      }))
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+      const env = {
+        DISPLAY: ':77',
+        WAYLAND_DISPLAY: 'wayland-0',
+        XDG_RUNTIME_DIR: '/run/user/1000'
+      }
+
+      appMock.commandLine.getSwitchValue.mockReturnValue('x11')
+      expect(hasUsableLinuxDisplay(env)).toBe(false)
+      appMock.commandLine.getSwitchValue.mockReturnValue('wayland')
+      expect(hasUsableLinuxDisplay(env)).toBe(true)
+
+      statSyncMock.mockImplementation((path: string) => ({
+        isSocket: () => path === '/tmp/.X11-unix/X0'
+      }))
+      expect(hasUsableLinuxDisplay({ ...env, DISPLAY: ':0' })).toBe(false)
+
+      appMock.commandLine.getSwitchValue.mockReturnValue('')
+      expect(hasUsableLinuxDisplay({ ...env, ELECTRON_OZONE_PLATFORM_HINT: 'x11' })).toBe(false)
+    })
+
+    it('never gates a non-Linux platform', async () => {
+      setPlatform('darwin')
+      const { hasUsableLinuxDisplay } = await import('./ensure-virtual-display')
+
+      expect(hasUsableLinuxDisplay({})).toBe(true)
+      expect(statSyncMock).not.toHaveBeenCalled()
+    })
+  })
 })
diff --git a/src/main/startup/ensure-virtual-display.ts b/src/main/startup/ensure-virtual-display.ts
index a9d517f9f99..6b78c05aa52 100644
--- a/src/main/startup/ensure-virtual-display.ts
+++ b/src/main/startup/ensure-virtual-display.ts
@@ -1,5 +1,6 @@
-import { spawn, spawnSync, type ChildProcess } from 'node:child_process'
-import { existsSync, readFileSync, rmSync } from 'node:fs'
+import { spawn, type ChildProcess } from 'node:child_process'
+import { readFileSync, rmSync, statSync } from 'node:fs'
+import { isAbsolute, join } from 'node:path'
 import { app } from 'electron'
 
 // Why: headless `orca serve` backs browser panes with offscreen BrowserWindows.
@@ -12,6 +13,8 @@ const XVFB_STARTUP_TIMEOUT_MS = 5_000
 const XVFB_POLL_INTERVAL_MS = 50
 const VIRTUAL_DISPLAY_NUMBER = 99
 const VIRTUAL_DISPLAY = `:${VIRTUAL_DISPLAY_NUMBER}`
+const XVFB_INSTALL_GUIDANCE =
+  'Install `xvfb` on Debian/Ubuntu or `xorg-x11-server-Xvfb` on RPM-based systems.'
 
 let xvfbProcess: ChildProcess | null = null
 
@@ -33,32 +36,55 @@ function xDisplayLockPath(displayNumber: number): string {
   return `/tmp/.X${displayNumber}-lock`
 }
 
-// Why: a socket file can outlive the X server that made it. The X lock file holds
-// the server PID; if that process is gone, the display is dead despite the socket.
-function isDisplayServerAlive(displayNumber: number): boolean {
-  const lockPath = xDisplayLockPath(displayNumber)
-  if (!existsSync(lockPath)) {
-    // No lock means no server claimed this display; the bare socket is stale.
-    return false
-  }
+// Why: a socket file can outlive the X server that made it. The X lock file holds the server PID;
+// if that process is gone, the display is dead despite the socket. `missing` is a third outcome the
+// two callers must treat differently — see each call site.
+type DisplayLockProbe = 'alive' | 'dead' | 'missing'
+
+function probeDisplayLock(displayNumber: number): DisplayLockProbe {
   let pid: number
   try {
-    pid = Number.parseInt(readFileSync(lockPath, 'utf8').trim(), 10)
-  } catch {
-    return false
+    pid = Number.parseInt(readFileSync(xDisplayLockPath(displayNumber), 'utf8').trim(), 10)
+  } catch (error) {
+    // An unreadable lock is a lock we cannot clear: treat it as dead, not absent.
+    return (error as NodeJS.ErrnoException)?.code === 'ENOENT' ? 'missing' : 'dead'
   }
   if (!Number.isInteger(pid) || pid <= 0) {
-    return false
+    return 'dead'
   }
   try {
     // signal 0 probes existence without affecting the process.
     process.kill(pid, 0)
-    return true
-  } catch {
-    return false
+    return 'alive'
+  } catch (error) {
+    // EPERM means the PID exists under another uid — a root-owned X server is still live.
+    return typeof error === 'object' && error !== null && 'code' in error && error.code === 'EPERM'
+      ? 'alive'
+      : 'dead'
   }
 }
 
+/**
+ * Liveness for a display Orca did not create. An X server writes its lock beside the socket and
+ * both survive a crash (verified against Xvfb under SIGKILL), so a socket with no lock was never
+ * left by a crashed server — it is an endpoint published from elsewhere: a container bind-mounting
+ * only /tmp/.X11-unix, WSLg, or a foreign PID namespace. We cannot judge those, and refusing them
+ * blocks startup on displays that work.
+ */
+function isForeignDisplayServerAlive(displayNumber: number): boolean {
+  return probeDisplayLock(displayNumber) !== 'dead'
+}
+
+/**
+ * Liveness for Orca's own VIRTUAL_DISPLAY_NUMBER. Stricter on purpose: `removeStaleDisplayArtifacts`
+ * unlinks the lock before the socket, so a lockless socket here is Orca's own half-finished
+ * teardown, not a foreign endpoint. Adopting it would resurrect the orphan-socket bug and stop the
+ * cleanup below from self-healing.
+ */
+function isManagedDisplayServerAlive(displayNumber: number): boolean {
+  return probeDisplayLock(displayNumber) === 'alive'
+}
+
 function removeStaleDisplayArtifacts(displayNumber: number): void {
   for (const path of [xDisplayLockPath(displayNumber), xvfbSocketPath(displayNumber)]) {
     try {
@@ -69,30 +95,126 @@ function removeStaleDisplayArtifacts(displayNumber: number): void {
   }
 }
 
-function hasXvfbBinary(): boolean {
-  // Why: spawnSync `which` is cheap and avoids spawning Xvfb only to fail; a
-  // clear up-front warning beats a cryptic ENOENT mid-startup.
-  const result = spawnSync('which', ['Xvfb'], { stdio: 'ignore' })
-  return result.status === 0
-}
-
 function sleepSync(ms: number): void {
   // Why: this runs in the synchronous pre-whenReady startup path, so block
   // without spinning the CPU or spawning a process.
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms)
 }
 
-function waitForDisplaySocket(displayNumber: number, deadline: number): boolean {
-  const socket = xvfbSocketPath(displayNumber)
-  // Why: Xvfb creates its socket asynchronously after spawn; Electron must not
-  // boot before it exists or display init still fails.
+// Why not socket presence alone: a stale socket we failed to unlink (a root-owned one left by a
+// crashed system Xvfb, which `User=orca` serve cannot remove) still exists after our own Xvfb
+// refused to bind the display. Treating that as ready sets DISPLAY to a dead server and Chromium
+// dies in Ozone init with SIGSEGV instead of reporting an unusable display.
+function waitForDisplayReady(displayNumber: number, deadline: number): boolean {
+  const isReady = (): boolean =>
+    isUnixSocket(xvfbSocketPath(displayNumber)) && isManagedDisplayServerAlive(displayNumber)
   while (Date.now() < deadline) {
-    if (existsSync(socket)) {
+    if (isReady()) {
       return true
     }
     sleepSync(XVFB_POLL_INTERVAL_MS)
   }
-  return existsSync(socket)
+  return isReady()
+}
+
+// Validate display syntax and local sockets before Chromium reaches Ozone initialization.
+export function hasUsableLinuxDisplay(env: NodeJS.ProcessEnv = process.env): boolean {
+  if (process.platform !== 'linux') {
+    return true
+  }
+
+  const ozonePlatform = app.commandLine.getSwitchValue('ozone-platform').trim().toLowerCase()
+  const ozonePlatformHint = env.ELECTRON_OZONE_PLATFORM_HINT?.trim().toLowerCase()
+  const selectedPlatform =
+    ozonePlatform === 'x11' || ozonePlatform === 'wayland'
+      ? ozonePlatform
+      : ozonePlatformHint === 'x11' || ozonePlatformHint === 'wayland'
+        ? ozonePlatformHint
+        : null
+
+  if (selectedPlatform === 'x11') {
+    return hasUsableXDisplay(env.DISPLAY)
+  }
+  if (selectedPlatform === 'wayland') {
+    return hasUsableWaylandDisplay(env)
+  }
+  return hasUsableXDisplay(env.DISPLAY) || hasUsableWaylandDisplay(env)
+}
+
+export const MISSING_LINUX_DISPLAY_MESSAGE = [
+  'Orca needs a usable display server, but the selected X11 or Wayland endpoint is unavailable.',
+  'Check DISPLAY, WAYLAND_DISPLAY, XDG_RUNTIME_DIR, and any --ozone-platform override.',
+  `Use \`orca-ide serve\` to run headless. On a bare server, ${XVFB_INSTALL_GUIDANCE}`
+].join('\n')
+
+// Why: an X server may bind only the abstract namespace (`@/tmp/.X11-unix/X0`), which leaves no
+// filesystem socket to stat. Abstract addresses are kernel-owned and vanish the moment the owner
+// exits, so an entry here is proof of a live server — no lock file needed, and no stale entry is
+// possible. Refusing these was a hard startup failure with no workaround.
+function hasAbstractXSocket(displayNumber: number): boolean {
+  let table: unknown
+  try {
+    table = readFileSync('/proc/net/unix', 'utf8')
+  } catch {
+    return false
+  }
+  if (typeof table !== 'string') {
+    return false
+  }
+  const address = `@${xvfbSocketPath(displayNumber)}`
+  return table
+    .split('\n')
+    .some((line) => line.slice(line.lastIndexOf(' ') + 1).trimEnd() === address)
+}
+
+function isUnixSocket(path: string): boolean {
+  try {
+    return statSync(path).isSocket()
+  } catch {
+    return false
+  }
+}
+
+function hasUsableXDisplay(value: string | undefined): boolean {
+  const display = value?.trim()
+  if (!display) {
+    return false
+  }
+
+  const localDisplay = /^(?:unix\/?)?:(\d+)(?:\.\d+)?$/i.exec(display)
+  // Remote endpoints cannot be proven with local socket checks.
+  if (!localDisplay) {
+    return /^\S+:\d+(?:\.\d+)?$/.test(display)
+  }
+  const displayNumber = Number(localDisplay[1])
+  if (isUnixSocket(xvfbSocketPath(displayNumber))) {
+    // Why the managed number is never treated as foreign: Orca's own teardown unlinks the lock
+    // before the socket, so a lockless socket on VIRTUAL_DISPLAY_NUMBER is our own half-finished
+    // cleanup even when DISPLAY names it explicitly. Trusting it there would accept a dead display.
+    return displayNumber === VIRTUAL_DISPLAY_NUMBER
+      ? isManagedDisplayServerAlive(displayNumber)
+      : isForeignDisplayServerAlive(displayNumber)
+  }
+  return hasAbstractXSocket(displayNumber)
+}
+
+function hasUsableWaylandDisplay(env: NodeJS.ProcessEnv): boolean {
+  // Why: WAYLAND_SOCKET is an already-connected fd handed over by the compositor, so there is no
+  // path to stat and WAYLAND_DISPLAY may be unset entirely. Its presence IS the display.
+  const inheritedFd = env.WAYLAND_SOCKET?.trim()
+  if (inheritedFd && /^\d+$/.test(inheritedFd)) {
+    return true
+  }
+  const display = env.WAYLAND_DISPLAY?.trim()
+  if (!display) {
+    return false
+  }
+  if (isAbsolute(display)) {
+    return isUnixSocket(display)
+  }
+
+  const runtimeDir = env.XDG_RUNTIME_DIR?.trim()
+  return Boolean(runtimeDir && isAbsolute(runtimeDir) && isUnixSocket(join(runtimeDir, display)))
 }
 
 /**
@@ -107,16 +229,17 @@ export function ensureVirtualDisplayForHeadlessServe(options: { isServeMode: boo
 
   configureHeadlessServeChromiumFlags()
 
-  // Why: respect an externally provided display (a real X server, or the image
-  // already running its own Xvfb). Don't start a competing one.
-  if (process.env.DISPLAY && process.env.DISPLAY.trim().length > 0) {
-    return true
-  }
-
-  if (!hasXvfbBinary()) {
+  // Offscreen serve windows require X11; Wayland alone still needs Xvfb.
+  // Never delete artifacts from an externally managed display: a container may
+  // expose its socket without the host lock/PID being visible here.
+  const configuredDisplay = process.env.DISPLAY?.trim()
+  if (configuredDisplay) {
+    if (hasUsableXDisplay(configuredDisplay)) {
+      return true
+    }
     console.warn(
-      '[serve] Xvfb not found; browser panes are unavailable on this headless Linux host. ' +
-        'Install Xvfb (e.g. `apt-get install xvfb`) or set DISPLAY to enable them.'
+      `[serve] DISPLAY=${configuredDisplay} is not verifiably live; leaving it untouched. ` +
+        'Unset DISPLAY to let Orca start its own Xvfb.'
     )
     return false
   }
@@ -124,8 +247,8 @@ export function ensureVirtualDisplayForHeadlessServe(options: { isServeMode: boo
   // Why: reuse an existing display ONLY if a live X server actually backs it.
   // A crashed prior run can leave an orphan socket; trusting it by path alone
   // would advertise browser support that then fails at tab creation.
-  if (existsSync(xvfbSocketPath(VIRTUAL_DISPLAY_NUMBER))) {
-    if (isDisplayServerAlive(VIRTUAL_DISPLAY_NUMBER)) {
+  if (isUnixSocket(xvfbSocketPath(VIRTUAL_DISPLAY_NUMBER))) {
+    if (isManagedDisplayServerAlive(VIRTUAL_DISPLAY_NUMBER)) {
       process.env.DISPLAY = VIRTUAL_DISPLAY
       return true
     }
@@ -147,6 +270,11 @@ export function ensureVirtualDisplayForHeadlessServe(options: { isServeMode: boo
     xvfbProcess.once('error', (error) => {
       console.warn('[serve] Xvfb failed to start:', error instanceof Error ? error.message : error)
     })
+    // PATH lookup failures emit asynchronously, but a successful spawn has a PID immediately.
+    if (xvfbProcess.pid === undefined) {
+      xvfbProcess = null
+      return false
+    }
   } catch (error) {
     console.warn(
       '[serve] Could not start Xvfb:',
@@ -155,9 +283,12 @@ export function ensureVirtualDisplayForHeadlessServe(options: { isServeMode: boo
     return false
   }
 
-  const ready = waitForDisplaySocket(VIRTUAL_DISPLAY_NUMBER, Date.now() + XVFB_STARTUP_TIMEOUT_MS)
+  const ready = waitForDisplayReady(VIRTUAL_DISPLAY_NUMBER, Date.now() + XVFB_STARTUP_TIMEOUT_MS)
   if (!ready) {
-    console.warn('[serve] Xvfb did not become ready in time; browser panes may be unavailable.')
+    console.warn(
+      `[serve] Xvfb did not take ownership of ${VIRTUAL_DISPLAY}; browser panes are unavailable. ` +
+        'A stale socket from another user can block the rebind.'
+    )
     stopVirtualDisplay()
     return false
   }
diff --git a/src/main/startup/main-process-preflight.ts b/src/main/startup/main-process-preflight.ts
index eb2a51cb7ff..acbe42360e8 100644
--- a/src/main/startup/main-process-preflight.ts
+++ b/src/main/startup/main-process-preflight.ts
@@ -2,8 +2,7 @@ import { app, ipcMain, powerMonitor, session } from 'electron'
 import { is } from '@electron-toolkit/utils'
 import os from 'node:os'
 import { join } from 'node:path'
-import { maybeRedirectAppImageCliLaunch } from './appimage-cli-redirect'
-import { maybeRedirectPackagedCliEntryLaunch } from './packaged-cli-entry-redirect'
+import { maybeRedirectCliLaunch } from './cli-launch-redirect'
 import { argvRequestsServeMode, normalizeServeModeArgv } from './serve-mode-argv'
 import {
   configureDevUserDataPath,
@@ -78,7 +77,11 @@ import { recordCrashBreadcrumb } from '../crash-reporting/crash-breadcrumb-store
 import { recordDurableCrashBreadcrumb } from '../crash-reporting/durable-crash-breadcrumb'
 import { GpuCrashDiagnosticsRecorder } from '../crash-reporting/gpu-crash-diagnostics'
 import { getMainProcessLifecycleIdentity } from '../crash-reporting/main-process-lifecycle-identity'
-import { ensureVirtualDisplayForHeadlessServe } from './ensure-virtual-display'
+import {
+  ensureVirtualDisplayForHeadlessServe,
+  hasUsableLinuxDisplay,
+  MISSING_LINUX_DISPLAY_MESSAGE
+} from './ensure-virtual-display'
 import { maybeApplyGpuFallbackForThisLaunch, registerGpuLifecycleHandlers } from './gpu-lifecycle'
 import { mainProcessState as state } from './main-process-state'
 import { initializeSyntheticTitleRuntime } from './synthetic-title-runtime'
@@ -91,25 +94,15 @@ export type MainProcessPreflightOptions = {
 /** Performs all module-scope work that must happen before Electron's ready event. */
 export function runMainProcessPreflight(options: MainProcessPreflightOptions): boolean {
   // Why: on Windows a CLI launch that lost ELECTRON_RUN_AS_NODE would boot the GUI and exit silently; redirect to node mode before the lock gate below.
-  // Both redirects run before the serve-argv rewrite so they still match on the launch argv verbatim.
-  // It is load-bearing for the AppImage one: rewriting first replaces the `serve` positional, so its
-  // command-name lookup finds a port number and strands the launch in an in-process serve. The
-  // packaged-CLI one matches on the entry path instead, so order cannot affect it either way.
-  const packagedRedirect = maybeRedirectPackagedCliEntryLaunch({
+  // The redirect runs before the serve-argv rewrite so it still matches on the launch argv verbatim.
+  // Direct serve stays in-process so its signal handlers own all children.
+  const cliLaunchRedirect = maybeRedirectCliLaunch({
     isPackaged: app.isPackaged,
     resourcesPath: process.resourcesPath,
     execPath: process.execPath
   })
-  if (packagedRedirect.redirected) {
-    app.exit(packagedRedirect.status)
-  }
-  const appImageRedirect = maybeRedirectAppImageCliLaunch({
-    isPackaged: app.isPackaged,
-    resourcesPath: process.resourcesPath,
-    execPath: process.execPath
-  })
-  if (appImageRedirect.redirected) {
-    app.exit(appImageRedirect.status)
+  if (cliLaunchRedirect.redirected) {
+    app.exit(cliLaunchRedirect.status)
   }
   // Why: extracted AppRun / binary launches can land CLI-form `serve` args on the
   // Electron process without the CLI rewrite that injects `--serve` (#12677).
@@ -118,6 +111,11 @@ export function runMainProcessPreflight(options: MainProcessPreflightOptions): b
     process.argv = normalizeServeModeArgv(process.argv)
   }
   state.isServeMode = process.argv.includes('--serve')
+  // Fail before Chromium's missing-display teardown can segfault (#13719).
+  if (app.isPackaged && !state.isServeMode && !hasUsableLinuxDisplay()) {
+    process.stderr.write(`${MISSING_LINUX_DISPLAY_MESSAGE}\n`)
+    app.exit(1)
+  }
   if (state.isServeMode) {
     reserveServeStdoutForReadiness()
   }
@@ -317,6 +315,11 @@ export function runMainProcessPreflight(options: MainProcessPreflightOptions): b
   state.headlessBrowserDisplayAvailable = ensureVirtualDisplayForHeadlessServe({
     isServeMode: state.isServeMode
   })
+  // Why: continuing without Xvfb lets Ozone initialize without a display and SIGSEGV (#17615).
+  if (state.isServeMode && !state.headlessBrowserDisplayAvailable) {
+    process.stderr.write(`${MISSING_LINUX_DISPLAY_MESSAGE}\n`)
+    app.exit(1)
+  }
   initializeSyntheticTitleRuntime()
   registerGpuLifecycleHandlers()
   return true
diff --git a/src/main/startup/main-process-runtime-launch.ts b/src/main/startup/main-process-runtime-launch.ts
index 78061fb439c..7e5f278fdc5 100644
--- a/src/main/startup/main-process-runtime-launch.ts
+++ b/src/main/startup/main-process-runtime-launch.ts
@@ -280,7 +280,7 @@ export async function initializeMainProcessRuntimeLaunch(
   }
   let serveOptions: ReturnType<typeof getServeOptions> | null = null
   try {
-    serveOptions = state.isServeMode ? getServeOptions() : null
+    serveOptions = state.isServeMode ? getServeOptions(process.argv) : null
   } catch (error) {
     console.error(error instanceof Error ? error.message : String(error))
     app.exit(1)
diff --git a/src/main/startup/main-process-serve.ts b/src/main/startup/main-process-serve.ts
index 367bdf6d033..2be4d47d071 100644
--- a/src/main/startup/main-process-serve.ts
+++ b/src/main/startup/main-process-serve.ts
@@ -4,45 +4,9 @@ import { app } from 'electron'
 import { resolveAdvertisedPairingEndpoint } from '../runtime/pairing-endpoint'
 import { notifyServeSupervisorReady } from '../serve-update-handoff'
 import { mainProcessState as state } from './main-process-state'
+import { getServeOptions, type ServeOptions } from './serve-options'
 
-export type ServeOptions = {
-  json: boolean
-  wsPort?: number
-  pairingAddress: string | null
-  noPairing: boolean
-  mobilePairing: boolean
-  recipeJson: boolean
-  projectRoot: string | null
-}
-
-export function getServeOptions(argv = process.argv): ServeOptions {
-  const valueAfter = (flag: string): string | null => {
-    const index = argv.indexOf(flag)
-    if (index === -1) {
-      return null
-    }
-    const value = argv[index + 1]
-    return value && !value.startsWith('--') ? value : null
-  }
-  const rawPort = valueAfter('--serve-port')
-  let wsPort: number | undefined
-  if (rawPort) {
-    const parsedPort = Number(rawPort)
-    if (!Number.isInteger(parsedPort) || parsedPort < 0 || parsedPort > 65535) {
-      throw new Error(`Invalid --serve-port value: ${rawPort}`)
-    }
-    wsPort = parsedPort
-  }
-  return {
-    json: argv.includes('--serve-json'),
-    ...(wsPort !== undefined ? { wsPort } : {}),
-    pairingAddress: valueAfter('--serve-pairing-address'),
-    noPairing: argv.includes('--serve-no-pairing'),
-    mobilePairing: argv.includes('--serve-mobile-pairing'),
-    recipeJson: argv.includes('--serve-recipe-json'),
-    projectRoot: valueAfter('--serve-project-root')
-  }
-}
+export { getServeOptions, type ServeOptions }
 
 export function getBundledWebClientRoot(): string | undefined {
   const appPath = app.getAppPath()
diff --git a/src/main/startup/packaged-cli-entry-redirect.test.ts b/src/main/startup/packaged-cli-entry-redirect.test.ts
deleted file mode 100644
index 4f91657eca0..00000000000
--- a/src/main/startup/packaged-cli-entry-redirect.test.ts
+++ /dev/null
@@ -1,157 +0,0 @@
-import { win32 } from 'node:path'
-import { describe, expect, it, vi } from 'vitest'
-import {
-  getPackagedCliEntryArgs,
-  maybeRedirectPackagedCliEntryLaunch
-} from './packaged-cli-entry-redirect'
-
-const resourcesPath = 'C:\\Users\\me\\AppData\\Local\\Programs\\Orca\\resources'
-const execPath = 'C:\\Users\\me\\AppData\\Local\\Programs\\Orca\\Orca.exe'
-const cliEntryPath = win32.join(resourcesPath, 'app.asar.unpacked', 'out', 'cli', 'index.js')
-
-describe('packaged CLI entry redirect', () => {
-  it('detects Windows GUI launches that received the unpacked CLI entrypoint', () => {
-    expect(
-      getPackagedCliEntryArgs(
-        [execPath, cliEntryPath.toUpperCase(), 'status', '--json'],
-        cliEntryPath,
-        'win32'
-      )
-    ).toEqual(['status', '--json'])
-  })
-
-  it('ignores normal desktop launches', () => {
-    expect(getPackagedCliEntryArgs([execPath, '--updated'], cliEntryPath, 'win32')).toBeNull()
-  })
-
-  it('ignores the entrypoint when it is only the executable itself (argv[0])', () => {
-    expect(getPackagedCliEntryArgs([cliEntryPath, 'status'], cliEntryPath, 'win32')).toBeNull()
-  })
-
-  it('does not match the entrypoint on non-Windows platforms', () => {
-    expect(
-      getPackagedCliEntryArgs([execPath, cliEntryPath, 'status'], cliEntryPath, 'linux')
-    ).toBeNull()
-  })
-
-  it('spawns the in-package CLI in Electron node mode before the single-instance lock can win', () => {
-    const spawn = vi.fn((..._args: unknown[]) => ({ status: 0 }))
-
-    const result = maybeRedirectPackagedCliEntryLaunch({
-      argv: [execPath, cliEntryPath, 'status', '--json'],
-      env: {
-        NODE_OPTIONS: '--inspect',
-        NODE_REPL_EXTERNAL_MODULE: 'external-loader'
-      },
-      platform: 'win32',
-      isPackaged: true,
-      resourcesPath,
-      execPath,
-      exists: () => true,
-      spawn: spawn as never
-    })
-
-    expect(result).toEqual({ redirected: true, status: 0 })
-    expect(spawn).toHaveBeenCalledWith(execPath, [cliEntryPath, 'status', '--json'], {
-      env: expect.objectContaining({
-        ELECTRON_RUN_AS_NODE: '1',
-        ORCA_PACKAGED_CLI_ENTRY_REDIRECTED: '1',
-        ORCA_NODE_OPTIONS: '--inspect',
-        ORCA_NODE_REPL_EXTERNAL_MODULE: 'external-loader'
-      }),
-      stdio: 'inherit'
-    })
-    const spawnOptions = spawn.mock.calls[0]?.[2] as { env: NodeJS.ProcessEnv } | undefined
-    expect(spawnOptions?.env).not.toHaveProperty('NODE_OPTIONS')
-    expect(spawnOptions?.env).not.toHaveProperty('NODE_REPL_EXTERNAL_MODULE')
-  })
-
-  it('never spawns an attacker-supplied script — only the computed in-package entry', () => {
-    const spawn = vi.fn((..._args: unknown[]) => ({ status: 0 }))
-    const attackerScript = 'C:\\Users\\me\\evil.js'
-
-    const result = maybeRedirectPackagedCliEntryLaunch({
-      // An attacker placing some other script path in argv must not cause it to run.
-      argv: [execPath, attackerScript, 'status'],
-      platform: 'win32',
-      isPackaged: true,
-      resourcesPath,
-      execPath,
-      exists: () => true,
-      spawn: spawn as never
-    })
-
-    expect(result).toEqual({ redirected: false })
-    expect(spawn).not.toHaveBeenCalled()
-  })
-
-  it('does not redirect development launches', () => {
-    const spawn = vi.fn()
-
-    const result = maybeRedirectPackagedCliEntryLaunch({
-      argv: ['C:\\dev\\Orca.exe', cliEntryPath, 'status'],
-      platform: 'win32',
-      isPackaged: false,
-      resourcesPath,
-      execPath: 'C:\\dev\\Orca.exe',
-      exists: () => true,
-      spawn: spawn as never
-    })
-
-    expect(result).toEqual({ redirected: false })
-    expect(spawn).not.toHaveBeenCalled()
-  })
-
-  it('reports a clear failure instead of locating a missing entrypoint', () => {
-    const spawn = vi.fn()
-    const stderrWrite = vi.spyOn(process.stderr, 'write').mockImplementation(() => true)
-
-    try {
-      const result = maybeRedirectPackagedCliEntryLaunch({
-        argv: [execPath, cliEntryPath, 'status'],
-        platform: 'win32',
-        isPackaged: true,
-        resourcesPath,
-        execPath,
-        exists: () => false,
-        spawn: spawn as never
-      })
-
-      expect(result).toEqual({ redirected: true, status: 1 })
-      expect(stderrWrite).toHaveBeenCalledWith(
-        `Unable to locate the Orca CLI entrypoint at ${cliEntryPath}\n`
-      )
-      expect(spawn).not.toHaveBeenCalled()
-    } finally {
-      stderrWrite.mockRestore()
-    }
-  })
-
-  it('fails clearly instead of recursively redirecting when node mode already failed once', () => {
-    const spawn = vi.fn()
-    const stderrWrite = vi.spyOn(process.stderr, 'write').mockImplementation(() => true)
-
-    try {
-      const result = maybeRedirectPackagedCliEntryLaunch({
-        argv: [execPath, cliEntryPath, 'status', '--json'],
-        env: {
-          ORCA_PACKAGED_CLI_ENTRY_REDIRECTED: '1'
-        },
-        platform: 'win32',
-        isPackaged: true,
-        resourcesPath,
-        execPath,
-        exists: () => true,
-        spawn: spawn as never
-      })
-
-      expect(result).toEqual({ redirected: true, status: 1 })
-      expect(stderrWrite).toHaveBeenCalledWith(
-        'Unable to start the Orca CLI through Electron node mode.\n'
-      )
-      expect(spawn).not.toHaveBeenCalled()
-    } finally {
-      stderrWrite.mockRestore()
-    }
-  })
-})
diff --git a/src/main/startup/packaged-cli-entry-redirect.ts b/src/main/startup/packaged-cli-entry-redirect.ts
deleted file mode 100644
index 333da2fcdd8..00000000000
--- a/src/main/startup/packaged-cli-entry-redirect.ts
+++ /dev/null
@@ -1,128 +0,0 @@
-import { spawnSync, type SpawnSyncReturns } from 'node:child_process'
-import { existsSync } from 'node:fs'
-import { posix, win32 } from 'node:path'
-
-type RedirectResult =
-  | {
-      redirected: false
-    }
-  | {
-      redirected: true
-      status: number
-    }
-
-type RedirectOptions = {
-  argv?: string[]
-  env?: NodeJS.ProcessEnv
-  platform?: NodeJS.Platform
-  isPackaged?: boolean
-  resourcesPath?: string
-  execPath?: string
-  exists?: typeof existsSync
-  spawn?: typeof spawnSync
-}
-
-// Why: set on the re-spawned node-mode child so a failure to honor
-// ELECTRON_RUN_AS_NODE can't make us redirect forever in a tight loop.
-const REDIRECT_ATTEMPT_ENV = 'ORCA_PACKAGED_CLI_ENTRY_REDIRECTED'
-
-/**
- * Why: on Windows the bundled native launcher runs `Orca.exe <unpacked CLI entry>`
- * with ELECTRON_RUN_AS_NODE=1. When that env var is dropped (e.g. a wrapper or
- * shell that resets it), Orca boots as a GUI, loses the single-instance lock to
- * an already-running window, and exits silently with no stdout. This detects the
- * CLI-shaped launch — argv carrying the known in-package CLI entry path — and
- * re-runs it in Electron node mode BEFORE the lock gate, then exits with the
- * CLI's status.
- *
- * Security: the spawned program is always `execPath` (Orca.exe) and the script
- * is always `cliEntryPath`, derived solely from `resourcesPath` + a fixed
- * relative path — never taken from argv. argv only contributes the trailing
- * CLI arguments forwarded to the already-trusted in-package CLI, and the
- * redirect only fires when an argv element exactly equals that computed path,
- * so it cannot be coerced into spawning an arbitrary script.
- */
-export function maybeRedirectPackagedCliEntryLaunch(options: RedirectOptions = {}): RedirectResult {
-  const argv = options.argv ?? process.argv
-  const env = options.env ?? process.env
-  const platform = options.platform ?? process.platform
-  const isPackaged = options.isPackaged ?? false
-  const resourcesPath = options.resourcesPath ?? process.resourcesPath
-  const execPath = options.execPath ?? process.execPath
-  const exists = options.exists ?? existsSync
-  const spawn = options.spawn ?? spawnSync
-  const cliEntryPath = buildPackagedCliEntryPath(platform, resourcesPath)
-  const cliArgs = getPackagedCliEntryArgs(argv, cliEntryPath, platform)
-
-  if (!isPackaged || !cliArgs) {
-    return { redirected: false }
-  }
-  if (env[REDIRECT_ATTEMPT_ENV] === '1') {
-    process.stderr.write('Unable to start the Orca CLI through Electron node mode.\n')
-    return { redirected: true, status: 1 }
-  }
-  if (!exists(cliEntryPath)) {
-    process.stderr.write(`Unable to locate the Orca CLI entrypoint at ${cliEntryPath}\n`)
-    return { redirected: true, status: 1 }
-  }
-
-  const result = spawn(execPath, [cliEntryPath, ...cliArgs], {
-    env: buildElectronRunAsNodeEnv(env),
-    stdio: 'inherit'
-  }) as SpawnSyncReturns<Buffer>
-
-  if (result.error) {
-    process.stderr.write(`${result.error.message}\n`)
-    return { redirected: true, status: 1 }
-  }
-
-  return { redirected: true, status: result.status ?? 1 }
-}
-
-/**
- * Returns the CLI arguments that follow the in-package CLI entrypoint in argv,
- * or null when this is not a Windows CLI-shaped launch. Scoped to win32 because
- * the AppImage redirect already covers the Linux equivalent.
- */
-export function getPackagedCliEntryArgs(
-  argv: string[],
-  cliEntryPath: string,
-  platform: NodeJS.Platform
-): string[] | null {
-  if (platform !== 'win32') {
-    return null
-  }
-  const expectedCliPath = normalizePathForPlatform(cliEntryPath, platform)
-  const cliEntryIndex = argv.findIndex(
-    (arg, index) => index > 0 && normalizePathForPlatform(arg, platform) === expectedCliPath
-  )
-  return cliEntryIndex === -1 ? null : argv.slice(cliEntryIndex + 1)
-}
-
-function buildPackagedCliEntryPath(platform: NodeJS.Platform, resourcesPath: string): string {
-  return getPathApi(platform).join(resourcesPath, 'app.asar.unpacked', 'out', 'cli', 'index.js')
-}
-
-function normalizePathForPlatform(value: string, platform: NodeJS.Platform): string {
-  const pathApi = getPathApi(platform)
-  const normalized = pathApi.normalize(pathApi.isAbsolute(value) ? value : pathApi.resolve(value))
-  // Why: Windows paths are case-insensitive, so compare case-folded.
-  return platform === 'win32' ? normalized.toLowerCase() : normalized
-}
-
-function getPathApi(platform: NodeJS.Platform): typeof win32 | typeof posix {
-  return platform === 'win32' ? win32 : posix
-}
-
-function buildElectronRunAsNodeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {
-  const childEnv = { ...env }
-  // Why: the CLI re-reads these from the ORCA_-prefixed copies; clearing the
-  // originals keeps Electron's own node bootstrap from inheriting them.
-  childEnv.ORCA_NODE_OPTIONS = env.NODE_OPTIONS ?? ''
-  childEnv.ORCA_NODE_REPL_EXTERNAL_MODULE = env.NODE_REPL_EXTERNAL_MODULE ?? ''
-  childEnv.ELECTRON_RUN_AS_NODE = '1'
-  childEnv[REDIRECT_ATTEMPT_ENV] = '1'
-  delete childEnv.NODE_OPTIONS
-  delete childEnv.NODE_REPL_EXTERNAL_MODULE
-  return childEnv
-}
diff --git a/src/main/startup/serve-mode-argv-cli-redirect-order.test.ts b/src/main/startup/serve-mode-argv-cli-redirect-order.test.ts
index 3455c8c59ab..182bc94cc98 100644
--- a/src/main/startup/serve-mode-argv-cli-redirect-order.test.ts
+++ b/src/main/startup/serve-mode-argv-cli-redirect-order.test.ts
@@ -1,70 +1,67 @@
 import { readFileSync } from 'node:fs'
 import { join } from 'node:path'
 import { describe, expect, it } from 'vitest'
-import { getAppImageCliArgs } from './appimage-cli-redirect'
+import { getCliLaunchArgs } from './cli-launch-redirect'
 import { argvRequestsServeMode, normalizeServeModeArgv } from './serve-mode-argv'
 
-// Why: index.ts runs CLI redirects before rewriting argv. Direct AppImage serve
-// stays in Electron so launch switches do not cross into the strict Node-mode
-// CLI parser; other CLI commands still depend on redirect ordering (#12677).
-
+const CLI_ENTRY_PATH = '/opt/orca/resources/app.asar.unpacked/out/cli/index.js'
 const REDIRECT_OPTIONS = {
   platform: 'linux' as const,
   isPackaged: true,
   commandNames: ['serve', 'status']
 }
-// A mounted AppImage is the case where the runtime does export these.
-const MOUNTED_APPIMAGE_ENV = { APPIMAGE: '/opt/orca/Orca.AppImage', APPDIR: '/tmp/.mount_ab12' }
 
 function rewriteAsIndexDoes(argv: string[]): string[] {
   return argvRequestsServeMode(argv) ? normalizeServeModeArgv(argv) : argv
 }
 
-describe('serve argv rewrite vs AppImage CLI redirect ordering', () => {
-  const launchArgv = ['/opt/orca/orca-ide', '--no-sandbox', 'serve', '--port', '7777', '--json']
+describe('serve argv rewrite vs CLI launch redirect ordering', () => {
+  const launchArgv = [
+    '/opt/orca/orca-ide',
+    '--disable-features=Vulkan',
+    'serve',
+    '--port',
+    '7777',
+    '--json'
+  ]
 
-  it('keeps clean serve validation on the CLI path', () => {
-    expect(getAppImageCliArgs(launchArgv, MOUNTED_APPIMAGE_ENV, REDIRECT_OPTIONS)).toEqual([
-      'serve',
-      '--port',
-      '7777',
-      '--json'
-    ])
+  it('leaves direct serve in the main process', () => {
+    expect(getCliLaunchArgs(launchArgv, CLI_ENTRY_PATH, REDIRECT_OPTIONS)).toBeNull()
   })
 
-  it('keeps an injected Chromium switch in Electron before argv rewriting', () => {
-    const injected = [...launchArgv.slice(0, 2), '--disable-features=FedCm', ...launchArgv.slice(2)]
-    expect(getAppImageCliArgs(injected, MOUNTED_APPIMAGE_ENV, REDIRECT_OPTIONS)).toBeNull()
-  })
-
-  it('loses the redirect if the rewrite runs first', () => {
+  it('rewrites direct serve into the in-process flag shape', () => {
     const rewritten = rewriteAsIndexDoes(launchArgv)
+    expect(rewritten).toContain('--disable-features=Vulkan')
     expect(rewritten).toContain('--serve')
-    expect(getAppImageCliArgs(rewritten, MOUNTED_APPIMAGE_ENV, REDIRECT_OPTIONS)).toBeNull()
+    expect(rewritten).toContain('--serve-port')
+    expect(getCliLaunchArgs(rewritten, CLI_ENTRY_PATH, REDIRECT_OPTIONS)).toBeNull()
   })
 
   it('leaves non-serve CLI commands redirectable either way', () => {
     const argv = ['/opt/orca/orca-ide', 'status']
     expect(rewriteAsIndexDoes(argv)).toEqual(argv)
-    expect(getAppImageCliArgs(argv, MOUNTED_APPIMAGE_ENV, REDIRECT_OPTIONS)).toEqual(['status'])
+    expect(getCliLaunchArgs(argv, CLI_ENTRY_PATH, REDIRECT_OPTIONS)).toEqual(['status'])
+  })
+
+  it('redirects serve help instead of binding a server', () => {
+    const argv = ['/opt/orca/orca-ide', 'serve', '--help']
+    expect(rewriteAsIndexDoes(argv)).toEqual(argv)
+    expect(getCliLaunchArgs(argv, CLI_ENTRY_PATH, REDIRECT_OPTIONS)).toEqual(['serve', '--help'])
   })
 
   // Why source text: the ordering is the preflight phase's executable statement order, and the
   // cases above stay green if it is reversed — nothing else would catch the regression.
-  it('keeps the preflight running both CLI redirects before the argv rewrite', () => {
+  it('keeps the preflight running the CLI redirect before the argv rewrite', () => {
     const source = readFileSync(
       join(process.cwd(), 'src/main/startup/main-process-preflight.ts'),
       'utf8'
     )
-    const packagedRedirect = source.indexOf('maybeRedirectPackagedCliEntryLaunch({')
-    const appImageRedirect = source.indexOf('maybeRedirectAppImageCliLaunch({')
+    const cliRedirect = source.indexOf('maybeRedirectCliLaunch({')
     const rewrite = source.indexOf('process.argv = normalizeServeModeArgv(process.argv)')
     const serveModeCheck = source.indexOf("state.isServeMode = process.argv.includes('--serve')")
 
-    expect(packagedRedirect).toBeGreaterThanOrEqual(0)
-    expect(appImageRedirect).toBeGreaterThanOrEqual(0)
-    expect(rewrite).toBeGreaterThan(packagedRedirect)
-    expect(rewrite).toBeGreaterThan(appImageRedirect)
+    expect(cliRedirect).toBeGreaterThanOrEqual(0)
+    expect(rewrite).toBeGreaterThan(cliRedirect)
     // The rewrite is pointless unless it lands before the flag it exists to inject is read.
     expect(serveModeCheck).toBeGreaterThan(rewrite)
   })
diff --git a/src/main/startup/serve-mode-argv.test.ts b/src/main/startup/serve-mode-argv.test.ts
index 13c340c8e10..53b0bb616a1 100644
--- a/src/main/startup/serve-mode-argv.test.ts
+++ b/src/main/startup/serve-mode-argv.test.ts
@@ -25,6 +25,19 @@ describe('serve-mode-argv', () => {
     expect(findServeSubcommandIndex(['app', '--user-data-dir', '/tmp/x', 'serve'])).toBe(3)
   })
 
+  it('skips a space-separated Chromium switch value while locating serve', () => {
+    const argv = ['/AppRun', '--disable-features', 'Vulkan', 'serve', '--port', '6768']
+    expect(findServeSubcommandIndex(argv)).toBe(3)
+    expect(normalizeServeModeArgv(argv)).toEqual([
+      '/AppRun',
+      '--disable-features',
+      'Vulkan',
+      '--serve',
+      '--serve-port',
+      '6768'
+    ])
+  })
+
   it('refuses a help launch instead of binding a server', () => {
     // Why: `--help` is not a serve flag, so it used to be swallowed and the launch bound a
     // network-exposed runtime server with pairing on. The AppImage redirect routes help to the CLI.
@@ -151,6 +164,14 @@ describe('serve-mode-argv', () => {
     ).toEqual(['/AppRun', '--serve', '--serve-port', '9090', '--serve-pairing-address', '0.0.0.0'])
   })
 
+  it('keeps equals-form values that start with a flag marker intact', () => {
+    expect(normalizeServeModeArgv(['/AppRun', 'serve', '--pairing-address=--no-pairng'])).toEqual([
+      '/AppRun',
+      '--serve',
+      '--serve-pairing-address=--no-pairng'
+    ])
+  })
+
   it('translates serve flags in the mixed `--serve --port` form', () => {
     // Why: leaving these untranslated silently kept pairing enabled despite --no-pairing.
     expect(normalizeServeModeArgv(['orca', '--serve', '--port', '9090', '--no-pairing'])).toEqual([
diff --git a/src/main/startup/serve-mode-argv.ts b/src/main/startup/serve-mode-argv.ts
index 6b406faf80e..8441f116805 100644
--- a/src/main/startup/serve-mode-argv.ts
+++ b/src/main/startup/serve-mode-argv.ts
@@ -26,13 +26,14 @@ const CLI_TO_SERVE_VALUE_FLAG = new Map([
  * Residual class: a flag outside this list whose space-separated value is literally `serve` would
  * read as the subcommand. Include switches that may arrive in either argv shape.
  */
-const VALUE_TAKING_FLAGS = new Set([
+export const VALUE_TAKING_FLAGS = new Set([
   ...CLI_TO_SERVE_VALUE_FLAG.keys(),
   '--serve-port',
   '--serve-pairing-address',
   '--serve-project-root',
   '--disable-features',
   '--user-data-dir',
+  '--proxy-server',
   '--environment',
   '--pairing-code'
 ])
@@ -135,8 +136,7 @@ export function normalizeServeModeArgv(argv: readonly string[]): string[] {
       next.push(...argv.slice(i))
       break
     }
-    // Why: the CLI accepts `--port=6768` as well as `--port 6768`, but
-    // getServeOptions only reads the next token, so `=` must be split apart.
+    // Why: keep the internal argv shape canonical even though getServeOptions accepts both forms.
     const eq = token.indexOf('=')
     const name = eq === -1 ? token : token.slice(0, eq)
     // Why only the bare form: the CLI reads its serve booleans as `flags.get(name) === true`
@@ -154,7 +154,14 @@ export function normalizeServeModeArgv(argv: readonly string[]): string[] {
       continue
     }
     if (eq !== -1) {
-      next.push(valueFlag, token.slice(eq + 1))
+      const value = token.slice(eq + 1)
+      // Preserve the unambiguous `=` form when its value starts with `--`; splitting
+      // it would make the value look like a second option to the direct parser.
+      if (value.startsWith('--')) {
+        next.push(`${valueFlag}=${value}`)
+      } else {
+        next.push(valueFlag, value)
+      }
       continue
     }
     next.push(valueFlag)
diff --git a/src/main/startup/serve-options.test.ts b/src/main/startup/serve-options.test.ts
new file mode 100644
index 00000000000..9e2bb06919d
--- /dev/null
+++ b/src/main/startup/serve-options.test.ts
@@ -0,0 +1,161 @@
+import { describe, expect, it } from 'vitest'
+import { getServeOptions } from './serve-options'
+import { normalizeServeModeArgv } from './serve-mode-argv'
+
+describe('getServeOptions', () => {
+  it('parses a valid launch', () => {
+    expect(
+      getServeOptions(['/AppRun', '--serve', '--serve-port', '6768', '--serve-no-pairing'])
+    ).toEqual({
+      json: false,
+      wsPort: 6768,
+      pairingAddress: null,
+      noPairing: true,
+      mobilePairing: false,
+      recipeJson: false,
+      projectRoot: null
+    })
+  })
+
+  it('accepts equals-form values in the normalized shape', () => {
+    expect(
+      getServeOptions([
+        '/AppRun',
+        '--serve',
+        '--serve-port=6768',
+        '--serve-pairing-address=127.0.0.1',
+        '--serve-project-root=/tmp/repo'
+      ])
+    ).toMatchObject({
+      wsPort: 6768,
+      pairingAddress: '127.0.0.1',
+      projectRoot: '/tmp/repo'
+    })
+  })
+
+  it('uses the final occurrence of each value flag', () => {
+    expect(
+      getServeOptions([
+        '/AppRun',
+        '--serve',
+        '--serve-port',
+        '6768',
+        '--serve-port=6769',
+        '--serve-pairing-address',
+        'first.example',
+        '--serve-pairing-address=last.example',
+        '--serve-project-root',
+        '/first',
+        '--serve-project-root=/last'
+      ])
+    ).toMatchObject({
+      wsPort: 6769,
+      pairingAddress: 'last.example',
+      projectRoot: '/last'
+    })
+  })
+
+  it('applies missing or invalid values only to the final occurrence', () => {
+    expect(
+      getServeOptions(['/AppRun', '--serve', '--serve-port', '--serve-port', '6768']).wsPort
+    ).toBe(6768)
+    expect(() =>
+      getServeOptions(['/AppRun', '--serve', '--serve-port', '6768', '--serve-port'])
+    ).toThrow('Missing value for --serve-port.')
+    expect(() =>
+      getServeOptions(['/AppRun', '--serve', '--serve-port', '6768', '--serve-port=bad'])
+    ).toThrow('Invalid --serve-port value: bad')
+  })
+
+  it('uses the final value of mixed boolean aliases', () => {
+    expect(
+      getServeOptions(['/AppRun', '--serve', '--serve-no-pairing', '--no-pairing=false']).noPairing
+    ).toBe(false)
+    expect(
+      getServeOptions(['/AppRun', '--serve', '--no-pairing=false', '--serve-no-pairing']).noPairing
+    ).toBe(true)
+    expect(
+      getServeOptions(['/AppRun', '--serve', '--serve-mobile-pairing', '--mobile-pairing=0'])
+        .mobilePairing
+    ).toBe(false)
+    expect(
+      getServeOptions(['/AppRun', '--serve', '--serve-recipe-json', '--recipe-json=false'])
+        .recipeJson
+    ).toBe(false)
+  })
+
+  it('keeps JSON enabled for an equals-form global flag', () => {
+    expect(getServeOptions(['/AppRun', '--serve', '--json=false']).json).toBe(true)
+  })
+
+  it('accepts an equals-form value that resembles a pairing flag', () => {
+    const argv = normalizeServeModeArgv(['/AppRun', 'serve', '--pairing-address=--no-pairng'])
+    expect(getServeOptions(argv).pairingAddress).toBe('--no-pairng')
+  })
+
+  it('shares cross-flag validation with the CLI-form launch', () => {
+    const argv = normalizeServeModeArgv([
+      '/opt/orca/orca-ide',
+      'serve',
+      '--no-pairing',
+      '--mobile-pairing'
+    ])
+    expect(() => getServeOptions(argv)).toThrow(/either --mobile-pairing or --no-pairing/i)
+  })
+
+  it('rejects recipe JSON without runtime pairing and a project root', () => {
+    expect(() =>
+      getServeOptions([
+        '/AppRun',
+        '--serve',
+        '--serve-recipe-json',
+        '--serve-no-pairing',
+        '--serve-project-root',
+        '/tmp/repo'
+      ])
+    ).toThrow(/requires runtime pairing.*--no-pairing/i)
+    expect(() => getServeOptions(['/AppRun', '--serve', '--serve-recipe-json'])).toThrow(
+      /requires --project-root/i
+    )
+  })
+
+  it('rejects a security-shaped typo while allowing Chromium switches', () => {
+    const normalized = normalizeServeModeArgv(['/AppRun', 'serve', '--no-pairng'])
+    expect(() => getServeOptions(normalized)).toThrow(/Unknown flag --no-pairng.*--no-pairing/i)
+    expect(
+      getServeOptions(['/AppRun', '--serve', '--disable-gpu', '--disable-features=Vulkan'])
+        .noPairing
+    ).toBe(false)
+  })
+
+  it('still rejects a flag-shaped space value, as the CLI does', () => {
+    expect(() =>
+      getServeOptions(['/AppRun', '--serve', '--serve-pairing-address', '--no-pairng'])
+    ).toThrow(/Unknown flag --no-pairng.*--no-pairing/i)
+  })
+
+  it('ignores serve-looking arguments after the terminator', () => {
+    expect(
+      getServeOptions(['/AppRun', '--serve', '--', '--serve-port', '1', '--serve-no-pairing'])
+    ).toEqual({
+      json: false,
+      pairingAddress: null,
+      noPairing: false,
+      mobilePairing: false,
+      recipeJson: false,
+      projectRoot: null
+    })
+  })
+
+  it('requires a port value', () => {
+    expect(() => getServeOptions(['/AppRun', '--serve', '--serve-port'])).toThrow(
+      'Missing value for --serve-port.'
+    )
+  })
+
+  it.each(['', '--serve-json', '--'])('rejects an unusable port value %j', (value) => {
+    expect(() => getServeOptions(['/AppRun', '--serve', '--serve-port', value])).toThrow(
+      'Missing value for --serve-port.'
+    )
+  })
+})
diff --git a/src/main/startup/serve-options.ts b/src/main/startup/serve-options.ts
new file mode 100644
index 00000000000..c0398123797
--- /dev/null
+++ b/src/main/startup/serve-options.ts
@@ -0,0 +1,134 @@
+import {
+  getServeFlagTypoError,
+  getServeOptionValidationError
+} from '../../shared/serve-option-validation'
+
+export type ServeOptions = {
+  json: boolean
+  wsPort?: number
+  pairingAddress: string | null
+  noPairing: boolean
+  mobilePairing: boolean
+  recipeJson: boolean
+  projectRoot: string | null
+}
+
+function optionsBeforeTerminator(argv: readonly string[]): readonly string[] {
+  const terminatorIndex = argv.indexOf('--')
+  return terminatorIndex === -1 ? argv : argv.slice(0, terminatorIndex)
+}
+
+function optionName(token: string): string {
+  const equalsIndex = token.indexOf('=')
+  return equalsIndex === -1 ? token : token.slice(0, equalsIndex)
+}
+
+function lastValueOccurrence(
+  argv: readonly string[],
+  flags: readonly string[]
+): string | null | undefined {
+  const flagNames = new Set(flags)
+  let value: string | null | undefined
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index]!
+    const name = optionName(token)
+    if (!flagNames.has(name)) {
+      continue
+    }
+
+    const equalsIndex = token.indexOf('=')
+    if (equalsIndex !== -1) {
+      const assigned = token.slice(equalsIndex + 1)
+      value = assigned || null
+      continue
+    }
+
+    const next = argv[index + 1]
+    if (next !== undefined && !next.startsWith('--')) {
+      value = next || null
+      index += 1
+    } else {
+      value = null
+    }
+  }
+  return value
+}
+
+function valueAfter(
+  argv: readonly string[],
+  flags: readonly string[],
+  required: boolean,
+  displayFlag: string
+): string | null {
+  const value = lastValueOccurrence(argv, flags)
+  if (value === undefined || value === null) {
+    if (required && value !== undefined) {
+      throw new Error(`Missing value for ${displayFlag}.`)
+    }
+    return null
+  }
+  return value
+}
+
+function lastBooleanValue(argv: readonly string[], flags: readonly string[]): boolean {
+  const flagNames = new Set(flags)
+  let value = false
+  for (const token of argv) {
+    const name = optionName(token)
+    if (!flagNames.has(name)) {
+      continue
+    }
+    // CLI boolean flags are true only in bare form; `--flag=...` is a string value.
+    value = !token.includes('=')
+  }
+  return value
+}
+
+function hasFlag(argv: readonly string[], flags: readonly string[]): boolean {
+  const flagNames = new Set(flags)
+  return argv.some((token) => flagNames.has(optionName(token)))
+}
+
+export function getServeOptions(argv: readonly string[]): ServeOptions {
+  const optionsArgv = optionsBeforeTerminator(argv)
+  const typoError = getServeFlagTypoError(optionsArgv)
+  if (typoError) {
+    throw new Error(typoError)
+  }
+
+  const rawPort = valueAfter(optionsArgv, ['--serve-port', '--port'], true, '--serve-port')
+  let wsPort: number | undefined
+  if (rawPort) {
+    const parsedPort = Number(rawPort)
+    if (!Number.isInteger(parsedPort) || parsedPort < 0 || parsedPort > 65535) {
+      throw new Error(`Invalid --serve-port value: ${rawPort}`)
+    }
+    wsPort = parsedPort
+  }
+
+  const options: ServeOptions = {
+    // The CLI uses `flags.has('json')`, so even `--json=false` enables JSON output.
+    json: hasFlag(optionsArgv, ['--serve-json', '--json']),
+    ...(wsPort !== undefined ? { wsPort } : {}),
+    pairingAddress: valueAfter(
+      optionsArgv,
+      ['--serve-pairing-address', '--pairing-address'],
+      false,
+      '--serve-pairing-address'
+    ),
+    noPairing: lastBooleanValue(optionsArgv, ['--serve-no-pairing', '--no-pairing']),
+    mobilePairing: lastBooleanValue(optionsArgv, ['--serve-mobile-pairing', '--mobile-pairing']),
+    recipeJson: lastBooleanValue(optionsArgv, ['--serve-recipe-json', '--recipe-json']),
+    projectRoot: valueAfter(
+      optionsArgv,
+      ['--serve-project-root', '--project-root'],
+      false,
+      '--serve-project-root'
+    )
+  }
+  const validationError = getServeOptionValidationError(options)
+  if (validationError) {
+    throw new Error(validationError)
+  }
+  return options
+}
diff --git a/src/main/startup/serve-signal-handlers.test.ts b/src/main/startup/serve-signal-handlers.test.ts
index 36250cd4146..35c70ef87de 100644
--- a/src/main/startup/serve-signal-handlers.test.ts
+++ b/src/main/startup/serve-signal-handlers.test.ts
@@ -11,9 +11,11 @@ describe('registerServeSignalHandlers', () => {
     signalSource.emit('SIGINT')
     signalSource.emit('SIGINT')
     signalSource.emit('SIGTERM')
+    signalSource.emit('SIGHUP')
 
-    expect(quitApplication).toHaveBeenCalledTimes(3)
+    expect(quitApplication).toHaveBeenCalledTimes(4)
     expect(signalSource.listenerCount('SIGINT')).toBe(1)
     expect(signalSource.listenerCount('SIGTERM')).toBe(1)
+    expect(signalSource.listenerCount('SIGHUP')).toBe(1)
   })
 })
diff --git a/src/main/startup/serve-signal-handlers.ts b/src/main/startup/serve-signal-handlers.ts
index 3022d935ac5..0df48d5ea35 100644
--- a/src/main/startup/serve-signal-handlers.ts
+++ b/src/main/startup/serve-signal-handlers.ts
@@ -1,12 +1,13 @@
 type ServeSignalSource = {
-  on(event: 'SIGINT' | 'SIGTERM', listener: () => void): unknown
+  on(event: 'SIGINT' | 'SIGTERM' | 'SIGHUP', listener: () => void): unknown
 }
 
 export function registerServeSignalHandlers(
   signalSource: ServeSignalSource,
   quitApplication: () => void
 ): void {
-  // Keep both listeners installed so duplicate delivery cannot fall through to default termination.
+  // Keep every listener installed so duplicate delivery cannot fall through to default termination.
   signalSource.on('SIGINT', quitApplication)
   signalSource.on('SIGTERM', quitApplication)
+  signalSource.on('SIGHUP', quitApplication)
 }
diff --git a/src/main/startup/single-instance-lock-exit.electron.test.ts b/src/main/startup/single-instance-lock-exit.electron.test.ts
index 15623c2459f..8c60f276216 100644
--- a/src/main/startup/single-instance-lock-exit.electron.test.ts
+++ b/src/main/startup/single-instance-lock-exit.electron.test.ts
@@ -6,11 +6,8 @@ import { join } from 'node:path'
 import { afterAll, describe, expect, it } from 'vitest'
 import { SINGLE_INSTANCE_ALREADY_RUNNING_EXIT_CODE } from './single-instance-lock'
 
-// Why #11935: the lock-loss gate runs before Electron `ready`, where `app.quit()` is deferred, so a
-// duplicate headless `orca serve` kept executing the rest of startup, reached Linux Ozone/X11 init
-// with no display, died with SIGSEGV, and systemd restarted it until the leaked AppImage FUSE mounts
-// hit the kernel's 1000-mount ceiling. This runs the gate's own termination statement, lifted out of
-// `src/main/index.ts`, under the real Electron binary.
+// Why: `app.quit()` is deferred before Electron `ready`, so fatal startup gates must use the
+// synchronous `app.exit()`. Run their shipped termination statements under the real binary.
 //
 // Why not a live lock race: Chromium's Linux ProcessSingleton only answers a second process once the
 // browser IO thread is up, which needs `ready` and therefore a display. On a display-less CI runner
@@ -19,10 +16,10 @@ import { SINGLE_INSTANCE_ALREADY_RUNNING_EXIT_CODE } from './single-instance-loc
 // only a real process can settle is what the loser does next, which is what this file pins.
 
 const electronBinary = createRequire(import.meta.url)('electron') as string
-const LOCK_LOST = 'LOCK_LOST'
+const GATE_ENTERED = 'GATE_ENTERED'
 const CONTINUED_INTO_STARTUP = 'CONTINUED_INTO_STARTUP'
 const REACHED_TAIL = 'REACHED_TAIL'
-const MARKER_ENV = 'ORCA_LOCK_FIXTURE_MARKER'
+const MARKER_ENV = 'ORCA_PRE_READY_EXIT_FIXTURE_MARKER'
 
 const fixtureRoots: string[] = []
 
@@ -32,13 +29,13 @@ afterAll(() => {
   }
 })
 
-/** The `app.*` call the shipped lock-loss gate executes, so a revert to `app.quit()` fails here. */
-function readLockLossTermination(): string {
+/** Read the `app.*` termination statement from a pre-ready gate in the shipped entrypoint. */
+function readPreReadyTermination(gate: string): string {
   const source = readFileSync(
     join(process.cwd(), 'src/main/startup/main-process-preflight.ts'),
     'utf8'
   )
-  const start = source.indexOf('if (!hasLock) {')
+  const start = source.indexOf(gate)
   expect(start).toBeGreaterThanOrEqual(0)
   const end = source.indexOf('\n  }', start)
   expect(end).toBeGreaterThan(start)
@@ -59,7 +56,7 @@ function buildFixtureMain(termination: string): string {
     `const marker = process.env.${MARKER_ENV}`,
     `const mark = (name) => appendFileSync(marker, name + '\\n')`,
     `const SINGLE_INSTANCE_ALREADY_RUNNING_EXIT_CODE = ${SINGLE_INSTANCE_ALREADY_RUNNING_EXIT_CODE}`,
-    `mark('${LOCK_LOST}')`,
+    `mark('${GATE_ENTERED}')`,
     termination,
     `mark('${CONTINUED_INTO_STARTUP}')`,
     // Why: stand in for the rest of `src/main/index.ts`, which on the reported host was display init.
@@ -70,15 +67,15 @@ function buildFixtureMain(termination: string): string {
 
 type FixtureRun = { status: number | null; markers: string[] }
 
-function runLockLossGate(termination: string): FixtureRun {
-  const root = mkdtempSync(join(tmpdir(), 'orca-lock-loss-'))
+function runPreReadyGate(termination: string): FixtureRun {
+  const root = mkdtempSync(join(tmpdir(), 'orca-pre-ready-exit-'))
   fixtureRoots.push(root)
   const dir = join(root, 'fixture')
   const marker = join(root, 'markers.log')
   mkdirSync(dir, { recursive: true })
   writeFileSync(
     join(dir, 'package.json'),
-    '{ "name": "orca-lock-loss-fixture", "main": "main.js" }'
+    '{ "name": "orca-pre-ready-exit-fixture", "main": "main.js" }'
   )
   writeFileSync(join(dir, 'main.js'), buildFixtureMain(termination))
   writeFileSync(marker, '')
@@ -96,23 +93,34 @@ function runLockLossGate(termination: string): FixtureRun {
   }
 }
 
-describe('#11935 pre-ready lock-loss termination under real Electron', () => {
+describe('pre-ready termination under real Electron', () => {
   it('stops the duplicate launch before any further startup runs, with the already-running code', () => {
-    const termination = readLockLossTermination()
+    const termination = readPreReadyTermination('if (!hasLock) {')
     // Why: an empty slice would let the fixture fall through to its own exit and pass vacuously.
     expect(termination).not.toBe('')
 
-    const run = runLockLossGate(termination)
+    const run = runPreReadyGate(termination)
 
-    expect(run.markers).toEqual([LOCK_LOST])
+    expect(run.markers).toEqual([GATE_ENTERED])
     expect(run.status).toBe(SINGLE_INSTANCE_ALREADY_RUNNING_EXIT_CODE)
   }, 90_000)
 
+  it('#17615 stops serve when display setup fails instead of entering Chromium startup', () => {
+    const termination = readPreReadyTermination(
+      'if (state.isServeMode && !state.headlessBrowserDisplayAvailable) {'
+    )
+
+    const run = runPreReadyGate(termination)
+
+    expect(run.markers).toEqual([GATE_ENTERED])
+    expect(run.status).toBe(1)
+  }, 90_000)
+
   it('reproduces the deferred graceful quit that let the doomed launch keep booting', () => {
-    const run = runLockLossGate('app.quit()')
+    const run = runPreReadyGate('app.quit()')
 
     // Why: pins the Electron semantic the fix rests on — pre-`ready` `quit()` schedules, it does not stop.
-    expect(run.markers).toEqual([LOCK_LOST, CONTINUED_INTO_STARTUP, REACHED_TAIL])
+    expect(run.markers).toEqual([GATE_ENTERED, CONTINUED_INTO_STARTUP, REACHED_TAIL])
     expect(run.status).not.toBe(SINGLE_INSTANCE_ALREADY_RUNNING_EXIT_CODE)
   }, 90_000)
 })
diff --git a/src/main/updater-events.test.ts b/src/main/updater-events.test.ts
index 7a24483ca70..6a643ae64a5 100644
--- a/src/main/updater-events.test.ts
+++ b/src/main/updater-events.test.ts
@@ -1,14 +1,23 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type { UpdateStatus } from '../shared/update-status-types'
 import type { registerAutoUpdaterHandlers } from './updater-events'
 
-const { appMock, nativeUpdaterMock, getLinuxRootPackageTypeMock } = vi.hoisted(() => ({
+const {
+  appMock,
+  nativeUpdaterMock,
+  getLinuxPackageTypeMock,
+  getLinuxRootPackageTypeMock,
+  isExternallyManagedLinuxInstallMock
+} = vi.hoisted(() => ({
   appMock: {
     isPackaged: true,
     getVersion: vi.fn(() => '1.0.51'),
     on: vi.fn()
   },
   nativeUpdaterMock: { on: vi.fn() },
-  getLinuxRootPackageTypeMock: vi.fn<() => 'deb' | 'rpm' | null>(() => 'deb')
+  getLinuxPackageTypeMock: vi.fn<() => 'deb' | 'rpm' | 'non-root' | 'unusable'>(() => 'deb'),
+  getLinuxRootPackageTypeMock: vi.fn<() => 'deb' | 'rpm' | null>(() => 'deb'),
+  isExternallyManagedLinuxInstallMock: vi.fn<() => boolean>(() => false)
 }))
 
 vi.mock('electron', () => ({
@@ -19,7 +28,9 @@ vi.mock('electron', () => ({
 
 // Why: only the packaged-marker resolver is faked so the real artifact tracking runs.
 vi.mock('./linux-update-package-type', () => ({
-  getLinuxRootPackageType: getLinuxRootPackageTypeMock
+  getLinuxPackageType: getLinuxPackageTypeMock,
+  getLinuxRootPackageType: getLinuxRootPackageTypeMock,
+  isExternallyManagedLinuxInstall: isExternallyManagedLinuxInstallMock
 }))
 
 vi.mock('./updater-changelog', () => ({ fetchChangelog: vi.fn().mockResolvedValue(null) }))
@@ -59,7 +70,9 @@ function createContext(overrides?: Partial<HandlerContext>): HandlerContext {
     consumeMissingManifestPrereleaseFallbackResult: vi.fn(() => null),
     getPublishingWindowLastGoodCheck: vi.fn(() => null),
     getMissingManifestPrereleaseFallbackUserInitiated: vi.fn(() => null),
-    getCurrentStatus: vi.fn(() => ({ state: 'checking' }) as never),
+    getCurrentStatus: vi.fn(
+      () => ({ state: 'downloading', percent: 42, version: '1.0.61' }) as never
+    ),
     getActiveUpdateCheckEventAttemptId: vi.fn(() => 1),
     getKnownReleaseUrl: vi.fn(() => undefined),
     getPendingInstallVersion: vi.fn(() => '1.0.61'),
@@ -107,7 +120,10 @@ describe('registerAutoUpdaterHandlers linux package artifact tracking', () => {
     appMock.on.mockReset()
     nativeUpdaterMock.on.mockReset()
     appMock.getVersion.mockReset().mockReturnValue('1.0.51')
+    getLinuxPackageTypeMock.mockReset().mockReturnValue('deb')
     getLinuxRootPackageTypeMock.mockReset().mockReturnValue('deb')
+    isExternallyManagedLinuxInstallMock.mockReset().mockReturnValue(false)
+    appMock.isPackaged = true
   })
 
   const register = async (
@@ -142,6 +158,94 @@ describe('registerAutoUpdaterHandlers linux package artifact tracking', () => {
     })
   })
 
+  it.each(['deb', 'rpm'] as const)(
+    'publishes manual-install recovery after a %s download',
+    async (packageType) => {
+      getLinuxPackageTypeMock.mockReturnValue(packageType)
+      getLinuxRootPackageTypeMock.mockReturnValue(packageType)
+      const { emit, context } = await register()
+      const fileName = packageType === 'deb' ? 'orca.deb' : 'orca.rpm'
+
+      emit(
+        'update-downloaded',
+        downloadedEvent({
+          downloadedFile: `/home/tester/.cache/orca-updater/pending/${fileName}`,
+          files: [{ url: fileName, sha512: DEB_SHA512 }]
+        })
+      )
+
+      expect(context.sendStatus).toHaveBeenLastCalledWith({
+        state: 'error',
+        message: 'Quit Orca before running the system package install command.',
+        recovery: {
+          kind: 'linux-package-install',
+          packageType,
+          reason: 'manual-install-required',
+          version: '1.0.61'
+        }
+      })
+    }
+  )
+
+  it.each([
+    ['missing', [{ url: 'orca-ide_1.0.61_amd64.deb' }]],
+    ['malformed', [{ url: 'orca-ide_1.0.61_amd64.deb', sha512: 'not-a-digest' }]]
+  ])('does not offer recovery when the package digest is %s', async (_kind, files) => {
+    const { emit, context, getArtifact } = await register()
+
+    emit('update-downloaded', downloadedEvent({ files }))
+
+    const status = {
+      state: 'error',
+      message:
+        'The downloaded package metadata could not be verified. Quit Orca before downloading and installing the update from the official release page.',
+      version: '1.0.61',
+      retryable: false
+    }
+    expect(context.sendStatus).toHaveBeenLastCalledWith(status)
+    expect(context.sendStatus).not.toHaveBeenCalledWith(
+      expect.objectContaining({ recovery: expect.anything() })
+    )
+    expect(getArtifact()).toBeNull()
+  })
+
+  it('publishes the normal downloaded state for AppImage builds', async () => {
+    getLinuxPackageTypeMock.mockReturnValue('non-root')
+    getLinuxRootPackageTypeMock.mockReturnValue(null)
+    const { emit, context } = await register()
+
+    emit('update-downloaded', downloadedEvent())
+    if (process.platform === 'darwin') {
+      const handler = nativeUpdaterMock.on.mock.calls.find(
+        ([eventName]) => eventName === 'update-downloaded'
+      )?.[1] as (() => void) | undefined
+      handler?.()
+    }
+
+    expect(context.sendStatus).toHaveBeenLastCalledWith({
+      state: 'downloaded',
+      version: '1.0.61',
+      releaseUrl: undefined
+    })
+  })
+
+  it('blocks downloaded-state handling when the packaged marker is unusable', async () => {
+    getLinuxPackageTypeMock.mockReturnValue('unusable')
+    getLinuxRootPackageTypeMock.mockReturnValue(null)
+    const { emit, context, getArtifact } = await register()
+
+    emit('update-downloaded', downloadedEvent())
+
+    expect(context.sendStatus).toHaveBeenLastCalledWith({
+      state: 'error',
+      message:
+        'Orca could not verify the installed Linux package format, so it will not install this update automatically. Download the update from the official release page and install it manually.',
+      version: '1.0.61',
+      retryable: false
+    })
+    expect(getArtifact()).toBeNull()
+  })
+
   it('passes the actual updater error into the install-failure handler', async () => {
     const handleQuitAndInstallFailure = vi.fn<(error?: unknown) => boolean>(() => true)
     const { emit, context } = await register({ handleQuitAndInstallFailure })
@@ -155,13 +259,64 @@ describe('registerAutoUpdaterHandlers linux package artifact tracking', () => {
     expect(context.sendErrorStatus).not.toHaveBeenCalled()
   })
 
-  it('drops the artifact once the update resolves as not available', async () => {
-    const { emit, getArtifact } = await register()
+  it('keeps manual-install recovery when a later check finds no newer release', async () => {
+    const { emit, context, getArtifact } = await register()
     emit('update-downloaded', downloadedEvent())
 
+    // Why: the download already produced this exact status, so the assertion below could pass
+    // on that call alone. Clear it so only the second emit can satisfy it.
+    vi.mocked(context.sendStatus).mockClear()
+
+    emit('update-not-available')
+
+    expect(getArtifact()).toEqual(expect.objectContaining({ version: '1.0.61' }))
+    expect(context.sendStatus).toHaveBeenLastCalledWith({
+      state: 'error',
+      message: 'Quit Orca before running the system package install command.',
+      recovery: {
+        kind: 'linux-package-install',
+        packageType: 'deb',
+        reason: 'manual-install-required',
+        version: '1.0.61'
+      }
+    })
+  })
+
+  it('keeps manual-install recovery when a later check finds only the installed release', async () => {
+    const { emit, context, getArtifact } = await register()
+    emit('update-downloaded', downloadedEvent())
+
+    // Why: the download already produced this exact status, so the assertion below could pass
+    // on that call alone. Clear it so only the second emit can satisfy it.
+    vi.mocked(context.sendStatus).mockClear()
+
+    emit('update-available', { version: '1.0.51' })
+
+    expect(getArtifact()).toEqual(expect.objectContaining({ version: '1.0.61' }))
+    expect(context.sendStatus).toHaveBeenLastCalledWith({
+      state: 'error',
+      message: 'Quit Orca before running the system package install command.',
+      recovery: {
+        kind: 'linux-package-install',
+        packageType: 'deb',
+        reason: 'manual-install-required',
+        version: '1.0.61'
+      }
+    })
+  })
+
+  it('clears recovery when a newer update takes over before no-update settles', async () => {
+    const { emit, context, getArtifact } = await register()
+    emit('update-downloaded', downloadedEvent())
+
+    emit('update-available', { version: '1.0.62' })
     emit('update-not-available')
 
     expect(getArtifact()).toBeNull()
+    expect(context.sendStatus).toHaveBeenLastCalledWith({
+      state: 'not-available',
+      userInitiated: undefined
+    })
   })
 
   it('drops the artifact when another version takes over the cycle', async () => {
@@ -173,6 +328,74 @@ describe('registerAutoUpdaterHandlers linux package artifact tracking', () => {
     expect(getArtifact()).toBeNull()
   })
 
+  it('ignores a downloaded event for an older target', async () => {
+    const { emit, context, getArtifact } = await register({
+      getCurrentStatus: vi.fn(() => ({ state: 'available', version: '1.0.62' }) as never),
+      getPendingInstallVersion: vi.fn(() => '1.0.62')
+    })
+
+    emit('update-downloaded', downloadedEvent())
+
+    expect(getArtifact()).toBeNull()
+    expect(context.sendStatus).not.toHaveBeenCalled()
+  })
+
+  it.each([
+    ['idle', { state: 'idle' }],
+    ['not-available', { state: 'not-available' }],
+    ['check error', { state: 'error', message: 'check failed' }]
+  ] as const)(
+    'ignores a downloaded event after the target is no longer active (%s)',
+    async (_name, status) => {
+      const { emit, context, getArtifact } = await register({
+        getCurrentStatus: vi.fn(() => status as never),
+        getPendingInstallVersion: vi.fn(() => '')
+      })
+
+      emit('update-downloaded', downloadedEvent())
+
+      expect(getArtifact()).toBeNull()
+      expect(context.sendStatus).not.toHaveBeenCalled()
+    }
+  )
+
+  it('accepts a matching event when the pending cache target was cleared', async () => {
+    const { emit, context, getArtifact } = await register({
+      getCurrentStatus: vi.fn(
+        () => ({ state: 'downloading', percent: 42, version: '1.0.61' }) as never
+      ),
+      getPendingInstallVersion: vi.fn(() => '')
+    })
+
+    emit('update-downloaded', downloadedEvent())
+
+    expect(getArtifact()).toEqual(expect.objectContaining({ version: '1.0.61' }))
+    expect(context.sendStatus).toHaveBeenLastCalledWith({
+      state: 'error',
+      message: 'Quit Orca before running the system package install command.',
+      recovery: {
+        kind: 'linux-package-install',
+        packageType: 'deb',
+        reason: 'manual-install-required',
+        version: '1.0.61'
+      }
+    })
+  })
+
+  it('ignores a downloaded event when the active status and pending target disagree', async () => {
+    const { emit, context, getArtifact } = await register({
+      getCurrentStatus: vi.fn(
+        () => ({ state: 'downloading', percent: 42, version: '1.0.62' }) as never
+      ),
+      getPendingInstallVersion: vi.fn(() => '1.0.62')
+    })
+
+    emit('update-downloaded', downloadedEvent())
+
+    expect(getArtifact()).toBeNull()
+    expect(context.sendStatus).not.toHaveBeenCalled()
+  })
+
   it('drops the artifact when progress reports a different pending version', async () => {
     const { emit, getArtifact } = await register({
       getPendingInstallVersion: vi.fn(() => '1.0.62')
@@ -184,13 +407,38 @@ describe('registerAutoUpdaterHandlers linux package artifact tracking', () => {
     expect(getArtifact()).toBeNull()
   })
 
-  it('keeps the artifact through a same-version recheck', async () => {
-    const { emit, getArtifact } = await register()
-    emit('update-downloaded', downloadedEvent())
+  // #17702: the externallyManaged flag is spread onto the fallback object only, so a retained
+  // manual-install status must still win. Cross-version case: the host could self-update when it
+  // downloaded, and cannot now.
+  it.each([false, true])(
+    'keeps manual-install recovery through a same-version recheck (externallyManaged=%s)',
+    async (externallyManaged) => {
+      isExternallyManagedLinuxInstallMock.mockReturnValue(externallyManaged)
+      let status: UpdateStatus = { state: 'downloading', percent: 100, version: '1.0.61' }
+      const { emit, context, getArtifact } = await register({
+        getCurrentStatus: vi.fn(() => status)
+      })
+      emit('update-downloaded', downloadedEvent())
 
-    emit('update-available', { version: '1.0.61' })
-    emit('download-progress', { percent: 100 })
+      // Why: the download already emitted the manual-install status, so waitFor would pass on that
+      // call alone. Clear it so the assertion can only be satisfied by the recheck.
+      vi.mocked(context.sendStatus).mockClear()
+      status = { state: 'checking' }
+      emit('update-available', { version: '1.0.61' })
 
-    expect(getArtifact()).toEqual(expect.objectContaining({ version: '1.0.61', path: DEB_PATH }))
-  })
+      expect(getArtifact()).toEqual(expect.objectContaining({ version: '1.0.61', path: DEB_PATH }))
+      await vi.waitFor(() =>
+        expect(context.sendStatus).toHaveBeenLastCalledWith({
+          state: 'error',
+          message: 'Quit Orca before running the system package install command.',
+          recovery: {
+            kind: 'linux-package-install',
+            packageType: 'deb',
+            reason: 'manual-install-required',
+            version: '1.0.61'
+          }
+        })
+      )
+    }
+  )
 })
diff --git a/src/main/updater-events.ts b/src/main/updater-events.ts
index b77cd8a8cc5..d2b7f2a1e83 100644
--- a/src/main/updater-events.ts
+++ b/src/main/updater-events.ts
@@ -1,11 +1,8 @@
-import { app, autoUpdater as nativeUpdater } from 'electron'
+import { app } from 'electron'
 import type { UpdateStatus } from '../shared/update-status-types'
 import {
-  consumeMacInstallGuardBypass,
-  deferMacQuitUntilInstallerReady,
-  handleMacInstallerReady,
   isMacInstallerReady,
-  isMacQuitAndInstallInFlight,
+  registerMacUpdaterEvents,
   resetMacInstallState
 } from './updater-mac-install'
 import { compareVersions } from './updater-fallback'
@@ -13,10 +10,12 @@ import { fetchChangelog } from './updater-changelog'
 import type { ElectronAutoUpdater } from './electron-updater-loader'
 import { recordUpdaterLifecycle } from './updater-lifecycle-diagnostics'
 import {
-  captureLinuxPackageArtifact,
-  clearTrackedLinuxPackageArtifact,
-  clearTrackedLinuxPackageArtifactForOtherVersion
-} from './linux-package-update-recovery'
+  getRetainedLinuxPackageManualInstallStatus,
+  resolveLinuxPackageDownloadedStatus,
+  shouldIgnoreDownloadedUpdateEvent
+} from './linux-package-downloaded-status'
+import { isExternallyManagedLinuxInstall } from './linux-update-package-type'
+import * as linuxPackageRecovery from './linux-package-update-recovery'
 
 const AUTO_UPDATE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000
 const AUTO_UPDATE_RETRY_INTERVAL_MS = 60 * 60 * 1000
@@ -101,47 +100,14 @@ export function registerAutoUpdaterHandlers({
   setAvailableVersion,
   setUserInitiatedCheck
 }: UpdaterHandlerContext): void {
-  // Why: electron-updater fires 'update-downloaded' before Squirrel.Mac finishes; track readiness to avoid a premature "ready".
-  if (process.platform === 'darwin') {
-    nativeUpdater.on('update-downloaded', () => {
-      const hasInstallableVersion = hasInstallableDownloadedVersion()
-      handleMacInstallerReady(hasInstallableVersion, performQuitAndInstall, () => {
-        // Send the held status only while its staged build is still installable.
-        sendStatus({
-          state: 'downloaded',
-          version: getPendingInstallVersion(),
-          releaseUrl: getKnownReleaseUrl()
-        })
-      })
-    })
-  }
-
-  app.on('before-quit', (event) => {
-    if (!shouldDeferMacQuitForInstall()) {
-      return
-    }
-    if (consumeMacInstallGuardBypass()) {
-      recordUpdaterLifecycle('macos_before_quit_guard_bypassed')
-      return
-    }
-    if (isMacQuitAndInstallInFlight()) {
-      return
-    }
-
-    // Why: quitting before Squirrel.Mac finishes staging leaves nothing to install; hold the quit until it's ready.
-    if (
-      deferMacQuitUntilInstallerReady(
-        getCurrentStatus(),
-        hasInstallableDownloadedVersion(),
-        getPendingInstallVersion,
-        sendStatus
-      )
-    ) {
-      recordUpdaterLifecycle('macos_before_quit_deferred', {
-        version: getPendingInstallVersion()
-      })
-      event.preventDefault()
-    }
+  registerMacUpdaterEvents({
+    getCurrentStatus,
+    hasInstallableDownloadedVersion,
+    getPendingInstallVersion,
+    getKnownReleaseUrl,
+    performQuitAndInstall,
+    shouldDeferMacQuitForInstall,
+    sendStatus
   })
 
   autoUpdater.on('checking-for-update', () => {
@@ -185,13 +151,18 @@ export function registerAutoUpdaterHandlers({
           scheduleAutomaticUpdateCheck(AUTO_UPDATE_CHECK_INTERVAL_MS)
         }
       }
-      sendStatus({ state: 'not-available', userInitiated: wasUserInitiated || undefined })
+      sendStatus(
+        getRetainedLinuxPackageManualInstallStatus() ?? {
+          state: 'not-available',
+          userInitiated: wasUserInitiated || undefined
+        }
+      )
       return
     }
 
     // Why: only a genuinely newer offer supersedes the retained package; a publishing-window blip that
     // momentarily resolves an older tag must not destroy a still-valid recovery path.
-    clearTrackedLinuxPackageArtifactForOtherVersion(info.version)
+    linuxPackageRecovery.clearTrackedLinuxPackageArtifactForOtherVersion(info.version)
 
     // Why: fetch the changelog in main to avoid renderer-side CORS on onorca.dev.
     markUpdateAvailableEventPending(attemptId)
@@ -228,7 +199,15 @@ export function registerAutoUpdaterHandlers({
           }
         }
 
-        sendStatus({ state: 'available', version: info.version, changelog })
+        sendStatus(
+          getRetainedLinuxPackageManualInstallStatus() ?? {
+            state: 'available',
+            version: info.version,
+            changelog,
+            // Why: the offer is real, but this host can never apply it — say so before a download is offered.
+            ...(isExternallyManagedLinuxInstall() ? { externallyManaged: true } : {})
+          }
+        )
       } finally {
         clearUpdateAvailableEventPending(attemptId)
       }
@@ -241,7 +220,7 @@ export function registerAutoUpdaterHandlers({
     }
     clearBackgroundCheckLaunchPending()
     resetMacInstallState()
-    clearTrackedLinuxPackageArtifact()
+    const retainedStatus = getRetainedLinuxPackageManualInstallStatus()
     const missingManifestFallback = consumeMissingManifestPrereleaseFallbackResult()
     const publishingWindowLastGoodCheck = getPublishingWindowLastGoodCheck()
     const wasUserInitiated = missingManifestFallback?.userInitiated ?? getUserInitiatedCheck()
@@ -262,7 +241,11 @@ export function registerAutoUpdaterHandlers({
         }
       }
     }
-    sendStatus({ state: 'not-available', userInitiated: wasUserInitiated || undefined })
+    // Why: a later check can report no newer release while a verified deb/rpm is still waiting for
+    // the user to install it outside Orca. Keep both the artifact and its recovery card reachable.
+    sendStatus(
+      retainedStatus ?? { state: 'not-available', userInitiated: wasUserInitiated || undefined }
+    )
     if (localBuildCheck || pinnedBuildCheck) {
       restoreReleaseUpdateSource()
     }
@@ -271,7 +254,7 @@ export function registerAutoUpdaterHandlers({
   autoUpdater.on('download-progress', (progress) => {
     clearBackgroundCheckLaunchPending()
     const version = getPendingInstallVersion()
-    clearTrackedLinuxPackageArtifactForOtherVersion(version)
+    linuxPackageRecovery.clearTrackedLinuxPackageArtifactForOtherVersion(version)
     sendStatus({
       state: 'downloading',
       percent: Math.round(progress.percent),
@@ -280,6 +263,16 @@ export function registerAutoUpdaterHandlers({
   })
 
   autoUpdater.on('update-downloaded', (info) => {
+    // Why: an earlier download can finish after a newer target replaced it; uncached pre-staged events have no target to compare.
+    if (
+      shouldIgnoreDownloadedUpdateEvent(
+        getCurrentStatus(),
+        info.version,
+        getPendingInstallVersion()
+      )
+    ) {
+      return
+    }
     clearBackgroundCheckLaunchPending()
     // Release downloads remain newer-only; the local source was validated before checking, and a pinned jump is explicit.
     if (
@@ -288,14 +281,17 @@ export function registerAutoUpdaterHandlers({
       compareVersions(info.version, app.getVersion()) <= 0
     ) {
       clearAvailableUpdateContext()
-      clearTrackedLinuxPackageArtifact()
+      linuxPackageRecovery.clearTrackedLinuxPackageArtifact()
       sendStatus({ state: 'not-available' })
       return
     }
-    // Why: retain the verified artifact now — the 'error' event after a failed install no longer carries it.
-    captureLinuxPackageArtifact(info)
     const macInstallerReady = process.platform === 'darwin' ? isMacInstallerReady() : true
     recordUpdaterLifecycle('update_downloaded', { version: info.version, macInstallerReady })
+    const linuxPackageStatus = resolveLinuxPackageDownloadedStatus(info)
+    if (linuxPackageStatus) {
+      sendStatus(linuxPackageStatus)
+      return
+    }
     // On macOS, defer 'downloaded' until Squirrel.Mac finishes processing; other platforms are ready immediately.
     if (process.platform === 'darwin' && !macInstallerReady) {
       // Keep the UI at 100% downloaded while Squirrel processes, to avoid a premature "ready to install".
diff --git a/src/main/updater-fallback.ts b/src/main/updater-fallback.ts
index 22cfb049555..62ec3ff3b8c 100644
--- a/src/main/updater-fallback.ts
+++ b/src/main/updater-fallback.ts
@@ -49,13 +49,12 @@ export function statusesEqual(left: UpdateStatus, right: UpdateStatus): boolean
       return (
         right.state === 'error' &&
         left.message === right.message &&
+        left.version === right.version &&
+        left.retryable === right.retryable &&
         left.userInitiated === right.userInitiated &&
         left.activeNudgeId === right.activeNudgeId &&
-        // Why: clearing recovery must reach the renderer even when the message is unchanged, or dead actions stay enabled.
-        left.recovery?.kind === right.recovery?.kind &&
-        left.recovery?.packageType === right.recovery?.packageType &&
-        left.recovery?.reason === right.recovery?.reason &&
-        left.recovery?.version === right.recovery?.version
+        // Recovery identity fences async actions, so same-valued recaptures must reach the renderer.
+        left.recovery === right.recovery
       )
   }
 }
diff --git a/src/main/updater-linux-package-recovery-actions.test.ts b/src/main/updater-linux-package-recovery-actions.test.ts
index ff0b974bf7d..9a546dd8fac 100644
--- a/src/main/updater-linux-package-recovery-actions.test.ts
+++ b/src/main/updater-linux-package-recovery-actions.test.ts
@@ -10,8 +10,8 @@ const {
   getTrackedLinuxPackageArtifactMock,
   recordUpdaterLifecycleMock,
   resolveLinuxPackageInstallInstructionsMock,
-  revalidateLinuxPackageForInstallMock,
-  revealLinuxPackageMock,
+  resolveLinuxPackageRevealTargetMock,
+  showItemInFolderMock,
   resetHandlers
 } = vi.hoisted(() => {
   const updaterHandlers = new Map<string, ((...args: unknown[]) => void)[]>()
@@ -44,8 +44,8 @@ const {
     getTrackedLinuxPackageArtifactMock: vi.fn(),
     recordUpdaterLifecycleMock: vi.fn(),
     resolveLinuxPackageInstallInstructionsMock: vi.fn(),
-    revalidateLinuxPackageForInstallMock: vi.fn(),
-    revealLinuxPackageMock: vi.fn(),
+    resolveLinuxPackageRevealTargetMock: vi.fn(),
+    showItemInFolderMock: vi.fn(),
     resetHandlers: () => updaterHandlers.clear()
   }
 })
@@ -55,6 +55,7 @@ vi.mock('electron', () => ({
   BrowserWindow: { getAllWindows: vi.fn(() => []) },
   autoUpdater: { on: vi.fn() },
   powerMonitor: { on: vi.fn() },
+  shell: { showItemInFolder: showItemInFolderMock },
   net: { fetch: vi.fn() }
 }))
 
@@ -78,15 +79,18 @@ vi.mock('./update-install-exit-watchdog', () => ({
 vi.mock('./updater-lifecycle-diagnostics', () => ({
   recordUpdaterLifecycle: recordUpdaterLifecycleMock
 }))
-vi.mock('./linux-update-package-type', () => ({ getLinuxRootPackageType: () => 'deb' }))
+vi.mock('./linux-update-package-type', () => ({
+  getLinuxPackageType: () => 'deb',
+  getLinuxRootPackageType: () => 'deb',
+  isExternallyManagedLinuxInstall: () => false
+}))
 vi.mock('./linux-package-update-recovery', () => ({
-  captureLinuxPackageArtifact: vi.fn(),
+  captureLinuxPackageArtifact: vi.fn(() => getTrackedLinuxPackageArtifactMock()),
   clearTrackedLinuxPackageArtifact: clearTrackedLinuxPackageArtifactMock,
   clearTrackedLinuxPackageArtifactForOtherVersion: vi.fn(),
   getTrackedLinuxPackageArtifact: getTrackedLinuxPackageArtifactMock,
   resolveLinuxPackageInstallInstructions: resolveLinuxPackageInstallInstructionsMock,
-  revalidateLinuxPackageForInstall: revalidateLinuxPackageForInstallMock,
-  revealLinuxPackage: revealLinuxPackageMock
+  resolveLinuxPackageRevealTarget: resolveLinuxPackageRevealTargetMock
 }))
 
 const ARTIFACT = {
@@ -95,6 +99,16 @@ const ARTIFACT = {
   path: '/home/tester/.cache/orca-updater/pending/orca-ide_1.0.61_amd64.deb',
   sha512: 'LHlL7dKoqg98gS2nfQv878dK+UoktbAkm4M20/hoJ2Qr0Kqsa3MSL4VmWy/Lll/MYjQFkpvOxduQ/vswentozA=='
 }
+const MANUAL_INSTALL_STATUS = {
+  state: 'error',
+  message: 'Quit Orca before running the system package install command.',
+  recovery: {
+    kind: 'linux-package-install',
+    packageType: 'deb',
+    reason: 'manual-install-required',
+    version: '1.0.61'
+  }
+} as const satisfies UpdateStatus
 
 warmUpdaterModule()
 
@@ -108,7 +122,7 @@ describe('linux package recovery actions', () => {
     vi.useFakeTimers()
     resetHandlers()
     autoUpdaterMock.checkForUpdates.mockReset().mockResolvedValue(null)
-    autoUpdaterMock.downloadUpdate.mockReset()
+    autoUpdaterMock.downloadUpdate.mockReset().mockResolvedValue([])
     autoUpdaterMock.quitAndInstall.mockReset()
     autoUpdaterMock.setFeedURL.mockReset()
     autoUpdaterMock.on.mockClear()
@@ -119,8 +133,10 @@ describe('linux package recovery actions', () => {
     resolveLinuxPackageInstallInstructionsMock
       .mockReset()
       .mockResolvedValue({ ok: true, command: "sudo apt install -- '<pkg>'", packageFileName: 'p' })
-    revalidateLinuxPackageForInstallMock.mockReset().mockResolvedValue({ ok: true })
-    revealLinuxPackageMock.mockReset().mockResolvedValue({ ok: true })
+    resolveLinuxPackageRevealTargetMock
+      .mockReset()
+      .mockResolvedValue({ ok: true, path: ARTIFACT.path })
+    showItemInFolderMock.mockReset()
   })
 
   const startUpdater = async (): Promise<{
@@ -135,13 +151,19 @@ describe('linux package recovery actions', () => {
     return { send, updater }
   }
 
-  /** Drives a pre-commit install failure so the status carries the recovery discriminant. */
-  const failInstall = async (updater: typeof UpdaterModule): Promise<void> => {
-    autoUpdaterMock.quitAndInstall.mockImplementation(() => {
-      autoUpdaterMock.emit('error', new Error('Command failed, exited with code 127'))
+  const activateRecovery = async (
+    updater: typeof UpdaterModule,
+    version = '1.0.61'
+  ): Promise<void> => {
+    autoUpdaterMock.checkForUpdates.mockImplementationOnce(() => {
+      autoUpdaterMock.emit('checking-for-update')
+      queueMicrotask(() => autoUpdaterMock.emit('update-available', { version }))
+      return Promise.resolve(null)
     })
-    updater.quitAndInstall()
-    await vi.advanceTimersByTimeAsync(100)
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+    updater.downloadUpdate()
+    autoUpdaterMock.emit('update-downloaded', { version })
   }
 
   type ErrorStatus = Extract<UpdateStatus, { state: 'error' }>
@@ -162,12 +184,12 @@ describe('linux package recovery actions', () => {
       'No package install recovery is available.'
     )
     expect(resolveLinuxPackageInstallInstructionsMock).not.toHaveBeenCalled()
-    expect(revealLinuxPackageMock).not.toHaveBeenCalled()
+    expect(resolveLinuxPackageRevealTargetMock).not.toHaveBeenCalled()
   })
 
-  it('revalidates the retained package on every invocation', async () => {
+  it('validates the retained package on every invocation', async () => {
     const { updater } = await startUpdater()
-    await failInstall(updater)
+    await activateRecovery(updater)
 
     await expect(updater.getLinuxPackageInstallInstructions()).resolves.toEqual({
       ok: true,
@@ -181,16 +203,74 @@ describe('linux package recovery actions', () => {
     const recovery = {
       kind: 'linux-package-install',
       packageType: 'deb',
-      reason: 'package-install-failed',
+      reason: 'manual-install-required',
       version: '1.0.61'
     }
     expect(resolveLinuxPackageInstallInstructionsMock.mock.calls).toEqual([[recovery], [recovery]])
-    expect(revealLinuxPackageMock.mock.calls).toEqual([[recovery], [recovery]])
+    expect(resolveLinuxPackageRevealTargetMock.mock.calls).toEqual([[recovery], [recovery]])
+    expect(showItemInFolderMock).toHaveBeenCalledTimes(2)
+  })
+
+  it('restores recovery after a recheck resolves without a terminal event', async () => {
+    const { send, updater } = await startUpdater()
+    await activateRecovery(updater)
+    send.mockClear()
+
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(1_000)
+
+    expect(send).toHaveBeenLastCalledWith('updater:status', MANUAL_INSTALL_STATUS)
+    await expect(updater.showLinuxPackage()).resolves.toBeUndefined()
+  })
+
+  it('restores recovery after a recheck fails', async () => {
+    const { send, updater } = await startUpdater()
+    await activateRecovery(updater)
+    autoUpdaterMock.checkForUpdates.mockRejectedValueOnce(new Error('offline'))
+    send.mockClear()
+
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(send).toHaveBeenLastCalledWith('updater:status', MANUAL_INSTALL_STATUS)
+    await expect(updater.getLinuxPackageInstallInstructions()).resolves.toEqual({
+      ok: true,
+      command: "sudo apt install -- '<pkg>'",
+      packageFileName: 'p'
+    })
+  })
+
+  it('restores recovery when a pinned check resolves to the current version', async () => {
+    const { send, updater } = await startUpdater()
+    await activateRecovery(updater)
+    send.mockClear()
+
+    updater.checkForUpdatesFromMenu({ channel: 'stable', targetTag: 'v1.0.51' })
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(send).toHaveBeenLastCalledWith('updater:status', MANUAL_INSTALL_STATUS)
+    await expect(updater.showLinuxPackage()).resolves.toBeUndefined()
+  })
+
+  it('restores recovery when resolving a pinned check fails', async () => {
+    const { send, updater } = await startUpdater()
+    await activateRecovery(updater)
+    send.mockClear()
+
+    updater.checkForUpdatesFromMenu({ channel: 'stable', targetTag: 'not-a-release-tag' })
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(send).toHaveBeenLastCalledWith('updater:status', MANUAL_INSTALL_STATUS)
+    await expect(updater.getLinuxPackageInstallInstructions()).resolves.toEqual({
+      ok: true,
+      command: "sudo apt install -- '<pkg>'",
+      packageFileName: 'p'
+    })
   })
 
   it('replaces the structured status when revalidation fails so stale actions die', async () => {
     const { send, updater } = await startUpdater()
-    await failInstall(updater)
+    await activateRecovery(updater)
     resolveLinuxPackageInstallInstructionsMock.mockResolvedValue({
       ok: false,
       reason: 'hash-mismatch'
@@ -203,6 +283,7 @@ describe('linux package recovery actions', () => {
     expect(clearTrackedLinuxPackageArtifactMock).toHaveBeenCalledTimes(1)
     const latest = errorStatuses(send).at(-1)
     expect(latest?.state === 'error' && latest.recovery).toBeUndefined()
+    expect(latest?.version).toBe('1.0.61')
     expect(recordUpdaterLifecycleMock).toHaveBeenCalledWith(
       'linux_package_recovery_unavailable',
       { reason: 'hash-mismatch', packageType: 'deb', version: '1.0.61' },
@@ -212,13 +293,13 @@ describe('linux package recovery actions', () => {
     await expect(updater.showLinuxPackage()).rejects.toThrow(
       'No package install recovery is available.'
     )
-    expect(revealLinuxPackageMock).not.toHaveBeenCalled()
+    expect(resolveLinuxPackageRevealTargetMock).not.toHaveBeenCalled()
   })
 
   it('clears recovery for both actions once the package is gone', async () => {
     const { updater } = await startUpdater()
-    await failInstall(updater)
-    revealLinuxPackageMock.mockResolvedValue({ ok: false, reason: 'missing' })
+    await activateRecovery(updater)
+    resolveLinuxPackageRevealTargetMock.mockResolvedValue({ ok: false, reason: 'missing' })
 
     await expect(updater.showLinuxPackage()).rejects.toThrow('no longer in the update cache')
 
@@ -231,7 +312,7 @@ describe('linux package recovery actions', () => {
     'resolves %s as a result and keeps the card usable instead of rejecting',
     async (reason) => {
       const { send, updater } = await startUpdater()
-      await failInstall(updater)
+      await activateRecovery(updater)
       resolveLinuxPackageInstallInstructionsMock.mockResolvedValue({ ok: false, reason })
       const statusesBefore = errorStatuses(send).length
 
@@ -256,8 +337,10 @@ describe('linux package recovery actions', () => {
 
   it('keeps recovery available after a transient read failure', async () => {
     const { send, updater } = await startUpdater()
-    await failInstall(updater)
-    revealLinuxPackageMock.mockResolvedValue({ ok: false, reason: 'read-failed' })
+    await activateRecovery(updater)
+    showItemInFolderMock.mockImplementationOnce(() => {
+      throw new Error('no file manager available')
+    })
     const statusesBefore = errorStatuses(send).length
 
     await expect(updater.showLinuxPackage()).rejects.toThrow(
@@ -267,13 +350,12 @@ describe('linux package recovery actions', () => {
     // Why: a read error is not evidence the artifact is bad, so retrying must stay possible.
     expect(clearTrackedLinuxPackageArtifactMock).not.toHaveBeenCalled()
     expect(errorStatuses(send)).toHaveLength(statusesBefore)
-    revealLinuxPackageMock.mockResolvedValue({ ok: true })
     await expect(updater.showLinuxPackage()).resolves.toBeUndefined()
   })
 
-  it('ignores a stale mismatch verdict once a newer recovery replaced the card', async () => {
+  it('ignores a stale mismatch after the same package cycle is captured again', async () => {
     const { send, updater } = await startUpdater()
-    await failInstall(updater)
+    await activateRecovery(updater)
     let settleValidation!: (result: { ok: false; reason: 'hash-mismatch' }) => void
     resolveLinuxPackageInstallInstructionsMock.mockReturnValue(
       new Promise((resolve) => {
@@ -283,12 +365,51 @@ describe('linux package recovery actions', () => {
 
     const pending = updater.getLinuxPackageInstallInstructions()
     // A 160 MB hash outlives the cycle it started in; a newer download takes over meanwhile.
-    getTrackedLinuxPackageArtifactMock.mockReturnValue({ ...ARTIFACT, version: '1.0.62' })
-    await failInstall(updater)
+    getTrackedLinuxPackageArtifactMock.mockReturnValue({ ...ARTIFACT })
+    await activateRecovery(updater)
     settleValidation({ ok: false, reason: 'hash-mismatch' })
 
-    await expect(pending).rejects.toThrow('no longer matches the verified release')
+    await expect(pending).rejects.toThrow('Package install recovery is no longer current.')
     expect(clearTrackedLinuxPackageArtifactMock).not.toHaveBeenCalled()
-    expect(errorStatuses(send).at(-1)?.recovery?.version).toBe('1.0.62')
+    expect(errorStatuses(send).at(-1)?.recovery?.version).toBe('1.0.61')
+  })
+
+  it('does not return stale instructions after a same-version recapture', async () => {
+    const { send, updater } = await startUpdater()
+    await activateRecovery(updater)
+    let settleValidation!: (result: { ok: true; command: string; packageFileName: string }) => void
+    resolveLinuxPackageInstallInstructionsMock.mockReturnValue(
+      new Promise((resolve) => {
+        settleValidation = resolve
+      })
+    )
+
+    const pending = updater.getLinuxPackageInstallInstructions()
+    getTrackedLinuxPackageArtifactMock.mockReturnValue({ ...ARTIFACT })
+    await activateRecovery(updater)
+    const statusesBefore = errorStatuses(send).length
+    settleValidation({ ok: true, command: 'stale command', packageFileName: 'stale.deb' })
+
+    await expect(pending).rejects.toThrow('Package install recovery is no longer current.')
+    expect(errorStatuses(send)).toHaveLength(statusesBefore)
+  })
+
+  it('does not reveal a stale path after a same-version recapture', async () => {
+    const { updater } = await startUpdater()
+    await activateRecovery(updater)
+    let settleValidation!: (result: { ok: true; path: string }) => void
+    resolveLinuxPackageRevealTargetMock.mockReturnValue(
+      new Promise((resolve) => {
+        settleValidation = resolve
+      })
+    )
+
+    const pending = updater.showLinuxPackage()
+    getTrackedLinuxPackageArtifactMock.mockReturnValue({ ...ARTIFACT })
+    await activateRecovery(updater)
+    settleValidation({ ok: true, path: ARTIFACT.path })
+
+    await expect(pending).rejects.toThrow('Package install recovery is no longer current.')
+    expect(showItemInFolderMock).not.toHaveBeenCalled()
   })
 })
diff --git a/src/main/updater-mac-install.ts b/src/main/updater-mac-install.ts
index e2441d64180..234cdc0b2c4 100644
--- a/src/main/updater-mac-install.ts
+++ b/src/main/updater-mac-install.ts
@@ -1,9 +1,66 @@
-import { app } from 'electron'
+import { app, autoUpdater as nativeUpdater } from 'electron'
 import type { UpdateStatus } from '../shared/update-status-types'
 import { recordUpdaterLifecycle } from './updater-lifecycle-diagnostics'
 
 const MAC_INSTALL_READY_TIMEOUT_MS = 15000
 
+export function registerMacUpdaterEvents({
+  getCurrentStatus,
+  hasInstallableDownloadedVersion,
+  getPendingInstallVersion,
+  getKnownReleaseUrl,
+  performQuitAndInstall,
+  shouldDeferMacQuitForInstall,
+  sendStatus
+}: {
+  getCurrentStatus: () => UpdateStatus
+  hasInstallableDownloadedVersion: () => boolean
+  getPendingInstallVersion: () => string
+  getKnownReleaseUrl: () => string | undefined
+  performQuitAndInstall: () => void | Promise<void>
+  shouldDeferMacQuitForInstall: () => boolean
+  sendStatus: (status: UpdateStatus) => void
+}): void {
+  if (process.platform === 'darwin') {
+    nativeUpdater.on('update-downloaded', () => {
+      const hasInstallableVersion = hasInstallableDownloadedVersion()
+      handleMacInstallerReady(hasInstallableVersion, performQuitAndInstall, () => {
+        sendStatus({
+          state: 'downloaded',
+          version: getPendingInstallVersion(),
+          releaseUrl: getKnownReleaseUrl()
+        })
+      })
+    })
+  }
+
+  app.on('before-quit', (event) => {
+    if (!shouldDeferMacQuitForInstall()) {
+      return
+    }
+    if (consumeMacInstallGuardBypass()) {
+      recordUpdaterLifecycle('macos_before_quit_guard_bypassed')
+      return
+    }
+    if (isMacQuitAndInstallInFlight()) {
+      return
+    }
+    if (
+      deferMacQuitUntilInstallerReady(
+        getCurrentStatus(),
+        hasInstallableDownloadedVersion(),
+        getPendingInstallVersion,
+        sendStatus
+      )
+    ) {
+      recordUpdaterLifecycle('macos_before_quit_deferred', {
+        version: getPendingInstallVersion()
+      })
+      event.preventDefault()
+    }
+  })
+}
+
 /** Whether Squirrel.Mac has finished downloading the update from the localhost proxy. */
 let squirrelReady = false
 /** Remembers a user/app quit request that arrived before Squirrel.Mac had a
diff --git a/src/main/updater-test-harness.ts b/src/main/updater-test-harness.ts
index 4a3315862f3..36687d0a79e 100644
--- a/src/main/updater-test-harness.ts
+++ b/src/main/updater-test-harness.ts
@@ -4,6 +4,7 @@ import { clearTrackedRealTimers, trackRealTimers } from './updater-test-timer-tr
 
 /** Loose spy signature for the electron/electron-updater calls the suites only assert on. */
 type UpdaterSpy = Mock<(...args: unknown[]) => unknown>
+type LinuxPackageType = 'deb' | 'rpm' | 'non-root' | 'unusable'
 
 type AutoUpdaterMock = {
   autoDownload: boolean
@@ -44,7 +45,11 @@ type UpdaterModuleFactories = {
   electronUpdaterLoader: () => { loadElectronAutoUpdater: () => AutoUpdaterMock }
   electronToolkitUtils: () => { is: { dev: boolean } }
   ipcPty: () => { killAllPty: UpdaterSpy }
-  linuxUpdatePackageType: () => { getLinuxRootPackageType: Mock<() => 'deb' | 'rpm' | null> }
+  linuxUpdatePackageType: () => {
+    getLinuxPackageType: Mock<() => LinuxPackageType>
+    getLinuxRootPackageType: Mock<() => 'deb' | 'rpm' | null>
+    isExternallyManagedLinuxInstall: Mock<() => boolean>
+  }
   updaterLifecycleDiagnostics: () => { recordUpdaterLifecycle: UpdaterSpy }
   updaterChangelog: () => { fetchChangelog: UpdaterSpy }
   updaterNudge: () => { fetchNudge: UpdaterSpy; shouldApplyNudge: UpdaterSpy }
@@ -68,7 +73,9 @@ export type UpdaterMocks = {
   isMock: { dev: boolean }
   killAllPtyMock: UpdaterSpy
   powerMonitorOnMock: UpdaterSpy
+  getLinuxPackageTypeMock: Mock<() => LinuxPackageType>
   getLinuxRootPackageTypeMock: Mock<() => 'deb' | 'rpm' | null>
+  isExternallyManagedLinuxInstallMock: Mock<() => boolean>
   recordUpdaterLifecycleMock: UpdaterSpy
   fetchChangelogMock: UpdaterSpy
   fetchNudgeMock: UpdaterSpy
@@ -206,6 +213,10 @@ export function createUpdaterMocks(): UpdaterMocks {
   const killAllPtyMock = vi.fn()
   const powerMonitorOnMock = vi.fn()
   const getLinuxRootPackageTypeMock = vi.fn<() => 'deb' | 'rpm' | null>(() => null)
+  const getLinuxPackageTypeMock = vi.fn<() => LinuxPackageType>(() => {
+    return getLinuxRootPackageTypeMock() ?? 'non-root'
+  })
+  const isExternallyManagedLinuxInstallMock = vi.fn<() => boolean>(() => false)
   const recordUpdaterLifecycleMock = vi.fn()
   const fetchChangelogMock = vi.fn()
   const fetchNudgeMock = vi.fn()
@@ -232,7 +243,11 @@ export function createUpdaterMocks(): UpdaterMocks {
     electronToolkitUtils: () => ({ is: isMock }),
     ipcPty: () => ({ killAllPty: killAllPtyMock }),
     // Why: only the marker resolver is faked so the real artifact capture/redaction path stays under test.
-    linuxUpdatePackageType: () => ({ getLinuxRootPackageType: getLinuxRootPackageTypeMock }),
+    linuxUpdatePackageType: () => ({
+      getLinuxPackageType: getLinuxPackageTypeMock,
+      getLinuxRootPackageType: getLinuxRootPackageTypeMock,
+      isExternallyManagedLinuxInstall: isExternallyManagedLinuxInstallMock
+    }),
     updaterLifecycleDiagnostics: () => ({ recordUpdaterLifecycle: recordUpdaterLifecycleMock }),
     updaterChangelog: () => ({ fetchChangelog: fetchChangelogMock }),
     updaterNudge: () => ({ fetchNudge: fetchNudgeMock, shouldApplyNudge: shouldApplyNudgeMock }),
@@ -276,6 +291,10 @@ export function createUpdaterMocks(): UpdaterMocks {
     disarmExitWatchdogMock.mockReset()
     powerMonitorOnMock.mockReset()
     getLinuxRootPackageTypeMock.mockReset().mockReturnValue(null)
+    getLinuxPackageTypeMock.mockReset().mockImplementation(() => {
+      return getLinuxRootPackageTypeMock() ?? 'non-root'
+    })
+    isExternallyManagedLinuxInstallMock.mockReset().mockReturnValue(false)
     recordUpdaterLifecycleMock.mockReset()
     fetchNudgeMock.mockReset().mockResolvedValue(null)
     shouldApplyNudgeMock.mockReset().mockReturnValue(false)
@@ -306,7 +325,9 @@ export function createUpdaterMocks(): UpdaterMocks {
     isMock,
     killAllPtyMock,
     powerMonitorOnMock,
+    getLinuxPackageTypeMock,
     getLinuxRootPackageTypeMock,
+    isExternallyManagedLinuxInstallMock,
     recordUpdaterLifecycleMock,
     fetchChangelogMock,
     fetchNudgeMock,
diff --git a/src/main/updater.fallback.test.ts b/src/main/updater.fallback.test.ts
index 9cbcc97c85e..767fef421e3 100644
--- a/src/main/updater.fallback.test.ts
+++ b/src/main/updater.fallback.test.ts
@@ -86,6 +86,23 @@ describe('statusesEqual', () => {
     ).toBe(false)
     expect(statusesEqual(withRecovery, { ...withRecovery })).toBe(true)
   })
+
+  it('delivers a same-valued recovery recaptured for a new package cycle', () => {
+    expect(statusesEqual(withRecovery, { ...withRecovery, recovery: { ...recovery } })).toBe(false)
+  })
+
+  it('separates generic errors by version and retryability', () => {
+    const error: UpdateStatus = {
+      state: 'error',
+      message: 'package unavailable',
+      version: '1.0.61',
+      retryable: false
+    }
+
+    expect(statusesEqual(error, { ...error, version: '1.0.62' })).toBe(false)
+    expect(statusesEqual(error, { ...error, retryable: true })).toBe(false)
+    expect(statusesEqual(error, { ...error })).toBe(true)
+  })
 })
 
 describe('isReleaseAssetsPublishingFailure', () => {
diff --git a/src/main/updater.headless-serve-install.test.ts b/src/main/updater.headless-serve-install.test.ts
index 08e2f519861..bae6474cc66 100644
--- a/src/main/updater.headless-serve-install.test.ts
+++ b/src/main/updater.headless-serve-install.test.ts
@@ -77,6 +77,11 @@ vi.mock('electron', () => ({
 
 vi.mock('electron-updater', () => ({ autoUpdater: autoUpdaterMock }))
 vi.mock('./electron-updater-loader', () => ({ loadElectronAutoUpdater: () => autoUpdaterMock }))
+vi.mock('./linux-update-package-type', () => ({
+  getLinuxPackageType: () => 'non-root',
+  getLinuxRootPackageType: () => null,
+  isExternallyManagedLinuxInstall: () => false
+}))
 vi.mock('@electron-toolkit/utils', () => ({ is: { dev: false } }))
 vi.mock('./ipc/pty', () => ({ killAllPty: killAllPtyMock }))
 vi.mock('./updater-changelog', () => ({ fetchChangelog: vi.fn().mockResolvedValue(null) }))
@@ -166,6 +171,7 @@ describe('headless serve update install handoff', () => {
 
     checkForUpdatesFromMenu()
     await vi.advanceTimersByTimeAsync(0)
+    autoUpdaterMock.emit('download-progress', { percent: 100 })
     autoUpdaterMock.emit('update-downloaded', { version: pendingInstaller.version })
     const nativeReadyHandler = nativeUpdaterMock.on.mock.calls.find(
       ([event]) => event === 'update-downloaded'
diff --git a/src/main/updater.install-failure-cause.test.ts b/src/main/updater.install-failure-cause.test.ts
index 6344a79d13b..bef63d6912a 100644
--- a/src/main/updater.install-failure-cause.test.ts
+++ b/src/main/updater.install-failure-cause.test.ts
@@ -101,6 +101,11 @@ vi.mock('./updater-nudge', () => ({
 vi.mock('./updater-lifecycle-diagnostics', () => ({
   recordUpdaterLifecycle: recordUpdaterLifecycleMock
 }))
+vi.mock('./linux-update-package-type', () => ({
+  getLinuxPackageType: () => 'non-root',
+  getLinuxRootPackageType: () => null,
+  isExternallyManagedLinuxInstall: () => false
+}))
 
 // The real electron-updater DebUpdater failure text when elevation is impossible.
 const DEB_ELEVATION_ERROR =
@@ -155,6 +160,8 @@ async function reachDownloaded(): Promise<typeof UpdaterModule> {
   autoUpdaterMock.emit('checking-for-update')
   autoUpdaterMock.emit('update-available', { version: '1.4.163' })
   await new Promise((resolve) => setTimeout(resolve, 0))
+  autoUpdaterMock.downloadUpdate.mockResolvedValue([])
+  updater.downloadUpdate()
   autoUpdaterMock.emit('update-downloaded', { version: '1.4.163' })
   expect(updater.getUpdateStatus().state).toBe('downloaded')
   return updater
diff --git a/src/main/updater.linux-externally-managed.test.ts b/src/main/updater.linux-externally-managed.test.ts
new file mode 100644
index 00000000000..0b63a8ec9ed
--- /dev/null
+++ b/src/main/updater.linux-externally-managed.test.ts
@@ -0,0 +1,155 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as UpdaterModule from './updater'
+import { loadUpdaterModule, warmUpdaterModule } from './updater-test-module-loader'
+import type { LinuxRootPackageType, UpdateStatus } from '../shared/update-status-types'
+
+const {
+  autoUpdaterMock,
+  getLinuxRootPackageTypeMock,
+  isExternallyManagedLinuxInstallMock,
+  recordUpdaterLifecycleMock,
+  fetchNewerReleaseTagsMock,
+  moduleFactories,
+  resetUpdaterMocks
+} = await vi.hoisted(async () => (await import('./updater-test-harness')).createUpdaterMocks())
+
+vi.mock('electron', () => moduleFactories.electron())
+vi.mock('electron-updater', () => moduleFactories.electronUpdater())
+vi.mock('./electron-updater-loader', () => moduleFactories.electronUpdaterLoader())
+vi.mock('@electron-toolkit/utils', () => moduleFactories.electronToolkitUtils())
+vi.mock('./ipc/pty', () => moduleFactories.ipcPty())
+vi.mock('./linux-update-package-type', () => moduleFactories.linuxUpdatePackageType())
+vi.mock('./updater-lifecycle-diagnostics', () => moduleFactories.updaterLifecycleDiagnostics())
+vi.mock('./updater-changelog', () => moduleFactories.updaterChangelog())
+vi.mock('./updater-nudge', () => moduleFactories.updaterNudge())
+vi.mock('./update-install-exit-watchdog', () => moduleFactories.updateInstallExitWatchdog())
+vi.mock('./updater-prerelease-feed', () => moduleFactories.updaterPrereleaseFeed())
+vi.mock('./local-builds/local-build-switch', () => moduleFactories.localBuildSwitch())
+vi.mock('./local-builds/local-build-feed-server', () => moduleFactories.localBuildFeedServer())
+
+const EXTERNALLY_MANAGED_MESSAGE =
+  'This copy of Orca is managed by your system package manager, so Orca cannot install updates itself. Update Orca through your distribution instead.'
+
+/** #17702: a repackaged install (AUR, Nix, container rebuild) inherits the .deb `package-type`
+ *  marker but has no package manager that can apply an Orca-downloaded package. */
+warmUpdaterModule()
+
+describe('updater externally managed Linux installs', () => {
+  beforeEach(() => {
+    resetUpdaterMocks()
+  })
+
+  async function startUpdater(options: {
+    packageType: LinuxRootPackageType | null
+    externallyManaged: boolean
+  }): Promise<{ send: ReturnType<typeof vi.fn>; updater: typeof UpdaterModule }> {
+    getLinuxRootPackageTypeMock.mockReturnValue(options.packageType)
+    isExternallyManagedLinuxInstallMock.mockReturnValue(options.externallyManaged)
+    vi.useFakeTimers()
+    fetchNewerReleaseTagsMock.mockResolvedValue({ tags: ['v1.0.61'], state: 'ready' })
+    autoUpdaterMock.checkForUpdates.mockImplementation(() => {
+      autoUpdaterMock.emit('checking-for-update')
+      queueMicrotask(() => autoUpdaterMock.emit('update-available', { version: '1.0.61' }))
+      return Promise.resolve(undefined)
+    })
+    const send = vi.fn()
+    const updater = await loadUpdaterModule()
+    updater.setupAutoUpdater({ webContents: { send } } as never, {
+      getLastUpdateCheckAt: () => Date.now(),
+      installMode: 'interactive'
+    })
+    return { send, updater }
+  }
+
+  function lastStatus(send: ReturnType<typeof vi.fn>): UpdateStatus | undefined {
+    return send.mock.calls.findLast(([channel]) => channel === 'updater:status')?.[1]
+  }
+
+  it('still reports the available release so the user can update through their distribution', async () => {
+    const { send, updater } = await startUpdater({ packageType: 'deb', externallyManaged: true })
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(lastStatus(send)).toEqual({
+      state: 'available',
+      version: '1.0.61',
+      changelog: null,
+      externallyManaged: true
+    })
+  })
+
+  it('does not flag a real deb host', async () => {
+    const { send, updater } = await startUpdater({ packageType: 'deb', externallyManaged: false })
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+
+    const status = lastStatus(send)
+    expect(status).toEqual({ state: 'available', version: '1.0.61', changelog: null })
+    expect(status && 'externallyManaged' in status).toBe(false)
+  })
+
+  it('refuses the download instead of spending it on a package it can never install', async () => {
+    const { send, updater } = await startUpdater({ packageType: 'deb', externallyManaged: true })
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+
+    updater.downloadUpdate()
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(autoUpdaterMock.downloadUpdate).not.toHaveBeenCalled()
+    expect(lastStatus(send)).toEqual({
+      state: 'error',
+      message: EXTERNALLY_MANAGED_MESSAGE,
+      version: '1.0.61',
+      retryable: false
+    })
+  })
+
+  it('marks the refusal non-retryable so the card offers no Retry Download', async () => {
+    const { send, updater } = await startUpdater({ packageType: 'deb', externallyManaged: true })
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+    updater.downloadUpdate()
+    await vi.advanceTimersByTimeAsync(0)
+
+    const status = lastStatus(send)
+    expect(status?.state === 'error' && status.retryable).toBe(false)
+  })
+
+  it('records the blocked download for field diagnosis', async () => {
+    const { updater } = await startUpdater({ packageType: 'deb', externallyManaged: true })
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+    updater.downloadUpdate()
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(recordUpdaterLifecycleMock).toHaveBeenCalledWith(
+      'linux_package_externally_managed_download_blocked',
+      { version: '1.0.61' }
+    )
+  })
+
+  it('leaves an ordinary deb host able to download', async () => {
+    const { updater } = await startUpdater({ packageType: 'deb', externallyManaged: false })
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+    autoUpdaterMock.downloadUpdate.mockResolvedValue([])
+
+    updater.downloadUpdate()
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(autoUpdaterMock.downloadUpdate).toHaveBeenCalled()
+  })
+
+  it('leaves an AppImage host able to download', async () => {
+    const { updater } = await startUpdater({ packageType: null, externallyManaged: false })
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+    autoUpdaterMock.downloadUpdate.mockResolvedValue([])
+
+    updater.downloadUpdate()
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(autoUpdaterMock.downloadUpdate).toHaveBeenCalled()
+  })
+})
diff --git a/src/main/updater.linux-root-package-install.test.ts b/src/main/updater.linux-root-package-install.test.ts
index b52bf40f4c8..01f489bd8ef 100644
--- a/src/main/updater.linux-root-package-install.test.ts
+++ b/src/main/updater.linux-root-package-install.test.ts
@@ -1,12 +1,8 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import { createHash } from 'node:crypto'
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'
-import { tmpdir } from 'node:os'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
 import { join } from 'node:path'
+import { tmpdir } from 'node:os'
 import type * as UpdaterModule from './updater'
-import type * as RecoveryModule from './linux-package-update-recovery'
-import type { UpdateStatus } from '../shared/update-status-types'
-import { PRE_COMMIT_INSTALL_FAILURE } from './updater-test-harness'
+import type { LinuxRootPackageType, UpdateStatus } from '../shared/update-status-types'
 import { loadUpdaterModule, warmUpdaterModule } from './updater-test-module-loader'
 
 const {
@@ -14,10 +10,9 @@ const {
   nativeUpdaterMock,
   autoUpdaterMock,
   killAllPtyMock,
+  getLinuxPackageTypeMock,
   getLinuxRootPackageTypeMock,
   recordUpdaterLifecycleMock,
-  armExitWatchdogMock,
-  disarmExitWatchdogMock,
   fetchNewerReleaseTagsMock,
   moduleFactories,
   resetUpdaterMocks
@@ -37,687 +32,222 @@ vi.mock('./updater-prerelease-feed', () => moduleFactories.updaterPrereleaseFeed
 vi.mock('./local-builds/local-build-switch', () => moduleFactories.localBuildSwitch())
 vi.mock('./local-builds/local-build-feed-server', () => moduleFactories.localBuildFeedServer())
 
-type RevalidationVerdict = Awaited<
-  ReturnType<typeof RecoveryModule.revalidateLinuxPackageForInstall>
->
+const packageSha512 = Buffer.alloc(64).toString('base64')
 
-// Captured before any vi.useFakeTimers() call: the only handle left that still yields to libuv.
-const realSetTimeout = globalThis.setTimeout
-
-type StagedLinuxPackages = {
-  cacheRoot: string
-  debPath: string
-  debSha512: string
-  rpmPath: string
-  rpmSha512: string
-}
-
-/**
- * Stages real packages inside a real updater cache: every install re-proves the retained digest by
- * streaming the file off disk, so a path that never existed would abort before reaching the native
- * updater. Returns the actual digests for the download events.
- */
-function stageLinuxUpdateCache(): StagedLinuxPackages {
-  const cacheRoot = mkdtempSync(join(tmpdir(), 'orca-updater-cache-'))
-  const pendingDir = join(cacheRoot, 'orca-updater', 'pending')
-  mkdirSync(pendingDir, { recursive: true })
-  const stagePackage = (fileName: string): { path: string; sha512: string } => {
-    const packagePath = join(pendingDir, fileName)
-    const bytes = Buffer.from(`orca test package ${fileName}`)
-    writeFileSync(packagePath, bytes)
-    return { path: packagePath, sha512: createHash('sha512').update(bytes).digest('base64') }
-  }
-  const deb = stagePackage('orca-ide_1.0.61_amd64.deb')
-  const rpm = stagePackage('orca-ide-1.0.61.x86_64.rpm')
+function downloadedEvent(packageType: LinuxRootPackageType): Record<string, unknown> {
+  const fileName =
+    packageType === 'deb' ? 'orca-ide_1.0.61_amd64.deb' : 'orca-ide-1.0.61.x86_64.rpm'
   return {
-    cacheRoot,
-    debPath: deb.path,
-    debSha512: deb.sha512,
-    rpmPath: rpm.path,
-    rpmSha512: rpm.sha512
-  }
-}
-
-type RevalidationProbe = {
-  /** Switch to held mode, where a verdict only lands when the test says so. Must precede startUpdater. */
-  hold: () => void
-  settle: (verdict: RevalidationVerdict) => void
-  fail: (error: Error) => void
-  invocationCount: () => number
-  /** Resolves once every re-proof this test started has finished. */
-  drain: () => Promise<void>
-}
-
-/** One outstanding re-proof; `awaitable` stays false while a held verdict has no way to settle. */
-type OutstandingRevalidation = { promise: Promise<unknown>; awaitable: boolean }
-
-/**
- * Wraps the pre-install re-proof so tests can await the real disk read instead of budgeting
- * event-loop turns, and can hold a verdict open at an exact point in the cycle. Only that one call
- * is wrapped — the artifact state stays real.
- */
-function probeRevalidation(): RevalidationProbe {
-  type Artifact = Parameters<typeof RecoveryModule.revalidateLinuxPackageForInstall>[0]
-  let held = false
-  let invocationCount = 0
-  let pending: {
-    resolve: (verdict: RevalidationVerdict) => void
-    reject: (error: Error) => void
-    entry: OutstandingRevalidation
-  } | null = null
-  const outstanding: OutstandingRevalidation[] = []
-
-  const track = (verdict: Promise<RevalidationVerdict>, awaitable: boolean) => {
-    const noop = (): void => undefined
-    const entry: OutstandingRevalidation = { promise: verdict.then(noop, noop), awaitable }
-    outstanding.push(entry)
-    return entry
-  }
-
-  vi.doMock('./linux-package-update-recovery', async () => {
-    const actual = await vi.importActual<typeof RecoveryModule>('./linux-package-update-recovery')
-    return {
-      ...actual,
-      revalidateLinuxPackageForInstall: vi.fn((artifact: Artifact) => {
-        invocationCount += 1
-        if (!held) {
-          const verdict = actual.revalidateLinuxPackageForInstall(artifact)
-          track(verdict, true)
-          return verdict
-        }
-        let resolve!: (verdict: RevalidationVerdict) => void
-        let reject!: (error: Error) => void
-        const verdict = new Promise<RevalidationVerdict>((res, rej) => {
-          resolve = res
-          reject = rej
-        })
-        pending = { resolve, reject, entry: track(verdict, false) }
-        return verdict
-      })
-    }
-  })
-
-  const release = (): typeof pending => {
-    const current = pending
-    if (current) {
-      current.entry.awaitable = true
-      pending = null
-    }
-    return current
-  }
-
-  return {
-    hold: () => {
-      held = true
-    },
-    settle: (verdict) => release()?.resolve(verdict),
-    fail: (error) => release()?.reject(error),
-    invocationCount: () => invocationCount,
-    drain: async () => {
-      // A verdict still held open can never settle on its own, so draining skips it.
-      let ready = outstanding.filter((entry) => entry.awaitable)
-      while (ready.length > 0) {
-        for (const entry of ready) {
-          outstanding.splice(outstanding.indexOf(entry), 1)
-        }
-        await Promise.all(ready.map((entry) => entry.promise))
-        ready = outstanding.filter((entry) => entry.awaitable)
-      }
-    }
+    version: '1.0.61',
+    downloadedFile: join(tmpdir(), 'orca-updater', 'pending', fileName),
+    files: [{ url: fileName, sha512: packageSha512 }]
   }
 }
 
 warmUpdaterModule()
 
-describe('updater', () => {
+describe('updater Linux root packages', () => {
   beforeEach(() => {
     resetUpdaterMocks()
   })
 
-  describe('linux root package install recovery', () => {
-    let staged: StagedLinuxPackages
-    let EXIT_127: string
-    let revalidation: RevalidationProbe
+  async function startUpdater(
+    packageType: LinuxRootPackageType | null,
+    installMode: UpdaterModule.UpdateInstallMode = 'interactive'
+  ): Promise<{ send: ReturnType<typeof vi.fn>; updater: typeof UpdaterModule }> {
+    getLinuxRootPackageTypeMock.mockReturnValue(packageType)
+    vi.useFakeTimers()
+    fetchNewerReleaseTagsMock.mockResolvedValue({ tags: ['v1.0.61'], state: 'ready' })
+    autoUpdaterMock.checkForUpdates.mockImplementation(() => {
+      autoUpdaterMock.emit('checking-for-update')
+      queueMicrotask(() => autoUpdaterMock.emit('update-available', { version: '1.0.61' }))
+      return Promise.resolve(undefined)
+    })
+    const send = vi.fn()
+    const updater = await loadUpdaterModule()
+    updater.setupAutoUpdater({ webContents: { send } } as never, {
+      getLastUpdateCheckAt: () => Date.now(),
+      installMode
+    })
+    return { send, updater }
+  }
 
-    // Why: the quit timer needs fake time, and the work it starts needs real event-loop turns —
-    // fake timers never advance libuv. The re-proof itself is awaited rather than counted out
-    // (#15243): its disk read is wall-clock bound, so a loaded runner outlasts any turn budget and
-    // the tail lands in the next test.
-    const settleQuitAndInstall = async (): Promise<void> => {
-      await vi.advanceTimersByTimeAsync(100)
-      await revalidation.drain()
-      // Full Node 26 shards can briefly starve the libuv poll phase while other workers transform
-      // tests; keep the operation alive long enough to avoid leaking it into the next test.
-      for (let turn = 0; turn < 200; turn += 1) {
-        await new Promise((resolve) => realSetTimeout(resolve, 0))
-      }
-      await vi.advanceTimersByTimeAsync(0)
+  function lastStatus(send: ReturnType<typeof vi.fn>): UpdateStatus | undefined {
+    return send.mock.calls.findLast(([channel]) => channel === 'updater:status')?.[1]
+  }
+
+  function markMacInstallerReady(): void {
+    if (process.platform !== 'darwin') {
+      return
     }
+    const handler = nativeUpdaterMock.on.mock.calls.find(
+      ([eventName]) => eventName === 'update-downloaded'
+    )?.[1] as (() => void) | undefined
+    handler?.()
+  }
 
-    beforeEach(() => {
-      staged = stageLinuxUpdateCache()
-      vi.stubEnv('XDG_CACHE_HOME', staged.cacheRoot)
-      EXIT_127 = `Command failed: /usr/bin/pkexec /usr/bin/dpkg -i ${staged.debPath}, exited with code 127`
-      revalidation = probeRevalidation()
-    })
-
-    afterEach(async () => {
-      // Why: an unfinished re-proof keeps running against this test's module instance, whose mocks
-      // are the same singletons the next test asserts on — it would double every install-path count.
-      await revalidation.drain()
-      vi.doUnmock('./linux-package-update-recovery')
-      vi.unstubAllEnvs()
-      rmSync(staged.cacheRoot, { recursive: true, force: true })
-    })
-
-    const lastStatus = (send: ReturnType<typeof vi.fn>): UpdateStatus | undefined =>
-      send.mock.calls.findLast(([channel]) => channel === 'updater:status')?.[1]
-
-    const PRE_COMMIT_FAILURE_MESSAGE = PRE_COMMIT_INSTALL_FAILURE
-    const AGENT_STDERR =
-      'pkexec: Error executing command as another user: No authentication agent found.'
-
-    const downloadedEvent = (overrides?: Record<string, unknown>): Record<string, unknown> => ({
-      version: '1.0.61',
-      downloadedFile: staged.debPath,
-      files: [{ url: 'orca-ide_1.0.61_amd64.deb', sha512: staged.debSha512 }],
-      ...overrides
-    })
-
-    const rpmDownloadedEvent = (): Record<string, unknown> =>
-      downloadedEvent({
-        downloadedFile: staged.rpmPath,
-        files: [{ url: 'orca-ide-1.0.61.x86_64.rpm', sha512: staged.rpmSha512 }]
-      })
-
-    const startUpdater = async (
-      packageType: 'deb' | 'rpm' | null
-    ): Promise<{ send: ReturnType<typeof vi.fn>; updater: typeof UpdaterModule }> => {
-      getLinuxRootPackageTypeMock.mockReturnValue(packageType)
-      vi.useFakeTimers()
-      fetchNewerReleaseTagsMock.mockResolvedValue({ tags: ['v1.0.61'], state: 'ready' })
-      autoUpdaterMock.checkForUpdates.mockImplementation(() => {
-        autoUpdaterMock.emit('checking-for-update')
-        queueMicrotask(() => autoUpdaterMock.emit('update-available', { version: '1.0.61' }))
-        return Promise.resolve(undefined)
-      })
-      const send = vi.fn()
-      const updater = await loadUpdaterModule()
-      updater.setupAutoUpdater({ webContents: { send } } as never, {
-        getLastUpdateCheckAt: () => Date.now()
-      })
-      return { send, updater }
+  async function reachDownloaded(
+    updater: typeof UpdaterModule,
+    event: Record<string, unknown>,
+    markInstallerReady = false
+  ): Promise<void> {
+    updater.checkForUpdatesFromMenu()
+    await vi.advanceTimersByTimeAsync(0)
+    autoUpdaterMock.downloadUpdate.mockResolvedValue([])
+    updater.downloadUpdate()
+    autoUpdaterMock.emit('update-downloaded', event)
+    if (markInstallerReady) {
+      markMacInstallerReady()
     }
+    await vi.advanceTimersByTimeAsync(0)
+  }
 
-    const reachDownloaded = async (
-      updater: typeof UpdaterModule,
-      event: Record<string, unknown>
-    ): Promise<void> => {
-      updater.checkForUpdatesFromMenu()
-      await vi.advanceTimersByTimeAsync(0)
-      autoUpdaterMock.emit('update-downloaded', event)
-      if (process.platform === 'darwin') {
-        const nativeReady = nativeUpdaterMock.on.mock.calls.find(
-          ([eventName]) => eventName === 'update-downloaded'
-        )?.[1] as (() => void) | undefined
-        nativeReady?.()
-      }
-      await vi.advanceTimersByTimeAsync(0)
-    }
-
-    it('disables install-on-quit for deb and rpm root packages', async () => {
-      for (const packageType of ['deb', 'rpm'] as const) {
-        vi.resetModules()
-        autoUpdaterMock.autoInstallOnAppQuit = true
-        getLinuxRootPackageTypeMock.mockReturnValue(packageType)
-        const { setupAutoUpdater } = await loadUpdaterModule()
-
-        setupAutoUpdater({ webContents: { send: vi.fn() } } as never, {
-          getLastUpdateCheckAt: () => Date.now(),
-          installMode: 'interactive'
-        })
-
-        expect(autoUpdaterMock.autoInstallOnAppQuit).toBe(false)
-      }
-    })
-
-    it('keeps interactive install-on-quit when no root-package marker is present', async () => {
-      autoUpdaterMock.autoInstallOnAppQuit = false
-      const { setupAutoUpdater } = await loadUpdaterModule()
-
-      setupAutoUpdater({ webContents: { send: vi.fn() } } as never, {
-        getLastUpdateCheckAt: () => Date.now(),
-        installMode: 'interactive'
-      })
-
-      expect(autoUpdaterMock.autoInstallOnAppQuit).toBe(true)
-    })
-
-    it('leaves headless serve installs supervisor-controlled', async () => {
-      for (const installMode of [
-        'supervised-headless-serve',
-        'unsupported-headless-serve'
-      ] as const) {
-        vi.resetModules()
-        autoUpdaterMock.autoInstallOnAppQuit = true
-        const { setupAutoUpdater } = await loadUpdaterModule()
-
-        setupAutoUpdater({ webContents: { send: vi.fn() } } as never, {
-          getLastUpdateCheckAt: () => Date.now(),
-          installMode
-        })
-
-        expect(autoUpdaterMock.autoInstallOnAppQuit).toBe(false)
-      }
-    })
-
-    it('sends structured recovery when quitAndInstall throws synchronously', async () => {
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-      autoUpdaterMock.quitAndInstall.mockImplementation(() => {
-        autoUpdaterMock.logger?.error(`${AGENT_STDERR} target ${staged.debPath}`)
-        throw new Error(EXIT_127)
-      })
-
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-
-      // Why: the sync throw ends capture before the catch, so the stashed text must survive.
-      expect(send).toHaveBeenCalledWith('updater:status', {
-        state: 'error',
-        message: `${AGENT_STDERR} target <package>`,
-        recovery: {
-          kind: 'linux-package-install',
-          packageType: 'deb',
-          reason: 'authentication-agent-unavailable',
-          version: '1.0.61'
-        }
-      })
-    })
-
-    it('recovers an event-driven pre-commit failure without tearing down the session', async () => {
+  it.each(['deb', 'rpm'] as const)(
+    'hands off %s installs without invoking the native updater',
+    async (packageType) => {
       const openWindow = { removeAllListeners: vi.fn() }
       browserWindowMock.getAllWindows.mockReturnValue([openWindow] as never)
-      const { send, updater } = await startUpdater('rpm')
-      await reachDownloaded(updater, rpmDownloadedEvent())
-      autoUpdaterMock.quitAndInstall.mockImplementation(() => {
-        autoUpdaterMock.emit('error', new Error('Command failed, exited with code 1'))
-      })
+      const { send, updater } = await startUpdater(packageType)
 
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
+      await reachDownloaded(updater, downloadedEvent(packageType))
 
-      expect(send).toHaveBeenCalledWith('updater:status', {
+      expect(lastStatus(send)).toEqual({
         state: 'error',
-        message: 'Command failed, exited with code 1',
+        message: 'Quit Orca before running the system package install command.',
         recovery: {
           kind: 'linux-package-install',
-          packageType: 'rpm',
-          reason: 'package-install-failed',
+          packageType,
+          reason: 'manual-install-required',
           version: '1.0.61'
         }
       })
+
+      updater.quitAndInstall()
+      await vi.advanceTimersByTimeAsync(100)
+
+      expect(autoUpdaterMock.quitAndInstall).not.toHaveBeenCalled()
       expect(killAllPtyMock).not.toHaveBeenCalled()
       expect(openWindow.removeAllListeners).not.toHaveBeenCalled()
       expect(updater.isQuittingForUpdate()).toBe(false)
-      expect(disarmExitWatchdogMock).toHaveBeenCalled()
-    })
-
-    it('keeps the generic install-failure copy when no artifact was retained', async () => {
-      const { send, updater } = await startUpdater('deb')
-      // Release metadata without a digest must not enable cached-package recovery.
-      await reachDownloaded(
-        updater,
-        downloadedEvent({ files: [{ url: 'orca-ide_1.0.61_amd64.deb' }] })
-      )
-      autoUpdaterMock.quitAndInstall.mockImplementation(() => {
-        autoUpdaterMock.emit('error', new Error(EXIT_127))
-      })
-
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-
-      expect(send).toHaveBeenCalledWith('updater:status', {
-        state: 'error',
-        message: `${PRE_COMMIT_FAILURE_MESSAGE} (${EXIT_127})`
-      })
-      expect(recordUpdaterLifecycleMock).not.toHaveBeenCalledWith(
-        'linux_package_install_failed',
-        expect.anything(),
-        expect.anything()
-      )
-    })
-
-    it('advises a restart only for a failure before the native invoke', async () => {
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-      // The source calls this out as the pre-native "cleanup/tracing exception" case.
-      recordUpdaterLifecycleMock.mockImplementation((event: unknown) => {
-        if (event === 'quit_and_install_invoking_native') {
-          throw new Error('tracing sink unavailable')
-        }
-      })
-
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-
-      expect(autoUpdaterMock.quitAndInstall).not.toHaveBeenCalled()
-      expect(send).toHaveBeenCalledWith('updater:status', {
-        state: 'error',
-        message: 'Could not restart to install the update. Quit and reopen Orca, then try again.'
-      })
-      expect(updater.isQuittingForUpdate()).toBe(false)
-    })
-
-    it('keeps a committed install intact when post-commit cleanup throws', async () => {
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-      // Why: spawnSync already installed the package; a teardown throw must not be reported as failure.
-      killAllPtyMock.mockImplementation(() => {
-        throw new Error('pty teardown failed')
-      })
-      send.mockClear()
-
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-
-      expect(recordUpdaterLifecycleMock).toHaveBeenCalledWith(
-        'post_commit_cleanup_failed',
-        { errorType: 'Error' },
-        expect.objectContaining({ level: 'warn' })
-      )
-      expect(send).not.toHaveBeenCalled()
-      expect(updater.isQuittingForUpdate()).toBe(true)
-      expect(armExitWatchdogMock).toHaveBeenCalledTimes(1)
-      expect(disarmExitWatchdogMock).not.toHaveBeenCalled()
-    })
-
-    it('still suppresses late post-commit errors while an artifact is retained', async () => {
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-      expect(killAllPtyMock).toHaveBeenCalledTimes(1)
-
-      send.mockClear()
-      autoUpdaterMock.emit('error', new Error(EXIT_127))
-
-      expect(send).not.toHaveBeenCalled()
-      expect(updater.isQuittingForUpdate()).toBe(true)
-    })
-
-    it('retries the automatic install without redownloading the package', async () => {
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-      autoUpdaterMock.quitAndInstall.mockImplementation(() => {
-        autoUpdaterMock.emit('error', new Error(EXIT_127))
-      })
-
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-
-      // Why: a retry usually fails identically; a deduped status would strand the preload restart relay.
-      expect(
-        send.mock.calls.filter(
-          ([channel, status]) =>
-            channel === 'updater:status' &&
-            (status as { recovery?: { kind?: string } })?.recovery?.kind === 'linux-package-install'
-        )
-      ).toHaveLength(2)
-      expect(autoUpdaterMock.quitAndInstall).toHaveBeenCalledTimes(2)
-      expect(autoUpdaterMock.downloadUpdate).not.toHaveBeenCalled()
-      expect(recordUpdaterLifecycleMock).toHaveBeenCalledWith('linux_package_recovery_requested', {
-        action: 'retry-automatic',
-        packageType: 'deb',
-        version: '1.0.61'
-      })
-    })
-
-    // Why: the cache path is user-writable, so the bytes verified when the recovery card
-    // rendered are not necessarily the bytes a root package manager would read on retry.
-    it('aborts the retry when the retained package no longer matches its digest', async () => {
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-
-      // The escalation fails, which is what puts the recovery card (and its retry) on screen.
-      autoUpdaterMock.quitAndInstall.mockImplementation(() => {
-        autoUpdaterMock.emit('error', new Error(EXIT_127))
-      })
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-      expect(autoUpdaterMock.quitAndInstall).toHaveBeenCalledTimes(1)
-
-      // A local process swaps the verified package for its own between failure and retry.
-      writeFileSync(staged.debPath, Buffer.from('attacker supplied package'))
-      send.mockClear()
-      killAllPtyMock.mockClear()
-
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-
-      expect(autoUpdaterMock.quitAndInstall).toHaveBeenCalledTimes(1)
-      expect(killAllPtyMock).not.toHaveBeenCalled()
-      expect(updater.isQuittingForUpdate()).toBe(false)
-      expect(send).toHaveBeenCalledWith('updater:status', {
-        state: 'error',
-        message:
-          'The downloaded package no longer matches the verified release, so Orca will not hand it to a package manager. Download the update again, or get it from the official release page.'
-      })
-      expect(recordUpdaterLifecycleMock).toHaveBeenCalledWith(
-        'linux_package_revalidation_failed',
-        expect.objectContaining({ action: 'retry-automatic', reason: 'hash-mismatch' }),
-        expect.anything()
-      )
-    })
-
-    // Why: "Restart to Update" is the common path and can sit unclicked for hours, so the same
-    // user-writable package reaches a root installer with a far longer window than any retry.
-    it('aborts the first install when the downloaded package was swapped', async () => {
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-      writeFileSync(staged.debPath, Buffer.from('attacker supplied package'))
-      send.mockClear()
-
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-
-      expect(autoUpdaterMock.quitAndInstall).not.toHaveBeenCalled()
-      expect(killAllPtyMock).not.toHaveBeenCalled()
-      expect(updater.isQuittingForUpdate()).toBe(false)
-      expect(send).toHaveBeenCalledWith('updater:status', {
-        state: 'error',
-        message:
-          'The downloaded package no longer matches the verified release, so Orca will not hand it to a package manager. Download the update again, or get it from the official release page.'
-      })
       expect(send).toHaveBeenCalledWith('updater:quitAndInstallAborted')
       expect(recordUpdaterLifecycleMock).toHaveBeenCalledWith(
-        'linux_package_revalidation_failed',
-        expect.objectContaining({ action: 'restart-to-install', reason: 'hash-mismatch' }),
-        expect.anything()
+        'linux_package_manual_install_required',
+        { packageType, version: '1.0.61' }
       )
-    })
+    }
+  )
 
-    it('installs normally when the retained package still matches its digest', async () => {
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
+  it('guards the native boundary even when no package artifact was retained', async () => {
+    const { send, updater } = await startUpdater('deb')
 
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
+    updater.quitAndInstall()
+    await vi.advanceTimersByTimeAsync(100)
 
-      expect(autoUpdaterMock.quitAndInstall).toHaveBeenCalledTimes(1)
-      expect(killAllPtyMock).toHaveBeenCalledTimes(1)
-      // Why: an abort push here would clear the restart flag mid-quit and re-arm the dirty-buffer
-      // prompt against the install that is already committed.
-      expect(send).not.toHaveBeenCalledWith('updater:quitAndInstallAborted')
-      expect(recordUpdaterLifecycleMock).not.toHaveBeenCalledWith(
-        'linux_package_revalidation_failed',
-        expect.anything(),
-        expect.anything()
-      )
-    })
+    expect(autoUpdaterMock.quitAndInstall).not.toHaveBeenCalled()
+    expect(killAllPtyMock).not.toHaveBeenCalled()
+    expect(send).toHaveBeenCalledWith('updater:quitAndInstallAborted')
+  })
 
-    // Why: hashing 160 MB outlives the cycle it started in, and Check for Updates stays enabled
-    // while it runs — a verdict from the old cycle must not replace the card that took over.
-    it('drops an abort verdict once a newer check replaced the card', async () => {
-      revalidation.hold()
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-
-      updater.quitAndInstall()
-      await vi.advanceTimersByTimeAsync(100)
-      // The user gives up waiting and checks again; that check owns the card from here.
-      updater.checkForUpdatesFromMenu()
-      await vi.advanceTimersByTimeAsync(0)
-      expect(lastStatus(send)).toMatchObject({ state: 'available', version: '1.0.61' })
-
-      revalidation.settle({ ok: false, reason: 'hash-mismatch' })
-      await settleQuitAndInstall()
-
-      // The install is still abandoned — only the stale status is withheld.
-      expect(autoUpdaterMock.quitAndInstall).not.toHaveBeenCalled()
-      expect(lastStatus(send)).toMatchObject({ state: 'available', version: '1.0.61' })
-      // Withholding the status must not also withhold the abort: the renderer armed its restart and
-      // would otherwise skip its unsaved-work prompt for the rest of the session.
-      expect(send).toHaveBeenCalledWith('updater:quitAndInstallAborted')
-      expect(recordUpdaterLifecycleMock).toHaveBeenCalledWith(
-        'linux_package_revalidation_failed',
-        expect.objectContaining({ reason: 'hash-mismatch' }),
-        expect.anything()
-      )
-    })
-
-    // Why: EMFILE/EIO during the stream says nothing about the bytes, so the copy must not claim
-    // the package changed and the card must keep the actions that still work.
-    it('keeps the recovery card usable when the re-proof cannot read the package', async () => {
-      revalidation.hold()
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-      autoUpdaterMock.quitAndInstall.mockImplementation(() => {
-        autoUpdaterMock.emit('error', new Error(EXIT_127))
-      })
-      updater.quitAndInstall()
-      await vi.advanceTimersByTimeAsync(100)
-      revalidation.settle({ ok: true })
-      await settleQuitAndInstall()
-      send.mockClear()
-
-      updater.quitAndInstall()
-      await vi.advanceTimersByTimeAsync(100)
-      revalidation.settle({ ok: false, reason: 'read-failed' })
-      await settleQuitAndInstall()
-
-      expect(autoUpdaterMock.quitAndInstall).toHaveBeenCalledTimes(1)
-      expect(lastStatus(send)).toEqual({
-        state: 'error',
-        message:
-          'Orca could not read the downloaded package. Download the update again, or get it from the official release page.',
-        recovery: {
-          kind: 'linux-package-install',
-          packageType: 'deb',
-          reason: 'package-install-failed',
-          version: '1.0.61'
-        }
-      })
-    })
-
-    // Why: the re-proof runs before performQuitAndInstall's own error handling, so a rejection
-    // there would strand the quit timer and make every later install a silent no-op.
-    it('stays installable after a re-proof that rejects outright', async () => {
-      revalidation.hold()
-      const { send, updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-
-      updater.quitAndInstall()
-      await vi.advanceTimersByTimeAsync(100)
-      revalidation.fail(new Error('hash worker crashed'))
-      await settleQuitAndInstall()
-
-      // Fails closed: an unprovable package is not handed to a root package manager.
-      expect(autoUpdaterMock.quitAndInstall).not.toHaveBeenCalled()
-      expect(lastStatus(send)).toMatchObject({
-        state: 'error',
-        message:
-          'Orca could not read the downloaded package. Download the update again, or get it from the official release page.'
-      })
-
-      updater.quitAndInstall()
-      await vi.advanceTimersByTimeAsync(100)
-      revalidation.settle({ ok: true })
-      await settleQuitAndInstall()
-
-      expect(autoUpdaterMock.quitAndInstall).toHaveBeenCalledTimes(1)
-    })
-
-    // Why: a second click during the multi-second hash must not schedule a parallel install.
-    it('ignores a second install request while the digest re-proof runs', async () => {
-      revalidation.hold()
-      const { updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-
-      updater.quitAndInstall()
-      // Fires the quit timer, which starts the re-proof; its verdict is still outstanding.
-      await vi.advanceTimersByTimeAsync(100)
-      expect(revalidation.invocationCount()).toBe(1)
-      updater.quitAndInstall()
-      // Advancing here proves the second request never scheduled its own quit timer.
-      await vi.advanceTimersByTimeAsync(100)
-      expect(revalidation.invocationCount()).toBe(1)
-      revalidation.settle({ ok: true })
-      await settleQuitAndInstall()
-
-      expect(autoUpdaterMock.quitAndInstall).toHaveBeenCalledTimes(1)
-    })
-
-    it('records classification-only lifecycle data for a package install failure', async () => {
-      const { updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-      autoUpdaterMock.quitAndInstall.mockImplementation(() => {
-        autoUpdaterMock.logger?.error(`${AGENT_STDERR} target ${staged.debPath}`)
-        autoUpdaterMock.emit('error', new Error(EXIT_127))
-      })
-
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-
-      const failure = recordUpdaterLifecycleMock.mock.calls.find(
-        ([event]) => event === 'linux_package_install_failed'
-      )
-      expect(failure?.[1]).toEqual({
-        packageType: 'deb',
-        reason: 'authentication-agent-unavailable',
-        exitCode: 127,
+  it('preserves the normal AppImage install path when no root-package marker is present', async () => {
+    const { send, updater } = await startUpdater(null)
+    await reachDownloaded(
+      updater,
+      {
         version: '1.0.61',
-        errorType: 'Error'
-      })
-      const durable = JSON.stringify(recordUpdaterLifecycleMock.mock.calls)
-      expect(durable).not.toContain(staged.debPath)
-      expect(durable).not.toContain('authentication agent')
-    })
+        downloadedFile: join(tmpdir(), 'Orca-1.0.61.AppImage'),
+        files: []
+      },
+      true
+    )
 
-    it('omits exitCode from lifecycle data when the child status is unparseable', async () => {
-      const { updater } = await startUpdater('deb')
-      await reachDownloaded(updater, downloadedEvent())
-      autoUpdaterMock.quitAndInstall.mockImplementation(() => {
-        autoUpdaterMock.emit('error', new Error('dpkg was interrupted'))
-      })
+    updater.quitAndInstall()
+    await vi.advanceTimersByTimeAsync(100)
 
-      updater.quitAndInstall()
-      await settleQuitAndInstall()
-
-      const failure = recordUpdaterLifecycleMock.mock.calls.find(
-        ([event]) => event === 'linux_package_install_failed'
+    expect(autoUpdaterMock.quitAndInstall).toHaveBeenCalledTimes(1)
+    expect(killAllPtyMock).toHaveBeenCalledTimes(1)
+    expect(send).not.toHaveBeenCalledWith('updater:quitAndInstallAborted')
+    expect(
+      send.mock.calls.some(
+        ([channel, status]) =>
+          channel === 'updater:status' &&
+          (status as UpdateStatus).state === 'error' &&
+          (status as Extract<UpdateStatus, { state: 'error' }>).recovery?.kind ===
+            'linux-package-install'
       )
-      // Why: an absent key, not an explicit null, keeps the breadcrumb schema honest.
-      expect(failure?.[1]).toEqual({
-        packageType: 'deb',
-        reason: 'package-install-failed',
-        version: '1.0.61',
-        errorType: 'Error'
+    ).toBe(false)
+  })
+
+  it.each(['deb', 'rpm'] as const)(
+    'disables install-on-quit and remote automatic control for %s builds',
+    async (packageType) => {
+      autoUpdaterMock.autoInstallOnAppQuit = true
+      const { updater } = await startUpdater(packageType)
+
+      expect(autoUpdaterMock.autoInstallOnAppQuit).toBe(false)
+      expect(updater.getRemoteServerUpdateSupport()).toEqual({
+        installMode: 'interactive',
+        automatic: false,
+        reason: 'manual-service-update-required'
       })
-      expect(Object.keys(failure?.[1] as object)).not.toContain('exitCode')
+      expect(() => updater.checkForRemoteServerUpdate('runtime-1')).toThrow(
+        'remote_update_manual_required'
+      )
+    }
+  )
+
+  it('keeps interactive install-on-quit and remote control for non-root packages', async () => {
+    autoUpdaterMock.autoInstallOnAppQuit = false
+    const { updater } = await startUpdater(null)
+
+    expect(autoUpdaterMock.autoInstallOnAppQuit).toBe(true)
+    expect(updater.getRemoteServerUpdateSupport()).toEqual({
+      installMode: 'interactive',
+      automatic: true,
+      reason: 'available'
     })
   })
+
+  it('fails closed for an unusable packaged marker', async () => {
+    getLinuxPackageTypeMock.mockReturnValue('unusable')
+    getLinuxRootPackageTypeMock.mockReturnValue(null)
+    autoUpdaterMock.autoInstallOnAppQuit = true
+    const { send, updater } = await startUpdater(null)
+
+    expect(autoUpdaterMock.autoInstallOnAppQuit).toBe(false)
+    expect(updater.getRemoteServerUpdateSupport()).toEqual({
+      installMode: 'interactive',
+      automatic: false,
+      reason: 'manual-service-update-required'
+    })
+
+    await reachDownloaded(updater, {
+      version: '1.0.61',
+      downloadedFile: join(tmpdir(), 'orca-updater', 'pending', 'orca-ide_1.0.61_amd64.deb'),
+      files: [{ url: 'orca-ide_1.0.61_amd64.deb', sha512: packageSha512 }]
+    })
+    expect(lastStatus(send)).toEqual({
+      state: 'error',
+      message:
+        'Orca could not verify the installed Linux package format, so it will not install this update automatically. Download the update from the official release page and install it manually.',
+      version: '1.0.61',
+      retryable: false
+    })
+
+    updater.quitAndInstall()
+    await vi.advanceTimersByTimeAsync(100)
+    expect(autoUpdaterMock.quitAndInstall).not.toHaveBeenCalled()
+    expect(send).toHaveBeenCalledWith('updater:quitAndInstallAborted')
+  })
+
+  it('leaves headless serve installs supervisor-controlled', async () => {
+    for (const installMode of [
+      'supervised-headless-serve',
+      'unsupported-headless-serve'
+    ] as const) {
+      resetUpdaterMocks()
+      autoUpdaterMock.autoInstallOnAppQuit = true
+      await startUpdater(null, installMode)
+      expect(autoUpdaterMock.autoInstallOnAppQuit).toBe(false)
+    }
+  })
 })
diff --git a/src/main/updater.mac-install.test.ts b/src/main/updater.mac-install.test.ts
index e4fe26296a0..563b8562fd6 100644
--- a/src/main/updater.mac-install.test.ts
+++ b/src/main/updater.mac-install.test.ts
@@ -134,6 +134,7 @@ describe('updater mac install handoff', () => {
     appMock.isPackaged = true
     isMock.dev = false
     killAllPtyMock.mockReset()
+    autoUpdaterMock.downloadUpdate.mockResolvedValue([])
     vi.unstubAllGlobals()
     vi.useRealTimers()
   })
@@ -145,7 +146,7 @@ describe('updater mac install handoff', () => {
       const mainWindow = { webContents: { send: sendMock } }
 
       autoUpdaterMock.checkForUpdates.mockResolvedValue(undefined)
-      const { setupAutoUpdater } = await loadUpdaterModule()
+      const { setupAutoUpdater, downloadUpdate } = await loadUpdaterModule()
 
       setupAutoUpdater(mainWindow as never)
       await vi.waitFor(() => {
@@ -156,6 +157,7 @@ describe('updater mac install handoff', () => {
       // Why: the update-available handler is now async (it awaits fetchChangelog).
       // Flush microtasks so setAvailableVersion runs before update-downloaded fires.
       await new Promise((r) => setTimeout(r, 0))
+      downloadUpdate()
       autoUpdaterMock.emit('update-downloaded', { version: '1.0.61' })
 
       const preventDefault = vi.fn()
@@ -197,7 +199,7 @@ describe('updater mac install handoff', () => {
       const mainWindow = { webContents: { send: vi.fn() } }
 
       autoUpdaterMock.checkForUpdates.mockResolvedValue(undefined)
-      const { setupAutoUpdater, quitAndInstall } = await loadUpdaterModule()
+      const { setupAutoUpdater, downloadUpdate, quitAndInstall } = await loadUpdaterModule()
 
       setupAutoUpdater(mainWindow as never, { onBeforeQuit })
       await vi.waitFor(() => {
@@ -206,6 +208,7 @@ describe('updater mac install handoff', () => {
       autoUpdaterMock.emit('checking-for-update')
       autoUpdaterMock.emit('update-available', { version: '1.0.61' })
       await vi.advanceTimersByTimeAsync(0)
+      downloadUpdate()
       autoUpdaterMock.emit('update-downloaded', { version: '1.0.61' })
 
       const preventDefault = vi.fn()
@@ -279,7 +282,7 @@ describe('updater mac install handoff', () => {
       const mainWindow = { webContents: { send: sendMock } }
 
       autoUpdaterMock.checkForUpdates.mockResolvedValue(undefined)
-      const { setupAutoUpdater } = await loadUpdaterModule()
+      const { setupAutoUpdater, downloadUpdate } = await loadUpdaterModule()
 
       setupAutoUpdater(mainWindow as never)
       await vi.waitFor(() => {
@@ -290,6 +293,7 @@ describe('updater mac install handoff', () => {
       // Why: the update-available handler is now async (it awaits fetchChangelog).
       // Flush microtasks so setAvailableVersion runs before update-downloaded fires.
       await vi.advanceTimersByTimeAsync(0)
+      downloadUpdate()
       autoUpdaterMock.emit('update-downloaded', { version: '1.0.61' })
 
       const preventDefault = vi.fn()
diff --git a/src/main/updater.quit-and-install.test.ts b/src/main/updater.quit-and-install.test.ts
index 0d381ea473a..0080db58991 100644
--- a/src/main/updater.quit-and-install.test.ts
+++ b/src/main/updater.quit-and-install.test.ts
@@ -290,6 +290,7 @@ describe('updater', () => {
       })
     })
 
+    autoUpdaterMock.emit('download-progress', { percent: 100 })
     autoUpdaterMock.emit('update-downloaded', { version: '1.0.61' })
 
     // Why: on macOS install commits only once Squirrel is ready; mark it ready so this test covers the post-commit path on all platforms.
diff --git a/src/main/updater.startup-scheduling.test.ts b/src/main/updater.startup-scheduling.test.ts
index 46190de47da..ef72af27def 100644
--- a/src/main/updater.startup-scheduling.test.ts
+++ b/src/main/updater.startup-scheduling.test.ts
@@ -31,6 +31,7 @@ warmUpdaterModule()
 describe('updater', () => {
   beforeEach(() => {
     resetUpdaterMocks()
+    vi.useFakeTimers()
   })
 
   it('does not load or configure electron-updater during dev setup', async () => {
diff --git a/src/main/updater/updater-build-selection.ts b/src/main/updater/updater-build-selection.ts
index 63222fb3101..a533b776a84 100644
--- a/src/main/updater/updater-build-selection.ts
+++ b/src/main/updater/updater-build-selection.ts
@@ -111,7 +111,7 @@ export abstract class UpdaterBuildSelection extends UpdaterMenuChecks {
     try {
       const target = resolveTargetBuild(channel, tag)
       if (compareVersions(target.version, app.getVersion()) === 0) {
-        this.sendStatus({ state: 'not-available', userInitiated: true })
+        this.sendSettledCheckStatus({ state: 'not-available', userInitiated: true })
         return
       }
       this.closeLocalBuildFeed()
@@ -140,7 +140,7 @@ export abstract class UpdaterBuildSelection extends UpdaterMenuChecks {
       this.userInitiatedCheck = false
       this.clearAvailableUpdateContext()
       this.restoreReleaseUpdateSource()
-      this.sendStatus({
+      this.sendSettledCheckStatus({
         state: 'error',
         message: String((error as Error)?.message ?? error),
         userInitiated: true
diff --git a/src/main/updater/updater-check-failure.ts b/src/main/updater/updater-check-failure.ts
index 8ee2500c6a9..742897af6fd 100644
--- a/src/main/updater/updater-check-failure.ts
+++ b/src/main/updater/updater-check-failure.ts
@@ -34,7 +34,7 @@ export abstract class UpdaterCheckFailure extends UpdaterReleaseFeed {
       // Why: a failed pinned jump must hand the feed back before surfacing the error, or the pin blocks background checks for the process lifetime.
       this.clearAvailableUpdateContext()
       this.restoreReleaseUpdateSource()
-      this.sendStatus({ state: 'error', message, userInitiated })
+      this.sendSettledCheckStatus({ state: 'error', message, userInitiated })
       return
     }
     const failureKey = this.getCheckFailureKey(message, userInitiated)
@@ -80,18 +80,19 @@ export abstract class UpdaterCheckFailure extends UpdaterReleaseFeed {
         this.scheduleAutomaticUpdateCheck(this.getAutomaticRetryInterval())
         if (userInitiated) {
           // Why: a user click needs visible feedback (idle looks broken); distinguish incomplete releases from transport failures.
-          this.sendErrorStatus(
-            this.isStableReleaseNotReadyFailure(sourceError)
+          this.sendSettledCheckStatus({
+            state: 'error',
+            message: this.isStableReleaseNotReadyFailure(sourceError)
               ? "A newer release isn't available for this device yet. Check again later."
               : "Couldn't reach the update server. Try again in a few minutes.",
-            true
-          )
+            userInitiated: true
+          })
         } else {
           if (this.isRetryableReleaseFeedPreflightFailure(sourceError)) {
             // Why: release probes can fail transiently; keep the campaign pending so the short retry can still show it.
             this.deferPendingUpdateNudgeUntilRetry()
           }
-          this.sendStatus({ state: 'idle' })
+          this.sendSettledCheckStatus({ state: 'idle' })
         }
         return
       }
@@ -100,7 +101,7 @@ export abstract class UpdaterCheckFailure extends UpdaterReleaseFeed {
       if (!userInitiated) {
         this.scheduleAutomaticUpdateCheck(this.getAutomaticRetryInterval())
       }
-      this.sendErrorStatus(message, userInitiated)
+      this.sendSettledCheckStatus({ state: 'error', message, userInitiated })
     }
 
     this.pendingCheckFailureKey = failureKey
diff --git a/src/main/updater/updater-check-state.ts b/src/main/updater/updater-check-state.ts
index 8905029c75d..d7380c17305 100644
--- a/src/main/updater/updater-check-state.ts
+++ b/src/main/updater/updater-check-state.ts
@@ -1,6 +1,7 @@
 import { writeMainThreadDiagnosticMarker } from '../diagnostics/main-thread-churn-probe'
 import { isWindowsSignatureCheckUnavailableFailure } from '../../shared/updater-windows-signature-check'
 import { recordUpdaterLifecycle } from '../updater-lifecycle-diagnostics'
+import { getRetainedLinuxPackageManualInstallStatus } from '../linux-package-downloaded-status'
 import type { UpdateCheckOptions, UpdateStatus } from '../../shared/update-status-types'
 import type { UpdateCheckVariant } from './updater-types'
 import { UpdaterStatus } from './updater-status'
@@ -229,7 +230,7 @@ export abstract class UpdaterCheckState extends UpdaterStatus {
             this.deferPendingUpdateNudgeUntilRetry()
             return
           }
-          this.sendStatus({ state: 'not-available', userInitiated })
+          this.sendSettledCheckStatus({ state: 'not-available', userInitiated })
         }
       }
       return
@@ -239,7 +240,7 @@ export abstract class UpdaterCheckState extends UpdaterStatus {
     this.backgroundCheckPromotedToUserInitiated = false
     this.userInitiatedCheck = false
     this.completeSilentUpdateCheck(userInitiated)
-    this.sendStatus({ state: 'not-available', userInitiated })
+    this.sendSettledCheckStatus({ state: 'not-available', userInitiated })
   }
 
   protected handleSettledUpdateCheckPromise(attemptId: number): void {
@@ -284,6 +285,21 @@ export abstract class UpdaterCheckState extends UpdaterStatus {
     this.sendStatus({ state: 'error', message, userInitiated })
   }
 
+  /**
+   * Settles a check without discarding a retained manual-install card. A distro-managed host has a
+   * downloaded package it can still be told about, and the ordinary settle status would erase it.
+   */
+  protected sendSettledCheckStatus(status: UpdateStatus): void {
+    const retainedStatus = getRetainedLinuxPackageManualInstallStatus()
+    if (retainedStatus) {
+      this.sendStatus(retainedStatus)
+    } else if (status.state === 'error') {
+      this.sendErrorStatus(status.message, status.userInitiated)
+    } else {
+      this.sendStatus(status)
+    }
+  }
+
   protected abstract consumeMissingManifestPrereleaseFallbackResult(): {
     userInitiated: boolean
   } | null
diff --git a/src/main/updater/updater-download-install.ts b/src/main/updater/updater-download-install.ts
index a1627d3895c..455e56e6efa 100644
--- a/src/main/updater/updater-download-install.ts
+++ b/src/main/updater/updater-download-install.ts
@@ -1,5 +1,7 @@
 import { beginMacUpdateDownload, deferMacQuitUntilInstallerReady } from '../updater-mac-install'
 import { recordUpdaterLifecycle } from '../updater-lifecycle-diagnostics'
+import { isExternallyManagedLinuxInstall } from '../linux-update-package-type'
+import { LINUX_PACKAGE_EXTERNALLY_MANAGED_MESSAGE } from '../linux-package-downloaded-status'
 import { QUIT_AND_INSTALL_DELAY_MS } from './updater-state'
 import { UpdaterRemoteStatus } from './updater-remote-status'
 
@@ -10,22 +12,11 @@ export abstract class UpdaterDownloadInstall extends UpdaterRemoteStatus {
       this.localBuildSelectionInProgress ||
       this.pinnedBuildSelectionInProgress ||
       this.pendingQuitAndInstallTimer ||
-      this.quitAndInstallInProgress ||
-      // Why: the quit timer is already cleared while the pre-install digest re-proof streams, so without this a second click would schedule a parallel install of the same package.
-      this.linuxPackageRevalidationInFlight
+      this.quitAndInstallInProgress
     ) {
       return
     }
 
-    const retriedRecovery = this.getActiveLinuxPackageRecovery()
-    if (retriedRecovery) {
-      recordUpdaterLifecycle('linux_package_recovery_requested', {
-        action: 'retry-automatic',
-        packageType: retriedRecovery.packageType,
-        version: retriedRecovery.version
-      })
-    }
-
     if (this.deferHeadlessServeInstall('install', this.getPendingInstallVersion())) {
       return
     }
@@ -66,6 +57,25 @@ export abstract class UpdaterDownloadInstall extends UpdaterRemoteStatus {
     if (!version) {
       return
     }
+    // Why: main owns this verdict, not the card — an older renderer or a direct IPC call must not be
+    // able to spend a package download that this host could never install.
+    if (isExternallyManagedLinuxInstall()) {
+      recordUpdaterLifecycle('linux_package_externally_managed_download_blocked', {
+        version
+      })
+      // Why: a pinned jump resolves to 'release' on Linux (no dev-channel artifact is built for it),
+      // so refusing without unwinding would strand isPinnedBuildActive and silently kill every
+      // background check for the rest of the process. A no-op on the ordinary release path.
+      this.clearAvailableUpdateContext()
+      this.restoreReleaseUpdateSource()
+      this.sendStatus({
+        state: 'error',
+        message: LINUX_PACKAGE_EXTERNALLY_MANAGED_MESSAGE,
+        version,
+        retryable: false
+      })
+      return
+    }
     if (this.deferHeadlessServeInstall('download', version)) {
       return
     }
diff --git a/src/main/updater/updater-install-execution.ts b/src/main/updater/updater-install-execution.ts
index 4522e155865..257f8e4fa93 100644
--- a/src/main/updater/updater-install-execution.ts
+++ b/src/main/updater/updater-install-execution.ts
@@ -4,19 +4,15 @@ import { withUpdaterSpan } from '../observability/instrumentation'
 import { runWithLaunchPath } from '../startup/hydrate-shell-path'
 import { markMacQuitAndInstallInFlight, isMacInstallerReady } from '../updater-mac-install'
 import { armUpdateInstallExitWatchdog } from '../update-install-exit-watchdog'
-import { getLinuxRootPackageType } from '../linux-update-package-type'
-import {
-  beginLinuxPackageInstallDiagnosticCapture,
-  endLinuxPackageInstallDiagnosticCapture
-} from '../linux-package-install-diagnostic'
-import { getTrackedLinuxPackageArtifact } from '../linux-package-update-recovery'
+import { getLinuxPackageType } from '../linux-update-package-type'
+import { LINUX_PACKAGE_MARKER_UNUSABLE_MESSAGE } from '../linux-package-downloaded-status'
 import { recordUpdaterLifecycle } from '../updater-lifecycle-diagnostics'
 import { requestServeUpdateHandoff, failServeUpdateHandoff } from '../serve-update-handoff'
 import { UpdaterPackageRecovery } from './updater-package-recovery'
 
 export abstract class UpdaterInstallExecution extends UpdaterPackageRecovery {
   protected async performQuitAndInstall(): Promise<void> {
-    if (this.quitAndInstallInProgress || this.linuxPackageRevalidationInFlight) {
+    if (this.quitAndInstallInProgress) {
       recordUpdaterLifecycle('quit_and_install_ignored', { reason: 'already-in-progress' })
       return
     }
@@ -30,20 +26,31 @@ export abstract class UpdaterInstallExecution extends UpdaterPackageRecovery {
     if (this.deferHeadlessServeInstall('install', pendingVersion)) {
       return
     }
-    // Why: the retained .deb/.rpm sits on a user-writable path that a root package manager is about
-    // to read, and nothing re-checks it after download. Re-prove it here — before any teardown — so a
-    // swapped or vanished package aborts instead of being installed as root. The synchronous guard
-    // keeps every non-Linux install on its existing timing.
-    if (
-      getTrackedLinuxPackageArtifact() &&
-      !(await this.proveRetainedLinuxPackage(pendingVersion))
-    ) {
-      // Why: the renderer armed its restart before invoking, and it infers the abort from the error
-      // status — which a stale-cycle verdict deliberately withholds. Signal the abandon here, where
-      // it cannot depend on that decision, or the window keeps skipping its unsaved-work prompt.
+    const linuxPackageType = getLinuxPackageType()
+    if (linuxPackageType === 'deb' || linuxPackageType === 'rpm') {
+      recordUpdaterLifecycle('linux_package_manual_install_required', {
+        packageType: linuxPackageType,
+        version: pendingVersion || null
+      })
+      // The preload prepares renderer state before invoking; explicitly release it when main refuses.
       this.mainWindowRef?.webContents.send('updater:quitAndInstallAborted')
       return
     }
+    if (linuxPackageType === 'unusable') {
+      recordUpdaterLifecycle(
+        'linux_package_marker_unusable',
+        { version: pendingVersion || null },
+        { level: 'warn', message: 'Linux package marker is unusable; native install blocked' }
+      )
+      // The preload prepares renderer state before invoking; release it when the marker is unknown.
+      this.mainWindowRef?.webContents.send('updater:quitAndInstallAborted')
+      this.sendInstallFailureStatus({
+        state: 'error',
+        message: LINUX_PACKAGE_MARKER_UNUSABLE_MESSAGE,
+        ...(pendingVersion ? { version: pendingVersion } : {})
+      })
+      return
+    }
     this.quitAndInstallInProgress = true
 
     markMacQuitAndInstallInFlight()
@@ -98,22 +105,14 @@ export abstract class UpdaterInstallExecution extends UpdaterPackageRecovery {
         }
         // Why: mark before the call so a sync 'error' during quitAndInstall can recover; pre-native errors must not look like install failure.
         this.quitAndInstallNativeInvoked = true
-        // Why: invoke before killAllPty/removing close listeners so a sync 'error' (the "no filepath" path) can recover while windows and PTYs are intact.
+        // Why: invoke before killAllPty/removing close listeners so a sync 'error' can recover while windows and PTYs are intact.
         const supervisorOwnsRelaunch = this.updateInstallMode === 'supervised-headless-serve'
-        // Why: BaseUpdater logs child stderr but drops it from the 'error' event, so retain it for the span of this call.
-        beginLinuxPackageInstallDiagnosticCapture(getTrackedLinuxPackageArtifact()?.path ?? null)
-        try {
-          runWithLaunchPath(() =>
-            this.getAutoUpdater().quitAndInstall(supervisorOwnsRelaunch, !supervisorOwnsRelaunch)
-          )
-        } finally {
-          const diagnostic = endLinuxPackageInstallDiagnosticCapture()
-          // Why: a synchronous 'error' already consumed and reset this attempt; re-stashing would leak it into the next one.
-          this.lastInstallAttemptDiagnostic = this.quitAndInstallInProgress ? diagnostic : null
-        }
+        runWithLaunchPath(() =>
+          this.getAutoUpdater().quitAndInstall(supervisorOwnsRelaunch, !supervisorOwnsRelaunch)
+        )
         span.addEvent('native_quit_and_install_invoked')
 
-        // Why: quitAndInstall can synchronously clear quitAndInstallInProgress via recovery (Win/Linux dispatchError); skip destructive prep if it already ran.
+        // Why: quitAndInstall can synchronously clear quitAndInstallInProgress via dispatchError; skip destructive prep if it already ran.
         if (!this.quitAndInstallInProgress) {
           // Why: recovery already wrote the reason to currentStatus; a bare return would exit this span Success.
           span.fail(
@@ -124,14 +123,6 @@ export abstract class UpdaterInstallExecution extends UpdaterPackageRecovery {
           return
         }
 
-        // Why: DebUpdater/RpmUpdater install through spawnSync, so a normal return already means the
-        // package is installed. Commit here or a throw in the cleanup below is reported as an install
-        // failure — offering a recovery card, and stale stderr, for an update that actually succeeded.
-        if (getLinuxRootPackageType() !== null) {
-          this.updateInstallCommitted = true
-          armUpdateInstallExitWatchdog()
-        }
-
         killAllPty()
         span.addEvent('local_pty_kill_all')
 
@@ -153,9 +144,7 @@ export abstract class UpdaterInstallExecution extends UpdaterPackageRecovery {
         }
       })
     } catch (error) {
-      // Why: on Linux the package is already installed once quitAndInstall returns, and the installer is
-      // waiting for this process to exit. Tearing down here would disarm the exit watchdog (#4438), clear
-      // quittingForUpdate mid-quit, and tell the user an install failed that actually succeeded.
+      // Past commit the installer is waiting for this process to exit; keep the handoff and watchdog intact.
       if (this.updateInstallCommitted) {
         recordUpdaterLifecycle(
           'post_commit_cleanup_failed',
@@ -167,12 +156,7 @@ export abstract class UpdaterInstallExecution extends UpdaterPackageRecovery {
         )
         return
       }
-      // Why: a pre-native cleanup/tracing exception is not a package install failure and must not be labelled as one.
       const quitAndInstallNativeInvokedBeforeReset = this.quitAndInstallNativeInvoked
-      const recoveryStatus =
-        quitAndInstallNativeInvokedBeforeReset && !this.updateInstallCommitted
-          ? this.buildLinuxPackageInstallFailureStatus(error)
-          : null
       failServeUpdateHandoff('Could not invoke the native updater.')
       this.resetQuitForUpdateState()
       recordUpdaterLifecycle(
@@ -183,16 +167,13 @@ export abstract class UpdaterInstallExecution extends UpdaterPackageRecovery {
           message: 'Could not start update install'
         }
       )
-      this.sendInstallFailureStatus(
-        recoveryStatus ?? {
-          state: 'error',
-          // Why: past the native invoke this is the same pre-commit failure the event path reports, so it gets the same copy; only a pre-native exception can be helped by a restart.
-          // A synchronous throw out of quitAndInstall carries the same installer text the 'error' event would have.
-          message: quitAndInstallNativeInvokedBeforeReset
-            ? this.withInstallFailureCause(this.getPreCommitInstallFailureMessage(), error)
-            : 'Could not restart to install the update. Quit and reopen Orca, then try again.'
-        }
-      )
+      this.sendInstallFailureStatus({
+        state: 'error',
+        // A synchronous throw carries the same installer text the 'error' event would have.
+        message: quitAndInstallNativeInvokedBeforeReset
+          ? this.withInstallFailureCause(this.getPreCommitInstallFailureMessage(), error)
+          : 'Could not restart to install the update. Quit and reopen Orca, then try again.'
+      })
     }
   }
 
@@ -205,10 +186,8 @@ export abstract class UpdaterInstallExecution extends UpdaterPackageRecovery {
     ) {
       return false
     }
-    const recoveryStatus = this.buildLinuxPackageInstallFailureStatus(error)
     failServeUpdateHandoff('The native updater rejected the install request.')
     this.resetQuitForUpdateState()
-    // Durable data carries classification only — the cause text stays on the status the user can read.
     recordUpdaterLifecycle(
       'quit_and_install_failed_via_event',
       { errorType: error instanceof Error ? error.name : typeof error },
@@ -217,12 +196,10 @@ export abstract class UpdaterInstallExecution extends UpdaterPackageRecovery {
         message: 'Update install could not start; recovered app state'
       }
     )
-    this.sendInstallFailureStatus(
-      recoveryStatus ?? {
-        state: 'error',
-        message: this.withInstallFailureCause(this.getPreCommitInstallFailureMessage(), error)
-      }
-    )
+    this.sendInstallFailureStatus({
+      state: 'error',
+      message: this.withInstallFailureCause(this.getPreCommitInstallFailureMessage(), error)
+    })
     return true
   }
 }
diff --git a/src/main/updater/updater-install-support.ts b/src/main/updater/updater-install-support.ts
index 048f293f01e..175362dad05 100644
--- a/src/main/updater/updater-install-support.ts
+++ b/src/main/updater/updater-install-support.ts
@@ -35,6 +35,12 @@ export abstract class UpdaterInstallSupport extends UpdaterCheckState {
     if (this.currentStatus.state === 'downloading' || this.currentStatus.state === 'downloaded') {
       return this.currentStatus.version
     }
+    if (
+      this.currentStatus.state === 'error' &&
+      this.currentStatus.recovery?.kind === 'linux-package-install'
+    ) {
+      return this.currentStatus.recovery.version
+    }
     return ''
   }
 
@@ -70,7 +76,6 @@ export abstract class UpdaterInstallSupport extends UpdaterCheckState {
     this.quittingForUpdate = false
     this.updateInstallCommitted = false
     this.quitAndInstallNativeInvoked = false
-    this.lastInstallAttemptDiagnostic = null
     disarmUpdateInstallExitWatchdog()
     resetMacInstallState()
   }
diff --git a/src/main/updater/updater-menu-checks.ts b/src/main/updater/updater-menu-checks.ts
index b76d5c19710..5e5294f29dc 100644
--- a/src/main/updater/updater-menu-checks.ts
+++ b/src/main/updater/updater-menu-checks.ts
@@ -74,7 +74,7 @@ export abstract class UpdaterMenuChecks extends UpdaterScheduling {
         this.userInitiatedCheck = false
         this.finishActiveUpdateCheckAttempt()
         this.recordCompletedUpdateCheck()
-        this.sendStatus({ state: 'not-available', userInitiated: true })
+        this.sendSettledCheckStatus({ state: 'not-available', userInitiated: true })
         return false
       }
       return launch()
diff --git a/src/main/updater/updater-package-recovery.ts b/src/main/updater/updater-package-recovery.ts
index 870d601a5f3..f33b5044e48 100644
--- a/src/main/updater/updater-package-recovery.ts
+++ b/src/main/updater/updater-package-recovery.ts
@@ -1,22 +1,16 @@
+import { shell } from 'electron'
 import { recordUpdaterLifecycle } from '../updater-lifecycle-diagnostics'
 import {
   getTrackedLinuxPackageArtifact,
   clearTrackedLinuxPackageArtifact,
-  revalidateLinuxPackageForInstall,
   resolveLinuxPackageInstallInstructions,
-  revealLinuxPackage,
+  resolveLinuxPackageRevealTarget,
   type LinuxPackageArtifact,
   type LinuxPackageRecoveryUnavailableReason
 } from '../linux-package-update-recovery'
-import {
-  getLinuxPackageInstallDiagnostic,
-  parseLinuxPackageInstallExitCode,
-  redactLinuxPackageInstallText
-} from '../linux-package-install-diagnostic'
 import type {
   LinuxPackageInstallInstructions,
-  LinuxPackageInstallRecovery,
-  UpdateStatus
+  LinuxPackageInstallRecovery
 } from '../../shared/update-status-types'
 import { UpdaterInstallSupport } from './updater-install-support'
 
@@ -67,131 +61,47 @@ export abstract class UpdaterPackageRecovery extends UpdaterInstallSupport {
     )
   }
 
+  /** Whether the card this action was invoked from still owns both the status and the artifact. */
+  protected isCurrentLinuxPackageRecovery(
+    recovery: LinuxPackageInstallRecovery,
+    artifact: LinuxPackageArtifact | null
+  ): boolean {
+    return (
+      this.getActiveLinuxPackageRecovery() === recovery &&
+      getTrackedLinuxPackageArtifact() === artifact
+    )
+  }
+
+  protected assertCurrentLinuxPackageRecovery(
+    recovery: LinuxPackageInstallRecovery,
+    artifact: LinuxPackageArtifact | null
+  ): void {
+    if (!this.isCurrentLinuxPackageRecovery(recovery, artifact)) {
+      throw new Error('Package install recovery is no longer current.')
+    }
+  }
+
   protected failLinuxPackageRecovery(
     recovery: LinuxPackageInstallRecovery,
+    artifact: LinuxPackageArtifact | null,
     reason: LinuxPackageRecoveryUnavailableReason
   ): never {
+    this.assertCurrentLinuxPackageRecovery(recovery, artifact)
     this.recordLinuxPackageRecoveryUnavailable(recovery, reason)
     const message = LINUX_PACKAGE_RECOVERY_MESSAGES[reason]
-    // Why: hashing 160 MB takes long enough for a new cycle to land. Acting on a stale verdict would
-    // destroy the newer artifact and clobber whatever card replaced this one.
-    const active = this.getActiveLinuxPackageRecovery()
-    const stillCurrent =
-      active?.version === recovery.version && active?.packageType === recovery.packageType
-    if (stillCurrent && RECOVERY_CLEARING_REASONS.includes(reason)) {
+    if (RECOVERY_CLEARING_REASONS.includes(reason)) {
       clearTrackedLinuxPackageArtifact()
-      this.sendStatus({ state: 'error', message })
+      this.sendStatus({ state: 'error', message, version: recovery.version })
     }
     throw new Error(message)
   }
 
-  /**
-   * Identifies the update cycle an install belongs to, so a verdict produced by a multi-second hash
-   * can be dropped when a newer cycle already replaced the card it would otherwise overwrite.
-   */
-  protected getInstallCycleSignature(): string {
-    const recovery = this.getActiveLinuxPackageRecovery()
-    if (recovery) {
-      return `recovery:${recovery.packageType}:${recovery.version}`
-    }
-    return this.currentStatus.state === 'downloaded'
-      ? `downloaded:${this.currentStatus.version}`
-      : `state:${this.currentStatus.state}`
-  }
-
-  /**
-   * Re-proves the retained package before the install starts. Returns false when the install must be
-   * abandoned; the artifact is only re-read here, so callers still own every teardown decision.
-   */
-  protected async proveRetainedLinuxPackage(pendingVersion: string): Promise<boolean> {
-    const artifact = getTrackedLinuxPackageArtifact()
-    if (!artifact) {
-      return true
-    }
-    // Why: an artifact retained from another cycle says nothing about the file electron-updater is
-    // about to install, so proving it would block a legitimate install on an unrelated digest.
-    if (pendingVersion && pendingVersion !== artifact.version) {
-      return true
-    }
-    const recovery = this.getActiveLinuxPackageRecovery()
-    const cycle = this.getInstallCycleSignature()
-    const reason = await this.revalidateRetainedLinuxPackage(artifact)
-    if (!reason) {
-      return true
-    }
-    this.reportLinuxPackageRevalidationFailure({ artifact, recovery, reason, cycle })
-    return false
-  }
-
-  /** The failing reason, or null when the retained package still matches its release digest. */
-  protected async revalidateRetainedLinuxPackage(
-    artifact: LinuxPackageArtifact
-  ): Promise<LinuxPackageRecoveryUnavailableReason | null> {
-    this.linuxPackageRevalidationInFlight = true
-    try {
-      const verdict = await revalidateLinuxPackageForInstall(artifact)
-      return verdict.ok ? null : verdict.reason
-    } catch (error) {
-      recordUpdaterLifecycle(
-        'linux_package_revalidation_errored',
-        { errorType: error instanceof Error ? error.name : typeof error },
-        { level: 'warn', message: 'Could not re-verify the retained update package' }
-      )
-      // Why: fail closed — bytes we could not read are bytes we cannot hand to a root installer.
-      return 'read-failed'
-    } finally {
-      // Why: the invariant every install path depends on — a wedged flag would make quitAndInstall
-      // early-return for the rest of the session.
-      this.linuxPackageRevalidationInFlight = false
-    }
-  }
-
-  protected reportLinuxPackageRevalidationFailure({
-    artifact,
-    recovery,
-    reason,
-    cycle
-  }: {
-    artifact: LinuxPackageArtifact
-    recovery: LinuxPackageInstallRecovery | null
-    reason: LinuxPackageRecoveryUnavailableReason
-    cycle: string
-  }): void {
-    recordUpdaterLifecycle(
-      'linux_package_revalidation_failed',
-      {
-        action: recovery ? 'retry-automatic' : 'restart-to-install',
-        packageType: artifact.packageType,
-        version: artifact.version,
-        reason
-      },
-      { level: 'warn', message: 'Retained update package failed its pre-install digest check' }
-    )
-    // Why: a package proven bad must not stay tracked, but a download that landed during the hash
-    // owns the slot now and destroying it would force a needless 160 MB redownload.
-    const clearsArtifact = RECOVERY_CLEARING_REASONS.includes(reason)
-    if (clearsArtifact && getTrackedLinuxPackageArtifact() === artifact) {
-      clearTrackedLinuxPackageArtifact()
-    }
-    // Why: same reasoning as failLinuxPackageRecovery — a verdict from a cycle that has since been
-    // replaced must not clobber whatever card the user is looking at now.
-    if (this.getInstallCycleSignature() !== cycle) {
-      return
-    }
-    this.sendInstallFailureStatus({
-      state: 'error',
-      message: LINUX_PACKAGE_RECOVERY_MESSAGES[reason],
-      // Why: an unreadable file is not evidence the bytes changed, so the recovery card and its
-      // Copy/Show actions survive a transient I/O failure exactly as they do elsewhere.
-      ...(recovery && !clearsArtifact ? { recovery } : {})
-    })
-  }
-
   protected async getLinuxPackageInstallInstructions(): Promise<LinuxPackageInstallInstructions> {
     const recovery = this.getActiveLinuxPackageRecovery()
     if (!recovery) {
       throw new Error('No package install recovery is available.')
     }
+    const artifact = getTrackedLinuxPackageArtifact()
     recordUpdaterLifecycle('linux_package_recovery_requested', {
       action: 'copy-command',
       packageType: recovery.packageType,
@@ -202,6 +112,7 @@ export abstract class UpdaterPackageRecovery extends UpdaterInstallSupport {
       // Why: the renderer must distinguish "this machine has no package manager" (keep the card, promote
       // Show Package) from "the artifact is gone" (recovery is cleared and the card unmounts).
       if (result.reason === 'no-sudo' || result.reason === 'no-package-manager') {
+        this.assertCurrentLinuxPackageRecovery(recovery, artifact)
         this.recordLinuxPackageRecoveryUnavailable(recovery, result.reason)
         return {
           ok: false,
@@ -209,8 +120,9 @@ export abstract class UpdaterPackageRecovery extends UpdaterInstallSupport {
           message: LINUX_PACKAGE_RECOVERY_MESSAGES[result.reason]
         }
       }
-      this.failLinuxPackageRecovery(recovery, result.reason)
+      this.failLinuxPackageRecovery(recovery, artifact, result.reason)
     }
+    this.assertCurrentLinuxPackageRecovery(recovery, artifact)
     return { ok: true, command: result.command, packageFileName: result.packageFileName }
   }
 
@@ -219,56 +131,22 @@ export abstract class UpdaterPackageRecovery extends UpdaterInstallSupport {
     if (!recovery) {
       throw new Error('No package install recovery is available.')
     }
+    const artifact = getTrackedLinuxPackageArtifact()
     recordUpdaterLifecycle('linux_package_recovery_requested', {
       action: 'show-package',
       packageType: recovery.packageType,
       version: recovery.version
     })
-    const result = await revealLinuxPackage(recovery)
+    const result = await resolveLinuxPackageRevealTarget(recovery)
     if (!result.ok) {
-      this.failLinuxPackageRecovery(recovery, result.reason)
+      this.failLinuxPackageRecovery(recovery, artifact, result.reason)
     }
-  }
-
-  /** Builds a recoverable status when the native Linux package installer rejects a retained artifact. */
-  protected buildLinuxPackageInstallFailureStatus(error: unknown): UpdateStatus | null {
-    const artifact = getTrackedLinuxPackageArtifact()
-    if (!artifact) {
-      return null
-    }
-    const pendingVersion = this.getPendingInstallVersion()
-    if (pendingVersion && pendingVersion !== artifact.version) {
-      return null
-    }
-    const diagnostic = getLinuxPackageInstallDiagnostic() ?? this.lastInstallAttemptDiagnostic
-    const reason = diagnostic?.reason ?? 'package-install-failed'
-    const exitCode = parseLinuxPackageInstallExitCode(error)
-    recordUpdaterLifecycle(
-      'linux_package_install_failed',
-      {
-        packageType: artifact.packageType,
-        reason,
-        ...(exitCode === null ? {} : { exitCode }),
-        version: artifact.version,
-        errorType: error instanceof Error ? error.name : typeof error
-      },
-      { level: 'warn', message: 'Linux package install failed; cached package retained' }
-    )
-    const message =
-      diagnostic?.message ??
-      (error instanceof Error
-        ? redactLinuxPackageInstallText(error.message, artifact.path)
-        : null) ??
-      'The system package installer did not start.'
-    return {
-      state: 'error',
-      message,
-      recovery: {
-        kind: 'linux-package-install',
-        packageType: artifact.packageType,
-        reason,
-        version: artifact.version
-      }
+    this.assertCurrentLinuxPackageRecovery(recovery, artifact)
+    // Why: this cache path belongs to the installed app host, not a workspace's SSH or WSL host.
+    try {
+      shell.showItemInFolder(result.path)
+    } catch {
+      this.failLinuxPackageRecovery(recovery, artifact, 'read-failed')
     }
   }
 }
diff --git a/src/main/updater/updater-remote-status.ts b/src/main/updater/updater-remote-status.ts
index 6e3db76b0c8..fc34d40b6d3 100644
--- a/src/main/updater/updater-remote-status.ts
+++ b/src/main/updater/updater-remote-status.ts
@@ -7,6 +7,7 @@ import type {
   RemoteServerUpdateSupport
 } from '../../shared/remote-server-update'
 import { hasServeUpdateSupervisor } from '../serve-update-handoff'
+import { getLinuxPackageType } from '../linux-update-package-type'
 import { UpdaterNudge } from './updater-nudge'
 import type { UpdateInstallMode } from './updater-state'
 
@@ -31,7 +32,13 @@ export abstract class UpdaterRemoteStatus extends UpdaterNudge {
         reason: 'updater-unavailable'
       }
     }
-    if (this.updateInstallMode === 'unsupported-headless-serve') {
+    const linuxPackageType = getLinuxPackageType()
+    if (
+      this.updateInstallMode === 'unsupported-headless-serve' ||
+      linuxPackageType === 'deb' ||
+      linuxPackageType === 'rpm' ||
+      linuxPackageType === 'unusable'
+    ) {
       return {
         installMode: this.updateInstallMode,
         automatic: false,
diff --git a/src/main/updater/updater-setup.ts b/src/main/updater/updater-setup.ts
index 21354f97af3..d60444d449a 100644
--- a/src/main/updater/updater-setup.ts
+++ b/src/main/updater/updater-setup.ts
@@ -12,7 +12,7 @@ import type {
   RemoteServerUpdaterSnapshot,
   RemoteServerUpdateSupport
 } from '../../shared/remote-server-update'
-import { getLinuxRootPackageType } from '../linux-update-package-type'
+import { getLinuxPackageType } from '../linux-update-package-type'
 import { createUpdaterDiagnosticLogger } from '../linux-package-install-diagnostic'
 import { registerAutoUpdaterHandlers } from '../updater-events'
 import { getServeUpdateHandoffFailure } from '../serve-update-handoff'
@@ -143,9 +143,9 @@ export class UpdaterSetup extends UpdaterDownloadInstall {
       autoUpdater.disableDifferentialDownload = false
     }
     // Why: supervised serve installs require an explicit handoff; ordinary service quits must never install implicitly.
-    // Root Linux packages also opt out: an implicit quit-time escalation would fail after the UI is gone, leaving no recovery surface.
+    // Only an explicit AppImage/non-root marker may opt into electron-updater's implicit quit install.
     autoUpdater.autoInstallOnAppQuit =
-      this.updateInstallMode === 'interactive' && getLinuxRootPackageType() === null
+      this.updateInstallMode === 'interactive' && getLinuxPackageType() === 'non-root'
     // Why: MacUpdater ignores quitAndInstall arguments; the surviving CLI supervisor must be the only serve relaunch owner.
     autoUpdater.autoRunAppAfterInstall = this.updateInstallMode === 'interactive'
     // Why: our only on-machine window into electron-updater; otherwise an unexpected update-not-available or failed fetch is invisible.
diff --git a/src/main/updater/updater-state.ts b/src/main/updater/updater-state.ts
index a410c5e10b8..d15ce42520c 100644
--- a/src/main/updater/updater-state.ts
+++ b/src/main/updater/updater-state.ts
@@ -1,6 +1,5 @@
 import type { BrowserWindow } from 'electron'
 import type { ElectronAutoUpdater } from '../electron-updater-loader'
-import type { LinuxPackageInstallDiagnostic } from '../linux-package-install-diagnostic'
 import type { LocalBuildFeed } from '../local-builds/local-build-feed-server'
 import type { UpdateSource, UpdateStatus } from '../../shared/update-status-types'
 import type { ReleaseChannel } from '../../shared/release-channel'
@@ -54,9 +53,6 @@ export abstract class UpdaterState {
   protected nudgeCheckTimer: ReturnType<typeof setTimeout> | null = null
   protected pendingQuitAndInstallTimer: ReturnType<typeof setTimeout> | null = null
   protected quitAndInstallInProgress = false
-  // Why: the pre-install digest re-proof streams the whole package, so a second install request can
-  // arrive while it runs — after the quit timer was cleared but before the handoff owns the process.
-  protected linuxPackageRevalidationInFlight = false
   protected updateInstallMode: UpdateInstallMode = 'interactive'
   protected lastInstallDeferralVersion = {
     download: null as string | null,
@@ -66,8 +62,6 @@ export abstract class UpdaterState {
   protected updateInstallCommitted = false
   // Why: recovery must only run after the native quitAndInstall call; pre-native errors must not clear quittingForUpdate or look like install recovery.
   protected quitAndInstallNativeInvoked = false
-  // Why: a synchronous throw out of quitAndInstall ends diagnostic capture before the catch runs, so stash the redacted text for it.
-  protected lastInstallAttemptDiagnostic: LinuxPackageInstallDiagnostic | null = null
   protected persistLastUpdateCheckAt: ((timestamp: number) => void) | null = null
   protected _getLastUpdateCheckAt: (() => number | null) | null = null
   protected backgroundCheckLaunchPending = false
diff --git a/src/renderer/src/components/LinuxPackageInstallRecoveryCard.test.tsx b/src/renderer/src/components/LinuxPackageInstallRecoveryCard.test.tsx
index 0c44cf153e5..8e1bc86d729 100644
--- a/src/renderer/src/components/LinuxPackageInstallRecoveryCard.test.tsx
+++ b/src/renderer/src/components/LinuxPackageInstallRecoveryCard.test.tsx
@@ -3,16 +3,21 @@ import { act, cleanup, fireEvent, render, screen, type RenderResult } from '@tes
 import userEvent from '@testing-library/user-event'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import type { LinuxPackageInstallRecovery } from '../../../shared/update-status-types'
+
+const { toastSuccess } = vi.hoisted(() => ({ toastSuccess: vi.fn() }))
+vi.mock('sonner', () => ({ toast: { success: toastSuccess } }))
+
 import { LinuxPackageInstallRecoveryCard } from './LinuxPackageInstallRecoveryCard'
 
 const RELEASE_URL = 'https://github.com/stablyai/orca/releases/tag/v1.4.200'
 const DIAGNOSTIC = 'pkexec: no polkit authentication agent found'
 const INSTALL_COMMAND = 'sudo apt-get install -y /tmp/orca-updates/orca_1.4.200_amd64.deb'
 const PACKAGE_FILE_NAME = 'orca_1.4.200_amd64.deb'
-const SUMMARY = 'Orca downloaded the update but could not install the system package automatically.'
+const SUMMARY =
+  'Orca downloaded the system package. Quit Orca before finishing the update from a terminal.'
 const COPIED_NOTE =
-  `Command copied. Run it in a system terminal to install ${PACKAGE_FILE_NAME}, ` +
-  'then quit and reopen Orca.'
+  `Command copied. Quit Orca, run it in a system terminal to install ${PACKAGE_FILE_NAME}, ` +
+  'then reopen Orca.'
 const INSTRUCTIONS = {
   ok: true as const,
   command: INSTALL_COMMAND,
@@ -26,17 +31,16 @@ const NO_PACKAGE_MANAGER = {
 
 const getInstructions = vi.fn()
 const showLinuxPackage = vi.fn()
-const quitAndInstall = vi.fn()
 const writeClipboardText = vi.fn()
 const openUrl = vi.fn()
 const onClose = vi.fn()
 const allMocks = [
   getInstructions,
   showLinuxPackage,
-  quitAndInstall,
   writeClipboardText,
   openUrl,
-  onClose
+  onClose,
+  toastSuccess
 ]
 
 function makeRecovery(
@@ -45,7 +49,7 @@ function makeRecovery(
   return {
     kind: 'linux-package-install',
     packageType: 'deb',
-    reason: 'package-install-failed',
+    reason: 'manual-install-required',
     version: '1.4.200',
     ...overrides
   }
@@ -68,14 +72,6 @@ function renderCard(options: CardOptions = {}): RenderResult {
   return render(cardElement(options))
 }
 
-/**
- * Main force-sends a new recovery object on every attempt, which re-renders this card rather than
- * remounting it. That push is the only signal a retry failed — quitAndInstall already resolved.
- */
-function pushFreshRecovery(view: RenderResult, options: CardOptions = {}): void {
-  view.rerender(cardElement({ ...options, recovery: makeRecovery(options.recovery) }))
-}
-
 // Why: each action chains several promises; drain them without depending on timer faking.
 async function flushActions(): Promise<void> {
   await act(async () => {
@@ -85,12 +81,18 @@ async function flushActions(): Promise<void> {
   })
 }
 
-function deferred<T>(): { promise: Promise<T>; resolve: (value: T) => void } {
+function deferred<T>(): {
+  promise: Promise<T>
+  resolve: (value: T) => void
+  reject: (reason?: unknown) => void
+} {
   let resolve!: (value: T) => void
-  const promise = new Promise<T>((res) => {
+  let reject!: (reason?: unknown) => void
+  const promise = new Promise<T>((res, rej) => {
     resolve = res
+    reject = rej
   })
-  return { promise, resolve }
+  return { promise, resolve, reject }
 }
 
 function button(name: string): HTMLElement {
@@ -120,8 +122,8 @@ beforeEach(() => {
   allMocks.forEach((mock) => mock.mockReset())
   getInstructions.mockResolvedValue(INSTRUCTIONS)
   showLinuxPackage.mockResolvedValue(undefined)
-  quitAndInstall.mockResolvedValue(undefined)
   writeClipboardText.mockResolvedValue(undefined)
+  openUrl.mockResolvedValue(undefined)
   Object.defineProperty(window, 'api', {
     configurable: true,
     value: {
@@ -129,8 +131,7 @@ beforeEach(() => {
       ui: { writeClipboardText },
       updater: {
         getLinuxPackageInstallInstructions: getInstructions,
-        showLinuxPackage,
-        quitAndInstall
+        showLinuxPackage
       }
     }
   })
@@ -142,27 +143,27 @@ afterEach(() => {
 })
 
 describe('LinuxPackageInstallRecoveryCard copy', () => {
-  it('leads with the recovery copy and the three dedicated actions', () => {
+  it('leads with the manual-install copy and recovery actions', () => {
     renderCard()
 
-    expect(screen.getByText('Automatic Install Failed')).toBeTruthy()
+    expect(screen.getByText('Manual Install Required')).toBeTruthy()
     expect(screen.getByText(SUMMARY)).toBeTruthy()
     expect(
       screen.getByText(/a system terminal on the computer where Orca is installed/)
     ).toBeTruthy()
-    expect(screen.getByText(/quit and reopen Orca to run the new version/)).toBeTruthy()
+    expect(screen.getByText(/Copy the command, quit Orca/)).toBeTruthy()
 
     expect(button('Copy Install Command')).toBeTruthy()
-    expect(button('Try Automatic Install Again')).toBeTruthy()
     expect(button('Show Package')).toBeTruthy()
+    expect(button('Download Manually')).toBeTruthy()
+    expect(screen.queryByRole('button', { name: /Automatic Install/ })).toBeNull()
   })
 
   it('never offers the generic Retry Download action', () => {
     renderCard()
 
     expect(screen.queryByRole('button', { name: 'Retry Download' })).toBeNull()
-    // The release fallback only appears once no command can be built.
-    expect(screen.queryByRole('button', { name: 'Download Manually' })).toBeNull()
+    expect(button('Download Manually')).toBeTruthy()
   })
 
   it('minimizes to the status bar from the header control', () => {
@@ -182,73 +183,12 @@ describe('LinuxPackageInstallRecoveryCard copy action', () => {
 
     expect(getInstructions).toHaveBeenCalledTimes(1)
     expect(writeClipboardText).toHaveBeenCalledWith(INSTALL_COMMAND)
-    // The confirmation names the artifact and never replaces the button's own label.
-    expect(footnoteText()).toBe(COPIED_NOTE)
-    expect(footnoteText()).toContain(PACKAGE_FILE_NAME)
+    expect(toastSuccess).toHaveBeenCalledWith(COPIED_NOTE)
+    expect(footnoteElement()).toBeNull()
     expect(button('Copy Install Command')).toBeTruthy()
     expect(screen.queryByRole('button', { name: 'Command copied' })).toBeNull()
   })
 
-  it('announces through the card, not a nested live region', async () => {
-    renderCard()
-
-    fireEvent.click(button('Copy Install Command'))
-    await flushActions()
-
-    expect(footnoteText()).toBe(COPIED_NOTE)
-    expect(footnoteElement()?.hasAttribute('role')).toBe(false)
-    expect(screen.queryByRole('status')).toBeNull()
-  })
-
-  it('clears the confirmation when another action starts', async () => {
-    renderCard()
-
-    fireEvent.click(button('Copy Install Command'))
-    await flushActions()
-    expect(footnoteText()).toBe(COPIED_NOTE)
-
-    fireEvent.click(button('Show Package'))
-    await flushActions()
-
-    expect(footnoteElement()).toBeNull()
-  })
-
-  it('clears the confirmation when the automatic install is retried', async () => {
-    renderCard()
-
-    fireEvent.click(button('Copy Install Command'))
-    await flushActions()
-    expect(footnoteText()).toBe(COPIED_NOTE)
-
-    fireEvent.click(button('Try Automatic Install Again'))
-    await flushActions()
-
-    expect(quitAndInstall).toHaveBeenCalledTimes(1)
-    expect(footnoteElement()).toBeNull()
-  })
-
-  it('retires the copy confirmation after the transient window', async () => {
-    // Why: happy-dom's window timers escape Vitest's fake clock, so capture the scheduled callback.
-    const scheduled: { handler: () => void; delay?: number }[] = []
-    vi.spyOn(window, 'setTimeout').mockImplementation(((handler: () => void, delay?: number) => {
-      scheduled.push({ handler, delay })
-      return scheduled.length
-    }) as unknown as typeof window.setTimeout)
-    vi.spyOn(window, 'clearTimeout').mockImplementation(() => undefined)
-    renderCard()
-
-    fireEvent.click(button('Copy Install Command'))
-    await flushActions()
-    expect(footnoteText()).toBe(COPIED_NOTE)
-
-    const expiry = scheduled.find((entry) => entry.delay === 4_000)
-    expect(expiry).toBeTruthy()
-    act(() => expiry?.handler())
-
-    expect(footnoteElement()).toBeNull()
-    expect(button('Copy Install Command')).toBeTruthy()
-  })
-
   it('keeps the copy path when the instruction call rejects', async () => {
     getInstructions.mockRejectedValue(
       new Error(
@@ -266,8 +206,8 @@ describe('LinuxPackageInstallRecoveryCard copy action', () => {
     expect(footnoteElement()?.className).toContain('text-destructive')
     // Why: only main can rule out a command; a rejection must not push the 160 MB redownload.
     expect(button('Copy Install Command').dataset.variant).toBe('default')
-    expect(screen.getByText(/Copy the command and run it/)).toBeTruthy()
-    expect(screen.queryByRole('button', { name: 'Download Manually' })).toBeNull()
+    expect(screen.getByText(/Copy the command, quit Orca/)).toBeTruthy()
+    expect(button('Download Manually')).toBeTruthy()
     expect(writeClipboardText).not.toHaveBeenCalled()
   })
 
@@ -281,9 +221,9 @@ describe('LinuxPackageInstallRecoveryCard copy action', () => {
     await flushActions()
 
     expect(footnoteText()).toBe('The downloaded package no longer matches the verified release.')
-    expect(screen.getByText('Automatic Install Failed')).toBeTruthy()
+    expect(screen.getByText('Manual Install Required')).toBeTruthy()
     expect(button('Copy Install Command').dataset.variant).toBe('default')
-    expect(button('Show Package').dataset.variant).toBe('link')
+    expect(button('Show Package').dataset.variant).toBe('outline')
   })
 
   it('retries the instruction call after a rejection', async () => {
@@ -297,7 +237,8 @@ describe('LinuxPackageInstallRecoveryCard copy action', () => {
     await flushActions()
 
     expect(getInstructions).toHaveBeenCalledTimes(2)
-    expect(footnoteText()).toBe(COPIED_NOTE)
+    expect(footnoteElement()).toBeNull()
+    expect(toastSuccess).toHaveBeenCalledWith(COPIED_NOTE)
   })
 
   it('keeps the copy path when only the clipboard write fails', async () => {
@@ -313,9 +254,9 @@ describe('LinuxPackageInstallRecoveryCard copy action', () => {
     const copyButton = button('Copy Install Command')
     expect(copyButton.dataset.variant).toBe('default')
     expect(isAriaDisabled(copyButton)).toBe(false)
-    expect(button('Show Package').dataset.variant).toBe('link')
-    expect(screen.getByText(/Copy the command and run it/)).toBeTruthy()
-    expect(screen.queryByRole('button', { name: 'Download Manually' })).toBeNull()
+    expect(button('Show Package').dataset.variant).toBe('outline')
+    expect(screen.getByText(/Copy the command, quit Orca/)).toBeTruthy()
+    expect(button('Download Manually')).toBeTruthy()
   })
 
   it('recovers from a clipboard failure on the next copy attempt', async () => {
@@ -329,7 +270,69 @@ describe('LinuxPackageInstallRecoveryCard copy action', () => {
     await flushActions()
 
     expect(writeClipboardText).toHaveBeenCalledTimes(2)
-    expect(footnoteText()).toBe(COPIED_NOTE)
+    expect(footnoteElement()).toBeNull()
+    expect(toastSuccess).toHaveBeenCalledWith(COPIED_NOTE)
+  })
+
+  it('does not write a command after the card unmounts', async () => {
+    const pending = deferred<typeof INSTRUCTIONS>()
+    getInstructions.mockReturnValue(pending.promise)
+    const { unmount } = renderCard()
+
+    fireEvent.click(button('Copy Install Command'))
+    unmount()
+    pending.resolve(INSTRUCTIONS)
+    await flushActions()
+
+    expect(writeClipboardText).not.toHaveBeenCalled()
+    expect(toastSuccess).not.toHaveBeenCalled()
+  })
+
+  it('does not write a command for a recovery the card has replaced', async () => {
+    const pending = deferred<typeof INSTRUCTIONS>()
+    getInstructions.mockReturnValue(pending.promise)
+    const view = renderCard({ recovery: makeRecovery() })
+
+    fireEvent.click(button('Copy Install Command'))
+    view.rerender(cardElement({ recovery: makeRecovery({ version: '1.4.201' }) }))
+    pending.resolve(INSTRUCTIONS)
+    await flushActions()
+
+    expect(writeClipboardText).not.toHaveBeenCalled()
+    expect(toastSuccess).not.toHaveBeenCalled()
+  })
+
+  it('ignores an instruction rejection from a same-version recovery cycle', async () => {
+    const pending = deferred<typeof INSTRUCTIONS>()
+    const recovery = makeRecovery()
+    getInstructions.mockReturnValue(pending.promise)
+    const view = renderCard({ recovery })
+
+    fireEvent.click(button('Copy Install Command'))
+    view.rerender(cardElement({ recovery: { ...recovery } }))
+    pending.reject(new Error('Package install recovery is no longer current.'))
+    await flushActions()
+
+    expect(footnoteElement()).toBeNull()
+    expect(isAriaDisabled(button('Copy Install Command'))).toBe(false)
+  })
+
+  it('ignores a clipboard rejection from a replaced recovery cycle', async () => {
+    const pending = deferred<void>()
+    const recovery = makeRecovery()
+    writeClipboardText.mockReturnValue(pending.promise)
+    const view = renderCard({ recovery })
+
+    fireEvent.click(button('Copy Install Command'))
+    await flushActions()
+    expect(writeClipboardText).toHaveBeenCalledWith(INSTALL_COMMAND)
+
+    view.rerender(cardElement({ recovery: { ...recovery } }))
+    pending.reject(new Error('Clipboard is unavailable.'))
+    await flushActions()
+
+    expect(footnoteElement()).toBeNull()
+    expect(toastSuccess).not.toHaveBeenCalled()
   })
 })
 
@@ -344,21 +347,18 @@ describe('LinuxPackageInstallRecoveryCard hashing state', () => {
     const checking = button('Checking package...')
     expect(isAriaDisabled(checking)).toBe(true)
     expect(isAriaDisabled(button('Show Package'))).toBe(true)
-    expect(isAriaDisabled(button('Try Automatic Install Again'))).toBe(true)
 
     fireEvent.click(checking)
     fireEvent.click(button('Show Package'))
-    fireEvent.click(button('Try Automatic Install Again'))
 
     // Why: the buttons stay clickable for focus reasons, so the handlers must do the refusing.
     expect(getInstructions).toHaveBeenCalledTimes(1)
     expect(showLinuxPackage).not.toHaveBeenCalled()
-    expect(quitAndInstall).not.toHaveBeenCalled()
 
     pending.resolve(INSTRUCTIONS)
     await flushActions()
 
-    expect(footnoteText()).toBe(COPIED_NOTE)
+    expect(toastSuccess).toHaveBeenCalledWith(COPIED_NOTE)
     expect(isAriaDisabled(button('Show Package'))).toBe(false)
   })
 
@@ -370,7 +370,7 @@ describe('LinuxPackageInstallRecoveryCard hashing state', () => {
     fireEvent.click(button('Copy Install Command'))
 
     // Why: ui/button styles only `disabled:`, so without these an inert action looks fully live.
-    for (const name of ['Checking package...', 'Try Automatic Install Again', 'Show Package']) {
+    for (const name of ['Checking package...', 'Show Package']) {
       expect(button(name).className).toContain('aria-disabled:opacity-50')
       expect(button(name).className).toContain('aria-disabled:cursor-default')
     }
@@ -436,8 +436,11 @@ describe('LinuxPackageInstallRecoveryCard details', () => {
 
     fireEvent.click(button('Show details'))
 
+    expect(screen.getByText('Details')).toBeTruthy()
+    expect(screen.queryByText('Last error')).toBeNull()
     // Why: the digest check is a point-in-time claim, not a standing guarantee about the file.
     const detail = screen.getByText(/Orca checks the downloaded file against the release metadata/)
+    expect(detail.textContent).not.toContain(DIAGNOSTIC)
     expect(detail.textContent).toContain('at the moment it builds this command')
     expect(detail.textContent).toContain(
       'The system package itself is not signature-checked, and Orca cannot vouch for the file ' +
@@ -456,7 +459,10 @@ describe('LinuxPackageInstallRecoveryCard details', () => {
 
   it('scrolls long diagnostics instead of widening the card', () => {
     const long = `${DIAGNOSTIC} ${'diagnostic-overflow '.repeat(400)}`
-    const { container } = renderCard({ diagnostic: long })
+    const { container } = renderCard({
+      diagnostic: long,
+      recovery: makeRecovery({ reason: 'authentication-denied' })
+    })
 
     fireEvent.click(button('Show details'))
 
@@ -468,97 +474,12 @@ describe('LinuxPackageInstallRecoveryCard details', () => {
   })
 })
 
-describe('LinuxPackageInstallRecoveryCard retry', () => {
-  it('retries the automatic install through quitAndInstall', () => {
-    renderCard()
-
-    fireEvent.click(button('Try Automatic Install Again'))
-
-    expect(quitAndInstall).toHaveBeenCalledTimes(1)
-    expect(getInstructions).not.toHaveBeenCalled()
-  })
-
-  it('holds the busy slot while the quit is in flight', async () => {
-    renderCard()
-
-    fireEvent.click(button('Try Automatic Install Again'))
-    await flushActions()
-
-    // Why: the retry now re-proves the package digest before quitting, so the click must report
-    // progress instead of leaving three inert buttons for the length of the hash.
-    expect(isAriaDisabled(button('Checking package...'))).toBe(true)
-    // Why: quitAndInstall resolves as soon as main schedules the install, so a resolved promise is
-    // not an outcome — the slot stays held until a real status arrives.
-    expect(isAriaDisabled(button('Copy Install Command'))).toBe(true)
-    expect(isAriaDisabled(button('Show Package'))).toBe(true)
-
-    fireEvent.click(button('Copy Install Command'))
-    fireEvent.click(button('Show Package'))
-    await flushActions()
-
-    expect(getInstructions).not.toHaveBeenCalled()
-    expect(showLinuxPackage).not.toHaveBeenCalled()
-    expect(quitAndInstall).toHaveBeenCalledTimes(1)
-  })
-
-  it('releases the busy slot when a fresh recovery status arrives', async () => {
-    const view = renderCard()
-
-    fireEvent.click(button('Try Automatic Install Again'))
-    await flushActions()
-    expect(isAriaDisabled(button('Copy Install Command'))).toBe(true)
-
-    // A failed retry never rejects — main pushes a new recovery status a moment later.
-    pushFreshRecovery(view)
-
-    expect(isAriaDisabled(button('Copy Install Command'))).toBe(false)
-    expect(isAriaDisabled(button('Show Package'))).toBe(false)
-    expect(isAriaDisabled(button('Try Automatic Install Again'))).toBe(false)
-
-    fireEvent.click(button('Copy Install Command'))
-    await flushActions()
-
-    expect(getInstructions).toHaveBeenCalledTimes(1)
-    expect(writeClipboardText).toHaveBeenCalledWith(INSTALL_COMMAND)
-    expect(footnoteText()).toBe(COPIED_NOTE)
-  })
-
-  it('leaves an in-flight hash job busy when a fresh recovery status arrives', () => {
-    const pending = deferred<typeof INSTRUCTIONS>()
-    getInstructions.mockReturnValue(pending.promise)
-    const view = renderCard()
-
-    fireEvent.click(button('Copy Install Command'))
-    pushFreshRecovery(view)
-
-    // Why: the release is scoped to the retry slot — a running hash must keep its busy state.
-    expect(button('Checking package...')).toBeTruthy()
-    expect(isAriaDisabled(button('Show Package'))).toBe(true)
-
-    pending.resolve(INSTRUCTIONS)
-  })
-
-  it('also releases the busy slot if the preload call itself rejects', async () => {
-    quitAndInstall.mockRejectedValue(new Error('Error: updater is not initialized'))
-    renderCard()
-
-    fireEvent.click(button('Try Automatic Install Again'))
-    await flushActions()
-
-    expect(footnoteText()).toBe('updater is not initialized')
-    expect(isAriaDisabled(button('Copy Install Command'))).toBe(false)
-    expect(isAriaDisabled(button('Show Package'))).toBe(false)
-  })
-})
-
 describe('LinuxPackageInstallRecoveryCard reveal', () => {
-  it('reveals the retained package from the link-style action', async () => {
+  it('reveals the retained package from the secondary action', async () => {
     renderCard()
 
     const show = button('Show Package')
-    expect(show.dataset.variant).toBe('link')
-    // The link-style action still has to meet the touch-target floor.
-    expect(show.className).toContain('min-h-[44px]')
+    expect(show.dataset.variant).toBe('outline')
 
     fireEvent.click(show)
     await flushActions()
@@ -578,6 +499,17 @@ describe('LinuxPackageInstallRecoveryCard reveal', () => {
     // Why: a reveal failure is not a command-build failure, so the copy path must survive it.
     expect(button('Copy Install Command')).toBeTruthy()
   })
+
+  it('reports a failed official-release open in place', async () => {
+    openUrl.mockRejectedValue(new Error('Could not open the release page.'))
+    renderCard()
+
+    fireEvent.click(button('Download Manually'))
+    await flushActions()
+
+    expect(footnoteText()).toBe('Could not open the release page.')
+    expect(footnoteElement()?.className).toContain('text-destructive')
+  })
 })
 
 describe('LinuxPackageInstallRecoveryCard without a usable command', () => {
@@ -590,10 +522,8 @@ describe('LinuxPackageInstallRecoveryCard without a usable command', () => {
 
     expect(screen.queryByRole('button', { name: 'Copy Install Command' })).toBeNull()
     expect(button('Show Package').dataset.variant).toBe('default')
-    expect(button('Try Automatic Install Again')).toBeTruthy()
     expect(footnoteText()).toBe(NO_PACKAGE_MANAGER.message)
-    // The copy-and-run explainer would be dead advice with no command to copy.
-    expect(screen.queryByText(/Copy the command and run it/)).toBeNull()
+    expect(screen.getByText(/Quit Orca before finishing the update/)).toBeTruthy()
 
     fireEvent.click(button('Download Manually'))
     expect(openUrl).toHaveBeenCalledWith(RELEASE_URL)
@@ -627,43 +557,6 @@ describe('LinuxPackageInstallRecoveryCard without a usable command', () => {
 
     expect(showLinuxPackage).toHaveBeenCalledTimes(1)
   })
-
-  it('restores the copy path when the automatic install is retried', async () => {
-    getInstructions.mockResolvedValueOnce(NO_PACKAGE_MANAGER)
-    renderCard()
-
-    fireEvent.click(button('Copy Install Command'))
-    await flushActions()
-    expect(screen.queryByRole('button', { name: 'Copy Install Command' })).toBeNull()
-
-    // Why: a retry re-evaluates the machine, so the earlier "no command" verdict must not stick.
-    fireEvent.click(button('Try Automatic Install Again'))
-    await flushActions()
-
-    expect(quitAndInstall).toHaveBeenCalledTimes(1)
-    expect(button('Copy Install Command').dataset.variant).toBe('default')
-    expect(button('Show Package').dataset.variant).toBe('link')
-    expect(screen.getByText(/Copy the command and run it/)).toBeTruthy()
-    expect(screen.queryByRole('button', { name: 'Download Manually' })).toBeNull()
-  })
-
-  it('copies again once a fresh recovery status follows a failed retry', async () => {
-    getInstructions.mockResolvedValueOnce(NO_PACKAGE_MANAGER)
-    const view = renderCard()
-
-    fireEvent.click(button('Copy Install Command'))
-    await flushActions()
-
-    fireEvent.click(button('Try Automatic Install Again'))
-    await flushActions()
-    pushFreshRecovery(view)
-
-    fireEvent.click(button('Copy Install Command'))
-    await flushActions()
-
-    expect(writeClipboardText).toHaveBeenCalledWith(INSTALL_COMMAND)
-    expect(footnoteText()).toBe(COPIED_NOTE)
-  })
 })
 
 describe('LinuxPackageInstallRecoveryCard keyboard', () => {
@@ -690,8 +583,8 @@ describe('LinuxPackageInstallRecoveryCard keyboard', () => {
       'Minimize to status bar',
       'Show details',
       'Copy Install Command',
-      'Try Automatic Install Again',
-      'Show Package'
+      'Show Package',
+      'Download Manually'
     ]
     for (const name of order) {
       await user.tab()
diff --git a/src/renderer/src/components/LinuxPackageInstallRecoveryCard.tsx b/src/renderer/src/components/LinuxPackageInstallRecoveryCard.tsx
index 69a0f73d627..10980667055 100644
--- a/src/renderer/src/components/LinuxPackageInstallRecoveryCard.tsx
+++ b/src/renderer/src/components/LinuxPackageInstallRecoveryCard.tsx
@@ -1,17 +1,17 @@
-import { useCallback, useEffect, useRef, useState } from 'react'
+import { useLayoutEffect, useRef, useState } from 'react'
+import { toast } from 'sonner'
 import type {
   LinuxPackageInstallInstructions,
   LinuxPackageInstallRecovery
 } from '../../../shared/update-status-types'
 import { UpdateErrorCardContent } from './UpdateErrorCardContent'
 import { translate } from '@/i18n/i18n'
-
-const COPY_CONFIRMATION_MS = 4_000
+import { useMountedRef } from '@/hooks/useMountedRef'
 
 function copiedNote(packageFileName: string): string {
   return translate(
     'auto.components.LinuxPackageInstallRecoveryCard.aa57fa4f80',
-    'Command copied. Run it in a system terminal to install {{value0}}, then quit and reopen Orca.',
+    'Command copied. Quit Orca, run it in a system terminal to install {{value0}}, then reopen Orca.',
     {
       value0: packageFileName
     }
@@ -39,15 +39,15 @@ export function LinuxPackageInstallRecoveryCard({
   // be resolved per render — at module scope they would freeze the whole card in English.
   const TITLE = translate(
     'auto.components.LinuxPackageInstallRecoveryCard.53e1559f99',
-    'Automatic Install Failed'
+    'Manual Install Required'
   )
   const SUMMARY = translate(
     'auto.components.LinuxPackageInstallRecoveryCard.a7ac6ec78b',
-    'Orca downloaded the update but could not install the system package automatically.'
+    'Orca downloaded the system package. Quit Orca before finishing the update from a terminal.'
   )
   const EXPLAINER = translate(
     'auto.components.LinuxPackageInstallRecoveryCard.82c6dbea00',
-    'Copy the command and run it in a system terminal on the computer where Orca is installed. After it finishes, quit and reopen Orca to run the new version.'
+    'Copy the command, quit Orca, and run it in a system terminal on the computer where Orca is installed. Reopen Orca after it finishes.'
   )
   const AGENT_NOTE = translate(
     'auto.components.LinuxPackageInstallRecoveryCard.53c4b8e148',
@@ -61,42 +61,23 @@ export function LinuxPackageInstallRecoveryCard({
     'auto.components.LinuxPackageInstallRecoveryCard.c732bcbf8f',
     'Checking package...'
   )
-  const [pendingAction, setPendingAction] = useState<'copy' | 'show' | 'retry' | null>(null)
+  const [pendingAction, setPendingAction] = useState<'copy' | 'show' | null>(null)
   const [actionError, setActionError] = useState<string | null>(null)
-  const [copiedFileName, setCopiedFileName] = useState<string | null>(null)
   // Why: the trusted system directories lack sudo or a package manager — no command can be offered at all.
   const [commandUnavailable, setCommandUnavailable] = useState(false)
-  const mountedRef = useRef(true)
-
-  useEffect(() => {
-    mountedRef.current = true
-    return () => {
-      mountedRef.current = false
-    }
-  }, [])
-
-  // Why: quitAndInstall resolves as soon as main schedules the install, so a failed retry never
-  // rejects — it arrives as a new recovery status. Without this the busy slot never clears and every
-  // action stays inert for the rest of the session.
-  useEffect(() => {
-    setPendingAction((current) => (current === 'retry' ? null : current))
+  const mountedRef = useMountedRef()
+  const recoveryRef = useRef(recovery)
+  useLayoutEffect(() => {
+    recoveryRef.current = recovery
   }, [recovery])
+  const isCurrentRecovery = (): boolean => mountedRef.current && recoveryRef.current === recovery
 
-  useEffect(() => {
-    if (!copiedFileName) {
-      return
-    }
-    const timer = window.setTimeout(() => setCopiedFileName(null), COPY_CONFIRMATION_MS)
-    return () => window.clearTimeout(timer)
-  }, [copiedFileName])
-
-  const handleCopyCommand = useCallback(() => {
+  const handleCopyCommand = (): void => {
     if (pendingAction) {
       return
     }
     setPendingAction('copy')
     setActionError(null)
-    setCopiedFileName(null)
     void (async () => {
       let instructions: LinuxPackageInstallInstructions
       try {
@@ -104,26 +85,29 @@ export function LinuxPackageInstallRecoveryCard({
       } catch (error) {
         // Why: only main knows whether the machine simply has no package manager; any other failure
         // (stale status, untrusted sender, invalid artifact) must not demote the copy path.
-        if (mountedRef.current) {
+        if (isCurrentRecovery()) {
           setActionError(toMessage(error))
         }
         return
       }
       if (!instructions.ok) {
-        if (mountedRef.current) {
+        if (isCurrentRecovery()) {
           setCommandUnavailable(true)
           setActionError(instructions.message)
         }
         return
       }
+      if (!isCurrentRecovery()) {
+        return
+      }
       try {
         await window.api.ui.writeClipboardText(instructions.command)
-        if (mountedRef.current) {
-          setCopiedFileName(instructions.packageFileName)
+        if (isCurrentRecovery()) {
+          toast.success(copiedNote(instructions.packageFileName))
         }
       } catch (error) {
         // Why: the command itself is valid — only the clipboard failed, so keep the copy action.
-        if (mountedRef.current) {
+        if (isCurrentRecovery()) {
           setActionError(toMessage(error))
         }
       }
@@ -132,19 +116,18 @@ export function LinuxPackageInstallRecoveryCard({
         setPendingAction(null)
       }
     })
-  }, [pendingAction])
+  }
 
-  const handleShowPackage = useCallback(() => {
+  const handleShowPackage = (): void => {
     if (pendingAction) {
       return
     }
     setPendingAction('show')
     setActionError(null)
-    setCopiedFileName(null)
     void window.api.updater
       .showLinuxPackage()
       .catch((error: unknown) => {
-        if (mountedRef.current) {
+        if (isCurrentRecovery()) {
           setActionError(toMessage(error))
         }
       })
@@ -153,29 +136,9 @@ export function LinuxPackageInstallRecoveryCard({
           setPendingAction(null)
         }
       })
-  }, [pendingAction])
+  }
 
-  const handleRetryAutomatic = useCallback(() => {
-    // Why: guard in the handler, not only through the disabled prop, so no path can quit and install mid-hash.
-    if (pendingAction) {
-      return
-    }
-    // Why: the quit sequence owns the app from here; hold the busy slot so no other action starts
-    // work mid-quit. Released by the effect above when a fresh recovery status says Orca stayed open.
-    setPendingAction('retry')
-    setActionError(null)
-    setCopiedFileName(null)
-    // Why: a fresh install attempt re-evaluates the machine, so an earlier "no command" verdict must not stick.
-    setCommandUnavailable(false)
-    void window.api.updater.quitAndInstall().catch((error: unknown) => {
-      if (mountedRef.current) {
-        setActionError(toMessage(error))
-        setPendingAction(null)
-      }
-    })
-  }, [pendingAction])
-
-  // Why: the label keeps naming its action — the footnote below the buttons carries the confirmation.
+  // Why: the label keeps naming its action while the toast carries transient confirmation.
   const copyAction = {
     label: translate(
       'auto.components.LinuxPackageInstallRecoveryCard.55c86654b7',
@@ -193,40 +156,28 @@ export function LinuxPackageInstallRecoveryCard({
     disabled: pendingAction !== null,
     onClick: handleShowPackage
   }
-  const retryAction = {
-    label: translate(
-      'auto.components.LinuxPackageInstallRecoveryCard.3da99454c6',
-      'Try Automatic Install Again'
-    ),
-    // Why: the retry re-proves the package digest before it quits, so the click is no longer
-    // instant — without this the card would just go inert for the length of the hash.
-    pendingLabel: CHECKING_LABEL,
-    isPending: pendingAction === 'retry',
-    disabled: pendingAction !== null,
-    onClick: handleRetryAutomatic
-  }
-
   const officialReleaseAction = releaseUrl
     ? {
         label: translate('auto.components.UpdateCard.47126bcf57', 'Download Manually'),
-        onClick: () => void window.api.shell.openUrl(releaseUrl)
+        onClick: () => {
+          setActionError(null)
+          void window.api.shell.openUrl(releaseUrl).catch((error: unknown) => {
+            if (isCurrentRecovery()) {
+              setActionError(toMessage(error))
+            }
+          })
+        }
       }
     : undefined
 
   const detail = [
     recovery.reason === 'authentication-agent-unavailable' ? AGENT_NOTE : null,
-    diagnostic,
+    recovery.reason === 'manual-install-required' ? null : diagnostic,
     TRUST_NOTE
   ]
     .filter(Boolean)
     .join(' ')
 
-  const footnote = actionError
-    ? { text: actionError, tone: 'destructive' as const }
-    : copiedFileName
-      ? { text: copiedNote(copiedFileName) }
-      : undefined
-
   return (
     <UpdateErrorCardContent
       title={TITLE}
@@ -235,11 +186,9 @@ export function LinuxPackageInstallRecoveryCard({
       detail={detail}
       // Why: with no safe command to copy, revealing the retained package becomes the primary path.
       primaryAction={commandUnavailable ? showAction : copyAction}
-      secondaryAction={retryAction}
-      // Why: the button row only fits two actions at this card width, so the demoted mode keeps
-      // Show Package and Retry there and drops the official-release link to the link row.
-      tertiaryAction={commandUnavailable ? officialReleaseAction : showAction}
-      footnote={footnote}
+      secondaryAction={commandUnavailable ? undefined : showAction}
+      tertiaryAction={officialReleaseAction}
+      footnote={actionError ? { text: actionError, tone: 'destructive' } : undefined}
       onClose={onClose}
     />
   )
diff --git a/src/renderer/src/components/UpdateCard.error-card.test.tsx b/src/renderer/src/components/UpdateCard.error-card.test.tsx
index 4cb297b7ca4..1e6da6879f7 100644
--- a/src/renderer/src/components/UpdateCard.error-card.test.tsx
+++ b/src/renderer/src/components/UpdateCard.error-card.test.tsx
@@ -2,7 +2,7 @@
 import { act, cleanup, fireEvent, render, screen, type RenderResult } from '@testing-library/react'
 import userEvent from '@testing-library/user-event'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import type { LinuxPackageInstallRecovery } from '../../../shared/update-status-types'
+import type { LinuxPackageInstallRecovery, UpdateStatus } from '../../../shared/update-status-types'
 import { useAppStore } from '../store'
 import { UpdateCard } from './UpdateCard'
 
@@ -19,17 +19,13 @@ const setSettings = vi.fn()
 const PACKAGE_RECOVERY: LinuxPackageInstallRecovery = {
   kind: 'linux-package-install',
   packageType: 'deb',
-  reason: 'authentication-agent-unavailable',
+  reason: 'manual-install-required',
   version: '1.4.200'
 }
 
-function renderAfterAvailableStatus(): RenderResult {
+function renderWithInitialStatus(updateStatus: UpdateStatus): RenderResult {
   useAppStore.setState({
-    updateStatus: {
-      state: 'available',
-      version: '1.4.200',
-      changelog: null
-    },
+    updateStatus,
     updateChangelog: null,
     dismissedUpdateVersion: null,
     updateCardCollapsed: false,
@@ -38,6 +34,10 @@ function renderAfterAvailableStatus(): RenderResult {
   return render(<UpdateCard />)
 }
 
+function renderAfterAvailableStatus(): RenderResult {
+  return renderWithInitialStatus({ state: 'available', version: '1.4.200', changelog: null })
+}
+
 function mockReducedMotion(matches: boolean): void {
   Object.defineProperty(window, 'matchMedia', {
     configurable: true,
@@ -213,23 +213,58 @@ function showPackageRecovery(recovery = PACKAGE_RECOVERY): void {
   act(() =>
     useAppStore.getState().setUpdateStatus({
       state: 'error',
-      message: 'pkexec: no polkit authentication agent found',
+      message: 'Quit Orca before running the system package install command.',
       recovery
     })
   )
 }
 
 describe('UpdateCard Linux package-install recovery', () => {
-  it('routes package-install errors to the recovery card instead of the generic one', () => {
+  it('routes root-package downloads to the manual-install card instead of the generic one', () => {
     renderAfterAvailableStatus()
 
     showPackageRecovery()
 
-    expect(screen.getByText('Automatic Install Failed')).toBeTruthy()
+    expect(screen.getByText('Manual Install Required')).toBeTruthy()
     expect(screen.queryByText('Update Error')).toBeNull()
     expect(screen.queryByRole('button', { name: 'Retry Download' })).toBeNull()
     expect(screen.getByRole('button', { name: 'Copy Install Command' })).toBeTruthy()
-    expect(screen.getByRole('button', { name: 'Try Automatic Install Again' })).toBeTruthy()
+    expect(screen.getByRole('button', { name: 'Show Package' })).toBeTruthy()
+    expect(screen.getByRole('button', { name: 'Download Manually' })).toBeTruthy()
+    expect(quitAndInstall).not.toHaveBeenCalled()
+  })
+
+  it('renders an initial recovery snapshot with its versioned release fallback', () => {
+    renderWithInitialStatus({
+      state: 'error',
+      message: 'Quit Orca before running the system package install command.',
+      recovery: PACKAGE_RECOVERY
+    })
+
+    expect(screen.getByText('Manual Install Required')).toBeTruthy()
+    fireEvent.click(screen.getByRole('button', { name: 'Download Manually' }))
+    expect(openUrl).toHaveBeenCalledWith('https://github.com/stablyai/orca/releases/tag/v1.4.200')
+  })
+
+  it('uses the recovery version when cached update state is stale', () => {
+    renderWithInitialStatus({ state: 'available', version: '1.4.199', changelog: null })
+    showPackageRecovery()
+
+    fireEvent.click(screen.getByRole('button', { name: 'Download Manually' }))
+    expect(openUrl).toHaveBeenCalledWith('https://github.com/stablyai/orca/releases/tag/v1.4.200')
+  })
+
+  it.each([
+    'authentication-agent-unavailable',
+    'authentication-denied',
+    'package-install-failed'
+  ] as const)('keeps recovery usable for the legacy %s reason', (reason) => {
+    renderAfterAvailableStatus()
+
+    showPackageRecovery({ ...PACKAGE_RECOVERY, reason })
+
+    expect(screen.getByText('Manual Install Required')).toBeTruthy()
+    expect(screen.getByRole('button', { name: 'Copy Install Command' })).toBeTruthy()
     expect(screen.getByRole('button', { name: 'Show Package' })).toBeTruthy()
   })
 
@@ -262,13 +297,52 @@ describe('UpdateCard Linux package-install recovery', () => {
     expect(openUrl).toHaveBeenCalledWith('https://github.com/stablyai/orca/releases/tag/v1.4.200')
   })
 
+  it('resets command discovery when a newer package cycle replaces the recovery', async () => {
+    getInstructions.mockResolvedValueOnce({
+      ok: false,
+      reason: 'no-package-manager',
+      message: 'No supported package manager was found.'
+    })
+    renderAfterAvailableStatus()
+    showPackageRecovery()
+
+    fireEvent.click(screen.getByRole('button', { name: 'Copy Install Command' }))
+    await flushActions()
+    expect(screen.queryByRole('button', { name: 'Copy Install Command' })).toBeNull()
+
+    showPackageRecovery({ ...PACKAGE_RECOVERY, version: '1.4.201' })
+
+    fireEvent.click(screen.getByRole('button', { name: 'Copy Install Command' }))
+    await flushActions()
+    expect(getInstructions).toHaveBeenCalledTimes(2)
+    expect(writeClipboardText).toHaveBeenCalledTimes(1)
+  })
+
+  it('links unusable package metadata to the release without offering a futile retry', () => {
+    const message =
+      'The downloaded package metadata could not be verified. Quit Orca before downloading and installing the update from the official release page.'
+    renderWithInitialStatus({
+      state: 'error',
+      message,
+      version: '1.4.200',
+      retryable: false
+    })
+
+    expect(screen.getByText('Update Error')).toBeTruthy()
+    expect(screen.getByText(message)).toBeTruthy()
+    expect(screen.queryByText('Manual Install Required')).toBeNull()
+    expect(screen.queryByRole('button', { name: 'Retry Download' })).toBeNull()
+    fireEvent.click(screen.getByRole('button', { name: 'Download Manually' }))
+    expect(openUrl).toHaveBeenCalledWith('https://github.com/stablyai/orca/releases/tag/v1.4.200')
+  })
+
   it('keeps generic errors on the generic card when no recovery is attached', () => {
     renderAfterAvailableStatus()
 
     act(() => useAppStore.getState().setUpdateStatus({ state: 'error', message: 'ENOSPC' }))
 
     expect(screen.getByText('Update Error')).toBeTruthy()
-    expect(screen.queryByText('Automatic Install Failed')).toBeNull()
+    expect(screen.queryByText('Manual Install Required')).toBeNull()
     fireEvent.click(screen.getByRole('button', { name: 'Retry Download' }))
     expect(download).toHaveBeenCalledTimes(1)
   })
@@ -295,7 +369,7 @@ describe('UpdateCard Linux package-install recovery', () => {
     )
 
     expect(screen.getByText('HTTP/2 Download Blocked')).toBeTruthy()
-    expect(screen.queryByText('Automatic Install Failed')).toBeNull()
+    expect(screen.queryByText('Manual Install Required')).toBeNull()
     expect(screen.getByRole('button', { name: 'Enable & Restart' })).toBeTruthy()
   })
 
@@ -360,7 +434,7 @@ describe('UpdateCard recovery keyboard and motion', () => {
     fireEvent.keyDown(screen.getByRole('complementary'), { key: 'Escape' })
 
     expect(useAppStore.getState().updateCardCollapsed).toBe(true)
-    expect(screen.queryByText('Automatic Install Failed')).toBeNull()
+    expect(screen.queryByText('Manual Install Required')).toBeNull()
   })
 
   it('plays the exit animation before minimizing when motion is allowed', () => {
diff --git a/src/renderer/src/components/UpdateCard.test.ts b/src/renderer/src/components/UpdateCard.test.ts
index a12146e9754..e3143835b6e 100644
--- a/src/renderer/src/components/UpdateCard.test.ts
+++ b/src/renderer/src/components/UpdateCard.test.ts
@@ -503,6 +503,37 @@ describe('UpdateCard visibility gates', () => {
     ).toBe('visible')
   })
 
+  it('shows an initial package recovery before any version was cached', () => {
+    expect(
+      computeVisibility({
+        status: {
+          state: 'error',
+          message: 'Quit Orca before running the system package install command.',
+          recovery: {
+            kind: 'linux-package-install',
+            packageType: 'deb',
+            reason: 'manual-install-required',
+            version: '1.2.0'
+          }
+        },
+        dismissedVersion: null,
+        cachedVersion: null,
+        hasStartedDownload: false
+      })
+    ).toBe('visible')
+  })
+
+  it('shows an initial versioned download error before any version was cached', () => {
+    expect(
+      computeVisibility({
+        status: { state: 'error', message: 'invalid metadata', version: '1.2.0' },
+        dismissedVersion: null,
+        cachedVersion: null,
+        hasStartedDownload: false
+      })
+    ).toBe('visible')
+  })
+
   it('shows downloaded for card-initiated downloads', () => {
     expect(
       computeVisibility({
diff --git a/src/renderer/src/components/UpdateCard.tsx b/src/renderer/src/components/UpdateCard.tsx
index 4bbf47fd492..bcee9e0f521 100644
--- a/src/renderer/src/components/UpdateCard.tsx
+++ b/src/renderer/src/components/UpdateCard.tsx
@@ -34,7 +34,6 @@ export function UpdateCard(): React.JSX.Element | null {
   const [installError, setInstallError] = useState<string | null>(null)
   const [compatibilityRelaunching, setCompatibilityRelaunching] = useState(false)
   const [compatibilitySetupError, setCompatibilitySetupError] = useState<string | null>(null)
-  const [errorDismissed, setErrorDismissed] = useState(false)
   const [autoDismissed, setAutoDismissed] = useState(false)
   const [exiting, setExiting] = useState(false)
   const isLocalBuild = status.source === 'local'
@@ -65,9 +64,6 @@ export function UpdateCard(): React.JSX.Element | null {
     if (exiting) {
       setExiting(false)
     }
-    if (errorDismissed) {
-      setErrorDismissed(false)
-    }
   }
 
   const shouldAutoDismissLatest =
@@ -115,7 +111,6 @@ export function UpdateCard(): React.JSX.Element | null {
       hasStartedDownload: hasStartedDownload.current,
       updateUserInitiatedCycle,
       autoDismissed,
-      errorDismissed,
       collapsed
     })
   ) {
@@ -130,13 +125,6 @@ export function UpdateCard(): React.JSX.Element | null {
     void window.api.updater.download()
   }
   const handleClose = (): void => {
-    if (status.state === 'error') {
-      setErrorDismissed(true)
-      if (cachedVersion) {
-        dismissUpdate(cachedVersion)
-      }
-      return
-    }
     dismissUpdate()
   }
   const handleInstallRetry = (): void => {
@@ -177,7 +165,6 @@ export function UpdateCard(): React.JSX.Element | null {
     status.state === 'error' && status.recovery?.kind === 'linux-package-install'
       ? { recovery: status.recovery, diagnostic: status.message }
       : null
-
   const handleDismissWithAnimation = (): void => {
     if (prefersReducedMotion) {
       handleClose()
@@ -230,7 +217,6 @@ export function UpdateCard(): React.JSX.Element | null {
       errorCard={errorCard}
       linuxPackageRecovery={linuxPackageRecovery}
       isLocalBuild={isLocalBuild}
-      cachedVersion={cachedVersion}
       hasStartedDownload={hasStartedDownload.current}
       prefersReducedMotion={prefersReducedMotion}
       mediaFailed={mediaFailed}
@@ -250,7 +236,9 @@ export function UpdateCard(): React.JSX.Element | null {
       ? 'animate-update-card-exit'
       : 'animate-update-card-enter'
   const showReassurance =
-    !reassuranceSeen && (status.state === 'available' || status.state === 'downloading')
+    !reassuranceSeen &&
+    ((status.state === 'available' && !status.externallyManaged) ||
+      status.state === 'downloading')
   return (
     <div
       ref={cardRootRef}
diff --git a/src/renderer/src/components/UpdateErrorCardContent.tsx b/src/renderer/src/components/UpdateErrorCardContent.tsx
index f6665a706dd..85807e47a1f 100644
--- a/src/renderer/src/components/UpdateErrorCardContent.tsx
+++ b/src/renderer/src/components/UpdateErrorCardContent.tsx
@@ -141,7 +141,7 @@ export function UpdateErrorCardContent({
           {showDetails ? (
             <div id={detailId} className="rounded-md bg-muted/40 px-3 py-2">
               <p className="mb-1 text-[11px] font-medium uppercase text-muted-foreground">
-                {translate('auto.components.UpdateCard.3553a8672f', 'Last error')}
+                {translate('auto.components.UpdateCard.3553a8672f', 'Details')}
               </p>
               <p className="scrollbar-sleek max-h-20 overflow-auto break-words font-mono text-xs leading-relaxed text-muted-foreground">
                 {detail}
diff --git a/src/renderer/src/components/maintenance/update-card/UpdateAvailableCardContent.tsx b/src/renderer/src/components/maintenance/update-card/UpdateAvailableCardContent.tsx
index b18c18537d1..ce45e1c69e5 100644
--- a/src/renderer/src/components/maintenance/update-card/UpdateAvailableCardContent.tsx
+++ b/src/renderer/src/components/maintenance/update-card/UpdateAvailableCardContent.tsx
@@ -7,6 +7,18 @@ function isAnimatedGif(url: string | undefined): boolean {
   return typeof url === 'string' && url.toLowerCase().endsWith('.gif')
 }
 
+/** A package manager owns this install: the release is real but Orca can never apply it here. */
+function ExternallyManagedNote(): React.JSX.Element {
+  return (
+    <p className="text-xs leading-relaxed text-muted-foreground">
+      {translate(
+        'auto.components.UpdateCard.7f1a4c9e02',
+        'Your system package manager installed Orca, so update it from there — Orca cannot install this release itself.'
+      )}
+    </p>
+  )
+}
+
 export function UpdateAvailableRichContent({
   release,
   releasesBehind,
@@ -16,7 +28,8 @@ export function UpdateAvailableRichContent({
   onMediaError,
   onMediaLoad,
   onUpdate,
-  onClose
+  onClose,
+  externallyManaged = false
 }: {
   release: NonNullable<ChangelogData['release']>
   releasesBehind: number | null
@@ -27,6 +40,7 @@ export function UpdateAvailableRichContent({
   onMediaLoad: () => void
   onUpdate: () => void
   onClose: () => void
+  externallyManaged?: boolean
 }): React.JSX.Element {
   const showMedia =
     release.mediaUrl && !mediaFailed && !(prefersReducedMotion && isAnimatedGif(release.mediaUrl))
@@ -87,9 +101,13 @@ export function UpdateAvailableRichContent({
       >
         {translate('auto.components.UpdateCard.aad383aecc', 'Read the full release notes')}
       </button>
-      <Button variant="default" size="sm" onClick={onUpdate} className="w-full cursor-pointer">
-        {translate('auto.components.UpdateCard.ec8fe71cfc', 'Update')}
-      </Button>
+      {externallyManaged ? (
+        <ExternallyManagedNote />
+      ) : (
+        <Button variant="default" size="sm" onClick={onUpdate} className="w-full cursor-pointer">
+          {translate('auto.components.UpdateCard.ec8fe71cfc', 'Update')}
+        </Button>
+      )}
     </div>
   )
 }
@@ -98,12 +116,14 @@ export function UpdateAvailableSimpleContent({
   version,
   releaseUrl,
   onUpdate,
-  onClose
+  onClose,
+  externallyManaged = false
 }: {
   version: string
   releaseUrl?: string
   onUpdate: () => void
   onClose: () => void
+  externallyManaged?: boolean
 }): React.JSX.Element {
   return (
     <div className="flex flex-col gap-2.5 p-3.5">
@@ -126,9 +146,13 @@ export function UpdateAvailableSimpleContent({
           value0: version
         })}
       </p>
-      <p className="text-xs leading-relaxed text-muted-foreground">
-        {translate('auto.components.UpdateCard.fdd4a364fa', "Sessions won't be interrupted.")}
-      </p>
+      {externallyManaged ? (
+        <ExternallyManagedNote />
+      ) : (
+        <p className="text-xs leading-relaxed text-muted-foreground">
+          {translate('auto.components.UpdateCard.fdd4a364fa', "Sessions won't be interrupted.")}
+        </p>
+      )}
       {releaseUrl && (
         <button
           type="button"
@@ -138,14 +162,16 @@ export function UpdateAvailableSimpleContent({
           {translate('auto.components.UpdateCard.44324ef542', 'Release notes')}
         </button>
       )}
-      <Button
-        variant="default"
-        size="sm"
-        onClick={onUpdate}
-        className="mt-0.5 w-full cursor-pointer"
-      >
-        {translate('auto.components.UpdateCard.ec8fe71cfc', 'Update')}
-      </Button>
+      {!externallyManaged && (
+        <Button
+          variant="default"
+          size="sm"
+          onClick={onUpdate}
+          className="mt-0.5 w-full cursor-pointer"
+        >
+          {translate('auto.components.UpdateCard.ec8fe71cfc', 'Update')}
+        </Button>
+      )}
     </div>
   )
 }
diff --git a/src/renderer/src/components/maintenance/update-card/UpdateCardStateContent.tsx b/src/renderer/src/components/maintenance/update-card/UpdateCardStateContent.tsx
index 3a501f574af..8a67a762a50 100644
--- a/src/renderer/src/components/maintenance/update-card/UpdateCardStateContent.tsx
+++ b/src/renderer/src/components/maintenance/update-card/UpdateCardStateContent.tsx
@@ -20,7 +20,6 @@ export function UpdateCardStateContent({
   errorCard,
   linuxPackageRecovery,
   isLocalBuild,
-  cachedVersion,
   hasStartedDownload,
   prefersReducedMotion,
   mediaFailed,
@@ -40,7 +39,6 @@ export function UpdateCardStateContent({
     diagnostic: string
   } | null
   isLocalBuild: boolean
-  cachedVersion: string | null
   hasStartedDownload: boolean
   prefersReducedMotion: boolean
   mediaFailed: boolean
@@ -71,9 +69,14 @@ export function UpdateCardStateContent({
   if (linuxPackageRecovery) {
     return (
       <LinuxPackageInstallRecoveryCard
+        key={`${linuxPackageRecovery.recovery.packageType}:${linuxPackageRecovery.recovery.version}:${linuxPackageRecovery.recovery.reason}`}
         recovery={linuxPackageRecovery.recovery}
         diagnostic={linuxPackageRecovery.diagnostic}
-        releaseUrl={isLocalBuild ? undefined : getReleaseNotesUrlForVersion(cachedVersion)}
+        releaseUrl={
+          isLocalBuild
+            ? undefined
+            : getReleaseNotesUrlForVersion(linuxPackageRecovery.recovery.version)
+        }
         onClose={onCollapse}
       />
     )
@@ -129,6 +132,7 @@ export function UpdateCardStateContent({
       onMediaLoad={onMediaLoad}
       onUpdate={onUpdate}
       onClose={onDismiss}
+      externallyManaged={status.externallyManaged}
     />
   ) : (
     <UpdateAvailableSimpleContent
@@ -136,6 +140,7 @@ export function UpdateCardStateContent({
       releaseUrl={releaseUrl}
       onUpdate={onUpdate}
       onClose={onDismiss}
+      externallyManaged={status.externallyManaged}
     />
   )
 }
diff --git a/src/renderer/src/components/maintenance/update-card/update-card-error-model.ts b/src/renderer/src/components/maintenance/update-card/update-card-error-model.ts
index 37f34f30b6a..1a6ab8672a0 100644
--- a/src/renderer/src/components/maintenance/update-card/update-card-error-model.ts
+++ b/src/renderer/src/components/maintenance/update-card/update-card-error-model.ts
@@ -117,17 +117,25 @@ export function buildUpdateCardErrorModel({
   }
   return {
     title: cachedVersion ? 'Update Error' : 'Update Check Failed',
-    summary: cachedVersion ? 'Could not complete the update.' : 'Could not check for updates.',
+    summary:
+      cachedVersion && status.retryable === false
+        ? status.message
+        : cachedVersion
+          ? 'Could not complete the update.'
+          : 'Could not check for updates.',
     detail: status.message,
     releaseUrl: getReleaseNotesUrlForVersion(cachedVersion),
-    primaryAction: cachedVersion
-      ? {
-          label: translate('auto.components.UpdateCard.48565a32bc', 'Retry Download'),
-          onClick: onRetryDownload
-        }
-      : {
-          label: translate('auto.components.UpdateCard.6b0085010d', 'Re-check'),
-          onClick: onRecheck
-        }
+    primaryAction:
+      cachedVersion && status.retryable !== false
+        ? {
+            label: translate('auto.components.UpdateCard.48565a32bc', 'Retry Download'),
+            onClick: onRetryDownload
+          }
+        : !cachedVersion
+          ? {
+              label: translate('auto.components.UpdateCard.6b0085010d', 'Re-check'),
+              onClick: onRecheck
+            }
+          : undefined
   }
 }
diff --git a/src/renderer/src/components/maintenance/update-card/update-card-visibility.ts b/src/renderer/src/components/maintenance/update-card/update-card-visibility.ts
index 038bf1542c6..f18629a4fbe 100644
--- a/src/renderer/src/components/maintenance/update-card/update-card-visibility.ts
+++ b/src/renderer/src/components/maintenance/update-card/update-card-visibility.ts
@@ -7,7 +7,6 @@ export function isUpdateCardVisible({
   hasStartedDownload,
   updateUserInitiatedCycle,
   autoDismissed = false,
-  errorDismissed = false,
   collapsed = false
 }: {
   status: UpdateStatus
@@ -16,12 +15,15 @@ export function isUpdateCardVisible({
   hasStartedDownload: boolean
   updateUserInitiatedCycle: boolean
   autoDismissed?: boolean
-  errorDismissed?: boolean
   collapsed?: boolean
 }): boolean {
   const isUserInitiated = 'userInitiated' in status && Boolean(status.userInitiated)
   const shouldShowDetailedErrorCard =
-    status.state === 'error' && (hasStartedDownload || cachedVersion !== null)
+    status.state === 'error' &&
+    (hasStartedDownload ||
+      cachedVersion !== null ||
+      status.version !== undefined ||
+      status.recovery?.kind === 'linux-package-install')
 
   if (status.state === 'checking' && !isUserInitiated) {
     return false
@@ -35,10 +37,6 @@ export function isUpdateCardVisible({
   if (status.state === 'error' && !shouldShowDetailedErrorCard && !isUserInitiated) {
     return false
   }
-  if (status.state === 'error' && errorDismissed) {
-    return false
-  }
-
   if (cachedVersion && dismissedVersion === cachedVersion && !updateUserInitiatedCycle) {
     if (status.state !== 'downloading' && status.state !== 'error') {
       return false
diff --git a/src/renderer/src/components/settings/GeneralUpdateSettingsSection.test.tsx b/src/renderer/src/components/settings/GeneralUpdateSettingsSection.test.tsx
new file mode 100644
index 00000000000..f569c9f5114
--- /dev/null
+++ b/src/renderer/src/components/settings/GeneralUpdateSettingsSection.test.tsx
@@ -0,0 +1,37 @@
+// @vitest-environment happy-dom
+import { cleanup, render, screen } from '@testing-library/react'
+import { afterEach, beforeEach, expect, it, vi } from 'vitest'
+import { useAppStore } from '../../store'
+import { GeneralUpdateSettingsSection } from './GeneralUpdateSettingsSection'
+
+vi.mock('./GeneralRemoteServerUpdates', () => ({ GeneralRemoteServerUpdates: () => null }))
+vi.mock('./ReleaseChannelSection', () => ({ ReleaseChannelSection: () => null }))
+
+beforeEach(() => {
+  useAppStore.setState({
+    updateStatus: { state: 'available', version: '1.4.200', changelog: null }
+  })
+  Object.defineProperty(window, 'api', {
+    configurable: true,
+    value: {
+      updater: {
+        check: vi.fn(),
+        download: vi.fn(),
+        getVersion: vi.fn().mockResolvedValue('1.4.199')
+      }
+    }
+  })
+})
+
+afterEach(() => {
+  cleanup()
+  useAppStore.setState({ updateStatus: { state: 'idle' } })
+})
+
+it('describes the available action as a download', () => {
+  render(<GeneralUpdateSettingsSection />)
+
+  expect(screen.getByRole('button', { name: 'Download Update (1.4.200)' })).toBeTruthy()
+  expect(screen.getByText(/is available\. Click "Download Update" to download it\./)).toBeTruthy()
+  expect(screen.queryByText(/download and install it/)).toBeNull()
+})
diff --git a/src/renderer/src/components/settings/GeneralUpdateSettingsSection.tsx b/src/renderer/src/components/settings/GeneralUpdateSettingsSection.tsx
index 15677927ad3..1e59c200fca 100644
--- a/src/renderer/src/components/settings/GeneralUpdateSettingsSection.tsx
+++ b/src/renderer/src/components/settings/GeneralUpdateSettingsSection.tsx
@@ -14,19 +14,9 @@ import { getReleaseNotesUrlForVersion } from '../../../../shared/release-channel
 
 export function GeneralUpdateSettingsSection(): React.JSX.Element {
   const updateStatus = useAppStore((s) => s.updateStatus)
-  // Why: the 'error' variant of UpdateStatus does not carry a `version` field.
-  // The main process emits `{ state: 'error' }` for both check failures (no
-  // version known yet) and download/install failures (version was known from
-  // the preceding 'available'/'downloading'/'downloaded' state). Cache the
-  // last-known version so the error copy below can distinguish the two cases
-  // without adding IPC. Mirrors `versionRef` in UpdateCard.tsx.
+  // Why: older hosts omit `version` from errors, so retain the last target for correct copy.
   const updateVersionRef = useRef<string | null>(null)
-  if (
-    (updateStatus.state === 'available' ||
-      updateStatus.state === 'downloading' ||
-      updateStatus.state === 'downloaded') &&
-    updateStatus.version
-  ) {
+  if ('version' in updateStatus && updateStatus.version) {
     updateVersionRef.current = updateStatus.version
   } else if (
     updateStatus.state === 'checking' ||
@@ -122,7 +112,7 @@ export function GeneralUpdateSettingsSection(): React.JSX.Element {
             )}
           </Button>
 
-          {updateStatus.state === 'available' ? (
+          {updateStatus.state === 'available' && !updateStatus.externallyManaged ? (
             <Button
               variant="default"
               size="sm"
@@ -144,7 +134,7 @@ export function GeneralUpdateSettingsSection(): React.JSX.Element {
               <Download className="size-3.5" />
               {translate(
                 'auto.components.settings.GeneralUpdateSettingsSection.42717918f4',
-                'Install Update ('
+                'Download Update ('
               )}
               {updateStatus.version})
             </Button>
@@ -178,10 +168,15 @@ export function GeneralUpdateSettingsSection(): React.JSX.Element {
                 'Version'
               )}{' '}
               {updateStatus.version}{' '}
-              {translate(
-                'auto.components.settings.GeneralUpdateSettingsSection.8311da27ba',
-                'is available. Click "Install Update" to download and install it.'
-              )}{' '}
+              {updateStatus.externallyManaged
+                ? translate(
+                    'auto.components.settings.GeneralUpdateSettingsSection.e3b9d21c07',
+                    'is available. Update Orca through your system package manager — Orca cannot install this release itself.'
+                  )
+                : translate(
+                    'auto.components.settings.GeneralUpdateSettingsSection.8311da27ba',
+                    'is available. Click "Download Update" to download it.'
+                  )}{' '}
               {updateStatus.source !== 'local' && (
                 <a
                   href={
@@ -239,22 +234,19 @@ export function GeneralUpdateSettingsSection(): React.JSX.Element {
             </>
           )}
           {updateStatus.state === 'error' &&
-            // Why: `{ state: 'error' }` is emitted for both check-time
-            // failures (no version cached) and download/install failures
-            // (version cached from a prior 'available'/'downloading'/
-            // 'downloaded' state). Label accordingly so a download failure
-            // isn't mislabeled as a "check" failure. Mirrors UpdateCard.tsx.
-            (updateVersionRef.current
-              ? translate(
-                  'auto.components.settings.GeneralUpdateSettingsSection.b9ad70c30d',
-                  'Update error. {{value0}}',
-                  { value0: updateStatus.message }
-                )
-              : translate(
-                  'auto.components.settings.GeneralUpdateSettingsSection.bd79d412f0',
-                  'Update check failed. {{value0}}',
-                  { value0: updateStatus.message }
-                ))}
+            (updateStatus.recovery?.kind === 'linux-package-install'
+              ? updateStatus.message
+              : updateVersionRef.current
+                ? translate(
+                    'auto.components.settings.GeneralUpdateSettingsSection.b9ad70c30d',
+                    'Update error. {{value0}}',
+                    { value0: updateStatus.message }
+                  )
+                : translate(
+                    'auto.components.settings.GeneralUpdateSettingsSection.bd79d412f0',
+                    'Update check failed. {{value0}}',
+                    { value0: updateStatus.message }
+                  ))}
         </p>
       </SearchableSetting>
       {channelSwitcherRevealed ? <ReleaseChannelSection /> : null}
diff --git a/src/renderer/src/components/settings/RemoteServerUpdateStatus.tsx b/src/renderer/src/components/settings/RemoteServerUpdateStatus.tsx
index 40dc49dcc5f..5d02889fb7f 100644
--- a/src/renderer/src/components/settings/RemoteServerUpdateStatus.tsx
+++ b/src/renderer/src/components/settings/RemoteServerUpdateStatus.tsx
@@ -96,7 +96,7 @@ export function getRemoteServerManualUpdateHelp(entry: RemoteServerUpdateEntry):
   if (entry.support?.reason === 'manual-service-update-required') {
     return translate(
       'auto.components.settings.RemoteServerUpdateStatus.serviceManagerHelp',
-      'Update Orca through the service manager that starts this server.'
+      'Update Orca on the server host — through its system package manager if it was installed from a .deb or .rpm, otherwise through the service manager that starts it.'
     )
   }
   if (entry.support?.reason === 'unpackaged-build') {
diff --git a/src/renderer/src/components/status-bar/UpdateStatusSegment.tsx b/src/renderer/src/components/status-bar/UpdateStatusSegment.tsx
index af41d79ea48..0da77795798 100644
--- a/src/renderer/src/components/status-bar/UpdateStatusSegment.tsx
+++ b/src/renderer/src/components/status-bar/UpdateStatusSegment.tsx
@@ -21,6 +21,10 @@ export function UpdateStatusSegment({
     return null
   }
 
+  const linuxPackageRecovery =
+    status.state === 'error' && status.recovery?.kind === 'linux-package-install'
+      ? status.recovery
+      : null
   const segment = (() => {
     if (status.state === 'downloading') {
       const pct = Math.max(0, Math.min(100, Math.round(status.percent)))
@@ -39,7 +43,9 @@ export function UpdateStatusSegment({
         )
       }
     }
-    if (status.state === 'downloaded') {
+    const readyVersion =
+      status.state === 'downloaded' ? status.version : linuxPackageRecovery?.version
+    if (readyVersion !== undefined) {
       return {
         icon: <CheckCircle2 className="size-3 text-emerald-500" />,
         label: translate(
@@ -49,7 +55,7 @@ export function UpdateStatusSegment({
         tooltip: translate(
           'auto.components.status.bar.UpdateStatusSegment.9d13213a56',
           'Orca v{{value0}} ready to install',
-          { value0: status.version }
+          { value0: readyVersion }
         ),
         ariaLabel: translate(
           'auto.components.status.bar.UpdateStatusSegment.962404f68e',
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index a641c2cf7dd..35d8dc50d42 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -2264,7 +2264,7 @@
         "8acbdd3961": "Minimize to status bar",
         "17412483da": "Ready to Install",
         "47126bcf57": "Download Manually",
-        "3553a8672f": "Last error",
+        "3553a8672f": "Details",
         "90559b14e3": "This turns on a process-wide Electron networking switch after restart. Use it for corporate VPNs or proxies that reject HTTP/2 update downloads.",
         "6e45bfa2e0": "Downloading...",
         "558842597d": "Downloading Update",
@@ -2303,7 +2303,8 @@
         "a4650b0dc4": "Could Not Use Local Build",
         "b1e390250d": "Could not complete the local build switch.",
         "d29740d175": "The selected build could not be used.",
-        "37d45c9ec1": "Choose Another Build"
+        "37d45c9ec1": "Choose Another Build",
+        "7f1a4c9e02": "Your system package manager installed Orca, so update it from there — Orca cannot install this release itself."
       },
       "WorktreeJumpPalette": {
         "ac037cfac2": "Move",
@@ -7055,9 +7056,9 @@
           "8a52ca1d02": "Release notes",
           "d89806cc89": "is ready to install.",
           "a6b37929dc": "Version",
-          "8311da27ba": "is available. Click \"Install Update\" to download and install it.",
+          "8311da27ba": "is available. Click \"Download Update\" to download it.",
           "f44299636f": "Restart to Update (",
-          "42717918f4": "Install Update (",
+          "42717918f4": "Download Update (",
           "02dc082e70": "Could not start the update download.",
           "e1a647adc5": "Check for Updates",
           "ceb579abaf": "Check for app updates and install a newer Orca version.",
@@ -7075,7 +7076,8 @@
           "31fd7150cf": "Checking for updates...",
           "3394d1f663": "checking",
           "d69a09b672": "Updates are checked automatically on launch.",
-          "7173352632": "idle"
+          "7173352632": "idle",
+          "e3b9d21c07": "is available. Update Orca through your system package manager — Orca cannot install this release itself."
         },
         "GeneralWorkspaceSettingsSection": {
           "3d538a98f7": "Choose apps available from a workspace's Open in menu.",
@@ -10963,7 +10965,7 @@
           "restarting": "Restarting…",
           "updated": "Updated",
           "failed": "Update failed",
-          "serviceManagerHelp": "Update Orca through the service manager that starts this server.",
+          "serviceManagerHelp": "Update Orca on the server host — through its system package manager if it was installed from a .deb or .rpm, otherwise through the service manager that starts it.",
           "unpackedHelp": "Development builds must be updated from their source checkout.",
           "legacyHelp": "Update this server manually once to enable remote updates."
         },
@@ -16342,14 +16344,13 @@
       },
       "LinuxPackageInstallRecoveryCard": {
         "e3de29c86a": "Show Package",
-        "3da99454c6": "Try Automatic Install Again",
         "55c86654b7": "Copy Install Command",
-        "53e1559f99": "Automatic Install Failed",
-        "a7ac6ec78b": "Orca downloaded the update but could not install the system package automatically.",
-        "82c6dbea00": "Copy the command and run it in a system terminal on the computer where Orca is installed. After it finishes, quit and reopen Orca to run the new version.",
+        "53e1559f99": "Manual Install Required",
+        "a7ac6ec78b": "Orca downloaded the system package. Quit Orca before finishing the update from a terminal.",
+        "82c6dbea00": "Copy the command, quit Orca, and run it in a system terminal on the computer where Orca is installed. Reopen Orca after it finishes.",
         "53c4b8e148": "No usable authentication agent answered the privileged install request.",
         "c732bcbf8f": "Checking package...",
-        "aa57fa4f80": "Command copied. Run it in a system terminal to install {{value0}}, then quit and reopen Orca.",
+        "aa57fa4f80": "Command copied. Quit Orca, run it in a system terminal to install {{value0}}, then reopen Orca.",
         "b7e7c5bc95": "Orca checks the downloaded file against the release metadata at the moment it builds this command. The system package itself is not signature-checked, and Orca cannot vouch for the file after that point."
       },
       "pr-check-counts": {
diff --git a/src/shared/child-process/__fixtures__/child-process-import-allowlist.txt b/src/shared/child-process/__fixtures__/child-process-import-allowlist.txt
index 213b9ebdd96..f5fae013b7e 100644
--- a/src/shared/child-process/__fixtures__/child-process-import-allowlist.txt
+++ b/src/shared/child-process/__fixtures__/child-process-import-allowlist.txt
@@ -150,10 +150,8 @@ src/main/ssh/system-ssh-dynamic-forward-process.ts
 src/main/ssh/system-ssh-file-transfer.ts
 src/main/ssh/system-ssh-forward-process.ts
 src/main/ssh/system-ssh-operation-lifecycle.ts
-src/main/startup/appimage-cli-redirect.ts
 src/main/startup/ensure-virtual-display.ts
 src/main/startup/hydrate-shell-path.ts
-src/main/startup/packaged-cli-entry-redirect.ts
 src/main/startup/windows-install-dir-acl-probe.ts
 src/main/startup/windows-user-data-acl.ts
 src/main/win32-utils.ts
diff --git a/src/shared/child-process/__fixtures__/windows-console-visibility-allowlist.txt b/src/shared/child-process/__fixtures__/windows-console-visibility-allowlist.txt
index 752a762370a..a8878a182d0 100644
--- a/src/shared/child-process/__fixtures__/windows-console-visibility-allowlist.txt
+++ b/src/shared/child-process/__fixtures__/windows-console-visibility-allowlist.txt
@@ -43,9 +43,7 @@ main/pty/windows-environment-path.ts
 main/rate-limits/codex-fetcher.ts
 main/runtime/tls-certificate.ts
 main/ssh/ssh-connection.ts
-main/startup/appimage-cli-redirect.ts
 main/startup/ensure-virtual-display.ts
-main/startup/packaged-cli-entry-redirect.ts
 main/startup/windows-install-dir-acl-probe.ts
 main/win32-utils.ts
 main/window/clipboard-ipc-handlers.ts
diff --git a/src/shared/child-process/child-process-import-boundary.test.ts b/src/shared/child-process/child-process-import-boundary.test.ts
index 10ca4fd8522..32c6c9d890e 100644
--- a/src/shared/child-process/child-process-import-boundary.test.ts
+++ b/src/shared/child-process/child-process-import-boundary.test.ts
@@ -29,7 +29,7 @@ const CHILD_PROCESS_IMPORT_ALLOWLIST: readonly string[] = readFileSync(
  * May only ever be DECREASED, and only by migrating a file off
  * `node:child_process`. Raising it is never the fix.
  */
-const DIRECT_IMPORTER_PIN = 160
+const DIRECT_IMPORTER_PIN = 158
 
 const IMPORT_PATTERN =
   /(?:from\s+['"]node:child_process['"]|from\s+['"]child_process['"]|require\(\s*['"]node:child_process['"]|require\(\s*['"]child_process['"])/
diff --git a/src/shared/child-process/windows-console-visibility.test.ts b/src/shared/child-process/windows-console-visibility.test.ts
index 7985b0ee11a..596728fa245 100644
--- a/src/shared/child-process/windows-console-visibility.test.ts
+++ b/src/shared/child-process/windows-console-visibility.test.ts
@@ -34,7 +34,7 @@ const ALLOWLIST: readonly string[] = readAllowlist(
  * the allowlist does not bound this: a swap (one file fixed and delisted, one
  * new file added with its entry) satisfies both membership assertions.
  */
-const UNHIDDEN_SPAWNER_PIN = 68
+const UNHIDDEN_SPAWNER_PIN = 66
 
 const CHILD_PROCESS_IMPORT =
   /from\s+['"](?:node:)?child_process['"]|require\(\s*['"](?:node:)?child_process['"]/
diff --git a/src/shared/cli-argument-boundary.test.ts b/src/shared/cli-argument-boundary.test.ts
new file mode 100644
index 00000000000..ceb2e64432f
--- /dev/null
+++ b/src/shared/cli-argument-boundary.test.ts
@@ -0,0 +1,33 @@
+import { describe, expect, it } from 'vitest'
+import { CLI_GLOBAL_VALUE_FLAGS, findCliCommandIndex } from './cli-argument-boundary'
+
+const COMMAND_PATHS = [['project'], ['serve'], ['status'], ['worktree']] as const
+
+describe('findCliCommandIndex', () => {
+  it.each([
+    { argv: ['--json', 'status'], expected: 1, name: 'global boolean' },
+    { argv: ['--environment', 'status'], expected: 1, name: 'missing global value' },
+    {
+      argv: ['--environment', 'status', 'worktree', 'list'],
+      expected: 2,
+      name: 'command-named value'
+    },
+    {
+      argv: ['--project', 'github:stablyai/orca', 'project', 'setups'],
+      expected: 2,
+      name: 'selector value'
+    },
+    { argv: ['--project=github:stablyai/orca', 'project'], expected: 1, name: 'assignment' },
+    { argv: ['--', 'status'], expected: 1, name: 'bare double dash' },
+    { argv: ['workspace', 'status'], expected: -1, name: 'first non-command positional' },
+    { argv: ['serve'], expected: 0, name: 'direct serve' }
+  ])('$name', ({ argv, expected }) => {
+    expect(findCliCommandIndex(argv, COMMAND_PATHS)).toBe(expected)
+  })
+
+  it('consumes known global values at the launch boundary', () => {
+    expect(
+      findCliCommandIndex(['--environment', 'status'], COMMAND_PATHS, CLI_GLOBAL_VALUE_FLAGS)
+    ).toBe(-1)
+  })
+})
diff --git a/src/shared/cli-argument-boundary.ts b/src/shared/cli-argument-boundary.ts
new file mode 100644
index 00000000000..7b29db49c45
--- /dev/null
+++ b/src/shared/cli-argument-boundary.ts
@@ -0,0 +1,96 @@
+export const CLI_GLOBAL_VALUE_FLAGS: readonly string[] = ['pairing-code', 'environment']
+export const CLI_GLOBAL_FLAGS: readonly string[] = ['help', 'json', ...CLI_GLOBAL_VALUE_FLAGS]
+
+export const CLI_BOOLEAN_FLAGS = new Set([
+  'all',
+  'attachments',
+  'children',
+  'comments',
+  'connect',
+  'current',
+  'dry-run',
+  'enter',
+  'focus',
+  'force',
+  'full',
+  'help',
+  'inject',
+  'include-archived',
+  'include-visual-layouts',
+  'interrupt',
+  'json',
+  'local',
+  'messages',
+  'me',
+  'mobile',
+  'mobile-pairing',
+  'no-pairing',
+  'screen',
+  'parent-current',
+  'provision',
+  'ready',
+  'recipe-json',
+  'relations',
+  'reinstall',
+  'restore-window',
+  'return-preamble',
+  'run-hooks',
+  'show-profile',
+  'staged',
+  'tab',
+  'tasks',
+  'text-stdin',
+  'unread',
+  'value-stdin',
+  'wait'
+])
+
+function commandPathStartsAt(
+  argv: readonly string[],
+  tokenIndex: number,
+  path: readonly string[]
+): boolean {
+  let cursor = tokenIndex
+  for (const part of path) {
+    while (argv[cursor]?.startsWith('--')) {
+      const assignment = argv[cursor].slice(2)
+      const flag = assignment.split('=', 1)[0]
+      cursor += assignment.includes('=') || CLI_BOOLEAN_FLAGS.has(flag) ? 1 : 2
+    }
+    if (argv[cursor] !== part) {
+      return false
+    }
+    cursor += 1
+  }
+  return true
+}
+
+export function findCliCommandIndex(
+  argv: readonly string[],
+  commandPaths: readonly (readonly string[])[],
+  knownValueFlags: readonly string[] = []
+): number {
+  const startsCommandAt = (index: number): boolean =>
+    commandPaths.some((path) => commandPathStartsAt(argv, index, path))
+
+  for (let index = 0; index < argv.length;) {
+    const token = argv[index]
+    if (!token.startsWith('--')) {
+      return startsCommandAt(index) ? index : -1
+    }
+
+    const assignment = token.slice(2)
+    const flag = assignment.split('=', 1)[0]
+    const next = argv[index + 1]
+    const takesNext =
+      !assignment.includes('=') &&
+      !CLI_BOOLEAN_FLAGS.has(flag) &&
+      next !== undefined &&
+      !next.startsWith('--') &&
+      (knownValueFlags.includes(flag) ||
+        !(startsCommandAt(index + 1) && !startsCommandAt(index + 2)))
+
+    index += takesNext ? 2 : 1
+  }
+  return -1
+}
diff --git a/src/shared/edit-distance.ts b/src/shared/edit-distance.ts
new file mode 100644
index 00000000000..7a496712b89
--- /dev/null
+++ b/src/shared/edit-distance.ts
@@ -0,0 +1,23 @@
+export function levenshtein(a: string, b: string): number {
+  const m = a.length
+  const n = b.length
+  if (m === 0) {
+    return n
+  }
+  if (n === 0) {
+    return m
+  }
+  let previous = Array.from({ length: n + 1 }, (_, index) => index)
+  let current = Array.from({ length: n + 1 }, () => 0)
+  for (let i = 1; i <= m; i += 1) {
+    current[0] = i
+    for (let j = 1; j <= n; j += 1) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1
+      current[j] = Math.min(previous[j] + 1, current[j - 1] + 1, previous[j - 1] + cost)
+    }
+    const swap = previous
+    previous = current
+    current = swap
+  }
+  return previous[n]
+}
diff --git a/src/shared/serve-option-validation.test.ts b/src/shared/serve-option-validation.test.ts
new file mode 100644
index 00000000000..70473c57477
--- /dev/null
+++ b/src/shared/serve-option-validation.test.ts
@@ -0,0 +1,72 @@
+import { describe, expect, it } from 'vitest'
+import { getServeFlagTypoError, getServeOptionValidationError } from './serve-option-validation'
+
+const validOptions = {
+  noPairing: false,
+  mobilePairing: false,
+  recipeJson: false,
+  projectRoot: null
+}
+
+describe('getServeOptionValidationError', () => {
+  it('accepts compatible options', () => {
+    expect(getServeOptionValidationError(validOptions)).toBeNull()
+  })
+
+  it.each([
+    [{ noPairing: true, mobilePairing: true }, /either --mobile-pairing or --no-pairing/i],
+    [
+      { recipeJson: true, noPairing: true, projectRoot: '/tmp/repo' },
+      /requires runtime pairing.*--no-pairing/i
+    ],
+    [
+      { recipeJson: true, mobilePairing: true, projectRoot: '/tmp/repo' },
+      /requires runtime pairing.*--mobile-pairing/i
+    ],
+    [{ recipeJson: true }, /requires --project-root/i]
+  ])('rejects incompatible options', (override, expected) => {
+    expect(
+      getServeOptionValidationError({ ...validOptions, ...override } as typeof validOptions)
+    ).toMatch(expected)
+  })
+})
+
+describe('getServeFlagTypoError', () => {
+  it('accepts exact serve flags and arbitrary Chromium switches', () => {
+    expect(
+      getServeFlagTypoError([
+        '/opt/orca/orca-ide',
+        '--serve',
+        '--serve-no-pairing',
+        '--disable-gpu',
+        '--disable-features=Vulkan',
+        '--no-parent'
+      ])
+    ).toBeNull()
+  })
+
+  it.each(['--no-pair', '--no-pairng', '--no-paring', '--mobile-pairng'])(
+    'suggests the intended pairing flag for %s',
+    (flag) => {
+      expect(getServeFlagTypoError(['/opt/orca/orca-ide', '--serve', flag])).toMatch(
+        /Unknown flag .*Did you mean --(?:no-pairing|mobile-pairing)\?/i
+      )
+    }
+  )
+
+  it('does not reinterpret tokens after --', () => {
+    expect(getServeFlagTypoError(['/opt/orca/orca-ide', '--serve', '--', '--no-pairng'])).toBeNull()
+  })
+
+  it('does not inspect an equals-form value as a flag', () => {
+    expect(
+      getServeFlagTypoError(['/opt/orca/orca-ide', '--serve-pairing-address=--no-pairng'])
+    ).toBeNull()
+  })
+
+  it('keeps flag-shaped space values subject to typo validation', () => {
+    expect(
+      getServeFlagTypoError(['/opt/orca/orca-ide', '--serve-pairing-address', '--no-pairng'])
+    ).toMatch(/Unknown flag --no-pairng.*--no-pairing/i)
+  })
+})
diff --git a/src/shared/serve-option-validation.ts b/src/shared/serve-option-validation.ts
new file mode 100644
index 00000000000..36f844f322f
--- /dev/null
+++ b/src/shared/serve-option-validation.ts
@@ -0,0 +1,89 @@
+import { levenshtein } from './edit-distance'
+
+export type ServeOptionValidationInput = {
+  noPairing: boolean
+  mobilePairing: boolean
+  recipeJson: boolean
+  projectRoot: string | null | undefined
+}
+
+export function getServeOptionValidationError(options: ServeOptionValidationInput): string | null {
+  if (options.noPairing && options.mobilePairing) {
+    return 'Use either --mobile-pairing or --no-pairing, not both.'
+  }
+  if (options.recipeJson && options.noPairing) {
+    return 'Recipe JSON output requires runtime pairing; remove --no-pairing.'
+  }
+  if (options.recipeJson && options.mobilePairing) {
+    return 'Recipe JSON output requires runtime pairing; remove --mobile-pairing.'
+  }
+  if (options.recipeJson && !options.projectRoot) {
+    return 'Recipe JSON output requires --project-root.'
+  }
+  return null
+}
+
+const SERVE_SECURITY_FLAG_NAMES = [
+  '--no-pairing',
+  '--serve-no-pairing',
+  '--mobile-pairing',
+  '--serve-mobile-pairing',
+  '--recipe-json',
+  '--serve-recipe-json',
+  '--pairing-address',
+  '--serve-pairing-address'
+] as const
+
+const SERVE_VALUE_FLAG_NAMES = new Set([
+  '--port',
+  '--serve-port',
+  '--pairing-address',
+  '--serve-pairing-address',
+  '--project-root',
+  '--serve-project-root',
+  '--pairing-code',
+  '--environment'
+])
+
+function flagName(token: string): string {
+  const equalsIndex = token.indexOf('=')
+  return equalsIndex === -1 ? token : token.slice(0, equalsIndex)
+}
+
+/** Reject only near-miss pairing flags; Electron/Chromium switches stay open-ended. */
+export function getServeFlagTypoError(argv: readonly string[]): string | null {
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index]!
+    if (token === '--') {
+      break
+    }
+    if (!token.startsWith('--')) {
+      continue
+    }
+    const name = flagName(token)
+    let suggestion: string | null = null
+    let bestDistance = Number.POSITIVE_INFINITY
+    for (const candidate of SERVE_SECURITY_FLAG_NAMES) {
+      const distance = levenshtein(name, candidate)
+      const maxDistance = candidate.startsWith(name) ? 3 : 2
+      if (distance > 0 && distance <= maxDistance && distance < bestDistance) {
+        suggestion = candidate
+        bestDistance = distance
+      }
+    }
+    if (suggestion) {
+      return `Unknown flag ${name}. Did you mean ${suggestion}?`
+    }
+
+    // A value that is not flag-shaped belongs to the preceding known value flag.
+    // A `--`-prefixed space token remains a flag, matching parseArgs; use `=` when
+    // a value itself starts with `--`.
+    if (!token.includes('=') && SERVE_VALUE_FLAG_NAMES.has(name)) {
+      const value = argv[index + 1]
+      if (value !== undefined && !value.startsWith('--')) {
+        index += 1
+      }
+    }
+  }
+  return null
+}
diff --git a/src/shared/update-status-types.ts b/src/shared/update-status-types.ts
index 8d54837c9c5..74ee382ec58 100644
--- a/src/shared/update-status-types.ts
+++ b/src/shared/update-status-types.ts
@@ -37,11 +37,15 @@ export type LinuxPackageInstallFailureReason =
   | 'authentication-denied'
   | 'package-install-failed'
 
-// Why: the renderer must not infer "no polkit agent" from copy alone — main classifies and the card branches on this discriminant.
+export type LinuxPackageInstallRecoveryReason =
+  | 'manual-install-required'
+  | LinuxPackageInstallFailureReason
+
+// Older paired hosts can still publish classified install failures; the manual reason is additive.
 export type LinuxPackageInstallRecovery = {
   kind: 'linux-package-install'
   packageType: LinuxRootPackageType
-  reason: LinuxPackageInstallFailureReason
+  reason: LinuxPackageInstallRecoveryReason
   version: string
 }
 
@@ -70,6 +74,9 @@ export type UpdateStatus = (
       // three-state ambiguity (undefined vs null vs present) and makes exhaustive
       // checks straightforward.
       changelog: ChangelogData | null
+      /** Linux only: a package manager owns this install, so Orca cannot apply the update itself.
+       *  Additive and optional — older clients simply keep offering their own download. */
+      externallyManaged?: boolean
     }
   | { state: 'not-available'; userInitiated?: boolean }
   | { state: 'downloading'; percent: number; version: string; activeNudgeId?: string }
@@ -77,6 +84,10 @@ export type UpdateStatus = (
   | {
       state: 'error'
       message: string
+      /** Known download/install target; absent for check-time failures and older hosts. */
+      version?: string
+      /** Omitted by older hosts and for failures whose retryability is unknown. */
+      retryable?: boolean
       userInitiated?: boolean
       activeNudgeId?: string
       recovery?: LinuxPackageInstallRecovery

From e5a1e79e8e4af790d38337cd5b8dd2fc10adadc5 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 03:49:40 -0700
Subject: [PATCH 47/92] docs(linux): say which package to install and how
 updates arrive (#18123)

* docs(linux): say which package to install and how updates arrive

Closes #5188. Closes #10987.

The install guide's entire Linux section was "AppImage and `.deb` builds are
available. See the Releases page for details." It named two of the three
published packages, gave no basis for choosing between them, and said nothing
about updating -- which is the one thing that actually differs between them.
Separately, nothing human-facing said the Linux CLI is `orca-ide`; only
skills/orca-cli/SKILL.md carried it, which agents read and humans do not.

Install page now picks the package by update behaviour: the AppImage
self-updates, deb/rpm report the new version and hand over the install command,
and a repackaged build is not offered a download it cannot apply. Records that
Orca never escalates privileges for the package install, and points at #18086
for the signed repo as planned, not shipped.

Adds .rpm to the download list. Release CI builds it
(release-cut.yml: `--linux AppImage deb rpm`) and
verify-release-required-assets.mjs requires the artifact, so omitting it was
just wrong.

The CLI command name is now stated where humans hit it -- the CLI reference and
overview -- with the GNOME Orca collision as the reason, plus the two places
bare `orca` does work: inside Orca-managed terminals (PTY PATH shim) and on a
packaged `orca serve` host (the ~/.local/bin dispatcher). The headless guide
gains the same note, which is what makes its `orca skills install` lines
correct rather than a typo.

* docs(linux): fix install ordering, CLI verification, and serve bootstrap

Readiness review found ten defects. Two would have had a reader run the wrong
program, and one would have had them install a .deb over a live app.

Install ordering was reversed. The page said "run it, then quit and reopen
Orca"; the ref this is gated to land with says the opposite in four places
(linux-package-downloaded-status.ts LINUX_PACKAGE_MANUAL_INSTALL_MESSAGE,
"Quit Orca before running the system package install command", plus the
recovery card's title, summary and explainer). That wording came from main's
older run-then-quit card, which the stack deliberately reversed when it
retitled the card to "Manual Install Required". Now: quit first.

CLI verification put the Linux caveat *below* `command -v orca`. That check
succeeds on any GNOME desktop and resolves to the screen reader, so the reader
got a confident hit from the page's own verification step and then invoked the
wrong program. Caveat moved above, and the block now spells `orca-ide`
literally instead of asking the reader to substitute.

The serve bootstrap was circular: the bare-`orca` dispatcher is written *during*
serve startup (main-process-runtime-launch.ts), so it can never be the command
that starts serve. First launch is `orca-ide serve`. Fixed here and in the two
pages this links to.

Accuracy: the install command now matches what the code emits -- absolute paths
resolved from the trusted directories and a POSIX-single-quoted package path,
as pinned by linux-package-install-command.test.ts -- and names the manager
fallbacks (dpkg; zypper/dnf/yum/rpm) rather than presenting apt as the only
form. The pending path honours XDG_CACHE_HOME. rpm arch tokens are x86_64 and
aarch64, not deb's amd64/arm64. arm64 AppImage is linked. Dropped the container
example: isExternallyManagedLinuxInstall() needs a root marker AND no trusted
package manager, and a Debian-based container has apt, so it is not flagged.
---
 docs/reference/headless-linux-server.md   | 15 ++++++
 docs/site/content/docs/cli/overview.mdx   |  2 +-
 docs/site/content/docs/cli/reference.mdx  | 18 +++++++-
 docs/site/content/docs/install.mdx        | 56 +++++++++++++++++++++--
 docs/site/content/docs/remote-servers.mdx |  8 ++++
 docs/site/content/docs/ways-to-run.mdx    |  4 +-
 6 files changed, 96 insertions(+), 7 deletions(-)

diff --git a/docs/reference/headless-linux-server.md b/docs/reference/headless-linux-server.md
index 7368678c2e4..50a38cf446e 100644
--- a/docs/reference/headless-linux-server.md
+++ b/docs/reference/headless-linux-server.md
@@ -357,6 +357,21 @@ the command:
 This disables a security boundary. Prefer a dedicated unprivileged service
 user, especially when the listener is reachable beyond localhost.
 
+The Linux CLI is named `orca-ide`, not `orca`, so it never shadows the GNOME
+Orca screen reader at `/usr/bin/orca`. The `.deb` and `.rpm` packages put
+`orca-ide` on `PATH` themselves at install time; with the AppImage it arrives
+as `~/.local/bin/orca-ide` when the CLI is registered.
+
+A packaged `orca serve` start also writes a bare `orca` into `~/.local/bin`
+that execs the same launcher, which is why the skills commands below can be
+typed as `orca`. It writes it while starting, so it is never the command that
+starts the server — the first launch is `orca-ide serve`, or the AppImage
+invoked directly as above. The write is best-effort: it is gated on a packaged
+build, it is skipped when no bundled launcher resolves, and it is skipped when
+a file Orca does not own already holds that name (ownership is a marker on the
+second line of the file). A host that really does run the screen reader keeps
+its own `orca`.
+
 ## Pairing troubleshooting
 
 - A pairing offer is a capability containing a device credential and E2EE
diff --git a/docs/site/content/docs/cli/overview.mdx b/docs/site/content/docs/cli/overview.mdx
index 3248e89e1eb..1e966c6217c 100644
--- a/docs/site/content/docs/cli/overview.mdx
+++ b/docs/site/content/docs/cli/overview.mdx
@@ -14,7 +14,7 @@ import { Callout } from '@/components/docs/prose'
 
 The Orca CLI is the `orca` command-line interface for scripting a running Orca editor from any shell. Use it to create and inspect worktrees, drive agent terminals, open files and diffs, automate the built-in browser, run scheduled automations, share HTML/Markdown artifacts, and control Orca-native tools from scripts or AI agents.
 
-It ships with the desktop app; register it under [Settings → General → Orca CLI](/docs/settings).
+It ships with the desktop app; register it under [Settings → General → Orca CLI](/docs/settings). On Linux the command is `orca-ide`, because GNOME Orca's screen reader already owns `/usr/bin/orca` — see [Install → Linux](/docs/install#linux).
 
 Agents can install the matching Orca CLI skill with:
 
diff --git a/docs/site/content/docs/cli/reference.mdx b/docs/site/content/docs/cli/reference.mdx
index 3df0773a4a7..a13ec0fdde4 100644
--- a/docs/site/content/docs/cli/reference.mdx
+++ b/docs/site/content/docs/cli/reference.mdx
@@ -9,13 +9,29 @@ The `orca` CLI talks to a running Orca runtime. Use it when a shell script or ag
 
 ## Verify the runtime
 
-Register the CLI under [Settings → General → Orca CLI](/docs/settings), then check that it can reach Orca:
+Register the CLI under [Settings → General → Orca CLI](/docs/settings), then check that it can reach Orca.
+
+<Callout title="On Linux the command is orca-ide">
+  GNOME Orca — the screen reader that ships with most GNOME desktops — already owns `/usr/bin/orca`,
+  so Orca's Linux CLI installs as `orca-ide`. Do not check for it with `command -v orca`: that
+  succeeds on a GNOME desktop and resolves to the screen reader, not to Orca. This page writes
+  `orca` throughout — read it as `orca-ide` on Linux. See [Install → Linux](/docs/install#linux).
+</Callout>
+
+On macOS and Windows:
 
 ```bash
 command -v orca
 orca status --json
 ```
 
+On Linux:
+
+```bash
+command -v orca-ide
+orca-ide status --json
+```
+
 If Orca is not already running:
 
 ```bash
diff --git a/docs/site/content/docs/install.mdx b/docs/site/content/docs/install.mdx
index f710644d19e..9341cb0fa0d 100644
--- a/docs/site/content/docs/install.mdx
+++ b/docs/site/content/docs/install.mdx
@@ -31,8 +31,11 @@ import { Callout } from '@/components/docs/prose'
   </li>
   <li>
     **Linux:**
-    [AppImage](https://github.com/stablyai/orca/releases/latest/download/orca-linux.AppImage) ·
-    [.deb](https://github.com/stablyai/orca/releases)
+    AppImage
+    [x64](https://github.com/stablyai/orca/releases/latest/download/orca-linux.AppImage) ·
+    [arm64](https://github.com/stablyai/orca/releases/latest/download/orca-linux-arm64.AppImage) ·
+    [.deb](https://github.com/stablyai/orca/releases) ·
+    [.rpm](https://github.com/stablyai/orca/releases) — see [Linux](#linux) for which to pick
   </li>
   <li>Older versions: [GitHub Releases](https://github.com/stablyai/orca/releases).</li>
 </ul>
@@ -59,6 +62,8 @@ On first launch Orca will:
 
 Orca auto-updates by default, tracking the **stable** channel. Stable releases are vetted; **RC (release candidate)** builds ship new features first, often daily.
 
+On Linux, whether Orca can apply an update itself depends on which package you installed. See [Linux](#linux) before you pick one.
+
 There is no permanent in-app opt-in for the RC channel. Modifier clicks on **Check for Updates** ([Settings → General → Updates](/docs/settings), or the app / Help menu):
 
 | Modifier                                               | Effect                                                                         |
@@ -87,4 +92,49 @@ The default shell can be set to PowerShell or CMD under [Settings → Terminal](
 
 ### Linux
 
-AppImage and `.deb` builds are available. See the Releases page for details.
+Each published release ships three Linux packages — an **AppImage**, a **`.deb`**, and an **`.rpm`** — for both x64 and arm64. They contain the same app. What differs is how updates reach you, so pick on that.
+
+| Package      | Pick it when                                              | Updates                                                           |
+| ------------ | --------------------------------------------------------- | ----------------------------------------------------------------- |
+| **AppImage** | You want Orca to update itself, like on macOS and Windows | Orca downloads and applies the update in place                    |
+| **`.deb`**   | You manage software with `apt` on Debian or Ubuntu        | Orca tells you a version is out and hands you the install command |
+| **`.rpm`**   | You manage software with `dnf`, `yum`, or `zypper`        | Same as `.deb`                                                    |
+
+The AppImage has a stable download link per architecture — [`orca-linux.AppImage`](https://github.com/stablyai/orca/releases/latest/download/orca-linux.AppImage) for x64 and [`orca-linux-arm64.AppImage`](https://github.com/stablyai/orca/releases/latest/download/orca-linux-arm64.AppImage) for arm64 — and needs `chmod +x` before its first run, because GitHub release assets carry no permission bits. The `.deb` and `.rpm` filenames carry the version and architecture, and the two formats spell architecture differently (`orca-ide_<version>_amd64.deb` or `_arm64.deb`; `orca-ide-<version>.x86_64.rpm` or `.aarch64.rpm`), so take those from the [Releases page](https://github.com/stablyai/orca/releases) rather than a fixed URL.
+
+#### How updating works
+
+**The AppImage self-updates.** Choose it if you want automatic updates. Orca checks for a new release, you click **Update**, and it replaces the AppImage in place — the same flow as macOS and Windows.
+
+**The `.deb` and `.rpm` do not self-update.** Orca still notices the new version and downloads the package, then gives you a **Copy Install Command** button. Copy it rather than retyping it: Orca resolves every program to an absolute path in a trusted system directory and single-quotes the package path, so what you paste looks like this:
+
+```
+/usr/bin/sudo /usr/bin/apt install -- '/home/you/.cache/orca-updater/pending/orca-ide_1.4.194_amd64.deb'
+```
+
+Which package manager appears depends on what your system actually has: `apt`, else `dpkg -i`, for a `.deb`; `zypper`, `dnf`, `yum`, then `rpm -Uvh` for an `.rpm`. The download directory follows `XDG_CACHE_HOME` when that is set and falls back to `~/.cache` when it is not.
+
+**Quit Orca before you run the command**, then reopen it once the install finishes. You are replacing the files of a running application, and the package manager cannot swap them safely underneath a live process. Orca deliberately never escalates privileges to do this for you: installing a system package needs root, `orca serve` runs as an unprivileged user, and a headless machine has no authentication agent to prompt. VS Code and Signal make the same call on `.deb`.
+
+**A distro-managed build is left alone.** If you are running a repackaged Orca — an AUR build, a Nix derivation — Orca sees that no package manager it can drive owns this install and stops offering a download it could never apply. It still reports that a new version exists, so you can update the way you normally would.
+
+<Callout title="Planned: a signed apt/yum repository">
+  [#18086](https://github.com/stablyai/orca/issues/18086) tracks publishing a signed repository so
+  your OS package manager owns Orca updates the way it owns everything else. It does not exist yet —
+  today, `.deb` and `.rpm` updates are the manual step described above.
+</Callout>
+
+#### The CLI command is `orca-ide`
+
+On Linux the [Orca CLI](/docs/cli/reference) installs as **`orca-ide`**, not `orca`. GNOME Orca — the screen reader that ships by default on Ubuntu and other GNOME desktops — already owns `/usr/bin/orca`, and Orca will not shadow it. The `.deb` and `.rpm` packages are named `orca-ide` for the same reason.
+
+- The `.deb` and `.rpm` put `orca-ide` on your `PATH` at install time, as `/usr/bin/orca-ide`.
+- With the AppImage, register the CLI from [Settings → General → Orca CLI](/docs/settings). That installs `~/.local/bin/orca-ide`.
+- Inside Orca's own terminals, bare `orca` works. Orca puts a shim on the `PATH` of the terminals it manages, so agents and scripts running there use the same command as on macOS and Windows.
+- On a headless host, a packaged `orca serve` writes a bare `orca` into `~/.local/bin` as it starts, unless a file it does not own already holds that name. It writes that *during* startup, so it is never what starts the server — the first launch is always [`orca-ide serve`](/docs/remote-servers).
+
+Do not verify with `command -v orca`: on a GNOME desktop that succeeds and resolves to the screen reader. Use `orca-ide` in your own shell and `orca` inside Orca. If you want the short name everywhere and you do not use the screen reader, link it yourself:
+
+```
+ln -s "$(command -v orca-ide)" ~/.local/bin/orca
+```
diff --git a/docs/site/content/docs/remote-servers.mdx b/docs/site/content/docs/remote-servers.mdx
index 63f94e35af8..37f86665d6e 100644
--- a/docs/site/content/docs/remote-servers.mdx
+++ b/docs/site/content/docs/remote-servers.mdx
@@ -126,6 +126,14 @@ Use `orca serve` when the host should run without the desktop window—for examp
 
 Install Orca and its bundled CLI on the server, then run:
 
+<Callout title="On Linux, start it with orca-ide serve">
+  The Linux CLI is named `orca-ide`, because GNOME Orca's screen reader already owns
+  `/usr/bin/orca`. A packaged `orca serve` does write a bare `orca` into `~/.local/bin`, but only
+  while it is starting, so that shim can never be the command that starts the server. Read
+  `orca serve` as `orca-ide serve` throughout this page when the host is Linux. See
+  [Install → Linux](/docs/install#linux).
+</Callout>
+
 ```bash
 orca serve --pairing-address <server-tailscale-ip-or-hostname>
 ```
diff --git a/docs/site/content/docs/ways-to-run.mdx b/docs/site/content/docs/ways-to-run.mdx
index 1a9c44ba1d1..e35b63eae90 100644
--- a/docs/site/content/docs/ways-to-run.mdx
+++ b/docs/site/content/docs/ways-to-run.mdx
@@ -52,10 +52,10 @@ Keep Orca running on a machine you control—an old laptop, Mac mini, home serve
 
 **Easiest setup:** install Orca and Tailscale on both computers. On the server, open **Settings → Remote Orca Servers → Advertise this app as a server → New Link**, choose its Tailscale address, and generate an access link. On the client, choose **Add Server** and paste that link.
 
-For a headless Linux server or service-managed VM, use `orca serve` as the alternative:
+For a headless Linux server or service-managed VM, use `orca serve` as the alternative. On Linux the CLI is named `orca-ide`, so the first launch is:
 
 ```bash
-orca serve --pairing-address <reachable-tailscale-ip-or-hostname>
+orca-ide serve --pairing-address <reachable-tailscale-ip-or-hostname>
 ```
 
 Full detail: [Remote Orca Servers](/docs/remote-servers).

From f737f3499f3f9194fc4984b110dd202e5d089856 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 05:36:54 -0700
Subject: [PATCH 48/92] fix(relay): stream an oversized fs.listFiles reply
 instead of refusing it (#17954)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Opening Orca's own checkout over SSH cannot list its files in one response frame.
22,617 tracked paths average 58 characters, so the 20,001-row page the client asks
for serializes to 1,223,415 bytes — past `DISPATCHER_CONTROL_QUEUE_MAX_BYTES`, so
`sendResponse` demotes it to the `legacy-response` lane, where an unrelated
producer backlog can refuse it as an opaque `ResponseOverCapacity`. Break-even is
around 49 characters of average path; any `packages/<name>/src/...` monorepo is
over the line.

Picking a ceiling to refuse at does not fix that, it just moves where it shows up
and refuses listings that would have been delivered. `__streamResponse` already
exists for exactly this on the git methods, and it is its own negotiation in both
directions: an old client never sends it and gets the plain array on the
legacy-response lane as before, and an old relay ignores it and answers plainly,
which the client detects by the sentinel marker being absent. So fs.listFiles opts
into it — no new method, no new opcode, nothing to advertise — and the size of a
listing stops being a correctness question.

The response-stream registry becomes one per relay, shared by FsHandler and
GitHandler. A second registry is not an option and the header of
git-response-stream.ts says why: a client keys reassembly on `streamId` alone, so
two would hand out the same id and cross-feed chunks, and only the handler that
registers `git.responseAck` can credit the window a pump parks on.

Also declares `maxResults` on the runtime-RPC `files.listAll` and forwards it.
The mechanism "the client names its cap, so a full page reads as truncation" was
wired only on the Electron IPC hop; web and mobile were saved incidentally by
`remoteFileContentBudget` defaulting the cap inside `listRuntimeFiles`. A new
optional field is additive in both directions (wire rule 1).

The new Docker-gated spec is claimed by run-ssh-docker-e2e.mjs. The sharded e2e
lanes set no ORCA_E2E_SSH_DOCKER, so a Docker-gated spec that no runner names
self-skips everywhere and still reports green — pr-e2e-gate-contract enforces that.

Closes #12547
---
 config/scripts/run-ssh-docker-e2e.mjs         |   1 +
 .../providers/ssh-filesystem-provider.test.ts |  44 +++---
 src/main/providers/ssh-filesystem-provider.ts |   7 +-
 .../methods/files-list-all-page-size.test.ts  |  53 +++++++
 src/main/runtime/rpc/methods/files.ts         |   8 +-
 src/relay/fs-handler.ts                       |  25 +++-
 ...t-files-large-response.integration.test.ts | 130 +++++++++++++++++
 src/relay/git-handler.ts                      |  22 ++-
 src/relay/git-response-stream.ts              |  47 +++++-
 src/relay/relay-runtime-services.ts           |   9 +-
 tests/e2e/helpers/docker-ssh-relay-target.ts  |  10 ++
 ...sh-docker-quick-open-large-listing.spec.ts | 134 ++++++++++++++++++
 12 files changed, 441 insertions(+), 49 deletions(-)
 create mode 100644 src/main/runtime/rpc/methods/files-list-all-page-size.test.ts
 create mode 100644 src/relay/fs-list-files-large-response.integration.test.ts
 create mode 100644 tests/e2e/ssh-docker-quick-open-large-listing.spec.ts

diff --git a/config/scripts/run-ssh-docker-e2e.mjs b/config/scripts/run-ssh-docker-e2e.mjs
index 195811f7312..dddfa3e0148 100644
--- a/config/scripts/run-ssh-docker-e2e.mjs
+++ b/config/scripts/run-ssh-docker-e2e.mjs
@@ -71,6 +71,7 @@ const result = spawnSync(
     'tests/e2e/ssh-ai-vault-session-history.spec.ts',
     'tests/e2e/ssh-cold-activation-restore.spec.ts',
     'tests/e2e/ssh-cold-hydration-gap-tab-seeding.spec.ts',
+    'tests/e2e/ssh-docker-quick-open-large-listing.spec.ts',
     'tests/e2e/ssh-docker-reconnect-pane-restore.spec.ts',
     'tests/e2e/ssh-docker-transport-drop-recovery.spec.ts',
     'tests/e2e/ssh-external-image-preview.spec.ts',
diff --git a/src/main/providers/ssh-filesystem-provider.test.ts b/src/main/providers/ssh-filesystem-provider.test.ts
index 65913f0c7e9..b9cb21c3354 100644
--- a/src/main/providers/ssh-filesystem-provider.test.ts
+++ b/src/main/providers/ssh-filesystem-provider.test.ts
@@ -486,14 +486,16 @@ describe('SshFilesystemProvider', () => {
     expect(result).toEqual(searchResult)
   })
 
-  it('listFiles sends fs.listFiles request', async () => {
+  // Why #12547: a monorepo listing does not fit one control-lane frame, so the request opts into
+  // response streaming. An old relay ignores `__streamResponse` and answers plainly, which is the
+  // plain-array case each of these asserts.
+  it('listFiles sends a streamable fs.listFiles request', async () => {
     mux.request.mockResolvedValue(['src/index.ts', 'package.json'])
     const result = await provider.listFiles('/home/user/project')
-    expect(mux.request).toHaveBeenCalledWith(
-      'fs.listFiles',
-      { rootPath: '/home/user/project' },
-      { signal: undefined }
-    )
+    expect(mux.request).toHaveBeenCalledWith('fs.listFiles', {
+      rootPath: '/home/user/project',
+      __streamResponse: true
+    })
     expect(result).toEqual(['src/index.ts', 'package.json'])
   })
 
@@ -503,26 +505,22 @@ describe('SshFilesystemProvider', () => {
       maxResults: 20_000,
       searchQuery: 'target'
     })
-    expect(mux.request).toHaveBeenCalledWith(
-      'fs.listFiles',
-      {
-        rootPath: '/home/user/project',
-        excludePaths: ['/home/user/project/worktrees/b'],
-        maxResults: 20_000,
-        searchQuery: 'target'
-      },
-      { signal: undefined }
-    )
+    expect(mux.request).toHaveBeenCalledWith('fs.listFiles', {
+      rootPath: '/home/user/project',
+      excludePaths: ['/home/user/project/worktrees/b'],
+      maxResults: 20_000,
+      searchQuery: 'target',
+      __streamResponse: true
+    })
   })
 
   it('listFiles omits excludePaths when empty', async () => {
     mux.request.mockResolvedValue([])
     await provider.listFiles('/home/user/project', { excludePaths: [] })
-    expect(mux.request).toHaveBeenCalledWith(
-      'fs.listFiles',
-      { rootPath: '/home/user/project' },
-      { signal: undefined }
-    )
+    expect(mux.request).toHaveBeenCalledWith('fs.listFiles', {
+      rootPath: '/home/user/project',
+      __streamResponse: true
+    })
   })
 
   it('listFiles forwards the cancellation signal to the mux request (#7721)', async () => {
@@ -531,8 +529,8 @@ describe('SshFilesystemProvider', () => {
     await provider.listFiles('/home/user/project', { signal: controller.signal })
     expect(mux.request).toHaveBeenCalledWith(
       'fs.listFiles',
-      { rootPath: '/home/user/project' },
-      { signal: controller.signal }
+      { rootPath: '/home/user/project', __streamResponse: true },
+      { signal: controller.signal, timeoutMs: undefined }
     )
   })
 
diff --git a/src/main/providers/ssh-filesystem-provider.ts b/src/main/providers/ssh-filesystem-provider.ts
index 70bb06730f8..f6208ea00e9 100644
--- a/src/main/providers/ssh-filesystem-provider.ts
+++ b/src/main/providers/ssh-filesystem-provider.ts
@@ -1,6 +1,7 @@
 import type { SshChannelMultiplexer } from '../ssh/ssh-channel-multiplexer'
 import { isMethodNotFoundError, readFileViaStream } from '../ssh/ssh-filesystem-stream-reader'
 import { uploadBuffer } from '../ssh/sftp-upload'
+import { requestGitStreamable } from '../ssh/ssh-git-response-stream-reader'
 import { lstatViaSftp } from './ssh-filesystem-provider-sftp'
 import {
   downloadFileViaSftp,
@@ -314,7 +315,11 @@ export class SshFilesystemProvider implements IFilesystemProvider {
     // Why #7721: the signal lets a workspace switch send rpc.cancel so the
     // relay aborts the full-tree scan instead of stacking abandoned scans
     // that starve interactive fs.readDir/fs.stat on the shared SSH channel.
-    return (await this.mux.request('fs.listFiles', params, {
+    // Why streamable: a monorepo listing serializes past the relay's 1 MiB control lane, and the
+    // lane it demotes to is refused under unrelated producer load. Opting in moves it to the bulk
+    // lane in chunks; an old relay ignores the flag and answers plainly, which the reader detects
+    // by the sentinel marker being absent.
+    return (await requestGitStreamable(this.mux, 'fs.listFiles', params, {
       signal: options?.signal
     })) as string[]
   }
diff --git a/src/main/runtime/rpc/methods/files-list-all-page-size.test.ts b/src/main/runtime/rpc/methods/files-list-all-page-size.test.ts
new file mode 100644
index 00000000000..826d0c0f3f0
--- /dev/null
+++ b/src/main/runtime/rpc/methods/files-list-all-page-size.test.ts
@@ -0,0 +1,53 @@
+/**
+ * #12547: `files.listAll` did not declare `maxResults`, so "the client names its cap and a full page
+ * means there is more" was wired only on the Electron IPC hop. Web and mobile were saved incidentally,
+ * by `remoteFileContentBudget` defaulting the cap inside `listRuntimeFiles`.
+ */
+import { describe, expect, it, vi } from 'vitest'
+import { RpcDispatcher } from '../dispatcher'
+import type { RpcRequest } from '../core'
+import type { OrcaRuntimeService } from '../../orca-runtime'
+import { FILE_METHODS } from './files'
+
+function makeRequest(method: string, params?: unknown): RpcRequest {
+  return { id: 'req-1', authToken: 'tok', method, params }
+}
+
+describe('files.listAll page size', () => {
+  // Why #12547: `maxResults` was wired only on the Electron IPC hop, so "a full page means there is
+  // more" was true for a desktop client and incidental for web/mobile. Declaring it here is a new
+  // optional field (wire rule 1): an older host strips it and keeps its own default.
+  it('forwards a client-named page size for a selected worktree', async () => {
+    const runtime = {
+      getRuntimeId: () => 'test-runtime',
+      listRuntimeFiles: vi.fn().mockResolvedValue(['src/index.ts'])
+    } as unknown as OrcaRuntimeService
+    const dispatcher = new RpcDispatcher({ runtime, methods: FILE_METHODS })
+
+    const response = await dispatcher.dispatch(
+      makeRequest('files.listAll', { worktree: 'id:wt-1', maxResults: 20_001 })
+    )
+
+    expect(runtime.listRuntimeFiles).toHaveBeenCalledWith('id:wt-1', {
+      excludePaths: undefined,
+      maxResults: 20_001
+    })
+    expect(response).toMatchObject({ ok: true, result: ['src/index.ts'] })
+  })
+
+  // Why refuse rather than fall back: no released client sends this field, so a malformed value is a
+  // bug in the caller, not skew — the same call `files.search` already makes for its own maxResults.
+  it('refuses a malformed page size instead of silently picking one', async () => {
+    const runtime = {
+      getRuntimeId: () => 'test-runtime',
+      listRuntimeFiles: vi.fn().mockResolvedValue(['src/index.ts'])
+    } as unknown as OrcaRuntimeService
+    const dispatcher = new RpcDispatcher({ runtime, methods: FILE_METHODS })
+
+    const response = await dispatcher.dispatch(
+      makeRequest('files.listAll', { worktree: 'id:wt-1', maxResults: -3 })
+    )
+
+    expect(response).toMatchObject({ ok: false })
+  })
+})
diff --git a/src/main/runtime/rpc/methods/files.ts b/src/main/runtime/rpc/methods/files.ts
index d4aaae455bc..ef349a22f84 100644
--- a/src/main/runtime/rpc/methods/files.ts
+++ b/src/main/runtime/rpc/methods/files.ts
@@ -93,8 +93,13 @@ const FileSearch = WorktreeSelector.extend({
   maxResults: z.number().int().positive().optional()
 })
 
+// Why: `maxResults` is a new optional field (wire rule 1) — an older host strips it and keeps its
+// own default. It existed only on the Electron IPC hop, so "the client names its cap and a full page
+// means there is more" was true for desktop and merely incidental for web and mobile, which were
+// saved by `remoteFileContentBudget` defaulting the cap inside `listRuntimeFiles`.
 const FileListAll = WorktreeSelector.extend({
-  excludePaths: z.array(z.string()).optional()
+  excludePaths: z.array(z.string()).optional(),
+  maxResults: z.number().int().positive().optional()
 })
 
 const FileUnwatch = z.object({
@@ -236,6 +241,7 @@ export const FILE_METHODS: RpcAnyMethod[] = [
       const maxContentBytes = remoteFileContentBudget(clientKind, requestId)
       return runtime.listRuntimeFiles(params.worktree, {
         excludePaths: params.excludePaths,
+        ...(params.maxResults === undefined ? {} : { maxResults: params.maxResults }),
         ...(signal === undefined ? {} : { signal }),
         ...(maxContentBytes === undefined ? {} : { maxContentBytes })
       })
diff --git a/src/relay/fs-handler.ts b/src/relay/fs-handler.ts
index f8514a47191..ec11a806bb8 100644
--- a/src/relay/fs-handler.ts
+++ b/src/relay/fs-handler.ts
@@ -25,6 +25,7 @@ import {
   writeRelayFile
 } from './fs-path-mutation-requests'
 import { buildExcludePathPrefixes } from '../shared/quick-open-filter'
+import { maybeStreamRpcResponse, type GitResponseStreamRegistry } from './git-response-stream'
 import { readRelayFileContent, readRelayFileStreamMetadata } from './fs-handler-file-read'
 import { readRelayFileRange } from './fs-handler-file-range'
 import { FileRangeReadRequestError } from '../shared/file-range-read'
@@ -47,12 +48,19 @@ export class FsHandler {
   private watchRegistry: RelayFilesystemWatchRegistry
   private streamRegistry = new RelayStreamRegistry()
   private listFilesScans = new ListFilesScanCoordinator()
+  private readonly responseStreams: GitResponseStreamRegistry | undefined
 
   constructor(
     dispatcher: RelayDispatcher,
     _context: RelayContext,
-    watcherPool?: RelayWatcherProcessPool
+    watcherPool?: RelayWatcherProcessPool,
+    // Why passed in rather than owned: GitHandler registers the `git.responseAck` route every pump
+    // is credited through, and a client keys reassembly on `streamId` alone — see the header of
+    // git-response-stream.ts. Without one this handler answers plainly, which is the pre-streaming
+    // behavior rather than a stream nothing can credit.
+    responseStreams?: GitResponseStreamRegistry
   ) {
+    this.responseStreams = responseStreams
     this.dispatcher = dispatcher
     this.watchRegistry = new RelayFilesystemWatchRegistry(dispatcher, watcherPool)
     this.registerHandlers()
@@ -204,7 +212,10 @@ export class FsHandler {
     }
   }
 
-  private listFiles(params: Record<string, unknown>, context?: RequestContext): Promise<string[]> {
+  private async listFiles(
+    params: Record<string, unknown>,
+    context?: RequestContext
+  ): Promise<unknown> {
     const rootPath = expandTilde(params.rootPath as string)
     const maxResults =
       typeof params.maxResults === 'number' &&
@@ -224,13 +235,21 @@ export class FsHandler {
     // Why #7721: full-tree scans are the relay's most expensive request; the
     // coordinator caps them at one per client, coalescing duplicates and
     // aborting a stale scan when the workspace changes or the host cancels.
-    return this.listFilesScans.run({
+    const files = await this.listFilesScans.run({
       clientId: context?.clientId ?? 0,
       key: JSON.stringify([rootPath, excludePathPrefixes, maxResults, searchQuery]),
       signal: context?.signal,
       start: (signal) =>
         runListFilesScan(rootPath, excludePathPrefixes, signal, maxResults, searchQuery)
     })
+    // Why: a full listing of a real monorepo serializes past the 1 MiB control lane — Orca's own
+    // checkout is 22.6k paths averaging 58 characters, so a 20,001-row page is ~1.2MB — and the
+    // legacy-response lane it demotes to is refused under unrelated producer load. Streaming makes
+    // size stop being a correctness question instead of picking a row or byte ceiling to refuse at.
+    // A client that did not opt in still gets the plain array, exactly as before.
+    return this.responseStreams
+      ? maybeStreamRpcResponse(files, params, context, this.responseStreams, this.dispatcher)
+      : files
   }
 
   private async workspaceSpaceScan(params: Record<string, unknown>, context: RequestContext) {
diff --git a/src/relay/fs-list-files-large-response.integration.test.ts b/src/relay/fs-list-files-large-response.integration.test.ts
new file mode 100644
index 00000000000..27c7ee7e648
--- /dev/null
+++ b/src/relay/fs-list-files-large-response.integration.test.ts
@@ -0,0 +1,130 @@
+/**
+ * #12547: a full `fs.listFiles` reply for a real monorepo does not fit the relay's control lane.
+ *
+ * Orca's own checkout is ~22.6k tracked paths averaging 58 characters, so a 20,001-row page
+ * serializes to ~1.2MB — past `DISPATCHER_CONTROL_QUEUE_MAX_BYTES`, which demotes it to the
+ * `legacy-response` lane where an unrelated producer backlog can refuse it. Refusing at a fixed row
+ * or byte ceiling only moves where that shows up; streaming removes it, so these run the real
+ * dispatcher, the real FsHandler and the real client multiplexer over an in-memory pipe and assert
+ * an over-budget listing arrives intact — in both wire directions.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const { runListFilesScanMock } = vi.hoisted(() => ({ runListFilesScanMock: vi.fn() }))
+
+vi.mock('./fs-list-files-fallback-chain', () => ({ runListFilesScan: runListFilesScanMock }))
+vi.mock('@parcel/watcher', () => ({ subscribe: vi.fn() }))
+
+import {
+  SshChannelMultiplexer,
+  type MultiplexerTransport
+} from '../main/ssh/ssh-channel-multiplexer'
+import { requestGitStreamable } from '../main/ssh/ssh-git-response-stream-reader'
+import { RelayContext } from './context'
+import { RelayDispatcher } from './dispatcher'
+import { DISPATCHER_CONTROL_QUEUE_MAX_BYTES } from './dispatcher-writer-admission'
+import { FsHandler } from './fs-handler'
+import { GitHandler } from './git-handler'
+import { GitResponseStreamRegistry } from './git-response-stream'
+import { QUICK_OPEN_LISTING_MAX_RESULTS } from '../shared/quick-open-listing-limits'
+
+/** Shaped like this repository: `packages/<name>/src/...`, ~58 characters. */
+function monorepoPaths(count: number): string[] {
+  return Array.from(
+    { length: count },
+    (_, index) =>
+      `packages/pkg-${String(index % 64).padStart(2, '0')}/src/renderer/components/entry-${String(index).padStart(6, '0')}.tsx`
+  )
+}
+
+describe('Integration: an over-budget fs.listFiles reply (#12547)', () => {
+  let mux: SshChannelMultiplexer
+  let dispatcher: RelayDispatcher
+  let fsHandler: FsHandler
+  let gitHandler: GitHandler
+  let writtenFrames: number[]
+
+  beforeEach(() => {
+    runListFilesScanMock.mockReset()
+    writtenFrames = []
+
+    let relayFeed: (data: Buffer) => void
+    const clientDataCallbacks: ((data: Buffer) => void)[] = []
+    const clientTransport: MultiplexerTransport = {
+      write: (data: Buffer) => {
+        setImmediate(() => relayFeed?.(data))
+      },
+      onData: (cb) => {
+        clientDataCallbacks.push(cb)
+      },
+      onClose: () => {}
+    }
+    dispatcher = new RelayDispatcher((data: Buffer) => {
+      writtenFrames.push(data.length)
+      setImmediate(() => {
+        for (const cb of clientDataCallbacks) {
+          cb(data)
+        }
+      })
+      return true
+    })
+    relayFeed = (data: Buffer) => dispatcher.feed(data)
+    // Why: the same single registry production wires, so `git.responseAck` — registered by
+    // GitHandler — credits the pump an fs.listFiles stream parks on.
+    const responseStreams = new GitResponseStreamRegistry()
+    const context = new RelayContext()
+    fsHandler = new FsHandler(dispatcher, context, undefined, responseStreams)
+    gitHandler = new GitHandler(dispatcher, context, undefined, responseStreams)
+    mux = new SshChannelMultiplexer(clientTransport)
+  })
+
+  afterEach(() => {
+    mux.dispose()
+    dispatcher.dispose()
+    fsHandler.dispose()
+    gitHandler.dispose()
+  })
+
+  it('delivers a page too large for the control lane, in chunks no frame has to carry', async () => {
+    const files = monorepoPaths(QUICK_OPEN_LISTING_MAX_RESULTS)
+    // Precondition, measured from the payload rather than asserted between two constants: this is
+    // the listing that does not fit, which is what makes the rest of the test mean anything.
+    expect(Buffer.byteLength(JSON.stringify(files), 'utf8')).toBeGreaterThan(
+      DISPATCHER_CONTROL_QUEUE_MAX_BYTES
+    )
+    runListFilesScanMock.mockResolvedValue(files)
+
+    const received = await requestGitStreamable(mux, 'fs.listFiles', {
+      rootPath: '/remote/root',
+      maxResults: QUICK_OPEN_LISTING_MAX_RESULTS
+    })
+
+    expect(received).toEqual(files)
+    expect(Math.max(...writtenFrames)).toBeLessThan(DISPATCHER_CONTROL_QUEUE_MAX_BYTES)
+  })
+
+  it('still answers a client that never opts into streaming, with the whole array', async () => {
+    const files = monorepoPaths(QUICK_OPEN_LISTING_MAX_RESULTS)
+    runListFilesScanMock.mockResolvedValue(files)
+
+    // Why: an old client sends neither `__streamResponse` nor `maxResults`. It gets one plain frame
+    // on the legacy-response lane, as it did before this call ever learned to stream.
+    const received = await mux.request('fs.listFiles', { rootPath: '/remote/root' })
+
+    expect(received).toEqual(files)
+    expect(Math.max(...writtenFrames)).toBeGreaterThan(DISPATCHER_CONTROL_QUEUE_MAX_BYTES)
+  })
+
+  it('leaves a reply that fits on the plain response path', async () => {
+    const files = monorepoPaths(100)
+    runListFilesScanMock.mockResolvedValue(files)
+
+    const received = await requestGitStreamable(mux, 'fs.listFiles', {
+      rootPath: '/remote/root',
+      maxResults: 100
+    })
+
+    expect(received).toEqual(files)
+    expect(Math.max(...writtenFrames)).toBeLessThan(DISPATCHER_CONTROL_QUEUE_MAX_BYTES)
+  })
+})
diff --git a/src/relay/git-handler.ts b/src/relay/git-handler.ts
index 58f47da9fce..66bbd6d3cd1 100644
--- a/src/relay/git-handler.ts
+++ b/src/relay/git-handler.ts
@@ -10,8 +10,7 @@ import {
   createSubmodulePathsCache,
   type SubmodulePathsCache
 } from './git-handler-submodule-ops'
-import { GitResponseStreamRegistry } from './git-response-stream'
-import { GIT_RESPONSE_STREAM_THRESHOLD } from './protocol'
+import { GitResponseStreamRegistry, maybeStreamRpcResponse } from './git-response-stream'
 import { clearGitStatusLineStatsCache } from '../shared/git-status-line-stats-cache'
 import { invalidateGitBranchLineTotalInFlight } from '../shared/git-branch-line-total'
 import { buildRelayGitEnv, buildRelayUnattendedGitEnv } from './relay-command-env'
@@ -68,9 +67,6 @@ export class GitHandler {
   private dispatcher: RelayDispatcher
   private readonly gitDiffReadDedupe = new InFlightPromiseDedupe<unknown>()
   private readonly gitCapabilities = new GitCapabilityCache()
-  // Why: use the bulk lane so large responses do not block interactive PTY echo.
-  private readonly responseStreams = new GitResponseStreamRegistry()
-
   // Why: cache .gitmodules per instance to avoid SSH reads and test leakage.
   private submodulePathsCache: SubmodulePathsCache = createSubmodulePathsCache()
 
@@ -78,7 +74,12 @@ export class GitHandler {
   constructor(
     dispatcher: RelayDispatcher,
     _context: RelayContext,
-    private readonly watcherRegistry?: GitHandlerWatcherRegistry
+    private readonly watcherRegistry?: GitHandlerWatcherRegistry,
+    // Why: use the bulk lane so large responses do not block interactive PTY echo. This handler
+    // registers the `git.responseAck` route below, so in production it takes the relay's single
+    // registry and FsHandler is handed the same one — see the header of git-response-stream.ts for
+    // why a second registry both collides on stream ids and stalls on credit.
+    private readonly responseStreams: GitResponseStreamRegistry = new GitResponseStreamRegistry()
   ) {
     this.dispatcher = dispatcher
     const handlers = createGitHandlerOperationSet({
@@ -132,14 +133,7 @@ export class GitHandler {
     params: Record<string, unknown>,
     context: RequestContext | undefined
   ): unknown {
-    if (params.__streamResponse !== true || !context) {
-      return result
-    }
-    const payload = Buffer.from(JSON.stringify(result ?? null), 'utf-8')
-    if (payload.length <= GIT_RESPONSE_STREAM_THRESHOLD) {
-      return result
-    }
-    return this.responseStreams.startStream(payload, this.dispatcher, context)
+    return maybeStreamRpcResponse(result, params, context, this.responseStreams, this.dispatcher)
   }
 
   private clearGitMutationReadCaches(): void {
diff --git a/src/relay/git-response-stream.ts b/src/relay/git-response-stream.ts
index 3ccbd66ee8d..c9d8d2ce290 100644
--- a/src/relay/git-response-stream.ts
+++ b/src/relay/git-response-stream.ts
@@ -1,11 +1,22 @@
-// Streams large git RPC responses (diff family + exec) onto the bulk lane in
-// chunks instead of one JSON-RPC frame, so a big diff cannot head-of-line-block
-// interactive pty.data echo on the shared SSH channel. Mirrors the fs
-// read-stream credit-window pattern (see fs-handler-file-read.ts) but the
-// payload is an in-memory serialized string rather than a file handle.
+// Streams large RPC responses onto the bulk lane in chunks instead of one
+// JSON-RPC frame, so a big reply cannot head-of-line-block interactive pty.data
+// echo on the shared SSH channel. Mirrors the fs read-stream credit-window
+// pattern (see fs-handler-file-read.ts) but the payload is an in-memory
+// serialized string rather than a file handle.
+//
+// ONE REGISTRY PER RELAY. The `git.*` method names below are the shipped wire
+// spelling and are permanent, the way an opcode number is, so a second handler
+// that needs streaming (`fs.listFiles` is the first) shares this instance rather
+// than minting its own. A second registry is not an option: a client keys
+// reassembly on `streamId` alone, so two would hand out the same id and
+// cross-feed each other's chunks, and only the handler that registers
+// `git.responseAck` can credit the ack window a pump parks on — the other's
+// streams would stall at STREAM_ACK_WINDOW_CHUNKS forever. See
+// `relay-runtime-services.ts` for the wiring.
 import type { RelayDispatcher, RequestContext } from './dispatcher'
 import {
   GIT_RESPONSE_CHUNK_SIZE,
+  GIT_RESPONSE_STREAM_THRESHOLD,
   STREAM_ACK_WINDOW_CHUNKS,
   STREAM_ACK_STALL_RECHECK_MS,
   type GitResponseStreamMarker
@@ -220,3 +231,29 @@ export class GitResponseStreamRegistry {
     this.streams.clear()
   }
 }
+
+/**
+ * Opt-in response streaming, shared by every handler that can answer with a
+ * payload too large for one control-lane frame.
+ *
+ * `__streamResponse` is its own negotiation in both directions: an old client
+ * never sends it and gets the plain result, and an old relay ignores it and
+ * answers plainly, which the client detects by the sentinel marker being absent.
+ * So there is no new method and no capability to advertise.
+ */
+export function maybeStreamRpcResponse(
+  result: unknown,
+  params: Record<string, unknown>,
+  context: RequestContext | undefined,
+  registry: GitResponseStreamRegistry,
+  dispatcher: RelayDispatcher
+): unknown {
+  if (params.__streamResponse !== true || !context) {
+    return result
+  }
+  const payload = Buffer.from(JSON.stringify(result ?? null), 'utf-8')
+  if (payload.length <= GIT_RESPONSE_STREAM_THRESHOLD) {
+    return result
+  }
+  return registry.startStream(payload, dispatcher, context)
+}
diff --git a/src/relay/relay-runtime-services.ts b/src/relay/relay-runtime-services.ts
index 36276ed9b70..485c9e787d1 100644
--- a/src/relay/relay-runtime-services.ts
+++ b/src/relay/relay-runtime-services.ts
@@ -6,6 +6,7 @@ import { RelayContext, expandTilde } from './context'
 import { PtyHandler } from './pty-handler'
 import { FsHandler } from './fs-handler'
 import { GitHandler } from './git-handler'
+import { GitResponseStreamRegistry } from './git-response-stream'
 import { PreflightHandler } from './preflight-handler'
 import { ExternalAutomationsHandler } from './external-automations-handler'
 import { PortScanHandler } from './port-scan-handler'
@@ -51,13 +52,17 @@ export class RelayRuntimeServices {
     )
     this.ptyHandler.setSourcePublication(this.ptySourcePublication)
 
-    this.fsHandler = new FsHandler(dispatcher, context)
+    // Why one instance for both handlers: a client reassembles a streamed reply by `streamId` alone,
+    // so two registries would hand out the same id, and only GitHandler routes the `git.responseAck`
+    // credit every pump waits on. A second registry is not an option — see git-response-stream.ts.
+    const responseStreams = new GitResponseStreamRegistry()
+    this.fsHandler = new FsHandler(dispatcher, context, undefined, responseStreams)
     const watchRegistry = this.fsHandler.getWatchRegistry()
     this.ptyHandler.setWorktreeRemovalCoordinator(watchRegistry)
     watchRegistry.setWorktreePtyTeardown((rootPath) =>
       this.ptyHandler.shutdownForWorktreePath(rootPath)
     )
-    this.gitHandler = new GitHandler(dispatcher, context, watchRegistry)
+    this.gitHandler = new GitHandler(dispatcher, context, watchRegistry, responseStreams)
     const preflightHandler = new PreflightHandler(dispatcher)
     this.skillInstallHandler = new SkillInstallHandler(dispatcher)
     const externalAutomationsHandler = new ExternalAutomationsHandler(dispatcher)
diff --git a/tests/e2e/helpers/docker-ssh-relay-target.ts b/tests/e2e/helpers/docker-ssh-relay-target.ts
index 78534499943..f535b22d073 100644
--- a/tests/e2e/helpers/docker-ssh-relay-target.ts
+++ b/tests/e2e/helpers/docker-ssh-relay-target.ts
@@ -211,6 +211,16 @@ export function writeDockerSshRelayTargetFile(
   )
 }
 
+/** Why not `writeDockerSshRelayTargetFile`: that one passes the contents as a shell argument, so a
+ * payload the size of a real repository's path list exceeds ARG_MAX before it reaches the shell. */
+export function copyFileIntoDockerSshRelayTarget(
+  target: DockerSshRelayTarget,
+  localPath: string,
+  remotePath: string
+): void {
+  run('docker', ['cp', localPath, `${target.containerName}:${remotePath}`], { timeoutMs: 120_000 })
+}
+
 export function startDockerSshRelayTarget(testInfo: TestInfo): DockerSshRelayTarget {
   const host = process.env.ORCA_E2E_SSH_TARGET_HOST?.trim() || '127.0.0.1'
   if (host === 'localhost' || host === '::1' || host.startsWith('127.')) {
diff --git a/tests/e2e/ssh-docker-quick-open-large-listing.spec.ts b/tests/e2e/ssh-docker-quick-open-large-listing.spec.ts
new file mode 100644
index 00000000000..ee814ab02db
--- /dev/null
+++ b/tests/e2e/ssh-docker-quick-open-large-listing.spec.ts
@@ -0,0 +1,134 @@
+/**
+ * #12547 acceptance: open a repository the size of Orca's own checkout over SSH and list its files.
+ *
+ * The remote tree is seeded from this repository's real `git ls-files` output, so the payload has
+ * the shape that broke: ~22.6k paths averaging 58 characters, whose 20,001-row page serializes to
+ * ~1.2MB — past `DISPATCHER_CONTROL_QUEUE_MAX_BYTES`. Both wire directions are exercised over the
+ * real relay: a current client, and a client that names no `maxResults` at all.
+ */
+import { execFileSync } from 'node:child_process'
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+
+import { expect, test } from './helpers/orca-app'
+import { connectDockerSshRelayTarget } from './helpers/docker-ssh-relay-connection'
+import {
+  cleanupDockerSshRelayTarget,
+  copyFileIntoDockerSshRelayTarget,
+  execDockerSshRelayTargetCommand,
+  shellQuote,
+  startDockerSshRelayTarget,
+  type DockerSshRelayTarget
+} from './helpers/docker-ssh-relay-target'
+import { ensureDockerSshRelayImage } from './helpers/docker-ssh-relay-image'
+import { waitForSessionReady } from './helpers/store'
+import { shouldIncludeQuickOpenPath } from '../../src/shared/quick-open-filter'
+
+const RUN_DOCKER_SSH = process.env.ORCA_E2E_SSH_DOCKER === '1'
+const REMOTE_REPO_PATH = '/tmp/orca-quick-open-large-listing-repo'
+const REMOTE_PATH_LIST = '/tmp/orca-quick-open-large-listing-paths.txt'
+/** What the desktop client asks for; a full page is what it reads as "there is more". */
+const CLIENT_PAGE_SIZE = 20_001
+
+function thisRepositoryTrackedPaths(): string[] {
+  const root = execFileSync('git', ['rev-parse', '--show-toplevel'], { encoding: 'utf8' }).trim()
+  // Why -z: `git ls-files` C-quotes any path with a special character, which would seed a tree that
+  // does not match the one being measured.
+  return execFileSync('git', ['ls-files', '-z'], {
+    cwd: root,
+    encoding: 'utf8',
+    maxBuffer: 1024 * 1024 * 256
+  })
+    .split('\0')
+    .filter(Boolean)
+}
+
+function seedRemoteTree(target: DockerSshRelayTarget, paths: string[]): void {
+  const stagingDir = mkdtempSync(path.join(tmpdir(), 'orca-quick-open-large-listing-'))
+  try {
+    const localList = path.join(stagingDir, 'paths.txt')
+    writeFileSync(localList, `${paths.join('\n')}\n`)
+    copyFileIntoDockerSshRelayTarget(target, localList, REMOTE_PATH_LIST)
+  } finally {
+    rmSync(stagingDir, { recursive: true, force: true })
+  }
+  const seedScript = [
+    "const fs = require('fs'), path = require('path')",
+    `const list = fs.readFileSync(${JSON.stringify(REMOTE_PATH_LIST)}, 'utf8').split('\\n').filter(Boolean)`,
+    'const seen = new Set()',
+    'for (const entry of list) {',
+    '  const dir = path.dirname(entry)',
+    '  if (dir !== "." && !seen.has(dir)) { fs.mkdirSync(dir, { recursive: true }); seen.add(dir) }',
+    "  fs.writeFileSync(entry, '')",
+    '}'
+  ].join(';')
+  const encoded = Buffer.from(seedScript, 'utf8').toString('base64')
+  execDockerSshRelayTargetCommand(
+    target,
+    [
+      `rm -rf ${shellQuote(REMOTE_REPO_PATH)}`,
+      `mkdir -p ${shellQuote(REMOTE_REPO_PATH)}`,
+      `cd ${shellQuote(REMOTE_REPO_PATH)}`,
+      'git init -q',
+      'git config user.email e2e@test.local',
+      'git config user.name "Orca Docker SSH E2E"',
+      `node -e ${shellQuote(`eval(Buffer.from('${encoded}', 'base64').toString('utf8'))`)}`,
+      'git add -A',
+      'git commit -q -m "seed monorepo-shaped tree"'
+    ].join(' && ')
+  )
+}
+
+test.skip(!RUN_DOCKER_SSH, 'Set ORCA_E2E_SSH_DOCKER=1 to run the Docker SSH relay lane')
+
+test('lists a monorepo-sized remote workspace, with and without a client page size (#12547)', async ({
+  orcaPage
+}, testInfo) => {
+  test.setTimeout(420_000)
+  let target: DockerSshRelayTarget | null = null
+  try {
+    const trackedPaths = thisRepositoryTrackedPaths()
+    expect(trackedPaths.length).toBeGreaterThan(CLIENT_PAGE_SIZE)
+    // Why the real predicate rather than a copy of it: Quick Open prunes a few tracked paths on
+    // purpose (`.husky/` among them), and a hand-written expectation would go stale the first time
+    // that list changes and read as a transport bug.
+    const listablePaths = trackedPaths.filter(shouldIncludeQuickOpenPath)
+    // Precondition, measured rather than assumed: the page a current client asks for does not fit
+    // one control-lane frame, which is the listing that used to be refused outright.
+    expect(
+      Buffer.byteLength(JSON.stringify(trackedPaths.slice(0, CLIENT_PAGE_SIZE)), 'utf8')
+    ).toBeGreaterThan(1024 * 1024)
+
+    ensureDockerSshRelayImage(process.cwd())
+    target = startDockerSshRelayTarget(testInfo)
+    seedRemoteTree(target, trackedPaths)
+
+    await waitForSessionReady(orcaPage)
+    const connected = await connectDockerSshRelayTarget(orcaPage, target, {
+      remotePath: REMOTE_REPO_PATH
+    })
+
+    const listFiles = async (maxResults?: number): Promise<string[]> =>
+      orcaPage.evaluate(
+        ({ connectionId, rootPath, maxResults }) =>
+          window.api.fs.listFiles({
+            rootPath,
+            connectionId,
+            ...(maxResults === undefined ? {} : { maxResults })
+          }),
+        { connectionId: connected.targetId, rootPath: REMOTE_REPO_PATH, maxResults }
+      )
+
+    const currentClient = await listFiles(CLIENT_PAGE_SIZE)
+    expect(currentClient).toHaveLength(CLIENT_PAGE_SIZE)
+
+    // Why: a client that predates `maxResults` on this call sends none at all, and it cannot
+    // reassemble a streamed reply either — it has to be answered on the plain response path.
+    const oldClient = await listFiles()
+    expect(oldClient).toHaveLength(listablePaths.length)
+    expect(new Set(oldClient)).toEqual(new Set(listablePaths))
+  } finally {
+    cleanupDockerSshRelayTarget(target)
+  }
+})

From 8dc3c1dd9787935bd14f9bab03f5ebdbe706a8e5 Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 10:21:28 -0700
Subject: [PATCH 49/92] Display favicons for browser website entries (#18099)

* Display favicons for browser website entries

Capture favicons from pages as they load and persist them with browser
history entries. Display favicons in tabs, tab creation search results,
and palette searches to improve visual recognition of websites and help
users identify pages at a glance.

* Fix favicon retry on back navigation after load failure

Reset the favicon failure cache when the favicon URL changes, enabling
retry of a previously failed favicon when navigating back to the same
URL. Distinguish between explicit null (clear cached favicon) and
omitted (don't update history), so stale favicons don't persist
incorrectly.
---
 .../src/components/browser-favicon.tsx        | 59 +++++++++++++++++++
 .../host-guest/attach-browser-page-webview.ts |  4 +-
 ...rowser-page-webview-navigation-handlers.ts |  6 +-
 .../components/tab-bar/BrowserTab.test.tsx    | 34 ++++++++++-
 .../src/components/tab-bar/BrowserTab.tsx     | 53 ++---------------
 .../TabBarCreateEntry.history.test.tsx        | 13 +++-
 .../tab-bar/TabBarCreateEntryRow.tsx          |  5 +-
 .../tab-bar/open-tab-entry-dedupe.test.ts     |  3 +-
 .../tab-bar/open-tab-search.test.ts           | 10 +++-
 .../src/components/tab-bar/open-tab-search.ts |  4 +-
 .../open-tab-selection-routing.test.ts        |  3 +-
 ...ee-jump-palette-browser-simulator-rows.tsx |  5 +-
 .../src/lib/browser-palette-search.test.ts    | 20 +++++++
 .../src/lib/browser-palette-search.ts         |  2 +
 src/renderer/src/store/slices/browser.test.ts | 47 +++++++++++++++
 .../slices/browser/browser-history-actions.ts | 11 +++-
 .../browser/browser-page-state-actions.ts     | 12 ++++
 .../slices/browser/browser-slice-contract.ts  |  2 +-
 src/shared/browser-workspace-types.ts         |  1 +
 .../workspace-session-browser-schema.ts       |  1 +
 src/shared/workspace-session-schema.test.ts   |  4 ++
 21 files changed, 233 insertions(+), 66 deletions(-)
 create mode 100644 src/renderer/src/components/browser-favicon.tsx

diff --git a/src/renderer/src/components/browser-favicon.tsx b/src/renderer/src/components/browser-favicon.tsx
new file mode 100644
index 00000000000..ecde4065f03
--- /dev/null
+++ b/src/renderer/src/components/browser-favicon.tsx
@@ -0,0 +1,59 @@
+import { useState } from 'react'
+import { Globe } from 'lucide-react'
+import { cn } from '@/lib/utils'
+
+function displayableFaviconUrl(faviconUrl: string | null | undefined): string | null {
+  const trimmed = faviconUrl?.trim()
+  if (!trimmed) {
+    return null
+  }
+  if (trimmed.startsWith('data:image/')) {
+    return trimmed
+  }
+  try {
+    const url = new URL(trimmed)
+    return url.protocol === 'http:' || url.protocol === 'https:' ? trimmed : null
+  } catch {
+    return null
+  }
+}
+
+export function BrowserFavicon({
+  faviconUrl,
+  className,
+  fallbackClassName
+}: {
+  faviconUrl: string | null | undefined
+  className?: string
+  fallbackClassName?: string
+}): React.JSX.Element {
+  const displayUrl = displayableFaviconUrl(faviconUrl)
+  const [failedUrl, setFailedUrl] = useState<string | null>(null)
+
+  // Why: reset during render on any favicon identity change — including a clear to null while
+  // a page loads — so navigating back to the same url retries instead of keeping the fallback.
+  if (failedUrl !== null && failedUrl !== displayUrl) {
+    setFailedUrl(null)
+  }
+
+  if (displayUrl && failedUrl !== displayUrl) {
+    return (
+      <img
+        src={displayUrl}
+        alt=""
+        aria-hidden
+        draggable={false}
+        decoding="async"
+        loading="lazy"
+        fetchPriority="low"
+        className={cn(
+          'shrink-0 rounded-sm object-contain drop-shadow-[0_0_1px_var(--foreground)]',
+          className
+        )}
+        onError={() => setFailedUrl(displayUrl)}
+      />
+    )
+  }
+
+  return <Globe className={cn('shrink-0', className, fallbackClassName)} aria-hidden="true" />
+}
diff --git a/src/renderer/src/components/browser-pane/host-guest/attach-browser-page-webview.ts b/src/renderer/src/components/browser-pane/host-guest/attach-browser-page-webview.ts
index 6648fd0dad4..4d690b31f03 100644
--- a/src/renderer/src/components/browser-pane/host-guest/attach-browser-page-webview.ts
+++ b/src/renderer/src/components/browser-pane/host-guest/attach-browser-page-webview.ts
@@ -57,7 +57,9 @@ export type AttachBrowserPageWebviewArgs = {
   setPendingAnnotationPayload: Dispatch<SetStateAction<BrowserGrabPayload | null>>
   setBrowserOverlayViewport: Dispatch<SetStateAction<BrowserOverlayViewport>>
   setAddressBarValue: Dispatch<SetStateAction<string>>
-  addBrowserHistoryEntryRef: MutableRefObject<(url: string, title: string) => void>
+  addBrowserHistoryEntryRef: MutableRefObject<
+    (url: string, title: string, faviconUrl?: string | null) => void
+  >
   annotationViewportBridgeTokenRef: MutableRefObject<string>
   initialBrowserUrlRef: MutableRefObject<string>
   validateVisibleGuestRegistrationRef: MutableRefObject<() => void>
diff --git a/src/renderer/src/components/browser-pane/host-guest/browser-page-webview-navigation-handlers.ts b/src/renderer/src/components/browser-pane/host-guest/browser-page-webview-navigation-handlers.ts
index e0836ed5b9a..dbb47ae4acb 100644
--- a/src/renderer/src/components/browser-pane/host-guest/browser-page-webview-navigation-handlers.ts
+++ b/src/renderer/src/components/browser-pane/host-guest/browser-page-webview-navigation-handlers.ts
@@ -30,7 +30,9 @@ export type BrowserPageWebviewNavigationHandlersArgs = {
   addressBarInputRef: RefObject<HTMLInputElement | null>
   onSetUrlRef: MutableRefObject<BrowserPageUrlSetter>
   onUpdatePageStateRef: MutableRefObject<(tabId: string, updates: BrowserTabPageState) => void>
-  addBrowserHistoryEntryRef: MutableRefObject<(url: string, title: string) => void>
+  addBrowserHistoryEntryRef: MutableRefObject<
+    (url: string, title: string, faviconUrl?: string | null) => void
+  >
   faviconUrlRef: MutableRefObject<string | null>
   setAddressBarValue: Dispatch<SetStateAction<string>>
   annotationViewportBridgeTokenRef: MutableRefObject<string>
@@ -127,7 +129,7 @@ export function createBrowserPageWebviewNavigationHandlers({
       const browserModelUrl = redactKagiSessionToken(currentUrl)
       const title = getBrowserDisplayTitle(event.title, browserModelUrl)
       onUpdatePageStateRef.current(browserTabId, { title })
-      addBrowserHistoryEntryRef.current(browserModelUrl, title)
+      addBrowserHistoryEntryRef.current(browserModelUrl, title, faviconUrlRef.current)
     } catch {
       // Why: title-updated can fire before dom-ready, making getURL() throw.
     }
diff --git a/src/renderer/src/components/tab-bar/BrowserTab.test.tsx b/src/renderer/src/components/tab-bar/BrowserTab.test.tsx
index fe6b05ef69a..125497284c8 100644
--- a/src/renderer/src/components/tab-bar/BrowserTab.test.tsx
+++ b/src/renderer/src/components/tab-bar/BrowserTab.test.tsx
@@ -256,7 +256,9 @@ describe('BrowserTab favicon', { timeout: 30_000 }, () => {
     expect(images[0].props.alt).toBe('')
     expect(images[0].props['aria-hidden']).toBe(true)
     expect(images[0].props.draggable).toBe(false)
-    expect(images[0].props.className).toContain('size-3 mr-1 shrink-0')
+    expect(images[0].props.className).toContain('size-3')
+    expect(images[0].props.className).toContain('mr-1')
+    expect(images[0].props.className).toContain('shrink-0')
     expect(images[0].props.className).toContain('object-contain')
     expect(images[0].props.className).toContain('drop-shadow-[0_0_1px_var(--foreground)]')
     expect(findElementsByType(element, 'Globe')).toHaveLength(0)
@@ -274,7 +276,9 @@ describe('BrowserTab favicon', { timeout: 30_000 }, () => {
     expect(findElementsByType(element, 'img')).toHaveLength(0)
     const globes = findElementsByType(element, 'Globe')
     expect(globes).toHaveLength(1)
-    expect(globes[0].props.className).toContain('size-3 mr-1 shrink-0')
+    expect(globes[0].props.className).toContain('size-3')
+    expect(globes[0].props.className).toContain('mr-1')
+    expect(globes[0].props.className).toContain('shrink-0')
     expect(globes[0].props.className).toContain('text-blue-500')
   })
 
@@ -309,4 +313,30 @@ describe('BrowserTab favicon', { timeout: 30_000 }, () => {
     expect(images[0].props.src).toBe(nextIconUrl)
     expect(findElementsByType(resetRender, 'Globe')).toHaveLength(0)
   })
+
+  it('retries a failed favicon after a navigation clears and restores the same url', async () => {
+    const iconUrl = 'https://example.com/favicon.ico'
+    const tab = baseBrowserTab({ faviconUrl: iconUrl })
+    const firstRender = await renderExpandedBrowserTab(tab)
+    const image = findElementsByType(firstRender, 'img')[0]
+
+    ;(image.props.onError as () => void)()
+    const failedRender = await renderExpandedBrowserTab(tab)
+    expect(findElementsByType(failedRender, 'Globe')).toHaveLength(1)
+
+    // A load clears the favicon, then the same site reports it again.
+    const loadingRender = await renderExpandedBrowserTab(
+      baseBrowserTab({ id: tab.id, faviconUrl: null })
+    )
+    expect(findElementsByType(loadingRender, 'Globe')).toHaveLength(1)
+
+    const retryRender = await renderExpandedBrowserTab(
+      baseBrowserTab({ id: tab.id, faviconUrl: iconUrl })
+    )
+
+    const images = findElementsByType(retryRender, 'img')
+    expect(images).toHaveLength(1)
+    expect(images[0].props.src).toBe(iconUrl)
+    expect(findElementsByType(retryRender, 'Globe')).toHaveLength(0)
+  })
 })
diff --git a/src/renderer/src/components/tab-bar/BrowserTab.tsx b/src/renderer/src/components/tab-bar/BrowserTab.tsx
index 344b7ec6c9e..b72f27287f9 100644
--- a/src/renderer/src/components/tab-bar/BrowserTab.tsx
+++ b/src/renderer/src/components/tab-bar/BrowserTab.tsx
@@ -1,7 +1,6 @@
 import { useEffect, useState } from 'react'
 import { useSortable } from '@dnd-kit/sortable'
 import {
-  Globe,
   X,
   ExternalLink,
   Copy,
@@ -39,6 +38,7 @@ import { TabWorkspaceLayoutMenuSection } from './TabWorkspaceLayoutMenuSection'
 import { useTabStripPointerActivation } from './tab-strip-pointer-activation'
 import { TAB_CONTEXT_MENU_CONTENT_CLASS } from './tab-context-menu-sizing'
 import { cn } from '@/lib/utils'
+import { BrowserFavicon } from '@/components/browser-favicon'
 
 export function formatBrowserTabUrlLabel(url: string): string {
   if (url === ORCA_BROWSER_BLANK_URL || url === 'about:blank') {
@@ -68,51 +68,6 @@ function isBlankBrowserTab(tab: BrowserTabState): boolean {
   return tab.url === ORCA_BROWSER_BLANK_URL || tab.url === 'about:blank'
 }
 
-type FailedFavicon = {
-  tabId: string
-  faviconUrl: string
-}
-
-function BrowserTabFavicon({
-  tabId,
-  faviconUrl
-}: {
-  tabId: string
-  faviconUrl: string | null
-}): React.JSX.Element {
-  const displayFaviconUrl = faviconUrl?.trim() ? faviconUrl : null
-  const [failedFavicon, setFailedFavicon] = useState<FailedFavicon | null>(null)
-
-  // Why: reset during render so a new favicon identity retries before the tab
-  // commits one frame with the stale fallback icon.
-  if (
-    failedFavicon &&
-    (failedFavicon.tabId !== tabId || failedFavicon.faviconUrl !== displayFaviconUrl)
-  ) {
-    setFailedFavicon(null)
-  }
-
-  const currentFaviconFailed =
-    failedFavicon?.tabId === tabId && failedFavicon.faviconUrl === displayFaviconUrl
-
-  if (displayFaviconUrl && !currentFaviconFailed) {
-    return (
-      <img
-        src={displayFaviconUrl}
-        alt=""
-        aria-hidden
-        draggable={false}
-        // Why: transparent dark/light-mode favicons can disappear against tab
-        // chrome; a token-colored 1px shadow keeps the 12px mark legible.
-        className="size-3 mr-1 shrink-0 rounded-sm object-contain drop-shadow-[0_0_1px_var(--foreground)]"
-        onError={() => setFailedFavicon({ tabId, faviconUrl: displayFaviconUrl })}
-      />
-    )
-  }
-
-  return <Globe className="size-3 mr-1 shrink-0 text-blue-500" />
-}
-
 export default function BrowserTab({
   tab,
   isActive,
@@ -234,7 +189,11 @@ export default function BrowserTab({
           browser tabs at a glance even when the strip is saturated. We
           keep full color on both active and inactive tabs — dimming to
           muted-foreground made the icon read as "disabled" in practice. */}
-      <BrowserTabFavicon tabId={tab.id} faviconUrl={tab.faviconUrl} />
+      <BrowserFavicon
+        faviconUrl={tab.faviconUrl}
+        className="size-3 mr-1"
+        fallbackClassName="text-blue-500"
+      />
       {isPinned && <Pin className="mr-1 size-3 shrink-0 text-muted-foreground" aria-hidden />}
       <span className={`${TAB_LABEL_WIDTH_CLASSES} mr-1`}>{tabLabel}</span>
       {tab.loading && !tab.loadError && !isBlankBrowserTab(tab) && (
diff --git a/src/renderer/src/components/tab-bar/TabBarCreateEntry.history.test.tsx b/src/renderer/src/components/tab-bar/TabBarCreateEntry.history.test.tsx
index a1ec5fad293..57c24306ed2 100644
--- a/src/renderer/src/components/tab-bar/TabBarCreateEntry.history.test.tsx
+++ b/src/renderer/src/components/tab-bar/TabBarCreateEntry.history.test.tsx
@@ -169,6 +169,16 @@ describe('TabBarCreateEntry browser history rows', () => {
     expect(rowTexts().some((text) => text.includes('Open page'))).toBe(false)
   })
 
+  it('uses the favicon captured with a history entry', () => {
+    const faviconUrl = 'https://linear.app/favicon.ico'
+    historyStoreMock.entries = [historyEntry({ ...linear, faviconUrl })]
+    mount()
+
+    setQuery('linear')
+
+    expect(container.querySelector<HTMLImageElement>('[role="option"] img')?.src).toBe(faviconUrl)
+  })
+
   it('skips history for a path-shaped query and for a forced search', () => {
     pathLikeMock.value = true
     mount()
@@ -192,7 +202,8 @@ describe('TabBarCreateEntry browser history rows', () => {
         contentType: 'browser',
         pageId: 'page-1',
         workspaceId: 'ws-1',
-        url: 'https://linear.app/acme/team/ORC/active'
+        url: 'https://linear.app/acme/team/ORC/active',
+        faviconUrl: null
       }
     ]
     mount()
diff --git a/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.tsx b/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.tsx
index a55b9d82974..ea7e32210a8 100644
--- a/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.tsx
+++ b/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.tsx
@@ -16,6 +16,7 @@ import { translate } from '@/i18n/i18n'
 import { SEARCH_ENGINE_LABELS } from '../../../../shared/browser-url'
 import { formatBrowserHistoryUrl } from '@/lib/browser-history-match'
 import type { ActiveOption } from './tab-create-entry-active-option'
+import { BrowserFavicon } from '@/components/browser-favicon'
 
 export const RESULT_LISTBOX_ID = 'tab-create-entry-results'
 
@@ -138,7 +139,7 @@ function getOpenTabIcon(option: Extract<ActiveOption, { kind: 'tab' }>['option']
     return <TerminalSquare className="size-3.5 shrink-0" aria-hidden="true" />
   }
   if (contentType === 'browser') {
-    return <Globe className="size-3.5 shrink-0" aria-hidden="true" />
+    return <BrowserFavicon faviconUrl={option.faviconUrl} className="size-3.5" />
   }
   if (contentType === 'simulator') {
     return <Smartphone className="size-3.5 shrink-0" aria-hidden="true" />
@@ -191,7 +192,7 @@ function getActionPresentation(option: ActiveOption): {
       // Why the title is detail, not label: the label span is shrink-0 whenever a
       // detail shows, so a variable-length title there would refuse to truncate.
       detail: entry.title ? `${entry.title} · ${url}` : url,
-      icon: <Globe className="size-3.5 shrink-0" aria-hidden="true" />,
+      icon: <BrowserFavicon faviconUrl={entry.faviconUrl} className="size-3.5" />,
       label: translate('auto.components.tab.bar.TabBarCreateEntry.openPage', 'Open page'),
       showDetail: true
     }
diff --git a/src/renderer/src/components/tab-bar/open-tab-entry-dedupe.test.ts b/src/renderer/src/components/tab-bar/open-tab-entry-dedupe.test.ts
index c1d7adea0a6..57ed635f716 100644
--- a/src/renderer/src/components/tab-bar/open-tab-entry-dedupe.test.ts
+++ b/src/renderer/src/components/tab-bar/open-tab-entry-dedupe.test.ts
@@ -90,7 +90,8 @@ describe('dropFileEntriesCoveredByTabResults', () => {
         contentType: 'browser',
         pageId: 'page-1',
         url: 'https://example.com/zebra',
-        workspaceId: 'ws-1'
+        workspaceId: 'ws-1',
+        faviconUrl: null
       },
       {
         executionHostId: 'local',
diff --git a/src/renderer/src/components/tab-bar/open-tab-search.test.ts b/src/renderer/src/components/tab-bar/open-tab-search.test.ts
index e2029811625..665b5a460de 100644
--- a/src/renderer/src/components/tab-bar/open-tab-search.test.ts
+++ b/src/renderer/src/components/tab-bar/open-tab-search.test.ts
@@ -124,12 +124,14 @@ function makeBrowserPage({
   id,
   title,
   url = 'https://example.com/one',
+  faviconUrl = null,
   workspaceLabel = null,
   isCurrentPage = false
 }: {
   id: string
   title: string
   url?: string
+  faviconUrl?: string | null
   workspaceLabel?: string | null
   isCurrentPage?: boolean
 }): SearchableBrowserPage {
@@ -140,7 +142,7 @@ function makeBrowserPage({
     url,
     title,
     loading: false,
-    faviconUrl: null,
+    faviconUrl,
     canGoBack: false,
     canGoForward: false,
     loadError: null,
@@ -445,10 +447,11 @@ describe('searchOpenTabs result fields', () => {
   })
 
   it('carries the activation identifiers each source needs', () => {
+    const faviconUrl = 'https://example.com/favicon.ico'
     const results = search({
       query: 'zebra',
       workspaceTabs: [makeWorkspaceTab({ id: 'tab-1', title: 'Zebra tab' })],
-      browserPages: [makeBrowserPage({ id: 'page-1', title: 'Zebra page' })],
+      browserPages: [makeBrowserPage({ id: 'page-1', title: 'Zebra page', faviconUrl })],
       simulatorTabs: [makeSimulatorTab({ id: 'sim-1', label: 'Zebra emulator' })]
     })
 
@@ -467,7 +470,8 @@ describe('searchOpenTabs result fields', () => {
         contentType: 'browser',
         pageId: 'page-1',
         workspaceId: 'page-1-ws',
-        worktreeId: 'wt-1'
+        worktreeId: 'wt-1',
+        faviconUrl
       },
       {
         source: 'simulator',
diff --git a/src/renderer/src/components/tab-bar/open-tab-search.ts b/src/renderer/src/components/tab-bar/open-tab-search.ts
index 17353714d5e..05aa6126872 100644
--- a/src/renderer/src/components/tab-bar/open-tab-search.ts
+++ b/src/renderer/src/components/tab-bar/open-tab-search.ts
@@ -58,6 +58,7 @@ export type OpenTabSearchResult =
       pageId: string
       workspaceId: string
       url: string
+      faviconUrl: string | null
     })
   | (OpenTabSearchResultBase & {
       source: 'simulator'
@@ -206,7 +207,8 @@ export function searchOpenTabs({
       contentType: 'browser',
       pageId: result.pageId,
       workspaceId: result.workspaceId,
-      url: result.url
+      url: result.url,
+      faviconUrl: result.faviconUrl
     })),
     ...rank('simulator', searchSimulatorTabs([...simulatorTabs], trimmed), (result) => ({
       ...baseResult('simulator', result.tabId, result, executionHostId),
diff --git a/src/renderer/src/components/tab-bar/open-tab-selection-routing.test.ts b/src/renderer/src/components/tab-bar/open-tab-selection-routing.test.ts
index eba3a89bb03..5ab615702d1 100644
--- a/src/renderer/src/components/tab-bar/open-tab-selection-routing.test.ts
+++ b/src/renderer/src/components/tab-bar/open-tab-selection-routing.test.ts
@@ -63,7 +63,8 @@ const browserResult: OpenTabSearchResult = {
   contentType: 'browser',
   pageId: 'page-1',
   workspaceId: 'ws-1',
-  url: 'https://example.com/docs'
+  url: 'https://example.com/docs',
+  faviconUrl: null
 }
 
 const simulatorResult: OpenTabSearchResult = {
diff --git a/src/renderer/src/components/worktree-jump-palette-browser-simulator-rows.tsx b/src/renderer/src/components/worktree-jump-palette-browser-simulator-rows.tsx
index e19c735886c..3c88e3daf0c 100644
--- a/src/renderer/src/components/worktree-jump-palette-browser-simulator-rows.tsx
+++ b/src/renderer/src/components/worktree-jump-palette-browser-simulator-rows.tsx
@@ -1,5 +1,5 @@
 import type React from 'react'
-import { Globe, Smartphone } from 'lucide-react'
+import { Smartphone } from 'lucide-react'
 import { CommandItem } from '@/components/ui/command'
 import { RepoBadgeMark } from '@/components/repo/RepoBadgeLabel'
 import { getPaletteHostBadge } from '@/components/cmd-j/palette-host-badge'
@@ -15,6 +15,7 @@ import {
 } from './worktree-jump-palette-primitives'
 import { formatPaletteSessionAge } from '@/components/cmd-j/palette-session-age'
 import { resolvePaletteRepoForWorktree } from '@/lib/palette-repo-resolution'
+import { BrowserFavicon } from '@/components/browser-favicon'
 
 export function WorktreeJumpPaletteSimulatorRow({
   entry,
@@ -147,7 +148,7 @@ export function WorktreeJumpPaletteBrowserRow({
       )}
     >
       <div className="flex h-5 w-4 shrink-0 items-center justify-center self-start text-muted-foreground/85">
-        <Globe className="size-3.5" aria-hidden="true" />
+        <BrowserFavicon faviconUrl={result.faviconUrl} className="size-3.5" />
       </div>
       <div className="min-w-0 flex-1 overflow-hidden">
         <div className="flex items-center justify-between gap-2.5">
diff --git a/src/renderer/src/lib/browser-palette-search.test.ts b/src/renderer/src/lib/browser-palette-search.test.ts
index 41cfd58f54d..759e1cc5421 100644
--- a/src/renderer/src/lib/browser-palette-search.test.ts
+++ b/src/renderer/src/lib/browser-palette-search.test.ts
@@ -102,6 +102,26 @@ describe('browser-palette-search', () => {
     expect(result.executionHostId).toBe('ssh:box')
   })
 
+  it('carries the page favicon into palette results', () => {
+    const faviconUrl = 'https://example.com/favicon.ico'
+    const [result] = searchBrowserPages(
+      [
+        makeEntry({
+          page: makePage({ faviconUrl }),
+          workspace: makeWorkspace(),
+          worktree: makeWorktree(),
+          repoName: 'repo/one',
+          worktreeSortIndex: 0,
+          isCurrentPage: false,
+          isCurrentWorktree: false
+        })
+      ],
+      ''
+    )
+
+    expect(result.faviconUrl).toBe(faviconUrl)
+  })
+
   it('keeps empty-query ordering deterministic and context-first', () => {
     const results = searchBrowserPages(
       [
diff --git a/src/renderer/src/lib/browser-palette-search.ts b/src/renderer/src/lib/browser-palette-search.ts
index 1529c46860e..0cd9f7e0618 100644
--- a/src/renderer/src/lib/browser-palette-search.ts
+++ b/src/renderer/src/lib/browser-palette-search.ts
@@ -42,6 +42,7 @@ export type BrowserPaletteSearchResult = {
   workspaceId: string
   worktreeId: string
   title: string
+  faviconUrl: string | null
   /** Raw page URL, so callers can dedupe a row against another list of destinations. */
   url: string
   secondaryText: string
@@ -153,6 +154,7 @@ function baseResult(entry: SearchableBrowserPage): BrowserPaletteSearchResult {
     workspaceId: entry.workspace.id,
     worktreeId: entry.worktree.id,
     title: entry.page.title || formattedUrl,
+    faviconUrl: entry.page.faviconUrl,
     url: entry.page.url,
     secondaryText: formattedUrl,
     workspaceLabel: entry.workspace.label ?? null,
diff --git a/src/renderer/src/store/slices/browser.test.ts b/src/renderer/src/store/slices/browser.test.ts
index ba014db3aa3..fc1620871d5 100644
--- a/src/renderer/src/store/slices/browser.test.ts
+++ b/src/renderer/src/store/slices/browser.test.ts
@@ -302,6 +302,53 @@ describe('createBrowserSlice annotations', () => {
     expect(store.getState().browserTabsByWorktree).toBe(browserTabsByWorktree)
   })
 
+  it('persists a captured favicon with history and refreshes it with the page state', () => {
+    const store = createTestStore()
+    const tab = store.getState().createBrowserTab('wt-1', 'https://example.com', {
+      title: 'Example'
+    })
+    const pageId = tab.activePageId
+    if (!pageId) {
+      throw new Error('Expected a new browser page')
+    }
+    const initialFavicon = 'https://example.com/favicon.ico'
+    const refreshedFavicon = 'https://cdn.example.com/favicon.png'
+
+    store.getState().addBrowserHistoryEntry('https://example.com', 'Example', initialFavicon)
+    expect(store.getState().browserUrlHistory[0]?.faviconUrl).toBe(initialFavicon)
+
+    store.getState().updateBrowserPageState(pageId, { faviconUrl: refreshedFavicon })
+    expect(store.getState().browserUrlHistory[0]?.faviconUrl).toBe(refreshedFavicon)
+  })
+
+  it('clears a stale history favicon when a page reports none, and keeps it when none is reported', () => {
+    const store = createTestStore()
+    const tab = store.getState().createBrowserTab('wt-1', 'https://example.com', {
+      title: 'Example'
+    })
+    const pageId = tab.activePageId
+    if (!pageId) {
+      throw new Error('Expected a new browser page')
+    }
+    const favicon = 'https://example.com/favicon.ico'
+
+    store.getState().addBrowserHistoryEntry('https://example.com', 'Example', favicon)
+    store.getState().updateBrowserPageState(pageId, { faviconUrl: favicon })
+
+    // An omitted favicon leaves the stored one alone; an explicit null clears it.
+    store.getState().addBrowserHistoryEntry('https://example.com', 'Example')
+    expect(store.getState().browserUrlHistory[0]?.faviconUrl).toBe(favicon)
+
+    store.getState().updateBrowserPageState(pageId, { faviconUrl: null })
+    expect(store.getState().browserUrlHistory[0]?.faviconUrl).toBeNull()
+
+    store.getState().addBrowserHistoryEntry('https://example.com', 'Example', favicon)
+    expect(store.getState().browserUrlHistory[0]?.faviconUrl).toBe(favicon)
+
+    store.getState().addBrowserHistoryEntry('https://example.com', 'Example', null)
+    expect(store.getState().browserUrlHistory[0]?.faviconUrl).toBeNull()
+  })
+
   it('repairs a stale active browser unified-tab label on an otherwise unchanged title update', () => {
     const store = createTestStore()
     const tab = store.getState().createBrowserTab('wt-1', 'https://example.com', {
diff --git a/src/renderer/src/store/slices/browser/browser-history-actions.ts b/src/renderer/src/store/slices/browser/browser-history-actions.ts
index 97ebf8b873b..85c5b4f5479 100644
--- a/src/renderer/src/store/slices/browser/browser-history-actions.ts
+++ b/src/renderer/src/store/slices/browser/browser-history-actions.ts
@@ -60,7 +60,7 @@ export function createBrowserHistoryActions(
       })
     },
 
-    addBrowserHistoryEntry: (url, title) => {
+    addBrowserHistoryEntry: (url, title, faviconUrl) => {
       const safeUrl = redactKagiSessionToken(url)
       if (safeUrl === ORCA_BROWSER_BLANK_URL || safeUrl === 'about:blank' || !safeUrl) {
         return
@@ -71,7 +71,13 @@ export function createBrowserHistoryActions(
         let next: BrowserHistoryEntry[] = existing
           ? s.browserUrlHistory.map((entry) =>
               entry === existing
-                ? { ...entry, title, lastVisitedAt: Date.now(), visitCount: entry.visitCount + 1 }
+                ? {
+                    ...entry,
+                    title,
+                    ...(faviconUrl !== undefined ? { faviconUrl } : {}),
+                    lastVisitedAt: Date.now(),
+                    visitCount: entry.visitCount + 1
+                  }
                 : entry
             )
           : [
@@ -79,6 +85,7 @@ export function createBrowserHistoryActions(
                 url: safeUrl,
                 normalizedUrl: normalized,
                 title,
+                ...(faviconUrl !== undefined ? { faviconUrl } : {}),
                 lastVisitedAt: Date.now(),
                 visitCount: 1
               },
diff --git a/src/renderer/src/store/slices/browser/browser-page-state-actions.ts b/src/renderer/src/store/slices/browser/browser-page-state-actions.ts
index 15e4892b351..83aa3c23673 100644
--- a/src/renderer/src/store/slices/browser/browser-page-state-actions.ts
+++ b/src/renderer/src/store/slices/browser/browser-page-state-actions.ts
@@ -9,6 +9,7 @@ import {
   normalizeBrowserTitle,
   normalizeUrl
 } from '../browser-page-records'
+import { normalizeBrowserHistoryUrl } from '../../../../../shared/workspace-session-browser-history'
 
 export function createBrowserPageStateActions(
   set: BrowserSliceSet,
@@ -100,6 +101,17 @@ export function createBrowserPageStateActions(
             [workspace.id]: nextPages
           }
         }
+        if (updates.faviconUrl !== undefined && updates.faviconUrl !== page.faviconUrl) {
+          const historyIndex = s.browserUrlHistory.findIndex(
+            (entry) => entry.normalizedUrl === normalizeBrowserHistoryUrl(page.url)
+          )
+          const historyEntry = s.browserUrlHistory[historyIndex]
+          if (historyEntry && historyEntry.faviconUrl !== updates.faviconUrl) {
+            nextState.browserUrlHistory = s.browserUrlHistory.map((entry, index) =>
+              index === historyIndex ? { ...entry, faviconUrl: updates.faviconUrl } : entry
+            )
+          }
+        }
         if (!browserWorkspaceMirrorFieldsEqual(workspace, nextWorkspace)) {
           nextState.browserTabsByWorktree = {
             ...s.browserTabsByWorktree,
diff --git a/src/renderer/src/store/slices/browser/browser-slice-contract.ts b/src/renderer/src/store/slices/browser/browser-slice-contract.ts
index c5577aaf0c4..ee50fa1a087 100644
--- a/src/renderer/src/store/slices/browser/browser-slice-contract.ts
+++ b/src/renderer/src/store/slices/browser/browser-slice-contract.ts
@@ -239,7 +239,7 @@ export type BrowserSlice = {
   ) => Promise<BrowserCookieImportExecutionResult>
   clearDefaultSessionCookies: () => Promise<boolean>
   browserUrlHistory: BrowserHistoryEntry[]
-  addBrowserHistoryEntry: (url: string, title: string) => void
+  addBrowserHistoryEntry: (url: string, title: string, faviconUrl?: string | null) => void
   workspaceDocHistory: WorkspaceDocHistoryEntry[]
   /** A visit bumps recency and count; a title-only refresh (bump: false) renames the row. */
   recordWorkspaceDocVisit: (
diff --git a/src/shared/browser-workspace-types.ts b/src/shared/browser-workspace-types.ts
index 5b2a1e7f33d..ecab57c8783 100644
--- a/src/shared/browser-workspace-types.ts
+++ b/src/shared/browser-workspace-types.ts
@@ -2,6 +2,7 @@ export type BrowserHistoryEntry = {
   url: string
   normalizedUrl: string
   title: string
+  faviconUrl?: string | null
   lastVisitedAt: number
   visitCount: number
 }
diff --git a/src/shared/workspace-session-browser-schema.ts b/src/shared/workspace-session-browser-schema.ts
index 71f88fb3b0c..159905e5ab9 100644
--- a/src/shared/workspace-session-browser-schema.ts
+++ b/src/shared/workspace-session-browser-schema.ts
@@ -117,6 +117,7 @@ const browserHistoryEntrySchema = z.object({
   url: z.string(),
   normalizedUrl: z.string(),
   title: z.string(),
+  faviconUrl: z.string().nullable().optional(),
   lastVisitedAt: z.number(),
   visitCount: z.number()
 })
diff --git a/src/shared/workspace-session-schema.test.ts b/src/shared/workspace-session-schema.test.ts
index 66e2ddcc514..81bc37b6b65 100644
--- a/src/shared/workspace-session-schema.test.ts
+++ b/src/shared/workspace-session-schema.test.ts
@@ -504,6 +504,7 @@ describe('parseWorkspaceSession', () => {
         url: `https://example.com/${index}`,
         normalizedUrl: `https://example.com/${index}`,
         title: `Example ${index}`,
+        faviconUrl: index === 0 ? 'https://example.com/favicon.ico' : null,
         lastVisitedAt: 1_700_000_000_000 - index,
         visitCount: 1
       }))
@@ -512,6 +513,9 @@ describe('parseWorkspaceSession', () => {
     expect(result.ok).toBe(true)
     if (result.ok) {
       expect(result.value.browserUrlHistory).toHaveLength(MAX_BROWSER_HISTORY_ENTRIES)
+      expect(result.value.browserUrlHistory?.[0]?.faviconUrl).toBe(
+        'https://example.com/favicon.ico'
+      )
       expect(result.value.browserUrlHistory?.at(-1)?.url).toBe('https://example.com/199')
     }
   })

From 6062edf2962e1dc33c09d1be6bfd5a9469e969b8 Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 10:39:46 -0700
Subject: [PATCH 50/92] test: simplify remote pane link routing to
 server-hosted placement (#18219)

Remote-pane links are now explicitly server-hosted regardless of generic
client-hosted preference. Remove client-hosted placement verification,
placement-switching test acts, and related type definitions. Focus the
test on verifying the core invariant: links stay server-hosted on their
owning runtime.
---
 ...d-remote-browser-link-open-routing.spec.ts | 139 ++++--------------
 1 file changed, 29 insertions(+), 110 deletions(-)

diff --git a/tests/e2e/paired-remote-browser-link-open-routing.spec.ts b/tests/e2e/paired-remote-browser-link-open-routing.spec.ts
index 695d39c251b..a8b15d97a03 100644
--- a/tests/e2e/paired-remote-browser-link-open-routing.spec.ts
+++ b/tests/e2e/paired-remote-browser-link-open-routing.spec.ts
@@ -1,7 +1,6 @@
 import { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http'
 import type { AddressInfo } from 'node:net'
 import type { Page } from '@stablyai/playwright-test'
-import { parseBrowserNetworkExecutionHostKey } from '../../src/main/browser/browser-network-execution-route'
 import { LOCAL_EXECUTION_HOST_ID } from '../../src/shared/execution-host'
 import { readOwnedPageUrls } from './helpers/client-hosted-browser-observer'
 import {
@@ -16,11 +15,8 @@ import {
 } from './helpers/paired-electron-client'
 
 // The link is a dev-server URL on the pane runtime's network, so a client-local fallback would
-// silently load a *different machine's* server. Which machine renders the pixels no longer answers
-// that: under client-hosted placement the guest paints on this desktop while its network is still
-// pinned to the host at creation. So each act below pins the placement it was written for and reads
-// the host's own record — the page row's placement and executionHostKey — instead of inferring
-// routing from where a <webview> appeared.
+// silently load a *different machine's* server. Remote-pane links are explicitly server-hosted, so
+// the acts below read the host's own record instead of inferring routing from a <webview>.
 
 const PANE_PATH = '/remote-pane'
 const LINK_PATH = '/remote-link-target'
@@ -103,56 +99,6 @@ async function readHostServerPlacedBrowserUrls(
   return response.result.tabs.filter((tab) => tab.type === 'browser').map((tab) => tab.url ?? '')
 }
 
-type HostBrowserRow = {
-  executionHostKey: string | null
-  placementKind: string | null
-  url: string
-}
-
-/**
- * The host's rows for one URL, asked through the paired client's connection.
- *
- * Why through the client: an Electron peer advertises the client-host capability, so the host
- * answers it with client-placed pages intact and with the placement and network pin it minted at
- * creation. The host still authors every field; the client is only the transport.
- */
-async function readHostBrowserRows(
-  page: Page,
-  environmentId: string,
-  worktreeId: string,
-  urlPrefix: string
-): Promise<HostBrowserRow[]> {
-  return page.evaluate(
-    async ({ environmentId, urlPrefix, worktreeId }) => {
-      const response = await window.api.runtimeEnvironments.call({
-        selector: environmentId,
-        method: 'session.tabs.list',
-        params: { worktree: `id:${worktreeId}` },
-        timeoutMs: 15_000
-      })
-      if (!response.ok) {
-        throw new Error('host session tab inventory unavailable')
-      }
-      const { tabs } = response.result as {
-        tabs: {
-          type: string
-          url?: string
-          executionHostKey?: string
-          placement?: { kind: string }
-        }[]
-      }
-      return tabs
-        .filter((tab) => tab.type === 'browser' && (tab.url ?? '').startsWith(urlPrefix))
-        .map((tab) => ({
-          executionHostKey: tab.executionHostKey ?? null,
-          placementKind: tab.placement?.kind ?? null,
-          url: tab.url ?? ''
-        }))
-    },
-    { environmentId, urlPrefix, worktreeId }
-  )
-}
-
 /** Under server placement the client renders nothing itself, so any <webview> is a local fallback. */
 async function readLocalBrowserViewUrls(page: Page): Promise<string[]> {
   return page.evaluate(() =>
@@ -183,7 +129,6 @@ async function findMirroredPage(
 ): Promise<{
   handleEnvironmentId: string | null
   pageId: string
-  placementKind: string | null
 } | null> {
   return page.evaluate(
     ({ url, worktreeId }) => {
@@ -194,8 +139,7 @@ async function findMirroredPage(
             const handle = state?.remoteBrowserPageHandlesByPageId[browserPage.id]
             return {
               handleEnvironmentId: handle?.environmentId ?? null,
-              pageId: browserPage.id,
-              placementKind: handle?.placement?.kind ?? null
+              pageId: browserPage.id
             }
           }
         }
@@ -277,7 +221,7 @@ async function openLinkFromRemotePaneContextMenu(page: Page): Promise<void> {
   await openInOrca.click()
 }
 
-test('opens a remote pane link on the pane runtime under either placement and refuses to fall back to the client', async ({
+test('opens a remote pane link on the pane runtime and refuses to fall back to the client', async ({
   testRepoPath
 }, testInfo) => {
   test.setTimeout(300_000)
@@ -286,8 +230,7 @@ test('opens a remote pane link on the pane runtime under either placement and re
   let client: PairedElectronClient | null = null
 
   try {
-    const hostRuntimeId = (await host.client.call('repo.add', { path: testRepoPath, kind: 'git' }))
-      ._meta.runtimeId
+    await host.client.call('repo.add', { path: testRepoPath, kind: 'git' })
     client = await launchPairedElectronClient(host.offer, testInfo, 'Remote browser link routing')
     const page = client.page
     const environmentId = client.environmentId
@@ -382,89 +325,65 @@ test('opens a remote pane link on the pane runtime under either placement and re
       )
       .toBe(0)
     await focusMirroredPage(page, worktreeId, pane.pageId)
-    const linkLoadsBeforeClientAct = fixture.linkLoadCount()
+    const linkLoadsBeforeSecondAct = fixture.linkLoadCount()
 
-    // Act 2: client-hosted placement, the default. The page is hosted by this desktop, so the
-    // proof of correct routing is the host's record of it, not where it painted.
+    // Act 2 still stays server-hosted even when the generic client-hosted preference is enabled:
+    // the remote pane explicitly pins links to its owning runtime.
     await pinClientHostedPlacement(page, true)
     await openLinkFromRemotePaneContextMenu(page)
 
-    await expect
-      .poll(
-        async () => (await findMirroredPage(page, worktreeId, fixture.linkUrl))?.placementKind,
-        {
-          timeout: 60_000,
-          message: 'the link never became a client-hosted browser page on this desktop'
-        }
-      )
-      .toBe('client')
-    // The host's own connection, unprojected: browser.tabList reads the page registry, which is
-    // where a client-hosted page lives.
     await expect
       .poll(
         async () =>
-          (await readHostBrowserPageUrls(host.client, worktreeSelector)).filter((url) =>
+          (await readHostServerPlacedBrowserUrls(host, worktreeId)).filter((url) =>
             url.startsWith(fixture.linkUrl)
           ).length,
-        { timeout: 60_000, message: 'the link never became a browser page on the host runtime' }
+        {
+          timeout: 60_000,
+          message: 'the owner-pinned link did not stay server-hosted'
+        }
       )
       .toBe(1)
-    const hostRows = await readHostBrowserRows(page, environmentId, worktreeId, fixture.linkUrl)
-    expect(hostRows).toHaveLength(1)
-    expect(hostRows[0]?.placementKind).toBe('client')
-    // The routing invariant, structurally: the host pinned this page's network to its own runtime
-    // when it created it, so the dev server was reached through the runtime and not through this
-    // machine — which CI cannot tell apart by watching the fixture, since both ends are loopback.
-    const executionHostKey = hostRows[0]?.executionHostKey
-    if (!executionHostKey) {
-      // Narrowed before parsing: an unpinned page would otherwise surface as a parse crash rather
-      // than as the missing network pin it is.
-      throw new Error('the host minted no network pin for the client-hosted page')
-    }
-    expect(parseBrowserNetworkExecutionHostKey(executionHostKey)).toMatchObject({
-      runtimeId: hostRuntimeId
-    })
-    expect(fixture.linkLoadCount()).toBeGreaterThan(linkLoadsBeforeClientAct)
-    // Hosted here, streamed from nowhere: this desktop holds the page and the runtime holds none.
+    expect(fixture.linkLoadCount()).toBeGreaterThan(linkLoadsBeforeSecondAct)
     await expect
-      .poll(() => readOwnedPageUrls(client!.app, fixture.linkUrl), {
+      .poll(() => readOwnedPageUrls(host.app, fixture.linkUrl), {
         timeout: 60_000,
-        message: 'the client-hosted guest never loaded the link on this desktop'
+        message: 'the server-hosted guest never loaded the link on the pane runtime'
       })
       .toHaveLength(1)
-    expect(await readOwnedPageUrls(host.app, fixture.linkUrl)).toHaveLength(0)
-    await expect(page.getByTestId('remote-browser-pane')).toHaveCount(paneCountBeforeOpen)
+    expect(await readOwnedPageUrls(client!.app, fixture.linkUrl)).toHaveLength(0)
+    expect(await readLocalBrowserViewUrls(page)).toHaveLength(0)
+    await expect(page.getByTestId('remote-browser-pane')).toHaveCount(paneCountBeforeOpen + 1)
 
-    // The store drops the tab synchronously and only then fires browser.tabClose, so the mirror
-    // going empty proves nothing about the host or the guest. Settle both before act 3 baselines
-    // them, or act 3 reads this teardown landing mid-act as its own doing.
+    // The store drops the tab synchronously and only then fires browser.tabClose, so settle the
+    // mirror, host inventory, and host guest before act 3 reads them as its own baseline.
     await closeBrowserTabsExceptPane(page, worktreeId, fixture.paneUrl)
     await expect
       .poll(() => findMirroredPage(page, worktreeId, fixture.linkUrl), {
         timeout: 60_000,
-        message: 'the client kept the closed link tab'
+        message: 'the client kept the closed owner-pinned link tab'
       })
       .toBeNull()
     await expect
       .poll(
         async () =>
-          (await readHostBrowserPageUrls(host.client, worktreeSelector)).filter((url) =>
+          (await readHostServerPlacedBrowserUrls(host, worktreeId)).filter((url) =>
             url.startsWith(fixture.linkUrl)
           ).length,
-        { timeout: 60_000, message: 'the runtime kept the closed client-hosted page' }
+        { timeout: 60_000, message: 'the runtime kept the closed server-hosted page' }
       )
       .toBe(0)
     await expect
-      .poll(() => readOwnedPageUrls(client!.app, fixture.linkUrl), {
+      .poll(() => readOwnedPageUrls(host.app, fixture.linkUrl), {
         timeout: 60_000,
-        message: 'the client-hosted guest outlived the tab that owned it'
+        message: 'the server-hosted guest outlived the tab that owned it'
       })
       .toHaveLength(0)
     await focusMirroredPage(page, worktreeId, pane.pageId)
 
-    // Act 3: the user moves this workspace onto their own machine while the runtime's page is
-    // still on screen. Opening the link must fail in the pane, not load the runtime's dev server
-    // here — the client has no business serving a page for a workspace it does not run.
+    // Act 3: the user moves this workspace onto their own machine. Opening the remote pane link
+    // must fail in the pane, not load the runtime's dev server here — the client has no business
+    // serving a page for a workspace it does not run.
     await page.evaluate(
       ({ localHostId, worktreeId }) => {
         window.__store?.getState().setActiveWorktree(worktreeId, localHostId)

From 61e010079f769f40cff39aef09f9788c13c3257d Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 11:00:24 -0700
Subject: [PATCH 51/92] New agent dashboard (#18222)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* more obvious toggle

* more obvious toggle

* feat(activity): redesign thread rows and add child agent filtering

- Emphasize task title and last activity in row layout over metadata
- Add child agent toggle; hide orchestration workers by default
- Support collapsible groups and ungrouped view mode
- Improve orchestration worker message handling to surface replies
- Add sidebar search and filter controls for agent activity

* periodic checkin

* feat(activity): add "Clear completed" action and performance improvement

- Add "Clear completed" action for activity threads with undo window; clears completed and interrupted rows from view, persists across restart
- Virtualize activity thread list to render only viewport-bounded rows
- Cache activity thread search text to prevent recomputation on every keystroke
- Cache dashboard bucket counts per-worktree for selective invalidation on unrelated changes
- Use useDeferredValue for activity search filtering to keep input responsive
- Make compact mode the default display for activity threads
- Add activity-cleared-at persisted state tracking (per-pane cutoff timestamps)

* improve style

* minor change

* feat(activity): add persisted host and project filters to agents view

Agents scope filters are deliberately separate from workspace-nav filters so a monitoring surface never inherits workspace context silently. Filters survive restarts and always display an active-filter chips row with hidden count, making filtering visible and reversible.

* Graduate Agents view from experimental, refine activity handling

- Agents Dashboard moves from experimental to standard feature with showAgentsSidebar setting controlling visibility
- Add identity-checked cache eviction (dropPersisted IPC) to prevent newer runs from being evicted when UI clears older status, fixing clear-completed safety
- Extract ActivityThreadHoverCardSummary and ActivityThreadListToolbar components for better organization and reusability
- Implement mark-thread-read as separate action from select with clickable bell icon
- Add hasActivityThreadWorkspace helper for checking workspace availability across hosts (SSH/runtime targets)
- Preserve scope filter array identity during hydration for memo optimization
- Track manually-unread turns in auto-ack to prevent re-acknowledgement
- Clean up activity cleared-at cutoffs on pane retirement
- Remove activity-thread-hover-card max-lines lint override (code refactored below threshold)

* Refactor agent cache identity to use timing fields only

- Simplify AgentStatusCacheIdentity: keep only paneKey, receivedAt, stateStartedAt
- This fixes silent no-ops where renderer-enriched fields diverged from main's cache
- Add worktree-jump-navigation for navigating activity to workspaces
- Add manual mark-unread protection separate from auto-ack
- Optimize activity owner resolution with per-build memoization
- Optimize detected worktree lookup with indexed search

* Remove sticky header, add scroll position persistence

Replace the floating sticky header overlay with scroll position memory via
a ref. This preserves the user's scroll location when switching between
threads or remounting the agents list, improving UX without requiring
React state.

* Implement sticky group headers in activity thread list

Keep group headers visible at the top while scrolling when threads are grouped. Headers stick to the viewport while their section is in view, then unstick as the next header approaches.

* add blue flash

* update settings appearnce

* Extracted activity acknowledgement/clearance actions from the oversized UI slice.
  - Removed dead sidebar search/menu props and the unused search ref.
  - Removed the unnecessary sidebar visibility bitmask.
  - Replaced hardcoded sidebar toggle colors with design-system tokens.
  - Removed duplicate “mark all read / clear completed” controls in the sidebar.
  - Preserved manual-unread state correctly across pane retire, transfer, and drop.
  - Made clear-completed cutoffs monotonic so clock skew cannot resurrect old activity.
  - Fixed blank workspace names in hover cards with the existing fallback helper.
  - Added missing localization entries and stabilized hydrated filter array identity.
  - Updated misleading Agents setting copy to describe both sidebar surfaces.

* add onboarding guide for the new agents panel

* Add activity clearance tracking and synced agent view settings

Agent view filters and presentation settings now sync across paired clients.
Preserves per-pane activity clearance cutoffs in persistent state. Improves
activity thread row accessibility with proper ARIA roles, and preserves
terminal host ownership after pane teardown via retained terminal handle.

* rm html

* Graduate Agents from experimental and improve activity visibility

- Migrate `showAgentsSidebar` setting from legacy experimental flags; default new profiles to the agents sidebar
- Replace scoped-thread filtering with visible-thread filtering so bulk actions (mark all read, clear completed) only affect rendered rows
- Rewrite child agent classification as a set of visible pane keys to fix orphan promotion and parent-cycle handling
- Improve activity cleared-at cutoff lifecycle: preserve on row dismissal (pane may still be live) but clear on pane removal
- Add pagehide flush for pending clear-completed evictions so quit/reload cannot replay cleared activity
- Polish agents sidebar: unread count badge, expand button, onboarding intro for migrated/new users
- Extract shared time-ago formatting to a library module
- Fix scroll restoration to defer until content can contain the saved offset
- Improve stable message hold for compact agent rows using state instead of refs
- Add worktree filter-visibility check to distinguish collapsed-but-unfiltered from filtered-hidden

* Graduate Agents from experimental and improve activity visibility

- Remove the deprecated full-page Agents view; fix settings navigation fallback
- Refactor bulk action bindings and separate mark-all-read from visible threads
- Preserve sidebar collapse state across remounts; fix child-agent badge filtering
- Add safety window for scroll-restore and improve worktree host-qualified filtering

* Graduate Agents from experimental and add manual unread tracking

- Move Agents sidebar from experimental settings to standard feature with intro flow
- Add persistent manual unread turn tracking for activity feed
- Consolidate workspace activation through activateAndRevealWorkspace dispatcher
- Improve sidebar view toggle with radio semantics and arrow-key navigation

* Graduate Agents sidebar and separate dashboard experiment

The Agents tab now has its own `showAgentsSidebar` setting (defaults on) independent from the dashboard popout experiment. Activity unread counting is simplified to count all events uniformly without mode-specific filtering. Dashboard visibility is now controlled solely by `experimentalAgentDashboardPopout`, with its own UI in the Experimental settings pane. Migration path updated: only `experimentalActivity=true` graduates to the sidebar; the dashboard experiment remains separate.

* Add agent-session tab support to activity tracking

Build activity event contexts from structured agent-session tabs and
worktree-attributed status entries. When activating a thread, try
agent-session tab activation before falling back to terminal pane.

* • The workspace sidebar tab is now a static Spaces
  label—no grouping-based “Projects” label or hidden
  width-reservation span.

* Show unread count badge and prioritize attention-needing agent threads

Activity group order now surfaces threads needing attention (blocked,
waiting, interrupted) before working/done so they're never buried. The
Agents tab shows an unread count badge while viewing Spaces, since the
open Agents list already highlights unread rows.

Also improves UX text ("Hide Agents" vs "Maybe later"), accessibility
with proper ARIA labels, and handles edge cases: preserves read state
for retained panes on SSH reconnect and handles deleted worktrees
gracefully in navigation.

* Batch agent-status evictions and optimize activity pane rebuilds

- Add dropPersistedStatusEntries batch API; consolidate evictions into one persist
- Implement fallback timeout in clear-completed for unseen toast callbacks
- Project only activity-relevant tabs; memoize terminal tab derivations
- Stabilize activity virtualizer key to prevent unnecessary item measurements

* Remove unread count badge from Agents sidebar tab

Simplify useActivityUnreadCount by removing the enabled parameter and
conditional logic, as the badge is no longer displayed in the UI.

* Deduplicate activity unread counts across source overlaps

Live pane status is the primary source; retained and migration entries
serve as fallback caches that may briefly overlap it during lifecycle
transitions. Count each pane only once by tracking seen keys, prioritizing
the live status as the canonical source.

Also fix monitoring state display: it's a distinct agent state, not a
tool-running row state, so exclude it from tool preview checks.

* Update activity pane tests to remove unread badge assertions

- Remove ActivityPaneVisibility type and readActivityPaneVisibility() helper
- Update agentsSidebarButton selector to match badge-less state
- Simplify assertions to check pane focus instead of visibility isolation
- Remove test for unread badge acknowledgement flow

* Fix activity pane workspace resolution and localization handling

- Thread defaultHostId through activity operations for correct host resolution
- Add language-aware caching for standalone terminal names with cache invalidation
- Fix scroll restoration bounds calculation for tall viewports
- Add focus management to sidebar radio group keyboard navigation
- Refresh localized sidebar content on language changes
- Preserve activity state across heartbeats to prevent history loss
- Improve host-id strictness in worktree jump navigation

* Preserve activity view when settings fetch fails

A failed window.api.settings.get() leaves settings null, which was
incorrectly treated as opt-out. Add the missing null check so the
activity-view gate only applies when settings are available.

Includes tests for this scenario and related edge cases in keyboard
navigation, worktree jumping, and session state handling.
---
 docs/reference/wsl-probe-failure-semantics.md |  10 +-
 .../server-status-listener-fanout.test.ts     | 138 +++++
 src/main/agent-hooks/server/server-cleanup.ts |  46 ++
 src/main/ipc/agent-hooks.test.ts              |  72 +++
 src/main/ipc/agent-status-row-teardown-ipc.ts |  53 +-
 .../applying-settings/ui-state-read.ts        |   1 +
 .../applying-settings/ui-state-update.ts      |   4 +
 .../normalize-loaded-global-settings.test.ts  |  80 +++
 .../normalize-loaded-global-settings.ts       |  11 +
 .../workspace-session-snapshot-publication.ts |  26 +-
 .../pane-key-remapping.test.ts                |  33 ++
 .../restoring-sessions/pane-key-remapping.ts  |  75 +++
 .../workspace-pane-normalization.ts           |  86 ++--
 .../client-ui-pairing-local-fields.test.ts    |   8 +-
 .../runtime/rpc/methods/client-ui-schemas.ts  |   6 +
 src/preload/api/agent-status-api.ts           |   5 +
 src/preload/api/agent-status-bridge.ts        |   7 +
 .../app-shell/use-app-startup-hydration.ts    |  10 +
 .../src/app-shell/use-persisted-ui-writer.ts  |   6 +-
 .../activity/ActivityPrototypePage.test.ts    |  44 +-
 ...ivityPrototypePage.thread-grouping.test.ts |  13 +
 .../activity/ActivityPrototypePage.tsx        | 160 +++---
 .../ActivityThreadOptionsMenu.test.tsx        | 150 ++++++
 .../activity/ActivityTitlebarControls.tsx     |   2 +-
 ...vity-auto-mark-read-loop.react185.test.tsx |   2 +-
 .../activity/activity-clear-completed.test.ts | 362 +++++++++++++
 .../activity/activity-clear-completed.ts      | 206 ++++++++
 .../activity/activity-event-build-cache.ts    | 129 +++++
 ...tivity-event-builder-agent-context.test.ts | 165 ++++++
 .../activity-event-builder-context.ts         | 182 +++++++
 .../activity-event-builder-sources.ts         | 105 ++++
 ...vity-event-builder.bounded-history.test.ts | 122 +++++
 ...ivity-event-builder.host-ownership.test.ts | 206 ++++++++
 ...ivity-event-builder.identity-reuse.test.ts | 225 ++++++++
 .../activity/activity-event-builder.ts        | 306 ++++-------
 .../components/activity/activity-event-cap.ts |   3 +-
 .../activity/activity-pane-events.ts          | 108 ++++
 .../activity-scope-filter-controls.tsx        | 170 ++++++
 .../activity/activity-scope-filter.test.ts    | 130 +++++
 .../activity/activity-scope-filter.ts         |  80 +++
 .../activity/activity-standalone-worktree.ts  |  67 +++
 .../activity/activity-tab-projection.ts       |  66 +++
 .../activity/activity-thread-actions.test.ts  | 162 ++++++
 .../activity/activity-thread-actions.ts       | 101 +++-
 .../activity/activity-thread-builder.ts       |  89 +++-
 .../activity-thread-child-agent.test.ts       | 171 +++++++
 .../activity/activity-thread-child-agent.ts   |  90 ++++
 .../activity-thread-collapse-context.ts       |  13 +
 .../activity/activity-thread-controls.tsx     | 130 +++--
 ...ivity-thread-grouping.search-cache.test.ts |  53 ++
 .../activity/activity-thread-grouping.ts      |  41 +-
 .../activity-thread-hover-card-summary.tsx    | 230 +++++++++
 .../activity-thread-hover-card.test.tsx       | 238 +++++++++
 .../activity/activity-thread-hover-card.tsx   | 407 +++++++++++++++
 ...vity-thread-list-pane-collapsible.test.tsx | 292 +++++++++++
 .../activity/activity-thread-list-pane.tsx    | 484 ++++++++++++------
 ...y-thread-list-pane.virtualization.test.tsx | 237 +++++++++
 .../activity-thread-list-resize-handle.tsx    |  37 ++
 .../activity/activity-thread-list-toolbar.tsx | 227 ++++++++
 .../activity/activity-thread-options-menu.tsx | 291 +++++++++++
 .../activity-thread-presentation.test.ts      |  97 ++++
 .../activity/activity-thread-presentation.ts  |  60 ++-
 .../activity/activity-thread-row.tsx          | 318 ++++++------
 .../activity/activity-thread-types.ts         |   2 +-
 .../activity-thread-virtual-items.test.ts     |  82 +++
 .../activity/activity-thread-virtual-items.ts |  74 +++
 .../activity/activity-thread-virtual-row.tsx  |  71 +++
 .../activity/dev-activity-fixture.test.ts     |  39 ++
 .../activity/dev-activity-fixture.ts          | 127 +++++
 .../event-time-clock-refresh.test.tsx         |  54 ++
 ...e-activity-thread-action-bindings.test.tsx | 113 ++++
 .../use-activity-thread-action-bindings.ts    |  71 +++
 .../activity/use-agent-pane-threads.ts        | 264 ++++++++++
 .../activity/useActivityUnreadCount.test.ts   |  69 ++-
 .../activity/useActivityUnreadCount.ts        | 130 ++---
 .../dashboard/agent-row-lineage-model.ts      |  17 +-
 ...uild-dashboard-bucket-counts.cache.test.ts | 190 +++++++
 .../build-dashboard-bucket-counts.ts          |  86 ++--
 ...uild-dashboard-snapshot.rows-cache.test.ts | 142 +++++
 .../dashboard/build-dashboard-snapshot.ts     |  75 ++-
 .../dashboard/useAgentBucketCounts.test.tsx   |  11 +-
 .../dashboard/useAgentBucketCounts.ts         |  16 +-
 .../dashboard/useDashboardPopoutBridge.ts     |  10 +-
 .../dashboard/useLiveDashboardSnapshot.ts     |   9 +-
 .../dashboard/worktree-agent-rows-cache.ts    | 181 +++++++
 .../AppearanceWindowSidebarSection.tsx        |   2 -
 .../settings/ExperimentalPane.test.tsx        |  19 +-
 .../components/settings/ExperimentalPane.tsx  |  83 ++-
 .../settings/appearance-sidebar-search.ts     |  21 +
 .../settings/experimental-search.ts           |  61 +--
 .../sidebar/AgentDashboardSidebarEntry.tsx    |   5 +-
 .../src/components/sidebar/Sidebar.test.tsx   |  69 ++-
 .../components/sidebar/SidebarAgentsList.tsx  | 144 ++++++
 .../components/sidebar/SidebarHeader.test.tsx | 339 +++++++++++-
 .../src/components/sidebar/SidebarHeader.tsx  | 263 +++++++---
 .../components/sidebar/SidebarNav.test.tsx    |  35 +-
 .../src/components/sidebar/SidebarNav.tsx     |  71 +--
 .../SidebarRepositoryFilterSection.tsx        |  14 +-
 .../sidebar/SidebarWorkspaceOptionsMenu.tsx   | 223 +-------
 .../sidebar/agents-sidebar-visibility.test.ts |  15 +
 .../sidebar/agents-sidebar-visibility.ts      |  11 +
 src/renderer/src/components/sidebar/index.tsx | 209 +++++++-
 .../sidebar/sidebar-count-badge.tsx           |  24 +
 .../sidebar/sidebar-header-actions.tsx        | 194 +++++++
 .../sidebar/sidebar-view-toggle.test.tsx      | 145 ++++++
 .../sidebar/sidebar-view-toggle.tsx           | 106 ++++
 ...se-workspace-reveal-body-redirect.test.tsx |  77 +++
 .../use-workspace-reveal-body-redirect.ts     |  43 ++
 .../components/sidebar/visible-worktrees.ts   |  69 +--
 .../sidebar/workspace-options-menu-items.tsx  | 240 +++++++++
 .../sidebar/worktree-agent-row-selectors.ts   |  12 +
 ...-compact-agent-row.stable-message.test.tsx | 112 ++++
 .../worktree-card-compact-agent-row.tsx       |  49 +-
 .../worktree-filter-visibility.test.ts        |  79 +++
 .../sidebar/worktree-filter-visibility.ts     |  43 ++
 .../terminal-pane/stale-agent-row.ts          |   2 +-
 .../use-terminal-pane-close-actions.ts        |   2 +-
 .../src/components/ui/dropdown-menu.tsx       |   2 +-
 src/renderer/src/components/ui/popover.tsx    |  17 +-
 .../useAutoAckViewedAgent.clock-skew.test.ts  |  10 +
 .../src/hooks/useAutoAckViewedAgent.test.ts   |  45 ++
 .../src/hooks/useAutoAckViewedAgent.ts        |  66 ++-
 src/renderer/src/i18n/locales/en.json         |  70 ++-
 src/renderer/src/i18n/locales/es.json         |  29 +-
 src/renderer/src/i18n/locales/ja.json         |  29 +-
 src/renderer/src/i18n/locales/ko.json         |  52 +-
 src/renderer/src/i18n/locales/zh.json         |  52 +-
 .../src/lib/activity-thread-display.test.ts   |  79 +++
 .../src/lib/activity-thread-display.ts        |  64 ++-
 src/renderer/src/lib/short-time-ago.ts        |  16 +
 src/renderer/src/lib/worktree-activation.ts   |  43 +-
 .../src/lib/worktree-jump-navigation.test.ts  | 151 ++++++
 .../src/lib/worktree-jump-navigation.ts       |  95 ++++
 .../src/lib/worktree-runtime-owner-index.ts   |   9 +-
 .../agent-status-primitives.ts                |   8 +-
 .../runtime/web-session-tabs-sync/state.ts    |   2 +
 .../store/slices/activity-cleared-at.test.ts  | 169 ++++++
 .../store/slices/agent-pane-authority.test.ts |  14 +
 .../slices/agent-status-ack-cleanup.test.ts   |  61 +++
 .../slices/agent-status-authority-actions.ts  |  10 +
 .../slices/agent-status-cleanup-actions.ts    |  52 +-
 .../src/store/slices/agent-status-contract.ts |  10 +
 .../store/slices/agent-status-drop-actions.ts |  58 ++-
 .../store/slices/agent-status-drop-reducer.ts |  35 +-
 .../slices/agent-status-pane-keyed-records.ts |  12 +
 .../agent-status-provider-session-actions.ts  |  10 +-
 .../agent-status-provider-session.test.ts     |  40 ++
 .../slices/agent-status-retention-actions.ts  |  30 ++
 .../slices/agent-status-slice-contract.ts     |   6 +-
 .../agent-status-worktree-drop-actions.ts     |  52 +-
 .../persisted-ui-write-baseline.test.ts       |  24 +
 .../slices/persisted-ui-write-baseline.ts     |  13 +-
 .../retired-terminal-tab-state-sweep.ts       |   8 +-
 .../store/slices/runtime-status-recheck.ts    |   5 +-
 .../slices/ui-hydration-view-layout.test.ts   |  35 +-
 ...ui-hydration-workspace-preferences.test.ts | 118 +++++
 .../store/slices/ui-page-navigation.test.ts   |  29 ++
 .../slices/ui/ui-slice-activity-actions.ts    | 155 ++++++
 .../store/slices/ui/ui-slice-agent-actions.ts | 105 +---
 .../store/slices/ui/ui-slice-contract-core.ts |   6 +
 .../ui/ui-slice-contract-preferences.ts       |  12 +
 .../slices/ui/ui-slice-hydration-actions.ts   |  94 ++--
 .../ui/ui-slice-hydration-sanitizers.ts       |  40 +-
 .../slices/ui/ui-slice-hydration-values.ts    |  22 +
 .../slices/ui/ui-slice-preference-actions.ts  |  25 +
 .../slices/ui/ui-slice-settings-actions.ts    |   5 +-
 .../slices/ui/ui-slice-surface-actions.ts     |   4 +
 .../store/slices/ui/ui-slice-view-actions.ts  |   6 +-
 .../listing/detected-worktree-meta.ts         |  30 +-
 .../teardown/worktree-purge-state.ts          |   2 +
 .../web/preload-api/web-agent-status-api.ts   |   2 +
 .../web-preference-normalization.ts           |   8 +-
 .../src/web/web-preload-api-ui.test.ts        |  16 +-
 src/shared/agent-status-ipc-payload.ts        |  10 +
 src/shared/agent-status-types.ts              |   1 +
 src/shared/agents-sidebar-visibility.ts       |  12 +
 src/shared/constants.ts                       |   6 +
 src/shared/default-global-settings.ts         |   1 +
 src/shared/global-settings-types.ts           |   6 +
 src/shared/pairing-local-ui-fields.test.ts    |   8 +-
 src/shared/pairing-local-ui-fields.ts         |   9 +-
 src/shared/persisted-ui-state-types.ts        |  12 +
 src/shared/telemetry-property-schemas.ts      |   1 +
 .../e2e/activity-agent-pane-isolation.spec.ts | 129 +----
 184 files changed, 12459 insertions(+), 1960 deletions(-)
 create mode 100644 src/main/persistence/loading-store/normalize-loaded-global-settings.test.ts
 create mode 100644 src/main/persistence/restoring-sessions/pane-key-remapping.test.ts
 create mode 100644 src/main/persistence/restoring-sessions/pane-key-remapping.ts
 create mode 100644 src/renderer/src/components/activity/activity-clear-completed.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-clear-completed.ts
 create mode 100644 src/renderer/src/components/activity/activity-event-build-cache.ts
 create mode 100644 src/renderer/src/components/activity/activity-event-builder-agent-context.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-event-builder-context.ts
 create mode 100644 src/renderer/src/components/activity/activity-event-builder-sources.ts
 create mode 100644 src/renderer/src/components/activity/activity-event-builder.bounded-history.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-event-builder.host-ownership.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-event-builder.identity-reuse.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-pane-events.ts
 create mode 100644 src/renderer/src/components/activity/activity-scope-filter-controls.tsx
 create mode 100644 src/renderer/src/components/activity/activity-scope-filter.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-scope-filter.ts
 create mode 100644 src/renderer/src/components/activity/activity-standalone-worktree.ts
 create mode 100644 src/renderer/src/components/activity/activity-tab-projection.ts
 create mode 100644 src/renderer/src/components/activity/activity-thread-actions.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-thread-child-agent.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-thread-child-agent.ts
 create mode 100644 src/renderer/src/components/activity/activity-thread-collapse-context.ts
 create mode 100644 src/renderer/src/components/activity/activity-thread-grouping.search-cache.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-thread-hover-card-summary.tsx
 create mode 100644 src/renderer/src/components/activity/activity-thread-hover-card.test.tsx
 create mode 100644 src/renderer/src/components/activity/activity-thread-hover-card.tsx
 create mode 100644 src/renderer/src/components/activity/activity-thread-list-pane-collapsible.test.tsx
 create mode 100644 src/renderer/src/components/activity/activity-thread-list-pane.virtualization.test.tsx
 create mode 100644 src/renderer/src/components/activity/activity-thread-list-resize-handle.tsx
 create mode 100644 src/renderer/src/components/activity/activity-thread-list-toolbar.tsx
 create mode 100644 src/renderer/src/components/activity/activity-thread-options-menu.tsx
 create mode 100644 src/renderer/src/components/activity/activity-thread-presentation.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-thread-virtual-items.test.ts
 create mode 100644 src/renderer/src/components/activity/activity-thread-virtual-items.ts
 create mode 100644 src/renderer/src/components/activity/activity-thread-virtual-row.tsx
 create mode 100644 src/renderer/src/components/activity/dev-activity-fixture.test.ts
 create mode 100644 src/renderer/src/components/activity/dev-activity-fixture.ts
 create mode 100644 src/renderer/src/components/activity/event-time-clock-refresh.test.tsx
 create mode 100644 src/renderer/src/components/activity/use-activity-thread-action-bindings.test.tsx
 create mode 100644 src/renderer/src/components/activity/use-activity-thread-action-bindings.ts
 create mode 100644 src/renderer/src/components/activity/use-agent-pane-threads.ts
 create mode 100644 src/renderer/src/components/dashboard/build-dashboard-bucket-counts.cache.test.ts
 create mode 100644 src/renderer/src/components/dashboard/build-dashboard-snapshot.rows-cache.test.ts
 create mode 100644 src/renderer/src/components/dashboard/worktree-agent-rows-cache.ts
 create mode 100644 src/renderer/src/components/sidebar/SidebarAgentsList.tsx
 create mode 100644 src/renderer/src/components/sidebar/agents-sidebar-visibility.test.ts
 create mode 100644 src/renderer/src/components/sidebar/agents-sidebar-visibility.ts
 create mode 100644 src/renderer/src/components/sidebar/sidebar-count-badge.tsx
 create mode 100644 src/renderer/src/components/sidebar/sidebar-header-actions.tsx
 create mode 100644 src/renderer/src/components/sidebar/sidebar-view-toggle.test.tsx
 create mode 100644 src/renderer/src/components/sidebar/sidebar-view-toggle.tsx
 create mode 100644 src/renderer/src/components/sidebar/use-workspace-reveal-body-redirect.test.tsx
 create mode 100644 src/renderer/src/components/sidebar/use-workspace-reveal-body-redirect.ts
 create mode 100644 src/renderer/src/components/sidebar/workspace-options-menu-items.tsx
 create mode 100644 src/renderer/src/components/sidebar/worktree-card-compact-agent-row.stable-message.test.tsx
 create mode 100644 src/renderer/src/components/sidebar/worktree-filter-visibility.test.ts
 create mode 100644 src/renderer/src/components/sidebar/worktree-filter-visibility.ts
 create mode 100644 src/renderer/src/lib/short-time-ago.ts
 create mode 100644 src/renderer/src/lib/worktree-jump-navigation.test.ts
 create mode 100644 src/renderer/src/lib/worktree-jump-navigation.ts
 create mode 100644 src/renderer/src/store/slices/activity-cleared-at.test.ts
 create mode 100644 src/renderer/src/store/slices/ui/ui-slice-activity-actions.ts
 create mode 100644 src/shared/agents-sidebar-visibility.ts

diff --git a/docs/reference/wsl-probe-failure-semantics.md b/docs/reference/wsl-probe-failure-semantics.md
index cadcbf53364..dcaa67a5d4d 100644
--- a/docs/reference/wsl-probe-failure-semantics.md
+++ b/docs/reference/wsl-probe-failure-semantics.md
@@ -35,11 +35,11 @@ silent, and indistinguishable from the real thing.
 
 Three instances so far:
 
-| Where | What the user saw | Status |
-| --- | --- | --- |
-| Preflight CLI probes | Caching the result would have pinned "git not installed" until relaunch | Bounded entry ([#17350](https://github.com/stablyai/orca/pull/17350)) |
-| `glab auth status` fallback into WSL | Idle VM woken repeatedly for users who never touch GitLab | Open ([#8941](https://github.com/stablyai/orca/issues/8941)) |
-| `listRunningWslDistrosAsync` | Fails closed to `[]` with no last-known-good, polled every 2s — a persistently broken `wsl.exe` makes every WSL session vanish app-wide | Open (PR #17072 review) |
+| Where                                | What the user saw                                                                                                                       | Status                                                                |
+| ------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------- |
+| Preflight CLI probes                 | Caching the result would have pinned "git not installed" until relaunch                                                                 | Bounded entry ([#17350](https://github.com/stablyai/orca/pull/17350)) |
+| `glab auth status` fallback into WSL | Idle VM woken repeatedly for users who never touch GitLab                                                                               | Open ([#8941](https://github.com/stablyai/orca/issues/8941))          |
+| `listRunningWslDistrosAsync`         | Fails closed to `[]` with no last-known-good, polled every 2s — a persistently broken `wsl.exe` makes every WSL session vanish app-wide | Open (PR #17072 review)                                               |
 
 ## What to do instead
 
diff --git a/src/main/agent-hooks/server-status-listener-fanout.test.ts b/src/main/agent-hooks/server-status-listener-fanout.test.ts
index 9f977672239..b6633dbf6f1 100644
--- a/src/main/agent-hooks/server-status-listener-fanout.test.ts
+++ b/src/main/agent-hooks/server-status-listener-fanout.test.ts
@@ -205,6 +205,144 @@ describe('AgentHookServer listener replay', () => {
     expect(listener).toHaveBeenNthCalledWith(4, [])
   })
 
+  it('evicts only the matching persisted status identity', () => {
+    const server = new AgentHookServer()
+    server.ingestRemote(
+      {
+        paneKey: PANE,
+        tabId: 'tab-1',
+        worktreeId: 'wt-1',
+        providerSession: { key: 'session_id', id: 'resume-me' },
+        payload: { state: 'done', prompt: 'old run', agentType: 'claude' }
+      },
+      'conn-1'
+    )
+    const old = server.getStatusSnapshot()[0]
+    expect(old).toBeDefined()
+
+    server.ingestRemote(
+      {
+        paneKey: PANE,
+        tabId: 'tab-1',
+        worktreeId: 'wt-1',
+        payload: { state: 'working', prompt: 'new run', agentType: 'claude' }
+      },
+      'conn-1'
+    )
+    server.dropPersistedStatusEntry({
+      paneKey: old!.paneKey,
+      receivedAt: old!.receivedAt,
+      stateStartedAt: old!.stateStartedAt
+    })
+
+    expect(server.getStatusSnapshot()[0]).toMatchObject({ state: 'working', prompt: 'new run' })
+
+    // A matching eviction follows ordinary dismissal semantics, including
+    // preserving a resumable provider session for the still-live TUI.
+    const resumed = new AgentHookServer()
+    resumed.ingestRemote(
+      {
+        paneKey: PANE,
+        tabId: 'tab-1',
+        worktreeId: 'wt-1',
+        providerSession: { key: 'session_id', id: 'resume-me' },
+        payload: { state: 'done', prompt: 'old run', agentType: 'claude' }
+      },
+      'conn-1'
+    )
+    const resumedIdentity = resumed.getStatusSnapshot()[0]!
+    expect(
+      resumed.dropPersistedStatusEntry({
+        paneKey: resumedIdentity.paneKey,
+        receivedAt: resumedIdentity.receivedAt,
+        stateStartedAt: resumedIdentity.stateStartedAt
+      })
+    ).toBe(true)
+    expect(resumed.getStatusSnapshot()[0]).toMatchObject({
+      providerSessionOnly: true,
+      providerSession: { id: 'resume-me' }
+    })
+  })
+
+  it('evicts when the renderer identity was stamped after receipt but pins the same turn', () => {
+    // Runtime-sync and recovery entries stamp updatedAt with Date.now()/capturedAt, which is
+    // at or after main's receivedAt; the eviction must still land for those rows.
+    const server = new AgentHookServer()
+    server.ingestRemote(
+      {
+        paneKey: PANE,
+        tabId: 'tab-1',
+        worktreeId: 'wt-1',
+        payload: { state: 'done', prompt: 'run', agentType: 'claude' }
+      },
+      'conn-1'
+    )
+    const entry = server.getStatusSnapshot()[0]!
+    expect(
+      server.dropPersistedStatusEntry({
+        paneKey: entry.paneKey,
+        receivedAt: entry.receivedAt + 5_000,
+        stateStartedAt: entry.stateStartedAt
+      })
+    ).toBe(true)
+
+    // A different turn never matches, whatever the receivedAt relationship.
+    const other = new AgentHookServer()
+    other.ingestRemote(
+      {
+        paneKey: PANE,
+        tabId: 'tab-1',
+        worktreeId: 'wt-1',
+        payload: { state: 'done', prompt: 'run', agentType: 'claude' }
+      },
+      'conn-1'
+    )
+    const otherEntry = other.getStatusSnapshot()[0]!
+    expect(
+      other.dropPersistedStatusEntry({
+        paneKey: otherEntry.paneKey,
+        receivedAt: otherEntry.receivedAt + 5_000,
+        stateStartedAt: otherEntry.stateStartedAt + 1
+      })
+    ).toBe(false)
+  })
+
+  it('evicts a batch of persisted identities with one status-change notification', () => {
+    const server = new AgentHookServer()
+    const otherPane = makePaneKey('tab-2', '22222222-2222-4222-8222-222222222222')
+    for (const paneKey of [PANE, otherPane]) {
+      server.ingestRemote(
+        {
+          paneKey,
+          tabId: paneKey.split(':')[0]!,
+          worktreeId: 'wt-1',
+          payload: { state: 'done', prompt: 'run', agentType: 'claude' }
+        },
+        'conn-1'
+      )
+    }
+    const listener = vi.fn()
+    server.subscribeStatusChanges(listener)
+    const dropped: string[] = []
+    server.subscribeStatusDrop((paneKey) => dropped.push(paneKey))
+    const identities = server.getStatusSnapshot().map((entry) => ({
+      paneKey: entry.paneKey,
+      receivedAt: entry.receivedAt,
+      stateStartedAt: entry.stateStartedAt
+    }))
+
+    const evicted = server.dropPersistedStatusEntries([
+      ...identities,
+      // A stale identity never matches and never blocks the rest of the batch.
+      { ...identities[0]!, stateStartedAt: identities[0]!.stateStartedAt + 1 }
+    ])
+
+    expect(evicted.sort()).toEqual([PANE, otherPane].sort())
+    expect(dropped.sort()).toEqual([PANE, otherPane].sort())
+    expect(listener).toHaveBeenCalledTimes(1)
+    expect(server.getStatusSnapshot()).toEqual([])
+  })
+
   it('notifies pane-status-clear listener when pane teardown evicts a cached status', () => {
     const server = new AgentHookServer()
     const listener = vi.fn()
diff --git a/src/main/agent-hooks/server/server-cleanup.ts b/src/main/agent-hooks/server/server-cleanup.ts
index 04acc058dea..4fcd0b5e58e 100644
--- a/src/main/agent-hooks/server/server-cleanup.ts
+++ b/src/main/agent-hooks/server/server-cleanup.ts
@@ -1,4 +1,5 @@
 import { paneHasStateClaims } from '../../../shared/agent-hook-listener/listener-state'
+import type { AgentStatusCacheIdentity } from '../../../shared/agent-status-types'
 import type { EnrichedAgentHookEventPayload } from './server-types'
 import { AgentHookServerAuthorityFences } from './server-authority-fences'
 
@@ -35,6 +36,51 @@ export abstract class AgentHookServerCleanup extends AgentHookServerAuthorityFen
     this.emitStatusDropped(deleted.paneKey)
   }
 
+  /** Evict a UI-cleared status only if no newer status has replaced it. */
+  dropPersistedStatusEntry(identity: AgentStatusCacheIdentity): boolean {
+    return this.dropPersistedStatusEntries([identity]).length > 0
+  }
+
+  /** Batch form: one persist and one listener notification for the whole set. Returns the
+   *  pane keys that were actually evicted. */
+  dropPersistedStatusEntries(identities: readonly AgentStatusCacheIdentity[]): string[] {
+    const evicted: string[] = []
+    for (const identity of identities) {
+      const resolvedPaneKey = this.resolvePaneKeyAlias(identity.paneKey)
+      const existing = this.state.lastStatusByPaneKey.get(resolvedPaneKey) as
+        | EnrichedAgentHookEventPayload
+        | undefined
+      // Why: stateStartedAt pins the turn; the renderer's updatedAt is stamped at or after this
+      // receivedAt (runtime-sync and recovery paths use Date.now()/capturedAt), so a strictly
+      // newer cached event is the only replacement worth protecting.
+      if (
+        !existing ||
+        existing.stateStartedAt !== identity.stateStartedAt ||
+        existing.receivedAt > identity.receivedAt
+      ) {
+        continue
+      }
+      const deleted = this.deleteStatusEntry(resolvedPaneKey, { preserveAuthority: true })
+      if (!deleted) {
+        continue
+      }
+      const retained = this.toRetainedProviderSessionRow(deleted)
+      if (retained) {
+        this.state.lastStatusByPaneKey.set(deleted.paneKey, retained)
+      }
+      evicted.push(deleted.paneKey)
+    }
+    if (evicted.length === 0) {
+      return evicted
+    }
+    this.scheduleStatusPersist()
+    this.notifyStatusChangeListeners()
+    for (const paneKey of evicted) {
+      this.emitStatusDropped(paneKey)
+    }
+    return evicted
+  }
+
   /** Retire panes whose owning process is certifiably dead.
    *
    *  The ordinary teardown already does this: every attributable PTY exit reaches
diff --git a/src/main/ipc/agent-hooks.test.ts b/src/main/ipc/agent-hooks.test.ts
index e9e7a728e83..cd6c21526d8 100644
--- a/src/main/ipc/agent-hooks.test.ts
+++ b/src/main/ipc/agent-hooks.test.ts
@@ -8,6 +8,8 @@ import { makePaneKey } from '../../shared/stable-pane-id'
 // evicts the entry.
 
 const dropStatusEntry = vi.fn()
+const dropPersistedStatusEntry = vi.fn()
+const dropPersistedStatusEntries = vi.fn(() => [] as string[])
 const dropStatusEntriesByTabPrefix = vi.fn()
 const retirePaneAuthority = vi.fn()
 const transferPaneAuthority = vi.fn()
@@ -44,6 +46,8 @@ vi.mock('../agent-hooks/server', async () => {
     ...actual,
     agentHookServer: {
       dropStatusEntry,
+      dropPersistedStatusEntry,
+      dropPersistedStatusEntries,
       dropStatusEntriesByTabPrefix,
       retirePaneAuthority,
       transferPaneAuthority,
@@ -105,6 +109,9 @@ vi.mock('../kimi/hook-service', () => ({
 
 beforeEach(() => {
   dropStatusEntry.mockReset()
+  dropPersistedStatusEntry.mockReset()
+  dropPersistedStatusEntries.mockReset()
+  dropPersistedStatusEntries.mockReturnValue([])
   dropStatusEntriesByTabPrefix.mockReset()
   retirePaneAuthority.mockReset()
   transferPaneAuthority.mockReset()
@@ -279,6 +286,71 @@ describe('agentStatus:drop IPC', () => {
   })
 })
 
+describe('agentStatus:dropPersisted IPC', () => {
+  it('forwards a validated cache identity without clearing pane state', async () => {
+    const { registerAgentHookHandlers } = await import('./agent-hooks')
+    registerAgentHookHandlers()
+
+    const handler = onHandlers.get('agentStatus:dropPersisted')
+    expect(handler).toBeDefined()
+    const identity = {
+      paneKey: PANE_KEY,
+      receivedAt: 2_000,
+      stateStartedAt: 1_000
+    }
+    handler!({}, identity)
+    expect(dropPersistedStatusEntry).toHaveBeenCalledWith(identity)
+    expect(dropStatusEntry).not.toHaveBeenCalled()
+  })
+
+  it('forwards a batch, keeping only valid identities, and clears migration state per evicted pane', async () => {
+    const { registerAgentHookHandlers } = await import('./agent-hooks')
+    registerAgentHookHandlers()
+
+    const handler = onHandlers.get('agentStatus:dropPersistedBatch')
+    expect(handler).toBeDefined()
+    const good = { paneKey: PANE_KEY, receivedAt: 2_000, stateStartedAt: 1_000 }
+    const alsoGood = { paneKey: CHILD_PANE_KEY, receivedAt: 3_000, stateStartedAt: 2_500 }
+    dropPersistedStatusEntries.mockReturnValue([PANE_KEY])
+    handler!({}, [good, { paneKey: 'not-a-pane-key', receivedAt: 1, stateStartedAt: 1 }, alsoGood])
+    expect(dropPersistedStatusEntries).toHaveBeenCalledWith([good, alsoGood])
+    expect(clearMigrationUnsupportedPtysForPaneKey).toHaveBeenCalledWith(PANE_KEY)
+    expect(clearMigrationUnsupportedPtysForPaneKey).not.toHaveBeenCalledWith(CHILD_PANE_KEY)
+    expect(dropPersistedStatusEntry).not.toHaveBeenCalled()
+  })
+
+  it('ignores a batch that is not an array or is empty after validation', async () => {
+    const { registerAgentHookHandlers } = await import('./agent-hooks')
+    registerAgentHookHandlers()
+
+    const handler = onHandlers.get('agentStatus:dropPersistedBatch')!
+    for (const value of [null, {}, 'x', [], [{ paneKey: PANE_KEY }]]) {
+      expect(() => handler({}, value)).not.toThrow()
+    }
+    expect(dropPersistedStatusEntries).not.toHaveBeenCalled()
+  })
+
+  it('rejects malformed cache identities', async () => {
+    const { registerAgentHookHandlers } = await import('./agent-hooks')
+    registerAgentHookHandlers()
+
+    const handler = onHandlers.get('agentStatus:dropPersisted')!
+    for (const value of [
+      null,
+      undefined,
+      {},
+      { paneKey: PANE_KEY },
+      { paneKey: PANE_KEY, receivedAt: Number.NaN, stateStartedAt: 1 },
+      { paneKey: PANE_KEY, receivedAt: 2, stateStartedAt: Number.POSITIVE_INFINITY },
+      { paneKey: 'not-a-pane-key', receivedAt: 2, stateStartedAt: 1 },
+      { paneKey: PANE_KEY, receivedAt: '2', stateStartedAt: 1 }
+    ]) {
+      expect(() => handler({}, value)).not.toThrow()
+    }
+    expect(dropPersistedStatusEntry).not.toHaveBeenCalled()
+  })
+})
+
 describe('agentStatus:dropByTabPrefix IPC', () => {
   it('forwards valid tab ids to tab-prefix cache eviction', async () => {
     const { registerAgentHookHandlers } = await import('./agent-hooks')
diff --git a/src/main/ipc/agent-status-row-teardown-ipc.ts b/src/main/ipc/agent-status-row-teardown-ipc.ts
index e33e1c93789..020cfa7259d 100644
--- a/src/main/ipc/agent-status-row-teardown-ipc.ts
+++ b/src/main/ipc/agent-status-row-teardown-ipc.ts
@@ -1,5 +1,6 @@
 import { ipcMain } from 'electron'
 import { agentHookServer, isValidPaneKey } from '../agent-hooks/server'
+import type { AgentStatusCacheIdentity } from '../../shared/agent-status-types'
 import {
   clearMigrationUnsupportedPtysByTabPrefix,
   clearMigrationUnsupportedPtysForPaneKey
@@ -7,7 +8,7 @@ import {
 import { isValidAgentStatusDropTabId } from './agent-status-ipc-boundary'
 
 /**
- * The three renderer-initiated ways a status row goes away. All fire-and-forget
+ * The renderer-initiated ways a status row goes away. All fire-and-forget
  * (`ipcRenderer.send` → `ipcMain.on`), so none round-trips a response; removing the
  * listeners first keeps re-registration safe.
  *
@@ -15,8 +16,13 @@ import { isValidAgentStatusDropTabId } from './agent-status-ipc-boundary'
  * still be alive; a confirmed process exit must take them too, or a surviving Claude latch resolves
  * the pane's next event straight back to `working`.
  */
+// Why a cap: the renderer sends one batch per Clear-completed click, bounded by visible rows.
+const MAX_DROP_PERSISTED_BATCH = 5_000
+
 export function registerAgentStatusRowTeardownIpcHandlers(): void {
   ipcMain.removeAllListeners('agentStatus:drop')
+  ipcMain.removeAllListeners('agentStatus:dropPersisted')
+  ipcMain.removeAllListeners('agentStatus:dropPersistedBatch')
   ipcMain.removeAllListeners('agentStatus:reconcileEndedProcess')
   ipcMain.removeAllListeners('agentStatus:dropByTabPrefix')
 
@@ -36,6 +42,36 @@ export function registerAgentStatusRowTeardownIpcHandlers(): void {
     }
   })
 
+  ipcMain.on('agentStatus:dropPersisted', (_event, request: unknown) => {
+    if (!isValidAgentStatusCacheIdentity(request)) {
+      return
+    }
+    try {
+      if (agentHookServer.dropPersistedStatusEntry(request)) {
+        clearMigrationUnsupportedPtysForPaneKey(request.paneKey)
+      }
+    } catch (err) {
+      console.warn('[agent-hooks] dropPersistedStatusEntry failed:', err)
+    }
+  })
+
+  ipcMain.on('agentStatus:dropPersistedBatch', (_event, request: unknown) => {
+    if (!Array.isArray(request) || request.length > MAX_DROP_PERSISTED_BATCH) {
+      return
+    }
+    const identities = request.filter(isValidAgentStatusCacheIdentity)
+    if (identities.length === 0) {
+      return
+    }
+    try {
+      for (const paneKey of agentHookServer.dropPersistedStatusEntries(identities)) {
+        clearMigrationUnsupportedPtysForPaneKey(paneKey)
+      }
+    } catch (err) {
+      console.warn('[agent-hooks] dropPersistedStatusEntries failed:', err)
+    }
+  })
+
   ipcMain.on('agentStatus:reconcileEndedProcess', (_event, paneKey: unknown) => {
     if (typeof paneKey !== 'string' || !isValidPaneKey(paneKey)) {
       return
@@ -67,3 +103,18 @@ export function registerAgentStatusRowTeardownIpcHandlers(): void {
     }
   })
 }
+
+function isValidAgentStatusCacheIdentity(value: unknown): value is AgentStatusCacheIdentity {
+  if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+    return false
+  }
+  const request = value as Record<string, unknown>
+  return (
+    typeof request.paneKey === 'string' &&
+    isValidPaneKey(request.paneKey) &&
+    typeof request.receivedAt === 'number' &&
+    Number.isFinite(request.receivedAt) &&
+    typeof request.stateStartedAt === 'number' &&
+    Number.isFinite(request.stateStartedAt)
+  )
+}
diff --git a/src/main/persistence/applying-settings/ui-state-read.ts b/src/main/persistence/applying-settings/ui-state-read.ts
index 7a249934260..a640f971f89 100644
--- a/src/main/persistence/applying-settings/ui-state-read.ts
+++ b/src/main/persistence/applying-settings/ui-state-read.ts
@@ -62,6 +62,7 @@ export function getPersistedUI(
     markdownTocPanelWidth: clampMarkdownTocPanelWidth(state.ui?.markdownTocPanelWidth),
     combinedDiffFileTreeWidth: clampCombinedDiffFileTreeWidth(state.ui?.combinedDiffFileTreeWidth),
     visibleWorkspaceHostIds: normalizeVisibleExecutionHostIds(state.ui?.visibleWorkspaceHostIds),
+    agentsVisibleHostIds: normalizeVisibleExecutionHostIds(state.ui?.agentsVisibleHostIds),
     workspaceHostOrder: normalizeExecutionHostOrder(state.ui?.workspaceHostOrder),
     manualRepoOrder: normalizeManualRepoOrder(state.ui?.manualRepoOrder),
     browserDefaultZoomLevel: normalizeBrowserPageZoomLevel(state.ui?.browserDefaultZoomLevel),
diff --git a/src/main/persistence/applying-settings/ui-state-update.ts b/src/main/persistence/applying-settings/ui-state-update.ts
index b93ddfb1296..db06a2738fd 100644
--- a/src/main/persistence/applying-settings/ui-state-update.ts
+++ b/src/main/persistence/applying-settings/ui-state-update.ts
@@ -152,6 +152,10 @@ export function updatePersistedUI(
       sanitizedUpdates.visibleWorkspaceHostIds !== undefined
         ? normalizeVisibleExecutionHostIds(sanitizedUpdates.visibleWorkspaceHostIds)
         : normalizeVisibleExecutionHostIds(operations.state.ui?.visibleWorkspaceHostIds),
+    agentsVisibleHostIds:
+      sanitizedUpdates.agentsVisibleHostIds !== undefined
+        ? normalizeVisibleExecutionHostIds(sanitizedUpdates.agentsVisibleHostIds)
+        : normalizeVisibleExecutionHostIds(operations.state.ui?.agentsVisibleHostIds),
     workspaceHostOrder:
       sanitizedUpdates.workspaceHostOrder !== undefined
         ? normalizeExecutionHostOrder(sanitizedUpdates.workspaceHostOrder)
diff --git a/src/main/persistence/loading-store/normalize-loaded-global-settings.test.ts b/src/main/persistence/loading-store/normalize-loaded-global-settings.test.ts
new file mode 100644
index 00000000000..6d1040f09ae
--- /dev/null
+++ b/src/main/persistence/loading-store/normalize-loaded-global-settings.test.ts
@@ -0,0 +1,80 @@
+import { homedir } from 'node:os'
+import { describe, expect, it } from 'vitest'
+import { getDefaultPersistedState } from '../../../shared/constants'
+import { normalizeLoadedGlobalSettings } from './normalize-loaded-global-settings'
+import { prepareLoadedTerminalSettings } from './prepare-loaded-terminal-settings'
+import { prepareLoadedProfileSettings } from './prepare-loaded-profile-settings'
+import type { GlobalSettings } from '../../../shared/global-settings-types'
+import type { PersistedState } from '../../../shared/persisted-state-types'
+
+// Simulates a profile created before the dedicated Experimental switch was persisted.
+function normalizeLegacyProfile(overrides: Partial<GlobalSettings>): PersistedState['settings'] {
+  const defaults = getDefaultPersistedState(homedir())
+  const settings: Partial<GlobalSettings> = { ...defaults.settings }
+  delete settings.showAgentsSidebar
+  delete settings.experimentalActivity
+  delete settings.experimentalAgentDashboardPopout
+  Object.assign(settings, overrides)
+  const parsed: PersistedState = { ...defaults, settings: settings as GlobalSettings }
+  const noop = (): void => {}
+  const terminal = prepareLoadedTerminalSettings(parsed, noop)
+  const profile = prepareLoadedProfileSettings(parsed, defaults, noop)
+  return normalizeLoadedGlobalSettings(parsed, terminal, profile)
+}
+
+describe('showAgentsSidebar experimental-setting migration', () => {
+  it('keeps the sidebar for Agents-view opt-ins regardless of the dashboard experiment', () => {
+    const normalized = normalizeLegacyProfile({
+      experimentalActivity: true,
+      experimentalAgentDashboardPopout: false
+    })
+    expect(normalized.showAgentsSidebar).toBe(true)
+    expect(normalized.agentsSidebarMigratedFromExperimental).toBe(true)
+  })
+
+  it('carries the legacy Agents-view opt-in into the sidebar', () => {
+    expect(normalizeLegacyProfile({ experimentalActivity: true }).showAgentsSidebar).toBe(true)
+  })
+
+  it('does not show Agents migration copy for a dashboard-only opt-in', () => {
+    expect(
+      normalizeLegacyProfile({ experimentalAgentDashboardPopout: true })
+        .agentsSidebarMigratedFromExperimental
+    ).toBe(false)
+  })
+
+  it('defaults profiles with no legacy signal to the sidebar', () => {
+    const normalized = normalizeLegacyProfile({})
+    expect(normalized.showAgentsSidebar).toBe(true)
+    expect(normalized.agentsSidebarMigratedFromExperimental).toBe(false)
+  })
+
+  it('does not treat a dashboard opt-out as an Agents-tab opt-out', () => {
+    expect(
+      normalizeLegacyProfile({ experimentalAgentDashboardPopout: false }).showAgentsSidebar
+    ).toBe(true)
+  })
+
+  it('ignores a pre-stamp forced-default experimentalActivity true (not an opt-in)', () => {
+    const normalized = normalizeLegacyProfile({
+      experimentalActivity: true,
+      experimentalActivityDefaultedOffForAllUsers: undefined
+    })
+    expect(normalized.experimentalActivity).toBe(false)
+    expect(normalized.showAgentsSidebar).toBe(true)
+    expect(normalized.agentsSidebarMigratedFromExperimental).toBe(false)
+  })
+
+  it('preserves a stored showAgentsSidebar choice over legacy flags', () => {
+    expect(
+      normalizeLegacyProfile({ showAgentsSidebar: false, experimentalActivity: true })
+        .showAgentsSidebar
+    ).toBe(false)
+    expect(
+      normalizeLegacyProfile({
+        showAgentsSidebar: true,
+        experimentalAgentDashboardPopout: false
+      }).showAgentsSidebar
+    ).toBe(true)
+  })
+})
diff --git a/src/main/persistence/loading-store/normalize-loaded-global-settings.ts b/src/main/persistence/loading-store/normalize-loaded-global-settings.ts
index fb5cc9f1fe8..9370ec4febc 100644
--- a/src/main/persistence/loading-store/normalize-loaded-global-settings.ts
+++ b/src/main/persistence/loading-store/normalize-loaded-global-settings.ts
@@ -1,4 +1,5 @@
 import { getDefaultVoiceSettings } from '../../../shared/constants'
+import { resolveAgentsSidebarVisible } from '../../../shared/agents-sidebar-visibility'
 import { normalizePRBotAuthorOverrides } from '../../../shared/pr-bot-author-overrides'
 import { normalizeTerminalQuickCommands } from '../../../shared/terminal-quick-commands'
 import { normalizeOpenInApplications } from '../../../shared/open-in-applications'
@@ -85,6 +86,16 @@ export function normalizeLoadedGlobalSettings(
     ...migratedTerminalTuiScrollSensitivity.settings,
     experimentalActivity: migratedExperimentalActivity,
     experimentalActivityDefaultedOffForAllUsers: true,
+    // Keep the experimental Agents tab's rollout default for older profiles while
+    // preserving any choice made through its dedicated Experimental setting.
+    showAgentsSidebar: resolveAgentsSidebarVisible({
+      showAgentsSidebar: parsed.settings?.showAgentsSidebar
+    }),
+    // Preserve the legacy opt-in before the experimental setting is normalized away. This
+    // drives the migration-specific introduction copy without changing runtime behavior.
+    agentsSidebarMigratedFromExperimental:
+      parsed.settings?.agentsSidebarMigratedFromExperimental === true ||
+      migratedExperimentalActivity,
     // Why: compact worktree cards graduated from Experimental; preserve the old opt-in for rollout-era profiles.
     compactWorktreeCards: loadedCompactWorktreeCards,
     experimentalCompactWorktreeCards: undefined,
diff --git a/src/main/persistence/loading-store/workspace-session-snapshot-publication.ts b/src/main/persistence/loading-store/workspace-session-snapshot-publication.ts
index 97cd3b2b544..5b7f90cbb8f 100644
--- a/src/main/persistence/loading-store/workspace-session-snapshot-publication.ts
+++ b/src/main/persistence/loading-store/workspace-session-snapshot-publication.ts
@@ -15,6 +15,8 @@ import { registerPersistedPaneKeyAlias } from '../restoring-sessions/pane-alias-
 import {
   normalizeWorkspaceSessionPaneIdentities,
   remapAcknowledgedAgentPaneKeys,
+  remapActivityClearedAtPaneKeys,
+  remapManuallyUnreadTurnPaneKeys,
   remapSshRemotePtyLeaseLeafIds,
   type WorkspaceSessionPaneIdentityRemap
 } from '../restoring-sessions/workspace-pane-normalization'
@@ -50,10 +52,30 @@ export function setLocalWorkspaceSession(
     context.runtime.state.ui?.acknowledgedAgentsByPaneKey,
     normalized.leafIdByInputLeafIdByTabId
   )
-  if (remappedAcknowledgements.changed) {
+  const remappedActivityCutoffs = remapActivityClearedAtPaneKeys(
+    context.runtime.state.ui?.activityClearedAtByPaneKey,
+    normalized.leafIdByInputLeafIdByTabId
+  )
+  const remappedManualUnread = remapManuallyUnreadTurnPaneKeys(
+    context.runtime.state.ui?.manuallyUnreadTurnsByPaneKey,
+    normalized.leafIdByInputLeafIdByTabId
+  )
+  if (
+    remappedAcknowledgements.changed ||
+    remappedActivityCutoffs.changed ||
+    remappedManualUnread.changed
+  ) {
     context.runtime.state.ui = {
       ...context.runtime.state.ui,
-      acknowledgedAgentsByPaneKey: remappedAcknowledgements.acknowledgements
+      ...(remappedAcknowledgements.changed
+        ? { acknowledgedAgentsByPaneKey: remappedAcknowledgements.acknowledgements }
+        : {}),
+      ...(remappedActivityCutoffs.changed
+        ? { activityClearedAtByPaneKey: remappedActivityCutoffs.cutoffs }
+        : {}),
+      ...(remappedManualUnread.changed
+        ? { manuallyUnreadTurnsByPaneKey: remappedManualUnread.turns }
+        : {})
     }
   }
   for (const entry of normalized.legacyPaneKeyAliasEntries) {
diff --git a/src/main/persistence/restoring-sessions/pane-key-remapping.test.ts b/src/main/persistence/restoring-sessions/pane-key-remapping.test.ts
new file mode 100644
index 00000000000..c0359efd612
--- /dev/null
+++ b/src/main/persistence/restoring-sessions/pane-key-remapping.test.ts
@@ -0,0 +1,33 @@
+import { describe, expect, it } from 'vitest'
+import { makePaneKey } from '../../../shared/stable-pane-id'
+import {
+  remapActivityClearedAtPaneKeys,
+  remapManuallyUnreadTurnPaneKeys
+} from './pane-key-remapping'
+
+const STABLE_LEAF_ID = '00000000-0000-4000-8000-000000000001'
+
+describe('remapManuallyUnreadTurnPaneKeys', () => {
+  it('promotes legacy pane keys to the restored stable leaf like clear-completed cutoffs', () => {
+    const remap = new Map([['tab-1', new Map([['pane:1', STABLE_LEAF_ID]])]])
+    const turns = { 'tab-1:pane:1': 42, 'tab-2:pane:9': 7 }
+
+    const result = remapManuallyUnreadTurnPaneKeys(turns, remap)
+
+    expect(result.changed).toBe(true)
+    expect(result.turns).toEqual({ [makePaneKey('tab-1', STABLE_LEAF_ID)]: 42, 'tab-2:pane:9': 7 })
+    // Same remap contract as the cutoffs so the two never drift after a session restore.
+    expect(remapActivityClearedAtPaneKeys(turns, remap).cutoffs).toEqual(result.turns)
+  })
+
+  it('reports no change for empty or already-stable records', () => {
+    const remap = new Map([['tab-1', new Map([['pane:1', STABLE_LEAF_ID]])]])
+    expect(remapManuallyUnreadTurnPaneKeys(undefined, remap).changed).toBe(false)
+    expect(remapManuallyUnreadTurnPaneKeys({}, remap).changed).toBe(false)
+    const stable = { [makePaneKey('tab-1', STABLE_LEAF_ID)]: 1 }
+    expect(remapManuallyUnreadTurnPaneKeys(stable, remap)).toEqual({
+      turns: stable,
+      changed: false
+    })
+  })
+})
diff --git a/src/main/persistence/restoring-sessions/pane-key-remapping.ts b/src/main/persistence/restoring-sessions/pane-key-remapping.ts
new file mode 100644
index 00000000000..4f3440f087e
--- /dev/null
+++ b/src/main/persistence/restoring-sessions/pane-key-remapping.ts
@@ -0,0 +1,75 @@
+import type { PersistedState } from '../../../shared/persisted-state-types'
+import { isTerminalLeafId, makePaneKey, parsePaneKey } from '../../../shared/stable-pane-id'
+
+type PaneLeafRemap = Map<string, Map<string, string>>
+
+function remapPaneKeys<T extends number>(
+  values: Record<string, T> | undefined,
+  leafIdByInputLeafIdByTabId: PaneLeafRemap
+): { values: Record<string, T> | undefined; changed: boolean } {
+  if (!values || Object.keys(values).length === 0) {
+    return { values, changed: false }
+  }
+
+  let changed = false
+  const next: Record<string, T> = {}
+  const setValue = (paneKey: string, value: T): void => {
+    const existing = next[paneKey]
+    next[paneKey] = existing === undefined ? value : (Math.max(existing, value) as T)
+  }
+  for (const [paneKey, value] of Object.entries(values)) {
+    const parsed = parsePaneKey(paneKey)
+    if (parsed) {
+      setValue(paneKey, value)
+      continue
+    }
+
+    const delimiter = paneKey.indexOf(':')
+    if (delimiter <= 0 || delimiter === paneKey.length - 1) {
+      setValue(paneKey, value)
+      continue
+    }
+
+    const tabId = paneKey.slice(0, delimiter)
+    const legacyLeafId = paneKey.slice(delimiter + 1)
+    const remappedLeafId = leafIdByInputLeafIdByTabId.get(tabId)?.get(legacyLeafId)
+    if (!remappedLeafId || !isTerminalLeafId(remappedLeafId)) {
+      setValue(paneKey, value)
+      continue
+    }
+
+    try {
+      // Carry values over when a legacy leaf is promoted to a UUID.
+      setValue(makePaneKey(tabId, remappedLeafId), value)
+      changed = true
+    } catch {
+      setValue(paneKey, value)
+    }
+  }
+
+  return { values: next, changed }
+}
+
+export function remapAcknowledgedAgentPaneKeys(
+  acknowledgements: PersistedState['ui']['acknowledgedAgentsByPaneKey'],
+  leafIdByInputLeafIdByTabId: PaneLeafRemap
+): { acknowledgements: PersistedState['ui']['acknowledgedAgentsByPaneKey']; changed: boolean } {
+  const result = remapPaneKeys(acknowledgements, leafIdByInputLeafIdByTabId)
+  return { acknowledgements: result.values, changed: result.changed }
+}
+
+export function remapManuallyUnreadTurnPaneKeys(
+  turns: PersistedState['ui']['manuallyUnreadTurnsByPaneKey'],
+  leafIdByInputLeafIdByTabId: PaneLeafRemap
+): { turns: PersistedState['ui']['manuallyUnreadTurnsByPaneKey']; changed: boolean } {
+  const result = remapPaneKeys(turns, leafIdByInputLeafIdByTabId)
+  return { turns: result.values, changed: result.changed }
+}
+
+export function remapActivityClearedAtPaneKeys(
+  cutoffs: PersistedState['ui']['activityClearedAtByPaneKey'],
+  leafIdByInputLeafIdByTabId: PaneLeafRemap
+): { cutoffs: PersistedState['ui']['activityClearedAtByPaneKey']; changed: boolean } {
+  const result = remapPaneKeys(cutoffs, leafIdByInputLeafIdByTabId)
+  return { cutoffs: result.values, changed: result.changed }
+}
diff --git a/src/main/persistence/restoring-sessions/workspace-pane-normalization.ts b/src/main/persistence/restoring-sessions/workspace-pane-normalization.ts
index 2bfafebae9f..cfc26c7bb8a 100644
--- a/src/main/persistence/restoring-sessions/workspace-pane-normalization.ts
+++ b/src/main/persistence/restoring-sessions/workspace-pane-normalization.ts
@@ -8,7 +8,7 @@ import {
   type ExecutionHostId
 } from '../../../shared/execution-host'
 import type { SshRemotePtyLease } from '../../../shared/ssh-types'
-import { isTerminalLeafId, makePaneKey, parsePaneKey } from '../../../shared/stable-pane-id'
+import { isTerminalLeafId, parsePaneKey } from '../../../shared/stable-pane-id'
 import { findCrossHostPaneTabIds, withoutPaneTabIds } from './cross-host-pane-tab-ids'
 import {
   createLazyTerminalTabLookup,
@@ -22,6 +22,17 @@ import {
   migrationUnsupportedEntriesEqual,
   normalizeLegacyPaneKeyAliasEntries
 } from './pane-alias-normalization'
+import {
+  remapAcknowledgedAgentPaneKeys,
+  remapActivityClearedAtPaneKeys,
+  remapManuallyUnreadTurnPaneKeys
+} from './pane-key-remapping'
+
+export {
+  remapAcknowledgedAgentPaneKeys,
+  remapActivityClearedAtPaneKeys,
+  remapManuallyUnreadTurnPaneKeys
+} from './pane-key-remapping'
 
 export function normalizeWorkspaceSessionPaneIdentities(
   session: WorkspaceSessionState,
@@ -220,6 +231,14 @@ export function normalizePersistedPaneIdentityState(state: PersistedState): {
     state.ui?.acknowledgedAgentsByPaneKey,
     withoutPaneTabIds(acknowledgementLeafIdByInputLeafIdByTabId, crossHostTabIds)
   )
+  const remappedActivityCutoffs = remapActivityClearedAtPaneKeys(
+    state.ui?.activityClearedAtByPaneKey,
+    withoutPaneTabIds(acknowledgementLeafIdByInputLeafIdByTabId, crossHostTabIds)
+  )
+  const remappedManualUnread = remapManuallyUnreadTurnPaneKeys(
+    state.ui?.manuallyUnreadTurnsByPaneKey,
+    withoutPaneTabIds(acknowledgementLeafIdByInputLeafIdByTabId, crossHostTabIds)
+  )
   const migrationUnsupportedChanged = !migrationUnsupportedEntriesEqual(
     state.migrationUnsupportedPtyEntries ?? [],
     mergedMigrationUnsupportedEntries
@@ -234,7 +253,9 @@ export function normalizePersistedPaneIdentityState(state: PersistedState): {
     !remappedLeases.changed &&
     !migrationUnsupportedChanged &&
     !legacyAliasesChanged &&
-    !remappedAcknowledgements.changed
+    !remappedAcknowledgements.changed &&
+    !remappedActivityCutoffs.changed &&
+    !remappedManualUnread.changed
   ) {
     return {
       state,
@@ -251,11 +272,21 @@ export function normalizePersistedPaneIdentityState(state: PersistedState): {
       sshRemotePtyLeases: remappedLeases.leases,
       migrationUnsupportedPtyEntries: mergedMigrationUnsupportedEntries,
       legacyPaneKeyAliasEntries: mergedLegacyPaneKeyAliasEntries,
-      ...(remappedAcknowledgements.changed
+      ...(remappedAcknowledgements.changed ||
+      remappedActivityCutoffs.changed ||
+      remappedManualUnread.changed
         ? {
             ui: {
               ...state.ui,
-              acknowledgedAgentsByPaneKey: remappedAcknowledgements.acknowledgements
+              ...(remappedAcknowledgements.changed
+                ? { acknowledgedAgentsByPaneKey: remappedAcknowledgements.acknowledgements }
+                : {}),
+              ...(remappedActivityCutoffs.changed
+                ? { activityClearedAtByPaneKey: remappedActivityCutoffs.cutoffs }
+                : {}),
+              ...(remappedManualUnread.changed
+                ? { manuallyUnreadTurnsByPaneKey: remappedManualUnread.turns }
+                : {})
             }
           }
         : {})
@@ -265,50 +296,3 @@ export function normalizePersistedPaneIdentityState(state: PersistedState): {
     legacyPaneKeyAliasEntries: mergedLegacyPaneKeyAliasEntries
   }
 }
-
-export function remapAcknowledgedAgentPaneKeys(
-  acknowledgements: PersistedState['ui']['acknowledgedAgentsByPaneKey'],
-  leafIdByInputLeafIdByTabId: Map<string, Map<string, string>>
-): { acknowledgements: PersistedState['ui']['acknowledgedAgentsByPaneKey']; changed: boolean } {
-  if (!acknowledgements || Object.keys(acknowledgements).length === 0) {
-    return { acknowledgements, changed: false }
-  }
-
-  let changed = false
-  const next: NonNullable<PersistedState['ui']['acknowledgedAgentsByPaneKey']> = {}
-  const setAcknowledgement = (paneKey: string, acknowledgedAt: number): void => {
-    const existing = next[paneKey]
-    next[paneKey] = existing === undefined ? acknowledgedAt : Math.max(existing, acknowledgedAt)
-  }
-  for (const [paneKey, acknowledgedAt] of Object.entries(acknowledgements)) {
-    const parsed = parsePaneKey(paneKey)
-    if (parsed) {
-      setAcknowledgement(paneKey, acknowledgedAt)
-      continue
-    }
-
-    const delimiter = paneKey.indexOf(':')
-    if (delimiter <= 0 || delimiter === paneKey.length - 1) {
-      setAcknowledgement(paneKey, acknowledgedAt)
-      continue
-    }
-
-    const tabId = paneKey.slice(0, delimiter)
-    const legacyLeafId = paneKey.slice(delimiter + 1)
-    const remappedLeafId = leafIdByInputLeafIdByTabId.get(tabId)?.get(legacyLeafId)
-    if (!remappedLeafId || !isTerminalLeafId(remappedLeafId)) {
-      setAcknowledgement(paneKey, acknowledgedAt)
-      continue
-    }
-
-    try {
-      // Why: when a legacy leaf is promoted to a UUID, carry the read marker over so seen rows don't come back unread.
-      setAcknowledgement(makePaneKey(tabId, remappedLeafId), acknowledgedAt)
-      changed = true
-    } catch {
-      setAcknowledgement(paneKey, acknowledgedAt)
-    }
-  }
-
-  return { acknowledgements: next, changed }
-}
diff --git a/src/main/runtime/rpc/methods/client-ui-pairing-local-fields.test.ts b/src/main/runtime/rpc/methods/client-ui-pairing-local-fields.test.ts
index 02c93c14f6b..d6c08ad44cf 100644
--- a/src/main/runtime/rpc/methods/client-ui-pairing-local-fields.test.ts
+++ b/src/main/runtime/rpc/methods/client-ui-pairing-local-fields.test.ts
@@ -44,7 +44,13 @@ describe('client UI RPC pairing-local field seams', () => {
     manualRepoOrder: [
       { hostId: 'runtime:web-11111111-2222-3333-4444-555555555555', repoId: 'repo-a' }
     ],
-    workspaceHostOrder: ['runtime:web-11111111-2222-3333-4444-555555555555', 'local']
+    workspaceHostOrder: ['runtime:web-11111111-2222-3333-4444-555555555555', 'local'],
+    agentsVisibleHostIds: ['runtime:web-11111111-2222-3333-4444-555555555555'],
+    agentsFilterRepoIds: ['repo-a'],
+    agentsShowChildAgents: true,
+    agentsCompactMode: false,
+    activityClearedAtByPaneKey: { 'tab-1:leaf-1': 123 },
+    manuallyUnreadTurnsByPaneKey: { 'tab-1:leaf-1': 321 }
   }
 
   it.each(PAIRING_LOCAL_UI_FIELDS.map((field) => [field] as const))(
diff --git a/src/main/runtime/rpc/methods/client-ui-schemas.ts b/src/main/runtime/rpc/methods/client-ui-schemas.ts
index 79b923a55db..edb3f651c32 100644
--- a/src/main/runtime/rpc/methods/client-ui-schemas.ts
+++ b/src/main/runtime/rpc/methods/client-ui-schemas.ts
@@ -122,6 +122,10 @@ const UiUpdateFields = z
     showInactiveWorkspaces: z.boolean().optional(),
     workspaceHostScope: z.string().optional(),
     visibleWorkspaceHostIds: z.array(z.string()).nullable().optional(),
+    agentsVisibleHostIds: z.array(z.string()).nullable().optional(),
+    agentsFilterRepoIds: StringArray.optional(),
+    agentsShowChildAgents: z.boolean().optional(),
+    agentsCompactMode: z.boolean().optional(),
     workspaceHostOrder: z.array(z.string()).optional(),
     automationHostFilter: z
       .union([
@@ -171,6 +175,8 @@ const UiUpdateFields = z
     updateReassuranceSeen: z.boolean().optional(),
     osc52ClipboardDefaultOnNoticePending: z.boolean().optional(),
     acknowledgedAgentsByPaneKey: z.record(z.string(), z.number().finite()).optional(),
+    activityClearedAtByPaneKey: z.record(z.string(), z.number().finite()).optional(),
+    manuallyUnreadTurnsByPaneKey: z.record(z.string(), z.number().finite()).optional(),
     browserDefaultUrl: NullableString.optional(),
     browserDefaultSearchEngine: z
       .enum(['google', 'duckduckgo', 'bing', 'kagi'])
diff --git a/src/preload/api/agent-status-api.ts b/src/preload/api/agent-status-api.ts
index fd6da88e351..7aa6c21115d 100644
--- a/src/preload/api/agent-status-api.ts
+++ b/src/preload/api/agent-status-api.ts
@@ -1,4 +1,5 @@
 import type {
+  AgentStatusCacheIdentity,
   AgentStatusClearIpcPayload,
   AgentStatusIpcPayload,
   MigrationUnsupportedPtyEntry
@@ -30,6 +31,10 @@ export type AgentStatusApi = {
   getMigrationUnsupportedSnapshot: () => Promise<MigrationUnsupportedPtyEntry[]>
   /** Drop a paneKey from the main-process hook cache and on-disk last-status file. Fire-and-forget. */
   drop: (paneKey: string) => void
+  /** Evict a previously-cleared status only when its identity still matches the main-process cache. */
+  dropPersisted: (identity: AgentStatusCacheIdentity) => void
+  /** Same as dropPersisted for many identities in one IPC message and one listener notification. */
+  dropPersistedBatch?: (identities: readonly AgentStatusCacheIdentity[]) => void
   /** Retire a pane whose agent process is proven gone — clears the row AND the per-pane caches a
    *  dismissal deliberately keeps. Not `drop`: that one is a user dismissal of a live pane's row. */
   reconcileEndedProcess: (paneKey: string) => void
diff --git a/src/preload/api/agent-status-bridge.ts b/src/preload/api/agent-status-bridge.ts
index b5ac5c8b5b2..3cc1654aaed 100644
--- a/src/preload/api/agent-status-bridge.ts
+++ b/src/preload/api/agent-status-bridge.ts
@@ -1,5 +1,6 @@
 import { ipcRenderer } from 'electron'
 import type {
+  AgentStatusCacheIdentity,
   AgentStatusClearIpcPayload,
   AgentStatusIpcPayload,
   MigrationUnsupportedPtyEntry
@@ -66,6 +67,12 @@ export const agentStatusApi = {
   drop: (paneKey: string): void => {
     ipcRenderer.send('agentStatus:drop', paneKey)
   },
+  dropPersisted: (identity: AgentStatusCacheIdentity): void => {
+    ipcRenderer.send('agentStatus:dropPersisted', identity)
+  },
+  dropPersistedBatch: (identities: readonly AgentStatusCacheIdentity[]): void => {
+    ipcRenderer.send('agentStatus:dropPersistedBatch', identities)
+  },
   reconcileEndedProcess: (paneKey: string): void => {
     ipcRenderer.send('agentStatus:reconcileEndedProcess', paneKey)
   },
diff --git a/src/renderer/src/app-shell/use-app-startup-hydration.ts b/src/renderer/src/app-shell/use-app-startup-hydration.ts
index 2b5272f440d..447fbfb3780 100644
--- a/src/renderer/src/app-shell/use-app-startup-hydration.ts
+++ b/src/renderer/src/app-shell/use-app-startup-hydration.ts
@@ -269,6 +269,16 @@ export function useAppStartupHydration(onOnboardingLoaded: (state: OnboardingSta
           // Why (issue #1158): unlock the session writer only after hydration and all dependent steps succeeded, so a mid-startup throw can't serialize partially-mutated state to disk.
           actions.setHydrationSucceeded(true)
           actions.setTerminalStartupRestorationReady(true)
+          // Why the explicit opt-in: unconditional seeding hijacks every empty dev
+          // profile's active workspace, making onboarding/empty-state flows untestable.
+          if (
+            import.meta.env.DEV &&
+            String(import.meta.env.VITE_ACTIVITY_DEV_FIXTURE).toLowerCase() === 'true'
+          ) {
+            const { seedDevActivityFixture } =
+              await import('../components/activity/dev-activity-fixture')
+            seedDevActivityFixture()
+          }
           logRendererStartupDiagnostic('startup-hydration-done', {
             durationMs: Math.round(performance.now() - startupStartedAt)
           })
diff --git a/src/renderer/src/app-shell/use-persisted-ui-writer.ts b/src/renderer/src/app-shell/use-persisted-ui-writer.ts
index 857b55fc8a4..19109c25eb2 100644
--- a/src/renderer/src/app-shell/use-persisted-ui-writer.ts
+++ b/src/renderer/src/app-shell/use-persisted-ui-writer.ts
@@ -167,7 +167,11 @@ export function usePersistedUIWriter(): void {
       // paths in agent-status.ts (close/dismiss) flow to disk through map identity changes.
       // Without persisting, agent rows that survive restart come back bold even when the
       // user had already visited them.
-      acknowledgedAgentsByPaneKey: s.acknowledgedAgentsByPaneKey
+      acknowledgedAgentsByPaneKey: s.acknowledgedAgentsByPaneKey,
+      // Why: "Clear completed" must survive restart, or cleared done/interrupted rows return.
+      activityClearedAtByPaneKey: s.activityClearedAtByPaneKey,
+      // Why: an explicit "mark unread" must survive restart, or the row comes back read.
+      manuallyUnreadTurnsByPaneKey: s.manuallyUnreadTurnsByPaneKey
     }))
   )
   useEffect(() => {
diff --git a/src/renderer/src/components/activity/ActivityPrototypePage.test.ts b/src/renderer/src/components/activity/ActivityPrototypePage.test.ts
index 48bdbb3a250..9ccf93248dc 100644
--- a/src/renderer/src/components/activity/ActivityPrototypePage.test.ts
+++ b/src/renderer/src/components/activity/ActivityPrototypePage.test.ts
@@ -399,7 +399,7 @@ describe('buildActivityEvents', () => {
     expect(threads[0].events[0].entry.prompt).toBe('Retained prior run')
   })
 
-  it('groups visible threads by current status order', () => {
+  it('groups visible threads with attention states before working and done', () => {
     const repo = makeRepo()
     const worktree = makeWorktree()
     const workingTab = makeTab()
@@ -442,11 +442,49 @@ describe('buildActivityEvents', () => {
       })
     )
 
-    expect(groups.map((group) => group.id)).toEqual(['working', 'blocked', 'done'])
+    expect(groups.map((group) => group.id)).toEqual(['blocked', 'working', 'done'])
     expect(groups.map((group) => group.threads.map((thread) => thread.paneKey))).toEqual([
-      [PANE_KEY],
       [PANE_KEY_2],
+      [PANE_KEY],
       [PANE_KEY_3]
     ])
   })
+
+  it('merges runtime orchestration context into activity events and entries', () => {
+    const repo = makeRepo()
+    const worktree = makeWorktree()
+    const tab1 = makeTabWithIds('tab-1', worktree.id)
+    const tab2 = makeTabWithIds('tab-2', worktree.id)
+    const result = buildActivityEvents({
+      agentStatusByPaneKey: {
+        [PANE_KEY]: makeWorkingEntryWithoutHistory(),
+        [PANE_KEY_2]: {
+          ...makeWorkingEntryWithoutHistory(),
+          paneKey: PANE_KEY_2,
+          terminalHandle: 'terminal-child'
+        }
+      },
+      runtimeAgentOrchestrationByPaneKey: {
+        [PANE_KEY_2]: {
+          parentPaneKey: PANE_KEY,
+          parentTerminalHandle: 'terminal-parent',
+          taskId: 'task-counsel',
+          dispatchId: 'ctx-counsel'
+        }
+      },
+      retainedAgentsByPaneKey: {},
+      tabsByWorktree: {
+        [worktree.id]: [tab1, tab2]
+      },
+      worktreeMap: new Map([[worktree.id, worktree]]),
+      repoMap: new Map([[repo.id, repo]]),
+      acknowledgedAgentsByPaneKey: {},
+      now: 5_000
+    })
+
+    expect(result.liveAgentByPaneKey[PANE_KEY_2].entry.orchestration?.parentPaneKey).toBe(PANE_KEY)
+    expect(result.liveAgentByPaneKey[PANE_KEY_2].entry.orchestration?.parentTerminalHandle).toBe(
+      'terminal-parent'
+    )
+  })
 })
diff --git a/src/renderer/src/components/activity/ActivityPrototypePage.thread-grouping.test.ts b/src/renderer/src/components/activity/ActivityPrototypePage.thread-grouping.test.ts
index 72a1b6d3355..0435f2c61f2 100644
--- a/src/renderer/src/components/activity/ActivityPrototypePage.thread-grouping.test.ts
+++ b/src/renderer/src/components/activity/ActivityPrototypePage.thread-grouping.test.ts
@@ -207,4 +207,17 @@ describe('activity thread grouping', () => {
   it('returns no groups for empty thread input', () => {
     expect(buildActivityThreadGroups([], 'status')).toEqual([])
   })
+
+  it('keeps all threads in one ungrouped list', () => {
+    const threads = makeThreads(
+      makeActivityResult({
+        entries: {
+          [PANE_KEY]: makeWorkingEntryWithoutHistory(),
+          [PANE_KEY_2]: makeWorkingEntryWithoutHistory()
+        }
+      })
+    )
+
+    expect(buildActivityThreadGroups(threads, 'none')).toEqual([{ key: 'all', label: '', threads }])
+  })
 })
diff --git a/src/renderer/src/components/activity/ActivityPrototypePage.tsx b/src/renderer/src/components/activity/ActivityPrototypePage.tsx
index 59fa8a0f1a0..83581d4cf10 100644
--- a/src/renderer/src/components/activity/ActivityPrototypePage.tsx
+++ b/src/renderer/src/components/activity/ActivityPrototypePage.tsx
@@ -1,8 +1,7 @@
 import React, { useCallback, useEffect, useLayoutEffect, useMemo, useRef, useState } from 'react'
-import { useShallow } from 'zustand/react/shallow'
-import { useSidebarResize } from '@/hooks/useSidebarResize'
 import { useAppStore } from '@/store'
-import { getRepoMapFromState, getWorktreeMapFromState } from '@/store/selectors'
+import { useSidebarResize } from '@/hooks/useSidebarResize'
+import { ActivityScopeFilterChips } from './activity-scope-filter-controls'
 import {
   setActivityTerminalPortals,
   type ActivityTerminalPortalTarget
@@ -11,15 +10,10 @@ import {
   reconcileActivityPortalThreads,
   resolveActivityPortalSwap
 } from './activity-portal-thread-reconciliation'
-import { buildActivityEvents } from './activity-event-builder'
-import { buildAgentPaneThreads } from './activity-thread-builder'
-import {
-  activityThreadMatchesSearchQuery,
-  buildActivityThreadGroups,
-  isActivitySearchQueryTooLarge
-} from './activity-thread-grouping'
+import { useAgentPaneThreads } from './use-agent-pane-threads'
 import { handleActivityFilterFocusShortcut } from './activity-filter-focus-shortcut'
-import { createActivityThreadActions } from './activity-thread-actions'
+import { hasActivityThreadWorkspace } from './activity-thread-actions'
+import { useActivityThreadActionBindings } from './use-activity-thread-action-bindings'
 import { ActivityThreadListPane } from './activity-thread-list-pane'
 import { ActivityThreadDetailPane } from './activity-thread-detail-pane'
 import {
@@ -42,7 +36,11 @@ export default function ActivityPrototypePage(): React.JSX.Element {
   const activityFilterInputRef = useRef<HTMLInputElement | null>(null)
   // Why: bounds auto mark-read to one acknowledgement per selected thread turn.
   const autoAcknowledgedTurnRef = useRef<string | null>(null)
-  const [compactMode, setCompactMode] = useState(false)
+  // Why store-backed: persisted preferences shared with the sidebar agents list.
+  const compactMode = useAppStore((s) => s.agentsCompactMode)
+  const setCompactMode = useAppStore((s) => s.setAgentsCompactMode)
+  const showChildAgents = useAppStore((s) => s.agentsShowChildAgents)
+  const setShowChildAgents = useAppStore((s) => s.setAgentsShowChildAgents)
   const [selectedPaneKey, setSelectedPaneKey] = useState<string | null>(null)
   const [displayedPaneKey, setDisplayedPaneKey] = useState<string | null>(null)
   const [activePortalSlotId, setActivePortalSlotId] =
@@ -64,86 +62,30 @@ export default function ActivityPrototypePage(): React.JSX.Element {
     setWidth: setThreadListWidth
   })
 
-  const storeData = useAppStore(
-    useShallow((s) => ({
-      agentStatusByPaneKey: s.agentStatusByPaneKey,
-      migrationUnsupportedByPtyId: s.migrationUnsupportedByPtyId,
-      retainedAgentsByPaneKey: s.retainedAgentsByPaneKey,
-      tabsByWorktree: s.tabsByWorktree,
-      worktreeMap: getWorktreeMapFromState(s),
-      repoMap: getRepoMapFromState(s),
-      acknowledgedAgentsByPaneKey: s.acknowledgedAgentsByPaneKey,
-      acknowledgeAgents: s.acknowledgeAgents,
-      unacknowledgeAgents: s.unacknowledgeAgents,
-      generatedTitlesEnabled: s.settings?.tabAutoGenerateTitle === true
-    }))
-  )
-  // Why: agentStatusEpoch is a dep (not used in the body) so the memo recomputes when freshness boundaries expire even without new PTY data.
-  const agentStatusEpoch = useAppStore((s) => s.agentStatusEpoch)
-
-  const { events: allEvents, liveAgentByPaneKey } = useMemo(
-    () =>
-      buildActivityEvents({
-        agentStatusByPaneKey: storeData.agentStatusByPaneKey,
-        migrationUnsupportedByPtyId: storeData.migrationUnsupportedByPtyId,
-        retainedAgentsByPaneKey: storeData.retainedAgentsByPaneKey,
-        tabsByWorktree: storeData.tabsByWorktree,
-        worktreeMap: storeData.worktreeMap,
-        repoMap: storeData.repoMap,
-        acknowledgedAgentsByPaneKey: storeData.acknowledgedAgentsByPaneKey,
-        // Why: Date.now() is read in the memo body (not a dep) so stale-decay recomputes when agentStatusEpoch ticks, not on wall-clock time.
-        now: Date.now()
-      }),
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-    [storeData, agentStatusEpoch]
-  )
-
-  const allThreads = useMemo(
-    () =>
-      buildAgentPaneThreads({
-        events: allEvents,
-        liveAgentByPaneKey,
-        generatedTitlesEnabled: storeData.generatedTitlesEnabled
-      }),
-    [allEvents, liveAgentByPaneKey, storeData.generatedTitlesEnabled]
-  )
-  const selectedPaneKeyIsLive =
-    selectedPaneKey === null || allThreads.some((thread) => thread.paneKey === selectedPaneKey)
-  const effectiveSelectedPaneKey = selectedPaneKeyIsLive ? selectedPaneKey : null
+  const {
+    storeData,
+    allThreads,
+    selectedPaneKeyIsLive,
+    effectiveSelectedPaneKey,
+    visibleThreads,
+    markAllReadThreads,
+    visibleThreadGroups
+  } = useAgentPaneThreads({ query, readFilter, groupBy, selectedPaneKey, showChildAgents })
   if (!selectedPaneKeyIsLive) {
     // Why: rows disappear when agent retention or tab state changes; clear stale selection before detail/portal rendering targets it.
     setSelectedPaneKey(null)
   }
 
-  const visibleThreads = useMemo(() => {
-    const normalizedQuery = isActivitySearchQueryTooLarge(query) ? null : query.trim().toLowerCase()
-    return allThreads.filter((thread) => {
-      // Why: keep the just-selected thread visible after auto-mark-read flips it to read, else unread-only mode makes the clicked row vanish from the list.
-      if (
-        readFilter === 'unread' &&
-        !thread.unread &&
-        thread.paneKey !== effectiveSelectedPaneKey
-      ) {
-        return false
-      }
-      if (normalizedQuery === null) {
-        return false
-      }
-      return activityThreadMatchesSearchQuery({ thread, searchQuery: normalizedQuery })
-    })
-  }, [allThreads, readFilter, query, effectiveSelectedPaneKey])
-  const visibleThreadGroups = useMemo(
-    () => buildActivityThreadGroups(visibleThreads, groupBy),
-    [visibleThreads, groupBy]
-  )
-
   const selectedThread = effectiveSelectedPaneKey
     ? (allThreads.find((thread) => thread.paneKey === effectiveSelectedPaneKey) ?? null)
     : null
   const selectedTabId = selectedThread?.tab.id ?? null
+  const selectedWorktreeAvailable = selectedThread
+    ? hasActivityThreadWorkspace(selectedThread, storeData)
+    : false
   // Why: repo-less terminal buckets can produce Activity rows, but the workspace Terminal tree only portals real worktrees.
   const selectedHasLiveTab =
-    selectedThread && selectedTabId && storeData.worktreeMap.has(selectedThread.worktree.id)
+    selectedThread && selectedTabId && selectedWorktreeAvailable
       ? (storeData.tabsByWorktree[selectedThread.worktree.id] ?? []).some(
           (tab) => tab.id === selectedTabId
         )
@@ -152,8 +94,11 @@ export default function ActivityPrototypePage(): React.JSX.Element {
     ? (allThreads.find((thread) => thread.paneKey === displayedPaneKey) ?? null)
     : null
   const displayedTabId = displayedThread?.tab.id ?? null
+  const displayedWorktreeAvailable = displayedThread
+    ? hasActivityThreadWorkspace(displayedThread, storeData)
+    : false
   const displayedHasLiveTab =
-    displayedThread && displayedTabId && storeData.worktreeMap.has(displayedThread.worktree.id)
+    displayedThread && displayedTabId && displayedWorktreeAvailable
       ? (storeData.tabsByWorktree[displayedThread.worktree.id] ?? []).some(
           (tab) => tab.id === displayedTabId
         )
@@ -298,13 +243,38 @@ export default function ActivityPrototypePage(): React.JSX.Element {
     return () => window.removeEventListener('keydown', focusActivityFilter, { capture: true })
   }, [activePortalTargetEl, inactivePortalTargetEl])
 
-  const { hasUnreadThreads, markThreadUnread, selectThread, jumpToWorkspace, markAllThreadsRead } =
-    createActivityThreadActions({
-      allThreads,
-      acknowledgeAgents: storeData.acknowledgeAgents,
-      unacknowledgeAgents: storeData.unacknowledgeAgents,
-      setSelectedPaneKey
-    })
+  const {
+    markThreadRead,
+    markThreadUnread,
+    selectThread,
+    jumpToWorkspace,
+    markAllThreadsRead,
+    hasUnreadThreads,
+    hasCompletedThreads,
+    handleClearCompleted
+  } = useActivityThreadActionBindings({
+    visibleThreads,
+    markAllReadThreads,
+    acknowledgeAgents: storeData.acknowledgeAgents,
+    unacknowledgeAgents: storeData.unacknowledgeAgents,
+    setSelectedPaneKey
+  })
+
+  const canJumpToWorkspace = useCallback(
+    (thread: Parameters<typeof hasActivityThreadWorkspace>[0]) =>
+      hasActivityThreadWorkspace(thread, {
+        worktreesByRepo: storeData.worktreesByRepo,
+        detectedWorktreesByRepo: storeData.detectedWorktreesByRepo,
+        folderWorkspaces: storeData.folderWorkspaces,
+        defaultHostId: storeData.defaultHostId
+      }),
+    [
+      storeData.worktreesByRepo,
+      storeData.detectedWorktreesByRepo,
+      storeData.folderWorkspaces,
+      storeData.defaultHostId
+    ]
+  )
 
   useEffect(() => {
     if (
@@ -356,25 +326,29 @@ export default function ActivityPrototypePage(): React.JSX.Element {
           readFilter={readFilter}
           onReadFilterChange={setReadFilter}
           compactMode={compactMode}
+          showChildAgents={showChildAgents}
           hasUnreadThreads={hasUnreadThreads}
           onCompactModeChange={setCompactMode}
+          onShowChildAgentsChange={setShowChildAgents}
           onMarkAllThreadsRead={markAllThreadsRead}
+          hasCompletedThreads={hasCompletedThreads}
+          onClearCompleted={handleClearCompleted}
           visibleThreadGroups={visibleThreadGroups}
           visibleThreadCount={visibleThreads.length}
           selectedPaneKey={selectedThread?.paneKey ?? null}
           onSelectThread={selectThread}
           onJumpToWorkspace={jumpToWorkspace}
+          onMarkThreadRead={markThreadRead}
           onMarkThreadUnread={markThreadUnread}
-          canJumpToWorkspace={(thread) => storeData.worktreeMap.has(thread.worktree.id)}
+          canJumpToWorkspace={canJumpToWorkspace}
           isThreadListResizing={isThreadListResizing}
           onResizeStart={onResizeStart}
+          scopeFilterRow={<ActivityScopeFilterChips />}
         />
         <ActivityThreadDetailPane
           selectedThread={selectedThread}
           selectedHasLiveTab={Boolean(selectedHasLiveTab)}
-          selectedWorktreeAvailable={Boolean(
-            selectedThread && storeData.worktreeMap.has(selectedThread.worktree.id)
-          )}
+          selectedWorktreeAvailable={selectedWorktreeAvailable}
           visibleThread={visibleThread}
           stagedThread={stagedThread}
           activePortalSlotId={activePortalSlotId}
diff --git a/src/renderer/src/components/activity/ActivityThreadOptionsMenu.test.tsx b/src/renderer/src/components/activity/ActivityThreadOptionsMenu.test.tsx
index b5d786f3568..7d4eb5e87b9 100644
--- a/src/renderer/src/components/activity/ActivityThreadOptionsMenu.test.tsx
+++ b/src/renderer/src/components/activity/ActivityThreadOptionsMenu.test.tsx
@@ -6,20 +6,33 @@ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 
 import { TooltipProvider } from '@/components/ui/tooltip'
 import { ActivityThreadOptionsMenu } from './ActivityPrototypePage'
+import type { ActivityGroupBy } from './activity-thread-types'
 
 globalThis.IS_REACT_ACT_ENVIRONMENT = true
 
 function Harness({
+  groupBy,
+  onGroupByChange,
   compactMode = false,
+  showChildAgents = false,
+  onShowChildAgentsChange,
   hasUnreadThreads = true
 }: {
+  groupBy?: ActivityGroupBy
+  onGroupByChange?: (groupBy: ActivityGroupBy) => void
   compactMode?: boolean
+  showChildAgents?: boolean
+  onShowChildAgentsChange?: (showChildAgents: boolean) => void
   hasUnreadThreads?: boolean
 }): ReactElement {
   return (
     <TooltipProvider>
       <ActivityThreadOptionsMenu
+        groupBy={groupBy}
+        onGroupByChange={onGroupByChange}
         compactMode={compactMode}
+        showChildAgents={showChildAgents}
+        onShowChildAgentsChange={onShowChildAgentsChange}
         hasUnreadThreads={hasUnreadThreads}
         onCompactModeChange={vi.fn()}
         onMarkAllThreadsRead={vi.fn()}
@@ -62,4 +75,141 @@ describe('ActivityThreadOptionsMenu', () => {
 
     expect(document.body.textContent).toContain('Compact mode')
   })
+
+  it('renders group by options when provided', async () => {
+    const onGroupByChange = vi.fn()
+    await act(async () => {
+      root.render(<Harness groupBy="status" onGroupByChange={onGroupByChange} />)
+    })
+
+    const trigger = container.querySelector<HTMLButtonElement>(
+      'button[aria-label="Thread list options"]'
+    )
+
+    await act(async () => {
+      trigger?.dispatchEvent(new KeyboardEvent('keydown', { bubbles: true, key: 'Enter' }))
+    })
+
+    expect(document.body.textContent).toContain('Group by')
+    expect(document.body.textContent).toContain('Status')
+
+    const subTrigger = document.querySelector<HTMLElement>(
+      '[data-slot="dropdown-menu-sub-trigger"]'
+    )
+    expect(subTrigger).not.toBeNull()
+
+    await act(async () => {
+      subTrigger?.dispatchEvent(new KeyboardEvent('keydown', { bubbles: true, key: 'ArrowRight' }))
+    })
+
+    expect(document.body.textContent).toContain('Project')
+    expect(document.body.textContent).toContain('Worktree')
+    expect(document.body.textContent).toContain('Agent')
+  })
+
+  it('explains compact mode on hover', async () => {
+    await act(async () => {
+      root.render(<Harness />)
+    })
+
+    const trigger = container.querySelector<HTMLButtonElement>(
+      'button[aria-label="Thread list options"]'
+    )
+    await act(async () => {
+      trigger?.dispatchEvent(new KeyboardEvent('keydown', { bubbles: true, key: 'Enter' }))
+    })
+
+    const compactMode = document.querySelector<HTMLElement>('[role="menuitemcheckbox"]')
+    await act(async () => {
+      compactMode?.dispatchEvent(new Event('pointermove', { bubbles: true }))
+    })
+
+    expect(document.body.textContent).toContain(
+      'Shows shorter thread rows with one-line titles and two-line status messages.'
+    )
+  })
+
+  it('puts search and unread actions in the menu when header overflow handlers are provided', async () => {
+    const onSearch = vi.fn()
+    const onToggleUnread = vi.fn()
+    await act(async () => {
+      root.render(
+        <TooltipProvider>
+          <ActivityThreadOptionsMenu
+            compactMode={false}
+            hasUnreadThreads={false}
+            onCompactModeChange={vi.fn()}
+            onMarkAllThreadsRead={vi.fn()}
+            onSearch={onSearch}
+            unreadOnly={false}
+            onToggleUnread={onToggleUnread}
+          />
+        </TooltipProvider>
+      )
+    })
+
+    const trigger = container.querySelector<HTMLButtonElement>(
+      'button[aria-label="Thread list options"]'
+    )
+    await act(async () => {
+      trigger?.dispatchEvent(new KeyboardEvent('keydown', { bubbles: true, key: 'Enter' }))
+    })
+
+    expect(document.body.textContent).toContain('Search')
+    expect(document.body.textContent).toContain('Show unread only')
+  })
+
+  it('explains show unread threads only on hover and shows unread dot when hasUnreadThreads is true', async () => {
+    const onToggleUnread = vi.fn()
+    await act(async () => {
+      root.render(
+        <TooltipProvider>
+          <ActivityThreadOptionsMenu
+            compactMode={false}
+            hasUnreadThreads={true}
+            onCompactModeChange={vi.fn()}
+            onMarkAllThreadsRead={vi.fn()}
+            unreadOnly={false}
+            onToggleUnread={onToggleUnread}
+          />
+        </TooltipProvider>
+      )
+    })
+
+    const trigger = container.querySelector<HTMLButtonElement>(
+      'button[aria-label="Thread list options"]'
+    )
+    await act(async () => {
+      trigger?.dispatchEvent(new KeyboardEvent('keydown', { bubbles: true, key: 'Enter' }))
+    })
+
+    const unreadItem = document.querySelector<HTMLElement>('[role="menuitemcheckbox"]')
+    await act(async () => {
+      unreadItem?.dispatchEvent(new Event('pointermove', { bubbles: true }))
+    })
+
+    expect(document.body.textContent).toContain(
+      'Filters the activity list to show only threads with unread updates.'
+    )
+    expect(document.querySelector('[data-unread-dot]')).not.toBeNull()
+  })
+
+  it('renders show child agents checkbox when onShowChildAgentsChange is provided', async () => {
+    const onShowChildAgentsChange = vi.fn()
+    await act(async () => {
+      root.render(
+        <Harness showChildAgents={false} onShowChildAgentsChange={onShowChildAgentsChange} />
+      )
+    })
+
+    const trigger = container.querySelector<HTMLButtonElement>(
+      'button[aria-label="Thread list options"]'
+    )
+
+    await act(async () => {
+      trigger?.dispatchEvent(new KeyboardEvent('keydown', { bubbles: true, key: 'Enter' }))
+    })
+
+    expect(document.body.textContent).toContain('Show child agents')
+  })
 })
diff --git a/src/renderer/src/components/activity/ActivityTitlebarControls.tsx b/src/renderer/src/components/activity/ActivityTitlebarControls.tsx
index 93ca4c65c1c..c6194ffcc96 100644
--- a/src/renderer/src/components/activity/ActivityTitlebarControls.tsx
+++ b/src/renderer/src/components/activity/ActivityTitlebarControls.tsx
@@ -8,7 +8,7 @@ import { useActivityUnreadCount } from './useActivityUnreadCount'
 import { translate } from '@/i18n/i18n'
 
 export function ActivityTitlebarControls(): React.JSX.Element {
-  const unreadCount = useActivityUnreadCount(true, 'agent-events')
+  const unreadCount = useActivityUnreadCount()
   const closeActivityPage = useAppStore((s) => s.closeActivityPage)
 
   return (
diff --git a/src/renderer/src/components/activity/activity-auto-mark-read-loop.react185.test.tsx b/src/renderer/src/components/activity/activity-auto-mark-read-loop.react185.test.tsx
index 9fdc4c0ecef..013afb58408 100644
--- a/src/renderer/src/components/activity/activity-auto-mark-read-loop.react185.test.tsx
+++ b/src/renderer/src/components/activity/activity-auto-mark-read-loop.react185.test.tsx
@@ -125,7 +125,7 @@ async function mountActivityPage(): Promise<void> {
 }
 
 async function selectSeededThread(): Promise<void> {
-  const row = Array.from(seededContainer.querySelectorAll<HTMLElement>('[role="button"]')).find(
+  const row = Array.from(seededContainer.querySelectorAll<HTMLElement>('[role="listitem"]')).find(
     (element) => element.textContent?.includes(PROMPT)
   )
   expect(row).toBeDefined()
diff --git a/src/renderer/src/components/activity/activity-clear-completed.test.ts b/src/renderer/src/components/activity/activity-clear-completed.test.ts
new file mode 100644
index 00000000000..3723563d143
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-clear-completed.test.ts
@@ -0,0 +1,362 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { RetainedAgentEntry } from '@/store/slices/agent-status'
+import type { ActivityEvent, AgentPaneThread } from './activity-thread-types'
+import { makeTab, makeWorktree } from './ActivityPrototypePage-test-fixtures'
+
+const mockStore = vi.hoisted(() => {
+  const state = {
+    activityClearedAtByPaneKey: {} as Record<string, number>,
+    agentStatusByPaneKey: {} as Record<string, RetainedAgentEntry['entry']>,
+    retainedAgentsByPaneKey: {} as Record<string, RetainedAgentEntry>,
+    retentionSuppressedPaneKeys: {} as Record<string, true>,
+    applyActivityClearedAt: vi.fn((patch: Record<string, number | null>) => {
+      const next = { ...state.activityClearedAtByPaneKey }
+      for (const [key, value] of Object.entries(patch)) {
+        if (value === null) {
+          delete next[key]
+        } else {
+          next[key] = value
+        }
+      }
+      state.activityClearedAtByPaneKey = next
+    }),
+    dismissRetainedAgents: vi.fn((paneKeys: readonly string[]) => {
+      const next = { ...state.retainedAgentsByPaneKey }
+      for (const key of paneKeys) {
+        if (state.agentStatusByPaneKey[key]) {
+          state.retentionSuppressedPaneKeys[key] = true
+        }
+        delete next[key]
+      }
+      state.retainedAgentsByPaneKey = next
+    }),
+    clearRetentionSuppressedPaneKeys: vi.fn((paneKeys: string[]) => {
+      for (const key of paneKeys) {
+        delete state.retentionSuppressedPaneKeys[key]
+      }
+    }),
+    retainAgents: vi.fn((entries: RetainedAgentEntry[]) => {
+      const next = { ...state.retainedAgentsByPaneKey }
+      for (const retained of entries) {
+        next[retained.entry.paneKey] = retained
+      }
+      state.retainedAgentsByPaneKey = next
+    })
+  }
+  return state
+})
+
+const toastSpy = vi.hoisted(() => vi.fn())
+
+vi.mock('@/store', () => ({
+  useAppStore: { getState: () => mockStore }
+}))
+vi.mock('sonner', () => ({ toast: toastSpy }))
+
+import {
+  CLEAR_COMPLETED_EVICTION_FALLBACK_MS,
+  clearCompletedActivity,
+  flushPendingClearCompletedEvictions,
+  isClearableActivityThread,
+  planClearCompletedActivity
+} from './activity-clear-completed'
+
+function makeThread(paneKey: string, overrides: Partial<AgentPaneThread> = {}): AgentPaneThread {
+  return {
+    paneKey,
+    tab: makeTab(),
+    worktree: makeWorktree(),
+    repo: null,
+    currentAgentState: null,
+    currentAgentEntry: null,
+    latestEvent: null,
+    latestTimestamp: 5_000,
+    agentType: 'claude',
+    unread: false,
+    paneTitle: `Agent ${paneKey}`,
+    responsePreview: '',
+    events: [],
+    ...overrides
+  }
+}
+
+function doneEvent(interrupted: boolean): ActivityEvent {
+  return {
+    id: 'evt',
+    state: 'done',
+    timestamp: 5_000,
+    worktree: makeWorktree(),
+    repo: null,
+    entry: { interrupted } as ActivityEvent['entry'],
+    tab: makeTab(),
+    agentType: 'claude',
+    agentAlive: false,
+    unread: false
+  }
+}
+
+const workingThread = makeThread('t-working:1', { currentAgentState: 'working' })
+const blockedThread = makeThread('t-blocked:1', { currentAgentState: 'blocked' })
+const waitingThread = makeThread('t-waiting:1', { currentAgentState: 'waiting' })
+const doneThread = makeThread('t-done:1', { latestEvent: doneEvent(false) })
+const interruptedThread = makeThread('t-interrupted:1', { latestEvent: doneEvent(true) })
+
+function makeRetained(paneKey: string): RetainedAgentEntry {
+  return {
+    entry: {
+      state: 'done',
+      prompt: 'retained run',
+      updatedAt: 5_000,
+      stateStartedAt: 5_000,
+      paneKey,
+      stateHistory: [],
+      agentType: 'claude'
+    },
+    worktreeId: 'wt-1',
+    tab: makeTab(),
+    agentType: 'claude',
+    startedAt: 5_000
+  }
+}
+
+describe('isClearableActivityThread', () => {
+  it('clears only completed and interrupted threads', () => {
+    expect(isClearableActivityThread(doneThread)).toBe(true)
+    expect(isClearableActivityThread(interruptedThread)).toBe(true)
+    expect(isClearableActivityThread(workingThread)).toBe(false)
+    expect(isClearableActivityThread(blockedThread)).toBe(false)
+    expect(isClearableActivityThread(waitingThread)).toBe(false)
+  })
+})
+
+describe('clearCompletedActivity', () => {
+  beforeEach(() => {
+    mockStore.activityClearedAtByPaneKey = {}
+    mockStore.agentStatusByPaneKey = {}
+    mockStore.retainedAgentsByPaneKey = { 't-done:1': makeRetained('t-done:1') }
+    mockStore.retentionSuppressedPaneKeys = {}
+    vi.stubGlobal('window', {
+      api: { agentStatus: { dropPersisted: vi.fn(), dropPersistedBatch: vi.fn() } }
+    })
+  })
+
+  afterEach(() => {
+    // Drain any eviction left pending by a test that never closed its toast.
+    flushPendingClearCompletedEvictions()
+    vi.clearAllMocks()
+    vi.unstubAllGlobals()
+  })
+
+  function lastToastOptions(): {
+    action: { label: string; onClick: () => void }
+    onDismiss: () => void
+    onAutoClose: () => void
+  } {
+    return toastSpy.mock.calls.at(-1)?.[1]
+  }
+
+  it('plans cutoffs and retained removals for completed threads only', () => {
+    const plan = planClearCompletedActivity(
+      [workingThread, blockedThread, doneThread, interruptedThread],
+      mockStore
+    )
+    expect(plan.clearedThreadCount).toBe(2)
+    expect(plan.cutoffPatch).toEqual({ 't-done:1': 5_000, 't-interrupted:1': 5_000 })
+    expect(plan.restorePatch).toEqual({ 't-done:1': null, 't-interrupted:1': null })
+    expect(plan.retainedSnapshots.map((r) => r.entry.paneKey)).toEqual(['t-done:1'])
+  })
+
+  it('stamps cutoffs, dismisses retained snapshots, and defers the disk drop to toast close', () => {
+    const cleared = clearCompletedActivity([workingThread, doneThread, interruptedThread])
+    expect(cleared).toBe(true)
+    expect(mockStore.activityClearedAtByPaneKey).toEqual({
+      't-done:1': 5_000,
+      't-interrupted:1': 5_000
+    })
+    expect(mockStore.dismissRetainedAgents).toHaveBeenCalledWith(['t-done:1'])
+    const drop = (
+      window as unknown as {
+        api: { agentStatus: { dropPersistedBatch: ReturnType<typeof vi.fn> } }
+      }
+    ).api.agentStatus.dropPersistedBatch
+    expect(drop).not.toHaveBeenCalled()
+
+    lastToastOptions().onAutoClose()
+    expect(drop).toHaveBeenCalledTimes(1)
+    expect(drop).toHaveBeenCalledWith([
+      expect.objectContaining({ paneKey: 't-done:1', receivedAt: 5_000, stateStartedAt: 5_000 })
+    ])
+    // A later dismiss must not double-drop.
+    lastToastOptions().onDismiss()
+    expect(drop).toHaveBeenCalledTimes(1)
+  })
+
+  it('undo restores prior cutoffs and re-retains snapshots, and skips the disk drop', () => {
+    mockStore.activityClearedAtByPaneKey = { 't-done:1': 1_111 }
+    clearCompletedActivity([doneThread, interruptedThread])
+    expect(mockStore.activityClearedAtByPaneKey).toEqual({
+      't-done:1': 5_000,
+      't-interrupted:1': 5_000
+    })
+    expect(mockStore.retainedAgentsByPaneKey['t-done:1']).toBeUndefined()
+
+    lastToastOptions().action.onClick()
+    expect(mockStore.activityClearedAtByPaneKey).toEqual({ 't-done:1': 1_111 })
+    expect(mockStore.retainedAgentsByPaneKey['t-done:1']).toBeDefined()
+
+    lastToastOptions().onAutoClose()
+    const drop = (
+      window as unknown as {
+        api: { agentStatus: { dropPersistedBatch: ReturnType<typeof vi.fn> } }
+      }
+    ).api.agentStatus.dropPersistedBatch
+    expect(drop).not.toHaveBeenCalled()
+  })
+
+  it('undo restores a completed live row and removes the suppressor created by clear', () => {
+    const retained = mockStore.retainedAgentsByPaneKey['t-done:1']
+    mockStore.agentStatusByPaneKey['t-done:1'] = retained.entry
+    mockStore.activityClearedAtByPaneKey = { 't-done:1': 1_111 }
+
+    clearCompletedActivity([doneThread])
+    expect(mockStore.activityClearedAtByPaneKey['t-done:1']).toBe(5_000)
+    expect(mockStore.retentionSuppressedPaneKeys['t-done:1']).toBe(true)
+
+    lastToastOptions().action.onClick()
+
+    expect(mockStore.activityClearedAtByPaneKey['t-done:1']).toBe(1_111)
+    expect(mockStore.retentionSuppressedPaneKeys['t-done:1']).toBeUndefined()
+    expect(mockStore.retainedAgentsByPaneKey['t-done:1']).toBeUndefined()
+  })
+
+  it('undo removes the suppressor even after an identity-only live entry replacement', () => {
+    // A runtime orchestration merge replaces the live entry object without a state
+    // change; the suppressor undo must key on the turn, not on object identity.
+    const retained = mockStore.retainedAgentsByPaneKey['t-done:1']
+    mockStore.agentStatusByPaneKey['t-done:1'] = retained.entry
+
+    clearCompletedActivity([doneThread])
+    expect(mockStore.retentionSuppressedPaneKeys['t-done:1']).toBe(true)
+    mockStore.agentStatusByPaneKey['t-done:1'] = { ...retained.entry }
+
+    lastToastOptions().action.onClick()
+
+    expect(mockStore.retentionSuppressedPaneKeys['t-done:1']).toBeUndefined()
+  })
+
+  it('undo keeps the suppressor when the live row has moved to a new turn', () => {
+    const retained = mockStore.retainedAgentsByPaneKey['t-done:1']
+    mockStore.agentStatusByPaneKey['t-done:1'] = retained.entry
+
+    clearCompletedActivity([doneThread])
+    mockStore.agentStatusByPaneKey['t-done:1'] = {
+      ...retained.entry,
+      stateStartedAt: retained.entry.stateStartedAt + 1
+    }
+
+    lastToastOptions().action.onClick()
+
+    expect(mockStore.retentionSuppressedPaneKeys['t-done:1']).toBe(true)
+  })
+
+  it('does not restore a cleared snapshot over a newer retained run', () => {
+    clearCompletedActivity([doneThread])
+    const newer = makeRetained('t-done:1')
+    newer.entry.prompt = 'newer run'
+    mockStore.retainedAgentsByPaneKey['t-done:1'] = newer
+
+    lastToastOptions().action.onClick()
+
+    expect(mockStore.retainedAgentsByPaneKey['t-done:1']).toBe(newer)
+    expect(mockStore.activityClearedAtByPaneKey['t-done:1']).toBeUndefined()
+  })
+
+  it('stamps a real cutoff for a thread with no usable timestamp', () => {
+    // A zero cutoff is dropped by the hydrate sanitizer and the clear would replay after restart.
+    const unstamped = makeThread('t-done:1', { latestEvent: doneEvent(false), latestTimestamp: 0 })
+    const plan = planClearCompletedActivity([unstamped], mockStore, 42_000)
+    expect(plan.cutoffPatch).toEqual({ 't-done:1': 42_000 })
+  })
+
+  it('evicts after the fallback window when no toast close callback ever fires', () => {
+    vi.useFakeTimers()
+    try {
+      clearCompletedActivity([doneThread])
+      const drop = (
+        window as unknown as {
+          api: { agentStatus: { dropPersistedBatch: ReturnType<typeof vi.fn> } }
+        }
+      ).api.agentStatus.dropPersistedBatch
+      expect(drop).not.toHaveBeenCalled()
+
+      vi.advanceTimersByTime(CLEAR_COMPLETED_EVICTION_FALLBACK_MS)
+      expect(drop).toHaveBeenCalledTimes(1)
+
+      lastToastOptions().onDismiss()
+      expect(drop).toHaveBeenCalledTimes(1)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('undo cancels the fallback eviction timer', () => {
+    vi.useFakeTimers()
+    try {
+      clearCompletedActivity([doneThread])
+      lastToastOptions().action.onClick()
+      vi.advanceTimersByTime(CLEAR_COMPLETED_EVICTION_FALLBACK_MS)
+      const drop = (
+        window as unknown as {
+          api: { agentStatus: { dropPersistedBatch: ReturnType<typeof vi.fn> } }
+        }
+      ).api.agentStatus.dropPersistedBatch
+      expect(drop).not.toHaveBeenCalled()
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('falls back to per-identity drops when the batch API is absent', () => {
+    const dropOne = vi.fn()
+    vi.stubGlobal('window', { api: { agentStatus: { dropPersisted: dropOne } } })
+    clearCompletedActivity([doneThread])
+    lastToastOptions().onAutoClose()
+    expect(dropOne).toHaveBeenCalledTimes(1)
+  })
+
+  it('does nothing when no thread is clearable', () => {
+    expect(clearCompletedActivity([workingThread, blockedThread])).toBe(false)
+    expect(toastSpy).not.toHaveBeenCalled()
+    expect(mockStore.applyActivityClearedAt).not.toHaveBeenCalled()
+  })
+
+  it('pagehide flush evicts a clear whose undo toast is still open', () => {
+    clearCompletedActivity([doneThread])
+    const drop = (
+      window as unknown as {
+        api: { agentStatus: { dropPersistedBatch: ReturnType<typeof vi.fn> } }
+      }
+    ).api.agentStatus.dropPersistedBatch
+    expect(drop).not.toHaveBeenCalled()
+
+    // Quit/reload path: the toast's close callbacks never fire.
+    flushPendingClearCompletedEvictions()
+    expect(drop).toHaveBeenCalledTimes(1)
+
+    // The flushed eviction is consumed; later toast close must not double-drop.
+    lastToastOptions().onAutoClose()
+    expect(drop).toHaveBeenCalledTimes(1)
+  })
+
+  it('pagehide flush skips a clear that was undone', () => {
+    clearCompletedActivity([doneThread])
+    lastToastOptions().action.onClick()
+    flushPendingClearCompletedEvictions()
+    const drop = (
+      window as unknown as {
+        api: { agentStatus: { dropPersistedBatch: ReturnType<typeof vi.fn> } }
+      }
+    ).api.agentStatus.dropPersistedBatch
+    expect(drop).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-clear-completed.ts b/src/renderer/src/components/activity/activity-clear-completed.ts
new file mode 100644
index 00000000000..72eee3ea4af
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-clear-completed.ts
@@ -0,0 +1,206 @@
+import { toast } from 'sonner'
+import { useAppStore } from '@/store'
+import { translate } from '@/i18n/i18n'
+import type { RetainedAgentEntry } from '@/store/slices/agent-status'
+import type { AgentStatusCacheIdentity } from '../../../../shared/agent-status-types'
+import { threadStatusGroupId } from './activity-thread-grouping'
+import type { AgentPaneThread } from './activity-thread-types'
+
+export type ClearCompletedActivityPlan = {
+  /** Panes whose activity gets a cleared-at cutoff stamped. */
+  cutoffPatch: Record<string, number | null>
+  /** Exact prior cutoff values (or null when absent) so undo restores byte-for-byte. */
+  restorePatch: Record<string, number | null>
+  /** Retained snapshots removed by the clear; undo re-retains them verbatim. */
+  retainedSnapshots: RetainedAgentEntry[]
+  /** Exact status identities cleared so deferred disk eviction cannot remove a later run. */
+  cacheIdentities: AgentStatusCacheIdentity[]
+  clearedThreadCount: number
+}
+
+/** A thread is clearable when it needs nothing from the user: completed or interrupted,
+ *  with no fresh live working/monitoring/blocked/waiting state. */
+export function isClearableActivityThread(thread: AgentPaneThread): boolean {
+  const groupId = threadStatusGroupId(thread)
+  return groupId === 'done' || groupId === 'interrupted'
+}
+
+export function planClearCompletedActivity(
+  threads: readonly AgentPaneThread[],
+  state: {
+    activityClearedAtByPaneKey: Record<string, number>
+    retainedAgentsByPaneKey: Record<string, RetainedAgentEntry>
+  },
+  now: number = Date.now()
+): ClearCompletedActivityPlan {
+  const cutoffPatch: Record<string, number | null> = {}
+  const restorePatch: Record<string, number | null> = {}
+  const retainedSnapshots: RetainedAgentEntry[] = []
+  const cacheIdentities: AgentStatusCacheIdentity[] = []
+  let clearedThreadCount = 0
+  for (const thread of threads) {
+    if (!isClearableActivityThread(thread)) {
+      continue
+    }
+    clearedThreadCount += 1
+    const previousCutoff = state.activityClearedAtByPaneKey[thread.paneKey] ?? null
+    const latestCutoff = Math.max(previousCutoff ?? 0, thread.latestTimestamp)
+    // Why `now` for an unstamped thread: the hydrate sanitizer drops non-positive cutoffs, so a
+    // zero cutoff would replay the cleared thread after restart.
+    cutoffPatch[thread.paneKey] = latestCutoff > 0 ? latestCutoff : now
+    restorePatch[thread.paneKey] = previousCutoff
+    const retained = state.retainedAgentsByPaneKey[thread.paneKey]
+    if (retained) {
+      retainedSnapshots.push(retained)
+      const entry = retained.entry
+      // updatedAt mirrors the wire receivedAt; renderer-enriched fields (connectionId,
+      // worktreeId) diverge from main's cache and are deliberately excluded.
+      cacheIdentities.push({
+        paneKey: thread.paneKey,
+        receivedAt: entry.updatedAt,
+        stateStartedAt: entry.stateStartedAt
+      })
+    }
+  }
+  return { cutoffPatch, restorePatch, retainedSnapshots, cacheIdentities, clearedThreadCount }
+}
+
+// Deferred evictions whose undo toast is still open; flushed on pagehide because the toast's
+// close callbacks never fire on quit/reload, which would let cleared rows replay next launch.
+const pendingDiskEvictions = new Set<() => void>()
+export function flushPendingClearCompletedEvictions(): void {
+  // Set iteration tolerates the self-delete each evict() performs.
+  for (const evict of pendingDiskEvictions) {
+    evict()
+  }
+}
+if (typeof window !== 'undefined') {
+  window.addEventListener('pagehide', flushPendingClearCompletedEvictions)
+}
+
+// Why a fallback: sonner only fires onDismiss/onAutoClose for the toast's own close paths; a
+// `toast.dismiss()` from another caller leaves the eviction pending until pagehide.
+export const CLEAR_COMPLETED_EVICTION_FALLBACK_MS = 60_000
+
+function evictPersistedStatuses(identities: readonly AgentStatusCacheIdentity[]): void {
+  const api = window.api?.agentStatus
+  if (!api || identities.length === 0) {
+    return
+  }
+  if (api.dropPersistedBatch) {
+    api.dropPersistedBatch(identities)
+    return
+  }
+  for (const identity of identities) {
+    api.dropPersisted?.(identity)
+  }
+}
+
+/**
+ * Clear completed/interrupted activity threads with an undo window.
+ *
+ * Live agent status, resume identity, and attention/working rows are untouched:
+ * clearing stamps per-pane cutoffs (persisted UI) and removes retained completed
+ * snapshots. The identity-checked main-process cache eviction is deferred until
+ * the undo toast closes so Undo can restore everything losslessly.
+ */
+export function clearCompletedActivity(threads: readonly AgentPaneThread[]): boolean {
+  const state = useAppStore.getState()
+  const plan = planClearCompletedActivity(threads, state)
+  if (plan.clearedThreadCount === 0) {
+    return false
+  }
+  state.applyActivityClearedAt(plan.cutoffPatch)
+  // Why turn timestamps, not entry identity: a runtime orchestration merge replaces the live
+  // entry object without a state change (setRuntimeAgentOrchestrationByPaneKey), and an
+  // identity check would then strand the clear-planted suppressor past Undo, losing the run.
+  const introducedSuppressorLiveTurns = new Map(
+    plan.retainedSnapshots.flatMap((retained) => {
+      const paneKey = retained.entry.paneKey
+      const liveEntry = state.agentStatusByPaneKey[paneKey]
+      return liveEntry && !state.retentionSuppressedPaneKeys[paneKey]
+        ? ([[paneKey, liveEntry.stateStartedAt]] as const)
+        : []
+    })
+  )
+  state.dismissRetainedAgents(plan.retainedSnapshots.map((retained) => retained.entry.paneKey))
+
+  let undone = false
+  let dropped = false
+  let fallbackTimer: ReturnType<typeof setTimeout> | null = null
+  const dropRetainedFromDiskCache = (): void => {
+    pendingDiskEvictions.delete(dropRetainedFromDiskCache)
+    if (fallbackTimer !== null) {
+      clearTimeout(fallbackTimer)
+      fallbackTimer = null
+    }
+    if (undone || dropped) {
+      return
+    }
+    dropped = true
+    evictPersistedStatuses(plan.cacheIdentities)
+  }
+  pendingDiskEvictions.add(dropRetainedFromDiskCache)
+  fallbackTimer = setTimeout(dropRetainedFromDiskCache, CLEAR_COMPLETED_EVICTION_FALLBACK_MS)
+  toast(
+    plan.clearedThreadCount === 1
+      ? translate('auto.components.activity.clearCompleted.clearedOne', 'Cleared 1 completed agent')
+      : translate(
+          'auto.components.activity.clearCompleted.clearedMany',
+          'Cleared {{count}} completed agents',
+          { count: plan.clearedThreadCount }
+        ),
+    {
+      action: {
+        label: translate('auto.components.activity.clearCompleted.undo', 'Undo'),
+        onClick: () => {
+          undone = true
+          pendingDiskEvictions.delete(dropRetainedFromDiskCache)
+          if (fallbackTimer !== null) {
+            clearTimeout(fallbackTimer)
+            fallbackTimer = null
+          }
+          const current = useAppStore.getState()
+          const retainedByPaneKey = new Map(
+            plan.retainedSnapshots.map((retained) => [retained.entry.paneKey, retained])
+          )
+          const restorePatch: Record<string, number | null> = {}
+          const snapshotsToRestore: RetainedAgentEntry[] = []
+          const suppressorPaneKeysToClear: string[] = []
+          for (const paneKey of Object.keys(plan.restorePatch)) {
+            const currentLive = current.agentStatusByPaneKey?.[paneKey]
+            const currentRetained = current.retainedAgentsByPaneKey[paneKey]
+            const clearedSnapshot = retainedByPaneKey.get(paneKey)
+            const cutoffStillOwned =
+              current.activityClearedAtByPaneKey[paneKey] === plan.cutoffPatch[paneKey]
+            if (cutoffStillOwned) {
+              restorePatch[paneKey] = plan.restorePatch[paneKey] ?? null
+            }
+            if (
+              cutoffStillOwned &&
+              introducedSuppressorLiveTurns.has(paneKey) &&
+              currentLive?.stateStartedAt === introducedSuppressorLiveTurns.get(paneKey) &&
+              current.retentionSuppressedPaneKeys[paneKey]
+            ) {
+              suppressorPaneKeysToClear.push(paneKey)
+            }
+            if (currentLive || (currentRetained && currentRetained !== clearedSnapshot)) {
+              continue
+            }
+            if (clearedSnapshot && !currentRetained) {
+              snapshotsToRestore.push(clearedSnapshot)
+            }
+          }
+          current.applyActivityClearedAt(restorePatch)
+          current.clearRetentionSuppressedPaneKeys(suppressorPaneKeysToClear)
+          if (snapshotsToRestore.length > 0) {
+            current.retainAgents(snapshotsToRestore)
+          }
+        }
+      },
+      onDismiss: dropRetainedFromDiskCache,
+      onAutoClose: dropRetainedFromDiskCache
+    }
+  )
+  return true
+}
diff --git a/src/renderer/src/components/activity/activity-event-build-cache.ts b/src/renderer/src/components/activity/activity-event-build-cache.ts
new file mode 100644
index 00000000000..09f713c5170
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-event-build-cache.ts
@@ -0,0 +1,129 @@
+import { entryWithRuntimeOrchestration } from '../sidebar/worktree-agent-row-orchestration'
+import type {
+  AgentStatusEntry,
+  AgentStatusOrchestrationContext,
+  AgentType
+} from '../../../../shared/agent-status-types'
+import type { Repo } from '../../../../shared/repo-types'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+import type {
+  ActivityEvent,
+  ActivityLiveAgentSnapshot,
+  ActivityLiveAgentState
+} from './activity-thread-types'
+import { buildPaneActivityEvents } from './activity-pane-events'
+
+type PaneActivityCacheEntry = {
+  source: unknown
+  orchestration: AgentStatusOrchestrationContext | undefined
+  acknowledgedAt: number
+  clearedAt: number
+  worktree: Worktree
+  repo: Repo | null
+  tab: TerminalTab
+  events: ActivityEvent[]
+  live: ActivityLiveAgentSnapshot | null
+  rowEntry: AgentStatusEntry
+}
+
+export type ActivityEventBuildCache = {
+  panes: Map<string, PaneActivityCacheEntry>
+}
+
+export function createActivityEventBuildCache(): ActivityEventBuildCache {
+  return { panes: new Map() }
+}
+
+export type PaneBuildRequest = {
+  cacheKey: string
+  source: unknown
+  entry: AgentStatusEntry
+  orchestration: AgentStatusOrchestrationContext | undefined
+  worktree: Worktree
+  repo: Repo | null
+  tab: TerminalTab
+  agentType: AgentType
+  agentAlive: boolean
+  acknowledgedAt: number
+  clearedAt: number
+  migrationUnsupportedPtyId?: string
+  liveState: ActivityLiveAgentState | null
+}
+
+export function resolvePaneBuild(
+  request: PaneBuildRequest,
+  cache: ActivityEventBuildCache | undefined,
+  seenCacheKeys: Set<string> | null
+): { events: ActivityEvent[]; live: ActivityLiveAgentSnapshot | null } {
+  seenCacheKeys?.add(request.cacheKey)
+  const cached = cache?.panes.get(request.cacheKey)
+  const inputsUnchanged =
+    cached !== undefined &&
+    cached.source === request.source &&
+    cached.orchestration === request.orchestration &&
+    cached.acknowledgedAt === request.acknowledgedAt &&
+    cached.clearedAt === request.clearedAt &&
+    cached.worktree === request.worktree &&
+    cached.repo === request.repo &&
+    cached.tab === request.tab
+  const rowEntry = inputsUnchanged
+    ? cached.rowEntry
+    : entryWithRuntimeOrchestration(
+        request.entry,
+        request.orchestration ? { [request.entry.paneKey]: request.orchestration } : undefined
+      )
+
+  const liveTimestamp = rowEntry.stateStartedAt
+  const liveMatchesCache =
+    inputsUnchanged &&
+    (request.liveState === null
+      ? cached.live === null
+      : cached.live !== null &&
+        cached.live.state === request.liveState &&
+        cached.live.timestamp === liveTimestamp)
+
+  if (inputsUnchanged && liveMatchesCache) {
+    return { events: cached.events, live: cached.live }
+  }
+
+  const events = inputsUnchanged
+    ? cached.events
+    : buildPaneActivityEvents({
+        entry: rowEntry,
+        worktree: request.worktree,
+        repo: request.repo,
+        tab: request.tab,
+        agentType: request.agentType,
+        agentAlive: request.agentAlive,
+        acknowledgedAt: request.acknowledgedAt,
+        clearedAt: request.clearedAt,
+        migrationUnsupportedPtyId: request.migrationUnsupportedPtyId
+      })
+  const live: ActivityLiveAgentSnapshot | null =
+    request.liveState === null
+      ? null
+      : {
+          state: request.liveState,
+          timestamp: liveTimestamp,
+          worktree: request.worktree,
+          repo: request.repo,
+          entry: rowEntry,
+          tab: request.tab,
+          agentType: request.agentType
+        }
+
+  cache?.panes.set(request.cacheKey, {
+    source: request.source,
+    orchestration: request.orchestration,
+    acknowledgedAt: request.acknowledgedAt,
+    clearedAt: request.clearedAt,
+    worktree: request.worktree,
+    repo: request.repo,
+    tab: request.tab,
+    events,
+    live,
+    rowEntry
+  })
+  return { events, live }
+}
diff --git a/src/renderer/src/components/activity/activity-event-builder-agent-context.test.ts b/src/renderer/src/components/activity/activity-event-builder-agent-context.test.ts
new file mode 100644
index 00000000000..4f876eb5824
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-event-builder-agent-context.test.ts
@@ -0,0 +1,165 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import type { Tab } from '../../../../shared/tab-types'
+import {
+  makeRepo,
+  makeWorkingEntryWithoutHistory,
+  makeWorktree,
+  PANE_KEY
+} from './ActivityPrototypePage-test-fixtures'
+import { buildActivityEvents } from './activity-event-builder'
+
+function build(args: {
+  entry: AgentStatusEntry
+  unifiedTabs?: Tab[]
+}): ReturnType<typeof buildActivityEvents> {
+  const repo = makeRepo()
+  const worktree = makeWorktree()
+  return buildActivityEvents({
+    agentStatusByPaneKey: { [PANE_KEY]: args.entry },
+    retainedAgentsByPaneKey: {},
+    tabsByWorktree: { [worktree.id]: [] },
+    unifiedTabsByWorktree: { [worktree.id]: args.unifiedTabs ?? [] },
+    worktreeMap: new Map([[worktree.id, worktree]]),
+    repoMap: new Map([[repo.id, repo]]),
+    acknowledgedAgentsByPaneKey: {},
+    now: 3_000
+  })
+}
+
+describe('activity event agent contexts', () => {
+  it('builds a live thread context from a unified structured-agent tab', () => {
+    const structuredTab = {
+      id: 'tab-1',
+      entityId: 'session-1',
+      groupId: 'group-1',
+      worktreeId: 'wt-1',
+      executionHostId: 'local',
+      contentType: 'agent-session',
+      label: 'Codex chat',
+      customLabel: null,
+      color: null,
+      sortOrder: 0,
+      createdAt: 1,
+      agentSessionAgent: 'codex'
+    } satisfies Tab
+
+    const result = build({
+      entry: makeWorkingEntryWithoutHistory(),
+      unifiedTabs: [structuredTab]
+    })
+
+    expect(result.liveAgentByPaneKey[PANE_KEY]).toMatchObject({
+      state: 'working',
+      worktree: { id: 'wt-1' },
+      tab: { id: 'tab-1', ptyId: null, title: 'Codex chat' }
+    })
+  })
+
+  it('uses direct worktree attribution before an agent tab reaches the renderer', () => {
+    const result = build({
+      entry: {
+        ...makeWorkingEntryWithoutHistory(),
+        worktreeId: 'wt-1'
+      }
+    })
+
+    expect(result.liveAgentByPaneKey[PANE_KEY]).toMatchObject({
+      state: 'working',
+      worktree: { id: 'wt-1' },
+      tab: { id: 'tab-1', worktreeId: 'wt-1', ptyId: null }
+    })
+  })
+
+  it('preserves a unified structured session remote-runtime owner', () => {
+    const localRepo = makeRepo()
+    const runtimeRepo = {
+      ...makeRepo(),
+      executionHostId: 'runtime:env-1' as const,
+      displayName: 'Runtime repo'
+    }
+    const localWorktree = makeWorktree()
+    const runtimeWorktree = {
+      ...makeWorktree(),
+      hostId: 'runtime:env-1' as const,
+      runtimeOwnerEnvironmentId: 'env-1',
+      displayName: 'Runtime worktree'
+    }
+    const structuredTab = {
+      id: 'tab-1',
+      entityId: 'session-1',
+      groupId: 'group-1',
+      worktreeId: 'wt-1',
+      executionHostId: 'runtime:env-1',
+      contentType: 'agent-session',
+      label: 'Remote Codex chat',
+      customLabel: null,
+      color: null,
+      sortOrder: 0,
+      createdAt: 1,
+      agentSessionAgent: 'codex'
+    } satisfies Tab
+    const resolveWorktree = vi.fn((_worktreeId, executionHostId) =>
+      executionHostId === 'runtime:env-1' ? runtimeWorktree : localWorktree
+    )
+
+    const result = buildActivityEvents({
+      agentStatusByPaneKey: {
+        [PANE_KEY]: { ...makeWorkingEntryWithoutHistory(), connectionId: null }
+      },
+      retainedAgentsByPaneKey: {},
+      tabsByWorktree: { [localWorktree.id]: [] },
+      unifiedTabsByWorktree: { [localWorktree.id]: [structuredTab] },
+      worktreeMap: new Map([[localWorktree.id, localWorktree]]),
+      repoMap: new Map([[localRepo.id, localRepo]]),
+      repos: [localRepo, runtimeRepo],
+      resolveWorktree,
+      acknowledgedAgentsByPaneKey: {},
+      now: 3_000
+    })
+
+    expect(resolveWorktree).toHaveBeenCalledWith('wt-1', 'runtime:env-1')
+    expect(result.liveAgentByPaneKey[PANE_KEY]?.worktree).toBe(runtimeWorktree)
+    expect(result.liveAgentByPaneKey[PANE_KEY]?.repo).toBe(runtimeRepo)
+  })
+
+  it('preserves an early worktree-attributed SSH owner before its tab arrives', () => {
+    const localRepo = makeRepo()
+    const remoteRepo = {
+      ...makeRepo(),
+      connectionId: 'builder',
+      displayName: 'SSH repo'
+    }
+    const localWorktree = makeWorktree()
+    const remoteWorktree = {
+      ...makeWorktree(),
+      hostId: 'ssh:builder' as const,
+      displayName: 'SSH worktree'
+    }
+    const resolveWorktree = vi.fn((_worktreeId, executionHostId) =>
+      executionHostId === 'ssh:builder' ? remoteWorktree : localWorktree
+    )
+
+    const result = buildActivityEvents({
+      agentStatusByPaneKey: {
+        [PANE_KEY]: {
+          ...makeWorkingEntryWithoutHistory(),
+          worktreeId: 'wt-1',
+          connectionId: 'builder'
+        }
+      },
+      retainedAgentsByPaneKey: {},
+      tabsByWorktree: { [localWorktree.id]: [] },
+      worktreeMap: new Map([[localWorktree.id, localWorktree]]),
+      repoMap: new Map([[localRepo.id, localRepo]]),
+      repos: [localRepo, remoteRepo],
+      resolveWorktree,
+      acknowledgedAgentsByPaneKey: {},
+      now: 3_000
+    })
+
+    expect(resolveWorktree).toHaveBeenCalledWith('wt-1', 'ssh:builder')
+    expect(result.liveAgentByPaneKey[PANE_KEY]?.worktree).toBe(remoteWorktree)
+    expect(result.liveAgentByPaneKey[PANE_KEY]?.repo).toBe(remoteRepo)
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-event-builder-context.ts b/src/renderer/src/components/activity/activity-event-builder-context.ts
new file mode 100644
index 00000000000..3fdd2584fef
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-event-builder-context.ts
@@ -0,0 +1,182 @@
+import { findIndexedRepoOwnerForHost } from '@/lib/worktree-runtime-owner-index'
+import { getRemoteRuntimePtyEnvironmentId } from '@/runtime/runtime-terminal-stream'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import {
+  LOCAL_EXECUTION_HOST_ID,
+  toRuntimeExecutionHostId,
+  toSshExecutionHostId,
+  type ExecutionHostId
+} from '../../../../shared/execution-host'
+import type { Repo } from '../../../../shared/repo-types'
+import { parseAppSshPtyId } from '../../../../shared/ssh-pty-id'
+import type { Tab } from '../../../../shared/tab-types'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+import {
+  effectiveWorktreeAgentRowStartedAt,
+  tabFromWorktreeAttributedStatusEntry
+} from '../sidebar/worktree-agent-row-fallback-tab'
+import type { BuildActivityEventsArgs } from './activity-event-builder'
+import { standaloneActivityWorktree } from './activity-standalone-worktree'
+
+export type ActivityTabContext = { worktreeId: string; tab: TerminalTab }
+export type ActivityEventOwner = { worktree: Worktree; repo: Repo | null; knownWorktree: boolean }
+export type ActivityTabHostIndex = Map<string, Map<string, ExecutionHostId | null>>
+
+// Why memoized on the source object: the pane build cache compares `tab` by identity, so a
+// fresh derived object per rebuild would miss the cache for every agent-session and
+// missing-tab row. Upstream keeps the source identity stable while its fields are unchanged.
+const agentSessionTerminalTabs = new WeakMap<Tab, TerminalTab>()
+const attributedTabContexts = new WeakMap<AgentStatusEntry, ActivityTabContext | null>()
+
+function terminalTabFromAgentSessionTab(tab: Tab): TerminalTab {
+  const cached = agentSessionTerminalTabs.get(tab)
+  if (cached) {
+    return cached
+  }
+  const derived: TerminalTab = {
+    id: tab.id,
+    ptyId: null,
+    worktreeId: tab.worktreeId,
+    title: tab.customLabel ?? tab.generatedLabel ?? tab.label,
+    customTitle: tab.customLabel,
+    color: tab.color,
+    isPinned: tab.isPinned,
+    sortOrder: tab.sortOrder,
+    createdAt: tab.createdAt
+  }
+  agentSessionTerminalTabs.set(tab, derived)
+  return derived
+}
+
+export function buildActivityTabContext(
+  tabsByWorktree: Record<string, TerminalTab[]>,
+  unifiedTabsByWorktree?: Record<string, Tab[]>
+): Map<string, ActivityTabContext> {
+  const contexts = new Map<string, ActivityTabContext>()
+  for (const [worktreeId, tabs] of Object.entries(tabsByWorktree)) {
+    for (const tab of tabs) {
+      contexts.set(tab.id, { worktreeId, tab })
+    }
+  }
+  for (const [worktreeId, tabs] of Object.entries(unifiedTabsByWorktree ?? {})) {
+    for (const tab of tabs) {
+      if (tab.contentType !== 'agent-session' || contexts.has(tab.id)) {
+        continue
+      }
+      contexts.set(tab.id, { worktreeId, tab: terminalTabFromAgentSessionTab(tab) })
+    }
+  }
+  return contexts
+}
+
+export function attributedActivityTabContext(entry: AgentStatusEntry): ActivityTabContext | null {
+  const cached = attributedTabContexts.get(entry)
+  if (cached !== undefined) {
+    return cached
+  }
+  const tab = tabFromWorktreeAttributedStatusEntry(entry, effectiveWorktreeAgentRowStartedAt(entry))
+  const context = tab ? { worktreeId: tab.worktreeId, tab } : null
+  attributedTabContexts.set(entry, context)
+  return context
+}
+
+export function buildActivityTabHostIndex(
+  unifiedTabsByWorktree?: Record<string, Tab[]>
+): ActivityTabHostIndex {
+  const index: ActivityTabHostIndex = new Map()
+  for (const [worktreeId, tabs] of Object.entries(unifiedTabsByWorktree ?? {})) {
+    for (const tab of tabs) {
+      if (
+        (tab.contentType !== 'terminal' && tab.contentType !== 'agent-session') ||
+        !tab.executionHostId
+      ) {
+        continue
+      }
+      let byTabId = index.get(worktreeId)
+      if (!byTabId) {
+        byTabId = new Map()
+        index.set(worktreeId, byTabId)
+      }
+      const contextTabId = tab.contentType === 'terminal' ? tab.entityId : tab.id
+      const existing = byTabId.get(contextTabId)
+      byTabId.set(
+        contextTabId,
+        existing === undefined || existing === tab.executionHostId ? tab.executionHostId : null
+      )
+    }
+  }
+  return index
+}
+
+function resolveActivityExecutionHostId(
+  context: ActivityTabContext,
+  entry: AgentStatusEntry,
+  terminalPtyId: string | null | undefined,
+  tabHostIndex: ActivityTabHostIndex
+): ExecutionHostId | undefined {
+  const tabHostId = tabHostIndex.get(context.worktreeId)?.get(context.tab.id)
+  if (tabHostId) {
+    return tabHostId
+  }
+  // Why before connectionId: a runtime pane's status entry publishes connectionId: null,
+  // which would otherwise resolve to LOCAL (see dashboard-card-terminal-input's precedent).
+  const runtimeEnvironmentId = getRemoteRuntimePtyEnvironmentId(terminalPtyId ?? '')
+  if (runtimeEnvironmentId) {
+    return toRuntimeExecutionHostId(runtimeEnvironmentId)
+  }
+  if (entry.connectionId !== undefined) {
+    return entry.connectionId ? toSshExecutionHostId(entry.connectionId) : LOCAL_EXECUTION_HOST_ID
+  }
+  const connectionId = parseAppSshPtyId(terminalPtyId ?? '')?.connectionId
+  return connectionId ? toSshExecutionHostId(connectionId) : undefined
+}
+
+export function resolveActivityEventOwner(
+  args: BuildActivityEventsArgs,
+  context: ActivityTabContext,
+  entry: AgentStatusEntry,
+  terminalPtyId: string | null | undefined,
+  tabHostIndex: ActivityTabHostIndex,
+  ownerCache: Map<string, ActivityEventOwner>
+): ActivityEventOwner {
+  const executionHostId = resolveActivityExecutionHostId(
+    context,
+    entry,
+    terminalPtyId,
+    tabHostIndex
+  )
+  // Why: resolution runs per pane per rebuild and the miss path scans detected worktrees;
+  // everything below depends only on worktreeId + host, so memoize per build.
+  const ownerCacheKey = `${context.worktreeId}\0${executionHostId ?? ''}`
+  const cached = ownerCache.get(ownerCacheKey)
+  if (cached) {
+    return cached
+  }
+  const resolvedWorktree = args.resolveWorktree?.(context.worktreeId, executionHostId)
+  const mappedWorktree = args.worktreeMap.get(context.worktreeId)
+  const worktree =
+    resolvedWorktree ??
+    mappedWorktree ??
+    standaloneActivityWorktree(context.worktreeId, executionHostId)
+  let repo =
+    executionHostId && args.repos
+      ? findIndexedRepoOwnerForHost(args.repos, worktree.repoId, executionHostId)
+      : null
+  if (!repo && worktree.runtimeOwnerEnvironmentId && args.repos) {
+    repo = findIndexedRepoOwnerForHost(
+      args.repos,
+      worktree.repoId,
+      toRuntimeExecutionHostId(worktree.runtimeOwnerEnvironmentId)
+    )
+  }
+  const owner: ActivityEventOwner = {
+    worktree,
+    repo: repo ?? args.repoMap.get(worktree.repoId) ?? null,
+    knownWorktree: Boolean(
+      resolvedWorktree || mappedWorktree || args.tabsByWorktree[context.worktreeId]
+    )
+  }
+  ownerCache.set(ownerCacheKey, owner)
+  return owner
+}
diff --git a/src/renderer/src/components/activity/activity-event-builder-sources.ts b/src/renderer/src/components/activity/activity-event-builder-sources.ts
new file mode 100644
index 00000000000..1049ed95acf
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-event-builder-sources.ts
@@ -0,0 +1,105 @@
+import { migrationUnsupportedToAgentStatusEntry } from '@/lib/migration-unsupported-agent-entry'
+import { parsePaneKey } from '../../../../shared/stable-pane-id'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import type { Repo } from '../../../../shared/repo-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+import type { ActivityLiveAgentSnapshot, ActivityEvent } from './activity-thread-types'
+import type { ActivityEventBuildCache } from './activity-event-build-cache'
+import { resolvePaneBuild } from './activity-event-build-cache'
+import type { BuildActivityEventsArgs } from './activity-event-builder'
+
+export function appendUnsupportedAndRetainedEvents(context: {
+  args: BuildActivityEventsArgs
+  cache: ActivityEventBuildCache | undefined
+  seenCacheKeys: Set<string> | null
+  liveAgentByPaneKey: Record<string, ActivityLiveAgentSnapshot>
+  tabContext: Map<string, { worktreeId: string; tab: TerminalTab }>
+  resolveOwner: (
+    context: { worktreeId: string; tab: TerminalTab },
+    entry: AgentStatusEntry,
+    terminalPtyId?: string | null
+  ) => { worktree: Worktree; repo: Repo | null; knownWorktree: boolean }
+  pushPaneEvents: (paneEvents: ActivityEvent[]) => void
+}): void {
+  const {
+    args,
+    cache,
+    seenCacheKeys,
+    liveAgentByPaneKey,
+    tabContext,
+    resolveOwner,
+    pushPaneEvents
+  } = context
+
+  for (const unsupported of Object.values(args.migrationUnsupportedByPtyId ?? {})) {
+    const cacheKey = `unsupported:${unsupported.paneKey ?? unsupported.ptyId}`
+    const cached = cache?.panes.get(cacheKey)
+    const entry =
+      cached?.source === unsupported
+        ? cached.rowEntry
+        : migrationUnsupportedToAgentStatusEntry(unsupported)
+    const parsed = entry ? parsePaneKey(entry.paneKey) : null
+    const tabEntry = parsed ? tabContext.get(parsed.tabId) : null
+    if (!entry || !tabEntry) {
+      continue
+    }
+    const owner = resolveOwner(tabEntry, entry, unsupported.ptyId)
+    const { events: paneEvents, live } = resolvePaneBuild(
+      {
+        cacheKey,
+        source: unsupported,
+        entry,
+        orchestration: undefined,
+        worktree: owner.worktree,
+        repo: owner.repo,
+        tab: tabEntry.tab,
+        agentType: entry.agentType ?? 'unknown',
+        agentAlive: false,
+        acknowledgedAt: args.acknowledgedAgentsByPaneKey[entry.paneKey] ?? 0,
+        clearedAt: args.activityClearedAtByPaneKey?.[entry.paneKey] ?? 0,
+        migrationUnsupportedPtyId: unsupported.ptyId,
+        liveState: 'blocked'
+      },
+      cache,
+      seenCacheKeys
+    )
+    if (live) {
+      liveAgentByPaneKey[entry.paneKey] = live
+    }
+    pushPaneEvents(paneEvents)
+  }
+
+  for (const [paneKey, retained] of Object.entries(args.retainedAgentsByPaneKey)) {
+    if (!parsePaneKey(paneKey)) {
+      continue
+    }
+    const owner = resolveOwner(
+      { worktreeId: retained.worktreeId, tab: retained.tab },
+      retained.entry,
+      retained.tab.ptyId ?? retained.entry.terminalHandle
+    )
+    if (!owner.knownWorktree) {
+      continue
+    }
+    const { events: paneEvents } = resolvePaneBuild(
+      {
+        cacheKey: `retained:${paneKey}`,
+        source: retained,
+        entry: retained.entry,
+        orchestration: args.runtimeAgentOrchestrationByPaneKey?.[paneKey],
+        worktree: owner.worktree,
+        repo: owner.repo,
+        tab: retained.tab,
+        agentType: retained.agentType,
+        agentAlive: false,
+        acknowledgedAt: args.acknowledgedAgentsByPaneKey[paneKey] ?? 0,
+        clearedAt: args.activityClearedAtByPaneKey?.[paneKey] ?? 0,
+        liveState: null
+      },
+      cache,
+      seenCacheKeys
+    )
+    pushPaneEvents(paneEvents)
+  }
+}
diff --git a/src/renderer/src/components/activity/activity-event-builder.bounded-history.test.ts b/src/renderer/src/components/activity/activity-event-builder.bounded-history.test.ts
new file mode 100644
index 00000000000..c6350555584
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-event-builder.bounded-history.test.ts
@@ -0,0 +1,122 @@
+import { describe, expect, it } from 'vitest'
+import type {
+  AgentStateHistoryEntry,
+  AgentStatusEntry
+} from '../../../../shared/agent-status-types'
+import { buildActivityEvents, newestActivityHistoryEntries } from './activity-event-builder'
+import { EVENTS_PER_PANE_CAP } from './activity-event-cap'
+import { makeRepo, makeTab, makeWorktree, PANE_KEY } from './ActivityPrototypePage-test-fixtures'
+
+function historyEntry(
+  startedAt: number,
+  state: AgentStateHistoryEntry['state']
+): AgentStateHistoryEntry {
+  return { state, prompt: `prompt-${startedAt}`, startedAt }
+}
+
+function build(args: {
+  entries?: Record<string, AgentStatusEntry>
+  activityClearedAtByPaneKey?: Record<string, number>
+  now?: number
+}) {
+  const repo = makeRepo()
+  const worktree = makeWorktree()
+  const tab = makeTab()
+  return buildActivityEvents({
+    agentStatusByPaneKey: args.entries ?? {},
+    retainedAgentsByPaneKey: {},
+    tabsByWorktree: { [worktree.id]: [tab] },
+    worktreeMap: new Map([[worktree.id, worktree]]),
+    repoMap: new Map([[repo.id, repo]]),
+    acknowledgedAgentsByPaneKey: {},
+    activityClearedAtByPaneKey: args.activityClearedAtByPaneKey,
+    now: args.now ?? 100_000
+  })
+}
+
+describe('newestActivityHistoryEntries', () => {
+  it('takes only the newest cap-many eligible entries without scanning results past the cap', () => {
+    const history: AgentStateHistoryEntry[] = []
+    for (let i = 0; i < 10_000; i += 1) {
+      history.push(historyEntry(i + 1, i % 2 === 0 ? 'done' : 'working'))
+    }
+    const newest = newestActivityHistoryEntries(history, EVENTS_PER_PANE_CAP)
+    expect(newest).toHaveLength(EVENTS_PER_PANE_CAP)
+    // Only done/blocked/waiting are eligible; newest five eligible are the last five even-indexed rows, oldest-first.
+    expect(newest.map((entry) => entry.startedAt)).toEqual([9991, 9993, 9995, 9997, 9999])
+  })
+
+  it('returns fewer entries when eligible history is short', () => {
+    const history = [historyEntry(1, 'working'), historyEntry(2, 'done')]
+    expect(
+      newestActivityHistoryEntries(history, EVENTS_PER_PANE_CAP).map((e) => e.startedAt)
+    ).toEqual([2])
+  })
+})
+
+describe('buildActivityEvents bounded history', () => {
+  it('produces identical visible events for a pane with unbounded history as the per-pane cap allows', () => {
+    const longHistory: AgentStateHistoryEntry[] = []
+    for (let i = 0; i < 1_000; i += 1) {
+      longHistory.push(historyEntry(i + 1, 'done'))
+    }
+    const entry: AgentStatusEntry = {
+      state: 'done',
+      prompt: 'latest',
+      updatedAt: 5_000,
+      stateStartedAt: 5_000,
+      paneKey: PANE_KEY,
+      stateHistory: longHistory,
+      agentType: 'claude'
+    }
+    const { events } = build({ entries: { [PANE_KEY]: entry } })
+    // Per-pane cap holds: newest events only, newest-first ordering preserved.
+    expect(events).toHaveLength(EVENTS_PER_PANE_CAP)
+    expect(events.map((event) => event.timestamp)).toEqual([5_000, 1_000, 999, 998, 997])
+  })
+})
+
+describe('buildActivityEvents cleared cutoff', () => {
+  const doneEntry: AgentStatusEntry = {
+    state: 'done',
+    prompt: 'finish it',
+    updatedAt: 2_000,
+    stateStartedAt: 2_000,
+    paneKey: PANE_KEY,
+    stateHistory: [historyEntry(1_000, 'done')],
+    agentType: 'claude'
+  }
+
+  it('hides events stamped at or before the pane cutoff', () => {
+    const { events } = build({
+      entries: { [PANE_KEY]: doneEntry },
+      activityClearedAtByPaneKey: { [PANE_KEY]: 2_000 }
+    })
+    expect(events).toHaveLength(0)
+  })
+
+  it('keeps events newer than the cutoff', () => {
+    const { events } = build({
+      entries: { [PANE_KEY]: doneEntry },
+      activityClearedAtByPaneKey: { [PANE_KEY]: 1_000 }
+    })
+    expect(events.map((event) => event.timestamp)).toEqual([2_000])
+  })
+
+  it('does not suppress a live working snapshot for a cleared pane', () => {
+    const workingEntry: AgentStatusEntry = {
+      ...doneEntry,
+      state: 'working',
+      updatedAt: 99_000,
+      stateStartedAt: 99_000
+    }
+    const { events, liveAgentByPaneKey } = build({
+      entries: { [PANE_KEY]: workingEntry },
+      activityClearedAtByPaneKey: { [PANE_KEY]: 98_000 },
+      now: 99_500
+    })
+    expect(liveAgentByPaneKey[PANE_KEY]?.state).toBe('working')
+    // The historical done at 1_000 stays hidden by the cutoff.
+    expect(events).toHaveLength(0)
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-event-builder.host-ownership.test.ts b/src/renderer/src/components/activity/activity-event-builder.host-ownership.test.ts
new file mode 100644
index 00000000000..51beb6cf1f9
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-event-builder.host-ownership.test.ts
@@ -0,0 +1,206 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import { folderWorkspaceKey } from '../../../../shared/workspace-scope'
+import {
+  LEAF_ID,
+  makeRepo,
+  makeRetainedDoneEntry,
+  makeTab,
+  makeWorktree
+} from './ActivityPrototypePage-test-fixtures'
+import { buildActivityEvents } from './activity-event-builder'
+
+const PANE_KEY = `tab-1:${LEAF_ID}`
+
+function doneEntry(connectionId: string | null): AgentStatusEntry {
+  return {
+    state: 'done',
+    prompt: 'Finished task',
+    updatedAt: 2_000,
+    stateStartedAt: 2_000,
+    paneKey: PANE_KEY,
+    tabId: 'tab-1',
+    connectionId,
+    stateHistory: [],
+    agentType: 'claude'
+  }
+}
+
+describe('activity event host ownership', () => {
+  it('uses the status transport host when worktree and repo ids collide', () => {
+    const localRepo = makeRepo()
+    const remoteRepo = { ...makeRepo(), connectionId: 'builder', displayName: 'Remote repo' }
+    const localWorktree = makeWorktree()
+    const remoteWorktree = {
+      ...makeWorktree(),
+      hostId: 'ssh:builder' as const,
+      displayName: 'Remote worktree'
+    }
+    const tab = makeTab()
+    const resolveWorktree = vi.fn((_worktreeId, executionHostId) =>
+      executionHostId === 'ssh:builder' ? remoteWorktree : localWorktree
+    )
+
+    const result = buildActivityEvents({
+      agentStatusByPaneKey: { [PANE_KEY]: doneEntry('builder') },
+      retainedAgentsByPaneKey: {},
+      tabsByWorktree: { [localWorktree.id]: [tab] },
+      worktreeMap: new Map([[localWorktree.id, localWorktree]]),
+      repoMap: new Map([[localRepo.id, localRepo]]),
+      repos: [localRepo, remoteRepo],
+      resolveWorktree,
+      acknowledgedAgentsByPaneKey: {},
+      now: 3_000
+    })
+
+    expect(resolveWorktree).toHaveBeenCalledWith(localWorktree.id, 'ssh:builder')
+    expect(result.events[0]?.worktree).toBe(remoteWorktree)
+    expect(result.events[0]?.repo).toBe(remoteRepo)
+  })
+
+  it('uses the mirrored tab host when paired-runtime status is host-local', () => {
+    const localRepo = makeRepo()
+    const runtimeRepo = {
+      ...makeRepo(),
+      executionHostId: 'runtime:env-1' as const,
+      displayName: 'Runtime repo'
+    }
+    const localWorktree = makeWorktree()
+    const runtimeWorktree = {
+      ...makeWorktree(),
+      hostId: 'runtime:env-1' as const,
+      runtimeOwnerEnvironmentId: 'env-1',
+      displayName: 'Runtime worktree'
+    }
+    const tab = makeTab()
+    const resolveWorktree = vi.fn((_worktreeId, executionHostId) =>
+      executionHostId === 'runtime:env-1' ? runtimeWorktree : localWorktree
+    )
+
+    const result = buildActivityEvents({
+      agentStatusByPaneKey: { [PANE_KEY]: doneEntry(null) },
+      retainedAgentsByPaneKey: {},
+      tabsByWorktree: { [localWorktree.id]: [tab] },
+      unifiedTabsByWorktree: {
+        [localWorktree.id]: [
+          {
+            id: tab.id,
+            entityId: tab.id,
+            groupId: 'group-1',
+            worktreeId: localWorktree.id,
+            executionHostId: 'runtime:env-1',
+            contentType: 'terminal',
+            label: tab.title,
+            customLabel: null,
+            color: null,
+            sortOrder: 0,
+            createdAt: 1
+          }
+        ]
+      },
+      worktreeMap: new Map([[localWorktree.id, localWorktree]]),
+      repoMap: new Map([[localRepo.id, localRepo]]),
+      repos: [localRepo, runtimeRepo],
+      resolveWorktree,
+      acknowledgedAgentsByPaneKey: {},
+      now: 3_000
+    })
+
+    expect(resolveWorktree).toHaveBeenCalledWith(localWorktree.id, 'runtime:env-1')
+    expect(result.events[0]?.worktree).toBe(runtimeWorktree)
+    expect(result.events[0]?.repo).toBe(runtimeRepo)
+  })
+
+  it('keeps retained folder-workspace activity after its terminal tab is gone', () => {
+    const folderWorktree = {
+      ...makeWorktree(),
+      id: folderWorkspaceKey('folder-1'),
+      repoId: 'folder-workspace:group-1',
+      hostId: 'local' as const,
+      displayName: 'Docs folder'
+    }
+    const tab = { ...makeTab(), worktreeId: folderWorktree.id }
+    const retained = makeRetainedDoneEntry(tab)
+    retained.worktreeId = folderWorktree.id
+    retained.entry = doneEntry(null)
+
+    const result = buildActivityEvents({
+      agentStatusByPaneKey: {},
+      retainedAgentsByPaneKey: { [PANE_KEY]: retained },
+      tabsByWorktree: {},
+      worktreeMap: new Map(),
+      repoMap: new Map(),
+      resolveWorktree: (worktreeId, executionHostId) =>
+        worktreeId === folderWorktree.id && executionHostId === 'local'
+          ? folderWorktree
+          : undefined,
+      acknowledgedAgentsByPaneKey: {},
+      now: 3_000
+    })
+
+    expect(result.events[0]?.worktree).toBe(folderWorktree)
+    expect(result.events[0]?.worktree.displayName).toBe('Docs folder')
+  })
+
+  it('carries migrationUnsupportedPtyId on events built for un-migratable panes', () => {
+    const worktree = makeWorktree()
+    const repo = makeRepo()
+    const tab = makeTab()
+
+    const result = buildActivityEvents({
+      agentStatusByPaneKey: {},
+      retainedAgentsByPaneKey: {},
+      migrationUnsupportedByPtyId: {
+        'pty-1': {
+          ptyId: 'pty-1',
+          paneKey: PANE_KEY,
+          tabId: tab.id,
+          reason: 'legacy-numeric-pane-key',
+          source: 'local',
+          updatedAt: 1_000
+        }
+      },
+      tabsByWorktree: { [worktree.id]: [tab] },
+      worktreeMap: new Map([[worktree.id, worktree]]),
+      repoMap: new Map([[repo.id, repo]]),
+      resolveWorktree: () => worktree,
+      acknowledgedAgentsByPaneKey: {},
+      now: 3_000
+    })
+
+    expect(result.events.length).toBeGreaterThan(0)
+    for (const event of result.events) {
+      expect(event.migrationUnsupportedPtyId).toBe('pty-1')
+    }
+  })
+
+  it('uses the retained terminal handle to preserve runtime host ownership after teardown', () => {
+    const localWorktree = makeWorktree()
+    const runtimeWorktree = {
+      ...makeWorktree(),
+      hostId: 'runtime:env-1' as const,
+      runtimeOwnerEnvironmentId: 'env-1',
+      displayName: 'Runtime worktree'
+    }
+    const tab = { ...makeTab(), ptyId: null }
+    const retained = makeRetainedDoneEntry(tab)
+    retained.entry = { ...doneEntry(null), terminalHandle: 'remote:env-1@@pty-1' }
+    const resolveWorktree = vi.fn((_worktreeId, executionHostId) =>
+      executionHostId === 'runtime:env-1' ? runtimeWorktree : localWorktree
+    )
+
+    const result = buildActivityEvents({
+      agentStatusByPaneKey: {},
+      retainedAgentsByPaneKey: { [PANE_KEY]: retained },
+      tabsByWorktree: {},
+      worktreeMap: new Map([[localWorktree.id, localWorktree]]),
+      repoMap: new Map(),
+      resolveWorktree,
+      acknowledgedAgentsByPaneKey: {},
+      now: 3_000
+    })
+
+    expect(resolveWorktree).toHaveBeenCalledWith(localWorktree.id, 'runtime:env-1')
+    expect(result.events[0]?.worktree).toBe(runtimeWorktree)
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-event-builder.identity-reuse.test.ts b/src/renderer/src/components/activity/activity-event-builder.identity-reuse.test.ts
new file mode 100644
index 00000000000..1c1a76aff20
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-event-builder.identity-reuse.test.ts
@@ -0,0 +1,225 @@
+import { describe, expect, it } from 'vitest'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import type { RetainedAgentEntry } from '@/store/slices/agent-status'
+import { makePaneKey } from '../../../../shared/stable-pane-id'
+import {
+  buildActivityEvents,
+  createActivityEventBuildCache,
+  type ActivityEventBuildCache
+} from './activity-event-builder'
+import {
+  buildAgentPaneThreads,
+  createAgentPaneThreadReuseCache,
+  type AgentPaneThreadReuseCache
+} from './activity-thread-builder'
+import {
+  LEAF_ID,
+  LEAF_ID_2,
+  makeRepo,
+  makeTab,
+  makeTabWithIds,
+  makeWorktree
+} from './ActivityPrototypePage-test-fixtures'
+
+const PANE_A = makePaneKey('tab-1', LEAF_ID)
+const PANE_B = makePaneKey('tab-2', LEAF_ID_2)
+const NOW = 100_000
+
+function entry(paneKey: string, overrides: Partial<AgentStatusEntry> = {}): AgentStatusEntry {
+  return {
+    state: 'done',
+    prompt: `run ${paneKey}`,
+    updatedAt: 50_000,
+    stateStartedAt: 50_000,
+    paneKey,
+    stateHistory: [{ state: 'done', prompt: 'older', startedAt: 10_000 }],
+    agentType: 'claude',
+    ...overrides
+  }
+}
+
+type BuildArgs = Parameters<typeof buildActivityEvents>[0]
+
+function makeArgs(overrides: Partial<BuildArgs> = {}): BuildArgs {
+  const repo = makeRepo()
+  const worktree = makeWorktree()
+  return {
+    agentStatusByPaneKey: {
+      [PANE_A]: entry(PANE_A),
+      [PANE_B]: entry(PANE_B, { state: 'working', stateStartedAt: NOW - 1_000 })
+    },
+    retainedAgentsByPaneKey: {},
+    tabsByWorktree: {
+      [worktree.id]: [makeTab(), makeTabWithIds('tab-2', worktree.id)]
+    },
+    worktreeMap: new Map([[worktree.id, worktree]]),
+    repoMap: new Map([[repo.id, repo]]),
+    acknowledgedAgentsByPaneKey: {},
+    now: NOW,
+    ...overrides
+  }
+}
+
+function buildBoth(
+  args: BuildArgs,
+  eventCache: ActivityEventBuildCache,
+  threadCache: AgentPaneThreadReuseCache
+) {
+  const result = buildActivityEvents(args, eventCache)
+  const threads = buildAgentPaneThreads(
+    { events: result.events, liveAgentByPaneKey: result.liveAgentByPaneKey },
+    threadCache
+  )
+  return { ...result, threads }
+}
+
+function threadByPane<T extends { paneKey: string }>(threads: T[], paneKey: string): T | undefined {
+  return threads.find((thread) => thread.paneKey === paneKey)
+}
+
+describe('activity build identity reuse', () => {
+  it('returns identical event, snapshot, thread, and list identities for identical inputs', () => {
+    const eventCache = createActivityEventBuildCache()
+    const threadCache = createAgentPaneThreadReuseCache()
+    const args = makeArgs()
+    const first = buildBoth(args, eventCache, threadCache)
+    const second = buildBoth(args, eventCache, threadCache)
+
+    expect(second.threads).toBe(first.threads)
+    expect(second.events.map((event) => event)).toEqual(first.events.map((event) => event))
+    for (let i = 0; i < first.events.length; i += 1) {
+      expect(second.events[i]).toBe(first.events[i])
+    }
+    expect(second.liveAgentByPaneKey[PANE_B]).toBe(first.liveAgentByPaneKey[PANE_B])
+  })
+
+  it('changes only the written pane; every other thread keeps its identity', () => {
+    const eventCache = createActivityEventBuildCache()
+    const threadCache = createAgentPaneThreadReuseCache()
+    const args = makeArgs()
+    const first = buildBoth(args, eventCache, threadCache)
+
+    const next = makeArgs({
+      agentStatusByPaneKey: {
+        ...args.agentStatusByPaneKey,
+        [PANE_B]: entry(PANE_B, {
+          state: 'working',
+          stateStartedAt: NOW - 1_000,
+          prompt: 'streamed update'
+        })
+      },
+      tabsByWorktree: args.tabsByWorktree,
+      worktreeMap: args.worktreeMap,
+      repoMap: args.repoMap
+    })
+    const second = buildBoth(next, eventCache, threadCache)
+
+    expect(threadByPane(second.threads, PANE_A)).toBe(threadByPane(first.threads, PANE_A))
+    expect(threadByPane(second.threads, PANE_B)).not.toBe(threadByPane(first.threads, PANE_B))
+    expect(second.threads).not.toBe(first.threads)
+  })
+
+  it('an acknowledgement or cleared-cutoff change rebuilds only that pane', () => {
+    const eventCache = createActivityEventBuildCache()
+    const threadCache = createAgentPaneThreadReuseCache()
+    const args = makeArgs()
+    const first = buildBoth(args, eventCache, threadCache)
+
+    const acked = buildBoth(
+      makeArgs({
+        agentStatusByPaneKey: args.agentStatusByPaneKey,
+        tabsByWorktree: args.tabsByWorktree,
+        worktreeMap: args.worktreeMap,
+        repoMap: args.repoMap,
+        acknowledgedAgentsByPaneKey: { [PANE_A]: NOW }
+      }),
+      eventCache,
+      threadCache
+    )
+    expect(threadByPane(acked.threads, PANE_B)).toBe(threadByPane(first.threads, PANE_B))
+    expect(threadByPane(acked.threads, PANE_A)?.unread).toBe(false)
+    expect(threadByPane(first.threads, PANE_A)?.unread).toBe(true)
+
+    const cleared = buildBoth(
+      makeArgs({
+        agentStatusByPaneKey: args.agentStatusByPaneKey,
+        tabsByWorktree: args.tabsByWorktree,
+        worktreeMap: args.worktreeMap,
+        repoMap: args.repoMap,
+        acknowledgedAgentsByPaneKey: { [PANE_A]: NOW },
+        activityClearedAtByPaneKey: { [PANE_A]: NOW }
+      }),
+      eventCache,
+      threadCache
+    )
+    expect(threadByPane(cleared.threads, PANE_B)).toBe(threadByPane(first.threads, PANE_B))
+    expect(threadByPane(cleared.threads, PANE_A)).toBeUndefined()
+  })
+
+  it('freshness decay refreshes the live snapshot without churning event identities', () => {
+    const eventCache = createActivityEventBuildCache()
+    const threadCache = createAgentPaneThreadReuseCache()
+    const args = makeArgs()
+    const first = buildBoth(args, eventCache, threadCache)
+    expect(first.liveAgentByPaneKey[PANE_B]?.state).toBe('working')
+
+    // Same inputs much later: the working turn is stale now, so the snapshot drops.
+    const decayed = buildBoth(
+      makeArgs({ ...args, now: NOW + 60 * 60 * 1000 }),
+      eventCache,
+      threadCache
+    )
+    expect(decayed.liveAgentByPaneKey[PANE_B]).toBeUndefined()
+    // PANE_A had no live snapshot; its thread survives untouched.
+    expect(threadByPane(decayed.threads, PANE_A)).toBe(threadByPane(first.threads, PANE_A))
+  })
+
+  it('cached builds always equal a cold uncached build (no drift)', () => {
+    const eventCache = createActivityEventBuildCache()
+    const threadCache = createAgentPaneThreadReuseCache()
+    const scenarios: BuildArgs[] = [
+      makeArgs(),
+      makeArgs({ acknowledgedAgentsByPaneKey: { [PANE_A]: NOW } }),
+      makeArgs({ activityClearedAtByPaneKey: { [PANE_A]: NOW } }),
+      makeArgs({
+        runtimeAgentOrchestrationByPaneKey: {
+          [PANE_B]: { taskId: 't1', dispatchId: 'd1', parentPaneKey: PANE_A }
+        }
+      }),
+      makeArgs({ now: NOW + 60 * 60 * 1000 })
+    ]
+    for (const scenario of scenarios) {
+      const cached = buildBoth(scenario, eventCache, threadCache)
+      const cold = buildActivityEvents(scenario)
+      const coldThreads = buildAgentPaneThreads({
+        events: cold.events,
+        liveAgentByPaneKey: cold.liveAgentByPaneKey
+      })
+      expect(cached.events).toEqual(cold.events)
+      expect(cached.liveAgentByPaneKey).toEqual(cold.liveAgentByPaneKey)
+      expect(cached.threads).toEqual(coldThreads)
+    }
+  })
+
+  it('keeps first-source-wins dedupe when a pane is both live and retained, and evicts gone panes', () => {
+    const eventCache = createActivityEventBuildCache()
+    const threadCache = createAgentPaneThreadReuseCache()
+    const retained: RetainedAgentEntry = {
+      entry: entry(PANE_A, { prompt: 'retained copy' }),
+      worktreeId: makeWorktree().id,
+      tab: makeTab(),
+      agentType: 'claude',
+      startedAt: 50_000
+    }
+    const args = makeArgs({ retainedAgentsByPaneKey: { [PANE_A]: retained } })
+    const cachedResult = buildBoth(args, eventCache, threadCache)
+    const cold = buildActivityEvents(args)
+    expect(cachedResult.events).toEqual(cold.events)
+    expect(eventCache.panes.has(`retained:${PANE_A}`)).toBe(true)
+
+    // Retained entry dismissed: its cache row must not linger.
+    buildBoth(makeArgs(), eventCache, threadCache)
+    expect(eventCache.panes.has(`retained:${PANE_A}`)).toBe(false)
+    expect(eventCache.panes.has(`live:${PANE_A}`)).toBe(true)
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-event-builder.ts b/src/renderer/src/components/activity/activity-event-builder.ts
index 11e66f65bb2..5e1e3a112ae 100644
--- a/src/renderer/src/components/activity/activity-event-builder.ts
+++ b/src/renderer/src/components/activity/activity-event-builder.ts
@@ -1,33 +1,41 @@
 import { isExplicitAgentStatusFresh } from '@/lib/agent-status'
-import { migrationUnsupportedToAgentStatusEntry } from '@/lib/migration-unsupported-agent-entry'
 import type { RetainedAgentEntry } from '@/store/slices/agent-status'
 import {
   AGENT_STATUS_STALE_AFTER_MS,
-  type AgentStateHistoryEntry,
   type AgentStatusEntry,
+  type AgentStatusOrchestrationContext,
   type AgentStatusState,
-  type AgentType,
   type MigrationUnsupportedPtyEntry
 } from '../../../../shared/agent-status-types'
-import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
+import type { ExecutionHostId } from '../../../../shared/execution-host'
 import type { Repo } from '../../../../shared/repo-types'
 import { parsePaneKey } from '../../../../shared/stable-pane-id'
+import type { Tab } from '../../../../shared/tab-types'
 import type { TerminalTab } from '../../../../shared/terminal-tab-types'
 import type { Worktree } from '../../../../shared/worktree/types'
 import type {
   ActivityEvent,
-  ActivityEventState,
   ActivityHookLiveAgentState,
   ActivityLiveAgentSnapshot,
   ActivityLiveAgentState
 } from './activity-thread-types'
 import { capActivityEvents } from './activity-event-cap'
+import { newestActivityHistoryEntries } from './activity-pane-events'
+import {
+  createActivityEventBuildCache,
+  resolvePaneBuild,
+  type ActivityEventBuildCache
+} from './activity-event-build-cache'
+import { appendUnsupportedAndRetainedEvents } from './activity-event-builder-sources'
+import {
+  attributedActivityTabContext,
+  buildActivityTabContext,
+  buildActivityTabHostIndex,
+  resolveActivityEventOwner,
+  type ActivityEventOwner
+} from './activity-event-builder-context'
 
-const STANDALONE_ACTIVITY_WORKTREE_REPO_ID = '__activity_standalone__'
-
-function isActivityEventState(state: AgentStatusState): state is ActivityEventState {
-  return state === 'done' || state === 'blocked' || state === 'waiting'
-}
+export { createActivityEventBuildCache, type ActivityEventBuildCache, newestActivityHistoryEntries }
 
 function isActivityHookLiveAgentState(
   state: AgentStatusState
@@ -50,142 +58,47 @@ function freshActivityLiveAgentState(
     : entry.state
 }
 
-function standaloneActivityWorktree(worktreeId: string): Worktree {
-  const displayName =
-    worktreeId === FLOATING_TERMINAL_WORKTREE_ID ? 'Floating terminal' : 'Standalone terminal'
-  return {
-    id: worktreeId,
-    repoId: STANDALONE_ACTIVITY_WORKTREE_REPO_ID,
-    path: '',
-    head: '',
-    branch: displayName,
-    isBare: false,
-    isMainWorktree: false,
-    displayName,
-    comment: '',
-    linkedIssue: null,
-    linkedPR: null,
-    linkedLinearIssue: null,
-    isArchived: false,
-    isUnread: false,
-    isPinned: false,
-    sortOrder: 0,
-    lastActivityAt: 0
-  }
-}
-
-function historyEntrySnapshot(
-  entry: AgentStatusEntry,
-  history: AgentStateHistoryEntry
-): AgentStatusEntry {
-  return {
-    ...entry,
-    state: history.state,
-    prompt: history.prompt,
-    updatedAt: history.startedAt,
-    stateStartedAt: history.startedAt,
-    stateHistory: [],
-    toolName: undefined,
-    toolInput: undefined,
-    lastAssistantMessage: undefined,
-    interrupted: history.interrupted
-  }
-}
-
-function appendActivityEvent(args: {
-  events: ActivityEvent[]
-  seenEventIds: Set<string>
-  state: ActivityEventState
-  timestamp: number
-  worktree: Worktree
-  repo: Repo | null
-  entry: AgentStatusEntry
-  tab: TerminalTab
-  agentType: AgentType
-  agentAlive: boolean
-  acknowledgedAt: number
-  migrationUnsupportedPtyId?: string
-}): void {
-  const id = `agent:${args.entry.paneKey}:${args.state}:${args.timestamp}`
-  if (args.seenEventIds.has(id)) {
-    return
-  }
-  args.seenEventIds.add(id)
-  args.events.push({
-    id,
-    state: args.state,
-    timestamp: args.timestamp,
-    worktree: args.worktree,
-    repo: args.repo,
-    entry: args.entry,
-    tab: args.tab,
-    agentType: args.agentType,
-    agentAlive: args.agentAlive,
-    migrationUnsupportedPtyId: args.migrationUnsupportedPtyId,
-    unread: args.acknowledgedAt < args.timestamp
-  })
-}
-
-function appendActivityEventsForEntry(args: {
-  events: ActivityEvent[]
-  seenEventIds: Set<string>
-  entry: AgentStatusEntry
-  worktree: Worktree
-  repo: Repo | null
-  tab: TerminalTab
-  agentType: AgentType
-  agentAlive: boolean
-  acknowledgedAt: number
-  migrationUnsupportedPtyId?: string
-}): void {
-  // Why: Activity is append-only; when a pane continues (done→working), stateHistory is the only record of the previous done/blocking event.
-  for (const history of args.entry.stateHistory) {
-    if (!isActivityEventState(history.state)) {
-      continue
-    }
-    appendActivityEvent({
-      ...args,
-      state: history.state,
-      timestamp: history.startedAt,
-      entry: historyEntrySnapshot(args.entry, history)
-    })
-  }
-
-  // Why: SessionStart creates an idle row, not an "Agent finished" activity event (STA-3386).
-  if (!isActivityEventState(args.entry.state) || args.entry.sessionBoundary === true) {
-    return
-  }
-  appendActivityEvent({
-    ...args,
-    state: args.entry.state,
-    timestamp: args.entry.stateStartedAt
-  })
-}
-
-type BuildActivityEventsArgs = {
+export type BuildActivityEventsArgs = {
   agentStatusByPaneKey: Record<string, AgentStatusEntry>
+  runtimeAgentOrchestrationByPaneKey?: Record<string, AgentStatusOrchestrationContext>
   migrationUnsupportedByPtyId?: Record<string, MigrationUnsupportedPtyEntry>
   retainedAgentsByPaneKey: Record<string, RetainedAgentEntry>
   tabsByWorktree: Record<string, TerminalTab[]>
+  unifiedTabsByWorktree?: Record<string, Tab[]>
   worktreeMap: Map<string, Worktree>
   repoMap: Map<string, Repo>
+  repos?: readonly Repo[]
+  resolveWorktree?: (worktreeId: string, executionHostId?: ExecutionHostId) => Worktree | undefined
   acknowledgedAgentsByPaneKey: Record<string, number>
+  /** Per-pane "Clear completed" cutoffs; events stamped at or before the cutoff are hidden. */
+  activityClearedAtByPaneKey?: Record<string, number>
   now: number
 }
 
-export function buildActivityEvents(args: BuildActivityEventsArgs): {
+export function buildActivityEvents(
+  args: BuildActivityEventsArgs,
+  cache?: ActivityEventBuildCache
+): {
   events: ActivityEvent[]
   liveAgentByPaneKey: Record<string, ActivityLiveAgentSnapshot>
 } {
   const events: ActivityEvent[] = []
   const seenEventIds = new Set<string>()
-  const tabContext = new Map<string, { worktree: Worktree; tab: TerminalTab }>()
+  const tabContext = buildActivityTabContext(args.tabsByWorktree, args.unifiedTabsByWorktree)
+  const tabHostIndex = buildActivityTabHostIndex(args.unifiedTabsByWorktree)
+  const ownerCache = new Map<string, ActivityEventOwner>()
   const liveAgentByPaneKey: Record<string, ActivityLiveAgentSnapshot> = {}
+  const seenCacheKeys = cache ? new Set<string>() : null
 
-  for (const [worktreeId, tabs] of Object.entries(args.tabsByWorktree)) {
-    const worktree = args.worktreeMap.get(worktreeId) ?? standaloneActivityWorktree(worktreeId)
-    for (const tab of tabs) {
-      tabContext.set(tab.id, { worktree, tab })
+  const pushPaneEvents = (paneEvents: ActivityEvent[]): void => {
+    // Why: a paneKey can appear in more than one source (live + retained overlap);
+    // event ids stay globally unique so the first source wins, as before.
+    for (const event of paneEvents) {
+      if (seenEventIds.has(event.id)) {
+        continue
+      }
+      seenEventIds.add(event.id)
+      events.push(event)
     }
   }
 
@@ -194,101 +107,64 @@ export function buildActivityEvents(args: BuildActivityEventsArgs): {
     if (!parsed) {
       continue
     }
-    const context = tabContext.get(parsed.tabId)
+    const context = tabContext.get(parsed.tabId) ?? attributedActivityTabContext(entry)
     if (!context) {
       continue
     }
-    const ackAt = args.acknowledgedAgentsByPaneKey[paneKey] ?? 0
+    const owner = resolveActivityEventOwner(
+      args,
+      context,
+      entry,
+      context.tab.ptyId,
+      tabHostIndex,
+      ownerCache
+    )
+    const orchestration = args.runtimeAgentOrchestrationByPaneKey?.[paneKey]
     // Why: live status is separate from history; a fresh working turn updates the thread without counting as an unread done/blocked/waiting event.
+    // The freshness check runs on the raw entry (orchestration merges never change state/timing fields).
     const liveState = freshActivityLiveAgentState(entry, args.now)
-    if (liveState) {
-      liveAgentByPaneKey[paneKey] = {
-        state: liveState,
-        timestamp: entry.stateStartedAt,
-        worktree: context.worktree,
-        repo: args.repoMap.get(context.worktree.repoId) ?? null,
+    const { events: paneEvents, live } = resolvePaneBuild(
+      {
+        cacheKey: `live:${paneKey}`,
+        source: entry,
         entry,
+        orchestration,
+        worktree: owner.worktree,
+        repo: owner.repo,
         tab: context.tab,
-        agentType: entry.agentType ?? 'unknown'
+        agentType: entry.agentType ?? 'unknown',
+        agentAlive: true,
+        acknowledgedAt: args.acknowledgedAgentsByPaneKey[paneKey] ?? 0,
+        clearedAt: args.activityClearedAtByPaneKey?.[paneKey] ?? 0,
+        liveState
+      },
+      cache,
+      seenCacheKeys
+    )
+    if (live) {
+      liveAgentByPaneKey[paneKey] = live
+    }
+    pushPaneEvents(paneEvents)
+  }
+
+  appendUnsupportedAndRetainedEvents({
+    args,
+    cache,
+    seenCacheKeys,
+    liveAgentByPaneKey,
+    tabContext,
+    resolveOwner: (context, entry, terminalPtyId) =>
+      resolveActivityEventOwner(args, context, entry, terminalPtyId, tabHostIndex, ownerCache),
+    pushPaneEvents
+  })
+
+  // Why: evict panes gone from every source so the cache can't outgrow the live state maps.
+  if (cache && seenCacheKeys) {
+    for (const cacheKey of cache.panes.keys()) {
+      if (!seenCacheKeys.has(cacheKey)) {
+        cache.panes.delete(cacheKey)
       }
     }
-    appendActivityEventsForEntry({
-      events,
-      seenEventIds,
-      worktree: context.worktree,
-      repo: args.repoMap.get(context.worktree.repoId) ?? null,
-      entry,
-      tab: context.tab,
-      agentType: entry.agentType ?? 'unknown',
-      agentAlive: true,
-      acknowledgedAt: ackAt
-    })
   }
-
-  appendUnsupportedAndRetainedEvents(args, events, seenEventIds, liveAgentByPaneKey, tabContext)
   return { events: capActivityEvents(events), liveAgentByPaneKey }
 }
-
-function appendUnsupportedAndRetainedEvents(
-  args: BuildActivityEventsArgs,
-  events: ActivityEvent[],
-  seenEventIds: Set<string>,
-  liveAgentByPaneKey: Record<string, ActivityLiveAgentSnapshot>,
-  tabContext: Map<string, { worktree: Worktree; tab: TerminalTab }>
-): void {
-  for (const unsupported of Object.values(args.migrationUnsupportedByPtyId ?? {})) {
-    const entry = migrationUnsupportedToAgentStatusEntry(unsupported)
-    const parsed = entry ? parsePaneKey(entry.paneKey) : null
-    const context = parsed ? tabContext.get(parsed.tabId) : null
-    if (!entry || !context) {
-      continue
-    }
-    const ackAt = args.acknowledgedAgentsByPaneKey[entry.paneKey] ?? 0
-    liveAgentByPaneKey[entry.paneKey] = {
-      state: 'blocked',
-      timestamp: entry.stateStartedAt,
-      worktree: context.worktree,
-      repo: args.repoMap.get(context.worktree.repoId) ?? null,
-      entry,
-      tab: context.tab,
-      agentType: entry.agentType ?? 'unknown'
-    }
-    appendActivityEventsForEntry({
-      events,
-      seenEventIds,
-      worktree: context.worktree,
-      repo: args.repoMap.get(context.worktree.repoId) ?? null,
-      entry,
-      tab: context.tab,
-      agentType: entry.agentType ?? 'unknown',
-      agentAlive: false,
-      acknowledgedAt: ackAt,
-      migrationUnsupportedPtyId: unsupported.ptyId
-    })
-  }
-
-  for (const [paneKey, retained] of Object.entries(args.retainedAgentsByPaneKey)) {
-    if (!parsePaneKey(paneKey)) {
-      continue
-    }
-    const worktree =
-      args.worktreeMap.get(retained.worktreeId) ??
-      (args.tabsByWorktree[retained.worktreeId]
-        ? standaloneActivityWorktree(retained.worktreeId)
-        : null)
-    if (!worktree) {
-      continue
-    }
-    appendActivityEventsForEntry({
-      events,
-      seenEventIds,
-      worktree,
-      repo: args.repoMap.get(worktree.repoId) ?? null,
-      entry: retained.entry,
-      tab: retained.tab,
-      agentType: retained.agentType,
-      agentAlive: false,
-      acknowledgedAt: args.acknowledgedAgentsByPaneKey[paneKey] ?? 0
-    })
-  }
-}
diff --git a/src/renderer/src/components/activity/activity-event-cap.ts b/src/renderer/src/components/activity/activity-event-cap.ts
index c6b80d53823..54d84c3039c 100644
--- a/src/renderer/src/components/activity/activity-event-cap.ts
+++ b/src/renderer/src/components/activity/activity-event-cap.ts
@@ -1,7 +1,8 @@
 import type { ActivityEvent } from './activity-thread-types'
 
 // Why: per-pane cap guarantees each agent appears in the left list even when one pane has a long history.
-const EVENTS_PER_PANE_CAP = 5
+// Exported so the event builder can skip building history entries the cap would drop anyway.
+export const EVENTS_PER_PANE_CAP = 5
 
 export function capActivityEvents(events: ActivityEvent[]): ActivityEvent[] {
   const sorted = events.sort((a, b) => b.timestamp - a.timestamp)
diff --git a/src/renderer/src/components/activity/activity-pane-events.ts b/src/renderer/src/components/activity/activity-pane-events.ts
new file mode 100644
index 00000000000..d3da82e5486
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-pane-events.ts
@@ -0,0 +1,108 @@
+import type {
+  AgentStateHistoryEntry,
+  AgentStatusEntry
+} from '../../../../shared/agent-status-types'
+import type { Repo } from '../../../../shared/repo-types'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+import type { ActivityEvent, ActivityEventState } from './activity-thread-types'
+import { EVENTS_PER_PANE_CAP } from './activity-event-cap'
+
+export function isActivityEventState(
+  state: AgentStatusEntry['state']
+): state is ActivityEventState {
+  return state === 'done' || state === 'blocked' || state === 'waiting'
+}
+
+function historyEntrySnapshot(
+  entry: AgentStatusEntry,
+  history: AgentStateHistoryEntry
+): AgentStatusEntry {
+  return {
+    ...entry,
+    state: history.state,
+    prompt: history.prompt,
+    updatedAt: history.startedAt,
+    stateStartedAt: history.startedAt,
+    stateHistory: [],
+    toolName: undefined,
+    toolInput: undefined,
+    lastAssistantMessage: undefined,
+    interrupted: history.interrupted
+  }
+}
+
+/** Newest activity-eligible history entries, at most `cap`, oldest-first. */
+export function newestActivityHistoryEntries(
+  history: readonly AgentStateHistoryEntry[],
+  cap: number
+): AgentStateHistoryEntry[] {
+  const newest: AgentStateHistoryEntry[] = []
+  for (let i = history.length - 1; i >= 0 && newest.length < cap; i -= 1) {
+    if (isActivityEventState(history[i].state)) {
+      newest.push(history[i])
+    }
+  }
+  return newest.toReversed()
+}
+
+type PaneEventInputs = {
+  entry: AgentStatusEntry
+  worktree: Worktree
+  repo: Repo | null
+  tab: TerminalTab
+  agentType: AgentStatusEntry['agentType']
+  agentAlive: boolean
+  acknowledgedAt: number
+  clearedAt: number
+  migrationUnsupportedPtyId?: string
+}
+
+/** Build one pane's activity events (bounded by the per-pane cap, cutoff applied). */
+export function buildPaneActivityEvents(args: PaneEventInputs): ActivityEvent[] {
+  const events: ActivityEvent[] = []
+  const seenIds = new Set<string>()
+  const append = (state: ActivityEventState, timestamp: number, entry: AgentStatusEntry): void => {
+    const id = `agent:${entry.paneKey}:${state}:${timestamp}`
+    if (seenIds.has(id)) {
+      return
+    }
+    seenIds.add(id)
+    events.push({
+      id,
+      state,
+      timestamp,
+      worktree: args.worktree,
+      repo: args.repo,
+      entry,
+      tab: args.tab,
+      agentType: args.agentType ?? 'unknown',
+      agentAlive: args.agentAlive,
+      migrationUnsupportedPtyId: args.migrationUnsupportedPtyId,
+      unread: args.acknowledgedAt < timestamp
+    })
+  }
+
+  for (const history of newestActivityHistoryEntries(
+    args.entry.stateHistory,
+    EVENTS_PER_PANE_CAP
+  )) {
+    if (history.startedAt <= args.clearedAt) {
+      continue
+    }
+    append(
+      history.state as ActivityEventState,
+      history.startedAt,
+      historyEntrySnapshot(args.entry, history)
+    )
+  }
+
+  if (!isActivityEventState(args.entry.state) || args.entry.sessionBoundary === true) {
+    return events
+  }
+  if (args.entry.stateStartedAt <= args.clearedAt) {
+    return events
+  }
+  append(args.entry.state, args.entry.stateStartedAt, args.entry)
+  return events
+}
diff --git a/src/renderer/src/components/activity/activity-scope-filter-controls.tsx b/src/renderer/src/components/activity/activity-scope-filter-controls.tsx
new file mode 100644
index 00000000000..6256595ba6b
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-scope-filter-controls.tsx
@@ -0,0 +1,170 @@
+import React, { useMemo } from 'react'
+import { X } from 'lucide-react'
+import { useAppStore } from '@/store'
+import { DropdownMenuLabel, DropdownMenuSeparator } from '@/components/ui/dropdown-menu'
+import SidebarRepositoryFilterSection from '@/components/sidebar/SidebarRepositoryFilterSection'
+import { SidebarHostScopeMenuSection } from '@/components/sidebar/SidebarHostScopeMenuSection'
+import {
+  getSidebarHostVisibilityLabel,
+  shouldShowHostScopeControls
+} from '@/components/sidebar/sidebar-host-options'
+import { useSidebarHostScopeOptions } from '@/components/sidebar/use-sidebar-host-scope-options'
+import type { SidebarHostOption } from '@/components/sidebar/sidebar-host-options'
+import { getExecutionHostLabel, type ExecutionHostId } from '../../../../shared/execution-host'
+import { translate } from '@/i18n/i18n'
+
+/**
+ * Host/project scope controls for the Agents activity surfaces. State is the
+ * persisted agents-view scope (agentsVisibleHostIds / agentsFilterRepoIds),
+ * deliberately separate from the workspace-nav filters.
+ */
+export function ActivityScopeFilterMenuSections(): React.JSX.Element | null {
+  const repos = useAppStore((s) => s.repos)
+  const agentsVisibleHostIds = useAppStore((s) => s.agentsVisibleHostIds)
+  const setAgentsVisibleHostIds = useAppStore((s) => s.setAgentsVisibleHostIds)
+  const agentsFilterRepoIds = useAppStore((s) => s.agentsFilterRepoIds)
+  const setAgentsFilterRepoIds = useAppStore((s) => s.setAgentsFilterRepoIds)
+  const { hostOptions } = useSidebarHostScopeOptions()
+  const showHostScopeControls = shouldShowHostScopeControls(hostOptions)
+
+  if (!showHostScopeControls && repos.length <= 1) {
+    return null
+  }
+  return (
+    <>
+      <DropdownMenuLabel>
+        {translate('auto.components.sidebar.SidebarWorkspaceOptionsMenu.showSection', 'Show')}
+      </DropdownMenuLabel>
+      {showHostScopeControls ? (
+        <SidebarHostScopeMenuSection
+          hostVisibilityLabel={getSidebarHostVisibilityLabel(agentsVisibleHostIds, hostOptions)}
+          hostOptions={hostOptions}
+          preserveWorkspaceBoardOpen={false}
+          // Why: the section only calls this to reset to "all hosts".
+          setWorkspaceHostScope={() => setAgentsVisibleHostIds(null)}
+          visibleWorkspaceHostIds={agentsVisibleHostIds}
+          setVisibleWorkspaceHostIds={setAgentsVisibleHostIds}
+        />
+      ) : null}
+      <SidebarRepositoryFilterSection
+        filterRepoIds={agentsFilterRepoIds}
+        setFilterRepoIds={setAgentsFilterRepoIds}
+      />
+      <DropdownMenuSeparator />
+    </>
+  )
+}
+
+// Why not getSidebarHostVisibilityLabel: it collapses a full selection to "All
+// hosts", but a chip only renders while a filter is set — name the selection,
+// falling back to the raw host label for hosts no longer in the options list.
+function getScopeHostChipLabel(
+  visibleHostIds: readonly ExecutionHostId[],
+  hostOptions: readonly SidebarHostOption[]
+): string {
+  if (visibleHostIds.length === 1) {
+    const id = visibleHostIds[0]
+    return hostOptions.find((host) => host.id === id)?.label ?? getExecutionHostLabel(id)
+  }
+  return translate(
+    'auto.components.sidebar.sidebarHostOptions.visibleHostsCount',
+    '{{value0}} hosts',
+    { value0: visibleHostIds.length }
+  )
+}
+
+function ScopeFilterChip({
+  label,
+  clearLabel,
+  onClear
+}: {
+  label: string
+  clearLabel: string
+  onClear: () => void
+}): React.JSX.Element {
+  return (
+    <span className="inline-flex min-w-0 items-center gap-1 rounded-full border border-border/80 bg-muted/80 py-0.5 pl-2 pr-1 text-[11px] font-medium leading-none text-foreground/80 shadow-xs">
+      <span className="min-w-0 truncate">{label}</span>
+      <button
+        type="button"
+        aria-label={clearLabel}
+        onClick={onClear}
+        className="rounded-full p-0.5 text-muted-foreground hover:bg-accent hover:text-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring"
+      >
+        <X className="size-2.5" />
+      </button>
+    </span>
+  )
+}
+
+/**
+ * Dismissible chips naming the active persisted scope.
+ * Why always shown while a scope is active: the filter survives restarts, so an
+ * invisible one would silently hide running agents from a monitoring surface.
+ *
+ * Why the outer/inner split: this stays mounted on every activity surface, so
+ * while no scope is set it must subscribe only to the two filter fields — the
+ * host-registry derivation (settings, SSH/runtime status churn) lives in the
+ * inner row and mounts only for an active filter.
+ */
+export function ActivityScopeFilterChips(): React.JSX.Element | null {
+  const agentsVisibleHostIds = useAppStore((s) => s.agentsVisibleHostIds)
+  const agentsFilterRepoIds = useAppStore((s) => s.agentsFilterRepoIds)
+  if (agentsVisibleHostIds === null && agentsFilterRepoIds.length === 0) {
+    return null
+  }
+  return <ActiveScopeFilterChipsRow />
+}
+
+function ActiveScopeFilterChipsRow(): React.JSX.Element | null {
+  const repos = useAppStore((s) => s.repos)
+  const agentsVisibleHostIds = useAppStore((s) => s.agentsVisibleHostIds)
+  const setAgentsVisibleHostIds = useAppStore((s) => s.setAgentsVisibleHostIds)
+  const agentsFilterRepoIds = useAppStore((s) => s.agentsFilterRepoIds)
+  const setAgentsFilterRepoIds = useAppStore((s) => s.setAgentsFilterRepoIds)
+  const { hostOptions } = useSidebarHostScopeOptions()
+
+  const selectedRepoNames = useMemo(
+    () =>
+      repos.filter((repo) => agentsFilterRepoIds.includes(repo.id)).map((repo) => repo.displayName),
+    [repos, agentsFilterRepoIds]
+  )
+  const hasHostFilter = agentsVisibleHostIds !== null
+  const hasRepoFilter = selectedRepoNames.length > 0
+  // Why: a repo filter of only-stale ids renders nothing; the outer gate is a fast path, not the authority.
+  if (!hasHostFilter && !hasRepoFilter) {
+    return null
+  }
+  const repoLabel =
+    selectedRepoNames.length === 1
+      ? selectedRepoNames[0]
+      : translate(
+          'auto.components.sidebar.SidebarRepositoryFilterSection.selectedProjectsCount',
+          '{{value0}} projects',
+          { value0: selectedRepoNames.length }
+        )
+  return (
+    <div className="flex shrink-0 flex-wrap items-center gap-1 border-b border-border px-2 py-1.5">
+      {agentsVisibleHostIds ? (
+        <ScopeFilterChip
+          label={getScopeHostChipLabel(agentsVisibleHostIds, hostOptions)}
+          clearLabel={translate(
+            'auto.components.activity.ActivityScopeFilterControls.clearHostFilter',
+            'Show all hosts'
+          )}
+          onClear={() => setAgentsVisibleHostIds(null)}
+        />
+      ) : null}
+      {hasRepoFilter ? (
+        <ScopeFilterChip
+          label={repoLabel}
+          clearLabel={translate(
+            'auto.components.activity.ActivityScopeFilterControls.clearProjectFilter',
+            'Show all projects'
+          )}
+          onClear={() => setAgentsFilterRepoIds([])}
+        />
+      ) : null}
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/activity/activity-scope-filter.test.ts b/src/renderer/src/components/activity/activity-scope-filter.test.ts
new file mode 100644
index 00000000000..45817e50a7b
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-scope-filter.test.ts
@@ -0,0 +1,130 @@
+import { describe, expect, it } from 'vitest'
+import { LOCAL_EXECUTION_HOST_ID, type ExecutionHostId } from '../../../../shared/execution-host'
+import type { Repo } from '../../../../shared/repo-types'
+import {
+  filterThreadsByActivityScope,
+  resolveActivityScopeRepoIds,
+  threadMatchesActivityScope,
+  type ActivityScopeFilter
+} from './activity-scope-filter'
+import type { AgentPaneThread } from './activity-thread-types'
+import {
+  makeRepo,
+  makeTabWithIds,
+  makeWorktree,
+  PANE_KEY
+} from './ActivityPrototypePage-test-fixtures'
+
+const SSH_HOST = 'ssh:devbox' as ExecutionHostId
+
+function makeThread(overrides: Partial<AgentPaneThread> = {}): AgentPaneThread {
+  const worktree = makeWorktree()
+  return {
+    paneKey: PANE_KEY,
+    paneTitle: 'Test Agent',
+    agentType: 'claude',
+    worktree,
+    repo: makeRepo(),
+    tab: makeTabWithIds('tab-1', worktree.id),
+    events: [],
+    latestEvent: null,
+    latestTimestamp: 1000,
+    currentAgentState: 'working',
+    currentAgentEntry: null,
+    unread: false,
+    responsePreview: '',
+    ...overrides
+  }
+}
+
+function makeScope(overrides: Partial<ActivityScopeFilter> = {}): ActivityScopeFilter {
+  return {
+    visibleHostIds: null,
+    filterRepoIds: [],
+    defaultHostId: LOCAL_EXECUTION_HOST_ID,
+    ...overrides
+  }
+}
+
+describe('threadMatchesActivityScope', () => {
+  it('matches everything when no scope is active', () => {
+    expect(threadMatchesActivityScope(makeThread(), makeScope())).toBe(true)
+    expect(threadMatchesActivityScope(makeThread({ repo: null }), makeScope())).toBe(true)
+  })
+
+  it('filters by execution host, falling back to the default host for local worktrees', () => {
+    const local = makeThread()
+    const remote = makeThread({
+      worktree: { ...makeWorktree(), hostId: SSH_HOST }
+    })
+    const localOnly = makeScope({ visibleHostIds: [LOCAL_EXECUTION_HOST_ID] })
+    expect(threadMatchesActivityScope(local, localOnly)).toBe(true)
+    expect(threadMatchesActivityScope(remote, localOnly)).toBe(false)
+    const remoteOnly = makeScope({ visibleHostIds: [SSH_HOST] })
+    expect(threadMatchesActivityScope(local, remoteOnly)).toBe(false)
+    expect(threadMatchesActivityScope(remote, remoteOnly)).toBe(true)
+  })
+
+  it('filters by project and hides repo-less threads under a project scope', () => {
+    const scope = makeScope({ filterRepoIds: ['repo-1'] })
+    expect(threadMatchesActivityScope(makeThread(), scope)).toBe(true)
+    expect(
+      threadMatchesActivityScope(makeThread({ repo: { ...makeRepo(), id: 'repo-2' } }), scope)
+    ).toBe(false)
+    expect(threadMatchesActivityScope(makeThread({ repo: null }), scope)).toBe(false)
+  })
+})
+
+describe('filterThreadsByActivityScope', () => {
+  it('returns the input array by identity when the scope is inactive', () => {
+    const threads = [makeThread(), makeThread({ paneKey: 'pane-2', repo: null })]
+    const result = filterThreadsByActivityScope({
+      threads,
+      scope: makeScope(),
+      exemptPaneKey: null
+    })
+    expect(result.threads).toBe(threads)
+    expect(result.matchingThreads).toBe(threads)
+    expect(result.hiddenCount).toBe(0)
+  })
+
+  it('returns the input array by identity when an active scope hides nothing', () => {
+    const threads = [makeThread()]
+    const result = filterThreadsByActivityScope({
+      threads,
+      scope: makeScope({ visibleHostIds: [LOCAL_EXECUTION_HOST_ID] }),
+      exemptPaneKey: null
+    })
+    expect(result.threads).toBe(threads)
+    expect(result.matchingThreads).toBe(threads)
+    expect(result.hiddenCount).toBe(0)
+  })
+
+  it('hides scoped-out threads but keeps the exempt pane, counting only real hides', () => {
+    const local = makeThread()
+    const remote = makeThread({
+      paneKey: 'pane-remote',
+      worktree: { ...makeWorktree(), hostId: SSH_HOST }
+    })
+    const exemptRemote = makeThread({
+      paneKey: 'pane-exempt',
+      worktree: { ...makeWorktree(), hostId: SSH_HOST }
+    })
+    const result = filterThreadsByActivityScope({
+      threads: [local, remote, exemptRemote],
+      scope: makeScope({ visibleHostIds: [LOCAL_EXECUTION_HOST_ID] }),
+      exemptPaneKey: 'pane-exempt'
+    })
+    expect(result.threads).toEqual([local, exemptRemote])
+    expect(result.matchingThreads).toEqual([local])
+    expect(result.hiddenCount).toBe(1)
+  })
+})
+
+describe('resolveActivityScopeRepoIds', () => {
+  it('drops stale repo ids so they cannot count as an active filter', () => {
+    const repoMap = new Map<string, Repo>([['repo-1', makeRepo()]])
+    expect(resolveActivityScopeRepoIds(['repo-1', 'gone-repo'], repoMap)).toEqual(['repo-1'])
+    expect(resolveActivityScopeRepoIds(['gone-repo'], repoMap)).toEqual([])
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-scope-filter.ts b/src/renderer/src/components/activity/activity-scope-filter.ts
new file mode 100644
index 00000000000..36dfafa8cf6
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-scope-filter.ts
@@ -0,0 +1,80 @@
+import type { ExecutionHostId } from '../../../../shared/execution-host'
+import { getWorktreeExecutionHostId } from '../../../../shared/execution-host'
+import type { Repo } from '../../../../shared/repo-types'
+import type { AgentPaneThread } from './activity-thread-types'
+
+/** Host/project scope for the Agents activity surfaces. Persisted and separate
+ *  from the workspace-nav filters; hosts `null` = all, repoIds empty = all. */
+export type ActivityScopeFilter = {
+  visibleHostIds: readonly ExecutionHostId[] | null
+  filterRepoIds: readonly string[]
+  defaultHostId: ExecutionHostId
+}
+
+/** Repo ids that still exist; stale persisted ids must not count as an active filter. */
+export function resolveActivityScopeRepoIds(
+  filterRepoIds: readonly string[],
+  repoMap: ReadonlyMap<string, Repo>
+): string[] {
+  return filterRepoIds.filter((repoId) => repoMap.has(repoId))
+}
+
+/**
+ * Apply the scope to a thread list. Returns the input array by identity when
+ * the scope is inactive or hides nothing, so downstream memos (visible threads,
+ * grouping) see an unchanged dep instead of re-running on every rebuild.
+ */
+export function filterThreadsByActivityScope(args: {
+  threads: AgentPaneThread[]
+  scope: ActivityScopeFilter
+  /** Kept visible even when scoped out, so changing scope can't vanish the open row. */
+  exemptPaneKey: string | null
+}): {
+  threads: AgentPaneThread[]
+  /** Strict matches for bulk actions; excludes a selected row kept visible only by the exemption. */
+  matchingThreads: AgentPaneThread[]
+  hiddenCount: number
+} {
+  const { threads, scope, exemptPaneKey } = args
+  if (!scope.visibleHostIds && scope.filterRepoIds.length === 0) {
+    return { threads, matchingThreads: threads, hiddenCount: 0 }
+  }
+  const matchingThreads: AgentPaneThread[] = []
+  const visibleThreads: AgentPaneThread[] = []
+  for (const thread of threads) {
+    if (threadMatchesActivityScope(thread, scope)) {
+      matchingThreads.push(thread)
+      visibleThreads.push(thread)
+    } else if (thread.paneKey === exemptPaneKey) {
+      visibleThreads.push(thread)
+    }
+  }
+  return {
+    threads: visibleThreads.length === threads.length ? threads : visibleThreads,
+    matchingThreads: matchingThreads.length === threads.length ? threads : matchingThreads,
+    hiddenCount: threads.length - visibleThreads.length
+  }
+}
+
+export function threadMatchesActivityScope(
+  thread: AgentPaneThread,
+  scope: ActivityScopeFilter
+): boolean {
+  if (scope.visibleHostIds) {
+    const hostId = getWorktreeExecutionHostId(
+      thread.worktree,
+      thread.repo ?? undefined,
+      scope.defaultHostId
+    )
+    if (!scope.visibleHostIds.includes(hostId)) {
+      return false
+    }
+  }
+  // Why: repo-less terminal buckets have no project, so a project scope hides them.
+  if (scope.filterRepoIds.length > 0) {
+    if (!thread.repo || !scope.filterRepoIds.includes(thread.repo.id)) {
+      return false
+    }
+  }
+  return true
+}
diff --git a/src/renderer/src/components/activity/activity-standalone-worktree.ts b/src/renderer/src/components/activity/activity-standalone-worktree.ts
new file mode 100644
index 00000000000..9844fbb9896
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-standalone-worktree.ts
@@ -0,0 +1,67 @@
+import { i18n, translate } from '@/i18n/i18n'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
+import type { Worktree } from '../../../../shared/worktree/types'
+import type { ExecutionHostId } from '../../../../shared/execution-host'
+
+const STANDALONE_ACTIVITY_WORKTREE_REPO_ID = '__activity_standalone__'
+const STANDALONE_ACTIVITY_WORKTREES_CAP = 200
+const standaloneActivityWorktrees = new Map<string, Worktree>()
+// The cached rows carry a localized displayName, so they cannot outlive a language switch.
+let cachedDisplayNameLocale: string | undefined
+
+function buildStandaloneActivityWorktree(
+  worktreeId: string,
+  executionHostId?: ExecutionHostId
+): Worktree {
+  const displayName =
+    worktreeId === FLOATING_TERMINAL_WORKTREE_ID
+      ? translate(
+          'auto.components.activity.standaloneWorktree.floatingTerminal',
+          'Floating terminal'
+        )
+      : translate(
+          'auto.components.activity.standaloneWorktree.standaloneTerminal',
+          'Standalone terminal'
+        )
+  return {
+    id: worktreeId,
+    ...(executionHostId ? { hostId: executionHostId } : {}),
+    repoId: STANDALONE_ACTIVITY_WORKTREE_REPO_ID,
+    path: '',
+    head: '',
+    branch: displayName,
+    isBare: false,
+    isMainWorktree: false,
+    displayName,
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: 0
+  }
+}
+
+/** Return a stable synthetic worktree for terminal-only activity. */
+export function standaloneActivityWorktree(
+  worktreeId: string,
+  executionHostId?: ExecutionHostId
+): Worktree {
+  if (cachedDisplayNameLocale !== i18n.language) {
+    cachedDisplayNameLocale = i18n.language
+    standaloneActivityWorktrees.clear()
+  }
+  const cacheKey = `${worktreeId}\0${executionHostId ?? ''}`
+  let worktree = standaloneActivityWorktrees.get(cacheKey)
+  if (!worktree) {
+    if (standaloneActivityWorktrees.size >= STANDALONE_ACTIVITY_WORKTREES_CAP) {
+      standaloneActivityWorktrees.clear()
+    }
+    worktree = buildStandaloneActivityWorktree(worktreeId, executionHostId)
+    standaloneActivityWorktrees.set(cacheKey, worktree)
+  }
+  return worktree
+}
diff --git a/src/renderer/src/components/activity/activity-tab-projection.ts b/src/renderer/src/components/activity/activity-tab-projection.ts
new file mode 100644
index 00000000000..028d474d519
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-tab-projection.ts
@@ -0,0 +1,66 @@
+import type { Tab } from '../../../../shared/tab-types'
+
+/**
+ * Stable view of the unified tab map for the activity pipeline.
+ *
+ * Why: the store rewrites the focused tab object (lastFocusedAt) on every focus, which would
+ * rebuild every activity thread even though nothing the pipeline reads changed. Keep only the
+ * tab kinds the pipeline consults and reuse prior tab objects when their relevant fields match,
+ * so downstream identity-keyed caches keep hitting.
+ */
+export type ActivityTabProjection = Record<string, Tab[]>
+
+function isActivityRelevantTab(tab: Tab): boolean {
+  return tab.contentType === 'terminal' || tab.contentType === 'agent-session'
+}
+
+function activityTabFieldsEqual(a: Tab, b: Tab): boolean {
+  return (
+    a.id === b.id &&
+    a.entityId === b.entityId &&
+    a.worktreeId === b.worktreeId &&
+    a.executionHostId === b.executionHostId &&
+    a.contentType === b.contentType &&
+    a.label === b.label &&
+    a.generatedLabel === b.generatedLabel &&
+    a.customLabel === b.customLabel &&
+    a.color === b.color &&
+    a.isPinned === b.isPinned &&
+    a.sortOrder === b.sortOrder &&
+    a.createdAt === b.createdAt
+  )
+}
+
+export function projectActivityTabs(
+  unifiedTabsByWorktree: Record<string, Tab[]> | undefined,
+  previous: ActivityTabProjection | null
+): ActivityTabProjection {
+  const next: ActivityTabProjection = {}
+  let changed = previous === null
+  for (const [worktreeId, tabs] of Object.entries(unifiedTabsByWorktree ?? {})) {
+    const relevant = tabs.filter(isActivityRelevantTab)
+    if (relevant.length === 0) {
+      continue
+    }
+    const prior = previous?.[worktreeId]
+    let reusable = prior !== undefined && prior.length === relevant.length
+    const projected = relevant.map((tab, index) => {
+      const priorTab = prior?.[index]
+      if (priorTab && activityTabFieldsEqual(priorTab, tab)) {
+        return priorTab
+      }
+      reusable = false
+      return tab
+    })
+    if (reusable && prior) {
+      next[worktreeId] = prior
+    } else {
+      next[worktreeId] = projected
+      changed = true
+    }
+  }
+  if (!changed && previous && Object.keys(previous).length === Object.keys(next).length) {
+    return previous
+  }
+  return next
+}
diff --git a/src/renderer/src/components/activity/activity-thread-actions.test.ts b/src/renderer/src/components/activity/activity-thread-actions.test.ts
new file mode 100644
index 00000000000..ce2de01fe02
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-actions.test.ts
@@ -0,0 +1,162 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { makeRepo, makeTab, makeWorktree } from './ActivityPrototypePage-test-fixtures'
+import type { AgentPaneThread } from './activity-thread-types'
+
+const mocks = vi.hoisted(() => ({
+  getState: vi.fn(),
+  activateTabAndFocusPane: vi.fn(),
+  activateStructuredAgentSessionTab: vi.fn(),
+  activateAndRevealWorkspace: vi.fn()
+}))
+
+vi.mock('@/store', () => ({ useAppStore: { getState: mocks.getState } }))
+vi.mock('@/lib/activate-tab-and-focus-pane', () => ({
+  activateTabAndFocusPane: mocks.activateTabAndFocusPane
+}))
+vi.mock('@/lib/structured-agent-session-tab-activation', () => ({
+  activateStructuredAgentSessionTab: mocks.activateStructuredAgentSessionTab
+}))
+vi.mock('@/lib/worktree-activation', () => ({
+  activateAndRevealWorkspace: mocks.activateAndRevealWorkspace
+}))
+
+import { createActivityThreadActions, hasActivityThreadWorkspace } from './activity-thread-actions'
+
+const REMOTE_HOST = 'ssh:devbox' as const
+
+function makeRemoteThread(): AgentPaneThread {
+  const worktree = { ...makeWorktree(), hostId: REMOTE_HOST }
+  return {
+    paneKey: 'tab-1:11111111-1111-4111-8111-111111111111',
+    paneTitle: 'Remote agent',
+    agentType: 'claude',
+    worktree,
+    repo: makeRepo(),
+    tab: makeTab(),
+    events: [],
+    latestEvent: null,
+    latestTimestamp: 1_000,
+    currentAgentState: 'working',
+    currentAgentEntry: null,
+    unread: true,
+    responsePreview: ''
+  }
+}
+
+describe('activity thread host routing', () => {
+  const thread = makeRemoteThread()
+  const getKnownWorktreeById = vi.fn()
+  const setActiveWorktree = vi.fn()
+  const acknowledgeAgents = vi.fn()
+  const setSelectedPaneKey = vi.fn()
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mocks.activateStructuredAgentSessionTab.mockReturnValue(false)
+    getKnownWorktreeById.mockReturnValue(thread.worktree)
+    mocks.getState.mockReturnValue({
+      getKnownWorktreeById,
+      worktreesByRepo: { [thread.worktree.repoId]: [thread.worktree] },
+      detectedWorktreesByRepo: {},
+      folderWorkspaces: [],
+      showSleepingWorkspaces: true,
+      filterRepoIds: [],
+      hideDefaultBranchWorkspace: false,
+      hideAutomationGeneratedWorkspaces: false,
+      hideCliCreatedWorkspaces: false,
+      hideDetachedHeadWorkspaces: false,
+      hideWorkspacesFromOtherDevices: false,
+      alwaysShowDefaultBranchWorkspace: true,
+      visibleWorkspaceHostIds: null,
+      workspaceHostScope: 'all',
+      tabsByWorktree: { [thread.worktree.id]: [thread.tab] },
+      unifiedTabsByWorktree: {},
+      activeRepoId: thread.worktree.repoId,
+      activeWorktreeId: thread.worktree.id,
+      activeWorkspaceExecutionHostId: 'local',
+      setActiveRepo: vi.fn(),
+      setActiveWorktree,
+      setActiveTabType: vi.fn()
+    })
+  })
+
+  it('selects the matching host when the same workspace id is active elsewhere', () => {
+    const actions = createActivityThreadActions({
+      getMarkAllReadThreads: () => [thread],
+      acknowledgeAgents,
+      unacknowledgeAgents: vi.fn(),
+      setSelectedPaneKey
+    })
+
+    actions.selectThread(thread)
+
+    expect(getKnownWorktreeById).toHaveBeenCalledWith(thread.worktree.id, REMOTE_HOST)
+    expect(setActiveWorktree).toHaveBeenCalledWith(thread.worktree.id, REMOTE_HOST)
+    expect(mocks.activateTabAndFocusPane).toHaveBeenCalledWith(
+      thread.tab.id,
+      '11111111-1111-4111-8111-111111111111',
+      { flashFocusedPane: true, scrollToBottomIfOutputSinceLastView: true }
+    )
+  })
+
+  it('activates a structured agent session instead of looking for a terminal pane', () => {
+    mocks.activateStructuredAgentSessionTab.mockReturnValue(true)
+    mocks.getState.mockReturnValue({
+      ...mocks.getState(),
+      tabsByWorktree: { [thread.worktree.id]: [] },
+      unifiedTabsByWorktree: {
+        [thread.worktree.id]: [{ id: thread.tab.id, contentType: 'agent-session' }]
+      }
+    })
+    const actions = createActivityThreadActions({
+      getMarkAllReadThreads: () => [thread],
+      acknowledgeAgents,
+      unacknowledgeAgents: vi.fn(),
+      setSelectedPaneKey
+    })
+
+    actions.selectThread(thread)
+
+    expect(mocks.activateStructuredAgentSessionTab).toHaveBeenCalledWith({
+      worktreeId: thread.worktree.id,
+      tabId: thread.tab.id
+    })
+    expect(mocks.activateTabAndFocusPane).not.toHaveBeenCalled()
+  })
+
+  it('jumps to and probes the matching host-qualified workspace', () => {
+    expect(hasActivityThreadWorkspace(thread)).toBe(true)
+    const actions = createActivityThreadActions({
+      getMarkAllReadThreads: () => [thread],
+      acknowledgeAgents,
+      unacknowledgeAgents: vi.fn(),
+      setSelectedPaneKey
+    })
+
+    actions.jumpToWorkspace(thread)
+
+    expect(acknowledgeAgents).toHaveBeenCalledWith([thread.paneKey])
+    expect(mocks.activateAndRevealWorkspace).toHaveBeenCalledWith(thread.worktree.id, {
+      executionHostId: REMOTE_HOST
+    })
+  })
+
+  it('marks all unread threads in the mark-all set, reading it at call time', () => {
+    const readThread = { ...makeRemoteThread(), paneKey: 'tab-2:read', unread: false }
+    let markAllSet = [readThread]
+    const actions = createActivityThreadActions({
+      getMarkAllReadThreads: () => markAllSet,
+      acknowledgeAgents,
+      unacknowledgeAgents: vi.fn(),
+      setSelectedPaneKey
+    })
+
+    actions.markAllThreadsRead()
+    expect(acknowledgeAgents).not.toHaveBeenCalled()
+
+    // The handler keeps one identity while the set changes underneath it.
+    markAllSet = [thread, readThread]
+    actions.markAllThreadsRead()
+    expect(acknowledgeAgents).toHaveBeenCalledWith([thread.paneKey])
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-thread-actions.ts b/src/renderer/src/components/activity/activity-thread-actions.ts
index f1e1ff6ae5b..b0971da7ea7 100644
--- a/src/renderer/src/components/activity/activity-thread-actions.ts
+++ b/src/renderer/src/components/activity/activity-thread-actions.ts
@@ -1,22 +1,65 @@
 import { activateTabAndFocusPane } from '@/lib/activate-tab-and-focus-pane'
-import { activateAndRevealWorktree } from '@/lib/worktree-activation'
+import { activateStructuredAgentSessionTab } from '@/lib/structured-agent-session-tab-activation'
+import { jumpToWorktreeFromSidebar } from '@/lib/worktree-jump-navigation'
 import { useAppStore } from '@/store'
-import { getWorktreeMapFromState } from '@/store/selectors'
+import {
+  getSettingsFocusedExecutionHostId,
+  getWorktreeExecutionHostId,
+  type ExecutionHostId
+} from '../../../../shared/execution-host'
 import { parsePaneKey } from '../../../../shared/stable-pane-id'
+import { findKnownWorktreeById } from '@/store/slices/worktrees/listing/detected-worktree-meta'
+import type { AppState } from '@/store/types'
 import type { AgentPaneThread } from './activity-thread-types'
 
+// Same focused-host fallback the Agents scope filter uses; defaulting to `local` here would
+// look up a hostless runtime-owned workspace on the wrong host and silently drop the jump.
+function getActivityThreadExecutionHostId(
+  thread: AgentPaneThread,
+  defaultHostId: ExecutionHostId
+): ExecutionHostId {
+  return getWorktreeExecutionHostId(thread.worktree, thread.repo ?? undefined, defaultHostId)
+}
+
+type ActivityThreadWorkspaceCatalog = Pick<
+  AppState,
+  'worktreesByRepo' | 'detectedWorktreesByRepo' | 'folderWorkspaces'
+> & { defaultHostId: ExecutionHostId }
+
+function readActivityThreadWorkspaceCatalog(): ActivityThreadWorkspaceCatalog {
+  const state = useAppStore.getState()
+  return { ...state, defaultHostId: getSettingsFocusedExecutionHostId(state.settings) }
+}
+
+export function hasActivityThreadWorkspace(
+  thread: AgentPaneThread,
+  catalog: ActivityThreadWorkspaceCatalog = readActivityThreadWorkspaceCatalog()
+): boolean {
+  return Boolean(
+    findKnownWorktreeById(
+      catalog,
+      thread.worktree.id,
+      getActivityThreadExecutionHostId(thread, catalog.defaultHostId)
+    )
+  )
+}
+
 export function createActivityThreadActions({
-  allThreads,
+  getMarkAllReadThreads,
   acknowledgeAgents,
   unacknowledgeAgents,
   setSelectedPaneKey
 }: {
-  allThreads: AgentPaneThread[]
+  /** Getter (not a snapshot) so the handlers keep one identity for the row memo
+   *  bail-outs while bulk actions still see the current thread set. This is the
+   *  badge-coherent set (child-filter only), not the search/scope-narrowed one,
+   *  so Mark all read always drives the Agents badge to zero. */
+  getMarkAllReadThreads: () => AgentPaneThread[]
   acknowledgeAgents: (paneKeys: string[]) => void
   unacknowledgeAgents: (paneKeys: string[]) => void
   setSelectedPaneKey: (paneKey: string | null) => void
 }): {
-  hasUnreadThreads: boolean
+  markThreadRead: (thread: AgentPaneThread) => void
   markThreadUnread: (thread: AgentPaneThread) => void
   selectThread: (thread: AgentPaneThread) => void
   jumpToWorkspace: (thread: AgentPaneThread) => void
@@ -30,51 +73,67 @@ export function createActivityThreadActions({
     unacknowledgeAgents([thread.paneKey])
   }
 
-  const activateThreadTerminal = (thread: AgentPaneThread): void => {
+  const activateThreadTarget = (thread: AgentPaneThread): void => {
     const state = useAppStore.getState()
-    const worktree = getWorktreeMapFromState(state).get(thread.worktree.id)
+    const executionHostId = getActivityThreadExecutionHostId(
+      thread,
+      getSettingsFocusedExecutionHostId(state.settings)
+    )
+    const worktree = state.getKnownWorktreeById(thread.worktree.id, executionHostId)
     if (!worktree) {
       return
     }
-    // Why: retained-agent threads can outlive their tab; without a live tab, reorienting the workspace and focusing a dead tab id would just confuse the user.
     const liveTabs = state.tabsByWorktree[worktree.id] ?? []
-    const hasLiveTab = liveTabs.some((t) => t.id === thread.tab.id)
-    if (!hasLiveTab) {
+    const hasLiveTerminal = liveTabs.some((tab) => tab.id === thread.tab.id)
+    const hasLiveAgentSession = (state.unifiedTabsByWorktree?.[worktree.id] ?? []).some(
+      (tab) => tab.id === thread.tab.id && tab.contentType === 'agent-session'
+    )
+    // Why: retained threads can outlive their target; reorienting the workspace for a
+    // dead terminal or structured session would just confuse the user.
+    if (!hasLiveTerminal && !hasLiveAgentSession) {
       return
     }
     if (state.activeRepoId !== worktree.repoId) {
       state.setActiveRepo(worktree.repoId)
     }
-    if (state.activeWorktreeId !== worktree.id) {
-      state.setActiveWorktree(worktree.id)
+    if (
+      state.activeWorktreeId !== worktree.id ||
+      state.activeWorkspaceExecutionHostId !== executionHostId
+    ) {
+      state.setActiveWorktree(worktree.id, executionHostId)
+    }
+    if (activateStructuredAgentSessionTab({ worktreeId: worktree.id, tabId: thread.tab.id })) {
+      return
     }
     state.setActiveTabType('terminal')
     const parsed = parsePaneKey(thread.paneKey)
     activateTabAndFocusPane(
       thread.tab.id,
       parsed && parsed.tabId === thread.tab.id ? parsed.leafId : null,
-      { scrollToBottomIfOutputSinceLastView: true }
+      { flashFocusedPane: true, scrollToBottomIfOutputSinceLastView: true }
     )
   }
 
   const selectThread = (thread: AgentPaneThread): void => {
     setSelectedPaneKey(thread.paneKey)
-    activateThreadTerminal(thread)
+    activateThreadTarget(thread)
   }
 
   const jumpToWorkspace = (thread: AgentPaneThread): void => {
-    const state = useAppStore.getState()
-    if (!getWorktreeMapFromState(state).has(thread.worktree.id)) {
+    const catalog = readActivityThreadWorkspaceCatalog()
+    if (!hasActivityThreadWorkspace(thread, catalog)) {
       return
     }
     markThreadRead(thread)
-    activateAndRevealWorktree(thread.worktree.id)
+    jumpToWorktreeFromSidebar(thread.worktree.id, {
+      executionHostId: getActivityThreadExecutionHostId(thread, catalog.defaultHostId)
+    })
   }
 
-  const hasUnreadThreads = allThreads.some((thread) => thread.unread)
-
   const markAllThreadsRead = (): void => {
-    const unreadKeys = allThreads.filter((t) => t.unread).map((t) => t.paneKey)
+    const unreadKeys = getMarkAllReadThreads()
+      .filter((t) => t.unread)
+      .map((t) => t.paneKey)
     if (unreadKeys.length === 0) {
       return
     }
@@ -82,7 +141,7 @@ export function createActivityThreadActions({
   }
 
   return {
-    hasUnreadThreads,
+    markThreadRead,
     markThreadUnread,
     selectThread,
     jumpToWorkspace,
diff --git a/src/renderer/src/components/activity/activity-thread-builder.ts b/src/renderer/src/components/activity/activity-thread-builder.ts
index 8ba6ab4f5fd..a1076ea0022 100644
--- a/src/renderer/src/components/activity/activity-thread-builder.ts
+++ b/src/renderer/src/components/activity/activity-thread-builder.ts
@@ -9,11 +9,68 @@ import type {
   AgentPaneThread
 } from './activity-thread-types'
 
-export function buildAgentPaneThreads(args: {
-  events: ActivityEvent[]
-  liveAgentByPaneKey: Record<string, ActivityLiveAgentSnapshot>
-  generatedTitlesEnabled?: boolean
-}): AgentPaneThread[] {
+/**
+ * Caller-owned reuse cache: threads whose derived content is unchanged keep their
+ * previous object (and the whole list keeps its array) identity, so memo'd rows and
+ * the search-text cache survive unrelated store writes.
+ */
+export type AgentPaneThreadReuseCache = {
+  previousByPaneKey: Map<string, AgentPaneThread>
+  previousList: AgentPaneThread[]
+}
+
+export function createAgentPaneThreadReuseCache(): AgentPaneThreadReuseCache {
+  return { previousByPaneKey: new Map(), previousList: [] }
+}
+
+function arrayItemsEqual<T>(a: readonly T[], b: readonly T[]): boolean {
+  if (a.length !== b.length) {
+    return false
+  }
+  for (let i = 0; i < a.length; i += 1) {
+    if (a[i] !== b[i]) {
+      return false
+    }
+  }
+  return true
+}
+
+// Why: event and live-snapshot identities are preserved upstream (activity-event-builder
+// cache), so identity comparison on the referenced objects is a correct change detector.
+function reuseThreadIfEqual(
+  previous: AgentPaneThread | undefined,
+  next: AgentPaneThread
+): AgentPaneThread {
+  if (
+    previous !== undefined &&
+    previous.paneKey === next.paneKey &&
+    previous.paneTitle === next.paneTitle &&
+    previous.worktree === next.worktree &&
+    previous.repo === next.repo &&
+    previous.tab === next.tab &&
+    previous.agentType === next.agentType &&
+    previous.currentAgentState === next.currentAgentState &&
+    previous.currentAgentEntry === next.currentAgentEntry &&
+    previous.responsePreview === next.responsePreview &&
+    previous.latestTimestamp === next.latestTimestamp &&
+    previous.latestEvent === next.latestEvent &&
+    previous.migrationUnsupportedPtyId === next.migrationUnsupportedPtyId &&
+    previous.unread === next.unread &&
+    arrayItemsEqual(previous.events, next.events)
+  ) {
+    return previous
+  }
+  return next
+}
+
+export function buildAgentPaneThreads(
+  args: {
+    events: ActivityEvent[]
+    liveAgentByPaneKey: Record<string, ActivityLiveAgentSnapshot>
+    generatedTitlesEnabled?: boolean
+  },
+  reuseCache?: AgentPaneThreadReuseCache
+): AgentPaneThread[] {
   const generatedTitlesEnabled = args.generatedTitlesEnabled === true
   const byPaneKey = new Map<string, AgentPaneThread>()
   for (const event of args.events) {
@@ -92,10 +149,22 @@ export function buildAgentPaneThreads(args: {
     existing.latestTimestamp = liveAgent.timestamp
   }
 
-  return Array.from(byPaneKey.values())
-    .map((thread) => ({
-      ...thread,
-      events: [...thread.events].sort((a, b) => b.timestamp - a.timestamp)
-    }))
+  const built = Array.from(byPaneKey.values())
+    .map((thread) => {
+      const next: AgentPaneThread = {
+        ...thread,
+        events: [...thread.events].sort((a, b) => b.timestamp - a.timestamp)
+      }
+      return reuseThreadIfEqual(reuseCache?.previousByPaneKey.get(thread.paneKey), next)
+    })
     .sort((a, b) => b.latestTimestamp - a.latestTimestamp)
+
+  if (!reuseCache) {
+    return built
+  }
+  // Why: keep the list's array identity too, so downstream memos keyed on the list bail out.
+  const result = arrayItemsEqual(reuseCache.previousList, built) ? reuseCache.previousList : built
+  reuseCache.previousList = result
+  reuseCache.previousByPaneKey = new Map(result.map((thread) => [thread.paneKey, thread]))
+  return result
 }
diff --git a/src/renderer/src/components/activity/activity-thread-child-agent.test.ts b/src/renderer/src/components/activity/activity-thread-child-agent.test.ts
new file mode 100644
index 00000000000..7c687c72037
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-child-agent.test.ts
@@ -0,0 +1,171 @@
+import { describe, expect, it } from 'vitest'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import { collectChildAgentPaneKeys } from './activity-thread-child-agent'
+import type { ActivityEvent, AgentPaneThread } from './activity-thread-types'
+import {
+  makeRepo,
+  makeTabWithIds,
+  makeWorkingEntryWithoutHistory,
+  makeWorktree,
+  PANE_KEY,
+  PANE_KEY_2,
+  PANE_KEY_3
+} from './ActivityPrototypePage-test-fixtures'
+
+function makeTestEntry(
+  paneKey: string,
+  overrides: Partial<AgentStatusEntry> = {}
+): AgentStatusEntry {
+  return {
+    ...makeWorkingEntryWithoutHistory(),
+    paneKey,
+    state: 'done',
+    prompt: 'test prompt',
+    stateHistory: [],
+    ...overrides
+  }
+}
+
+function makeTestThread(
+  paneKey: string,
+  overrides: Partial<AgentPaneThread> = {}
+): AgentPaneThread {
+  const worktree = makeWorktree()
+  return {
+    paneKey,
+    paneTitle: 'Test Agent',
+    agentType: 'claude',
+    worktree,
+    repo: makeRepo(),
+    tab: makeTabWithIds('tab-1', worktree.id),
+    events: [],
+    latestEvent: null,
+    latestTimestamp: 1000,
+    currentAgentState: 'working',
+    currentAgentEntry: makeTestEntry(paneKey),
+    unread: false,
+    responsePreview: '',
+    ...overrides
+  }
+}
+
+function makeEventFor(entry: AgentStatusEntry): ActivityEvent {
+  const worktree = makeWorktree()
+  return {
+    id: `event-${entry.paneKey}`,
+    state: 'done',
+    timestamp: 1000,
+    unread: false,
+    worktree,
+    repo: null,
+    tab: makeTabWithIds('tab-1', worktree.id),
+    agentType: 'claude',
+    agentAlive: true,
+    entry
+  }
+}
+
+describe('collectChildAgentPaneKeys', () => {
+  it('returns an empty set when no thread carries orchestration', () => {
+    const threads = [makeTestThread(PANE_KEY), makeTestThread(PANE_KEY_2)]
+    expect(collectChildAgentPaneKeys(threads).size).toBe(0)
+  })
+
+  it('classifies a thread whose parent pane is listed as a child', () => {
+    const parent = makeTestThread(PANE_KEY)
+    const child = makeTestThread(PANE_KEY_2, {
+      currentAgentEntry: makeTestEntry(PANE_KEY_2, {
+        orchestration: { parentPaneKey: PANE_KEY, taskId: 'task-1', dispatchId: 'ctx-1' }
+      })
+    })
+    expect(collectChildAgentPaneKeys([parent, child])).toEqual(new Set([PANE_KEY_2]))
+  })
+
+  it('promotes an orphan whose parent pane is no longer listed', () => {
+    const orphan = makeTestThread(PANE_KEY_2, {
+      currentAgentEntry: makeTestEntry(PANE_KEY_2, {
+        orchestration: { parentPaneKey: PANE_KEY, taskId: 'task-1', dispatchId: 'ctx-1' }
+      })
+    })
+    expect(collectChildAgentPaneKeys([orphan]).size).toBe(0)
+  })
+
+  it('ignores a self-referencing parentPaneKey', () => {
+    const thread = makeTestThread(PANE_KEY, {
+      currentAgentEntry: makeTestEntry(PANE_KEY, {
+        orchestration: { parentPaneKey: PANE_KEY, taskId: 'task-1', dispatchId: 'ctx-1' }
+      })
+    })
+    expect(collectChildAgentPaneKeys([thread]).size).toBe(0)
+  })
+
+  it('resolves coordinatorHandle through a listed thread terminal handle', () => {
+    const coordinator = makeTestThread(PANE_KEY, {
+      currentAgentEntry: makeTestEntry(PANE_KEY, { terminalHandle: 'terminal-coord' })
+    })
+    const worker = makeTestThread(PANE_KEY_2, {
+      currentAgentEntry: makeTestEntry(PANE_KEY_2, {
+        terminalHandle: 'terminal-worker',
+        orchestration: {
+          coordinatorHandle: 'terminal-coord',
+          taskId: 'task-1',
+          dispatchId: 'ctx-1'
+        }
+      })
+    })
+    expect(collectChildAgentPaneKeys([coordinator, worker])).toEqual(new Set([PANE_KEY_2]))
+  })
+
+  it('promotes a worker whose coordinator handle matches no listed thread', () => {
+    const worker = makeTestThread(PANE_KEY_2, {
+      currentAgentEntry: makeTestEntry(PANE_KEY_2, {
+        terminalHandle: 'terminal-worker',
+        orchestration: { coordinatorHandle: 'terminal-gone', taskId: 'task-1', dispatchId: 'ctx-1' }
+      })
+    })
+    expect(collectChildAgentPaneKeys([worker]).size).toBe(0)
+  })
+
+  it('keeps child classification from an older event while the parent is listed', () => {
+    const parent = makeTestThread(PANE_KEY)
+    const childEntry = makeTestEntry(PANE_KEY_2, {
+      orchestration: { parentPaneKey: PANE_KEY, taskId: 'task-1', dispatchId: 'ctx-1' }
+    })
+    const child = makeTestThread(PANE_KEY_2, {
+      currentAgentEntry: makeTestEntry(PANE_KEY_2),
+      events: [makeEventFor(childEntry)]
+    })
+    expect(collectChildAgentPaneKeys([parent, child])).toEqual(new Set([PANE_KEY_2]))
+  })
+
+  it('classifies a grandchild chained through a listed child', () => {
+    const root = makeTestThread(PANE_KEY)
+    const child = makeTestThread(PANE_KEY_2, {
+      currentAgentEntry: makeTestEntry(PANE_KEY_2, {
+        orchestration: { parentPaneKey: PANE_KEY, taskId: 'task-1', dispatchId: 'ctx-1' }
+      })
+    })
+    const grandchild = makeTestThread(PANE_KEY_3, {
+      currentAgentEntry: makeTestEntry(PANE_KEY_3, {
+        orchestration: { parentPaneKey: PANE_KEY_2, taskId: 'task-2', dispatchId: 'ctx-2' }
+      })
+    })
+    expect(collectChildAgentPaneKeys([root, child, grandchild])).toEqual(
+      new Set([PANE_KEY_2, PANE_KEY_3])
+    )
+  })
+
+  it('promotes every member of a parent cycle instead of hiding them all', () => {
+    const a = makeTestThread(PANE_KEY, {
+      currentAgentEntry: makeTestEntry(PANE_KEY, {
+        orchestration: { parentPaneKey: PANE_KEY_2, taskId: 'task-1', dispatchId: 'ctx-1' }
+      })
+    })
+    const b = makeTestThread(PANE_KEY_2, {
+      currentAgentEntry: makeTestEntry(PANE_KEY_2, {
+        orchestration: { parentPaneKey: PANE_KEY, taskId: 'task-2', dispatchId: 'ctx-2' }
+      })
+    })
+    expect(collectChildAgentPaneKeys([a, b]).size).toBe(0)
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-thread-child-agent.ts b/src/renderer/src/components/activity/activity-thread-child-agent.ts
new file mode 100644
index 00000000000..4fd0a3dbd10
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-child-agent.ts
@@ -0,0 +1,90 @@
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import {
+  buildAgentRowLineageTree,
+  resolveAgentRowParentPaneKey,
+  type AgentLineageSourceRow
+} from '../dashboard/agent-row-lineage-model'
+
+type ChildAgentLineageEntry = Pick<AgentStatusEntry, 'terminalHandle' | 'orchestration'>
+
+/** Minimal structural input: a full AgentPaneThread satisfies it (pinned by the
+ *  classifier tests), and count/badge callers can feed synthetic rows uncast. */
+export type ChildAgentClassifiableThread = {
+  paneKey: string
+  currentAgentEntry?: ChildAgentLineageEntry | null
+  latestEvent?: { entry: ChildAgentLineageEntry } | null
+  events?: readonly { entry: ChildAgentLineageEntry }[]
+}
+
+/** Every entry that can carry the pane's orchestration lineage, newest first. */
+function candidateEntries(thread: ChildAgentClassifiableThread): ChildAgentLineageEntry[] {
+  const entries: ChildAgentLineageEntry[] = []
+  if (thread.currentAgentEntry) {
+    entries.push(thread.currentAgentEntry)
+  }
+  if (thread.latestEvent?.entry) {
+    entries.push(thread.latestEvent.entry)
+  }
+  for (const event of thread.events ?? []) {
+    entries.push(event.entry)
+  }
+  return entries
+}
+
+function firstReportedTerminalHandle(thread: ChildAgentClassifiableThread): string | undefined {
+  for (const entry of candidateEntries(thread)) {
+    if (entry.terminalHandle) {
+      return entry.terminalHandle
+    }
+  }
+  return undefined
+}
+
+/**
+ * Pane keys of threads that are children of another currently listed thread.
+ * Delegates to the dashboard's lineage model so both surfaces classify the same
+ * pane identically: a parent reference only counts while the parent thread is
+ * still listed, so orphaned workers (their coordinator pane closed) and cycle
+ * members are promoted to top level instead of staying hidden behind the
+ * child-agent filter. Classification is sticky across a thread's older events:
+ * the newest entry whose parent still resolves wins.
+ */
+export function collectChildAgentPaneKeys(
+  threads: readonly ChildAgentClassifiableThread[]
+): Set<string> {
+  const baseRows: AgentLineageSourceRow[] = threads.map((thread) => ({
+    paneKey: thread.paneKey,
+    entry: { terminalHandle: firstReportedTerminalHandle(thread) }
+  }))
+  const rowsByPaneKey = new Map<string, AgentLineageSourceRow>()
+  for (const row of baseRows) {
+    if (!rowsByPaneKey.has(row.paneKey)) {
+      rowsByPaneKey.set(row.paneKey, row)
+    }
+  }
+  const paneKeyByTerminalHandle = new Map<string, string>()
+  for (const row of baseRows) {
+    if (row.entry.terminalHandle && !paneKeyByTerminalHandle.has(row.entry.terminalHandle)) {
+      paneKeyByTerminalHandle.set(row.entry.terminalHandle, row.paneKey)
+    }
+  }
+
+  const rows = threads.map((thread, index) => {
+    const base = baseRows[index]
+    for (const entry of candidateEntries(thread)) {
+      if (!entry.orchestration) {
+        continue
+      }
+      const probe: AgentLineageSourceRow = {
+        paneKey: thread.paneKey,
+        entry: { terminalHandle: base.entry.terminalHandle, orchestration: entry.orchestration }
+      }
+      if (resolveAgentRowParentPaneKey(probe, rowsByPaneKey, paneKeyByTerminalHandle)) {
+        return probe
+      }
+    }
+    return base
+  })
+
+  return buildAgentRowLineageTree(rows).childPaneKeys
+}
diff --git a/src/renderer/src/components/activity/activity-thread-collapse-context.ts b/src/renderer/src/components/activity/activity-thread-collapse-context.ts
new file mode 100644
index 00000000000..070b395174d
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-collapse-context.ts
@@ -0,0 +1,13 @@
+import { createContext } from 'react'
+
+export type ActivityThreadCollapseState = {
+  collapsedGroupKeys: ReadonlySet<string>
+  onToggleGroupCollapse: (groupKey: string) => void
+}
+
+/**
+ * Caller-owned collapse state for ActivityThreadListPane hosts that unmount the
+ * pane (sidebar body switches) but should keep the user's collapsed groups.
+ * Explicit collapsedGroupKeys/onToggleGroupCollapse props take precedence.
+ */
+export const ActivityThreadCollapseContext = createContext<ActivityThreadCollapseState | null>(null)
diff --git a/src/renderer/src/components/activity/activity-thread-controls.tsx b/src/renderer/src/components/activity/activity-thread-controls.tsx
index f6cb249c9fc..ad52cd9c51c 100644
--- a/src/renderer/src/components/activity/activity-thread-controls.tsx
+++ b/src/renderer/src/components/activity/activity-thread-controls.tsx
@@ -1,17 +1,11 @@
 import React from 'react'
-import { MoreVertical } from 'lucide-react'
+import { ChevronDown } from 'lucide-react'
 import { AgentStateDot } from '@/components/AgentStateDot'
-import { Button } from '@/components/ui/button'
-import {
-  DropdownMenu,
-  DropdownMenuCheckboxItem,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuSeparator,
-  DropdownMenuTrigger
-} from '@/components/ui/dropdown-menu'
 import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
 import { translate } from '@/i18n/i18n'
+import { useNow } from '@/hooks/use-now'
+import { cn } from '@/lib/utils'
+import { formatShortTimeAgo } from '@/lib/short-time-ago'
 import { RepoBadgeMark } from '@/components/repo/RepoBadgeLabel'
 import type { Repo } from '../../../../shared/repo-types'
 import {
@@ -22,18 +16,33 @@ import {
 } from './activity-thread-presentation'
 import type { ActivityThreadGroup, AgentPaneThread } from './activity-thread-types'
 
-export function EventTime({ timestamp }: { timestamp: number }): React.JSX.Element {
+export { ActivityThreadOptionsMenu } from './activity-thread-options-menu'
+
+export function EventTime({
+  timestamp,
+  compact = false
+}: {
+  timestamp: number
+  compact?: boolean
+}): React.JSX.Element {
+  // Why: rows reuse their identity across store writes, so this label can't rely on
+  // incidental re-renders to stay honest; the shared visibility-gated clock re-renders
+  // only this leaf (memo'd rows stay bailed out). 30s cadence matches WorktreeCardAgents.
+  const now = useNow(30_000)
   const absolute = formatAbsoluteDate(timestamp)
   return (
     <Tooltip>
       <TooltipTrigger asChild>
         <button
           type="button"
-          className="rounded px-1 py-0.5 text-xs text-muted-foreground hover:text-foreground focus-visible:ring-[3px] focus-visible:ring-ring/50 focus-visible:outline-none"
+          className={cn(
+            'rounded text-muted-foreground hover:text-foreground focus-visible:ring-[3px] focus-visible:ring-ring/50 focus-visible:outline-none',
+            compact ? 'px-0 py-0 text-[11px] tabular-nums' : 'px-1 py-0.5 text-xs'
+          )}
           aria-label={absolute}
           onClick={(event) => event.stopPropagation()}
         >
-          {formatRelativeTime(timestamp)}
+          {compact ? formatShortTimeAgo(timestamp, now) : formatRelativeTime(timestamp, now)}
         </button>
       </TooltipTrigger>
       <TooltipContent side="right" sideOffset={6}>
@@ -43,60 +52,6 @@ export function EventTime({ timestamp }: { timestamp: number }): React.JSX.Eleme
   )
 }
 
-export function ActivityThreadOptionsMenu({
-  compactMode,
-  hasUnreadThreads,
-  onCompactModeChange,
-  onMarkAllThreadsRead
-}: {
-  compactMode: boolean
-  hasUnreadThreads: boolean
-  onCompactModeChange: (compactMode: boolean) => void
-  onMarkAllThreadsRead: () => void
-}): React.JSX.Element {
-  return (
-    <DropdownMenu>
-      <Tooltip>
-        <TooltipTrigger asChild>
-          {/* Why: keep Tooltip and Dropdown from composing refs onto the same button (Radix setRef crash loop). */}
-          <span className="inline-flex shrink-0">
-            <DropdownMenuTrigger asChild>
-              <Button
-                type="button"
-                variant="outline"
-                size="sm"
-                className="size-8 shrink-0 border-input bg-transparent p-0 text-muted-foreground shadow-xs hover:bg-accent hover:text-accent-foreground dark:bg-transparent dark:hover:bg-accent dark:hover:text-accent-foreground"
-                aria-label={translate(
-                  'auto.components.activity.ActivityPrototypePage.db8a1878b5',
-                  'Thread list options'
-                )}
-              >
-                <MoreVertical className="size-3.5" />
-              </Button>
-            </DropdownMenuTrigger>
-          </span>
-        </TooltipTrigger>
-        <TooltipContent side="bottom">
-          {translate('auto.components.activity.ActivityPrototypePage.a472a14700', 'More options')}
-        </TooltipContent>
-      </Tooltip>
-      <DropdownMenuContent align="end" sideOffset={6}>
-        <DropdownMenuCheckboxItem
-          checked={compactMode}
-          onCheckedChange={(checked) => onCompactModeChange(checked === true)}
-          onSelect={(event) => event.preventDefault()}
-        >
-          {translate('auto.components.activity.ActivityPrototypePage.f70e4bec47', 'Compact mode')}
-        </DropdownMenuCheckboxItem>
-        <DropdownMenuSeparator />
-        <DropdownMenuItem onSelect={onMarkAllThreadsRead} disabled={!hasUnreadThreads}>
-          {translate('auto.components.activity.ActivityPrototypePage.023ff75afe', 'Mark all read')}
-        </DropdownMenuItem>
-      </DropdownMenuContent>
-    </DropdownMenu>
-  )
-}
-
 export function ActivityProjectLabel({ repo }: { repo: Repo | null }): React.JSX.Element {
   const label =
     repo?.displayName?.trim() ||
@@ -150,21 +105,54 @@ export function ThreadAgentStateIndicator({
 }
 
 export function ActivityStatusGroupHeader({
-  group
+  group,
+  collapsed = false,
+  onToggle,
+  className
 }: {
   group: ActivityThreadGroup
+  collapsed?: boolean
+  onToggle?: () => void
+  className?: string
 }): React.JSX.Element {
+  const isInteractive = Boolean(onToggle)
   return (
-    <div className="sticky top-0 z-10 flex items-center gap-2 border-b border-border bg-background/95 px-3 py-1.5 backdrop-blur supports-[backdrop-filter]:bg-background/80">
+    <div
+      role={isInteractive ? 'button' : undefined}
+      tabIndex={isInteractive ? 0 : undefined}
+      aria-expanded={isInteractive ? !collapsed : undefined}
+      onClick={onToggle}
+      onKeyDown={
+        isInteractive
+          ? (event) => {
+              if (event.key === 'Enter' || event.key === ' ') {
+                event.preventDefault()
+                onToggle?.()
+              }
+            }
+          : undefined
+      }
+      className={cn(
+        'group flex h-7 select-none items-center gap-1.5 rounded-md px-1.5 py-1 text-muted-foreground transition-colors',
+        isInteractive && 'cursor-pointer hover:bg-accent/60 hover:text-foreground',
+        className
+      )}
+    >
+      <ChevronDown
+        className={cn(
+          'size-3 shrink-0 text-muted-foreground transition-transform duration-150 group-hover:text-foreground',
+          collapsed && '-rotate-90'
+        )}
+      />
       {group.state ? (
         <span className="inline-flex size-4 shrink-0 items-center justify-center">
           <AgentStateDot state={group.state} size="sm" />
         </span>
       ) : null}
-      <span className="min-w-0 flex-1 truncate text-[11px] font-semibold uppercase tracking-[0.05em] text-muted-foreground">
+      <span className="min-w-0 flex-1 truncate text-[11px] font-semibold uppercase tracking-[0.05em] text-foreground/80 transition-colors group-hover:text-foreground">
         {group.label}
       </span>
-      <span className="rounded-full border border-border bg-accent px-1.5 py-0.5 text-[10px] font-semibold leading-none text-muted-foreground">
+      <span className="rounded-full border border-border/80 bg-muted/80 px-1.5 py-0.5 text-[10px] font-semibold tabular-nums leading-none text-foreground/80 shadow-xs">
         {group.threads.length}
       </span>
     </div>
diff --git a/src/renderer/src/components/activity/activity-thread-grouping.search-cache.test.ts b/src/renderer/src/components/activity/activity-thread-grouping.search-cache.test.ts
new file mode 100644
index 00000000000..4c5b003eac4
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-grouping.search-cache.test.ts
@@ -0,0 +1,53 @@
+import { describe, expect, it } from 'vitest'
+import {
+  activityThreadMatchesSearchQuery,
+  getThreadSearchTextComputeCount
+} from './activity-thread-grouping'
+import type { AgentPaneThread } from './activity-thread-types'
+import { makeTab, makeWorktree } from './ActivityPrototypePage-test-fixtures'
+
+function makeThread(paneKey: string, paneTitle: string): AgentPaneThread {
+  return {
+    paneKey,
+    tab: makeTab(),
+    worktree: makeWorktree(),
+    repo: null,
+    currentAgentState: null,
+    currentAgentEntry: null,
+    latestEvent: null,
+    latestTimestamp: 1_000,
+    agentType: 'claude',
+    unread: false,
+    paneTitle,
+    responsePreview: 'x'.repeat(2_000),
+    events: []
+  }
+}
+
+describe('activity thread search text cache', () => {
+  it('builds a thread searchable text once per thread identity across keystrokes', () => {
+    const thread = makeThread('tab-1:leaf-1', 'Refactor billing pipeline')
+    const before = getThreadSearchTextComputeCount()
+    // Simulate typing a query letter by letter against the same thread objects.
+    for (const searchQuery of ['r', 're', 'ref', 'refa', 'refac']) {
+      expect(activityThreadMatchesSearchQuery({ thread, searchQuery })).toBe(true)
+    }
+    expect(getThreadSearchTextComputeCount() - before).toBe(1)
+  })
+
+  it('recomputes when thread data changes (new thread identity)', () => {
+    const before = getThreadSearchTextComputeCount()
+    const first = makeThread('tab-1:leaf-1', 'First title')
+    const rebuilt = makeThread('tab-1:leaf-1', 'Second title')
+    expect(activityThreadMatchesSearchQuery({ thread: first, searchQuery: 'first' })).toBe(true)
+    expect(activityThreadMatchesSearchQuery({ thread: rebuilt, searchQuery: 'second' })).toBe(true)
+    expect(getThreadSearchTextComputeCount() - before).toBe(2)
+  })
+
+  it('keeps match semantics: state labels, workspace, and previews still match', () => {
+    const thread = makeThread('tab-1:leaf-1', 'My task')
+    expect(activityThreadMatchesSearchQuery({ thread, searchQuery: 'feature' })).toBe(true)
+    expect(activityThreadMatchesSearchQuery({ thread, searchQuery: 'zzz-no-match' })).toBe(false)
+    expect(activityThreadMatchesSearchQuery({ thread, searchQuery: '' })).toBe(true)
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-thread-grouping.ts b/src/renderer/src/components/activity/activity-thread-grouping.ts
index 1744c0b84f6..0730aa68b5d 100644
--- a/src/renderer/src/components/activity/activity-thread-grouping.ts
+++ b/src/renderer/src/components/activity/activity-thread-grouping.ts
@@ -18,19 +18,23 @@ import type {
   AgentPaneThread
 } from './activity-thread-types'
 
+// Attention-needing groups first (interrupted included: it's stopped and awaiting the user) so they're never buried under Working/Done.
 const ACTIVITY_STATUS_GROUP_ORDER: ActivityStatusGroupId[] = [
+  'waiting',
+  'blocked',
+  'interrupted',
   'working',
   'monitoring',
-  'blocked',
-  'waiting',
-  'done',
-  'interrupted'
+  'done'
 ]
 
 export function getActivityThreadGroup(
   thread: AgentPaneThread,
   groupBy: ActivityGroupBy
 ): { key: string; label: string } {
+  if (groupBy === 'none') {
+    return { key: 'all', label: '' }
+  }
   if (groupBy === 'status') {
     const state = threadAgentState(thread)
     if (!thread.currentAgentState && state === 'done' && thread.latestEvent?.entry.interrupted) {
@@ -59,6 +63,9 @@ export function buildActivityThreadGroups(
   threads: AgentPaneThread[],
   groupBy: ActivityGroupBy
 ): ActivityThreadGroup[] {
+  if (groupBy === 'none') {
+    return threads.length > 0 ? [{ key: 'all', label: '', threads }] : []
+  }
   const groups: ActivityThreadGroup[] = []
   const groupIndexByKey = new Map<string, number>()
   for (const thread of threads) {
@@ -74,7 +81,7 @@ export function buildActivityThreadGroups(
   return groups
 }
 
-function threadStatusGroupId(thread: AgentPaneThread): ActivityStatusGroupId {
+export function threadStatusGroupId(thread: AgentPaneThread): ActivityStatusGroupId {
   const state = threadAgentState(thread)
   if (!thread.currentAgentState && state === 'done' && thread.latestEvent?.entry.interrupted) {
     return 'interrupted'
@@ -118,7 +125,7 @@ export function groupActivityThreadsByStatus(threads: AgentPaneThread[]): Activi
   })
 }
 
-function threadSearchText(thread: AgentPaneThread): string {
+function buildThreadSearchText(thread: AgentPaneThread): string {
   const latest = thread.latestEvent
   const stateLabel = threadAgentStateLabel(thread)
   const currentPrompt = thread.currentAgentEntry
@@ -132,6 +139,28 @@ function threadSearchText(thread: AgentPaneThread): string {
   return `${thread.paneTitle} ${getActivityThreadWorkspaceTitle(thread.worktree)} ${thread.worktree.branch ?? ''} ${thread.repo?.displayName ?? ''} ${formatAgentTypeLabel(thread.agentType)} ${stateLabel} ${currentPrompt} ${rawCurrentPrompt} ${currentSummary} ${thread.responsePreview} ${latestEventText}`.toLowerCase()
 }
 
+// Why: thread objects are rebuilt only when the underlying store data changes, so their
+// identity is a correct cache key; without this every keystroke re-lowercases a large
+// string per thread. WeakMap so dropped threads release their text.
+const threadSearchTextCache = new WeakMap<AgentPaneThread, string>()
+let threadSearchTextComputeCount = 0
+
+/** Test hook: how many times search text was actually (re)built. */
+export function getThreadSearchTextComputeCount(): number {
+  return threadSearchTextComputeCount
+}
+
+function threadSearchText(thread: AgentPaneThread): string {
+  const cached = threadSearchTextCache.get(thread)
+  if (cached !== undefined) {
+    return cached
+  }
+  threadSearchTextComputeCount += 1
+  const text = buildThreadSearchText(thread)
+  threadSearchTextCache.set(thread, text)
+  return text
+}
+
 export const ACTIVITY_SEARCH_QUERY_MAX_BYTES = 2 * 1024
 
 export function isActivitySearchQueryTooLarge(
diff --git a/src/renderer/src/components/activity/activity-thread-hover-card-summary.tsx b/src/renderer/src/components/activity/activity-thread-hover-card-summary.tsx
new file mode 100644
index 00000000000..37b0658f0d9
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-hover-card-summary.tsx
@@ -0,0 +1,230 @@
+import React, { useCallback, useMemo } from 'react'
+import { Cloud, Copy, FolderGit2, GitBranch, Laptop, LocateFixed, Server } from 'lucide-react'
+import { toast } from 'sonner'
+import { useAppStore } from '@/store'
+import { RepoBadgeMark } from '@/components/repo/RepoBadgeLabel'
+import { AgentIcon } from '@/lib/agent-catalog'
+import { agentTypeToIconAgent, formatAgentTypeLabel } from '@/lib/agent-status'
+import { getWorktreeGitIdentityDisplay } from '@/lib/worktree-git-identity-display'
+import { jumpToWorktreeFromSidebar } from '@/lib/worktree-jump-navigation'
+import { translate } from '@/i18n/i18n'
+import { cn } from '@/lib/utils'
+import {
+  getExecutionHostLabel,
+  getWorktreeExecutionHostId,
+  parseExecutionHostId
+} from '../../../../shared/execution-host'
+import type { GlobalSettings } from '../../../../shared/global-settings-types'
+import { getHostDisplayLabelOverrides } from '../../../../shared/host-setting-overrides'
+import CommentMarkdown from '../sidebar/CommentMarkdown'
+import { DetailHeader, MetadataActionIcon } from '../sidebar/WorktreeCardMetadataControls'
+import {
+  WorktreeCardDetailSection,
+  WorktreeCardDetailSectionContent
+} from '../sidebar/WorktreeCardDetailSection'
+import { EventTime, ThreadAgentStateIndicator } from './activity-thread-controls'
+import { activityThreadRowCopy, threadAgentStateLabel } from './activity-thread-presentation'
+import { getActivityThreadWorkspaceTitle } from '@/lib/activity-thread-display'
+import type { AgentPaneThread } from './activity-thread-types'
+
+export function ActivityThreadHoverCardSummary({
+  thread,
+  settings,
+  onJumpToWorkspace,
+  canJumpToWorkspace
+}: {
+  thread: AgentPaneThread
+  settings: GlobalSettings | null | undefined
+  onJumpToWorkspace?: (event: React.MouseEvent) => void
+  canJumpToWorkspace?: boolean
+}): React.JSX.Element {
+  const { worktree, repo } = thread
+  const sshTargetLabels = useAppStore((s) => s.sshTargetLabels)
+  const runtimeEnvironments = useAppStore((s) => s.runtimeEnvironments)
+  const executionHostId = getWorktreeExecutionHostId(worktree, repo ?? undefined)
+  const parsedHost = parseExecutionHostId(executionHostId)
+  const hostLabelOverrides = useMemo(() => getHostDisplayLabelOverrides(settings), [settings])
+  const hostDisplayLabel = useMemo(() => {
+    const override = hostLabelOverrides.get(executionHostId)
+    if (override) {
+      return override
+    }
+    if (parsedHost?.kind === 'runtime') {
+      const environment = runtimeEnvironments.find((entry) => entry.id === parsedHost.environmentId)
+      if (environment?.name) {
+        return environment.name
+      }
+    }
+    if (parsedHost?.kind === 'ssh') {
+      const target = sshTargetLabels.get(parsedHost.targetId)
+      if (target) {
+        return target
+      }
+    }
+    return getExecutionHostLabel(executionHostId)
+  }, [executionHostId, hostLabelOverrides, parsedHost, runtimeEnvironments, sshTargetLabels])
+  const branchIdentityDisplay = useMemo(() => getWorktreeGitIdentityDisplay(worktree), [worktree])
+  const { taskTitle, needsAttention } = activityThreadRowCopy(thread)
+  const workspaceTitle = getActivityThreadWorkspaceTitle(worktree)
+  const copyPathLabel = translate(
+    'auto.components.activity.ActivityThreadHoverCard.copyPath',
+    'Copy path'
+  )
+
+  const isKnownWorktree = useAppStore((s) =>
+    Boolean(s.getKnownWorktreeById(worktree.id, executionHostId))
+  )
+  const canJump = canJumpToWorkspace ?? isKnownWorktree
+
+  const handleJumpToWorkspace = useCallback(
+    (event: React.MouseEvent<HTMLButtonElement>) => {
+      event.stopPropagation()
+      if (onJumpToWorkspace) {
+        onJumpToWorkspace(event)
+      } else {
+        const state = useAppStore.getState()
+        if (state.getKnownWorktreeById(worktree.id, executionHostId)) {
+          state.acknowledgeAgents([thread.paneKey])
+          jumpToWorktreeFromSidebar(worktree.id, { executionHostId })
+        }
+      }
+    },
+    [executionHostId, onJumpToWorkspace, thread.paneKey, worktree.id]
+  )
+
+  const handleCopyPath = useCallback(async () => {
+    if (!worktree.path) {
+      return
+    }
+    try {
+      await window.api.ui.writeClipboardText(worktree.path)
+      toast.success(
+        translate(
+          'auto.components.activity.ActivityThreadHoverCard.pathCopied',
+          'Path copied to clipboard'
+        )
+      )
+    } catch {
+      toast.error(
+        translate(
+          'auto.components.activity.ActivityThreadHoverCard.copyPathFailed',
+          'Failed to copy path'
+        )
+      )
+    }
+  }, [worktree.path])
+
+  return (
+    <>
+      <div className="space-y-1.5 border-b border-border/40 pb-2.5">
+        <div className="flex items-center justify-between gap-2">
+          <div className="flex min-w-0 items-center gap-1.5">
+            <span className="inline-flex shrink-0">
+              <AgentIcon agent={agentTypeToIconAgent(thread.agentType)} size={14} />
+            </span>
+            <span className="truncate text-[12px] font-semibold text-foreground">
+              {formatAgentTypeLabel(thread.agentType)}
+            </span>
+          </div>
+          <div className="flex shrink-0 items-center gap-1.5 text-[11px] text-muted-foreground">
+            <ThreadAgentStateIndicator thread={thread} />
+            <span
+              className={cn(
+                'text-[11px] font-medium capitalize',
+                needsAttention ? 'text-agent-question-text' : 'text-muted-foreground'
+              )}
+            >
+              {threadAgentStateLabel(thread)}
+            </span>
+            <span className="text-muted-foreground/40">•</span>
+            <EventTime timestamp={thread.latestTimestamp} compact />
+          </div>
+        </div>
+
+        <div className="break-words text-[13px] font-semibold leading-snug text-foreground">
+          {taskTitle}
+        </div>
+
+        {thread.responsePreview ? (
+          <div className="max-h-36 overflow-y-auto break-words rounded-md border border-border/40 bg-accent/40 p-2 text-[11.5px] leading-relaxed text-foreground/80 scrollbar-sleek">
+            <CommentMarkdown
+              content={thread.responsePreview}
+              className="text-[11.5px] leading-relaxed [&_*]:!m-0 [&_*]:!p-0"
+            />
+          </div>
+        ) : null}
+      </div>
+
+      <WorktreeCardDetailSection>
+        <DetailHeader
+          icon={<FolderGit2 className="size-3 text-muted-foreground" />}
+          label={translate(
+            'auto.components.activity.ActivityThreadHoverCard.workspace',
+            'Workspace'
+          )}
+          actions={
+            canJump ? (
+              <MetadataActionIcon
+                label={translate(
+                  'auto.components.activity.ActivityThreadHoverCard.jumpToWorkspace',
+                  'Jump to workspace'
+                )}
+                onClick={handleJumpToWorkspace}
+              >
+                <LocateFixed className="size-3" />
+              </MetadataActionIcon>
+            ) : null
+          }
+        />
+        <WorktreeCardDetailSectionContent className="space-y-2">
+          <div className="flex min-w-0 items-center gap-1.5">
+            {repo ? (
+              <div className="flex shrink-0 items-center gap-1 rounded-[4px] border border-border bg-accent px-1.5 py-0.5 dark:border-border/60 dark:bg-accent/50">
+                <RepoBadgeMark color={repo.badgeColor} />
+                <span className="max-w-[7rem] truncate text-[10px] font-semibold lowercase text-foreground">
+                  {repo.displayName}
+                </span>
+              </div>
+            ) : null}
+            <span className="truncate text-[12.5px] font-semibold text-foreground">
+              {workspaceTitle}
+            </span>
+          </div>
+
+          {branchIdentityDisplay ? (
+            <div className="flex min-w-0 items-center gap-1.5 font-mono text-[11px] text-muted-foreground">
+              <GitBranch className="size-3 shrink-0" />
+              <span className="truncate">
+                {branchIdentityDisplay.kind === 'branch'
+                  ? branchIdentityDisplay.branchName
+                  : branchIdentityDisplay.sidebarLabel}
+              </span>
+            </div>
+          ) : null}
+
+          <div className="flex min-w-0 items-center gap-1.5 text-[11px] text-muted-foreground">
+            {parsedHost?.kind === 'runtime' ? (
+              <Cloud className="size-3 shrink-0" />
+            ) : parsedHost?.kind === 'ssh' ? (
+              <Server className="size-3 shrink-0" />
+            ) : (
+              <Laptop className="size-3 shrink-0" />
+            )}
+            <span className="truncate font-medium">{hostDisplayLabel}</span>
+          </div>
+
+          {worktree.path ? (
+            <div className="flex items-center justify-between gap-1.5 rounded border border-border/30 bg-accent/40 px-2 py-1 font-mono text-[10.5px] text-muted-foreground">
+              <span className="truncate" title={worktree.path}>
+                {worktree.path}
+              </span>
+              <MetadataActionIcon label={copyPathLabel} onClick={handleCopyPath}>
+                <Copy className="size-2.5" />
+              </MetadataActionIcon>
+            </div>
+          ) : null}
+        </WorktreeCardDetailSectionContent>
+      </WorktreeCardDetailSection>
+    </>
+  )
+}
diff --git a/src/renderer/src/components/activity/activity-thread-hover-card.test.tsx b/src/renderer/src/components/activity/activity-thread-hover-card.test.tsx
new file mode 100644
index 00000000000..0e604a16098
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-hover-card.test.tsx
@@ -0,0 +1,238 @@
+// @vitest-environment happy-dom
+
+import React, { act, type ReactElement, type ReactNode } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+import { TooltipProvider } from '@/components/ui/tooltip'
+import type { Worktree } from '../../../../shared/worktree/types'
+import { ActivityThreadHoverCard } from './activity-thread-hover-card'
+import { ActivityThreadRow } from './activity-thread-row'
+import type { AgentPaneThread } from './activity-thread-types'
+import { makeRepo, makeTab, makeWorktree } from './ActivityPrototypePage-test-fixtures'
+
+vi.mock('@/components/ui/hover-card', () => ({
+  HoverCard: ({
+    children,
+    onOpenChange
+  }: {
+    children: ReactNode
+    onOpenChange?: (open: boolean) => void
+  }) => {
+    React.useEffect(() => onOpenChange?.(true), [onOpenChange])
+    return <>{children}</>
+  },
+  HoverCardContent: ({ children, className }: { children: ReactNode; className?: string }) => (
+    <div data-testid="hover-card-content" className={className}>
+      {children}
+    </div>
+  ),
+  HoverCardTrigger: ({ children }: { children: ReactNode }) => <>{children}</>
+}))
+
+globalThis.IS_REACT_ACT_ENVIRONMENT = true
+
+function createTestThread(overrides: Partial<AgentPaneThread> = {}): AgentPaneThread {
+  const repo = makeRepo()
+  const worktree: Worktree = {
+    ...makeWorktree(),
+    displayName: 'm4air-audit',
+    branch: 'feat/m4air-performance',
+    path: '/Users/test/projects/orca/worktrees/m4air-audit',
+    comment: 'Notes for performance audit',
+    hostId: 'runtime:m4air-env-id' as const
+  }
+  const tab = makeTab()
+
+  return {
+    paneKey: 'tab-1:leaf-1',
+    tab,
+    worktree,
+    repo,
+    agentType: 'claude',
+    latestEvent: null,
+    currentAgentState: 'working',
+    currentAgentEntry: null,
+    events: [],
+    unread: false,
+    paneTitle: 'Audit current HEAD on m4air environment',
+    responsePreview: 'Auditing terminal PTY and IME bug categories...',
+    latestTimestamp: 1700000000000,
+    ...overrides
+  }
+}
+
+function Harness({
+  thread,
+  selected = false,
+  onSelect = vi.fn(),
+  onJump = vi.fn(),
+  onMarkRead = vi.fn(),
+  onMarkUnread = vi.fn()
+}: {
+  thread: AgentPaneThread
+  selected?: boolean
+  onSelect?: () => void
+  onJump?: () => void
+  onMarkRead?: () => void
+  onMarkUnread?: () => void
+}): ReactElement {
+  return (
+    <TooltipProvider>
+      <ActivityThreadRow
+        thread={thread}
+        selected={selected}
+        onSelect={onSelect}
+        onJump={onJump}
+        onMarkRead={onMarkRead}
+        onMarkUnread={onMarkUnread}
+        canJump={true}
+        compactMode={false}
+      />
+    </TooltipProvider>
+  )
+}
+
+describe('ActivityThreadHoverCard and ActivityThreadRow', () => {
+  let container: HTMLDivElement
+  let root: Root
+
+  beforeEach(() => {
+    container = document.createElement('div')
+    document.body.appendChild(container)
+    root = createRoot(container)
+  })
+
+  afterEach(() => {
+    act(() => root.unmount())
+    container.remove()
+    document.body.replaceChildren()
+  })
+
+  it('renders the thread row with task title and workspace label', async () => {
+    const thread = createTestThread()
+
+    await act(async () => {
+      root.render(<Harness thread={thread} />)
+    })
+
+    const card = container.querySelector('[data-worktree-card-surface="true"]')
+    expect(card).not.toBeNull()
+    expect(card?.getAttribute('role')).toBe('listitem')
+    expect(
+      card?.querySelector('button[aria-label="Audit current HEAD on m4air environment"]')
+    ).not.toBeNull()
+    expect(card?.textContent).toContain('Audit current HEAD on m4air environment')
+    expect(card?.textContent).toContain('m4air-audit')
+  })
+
+  it('marks an unread thread as read from its bell without selecting the row', async () => {
+    const thread = createTestThread({ unread: true })
+    const onMarkRead = vi.fn()
+    const onSelect = vi.fn()
+
+    await act(async () => {
+      root.render(<Harness thread={thread} onMarkRead={onMarkRead} onSelect={onSelect} />)
+    })
+
+    const markReadButton = container.querySelector<HTMLButtonElement>(
+      'button[aria-label="Mark thread as read"]'
+    )
+    expect(markReadButton).not.toBeNull()
+
+    act(() => {
+      markReadButton?.click()
+    })
+
+    expect(onMarkRead).toHaveBeenCalledWith(thread)
+    expect(onSelect).not.toHaveBeenCalled()
+  })
+
+  it('renders hover card content with workspace info, host, task details, and notes', async () => {
+    const thread = createTestThread({
+      worktree: {
+        ...makeWorktree(),
+        displayName: 'm4air-audit',
+        branch: 'feat/m4air-performance',
+        path: '/Users/test/projects/orca/worktrees/m4air-audit',
+        comment: 'Performance investigation notes',
+        hostId: 'runtime:m4air-env' as const
+      }
+    })
+
+    await act(async () => {
+      root.render(
+        <TooltipProvider>
+          <ActivityThreadHoverCard thread={thread}>
+            <div data-testid="hover-trigger">Hover Target</div>
+          </ActivityThreadHoverCard>
+        </TooltipProvider>
+      )
+    })
+
+    const content = container.querySelector('[data-testid="hover-card-content"]')?.textContent ?? ''
+
+    // Workspace & Host info
+    expect(content).toContain('Workspace')
+    expect(content).toContain('m4air-audit')
+    expect(content).toContain('feat/m4air-performance')
+    expect(content).toContain('/Users/test/projects/orca/worktrees/m4air-audit')
+
+    // Agent & Task details
+    expect(content).toContain('Claude')
+    expect(content).toContain('Audit current HEAD on m4air environment')
+    expect(content).toContain('Auditing terminal PTY and IME bug categories...')
+
+    // Notes
+    expect(content).toContain('Notes')
+    expect(content).toContain('Performance investigation notes')
+  })
+
+  it('allows clicking row while preventing inner hover interactions from bubbling', async () => {
+    const onSelect = vi.fn()
+    const thread = createTestThread()
+
+    await act(async () => {
+      root.render(<Harness thread={thread} onSelect={onSelect} />)
+    })
+
+    const card = container.querySelector<HTMLElement>('[data-worktree-card-surface="true"]')
+    expect(card).not.toBeNull()
+
+    await act(async () => {
+      card?.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+    })
+
+    expect(onSelect).toHaveBeenCalledTimes(1)
+  })
+
+  it('triggers jump to workspace from the hover card crosshair locator button', async () => {
+    const onJump = vi.fn()
+    const thread = createTestThread()
+
+    await act(async () => {
+      root.render(
+        <TooltipProvider>
+          <ActivityThreadHoverCard
+            thread={thread}
+            onJumpToWorkspace={onJump}
+            canJumpToWorkspace={true}
+          >
+            <div data-testid="hover-trigger">Hover Target</div>
+          </ActivityThreadHoverCard>
+        </TooltipProvider>
+      )
+    })
+
+    const jumpButton = container.querySelector<HTMLButtonElement>(
+      'button[aria-label="Jump to workspace"]'
+    )
+    expect(jumpButton).not.toBeNull()
+
+    act(() => {
+      jumpButton?.click()
+    })
+
+    expect(onJump).toHaveBeenCalledWith(thread)
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-thread-hover-card.tsx b/src/renderer/src/components/activity/activity-thread-hover-card.tsx
new file mode 100644
index 00000000000..9bb4ed83887
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-hover-card.tsx
@@ -0,0 +1,407 @@
+import React, { useCallback } from 'react'
+import { ExternalLink, MonitorUp, Pencil, StickyNote } from 'lucide-react'
+import { toast } from 'sonner'
+import { Badge } from '@/components/ui/badge'
+import { HoverCard, HoverCardContent, HoverCardTrigger } from '@/components/ui/hover-card'
+import { LinearIcon } from '@/components/icons/LinearIcon'
+import { JiraIcon } from '@/components/icons/JiraIcon'
+import { SelectedTextCopyMenu } from '@/components/SelectedTextCopyMenu'
+import { translate } from '@/i18n/i18n'
+import CommentMarkdown from '../sidebar/CommentMarkdown'
+import { DetailHeader, MetadataActionIcon } from '../sidebar/WorktreeCardMetadataControls'
+import {
+  WorktreeCardDetailSection,
+  WorktreeCardDetailSectionContent
+} from '../sidebar/WorktreeCardDetailSection'
+import { LinearStateBadge } from '../sidebar/WorktreeCardMetadataStatusBadges'
+import { WorktreeCardIssueDetailSection } from '../sidebar/WorktreeCardIssueDetailSection'
+import { WorktreeCardReviewDetailSection } from '../sidebar/WorktreeCardReviewDetailSection'
+import { WorktreeCardAutomationDetailSection } from '../sidebar/WorktreeCardAutomationDetailSection'
+import { WorktreeCardCliDetailSection } from '../sidebar/WorktreeCardCliDetailSection'
+import { WorktreeCardPortsDetails } from '../sidebar/WorktreeCardPorts'
+import { WORKTREE_NATIVE_CONTEXT_MENU_ATTR } from '../sidebar/WorktreeContextMenu'
+import { useWorktreeCardDetailsHoverControl } from '../sidebar/worktree-card-details-hover-state'
+import { useWorktreeCardFoundation } from '../sidebar/use-worktree-card-foundation'
+import { useWorktreeCardReviewDetails } from '../sidebar/use-worktree-card-review-details'
+import { useWorktreeCardLinkedDetails } from '../sidebar/use-worktree-card-linked-details'
+import { useWorktreeCardLifecycleEffects } from '../sidebar/use-worktree-card-lifecycle-effects'
+import { useWorktreeCardSecondaryDetails } from '../sidebar/use-worktree-card-secondary-details'
+import { getReviewLabel } from '../sidebar/worktree-review-helpers'
+import { ActivityThreadHoverCardSummary } from './activity-thread-hover-card-summary'
+import type { AgentPaneThread } from './activity-thread-types'
+
+export type ActivityThreadHoverCardProps = {
+  thread: AgentPaneThread
+  children: React.ReactElement
+  openDelay?: number
+  closeDelay?: number
+  onJumpToWorkspace?: (thread: AgentPaneThread) => void
+  canJumpToWorkspace?: boolean
+}
+
+export function ActivityThreadHoverCard({
+  thread,
+  children,
+  openDelay = 200,
+  closeDelay = 120,
+  onJumpToWorkspace,
+  canJumpToWorkspace
+}: ActivityThreadHoverCardProps): React.JSX.Element {
+  const detailsHoverControl = useWorktreeCardDetailsHoverControl()
+
+  return (
+    <HoverCard
+      open={detailsHoverControl.hoverOpen}
+      onOpenChange={detailsHoverControl.handleHoverOpenChange}
+      openDelay={openDelay}
+      closeDelay={closeDelay}
+    >
+      <HoverCardTrigger asChild>{children}</HoverCardTrigger>
+      {detailsHoverControl.hoverOpen ? (
+        <ActivityThreadHoverCardContent
+          thread={thread}
+          detailsHoverControl={detailsHoverControl}
+          onJumpToWorkspace={onJumpToWorkspace}
+          canJumpToWorkspace={canJumpToWorkspace}
+        />
+      ) : null}
+    </HoverCard>
+  )
+}
+
+function ActivityThreadHoverCardContent({
+  thread,
+  detailsHoverControl,
+  onJumpToWorkspace,
+  canJumpToWorkspace
+}: {
+  thread: AgentPaneThread
+  detailsHoverControl: ReturnType<typeof useWorktreeCardDetailsHoverControl>
+  onJumpToWorkspace?: (thread: AgentPaneThread) => void
+  canJumpToWorkspace?: boolean
+}): React.JSX.Element {
+  const { worktree, repo } = thread
+  const foundation = useWorktreeCardFoundation({ worktree, repo: repo ?? undefined })
+  const review = useWorktreeCardReviewDetails({
+    worktree,
+    repo: repo ?? undefined,
+    settings: foundation.settings,
+    projectGroups: foundation.projectGroups,
+    cardProps: foundation.cardProps,
+    newCardStyle: foundation.newCardStyle
+  })
+  const linked = useWorktreeCardLinkedDetails({
+    worktree,
+    newCardStyle: foundation.newCardStyle,
+    deleteState: foundation.deleteState,
+    branch: review.branch,
+    issueEntry: review.issueEntry,
+    linearIssueEntry: review.linearIssueEntry,
+    linearIssueFallbackEntry: review.linearIssueFallbackEntry,
+    prDisplay: review.prDisplay
+  })
+
+  const hoverDetailsOpen = detailsHoverControl.hoverOpen
+
+  useWorktreeCardLifecycleEffects({
+    worktree,
+    repo: repo ?? undefined,
+    isFolder: review.isFolder,
+    hostedReviewCacheKey: review.hostedReviewCacheKey,
+    cachedBranchFallbackGitHubPRNumber: review.cachedBranchFallbackGitHubPRNumber,
+    linkedGitLabMR: review.linkedGitLabMR,
+    linkedBitbucketPR: review.linkedBitbucketPR,
+    linkedAzureDevOpsPR: review.linkedAzureDevOpsPR,
+    linkedGiteaPR: review.linkedGiteaPR,
+    branch: review.branch,
+    fetchHostedReviewForBranch: foundation.fetchHostedReviewForBranch,
+    shouldRefreshHostedReview: false,
+    newCardStyle: true,
+    hoverDetailsOpen,
+    showIssue: true,
+    issueCacheKey: review.issueCacheKey,
+    fetchIssue: foundation.fetchIssue,
+    showLinearIssue: true,
+    fetchLinearIssue: foundation.fetchLinearIssue
+  })
+
+  const secondary = useWorktreeCardSecondaryDetails({
+    worktree,
+    repo: repo ?? undefined,
+    statusPrDisplay: null,
+    showStatus: true,
+    showIssue: true,
+    showLinearIssue: true,
+    showJiraIssue: true,
+    showPR: true,
+    showAutomation: true,
+    showCli: true,
+    showComment: true,
+    showPorts: true,
+    issueDisplay: linked.issueDisplay,
+    linearIssue: linked.linearIssue,
+    linearIssueDisplay: linked.linearIssueDisplay,
+    jiraIssueDisplay: linked.jiraIssueDisplay,
+    prDisplay: review.prDisplay,
+    linkedGitLabMR: review.linkedGitLabMR,
+    linkedBitbucketPR: review.linkedBitbucketPR,
+    linkedAzureDevOpsPR: review.linkedAzureDevOpsPR,
+    linkedGiteaPR: review.linkedGiteaPR,
+    cardProps: foundation.cardProps,
+    newCardStyle: foundation.newCardStyle,
+    compactCards: foundation.compactCards,
+    agentActivityDisplayMode: foundation.agentActivityDisplayMode,
+    workspacePorts: foundation.workspacePorts,
+    openTaskPage: foundation.openTaskPage,
+    updateWorktreeMeta: foundation.updateWorktreeMeta,
+    settings: foundation.settings
+  })
+
+  const copyLinkedWorkItemLink = useCallback(async (url: string, label: string) => {
+    try {
+      await window.api.ui.writeClipboardText(url)
+      toast.success(
+        translate('auto.components.sidebar.WorktreeCardMeta.copyLinkSuccess', '{{value0}} copied', {
+          value0: label
+        })
+      )
+    } catch {
+      toast.error(
+        translate('auto.components.sidebar.WorktreeCardMeta.copyLinkFailure', 'Failed to copy link')
+      )
+    }
+  }, [])
+
+  const handleCopyIssueLink = useCallback(() => {
+    if (!secondary.hoverIssue?.url) {
+      return
+    }
+    detailsHoverControl.closeHover()
+    void copyLinkedWorkItemLink(
+      secondary.hoverIssue.url,
+      translate('auto.components.sidebar.WorktreeCardMeta.issueLinkLabel', 'Issue link')
+    )
+  }, [copyLinkedWorkItemLink, detailsHoverControl, secondary.hoverIssue?.url])
+
+  const handleCopyReviewLink = useCallback(() => {
+    if (!secondary.hoverReview?.url) {
+      return
+    }
+    void copyLinkedWorkItemLink(
+      secondary.hoverReview.url,
+      translate('auto.components.sidebar.WorktreeCardMeta.reviewLinkLabel', '{{value0}} link', {
+        value0: getReviewLabel(secondary.hoverReview)
+      })
+    )
+  }, [copyLinkedWorkItemLink, secondary.hoverReview])
+
+  const dismissAndRun = useCallback(
+    (handler: ((event: React.MouseEvent) => void) | undefined) => (event: React.MouseEvent) => {
+      detailsHoverControl.closeHover()
+      handler?.(event)
+    },
+    [detailsHoverControl]
+  )
+
+  return (
+    <HoverCardContent
+      side="right"
+      align="start"
+      sideOffset={8}
+      className="w-80 max-h-[30rem] overflow-y-auto p-3 text-xs scrollbar-sleek"
+      {...{ [WORKTREE_NATIVE_CONTEXT_MENU_ATTR]: '' }}
+      onClick={(event) => event.stopPropagation()}
+      onDoubleClick={(event) => event.stopPropagation()}
+    >
+      <SelectedTextCopyMenu className="space-y-3">
+        <ActivityThreadHoverCardSummary
+          thread={thread}
+          settings={foundation.settings}
+          onJumpToWorkspace={
+            onJumpToWorkspace ? dismissAndRun(() => onJumpToWorkspace(thread)) : undefined
+          }
+          canJumpToWorkspace={canJumpToWorkspace}
+        />
+
+        {/* GitHub / GitLab Issue */}
+        <WorktreeCardIssueDetailSection
+          issue={secondary.hoverIssue}
+          issueMenuOpen={detailsHoverControl.issueMenuOpen}
+          onIssueMenuOpenChange={detailsHoverControl.handleIssueMenuOpenChange}
+          onCopyIssueLink={secondary.hoverIssue?.url ? handleCopyIssueLink : undefined}
+          onEditIssue={foundation.handleEditIssue}
+          onOpenGitHubIssueInOrca={
+            secondary.handleOpenGitHubIssueInOrca
+              ? dismissAndRun(secondary.handleOpenGitHubIssueInOrca)
+              : undefined
+          }
+          onOpenIssueInBrowser={
+            secondary.hoverIssue?.url
+              ? (url: string) => {
+                  detailsHoverControl.closeHover()
+                  secondary.handleOpenIssueInBrowser(url)
+                }
+              : undefined
+          }
+        />
+
+        {/* Linear Issue */}
+        {secondary.hoverLinearIssue && (
+          <WorktreeCardDetailSection>
+            <DetailHeader
+              icon={<LinearIcon className="size-3 text-muted-foreground" />}
+              label={translate(
+                'auto.components.sidebar.WorktreeCardMeta.5e982e6128',
+                'Linear {{value0}}',
+                { value0: secondary.hoverLinearIssue.identifier }
+              )}
+              actions={
+                <>
+                  {secondary.hoverLinearIssue.url && secondary.handleOpenLinearIssueInOrca && (
+                    <MetadataActionIcon
+                      label={translate(
+                        'auto.components.sidebar.WorktreeCardMeta.2c67730e07',
+                        'Open in Orca'
+                      )}
+                      onClick={dismissAndRun(secondary.handleOpenLinearIssueInOrca)}
+                    >
+                      <MonitorUp className="size-3" />
+                    </MetadataActionIcon>
+                  )}
+                  {secondary.hoverLinearIssue.url && (
+                    <MetadataActionIcon
+                      label={translate(
+                        'auto.components.sidebar.WorktreeCardMeta.e42941631a',
+                        'View on Linear'
+                      )}
+                      href={secondary.hoverLinearIssue.url}
+                    >
+                      <ExternalLink className="size-3" />
+                    </MetadataActionIcon>
+                  )}
+                </>
+              }
+            />
+            <WorktreeCardDetailSectionContent className="space-y-1.5">
+              <div className="text-[13px] font-semibold leading-snug text-foreground break-words">
+                {secondary.hoverLinearIssue.title}
+              </div>
+              {((secondary.hoverLinearIssue.labels &&
+                secondary.hoverLinearIssue.labels.length > 0) ||
+                secondary.hoverLinearIssue.stateName) && (
+                <div className="flex flex-wrap gap-1">
+                  {secondary.hoverLinearIssue.stateName && (
+                    <LinearStateBadge stateName={secondary.hoverLinearIssue.stateName} />
+                  )}
+                  {(secondary.hoverLinearIssue.labels ?? []).map((label) => (
+                    <Badge key={label} variant="outline" className="h-4 px-1.5 text-[9px]">
+                      {label}
+                    </Badge>
+                  ))}
+                </div>
+              )}
+            </WorktreeCardDetailSectionContent>
+          </WorktreeCardDetailSection>
+        )}
+
+        {/* Jira Issue */}
+        {secondary.hoverJiraIssue && (
+          <WorktreeCardDetailSection>
+            <DetailHeader
+              icon={<JiraIcon className="size-3 text-muted-foreground" />}
+              label={translate(
+                'auto.components.sidebar.WorktreeCardMeta.jiraIssue',
+                'Jira {{value0}}',
+                { value0: secondary.hoverJiraIssue.identifier }
+              )}
+              actions={
+                <MetadataActionIcon
+                  label={translate(
+                    'auto.components.sidebar.WorktreeCardMeta.viewOnJira',
+                    'View on Jira'
+                  )}
+                  href={secondary.hoverJiraIssue.url}
+                >
+                  <ExternalLink className="size-3" />
+                </MetadataActionIcon>
+              }
+            />
+            <WorktreeCardDetailSectionContent>
+              <div className="text-[13px] font-semibold leading-snug text-foreground break-words">
+                {secondary.hoverJiraIssue.title}
+              </div>
+            </WorktreeCardDetailSectionContent>
+          </WorktreeCardDetailSection>
+        )}
+
+        {/* Pull Request / Review */}
+        <WorktreeCardReviewDetailSection
+          review={secondary.hoverReview}
+          reviewMenuOpen={detailsHoverControl.reviewMenuOpen}
+          onReviewMenuOpenChange={detailsHoverControl.handleReviewMenuOpenChange}
+          onOpenReviewInOrca={secondary.handleOpenReviewInOrca}
+          onOpenReviewInBrowser={
+            secondary.hoverReview?.url ? secondary.handleOpenReviewInBrowser : undefined
+          }
+          onCopyReviewLink={secondary.hoverReview?.url ? handleCopyReviewLink : undefined}
+          onUnlinkReview={secondary.canUnlinkReview ? secondary.handleUnlinkReview : undefined}
+          closeHover={detailsHoverControl.closeHover}
+        />
+
+        {/* Automation Provenance */}
+        {secondary.metaAutomationProvenance && (
+          <WorktreeCardAutomationDetailSection
+            provenance={secondary.metaAutomationProvenance}
+            onOpenAutomation={
+              foundation.handleOpenAutomation
+                ? dismissAndRun(foundation.handleOpenAutomation)
+                : undefined
+            }
+            onOpenAutomationRun={
+              foundation.handleOpenAutomationRun
+                ? dismissAndRun(foundation.handleOpenAutomationRun)
+                : undefined
+            }
+          />
+        )}
+
+        {/* CLI Provenance */}
+        {secondary.metaCliProvenance && (
+          <WorktreeCardCliDetailSection provenance={secondary.metaCliProvenance} />
+        )}
+
+        {/* Notes / Comment */}
+        {(secondary.hoverComment ?? '').trim().length > 0 && (
+          <WorktreeCardDetailSection>
+            <DetailHeader
+              icon={<StickyNote className="size-3 text-muted-foreground" />}
+              label={translate('auto.components.sidebar.WorktreeCardMeta.93cbea12c2', 'Notes')}
+              actions={
+                <MetadataActionIcon
+                  label={translate(
+                    'auto.components.sidebar.WorktreeCardMeta.c7fa72ead0',
+                    'Edit notes'
+                  )}
+                  onClick={foundation.handleEditComment}
+                >
+                  <Pencil className="size-3" />
+                </MetadataActionIcon>
+              }
+            />
+            <WorktreeCardDetailSectionContent className="space-y-2">
+              <CommentMarkdown
+                content={secondary.hoverComment ?? ''}
+                className="text-[11.5px] text-foreground break-words leading-normal [&_.comment-md-p]:block [&_.comment-md-p+.comment-md-p]:mt-1"
+              />
+            </WorktreeCardDetailSectionContent>
+          </WorktreeCardDetailSection>
+        )}
+
+        {/* Ports */}
+        {foundation.workspacePorts.length > 0 && (
+          <WorktreeCardPortsDetails ports={foundation.workspacePorts} />
+        )}
+      </SelectedTextCopyMenu>
+    </HoverCardContent>
+  )
+}
diff --git a/src/renderer/src/components/activity/activity-thread-list-pane-collapsible.test.tsx b/src/renderer/src/components/activity/activity-thread-list-pane-collapsible.test.tsx
new file mode 100644
index 00000000000..6db25785dc6
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-list-pane-collapsible.test.tsx
@@ -0,0 +1,292 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { TooltipProvider } from '@/components/ui/tooltip'
+import { ActivityStatusGroupHeader } from './activity-thread-controls'
+import { ActivityThreadListPane } from './activity-thread-list-pane'
+import type { ActivityThreadGroup, AgentPaneThread } from './activity-thread-types'
+import { makeTab, makeWorktree } from './ActivityPrototypePage-test-fixtures'
+
+globalThis.IS_REACT_ACT_ENVIRONMENT = true
+
+const mockThread: AgentPaneThread = {
+  paneKey: 'tab-1:agent-1',
+  tab: makeTab(),
+  worktree: makeWorktree(),
+  repo: null,
+  currentAgentState: null,
+  currentAgentEntry: null,
+  latestEvent: null,
+  latestTimestamp: 1000,
+  agentType: 'claude',
+  unread: false,
+  paneTitle: 'Test agent',
+  responsePreview: 'Done testing',
+  events: []
+}
+
+const mockGroup: ActivityThreadGroup = {
+  key: 'done',
+  label: 'Done',
+  state: 'done',
+  threads: [mockThread]
+}
+
+describe('ActivityStatusGroupHeader', () => {
+  let container: HTMLDivElement
+  let root: Root
+
+  beforeEach(() => {
+    container = document.createElement('div')
+    document.body.appendChild(container)
+    root = createRoot(container)
+  })
+
+  afterEach(() => {
+    act(() => root.unmount())
+    container.remove()
+    document.body.replaceChildren()
+  })
+
+  it('renders group label, count, and expanded state', () => {
+    const onToggle = vi.fn()
+    act(() => {
+      root.render(
+        <TooltipProvider>
+          <ActivityStatusGroupHeader group={mockGroup} collapsed={false} onToggle={onToggle} />
+        </TooltipProvider>
+      )
+    })
+
+    const header = container.querySelector('[role="button"]')
+    expect(header).not.toBeNull()
+    expect(header?.getAttribute('aria-expanded')).toBe('true')
+    expect(header?.textContent).toContain('Done')
+    expect(header?.textContent).toContain('1')
+  })
+
+  it('triggers onToggle on click and on keydown (Enter / Space)', () => {
+    const onToggle = vi.fn()
+    act(() => {
+      root.render(
+        <TooltipProvider>
+          <ActivityStatusGroupHeader group={mockGroup} collapsed={false} onToggle={onToggle} />
+        </TooltipProvider>
+      )
+    })
+
+    const header = container.querySelector('[role="button"]') as HTMLElement
+    act(() => {
+      header.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+    })
+    expect(onToggle).toHaveBeenCalledTimes(1)
+
+    act(() => {
+      header.dispatchEvent(new KeyboardEvent('keydown', { key: 'Enter', bubbles: true }))
+    })
+    expect(onToggle).toHaveBeenCalledTimes(2)
+
+    act(() => {
+      header.dispatchEvent(new KeyboardEvent('keydown', { key: ' ', bubbles: true }))
+    })
+    expect(onToggle).toHaveBeenCalledTimes(3)
+  })
+
+  it('renders collapsed state with aria-expanded false', () => {
+    const onToggle = vi.fn()
+    act(() => {
+      root.render(
+        <TooltipProvider>
+          <ActivityStatusGroupHeader group={mockGroup} collapsed={true} onToggle={onToggle} />
+        </TooltipProvider>
+      )
+    })
+
+    const header = container.querySelector('[role="button"]')
+    expect(header?.getAttribute('aria-expanded')).toBe('false')
+  })
+
+  it('supports custom className and uses accessible contrast tokens without hardcoded white background', () => {
+    act(() => {
+      root.render(
+        <TooltipProvider>
+          <ActivityStatusGroupHeader
+            group={mockGroup}
+            collapsed={false}
+            className="custom-header-class"
+          />
+        </TooltipProvider>
+      )
+    })
+
+    const header = container.querySelector('div')
+    expect(header?.className).toContain('custom-header-class')
+    expect(header?.className).not.toContain('bg-background/95')
+  })
+})
+
+describe('ActivityThreadListPane collapsible sections', () => {
+  let container: HTMLDivElement
+  let root: Root
+
+  beforeEach(() => {
+    container = document.createElement('div')
+    document.body.appendChild(container)
+    root = createRoot(container)
+  })
+
+  afterEach(() => {
+    act(() => root.unmount())
+    container.remove()
+    document.body.replaceChildren()
+  })
+
+  it('toggles thread visibility when header is clicked in uncontrolled mode', () => {
+    const inputRef = { current: null }
+    act(() => {
+      root.render(
+        <TooltipProvider>
+          <ActivityThreadListPane
+            activityFilterInputRef={inputRef}
+            query=""
+            onQueryChange={vi.fn()}
+            groupBy="status"
+            onGroupByChange={vi.fn()}
+            readFilter="all"
+            onReadFilterChange={vi.fn()}
+            compactMode={false}
+            hasUnreadThreads={false}
+            onCompactModeChange={vi.fn()}
+            onMarkAllThreadsRead={vi.fn()}
+            visibleThreadGroups={[mockGroup]}
+            visibleThreadCount={1}
+            selectedPaneKey={null}
+            onSelectThread={vi.fn()}
+            onJumpToWorkspace={vi.fn()}
+            onMarkThreadRead={vi.fn()}
+            onMarkThreadUnread={vi.fn()}
+            canJumpToWorkspace={() => true}
+            showFilterControls={false}
+            showOptionsMenu={false}
+          />
+        </TooltipProvider>
+      )
+    })
+
+    // Initially open: thread row should be visible
+    expect(container.textContent).toContain('Test agent')
+
+    // Click header to collapse
+    const header = container.querySelector('[role="button"]') as HTMLElement
+    act(() => {
+      header.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+    })
+
+    // Thread row should now be hidden
+    expect(container.textContent).not.toContain('Test agent')
+    expect(header.getAttribute('aria-expanded')).toBe('false')
+
+    // Click header again to re-expand
+    act(() => {
+      header.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+    })
+
+    expect(container.textContent).toContain('Test agent')
+    expect(header.getAttribute('aria-expanded')).toBe('true')
+  })
+
+  it('respects controlled collapsedGroupKeys and invokes onToggleGroupCollapse', () => {
+    const inputRef = { current: null }
+    const onToggleGroup = vi.fn()
+    act(() => {
+      root.render(
+        <TooltipProvider>
+          <ActivityThreadListPane
+            activityFilterInputRef={inputRef}
+            query=""
+            onQueryChange={vi.fn()}
+            groupBy="status"
+            onGroupByChange={vi.fn()}
+            readFilter="all"
+            onReadFilterChange={vi.fn()}
+            compactMode={false}
+            hasUnreadThreads={false}
+            onCompactModeChange={vi.fn()}
+            onMarkAllThreadsRead={vi.fn()}
+            visibleThreadGroups={[mockGroup]}
+            visibleThreadCount={1}
+            selectedPaneKey={null}
+            onSelectThread={vi.fn()}
+            onJumpToWorkspace={vi.fn()}
+            onMarkThreadRead={vi.fn()}
+            onMarkThreadUnread={vi.fn()}
+            canJumpToWorkspace={() => true}
+            showFilterControls={false}
+            showOptionsMenu={false}
+            collapsedGroupKeys={new Set(['done'])}
+            onToggleGroupCollapse={onToggleGroup}
+          />
+        </TooltipProvider>
+      )
+    })
+
+    // Controlled as collapsed: thread row should not be rendered
+    expect(container.textContent).not.toContain('Test agent')
+
+    // Click header
+    const header = container.querySelector('[role="button"]') as HTMLElement
+    act(() => {
+      header.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+    })
+
+    expect(onToggleGroup).toHaveBeenCalledWith('done')
+  })
+
+  it('keeps mark-unread enabled for the thread whose terminal pane is selected', () => {
+    const inputRef = { current: null }
+    const onMarkThreadUnread = vi.fn()
+    act(() => {
+      root.render(
+        <TooltipProvider>
+          <ActivityThreadListPane
+            activityFilterInputRef={inputRef}
+            query=""
+            onQueryChange={vi.fn()}
+            groupBy="status"
+            onGroupByChange={vi.fn()}
+            readFilter="all"
+            onReadFilterChange={vi.fn()}
+            compactMode={false}
+            hasUnreadThreads={false}
+            onCompactModeChange={vi.fn()}
+            onMarkAllThreadsRead={vi.fn()}
+            visibleThreadGroups={[mockGroup]}
+            visibleThreadCount={1}
+            selectedPaneKey={mockThread.paneKey}
+            onSelectThread={vi.fn()}
+            onJumpToWorkspace={vi.fn()}
+            onMarkThreadRead={vi.fn()}
+            onMarkThreadUnread={onMarkThreadUnread}
+            canJumpToWorkspace={() => true}
+            allowMarkUnreadWhenSelected
+            showFilterControls={false}
+            showOptionsMenu={false}
+          />
+        </TooltipProvider>
+      )
+    })
+
+    const markUnreadButton = container.querySelector(
+      'button[aria-label="Mark thread unread"]'
+    ) as HTMLButtonElement | null
+    expect(markUnreadButton).not.toBeNull()
+    expect(markUnreadButton?.disabled).toBe(false)
+
+    act(() => {
+      markUnreadButton?.click()
+    })
+    expect(onMarkThreadUnread).toHaveBeenCalledWith(mockThread)
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-thread-list-pane.tsx b/src/renderer/src/components/activity/activity-thread-list-pane.tsx
index 4411d385e0b..9c2beee6e0c 100644
--- a/src/renderer/src/components/activity/activity-thread-list-pane.tsx
+++ b/src/renderer/src/components/activity/activity-thread-list-pane.tsx
@@ -1,19 +1,29 @@
-import React from 'react'
-import { BellDot, Search } from 'lucide-react'
-import { Input } from '@/components/ui/input'
+import React, { useCallback, useContext, useEffect, useMemo, useRef, useState } from 'react'
 import {
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue
-} from '@/components/ui/select'
-import { Toggle } from '@/components/ui/toggle'
-import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
+  defaultRangeExtractor,
+  measureElement as measureVirtualElementSize,
+  observeElementRect,
+  useVirtualizer,
+  type Range
+} from '@tanstack/react-virtual'
 import { cn } from '@/lib/utils'
 import { translate } from '@/i18n/i18n'
-import { ActivityStatusGroupHeader, ActivityThreadOptionsMenu } from './activity-thread-controls'
-import { ActivityThreadRow } from './activity-thread-row'
+import { ActivityThreadListToolbar } from './activity-thread-list-toolbar'
+import {
+  getActiveStickyHeaderIndex,
+  getActiveStickyHeaderIndexForScroll,
+  getPreviousStickyHeaderIndex
+} from '../sidebar/worktree-list/viewport/virtual-rows'
+import { ActivityThreadVirtualRow } from './activity-thread-virtual-row'
+import { ActivityThreadListResizeHandle } from './activity-thread-list-resize-handle'
+import {
+  buildActivityVirtualItems,
+  estimateActivityVirtualItemSize,
+  findActivityThreadItemIndex,
+  getActivityHeaderItemIndexes,
+  getActivityVirtualItemKey
+} from './activity-thread-virtual-items'
+import { ActivityThreadCollapseContext } from './activity-thread-collapse-context'
 import type {
   ActivityGroupBy,
   ActivityThreadGroup,
@@ -21,6 +31,16 @@ import type {
   ThreadReadFilter
 } from './activity-thread-types'
 
+const ZERO_RECT_FALLBACK_VIEWPORT = { width: 320, height: 600 }
+const observeActivityListRect: typeof observeElementRect = (instance, cb) =>
+  observeElementRect(instance, (rect) => {
+    cb(rect.height > 0 ? rect : ZERO_RECT_FALLBACK_VIEWPORT)
+  })
+
+// A saved offset the content cannot contain yet is restored once it can; past
+// this window it is stale (the list shrank) and restoring would yank the viewport.
+const DEFERRED_SCROLL_RESTORE_WINDOW_MS = 3000
+
 export function ActivityThreadListPane({
   threadListRef,
   threadListWidth,
@@ -32,21 +52,34 @@ export function ActivityThreadListPane({
   readFilter,
   onReadFilterChange,
   compactMode,
+  showChildAgents,
   hasUnreadThreads,
   onCompactModeChange,
+  onShowChildAgentsChange,
   onMarkAllThreadsRead,
+  hasCompletedThreads,
+  onClearCompleted,
   visibleThreadGroups,
   visibleThreadCount,
   selectedPaneKey,
   onSelectThread,
   onJumpToWorkspace,
+  onMarkThreadRead,
   onMarkThreadUnread,
   canJumpToWorkspace,
+  allowMarkUnreadWhenSelected = false,
+  showJumpAction = true,
   isThreadListResizing,
-  onResizeStart
+  onResizeStart,
+  showFilterControls = true,
+  showOptionsMenu = true,
+  scopeFilterRow,
+  collapsedGroupKeys,
+  onToggleGroupCollapse,
+  scrollTopRef
 }: {
-  threadListRef: React.RefObject<HTMLDivElement | null>
-  threadListWidth: number
+  threadListRef?: React.RefObject<HTMLDivElement | null>
+  threadListWidth?: number
   activityFilterInputRef: React.RefObject<HTMLInputElement | null>
   query: string
   onQueryChange: (query: string) => void
@@ -55,163 +88,308 @@ export function ActivityThreadListPane({
   readFilter: ThreadReadFilter
   onReadFilterChange: (readFilter: ThreadReadFilter) => void
   compactMode: boolean
+  showChildAgents?: boolean
   hasUnreadThreads: boolean
   onCompactModeChange: (compactMode: boolean) => void
-  onMarkAllThreadsRead: () => void
+  onShowChildAgentsChange?: (showChildAgents: boolean) => void
+  onMarkAllThreadsRead?: () => void
+  hasCompletedThreads?: boolean
+  onClearCompleted?: () => void
   visibleThreadGroups: ActivityThreadGroup[]
   visibleThreadCount: number
   selectedPaneKey: string | null
   onSelectThread: (thread: AgentPaneThread) => void
   onJumpToWorkspace: (thread: AgentPaneThread) => void
+  onMarkThreadRead: (thread: AgentPaneThread) => void
   onMarkThreadUnread: (thread: AgentPaneThread) => void
   canJumpToWorkspace: (thread: AgentPaneThread) => boolean
-  isThreadListResizing: boolean
-  onResizeStart: React.MouseEventHandler<HTMLDivElement>
+  allowMarkUnreadWhenSelected?: boolean
+  showJumpAction?: boolean
+  isThreadListResizing?: boolean
+  onResizeStart?: React.MouseEventHandler<HTMLDivElement>
+  showFilterControls?: boolean
+  showOptionsMenu?: boolean
+  /** Rendered between the toolbar and the list; carries the active-scope chips row. */
+  scopeFilterRow?: React.ReactNode
+  collapsedGroupKeys?: ReadonlySet<string>
+  onToggleGroupCollapse?: (groupKey: string) => void
+  /** Optional view-local scroll memory; updated without triggering React renders. */
+  scrollTopRef?: React.MutableRefObject<number>
 }): React.JSX.Element {
+  const [internalCollapsedGroupKeys, setInternalCollapsedGroupKeys] = useState<Set<string>>(
+    () => new Set()
+  )
+  // Precedence: explicit props, then a caller-owned context (hosts that unmount
+  // the pane on body switches), then pane-local state.
+  const contextCollapse = useContext(ActivityThreadCollapseContext)
+  const isControlled = collapsedGroupKeys !== undefined && onToggleGroupCollapse !== undefined
+  const effectiveCollapsedGroupKeys = isControlled
+    ? collapsedGroupKeys
+    : (contextCollapse?.collapsedGroupKeys ?? internalCollapsedGroupKeys)
+  const handleToggleGroup = isControlled
+    ? onToggleGroupCollapse
+    : (contextCollapse?.onToggleGroupCollapse ??
+      ((groupKey: string) => {
+        setInternalCollapsedGroupKeys((prev) => {
+          const next = new Set(prev)
+          if (next.has(groupKey)) {
+            next.delete(groupKey)
+          } else {
+            next.add(groupKey)
+          }
+          return next
+        })
+      }))
+
+  const scrollContainerRef = useRef<HTMLDivElement | null>(null)
+  const hasRestoredScrollRef = useRef(false)
+  const handleScroll = useCallback(
+    (event: React.UIEvent<HTMLDivElement>) => {
+      if (!scrollTopRef) {
+        return
+      }
+      const scrollTop = event.currentTarget.scrollTop
+      // A clamp-to-0 fired before the deferred restore must not wipe the saved offset.
+      if (!hasRestoredScrollRef.current) {
+        if (scrollTop === 0) {
+          return
+        }
+        hasRestoredScrollRef.current = true
+      }
+      scrollTopRef.current = scrollTop
+    },
+    [scrollTopRef]
+  )
+  const virtualItems = useMemo(
+    () =>
+      buildActivityVirtualItems({
+        groups: visibleThreadGroups,
+        groupBy,
+        collapsedGroupKeys: effectiveCollapsedGroupKeys
+      }),
+    [visibleThreadGroups, groupBy, effectiveCollapsedGroupKeys]
+  )
+  const headerItemIndexes = useMemo(
+    () => getActivityHeaderItemIndexes(virtualItems),
+    [virtualItems]
+  )
+  const selectedItemIndex = useMemo(
+    () => findActivityThreadItemIndex(virtualItems, selectedPaneKey),
+    [virtualItems, selectedPaneKey]
+  )
+
+  // Why keyed on virtualItems: getItemKey identity is a measurement-memo input in tanstack
+  // virtual. A per-render closure recomputes every row on unrelated re-renders; a fully stable
+  // one would miss same-count reorders. Changing exactly with the items is the correct middle.
+  const getItemKey = useCallback(
+    (index: number) => {
+      const item = virtualItems[index]
+      return item ? getActivityVirtualItemKey(item) : `__stale_${index}`
+    },
+    [virtualItems]
+  )
+  const virtualizer = useVirtualizer({
+    count: virtualItems.length,
+    getScrollElement: () => scrollContainerRef.current,
+    estimateSize: (index) => estimateActivityVirtualItemSize(virtualItems[index], compactMode),
+    getItemKey,
+    measureElement: (element, entry, instance) => {
+      const measured = measureVirtualElementSize(element, entry, instance)
+      if (measured > 0) {
+        return measured
+      }
+      const index = Number.parseInt(element.getAttribute('data-index') ?? '', 10)
+      return estimateActivityVirtualItemSize(
+        Number.isNaN(index) ? undefined : virtualItems[index],
+        compactMode
+      )
+    },
+    rangeExtractor: useCallback(
+      (range: Range) => {
+        const activeStickyIndex =
+          groupBy !== 'none'
+            ? getActiveStickyHeaderIndex(headerItemIndexes, range.startIndex)
+            : null
+        const previousStickyIndex =
+          activeStickyIndex !== null
+            ? getPreviousStickyHeaderIndex(headerItemIndexes, activeStickyIndex)
+            : null
+        const indexSet = new Set(defaultRangeExtractor(range))
+        if (activeStickyIndex !== null) {
+          indexSet.add(activeStickyIndex)
+        }
+        if (previousStickyIndex !== null) {
+          indexSet.add(previousStickyIndex)
+        }
+        if (selectedItemIndex !== null && selectedItemIndex >= 0) {
+          indexSet.add(selectedItemIndex)
+        }
+        return Array.from(indexSet).sort((a, b) => a - b)
+      },
+      [groupBy, headerItemIndexes, selectedItemIndex]
+    ),
+    overscan: 8,
+    observeElementRect: observeActivityListRect,
+    useFlushSync: false
+  })
+
+  // Row heights differ between densities; drop stale measurements on toggle (not on mount).
+  const measuredCompactModeRef = useRef(compactMode)
+  useEffect(() => {
+    if (measuredCompactModeRef.current === compactMode) {
+      return
+    }
+    measuredCompactModeRef.current = compactMode
+    virtualizer.measure()
+  }, [virtualizer, compactMode])
+
+  // Restore only once the (estimated) content can contain the saved offset, so a
+  // pre-hydration mount doesn't clamp the restore to 0.
+  const totalSize = virtualizer.getTotalSize()
+  const restoreArmedAtRef = useRef<number | null>(null)
+  useEffect(() => {
+    if (!scrollTopRef || hasRestoredScrollRef.current) {
+      return
+    }
+    if (restoreArmedAtRef.current === null) {
+      restoreArmedAtRef.current = Date.now()
+    } else if (Date.now() - restoreArmedAtRef.current > DEFERRED_SCROLL_RESTORE_WINDOW_MS) {
+      // The list stayed too small for the saved offset (it shrank); firing the
+      // restore on some later growth would yank the viewport out from the user.
+      hasRestoredScrollRef.current = true
+      scrollTopRef.current = 0
+      return
+    }
+    const scrollContainer = scrollContainerRef.current
+    if (!scrollContainer) {
+      return
+    }
+    // Against the max offset, not the content height: a viewport taller than the
+    // remaining content clamps the assignment to 0 and burns the one restore.
+    const maxScrollTop = Math.max(0, totalSize - scrollContainer.clientHeight)
+    if (scrollTopRef.current > maxScrollTop) {
+      return
+    }
+    scrollContainer.scrollTop = scrollTopRef.current
+    hasRestoredScrollRef.current = true
+  }, [scrollTopRef, totalSize])
+
+  const scrollOffset = virtualizer.scrollOffset ?? 0
+  const activeStickyHeaderIndex =
+    groupBy !== 'none'
+      ? getActiveStickyHeaderIndexForScroll({
+          rangeStartIndex: virtualizer.range?.startIndex ?? 0,
+          scrollOffset,
+          stickyHeaderIndexes: headerItemIndexes,
+          virtualItems: virtualizer.getVirtualItems()
+        })
+      : null
+
+  const resizable = onResizeStart !== undefined
   return (
     <aside
       ref={threadListRef}
-      className="relative flex min-h-0 shrink-0 flex-col border-r border-border"
-      style={{ width: threadListWidth }}
+      className={cn(
+        'relative flex min-h-0 flex-col',
+        resizable ? 'shrink-0 border-r border-border' : 'min-w-0 flex-1'
+      )}
+      style={resizable ? { width: threadListWidth } : undefined}
     >
-      <div className="shrink-0 border-b border-border px-2 pt-2 pb-2">
-        <div className="flex items-center gap-2">
-          <div className="relative min-w-0 flex-1">
-            <Search className="pointer-events-none absolute left-2 top-1/2 size-3.5 -translate-y-1/2 text-muted-foreground" />
-            <Input
-              ref={activityFilterInputRef}
-              value={query}
-              onChange={(event) => onQueryChange(event.target.value)}
-              placeholder={translate(
-                'auto.components.activity.ActivityPrototypePage.795cbf26e2',
-                'Filter...'
-              )}
-              className="h-8 w-full pl-7 text-xs"
-            />
-          </div>
-          <Select
-            value={groupBy}
-            onValueChange={(value) => onGroupByChange(value as ActivityGroupBy)}
+      <ActivityThreadListToolbar
+        activityFilterInputRef={activityFilterInputRef}
+        query={query}
+        onQueryChange={onQueryChange}
+        groupBy={groupBy}
+        onGroupByChange={onGroupByChange}
+        readFilter={readFilter}
+        onReadFilterChange={onReadFilterChange}
+        compactMode={compactMode}
+        showChildAgents={showChildAgents}
+        hasUnreadThreads={hasUnreadThreads}
+        onCompactModeChange={onCompactModeChange}
+        onShowChildAgentsChange={onShowChildAgentsChange}
+        onMarkAllThreadsRead={onMarkAllThreadsRead}
+        hasCompletedThreads={hasCompletedThreads}
+        onClearCompleted={onClearCompleted}
+        resizable={resizable}
+        showFilterControls={showFilterControls}
+        showOptionsMenu={showOptionsMenu}
+      />
+      {scopeFilterRow}
+      <div className="relative min-h-0 flex-1">
+        <div
+          ref={scrollContainerRef}
+          onScroll={scrollTopRef ? handleScroll : undefined}
+          className="h-full overflow-y-auto overflow-x-hidden px-1.5 pb-1.5 pt-px scrollbar-sleek"
+        >
+          <div
+            className="relative w-full"
+            style={{ height: virtualizer.getTotalSize() }}
+            data-activity-virtual-list=""
           >
-            <SelectTrigger
-              size="sm"
-              className="h-8 w-[128px] shrink-0 px-2 text-xs"
-              aria-label={translate(
-                'auto.components.activity.ActivityPrototypePage.770d458144',
-                'Group agent activity by'
-              )}
-            >
-              <SelectValue />
-            </SelectTrigger>
-            <SelectContent align="end">
-              <SelectItem value="status">
-                {translate('auto.components.activity.ActivityPrototypePage.4a3986b200', 'Status')}
-              </SelectItem>
-              <SelectItem value="project">
-                {translate('auto.components.activity.ActivityPrototypePage.8c3b621ddf', 'Project')}
-              </SelectItem>
-              <SelectItem value="worktree">
-                {translate('auto.components.activity.ActivityPrototypePage.b29191b3e0', 'Worktree')}
-              </SelectItem>
-              <SelectItem value="agent">
-                {translate('auto.components.activity.ActivityPrototypePage.f6396e1f85', 'Agent')}
-              </SelectItem>
-            </SelectContent>
-          </Select>
-          <Tooltip>
-            <TooltipTrigger asChild>
-              <Toggle
-                pressed={readFilter === 'unread'}
-                onPressedChange={(pressed) => onReadFilterChange(pressed ? 'unread' : 'all')}
-                variant="outline"
-                size="sm"
-                className={cn(
-                  'size-8 shrink-0 p-0',
-                  readFilter === 'unread'
-                    ? '!border-primary !bg-primary !text-primary-foreground shadow-xs ring-2 ring-primary/35 hover:!bg-primary/90 hover:!text-primary-foreground'
-                    : 'text-muted-foreground hover:text-foreground'
-                )}
-                aria-label={translate(
-                  'auto.components.activity.ActivityPrototypePage.d1a88df9a8',
-                  'Show unread threads only'
-                )}
-              >
-                <BellDot className="size-3.5" />
-              </Toggle>
-            </TooltipTrigger>
-            <TooltipContent side="bottom">
+            {virtualizer.getVirtualItems().map((virtualRow) => {
+              const item = virtualItems[virtualRow.index]
+              if (!item) {
+                return null
+              }
+              const isActiveSticky =
+                item.type === 'header' && virtualRow.index === activeStickyHeaderIndex
+              return (
+                <div
+                  key={virtualRow.key}
+                  ref={virtualizer.measureElement}
+                  data-index={virtualRow.index}
+                  data-activity-sticky-header={item.type === 'header' ? '' : undefined}
+                  data-activity-sticky-header-active={isActiveSticky ? '' : undefined}
+                  className={cn(
+                    'left-0 right-0 w-full',
+                    isActiveSticky
+                      ? cn(
+                          'sticky -top-px z-20',
+                          resizable ? 'bg-background' : 'bg-worktree-sidebar'
+                        )
+                      : 'absolute top-0'
+                  )}
+                  style={
+                    isActiveSticky ? undefined : { transform: `translateY(${virtualRow.start}px)` }
+                  }
+                >
+                  <ActivityThreadVirtualRow
+                    item={item}
+                    collapsed={
+                      item.type === 'header' && effectiveCollapsedGroupKeys.has(item.group.key)
+                    }
+                    onToggleGroup={handleToggleGroup}
+                    selectedPaneKey={selectedPaneKey}
+                    onSelectThread={onSelectThread}
+                    onJumpToWorkspace={onJumpToWorkspace}
+                    onMarkThreadRead={onMarkThreadRead}
+                    onMarkThreadUnread={onMarkThreadUnread}
+                    canJumpToWorkspace={canJumpToWorkspace}
+                    compactMode={compactMode}
+                    allowMarkUnreadWhenSelected={allowMarkUnreadWhenSelected}
+                    showJumpAction={showJumpAction}
+                  />
+                </div>
+              )
+            })}
+          </div>
+          {visibleThreadCount === 0 ? (
+            <div className="px-3 py-8 text-center text-xs text-muted-foreground">
               {translate(
-                'auto.components.activity.ActivityPrototypePage.d1a88df9a8',
-                'Show unread threads only'
+                'auto.components.activity.ActivityPrototypePage.7cd632006b',
+                'No agent activity matches these filters.'
               )}
-            </TooltipContent>
-          </Tooltip>
-          {/* Why (overflow menu): "Mark all read" is low-frequency and destructive-feeling; behind `…` keeps the toolbar on the frequent Filter + unread toggle. */}
-          <ActivityThreadOptionsMenu
-            compactMode={compactMode}
-            hasUnreadThreads={hasUnreadThreads}
-            onCompactModeChange={onCompactModeChange}
-            onMarkAllThreadsRead={onMarkAllThreadsRead}
-          />
+            </div>
+          ) : null}
         </div>
       </div>
-      <div className="min-h-0 flex-1 overflow-auto scrollbar-sleek">
-        {visibleThreadGroups.map((group) => (
-          <section
-            key={group.key}
-            aria-label={translate(
-              'auto.components.activity.ActivityPrototypePage.a2b4437bfb',
-              '{{value0}} activity',
-              { value0: group.label }
-            )}
-          >
-            <ActivityStatusGroupHeader group={group} />
-            {group.threads.map((thread) => (
-              <ActivityThreadRow
-                key={thread.paneKey}
-                thread={thread}
-                selected={thread.paneKey === selectedPaneKey}
-                onSelect={() => onSelectThread(thread)}
-                onJump={() => onJumpToWorkspace(thread)}
-                onMarkUnread={() => onMarkThreadUnread(thread)}
-                canJump={canJumpToWorkspace(thread)}
-                compactMode={compactMode}
-              />
-            ))}
-          </section>
-        ))}
-        {visibleThreadCount === 0 ? (
-          <div className="px-3 py-8 text-sm text-muted-foreground">
-            {translate(
-              'auto.components.activity.ActivityPrototypePage.7cd632006b',
-              'No agent activity matches these filters.'
-            )}
-          </div>
-        ) : null}
-      </div>
-      <div
-        aria-label={translate(
-          'auto.components.activity.ActivityPrototypePage.443690186e',
-          'Resize activity thread list'
-        )}
-        title={translate(
-          'auto.components.activity.ActivityPrototypePage.866083500b',
-          'Drag to resize'
-        )}
-        className={cn(
-          'group absolute -right-1.5 top-0 z-20 flex h-full w-3 cursor-col-resize items-stretch justify-center',
-          isThreadListResizing && 'bg-ring/10'
-        )}
-        onMouseDown={onResizeStart}
-        role="separator"
-      >
-        <div
-          className={cn(
-            'h-full w-px bg-border transition-colors group-hover:bg-ring/50',
-            isThreadListResizing && 'bg-ring'
-          )}
+      {resizable ? (
+        <ActivityThreadListResizeHandle
+          isResizing={isThreadListResizing}
+          onResizeStart={onResizeStart}
         />
-      </div>
+      ) : null}
     </aside>
   )
 }
diff --git a/src/renderer/src/components/activity/activity-thread-list-pane.virtualization.test.tsx b/src/renderer/src/components/activity/activity-thread-list-pane.virtualization.test.tsx
new file mode 100644
index 00000000000..5b531570444
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-list-pane.virtualization.test.tsx
@@ -0,0 +1,237 @@
+// @vitest-environment happy-dom
+
+import { act, type MutableRefObject } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { TooltipProvider } from '@/components/ui/tooltip'
+import { ActivityThreadListPane } from './activity-thread-list-pane'
+import {
+  ActivityThreadCollapseContext,
+  type ActivityThreadCollapseState
+} from './activity-thread-collapse-context'
+import type { ActivityThreadGroup, AgentPaneThread } from './activity-thread-types'
+import { makeTab, makeWorktree } from './ActivityPrototypePage-test-fixtures'
+
+globalThis.IS_REACT_ACT_ENVIRONMENT = true
+
+const THREAD_COUNT = 300
+
+function makeThread(index: number): AgentPaneThread {
+  return {
+    paneKey: `tab-${index}:leaf-${index}`,
+    tab: makeTab(),
+    worktree: makeWorktree(),
+    repo: null,
+    currentAgentState: null,
+    currentAgentEntry: null,
+    latestEvent: null,
+    latestTimestamp: 1_000_000 - index,
+    agentType: 'claude',
+    unread: false,
+    paneTitle: `Virtual agent ${index}`,
+    responsePreview: '',
+    events: []
+  }
+}
+
+function makeManyThreads(): AgentPaneThread[] {
+  return Array.from({ length: THREAD_COUNT }, (_, index) => makeThread(index))
+}
+
+function makeGroups(threads: AgentPaneThread[]): ActivityThreadGroup[] {
+  return [{ key: 'done', label: 'Done', state: 'done', threads }]
+}
+
+function renderPane(
+  root: Root,
+  args: {
+    threads: AgentPaneThread[]
+    selectedPaneKey?: string | null
+    scrollTopRef?: MutableRefObject<number>
+    collapseState?: ActivityThreadCollapseState
+  }
+): void {
+  act(() => {
+    root.render(
+      <TooltipProvider>
+        <ActivityThreadCollapseContext.Provider value={args.collapseState ?? null}>
+          <ActivityThreadListPane
+            activityFilterInputRef={{ current: null }}
+            query=""
+            onQueryChange={vi.fn()}
+            groupBy="status"
+            onGroupByChange={vi.fn()}
+            readFilter="all"
+            onReadFilterChange={vi.fn()}
+            compactMode={true}
+            hasUnreadThreads={false}
+            onCompactModeChange={vi.fn()}
+            onMarkAllThreadsRead={vi.fn()}
+            visibleThreadGroups={makeGroups(args.threads)}
+            visibleThreadCount={args.threads.length}
+            selectedPaneKey={args.selectedPaneKey ?? null}
+            onSelectThread={vi.fn()}
+            onJumpToWorkspace={vi.fn()}
+            onMarkThreadRead={vi.fn()}
+            onMarkThreadUnread={vi.fn()}
+            canJumpToWorkspace={() => true}
+            showFilterControls={false}
+            showOptionsMenu={false}
+            scrollTopRef={args.scrollTopRef}
+          />
+        </ActivityThreadCollapseContext.Provider>
+      </TooltipProvider>
+    )
+  })
+}
+
+describe('ActivityThreadListPane virtualization', () => {
+  let container: HTMLDivElement
+  let root: Root
+
+  beforeEach(() => {
+    container = document.createElement('div')
+    document.body.appendChild(container)
+    root = createRoot(container)
+  })
+
+  afterEach(() => {
+    act(() => root.unmount())
+    container.remove()
+    document.body.replaceChildren()
+  })
+
+  function mountedRowCount(): number {
+    return container.querySelectorAll('[data-worktree-card-surface="true"]').length
+  }
+
+  it('mounts a viewport-bounded number of rows, not one per thread', () => {
+    renderPane(root, { threads: makeManyThreads() })
+    const mounted = mountedRowCount()
+    expect(mounted).toBeGreaterThan(0)
+    // Viewport (600px fallback) / ~96px rows + 2x overscan(8); far below THREAD_COUNT.
+    expect(mounted).toBeLessThanOrEqual(40)
+    // Off-screen rows are not in the DOM at all.
+    expect(container.textContent).not.toContain('Virtual agent 250')
+  })
+
+  it('keeps the selected off-screen row mounted so activation stays accessible', () => {
+    renderPane(root, {
+      threads: makeManyThreads(),
+      selectedPaneKey: 'tab-250:leaf-250'
+    })
+    const selected = container.querySelector('[data-worktree-card-active="primary"]')
+    expect(selected).not.toBeNull()
+    expect(selected?.textContent).toContain('Virtual agent 250')
+    // Still virtualized: pinning the selection must not mount the rest of the list.
+    expect(mountedRowCount()).toBeLessThanOrEqual(41)
+  })
+
+  it('does not mount an off-screen row when its thread data updates', () => {
+    const threads = makeManyThreads()
+    renderPane(root, { threads })
+    const before = mountedRowCount()
+
+    const updated = [...threads]
+    updated[250] = { ...threads[250], paneTitle: 'Virtual agent 250 UPDATED', unread: true }
+    renderPane(root, { threads: updated })
+
+    expect(container.textContent).not.toContain('Virtual agent 250 UPDATED')
+    expect(mountedRowCount()).toBe(before)
+  })
+
+  it('renders every row for a short list', () => {
+    renderPane(root, { threads: [makeThread(0), makeThread(1), makeThread(2)] })
+    expect(mountedRowCount()).toBe(3)
+    expect(container.textContent).toContain('Virtual agent 0')
+    expect(container.textContent).toContain('Virtual agent 2')
+  })
+
+  it('keeps the saved scroll offset when the pane mounts before threads hydrate', () => {
+    const scrollTopRef = { current: 360 }
+    renderPane(root, { threads: [], scrollTopRef })
+    const scrollContainer = container.querySelector<HTMLElement>('.overflow-y-auto')
+    // Empty list cannot contain the offset: restore is deferred, not clamped to 0.
+    act(() => {
+      if (scrollContainer) {
+        scrollContainer.scrollTop = 0
+        scrollContainer.dispatchEvent(new Event('scroll', { bubbles: true }))
+      }
+    })
+    expect(scrollTopRef.current).toBe(360)
+
+    renderPane(root, { threads: makeManyThreads(), scrollTopRef })
+    expect(container.querySelector<HTMLElement>('.overflow-y-auto')?.scrollTop).toBe(360)
+  })
+
+  it('restores caller-held collapse state across remounts', () => {
+    // Models the sidebar: the caller owns the Set and provides it via context.
+    let collapsed: ReadonlySet<string> = new Set<string>()
+    const collapseState = (): ActivityThreadCollapseState => ({
+      collapsedGroupKeys: collapsed,
+      onToggleGroupCollapse: (groupKey: string) => {
+        const next = new Set(collapsed)
+        if (next.has(groupKey)) {
+          next.delete(groupKey)
+        } else {
+          next.add(groupKey)
+        }
+        collapsed = next
+      }
+    })
+    renderPane(root, { threads: makeManyThreads(), collapseState: collapseState() })
+    const header = container.querySelector('[role="button"]') as HTMLElement
+    act(() => {
+      header.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+    })
+    renderPane(root, { threads: makeManyThreads(), collapseState: collapseState() })
+    expect(container.querySelector('[role="button"]')?.getAttribute('aria-expanded')).toBe('false')
+
+    act(() => root.unmount())
+    root = createRoot(container)
+    renderPane(root, { threads: makeManyThreads(), collapseState: collapseState() })
+    const remountedHeader = container.querySelector('[role="button"]')
+    expect(remountedHeader?.getAttribute('aria-expanded')).toBe('false')
+  })
+
+  it('disarms a stale deferred restore instead of yanking the viewport on late growth', () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(1_000_000)
+    try {
+      const scrollTopRef = { current: 360 }
+      // Mounts with a list too small to contain the saved offset (it shrank).
+      renderPane(root, { threads: [makeThread(0)], scrollTopRef })
+      const scrollContainer = container.querySelector<HTMLElement>('.overflow-y-auto')
+      expect(scrollContainer?.scrollTop).toBe(0)
+
+      // Well past the restore window, the list grows beyond the saved offset.
+      vi.setSystemTime(1_010_000)
+      renderPane(root, { threads: makeManyThreads(), scrollTopRef })
+
+      expect(container.querySelector<HTMLElement>('.overflow-y-auto')?.scrollTop).toBe(0)
+      expect(scrollTopRef.current).toBe(0)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('restores the Agents scroll position without storing it in React state', () => {
+    const scrollTopRef = { current: 240 }
+    renderPane(root, { threads: makeManyThreads(), scrollTopRef })
+    const scrollContainer = container.querySelector<HTMLElement>('.overflow-y-auto')
+    expect(scrollContainer?.scrollTop).toBe(240)
+
+    act(() => {
+      if (scrollContainer) {
+        scrollContainer.scrollTop = 360
+        scrollContainer.dispatchEvent(new Event('scroll', { bubbles: true }))
+      }
+    })
+    expect(scrollTopRef.current).toBe(360)
+
+    act(() => root.unmount())
+    root = createRoot(container)
+    renderPane(root, { threads: makeManyThreads(), scrollTopRef })
+    expect(container.querySelector<HTMLElement>('.overflow-y-auto')?.scrollTop).toBe(360)
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-thread-list-resize-handle.tsx b/src/renderer/src/components/activity/activity-thread-list-resize-handle.tsx
new file mode 100644
index 00000000000..a97a7ce223b
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-list-resize-handle.tsx
@@ -0,0 +1,37 @@
+import type React from 'react'
+import { cn } from '@/lib/utils'
+import { translate } from '@/i18n/i18n'
+
+export function ActivityThreadListResizeHandle({
+  isResizing,
+  onResizeStart
+}: {
+  isResizing?: boolean
+  onResizeStart?: React.MouseEventHandler<HTMLDivElement>
+}): React.JSX.Element {
+  return (
+    <div
+      aria-label={translate(
+        'auto.components.activity.ActivityPrototypePage.443690186e',
+        'Resize activity thread list'
+      )}
+      title={translate(
+        'auto.components.activity.ActivityPrototypePage.866083500b',
+        'Drag to resize'
+      )}
+      className={cn(
+        'group absolute -right-1.5 top-0 z-20 flex h-full w-3 cursor-col-resize items-stretch justify-center',
+        isResizing && 'bg-ring/10'
+      )}
+      onMouseDown={onResizeStart}
+      role="separator"
+    >
+      <div
+        className={cn(
+          'h-full w-px bg-border transition-colors group-hover:bg-ring/50',
+          isResizing && 'bg-ring'
+        )}
+      />
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/activity/activity-thread-list-toolbar.tsx b/src/renderer/src/components/activity/activity-thread-list-toolbar.tsx
new file mode 100644
index 00000000000..f1ad0fb9057
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-list-toolbar.tsx
@@ -0,0 +1,227 @@
+import React from 'react'
+import { BellDot, CheckCheck, Search, Trash2, X } from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import { Input } from '@/components/ui/input'
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue
+} from '@/components/ui/select'
+import { Toggle } from '@/components/ui/toggle'
+import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
+import { cn } from '@/lib/utils'
+import { translate } from '@/i18n/i18n'
+import { ActivityThreadOptionsMenu } from './activity-thread-controls'
+import type { ActivityGroupBy, ThreadReadFilter } from './activity-thread-types'
+
+export function ActivityThreadListToolbar({
+  activityFilterInputRef,
+  query,
+  onQueryChange,
+  groupBy,
+  onGroupByChange,
+  readFilter,
+  onReadFilterChange,
+  compactMode,
+  showChildAgents,
+  hasUnreadThreads,
+  onCompactModeChange,
+  onShowChildAgentsChange,
+  onMarkAllThreadsRead,
+  hasCompletedThreads,
+  onClearCompleted,
+  resizable,
+  showFilterControls,
+  showOptionsMenu
+}: {
+  activityFilterInputRef: React.RefObject<HTMLInputElement | null>
+  query: string
+  onQueryChange: (query: string) => void
+  groupBy: ActivityGroupBy
+  onGroupByChange: (groupBy: ActivityGroupBy) => void
+  readFilter: ThreadReadFilter
+  onReadFilterChange: (readFilter: ThreadReadFilter) => void
+  compactMode: boolean
+  showChildAgents?: boolean
+  hasUnreadThreads: boolean
+  onCompactModeChange: (compactMode: boolean) => void
+  onShowChildAgentsChange?: (showChildAgents: boolean) => void
+  onMarkAllThreadsRead?: () => void
+  hasCompletedThreads?: boolean
+  onClearCompleted?: () => void
+  resizable: boolean
+  showFilterControls: boolean
+  showOptionsMenu: boolean
+}): React.JSX.Element | null {
+  const showToolbar = showFilterControls || showOptionsMenu
+  if (!showToolbar) {
+    return null
+  }
+
+  return (
+    <>
+      <div className="shrink-0 border-b border-border px-2 py-1.5">
+        <div className="flex items-center gap-1">
+          {showFilterControls ? (
+            <div className="relative min-w-0 flex-1">
+              <Search className="pointer-events-none absolute left-2 top-1/2 size-3 -translate-y-1/2 text-muted-foreground" />
+              <Input
+                ref={activityFilterInputRef}
+                value={query}
+                onChange={(event) => onQueryChange(event.target.value)}
+                placeholder={translate(
+                  'auto.components.activity.ActivityPrototypePage.795cbf26e2',
+                  'Filter...'
+                )}
+                className={cn('h-7 w-full pl-6 text-[11px]', query ? 'pr-6' : '')}
+              />
+              {query ? (
+                <Button
+                  type="button"
+                  variant="ghost"
+                  size="icon-xs"
+                  className="absolute right-0.5 top-1/2 -translate-y-1/2 size-5 p-0 text-muted-foreground hover:text-foreground"
+                  aria-label={translate(
+                    'auto.components.sidebar.WorkspaceKanbanSearchField.3b7ea51793',
+                    'Clear search'
+                  )}
+                  onClick={() => {
+                    onQueryChange('')
+                    activityFilterInputRef.current?.focus()
+                  }}
+                >
+                  <X className="size-2.5" />
+                </Button>
+              ) : null}
+            </div>
+          ) : null}
+          {resizable ? (
+            <Select
+              value={groupBy}
+              onValueChange={(value) => onGroupByChange(value as ActivityGroupBy)}
+            >
+              <SelectTrigger
+                size="sm"
+                className="h-7 w-[116px] shrink-0 px-2 text-[11px]"
+                aria-label={translate(
+                  'auto.components.activity.ActivityPrototypePage.770d458144',
+                  'Group agent activity by'
+                )}
+              >
+                <SelectValue />
+              </SelectTrigger>
+              <SelectContent align="end">
+                <SelectItem value="none">
+                  {translate('auto.components.activity.ActivityPrototypePage.none', 'None')}
+                </SelectItem>
+                <SelectItem value="status">
+                  {translate('auto.components.activity.ActivityPrototypePage.4a3986b200', 'Status')}
+                </SelectItem>
+                <SelectItem value="project">
+                  {translate(
+                    'auto.components.activity.ActivityPrototypePage.8c3b621ddf',
+                    'Project'
+                  )}
+                </SelectItem>
+                <SelectItem value="worktree">
+                  {translate(
+                    'auto.components.activity.ActivityPrototypePage.b29191b3e0',
+                    'Worktree'
+                  )}
+                </SelectItem>
+                <SelectItem value="agent">
+                  {translate('auto.components.activity.ActivityPrototypePage.f6396e1f85', 'Agent')}
+                </SelectItem>
+              </SelectContent>
+            </Select>
+          ) : null}
+          {showFilterControls ? (
+            <Tooltip>
+              <TooltipTrigger asChild>
+                <Toggle
+                  pressed={readFilter === 'unread'}
+                  onPressedChange={(pressed) => onReadFilterChange(pressed ? 'unread' : 'all')}
+                  size="sm"
+                  className={cn(
+                    'size-7 shrink-0 p-0 rounded-md transition-all',
+                    readFilter === 'unread'
+                      ? '!border border-primary/50 !bg-primary/20 !text-primary shadow-xs hover:!bg-primary/30'
+                      : 'text-muted-foreground hover:text-foreground hover:bg-muted/50'
+                  )}
+                  aria-label={translate(
+                    'auto.components.activity.ActivityPrototypePage.d1a88df9a8',
+                    'Show unread threads only'
+                  )}
+                >
+                  <BellDot className="size-3.5" strokeWidth={2.25} />
+                </Toggle>
+              </TooltipTrigger>
+              <TooltipContent side="bottom" sideOffset={6}>
+                {translate(
+                  'auto.components.activity.ActivityPrototypePage.d1a88df9a8',
+                  'Show unread threads only'
+                )}
+              </TooltipContent>
+            </Tooltip>
+          ) : null}
+          {showOptionsMenu ? (
+            <ActivityThreadOptionsMenu
+              groupBy={groupBy}
+              onGroupByChange={onGroupByChange}
+              compactMode={compactMode}
+              showChildAgents={showChildAgents}
+              hasUnreadThreads={hasUnreadThreads}
+              hasCompletedThreads={hasCompletedThreads}
+              onCompactModeChange={onCompactModeChange}
+              onShowChildAgentsChange={onShowChildAgentsChange}
+              onMarkAllThreadsRead={onMarkAllThreadsRead}
+              onClearCompleted={onClearCompleted}
+            />
+          ) : null}
+        </div>
+      </div>
+      {onMarkAllThreadsRead || onClearCompleted ? (
+        <div className="flex shrink-0 items-center gap-1 border-b border-border px-2 py-1">
+          {onMarkAllThreadsRead ? (
+            <Button
+              type="button"
+              variant="ghost"
+              size="sm"
+              className="h-7 gap-1 px-2 text-[11px] text-muted-foreground hover:text-foreground"
+              onClick={onMarkAllThreadsRead}
+              disabled={!hasUnreadThreads}
+            >
+              <CheckCheck className="size-3.5" />
+              <span>
+                {translate(
+                  'auto.components.activity.ActivityPrototypePage.023ff75afe',
+                  'Mark all read'
+                )}
+              </span>
+            </Button>
+          ) : null}
+          {onClearCompleted ? (
+            <Button
+              type="button"
+              variant="ghost"
+              size="sm"
+              className="h-7 gap-1 px-2 text-[11px] text-muted-foreground hover:text-foreground"
+              onClick={onClearCompleted}
+              disabled={!hasCompletedThreads}
+            >
+              <Trash2 className="size-3.5" />
+              <span>
+                {translate(
+                  'auto.components.activity.ActivityPrototypePage.clearCompleted',
+                  'Clear completed'
+                )}
+              </span>
+            </Button>
+          ) : null}
+        </div>
+      ) : null}
+    </>
+  )
+}
diff --git a/src/renderer/src/components/activity/activity-thread-options-menu.tsx b/src/renderer/src/components/activity/activity-thread-options-menu.tsx
new file mode 100644
index 00000000000..a7d50a108ac
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-options-menu.tsx
@@ -0,0 +1,291 @@
+import React from 'react'
+import {
+  BellDot,
+  Check,
+  CheckCheck,
+  GitFork,
+  Layers,
+  MoreVertical,
+  Rows3,
+  Search,
+  Trash2
+} from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import {
+  DropdownMenu,
+  DropdownMenuCheckboxItem,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuRadioGroup,
+  DropdownMenuRadioItem,
+  DropdownMenuSeparator,
+  DropdownMenuSub,
+  DropdownMenuSubContent,
+  DropdownMenuSubTrigger,
+  DropdownMenuTrigger
+} from '@/components/ui/dropdown-menu'
+import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
+import { translate } from '@/i18n/i18n'
+import { ActivityScopeFilterMenuSections } from './activity-scope-filter-controls'
+import type { ActivityGroupBy } from './activity-thread-types'
+
+const ALIGNED_CHECKBOX_ITEM_CLASS = 'pl-2 [&>span.absolute]:hidden'
+
+function getActivityGroupByLabel(groupBy: ActivityGroupBy): string {
+  switch (groupBy) {
+    case 'none':
+      return translate('auto.components.activity.ActivityPrototypePage.none', 'None')
+    case 'status':
+      return translate('auto.components.activity.ActivityPrototypePage.4a3986b200', 'Status')
+    case 'project':
+      return translate('auto.components.activity.ActivityPrototypePage.8c3b621ddf', 'Project')
+    case 'worktree':
+      return translate('auto.components.activity.ActivityPrototypePage.b29191b3e0', 'Worktree')
+    case 'agent':
+      return translate('auto.components.activity.ActivityPrototypePage.f6396e1f85', 'Agent')
+  }
+}
+
+export function ActivityThreadOptionsMenu({
+  groupBy,
+  onGroupByChange,
+  compactMode,
+  showChildAgents = false,
+  hasUnreadThreads,
+  hasCompletedThreads = false,
+  onCompactModeChange,
+  onShowChildAgentsChange,
+  onMarkAllThreadsRead,
+  onClearCompleted,
+  onSearch,
+  unreadOnly = false,
+  onToggleUnread
+}: {
+  groupBy?: ActivityGroupBy
+  onGroupByChange?: (groupBy: ActivityGroupBy) => void
+  compactMode: boolean
+  showChildAgents?: boolean
+  hasUnreadThreads: boolean
+  hasCompletedThreads?: boolean
+  onCompactModeChange: (compactMode: boolean) => void
+  onShowChildAgentsChange?: (showChildAgents: boolean) => void
+  onMarkAllThreadsRead?: () => void
+  onClearCompleted?: () => void
+  onSearch?: () => void
+  unreadOnly?: boolean
+  onToggleUnread?: () => void
+}): React.JSX.Element {
+  const skipCloseAutoFocusRef = React.useRef(false)
+
+  return (
+    <DropdownMenu>
+      <Tooltip>
+        <TooltipTrigger asChild>
+          {/* Why: keep Tooltip and Dropdown from composing refs onto the same button (Radix setRef crash loop). */}
+          <span className="inline-flex shrink-0">
+            <DropdownMenuTrigger asChild>
+              <Button
+                type="button"
+                variant="ghost"
+                size="icon-xs"
+                className="text-muted-foreground"
+                aria-label={translate(
+                  'auto.components.activity.ActivityPrototypePage.db8a1878b5',
+                  'Thread list options'
+                )}
+              >
+                <MoreVertical className="size-3.5" strokeWidth={2.25} />
+              </Button>
+            </DropdownMenuTrigger>
+          </span>
+        </TooltipTrigger>
+        <TooltipContent side="bottom">
+          {translate('auto.components.activity.ActivityPrototypePage.a472a14700', 'More options')}
+        </TooltipContent>
+      </Tooltip>
+      <DropdownMenuContent
+        side="right"
+        align="start"
+        sideOffset={8}
+        className="w-56"
+        onCloseAutoFocus={(event) => {
+          if (skipCloseAutoFocusRef.current) {
+            event.preventDefault()
+            skipCloseAutoFocusRef.current = false
+          }
+        }}
+      >
+        {onSearch || onToggleUnread ? (
+          <>
+            {onSearch ? (
+              <DropdownMenuItem
+                onSelect={() => {
+                  skipCloseAutoFocusRef.current = true
+                  onSearch()
+                }}
+              >
+                <Search className="size-3.5 text-muted-foreground" />
+                <span>
+                  {translate('auto.components.activity.ActivityPrototypePage.search', 'Search')}
+                </span>
+              </DropdownMenuItem>
+            ) : null}
+            {onToggleUnread ? (
+              <Tooltip>
+                <TooltipTrigger asChild>
+                  <DropdownMenuCheckboxItem
+                    checked={unreadOnly}
+                    className={ALIGNED_CHECKBOX_ITEM_CLASS}
+                    onCheckedChange={() => onToggleUnread()}
+                    onSelect={(event) => event.preventDefault()}
+                  >
+                    <BellDot className="size-3.5 text-muted-foreground" />
+                    <span className="min-w-0 flex-1 truncate">
+                      {translate(
+                        'auto.components.activity.ActivityPrototypePage.showUnreadOnly',
+                        'Show unread only'
+                      )}
+                    </span>
+                    {hasUnreadThreads ? (
+                      <span
+                        className="size-1.5 shrink-0 rounded-full bg-primary"
+                        aria-hidden="true"
+                        data-unread-dot=""
+                      />
+                    ) : null}
+                    {unreadOnly ? <Check className="size-3.5" /> : null}
+                  </DropdownMenuCheckboxItem>
+                </TooltipTrigger>
+                <TooltipContent side="right" sideOffset={8}>
+                  {translate(
+                    'auto.components.activity.ActivityPrototypePage.unreadOnlyDescription',
+                    'Filters the activity list to show only threads with unread updates.'
+                  )}
+                </TooltipContent>
+              </Tooltip>
+            ) : null}
+            <DropdownMenuSeparator />
+          </>
+        ) : null}
+        <ActivityScopeFilterMenuSections />
+        {groupBy && onGroupByChange ? (
+          <DropdownMenuSub>
+            <DropdownMenuSubTrigger>
+              <Layers className="size-3.5 text-muted-foreground" />
+              <span className="flex flex-1 items-center justify-between gap-2">
+                <span>
+                  {translate(
+                    'auto.components.activity.ActivityPrototypePage.770d458144',
+                    'Group by'
+                  )}
+                </span>
+                <span className="text-[11px] font-medium text-muted-foreground">
+                  {getActivityGroupByLabel(groupBy)}
+                </span>
+              </span>
+            </DropdownMenuSubTrigger>
+            <DropdownMenuSubContent className="w-40">
+              <DropdownMenuRadioGroup
+                value={groupBy}
+                onValueChange={(value) => onGroupByChange(value as ActivityGroupBy)}
+              >
+                {[
+                  ['none', 'None', 'auto.components.activity.ActivityPrototypePage.none'],
+                  ['status', 'Status', 'auto.components.activity.ActivityPrototypePage.4a3986b200'],
+                  [
+                    'project',
+                    'Project',
+                    'auto.components.activity.ActivityPrototypePage.8c3b621ddf'
+                  ],
+                  [
+                    'worktree',
+                    'Worktree',
+                    'auto.components.activity.ActivityPrototypePage.b29191b3e0'
+                  ],
+                  ['agent', 'Agent', 'auto.components.activity.ActivityPrototypePage.f6396e1f85']
+                ].map(([value, label, key]) => (
+                  <DropdownMenuRadioItem
+                    key={value}
+                    value={value}
+                    onSelect={(event) => event.preventDefault()}
+                  >
+                    {translate(key, label)}
+                  </DropdownMenuRadioItem>
+                ))}
+              </DropdownMenuRadioGroup>
+            </DropdownMenuSubContent>
+          </DropdownMenuSub>
+        ) : null}
+        <Tooltip>
+          <TooltipTrigger asChild>
+            <DropdownMenuCheckboxItem
+              checked={compactMode}
+              className={ALIGNED_CHECKBOX_ITEM_CLASS}
+              onCheckedChange={(checked) => onCompactModeChange(checked === true)}
+              onSelect={(event) => event.preventDefault()}
+            >
+              <Rows3 className="size-3.5 text-muted-foreground" />
+              <span className="min-w-0 flex-1 truncate">
+                {translate(
+                  'auto.components.activity.ActivityPrototypePage.f70e4bec47',
+                  'Compact mode'
+                )}
+              </span>
+              {compactMode ? <Check className="size-3.5" /> : null}
+            </DropdownMenuCheckboxItem>
+          </TooltipTrigger>
+          <TooltipContent side="right" sideOffset={8}>
+            {translate(
+              'auto.components.activity.ActivityPrototypePage.compactModeDescription',
+              'Shows shorter thread rows with one-line titles and two-line status messages.'
+            )}
+          </TooltipContent>
+        </Tooltip>
+        {onShowChildAgentsChange ? (
+          <DropdownMenuCheckboxItem
+            checked={showChildAgents}
+            className={ALIGNED_CHECKBOX_ITEM_CLASS}
+            onCheckedChange={(checked) => onShowChildAgentsChange(checked === true)}
+            onSelect={(event) => event.preventDefault()}
+          >
+            <GitFork className="size-3.5 text-muted-foreground" />
+            <span className="min-w-0 flex-1 truncate">
+              {translate(
+                'auto.components.activity.ActivityPrototypePage.showChildAgents',
+                'Show child agents'
+              )}
+            </span>
+            {showChildAgents ? <Check className="size-3.5" /> : null}
+          </DropdownMenuCheckboxItem>
+        ) : null}
+        {onMarkAllThreadsRead || onClearCompleted ? (
+          <>
+            <DropdownMenuSeparator />
+            {onMarkAllThreadsRead ? (
+              <DropdownMenuItem onSelect={onMarkAllThreadsRead} disabled={!hasUnreadThreads}>
+                <CheckCheck className="size-3.5 text-muted-foreground" />
+                <span>
+                  {translate(
+                    'auto.components.activity.ActivityPrototypePage.023ff75afe',
+                    'Mark all read'
+                  )}
+                </span>
+              </DropdownMenuItem>
+            ) : null}
+            {onClearCompleted ? (
+              <DropdownMenuItem onSelect={onClearCompleted} disabled={!hasCompletedThreads}>
+                <Trash2 className="size-3.5 text-muted-foreground" />
+                <span>
+                  {translate(
+                    'auto.components.activity.ActivityPrototypePage.clearCompleted',
+                    'Clear completed'
+                  )}
+                </span>
+              </DropdownMenuItem>
+            ) : null}
+          </>
+        ) : null}
+      </DropdownMenuContent>
+    </DropdownMenu>
+  )
+}
diff --git a/src/renderer/src/components/activity/activity-thread-presentation.test.ts b/src/renderer/src/components/activity/activity-thread-presentation.test.ts
new file mode 100644
index 00000000000..6aa3efc1a32
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-presentation.test.ts
@@ -0,0 +1,97 @@
+import { describe, expect, it } from 'vitest'
+import type { AgentPaneThread } from './activity-thread-types'
+import { activityThreadRowCopy } from './activity-thread-presentation'
+import { formatShortTimeAgo } from '@/lib/short-time-ago'
+import {
+  makeRepo,
+  makeTabWithIds,
+  makeWorktree,
+  PANE_KEY
+} from './ActivityPrototypePage-test-fixtures'
+
+function makeThread(overrides: Partial<AgentPaneThread> = {}): AgentPaneThread {
+  const worktree = makeWorktree()
+  return {
+    paneKey: PANE_KEY,
+    paneTitle: 'low hanging issues',
+    agentType: 'codex',
+    worktree,
+    repo: makeRepo(),
+    tab: makeTabWithIds('tab-1', worktree.id),
+    events: [],
+    latestEvent: null,
+    latestTimestamp: 1_000,
+    currentAgentState: null,
+    currentAgentEntry: null,
+    unread: false,
+    responsePreview: '',
+    ...overrides
+  }
+}
+
+describe('formatShortTimeAgo', () => {
+  it('uses short units', () => {
+    const now = 1_000_000
+    expect(formatShortTimeAgo(now - 10_000, now)).toBe('now')
+    expect(formatShortTimeAgo(now - 5 * 60_000, now)).toBe('5m')
+    expect(formatShortTimeAgo(now - 20 * 60 * 60_000, now)).toBe('20h')
+    expect(formatShortTimeAgo(now - 2 * 24 * 60 * 60_000, now)).toBe('2d')
+  })
+})
+
+describe('activityThreadRowCopy', () => {
+  it('leads with the task and the last activity, not project or workspace', () => {
+    const copy = activityThreadRowCopy(
+      makeThread({
+        responsePreview: 'Filed 8 issues from the audit.'
+      })
+    )
+    expect(copy.taskTitle).toBe('low hanging issues')
+    expect(copy.statusLine).toBe('Filed 8 issues from the audit.')
+    expect(copy.statusKind).toBe('message')
+    expect(copy.needsAttention).toBe(false)
+    expect(copy.workspaceLabel).toBe('feature')
+  })
+
+  it('names the live tool while working', () => {
+    const copy = activityThreadRowCopy(
+      makeThread({
+        paneTitle: 'Fix checkout race',
+        currentAgentState: 'working',
+        responsePreview: 'Edit src/checkout/session.ts'
+      })
+    )
+    expect(copy.statusKind).toBe('tool')
+    expect(copy.statusLine).toBe('Edit src/checkout/session.ts')
+  })
+
+  it('falls back to a state label when a live agent has no preview', () => {
+    const copy = activityThreadRowCopy(
+      makeThread({
+        paneTitle: 'Review PR 1842',
+        currentAgentState: 'waiting',
+        responsePreview: ''
+      })
+    )
+    expect(copy.statusKind).toBe('state')
+    expect(copy.statusLine).toBe('Waiting for input')
+    expect(copy.needsAttention).toBe(true)
+  })
+
+  it('does not invent a status line for a finished agent with no reply', () => {
+    const copy = activityThreadRowCopy(makeThread({ currentAgentState: null, responsePreview: '' }))
+    expect(copy.statusKind).toBe('none')
+    expect(copy.statusLine).toBe('')
+  })
+
+  it('does not repeat the task title as the last-message line', () => {
+    const copy = activityThreadRowCopy(
+      makeThread({
+        paneTitle: 'low hanging issues',
+        responsePreview: 'low hanging issues'
+      })
+    )
+    expect(copy.statusKind).toBe('none')
+    expect(copy.statusLine).toBe('')
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-thread-presentation.ts b/src/renderer/src/components/activity/activity-thread-presentation.ts
index 167d2f30954..93d69c7688a 100644
--- a/src/renderer/src/components/activity/activity-thread-presentation.ts
+++ b/src/renderer/src/components/activity/activity-thread-presentation.ts
@@ -1,8 +1,10 @@
 import { agentStateLabel, type AgentDotState } from '@/components/AgentStateDot'
 import { formatAgentTypeLabel } from '@/lib/agent-status'
 import { getAgentRowPrimaryText } from '@/lib/agent-row-primary-text'
+import { showsAgentToolPreview } from '@/lib/agent-row-tool-preview'
 import {
   getActivityThreadTaskTitle,
+  getActivityThreadWorkspaceTitle,
   resolveActivityThreadStatusPreview
 } from '@/lib/activity-thread-display'
 import { formatUiRelativeTime } from '@/i18n/relative-time-format'
@@ -24,8 +26,8 @@ export function formatAbsoluteDate(timestamp: number): string {
   return absoluteDateFormatter.format(new Date(timestamp))
 }
 
-export function formatRelativeTime(timestamp: number): string {
-  return formatUiRelativeTime(timestamp - Date.now())
+export function formatRelativeTime(timestamp: number, now = Date.now()): string {
+  return formatUiRelativeTime(timestamp - now)
 }
 
 function truncatePreservingSurrogates(value: string, maxLength: number): string {
@@ -111,3 +113,57 @@ export function threadAgentStateLabel(thread: AgentPaneThread): string {
   }
   return agentStateLabel(state)
 }
+
+export type ActivityThreadStatusKind = 'tool' | 'message' | 'state' | 'none'
+
+export type ActivityThreadRowCopy = {
+  taskTitle: string
+  statusLine: string
+  statusKind: ActivityThreadStatusKind
+  needsAttention: boolean
+  workspaceLabel: string
+}
+
+function normalizeScanLabel(value: string): string {
+  return value.trim().toLowerCase().replace(/[-_]+/g, ' ').replace(/\s+/g, ' ')
+}
+
+function previewDuplicatesIdentity(preview: string, title: string, workspace: string): boolean {
+  const normalized = normalizeScanLabel(preview)
+  if (!normalized) {
+    return true
+  }
+  return normalized === normalizeScanLabel(title) || normalized === normalizeScanLabel(workspace)
+}
+
+export function activityThreadRowCopy(thread: AgentPaneThread): ActivityThreadRowCopy {
+  const workspaceLabel = getActivityThreadWorkspaceTitle(thread.worktree)
+  const taskTitle = thread.paneTitle.trim() || workspaceLabel
+  const renderedPreview = activityThreadResponseRenderPreview({
+    responsePreview: thread.responsePreview
+  })
+  const liveState = thread.currentAgentState ?? thread.latestEvent?.state ?? null
+  const toolPreviewState = liveState === 'monitoring' ? null : liveState
+  const state = threadAgentState(thread)
+  const needsAttention = state === 'waiting' || state === 'blocked' || state === 'permission'
+  if (renderedPreview && !previewDuplicatesIdentity(renderedPreview, taskTitle, workspaceLabel)) {
+    return {
+      taskTitle,
+      statusLine: renderedPreview,
+      // Monitoring is a distinct live state, not a tool-running row state.
+      statusKind: showsAgentToolPreview(toolPreviewState) ? 'tool' : 'message',
+      needsAttention,
+      workspaceLabel
+    }
+  }
+  if (state !== 'done' && state !== 'idle') {
+    return {
+      taskTitle,
+      statusLine: threadAgentStateLabel(thread),
+      statusKind: 'state',
+      needsAttention,
+      workspaceLabel
+    }
+  }
+  return { taskTitle, statusLine: '', statusKind: 'none', needsAttention, workspaceLabel }
+}
diff --git a/src/renderer/src/components/activity/activity-thread-row.tsx b/src/renderer/src/components/activity/activity-thread-row.tsx
index 77750f6c390..93d4d5ec18f 100644
--- a/src/renderer/src/components/activity/activity-thread-row.tsx
+++ b/src/renderer/src/components/activity/activity-thread-row.tsx
@@ -2,207 +2,213 @@ import React from 'react'
 import { Bell, ExternalLink } from 'lucide-react'
 import { AgentIcon } from '@/lib/agent-catalog'
 import { agentTypeToIconAgent, formatAgentTypeLabel } from '@/lib/agent-status'
-import { getActivityThreadWorkspaceTitle } from '@/lib/activity-thread-display'
 import { Button } from '@/components/ui/button'
 import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
 import { cn } from '@/lib/utils'
 import { translate } from '@/i18n/i18n'
 import { FilledBellIcon } from '../sidebar/WorktreeCardHelpers'
 import CommentMarkdown from '../sidebar/CommentMarkdown'
-import {
-  ActivityProjectLabel,
-  EventTime,
-  ThreadAgentStateIndicator
-} from './activity-thread-controls'
-import { activityThreadResponseRenderPreview } from './activity-thread-presentation'
+import { EventTime, ThreadAgentStateIndicator } from './activity-thread-controls'
+import { ActivityThreadHoverCard } from './activity-thread-hover-card'
+import { activityThreadRowCopy } from './activity-thread-presentation'
 import type { AgentPaneThread } from './activity-thread-types'
 
-function isEventFromNestedInteractiveElement(
-  target: EventTarget | null,
-  currentTarget: HTMLElement
-): boolean {
-  if (!(target instanceof HTMLElement)) {
-    return false
-  }
-  const interactiveTarget = target.closest(
-    'a, button, input, select, textarea, [role="button"], [role="link"], [tabindex]:not([tabindex="-1"])'
-  )
-  return (
-    interactiveTarget instanceof HTMLElement &&
-    interactiveTarget !== currentTarget &&
-    currentTarget.contains(interactiveTarget)
-  )
-}
-
-export function ActivityThreadRow({
+// Why React.memo: rows are pure functions of these props; thread identity is stable across
+// query/selection/group re-renders, so memo keeps a keystroke or selection change from
+// re-rendering every mounted row. Callbacks take the thread so parents can pass stable handlers.
+export const ActivityThreadRow = React.memo(function ActivityThreadRow({
   thread,
   selected,
   onSelect,
   onJump,
+  onMarkRead,
   onMarkUnread,
   canJump,
-  compactMode
+  compactMode,
+  disableMarkUnread = false,
+  showJumpAction = true
 }: {
   thread: AgentPaneThread
   selected: boolean
-  onSelect: () => void
-  onJump: () => void
-  onMarkUnread: () => void
+  onSelect: (thread: AgentPaneThread) => void
+  onJump: (thread: AgentPaneThread) => void
+  onMarkRead: (thread: AgentPaneThread) => void
+  onMarkUnread: (thread: AgentPaneThread) => void
   canJump: boolean
   compactMode: boolean
+  disableMarkUnread?: boolean
+  showJumpAction?: boolean
 }): React.JSX.Element {
-  const renderedResponsePreview = activityThreadResponseRenderPreview({
-    responsePreview: thread.responsePreview
-  })
-  const workspaceTitle = getActivityThreadWorkspaceTitle(thread.worktree)
-  const taskTitle = thread.paneTitle
+  const { taskTitle, statusLine, statusKind, needsAttention, workspaceLabel } =
+    activityThreadRowCopy(thread)
+  const showMarkdownStatus = statusKind === 'message'
   const agentLabel = formatAgentTypeLabel(thread.agentType)
-  const showStatusPreview =
-    !compactMode &&
-    renderedResponsePreview.length > 0 &&
-    renderedResponsePreview !== taskTitle &&
-    renderedResponsePreview !== workspaceTitle
+
   return (
-    <div
-      data-current={selected ? 'true' : undefined}
-      onClick={onSelect}
-      role="button"
-      tabIndex={0}
-      onKeyDown={(event) => {
-        // Why: markdown responses can contain links; keyboard activation on a nested link follows the link instead of selecting the row.
-        if (isEventFromNestedInteractiveElement(event.target, event.currentTarget)) {
-          return
-        }
-        if (event.key === 'Enter' || event.key === ' ') {
-          event.preventDefault()
-          onSelect()
-        }
-      }}
-      className={cn(
-        // Why (WorktreeCard cues): selected = tint+shadow, beats hover; unread = weight + left bar only; stacking all three confused selected vs unread on hover.
-        // Why (asymmetric padding): title leading-snug adds ~3px above cap-height; smaller top pad evens the row.
-        'group relative flex w-full cursor-pointer flex-col gap-1 border-b border-border px-3 pt-2.5 pb-3 text-left transition-colors',
-        selected
-          ? 'bg-black/[0.08] shadow-[0_1px_2px_rgba(0,0,0,0.04)] dark:bg-white/[0.10] dark:shadow-[0_1px_2px_rgba(0,0,0,0.03)]'
-          : 'hover:bg-accent/40'
-      )}
+    <ActivityThreadHoverCard
+      thread={thread}
+      onJumpToWorkspace={onJump}
+      canJumpToWorkspace={canJump}
     >
-      {thread.unread ? (
-        <span className="absolute left-0 top-1.5 bottom-1.5 w-0.5 rounded-r-full bg-primary" />
-      ) : null}
-      <div className="flex min-w-0 items-start gap-2">
-        <span className="inline-flex shrink-0 items-start gap-1">
-          <ThreadAgentStateIndicator thread={thread} />
-          <span className="inline-flex shrink-0 pt-px">
-            <AgentIcon agent={agentTypeToIconAgent(thread.agentType)} size={14} />
+      <div
+        data-current={selected ? 'true' : undefined}
+        data-worktree-card-surface="true"
+        data-worktree-card-active={selected ? 'primary' : undefined}
+        onClick={() => onSelect(thread)}
+        role="listitem"
+        aria-label={taskTitle}
+        aria-current={selected ? 'true' : undefined}
+        className={cn(
+          'group relative flex w-full cursor-pointer flex-col gap-1.5 rounded-lg border border-transparent px-1.5 py-2.5 text-left transition-[background-color,border-color,opacity,box-shadow] duration-200 outline-none select-none worktree-sidebar-card-hover focus-visible:ring-1 focus-visible:ring-ring',
+          selected && 'border-transparent'
+        )}
+      >
+        <div className="flex min-w-0 items-start gap-1.5">
+          <span className="mt-0.5 inline-flex shrink-0">
+            <ThreadAgentStateIndicator thread={thread} />
           </span>
-        </span>
-        <div className="min-w-0 flex-1">
-          <div className="flex min-w-0 items-start gap-2">
-            <div className="min-w-0 flex-1 space-y-0.5">
-              <ActivityProjectLabel repo={thread.repo} />
-              <div
-                className={cn(
-                  'min-w-0 text-[13px] leading-snug',
-                  compactMode ? 'truncate' : 'line-clamp-2 break-words',
-                  thread.unread ? 'font-semibold text-foreground' : 'font-medium text-foreground'
-                )}
-                title={workspaceTitle}
-              >
-                {workspaceTitle}
-              </div>
-              {taskTitle !== workspaceTitle ? (
-                <div
-                  className={cn(
-                    'min-w-0 text-[12px] leading-snug text-muted-foreground',
-                    compactMode ? 'truncate' : 'line-clamp-2 break-words'
-                  )}
-                  title={taskTitle}
-                >
-                  {taskTitle}
-                </div>
-              ) : null}
-              {showStatusPreview ? (
+          <div className="flex min-w-0 flex-1 flex-col gap-1">
+            {/* Keep the activation target separate from markdown links and row actions. */}
+            <button
+              type="button"
+              aria-label={taskTitle}
+              aria-keyshortcuts="Enter Space"
+              onClick={(event) => {
+                event.stopPropagation()
+                onSelect(thread)
+              }}
+              className={cn(
+                'block min-w-0 w-full cursor-pointer text-left text-[13px] leading-5 outline-none focus-visible:ring-1 focus-visible:ring-ring',
+                compactMode ? 'truncate' : 'line-clamp-2 break-words',
+                thread.unread ? 'font-semibold text-foreground' : 'font-medium text-foreground'
+              )}
+              title={taskTitle}
+            >
+              {taskTitle}
+            </button>
+
+            {statusLine ? (
+              showMarkdownStatus ? (
                 <CommentMarkdown
-                  content={renderedResponsePreview}
+                  content={statusLine}
                   className={cn(
-                    'h-[1lh] min-w-0 overflow-hidden truncate whitespace-nowrap text-[11px] font-normal leading-snug text-muted-foreground/80',
-                    '[&_*]:inline [&_*]:!m-0 [&_*]:!p-0 [&_*]:!whitespace-nowrap [&_br]:hidden [&_ol]:list-none [&_ul]:list-none'
+                    'min-w-0 break-words text-[13px] leading-5 text-foreground/80',
+                    compactMode ? 'line-clamp-2' : 'line-clamp-3',
+                    '[&_*]:!m-0 [&_*]:!p-0 [&_br]:hidden [&_ol]:list-none [&_ul]:list-none'
                   )}
                   title={thread.responsePreview}
                 />
-              ) : null}
-              <div className="flex min-w-0 items-center gap-1.5 pt-0.5">
-                <span className="shrink-0 text-[10px] text-muted-foreground/80">{agentLabel}</span>
-                {canJump ? (
-                  <span
-                    className={cn(
-                      'ml-auto inline-flex shrink-0 items-center transition-opacity',
-                      'can-hover:pointer-events-none can-hover:invisible can-hover:opacity-0',
-                      'group-hover:pointer-events-auto group-hover:visible group-hover:opacity-100'
-                    )}
-                  >
-                    <Tooltip>
-                      <TooltipTrigger asChild>
-                        <Button
-                          type="button"
-                          variant="outline"
-                          size="icon-xs"
-                          aria-label={translate(
-                            'auto.components.activity.ActivityPrototypePage.4616ea39fd',
-                            'Jump to workspace'
-                          )}
-                          onClick={(event) => {
-                            event.stopPropagation()
-                            onJump()
-                          }}
-                          onMouseDown={(event) => event.stopPropagation()}
-                        >
-                          <ExternalLink className="size-3" />
-                        </Button>
-                      </TooltipTrigger>
-                      <TooltipContent side="left">
-                        {translate(
+              ) : (
+                <div
+                  className={cn(
+                    'min-w-0 break-words text-[13px] leading-5',
+                    compactMode ? 'line-clamp-2' : 'line-clamp-3',
+                    needsAttention ? 'text-agent-question-text' : 'text-foreground/80'
+                  )}
+                  title={statusLine}
+                >
+                  {statusLine}
+                </div>
+              )
+            ) : null}
+
+            <div className="flex min-w-0 items-center gap-1.5 pt-0.5 text-[11px] text-muted-foreground">
+              <span className="inline-flex shrink-0" title={agentLabel}>
+                <AgentIcon agent={agentTypeToIconAgent(thread.agentType)} size={13} />
+              </span>
+              <span className="min-w-0 flex-1 truncate" title={workspaceLabel}>
+                {workspaceLabel}
+              </span>
+              {canJump && showJumpAction ? (
+                <span
+                  className={cn(
+                    'inline-flex shrink-0 items-center transition-opacity',
+                    'can-hover:pointer-events-none can-hover:invisible can-hover:opacity-0',
+                    'group-hover:pointer-events-auto group-hover:visible group-hover:opacity-100'
+                  )}
+                >
+                  <Tooltip>
+                    <TooltipTrigger asChild>
+                      <Button
+                        type="button"
+                        variant="ghost"
+                        size="icon-xs"
+                        className="size-4 p-0 text-muted-foreground hover:text-foreground"
+                        aria-label={translate(
                           'auto.components.activity.ActivityPrototypePage.4616ea39fd',
                           'Jump to workspace'
                         )}
-                      </TooltipContent>
-                    </Tooltip>
-                  </span>
-                ) : null}
-              </div>
-            </div>
-            <span className="inline-flex shrink-0 items-center gap-1.5 pt-px">
-              <span className="inline-flex size-4 shrink-0 items-center justify-center">
+                        onClick={(event) => {
+                          event.stopPropagation()
+                          onJump(thread)
+                        }}
+                        onMouseDown={(event) => event.stopPropagation()}
+                      >
+                        <ExternalLink className="size-2.5" />
+                      </Button>
+                    </TooltipTrigger>
+                    <TooltipContent side="left">
+                      {translate(
+                        'auto.components.activity.ActivityPrototypePage.4616ea39fd',
+                        'Jump to workspace'
+                      )}
+                    </TooltipContent>
+                  </Tooltip>
+                </span>
+              ) : null}
+              <span className="inline-flex size-3.5 shrink-0 items-center justify-center">
                 {thread.unread ? (
-                  <FilledBellIcon
-                    className="size-[13px] shrink-0 text-amber-500 drop-shadow-sm"
-                    aria-label={translate(
-                      'auto.components.activity.ActivityPrototypePage.beb2c19173',
-                      'Unread'
-                    )}
-                  />
-                ) : (
                   <Tooltip>
                     <TooltipTrigger asChild>
                       <button
                         type="button"
                         onClick={(event) => {
                           event.stopPropagation()
-                          onMarkUnread()
+                          onMarkRead(thread)
+                        }}
+                        onMouseDown={(event) => event.stopPropagation()}
+                        className="flex size-3.5 shrink-0 cursor-pointer items-center justify-center rounded hover:bg-accent/80 focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring"
+                        aria-label={translate(
+                          'auto.components.activity.ActivityPrototypePage.markThreadRead',
+                          'Mark thread as read'
+                        )}
+                      >
+                        <FilledBellIcon
+                          className="size-3 shrink-0 text-amber-500 drop-shadow-sm"
+                          aria-hidden="true"
+                        />
+                      </button>
+                    </TooltipTrigger>
+                    <TooltipContent side="left">
+                      {translate(
+                        'auto.components.activity.ActivityPrototypePage.markThreadRead',
+                        'Mark thread as read'
+                      )}
+                    </TooltipContent>
+                  </Tooltip>
+                ) : (
+                  <Tooltip>
+                    <TooltipTrigger asChild>
+                      <button
+                        type="button"
+                        disabled={disableMarkUnread}
+                        onClick={(event) => {
+                          event.stopPropagation()
+                          onMarkUnread(thread)
                         }}
                         onMouseDown={(event) => event.stopPropagation()}
                         className={cn(
-                          'group/unread flex size-4 shrink-0 cursor-pointer items-center justify-center rounded transition-all',
+                          'flex size-3.5 shrink-0 cursor-pointer items-center justify-center rounded transition-opacity',
+                          'can-hover:opacity-0 can-hover:group-hover:opacity-100',
                           'hover:bg-accent/80 active:scale-95',
-                          'focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring'
+                          'focus-visible:opacity-100 focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring'
                         )}
                         aria-label={translate(
                           'auto.components.activity.ActivityPrototypePage.59b131fbd9',
                           'Mark thread unread'
                         )}
                       >
-                        <Bell className="size-3 text-muted-foreground/40 can-hover:opacity-0 transition-opacity group-hover:opacity-100 group-hover/unread:opacity-100" />
+                        <Bell className="size-2.5 text-muted-foreground" />
                       </button>
                     </TooltipTrigger>
                     <TooltipContent side="left">
@@ -214,11 +220,11 @@ export function ActivityThreadRow({
                   </Tooltip>
                 )}
               </span>
-              <EventTime timestamp={thread.latestTimestamp} />
-            </span>
+              <EventTime timestamp={thread.latestTimestamp} compact />
+            </div>
           </div>
         </div>
       </div>
-    </div>
+    </ActivityThreadHoverCard>
   )
-}
+})
diff --git a/src/renderer/src/components/activity/activity-thread-types.ts b/src/renderer/src/components/activity/activity-thread-types.ts
index 7609d416581..7225a71b935 100644
--- a/src/renderer/src/components/activity/activity-thread-types.ts
+++ b/src/renderer/src/components/activity/activity-thread-types.ts
@@ -10,7 +10,7 @@ import type { Worktree } from '../../../../shared/worktree/types'
 import type { ActivityPortalReadinessStatus } from './activity-portal-readiness-oscillation'
 
 export type ThreadReadFilter = 'all' | 'unread'
-export type ActivityGroupBy = 'status' | 'project' | 'worktree' | 'agent'
+export type ActivityGroupBy = 'none' | 'status' | 'project' | 'worktree' | 'agent'
 export type ActivityEventState = Extract<AgentStatusState, 'done' | 'blocked' | 'waiting'>
 export type ActivityHookLiveAgentState = Extract<
   AgentStatusState,
diff --git a/src/renderer/src/components/activity/activity-thread-virtual-items.test.ts b/src/renderer/src/components/activity/activity-thread-virtual-items.test.ts
new file mode 100644
index 00000000000..041841bcad4
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-virtual-items.test.ts
@@ -0,0 +1,82 @@
+import { describe, expect, it } from 'vitest'
+import {
+  buildActivityVirtualItems,
+  findActivityThreadItemIndex,
+  getActivityHeaderItemIndexes,
+  getActivityVirtualItemKey
+} from './activity-thread-virtual-items'
+import type { ActivityThreadGroup, AgentPaneThread } from './activity-thread-types'
+import { makeTab, makeWorktree } from './ActivityPrototypePage-test-fixtures'
+
+function makeThread(paneKey: string): AgentPaneThread {
+  return {
+    paneKey,
+    tab: makeTab(),
+    worktree: makeWorktree(),
+    repo: null,
+    currentAgentState: null,
+    currentAgentEntry: null,
+    latestEvent: null,
+    latestTimestamp: 1000,
+    agentType: 'claude',
+    unread: false,
+    paneTitle: `Agent ${paneKey}`,
+    responsePreview: '',
+    events: []
+  }
+}
+
+function makeGroup(key: string, threadKeys: string[]): ActivityThreadGroup {
+  return { key, label: key, threads: threadKeys.map(makeThread) }
+}
+
+describe('buildActivityVirtualItems', () => {
+  it('flattens headers and threads in group order', () => {
+    const items = buildActivityVirtualItems({
+      groups: [makeGroup('working', ['a', 'b']), makeGroup('done', ['c'])],
+      groupBy: 'status',
+      collapsedGroupKeys: new Set()
+    })
+    expect(items.map((item) => getActivityVirtualItemKey(item))).toEqual([
+      'h:working',
+      't:a',
+      't:b',
+      'h:done',
+      't:c'
+    ])
+    expect(getActivityHeaderItemIndexes(items)).toEqual([0, 3])
+  })
+
+  it('omits header rows entirely when ungrouped', () => {
+    const items = buildActivityVirtualItems({
+      groups: [{ key: 'all', label: '', threads: [makeThread('a'), makeThread('b')] }],
+      groupBy: 'none',
+      collapsedGroupKeys: new Set()
+    })
+    expect(items.map((item) => getActivityVirtualItemKey(item))).toEqual(['t:a', 't:b'])
+  })
+
+  it('keeps a collapsed group header but drops its thread rows', () => {
+    const items = buildActivityVirtualItems({
+      groups: [makeGroup('working', ['a', 'b']), makeGroup('done', ['c'])],
+      groupBy: 'status',
+      collapsedGroupKeys: new Set(['working'])
+    })
+    expect(items.map((item) => getActivityVirtualItemKey(item))).toEqual([
+      'h:working',
+      'h:done',
+      't:c'
+    ])
+  })
+
+  it('locates the selected thread row by paneKey', () => {
+    const items = buildActivityVirtualItems({
+      groups: [makeGroup('working', ['a', 'b', 'c'])],
+      groupBy: 'status',
+      collapsedGroupKeys: new Set()
+    })
+    expect(findActivityThreadItemIndex(items, 'c')).toBe(3)
+    expect(findActivityThreadItemIndex(items, 'missing')).toBeNull()
+    expect(findActivityThreadItemIndex(items, null)).toBeNull()
+  })
+})
diff --git a/src/renderer/src/components/activity/activity-thread-virtual-items.ts b/src/renderer/src/components/activity/activity-thread-virtual-items.ts
new file mode 100644
index 00000000000..63ccf56de38
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-virtual-items.ts
@@ -0,0 +1,74 @@
+import type { ActivityGroupBy, ActivityThreadGroup, AgentPaneThread } from './activity-thread-types'
+
+/** One row of the virtualized Activity list: a group header or a thread. */
+export type ActivityVirtualItemDescriptor =
+  | { type: 'header'; group: ActivityThreadGroup }
+  | { type: 'thread'; thread: AgentPaneThread; groupKey: string }
+
+export const ACTIVITY_HEADER_ROW_ESTIMATE = 32
+export const ACTIVITY_THREAD_ROW_COMPACT_ESTIMATE = 96
+export const ACTIVITY_THREAD_ROW_FULL_ESTIMATE = 116
+
+/**
+ * Flatten grouped threads into a single virtualizable row list, honoring
+ * collapsed groups (their thread rows are omitted entirely).
+ */
+export function buildActivityVirtualItems(args: {
+  groups: readonly ActivityThreadGroup[]
+  groupBy: ActivityGroupBy
+  collapsedGroupKeys: ReadonlySet<string>
+}): ActivityVirtualItemDescriptor[] {
+  const items: ActivityVirtualItemDescriptor[] = []
+  for (const group of args.groups) {
+    if (args.groupBy !== 'none') {
+      items.push({ type: 'header', group })
+      if (args.collapsedGroupKeys.has(group.key)) {
+        continue
+      }
+    }
+    for (const thread of group.threads) {
+      items.push({ type: 'thread', thread, groupKey: group.key })
+    }
+  }
+  return items
+}
+
+/** Stable per-row key: group key for headers, paneKey for threads. */
+export function getActivityVirtualItemKey(item: ActivityVirtualItemDescriptor): string {
+  return item.type === 'header' ? `h:${item.group.key}` : `t:${item.thread.paneKey}`
+}
+
+export function estimateActivityVirtualItemSize(
+  item: ActivityVirtualItemDescriptor | undefined,
+  compactMode: boolean
+): number {
+  if (!item || item.type === 'header') {
+    return ACTIVITY_HEADER_ROW_ESTIMATE
+  }
+  return compactMode ? ACTIVITY_THREAD_ROW_COMPACT_ESTIMATE : ACTIVITY_THREAD_ROW_FULL_ESTIMATE
+}
+
+/** Index of the selected thread's row, or null; kept mounted so activation and focus survive scrolling. */
+export function findActivityThreadItemIndex(
+  items: readonly ActivityVirtualItemDescriptor[],
+  paneKey: string | null
+): number | null {
+  if (paneKey === null) {
+    return null
+  }
+  const index = items.findIndex((item) => item.type === 'thread' && item.thread.paneKey === paneKey)
+  return index === -1 ? null : index
+}
+
+/** Indexes of header rows, for sticky-header resolution. */
+export function getActivityHeaderItemIndexes(
+  items: readonly ActivityVirtualItemDescriptor[]
+): number[] {
+  const indexes: number[] = []
+  items.forEach((item, index) => {
+    if (item.type === 'header') {
+      indexes.push(index)
+    }
+  })
+  return indexes
+}
diff --git a/src/renderer/src/components/activity/activity-thread-virtual-row.tsx b/src/renderer/src/components/activity/activity-thread-virtual-row.tsx
new file mode 100644
index 00000000000..4b6d7ac7d48
--- /dev/null
+++ b/src/renderer/src/components/activity/activity-thread-virtual-row.tsx
@@ -0,0 +1,71 @@
+import type React from 'react'
+import { translate } from '@/i18n/i18n'
+import { ActivityStatusGroupHeader } from './activity-thread-controls'
+import { ActivityThreadRow } from './activity-thread-row'
+import type { ActivityVirtualItemDescriptor } from './activity-thread-virtual-items'
+
+export function ActivityThreadVirtualRow({
+  item,
+  collapsed,
+  onToggleGroup,
+  selectedPaneKey,
+  onSelectThread,
+  onJumpToWorkspace,
+  onMarkThreadRead,
+  onMarkThreadUnread,
+  canJumpToWorkspace,
+  compactMode,
+  allowMarkUnreadWhenSelected,
+  showJumpAction
+}: {
+  item: ActivityVirtualItemDescriptor
+  collapsed: boolean
+  onToggleGroup: (groupKey: string) => void
+  selectedPaneKey: string | null
+  onSelectThread: Parameters<typeof ActivityThreadRow>[0]['onSelect']
+  onJumpToWorkspace: Parameters<typeof ActivityThreadRow>[0]['onJump']
+  onMarkThreadRead: Parameters<typeof ActivityThreadRow>[0]['onMarkRead']
+  onMarkThreadUnread: Parameters<typeof ActivityThreadRow>[0]['onMarkUnread']
+  canJumpToWorkspace: (
+    thread: Extract<ActivityVirtualItemDescriptor, { type: 'thread' }>['thread']
+  ) => boolean
+  compactMode: boolean
+  allowMarkUnreadWhenSelected: boolean
+  showJumpAction: boolean
+}): React.JSX.Element {
+  if (item.type === 'header') {
+    return (
+      <div
+        role="group"
+        aria-label={translate(
+          'auto.components.activity.ActivityPrototypePage.a2b4437bfb',
+          '{{value0}} activity',
+          { value0: item.group.label }
+        )}
+        className="pb-1"
+      >
+        <ActivityStatusGroupHeader
+          group={item.group}
+          collapsed={collapsed}
+          onToggle={() => onToggleGroup(item.group.key)}
+        />
+      </div>
+    )
+  }
+  return (
+    <div className="pb-1">
+      <ActivityThreadRow
+        thread={item.thread}
+        selected={item.thread.paneKey === selectedPaneKey}
+        onSelect={onSelectThread}
+        onJump={onJumpToWorkspace}
+        onMarkRead={onMarkThreadRead}
+        onMarkUnread={onMarkThreadUnread}
+        canJump={canJumpToWorkspace(item.thread)}
+        compactMode={compactMode}
+        disableMarkUnread={item.thread.paneKey === selectedPaneKey && !allowMarkUnreadWhenSelected}
+        showJumpAction={showJumpAction}
+      />
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/activity/dev-activity-fixture.test.ts b/src/renderer/src/components/activity/dev-activity-fixture.test.ts
new file mode 100644
index 00000000000..3895c01eeb4
--- /dev/null
+++ b/src/renderer/src/components/activity/dev-activity-fixture.test.ts
@@ -0,0 +1,39 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { parsePaneKey } from '../../../../shared/stable-pane-id'
+
+const mocks = vi.hoisted(() => ({
+  getState: vi.fn(),
+  setState: vi.fn(),
+  setAgentStatuses: vi.fn()
+}))
+
+vi.mock('@/store', () => ({
+  useAppStore: {
+    getState: mocks.getState,
+    setState: mocks.setState
+  }
+}))
+
+import { seedDevActivityFixture } from './dev-activity-fixture'
+
+describe('seedDevActivityFixture', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mocks.getState.mockReturnValue({
+      repos: [],
+      agentStatusByPaneKey: {},
+      setAgentStatuses: mocks.setAgentStatuses
+    })
+  })
+
+  it('seeds locally-owned rows with valid stable pane keys', () => {
+    seedDevActivityFixture()
+
+    const updates = mocks.setAgentStatuses.mock.calls[0]?.[0] ?? []
+    expect(updates).toHaveLength(3)
+    for (const update of updates) {
+      expect(parsePaneKey(update.paneKey)).not.toBeNull()
+      expect(update.routing.connectionId).toBeNull()
+    }
+  })
+})
diff --git a/src/renderer/src/components/activity/dev-activity-fixture.ts b/src/renderer/src/components/activity/dev-activity-fixture.ts
new file mode 100644
index 00000000000..9c2f2fc45f9
--- /dev/null
+++ b/src/renderer/src/components/activity/dev-activity-fixture.ts
@@ -0,0 +1,127 @@
+import { useAppStore } from '@/store'
+import type { Repo } from '../../../../shared/repo-types'
+import { makePaneKey } from '../../../../shared/stable-pane-id'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+
+const FIXTURE_REPO_ID = 'dev-fixture-repo'
+const FIXTURE_WORKTREE_ID = `${FIXTURE_REPO_ID}::/dev/orca-sample`
+const FIXTURE_LEAF_IDS = [
+  '11111111-1111-4111-8111-111111111111',
+  '22222222-2222-4222-8222-222222222222',
+  '33333333-3333-4333-8333-333333333333'
+] as const
+
+function fixtureRepo(): Repo {
+  return {
+    id: FIXTURE_REPO_ID,
+    path: '/dev/orca-sample',
+    displayName: 'Orca Sample App',
+    badgeColor: '#8b5cf6',
+    addedAt: Date.now(),
+    kind: 'git',
+    executionHostId: 'local'
+  }
+}
+
+function fixtureWorktree(): Worktree {
+  return {
+    id: FIXTURE_WORKTREE_ID,
+    repoId: FIXTURE_REPO_ID,
+    path: '/dev/orca-sample',
+    head: 'dev-fixture-head',
+    branch: 'feature/activity-dashboard',
+    isBare: false,
+    isMainWorktree: false,
+    displayName: 'Activity dashboard',
+    comment: 'Development fixture workspace',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: true,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: Date.now()
+  }
+}
+
+function fixtureTab(id: string, title: string, sortOrder: number): TerminalTab {
+  return {
+    id,
+    ptyId: null,
+    worktreeId: FIXTURE_WORKTREE_ID,
+    title,
+    customTitle: null,
+    color: null,
+    sortOrder,
+    createdAt: Date.now(),
+    launchAgent: id === 'dev-fixture-tab-1' ? 'codex' : 'claude'
+  }
+}
+
+/** Populate a fresh development profile with representative activity rows. */
+export function seedDevActivityFixture(): void {
+  const state = useAppStore.getState()
+  if (state.repos.length > 0 || Object.keys(state.agentStatusByPaneKey).length > 0) {
+    return
+  }
+
+  const now = Date.now()
+  const repo = fixtureRepo()
+  const worktree = fixtureWorktree()
+  const tabs = [
+    fixtureTab('dev-fixture-tab-1', 'Refactor activity filters', 0),
+    fixtureTab('dev-fixture-tab-2', 'Review empty-state copy', 1),
+    fixtureTab('dev-fixture-tab-3', 'Add keyboard shortcut', 2)
+  ]
+
+  useAppStore.setState({
+    repos: [repo],
+    activeRepoId: repo.id,
+    worktreesByRepo: { [repo.id]: [worktree] },
+    activeWorktreeId: worktree.id,
+    activeWorkspaceKey: `worktree:${worktree.id}`,
+    tabsByWorktree: { [worktree.id]: tabs }
+  })
+
+  state.setAgentStatuses([
+    {
+      paneKey: makePaneKey(tabs[0].id, FIXTURE_LEAF_IDS[0]),
+      payload: {
+        state: 'working',
+        prompt: 'Refactor the activity filters and keep the list responsive.',
+        agentType: 'codex',
+        model: 'gpt-5-codex',
+        toolName: 'Edit',
+        toolInput: 'activity-scope-filter.ts'
+      },
+      timing: { updatedAt: now - 12_000, stateStartedAt: now - 90_000 },
+      routing: { tabId: tabs[0].id, worktreeId: worktree.id, connectionId: null }
+    },
+    {
+      paneKey: makePaneKey(tabs[1].id, FIXTURE_LEAF_IDS[1]),
+      payload: {
+        state: 'waiting',
+        prompt: 'Review the new empty-state copy before merging.',
+        agentType: 'claude',
+        model: 'claude-sonnet-4',
+        lastAssistantMessage: 'The copy is ready for your review.'
+      },
+      timing: { updatedAt: now - 45_000, stateStartedAt: now - 120_000 },
+      routing: { tabId: tabs[1].id, worktreeId: worktree.id, connectionId: null }
+    },
+    {
+      paneKey: makePaneKey(tabs[2].id, FIXTURE_LEAF_IDS[2]),
+      payload: {
+        state: 'done',
+        prompt: 'Add a shortcut to focus the activity search field.',
+        agentType: 'codex',
+        model: 'gpt-5-codex',
+        lastAssistantMessage: 'Added the shortcut and covered it with a test.'
+      },
+      timing: { updatedAt: now - 5 * 60_000, stateStartedAt: now - 8 * 60_000 },
+      routing: { tabId: tabs[2].id, worktreeId: worktree.id, connectionId: null }
+    }
+  ])
+}
diff --git a/src/renderer/src/components/activity/event-time-clock-refresh.test.tsx b/src/renderer/src/components/activity/event-time-clock-refresh.test.tsx
new file mode 100644
index 00000000000..d0350fef867
--- /dev/null
+++ b/src/renderer/src/components/activity/event-time-clock-refresh.test.tsx
@@ -0,0 +1,54 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { TooltipProvider } from '@/components/ui/tooltip'
+
+const clock = vi.hoisted(() => ({ now: 1_000_000 }))
+
+vi.mock('@/hooks/use-now', () => ({
+  useNow: () => clock.now
+}))
+
+import { EventTime } from './activity-thread-controls'
+
+globalThis.IS_REACT_ACT_ENVIRONMENT = true
+
+describe('EventTime shared-clock refresh', () => {
+  let container: HTMLDivElement
+  let root: Root
+
+  beforeEach(() => {
+    container = document.createElement('div')
+    document.body.appendChild(container)
+    root = createRoot(container)
+  })
+
+  afterEach(() => {
+    act(() => root.unmount())
+    container.remove()
+    document.body.replaceChildren()
+  })
+
+  it('derives the label from the shared clock, not a frozen render-time Date.now()', () => {
+    // Why: memo'd rows no longer re-render on unrelated store writes, so the label
+    // must follow the injected clock or "2m" would freeze at whatever render saw.
+    const timestamp = clock.now - 2 * 60_000
+    const render = (): void => {
+      act(() => {
+        root.render(
+          <TooltipProvider>
+            <EventTime timestamp={timestamp} compact />
+          </TooltipProvider>
+        )
+      })
+    }
+    render()
+    expect(container.textContent).toContain('2m')
+
+    clock.now += 8 * 60_000
+    render()
+    expect(container.textContent).toContain('10m')
+  })
+})
diff --git a/src/renderer/src/components/activity/use-activity-thread-action-bindings.test.tsx b/src/renderer/src/components/activity/use-activity-thread-action-bindings.test.tsx
new file mode 100644
index 00000000000..ea21dc82cbf
--- /dev/null
+++ b/src/renderer/src/components/activity/use-activity-thread-action-bindings.test.tsx
@@ -0,0 +1,113 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { AgentPaneThread } from './activity-thread-types'
+
+const mocks = vi.hoisted(() => ({
+  clearCompletedActivity: vi.fn()
+}))
+
+vi.mock('./activity-clear-completed', () => ({
+  clearCompletedActivity: mocks.clearCompletedActivity,
+  // Done threads carry no live state; the null marker stands in for the real group-id predicate.
+  isClearableActivityThread: (thread: AgentPaneThread) => thread.currentAgentState === null
+}))
+
+vi.mock('@/store', () => ({ useAppStore: { getState: () => ({}) } }))
+
+import { useActivityThreadActionBindings } from './use-activity-thread-action-bindings'
+
+;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
+
+function makeThread(paneKey: string, overrides: Partial<AgentPaneThread> = {}): AgentPaneThread {
+  return { paneKey, unread: false, currentAgentState: 'working', ...overrides } as AgentPaneThread
+}
+
+type HookResult = ReturnType<typeof useActivityThreadActionBindings>
+
+let container: HTMLDivElement
+let root: Root
+let latest: HookResult | null
+
+function Probe(props: Parameters<typeof useActivityThreadActionBindings>[0]): null {
+  latest = useActivityThreadActionBindings(props)
+  return null
+}
+
+function renderProbe(props: Parameters<typeof useActivityThreadActionBindings>[0]): HookResult {
+  act(() => {
+    root.render(<Probe {...props} />)
+  })
+  if (!latest) {
+    throw new Error('hook did not render')
+  }
+  return latest
+}
+
+beforeEach(() => {
+  mocks.clearCompletedActivity.mockClear()
+  latest = null
+  container = document.createElement('div')
+  document.body.append(container)
+  root = createRoot(container)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  container.remove()
+})
+
+describe('useActivityThreadActionBindings', () => {
+  const acknowledgeAgents = vi.fn()
+  const baseProps = {
+    acknowledgeAgents,
+    unacknowledgeAgents: vi.fn(),
+    setSelectedPaneKey: vi.fn()
+  }
+
+  beforeEach(() => {
+    acknowledgeAgents.mockClear()
+  })
+
+  it('enables and applies Mark all read from the badge set, not the narrowed visible set', () => {
+    const hiddenUnread = makeThread('tab-1:hidden', { unread: true })
+    const bindings = renderProbe({
+      ...baseProps,
+      // Search/scope narrowing hid the only unread thread from the list…
+      visibleThreads: [makeThread('tab-2:read')],
+      // …but it is still in the badge-coherent set, so it must stay clearable.
+      markAllReadThreads: [makeThread('tab-2:read'), hiddenUnread]
+    })
+
+    expect(bindings.hasUnreadThreads).toBe(true)
+    bindings.markAllThreadsRead()
+    expect(acknowledgeAgents).toHaveBeenCalledWith([hiddenUnread.paneKey])
+  })
+
+  it('clears completed strictly from the visible set', () => {
+    const visibleDone = makeThread('tab-1:done', { currentAgentState: null })
+    const hiddenDone = makeThread('tab-2:hidden-done', { currentAgentState: null })
+    const bindings = renderProbe({
+      ...baseProps,
+      visibleThreads: [visibleDone],
+      markAllReadThreads: [visibleDone, hiddenDone]
+    })
+
+    expect(bindings.hasCompletedThreads).toBe(true)
+    bindings.handleClearCompleted()
+    expect(mocks.clearCompletedActivity).toHaveBeenCalledWith([visibleDone])
+  })
+
+  it('disables clear-completed when completions are only outside the visible set', () => {
+    const hiddenDone = makeThread('tab-2:hidden-done', { currentAgentState: null })
+    const bindings = renderProbe({
+      ...baseProps,
+      visibleThreads: [makeThread('tab-1:working')],
+      markAllReadThreads: [makeThread('tab-1:working'), hiddenDone]
+    })
+
+    expect(bindings.hasCompletedThreads).toBe(false)
+  })
+})
diff --git a/src/renderer/src/components/activity/use-activity-thread-action-bindings.ts b/src/renderer/src/components/activity/use-activity-thread-action-bindings.ts
new file mode 100644
index 00000000000..0004db75737
--- /dev/null
+++ b/src/renderer/src/components/activity/use-activity-thread-action-bindings.ts
@@ -0,0 +1,71 @@
+import { useCallback, useEffect, useMemo, useRef } from 'react'
+import { clearCompletedActivity, isClearableActivityThread } from './activity-clear-completed'
+import { createActivityThreadActions } from './activity-thread-actions'
+import type { AgentPaneThread } from './activity-thread-types'
+
+type ActivityThreadActionBindings = {
+  markThreadRead: (thread: AgentPaneThread) => void
+  markThreadUnread: (thread: AgentPaneThread) => void
+  selectThread: (thread: AgentPaneThread) => void
+  jumpToWorkspace: (thread: AgentPaneThread) => void
+  markAllThreadsRead: () => void
+  hasUnreadThreads: boolean
+  hasCompletedThreads: boolean
+  handleClearCompleted: () => void
+}
+
+/**
+ * Bulk-action wiring shared by the sidebar Agents list and the full Activity
+ * page, so their semantics can never drift apart:
+ * - Mark all read acts on the badge-coherent set (`markAllReadThreads`), so the
+ *   Agents-tab badge always reaches zero even when search/scope hides rows.
+ * - Clear completed is destructive and acts only on `visibleThreads` — never on
+ *   rows the user cannot currently see.
+ */
+export function useActivityThreadActionBindings({
+  visibleThreads,
+  markAllReadThreads,
+  acknowledgeAgents,
+  unacknowledgeAgents,
+  setSelectedPaneKey
+}: {
+  visibleThreads: AgentPaneThread[]
+  markAllReadThreads: AgentPaneThread[]
+  acknowledgeAgents: (paneKeys: string[]) => void
+  unacknowledgeAgents: (paneKeys: string[]) => void
+  setSelectedPaneKey: (paneKey: string | null) => void
+}): ActivityThreadActionBindings {
+  // Why refs: rows are React.memo'd on these handlers; recreating them whenever a
+  // thread array identity changes (every status ping) would re-render every mounted row.
+  const visibleThreadsRef = useRef(visibleThreads)
+  const markAllReadThreadsRef = useRef(markAllReadThreads)
+  useEffect(() => {
+    visibleThreadsRef.current = visibleThreads
+    markAllReadThreadsRef.current = markAllReadThreads
+  }, [visibleThreads, markAllReadThreads])
+
+  const actions = useMemo(
+    () =>
+      createActivityThreadActions({
+        getMarkAllReadThreads: () => markAllReadThreadsRef.current,
+        acknowledgeAgents,
+        unacknowledgeAgents,
+        setSelectedPaneKey
+      }),
+    [acknowledgeAgents, unacknowledgeAgents, setSelectedPaneKey]
+  )
+
+  const hasUnreadThreads = useMemo(
+    () => markAllReadThreads.some((t) => t.unread),
+    [markAllReadThreads]
+  )
+  const hasCompletedThreads = useMemo(
+    () => visibleThreads.some(isClearableActivityThread),
+    [visibleThreads]
+  )
+  const handleClearCompleted = useCallback(() => {
+    clearCompletedActivity(visibleThreadsRef.current)
+  }, [])
+
+  return { ...actions, hasUnreadThreads, hasCompletedThreads, handleClearCompleted }
+}
diff --git a/src/renderer/src/components/activity/use-agent-pane-threads.ts b/src/renderer/src/components/activity/use-agent-pane-threads.ts
new file mode 100644
index 00000000000..01eb0475a02
--- /dev/null
+++ b/src/renderer/src/components/activity/use-agent-pane-threads.ts
@@ -0,0 +1,264 @@
+import { useDeferredValue, useMemo, useRef } from 'react'
+import { useShallow } from 'zustand/react/shallow'
+import { useAppStore } from '@/store'
+import { getRepoMapFromState, getWorktreeMapFromState } from '@/store/selectors'
+import type { AppState } from '@/store/types'
+import {
+  getSettingsFocusedExecutionHostId,
+  type ExecutionHostId
+} from '../../../../shared/execution-host'
+import { buildActivityEvents, createActivityEventBuildCache } from './activity-event-builder'
+import { projectActivityTabs, type ActivityTabProjection } from './activity-tab-projection'
+import { buildAgentPaneThreads, createAgentPaneThreadReuseCache } from './activity-thread-builder'
+import { collectChildAgentPaneKeys } from './activity-thread-child-agent'
+
+const EMPTY_PANE_KEYS: ReadonlySet<string> = new Set()
+import { filterThreadsByActivityScope, resolveActivityScopeRepoIds } from './activity-scope-filter'
+import {
+  activityThreadMatchesSearchQuery,
+  buildActivityThreadGroups,
+  isActivitySearchQueryTooLarge
+} from './activity-thread-grouping'
+import type {
+  ActivityGroupBy,
+  ActivityThreadGroup,
+  AgentPaneThread,
+  ThreadReadFilter
+} from './activity-thread-types'
+
+export type AgentPaneThreadsStoreData = Pick<
+  AppState,
+  | 'agentStatusByPaneKey'
+  | 'runtimeAgentOrchestrationByPaneKey'
+  | 'migrationUnsupportedByPtyId'
+  | 'retainedAgentsByPaneKey'
+  | 'tabsByWorktree'
+  | 'repos'
+  | 'worktreesByRepo'
+  | 'folderWorkspaces'
+  | 'detectedWorktreesByRepo'
+  | 'getKnownWorktreeById'
+  | 'acknowledgedAgentsByPaneKey'
+  | 'activityClearedAtByPaneKey'
+  | 'acknowledgeAgents'
+  | 'unacknowledgeAgents'
+> & {
+  /** Terminal and agent-session tabs only, identity-stable across focus writes. */
+  activityTabs: ActivityTabProjection
+  worktreeMap: ReturnType<typeof getWorktreeMapFromState>
+  repoMap: ReturnType<typeof getRepoMapFromState>
+  generatedTitlesEnabled: boolean
+  /** Focused-host fallback for hostless worktrees, shared by the scope filter and the row actions. */
+  defaultHostId: ExecutionHostId
+}
+
+/** The Activity thread pipeline (store read -> events -> threads -> filter ->
+ *  groups), shared by the Activity page and the sidebar agents list. */
+export function useAgentPaneThreads(args: {
+  query: string
+  readFilter: ThreadReadFilter
+  groupBy: ActivityGroupBy
+  selectedPaneKey: string | null
+  showChildAgents?: boolean
+}): {
+  storeData: AgentPaneThreadsStoreData
+  allThreads: AgentPaneThread[]
+  selectedPaneKeyIsLive: boolean
+  effectiveSelectedPaneKey: string | null
+  /** Threads shown after every active filter; Clear completed operates on exactly
+   *  this set so it never destroys rows the user cannot see. */
+  visibleThreads: AgentPaneThread[]
+  /** Threads after the child-agent classification only — the set the Agents-tab
+   *  badge counts and Mark all read clears; transient search/scope/read narrowing
+   *  is ignored so the badge is always clearable. */
+  markAllReadThreads: AgentPaneThread[]
+  visibleThreadGroups: ActivityThreadGroup[]
+} {
+  const { query, readFilter, groupBy, selectedPaneKey, showChildAgents = false } = args
+  const agentsVisibleHostIds = useAppStore((s) => s.agentsVisibleHostIds)
+  const agentsFilterRepoIds = useAppStore((s) => s.agentsFilterRepoIds)
+  // Why project: the unified tab map is rewritten on every tab focus; the projection keeps
+  // its identity (and each tab's) unless a field this pipeline reads actually changed.
+  const tabProjectionRef = useRef<{
+    raw: AppState['unifiedTabsByWorktree'] | null
+    projected: ActivityTabProjection | null
+  }>({ raw: null, projected: null })
+  const storeData = useAppStore(
+    useShallow((s) => ({
+      agentStatusByPaneKey: s.agentStatusByPaneKey,
+      runtimeAgentOrchestrationByPaneKey: s.runtimeAgentOrchestrationByPaneKey,
+      migrationUnsupportedByPtyId: s.migrationUnsupportedByPtyId,
+      retainedAgentsByPaneKey: s.retainedAgentsByPaneKey,
+      tabsByWorktree: s.tabsByWorktree,
+      activityTabs: (() => {
+        const cache = tabProjectionRef.current
+        if (cache.raw === s.unifiedTabsByWorktree && cache.projected) {
+          return cache.projected
+        }
+        const projected = projectActivityTabs(s.unifiedTabsByWorktree, cache.projected)
+        tabProjectionRef.current = { raw: s.unifiedTabsByWorktree, projected }
+        return projected
+      })(),
+      repos: s.repos,
+      worktreesByRepo: s.worktreesByRepo,
+      folderWorkspaces: s.folderWorkspaces,
+      detectedWorktreesByRepo: s.detectedWorktreesByRepo,
+      getKnownWorktreeById: s.getKnownWorktreeById,
+      worktreeMap: getWorktreeMapFromState(s),
+      repoMap: getRepoMapFromState(s),
+      acknowledgedAgentsByPaneKey: s.acknowledgedAgentsByPaneKey,
+      activityClearedAtByPaneKey: s.activityClearedAtByPaneKey,
+      acknowledgeAgents: s.acknowledgeAgents,
+      unacknowledgeAgents: s.unacknowledgeAgents,
+      generatedTitlesEnabled: s.settings?.tabAutoGenerateTitle === true,
+      defaultHostId: getSettingsFocusedExecutionHostId(s.settings)
+    }))
+  )
+  // Why: agentStatusEpoch is a dep (not used in the body) so the memo recomputes when freshness boundaries expire even without new PTY data.
+  const agentStatusEpoch = useAppStore((s) => s.agentStatusEpoch)
+
+  // Why per-hook caches: unchanged panes keep their exact event/snapshot/thread object
+  // identities across rebuilds, so a status write to one agent leaves every other row's
+  // memo bail-out and cached search text intact. Rebuilds are deterministic, so a repeated
+  // (StrictMode/deferred) memo invocation returns identical objects from the cache.
+  const eventBuildCacheRef = useRef(createActivityEventBuildCache())
+  const threadReuseCacheRef = useRef(createAgentPaneThreadReuseCache())
+
+  const { events: allEvents, liveAgentByPaneKey } = useMemo(
+    () =>
+      buildActivityEvents(
+        {
+          agentStatusByPaneKey: storeData.agentStatusByPaneKey,
+          runtimeAgentOrchestrationByPaneKey: storeData.runtimeAgentOrchestrationByPaneKey,
+          migrationUnsupportedByPtyId: storeData.migrationUnsupportedByPtyId,
+          retainedAgentsByPaneKey: storeData.retainedAgentsByPaneKey,
+          tabsByWorktree: storeData.tabsByWorktree,
+          unifiedTabsByWorktree: storeData.activityTabs,
+          worktreeMap: storeData.worktreeMap,
+          repoMap: storeData.repoMap,
+          repos: storeData.repos,
+          resolveWorktree: storeData.getKnownWorktreeById,
+          acknowledgedAgentsByPaneKey: storeData.acknowledgedAgentsByPaneKey,
+          activityClearedAtByPaneKey: storeData.activityClearedAtByPaneKey,
+          // Why: Date.now() is read in the memo body (not a dep) so stale-decay recomputes when agentStatusEpoch ticks, not on wall-clock time.
+          now: Date.now()
+        },
+        eventBuildCacheRef.current
+      ),
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    [storeData, agentStatusEpoch]
+  )
+
+  const allThreads = useMemo(
+    () =>
+      buildAgentPaneThreads(
+        {
+          events: allEvents,
+          liveAgentByPaneKey,
+          generatedTitlesEnabled: storeData.generatedTitlesEnabled
+        },
+        threadReuseCacheRef.current
+      ),
+    [allEvents, liveAgentByPaneKey, storeData.generatedTitlesEnabled]
+  )
+
+  const selectedPaneKeyIsLive =
+    selectedPaneKey === null || allThreads.some((thread) => thread.paneKey === selectedPaneKey)
+  const effectiveSelectedPaneKey = selectedPaneKeyIsLive ? selectedPaneKey : null
+
+  // Why scope runs before the per-view filters: host/project scope must stay separate
+  // from unread/search narrowing.
+  const { threads: scopeVisibleThreads } = useMemo(
+    () =>
+      filterThreadsByActivityScope({
+        threads: allThreads,
+        scope: {
+          visibleHostIds: agentsVisibleHostIds,
+          filterRepoIds: resolveActivityScopeRepoIds(agentsFilterRepoIds, storeData.repoMap),
+          defaultHostId: storeData.defaultHostId
+        },
+        exemptPaneKey: effectiveSelectedPaneKey
+      }),
+    [
+      allThreads,
+      agentsVisibleHostIds,
+      agentsFilterRepoIds,
+      storeData.repoMap,
+      storeData.defaultHostId,
+      effectiveSelectedPaneKey
+    ]
+  )
+
+  // Why over allThreads (not the scoped list): child classification asks whether the
+  // parent pane still exists at all, and a scope filter hiding the parent must not
+  // reclassify its workers as orphans.
+  // Skipped entirely when children are shown: nothing reads the set then.
+  const childAgentPaneKeys = useMemo(
+    () => (showChildAgents ? EMPTY_PANE_KEYS : collectChildAgentPaneKeys(allThreads)),
+    [allThreads, showChildAgents]
+  )
+
+  // Why deferred: filtering hundreds of threads is interruptible background work; the input
+  // echoes the keystroke at full priority while the list catches up on the deferred value.
+  const deferredQuery = useDeferredValue(query)
+  const visibleThreads = useMemo(() => {
+    const normalizedQuery = isActivitySearchQueryTooLarge(deferredQuery)
+      ? null
+      : deferredQuery.trim().toLowerCase()
+    return scopeVisibleThreads.filter((thread) => {
+      // Why: keep the just-selected thread visible after auto-mark-read flips it to read, else unread-only mode makes the clicked row vanish from the list.
+      if (
+        readFilter === 'unread' &&
+        !thread.unread &&
+        thread.paneKey !== effectiveSelectedPaneKey
+      ) {
+        return false
+      }
+      // Why: child agents (e.g. dispatched orchestration workers) are hidden by default to keep top-level agent views focused on root tasks.
+      if (
+        !showChildAgents &&
+        childAgentPaneKeys.has(thread.paneKey) &&
+        thread.paneKey !== effectiveSelectedPaneKey
+      ) {
+        return false
+      }
+      if (normalizedQuery === null) {
+        return false
+      }
+      return activityThreadMatchesSearchQuery({ thread, searchQuery: normalizedQuery })
+    })
+  }, [
+    scopeVisibleThreads,
+    readFilter,
+    deferredQuery,
+    effectiveSelectedPaneKey,
+    showChildAgents,
+    childAgentPaneKeys
+  ])
+
+  const markAllReadThreads = useMemo(
+    () =>
+      allThreads.filter(
+        (thread) =>
+          showChildAgents ||
+          !childAgentPaneKeys.has(thread.paneKey) ||
+          thread.paneKey === effectiveSelectedPaneKey
+      ),
+    [allThreads, showChildAgents, childAgentPaneKeys, effectiveSelectedPaneKey]
+  )
+
+  const visibleThreadGroups = useMemo(
+    () => buildActivityThreadGroups(visibleThreads, groupBy),
+    [visibleThreads, groupBy]
+  )
+
+  return {
+    storeData,
+    allThreads,
+    selectedPaneKeyIsLive,
+    effectiveSelectedPaneKey,
+    visibleThreads,
+    markAllReadThreads,
+    visibleThreadGroups
+  }
+}
diff --git a/src/renderer/src/components/activity/useActivityUnreadCount.test.ts b/src/renderer/src/components/activity/useActivityUnreadCount.test.ts
index 5c28a132762..62c423ce1bd 100644
--- a/src/renderer/src/components/activity/useActivityUnreadCount.test.ts
+++ b/src/renderer/src/components/activity/useActivityUnreadCount.test.ts
@@ -22,29 +22,26 @@ function makeSource(entry: AgentStatusEntry, ackAt = 0) {
     acknowledgedAgentsByPaneKey: { [PANE]: ackAt },
     agentStatusByPaneKey: { [PANE]: entry },
     migrationUnsupportedByPtyId: {},
-    retainedAgentsByPaneKey: {},
-    worktreesByRepo: {}
+    retainedAgentsByPaneKey: {}
   }
 }
 
 describe('countActivityUnread session-boundary rows (STA-3386)', () => {
-  it('does not count a session-boundary done as unread in either mode', () => {
+  it('does not count a session-boundary done as unread', () => {
     const source = makeSource(makeEntry({ sessionBoundary: true }))
-    expect(countActivityUnread(source, 'sidebar-badge')).toBe(0)
-    expect(countActivityUnread(source, 'agent-events')).toBe(0)
+    expect(countActivityUnread(source)).toBe(0)
   })
 
   it('keeps counting a real completion displaced into history by a session boundary', () => {
     // Why: agent finished (unacknowledged), then the user resumed the session — the
-    // boundary row replaces the live done but the finish must stay unread in both badges.
+    // boundary row replaces the live done but the finish must stay unread.
     const source = makeSource(
       makeEntry({
         sessionBoundary: true,
         stateHistory: [{ state: 'done', prompt: 'fix bug', startedAt: 1_000 }]
       })
     )
-    expect(countActivityUnread(source, 'sidebar-badge')).toBe(1)
-    expect(countActivityUnread(source, 'agent-events')).toBe(1)
+    expect(countActivityUnread(source)).toBe(1)
   })
 
   it('stops counting the displaced completion once acknowledged', () => {
@@ -55,12 +52,60 @@ describe('countActivityUnread session-boundary rows (STA-3386)', () => {
       }),
       1_500
     )
-    expect(countActivityUnread(source, 'sidebar-badge')).toBe(0)
-    expect(countActivityUnread(source, 'agent-events')).toBe(0)
+    expect(countActivityUnread(source)).toBe(0)
   })
 
-  it('still counts an ordinary unacknowledged done in sidebar-badge mode', () => {
+  it('still counts an ordinary unacknowledged done', () => {
     const source = makeSource(makeEntry({}))
-    expect(countActivityUnread(source, 'sidebar-badge')).toBe(1)
+    expect(countActivityUnread(source)).toBe(1)
+  })
+})
+
+describe('countActivityUnread with Clear completed cutoffs', () => {
+  it('does not count events hidden by the pane cutoff', () => {
+    const source = {
+      ...makeSource(
+        makeEntry({
+          stateHistory: [{ state: 'done', prompt: 'older run', startedAt: 1_000 }]
+        })
+      ),
+      activityClearedAtByPaneKey: { [PANE]: 2_000 }
+    }
+    // Both the history event (1_000) and the live done (2_000) are at or before the cutoff.
+    expect(countActivityUnread(source)).toBe(0)
+  })
+
+  it('keeps counting turns newer than the cutoff', () => {
+    const source = {
+      ...makeSource(
+        makeEntry({
+          stateStartedAt: 3_000,
+          stateHistory: [{ state: 'done', prompt: 'older run', startedAt: 1_000 }]
+        })
+      ),
+      activityClearedAtByPaneKey: { [PANE]: 2_000 }
+    }
+    expect(countActivityUnread(source)).toBe(1)
+  })
+})
+
+describe('countActivityUnread source overlap', () => {
+  it('counts an overlapping live and retained pane only once', () => {
+    const entry = makeEntry({})
+    const source = {
+      acknowledgedAgentsByPaneKey: { [PANE]: 0 },
+      agentStatusByPaneKey: { [PANE]: entry },
+      retainedAgentsByPaneKey: {
+        [PANE]: {
+          entry,
+          worktreeId: 'wt-1',
+          tab: {} as never,
+          agentType: 'claude',
+          startedAt: 1_000
+        }
+      },
+      migrationUnsupportedByPtyId: {}
+    }
+    expect(countActivityUnread(source)).toBe(1)
   })
 })
diff --git a/src/renderer/src/components/activity/useActivityUnreadCount.ts b/src/renderer/src/components/activity/useActivityUnreadCount.ts
index 91b51c4455e..3a3074d24e9 100644
--- a/src/renderer/src/components/activity/useActivityUnreadCount.ts
+++ b/src/renderer/src/components/activity/useActivityUnreadCount.ts
@@ -12,85 +12,60 @@ type ActivityUnreadCountSource = Pick<
   | 'agentStatusByPaneKey'
   | 'migrationUnsupportedByPtyId'
   | 'retainedAgentsByPaneKey'
-  | 'worktreesByRepo'
->
-
-type ActivityUnreadCountMode = 'agent-events' | 'sidebar-badge'
-
-const EMPTY_WORKTREES_BY_REPO: AppState['worktreesByRepo'] = {}
-const EMPTY_MIGRATION_UNSUPPORTED: AppState['migrationUnsupportedByPtyId'] = {}
-const EMPTY_RETAINED_AGENTS: AppState['retainedAgentsByPaneKey'] = {}
-const EMPTY_ACKNOWLEDGED_AGENTS: AppState['acknowledgedAgentsByPaneKey'] = {}
-
-const DISABLED_ACTIVITY_UNREAD_INPUTS = {
-  sortEpoch: 0,
-  worktreesByRepo: EMPTY_WORKTREES_BY_REPO,
-  migrationUnsupportedByPtyId: EMPTY_MIGRATION_UNSUPPORTED,
-  retainedAgentsByPaneKey: EMPTY_RETAINED_AGENTS,
-  acknowledgedAgentsByPaneKey: EMPTY_ACKNOWLEDGED_AGENTS
+> & {
+  /** Per-pane "Clear completed" cutoffs; hidden events must not count as unread. */
+  activityClearedAtByPaneKey?: Record<string, number>
 }
 
 function isUnreadAgentState(state: AgentStatusState): boolean {
   return state === 'done' || state === 'blocked' || state === 'waiting'
 }
 
-export function countActivityUnread(
-  source: ActivityUnreadCountSource,
-  mode: ActivityUnreadCountMode
-): number {
+/** Counts unread done/blocked/waiting events for the Activity page titlebar badge. */
+export function countActivityUnread(source: ActivityUnreadCountSource): number {
   let count = 0
+  const seenPaneKeys = new Set<string>()
 
-  if (mode === 'sidebar-badge') {
-    for (const worktrees of Object.values(source.worktreesByRepo)) {
-      for (const worktree of worktrees) {
-        if (worktree.createdAt && worktree.isUnread) {
-          count += 1
-        }
-      }
-    }
-  }
-
+  // Why no worktree.isUnread here: Activity lists only agent threads, so a worktree
+  // unread would light a badge with no row to read and no way to clear it.
   const countEntry = (entry: AgentStatusEntry, ackAt: number): void => {
-    if (mode === 'agent-events') {
-      // Why: Activity feed surfaces historical done/blocked/waiting events
-      // from stateHistory, so the titlebar badge must mirror that event count.
-      for (const history of entry.stateHistory) {
-        if (isUnreadAgentState(history.state) && ackAt < history.startedAt) {
-          count += 1
-        }
+    // Why: "Clear completed" hides events at or before the pane's cutoff from the feed,
+    // so a hidden event must not keep the badge lit; treat the cutoff like an ack floor.
+    const clearedAt = source.activityClearedAtByPaneKey?.[entry.paneKey] ?? 0
+    const mutedAt = Math.max(ackAt, clearedAt)
+    // Why: Activity feed surfaces historical done/blocked/waiting events
+    // from stateHistory, so the titlebar badge must mirror that event count.
+    for (const history of entry.stateHistory) {
+      if (isUnreadAgentState(history.state) && mutedAt < history.startedAt) {
+        count += 1
       }
     }
     // Why: a session-boundary done is an idle connect (STA-3386), not an event to read.
-    // History never contains a boundary, but it DOES keep the real completion a boundary
-    // displaced (the slice pushes it on done→done), so sidebar-badge mode — which skips the
-    // history loop above — must still count that displaced completion or the badge silently
-    // drops an unacknowledged finish the moment its session is resumed.
     if (
       isUnreadAgentState(entry.state) &&
       entry.sessionBoundary !== true &&
-      ackAt < entry.stateStartedAt
+      mutedAt < entry.stateStartedAt
     ) {
       count += 1
-    } else if (mode === 'sidebar-badge' && entry.state === 'done' && entry.sessionBoundary) {
-      const displaced = entry.stateHistory.at(-1)
-      if (displaced && isUnreadAgentState(displaced.state) && ackAt < displaced.startedAt) {
-        count += 1
-      }
     }
   }
 
   for (const [paneKey, entry] of Object.entries(source.agentStatusByPaneKey)) {
+    seenPaneKeys.add(paneKey)
     countEntry(entry, source.acknowledgedAgentsByPaneKey[paneKey] ?? 0)
   }
   for (const [paneKey, retained] of Object.entries(source.retainedAgentsByPaneKey)) {
-    if (mode === 'sidebar-badge' && retained.entry.state !== 'done') {
+    // Live status is the primary source; retained is a handoff cache and may briefly overlap it.
+    if (seenPaneKeys.has(paneKey)) {
       continue
     }
+    seenPaneKeys.add(paneKey)
     countEntry(retained.entry, source.acknowledgedAgentsByPaneKey[paneKey] ?? 0)
   }
   for (const unsupported of Object.values(source.migrationUnsupportedByPtyId)) {
     const entry = migrationUnsupportedToAgentStatusEntry(unsupported)
-    if (entry) {
+    if (entry && !seenPaneKeys.has(entry.paneKey)) {
+      seenPaneKeys.add(entry.paneKey)
       countEntry(entry, source.acknowledgedAgentsByPaneKey[entry.paneKey] ?? 0)
     }
   }
@@ -98,53 +73,40 @@ export function countActivityUnread(
   return count
 }
 
-export function useActivityUnreadCount(enabled: boolean, mode: ActivityUnreadCountMode): number {
+export function useActivityUnreadCount(): number {
   const {
     sortEpoch,
-    worktreesByRepo,
     migrationUnsupportedByPtyId,
     retainedAgentsByPaneKey,
-    acknowledgedAgentsByPaneKey
+    acknowledgedAgentsByPaneKey,
+    activityClearedAtByPaneKey
   } = useAppStore(
-    useShallow((state) => {
-      if (!enabled) {
-        return DISABLED_ACTIVITY_UNREAD_INPUTS
-      }
-      return {
-        // Why: live status prompt/tool updates churn agentStatusByPaneKey but
-        // cannot change unread count unless a sort-relevant state transition
-        // or removal occurred. sortEpoch is the cheap invalidation signal.
-        sortEpoch: state.sortEpoch,
-        worktreesByRepo: state.worktreesByRepo,
-        migrationUnsupportedByPtyId: state.migrationUnsupportedByPtyId,
-        retainedAgentsByPaneKey: state.retainedAgentsByPaneKey,
-        acknowledgedAgentsByPaneKey: state.acknowledgedAgentsByPaneKey
-      }
-    })
+    useShallow((state) => ({
+      // Why: live status prompt/tool updates churn agentStatusByPaneKey but
+      // cannot change unread count unless a sort-relevant state transition
+      // or removal occurred. sortEpoch is the cheap invalidation signal.
+      sortEpoch: state.sortEpoch,
+      migrationUnsupportedByPtyId: state.migrationUnsupportedByPtyId,
+      retainedAgentsByPaneKey: state.retainedAgentsByPaneKey,
+      acknowledgedAgentsByPaneKey: state.acknowledgedAgentsByPaneKey,
+      activityClearedAtByPaneKey: state.activityClearedAtByPaneKey
+    }))
   )
 
   return useMemo(() => {
-    if (!enabled) {
-      return 0
-    }
     void sortEpoch
-    return countActivityUnread(
-      {
-        agentStatusByPaneKey: useAppStore.getState().agentStatusByPaneKey,
-        migrationUnsupportedByPtyId,
-        retainedAgentsByPaneKey,
-        worktreesByRepo,
-        acknowledgedAgentsByPaneKey
-      },
-      mode
-    )
+    return countActivityUnread({
+      agentStatusByPaneKey: useAppStore.getState().agentStatusByPaneKey,
+      migrationUnsupportedByPtyId,
+      retainedAgentsByPaneKey,
+      acknowledgedAgentsByPaneKey,
+      activityClearedAtByPaneKey
+    })
   }, [
     acknowledgedAgentsByPaneKey,
-    enabled,
+    activityClearedAtByPaneKey,
     migrationUnsupportedByPtyId,
-    mode,
     retainedAgentsByPaneKey,
-    sortEpoch,
-    worktreesByRepo
+    sortEpoch
   ])
 }
diff --git a/src/renderer/src/components/dashboard/agent-row-lineage-model.ts b/src/renderer/src/components/dashboard/agent-row-lineage-model.ts
index cb1cf336346..bcac6ddfd4b 100644
--- a/src/renderer/src/components/dashboard/agent-row-lineage-model.ts
+++ b/src/renderer/src/components/dashboard/agent-row-lineage-model.ts
@@ -1,12 +1,19 @@
-import type { DashboardAgentRow } from './useDashboardData'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
 
-export type AgentRowLineageTree<T extends DashboardAgentRow> = {
+/** Minimal row shape the lineage rules need; DashboardAgentRow satisfies it,
+ *  and other surfaces (e.g. the Agents thread list) can feed synthetic rows. */
+export type AgentLineageSourceRow = {
+  paneKey: string
+  entry: Pick<AgentStatusEntry, 'terminalHandle' | 'orchestration'>
+}
+
+export type AgentRowLineageTree<T extends AgentLineageSourceRow> = {
   rootRows: T[]
   childrenByParentPaneKey: Map<string, T[]>
   childPaneKeys: Set<string>
 }
 
-function buildPaneKeyByTerminalHandle<T extends DashboardAgentRow>(
+function buildPaneKeyByTerminalHandle<T extends AgentLineageSourceRow>(
   rows: readonly T[]
 ): Map<string, string> {
   const paneKeyByTerminalHandle = new Map<string, string>()
@@ -18,7 +25,7 @@ function buildPaneKeyByTerminalHandle<T extends DashboardAgentRow>(
   return paneKeyByTerminalHandle
 }
 
-export function resolveAgentRowParentPaneKey<T extends DashboardAgentRow>(
+export function resolveAgentRowParentPaneKey<T extends AgentLineageSourceRow>(
   row: T,
   rowsByPaneKey: ReadonlyMap<string, T>,
   paneKeyByTerminalHandle: ReadonlyMap<string, string>
@@ -48,7 +55,7 @@ export function resolveAgentRowParentPaneKey<T extends DashboardAgentRow>(
   return undefined
 }
 
-export function buildAgentRowLineageTree<T extends DashboardAgentRow>(
+export function buildAgentRowLineageTree<T extends AgentLineageSourceRow>(
   rows: readonly T[]
 ): AgentRowLineageTree<T> {
   const rowsByPaneKey = new Map<string, T>()
diff --git a/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.cache.test.ts b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.cache.test.ts
new file mode 100644
index 00000000000..31aa10458f0
--- /dev/null
+++ b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.cache.test.ts
@@ -0,0 +1,190 @@
+import { describe, expect, it } from 'vitest'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import { makePaneKey } from '../../../../shared/stable-pane-id'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+import type { DashboardSnapshotState } from './build-dashboard-snapshot'
+import {
+  buildDashboardBucketCounts,
+  createDashboardBucketCountsCache
+} from './build-dashboard-bucket-counts'
+
+const NOW = 1_000_000_000
+// Freshness decay boundaries are exercised via generation bumps; the exact stale
+// window belongs to the shared agent-status constants.
+const AGENT_STALE_STEP = 60_000
+const LEAF_1 = '11111111-1111-4111-8111-111111111111'
+const LEAF_2 = '22222222-2222-4222-8222-222222222222'
+const PANE_1 = makePaneKey('tab1', LEAF_1)
+const PANE_2 = makePaneKey('tab2', LEAF_2)
+
+function worktree(id: string): Worktree {
+  return {
+    id,
+    repoId: 'r1',
+    path: `/r1/${id}`,
+    head: 'abc123',
+    branch: 'main',
+    isBare: false,
+    isMainWorktree: false,
+    displayName: id,
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: NOW
+  }
+}
+
+function tab(id: string, worktreeId: string): TerminalTab {
+  return {
+    id,
+    ptyId: `pty-${id}`,
+    worktreeId,
+    title: 'shell',
+    customTitle: null,
+    color: null,
+    sortOrder: 0,
+    createdAt: NOW
+  }
+}
+
+function entry(paneKey: string, tabId: string, worktreeId: string): AgentStatusEntry {
+  return {
+    paneKey,
+    state: 'working',
+    prompt: 'do the thing',
+    updatedAt: NOW,
+    stateStartedAt: NOW - 5_000,
+    stateHistory: [],
+    agentType: 'claude',
+    tabId,
+    worktreeId
+  }
+}
+
+function baseState(): DashboardSnapshotState {
+  return {
+    repos: [{ id: 'r1', path: '/r1', displayName: 'Repo One', badgeColor: '#000', addedAt: 1 }],
+    worktreesByRepo: { r1: [worktree('w1'), worktree('w2')] },
+    tabsByWorktree: { w1: [tab('tab1', 'w1')], w2: [tab('tab2', 'w2')] },
+    agentStatusByPaneKey: {
+      [PANE_1]: entry(PANE_1, 'tab1', 'w1'),
+      [PANE_2]: entry(PANE_2, 'tab2', 'w2')
+    },
+    retainedAgentsByPaneKey: {},
+    migrationUnsupportedByPtyId: {},
+    runtimeAgentOrchestrationByPaneKey: {},
+    terminalLayoutsByTabId: {
+      tab1: {
+        root: { type: 'leaf', leafId: LEAF_1 },
+        activeLeafId: LEAF_1,
+        expandedLeafId: null,
+        ptyIdsByLeafId: { [LEAF_1]: 'pty-tab1' }
+      },
+      tab2: {
+        root: { type: 'leaf', leafId: LEAF_2 },
+        activeLeafId: LEAF_2,
+        expandedLeafId: null,
+        ptyIdsByLeafId: { [LEAF_2]: 'pty-tab2' }
+      }
+    },
+    ptyIdsByTabId: { tab1: ['pty-tab1'], tab2: ['pty-tab2'] },
+    runtimePaneTitlesByTabId: { tab1: { 0: 'shell' }, tab2: { 0: 'shell' } },
+    acknowledgedAgentsByPaneKey: {},
+    settings: null
+  }
+}
+
+describe('buildDashboardBucketCounts per-worktree cache', () => {
+  it('computes every worktree on the first call and none when nothing changed', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = baseState()
+    const first = buildDashboardBucketCounts(state, NOW, cache, 1)
+    expect(cache.lastComputedWorktreeIds.sort()).toEqual(['w1', 'w2'])
+    expect(first.working).toBe(2)
+
+    const second = buildDashboardBucketCounts(state, NOW + 1_000, cache, 1)
+    expect(cache.lastComputedWorktreeIds).toEqual([])
+    expect(second).toEqual(first)
+  })
+
+  it('recomputes only the worktree affected by an unrelated title write', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = baseState()
+    buildDashboardBucketCounts(state, NOW, cache, 1)
+
+    // A pane-title frame for w2's tab: new top-level map identity, only tab2 changed.
+    const next: DashboardSnapshotState = {
+      ...state,
+      runtimePaneTitlesByTabId: { ...state.runtimePaneTitlesByTabId, tab2: { 0: 'sh' } }
+    }
+    const counts = buildDashboardBucketCounts(next, NOW + 500, cache, 1)
+    expect(cache.lastComputedWorktreeIds).toEqual(['w2'])
+    // Correctness: identical to a cold, uncached run over the same state.
+    expect(counts).toEqual(buildDashboardBucketCounts(next, NOW + 500))
+  })
+
+  it('recomputes only the worktree affected by a status write', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = baseState()
+    buildDashboardBucketCounts(state, NOW, cache, 1)
+
+    const next: DashboardSnapshotState = {
+      ...state,
+      agentStatusByPaneKey: {
+        ...state.agentStatusByPaneKey,
+        [PANE_1]: { ...entry(PANE_1, 'tab1', 'w1'), prompt: 'new streamed prompt' }
+      }
+    }
+    const counts = buildDashboardBucketCounts(next, NOW + 500, cache, 1)
+    expect(cache.lastComputedWorktreeIds).toEqual(['w1'])
+    expect(counts).toEqual(buildDashboardBucketCounts(next, NOW + 500))
+  })
+
+  it('recomputes every worktree when the freshness generation changes', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = baseState()
+    buildDashboardBucketCounts(state, NOW, cache, 1)
+    buildDashboardBucketCounts(state, NOW + AGENT_STALE_STEP, cache, 2)
+    expect(cache.lastComputedWorktreeIds.sort()).toEqual(['w1', 'w2'])
+  })
+
+  it('drops cache rows for worktrees that leave the active set', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = baseState()
+    buildDashboardBucketCounts(state, NOW, cache, 1)
+    expect([...cache.byWorktree.keys()].sort()).toEqual(['w1', 'w2'])
+
+    const next: DashboardSnapshotState = {
+      ...state,
+      worktreesByRepo: { r1: [worktree('w1')] }
+    }
+    buildDashboardBucketCounts(next, NOW + 500, cache, 1)
+    expect([...cache.byWorktree.keys()]).toEqual(['w1'])
+  })
+
+  it('matches the uncached result for acknowledgement changes', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state: DashboardSnapshotState = {
+      ...baseState(),
+      agentStatusByPaneKey: {
+        [PANE_1]: { ...entry(PANE_1, 'tab1', 'w1'), state: 'done' },
+        [PANE_2]: entry(PANE_2, 'tab2', 'w2')
+      }
+    }
+    buildDashboardBucketCounts(state, NOW, cache, 1)
+    const acked: DashboardSnapshotState = {
+      ...state,
+      acknowledgedAgentsByPaneKey: { [PANE_1]: NOW }
+    }
+    const counts = buildDashboardBucketCounts(acked, NOW + 500, cache, 1)
+    expect(counts).toEqual(buildDashboardBucketCounts(acked, NOW + 500))
+    // Rows don't depend on acks — the recount must not rebuild any row pipeline.
+    expect(cache.lastComputedWorktreeIds).toEqual([])
+  })
+})
diff --git a/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.ts b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.ts
index d077b447a3a..ea21ff33a45 100644
--- a/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.ts
+++ b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.ts
@@ -1,22 +1,16 @@
 import type { DashboardBucket } from '../../../../shared/dashboard-snapshot'
-import { migrationUnsupportedToAgentStatusEntry } from '@/lib/migration-unsupported-agent-entry'
-import { applyAgentRowLineage } from './agent-row-lineage'
 import type { DashboardSnapshotState } from './build-dashboard-snapshot'
 import { collectActiveDashboardWorkspaces } from './dashboard-snapshot-workspaces'
 import { selectDashboardOrchestration } from './dashboard-orchestration-selection'
 import { dashboardRowBucketProjection } from './dashboard-row-bucket'
-import { buildWorktreeAgentRows } from '../sidebar/worktree-agent-rows'
-import {
-  selectLiveAgentStatusEntriesForWorktree,
-  selectMigrationUnsupportedEntriesForWorktree,
-  selectRetainedAgentEntriesForWorktree,
-  selectTerminalLayoutsForWorktree
-} from '../sidebar/worktree-agent-row-selectors'
 import { EMPTY_WORKTREE_AGENT_ORCHESTRATION } from '../sidebar/worktree-agent-orchestration-batch'
 import {
-  selectLivePtyIdsForWorktree,
-  selectRuntimePaneTitlesForWorktree
-} from '../sidebar/worktree-card-status-inputs'
+  createWorktreeAgentRowsCache,
+  finishWorktreeAgentRowsCachePass,
+  selectWorktreeAgentRowsCached,
+  startWorktreeAgentRowsCachePass,
+  type WorktreeAgentRowsCache
+} from './worktree-agent-rows-cache'
 
 const EMPTY_COUNTS: Record<DashboardBucket, number> = {
   attention: 0,
@@ -25,10 +19,26 @@ const EMPTY_COUNTS: Record<DashboardBucket, number> = {
   idle: 0
 }
 
-/** Derive sidebar counts without allocating dashboard cards or metadata. */
+export type DashboardBucketCountsCache = WorktreeAgentRowsCache
+
+export function createDashboardBucketCountsCache(): DashboardBucketCountsCache {
+  return createWorktreeAgentRowsCache()
+}
+
+/**
+ * Derive sidebar counts without allocating dashboard cards or metadata.
+ *
+ * With a cache, each worktree's row pipeline reruns only when one of its own
+ * inputs changed (see worktree-agent-rows-cache). Counting over the (possibly
+ * reused) rows happens on every call, so acknowledgement changes recount
+ * without rebuilding any rows. `generation` must change whenever time-based
+ * freshness decay may have shifted a bucket (agentStatusEpoch).
+ */
 export function buildDashboardBucketCounts(
   state: DashboardSnapshotState,
-  now: number
+  now: number,
+  cache?: DashboardBucketCountsCache,
+  generation?: unknown
 ): Record<DashboardBucket, number> {
   const counts = {
     attention: 0,
@@ -41,39 +51,23 @@ export function buildDashboardBucketCounts(
     state,
     activeWorktrees
   )
+  if (cache) {
+    startWorktreeAgentRowsCachePass(cache)
+  }
 
   for (const { worktree } of activeWorktrees) {
     const worktreeId = worktree.id
-    const liveEntries = selectLiveAgentStatusEntriesForWorktree(state, worktreeId)
-    const migrationUnsupported = selectMigrationUnsupportedEntriesForWorktree(state, worktreeId)
-    const entries =
-      migrationUnsupported.length > 0
-        ? [
-            ...liveEntries,
-            ...migrationUnsupported.flatMap((unsupported) => {
-              const entry = migrationUnsupportedToAgentStatusEntry(unsupported)
-              return entry ? [entry] : []
-            })
-          ]
-        : liveEntries
-    const terminalLayoutsByTabId = selectTerminalLayoutsForWorktree(state, worktreeId)
-    const paneTitlesByTabId = selectRuntimePaneTitlesForWorktree(state, worktreeId)
-    const rows = applyAgentRowLineage(
-      buildWorktreeAgentRows({
-        tabs: state.tabsByWorktree[worktreeId] ?? [],
-        entries,
-        retained: selectRetainedAgentEntriesForWorktree(state, worktreeId),
-        runtimePaneTitlesByTabId: paneTitlesByTabId,
-        ptyIdsByTabId: selectLivePtyIdsForWorktree(state, worktreeId),
-        terminalLayoutsByTabId,
-        runtimeAgentOrchestrationByPaneKey:
-          singletonOrchestration ??
-          orchestrationByWorktree?.get(worktreeId) ??
-          EMPTY_WORKTREE_AGENT_ORCHESTRATION,
-        now
-      })
-    )
-
+    const rows = selectWorktreeAgentRowsCached({
+      state,
+      worktreeId,
+      orchestration:
+        singletonOrchestration ??
+        orchestrationByWorktree?.get(worktreeId) ??
+        EMPTY_WORKTREE_AGENT_ORCHESTRATION,
+      now,
+      generation,
+      cache
+    })
     for (const row of rows) {
       if (row.rowSource === 'subagent') {
         continue
@@ -82,6 +76,10 @@ export function buildDashboardBucketCounts(
     }
   }
 
+  if (cache) {
+    finishWorktreeAgentRowsCachePass(cache)
+  }
+
   return counts.attention === 0 && counts.working === 0 && counts.done === 0 && counts.idle === 0
     ? EMPTY_COUNTS
     : counts
diff --git a/src/renderer/src/components/dashboard/build-dashboard-snapshot.rows-cache.test.ts b/src/renderer/src/components/dashboard/build-dashboard-snapshot.rows-cache.test.ts
new file mode 100644
index 00000000000..f99738a5c4a
--- /dev/null
+++ b/src/renderer/src/components/dashboard/build-dashboard-snapshot.rows-cache.test.ts
@@ -0,0 +1,142 @@
+import { describe, expect, it } from 'vitest'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import { makePaneKey } from '../../../../shared/stable-pane-id'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+import { buildDashboardSnapshot, type DashboardSnapshotState } from './build-dashboard-snapshot'
+import { createWorktreeAgentRowsCache } from './worktree-agent-rows-cache'
+
+const NOW = 1_000_000_000
+const LEAF_1 = '11111111-1111-4111-8111-111111111111'
+const LEAF_2 = '22222222-2222-4222-8222-222222222222'
+const PANE_1 = makePaneKey('tab1', LEAF_1)
+const PANE_2 = makePaneKey('tab2', LEAF_2)
+
+function worktree(id: string): Worktree {
+  return {
+    id,
+    repoId: 'r1',
+    path: `/r1/${id}`,
+    head: 'abc123',
+    branch: 'main',
+    isBare: false,
+    isMainWorktree: false,
+    displayName: id,
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: NOW
+  }
+}
+
+function tab(id: string, worktreeId: string): TerminalTab {
+  return {
+    id,
+    ptyId: `pty-${id}`,
+    worktreeId,
+    title: 'shell',
+    customTitle: null,
+    color: null,
+    sortOrder: 0,
+    createdAt: NOW
+  }
+}
+
+function entry(paneKey: string, tabId: string, worktreeId: string): AgentStatusEntry {
+  return {
+    paneKey,
+    state: 'done',
+    prompt: 'finish the task',
+    updatedAt: NOW,
+    stateStartedAt: NOW - 5_000,
+    stateHistory: [],
+    agentType: 'claude',
+    tabId,
+    worktreeId
+  }
+}
+
+function baseState(): DashboardSnapshotState {
+  return {
+    repos: [{ id: 'r1', path: '/r1', displayName: 'Repo One', badgeColor: '#000', addedAt: 1 }],
+    worktreesByRepo: { r1: [worktree('w1'), worktree('w2')] },
+    tabsByWorktree: { w1: [tab('tab1', 'w1')], w2: [tab('tab2', 'w2')] },
+    agentStatusByPaneKey: {
+      [PANE_1]: entry(PANE_1, 'tab1', 'w1'),
+      [PANE_2]: entry(PANE_2, 'tab2', 'w2')
+    },
+    retainedAgentsByPaneKey: {},
+    migrationUnsupportedByPtyId: {},
+    runtimeAgentOrchestrationByPaneKey: {},
+    terminalLayoutsByTabId: {
+      tab1: {
+        root: { type: 'leaf', leafId: LEAF_1 },
+        activeLeafId: LEAF_1,
+        expandedLeafId: null,
+        ptyIdsByLeafId: { [LEAF_1]: 'pty-tab1' }
+      },
+      tab2: {
+        root: { type: 'leaf', leafId: LEAF_2 },
+        activeLeafId: LEAF_2,
+        expandedLeafId: null,
+        ptyIdsByLeafId: { [LEAF_2]: 'pty-tab2' }
+      }
+    },
+    ptyIdsByTabId: { tab1: ['pty-tab1'], tab2: ['pty-tab2'] },
+    runtimePaneTitlesByTabId: { tab1: { 0: 'shell' }, tab2: { 0: 'shell' } },
+    acknowledgedAgentsByPaneKey: {},
+    settings: null
+  }
+}
+
+describe('buildDashboardSnapshot rows cache', () => {
+  it('matches the uncached snapshot exactly across unrelated and targeted writes', () => {
+    const cache = createWorktreeAgentRowsCache()
+    const first = baseState()
+    expect(buildDashboardSnapshot(first, NOW, { rowsCache: cache, rowsGeneration: 1 })).toEqual(
+      buildDashboardSnapshot(first, NOW)
+    )
+
+    const titleWrite: DashboardSnapshotState = {
+      ...first,
+      runtimePaneTitlesByTabId: { ...first.runtimePaneTitlesByTabId, tab2: { 0: 'sh' } }
+    }
+    const cached = buildDashboardSnapshot(titleWrite, NOW + 500, {
+      rowsCache: cache,
+      rowsGeneration: 1
+    })
+    expect(cache.lastComputedWorktreeIds).toEqual(['w2'])
+    expect(cached).toEqual(buildDashboardSnapshot(titleWrite, NOW + 500))
+  })
+
+  it('keeps card-level fields fresh (acks, workspace statuses) without recomputing rows', () => {
+    const cache = createWorktreeAgentRowsCache()
+    const state = baseState()
+    const before = buildDashboardSnapshot(state, NOW, { rowsCache: cache, rowsGeneration: 1 })
+    expect(before.cards.find((card) => card.paneKey === PANE_1)?.unseen).toBe(true)
+
+    const acked: DashboardSnapshotState = {
+      ...state,
+      acknowledgedAgentsByPaneKey: { [PANE_1]: NOW }
+    }
+    const after = buildDashboardSnapshot(acked, NOW + 500, { rowsCache: cache, rowsGeneration: 1 })
+    // Why asserted: acks and statuses are card-assembly inputs the rows cache deliberately
+    // does not key — they must still flow into every rebuild.
+    expect(cache.lastComputedWorktreeIds).toEqual([])
+    expect(after.cards.find((card) => card.paneKey === PANE_1)?.unseen).toBe(false)
+    expect(after).toEqual(buildDashboardSnapshot(acked, NOW + 500))
+  })
+
+  it('recomputes all worktrees when the freshness generation ticks', () => {
+    const cache = createWorktreeAgentRowsCache()
+    const state = baseState()
+    buildDashboardSnapshot(state, NOW, { rowsCache: cache, rowsGeneration: 1 })
+    buildDashboardSnapshot(state, NOW + 60_000, { rowsCache: cache, rowsGeneration: 2 })
+    expect(cache.lastComputedWorktreeIds.sort()).toEqual(['w1', 'w2'])
+  })
+})
diff --git a/src/renderer/src/components/dashboard/build-dashboard-snapshot.ts b/src/renderer/src/components/dashboard/build-dashboard-snapshot.ts
index 4b336a56a88..fbdf01fe551 100644
--- a/src/renderer/src/components/dashboard/build-dashboard-snapshot.ts
+++ b/src/renderer/src/components/dashboard/build-dashboard-snapshot.ts
@@ -12,21 +12,17 @@ import {
   type DashboardCardTerminalInputState
 } from './dashboard-card-terminal-input'
 import { readDashboardClientHost } from './dashboard-client-host'
-import { migrationUnsupportedToAgentStatusEntry } from '@/lib/migration-unsupported-agent-entry'
-import { applyAgentRowLineage, dashboardCardParentPaneKey } from './agent-row-lineage'
+import { dashboardCardParentPaneKey } from './agent-row-lineage'
 import { lastEnteredDoneAt } from './agent-finished-timestamp'
-import { buildWorktreeAgentRows } from '../sidebar/worktree-agent-rows'
-import {
-  selectLiveAgentStatusEntriesForWorktree,
-  selectMigrationUnsupportedEntriesForWorktree,
-  selectRetainedAgentEntriesForWorktree,
-  selectTerminalLayoutsForWorktree
-} from '../sidebar/worktree-agent-row-selectors'
+import { selectTerminalLayoutsForWorktree } from '../sidebar/worktree-agent-row-selectors'
 import { EMPTY_WORKTREE_AGENT_ORCHESTRATION } from '../sidebar/worktree-agent-orchestration-batch'
 import {
-  selectLivePtyIdsForWorktree,
-  selectRuntimePaneTitlesForWorktree
-} from '../sidebar/worktree-card-status-inputs'
+  finishWorktreeAgentRowsCachePass,
+  selectWorktreeAgentRowsCached,
+  startWorktreeAgentRowsCachePass,
+  type WorktreeAgentRowsCache
+} from './worktree-agent-rows-cache'
+import { selectRuntimePaneTitlesForWorktree } from '../sidebar/worktree-card-status-inputs'
 import {
   resolveDashboardCardContext,
   type DashboardCardContextState
@@ -85,7 +81,15 @@ export type DashboardSnapshotState = Pick<
 export function buildDashboardSnapshot(
   state: DashboardSnapshotState,
   now: number,
-  options: { includeCardDetails?: boolean; includeFilterOptions?: boolean } = {}
+  options: {
+    includeCardDetails?: boolean
+    includeFilterOptions?: boolean
+    /** Optional per-worktree row-pipeline reuse; card assembly always runs fresh
+     *  because cards also read review/host/status slices the cache does not key. */
+    rowsCache?: WorktreeAgentRowsCache
+    /** Freshness token for rowsCache (agentStatusEpoch); required for the cache to be safe. */
+    rowsGeneration?: unknown
+  } = {}
 ): DashboardSnapshot {
   const cards: DashboardCard[] = []
   const workspaces: DashboardWorkspace[] | undefined =
@@ -104,41 +108,28 @@ export function buildDashboardSnapshot(
     state,
     activeWorktrees
   )
+  if (options.rowsCache) {
+    startWorktreeAgentRowsCachePass(options.rowsCache)
+  }
 
   for (const workspace of activeWorktrees) {
     const { repo, worktree } = workspace
     const worktreeId = worktree.id
     const parentWorktreeId = worktree.parentWorktreeId
-    const liveEntries = selectLiveAgentStatusEntriesForWorktree(state, worktreeId)
-    const migrationUnsupported = selectMigrationUnsupportedEntriesForWorktree(state, worktreeId)
-    const entries =
-      migrationUnsupported.length > 0
-        ? [
-            ...liveEntries,
-            ...migrationUnsupported.flatMap((unsupported) => {
-              const entry = migrationUnsupportedToAgentStatusEntry(unsupported)
-              return entry ? [entry] : []
-            })
-          ]
-        : liveEntries
     const terminalLayoutsByTabId = selectTerminalLayoutsForWorktree(state, worktreeId)
     const paneTitlesByTabId = selectRuntimePaneTitlesForWorktree(state, worktreeId)
 
-    const rows = applyAgentRowLineage(
-      buildWorktreeAgentRows({
-        tabs: state.tabsByWorktree[worktreeId] ?? [],
-        entries,
-        retained: selectRetainedAgentEntriesForWorktree(state, worktreeId),
-        runtimePaneTitlesByTabId: paneTitlesByTabId,
-        ptyIdsByTabId: selectLivePtyIdsForWorktree(state, worktreeId),
-        terminalLayoutsByTabId,
-        runtimeAgentOrchestrationByPaneKey:
-          singletonOrchestration ??
-          orchestrationByWorktree?.get(worktreeId) ??
-          EMPTY_WORKTREE_AGENT_ORCHESTRATION,
-        now
-      })
-    )
+    const rows = selectWorktreeAgentRowsCached({
+      state,
+      worktreeId,
+      orchestration:
+        singletonOrchestration ??
+        orchestrationByWorktree?.get(worktreeId) ??
+        EMPTY_WORKTREE_AGENT_ORCHESTRATION,
+      now,
+      generation: options.rowsGeneration,
+      cache: options.rowsCache
+    })
     const subagentsByParentPaneKey = includeCardDetails
       ? groupSubagentsByParentPaneKey(rows)
       : undefined
@@ -270,6 +261,10 @@ export function buildDashboardSnapshot(
     }
   }
 
+  if (options.rowsCache) {
+    finishWorktreeAgentRowsCachePass(options.rowsCache)
+  }
+
   return {
     generatedAt: now,
     cards,
diff --git a/src/renderer/src/components/dashboard/useAgentBucketCounts.test.tsx b/src/renderer/src/components/dashboard/useAgentBucketCounts.test.tsx
index f45dcd3b6e7..541fbd716c1 100644
--- a/src/renderer/src/components/dashboard/useAgentBucketCounts.test.tsx
+++ b/src/renderer/src/components/dashboard/useAgentBucketCounts.test.tsx
@@ -29,7 +29,12 @@ vi.mock('@/store', () => ({
 }))
 
 vi.mock('./build-dashboard-bucket-counts', () => ({
-  buildDashboardBucketCounts: mocks.buildDashboardBucketCounts
+  buildDashboardBucketCounts: mocks.buildDashboardBucketCounts,
+  createDashboardBucketCountsCache: () => ({
+    byWorktree: new Map(),
+    computeCount: 0,
+    lastComputedWorktreeIds: []
+  })
 }))
 
 import { useAgentBucketCounts } from './useAgentBucketCounts'
@@ -60,7 +65,9 @@ describe('useAgentBucketCounts', () => {
         folderWorkspaces: mocks.state.folderWorkspaces,
         unifiedTabsByWorktree: mocks.state.unifiedTabsByWorktree
       }),
-      expect.any(Number)
+      expect.any(Number),
+      expect.objectContaining({ byWorktree: expect.any(Map) }),
+      expect.anything()
     )
   })
 
diff --git a/src/renderer/src/components/dashboard/useAgentBucketCounts.ts b/src/renderer/src/components/dashboard/useAgentBucketCounts.ts
index 58b7a444e37..60df4995e56 100644
--- a/src/renderer/src/components/dashboard/useAgentBucketCounts.ts
+++ b/src/renderer/src/components/dashboard/useAgentBucketCounts.ts
@@ -1,8 +1,11 @@
-import { useMemo } from 'react'
+import { useMemo, useRef } from 'react'
 import { useAppStore } from '@/store'
 import { useShallow } from 'zustand/react/shallow'
 import type { DashboardBucket } from '../../../../shared/dashboard-snapshot'
-import { buildDashboardBucketCounts } from './build-dashboard-bucket-counts'
+import {
+  buildDashboardBucketCounts,
+  createDashboardBucketCountsCache
+} from './build-dashboard-bucket-counts'
 
 export type AgentBucketCounts = Record<DashboardBucket, number>
 
@@ -46,6 +49,9 @@ export function useAgentBucketCounts(): AgentBucketCounts {
     }))
   )
 
+  // Why a per-hook cache: unrelated status/title writes change one worktree's inputs;
+  // the cache keeps every other worktree's counts without rerunning its row pipeline.
+  const cacheRef = useRef(createDashboardBucketCountsCache())
   return useMemo(() => {
     return buildDashboardBucketCounts(
       {
@@ -66,7 +72,11 @@ export function useAgentBucketCounts(): AgentBucketCounts {
         // generated-title gate is moot and the sidebar stays off settings.
         settings: null
       },
-      Date.now()
+      Date.now(),
+      cacheRef.current,
+      // Why: time-based freshness decay is signaled by agentStatusEpoch; it invalidates
+      // every cached worktree so stale-decayed buckets recount.
+      agentStatusEpoch
     )
     // Why: Date.now() is read inside the memo (not a dep) so idle-decay tracks
     // agentStatusEpoch ticks, matching useDashboardData.
diff --git a/src/renderer/src/components/dashboard/useDashboardPopoutBridge.ts b/src/renderer/src/components/dashboard/useDashboardPopoutBridge.ts
index c2446f4e11f..e6163a70773 100644
--- a/src/renderer/src/components/dashboard/useDashboardPopoutBridge.ts
+++ b/src/renderer/src/components/dashboard/useDashboardPopoutBridge.ts
@@ -4,6 +4,7 @@ import { activateTabAndFocusPane } from '@/lib/activate-tab-and-focus-pane'
 import { runSleepWorktree } from '../sidebar/sleep-worktree-flow'
 import type { RepoIcon } from '../../../../shared/repo-icon'
 import { buildDashboardSnapshot, type DashboardSnapshotState } from './build-dashboard-snapshot'
+import { createWorktreeAgentRowsCache } from './worktree-agent-rows-cache'
 import { launchDashboardAgent } from './launch-dashboard-agent'
 
 // Why: cap snapshot rebuilds during bursts of agent-status pings. The board is a
@@ -164,9 +165,16 @@ export function useDashboardPopoutBridge(enabled: boolean): void {
     // `withIcons` is forced whenever the pop-out could be starting from nothing —
     // it opened, or it mounted and asked. Throttled republishes omit an unchanged
     // icon map and the pop-out keeps the one it already has.
+    // Why effect-scoped: one cache per popout-bridge lifecycle; unchanged worktrees
+    // reuse their row pipeline across the up-to-4Hz republish stream.
+    const rowsCache = createWorktreeAgentRowsCache()
     const publishNow = (withIcons: boolean): void => {
       lastPublishAt = Date.now()
-      const snapshot = buildDashboardSnapshot(useAppStore.getState(), lastPublishAt)
+      const state = useAppStore.getState()
+      const snapshot = buildDashboardSnapshot(state, lastPublishAt, {
+        rowsCache,
+        rowsGeneration: state.agentStatusEpoch
+      })
       const icons = snapshot.repoIconsByRepoId ?? {}
       if (!withIcons && repoIconsUnchanged(icons, lastPublishedRepoIcons)) {
         const { repoIconsByRepoId: _omitted, ...withoutIcons } = snapshot
diff --git a/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts b/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts
index 07317083d7e..227cf4e3f8b 100644
--- a/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts
+++ b/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts
@@ -1,7 +1,8 @@
-import { useMemo } from 'react'
+import { useMemo, useRef } from 'react'
 import { useAppStore } from '@/store'
 import type { DashboardSnapshot } from '../../../../shared/dashboard-snapshot'
 import { buildDashboardSnapshot } from './build-dashboard-snapshot'
+import { createWorktreeAgentRowsCache } from './worktree-agent-rows-cache'
 
 /**
  * Builds the dashboard snapshot directly from the live renderer store for the
@@ -10,6 +11,7 @@ import { buildDashboardSnapshot } from './build-dashboard-snapshot'
  * is no relay, so we derive it here from the same builder the bridge uses.
  */
 export function useLiveDashboardSnapshot(): DashboardSnapshot {
+  const rowsCacheRef = useRef(createWorktreeAgentRowsCache())
   const repos = useAppStore((s) => s.repos)
   const worktreesByRepo = useAppStore((s) => s.worktreesByRepo)
   const tabsByWorktree = useAppStore((s) => s.tabsByWorktree)
@@ -102,7 +104,10 @@ export function useLiveDashboardSnapshot(): DashboardSnapshot {
           // rebuild the board. Matches the bridge's republish gate.
           agentLaunchConfigByPaneKey: useAppStore.getState().agentLaunchConfigByPaneKey
         },
-        Date.now()
+        Date.now(),
+        // Why: unchanged worktrees reuse their row pipeline; card assembly still runs
+        // fresh against the review/host/status slices this memo subscribes to.
+        { rowsCache: rowsCacheRef.current, rowsGeneration: agentStatusEpoch }
       ),
     // eslint-disable-next-line react-hooks/exhaustive-deps
     [
diff --git a/src/renderer/src/components/dashboard/worktree-agent-rows-cache.ts b/src/renderer/src/components/dashboard/worktree-agent-rows-cache.ts
new file mode 100644
index 00000000000..a00cae7af19
--- /dev/null
+++ b/src/renderer/src/components/dashboard/worktree-agent-rows-cache.ts
@@ -0,0 +1,181 @@
+import type {
+  AgentStatusEntry,
+  AgentStatusOrchestrationContext,
+  MigrationUnsupportedPtyEntry
+} from '../../../../shared/agent-status-types'
+import type { TerminalLayoutSnapshot, TerminalTab } from '../../../../shared/terminal-tab-types'
+import { migrationUnsupportedToAgentStatusEntry } from '@/lib/migration-unsupported-agent-entry'
+import type { RetainedAgentEntry } from '@/store/slices/agent-status'
+import type { AppState } from '@/store/types'
+import { applyAgentRowLineage, type DashboardAgentRowWithLineage } from './agent-row-lineage'
+import { buildWorktreeAgentRows } from '../sidebar/worktree-agent-rows'
+import {
+  selectLiveAgentStatusEntriesForWorktree,
+  selectMigrationUnsupportedEntriesForWorktree,
+  selectRetainedAgentEntriesForWorktree,
+  selectTerminalLayoutsForWorktree
+} from '../sidebar/worktree-agent-row-selectors'
+import {
+  selectLivePtyIdsForWorktree,
+  selectRuntimePaneTitlesForWorktree
+} from '../sidebar/worktree-card-status-inputs'
+
+type WorktreeAgentRowsCacheEntry = {
+  /** Caller-provided invalidation token for time-based freshness (agentStatusEpoch). */
+  generation: unknown
+  liveEntries: AgentStatusEntry[]
+  migrationUnsupported: MigrationUnsupportedPtyEntry[]
+  retained: RetainedAgentEntry[]
+  tabs: TerminalTab[] | undefined
+  orchestration: Record<string, AgentStatusOrchestrationContext>
+  terminalLayoutsByTabId: Record<string, TerminalLayoutSnapshot | undefined>
+  paneTitlesByTabId: Record<string, Record<number, string>>
+  ptyIdsByTabId: Record<string, string[]>
+  rows: DashboardAgentRowWithLineage[]
+}
+
+/**
+ * Per-worktree cache for the lineage-applied agent-row pipeline shared by the
+ * dashboard snapshot and the sidebar bucket counts. Rows rerun only when one of
+ * that worktree's own inputs changed — the indexed selectors keep untouched
+ * worktrees' arrays referentially stable — so an unrelated status/title write
+ * recomputes one worktree instead of all of them.
+ *
+ * Rows depend on wall-clock freshness, so `generation` (agentStatusEpoch) must
+ * change whenever decay may have shifted a row state.
+ */
+export type WorktreeAgentRowsCache = {
+  byWorktree: Map<string, WorktreeAgentRowsCacheEntry>
+  /** Test instrumentation: cumulative per-worktree row-pipeline (re)computations. */
+  computeCount: number
+  /** Test instrumentation: worktree ids recomputed since the last startPass. */
+  lastComputedWorktreeIds: string[]
+  /** Worktree ids requested since the last startPass; finishPass evicts the rest. */
+  seenWorktreeIds: Set<string>
+}
+
+export function createWorktreeAgentRowsCache(): WorktreeAgentRowsCache {
+  return {
+    byWorktree: new Map(),
+    computeCount: 0,
+    lastComputedWorktreeIds: [],
+    seenWorktreeIds: new Set()
+  }
+}
+
+/** Begin one full pass over the active workspaces (resets pass-scoped tracking). */
+export function startWorktreeAgentRowsCachePass(cache: WorktreeAgentRowsCache): void {
+  cache.lastComputedWorktreeIds = []
+  cache.seenWorktreeIds.clear()
+}
+
+/** Drop cache rows for workspaces the pass did not visit so the map stays bounded. */
+export function finishWorktreeAgentRowsCachePass(cache: WorktreeAgentRowsCache): void {
+  for (const worktreeId of cache.byWorktree.keys()) {
+    if (!cache.seenWorktreeIds.has(worktreeId)) {
+      cache.byWorktree.delete(worktreeId)
+    }
+  }
+}
+
+export type WorktreeAgentRowsState = Pick<
+  AppState,
+  | 'agentStatusByPaneKey'
+  | 'migrationUnsupportedByPtyId'
+  | 'retainedAgentsByPaneKey'
+  | 'tabsByWorktree'
+  | 'terminalLayoutsByTabId'
+  | 'ptyIdsByTabId'
+  | 'runtimePaneTitlesByTabId'
+> &
+  Partial<Pick<AppState, 'unifiedTabsByWorktree'>>
+
+// Why not identity: the per-worktree layout/title/ptyId selectors build a fresh top-level
+// record per call while preserving per-tab value references, so shallow equality is the
+// correct (and cheap — bounded by tabs per worktree) comparison.
+function shallowRecordEqual(a: Record<string, unknown>, b: Record<string, unknown>): boolean {
+  if (a === b) {
+    return true
+  }
+  const aKeys = Object.keys(a)
+  if (aKeys.length !== Object.keys(b).length) {
+    return false
+  }
+  return aKeys.every((key) => Object.is(a[key], b[key]))
+}
+
+/** The lineage-applied rows for one worktree, reused by identity when its inputs are unchanged. */
+export function selectWorktreeAgentRowsCached(args: {
+  state: WorktreeAgentRowsState
+  worktreeId: string
+  orchestration: Record<string, AgentStatusOrchestrationContext>
+  now: number
+  generation: unknown
+  cache?: WorktreeAgentRowsCache
+}): DashboardAgentRowWithLineage[] {
+  const { state, worktreeId, orchestration, now, generation, cache } = args
+  cache?.seenWorktreeIds.add(worktreeId)
+  const liveEntries = selectLiveAgentStatusEntriesForWorktree(state, worktreeId)
+  const migrationUnsupported = selectMigrationUnsupportedEntriesForWorktree(state, worktreeId)
+  const retained = selectRetainedAgentEntriesForWorktree(state, worktreeId)
+  const tabs = state.tabsByWorktree[worktreeId]
+  const terminalLayoutsByTabId = selectTerminalLayoutsForWorktree(state, worktreeId)
+  const paneTitlesByTabId = selectRuntimePaneTitlesForWorktree(state, worktreeId)
+  const ptyIdsByTabId = selectLivePtyIdsForWorktree(state, worktreeId)
+
+  const cached = cache?.byWorktree.get(worktreeId)
+  if (
+    cached &&
+    cached.generation === generation &&
+    cached.liveEntries === liveEntries &&
+    cached.migrationUnsupported === migrationUnsupported &&
+    cached.retained === retained &&
+    cached.tabs === tabs &&
+    cached.orchestration === orchestration &&
+    shallowRecordEqual(cached.terminalLayoutsByTabId, terminalLayoutsByTabId) &&
+    shallowRecordEqual(cached.paneTitlesByTabId, paneTitlesByTabId) &&
+    shallowRecordEqual(cached.ptyIdsByTabId, ptyIdsByTabId)
+  ) {
+    return cached.rows
+  }
+
+  const entries =
+    migrationUnsupported.length > 0
+      ? [
+          ...liveEntries,
+          ...migrationUnsupported.flatMap((unsupported) => {
+            const entry = migrationUnsupportedToAgentStatusEntry(unsupported)
+            return entry ? [entry] : []
+          })
+        ]
+      : liveEntries
+  const rows = applyAgentRowLineage(
+    buildWorktreeAgentRows({
+      tabs: tabs ?? [],
+      entries,
+      retained,
+      runtimePaneTitlesByTabId: paneTitlesByTabId,
+      ptyIdsByTabId,
+      terminalLayoutsByTabId,
+      runtimeAgentOrchestrationByPaneKey: orchestration,
+      now
+    })
+  )
+  if (cache) {
+    cache.computeCount += 1
+    cache.lastComputedWorktreeIds.push(worktreeId)
+    cache.byWorktree.set(worktreeId, {
+      generation,
+      liveEntries,
+      migrationUnsupported,
+      retained,
+      tabs,
+      orchestration,
+      terminalLayoutsByTabId,
+      paneTitlesByTabId,
+      ptyIdsByTabId,
+      rows
+    })
+  }
+  return rows
+}
diff --git a/src/renderer/src/components/settings/AppearanceWindowSidebarSection.tsx b/src/renderer/src/components/settings/AppearanceWindowSidebarSection.tsx
index c8d63b3866a..1d82af8ed7d 100644
--- a/src/renderer/src/components/settings/AppearanceWindowSidebarSection.tsx
+++ b/src/renderer/src/components/settings/AppearanceWindowSidebarSection.tsx
@@ -203,8 +203,6 @@ export function AppearanceWindowSidebarSection({
                   title={translate('auto.components.settings.AppearancePane.dc29f3cc0d', 'Sidebar')}
                 />
                 <div className="ml-4 divide-y divide-border/40">
-                  {/* Why: this setting lives with the sidebar layout controls; Settings only
-                  names that ownership so we do not create a second stateful control. */}
                   <SearchableSetting
                     title={workspaceCardLayoutEntry.title}
                     description={workspaceCardLayoutEntry.description}
diff --git a/src/renderer/src/components/settings/ExperimentalPane.test.tsx b/src/renderer/src/components/settings/ExperimentalPane.test.tsx
index b421b77bfc2..17abf3154a0 100644
--- a/src/renderer/src/components/settings/ExperimentalPane.test.tsx
+++ b/src/renderer/src/components/settings/ExperimentalPane.test.tsx
@@ -7,7 +7,7 @@ import { afterEach, describe, expect, it, vi } from 'vitest'
 import type { GlobalSettings } from '../../../../shared/global-settings-types'
 import { getDefaultSettings } from '../../../../shared/constants'
 import { ExperimentalPane } from './ExperimentalPane'
-import { getExperimentalPaneSearchEntries } from './experimental-search'
+import { getExperimentalPaneSearchEntries, getExperimentalSearchEntry } from './experimental-search'
 
 vi.mock('../../store', () => ({
   useAppStore: (selector: (state: { settingsSearchQuery: string }) => unknown) =>
@@ -132,6 +132,23 @@ describe('ExperimentalPane', () => {
     )
   })
 
+  it('renders the Agents sidebar switch in Experimental without stale Appearance copy', () => {
+    const settings = getDefaultSettings('/tmp')
+    const markup = renderToStaticMarkup(
+      <ExperimentalPane settings={settings} updateSettings={vi.fn()} />
+    )
+
+    expect(settings.experimentalAgentDashboardPopout).toBeUndefined()
+    expect(markup).toContain('Show Agents Button')
+    // The visible copy is the search entry's own description, so settings search can't
+    // advertise text the page doesn't show.
+    expect(markup).toContain(getExperimentalSearchEntry().agentsSidebar.description)
+    expect(markup).not.toContain('Window &amp; Sidebar')
+    expect(getExperimentalPaneSearchEntries().map((entry) => entry.title)).toContain(
+      'Show Agents Button'
+    )
+  })
+
   it('renders the agent dashboard as an off-by-default searchable experiment', () => {
     const settings = getDefaultSettings('/tmp')
     const markup = renderToStaticMarkup(
diff --git a/src/renderer/src/components/settings/ExperimentalPane.tsx b/src/renderer/src/components/settings/ExperimentalPane.tsx
index b54e7ce75f2..4c3536c78ed 100644
--- a/src/renderer/src/components/settings/ExperimentalPane.tsx
+++ b/src/renderer/src/components/settings/ExperimentalPane.tsx
@@ -36,15 +36,15 @@ export function ExperimentalPane({
 }: ExperimentalPaneProps): React.JSX.Element {
   const searchQuery = useAppStore((s) => s.settingsSearchQuery)
   const showPet = matchesSettingsSearch(searchQuery, [getExperimentalSearchEntry().pet])
-  const showAgentsView = matchesSettingsSearch(searchQuery, [
-    getExperimentalSearchEntry().agentsView
+  const showNativeChat = matchesSettingsSearch(searchQuery, [
+    getExperimentalSearchEntry().nativeChat
+  ])
+  const showAgentsSidebar = matchesSettingsSearch(searchQuery, [
+    getExperimentalSearchEntry().agentsSidebar
   ])
   const showAgentDashboard = matchesSettingsSearch(searchQuery, [
     getExperimentalSearchEntry().agentDashboard
   ])
-  const showNativeChat = matchesSettingsSearch(searchQuery, [
-    getExperimentalSearchEntry().nativeChat
-  ])
   const showTerminalAttention = matchesSettingsSearch(searchQuery, [
     getExperimentalSearchEntry().terminalAttention
   ])
@@ -64,6 +64,37 @@ export function ExperimentalPane({
 
   return (
     <div className="space-y-4">
+      {showAgentsSidebar ? (
+        <SearchableSetting
+          title={getExperimentalSearchEntry().agentsSidebar.title}
+          description={getExperimentalSearchEntry().agentsSidebar.description}
+          keywords={getExperimentalSearchEntry().agentsSidebar.keywords}
+          className="space-y-3 py-2"
+          id="experimental-agents-sidebar"
+        >
+          <div className="flex items-start justify-between gap-4">
+            <div className="min-w-0 shrink space-y-0.5">
+              <Label>{getExperimentalSearchEntry().agentsSidebar.title}</Label>
+              {/* Same string the search entry advertises, so search results match the page. */}
+              <p className="text-xs text-muted-foreground">
+                {getExperimentalSearchEntry().agentsSidebar.description}
+              </p>
+            </div>
+            <SettingsSwitch
+              checked={settings.showAgentsSidebar !== false}
+              ariaLabel={getExperimentalSearchEntry().agentsSidebar.title}
+              onChange={() =>
+                updateSettings({ showAgentsSidebar: settings.showAgentsSidebar === false })
+              }
+            />
+          </div>
+        </SearchableSetting>
+      ) : null}
+
+      {showAgentDashboard ? (
+        <AgentDashboardExperimentalSetting settings={settings} updateSettings={updateSettings} />
+      ) : null}
+
       {showPet ? (
         <SearchableSetting
           title={translate('auto.components.settings.ExperimentalPane.dd6f0a1d45', 'Pet')}
@@ -98,48 +129,6 @@ export function ExperimentalPane({
         </SearchableSetting>
       ) : null}
 
-      {showAgentsView ? (
-        <SearchableSetting
-          title={translate('auto.components.settings.ExperimentalPane.a05bcdaf57', 'Agents View')}
-          description={translate(
-            'auto.components.settings.ExperimentalPane.f63ea281e3',
-            'Threaded left-sidebar feed for agent completions and blocking states.'
-          )}
-          keywords={getExperimentalSearchEntry().agentsView.keywords}
-          className="space-y-3 py-2"
-        >
-          <div className="flex items-start justify-between gap-4">
-            <div className="min-w-0 shrink space-y-0.5">
-              <Label>
-                {translate('auto.components.settings.ExperimentalPane.a05bcdaf57', 'Agents View')}
-              </Label>
-              <p className="text-xs text-muted-foreground">
-                {translate(
-                  'auto.components.settings.ExperimentalPane.0277901cf7',
-                  'Adds an Agents entry to the left sidebar with a threaded worktree feed for completed agents, blocking questions, unread state, and worktree creation events. Experimental — the event model and UI may change.'
-                )}
-              </p>
-            </div>
-            <Switch
-              aria-label={translate(
-                'auto.components.settings.ExperimentalPane.a05bcdaf57',
-                'Agents View'
-              )}
-              checked={settings.experimentalActivity}
-              onCheckedChange={(checked) =>
-                updateSettings({
-                  experimentalActivity: checked
-                })
-              }
-            />
-          </div>
-        </SearchableSetting>
-      ) : null}
-
-      {showAgentDashboard ? (
-        <AgentDashboardExperimentalSetting settings={settings} updateSettings={updateSettings} />
-      ) : null}
-
       {showNativeChat ? (
         <NativeChatExperimentalSetting settings={settings} updateSettings={updateSettings} />
       ) : null}
diff --git a/src/renderer/src/components/settings/appearance-sidebar-search.ts b/src/renderer/src/components/settings/appearance-sidebar-search.ts
index ab77d2a0ad0..2b01f7704a7 100644
--- a/src/renderer/src/components/settings/appearance-sidebar-search.ts
+++ b/src/renderer/src/components/settings/appearance-sidebar-search.ts
@@ -123,6 +123,27 @@ export const getShowPinnedWorktreesInGroupsEntry = createLocalizedCatalog(
   })
 )
 
+export const getAgentsSidebarEntry = createLocalizedCatalog((): SettingsSearchEntry => ({
+  title: translate('settings.appearance.agentsSidebar.title', 'Show Agents Button'),
+  description: translate(
+    'settings.appearance.agentsSidebar.description',
+    'Control whether the Agents tab appears in the left sidebar so you can monitor agent activity.'
+  ),
+  keywords: [
+    ...translateSearchKeyword('auto.components.settings.general.search.baa263d6d8', 'agents'),
+    ...translateSearchKeyword('auto.components.settings.agents.search.96ba2373b6', 'agent'),
+    // Why: the sidebar row is labeled "Agent Dashboard"; searching that name must find this.
+    ...translateSearchKeyword(
+      'auto.components.settings.experimental.search.agentDashboard.dashboard',
+      'dashboard'
+    ),
+    ...translateSearchKeyword('auto.components.settings.appearance.search.5bff6a2ef0', 'sidebar'),
+    ...translateSearchKeyword('auto.components.settings.general.search.2a254b725e', 'tab'),
+    ...translateSearchKeyword('auto.components.settings.appearance.search.648eeada79', 'hide'),
+    ...translateSearchKeyword('auto.components.settings.appearance.search.ac79fe4a04', 'show')
+  ]
+}))
+
 export const getSidebarEntries = createLocalizedCatalog((): SettingsSearchEntry[] => [
   {
     title: translate('auto.components.settings.appearance.search.155a1e7438', 'Show Tasks Button'),
diff --git a/src/renderer/src/components/settings/experimental-search.ts b/src/renderer/src/components/settings/experimental-search.ts
index e4ffd8f1a28..821de798301 100644
--- a/src/renderer/src/components/settings/experimental-search.ts
+++ b/src/renderer/src/components/settings/experimental-search.ts
@@ -5,6 +5,7 @@ import { translateSearchKeyword } from './settings-search-keywords'
 import { getNewWorktreeCardStyleSearchEntry } from './new-worktree-card-style-search-entry'
 import { getNativeChatExperimentalSearchEntry } from './native-chat-experimental-search-entry'
 import { getEphemeralVmsSearchEntry } from './ephemeral-vms-search'
+import { getAgentsSidebarEntry } from './appearance-sidebar-search'
 
 export const getExperimentalPaneSearchEntries = createLocalizedCatalog(
   (): SettingsSearchEntry[] => [
@@ -46,55 +47,8 @@ export const getExperimentalPaneSearchEntries = createLocalizedCatalog(
         )
       ]
     },
-    {
-      title: translate('auto.components.settings.experimental.search.ccc5548ac5', 'Agents View'),
-      description: translate(
-        'auto.components.settings.experimental.search.4d63251595',
-        'Threaded left-sidebar feed for agent completions and blocking states.'
-      ),
-      keywords: [
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.0d24759f14',
-          'experimental'
-        ),
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.fa72e71f05',
-          'agents'
-        ),
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.92a9357d1f',
-          'agents view'
-        ),
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.244a0ecd3d',
-          'activity'
-        ),
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.d01b3882ba',
-          'notifications'
-        ),
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.10b52f79c1',
-          'worktrees'
-        ),
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.ca5d1f3f46',
-          'timeline'
-        ),
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.7b79081695',
-          'unread'
-        ),
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.8facf10138',
-          'bell'
-        ),
-        ...translateSearchKeyword(
-          'auto.components.settings.experimental.search.fe5688b761',
-          'sidebar'
-        )
-      ]
-    },
+    getNativeChatExperimentalSearchEntry(),
+    getAgentsSidebarEntry(),
     {
       title: translate(
         'auto.components.settings.experimental.search.agentDashboard.title',
@@ -139,7 +93,6 @@ export const getExperimentalPaneSearchEntries = createLocalizedCatalog(
         )
       ]
     },
-    getNativeChatExperimentalSearchEntry(),
     {
       title: translate(
         'auto.components.settings.experimental.search.9e4ddf776d',
@@ -247,18 +200,16 @@ function findEntry(title: string): SettingsSearchEntry {
 export function getExperimentalSearchEntry() {
   return {
     pet: findEntry(translate('auto.components.settings.experimental.search.87d99e634b', 'Pet')),
-    agentsView: findEntry(
-      translate('auto.components.settings.experimental.search.ccc5548ac5', 'Agents View')
+    nativeChat: findEntry(
+      translate('auto.components.settings.experimental.search.nativeChat.title', 'Chat UI')
     ),
+    agentsSidebar: getAgentsSidebarEntry(),
     agentDashboard: findEntry(
       translate(
         'auto.components.settings.experimental.search.agentDashboard.title',
         'Agent Dashboard'
       )
     ),
-    nativeChat: findEntry(
-      translate('auto.components.settings.experimental.search.nativeChat.title', 'Chat UI')
-    ),
     terminalAttention: findEntry(
       translate('auto.components.settings.experimental.search.9e4ddf776d', 'Terminal attention')
     ),
diff --git a/src/renderer/src/components/sidebar/AgentDashboardSidebarEntry.tsx b/src/renderer/src/components/sidebar/AgentDashboardSidebarEntry.tsx
index c67d8f4477f..4b997ca2cc0 100644
--- a/src/renderer/src/components/sidebar/AgentDashboardSidebarEntry.tsx
+++ b/src/renderer/src/components/sidebar/AgentDashboardSidebarEntry.tsx
@@ -68,6 +68,7 @@ export default function AgentDashboardSidebarEntry(): React.JSX.Element {
   return (
     <button
       type="button"
+      data-contextual-tour-target="agents-sidebar"
       onClick={() => {
         if (openAsPopout) {
           void window.api.dashboard.openPopout()
@@ -84,7 +85,9 @@ export default function AgentDashboardSidebarEntry(): React.JSX.Element {
         className="size-4 shrink-0 text-worktree-sidebar-foreground/30"
         strokeWidth={1.75}
       />
-      <span className="flex-1">{translate('dashboard.sidebar.label', 'Agent Dashboard')}</span>
+      <span className="flex-1">
+        {translate('dashboard.sidebar.dashboardLabel', 'Agent Dashboard')}
+      </span>
       <DashboardBucketCounts counts={dashboardBucketCounts} showIdle={showIdle} />
     </button>
   )
diff --git a/src/renderer/src/components/sidebar/Sidebar.test.tsx b/src/renderer/src/components/sidebar/Sidebar.test.tsx
index 098ed7f203c..343c3f10c3c 100644
--- a/src/renderer/src/components/sidebar/Sidebar.test.tsx
+++ b/src/renderer/src/components/sidebar/Sidebar.test.tsx
@@ -3,7 +3,7 @@
 import type { CSSProperties, ReactNode } from 'react'
 import { renderToStaticMarkup } from 'react-dom/server'
 import { tmpdir } from 'node:os'
-import { cleanup, render } from '@testing-library/react'
+import { cleanup, fireEvent, render, waitFor } from '@testing-library/react'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { getDefaultSettings } from '../../../../shared/constants'
 import type { GlobalSettings } from '../../../../shared/global-settings-types'
@@ -32,11 +32,31 @@ vi.mock('@/hooks/useSidebarResize', () => ({
 }))
 
 vi.mock('@/components/ui/tooltip', () => ({
-  TooltipProvider: ({ children }: { children: ReactNode }) => <>{children}</>
+  TooltipProvider: ({ children }: { children: ReactNode }) => <>{children}</>,
+  Tooltip: ({ children }: { children: ReactNode }) => <>{children}</>,
+  TooltipTrigger: ({ children }: { children: ReactNode }) => <>{children}</>,
+  TooltipContent: ({ children }: { children: ReactNode }) => <>{children}</>
 }))
 
 vi.mock('./SidebarHeader', () => ({
-  default: () => <div data-testid="sidebar-header" />
+  default: ({
+    agentToolbar,
+    agentSearchRow
+  }: {
+    agentToolbar?: ReactNode
+    agentSearchRow?: ReactNode
+  }) => (
+    <div data-testid="sidebar-header">
+      {agentToolbar}
+      {agentSearchRow}
+    </div>
+  )
+}))
+
+vi.mock('./SidebarAgentsList', () => ({
+  default: ({ query }: { query: string }) => (
+    <div data-testid="sidebar-agents-list" data-query={query} />
+  )
 }))
 
 vi.mock('./SidebarNav', () => ({
@@ -219,4 +239,47 @@ describe('Sidebar', () => {
 
     expect(fetchAllWorktrees).not.toHaveBeenCalled()
   })
+
+  it('clears the agents search query when the search row closes', async () => {
+    setSidebarState(getDefaultSettings(tmpdir()))
+    mocks.state = { ...mocks.state, sidebarBody: 'agents' }
+    const view = render(sidebarElement())
+    const agentsList = await view.findByTestId('sidebar-agents-list')
+
+    const searchToggle = view.getAllByRole('button', { name: 'Search' })[0]
+    fireEvent.click(searchToggle)
+    const searchInput = view.getByPlaceholderText('Filter...')
+    fireEvent.change(searchInput, { target: { value: 'deploy' } })
+    expect(agentsList.getAttribute('data-query')).toBe('deploy')
+
+    // Escape hides the row; a lingering query would silently keep filtering the list.
+    fireEvent.keyDown(searchInput, { key: 'Escape' })
+    expect(view.queryByPlaceholderText('Filter...')).toBeNull()
+    expect(agentsList.getAttribute('data-query')).toBe('')
+
+    fireEvent.click(searchToggle)
+    fireEvent.change(view.getByPlaceholderText('Filter...'), { target: { value: 'again' } })
+    expect(agentsList.getAttribute('data-query')).toBe('again')
+    fireEvent.click(searchToggle)
+    expect(view.queryByPlaceholderText('Filter...')).toBeNull()
+    expect(agentsList.getAttribute('data-query')).toBe('')
+  })
+
+  it('closes the dashboard drawer when the dashboard experiment is disabled', async () => {
+    setSidebarState({
+      ...getDefaultSettings(tmpdir()),
+      showAgentsSidebar: true,
+      experimentalAgentDashboardPopout: false
+    })
+    const setAgentDashboardDrawerOpen = vi.fn()
+    mocks.state = {
+      ...mocks.state,
+      agentDashboardDrawerOpen: true,
+      setAgentDashboardDrawerOpen
+    }
+
+    render(sidebarElement())
+
+    await waitFor(() => expect(setAgentDashboardDrawerOpen).toHaveBeenCalledWith(false))
+  })
 })
diff --git a/src/renderer/src/components/sidebar/SidebarAgentsList.tsx b/src/renderer/src/components/sidebar/SidebarAgentsList.tsx
new file mode 100644
index 00000000000..75c0c441bad
--- /dev/null
+++ b/src/renderer/src/components/sidebar/SidebarAgentsList.tsx
@@ -0,0 +1,144 @@
+import React, { useCallback, useEffect, useRef, useState } from 'react'
+import { createPortal } from 'react-dom'
+import { useAppStore } from '@/store'
+import { ActivityScopeFilterChips } from '@/components/activity/activity-scope-filter-controls'
+import { hasActivityThreadWorkspace } from '@/components/activity/activity-thread-actions'
+import { useActivityThreadActionBindings } from '@/components/activity/use-activity-thread-action-bindings'
+import { ActivityThreadListPane } from '@/components/activity/activity-thread-list-pane'
+import { ActivityThreadOptionsMenu } from '@/components/activity/activity-thread-controls'
+import { useAgentPaneThreads } from '@/components/activity/use-agent-pane-threads'
+import type { ActivityGroupBy, ThreadReadFilter } from '@/components/activity/activity-thread-types'
+
+/**
+ * The Activity thread list, hosted in the sidebar as a navigator: selecting a
+ * row reveals that agent's pane in the workbench instead of swapping the view.
+ * Threads whose pane is gone stay listed but inert — activateThreadTerminal
+ * already no-ops without a live tab.
+ */
+export type SidebarAgentsListProps = {
+  readFilter: ThreadReadFilter
+  setReadFilter: (filter: ThreadReadFilter) => void
+  groupBy: ActivityGroupBy
+  setGroupBy: (groupBy: ActivityGroupBy) => void
+  query: string
+  setQuery: (query: string) => void
+  optionsTarget?: HTMLElement | null
+  scrollTopRef?: React.MutableRefObject<number>
+}
+
+export default function SidebarAgentsList({
+  readFilter,
+  setReadFilter,
+  groupBy,
+  setGroupBy,
+  query,
+  setQuery,
+  optionsTarget,
+  scrollTopRef
+}: SidebarAgentsListProps): React.JSX.Element {
+  // Why store-backed: these are persisted preferences (agents* UI fields), unlike the momentary read filter/search.
+  const compactMode = useAppStore((s) => s.agentsCompactMode)
+  const setCompactMode = useAppStore((s) => s.setAgentsCompactMode)
+  const showChildAgents = useAppStore((s) => s.agentsShowChildAgents)
+  const setShowChildAgents = useAppStore((s) => s.setAgentsShowChildAgents)
+  const [selectedPaneKey, setSelectedPaneKey] = useState<string | null>(null)
+  const activityFilterInputRef = useRef<HTMLInputElement | null>(null)
+
+  const {
+    storeData,
+    selectedPaneKeyIsLive,
+    effectiveSelectedPaneKey,
+    visibleThreads,
+    markAllReadThreads,
+    visibleThreadGroups
+  } = useAgentPaneThreads({ query, readFilter, groupBy, selectedPaneKey, showChildAgents })
+
+  useEffect(() => {
+    if (!selectedPaneKeyIsLive) {
+      setSelectedPaneKey(null)
+    }
+  }, [selectedPaneKeyIsLive])
+
+  const {
+    markThreadRead,
+    markThreadUnread,
+    selectThread,
+    jumpToWorkspace,
+    markAllThreadsRead,
+    hasUnreadThreads,
+    hasCompletedThreads,
+    handleClearCompleted
+  } = useActivityThreadActionBindings({
+    visibleThreads,
+    markAllReadThreads,
+    acknowledgeAgents: storeData.acknowledgeAgents,
+    unacknowledgeAgents: storeData.unacknowledgeAgents,
+    setSelectedPaneKey
+  })
+
+  const canJumpToWorkspace = useCallback(
+    (thread: Parameters<typeof hasActivityThreadWorkspace>[0]) =>
+      hasActivityThreadWorkspace(thread, {
+        worktreesByRepo: storeData.worktreesByRepo,
+        detectedWorktreesByRepo: storeData.detectedWorktreesByRepo,
+        folderWorkspaces: storeData.folderWorkspaces,
+        defaultHostId: storeData.defaultHostId
+      }),
+    [
+      storeData.worktreesByRepo,
+      storeData.detectedWorktreesByRepo,
+      storeData.folderWorkspaces,
+      storeData.defaultHostId
+    ]
+  )
+
+  return (
+    <>
+      <ActivityThreadListPane
+        activityFilterInputRef={activityFilterInputRef}
+        query={query}
+        onQueryChange={setQuery}
+        groupBy={groupBy}
+        onGroupByChange={setGroupBy}
+        readFilter={readFilter}
+        onReadFilterChange={setReadFilter}
+        compactMode={compactMode}
+        showChildAgents={showChildAgents}
+        hasUnreadThreads={hasUnreadThreads}
+        onCompactModeChange={setCompactMode}
+        onShowChildAgentsChange={setShowChildAgents}
+        visibleThreadGroups={visibleThreadGroups}
+        visibleThreadCount={visibleThreads.length}
+        selectedPaneKey={effectiveSelectedPaneKey}
+        onSelectThread={selectThread}
+        onJumpToWorkspace={jumpToWorkspace}
+        onMarkThreadRead={markThreadRead}
+        onMarkThreadUnread={markThreadUnread}
+        canJumpToWorkspace={canJumpToWorkspace}
+        allowMarkUnreadWhenSelected
+        showJumpAction={false}
+        showFilterControls={false}
+        showOptionsMenu={false}
+        scopeFilterRow={<ActivityScopeFilterChips />}
+        scrollTopRef={scrollTopRef}
+      />
+      {optionsTarget
+        ? createPortal(
+            <ActivityThreadOptionsMenu
+              groupBy={groupBy}
+              onGroupByChange={setGroupBy}
+              compactMode={compactMode}
+              showChildAgents={showChildAgents}
+              hasUnreadThreads={hasUnreadThreads}
+              hasCompletedThreads={hasCompletedThreads}
+              onCompactModeChange={setCompactMode}
+              onShowChildAgentsChange={setShowChildAgents}
+              onMarkAllThreadsRead={markAllThreadsRead}
+              onClearCompleted={handleClearCompleted}
+            />,
+            optionsTarget
+          )
+        : null}
+    </>
+  )
+}
diff --git a/src/renderer/src/components/sidebar/SidebarHeader.test.tsx b/src/renderer/src/components/sidebar/SidebarHeader.test.tsx
index 19af555be04..5df9ee619c5 100644
--- a/src/renderer/src/components/sidebar/SidebarHeader.test.tsx
+++ b/src/renderer/src/components/sidebar/SidebarHeader.test.tsx
@@ -8,23 +8,51 @@ import SidebarHeader from './SidebarHeader'
 ;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
 
 const mocks = vi.hoisted(() => ({
-  openWorkspaceCreationComposerWithTourHandoff: vi.fn()
+  openWorkspaceCreationComposerWithTourHandoff: vi.fn(),
+  popoverContentProps: { current: null as Record<string, unknown> | null },
+  toast: vi.fn()
 }))
 
 type MockState = {
   repos: { id: string }[]
   groupBy: string
+  sidebarBody: 'workspaces' | 'agents'
+  sidebarWidth: number
+  setSidebarBody: (body: 'workspaces' | 'agents') => void
   openModal: (modal: string, data?: unknown) => void
+  updateSettings: (patch: Record<string, unknown>) => void
+  activeContextualTourId: string | null
+  settings?: {
+    showAgentsSidebar?: boolean
+    experimentalAgentDashboardPopout?: boolean
+    agentsSidebarIntroShown?: boolean
+    agentsSidebarMigratedFromExperimental?: boolean
+  }
 }
 
 let mockState: MockState
 
-vi.mock('@/store', () => ({
-  useAppStore: (selector: (state: MockState) => unknown) => selector(mockState)
+vi.mock('@/store', () => {
+  const useAppStore = (selector: (state: MockState) => unknown) => selector(mockState)
+  useAppStore.getState = () => mockState
+  return { useAppStore }
+})
+
+vi.mock('@/components/dashboard/useAgentBucketCounts', () => ({
+  useAgentBucketCounts: () => ({ attention: 0, working: 0, done: 0, idle: 0 })
 }))
 
 vi.mock('./SidebarWorkspaceOptionsMenu', () => ({ default: () => null }))
 
+vi.mock('./workspace-options-menu-items', () => ({
+  useWorkspaceOptionsFilterBadge: () => ({
+    hasAnyFilter: false,
+    activeFilterCount: 0,
+    activeFilterLabel: '0 filters'
+  }),
+  WorkspaceOptionsMenuItems: () => null
+}))
+
 vi.mock('@/hooks/useShortcutLabel', () => ({ useShortcutLabel: () => '⌘N' }))
 
 vi.mock('@/components/ui/tooltip', () => ({
@@ -37,6 +65,21 @@ vi.mock('../contextual-tours/workspace-creation-tour-handoff', () => ({
   openWorkspaceCreationComposerWithTourHandoff: mocks.openWorkspaceCreationComposerWithTourHandoff
 }))
 
+vi.mock('sonner', () => ({ toast: mocks.toast }))
+
+// Deterministic popover: expose the open flag instead of relying on radix portals.
+vi.mock('@/components/ui/popover', () => ({
+  Popover: ({ children, open }: { children: React.ReactNode; open?: boolean }) => (
+    <div data-intro-open={open ? '' : undefined}>{children}</div>
+  ),
+  PopoverAnchor: ({ children }: { children: React.ReactNode }) => <>{children}</>,
+  PopoverArrow: () => <div data-testid="popover-arrow" />,
+  PopoverContent: ({ children, ...props }: { children: React.ReactNode }) => {
+    mocks.popoverContentProps.current = props
+    return <>{children}</>
+  }
+}))
+
 let container: HTMLDivElement
 let root: Root
 
@@ -48,9 +91,32 @@ function newWorkspaceButton(): HTMLButtonElement {
   return button
 }
 
+function workspaceViewLabel(): string {
+  const button = container.querySelector<HTMLButtonElement>(
+    'button[data-sidebar-section-title="projects"]'
+  )
+  const label = button?.querySelector<HTMLElement>('span:not([aria-hidden])')?.textContent
+  if (!label) {
+    throw new Error('Workspace view label not rendered')
+  }
+  return label
+}
+
 beforeEach(() => {
   mocks.openWorkspaceCreationComposerWithTourHandoff.mockClear()
-  mockState = { repos: [], groupBy: 'repo', openModal: vi.fn() }
+  mocks.toast.mockClear()
+  mockState = {
+    repos: [],
+    groupBy: 'repo',
+    sidebarBody: 'workspaces',
+    sidebarWidth: 280,
+    setSidebarBody: vi.fn(),
+    openModal: vi.fn(),
+    updateSettings: vi.fn(),
+    activeContextualTourId: null,
+    // Hydrated settings: the Agents tab is hidden until settings load.
+    settings: { showAgentsSidebar: true }
+  }
   container = document.createElement('div')
   document.body.append(container)
   root = createRoot(container)
@@ -90,4 +156,269 @@ describe('SidebarHeader', () => {
     expect(newWorkspaceButton().disabled).toBe(false)
     expect(mocks.openWorkspaceCreationComposerWithTourHandoff).toHaveBeenCalledTimes(1)
   })
+
+  it('switches sidebar body to agents when clicking the agents tab in workspaces mode', () => {
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    const agentTab = container.querySelector<HTMLButtonElement>(
+      'button[data-sidebar-section-title="agents"]'
+    )
+    expect(agentTab).toBeTruthy()
+
+    act(() => {
+      agentTab?.click()
+    })
+
+    expect(mockState.setSidebarBody).toHaveBeenCalledWith('agents')
+  })
+
+  it('switches sidebar body to workspaces when clicking the projects tab in agents mode', () => {
+    mockState.sidebarBody = 'agents'
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    const projectsTab = container.querySelector<HTMLButtonElement>(
+      'button[data-sidebar-section-title="projects"]'
+    )
+    expect(projectsTab).toBeTruthy()
+
+    act(() => {
+      projectsTab?.click()
+    })
+
+    expect(mockState.setSidebarBody).toHaveBeenCalledWith('workspaces')
+  })
+
+  it('always labels the workspace view as Spaces', () => {
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(workspaceViewLabel()).toBe('Spaces')
+
+    mockState.groupBy = 'workspace-status'
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+    expect(workspaceViewLabel()).toBe('Spaces')
+
+    mockState.sidebarBody = 'agents'
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+    expect(workspaceViewLabel()).toBe('Spaces')
+
+    mockState.sidebarBody = 'workspaces'
+    mockState.groupBy = 'none'
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+    expect(workspaceViewLabel()).toBe('Spaces')
+
+    mockState.sidebarBody = 'agents'
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+    expect(workspaceViewLabel()).toBe('Spaces')
+  })
+
+  it('omits the Agents tab and returns to workspaces when it is disabled', () => {
+    mockState.sidebarBody = 'agents'
+    mockState.settings = { showAgentsSidebar: false }
+
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(container.querySelector('button[data-sidebar-section-title="agents"]')).toBeNull()
+    expect(mockState.setSidebarBody).toHaveBeenCalledWith('workspaces')
+  })
+
+  it('does not render workspace action buttons in agents mode', () => {
+    mockState.sidebarBody = 'agents'
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(container.querySelector('[aria-label="New workspace"]')).toBeNull()
+    expect(container.querySelector('[aria-label="Add Project"]')).toBeNull()
+  })
+
+  it('keeps the view toggle and actions on one row at the default sidebar width', () => {
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    const headerRow = container.querySelector('[role="radiogroup"]')?.parentElement
+    const headerClasses = new Set(headerRow?.className.split(/\s+/) ?? [])
+    expect(headerClasses.has('flex-wrap')).toBe(false)
+    expect(headerClasses.has('h-9')).toBe(true)
+    expect(container.querySelector('[aria-label="Add Project"]')).toBeTruthy()
+    expect(container.querySelector('[aria-label="New workspace"]')).toBeTruthy()
+  })
+
+  it('keeps New workspace and a more menu on one row at compact width', () => {
+    mockState.sidebarWidth = 220
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(container.querySelector('[aria-label="Add Project"]')).toBeNull()
+    expect(container.querySelector('[aria-label="New workspace"]')).toBeTruthy()
+    expect(container.querySelector('[aria-label="More workspace actions"]')).toBeTruthy()
+
+    act(() => {
+      newWorkspaceButton().click()
+    })
+    expect(mocks.openWorkspaceCreationComposerWithTourHandoff).toHaveBeenCalledTimes(1)
+  })
+
+  it('keeps the intro closed and unstamped before settings hydrate', () => {
+    mockState.settings = undefined
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(container.querySelector('[data-intro-open]')).toBeNull()
+
+    const projectsTab = container.querySelector<HTMLButtonElement>(
+      'button[data-sidebar-section-title="projects"]'
+    )
+    act(() => {
+      projectsTab?.click()
+    })
+    expect(mockState.updateSettings).not.toHaveBeenCalled()
+  })
+
+  it('does not reset a persisted agents body before settings hydrate', () => {
+    mockState.settings = undefined
+    mockState.sidebarBody = 'agents'
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(mockState.setSidebarBody).not.toHaveBeenCalled()
+  })
+
+  it('opens the intro once hydrated and stamps it only while it is on screen', () => {
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(container.querySelector('[data-intro-open]')).toBeTruthy()
+
+    const agentTab = container.querySelector<HTMLButtonElement>(
+      'button[data-sidebar-section-title="agents"]'
+    )
+    act(() => {
+      agentTab?.click()
+    })
+    expect(mockState.updateSettings).toHaveBeenCalledWith({ agentsSidebarIntroShown: true })
+  })
+
+  it('hides the Agents tab when a new user chooses Hide Agents', () => {
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    const deferButton = Array.from(container.querySelectorAll('button')).find(
+      (button) => button.textContent?.trim() === 'Hide Agents'
+    )
+    expect(deferButton).toBeTruthy()
+    act(() => {
+      deferButton?.click()
+    })
+
+    expect(mockState.updateSettings).toHaveBeenCalledWith({
+      agentsSidebarIntroShown: true,
+      showAgentsSidebar: false
+    })
+    expect(mocks.toast).toHaveBeenCalledWith(
+      'Agents tab hidden. Re-enable it in Settings → Experimental.'
+    )
+  })
+
+  it('shows only Open Agents for migrated users', () => {
+    mockState.settings = {
+      showAgentsSidebar: true,
+      agentsSidebarMigratedFromExperimental: true
+    }
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    const introButtons = Array.from(container.querySelectorAll('button')).filter((button) =>
+      ['Open Agents', 'Hide Agents'].includes(button.textContent?.trim() ?? '')
+    )
+    expect(introButtons).toHaveLength(1)
+    expect(introButtons[0]?.textContent?.trim()).toBe('Open Agents')
+  })
+
+  it('prevents auto-focus and outside focus transfers from dismissing the intro popover', () => {
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    const props = mocks.popoverContentProps.current as {
+      onOpenAutoFocus?: (event: Event) => void
+      onFocusOutside?: (event: Event) => void
+    } | null
+
+    expect(props).toBeTruthy()
+
+    const openEvent = new Event('openAutoFocus')
+    const openPreventDefault = vi.spyOn(openEvent, 'preventDefault')
+    props?.onOpenAutoFocus?.(openEvent)
+    expect(openPreventDefault).toHaveBeenCalled()
+
+    const focusOutsideEvent = new Event('focusOutside')
+    const focusOutsidePreventDefault = vi.spyOn(focusOutsideEvent, 'preventDefault')
+    props?.onFocusOutside?.(focusOutsideEvent)
+    expect(focusOutsidePreventDefault).toHaveBeenCalled()
+  })
+
+  it('never re-stamps the intro after it was acknowledged', () => {
+    mockState.settings = { showAgentsSidebar: true, agentsSidebarIntroShown: true }
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(container.querySelector('[data-intro-open]')).toBeNull()
+
+    const agentTab = container.querySelector<HTMLButtonElement>(
+      'button[data-sidebar-section-title="agents"]'
+    )
+    act(() => {
+      agentTab?.click()
+    })
+    expect(mockState.updateSettings).not.toHaveBeenCalled()
+  })
+
+  it('does not expose the deprecated full Agents view in agents mode', () => {
+    mockState.settings = { showAgentsSidebar: true, agentsSidebarIntroShown: true }
+    mockState.sidebarBody = 'agents'
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(container.querySelector('[aria-label="Open full Agents view"]')).toBeNull()
+  })
+
+  it('switches to compact actions only below the wide-layout breakpoint', () => {
+    mockState.sidebarWidth = 234
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+    expect(container.querySelector('[aria-label="More workspace actions"]')).toBeTruthy()
+
+    mockState.sidebarWidth = 235
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+    expect(container.querySelector('[aria-label="More workspace actions"]')).toBeNull()
+    expect(container.querySelector('[aria-label="Add Project"]')).toBeTruthy()
+  })
 })
diff --git a/src/renderer/src/components/sidebar/SidebarHeader.tsx b/src/renderer/src/components/sidebar/SidebarHeader.tsx
index b31eb5d378b..dfc22c8b1bc 100644
--- a/src/renderer/src/components/sidebar/SidebarHeader.tsx
+++ b/src/renderer/src/components/sidebar/SidebarHeader.tsx
@@ -1,88 +1,207 @@
-import React from 'react'
-import { FolderPlus, Plus } from 'lucide-react'
+import React, { useEffect, useId } from 'react'
+import { useTranslation } from 'react-i18next'
 import { useAppStore } from '@/store'
-import { Button } from '@/components/ui/button'
-import { Tooltip, TooltipTrigger, TooltipContent } from '@/components/ui/tooltip'
-import SidebarWorkspaceOptionsMenu from './SidebarWorkspaceOptionsMenu'
-import { useShortcutLabel } from '@/hooks/useShortcutLabel'
-import { openWorkspaceCreationComposerWithTourHandoff } from '../contextual-tours/workspace-creation-tour-handoff'
 import { translate } from '@/i18n/i18n'
+import { SidebarViewToggle } from './sidebar-view-toggle'
+import { SidebarHeaderActions } from './sidebar-header-actions'
+import { shouldShowAgentsSidebar } from './agents-sidebar-visibility'
+import { Popover, PopoverAnchor, PopoverArrow, PopoverContent } from '@/components/ui/popover'
+import { Button } from '@/components/ui/button'
+import { Sparkles } from 'lucide-react'
+import { toast } from 'sonner'
 
 type SidebarHeaderProps = {
   onWorkspaceBoardMenuOpenChange: (open: boolean) => void
+  agentToolbar?: React.ReactNode
+  agentSearchRow?: React.ReactNode
+  showAgentsSidebar?: boolean
 }
 
 const SidebarHeader = React.memo(function SidebarHeader({
-  onWorkspaceBoardMenuOpenChange
+  onWorkspaceBoardMenuOpenChange,
+  agentToolbar,
+  agentSearchRow,
+  showAgentsSidebar: showAgentsSidebarProp
 }: SidebarHeaderProps) {
-  const openModal = useAppStore((s) => s.openModal)
-  const newWorktreeShortcutLabel = useShortcutLabel('workspace.create')
-  const groupBy = useAppStore((s) => s.groupBy)
-  const sidebarTitle = groupBy === 'repo' ? 'Projects' : 'Workspaces'
+  // Subscribe this memoized header to locale changes before using translate().
+  useTranslation()
+  const sidebarBody = useAppStore((s) => s.sidebarBody ?? 'workspaces')
+  // Why the derived boolean, not s.settings: the settings object gets a new identity on
+  // every write, which would re-render this memoized header subtree each time.
+  const showAgentsSidebarFromStore = useAppStore((s) => shouldShowAgentsSidebar(s.settings))
+  const showAgentsSidebar = showAgentsSidebarProp ?? showAgentsSidebarFromStore
+  const setSidebarBody = useAppStore((s) => s.setSidebarBody)
+  const updateSettings = useAppStore((s) => s.updateSettings)
+  const agentsSidebarIntroShown = useAppStore((s) => s.settings?.agentsSidebarIntroShown === true)
+  const migratedFromExperimental = useAppStore(
+    (s) => s.settings?.agentsSidebarMigratedFromExperimental === true
+  )
+  const introTitleId = useId()
+  const introDescriptionId = useId()
+  // Why: settings are null until hydration; deriving intro visibility from the
+  // null default would flash the popover open (and stamp it shown) every launch.
+  const settingsHydrated = useAppStore((s) => s.settings != null)
+  const agentsViewActive = showAgentsSidebar && sidebarBody === 'agents'
+  const introOpen = settingsHydrated && showAgentsSidebar && !agentsSidebarIntroShown
+  const acknowledgeIntro = React.useCallback(() => {
+    void updateSettings?.({ agentsSidebarIntroShown: true })
+  }, [updateSettings])
+  const deferAgentsIntro = React.useCallback(() => {
+    // Hide the new tab; users can re-enable it in Settings.
+    void updateSettings?.({ agentsSidebarIntroShown: true, showAgentsSidebar: false })
+    toast(
+      translate(
+        'agentsSidebarIntro.new.hiddenToast',
+        'Agents tab hidden. Re-enable it in Settings → Experimental.'
+      )
+    )
+  }, [updateSettings])
+
+  useEffect(() => {
+    // Wait for hydration: settings null must not clobber a persisted 'agents' body.
+    if (settingsHydrated && !showAgentsSidebar && sidebarBody === 'agents') {
+      setSidebarBody?.('workspaces')
+    }
+  }, [setSidebarBody, settingsHydrated, showAgentsSidebar, sidebarBody])
 
   return (
-    <div className="mt-2 flex h-8 items-center justify-between px-2 gap-2">
-      <div className="flex min-w-0 items-center gap-1">
-        <span
-          className="pl-2 pr-0.5 text-xs font-semibold text-muted-foreground/80 select-none"
-          data-sidebar-section-title={groupBy === 'repo' ? 'projects' : 'workspaces'}
+    <>
+      <div className="mt-2 flex h-9 min-w-0 items-center justify-between gap-1.5 px-2">
+        <Popover
+          open={introOpen}
+          onOpenChange={(open) => {
+            if (!open) {
+              acknowledgeIntro()
+            }
+          }}
         >
-          {sidebarTitle}
-        </span>
+          <div className="flex h-9 items-center">
+            <SidebarViewToggle
+              ariaLabel={translate('auto.components.sidebar.SidebarHeader.views', 'Sidebar view')}
+              value={agentsViewActive ? 'agents' : 'workspaces'}
+              onSelect={(value) => {
+                // Only stamp the intro as seen when it is actually on screen.
+                if (introOpen) {
+                  acknowledgeIntro()
+                }
+                setSidebarBody?.(value as 'workspaces' | 'agents')
+              }}
+              options={[
+                {
+                  value: 'workspaces',
+                  label: translate('auto.components.sidebar.SidebarHeader.spaces', 'Spaces'),
+                  sectionTitle: 'projects'
+                },
+                ...(showAgentsSidebar
+                  ? [
+                      {
+                        value: 'agents' as const,
+                        label: translate('dashboard.sidebar.label', 'Agents'),
+                        sectionTitle: 'agents' as const,
+                        renderWrapper: (button: React.ReactNode) => (
+                          <PopoverAnchor asChild>{button}</PopoverAnchor>
+                        )
+                      }
+                    ]
+                  : [])
+              ]}
+            />
+          </div>
+          {/* Why: prevent startup terminal/editor auto-focus from dismissing the intro popover. */}
+          <PopoverContent
+            side="bottom"
+            align="center"
+            sideOffset={8}
+            className="w-72 overflow-visible rounded-xl border border-border bg-popover p-3.5 text-popover-foreground shadow-floating"
+            onOpenAutoFocus={(event) => event.preventDefault()}
+            onFocusOutside={(event) => event.preventDefault()}
+            aria-labelledby={introTitleId}
+            aria-describedby={introDescriptionId}
+          >
+            <PopoverArrow asChild width={14} height={7} className="overflow-visible">
+              <svg
+                viewBox="0 0 30 10"
+                preserveAspectRatio="none"
+                className="block overflow-visible"
+              >
+                <polygon points="0,0 30,0 15,10" className="fill-popover" />
+                <path d="M0 0 L15 10 L30 0" fill="none" className="stroke-border stroke-[1.5]" />
+              </svg>
+            </PopoverArrow>
+            <div className="space-y-2.5">
+              <svg width="0" height="0" className="absolute pointer-events-none" aria-hidden="true">
+                <defs>
+                  <linearGradient id="agents-intro-aquatic" x1="0%" y1="0%" x2="100%" y2="100%">
+                    <stop offset="0%" stopColor="#10b981" />
+                    <stop offset="45%" stopColor="#06b6d4" />
+                    <stop offset="100%" stopColor="#2563eb" />
+                  </linearGradient>
+                </defs>
+              </svg>
+              <div className="space-y-1">
+                <div className="flex items-center gap-1.5">
+                  <Sparkles
+                    className="size-4 shrink-0"
+                    stroke="url(#agents-intro-aquatic)"
+                    fill="url(#agents-intro-aquatic)"
+                    fillOpacity={0.15}
+                    strokeWidth={2}
+                  />
+                  <h3 id={introTitleId} className="text-sm font-semibold text-foreground">
+                    {migratedFromExperimental
+                      ? translate('agentsSidebarIntro.migrated.title', 'Agents are easier to find')
+                      : translate('agentsSidebarIntro.new.title', 'Meet your Agents tab')}
+                  </h3>
+                </div>
+                <p
+                  id={introDescriptionId}
+                  className="text-xs leading-relaxed text-muted-foreground"
+                >
+                  {migratedFromExperimental
+                    ? translate(
+                        'agentsSidebarIntro.migrated.description',
+                        'Your Agents view is now a dedicated sidebar tab. Your activity and filters are preserved.'
+                      )
+                    : translate(
+                        'agentsSidebarIntro.new.description',
+                        'See what your agents are working on, what is done, and where you need to step in.'
+                      )}
+                </p>
+              </div>
+              <div className="flex justify-end items-center gap-2 pt-0.5">
+                {!migratedFromExperimental ? (
+                  <Button variant="ghost" size="sm" onClick={deferAgentsIntro}>
+                    {translate('agentsSidebarIntro.new.hide', 'Hide Agents')}
+                  </Button>
+                ) : null}
+                <Button
+                  size="sm"
+                  className="border-0 bg-[linear-gradient(135deg,#10b981_0%,#06b6d4_45%,#2563eb_100%)] text-white font-medium shadow-xs hover:brightness-105 active:scale-[0.98] transition-all"
+                  onClick={() => {
+                    acknowledgeIntro()
+                    setSidebarBody?.('agents')
+                  }}
+                >
+                  {migratedFromExperimental
+                    ? translate('agentsSidebarIntro.migrated.action', 'Open Agents')
+                    : translate('agentsSidebarIntro.new.action', 'Try Agents')}
+                </Button>
+              </div>
+            </div>
+          </PopoverContent>
+        </Popover>
+        {agentsViewActive ? (
+          <div className="flex shrink-0 items-center gap-0.5">
+            {/* Do not add an expand action: the full Agents view is deprecated and must not open. */}
+            {agentToolbar}
+          </div>
+        ) : null}
+        {!agentsViewActive ? (
+          <SidebarHeaderActions onWorkspaceBoardMenuOpenChange={onWorkspaceBoardMenuOpenChange} />
+        ) : null}
       </div>
-      <div className="flex items-center gap-1.5 shrink-0">
-        <SidebarWorkspaceOptionsMenu
-          preserveWorkspaceBoardOpen
-          onMenuOpenChange={onWorkspaceBoardMenuOpenChange}
-        />
-
-        <Tooltip>
-          <TooltipTrigger asChild>
-            <Button
-              variant="ghost"
-              size="icon-xs"
-              className="text-muted-foreground"
-              aria-label={translate(
-                'auto.components.sidebar.SidebarHeader.25a95899c9',
-                'Add Project'
-              )}
-              onClick={() => openModal('add-repo')}
-            >
-              <FolderPlus className="size-3.5" strokeWidth={2.25} />
-            </Button>
-          </TooltipTrigger>
-          <TooltipContent side="bottom" sideOffset={6}>
-            {translate('auto.components.sidebar.SidebarHeader.25a95899c9', 'Add Project')}
-          </TooltipContent>
-        </Tooltip>
-
-        <Tooltip>
-          <TooltipTrigger asChild>
-            <Button
-              variant="ghost"
-              size="icon-xs"
-              // Why: the parallel-work tour must click the real sidebar
-              // control so it can hand off to the workspace-creation tour.
-              onClick={openWorkspaceCreationComposerWithTourHandoff}
-              aria-label={translate(
-                'auto.components.sidebar.SidebarHeader.92154beb7e',
-                'New workspace'
-              )}
-              data-contextual-tour-target="workspace-create-control"
-            >
-              <Plus className="size-3.5" strokeWidth={2.25} />
-            </Button>
-          </TooltipTrigger>
-          <TooltipContent side="right" sideOffset={6}>
-            {translate(
-              'auto.components.sidebar.SidebarHeader.ca6f729da2',
-              'New workspace ({{value0}})',
-              { value0: newWorktreeShortcutLabel }
-            )}
-          </TooltipContent>
-        </Tooltip>
-      </div>
-    </div>
+      {agentsViewActive ? agentSearchRow : null}
+    </>
   )
 })
 
diff --git a/src/renderer/src/components/sidebar/SidebarNav.test.tsx b/src/renderer/src/components/sidebar/SidebarNav.test.tsx
index 19c93a2d1c4..e3612db3858 100644
--- a/src/renderer/src/components/sidebar/SidebarNav.test.tsx
+++ b/src/renderer/src/components/sidebar/SidebarNav.test.tsx
@@ -89,8 +89,6 @@ vi.mock('@/components/ui/context-menu', () => ({
 
 import SidebarNav, {
   getSetupGuideSidebarEntryReady,
-  shouldShowAgentDashboardButton,
-  shouldShowAgentsButton,
   shouldShowAutomationsButton,
   shouldShowArtifactsButton,
   shouldShowMobileButton,
@@ -220,45 +218,18 @@ describe('SidebarNav', () => {
     setSidebarState()
   })
 
-  it('hides the Agents entry while settings are loading', () => {
-    expect(shouldShowAgentsButton(null)).toBe(false)
-  })
-
-  it('hides the Agents entry while the experimental Agents view is off', () => {
-    expect(
-      shouldShowAgentsButton({
-        ...getDefaultSettings('/tmp'),
-        experimentalActivity: false
-      })
-    ).toBe(false)
-  })
-
-  it('shows the Agents entry when the experimental Agents view is on', () => {
-    expect(
-      shouldShowAgentsButton({
-        ...getDefaultSettings('/tmp'),
-        experimentalActivity: true
-      })
-    ).toBe(true)
-  })
-
-  it('shows the Agent Dashboard entry only when its experiment is enabled', () => {
-    expect(shouldShowAgentDashboardButton(null)).toBe(false)
-    expect(shouldShowAgentDashboardButton({ experimentalAgentDashboardPopout: false })).toBe(false)
-    expect(shouldShowAgentDashboardButton({ experimentalAgentDashboardPopout: true })).toBe(true)
-  })
-
-  it('keeps the Agent Dashboard row unmounted by default', async () => {
+  it('keeps the Agent Dashboard row unmounted while its experiment is off', async () => {
     const container = await renderSidebarNav()
 
     expect(queryButtonByText(container, 'Agent Dashboard')).toBeNull()
     expect(mocks.getAgentBucketCounts).not.toHaveBeenCalled()
   })
 
-  it('mounts the Agent Dashboard row after opt-in', async () => {
+  it('mounts the Agent Dashboard row only when its experiment is enabled', async () => {
     setSidebarState({
       settings: {
         ...getDefaultSettings('/tmp'),
+        showAgentsSidebar: false,
         experimentalAgentDashboardPopout: true
       }
     })
diff --git a/src/renderer/src/components/sidebar/SidebarNav.tsx b/src/renderer/src/components/sidebar/SidebarNav.tsx
index bdb98ead14f..08fc1c941a5 100644
--- a/src/renderer/src/components/sidebar/SidebarNav.tsx
+++ b/src/renderer/src/components/sidebar/SidebarNav.tsx
@@ -1,10 +1,8 @@
 import React from 'react'
-import { Bell, BookOpen, CalendarClock, EyeOff, Files, Search, Smartphone } from 'lucide-react'
+import { BookOpen, CalendarClock, EyeOff, Files, Search, Smartphone } from 'lucide-react'
 import { useTranslation } from 'react-i18next'
 import { useAppStore } from '@/store'
 import { cn } from '@/lib/utils'
-import type { GlobalSettings } from '../../../../shared/global-settings-types'
-import { useActivityUnreadCount } from '@/components/activity/useActivityUnreadCount'
 import { useShortcutKeyComboDetails } from '@/hooks/useShortcutLabel'
 import { ShortcutKeyCombo } from '@/components/ShortcutKeyCombo'
 import { useMobileSidebarOnboardingBadge } from './mobile-sidebar-onboarding-badge'
@@ -16,45 +14,40 @@ import { SidebarTaskNavButton } from './SidebarTaskNavButton'
 import { HideSidebarMenu } from './sidebar-nav-controls'
 import { translate } from '@/i18n/i18n'
 import { lazyWithRetry } from '@/lib/lazy-with-retry'
+import type { GlobalSettings } from '../../../../shared/global-settings-types'
 
 export { getSetupGuideSidebarEntryReady, shouldShowSetupGuideEntry } from './SetupGuideSidebarEntry'
 
-export function shouldShowAgentsButton(
-  settings: Pick<GlobalSettings, 'experimentalActivity'> | null | undefined
-): boolean {
-  return settings?.experimentalActivity === true
-}
-
-export function shouldShowAgentDashboardButton(
-  settings: Pick<GlobalSettings, 'experimentalAgentDashboardPopout'> | null | undefined
-): boolean {
-  return settings?.experimentalAgentDashboardPopout === true
-}
-
 export function shouldShowMobileButton(
-  settings: Pick<GlobalSettings, 'showMobileButton'> | null | undefined
+  settings: Partial<Pick<GlobalSettings, 'showMobileButton'>> | null | undefined
 ): boolean {
   return settings?.showMobileButton !== false
 }
 
 export function shouldShowAutomationsButton(
-  settings: Pick<GlobalSettings, 'showAutomationsButton'> | null | undefined
+  settings: Partial<Pick<GlobalSettings, 'showAutomationsButton'>> | null | undefined
 ): boolean {
   return settings?.showAutomationsButton !== false
 }
 
 export function shouldShowArtifactsButton(
-  settings: Pick<GlobalSettings, 'showArtifactsButton'> | null | undefined
+  settings: Partial<Pick<GlobalSettings, 'showArtifactsButton'>> | null | undefined
 ): boolean {
   return settings?.showArtifactsButton === true
 }
 
 export function shouldShowSkillsButton(
-  settings: Pick<GlobalSettings, 'showSkillsButton'> | null | undefined
+  settings: Partial<Pick<GlobalSettings, 'showSkillsButton'>> | null | undefined
 ): boolean {
   return settings?.showSkillsButton === true
 }
 
+export function shouldShowAgentDashboardButton(
+  settings: Partial<Pick<GlobalSettings, 'experimentalAgentDashboardPopout'>> | null | undefined
+): boolean {
+  return settings?.experimentalAgentDashboardPopout === true
+}
+
 const AgentDashboardSidebarEntry = lazyWithRetry(() => import('./AgentDashboardSidebarEntry'))
 
 const SidebarNav = React.memo(function SidebarNav() {
@@ -63,30 +56,21 @@ const SidebarNav = React.memo(function SidebarNav() {
   useTranslation()
   const worktreePaletteShortcutCombos = useShortcutKeyComboDetails('worktree.palette')
   const openAutomationsPage = useAppStore((s) => s.openAutomationsPage)
-  const openActivityPage = useAppStore((s) => s.openActivityPage)
   const openMobilePage = useAppStore((s) => s.openMobilePage)
   const openArtifactsPage = useAppStore((s) => s.openArtifactsPage)
   const openSkillsPage = useAppStore((s) => s.openSkillsPage)
   const openModal = useAppStore((s) => s.openModal)
   const updateSettings = useAppStore((s) => s.updateSettings)
   const activeView = useAppStore((s) => s.activeView)
-  const experimentalSidebarButtons = useAppStore(
-    (s) =>
-      (shouldShowAgentsButton(s.settings) ? 1 : 0) |
-      (shouldShowAgentDashboardButton(s.settings) ? 2 : 0)
-  )
-  const showAgentsButton = (experimentalSidebarButtons & 1) !== 0
-  const showAgentDashboardButton = (experimentalSidebarButtons & 2) !== 0
+  const showAgentDashboardButton = useAppStore((s) => shouldShowAgentDashboardButton(s.settings))
   const showAutomationsButton = useAppStore((s) => shouldShowAutomationsButton(s.settings))
   const showMobileButton = useAppStore((s) => shouldShowMobileButton(s.settings))
   const showArtifactsButton = useAppStore((s) => shouldShowArtifactsButton(s.settings))
   const showSkillsButton = useAppStore((s) => shouldShowSkillsButton(s.settings))
   const automationsActive = activeView === 'automations'
-  const activityActive = activeView === 'activity'
   const mobileActive = activeView === 'mobile'
   const artifactsActive = activeView === 'artifacts'
   const skillsActive = activeView === 'skills'
-  const activityUnreadCount = useActivityUnreadCount(showAgentsButton, 'sidebar-badge')
   const mobileOnboardingBadge = useMobileSidebarOnboardingBadge(showMobileButton)
   const hideAutomationsButton = React.useCallback(() => {
     void updateSettings({ showAutomationsButton: false })
@@ -229,35 +213,6 @@ const SidebarNav = React.memo(function SidebarNav() {
           <AgentDashboardSidebarEntry />
         </React.Suspense>
       ) : null}
-      {showAgentsButton ? (
-        <button
-          type="button"
-          onClick={openActivityPage}
-          aria-current={activityActive ? 'page' : undefined}
-          className={cn(
-            'flex w-full items-center gap-2 rounded-md px-2 py-1.5 text-left text-[13px] font-medium tracking-tight transition-colors',
-            activityActive
-              ? 'bg-worktree-sidebar-accent text-worktree-sidebar-accent-foreground'
-              : 'text-worktree-sidebar-foreground/60 hover:bg-worktree-sidebar-foreground/8'
-          )}
-        >
-          <Bell
-            className={cn(
-              'size-4 shrink-0',
-              !activityActive && 'text-worktree-sidebar-foreground/30'
-            )}
-            strokeWidth={activityActive ? 2.25 : 1.75}
-          />
-          <span className="flex-1">
-            {translate('auto.components.sidebar.SidebarNav.9c95e1ce91', 'Agents')}
-          </span>
-          {activityUnreadCount > 0 ? (
-            <span className="rounded-full bg-primary px-1.5 py-px text-[10px] font-semibold text-primary-foreground">
-              {activityUnreadCount}
-            </span>
-          ) : null}
-        </button>
-      ) : null}
       {showMobileButton ? (
         <ContextMenu>
           <ContextMenuTrigger asChild>
diff --git a/src/renderer/src/components/sidebar/SidebarRepositoryFilterSection.tsx b/src/renderer/src/components/sidebar/SidebarRepositoryFilterSection.tsx
index 65623ee8983..1db46d84660 100644
--- a/src/renderer/src/components/sidebar/SidebarRepositoryFilterSection.tsx
+++ b/src/renderer/src/components/sidebar/SidebarRepositoryFilterSection.tsx
@@ -34,14 +34,22 @@ function getProjectFilterVisibilityLabel({
 
 type SidebarRepositoryFilterSectionProps = {
   preserveWorkspaceBoardOpen?: boolean
+  // Why: the Agents view reuses this section with its own persisted filter;
+  // absent props fall back to the workspace-nav filter state.
+  filterRepoIds?: readonly string[]
+  setFilterRepoIds?: (ids: string[]) => void
 }
 
 const SidebarRepositoryFilterSection = React.memo(function SidebarRepositoryFilterSection({
-  preserveWorkspaceBoardOpen = false
+  preserveWorkspaceBoardOpen = false,
+  filterRepoIds: filterRepoIdsProp,
+  setFilterRepoIds: setFilterRepoIdsProp
 }: SidebarRepositoryFilterSectionProps) {
-  const filterRepoIds = useAppStore((s) => s.filterRepoIds)
-  const setFilterRepoIds = useAppStore((s) => s.setFilterRepoIds)
+  const workspaceFilterRepoIds = useAppStore((s) => s.filterRepoIds)
+  const setWorkspaceFilterRepoIds = useAppStore((s) => s.setFilterRepoIds)
   const repos = useAppStore((s) => s.repos)
+  const filterRepoIds = filterRepoIdsProp ?? workspaceFilterRepoIds
+  const setFilterRepoIds = setFilterRepoIdsProp ?? setWorkspaceFilterRepoIds
 
   const canFilterRepos = repos.length > 1
   // Why: derive from current repos so stale ids (e.g. lingering after a repo
diff --git a/src/renderer/src/components/sidebar/SidebarWorkspaceOptionsMenu.tsx b/src/renderer/src/components/sidebar/SidebarWorkspaceOptionsMenu.tsx
index 302d654faea..9f230e94f95 100644
--- a/src/renderer/src/components/sidebar/SidebarWorkspaceOptionsMenu.tsx
+++ b/src/renderer/src/components/sidebar/SidebarWorkspaceOptionsMenu.tsx
@@ -1,31 +1,17 @@
-import React, { useCallback, useMemo, useState } from 'react'
+import React, { useCallback, useState } from 'react'
 import { SlidersHorizontal } from 'lucide-react'
-import { useAppStore } from '@/store'
 import { Button } from '@/components/ui/button'
 import {
   DropdownMenu,
   DropdownMenuContent,
-  DropdownMenuLabel,
-  DropdownMenuRadioGroup,
-  DropdownMenuRadioItem,
-  DropdownMenuSeparator,
-  DropdownMenuSub,
-  DropdownMenuSubContent,
-  DropdownMenuSubTrigger,
   DropdownMenuTrigger
 } from '@/components/ui/dropdown-menu'
 import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
-import { DEFAULT_SHOW_SLEEPING_WORKSPACES } from '../../../../shared/constants'
-import { isSleepingSweepExemptionNarrowingList } from './visible-worktrees'
-import SidebarRepositoryFilterSection from './SidebarRepositoryFilterSection'
-import SidebarWorkspaceFilterSection from './SidebarWorkspaceFilterSection'
-import { getSidebarHostVisibilityLabel, shouldShowHostScopeControls } from './sidebar-host-options'
-import { useSidebarHostScopeOptions } from './use-sidebar-host-scope-options'
-import { SidebarHostScopeMenuSection } from './SidebarHostScopeMenuSection'
-import { PROJECT_ORDER_OPTIONS, SORT_OPTIONS } from './sidebar-workspace-option-items'
-import { WorktreeCardDisplayMenuSection } from './WorktreeCardDisplayMenuSection'
 import { translate } from '@/i18n/i18n'
-import { SidebarGroupByToggle } from './SidebarGroupByToggle'
+import {
+  useWorkspaceOptionsFilterBadge,
+  WorkspaceOptionsMenuItems
+} from './workspace-options-menu-items'
 
 type SidebarWorkspaceOptionsMenuProps = {
   preserveWorkspaceBoardOpen?: boolean
@@ -36,28 +22,8 @@ const SidebarWorkspaceOptionsMenu = React.memo(function SidebarWorkspaceOptionsM
   preserveWorkspaceBoardOpen = false,
   onMenuOpenChange
 }: SidebarWorkspaceOptionsMenuProps) {
-  const showSleepingWorkspaces = useAppStore((s) => s.showSleepingWorkspaces)
-  const hideDefaultBranchWorkspace = useAppStore((s) => s.hideDefaultBranchWorkspace)
-  const hideAutomationGeneratedWorkspaces = useAppStore((s) => s.hideAutomationGeneratedWorkspaces)
-  const hideCliCreatedWorkspaces = useAppStore((s) => s.hideCliCreatedWorkspaces)
-  const hideDetachedHeadWorkspaces = useAppStore((s) => s.hideDetachedHeadWorkspaces)
-  const hideWorkspacesFromOtherDevices = useAppStore((s) => s.hideWorkspacesFromOtherDevices)
-  const alwaysShowDefaultBranchWorkspace = useAppStore((s) => s.alwaysShowDefaultBranchWorkspace)
-  const filterRepoIds = useAppStore((s) => s.filterRepoIds)
-  const repos = useAppStore((s) => s.repos)
-  const setWorkspaceHostScope = useAppStore((s) => s.setWorkspaceHostScope)
-  const visibleWorkspaceHostIds = useAppStore((s) => s.visibleWorkspaceHostIds)
-  const setVisibleWorkspaceHostIds = useAppStore((s) => s.setVisibleWorkspaceHostIds)
-  const sortBy = useAppStore((s) => s.sortBy)
-  const setSortBy = useAppStore((s) => s.setSortBy)
-  const groupBy = useAppStore((s) => s.groupBy)
-  const setGroupBy = useAppStore((s) => s.setGroupBy)
-  const projectOrderBy = useAppStore((s) => s.projectOrderBy)
-  const setProjectOrderBy = useAppStore((s) => s.setProjectOrderBy)
-
   const [open, setOpen] = useState(false)
-  const { hostOptions } = useSidebarHostScopeOptions()
-  const showHostScopeControls = shouldShowHostScopeControls(hostOptions)
+  const { hasAnyFilter, activeFilterCount, activeFilterLabel } = useWorkspaceOptionsFilterBadge()
 
   const handleOpenChange = useCallback(
     (next: boolean) => {
@@ -67,52 +33,6 @@ const SidebarWorkspaceOptionsMenu = React.memo(function SidebarWorkspaceOptionsM
     [onMenuOpenChange]
   )
 
-  // Why: derive from current repos so stale ids (e.g. lingering after a repo
-  // is removed) don't inflate counts or falsely signal an applied filter.
-  const selectedCount = useMemo(() => {
-    let count = 0
-    for (const repo of repos) {
-      if (filterRepoIds.includes(repo.id)) {
-        count += 1
-      }
-    }
-    return count
-  }, [repos, filterRepoIds])
-  const hasRepoFilter = selectedCount > 0
-  const hasSleepingFilter = showSleepingWorkspaces !== DEFAULT_SHOW_SLEEPING_WORKSPACES
-  const hasHostVisibilityFilter = visibleWorkspaceHostIds !== null
-  // Why gated on the parent row: the exemption only narrows the list during the
-  // "Hide sleeping" sweep, which is also the only time its row is rendered.
-  const hasSleepingExemptionFilter = isSleepingSweepExemptionNarrowingList(
-    showSleepingWorkspaces,
-    alwaysShowDefaultBranchWorkspace
-  )
-  const hasAnyFilter =
-    hasSleepingFilter ||
-    hideDefaultBranchWorkspace ||
-    hideAutomationGeneratedWorkspaces ||
-    hideCliCreatedWorkspaces ||
-    hideDetachedHeadWorkspaces ||
-    hideWorkspacesFromOtherDevices ||
-    hasSleepingExemptionFilter ||
-    hasRepoFilter ||
-    hasHostVisibilityFilter
-  const activeFilterCount =
-    (hasSleepingFilter ? 1 : 0) +
-    (hideDefaultBranchWorkspace ? 1 : 0) +
-    (hideAutomationGeneratedWorkspaces ? 1 : 0) +
-    (hideCliCreatedWorkspaces ? 1 : 0) +
-    (hideDetachedHeadWorkspaces ? 1 : 0) +
-    (hideWorkspacesFromOtherDevices ? 1 : 0) +
-    (hasSleepingExemptionFilter ? 1 : 0) +
-    (hasHostVisibilityFilter ? 1 : 0) +
-    selectedCount
-  const activeFilterLabel = `${activeFilterCount} ${activeFilterCount === 1 ? 'filter' : 'filters'}`
-  const sortLabel = SORT_OPTIONS.find((opt) => opt.id === sortBy)?.label ?? 'Sort'
-  const projectOrderLabel =
-    PROJECT_ORDER_OPTIONS.find((opt) => opt.id === projectOrderBy)?.label ?? 'Manual'
-  const hostVisibilityLabel = getSidebarHostVisibilityLabel(visibleWorkspaceHostIds, hostOptions)
-
   return (
     <DropdownMenu modal={false} open={open} onOpenChange={handleOpenChange}>
       <Tooltip>
@@ -171,136 +91,7 @@ const SidebarWorkspaceOptionsMenu = React.memo(function SidebarWorkspaceOptionsM
         className="w-72 pb-2"
         data-workspace-board-preserve-open={preserveWorkspaceBoardOpen ? '' : undefined}
       >
-        {/* Why: host + project filters share one section and the same single-row
-            shell as Sort by (label left, value right) so the menu stays flat. */}
-        {(showHostScopeControls || repos.length > 1) && (
-          <>
-            <DropdownMenuLabel>
-              {translate('auto.components.sidebar.SidebarWorkspaceOptionsMenu.showSection', 'Show')}
-            </DropdownMenuLabel>
-            {showHostScopeControls && (
-              <SidebarHostScopeMenuSection
-                hostVisibilityLabel={hostVisibilityLabel}
-                hostOptions={hostOptions}
-                preserveWorkspaceBoardOpen={preserveWorkspaceBoardOpen}
-                setWorkspaceHostScope={setWorkspaceHostScope}
-                visibleWorkspaceHostIds={visibleWorkspaceHostIds}
-                setVisibleWorkspaceHostIds={setVisibleWorkspaceHostIds}
-              />
-            )}
-            <SidebarRepositoryFilterSection
-              preserveWorkspaceBoardOpen={preserveWorkspaceBoardOpen}
-            />
-            <DropdownMenuSeparator />
-          </>
-        )}
-
-        <DropdownMenuLabel>
-          {translate('auto.components.sidebar.SidebarWorkspaceOptionsMenu.dc0bb670bc', 'Group by')}
-        </DropdownMenuLabel>
-        <div className="px-2 pt-0.5 pb-1">
-          <SidebarGroupByToggle groupBy={groupBy} setGroupBy={setGroupBy} />
-        </div>
-
-        <DropdownMenuSeparator />
-        <DropdownMenuSub>
-          <DropdownMenuSubTrigger>
-            <span className="flex flex-1 items-center justify-between">
-              <span>
-                {translate(
-                  'auto.components.sidebar.SidebarWorkspaceOptionsMenu.7bada3b1ab',
-                  'Sort by'
-                )}
-              </span>
-              <span className="text-[11px] font-medium text-muted-foreground">{sortLabel}</span>
-            </span>
-          </DropdownMenuSubTrigger>
-          <DropdownMenuSubContent
-            className="w-44"
-            data-workspace-board-preserve-open={preserveWorkspaceBoardOpen ? '' : undefined}
-          >
-            <DropdownMenuRadioGroup
-              value={sortBy}
-              onValueChange={(v) => setSortBy(v as typeof sortBy)}
-            >
-              {SORT_OPTIONS.map((opt) => {
-                const radioItem = (
-                  <DropdownMenuRadioItem
-                    key={opt.id}
-                    value={opt.id}
-                    // Keep the menu open so people can compare sort modes and
-                    // toggle card properties without reopening the same panel.
-                    onSelect={(e) => e.preventDefault()}
-                  >
-                    {opt.label}
-                  </DropdownMenuRadioItem>
-                )
-                if (!opt.description) {
-                  return radioItem
-                }
-                return (
-                  <Tooltip key={opt.id}>
-                    <TooltipTrigger asChild>{radioItem}</TooltipTrigger>
-                    <TooltipContent side="right" sideOffset={6}>
-                      {opt.description}
-                    </TooltipContent>
-                  </Tooltip>
-                )
-              })}
-            </DropdownMenuRadioGroup>
-          </DropdownMenuSubContent>
-        </DropdownMenuSub>
-
-        {/* Why: project order only has a visible effect when grouping by
-            project; hide it in none/status/PR modes to avoid a dead control. */}
-        {groupBy === 'repo' && (
-          <DropdownMenuSub>
-            <DropdownMenuSubTrigger>
-              <span className="flex flex-1 items-center justify-between">
-                <span>
-                  {translate(
-                    'auto.components.sidebar.SidebarWorkspaceOptionsMenu.09faabd875',
-                    'Project order'
-                  )}
-                </span>
-                <span className="text-[11px] font-medium text-muted-foreground">
-                  {projectOrderLabel}
-                </span>
-              </span>
-            </DropdownMenuSubTrigger>
-            <DropdownMenuSubContent
-              className="w-44"
-              data-workspace-board-preserve-open={preserveWorkspaceBoardOpen ? '' : undefined}
-            >
-              <DropdownMenuRadioGroup
-                value={projectOrderBy}
-                onValueChange={(v) => setProjectOrderBy(v as typeof projectOrderBy)}
-              >
-                {PROJECT_ORDER_OPTIONS.map((opt) => (
-                  <Tooltip key={opt.id}>
-                    <TooltipTrigger asChild>
-                      <DropdownMenuRadioItem
-                        value={opt.id}
-                        // Keep the menu open so people can compare order modes.
-                        onSelect={(e) => e.preventDefault()}
-                      >
-                        {opt.label}
-                      </DropdownMenuRadioItem>
-                    </TooltipTrigger>
-                    <TooltipContent side="right" sideOffset={6}>
-                      {opt.description}
-                    </TooltipContent>
-                  </Tooltip>
-                ))}
-              </DropdownMenuRadioGroup>
-            </DropdownMenuSubContent>
-          </DropdownMenuSub>
-        )}
-
-        <WorktreeCardDisplayMenuSection preserveWorkspaceBoardOpen={preserveWorkspaceBoardOpen} />
-
-        <DropdownMenuSeparator />
-        <SidebarWorkspaceFilterSection />
+        <WorkspaceOptionsMenuItems preserveWorkspaceBoardOpen={preserveWorkspaceBoardOpen} />
       </DropdownMenuContent>
     </DropdownMenu>
   )
diff --git a/src/renderer/src/components/sidebar/agents-sidebar-visibility.test.ts b/src/renderer/src/components/sidebar/agents-sidebar-visibility.test.ts
new file mode 100644
index 00000000000..21639737994
--- /dev/null
+++ b/src/renderer/src/components/sidebar/agents-sidebar-visibility.test.ts
@@ -0,0 +1,15 @@
+import { describe, expect, it } from 'vitest'
+import { shouldShowAgentsSidebar } from './agents-sidebar-visibility'
+
+describe('shouldShowAgentsSidebar', () => {
+  it('hides while settings are not yet hydrated', () => {
+    expect(shouldShowAgentsSidebar(null)).toBe(false)
+    expect(shouldShowAgentsSidebar(undefined)).toBe(false)
+  })
+
+  it('defaults on and honors only the dedicated setting', () => {
+    expect(shouldShowAgentsSidebar({})).toBe(true)
+    expect(shouldShowAgentsSidebar({ showAgentsSidebar: true })).toBe(true)
+    expect(shouldShowAgentsSidebar({ showAgentsSidebar: false })).toBe(false)
+  })
+})
diff --git a/src/renderer/src/components/sidebar/agents-sidebar-visibility.ts b/src/renderer/src/components/sidebar/agents-sidebar-visibility.ts
new file mode 100644
index 00000000000..f0e978a4d2c
--- /dev/null
+++ b/src/renderer/src/components/sidebar/agents-sidebar-visibility.ts
@@ -0,0 +1,11 @@
+import {
+  resolveAgentsSidebarVisible,
+  type AgentsSidebarVisibilitySettings
+} from '../../../../shared/agents-sidebar-visibility'
+
+export function shouldShowAgentsSidebar(
+  settings: Partial<AgentsSidebarVisibilitySettings> | null | undefined
+): boolean {
+  // Settings hydrate after first render; avoid flashing UI for opted-out profiles.
+  return settings ? resolveAgentsSidebarVisible(settings) : false
+}
diff --git a/src/renderer/src/components/sidebar/index.tsx b/src/renderer/src/components/sidebar/index.tsx
index bed75283e38..20d2fef711f 100644
--- a/src/renderer/src/components/sidebar/index.tsx
+++ b/src/renderer/src/components/sidebar/index.tsx
@@ -1,21 +1,33 @@
 import React, { useEffect, useMemo } from 'react'
+import { useTranslation } from 'react-i18next'
 import { useAppStore } from '@/store'
-import { TooltipProvider } from '@/components/ui/tooltip'
+import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from '@/components/ui/tooltip'
 import { useSidebarResize } from '@/hooks/useSidebarResize'
 import SidebarHeader from './SidebarHeader'
 import SidebarNav from './SidebarNav'
+import { shouldShowAgentsSidebar } from './agents-sidebar-visibility'
 import SetupScriptPromptCard from './SetupScriptPromptCard'
 import WorktreeList from './WorktreeList'
 import SidebarToolbar from './SidebarToolbar'
 import WorkspaceKanbanDrawer from './WorkspaceKanbanDrawer'
 import type { VirtualizedScrollAnchor } from '@/hooks/useVirtualizedScrollAnchor'
 import { cn } from '@/lib/utils'
-import { FolderPlus, Loader2 } from 'lucide-react'
+import { BellDot, FolderPlus, Loader2, Search } from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import { Input } from '@/components/ui/input'
+import type { ActivityGroupBy, ThreadReadFilter } from '@/components/activity/activity-thread-types'
+import { ActivityThreadCollapseContext } from '@/components/activity/activity-thread-collapse-context'
 import { useSidebarProjectDrop } from './useSidebarProjectDrop'
 import { useWorkspaceBoardPanel } from './useWorkspaceBoardPanel'
+import { useWorkspaceRevealBodyRedirect } from './use-workspace-reveal-body-redirect'
 import { resolveLeftSidebarStyleVariables } from '@/lib/left-sidebar-appearance'
 import { useSystemPrefersDark } from '@/components/terminal-pane/use-system-prefers-dark'
 import { lazyWithRetry } from '@/lib/lazy-with-retry'
+import { translate } from '@/i18n/i18n'
+
+// Why lazy: the Agents list pulls the whole activity pipeline (virtualizer, markdown
+// previews, thread derivation); users on the workspace view should not load or render any of it.
+const SidebarAgentsList = lazyWithRetry(() => import('./SidebarAgentsList'))
 
 const WorktreeMetaDialog = lazyWithRetry(() => import('./WorktreeMetaDialog'))
 const RemoveFolderDialog = lazyWithRetry(() => import('./RemoveFolderDialog'))
@@ -42,12 +54,57 @@ function Sidebar({
   worktreeScrollOffsetRef,
   worktreeScrollAnchorRef
 }: SidebarProps): React.JSX.Element {
+  // Why: the memoized toolbar/search JSX below is localized, so it needs both a
+  // language subscription here and the locale as a memo dep to refresh on a switch.
+  const { i18n } = useTranslation()
+  const locale = i18n.resolvedLanguage ?? i18n.language
+  const sidebarTranslate = React.useCallback(
+    (key: string, fallback: string): string => translate(key, fallback, { lng: locale }),
+    [locale]
+  )
   const sidebarOpen = useAppStore((s) => s.sidebarOpen)
   const sidebarWidth = useAppStore((s) => s.sidebarWidth)
   const setSidebarWidth = useAppStore((s) => s.setSidebarWidth)
   const repos = useAppStore((s) => s.repos)
   const startupWorktreeRefreshCompleted = useAppStore((s) => s.startupWorktreeRefreshCompleted)
   const settings = useAppStore((s) => s.settings)
+  const sidebarBody = useAppStore((s) => s.sidebarBody ?? 'workspaces')
+  const showAgentsSidebar = shouldShowAgentsSidebar(settings)
+  const showAgentDashboard = settings?.experimentalAgentDashboardPopout === true
+  const agentDashboardDrawerOpen = useAppStore((s) => s.agentDashboardDrawerOpen)
+  const setAgentDashboardDrawerOpen = useAppStore((s) => s.setAgentDashboardDrawerOpen)
+  const [agentReadFilter, setAgentReadFilter] = React.useState<ThreadReadFilter>('all')
+  const [agentGroupBy, setAgentGroupBy] = React.useState<ActivityGroupBy>('status')
+  const [agentQuery, setAgentQuery] = React.useState('')
+  const [agentSearchOpen, setAgentSearchOpen] = React.useState(false)
+  // Why clear on close: the hidden input's query would keep filtering the list with no visible indicator.
+  const closeAgentSearch = React.useCallback(() => {
+    setAgentSearchOpen(false)
+    setAgentQuery('')
+  }, [])
+  const [agentOptionsTarget, setAgentOptionsTarget] = React.useState<HTMLDivElement | null>(null)
+  const agentsScrollTopRef = React.useRef(0)
+  // Held here so collapsed groups (and the layout the saved scrollTop assumes)
+  // survive the Agents list unmounting on sidebar body switches.
+  const [agentsCollapsedGroupKeys, setAgentsCollapsedGroupKeys] = React.useState<
+    ReadonlySet<string>
+  >(() => new Set())
+  const agentsCollapseState = useMemo(
+    () => ({
+      collapsedGroupKeys: agentsCollapsedGroupKeys,
+      onToggleGroupCollapse: (groupKey: string) =>
+        setAgentsCollapsedGroupKeys((prev) => {
+          const next = new Set(prev)
+          if (next.has(groupKey)) {
+            next.delete(groupKey)
+          } else {
+            next.add(groupKey)
+          }
+          return next
+        })
+    }),
+    [agentsCollapsedGroupKeys]
+  )
   const fetchAllWorktrees = useAppStore((s) => s.fetchAllWorktrees)
   const activeModal = useAppStore((s) => s.activeModal)
   const statusBarVisible = useAppStore((s) => s.statusBarVisible)
@@ -92,6 +149,12 @@ function Sidebar({
     }
   }, [closeWorkspaceBoard, sidebarOpen, workspaceBoardRenderedOpen])
 
+  useEffect(() => {
+    if (!showAgentDashboard && agentDashboardDrawerOpen) {
+      setAgentDashboardDrawerOpen(false)
+    }
+  }, [agentDashboardDrawerOpen, setAgentDashboardDrawerOpen, showAgentDashboard])
+
   const { containerRef, onResizeStart, isResizing } = useSidebarResize<HTMLDivElement>({
     isOpen: sidebarOpen,
     width: sidebarWidth,
@@ -102,6 +165,107 @@ function Sidebar({
     onDraftWidthChange: setLiveSidebarWidth
   })
 
+  // Why memoized: SidebarHeader is React.memo; fresh JSX here on every Sidebar render would
+  // defeat that memo and re-render the header subtree on unrelated store churn.
+  const agentToolbar = useMemo(
+    () => (
+      <div className="flex items-center gap-1 shrink-0">
+        <Tooltip>
+          <TooltipTrigger asChild>
+            <Button
+              type="button"
+              variant="ghost"
+              size="icon-xs"
+              className={cn(
+                'text-muted-foreground',
+                agentSearchOpen &&
+                  'border border-primary/50 bg-primary/20 text-primary hover:bg-primary/30'
+              )}
+              aria-label={sidebarTranslate(
+                'auto.components.activity.ActivityPrototypePage.search',
+                'Search'
+              )}
+              aria-pressed={agentSearchOpen}
+              onClick={() => {
+                if (agentSearchOpen) {
+                  closeAgentSearch()
+                } else {
+                  setAgentSearchOpen(true)
+                }
+              }}
+            >
+              <Search className="size-3.5" strokeWidth={2.25} />
+            </Button>
+          </TooltipTrigger>
+          <TooltipContent side="bottom" sideOffset={6}>
+            {sidebarTranslate('auto.components.activity.ActivityPrototypePage.search', 'Search')}
+          </TooltipContent>
+        </Tooltip>
+        <Tooltip>
+          <TooltipTrigger asChild>
+            <Button
+              type="button"
+              variant="ghost"
+              size="icon-xs"
+              aria-pressed={agentReadFilter === 'unread'}
+              onClick={() =>
+                setAgentReadFilter((filter) => (filter === 'unread' ? 'all' : 'unread'))
+              }
+              className={cn(
+                'text-muted-foreground',
+                agentReadFilter === 'unread' &&
+                  'border border-primary/50 bg-primary/20 text-primary hover:bg-primary/30'
+              )}
+              aria-label={sidebarTranslate(
+                'auto.components.activity.ActivityPrototypePage.d1a88df9a8',
+                'Show unread threads only'
+              )}
+            >
+              <BellDot className="size-3.5" strokeWidth={2.25} />
+            </Button>
+          </TooltipTrigger>
+          <TooltipContent side="bottom" sideOffset={6}>
+            {sidebarTranslate(
+              'auto.components.activity.ActivityPrototypePage.d1a88df9a8',
+              'Show unread threads only'
+            )}
+          </TooltipContent>
+        </Tooltip>
+        <div ref={setAgentOptionsTarget} className="flex items-center" />
+      </div>
+    ),
+    [agentReadFilter, agentSearchOpen, closeAgentSearch, sidebarTranslate]
+  )
+  const agentSearchRow = useMemo(
+    () =>
+      agentSearchOpen ? (
+        <div className="shrink-0 border-b border-border px-2 py-1.5">
+          <Input
+            autoFocus
+            value={agentQuery}
+            onChange={(event) => setAgentQuery(event.target.value)}
+            onKeyDown={(event) => {
+              if (event.key === 'Escape') {
+                closeAgentSearch()
+              }
+            }}
+            placeholder={sidebarTranslate(
+              'auto.components.activity.ActivityPrototypePage.795cbf26e2',
+              'Filter...'
+            )}
+            className="h-7 w-full text-[11px]"
+            aria-label={sidebarTranslate(
+              'auto.components.activity.ActivityPrototypePage.search',
+              'Search'
+            )}
+          />
+        </div>
+      ) : null,
+    [agentQuery, agentSearchOpen, closeAgentSearch, sidebarTranslate]
+  )
+
+  useWorkspaceRevealBodyRedirect(sidebarOpen && sidebarBody === 'agents' && showAgentsSidebar)
+
   return (
     <TooltipProvider delayDuration={400}>
       <div
@@ -115,16 +279,37 @@ function Sidebar({
           <>
             {/* Fixed controls */}
             <SidebarNav />
-            <SidebarHeader onWorkspaceBoardMenuOpenChange={setWorkspaceBoardMenuOpen} />
-
-            <WorktreeList
-              scrollOffsetRef={worktreeScrollOffsetRef}
-              scrollAnchorRef={worktreeScrollAnchorRef}
-              workspaceBoardOpen={workspaceBoardOpen}
-              onWorkspaceBoardDragPreviewStart={previewWorkspaceBoardFromDrag}
-              onWorkspaceBoardDragPreviewCommit={solidifyWorkspaceBoardFromDrag}
-              onWorkspaceBoardDragPreviewCancel={cancelWorkspaceBoardDragPreview}
+            <SidebarHeader
+              onWorkspaceBoardMenuOpenChange={setWorkspaceBoardMenuOpen}
+              showAgentsSidebar={showAgentsSidebar}
+              agentToolbar={agentToolbar}
+              agentSearchRow={agentSearchRow}
             />
+            {sidebarBody === 'agents' && showAgentsSidebar ? (
+              <React.Suspense fallback={<div className="min-h-0 flex-1" />}>
+                <ActivityThreadCollapseContext.Provider value={agentsCollapseState}>
+                  <SidebarAgentsList
+                    readFilter={agentReadFilter}
+                    setReadFilter={setAgentReadFilter}
+                    groupBy={agentGroupBy}
+                    setGroupBy={setAgentGroupBy}
+                    query={agentQuery}
+                    setQuery={setAgentQuery}
+                    optionsTarget={agentOptionsTarget}
+                    scrollTopRef={agentsScrollTopRef}
+                  />
+                </ActivityThreadCollapseContext.Provider>
+              </React.Suspense>
+            ) : (
+              <WorktreeList
+                scrollOffsetRef={worktreeScrollOffsetRef}
+                scrollAnchorRef={worktreeScrollAnchorRef}
+                workspaceBoardOpen={workspaceBoardOpen}
+                onWorkspaceBoardDragPreviewStart={previewWorkspaceBoardFromDrag}
+                onWorkspaceBoardDragPreviewCommit={solidifyWorkspaceBoardFromDrag}
+                onWorkspaceBoardDragPreviewCancel={cancelWorkspaceBoardDragPreview}
+              />
+            )}
 
             <div className="relative shrink-0">
               <SetupScriptPromptCard />
@@ -195,7 +380,7 @@ function Sidebar({
           onMenuOpenChange={setWorkspaceBoardMenuOpen}
         />
       ) : null}
-      {settings?.experimentalAgentDashboardPopout === true ? (
+      {showAgentDashboard ? (
         <React.Suspense fallback={null}>
           <AgentDashboardSidebarHost
             sidebarOpen={sidebarOpen}
diff --git a/src/renderer/src/components/sidebar/sidebar-count-badge.tsx b/src/renderer/src/components/sidebar/sidebar-count-badge.tsx
new file mode 100644
index 00000000000..10507d7497d
--- /dev/null
+++ b/src/renderer/src/components/sidebar/sidebar-count-badge.tsx
@@ -0,0 +1,24 @@
+import React from 'react'
+import { cn } from '@/lib/utils'
+
+/** Corner count pill overlaying its relative parent; absolute so it never
+ *  affects layout (frozen-width surfaces like the view toggle depend on this). */
+export function SidebarCountBadge({
+  count,
+  className
+}: {
+  count: number
+  className?: string
+}): React.JSX.Element {
+  return (
+    <span
+      aria-hidden
+      className={cn(
+        'absolute -top-0.5 -right-0.5 flex h-3 min-w-3 items-center justify-center rounded-full bg-primary px-0.5 text-[9px] font-medium leading-none text-primary-foreground',
+        className
+      )}
+    >
+      {count > 9 ? '9+' : count}
+    </span>
+  )
+}
diff --git a/src/renderer/src/components/sidebar/sidebar-header-actions.tsx b/src/renderer/src/components/sidebar/sidebar-header-actions.tsx
new file mode 100644
index 00000000000..fda4f3ebb8b
--- /dev/null
+++ b/src/renderer/src/components/sidebar/sidebar-header-actions.tsx
@@ -0,0 +1,194 @@
+import React, { useCallback, useState } from 'react'
+import { Ellipsis, FolderPlus, Plus } from 'lucide-react'
+import { useAppStore } from '@/store'
+import { Button } from '@/components/ui/button'
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger
+} from '@/components/ui/dropdown-menu'
+import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
+import { useShortcutLabel } from '@/hooks/useShortcutLabel'
+import { translate } from '@/i18n/i18n'
+import { openWorkspaceCreationComposerWithTourHandoff } from '../contextual-tours/workspace-creation-tour-handoff'
+import SidebarWorkspaceOptionsMenu from './SidebarWorkspaceOptionsMenu'
+import { SidebarCountBadge } from './sidebar-count-badge'
+import {
+  useWorkspaceOptionsFilterBadge,
+  WorkspaceOptionsMenuItems
+} from './workspace-options-menu-items'
+
+export const SIDEBAR_HEADER_WIDE_MIN_WIDTH = 235
+
+function AddProjectButton(): React.JSX.Element {
+  const openModal = useAppStore((s) => s.openModal)
+  return (
+    <Tooltip>
+      <TooltipTrigger asChild>
+        <Button
+          variant="ghost"
+          size="icon-xs"
+          type="button"
+          className="text-muted-foreground"
+          aria-label={translate('auto.components.sidebar.SidebarHeader.25a95899c9', 'Add Project')}
+          onClick={() => openModal('add-repo')}
+        >
+          <FolderPlus className="size-3.5" strokeWidth={2.25} />
+        </Button>
+      </TooltipTrigger>
+      <TooltipContent side="bottom" sideOffset={6}>
+        {translate('auto.components.sidebar.SidebarHeader.25a95899c9', 'Add Project')}
+      </TooltipContent>
+    </Tooltip>
+  )
+}
+
+function CompactWorkspaceOverflow({
+  preserveWorkspaceBoardOpen,
+  onMenuOpenChange
+}: {
+  preserveWorkspaceBoardOpen: boolean
+  onMenuOpenChange?: (open: boolean) => void
+}): React.JSX.Element {
+  const openModal = useAppStore((s) => s.openModal)
+  const [open, setOpen] = useState(false)
+  const { hasAnyFilter, activeFilterCount } = useWorkspaceOptionsFilterBadge()
+  const boardAttr = preserveWorkspaceBoardOpen ? '' : undefined
+
+  const handleOpenChange = useCallback(
+    (next: boolean) => {
+      setOpen(next)
+      onMenuOpenChange?.(next)
+    },
+    [onMenuOpenChange]
+  )
+
+  return (
+    <DropdownMenu modal={false} open={open} onOpenChange={handleOpenChange}>
+      <Tooltip>
+        <TooltipTrigger asChild>
+          <DropdownMenuTrigger asChild>
+            <Button
+              variant="ghost"
+              size="icon-xs"
+              type="button"
+              className="relative text-muted-foreground"
+              aria-label={translate(
+                'auto.components.sidebar.SidebarHeader.moreActions',
+                'More workspace actions'
+              )}
+              data-workspace-board-preserve-open={boardAttr}
+            >
+              <Ellipsis className="size-3.5" strokeWidth={2.25} />
+              {hasAnyFilter ? <SidebarCountBadge count={activeFilterCount} /> : null}
+            </Button>
+          </DropdownMenuTrigger>
+        </TooltipTrigger>
+        <TooltipContent side="bottom" sideOffset={6}>
+          {translate('auto.components.sidebar.SidebarHeader.moreActions', 'More workspace actions')}
+        </TooltipContent>
+      </Tooltip>
+      <DropdownMenuContent
+        side="right"
+        align="start"
+        sideOffset={8}
+        className="w-72 pb-2"
+        data-workspace-board-preserve-open={boardAttr}
+      >
+        <WorkspaceOptionsMenuItems preserveWorkspaceBoardOpen={preserveWorkspaceBoardOpen} />
+        <DropdownMenuSeparator />
+        <DropdownMenuItem onSelect={() => openModal('add-repo')}>
+          <FolderPlus className="size-3.5" strokeWidth={2.25} />
+          {translate('auto.components.sidebar.SidebarHeader.25a95899c9', 'Add Project')}
+        </DropdownMenuItem>
+      </DropdownMenuContent>
+    </DropdownMenu>
+  )
+}
+
+export function SidebarHeaderActions({
+  onWorkspaceBoardMenuOpenChange
+}: {
+  onWorkspaceBoardMenuOpenChange: (open: boolean) => void
+}): React.JSX.Element {
+  const sidebarWidth = useAppStore((s) => s.sidebarWidth)
+  const newWorktreeShortcutLabel = useShortcutLabel('workspace.create')
+  const compact = sidebarWidth < SIDEBAR_HEADER_WIDE_MIN_WIDTH
+
+  if (compact) {
+    return (
+      <div className="flex shrink-0 items-center gap-1">
+        <Tooltip>
+          <TooltipTrigger asChild>
+            <Button
+              variant="ghost"
+              size="icon-xs"
+              type="button"
+              className="text-muted-foreground"
+              onClick={openWorkspaceCreationComposerWithTourHandoff}
+              aria-label={translate(
+                'auto.components.sidebar.SidebarHeader.92154beb7e',
+                'New workspace'
+              )}
+              data-contextual-tour-target="workspace-create-control"
+            >
+              <Plus className="size-3.5" strokeWidth={2.25} />
+            </Button>
+          </TooltipTrigger>
+          <TooltipContent side="bottom" sideOffset={6}>
+            {translate(
+              'auto.components.sidebar.SidebarHeader.ca6f729da2',
+              'New workspace ({{value0}})',
+              { value0: newWorktreeShortcutLabel }
+            )}
+          </TooltipContent>
+        </Tooltip>
+        <CompactWorkspaceOverflow
+          preserveWorkspaceBoardOpen
+          onMenuOpenChange={onWorkspaceBoardMenuOpenChange}
+        />
+      </div>
+    )
+  }
+
+  return (
+    <div className="flex shrink-0 items-center gap-1">
+      <SidebarWorkspaceOptionsMenu
+        preserveWorkspaceBoardOpen
+        onMenuOpenChange={onWorkspaceBoardMenuOpenChange}
+      />
+
+      <AddProjectButton />
+
+      <Tooltip>
+        <TooltipTrigger asChild>
+          <Button
+            variant="ghost"
+            size="icon-xs"
+            type="button"
+            className="text-muted-foreground"
+            // Why: the parallel-work tour must click the real sidebar
+            // control so it can hand off to the workspace-creation tour.
+            onClick={openWorkspaceCreationComposerWithTourHandoff}
+            aria-label={translate(
+              'auto.components.sidebar.SidebarHeader.92154beb7e',
+              'New workspace'
+            )}
+            data-contextual-tour-target="workspace-create-control"
+          >
+            <Plus className="size-3.5" strokeWidth={2.25} />
+          </Button>
+        </TooltipTrigger>
+        <TooltipContent side="bottom" sideOffset={6}>
+          {translate(
+            'auto.components.sidebar.SidebarHeader.ca6f729da2',
+            'New workspace ({{value0}})',
+            { value0: newWorktreeShortcutLabel }
+          )}
+        </TooltipContent>
+      </Tooltip>
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/sidebar/sidebar-view-toggle.test.tsx b/src/renderer/src/components/sidebar/sidebar-view-toggle.test.tsx
new file mode 100644
index 00000000000..38893fb8f2d
--- /dev/null
+++ b/src/renderer/src/components/sidebar/sidebar-view-toggle.test.tsx
@@ -0,0 +1,145 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { SidebarViewToggle } from './sidebar-view-toggle'
+
+;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
+
+let container: HTMLDivElement
+let root: Root
+
+beforeEach(() => {
+  container = document.createElement('div')
+  document.body.append(container)
+  root = createRoot(container)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  container.remove()
+})
+
+describe('SidebarViewToggle', () => {
+  it('exposes radio semantics with a roving tabindex so arrow keys move between tabs', () => {
+    act(() => {
+      root.render(
+        <SidebarViewToggle
+          ariaLabel="Sidebar view"
+          value="agents"
+          onSelect={() => undefined}
+          options={[
+            { value: 'workspaces', label: 'Spaces', sectionTitle: 'projects' },
+            { value: 'agents', label: 'Agents', sectionTitle: 'agents' }
+          ]}
+        />
+      )
+    })
+
+    const items = [...container.querySelectorAll('[role="radio"]')]
+    expect(items).toHaveLength(2)
+    const agents = container.querySelector('[data-sidebar-section-title="agents"]')
+    const projects = container.querySelector('[data-sidebar-section-title="projects"]')
+    expect(agents?.getAttribute('aria-checked')).toBe('true')
+    expect(projects?.getAttribute('aria-checked')).toBe('false')
+    // Only one tab is in the tab order (roving tabindex); arrow keys reach the other.
+    const tabStops = items.map((item) => item.getAttribute('tabindex'))
+    expect(tabStops.filter((stop) => stop === '0')).toHaveLength(1)
+    expect(tabStops.filter((stop) => stop === '-1')).toHaveLength(1)
+  })
+
+  it('never deselects when the active tab is clicked again', () => {
+    const onSelect = vi.fn()
+    act(() => {
+      root.render(
+        <SidebarViewToggle
+          ariaLabel="Sidebar view"
+          value="agents"
+          onSelect={onSelect}
+          options={[
+            { value: 'workspaces', label: 'Spaces', sectionTitle: 'projects' },
+            { value: 'agents', label: 'Agents', sectionTitle: 'agents' }
+          ]}
+        />
+      )
+    })
+    const agents = container.querySelector<HTMLButtonElement>(
+      '[data-sidebar-section-title="agents"]'
+    )
+    act(() => agents?.click())
+    expect(onSelect).not.toHaveBeenCalled()
+    const projects = container.querySelector<HTMLButtonElement>(
+      '[data-sidebar-section-title="projects"]'
+    )
+    act(() => projects?.click())
+    expect(onSelect).toHaveBeenCalledWith('workspaces')
+  })
+
+  it('moves focus to the radio an arrow key selects', () => {
+    // Without the focus move, every later arrow press steps from the old index and
+    // keeps re-selecting the same neighbour.
+    const onSelect = vi.fn()
+    act(() => {
+      root.render(
+        <SidebarViewToggle
+          ariaLabel="Sidebar view"
+          value="workspaces"
+          onSelect={onSelect}
+          options={[
+            { value: 'workspaces', label: 'Spaces', sectionTitle: 'projects' },
+            { value: 'agents', label: 'Agents', sectionTitle: 'agents' }
+          ]}
+        />
+      )
+    })
+
+    const projects = container.querySelector<HTMLButtonElement>(
+      '[data-sidebar-section-title="projects"]'
+    )
+    act(() => {
+      projects?.focus()
+      projects?.dispatchEvent(
+        new KeyboardEvent('keydown', { key: 'ArrowRight', bubbles: true, cancelable: true })
+      )
+    })
+
+    expect(onSelect).toHaveBeenCalledWith('agents')
+    expect(document.activeElement).toBe(
+      container.querySelector('[data-sidebar-section-title="agents"]')
+    )
+  })
+
+  it('keeps the visible label on one line', () => {
+    act(() => {
+      root.render(
+        <SidebarViewToggle
+          ariaLabel="Sidebar view"
+          value="workspaces"
+          onSelect={() => undefined}
+          options={[
+            {
+              value: 'workspaces',
+              label: 'Spaces',
+              sectionTitle: 'projects'
+            },
+            { value: 'agents', label: 'Agents', sectionTitle: 'agents' }
+          ]}
+        />
+      )
+    })
+
+    const group = container.querySelector('[role="radiogroup"]')
+    const groupClasses = new Set(group?.className.split(/\s+/) ?? [])
+    expect(groupClasses.has('inline-flex')).toBe(true)
+    expect(groupClasses.has('shrink-0')).toBe(true)
+    expect(groupClasses.has('flex-1')).toBe(false)
+
+    const spacesTab = container.querySelector('[data-sidebar-section-title="projects"]')
+    const visibleLabel = [...(spacesTab?.querySelectorAll('span') ?? [])].find(
+      (span) => span.getAttribute('aria-hidden') == null && span.textContent === 'Spaces'
+    )
+    expect(visibleLabel?.className).toContain('whitespace-nowrap')
+    expect(visibleLabel?.className.includes('truncate')).toBe(false)
+  })
+})
diff --git a/src/renderer/src/components/sidebar/sidebar-view-toggle.tsx b/src/renderer/src/components/sidebar/sidebar-view-toggle.tsx
new file mode 100644
index 00000000000..888f4f851c7
--- /dev/null
+++ b/src/renderer/src/components/sidebar/sidebar-view-toggle.tsx
@@ -0,0 +1,106 @@
+import React from 'react'
+import { cn } from '@/lib/utils'
+
+type SidebarViewToggleOption = {
+  value: string
+  label: string
+  /** Every label this slot can ever show; reserves width so switching never resizes the tab. */
+  widthLabels?: readonly string[]
+  sectionTitle?: string
+  renderWrapper?: (button: React.ReactNode) => React.ReactNode
+}
+
+type SidebarViewToggleProps = {
+  ariaLabel: string
+  value: string
+  options: readonly SidebarViewToggleOption[]
+  onSelect: (value: string) => void
+  className?: string
+}
+
+/** Two-up segmented control; tab widths stay frozen so nothing reflows on toggle. */
+export function SidebarViewToggle({
+  ariaLabel,
+  value,
+  options,
+  onSelect,
+  className
+}: SidebarViewToggleProps): React.JSX.Element {
+  const buttonRefs = React.useRef<(HTMLButtonElement | null)[]>([])
+  // Arrow keys must carry focus to the newly checked radio, or every later press
+  // would still step from the old index and re-select the same neighbour.
+  const selectAndFocus = (index: number): void => {
+    const option = options[index]
+    if (!option) {
+      return
+    }
+    if (option.value !== value) {
+      onSelect(option.value)
+    }
+    buttonRefs.current[index]?.focus()
+  }
+  return (
+    <div
+      role="radiogroup"
+      aria-label={ariaLabel}
+      className={cn(
+        'inline-flex shrink-0 items-center rounded-lg border border-sidebar-border bg-sidebar-accent p-0.5 shadow-xs',
+        className
+      )}
+    >
+      {options.map((option, index) => {
+        const active = option.value === value
+        const button = (
+          <button
+            key={option.value}
+            ref={(element) => {
+              buttonRefs.current[index] = element
+            }}
+            type="button"
+            role="radio"
+            tabIndex={active ? 0 : -1}
+            aria-checked={active}
+            data-sidebar-section-title={option.sectionTitle}
+            onClick={() => {
+              if (!active) {
+                onSelect(option.value)
+              }
+            }}
+            onKeyDown={(e) => {
+              if (e.key === 'ArrowRight' || e.key === 'ArrowDown') {
+                e.preventDefault()
+                selectAndFocus((index + 1) % options.length)
+              } else if (e.key === 'ArrowLeft' || e.key === 'ArrowUp') {
+                e.preventDefault()
+                selectAndFocus((index - 1 + options.length) % options.length)
+              }
+            }}
+            className={cn(
+              'relative grid grid-cols-1 rounded-md border px-1.5 py-0.5 text-center text-xs outline-none transition-colors duration-200 focus-visible:ring-2 focus-visible:ring-ring/50 motion-reduce:transition-none',
+              active
+                ? 'border-sidebar-border bg-sidebar font-semibold text-sidebar-foreground shadow-xs'
+                : 'border-transparent font-medium text-worktree-sidebar-foreground/65 hover:text-worktree-sidebar-foreground'
+            )}
+          >
+            {(option.widthLabels ?? [option.label]).map((widthLabel) => (
+              <span
+                key={widthLabel}
+                aria-hidden
+                className="invisible col-start-1 row-start-1 whitespace-nowrap font-semibold"
+              >
+                {widthLabel}
+              </span>
+            ))}
+            <span className="col-start-1 row-start-1 whitespace-nowrap">{option.label}</span>
+          </button>
+        )
+
+        return option.renderWrapper ? (
+          <React.Fragment key={option.value}>{option.renderWrapper(button)}</React.Fragment>
+        ) : (
+          button
+        )
+      })}
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/sidebar/use-workspace-reveal-body-redirect.test.tsx b/src/renderer/src/components/sidebar/use-workspace-reveal-body-redirect.test.tsx
new file mode 100644
index 00000000000..2c230a8f98c
--- /dev/null
+++ b/src/renderer/src/components/sidebar/use-workspace-reveal-body-redirect.test.tsx
@@ -0,0 +1,77 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { SCROLL_TO_CURRENT_WORKSPACE_REVEAL_REQUEST_EVENT } from '@/lib/scroll-to-current-workspace-status'
+import { useWorkspaceRevealBodyRedirect } from './use-workspace-reveal-body-redirect'
+
+;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
+
+const mocks = vi.hoisted(() => ({ setSidebarBody: vi.fn() }))
+
+vi.mock('@/store', () => ({
+  useAppStore: (selector: (state: { setSidebarBody: typeof mocks.setSidebarBody }) => unknown) =>
+    selector({ setSidebarBody: mocks.setSidebarBody })
+}))
+
+function Host({ agentsBodyShowing }: { agentsBodyShowing: boolean }): null {
+  useWorkspaceRevealBodyRedirect(agentsBodyShowing)
+  return null
+}
+
+let container: HTMLDivElement
+let root: Root
+
+beforeEach(() => {
+  mocks.setSidebarBody.mockClear()
+  container = document.createElement('div')
+  document.body.append(container)
+  root = createRoot(container)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  container.remove()
+})
+
+describe('useWorkspaceRevealBodyRedirect', () => {
+  it('switches the body to Spaces and replays the request once the list is mounted', () => {
+    act(() => {
+      root.render(<Host agentsBodyShowing />)
+    })
+    const seen: unknown[] = []
+    const listener = (event: Event): void => {
+      seen.push(event instanceof CustomEvent ? event.detail : null)
+    }
+
+    act(() => {
+      window.dispatchEvent(
+        new CustomEvent(SCROLL_TO_CURRENT_WORKSPACE_REVEAL_REQUEST_EVENT, {
+          detail: { target: { type: 'active-workspace' }, beginRename: true }
+        })
+      )
+    })
+    expect(mocks.setSidebarBody).toHaveBeenCalledWith('workspaces')
+    expect(seen).toEqual([])
+
+    // The worktree list mounts (and registers its listener) when the body flips.
+    window.addEventListener(SCROLL_TO_CURRENT_WORKSPACE_REVEAL_REQUEST_EVENT, listener)
+    act(() => {
+      root.render(<Host agentsBodyShowing={false} />)
+    })
+    window.removeEventListener(SCROLL_TO_CURRENT_WORKSPACE_REVEAL_REQUEST_EVENT, listener)
+
+    expect(seen).toEqual([{ target: { type: 'active-workspace' }, beginRename: true }])
+  })
+
+  it('does not intercept requests while Spaces is already showing', () => {
+    act(() => {
+      root.render(<Host agentsBodyShowing={false} />)
+    })
+    act(() => {
+      window.dispatchEvent(new CustomEvent(SCROLL_TO_CURRENT_WORKSPACE_REVEAL_REQUEST_EVENT))
+    })
+    expect(mocks.setSidebarBody).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/components/sidebar/use-workspace-reveal-body-redirect.ts b/src/renderer/src/components/sidebar/use-workspace-reveal-body-redirect.ts
new file mode 100644
index 00000000000..7b2e889b859
--- /dev/null
+++ b/src/renderer/src/components/sidebar/use-workspace-reveal-body-redirect.ts
@@ -0,0 +1,43 @@
+import { useEffect, useRef } from 'react'
+import { useAppStore } from '@/store'
+import { SCROLL_TO_CURRENT_WORKSPACE_REVEAL_REQUEST_EVENT } from '@/lib/scroll-to-current-workspace-status'
+
+/**
+ * Reveal requests (rename shortcut, reveal-active-workspace button) are handled inside the
+ * worktree list, which is unmounted while the Agents body is showing. Capture the request,
+ * switch the body to Spaces, and replay it once the list's listener is registered.
+ */
+export function useWorkspaceRevealBodyRedirect(agentsBodyShowing: boolean): void {
+  const pendingDetailRef = useRef<{ detail: unknown } | null>(null)
+  const setSidebarBody = useAppStore((s) => s.setSidebarBody)
+
+  useEffect(() => {
+    if (!agentsBodyShowing) {
+      return
+    }
+    const onRequest = (event: Event): void => {
+      pendingDetailRef.current = { detail: event instanceof CustomEvent ? event.detail : undefined }
+      setSidebarBody('workspaces')
+    }
+    window.addEventListener(SCROLL_TO_CURRENT_WORKSPACE_REVEAL_REQUEST_EVENT, onRequest)
+    return () => {
+      window.removeEventListener(SCROLL_TO_CURRENT_WORKSPACE_REVEAL_REQUEST_EVENT, onRequest)
+    }
+  }, [agentsBodyShowing, setSidebarBody])
+
+  useEffect(() => {
+    if (agentsBodyShowing) {
+      return
+    }
+    const pending = pendingDetailRef.current
+    if (!pending) {
+      return
+    }
+    pendingDetailRef.current = null
+    // Why safe to replay synchronously: the worktree list is a child of the sidebar, so its
+    // listener effect ran earlier in this same commit.
+    window.dispatchEvent(
+      new CustomEvent(SCROLL_TO_CURRENT_WORKSPACE_REVEAL_REQUEST_EVENT, { detail: pending.detail })
+    )
+  }, [agentsBodyShowing])
+}
diff --git a/src/renderer/src/components/sidebar/visible-worktrees.ts b/src/renderer/src/components/sidebar/visible-worktrees.ts
index 18e01106495..bb22f5f6086 100644
--- a/src/renderer/src/components/sidebar/visible-worktrees.ts
+++ b/src/renderer/src/components/sidebar/visible-worktrees.ts
@@ -265,6 +265,41 @@ export function setVisibleWorktreeShortcutTargets(
  * recomputes the order the sidebar *would* render from the same row pipeline,
  * so a closed sidebar numbers workspaces the same way an open one does (#9497).
  */
+export function buildVisibleWorktreeOptionsFromState(
+  state: ReturnType<typeof useAppStore.getState>,
+  repoMap: Map<string, Repo>
+): VisibleWorktreeOptions {
+  return {
+    filterRepoIds: state.filterRepoIds,
+    showSleepingWorkspaces: state.showSleepingWorkspaces,
+    tabsByWorktree: state.tabsByWorktree,
+    ptyIdsByTabId: state.ptyIdsByTabId,
+    browserTabsByWorktree: state.browserTabsByWorktree,
+    worktreeIdsWithLiveAgent: getWorktreeIdsWithLiveAgent(
+      state.agentStatusByPaneKey,
+      state.tabsByWorktree,
+      Date.now()
+    ),
+    hideDefaultBranchWorkspace: state.hideDefaultBranchWorkspace,
+    hideAutomationGeneratedWorkspaces: state.hideAutomationGeneratedWorkspaces,
+    hideCliCreatedWorkspaces: state.hideCliCreatedWorkspaces,
+    hideDetachedHeadWorkspaces: state.hideDetachedHeadWorkspaces,
+    hideWorkspacesFromOtherDevices: state.hideWorkspacesFromOtherDevices,
+    pairedDeviceIdsByEnvironment: state.hideWorkspacesFromOtherDevices
+      ? getPairedDeviceIdsByEnvironment(
+          state.runtimeEnvironments,
+          state.runtimeStatusByEnvironmentId
+        )
+      : EMPTY_PAIRED_DEVICE_IDS_BY_ENVIRONMENT,
+    alwaysShowDefaultBranchWorkspace: state.alwaysShowDefaultBranchWorkspace,
+    repoMap,
+    workspaceHostScope: state.workspaceHostScope,
+    visibleWorkspaceHostIds: state.visibleWorkspaceHostIds,
+    defaultHostId: getSettingsFocusedExecutionHostId(state.settings),
+    worktreeLineageById: state.worktreeLineageById
+  }
+}
+
 export function getVisibleWorktreeIds(): string[] {
   // Prefer the published IDs that mirror the rendered sidebar order.
   if (_publishedVisibleIds) {
@@ -299,35 +334,11 @@ export function getVisibleWorktreeIds(): string[] {
     sortedIds = sorted.map((w) => w.id)
   }
 
-  const visibleIds = computeVisibleWorktreeIds(state.worktreesByRepo, sortedIds, {
-    filterRepoIds: state.filterRepoIds,
-    showSleepingWorkspaces: state.showSleepingWorkspaces,
-    tabsByWorktree: state.tabsByWorktree,
-    ptyIdsByTabId: state.ptyIdsByTabId,
-    browserTabsByWorktree: state.browserTabsByWorktree,
-    worktreeIdsWithLiveAgent: getWorktreeIdsWithLiveAgent(
-      state.agentStatusByPaneKey,
-      state.tabsByWorktree,
-      Date.now()
-    ),
-    hideDefaultBranchWorkspace: state.hideDefaultBranchWorkspace,
-    hideAutomationGeneratedWorkspaces: state.hideAutomationGeneratedWorkspaces,
-    hideCliCreatedWorkspaces: state.hideCliCreatedWorkspaces,
-    hideDetachedHeadWorkspaces: state.hideDetachedHeadWorkspaces,
-    hideWorkspacesFromOtherDevices: state.hideWorkspacesFromOtherDevices,
-    pairedDeviceIdsByEnvironment: state.hideWorkspacesFromOtherDevices
-      ? getPairedDeviceIdsByEnvironment(
-          state.runtimeEnvironments,
-          state.runtimeStatusByEnvironmentId
-        )
-      : EMPTY_PAIRED_DEVICE_IDS_BY_ENVIRONMENT,
-    alwaysShowDefaultBranchWorkspace: state.alwaysShowDefaultBranchWorkspace,
-    repoMap,
-    workspaceHostScope: state.workspaceHostScope,
-    visibleWorkspaceHostIds: state.visibleWorkspaceHostIds,
-    defaultHostId: getSettingsFocusedExecutionHostId(state.settings),
-    worktreeLineageById: state.worktreeLineageById
-  })
+  const visibleIds = computeVisibleWorktreeIds(
+    state.worktreesByRepo,
+    sortedIds,
+    buildVisibleWorktreeOptionsFromState(state, repoMap)
+  )
 
   const visibleIdRank = new Map(visibleIds.map((id, index) => [id, index]))
   const visibleHostIds = getVisibleWorkspaceHostIdSet(state)
diff --git a/src/renderer/src/components/sidebar/workspace-options-menu-items.tsx b/src/renderer/src/components/sidebar/workspace-options-menu-items.tsx
new file mode 100644
index 00000000000..c4318449bee
--- /dev/null
+++ b/src/renderer/src/components/sidebar/workspace-options-menu-items.tsx
@@ -0,0 +1,240 @@
+import { useMemo, type JSX } from 'react'
+import { useAppStore } from '@/store'
+import {
+  DropdownMenuLabel,
+  DropdownMenuRadioGroup,
+  DropdownMenuRadioItem,
+  DropdownMenuSeparator,
+  DropdownMenuSub,
+  DropdownMenuSubContent,
+  DropdownMenuSubTrigger
+} from '@/components/ui/dropdown-menu'
+import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
+import { DEFAULT_SHOW_SLEEPING_WORKSPACES } from '../../../../shared/constants'
+import { isSleepingSweepExemptionNarrowingList } from './visible-worktrees'
+import SidebarRepositoryFilterSection from './SidebarRepositoryFilterSection'
+import SidebarWorkspaceFilterSection from './SidebarWorkspaceFilterSection'
+import { getSidebarHostVisibilityLabel, shouldShowHostScopeControls } from './sidebar-host-options'
+import { useSidebarHostScopeOptions } from './use-sidebar-host-scope-options'
+import { SidebarHostScopeMenuSection } from './SidebarHostScopeMenuSection'
+import { PROJECT_ORDER_OPTIONS, SORT_OPTIONS } from './sidebar-workspace-option-items'
+import { WorktreeCardDisplayMenuSection } from './WorktreeCardDisplayMenuSection'
+import { translate } from '@/i18n/i18n'
+import { SidebarGroupByToggle } from './SidebarGroupByToggle'
+
+export function useWorkspaceOptionsFilterBadge(): {
+  hasAnyFilter: boolean
+  activeFilterCount: number
+  activeFilterLabel: string
+} {
+  const showSleepingWorkspaces = useAppStore((s) => s.showSleepingWorkspaces)
+  const hideDefaultBranchWorkspace = useAppStore((s) => s.hideDefaultBranchWorkspace)
+  const hideAutomationGeneratedWorkspaces = useAppStore((s) => s.hideAutomationGeneratedWorkspaces)
+  const hideCliCreatedWorkspaces = useAppStore((s) => s.hideCliCreatedWorkspaces)
+  const hideDetachedHeadWorkspaces = useAppStore((s) => s.hideDetachedHeadWorkspaces)
+  const hideWorkspacesFromOtherDevices = useAppStore((s) => s.hideWorkspacesFromOtherDevices)
+  const alwaysShowDefaultBranchWorkspace = useAppStore((s) => s.alwaysShowDefaultBranchWorkspace)
+  const filterRepoIds = useAppStore((s) => s.filterRepoIds)
+  const repos = useAppStore((s) => s.repos)
+  const visibleWorkspaceHostIds = useAppStore((s) => s.visibleWorkspaceHostIds)
+
+  const selectedCount = useMemo(() => {
+    let count = 0
+    for (const repo of repos) {
+      if (filterRepoIds.includes(repo.id)) {
+        count += 1
+      }
+    }
+    return count
+  }, [repos, filterRepoIds])
+
+  const hasSleepingFilter = showSleepingWorkspaces !== DEFAULT_SHOW_SLEEPING_WORKSPACES
+  const hasSleepingExemptionFilter = isSleepingSweepExemptionNarrowingList(
+    showSleepingWorkspaces,
+    alwaysShowDefaultBranchWorkspace
+  )
+  const hasRepoFilter = selectedCount > 0
+  const hasHostVisibilityFilter = visibleWorkspaceHostIds !== null
+  const hasAnyFilter =
+    hasSleepingFilter ||
+    hideDefaultBranchWorkspace ||
+    hideAutomationGeneratedWorkspaces ||
+    hideCliCreatedWorkspaces ||
+    hideDetachedHeadWorkspaces ||
+    hideWorkspacesFromOtherDevices ||
+    hasSleepingExemptionFilter ||
+    hasRepoFilter ||
+    hasHostVisibilityFilter
+  const activeFilterCount =
+    (hasSleepingFilter ? 1 : 0) +
+    (hideDefaultBranchWorkspace ? 1 : 0) +
+    (hideAutomationGeneratedWorkspaces ? 1 : 0) +
+    (hideCliCreatedWorkspaces ? 1 : 0) +
+    (hideDetachedHeadWorkspaces ? 1 : 0) +
+    (hideWorkspacesFromOtherDevices ? 1 : 0) +
+    (hasSleepingExemptionFilter ? 1 : 0) +
+    (hasHostVisibilityFilter ? 1 : 0) +
+    selectedCount
+
+  return {
+    hasAnyFilter,
+    activeFilterCount,
+    activeFilterLabel: `${activeFilterCount} ${activeFilterCount === 1 ? 'filter' : 'filters'}`
+  }
+}
+
+export function WorkspaceOptionsMenuItems({
+  preserveWorkspaceBoardOpen = false
+}: {
+  preserveWorkspaceBoardOpen?: boolean
+}): JSX.Element {
+  const repos = useAppStore((s) => s.repos)
+  const setWorkspaceHostScope = useAppStore((s) => s.setWorkspaceHostScope)
+  const visibleWorkspaceHostIds = useAppStore((s) => s.visibleWorkspaceHostIds)
+  const setVisibleWorkspaceHostIds = useAppStore((s) => s.setVisibleWorkspaceHostIds)
+  const sortBy = useAppStore((s) => s.sortBy)
+  const setSortBy = useAppStore((s) => s.setSortBy)
+  const groupBy = useAppStore((s) => s.groupBy)
+  const setGroupBy = useAppStore((s) => s.setGroupBy)
+  const projectOrderBy = useAppStore((s) => s.projectOrderBy)
+  const setProjectOrderBy = useAppStore((s) => s.setProjectOrderBy)
+  const { hostOptions } = useSidebarHostScopeOptions()
+  const showHostScopeControls = shouldShowHostScopeControls(hostOptions)
+  const sortLabel = SORT_OPTIONS.find((opt) => opt.id === sortBy)?.label ?? 'Sort'
+  const projectOrderLabel =
+    PROJECT_ORDER_OPTIONS.find((opt) => opt.id === projectOrderBy)?.label ?? 'Manual'
+  const hostVisibilityLabel = getSidebarHostVisibilityLabel(visibleWorkspaceHostIds, hostOptions)
+  const boardAttr = preserveWorkspaceBoardOpen ? '' : undefined
+
+  return (
+    <>
+      <DropdownMenuLabel className="pb-0 text-sm text-foreground">
+        {translate(
+          'auto.components.sidebar.SidebarWorkspaceOptionsMenu.workspaceOptions',
+          'Workspace options'
+        )}
+      </DropdownMenuLabel>
+      {/* Why: host + project filters share one section and the same single-row
+          shell as Sort by (label left, value right) so the menu stays flat. */}
+      {(showHostScopeControls || repos.length > 1) && (
+        <>
+          <DropdownMenuLabel>
+            {translate('auto.components.sidebar.SidebarWorkspaceOptionsMenu.showSection', 'Show')}
+          </DropdownMenuLabel>
+          {showHostScopeControls && (
+            <SidebarHostScopeMenuSection
+              hostVisibilityLabel={hostVisibilityLabel}
+              hostOptions={hostOptions}
+              preserveWorkspaceBoardOpen={preserveWorkspaceBoardOpen}
+              setWorkspaceHostScope={setWorkspaceHostScope}
+              visibleWorkspaceHostIds={visibleWorkspaceHostIds}
+              setVisibleWorkspaceHostIds={setVisibleWorkspaceHostIds}
+            />
+          )}
+          <SidebarRepositoryFilterSection preserveWorkspaceBoardOpen={preserveWorkspaceBoardOpen} />
+          <DropdownMenuSeparator />
+        </>
+      )}
+
+      <DropdownMenuLabel>
+        {translate('auto.components.sidebar.SidebarWorkspaceOptionsMenu.dc0bb670bc', 'Group by')}
+      </DropdownMenuLabel>
+      <div className="px-2 pt-0.5 pb-1">
+        <SidebarGroupByToggle groupBy={groupBy} setGroupBy={setGroupBy} />
+      </div>
+
+      <DropdownMenuSeparator />
+      <DropdownMenuSub>
+        <DropdownMenuSubTrigger>
+          <span className="flex flex-1 items-center justify-between">
+            <span>
+              {translate(
+                'auto.components.sidebar.SidebarWorkspaceOptionsMenu.7bada3b1ab',
+                'Sort by'
+              )}
+            </span>
+            <span className="text-[11px] font-medium text-muted-foreground">{sortLabel}</span>
+          </span>
+        </DropdownMenuSubTrigger>
+        <DropdownMenuSubContent className="w-44" data-workspace-board-preserve-open={boardAttr}>
+          <DropdownMenuRadioGroup
+            value={sortBy}
+            onValueChange={(v) => setSortBy(v as typeof sortBy)}
+          >
+            {SORT_OPTIONS.map((opt) => {
+              const radioItem = (
+                <DropdownMenuRadioItem
+                  key={opt.id}
+                  value={opt.id}
+                  // Keep the menu open so people can compare sort modes and
+                  // toggle card properties without reopening the same panel.
+                  onSelect={(e) => e.preventDefault()}
+                >
+                  {opt.label}
+                </DropdownMenuRadioItem>
+              )
+              if (!opt.description) {
+                return radioItem
+              }
+              return (
+                <Tooltip key={opt.id}>
+                  <TooltipTrigger asChild>{radioItem}</TooltipTrigger>
+                  <TooltipContent side="right" sideOffset={6}>
+                    {opt.description}
+                  </TooltipContent>
+                </Tooltip>
+              )
+            })}
+          </DropdownMenuRadioGroup>
+        </DropdownMenuSubContent>
+      </DropdownMenuSub>
+
+      {/* Why: project order only has a visible effect when grouping by
+          project; hide it in none/status/PR modes to avoid a dead control. */}
+      {groupBy === 'repo' && (
+        <DropdownMenuSub>
+          <DropdownMenuSubTrigger>
+            <span className="flex flex-1 items-center justify-between">
+              <span>
+                {translate(
+                  'auto.components.sidebar.SidebarWorkspaceOptionsMenu.09faabd875',
+                  'Project order'
+                )}
+              </span>
+              <span className="text-[11px] font-medium text-muted-foreground">
+                {projectOrderLabel}
+              </span>
+            </span>
+          </DropdownMenuSubTrigger>
+          <DropdownMenuSubContent className="w-44" data-workspace-board-preserve-open={boardAttr}>
+            <DropdownMenuRadioGroup
+              value={projectOrderBy}
+              onValueChange={(v) => setProjectOrderBy(v as typeof projectOrderBy)}
+            >
+              {PROJECT_ORDER_OPTIONS.map((opt) => (
+                <Tooltip key={opt.id}>
+                  <TooltipTrigger asChild>
+                    <DropdownMenuRadioItem
+                      value={opt.id}
+                      // Keep the menu open so people can compare order modes.
+                      onSelect={(e) => e.preventDefault()}
+                    >
+                      {opt.label}
+                    </DropdownMenuRadioItem>
+                  </TooltipTrigger>
+                  <TooltipContent side="right" sideOffset={6}>
+                    {opt.description}
+                  </TooltipContent>
+                </Tooltip>
+              ))}
+            </DropdownMenuRadioGroup>
+          </DropdownMenuSubContent>
+        </DropdownMenuSub>
+      )}
+
+      <WorktreeCardDisplayMenuSection preserveWorkspaceBoardOpen={preserveWorkspaceBoardOpen} />
+      <DropdownMenuSeparator />
+      <SidebarWorkspaceFilterSection />
+    </>
+  )
+}
diff --git a/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts b/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts
index 4947fce433f..84588c4296c 100644
--- a/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts
+++ b/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts
@@ -37,6 +37,10 @@ type TabWorktreeIndexCache = {
   tabIdToWorktreeId: Map<string, string>
 }
 
+type LiveTabWorktreeIndexCache = TabWorktreeIndexCache & {
+  unifiedTabsByWorktree: WorktreeAgentRowsState['unifiedTabsByWorktree']
+}
+
 type MigrationUnsupportedByWorktreeCache = {
   tabsByWorktree: WorktreeAgentRowsState['tabsByWorktree']
   migrationUnsupportedByPtyId: WorktreeAgentRowsState['migrationUnsupportedByPtyId']
@@ -49,6 +53,7 @@ type RetainedEntriesByWorktreeCache = {
 }
 
 let tabWorktreeIndexCache: TabWorktreeIndexCache | null = null
+let liveTabWorktreeIndexCache: LiveTabWorktreeIndexCache | null = null
 let liveEntriesByWorktreeCache: LiveEntriesByWorktreeCache | null = null
 let migrationUnsupportedByWorktreeCache: MigrationUnsupportedByWorktreeCache | null = null
 let retainedEntriesByWorktreeCache: RetainedEntriesByWorktreeCache | null = null
@@ -88,6 +93,12 @@ function getLiveTabIdToWorktreeId(
   tabsByWorktree: WorktreeAgentRowsState['tabsByWorktree'],
   unifiedTabsByWorktree: WorktreeAgentRowsState['unifiedTabsByWorktree']
 ): Map<string, string> {
+  if (
+    liveTabWorktreeIndexCache?.tabsByWorktree === tabsByWorktree &&
+    liveTabWorktreeIndexCache.unifiedTabsByWorktree === unifiedTabsByWorktree
+  ) {
+    return liveTabWorktreeIndexCache.tabIdToWorktreeId
+  }
   const tabIdToWorktreeId = new Map(getTabIdToWorktreeId(tabsByWorktree))
   for (const [worktreeId, tabs] of Object.entries(unifiedTabsByWorktree ?? {})) {
     for (const tab of tabs) {
@@ -96,6 +107,7 @@ function getLiveTabIdToWorktreeId(
       }
     }
   }
+  liveTabWorktreeIndexCache = { tabsByWorktree, unifiedTabsByWorktree, tabIdToWorktreeId }
   return tabIdToWorktreeId
 }
 
diff --git a/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.stable-message.test.tsx b/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.stable-message.test.tsx
new file mode 100644
index 00000000000..c9510cfef4f
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.stable-message.test.tsx
@@ -0,0 +1,112 @@
+/** @vitest-environment happy-dom */
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import type { DashboardAgentRow as DashboardAgentRowData } from '@/components/dashboard/useDashboardData'
+import { TooltipProvider } from '@/components/ui/tooltip'
+import { CompactAgentRow } from './worktree-card-compact-agent-row'
+
+;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
+
+vi.mock('@/components/dashboard/use-agent-row-conversation-name', () => ({
+  useAgentRowConversationName: () => null
+}))
+
+vi.mock('./CacheTimer', () => ({
+  default: () => null,
+  usePromptCacheCountdownForPane: () => null
+}))
+
+function makeAgent({
+  stateStartedAt,
+  lastAssistantMessage,
+  state = 'working'
+}: {
+  stateStartedAt: number
+  lastAssistantMessage?: string
+  state?: string
+}): DashboardAgentRowData {
+  return {
+    paneKey: 'tab-1:leaf-1',
+    tab: { id: 'tab-1' },
+    agentType: 'claude',
+    state,
+    startedAt: 500,
+    entry: {
+      prompt: 'do the task',
+      state,
+      stateStartedAt,
+      lastAssistantMessage,
+      paneKey: 'tab-1:leaf-1',
+      updatedAt: stateStartedAt
+    }
+  } as unknown as DashboardAgentRowData
+}
+
+let root: Root | undefined
+
+afterEach(() => {
+  act(() => root?.unmount())
+  document.body.replaceChildren()
+})
+
+function renderRow(agent: DashboardAgentRowData): HTMLElement {
+  const container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+  act(() => {
+    root!.render(
+      <TooltipProvider>
+        <CompactAgentRow agent={agent} now={2000} onActivate={() => {}} />
+      </TooltipProvider>
+    )
+  })
+  return container
+}
+
+function rerenderRow(agent: DashboardAgentRowData): void {
+  act(() => {
+    root!.render(
+      <TooltipProvider>
+        <CompactAgentRow agent={agent} now={2000} onActivate={() => {}} />
+      </TooltipProvider>
+    )
+  })
+}
+
+describe('CompactAgentRow stable assistant message', () => {
+  it('holds the last assistant line when a same-turn ping omits it', () => {
+    const container = renderRow(
+      makeAgent({ stateStartedAt: 1000, lastAssistantMessage: 'First reply' })
+    )
+    expect(container.textContent).toContain('First reply')
+
+    rerenderRow(makeAgent({ stateStartedAt: 1000 }))
+    expect(container.textContent).toContain('First reply')
+  })
+
+  it('drops the held line when a new turn starts', () => {
+    const container = renderRow(
+      makeAgent({ stateStartedAt: 1000, lastAssistantMessage: 'First reply' })
+    )
+    rerenderRow(makeAgent({ stateStartedAt: 3000 }))
+    expect(container.textContent).not.toContain('First reply')
+  })
+
+  it('never holds across pings for entries without a turn identity (stateStartedAt 0)', () => {
+    const container = renderRow(makeAgent({ stateStartedAt: 0, lastAssistantMessage: 'Turn one' }))
+    expect(container.textContent).toContain('Turn one')
+
+    rerenderRow(makeAgent({ stateStartedAt: 0 }))
+    expect(container.textContent).not.toContain('Turn one')
+  })
+
+  it('drops the held line when the agent leaves working', () => {
+    const container = renderRow(
+      makeAgent({ stateStartedAt: 1000, lastAssistantMessage: 'First reply' })
+    )
+    rerenderRow(makeAgent({ stateStartedAt: 1000, state: 'done' }))
+    rerenderRow(makeAgent({ stateStartedAt: 1000, state: 'working' }))
+    expect(container.textContent).not.toContain('First reply')
+  })
+})
diff --git a/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.tsx b/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.tsx
index f66b54adeb2..b698982a7dd 100644
--- a/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.tsx
+++ b/src/renderer/src/components/sidebar/worktree-card-compact-agent-row.tsx
@@ -1,4 +1,4 @@
-import React, { useCallback } from 'react'
+import React, { useCallback, useEffect, useRef } from 'react'
 import { ChevronRight } from 'lucide-react'
 import { AgentStateDot, agentStateLabel } from '@/components/AgentStateDot'
 import type { DashboardAgentRow as DashboardAgentRowData } from '@/components/dashboard/useDashboardData'
@@ -13,22 +13,7 @@ import { agentNoUpdateLabel } from '@/lib/agent-row-decay-state'
 import { useAgentRowConversationName } from '@/components/dashboard/use-agent-row-conversation-name'
 import { lastEnteredDoneAt } from '@/components/dashboard/agent-finished-timestamp'
 import CacheTimer, { usePromptCacheCountdownForPane } from './CacheTimer'
-
-function formatShortTimeAgo(ts: number, now: number): string {
-  const delta = now - ts
-  if (delta < 60_000) {
-    return 'now'
-  }
-  const minutes = Math.floor(delta / 60_000)
-  if (minutes < 60) {
-    return `${minutes}m`
-  }
-  const hours = Math.floor(minutes / 60)
-  if (hours < 24) {
-    return `${hours}h`
-  }
-  return `${Math.floor(hours / 24)}d`
-}
+import { formatShortTimeAgo } from '@/lib/short-time-ago'
 
 function getCompactAgentPrimary(
   agent: DashboardAgentRowData,
@@ -38,7 +23,11 @@ function getCompactAgentPrimary(
   return prompt || agentStateLabel(getAgentDotState(agent))
 }
 
-export function getCompactAgentSecondary(agent: DashboardAgentRowData, now: number): string {
+export function getCompactAgentSecondary(
+  agent: DashboardAgentRowData,
+  now: number,
+  lastAssistantMessageOverride?: string
+): string {
   if (agent.entry.interrupted === true) {
     return 'Interrupted by user'
   }
@@ -55,7 +44,8 @@ export function getCompactAgentSecondary(agent: DashboardAgentRowData, now: numb
   if (toolPreview) {
     return toolPreview
   }
-  const lastAssistantMessage = agent.entry.lastAssistantMessage?.trim()
+  const lastAssistantMessage =
+    lastAssistantMessageOverride ?? agent.entry.lastAssistantMessage?.trim()
   if (lastAssistantMessage) {
     return lastAssistantMessage
   }
@@ -128,7 +118,26 @@ export const CompactAgentRow = React.memo(function CompactAgentRow({
   const conversationName = useAgentRowConversationName(agent)
   const primary = getCompactAgentPrimary(agent, conversationName)
   const isLineageChild = agent.lineage?.depth === 1
-  const secondary = getCompactAgentSecondary(agent, now)
+  // Keep a live row's last assistant line stable while status/tool payloads
+  // briefly omit the hook-only field between updates. Committed in an effect so a
+  // discarded concurrent render can't pin an uncommitted message and no extra render
+  // pass runs per streaming ping; a zero stateStartedAt has no per-turn identity, so
+  // those rows never cache.
+  const turn = agent.entry.stateStartedAt
+  const currentMessage = agent.entry.lastAssistantMessage?.trim() ?? ''
+  const turnHoldable = agent.state === 'working' && turn > 0
+  const heldMessageRef = useRef<{ turn: number; message: string } | null>(null)
+  useEffect(() => {
+    if (turnHoldable && currentMessage) {
+      heldMessageRef.current = { turn, message: currentMessage }
+    } else if (!turnHoldable) {
+      heldMessageRef.current = null
+    }
+  }, [turnHoldable, turn, currentMessage])
+  const held = heldMessageRef.current
+  const stableMessage =
+    turnHoldable && !currentMessage && held?.turn === turn ? held.message : undefined
+  const secondary = getCompactAgentSecondary(agent, now, stableMessage)
   // Why: sidebar truncation must preserve the passive-vs-active distinction.
   const leadingText = dotState === 'monitoring' ? secondary : primary
   const trailingText =
diff --git a/src/renderer/src/components/sidebar/worktree-filter-visibility.test.ts b/src/renderer/src/components/sidebar/worktree-filter-visibility.test.ts
new file mode 100644
index 00000000000..0bb2283843b
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-filter-visibility.test.ts
@@ -0,0 +1,79 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { Worktree } from '../../../../shared/worktree/types'
+
+const mocks = vi.hoisted(() => ({ getState: vi.fn() }))
+vi.mock('@/store', () => ({ useAppStore: { getState: mocks.getState } }))
+
+import { worktreePassesSidebarFilters } from './worktree-filter-visibility'
+
+const TWIN_ID = 'repo-1::/projects/app'
+
+function makeTwin(hostId?: string): Worktree {
+  return {
+    id: TWIN_ID,
+    repoId: 'repo-1',
+    path: '/projects/app',
+    head: 'abc',
+    branch: 'main',
+    isBare: false,
+    isMainWorktree: false,
+    displayName: 'app',
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: 1,
+    ...(hostId ? { hostId } : {})
+  } as Worktree
+}
+
+// STA-4343: the same worktree id names one workspace per host; only the local
+// twin passes a local-only host scope.
+function stateWithLocalScopedTwins(): unknown {
+  return {
+    repos: [
+      { id: 'repo-1', path: '/projects/app', displayName: 'app', badgeColor: '', addedAt: 1 }
+    ],
+    worktreesByRepo: { 'repo-1': [makeTwin(), makeTwin('ssh:beta')] },
+    filterRepoIds: [],
+    showSleepingWorkspaces: true,
+    tabsByWorktree: {},
+    ptyIdsByTabId: {},
+    browserTabsByWorktree: {},
+    agentStatusByPaneKey: {},
+    hideDefaultBranchWorkspace: false,
+    hideAutomationGeneratedWorkspaces: false,
+    hideCliCreatedWorkspaces: false,
+    hideDetachedHeadWorkspaces: false,
+    hideWorkspacesFromOtherDevices: false,
+    alwaysShowDefaultBranchWorkspace: true,
+    workspaceHostScope: 'local',
+    visibleWorkspaceHostIds: ['local'],
+    settings: null,
+    worktreeLineageById: {}
+  }
+}
+
+describe('worktreePassesSidebarFilters', () => {
+  it('does not let a visible local twin vouch for a host-filtered remote target', () => {
+    mocks.getState.mockReturnValue(stateWithLocalScopedTwins())
+
+    expect(worktreePassesSidebarFilters(TWIN_ID, 'ssh:beta')).toBe(false)
+    expect(worktreePassesSidebarFilters(TWIN_ID, 'local')).toBe(true)
+    // Host unknown to the caller: id-only match keeps prior behavior.
+    expect(worktreePassesSidebarFilters(TWIN_ID)).toBe(true)
+  })
+
+  it('reports the remote twin visible when its host is in scope', () => {
+    const state = stateWithLocalScopedTwins() as { visibleWorkspaceHostIds: string[] }
+    state.visibleWorkspaceHostIds = ['ssh:beta']
+    mocks.getState.mockReturnValue(state)
+
+    expect(worktreePassesSidebarFilters(TWIN_ID, 'ssh:beta')).toBe(true)
+    expect(worktreePassesSidebarFilters(TWIN_ID, 'local')).toBe(false)
+  })
+})
diff --git a/src/renderer/src/components/sidebar/worktree-filter-visibility.ts b/src/renderer/src/components/sidebar/worktree-filter-visibility.ts
new file mode 100644
index 00000000000..321111f2392
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-filter-visibility.ts
@@ -0,0 +1,43 @@
+import { useAppStore } from '@/store'
+import { getRepoMapFromState } from '@/store/selectors'
+import {
+  getSettingsFocusedExecutionHostId,
+  getWorktreeExecutionHostId,
+  normalizeExecutionHostId,
+  type ExecutionHostId
+} from '../../../../shared/execution-host'
+import { buildVisibleWorktreeOptionsFromState, computeVisibleWorktrees } from './visible-worktrees'
+
+/**
+ * Filter-only visibility for one worktree id: runs the sidebar filter pipeline
+ * without collapse elision or rendered order, so a target inside a collapsed
+ * group is not misreported as hidden by filters.
+ *
+ * Worktree ids are not host-qualified (STA-4343): the same id can name a
+ * workspace on two hosts, so an id-only match would let a host-filtered remote
+ * target pass on the strength of its visible local twin. When the caller knows
+ * the target's host, the visible twin must resolve to that host too.
+ */
+export function worktreePassesSidebarFilters(
+  worktreeId: string,
+  executionHostId?: ExecutionHostId
+): boolean {
+  const state = useAppStore.getState()
+  const repoMap = getRepoMapFromState(state)
+  const requestedHostId = executionHostId ? normalizeExecutionHostId(executionHostId) : null
+  const defaultHostId = getSettingsFocusedExecutionHostId(state.settings)
+  return computeVisibleWorktrees(
+    state.worktreesByRepo,
+    [],
+    buildVisibleWorktreeOptionsFromState(state, repoMap)
+  ).some((worktree) => {
+    if (worktree.id !== worktreeId) {
+      return false
+    }
+    if (!requestedHostId) {
+      return true
+    }
+    const hostId = getWorktreeExecutionHostId(worktree, repoMap.get(worktree.repoId), defaultHostId)
+    return normalizeExecutionHostId(hostId) === requestedHostId
+  })
+}
diff --git a/src/renderer/src/components/terminal-pane/stale-agent-row.ts b/src/renderer/src/components/terminal-pane/stale-agent-row.ts
index c08f176691e..b781f76940d 100644
--- a/src/renderer/src/components/terminal-pane/stale-agent-row.ts
+++ b/src/renderer/src/components/terminal-pane/stale-agent-row.ts
@@ -7,7 +7,7 @@ export function dismissStaleAgentRowByKey(paneKey: string): void {
   const store = useAppStore.getState()
   const liveExisted = paneKey in store.agentStatusByPaneKey
   const retainedExisted = paneKey in store.retainedAgentsByPaneKey
-  store.dropAgentStatus(paneKey)
+  store.dropAgentStatus(paneKey, { paneRemoved: true })
   store.dismissRetainedAgent(paneKey)
   if (liveExisted || retainedExisted) {
     toast.info(
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-pane-close-actions.ts b/src/renderer/src/components/terminal-pane/use-terminal-pane-close-actions.ts
index 83f2e565c92..886c19fdf0d 100644
--- a/src/renderer/src/components/terminal-pane/use-terminal-pane-close-actions.ts
+++ b/src/renderer/src/components/terminal-pane/use-terminal-pane-close-actions.ts
@@ -47,7 +47,7 @@ export function useTerminalPaneCloseActions(controller: TerminalPaneBindingContr
         const leafId = manager.getLeafId(paneId)
         if (leafId) {
           useAppStore.getState().setCacheTimerStartedAt(makePaneKey(tabId, leafId), null)
-          useAppStore.getState().dropAgentStatus(makePaneKey(tabId, leafId))
+          useAppStore.getState().dropAgentStatus(makePaneKey(tabId, leafId), { paneRemoved: true })
         }
         setTerminalErrorsByPaneId((current) => clearPaneTerminalError(current, paneId))
         if (leafId) {
diff --git a/src/renderer/src/components/ui/dropdown-menu.tsx b/src/renderer/src/components/ui/dropdown-menu.tsx
index 193c5324fd3..b0e1d67a77c 100644
--- a/src/renderer/src/components/ui/dropdown-menu.tsx
+++ b/src/renderer/src/components/ui/dropdown-menu.tsx
@@ -86,7 +86,7 @@ function DropdownMenuCheckboxItem({
     >
       <span className="pointer-events-none absolute left-2 flex size-3.5 items-center justify-center">
         <DropdownMenuPrimitive.ItemIndicator>
-          <CheckIcon className="size-4" />
+          <CheckIcon className="size-3.5" />
         </DropdownMenuPrimitive.ItemIndicator>
       </span>
       {children}
diff --git a/src/renderer/src/components/ui/popover.tsx b/src/renderer/src/components/ui/popover.tsx
index 01365ba665b..ffd2c221e85 100644
--- a/src/renderer/src/components/ui/popover.tsx
+++ b/src/renderer/src/components/ui/popover.tsx
@@ -189,4 +189,19 @@ function PopoverContent({
   )
 }
 
-export { Popover, PopoverAnchor, PopoverContent, PopoverTrigger }
+function PopoverArrow({
+  className,
+  style,
+  ...props
+}: React.ComponentProps<typeof PopoverPrimitive.Arrow>) {
+  return (
+    <PopoverPrimitive.Arrow
+      data-slot="popover-arrow"
+      className={cn('fill-popover !visible block overflow-visible', className)}
+      style={{ visibility: 'visible', ...style }}
+      {...props}
+    />
+  )
+}
+
+export { Popover, PopoverAnchor, PopoverArrow, PopoverContent, PopoverTrigger }
diff --git a/src/renderer/src/hooks/useAutoAckViewedAgent.clock-skew.test.ts b/src/renderer/src/hooks/useAutoAckViewedAgent.clock-skew.test.ts
index d81c0c49ffa..2c69593563e 100644
--- a/src/renderer/src/hooks/useAutoAckViewedAgent.clock-skew.test.ts
+++ b/src/renderer/src/hooks/useAutoAckViewedAgent.clock-skew.test.ts
@@ -109,4 +109,14 @@ describe('useAutoAckViewedAgent — clock-skewed execution host', () => {
 
     expect(calls).toEqual([[PANE_KEY]])
   })
+
+  it('keeps an explicitly marked-unread visible turn unread', () => {
+    seedFutureStampedTurn(NOW - 5_000)
+    useAppStore.getState().acknowledgeAgents([PANE_KEY])
+
+    renderHook(() => useAutoAckViewedAgent(false))
+    useAppStore.getState().unacknowledgeAgents([PANE_KEY])
+
+    expect(useAppStore.getState().acknowledgedAgentsByPaneKey[PANE_KEY]).toBeUndefined()
+  })
 })
diff --git a/src/renderer/src/hooks/useAutoAckViewedAgent.test.ts b/src/renderer/src/hooks/useAutoAckViewedAgent.test.ts
index d461dd13b90..370205299d6 100644
--- a/src/renderer/src/hooks/useAutoAckViewedAgent.test.ts
+++ b/src/renderer/src/hooks/useAutoAckViewedAgent.test.ts
@@ -2,6 +2,7 @@ import { afterEach, describe, expect, it, vi } from 'vitest'
 import {
   acknowledgeViewedAgentAttention,
   computeAutoAckTargets,
+  computeLapsedManualUnreadProtections,
   computeViewedAgentCompletionPaneKey,
   resolveAutoAckTabTargets,
   shouldClearViewedAgentWorktreeUnread
@@ -503,3 +504,47 @@ describe('floating workspace auto-ack against the attention dot', () => {
     expect(selectFloatingWorkspaceHasUnread(store.getState())).toBe(false)
   })
 })
+
+describe('computeLapsedManualUnreadProtections', () => {
+  const paneKey = makePaneKey('tab-1', CODEX_LEAF_ID)
+  const otherPaneKey = makePaneKey('tab-1', OTHER_LEAF_ID)
+
+  it('keeps an active pane whose status row has not arrived yet (startup race)', () => {
+    // Persisted UI (manual-unread stamps) hydrates before the agent-status snapshot; a focused
+    // scan in that window must not treat "no row yet" as "the agent moved on".
+    const lapsed = computeLapsedManualUnreadProtections(
+      {
+        agentStatusByPaneKey: {},
+        retainedAgentsByPaneKey: {},
+        manuallyUnreadTurnsByPaneKey: { [paneKey]: 1_000 }
+      },
+      new Set([paneKey])
+    )
+    expect(lapsed).toEqual([])
+  })
+
+  it('lapses a pane that is no longer active or whose agent took a new turn', () => {
+    const store = createTestStore()
+    store.getState().setAgentStatus(paneKey, { state: 'done', prompt: 'p', agentType: 'claude' })
+    const turn = store.getState().agentStatusByPaneKey[paneKey]!.stateStartedAt
+    const lapsed = computeLapsedManualUnreadProtections(
+      {
+        ...store.getState(),
+        manuallyUnreadTurnsByPaneKey: { [paneKey]: turn - 1, [otherPaneKey]: 5 }
+      },
+      new Set([paneKey])
+    )
+    expect(lapsed.sort()).toEqual([paneKey, otherPaneKey].sort())
+  })
+
+  it('keeps an active pane whose turn is unchanged', () => {
+    const store = createTestStore()
+    store.getState().setAgentStatus(paneKey, { state: 'done', prompt: 'p', agentType: 'claude' })
+    const turn = store.getState().agentStatusByPaneKey[paneKey]!.stateStartedAt
+    const lapsed = computeLapsedManualUnreadProtections(
+      { ...store.getState(), manuallyUnreadTurnsByPaneKey: { [paneKey]: turn } },
+      new Set([paneKey])
+    )
+    expect(lapsed).toEqual([])
+  })
+})
diff --git a/src/renderer/src/hooks/useAutoAckViewedAgent.ts b/src/renderer/src/hooks/useAutoAckViewedAgent.ts
index 67f7be66742..40a3591e2b0 100644
--- a/src/renderer/src/hooks/useAutoAckViewedAgent.ts
+++ b/src/renderer/src/hooks/useAutoAckViewedAgent.ts
@@ -67,6 +67,20 @@ export function computeViewedAgentCompletionPaneKey(
   return state.unreadAgentCompletionPanes[targetKey] ? targetKey : null
 }
 
+function getAgentTurnTimestamp(
+  state: {
+    agentStatusByPaneKey: Record<string, AgentStatusEntry>
+    retainedAgentsByPaneKey: Record<string, RetainedAgentEntry>
+  },
+  paneKey: string
+): number | null {
+  return (
+    state.agentStatusByPaneKey[paneKey]?.stateStartedAt ??
+    state.retainedAgentsByPaneKey[paneKey]?.entry.stateStartedAt ??
+    null
+  )
+}
+
 export function shouldClearViewedAgentWorktreeUnread(
   state: {
     tabsByWorktree: Record<string, { id: string }[]>
@@ -108,6 +122,35 @@ export function shouldClearViewedAgentWorktreeUnread(
   return true
 }
 
+/**
+ * Manual mark-unread protections that no longer apply: the user moved to another pane, or the
+ * agent took a new turn. Exported for the startup-race test.
+ */
+export function computeLapsedManualUnreadProtections(
+  state: {
+    agentStatusByPaneKey: Record<string, AgentStatusEntry>
+    retainedAgentsByPaneKey: Record<string, RetainedAgentEntry>
+    manuallyUnreadTurnsByPaneKey: Record<string, number>
+  },
+  activePaneKeys: ReadonlySet<string>
+): string[] {
+  const lapsed: string[] = []
+  for (const [paneKey, turnTimestamp] of Object.entries(state.manuallyUnreadTurnsByPaneKey)) {
+    if (!activePaneKeys.has(paneKey)) {
+      lapsed.push(paneKey)
+      continue
+    }
+    const currentTurn = getAgentTurnTimestamp(state, paneKey)
+    // Why keep on null: persisted UI hydrates before the status snapshot lands, so an active
+    // pane with no row yet is "not known", not "moved on"; wiping it would lose the mark-unread
+    // the user made before relaunch.
+    if (currentTurn !== null && currentTurn !== turnTimestamp) {
+      lapsed.push(paneKey)
+    }
+  }
+  return lapsed
+}
+
 type ViewedAgentAttentionActions = {
   acknowledgeAgents: (paneKeys: string[]) => void
   clearWorktreeUnread: (worktreeId: string) => void
@@ -230,6 +273,9 @@ export function useAutoAckViewedAgent(floatingPanelVisible: boolean): void {
       const targets = resolveAutoAckTabTargets(s, {
         floatingPanelVisible: floatingPanelVisibleRef.current
       })
+      // Why no protection reset here: zero targets just means nothing is on screen
+      // (Settings, browser, an overlay) — a transient view switch must not lapse an
+      // explicit mark-unread the user just made.
       if (targets.length === 0) {
         return
       }
@@ -243,13 +289,31 @@ export function useAutoAckViewedAgent(floatingPanelVisible: boolean): void {
       lastLayouts = s.terminalLayoutsByTabId
       lastUnreadAgentCompletionPanes = s.unreadAgentCompletionPanes
 
+      const activePaneKeys = new Set<string>()
+      for (const target of targets) {
+        const activeLeafId = resolveActiveLeafId(s, target.tabId)
+        if (activeLeafId) {
+          activePaneKeys.add(makePaneKey(target.tabId, activeLeafId))
+        }
+      }
+      // Protection lapses when the user moves on to another pane or the agent takes a new
+      // turn; a still-active pane with an unchanged turn keeps its explicit mark-unread.
+      const lapsedProtections = computeLapsedManualUnreadProtections(s, activePaneKeys)
+      if (lapsedProtections.length > 0) {
+        s.clearManuallyUnreadTurns(lapsedProtections)
+      }
+
       for (const target of targets) {
         // Why re-read: acking target[0] writes to the store, which re-enters this scan synchronously
         // and may already have handled target[1]; `s` is a pre-write snapshot that would re-ack it.
         const current = useAppStore.getState()
         const tabId = target.tabId
         const activeLeafId = resolveActiveLeafId(current, tabId)
-        const toAck = computeAutoAckTargets(current, tabId, activeLeafId)
+        const toAck = computeAutoAckTargets(current, tabId, activeLeafId).filter(
+          (paneKey) =>
+            current.manuallyUnreadTurnsByPaneKey[paneKey] !==
+            getAgentTurnTimestamp(current, paneKey)
+        )
         const activePaneKey = computeViewedAgentCompletionPaneKey(current, tabId, activeLeafId)
         if (toAck.length > 0 || activePaneKey) {
           const paneKeysToClear = new Set(toAck)
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index 35d8dc50d42..7d621d77751 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -137,6 +137,10 @@
       "menuBarIcon": {
         "title": "Show Menu Bar Icon",
         "description": "Keep an Orca shortcut and activity indicator in the macOS menu bar."
+      },
+      "agentsSidebar": {
+        "title": "Show Agents Button",
+        "description": "Control whether the Agents tab appears in the left sidebar so you can monitor agent activity."
       }
     },
     "browser": {
@@ -945,6 +949,9 @@
       "ephemeralVmWorktreeCreation": {
         "sparseCheckoutUnsupported": "Provisioned-root recipes do not support sparse checkout."
       },
+      "worktreeJumpNavigation": {
+        "filteredNotice": "This worktree is hidden by sidebar filters. The workspace was opened, but it is not shown in Spaces."
+      },
       "file": {
         "preview": {
           "pairedOutsideWorktree": "Files outside the workspace can't be previewed on a paired server yet."
@@ -5231,12 +5238,16 @@
           "keepDefaultBranchAria": "Keep the default branch visible while hiding sleeping workspaces"
         },
         "SidebarHeader": {
+          "projects": "Projects",
+          "spaces": "Spaces",
           "25a95899c9": "Add Project",
           "92154beb7e": "New workspace",
           "49f62c5665": "Workspace board",
           "5c9c7c16aa": "Add a project to create workspaces",
           "ca6f729da2": "New workspace ({{value0}})",
-          "a30e34eb5c": "Close workspace board"
+          "a30e34eb5c": "Close workspace board",
+          "views": "Sidebar view",
+          "moreActions": "More workspace actions"
         },
         "SidebarNav": {
           "80611a8b10": "Search",
@@ -5368,7 +5379,8 @@
           "65a9820bd1": "Agent statuses",
           "219ebf1961": "Branch name",
           "folderPathIdentity": "Branch / folder path",
-          "cli": "Orca CLI"
+          "cli": "Orca CLI",
+          "workspaceOptions": "Workspace options"
         },
         "SshTargetRow": {
           "4677394048": "Connecting…",
@@ -9305,7 +9317,8 @@
             },
             "agentDashboard": {
               "title": "Agent Dashboard",
-              "description": "Kanban board for monitoring agents across worktrees, in-window or as a pop-out."
+              "description": "Kanban board for monitoring agents across worktrees, in-window or as a pop-out.",
+              "dashboard": "dashboard"
             }
           }
         },
@@ -15909,19 +15922,48 @@
           "b29191b3e0": "Worktree",
           "8c3b621ddf": "Project",
           "4a3986b200": "Status",
-          "770d458144": "Group agent activity by",
+          "770d458144": "Group by",
           "795cbf26e2": "Filter...",
           "4616ea39fd": "Jump to workspace",
+          "markThreadRead": "Mark thread as read",
           "59b131fbd9": "Mark thread unread",
           "beb2c19173": "Unread",
           "5651b216c6": "Unknown project",
           "22b22034bc": "Standalone terminal unavailable in Activity.",
-          "afdc2139a8": "Agent terminal closed. Open a new terminal in this workspace to continue."
+          "afdc2139a8": "Agent terminal closed. Open a new terminal in this workspace to continue.",
+          "compactModeDescription": "Shows shorter thread rows with one-line titles and two-line status messages.",
+          "unreadOnlyDescription": "Filters the activity list to show only threads with unread updates.",
+          "clearCompleted": "Clear completed",
+          "none": "None",
+          "search": "Search",
+          "showUnreadOnly": "Show unread only",
+          "showChildAgents": "Show child agents"
+        },
+        "clearCompleted": {
+          "clearedOne": "Cleared 1 completed agent",
+          "clearedMany": "Cleared {{count}} completed agents",
+          "undo": "Undo"
+        },
+        "standaloneWorktree": {
+          "floatingTerminal": "Floating terminal",
+          "standaloneTerminal": "Standalone terminal"
         },
         "ActivityTitlebarControls": {
           "f915168c8e": "unread",
           "d6a8de3934": "agents",
           "dc708f3eff": "Close agents"
+        },
+        "ActivityScopeFilterControls": {
+          "clearHostFilter": "Show all hosts",
+          "clearProjectFilter": "Show all projects",
+          "hiddenCount": "{{value0}} hidden"
+        },
+        "ActivityThreadHoverCard": {
+          "pathCopied": "Path copied to clipboard",
+          "copyPathFailed": "Failed to copy path",
+          "workspace": "Workspace",
+          "copyPath": "Copy path",
+          "jumpToWorkspace": "Jump to workspace"
         }
       },
       "confirmation": {
@@ -17186,7 +17228,8 @@
   },
   "dashboard": {
     "sidebar": {
-      "label": "Agent Dashboard"
+      "label": "Agents",
+      "dashboardLabel": "Agent Dashboard"
     }
   },
   "runtimeRpc": {
@@ -17233,5 +17276,20 @@
     "unlinkedPr": {
       "status": "PR #{{number}} unlinked"
     }
+  },
+  "agentsSidebarIntro": {
+    "migrated": {
+      "title": "Agents are easier to find",
+      "description": "Your Agents view is now a dedicated sidebar tab. Your activity and filters are preserved.",
+      "dismiss": "Got it",
+      "action": "Open Agents"
+    },
+    "new": {
+      "title": "Meet your Agents tab",
+      "description": "See what your agents are working on, what is done, and where you need to step in.",
+      "hide": "Hide Agents",
+      "action": "Try Agents",
+      "hiddenToast": "Agents tab hidden. Re-enable it in Settings → Experimental."
+    }
   }
 }
diff --git a/src/renderer/src/i18n/locales/es.json b/src/renderer/src/i18n/locales/es.json
index e55defa7518..4736cdbbbd4 100644
--- a/src/renderer/src/i18n/locales/es.json
+++ b/src/renderer/src/i18n/locales/es.json
@@ -4404,12 +4404,15 @@
           "keepDefaultBranchAria": "Mantener visible la rama predeterminada al ocultar los espacios de trabajo en reposo"
         },
         "SidebarHeader": {
+          "projects": "Proyectos",
           "92154beb7e": "Nuevo espacio de trabajo",
           "49f62c5665": "Tablero de espacios de trabajo",
           "5c9c7c16aa": "Agregar un proyecto para crear espacios de trabajo",
           "ca6f729da2": "Nuevo espacio de trabajo ({{value0}})",
           "a30e34eb5c": "Cerrar tablero del espacio de trabajo",
-          "25a95899c9": "Agregar proyecto"
+          "25a95899c9": "Agregar proyecto",
+          "spaces": "Espacios",
+          "views": "Vista de la barra lateral"
         },
         "SidebarNav": {
           "80611a8b10": "Buscar",
@@ -8231,7 +8234,8 @@
             },
             "agentDashboard": {
               "title": "Panel de agentes",
-              "description": "Tablero Kanban para monitorear agentes en diferentes worktrees, en ventana o como ventana emergente."
+              "description": "Tablero Kanban para monitorear agentes en diferentes worktrees, en ventana o como ventana emergente.",
+              "dashboard": "panel"
             }
           }
         },
@@ -14143,9 +14147,10 @@
           "b29191b3e0": "worktree",
           "8c3b621ddf": "Proyecto",
           "4a3986b200": "Estado",
-          "770d458144": "Agrupar actividad del agente por",
+          "770d458144": "Agrupar por",
           "795cbf26e2": "Filtrar...",
           "4616ea39fd": "Ir al workspace",
+          "markThreadRead": "Marcar hilo como leído",
           "59b131fbd9": "Marcar hilo como no leído",
           "beb2c19173": "No leído",
           "5651b216c6": "Proyecto desconocido",
@@ -14795,7 +14800,8 @@
   },
   "dashboard": {
     "sidebar": {
-      "label": "Panel de agentes"
+      "label": "Agentes",
+      "dashboardLabel": "Panel de agentes"
     }
   },
   "browser": {
@@ -14836,5 +14842,20 @@
         "unknown": "Restart Orca to try again."
       }
     }
+  },
+  "agentsSidebarIntro": {
+    "migrated": {
+      "title": "Los agentes son más fáciles de encontrar",
+      "description": "Tu vista de Agentes ahora es una pestaña dedicada de la barra lateral. Tu actividad y filtros se conservan.",
+      "dismiss": "Entendido",
+      "action": "Abrir Agentes"
+    },
+    "new": {
+      "title": "Conoce tu pestaña de Agentes",
+      "description": "Ve en qué están trabajando tus agentes, qué está terminado y dónde necesitas intervenir.",
+      "hide": "Ocultar Agentes",
+      "action": "Probar Agentes",
+      "hiddenToast": "La pestaña Agentes está oculta. Vuelve a activarla en Configuración → Experimental."
+    }
   }
 }
diff --git a/src/renderer/src/i18n/locales/ja.json b/src/renderer/src/i18n/locales/ja.json
index 5d97966fca0..315e5775442 100644
--- a/src/renderer/src/i18n/locales/ja.json
+++ b/src/renderer/src/i18n/locales/ja.json
@@ -4385,12 +4385,15 @@
           "keepDefaultBranchAria": "スリープ中のワークスペースを非表示にしてもデフォルトのブランチは表示したままにする"
         },
         "SidebarHeader": {
+          "projects": "プロジェクト",
           "92154beb7e": "新規ワークスペース",
           "49f62c5665": "ワークスペースボード",
           "5c9c7c16aa": "プロジェクトを追加してワークスペースを作成する",
           "ca6f729da2": "新規ワークスペース ({{value0}})",
           "a30e34eb5c": "ワークスペースボードを閉じる",
-          "25a95899c9": "プロジェクトを追加"
+          "25a95899c9": "プロジェクトを追加",
+          "spaces": "スペース",
+          "views": "サイドバービュー"
         },
         "SidebarNav": {
           "80611a8b10": "検索",
@@ -8253,7 +8256,8 @@
             },
             "agentDashboard": {
               "title": "Agent ダッシュボード",
-              "description": "ワークツリー Agent を監視するカンバンボード。ウィンドウ内またはポップアウトで表示できます。"
+              "description": "ワークツリー Agent を監視するカンバンボード。ウィンドウ内またはポップアウトで表示できます。",
+              "dashboard": "ダッシュボード"
             }
           }
         },
@@ -14143,9 +14147,10 @@
           "b29191b3e0": "ワークツリー",
           "8c3b621ddf": "プロジェクト",
           "4a3986b200": "状態",
-          "770d458144": "Agent のアクティビティをグループ化する",
+          "770d458144": "グループ化",
           "795cbf26e2": "フィルター…",
           "4616ea39fd": "ワークスペースにジャンプ",
+          "markThreadRead": "スレッドを既読としてマーク",
           "59b131fbd9": "スレッドを未読としてマークする",
           "beb2c19173": "未読",
           "5651b216c6": "不明なプロジェクト",
@@ -14795,7 +14800,8 @@
   },
   "dashboard": {
     "sidebar": {
-      "label": "Agent ダッシュボード"
+      "label": "Agent",
+      "dashboardLabel": "Agent ダッシュボード"
     }
   },
   "browser": {
@@ -14836,5 +14842,20 @@
         "unknown": "Orca を再起動してから、もう一度お試しください。"
       }
     }
+  },
+  "agentsSidebarIntro": {
+    "migrated": {
+      "title": "Agent が見つけやすくなりました",
+      "description": "Agent ビューはサイドバーの専用タブになりました。アクティビティとフィルターはそのまま引き継がれます。",
+      "dismiss": "OK",
+      "action": "Agent を開く"
+    },
+    "new": {
+      "title": "Agent タブのご紹介",
+      "description": "Agent が何に取り組んでいるか、何が完了したか、どこで対応が必要かを確認できます。",
+      "hide": "Agent を隠す",
+      "action": "Agent を試す",
+      "hiddenToast": "Agent タブを非表示にしました。設定 → 実験的機能で再度有効にできます。"
+    }
   }
 }
diff --git a/src/renderer/src/i18n/locales/ko.json b/src/renderer/src/i18n/locales/ko.json
index 795d359bce0..4a196c62304 100644
--- a/src/renderer/src/i18n/locales/ko.json
+++ b/src/renderer/src/i18n/locales/ko.json
@@ -3912,7 +3912,9 @@
           "searchLinks": "링크 검색",
           "deleteSkills": "스킬 삭제…"
         },
-        "SkillShareSelectionControls": { "01c5a15e02": "스킬 공유" },
+        "SkillShareSelectionControls": {
+          "01c5a15e02": "스킬 공유"
+        },
         "SkillRow": {
           "updatedUnknown": "날짜 없음",
           "pathCopied": "경로 복사됨",
@@ -3922,13 +3924,17 @@
           "viewDetails": "세부 정보 보기",
           "deleteSkill": "삭제…"
         },
-        "SkillsList": { "listLabel": "스킬" },
+        "SkillsList": {
+          "listLabel": "스킬"
+        },
         "sourceStatus": {
           "missing": "폴더를 찾을 수 없음",
           "remoteRepo": "원격 리포지토리 — 검색 안 됨",
           "unavailable": "검색 안 됨"
         },
-        "sources": { "heading": "스킬 폴더" },
+        "sources": {
+          "heading": "스킬 폴더"
+        },
         "sourceKind": {
           "home": "홈",
           "workspace": "워크스페이스",
@@ -3950,7 +3956,10 @@
           "linkOne": "링크 {{count}}개",
           "linkOther": "링크 {{count}}개"
         },
-        "filter": { "allAgents": "모든 에이전트", "sharedAgent": "공유됨 (.agents)" },
+        "filter": {
+          "allAgents": "모든 에이전트",
+          "sharedAgent": "공유됨 (.agents)"
+        },
         "SkillsSelectionHeader": {
           "exit": "선택 나가기",
           "exitTooltip": "선택 나가기 · Esc",
@@ -3959,7 +3968,11 @@
           "clear": "지우기",
           "deleteTitle": "삭제할 스킬 선택"
         },
-        "SkillDetailDialog": { "agents": "에이전트", "updated": "업데이트됨", "copy": "복사" },
+        "SkillDetailDialog": {
+          "agents": "에이전트",
+          "updated": "업데이트됨",
+          "copy": "복사"
+        },
         "SkillFreshnessNudge": {
           "titleOne": "설치된 Orca 스킬이 오래되었습니다",
           "titleMany": "설치된 Orca 스킬 {{value0}}개가 오래되었습니다",
@@ -4377,12 +4390,15 @@
           "keepDefaultBranchAria": "슬립 중인 워크스페이스를 숨겨도 기본 브랜치는 계속 표시"
         },
         "SidebarHeader": {
+          "projects": "프로젝트",
           "92154beb7e": "새로운 워크스페이스",
           "49f62c5665": "워크스페이스 보드",
           "5c9c7c16aa": "워크스페이스를 만들려면 프로젝트를 추가하세요.",
           "ca6f729da2": "새 워크스페이스({{value0}})",
           "a30e34eb5c": "워크스페이스 보드 닫기",
-          "25a95899c9": "프로젝트 추가"
+          "25a95899c9": "프로젝트 추가",
+          "spaces": "스페이스",
+          "views": "사이드바 보기"
         },
         "SidebarNav": {
           "80611a8b10": "검색",
@@ -8208,7 +8224,8 @@
             },
             "agentDashboard": {
               "title": "에이전트 대시보드",
-              "description": "워크트리 전반에 걸친 에이전트를 모니터링하는 칸반 보드. 윈도우 내 또는 팝업으로 표시됩니다."
+              "description": "워크트리 전반에 걸친 에이전트를 모니터링하는 칸반 보드. 윈도우 내 또는 팝업으로 표시됩니다.",
+              "dashboard": "대시보드"
             }
           }
         },
@@ -14186,9 +14203,10 @@
           "b29191b3e0": "워크트리",
           "8c3b621ddf": "프로젝트",
           "4a3986b200": "상태",
-          "770d458144": "agent 활동 그룹화 기준",
+          "770d458144": "그룹화 기준",
           "795cbf26e2": "필터...",
           "4616ea39fd": "워크스페이스로 이동",
+          "markThreadRead": "스레드를 읽은 것으로 표시",
           "59b131fbd9": "스레드를 읽지 않은 것으로 표시",
           "beb2c19173": "읽지 않음",
           "5651b216c6": "알 수 없는 프로젝트",
@@ -14899,7 +14917,8 @@
   },
   "dashboard": {
     "sidebar": {
-      "label": "에이전트 대시보드"
+      "label": "에이전트",
+      "dashboardLabel": "에이전트 대시보드"
     }
   },
   "browser": {
@@ -14940,5 +14959,20 @@
         "unknown": "Restart Orca to try again."
       }
     }
+  },
+  "agentsSidebarIntro": {
+    "migrated": {
+      "title": "에이전트를 더 쉽게 찾을 수 있습니다",
+      "description": "에이전트 보기가 이제 사이드바 전용 탭이 되었습니다. 활동과 필터는 그대로 유지됩니다.",
+      "dismiss": "확인",
+      "action": "에이전트 열기"
+    },
+    "new": {
+      "title": "에이전트 탭을 만나보세요",
+      "description": "에이전트가 무엇을 작업 중인지, 무엇이 완료되었는지, 어디에 개입이 필요한지 확인하세요.",
+      "hide": "에이전트 숨기기",
+      "action": "에이전트 사용해 보기",
+      "hiddenToast": "에이전트 탭이 숨겨졌습니다. 설정 → 실험 기능에서 다시 활성화하세요."
+    }
   }
 }
diff --git a/src/renderer/src/i18n/locales/zh.json b/src/renderer/src/i18n/locales/zh.json
index 3aa8333b872..edbd96e2623 100644
--- a/src/renderer/src/i18n/locales/zh.json
+++ b/src/renderer/src/i18n/locales/zh.json
@@ -3922,7 +3922,9 @@
           "searchLinks": "搜索链接",
           "deleteSkills": "删除技能…"
         },
-        "SkillShareSelectionControls": { "01c5a15e02": "共享技能" },
+        "SkillShareSelectionControls": {
+          "01c5a15e02": "共享技能"
+        },
         "SkillRow": {
           "updatedUnknown": "无日期",
           "pathCopied": "路径已复制",
@@ -3932,13 +3934,17 @@
           "viewDetails": "查看详情",
           "deleteSkill": "删除…"
         },
-        "SkillsList": { "listLabel": "技能" },
+        "SkillsList": {
+          "listLabel": "技能"
+        },
         "sourceStatus": {
           "missing": "未找到文件夹",
           "remoteRepo": "远程仓库 — 未扫描",
           "unavailable": "未扫描"
         },
-        "sources": { "heading": "技能文件夹" },
+        "sources": {
+          "heading": "技能文件夹"
+        },
         "sourceKind": {
           "home": "主目录",
           "workspace": "工作区",
@@ -3968,7 +3974,10 @@
           "deleteLinkOne": "{{count}} 个链接",
           "deleteLinkOther": "{{count}} 个链接"
         },
-        "filter": { "allAgents": "所有 Agent", "sharedAgent": "共享 (.agents)" },
+        "filter": {
+          "allAgents": "所有 Agent",
+          "sharedAgent": "共享 (.agents)"
+        },
         "SkillsSelectionHeader": {
           "exit": "退出选择",
           "exitTooltip": "退出选择 · Esc",
@@ -3977,7 +3986,11 @@
           "clear": "清除",
           "deleteTitle": "选择要删除的技能"
         },
-        "SkillDetailDialog": { "agents": "Agent", "updated": "已更新", "copy": "复制" },
+        "SkillDetailDialog": {
+          "agents": "Agent",
+          "updated": "已更新",
+          "copy": "复制"
+        },
         "SkillFreshnessNudge": {
           "titleOne": "已安装的 Orca 技能已过期",
           "titleMany": "{{value0}} 个已安装的 Orca 技能已过期",
@@ -4420,12 +4433,15 @@
           "keepDefaultBranchAria": "隐藏休眠工作区时仍显示默认分支"
         },
         "SidebarHeader": {
+          "projects": "项目",
           "92154beb7e": "新工作区",
           "49f62c5665": "工作区板",
           "5c9c7c16aa": "添加项目以创建工作区",
           "ca6f729da2": "新工作区 ({{value0}})",
           "a30e34eb5c": "关闭工作区板",
-          "25a95899c9": "添加项目"
+          "25a95899c9": "添加项目",
+          "spaces": "空间",
+          "views": "侧边栏视图"
         },
         "SidebarNav": {
           "80611a8b10": "搜索",
@@ -8251,7 +8267,8 @@
             },
             "agentDashboard": {
               "title": "智能体仪表盘",
-              "description": "用于监控跨工作树的智能体的看板，支持窗口内或弹出窗口显示。"
+              "description": "用于监控跨工作树的智能体的看板，支持窗口内或弹出窗口显示。",
+              "dashboard": "仪表盘"
             }
           }
         },
@@ -14186,9 +14203,10 @@
           "b29191b3e0": "工作树",
           "8c3b621ddf": "项目",
           "4a3986b200": "状态",
-          "770d458144": "对智能体活动进行分组",
+          "770d458144": "分组方式",
           "795cbf26e2": "筛选...",
           "4616ea39fd": "跳转到工作区",
+          "markThreadRead": "将话题标记为已读",
           "59b131fbd9": "将话题标记为未读",
           "beb2c19173": "未读",
           "5651b216c6": "未知项目",
@@ -14899,7 +14917,8 @@
   },
   "dashboard": {
     "sidebar": {
-      "label": "智能体仪表盘"
+      "label": "智能体",
+      "dashboardLabel": "智能体仪表盘"
     }
   },
   "browser": {
@@ -14940,5 +14959,20 @@
         "unknown": "请重启 Orca 以重试。"
       }
     }
+  },
+  "agentsSidebarIntro": {
+    "migrated": {
+      "title": "智能体更容易找到了",
+      "description": "智能体视图现在是侧边栏的专用标签页。你的活动和筛选条件都会保留。",
+      "dismiss": "知道了",
+      "action": "打开智能体"
+    },
+    "new": {
+      "title": "认识你的智能体标签页",
+      "description": "查看智能体正在做什么、哪些已完成，以及哪些需要你介入。",
+      "hide": "隐藏智能体",
+      "action": "试用智能体",
+      "hiddenToast": "智能体标签页已隐藏。可在设置 → 实验性功能中重新启用。"
+    }
   }
 }
diff --git a/src/renderer/src/lib/activity-thread-display.test.ts b/src/renderer/src/lib/activity-thread-display.test.ts
index 6beb4387c13..03d5e788331 100644
--- a/src/renderer/src/lib/activity-thread-display.test.ts
+++ b/src/renderer/src/lib/activity-thread-display.test.ts
@@ -12,6 +12,8 @@ describe('isTerseAgentFollowUpPrompt', () => {
     expect(isTerseAgentFollowUpPrompt('yes')).toBe(true)
     expect(isTerseAgentFollowUpPrompt('ok proceed')).toBe(true)
     expect(isTerseAgentFollowUpPrompt('Looks good.')).toBe(true)
+    expect(isTerseAgentFollowUpPrompt('hi')).toBe(true)
+    expect(isTerseAgentFollowUpPrompt('hello')).toBe(true)
   })
 
   it('keeps substantive prompts', () => {
@@ -238,6 +240,69 @@ describe('getActivityThreadStatusPreview', () => {
       })
     ).toBe('')
   })
+
+  it('surfaces the completed-turn reply on a finished row', () => {
+    expect(
+      getActivityThreadStatusPreview({
+        state: 'done',
+        prompt: 'Audit the repo',
+        lastCompletedAssistantMessage: 'Filed 8 issues from the audit.'
+      })
+    ).toBe('Filed 8 issues from the audit.')
+  })
+
+  it('does not show a prior completed reply while the agent is working', () => {
+    expect(
+      getActivityThreadStatusPreview({
+        state: 'working',
+        prompt: 'Next turn',
+        lastCompletedAssistantMessage: 'Filed 8 issues from the audit.'
+      })
+    ).toBe('')
+  })
+
+  it('skips orchestration worker_done wrap-up so the card shows the reply', () => {
+    expect(
+      getActivityThreadStatusPreview({
+        state: 'done',
+        prompt: 'On the m4air environment, use the terminal',
+        lastAssistantMessage:
+          'Task complete — worker_done sent. Summary of what happened: Verdict: The two PRs were merged.'
+      })
+    ).toBe('The two PRs were merged.')
+  })
+
+  it('unwraps worker_done wrap-up that uses ascii dashes or markdown verdict labels', () => {
+    expect(
+      getActivityThreadStatusPreview({
+        state: 'done',
+        prompt: 'On the m4air environment, use the terminal',
+        lastAssistantMessage:
+          'Task complete -- worker_done sent. Summary of what happened: **Verdict:** The two PRs were merged.'
+      })
+    ).toBe('The two PRs were merged.')
+  })
+
+  it('drops a worker_done report that has no assistant reply', () => {
+    expect(
+      getActivityThreadStatusPreview({
+        state: 'done',
+        prompt: 'Fix checkout',
+        lastAssistantMessage: 'Done — worker_done sent with outcome succeeded.'
+      })
+    ).toBe('')
+  })
+
+  it('falls through to the completed-turn reply when the live preview is only worker_done', () => {
+    expect(
+      getActivityThreadStatusPreview({
+        state: 'done',
+        prompt: 'Fix checkout',
+        lastAssistantMessage: 'Done — worker_done sent with outcome succeeded.',
+        lastCompletedAssistantMessage: 'I updated the tests and checked the activity row.'
+      })
+    ).toBe('I updated the tests and checked the activity row.')
+  })
 })
 
 describe('resolveActivityThreadStatusPreview', () => {
@@ -254,4 +319,18 @@ describe('resolveActivityThreadStatusPreview', () => {
       )
     ).toBe('Implemented the skill creator port.')
   })
+
+  it('keeps the previous recap after a greeting follow-up with no new assistant preview', () => {
+    expect(
+      resolveActivityThreadStatusPreview(
+        {
+          state: 'done',
+          prompt: 'hi',
+          lastAssistantMessage: ''
+        },
+        'done',
+        'The two PRs were merged or superseded.'
+      )
+    ).toBe('The two PRs were merged or superseded.')
+  })
 })
diff --git a/src/renderer/src/lib/activity-thread-display.ts b/src/renderer/src/lib/activity-thread-display.ts
index 7dd5f663370..c330edcb6f0 100644
--- a/src/renderer/src/lib/activity-thread-display.ts
+++ b/src/renderer/src/lib/activity-thread-display.ts
@@ -15,7 +15,7 @@ import { formatAgentToolPreview } from './agent-row-tool-preview'
 // Why: follow-up replies ("yes", "ok proceed") are valid hook prompts but are
 // terrible scan labels for a cross-worktree agent list — treat them as non-titles.
 const TERSE_FOLLOW_UP_PATTERN =
-  /^(yes|no|ok|yep|nope|sure|thanks|thank you|please|proceed|continue|go ahead|lgtm|done|looks good|ok proceed)\.?$/i
+  /^(yes|no|ok|yep|nope|sure|thanks|thank you|please|proceed|continue|go ahead|lgtm|done|looks good|ok proceed|hi|hey|hello|yo)\.?$/i
 
 export function isTerseAgentFollowUpPrompt(prompt: string): boolean {
   const trimmed = prompt.trim()
@@ -153,11 +153,48 @@ function isMislabeledUserPrompt(text: string, entry: Pick<AgentStatusEntry, 'pro
   return false
 }
 
+// Why: orchestration workers often start the stop-hook preview with the
+// lifecycle report ("Task complete — worker_done sent") so a 2-line card
+// never reaches the actual reply. Match `worker_done sent` near the start
+// rather than a single dash shape — agents use em dashes, `--`, or markdown.
+const WORKER_DONE_SENT = /\bworker_done sent(?:\s+with outcome \w+)?/i
+const ORCHESTRATION_SUMMARY_PREFIX = /^(?:\*{0,2})summary of what happened:\s*/i
+const ORCHESTRATION_VERDICT_PREFIX = /^(?:\*{0,2})verdict:(?:\*{0,2})\s*/i
+
+function unwrapOrchestrationAssistantPreview(text: string): string {
+  let next = text.trim()
+  const workerDone = WORKER_DONE_SENT.exec(next)
+  if (workerDone && workerDone.index < 96) {
+    next = next.slice(workerDone.index + workerDone[0].length).replace(/^[.\s…*—–-]+/, '')
+  }
+  next = next.replace(ORCHESTRATION_SUMMARY_PREFIX, '').trim()
+  next = next.replace(ORCHESTRATION_VERDICT_PREFIX, '').trim()
+  return next
+}
+
+function usefulAssistantReply(text: string, entry: Pick<AgentStatusEntry, 'prompt'>): string {
+  const trimmed = text.trim()
+  if (!trimmed || isMislabeledUserPrompt(trimmed, entry)) {
+    return ''
+  }
+  const unwrapped = unwrapOrchestrationAssistantPreview(trimmed)
+  if (!unwrapped || /^[.\s…]+$/.test(unwrapped) || isMislabeledUserPrompt(unwrapped, entry)) {
+    return ''
+  }
+  return unwrapped
+}
+
 /** Latest agent activity line — tool step while working, assistant reply otherwise. */
 export function getActivityThreadStatusPreview(
   entry: Pick<
     AgentStatusEntry,
-    'state' | 'toolName' | 'toolInput' | 'lastAssistantMessage' | 'interrupted' | 'prompt'
+    | 'state'
+    | 'toolName'
+    | 'toolInput'
+    | 'lastAssistantMessage'
+    | 'lastCompletedAssistantMessage'
+    | 'interrupted'
+    | 'prompt'
   >,
   agentState?: AgentStatusState | null
 ): string {
@@ -169,10 +206,15 @@ export function getActivityThreadStatusPreview(
   if (toolPreview) {
     return toolPreview
   }
-  const assistant = entry.lastAssistantMessage?.trim() ?? ''
-  if (assistant && !isMislabeledUserPrompt(assistant, entry)) {
+  const assistant = usefulAssistantReply(entry.lastAssistantMessage ?? '', entry)
+  if (assistant) {
     return assistant
   }
+  // Why: live working/waiting pings clear lastAssistantMessage; the completed-turn
+  // snapshot is the last useful reply once the agent is no longer in-flight.
+  if (state !== 'working' && state !== 'waiting') {
+    return usefulAssistantReply(entry.lastCompletedAssistantMessage ?? '', entry)
+  }
   return ''
 }
 
@@ -180,7 +222,13 @@ export function getActivityThreadStatusPreview(
 export function resolveActivityThreadStatusPreview(
   entry: Pick<
     AgentStatusEntry,
-    'state' | 'toolName' | 'toolInput' | 'lastAssistantMessage' | 'interrupted' | 'prompt'
+    | 'state'
+    | 'toolName'
+    | 'toolInput'
+    | 'lastAssistantMessage'
+    | 'lastCompletedAssistantMessage'
+    | 'interrupted'
+    | 'prompt'
   >,
   agentState: AgentStatusState | null | undefined,
   previousPreview?: string
@@ -195,9 +243,5 @@ export function resolveActivityThreadStatusPreview(
   if (!isTerseAgentFollowUpPrompt(entry.prompt)) {
     return ''
   }
-  const previous = previousPreview?.trim() ?? ''
-  if (previous && !isMislabeledUserPrompt(previous, entry)) {
-    return previous
-  }
-  return ''
+  return usefulAssistantReply(previousPreview ?? '', entry)
 }
diff --git a/src/renderer/src/lib/short-time-ago.ts b/src/renderer/src/lib/short-time-ago.ts
new file mode 100644
index 00000000000..731f9cbc136
--- /dev/null
+++ b/src/renderer/src/lib/short-time-ago.ts
@@ -0,0 +1,16 @@
+/** Compact "now / 5m / 3h / 2d" age label shared by agent rows and activity threads. */
+export function formatShortTimeAgo(ts: number, now = Date.now()): string {
+  const delta = now - ts
+  if (delta < 60_000) {
+    return 'now'
+  }
+  const minutes = Math.floor(delta / 60_000)
+  if (minutes < 60) {
+    return `${minutes}m`
+  }
+  const hours = Math.floor(minutes / 60)
+  if (hours < 24) {
+    return `${hours}h`
+  }
+  return `${Math.floor(hours / 24)}d`
+}
diff --git a/src/renderer/src/lib/worktree-activation.ts b/src/renderer/src/lib/worktree-activation.ts
index 1717cba7408..e7d3f9cae9c 100644
--- a/src/renderer/src/lib/worktree-activation.ts
+++ b/src/renderer/src/lib/worktree-activation.ts
@@ -187,6 +187,8 @@ export function activateAndRevealWorktree(
      *  runtime-owned workspace with a live web session the host owns terminal creation,
      *  so ensureWebRuntimeWorktreeTerminalAfterWake may still seed one (matches main). */
     providesInitialSurface?: boolean
+    /** Keep sidebar filters intact when navigating to a hidden target. */
+    clearSidebarFilters?: boolean
   }
 ): ActivateAndRevealResult | false {
   const state = useAppStore.getState()
@@ -283,20 +285,22 @@ export function activateAndRevealWorktree(
   }
 
   // 5. Clear sidebar filters hiding the target — reveal needs the card rendered, else it silently no-ops.
-  if (state.filterRepoIds.length > 0 && !state.filterRepoIds.includes(wt.repoId)) {
-    state.setFilterRepoIds([])
-  }
-  if (
-    state.hideAutomationGeneratedWorkspaces &&
-    wt.automationProvenance?.kind === 'created-by-automation'
-  ) {
-    state.setHideAutomationGeneratedWorkspaces(false)
-  }
-  if (state.hideCliCreatedWorkspaces && wt.cliProvenance?.kind === 'created-by-cli') {
-    state.setHideCliCreatedWorkspaces(false)
-  }
-  if (state.hideDetachedHeadWorkspaces && isDetachedHeadWorkspace(wt)) {
-    state.setHideDetachedHeadWorkspaces(false)
+  if (opts?.clearSidebarFilters !== false) {
+    if (state.filterRepoIds.length > 0 && !state.filterRepoIds.includes(wt.repoId)) {
+      state.setFilterRepoIds([])
+    }
+    if (
+      state.hideAutomationGeneratedWorkspaces &&
+      wt.automationProvenance?.kind === 'created-by-automation'
+    ) {
+      state.setHideAutomationGeneratedWorkspaces(false)
+    }
+    if (state.hideCliCreatedWorkspaces && wt.cliProvenance?.kind === 'created-by-cli') {
+      state.setHideCliCreatedWorkspaces(false)
+    }
+    if (state.hideDetachedHeadWorkspaces && isDetachedHeadWorkspace(wt)) {
+      state.setHideDetachedHeadWorkspaces(false)
+    }
   }
 
   // 6. Reveal in sidebar
@@ -326,11 +330,18 @@ export function activateAndRevealWorktree(
  */
 export function activateAndRevealWorkspace(
   workspaceId: string,
-  opts?: { executionHostId?: ExecutionHostId; providesInitialSurface?: boolean }
+  opts?: {
+    executionHostId?: ExecutionHostId
+    providesInitialSurface?: boolean
+    /** Worktree-only: folder workspaces are never filter-hidden, so these are dropped there. */
+    revealInSidebar?: boolean
+    clearSidebarFilters?: boolean
+  }
 ): ActivateAndRevealResult | false {
   const workspaceScope = parseWorkspaceKey(workspaceId)
   if (workspaceScope?.type === 'folder') {
-    return activateAndRevealFolderWorkspace(workspaceScope.folderWorkspaceId, opts)
+    const { revealInSidebar: _reveal, clearSidebarFilters: _clear, ...folderOpts } = opts ?? {}
+    return activateAndRevealFolderWorkspace(workspaceScope.folderWorkspaceId, folderOpts)
   }
   return activateAndRevealWorktree(workspaceId, opts)
 }
diff --git a/src/renderer/src/lib/worktree-jump-navigation.test.ts b/src/renderer/src/lib/worktree-jump-navigation.test.ts
new file mode 100644
index 00000000000..4c76316556c
--- /dev/null
+++ b/src/renderer/src/lib/worktree-jump-navigation.test.ts
@@ -0,0 +1,151 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const mocks = vi.hoisted(() => ({
+  getState: vi.fn(),
+  activateAndRevealWorkspace: vi.fn(),
+  getVisibleWorktreeShortcutTargets: vi.fn(),
+  worktreePassesSidebarFilters: vi.fn(),
+  warning: vi.fn()
+}))
+
+vi.mock('@/store', () => ({ useAppStore: { getState: mocks.getState } }))
+vi.mock('@/lib/worktree-activation', () => ({
+  activateAndRevealWorkspace: mocks.activateAndRevealWorkspace
+}))
+vi.mock('@/components/sidebar/visible-worktrees', () => ({
+  getVisibleWorktreeShortcutTargets: mocks.getVisibleWorktreeShortcutTargets
+}))
+vi.mock('@/components/sidebar/worktree-filter-visibility', () => ({
+  worktreePassesSidebarFilters: mocks.worktreePassesSidebarFilters
+}))
+vi.mock('sonner', () => ({ toast: { warning: mocks.warning } }))
+
+import { jumpToWorktreeFromSidebar } from './worktree-jump-navigation'
+
+describe('worktree jump navigation', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mocks.activateAndRevealWorkspace.mockReturnValue({ primaryTabId: null })
+    mocks.getVisibleWorktreeShortcutTargets.mockReturnValue([])
+    mocks.worktreePassesSidebarFilters.mockReturnValue(false)
+    mocks.getState.mockReturnValue({
+      sidebarBody: 'agents',
+      setSidebarBody: vi.fn(),
+      worktreesByRepo: { repo: [] },
+      showSleepingWorkspaces: true,
+      filterRepoIds: ['other-repo'],
+      hideDefaultBranchWorkspace: false,
+      hideAutomationGeneratedWorkspaces: false,
+      hideCliCreatedWorkspaces: false,
+      hideDetachedHeadWorkspaces: false,
+      hideWorkspacesFromOtherDevices: false,
+      alwaysShowDefaultBranchWorkspace: true,
+      visibleWorkspaceHostIds: null,
+      workspaceHostScope: 'all',
+      revealWorktreeInSidebar: vi.fn(),
+      getKnownWorktreeById: vi.fn(() => ({ id: 'known' }))
+    })
+  })
+
+  it('does not blame filters for a worktree that no longer exists', () => {
+    // A retained agent row can outlive its (deleted) worktree; every filter check fails for
+    // an unknown id, so without the existence guard any active filter would toast.
+    const state = mocks.getState()
+    state.getKnownWorktreeById.mockReturnValue(undefined)
+
+    expect(jumpToWorktreeFromSidebar('repo::/deleted')).toBe(true)
+
+    expect(mocks.worktreePassesSidebarFilters).not.toHaveBeenCalled()
+    expect(mocks.warning).not.toHaveBeenCalled()
+    expect(mocks.activateAndRevealWorkspace).toHaveBeenCalledWith('repo::/deleted', {})
+  })
+
+  it('switches the left sidebar to Spaces and warns when filters hide the target', () => {
+    const state = mocks.getState()
+
+    expect(jumpToWorktreeFromSidebar('repo::/target')).toBe(true)
+
+    expect(state.setSidebarBody).toHaveBeenCalledWith('workspaces')
+    expect(mocks.activateAndRevealWorkspace).toHaveBeenCalledWith('repo::/target', {
+      revealInSidebar: false,
+      clearSidebarFilters: false
+    })
+    expect(mocks.warning).toHaveBeenCalledOnce()
+  })
+
+  it('does not warn when the target is visible', () => {
+    mocks.getVisibleWorktreeShortcutTargets.mockReturnValue([{ id: 'wt-1' }])
+
+    jumpToWorktreeFromSidebar('wt-1')
+
+    expect(mocks.warning).not.toHaveBeenCalled()
+  })
+
+  it('reveals without warning when activation wakes a target hidden only by Hide sleeping', () => {
+    const state = mocks.getState()
+    mocks.worktreePassesSidebarFilters.mockReturnValueOnce(false).mockReturnValueOnce(true)
+
+    expect(jumpToWorktreeFromSidebar('wt-sleeping')).toBe(true)
+
+    expect(state.revealWorktreeInSidebar).toHaveBeenCalledWith('wt-sleeping', {})
+    expect(mocks.warning).not.toHaveBeenCalled()
+  })
+
+  it('reveals instead of warning when the target is only inside a collapsed group', () => {
+    // Absent from the rendered list (collapse elision) but not excluded by filters.
+    mocks.getVisibleWorktreeShortcutTargets.mockReturnValue([])
+    mocks.worktreePassesSidebarFilters.mockReturnValue(true)
+
+    expect(jumpToWorktreeFromSidebar('wt-collapsed')).toBe(true)
+
+    expect(mocks.activateAndRevealWorkspace).toHaveBeenCalledWith('wt-collapsed', {})
+    expect(mocks.warning).not.toHaveBeenCalled()
+  })
+
+  it('passes the target execution host to the filter check so a local twin cannot vouch', () => {
+    mocks.getVisibleWorktreeShortcutTargets.mockReturnValue([])
+    mocks.worktreePassesSidebarFilters.mockReturnValue(false)
+
+    expect(jumpToWorktreeFromSidebar('repo::/target', { executionHostId: 'ssh:beta' })).toBe(true)
+
+    expect(mocks.worktreePassesSidebarFilters).toHaveBeenCalledWith('repo::/target', 'ssh:beta')
+    expect(mocks.warning).toHaveBeenCalledOnce()
+  })
+
+  it('does not let a hostless legacy target vouch for a host-scoped one', () => {
+    // Legacy rows publish without executionHostId; treating that as a match would clear the
+    // user's filters instead of preserving them and warning.
+    mocks.getVisibleWorktreeShortcutTargets.mockReturnValue([{ id: 'repo::/target' }])
+    mocks.worktreePassesSidebarFilters.mockReturnValue(false)
+
+    expect(jumpToWorktreeFromSidebar('repo::/target', { executionHostId: 'ssh:beta' })).toBe(true)
+
+    expect(mocks.activateAndRevealWorkspace).toHaveBeenCalledWith('repo::/target', {
+      revealInSidebar: false,
+      clearSidebarFilters: false,
+      executionHostId: 'ssh:beta'
+    })
+    expect(mocks.warning).toHaveBeenCalledOnce()
+  })
+
+  it('routes folder workspaces through the workspace dispatcher without a filter check', () => {
+    const state = mocks.getState()
+
+    expect(jumpToWorktreeFromSidebar('folder:folder-1', { executionHostId: 'local' })).toBe(true)
+
+    expect(mocks.activateAndRevealWorkspace).toHaveBeenCalledWith('folder:folder-1', {
+      executionHostId: 'local'
+    })
+    // Folder workspaces never get the filter-hidden treatment.
+    expect(mocks.worktreePassesSidebarFilters).not.toHaveBeenCalled()
+    expect(state.setSidebarBody).toHaveBeenCalledWith('workspaces')
+  })
+
+  it('propagates a blocked folder-workspace activation as failure', () => {
+    const state = mocks.getState()
+    mocks.activateAndRevealWorkspace.mockReturnValue(false)
+
+    expect(jumpToWorktreeFromSidebar('folder:folder-1')).toBe(false)
+    expect(state.setSidebarBody).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/lib/worktree-jump-navigation.ts b/src/renderer/src/lib/worktree-jump-navigation.ts
new file mode 100644
index 00000000000..bfc0d6dd936
--- /dev/null
+++ b/src/renderer/src/lib/worktree-jump-navigation.ts
@@ -0,0 +1,95 @@
+import { toast } from 'sonner'
+import { translate } from '@/i18n/i18n'
+import { useAppStore } from '@/store'
+import { activateAndRevealWorkspace } from '@/lib/worktree-activation'
+import { getVisibleWorktreeShortcutTargets } from '@/components/sidebar/visible-worktrees'
+import { worktreePassesSidebarFilters } from '@/components/sidebar/worktree-filter-visibility'
+import { sidebarHasActiveFilters } from '@/components/sidebar/sidebar-filter-actions'
+import { parseWorkspaceKey } from '../../../shared/workspace-scope'
+import { normalizeExecutionHostId, type ExecutionHostId } from '../../../shared/execution-host'
+
+function wasHiddenBySidebarFilters(worktreeId: string, executionHostId?: ExecutionHostId): boolean {
+  const state = useAppStore.getState()
+  // Some lightweight callers/tests provide only the activation slice of state.
+  if (!state.worktreesByRepo || !sidebarHasActiveFilters(state)) {
+    return false
+  }
+
+  const inRenderedTargets = getVisibleWorktreeShortcutTargets().some((target) => {
+    if (target.id !== worktreeId) {
+      return false
+    }
+    if (!executionHostId) {
+      return true
+    }
+    // Why strict: legacy rows publish without a host, and a hostless twin must not vouch for a
+    // filtered ssh:*/runtime:* target — that would clear the user's filters instead of warning.
+    if (!target.executionHostId) {
+      return false
+    }
+    return (
+      normalizeExecutionHostId(target.executionHostId) === normalizeExecutionHostId(executionHostId)
+    )
+  })
+  if (inRenderedTargets) {
+    return false
+  }
+  // Why: a retained agent can outlive its worktree; a deleted worktree fails every filter
+  // pass, so without this check any active filter would blame itself for the missing row.
+  if (!state.getKnownWorktreeById?.(worktreeId, executionHostId)) {
+    return false
+  }
+  // Absent from the rendered list can mean a collapsed group, not a filter:
+  // collapsed-but-unfiltered targets should be revealed, not toasted. The host
+  // matters: an id-only check would pass on a filtered target's same-id twin
+  // from another execution host.
+  return !worktreePassesSidebarFilters(worktreeId, executionHostId)
+}
+
+/** Navigate from a worktree reference in either sidebar back to the workspace surface. */
+export function jumpToWorktreeFromSidebar(
+  worktreeId: string,
+  options?: { executionHostId?: ExecutionHostId }
+): boolean {
+  const state = useAppStore.getState()
+
+  // Folder workspaces aren't in the worktree filter pipeline; only git worktrees can be filter-hidden.
+  const hiddenBeforeActivation =
+    parseWorkspaceKey(worktreeId)?.type !== 'folder' &&
+    wasHiddenBySidebarFilters(worktreeId, options?.executionHostId)
+
+  // Why the workspace dispatcher: it owns the folder-vs-worktree split and the folder path-status gate.
+  const activated = activateAndRevealWorkspace(worktreeId, {
+    ...(hiddenBeforeActivation ? { revealInSidebar: false, clearSidebarFilters: false } : {}),
+    ...(options?.executionHostId ? { executionHostId: options.executionHostId } : {})
+  })
+  if (activated === false) {
+    return false
+  }
+
+  // The worktree list is the Spaces/Projects sidebar body; jump actions should always expose it.
+  state.setSidebarBody?.('workspaces')
+
+  const hiddenAfterActivation =
+    hiddenBeforeActivation && wasHiddenBySidebarFilters(worktreeId, options?.executionHostId)
+  if (hiddenBeforeActivation && !hiddenAfterActivation) {
+    // Activation can seed a terminal, making a workspace excluded only by Hide sleeping visible.
+    // Queue the reveal after that state transition instead of reporting a filter conflict.
+    useAppStore
+      .getState()
+      .revealWorktreeInSidebar(
+        worktreeId,
+        options?.executionHostId ? { executionHostId: options.executionHostId } : {}
+      )
+  }
+
+  if (hiddenAfterActivation) {
+    toast.warning(
+      translate(
+        'auto.lib.worktreeJumpNavigation.filteredNotice',
+        'This worktree is hidden by sidebar filters. The workspace was opened, but it is not shown in Spaces.'
+      )
+    )
+  }
+  return true
+}
diff --git a/src/renderer/src/lib/worktree-runtime-owner-index.ts b/src/renderer/src/lib/worktree-runtime-owner-index.ts
index 7bd0ebf2eba..cddb3b81d90 100644
--- a/src/renderer/src/lib/worktree-runtime-owner-index.ts
+++ b/src/renderer/src/lib/worktree-runtime-owner-index.ts
@@ -265,17 +265,18 @@ export function findIndexedRepoOwner(
   return resolution.kind === 'resolved' ? resolution.owner : null
 }
 
-export function findIndexedRepoOwnerForHost(
-  repos: readonly RepoOwnerRecord[] | undefined,
+export function findIndexedRepoOwnerForHost<T extends RepoOwnerRecord>(
+  repos: readonly T[] | undefined,
   repoId: string,
   executionHostId: ExecutionHostId
-): RepoOwnerRecord | null {
+): T | null {
   if (!repos) {
     return null
   }
   resolveIndexedRepoOwner(repos, repoId)
   const resolution = repoOwnerIndexCache.get(repos)?.get(`${repoId}\0${executionHostId}`)
-  return resolution?.kind === 'resolved' ? resolution.owner : null
+  // The cache is keyed by this exact array, so its owner retains the caller's row type.
+  return resolution?.kind === 'resolved' ? (resolution.owner as T) : null
 }
 
 export function findIndexedFolderWorkspaceOwner(
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/agent-status-primitives.ts b/src/renderer/src/runtime/web-session-tabs-sync/agent-status-primitives.ts
index 30cb1ac7632..f0eb938f00e 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/agent-status-primitives.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/agent-status-primitives.ts
@@ -167,10 +167,12 @@ export function buildRetractedMirroredTabSweepPatch(
   }
   const sweepState: RetiredTerminalTabSweepState = {
     acknowledgedAgentsByPaneKey: state.acknowledgedAgentsByPaneKey ?? {},
+    activityClearedAtByPaneKey: state.activityClearedAtByPaneKey ?? {},
     agentLaunchConfigByPaneKey: state.agentLaunchConfigByPaneKey ?? {},
     agentStatusByPaneKey: agentStatusPatch?.agentStatusByPaneKey ?? state.agentStatusByPaneKey,
     agentStatusEpoch: agentStatusPatch?.agentStatusEpoch ?? state.agentStatusEpoch,
     migrationUnsupportedByPtyId: state.migrationUnsupportedByPtyId ?? {},
+    manuallyUnreadTurnsByPaneKey: state.manuallyUnreadTurnsByPaneKey ?? {},
     paneForegroundAgentByPaneKey: state.paneForegroundAgentByPaneKey ?? {},
     recentlyClosedAgentStatusTabIds: state.recentlyClosedAgentStatusTabIds ?? {},
     recentlyRetiredAgentStatusPaneKeys: state.recentlyRetiredAgentStatusPaneKeys ?? {},
@@ -181,7 +183,11 @@ export function buildRetractedMirroredTabSweepPatch(
     // so it must see the post-removal tab list, not the one the snapshot replaced.
     tabsByWorktree: nextTabsByWorktree
   }
-  const sweep = buildRetiredTerminalTabStateSweepPatch(sweepState, retractedTabIds, worktreeId)
+  // Why: a retraction can be a reconnect re-key, not pane death (ssh-execution-boundary); keeping
+  // cutoffs means a republished pane cannot replay activity the user cleared on this client.
+  const sweep = buildRetiredTerminalTabStateSweepPatch(sweepState, retractedTabIds, worktreeId, {
+    preserveActivityClearedState: true
+  })
   if (!sweep?.agentStatusByPaneKey || !batchContext) {
     return sweep ?? null
   }
diff --git a/src/renderer/src/runtime/web-session-tabs-sync/state.ts b/src/renderer/src/runtime/web-session-tabs-sync/state.ts
index d8be13bde50..f44d4a3d18c 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync/state.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync/state.ts
@@ -199,9 +199,11 @@ export type WebSessionTabsSyncState = Pick<
     Pick<
       AppState,
       | 'acknowledgedAgentsByPaneKey'
+      | 'activityClearedAtByPaneKey'
       | 'agentLaunchConfigByPaneKey'
       | 'automaticAgentResumeClaimsByTabId'
       | 'migrationUnsupportedByPtyId'
+      | 'manuallyUnreadTurnsByPaneKey'
       | 'paneForegroundAgentByPaneKey'
       | 'pendingStartupByTabId'
       | 'recentlyClosedAgentStatusTabIds'
diff --git a/src/renderer/src/store/slices/activity-cleared-at.test.ts b/src/renderer/src/store/slices/activity-cleared-at.test.ts
new file mode 100644
index 00000000000..3a59ee3a11b
--- /dev/null
+++ b/src/renderer/src/store/slices/activity-cleared-at.test.ts
@@ -0,0 +1,169 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { RetainedAgentEntry } from './agent-status'
+import { createTestStore } from './store-test-helpers'
+import {
+  sanitizeAcknowledgedAgentsByPaneKey,
+  sanitizeActivityClearedAtByPaneKey
+} from './ui/ui-slice-hydration-sanitizers'
+
+function makeRetained(paneKey: string, worktreeId = 'wt-1'): RetainedAgentEntry {
+  const entry: AgentStatusEntry = {
+    state: 'done',
+    prompt: 'run',
+    updatedAt: 1_000,
+    stateStartedAt: 1_000,
+    paneKey,
+    stateHistory: [],
+    agentType: 'claude'
+  }
+  const tab: TerminalTab = {
+    id: paneKey.split(':')[0],
+    ptyId: 'pty-1',
+    worktreeId,
+    title: 'agent',
+    customTitle: null,
+    color: null,
+    sortOrder: 0,
+    createdAt: 1
+  }
+  return { entry, worktreeId, tab, agentType: 'claude', startedAt: 1_000 }
+}
+
+describe('applyActivityClearedAt', () => {
+  it('merges stamps, deletes on null, and no-ops on identical patches', () => {
+    const store = createTestStore()
+    store.getState().applyActivityClearedAt({ 'a:1': 100, 'b:2': 200 })
+    expect(store.getState().activityClearedAtByPaneKey).toEqual({ 'a:1': 100, 'b:2': 200 })
+
+    const before = store.getState().activityClearedAtByPaneKey
+    store.getState().applyActivityClearedAt({ 'a:1': 100 })
+    // Identity preserved when nothing changed, so subscribers don't churn.
+    expect(store.getState().activityClearedAtByPaneKey).toBe(before)
+
+    store.getState().applyActivityClearedAt({ 'a:1': null })
+    expect(store.getState().activityClearedAtByPaneKey).toEqual({ 'b:2': 200 })
+
+    const afterDelete = store.getState().activityClearedAtByPaneKey
+    store.getState().applyActivityClearedAt({ missing: null })
+    expect(store.getState().activityClearedAtByPaneKey).toBe(afterDelete)
+  })
+})
+
+describe('dismissRetainedAgents', () => {
+  it('removes the named retained entries in one update and leaves others intact', () => {
+    const store = createTestStore()
+    store
+      .getState()
+      .retainAgents([makeRetained('tab-a:1'), makeRetained('tab-b:2'), makeRetained('tab-c:3')])
+    store.getState().dismissRetainedAgents(['tab-a:1', 'tab-c:3', 'tab-unknown:9'])
+    expect(Object.keys(store.getState().retainedAgentsByPaneKey)).toEqual(['tab-b:2'])
+  })
+
+  it('plants a retention suppressor only for panes that still have a live entry', () => {
+    const store = createTestStore()
+    store.getState().retainAgents([makeRetained('tab-a:1'), makeRetained('tab-b:2')])
+    store.setState({
+      agentStatusByPaneKey: {
+        'tab-a:1': {
+          state: 'done',
+          prompt: 'live',
+          updatedAt: 2_000,
+          stateStartedAt: 2_000,
+          paneKey: 'tab-a:1',
+          stateHistory: [],
+          agentType: 'claude'
+        }
+      }
+    })
+    store.getState().dismissRetainedAgents(['tab-a:1', 'tab-b:2'])
+    expect(store.getState().retainedAgentsByPaneKey).toEqual({})
+    // Live pane gets a one-shot suppressor; the gone pane must NOT (undo re-retains it cleanly).
+    expect(store.getState().retentionSuppressedPaneKeys['tab-a:1']).toBe(true)
+    expect(store.getState().retentionSuppressedPaneKeys['tab-b:2']).toBeUndefined()
+  })
+
+  it('no-ops without reallocation when nothing matches', () => {
+    const store = createTestStore()
+    store.getState().retainAgents([makeRetained('tab-a:1')])
+    const before = store.getState().retainedAgentsByPaneKey
+    store.getState().dismissRetainedAgents(['tab-zz:9'])
+    expect(store.getState().retainedAgentsByPaneKey).toBe(before)
+  })
+})
+
+describe('dropAgentStatus cleared-at/manual-unread lifecycle', () => {
+  // Why: setAgentStatus schedules a real 30-minute freshness setTimeout.
+  afterEach(() => {
+    vi.useRealTimers()
+  })
+
+  function seedLiveWithClearState(store: ReturnType<typeof createTestStore>): void {
+    vi.useFakeTimers()
+    store.getState().setAgentStatus('tab-a:1', { state: 'done', prompt: 'p', agentType: 'claude' })
+    store.getState().applyActivityClearedAt({ 'tab-a:1': 5_000 })
+    store.getState().unacknowledgeAgents(['tab-a:1'])
+    expect(store.getState().activityClearedAtByPaneKey['tab-a:1']).toBe(5_000)
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-a:1']).toBeGreaterThan(0)
+  }
+
+  it('row dismissal keeps the cutoff and manual-unread stamp for a still-live pane', () => {
+    const store = createTestStore()
+    seedLiveWithClearState(store)
+    store.getState().dropAgentStatus('tab-a:1')
+    expect(store.getState().agentStatusByPaneKey['tab-a:1']).toBeUndefined()
+    // The pane may republish its full stateHistory; without the cutoff every
+    // cleared event would flood back as unread (the Clear-completed undo bug).
+    expect(store.getState().activityClearedAtByPaneKey['tab-a:1']).toBe(5_000)
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-a:1']).toBeGreaterThan(0)
+  })
+
+  it('paneRemoved drop clears the cutoff and manual-unread stamp with the pane', () => {
+    const store = createTestStore()
+    seedLiveWithClearState(store)
+    store.getState().dropAgentStatus('tab-a:1', { paneRemoved: true })
+    expect(store.getState().activityClearedAtByPaneKey['tab-a:1']).toBeUndefined()
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-a:1']).toBeUndefined()
+  })
+})
+
+describe('dropAgentStatusByTabPrefix preserveActivityClearedState', () => {
+  afterEach(() => {
+    vi.useRealTimers()
+  })
+
+  it('keeps cutoffs and manual-unread stamps for a mirrored-tab retraction sweep', () => {
+    vi.useFakeTimers()
+    const store = createTestStore()
+    store.getState().setAgentStatus('tab-a:1', { state: 'done', prompt: 'p', agentType: 'claude' })
+    store.getState().applyActivityClearedAt({ 'tab-a:1': 5_000 })
+    store.getState().unacknowledgeAgents(['tab-a:1'])
+
+    store.getState().dropAgentStatusByTabPrefix('tab-a', { preserveActivityClearedState: true })
+
+    expect(store.getState().agentStatusByPaneKey['tab-a:1']).toBeUndefined()
+    // Loss of contact is not pane death: the host republishes the same panes on reconnect,
+    // and the preserved cutoff keeps cleared activity from replaying.
+    expect(store.getState().activityClearedAtByPaneKey['tab-a:1']).toBe(5_000)
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-a:1']).toBeGreaterThan(0)
+
+    store.getState().dropAgentStatusByTabPrefix('tab-a')
+    expect(store.getState().activityClearedAtByPaneKey['tab-a:1']).toBeUndefined()
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-a:1']).toBeUndefined()
+  })
+})
+
+describe('sanitizeActivityClearedAtByPaneKey hydration TTL', () => {
+  it('keeps cutoffs past the 7-day ack TTL so they outlive the persisted entries they guard', () => {
+    const eightDaysAgo = Date.now() - 8 * 24 * 60 * 60 * 1000
+    const record = { 'tab-a:1': eightDaysAgo }
+    // Main prunes persisted entries at 7d from receivedAt; a same-aged cutoff must survive
+    // hydration or the entry it shadows replays as unread on restart.
+    expect(sanitizeAcknowledgedAgentsByPaneKey(record)).toEqual({})
+    expect(sanitizeActivityClearedAtByPaneKey(record)).toEqual(record)
+
+    const fifteenDaysAgo = Date.now() - 15 * 24 * 60 * 60 * 1000
+    expect(sanitizeActivityClearedAtByPaneKey({ 'tab-a:1': fifteenDaysAgo })).toEqual({})
+  })
+})
diff --git a/src/renderer/src/store/slices/agent-pane-authority.test.ts b/src/renderer/src/store/slices/agent-pane-authority.test.ts
index a5df08cd4a8..5e97e3c9064 100644
--- a/src/renderer/src/store/slices/agent-pane-authority.test.ts
+++ b/src/renderer/src/store/slices/agent-pane-authority.test.ts
@@ -74,6 +74,20 @@ describe('agent pane authority', () => {
     expect(retirePaneAuthority).toHaveBeenCalledWith(TARGET)
   })
 
+  it('retires the pane activity cutoff with the rest of its pane-owned state', () => {
+    const store = createTestStore()
+    store.setState({
+      activityClearedAtByPaneKey: {
+        [TARGET]: 1_000,
+        [SIBLING]: 2_000
+      }
+    })
+
+    store.getState().retireAgentPaneAuthority(TARGET)
+
+    expect(store.getState().activityClearedAtByPaneKey).toEqual({ [SIBLING]: 2_000 })
+  })
+
   // STA-4114: the renderer tombstone outlived the detach/reattach cycle, so a pane
   // that was still running never showed status again for the rest of its life.
   it('lifts the retirement fence on re-attach so an in-flight turn can still report done', () => {
diff --git a/src/renderer/src/store/slices/agent-status-ack-cleanup.test.ts b/src/renderer/src/store/slices/agent-status-ack-cleanup.test.ts
index 4ca35b9bdc2..773e3879aba 100644
--- a/src/renderer/src/store/slices/agent-status-ack-cleanup.test.ts
+++ b/src/renderer/src/store/slices/agent-status-ack-cleanup.test.ts
@@ -20,11 +20,17 @@ describe('acknowledgedAgentsByPaneKey cleanup on teardown', () => {
       .getState()
       .setAgentStatus('tab-1:0', { state: 'working', prompt: 'p', agentType: 'claude' })
     store.getState().acknowledgeAgents(['tab-1:0'])
+    store.setState({
+      activityClearedAtByPaneKey: { 'tab-1:0': 100 },
+      manuallyUnreadTurnsByPaneKey: { 'tab-1:0': 200 }
+    })
     expect(store.getState().acknowledgedAgentsByPaneKey['tab-1:0']).toBeGreaterThan(0)
 
     store.getState().removeAgentStatus('tab-1:0')
 
     expect(store.getState().acknowledgedAgentsByPaneKey['tab-1:0']).toBeUndefined()
+    expect(store.getState().activityClearedAtByPaneKey['tab-1:0']).toBeUndefined()
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-1:0']).toBeUndefined()
   })
 
   it('removeAgentStatusByTabPrefix drops every ack entry whose paneKey starts with the tab prefix', () => {
@@ -40,6 +46,10 @@ describe('acknowledgedAgentsByPaneKey cleanup on teardown', () => {
       .getState()
       .setAgentStatus('tab-10:0', { state: 'working', prompt: 'p', agentType: 'claude' })
     store.getState().acknowledgeAgents(['tab-1:0', 'tab-1:1', 'tab-10:0'])
+    store.setState({
+      activityClearedAtByPaneKey: { 'tab-1:0': 100, 'tab-10:0': 300 },
+      manuallyUnreadTurnsByPaneKey: { 'tab-1:1': 200, 'tab-10:0': 400 }
+    })
 
     store.getState().removeAgentStatusByTabPrefix('tab-1')
 
@@ -49,6 +59,29 @@ describe('acknowledgedAgentsByPaneKey cleanup on teardown', () => {
     // Why: the ":" delimiter on the prefix guards against false-prefix matches
     // across tab ids that share a leading substring (tab-1 vs tab-10).
     expect(ack['tab-10:0']).toBeGreaterThan(0)
+    expect(store.getState().activityClearedAtByPaneKey).toEqual({ 'tab-10:0': 300 })
+    expect(store.getState().manuallyUnreadTurnsByPaneKey).toEqual({ 'tab-10:0': 400 })
+  })
+
+  it('removeAgentStatus leaves read state alone for a retained-only pane (unverified SSH exit)', () => {
+    vi.useFakeTimers()
+    const store = createTestStore()
+    // Why: PTY exit calls removeAgentStatus unconditionally, including a synthetic exit from a
+    // lost SSH link. The live row is already gone; the retained/persisted read state must
+    // survive so acked rows do not re-bold and cleared history does not replay on reconnect.
+    store.getState().acknowledgeAgents(['tab-6:0'])
+    store.setState({
+      activityClearedAtByPaneKey: { 'tab-6:0': 100 },
+      manuallyUnreadTurnsByPaneKey: { 'tab-6:0': 200 }
+    })
+    const epochBefore = store.getState().agentStatusEpoch
+
+    store.getState().removeAgentStatus('tab-6:0')
+
+    expect(store.getState().acknowledgedAgentsByPaneKey['tab-6:0']).toBeGreaterThan(0)
+    expect(store.getState().activityClearedAtByPaneKey['tab-6:0']).toBe(100)
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-6:0']).toBe(200)
+    expect(store.getState().agentStatusEpoch).toBe(epochBefore)
   })
 
   it('dropAgentStatus drops the ack entry even when the pane had no live entry', () => {
@@ -81,6 +114,34 @@ describe('acknowledgedAgentsByPaneKey cleanup on teardown', () => {
     expect(ack['tab-3:1']).toBeUndefined()
   })
 
+  it('dropAgentStatusByTabPrefix clears pane-keyed activity maps without live rows', () => {
+    vi.useFakeTimers()
+    const store = createTestStore()
+    store.setState({
+      activityClearedAtByPaneKey: { 'tab-4:0': 100 },
+      manuallyUnreadTurnsByPaneKey: { 'tab-4:0': 200 }
+    })
+
+    store.getState().dropAgentStatusByTabPrefix('tab-4')
+
+    expect(store.getState().activityClearedAtByPaneKey['tab-4:0']).toBeUndefined()
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-4:0']).toBeUndefined()
+  })
+
+  it('dropHibernatedAgentStatusPane clears pane-keyed activity maps without completion evidence', () => {
+    vi.useFakeTimers()
+    const store = createTestStore()
+    store.setState({
+      activityClearedAtByPaneKey: { 'tab-5:0': 100 },
+      manuallyUnreadTurnsByPaneKey: { 'tab-5:0': 200 }
+    })
+
+    store.getState().dropHibernatedAgentStatusPane('wt-1', 'tab-5:0')
+
+    expect(store.getState().activityClearedAtByPaneKey['tab-5:0']).toBeUndefined()
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-5:0']).toBeUndefined()
+  })
+
   it('a paneKey reused after teardown reads as unvisited (no leaked ack suppresses the signal)', () => {
     vi.useFakeTimers()
     vi.setSystemTime(new Date('2026-04-29T12:00:00.000Z'))
diff --git a/src/renderer/src/store/slices/agent-status-authority-actions.ts b/src/renderer/src/store/slices/agent-status-authority-actions.ts
index 0d96ca524ed..c0d9cae2cb0 100644
--- a/src/renderer/src/store/slices/agent-status-authority-actions.ts
+++ b/src/renderer/src/store/slices/agent-status-authority-actions.ts
@@ -72,6 +72,14 @@ export function createAgentStatusAuthorityActions(
             s.acknowledgedAgentsByPaneKey,
             retiredPaneKeySet
           ),
+          activityClearedAtByPaneKey: removePaneKeys(
+            s.activityClearedAtByPaneKey,
+            retiredPaneKeySet
+          ),
+          manuallyUnreadTurnsByPaneKey: removePaneKeys(
+            s.manuallyUnreadTurnsByPaneKey,
+            retiredPaneKeySet
+          ),
           paneForegroundAgentByPaneKey: removePaneKeys(
             s.paneForegroundAgentByPaneKey,
             retiredPaneKeySet
@@ -199,6 +207,8 @@ export function createAgentStatusAuthorityActions(
           })
         ),
         acknowledgedAgentsByPaneKey: movePaneKeyedRecord(s.acknowledgedAgentsByPaneKey, from, to),
+        activityClearedAtByPaneKey: movePaneKeyedRecord(s.activityClearedAtByPaneKey, from, to),
+        manuallyUnreadTurnsByPaneKey: movePaneKeyedRecord(s.manuallyUnreadTurnsByPaneKey, from, to),
         paneForegroundAgentByPaneKey: movePaneKeyedRecord(s.paneForegroundAgentByPaneKey, from, to),
         unreadTerminalPanes: movePaneKeyedRecord(s.unreadTerminalPanes, from, to),
         unreadAgentCompletionPanes: movePaneKeyedRecord(s.unreadAgentCompletionPanes, from, to),
diff --git a/src/renderer/src/store/slices/agent-status-cleanup-actions.ts b/src/renderer/src/store/slices/agent-status-cleanup-actions.ts
index 352a86526df..e47369e791c 100644
--- a/src/renderer/src/store/slices/agent-status-cleanup-actions.ts
+++ b/src/renderer/src/store/slices/agent-status-cleanup-actions.ts
@@ -2,6 +2,7 @@ import type { AgentStatusSlice } from './agent-status-slice-contract'
 import type { AgentStatusRuntime } from './agent-status-runtime'
 import { collectWorktreeIdsForConnection } from './agent-status-connection-worktree-scope'
 import { pruneMigrationUnsupportedEntries } from './agent-status-migration-unsupported-entries'
+import { removePaneKeys, removePaneKeysByTabPrefix } from './agent-status-pane-keyed-records'
 
 /** Actions for removing transient rows and migration-era cache entries. */
 export function createAgentStatusCleanupActions(
@@ -50,6 +51,9 @@ export function createAgentStatusCleanupActions(
 
     removeAgentStatus: (paneKey) => {
       const current = get()
+      // Why no ack/cleared-at/manual-unread in the guard: PTY exit calls this unconditionally,
+      // including unverified exits from a lost SSH link. A retained-only pane keeps its read
+      // state (see preserveActivityClearedState); only a row that is actually here gets swept.
       if (
         !(paneKey in current.agentStatusByPaneKey) &&
         !(paneKey in current.agentLaunchConfigByPaneKey) &&
@@ -76,12 +80,10 @@ export function createAgentStatusCleanupActions(
           s.migrationUnsupportedByPtyId,
           (entry) => entry.paneKey === paneKey
         )
-        // Ack entries belong to the pane lifecycle; never let a reused key inherit one.
-        let nextAck = s.acknowledgedAgentsByPaneKey
-        if (paneKey in nextAck) {
-          nextAck = { ...nextAck }
-          delete nextAck[paneKey]
-        }
+        const paneKeys = new Set([paneKey])
+        const nextAck = removePaneKeys(s.acknowledgedAgentsByPaneKey, paneKeys)
+        const nextClearedAt = removePaneKeys(s.activityClearedAtByPaneKey, paneKeys)
+        const nextManualUnread = removePaneKeys(s.manuallyUnreadTurnsByPaneKey, paneKeys)
         return {
           agentStatusByPaneKey: next,
           agentLaunchConfigByPaneKey: nextLaunchConfigs,
@@ -89,6 +91,12 @@ export function createAgentStatusCleanupActions(
           ...(nextAck !== s.acknowledgedAgentsByPaneKey
             ? { acknowledgedAgentsByPaneKey: nextAck }
             : {}),
+          ...(nextClearedAt !== s.activityClearedAtByPaneKey
+            ? { activityClearedAtByPaneKey: nextClearedAt }
+            : {}),
+          ...(nextManualUnread !== s.manuallyUnreadTurnsByPaneKey
+            ? { manuallyUnreadTurnsByPaneKey: nextManualUnread }
+            : {}),
           agentStatusEpoch: s.agentStatusEpoch + 1,
           sortEpoch: s.sortEpoch + 1
         }
@@ -108,7 +116,17 @@ export function createAgentStatusCleanupActions(
       const hasMigrationUnsupported = Object.values(current.migrationUnsupportedByPtyId).some(
         (entry) => entry.paneKey?.startsWith(prefix)
       )
-      if (toRemove.length === 0 && launchConfigKeys.length === 0 && !hasMigrationUnsupported) {
+      const hasPaneActivityState = [
+        current.acknowledgedAgentsByPaneKey,
+        current.activityClearedAtByPaneKey,
+        current.manuallyUnreadTurnsByPaneKey
+      ].some((record) => Object.keys(record).some((key) => key.startsWith(prefix)))
+      if (
+        toRemove.length === 0 &&
+        launchConfigKeys.length === 0 &&
+        !hasMigrationUnsupported &&
+        !hasPaneActivityState
+      ) {
         return
       }
       set((s) => {
@@ -124,14 +142,12 @@ export function createAgentStatusCleanupActions(
           s.migrationUnsupportedByPtyId,
           (entry) => entry.paneKey?.startsWith(prefix) ?? false
         )
-        let nextAck = s.acknowledgedAgentsByPaneKey
-        const ackKeys = Object.keys(nextAck).filter((key) => key.startsWith(prefix))
-        if (ackKeys.length > 0) {
-          nextAck = { ...nextAck }
-          for (const key of ackKeys) {
-            delete nextAck[key]
-          }
-        }
+        const nextAck = removePaneKeysByTabPrefix(s.acknowledgedAgentsByPaneKey, tabIdPrefix)
+        const nextClearedAt = removePaneKeysByTabPrefix(s.activityClearedAtByPaneKey, tabIdPrefix)
+        const nextManualUnread = removePaneKeysByTabPrefix(
+          s.manuallyUnreadTurnsByPaneKey,
+          tabIdPrefix
+        )
         return {
           agentStatusByPaneKey: next,
           agentLaunchConfigByPaneKey: nextLaunchConfigs,
@@ -139,6 +155,12 @@ export function createAgentStatusCleanupActions(
           ...(nextAck !== s.acknowledgedAgentsByPaneKey
             ? { acknowledgedAgentsByPaneKey: nextAck }
             : {}),
+          ...(nextClearedAt !== s.activityClearedAtByPaneKey
+            ? { activityClearedAtByPaneKey: nextClearedAt }
+            : {}),
+          ...(nextManualUnread !== s.manuallyUnreadTurnsByPaneKey
+            ? { manuallyUnreadTurnsByPaneKey: nextManualUnread }
+            : {}),
           agentStatusEpoch: s.agentStatusEpoch + 1,
           sortEpoch: s.sortEpoch + 1
         }
diff --git a/src/renderer/src/store/slices/agent-status-contract.ts b/src/renderer/src/store/slices/agent-status-contract.ts
index 65b91e4074b..64dcb7f6919 100644
--- a/src/renderer/src/store/slices/agent-status-contract.ts
+++ b/src/renderer/src/store/slices/agent-status-contract.ts
@@ -42,8 +42,18 @@ export type DropHibernatedAgentPaneOptions = {
   retainedCompletionEvidence?: readonly RetainedAgentEntry[]
 }
 
+export type DropAgentStatusOptions = {
+  /** The pane itself is gone (pane close, stale-row teardown). Row-only dismissals leave the
+   *  cleared-at cutoff and manual-unread stamp in place so a still-live pane's next hook event
+   *  cannot resurrect activity the user already cleared. */
+  paneRemoved?: boolean
+}
+
 export type DropAgentStatusByTabPrefixOptions = {
   worktreeId?: string
+  /** Keep cleared-at cutoffs and manual-unread stamps: a mirrored-tab retraction is loss of
+   *  contact, not pane death, and the host republishes the same panes on reconnect. */
+  preserveActivityClearedState?: boolean
 }
 
 export type AgentLaunchConfigRegistrationMetadata = {
diff --git a/src/renderer/src/store/slices/agent-status-drop-actions.ts b/src/renderer/src/store/slices/agent-status-drop-actions.ts
index c918793a303..cff59fdc329 100644
--- a/src/renderer/src/store/slices/agent-status-drop-actions.ts
+++ b/src/renderer/src/store/slices/agent-status-drop-actions.ts
@@ -1,6 +1,7 @@
 import type {
   RetainedAgentEntry,
   DropAgentStatusByTabPrefixOptions,
+  DropAgentStatusOptions,
   DropHibernatedAgentPaneOptions
 } from './agent-status-contract'
 import type { AgentStatusSlice } from './agent-status-slice-contract'
@@ -33,7 +34,7 @@ export function createAgentStatusDropActions(
 > {
   const { set, freshness } = runtime
   return {
-    dropAgentStatus: (paneKey) => {
+    dropAgentStatus: (paneKey, opts?: DropAgentStatusOptions) => {
       let liveExisted = false
       set((s) => {
         const hasLive = paneKey in s.agentStatusByPaneKey
@@ -44,6 +45,14 @@ export function createAgentStatusDropActions(
           (entry) => entry.paneKey === paneKey
         )
         const nextAck = removeAcknowledgement(s.acknowledgedAgentsByPaneKey, paneKey)
+        // Row dismissal keeps cutoff/manual-unread: the pane may still be live, and its next
+        // hook event would replay every cleared stateHistory event as unread without them.
+        const nextClearedAt = opts?.paneRemoved
+          ? removeAcknowledgement(s.activityClearedAtByPaneKey, paneKey)
+          : s.activityClearedAtByPaneKey
+        const nextManualUnread = opts?.paneRemoved
+          ? removeAcknowledgement(s.manuallyUnreadTurnsByPaneKey, paneKey)
+          : s.manuallyUnreadTurnsByPaneKey
         const hasLaunchConfig = paneKey in s.agentLaunchConfigByPaneKey
         const nextLaunchConfigs = hasLaunchConfig
           ? { ...s.agentLaunchConfigByPaneKey }
@@ -52,17 +61,19 @@ export function createAgentStatusDropActions(
           delete nextLaunchConfigs[paneKey]
         }
         if (!hasLive && !hasRetained && !migrationUnsupported.changed) {
-          if (hasLaunchConfig) {
-            return {
-              agentLaunchConfigByPaneKey: nextLaunchConfigs,
-              ...(nextAck !== s.acknowledgedAgentsByPaneKey
-                ? { acknowledgedAgentsByPaneKey: nextAck }
-                : {})
-            }
+          const cleanupPatch = {
+            ...(hasLaunchConfig ? { agentLaunchConfigByPaneKey: nextLaunchConfigs } : {}),
+            ...(nextAck !== s.acknowledgedAgentsByPaneKey
+              ? { acknowledgedAgentsByPaneKey: nextAck }
+              : {}),
+            ...(nextClearedAt !== s.activityClearedAtByPaneKey
+              ? { activityClearedAtByPaneKey: nextClearedAt }
+              : {}),
+            ...(nextManualUnread !== s.manuallyUnreadTurnsByPaneKey
+              ? { manuallyUnreadTurnsByPaneKey: nextManualUnread }
+              : {})
           }
-          return nextAck !== s.acknowledgedAgentsByPaneKey
-            ? { acknowledgedAgentsByPaneKey: nextAck }
-            : s
+          return Object.keys(cleanupPatch).length > 0 ? cleanupPatch : s
         }
         const nextLive = hasLive ? { ...s.agentStatusByPaneKey } : s.agentStatusByPaneKey
         if (hasLive) {
@@ -83,6 +94,8 @@ export function createAgentStatusDropActions(
           ...(nextAck !== s.acknowledgedAgentsByPaneKey
             ? { acknowledgedAgentsByPaneKey: nextAck }
             : {}),
+          activityClearedAtByPaneKey: nextClearedAt,
+          manuallyUnreadTurnsByPaneKey: nextManualUnread,
           ...(needsSuppressor
             ? {
                 retentionSuppressedPaneKeys: {
@@ -160,6 +173,12 @@ export function createAgentStatusDropActions(
         const nextAck = !keepsCompletionEvidence
           ? removeAcknowledgement(s.acknowledgedAgentsByPaneKey, paneKey)
           : s.acknowledgedAgentsByPaneKey
+        const nextClearedAt = !keepsCompletionEvidence
+          ? removeAcknowledgement(s.activityClearedAtByPaneKey, paneKey)
+          : s.activityClearedAtByPaneKey
+        const nextManualUnread = !keepsCompletionEvidence
+          ? removeAcknowledgement(s.manuallyUnreadTurnsByPaneKey, paneKey)
+          : s.manuallyUnreadTurnsByPaneKey
         if (
           !hasLive &&
           !hasRetained &&
@@ -167,9 +186,18 @@ export function createAgentStatusDropActions(
           !migrationUnsupported.changed &&
           !keepsCompletionEvidence
         ) {
-          return nextAck !== s.acknowledgedAgentsByPaneKey
-            ? { acknowledgedAgentsByPaneKey: nextAck }
-            : s
+          const cleanupPatch = {
+            ...(nextAck !== s.acknowledgedAgentsByPaneKey
+              ? { acknowledgedAgentsByPaneKey: nextAck }
+              : {}),
+            ...(nextClearedAt !== s.activityClearedAtByPaneKey
+              ? { activityClearedAtByPaneKey: nextClearedAt }
+              : {}),
+            ...(nextManualUnread !== s.manuallyUnreadTurnsByPaneKey
+              ? { manuallyUnreadTurnsByPaneKey: nextManualUnread }
+              : {})
+          }
+          return Object.keys(cleanupPatch).length > 0 ? cleanupPatch : s
         }
         hadLive = hasLive
         const nextLive = hasLive ? { ...s.agentStatusByPaneKey } : s.agentStatusByPaneKey
@@ -204,6 +232,8 @@ export function createAgentStatusDropActions(
           ...(nextAck !== s.acknowledgedAgentsByPaneKey
             ? { acknowledgedAgentsByPaneKey: nextAck }
             : {}),
+          activityClearedAtByPaneKey: nextClearedAt,
+          manuallyUnreadTurnsByPaneKey: nextManualUnread,
           ...(needsSuppressor
             ? {
                 retentionSuppressedPaneKeys: {
diff --git a/src/renderer/src/store/slices/agent-status-drop-reducer.ts b/src/renderer/src/store/slices/agent-status-drop-reducer.ts
index 5d8387e9bf0..ca48b195238 100644
--- a/src/renderer/src/store/slices/agent-status-drop-reducer.ts
+++ b/src/renderer/src/store/slices/agent-status-drop-reducer.ts
@@ -3,7 +3,8 @@ import type { DropAgentStatusByTabPrefixOptions } from './agent-status-contract'
 import { pruneMigrationUnsupportedEntries } from './agent-status-migration-unsupported-entries'
 import {
   boundRecentlyClosedAgentStatusTabIds,
-  boundRecentlyRetiredAgentStatusPaneKeys
+  boundRecentlyRetiredAgentStatusPaneKeys,
+  removePaneKeysByTabPrefix
 } from './agent-status-pane-keyed-records'
 import { findCompletedOrphanPaneKeysForTabClose } from './agent-status-pane-key-tab-binding'
 
@@ -26,10 +27,12 @@ export function buildAgentStatusBatchPatch(
 export type AgentStatusTabPrefixDropState = Pick<
   AppState,
   | 'acknowledgedAgentsByPaneKey'
+  | 'activityClearedAtByPaneKey'
   | 'agentLaunchConfigByPaneKey'
   | 'agentStatusByPaneKey'
   | 'agentStatusEpoch'
   | 'migrationUnsupportedByPtyId'
+  | 'manuallyUnreadTurnsByPaneKey'
   | 'recentlyClosedAgentStatusTabIds'
   | 'recentlyRetiredAgentStatusPaneKeys'
   | 'retainedAgentsByPaneKey'
@@ -86,6 +89,16 @@ export function buildAgentStatusTabPrefixDropPatch(
       s.recentlyRetiredAgentStatusPaneKeys,
       retiredAliasPaneKeys
     )
+    const nextClearedAt = opts?.preserveActivityClearedState
+      ? s.activityClearedAtByPaneKey
+      : removePaneKeysByTabPrefix(s.activityClearedAtByPaneKey, tabIdPrefix, completedOrphanKeySet)
+    const nextManualUnread = opts?.preserveActivityClearedState
+      ? s.manuallyUnreadTurnsByPaneKey
+      : removePaneKeysByTabPrefix(
+          s.manuallyUnreadTurnsByPaneKey,
+          tabIdPrefix,
+          completedOrphanKeySet
+        )
 
     if (
       liveKeys.length === 0 &&
@@ -96,13 +109,25 @@ export function buildAgentStatusTabPrefixDropPatch(
       if (nextAck !== s.acknowledgedAgentsByPaneKey) {
         return {
           acknowledgedAgentsByPaneKey: nextAck,
+          ...(nextClearedAt !== s.activityClearedAtByPaneKey
+            ? { activityClearedAtByPaneKey: nextClearedAt }
+            : {}),
+          ...(nextManualUnread !== s.manuallyUnreadTurnsByPaneKey
+            ? { manuallyUnreadTurnsByPaneKey: nextManualUnread }
+            : {}),
           recentlyClosedAgentStatusTabIds: nextClosedTabs,
           recentlyRetiredAgentStatusPaneKeys: nextRetiredPaneKeys
         }
       }
       return {
         recentlyClosedAgentStatusTabIds: nextClosedTabs,
-        recentlyRetiredAgentStatusPaneKeys: nextRetiredPaneKeys
+        recentlyRetiredAgentStatusPaneKeys: nextRetiredPaneKeys,
+        ...(nextClearedAt !== s.activityClearedAtByPaneKey
+          ? { activityClearedAtByPaneKey: nextClearedAt }
+          : {}),
+        ...(nextManualUnread !== s.manuallyUnreadTurnsByPaneKey
+          ? { manuallyUnreadTurnsByPaneKey: nextManualUnread }
+          : {})
       }
     }
     hadLive = liveKeys.length > 0
@@ -148,6 +173,12 @@ export function buildAgentStatusTabPrefixDropPatch(
       ...(nextAck !== s.acknowledgedAgentsByPaneKey
         ? { acknowledgedAgentsByPaneKey: nextAck }
         : {}),
+      ...(nextClearedAt !== s.activityClearedAtByPaneKey
+        ? { activityClearedAtByPaneKey: nextClearedAt }
+        : {}),
+      ...(nextManualUnread !== s.manuallyUnreadTurnsByPaneKey
+        ? { manuallyUnreadTurnsByPaneKey: nextManualUnread }
+        : {}),
       // Why: mirrors removeAgentStatusByTabPrefix — only bump epochs when the live map changed; retained-only sweeps don't affect sort/freshness.
       agentStatusEpoch:
         hadLive || migrationUnsupported.changed ? s.agentStatusEpoch + 1 : s.agentStatusEpoch,
diff --git a/src/renderer/src/store/slices/agent-status-pane-keyed-records.ts b/src/renderer/src/store/slices/agent-status-pane-keyed-records.ts
index 1e28710c564..af5cc4e83c7 100644
--- a/src/renderer/src/store/slices/agent-status-pane-keyed-records.ts
+++ b/src/renderer/src/store/slices/agent-status-pane-keyed-records.ts
@@ -74,3 +74,15 @@ export function removePaneKeys<T>(
   }
   return next
 }
+
+export function removePaneKeysByTabPrefix<T>(
+  record: Record<string, T>,
+  tabPrefix: string,
+  extraPaneKeys: ReadonlySet<string> = new Set()
+): Record<string, T> {
+  const prefix = `${tabPrefix}:`
+  const matchingKeys = Object.keys(record).filter(
+    (key) => key.startsWith(prefix) || extraPaneKeys.has(key)
+  )
+  return removePaneKeys(record, new Set(matchingKeys))
+}
diff --git a/src/renderer/src/store/slices/agent-status-provider-session-actions.ts b/src/renderer/src/store/slices/agent-status-provider-session-actions.ts
index b8a88b9bca6..32e5378fe11 100644
--- a/src/renderer/src/store/slices/agent-status-provider-session-actions.ts
+++ b/src/renderer/src/store/slices/agent-status-provider-session-actions.ts
@@ -134,6 +134,7 @@ export function createAgentStatusProviderSessionActions(
         if (nextRetained !== s.retainedAgentsByPaneKey) {
           delete nextRetained[paneKey]
         }
+        const retiredPaneKeys = new Set([paneKey])
         // Why: on identity mismatch the sleeping record drops its launch config, so clear the stale
         // registry entry too, else a later return to the old identity reuses stale args/env.
         let nextLaunchConfigs = s.agentLaunchConfigByPaneKey
@@ -159,12 +160,11 @@ export function createAgentStatusProviderSessionActions(
           agentLaunchConfigByPaneKey: nextLaunchConfigs,
           acknowledgedAgentsByPaneKey: removePaneKeys(
             s.acknowledgedAgentsByPaneKey,
-            new Set([paneKey])
-          ),
-          unreadAgentCompletionPanes: removePaneKeys(
-            s.unreadAgentCompletionPanes,
-            new Set([paneKey])
+            retiredPaneKeys
           ),
+          // Why the cleared-at/manual-unread maps stay: the pane survives this transition, so a
+          // repeat heartbeat would resurrect cleared history. They are swept on pane retirement.
+          unreadAgentCompletionPanes: removePaneKeys(s.unreadAgentCompletionPanes, retiredPaneKeys),
           agentStatusEpoch: removedLiveStatus ? s.agentStatusEpoch + 1 : s.agentStatusEpoch,
           sortEpoch: removedLiveStatus ? s.sortEpoch + 1 : s.sortEpoch
         }
diff --git a/src/renderer/src/store/slices/agent-status-provider-session.test.ts b/src/renderer/src/store/slices/agent-status-provider-session.test.ts
index 2ad173eac6d..f854517d94f 100644
--- a/src/renderer/src/store/slices/agent-status-provider-session.test.ts
+++ b/src/renderer/src/store/slices/agent-status-provider-session.test.ts
@@ -222,6 +222,46 @@ describe('recordAgentProviderSession', () => {
     })
   })
 
+  it('keeps the activity cutoff and manual-unread stamp across a heartbeat for the same pane', () => {
+    const store = createTestStore()
+    store.setState({
+      tabsByWorktree: { 'wt-1': [makeTab({ id: 'tab-1', worktreeId: 'wt-1' })] }
+    } as Partial<AppState>)
+    const providerSession = {
+      key: 'session_id' as const,
+      id: 'pi-session-1',
+      transcriptPath: '/tmp/pi-session-1.jsonl'
+    }
+    store
+      .getState()
+      .setAgentStatus(
+        'tab-1:leaf-1',
+        { state: 'done', prompt: 'finish', agentType: 'pi' },
+        'Pi',
+        { updatedAt: 10, stateStartedAt: 10 },
+        { tabId: 'tab-1', worktreeId: 'wt-1' }
+      )
+    store.getState().applyActivityClearedAt({ 'tab-1:leaf-1': 5_000 })
+    store.getState().unacknowledgeAgents(['tab-1:leaf-1'])
+
+    store.getState().recordAgentProviderSession(
+      'tab-1:leaf-1',
+      'pi',
+      providerSession,
+      { updatedAt: 20 },
+      {
+        tabId: 'tab-1',
+        worktreeId: 'wt-1',
+        connectionId: null
+      }
+    )
+
+    // The pane is not retired here — only its live status becomes a sleeping record. Dropping
+    // these maps would replay history the user already cleared on the next heartbeat.
+    expect(store.getState().activityClearedAtByPaneKey['tab-1:leaf-1']).toBe(5_000)
+    expect(store.getState().manuallyUnreadTurnsByPaneKey['tab-1:leaf-1']).toBeGreaterThan(0)
+  })
+
   it('does not reuse Pi launch config when the session file identity changes', () => {
     const store = createTestStore()
     store.setState({
diff --git a/src/renderer/src/store/slices/agent-status-retention-actions.ts b/src/renderer/src/store/slices/agent-status-retention-actions.ts
index ac7cb5b7b48..737a7231551 100644
--- a/src/renderer/src/store/slices/agent-status-retention-actions.ts
+++ b/src/renderer/src/store/slices/agent-status-retention-actions.ts
@@ -10,6 +10,7 @@ export function createAgentStatusRetentionActions(
   AgentStatusSlice,
   | 'retainAgents'
   | 'dismissRetainedAgent'
+  | 'dismissRetainedAgents'
   | 'dismissRetainedAgentsByWorktree'
   | 'pruneRetainedAgents'
   | 'clearRetentionSuppressedPaneKeys'
@@ -69,6 +70,35 @@ export function createAgentStatusRetentionActions(
       })
     },
 
+    dismissRetainedAgents: (paneKeys) => {
+      set((s) => {
+        let next: Record<string, RetainedAgentEntry> | null = null
+        let nextSuppressed: Record<string, true> | null = null
+        for (const paneKey of paneKeys) {
+          if (!(paneKey in (next ?? s.retainedAgentsByPaneKey))) {
+            continue
+          }
+          if (next === null) {
+            next = { ...s.retainedAgentsByPaneKey }
+          }
+          delete next[paneKey]
+          if (paneKey in s.agentStatusByPaneKey && !(paneKey in s.retentionSuppressedPaneKeys)) {
+            if (nextSuppressed === null) {
+              nextSuppressed = { ...s.retentionSuppressedPaneKeys }
+            }
+            nextSuppressed[paneKey] = true
+          }
+        }
+        if (next === null) {
+          return s
+        }
+        return {
+          retainedAgentsByPaneKey: next,
+          ...(nextSuppressed ? { retentionSuppressedPaneKeys: nextSuppressed } : {})
+        }
+      })
+    },
+
     dismissRetainedAgentsByWorktree: (worktreeId) => {
       const dismissedPaneKeys: string[] = []
       set((s) => {
diff --git a/src/renderer/src/store/slices/agent-status-slice-contract.ts b/src/renderer/src/store/slices/agent-status-slice-contract.ts
index c1598f77a5a..9762207091b 100644
--- a/src/renderer/src/store/slices/agent-status-slice-contract.ts
+++ b/src/renderer/src/store/slices/agent-status-slice-contract.ts
@@ -14,6 +14,7 @@ import type {
   AgentProviderSessionMetadata,
   DropAgentStatusByTabPrefixOptions,
   DropAgentStatusByWorktreeOptions,
+  DropAgentStatusOptions,
   DropHibernatedAgentPaneOptions,
   RetainedAgentEntry,
   AllAgentSessionCaptureMode
@@ -133,7 +134,7 @@ export type AgentStatusSlice = {
   clearTransientAgentStatuses: (connectionId: string, clearedAt: number) => void
 
   /** Remove a single entry AND suppress re-retention on its next disappearance (user-initiated teardown: X button, pane close). */
-  dropAgentStatus: (paneKey: string) => void
+  dropAgentStatus: (paneKey: string, opts?: DropAgentStatusOptions) => void
 
   /** Remove all entries under a tab AND suppress re-retention for each (tab close — no rows may reappear). */
   dropAgentStatusByTabPrefix: (
@@ -167,6 +168,9 @@ export type AgentStatusSlice = {
   /** Dismiss a retained entry by its paneKey. */
   dismissRetainedAgent: (paneKey: string) => void
 
+  /** Dismiss several retained entries in one set (Activity "Clear completed"). */
+  dismissRetainedAgents: (paneKeys: readonly string[]) => void
+
   /** Dismiss all retained entries belonging to a worktree. */
   dismissRetainedAgentsByWorktree: (worktreeId: string) => void
 
diff --git a/src/renderer/src/store/slices/agent-status-worktree-drop-actions.ts b/src/renderer/src/store/slices/agent-status-worktree-drop-actions.ts
index 4bafe7dc381..b7d88675f6b 100644
--- a/src/renderer/src/store/slices/agent-status-worktree-drop-actions.ts
+++ b/src/renderer/src/store/slices/agent-status-worktree-drop-actions.ts
@@ -8,6 +8,7 @@ import {
   retainedAgentEntryFromLive,
   shouldReplaceRetainedWithLive
 } from './agent-status-pane-key-tab-binding'
+import { removePaneKeys } from './agent-status-pane-keyed-records'
 
 export function createAgentStatusWorktreeDropActions(
   runtime: AgentStatusRuntime
@@ -72,21 +73,23 @@ export function createAgentStatusWorktreeDropActions(
           }
         }
         const retainedEvidenceKeys = new Set(retainedEvidence.keys())
-        // Keep acknowledgement for completion evidence so a slept card does not turn bold again.
-        let nextAck = s.acknowledgedAgentsByPaneKey
-        const ackKeys = Object.keys(nextAck).filter(
-          (key) =>
-            !retainedEvidenceKeys.has(key) &&
-            (paneKeyMatchesAnyTabPrefix(key, tabPrefixes) ||
-              liveKeySet.has(key) ||
-              retainedKeySet.has(key))
+        // Completion evidence keeps its read/clear state; every fully retired pane drops all three maps.
+        const activityStateKeys = new Set(
+          [
+            ...Object.keys(s.acknowledgedAgentsByPaneKey),
+            ...Object.keys(s.activityClearedAtByPaneKey),
+            ...Object.keys(s.manuallyUnreadTurnsByPaneKey)
+          ].filter(
+            (key) =>
+              !retainedEvidenceKeys.has(key) &&
+              (paneKeyMatchesAnyTabPrefix(key, tabPrefixes) ||
+                liveKeySet.has(key) ||
+                retainedKeySet.has(key))
+          )
         )
-        if (ackKeys.length > 0) {
-          nextAck = { ...nextAck }
-          for (const key of ackKeys) {
-            delete nextAck[key]
-          }
-        }
+        const nextAck = removePaneKeys(s.acknowledgedAgentsByPaneKey, activityStateKeys)
+        const nextClearedAt = removePaneKeys(s.activityClearedAtByPaneKey, activityStateKeys)
+        const nextManualUnread = removePaneKeys(s.manuallyUnreadTurnsByPaneKey, activityStateKeys)
         if (
           liveKeys.length === 0 &&
           launchConfigKeys.length === 0 &&
@@ -94,9 +97,18 @@ export function createAgentStatusWorktreeDropActions(
           retainedEvidence.size === 0 &&
           !migrationUnsupported.changed
         ) {
-          return nextAck !== s.acknowledgedAgentsByPaneKey
-            ? { acknowledgedAgentsByPaneKey: nextAck }
-            : s
+          const cleanupPatch = {
+            ...(nextAck !== s.acknowledgedAgentsByPaneKey
+              ? { acknowledgedAgentsByPaneKey: nextAck }
+              : {}),
+            ...(nextClearedAt !== s.activityClearedAtByPaneKey
+              ? { activityClearedAtByPaneKey: nextClearedAt }
+              : {}),
+            ...(nextManualUnread !== s.manuallyUnreadTurnsByPaneKey
+              ? { manuallyUnreadTurnsByPaneKey: nextManualUnread }
+              : {})
+          }
+          return Object.keys(cleanupPatch).length > 0 ? cleanupPatch : s
         }
         hadLive = liveKeys.length > 0
         const nextLive =
@@ -144,6 +156,12 @@ export function createAgentStatusWorktreeDropActions(
           ...(nextAck !== s.acknowledgedAgentsByPaneKey
             ? { acknowledgedAgentsByPaneKey: nextAck }
             : {}),
+          ...(nextClearedAt !== s.activityClearedAtByPaneKey
+            ? { activityClearedAtByPaneKey: nextClearedAt }
+            : {}),
+          ...(nextManualUnread !== s.manuallyUnreadTurnsByPaneKey
+            ? { manuallyUnreadTurnsByPaneKey: nextManualUnread }
+            : {}),
           agentStatusEpoch:
             hadLive || migrationUnsupported.changed ? s.agentStatusEpoch + 1 : s.agentStatusEpoch,
           sortEpoch: hadLive || migrationUnsupported.changed ? s.sortEpoch + 1 : s.sortEpoch
diff --git a/src/renderer/src/store/slices/persisted-ui-write-baseline.test.ts b/src/renderer/src/store/slices/persisted-ui-write-baseline.test.ts
index e38823f5344..300d0fbabc5 100644
--- a/src/renderer/src/store/slices/persisted-ui-write-baseline.test.ts
+++ b/src/renderer/src/store/slices/persisted-ui-write-baseline.test.ts
@@ -29,6 +29,8 @@ function makeBaseline(overrides: Partial<PersistedUIWriteBaseline> = {}): Persis
     showDotfilesByWorktree: {},
     filterRepoIds: [],
     acknowledgedAgentsByPaneKey: {},
+    activityClearedAtByPaneKey: {},
+    manuallyUnreadTurnsByPaneKey: {},
     ...overrides
   }
 }
@@ -95,6 +97,28 @@ describe('diffPersistedUIWriteFields', () => {
   })
 })
 
+describe('manuallyUnreadTurnsByPaneKey write round-trip', () => {
+  it('is writer-owned and diffs by record content like the other pane-key records', () => {
+    expect(PERSISTED_UI_WRITE_BASELINE_FIELDS).toContain('manuallyUnreadTurnsByPaneKey')
+    const baseline = makeBaseline({ manuallyUnreadTurnsByPaneKey: { p1: 5 } })
+    expect(
+      diffPersistedUIWriteFields(
+        makeBaseline({ manuallyUnreadTurnsByPaneKey: { p1: 5 } }),
+        baseline
+      )
+    ).toEqual({})
+    expect(
+      diffPersistedUIWriteFields(
+        makeBaseline({ manuallyUnreadTurnsByPaneKey: { p1: 7 } }),
+        baseline
+      )
+    ).toEqual({ manuallyUnreadTurnsByPaneKey: { p1: 7 } })
+    expect(persistedUIWriteFieldsToWireUpdate({ manuallyUnreadTurnsByPaneKey: { p1: 7 } })).toEqual(
+      { manuallyUnreadTurnsByPaneKey: { p1: 7 } }
+    )
+  })
+})
+
 describe('persistedUIWriteFieldsToWireUpdate', () => {
   it('inverts showSleepingWorkspaces to the durable hide form', () => {
     expect(persistedUIWriteFieldsToWireUpdate({ showSleepingWorkspaces: true })).toEqual({
diff --git a/src/renderer/src/store/slices/persisted-ui-write-baseline.ts b/src/renderer/src/store/slices/persisted-ui-write-baseline.ts
index d7a73c78b62..2d9da5d1ea4 100644
--- a/src/renderer/src/store/slices/persisted-ui-write-baseline.ts
+++ b/src/renderer/src/store/slices/persisted-ui-write-baseline.ts
@@ -29,6 +29,8 @@ export type PersistedUIWriteBaseline = {
   showDotfilesByWorktree: Record<string, boolean>
   filterRepoIds: readonly string[]
   acknowledgedAgentsByPaneKey: Record<string, number>
+  activityClearedAtByPaneKey: Record<string, number>
+  manuallyUnreadTurnsByPaneKey: Record<string, number>
 }
 
 // Why `satisfies Record<...>` rather than a keyof[] annotation: a plain `satisfies
@@ -55,7 +57,9 @@ const PERSISTED_UI_WRITE_BASELINE_FIELD_SET = {
   alwaysShowDefaultBranchWorkspace: true,
   showDotfilesByWorktree: true,
   filterRepoIds: true,
-  acknowledgedAgentsByPaneKey: true
+  acknowledgedAgentsByPaneKey: true,
+  activityClearedAtByPaneKey: true,
+  manuallyUnreadTurnsByPaneKey: true
 } satisfies Record<keyof PersistedUIWriteBaseline, true>
 
 export const PERSISTED_UI_WRITE_BASELINE_FIELDS = Object.keys(
@@ -95,7 +99,12 @@ function writeFieldEqual(field: keyof PersistedUIWriteBaseline, a: unknown, b: u
   if (field === 'filterRepoIds') {
     return stringArrayEqual(a as readonly string[], b as readonly string[])
   }
-  if (field === 'showDotfilesByWorktree' || field === 'acknowledgedAgentsByPaneKey') {
+  if (
+    field === 'showDotfilesByWorktree' ||
+    field === 'acknowledgedAgentsByPaneKey' ||
+    field === 'activityClearedAtByPaneKey' ||
+    field === 'manuallyUnreadTurnsByPaneKey'
+  ) {
     return shallowRecordEqual(
       a as Record<string, unknown> | undefined,
       b as Record<string, unknown> | undefined
diff --git a/src/renderer/src/store/slices/retired-terminal-tab-state-sweep.ts b/src/renderer/src/store/slices/retired-terminal-tab-state-sweep.ts
index cfdefcf87e0..9985a0f7406 100644
--- a/src/renderer/src/store/slices/retired-terminal-tab-state-sweep.ts
+++ b/src/renderer/src/store/slices/retired-terminal-tab-state-sweep.ts
@@ -58,7 +58,8 @@ export function sweepRetiredTerminalTabState(
 export function buildRetiredTerminalTabStateSweepPatch(
   state: RetiredTerminalTabSweepState,
   tabIds: readonly string[],
-  worktreeId?: string | null
+  worktreeId?: string | null,
+  opts?: { preserveActivityClearedState?: boolean }
 ): Partial<RetiredTerminalTabSweepState> | null {
   if (tabIds.length === 0) {
     return null
@@ -73,7 +74,10 @@ export function buildRetiredTerminalTabStateSweepPatch(
       swept,
       tabId,
       retireAgentPaneAuthorityAliasesByOwnerTab(tabId),
-      worktreeId ? { worktreeId } : undefined
+      {
+        ...(worktreeId ? { worktreeId } : {}),
+        ...(opts?.preserveActivityClearedState ? { preserveActivityClearedState: true } : {})
+      }
     )
     const foreground = buildPaneForegroundAgentTabPrefixClearPatch(
       swept.paneForegroundAgentByPaneKey,
diff --git a/src/renderer/src/store/slices/runtime-status-recheck.ts b/src/renderer/src/store/slices/runtime-status-recheck.ts
index 65635157a18..303e5b4318d 100644
--- a/src/renderer/src/store/slices/runtime-status-recheck.ts
+++ b/src/renderer/src/store/slices/runtime-status-recheck.ts
@@ -19,10 +19,7 @@ type RecheckState = {
 
 type RuntimeStatusStore = {
   runtimeEnvironments: readonly { id: string }[]
-  setRuntimeEnvironmentStatus: (
-    environmentId: string,
-    status: RuntimeEnvironmentStatus
-  ) => void
+  setRuntimeEnvironmentStatus: (environmentId: string, status: RuntimeEnvironmentStatus) => void
 }
 
 const rechecks = new Map<string, RecheckState>()
diff --git a/src/renderer/src/store/slices/ui-hydration-view-layout.test.ts b/src/renderer/src/store/slices/ui-hydration-view-layout.test.ts
index d0104d8d51b..a9a6f7aed0a 100644
--- a/src/renderer/src/store/slices/ui-hydration-view-layout.test.ts
+++ b/src/renderer/src/store/slices/ui-hydration-view-layout.test.ts
@@ -49,6 +49,22 @@ beforeEach(() => {
   mocks.toastError.mockReset()
 })
 
+describe('sidebar reveal actions', () => {
+  it('switch the sidebar body back to Spaces so the worktree list can consume the reveal', () => {
+    const store = createUIStore()
+    store.getState().setSidebarBody('agents')
+
+    store.getState().revealWorktreeInSidebar('wt-1', { highlight: true })
+    expect(store.getState().sidebarBody).toBe('workspaces')
+    expect(store.getState().pendingRevealWorktree?.worktreeId).toBe('wt-1')
+
+    store.getState().setSidebarBody('agents')
+    store.getState().revealSidebarRow('repo:r1')
+    expect(store.getState().sidebarBody).toBe('workspaces')
+    expect(store.getState().pendingRevealSidebarRow?.rowKey).toBe('repo:r1')
+  })
+})
+
 describe('createUISlice hydratePersistedUI', () => {
   it('defaults persisted right sidebar visibility to open', () => {
     expect(getDefaultUIState().rightSidebarOpen).toBe(true)
@@ -148,10 +164,10 @@ describe('createUISlice hydratePersistedUI', () => {
     expect(store.getState().activeView).toBe('terminal')
   })
 
-  it('drops a persisted activity view when experimental activity is disabled', () => {
+  it('drops a persisted activity view when the Agents sidebar is hidden', () => {
     const store = createUIStore()
     store.setState({
-      settings: { experimentalActivity: false } as AppState['settings']
+      settings: { showAgentsSidebar: false } as AppState['settings']
     })
 
     store.getState().hydratePersistedUI(makePersistedUI({ activeView: 'activity' }), 'startup')
@@ -159,10 +175,21 @@ describe('createUISlice hydratePersistedUI', () => {
     expect(store.getState().activeView).toBe('terminal')
   })
 
-  it('restores a persisted activity view when experimental activity is enabled', () => {
+  it('keeps a persisted activity view when the settings fetch failed', () => {
+    // A failed window.api.settings.get() leaves settings null; downgrading here would let the
+    // persisted-UI writer overwrite the saved view with terminal.
+    const store = createUIStore()
+    store.setState({ settings: null as unknown as AppState['settings'] })
+
+    store.getState().hydratePersistedUI(makePersistedUI({ activeView: 'activity' }), 'startup')
+
+    expect(store.getState().activeView).toBe('activity')
+  })
+
+  it('restores a persisted activity view when the Agents sidebar is shown', () => {
     const store = createUIStore()
     store.setState({
-      settings: { experimentalActivity: true } as AppState['settings']
+      settings: { showAgentsSidebar: true } as AppState['settings']
     })
 
     store.getState().hydratePersistedUI(makePersistedUI({ activeView: 'activity' }), 'startup')
diff --git a/src/renderer/src/store/slices/ui-hydration-workspace-preferences.test.ts b/src/renderer/src/store/slices/ui-hydration-workspace-preferences.test.ts
index a591ce4c40a..642297bb109 100644
--- a/src/renderer/src/store/slices/ui-hydration-workspace-preferences.test.ts
+++ b/src/renderer/src/store/slices/ui-hydration-workspace-preferences.test.ts
@@ -518,6 +518,94 @@ describe('createUISlice hydratePersistedUI', () => {
     }
   })
 
+  it('keeps agents scope filter array identities stable across unchanged re-hydrations', () => {
+    const store = createUIStore()
+    const persisted = makePersistedUI({
+      agentsVisibleHostIds: ['ssh:devbox'],
+      agentsFilterRepoIds: ['repo-1']
+    })
+
+    store.getState().hydratePersistedUI(persisted)
+    const firstHostIds = store.getState().agentsVisibleHostIds
+    const firstRepoIds = store.getState().agentsFilterRepoIds
+
+    // Why identity (toBe): sync hydration fires on every ui:changed broadcast, and a
+    // fresh array would invalidate the agents-view scope memos each time.
+    store.getState().hydratePersistedUI(makePersistedUI({ ...persisted }))
+    expect(store.getState().agentsVisibleHostIds).toBe(firstHostIds)
+    expect(store.getState().agentsFilterRepoIds).toBe(firstRepoIds)
+
+    store
+      .getState()
+      .hydratePersistedUI(makePersistedUI({ ...persisted, agentsVisibleHostIds: ['ssh:otherbox'] }))
+    expect(store.getState().agentsVisibleHostIds).toEqual(['ssh:otherbox'])
+    expect(store.getState().agentsFilterRepoIds).toBe(firstRepoIds)
+  })
+
+  it('hydrates agents view preferences with safe defaults for absent fields', () => {
+    const store = createUIStore()
+
+    store.getState().hydratePersistedUI(makePersistedUI({}))
+
+    expect(store.getState().agentsVisibleHostIds).toBeNull()
+    expect(store.getState().agentsFilterRepoIds).toEqual([])
+    expect(store.getState().agentsShowChildAgents).toBe(false)
+    expect(store.getState().agentsCompactMode).toBe(true)
+  })
+
+  it('sanitizes malformed agents repo filters before the repo catalog loads', () => {
+    const store = createUIStore()
+
+    expect(() =>
+      store.getState().hydratePersistedUI(
+        makePersistedUI({
+          agentsFilterRepoIds: 'repo-1' as unknown as PersistedUIState['agentsFilterRepoIds']
+        })
+      )
+    ).not.toThrow()
+    expect(store.getState().agentsFilterRepoIds).toEqual([])
+
+    store.getState().hydratePersistedUI(
+      makePersistedUI({
+        agentsFilterRepoIds: [
+          'repo-1',
+          42,
+          'missing'
+        ] as unknown as PersistedUIState['agentsFilterRepoIds']
+      })
+    )
+    expect(store.getState().agentsFilterRepoIds).toEqual(['repo-1', 'missing'])
+  })
+
+  it('sanitizes and prunes agents repo filters against a loaded repo catalog', () => {
+    const store = createUIStore()
+    store.setState({
+      repos: [
+        {
+          id: 'repo-1',
+          path: '/tmp/repo-1',
+          displayName: 'Repo 1',
+          badgeColor: 'gray',
+          addedAt: 1,
+          kind: 'git'
+        }
+      ]
+    })
+
+    expect(() =>
+      store.getState().hydratePersistedUI(
+        makePersistedUI({
+          agentsFilterRepoIds: [
+            'repo-1',
+            null,
+            'missing'
+          ] as unknown as PersistedUIState['agentsFilterRepoIds']
+        })
+      )
+    ).not.toThrow()
+    expect(store.getState().agentsFilterRepoIds).toEqual(['repo-1'])
+  })
+
   it('prunes acknowledgedAgentsByPaneKey entries older than the 7-day TTL during hydration', () => {
     // HYDRATE_MAX_AGE_MS lives in src/renderer/src/store/slices/ui.ts and matches
     // the constant in src/main/agent-hooks/server.ts.
@@ -693,3 +781,33 @@ describe('createUISlice hydratePersistedUI', () => {
     expect(store.getState().agentActivityDisplayMode).toBe('compact')
   })
 })
+
+describe('createUISlice hydratePersistedUI manual unread turns', () => {
+  it('restores manual unread stamps and prunes malformed or stale ones', () => {
+    const store = createUIStore()
+    const fresh = Date.now() - 60_000
+    const stale = Date.now() - 8 * 24 * 60 * 60 * 1000
+
+    store.getState().hydratePersistedUI(
+      makePersistedUI({
+        manuallyUnreadTurnsByPaneKey: {
+          'tab-a:1': fresh,
+          'tab-b:1': stale,
+          'tab-c:1': 'bogus' as unknown as number
+        }
+      })
+    )
+
+    expect(store.getState().manuallyUnreadTurnsByPaneKey).toEqual({ 'tab-a:1': fresh })
+  })
+
+  it('hydrates to an empty record when the field is absent from an older profile', () => {
+    const store = createUIStore()
+
+    store
+      .getState()
+      .hydratePersistedUI(makePersistedUI({ manuallyUnreadTurnsByPaneKey: undefined }))
+
+    expect(store.getState().manuallyUnreadTurnsByPaneKey).toEqual({})
+  })
+})
diff --git a/src/renderer/src/store/slices/ui-page-navigation.test.ts b/src/renderer/src/store/slices/ui-page-navigation.test.ts
index eb1da4f6dd4..9a355223c27 100644
--- a/src/renderer/src/store/slices/ui-page-navigation.test.ts
+++ b/src/renderer/src/store/slices/ui-page-navigation.test.ts
@@ -298,6 +298,35 @@ describe('createUISlice settings navigation', () => {
     expect(store.getState().activeView).toBe('tasks')
   })
 
+  it('returns to the graduated Agents view after visiting settings', () => {
+    const store = createUIStore()
+
+    store.setState({
+      settings: { showAgentsSidebar: true } as unknown as AppState['settings']
+    } as unknown as Partial<AppState>)
+    store.getState().openActivityPage()
+    expect(store.getState().activeView).toBe('activity')
+
+    store.getState().openSettingsPage()
+    store.getState().closeSettingsPage()
+
+    expect(store.getState().activeView).toBe('activity')
+  })
+
+  it('falls back to terminal when closing settings with the Agents surfaces hidden', () => {
+    const store = createUIStore()
+
+    store.setState({
+      settings: { showAgentsSidebar: false } as unknown as AppState['settings'],
+      activeView: 'settings',
+      previousViewBeforeSettings: 'activity'
+    } as unknown as Partial<AppState>)
+
+    store.getState().closeSettingsPage()
+
+    expect(store.getState().activeView).toBe('terminal')
+  })
+
   it('clears transient settings search when opening settings', () => {
     const store = createUIStore()
 
diff --git a/src/renderer/src/store/slices/ui/ui-slice-activity-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-activity-actions.ts
new file mode 100644
index 00000000000..0ae704a5702
--- /dev/null
+++ b/src/renderer/src/store/slices/ui/ui-slice-activity-actions.ts
@@ -0,0 +1,155 @@
+import type { UISlice, UISliceGet, UISliceSet } from './ui-slice-contract'
+import {
+  collectAcknowledgedAgentNotificationId,
+  latestAgentTurnTimestamp,
+  resolvePaneKeyWorktreeIdFromTabs,
+  usableTimestamp
+} from './ui-slice-agent-notification-acknowledgement'
+
+type ActivityActions = Pick<
+  UISlice,
+  | 'acknowledgedAgentsByPaneKey'
+  | 'acknowledgeAgents'
+  | 'unacknowledgeAgents'
+  | 'activityClearedAtByPaneKey'
+  | 'applyActivityClearedAt'
+  | 'manuallyUnreadTurnsByPaneKey'
+  | 'clearManuallyUnreadTurns'
+>
+
+export function createUiActivityActions(set: UISliceSet, _get: UISliceGet): ActivityActions {
+  return {
+    acknowledgedAgentsByPaneKey: {},
+    acknowledgeAgents: (paneKeys) => {
+      const notificationIdsToDismiss = new Set<string>()
+      set((s) => {
+        if (paneKeys.length === 0) {
+          return s
+        }
+        const now = Date.now()
+        const migrationUnsupported = Object.values(s.migrationUnsupportedByPtyId ?? {})
+        let next: Record<string, number> | null = null
+        let nextUnreadCompletions: Record<string, true> | null = null
+        for (const key of paneKeys) {
+          if (s.unreadAgentCompletionPanes[key]) {
+            nextUnreadCompletions ??= { ...s.unreadAgentCompletionPanes }
+            delete nextUnreadCompletions[key]
+          }
+          const prev = s.acknowledgedAgentsByPaneKey[key] ?? 0
+          let stamp = now
+          const liveEntry = s.agentStatusByPaneKey?.[key]
+          if (liveEntry) {
+            collectAcknowledgedAgentNotificationId({
+              ids: notificationIdsToDismiss,
+              worktreeId: resolvePaneKeyWorktreeIdFromTabs(s, key) ?? liveEntry.worktreeId,
+              paneKey: key,
+              stateStartedAt: liveEntry.stateStartedAt,
+              previousAckAt: prev
+            })
+            stamp = Math.max(stamp, latestAgentTurnTimestamp(liveEntry))
+          }
+          const retained = s.retainedAgentsByPaneKey?.[key]
+          if (retained) {
+            collectAcknowledgedAgentNotificationId({
+              ids: notificationIdsToDismiss,
+              worktreeId: retained.worktreeId,
+              paneKey: key,
+              stateStartedAt: retained.entry.stateStartedAt,
+              previousAckAt: prev
+            })
+            stamp = Math.max(stamp, latestAgentTurnTimestamp(retained.entry))
+          }
+          for (const unsupported of migrationUnsupported) {
+            if (unsupported.paneKey === key) {
+              stamp = Math.max(stamp, usableTimestamp(unsupported.updatedAt))
+            }
+          }
+          if (prev < stamp) {
+            next ??= { ...s.acknowledgedAgentsByPaneKey }
+            next[key] = stamp
+          }
+        }
+        let nextManual: Record<string, number> | null = null
+        for (const key of paneKeys) {
+          if (s.manuallyUnreadTurnsByPaneKey[key] !== undefined) {
+            nextManual ??= { ...s.manuallyUnreadTurnsByPaneKey }
+            delete nextManual[key]
+          }
+        }
+        if (!next && !nextUnreadCompletions && !nextManual) {
+          return s
+        }
+        return {
+          ...(next ? { acknowledgedAgentsByPaneKey: next } : {}),
+          ...(nextUnreadCompletions ? { unreadAgentCompletionPanes: nextUnreadCompletions } : {}),
+          ...(nextManual ? { manuallyUnreadTurnsByPaneKey: nextManual } : {})
+        }
+      })
+      const ids = [...notificationIdsToDismiss]
+      if (ids.length > 0 && typeof window !== 'undefined') {
+        void window.api?.notifications?.dismiss?.(ids)
+      }
+    },
+    unacknowledgeAgents: (paneKeys) =>
+      set((s) => {
+        if (paneKeys.length === 0) {
+          return s
+        }
+        let next: Record<string, number> | null = null
+        let nextManual: Record<string, number> | null = null
+        for (const key of paneKeys) {
+          if (s.acknowledgedAgentsByPaneKey[key] !== undefined) {
+            next ??= { ...s.acknowledgedAgentsByPaneKey }
+            delete next[key]
+          }
+          const turnTimestamp =
+            s.agentStatusByPaneKey?.[key]?.stateStartedAt ??
+            s.retainedAgentsByPaneKey?.[key]?.entry.stateStartedAt
+          if (
+            turnTimestamp !== undefined &&
+            s.manuallyUnreadTurnsByPaneKey[key] !== turnTimestamp
+          ) {
+            nextManual ??= { ...s.manuallyUnreadTurnsByPaneKey }
+            nextManual[key] = turnTimestamp
+          }
+        }
+        if (!next && !nextManual) {
+          return s
+        }
+        return {
+          ...(next ? { acknowledgedAgentsByPaneKey: next } : {}),
+          ...(nextManual ? { manuallyUnreadTurnsByPaneKey: nextManual } : {})
+        }
+      }),
+    manuallyUnreadTurnsByPaneKey: {},
+    clearManuallyUnreadTurns: (paneKeys) =>
+      set((s) => {
+        let next: Record<string, number> | null = null
+        for (const key of paneKeys) {
+          if (s.manuallyUnreadTurnsByPaneKey[key] !== undefined) {
+            next ??= { ...s.manuallyUnreadTurnsByPaneKey }
+            delete next[key]
+          }
+        }
+        return next ? { manuallyUnreadTurnsByPaneKey: next } : s
+      }),
+    activityClearedAtByPaneKey: {},
+    applyActivityClearedAt: (patch) =>
+      set((s) => {
+        let next: Record<string, number> | null = null
+        for (const [key, value] of Object.entries(patch)) {
+          const previous = s.activityClearedAtByPaneKey[key]
+          if (value === null ? previous === undefined : previous === value) {
+            continue
+          }
+          next ??= { ...s.activityClearedAtByPaneKey }
+          if (value === null) {
+            delete next[key]
+          } else {
+            next[key] = value
+          }
+        }
+        return next ? { activityClearedAtByPaneKey: next } : s
+      })
+  }
+}
diff --git a/src/renderer/src/store/slices/ui/ui-slice-agent-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-agent-actions.ts
index ebd0f016b3f..9c34d49eb38 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-agent-actions.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-agent-actions.ts
@@ -5,12 +5,7 @@ import {
   resolveRunningAgentSendTarget
 } from '../../../lib/running-agent-targets'
 import { translate } from '@/i18n/i18n'
-import {
-  collectAcknowledgedAgentNotificationId,
-  latestAgentTurnTimestamp,
-  resolvePaneKeyWorktreeIdFromTabs,
-  usableTimestamp
-} from './ui-slice-agent-notification-acknowledgement'
+import { createUiActivityActions } from './ui-slice-activity-actions'
 
 let agentSendTargetModeInstanceCounter = 0
 
@@ -39,8 +34,13 @@ export function createUiAgentActions(
   | 'acknowledgedAgentsByPaneKey'
   | 'acknowledgeAgents'
   | 'unacknowledgeAgents'
+  | 'activityClearedAtByPaneKey'
+  | 'applyActivityClearedAt'
+  | 'manuallyUnreadTurnsByPaneKey'
+  | 'clearManuallyUnreadTurns'
 > {
   return {
+    ...createUiActivityActions(set, get),
     sidebarOpen: true,
     sidebarWidth: 280,
     toggleSidebar: () => set((s) => ({ sidebarOpen: !s.sidebarOpen })),
@@ -209,97 +209,6 @@ export function createUiAgentActions(
       )
       get().closeAgentSendPopoverTargetMode(mode.id, mode.instanceId)
       return true
-    },
-
-    acknowledgedAgentsByPaneKey: {},
-    acknowledgeAgents: (paneKeys) => {
-      const notificationIdsToDismiss = new Set<string>()
-      set((s) => {
-        if (paneKeys.length === 0) {
-          return s
-        }
-        const now = Date.now()
-        const migrationUnsupported = Object.values(s.migrationUnsupportedByPtyId ?? {})
-        // Why: only reallocate if an ack advances; compare prev<stamp not !== — the stamp ticks every ms and !== would rewrite the map every call.
-        let next: Record<string, number> | null = null
-        // Why: one ack, two records — leaving the completion marker set keeps the tab dot,
-        // the ⌘J row and the floating-workspace dot lit with nothing left to read.
-        let nextUnreadCompletions: Record<string, true> | null = null
-        for (const key of paneKeys) {
-          if (s.unreadAgentCompletionPanes[key]) {
-            if (nextUnreadCompletions === null) {
-              nextUnreadCompletions = { ...s.unreadAgentCompletionPanes }
-            }
-            delete nextUnreadCompletions[key]
-          }
-          const prev = s.acknowledgedAgentsByPaneKey[key] ?? 0
-          // Why not plain Date.now(): a remote/SSH execution host can stamp a turn ahead of this clock,
-          // and every unread rule is `ackAt < turnTimestamp`. A behind-the-turn ack can never clear the
-          // row, so its auto-ack effect re-fires on each new millisecond forever (React #185).
-          let stamp = now
-          const liveEntry = s.agentStatusByPaneKey?.[key]
-          if (liveEntry) {
-            collectAcknowledgedAgentNotificationId({
-              ids: notificationIdsToDismiss,
-              worktreeId: resolvePaneKeyWorktreeIdFromTabs(s, key) ?? liveEntry.worktreeId,
-              paneKey: key,
-              stateStartedAt: liveEntry.stateStartedAt,
-              previousAckAt: prev
-            })
-            stamp = Math.max(stamp, latestAgentTurnTimestamp(liveEntry))
-          }
-          const retained = s.retainedAgentsByPaneKey?.[key]
-          if (retained) {
-            collectAcknowledgedAgentNotificationId({
-              ids: notificationIdsToDismiss,
-              worktreeId: retained.worktreeId,
-              paneKey: key,
-              stateStartedAt: retained.entry.stateStartedAt,
-              previousAckAt: prev
-            })
-            stamp = Math.max(stamp, latestAgentTurnTimestamp(retained.entry))
-          }
-          for (const unsupported of migrationUnsupported) {
-            // Why: Activity synthesizes a blocked row from this entry, stamped by the pane's host like any turn.
-            if (unsupported.paneKey === key) {
-              stamp = Math.max(stamp, usableTimestamp(unsupported.updatedAt))
-            }
-          }
-          if (prev < stamp) {
-            if (next === null) {
-              next = { ...s.acknowledgedAgentsByPaneKey }
-            }
-            next[key] = stamp
-          }
-        }
-        if (!next && !nextUnreadCompletions) {
-          return s
-        }
-        return {
-          ...(next ? { acknowledgedAgentsByPaneKey: next } : {}),
-          ...(nextUnreadCompletions ? { unreadAgentCompletionPanes: nextUnreadCompletions } : {})
-        }
-      })
-      const notificationIds = [...notificationIdsToDismiss]
-      if (notificationIds.length > 0 && typeof window !== 'undefined') {
-        void window.api?.notifications?.dismiss?.(notificationIds)
-      }
-    },
-    unacknowledgeAgents: (paneKeys) =>
-      set((s) => {
-        if (paneKeys.length === 0) {
-          return s
-        }
-        let next: Record<string, number> | null = null
-        for (const key of paneKeys) {
-          if (s.acknowledgedAgentsByPaneKey[key] !== undefined) {
-            if (next === null) {
-              next = { ...s.acknowledgedAgentsByPaneKey }
-            }
-            delete next[key]
-          }
-        }
-        return next ? { acknowledgedAgentsByPaneKey: next } : s
-      })
+    }
   }
 }
diff --git a/src/renderer/src/store/slices/ui/ui-slice-contract-core.ts b/src/renderer/src/store/slices/ui/ui-slice-contract-core.ts
index cd2af73b123..2506e5dd071 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-contract-core.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-contract-core.ts
@@ -133,6 +133,12 @@ export type UISliceCore = {
   acknowledgedAgentsByPaneKey: Record<string, number>
   acknowledgeAgents: (paneKeys: string[]) => void
   unacknowledgeAgents: (paneKeys: string[]) => void
+  /** Per-pane cutoffs used to hide activity entries cleared by the user. */
+  activityClearedAtByPaneKey: Record<string, number>
+  applyActivityClearedAt: (patch: Record<string, number | null>) => void
+  /** Session-local protection for turns explicitly marked unread. */
+  manuallyUnreadTurnsByPaneKey: Record<string, number>
+  clearManuallyUnreadTurns: (paneKeys: string[]) => void
   activeView: TopLevelView
   previousViewBeforeTasks: Exclude<UiViewHistory, 'tasks'>
   previousViewBeforeSettings: Exclude<UiViewHistory, 'settings'>
diff --git a/src/renderer/src/store/slices/ui/ui-slice-contract-preferences.ts b/src/renderer/src/store/slices/ui/ui-slice-contract-preferences.ts
index 97ab0cb484b..2e764e5cd79 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-contract-preferences.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-contract-preferences.ts
@@ -22,6 +22,9 @@ import type { PersistedUIWriteBaseline } from '../persisted-ui-write-baseline'
 import type { UISliceCore } from './ui-slice-contract-core'
 
 export type UISlicePreferences = {
+  /** Which list the sidebar body shows. Navigator-only; does not change the active view. */
+  sidebarBody: 'workspaces' | 'agents'
+  setSidebarBody: (body: UISlicePreferences['sidebarBody']) => void
   groupBy: 'none' | 'workspace-status' | 'repo' | 'pr-status'
   setGroupBy: (g: UISlicePreferences['groupBy']) => void
   sortBy: 'name' | 'smart' | 'recent' | 'repo' | 'manual'
@@ -59,6 +62,15 @@ export type UISlicePreferences = {
   toggleShowDotfilesForWorktree: (worktreeId: string) => void
   filterRepoIds: readonly string[]
   setFilterRepoIds: (ids: readonly string[]) => void
+  /** Agents-view scope filters, independent from workspace navigation filters. */
+  agentsVisibleHostIds: VisibleWorkspaceHostIds
+  setAgentsVisibleHostIds: (ids: VisibleWorkspaceHostIds) => void
+  agentsFilterRepoIds: readonly string[]
+  setAgentsFilterRepoIds: (ids: readonly string[]) => void
+  agentsShowChildAgents: boolean
+  setAgentsShowChildAgents: (v: boolean) => void
+  agentsCompactMode: boolean
+  setAgentsCompactMode: (v: boolean) => void
   collapsedGroups: Set<string>
   toggleCollapsedGroup: (key: string) => void
   worktreeCardProperties: WorktreeCardProperty[]
diff --git a/src/renderer/src/store/slices/ui/ui-slice-hydration-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-hydration-actions.ts
index 7902d1bbba8..64858db11a0 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-hydration-actions.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-hydration-actions.ts
@@ -1,4 +1,6 @@
 import type { UISlice, UISliceGet, UISliceSet } from './ui-slice-contract'
+import type { AppState } from '../../types'
+import type { PersistedUIState } from '../../../../../shared/persisted-ui-state-types'
 import { normalizeRightSidebarRoute } from '../../right-sidebar-route'
 import {
   applyManualRepoOrder,
@@ -7,7 +9,8 @@ import {
 import { normalizeWorkspaceCleanupBrowseState } from '../../../../../shared/workspace-cleanup-browse-state'
 import {
   normalizeExecutionHostScope,
-  normalizeExecutionHostOrder
+  normalizeExecutionHostOrder,
+  normalizeVisibleExecutionHostIds
 } from '../../../../../shared/execution-host'
 import { normalizeFeatureInteractions } from '../../../../../shared/feature-interactions'
 import { normalizeContextualTourIds } from '../../../../../shared/contextual-tours'
@@ -46,7 +49,7 @@ import {
 import {
   hydrateTrustedOrcaHooks,
   normalizeHydratedVisibleWorkspaceHostIds,
-  sanitizeAcknowledgedAgentsByPaneKey,
+  preserveStringArrayIdentity,
   sanitizeHydratedActiveView,
   sanitizePersistedRepoIds,
   sanitizeShowDotfilesByWorktree,
@@ -56,7 +59,7 @@ import {
   migrateStatusBarItems,
   clampPetSize
 } from './ui-slice-hydration-sanitizers'
-import { sanitizeTaskResumeState } from './ui-slice-hydration-values'
+import { hydrateAgentReadState, sanitizeTaskResumeState } from './ui-slice-hydration-values'
 
 const MAX_LEFT_SIDEBAR_WIDTH = 500
 const MAX_RIGHT_SIDEBAR_WIDTH = 4000
@@ -66,6 +69,28 @@ const DEFAULT_ON_MINIMAX_STATUS_BAR_ITEM: StatusBarItem = 'minimax'
 const DEFAULT_ON_ANTIGRAVITY_STATUS_BAR_ITEM: StatusBarItem = 'antigravity'
 const DEFAULT_ON_GROK_STATUS_BAR_ITEM: StatusBarItem = 'grok'
 
+function hydrateStatusBarItems(ui: PersistedUIState): StatusBarItem[] {
+  let items = migrateStatusBarItems(ui.statusBarItems)
+  const defaults = [
+    ['_portsStatusBarDefaultAdded', DEFAULT_ON_PORTS_STATUS_BAR_ITEM],
+    ['_kimiStatusBarDefaultAdded', DEFAULT_ON_KIMI_STATUS_BAR_ITEM],
+    ['_minimaxStatusBarDefaultAdded', DEFAULT_ON_MINIMAX_STATUS_BAR_ITEM],
+    ['_antigravityStatusBarDefaultAdded', DEFAULT_ON_ANTIGRAVITY_STATUS_BAR_ITEM],
+    ['_grokStatusBarDefaultAdded', DEFAULT_ON_GROK_STATUS_BAR_ITEM]
+  ] as const
+  for (const [flag, item] of defaults) {
+    if (!ui[flag] && !items.includes(item)) {
+      items = [...items, item]
+    }
+  }
+  if (typeof window !== 'undefined' && defaults.some(([flag]) => !ui[flag])) {
+    window.api.ui
+      .set({ statusBarItems: items, ...Object.fromEntries(defaults.map(([flag]) => [flag, true])) })
+      .catch(console.error)
+  }
+  return items
+}
+
 export function createUiHydrationActions(set: UISliceSet, _get: UISliceGet): Partial<UISlice> {
   return {
     hydratePersistedUI: (ui, source = 'sync') =>
@@ -75,6 +100,7 @@ export function createUiHydrationActions(set: UISliceSet, _get: UISliceGet): Par
         const validRepoIds = new Set(s.repos.map((repo) => repo.id))
         const validRepoHostIdentities = new Set(s.repos.map(getRepoHostIdentity))
         const persistedFilterRepoIds = sanitizePersistedRepoIds(ui.filterRepoIds)
+        const persistedAgentsFilterRepoIds = sanitizePersistedRepoIds(ui.agentsFilterRepoIds)
         // Why: pre-rename builds used sidekick* keys; read as fallback only so new pet* writes win after upgrade.
         const customPets = Array.isArray(ui.customPets)
           ? ui.customPets
@@ -84,46 +110,7 @@ export function createUiHydrationActions(set: UISliceSet, _get: UISliceGet): Par
         const petId = ui.petId ?? ui.sidekickId
         // Migration: one-shot old-'recent'→'smart' runs in main (_sortBySmartMigrated), not here, so a deliberate 'recent' choice survives restart.
         const sortBy = ui.sortBy
-        const migratedStatusBarItems = migrateStatusBarItems(ui.statusBarItems)
-        const statusBarItemsWithPorts: StatusBarItem[] =
-          ui._portsStatusBarDefaultAdded || migratedStatusBarItems.includes('ports')
-            ? migratedStatusBarItems
-            : [...migratedStatusBarItems, DEFAULT_ON_PORTS_STATUS_BAR_ITEM]
-        const statusBarItems: StatusBarItem[] =
-          ui._kimiStatusBarDefaultAdded || statusBarItemsWithPorts.includes('kimi')
-            ? statusBarItemsWithPorts
-            : [...statusBarItemsWithPorts, DEFAULT_ON_KIMI_STATUS_BAR_ITEM]
-        const statusBarItemsWithMiniMax: StatusBarItem[] =
-          ui._minimaxStatusBarDefaultAdded || statusBarItems.includes('minimax')
-            ? statusBarItems
-            : [...statusBarItems, DEFAULT_ON_MINIMAX_STATUS_BAR_ITEM]
-        const statusBarItemsWithAntigravity: StatusBarItem[] =
-          ui._antigravityStatusBarDefaultAdded || statusBarItemsWithMiniMax.includes('antigravity')
-            ? statusBarItemsWithMiniMax
-            : [...statusBarItemsWithMiniMax, DEFAULT_ON_ANTIGRAVITY_STATUS_BAR_ITEM]
-        const statusBarItemsWithGrok: StatusBarItem[] =
-          ui._grokStatusBarDefaultAdded || statusBarItemsWithAntigravity.includes('grok')
-            ? statusBarItemsWithAntigravity
-            : [...statusBarItemsWithAntigravity, DEFAULT_ON_GROK_STATUS_BAR_ITEM]
-        if (
-          (!ui._portsStatusBarDefaultAdded ||
-            !ui._kimiStatusBarDefaultAdded ||
-            !ui._minimaxStatusBarDefaultAdded ||
-            !ui._antigravityStatusBarDefaultAdded ||
-            !ui._grokStatusBarDefaultAdded) &&
-          typeof window !== 'undefined'
-        ) {
-          window.api.ui
-            .set({
-              statusBarItems: statusBarItemsWithGrok,
-              _portsStatusBarDefaultAdded: true,
-              _kimiStatusBarDefaultAdded: true,
-              _minimaxStatusBarDefaultAdded: true,
-              _antigravityStatusBarDefaultAdded: true,
-              _grokStatusBarDefaultAdded: true
-            })
-            .catch(console.error)
-        }
+        const statusBarItemsWithGrok = hydrateStatusBarItems(ui)
         const rightSidebarRoute = normalizeRightSidebarRoute(
           ui.rightSidebarTab,
           ui.rightSidebarExplorerView
@@ -183,6 +170,18 @@ export function createUiHydrationActions(set: UISliceSet, _get: UISliceGet): Par
             validRepoIds.size === 0
               ? persistedFilterRepoIds
               : persistedFilterRepoIds.filter((repoId) => validRepoIds.has(repoId)),
+          agentsVisibleHostIds: preserveStringArrayIdentity(
+            s.agentsVisibleHostIds,
+            normalizeVisibleExecutionHostIds(ui.agentsVisibleHostIds)
+          ),
+          agentsFilterRepoIds: preserveStringArrayIdentity(
+            s.agentsFilterRepoIds,
+            validRepoIds.size === 0
+              ? persistedAgentsFilterRepoIds
+              : persistedAgentsFilterRepoIds.filter((repoId) => validRepoIds.has(repoId))
+          ),
+          agentsShowChildAgents: ui.agentsShowChildAgents === true,
+          agentsCompactMode: ui.agentsCompactMode !== false,
           collapsedGroups: new Set(ui.collapsedGroups ?? []),
           uiZoomLevel: ui.uiZoomLevel ?? 0,
           editorFontZoomLevel: ui.editorFontZoomLevel ?? 0,
@@ -262,10 +261,7 @@ export function createUiHydrationActions(set: UISliceSet, _get: UISliceGet): Par
             ui.usagePercentageDisplayChangeNoticeDismissed === true,
           // Why: default false so existing users still see the CTA; only explicit dismissal persists true.
           usageEmptyStateDismissed: ui.usageEmptyStateDismissed === true,
-          // Why: stale acks are inert (paneKey reuse beats them via stateStartedAt); sanitizer bounds growth past HYDRATE_MAX_AGE_MS.
-          acknowledgedAgentsByPaneKey: sanitizeAcknowledgedAgentsByPaneKey(
-            ui.acknowledgedAgentsByPaneKey
-          ),
+          ...hydrateAgentReadState(ui),
           workspaceCleanupDismissals: sanitizeWorkspaceCleanupDismissals(
             ui.workspaceCleanup?.dismissals
           ),
@@ -280,7 +276,7 @@ export function createUiHydrationActions(set: UISliceSet, _get: UISliceGet): Par
           // Why: restore only on startup; on 'sync' broadcasts it would clobber the window's current per-window view.
           activeView:
             source === 'startup'
-              ? sanitizeHydratedActiveView(ui.activeView, s.settings?.experimentalActivity === true)
+              ? sanitizeHydratedActiveView(ui.activeView, s.settings)
               : s.activeView,
           persistedUIReady: true
         }
@@ -337,7 +333,7 @@ export function createUiHydrationActions(set: UISliceSet, _get: UISliceGet): Par
           ...hydrated,
           persistedUIWriteBaseline: nextWriteBaseline,
           persistedUIWriteBaselineGeneration: nextWriteBaselineGeneration
-        }
+        } as Partial<AppState>
       })
   }
 }
diff --git a/src/renderer/src/store/slices/ui/ui-slice-hydration-sanitizers.ts b/src/renderer/src/store/slices/ui/ui-slice-hydration-sanitizers.ts
index 8d81fdd4d53..edb79511cd8 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-hydration-sanitizers.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-hydration-sanitizers.ts
@@ -15,11 +15,26 @@ import {
   normalizeExecutionHostScope
 } from '../../../../../shared/execution-host'
 import { persistedUIValuesEqual } from '../../../../../shared/persisted-ui-equality'
+// Pure predicate over GlobalSettings; safe to share with the store layer.
+import { shouldShowAgentsSidebar } from '@/components/sidebar/agents-sidebar-visibility'
 import { DEFAULT_STATUS_BAR_ITEMS } from '../../../../../shared/constants'
 import type { UISlice } from './ui-slice-contract'
 
 const MIN_SIDEBAR_WIDTH = 220
 const HYDRATE_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000
+
+export function preserveStringArrayIdentity<T extends string>(
+  current: readonly T[] | null,
+  next: T[] | null
+): T[] | null {
+  if (!current || !next) {
+    return next
+  }
+  return current.length === next.length && current.every((value, index) => value === next[index])
+    ? (current as T[])
+    : next
+}
+
 export function isPlainPersistedRecord(value: unknown): value is Record<string, unknown> {
   return Boolean(value) && typeof value === 'object' && !Array.isArray(value)
 }
@@ -91,11 +106,14 @@ export function sanitizePersistedSidebarWidth(
   return Math.min(maxWidth, Math.max(MIN_SIDEBAR_WIDTH, width))
 }
 
-export function sanitizeAcknowledgedAgentsByPaneKey(value: unknown): Record<string, number> {
+export function sanitizePaneKeyTimestampRecord(
+  value: unknown,
+  maxAgeMs: number = HYDRATE_MAX_AGE_MS
+): Record<string, number> {
   if (value === null || typeof value !== 'object' || Array.isArray(value)) {
     return {}
   }
-  const cutoff = Date.now() - HYDRATE_MAX_AGE_MS
+  const cutoff = Date.now() - maxAgeMs
   const out: Record<string, number> = {}
   for (const [key, ackAt] of Object.entries(value as Record<string, unknown>)) {
     if (!isSafePersistedRecordKey(key)) {
@@ -109,6 +127,16 @@ export function sanitizeAcknowledgedAgentsByPaneKey(value: unknown): Record<stri
   return out
 }
 
+export const sanitizeAcknowledgedAgentsByPaneKey = sanitizePaneKeyTimestampRecord
+
+/** Cleared-at cutoffs must outlive any persisted status entry they guard: main prunes entries
+ *  at HYDRATE_MAX_AGE_MS from receivedAt, and cutoff values trail receipt time, so pruning them
+ *  on the same clock can resurrect a cleared entry. Double the TTL keeps the guard alive past
+ *  every entry it can still shadow. */
+export function sanitizeActivityClearedAtByPaneKey(value: unknown): Record<string, number> {
+  return sanitizePaneKeyTimestampRecord(value, 2 * HYDRATE_MAX_AGE_MS)
+}
+
 export function sanitizeWorkspaceCleanupDismissals(
   value: unknown
 ): Record<string, WorkspaceCleanupDismissal> {
@@ -147,14 +175,16 @@ export function sanitizeWorkspaceCleanupDismissals(
 
 export function sanitizeHydratedActiveView(
   value: PersistedUIState['activeView'],
-  experimentalActivityEnabled: boolean
+  settings: Parameters<typeof shouldShowAgentsSidebar>[0]
 ): TopLevelView {
   // Why: older data (pre-activeView) or a view a different build doesn't have falls back to terminal rather than rendering nothing.
   if (!isTopLevelView(value)) {
     return 'terminal'
   }
-  // Why: activity is hidden when its setting is off, so gate only it (mobile/automations stay functional when hidden).
-  if (value === 'activity' && !experimentalActivityEnabled) {
+  // Why: activity is hidden when its entry points are, so gate only it (mobile/automations stay functional when hidden).
+  // Why the null check: a failed settings fetch is not an opt-out. Downgrading on absent settings
+  // would let the persisted-UI writer overwrite the user's saved `activity` with `terminal`.
+  if (value === 'activity' && settings && !shouldShowAgentsSidebar(settings)) {
     return 'terminal'
   }
   return value
diff --git a/src/renderer/src/store/slices/ui/ui-slice-hydration-values.ts b/src/renderer/src/store/slices/ui/ui-slice-hydration-values.ts
index 7bb8376fb27..5b891d59b01 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-hydration-values.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-hydration-values.ts
@@ -4,6 +4,12 @@ import type { FeatureInteractionState } from '../../../../../shared/feature-inte
 import type { ContextualTourId } from '../../../../../shared/contextual-tours'
 import { normalizeFeatureInteractions } from '../../../../../shared/feature-interactions'
 import { normalizeContextualTourIds } from '../../../../../shared/contextual-tours'
+import type { UISlice } from './ui-slice-contract'
+import {
+  sanitizeAcknowledgedAgentsByPaneKey,
+  sanitizeActivityClearedAtByPaneKey,
+  sanitizePaneKeyTimestampRecord
+} from './ui-slice-hydration-sanitizers'
 
 const VALID_TASK_PRESETS = new Set<TaskViewPresetId>([
   'all',
@@ -132,3 +138,19 @@ export function mergeContextualTourSeenIds(
   }
   return [...merged]
 }
+
+/** Stale acks/marks are inert (paneKey reuse beats them via stateStartedAt); the sanitizers only bound growth past HYDRATE_MAX_AGE_MS. */
+export function hydrateAgentReadState(
+  ui: PersistedUIState
+): Pick<
+  UISlice,
+  'acknowledgedAgentsByPaneKey' | 'activityClearedAtByPaneKey' | 'manuallyUnreadTurnsByPaneKey'
+> {
+  return {
+    acknowledgedAgentsByPaneKey: sanitizeAcknowledgedAgentsByPaneKey(
+      ui.acknowledgedAgentsByPaneKey
+    ),
+    activityClearedAtByPaneKey: sanitizeActivityClearedAtByPaneKey(ui.activityClearedAtByPaneKey),
+    manuallyUnreadTurnsByPaneKey: sanitizePaneKeyTimestampRecord(ui.manuallyUnreadTurnsByPaneKey)
+  }
+}
diff --git a/src/renderer/src/store/slices/ui/ui-slice-preference-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-preference-actions.ts
index 3859ebfc75a..971c64dfa52 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-preference-actions.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-preference-actions.ts
@@ -36,6 +36,9 @@ import {
 
 export function createUiPreferenceActions(set: UISliceSet, get: UISliceGet): Partial<UISlice> {
   return {
+    sidebarBody: 'workspaces',
+    setSidebarBody: (body) => set({ sidebarBody: body }),
+
     groupBy: 'repo',
     // Why: group keys are mode-specific, so clear collapsed state on mode switch — stale keys are meaningless and accumulate.
     setGroupBy: (g) => {
@@ -146,6 +149,28 @@ export function createUiPreferenceActions(set: UISliceSet, get: UISliceGet): Par
     filterRepoIds: [],
     setFilterRepoIds: (ids) => set({ filterRepoIds: ids }),
 
+    agentsVisibleHostIds: null,
+    setAgentsVisibleHostIds: (ids) => {
+      const agentsVisibleHostIds = normalizeVisibleExecutionHostIds(ids)
+      set({ agentsVisibleHostIds })
+      window.api.ui.set({ agentsVisibleHostIds }).catch(console.error)
+    },
+    agentsFilterRepoIds: [],
+    setAgentsFilterRepoIds: (ids) => {
+      set({ agentsFilterRepoIds: ids })
+      window.api.ui.set({ agentsFilterRepoIds: [...ids] }).catch(console.error)
+    },
+    agentsShowChildAgents: false,
+    setAgentsShowChildAgents: (v) => {
+      set({ agentsShowChildAgents: v })
+      window.api.ui.set({ agentsShowChildAgents: v }).catch(console.error)
+    },
+    agentsCompactMode: true,
+    setAgentsCompactMode: (v) => {
+      set({ agentsCompactMode: v })
+      window.api.ui.set({ agentsCompactMode: v }).catch(console.error)
+    },
+
     collapsedGroups: new Set<string>(),
     toggleCollapsedGroup: (key) =>
       set((s) => {
diff --git a/src/renderer/src/store/slices/ui/ui-slice-settings-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-settings-actions.ts
index 93a4d0069fb..c693c900c4a 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-settings-actions.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-settings-actions.ts
@@ -1,5 +1,7 @@
 import type { UISlice, UISliceGet, UISliceSet } from './ui-slice-contract'
 import { isSettingsNavigationTarget } from '../../../lib/settings-navigation-types'
+// Pure predicate over GlobalSettings; safe to share with the store layer.
+import { shouldShowAgentsSidebar } from '@/components/sidebar/agents-sidebar-visibility'
 
 export function createUiSettingsActions(set: UISliceSet, get: UISliceGet): Partial<UISlice> {
   return {
@@ -15,9 +17,10 @@ export function createUiSettingsActions(set: UISliceSet, get: UISliceGet): Parti
     },
     closeSettingsPage: () =>
       set((state) => {
+        // Agents graduated from experimentalActivity; match openActivityPage's gate.
         const previousView =
           state.previousViewBeforeSettings === 'activity' &&
-          state.settings?.experimentalActivity !== true
+          !shouldShowAgentsSidebar(state.settings)
             ? 'terminal'
             : state.previousViewBeforeSettings
         return { activeView: previousView }
diff --git a/src/renderer/src/store/slices/ui/ui-slice-surface-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-surface-actions.ts
index fb83ff6fc9b..26aab77d0cb 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-surface-actions.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-surface-actions.ts
@@ -143,8 +143,11 @@ export function createUiSurfaceActions(set: UISliceSet, _get: UISliceGet): Parti
 
     pendingRevealWorktree: null,
     pendingRevealSidebarRow: null,
+    // Why sidebarBody here: the worktree list (and its reveal consumer) is unmounted while the
+    // Agents body is showing, so a reveal that does not switch bodies silently no-ops.
     revealWorktreeInSidebar: (worktreeId, options) =>
       set({
+        sidebarBody: 'workspaces',
         pendingRevealWorktree: {
           worktreeId,
           ...(options?.executionHostId ? { executionHostId: options.executionHostId } : {}),
@@ -155,6 +158,7 @@ export function createUiSurfaceActions(set: UISliceSet, _get: UISliceGet): Parti
       }),
     revealSidebarRow: (rowKey, options) =>
       set({
+        sidebarBody: 'workspaces',
         pendingRevealSidebarRow: {
           rowKey,
           behavior: options?.behavior ?? 'smooth',
diff --git a/src/renderer/src/store/slices/ui/ui-slice-view-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-view-actions.ts
index 432572b799f..d61efbb598d 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-view-actions.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-view-actions.ts
@@ -1,10 +1,14 @@
 import type { UISlice, UISliceGet, UISliceSet } from './ui-slice-contract'
 import { rewindHistoryIndexPastView } from '../worktree-nav-history'
+// Pure predicate over GlobalSettings; safe to share with the store layer.
+import { shouldShowAgentsSidebar } from '@/components/sidebar/agents-sidebar-visibility'
 
 export function createUiViewActions(set: UISliceSet, get: UISliceGet): Partial<UISlice> {
   return {
     openActivityPage: () => {
-      if (get().settings?.experimentalActivity !== true) {
+      // Agents graduated from experimentalActivity; gate on the same visibility
+      // rule as the sidebar entry points so the view is reachable iff shown.
+      if (!shouldShowAgentsSidebar(get().settings)) {
         return
       }
       set((state) => ({
diff --git a/src/renderer/src/store/slices/worktrees/listing/detected-worktree-meta.ts b/src/renderer/src/store/slices/worktrees/listing/detected-worktree-meta.ts
index 64f4f4162ca..f2a5306e683 100644
--- a/src/renderer/src/store/slices/worktrees/listing/detected-worktree-meta.ts
+++ b/src/renderer/src/store/slices/worktrees/listing/detected-worktree-meta.ts
@@ -10,7 +10,10 @@ import {
 } from '../../../../../../shared/execution-host'
 import { parseWorkspaceKey } from '../../../../../../shared/workspace-scope'
 import { folderWorkspaceToWorktree } from '../../../../../../shared/folder-workspace-worktree'
-import { findIndexedWorktreeOwnerForHost } from '@/lib/worktree-runtime-owner-index'
+import {
+  findIndexedDetectedWorktrees,
+  findIndexedWorktreeOwnerForHost
+} from '@/lib/worktree-runtime-owner-index'
 import { findWorktreeById, withoutErasedRequiredWorktreeFields } from '../../worktree-helpers'
 import { worktreeMatchesHost } from './worktree-host-ownership'
 
@@ -99,16 +102,21 @@ export function findKnownWorktreeById(
   if (visible) {
     return visible
   }
-  for (const result of Object.values(state.detectedWorktreesByRepo)) {
-    const detected = result.worktrees.find(
-      (worktree) =>
-        worktree.id === worktreeId &&
-        (!executionHostId ||
-          worktreeMatchesHost(worktree, executionHostId, {
-            unhostedWorktreesMatchHost: executionHostId === LOCAL_EXECUTION_HOST_ID
-          }))
-    )
-    if (detected) {
+  // Why the index: this miss path runs per activity row for exactly the worktrees the
+  // feature targets (retained agents on deleted worktrees); the cached index replaces a
+  // full scan of every repo's detected worktrees. The index holds the same row objects,
+  // so the cast restores the listing's row type.
+  const detectedCandidates = findIndexedDetectedWorktrees(
+    state.detectedWorktreesByRepo,
+    worktreeId
+  ) as DetectedWorktreeListResult['worktrees']
+  for (const detected of detectedCandidates) {
+    if (
+      !executionHostId ||
+      worktreeMatchesHost(detected, executionHostId, {
+        unhostedWorktreesMatchHost: executionHostId === LOCAL_EXECUTION_HOST_ID
+      })
+    ) {
       return detected
     }
   }
diff --git a/src/renderer/src/store/slices/worktrees/teardown/worktree-purge-state.ts b/src/renderer/src/store/slices/worktrees/teardown/worktree-purge-state.ts
index 87becf6b343..618ae38815c 100644
--- a/src/renderer/src/store/slices/worktrees/teardown/worktree-purge-state.ts
+++ b/src/renderer/src/store/slices/worktrees/teardown/worktree-purge-state.ts
@@ -104,6 +104,8 @@ export function buildWorktreePurgeState(
       : {}),
     agentLaunchConfigByPaneKey: omitByPaneKeyTabPrefix(s.agentLaunchConfigByPaneKey),
     acknowledgedAgentsByPaneKey: omitByPaneKeyTabPrefix(s.acknowledgedAgentsByPaneKey),
+    activityClearedAtByPaneKey: omitByPaneKeyTabPrefix(s.activityClearedAtByPaneKey),
+    manuallyUnreadTurnsByPaneKey: omitByPaneKeyTabPrefix(s.manuallyUnreadTurnsByPaneKey),
     paneForegroundAgentByPaneKey: omitByPaneKeyTabPrefix(s.paneForegroundAgentByPaneKey),
     sleepingAgentSessionsByPaneKey: omitByPaneKeyTabPrefix(s.sleepingAgentSessionsByPaneKey),
     unreadTerminalTabs: omitByTabId(s.unreadTerminalTabs),
diff --git a/src/renderer/src/web/preload-api/web-agent-status-api.ts b/src/renderer/src/web/preload-api/web-agent-status-api.ts
index ed4636ab5fb..d7c9740018c 100644
--- a/src/renderer/src/web/preload-api/web-agent-status-api.ts
+++ b/src/renderer/src/web/preload-api/web-agent-status-api.ts
@@ -14,6 +14,8 @@ export function createWebAgentStatusApi(): Partial<PreloadApi> {
       onLegacyWorkerTerminalRecovery: () => noopUnsubscribe,
       getMigrationUnsupportedSnapshot: () => Promise.resolve([]),
       drop: () => {},
+      dropPersisted: () => {},
+      dropPersistedBatch: () => {},
       reconcileEndedProcess: () => {},
       dropByTabPrefix: () => {},
       retirePaneAuthority: () => {},
diff --git a/src/renderer/src/web/preload-api/web-preference-normalization.ts b/src/renderer/src/web/preload-api/web-preference-normalization.ts
index a5e99c34788..9ae3ad00d4a 100644
--- a/src/renderer/src/web/preload-api/web-preference-normalization.ts
+++ b/src/renderer/src/web/preload-api/web-preference-normalization.ts
@@ -68,7 +68,13 @@ export function mergeHostWebUIState(
     automationHostFilter: local.automationHostFilter,
     hideWorkspacesFromOtherDevices: local.hideWorkspacesFromOtherDevices === true,
     manualRepoOrder: local.manualRepoOrder,
-    workspaceHostOrder: local.workspaceHostOrder
+    workspaceHostOrder: local.workspaceHostOrder,
+    agentsVisibleHostIds: local.agentsVisibleHostIds,
+    agentsFilterRepoIds: local.agentsFilterRepoIds,
+    agentsShowChildAgents: local.agentsShowChildAgents,
+    agentsCompactMode: local.agentsCompactMode,
+    activityClearedAtByPaneKey: local.activityClearedAtByPaneKey,
+    manuallyUnreadTurnsByPaneKey: local.manuallyUnreadTurnsByPaneKey
   } satisfies Record<PairingLocalUiField, unknown> & Partial<PersistedUIState>
   return { ...mergeWebUIState(local, incoming), ...pinned }
 }
diff --git a/src/renderer/src/web/web-preload-api-ui.test.ts b/src/renderer/src/web/web-preload-api-ui.test.ts
index 9222fdbc42a..94e9ba8e1eb 100644
--- a/src/renderer/src/web/web-preload-api-ui.test.ts
+++ b/src/renderer/src/web/web-preload-api-ui.test.ts
@@ -464,13 +464,25 @@ describe('web UI preload API', () => {
     automationHostFilter: { kind: 'host', hostKey: 'browser-local-host-key' },
     hideWorkspacesFromOtherDevices: true,
     manualRepoOrder: [{ hostId: 'runtime:web-env-1', repoId: 'repo-b' }],
-    workspaceHostOrder: ['runtime:web-env-1', 'local']
+    workspaceHostOrder: ['runtime:web-env-1', 'local'],
+    agentsVisibleHostIds: ['runtime:web-env-1'],
+    agentsFilterRepoIds: ['repo-b'],
+    agentsShowChildAgents: true,
+    agentsCompactMode: false,
+    activityClearedAtByPaneKey: { 'tab-1:leaf-1': 123 },
+    manuallyUnreadTurnsByPaneKey: { 'tab-1:leaf-1': 321 }
   }
   const hostUiSamples: Record<PairingLocalUiField, unknown> = {
     automationHostFilter: { kind: 'all' },
     hideWorkspacesFromOtherDevices: false,
     manualRepoOrder: [{ hostId: 'local', repoId: 'repo-a' }],
-    workspaceHostOrder: ['local', 'ssh:box']
+    workspaceHostOrder: ['local', 'ssh:box'],
+    agentsVisibleHostIds: ['local'],
+    agentsFilterRepoIds: ['repo-a'],
+    agentsShowChildAgents: false,
+    agentsCompactMode: true,
+    activityClearedAtByPaneKey: { 'tab-2:leaf-2': 456 },
+    manuallyUnreadTurnsByPaneKey: { 'tab-2:leaf-2': 654 }
   }
 
   it.each(PAIRING_LOCAL_UI_FIELDS.map((field) => [field] as const))(
diff --git a/src/shared/agent-status-ipc-payload.ts b/src/shared/agent-status-ipc-payload.ts
index 6a469b31491..09d8eb284ac 100644
--- a/src/shared/agent-status-ipc-payload.ts
+++ b/src/shared/agent-status-ipc-payload.ts
@@ -51,6 +51,16 @@ export type AgentStatusIpcPayload = ParsedAgentStatusPayload & {
   restoredUnconfirmed?: boolean
 } & WithAgentStatusObservation
 
+/** Identity used by UI-only cleanup to evict exactly the status it cleared.
+ *  Deliberately minimal — receivedAt + stateStartedAt pin the exact event instance
+ *  (the same baseline the interrupt-inference guard uses). Renderer-enriched fields
+ *  (connectionId, worktreeId) diverge from main's cache and must not participate. */
+export type AgentStatusCacheIdentity = {
+  paneKey: string
+  receivedAt: number
+  stateStartedAt: number
+}
+
 /** Wire shape for ordinary pane teardown or a stamped SSH disconnect batch. */
 export type AgentStatusClearIpcPayload =
   | { paneKey: string }
diff --git a/src/shared/agent-status-types.ts b/src/shared/agent-status-types.ts
index 36bf7cbe09c..d2446051115 100644
--- a/src/shared/agent-status-types.ts
+++ b/src/shared/agent-status-types.ts
@@ -15,6 +15,7 @@ import { assertJsonTextStructureWithinLimits } from './json-text-structure-limit
 
 export { AGENT_STATUS_MAX_FIELD_LENGTH } from './agent-status-field-normalization'
 export type {
+  AgentStatusCacheIdentity,
   AgentStatusClearIpcPayload,
   AgentStatusIpcPayload,
   MigrationUnsupportedPtyEntry
diff --git a/src/shared/agents-sidebar-visibility.ts b/src/shared/agents-sidebar-visibility.ts
new file mode 100644
index 00000000000..c05f8e106ed
--- /dev/null
+++ b/src/shared/agents-sidebar-visibility.ts
@@ -0,0 +1,12 @@
+export type AgentsSidebarVisibilitySettings = {
+  showAgentsSidebar?: boolean
+}
+
+export function resolveAgentsSidebarVisible(
+  settings: Partial<AgentsSidebarVisibilitySettings> | null | undefined
+): boolean {
+  if (!settings) {
+    return true
+  }
+  return settings.showAgentsSidebar !== false
+}
diff --git a/src/shared/constants.ts b/src/shared/constants.ts
index 96c7901cc08..9d26b140dec 100644
--- a/src/shared/constants.ts
+++ b/src/shared/constants.ts
@@ -269,6 +269,10 @@ export function getDefaultUIState(): PersistedUIState {
     alwaysShowDefaultBranchWorkspace: true,
     showDotfilesByWorktree: {},
     filterRepoIds: [],
+    agentsVisibleHostIds: null,
+    agentsFilterRepoIds: [],
+    agentsShowChildAgents: false,
+    agentsCompactMode: true,
     collapsedGroups: [],
     uiZoomLevel: 0,
     editorFontZoomLevel: 0,
@@ -292,6 +296,8 @@ export function getDefaultUIState(): PersistedUIState {
     trustedOrcaHooks: {},
     setupScriptPromptDismissedRepoIds: [],
     acknowledgedAgentsByPaneKey: {},
+    activityClearedAtByPaneKey: {},
+    manuallyUnreadTurnsByPaneKey: {},
     setupGuideSidebarDismissed: false,
     setupGuideBrowserMilestoneMigrated: true,
     setupGuideBrowserMilestoneLegacyComplete: false,
diff --git a/src/shared/default-global-settings.ts b/src/shared/default-global-settings.ts
index 313e9fc6a9a..260fb5d6846 100644
--- a/src/shared/default-global-settings.ts
+++ b/src/shared/default-global-settings.ts
@@ -225,6 +225,7 @@ export function buildDefaultSettings(args: {
     // Why: off keeps the cosmetic overlay unmounted for users who never opt in.
     experimentalPet: false,
     experimentalActivity: false,
+    showAgentsSidebar: true,
     experimentalActivityDefaultedOffForAllUsers: true,
     experimentalTerminalAttention: false,
     experimentalAgentHibernation: false,
diff --git a/src/shared/global-settings-types.ts b/src/shared/global-settings-types.ts
index 49f9be8baad..f650e4f4a77 100644
--- a/src/shared/global-settings-types.ts
+++ b/src/shared/global-settings-types.ts
@@ -427,6 +427,12 @@ export type GlobalSettings = {
   experimentalActivity: boolean
   /** Experimental: pop-out Kanban dashboard for monitoring and opening agent terminals across worktrees. */
   experimentalAgentDashboardPopout?: boolean
+  /** Experimental: whether the Agents tab is shown in the left sidebar. Defaults on. */
+  showAgentsSidebar?: boolean
+  /** Set after the experimental Agents tab introduction has been acknowledged. */
+  agentsSidebarIntroShown?: boolean
+  /** True when the profile previously opted into the legacy experimental Agents view. */
+  agentsSidebarMigratedFromExperimental?: boolean
   /** How the Agent Dashboard opens: an in-window companion board or a separate pop-out window. Defaults to in-window. */
   experimentalAgentDashboardMode?: AgentDashboardMode
   /** Includes stale quiet agents as a fourth Agent Dashboard column. */
diff --git a/src/shared/pairing-local-ui-fields.test.ts b/src/shared/pairing-local-ui-fields.test.ts
index ab837782783..ffc7baafe07 100644
--- a/src/shared/pairing-local-ui-fields.test.ts
+++ b/src/shared/pairing-local-ui-fields.test.ts
@@ -9,7 +9,13 @@ describe('pairing-local UI fields', () => {
       'automationHostFilter',
       'hideWorkspacesFromOtherDevices',
       'manualRepoOrder',
-      'workspaceHostOrder'
+      'workspaceHostOrder',
+      'agentsVisibleHostIds',
+      'agentsFilterRepoIds',
+      'agentsShowChildAgents',
+      'agentsCompactMode',
+      'activityClearedAtByPaneKey',
+      'manuallyUnreadTurnsByPaneKey'
     ])
   })
 
diff --git a/src/shared/pairing-local-ui-fields.ts b/src/shared/pairing-local-ui-fields.ts
index 55865416c01..d925c3094d8 100644
--- a/src/shared/pairing-local-ui-fields.ts
+++ b/src/shared/pairing-local-ui-fields.ts
@@ -11,7 +11,14 @@ export const PAIRING_LOCAL_UI_FIELDS = [
   'automationHostFilter',
   'hideWorkspacesFromOtherDevices',
   'manualRepoOrder',
-  'workspaceHostOrder'
+  'workspaceHostOrder',
+  // Agent View filters and presentation belong to each client's host catalog and viewport.
+  'agentsVisibleHostIds',
+  'agentsFilterRepoIds',
+  'agentsShowChildAgents',
+  'agentsCompactMode',
+  'activityClearedAtByPaneKey',
+  'manuallyUnreadTurnsByPaneKey'
 ] as const satisfies readonly (keyof PersistedUIState)[]
 
 export type PairingLocalUiField = (typeof PAIRING_LOCAL_UI_FIELDS)[number]
diff --git a/src/shared/persisted-ui-state-types.ts b/src/shared/persisted-ui-state-types.ts
index 2d5f635477c..14e97bc34fc 100644
--- a/src/shared/persisted-ui-state-types.ts
+++ b/src/shared/persisted-ui-state-types.ts
@@ -73,6 +73,14 @@ export type PersistedUIState = {
   /** Per-worktree Explorer dotfile visibility. Missing entries inherit the default: show. */
   showDotfilesByWorktree?: Record<string, boolean>
   filterRepoIds: string[]
+  /** Agents-view host scope; deliberately separate from visibleWorkspaceHostIds so a monitoring surface never inherits nav filters silently. `null` = all hosts. */
+  agentsVisibleHostIds?: VisibleWorkspaceHostIds
+  /** Agents-view project filter; empty = all projects. Separate from filterRepoIds (workspace nav). */
+  agentsFilterRepoIds?: string[]
+  /** Agents-view: include child (orchestration-dispatched) agent threads. Absent means off. */
+  agentsShowChildAgents?: boolean
+  /** Agents-view compact thread rows. Absent means on. */
+  agentsCompactMode?: boolean
   collapsedGroups: string[]
   uiZoomLevel: number
   editorFontZoomLevel: number
@@ -120,6 +128,10 @@ export type PersistedUIState = {
   updateReassuranceSeen?: boolean
   /** Per-paneKey "row visited" timestamps that mute seen inline-agent rows; persisted because rows survive restart, else acked rows return bold. Renderer-owned via ui:set. */
   acknowledgedAgentsByPaneKey?: Record<string, number>
+  /** Per-paneKey "Clear completed" cutoffs hiding activity events stamped at or before the cutoff; persisted so cleared rows stay cleared across restart. Renderer-owned via ui:set. */
+  activityClearedAtByPaneKey?: Record<string, number>
+  /** Per-paneKey turn stamps the user explicitly marked unread; persisted so a manual unread survives restart the way acks and cutoffs do. Renderer-owned via ui:set. */
+  manuallyUnreadTurnsByPaneKey?: Record<string, number>
   /** User-hidden setup-guide sidebar entry; a reversible declutter pref (Help menu stays available), not completion. */
   setupGuideSidebarDismissed?: boolean
   /** One-shot marker for the browser setup-guide milestone; profiles missing it are evaluated once in the renderer (completion needs runtime probes). */
diff --git a/src/shared/telemetry-property-schemas.ts b/src/shared/telemetry-property-schemas.ts
index 3346ea73320..b1e8d2ed573 100644
--- a/src/shared/telemetry-property-schemas.ts
+++ b/src/shared/telemetry-property-schemas.ts
@@ -192,6 +192,7 @@ export const SETTINGS_CHANGED_WHITELIST = [
   'experimentalNativeChat',
   'experimentalStructuredNativeChat',
   'experimentalActivity',
+  'showAgentsSidebar',
   'experimentalAgentDashboardPopout',
   'experimentalTerminalAttention',
   'experimentalAgentHibernation',
diff --git a/tests/e2e/activity-agent-pane-isolation.spec.ts b/tests/e2e/activity-agent-pane-isolation.spec.ts
index fe6600f3f76..817044bd127 100644
--- a/tests/e2e/activity-agent-pane-isolation.spec.ts
+++ b/tests/e2e/activity-agent-pane-isolation.spec.ts
@@ -16,12 +16,6 @@ type SeededActivityThread = {
   prompt: string
 }
 
-type ActivityPaneVisibility = {
-  slotId: string | null
-  allLeafIds: string[]
-  visibleLeafIds: string[]
-}
-
 type ActivePaneSelection = {
   activeWorktreeId: string | null
   activeGroupId: string | null
@@ -38,7 +32,7 @@ type SplitGroupTerminal = {
 }
 
 function agentsSidebarButton(page: Page) {
-  return page.getByRole('button', { name: /^Agents(?:\s+\d+)?$/ }).first()
+  return page.getByRole('radio', { name: /^Agents$/ }).first()
 }
 
 async function seedActivityThread(
@@ -113,40 +107,6 @@ async function seedActivityThreadsForSplitPanes(
   return [first, second]
 }
 
-async function readActivityPaneVisibility(page: Page): Promise<ActivityPaneVisibility> {
-  return page.evaluate(() => {
-    const slot = document.querySelector<HTMLElement>(
-      '[data-activity-terminal-slot-id]:not([aria-hidden="true"])'
-    )
-    if (!slot) {
-      return { slotId: null, allLeafIds: [], visibleLeafIds: [] }
-    }
-
-    const hasInlineDisplayNoneBetween = (element: HTMLElement, root: HTMLElement): boolean => {
-      let current: HTMLElement | null = element
-      while (current) {
-        if (current.style.display === 'none') {
-          return true
-        }
-        if (current === root) {
-          return false
-        }
-        current = current.parentElement
-      }
-      return false
-    }
-
-    const panes = Array.from(slot.querySelectorAll<HTMLElement>('[data-leaf-id]'))
-    return {
-      slotId: slot.dataset.activityTerminalSlotId ?? null,
-      allLeafIds: panes.map((pane) => pane.dataset.leafId ?? ''),
-      visibleLeafIds: panes
-        .filter((pane) => !hasInlineDisplayNoneBetween(pane, slot))
-        .map((pane) => pane.dataset.leafId ?? '')
-    }
-  })
-}
-
 async function enableInlineAgentCards(page: Page): Promise<void> {
   await page.evaluate(() => {
     const store = window.__store
@@ -164,9 +124,12 @@ async function enableInlineAgentCards(page: Page): Promise<void> {
 
 async function enableActivityAgentsView(page: Page): Promise<void> {
   await page.evaluate(async () => {
-    const settings = await window.api.settings.set({ experimentalActivity: true })
-    // Why: these specs exercise the experimental Agents page. E2E profiles use
-    // production defaults, where the sidebar entry is hidden unless enabled.
+    // Why: the Agents tab is on by default, but a fresh profile opens the intro popover
+    // over it; stamping it as shown keeps the toggle clickable without dismissing it first.
+    const settings = await window.api.settings.set({
+      showAgentsSidebar: true,
+      agentsSidebarIntroShown: true
+    })
     window.__store?.setState({ settings })
   })
 }
@@ -267,7 +230,7 @@ test.describe('Activity Agent Pane Isolation', () => {
     await waitForPaneCount(orcaPage, 1, 30_000)
   })
 
-  test('selecting agent rows isolates the matching split pane by stable leaf id', async ({
+  test('selecting agent rows focuses the matching split pane by stable leaf id', async ({
     orcaPage
   }) => {
     await splitActiveTerminalPane(orcaPage, 'vertical')
@@ -281,87 +244,27 @@ test.describe('Activity Agent Pane Isolation', () => {
 
     await orcaPage.getByRole('button').filter({ hasText: first.prompt }).first().click()
     await expect
-      .poll(async () => readActivityPaneVisibility(orcaPage), {
+      .poll(async () => readActivePaneSelection(orcaPage), {
         timeout: 10_000,
-        message: 'Activity did not isolate the first selected split pane'
+        message: 'Agents sidebar row did not focus the first selected split pane'
       })
       .toMatchObject({
-        allLeafIds: expect.arrayContaining([first.leafId, second.leafId]),
-        visibleLeafIds: [first.leafId]
+        activeTabId: snapshot.tabId,
+        activeLeafId: first.leafId
       })
 
     await orcaPage.getByRole('button').filter({ hasText: second.prompt }).first().click()
     await expect
-      .poll(async () => readActivityPaneVisibility(orcaPage), {
+      .poll(async () => readActivePaneSelection(orcaPage), {
         timeout: 10_000,
-        message: 'Activity did not switch isolation to the second selected split pane'
+        message: 'Agents sidebar row did not focus the second selected split pane'
       })
       .toMatchObject({
-        allLeafIds: expect.arrayContaining([first.leafId, second.leafId]),
-        visibleLeafIds: [second.leafId]
+        activeTabId: snapshot.tabId,
+        activeLeafId: second.leafId
       })
   })
 
-  test('acknowledged stable pane keys clear the Agents unread badge', async ({ orcaPage }) => {
-    await splitActiveTerminalPane(orcaPage, 'vertical')
-    await waitForPaneCount(orcaPage, 2)
-    const snapshot = await waitForPaneIdentitySnapshot(orcaPage, 2)
-    // Why: useAutoAckViewedAgent (App.tsx) auto-acknowledges the agent on the
-    // store's *active* visible terminal leaf the instant its status lands, which
-    // clears the unread badge before we can assert it (flaky on focused xvfb CI
-    // windows). Seed on the non-active split pane — auto-ack only ever targets the
-    // active leaf — so the badge stays unread until the explicit acknowledgeAgents()
-    // call under test.
-    const activeLeafId = await orcaPage.evaluate(
-      (tabId) => window.__store?.getState().terminalLayoutsByTabId[tabId]?.activeLeafId ?? null,
-      snapshot.tabId
-    )
-    const targetPane =
-      snapshot.panes.find((pane) => pane.leafId !== activeLeafId) ?? snapshot.panes[0]
-    if (!targetPane) {
-      throw new Error('Activity acknowledgement test needs a split pane')
-    }
-    const now = Date.now()
-    const thread: SeededActivityThread = {
-      paneKey: `${snapshot.tabId}:${targetPane.leafId}`,
-      leafId: targetPane.leafId,
-      prompt: `ACTIVITY_ACK_STABLE_PANE_${now}`
-    }
-
-    await orcaPage.evaluate(() => {
-      const store = window.__store
-      if (!store) {
-        throw new Error('window.__store is not available')
-      }
-      const state = store.getState()
-      for (const worktree of Object.values(state.worktreesByRepo).flat()) {
-        state.markWorktreeVisited(worktree.id)
-      }
-    })
-
-    await seedActivityThread(
-      orcaPage,
-      thread,
-      'Codex acknowledged pane',
-      'blocked',
-      'Waiting for acknowledgement migration coverage.',
-      now - 5_000
-    )
-
-    await expect(agentsSidebarButton(orcaPage)).toHaveAccessibleName(/^Agents\s+1$/)
-
-    await orcaPage.evaluate((paneKey) => {
-      const store = window.__store
-      if (!store) {
-        throw new Error('window.__store is not available')
-      }
-      store.getState().acknowledgeAgents([paneKey])
-    }, thread.paneKey)
-
-    await expect(agentsSidebarButton(orcaPage)).toHaveAccessibleName(/^Agents$/)
-    await expect(orcaPage.getByRole('button', { name: /^Agents\s+1$/ })).toHaveCount(0)
-  })
-
   test('workspace card agent rows focus the matching terminal split pane', async ({ orcaPage }) => {
     await splitActiveTerminalPane(orcaPage, 'vertical')
     await waitForPaneCount(orcaPage, 2)

From 6c66487fca0ba5afa8c26fe86527a17c95c62a8d Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 11:20:15 -0700
Subject: [PATCH 52/92] ci: checkout PR head for reusable E2E (#18230)

---
 .github/workflows/pr.yml                     | 3 +++
 config/scripts/pr-e2e-gate-contract.test.mjs | 1 +
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index c17ad60d5d3..50062161da6 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -897,6 +897,9 @@ jobs:
       contents: read
     uses: ./.github/workflows/e2e.yml
     with:
+      # The synthetic pull-request merge ref can disappear while this reusable
+      # workflow is queued. The head SHA is immutable and works for every PR.
+      ref: ${{ github.event.pull_request.head.sha }}
       test_files: ${{ needs.e2e-paths.outputs.test_files }}
       ssh_source_changed: ${{ needs.e2e-paths.outputs.ssh_source_changed }}
 
diff --git a/config/scripts/pr-e2e-gate-contract.test.mjs b/config/scripts/pr-e2e-gate-contract.test.mjs
index 232780c6941..ceac6b8cc6e 100644
--- a/config/scripts/pr-e2e-gate-contract.test.mjs
+++ b/config/scripts/pr-e2e-gate-contract.test.mjs
@@ -114,6 +114,7 @@ describe('PR E2E gate contract', () => {
     expect(prWorkflow.jobs['e2e-paths'].outputs.test_files).toBe(
       '${{ steps.filter.outputs.test_files }}'
     )
+    expect(prWorkflow.jobs.e2e.with.ref).toBe('${{ github.event.pull_request.head.sha }}')
     expect(prWorkflow.jobs.e2e.with.test_files).toBe('${{ needs.e2e-paths.outputs.test_files }}')
   })
 

From 616fa751da7790afb6c152e45beeb4b0b46a47d3 Mon Sep 17 00:00:00 2001
From: Brennan Benson <79079362+brennanb2025@users.noreply.github.com>
Date: Wed, 2 Sep 2026 11:20:53 -0700
Subject: [PATCH 53/92] revert(native-chat): drop the speculative Fable
 model-switch detections (#18215)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Both changes shipped in #18055 were written against strings never observed
in a real session, and neither fixed a reported problem. Guessing at agent
output we have not seen is how the picker got a row that silently no-ops.

Fable consent detection is removed outright. It watched the session for
"Fable N uses usage credits and needs a one-time consent" and answered
`interaction-required`. No consent prompt appeared in any validation run —
the test account had already consented — so the matched wording was never
confirmed. With the detector gone nothing produces `interaction-required`,
so the outcome leaves the union and its unreachable handler goes with it.
A real consent prompt now reports the switch as unverified, which is the
honest failure mode for output we cannot recognize.

The weekly usage scope goes back to exact `display_name === 'fable'`. It
had been widened to `/^fable\b/` against a hypothetical rename of
Anthropic's own usage window; the API still reports "Fable", so the match
was insurance against a scenario with no evidence behind it.

Tests covering the removed behavior are deleted rather than rewritten,
including the two pre-existing `interaction-required` cases that asserted
the terminal is revealed.

The disabled-row filter from #18055 is deliberately untouched.

Claude-Session: https://claude.ai/code/session_01SJy4XGrdre6YaU1wYNKak4

Co-authored-by: Merge Sim <sim@local>
---
 .../claude-fetcher-fable-usage.test.ts        | 45 -------------
 .../rate-limits/claude-oauth-usage-request.ts |  6 +-
 .../native-chat/NativeChatComposer.test.tsx   | 31 +--------
 .../claude-model-switch-confirmation.test.ts  | 63 -------------------
 .../claude-model-switch-confirmation.ts       | 22 +------
 .../native-chat-pty-session-options.test.ts   | 22 -------
 .../native-chat-session-option-apply.ts       |  6 --
 7 files changed, 4 insertions(+), 191 deletions(-)

diff --git a/src/main/rate-limits/claude-fetcher-fable-usage.test.ts b/src/main/rate-limits/claude-fetcher-fable-usage.test.ts
index 50617d95bb4..2a84cc4f2af 100644
--- a/src/main/rate-limits/claude-fetcher-fable-usage.test.ts
+++ b/src/main/rate-limits/claude-fetcher-fable-usage.test.ts
@@ -144,51 +144,6 @@ describe('fetchClaudeRateLimits', () => {
     expect(fetchViaPty).not.toHaveBeenCalled()
   })
 
-  it('maps a scoped Fable window whose display name carries a point release', async () => {
-    const configDir = '/Users/test/.claude'
-    const authPreparation: ClaudeRuntimeAuthPreparation = {
-      configDir,
-      envPatch: { CLAUDE_CONFIG_DIR: configDir },
-      stripAuthEnv: false,
-      provenance: 'managed:account-1'
-    }
-    vi.mocked(readActiveClaudeKeychainCredentialsStrict).mockResolvedValueOnce(
-      JSON.stringify({ claudeAiOauth: { accessToken: 'oauth-token' } })
-    )
-    netFetchMock.mockResolvedValueOnce(
-      new Response(
-        JSON.stringify({
-          five_hour: { utilization: 36 },
-          seven_day: { utilization: 73 },
-          // Discriminating: a passing scope match must beat this fallback.
-          fable_weekly: { utilization: 12 },
-          limits: [
-            {
-              kind: 'weekly_scoped',
-              percent: 64,
-              resets_at: '2026-07-17T20:00:00.099908+00:00',
-              is_active: true,
-              scope: { model: { display_name: 'Fable 5.1' } }
-            }
-          ]
-        }),
-        { status: 200 }
-      )
-    )
-
-    await expect(
-      fetchClaudeRateLimits({ authPreparation, allowUsagePanelSupplement: true })
-    ).resolves.toMatchObject({
-      provider: 'claude',
-      status: 'ok',
-      fableWeekly: {
-        usedPercent: 64,
-        resetsAt: Date.parse('2026-07-17T20:00:00.099908+00:00')
-      }
-    })
-    expect(fetchViaPty).not.toHaveBeenCalled()
-  })
-
   it('surfaces inactive scoped Fable usage over the legacy OAuth fallback', async () => {
     const configDir = '/Users/test/.claude'
     const authPreparation: ClaudeRuntimeAuthPreparation = {
diff --git a/src/main/rate-limits/claude-oauth-usage-request.ts b/src/main/rate-limits/claude-oauth-usage-request.ts
index e29bef5f48e..9565a064514 100644
--- a/src/main/rate-limits/claude-oauth-usage-request.ts
+++ b/src/main/rate-limits/claude-oauth-usage-request.ts
@@ -32,17 +32,13 @@ async function ensureProxyFromEnvironment(): Promise<void> {
   }).catch(() => {})
 }
 
-// Why: the scope name carries the shipped version once a point release exists
-// ("Fable 5.1"), so exact equality would drop the window.
-const FABLE_SCOPE_RE = /^fable\b/
-
 function mapFableWeeklyWindow(data: OAuthUsageResponse): RateLimitWindow | null {
   const scoped = Array.isArray(data.limits)
     ? data.limits.find(
         (limit) =>
           limit?.kind === 'weekly_scoped' &&
           Number.isFinite(limit.percent) &&
-          FABLE_SCOPE_RE.test(limit.scope?.model?.display_name?.trim().toLowerCase() ?? '')
+          limit.scope?.model?.display_name?.trim().toLowerCase() === 'fable'
       )
     : undefined
   return (
diff --git a/src/renderer/src/components/native-chat/NativeChatComposer.test.tsx b/src/renderer/src/components/native-chat/NativeChatComposer.test.tsx
index be54ac6ac00..b1cf1a5879e 100644
--- a/src/renderer/src/components/native-chat/NativeChatComposer.test.tsx
+++ b/src/renderer/src/components/native-chat/NativeChatComposer.test.tsx
@@ -27,10 +27,10 @@ const mocks = vi.hoisted(() => ({
     sessionOptionsSnapshot?: SessionOptionDescriptor[]
     attachDisabled?: boolean
   } | null,
-  modelSwitchOutcome: 'applied' as 'applied' | 'rejected' | 'interaction-required' | 'unknown',
+  modelSwitchOutcome: 'applied' as 'applied' | 'rejected' | 'unknown',
   confirmationObserver: null as {
     ready: Promise<void>
-    result: Promise<'applied' | 'rejected' | 'interaction-required' | 'unknown'>
+    result: Promise<'applied' | 'rejected' | 'unknown'>
     arm: ReturnType<typeof vi.fn>
     startDetection: ReturnType<typeof vi.fn>
     dispose: ReturnType<typeof vi.fn>
@@ -731,33 +731,6 @@ describe('NativeChatComposer', () => {
     expect(onSwitchToTerminal).not.toHaveBeenCalled()
   })
 
-  it('reveals Claude interaction only when the model switch needs user input', async () => {
-    mocks.sendHandle.settleAfterMs = 0
-    mocks.modelSwitchOutcome = 'interaction-required'
-    const onSwitchToTerminal = vi.fn()
-    render(
-      <NativeChatComposer
-        terminalTabId="tab-1"
-        paneKey="tab-1:leaf-1"
-        targetPtyId="pty-1"
-        agent="claude"
-        onSwitchToTerminal={onSwitchToTerminal}
-      />
-    )
-
-    await act(async () => {
-      await mocks.fieldProps?.sessionOptionsSurface?.setOption('model', 'fable')
-    })
-
-    expect(mocks.sendNativeChatMessageVerified).toHaveBeenCalledWith(
-      {},
-      'pty-1',
-      '/model fable',
-      expect.any(AbortSignal)
-    )
-    expect(onSwitchToTerminal).toHaveBeenCalledOnce()
-  })
-
   it('types the Codex picker command and switches to the terminal', async () => {
     mocks.sendHandle.settleAfterMs = 0
     const onSwitchToTerminal = vi.fn()
diff --git a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.test.ts b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.test.ts
index c0fb5d3aa3d..5697dc3d2be 100644
--- a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.test.ts
+++ b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.test.ts
@@ -138,69 +138,6 @@ describe('Claude model switch confirmation detection', () => {
     await expect(observer.result).resolves.toBe('rejected')
   })
 
-  it('requests interaction for Fable one-time usage-credit consent', async () => {
-    const dataObserver = { current: (_data: string): void => {} }
-    const observer = createClaudeModelSwitchConfirmationObserver({
-      ptyId: 'pty-1',
-      settings: {},
-      expectedModelLabel: 'Fable 5',
-      subscribeToData: (watcher) => {
-        dataObserver.current = watcher
-        return vi.fn(() => {})
-      },
-      timeoutMs: 100
-    })
-
-    await observer.ready
-    observer.arm()
-    dataObserver.current('Fable 5 uses usage credits and needs a one-time consent — ')
-    dataObserver.current('pick Fable from /model in an interactive session to set it up')
-
-    await expect(observer.result).resolves.toBe('interaction-required')
-  })
-
-  it('requests interaction for a Fable point-release consent prompt', async () => {
-    const dataObserver = { current: (_data: string): void => {} }
-    const observer = createClaudeModelSwitchConfirmationObserver({
-      ptyId: 'pty-1',
-      settings: {},
-      expectedModelLabel: 'Fable 5.1',
-      subscribeToData: (watcher) => {
-        dataObserver.current = watcher
-        return vi.fn(() => {})
-      },
-      timeoutMs: 100
-    })
-
-    await observer.ready
-    observer.arm()
-    // Only the versioned consent line: the generic "pick Fable from /model"
-    // sentence must not be what carries this case.
-    dataObserver.current('Fable 5.1 uses usage credits and needs a one-time consent')
-
-    await expect(observer.result).resolves.toBe('interaction-required')
-  })
-
-  it('requests interaction for a versioned Fable switch prompt', async () => {
-    const dataObserver = { current: (_data: string): void => {} }
-    const observer = createClaudeModelSwitchConfirmationObserver({
-      ptyId: 'pty-1',
-      settings: {},
-      expectedModelLabel: 'Fable 5.1',
-      subscribeToData: (watcher) => {
-        dataObserver.current = watcher
-        return vi.fn(() => {})
-      },
-      timeoutMs: 100
-    })
-
-    await observer.ready
-    observer.arm()
-    dataObserver.current('Switch to \u001b[1mFable 5.1\u001b[0m? This model uses usage credits.')
-
-    await expect(observer.result).resolves.toBe('interaction-required')
-  })
-
   it('reports unknown when the PTY observer cannot be established', async () => {
     const observer = createClaudeModelSwitchConfirmationObserver({
       ptyId: 'pty-1',
diff --git a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts
index e97daf9cd23..eedf8506e1c 100644
--- a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts
+++ b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts
@@ -10,7 +10,7 @@ const MAX_OBSERVED_BYTES = 64 * 1024
 
 type SubscribeToData = (watcher: (data: string) => void) => Promise<() => void> | (() => void)
 
-export type ClaudeModelSwitchOutcome = 'applied' | 'rejected' | 'interaction-required' | 'unknown'
+export type ClaudeModelSwitchOutcome = 'applied' | 'rejected' | 'unknown'
 
 export type ClaudeModelSwitchConfirmationObserver = {
   ready: Promise<void>
@@ -62,22 +62,6 @@ function hasClaudeModelSwitchRejection(buffer: string): boolean {
   return compactTerminalText(buffer).includes('keptmodelas')
 }
 
-// Why: compactTerminalText only strips whitespace, so a point release keeps its
-// dot ("fable5.1uses..."). The version is optional because the CLI's own label
-// for the newest Fable carries no number at all.
-const FABLE_VERSION = String.raw`fable(?:\d+(?:\.\d+)*)?`
-const FABLE_CONSENT_RE = new RegExp(`${FABLE_VERSION}usesusagecreditsandneedsaone-timeconsent`)
-const FABLE_SWITCH_PROMPT_RE = new RegExp(`switchto${FABLE_VERSION}\\?`)
-
-function hasClaudeModelSwitchInteraction(buffer: string): boolean {
-  const text = compactTerminalText(buffer)
-  return (
-    FABLE_CONSENT_RE.test(text) ||
-    text.includes('pickfablefrom/modelinaninteractivesessiontosetitup') ||
-    (FABLE_SWITCH_PROMPT_RE.test(text) && text.includes('usagecredits'))
-  )
-}
-
 function subscribeToClaudeModelSwitchData(args: {
   ptyId: string
   settings: Pick<GlobalSettings, 'activeRuntimeEnvironmentId'> | null | undefined
@@ -156,10 +140,6 @@ export function createClaudeModelSwitchConfirmationObserver(args: {
       finish('rejected')
       return
     }
-    if (hasClaudeModelSwitchInteraction(observed)) {
-      finish('interaction-required')
-      return
-    }
     if (!confirmationSubmitted && hasClaudeModelSwitchConfirmation(observed)) {
       confirmationSubmitted = true
       try {
diff --git a/src/renderer/src/components/native-chat/native-chat-pty-session-options.test.ts b/src/renderer/src/components/native-chat/native-chat-pty-session-options.test.ts
index e653a29258f..9dae22da197 100644
--- a/src/renderer/src/components/native-chat/native-chat-pty-session-options.test.ts
+++ b/src/renderer/src/components/native-chat/native-chat-pty-session-options.test.ts
@@ -159,28 +159,6 @@ describe('native chat PTY session options', () => {
     })
   })
 
-  it('reveals the terminal only when Claude actually requires model-switch interaction', async () => {
-    seedNativeChatAppliedSessionOptions('pty-1', 'claude', { model: 'sonnet' })
-    const dispatch = vi.fn().mockResolvedValue({ outcome: 'interaction-required' })
-    const onAgentPicker = vi.fn()
-    const surface = createNativeChatPtySessionOptions({
-      agent: 'claude',
-      scopeKey: 'pty-1',
-      mode: 'live',
-      dispatchCommand: dispatch,
-      onAgentPicker
-    })!
-
-    const result = await surface.setOption('model', 'haiku')
-
-    expect(dispatch).toHaveBeenCalledWith('/model haiku', {
-      detectAgentInteraction: 'claude-model-switch-confirmation',
-      expectedChoiceLabel: 'Haiku'
-    })
-    expect(onAgentPicker).toHaveBeenCalledOnce()
-    expect(result.snapshot[0]).toMatchObject({ valueSource: 'unknown' })
-  })
-
   it('keeps the prior model and persistence when Claude rejects the switch', async () => {
     seedNativeChatAppliedSessionOptions('pty-1', 'claude', {
       model: 'fable',
diff --git a/src/renderer/src/components/native-chat/native-chat-session-option-apply.ts b/src/renderer/src/components/native-chat/native-chat-session-option-apply.ts
index 5585512633a..7e31e1a17cc 100644
--- a/src/renderer/src/components/native-chat/native-chat-session-option-apply.ts
+++ b/src/renderer/src/components/native-chat/native-chat-session-option-apply.ts
@@ -171,12 +171,6 @@ function applyDispatchOutcome(
     ctx.publish()
     throw new Error('Could not verify the model change; open the terminal to check.')
   }
-  if (dispatchResult?.outcome === 'interaction-required') {
-    ctx.clearModelTruth()
-    const snapshot = ctx.publish()
-    ctx.onAgentPicker?.()
-    return { snapshot }
-  }
   return null
 }
 

From 1d94ebee3f65940e1a6d5d608c6ffe84fc17733e Mon Sep 17 00:00:00 2001
From: Brennan Benson <79079362+brennanb2025@users.noreply.github.com>
Date: Wed, 2 Sep 2026 12:49:15 -0700
Subject: [PATCH 54/92] fix(agents): stop a deeper vendor helper from stealing
 a pane's agent identity (#18062)

* fix(agents): keep outer agent identity over vendor helpers

* fix(agents): preserve outer identity across relay scans

---------

Co-authored-by: Merge Sim <sim@local>
---
 .../__fixtures__/real-agent-rows.json.gz      | Bin 0 -> 569 bytes
 .../agent-foreground-process-batch.ts         |  27 ++----
 ...agent-foreground-process-real-rows.test.ts |  37 ++++++++
 .../providers/agent-foreground-process.ts     |  36 ++++----
 src/relay/pty-shell-utils.ts                  |  22 ++---
 .../foreground-process-selection.test.ts      |  51 +++++++++++
 src/shared/foreground-process-selection.ts    |  80 ++++++++++++++++++
 7 files changed, 201 insertions(+), 52 deletions(-)
 create mode 100644 src/main/providers/__fixtures__/real-agent-rows.json.gz
 create mode 100644 src/main/providers/agent-foreground-process-real-rows.test.ts
 create mode 100644 src/shared/foreground-process-selection.test.ts
 create mode 100644 src/shared/foreground-process-selection.ts

diff --git a/src/main/providers/__fixtures__/real-agent-rows.json.gz b/src/main/providers/__fixtures__/real-agent-rows.json.gz
new file mode 100644
index 0000000000000000000000000000000000000000..3bd62f9eda36e9bbf3a7e3c07ad27cca35f5c0e9
GIT binary patch
literal 569
zcmV-90>=FxiwFP!000026U~>)PQx$|Mfd%RC|e3?V#g0wd;+375JIJ~N+F4(rUfL#
zzvHBjlys<v#zZWts?*V&>pNq|xf^)ihxvG(Kbfg~>0f&OG@Yyx<qy~4@=2xX^*k~E
z(1;7N2`}_pX+n4PuWgO`pQ4?+jyB<FFI+AsHFI40d(o-RvPoX$`^7>}Rau_b_54lB
z=kOSo!&m}g&wjveJV5Yd$Y34^c(-TPWtw_8EO(6MIIM7t6+3MGeLvU;IG9SEsCQ^6
zNlZC*D4X0)L%G&sw~NFw0&p!A_F=^1IEa(c>A2%v(S^#Ze5f&$#uVF_Cbv^#c5>`y
zQOY2*T0*R59T1QEHB;F<pF?iNjD%RXn%quq<wmy`=wcbXsyxw)pb9)>I$5Qv46bHc
z&r%hvC7(~zdGNT(lU?K@doB?^8?7;*wY3DR&pm0C64o03KdnLvQ0uoP;E&>}9(ITq
z`UM(cCMkM^o7_$#TuZT=#U!}dTOzED{YJAKj9CF$B*N`=!ERBL>*fYk)kAnC!U*!J
zrN(|R8Uqk8G7=yxf}W5!)+w&);jj{q9b>Q(g$+k|>@5Ntj!;+%JzQJfJG+J$9P1Y+
z`ovM@Vs%XqO+6e|;;}c~S1Ee!AqC&s{tU<a-4OgYBh$TiT#{Z_CxwI6H5-CU)DbSh
zJMiiI(A2|WBgfbXhb4}&1c#-Lu@r}m9b;o0mN~{U9F{xAavWAT#zHR;gZsf3ZgH#V
HWfTAaXyXo&

literal 0
HcmV?d00001

diff --git a/src/main/providers/agent-foreground-process-batch.ts b/src/main/providers/agent-foreground-process-batch.ts
index ea89005d87f..ac9223a955f 100644
--- a/src/main/providers/agent-foreground-process-batch.ts
+++ b/src/main/providers/agent-foreground-process-batch.ts
@@ -1,16 +1,15 @@
 import {
   isAgentForegroundWrapperProcess,
-  isExpectedAgentProcess,
-  recognizeAgentProcessFromCommandLine
+  isExpectedAgentProcess
 } from '../../shared/agent-process-recognition'
 import { getFirstCommandToken } from '../../shared/command-token-scanner'
 import { resolveOuterWrapperForegroundProcess } from '../../shared/foreground-wrapper-agent'
+import { selectForegroundProcessCandidate } from '../../shared/foreground-process-selection'
 import type { ForegroundProcessEvidence } from '../../shared/foreground-process-evidence'
 import {
   buildProcessTableIndex,
   getStrictProcessTableSnapshot,
   lookupProcessTableIndex,
-  scoreForegroundCandidateRow,
   type ProcessTableIndex,
   type ProcessTableIndexStats,
   type ProcessTableRow
@@ -126,23 +125,15 @@ export function resolveAgentForegroundProcessesFromIndex(
     if (wrapperFallback && candidates.length !== 1) {
       return { available: true, processName: null }
     }
-    let bestCandidate: (ProcessTableRow & { depth: number }) | null = null
-    let bestName: ReturnType<typeof recognizeAgentProcessFromCommandLine> = null
-    for (const candidate of candidates) {
-      const recognized = recognizeAgentProcessFromCommandLine(candidate.command)
-      if (
-        recognized &&
-        (bestCandidate === null ||
-          scoreForegroundCandidateRow(candidate) > scoreForegroundCandidateRow(bestCandidate))
-      ) {
-        bestCandidate = candidate
-        bestName = recognized
-      }
-    }
-    if (bestCandidate && bestName) {
+    const selected = selectForegroundProcessCandidate(candidates, allCandidates)
+    if (selected) {
       return {
         available: true,
-        processName: resolveOuterWrapperForegroundProcess(bestName, bestCandidate, allCandidates)
+        processName: resolveOuterWrapperForegroundProcess(
+          selected.recognized,
+          selected.candidate,
+          allCandidates
+        )
       }
     }
     return { available: true, processName: null }
diff --git a/src/main/providers/agent-foreground-process-real-rows.test.ts b/src/main/providers/agent-foreground-process-real-rows.test.ts
new file mode 100644
index 00000000000..fd86e207398
--- /dev/null
+++ b/src/main/providers/agent-foreground-process-real-rows.test.ts
@@ -0,0 +1,37 @@
+import { readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { gunzipSync } from 'node:zlib'
+import { describe, expect, it } from 'vitest'
+import type { ProcessTableRow } from '../../shared/process-table-snapshot'
+import { resolveAgentForegroundProcessFromPs } from './agent-foreground-process'
+
+type CapturedRun = {
+  agent: string
+  shellPid: number
+  rows: ProcessTableRow[]
+}
+
+describe('real foreground process captures', () => {
+  it('resolves all six agents, including omp over its deeper vendor helpers', () => {
+    const captured = JSON.parse(
+      gunzipSync(readFileSync(join(__dirname, '__fixtures__', 'real-agent-rows.json.gz'))).toString(
+        'utf8'
+      )
+    ) as CapturedRun[]
+
+    expect(captured).toHaveLength(6)
+    expect(
+      captured.map(({ agent, shellPid, rows }) => ({
+        agent,
+        processName: resolveAgentForegroundProcessFromPs(rows, shellPid)
+      }))
+    ).toEqual([
+      { agent: 'claude', processName: 'claude' },
+      { agent: 'codex', processName: 'codex' },
+      { agent: 'opencode', processName: 'opencode' },
+      { agent: 'gemini', processName: 'gemini' },
+      { agent: 'grok', processName: 'grok' },
+      { agent: 'omp', processName: 'omp' }
+    ])
+  })
+})
diff --git a/src/main/providers/agent-foreground-process.ts b/src/main/providers/agent-foreground-process.ts
index d171e39a18e..d244e0100dc 100644
--- a/src/main/providers/agent-foreground-process.ts
+++ b/src/main/providers/agent-foreground-process.ts
@@ -11,6 +11,7 @@ import {
   type AgentForegroundResolutionOptions
 } from './windows-agent-foreground-process'
 import { isShellProcess } from '../../shared/shell-process-detection'
+import { selectForegroundProcessCandidate } from '../../shared/foreground-process-selection'
 
 export type { AgentForegroundResolutionOptions } from './windows-agent-foreground-process'
 export {
@@ -120,13 +121,6 @@ export async function confirmShellForegroundProcess(
   }
 }
 
-function candidateScore(row: ProcessTableRow & { depth: number }): number {
-  // Why: foreground descendants carry `+` in `ps stat` on Unix PTYs. Prefer
-  // them, then prefer leaf/deeper wrappers so `node /path/bin/codex` beats the
-  // parent shell but still lets the native child confirm the same identity.
-  return (row.stat.includes('+') ? 10_000 : 0) + row.depth
-}
-
 export async function resolveAgentForegroundProcess(
   shellPid: number | null | undefined,
   fallbackProcess: string | null,
@@ -191,30 +185,30 @@ export async function resolveAgentForegroundProcessWithAvailability(
   }
 }
 
-function resolveAgentForegroundProcessFromPs(
+export function resolveAgentForegroundProcessFromPs(
   rows: ProcessTableRow[],
   shellPid: number
 ): string | null {
   const shellRow = rows.find((row) => row.pid === shellPid)
-  const candidates = collectDescendants(rows, shellPid).sort(
-    (a, b) => candidateScore(b) - candidateScore(a)
-  )
+  const candidates = collectDescendants(rows, shellPid)
   // Why: `+` in `ps stat` marks the process holding the terminal foreground.
   // The root shell can hold it after Ctrl-Z, so use the whole PTY tree as the
   // foreground gate; otherwise a stopped agent child still masquerades as live.
   const foregroundIsKnown =
     shellRow?.stat.includes('+') === true ||
     candidates.some((candidate) => candidate.stat.includes('+'))
-  for (const candidate of candidates) {
-    if (foregroundIsKnown && !candidate.stat.includes('+')) {
-      continue
-    }
-    const recognized = recognizeAgentProcessFromCommandLine(candidate.command)
-    if (recognized) {
-      // Why: return the outer wrapper (omp) rather than the deeper wrapped child
-      // (pi) of a shell→omp→pi tree — see resolveOuterWrapperForegroundProcess.
-      return resolveOuterWrapperForegroundProcess(recognized, candidate, candidates)
-    }
+  const foregroundCandidates = foregroundIsKnown
+    ? candidates.filter((candidate) => candidate.stat.includes('+'))
+    : candidates
+  // Keep the complete process tree for ancestry checks. A recognized agent can
+  // sit above a non-foreground helper before another recognized process; the
+  // helper is filtered from selection but must remain traversable.
+  const ancestryCandidates = shellRow ? [{ ...shellRow, depth: 0 }, ...candidates] : candidates
+  const selected = selectForegroundProcessCandidate(foregroundCandidates, ancestryCandidates)
+  if (selected) {
+    // Why: return the outer wrapper (omp) rather than the deeper wrapped child
+    // (pi) of a shell→omp→pi tree — see resolveOuterWrapperForegroundProcess.
+    return resolveOuterWrapperForegroundProcess(selected.recognized, selected.candidate, candidates)
   }
   return null
 }
diff --git a/src/relay/pty-shell-utils.ts b/src/relay/pty-shell-utils.ts
index accccb9e702..e06edaeabc7 100644
--- a/src/relay/pty-shell-utils.ts
+++ b/src/relay/pty-shell-utils.ts
@@ -6,17 +6,16 @@ import { promisify } from 'node:util'
 import {
   isAgentForegroundWrapperProcess,
   isExpectedAgentProcess,
-  recognizeAgentProcess,
-  recognizeAgentProcessFromCommandLine
+  recognizeAgentProcess
 } from '../shared/agent-process-recognition'
 import { getFirstCommandToken } from '../shared/command-token-scanner'
 import {
   getProcessTableIndex,
   getProcessTableSnapshot,
-  scoreForegroundCandidateRow,
   type ProcessTableIndex,
   type ProcessTableRow
 } from '../shared/process-table-snapshot'
+import { selectForegroundProcessCandidate } from '../shared/foreground-process-selection'
 import {
   resolveOuterWrapperForegroundProcess,
   shouldInspectOuterWrapperForegroundProcess
@@ -240,9 +239,7 @@ function getForegroundProcessNameFromProcessTable(
   // snapshot no longer each rebuild the parent/child map over every row.
   const index = getProcessTableIndex(rows)
   const root = index.byPid.get(pid)
-  const candidates = collectDescendants(index, pid).sort(
-    (a, b) => scoreForegroundCandidateRow(b) - scoreForegroundCandidateRow(a)
-  )
+  const candidates = collectDescendants(index, pid)
   // Why: SSH relays do not have the daemon's async wrapper cache. Inspect the
   // remote process tree so node/python agent entrypoints become real agents.
   const foregroundIsKnown =
@@ -264,13 +261,12 @@ function getForegroundProcessNameFromProcessTable(
   ) {
     return null
   }
-  for (const candidate of inspectionCandidates) {
-    const recognized = recognizeAgentProcessFromCommandLine(candidate.command)
-    if (recognized) {
-      // Why: return the outer wrapper (omp) rather than the deeper wrapped child
-      // (pi) of a shell→omp→pi tree — see resolveOuterWrapperForegroundProcess.
-      return resolveOuterWrapperForegroundProcess(recognized, candidate, candidates)
-    }
+  const ancestryCandidates = root ? [{ ...root, depth: 0 }, ...candidates] : candidates
+  const selected = selectForegroundProcessCandidate(inspectionCandidates, ancestryCandidates)
+  if (selected) {
+    // Why: return the outer wrapper (omp) rather than a deeper recognized helper
+    // in the same process lineage.
+    return resolveOuterWrapperForegroundProcess(selected.recognized, selected.candidate, candidates)
   }
   return null
 }
diff --git a/src/shared/foreground-process-selection.test.ts b/src/shared/foreground-process-selection.test.ts
new file mode 100644
index 00000000000..5fc45b186fb
--- /dev/null
+++ b/src/shared/foreground-process-selection.test.ts
@@ -0,0 +1,51 @@
+import { describe, expect, it } from 'vitest'
+import { selectForegroundProcessCandidate } from './foreground-process-selection'
+
+describe('selectForegroundProcessCandidate', () => {
+  it('keeps a recognized ancestor over a different agent helper below a non-agent', () => {
+    const candidates = [
+      { pid: 101, ppid: 100, depth: 1, stat: 'S+', command: 'omp' },
+      { pid: 102, ppid: 101, depth: 2, stat: 'S+', command: 'vendor-ui' },
+      { pid: 103, ppid: 102, depth: 3, stat: 'S+', command: 'codex' }
+    ]
+
+    expect(selectForegroundProcessCandidate(candidates)).toMatchObject({
+      candidate: { pid: 101 },
+      recognized: { agent: 'omp' }
+    })
+  })
+
+  it('traverses non-foreground helpers when checking ancestry', () => {
+    const all = [
+      { pid: 101, ppid: 100, depth: 1, stat: 'S+', command: 'omp' },
+      { pid: 102, ppid: 101, depth: 2, stat: 'S', command: 'vendor-helper' },
+      { pid: 103, ppid: 102, depth: 3, stat: 'S+', command: 'codex' }
+    ]
+
+    expect(selectForegroundProcessCandidate([all[0], all[2]], all)).toMatchObject({
+      candidate: { pid: 101 },
+      recognized: { agent: 'omp' }
+    })
+  })
+
+  it('refuses different recognized agents on sibling lineages', () => {
+    const candidates = [
+      { pid: 101, ppid: 100, depth: 1, stat: 'S+', command: 'codex' },
+      { pid: 102, ppid: 100, depth: 1, stat: 'S+', command: 'gemini' }
+    ]
+
+    expect(selectForegroundProcessCandidate(candidates)).toBeNull()
+  })
+
+  it('keeps the deepest process when one recognized agent owns the lineage', () => {
+    const candidates = [
+      { pid: 101, ppid: 100, depth: 1, stat: 'S+', command: 'node /opt/bin/codex' },
+      { pid: 102, ppid: 101, depth: 2, stat: 'S+', command: '/opt/vendor/bin/codex' }
+    ]
+
+    expect(selectForegroundProcessCandidate(candidates)).toMatchObject({
+      candidate: { pid: 102 },
+      recognized: { agent: 'codex' }
+    })
+  })
+})
diff --git a/src/shared/foreground-process-selection.ts b/src/shared/foreground-process-selection.ts
new file mode 100644
index 00000000000..294bb40e5d9
--- /dev/null
+++ b/src/shared/foreground-process-selection.ts
@@ -0,0 +1,80 @@
+import {
+  recognizeAgentProcessFromCommandLine,
+  type RecognizedAgentProcess
+} from './agent-process-recognition'
+
+export type ForegroundProcessCandidate = {
+  pid: number
+  ppid: number
+  command: string
+  depth: number
+  stat?: string
+}
+
+export type SelectedForegroundProcess = {
+  candidate: ForegroundProcessCandidate
+  recognized: RecognizedAgentProcess
+}
+
+/**
+ * Select a foreground agent without letting a vendor helper steal an outer
+ * agent's identity when both names occur in one process lineage.
+ */
+export function selectForegroundProcessCandidate(
+  candidates: readonly ForegroundProcessCandidate[],
+  ancestryCandidates: readonly ForegroundProcessCandidate[] = candidates
+): SelectedForegroundProcess | null {
+  const recognized = candidates.flatMap((candidate) => {
+    const agent = recognizeAgentProcessFromCommandLine(candidate.command)
+    return agent ? [{ candidate, recognized: agent }] : []
+  })
+  if (recognized.length === 0) {
+    return null
+  }
+
+  const agentNames = new Set(recognized.map(({ recognized: agent }) => agent.agent))
+  if (agentNames.size > 1) {
+    const candidatesByPid = new Map(
+      ancestryCandidates.map((candidate) => [candidate.pid, candidate])
+    )
+    const outer = [...recognized].sort(
+      (left, right) => left.candidate.depth - right.candidate.depth
+    )[0]
+    if (
+      !outer ||
+      !recognized.every((entry) =>
+        isAncestorOrSelf(outer.candidate, entry.candidate, candidatesByPid)
+      )
+    ) {
+      // Distinct sibling agents do not provide a trustworthy identity.
+      return null
+    }
+    return outer
+  }
+
+  return recognized.reduce((best, current) =>
+    foregroundCandidateScore(current.candidate) > foregroundCandidateScore(best.candidate)
+      ? current
+      : best
+  )
+}
+
+function foregroundCandidateScore(candidate: ForegroundProcessCandidate): number {
+  return (candidate.stat?.includes('+') ? 10_000 : 0) + candidate.depth
+}
+
+function isAncestorOrSelf(
+  ancestor: ForegroundProcessCandidate,
+  descendant: ForegroundProcessCandidate,
+  candidatesByPid: ReadonlyMap<number, ForegroundProcessCandidate>
+): boolean {
+  let currentPid = descendant.pid
+  while (currentPid !== ancestor.pid) {
+    const current = candidatesByPid.get(currentPid)
+    if (!current) {
+      return false
+    }
+    currentPid = current.ppid
+  }
+  return true
+}

From 104f9655e43540dacdf3c5189681e06a280ec64e Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 12:53:48 -0700
Subject: [PATCH 55/92] perf(git): answer remote-URL questions from one
 subprocess, not one per remote (#18158)

Four copies of the same loop ran `git remote` and then a serial
`git remote get-url <name>` per remote to answer "which remote has this
URL". On a repo with 58 remotes that is 59 subprocesses -- measured at
1083 ms -- for one question, and worktree create asks it several times.
`git remote -v` answers for every remote from one child, reporting the
same insteadOf-expanded first fetch URL `get-url` prints.

The batched `cat-file --batch-check` branch-conflict probe decides from
stdout, but its WSL route was unfenced, so a login-shell fallback printed
the distro banner onto the stream it parses. That broke the
one-line-per-ref contract, made every batch undecided, and fell straight
back to one `show-ref` per remote -- the cost the batch exists to remove.

Measured at 58 remotes / 4346 branches, spawns and wall time:
  push-target remote scan      59 -> 1  (1083 ms -> 8 ms)
  branch-conflict probe        60 -> 3  (984 ms -> 43 ms)
  configured push target      123 -> 6  (2707 ms -> 157 ms)
---
 src/main/git/exact-ref-probe.ts               |   6 +-
 src/main/git/remote.test.ts                   |  59 ++++++
 src/main/git/remote.ts                        |  38 ++--
 ...repo-branch-conflict-batched-probe.test.ts | 102 ++++++++++
 src/main/git/repo-branch-conflict.ts          |  12 +-
 src/main/git/upstream.test.ts                 |  10 +
 .../worktree-push-target-reconciliation.ts    |  25 +--
 .../worktree-push-target-remote-scan.test.ts  | 178 ++++++++++++++++++
 .../ipc/worktree-push-target-setup.test.ts    |  10 +
 src/main/ipc/worktree-push-target-setup.ts    |  53 ++----
 ...remote-push-target-materialization.test.ts |  11 ++
 src/relay/git-handler-push-target.test.ts     |  11 ++
 src/relay/git-handler-push-target.ts          |  33 ++--
 src/shared/git-binary-compatibility.test.ts   |  36 ++++
 .../git-configured-branch-target.test.ts      | 175 +++++++++++++++++
 src/shared/git-configured-branch-target.ts    |  34 ++--
 src/shared/git-remote-url-index.test.ts       | 112 +++++++++++
 src/shared/git-remote-url-index.ts            |  64 +++++++
 18 files changed, 841 insertions(+), 128 deletions(-)
 create mode 100644 src/main/git/repo-branch-conflict-batched-probe.test.ts
 create mode 100644 src/main/ipc/worktree-push-target-remote-scan.test.ts
 create mode 100644 src/shared/git-configured-branch-target.test.ts
 create mode 100644 src/shared/git-remote-url-index.test.ts
 create mode 100644 src/shared/git-remote-url-index.ts

diff --git a/src/main/git/exact-ref-probe.ts b/src/main/git/exact-ref-probe.ts
index 96bb421b8e8..ce89fac3f69 100644
--- a/src/main/git/exact-ref-probe.ts
+++ b/src/main/git/exact-ref-probe.ts
@@ -157,7 +157,11 @@ export async function probeAnyExactRefBatched(
   } catch {
     return { found: false, unknown: true }
   }
-  const lines = stdout.split('\n').filter((line) => line.trim().length > 0)
+  // Trim per line so a CRLF-translating host's `\r` does not become part of the type.
+  const lines = stdout
+    .split('\n')
+    .map((line) => line.trim())
+    .filter((line) => line.length > 0)
   // One line per input, in order; a short read means the batch never answered for the rest.
   if (lines.length !== safeRefs.length) {
     return { found: false, unknown: true }
diff --git a/src/main/git/remote.test.ts b/src/main/git/remote.test.ts
index 11ac2c21264..feb237eb18a 100644
--- a/src/main/git/remote.test.ts
+++ b/src/main/git/remote.test.ts
@@ -193,6 +193,17 @@ describe('git remote operations', () => {
       if (args[0] === 'remote' && args[1] === 'get-url' && args[2] === 'pr-pynickle-orca') {
         return { stdout: 'https://github.com/pynickle/orca.git\n', stderr: '' }
       }
+      if (args[0] === 'remote' && args[1] === '-v') {
+        return {
+          stdout: [
+            'origin\thttps://github.com/stablyai/orca.git (fetch)',
+            'origin\thttps://github.com/stablyai/orca.git (push)',
+            'pr-pynickle-orca\thttps://github.com/pynickle/orca.git (fetch)',
+            'pr-pynickle-orca\thttps://github.com/pynickle/orca.git (push)'
+          ].join('\n'),
+          stderr: ''
+        }
+      }
       if (args[0] === 'remote') {
         return { stdout: 'origin\npr-pynickle-orca\n', stderr: '' }
       }
@@ -207,6 +218,54 @@ describe('git remote operations', () => {
     )
   })
 
+  // Regression: normalizing a URL-valued push remote used to run `git remote` and then a
+  // serial `git remote get-url` per remote -- 59 subprocesses on a 58-remote repo.
+  it('normalizes a URL-valued push remote from one remote table read at 58 remotes', async () => {
+    const remotes = [
+      { name: 'origin', url: 'https://github.com/stablyai/orca.git' },
+      ...Array.from({ length: 56 }, (_, index) => ({
+        name: `pr-user${index}-orca`,
+        url: `https://github.com/user${index}/orca.git`
+      })),
+      { name: 'pr-pynickle-orca', url: 'https://github.com/pynickle/orca.git' }
+    ]
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'symbolic-ref') {
+        return { stdout: 'imp/chinese-translation\n', stderr: '' }
+      }
+      if (args[0] === 'config' && args.includes('branch.imp/chinese-translation.remote')) {
+        return { stdout: 'https://github.com/pynickle/orca.git\n', stderr: '' }
+      }
+      if (args[0] === 'config' && args.includes('branch.imp/chinese-translation.merge')) {
+        return { stdout: 'refs/heads/imp/chinese-translation\n', stderr: '' }
+      }
+      if (args[0] === 'config') {
+        throw new Error(`config key is not set: ${args.join(' ')}`)
+      }
+      if (args[0] === 'remote' && args[1] === '-v') {
+        return {
+          stdout: remotes
+            .flatMap(({ name, url }) => [`${name}\t${url} (fetch)`, `${name}\t${url} (push)`])
+            .join('\n'),
+          stderr: ''
+        }
+      }
+      if (args[0] === 'remote') {
+        throw new Error(`unexpected remote scan: ${args.join(' ')}`)
+      }
+      return { stdout: '', stderr: '' }
+    })
+
+    await gitPush('/repo', false)
+
+    const remoteReads = gitExecFileAsyncMock.mock.calls.filter(([args]) => args[0] === 'remote')
+    expect(remoteReads.map(([args]) => args)).toEqual([['remote', '-v']])
+    expect(gitExecFileAsyncMock).toHaveBeenLastCalledWith(
+      ['push', '--set-upstream', 'pr-pynickle-orca', 'HEAD:imp/chinese-translation'],
+      { cwd: '/repo' }
+    )
+  })
+
   it('uses an explicit push target even when it differs from the local branch name', async () => {
     gitExecFileAsyncMock
       .mockResolvedValueOnce({ stdout: '', stderr: '' })
diff --git a/src/main/git/remote.ts b/src/main/git/remote.ts
index 2baf3b77137..20cf8415d04 100644
--- a/src/main/git/remote.ts
+++ b/src/main/git/remote.ts
@@ -4,6 +4,7 @@ import {
 } from '../../shared/git-remote-error'
 import { resolveEffectiveGitUpstream } from '../../shared/git-effective-upstream'
 import { gitRefTargetsBranchOnRemote } from '../../shared/git-remote-branch-name'
+import { findGitRemoteNameByFetchUrl } from '../../shared/git-remote-url-index'
 import type { GitPushTarget } from '../../shared/worktree/types'
 import type { GitRuntimeOptions } from './git-runtime-options'
 import { gitOptionsForWorktree } from './git-runtime-options'
@@ -84,6 +85,8 @@ type ConfiguredPushRemote = {
   branchRemote: string | null
 }
 
+// One `git remote -v` instead of `git remote` plus a serial `git remote get-url`
+// per remote; both print the same insteadOf-expanded fetch URL.
 async function findRemoteNameForUrl(
   worktreePath: string,
   remoteUrl: string,
@@ -91,30 +94,13 @@ async function findRemoteNameForUrl(
 ): Promise<string | null> {
   try {
     const { stdout } = await gitExecFileAsync(
-      ['remote'],
+      ['remote', '-v'],
       gitOptionsForWorktree(worktreePath, options)
     )
-    const remotes = stdout
-      .split(/\r?\n/)
-      .map((line) => line.trim())
-      .filter(Boolean)
-    for (const remoteName of remotes) {
-      try {
-        const { stdout: urlStdout } = await gitExecFileAsync(
-          ['remote', 'get-url', remoteName],
-          gitOptionsForWorktree(worktreePath, options)
-        )
-        if (urlStdout.trim() === remoteUrl) {
-          return remoteName
-        }
-      } catch {
-        // Ignore a remote that disappeared or has no fetch URL.
-      }
-    }
+    return findGitRemoteNameByFetchUrl(stdout, (candidateUrl) => candidateUrl === remoteUrl)
   } catch {
     return null
   }
-  return null
 }
 
 async function normalizePushRemote(
@@ -141,11 +127,17 @@ async function getConfiguredPushRemote(
   if (!remote) {
     return null
   }
+  const normalizedRemote = await normalizePushRemote(worktreePath, remote, options)
+  // The two usually name the same URL; resolving it twice reads the remote table twice.
+  if (!branchRemote) {
+    return { remote: normalizedRemote, branchRemote: null }
+  }
   return {
-    remote: await normalizePushRemote(worktreePath, remote, options),
-    branchRemote: branchRemote
-      ? await normalizePushRemote(worktreePath, branchRemote, options)
-      : null
+    remote: normalizedRemote,
+    branchRemote:
+      branchRemote === remote
+        ? normalizedRemote
+        : await normalizePushRemote(worktreePath, branchRemote, options)
   }
 }
 
diff --git a/src/main/git/repo-branch-conflict-batched-probe.test.ts b/src/main/git/repo-branch-conflict-batched-probe.test.ts
new file mode 100644
index 00000000000..e6e672c65a2
--- /dev/null
+++ b/src/main/git/repo-branch-conflict-batched-probe.test.ts
@@ -0,0 +1,102 @@
+// Why: the batched `cat-file --batch-check` conflict probe decides from stdout, so a
+// WSL login-shell fallback that prints the distro banner onto that stream desynchronizes
+// the one-line-per-ref contract. Every batch then came back undecided and fell through to
+// one `show-ref` subprocess per remote -- the cost the batch exists to remove. These tests
+// pin the fence request and the resulting subprocess count at 58 remotes.
+
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const { gitExecFileAsyncMock } = vi.hoisted(() => ({ gitExecFileAsyncMock: vi.fn() }))
+
+vi.mock('./runner', () => ({ gitExecFileAsync: gitExecFileAsyncMock }))
+
+import { getBranchConflictKind } from './repo-branch-conflict'
+
+const REMOTES = Array.from({ length: 58 }, (_, index) => `r${index}`)
+const BRANCH = 'user/feature'
+const WSL_BANNER =
+  'Welcome to Ubuntu 24.04.1 LTS (GNU/Linux 5.15.167.4-microsoft-standard-WSL2 x86_64)\n' +
+  'To run a command as administrator (user "root"), use "sudo <command>".\n'
+
+type GitExecOptions = { stdin?: string; captureWslLoginShellOutput?: boolean }
+
+/**
+ * Stand-in for a WSL-routed runner: the login shell prepends its banner to stdout unless
+ * the caller asked for the fenced form, which slices the payload back out.
+ */
+function installLoginShellRunner(): { argv: string[][] } {
+  const argv: string[][] = []
+  gitExecFileAsyncMock.mockImplementation(async (args: string[], options: GitExecOptions = {}) => {
+    argv.push(args)
+    if (args[0] === 'rev-parse') {
+      throw new Error('local branch is absent')
+    }
+    if (args[0] === 'remote') {
+      return { stdout: `${WSL_BANNER}${REMOTES.join('\n')}\n`, stderr: '' }
+    }
+    if (args[0] === 'show-ref') {
+      throw Object.assign(new Error('missing ref'), { code: 1, stderr: '' })
+    }
+    if (args[0] === 'cat-file') {
+      const payload = `${(options.stdin ?? '')
+        .split('\n')
+        .filter(Boolean)
+        .map((ref) => `${ref} missing`)
+        .join('\n')}\n`
+      return {
+        stdout: options.captureWslLoginShellOutput ? payload : `${WSL_BANNER}${payload}`,
+        stderr: ''
+      }
+    }
+    throw new Error(`unexpected git command: ${args.join(' ')}`)
+  })
+  return { argv }
+}
+
+function countSubcommand(argv: readonly string[][], subcommand: string): number {
+  return argv.filter((args) => args[0] === subcommand).length
+}
+
+describe('getBranchConflictKind batched remote probe', () => {
+  beforeEach(() => {
+    gitExecFileAsyncMock.mockReset()
+  })
+
+  it('asks the WSL login shell to fence the batch payload it parses', async () => {
+    installLoginShellRunner()
+
+    await getBranchConflictKind('/repo', BRANCH)
+
+    const batchCall = gitExecFileAsyncMock.mock.calls.find(([args]) => args[0] === 'cat-file')
+    expect(batchCall?.[1]).toMatchObject({ captureWslLoginShellOutput: true })
+  })
+
+  it('answers from one batched subprocess instead of one show-ref per remote', async () => {
+    const { argv } = installLoginShellRunner()
+
+    await expect(getBranchConflictKind('/repo', BRANCH)).resolves.toBeNull()
+
+    expect(countSubcommand(argv, 'cat-file')).toBe(1)
+    expect(countSubcommand(argv, 'show-ref')).toBe(0)
+  })
+
+  it('still falls back to per-ref probes when the batch itself fails', async () => {
+    gitExecFileAsyncMock.mockImplementation(async (args: string[]) => {
+      if (args[0] === 'rev-parse') {
+        throw new Error('local branch is absent')
+      }
+      if (args[0] === 'remote') {
+        return { stdout: `${REMOTES.join('\n')}\n`, stderr: '' }
+      }
+      if (args[0] === 'cat-file') {
+        throw new Error('cat-file is unavailable on this host')
+      }
+      if (args[0] === 'show-ref') {
+        return { stdout: '', stderr: '' }
+      }
+      throw new Error(`unexpected git command: ${args.join(' ')}`)
+    })
+
+    await expect(getBranchConflictKind('/repo', BRANCH)).resolves.toBe('remote')
+  })
+})
diff --git a/src/main/git/repo-branch-conflict.ts b/src/main/git/repo-branch-conflict.ts
index c799d3770be..5c6e03b94b0 100644
--- a/src/main/git/repo-branch-conflict.ts
+++ b/src/main/git/repo-branch-conflict.ts
@@ -147,10 +147,12 @@ export function getBranchConflictKind(
   const execOptions = gitExecOptions(path, options)
   const runLocalGit = (
     argv: string[],
-    commandOptions?: ExactRefProbeExecOptions & { stdin?: string }
+    commandOptions?: ExactRefProbeExecOptions & { stdin?: string },
+    captureWslLoginShellOutput = false
   ): Promise<{ stdout: string }> =>
     gitExecFileAsync(argv, {
       ...execOptions,
+      ...(captureWslLoginShellOutput ? { captureWslLoginShellOutput: true } : {}),
       ...(commandOptions?.maxBuffer === undefined ? {} : { maxBuffer: commandOptions.maxBuffer }),
       ...(commandOptions?.timeoutMs === undefined ? {} : { timeout: commandOptions.timeoutMs }),
       ...(commandOptions?.stdin === undefined ? {} : { stdin: commandOptions.stdin })
@@ -160,7 +162,13 @@ export function getBranchConflictKind(
     branchName,
     allowedBaseRef,
     {},
-    (argv, commandOptions) => runLocalGit(argv, commandOptions)
+    // Why fenced: the batch decides from stdout, and a WSL login-shell fallback writes
+    // the distro's rc/motd banner to that same stream. The extra lines break the
+    // one-line-per-ref contract, so every batch came back undecided and fell through to
+    // one `show-ref` subprocess per remote -- the exact cost the batch exists to remove.
+    // `show-ref --verify --quiet` prints nothing and is read by exit code, so it needs
+    // no fence; the capture wrapper preserves the payload's exit status either way.
+    (argv, commandOptions) => runLocalGit(argv, commandOptions, true)
   )
 }
 
diff --git a/src/main/git/upstream.test.ts b/src/main/git/upstream.test.ts
index 701808a8a31..b7644ad5543 100644
--- a/src/main/git/upstream.test.ts
+++ b/src/main/git/upstream.test.ts
@@ -363,6 +363,16 @@ describe('getUpstreamStatus', () => {
       if (args[0] === 'remote' && args[1] === 'get-url' && args[2] === 'pr-pynickle-orca') {
         return Promise.resolve({ stdout: 'https://github.com/pynickle/orca.git\n' })
       }
+      if (args[0] === 'remote' && args[1] === '-v') {
+        return Promise.resolve({
+          stdout: [
+            'origin\thttps://github.com/stablyai/orca.git (fetch)',
+            'origin\thttps://github.com/stablyai/orca.git (push)',
+            'pr-pynickle-orca\thttps://github.com/pynickle/orca.git (fetch)',
+            'pr-pynickle-orca\thttps://github.com/pynickle/orca.git (push)'
+          ].join('\n')
+        })
+      }
       if (args[0] === 'remote') {
         return Promise.resolve({ stdout: 'origin\npr-pynickle-orca\n' })
       }
diff --git a/src/main/ipc/worktree-push-target-reconciliation.ts b/src/main/ipc/worktree-push-target-reconciliation.ts
index e59da7bdfe7..b28ae36b6f4 100644
--- a/src/main/ipc/worktree-push-target-reconciliation.ts
+++ b/src/main/ipc/worktree-push-target-reconciliation.ts
@@ -13,7 +13,7 @@ import { listWorktrees } from '../git/worktree'
 import type { SshGitProvider } from '../providers/ssh-git-provider'
 import type { GitPushTarget } from '../../shared/worktree/types'
 import { WORKTREE_ID_SEPARATOR, worktreeIdComparisonKey } from '../../shared/worktree/id'
-import { iterateProcessOutputLines } from '../../shared/process-output-field-scanner'
+import { parseGitRemoteFetchUrls } from '../../shared/git-remote-url-index'
 import {
   findWorktreeMetaReferencingRemote,
   hasBranchConfigUsingRemote,
@@ -44,26 +44,9 @@ async function listPrRemoteCandidates(
   } catch {
     return []
   }
-  const candidates = new Map<string, string>()
-  for (const line of iterateProcessOutputLines(stdout)) {
-    const parsed = parseRemoteVerboseLine(line)
-    if (parsed?.direction === 'fetch' && isOrcaGeneratedPrRemoteName(parsed.name)) {
-      candidates.set(parsed.name, parsed.url)
-    }
-  }
-  return [...candidates.entries()].map(([name, url]) => ({ name, url }))
-}
-
-function parseRemoteVerboseLine(
-  line: string
-): { name: string; url: string; direction: 'fetch' | 'push' } | null {
-  const tabIndex = line.indexOf('\t')
-  if (tabIndex === -1) {
-    return null
-  }
-  const name = line.slice(0, tabIndex)
-  const match = /^(.*) \((fetch|push)\)$/.exec(line.slice(tabIndex + 1).trim())
-  return match ? { name, url: match[1], direction: match[2] as 'fetch' | 'push' } : null
+  return [...parseGitRemoteFetchUrls(stdout)]
+    .filter(([name]) => isOrcaGeneratedPrRemoteName(name))
+    .map(([name, url]) => ({ name, url }))
 }
 
 async function shouldReclaimPrRemote(
diff --git a/src/main/ipc/worktree-push-target-remote-scan.test.ts b/src/main/ipc/worktree-push-target-remote-scan.test.ts
new file mode 100644
index 00000000000..f2392c5e71a
--- /dev/null
+++ b/src/main/ipc/worktree-push-target-remote-scan.test.ts
@@ -0,0 +1,178 @@
+// Why: `findRemoteForUrl` used to run `git remote` and then one serial
+// `git remote get-url` per remote. These tests pin both halves of the fix: the
+// subprocess count at 58 remotes, and result-for-result parity with the old scan
+// across the remote shapes a real repo produces.
+
+import { describe, expect, it } from 'vitest'
+import { parseGitHubOwnerRepo } from '../github/gh-utils'
+import { findRemoteForUrl } from './worktree-push-target-setup'
+import type { GitRemoteExec } from './worktree-push-target-cleanup'
+
+const SSH_FORK = 'git@github.com:contributor/orca.git'
+const HTTPS_FORK = 'https://github.com/contributor/orca.git'
+const GITLAB_FORK = 'https://gitlab.com/contributor/orca.git'
+const UPSTREAM = 'https://github.com/stablyai/orca.git'
+
+type RemoteRow = { name: string; fetchUrl: string; pushUrl?: string }
+
+type CountingExec = GitRemoteExec & { spawns: string[][] }
+
+function makeExec(remotes: readonly RemoteRow[]): CountingExec {
+  const spawns: string[][] = []
+  const exec: GitRemoteExec = async (args: string[]) => {
+    spawns.push(args)
+    if (args[0] === 'remote' && args.length === 1) {
+      return { stdout: `${remotes.map((remote) => remote.name).join('\n')}\n` }
+    }
+    if (args[0] === 'remote' && args[1] === '-v') {
+      return {
+        stdout: remotes
+          .flatMap((remote) => [
+            `${remote.name}\t${remote.fetchUrl} (fetch)`,
+            `${remote.name}\t${remote.pushUrl ?? remote.fetchUrl} (push)`
+          ])
+          .join('\n')
+      }
+    }
+    if (args[0] === 'remote' && args[1] === 'get-url') {
+      const match = remotes.find((remote) => remote.name === args[2])
+      if (!match) {
+        throw new Error(`No such remote ${args[2]}`)
+      }
+      return { stdout: `${match.fetchUrl}\n` }
+    }
+    throw new Error(`unexpected git command: ${args.join(' ')}`)
+  }
+  return Object.assign(exec, { spawns })
+}
+
+/** The pre-fix scan, kept as the oracle the batched form must reproduce exactly. */
+async function findRemoteForUrlPerRemote(
+  execGit: GitRemoteExec,
+  repoPath: string,
+  remoteUrl: string
+): Promise<string | null> {
+  const target = parseGitHubOwnerRepo(remoteUrl)
+  try {
+    const { stdout } = await execGit(['remote'], repoPath)
+    for (const remote of stdout
+      .split(/\r?\n/)
+      .map((line) => line.trim())
+      .filter(Boolean)) {
+      try {
+        const { stdout: urlStdout } = await execGit(['remote', 'get-url', remote], repoPath)
+        const candidateUrl = urlStdout.trim()
+        const candidate = parseGitHubOwnerRepo(candidateUrl)
+        if (
+          target &&
+          candidate &&
+          target.owner.toLowerCase() === candidate.owner.toLowerCase() &&
+          target.repo.toLowerCase() === candidate.repo.toLowerCase()
+        ) {
+          return remote
+        }
+        if (candidateUrl === remoteUrl) {
+          return remote
+        }
+      } catch {
+        // Ignore a remote that disappeared or has no fetch URL.
+      }
+    }
+  } catch {
+    return null
+  }
+  return null
+}
+
+const fiftyEightRemotes: RemoteRow[] = [
+  { name: 'origin', fetchUrl: UPSTREAM },
+  ...Array.from({ length: 56 }, (_, index) => ({
+    name: `pr-user${index}-orca`,
+    fetchUrl: `https://github.com/user${index}/orca.git`
+  })),
+  { name: 'pr-contributor-orca', fetchUrl: SSH_FORK }
+]
+
+const matrix: { name: string; remotes: RemoteRow[]; lookupUrl: string }[] = [
+  { name: 'no remotes', remotes: [], lookupUrl: SSH_FORK },
+  {
+    name: 'one matching remote',
+    remotes: [{ name: 'origin', fetchUrl: SSH_FORK }],
+    lookupUrl: SSH_FORK
+  },
+  {
+    name: 'one non-matching remote',
+    remotes: [{ name: 'origin', fetchUrl: UPSTREAM }],
+    lookupUrl: SSH_FORK
+  },
+  { name: '58 remotes, match last', remotes: fiftyEightRemotes, lookupUrl: SSH_FORK },
+  {
+    name: '58 remotes, no match',
+    remotes: fiftyEightRemotes,
+    lookupUrl: 'https://github.com/nobody/other.git'
+  },
+  {
+    name: 'duplicate URLs on two remotes',
+    remotes: [
+      { name: 'origin', fetchUrl: UPSTREAM },
+      { name: 'fork-a', fetchUrl: SSH_FORK },
+      { name: 'fork-b', fetchUrl: SSH_FORK }
+    ],
+    lookupUrl: SSH_FORK
+  },
+  {
+    name: 'fetch and push URLs differ',
+    remotes: [{ name: 'split', fetchUrl: SSH_FORK, pushUrl: HTTPS_FORK }],
+    lookupUrl: SSH_FORK
+  },
+  {
+    name: 'SSH-form lookup against an HTTPS-form remote',
+    remotes: [
+      { name: 'origin', fetchUrl: UPSTREAM },
+      { name: 'fork', fetchUrl: HTTPS_FORK }
+    ],
+    lookupUrl: SSH_FORK
+  },
+  {
+    name: 'HTTPS-form lookup against an SSH-form remote',
+    remotes: [
+      { name: 'origin', fetchUrl: UPSTREAM },
+      { name: 'fork', fetchUrl: SSH_FORK }
+    ],
+    lookupUrl: HTTPS_FORK
+  },
+  {
+    name: 'non-GitHub provider matches only on the exact URL',
+    remotes: [{ name: 'gitlab-fork', fetchUrl: GITLAB_FORK }],
+    lookupUrl: GITLAB_FORK
+  },
+  {
+    name: 'non-GitHub provider with a different host does not match',
+    remotes: [{ name: 'gitlab-fork', fetchUrl: GITLAB_FORK }],
+    lookupUrl: 'https://bitbucket.org/contributor/orca.git'
+  }
+]
+
+describe('findRemoteForUrl', () => {
+  it.each(matrix)('matches the per-remote scan for $name', async ({ remotes, lookupUrl }) => {
+    const expected = await findRemoteForUrlPerRemote(makeExec(remotes), '/repo', lookupUrl)
+    await expect(findRemoteForUrl(makeExec(remotes), '/repo', lookupUrl)).resolves.toBe(expected)
+  })
+
+  it('answers from one subprocess at 58 remotes instead of one per remote', async () => {
+    const legacyExec = makeExec(fiftyEightRemotes)
+    await findRemoteForUrlPerRemote(legacyExec, '/repo', 'https://github.com/nobody/other.git')
+    expect(legacyExec.spawns).toHaveLength(fiftyEightRemotes.length + 1)
+
+    const exec = makeExec(fiftyEightRemotes)
+    await findRemoteForUrl(exec, '/repo', 'https://github.com/nobody/other.git')
+    expect(exec.spawns).toEqual([['remote', '-v']])
+  })
+
+  it('returns null when the remote table cannot be read', async () => {
+    const failing: GitRemoteExec = async () => {
+      throw new Error('not a git repository')
+    }
+    await expect(findRemoteForUrl(failing, '/repo', SSH_FORK)).resolves.toBeNull()
+  })
+})
diff --git a/src/main/ipc/worktree-push-target-setup.test.ts b/src/main/ipc/worktree-push-target-setup.test.ts
index 2d9670c2f9b..ef1e44aa923 100644
--- a/src/main/ipc/worktree-push-target-setup.test.ts
+++ b/src/main/ipc/worktree-push-target-setup.test.ts
@@ -16,6 +16,13 @@ const REPO = '/repo-root'
 const FORK_SSH = 'git@github.com:contributor/orca.git'
 const FORK_HTTPS = 'https://github.com/contributor/orca.git'
 
+/** Real `git remote -v` shape: a fetch row and a push row per remote, tab-separated. */
+export function renderRemoteVerbose(remotes: Record<string, string>): string {
+  return Object.entries(remotes)
+    .flatMap(([name, url]) => [`${name}\t${url} (fetch)`, `${name}\t${url} (push)`])
+    .join('\n')
+}
+
 // A stateful fake git: `remotes` maps name -> url. `remote add` mutates it so
 // later lookups see the new remote, matching real git behavior. Defaults
 // `symbolic-ref --short HEAD` to a real branch name, since a worktree's HEAD
@@ -31,6 +38,9 @@ function makeRepoExec(
     if (args[0] === 'remote' && args.length === 1) {
       return { stdout: Object.keys(remotes).join('\n'), stderr: '' }
     }
+    if (args[0] === 'remote' && args[1] === '-v' && args.length === 2) {
+      return { stdout: renderRemoteVerbose(remotes), stderr: '' }
+    }
     if (args[0] === 'remote' && args[1] === 'get-url') {
       const url = remotes[args[2]!]
       if (!url) {
diff --git a/src/main/ipc/worktree-push-target-setup.ts b/src/main/ipc/worktree-push-target-setup.ts
index 59ef4c8fea5..c4a82d94933 100644
--- a/src/main/ipc/worktree-push-target-setup.ts
+++ b/src/main/ipc/worktree-push-target-setup.ts
@@ -5,53 +5,33 @@
 // repo. The store-aware ownership decision stays with the caller via a predicate.
 
 import type { GitPushTarget } from '../../shared/worktree/types'
-import { parseGitHubOwnerRepo } from '../github/gh-utils'
-import type { GitRemoteExec } from './worktree-push-target-cleanup'
+import { findGitRemoteNameByFetchUrl } from '../../shared/git-remote-url-index'
+import { sameGitHubRemoteUrl, type GitRemoteExec } from './worktree-push-target-cleanup'
 import {
   buildNarrowForkFetchRefspec,
   ensureRemoteTracksBranchNarrowly
 } from '../git/fork-remote-refspec'
 
+// One `git remote -v` replaces `git remote` plus a serial `git remote get-url` per
+// remote -- 59 subprocesses at 58 remotes, on every push-target resolution (#17914).
 export async function findRemoteForUrl(
   execGit: GitRemoteExec,
   repoPath: string,
   remoteUrl: string
 ): Promise<string | null> {
-  const target = parseGitHubOwnerRepo(remoteUrl)
   try {
-    const { stdout } = await execGit(['remote'], repoPath)
-    for (const remote of stdout
-      .split(/\r?\n/)
-      .map((line) => line.trim())
-      .filter(Boolean)) {
-      try {
-        const { stdout: urlStdout } = await execGit(['remote', 'get-url', remote], repoPath)
-        const candidateUrl = urlStdout.trim()
-        const candidate = parseGitHubOwnerRepo(candidateUrl)
-        if (
-          target &&
-          candidate &&
-          target.owner.toLowerCase() === candidate.owner.toLowerCase() &&
-          target.repo.toLowerCase() === candidate.repo.toLowerCase()
-        ) {
-          return remote
-        }
-        if (candidateUrl === remoteUrl) {
-          return remote
-        }
-      } catch {
-        // Ignore a remote that disappeared or has no fetch URL.
-      }
-    }
+    const { stdout } = await execGit(['remote', '-v'], repoPath)
+    return findGitRemoteNameByFetchUrl(stdout, (candidateUrl) =>
+      sameGitHubRemoteUrl(candidateUrl, remoteUrl)
+    )
   } catch {
     return null
   }
-  return null
 }
 
 // O(1) probe used before materializing on demand (push/pull/fetch/fast-forward):
-// a single `remote get-url <name>` avoids the O(remotes) `findRemoteForUrl` scan
-// once a fork remote already exists under its expected name (#17828).
+// a single `remote get-url <name>` skips the whole-remote-table read once a fork
+// remote already exists under its expected name (#17828).
 export async function remoteAlreadyMatchesUrl(
   execGit: GitRemoteExec,
   repoPath: string,
@@ -60,18 +40,7 @@ export async function remoteAlreadyMatchesUrl(
 ): Promise<boolean> {
   try {
     const { stdout } = await execGit(['remote', 'get-url', remoteName], repoPath)
-    const candidateUrl = stdout.trim()
-    if (candidateUrl === remoteUrl) {
-      return true
-    }
-    const target = parseGitHubOwnerRepo(remoteUrl)
-    const candidate = parseGitHubOwnerRepo(candidateUrl)
-    return Boolean(
-      target &&
-      candidate &&
-      target.owner.toLowerCase() === candidate.owner.toLowerCase() &&
-      target.repo.toLowerCase() === candidate.repo.toLowerCase()
-    )
+    return sameGitHubRemoteUrl(stdout.trim(), remoteUrl)
   } catch {
     return false
   }
diff --git a/src/main/ipc/worktree-remote-push-target-materialization.test.ts b/src/main/ipc/worktree-remote-push-target-materialization.test.ts
index 68ed98ab35c..695baa10dec 100644
--- a/src/main/ipc/worktree-remote-push-target-materialization.test.ts
+++ b/src/main/ipc/worktree-remote-push-target-materialization.test.ts
@@ -553,6 +553,17 @@ describe('materializeWorktreePushTargetRemoteSsh', () => {
         }
         throw new Error('No such remote')
       }
+      if (args[0] === 'remote' && args[1] === '-v') {
+        return {
+          stdout: [
+            'origin\thttps://github.com/stablyai/orca.git (fetch)',
+            'origin\thttps://github.com/stablyai/orca.git (push)',
+            `${SIBLING_REMOTE}\t${FORK_URL} (fetch)`,
+            `${SIBLING_REMOTE}\t${FORK_URL} (push)`
+          ].join('\n'),
+          stderr: ''
+        }
+      }
       if (args[0] === 'remote' && args.length === 1) {
         return { stdout: `origin\n${SIBLING_REMOTE}\n`, stderr: '' }
       }
diff --git a/src/relay/git-handler-push-target.test.ts b/src/relay/git-handler-push-target.test.ts
index c040a645a16..b6fe5e96ad0 100644
--- a/src/relay/git-handler-push-target.test.ts
+++ b/src/relay/git-handler-push-target.test.ts
@@ -46,6 +46,17 @@ function gitForConfig(config: {
       }
       return { stdout: `${config.base ?? ''}\n`, stderr: '' }
     }
+    if (args[0] === 'remote' && args[1] === '-v') {
+      return {
+        stdout: (config.remotes ?? [])
+          .flatMap((name) => {
+            const url = config.remoteUrls?.[name] ?? ''
+            return [`${name}\t${url} (fetch)`, `${name}\t${url} (push)`]
+          })
+          .join('\n'),
+        stderr: ''
+      }
+    }
     if (args[0] === 'remote' && args.length === 1) {
       return { stdout: `${config.remotes?.join('\n') ?? ''}\n`, stderr: '' }
     }
diff --git a/src/relay/git-handler-push-target.ts b/src/relay/git-handler-push-target.ts
index 40765491c56..d81111d45d3 100644
--- a/src/relay/git-handler-push-target.ts
+++ b/src/relay/git-handler-push-target.ts
@@ -1,5 +1,6 @@
 import { assertGitPushTargetShape } from '../shared/git-push-target-validation'
 import { gitRefTargetsBranchOnRemote } from '../shared/git-remote-branch-name'
+import { findGitRemoteNameByFetchUrl } from '../shared/git-remote-url-index'
 import type { GitPushTarget } from '../shared/worktree/types'
 
 type RelayGit = (args: string[], cwd: string) => Promise<{ stdout: string; stderr: string }>
@@ -67,31 +68,19 @@ type ConfiguredPushRemote = {
   branchRemote: string | null
 }
 
+// Host-side twin of `src/main/git/remote.ts`: one `git remote -v` instead of
+// `git remote` plus a serial `git remote get-url` per remote.
 async function findRemoteNameForUrl(
   git: RelayGit,
   worktreePath: string,
   remoteUrl: string
 ): Promise<string | null> {
   try {
-    const { stdout } = await git(['remote'], worktreePath)
-    const remotes = stdout
-      .split(/\r?\n/)
-      .map((line) => line.trim())
-      .filter(Boolean)
-    for (const remoteName of remotes) {
-      try {
-        const { stdout: urlStdout } = await git(['remote', 'get-url', remoteName], worktreePath)
-        if (urlStdout.trim() === remoteUrl) {
-          return remoteName
-        }
-      } catch {
-        // Ignore a remote that disappeared or has no fetch URL.
-      }
-    }
+    const { stdout } = await git(['remote', '-v'], worktreePath)
+    return findGitRemoteNameByFetchUrl(stdout, (candidateUrl) => candidateUrl === remoteUrl)
   } catch {
     return null
   }
-  return null
 }
 
 async function normalizePushRemote(
@@ -120,9 +109,17 @@ async function getConfiguredPushRemote(
   if (!remote) {
     return null
   }
+  const normalizedRemote = await normalizePushRemote(git, worktreePath, remote)
+  // The two usually name the same URL; resolving it twice reads the remote table twice.
+  if (!branchRemote) {
+    return { remote: normalizedRemote, branchRemote: null }
+  }
   return {
-    remote: await normalizePushRemote(git, worktreePath, remote),
-    branchRemote: branchRemote ? await normalizePushRemote(git, worktreePath, branchRemote) : null
+    remote: normalizedRemote,
+    branchRemote:
+      branchRemote === remote
+        ? normalizedRemote
+        : await normalizePushRemote(git, worktreePath, branchRemote)
   }
 }
 
diff --git a/src/shared/git-binary-compatibility.test.ts b/src/shared/git-binary-compatibility.test.ts
index a61e64464da..5ad37398d14 100644
--- a/src/shared/git-binary-compatibility.test.ts
+++ b/src/shared/git-binary-compatibility.test.ts
@@ -15,6 +15,7 @@ import {
   isUnsupportedWorktreeListZError
 } from './git-worktree-command-capabilities'
 import { gitCredentialPromptGuardEnv } from './git-credential-prompt-env'
+import { parseGitRemoteFetchUrls } from './git-remote-url-index'
 import { GIT_HISTORY_COMMIT_FORMAT, parseGitHistoryLog } from './git-history-log-parser'
 import {
   githubPullRequestHeadLocalRef,
@@ -214,6 +215,41 @@ describeBinaryCompatibility('real Git binary compatibility', () => {
     await expect(runGit(['merge-base', '--end-of-options', head, unrelated])).rejects.toBeDefined()
   })
 
+  // Why pin this: Orca answers "which remote has this URL" from one `git remote -v`
+  // instead of one `git remote get-url` per remote. That is only equivalent if both
+  // commands report the same URL — the insteadOf-expanded first `remote.<name>.url`,
+  // which a raw config read does not produce — on every supported Git.
+  it('reports the same fetch URL from remote -v as from remote get-url', async () => {
+    await runGit(['config', 'url.git@example.invalid:.insteadOf', 'https://example.invalid/'])
+    await runGit(['remote', 'add', 'compat-single', 'https://example.invalid/a/repo.git'])
+    await runGit(['remote', 'add', 'compat-multi', 'https://example.invalid/b/repo.git'])
+    await runGit([
+      'config',
+      '--add',
+      'remote.compat-multi.url',
+      'https://example.invalid/b2/repo.git'
+    ])
+    await runGit([
+      'config',
+      'remote.compat-multi.pushurl',
+      'https://push.example.invalid/b/repo.git'
+    ])
+    try {
+      const fetchUrls = parseGitRemoteFetchUrls((await runGit(['remote', '-v'])).stdout)
+      for (const name of ['compat-single', 'compat-multi']) {
+        const getUrl = (await runGit(['remote', 'get-url', name])).stdout.trim()
+        expect(fetchUrls.get(name)).toBe(getUrl)
+      }
+      expect(fetchUrls.get('compat-single')).toBe('git@example.invalid:a/repo.git')
+      // A `pushurl` must not displace the fetch URL the scan compares against.
+      expect(fetchUrls.get('compat-multi')).toBe('git@example.invalid:b/repo.git')
+    } finally {
+      await runGit(['remote', 'remove', 'compat-single'])
+      await runGit(['remote', 'remove', 'compat-multi'])
+      await runGit(['config', '--unset-all', 'url.git@example.invalid:.insteadOf'])
+    }
+  })
+
   it('recognizes ref and merge-tree compatibility boundaries', async () => {
     const fetchHeadPath = join(repoPath, '.git', 'FETCH_HEAD')
     await writeFile(fetchHeadPath, 'sentinel\n')
diff --git a/src/shared/git-configured-branch-target.test.ts b/src/shared/git-configured-branch-target.test.ts
new file mode 100644
index 00000000000..a599a53bbb8
--- /dev/null
+++ b/src/shared/git-configured-branch-target.test.ts
@@ -0,0 +1,175 @@
+// Why: resolving a URL-valued `branch.<name>.remote` (or `remote.pushDefault`) to a
+// remote name used to cost `git remote` plus one serial `git remote get-url` per remote.
+// `hasConfiguredBranchPushTarget` resolves up to two of them, so a 58-remote repo paid
+// up to 118 subprocesses for one question. These tests pin the count and result parity.
+
+import { describe, expect, it } from 'vitest'
+import {
+  getConfiguredBranchRemoteUpstream,
+  hasConfiguredBranchPushTarget
+} from './git-configured-branch-target'
+
+const BRANCH = 'imp/translation'
+const FORK_URL = 'https://github.com/contributor/orca.git'
+const UPSTREAM_URL = 'https://github.com/stablyai/orca.git'
+
+type RemoteRow = { name: string; fetchUrl: string; pushUrl?: string }
+
+type Fixture = {
+  remotes: readonly RemoteRow[]
+  config: Readonly<Record<string, string>>
+}
+
+function makeRunner(fixture: Fixture): {
+  runGit: (args: string[]) => Promise<{ stdout: string }>
+  spawns: string[][]
+} {
+  const spawns: string[][] = []
+  const runGit = async (args: string[]): Promise<{ stdout: string }> => {
+    spawns.push(args)
+    if (args[0] === 'config' && args[1] === '--get') {
+      const value = fixture.config[args[2]]
+      if (value === undefined) {
+        throw Object.assign(new Error('config key is not set'), { code: 1 })
+      }
+      return { stdout: `${value}\n` }
+    }
+    if (args[0] === 'remote' && args[1] === '-v') {
+      return {
+        stdout: fixture.remotes
+          .flatMap((remote) => [
+            `${remote.name}\t${remote.fetchUrl} (fetch)`,
+            `${remote.name}\t${remote.pushUrl ?? remote.fetchUrl} (push)`
+          ])
+          .join('\n')
+      }
+    }
+    if (args[0] === 'remote' && args.length === 1) {
+      return { stdout: `${fixture.remotes.map((remote) => remote.name).join('\n')}\n` }
+    }
+    if (args[0] === 'remote' && args[1] === 'get-url') {
+      const match = fixture.remotes.find((remote) => remote.name === args[2])
+      if (!match) {
+        throw new Error(`No such remote ${args[2]}`)
+      }
+      return { stdout: `${match.fetchUrl}\n` }
+    }
+    throw new Error(`unexpected git command: ${args.join(' ')}`)
+  }
+  return { runGit, spawns }
+}
+
+const fiftyEightRemotes: RemoteRow[] = [
+  { name: 'origin', fetchUrl: UPSTREAM_URL },
+  ...Array.from({ length: 56 }, (_, index) => ({
+    name: `pr-user${index}-orca`,
+    fetchUrl: `https://github.com/user${index}/orca.git`
+  })),
+  { name: 'pr-contributor-orca', fetchUrl: FORK_URL }
+]
+
+describe('hasConfiguredBranchPushTarget', () => {
+  it('resolves both URL-valued remotes from one remote table read at 58 remotes', async () => {
+    const { runGit, spawns } = makeRunner({
+      remotes: fiftyEightRemotes,
+      config: {
+        [`branch.${BRANCH}.pushRemote`]: FORK_URL,
+        [`branch.${BRANCH}.remote`]: FORK_URL,
+        [`branch.${BRANCH}.merge`]: `refs/heads/${BRANCH}`
+      }
+    })
+
+    await expect(hasConfiguredBranchPushTarget(runGit, BRANCH)).resolves.toBe(true)
+
+    // Both the push remote and the branch remote name the same URL, so one table read answers.
+    expect(spawns.filter((args) => args[0] === 'remote')).toEqual([['remote', '-v']])
+    expect(spawns.filter((args) => args[1] === 'get-url')).toEqual([])
+  })
+
+  it('keeps the not-set case false when no remote is configured', async () => {
+    const { runGit } = makeRunner({ remotes: fiftyEightRemotes, config: {} })
+    await expect(hasConfiguredBranchPushTarget(runGit, BRANCH)).resolves.toBe(false)
+  })
+
+  it('keeps the URL itself as the remote name when nothing matches', async () => {
+    const { runGit } = makeRunner({
+      remotes: [{ name: 'origin', fetchUrl: UPSTREAM_URL }],
+      config: {
+        [`branch.${BRANCH}.pushRemote`]: FORK_URL,
+        [`branch.${BRANCH}.remote`]: FORK_URL,
+        [`branch.${BRANCH}.merge`]: 'refs/heads/other'
+      }
+    })
+    // Unchanged no-match fallback: both remotes stay the raw URL, so they still agree
+    // and the differently named merge branch is still pushable.
+    await expect(hasConfiguredBranchPushTarget(runGit, BRANCH)).resolves.toBe(true)
+  })
+})
+
+describe('getConfiguredBranchRemoteUpstream', () => {
+  const remoteTrackingRefExists = async (): Promise<boolean> => true
+
+  it('picks the first remote holding a duplicated URL', async () => {
+    const { runGit, spawns } = makeRunner({
+      remotes: [
+        { name: 'origin', fetchUrl: UPSTREAM_URL },
+        { name: 'fork-a', fetchUrl: FORK_URL },
+        { name: 'fork-b', fetchUrl: FORK_URL }
+      ],
+      config: {
+        [`branch.${BRANCH}.remote`]: FORK_URL,
+        [`branch.${BRANCH}.merge`]: `refs/heads/${BRANCH}`
+      }
+    })
+
+    await expect(
+      getConfiguredBranchRemoteUpstream(runGit, BRANCH, remoteTrackingRefExists)
+    ).resolves.toEqual({
+      upstreamName: `fork-a/${BRANCH}`,
+      remoteName: 'fork-a',
+      branchName: BRANCH,
+      isConfiguredUpstream: false
+    })
+    expect(spawns.filter((args) => args[0] === 'remote')).toEqual([['remote', '-v']])
+  })
+
+  it('ignores a push URL when fetch and push differ', async () => {
+    const { runGit } = makeRunner({
+      remotes: [{ name: 'split', fetchUrl: UPSTREAM_URL, pushUrl: FORK_URL }],
+      config: {
+        [`branch.${BRANCH}.remote`]: FORK_URL,
+        [`branch.${BRANCH}.merge`]: `refs/heads/${BRANCH}`
+      }
+    })
+    await expect(
+      getConfiguredBranchRemoteUpstream(runGit, BRANCH, remoteTrackingRefExists)
+    ).resolves.toBeNull()
+  })
+
+  it('returns null with no remotes at all', async () => {
+    const { runGit } = makeRunner({
+      remotes: [],
+      config: {
+        [`branch.${BRANCH}.remote`]: FORK_URL,
+        [`branch.${BRANCH}.merge`]: `refs/heads/${BRANCH}`
+      }
+    })
+    await expect(
+      getConfiguredBranchRemoteUpstream(runGit, BRANCH, remoteTrackingRefExists)
+    ).resolves.toBeNull()
+  })
+
+  it('keeps a plain named remote untouched', async () => {
+    const { runGit, spawns } = makeRunner({
+      remotes: fiftyEightRemotes,
+      config: {
+        [`branch.${BRANCH}.remote`]: 'origin',
+        [`branch.${BRANCH}.merge`]: `refs/heads/${BRANCH}`
+      }
+    })
+    await expect(
+      getConfiguredBranchRemoteUpstream(runGit, BRANCH, remoteTrackingRefExists)
+    ).resolves.toMatchObject({ remoteName: 'origin' })
+    expect(spawns.filter((args) => args[0] === 'remote')).toEqual([])
+  })
+})
diff --git a/src/shared/git-configured-branch-target.ts b/src/shared/git-configured-branch-target.ts
index 5c28f023814..9faca91dce7 100644
--- a/src/shared/git-configured-branch-target.ts
+++ b/src/shared/git-configured-branch-target.ts
@@ -1,4 +1,5 @@
 import { gitRefTargetsBranchOnRemote } from './git-remote-branch-name'
+import { findGitRemoteNameByFetchUrl } from './git-remote-url-index'
 
 type GitCommandRunner = (args: string[]) => Promise<{ stdout: string }>
 
@@ -25,30 +26,18 @@ function isUrlValuedRemote(remote: string): boolean {
   return /^[A-Za-z][A-Za-z0-9+.-]*:\/\//.test(remote) || /^[^@/:]+@[^:]+:.+/.test(remote)
 }
 
+// `hasConfiguredBranchPushTarget` resolves up to two URL-valued remotes, so the old
+// per-remote `get-url` scan cost up to 2 x (1 + remotes) subprocesses per call.
 async function findRemoteNameForUrl(
   runGit: GitCommandRunner,
   remoteUrl: string
 ): Promise<string | null> {
   try {
-    const { stdout } = await runGit(['remote'])
-    const remotes = stdout
-      .split(/\r?\n/)
-      .map((line) => line.trim())
-      .filter(Boolean)
-    for (const remoteName of remotes) {
-      try {
-        const { stdout: urlStdout } = await runGit(['remote', 'get-url', remoteName])
-        if (urlStdout.trim() === remoteUrl) {
-          return remoteName
-        }
-      } catch {
-        // Ignore a remote that disappeared or has no fetch URL.
-      }
-    }
+    const { stdout } = await runGit(['remote', '-v'])
+    return findGitRemoteNameByFetchUrl(stdout, (candidateUrl) => candidateUrl === remoteUrl)
   } catch {
     return null
   }
-  return null
 }
 
 export async function getConfiguredBranchRemoteUpstream(
@@ -101,11 +90,14 @@ export async function hasConfiguredBranchPushTarget(
   const pushRemoteName = isUrlValuedRemote(remote)
     ? ((await findRemoteNameForUrl(runGit, remote)) ?? remote)
     : remote
-  const branchRemoteName = branchRemote
-    ? isUrlValuedRemote(branchRemote)
-      ? ((await findRemoteNameForUrl(runGit, branchRemote)) ?? branchRemote)
-      : branchRemote
-    : null
+  // The two usually name the same URL; resolving it twice reads the remote table twice.
+  const branchRemoteName = !branchRemote
+    ? null
+    : branchRemote === remote
+      ? pushRemoteName
+      : isUrlValuedRemote(branchRemote)
+        ? ((await findRemoteNameForUrl(runGit, branchRemote)) ?? branchRemote)
+        : branchRemote
   if (gitRefTargetsBranchOnRemote(baseRef, pushRemoteName, branchName)) {
     return false
   }
diff --git a/src/shared/git-remote-url-index.test.ts b/src/shared/git-remote-url-index.test.ts
new file mode 100644
index 00000000000..e798e136ae4
--- /dev/null
+++ b/src/shared/git-remote-url-index.test.ts
@@ -0,0 +1,112 @@
+import { describe, expect, it } from 'vitest'
+import {
+  findGitRemoteNameByFetchUrl,
+  parseGitRemoteFetchUrls,
+  parseGitRemoteVerboseLine
+} from './git-remote-url-index'
+
+const SSH_URL = 'git@github.com:contributor/orca.git'
+const HTTPS_URL = 'https://github.com/contributor/orca.git'
+
+function verbose(rows: readonly (readonly [string, string])[]): string {
+  return rows.map(([name, url]) => `${name}\t${url}`).join('\n')
+}
+
+describe('parseGitRemoteVerboseLine', () => {
+  it('reads the name, URL and direction', () => {
+    expect(parseGitRemoteVerboseLine(`origin\t${HTTPS_URL} (fetch)`)).toEqual({
+      name: 'origin',
+      url: HTTPS_URL,
+      direction: 'fetch'
+    })
+  })
+
+  it('keeps a URL that itself contains spaces and parentheses', () => {
+    const url = '/tmp/my repo (mirror)'
+    expect(parseGitRemoteVerboseLine(`local\t${url} (push)`)).toEqual({
+      name: 'local',
+      url,
+      direction: 'push'
+    })
+  })
+
+  it('rejects the URL-less row git prints for a pushurl-only remote', () => {
+    expect(parseGitRemoteVerboseLine('pushonly\t')).toBeNull()
+    expect(parseGitRemoteVerboseLine('not a remote row')).toBeNull()
+  })
+})
+
+describe('parseGitRemoteFetchUrls', () => {
+  it('returns nothing for a repo with no remotes', () => {
+    expect([...parseGitRemoteFetchUrls('')]).toEqual([])
+  })
+
+  it('keeps only fetch rows, in git remote order', () => {
+    const stdout = verbose([
+      ['a', `${SSH_URL} (fetch)`],
+      ['a', `${SSH_URL} (push)`],
+      ['b', `${HTTPS_URL} (fetch)`],
+      ['b', 'https://github.com/contributor/other.git (push)']
+    ])
+    expect([...parseGitRemoteFetchUrls(stdout)]).toEqual([
+      ['a', SSH_URL],
+      ['b', HTTPS_URL]
+    ])
+  })
+
+  it('parses CRLF output', () => {
+    const stdout = `a\t${SSH_URL} (fetch)\r\na\t${SSH_URL} (push)\r\n`
+    expect([...parseGitRemoteFetchUrls(stdout)]).toEqual([['a', SSH_URL]])
+  })
+
+  it('takes the first URL of a multi-URL remote, matching remote get-url', () => {
+    const stdout = verbose([
+      ['multi', `${SSH_URL} (fetch)`],
+      ['multi', `${SSH_URL} (push)`],
+      ['multi', `${HTTPS_URL} (push)`]
+    ])
+    expect(parseGitRemoteFetchUrls(stdout).get('multi')).toBe(SSH_URL)
+  })
+
+  it('scales to 58 remotes without losing order', () => {
+    const rows = Array.from({ length: 58 }, (_, index) => [
+      `r${index}`,
+      `https://example.com/o${index}/repo.git`
+    ])
+    const stdout = rows
+      .flatMap(([name, url]) => [`${name}\t${url} (fetch)`, `${name}\t${url} (push)`])
+      .join('\n')
+    const parsed = [...parseGitRemoteFetchUrls(stdout)]
+    expect(parsed).toHaveLength(58)
+    expect(parsed[0]).toEqual(['r0', 'https://example.com/o0/repo.git'])
+    expect(parsed[57]).toEqual(['r57', 'https://example.com/o57/repo.git'])
+  })
+})
+
+describe('findGitRemoteNameByFetchUrl', () => {
+  const stdout = verbose([
+    ['origin', 'https://github.com/stablyai/orca.git (fetch)'],
+    ['origin', 'https://github.com/stablyai/orca.git (push)'],
+    ['first-fork', `${SSH_URL} (fetch)`],
+    ['first-fork', `${SSH_URL} (push)`],
+    ['second-fork', `${SSH_URL} (fetch)`],
+    ['second-fork', `${SSH_URL} (push)`]
+  ])
+
+  it('returns the first remote holding a duplicated URL', () => {
+    expect(findGitRemoteNameByFetchUrl(stdout, (url) => url === SSH_URL)).toBe('first-fork')
+  })
+
+  it('returns null when nothing matches', () => {
+    expect(findGitRemoteNameByFetchUrl(stdout, (url) => url === HTTPS_URL)).toBeNull()
+  })
+
+  it('ignores push URLs when fetch and push differ', () => {
+    const split = verbose([
+      ['split', `${SSH_URL} (fetch)`],
+      ['split', `${HTTPS_URL} (push)`]
+    ])
+    expect(findGitRemoteNameByFetchUrl(split, (url) => url === SSH_URL)).toBe('split')
+    expect(findGitRemoteNameByFetchUrl(split, (url) => url === HTTPS_URL)).toBeNull()
+  })
+})
diff --git a/src/shared/git-remote-url-index.ts b/src/shared/git-remote-url-index.ts
new file mode 100644
index 00000000000..ec4f2b4a509
--- /dev/null
+++ b/src/shared/git-remote-url-index.ts
@@ -0,0 +1,64 @@
+// Why: "which remote has this URL?" was answered with one `git remote get-url`
+// subprocess per remote, awaited serially -- 58 spawns on a repo with 58 remotes,
+// on every push-target resolution. `git remote -v` answers for every remote from
+// one child.
+//
+// `remote -v` is the faithful one-command form, not `config --get-regexp '^remote\.'`:
+// both `remote -v` and `remote get-url` print the URL *after* `url.<base>.insteadOf`
+// expansion and pick the first of several `remote.<name>.url` values, while raw config
+// reads return the unexpanded value and the last of the multiple values.
+//
+// `remote -v` also predates `remote get-url` (2.7), so this lowers rather than raises
+// the Git floor and needs no capability gate.
+
+import { iterateProcessOutputLines } from './process-output-field-scanner'
+
+export type GitRemoteVerboseEntry = {
+  name: string
+  url: string
+  direction: 'fetch' | 'push'
+}
+
+// Greedy prefix so a URL containing spaces or parentheses keeps them.
+const REMOTE_VERBOSE_URL_PATTERN = /^(.*) \((fetch|push)\)$/
+
+/** Parse one `<name>\t<url> (fetch|push)` row. */
+export function parseGitRemoteVerboseLine(line: string): GitRemoteVerboseEntry | null {
+  const tabIndex = line.indexOf('\t')
+  if (tabIndex === -1) {
+    return null
+  }
+  const name = line.slice(0, tabIndex)
+  const match = REMOTE_VERBOSE_URL_PATTERN.exec(line.slice(tabIndex + 1).trim())
+  return match ? { name, url: match[1], direction: match[2] as 'fetch' | 'push' } : null
+}
+
+/**
+ * Fetch URL per remote in `git remote` order -- the value `git remote get-url <name>`
+ * prints. A remote configured with only a `pushurl` has no fetch row and is absent
+ * here; `get-url` echoed the remote's own name for it, which no caller can match.
+ */
+export function parseGitRemoteFetchUrls(stdout: string): Map<string, string> {
+  const fetchUrls = new Map<string, string>()
+  for (const line of iterateProcessOutputLines(stdout)) {
+    const parsed = parseGitRemoteVerboseLine(line)
+    // First wins: `get-url` without `--all` prints the first `remote.<name>.url`.
+    if (parsed?.direction === 'fetch' && !fetchUrls.has(parsed.name)) {
+      fetchUrls.set(parsed.name, parsed.url)
+    }
+  }
+  return fetchUrls
+}
+
+/** First remote whose fetch URL matches, in the order the per-remote scan visited them. */
+export function findGitRemoteNameByFetchUrl(
+  stdout: string,
+  matchesUrl: (url: string) => boolean
+): string | null {
+  for (const [name, url] of parseGitRemoteFetchUrls(stdout)) {
+    if (matchesUrl(url)) {
+      return name
+    }
+  }
+  return null
+}

From 5510ad0cad7bcb73b5f76aa8b0f3ffe5ff2d41de Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 12:56:23 -0700
Subject: [PATCH 56/92] fix(diff-comments): stop review refreshes from blanking
 inline comment cards (#18142)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

commentableLineSet was memoized on array identity. Review surfaces hand the
decorator a fresh-but-equal number[] on every PR/MR data refresh, so the set
churned, tore down the overlay+zone effect (unmounting every comment card's
React root and clearing the zone map) while the zone-creating effect — which
does not depend on the set — never re-ran. Monaco kept the view zones as
untracked blank gaps, and the next refresh stacked more on top.

- memoize the set on a joined value key so equal refreshes are a no-op
- split the add-button overlay (needs the set) from the zone teardown (must
  not), so the teardown's deps stay a subset of the zone-creating effect's
- have the teardown actually removeZone what it stops tracking
---
 ...ommentDecorator.commentable-lines.test.tsx | 284 ++++++++++++++++++
 .../diff-comments/useDiffCommentDecorator.tsx |  33 +-
 2 files changed, 312 insertions(+), 5 deletions(-)
 create mode 100644 src/renderer/src/components/diff-comments/useDiffCommentDecorator.commentable-lines.test.tsx

diff --git a/src/renderer/src/components/diff-comments/useDiffCommentDecorator.commentable-lines.test.tsx b/src/renderer/src/components/diff-comments/useDiffCommentDecorator.commentable-lines.test.tsx
new file mode 100644
index 00000000000..d954bafa62b
--- /dev/null
+++ b/src/renderer/src/components/diff-comments/useDiffCommentDecorator.commentable-lines.test.tsx
@@ -0,0 +1,284 @@
+// @vitest-environment happy-dom
+import { renderHook } from '@testing-library/react'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { editor as MonacoEditor, IDisposable } from 'monaco-editor'
+import type { DecoratedDiffComment } from './decorated-diff-comment'
+import type * as ReactDomClientModule from 'react-dom/client'
+import type * as DiffCommentZoneCardModule from './diff-comment-zone-card'
+
+const storeFixture = vi.hoisted(() => ({
+  activeGroupIdByWorktree: {},
+  clearDeliveredDiffComments: vi.fn()
+}))
+
+vi.mock('@/store', () => ({
+  useAppStore: (selector: (state: typeof storeFixture) => unknown) => selector(storeFixture)
+}))
+
+// Stub only the card render: this suite is about zone/root lifecycle, not card markup.
+vi.mock('./diff-comment-zone-card', async (importOriginal) => ({
+  ...(await importOriginal<typeof DiffCommentZoneCardModule>()),
+  renderDiffCommentZoneCard: vi.fn()
+}))
+
+const rootCounts = vi.hoisted(() => ({ created: 0, unmounted: 0 }))
+
+// Count only roots the decorator creates for its zones — @testing-library/react creates its own.
+vi.mock('react-dom/client', async (importOriginal) => {
+  const actual = await importOriginal<typeof ReactDomClientModule>()
+  return {
+    ...actual,
+    createRoot: (container: Element, options?: Parameters<typeof actual.createRoot>[1]) => {
+      const isZoneRoot = container.classList?.contains('orca-diff-comment-inline') ?? false
+      if (isZoneRoot) {
+        rootCounts.created += 1
+      }
+      const root = actual.createRoot(container, options)
+      return {
+        render: (node: Parameters<typeof root.render>[0]) => root.render(node),
+        unmount: () => {
+          if (isZoneRoot) {
+            rootCounts.unmounted += 1
+          }
+          root.unmount()
+        }
+      }
+    }
+  }
+})
+
+import { useDiffCommentDecorator } from './useDiffCommentDecorator'
+
+type FakeEditor = {
+  editor: MonacoEditor.ICodeEditor
+  domNode: HTMLElement
+  zones: Map<string, MonacoEditor.IViewZone>
+  emitMouseMove: (lineNumber: number) => void
+}
+
+function createFakeEditor(): FakeEditor {
+  const domNode = document.createElement('div')
+  document.body.appendChild(domNode)
+  const zones = new Map<string, MonacoEditor.IViewZone>()
+  let nextZoneId = 0
+  const mouseMoveListeners: ((e: { target: { position: { lineNumber: number } } }) => void)[] = []
+  const noopDisposable: IDisposable = { dispose: () => {} }
+
+  const editor = {
+    getDomNode: () => domNode,
+    getModel: () => ({}),
+    getOption: () => 19,
+    getTopForLineNumber: () => 0,
+    getScrollTop: () => 0,
+    getLayoutInfo: () => ({ height: 400 }),
+    setScrollTop: () => {},
+    deltaDecorations: () => [],
+    getTargetAtClientPoint: () => null,
+    onMouseMove: (listener: (e: { target: { position: { lineNumber: number } } }) => void) => {
+      mouseMoveListeners.push(listener)
+      return noopDisposable
+    },
+    onMouseLeave: () => noopDisposable,
+    onDidScrollChange: () => noopDisposable,
+    changeViewZones: (callback: (accessor: MonacoEditor.IViewZoneChangeAccessor) => void) =>
+      callback({
+        addZone: (zone: MonacoEditor.IViewZone) => {
+          const id = `zone-${(nextZoneId += 1)}`
+          zones.set(id, zone)
+          return id
+        },
+        removeZone: (id: string) => {
+          zones.delete(id)
+        },
+        layoutZone: () => {}
+      } as unknown as MonacoEditor.IViewZoneChangeAccessor)
+  } as unknown as MonacoEditor.ICodeEditor
+
+  return {
+    editor,
+    domNode,
+    zones,
+    emitMouseMove: (lineNumber) => {
+      for (const listener of mouseMoveListeners) {
+        listener({ target: { position: { lineNumber } } })
+      }
+    }
+  }
+}
+
+const FILE_PATH = 'src/index.ts'
+const REVIEW_SURFACE_ID = 'pr:acme/widgets:42'
+
+function reviewNote(index: number): DecoratedDiffComment {
+  return {
+    id: `review-note-${index}`,
+    worktreeId: REVIEW_SURFACE_ID,
+    filePath: FILE_PATH,
+    lineNumber: 10 + index,
+    body: `Please rename this (${index}).`,
+    createdAt: index,
+    side: 'modified',
+    author: 'octocat'
+  }
+}
+
+// Every refresh of remote review data yields a fresh-but-equal array, exactly as the main process ships it.
+function freshCommentableLines(): readonly number[] {
+  return [10, 11, 12, 13, 14, 15, 16]
+}
+
+// Root teardown is deferred through queueMicrotask, so drain before asserting on unmount counts.
+async function flushDeferredUnmounts(): Promise<void> {
+  await Promise.resolve()
+  await Promise.resolve()
+}
+
+// Asserted as one object so a failure reports every lifecycle number at once.
+function lifecycleTotals(fake: FakeEditor): Record<string, number> {
+  return {
+    createRootCalls: rootCounts.created,
+    rootUnmounts: rootCounts.unmounted,
+    monacoViewZones: fake.zones.size
+  }
+}
+
+function isAddButtonVisible(domNode: HTMLElement): boolean {
+  const button = domNode.querySelector<HTMLElement>('.orca-diff-comment-add-btn')
+  return button != null && button.style.display !== 'none'
+}
+
+type DecoratorProps = {
+  commentableLineNumbers: readonly number[]
+  comments: readonly DecoratedDiffComment[]
+}
+
+function renderDecorator(fake: FakeEditor, initialProps: DecoratorProps) {
+  return renderHook(
+    ({ commentableLineNumbers, comments }: DecoratorProps) =>
+      useDiffCommentDecorator({
+        editor: fake.editor,
+        filePath: FILE_PATH,
+        worktreeId: REVIEW_SURFACE_ID,
+        comments,
+        commentableLineNumbers,
+        onAddCommentClick: vi.fn(),
+        onDeleteComment: vi.fn()
+      }),
+    { initialProps }
+  )
+}
+
+beforeEach(() => {
+  rootCounts.created = 0
+  rootCounts.unmounted = 0
+})
+
+afterEach(() => {
+  document.body.replaceChildren()
+  vi.clearAllMocks()
+})
+
+describe('useDiffCommentDecorator commentable-line churn', () => {
+  it('keeps every comment root and view zone alive across value-equal review refreshes', async () => {
+    const fake = createFakeEditor()
+    const comments = [reviewNote(1), reviewNote(2), reviewNote(3)]
+    const hook = renderDecorator(fake, {
+      commentableLineNumbers: freshCommentableLines(),
+      comments
+    })
+
+    expect(rootCounts.created).toBe(3)
+    expect(fake.zones.size).toBe(3)
+
+    for (let refresh = 0; refresh < 5; refresh += 1) {
+      hook.rerender({ commentableLineNumbers: freshCommentableLines(), comments })
+    }
+    await flushDeferredUnmounts()
+
+    expect(lifecycleTotals(fake)).toEqual({
+      createRootCalls: 3,
+      rootUnmounts: 0,
+      monacoViewZones: 3
+    })
+
+    // Still tracked, so dropping a note reclaims its vertical space instead of leaving a blank gap.
+    hook.rerender({ commentableLineNumbers: freshCommentableLines(), comments: comments.slice(1) })
+    expect(fake.zones.size).toBe(2)
+  })
+
+  it('does not accumulate orphan zones when refreshes interleave with new review comments', async () => {
+    const fake = createFakeEditor()
+    let comments = [reviewNote(1)]
+    const hook = renderDecorator(fake, {
+      commentableLineNumbers: freshCommentableLines(),
+      comments
+    })
+
+    for (let refresh = 2; refresh <= 6; refresh += 1) {
+      comments = [...comments, reviewNote(refresh)]
+      hook.rerender({ commentableLineNumbers: freshCommentableLines(), comments })
+    }
+    await flushDeferredUnmounts()
+
+    // 6 live notes => 6 roots, 6 zones, nothing stranded.
+    expect(lifecycleTotals(fake)).toEqual({
+      createRootCalls: 6,
+      rootUnmounts: 0,
+      monacoViewZones: 6
+    })
+  })
+
+  it('rebuilds the add-button overlay when the commentable lines really change', async () => {
+    const fake = createFakeEditor()
+    const comments = [reviewNote(1)]
+    const hook = renderDecorator(fake, {
+      commentableLineNumbers: [10, 11, 12] as readonly number[],
+      comments
+    })
+
+    fake.emitMouseMove(40)
+    expect(isAddButtonVisible(fake.domNode)).toBe(false)
+
+    hook.rerender({ commentableLineNumbers: [10, 11, 12, 40], comments })
+    await flushDeferredUnmounts()
+
+    // Decorator is not stale: the widened set is live...
+    fake.emitMouseMove(40)
+    expect(isAddButtonVisible(fake.domNode)).toBe(true)
+    // ...and the existing note's zone/root was neither orphaned nor rebuilt.
+    expect(lifecycleTotals(fake)).toEqual({
+      createRootCalls: 1,
+      rootUnmounts: 0,
+      monacoViewZones: 1
+    })
+  })
+
+  it('removes its zones from Monaco when the model swaps under a retained editor', async () => {
+    const fake = createFakeEditor()
+    const comments = [reviewNote(1)]
+    const hook = renderHook(
+      ({ monacoModelIdentity }) =>
+        useDiffCommentDecorator({
+          editor: fake.editor,
+          monacoModelIdentity,
+          filePath: FILE_PATH,
+          worktreeId: REVIEW_SURFACE_ID,
+          comments,
+          commentableLineNumbers: freshCommentableLines(),
+          onAddCommentClick: vi.fn(),
+          onDeleteComment: vi.fn()
+        }),
+      { initialProps: { monacoModelIdentity: 'modified-v1' } }
+    )
+    const firstZoneIds = [...fake.zones.keys()]
+
+    hook.rerender({ monacoModelIdentity: 'modified-v2' })
+    await flushDeferredUnmounts()
+
+    // Stale zone ids are gone rather than left as untracked blank gaps, and the note was rebuilt.
+    expect(fake.zones.size).toBe(1)
+    expect([...fake.zones.keys()]).not.toEqual(firstZoneIds)
+    expect(rootCounts.created).toBe(2)
+    expect(rootCounts.unmounted).toBe(1)
+  })
+})
diff --git a/src/renderer/src/components/diff-comments/useDiffCommentDecorator.tsx b/src/renderer/src/components/diff-comments/useDiffCommentDecorator.tsx
index 8e7c484bb09..d1f26d24765 100644
--- a/src/renderer/src/components/diff-comments/useDiffCommentDecorator.tsx
+++ b/src/renderer/src/components/diff-comments/useDiffCommentDecorator.tsx
@@ -80,11 +80,17 @@ export function useDiffCommentDecorator({
     scrollToZoneFrameRef.current = null
   }, [])
 
+  // Key on the values, not the array identity: review surfaces re-fetch PR/MR file data on every
+  // refresh and hand us a fresh-but-equal number[], which would otherwise churn every consumer.
+  const commentableLineKey = commentableLineNumbers?.join(',')
   const commentableLineSet = useMemo(
     () => (commentableLineNumbers ? new Set(commentableLineNumbers) : null),
-    [commentableLineNumbers]
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    [commentableLineKey]
   )
 
+  // Add-button overlay only: it captures commentableLineSet/addButtonLabel, so it must be rebuilt when
+  // either changes. Kept apart from the zone teardown below, whose deps must mirror the zone-creating effect.
   useEffect(() => {
     if (!editor) {
       return
@@ -95,8 +101,7 @@ export function useDiffCommentDecorator({
       return
     }
 
-    const zones = zonesRef.current
-    const disposeAddButtonOverlay = installDiffCommentAddButtonOverlay({
+    return installDiffCommentAddButtonOverlay({
       editor,
       editorDomNode,
       addButtonLabel,
@@ -105,15 +110,33 @@ export function useDiffCommentDecorator({
       disposablesRef,
       onAddCommentClickRef
     })
+  }, [addButtonLabel, commentableLineSet, editor, monacoModelIdentity])
+
+  // Deps must stay a subset of the zone-creating effect's, or a teardown here is never followed by a rebuild.
+  useEffect(() => {
+    if (!editor) {
+      return
+    }
+
+    const zones = zonesRef.current
 
     return () => {
-      disposeAddButtonOverlay()
       // Editor swapped/torn down: unmount roots and clear tracking so the next mount starts known-empty.
       // Defer unmount via queueMicrotask: a sync unmount during React's commit triggers React 19's "unmount while rendering" warning; clear zones synchronously.
       const rootsToUnmount = Array.from(zones.values(), (z) => {
         z.disposeMouseDownStopper()
         return z.root
       })
+      // Drop the zones from Monaco too: clearing our map alone would strand them as untracked blank gaps
+      // in a still-live editor. No-op when the model already swapped (Monaco dropped them) or the editor is disposed.
+      if (zones.size > 0) {
+        const zoneIds = Array.from(zones.values(), (z) => z.zoneId)
+        editor.changeViewZones((accessor) => {
+          for (const zoneId of zoneIds) {
+            accessor.removeZone(zoneId)
+          }
+        })
+      }
       zones.clear()
       if (rootsToUnmount.length > 0) {
         queueMicrotask(() => {
@@ -127,7 +150,7 @@ export function useDiffCommentDecorator({
       pendingScrollRef.current = null
       scrollToZoneRef.current = null
     }
-  }, [addButtonLabel, cancelScrollToZoneFrame, commentableLineSet, editor, monacoModelIdentity])
+  }, [cancelScrollToZoneFrame, editor, monacoModelIdentity])
 
   useEffect(() => {
     if (!editor) {

From 3d67f2be2c5d5fb308c426964470133729241b20 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 12:56:26 -0700
Subject: [PATCH 57/92] perf(editor,source-control): batch closed-tab model
 sweeps, drop 40 store subscriptions (#18144)

Closing N diff tabs scanned the global Monaco model registry 2N times and
rendered both URI forms for every retained model on each scan. The Source
Control panel opened 42 store subscriptions from one hook, 40 of which watched
action identities that are fixed at store construction and can never change.
---
 .../closed-editor-tab-cache-sweep.test.ts     |  10 +-
 .../editor/closed-editor-tab-cache-sweep.ts   |  45 +++-
 .../editor/closed-editor-tab-disposal.test.ts | 235 ++++++++++++++++++
 .../editor/closed-editor-tab-disposal.ts      |  86 +++++++
 .../editor/diff-monaco-model-disposal.ts      |  69 ++++-
 .../editor/useClosedEditorTabCleanup.ts       |  70 +-----
 ...store-actions.store-subscriptions.test.tsx | 166 +++++++++++++
 .../listing/use-store-actions.ts              | 153 +++++-------
 8 files changed, 654 insertions(+), 180 deletions(-)
 create mode 100644 src/renderer/src/components/editor/closed-editor-tab-disposal.test.ts
 create mode 100644 src/renderer/src/components/editor/closed-editor-tab-disposal.ts
 create mode 100644 src/renderer/src/components/right-sidebar/source-control/listing/use-store-actions.store-subscriptions.test.tsx

diff --git a/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.test.ts b/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.test.ts
index 1b975d81339..726795a31dd 100644
--- a/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.test.ts
+++ b/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.test.ts
@@ -7,7 +7,7 @@ const position = (pageNumber: number): PdfViewPosition => ({ pageNumber, top: 0,
 describe('sweepClosedPdfViewPositions', () => {
   it('deletes the unscoped :pdf entry', () => {
     const cache = new Map([['/a.pdf:pdf', position(4)]])
-    sweepClosedPdfViewPositions(cache, '/a.pdf')
+    sweepClosedPdfViewPositions(cache, ['/a.pdf'])
     expect(cache.size).toBe(0)
   })
 
@@ -17,7 +17,7 @@ describe('sweepClosedPdfViewPositions', () => {
       ['/a.pdf::tab-2:pdf', position(9)],
       ['/a.pdf::tab-3:pdf', position(11)]
     ])
-    sweepClosedPdfViewPositions(cache, '/a.pdf')
+    sweepClosedPdfViewPositions(cache, ['/a.pdf'])
     expect(cache.size).toBe(0)
   })
 
@@ -27,7 +27,7 @@ describe('sweepClosedPdfViewPositions', () => {
       ['/b.pdf:pdf', position(7)],
       ['/b.pdf::tab-2:pdf', position(8)]
     ])
-    sweepClosedPdfViewPositions(cache, '/a.pdf')
+    sweepClosedPdfViewPositions(cache, ['/a.pdf'])
     expect([...cache.keys()]).toEqual(['/b.pdf:pdf', '/b.pdf::tab-2:pdf'])
   })
 
@@ -36,13 +36,13 @@ describe('sweepClosedPdfViewPositions', () => {
       ['/report.pdf:pdf', position(2)],
       ['/report.pdf.bak:pdf', position(3)]
     ])
-    sweepClosedPdfViewPositions(cache, '/report.pdf')
+    sweepClosedPdfViewPositions(cache, ['/report.pdf'])
     expect([...cache.keys()]).toEqual(['/report.pdf.bak:pdf'])
   })
 
   it('is a no-op when the file has no cached position', () => {
     const cache = new Map([['/b.pdf:pdf', position(7)]])
-    sweepClosedPdfViewPositions(cache, '/a.pdf')
+    sweepClosedPdfViewPositions(cache, ['/a.pdf'])
     expect(cache.size).toBe(1)
   })
 })
diff --git a/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.ts b/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.ts
index d53f0212723..b9769fb9dc8 100644
--- a/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.ts
+++ b/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.ts
@@ -1,23 +1,50 @@
 import type { PdfViewPosition } from '@/lib/scroll-cache'
 
-function deleteCacheEntriesByPrefix<T>(cache: Map<string, T>, prefix: string): void {
+/**
+ * Drops every pane-scoped (`<owner>::<pane>…`) entry belonging to any of `owners` in one pass over
+ * the cache, rather than one pass per owner. Split out from the cleanup hook so it is testable
+ * without pulling in the hook's `monaco-editor` import.
+ */
+export function deletePaneScopedCacheEntries<T>(
+  cache: Map<string, T>,
+  owners: readonly string[]
+): void {
+  if (owners.length === 0) {
+    return
+  }
+
+  const ownerSet = new Set(owners)
   for (const key of cache.keys()) {
-    if (key.startsWith(prefix)) {
+    if (hasPaneScopeOwner(key, ownerSet)) {
       cache.delete(key)
     }
   }
 }
 
-/**
- * Release the PDF positions a closed edit tab owns. Split out from the cleanup
- * hook so it is testable without pulling in the hook's `monaco-editor` import.
- */
+/** Equivalent to `key.startsWith(`${owner}::`)` for any owner in the set, probing `::` boundaries. */
+function hasPaneScopeOwner(key: string, owners: ReadonlySet<string>): boolean {
+  for (
+    let boundary = key.indexOf('::');
+    boundary !== -1;
+    boundary = key.indexOf('::', boundary + 1)
+  ) {
+    if (owners.has(key.slice(0, boundary))) {
+      return true
+    }
+  }
+
+  return false
+}
+
+/** Release the PDF positions closed edit tabs own. */
 export function sweepClosedPdfViewPositions(
   cache: Map<string, PdfViewPosition>,
-  filePath: string
+  filePaths: readonly string[]
 ): void {
   // Why: the `::`-scoped sweep does not cover the single-colon suffix, so the
   // unscoped key needs its own delete (same shape as :rich / :preview).
-  cache.delete(`${filePath}:pdf`)
-  deleteCacheEntriesByPrefix(cache, `${filePath}::`)
+  for (const filePath of filePaths) {
+    cache.delete(`${filePath}:pdf`)
+  }
+  deletePaneScopedCacheEntries(cache, filePaths)
 }
diff --git a/src/renderer/src/components/editor/closed-editor-tab-disposal.test.ts b/src/renderer/src/components/editor/closed-editor-tab-disposal.test.ts
new file mode 100644
index 00000000000..0223a4394b0
--- /dev/null
+++ b/src/renderer/src/components/editor/closed-editor-tab-disposal.test.ts
@@ -0,0 +1,235 @@
+import { beforeEach, describe, expect, it } from 'vitest'
+import {
+  diffViewStateCache,
+  editorSelectionCache,
+  pdfViewPositionCache,
+  scrollTopCache
+} from '@/lib/scroll-cache'
+import type { OpenFile } from '@/store/slices/editor'
+import { disposeClosedEditorTabs } from './closed-editor-tab-disposal'
+import {
+  getDiffViewerMonacoModelPaths,
+  getDiffViewerMonacoModelPathPrefixes,
+  type MonacoModelRegistry
+} from './diff-monaco-model-disposal'
+
+const CLOSED_DIFF_TAB_COUNT = 100
+const RETAINED_MODEL_COUNT = 320
+
+type FakeModel = {
+  path: string
+  attached: boolean
+  disposed: boolean
+  dispose: () => void
+  isAttachedToEditor: () => boolean
+  uri: { toString: (skipEncoding?: boolean) => string }
+}
+
+type FakeRegistry = MonacoModelRegistry & {
+  models: FakeModel[]
+  counters: { getModelsCalls: number; uriToStringCalls: number }
+}
+
+function createRegistry(models: FakeModel[]): FakeRegistry {
+  const counters = { getModelsCalls: 0, uriToStringCalls: 0 }
+  const byPath = new Map(models.map((model) => [model.path, model]))
+  for (const model of models) {
+    model.uri.toString = () => {
+      counters.uriToStringCalls += 1
+      return model.path
+    }
+  }
+  return {
+    models,
+    counters,
+    Uri: { parse: (value: string) => value },
+    editor: {
+      getModel: (uri: unknown) => byPath.get(String(uri)) ?? null,
+      getModels: () => {
+        counters.getModelsCalls += 1
+        return models
+      }
+    }
+  }
+}
+
+function createModel(path: string, attached = false): FakeModel {
+  const model: FakeModel = {
+    path,
+    attached,
+    disposed: false,
+    dispose: () => {
+      model.disposed = true
+    },
+    isAttachedToEditor: () => model.attached,
+    uri: { toString: () => path }
+  }
+  return model
+}
+
+function diffTab(id: string): OpenFile {
+  return { id, mode: 'diff', filePath: `/repo/${id}.ts` } as OpenFile
+}
+
+/** The pre-fix shape: one full registry scan, with both URI renderings, per owned prefix. */
+function disposeByPrefixPerTab(registry: FakeRegistry, prefixes: readonly string[]): void {
+  for (const prefix of prefixes) {
+    for (const model of registry.editor.getModels()) {
+      const uriString = model.uri.toString(true)
+      const encodedUriString = model.uri.toString()
+      if (
+        uriString === prefix ||
+        uriString.startsWith(`${prefix}:`) ||
+        encodedUriString === prefix ||
+        encodedUriString.startsWith(`${prefix}:`)
+      ) {
+        if (!model.isAttachedToEditor()) {
+          model.dispose()
+        }
+      }
+    }
+  }
+}
+
+/**
+ * 100 closed diff tabs, of which 60 still hold retained models (some with a large-diff generation
+ * suffix, some attached), plus 200 unrelated retained models from other tabs.
+ */
+function buildScenario(): {
+  closedTabs: OpenFile[]
+  models: FakeModel[]
+  prefixes: string[]
+} {
+  const closedTabs = Array.from({ length: CLOSED_DIFF_TAB_COUNT }, (_, i) => diffTab(`tab-${i}`))
+  const models: FakeModel[] = []
+
+  for (let i = 0; i < 60; i += 1) {
+    const base = getDiffViewerMonacoModelPaths({
+      modelKey: `tab-${i}`,
+      generationSuffix: ''
+    })
+    models.push(createModel(base.originalModelPath, i % 10 === 0))
+    models.push(createModel(base.modifiedModelPath))
+    if (i % 3 === 0) {
+      const regenerated = getDiffViewerMonacoModelPaths({
+        modelKey: `tab-${i}`,
+        generationSuffix: ':large-diff-generation:2'
+      })
+      models.push(createModel(regenerated.originalModelPath))
+    }
+  }
+
+  // Still-open tabs and plain edit models the sweep must not touch.
+  for (let i = 0; models.length < RETAINED_MODEL_COUNT; i += 1) {
+    const stillOpen = getDiffViewerMonacoModelPaths({
+      modelKey: `open-tab-${i}`,
+      generationSuffix: ''
+    })
+    models.push(createModel(stillOpen.originalModelPath))
+    models.push(createModel(`/repo/src/file-${i}.ts`))
+  }
+
+  const prefixes = closedTabs.flatMap((tab) => {
+    const { originalModelPathPrefix, modifiedModelPathPrefix } =
+      getDiffViewerMonacoModelPathPrefixes(tab.id)
+    return [originalModelPathPrefix, modifiedModelPathPrefix]
+  })
+
+  return { closedTabs, models, prefixes }
+}
+
+beforeEach(() => {
+  scrollTopCache.clear()
+  editorSelectionCache.clear()
+  diffViewStateCache.clear()
+  pdfViewPositionCache.clear()
+})
+
+describe('disposeClosedEditorTabs', () => {
+  it('scans the model registry once per batch instead of twice per closed diff tab', () => {
+    const batched = buildScenario()
+    const batchedRegistry = createRegistry(batched.models)
+    disposeClosedEditorTabs(batchedRegistry, batched.closedTabs)
+
+    const perTab = buildScenario()
+    const perTabRegistry = createRegistry(perTab.models)
+    disposeByPrefixPerTab(perTabRegistry, perTab.prefixes)
+
+    // Pre-fix: 2 scans per closed tab, each rendering both URI forms for every retained model.
+    expect(perTabRegistry.counters.getModelsCalls).toBe(CLOSED_DIFF_TAB_COUNT * 2)
+    expect(perTabRegistry.counters.uriToStringCalls).toBe(
+      CLOSED_DIFF_TAB_COUNT * 2 * perTab.models.length * 2
+    )
+
+    expect(batchedRegistry.counters.getModelsCalls).toBe(1)
+    expect(batchedRegistry.counters.uriToStringCalls).toBeLessThanOrEqual(batched.models.length * 2)
+  })
+
+  it('disposes exactly the models the per-tab sweep disposed', () => {
+    const batched = buildScenario()
+    disposeClosedEditorTabs(createRegistry(batched.models), batched.closedTabs)
+
+    const perTab = buildScenario()
+    disposeByPrefixPerTab(createRegistry(perTab.models), perTab.prefixes)
+
+    const disposedPaths = (models: FakeModel[]): string[] =>
+      models
+        .filter((m) => m.disposed)
+        .map((m) => m.path)
+        .sort()
+
+    expect(disposedPaths(batched.models)).toEqual(disposedPaths(perTab.models))
+    expect(disposedPaths(batched.models).length).toBeGreaterThan(0)
+    // Attached models survive, as does everything owned by a still-open tab.
+    expect(batched.models.filter((m) => m.attached).every((m) => !m.disposed)).toBe(true)
+    expect(
+      batched.models.filter((m) => m.path.includes('open-tab-')).every((m) => !m.disposed)
+    ).toBe(true)
+  })
+
+  it('sweeps pane-scoped cache entries for closed edit tabs in one pass per cache', () => {
+    scrollTopCache.set('/repo/a.ts', 10)
+    scrollTopCache.set('/repo/a.ts::pane-1', 20)
+    scrollTopCache.set('/repo/a.ts:rich', 30)
+    scrollTopCache.set('/repo/b.ts::pane-1', 40)
+    editorSelectionCache.set('/repo/a.ts::pane-2', [] as never)
+    pdfViewPositionCache.set('/repo/a.ts:pdf', {
+      pageNumber: 1,
+      top: 0,
+      left: 0
+    })
+    pdfViewPositionCache.set('/repo/a.ts::pane-1:pdf', {
+      pageNumber: 2,
+      top: 0,
+      left: 0
+    })
+
+    disposeClosedEditorTabs(createRegistry([]), [
+      { id: '/repo/a.ts', mode: 'edit', filePath: '/repo/a.ts' } as OpenFile
+    ])
+
+    expect([...scrollTopCache.keys()]).toEqual(['/repo/b.ts::pane-1'])
+    expect(editorSelectionCache.size).toBe(0)
+    expect(pdfViewPositionCache.size).toBe(0)
+  })
+
+  it('drops diff view state and preview scroll entries for closed diff tabs', () => {
+    diffViewStateCache.set('tab-1', {} as never)
+    diffViewStateCache.set('tab-1::pane-1', {} as never)
+    diffViewStateCache.set('tab-10', {} as never)
+    scrollTopCache.set('tab-1:preview', 5)
+    scrollTopCache.set('tab-1::pane-1', 6)
+
+    disposeClosedEditorTabs(createRegistry([]), [diffTab('tab-1')])
+
+    expect([...diffViewStateCache.keys()]).toEqual(['tab-10'])
+    expect(scrollTopCache.size).toBe(0)
+  })
+
+  it('is a no-op when nothing closed', () => {
+    const registry = createRegistry([createModel('diff:original:tab-1:tab-1')])
+    disposeClosedEditorTabs(registry, [])
+    expect(registry.counters.getModelsCalls).toBe(0)
+    expect(registry.models[0].disposed).toBe(false)
+  })
+})
diff --git a/src/renderer/src/components/editor/closed-editor-tab-disposal.ts b/src/renderer/src/components/editor/closed-editor-tab-disposal.ts
new file mode 100644
index 00000000000..ddde3a74502
--- /dev/null
+++ b/src/renderer/src/components/editor/closed-editor-tab-disposal.ts
@@ -0,0 +1,86 @@
+import type { OpenFile } from '@/store/slices/editor'
+import {
+  editorSelectionCache,
+  diffViewStateCache,
+  pdfViewPositionCache,
+  scrollTopCache
+} from '@/lib/scroll-cache'
+import {
+  disposeUnattachedMonacoModelsByPathPrefixes,
+  getDiffViewerMonacoModelPathPrefixes,
+  type MonacoModelRegistry
+} from './diff-monaco-model-disposal'
+import {
+  deletePaneScopedCacheEntries,
+  sweepClosedPdfViewPositions
+} from './closed-editor-tab-cache-sweep'
+
+/**
+ * Releases the Monaco models and view-state cache entries owned by a batch of closed tabs.
+ *
+ * Why the batch shape: every prefix sweep here is a full scan of a shared registry or cache, so
+ * doing one per closed tab makes "close all"/worktree-switch quadratic in retained models. Takes
+ * the monaco namespace as an argument so it stays testable without importing `monaco-editor`.
+ */
+export function disposeClosedEditorTabs(
+  monacoRegistry: MonacoModelRegistry,
+  closedFiles: readonly OpenFile[]
+): void {
+  if (closedFiles.length === 0) {
+    return
+  }
+
+  const diffModelPathPrefixes: string[] = []
+  const scrollTopOwners: string[] = []
+  const editorSelectionOwners: string[] = []
+  const diffViewStateOwners: string[] = []
+  const closedPdfFilePaths: string[] = []
+
+  for (const closedFile of closedFiles) {
+    switch (closedFile.mode) {
+      case 'edit':
+        // Why: the edit model URI is constructed via monaco.Uri.parse(filePath)
+        // to match @monaco-editor/react's `path` prop convention.
+        monacoRegistry.editor.getModel(monacoRegistry.Uri.parse(closedFile.filePath))?.dispose()
+        scrollTopCache.delete(closedFile.filePath)
+        // Why: markdown and mermaid surfaces keep mode-scoped scroll positions.
+        scrollTopCache.delete(`${closedFile.filePath}:rich`)
+        scrollTopCache.delete(`${closedFile.filePath}:preview`)
+        scrollTopCache.delete(`${closedFile.filePath}:mermaid-diagram`)
+        editorSelectionCache.delete(closedFile.filePath)
+        scrollTopOwners.push(closedFile.filePath)
+        editorSelectionOwners.push(closedFile.filePath)
+        // Why: only 'edit' tabs ever get a PDF scroll key (see EditorContent).
+        closedPdfFilePaths.push(closedFile.filePath)
+        break
+      case 'markdown-preview':
+        // Why: preview tabs own pane-scoped preview scroll cache entries even
+        // though they do not retain Monaco models.
+        scrollTopCache.delete(`${closedFile.id}:preview`)
+        scrollTopOwners.push(closedFile.id)
+        break
+      case 'diff': {
+        // Why: kept diff models are keyed by tab id, and fallback recovery can
+        // append generation suffixes; closing the tab owns that whole namespace.
+        const { originalModelPathPrefix, modifiedModelPathPrefix } =
+          getDiffViewerMonacoModelPathPrefixes(closedFile.id)
+        diffModelPathPrefixes.push(originalModelPathPrefix, modifiedModelPathPrefix)
+        diffViewStateCache.delete(closedFile.id)
+        diffViewStateOwners.push(closedFile.id)
+        scrollTopCache.delete(`${closedFile.id}:preview`)
+        scrollTopOwners.push(closedFile.id)
+        break
+      }
+      case 'conflict-review':
+        break
+      case 'check-details':
+        break
+    }
+  }
+
+  disposeUnattachedMonacoModelsByPathPrefixes(monacoRegistry, diffModelPathPrefixes)
+  deletePaneScopedCacheEntries(scrollTopCache, scrollTopOwners)
+  deletePaneScopedCacheEntries(editorSelectionCache, editorSelectionOwners)
+  deletePaneScopedCacheEntries(diffViewStateCache, diffViewStateOwners)
+  sweepClosedPdfViewPositions(pdfViewPositionCache, closedPdfFilePaths)
+}
diff --git a/src/renderer/src/components/editor/diff-monaco-model-disposal.ts b/src/renderer/src/components/editor/diff-monaco-model-disposal.ts
index 8252abc8381..f833e53ec5b 100644
--- a/src/renderer/src/components/editor/diff-monaco-model-disposal.ts
+++ b/src/renderer/src/components/editor/diff-monaco-model-disposal.ts
@@ -16,7 +16,7 @@ type DisposableMonacoModel = Pick<editor.ITextModel, 'dispose' | 'isAttachedToEd
   uri: { toString(skipEncoding?: boolean): string }
 }
 
-type MonacoModelRegistry = {
+export type MonacoModelRegistry = {
   Uri: {
     parse(value: string): unknown
   }
@@ -83,21 +83,74 @@ export function disposeUnattachedMonacoModelsByPathPrefix(
   monacoRegistry: MonacoModelRegistry,
   modelPathPrefix: string
 ): void {
-  for (const model of monacoRegistry.editor.getModels()) {
-    const uriString = model.uri.toString(true)
-    const encodedUriString = model.uri.toString()
+  disposeUnattachedMonacoModelsByPathPrefixes(monacoRegistry, [modelPathPrefix])
+}
 
+/**
+ * Sweeps every owned prefix in a single scan of the global model registry.
+ *
+ * Why batched: `getModels()` returns every retained model in the app, so closing N diff tabs one
+ * prefix at a time costs N full scans and 2xN `uri.toString()` allocations per model. Closing 100
+ * tabs against 700 retained models is ~140k throwaway strings inside one synchronous effect.
+ */
+export function disposeUnattachedMonacoModelsByPathPrefixes(
+  monacoRegistry: MonacoModelRegistry,
+  modelPathPrefixes: readonly string[]
+): void {
+  if (modelPathPrefixes.length === 0) {
+    return
+  }
+
+  const ownedPrefixes = new Set(modelPathPrefixes)
+  let shortestPrefixLength = Number.POSITIVE_INFINITY
+  let longestPrefixLength = 0
+  for (const prefix of ownedPrefixes) {
+    shortestPrefixLength = Math.min(shortestPrefixLength, prefix.length)
+    longestPrefixLength = Math.max(longestPrefixLength, prefix.length)
+  }
+
+  const bounds = { shortestPrefixLength, longestPrefixLength }
+  for (const model of monacoRegistry.editor.getModels()) {
+    // Why both forms: model URIs are built via `Uri.parse`, so a prefix can match the decoded or
+    // the percent-encoded rendering depending on what characters the tab id carries.
     if (
-      uriString === modelPathPrefix ||
-      uriString.startsWith(`${modelPathPrefix}:`) ||
-      encodedUriString === modelPathPrefix ||
-      encodedUriString.startsWith(`${modelPathPrefix}:`)
+      isOwnedByPathPrefix(model.uri.toString(true), ownedPrefixes, bounds) ||
+      isOwnedByPathPrefix(model.uri.toString(), ownedPrefixes, bounds)
     ) {
       disposeUnattachedMonacoModel(model)
     }
   }
 }
 
+/**
+ * Equivalent to `uri === prefix || uri.startsWith(`${prefix}:`)` for any prefix in the set, but
+ * probes the URI's own `:` boundaries instead of testing every prefix — O(segments) not O(prefixes).
+ */
+function isOwnedByPathPrefix(
+  uriString: string,
+  ownedPrefixes: ReadonlySet<string>,
+  bounds: { shortestPrefixLength: number; longestPrefixLength: number }
+): boolean {
+  if (ownedPrefixes.has(uriString)) {
+    return true
+  }
+
+  for (
+    let boundary = uriString.indexOf(':');
+    boundary !== -1 && boundary <= bounds.longestPrefixLength;
+    boundary = uriString.indexOf(':', boundary + 1)
+  ) {
+    if (
+      boundary >= bounds.shortestPrefixLength &&
+      ownedPrefixes.has(uriString.slice(0, boundary))
+    ) {
+      return true
+    }
+  }
+
+  return false
+}
+
 function disposeUnattachedMonacoModel(model: DisposableMonacoModel | null): void {
   if (!model || model.isAttachedToEditor()) {
     return
diff --git a/src/renderer/src/components/editor/useClosedEditorTabCleanup.ts b/src/renderer/src/components/editor/useClosedEditorTabCleanup.ts
index 56e25045353..e86fbbc43f6 100644
--- a/src/renderer/src/components/editor/useClosedEditorTabCleanup.ts
+++ b/src/renderer/src/components/editor/useClosedEditorTabCleanup.ts
@@ -1,80 +1,22 @@
 import { useEffect, useRef } from 'react'
 import * as monaco from 'monaco-editor'
 import type { OpenFile } from '@/store/slices/editor'
-import {
-  editorSelectionCache,
-  diffViewStateCache,
-  pdfViewPositionCache,
-  scrollTopCache
-} from '@/lib/scroll-cache'
-import {
-  disposeUnattachedMonacoModelsByPathPrefix,
-  getDiffViewerMonacoModelPathPrefixes
-} from './diff-monaco-model-disposal'
-import { sweepClosedPdfViewPositions } from './closed-editor-tab-cache-sweep'
-
-function deleteCacheEntriesByPrefix<T>(cache: Map<string, T>, prefix: string): void {
-  for (const key of cache.keys()) {
-    if (key.startsWith(prefix)) {
-      cache.delete(key)
-    }
-  }
-}
+import { disposeClosedEditorTabs } from './closed-editor-tab-disposal'
 
 export function useClosedEditorTabCleanup(openFiles: OpenFile[]): void {
   const prevOpenFilesRef = useRef<Map<string, OpenFile>>(new Map())
 
   useEffect(() => {
     const currentFilesById = new Map(openFiles.map((f) => [f.id, f]))
+    const closedFiles: OpenFile[] = []
     for (const [prevId, prevFile] of prevOpenFilesRef.current) {
       if (!currentFilesById.has(prevId)) {
-        disposeClosedEditorTab(prevId, prevFile)
+        closedFiles.push(prevFile)
       }
     }
+    // Why one call for the whole removal batch: each sweep scans a shared registry/cache, so
+    // per-tab sweeps make a "close all" quadratic in retained models.
+    disposeClosedEditorTabs(monaco, closedFiles)
     prevOpenFilesRef.current = currentFilesById
   }, [openFiles])
 }
-
-function disposeClosedEditorTab(prevId: string, prevFile: OpenFile): void {
-  switch (prevFile.mode) {
-    case 'edit':
-      // Why: the edit model URI is constructed via monaco.Uri.parse(filePath)
-      // to match @monaco-editor/react's `path` prop convention.
-      monaco.editor.getModel(monaco.Uri.parse(prevFile.filePath))?.dispose()
-      scrollTopCache.delete(prevFile.filePath)
-      deleteCacheEntriesByPrefix(scrollTopCache, `${prevFile.filePath}::`)
-      // Why: markdown and mermaid surfaces keep mode-scoped scroll positions.
-      scrollTopCache.delete(`${prevFile.filePath}:rich`)
-      scrollTopCache.delete(`${prevFile.filePath}:preview`)
-      scrollTopCache.delete(`${prevFile.filePath}:mermaid-diagram`)
-      editorSelectionCache.delete(prevFile.filePath)
-      deleteCacheEntriesByPrefix(editorSelectionCache, `${prevFile.filePath}::`)
-      // Why: only 'edit' tabs ever get a PDF scroll key (see EditorContent).
-      sweepClosedPdfViewPositions(pdfViewPositionCache, prevFile.filePath)
-      break
-    case 'markdown-preview':
-      // Why: preview tabs own pane-scoped preview scroll cache entries even
-      // though they do not retain Monaco models.
-      scrollTopCache.delete(`${prevFile.id}:preview`)
-      deleteCacheEntriesByPrefix(scrollTopCache, `${prevFile.id}::`)
-      break
-    case 'diff':
-      // Why: kept diff models are keyed by tab id, and fallback recovery can
-      // append generation suffixes; closing the tab owns that whole namespace.
-      {
-        const { originalModelPathPrefix, modifiedModelPathPrefix } =
-          getDiffViewerMonacoModelPathPrefixes(prevId)
-        disposeUnattachedMonacoModelsByPathPrefix(monaco, originalModelPathPrefix)
-        disposeUnattachedMonacoModelsByPathPrefix(monaco, modifiedModelPathPrefix)
-      }
-      diffViewStateCache.delete(prevId)
-      deleteCacheEntriesByPrefix(diffViewStateCache, `${prevId}::`)
-      scrollTopCache.delete(`${prevId}:preview`)
-      deleteCacheEntriesByPrefix(scrollTopCache, `${prevId}::`)
-      break
-    case 'conflict-review':
-      break
-    case 'check-details':
-      break
-  }
-}
diff --git a/src/renderer/src/components/right-sidebar/source-control/listing/use-store-actions.store-subscriptions.test.tsx b/src/renderer/src/components/right-sidebar/source-control/listing/use-store-actions.store-subscriptions.test.tsx
new file mode 100644
index 00000000000..dca92f903f1
--- /dev/null
+++ b/src/renderer/src/components/right-sidebar/source-control/listing/use-store-actions.store-subscriptions.test.tsx
@@ -0,0 +1,166 @@
+// @vitest-environment happy-dom
+
+import { act, useState, type ReactNode } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, describe, expect, it } from 'vitest'
+import { useAppStore } from '@/store'
+import { readStoreListenerCount } from '@/store/store-listener-census'
+import { useSourceControlStoreActions, type SourceControlStoreActions } from './use-store-actions'
+
+const originalState = useAppStore.getState()
+
+let root: Root | null = null
+let container: HTMLDivElement | null = null
+
+function mount(node: ReactNode): void {
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+  act(() => root?.render(node))
+}
+
+function unmount(): void {
+  if (root) {
+    act(() => root?.unmount())
+  }
+  root = null
+  container?.remove()
+  container = null
+}
+
+function listenerCount(): number {
+  const count = readStoreListenerCount()
+  if (count === null) {
+    throw new Error('store listener census unavailable')
+  }
+  return count
+}
+
+afterEach(() => {
+  unmount()
+  useAppStore.setState(originalState, true)
+})
+
+/** Everything the hook returns that is a store action rather than subscribed state. */
+const ACTION_KEYS = Object.keys(originalState).filter(
+  (key) => typeof (originalState as Record<string, unknown>)[key] === 'function'
+)
+
+describe('useSourceControlStoreActions store subscriptions', () => {
+  it('keeps only the two generation-record maps subscribed', () => {
+    const baseline = listenerCount()
+
+    function Probe(): null {
+      useSourceControlStoreActions()
+      return null
+    }
+    mount(<Probe />)
+
+    // Why 2: `pullRequestGenerationRecords` and `commitMessageGenerationRecords` are the only
+    // entries that are state; the other 40 are actions read through getState().
+    expect(listenerCount() - baseline).toBe(2)
+
+    unmount()
+    expect(listenerCount()).toBe(baseline)
+  })
+
+  it('returns the same object across an unrelated store write and re-render', () => {
+    let latest: SourceControlStoreActions | null = null
+    let rerender: (() => void) | null = null
+
+    function Probe(): null {
+      const [, setTick] = useState(0)
+      rerender = () => setTick((t) => t + 1)
+      latest = useSourceControlStoreActions()
+      return null
+    }
+    mount(<Probe />)
+
+    const first = latest
+    expect(first).not.toBeNull()
+
+    act(() => {
+      useAppStore.setState({
+        rightSidebarOpen: !originalState.rightSidebarOpen
+      })
+    })
+    act(() => rerender?.())
+
+    expect(latest).toBe(first)
+  })
+
+  it('still tracks the generation-record maps it subscribes to', () => {
+    let latest: SourceControlStoreActions | null = null
+    function Probe(): null {
+      latest = useSourceControlStoreActions()
+      return null
+    }
+    function read(): SourceControlStoreActions {
+      if (!latest) {
+        throw new Error('probe did not render')
+      }
+      return latest
+    }
+    mount(<Probe />)
+
+    const before = read()
+    const record = { status: 'pending' } as never
+    act(() => {
+      useAppStore.setState({
+        pullRequestGenerationRecords: { 'wt-1': record }
+      })
+    })
+
+    expect(read()).not.toBe(before)
+    expect(read().prGenerationRecords).toEqual({ 'wt-1': record })
+
+    const afterPr = read()
+    act(() => {
+      useAppStore.setState({
+        commitMessageGenerationRecords: { 'wt-1': record }
+      })
+    })
+    expect(read()).not.toBe(afterPr)
+    expect(read().commitMessageGenerationRecords).toEqual({ 'wt-1': record })
+  })
+
+  it('hands back the live store action references', () => {
+    let latest: SourceControlStoreActions | null = null
+    function Probe(): null {
+      latest = useSourceControlStoreActions()
+      return null
+    }
+    mount(<Probe />)
+
+    const state = useAppStore.getState() as unknown as Record<string, unknown>
+    const returned = latest as unknown as Record<string, unknown>
+    const returnedActionKeys = Object.keys(returned).filter(
+      (key) => typeof returned[key] === 'function'
+    )
+
+    expect(returnedActionKeys.length).toBe(40)
+    for (const key of returnedActionKeys) {
+      expect(returned[key]).toBe(state[key])
+    }
+  })
+
+  it('never reassigns a store action, which is what makes getState() safe here', () => {
+    const before = useAppStore.getState() as unknown as Record<string, unknown>
+    const snapshot = new Map(ACTION_KEYS.map((key) => [key, before[key]]))
+
+    // Drive real writes through several slices, then confirm no action identity moved.
+    act(() => {
+      useAppStore.getState().setRightSidebarOpen(true)
+      useAppStore.getState().setRightSidebarTab('source-control')
+      useAppStore.getState().allocatePullRequestGenerationRequestId()
+      useAppStore.getState().setPullRequestGenerationRecord('wt-1', { status: 'pending' } as never)
+      useAppStore.getState().setCommitMessageGenerationRecord('wt-1', {
+        status: 'pending'
+      } as never)
+    })
+
+    const after = useAppStore.getState() as unknown as Record<string, unknown>
+    const moved = ACTION_KEYS.filter((key) => after[key] !== snapshot.get(key))
+    expect(moved).toEqual([])
+  })
+})
diff --git a/src/renderer/src/components/right-sidebar/source-control/listing/use-store-actions.ts b/src/renderer/src/components/right-sidebar/source-control/listing/use-store-actions.ts
index 230cc4aebeb..d85c7cd04d8 100644
--- a/src/renderer/src/components/right-sidebar/source-control/listing/use-store-actions.ts
+++ b/src/renderer/src/components/right-sidebar/source-control/listing/use-store-actions.ts
@@ -1,105 +1,70 @@
+import { useMemo } from 'react'
 import { useAppStore } from '@/store'
 
 /**
- * Binds every store action the Source Control panel dispatches. Each entry keeps its own selector so
- * the returned references stay stable and can be used directly in downstream dependency arrays.
+ * Binds every store action the Source Control panel dispatches.
+ *
+ * Why `getState()` and not one selector each: zustand action identities are fixed when the store is
+ * built and no slice ever puts one in a `set()` payload, so subscribing to them can never fire. The
+ * 40 action subscriptions only added 40 live listeners and 40 selector runs to every store write
+ * while the panel was mounted. The two generation-record maps are real state, so they stay
+ * subscribed.
+ *
+ * Reference stability is preserved and slightly stronger than before: each action keeps the single
+ * identity it was created with, and the returned object itself is now stable until one of the two
+ * subscribed maps changes, so downstream dependency arrays keep working.
  */
 export function useSourceControlStoreActions() {
-  const updateSettings = useAppStore((s) => s.updateSettings)
-  const openSettingsTarget = useAppStore((s) => s.openSettingsTarget)
-  const openSettingsPage = useAppStore((s) => s.openSettingsPage)
-  const fetchHostedReviewForBranch = useAppStore((s) => s.fetchHostedReviewForBranch)
-  const getHostedReviewCreationEligibility = useAppStore(
-    (s) => s.getHostedReviewCreationEligibility
-  )
-  const createHostedReview = useAppStore((s) => s.createHostedReview)
-  const createStackedHostedReview = useAppStore((s) => s.createStackedHostedReview)
-  const updateWorktreeMeta = useAppStore((s) => s.updateWorktreeMeta)
-  const openModal = useAppStore((s) => s.openModal)
-  const fetchPRForBranch = useAppStore((s) => s.fetchPRForBranch)
-  const enqueueGitHubPRRefresh = useAppStore((s) => s.enqueueGitHubPRRefresh)
-  const updateRepo = useAppStore((s) => s.updateRepo)
-  const setGitStatus = useAppStore((s) => s.setGitStatus)
-  const updateWorktreeGitIdentity = useAppStore((s) => s.updateWorktreeGitIdentity)
-  const beginGitBranchCompareRequest = useAppStore((s) => s.beginGitBranchCompareRequest)
-  const setGitBranchCompareResult = useAppStore((s) => s.setGitBranchCompareResult)
-  const fetchUpstreamStatus = useAppStore((s) => s.fetchUpstreamStatus)
-  const ensureHostedReviewPushTarget = useAppStore((s) => s.ensureHostedReviewPushTarget)
-  const setUpstreamStatus = useAppStore((s) => s.setUpstreamStatus)
-  const pushBranch = useAppStore((s) => s.pushBranch)
-  const pullBranch = useAppStore((s) => s.pullBranch)
-  const fastForwardBranch = useAppStore((s) => s.fastForwardBranch)
-  const syncBranch = useAppStore((s) => s.syncBranch)
-  const rebaseFromBase = useAppStore((s) => s.rebaseFromBase)
-  const fetchBranch = useAppStore((s) => s.fetchBranch)
-  const revealInExplorer = useAppStore((s) => s.revealInExplorer)
-  const openConflictReview = useAppStore((s) => s.openConflictReview)
-  const openAllDiffs = useAppStore((s) => s.openAllDiffs)
-  const openBranchAllDiffs = useAppStore((s) => s.openBranchAllDiffs)
-  const deleteDiffComment = useAppStore((s) => s.deleteDiffComment)
-  const clearDiffComments = useAppStore((s) => s.clearDiffComments)
-  const clearDiffCommentsForFile = useAppStore((s) => s.clearDiffCommentsForFile)
-  const setRightSidebarOpen = useAppStore((s) => s.setRightSidebarOpen)
-  const setRightSidebarTab = useAppStore((s) => s.setRightSidebarTab)
   const prGenerationRecords = useAppStore((s) => s.pullRequestGenerationRecords)
-  const allocatePullRequestGenerationRequestId = useAppStore(
-    (s) => s.allocatePullRequestGenerationRequestId
-  )
-  const setPullRequestGenerationRecord = useAppStore((s) => s.setPullRequestGenerationRecord)
-  const updatePullRequestGenerationRecord = useAppStore((s) => s.updatePullRequestGenerationRecord)
   const commitMessageGenerationRecords = useAppStore((s) => s.commitMessageGenerationRecords)
-  const allocateCommitMessageGenerationRequestId = useAppStore(
-    (s) => s.allocateCommitMessageGenerationRequestId
-  )
-  const setCommitMessageGenerationRecord = useAppStore((s) => s.setCommitMessageGenerationRecord)
-  const updateCommitMessageGenerationRecord = useAppStore(
-    (s) => s.updateCommitMessageGenerationRecord
-  )
 
-  return {
-    allocateCommitMessageGenerationRequestId,
-    allocatePullRequestGenerationRequestId,
-    beginGitBranchCompareRequest,
-    clearDiffComments,
-    clearDiffCommentsForFile,
-    commitMessageGenerationRecords,
-    createHostedReview,
-    createStackedHostedReview,
-    deleteDiffComment,
-    enqueueGitHubPRRefresh,
-    ensureHostedReviewPushTarget,
-    fastForwardBranch,
-    fetchBranch,
-    fetchHostedReviewForBranch,
-    fetchPRForBranch,
-    fetchUpstreamStatus,
-    getHostedReviewCreationEligibility,
-    openAllDiffs,
-    openBranchAllDiffs,
-    openConflictReview,
-    openModal,
-    openSettingsPage,
-    openSettingsTarget,
-    prGenerationRecords,
-    pullBranch,
-    pushBranch,
-    rebaseFromBase,
-    revealInExplorer,
-    setCommitMessageGenerationRecord,
-    setGitBranchCompareResult,
-    setGitStatus,
-    setPullRequestGenerationRecord,
-    setRightSidebarOpen,
-    setRightSidebarTab,
-    setUpstreamStatus,
-    syncBranch,
-    updateCommitMessageGenerationRecord,
-    updatePullRequestGenerationRecord,
-    updateRepo,
-    updateSettings,
-    updateWorktreeGitIdentity,
-    updateWorktreeMeta
-  }
+  return useMemo(() => {
+    const state = useAppStore.getState()
+    return {
+      allocateCommitMessageGenerationRequestId: state.allocateCommitMessageGenerationRequestId,
+      allocatePullRequestGenerationRequestId: state.allocatePullRequestGenerationRequestId,
+      beginGitBranchCompareRequest: state.beginGitBranchCompareRequest,
+      clearDiffComments: state.clearDiffComments,
+      clearDiffCommentsForFile: state.clearDiffCommentsForFile,
+      commitMessageGenerationRecords,
+      createHostedReview: state.createHostedReview,
+      createStackedHostedReview: state.createStackedHostedReview,
+      deleteDiffComment: state.deleteDiffComment,
+      enqueueGitHubPRRefresh: state.enqueueGitHubPRRefresh,
+      ensureHostedReviewPushTarget: state.ensureHostedReviewPushTarget,
+      fastForwardBranch: state.fastForwardBranch,
+      fetchBranch: state.fetchBranch,
+      fetchHostedReviewForBranch: state.fetchHostedReviewForBranch,
+      fetchPRForBranch: state.fetchPRForBranch,
+      fetchUpstreamStatus: state.fetchUpstreamStatus,
+      getHostedReviewCreationEligibility: state.getHostedReviewCreationEligibility,
+      openAllDiffs: state.openAllDiffs,
+      openBranchAllDiffs: state.openBranchAllDiffs,
+      openConflictReview: state.openConflictReview,
+      openModal: state.openModal,
+      openSettingsPage: state.openSettingsPage,
+      openSettingsTarget: state.openSettingsTarget,
+      prGenerationRecords,
+      pullBranch: state.pullBranch,
+      pushBranch: state.pushBranch,
+      rebaseFromBase: state.rebaseFromBase,
+      revealInExplorer: state.revealInExplorer,
+      setCommitMessageGenerationRecord: state.setCommitMessageGenerationRecord,
+      setGitBranchCompareResult: state.setGitBranchCompareResult,
+      setGitStatus: state.setGitStatus,
+      setPullRequestGenerationRecord: state.setPullRequestGenerationRecord,
+      setRightSidebarOpen: state.setRightSidebarOpen,
+      setRightSidebarTab: state.setRightSidebarTab,
+      setUpstreamStatus: state.setUpstreamStatus,
+      syncBranch: state.syncBranch,
+      updateCommitMessageGenerationRecord: state.updateCommitMessageGenerationRecord,
+      updatePullRequestGenerationRecord: state.updatePullRequestGenerationRecord,
+      updateRepo: state.updateRepo,
+      updateSettings: state.updateSettings,
+      updateWorktreeGitIdentity: state.updateWorktreeGitIdentity,
+      updateWorktreeMeta: state.updateWorktreeMeta
+    }
+  }, [commitMessageGenerationRecords, prGenerationRecords])
 }
 
 export type SourceControlStoreActions = ReturnType<typeof useSourceControlStoreActions>

From f03043544a12511b8d56e73b8bb998209c7272db Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 12:59:42 -0700
Subject: [PATCH 58/92] perf(keybindings): stop recomputing shortcut labels on
 every render (#18145)

Shortcut labels were rebuilt from scratch in the render body of every
component that shows one, which kept parseKeybinding running ~120x/sec
in a fully idle app.

- Cache the label layer per overrides object (WeakMap), so a keybinding
  edit hands out a new object and therefore a fresh cache.
- Memoize parseKeybinding behind a bounded cache; binding strings come
  from a fixed definition set plus user overrides.
- Hoist the per-call token/label object literals in normalizeKeyToken
  and formatKeyToken to module constants.
---
 .../src/hooks/shortcut-label-cache.test.tsx   | 174 ++++++++++++++++++
 src/renderer/src/hooks/useShortcutLabel.ts    |  69 +++++--
 src/shared/keybindings-parse-cache.test.ts    |  95 ++++++++++
 src/shared/keybindings/formatting.ts          |  65 +++----
 src/shared/keybindings/parser.ts              |  71 ++++---
 5 files changed, 403 insertions(+), 71 deletions(-)
 create mode 100644 src/renderer/src/hooks/shortcut-label-cache.test.tsx
 create mode 100644 src/shared/keybindings-parse-cache.test.ts

diff --git a/src/renderer/src/hooks/shortcut-label-cache.test.tsx b/src/renderer/src/hooks/shortcut-label-cache.test.tsx
new file mode 100644
index 00000000000..9c7f32a632e
--- /dev/null
+++ b/src/renderer/src/hooks/shortcut-label-cache.test.tsx
@@ -0,0 +1,174 @@
+// @vitest-environment happy-dom
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { act, cleanup, render, screen } from '@testing-library/react'
+import type * as KeybindingsModule from '../../../shared/keybindings'
+import type { KeybindingOverrides } from '../../../shared/keybindings'
+
+const counters = vi.hoisted(() => ({ effective: 0, formatList: 0, formatBinding: 0 }))
+const platformRef = vi.hoisted(() => ({ current: 'darwin' as NodeJS.Platform }))
+
+vi.mock('../lib/shortcut-platform', () => ({
+  getShortcutPlatform: () => platformRef.current
+}))
+
+vi.mock('../../../shared/keybindings', async (importOriginal) => {
+  const actual = await importOriginal<typeof KeybindingsModule>()
+  return {
+    ...actual,
+    getEffectiveKeybindingsForAction: (
+      ...args: Parameters<typeof actual.getEffectiveKeybindingsForAction>
+    ) => {
+      counters.effective++
+      return actual.getEffectiveKeybindingsForAction(...args)
+    },
+    formatKeybindingList: (...args: Parameters<typeof actual.formatKeybindingList>) => {
+      counters.formatList++
+      return actual.formatKeybindingList(...args)
+    },
+    formatKeybinding: (...args: Parameters<typeof actual.formatKeybinding>) => {
+      counters.formatBinding++
+      return actual.formatKeybinding(...args)
+    }
+  }
+})
+
+const {
+  formatOptionalShortcutLabel,
+  formatPrimaryShortcutLabel,
+  formatShortcutKeyComboDetails,
+  formatShortcutLabel,
+  useShortcutLabel
+} = await import('./useShortcutLabel')
+const { useAppStore } = await import('@/store')
+
+function resetCounters(): void {
+  counters.effective = 0
+  counters.formatList = 0
+  counters.formatBinding = 0
+}
+
+// A fresh overrides object per test keeps each case on its own cache entry, exactly as a real edit does.
+function overridesFor(binding: string): KeybindingOverrides {
+  return { 'tab.close': [binding] }
+}
+
+describe('shortcut label memoization', () => {
+  beforeEach(() => {
+    platformRef.current = 'darwin'
+    resetCounters()
+  })
+
+  it('computes a label once no matter how many times it is asked for', () => {
+    const overrides = overridesFor('Mod+Shift+K')
+    const first = formatShortcutLabel('tab.close', overrides)
+    resetCounters()
+    for (let index = 0; index < 200; index++) {
+      expect(formatShortcutLabel('tab.close', overrides)).toBe(first)
+    }
+    expect(counters.effective).toBe(0)
+    expect(counters.formatList).toBe(0)
+  })
+
+  it('memoizes each label shape separately and keeps their values correct', () => {
+    const overrides = overridesFor('Mod+Shift+K')
+    expect(formatShortcutLabel('tab.close', overrides)).toBe(
+      formatShortcutLabel('tab.close', overrides)
+    )
+    expect(formatPrimaryShortcutLabel('tab.close', overrides)).toBe(
+      formatPrimaryShortcutLabel('tab.close', overrides)
+    )
+    expect(formatOptionalShortcutLabel('tab.close', overrides)).toBe(
+      formatOptionalShortcutLabel('tab.close', overrides)
+    )
+    expect(formatShortcutKeyComboDetails('tab.close', overrides)).toBe(
+      formatShortcutKeyComboDetails('tab.close', overrides)
+    )
+    expect(formatShortcutKeyComboDetails('tab.close', overrides)[0]?.keys).toEqual(['⌘', '⇧', 'K'])
+    expect(formatShortcutLabel('tab.close', overrides)).toBe('⌘⇧K')
+  })
+
+  it('returns null rather than a cached sentinel for a disabled action', () => {
+    const overrides: KeybindingOverrides = { 'tab.close': [] }
+    expect(formatOptionalShortcutLabel('tab.close', overrides)).toBe(null)
+    expect(formatOptionalShortcutLabel('tab.close', overrides)).toBe(null)
+    expect(formatShortcutLabel('tab.close', overrides)).toBe('Unassigned')
+    expect(formatPrimaryShortcutLabel('tab.close', overrides)).toBe('Unassigned')
+  })
+
+  it('recomputes as soon as a different overrides object arrives', () => {
+    expect(formatShortcutLabel('tab.close', overridesFor('Mod+Shift+K'))).toBe('⌘⇧K')
+    expect(formatShortcutLabel('tab.close', overridesFor('Mod+Shift+L'))).toBe('⌘⇧L')
+    expect(formatShortcutLabel('tab.close', overridesFor('Mod+Shift+K'))).toBe('⌘⇧K')
+  })
+
+  it('does not let one action id serve another', () => {
+    const overrides = overridesFor('Mod+Shift+K')
+    expect(formatShortcutLabel('tab.close', overrides)).toBe('⌘⇧K')
+    expect(formatShortcutLabel('tab.rename', overrides)).not.toBe('⌘⇧K')
+  })
+
+  it('keys the cache by platform so Mac and Windows glyphs never cross', () => {
+    const overrides = overridesFor('Mod+Shift+K')
+    expect(formatShortcutLabel('tab.close', overrides)).toBe('⌘⇧K')
+    platformRef.current = 'win32'
+    expect(formatShortcutLabel('tab.close', overrides)).toBe('Ctrl+Shift+K')
+    platformRef.current = 'darwin'
+    expect(formatShortcutLabel('tab.close', overrides)).toBe('⌘⇧K')
+  })
+
+  it('caches the undefined-overrides case without leaking into the override case', () => {
+    const defaultLabel = formatShortcutLabel('tab.close')
+    expect(formatShortcutLabel('tab.close')).toBe(defaultLabel)
+    expect(formatShortcutLabel('tab.close', overridesFor('Mod+Shift+K'))).toBe('⌘⇧K')
+    expect(formatShortcutLabel('tab.close')).toBe(defaultLabel)
+  })
+})
+
+function CloseLabel(): React.JSX.Element {
+  return <span data-testid="close-label">{useShortcutLabel('tab.close')}</span>
+}
+
+describe('useShortcutLabel', () => {
+  beforeEach(() => {
+    platformRef.current = 'darwin'
+    resetCounters()
+  })
+
+  afterEach(() => {
+    cleanup()
+    useAppStore.setState({ keybindings: {} })
+  })
+
+  it('does not recompute the label on re-render', () => {
+    useAppStore.setState({ keybindings: overridesFor('Mod+Shift+K') })
+    const { rerender } = render(<CloseLabel />)
+    expect(screen.getByTestId('close-label').textContent).toBe('⌘⇧K')
+    resetCounters()
+    for (let index = 0; index < 25; index++) {
+      rerender(<CloseLabel />)
+    }
+    expect(screen.getByTestId('close-label').textContent).toBe('⌘⇧K')
+    expect(counters.effective).toBe(0)
+    expect(counters.formatList).toBe(0)
+  })
+
+  it('shows an edited keybinding immediately, with no stale-cache window', () => {
+    useAppStore.setState({ keybindings: overridesFor('Mod+Shift+K') })
+    render(<CloseLabel />)
+    expect(screen.getByTestId('close-label').textContent).toBe('⌘⇧K')
+
+    // Mirrors the store update a Settings edit performs: a brand new overrides object.
+    act(() => useAppStore.setState({ keybindings: overridesFor('Mod+Shift+L') }))
+    expect(screen.getByTestId('close-label').textContent).toBe('⌘⇧L')
+
+    act(() => useAppStore.setState({ keybindings: { 'tab.close': ['Mod+Alt+Backspace'] } }))
+    expect(screen.getByTestId('close-label').textContent).toBe('⌘⌥⌫')
+
+    act(() => useAppStore.setState({ keybindings: { 'tab.close': [] } }))
+    expect(screen.getByTestId('close-label').textContent).toBe('Unassigned')
+
+    // Back to the first binding: a revert must not resurrect the entry cached for the old object.
+    act(() => useAppStore.setState({ keybindings: overridesFor('Mod+Shift+K') }))
+    expect(screen.getByTestId('close-label').textContent).toBe('⌘⇧K')
+  })
+})
diff --git a/src/renderer/src/hooks/useShortcutLabel.ts b/src/renderer/src/hooks/useShortcutLabel.ts
index 1d96ad8745a..fe78739f687 100644
--- a/src/renderer/src/hooks/useShortcutLabel.ts
+++ b/src/renderer/src/hooks/useShortcutLabel.ts
@@ -16,14 +16,48 @@ export type ShortcutKeyComboDetails = {
   doubleTap: boolean
 }
 
+// Why: these run in render bodies of components that re-render constantly, and every call is two full keybinding parses.
+// The store hands out a new overrides object on every keybinding edit, so keying the cache on that object gives exact
+// invalidation: an edit can never be served from a stale entry, and the old entry is dropped with the old object.
+const cachesByOverrides = new WeakMap<KeybindingOverrides, Map<string, unknown>>()
+const defaultOverridesCache = new Map<string, unknown>()
+
+function labelCache(overrides: KeybindingOverrides | undefined): Map<string, unknown> {
+  if (!overrides) {
+    return defaultOverridesCache
+  }
+  let cache = cachesByOverrides.get(overrides)
+  if (!cache) {
+    cache = new Map()
+    cachesByOverrides.set(overrides, cache)
+  }
+  return cache
+}
+
+function memoizeShortcut<T>(
+  kind: string,
+  actionId: KeybindingActionId,
+  platform: NodeJS.Platform,
+  overrides: KeybindingOverrides | undefined,
+  compute: () => T
+): T {
+  const cache = labelCache(overrides)
+  const key = `${platform}\u0000${kind}\u0000${actionId}`
+  if (cache.has(key)) {
+    return cache.get(key) as T
+  }
+  const value = compute()
+  cache.set(key, value)
+  return value
+}
+
 export function formatShortcutLabel(
   actionId: KeybindingActionId,
   overrides?: KeybindingOverrides
 ): string {
   const platform = getShortcutPlatform()
-  return formatKeybindingList(
-    getEffectiveKeybindingsForAction(actionId, platform, overrides),
-    platform
+  return memoizeShortcut('label', actionId, platform, overrides, () =>
+    formatKeybindingList(getEffectiveKeybindingsForAction(actionId, platform, overrides), platform)
   )
 }
 
@@ -32,8 +66,10 @@ export function formatPrimaryShortcutLabel(
   overrides?: KeybindingOverrides
 ): string {
   const platform = getShortcutPlatform()
-  const [binding] = getEffectiveKeybindingsForAction(actionId, platform, overrides)
-  return binding ? formatKeybindingList([binding], platform) : 'Unassigned'
+  return memoizeShortcut('primary', actionId, platform, overrides, () => {
+    const [binding] = getEffectiveKeybindingsForAction(actionId, platform, overrides)
+    return binding ? formatKeybindingList([binding], platform) : 'Unassigned'
+  })
 }
 
 export function useShortcutLabel(actionId: KeybindingActionId): string {
@@ -49,11 +85,13 @@ export function formatOptionalShortcutLabel(
   overrides?: KeybindingOverrides
 ): string | null {
   const platform = getShortcutPlatform()
-  const bindings = getEffectiveKeybindingsForAction(actionId, platform, overrides)
-  if (bindings.length === 0) {
-    return null
-  }
-  return formatKeybindingList(bindings, platform)
+  return memoizeShortcut('optional', actionId, platform, overrides, () => {
+    const bindings = getEffectiveKeybindingsForAction(actionId, platform, overrides)
+    if (bindings.length === 0) {
+      return null
+    }
+    return formatKeybindingList(bindings, platform)
+  })
 }
 
 export function useOptionalShortcutLabel(actionId: KeybindingActionId): string | null {
@@ -66,10 +104,13 @@ export function formatShortcutKeyComboDetails(
   overrides?: KeybindingOverrides
 ): ShortcutKeyComboDetails[] {
   const platform = getShortcutPlatform()
-  return getEffectiveKeybindingsForAction(actionId, platform, overrides).map((binding) => ({
-    keys: formatKeybinding(binding, platform),
-    doubleTap: isDoubleTapBinding(binding)
-  }))
+  // The returned array is shared across callers now, so treat it as read-only (every current caller does).
+  return memoizeShortcut('combo', actionId, platform, overrides, () =>
+    getEffectiveKeybindingsForAction(actionId, platform, overrides).map((binding) => ({
+      keys: formatKeybinding(binding, platform),
+      doubleTap: isDoubleTapBinding(binding)
+    }))
+  )
 }
 
 export function useShortcutKeyComboDetails(
diff --git a/src/shared/keybindings-parse-cache.test.ts b/src/shared/keybindings-parse-cache.test.ts
new file mode 100644
index 00000000000..d2eb899b309
--- /dev/null
+++ b/src/shared/keybindings-parse-cache.test.ts
@@ -0,0 +1,95 @@
+import { describe, expect, it } from 'vitest'
+import { KEYBINDING_DEFINITIONS } from './keybindings/definitions'
+import { getDefaultBindings } from './keybindings/effective'
+import { formatKeybindingList } from './keybindings/formatting'
+import { normalizeKeyToken, parseKeybinding } from './keybindings/parser'
+
+describe('parseKeybinding memoization', () => {
+  it('reuses the parsed result for a repeated binding string', () => {
+    const first = parseKeybinding('Mod+Shift+K')
+    const second = parseKeybinding('Mod+Shift+K')
+    expect(first).not.toBeNull()
+    expect(second).toBe(first)
+  })
+
+  it('caches rejections without re-parsing', () => {
+    expect(parseKeybinding('K+J')).toBeNull()
+    expect(parseKeybinding('K+J')).toBeNull()
+  })
+
+  it('never hands out an entry a caller can corrupt', () => {
+    const parsed = parseKeybinding('Mod+P')
+    expect(Object.isFrozen(parsed)).toBe(true)
+    expect(parseKeybinding('Mod+P')?.key).toBe('P')
+  })
+
+  it('stays bounded and correct when fed far more strings than the cache holds', () => {
+    for (let index = 0; index < 2000; index++) {
+      expect(parseKeybinding(`Mod+Alt+F${(index % 24) + 1}`)?.key).toBe(`F${(index % 24) + 1}`)
+    }
+    // A cleared cache must still return the right answer, not a stale neighbour.
+    expect(parseKeybinding('Mod+Shift+K')?.key).toBe('K')
+    expect(parseKeybinding('DoubleTap+Shift')?.doubleTapModifier).toBe('Shift')
+  })
+
+  it('parses every distinct token form identically across repeat calls', () => {
+    const tokens = [
+      ' ',
+      'a',
+      '7',
+      'f7',
+      '[',
+      '}',
+      '-',
+      '_',
+      '=',
+      '+',
+      ',',
+      '.',
+      '/',
+      '\\',
+      ';',
+      "'",
+      '`',
+      'return',
+      'esc',
+      'spacebar',
+      'pgup',
+      'pgdn',
+      'arrowleft',
+      'left',
+      'down',
+      'backspace',
+      'del',
+      'ins',
+      'numpadadd',
+      'subtract',
+      'nonsense',
+      ''
+    ]
+    for (const token of tokens) {
+      expect(normalizeKeyToken(token)).toBe(normalizeKeyToken(token))
+    }
+    expect(normalizeKeyToken(' ')).toBe('Space')
+    expect(normalizeKeyToken('pgdn')).toBe('PageDown')
+    expect(normalizeKeyToken('subtract')).toBe('NumpadSubtract')
+    expect(normalizeKeyToken('nonsense')).toBe(null)
+    expect(normalizeKeyToken('')).toBe(null)
+    // Object.prototype keys must not leak through the token table.
+    expect(normalizeKeyToken('constructor')).toBe(null)
+    expect(normalizeKeyToken('__proto__')).toBe(null)
+  })
+})
+
+describe('shortcut label output', () => {
+  it('formats every default binding identically on repeat calls, on both glyph platforms', () => {
+    for (const platform of ['darwin', 'win32'] as const) {
+      for (const definition of KEYBINDING_DEFINITIONS) {
+        const bindings = getDefaultBindings(definition, platform)
+        const label = formatKeybindingList(bindings, platform)
+        expect(formatKeybindingList(bindings, platform)).toBe(label)
+        expect(label.length).toBeGreaterThan(0)
+      }
+    }
+  })
+})
diff --git a/src/shared/keybindings/formatting.ts b/src/shared/keybindings/formatting.ts
index 1c3c75ba8fd..c9e2b35ac43 100644
--- a/src/shared/keybindings/formatting.ts
+++ b/src/shared/keybindings/formatting.ts
@@ -90,38 +90,41 @@ export function findKeybindingActionsForBinding(
   ).map((definition) => definition.id)
 }
 
+const KEY_TOKEN_LABELS: Record<string, string> = {
+  BracketLeft: '[',
+  BracketRight: ']',
+  Minus: '-',
+  Underscore: '_',
+  Equal: '=',
+  Plus: '+',
+  ArrowLeft: '←',
+  ArrowRight: '→',
+  ArrowUp: '↑',
+  ArrowDown: '↓',
+  PageUp: 'PageUp',
+  PageDown: 'PageDown',
+  NumpadAdd: 'Numpad +',
+  NumpadSubtract: 'Numpad -',
+  Comma: ',',
+  Period: '.',
+  Slash: '/',
+  Backslash: '\\',
+  Semicolon: ';',
+  Quote: "'",
+  Backquote: '`',
+  Enter: 'Enter',
+  Backspace: 'Backspace',
+  Delete: 'Delete',
+  Insert: 'Insert',
+  Tab: 'Tab',
+  Escape: 'Esc',
+  Space: 'Space'
+}
+
+const MAC_KEY_TOKEN_LABELS: Record<string, string> = { ...KEY_TOKEN_LABELS, Backspace: '⌫' }
+
 function formatKeyToken(token: string, isMac: boolean): string {
-  const labels: Record<string, string> = {
-    BracketLeft: '[',
-    BracketRight: ']',
-    Minus: '-',
-    Underscore: '_',
-    Equal: '=',
-    Plus: '+',
-    ArrowLeft: '←',
-    ArrowRight: '→',
-    ArrowUp: '↑',
-    ArrowDown: '↓',
-    PageUp: 'PageUp',
-    PageDown: 'PageDown',
-    NumpadAdd: 'Numpad +',
-    NumpadSubtract: 'Numpad -',
-    Comma: ',',
-    Period: '.',
-    Slash: '/',
-    Backslash: '\\',
-    Semicolon: ';',
-    Quote: "'",
-    Backquote: '`',
-    Enter: 'Enter',
-    Backspace: isMac ? '⌫' : 'Backspace',
-    Delete: 'Delete',
-    Insert: 'Insert',
-    Tab: 'Tab',
-    Escape: 'Esc',
-    Space: 'Space'
-  }
-  return labels[token] ?? token
+  return (isMac ? MAC_KEY_TOKEN_LABELS : KEY_TOKEN_LABELS)[token] ?? token
 }
 
 export function findKeybindingConflicts(
diff --git a/src/shared/keybindings/parser.ts b/src/shared/keybindings/parser.ts
index 022aa4bec29..0c3180d9d00 100644
--- a/src/shared/keybindings/parser.ts
+++ b/src/shared/keybindings/parser.ts
@@ -16,31 +16,8 @@ export function hasModifier(
   return Boolean(input.shift ?? input.shiftKey)
 }
 
-function isFunctionKeyToken(key: string): boolean {
-  return /^F([1-9]|1[0-9]|2[0-4])$/.test(key)
-}
-
-export function normalizeKeyToken(token: string): string | null {
-  if (token === ' ') {
-    return 'Space'
-  }
-  const trimmed = token.trim()
-  if (!trimmed) {
-    return null
-  }
-  const upper = trimmed.toUpperCase()
-  if (upper.length === 1 && upper >= 'A' && upper <= 'Z') {
-    return upper
-  }
-  if (upper.length === 1 && upper >= '0' && upper <= '9') {
-    return upper
-  }
-  // Function keys F1–F24 (event.key/event.code report them verbatim, e.g. F7).
-  if (isFunctionKeyToken(upper)) {
-    return upper
-  }
-
-  const simple: Record<string, string> = {
+const SIMPLE_KEY_TOKENS = new Map<string, string>(
+  Object.entries({
     '[': 'BracketLeft',
     ']': 'BracketRight',
     '{': 'BracketLeft',
@@ -97,9 +74,34 @@ export function normalizeKeyToken(token: string): string | null {
     SEMICOLON: 'Semicolon',
     QUOTE: 'Quote',
     BACKQUOTE: 'Backquote'
+  })
+)
+
+function isFunctionKeyToken(key: string): boolean {
+  return /^F([1-9]|1[0-9]|2[0-4])$/.test(key)
+}
+
+export function normalizeKeyToken(token: string): string | null {
+  if (token === ' ') {
+    return 'Space'
+  }
+  const trimmed = token.trim()
+  if (!trimmed) {
+    return null
+  }
+  const upper = trimmed.toUpperCase()
+  if (upper.length === 1 && upper >= 'A' && upper <= 'Z') {
+    return upper
+  }
+  if (upper.length === 1 && upper >= '0' && upper <= '9') {
+    return upper
+  }
+  // Function keys F1–F24 (event.key/event.code report them verbatim, e.g. F7).
+  if (isFunctionKeyToken(upper)) {
+    return upper
   }
 
-  return simple[upper] ?? null
+  return SIMPLE_KEY_TOKENS.get(upper) ?? null
 }
 
 export function parseModifierToken(rawPart: string): ModifierToken | null {
@@ -177,7 +179,24 @@ export function parseDoubleTapKeybinding(rawParts: string[]): ParsedKeybinding |
   return parsed
 }
 
+// Binding strings come from a fixed definition set plus user overrides, so the live set is tiny; the cap only guards a caller feeding arbitrary strings.
+const PARSE_CACHE_LIMIT = 512
+const parseCache = new Map<string, ParsedKeybinding | null>()
+
 export function parseKeybinding(binding: string): ParsedKeybinding | null {
+  if (parseCache.has(binding)) {
+    return parseCache.get(binding) ?? null
+  }
+  const parsed = parseKeybindingUncached(binding)
+  if (parseCache.size >= PARSE_CACHE_LIMIT) {
+    parseCache.clear()
+  }
+  // Frozen so a caller can never corrupt the shared entry; every current caller spread-copies before changing a field.
+  parseCache.set(binding, parsed ? Object.freeze(parsed) : null)
+  return parsed
+}
+
+function parseKeybindingUncached(binding: string): ParsedKeybinding | null {
   const rawParts = binding
     .split('+')
     .map((part) => part.trim())

From c0e5b189aa08844aa71f855edbc9d1be5765d17b Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 12:59:46 -0700
Subject: [PATCH 59/92] perf(sidebar,terminal): memoize terminal-title agent
 classification and lineage projections (#18148)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Idle-app CPU profiling showed `titleHasAgentName` running 11,771x/sec and the
legacy any-agent regex 4,399x/sec, roughly once per zustand subscriber notify.
The regexes were already precompiled; the problem was call volume — every store
write re-classified every unchanged pane title through the whole agent-name
ladder.

Every title classifier is pure in the title string, so memoize them on it
(bounded FIFO, 1024 entries). A new title is a new key, so there is no staleness
window. The same profile showed the sidebar lineage projection re-scanning all
worktrees several times per pass; cache it on the identity pair of its two
immutable inputs, mirroring store/worktree-repo-index.ts.
---
 .../worktree-lineage-projection.test.ts       | 126 ++++++++
 .../sidebar/worktree-lineage-projection.ts    |  48 ++-
 src/shared/agent-title-core.ts                |   8 +-
 src/shared/agent-title-identity.ts            |  13 +-
 src/shared/agent-title-status.ts              |  10 +-
 src/shared/terminal-title-agent-type.ts       |  19 +-
 ...rminal-title-classification-corpus.test.ts | 293 ++++++++++++++++++
 .../terminal-title-classification-corpus.ts   |  86 +++++
 ...terminal-title-classification-memo.test.ts |  98 ++++++
 .../terminal-title-classification-memo.ts     |  43 +++
 10 files changed, 736 insertions(+), 8 deletions(-)
 create mode 100644 src/renderer/src/components/sidebar/worktree-lineage-projection.test.ts
 create mode 100644 src/shared/terminal-title-classification-corpus.test.ts
 create mode 100644 src/shared/terminal-title-classification-corpus.ts
 create mode 100644 src/shared/terminal-title-classification-memo.test.ts
 create mode 100644 src/shared/terminal-title-classification-memo.ts

diff --git a/src/renderer/src/components/sidebar/worktree-lineage-projection.test.ts b/src/renderer/src/components/sidebar/worktree-lineage-projection.test.ts
new file mode 100644
index 00000000000..8d2ebcdb517
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-lineage-projection.test.ts
@@ -0,0 +1,126 @@
+import { describe, expect, it } from 'vitest'
+import type { WorktreeLineage } from '../../../../shared/worktree/lineage-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+import {
+  getCyclicProjectedWorktreeLineageIds,
+  getLineageRenderInfo,
+  getProjectedWorktreeLineageChildrenByParentId
+} from './worktree-lineage-projection'
+
+function makeWorktree(id: string): Worktree {
+  return {
+    id,
+    repoId: 'repo-1',
+    instanceId: `${id}-instance`,
+    path: `/tmp/${id}`,
+    branch: id,
+    isMainWorktree: false
+  } as unknown as Worktree
+}
+
+function makeLineage(childId: string, parentId: string): WorktreeLineage {
+  return {
+    worktreeId: childId,
+    worktreeInstanceId: `${childId}-instance`,
+    parentWorktreeId: parentId,
+    parentWorktreeInstanceId: `${parentId}-instance`
+  } as unknown as WorktreeLineage
+}
+
+/**
+ * A sidebar-scale fixture: one root with many children, mirroring the shape the
+ * row builder scans on every store write.
+ */
+function buildFixture(childCount: number): {
+  lineageById: Record<string, WorktreeLineage>
+  worktreeMap: Map<string, Worktree>
+} {
+  const worktreeMap = new Map<string, Worktree>()
+  const lineageById: Record<string, WorktreeLineage> = {}
+  worktreeMap.set('root', makeWorktree('root'))
+  for (let index = 0; index < childCount; index += 1) {
+    const id = `child-${index}`
+    worktreeMap.set(id, makeWorktree(id))
+    lineageById[id] = makeLineage(id, 'root')
+  }
+  return { lineageById, worktreeMap }
+}
+
+describe('worktree lineage projection cache', () => {
+  it('reuses the cyclic-id scan for an unchanged input pair', () => {
+    const { lineageById, worktreeMap } = buildFixture(8)
+    const first = getCyclicProjectedWorktreeLineageIds(lineageById, worktreeMap)
+    const second = getCyclicProjectedWorktreeLineageIds(lineageById, worktreeMap)
+    expect(second).toBe(first)
+  })
+
+  it('reuses the children projection for an unchanged input pair', () => {
+    const { lineageById, worktreeMap } = buildFixture(8)
+    const first = getProjectedWorktreeLineageChildrenByParentId(lineageById, worktreeMap)
+    const second = getProjectedWorktreeLineageChildrenByParentId(lineageById, worktreeMap)
+    expect(second).toBe(first)
+    expect(first.get('root')?.map((worktree) => worktree.id)).toEqual([
+      'child-0',
+      'child-1',
+      'child-2',
+      'child-3',
+      'child-4',
+      'child-5',
+      'child-6',
+      'child-7'
+    ])
+  })
+
+  it('rescans when either input is replaced', () => {
+    const { lineageById, worktreeMap } = buildFixture(4)
+    const baseline = getProjectedWorktreeLineageChildrenByParentId(lineageById, worktreeMap)
+
+    const replacedLineage = { ...lineageById }
+    expect(getProjectedWorktreeLineageChildrenByParentId(replacedLineage, worktreeMap)).not.toBe(
+      baseline
+    )
+
+    const replacedWorktrees = new Map(worktreeMap)
+    expect(getProjectedWorktreeLineageChildrenByParentId(lineageById, replacedWorktrees)).not.toBe(
+      baseline
+    )
+  })
+
+  it('reflects a removed lineage edge as soon as the record is replaced', () => {
+    const { lineageById, worktreeMap } = buildFixture(2)
+    expect(
+      getProjectedWorktreeLineageChildrenByParentId(lineageById, worktreeMap).get('root')
+    ).toHaveLength(2)
+
+    const withoutFirstChild = { ...lineageById }
+    delete withoutFirstChild['child-0']
+    const reprojected = getProjectedWorktreeLineageChildrenByParentId(
+      withoutFirstChild,
+      worktreeMap
+    )
+    expect(reprojected.get('root')?.map((worktree) => worktree.id)).toEqual(['child-1'])
+    expect(
+      getLineageRenderInfo(
+        worktreeMap.get('child-0') as Worktree,
+        withoutFirstChild,
+        worktreeMap,
+        getCyclicProjectedWorktreeLineageIds(withoutFirstChild, worktreeMap)
+      ).state
+    ).toBe('none')
+  })
+
+  it('still reports cycles from the cached scan', () => {
+    const worktreeMap = new Map<string, Worktree>([
+      ['a', makeWorktree('a')],
+      ['b', makeWorktree('b')]
+    ])
+    const lineageById: Record<string, WorktreeLineage> = {
+      a: makeLineage('a', 'b'),
+      b: makeLineage('b', 'a')
+    }
+    const cyclic = getCyclicProjectedWorktreeLineageIds(lineageById, worktreeMap)
+    expect([...cyclic].sort()).toEqual(['a', 'b'])
+    expect(getCyclicProjectedWorktreeLineageIds(lineageById, worktreeMap)).toBe(cyclic)
+    expect(getProjectedWorktreeLineageChildrenByParentId(lineageById, worktreeMap).size).toBe(0)
+  })
+})
diff --git a/src/renderer/src/components/sidebar/worktree-lineage-projection.ts b/src/renderer/src/components/sidebar/worktree-lineage-projection.ts
index 337140f586c..b8748f287c5 100644
--- a/src/renderer/src/components/sidebar/worktree-lineage-projection.ts
+++ b/src/renderer/src/components/sidebar/worktree-lineage-projection.ts
@@ -22,10 +22,49 @@ export function getProjectedWorktreeLineage(
   return (worktree as WorktreeWithResolvedLineage).lineage
 }
 
+type LineageProjection = {
+  cyclicLineageIds?: Set<string>
+  childrenByParentId?: Map<string, Worktree[]>
+}
+
+/**
+ * Why: both projections are O(worktrees) scans that the sidebar row builder and
+ * the pinned/attached-children readers re-run several times per pass, and
+ * zustand re-runs those on every store write. Both are pure in the two inputs,
+ * and both inputs are immutable store-derived collections that are REPLACED
+ * rather than mutated, so their identity pair is a sound cache key. Weak on both
+ * levels so a superseded lineage record or worktree index is not pinned.
+ */
+const projectionByLineageAndWorktreeMap = new WeakMap<
+  Readonly<Record<string, WorktreeLineage>>,
+  WeakMap<ReadonlyMap<string, Worktree>, LineageProjection>
+>()
+
+function getLineageProjection(
+  lineageById: Readonly<Record<string, WorktreeLineage>>,
+  worktreeMap: ReadonlyMap<string, Worktree>
+): LineageProjection {
+  let byWorktreeMap = projectionByLineageAndWorktreeMap.get(lineageById)
+  if (!byWorktreeMap) {
+    byWorktreeMap = new WeakMap()
+    projectionByLineageAndWorktreeMap.set(lineageById, byWorktreeMap)
+  }
+  let projection = byWorktreeMap.get(worktreeMap)
+  if (!projection) {
+    projection = {}
+    byWorktreeMap.set(worktreeMap, projection)
+  }
+  return projection
+}
+
 export function getCyclicProjectedWorktreeLineageIds(
   lineageById: Readonly<Record<string, WorktreeLineage>>,
   worktreeMap: ReadonlyMap<string, Worktree>
 ): Set<string> {
+  const projection = getLineageProjection(lineageById, worktreeMap)
+  if (projection.cyclicLineageIds) {
+    return projection.cyclicLineageIds
+  }
   const validLineageByChildId = new Map<string, WorktreeLineage>()
   for (const worktree of worktreeMap.values()) {
     const lineage = getProjectedWorktreeLineage(worktree, lineageById)
@@ -37,7 +76,9 @@ export function getCyclicProjectedWorktreeLineageIds(
       validLineageByChildId.set(worktree.id, lineage)
     }
   }
-  return getCyclicWorktreeLineageChildIds(validLineageByChildId)
+  const cyclicLineageIds = getCyclicWorktreeLineageChildIds(validLineageByChildId)
+  projection.cyclicLineageIds = cyclicLineageIds
+  return cyclicLineageIds
 }
 
 export function getLineageRenderInfo(
@@ -65,6 +106,10 @@ export function getProjectedWorktreeLineageChildrenByParentId(
   lineageById: Readonly<Record<string, WorktreeLineage>>,
   worktreeMap: ReadonlyMap<string, Worktree>
 ): Map<string, Worktree[]> {
+  const projection = getLineageProjection(lineageById, worktreeMap)
+  if (projection.childrenByParentId) {
+    return projection.childrenByParentId
+  }
   const cyclicLineageIds = getCyclicProjectedWorktreeLineageIds(lineageById, worktreeMap)
   const childrenByParentId = new Map<string, Worktree[]>()
   for (const worktree of worktreeMap.values()) {
@@ -76,6 +121,7 @@ export function getProjectedWorktreeLineageChildrenByParentId(
     children.push(worktree)
     childrenByParentId.set(lineage.parent.id, children)
   }
+  projection.childrenByParentId = childrenByParentId
   return childrenByParentId
 }
 
diff --git a/src/shared/agent-title-core.ts b/src/shared/agent-title-core.ts
index 5d2c688b7d2..3d0bdbc0feb 100644
--- a/src/shared/agent-title-core.ts
+++ b/src/shared/agent-title-core.ts
@@ -7,6 +7,7 @@ import {
 } from './agent-name-token-match'
 import { stripLeadingAgentTitleDecorationOrEmpty } from './agent-title-decoration'
 import { isLegacyPiCompatibleTitle } from './pi-compatible-synthetic-title'
+import { memoizeTitleClassification } from './terminal-title-classification-memo'
 import { getWrapperTitleSegments } from './terminal-title-wrapper-segments'
 
 export { AGY_AGENT_NAME_RE, DROID_AGENT_NAME_RE, HERMES_AGENT_NAME_RE, titleHasAgentName }
@@ -54,7 +55,7 @@ export const BRAILLE_SPINNER_RE = /[\u2800-\u28ff]/g
 // Reserve the whole quarter-circle block so a later frame addition cannot regress this.
 export const QUARTER_CIRCLE_SPINNER_RE = /[\u25d0-\u25d3]/g
 
-export function isGeminiTerminalTitle(title: string): boolean {
+function computeIsGeminiTerminalTitle(title: string): boolean {
   // Why: Gemini OSC glyphs are stronger evidence than any cwd/session text.
   if (
     title.includes(GEMINI_PERMISSION) ||
@@ -80,6 +81,11 @@ export function isGeminiTerminalTitle(title: string): boolean {
   return titleHasAgentName(title, 'gemini')
 }
 
+/** Pure in `title` — memoized so repeated selector reads skip the regex ladder. */
+export const isGeminiTerminalTitle: (title: string) => boolean = memoizeTitleClassification(
+  computeIsGeminiTerminalTitle
+)
+
 export function isPiTerminalTitle(title: string): boolean {
   return isLegacyPiCompatibleTitle(title) && !containsBrailleSpinner(title)
 }
diff --git a/src/shared/agent-title-identity.ts b/src/shared/agent-title-identity.ts
index cdfc6946777..2b5194bfda8 100644
--- a/src/shared/agent-title-identity.ts
+++ b/src/shared/agent-title-identity.ts
@@ -12,12 +12,13 @@ import {
 } from './agent-title-core'
 import { isOpenCodeNativeTitle } from './opencode-terminal-title'
 import { getPiCompatibleSyntheticAgentLabel } from './pi-compatible-synthetic-title'
+import { memoizeTitleClassification } from './terminal-title-classification-memo'
 
 /**
  * Returns true when the terminal title matches Claude Code's title conventions.
  * Used to scope prompt-cache-timer behavior to Claude sessions only.
  */
-export function isClaudeAgent(title: string): boolean {
+function computeIsClaudeAgent(title: string): boolean {
   if (!title || isClaudeManagementTitle(title) || isOpenCodeNativeTitle(title)) {
     return false
   }
@@ -43,7 +44,11 @@ export function isClaudeAgent(title: string): boolean {
   )
 }
 
-export function getAgentLabel(title: string): string | null {
+/** Pure in `title` — memoized so repeated selector reads skip the regex ladder. */
+export const isClaudeAgent: (title: string) => boolean =
+  memoizeTitleClassification(computeIsClaudeAgent)
+
+function computeAgentLabel(title: string): string | null {
   if (isClaudeManagementTitle(title)) {
     return null
   }
@@ -119,3 +124,7 @@ export function getAgentLabel(title: string): string | null {
 
   return null
 }
+
+/** Pure in `title` — memoized so repeated selector reads skip the regex ladder. */
+export const getAgentLabel: (title: string) => string | null =
+  memoizeTitleClassification(computeAgentLabel)
diff --git a/src/shared/agent-title-status.ts b/src/shared/agent-title-status.ts
index 423af759281..fa1e35652e2 100644
--- a/src/shared/agent-title-status.ts
+++ b/src/shared/agent-title-status.ts
@@ -32,6 +32,7 @@ import {
 import { clearPiStateWorkingMarker, getPiStateTitleStatus } from './pi-state-title-marker'
 import { getWrapperTitleSegments } from './terminal-title-wrapper-segments'
 import { isGrokRotatingWorkingTitle } from './terminal-title-agent-type'
+import { memoizeTitleClassification } from './terminal-title-classification-memo'
 
 /**
  * Strip working-status indicators so stale exit titles stop reporting working.
@@ -178,7 +179,7 @@ function canonicalizeBrailleSpinnerFrame(title: string): string {
   return canonical
 }
 
-export function detectAgentStatusFromTitle(title: string): AgentStatus | null {
+function computeAgentStatusFromTitle(title: string): AgentStatus | null {
   if (!title || isClaudeManagementTitle(title)) {
     return null
   }
@@ -262,6 +263,13 @@ export function detectAgentStatusFromTitle(title: string): AgentStatus | null {
   return 'idle'
 }
 
+/**
+ * Pure in `title`, so it is memoized on the title string: sidebar/tab selectors
+ * re-ask for the same unchanged titles on every store write.
+ */
+export const detectAgentStatusFromTitle: (title: string) => AgentStatus | null =
+  memoizeTitleClassification(computeAgentStatusFromTitle)
+
 /**
  * True when a quarter-circle spinner frame is the only agent evidence a title carries.
  * Any TUI animates those glyphs, so they prove activity, not identity — callers that
diff --git a/src/shared/terminal-title-agent-type.ts b/src/shared/terminal-title-agent-type.ts
index 4a078fde877..cdbce788806 100644
--- a/src/shared/terminal-title-agent-type.ts
+++ b/src/shared/terminal-title-agent-type.ts
@@ -10,6 +10,7 @@ import {
   getPiCompatibleSyntheticAgentLabel,
   isLegacyPiCompatibleTitle
 } from './pi-compatible-synthetic-title'
+import { memoizeTitleClassification } from './terminal-title-classification-memo'
 import type { TuiAgent } from './tui-agent'
 
 export const CLAUDE_IDLE = '\u2733' // ✳ (eight-spoked asterisk — Claude Code idle prefix)
@@ -84,7 +85,7 @@ export function isPiAgentTitle(title: string): boolean {
  * Used to scope prompt-cache-timer behavior to Claude sessions only — other
  * agents have different (or no) caching semantics.
  */
-export function isClaudeAgent(title: string): boolean {
+function computeIsClaudeAgent(title: string): boolean {
   if (!title || isClaudeManagementTitle(title) || isOpenCodeNativeTitle(title)) {
     return false
   }
@@ -121,11 +122,15 @@ export function isClaudeAgent(title: string): boolean {
   return false
 }
 
+/** Pure in `title` — memoized so repeated selector reads skip the regex ladder. */
+export const isClaudeAgent: (title: string) => boolean =
+  memoizeTitleClassification(computeIsClaudeAgent)
+
 export function isClaudeManagementTitle(title: string): boolean {
   return CLAUDE_MANAGEMENT_TITLE_RE.test(title)
 }
 
-export function getAgentLabel(title: string): string | null {
+function computeAgentLabel(title: string): string | null {
   if (isClaudeManagementTitle(title)) {
     return null
   }
@@ -235,6 +240,10 @@ const TITLE_LABEL_TO_AGENT: Partial<Record<string, TuiAgent>> = {
   OMP: 'omp'
 }
 
+/** Pure in `title` — memoized so repeated selector reads skip the regex ladder. */
+export const getAgentLabel: (title: string) => string | null =
+  memoizeTitleClassification(computeAgentLabel)
+
 function hasGenericClaudeStatusPrefix(title: string): boolean {
   return (
     containsAgentSpinnerGlyph(title) ||
@@ -266,10 +275,14 @@ export function resolveTerminalTitleAgentType(title: string): TuiAgent | null {
  * that something is running, not proof the agent is Claude — so a task or
  * worktree title cannot become Claude without an explicit "Claude Code" name.
  */
-export function resolveExplicitTerminalTitleAgentType(title: string): TuiAgent | null {
+function computeExplicitTerminalTitleAgentType(title: string): TuiAgent | null {
   const titleAgent = resolveTerminalTitleAgentType(title)
   if (isGenericClaudeStatusClaim(title, titleAgent)) {
     return null
   }
   return titleAgent
 }
+
+/** Pure in `title` — memoized so repeated selector reads skip the regex ladder. */
+export const resolveExplicitTerminalTitleAgentType: (title: string) => TuiAgent | null =
+  memoizeTitleClassification(computeExplicitTerminalTitleAgentType)
diff --git a/src/shared/terminal-title-classification-corpus.test.ts b/src/shared/terminal-title-classification-corpus.test.ts
new file mode 100644
index 00000000000..ae41d451b20
--- /dev/null
+++ b/src/shared/terminal-title-classification-corpus.test.ts
@@ -0,0 +1,293 @@
+import { describe, expect, it } from 'vitest'
+import { isGeminiTerminalTitle } from './agent-title-core'
+import { getAgentLabel, isClaudeAgent } from './agent-title-identity'
+import { detectAgentStatusFromTitle } from './agent-title-status'
+import { TERMINAL_TITLE_CLASSIFICATION_CORPUS } from './terminal-title-classification-corpus'
+import {
+  getAgentLabel as getExplicitAgentLabel,
+  isClaudeAgent as isExplicitClaudeAgent,
+  resolveExplicitTerminalTitleAgentType,
+  resolveTerminalTitleAgentType
+} from './terminal-title-agent-type'
+
+/**
+ * Pins the exact verdict every title classifier returns for a realistic corpus.
+ *
+ * Why: these classifiers are now memoized on the title string, and a caching bug
+ * here would repaint a pane under the wrong agent. This table is the proof that
+ * memoization is transparent — it was generated from the pre-memo implementation
+ * and must keep matching byte-for-byte.
+ */
+type PinnedRow = [
+  title: string,
+  status: string | null,
+  label: string | null,
+  claude: boolean,
+  gemini: boolean,
+  explicitLabel: string | null,
+  explicitClaude: boolean,
+  titleAgent: string | null,
+  explicitTitleAgent: string | null
+]
+
+const PINNED_CLASSIFICATIONS: readonly PinnedRow[] = [
+  ['', null, null, false, false, null, false, null, null],
+  ['zsh', null, null, false, false, null, false, null, null],
+  ['bash', null, null, false, false, null, false, null, null],
+  ['nwparker@mac: ~/orca', null, null, false, false, null, false, null, null],
+  ['npm run dev', null, null, false, false, null, false, null, null],
+  ['opencode-blinker', null, null, false, false, null, false, null, null],
+  [
+    'openclaude',
+    'idle',
+    'OpenClaude',
+    false,
+    false,
+    'OpenClaude',
+    false,
+    'openclaude',
+    'openclaude'
+  ],
+  ['openclaude-scratch', null, null, false, false, null, false, null, null],
+  ['claude-scratch', null, null, false, false, null, false, null, null],
+  ['~/codex/ready', null, null, false, false, null, false, null, null],
+  ['review-14600-codex', null, null, false, false, null, false, null, null],
+  ['timestamp ready', null, null, false, false, null, false, null, null],
+  ['android build running', null, null, false, false, null, false, null, null],
+  ['~/hermes/working', null, null, false, false, null, false, null, null],
+  ['C:\\tools\\codex\\run', null, null, false, false, null, false, null, null],
+  ['/usr/local/bin/claude/notes', null, null, false, false, null, false, null, null],
+  ['agy-nightly', null, null, false, false, null, false, null, null],
+  ['codex.exe', 'idle', 'Codex', false, false, 'Codex', false, 'codex', 'codex'],
+  [
+    'openclaude.cmd',
+    'idle',
+    'OpenClaude',
+    false,
+    false,
+    'OpenClaude',
+    false,
+    'openclaude',
+    'openclaude'
+  ],
+  [
+    'claude.bat working',
+    'working',
+    'Claude Code',
+    true,
+    false,
+    'Claude Code',
+    true,
+    'claude',
+    'claude'
+  ],
+  ['aider.ps1 ready', 'idle', 'Aider', false, false, 'Aider', false, 'aider', 'aider'],
+  [
+    'copilot.exe - action required',
+    'permission',
+    'GitHub Copilot',
+    false,
+    false,
+    'GitHub Copilot',
+    false,
+    'copilot',
+    'copilot'
+  ],
+  ['droid.exe', null, null, false, false, null, false, null, null],
+  ['\u2733', 'idle', 'Claude Code', true, false, 'Claude Code', true, 'claude', null],
+  [
+    '\u2733 Claude Code',
+    'idle',
+    'Claude Code',
+    true,
+    false,
+    'Claude Code',
+    true,
+    'claude',
+    'claude'
+  ],
+  ['\u2733 ready', 'idle', 'Claude Code', true, false, 'Claude Code', true, 'claude', null],
+  ['. building the parser', null, 'Claude Code', true, false, 'Claude Code', true, 'claude', null],
+  ['* done', null, 'Claude Code', true, false, 'Claude Code', true, 'claude', null],
+  ['Claude Code', 'idle', 'Claude Code', true, false, 'Claude Code', true, 'claude', 'claude'],
+  [
+    'claude - action required',
+    'permission',
+    'Claude Code',
+    true,
+    false,
+    'Claude Code',
+    true,
+    'claude',
+    'claude'
+  ],
+  ['Claude ready', 'idle', 'Claude Code', true, false, 'Claude Code', true, 'claude', 'claude'],
+  ['claude agents', null, null, false, false, null, false, null, null],
+  ['"/usr/local/bin/claude" agents', null, null, false, false, null, false, null, null],
+  [
+    '\u280b Claude Code',
+    'working',
+    'Claude Code',
+    true,
+    false,
+    'Claude Code',
+    true,
+    'claude',
+    'claude'
+  ],
+  [
+    '\u2809 Codex \u2014 refactoring',
+    'working',
+    'Codex',
+    true,
+    false,
+    'Codex',
+    true,
+    'codex',
+    'codex'
+  ],
+  ['\u25d0 working', 'working', 'Claude Code', true, false, 'Claude Code', true, 'claude', null],
+  ['\u25d3 Grok', 'working', 'Grok', true, false, 'Grok', true, 'grok', 'grok'],
+  ['\u280b Cursor Agent', 'working', 'Cursor', false, false, 'Cursor', false, 'cursor', 'cursor'],
+  ['\u280b Droid', 'working', 'Droid', true, false, 'Droid', true, 'droid', 'droid'],
+  ['\u280b Hermes', 'working', 'Hermes', true, false, 'Hermes', true, 'hermes', 'hermes'],
+  ['\u2726 gemini', 'working', 'Gemini CLI', false, true, 'Gemini CLI', false, 'gemini', 'gemini'],
+  [
+    '\u23f2 Gemini CLI',
+    'working',
+    'Gemini CLI',
+    false,
+    true,
+    'Gemini CLI',
+    false,
+    'gemini',
+    'gemini'
+  ],
+  ['\u25c7 Gemini CLI', 'idle', 'Gemini CLI', false, true, 'Gemini CLI', false, 'gemini', 'gemini'],
+  [
+    '\u270b Gemini CLI',
+    'permission',
+    'Gemini CLI',
+    false,
+    true,
+    'Gemini CLI',
+    false,
+    'gemini',
+    'gemini'
+  ],
+  ['gemini', 'idle', 'Gemini CLI', false, true, 'Gemini CLI', false, 'gemini', 'gemini'],
+  [
+    'antigravity gemini 3 pro',
+    'idle',
+    'Antigravity',
+    false,
+    false,
+    'Antigravity',
+    false,
+    'antigravity',
+    'antigravity'
+  ],
+  [
+    'agy - gemini 2 flash',
+    'idle',
+    'Antigravity',
+    false,
+    false,
+    'Antigravity',
+    false,
+    'antigravity',
+    'antigravity'
+  ],
+  ['codex working', 'working', 'Codex', false, false, 'Codex', false, 'codex', 'codex'],
+  ['codex ready', 'idle', 'Codex', false, false, 'Codex', false, 'codex', 'codex'],
+  [
+    'copilot waiting',
+    'permission',
+    'GitHub Copilot',
+    false,
+    false,
+    'GitHub Copilot',
+    false,
+    'copilot',
+    'copilot'
+  ],
+  ['devin thinking', 'working', 'Devin', false, false, 'Devin', false, 'devin', 'devin'],
+  ['mimo idle', 'idle', 'MiMo Code', false, false, 'MiMo Code', false, 'mimo-code', 'mimo-code'],
+  ['aider running', 'working', 'Aider', false, false, 'Aider', false, 'aider', 'aider'],
+  ['grok done', 'idle', 'Grok', false, false, 'Grok', false, 'grok', 'grok'],
+  ['opencode ready', 'idle', 'OpenCode', false, false, 'OpenCode', false, 'opencode', 'opencode'],
+  ['hermes ready', 'idle', 'Hermes', false, false, 'Hermes', false, 'hermes', 'hermes'],
+  ['droid ready', 'idle', 'Droid', false, false, 'Droid', false, 'droid', 'droid'],
+  ['cursor agent', null, 'Cursor', false, false, 'Cursor', false, 'cursor', 'cursor'],
+  ['cursor ready', 'idle', 'Cursor', false, false, 'Cursor', false, 'cursor', 'cursor'],
+  [
+    'cursor - action required',
+    'permission',
+    'Cursor',
+    false,
+    false,
+    'Cursor',
+    false,
+    'cursor',
+    'cursor'
+  ],
+  ['cursor position reset', 'idle', null, false, false, null, false, null, null],
+  ['\u03c0 > session - ~/orca', 'idle', 'Pi', false, false, 'Pi', false, 'pi', 'pi'],
+  ['\u03c0 ! blocked-session', 'permission', 'Pi', false, false, 'Pi', false, 'pi', 'pi'],
+  ['\u280b \u03c0 - session - ~/orca', 'working', 'Pi', true, false, 'Pi', true, 'pi', 'pi'],
+  ['zsh | \u280b Codex', 'working', 'Codex', true, false, 'Codex', true, 'codex', 'codex'],
+  ['tmux | claude - action required', 'permission', null, false, false, null, false, null, null],
+  [
+    'ssh host | opencode ready',
+    'idle',
+    'OpenCode',
+    false,
+    false,
+    'OpenCode',
+    false,
+    'opencode',
+    'opencode'
+  ]
+]
+
+describe('terminal title classification', () => {
+  it('covers every corpus title exactly once', () => {
+    expect(PINNED_CLASSIFICATIONS.map(([title]) => title)).toEqual([
+      ...TERMINAL_TITLE_CLASSIFICATION_CORPUS
+    ])
+  })
+
+  it.each(PINNED_CLASSIFICATIONS)(
+    'classifies %j identically',
+    (
+      title,
+      status,
+      label,
+      claude,
+      gemini,
+      explicitLabel,
+      explicitClaude,
+      titleAgent,
+      explicitTitleAgent
+    ) => {
+      expect(detectAgentStatusFromTitle(title)).toBe(status)
+      expect(getAgentLabel(title)).toBe(label)
+      expect(isClaudeAgent(title)).toBe(claude)
+      expect(isGeminiTerminalTitle(title)).toBe(gemini)
+      expect(getExplicitAgentLabel(title)).toBe(explicitLabel)
+      expect(isExplicitClaudeAgent(title)).toBe(explicitClaude)
+      expect(resolveTerminalTitleAgentType(title)).toBe(titleAgent)
+      expect(resolveExplicitTerminalTitleAgentType(title)).toBe(explicitTitleAgent)
+    }
+  )
+
+  it('returns the same verdict on the second read of every title', () => {
+    for (const title of TERMINAL_TITLE_CLASSIFICATION_CORPUS) {
+      expect(detectAgentStatusFromTitle(title)).toBe(detectAgentStatusFromTitle(title))
+      expect(getAgentLabel(title)).toBe(getAgentLabel(title))
+      expect(resolveExplicitTerminalTitleAgentType(title)).toBe(
+        resolveExplicitTerminalTitleAgentType(title)
+      )
+    }
+  })
+})
diff --git a/src/shared/terminal-title-classification-corpus.ts b/src/shared/terminal-title-classification-corpus.ts
new file mode 100644
index 00000000000..e1eb6e833a7
--- /dev/null
+++ b/src/shared/terminal-title-classification-corpus.ts
@@ -0,0 +1,86 @@
+/**
+ * Realistic terminal-title corpus for pinning agent classification.
+ *
+ * Why a shared const: the corpus is the contract the memoized classifiers must
+ * reproduce byte-for-byte, so the pinning test and the memo regression test
+ * read the same titles.
+ */
+export const TERMINAL_TITLE_CLASSIFICATION_CORPUS: readonly string[] = [
+  // Plain shell / directory titles — must classify as nothing.
+  '',
+  'zsh',
+  'bash',
+  'nwparker@mac: ~/orca',
+  'npm run dev',
+  // Boundary-guard cases from agent-name-token-match.ts's header comment.
+  'opencode-blinker',
+  'openclaude',
+  'openclaude-scratch',
+  'claude-scratch',
+  '~/codex/ready',
+  'review-14600-codex',
+  'timestamp ready',
+  'android build running',
+  '~/hermes/working',
+  'C:\\tools\\codex\\run',
+  '/usr/local/bin/claude/notes',
+  'agy-nightly',
+  // Windows launcher suffixes.
+  'codex.exe',
+  'openclaude.cmd',
+  'claude.bat working',
+  'aider.ps1 ready',
+  'copilot.exe - action required',
+  'droid.exe',
+  // Claude Code prefixes and identity frames.
+  '\u2733',
+  '\u2733 Claude Code',
+  '\u2733 ready',
+  '. building the parser',
+  '* done',
+  'Claude Code',
+  'claude - action required',
+  'Claude ready',
+  'claude agents',
+  '"/usr/local/bin/claude" agents',
+  // Leading spinner glyphs (braille + quarter circle).
+  '\u280b Claude Code',
+  '\u2809 Codex \u2014 refactoring',
+  '\u25d0 working',
+  '\u25d3 Grok',
+  '\u280b Cursor Agent',
+  '\u280b Droid',
+  '\u280b Hermes',
+  // Gemini glyph vocabulary.
+  '\u2726 gemini',
+  '\u23f2 Gemini CLI',
+  '\u25c7 Gemini CLI',
+  '\u270b Gemini CLI',
+  'gemini',
+  'antigravity gemini 3 pro',
+  'agy - gemini 2 flash',
+  // Named agents with status words.
+  'codex working',
+  'codex ready',
+  'copilot waiting',
+  'devin thinking',
+  'mimo idle',
+  'aider running',
+  'grok done',
+  'opencode ready',
+  'hermes ready',
+  'droid ready',
+  // Cursor's closed identity set.
+  'cursor agent',
+  'cursor ready',
+  'cursor - action required',
+  'cursor position reset',
+  // Pi / OMP compatible titles.
+  '\u03c0 > session - ~/orca',
+  '\u03c0 ! blocked-session',
+  '\u280b \u03c0 - session - ~/orca',
+  // Wrapper/multiplexer prefixes.
+  'zsh | \u280b Codex',
+  'tmux | claude - action required',
+  'ssh host | opencode ready'
+]
diff --git a/src/shared/terminal-title-classification-memo.test.ts b/src/shared/terminal-title-classification-memo.test.ts
new file mode 100644
index 00000000000..e2606a58291
--- /dev/null
+++ b/src/shared/terminal-title-classification-memo.test.ts
@@ -0,0 +1,98 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import * as AgentNameTokenMatchModule from './agent-name-token-match'
+import { getAgentLabel } from './agent-title-identity'
+import { detectAgentStatusFromTitle } from './agent-title-status'
+import { memoizeTitleClassification } from './terminal-title-classification-memo'
+import { resolveExplicitTerminalTitleAgentType } from './terminal-title-agent-type'
+
+// Why a module mock: `titleHasAgentName` is the leaf regex test every title
+// classifier funnels into, so counting its invocations is the direct measure of
+// what one store write costs when no title has changed.
+vi.mock('./agent-name-token-match', async (importOriginal) => {
+  const actual = await importOriginal<typeof AgentNameTokenMatchModule>()
+  return { ...actual, titleHasAgentName: vi.fn(actual.titleHasAgentName) }
+})
+
+const classifierCalls = vi.mocked(AgentNameTokenMatchModule.titleHasAgentName)
+
+// Titles a real sidebar holds steady while unrelated agent-status writes churn.
+const UNCHANGED_TITLES = [
+  'codex working',
+  'opencode-blinker',
+  'zsh',
+  '✳ Claude Code',
+  'copilot.exe - action required',
+  'gemini',
+  'cursor agent'
+]
+const STORE_WRITES = 50
+
+function classifyEveryTitle(): void {
+  for (const title of UNCHANGED_TITLES) {
+    getAgentLabel(title)
+    detectAgentStatusFromTitle(title)
+    resolveExplicitTerminalTitleAgentType(title)
+  }
+}
+
+describe('terminal title classification memo', () => {
+  beforeEach(() => {
+    classifierCalls.mockClear()
+  })
+
+  it('classifies each distinct title once across repeated store writes', () => {
+    // Warm the caches the way the first render would, then measure steady state.
+    classifyEveryTitle()
+    classifierCalls.mockClear()
+
+    for (let write = 0; write < STORE_WRITES; write += 1) {
+      classifyEveryTitle()
+    }
+
+    // Unmemoized this is STORE_WRITES x titles x the whole regex ladder — 4,350
+    // leaf matches for this fixture. Memoized, an unchanged title costs nothing.
+    expect(classifierCalls).not.toHaveBeenCalled()
+  })
+
+  it('classifies a title once no matter how many readers ask', () => {
+    const title = 'aider running'
+    getAgentLabel(title)
+    const firstReadCalls = classifierCalls.mock.calls.length
+    expect(firstReadCalls).toBeGreaterThan(0)
+
+    for (let read = 0; read < 20; read += 1) {
+      getAgentLabel(title)
+    }
+    expect(classifierCalls.mock.calls.length).toBe(firstReadCalls)
+  })
+
+  it('reclassifies as soon as the title changes', () => {
+    expect(getAgentLabel('codex ready')).toBe('Codex')
+    expect(getAgentLabel('grok ready')).toBe('Grok')
+    expect(detectAgentStatusFromTitle('codex ready')).toBe('idle')
+    expect(detectAgentStatusFromTitle('codex working')).toBe('working')
+  })
+
+  it('caches null and false verdicts, not just truthy ones', () => {
+    const classify = vi.fn((): string | null => null)
+    const memoized = memoizeTitleClassification(classify)
+    expect(memoized('zsh')).toBeNull()
+    expect(memoized('zsh')).toBeNull()
+    expect(classify).toHaveBeenCalledTimes(1)
+  })
+
+  it('evicts oldest entries instead of growing without bound', () => {
+    const classify = vi.fn((title: string) => title.length)
+    const memoized = memoizeTitleClassification(classify)
+    // Cap is 1024; overflow it and confirm the newest key still hits while the
+    // oldest was evicted.
+    for (let index = 0; index < 1030; index += 1) {
+      memoized(`title-${index}`)
+    }
+    const afterFill = classify.mock.calls.length
+    memoized('title-1029')
+    expect(classify.mock.calls.length).toBe(afterFill)
+    memoized('title-0')
+    expect(classify.mock.calls.length).toBe(afterFill + 1)
+  })
+})
diff --git a/src/shared/terminal-title-classification-memo.ts b/src/shared/terminal-title-classification-memo.ts
new file mode 100644
index 00000000000..c712ca65c96
--- /dev/null
+++ b/src/shared/terminal-title-classification-memo.ts
@@ -0,0 +1,43 @@
+/**
+ * Bounded memo for pure `(title: string) => T` terminal-title classifiers.
+ *
+ * Why: the sidebar cards and tab strip re-derive agent identity/status from
+ * every pane title inside zustand selectors and render bodies, so an UNCHANGED
+ * title was re-tested against every agent-name regex on every store write —
+ * thousands of classifications per second while the app sat idle. Every
+ * classifier below depends on nothing but the title string, so the verdict is
+ * reusable until the title itself changes; a new title is simply a new key, so
+ * there is no staleness window and no invalidation signal to miss.
+ */
+
+/**
+ * Cap: comfortably above the live working set (one title per open pane plus
+ * retained rows) so steady-state hit rate stays ~100%, small enough that the
+ * map cannot grow with session length. Entries hold a reference to a string the
+ * store already retains, so the marginal cost is the map entry itself.
+ */
+const MAX_MEMOIZED_TITLES = 1024
+
+export function memoizeTitleClassification<T>(
+  classify: (title: string) => T
+): (title: string) => T {
+  // Boxed values so `undefined`/`null` verdicts are still cache hits.
+  const cache = new Map<string, { value: T }>()
+  return (title: string): T => {
+    const cached = cache.get(title)
+    if (cached) {
+      return cached.value
+    }
+    const value = classify(title)
+    // Insertion-ordered FIFO eviction: a pane's superseded title frames are the
+    // oldest keys and the least likely to be asked for again.
+    if (cache.size >= MAX_MEMOIZED_TITLES) {
+      const oldest = cache.keys().next()
+      if (!oldest.done) {
+        cache.delete(oldest.value)
+      }
+    }
+    cache.set(title, { value })
+    return value
+  }
+}

From 93cb1074b74ea1d6d177f1cf63529949fd7c3cd9 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:04:02 -0700
Subject: [PATCH 60/92] perf(renderer): stop the mobile sync key rehashing
 every dirty file on each keystroke (#18154)

`useRuntimeGraphSync` is mounted unconditionally, and its projection layer runs
on every store write. Four of those projections did work proportional to the
whole slice rather than to what changed:

- `buildRuntimeMobileEditorDraftsProjection` FNV-hashed every open dirty draft
  on every `setEditorDraft`, which Monaco fires per keystroke with no debounce.
- `buildRuntimeMobileOpenFilesProjection` and the browser projection rebuilt and
  re-stringified everything on any `isDirty`/title/url/loading change.
- The agent-status sort built an ICU collation per comparison for a string that
  is only ever compared with `===`.

Each now memoizes per entry against the previous build, mirroring the tabs and
agent-status projections that already did. The duplicated draft-hash loop in
`mobile-session-inputs` is gone; both consumers share one memo.

The session-write subscriber also identity-scans SESSION_RELEVANT_FIELDS before
allocating its 35-field snapshot and changed-field array.

Projections are byte-identical apart from the agent-status sort order, which is
never displayed.
---
 ...ession-write-subscriber-allocation.test.ts | 196 ++++++
 .../src/lib/session-write-subscriber.ts       |  49 ++
 ...time-graph-agent-status-projection.test.ts |  33 +-
 ...-runtime-graph-projection-hot-path.test.ts | 576 ++++++++++++++++++
 .../src/runtime/sync-runtime-graph.ts         |   2 +
 .../agent-status-projection.ts                |   5 +-
 .../sync-runtime-graph/editor-draft-hash.ts   |  15 +
 .../runtime/sync-runtime-graph/graph-state.ts |  10 +-
 .../mobile-session-inputs.ts                  |  23 -
 .../mobile-session-snapshots.ts               |   2 +-
 .../sync-runtime-graph/sync-projections.ts    | 244 ++++++--
 .../src/runtime/sync-runtime-graph/types.ts   |  42 ++
 12 files changed, 1108 insertions(+), 89 deletions(-)
 create mode 100644 src/renderer/src/lib/session-write-subscriber-allocation.test.ts
 create mode 100644 src/renderer/src/runtime/sync-runtime-graph-projection-hot-path.test.ts
 create mode 100644 src/renderer/src/runtime/sync-runtime-graph/editor-draft-hash.ts

diff --git a/src/renderer/src/lib/session-write-subscriber-allocation.test.ts b/src/renderer/src/lib/session-write-subscriber-allocation.test.ts
new file mode 100644
index 00000000000..9681af5a973
--- /dev/null
+++ b/src/renderer/src/lib/session-write-subscriber-allocation.test.ts
@@ -0,0 +1,196 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { AppState } from '@/store'
+import { createSessionWriteSubscriber } from './session-write-subscriber'
+import { SESSION_RELEVANT_FIELDS } from './workspace-session'
+import { buildWorkspaceSessionPatch } from './workspace-session-patch'
+
+/**
+ * Why a hand-built store: the subscriber allocates a 35-field snapshot plus a changed-field array
+ * on every fire that reaches its body, and both are invisible from outside. Driving it through an
+ * injected store lets `Array.prototype.filter` stand in as the allocation counter — the changed
+ * list is built 1:1 with the snapshot, in the same block, so one count measures both.
+ */
+function makeSessionState(overrides: Partial<AppState> = {}): AppState {
+  const base: Record<string, unknown> = {
+    workspaceSessionReady: true,
+    hydrationSucceeded: true,
+    // Non-session state the subscriber must ignore.
+    agentStatusByPaneKey: {},
+    runtimePaneTitlesByTabId: {}
+  }
+  const arrayFields = new Set<string>([
+    'repos',
+    'openFiles',
+    'browserUrlHistory',
+    'workspaceDocHistory'
+  ])
+  const mapFields = new Set<string>(['sshConnectionStates'])
+  for (const key of SESSION_RELEVANT_FIELDS) {
+    base[key] = arrayFields.has(key) ? [] : mapFields.has(key) ? new Map() : {}
+  }
+  base.activeRepoId = null
+  base.activeWorkspaceKey = null
+  base.activeWorktreeId = null
+  base.activeTabId = null
+  base.activeWorkspaceExecutionHostId = null
+  return { ...base, ...overrides } as AppState
+}
+
+function createHarness() {
+  let state = makeSessionState()
+  const listeners: ((next: AppState) => void)[] = []
+  const persisted: unknown[] = []
+  const dispose = createSessionWriteSubscriber({
+    store: {
+      subscribe: (listener) => {
+        listeners.push(listener)
+        return () => {
+          listeners.splice(listeners.indexOf(listener), 1)
+        }
+      },
+      getState: () => state
+    },
+    persist: (payload) => persisted.push(payload)
+  })
+  return {
+    dispose,
+    persisted,
+    write(mutate?: (previous: AppState) => Partial<AppState>) {
+      state = { ...state, ...mutate?.(state) } as AppState
+      for (const listener of listeners.slice()) {
+        listener(state)
+      }
+    }
+  }
+}
+
+function countFilterCalls<T>(run: () => T): number {
+  const original = Array.prototype.filter
+  let calls = 0
+  const spy = vi.spyOn(Array.prototype, 'filter').mockImplementation(function filterCounting(
+    this: unknown[],
+    ...args: never[]
+  ) {
+    calls += 1
+    return (original as (...a: never[]) => unknown[]).apply(this, args)
+  } as typeof Array.prototype.filter)
+  try {
+    run()
+    return calls
+  } finally {
+    spy.mockRestore()
+  }
+}
+
+beforeEach(() => {
+  vi.useFakeTimers()
+})
+afterEach(() => {
+  vi.useRealTimers()
+})
+
+describe('session write subscriber allocation', () => {
+  it('allocates nothing for store writes that touch no session field', () => {
+    const harness = createHarness()
+    try {
+      // Prime `prev` on the first fire.
+      harness.write()
+      vi.advanceTimersByTime(500)
+
+      const writes = 200
+      const calls = countFilterCalls(() => {
+        for (let write = 0; write < writes; write += 1) {
+          harness.write((previous) => ({
+            agentStatusByPaneKey: { ...previous.agentStatusByPaneKey, [`p-${write}`]: {} } as never
+          }))
+        }
+      })
+      // Before: one changed-field array (and one 35-field snapshot) per write.
+      expect(calls).toBe(0)
+    } finally {
+      harness.dispose()
+    }
+  })
+
+  it('still allocates and persists when a session field really changes', () => {
+    const harness = createHarness()
+    try {
+      harness.write()
+      vi.advanceTimersByTime(500)
+      harness.persisted.length = 0
+
+      const writes = 20
+      const calls = countFilterCalls(() => {
+        for (let write = 0; write < writes; write += 1) {
+          harness.write(() => ({ activeTabId: `tab-${write}` }))
+        }
+      })
+      expect(calls).toBe(writes)
+      vi.advanceTimersByTime(500)
+      expect(harness.persisted).toHaveLength(1)
+    } finally {
+      harness.dispose()
+    }
+  })
+
+  it('still wakes a deferred write when an unrelated field changes', () => {
+    let state = makeSessionState()
+    const listeners: ((next: AppState) => void)[] = []
+    const persisted: unknown[] = []
+    let gateOpen = false
+    const dispose = createSessionWriteSubscriber({
+      store: {
+        subscribe: (listener) => {
+          listeners.push(listener)
+          return () => {}
+        },
+        getState: () => state
+      },
+      persist: (payload) => persisted.push(payload),
+      shouldSchedulePersist: () => gateOpen,
+      subscribeToPersistGateOpen: () => () => {}
+    })
+    const write = (patch: Partial<AppState>): void => {
+      state = { ...state, ...patch } as AppState
+      for (const listener of listeners.slice()) {
+        listener(state)
+      }
+    }
+    try {
+      // A real session change lands while the gate is closed, so the write is owed but deferred.
+      write({ activeTabId: 'tab-1' })
+      vi.advanceTimersByTime(500)
+      expect(persisted).toHaveLength(0)
+
+      // An unrelated write with the gate open must re-arm it even though nothing session-relevant
+      // moved — the identity-scan fast path must not swallow this wake-up.
+      gateOpen = true
+      write({ agentStatusByPaneKey: { a: {} } as never })
+      vi.advanceTimersByTime(500)
+      expect(persisted).toHaveLength(1)
+    } finally {
+      dispose()
+    }
+  })
+
+  it('gates on a strict superset of the fields the patch builder reads', () => {
+    // A gate that misses a projection input persists stale state, so this is a correctness lock,
+    // not a perf one. Record what the builder actually touches rather than trusting the types.
+    const read = new Set<string>()
+    const snapshot = new Proxy(makeSessionState() as unknown as Record<string, unknown>, {
+      get(target, property, receiver) {
+        if (typeof property === 'string') {
+          read.add(property)
+        }
+        return Reflect.get(target, property, receiver)
+      }
+    })
+    buildWorkspaceSessionPatch(
+      snapshot as never,
+      SESSION_RELEVANT_FIELDS as unknown as Iterable<never>
+    )
+    const gated = new Set<string>(SESSION_RELEVANT_FIELDS)
+    expect([...read].filter((field) => !gated.has(field))).toEqual([])
+    expect(read.size).toBeGreaterThan(0)
+  })
+})
diff --git a/src/renderer/src/lib/session-write-subscriber.ts b/src/renderer/src/lib/session-write-subscriber.ts
index f01b7b25011..e0e366ef6ba 100644
--- a/src/renderer/src/lib/session-write-subscriber.ts
+++ b/src/renderer/src/lib/session-write-subscriber.ts
@@ -124,6 +124,10 @@ export function createSessionWriteSubscriber({
   // reuse the prior identity while a real session change keeps fresh tabs for
   // the eventual getState() patch build. `null` makes the first fire proceed.
   let prev: Record<string, unknown> | null = null
+  // Why held separately from `prev`: `prev` stores the *projected* tab maps, so the raw slice
+  // identity is the only thing the pre-allocation scan below can compare them against.
+  let prevTabsSource: TabsByWorktree | null = null
+  let prevUnifiedTabsSource: UnifiedTabsByWorktree | null = null
   // Why: this set is the only record that a mutation still owes a write — `prev` has already
   // advanced past it, and change detection is identity-based, so a field dropped from here can
   // never be re-detected. It is retired only by a flush that reached `persist` (or found nothing
@@ -168,10 +172,53 @@ export function createSessionWriteSubscriber({
     timer = setTimeout(flushPendingWrite, debounceMs)
   }
 
+  /**
+   * Identity-only scan over exactly SESSION_RELEVANT_FIELDS, allocating nothing.
+   *
+   * Why sound: for the two projected fields an unchanged raw slice is strictly stronger than an
+   * unchanged projection (the projection is a function of the slice), so a `false` here always
+   * implies the full comparison below would have found no changed field. A changed raw slice
+   * falls through to that comparison, where the projection can still collapse it.
+   */
+  const hasSessionFieldIdentityChange = (state: AppState): boolean => {
+    if (prev === null) {
+      return true
+    }
+    for (const key of SESSION_RELEVANT_FIELDS) {
+      const unchanged =
+        key === 'tabsByWorktree'
+          ? state.tabsByWorktree === prevTabsSource
+          : key === 'unifiedTabsByWorktree'
+            ? state.unifiedTabsByWorktree === prevUnifiedTabsSource
+            : prev[key] === state[key]
+      if (!unchanged) {
+        return true
+      }
+    }
+    return false
+  }
+
   const unsub = store.subscribe((state) => {
     if (!shouldPersistWorkspaceSession(state)) {
       return
     }
+    // Why: this fires on every store write and almost none of them touch a session field. Scan
+    // identities first so the common case never allocates the 35-field snapshot or the changed
+    // list; only a real identity change pays for them.
+    if (!hasSessionFieldIdentityChange(state)) {
+      if (pendingChangedFields.size === 0) {
+        return
+      }
+      if (shouldSchedulePersist && !shouldSchedulePersist()) {
+        return
+      }
+      // An unrelated update may wake a deferred write but must never reset an armed debounce.
+      if (timer !== null) {
+        return
+      }
+      armFlushTimer()
+      return
+    }
     const next: Record<string, unknown> = {}
     for (const key of SESSION_RELEVANT_FIELDS) {
       const value = state[key]
@@ -190,6 +237,8 @@ export function createSessionWriteSubscriber({
       return
     }
     prev = next
+    prevTabsSource = state.tabsByWorktree
+    prevUnifiedTabsSource = state.unifiedTabsByWorktree
     for (const field of changedFields) {
       pendingChangedFields.add(field)
     }
diff --git a/src/renderer/src/runtime/sync-runtime-graph-agent-status-projection.test.ts b/src/renderer/src/runtime/sync-runtime-graph-agent-status-projection.test.ts
index 724b8743dde..3ae6769bb15 100644
--- a/src/renderer/src/runtime/sync-runtime-graph-agent-status-projection.test.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph-agent-status-projection.test.ts
@@ -6,14 +6,17 @@ import {
   resetRuntimeMobileAgentStatusProjectionCacheForTests
 } from './sync-runtime-graph'
 
-// Reference: the pre-change whole-array serialization, kept verbatim. The bucket
-// width is read from the module under test so a drifted constant cannot make this
-// reference silently disagree for a reason unrelated to the change.
+// Reference: the pre-change whole-array serialization, kept verbatim apart from the sort, which
+// is now a code-unit compare — the projection is only ever `===`-compared, never displayed, so it
+// needs to be deterministic rather than locale-correct. `localeCompareOrderedEntries` below pins
+// that the two orders still serialize the same entries. The bucket width is read from the module
+// under test so a drifted constant cannot make this reference silently disagree for a reason
+// unrelated to the change.
 const BUCKET_MS = AGENT_STATUS_SYNC_UPDATED_AT_BUCKET_MS_FOR_TESTS
 function referenceProjection(map: AppState['agentStatusByPaneKey']): string {
   return JSON.stringify(
     Object.entries(map)
-      .sort(([a], [b]) => a.localeCompare(b))
+      .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
       .map(([paneKey, entry]) => ({
         paneKey,
         entryPaneKey: entry.paneKey,
@@ -120,4 +123,26 @@ describe('mobile agent-status projection equivalence', () => {
       }).toEqual({ round, projection: referenceProjection(current) })
     }
   })
+
+  it('serializes the same entries the localeCompare order did', () => {
+    resetRuntimeMobileAgentStatusProjectionCacheForTests()
+    // Keys where locale and code-unit order disagree: 'tab-1:' sorts after 'tab-10:' by code unit
+    // (':' > '0') and before it by locale, and case/accent handling differs too.
+    const map: AppState['agentStatusByPaneKey'] = {}
+    for (const paneKey of ['tab-1:leaf-0', 'tab-10:leaf-0', 'B:leaf-0', 'a:leaf-0', 'á:leaf-0']) {
+      map[paneKey] = makeEntry(0, { paneKey })
+    }
+    const localeCompareOrderedEntries = JSON.parse(
+      JSON.stringify(
+        Object.entries(map)
+          .sort(([a], [b]) => a.localeCompare(b))
+          .map(([paneKey]) => paneKey)
+      )
+    ) as string[]
+    const projected = (
+      JSON.parse(buildRuntimeMobileAgentStatusProjectionForTests(map)) as { paneKey: string }[]
+    ).map((entry) => entry.paneKey)
+    expect([...projected].sort()).toEqual([...localeCompareOrderedEntries].sort())
+    expect(projected).toHaveLength(localeCompareOrderedEntries.length)
+  })
 })
diff --git a/src/renderer/src/runtime/sync-runtime-graph-projection-hot-path.test.ts b/src/renderer/src/runtime/sync-runtime-graph-projection-hot-path.test.ts
new file mode 100644
index 00000000000..ed1991e60d2
--- /dev/null
+++ b/src/renderer/src/runtime/sync-runtime-graph-projection-hot-path.test.ts
@@ -0,0 +1,576 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type { AppState } from '../store/types'
+import { makeAgentStatusEntry, makeState } from './sync-runtime-graph-test-harness'
+import type * as EditorDraftHashModule from './sync-runtime-graph/editor-draft-hash'
+
+// Why the mock: the draft hash is the only per-keystroke cost that scales with file size, so the
+// regression this file guards is "how many characters were hashed", not "how long did it take".
+// Instrumenting the real function through its own module keeps the counter out of shipped code.
+const draftHashCounter = { calls: 0, chars: 0 }
+vi.mock('./sync-runtime-graph/editor-draft-hash', async (importOriginal) => {
+  const actual = await importOriginal<typeof EditorDraftHashModule>()
+  return {
+    stableHashString: (value: string): string => {
+      draftHashCounter.calls += 1
+      draftHashCounter.chars += value.length
+      return actual.stableHashString(value)
+    }
+  }
+})
+
+const { stableHashString } = await import('./sync-runtime-graph/editor-draft-hash')
+const {
+  buildRuntimeMobileAgentStatusProjectionForTests,
+  getRuntimeMobileSessionSyncKey,
+  resetRuntimeMobileAgentStatusProjectionCacheForTests,
+  resetRuntimeMobileSyncProjectionCachesForTests,
+  runtimeMobileSessionSyncKeysEqual
+} = await import('./sync-runtime-graph')
+const {
+  buildRuntimeMobileBrowserProjection,
+  buildRuntimeMobileEditorDraftsProjection,
+  buildRuntimeMobileOpenFilesProjection
+} = await import('./sync-runtime-graph/sync-projections')
+const { AGENT_STATUS_SYNC_UPDATED_AT_BUCKET_MS } = await import('./sync-runtime-graph/graph-state')
+
+// ── Reference implementations: the pre-change bodies, kept verbatim ────────────────────
+
+function referenceEditorDraftsProjection(editorDrafts: AppState['editorDrafts']): string {
+  return JSON.stringify(
+    Object.fromEntries(
+      Object.entries(editorDrafts).map(([fileId, content]) => [fileId, stableHashString(content)])
+    )
+  )
+}
+
+function referenceOpenFilesProjection(openFiles: AppState['openFiles']): string {
+  return JSON.stringify(
+    openFiles.map((file) => ({
+      id: file.id,
+      filePath: file.filePath,
+      relativePath: file.relativePath,
+      worktreeId: file.worktreeId,
+      language: file.language,
+      mode: file.mode,
+      diffSource: file.diffSource,
+      isDirty: file.isDirty,
+      isUntitled: file.isUntitled,
+      deleteUntouchedOnClose: file.deleteUntouchedOnClose,
+      markdownPreviewSourceFileId: file.markdownPreviewSourceFileId
+    }))
+  )
+}
+
+function referenceBrowserProjection(state: AppState): string {
+  return JSON.stringify({
+    workspacesByWorktree: Object.fromEntries(
+      Object.entries(state.browserTabsByWorktree ?? {}).map(([worktreeId, workspaces]) => [
+        worktreeId,
+        workspaces.map((workspace) => ({
+          id: workspace.id,
+          activePageId: workspace.activePageId,
+          title: workspace.title,
+          url: workspace.url,
+          loading: workspace.loading,
+          canGoBack: workspace.canGoBack,
+          canGoForward: workspace.canGoForward
+        }))
+      ])
+    ),
+    pagesByWorkspace: Object.fromEntries(
+      Object.entries(state.browserPagesByWorkspace ?? {}).map(([workspaceId, pages]) => [
+        workspaceId,
+        pages.map((page) => ({
+          id: page.id,
+          title: page.title,
+          url: page.url,
+          loading: page.loading,
+          canGoBack: page.canGoBack,
+          canGoForward: page.canGoForward
+        }))
+      ])
+    )
+  })
+}
+
+/** The pre-change agent-status serialization, including its `localeCompare` sort. */
+function referenceAgentStatusProjection(map: AppState['agentStatusByPaneKey']): string {
+  return JSON.stringify(
+    Object.entries(map)
+      .sort(([a], [b]) => a.localeCompare(b))
+      .map(([paneKey, entry]) => ({
+        paneKey,
+        entryPaneKey: entry.paneKey,
+        state: entry.state,
+        workingMode: entry.workingMode ?? null,
+        prompt: entry.prompt,
+        updatedAtBucket: Math.floor(entry.updatedAt / AGENT_STATUS_SYNC_UPDATED_AT_BUCKET_MS),
+        stateStartedAt: entry.stateStartedAt,
+        agentType: entry.agentType ?? null,
+        terminalTitle: entry.terminalTitle ?? null,
+        stateHistory: entry.stateHistory.map((history) => ({
+          state: history.state,
+          prompt: history.prompt,
+          startedAt: history.startedAt,
+          interrupted: history.interrupted ?? null
+        })),
+        toolName: entry.toolName ?? null,
+        toolInput: entry.toolInput ?? null,
+        interactivePrompt: entry.interactivePrompt ?? null,
+        lastAssistantMessage: entry.lastAssistantMessage ?? null,
+        lastAssistantMessageIsToolOutput: entry.lastAssistantMessageIsToolOutput ?? null,
+        interrupted: entry.interrupted ?? null
+      }))
+  )
+}
+
+/** Same entries, code-unit ordered — proves the new sort changes order only, never content. */
+function sortedProjectionEntries(projection: string): unknown[] {
+  return (JSON.parse(projection) as unknown[]).slice().sort((a, b) => {
+    const left = JSON.stringify(a)
+    const right = JSON.stringify(b)
+    return left < right ? -1 : left > right ? 1 : 0
+  })
+}
+
+// ── Fixtures ──────────────────────────────────────────────────────────────────────────
+
+const DRAFT_FILE_COUNT = 5
+const DRAFT_CHARS_PER_FILE = 40_000
+
+function makeDrafts(): Record<string, string> {
+  const drafts: Record<string, string> = {}
+  for (let index = 0; index < DRAFT_FILE_COUNT; index += 1) {
+    drafts[`file-${index}`] = 'x'.repeat(DRAFT_CHARS_PER_FILE)
+  }
+  return drafts
+}
+
+function makeOpenFile(index: number, overrides: Record<string, unknown> = {}): never {
+  return {
+    id: `file-${index}`,
+    filePath: `/repo/src/file-${index}.ts`,
+    relativePath: `src/file-${index}.ts`,
+    worktreeId: 'wt-1',
+    language: 'typescript',
+    mode: 'edit',
+    isDirty: false,
+    isUntitled: false,
+    ...overrides
+  } as never
+}
+
+function makeBrowserWorkspace(index: number, overrides: Record<string, unknown> = {}): never {
+  return {
+    id: `ws-${index}`,
+    activePageId: `page-${index}`,
+    title: `tab ${index}`,
+    url: `https://example.test/${index}`,
+    loading: false,
+    canGoBack: false,
+    canGoForward: false,
+    ...overrides
+  } as never
+}
+
+function makeBrowserPage(index: number, overrides: Record<string, unknown> = {}): never {
+  return {
+    id: `page-${index}`,
+    title: `page ${index}`,
+    url: `https://example.test/${index}`,
+    loading: false,
+    canGoBack: false,
+    canGoForward: false,
+    ...overrides
+  } as never
+}
+
+/**
+ * Characters handed back by `JSON.stringify`, which is the allocation these projections dominate.
+ * Counting bytes rather than calls keeps the comparison fair: the old code made one big call per
+ * rebuild, the new code makes one small call per changed entry.
+ */
+function countSerializedChars(run: () => void): number {
+  const original = JSON.stringify
+  let chars = 0
+  const spy = vi.spyOn(JSON, 'stringify').mockImplementation(((...args: never[]) => {
+    const serialized = (original as (...a: never[]) => string)(...args)
+    chars += serialized?.length ?? 0
+    return serialized
+  }) as typeof JSON.stringify)
+  try {
+    run()
+    return chars
+  } finally {
+    spy.mockRestore()
+  }
+}
+
+beforeEach(() => {
+  draftHashCounter.calls = 0
+  draftHashCounter.chars = 0
+  resetRuntimeMobileSyncProjectionCachesForTests()
+  resetRuntimeMobileAgentStatusProjectionCacheForTests()
+})
+
+describe('editor draft projection on the typing path', () => {
+  it('hashes only the edited file per keystroke, not every open dirty file', () => {
+    const typedCharacters = 100
+    const totalDraftChars = DRAFT_FILE_COUNT * DRAFT_CHARS_PER_FILE
+
+    // Baseline: the pre-change uncached projection, driven by the same counter.
+    let drafts = makeDrafts()
+    referenceEditorDraftsProjection(drafts)
+    draftHashCounter.calls = 0
+    draftHashCounter.chars = 0
+    for (let keystroke = 0; keystroke < typedCharacters; keystroke += 1) {
+      drafts = { ...drafts, 'file-0': `${drafts['file-0']}a` }
+      referenceEditorDraftsProjection(drafts)
+    }
+    const before = { calls: draftHashCounter.calls, chars: draftHashCounter.chars }
+
+    resetRuntimeMobileSyncProjectionCachesForTests()
+    let memoDrafts = makeDrafts()
+    buildRuntimeMobileEditorDraftsProjection(memoDrafts)
+    draftHashCounter.calls = 0
+    draftHashCounter.chars = 0
+    for (let keystroke = 0; keystroke < typedCharacters; keystroke += 1) {
+      memoDrafts = { ...memoDrafts, 'file-0': `${memoDrafts['file-0']}a` }
+      buildRuntimeMobileEditorDraftsProjection(memoDrafts)
+    }
+    const after = { calls: draftHashCounter.calls, chars: draftHashCounter.chars }
+
+    // Keystroke k has grown file-0 by k characters, so the exact totals are closed form.
+    const growth = (typedCharacters * (typedCharacters + 1)) / 2
+    // Before: every keystroke rehashes all five drafts.
+    expect(before).toEqual({
+      calls: typedCharacters * DRAFT_FILE_COUNT,
+      chars: typedCharacters * totalDraftChars + growth
+    })
+    // After: one hash of one draft per keystroke.
+    expect(after).toEqual({
+      calls: typedCharacters,
+      chars: typedCharacters * DRAFT_CHARS_PER_FILE + growth
+    })
+    expect(before.chars / after.chars).toBeGreaterThan(DRAFT_FILE_COUNT - 0.1)
+  })
+
+  it('matches the uncached projection byte for byte across draft shapes', () => {
+    const shapes: Record<string, string>[] = [
+      {},
+      { 'file-a': '' },
+      { 'file-a': 'hello' },
+      { 'file-a': 'hello', 'file-b': 'world' },
+      { 'file-b': 'world', 'file-a': 'hello' },
+      { '2': 'numeric-like key', 'file-a': 'hello', '1': 'other' },
+      { 'quote"and\\slash': 'body with "quotes" and \\ and \u{1f389}' },
+      { 'file-a': 'hello', 'file-b': 'world', 'file-c': 'third' },
+      { 'file-a': 'HELLO', 'file-c': 'third' }
+    ]
+    for (const [index, shape] of shapes.entries()) {
+      expect({ index, projection: buildRuntimeMobileEditorDraftsProjection(shape) }).toEqual({
+        index,
+        projection: referenceEditorDraftsProjection(shape)
+      })
+    }
+  })
+})
+
+describe('agent-status projection sort', () => {
+  it('constructs no ICU collator, and keeps the same entries as the localeCompare order', () => {
+    // MAX_LIVE_AGENT_STATUSES — the cap a busy session actually reaches. Real pane keys are
+    // `<uuid tab id>:<uuid leaf id>`, so model them as unordered hex rather than a sorted
+    // `tab-<n>` run that would let TimSort skip most comparisons.
+    let seed = 0x2f6e2b1
+    const nextHex = (): string => {
+      seed = (seed * 1103515245 + 12345) & 0x7fffffff
+      return seed.toString(16).padStart(8, '0')
+    }
+    const paneKeys = Array.from({ length: 500 }, () => `${nextHex()}-${nextHex()}:${nextHex()}`)
+    const map: AppState['agentStatusByPaneKey'] = {}
+    for (const [index, paneKey] of paneKeys.entries()) {
+      map[paneKey] = makeAgentStatusEntry({ paneKey, prompt: `prompt ${index}` })
+    }
+    // One ping replaces one entry and re-spreads the map, so the sort runs in full again.
+    const pinged = { ...map, [paneKeys[0]]: makeAgentStatusEntry({ paneKey: paneKeys[0] }) }
+
+    const localeCompareSpy = vi.spyOn(String.prototype, 'localeCompare')
+    let projection = ''
+    let beforeCalls = 0
+    let afterCalls = 0
+    try {
+      referenceAgentStatusProjection(map)
+      beforeCalls = localeCompareSpy.mock.calls.length
+      localeCompareSpy.mockClear()
+      resetRuntimeMobileAgentStatusProjectionCacheForTests()
+      projection = buildRuntimeMobileAgentStatusProjectionForTests(map)
+      buildRuntimeMobileAgentStatusProjectionForTests(pinged)
+      afterCalls = localeCompareSpy.mock.calls.length
+    } finally {
+      // `mockRestore` clears the recorded calls, so read the counts first.
+      localeCompareSpy.mockRestore()
+    }
+    // Before: thousands of ICU collator comparisons for a single ping.
+    expect(beforeCalls).toBeGreaterThan(3000)
+    expect(afterCalls).toBe(0)
+
+    // The projection is identical up to ordering, and ordering is only ever `===`-compared.
+    expect(sortedProjectionEntries(projection)).toEqual(
+      sortedProjectionEntries(referenceAgentStatusProjection(map))
+    )
+  })
+
+  it('is deterministic for keys where locale and code-unit order disagree', () => {
+    const map: AppState['agentStatusByPaneKey'] = {}
+    for (const paneKey of ['b:leaf', 'A:leaf', 'a:leaf', 'á:leaf', 'B:leaf']) {
+      map[paneKey] = makeAgentStatusEntry({ paneKey })
+    }
+    resetRuntimeMobileAgentStatusProjectionCacheForTests()
+    const first = buildRuntimeMobileAgentStatusProjectionForTests(map)
+    resetRuntimeMobileAgentStatusProjectionCacheForTests()
+    const second = buildRuntimeMobileAgentStatusProjectionForTests({ ...map })
+    expect(second).toBe(first)
+    expect(sortedProjectionEntries(first)).toEqual(
+      sortedProjectionEntries(referenceAgentStatusProjection(map))
+    )
+  })
+})
+
+describe('open-files and browser projections', () => {
+  it('re-serializes only the changed entry per store write', () => {
+    const files = Array.from({ length: 20 }, (_value, index) => makeOpenFile(index))
+    const writes = 50
+    const driveWrites = (project: (openFiles: AppState['openFiles']) => string): void => {
+      let openFiles = files as unknown as AppState['openFiles']
+      project(openFiles)
+      for (let write = 0; write < writes; write += 1) {
+        const next = [...openFiles]
+        next[0] = makeOpenFile(0, { isDirty: write % 2 === 0 })
+        openFiles = next as unknown as AppState['openFiles']
+        project(openFiles)
+      }
+    }
+
+    const before = countSerializedChars(() => {
+      driveWrites(referenceOpenFilesProjection)
+    })
+    resetRuntimeMobileSyncProjectionCachesForTests()
+    const after = countSerializedChars(() => {
+      driveWrites(buildRuntimeMobileOpenFilesProjection)
+    })
+    // Only the flipped file re-serializes; the other 19 are reused by identity.
+    expect(before / after).toBeGreaterThan(14)
+  })
+
+  it('re-serializes only the changed browser bucket per store write', () => {
+    const workspaces = Array.from({ length: 8 }, (_value, index) => makeBrowserWorkspace(index))
+    const pagesByWorkspace: Record<string, never[]> = {}
+    for (let index = 0; index < 8; index += 1) {
+      pagesByWorkspace[`ws-${index}`] = [makeBrowserPage(index)] as never[]
+    }
+    const initial = makeState({
+      browserTabsByWorktree: { 'wt-1': workspaces, 'wt-2': workspaces } as never,
+      browserPagesByWorkspace: pagesByWorkspace as never
+    })
+    const writes = 50
+    const driveWrites = (project: (state: AppState) => string): void => {
+      let state = initial
+      project(state)
+      for (let write = 0; write < writes; write += 1) {
+        const nextWorkspaces = [...(state.browserTabsByWorktree['wt-1'] ?? [])]
+        nextWorkspaces[0] = makeBrowserWorkspace(0, { title: `tab 0 (${write})` })
+        state = makeState({
+          ...state,
+          browserTabsByWorktree: {
+            ...state.browserTabsByWorktree,
+            'wt-1': nextWorkspaces
+          } as never
+        })
+        project(state)
+      }
+    }
+
+    const before = countSerializedChars(() => {
+      driveWrites(referenceBrowserProjection)
+    })
+    resetRuntimeMobileSyncProjectionCachesForTests()
+    const after = countSerializedChars(() => {
+      driveWrites(buildRuntimeMobileBrowserProjection)
+    })
+    // Only the 'wt-1' bucket re-serializes; 'wt-2' and every page bucket are reused.
+    expect(before / after).toBeGreaterThan(2.5)
+  })
+
+  it('matches the uncached projections byte for byte across shapes', () => {
+    const openFileShapes: AppState['openFiles'][] = [
+      [] as unknown as AppState['openFiles'],
+      [makeOpenFile(0)] as unknown as AppState['openFiles'],
+      [makeOpenFile(0, { isDirty: true })] as unknown as AppState['openFiles'],
+      [
+        makeOpenFile(0, { isDirty: true, diffSource: 'working' }),
+        makeOpenFile(1, { mode: 'diff', markdownPreviewSourceFileId: 'file-0' }),
+        makeOpenFile(2, { isUntitled: true, deleteUntouchedOnClose: true, language: undefined })
+      ] as unknown as AppState['openFiles']
+    ]
+    for (const [index, shape] of openFileShapes.entries()) {
+      expect({ index, projection: buildRuntimeMobileOpenFilesProjection(shape) }).toEqual({
+        index,
+        projection: referenceOpenFilesProjection(shape)
+      })
+    }
+
+    const browserShapes: AppState[] = [
+      makeState({}),
+      makeState({ browserTabsByWorktree: { 'wt-1': [makeBrowserWorkspace(0)] } as never }),
+      makeState({
+        browserTabsByWorktree: {
+          'wt-1': [makeBrowserWorkspace(0, { title: undefined, loading: true })],
+          '3': [makeBrowserWorkspace(1)]
+        } as never,
+        browserPagesByWorkspace: {
+          'ws-0': [makeBrowserPage(0), makeBrowserPage(1, { canGoBack: true })],
+          'ws-1': []
+        } as never
+      }),
+      makeState({
+        browserTabsByWorktree: {} as never,
+        browserPagesByWorkspace: { 'ws-9': [makeBrowserPage(9, { url: 'a"b\\c' })] } as never
+      })
+    ]
+    for (const [index, shape] of browserShapes.entries()) {
+      expect({ index, projection: buildRuntimeMobileBrowserProjection(shape) }).toEqual({
+        index,
+        projection: referenceBrowserProjection(shape)
+      })
+    }
+  })
+})
+
+describe('sync key transitions', () => {
+  it('fires on exactly the transitions the uncached projections would have fired on', () => {
+    const drafts = { 'file-0': 'aaa', 'file-1': 'bbb' }
+    const files = [makeOpenFile(0), makeOpenFile(1)] as unknown as AppState['openFiles']
+    const workspaces = [makeBrowserWorkspace(0)] as never
+    const status = {
+      'tab-0:leaf-0': makeAgentStatusEntry({ paneKey: 'tab-0:leaf-0' })
+    } as AppState['agentStatusByPaneKey']
+
+    const base = makeState({
+      editorDrafts: drafts,
+      openFiles: files,
+      browserTabsByWorktree: { 'wt-1': workspaces } as never,
+      browserPagesByWorkspace: { 'ws-0': [makeBrowserPage(0)] } as never,
+      agentStatusByPaneKey: status
+    })
+
+    // Each step returns the next state; the flag is whether a mobile-visible input really moved.
+    const steps: { name: string; next: (from: AppState) => AppState }[] = [
+      { name: 'no-op re-spread', next: (from) => makeState({ ...from }) },
+      {
+        name: 'keystroke in one draft',
+        next: (from) =>
+          makeState({ ...from, editorDrafts: { ...from.editorDrafts, 'file-0': 'aaab' } })
+      },
+      {
+        name: 'draft reverted to the same text',
+        next: (from) =>
+          makeState({ ...from, editorDrafts: { ...from.editorDrafts, 'file-0': 'aaab' } })
+      },
+      {
+        name: 'draft removed',
+        next: (from) => makeState({ ...from, editorDrafts: { 'file-1': 'bbb' } })
+      },
+      {
+        name: 'isDirty flip',
+        next: (from) =>
+          makeState({
+            ...from,
+            openFiles: [makeOpenFile(0, { isDirty: true }), from.openFiles[1]] as never
+          })
+      },
+      {
+        name: 'open-files re-spread with identical content',
+        next: (from) => makeState({ ...from, openFiles: [...from.openFiles] as never })
+      },
+      {
+        name: 'browser title tick',
+        next: (from) =>
+          makeState({
+            ...from,
+            browserTabsByWorktree: {
+              'wt-1': [makeBrowserWorkspace(0, { title: 'new title' })]
+            } as never
+          })
+      },
+      {
+        name: 'browser page loading flip',
+        next: (from) =>
+          makeState({
+            ...from,
+            browserPagesByWorkspace: {
+              'ws-0': [makeBrowserPage(0, { loading: true })]
+            } as never
+          })
+      },
+      {
+        name: 'agent-status ping with an unchanged payload',
+        next: (from) =>
+          makeState({
+            ...from,
+            agentStatusByPaneKey: {
+              'tab-0:leaf-0': makeAgentStatusEntry({ paneKey: 'tab-0:leaf-0' })
+            } as never
+          })
+      },
+      {
+        name: 'agent-status prompt change',
+        next: (from) =>
+          makeState({
+            ...from,
+            agentStatusByPaneKey: {
+              'tab-0:leaf-0': makeAgentStatusEntry({ paneKey: 'tab-0:leaf-0', prompt: 'new' })
+            } as never
+          })
+      },
+      {
+        name: 'second agent added',
+        next: (from) =>
+          makeState({
+            ...from,
+            agentStatusByPaneKey: {
+              ...from.agentStatusByPaneKey,
+              'tab-1:leaf-0': makeAgentStatusEntry({ paneKey: 'tab-1:leaf-0' })
+            } as never
+          })
+      }
+    ]
+
+    const referenceTuple = (state: AppState): string[] => [
+      referenceEditorDraftsProjection(state.editorDrafts),
+      referenceOpenFilesProjection(state.openFiles),
+      referenceBrowserProjection(state),
+      referenceAgentStatusProjection(state.agentStatusByPaneKey ?? {})
+    ]
+
+    resetRuntimeMobileSyncProjectionCachesForTests()
+    resetRuntimeMobileAgentStatusProjectionCacheForTests()
+    let previousState = base
+    let previousKey = getRuntimeMobileSessionSyncKey(base, undefined, undefined, false)
+    let previousReference = referenceTuple(base)
+
+    for (const step of steps) {
+      const state = step.next(previousState)
+      const key = getRuntimeMobileSessionSyncKey(state, previousState, previousKey, false)
+      const reference = referenceTuple(state)
+      const referenceChanged = reference.some((part, index) => part !== previousReference[index])
+      const keyChanged = !runtimeMobileSessionSyncKeysEqual(key, previousKey)
+      expect({ step: step.name, changed: keyChanged }).toEqual({
+        step: step.name,
+        changed: referenceChanged
+      })
+      previousState = state
+      previousKey = key
+      previousReference = reference
+    }
+  })
+})
diff --git a/src/renderer/src/runtime/sync-runtime-graph.ts b/src/renderer/src/runtime/sync-runtime-graph.ts
index dd1bdb58d5f..b836a037134 100644
--- a/src/renderer/src/runtime/sync-runtime-graph.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph.ts
@@ -21,6 +21,7 @@ import {
   runtimeMobileSessionSyncKeysEqual
 } from './sync-runtime-graph/sync-key'
 import { buildMobileSessionTabSnapshots } from './sync-runtime-graph/mobile-session-snapshots'
+import { resetRuntimeMobileSyncProjectionCachesForTests } from './sync-runtime-graph/sync-projections'
 import type { RegisteredTerminalTab } from './sync-runtime-graph/types'
 
 export type { RegisteredTerminalTab, RuntimeMobileSessionSyncKey } from './sync-runtime-graph/types'
@@ -28,6 +29,7 @@ export {
   AGENT_STATUS_SYNC_UPDATED_AT_BUCKET_MS_FOR_TESTS,
   buildRuntimeMobileAgentStatusProjectionForTests,
   resetRuntimeMobileAgentStatusProjectionCacheForTests,
+  resetRuntimeMobileSyncProjectionCachesForTests,
   canSkipRuntimeMobileSessionSyncKeyBuild,
   getRuntimeMobileSessionSyncKey,
   runtimeMobileSessionSyncKeysEqual,
diff --git a/src/renderer/src/runtime/sync-runtime-graph/agent-status-projection.ts b/src/renderer/src/runtime/sync-runtime-graph/agent-status-projection.ts
index f11e58a388f..5e14bd4a8ae 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/agent-status-projection.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/agent-status-projection.ts
@@ -43,8 +43,11 @@ export function buildRuntimeMobileAgentStatusProjection(
   // A status ping replaces one entry and re-spreads the map; reuse every other entry.
   const entries = new Map<string, AgentStatusProjectionCacheEntry>()
   const parts: string[] = []
+  // Code-unit order, not `localeCompare`: this projection is only ever compared with `===`, so it
+  // must be deterministic, not locale-correct — and an ICU collator per comparison is ~4.5k calls
+  // per ping at the 500-entry cap.
   for (const [paneKey, entry] of Object.entries(agentStatusByPaneKey).sort(([a], [b]) =>
-    a.localeCompare(b)
+    a < b ? -1 : a > b ? 1 : 0
   )) {
     const previous = cached?.entries.get(paneKey)
     const entryCache =
diff --git a/src/renderer/src/runtime/sync-runtime-graph/editor-draft-hash.ts b/src/renderer/src/runtime/sync-runtime-graph/editor-draft-hash.ts
new file mode 100644
index 00000000000..a38ebcf9f35
--- /dev/null
+++ b/src/renderer/src/runtime/sync-runtime-graph/editor-draft-hash.ts
@@ -0,0 +1,15 @@
+/**
+ * FNV-1a stamp for one editor draft's text.
+ *
+ * Why its own module: it is the single hash shared by the mobile sync key and the mobile session
+ * snapshot, and its cost is proportional to the draft's length — so callers must memoize it per
+ * file rather than re-running it whenever the drafts record is re-spread.
+ */
+export function stableHashString(value: string): string {
+  let hash = 2166136261
+  for (let i = 0; i < value.length; i += 1) {
+    hash ^= value.charCodeAt(i)
+    hash = Math.imul(hash, 16777619)
+  }
+  return `draft:${value.length}:${(hash >>> 0).toString(16)}`
+}
diff --git a/src/renderer/src/runtime/sync-runtime-graph/graph-state.ts b/src/renderer/src/runtime/sync-runtime-graph/graph-state.ts
index 8aa0d87064a..4869479bfaa 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/graph-state.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/graph-state.ts
@@ -7,8 +7,12 @@ import type {
 } from '../../../../shared/runtime-types'
 import type {
   AgentStatusProjectionCache,
+  BrowserPagesProjectionCache,
+  BrowserWorkspacesProjectionCache,
+  EditorDraftHashCache,
   MobileSessionWorktreeInputs,
   OpenFileIndexes,
+  OpenFilesProjectionCache,
   RegisteredTerminalTab,
   TabsProjectionCache
 } from './types'
@@ -54,10 +58,12 @@ export const graphState = {
   publishedMobileSessionSnapshotByWorktree: new Map<string, RuntimeMobileSessionTabsSnapshot>(),
   cachedTabsProjection: null as TabsProjectionCache | null,
   cachedAgentStatusProjection: null as AgentStatusProjectionCache | null,
+  cachedOpenFilesProjection: null as OpenFilesProjectionCache | null,
+  cachedBrowserWorkspacesProjection: null as BrowserWorkspacesProjectionCache | null,
+  cachedBrowserPagesProjection: null as BrowserPagesProjectionCache | null,
   cachedOpenFileIndexesSource: null as AppState['openFiles'] | null,
   cachedOpenFileIndexes: null as OpenFileIndexes | null,
-  cachedEditorDraftsSource: null as AppState['editorDrafts'] | null,
-  cachedEditorDraftVersionByFileId: null as Map<string, string> | null,
+  cachedEditorDraftHashes: null as EditorDraftHashCache | null,
   cachedMobileTerminalThemeSettings: null as AppState['settings'] | null,
   cachedMobileTerminalThemeSystemPrefersDark: null as boolean | null,
   cachedMobileTerminalTheme: undefined as RuntimeMobileTerminalTheme | undefined,
diff --git a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-inputs.ts b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-inputs.ts
index 0d6157fe75d..d692a5b83d3 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-inputs.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-inputs.ts
@@ -51,29 +51,6 @@ export function getOpenFileIndexes(openFiles: AppState['openFiles']): OpenFileIn
   return graphState.cachedOpenFileIndexes
 }
 
-export function getEditorDraftVersionByFileId(
-  editorDrafts: AppState['editorDrafts']
-): Map<string, string> {
-  if (
-    graphState.cachedEditorDraftsSource === editorDrafts &&
-    graphState.cachedEditorDraftVersionByFileId
-  ) {
-    return graphState.cachedEditorDraftVersionByFileId
-  }
-  const versions = new Map<string, string>()
-  for (const [fileId, content] of Object.entries(editorDrafts)) {
-    let hash = 2166136261
-    for (let index = 0; index < content.length; index += 1) {
-      hash ^= content.charCodeAt(index)
-      hash = Math.imul(hash, 16777619)
-    }
-    versions.set(fileId, `draft:${content.length}:${(hash >>> 0).toString(16)}`)
-  }
-  graphState.cachedEditorDraftsSource = editorDrafts
-  graphState.cachedEditorDraftVersionByFileId = versions
-  return versions
-}
-
 export function buildMobileSessionAgentStatusByWorktree(
   agentStatusByPaneKey: AppState['agentStatusByPaneKey'],
   tabsByWorktree: AppState['tabsByWorktree']
diff --git a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-snapshots.ts b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-snapshots.ts
index f6ba7f49cfb..7dc106a6cd4 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/mobile-session-snapshots.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/mobile-session-snapshots.ts
@@ -14,9 +14,9 @@ import {
 import {
   buildMobileSessionAgentStatusByWorktree,
   buildMobileSessionWorktreeInputs,
-  getEditorDraftVersionByFileId,
   getOpenFileIndexes
 } from './mobile-session-inputs'
+import { getEditorDraftVersionByFileId } from './sync-projections'
 import { getMobileTerminalTheme } from './mobile-terminal-theme'
 import {
   isMobilePublishableBrowserWorkspace,
diff --git a/src/renderer/src/runtime/sync-runtime-graph/sync-projections.ts b/src/renderer/src/runtime/sync-runtime-graph/sync-projections.ts
index 0627bccee06..44a1606b056 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/sync-projections.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/sync-projections.ts
@@ -1,11 +1,19 @@
 import type { AppState } from '@/store/types'
 import { resolveTerminalTabTitle } from '../../../../shared/tab-title-resolution'
+import { stableHashString } from './editor-draft-hash'
 import type { TerminalTab } from '../../../../shared/terminal-tab-types'
 import {
   EMPTY_BROWSER_PAGES_BY_WORKSPACE,
   EMPTY_BROWSER_TABS_BY_WORKTREE,
   graphState
 } from './graph-state'
+import type {
+  BrowserPagesProjectionCacheEntry,
+  BrowserWorkspacesProjectionCacheEntry,
+  EditorDraftHashCache,
+  EditorDraftHashCacheEntry,
+  OpenFilesProjectionCacheEntry
+} from './types'
 
 export function getBrowserTabsByWorktree(state: AppState): AppState['browserTabsByWorktree'] {
   // Some callers/tests build partial pre-browser states; treat missing slices as empty.
@@ -76,72 +84,192 @@ export function buildRuntimeMobileTabsProjection(
 }
 
 export function buildRuntimeMobileOpenFilesProjection(openFiles: AppState['openFiles']): string {
-  return JSON.stringify(
-    openFiles.map((file) => ({
-      id: file.id,
-      filePath: file.filePath,
-      relativePath: file.relativePath,
-      worktreeId: file.worktreeId,
-      language: file.language,
-      mode: file.mode,
-      diffSource: file.diffSource,
-      isDirty: file.isDirty,
-      isUntitled: file.isUntitled,
-      deleteUntouchedOnClose: file.deleteUntouchedOnClose,
-      markdownPreviewSourceFileId: file.markdownPreviewSourceFileId
-    }))
-  )
+  const cached = graphState.cachedOpenFilesProjection
+  if (cached?.source === openFiles) {
+    return cached.projection
+  }
+
+  // An isDirty flip replaces one file and re-spreads the array; reuse every other file.
+  const previousEntries = cached?.entries
+  const entries = new Map<string, OpenFilesProjectionCacheEntry>()
+  const parts: string[] = []
+  for (const file of openFiles) {
+    const previous = previousEntries?.get(file.id)
+    const entry =
+      previous?.file === file
+        ? previous
+        : {
+            file,
+            projection: JSON.stringify({
+              id: file.id,
+              filePath: file.filePath,
+              relativePath: file.relativePath,
+              worktreeId: file.worktreeId,
+              language: file.language,
+              mode: file.mode,
+              diffSource: file.diffSource,
+              isDirty: file.isDirty,
+              isUntitled: file.isUntitled,
+              deleteUntouchedOnClose: file.deleteUntouchedOnClose,
+              markdownPreviewSourceFileId: file.markdownPreviewSourceFileId
+            })
+          }
+    entries.set(file.id, entry)
+    parts.push(entry.projection)
+  }
+  const projection = `[${parts.join(',')}]`
+  graphState.cachedOpenFilesProjection = { source: openFiles, entries, projection }
+  return projection
+}
+
+function buildBrowserWorkspacesProjection(
+  browserTabsByWorktree: AppState['browserTabsByWorktree']
+): string {
+  const cached = graphState.cachedBrowserWorkspacesProjection
+  if (cached?.source === browserTabsByWorktree) {
+    return cached.projection
+  }
+
+  const previousEntries = cached?.entries
+  const entries = new Map<string, BrowserWorkspacesProjectionCacheEntry>()
+  const parts: string[] = []
+  for (const [worktreeId, workspaces] of Object.entries(browserTabsByWorktree)) {
+    const previous = previousEntries?.get(worktreeId)
+    const entry =
+      previous?.workspaces === workspaces
+        ? previous
+        : {
+            workspaces,
+            keyJson: previous?.keyJson ?? JSON.stringify(worktreeId),
+            projection: JSON.stringify(
+              workspaces.map((workspace) => ({
+                id: workspace.id,
+                activePageId: workspace.activePageId,
+                title: workspace.title,
+                url: workspace.url,
+                loading: workspace.loading,
+                canGoBack: workspace.canGoBack,
+                canGoForward: workspace.canGoForward
+              }))
+            )
+          }
+    entries.set(worktreeId, entry)
+    parts.push(`${entry.keyJson}:${entry.projection}`)
+  }
+  const projection = `{${parts.join(',')}}`
+  graphState.cachedBrowserWorkspacesProjection = {
+    source: browserTabsByWorktree,
+    entries,
+    projection
+  }
+  return projection
+}
+
+function buildBrowserPagesProjection(
+  browserPagesByWorkspace: AppState['browserPagesByWorkspace']
+): string {
+  const cached = graphState.cachedBrowserPagesProjection
+  if (cached?.source === browserPagesByWorkspace) {
+    return cached.projection
+  }
+
+  const previousEntries = cached?.entries
+  const entries = new Map<string, BrowserPagesProjectionCacheEntry>()
+  const parts: string[] = []
+  for (const [workspaceId, pages] of Object.entries(browserPagesByWorkspace)) {
+    const previous = previousEntries?.get(workspaceId)
+    const entry =
+      previous?.pages === pages
+        ? previous
+        : {
+            pages,
+            keyJson: previous?.keyJson ?? JSON.stringify(workspaceId),
+            projection: JSON.stringify(
+              pages.map((page) => ({
+                id: page.id,
+                title: page.title,
+                url: page.url,
+                loading: page.loading,
+                canGoBack: page.canGoBack,
+                canGoForward: page.canGoForward
+              }))
+            )
+          }
+    entries.set(workspaceId, entry)
+    parts.push(`${entry.keyJson}:${entry.projection}`)
+  }
+  const projection = `{${parts.join(',')}}`
+  graphState.cachedBrowserPagesProjection = {
+    source: browserPagesByWorkspace,
+    entries,
+    projection
+  }
+  return projection
 }
 
 export function buildRuntimeMobileBrowserProjection(state: AppState): string {
-  const browserTabsByWorktree = getBrowserTabsByWorktree(state)
-  const browserPagesByWorkspace = getBrowserPagesByWorkspace(state)
-  return JSON.stringify({
-    workspacesByWorktree: Object.fromEntries(
-      Object.entries(browserTabsByWorktree).map(([worktreeId, workspaces]) => [
-        worktreeId,
-        workspaces.map((workspace) => ({
-          id: workspace.id,
-          activePageId: workspace.activePageId,
-          title: workspace.title,
-          url: workspace.url,
-          loading: workspace.loading,
-          canGoBack: workspace.canGoBack,
-          canGoForward: workspace.canGoForward
-        }))
-      ])
-    ),
-    pagesByWorkspace: Object.fromEntries(
-      Object.entries(browserPagesByWorkspace).map(([workspaceId, pages]) => [
-        workspaceId,
-        pages.map((page) => ({
-          id: page.id,
-          title: page.title,
-          url: page.url,
-          loading: page.loading,
-          canGoBack: page.canGoBack,
-          canGoForward: page.canGoForward
-        }))
-      ])
-    )
-  })
+  // A title/url/loading tick replaces one worktree or workspace bucket; reuse the rest.
+  return `{"workspacesByWorktree":${buildBrowserWorkspacesProjection(
+    getBrowserTabsByWorktree(state)
+  )},"pagesByWorkspace":${buildBrowserPagesProjection(getBrowserPagesByWorkspace(state))}}`
+}
+
+/**
+ * Why memoized per file id: `setEditorDraft` fires on every Monaco keystroke and re-spreads
+ * `editorDrafts`, so an unmemoized rebuild re-hashed every open dirty file's full text on the
+ * input path. Only the typed file's draft string changes identity, so only it needs rehashing.
+ */
+function getEditorDraftHashCache(editorDrafts: AppState['editorDrafts']): EditorDraftHashCache {
+  const cached = graphState.cachedEditorDraftHashes
+  if (cached?.source === editorDrafts) {
+    return cached
+  }
+
+  const previousEntries = cached?.entries
+  const entries = new Map<string, EditorDraftHashCacheEntry>()
+  const hashByFileId = new Map<string, string>()
+  const parts: string[] = []
+  for (const [fileId, content] of Object.entries(editorDrafts)) {
+    const previous = previousEntries?.get(fileId)
+    let entry: EditorDraftHashCacheEntry
+    if (previous?.content === content) {
+      entry = previous
+    } else {
+      const fileIdJson = previous?.fileIdJson ?? JSON.stringify(fileId)
+      const hash = stableHashString(content)
+      entry = { content, hash, fileIdJson, projection: `${fileIdJson}:${JSON.stringify(hash)}` }
+    }
+    entries.set(fileId, entry)
+    hashByFileId.set(fileId, entry.hash)
+    parts.push(entry.projection)
+  }
+  const next: EditorDraftHashCache = {
+    source: editorDrafts,
+    entries,
+    hashByFileId,
+    projection: `{${parts.join(',')}}`
+  }
+  graphState.cachedEditorDraftHashes = next
+  return next
 }
 
 export function buildRuntimeMobileEditorDraftsProjection(
   editorDrafts: AppState['editorDrafts']
 ): string {
-  return JSON.stringify(
-    Object.fromEntries(
-      Object.entries(editorDrafts).map(([fileId, content]) => [fileId, stableHashString(content)])
-    )
-  )
+  return getEditorDraftHashCache(editorDrafts).projection
 }
 
-export function stableHashString(value: string): string {
-  let hash = 2166136261
-  for (let i = 0; i < value.length; i += 1) {
-    hash ^= value.charCodeAt(i)
-    hash = Math.imul(hash, 16777619)
-  }
-  return `draft:${value.length}:${(hash >>> 0).toString(16)}`
+/** Per-file draft version stamps for the mobile session snapshot; shares the keystroke memo. */
+export function getEditorDraftVersionByFileId(
+  editorDrafts: AppState['editorDrafts']
+): ReadonlyMap<string, string> {
+  return getEditorDraftHashCache(editorDrafts).hashByFileId
+}
+
+export function resetRuntimeMobileSyncProjectionCachesForTests(): void {
+  graphState.cachedTabsProjection = null
+  graphState.cachedOpenFilesProjection = null
+  graphState.cachedBrowserWorkspacesProjection = null
+  graphState.cachedBrowserPagesProjection = null
+  graphState.cachedEditorDraftHashes = null
 }
diff --git a/src/renderer/src/runtime/sync-runtime-graph/types.ts b/src/renderer/src/runtime/sync-runtime-graph/types.ts
index b51b8cd8afa..448a3652a5d 100644
--- a/src/renderer/src/runtime/sync-runtime-graph/types.ts
+++ b/src/renderer/src/runtime/sync-runtime-graph/types.ts
@@ -60,6 +60,48 @@ export type TabsProjectionCache = {
   entries: Map<string, TabsProjectionCacheEntry>
   projection: string
 }
+export type OpenFilesProjectionCacheEntry = {
+  file: AppState['openFiles'][number]
+  projection: string
+}
+export type OpenFilesProjectionCache = {
+  source: AppState['openFiles']
+  entries: Map<string, OpenFilesProjectionCacheEntry>
+  projection: string
+}
+export type BrowserWorkspacesProjectionCacheEntry = {
+  workspaces: NonNullable<AppState['browserTabsByWorktree'][string]>
+  keyJson: string
+  projection: string
+}
+export type BrowserWorkspacesProjectionCache = {
+  source: AppState['browserTabsByWorktree']
+  entries: Map<string, BrowserWorkspacesProjectionCacheEntry>
+  projection: string
+}
+export type BrowserPagesProjectionCacheEntry = {
+  pages: NonNullable<AppState['browserPagesByWorkspace'][string]>
+  keyJson: string
+  projection: string
+}
+export type BrowserPagesProjectionCache = {
+  source: AppState['browserPagesByWorkspace']
+  entries: Map<string, BrowserPagesProjectionCacheEntry>
+  projection: string
+}
+/** One dirty file's FNV draft stamp plus its pre-serialized projection fragment. */
+export type EditorDraftHashCacheEntry = {
+  content: string
+  hash: string
+  fileIdJson: string
+  projection: string
+}
+export type EditorDraftHashCache = {
+  source: AppState['editorDrafts']
+  entries: Map<string, EditorDraftHashCacheEntry>
+  hashByFileId: Map<string, string>
+  projection: string
+}
 export type AgentStatusProjectionCacheEntry = {
   entry: AppState['agentStatusByPaneKey'][string]
   projection: string

From 21a706a9323a9b527b1e5bdff52262df2226548f Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:04:06 -0700
Subject: [PATCH 61/92] perf(terminal): stop shipping every agent spinner title
 frame to the renderer (#18155)

Main re-asserts a working OSC title per pane every 80ms (12.5/sec) while an
agent works, and every frame became its own pty:sideEffect IPC message. Both
renderer store writes already discard those frames via
isDecorativeAgentTitleFrameChange, and paired remote clients already never see
them (RuntimeClientEventBus's per-listener title gate). Only the local desktop
renderer was still paying for them.

Apply the same decorative gate main already computes for the mobile fan-out one
hop earlier, keeping a 500ms heartbeat so the renderer's 1500ms hook-done quiet
window still sees a working title and can cancel a Pi/OMP milestone 'done'.
---
 .../decorative-title-fact-emission.test.ts    |  49 ++++++++
 .../runtime/decorative-title-fact-emission.ts |  38 ++++++
 ...e-get-unpersisted-tracked-title-for-pty.ts |  34 ++++--
 .../decorative-title-fact-throttle.spec.ts    | 110 ++++++++++++++++++
 .../terminal-side-effect-facts.spec.ts        | 102 +++++++++-------
 src/main/runtime/orca-runtime.test.ts         |   1 +
 .../runtime/runtime-terminal-state-records.ts |   2 +
 7 files changed, 284 insertions(+), 52 deletions(-)
 create mode 100644 src/main/runtime/decorative-title-fact-emission.test.ts
 create mode 100644 src/main/runtime/decorative-title-fact-emission.ts
 create mode 100644 src/main/runtime/orca-runtime-tests/decorative-title-fact-throttle.spec.ts

diff --git a/src/main/runtime/decorative-title-fact-emission.test.ts b/src/main/runtime/decorative-title-fact-emission.test.ts
new file mode 100644
index 00000000000..609f2e06084
--- /dev/null
+++ b/src/main/runtime/decorative-title-fact-emission.test.ts
@@ -0,0 +1,49 @@
+import { describe, expect, it } from 'vitest'
+import {
+  DECORATIVE_TITLE_FACT_HEARTBEAT_MS,
+  shouldEmitTitleFactForFrame
+} from './decorative-title-fact-emission'
+
+const base = {
+  decorativeOnly: true,
+  staleWorkingTitleClear: false,
+  lastEmittedAtMs: 1_000,
+  nowMs: 1_000
+}
+
+describe('shouldEmitTitleFactForFrame', () => {
+  it('always emits a frame that is not a decorative repeat', () => {
+    expect(shouldEmitTitleFactForFrame({ ...base, decorativeOnly: false })).toBe(true)
+  })
+
+  it('emits the first frame of a pane', () => {
+    expect(shouldEmitTitleFactForFrame({ ...base, lastEmittedAtMs: null })).toBe(true)
+  })
+
+  it('suppresses a decorative repeat inside the heartbeat window', () => {
+    expect(
+      shouldEmitTitleFactForFrame({ ...base, nowMs: 1_000 + DECORATIVE_TITLE_FACT_HEARTBEAT_MS - 1 })
+    ).toBe(false)
+  })
+
+  it('lets a decorative repeat through once the heartbeat window elapses', () => {
+    expect(
+      shouldEmitTitleFactForFrame({ ...base, nowMs: 1_000 + DECORATIVE_TITLE_FACT_HEARTBEAT_MS })
+    ).toBe(true)
+  })
+
+  it('never throttles a timer-synthesized stale-working clear', () => {
+    // Why: it carries a staleWorkingTitleClear flag no earlier repeat can stand in for.
+    expect(shouldEmitTitleFactForFrame({ ...base, staleWorkingTitleClear: true })).toBe(true)
+  })
+
+  it('emits after a backwards clock step instead of parking until it catches up', () => {
+    expect(shouldEmitTitleFactForFrame({ ...base, nowMs: 900 })).toBe(true)
+  })
+
+  it('keeps at least three frames inside the renderer hook-done quiet window', () => {
+    // Why: observeTitle's arriving working title is what cancels a Pi/OMP milestone `done`
+    // scheduled with HOOK_DONE_QUIET_MS = 1500. Losing that would mint a false completion.
+    expect(DECORATIVE_TITLE_FACT_HEARTBEAT_MS * 3).toBeLessThanOrEqual(1_500)
+  })
+})
diff --git a/src/main/runtime/decorative-title-fact-emission.ts b/src/main/runtime/decorative-title-fact-emission.ts
new file mode 100644
index 00000000000..d8248dc12c5
--- /dev/null
+++ b/src/main/runtime/decorative-title-fact-emission.ts
@@ -0,0 +1,38 @@
+/**
+ * Why: an agent spinner re-emits a semantically identical OSC title ~12.5x/sec (Orca's own
+ * synthetic frame timer, Pi/OMP, Claude Code, Grok), and main ships every frame to the renderer
+ * as its own `pty:sideEffect` message. Both renderer store writes already discard those frames
+ * via `isDecorativeAgentTitleFrameChange`, so the message is pure cross-process cost.
+ *
+ * Why a heartbeat and not a hard drop: `agentCompletionCoordinator.observeTitle` treats an
+ * arriving *working* title as "still working" and cancels a scheduled hook-`done` completion
+ * inside `HOOK_DONE_QUIET_MS` (1500ms). That is exactly how a Pi/OMP milestone `done` emitted
+ * mid-turn is stopped from minting a completion notification, and the frames that carry it are
+ * decorative repeats. 500ms keeps 3 frames inside that window.
+ */
+export const DECORATIVE_TITLE_FACT_HEARTBEAT_MS = 500
+
+export type DecorativeTitleFactEmissionInput = {
+  /** The frame's decorative gate key matches the previous frame's. */
+  decorativeOnly: boolean
+  /** Timer-synthesized stale-working clear — carries a flag no repeat can stand in for. */
+  staleWorkingTitleClear: boolean
+  lastEmittedAtMs: number | null
+  nowMs: number
+}
+
+export function shouldEmitTitleFactForFrame({
+  decorativeOnly,
+  staleWorkingTitleClear,
+  lastEmittedAtMs,
+  nowMs
+}: DecorativeTitleFactEmissionInput): boolean {
+  if (!decorativeOnly || staleWorkingTitleClear) {
+    return true
+  }
+  if (lastEmittedAtMs === null) {
+    return true
+  }
+  // A backwards clock step must not park the heartbeat until it catches up.
+  return nowMs < lastEmittedAtMs || nowMs - lastEmittedAtMs >= DECORATIVE_TITLE_FACT_HEARTBEAT_MS
+}
diff --git a/src/main/runtime/orca-runtime-get-unpersisted-tracked-title-for-pty.ts b/src/main/runtime/orca-runtime-get-unpersisted-tracked-title-for-pty.ts
index 38bae372176..3ece144bc24 100644
--- a/src/main/runtime/orca-runtime-get-unpersisted-tracked-title-for-pty.ts
+++ b/src/main/runtime/orca-runtime-get-unpersisted-tracked-title-for-pty.ts
@@ -1,6 +1,7 @@
 // @ts-nocheck -- mechanically split from OrcaRuntimeService; behavior is covered by AST equivalence and characterization tests.
 import { OrcaRuntimeWithEmitDaemonPtyTransientFact } from './orca-runtime-emit-daemon-pty-transient-fact'
 import { getDecorativeAgentTitleSignature } from '../../shared/agent-decorative-title-signature'
+import { shouldEmitTitleFactForFrame } from './decorative-title-fact-emission'
 import type { RuntimePtyTitleTrackerEntry } from './runtime-terminal-state-records'
 import { createTerminalTitleTracker } from '../../shared/terminal-output-side-effects'
 import { detectAgentStatusFromTitle } from '../../shared/agent-detection'
@@ -64,20 +65,36 @@ export class OrcaRuntimeWithGetUnpersistedTrackedTitleForPty extends OrcaRuntime
     const tracker = createTerminalTitleTracker(
       {
         onTitle: (normalizedTitle, rawTitle, meta) => {
-          this.recordTerminalSideEffectFact(ptyId, {
-            kind: 'title',
-            normalizedTitle,
-            rawTitle,
-            ...(meta?.staleWorkingTitleClear ? { staleWorkingTitleClear: true } : {})
-          })
-          const changed = this.applyTrackedPtyTitle(ptyId, rawTitle, normalizedTitle, meta)
-          const identityOnlyTitle = this.isLiveCursorNativeTitle(rawTitle, meta)
           const live = this.ptyTitleTrackersByPtyId.get(ptyId)
           const gateKey = this.makeDecorativeTitleGateKey(rawTitle, normalizedTitle)
           const decorativeOnly = live?.lastMobileTitleGateKey === gateKey
           if (live) {
             live.lastMobileTitleGateKey = gateKey
           }
+          // Why: the same gate the mobile fan-out below already uses, applied one hop earlier —
+          // a spinner frame the renderer store discards should not cost a pty:sideEffect message
+          // at all. See decorative-title-fact-emission.ts for why repeats still heartbeat.
+          const nowMs = Date.now()
+          if (
+            shouldEmitTitleFactForFrame({
+              decorativeOnly,
+              staleWorkingTitleClear: meta?.staleWorkingTitleClear === true,
+              lastEmittedAtMs: live?.lastTitleFactAtMs ?? null,
+              nowMs
+            })
+          ) {
+            if (live) {
+              live.lastTitleFactAtMs = nowMs
+            }
+            this.recordTerminalSideEffectFact(ptyId, {
+              kind: 'title',
+              normalizedTitle,
+              rawTitle,
+              ...(meta?.staleWorkingTitleClear ? { staleWorkingTitleClear: true } : {})
+            })
+          }
+          const changed = this.applyTrackedPtyTitle(ptyId, rawTitle, normalizedTitle, meta)
+          const identityOnlyTitle = this.isLiveCursorNativeTitle(rawTitle, meta)
           const tracksReplicatedStatus =
             live?.applyingChunk === true && this.mobileSessionTabListeners.size > 0
           const titleStatus = tracksReplicatedStatus ? detectAgentStatusFromTitle(rawTitle) : null
@@ -151,6 +168,7 @@ export class OrcaRuntimeWithGetUnpersistedTrackedTitleForPty extends OrcaRuntime
       tracker,
       applyingChunk: false,
       lastMobileTitleGateKey: null,
+      lastTitleFactAtMs: null,
       chunkTouchedSessionTabs: false,
       pendingFacts: [],
       // Why: command-code facts exist only for the pty:sideEffect channel —
diff --git a/src/main/runtime/orca-runtime-tests/decorative-title-fact-throttle.spec.ts b/src/main/runtime/orca-runtime-tests/decorative-title-fact-throttle.spec.ts
new file mode 100644
index 00000000000..a2e35baa4aa
--- /dev/null
+++ b/src/main/runtime/orca-runtime-tests/decorative-title-fact-throttle.spec.ts
@@ -0,0 +1,110 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { TerminalSideEffectBatch } from '../../../shared/terminal-side-effect-facts'
+import { syncSinglePty } from '../orca-runtime-test-fixtures.spec'
+import { createSideEffectRuntime } from '../orca-runtime-test-scenario-builders.spec'
+import { DECORATIVE_TITLE_FACT_HEARTBEAT_MS } from '../decorative-title-fact-emission'
+
+// Orca's own synthetic agent spinner: one frame per pane every 80ms while an agent works.
+const SPINNER_FRAMES = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏']
+const SPINNER_INTERVAL_MS = 80
+const EPOCH = 1_700_000_000_000
+
+type TitleFact = { kind: 'title'; normalizedTitle: string; rawTitle: string }
+
+function titleFacts(batches: TerminalSideEffectBatch[]): TitleFact[] {
+  return batches.flatMap((batch) =>
+    batch.facts.filter((fact): fact is TitleFact => fact.kind === 'title')
+  )
+}
+
+describe('decorative title fact throttle', () => {
+  beforeEach(() => {
+    vi.useFakeTimers({ toFake: ['Date'] })
+    vi.setSystemTime(new Date(EPOCH))
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+  })
+
+  it('collapses spinner ticks with an unchanged underlying title to the heartbeat rate', () => {
+    const { runtime, batches } = createSideEffectRuntime()
+    syncSinglePty(runtime)
+
+    const ticks = 125 // 10s of Orca's 80ms synthetic spinner timer
+    for (let tick = 0; tick < ticks; tick += 1) {
+      vi.setSystemTime(new Date(EPOCH + tick * SPINNER_INTERVAL_MS))
+      runtime.ingestSyntheticTitleFrame(
+        'pty-1',
+        `\x1b]0;${SPINNER_FRAMES[tick % SPINNER_FRAMES.length]} Claude Code\x07`
+      )
+    }
+
+    const facts = titleFacts(batches)
+    // Every frame carried the same underlying title, so the renderer learns nothing new past
+    // the heartbeat: 125 pty:sideEffect messages collapse to one per heartbeat window.
+    const elapsedMs = ticks * SPINNER_INTERVAL_MS
+    expect(facts.length).toBeLessThanOrEqual(
+      Math.ceil(elapsedMs / DECORATIVE_TITLE_FACT_HEARTBEAT_MS)
+    )
+    expect(facts.length).toBeLessThan(ticks / 5)
+    // The heartbeat must not thin out below what the renderer's 1500ms hook-done quiet window
+    // needs to cancel a milestone `done` — three working frames per window.
+    expect(facts.length).toBeGreaterThanOrEqual(Math.floor(elapsedMs / 1_500) * 3)
+    for (const fact of facts) {
+      expect(fact.normalizedTitle.endsWith('Claude Code')).toBe(true)
+    }
+  })
+
+  it('propagates a real title change on the tick it arrives, mid-heartbeat', () => {
+    const { runtime, batches } = createSideEffectRuntime()
+    syncSinglePty(runtime)
+
+    runtime.ingestSyntheticTitleFrame('pty-1', '\x1b]0;⠋ Claude Code\x07')
+    // Two more decorative ticks — still well inside the heartbeat window, so they are dropped.
+    vi.setSystemTime(new Date(EPOCH + SPINNER_INTERVAL_MS))
+    runtime.ingestSyntheticTitleFrame('pty-1', '\x1b]0;⠙ Claude Code\x07')
+    vi.setSystemTime(new Date(EPOCH + 2 * SPINNER_INTERVAL_MS))
+    runtime.ingestSyntheticTitleFrame('pty-1', '\x1b]0;⠹ Claude Code\x07')
+    expect(titleFacts(batches)).toHaveLength(1)
+
+    const beforeChange = batches.length
+    vi.setSystemTime(new Date(EPOCH + 3 * SPINNER_INTERVAL_MS))
+    runtime.ingestSyntheticTitleFrame('pty-1', '\x1b]0;✳ Claude Code\x07')
+
+    expect(batches.length).toBeGreaterThan(beforeChange)
+    expect(titleFacts(batches.slice(beforeChange))).toEqual([
+      { kind: 'title', normalizedTitle: '✳ Claude Code', rawTitle: '✳ Claude Code' }
+    ])
+  })
+
+  it('propagates a changed working label immediately even while the spinner rotates', () => {
+    // Why: only the spinner glyph is decoration. Grok/Pi-style label churn is real content.
+    const { runtime, batches } = createSideEffectRuntime()
+    syncSinglePty(runtime)
+
+    runtime.ingestSyntheticTitleFrame('pty-1', '\x1b]0;⠋ Claude Code\x07')
+    vi.setSystemTime(new Date(EPOCH + SPINNER_INTERVAL_MS))
+    runtime.ingestSyntheticTitleFrame('pty-1', '\x1b]0;⠙ Reviewing diff — Claude Code\x07')
+
+    expect(titleFacts(batches).map((fact) => fact.rawTitle)).toEqual([
+      '⠋ Claude Code',
+      '⠙ Reviewing diff — Claude Code'
+    ])
+  })
+
+  it('keeps main-side tracked title state current for every suppressed frame', () => {
+    // Why: mobile/remote snapshots read the tracked record, not the fact stream — suppressing
+    // the fact must not freeze what a phone or a paired client is shown.
+    const { runtime } = createSideEffectRuntime()
+    syncSinglePty(runtime)
+
+    runtime.ingestSyntheticTitleFrame('pty-1', '\x1b]0;⠋ Claude Code\x07')
+    vi.setSystemTime(new Date(EPOCH + SPINNER_INTERVAL_MS))
+    runtime.ingestSyntheticTitleFrame('pty-1', '\x1b]0;⠙ Claude Code\x07')
+
+    expect(runtime.getTerminalSideEffectSnapshot('pty-1')?.facts).toEqual([
+      { kind: 'title', normalizedTitle: '⠙ Claude Code', rawTitle: '⠙ Claude Code' }
+    ])
+  })
+})
diff --git a/src/main/runtime/orca-runtime-tests/terminal-side-effect-facts.spec.ts b/src/main/runtime/orca-runtime-tests/terminal-side-effect-facts.spec.ts
index fb07f8a3d0e..79feca3268c 100644
--- a/src/main/runtime/orca-runtime-tests/terminal-side-effect-facts.spec.ts
+++ b/src/main/runtime/orca-runtime-tests/terminal-side-effect-facts.spec.ts
@@ -8,6 +8,7 @@ import {
   syncSinglePty
 } from '../orca-runtime-test-fixtures.spec'
 import { createSideEffectRuntime } from '../orca-runtime-test-scenario-builders.spec'
+import { DECORATIVE_TITLE_FACT_HEARTBEAT_MS } from '../decorative-title-fact-emission'
 
 describe('terminal side-effect fact channel', () => {
   it('defers desktop-only output scanners until a headless runtime is promoted', () => {
@@ -70,53 +71,66 @@ describe('terminal side-effect fact channel', () => {
     expect(events).toHaveLength(1)
   })
 
-  it('bounds decorative title delivery per paired client without reducing local frames', () => {
-    const { runtime, batches } = createSideEffectRuntime()
-    const firstClientEvents: RuntimeClientEvent[] = []
-    runtime.attachWindow(1)
-    runtime.syncWindowGraph(1, { tabs: [], leaves: [] })
-    runtime.onClientEvent((event) => firstClientEvents.push(event))
+  it('bounds decorative title delivery per paired client below the local heartbeat', () => {
+    // Why the clock steps: main throttles decorative repeats on the local fact stream, so each
+    // round must clear that heartbeat for the per-client gate to be what collapses them here.
+    vi.useFakeTimers({ toFake: ['Date'] })
+    try {
+      const { runtime, batches } = createSideEffectRuntime()
+      const firstClientEvents: RuntimeClientEvent[] = []
+      runtime.attachWindow(1)
+      runtime.syncWindowGraph(1, { tabs: [], leaves: [] })
+      runtime.onClientEvent((event) => firstClientEvents.push(event))
 
-    const ptyIds = Array.from({ length: 64 }, (_, index) => `pty-remote-${index}`)
-    const frames = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏']
-    for (const ptyId of ptyIds) {
-      runtime.ingestSyntheticTitleFrame(ptyId, `\x1b]0;${frames[0]} Cursor Agent\x07`)
-    }
-    firstClientEvents.length = 0
-
-    for (const frame of frames.slice(1)) {
-      for (const ptyId of ptyIds) {
-        runtime.ingestSyntheticTitleFrame(ptyId, `\x1b]0;${frame} Cursor Agent\x07`)
+      const ptyIds = Array.from({ length: 64 }, (_, index) => `pty-remote-${index}`)
+      const frames = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏']
+      const stepPastHeartbeat = (): void => {
+        vi.setSystemTime(new Date(Date.now() + DECORATIVE_TITLE_FACT_HEARTBEAT_MS))
       }
+      for (const ptyId of ptyIds) {
+        runtime.ingestSyntheticTitleFrame(ptyId, `\x1b]0;${frames[0]} Cursor Agent\x07`)
+      }
+      firstClientEvents.length = 0
+
+      for (const frame of frames.slice(1)) {
+        stepPastHeartbeat()
+        for (const ptyId of ptyIds) {
+          runtime.ingestSyntheticTitleFrame(ptyId, `\x1b]0;${frame} Cursor Agent\x07`)
+        }
+      }
+
+      expect(firstClientEvents).toEqual([])
+      expect(batches).toHaveLength(ptyIds.length * frames.length)
+
+      const bellChunk = `\x1b]0;${frames.at(-1)} Cursor Agent\x07\x07`
+      runtime.onPtyData(ptyIds[0], bellChunk, 1)
+      expect(firstClientEvents).toEqual([
+        expect.objectContaining({
+          type: 'terminalSideEffects',
+          batch: expect.objectContaining({ facts: [{ kind: 'bell' }] })
+        })
+      ])
+      firstClientEvents.length = 0
+
+      const secondClientEvents: RuntimeClientEvent[] = []
+      runtime.onClientEvent((event) => secondClientEvents.push(event))
+      stepPastHeartbeat()
+      for (const ptyId of ptyIds) {
+        runtime.ingestSyntheticTitleFrame(ptyId, `\x1b]0;${frames[0]} Cursor Agent\x07`)
+      }
+
+      expect(firstClientEvents).toEqual([])
+      expect(secondClientEvents).toHaveLength(ptyIds.length)
+
+      // A real title change is never throttled — no clock step needed.
+      for (const ptyId of ptyIds) {
+        runtime.ingestSyntheticTitleFrame(ptyId, '\x1b]0;Cursor ready\x07')
+      }
+      expect(firstClientEvents).toHaveLength(ptyIds.length)
+      expect(secondClientEvents).toHaveLength(ptyIds.length * 2)
+    } finally {
+      vi.useRealTimers()
     }
-
-    expect(firstClientEvents).toEqual([])
-    expect(batches).toHaveLength(ptyIds.length * frames.length)
-
-    const bellChunk = `\x1b]0;${frames.at(-1)} Cursor Agent\x07\x07`
-    runtime.onPtyData(ptyIds[0], bellChunk, 1)
-    expect(firstClientEvents).toEqual([
-      expect.objectContaining({
-        type: 'terminalSideEffects',
-        batch: expect.objectContaining({ facts: [{ kind: 'bell' }] })
-      })
-    ])
-    firstClientEvents.length = 0
-
-    const secondClientEvents: RuntimeClientEvent[] = []
-    runtime.onClientEvent((event) => secondClientEvents.push(event))
-    for (const ptyId of ptyIds) {
-      runtime.ingestSyntheticTitleFrame(ptyId, `\x1b]0;${frames[0]} Cursor Agent\x07`)
-    }
-
-    expect(firstClientEvents).toEqual([])
-    expect(secondClientEvents).toHaveLength(ptyIds.length)
-
-    for (const ptyId of ptyIds) {
-      runtime.ingestSyntheticTitleFrame(ptyId, '\x1b]0;Cursor ready\x07')
-    }
-    expect(firstClientEvents).toHaveLength(ptyIds.length)
-    expect(secondClientEvents).toHaveLength(ptyIds.length * 2)
   })
 
   it('omits terminalSideEffects from non-consuming listeners while other events still flow', () => {
diff --git a/src/main/runtime/orca-runtime.test.ts b/src/main/runtime/orca-runtime.test.ts
index 054d7f09316..f8b12ba4a9d 100644
--- a/src/main/runtime/orca-runtime.test.ts
+++ b/src/main/runtime/orca-runtime.test.ts
@@ -30,6 +30,7 @@ await import('./orca-runtime-tests/pty-title-status.spec')
 await import('./orca-runtime-tests/terminal-side-effect-facts.spec')
 await import('./orca-runtime-tests/terminal-side-effect-facts-part-02.spec')
 await import('./orca-runtime-tests/terminal-side-effect-facts-part-03.spec')
+await import('./orca-runtime-tests/decorative-title-fact-throttle.spec')
 await import('./orca-runtime-tests/headless-snapshots.spec')
 await import('./orca-runtime-tests/headless-snapshots-part-02.spec')
 await import('./orca-runtime-tests/agent-status-and-waits.spec')
diff --git a/src/main/runtime/runtime-terminal-state-records.ts b/src/main/runtime/runtime-terminal-state-records.ts
index 68be05b8ad1..6ccb4ed82bb 100644
--- a/src/main/runtime/runtime-terminal-state-records.ts
+++ b/src/main/runtime/runtime-terminal-state-records.ts
@@ -89,6 +89,8 @@ export type RuntimePtyTitleTrackerEntry = {
   tracker: TerminalTitleTracker
   applyingChunk: boolean
   lastMobileTitleGateKey: string | null
+  /** When the last title fact was emitted — throttles decorative-only repeats. */
+  lastTitleFactAtMs: number | null
   chunkTouchedSessionTabs: boolean
   pendingFacts: TerminalSideEffectFact[]
   commandCodeDetector: { observe: (data: string) => boolean } | null

From f19a860a0f611453ffa34a637dcfa35f9fa1705b Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:04:22 -0700
Subject: [PATCH 62/92] perf(terminal): sweep the parked-watcher registries
 once per pass, not once per workspace (#18157)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The always-mounted terminal controller looped every workspace surface (423 on
a large profile) and called syncParkedTerminalTabWatchers per surface; that
function scans both module-level registries in full, so one effect fire cost
surfaces x registry — 323,172 map-row visits at 423 workspaces / 382 tabs.

Add syncParkedTerminalTabWatchersForWorkspaces, which walks each registry once
and then runs the per-tab start/reconcile pass; the single-worktree entry point
delegates to it. Registry rows are tab-id keyed and a tab belongs to exactly
one worktree, so hoisting the dispose and capture sweeps ahead of the start
passes only reorders work across disjoint tab sets.

Also derive workspaceSurfaceIds/workspaceSurfaceIdSet once in the workspace
foundation (through the existing useReusedArrayIdentity) and key the watcher,
parking and browser-retention effects on the id array instead of the surface
array, which is re-identified on every worktree write. And pass the sidebar's
already-computed defaultHostId into useVisibleSidebarWorktrees so an unrelated
settings write stops re-running the 423-worktree visibility scan.
---
 .../src/components/sidebar/WorktreeList.tsx   |   2 +-
 .../listing/use-visible-worktrees.test.tsx    |  78 ++-
 .../listing/use-visible-worktrees.ts          |  13 +-
 .../components/terminal-cold-activation.ts    |   8 +-
 ...nal-parked-tab-watchers-batch-sync.test.ts | 540 ++++++++++++++++++
 .../terminal-parked-tab-watchers.ts           | 132 ++++-
 .../terminal-parking-pass-candidates.ts       |   9 +-
 .../terminal-workspace-surface-ids.test.tsx   | 184 ++++++
 .../use-terminal-browser-retention.ts         |  10 +-
 .../components/use-terminal-parking-pass.ts   |   4 +-
 .../use-terminal-watcher-effects.ts           |  43 +-
 .../use-terminal-workspace-foundation.ts      |  14 +
 12 files changed, 958 insertions(+), 79 deletions(-)
 create mode 100644 src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers-batch-sync.test.ts
 create mode 100644 src/renderer/src/components/terminal-workspace-surface-ids.test.tsx

diff --git a/src/renderer/src/components/sidebar/WorktreeList.tsx b/src/renderer/src/components/sidebar/WorktreeList.tsx
index 5d27ec0f23f..9153ff4e39e 100644
--- a/src/renderer/src/components/sidebar/WorktreeList.tsx
+++ b/src/renderer/src/components/sidebar/WorktreeList.tsx
@@ -116,7 +116,7 @@ const WorktreeList = React.memo(function WorktreeList({
     sortedIds,
     repoMap,
     worktreeLineageById,
-    settings,
+    defaultHostId,
     agentSendTargetWorktreeId
   })
   const effectiveCollapsedGroups = useEffectiveCollapsedGroups({
diff --git a/src/renderer/src/components/sidebar/worktree-list/listing/use-visible-worktrees.test.tsx b/src/renderer/src/components/sidebar/worktree-list/listing/use-visible-worktrees.test.tsx
index d385f29d6c4..422a14b3693 100644
--- a/src/renderer/src/components/sidebar/worktree-list/listing/use-visible-worktrees.test.tsx
+++ b/src/renderer/src/components/sidebar/worktree-list/listing/use-visible-worktrees.test.tsx
@@ -1,11 +1,27 @@
 // @vitest-environment happy-dom
 
-import { afterEach, beforeEach, describe, expect, it } from 'vitest'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { cleanup, renderHook } from '@testing-library/react'
 import { useAppStore } from '@/store'
+import { LOCAL_EXECUTION_HOST_ID } from '../../../../../../shared/execution-host'
 import { getWorktreeHostIdentity } from '../../../../../../shared/worktree/host-qualified-identity'
 import { makeRepo, makeWorktree } from '../../../worktree-jump-palette-test-fixtures'
 import { useVisibleSidebarWorktrees } from './use-visible-worktrees'
+import type * as visibleWorktreesModule from '../../visible-worktrees'
+
+const computeVisibleWorktreesCalls = { count: 0 }
+vi.mock('../../visible-worktrees', async (importOriginal) => {
+  const actual = await importOriginal<typeof visibleWorktreesModule>()
+  return {
+    ...actual,
+    computeVisibleWorktrees: (
+      ...args: Parameters<typeof actual.computeVisibleWorktrees>
+    ): ReturnType<typeof actual.computeVisibleWorktrees> => {
+      computeVisibleWorktreesCalls.count += 1
+      return actual.computeVisibleWorktrees(...args)
+    }
+  }
+})
 
 const initialState = useAppStore.getInitialState()
 
@@ -43,7 +59,7 @@ describe('useVisibleSidebarWorktrees', () => {
         sortedIds: [local.id, ssh.id],
         repoMap: new Map([[repo.id, repo]]),
         worktreeLineageById: {},
-        settings: useAppStore.getState().settings,
+        defaultHostId: LOCAL_EXECUTION_HOST_ID,
         agentSendTargetWorktreeId: null
       })
     )
@@ -78,7 +94,7 @@ describe('useVisibleSidebarWorktrees', () => {
         sortedIds: [local.id, ssh.id],
         repoMap: new Map([[repo.id, repo]]),
         worktreeLineageById: {},
-        settings: useAppStore.getState().settings,
+        defaultHostId: LOCAL_EXECUTION_HOST_ID,
         agentSendTargetWorktreeId: null
       })
     )
@@ -87,4 +103,60 @@ describe('useVisibleSidebarWorktrees', () => {
       getWorktreeHostIdentity(ssh)
     ])
   })
+  it('does not rescan every worktree when a settings write leaves the focused host unchanged', () => {
+    const repo = makeRepo()
+    const worktree = makeWorktree('alpha', 'Alpha workspace', { hostId: 'local' })
+    useAppStore.setState({ worktreesByRepo: { [repo.id]: [worktree] } })
+
+    const baseArgs = {
+      filterState: {
+        showSleepingWorkspaces: true,
+        filterRepoIds: [],
+        hideDefaultBranchWorkspace: false,
+        hideAutomationGeneratedWorkspaces: false,
+        hideCliCreatedWorkspaces: false,
+        hideDetachedHeadWorkspaces: false,
+        hideWorkspacesFromOtherDevices: false,
+        alwaysShowDefaultBranchWorkspace: true,
+        visibleWorkspaceHostIds: null,
+        workspaceHostScope: 'all'
+      },
+      sortBy: 'recent',
+      sortedIds: [worktree.id],
+      repoMap: new Map([[repo.id, repo]]),
+      worktreeLineageById: {},
+      defaultHostId: LOCAL_EXECUTION_HOST_ID,
+      agentSendTargetWorktreeId: null
+    } as Parameters<typeof useVisibleSidebarWorktrees>[0]
+    // Why the extra `settings`: it is the pre-fix memo key. Passing it keeps
+    // this test red against the old hook, which re-keyed the whole scan on the
+    // settings object identity.
+    const withSettings = (
+      settings: ReturnType<typeof useAppStore.getState>['settings']
+    ): Parameters<typeof useVisibleSidebarWorktrees>[0] => Object.assign({}, baseArgs, { settings })
+
+    computeVisibleWorktreesCalls.count = 0
+    const { result, rerender } = renderHook(
+      (args: Parameters<typeof useVisibleSidebarWorktrees>[0]) => useVisibleSidebarWorktrees(args),
+      { initialProps: withSettings(useAppStore.getState().settings) }
+    )
+    const initialVisible = result.current.visibleWorktrees
+    const callsAfterFirstRender = computeVisibleWorktreesCalls.count
+    expect(callsAfterFirstRender).toBe(1)
+
+    // A settings write that does not move the focused execution host.
+    const nextSettings = {
+      ...useAppStore.getState().settings,
+      sidebarWidth: 321
+    } as ReturnType<typeof useAppStore.getState>['settings']
+    useAppStore.setState({ settings: nextSettings })
+    rerender(withSettings(nextSettings))
+
+    expect(computeVisibleWorktreesCalls.count).toBe(callsAfterFirstRender)
+    expect(result.current.visibleWorktrees).toBe(initialVisible)
+
+    // A write that does move it still recomputes.
+    rerender(Object.assign({}, withSettings(nextSettings), { defaultHostId: 'runtime:other' }))
+    expect(computeVisibleWorktreesCalls.count).toBe(callsAfterFirstRender + 1)
+  })
 })
diff --git a/src/renderer/src/components/sidebar/worktree-list/listing/use-visible-worktrees.ts b/src/renderer/src/components/sidebar/worktree-list/listing/use-visible-worktrees.ts
index e04d57ccff9..804d5118605 100644
--- a/src/renderer/src/components/sidebar/worktree-list/listing/use-visible-worktrees.ts
+++ b/src/renderer/src/components/sidebar/worktree-list/listing/use-visible-worktrees.ts
@@ -2,10 +2,9 @@ import { useMemo } from 'react'
 import { useAppStore } from '@/store'
 import { getAgentStatusEpochNow } from '@/lib/agent-status-epoch-clock'
 import { getWorktreeIdsWithLiveAgent } from '@/lib/worktree-activity-state'
-import type { AppState } from '@/store/types'
 import type { Repo } from '../../../../../../shared/repo-types'
 import type { WorktreeLineage } from '../../../../../../shared/worktree/lineage-types'
-import { getSettingsFocusedExecutionHostId } from '../../../../../../shared/execution-host'
+import type { ExecutionHostId } from '../../../../../../shared/execution-host'
 import { computeVisibleWorktrees } from '../../visible-worktrees'
 import {
   EMPTY_PAIRED_DEVICE_IDS_BY_ENVIRONMENT,
@@ -29,10 +28,12 @@ export function useVisibleSidebarWorktrees(args: {
   sortedIds: string[]
   repoMap: Map<string, Repo>
   worktreeLineageById: Record<string, WorktreeLineage>
-  settings: AppState['settings']
+  /** Pre-derived focused host; the whole `settings` object would re-key this
+   *  423-workspace scan on every unrelated settings write. */
+  defaultHostId: ExecutionHostId
   agentSendTargetWorktreeId: string | null
 }) {
-  const { filterState, sortBy, sortedIds, repoMap, worktreeLineageById, settings } = args
+  const { filterState, sortBy, sortedIds, repoMap, worktreeLineageById, defaultHostId } = args
   const {
     showSleepingWorkspaces,
     filterRepoIds,
@@ -98,7 +99,7 @@ export function useVisibleSidebarWorktrees(args: {
       repoMap,
       workspaceHostScope,
       visibleWorkspaceHostIds,
-      defaultHostId: getSettingsFocusedExecutionHostId(settings),
+      defaultHostId,
       worktreeLineageById,
       forcedVisibleWorktreeIds: args.agentSendTargetWorktreeId
         ? [args.agentSendTargetWorktreeId]
@@ -118,7 +119,7 @@ export function useVisibleSidebarWorktrees(args: {
     alwaysShowDefaultBranchWorkspace,
     workspaceHostScope,
     visibleWorkspaceHostIds,
-    settings,
+    defaultHostId,
     repoMap,
     tabsByWorktree,
     ptyIdsByTabId,
diff --git a/src/renderer/src/components/terminal-cold-activation.ts b/src/renderer/src/components/terminal-cold-activation.ts
index 8273e1536e6..d57cb82d766 100644
--- a/src/renderer/src/components/terminal-cold-activation.ts
+++ b/src/renderer/src/components/terminal-cold-activation.ts
@@ -36,7 +36,8 @@ export function applyTerminalColdActivation(controller: TerminalParkingFoundatio
     terminalParkingEnabled,
     terminalTitleSnapshotAuthorityEnabled,
     workspaceSessionReady,
-    workspaceSurfaces
+    workspaceSurfaceIds,
+    workspaceSurfaceIdSet
   } = controller
   if (
     renderedActiveWorktreeId &&
@@ -150,16 +151,15 @@ export function applyTerminalColdActivation(controller: TerminalParkingFoundatio
     tabsByWorktree,
     activationDeferredMountTabIdsByWorktreeRef.current
   )
-  const allWorktreeIds = new Set(workspaceSurfaces.map((workspace) => workspace.id))
   for (const id of mountedWorktreeIdsRef.current) {
-    if (!allWorktreeIds.has(id)) {
+    if (!workspaceSurfaceIdSet.has(id)) {
       mountedWorktreeIdsRef.current.delete(id)
       backgroundMountTabIdsByWorktreeRef.current.delete(id)
       activationDeferredMountTabIdsByWorktreeRef.current.delete(id)
     }
   }
   const anyMountedWorktreeHasLayout = computeAnyMountedWorktreeHasLayout(
-    workspaceSurfaces.map((workspace) => workspace.id),
+    workspaceSurfaceIds,
     mountedWorktreeIdsRef.current,
     layoutByWorktree,
     groupsByWorktree,
diff --git a/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers-batch-sync.test.ts b/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers-batch-sync.test.ts
new file mode 100644
index 00000000000..8bb0dca14ff
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers-batch-sync.test.ts
@@ -0,0 +1,540 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { ParkedTerminalByteWatcherOptions } from './parked-terminal-byte-watcher'
+
+type StartEvent = {
+  kind: 'start'
+  worktreeId: string
+  tabId: string
+  ptyId: string
+  paneId: number
+  leafId: string
+  drivesTabTitle: boolean
+  restoreTitleOnRegister: boolean
+}
+type DisposeEvent = { kind: 'dispose'; worktreeId: string; tabId: string; ptyId: string }
+type ClearTitleEvent = { kind: 'clearTitle'; tabId: string; paneId: number }
+type DiscardEvent = { kind: 'discard'; ptyId: string }
+type WatcherEvent = StartEvent | DisposeEvent | ClearTitleEvent | DiscardEvent
+
+let events: WatcherEvent[] = []
+
+const startParkedTerminalByteWatcher = vi.fn((options: ParkedTerminalByteWatcherOptions) => {
+  events.push({
+    kind: 'start',
+    worktreeId: options.worktreeId,
+    tabId: options.tabId,
+    ptyId: options.ptyId,
+    paneId: options.paneId,
+    leafId: options.leafId,
+    drivesTabTitle: options.drivesTabTitle === true,
+    restoreTitleOnRegister: options.restoreTitleOnRegister === true
+  })
+  return () => {
+    events.push({
+      kind: 'dispose',
+      worktreeId: options.worktreeId,
+      tabId: options.tabId,
+      ptyId: options.ptyId
+    })
+  }
+})
+
+vi.mock('./parked-terminal-byte-watcher', () => ({
+  startParkedTerminalByteWatcher: (options: ParkedTerminalByteWatcherOptions) =>
+    startParkedTerminalByteWatcher(options)
+}))
+
+vi.mock('./pty-dispatcher', () => ({
+  subscribeToPtyExit: () => () => {}
+}))
+
+vi.mock('./pty-pre-handler-buffer', () => ({
+  discardPreHandlerPtyState: (ptyId: string) => {
+    events.push({ kind: 'discard', ptyId })
+  },
+  hasPreHandlerPtyExit: () => false
+}))
+
+vi.mock('../terminal/terminal-tab-actions', () => ({
+  closeTerminalTab: () => {}
+}))
+
+type TabModel = { id: string; ptyId: string | null }
+type MockStoreState = {
+  tabsByWorktree: Record<string, TabModel[]>
+  terminalLayoutsByTabId: Record<
+    string,
+    {
+      root: unknown
+      activeLeafId: string | null
+      expandedLeafId: string | null
+      ptyIdsByLeafId?: Record<string, string>
+    }
+  >
+  runtimePaneTitlesByTabId: Record<string, Record<number, string>>
+  settings: { terminalSshViewParking?: boolean } | null
+  runtimeStatusByEnvironmentId: Map<string, { status: null; checkedAt: number }>
+  clearRuntimePaneTitle: (tabId: string, paneId: number) => void
+  setRuntimePaneTitle: () => void
+  clearTabLaunchAgent: () => void
+  setTabLayout: () => void
+  updateTabTitle: () => void
+  markUnverifiedPtyLoss: () => void
+  isPtyShutdownPending: () => boolean
+  suppressedPtyExitIds: Record<string, true>
+}
+
+let mockStoreState: MockStoreState
+
+vi.mock('@/store', () => ({
+  useAppStore: { getState: () => mockStoreState }
+}))
+
+import {
+  clearTerminalProviderSnapshotCapabilities,
+  synchronizeTerminalProviderSnapshotCapabilities
+} from '../terminal/terminal-provider-snapshot-capability'
+import {
+  captureParkedTerminalPaneCandidates,
+  pruneParkedTerminalWatchers,
+  syncParkedTerminalTabWatchers,
+  syncParkedTerminalTabWatchersForWorkspaces,
+  type ParkedTerminalTabWatcherSyncEntry
+} from './terminal-parked-tab-watchers'
+import { capturedPanesByTabId, parkedWatchersByTabId } from './terminal-parked-watcher-registry'
+
+const leafId = (index: number): string =>
+  `${index.toString(16).padStart(8, '0')}-1111-4111-8111-111111111111`
+
+function makeStore(): MockStoreState {
+  return {
+    tabsByWorktree: {},
+    terminalLayoutsByTabId: {},
+    runtimePaneTitlesByTabId: {},
+    settings: null,
+    runtimeStatusByEnvironmentId: new Map(),
+    clearRuntimePaneTitle: (tabId: string, paneId: number) => {
+      events.push({ kind: 'clearTitle', tabId, paneId })
+    },
+    setRuntimePaneTitle: () => {},
+    clearTabLaunchAgent: () => {},
+    setTabLayout: () => {},
+    updateTabTitle: () => {},
+    markUnverifiedPtyLoss: () => {},
+    isPtyShutdownPending: () => false,
+    suppressedPtyExitIds: {}
+  }
+}
+
+/** Counts entries visited by `for...of` over the module-level registries. */
+function instrumentRegistryIteration(): { count: number; restore: () => void } {
+  const counter = { count: 0, restore: () => {} }
+  const patched: Map<unknown, unknown>[] = [
+    parkedWatchersByTabId as Map<unknown, unknown>,
+    capturedPanesByTabId as Map<unknown, unknown>
+  ]
+  for (const map of patched) {
+    Object.defineProperty(map, Symbol.iterator, {
+      configurable: true,
+      writable: true,
+      value: function* (this: Map<unknown, unknown>) {
+        for (const entry of Map.prototype.entries.call(this)) {
+          counter.count += 1
+          yield entry
+        }
+      }
+    })
+  }
+  counter.restore = () => {
+    for (const map of patched) {
+      Reflect.deleteProperty(map, Symbol.iterator)
+    }
+  }
+  return counter
+}
+
+describe('parked terminal watcher batch synchronization', () => {
+  beforeEach(() => {
+    events = []
+    mockStoreState = makeStore()
+    clearTerminalProviderSnapshotCapabilities()
+  })
+
+  afterEach(() => {
+    pruneParkedTerminalWatchers(new Set())
+    capturedPanesByTabId.clear()
+    events = []
+    vi.clearAllMocks()
+    clearTerminalProviderSnapshotCapabilities()
+  })
+
+  describe('registry scan cost at the real-profile scale', () => {
+    // The user's profile: 423 workspace surfaces, 382 terminal tabs.
+    const WORKSPACE_COUNT = 423
+    const TAB_COUNT = 382
+
+    function seedRegistries(): {
+      workspaceIds: string[]
+      tabsByWorktreeId: Map<string, TabModel[]>
+    } {
+      const workspaceIds = Array.from(
+        { length: WORKSPACE_COUNT },
+        (_, index) => `repo::/worktree-${index}`
+      )
+      const tabsByWorktreeId = new Map<string, TabModel[]>(
+        workspaceIds.map((workspaceId) => [workspaceId, [] as TabModel[]])
+      )
+      for (let index = 0; index < TAB_COUNT; index += 1) {
+        const worktreeId = workspaceIds[index % WORKSPACE_COUNT]
+        const tabId = `tab-${index}`
+        const ptyId = `${worktreeId}@@session-${index}`
+        tabsByWorktreeId.get(worktreeId)!.push({ id: tabId, ptyId })
+        // A live, already-parked tab: present in both registries, nothing to
+        // dispose and nothing to start, so the pass is a pure registry scan.
+        parkedWatchersByTabId.set(tabId, {
+          worktreeId,
+          tabPtyId: ptyId,
+          paneIdByPtyId: new Map([[ptyId, 1]]),
+          disposersByPtyId: new Map()
+        })
+        captureParkedTerminalPaneCandidates(tabId, worktreeId, [
+          { ptyId, paneId: 1, leafId: leafId(index), drivesTabTitle: true }
+        ])
+      }
+      return { workspaceIds, tabsByWorktreeId }
+    }
+
+    it('collapses surfaces x registry scans into one scan of each registry', () => {
+      const { workspaceIds, tabsByWorktreeId } = seedRegistries()
+      const registryRows = parkedWatchersByTabId.size + capturedPanesByTabId.size
+      expect(registryRows).toBe(TAB_COUNT * 2)
+
+      const perSurface = instrumentRegistryIteration()
+      for (const workspaceId of workspaceIds) {
+        syncParkedTerminalTabWatchers({
+          worktreeId: workspaceId,
+          tabs: tabsByWorktreeId.get(workspaceId)!,
+          parkedTabIds: new Set()
+        })
+      }
+      const perSurfaceVisits = perSurface.count
+      perSurface.restore()
+
+      const batched = instrumentRegistryIteration()
+      const entries = new Map<string, ParkedTerminalTabWatcherSyncEntry>(
+        workspaceIds.map((workspaceId) => [
+          workspaceId,
+          { tabs: tabsByWorktreeId.get(workspaceId)!, parkedTabIds: new Set<string>() }
+        ])
+      )
+      syncParkedTerminalTabWatchersForWorkspaces(entries)
+      const batchedVisits = batched.count
+      batched.restore()
+
+      // Old shape: every surface re-walks both registries in full.
+      expect(perSurfaceVisits).toBe(WORKSPACE_COUNT * registryRows)
+      // New shape: each registry is walked exactly once for the whole pass.
+      expect(batchedVisits).toBe(registryRows)
+      expect(perSurfaceVisits / batchedVisits).toBeGreaterThan(400)
+    })
+  })
+
+  describe('start/dispose decisions match the per-surface path', () => {
+    type Scenario = {
+      name: string
+      workspaces: {
+        worktreeId: string
+        tabs: TabModel[]
+        parkedTabIds: string[]
+        restoreTitleOnStartTabIds?: string[]
+      }[]
+      /** Watcher rows already in the registry when the pass runs. */
+      preParkedTabs: { worktreeId: string; tabId: string; ptyId: string; withDisposer: boolean }[]
+      /** Captures for tabs that may or may not still be live. */
+      preCapturedTabs: { worktreeId: string; tabId: string; ptyId: string | null }[]
+    }
+
+    const WORKTREE_A = 'repo::/alpha'
+    const WORKTREE_B = 'repo::/beta'
+    const WORKTREE_C = 'repo::/gamma'
+
+    const pty = (worktreeId: string, index: number): string => `${worktreeId}@@session-${index}`
+
+    const scenarios: Scenario[] = [
+      {
+        name: 'cold start: nothing parked yet, two workspaces park every tab',
+        workspaces: [
+          {
+            worktreeId: WORKTREE_A,
+            tabs: [
+              { id: 'a1', ptyId: pty(WORKTREE_A, 1) },
+              { id: 'a2', ptyId: pty(WORKTREE_A, 2) }
+            ],
+            parkedTabIds: ['a1', 'a2']
+          },
+          {
+            worktreeId: WORKTREE_B,
+            tabs: [{ id: 'b1', ptyId: pty(WORKTREE_B, 1) }],
+            parkedTabIds: ['b1']
+          },
+          { worktreeId: WORKTREE_C, tabs: [], parkedTabIds: [] }
+        ],
+        preParkedTabs: [],
+        preCapturedTabs: []
+      },
+      {
+        name: 'reveal: a parked workspace drops out of the parked set',
+        workspaces: [
+          {
+            worktreeId: WORKTREE_A,
+            tabs: [
+              { id: 'a1', ptyId: pty(WORKTREE_A, 1) },
+              { id: 'a2', ptyId: pty(WORKTREE_A, 2) }
+            ],
+            parkedTabIds: []
+          },
+          {
+            worktreeId: WORKTREE_B,
+            tabs: [{ id: 'b1', ptyId: pty(WORKTREE_B, 1) }],
+            parkedTabIds: ['b1']
+          }
+        ],
+        preParkedTabs: [
+          { worktreeId: WORKTREE_A, tabId: 'a1', ptyId: pty(WORKTREE_A, 1), withDisposer: true },
+          { worktreeId: WORKTREE_A, tabId: 'a2', ptyId: pty(WORKTREE_A, 2), withDisposer: true }
+        ],
+        preCapturedTabs: [
+          { worktreeId: WORKTREE_A, tabId: 'a1', ptyId: pty(WORKTREE_A, 1) },
+          { worktreeId: WORKTREE_A, tabId: 'a2', ptyId: pty(WORKTREE_A, 2) }
+        ]
+      },
+      {
+        name: 'closed tabs: registry rows and captures outlive their tabs',
+        workspaces: [
+          {
+            worktreeId: WORKTREE_A,
+            tabs: [{ id: 'a1', ptyId: pty(WORKTREE_A, 1) }],
+            parkedTabIds: ['a1']
+          },
+          { worktreeId: WORKTREE_B, tabs: [], parkedTabIds: [] }
+        ],
+        preParkedTabs: [
+          {
+            worktreeId: WORKTREE_A,
+            tabId: 'a-closed',
+            ptyId: pty(WORKTREE_A, 9),
+            withDisposer: true
+          },
+          {
+            worktreeId: WORKTREE_B,
+            tabId: 'b-closed',
+            ptyId: pty(WORKTREE_B, 9),
+            withDisposer: true
+          }
+        ],
+        preCapturedTabs: [
+          { worktreeId: WORKTREE_A, tabId: 'a-closed', ptyId: pty(WORKTREE_A, 9) },
+          { worktreeId: WORKTREE_B, tabId: 'b-closed', ptyId: pty(WORKTREE_B, 9) },
+          { worktreeId: WORKTREE_A, tabId: 'a1', ptyId: pty(WORKTREE_A, 1) }
+        ]
+      },
+      {
+        name: 're-minted pty: a parked tab wakes with a fresh pty id',
+        workspaces: [
+          {
+            worktreeId: WORKTREE_A,
+            tabs: [{ id: 'a1', ptyId: pty(WORKTREE_A, 2) }],
+            parkedTabIds: ['a1'],
+            restoreTitleOnStartTabIds: ['a1']
+          },
+          {
+            worktreeId: WORKTREE_B,
+            tabs: [{ id: 'b1', ptyId: pty(WORKTREE_B, 1) }],
+            parkedTabIds: ['b1']
+          }
+        ],
+        preParkedTabs: [
+          { worktreeId: WORKTREE_A, tabId: 'a1', ptyId: pty(WORKTREE_A, 1), withDisposer: true }
+        ],
+        preCapturedTabs: [{ worktreeId: WORKTREE_A, tabId: 'a1', ptyId: pty(WORKTREE_A, 2) }]
+      },
+      {
+        name: 'unknown worktree rows: registry holds a workspace absent from this pass',
+        workspaces: [
+          {
+            worktreeId: WORKTREE_A,
+            tabs: [{ id: 'a1', ptyId: pty(WORKTREE_A, 1) }],
+            parkedTabIds: ['a1']
+          }
+        ],
+        preParkedTabs: [
+          { worktreeId: WORKTREE_C, tabId: 'c1', ptyId: pty(WORKTREE_C, 1), withDisposer: true }
+        ],
+        preCapturedTabs: [{ worktreeId: WORKTREE_C, tabId: 'c1', ptyId: pty(WORKTREE_C, 1) }]
+      },
+      {
+        name: 'tombstone rows: a pinned-close entry with no live disposers',
+        workspaces: [
+          {
+            worktreeId: WORKTREE_A,
+            tabs: [{ id: 'a1', ptyId: pty(WORKTREE_A, 1) }],
+            parkedTabIds: []
+          },
+          {
+            worktreeId: WORKTREE_B,
+            tabs: [{ id: 'b1', ptyId: pty(WORKTREE_B, 1) }],
+            parkedTabIds: ['b1']
+          }
+        ],
+        preParkedTabs: [
+          { worktreeId: WORKTREE_A, tabId: 'a1', ptyId: pty(WORKTREE_A, 1), withDisposer: false }
+        ],
+        preCapturedTabs: [{ worktreeId: WORKTREE_B, tabId: 'b1', ptyId: pty(WORKTREE_B, 1) }]
+      }
+    ]
+
+    type Outcome = {
+      eventsByWorktree: Record<string, WatcherEvent[]>
+      registry: readonly (readonly [
+        string,
+        { worktreeId: string; tabPtyId: string | null; ptyIds: string[] }
+      ])[]
+      captures: string[]
+    }
+
+    async function seedAndRun(
+      scenario: Scenario,
+      run: (scenario: Scenario) => void
+    ): Promise<Outcome> {
+      pruneParkedTerminalWatchers(new Set())
+      capturedPanesByTabId.clear()
+      clearTerminalProviderSnapshotCapabilities()
+      mockStoreState = makeStore()
+      const allPtyIds = new Set<string>()
+      for (const workspace of scenario.workspaces) {
+        for (const tab of workspace.tabs) {
+          if (tab.ptyId) {
+            allPtyIds.add(tab.ptyId)
+          }
+        }
+      }
+      for (const row of [...scenario.preParkedTabs, ...scenario.preCapturedTabs]) {
+        if (row.ptyId) {
+          allPtyIds.add(row.ptyId)
+        }
+      }
+      await synchronizeTerminalProviderSnapshotCapabilities(Array.from(allPtyIds), async (ids) =>
+        ids.map((id) => ({ id, authoritative: true }))
+      )
+      let paneOrdinal = 0
+      for (const row of scenario.preParkedTabs) {
+        paneOrdinal += 1
+        parkedWatchersByTabId.set(row.tabId, {
+          worktreeId: row.worktreeId,
+          tabPtyId: row.ptyId,
+          paneIdByPtyId: new Map([[row.ptyId, paneOrdinal]]),
+          disposersByPtyId: row.withDisposer
+            ? new Map([
+                [
+                  row.ptyId,
+                  () => {
+                    events.push({
+                      kind: 'dispose',
+                      worktreeId: row.worktreeId,
+                      tabId: row.tabId,
+                      ptyId: row.ptyId
+                    })
+                  }
+                ]
+              ])
+            : new Map()
+        })
+      }
+      for (const [index, row] of scenario.preCapturedTabs.entries()) {
+        captureParkedTerminalPaneCandidates(row.tabId, row.worktreeId, [
+          { ptyId: row.ptyId, paneId: 100 + index, leafId: leafId(index + 1), drivesTabTitle: true }
+        ])
+      }
+      events = []
+      run(scenario)
+
+      const eventsByWorktree: Record<string, WatcherEvent[]> = {}
+      for (const event of events) {
+        const key = 'worktreeId' in event ? event.worktreeId : 'shared'
+        ;(eventsByWorktree[key] ??= []).push(event)
+      }
+      // Why per-worktree, not one global sequence: batching deliberately hoists
+      // every workspace's dispose sweep ahead of every workspace's start pass.
+      // Registry rows are tab-id keyed and a tab belongs to exactly one
+      // worktree, so that reorder crosses only disjoint tab sets. `shared`
+      // events (pane-title clears, pre-handler discards) are compared as a
+      // multiset for the same reason.
+      for (const key of Object.keys(eventsByWorktree)) {
+        if (key === 'shared') {
+          eventsByWorktree[key] = [...eventsByWorktree[key]].sort((left, right) =>
+            JSON.stringify(left).localeCompare(JSON.stringify(right))
+          )
+        }
+      }
+      return {
+        eventsByWorktree,
+        registry: Array.from(
+          parkedWatchersByTabId,
+          ([tabId, entry]) =>
+            [
+              tabId,
+              {
+                worktreeId: entry.worktreeId,
+                tabPtyId: entry.tabPtyId,
+                ptyIds: Array.from(entry.disposersByPtyId.keys()).sort()
+              }
+            ] as const
+        ).sort((left, right) => left[0].localeCompare(right[0])),
+        captures: Array.from(capturedPanesByTabId.keys()).sort()
+      }
+    }
+
+    const runPerSurface = (scenario: Scenario): void => {
+      for (const workspace of scenario.workspaces) {
+        syncParkedTerminalTabWatchers({
+          worktreeId: workspace.worktreeId,
+          tabs: workspace.tabs,
+          parkedTabIds: new Set(workspace.parkedTabIds),
+          ...(workspace.restoreTitleOnStartTabIds
+            ? { restoreTitleOnStartTabIds: new Set(workspace.restoreTitleOnStartTabIds) }
+            : {})
+        })
+      }
+    }
+
+    const runBatched = (scenario: Scenario): void => {
+      syncParkedTerminalTabWatchersForWorkspaces(
+        new Map(
+          scenario.workspaces.map((workspace) => [
+            workspace.worktreeId,
+            {
+              tabs: workspace.tabs,
+              parkedTabIds: new Set(workspace.parkedTabIds),
+              ...(workspace.restoreTitleOnStartTabIds
+                ? { restoreTitleOnStartTabIds: new Set(workspace.restoreTitleOnStartTabIds) }
+                : {})
+            }
+          ])
+        )
+      )
+    }
+
+    for (const scenario of scenarios) {
+      it(`decides identically — ${scenario.name}`, async () => {
+        const perSurface = await seedAndRun(scenario, runPerSurface)
+        const batched = await seedAndRun(scenario, runBatched)
+        expect(batched).toEqual(perSurface)
+        // Guard against a vacuous comparison of two empty outcomes.
+        expect(
+          Object.values(perSurface.eventsByWorktree).some((list) => list.length > 0) ||
+            perSurface.registry.length > 0
+        ).toBe(true)
+      })
+    }
+  })
+})
diff --git a/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers.ts b/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers.ts
index f834944607b..d088fbe41ad 100644
--- a/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers.ts
@@ -244,6 +244,93 @@ function disposeClosedParkedTabWatchers(
   disposeParkedTabWatchers(tabId)
 }
 
+/** One workspace's rendered parked verdict, as the batch pass consumes it. */
+export type ParkedTerminalTabWatcherSyncEntry = {
+  tabs: readonly ParkableTerminalTabModel[]
+  parkedTabIds: ReadonlySet<string>
+  /** Parked-equivalent tabs whose pane has not restored the current title. */
+  restoreTitleOnStartTabIds?: ReadonlySet<string>
+}
+
+function startOrReconcileParkedTabWatchers(
+  worktreeId: string,
+  entry: ParkedTerminalTabWatcherSyncEntry
+): void {
+  for (const tab of entry.tabs) {
+    if (!entry.parkedTabIds.has(tab.id)) {
+      continue
+    }
+    const watcherEntry = parkedWatchersByTabId.get(tab.id)
+    const restoreTitleOnRegister = entry.restoreTitleOnStartTabIds?.has(tab.id) === true
+    if (watcherEntry) {
+      reconcileParkedTabWatchers(worktreeId, tab, watcherEntry, restoreTitleOnRegister)
+    } else {
+      startParkedTabWatchers(worktreeId, tab, restoreTitleOnRegister)
+    }
+  }
+}
+
+/**
+ * Reconciles watchers for every rendered workspace in one pass.
+ *
+ * Why batched: the per-worktree entry point scans both registries in full, so
+ * the terminal host calling it once per workspace made a single effect fire
+ * cost surfaces x registry map iterations. Walking each registry once and then
+ * doing the per-tab start/reconcile pass is O(registry + tabs) instead.
+ *
+ * The dispose/start decisions are identical: registry entries are keyed by tab
+ * id and every tab belongs to exactly one worktree, so hoisting the dispose and
+ * capture-cleanup sweeps ahead of every start only reorders work across
+ * disjoint tab sets.
+ */
+export function syncParkedTerminalTabWatchersForWorkspaces(
+  entriesByWorktreeId: ReadonlyMap<string, ParkedTerminalTabWatcherSyncEntry>
+): void {
+  if (entriesByWorktreeId.size === 0) {
+    return
+  }
+  // Why lazy: only worktrees that actually own a registry row need the id set,
+  // so an idle profile allocates none of them.
+  const liveTabIdsByWorktreeId = new Map<string, ReadonlySet<string>>()
+  const liveTabIdsFor = (worktreeId: string): ReadonlySet<string> | null => {
+    const cached = liveTabIdsByWorktreeId.get(worktreeId)
+    if (cached) {
+      return cached
+    }
+    const entry = entriesByWorktreeId.get(worktreeId)
+    if (!entry) {
+      return null
+    }
+    const liveTabIds = new Set(entry.tabs.map((tab) => tab.id))
+    liveTabIdsByWorktreeId.set(worktreeId, liveTabIds)
+    return liveTabIds
+  }
+  for (const [tabId, watcherEntry] of parkedWatchersByTabId) {
+    const entry = entriesByWorktreeId.get(watcherEntry.worktreeId)
+    if (!entry) {
+      continue
+    }
+    const liveTabIds = liveTabIdsFor(watcherEntry.worktreeId)
+    if (!liveTabIds?.has(tabId)) {
+      disposeClosedParkedTabWatchers(tabId, watcherEntry)
+      continue
+    }
+    if (!entry.parkedTabIds.has(tabId) && watcherEntry.disposersByPtyId.size > 0) {
+      disposeParkedTabWatchers(tabId)
+    }
+  }
+  // Why: closed tabs never park/reveal again; drop captures to keep the registry bounded.
+  for (const [tabId, capture] of capturedPanesByTabId) {
+    const liveTabIds = liveTabIdsFor(capture.worktreeId)
+    if (liveTabIds && !liveTabIds.has(tabId)) {
+      capturedPanesByTabId.delete(tabId)
+    }
+  }
+  for (const [worktreeId, entry] of entriesByWorktreeId) {
+    startOrReconcileParkedTabWatchers(worktreeId, entry)
+  }
+}
+
 /**
  * Reconciles watchers for one worktree against its rendered parked set.
  * Run from an effect keyed on committed render state so disposal shares the
@@ -256,35 +343,18 @@ export function syncParkedTerminalTabWatchers(args: {
   /** Parked-equivalent tabs whose pane has not restored the current title. */
   restoreTitleOnStartTabIds?: ReadonlySet<string>
 }): void {
-  const liveTabIds = new Set(args.tabs.map((tab) => tab.id))
-  for (const [tabId, entry] of parkedWatchersByTabId) {
-    if (entry.worktreeId !== args.worktreeId) {
-      continue
-    }
-    if (!liveTabIds.has(tabId)) {
-      disposeClosedParkedTabWatchers(tabId, entry)
-      continue
-    }
-    if (!args.parkedTabIds.has(tabId) && entry.disposersByPtyId.size > 0) {
-      disposeParkedTabWatchers(tabId)
-    }
-  }
-  // Why: closed tabs never park/reveal again; drop captures to keep the registry bounded.
-  for (const [tabId, capture] of capturedPanesByTabId) {
-    if (capture.worktreeId === args.worktreeId && !liveTabIds.has(tabId)) {
-      capturedPanesByTabId.delete(tabId)
-    }
-  }
-  for (const tab of args.tabs) {
-    if (!args.parkedTabIds.has(tab.id)) {
-      continue
-    }
-    const entry = parkedWatchersByTabId.get(tab.id)
-    const restoreTitleOnRegister = args.restoreTitleOnStartTabIds?.has(tab.id) === true
-    if (entry) {
-      reconcileParkedTabWatchers(args.worktreeId, tab, entry, restoreTitleOnRegister)
-    } else {
-      startParkedTabWatchers(args.worktreeId, tab, restoreTitleOnRegister)
-    }
-  }
+  syncParkedTerminalTabWatchersForWorkspaces(
+    new Map([
+      [
+        args.worktreeId,
+        {
+          tabs: args.tabs,
+          parkedTabIds: args.parkedTabIds,
+          ...(args.restoreTitleOnStartTabIds
+            ? { restoreTitleOnStartTabIds: args.restoreTitleOnStartTabIds }
+            : {})
+        }
+      ]
+    ])
+  )
 }
diff --git a/src/renderer/src/components/terminal-parking-pass-candidates.ts b/src/renderer/src/components/terminal-parking-pass-candidates.ts
index 1f7d85d89de..98f9ff5e5cd 100644
--- a/src/renderer/src/components/terminal-parking-pass-candidates.ts
+++ b/src/renderer/src/components/terminal-parking-pass-candidates.ts
@@ -27,7 +27,8 @@ export function collectTerminalParkingPassCandidates(controller: TerminalParking
     terminalWorktreeHiddenSinceRef,
     terminalWorktreeParkCooldownUntilRef,
     terminalWorktreeParkingTimersRef,
-    workspaceSurfaces
+    workspaceSurfaceIds,
+    workspaceSurfaceIdSet
   } = controller
   const parkingTimers = terminalWorktreeParkingTimersRef.current
   for (const timer of parkingTimers.values()) {
@@ -38,9 +39,8 @@ export function collectTerminalParkingPassCandidates(controller: TerminalParking
   const nowMs = Date.now()
   const overrides = getTerminalParkingPolicyOverrides()
   const portalWorktreeIds = new Set(activityTerminalPortals.map((portal) => portal.worktreeId))
-  const currentWorktreeIds = new Set(workspaceSurfaces.map((workspace) => workspace.id))
   for (const worktreeId of Array.from(terminalWorktreeHiddenSinceRef.current.keys())) {
-    if (!currentWorktreeIds.has(worktreeId) || !mountedWorktreeIdsRef.current.has(worktreeId)) {
+    if (!workspaceSurfaceIdSet.has(worktreeId) || !mountedWorktreeIdsRef.current.has(worktreeId)) {
       terminalWorktreeHiddenSinceRef.current.delete(worktreeId)
       measuringTerminalWorktreeIdsRef.current.delete(worktreeId)
       terminalWorktreeParkCooldownUntilRef.current.delete(worktreeId)
@@ -48,8 +48,7 @@ export function collectTerminalParkingPassCandidates(controller: TerminalParking
   }
 
   const retentionCandidates: TerminalWorktreeColdParkCandidate[] = []
-  for (const workspace of workspaceSurfaces) {
-    const worktreeId = workspace.id
+  for (const worktreeId of workspaceSurfaceIds) {
     if (!mountedWorktreeIdsRef.current.has(worktreeId)) {
       terminalWorktreeHiddenSinceRef.current.delete(worktreeId)
       measuringTerminalWorktreeIdsRef.current.delete(worktreeId)
diff --git a/src/renderer/src/components/terminal-workspace-surface-ids.test.tsx b/src/renderer/src/components/terminal-workspace-surface-ids.test.tsx
new file mode 100644
index 00000000000..770b1cfc47b
--- /dev/null
+++ b/src/renderer/src/components/terminal-workspace-surface-ids.test.tsx
@@ -0,0 +1,184 @@
+// @vitest-environment happy-dom
+
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { act, cleanup, renderHook } from '@testing-library/react'
+import { useEffect } from 'react'
+import { useAppStore } from '@/store'
+import { makeRepo, makeWorktree } from './worktree-jump-palette-test-fixtures'
+import { useTerminalWorkspaceFoundation } from './use-terminal-workspace-foundation'
+import { applyTerminalColdActivation } from './terminal-cold-activation'
+import { collectTerminalParkingPassCandidates } from './terminal-parking-pass-candidates'
+import type { WorkspaceSurface } from './workspace-surface-projection'
+import type { TerminalParkingFoundation } from './use-terminal-parking-foundation'
+
+const initialState = useAppStore.getInitialState()
+
+/** An id-only surface array that reports how often a caller re-derived its ids. */
+function countingSurfaces(ids: string[]): { surfaces: WorkspaceSurface[]; mapCalls: () => number } {
+  let mapCalls = 0
+  const surfaces = ids.map((id) => ({ id, path: `/tmp/${id}` }))
+  Object.defineProperty(surfaces, 'map', {
+    configurable: true,
+    value(this: WorkspaceSurface[], ...args: Parameters<WorkspaceSurface[]['map']>) {
+      mapCalls += 1
+      return Array.prototype.map.apply(this, args)
+    }
+  })
+  return { surfaces, mapCalls: () => mapCalls }
+}
+
+describe('workspace surface ids', () => {
+  beforeEach(() => {
+    useAppStore.setState(initialState, true)
+  })
+
+  afterEach(() => {
+    cleanup()
+    useAppStore.setState(initialState, true)
+    vi.restoreAllMocks()
+  })
+
+  it('keeps the id array and id set stable when a worktree write re-identifies the surfaces', () => {
+    const repo = makeRepo()
+    const first = makeWorktree('alpha', 'Alpha')
+    const second = makeWorktree('beta', 'Beta')
+    useAppStore.setState({ worktreesByRepo: { [repo.id]: [first, second] } })
+
+    const { result, rerender } = renderHook(() => useTerminalWorkspaceFoundation())
+    const initialSurfaces = result.current.workspaceSurfaces
+    const initialIds = result.current.workspaceSurfaceIds
+    const initialIdSet = result.current.workspaceSurfaceIdSet
+    expect(initialIds).toEqual([first.id, second.id])
+
+    // A worktree write that changes no id: fresh row objects, fresh array.
+    useAppStore.setState({
+      worktreesByRepo: {
+        [repo.id]: [
+          { ...first, lastActivityAt: Date.now() },
+          { ...second, lastActivityAt: Date.now() }
+        ]
+      }
+    })
+    rerender()
+
+    expect(result.current.workspaceSurfaces).not.toBe(initialSurfaces)
+    expect(result.current.workspaceSurfaceIds).toBe(initialIds)
+    expect(result.current.workspaceSurfaceIdSet).toBe(initialIdSet)
+
+    // A real membership change still re-identifies both.
+    useAppStore.setState({ worktreesByRepo: { [repo.id]: [first] } })
+    rerender()
+    expect(result.current.workspaceSurfaceIds).not.toBe(initialIds)
+    expect(result.current.workspaceSurfaceIdSet).not.toBe(initialIdSet)
+    expect(result.current.workspaceSurfaceIds).toEqual([first.id])
+  })
+
+  it('does not rebuild a surface-id array or set on a cold-activation render', () => {
+    const ids = Array.from({ length: 423 }, (_, index) => `repo::/worktree-${index}`)
+    const { surfaces, mapCalls } = countingSurfaces(ids)
+    const controller = {
+      activationDeferredMountTabIdsByWorktreeRef: { current: new Map() },
+      activeGroupIdByWorktree: {},
+      activeTabId: null,
+      activeTabIdByWorktree: {},
+      activeWorktreeDeferralHostId: null,
+      activityTerminalPortals: [],
+      backgroundMountTabIdsByWorktreeRef: { current: new Map() },
+      groupsByWorktree: {},
+      hydrationSucceeded: false,
+      lastActivationWorktreeIdRef: { current: null },
+      layoutByWorktree: {},
+      mountedWorktreeIdsRef: { current: new Set(['repo::/worktree-0', 'repo::/gone']) },
+      pairedRuntimeParkingEnvironmentIds: new Set(),
+      pendingStartupByTabId: {},
+      renderedActiveWorktreeId: null,
+      startupWorktreeRefreshCompleted: false,
+      tabsByWorktree: {},
+      terminalParkingEnabled: true,
+      terminalTitleSnapshotAuthorityEnabled: true,
+      workspaceSessionReady: false,
+      workspaceSurfaces: surfaces,
+      workspaceSurfaceIds: ids,
+      workspaceSurfaceIdSet: new Set(ids)
+    } as unknown as TerminalParkingFoundation
+
+    applyTerminalColdActivation(controller)
+    applyTerminalColdActivation(controller)
+
+    // Pre-fix this was two 423-element id arrays (plus a 423-entry Set) per render.
+    expect(mapCalls()).toBe(0)
+    expect(controller.mountedWorktreeIdsRef.current.has('repo::/gone')).toBe(false)
+    expect(controller.mountedWorktreeIdsRef.current.has('repo::/worktree-0')).toBe(true)
+  })
+
+  it('does not rebuild a surface-id array or set on a parking pass', () => {
+    const ids = Array.from({ length: 423 }, (_, index) => `repo::/worktree-${index}`)
+    const { surfaces, mapCalls } = countingSurfaces(ids)
+    const hiddenSince = new Map<string, number>([
+      ['repo::/worktree-0', 1],
+      ['repo::/stale', 2]
+    ])
+    const controller = {
+      activeView: 'terminal',
+      activityTerminalPortals: [],
+      measurableBackgroundWorktreeIdsRef: { current: new Set() },
+      measuringTerminalWorktreeIdsRef: { current: new Set() },
+      mountedWorktreeIdsRef: { current: new Set(['repo::/worktree-0']) },
+      pairedRuntimeParkingEnvironmentIds: new Set(),
+      pendingStartupByTabId: {},
+      renderedActiveWorktreeId: 'repo::/worktree-0',
+      tabsByWorktree: {},
+      terminalParkingEnabled: true,
+      terminalSshParkingEnabled: true,
+      terminalWorktreeHiddenSinceRef: { current: hiddenSince },
+      terminalWorktreeParkCooldownUntilRef: { current: new Map() },
+      terminalWorktreeParkingTimersRef: { current: new Map() },
+      workspaceSurfaces: surfaces,
+      workspaceSurfaceIds: ids,
+      workspaceSurfaceIdSet: new Set(ids)
+    } as unknown as TerminalParkingFoundation
+
+    const pass = collectTerminalParkingPassCandidates(controller)
+
+    // Pre-fix this allocated a 423-element id array and a 423-entry Set per fire.
+    expect(mapCalls()).toBe(0)
+    expect(pass.retentionCandidates.map((candidate) => candidate.worktreeId)).toEqual([
+      'repo::/worktree-0'
+    ])
+    expect(hiddenSince.has('repo::/stale')).toBe(false)
+  })
+  it('stops idle worktree writes from re-firing surface-keyed terminal effects', () => {
+    const repo = makeRepo()
+    const worktrees = Array.from({ length: 20 }, (_, index) =>
+      makeWorktree(`wt-${index}`, `Workspace ${index}`)
+    )
+    useAppStore.setState({ worktreesByRepo: { [repo.id]: worktrees } })
+
+    const fires = { surfaceKeyed: 0, idKeyed: 0 }
+    renderHook(() => {
+      const foundation = useTerminalWorkspaceFoundation()
+      useEffect(() => {
+        fires.surfaceKeyed += 1
+      }, [foundation.workspaceSurfaces])
+      useEffect(() => {
+        fires.idKeyed += 1
+      }, [foundation.workspaceSurfaceIds])
+    })
+    expect(fires).toEqual({ surfaceKeyed: 1, idKeyed: 1 })
+
+    // 100 worktree writes that touch no workspace id — the idle shape (activity
+    // timestamps, status refreshes) that dominates a large profile.
+    for (let write = 0; write < 100; write += 1) {
+      act(() => {
+        useAppStore.setState({
+          worktreesByRepo: {
+            [repo.id]: worktrees.map((worktree) => ({ ...worktree, lastActivityAt: write }))
+          }
+        })
+      })
+    }
+
+    expect(fires.surfaceKeyed).toBe(101)
+    expect(fires.idKeyed).toBe(1)
+  })
+})
diff --git a/src/renderer/src/components/use-terminal-browser-retention.ts b/src/renderer/src/components/use-terminal-browser-retention.ts
index cbc2dff078c..34d3b0e1a80 100644
--- a/src/renderer/src/components/use-terminal-browser-retention.ts
+++ b/src/renderer/src/components/use-terminal-browser-retention.ts
@@ -20,7 +20,8 @@ export function useTerminalBrowserRetention(controller: TerminalParkingFoundatio
     mountedWorktreeIdsRef,
     renderedActiveWorktreeId,
     setBrowserGuestRetentionRevision,
-    workspaceSurfaces
+    workspaceSurfaceIds,
+    workspaceSurfaceIdSet
   } = controller
 
   useEffect(() => {
@@ -42,9 +43,8 @@ export function useTerminalBrowserRetention(controller: TerminalParkingFoundatio
     }
     const recency = browserGuestWorktreeRecencyRef.current
     touchBrowserGuestWorktreeRecency(recency, renderedActiveWorktreeId)
-    const surfaceIds = new Set(workspaceSurfaces.map((workspace) => workspace.id))
     for (let index = recency.length - 1; index >= 0; index--) {
-      if (!surfaceIds.has(recency[index])) {
+      if (!workspaceSurfaceIdSet.has(recency[index])) {
         recency.splice(index, 1)
       }
     }
@@ -55,7 +55,7 @@ export function useTerminalBrowserRetention(controller: TerminalParkingFoundatio
     const recencyIds = new Set(recency)
     const orderedWorktreeIds = [
       ...recency,
-      ...workspaceSurfaces.map((workspace) => workspace.id).filter((id) => !recencyIds.has(id))
+      ...workspaceSurfaceIds.filter((id) => !recencyIds.has(id))
     ]
     const evictedWorktreeIds = selectBrowserGuestEvictionWorktreeIds({
       orderedWorktreeIds,
@@ -82,7 +82,7 @@ export function useTerminalBrowserRetention(controller: TerminalParkingFoundatio
     // oxlint-disable-next-line react-hooks/exhaustive-deps -- controller refs preserve their original stable identities.
   }, [
     renderedActiveWorktreeId,
-    workspaceSurfaces,
+    workspaceSurfaceIds,
     browserGuestRetentionBudgetEnabled,
     browserGuestRetentionRevision
   ])
diff --git a/src/renderer/src/components/use-terminal-parking-pass.ts b/src/renderer/src/components/use-terminal-parking-pass.ts
index 01733c3c09c..1ce5eab03ff 100644
--- a/src/renderer/src/components/use-terminal-parking-pass.ts
+++ b/src/renderer/src/components/use-terminal-parking-pass.ts
@@ -41,7 +41,7 @@ export function useTerminalParkingPass(controller: TerminalParkingFoundation): v
     terminalProviderSnapshotCapabilityRevision,
     terminalRetentionBudgetEnabled,
     terminalSshParkingEnabled,
-    workspaceSurfaces
+    workspaceSurfaceIds
   } = controller
 
   useEffect(() => {
@@ -182,6 +182,6 @@ export function useTerminalParkingPass(controller: TerminalParkingFoundation): v
     terminalProviderSnapshotCapabilityRevision,
     terminalRetentionBudgetEnabled,
     terminalSshParkingEnabled,
-    workspaceSurfaces
+    workspaceSurfaceIds
   ])
 }
diff --git a/src/renderer/src/components/use-terminal-watcher-effects.ts b/src/renderer/src/components/use-terminal-watcher-effects.ts
index 9b80e964747..9e82b821c31 100644
--- a/src/renderer/src/components/use-terminal-watcher-effects.ts
+++ b/src/renderer/src/components/use-terminal-watcher-effects.ts
@@ -5,8 +5,9 @@ import {
   canWatcherCoverParkedTerminalTab,
   disposeAllParkedTerminalWatchers,
   pruneParkedTerminalWatchers,
-  syncParkedTerminalTabWatchers,
-  terminalWatcherLiveWorkspaceIds
+  syncParkedTerminalTabWatchersForWorkspaces,
+  terminalWatcherLiveWorkspaceIds,
+  type ParkedTerminalTabWatcherSyncEntry
 } from './terminal-pane/terminal-parked-tab-watchers'
 import { useAppStore } from '@/store'
 import { gateWorktreeAgentActivation } from '@/lib/worktree-agent-activation-gate'
@@ -40,36 +41,35 @@ export function useTerminalWatcherEffects(controller: TerminalColdActivationCont
     terminalStartupRestorationReady,
     terminalTitleSnapshotAuthorityEnabled,
     workspaceSessionReady,
-    workspaceSurfaces
+    workspaceSurfaceIds
   } = controller
 
   useEffect(() => {
-    pruneParkedTerminalWatchers(
-      terminalWatcherLiveWorkspaceIds(workspaceSurfaces.map((workspace) => workspace.id))
-    )
-    for (const workspace of workspaceSurfaces) {
+    pruneParkedTerminalWatchers(terminalWatcherLiveWorkspaceIds(workspaceSurfaceIds))
+    const syncEntriesByWorktreeId = new Map<string, ParkedTerminalTabWatcherSyncEntry>()
+    for (const workspaceId of workspaceSurfaceIds) {
       if (
         anyMountedWorktreeHasLayout &&
-        mountedWorktreeIdsRef.current.has(workspace.id) &&
-        getEffectiveLayoutForWorktree(workspace.id)
+        mountedWorktreeIdsRef.current.has(workspaceId) &&
+        getEffectiveLayoutForWorktree(workspaceId)
       ) {
         continue
       }
-      const tabs = tabsByWorktree[workspace.id] ?? []
+      const tabs = tabsByWorktree[workspaceId] ?? []
       const parkedTabIds = new Set<string>()
       let deferredTabIds: ReadonlySet<string> | null = null
-      if (!anyMountedWorktreeHasLayout && mountedWorktreeIdsRef.current.has(workspace.id)) {
-        const isVisible = activeView === 'terminal' && workspace.id === renderedActiveWorktreeId
+      if (!anyMountedWorktreeHasLayout && mountedWorktreeIdsRef.current.has(workspaceId)) {
+        const isVisible = activeView === 'terminal' && workspaceId === renderedActiveWorktreeId
         const shouldMeasureHiddenWorktree =
-          !isVisible && measurableBackgroundWorktreeIdsRef.current.has(workspace.id)
+          !isVisible && measurableBackgroundWorktreeIdsRef.current.has(workspaceId)
         const parked =
           !isVisible &&
           !shouldMeasureHiddenWorktree &&
-          effectiveParkedTerminalWorktreeIds.has(workspace.id)
+          effectiveParkedTerminalWorktreeIds.has(workspaceId)
         if (parked) {
           for (const tab of tabs) {
             const activityTerminalPortal = findActivityTerminalPortal(activityTerminalPortals, {
-              worktreeId: workspace.id,
+              worktreeId: workspaceId,
               tabId: tab.id
             })
             if (!activityTerminalPortal && !evictionExemptTerminalTabIds.has(tab.id)) {
@@ -77,15 +77,14 @@ export function useTerminalWatcherEffects(controller: TerminalColdActivationCont
             }
           }
         }
-        deferredTabIds =
-          activationDeferredMountTabIdsByWorktreeRef.current.get(workspace.id) ?? null
+        deferredTabIds = activationDeferredMountTabIdsByWorktreeRef.current.get(workspaceId) ?? null
         for (const tab of tabs) {
           if (
             deferredTabIds?.has(tab.id) &&
             !parkedTabIds.has(tab.id) &&
-            canWatcherCoverParkedTerminalTab(workspace.id, tab) &&
+            canWatcherCoverParkedTerminalTab(workspaceId, tab) &&
             !findActivityTerminalPortal(activityTerminalPortals, {
-              worktreeId: workspace.id,
+              worktreeId: workspaceId,
               tabId: tab.id
             })
           ) {
@@ -93,13 +92,13 @@ export function useTerminalWatcherEffects(controller: TerminalColdActivationCont
           }
         }
       }
-      syncParkedTerminalTabWatchers({
-        worktreeId: workspace.id,
+      syncEntriesByWorktreeId.set(workspaceId, {
         tabs,
         parkedTabIds,
         ...(deferredTabIds ? { restoreTitleOnStartTabIds: deferredTabIds } : {})
       })
     }
+    syncParkedTerminalTabWatchersForWorkspaces(syncEntriesByWorktreeId)
     // oxlint-disable-next-line react-hooks/exhaustive-deps -- controller refs preserve their original stable identities.
   }, [
     activeTabId,
@@ -118,7 +117,7 @@ export function useTerminalWatcherEffects(controller: TerminalColdActivationCont
     terminalParkingEnabled,
     terminalTitleSnapshotAuthorityEnabled,
     workspaceSessionReady,
-    workspaceSurfaces
+    workspaceSurfaceIds
   ])
   useEffect(() => () => disposeAllParkedTerminalWatchers(), [])
 
diff --git a/src/renderer/src/components/use-terminal-workspace-foundation.ts b/src/renderer/src/components/use-terminal-workspace-foundation.ts
index 9b365e9d885..61726fa9643 100644
--- a/src/renderer/src/components/use-terminal-workspace-foundation.ts
+++ b/src/renderer/src/components/use-terminal-workspace-foundation.ts
@@ -6,6 +6,7 @@ import { useWorktreeMap } from '../store/selectors'
 import { getResolvedExecutionHostIdForWorktree } from '@/lib/resolved-worktree-execution-host'
 import type { WorktreeTabBucketProjection } from '@/lib/worktree-tab-bucket-projection'
 import { projectWorkspaceSurfaces } from './workspace-surface-projection'
+import { useReusedArrayIdentity } from './sidebar/worktree-list/listing/use-reused-array-identity'
 import { selectPairedRuntimeParkingEnvironmentIds } from './terminal-pane/terminal-hidden-view-parking'
 import { createTerminalWorktreeTopologyProjection } from './terminal-pane/terminal-hidden-worktree-retention'
 import { isMainTerminalSideEffectAuthorityForPty } from './terminal-pane/terminal-side-effect-facts-handler'
@@ -46,6 +47,17 @@ export function useTerminalWorkspaceFoundation() {
       }),
     [worktreesById, folderWorkspaces, renderedActiveWorktreeId, activeFolderSurfaceHostId]
   )
+  // Why split the ids out: every mount/park/activation pass reads only `.id`, but
+  // the surface array is re-identified on any worktree write. Reusing the previous
+  // id-array identity keeps those effects and their per-fire Sets from re-firing
+  // when the workspace set itself did not change.
+  const workspaceSurfaceIds = useReusedArrayIdentity(
+    useMemo(() => workspaceSurfaces.map((workspace) => workspace.id), [workspaceSurfaces])
+  )
+  const workspaceSurfaceIdSet = useMemo<ReadonlySet<string>>(
+    () => new Set(workspaceSurfaceIds),
+    [workspaceSurfaceIds]
+  )
   const activeView = useAppStore((state) => state.activeView)
   // Why: terminal titles are leaf chrome. The root host only subscribes to
   // mount/parking semantics; a real transition publishes fresh tab objects,
@@ -88,6 +100,8 @@ export function useTerminalWorkspaceFoundation() {
     terminalWorktreeParkingTimersRef,
     folderWorkspaces,
     workspaceSurfaces,
+    workspaceSurfaceIds,
+    workspaceSurfaceIdSet,
     activeWorktreeId,
     renderedActiveWorktreeId,
     activeWorktreeDeferralHostId,

From 084dbbc3b3d0b29e5edc8b7a0a344d9d0508bd01 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:05:16 -0700
Subject: [PATCH 63/92] perf(persistence): build the state file once per save
 instead of seven times (#18161)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Every debounced save stringified the full persisted state, then ran two
`String.replace` passes per secret sentinel — one for the on-disk payload, one
for the guard hash. Each replace returns a rope the next one has to flatten
before it can search, so three sentinels cost seven flattened copies of a
4.65 MB state (a two-byte V8 string, ~8.9 MB each), and the state was then
UTF-8 encoded twice more: once inside `sha1.update(string)` and again inside
`handle.writeFile(payload, 'utf-8')`.

`applySecretSentinelSubstitutions` walks the state once with a single
alternation regex, encodes each literal run to a Buffer exactly once, and feeds
those same buffers to both the payload and the hash. Measured on the author's
4.65 MB store with three live secret slots: 48.8 MB -> 17.9 MB allocated per
save, 26.6 MB -> 0 of large_object_space churn, and 22.1 -> 15.1 ms (min) /
32.3 -> 16.9 ms (median) for build+hash+encode. Bytes on disk and the guard
hash are proven identical to the previous loop.

Separately, non-local host session partitions carried stale replicas of the
`browserUrlHistory` global — 589,807 bytes, 12.7% of the file — that neither
the split (which writes globals only to 'local') nor the merge (which reads
them only from 'local' unless local has none) can ever reach. The load path now
drops them when the local slice already holds the field. Only the two history
globals are dropped: the rest are read out of every partition by the worktree
ownership sweep or the mobile/runtime projections.
---
 src/main/durable-file-write.ts                |   9 +-
 .../normalize-loaded-profile-state.ts         |  11 +-
 .../normalize-loaded-state-collections.ts     |   4 +-
 .../loading-store/primary-state-writes.ts     |   3 +-
 .../secret-sentinel-substitution.test.ts      | 184 ++++++++++++++++++
 .../secret-sentinel-substitution.ts           |  78 ++++++++
 .../state-serialization-secret-handling.ts    |  33 ++--
 .../state-write-round-trip.test.ts            | 131 +++++++++++++
 .../workspace-session-partitions.test.ts      | 141 ++++++++++++++
 .../workspace-session-partitions.ts           |  41 +++-
 .../lib/workspace-session-host-contention.ts  |   2 +-
 .../lib/workspace-session-host-split.test.ts  |  43 ++++
 .../src/lib/workspace-session-host-split.ts   |   2 +-
 .../workspace-session-host-field-ownership.ts |   2 +-
 14 files changed, 656 insertions(+), 28 deletions(-)
 create mode 100644 src/main/persistence/loading-store/secret-sentinel-substitution.test.ts
 create mode 100644 src/main/persistence/loading-store/secret-sentinel-substitution.ts
 create mode 100644 src/main/persistence/loading-store/state-write-round-trip.test.ts
 create mode 100644 src/main/persistence/loading-store/workspace-session-partitions.test.ts
 rename src/{renderer/src/lib => shared}/workspace-session-host-field-ownership.ts (97%)

diff --git a/src/main/durable-file-write.ts b/src/main/durable-file-write.ts
index 2f40b0881e8..83b0eabc5ed 100644
--- a/src/main/durable-file-write.ts
+++ b/src/main/durable-file-write.ts
@@ -187,10 +187,15 @@ export async function removeStaleDurableWriteTempFiles(
 }
 
 /** Synchronous counterpart for quit and crash paths that cannot await. */
-export function writeFileDurableSync(tmpPath: string, finalPath: string, payload: string): void {
+export function writeFileDurableSync(
+  tmpPath: string,
+  finalPath: string,
+  payload: string | Uint8Array
+): void {
   let renamed = false
   try {
-    writeFileSync(tmpPath, payload, 'utf-8')
+    // A Uint8Array payload is written verbatim; a string still defaults to UTF-8.
+    writeFileSync(tmpPath, payload)
     const fd = openSync(tmpPath, 'r+')
     try {
       fsyncSync(fd)
diff --git a/src/main/persistence/loading-store/normalize-loaded-profile-state.ts b/src/main/persistence/loading-store/normalize-loaded-profile-state.ts
index 2286e40d54b..39d625c525a 100644
--- a/src/main/persistence/loading-store/normalize-loaded-profile-state.ts
+++ b/src/main/persistence/loading-store/normalize-loaded-profile-state.ts
@@ -35,6 +35,8 @@ export function normalizeLoadedProfileState(
   const { defaults, migratedExternalVisibility, osc52ClipboardNoticePending } = terminal
   const { normalizedOnboarding, normalizedProjectGroups, loadedCompactWorktreeCards } = profile
   const projectCatalog = normalizeLoadedProjectCatalog(parsed, markNeedsSave)
+  // Ordered: the host partitions drop the global fields this slice already owns.
+  const workspaceSession = normalizeLoadedLocalSession(parsed, defaults, markNeedsSave)
 
   return {
     ...defaults,
@@ -69,9 +71,14 @@ export function normalizeLoadedProfileState(
       markNeedsSave
     ),
     // Why: volatile schema; zod-validate workspaceSession at read so a bad payload falls to defaults, not a renderer crash.
-    workspaceSession: normalizeLoadedLocalSession(parsed, defaults, markNeedsSave),
+    workspaceSession,
     // Why: per-host session partitions, validated independently; 'local' stays in workspaceSession for downgrade compat.
-    workspaceSessionsByHostId: normalizeLoadedHostSessions(parsed, defaults, markNeedsSave),
+    workspaceSessionsByHostId: normalizeLoadedHostSessions(
+      parsed,
+      defaults,
+      workspaceSession,
+      markNeedsSave
+    ),
     sshTargets: (parsed.sshTargets ?? []).map(normalizeSshTarget),
     deletedSshConfigAliases: Array.isArray(parsed.deletedSshConfigAliases)
       ? parsed.deletedSshConfigAliases.filter((alias): alias is string => typeof alias === 'string')
diff --git a/src/main/persistence/loading-store/normalize-loaded-state-collections.ts b/src/main/persistence/loading-store/normalize-loaded-state-collections.ts
index 2b133d486b7..16c5b424def 100644
--- a/src/main/persistence/loading-store/normalize-loaded-state-collections.ts
+++ b/src/main/persistence/loading-store/normalize-loaded-state-collections.ts
@@ -41,11 +41,13 @@ export function normalizeLoadedLocalSession(
 export function normalizeLoadedHostSessions(
   parsed: PersistedState,
   defaults: PersistedState,
+  localSession: WorkspaceSessionState,
   markNeedsSave: () => void
 ): PersistedState['workspaceSessionsByHostId'] {
   const { partitions, repaired } = parseWorkspaceSessionsByHostId(
     parsed.workspaceSessionsByHostId,
-    defaults.workspaceSession
+    defaults.workspaceSession,
+    localSession
   )
   if (repaired) {
     // Why: salvage repairs only the in-memory partitions; without a save the corrupt entries stay on disk and get re-dropped every launch.
diff --git a/src/main/persistence/loading-store/primary-state-writes.ts b/src/main/persistence/loading-store/primary-state-writes.ts
index 9d6e476ebe5..c112b4a9ba0 100644
--- a/src/main/persistence/loading-store/primary-state-writes.ts
+++ b/src/main/persistence/loading-store/primary-state-writes.ts
@@ -161,7 +161,8 @@ export async function writeToDiskAsync(owner: PrimaryStateWriteOperations): Prom
     // Why: fsync before rename, then fsync the directory; see writeFileDurable.
     const handle = await open(tmpFile, 'w')
     try {
-      await handle.writeFile(payload, 'utf-8')
+      // Already UTF-8 bytes: passing the string here would re-encode the whole state on the main thread.
+      await handle.writeFile(payload)
       await handle.sync()
     } finally {
       await handle.close()
diff --git a/src/main/persistence/loading-store/secret-sentinel-substitution.test.ts b/src/main/persistence/loading-store/secret-sentinel-substitution.test.ts
new file mode 100644
index 00000000000..e58d0280bae
--- /dev/null
+++ b/src/main/persistence/loading-store/secret-sentinel-substitution.test.ts
@@ -0,0 +1,184 @@
+/**
+ * The bar for this change is "the bytes on disk did not move". Every case below runs the exact
+ * loop `applySecretSentinelSubstitutions` replaced — reproduced in `previousImplementation` — and
+ * compares payload bytes and guard hash, because a drifting hash silently disables the no-op write
+ * guard and a drifting payload is corrupted persisted state.
+ */
+import { createHash, randomUUID } from 'node:crypto'
+import { describe, expect, it } from 'vitest'
+import {
+  applySecretSentinelSubstitutions,
+  type SecretSentinelSubstitution
+} from './secret-sentinel-substitution'
+
+/** Verbatim from state-serialization-secret-handling.ts before this change. */
+function previousImplementation(
+  serialized: string,
+  secretSubs: readonly SecretSentinelSubstitution[],
+  degradedPrefix: string
+): { payload: Buffer; stateHash: string } {
+  let payload = serialized
+  let hashInput = serialized
+  for (const { sentinel, blob, hashValue } of secretSubs) {
+    const escapedSentinel = JSON.stringify(sentinel).slice(1, -1)
+    payload = payload.replace(escapedSentinel, () => JSON.stringify(blob).slice(1, -1))
+    hashInput = hashInput.replace(escapedSentinel, () => JSON.stringify(hashValue).slice(1, -1))
+  }
+  const stateHash = createHash('sha1').update(degradedPrefix).update(hashInput).digest('hex')
+  // `handle.writeFile(payload, 'utf-8')` is what turned the string into bytes.
+  return { payload: Buffer.from(payload, 'utf8'), stateHash }
+}
+
+function expectIdenticalToPrevious(
+  serialized: string,
+  subs: readonly SecretSentinelSubstitution[],
+  degradedPrefix = ''
+): void {
+  const before = previousImplementation(serialized, subs, degradedPrefix)
+  const after = applySecretSentinelSubstitutions(serialized, subs, degradedPrefix)
+  expect(after.payload.equals(before.payload)).toBe(true)
+  expect(after.stateHash).toBe(before.stateHash)
+}
+
+function sentinel(): string {
+  return `orca-secret-slot-${randomUUID()}`
+}
+
+describe('applySecretSentinelSubstitutions', () => {
+  it('produces bytes and a hash identical to the previous implementation', () => {
+    const subs: SecretSentinelSubstitution[] = [
+      { sentinel: sentinel(), blob: 'djEwY2lwaGVy', hashValue: 'cookie-value' },
+      {
+        sentinel: sentinel(),
+        // Regex-special *and* JSON-escapable, which is the pair that breaks a naive rewrite:
+        // `$&` would splice the match back in under string-form replace, and the backslash and
+        // quote have to survive `JSON.stringify(...).slice(1, -1)` unchanged.
+        blob: 'A+/=$&$1$`\\x "quoted" |.*?[](){}^',
+        hashValue: 'http://proxy.example:8080/?a=b&c=$&'
+      },
+      { sentinel: sentinel(), blob: '', hashValue: 'https://kagi.com/session?t=abc' }
+    ]
+    const state = {
+      settings: { opencodeSessionCookie: subs[0].sentinel, httpProxyUrl: subs[1].sentinel },
+      ui: { browserKagiSessionLink: subs[2].sentinel },
+      // Adjacent content that must not shift: a near-miss prefix, and JSON escapes either side.
+      noise: ['orca-secret-slot-', 'a\\b"c\n\t', subs[0].sentinel.slice(0, -1)]
+    }
+    expectIdenticalToPrevious(JSON.stringify(state), subs)
+  })
+
+  it('stays identical when the state holds multi-byte and escaped characters', () => {
+    const subs: SecretSentinelSubstitution[] = [
+      { sentinel: sentinel(), blob: 'blob-é', hashValue: 'plain-é' },
+      { sentinel: sentinel(), blob: '😀', hashValue: '中文' }
+    ]
+    const state = {
+      // Segment boundaries land next to these, so a wrong split would corrupt the encode.
+      before: 'é中文😀',
+      a: subs[0].sentinel,
+      between: '😀

',
+      b: subs[1].sentinel,
+      after: '😀'
+    }
+    expectIdenticalToPrevious(JSON.stringify(state), subs)
+  })
+
+  it('stays identical with no substitutions and with the degraded-storage prefix', () => {
+    const state = JSON.stringify({ settings: { httpProxyUrl: '' }, big: 'x'.repeat(4096) })
+    expectIdenticalToPrevious(state, [])
+    expectIdenticalToPrevious(state, [], 'safeStorage-degraded\0')
+
+    const subs = [{ sentinel: sentinel(), blob: 'b', hashValue: 'h' }]
+    expectIdenticalToPrevious(
+      JSON.stringify({ s: subs[0].sentinel }),
+      subs,
+      'safeStorage-degraded\0'
+    )
+  })
+
+  it('escapes regex metacharacters in the sentinel itself', () => {
+    // Not reachable from a UUID sentinel, but the alternation must not be able to become a pattern.
+    const subs = [{ sentinel: 'a.b*c(d)|e[f]', blob: 'BLOB', hashValue: 'HASH' }]
+    const serialized = JSON.stringify({ real: subs[0].sentinel, decoy: 'axbxxcXdX_eXfX' })
+    expectIdenticalToPrevious(serialized, subs)
+    expect(
+      applySecretSentinelSubstitutions(serialized, subs, '').payload.toString('utf8')
+    ).toContain('axbxxcXdX_eXfX')
+  })
+
+  it('substitutes every occurrence when a sentinel repeats', () => {
+    // Cannot happen today (a sentinel is a UUID minted after the state is assembled, so it appears
+    // exactly once), but the old first-match-only `String.replace` would have written a raw
+    // sentinel to disk in place of a secret if it ever did. The alternation is global instead.
+    const subs = [{ sentinel: sentinel(), blob: 'CIPHER', hashValue: 'PLAIN' }]
+    const serialized = JSON.stringify({ a: subs[0].sentinel, b: subs[0].sentinel })
+    const { payload } = applySecretSentinelSubstitutions(serialized, subs, '')
+    expect(payload.toString('utf8')).toBe(JSON.stringify({ a: 'CIPHER', b: 'CIPHER' }))
+    expect(payload.toString('utf8')).not.toContain(subs[0].sentinel)
+  })
+
+  it('copies and UTF-8 encodes the full state once, not once per sentinel per side', () => {
+    const subs: SecretSentinelSubstitution[] = Array.from({ length: 3 }, () => ({
+      sentinel: sentinel(),
+      blob: 'CIPHERTEXT',
+      hashValue: 'plaintext'
+    }))
+    const serialized = JSON.stringify({
+      pad: 'x'.repeat(200_000),
+      a: subs[0].sentinel,
+      b: subs[1].sentinel,
+      c: subs[2].sentinel
+    })
+    const FULL_STATE = 100_000
+
+    // Both costs are observable at their sources: a `String.replace` whose receiver is the whole
+    // state allocates another copy of it, and every string handed to `Buffer.from` or `hash.update`
+    // is one full UTF-8 encode pass on the main thread.
+    const counted = (run: () => unknown): { fullStateReplaces: number; encodedChars: number } => {
+      const realReplace = String.prototype.replace
+      const realBufferFrom = Buffer.from
+      const hashProto = Object.getPrototypeOf(createHash('sha1')) as {
+        update: (...args: unknown[]) => unknown
+      }
+      const realUpdate = hashProto.update
+      const counts = { fullStateReplaces: 0, encodedChars: 0 }
+      String.prototype.replace = function (this: string, ...args: unknown[]) {
+        if (this.length >= FULL_STATE) {
+          counts.fullStateReplaces++
+        }
+        return realReplace.apply(this, args as never)
+      } as typeof String.prototype.replace
+      Buffer.from = function (...args: unknown[]) {
+        if (typeof args[0] === 'string') {
+          counts.encodedChars += args[0].length
+        }
+        return (realBufferFrom as (...a: unknown[]) => Buffer).apply(Buffer, args)
+      } as typeof Buffer.from
+      hashProto.update = function (this: unknown, ...args: unknown[]) {
+        if (typeof args[0] === 'string') {
+          counts.encodedChars += args[0].length
+        }
+        return realUpdate.apply(this, args)
+      }
+      try {
+        run()
+      } finally {
+        String.prototype.replace = realReplace
+        Buffer.from = realBufferFrom
+        hashProto.update = realUpdate
+      }
+      return counts
+    }
+
+    const before = counted(() => previousImplementation(serialized, subs, ''))
+    const after = counted(() => applySecretSentinelSubstitutions(serialized, subs, ''))
+
+    // Two `String.replace` calls over the whole state per sentinel — payload and hash input.
+    expect(before.fullStateReplaces).toBe(subs.length * 2)
+    expect(after.fullStateReplaces).toBe(0)
+    // The old path encoded the state twice: once for sha1, once for the file write.
+    expect(before.encodedChars).toBeGreaterThan(serialized.length * 1.9)
+    expect(after.encodedChars).toBeLessThan(serialized.length * 1.1)
+    expect(after.encodedChars).toBeGreaterThan(serialized.length * 0.9)
+  })
+})
diff --git a/src/main/persistence/loading-store/secret-sentinel-substitution.ts b/src/main/persistence/loading-store/secret-sentinel-substitution.ts
new file mode 100644
index 00000000000..afcdddafa77
--- /dev/null
+++ b/src/main/persistence/loading-store/secret-sentinel-substitution.ts
@@ -0,0 +1,78 @@
+import { createHash } from 'node:crypto'
+import { escapeRegex } from '../../../shared/string-utils'
+
+export type SecretSentinelSubstitution = {
+  /** The `orca-secret-slot-<uuid>` placeholder standing in the serialized state. */
+  sentinel: string
+  /** What the on-disk payload gets: the ciphertext. */
+  blob: string
+  /** What the guard hash gets: a value stable across non-deterministic encryption. */
+  hashValue: string
+}
+
+/**
+ * Replace every secret sentinel in `serialized` in ONE pass, producing the on-disk bytes and the
+ * guard hash from the same encoded segments.
+ *
+ * Why not the obvious `payload.replace(...)` / `hashInput.replace(...)` loop it replaces: each
+ * `String.replace` returns a rope that the *next* `replace` has to flatten before it can search, so
+ * N sentinels cost 2N-1 flattened copies of the whole multi-MB state, plus one more per side when
+ * `hash.update` and the file write finally consume them. Measured on a 4.65 MB store with three
+ * sentinels: 7 full-state string allocations, 62 MB of V8 heap, 27 MB of it in large_object_space.
+ *
+ * Here the state is walked once, each literal run is UTF-8 encoded exactly once, and those same
+ * buffers feed both the payload and the hash — 1 full-state string, 1 encode.
+ *
+ * Byte-for-byte identical output to the loop: both sides read the sentinel in its JSON-escaped
+ * form, the replacements are the JSON-escaped `blob`/`hashValue`, and the hash sees the same byte
+ * sequence it saw when it was handed one concatenated string.
+ */
+export function applySecretSentinelSubstitutions(
+  serialized: string,
+  substitutions: readonly SecretSentinelSubstitution[],
+  degradedPrefix: string
+): { payload: Buffer; stateHash: string } {
+  const hash = createHash('sha1').update(degradedPrefix)
+  if (substitutions.length === 0) {
+    const payload = Buffer.from(serialized, 'utf8')
+    return { payload, stateHash: hash.update(payload).digest('hex') }
+  }
+
+  const replacementBySentinel = new Map<string, { blob: Buffer; hashValue: Buffer }>()
+  const alternatives: string[] = []
+  for (const { sentinel, blob, hashValue } of substitutions) {
+    // Preserved from the loop this replaces: both the search key and the replacements are the
+    // JSON-escaped forms, because that is what `serialized` actually contains.
+    const escapedSentinel = JSON.stringify(sentinel).slice(1, -1)
+    if (replacementBySentinel.has(escapedSentinel)) {
+      continue
+    }
+    alternatives.push(escapeRegex(escapedSentinel))
+    replacementBySentinel.set(escapedSentinel, {
+      blob: Buffer.from(JSON.stringify(blob).slice(1, -1), 'utf8'),
+      hashValue: Buffer.from(JSON.stringify(hashValue).slice(1, -1), 'utf8')
+    })
+  }
+
+  // Global, though a sentinel is a UUID minted after the state was assembled and so occurs exactly
+  // once: a single pass that substitutes every occurrence cannot leave one behind on disk.
+  const pattern = new RegExp(alternatives.join('|'), 'g')
+  const chunks: Buffer[] = []
+  let cursor = 0
+  let match: RegExpExecArray | null
+  while ((match = pattern.exec(serialized)) !== null) {
+    // Non-null: the alternation is built from exactly the map's keys.
+    const replacement = replacementBySentinel.get(match[0])!
+    // A sliced substring, so this does not copy the state; the encode below is its only pass.
+    const literal = Buffer.from(serialized.slice(cursor, match.index), 'utf8')
+    chunks.push(literal, replacement.blob)
+    hash.update(literal)
+    hash.update(replacement.hashValue)
+    cursor = match.index + match[0].length
+  }
+  const tail = Buffer.from(serialized.slice(cursor), 'utf8')
+  chunks.push(tail)
+  hash.update(tail)
+
+  return { payload: Buffer.concat(chunks), stateHash: hash.digest('hex') }
+}
diff --git a/src/main/persistence/loading-store/state-serialization-secret-handling.ts b/src/main/persistence/loading-store/state-serialization-secret-handling.ts
index c9d81f071a5..61689ea0f13 100644
--- a/src/main/persistence/loading-store/state-serialization-secret-handling.ts
+++ b/src/main/persistence/loading-store/state-serialization-secret-handling.ts
@@ -1,4 +1,4 @@
-import { createHash, randomUUID } from 'node:crypto'
+import { randomUUID } from 'node:crypto'
 import type { PersistedState } from '../../../shared/persisted-state-types'
 import { collectFolderWorkspaceDiffComments } from '../../folder-workspace-diff-comments'
 import {
@@ -8,6 +8,10 @@ import {
 } from '../../protected-secret-persistence'
 import { stripRetiredGlobalSettings } from '../applying-settings/terminal-settings-migrations'
 
+import {
+  applySecretSentinelSubstitutions,
+  type SecretSentinelSubstitution
+} from './secret-sentinel-substitution'
 import type { StoreRuntimeState } from './store-runtime-state'
 
 type StateSerializationSecretHandlingOperationsRuntime = Pick<
@@ -24,7 +28,7 @@ export class StateSerializationSecretHandlingOperations {
   }
 
   buildStateToSave(): {
-    payload: string
+    payload: Buffer
     stateHash: string
     protectedSecretUpdates: ProtectedSecretRetentionUpdate[]
   } {
@@ -37,7 +41,7 @@ export class StateSerializationSecretHandlingOperations {
     // on deterministic-IV platforms (macOS/legacy-Linux OSCrypt). A per-slot
     // random UUID can't occur anywhere else in the serialized state (the user
     // sets their data before it is minted), so it appears exactly once.
-    const secretSubs: { sentinel: string; blob: string; hashValue: string }[] = []
+    const secretSubs: SecretSentinelSubstitution[] = []
     const protectedSecretUpdates: ProtectedSecretRetentionUpdate[] = []
     let protectedStorageDegraded = false
     const encryptToSentinel = (slot: string, plaintext: string): string => {
@@ -105,21 +109,14 @@ export class StateSerializationSecretHandlingOperations {
     // Why compact: ~20% fewer bytes and less serialize time; all readers JSON.parse so formatting is irrelevant.
     // One full-state stringify; secret slots currently hold sentinels.
     const serialized = JSON.stringify(stateToSave)
-    // Substitute each unique sentinel exactly once: ciphertext for the on-disk
-    // payload, a stable normalized value for the guard hash. Function-form
-    // replacement keeps `$` inert; both sides read the sentinel as JSON-escaped
-    // in `serialized`, so each replace is byte-for-byte position-exact.
-    let payload = serialized
-    let hashInput = serialized
-    for (const { sentinel, blob, hashValue } of secretSubs) {
-      const escapedSentinel = JSON.stringify(sentinel).slice(1, -1)
-      payload = payload.replace(escapedSentinel, () => JSON.stringify(blob).slice(1, -1))
-      hashInput = hashInput.replace(escapedSentinel, () => JSON.stringify(hashValue).slice(1, -1))
-    }
-    const stateHash = createHash('sha1')
-      .update(protectedStorageDegraded ? 'safeStorage-degraded\0' : '')
-      .update(hashInput)
-      .digest('hex')
+    // Substitute each unique sentinel: ciphertext for the on-disk payload, a stable normalized
+    // value for the guard hash. One pass builds both, so the multi-MB state is never copied per
+    // sentinel and never encoded twice.
+    const { payload, stateHash } = applySecretSentinelSubstitutions(
+      serialized,
+      secretSubs,
+      protectedStorageDegraded ? 'safeStorage-degraded\0' : ''
+    )
     return { payload, stateHash, protectedSecretUpdates }
   }
 }
diff --git a/src/main/persistence/loading-store/state-write-round-trip.test.ts b/src/main/persistence/loading-store/state-write-round-trip.test.ts
new file mode 100644
index 00000000000..ee7f26feb3e
--- /dev/null
+++ b/src/main/persistence/loading-store/state-write-round-trip.test.ts
@@ -0,0 +1,131 @@
+/**
+ * The write path now hands the file a Buffer it built in one pass instead of a string it rebuilt
+ * per secret. Drives the real `Store` end to end — encrypted settings, a local session and a remote
+ * host partition — and reloads from the file it actually wrote, because the failure this guards
+ * against (a mis-sliced segment, a re-encoded payload, a dropped sentinel) is invisible until
+ * something reads the bytes back.
+ */
+import { mkdtempSync, readFileSync, realpathSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import type { WorkspaceSessionState } from '../../../shared/workspace-session-state-types'
+
+vi.mock('electron', () => ({
+  app: {
+    getPath: () => tmpdir(),
+    getName: () => 'orca-test',
+    getVersion: () => '0.0.0-test',
+    isPackaged: false,
+    on: () => {},
+    whenReady: () => Promise.resolve()
+  },
+  safeStorage: {
+    // Encryption ON, so the secret slots really do mint sentinels and the substitution pass runs.
+    isEncryptionAvailable: () => true,
+    encryptString: (value: string) => Buffer.from(`enc:${value}`),
+    decryptString: (value: Buffer) => value.toString().slice(4)
+  },
+  ipcMain: { on: () => {}, handle: () => {} },
+  BrowserWindow: { getAllWindows: () => [] }
+}))
+
+const { Store } = await import('./store')
+
+const HOST_ID = 'ssh:user@host'
+
+const stores: InstanceType<typeof Store>[] = []
+afterEach(() => {
+  for (const store of stores.splice(0)) {
+    store.flush()
+  }
+  vi.restoreAllMocks()
+})
+
+function openStore(dataFile: string): InstanceType<typeof Store> {
+  const store = new Store({ dataFile })
+  stores.push(store)
+  return store
+}
+
+function session(activeTabId: string): WorkspaceSessionState {
+  return {
+    activeRepoId: 'repo-1',
+    // Left null: the load path's deregistered-repo sweep nulls an active worktree whose repo is
+    // not registered, which would mask what this test is actually about.
+    activeWorktreeId: null,
+    activeTabId,
+    tabsByWorktree: {},
+    terminalLayoutsByTabId: {},
+    // Non-ASCII on purpose: a byte-offset mistake in the encode shows up here first.
+    browserUrlHistory: [
+      {
+        url: 'https://example.test/é😀',
+        normalizedUrl: 'https://example.test/é😀',
+        title: '中文 title',
+        lastVisitedAt: 17,
+        visitCount: 3
+      }
+    ]
+  } as WorkspaceSessionState
+}
+
+describe('persisted state survives a save/load round trip', () => {
+  it('reloads settings, secrets and both session partitions unchanged', () => {
+    const dataFile = join(
+      realpathSync(mkdtempSync(join(tmpdir(), 'orca-store-round-trip-'))),
+      'orca-data.json'
+    )
+    const written = openStore(dataFile)
+    written.updateSettings({
+      // Three secret slots, i.e. three sentinels in one save — the case the old loop paid 7 copies for.
+      opencodeSessionCookie: 'cookie-é-value',
+      httpProxyUrl: 'http://proxy.example:8080/?a=b&c=$&'
+    })
+    written.updateUI({ browserKagiSessionLink: 'https://kagi.com/session?t=abc' })
+    written.setWorkspaceSession(session('local-tab'))
+    written.setWorkspaceSession(session('remote-tab'), HOST_ID)
+    written.flush()
+
+    const before = {
+      settings: written.getSettings(),
+      ui: written.getUI(),
+      local: written.getWorkspaceSession(),
+      remote: written.getWorkspaceSession(HOST_ID)
+    }
+
+    // The file is valid UTF-8 JSON and holds ciphertext, not the plaintext secrets.
+    const bytes = readFileSync(dataFile)
+    const onDisk = JSON.parse(bytes.toString('utf8'))
+    expect(onDisk.settings.opencodeSessionCookie).not.toBe('cookie-é-value')
+    expect(Buffer.from(onDisk.settings.opencodeSessionCookie, 'base64').toString('utf8')).toContain(
+      'cookie-é-value'
+    )
+    expect(bytes.toString('utf8')).not.toContain('orca-secret-slot-')
+
+    const reloaded = openStore(dataFile)
+    expect(reloaded.getSettings().opencodeSessionCookie).toBe(before.settings.opencodeSessionCookie)
+    expect(reloaded.getSettings().httpProxyUrl).toBe(before.settings.httpProxyUrl)
+    expect(reloaded.getUI().browserKagiSessionLink).toBe(before.ui.browserKagiSessionLink)
+    // `toMatchObject`: the load path spreads session defaults over what was written, so the
+    // reloaded slice is a superset. Exact deep equality is asserted on the second trip below.
+    expect(reloaded.getWorkspaceSession()).toMatchObject(before.local)
+    // The remote partition keeps everything it owns; only globals local already holds are dropped,
+    // and `browserUrlHistory` comes back at its default from the same spread as before.
+    expect(reloaded.getWorkspaceSession(HOST_ID).activeTabId).toBe('remote-tab')
+    expect(reloaded.getWorkspaceSession(HOST_ID).browserUrlHistory).toEqual([])
+
+    // Deep equality of the whole reloaded state, taken across a second round trip so the assertion
+    // is not comparing against the first load's one-time settings migrations.
+    reloaded.flush()
+    const bytesAfterReload = readFileSync(dataFile)
+    const again = openStore(dataFile)
+    expect(again.getSettings()).toEqual(reloaded.getSettings())
+    expect(again.getUI()).toEqual(reloaded.getUI())
+    expect(again.getWorkspaceSession()).toEqual(reloaded.getWorkspaceSession())
+    expect(again.getWorkspaceSession(HOST_ID)).toEqual(reloaded.getWorkspaceSession(HOST_ID))
+    // ...and the bytes are stable, so a quiet app is not rewriting a 4 MB file with new content.
+    again.flush()
+    expect(readFileSync(dataFile).equals(bytesAfterReload)).toBe(true)
+  })
+})
diff --git a/src/main/persistence/loading-store/workspace-session-partitions.test.ts b/src/main/persistence/loading-store/workspace-session-partitions.test.ts
new file mode 100644
index 00000000000..f9697f77997
--- /dev/null
+++ b/src/main/persistence/loading-store/workspace-session-partitions.test.ts
@@ -0,0 +1,141 @@
+/**
+ * Global session fields live in the 'local' slice. Copies of them inside a non-local host partition
+ * are legacy residue: the split never writes them there and the merge never reads them from there
+ * unless local has nothing. These tests pin the drop to exactly that condition, keep the renderer's
+ * merge landing on the same value either way, and re-check the two safety gates that decide which
+ * global fields may be dropped at all.
+ */
+import { describe, expect, it } from 'vitest'
+import { getDefaultWorkspaceSession } from '../../../shared/constants'
+import type { BrowserHistoryEntry } from '../../../shared/browser-workspace-types'
+import type { WorkspaceDocHistoryEntry } from '../../../shared/workspace-doc-history'
+import type { WorkspaceSessionState } from '../../../shared/workspace-session-state-types'
+import { WORKSPACE_SESSION_FIELD_OWNERSHIP } from '../../../shared/workspace-session-host-field-ownership'
+import { WORKSPACE_SESSION_WORKTREE_REFERENCE_KIND } from '../restoring-sessions/session-worktree-ownership'
+import {
+  HOST_PARTITION_REDUNDANT_GLOBAL_FIELDS,
+  parseWorkspaceSessionsByHostId
+} from './workspace-session-partitions'
+
+const HOST = 'ssh:target-1'
+
+function history(url: string): BrowserHistoryEntry[] {
+  return [{ url, normalizedUrl: url, title: url, lastVisitedAt: 1, visitCount: 1 }]
+}
+
+function docEntry(filePath: string): WorkspaceDocHistoryEntry {
+  return {
+    docLocation: { kind: 'workspace-doc', worktreeId: 'repo-1::/tmp/a', filePath },
+    title: filePath,
+    lastVisitedAt: 2,
+    visitCount: 1
+  }
+}
+
+function localSession(overrides: Partial<WorkspaceSessionState>): WorkspaceSessionState {
+  return { ...getDefaultWorkspaceSession(), ...overrides }
+}
+
+function parse(
+  raw: Record<string, unknown>,
+  local?: WorkspaceSessionState
+): Partial<Record<string, WorkspaceSessionState>> {
+  return parseWorkspaceSessionsByHostId(raw, getDefaultWorkspaceSession(), local).partitions
+}
+
+describe('HOST_PARTITION_REDUNDANT_GLOBAL_FIELDS', () => {
+  it('only lists fields that are global AND that no worktree-ownership pass follows', () => {
+    for (const field of HOST_PARTITION_REDUNDANT_GLOBAL_FIELDS) {
+      // Gate 1: the renderer's split/merge treat it as local-owned, so a non-local copy is dead.
+      expect(WORKSPACE_SESSION_FIELD_OWNERSHIP[field]).toBe('global')
+      // Gate 2: `collectPersistedSessionWorktreeOwners` and the deregistered-repo residue sweep
+      // walk EVERY partition through this table. Anything but 'none' means dropping the field
+      // could un-own a worktree and get its metadata pruned.
+      expect(WORKSPACE_SESSION_WORKTREE_REFERENCE_KIND[field]).toBe('none')
+    }
+  })
+})
+
+describe('parseWorkspaceSessionsByHostId global-field residue', () => {
+  it('drops a non-local global field the local slice already owns', () => {
+    const local = localSession({ browserUrlHistory: history('https://local.test') })
+    const partitions = parse(
+      {
+        [HOST]: {
+          ...getDefaultWorkspaceSession(),
+          browserUrlHistory: history('https://stale.test')
+        }
+      },
+      local
+    )
+    // Back to the default from the spread, not the 65 KB stale replica. The merge reads this field
+    // from local whenever local has it, so the renderer still sees `https://local.test`
+    // (`workspace-session-host-split.test.ts` pins that half of the contract).
+    expect(partitions[HOST]?.browserUrlHistory).toEqual([])
+  })
+
+  it('retains a non-local global field the local slice does NOT have', () => {
+    // `workspaceDocHistory` is optional and absent from the defaults, so local can genuinely lack
+    // it and the merge's fallback to another slice is live.
+    const local = localSession({})
+    expect(local.workspaceDocHistory).toBeUndefined()
+    const docs = [docEntry('/repo/remote.md')]
+    const partitions = parse(
+      { [HOST]: { ...getDefaultWorkspaceSession(), workspaceDocHistory: docs } },
+      local
+    )
+    // Retained, so the merge's "fall back to any slice that has it" path still finds a value.
+    expect(partitions[HOST]?.workspaceDocHistory).toEqual(docs)
+  })
+
+  it('drops that same field once the local slice does have it', () => {
+    const localDocs = [docEntry('/repo/local.md')]
+    const local = localSession({ workspaceDocHistory: localDocs })
+    const partitions = parse(
+      {
+        [HOST]: {
+          ...getDefaultWorkspaceSession(),
+          workspaceDocHistory: [docEntry('/repo/stale.md')]
+        }
+      },
+      local
+    )
+    expect(partitions[HOST]).not.toHaveProperty('workspaceDocHistory')
+    expect(local.workspaceDocHistory).toEqual(localDocs)
+  })
+
+  it('leaves worktree-referencing globals and host-owned fields alone', () => {
+    const local = localSession({
+      browserUrlHistory: history('https://local.test'),
+      activeWorktreeId: 'repo-1::/tmp/local',
+      activeTabId: 'local-tab'
+    })
+    const tabs = { 'repo-1::/tmp/a': [] }
+    const partitions = parse(
+      {
+        [HOST]: {
+          ...getDefaultWorkspaceSession(),
+          // A `'direct'` worktree reference the residue sweep reads out of every partition.
+          activeWorktreeId: 'repo-1::/tmp/a',
+          // Read on a partition by the mobile terminal projection.
+          activeTabId: 'remote-tab',
+          tabsByWorktree: tabs,
+          terminalTopologyRevisionByRepoId: { 'repo-1': 4 }
+        }
+      },
+      local
+    )
+    expect(partitions[HOST]?.activeWorktreeId).toBe('repo-1::/tmp/a')
+    expect(partitions[HOST]?.activeTabId).toBe('remote-tab')
+    expect(partitions[HOST]?.tabsByWorktree).toEqual(tabs)
+    expect(partitions[HOST]?.terminalTopologyRevisionByRepoId).toEqual({ 'repo-1': 4 })
+  })
+
+  it('is a no-op when no local slice is supplied', () => {
+    const stale = history('https://stale.test')
+    const partitions = parse({
+      [HOST]: { ...getDefaultWorkspaceSession(), browserUrlHistory: stale }
+    })
+    expect(partitions[HOST]?.browserUrlHistory).toEqual(stale)
+  })
+})
diff --git a/src/main/persistence/loading-store/workspace-session-partitions.ts b/src/main/persistence/loading-store/workspace-session-partitions.ts
index 50e9d4ae8cc..b6f78479dbf 100644
--- a/src/main/persistence/loading-store/workspace-session-partitions.ts
+++ b/src/main/persistence/loading-store/workspace-session-partitions.ts
@@ -17,11 +17,49 @@ export function workspaceSessionSalvageLogDetails(result: {
   }
 }
 
+/**
+ * Global fields belong to the 'local' slice: the split writes them only there and the merge reads
+ * them only from there. A copy inside a non-local partition is legacy residue no read can reach —
+ * stale `browserUrlHistory` replicas alone were 589 KB, 12.7% of a 4.65 MB store, rewritten on
+ * every save and reparsed on every launch.
+ *
+ * Deliberately NOT every field in `GLOBAL_WORKSPACE_SESSION_FIELDS`. Two separate gates disqualify
+ * the rest, and both are load-bearing:
+ *  - `activeWorktreeId` and `activeWorkspaceKey` are `'direct'` in
+ *    `WORKSPACE_SESSION_WORKTREE_REFERENCE_KIND`, and both `collectPersistedSessionWorktreeOwners`
+ *    and the deregistered-repo residue sweep read them out of EVERY partition. Dropping one
+ *    un-owns a worktree, and an un-owned worktree gets its metadata pruned.
+ *  - `activeTabId`, `activeConnectionIdsAtShutdown` and `activeRepoId` have live main-side readers
+ *    on a partition: `isPersistedTerminalLeafActive` falls back to `activeTabId` for the mobile
+ *    projection, and the runtime attach-window handoff unions `activeConnectionIdsAtShutdown`.
+ *
+ * `workspace-session-partitions.test.ts` re-checks both gates for every field listed here.
+ */
+export const HOST_PARTITION_REDUNDANT_GLOBAL_FIELDS = [
+  'browserUrlHistory',
+  'workspaceDocHistory'
+] as const satisfies readonly (keyof WorkspaceSessionState)[]
+
+/** Dropped only where local already holds the field — exactly when the merge's fallback to another
+ *  slice cannot fire. Runs before the defaults spread, so a field the type requires comes back at
+ *  its default rather than going missing. */
+function dropRedundantGlobalFields(
+  slice: Partial<WorkspaceSessionState>,
+  local: WorkspaceSessionState | undefined
+): void {
+  for (const field of HOST_PARTITION_REDUNDANT_GLOBAL_FIELDS) {
+    if (local?.[field] !== undefined) {
+      delete slice[field]
+    }
+  }
+}
+
 /** Normalize non-'local' host partitions; 'local' (the legacy workspaceSession blob) is dropped so the two surfaces never diverge.
  *  Each partition is zod-validated independently, so one corrupt host drops to defaults without taking out the others. Idempotent. */
 export function parseWorkspaceSessionsByHostId(
   raw: unknown,
-  defaults: WorkspaceSessionState
+  defaults: WorkspaceSessionState,
+  localSession?: WorkspaceSessionState
 ): { partitions: Partial<Record<ExecutionHostId, WorkspaceSessionState>>; repaired: boolean } {
   if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
     return { partitions: {}, repaired: raw !== undefined }
@@ -50,6 +88,7 @@ export function parseWorkspaceSessionsByHostId(
       )
       repaired = true
     }
+    dropRedundantGlobalFields(result.value, localSession)
     partitions[hostId] = { ...defaults, ...result.value }
   }
   return { partitions, repaired }
diff --git a/src/renderer/src/lib/workspace-session-host-contention.ts b/src/renderer/src/lib/workspace-session-host-contention.ts
index 51d09027200..652678e24a1 100644
--- a/src/renderer/src/lib/workspace-session-host-contention.ts
+++ b/src/renderer/src/lib/workspace-session-host-contention.ts
@@ -10,7 +10,7 @@ import {
   getWorktreeIdFromHostIdentity,
   isWorktreeHostIdentity
 } from '../../../shared/worktree/host-qualified-identity'
-import { WORKSPACE_SESSION_FIELD_OWNERSHIP } from './workspace-session-host-field-ownership'
+import { WORKSPACE_SESSION_FIELD_OWNERSHIP } from '../../../shared/workspace-session-host-field-ownership'
 import {
   isWorkspaceSessionRecord,
   type WorkspaceSessionRecord
diff --git a/src/renderer/src/lib/workspace-session-host-split.test.ts b/src/renderer/src/lib/workspace-session-host-split.test.ts
index de359cfb12e..ad540d2af04 100644
--- a/src/renderer/src/lib/workspace-session-host-split.test.ts
+++ b/src/renderer/src/lib/workspace-session-host-split.test.ts
@@ -392,3 +392,46 @@ describe('split → merge round trip', () => {
     expect(roundTrip(state)).toEqual(state)
   })
 })
+
+/**
+ * The main-process load path drops a global field from a non-local partition when the local slice
+ * already has it, on the strength of exactly these two rules. If either moves, that prune starts
+ * discarding a value the renderer would otherwise have read.
+ */
+describe('mergeWorkspaceSessionsFromHosts global-field precedence', () => {
+  const localEntry = {
+    url: 'local',
+    normalizedUrl: 'local',
+    title: 'l',
+    lastVisitedAt: 2,
+    visitCount: 1
+  }
+  const hostEntry = {
+    url: 'host',
+    normalizedUrl: 'host',
+    title: 'h',
+    lastVisitedAt: 1,
+    visitCount: 1
+  }
+
+  it("takes a global field from 'local' whenever local has one, ignoring every other slice", () => {
+    const merged = mergeWorkspaceSessionsFromHosts({
+      [LOCAL_EXECUTION_HOST_ID]: {
+        ...getDefaultWorkspaceSession(),
+        browserUrlHistory: [localEntry]
+      },
+      [RUNTIME_A]: { ...getDefaultWorkspaceSession(), browserUrlHistory: [hostEntry] }
+    })
+    expect(merged.browserUrlHistory).toEqual([localEntry])
+  })
+
+  it('falls back to another slice only when local does not have the field', () => {
+    const local = getDefaultWorkspaceSession()
+    delete local.browserUrlHistory
+    const merged = mergeWorkspaceSessionsFromHosts({
+      [LOCAL_EXECUTION_HOST_ID]: local,
+      [RUNTIME_A]: { ...getDefaultWorkspaceSession(), browserUrlHistory: [hostEntry] }
+    })
+    expect(merged.browserUrlHistory).toEqual([hostEntry])
+  })
+})
diff --git a/src/renderer/src/lib/workspace-session-host-split.ts b/src/renderer/src/lib/workspace-session-host-split.ts
index 817b87eebeb..ea03cc6f3f8 100644
--- a/src/renderer/src/lib/workspace-session-host-split.ts
+++ b/src/renderer/src/lib/workspace-session-host-split.ts
@@ -8,7 +8,7 @@ import { isWorktreeHostIdentity } from '../../../shared/worktree/host-qualified-
 import {
   GLOBAL_WORKSPACE_SESSION_FIELDS,
   WORKSPACE_SESSION_FIELD_OWNERSHIP
-} from './workspace-session-host-field-ownership'
+} from '../../../shared/workspace-session-host-field-ownership'
 import {
   buildWorktreeIdByFileId,
   buildWorktreeIdByTabId,
diff --git a/src/renderer/src/lib/workspace-session-host-field-ownership.ts b/src/shared/workspace-session-host-field-ownership.ts
similarity index 97%
rename from src/renderer/src/lib/workspace-session-host-field-ownership.ts
rename to src/shared/workspace-session-host-field-ownership.ts
index a44c7669bda..6397c2ad239 100644
--- a/src/renderer/src/lib/workspace-session-host-field-ownership.ts
+++ b/src/shared/workspace-session-host-field-ownership.ts
@@ -1,4 +1,4 @@
-import type { WorkspaceSessionState } from '../../../shared/workspace-session-state-types'
+import type { WorkspaceSessionState } from './workspace-session-state-types'
 
 export type WorkspaceSessionFieldOwnership =
   | 'global'

From ae1dab40d6a7b290a59fbbcb94ac26fcabdf7b4e Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:05:24 -0700
Subject: [PATCH 64/92] Sta 6308 add copy session id option to terminal tab
 context menu (#18070)

* Move Copy Session ID from tab to terminal pane context menu

- Relocates session ID copy to the exact pane that owns it, not the tab's active pane
- Adds support for durable sleeping agent sessions as fallback for cleared live status
- Generalizes copy-rejection guards to handle any identity type, not just pane IDs
- Updates e2e test to verify pane-specific session ID copying

* Gate session ID liveness by shell foreground state

Once OSC 133;D proves a pane is back at the shell, don't return the
session ID even if a durable record survived the exit. This prevents
treating exited sessions as still active when the user is typing at
the prompt.

* Update hook order parity test for session-ID projection hook

The pane session-ID projection adds a render hook to TerminalPane.
Update the expected hook count from 229 to 230 and the corresponding
SHA256 hash.
---
 .../use-native-chat-context-menu.tsx          |  13 ++
 .../tab-bar/SortableTabContextMenu.test.tsx   |  56 ------
 .../tab-bar/SortableTabContextMenu.tsx        |   7 -
 .../TabAgentSessionIdMenuItem.test.tsx        |  79 ---------
 .../tab-bar/TabAgentSessionIdMenuItem.tsx     |  48 ------
 .../tab-bar/tab-agent-session-id.test.ts      | 159 ------------------
 .../tab-bar/tab-agent-session-id.ts           |  32 ----
 .../tab-context-menu-consistency.test.tsx     |   1 -
 .../TerminalContextMenu.test.tsx              |  25 +++
 .../terminal-pane/TerminalContextMenu.tsx     |  15 +-
 .../TerminalPaneNativeChatPortal.tsx          |  10 ++
 .../terminal-pane/TerminalPaneSurface.tsx     |   3 +
 .../pane-agent-session-id.test.ts             | 110 ++++++++++++
 .../terminal-pane/pane-agent-session-id.ts    |  27 +++
 .../terminal-copy-rejection-guards.ts         |  10 +-
 .../terminal-copy-rejection-handling.test.ts  |  12 +-
 .../terminal-pane-hook-order-parity.test.ts   |   6 +-
 .../terminal-pane-menu-copy-actions.ts        |  38 ++++-
 .../use-terminal-pane-context-menu.ts         |  14 ++
 .../use-terminal-pane-projection.ts           |  10 ++
 src/renderer/src/i18n/locales/en.json         |  12 +-
 src/renderer/src/i18n/locales/es.json         |  12 +-
 src/renderer/src/i18n/locales/ja.json         |  12 +-
 src/renderer/src/i18n/locales/ko.json         |  12 +-
 src/renderer/src/i18n/locales/zh.json         |  12 +-
 ... terminal-context-menu-session-id.spec.ts} |  37 ++--
 26 files changed, 335 insertions(+), 437 deletions(-)
 delete mode 100644 src/renderer/src/components/tab-bar/TabAgentSessionIdMenuItem.test.tsx
 delete mode 100644 src/renderer/src/components/tab-bar/TabAgentSessionIdMenuItem.tsx
 delete mode 100644 src/renderer/src/components/tab-bar/tab-agent-session-id.test.ts
 delete mode 100644 src/renderer/src/components/tab-bar/tab-agent-session-id.ts
 create mode 100644 src/renderer/src/components/terminal-pane/pane-agent-session-id.test.ts
 create mode 100644 src/renderer/src/components/terminal-pane/pane-agent-session-id.ts
 rename tests/e2e/{tab-context-menu-session-id.spec.ts => terminal-context-menu-session-id.spec.ts} (59%)

diff --git a/src/renderer/src/components/native-chat/use-native-chat-context-menu.tsx b/src/renderer/src/components/native-chat/use-native-chat-context-menu.tsx
index 9aed41a0cdc..8e939401a47 100644
--- a/src/renderer/src/components/native-chat/use-native-chat-context-menu.tsx
+++ b/src/renderer/src/components/native-chat/use-native-chat-context-menu.tsx
@@ -56,6 +56,8 @@ export type NativeChatContextMenuActions = {
   onSetTitle: () => void
   onCopyTerminalId: () => void
   onCopyPaneId: () => void
+  canCopyAgentSessionId: boolean
+  onCopyAgentSessionId: () => void
   canClosePane: boolean
   onClosePane: () => void
 }
@@ -75,6 +77,8 @@ export const emptyNativeChatContextMenuActions: Omit<NativeChatContextMenuAction
   onSetTitle: () => {},
   onCopyTerminalId: () => {},
   onCopyPaneId: () => {},
+  canCopyAgentSessionId: false,
+  onCopyAgentSessionId: () => {},
   canClosePane: false,
   onClosePane: () => {}
 }
@@ -219,6 +223,15 @@ export function useNativeChatContextMenu({ rootRef, actions }: UseNativeChatCont
               'Set Title…'
             )}
           </DropdownMenuItem>
+          {actions.canCopyAgentSessionId ? (
+            <DropdownMenuItem onSelect={actions.onCopyAgentSessionId}>
+              <Copy />
+              {translate(
+                'components.terminalPane.TerminalContextMenu.copySessionId',
+                'Copy Session ID'
+              )}
+            </DropdownMenuItem>
+          ) : null}
           <DropdownMenuItem onSelect={actions.onCopyTerminalId}>
             <Copy />
             {translate(
diff --git a/src/renderer/src/components/tab-bar/SortableTabContextMenu.test.tsx b/src/renderer/src/components/tab-bar/SortableTabContextMenu.test.tsx
index e51c599f669..9d3e506e3f1 100644
--- a/src/renderer/src/components/tab-bar/SortableTabContextMenu.test.tsx
+++ b/src/renderer/src/components/tab-bar/SortableTabContextMenu.test.tsx
@@ -292,60 +292,4 @@ describe('SortableTabContextMenu', () => {
     expect(container.textContent).not.toContain('Move Tab to Split')
     expect(container.textContent).toContain('Split terminal right')
   })
-
-  describe('copy session id', () => {
-    const LEAF = '11111111-1111-4111-8111-111111111111'
-
-    function withLiveAgent(sessionId: string | null): void {
-      storeMock.state = {
-        ...storeMock.state,
-        terminalLayoutsByTabId: {
-          'term-1': { root: { type: 'leaf', leafId: LEAF }, activeLeafId: LEAF }
-        },
-        agentStatusByPaneKey: {
-          [`term-1:${LEAF}`]: {
-            state: 'done',
-            prompt: '',
-            updatedAt: 1,
-            stateStartedAt: 1,
-            paneKey: `term-1:${LEAF}`,
-            agentType: 'claude',
-            stateHistory: [],
-            ...(sessionId ? { providerSession: { key: 'session_id', id: sessionId } } : {})
-          }
-        },
-        paneForegroundAgentByPaneKey: {}
-      }
-    }
-
-    it('omits the item for a tab with no agent', () => {
-      const { container } = renderMenu()
-
-      expect(container.textContent).not.toContain('Copy Session ID')
-    })
-
-    it('omits the item until the active agent reports a session id', () => {
-      withLiveAgent(null)
-      const { container } = renderMenu()
-
-      expect(container.textContent).not.toContain('Copy Session ID')
-    })
-
-    it('copies the active pane session id', async () => {
-      const writeClipboardText = vi.fn().mockResolvedValue(undefined)
-      Object.assign(window, { api: { ui: { writeClipboardText } } })
-      withLiveAgent('session-abc')
-      const { container } = renderMenu()
-
-      act(() => getButton(container, 'Copy Session ID').click())
-      await vi.waitFor(() => expect(writeClipboardText).toHaveBeenCalledWith('session-abc'))
-    })
-
-    it('does not resolve a session id while the menu is closed', () => {
-      withLiveAgent('session-abc')
-      const { container } = renderMenu({ open: false })
-
-      expect(container.textContent).not.toContain('Copy Session ID')
-    })
-  })
 })
diff --git a/src/renderer/src/components/tab-bar/SortableTabContextMenu.tsx b/src/renderer/src/components/tab-bar/SortableTabContextMenu.tsx
index b298072f9f6..53b31012d39 100644
--- a/src/renderer/src/components/tab-bar/SortableTabContextMenu.tsx
+++ b/src/renderer/src/components/tab-bar/SortableTabContextMenu.tsx
@@ -11,8 +11,6 @@ import type { TerminalTab } from '../../../../shared/terminal-tab-types'
 import { useAppStore } from '../../store'
 import { formatShortcutLabel, useOptionalShortcutLabel } from '@/hooks/useShortcutLabel'
 import { translate } from '@/i18n/i18n'
-import { TabAgentSessionIdMenuItem } from './TabAgentSessionIdMenuItem'
-import { resolveTabAgentSessionId } from './tab-agent-session-id'
 import { TerminalTabSplitMenuSection } from './TerminalTabSplitMenuSection'
 import { TAB_CONTEXT_MENU_CONTENT_CLASS } from './tab-context-menu-sizing'
 
@@ -123,10 +121,6 @@ export function SortableTabContextMenu({
   onTogglePin
 }: SortableTabContextMenuProps): React.JSX.Element {
   const keybindings = useAppStore((state) => state.keybindings)
-  // The id is a primitive, so unchanged sessions stay referentially stable without a cache.
-  const agentSessionId = useAppStore((state) =>
-    open ? resolveTabAgentSessionId(state, tab.id) : null
-  )
   const splitRightShortcut = formatShortcutLabel('terminal.splitRight', keybindings)
   const splitDownShortcut = formatShortcutLabel('terminal.splitDown', keybindings)
 
@@ -194,7 +188,6 @@ export function SortableTabContextMenu({
           {translate('auto.components.tab.bar.SortableTabContextMenu.2f697b3c31', 'Change Title')}
           {renameShortcut ? <DropdownMenuShortcut>{renameShortcut}</DropdownMenuShortcut> : null}
         </DropdownMenuItem>
-        <TabAgentSessionIdMenuItem sessionId={agentSessionId} />
         <div className="px-2 pt-1.5 pb-1">
           <div className="text-xs font-medium text-muted-foreground mb-1.5">
             {translate('auto.components.tab.bar.SortableTabContextMenu.35e8892fd0', 'Tab Color')}
diff --git a/src/renderer/src/components/tab-bar/TabAgentSessionIdMenuItem.test.tsx b/src/renderer/src/components/tab-bar/TabAgentSessionIdMenuItem.test.tsx
deleted file mode 100644
index da857ec57bf..00000000000
--- a/src/renderer/src/components/tab-bar/TabAgentSessionIdMenuItem.test.tsx
+++ /dev/null
@@ -1,79 +0,0 @@
-/**
- * @vitest-environment happy-dom
- */
-import { act, type ReactNode } from 'react'
-import { createRoot, type Root } from 'react-dom/client'
-import { afterEach, describe, expect, it, vi } from 'vitest'
-import { TabAgentSessionIdMenuItem } from './TabAgentSessionIdMenuItem'
-
-const toastMock = vi.hoisted(() => ({ success: vi.fn(), error: vi.fn() }))
-
-vi.mock('@/components/ui/dropdown-menu', () => ({
-  DropdownMenuItem: ({
-    children,
-    disabled,
-    onSelect,
-    'aria-label': ariaLabel
-  }: {
-    children?: ReactNode
-    disabled?: boolean
-    onSelect?: () => void
-    'aria-label'?: string
-  }) => (
-    <button type="button" disabled={disabled} aria-label={ariaLabel} onClick={() => onSelect?.()}>
-      {children}
-    </button>
-  )
-}))
-
-vi.mock('lucide-react', () => ({ Copy: () => null }))
-vi.mock('@/i18n/i18n', () => ({ translate: (_key: string, fallback: string) => fallback }))
-vi.mock('sonner', () => ({ toast: toastMock }))
-
-const mounted: { container: HTMLDivElement; root: Root }[] = []
-
-function render(sessionId: string | null): HTMLDivElement {
-  const container = document.createElement('div')
-  document.body.appendChild(container)
-  const root = createRoot(container)
-  act(() => root.render(<TabAgentSessionIdMenuItem sessionId={sessionId} />))
-  mounted.push({ container, root })
-  return container
-}
-
-afterEach(() => {
-  for (const { container, root } of mounted.splice(0)) {
-    act(() => root.unmount())
-    container.remove()
-  }
-  toastMock.success.mockReset()
-  toastMock.error.mockReset()
-})
-
-describe('TabAgentSessionIdMenuItem', () => {
-  it('renders nothing when no session id is available', () => {
-    expect(render(null).textContent).toBe('')
-  })
-
-  it('copies on select when an id is known', async () => {
-    const writeClipboardText = vi.fn().mockResolvedValue(undefined)
-    Object.assign(window, { api: { ui: { writeClipboardText } } })
-    const container = render('abc-123')
-
-    const button = container.querySelector('button')
-    expect(button?.disabled).toBe(false)
-    act(() => button?.click())
-    await vi.waitFor(() => expect(writeClipboardText).toHaveBeenCalledWith('abc-123'))
-  })
-
-  it('reports clipboard failures', async () => {
-    const writeClipboardText = vi.fn().mockRejectedValue(new Error('clipboard unavailable'))
-    Object.assign(window, { api: { ui: { writeClipboardText } } })
-    const button = render('abc-123').querySelector('button')
-
-    act(() => button?.click())
-    await vi.waitFor(() =>
-      expect(toastMock.error).toHaveBeenCalledWith('Failed to copy Session ID')
-    )
-  })
-})
diff --git a/src/renderer/src/components/tab-bar/TabAgentSessionIdMenuItem.tsx b/src/renderer/src/components/tab-bar/TabAgentSessionIdMenuItem.tsx
deleted file mode 100644
index 73f3f128e5d..00000000000
--- a/src/renderer/src/components/tab-bar/TabAgentSessionIdMenuItem.tsx
+++ /dev/null
@@ -1,48 +0,0 @@
-import { Copy } from 'lucide-react'
-import { toast } from 'sonner'
-import { DropdownMenuItem } from '@/components/ui/dropdown-menu'
-import { translate } from '@/i18n/i18n'
-
-async function copySessionId(sessionId: string): Promise<void> {
-  try {
-    await window.api.ui.writeClipboardText(sessionId)
-    toast.success(
-      translate(
-        'components.tab.bar.SortableTabContextMenu.copySessionIdSuccess',
-        'Session ID copied'
-      )
-    )
-  } catch {
-    toast.error(
-      translate(
-        'components.tab.bar.SortableTabContextMenu.copySessionIdError',
-        'Failed to copy Session ID'
-      )
-    )
-  }
-}
-
-/** Copies the active pane's provider session id when one is available. */
-export function TabAgentSessionIdMenuItem({
-  sessionId
-}: {
-  sessionId: string | null
-}): React.JSX.Element | null {
-  if (sessionId === null) {
-    return null
-  }
-  const label = translate(
-    'components.tab.bar.SortableTabContextMenu.copySessionId',
-    'Copy Session ID'
-  )
-  return (
-    <DropdownMenuItem
-      onSelect={() => {
-        void copySessionId(sessionId)
-      }}
-    >
-      <Copy className="size-3.5" />
-      {label}
-    </DropdownMenuItem>
-  )
-}
diff --git a/src/renderer/src/components/tab-bar/tab-agent-session-id.test.ts b/src/renderer/src/components/tab-bar/tab-agent-session-id.test.ts
deleted file mode 100644
index 2f06f0a8db7..00000000000
--- a/src/renderer/src/components/tab-bar/tab-agent-session-id.test.ts
+++ /dev/null
@@ -1,159 +0,0 @@
-import { describe, expect, it } from 'vitest'
-import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
-import { resolveTabAgentSessionId, type TabAgentSessionIdState } from './tab-agent-session-id'
-
-const LEAF_A = '11111111-1111-4111-8111-111111111111'
-const LEAF_B = '22222222-2222-4222-8222-222222222222'
-
-function entry(overrides: Partial<AgentStatusEntry> = {}): AgentStatusEntry {
-  return {
-    state: 'done',
-    prompt: '',
-    updatedAt: 1,
-    stateStartedAt: 1,
-    paneKey: `tab-1:${LEAF_A}`,
-    agentType: 'claude',
-    stateHistory: [],
-    ...overrides
-  }
-}
-
-function state(overrides: Partial<TabAgentSessionIdState> = {}): TabAgentSessionIdState {
-  return {
-    terminalLayoutsByTabId: {
-      'tab-1': {
-        root: { type: 'leaf', leafId: LEAF_A },
-        activeLeafId: LEAF_A,
-        expandedLeafId: null
-      }
-    },
-    agentStatusByPaneKey: {},
-    paneForegroundAgentByPaneKey: {},
-    ...overrides
-  }
-}
-
-describe('resolveTabAgentSessionId', () => {
-  it('is absent when the pane has no agent row', () => {
-    expect(resolveTabAgentSessionId(state(), 'tab-1')).toBeNull()
-  })
-
-  it('is absent for a tab with no layout', () => {
-    expect(resolveTabAgentSessionId(state(), 'tab-missing')).toBeNull()
-  })
-
-  it('reads the id reported by the active pane', () => {
-    const resolved = resolveTabAgentSessionId(
-      state({
-        agentStatusByPaneKey: {
-          [`tab-1:${LEAF_A}`]: entry({ providerSession: { key: 'session_id', id: 'abc-123' } })
-        }
-      }),
-      'tab-1'
-    )
-    expect(resolved).toBe('abc-123')
-  })
-
-  it('is absent until the agent reports an id', () => {
-    const resolved = resolveTabAgentSessionId(
-      state({ agentStatusByPaneKey: { [`tab-1:${LEAF_A}`]: entry() } }),
-      'tab-1'
-    )
-    expect(resolved).toBeNull()
-  })
-
-  describe('liveness', () => {
-    it('is absent for a hydrated row with no live hook since restore', () => {
-      const resolved = resolveTabAgentSessionId(
-        state({
-          agentStatusByPaneKey: {
-            [`tab-1:${LEAF_A}`]: entry({
-              restoredUnconfirmed: true,
-              providerSession: { key: 'session_id', id: 'abc-123' }
-            })
-          }
-        }),
-        'tab-1'
-      )
-      expect(resolved).toBeNull()
-    })
-
-    it('is absent once the pane is proven back at the shell', () => {
-      const resolved = resolveTabAgentSessionId(
-        state({
-          agentStatusByPaneKey: {
-            [`tab-1:${LEAF_A}`]: entry({ providerSession: { key: 'session_id', id: 'abc-123' } })
-          },
-          paneForegroundAgentByPaneKey: {
-            [`tab-1:${LEAF_A}`]: { agent: null, shellForeground: true }
-          }
-        }),
-        'tab-1'
-      )
-      expect(resolved).toBeNull()
-    })
-
-    it('keeps a session whose foreground evidence is only that an agent runs', () => {
-      const resolved = resolveTabAgentSessionId(
-        state({
-          agentStatusByPaneKey: {
-            [`tab-1:${LEAF_A}`]: entry({ providerSession: { key: 'session_id', id: 'abc-123' } })
-          },
-          paneForegroundAgentByPaneKey: {
-            [`tab-1:${LEAF_A}`]: { agent: 'claude', shellForeground: false }
-          }
-        }),
-        'tab-1'
-      )
-      expect(resolved).toBe('abc-123')
-    })
-
-    it('keeps a working session that reported a session boundary', () => {
-      // Why: sessionBoundary marks a resume/clear landing idle — a session start,
-      // not a session end, and exactly when the first id arrives.
-      const resolved = resolveTabAgentSessionId(
-        state({
-          agentStatusByPaneKey: {
-            [`tab-1:${LEAF_A}`]: entry({
-              sessionBoundary: true,
-              providerSession: { key: 'session_id', id: 'fresh-1' }
-            })
-          }
-        }),
-        'tab-1'
-      )
-      expect(resolved).toBe('fresh-1')
-    })
-  })
-
-  describe('split tabs', () => {
-    const splitState = (activeLeafId: string): TabAgentSessionIdState =>
-      state({
-        terminalLayoutsByTabId: {
-          'tab-1': {
-            root: {
-              type: 'split',
-              direction: 'vertical',
-              first: { type: 'leaf', leafId: LEAF_A },
-              second: { type: 'leaf', leafId: LEAF_B }
-            },
-            activeLeafId,
-            expandedLeafId: null
-          }
-        },
-        agentStatusByPaneKey: {
-          [`tab-1:${LEAF_A}`]: entry({ providerSession: { key: 'session_id', id: 'left' } }),
-          [`tab-1:${LEAF_B}`]: entry({ providerSession: { key: 'session_id', id: 'right' } })
-        }
-      })
-
-    it('reads the active pane, not a sibling', () => {
-      expect(resolveTabAgentSessionId(splitState(LEAF_B), 'tab-1')).toBe('right')
-    })
-
-    it('is absent when the active leaf id no longer exists in the layout', () => {
-      const stale = '33333333-3333-4333-8333-333333333333'
-      expect(resolveTabAgentSessionId(splitState(stale), 'tab-1')).toBeNull()
-    })
-  })
-})
diff --git a/src/renderer/src/components/tab-bar/tab-agent-session-id.ts b/src/renderer/src/components/tab-bar/tab-agent-session-id.ts
deleted file mode 100644
index e0d804bc4c5..00000000000
--- a/src/renderer/src/components/tab-bar/tab-agent-session-id.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
-import type { TerminalLayoutSnapshot } from '../../../../shared/terminal-tab-types'
-import type { PaneForegroundAgentEntry } from '../../store/slices/pane-foreground-agent'
-import { resolveNativeChatActiveLayoutLeafId } from '../native-chat/native-chat-leaf-routing'
-
-export type TabAgentSessionIdState = {
-  agentStatusByPaneKey?: Record<string, AgentStatusEntry>
-  terminalLayoutsByTabId?: Record<string, TerminalLayoutSnapshot>
-  paneForegroundAgentByPaneKey?: Record<string, PaneForegroundAgentEntry>
-}
-
-/** Returns the active pane's provider session id when its agent is still live. */
-export function resolveTabAgentSessionId(
-  state: TabAgentSessionIdState,
-  tabId: string
-): string | null {
-  const leafId = resolveNativeChatActiveLayoutLeafId(state.terminalLayoutsByTabId?.[tabId])
-  if (!leafId) {
-    return null
-  }
-  const paneKey = `${tabId}:${leafId}`
-  const entry = state.agentStatusByPaneKey?.[paneKey]
-  // Hydrated rows may describe a session that ended while no receiver was up.
-  if (!entry?.agentType || entry.restoredUnconfirmed === true) {
-    return null
-  }
-  // OSC 133;D proves the pane is back at the shell, regardless of the last hook state.
-  if (state.paneForegroundAgentByPaneKey?.[paneKey]?.shellForeground === true) {
-    return null
-  }
-  return entry.providerSession?.id ?? null
-}
diff --git a/src/renderer/src/components/tab-bar/tab-context-menu-consistency.test.tsx b/src/renderer/src/components/tab-bar/tab-context-menu-consistency.test.tsx
index 54f762d4611..c81eae348dd 100644
--- a/src/renderer/src/components/tab-bar/tab-context-menu-consistency.test.tsx
+++ b/src/renderer/src/components/tab-bar/tab-context-menu-consistency.test.tsx
@@ -13,7 +13,6 @@ import {
 const TAB_MENU_SOURCES = [
   'EditorFileTabContextMenu.tsx',
   'SortableTabContextMenu.tsx',
-  'TabAgentSessionIdMenuItem.tsx',
   'BrowserTab.tsx',
   'TabWorkspaceLayoutMenuSection.tsx',
   'TerminalTabSplitMenuSection.tsx'
diff --git a/src/renderer/src/components/terminal-pane/TerminalContextMenu.test.tsx b/src/renderer/src/components/terminal-pane/TerminalContextMenu.test.tsx
index bd2ca330f5c..d8dc54c954b 100644
--- a/src/renderer/src/components/terminal-pane/TerminalContextMenu.test.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalContextMenu.test.tsx
@@ -92,6 +92,8 @@ function renderMenu(overrides: Record<string, unknown> = {}): string {
     canClearPaneTitle: false,
     onCopyTerminalId: vi.fn(),
     onCopyPaneId: vi.fn(),
+    canCopyAgentSessionId: false,
+    onCopyAgentSessionId: vi.fn(),
     ...overrides
   }
   return renderToStaticMarkup(React.createElement(TerminalContextMenu, props))
@@ -146,6 +148,29 @@ describe('TerminalContextMenu', () => {
     expect(items.list.some((item) => childrenText(item.children).includes('Switch to'))).toBe(false)
   })
 
+  it('shows Copy Session ID only for panes with provider identity', () => {
+    const onCopyAgentSessionId = vi.fn()
+    renderMenu({ canCopyAgentSessionId: true, onCopyAgentSessionId })
+
+    const item = items.list.find(
+      (candidate) => childrenText(candidate.children) === 'Copy Session ID'
+    )
+    expect(item).toBeDefined()
+    expect(
+      items.list
+        .map((candidate) => childrenText(candidate.children))
+        .filter((label) => ['Copy Session ID', 'Copy Terminal ID', 'Copy Pane ID'].includes(label))
+    ).toEqual(['Copy Session ID', 'Copy Terminal ID', 'Copy Pane ID'])
+    item?.onSelect?.()
+    expect(onCopyAgentSessionId).toHaveBeenCalledTimes(1)
+
+    items.list = []
+    renderMenu({ canCopyAgentSessionId: false })
+    expect(
+      items.list.some((candidate) => childrenText(candidate.children) === 'Copy Session ID')
+    ).toBe(false)
+  })
+
   it('shows one shortcut per terminal menu action on Windows', () => {
     vi.stubGlobal('navigator', {
       userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)'
diff --git a/src/renderer/src/components/terminal-pane/TerminalContextMenu.tsx b/src/renderer/src/components/terminal-pane/TerminalContextMenu.tsx
index 178ab0a3247..8311fb3df9d 100644
--- a/src/renderer/src/components/terminal-pane/TerminalContextMenu.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalContextMenu.tsx
@@ -66,6 +66,8 @@ type TerminalContextMenuProps = {
   canClearPaneTitle: boolean
   onCopyTerminalId: () => void
   onCopyPaneId: () => void
+  canCopyAgentSessionId: boolean
+  onCopyAgentSessionId: () => void
 }
 
 export default function TerminalContextMenu({
@@ -101,7 +103,9 @@ export default function TerminalContextMenu({
   onClearPaneTitle,
   canClearPaneTitle,
   onCopyTerminalId,
-  onCopyPaneId
+  onCopyPaneId,
+  canCopyAgentSessionId,
+  onCopyAgentSessionId
 }: TerminalContextMenuProps): React.JSX.Element {
   // Why: one primary binding prevents Windows/Linux shortcut labels from forcing row wraps.
   const shortcuts = useMemo(
@@ -276,6 +280,15 @@ export default function TerminalContextMenu({
             ) : null}
           </DropdownMenuItem>
         ) : null}
+        {canCopyAgentSessionId ? (
+          <DropdownMenuItem onSelect={onCopyAgentSessionId}>
+            <Copy />
+            {translate(
+              'components.terminalPane.TerminalContextMenu.copySessionId',
+              'Copy Session ID'
+            )}
+          </DropdownMenuItem>
+        ) : null}
         <DropdownMenuItem onSelect={onCopyTerminalId}>
           <Copy />
           {translate(
diff --git a/src/renderer/src/components/terminal-pane/TerminalPaneNativeChatPortal.tsx b/src/renderer/src/components/terminal-pane/TerminalPaneNativeChatPortal.tsx
index 73c4220dec5..1b5e94b4a11 100644
--- a/src/renderer/src/components/terminal-pane/TerminalPaneNativeChatPortal.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalPaneNativeChatPortal.tsx
@@ -3,6 +3,8 @@ import NativeChatView from '../native-chat/NativeChatView'
 import { makePaneKey } from '../../../../shared/stable-pane-id'
 import { canContinueAgentSessionInNewSession } from './terminal-agent-session-continuation'
 import type { TerminalPaneController } from './use-terminal-pane-controller'
+import { useAppStore } from '@/store'
+import { resolvePaneAgentSessionId } from './pane-agent-session-id'
 
 export function TerminalPaneNativeChatPortal({
   controller
@@ -30,6 +32,11 @@ export function TerminalPaneNativeChatPortal({
     tabId,
     unifiedTabId
   } = controller
+  const chatPaneSessionId = useAppStore((state) =>
+    effectiveChatViewMode && chatPane
+      ? resolvePaneAgentSessionId(state, makePaneKey(tabId, chatPane.leafId))
+      : null
+  )
   if (!effectiveChatViewMode || !chatPane?.container) {
     return null
   }
@@ -78,6 +85,9 @@ export function TerminalPaneNativeChatPortal({
             onCopyTerminalId: () =>
               void contextMenu.runForPane(chatPane.id, contextMenu.onCopyTerminalId),
             onCopyPaneId: () => void contextMenu.runForPane(chatPane.id, contextMenu.onCopyPaneId),
+            canCopyAgentSessionId: chatPaneSessionId !== null,
+            onCopyAgentSessionId: () =>
+              void contextMenu.runForPane(chatPane.id, contextMenu.onCopyAgentSessionId),
             canClosePane: managedPanes.length > 1,
             onClosePane: () => contextMenu.runForPane(chatPane.id, contextMenu.onClosePane)
           }}
diff --git a/src/renderer/src/components/terminal-pane/TerminalPaneSurface.tsx b/src/renderer/src/components/terminal-pane/TerminalPaneSurface.tsx
index fff316dabce..fc33cab3f18 100644
--- a/src/renderer/src/components/terminal-pane/TerminalPaneSurface.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalPaneSurface.tsx
@@ -59,6 +59,7 @@ export function TerminalPaneSurface({
     keybindings,
     managedPanes,
     managerRef,
+    menuAgentSessionId,
     menuPaneHasCustomTitle,
     openDiskSpaceAnalyzer,
     openQuickCommandEditor,
@@ -247,6 +248,8 @@ export function TerminalPaneSurface({
         canClearPaneTitle={menuPaneHasCustomTitle}
         onCopyTerminalId={() => void contextMenu.onCopyTerminalId()}
         onCopyPaneId={contextMenu.onCopyPaneId}
+        canCopyAgentSessionId={menuAgentSessionId !== null}
+        onCopyAgentSessionId={() => void contextMenu.onCopyAgentSessionId()}
       />
       <TerminalLinkActionPopover
         request={terminalLinkActionRequest}
diff --git a/src/renderer/src/components/terminal-pane/pane-agent-session-id.test.ts b/src/renderer/src/components/terminal-pane/pane-agent-session-id.test.ts
new file mode 100644
index 00000000000..ea0b24a2d56
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/pane-agent-session-id.test.ts
@@ -0,0 +1,110 @@
+import { describe, expect, it } from 'vitest'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import type { SleepingAgentSessionRecord } from '../../../../shared/agent-session-resume'
+import { resolvePaneAgentSessionId, type PaneAgentSessionIdState } from './pane-agent-session-id'
+
+const PANE_KEY = 'tab-1:11111111-1111-4111-8111-111111111111'
+
+function state(
+  live?: AgentStatusEntry,
+  sleeping?: SleepingAgentSessionRecord,
+  shellForeground = false
+): PaneAgentSessionIdState {
+  return {
+    agentStatusByPaneKey: live ? { [PANE_KEY]: live } : {},
+    sleepingAgentSessionsByPaneKey: sleeping ? { [PANE_KEY]: sleeping } : {},
+    paneForegroundAgentByPaneKey: { [PANE_KEY]: { agent: 'claude', shellForeground } }
+  }
+}
+
+function live(sessionId?: string, restoredUnconfirmed = false): AgentStatusEntry {
+  return {
+    state: 'done',
+    prompt: '',
+    updatedAt: 2,
+    stateStartedAt: 2,
+    paneKey: PANE_KEY,
+    agentType: 'claude',
+    stateHistory: [],
+    ...(sessionId ? { providerSession: { key: 'session_id', id: sessionId } } : {}),
+    ...(restoredUnconfirmed ? { restoredUnconfirmed: true } : {})
+  }
+}
+
+function sleeping(sessionId: string): SleepingAgentSessionRecord {
+  return {
+    paneKey: PANE_KEY,
+    tabId: 'tab-1',
+    worktreeId: 'worktree-1',
+    agent: 'claude',
+    providerSession: { key: 'session_id', id: sessionId },
+    prompt: '',
+    state: 'done',
+    capturedAt: 1,
+    updatedAt: 1,
+    origin: 'live'
+  }
+}
+
+describe('resolvePaneAgentSessionId', () => {
+  it('returns the live provider session for the exact pane', () => {
+    expect(resolvePaneAgentSessionId(state(live('live-session')), PANE_KEY)).toBe('live-session')
+  })
+
+  it('returns the pane-owned durable session after its live status row is cleared', () => {
+    expect(
+      resolvePaneAgentSessionId(state(undefined, sleeping('sleeping-session')), PANE_KEY)
+    ).toBe('sleeping-session')
+  })
+
+  it('does not reuse an older durable session while a newer live row lacks identity', () => {
+    expect(resolvePaneAgentSessionId(state(live(), sleeping('old-session')), PANE_KEY)).toBeNull()
+  })
+
+  it('falls back from an unconfirmed restored row to durable pane identity', () => {
+    expect(
+      resolvePaneAgentSessionId(
+        state(live('unconfirmed-session', true), sleeping('confirmed-session')),
+        PANE_KEY
+      )
+    ).toBe('confirmed-session')
+  })
+
+  describe('liveness', () => {
+    it('is absent once the pane is proven back at the shell', () => {
+      expect(
+        resolvePaneAgentSessionId(state(live('live-session'), undefined, true), PANE_KEY)
+      ).toBe(null)
+    })
+
+    it('is absent at the shell even when a durable record survives the exit', () => {
+      expect(
+        resolvePaneAgentSessionId(state(undefined, sleeping('sleeping-session'), true), PANE_KEY)
+      ).toBeNull()
+    })
+
+    it('keeps a session whose foreground evidence is only that an agent runs', () => {
+      expect(
+        resolvePaneAgentSessionId(state(live('live-session'), undefined, false), PANE_KEY)
+      ).toBe('live-session')
+    })
+
+    it('keeps a session for a pane with no foreground evidence at all', () => {
+      expect(
+        resolvePaneAgentSessionId(
+          {
+            agentStatusByPaneKey: { [PANE_KEY]: live('live-session') },
+            sleepingAgentSessionsByPaneKey: {},
+            paneForegroundAgentByPaneKey: {}
+          },
+          PANE_KEY
+        )
+      ).toBe('live-session')
+    })
+  })
+
+  it('does not read identity from a sibling pane', () => {
+    const sibling = 'tab-1:22222222-2222-4222-8222-222222222222'
+    expect(resolvePaneAgentSessionId(state(undefined, sleeping('session-1')), sibling)).toBeNull()
+  })
+})
diff --git a/src/renderer/src/components/terminal-pane/pane-agent-session-id.ts b/src/renderer/src/components/terminal-pane/pane-agent-session-id.ts
new file mode 100644
index 00000000000..59ab6f38e86
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/pane-agent-session-id.ts
@@ -0,0 +1,27 @@
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import type { SleepingAgentSessionRecord } from '../../../../shared/agent-session-resume'
+import type { PaneForegroundAgentEntry } from '../../store/slices/pane-foreground-agent'
+
+export type PaneAgentSessionIdState = {
+  agentStatusByPaneKey: Record<string, AgentStatusEntry | undefined>
+  sleepingAgentSessionsByPaneKey: Record<string, SleepingAgentSessionRecord | undefined>
+  paneForegroundAgentByPaneKey: Record<string, PaneForegroundAgentEntry | undefined>
+}
+
+/** Resolves the provider session owned by one exact terminal pane, while its agent is still live. */
+export function resolvePaneAgentSessionId(
+  state: PaneAgentSessionIdState,
+  paneKey: string
+): string | null {
+  // OSC 133;D proves the pane is back at the shell. The durable record outlives that exit on
+  // purpose (cold restore resumes from it), so gate it here too — otherwise the gate would only
+  // hold for panes whose agent has no resumable record.
+  if (state.paneForegroundAgentByPaneKey[paneKey]?.shellForeground === true) {
+    return null
+  }
+  const live = state.agentStatusByPaneKey[paneKey]
+  if (live && live.restoredUnconfirmed !== true) {
+    return live.providerSession?.id ?? null
+  }
+  return state.sleepingAgentSessionsByPaneKey[paneKey]?.providerSession.id ?? null
+}
diff --git a/src/renderer/src/components/terminal-pane/terminal-copy-rejection-guards.ts b/src/renderer/src/components/terminal-pane/terminal-copy-rejection-guards.ts
index 6debb3e3d5f..9a13d026d08 100644
--- a/src/renderer/src/components/terminal-pane/terminal-copy-rejection-guards.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-copy-rejection-guards.ts
@@ -1,7 +1,7 @@
 // Why: writeClipboardText resolved unconditionally in the web client until the
 // insecure-context copy fallback landed. It can now reject (insecure origin with
-// no live user gesture), so these two menu actions need explicit outcomes:
-// the copy must never leave the pane unfocused, and Copy Pane ID must not toast
+// no live user gesture), so identity-copy actions need explicit outcomes:
+// the copy must never leave the pane unfocused, and identity actions must not toast
 // success for a copy that did not happen. Extracted so both are testable without
 // mounting the whole context-menu hook.
 
@@ -22,15 +22,15 @@ export async function runTerminalCopy(args: {
   }
 }
 
-export async function runCopyPaneId(args: {
-  paneKey: string
+export async function runTerminalIdentityCopy(args: {
+  text: string
   writeClipboardText: (text: string) => Promise<void>
   onSuccess: () => void
   onError: () => void
   focus: () => void
 }): Promise<void> {
   try {
-    await args.writeClipboardText(args.paneKey)
+    await args.writeClipboardText(args.text)
     args.onSuccess()
   } catch {
     args.onError()
diff --git a/src/renderer/src/components/terminal-pane/terminal-copy-rejection-handling.test.ts b/src/renderer/src/components/terminal-pane/terminal-copy-rejection-handling.test.ts
index d6aac273ed8..1b14b379f2a 100644
--- a/src/renderer/src/components/terminal-pane/terminal-copy-rejection-handling.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-copy-rejection-handling.test.ts
@@ -1,5 +1,5 @@
 import { describe, expect, it, vi } from 'vitest'
-import { runTerminalCopy, runCopyPaneId } from './terminal-copy-rejection-guards'
+import { runTerminalCopy, runTerminalIdentityCopy } from './terminal-copy-rejection-guards'
 
 // Why this file exists: web-preload-api's writeClipboardText used to resolve
 // unconditionally, so the terminal copy surfaces call it without a rejection
@@ -42,15 +42,15 @@ describe('runTerminalCopy', () => {
   })
 })
 
-describe('runCopyPaneId', () => {
+describe('runTerminalIdentityCopy', () => {
   it('reports failure instead of claiming success when the write rejects', async () => {
     const onSuccess = vi.fn()
     const onError = vi.fn()
     const focus = vi.fn()
 
     await expect(
-      runCopyPaneId({
-        paneKey: 'tab:leaf',
+      runTerminalIdentityCopy({
+        text: 'tab:leaf',
         writeClipboardText: vi.fn().mockRejectedValue(REJECTION),
         onSuccess,
         onError,
@@ -68,8 +68,8 @@ describe('runCopyPaneId', () => {
     const onError = vi.fn()
     const focus = vi.fn()
 
-    await runCopyPaneId({
-      paneKey: 'tab:leaf',
+    await runTerminalIdentityCopy({
+      text: 'tab:leaf',
       writeClipboardText: vi.fn().mockResolvedValue(undefined),
       onSuccess,
       onError,
diff --git a/src/renderer/src/components/terminal-pane/terminal-pane-hook-order-parity.test.ts b/src/renderer/src/components/terminal-pane/terminal-pane-hook-order-parity.test.ts
index 206a31e7177..c42bbd31919 100644
--- a/src/renderer/src/components/terminal-pane/terminal-pane-hook-order-parity.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-pane-hook-order-parity.test.ts
@@ -8,9 +8,9 @@ import { describe, expect, it } from 'vitest'
 const TERMINAL_PANE_HOOK_SOURCE_PATTERN =
   /^(?:TerminalPane\.tsx|use-terminal-pane-(?:chat-state|close-actions|context-actions|controller|foundation|global-listeners|layout-bindings|layout-persistence|lifecycle-stage|mobile-actions|paste-listeners|process-exit-actions|projection|reconciliation|startup-actions|store-bindings|title-effects|title-state)\.ts)$/
 // Rebased onto main after the workbench surface-per-workspace and deferred
-// split-cwd changes; this hash is from that main's pre-split TerminalPane (229 hooks).
+// split-cwd changes; the pane session-ID projection adds one render hook (230 hooks).
 const PRE_REFACTOR_HOOK_ORDER_SHA256 =
-  'be2366fffb992e082fd9e4641b7543a0db75cb7bc4ef6e0eb0deda41beaac358'
+  '77adcf8272ddc6f903920f12b2b652ec26c570987f452076ae6460c67d3741f3'
 
 const sourceFiles = readdirSync(__dirname)
   .filter((name) => TERMINAL_PANE_HOOK_SOURCE_PATTERN.test(name))
@@ -75,7 +75,7 @@ function readFlattenedHookOrder(): string[] {
 describe('TerminalPane refactor hook parity', () => {
   it('preserves the recursively flattened render hook order', () => {
     const hooks = readFlattenedHookOrder()
-    expect(hooks).toHaveLength(229)
+    expect(hooks).toHaveLength(230)
     expect(hooks.filter((hook) => hook === 'useMemo')).toHaveLength(4)
     expect(createHash('sha256').update(hooks.join('\n')).digest('hex')).toBe(
       PRE_REFACTOR_HOOK_ORDER_SHA256
diff --git a/src/renderer/src/components/terminal-pane/terminal-pane-menu-copy-actions.ts b/src/renderer/src/components/terminal-pane/terminal-pane-menu-copy-actions.ts
index 62051f84f26..417f920af5c 100644
--- a/src/renderer/src/components/terminal-pane/terminal-pane-menu-copy-actions.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-pane-menu-copy-actions.ts
@@ -3,7 +3,7 @@ import type { ManagedPane } from '@/lib/pane-manager/pane-manager'
 import { makePaneKey } from '../../../../shared/stable-pane-id'
 import { translate } from '@/i18n/i18n'
 import { copyTerminalHandleForPane } from './terminal-handle-copy'
-import { runCopyPaneId, runTerminalCopy } from './terminal-copy-rejection-guards'
+import { runTerminalCopy, runTerminalIdentityCopy } from './terminal-copy-rejection-guards'
 
 export const copyTerminalPaneMenuSelection = async (pane: ManagedPane | null): Promise<void> => {
   if (!pane) {
@@ -27,10 +27,10 @@ export const copyTerminalPaneMenuPaneId = async (
   if (!pane) {
     return
   }
-  await runCopyPaneId({
+  await runTerminalIdentityCopy({
     // Why: orchestration targets use ORCA_PANE_KEY, which survives renderer
     // remounts; the numeric PaneManager id is only a local runtime handle.
-    paneKey: makePaneKey(tabId, pane.leafId),
+    text: makePaneKey(tabId, pane.leafId),
     writeClipboardText: window.api.ui.writeTerminalClipboardText,
     onSuccess: () =>
       toast.success(
@@ -83,3 +83,35 @@ export const copyTerminalPaneMenuTerminalId = async (
     pane.terminal.focus()
   }
 }
+
+export const copyTerminalPaneMenuAgentSessionId = async (
+  pane: ManagedPane | null,
+  sessionId: string | null
+): Promise<void> => {
+  if (!pane) {
+    return
+  }
+  if (!sessionId) {
+    pane.terminal.focus()
+    return
+  }
+  await runTerminalIdentityCopy({
+    text: sessionId,
+    writeClipboardText: window.api.ui.writeTerminalClipboardText,
+    onSuccess: () =>
+      toast.success(
+        translate(
+          'components.terminalPane.TerminalContextMenu.copySessionIdSuccess',
+          'Session ID copied'
+        )
+      ),
+    onError: () =>
+      toast.error(
+        translate(
+          'components.terminalPane.TerminalContextMenu.copySessionIdError',
+          'Unable to copy session ID'
+        )
+      ),
+    focus: () => pane.terminal.focus()
+  })
+}
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-pane-context-menu.ts b/src/renderer/src/components/terminal-pane/use-terminal-pane-context-menu.ts
index a6f04fca5f3..155482f2163 100644
--- a/src/renderer/src/components/terminal-pane/use-terminal-pane-context-menu.ts
+++ b/src/renderer/src/components/terminal-pane/use-terminal-pane-context-menu.ts
@@ -11,6 +11,7 @@ import type { PreparedAgentSessionFork } from './terminal-agent-session-fork'
 import type { AgentSessionContinuationRequest } from '@/lib/agent-session-continuation'
 import { pasteTerminalPaneMenuClipboard } from './terminal-pane-menu-paste'
 import {
+  copyTerminalPaneMenuAgentSessionId,
   copyTerminalPaneMenuPaneId,
   copyTerminalPaneMenuSelection,
   copyTerminalPaneMenuTerminalId
@@ -22,6 +23,9 @@ import {
 } from './terminal-pane-menu-agent-session-actions'
 import { useTerminalPaneSplitActions } from './use-terminal-pane-split-actions'
 import { useTerminalContextMenuTrigger } from './use-terminal-context-menu-trigger'
+import { useAppStore } from '@/store'
+import { makePaneKey } from '../../../../shared/stable-pane-id'
+import { resolvePaneAgentSessionId } from './pane-agent-session-id'
 
 type UseTerminalPaneContextMenuDeps = {
   managerRef: React.RefObject<PaneManager | null>
@@ -57,6 +61,7 @@ type TerminalMenuState = {
   onSelectAll: () => void
   onCopyTerminalId: () => Promise<void>
   onCopyPaneId: () => Promise<void>
+  onCopyAgentSessionId: () => Promise<void>
   onPaste: () => Promise<void>
   onSplitRight: () => void
   onSplitDown: () => void
@@ -170,6 +175,14 @@ export function useTerminalPaneContextMenu({
   const onCopyTerminalId = async (): Promise<void> =>
     copyTerminalPaneMenuTerminalId(resolveMenuPane(), tabId)
 
+  const onCopyAgentSessionId = async (): Promise<void> => {
+    const pane = resolveMenuPane()
+    const sessionId = pane
+      ? resolvePaneAgentSessionId(useAppStore.getState(), makePaneKey(tabId, pane.leafId))
+      : null
+    return copyTerminalPaneMenuAgentSessionId(pane, sessionId)
+  }
+
   const onPaste = async (): Promise<void> => pasteResolvedPane('context-menu')
 
   const onEqualizePaneSizes = (): void => {
@@ -275,6 +288,7 @@ export function useTerminalPaneContextMenu({
     onSelectAll,
     onCopyTerminalId,
     onCopyPaneId,
+    onCopyAgentSessionId,
     onPaste,
     onSplitRight,
     onSplitDown,
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-pane-projection.ts b/src/renderer/src/components/terminal-pane/use-terminal-pane-projection.ts
index 3e4ff6f6efc..ea179b6925e 100644
--- a/src/renderer/src/components/terminal-pane/use-terminal-pane-projection.ts
+++ b/src/renderer/src/components/terminal-pane/use-terminal-pane-projection.ts
@@ -16,6 +16,9 @@ import {
 } from '../native-chat/native-chat-leaf-routing'
 import { canContinueAgentSessionInNewSession } from './terminal-agent-session-continuation'
 import type { TerminalPaneMobileController } from './use-terminal-pane-mobile-actions'
+import { useAppStore } from '@/store'
+import { makePaneKey } from '../../../../shared/stable-pane-id'
+import { resolvePaneAgentSessionId } from './pane-agent-session-id'
 
 export function useTerminalPaneProjection(controller: TerminalPaneMobileController) {
   const {
@@ -40,6 +43,7 @@ export function useTerminalPaneProjection(controller: TerminalPaneMobileControll
     shouldMeasureHiddenStartup,
     structuredSessionAgent,
     structuredSessionId,
+    tabId,
     sshReconnectOwnsTerminalErrors,
     systemPrefersDark,
     tabAgentTypeByLeaf,
@@ -100,6 +104,11 @@ export function useTerminalPaneProjection(controller: TerminalPaneMobileControll
   )
   const menuPaneHasCustomTitle =
     contextMenu.menuPaneId !== null && Boolean(paneTitles[contextMenu.menuPaneId])
+  const menuAgentSessionId = useAppStore((state) =>
+    contextMenu.open && contextMenuLeafId
+      ? resolvePaneAgentSessionId(state, makePaneKey(tabId, contextMenuLeafId))
+      : null
+  )
   const chatLeafStillMounted = chatLeafId
     ? managedPanes.some((pane) => pane.leafId === chatLeafId)
     : false
@@ -181,6 +190,7 @@ export function useTerminalPaneProjection(controller: TerminalPaneMobileControll
     showSshReconnectOverlay,
     visibleTerminalError,
     menuPaneHasCustomTitle,
+    menuAgentSessionId,
     chatLeafStillMounted,
     chatPane,
     chatPanePtyId,
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index 7d621d77751..f1489d6754d 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -16781,10 +16781,7 @@
         "SortableTabContextMenu": {
           "switchToTerminalView": "Switch to terminal view",
           "switchToChatView": "Switch to chat view",
-          "closeTabsToLeft": "Close Tabs To The Left",
-          "copySessionId": "Copy Session ID",
-          "copySessionIdSuccess": "Session ID copied",
-          "copySessionIdError": "Failed to copy Session ID"
+          "closeTabsToLeft": "Close Tabs To The Left"
         },
         "BrowserTab": {
           "closeOthers": "Close Others",
@@ -17073,6 +17070,13 @@
         "days": "{{value0}}d",
         "underOneMinute": "<1m"
       }
+    },
+    "terminalPane": {
+      "TerminalContextMenu": {
+        "copySessionId": "Copy Session ID",
+        "copySessionIdSuccess": "Session ID copied",
+        "copySessionIdError": "Unable to copy session ID"
+      }
     }
   },
   "dashboardPopout": {
diff --git a/src/renderer/src/i18n/locales/es.json b/src/renderer/src/i18n/locales/es.json
index 4736cdbbbd4..79731f3b096 100644
--- a/src/renderer/src/i18n/locales/es.json
+++ b/src/renderer/src/i18n/locales/es.json
@@ -14652,10 +14652,7 @@
         "SortableTabContextMenu": {
           "switchToTerminalView": "Cambiar a la vista de terminal",
           "switchToChatView": "Cambiar a vista de chat",
-          "closeTabsToLeft": "Cerrar pestañas a la izquierda",
-          "copySessionId": "Copiar ID de sesión",
-          "copySessionIdSuccess": "ID de sesión copiado",
-          "copySessionIdError": "No se pudo copiar el ID de sesión"
+          "closeTabsToLeft": "Cerrar pestañas a la izquierda"
         },
         "BrowserTab": {
           "closeOthers": "Cerrar otras",
@@ -14703,6 +14700,13 @@
       "sent": "El contexto de la sesión se envió a {{agent}} en una sesión nueva.",
       "deliveryFailed": "La nueva sesión de {{agent}} se inició, pero no se pudo enviar su contexto.",
       "launchFailed": "No se pudo iniciar una sesión nueva de {{agent}}."
+    },
+    "terminalPane": {
+      "TerminalContextMenu": {
+        "copySessionId": "Copiar ID de sesión",
+        "copySessionIdSuccess": "ID de sesión copiado",
+        "copySessionIdError": "No se pudo copiar el ID de sesión"
+      }
     }
   },
   "dashboardPopout": {
diff --git a/src/renderer/src/i18n/locales/ja.json b/src/renderer/src/i18n/locales/ja.json
index 315e5775442..6afc506b12b 100644
--- a/src/renderer/src/i18n/locales/ja.json
+++ b/src/renderer/src/i18n/locales/ja.json
@@ -14652,10 +14652,7 @@
         "SortableTabContextMenu": {
           "switchToTerminalView": "ターミナルビューに切り替える",
           "switchToChatView": "チャットビューに切り替える",
-          "closeTabsToLeft": "左側のタブを閉じる",
-          "copySessionId": "セッション ID をコピー",
-          "copySessionIdSuccess": "セッション ID をコピーしました",
-          "copySessionIdError": "セッション ID のコピーに失敗しました"
+          "closeTabsToLeft": "左側のタブを閉じる"
         },
         "BrowserTab": {
           "closeOthers": "その他を閉じる",
@@ -14703,6 +14700,13 @@
       "sent": "セッションコンテキストを新規 {{agent}} セッションに送信しました。",
       "deliveryFailed": "新規 {{agent}} セッションは開始しましたが、コンテキストを送信できませんでした。",
       "launchFailed": "新規 {{agent}} セッションを開始できませんでした。"
+    },
+    "terminalPane": {
+      "TerminalContextMenu": {
+        "copySessionId": "セッション ID をコピー",
+        "copySessionIdSuccess": "セッション ID をコピーしました",
+        "copySessionIdError": "セッション ID のコピーに失敗しました"
+      }
     }
   },
   "dashboardPopout": {
diff --git a/src/renderer/src/i18n/locales/ko.json b/src/renderer/src/i18n/locales/ko.json
index 4a196c62304..c2836df4c40 100644
--- a/src/renderer/src/i18n/locales/ko.json
+++ b/src/renderer/src/i18n/locales/ko.json
@@ -14708,10 +14708,7 @@
         "SortableTabContextMenu": {
           "switchToTerminalView": "terminal 보기로 전환",
           "switchToChatView": "채팅 보기로 전환",
-          "closeTabsToLeft": "왼쪽으로 탭 닫기",
-          "copySessionId": "세션 ID 복사",
-          "copySessionIdSuccess": "세션 ID를 복사했습니다",
-          "copySessionIdError": "세션 ID를 복사하지 못했습니다"
+          "closeTabsToLeft": "왼쪽으로 탭 닫기"
         },
         "BrowserTab": {
           "closeOthers": "다른 탭 닫기",
@@ -14820,6 +14817,13 @@
       "sent": "세션 컨텍스트를 새 {{agent}} 세션으로 보냈습니다.",
       "deliveryFailed": "새 {{agent}} 세션은 시작되었지만 컨텍스트를 보내지 못했습니다.",
       "launchFailed": "새 {{agent}} 세션을 시작할 수 없습니다."
+    },
+    "terminalPane": {
+      "TerminalContextMenu": {
+        "copySessionId": "세션 ID 복사",
+        "copySessionIdSuccess": "세션 ID를 복사했습니다",
+        "copySessionIdError": "세션 ID를 복사하지 못했습니다"
+      }
     }
   },
   "dashboardPopout": {
diff --git a/src/renderer/src/i18n/locales/zh.json b/src/renderer/src/i18n/locales/zh.json
index edbd96e2623..77f56e805ae 100644
--- a/src/renderer/src/i18n/locales/zh.json
+++ b/src/renderer/src/i18n/locales/zh.json
@@ -14708,10 +14708,7 @@
         "SortableTabContextMenu": {
           "switchToTerminalView": "切换到终端视图",
           "switchToChatView": "切换到聊天视图",
-          "closeTabsToLeft": "关闭左侧的选项卡",
-          "copySessionId": "复制会话 ID",
-          "copySessionIdSuccess": "已复制会话 ID",
-          "copySessionIdError": "复制会话 ID 失败"
+          "closeTabsToLeft": "关闭左侧的选项卡"
         },
         "BrowserTab": {
           "closeOthers": "关闭其他",
@@ -14820,6 +14817,13 @@
       "sent": "已将会话上下文发送到新的 {{agent}} 会话。",
       "deliveryFailed": "新的 {{agent}} 会话已启动，但无法发送上下文。",
       "launchFailed": "无法启动新的 {{agent}} 会话。"
+    },
+    "terminalPane": {
+      "TerminalContextMenu": {
+        "copySessionId": "复制会话 ID",
+        "copySessionIdSuccess": "已复制会话 ID",
+        "copySessionIdError": "复制会话 ID 失败"
+      }
     }
   },
   "dashboardPopout": {
diff --git a/tests/e2e/tab-context-menu-session-id.spec.ts b/tests/e2e/terminal-context-menu-session-id.spec.ts
similarity index 59%
rename from tests/e2e/tab-context-menu-session-id.spec.ts
rename to tests/e2e/terminal-context-menu-session-id.spec.ts
index cab18bace32..dc58567cefa 100644
--- a/tests/e2e/tab-context-menu-session-id.spec.ts
+++ b/tests/e2e/terminal-context-menu-session-id.spec.ts
@@ -1,7 +1,4 @@
-/**
- * E2E coverage for copying an agent provider session ID from a terminal tab's
- * context menu.
- */
+/** E2E coverage for copying provider identity from the exact terminal pane. */
 
 import { test, expect } from './helpers/orca-app'
 import {
@@ -11,10 +8,11 @@ import {
   waitForSessionReady
 } from './helpers/store'
 import { waitForPaneIdentitySnapshot } from './helpers/terminal'
+import { openTerminalContextMenu } from './helpers/terminal-pane-title-actions'
 
-const SESSION_ID = 'e2e-terminal-tab-session'
+const SESSION_ID = 'e2e-terminal-pane-session'
 
-test('terminal tab context menu copies the active agent session ID', async ({ orcaPage }) => {
+test('terminal pane context menu copies its agent session ID', async ({ orcaPage }) => {
   await waitForSessionReady(orcaPage)
   const worktreeId = await waitForActiveWorktree(orcaPage)
   await ensureTerminalVisible(orcaPage)
@@ -30,21 +28,20 @@ test('terminal tab context menu copies the active agent session ID', async ({ or
   }
   const paneKey = `${tabId}:${leafId}`
 
-  // Seed the same renderer state a live agent hook produces while keeping the
-  // test independent of an installed provider CLI.
+  // Keep this independent of an installed provider CLI while exercising the
+  // durable pane identity used when transient live status has been cleared.
   await orcaPage.evaluate(
     ({ paneKey, tabId, worktreeId, sessionId }) => {
       const state = window.__store?.getState()
       if (!state) {
         throw new Error('Store unavailable')
       }
-      state.setAgentStatus(
+      state.recordAgentProviderSession(
         paneKey,
-        { state: 'working', prompt: 'copy session id', agentType: 'claude' },
-        'Claude',
+        'claude',
+        { key: 'session_id', id: sessionId },
         undefined,
-        { tabId, worktreeId },
-        { providerSession: { key: 'session_id', id: sessionId } }
+        { tabId, worktreeId }
       )
     },
     { paneKey, tabId, worktreeId, sessionId: SESSION_ID }
@@ -55,16 +52,22 @@ test('terminal tab context menu copies the active agent session ID', async ({ or
       () =>
         orcaPage.evaluate(
           ({ paneKey }) =>
-            window.__store?.getState().agentStatusByPaneKey[paneKey]?.providerSession?.id,
+            window.__store?.getState().sleepingAgentSessionsByPaneKey[paneKey]?.providerSession.id,
           { paneKey }
         ),
       { timeout: 3_000 }
     )
     .toBe(SESSION_ID)
 
-  const tab = orcaPage.locator(`[data-testid="sortable-tab"][data-tab-id="${tabId}"]`)
-  await expect(tab).toBeVisible()
-  await tab.click({ button: 'right' })
+  await openTerminalContextMenu(orcaPage)
+
+  const identityItems = await orcaPage.getByRole('menuitem').allInnerTexts()
+  const sessionIdIndex = identityItems.indexOf('Copy Session ID')
+  expect(identityItems.slice(sessionIdIndex, sessionIdIndex + 3)).toEqual([
+    'Copy Session ID',
+    'Copy Terminal ID',
+    'Copy Pane ID'
+  ])
 
   const copyItem = orcaPage.getByRole('menuitem', { name: 'Copy Session ID', exact: true })
   await expect(copyItem).toBeVisible()

From 28cb372559a9a1be8076198569457c9f4049e46a Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:05:30 -0700
Subject: [PATCH 65/92] perf(platform): resolve the immutable platform payload
 once (#18135)

`window.api.platform.get()` runs ~19x/sec while the app is idle. Every call
recomputed a payload whose fields are all fixed for the process lifetime
(`process.platform`, `process.getSystemVersion()`, `process.arch`, the shell
env vars, and the env-derived Linux display server), allocated a fresh object,
and crossed the context bridge.

Memoize the payload lazily at preload module scope and freeze it, and cache the
resolved platform in `getRendererAppPlatform()` so the 32 renderer call sites
stop crossing the bridge on every render. The user-agent fallback stays uncached
because the web client installs its platform API after boot.
---
 src/preload/api/platform-bridge.test.ts       | 55 +++++++++++++++++++
 src/preload/api/platform-bridge.ts            | 15 ++++-
 ...ebar-titlebar-drag-regions.render.test.tsx |  2 +
 .../settings/AppearancePane.test.tsx          |  2 +
 .../src/lib/renderer-app-platform.test.ts     | 52 ++++++++++++++++++
 src/renderer/src/lib/renderer-app-platform.ts | 14 +++++
 .../src/store/slices/preflight.test.ts        |  2 +
 7 files changed, 140 insertions(+), 2 deletions(-)
 create mode 100644 src/preload/api/platform-bridge.test.ts
 create mode 100644 src/renderer/src/lib/renderer-app-platform.test.ts

diff --git a/src/preload/api/platform-bridge.test.ts b/src/preload/api/platform-bridge.test.ts
new file mode 100644
index 00000000000..5c8bdde34f9
--- /dev/null
+++ b/src/preload/api/platform-bridge.test.ts
@@ -0,0 +1,55 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { platformApi } from './platform-bridge'
+
+const mocks = vi.hoisted(() => ({ getLinuxDisplayServer: vi.fn(() => null) }))
+
+vi.mock('../preload-runtime-support', () => ({
+  getLinuxDisplayServer: mocks.getLinuxDisplayServer
+}))
+
+// Electron declares getSystemVersion as required on NodeJS.Process; Node does not have it.
+const mutableProcess = process as unknown as { getSystemVersion?: () => string }
+
+async function loadPlatformApi(): Promise<typeof platformApi> {
+  vi.resetModules()
+  return (await import('./platform-bridge')).platformApi
+}
+
+describe('platformApi.get', () => {
+  beforeEach(() => {
+    mocks.getLinuxDisplayServer.mockClear()
+  })
+
+  afterEach(() => {
+    delete mutableProcess.getSystemVersion
+  })
+
+  it('resolves the immutable payload once and returns the identical object', async () => {
+    const platformApi = await loadPlatformApi()
+    const getSystemVersion = vi.fn(() => '25.3.0')
+    mutableProcess.getSystemVersion = getSystemVersion
+
+    const first = platformApi.get()
+    for (let index = 0; index < 100; index += 1) {
+      expect(platformApi.get()).toBe(first)
+    }
+
+    expect(getSystemVersion).toHaveBeenCalledTimes(1)
+    expect(mocks.getLinuxDisplayServer).toHaveBeenCalledTimes(1)
+    expect(first.platform).toBe(process.platform)
+    expect(first.arch).toBe(process.arch)
+    expect(first.osRelease).toBe('25.3.0')
+  })
+
+  it('freezes the payload so no consumer can corrupt the shared instance', async () => {
+    const platformApi = await loadPlatformApi()
+
+    expect(Object.isFrozen(platformApi.get())).toBe(true)
+  })
+
+  it('resolves nothing before the first get, keeping preload startup free', async () => {
+    await loadPlatformApi()
+
+    expect(mocks.getLinuxDisplayServer).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/preload/api/platform-bridge.ts b/src/preload/api/platform-bridge.ts
index 8e47a4386cf..fb1aad5de4e 100644
--- a/src/preload/api/platform-bridge.ts
+++ b/src/preload/api/platform-bridge.ts
@@ -1,8 +1,14 @@
 import { getLinuxDisplayServer } from '../preload-runtime-support'
 import type { PreloadApi } from '../api-types'
 
-export const platformApi = {
-  get: () => ({
+type PlatformInfo = ReturnType<PreloadApi['platform']['get']>
+
+// Why: the renderer reads this on its render cadence, and every field below is fixed
+// for the process lifetime, so resolve once and hand back the same frozen payload.
+let platformInfo: PlatformInfo | undefined
+
+function resolvePlatformInfo(): PlatformInfo {
+  return Object.freeze({
     platform: process.platform,
     // Why: sandboxed preload cannot require node:os; Electron exposes the OS
     // version on process.getSystemVersion when available.
@@ -14,4 +20,9 @@ export const platformApi = {
     shell: process.env.SHELL?.trim() || process.env.ComSpec?.trim() || '',
     displayServer: getLinuxDisplayServer()
   })
+}
+
+export const platformApi = {
+  // Why: resolved lazily so preload startup keeps paying nothing for it.
+  get: () => (platformInfo ??= resolvePlatformInfo())
 } satisfies PreloadApi['platform']
diff --git a/src/renderer/src/components/right-sidebar/right-sidebar-titlebar-drag-regions.render.test.tsx b/src/renderer/src/components/right-sidebar/right-sidebar-titlebar-drag-regions.render.test.tsx
index 6869daaa89c..40a3966047f 100644
--- a/src/renderer/src/components/right-sidebar/right-sidebar-titlebar-drag-regions.render.test.tsx
+++ b/src/renderer/src/components/right-sidebar/right-sidebar-titlebar-drag-regions.render.test.tsx
@@ -11,6 +11,7 @@ import {
   RIGHT_SIDEBAR_WINDOWS_TOP_ACTIVITY_STRIP_CLASS_NAME
 } from './right-sidebar-titlebar-drag-regions'
 import type { ActiveRightSidebarTab } from '@/store/slices/editor'
+import { resetRendererAppPlatformCacheForTests } from '@/lib/renderer-app-platform'
 
 const mockAppState = vi.hoisted(() => ({
   rightSidebarOpen: true,
@@ -198,6 +199,7 @@ function expectNoDrag(tag: string): void {
 }
 
 function setRendererPlatform(platform: NodeJS.Platform): void {
+  resetRendererAppPlatformCacheForTests()
   Object.defineProperty(window, 'api', {
     configurable: true,
     value: {
diff --git a/src/renderer/src/components/settings/AppearancePane.test.tsx b/src/renderer/src/components/settings/AppearancePane.test.tsx
index 4a89d66cd03..01573d65b49 100644
--- a/src/renderer/src/components/settings/AppearancePane.test.tsx
+++ b/src/renderer/src/components/settings/AppearancePane.test.tsx
@@ -5,6 +5,7 @@ import { createRoot, type Root } from 'react-dom/client'
 import { I18nextProvider } from 'react-i18next'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { i18n } from '@/i18n/i18n'
+import { resetRendererAppPlatformCacheForTests } from '@/lib/renderer-app-platform'
 import { getDefaultSettings } from '../../../../shared/constants'
 import type { GlobalSettings } from '../../../../shared/global-settings-types'
 import type { StatusBarItem } from '../../../../shared/ui-chrome-types'
@@ -216,6 +217,7 @@ describe('AppearancePane', () => {
 
   beforeEach(() => {
     vi.clearAllMocks()
+    resetRendererAppPlatformCacheForTests()
     mocks.state.availableStatusBarToggles = []
     mocks.state.appPlatform = 'linux'
     mocks.state.settingsSearchQuery = 'automations'
diff --git a/src/renderer/src/lib/renderer-app-platform.test.ts b/src/renderer/src/lib/renderer-app-platform.test.ts
new file mode 100644
index 00000000000..22c0388084a
--- /dev/null
+++ b/src/renderer/src/lib/renderer-app-platform.test.ts
@@ -0,0 +1,52 @@
+// @vitest-environment happy-dom
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  getRendererAppPlatform,
+  resetRendererAppPlatformCacheForTests
+} from './renderer-app-platform'
+
+function stubPlatformApi(get: () => { platform: NodeJS.Platform }): void {
+  ;(window as unknown as { api: unknown }).api = { platform: { get } }
+}
+
+describe('getRendererAppPlatform', () => {
+  beforeEach(() => {
+    resetRendererAppPlatformCacheForTests()
+  })
+
+  afterEach(() => {
+    delete (window as unknown as { api?: unknown }).api
+    resetRendererAppPlatformCacheForTests()
+  })
+
+  it('crosses the preload bridge once no matter how many renders ask', () => {
+    const get = vi.fn(() => ({ platform: 'darwin' as NodeJS.Platform }))
+    stubPlatformApi(get)
+
+    for (let index = 0; index < 500; index += 1) {
+      expect(getRendererAppPlatform()).toBe('darwin')
+    }
+
+    expect(get).toHaveBeenCalledTimes(1)
+  })
+
+  it.each(['darwin', 'win32', 'linux'] as const)(
+    'reports the preload platform verbatim on %s',
+    (platform) => {
+      stubPlatformApi(() => ({ platform }))
+
+      expect(getRendererAppPlatform()).toBe(platform)
+    }
+  )
+
+  // Why: the web client injects its platform API after boot, so an early caller must
+  // not pin the user-agent guess for the rest of the session.
+  it('does not cache the user-agent fallback', () => {
+    // 'freebsd' is never a user-agent fallback answer, so the swap is unambiguous.
+    expect(getRendererAppPlatform()).not.toBe('freebsd')
+
+    stubPlatformApi(() => ({ platform: 'freebsd' }))
+
+    expect(getRendererAppPlatform()).toBe('freebsd')
+  })
+})
diff --git a/src/renderer/src/lib/renderer-app-platform.ts b/src/renderer/src/lib/renderer-app-platform.ts
index e036d0690e3..f94b77ed2e9 100644
--- a/src/renderer/src/lib/renderer-app-platform.ts
+++ b/src/renderer/src/lib/renderer-app-platform.ts
@@ -1,7 +1,16 @@
+// Why: hot render paths call this per render; the preload answer never changes, so
+// cache it. The user-agent fallback stays uncached because window.api can still be
+// installing (the web client injects its own platform API after boot).
+let cachedAppPlatform: NodeJS.Platform | undefined
+
 export function getRendererAppPlatform(): NodeJS.Platform {
+  if (cachedAppPlatform) {
+    return cachedAppPlatform
+  }
   const preloadPlatform =
     typeof window === 'undefined' ? undefined : window.api?.platform?.get?.()?.platform
   if (preloadPlatform) {
+    cachedAppPlatform = preloadPlatform
     return preloadPlatform
   }
   const userAgent = typeof navigator === 'undefined' ? '' : navigator.userAgent
@@ -16,3 +25,8 @@ export function getRendererAppPlatform(): NodeJS.Platform {
   }
   return 'win32'
 }
+
+/** Tests swap the window.api platform stub between cases; the real value never changes. */
+export function resetRendererAppPlatformCacheForTests(): void {
+  cachedAppPlatform = undefined
+}
diff --git a/src/renderer/src/store/slices/preflight.test.ts b/src/renderer/src/store/slices/preflight.test.ts
index 386bdfdc59a..168f0099fcc 100644
--- a/src/renderer/src/store/slices/preflight.test.ts
+++ b/src/renderer/src/store/slices/preflight.test.ts
@@ -6,6 +6,7 @@ import type { Worktree } from '../../../../shared/worktree/types'
 import type { AppState } from '../types'
 import { createPreflightSlice } from './preflight'
 import { createRuntimeStatusSlice } from './runtime-status'
+import { resetRendererAppPlatformCacheForTests } from '@/lib/renderer-app-platform'
 
 const preflightCheck = vi.fn()
 const callRuntimeRpc = vi.fn()
@@ -62,6 +63,7 @@ function resetPreflightMocks(): void {
   preflightCheck.mockReset()
   callRuntimeRpc.mockReset()
   platformGet.mockReset().mockReturnValue({ platform: 'linux' })
+  resetRendererAppPlatformCacheForTests()
 }
 
 function makeStatus(glabInstalled: boolean): PreflightStatus {

From dff7f914016cde2f27174a7bedddd9e9602b05af Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:05:35 -0700
Subject: [PATCH 66/92] perf(sidebar): stop rebuilding per-card selector
 records on every store write (#18133)

Zustand re-runs every mounted subscriber's selector on every store write. The
per-worktree sidebar selectors built a fresh Record per call, so 15 visible
cards x 6 reads x every write allocated a record each time even when nothing
they read had changed.

- Add createWorktreeRecordSelector: gates the build on the source slice
  identities, memoizes per worktree id, and carries the previous generation
  forward so a rebuild with equal contents keeps its reference.
- Route the pane-title, live-PTY, layout-root and terminal-layout selectors
  through it, and return a shared frozen empty when a worktree has no tabs.
- Swap useWorktreeAgentRows' inactive-branch `[]`/`{}` literals for the shared
  frozen constants so the `active` gate actually short-circuits on identity.
- Identity-cache the sidebar pending-worktree-creation key list, which ran
  Object.values(...).map(...) from an always-mounted subscriber.
- Drop `key={text}` from TruncatedSidebarLabel so a label change remeasures in
  place instead of remounting the span and rebuilding its ResizeObserver.
- Remove the non-compositable `width` from the board drop indicator's
  will-change hint.
---
 src/renderer/src/assets/main.css              |   4 +-
 .../sidebar/truncated-sidebar-label.test.tsx  |  36 ++++++
 .../sidebar/truncated-sidebar-label.tsx       |  19 +--
 .../sidebar/useWorktreeAgentRows.ts           |  47 ++++++--
 .../worktree-agent-row-selectors.test.ts      | 113 ++++++++++++++++--
 .../sidebar/worktree-agent-row-selectors.ts   |  38 ++++--
 .../worktree-card-status-inputs.test.ts       |  74 ++++++++++++
 .../sidebar/worktree-card-status-inputs.ts    |  84 ++++++++-----
 .../pending-worktree-creation-keys.test.ts    |  53 ++++++++
 .../listing/pending-worktree-creation-keys.ts |  39 ++++++
 .../worktree-list/listing/use-section-rows.ts |  13 +-
 .../sidebar/worktree-record-selector-cache.ts |  63 ++++++++++
 12 files changed, 507 insertions(+), 76 deletions(-)
 create mode 100644 src/renderer/src/components/sidebar/worktree-list/listing/pending-worktree-creation-keys.test.ts
 create mode 100644 src/renderer/src/components/sidebar/worktree-list/listing/pending-worktree-creation-keys.ts
 create mode 100644 src/renderer/src/components/sidebar/worktree-record-selector-cache.ts

diff --git a/src/renderer/src/assets/main.css b/src/renderer/src/assets/main.css
index 1b5f40ccdb4..8187fe496c7 100644
--- a/src/renderer/src/assets/main.css
+++ b/src/renderer/src/assets/main.css
@@ -1956,7 +1956,9 @@ html.native-shell .app-layout {
     transform 120ms cubic-bezier(0.2, 0.8, 0.2, 1),
     width 120ms cubic-bezier(0.2, 0.8, 0.2, 1),
     opacity 80ms ease-out;
-  will-change: transform, width, opacity;
+  /* Why no `width`: it is not compositable, so hinting it only pins a layer that
+     has to be re-rastered every frame of the transition anyway. */
+  will-change: transform, opacity;
 }
 
 [data-workspace-board-card-drop-indicator='true']::before,
diff --git a/src/renderer/src/components/sidebar/truncated-sidebar-label.test.tsx b/src/renderer/src/components/sidebar/truncated-sidebar-label.test.tsx
index 27ed816c53a..1de1fac0140 100644
--- a/src/renderer/src/components/sidebar/truncated-sidebar-label.test.tsx
+++ b/src/renderer/src/components/sidebar/truncated-sidebar-label.test.tsx
@@ -105,4 +105,40 @@ describe('TruncatedSidebarLabel', () => {
     expect(container.textContent).toContain('feature/really-long-branch-name')
     expect(container.querySelector('[data-tooltip-content]')).toBeNull()
   })
+
+  // Why: worktree titles change on the hot store-write path. Remounting the
+  // span per text change tore down and rebuilt its ResizeObserver every time.
+  it('keeps one ResizeObserver across a label text change', async () => {
+    const originalResizeObserver = globalThis.ResizeObserver
+    let constructed = 0
+    let disconnected = 0
+    class CountingResizeObserver {
+      constructor(_callback: ResizeObserverCallback) {
+        constructed += 1
+      }
+      observe(): void {}
+      unobserve(): void {}
+      disconnect(): void {
+        disconnected += 1
+      }
+    }
+    globalThis.ResizeObserver = CountingResizeObserver as unknown as typeof ResizeObserver
+
+    try {
+      await act(async () => {
+        root.render(<TruncatedSidebarLabel text="feature/short" />)
+      })
+      expect(constructed).toBe(1)
+
+      await act(async () => {
+        root.render(<TruncatedSidebarLabel text="fix/short" />)
+      })
+
+      expect(container.textContent).toBe('fix/short')
+      expect(constructed).toBe(1)
+      expect(disconnected).toBe(0)
+    } finally {
+      globalThis.ResizeObserver = originalResizeObserver
+    }
+  })
 })
diff --git a/src/renderer/src/components/sidebar/truncated-sidebar-label.tsx b/src/renderer/src/components/sidebar/truncated-sidebar-label.tsx
index c7afaa2e9b0..80955b5bfe8 100644
--- a/src/renderer/src/components/sidebar/truncated-sidebar-label.tsx
+++ b/src/renderer/src/components/sidebar/truncated-sidebar-label.tsx
@@ -1,4 +1,4 @@
-import React, { useCallback, useState } from 'react'
+import React, { useCallback, useLayoutEffect, useState } from 'react'
 import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
 import { cn } from '@/lib/utils'
 
@@ -23,6 +23,7 @@ export function TruncatedSidebarLabel({
   tooltipSide = 'right',
   tooltipSideOffset = 8
 }: TruncatedSidebarLabelProps): React.JSX.Element {
+  const nodeRef = React.useRef<HTMLSpanElement | null>(null)
   const resizeObserverRef = React.useRef<ResizeObserver | null>(null)
   const removeResizeListenerRef = React.useRef<(() => void) | null>(null)
   const [truncated, setTruncated] = useState(false)
@@ -39,6 +40,7 @@ export function TruncatedSidebarLabel({
       removeResizeListenerRef.current?.()
       removeResizeListenerRef.current = null
 
+      nodeRef.current = node
       if (!node) {
         measureTruncated(null)
         return
@@ -60,14 +62,15 @@ export function TruncatedSidebarLabel({
     [measureTruncated]
   )
 
+  // Why: ResizeObserver does not fire when only the rendered text changes, but
+  // scrollWidth can. Remeasure in place rather than remounting the span, which
+  // would tear down and rebuild the observer on every title update.
+  useLayoutEffect(() => {
+    measureTruncated(nodeRef.current)
+  }, [measureTruncated, text])
+
   const label = (
-    <span
-      // Why: ResizeObserver does not fire when only the rendered text changes,
-      // but scrollWidth can; remount so branch reuse remeasures immediately.
-      key={text}
-      ref={handleRef}
-      className={cn('block min-w-0 truncate', className)}
-    >
+    <span ref={handleRef} className={cn('block min-w-0 truncate', className)}>
       {text}
     </span>
   )
diff --git a/src/renderer/src/components/sidebar/useWorktreeAgentRows.ts b/src/renderer/src/components/sidebar/useWorktreeAgentRows.ts
index b2f45a8a9a0..366bce5e5ed 100644
--- a/src/renderer/src/components/sidebar/useWorktreeAgentRows.ts
+++ b/src/renderer/src/components/sidebar/useWorktreeAgentRows.ts
@@ -5,22 +5,33 @@ import { applyAgentRowLineage } from '@/components/dashboard/agent-row-lineage'
 import { migrationUnsupportedToAgentStatusEntry } from '@/lib/migration-unsupported-agent-entry'
 import { useAppStore } from '@/store'
 import {
+  EMPTY_LIVE_PTY_IDS,
+  EMPTY_RUNTIME_PANE_TITLES,
   selectLivePtyIdsForWorktree,
   selectRuntimePaneTitlesForWorktree
 } from './worktree-card-status-inputs'
 import { buildWorktreeAgentRows } from './worktree-agent-rows'
 import {
+  EMPTY_LIVE_ENTRIES,
+  EMPTY_MIGRATION_UNSUPPORTED_ENTRIES,
+  EMPTY_RETAINED,
+  EMPTY_TERMINAL_LAYOUTS,
   selectLiveAgentStatusEntriesForWorktree,
   selectMigrationUnsupportedEntriesForWorktree,
   selectRuntimeAgentOrchestrationForWorktree,
   selectRetainedAgentEntriesForWorktree,
   selectTerminalLayoutsForWorktree
 } from './worktree-agent-row-selectors'
+import { EMPTY_WORKTREE_AGENT_ORCHESTRATION } from './worktree-agent-orchestration-index'
+import { EMPTY_TABS } from './WorktreeCardHelpers'
 import {
   createWorktreeAgentFreshnessSelector,
   EMPTY_WORKTREE_AGENT_FRESHNESS_SIGNATURE
 } from './worktree-agent-freshness-selector'
 
+// Why frozen: shared by every inactive card, and callers only read these rows.
+const EMPTY_AGENT_ROWS = Object.freeze([]) as unknown as DashboardAgentRow[]
+
 export { buildWorktreeAgentRows } from './worktree-agent-rows'
 export {
   selectLiveAgentStatusEntriesForWorktree,
@@ -44,35 +55,51 @@ export function useWorktreeAgentRows(worktreeId: string, active = true): Dashboa
     () => createWorktreeAgentFreshnessSelector(worktreeId),
     [worktreeId]
   )
-  const tabs = useAppStore((s) => (active ? s.tabsByWorktree[worktreeId] : undefined))
+  const tabs = useAppStore((s) => (active ? s.tabsByWorktree[worktreeId] : EMPTY_TABS))
   // Why: narrow the subscriptions to only THIS worktree's entries via
   // useShallow. Subscribing to the whole agentStatusByPaneKey map would make
   // every on-screen card re-render on any agent-status update anywhere —
   // O(worktrees²) render amplification. Pre-filtering here means the card
   // only re-renders when something relevant to THIS worktree changes.
   const liveEntries = useAppStore(
-    useShallow((s) => (active ? selectLiveAgentStatusEntriesForWorktree(s, worktreeId) : []))
+    useShallow((s) =>
+      active ? selectLiveAgentStatusEntriesForWorktree(s, worktreeId) : EMPTY_LIVE_ENTRIES
+    )
   )
   // Why: keep the store selector limited to stable raw records. Converting
   // migration entries creates fresh objects with Date.now(), which breaks
   // useSyncExternalStore's cached-snapshot contract and can blank Electron.
   const migrationUnsupported = useAppStore(
-    useShallow((s) => (active ? selectMigrationUnsupportedEntriesForWorktree(s, worktreeId) : []))
+    useShallow((s) =>
+      active
+        ? selectMigrationUnsupportedEntriesForWorktree(s, worktreeId)
+        : EMPTY_MIGRATION_UNSUPPORTED_ENTRIES
+    )
   )
   const retained = useAppStore(
-    useShallow((s) => (active ? selectRetainedAgentEntriesForWorktree(s, worktreeId) : []))
+    useShallow((s) =>
+      active ? selectRetainedAgentEntriesForWorktree(s, worktreeId) : EMPTY_RETAINED
+    )
   )
   const runtimePaneTitlesByTabId = useAppStore(
-    useShallow((s) => (active ? selectRuntimePaneTitlesForWorktree(s, worktreeId) : {}))
+    useShallow((s) =>
+      active ? selectRuntimePaneTitlesForWorktree(s, worktreeId) : EMPTY_RUNTIME_PANE_TITLES
+    )
   )
   const ptyIdsByTabId = useAppStore(
-    useShallow((s) => (active ? selectLivePtyIdsForWorktree(s, worktreeId) : {}))
+    useShallow((s) => (active ? selectLivePtyIdsForWorktree(s, worktreeId) : EMPTY_LIVE_PTY_IDS))
   )
   const terminalLayoutsByTabId = useAppStore(
-    useShallow((s) => (active ? selectTerminalLayoutsForWorktree(s, worktreeId) : {}))
+    useShallow((s) =>
+      active ? selectTerminalLayoutsForWorktree(s, worktreeId) : EMPTY_TERMINAL_LAYOUTS
+    )
   )
   const runtimeAgentOrchestrationByPaneKey = useAppStore(
-    useShallow((s) => (active ? selectRuntimeAgentOrchestrationForWorktree(s, worktreeId) : {}))
+    useShallow((s) =>
+      active
+        ? selectRuntimeAgentOrchestrationForWorktree(s, worktreeId)
+        : EMPTY_WORKTREE_AGENT_ORCHESTRATION
+    )
   )
   const agentFreshnessSignature = useAppStore((s) =>
     active ? selectAgentFreshness(s) : EMPTY_WORKTREE_AGENT_FRESHNESS_SIGNATURE
@@ -80,7 +107,7 @@ export function useWorktreeAgentRows(worktreeId: string, active = true): Dashboa
 
   return useMemo<DashboardAgentRow[]>(() => {
     if (!active) {
-      return []
+      return EMPTY_AGENT_ROWS
     }
     // Why: Date.now() is read inside the memo so stale-decay recalculates when
     // this worktree's freshness signature changes, even without new PTY data.
@@ -97,7 +124,7 @@ export function useWorktreeAgentRows(worktreeId: string, active = true): Dashboa
         : liveEntries
     return applyAgentRowLineage(
       buildWorktreeAgentRows({
-        tabs: tabs ?? [],
+        tabs: tabs ?? EMPTY_TABS,
         entries,
         retained,
         runtimePaneTitlesByTabId,
diff --git a/src/renderer/src/components/sidebar/worktree-agent-row-selectors.test.ts b/src/renderer/src/components/sidebar/worktree-agent-row-selectors.test.ts
index cbd3da64212..3e4e6defc6d 100644
--- a/src/renderer/src/components/sidebar/worktree-agent-row-selectors.test.ts
+++ b/src/renderer/src/components/sidebar/worktree-agent-row-selectors.test.ts
@@ -9,10 +9,15 @@ import type { RetainedAgentEntry } from '@/store/slices/agent-status'
 import { makePaneKey } from '../../../../shared/stable-pane-id'
 import { getLiveEntriesFullRebuildCountForTests } from './worktree-agent-live-index-patch'
 import {
+  EMPTY_LIVE_ENTRIES,
+  EMPTY_MIGRATION_UNSUPPORTED_ENTRIES,
+  EMPTY_RETAINED,
+  EMPTY_TERMINAL_LAYOUTS,
   selectLiveAgentStatusEntriesForWorktree,
   selectMigrationUnsupportedEntriesForWorktree,
   selectRuntimeAgentOrchestrationForWorktree,
-  selectRetainedAgentEntriesForWorktree
+  selectRetainedAgentEntriesForWorktree,
+  selectTerminalLayoutsForWorktree
 } from './worktree-agent-row-selectors'
 
 const PANE_KEY_1 = makePaneKey('tab-1', '22222222-2222-4222-8222-222222222222')
@@ -94,8 +99,14 @@ describe('selectMigrationUnsupportedEntriesForWorktree', () => {
 
 describe('selectLiveAgentStatusEntriesForWorktree', () => {
   it('reuses unaffected worktree arrays when another worktree receives a same-state ping', () => {
-    const wt1Entry = makeEntry(PANE_KEY_1, 1000, { state: 'working', prompt: 'first' })
-    const wt2Entry = makeEntry(PANE_KEY_2, 1000, { state: 'working', prompt: 'first' })
+    const wt1Entry = makeEntry(PANE_KEY_1, 1000, {
+      state: 'working',
+      prompt: 'first'
+    })
+    const wt2Entry = makeEntry(PANE_KEY_2, 1000, {
+      state: 'working',
+      prompt: 'first'
+    })
     const state = {
       tabsByWorktree: {
         'wt-1': [makeTab('tab-1')],
@@ -192,8 +203,14 @@ describe('selectLiveAgentStatusEntriesForWorktree', () => {
   })
 
   it('patches instead of full-rebuilding across within-state pings, and stays correct on transitions', () => {
-    const wt1Entry = makeEntry(PANE_KEY_1, 1000, { state: 'working', prompt: 'wt1 prompt' })
-    const wt2Entry = makeEntry(PANE_KEY_2, 1000, { state: 'working', prompt: 'wt2 prompt' })
+    const wt1Entry = makeEntry(PANE_KEY_1, 1000, {
+      state: 'working',
+      prompt: 'wt1 prompt'
+    })
+    const wt2Entry = makeEntry(PANE_KEY_2, 1000, {
+      state: 'working',
+      prompt: 'wt2 prompt'
+    })
     const baseState = {
       tabsByWorktree: {
         'wt-1': [makeTab('tab-1')],
@@ -256,7 +273,10 @@ describe('selectLiveAgentStatusEntriesForWorktree', () => {
   })
 
   it('falls back to a full rebuild when a within-map update changes worktree attribution', () => {
-    const entry = makeEntry(PANE_KEY_1, 1000, { state: 'working', worktreeId: 'wt-1' })
+    const entry = makeEntry(PANE_KEY_1, 1000, {
+      state: 'working',
+      worktreeId: 'wt-1'
+    })
     const state = {
       // No tab membership: bucketing comes from entry.worktreeId attribution.
       tabsByWorktree: { 'wt-1': [], 'wt-2': [] },
@@ -276,7 +296,10 @@ describe('selectLiveAgentStatusEntriesForWorktree', () => {
   })
 
   it('falls back to a full rebuild when a live entry completes with its tab gone', () => {
-    const entry = makeEntry(PANE_KEY_1, 1000, { state: 'working', worktreeId: 'wt-1' })
+    const entry = makeEntry(PANE_KEY_1, 1000, {
+      state: 'working',
+      worktreeId: 'wt-1'
+    })
     const state = {
       tabsByWorktree: { 'wt-1': [] },
       agentStatusByPaneKey: { [PANE_KEY_1]: entry },
@@ -427,3 +450,79 @@ describe('selectRetainedAgentEntriesForWorktree', () => {
     expect(secondWt2[0]?.startedAt).toBe(1100)
   })
 })
+
+describe('selectTerminalLayoutsForWorktree', () => {
+  const layout = {
+    root: { type: 'leaf', leafId: '44444444-4444-4444-8444-444444444444' },
+    activeLeafId: '44444444-4444-4444-8444-444444444444',
+    expandedLeafId: null,
+    ptyIdsByLeafId: {}
+  } as const
+
+  // Why: every visible card re-runs this selector on every store write; a fresh
+  // record per call is an allocation per card per write.
+  it('returns one identity per store generation', () => {
+    const state = {
+      tabsByWorktree: { 'wt-1': [makeTab('tab-1')] },
+      terminalLayoutsByTabId: { 'tab-1': layout }
+    }
+
+    expect(selectTerminalLayoutsForWorktree(state, 'wt-1')).toBe(
+      selectTerminalLayoutsForWorktree(state, 'wt-1')
+    )
+  })
+
+  it('returns the shared frozen empty for a worktree with no tabs', () => {
+    const state = { tabsByWorktree: {}, terminalLayoutsByTabId: {} }
+
+    expect(selectTerminalLayoutsForWorktree(state, 'missing')).toBe(EMPTY_TERMINAL_LAYOUTS)
+  })
+})
+
+// Why: the inline-agents hook short-circuits on `active`; the off branch has to
+// hand back a shared identity or the gate allocates on every store write.
+describe('inactive-card empty constants', () => {
+  it('are frozen and shared', () => {
+    for (const empty of [
+      EMPTY_LIVE_ENTRIES,
+      EMPTY_MIGRATION_UNSUPPORTED_ENTRIES,
+      EMPTY_RETAINED,
+      EMPTY_TERMINAL_LAYOUTS
+    ]) {
+      expect(Object.isFrozen(empty)).toBe(true)
+    }
+    expect(
+      selectLiveAgentStatusEntriesForWorktree(
+        {
+          agentStatusByPaneKey: {},
+          migrationUnsupportedByPtyId: {},
+          retainedAgentsByPaneKey: {},
+          tabsByWorktree: {}
+        },
+        'missing'
+      )
+    ).toBe(EMPTY_LIVE_ENTRIES)
+    expect(
+      selectMigrationUnsupportedEntriesForWorktree(
+        {
+          agentStatusByPaneKey: {},
+          migrationUnsupportedByPtyId: {},
+          retainedAgentsByPaneKey: {},
+          tabsByWorktree: {}
+        },
+        'missing'
+      )
+    ).toBe(EMPTY_MIGRATION_UNSUPPORTED_ENTRIES)
+    expect(
+      selectRetainedAgentEntriesForWorktree(
+        {
+          agentStatusByPaneKey: {},
+          migrationUnsupportedByPtyId: {},
+          retainedAgentsByPaneKey: {},
+          tabsByWorktree: {}
+        },
+        'missing'
+      )
+    ).toBe(EMPTY_RETAINED)
+  })
+})
diff --git a/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts b/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts
index 84588c4296c..9fbbd882e03 100644
--- a/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts
+++ b/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts
@@ -13,11 +13,18 @@ import {
   recordLiveEntriesFullRebuild
 } from './worktree-agent-live-index-patch'
 import { selectWorktreeAgentOrchestration } from './worktree-agent-orchestration-index'
+import { createWorktreeRecordSelector } from './worktree-record-selector-cache'
 import type { TerminalLayoutSnapshot } from '../../../../shared/terminal-tab-types'
 
-const EMPTY_LIVE_ENTRIES: AgentStatusEntry[] = []
-const EMPTY_MIGRATION_UNSUPPORTED_ENTRIES: MigrationUnsupportedPtyEntry[] = []
-const EMPTY_RETAINED: RetainedAgentEntry[] = []
+// Why frozen and exported: card hooks return these from their inactive branch,
+// so the identity has to be shared app-wide and safe from stray writes.
+export const EMPTY_LIVE_ENTRIES = Object.freeze([]) as unknown as AgentStatusEntry[]
+export const EMPTY_MIGRATION_UNSUPPORTED_ENTRIES = Object.freeze(
+  []
+) as unknown as MigrationUnsupportedPtyEntry[]
+export const EMPTY_RETAINED = Object.freeze([]) as unknown as RetainedAgentEntry[]
+export const EMPTY_TERMINAL_LAYOUTS: Record<string, TerminalLayoutSnapshot | undefined> =
+  Object.freeze({})
 // Why: selector unit tests often pass partial store mocks; production state
 // owns these maps, but missing mock maps should behave like empty slices.
 const EMPTY_RECORD = {}
@@ -280,13 +287,20 @@ export function selectRuntimeAgentOrchestrationForWorktree(
   return selectWorktreeAgentOrchestration(state, worktreeId)
 }
 
-export function selectTerminalLayoutsForWorktree(
-  state: Pick<AppState, 'tabsByWorktree' | 'terminalLayoutsByTabId'>,
-  worktreeId: string
-): Record<string, TerminalLayoutSnapshot | undefined> {
-  const out: Record<string, TerminalLayoutSnapshot | undefined> = {}
-  for (const tab of (state.tabsByWorktree ?? EMPTY_RECORD)[worktreeId] ?? []) {
-    out[tab.id] = (state.terminalLayoutsByTabId ?? EMPTY_RECORD)[tab.id]
+export const selectTerminalLayoutsForWorktree = createWorktreeRecordSelector<
+  Pick<AppState, 'tabsByWorktree' | 'terminalLayoutsByTabId'>,
+  Record<string, TerminalLayoutSnapshot | undefined>
+>({
+  readSources: (state) => [
+    state.tabsByWorktree ?? EMPTY_RECORD,
+    state.terminalLayoutsByTabId ?? EMPTY_RECORD
+  ],
+  empty: EMPTY_TERMINAL_LAYOUTS,
+  build: (state, worktreeId) => {
+    const out: Record<string, TerminalLayoutSnapshot | undefined> = {}
+    for (const tab of (state.tabsByWorktree ?? EMPTY_RECORD)[worktreeId] ?? []) {
+      out[tab.id] = (state.terminalLayoutsByTabId ?? EMPTY_RECORD)[tab.id]
+    }
+    return out
   }
-  return out
-}
+})
diff --git a/src/renderer/src/components/sidebar/worktree-card-status-inputs.test.ts b/src/renderer/src/components/sidebar/worktree-card-status-inputs.test.ts
index 7d366b845e8..59675017b2a 100644
--- a/src/renderer/src/components/sidebar/worktree-card-status-inputs.test.ts
+++ b/src/renderer/src/components/sidebar/worktree-card-status-inputs.test.ts
@@ -6,6 +6,9 @@ import type {
   TerminalTab
 } from '../../../../shared/terminal-tab-types'
 import {
+  EMPTY_LIVE_PTY_IDS,
+  EMPTY_RUNTIME_PANE_TITLES,
+  EMPTY_TERMINAL_LAYOUT_ROOTS,
   selectLivePtyIdsForWorktree,
   selectTerminalLayoutRootsForWorktree,
   selectTerminalLayoutRootsForWorktrees,
@@ -145,4 +148,75 @@ describe('worktree card status input selectors', () => {
       )
     ).toBe(true)
   })
+
+  // Why: zustand re-runs every mounted card's selector on every store write, so
+  // a fresh record per call multiplies by (visible cards x writes/sec).
+  it('returns one identity per store generation instead of rebuilding per call', () => {
+    const worktreeId = 'repo1::/path/wt1'
+    const state: SelectorState & LayoutRootSelectorState = {
+      tabsByWorktree: {
+        [worktreeId]: [makeTab('tab-1', worktreeId)]
+      },
+      runtimePaneTitlesByTabId: { 'tab-1': { 0: 'codex [working]' } },
+      ptyIdsByTabId: { 'tab-1': ['pty-1'] },
+      terminalLayoutsByTabId: {
+        'tab-1': makeLayout(
+          { type: 'leaf', leafId: '11111111-1111-4111-8111-111111111111' },
+          'pty-1'
+        )
+      }
+    }
+
+    expect(selectRuntimePaneTitlesForWorktree(state, worktreeId)).toBe(
+      selectRuntimePaneTitlesForWorktree(state, worktreeId)
+    )
+    expect(selectLivePtyIdsForWorktree(state, worktreeId)).toBe(
+      selectLivePtyIdsForWorktree(state, worktreeId)
+    )
+    expect(selectTerminalLayoutRootsForWorktree(state, worktreeId)).toBe(
+      selectTerminalLayoutRootsForWorktree(state, worktreeId)
+    )
+  })
+
+  it('carries the same identity across unrelated pane-title and PTY churn', () => {
+    const worktreeId = 'repo1::/path/wt1'
+    const state: SelectorState = {
+      tabsByWorktree: {
+        [worktreeId]: [makeTab('tab-1', worktreeId)]
+      },
+      runtimePaneTitlesByTabId: { 'tab-1': { 0: 'codex [working]' } },
+      ptyIdsByTabId: { 'tab-1': ['pty-1'] }
+    }
+    const unrelatedUpdate: SelectorState = {
+      ...state,
+      runtimePaneTitlesByTabId: {
+        ...state.runtimePaneTitlesByTabId,
+        'other-tab': { 0: 'claude [permission]' }
+      },
+      ptyIdsByTabId: { ...state.ptyIdsByTabId, 'other-tab': ['pty-other'] }
+    }
+
+    expect(selectRuntimePaneTitlesForWorktree(state, worktreeId)).toBe(
+      selectRuntimePaneTitlesForWorktree(unrelatedUpdate, worktreeId)
+    )
+    expect(selectLivePtyIdsForWorktree(state, worktreeId)).toBe(
+      selectLivePtyIdsForWorktree(unrelatedUpdate, worktreeId)
+    )
+  })
+
+  it('returns the shared frozen empty for a worktree with no tabs', () => {
+    const state: SelectorState & LayoutRootSelectorState = {
+      tabsByWorktree: {},
+      runtimePaneTitlesByTabId: {},
+      ptyIdsByTabId: {},
+      terminalLayoutsByTabId: {}
+    }
+
+    expect(selectRuntimePaneTitlesForWorktree(state, 'missing')).toBe(EMPTY_RUNTIME_PANE_TITLES)
+    expect(selectLivePtyIdsForWorktree(state, 'missing')).toBe(EMPTY_LIVE_PTY_IDS)
+    expect(selectTerminalLayoutRootsForWorktree(state, 'missing')).toBe(EMPTY_TERMINAL_LAYOUT_ROOTS)
+    expect(Object.isFrozen(EMPTY_RUNTIME_PANE_TITLES)).toBe(true)
+    expect(Object.isFrozen(EMPTY_LIVE_PTY_IDS)).toBe(true)
+    expect(Object.isFrozen(EMPTY_TERMINAL_LAYOUT_ROOTS)).toBe(true)
+  })
 })
diff --git a/src/renderer/src/components/sidebar/worktree-card-status-inputs.ts b/src/renderer/src/components/sidebar/worktree-card-status-inputs.ts
index 128afafe03d..cd9f5c4f7c5 100644
--- a/src/renderer/src/components/sidebar/worktree-card-status-inputs.ts
+++ b/src/renderer/src/components/sidebar/worktree-card-status-inputs.ts
@@ -1,9 +1,19 @@
 import type { AppState } from '@/store/types'
 import type { TerminalPaneLayoutNode } from '../../../../shared/terminal-tab-types'
+import { createWorktreeRecordSelector } from './worktree-record-selector-cache'
 
 // Why: these selectors return fresh maps whose top-level values preserve
 // underlying per-tab references, so callers must compare them shallowly.
 
+// Why frozen: one instance is shared by every card, so a stray write would leak
+// across worktrees instead of failing locally.
+export const EMPTY_RUNTIME_PANE_TITLES: Record<string, Record<number, string>> = Object.freeze({})
+export const EMPTY_LIVE_PTY_IDS: Record<string, string[]> = Object.freeze({})
+export const EMPTY_TERMINAL_LAYOUT_ROOTS: Record<
+  string,
+  TerminalPaneLayoutNode | null | undefined
+> = Object.freeze({})
+
 type WorktreeCardStatusInputState = Pick<AppState, 'runtimePaneTitlesByTabId' | 'ptyIdsByTabId'> & {
   tabsByWorktree: Record<string, readonly { id: string }[]>
 }
@@ -12,44 +22,56 @@ type WorktreeCardLayoutRootInputState = Pick<AppState, 'terminalLayoutsByTabId'>
   tabsByWorktree: Record<string, readonly { id: string }[]>
 }
 
-export function selectRuntimePaneTitlesForWorktree(
-  state: WorktreeCardStatusInputState,
-  worktreeId: string
-): Record<string, Record<number, string>> {
-  const out: Record<string, Record<number, string>> = {}
-  for (const tab of state.tabsByWorktree[worktreeId] ?? []) {
-    const paneTitles = state.runtimePaneTitlesByTabId[tab.id]
-    if (paneTitles) {
-      out[tab.id] = paneTitles
+export const selectRuntimePaneTitlesForWorktree = createWorktreeRecordSelector<
+  WorktreeCardStatusInputState,
+  Record<string, Record<number, string>>
+>({
+  readSources: (state) => [state.tabsByWorktree, state.runtimePaneTitlesByTabId],
+  empty: EMPTY_RUNTIME_PANE_TITLES,
+  build: (state, worktreeId) => {
+    const out: Record<string, Record<number, string>> = {}
+    for (const tab of state.tabsByWorktree[worktreeId] ?? []) {
+      const paneTitles = state.runtimePaneTitlesByTabId[tab.id]
+      if (paneTitles) {
+        out[tab.id] = paneTitles
+      }
     }
+    return out
   }
-  return out
-}
+})
 
-export function selectLivePtyIdsForWorktree(
-  state: WorktreeCardStatusInputState,
-  worktreeId: string
-): Record<string, string[]> {
-  const out: Record<string, string[]> = {}
-  for (const tab of state.tabsByWorktree[worktreeId] ?? []) {
-    const ids = state.ptyIdsByTabId[tab.id]
-    if (ids && ids.length > 0) {
-      out[tab.id] = ids
+export const selectLivePtyIdsForWorktree = createWorktreeRecordSelector<
+  WorktreeCardStatusInputState,
+  Record<string, string[]>
+>({
+  readSources: (state) => [state.tabsByWorktree, state.ptyIdsByTabId],
+  empty: EMPTY_LIVE_PTY_IDS,
+  build: (state, worktreeId) => {
+    const out: Record<string, string[]> = {}
+    for (const tab of state.tabsByWorktree[worktreeId] ?? []) {
+      const ids = state.ptyIdsByTabId[tab.id]
+      if (ids && ids.length > 0) {
+        out[tab.id] = ids
+      }
     }
+    return out
   }
-  return out
-}
+})
 
-export function selectTerminalLayoutRootsForWorktree(
-  state: WorktreeCardLayoutRootInputState,
-  worktreeId: string
-): Record<string, TerminalPaneLayoutNode | null | undefined> {
-  const out: Record<string, TerminalPaneLayoutNode | null | undefined> = {}
-  for (const tab of state.tabsByWorktree[worktreeId] ?? []) {
-    out[tab.id] = state.terminalLayoutsByTabId[tab.id]?.root
+export const selectTerminalLayoutRootsForWorktree = createWorktreeRecordSelector<
+  WorktreeCardLayoutRootInputState,
+  Record<string, TerminalPaneLayoutNode | null | undefined>
+>({
+  readSources: (state) => [state.tabsByWorktree, state.terminalLayoutsByTabId],
+  empty: EMPTY_TERMINAL_LAYOUT_ROOTS,
+  build: (state, worktreeId) => {
+    const out: Record<string, TerminalPaneLayoutNode | null | undefined> = {}
+    for (const tab of state.tabsByWorktree[worktreeId] ?? []) {
+      out[tab.id] = state.terminalLayoutsByTabId[tab.id]?.root
+    }
+    return out
   }
-  return out
-}
+})
 
 export function selectTerminalLayoutRootsForWorktrees(
   state: WorktreeCardLayoutRootInputState,
diff --git a/src/renderer/src/components/sidebar/worktree-list/listing/pending-worktree-creation-keys.test.ts b/src/renderer/src/components/sidebar/worktree-list/listing/pending-worktree-creation-keys.test.ts
new file mode 100644
index 00000000000..d45a7bf392f
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-list/listing/pending-worktree-creation-keys.test.ts
@@ -0,0 +1,53 @@
+import { describe, expect, it } from 'vitest'
+import type { AppState } from '@/store/types'
+import {
+  EMPTY_PENDING_WORKTREE_CREATION_KEYS,
+  selectPendingWorktreeCreationKeys
+} from './pending-worktree-creation-keys'
+
+type PendingCreations = AppState['pendingWorktreeCreations']
+
+function makePending(creationId: string, repoId: string): PendingCreations[string] {
+  return {
+    creationId,
+    request: { repoId }
+  } as unknown as PendingCreations[string]
+}
+
+describe('selectPendingWorktreeCreationKeys', () => {
+  // Why: this runs inside an always-mounted sidebar subscriber, so zustand
+  // re-evaluates it on every store write in the app.
+  it('returns the shared frozen empty when nothing is pending', () => {
+    const empty: PendingCreations = {}
+
+    expect(selectPendingWorktreeCreationKeys(empty)).toBe(EMPTY_PENDING_WORKTREE_CREATION_KEYS)
+    expect(selectPendingWorktreeCreationKeys({})).toBe(EMPTY_PENDING_WORKTREE_CREATION_KEYS)
+    expect(selectPendingWorktreeCreationKeys(undefined)).toBe(EMPTY_PENDING_WORKTREE_CREATION_KEYS)
+    expect(Object.isFrozen(EMPTY_PENDING_WORKTREE_CREATION_KEYS)).toBe(true)
+  })
+
+  it('builds the key list once per slice identity', () => {
+    const pending: PendingCreations = {
+      'creation-1': makePending('creation-1', 'repo with space')
+    }
+
+    const first = selectPendingWorktreeCreationKeys(pending)
+    expect(first).toEqual(['creation-1 repo with space'])
+    expect(selectPendingWorktreeCreationKeys(pending)).toBe(first)
+  })
+
+  it('rebuilds when the slice is replaced', () => {
+    const before: PendingCreations = {
+      'creation-1': makePending('creation-1', 'repo-1')
+    }
+    const after: PendingCreations = {
+      ...before,
+      'creation-2': makePending('creation-2', 'repo-2')
+    }
+
+    expect(selectPendingWorktreeCreationKeys(after)).toEqual([
+      'creation-1 repo-1',
+      'creation-2 repo-2'
+    ])
+  })
+})
diff --git a/src/renderer/src/components/sidebar/worktree-list/listing/pending-worktree-creation-keys.ts b/src/renderer/src/components/sidebar/worktree-list/listing/pending-worktree-creation-keys.ts
new file mode 100644
index 00000000000..857edd9c3c9
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-list/listing/pending-worktree-creation-keys.ts
@@ -0,0 +1,39 @@
+import type { AppState } from '@/store/types'
+
+// Why frozen: the sidebar row model is always mounted and this list is empty
+// almost always, so one shared identity serves every read.
+export const EMPTY_PENDING_WORKTREE_CREATION_KEYS: string[] = Object.freeze(
+  []
+) as unknown as string[]
+
+const keysBySource = new WeakMap<object, string[]>()
+
+/**
+ * Flat `"<creationId> <repoId>"` keys for the pending-creation sidebar rows.
+ *
+ * Why identity-cached: this runs inside an always-mounted subscriber, so an
+ * unmemoized `Object.values(...).map(...)` allocated an array plus one template
+ * string per pending creation on every store write in the app. Keyed on the
+ * slice reference, so it only rebuilds when the slice itself is replaced.
+ *
+ * Split on the first space — creationId is a UUID (no space) so a
+ * space-containing repoId stays intact.
+ */
+export function selectPendingWorktreeCreationKeys(
+  pendingWorktreeCreations: AppState['pendingWorktreeCreations'] | undefined
+): string[] {
+  if (!pendingWorktreeCreations) {
+    return EMPTY_PENDING_WORKTREE_CREATION_KEYS
+  }
+  const cached = keysBySource.get(pendingWorktreeCreations)
+  if (cached) {
+    return cached
+  }
+  const creations = Object.values(pendingWorktreeCreations)
+  const keys =
+    creations.length === 0
+      ? EMPTY_PENDING_WORKTREE_CREATION_KEYS
+      : creations.map((creation) => `${creation.creationId} ${creation.request.repoId}`)
+  keysBySource.set(pendingWorktreeCreations, keys)
+  return keys
+}
diff --git a/src/renderer/src/components/sidebar/worktree-list/listing/use-section-rows.ts b/src/renderer/src/components/sidebar/worktree-list/listing/use-section-rows.ts
index 16899dbc146..ddd91a23653 100644
--- a/src/renderer/src/components/sidebar/worktree-list/listing/use-section-rows.ts
+++ b/src/renderer/src/components/sidebar/worktree-list/listing/use-section-rows.ts
@@ -19,6 +19,7 @@ import { getEmptyProjectPlaceholderRepoIds } from '../../empty-project-placehold
 import { addHostSectionRows } from '../../host-section-rows'
 import { orderHostSectionOptions } from '../../host-section-order'
 import { buildSidebarHostOptions } from '../../sidebar-host-options'
+import { selectPendingWorktreeCreationKeys } from './pending-worktree-creation-keys'
 
 type SectionRowsArgs = {
   groupBy: WorktreeGroupBy
@@ -96,19 +97,17 @@ export function useSidebarSectionRows(args: SectionRowsArgs) {
   )
 
   // Why: subscribe on a flat key array (useShallow) so progress ticks don't rebuild the whole row model.
-  // Split on first space — creationId is a UUID (no space) so a space-containing repoId stays intact.
   const pendingCreationKeys = useAppStore(
-    useShallow((s) =>
-      Object.values(s.pendingWorktreeCreations ?? {}).map(
-        (creation) => `${creation.creationId} ${creation.request.repoId}`
-      )
-    )
+    useShallow((s) => selectPendingWorktreeCreationKeys(s.pendingWorktreeCreations))
   )
   const pendingCreations = useMemo(
     () =>
       pendingCreationKeys.map((key) => {
         const separator = key.indexOf(' ')
-        return { creationId: key.slice(0, separator), repoId: key.slice(separator + 1) }
+        return {
+          creationId: key.slice(0, separator),
+          repoId: key.slice(separator + 1)
+        }
       }),
     [pendingCreationKeys]
   )
diff --git a/src/renderer/src/components/sidebar/worktree-record-selector-cache.ts b/src/renderer/src/components/sidebar/worktree-record-selector-cache.ts
new file mode 100644
index 00000000000..220d2d074bf
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-record-selector-cache.ts
@@ -0,0 +1,63 @@
+import { shallow } from 'zustand/shallow'
+
+type WorktreeRecordGeneration<TValue> = {
+  sources: readonly unknown[]
+  carried: ReadonlyMap<string, TValue> | null
+  byWorktreeId: Map<string, TValue>
+}
+
+function sameSources(previous: readonly unknown[], next: readonly unknown[]): boolean {
+  if (previous.length !== next.length) {
+    return false
+  }
+  for (let index = 0; index < next.length; index += 1) {
+    if (previous[index] !== next[index]) {
+      return false
+    }
+  }
+  return true
+}
+
+/**
+ * Wraps a per-worktree record selector in a store-identity-keyed cache.
+ *
+ * Zustand re-runs every mounted subscriber's selector on every store write, so
+ * an unmemoized build allocates one record per visible card per write even when
+ * nothing it reads changed. Gating on the source slice identities collapses that
+ * to one build per worktree per generation; carrying the previous generation
+ * forward keeps the reference stable when a rebuild produces equal contents, so
+ * downstream `useShallow`/`useMemo` gates short-circuit on identity.
+ *
+ * The returned records are shared by every caller and must never be mutated.
+ */
+export function createWorktreeRecordSelector<TState, TValue extends object>(options: {
+  readSources: (state: TState) => readonly unknown[]
+  build: (state: TState, worktreeId: string) => TValue
+  empty: TValue
+}): (state: TState, worktreeId: string) => TValue {
+  let generation: WorktreeRecordGeneration<TValue> | null = null
+  return (state, worktreeId) => {
+    const sources = options.readSources(state)
+    if (!generation || !sameSources(generation.sources, sources)) {
+      generation = {
+        sources,
+        carried: generation?.byWorktreeId ?? null,
+        byWorktreeId: new Map()
+      }
+    }
+    const cached = generation.byWorktreeId.get(worktreeId)
+    if (cached !== undefined) {
+      return cached
+    }
+    const built = options.build(state, worktreeId)
+    const carried = generation.carried?.get(worktreeId)
+    let value = built
+    if (Object.keys(built).length === 0) {
+      value = options.empty
+    } else if (carried && shallow(carried, built)) {
+      value = carried
+    }
+    generation.byWorktreeId.set(worktreeId, value)
+    return value
+  }
+}

From 89bd18990dc38bd7aef18a1b60e1ec5ec23fa89d Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:05:41 -0700
Subject: [PATCH 67/92] perf(renderer): stop three always-mounted selectors
 rescanning the store (#18136)

Zustand reruns every subscriber's selector on each store write. Three
selectors did an O(N) scan of a store collection inside that path, so at
10 repos / 423 worktrees / 382 tabs they were paid thousands of times a
second while the app sat idle.

- getLocalWorktree / getLocalRuntimeRepoForWorktree now read the shared
  WeakMap indexes (getIndexedWorktreeById, getIndexedRepoMap) instead of
  `Object.values(worktreesByRepo).flat().find(...)` and `repos.find(...)`.
  SidebarTaskNavButton is always mounted and calls this on every write.
- selectRepoByIdForActiveWorkspace caches its host-scoped resolution in a
  WeakMap keyed on the `repos` array, mirroring getIndexedRepoMap.
- getProjectRuntimeSessionSummary memoizes per (tabsByWorktree,
  ptyIdsByTabId, agentStatusByPaneKey, repoId) and reuses the existing
  identity-cached getTabIdToWorktreeId index.
---
 .../repository-runtime-session-summary.ts     |  45 ++-
 .../sidebar/worktree-agent-row-selectors.ts   |   5 +-
 .../src/lib/local-preflight-context.ts        |  22 +-
 .../always-mounted-selector-scan-cost.test.ts | 277 ++++++++++++++++++
 src/renderer/src/store/selectors.ts           |  70 +++--
 5 files changed, 389 insertions(+), 30 deletions(-)
 create mode 100644 src/renderer/src/store/always-mounted-selector-scan-cost.test.ts

diff --git a/src/renderer/src/components/settings/repository-runtime-session-summary.ts b/src/renderer/src/components/settings/repository-runtime-session-summary.ts
index 5dffcd3b1e2..62bfd7053e8 100644
--- a/src/renderer/src/components/settings/repository-runtime-session-summary.ts
+++ b/src/renderer/src/components/settings/repository-runtime-session-summary.ts
@@ -1,5 +1,6 @@
 import type { AppState } from '../../store/types'
 import { getRepoIdFromWorktreeId } from '../../../../shared/worktree/id'
+import { getTabIdToWorktreeId } from '../sidebar/worktree-agent-row-selectors'
 
 export type ProjectRuntimeSessionSummary = {
   liveTerminalCount: number
@@ -11,16 +12,26 @@ type RuntimeSessionSummaryState = Pick<
   'tabsByWorktree' | 'ptyIdsByTabId' | 'agentStatusByPaneKey'
 >
 
+type SessionSummaryCache = {
+  ptyIdsByTabId: AppState['ptyIdsByTabId']
+  agentStatusByPaneKey: AppState['agentStatusByPaneKey']
+  byRepoId: Map<string, ProjectRuntimeSessionSummary>
+}
+
+// Why: one RepositoryPane per project reruns this on every store write, and each
+// run walked every worktree bucket plus every agent-status pane. Key on the three
+// input slices so unrelated writes reuse the answer instead of rescanning.
+const sessionSummaryCache = new WeakMap<AppState['tabsByWorktree'], SessionSummaryCache>()
+
 function getTabIdFromPaneKey(paneKey: string): string | null {
   const separator = paneKey.indexOf(':')
   return separator > 0 ? paneKey.slice(0, separator) : null
 }
 
-export function getProjectRuntimeSessionSummary(
+function computeProjectRuntimeSessionSummary(
   state: RuntimeSessionSummaryState,
   repoId: string
 ): ProjectRuntimeSessionSummary {
-  const tabWorktreeIds = new Map<string, string>()
   const projectWorktreeIds = new Set<string>()
   let liveTerminalCount = 0
 
@@ -31,7 +42,6 @@ export function getProjectRuntimeSessionSummary(
     projectWorktreeIds.add(worktreeId)
 
     for (const tab of tabs) {
-      tabWorktreeIds.set(tab.id, worktreeId)
       const livePtyIds = new Set(state.ptyIdsByTabId[tab.id] ?? [])
       if (tab.ptyId) {
         livePtyIds.add(tab.ptyId)
@@ -40,6 +50,9 @@ export function getProjectRuntimeSessionSummary(
     }
   }
 
+  // Rows outside this project resolve to a worktree the checks below reject, so
+  // the shared index answers the same question the repo-scoped map used to.
+  const tabWorktreeIds = getTabIdToWorktreeId(state.tabsByWorktree)
   let activeTaskCount = 0
   for (const [paneKey, entry] of Object.entries(state.agentStatusByPaneKey)) {
     if (entry.state === 'done') {
@@ -57,3 +70,29 @@ export function getProjectRuntimeSessionSummary(
 
   return { liveTerminalCount, activeTaskCount }
 }
+
+export function getProjectRuntimeSessionSummary(
+  state: RuntimeSessionSummaryState,
+  repoId: string
+): ProjectRuntimeSessionSummary {
+  let cache = sessionSummaryCache.get(state.tabsByWorktree)
+  if (
+    !cache ||
+    cache.ptyIdsByTabId !== state.ptyIdsByTabId ||
+    cache.agentStatusByPaneKey !== state.agentStatusByPaneKey
+  ) {
+    cache = {
+      ptyIdsByTabId: state.ptyIdsByTabId,
+      agentStatusByPaneKey: state.agentStatusByPaneKey,
+      byRepoId: new Map()
+    }
+    sessionSummaryCache.set(state.tabsByWorktree, cache)
+  }
+  const cached = cache.byRepoId.get(repoId)
+  if (cached) {
+    return cached
+  }
+  const summary = computeProjectRuntimeSessionSummary(state, repoId)
+  cache.byRepoId.set(repoId, summary)
+  return summary
+}
diff --git a/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts b/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts
index 9fbbd882e03..06ba3979ffe 100644
--- a/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts
+++ b/src/renderer/src/components/sidebar/worktree-agent-row-selectors.ts
@@ -80,7 +80,10 @@ export function reuseArrayIfEqual<T>(previous: T[] | undefined, next: T[]): T[]
   return previous
 }
 
-function getTabIdToWorktreeId(
+// Why exported: the Settings -> Repositories runtime summary needs the same
+// tab -> worktree index, and rebuilding it there would re-walk every tab bucket
+// on each store write.
+export function getTabIdToWorktreeId(
   tabsByWorktree: WorktreeAgentRowsState['tabsByWorktree']
 ): Map<string, string> {
   if (tabWorktreeIndexCache?.tabsByWorktree === tabsByWorktree) {
diff --git a/src/renderer/src/lib/local-preflight-context.ts b/src/renderer/src/lib/local-preflight-context.ts
index 98ac6c1059e..7988e4656a7 100644
--- a/src/renderer/src/lib/local-preflight-context.ts
+++ b/src/renderer/src/lib/local-preflight-context.ts
@@ -9,6 +9,7 @@ import {
 import { getRepoExecutionHostId, LOCAL_EXECUTION_HOST_ID } from '../../../shared/execution-host'
 import type { Repo } from '../../../shared/repo-types'
 import type { Worktree } from '../../../shared/worktree/types'
+import { getIndexedRepoMap, getIndexedWorktreeById } from '@/store/worktree-repo-index'
 import { getProviderRuntimeContextKey } from './provider-runtime-context'
 import { getRendererAppPlatform } from './renderer-app-platform'
 import {
@@ -36,6 +37,11 @@ type LocalProjectRuntimeState = Pick<
   'activeRepoId' | 'activeWorktreeId' | 'projects' | 'repos' | 'settings' | 'worktreesByRepo'
 >
 
+// Why: the shared indexes are WeakMap-keyed on slice identity, so a fresh `{}`
+// or `[]` fallback would miss the cache on every read.
+const EMPTY_WORKTREES_BY_REPO: AppState['worktreesByRepo'] = {}
+const EMPTY_REPOS: AppState['repos'] = []
+
 type LocalProjectRuntimeWslContext = {
   wslAvailable?: boolean
   availableWslDistros?: readonly string[] | null
@@ -120,7 +126,7 @@ export function getLocalRepoProjectExecutionRuntimeContext(
     return undefined
   }
 
-  const repo = (state.repos ?? []).find((entry) => entry.id === repoId)
+  const repo = getIndexedRepoMap(state.repos ?? EMPTY_REPOS).get(repoId)
   if (!isLocalRuntimeRepo(repo)) {
     return undefined
   }
@@ -270,7 +276,7 @@ function getLocalRuntimeRepoForWorktree(
   worktree?: Pick<Worktree, 'repoId'> | null
 ): Pick<Repo, 'id' | 'path' | 'connectionId' | 'executionHostId'> | undefined {
   const repoId = worktree?.repoId ?? state.activeRepoId
-  return repoId ? (state.repos ?? []).find((repo) => repo.id === repoId) : undefined
+  return repoId ? getIndexedRepoMap(state.repos ?? EMPTY_REPOS).get(repoId) : undefined
 }
 
 function isLocalRuntimeRepo(
@@ -302,11 +308,13 @@ function getLocalWorktree(
   worktreeId?: string | null
 ): Pick<Worktree, 'id' | 'repoId' | 'projectId' | 'path' | 'hostId'> | null {
   const targetWorktreeId = worktreeId ?? state.activeWorktreeId
-  return targetWorktreeId
-    ? (Object.values(state.worktreesByRepo ?? {})
-        .flat()
-        .find((worktree) => worktree.id === targetWorktreeId) ?? null)
-    : null
+  if (!targetWorktreeId) {
+    return null
+  }
+  return (
+    getIndexedWorktreeById(state.worktreesByRepo ?? EMPTY_WORKTREES_BY_REPO, targetWorktreeId) ??
+    null
+  )
 }
 
 function getLocalPreflightProjectId(
diff --git a/src/renderer/src/store/always-mounted-selector-scan-cost.test.ts b/src/renderer/src/store/always-mounted-selector-scan-cost.test.ts
new file mode 100644
index 00000000000..2baeb5958ef
--- /dev/null
+++ b/src/renderer/src/store/always-mounted-selector-scan-cost.test.ts
@@ -0,0 +1,277 @@
+/**
+ * Zustand reruns every subscriber's selector on every store write, so an O(N)
+ * scan inside an always-mounted selector is paid thousands of times per second
+ * while the app is idle. These tests count property reads on the store rows to
+ * prove each selector builds its index once per snapshot instead of per read.
+ */
+import { describe, expect, it } from 'vitest'
+import type { Repo } from '../../../shared/repo-types'
+import type { TerminalTab } from '../../../shared/terminal-tab-types'
+import type { Worktree } from '../../../shared/worktree/types'
+import { WORKTREE_ID_SEPARATOR } from '../../../shared/worktree/id'
+import { getLocalPreflightContext } from '../lib/local-preflight-context'
+import { getProjectRuntimeSessionSummary } from '../components/settings/repository-runtime-session-summary'
+import type { AppState } from './types'
+import { selectRepoByIdForActiveWorkspace } from './selectors'
+
+// The user scale that motivated this: 10 repos, 423 worktrees, 382 open tabs.
+const REPO_COUNT = 10
+const WORKTREES_PER_REPO = 42
+const TABS_PER_WORKTREE = 1
+const STORE_WRITES = 200
+
+type ReadCounter = { count: number }
+
+function makeRepoRows(counter: ReadCounter): Repo[] {
+  return Array.from({ length: REPO_COUNT }, (_unused, index) => {
+    const id = `repo-${index}`
+    return {
+      get id() {
+        counter.count += 1
+        return id
+      },
+      path: `/tmp/repo-${index}`,
+      displayName: `repo-${index}`,
+      badgeColor: '#737373',
+      addedAt: 100,
+      kind: 'git'
+    } as Repo
+  })
+}
+
+function makeWorktreesByRepo(counter: ReadCounter): AppState['worktreesByRepo'] {
+  const worktreesByRepo: Record<string, Worktree[]> = {}
+  for (let repoIndex = 0; repoIndex < REPO_COUNT; repoIndex += 1) {
+    const repoId = `repo-${repoIndex}`
+    worktreesByRepo[repoId] = Array.from({ length: WORKTREES_PER_REPO }, (_unused, index) => {
+      const path = String.raw`\\wsl.localhost\Ubuntu\home\alice\wt-${repoIndex}-${index}`
+      const id = `${repoId}${WORKTREE_ID_SEPARATOR}${path}`
+      return {
+        get id() {
+          counter.count += 1
+          return id
+        },
+        repoId,
+        path
+      } as Worktree
+    })
+  }
+  return worktreesByRepo
+}
+
+/** The worst case for a first-wins linear scan: the last row of the last repo. */
+function lastWorktreeId(worktreesByRepo: AppState['worktreesByRepo']): string {
+  const lastBucket = Object.values(worktreesByRepo).at(-1) ?? []
+  return (lastBucket.at(-1) as Worktree).id
+}
+
+describe('local preflight context worktree lookup', () => {
+  it('builds the worktree index once instead of rescanning per store write', () => {
+    const worktreeReads: ReadCounter = { count: 0 }
+    const repoReads: ReadCounter = { count: 0 }
+    const worktreesByRepo = makeWorktreesByRepo(worktreeReads)
+    const activeWorktreeId = lastWorktreeId(worktreesByRepo)
+    const state = {
+      activeRepoId: `repo-${REPO_COUNT - 1}`,
+      activeWorktreeId,
+      repos: makeRepoRows(repoReads),
+      worktreesByRepo,
+      projects: []
+    } as unknown as AppState
+    const rowCount = REPO_COUNT * WORKTREES_PER_REPO
+    worktreeReads.count = 0
+    repoReads.count = 0
+
+    for (let write = 0; write < STORE_WRITES; write += 1) {
+      expect(getLocalPreflightContext(state, 'darwin')).toEqual({
+        wslDistro: 'Ubuntu'
+      })
+    }
+
+    // One index build per snapshot, not one scan per store write.
+    expect(worktreeReads.count).toBeLessThanOrEqual(rowCount)
+    expect(repoReads.count).toBeLessThanOrEqual(REPO_COUNT)
+  })
+
+  it('rebuilds against a replacement snapshot', () => {
+    const counter: ReadCounter = { count: 0 }
+    const worktreesByRepo = makeWorktreesByRepo(counter)
+    const repos = makeRepoRows({ count: 0 })
+    const activeWorktreeId = lastWorktreeId(worktreesByRepo)
+    const before = getLocalPreflightContext(
+      {
+        activeRepoId: 'repo-0',
+        activeWorktreeId,
+        repos,
+        worktreesByRepo
+      } as unknown as AppState,
+      'darwin'
+    )
+    expect(before).toEqual({ wslDistro: 'Ubuntu' })
+
+    const movedWorktree = {
+      id: activeWorktreeId,
+      repoId: `repo-${REPO_COUNT - 1}`,
+      path: String.raw`\\wsl.localhost\Debian\home\alice\moved`
+    } as Worktree
+    const after = getLocalPreflightContext(
+      {
+        activeRepoId: 'repo-0',
+        activeWorktreeId,
+        repos,
+        worktreesByRepo: { [`repo-${REPO_COUNT - 1}`]: [movedWorktree] }
+      } as unknown as AppState,
+      'darwin'
+    )
+
+    expect(after).toEqual({ wslDistro: 'Debian' })
+  })
+})
+
+describe('selectRepoByIdForActiveWorkspace', () => {
+  function makeActiveWorkspaceState(counter: ReadCounter): AppState {
+    return {
+      repos: makeRepoRows(counter),
+      activeRepoId: 'repo-0',
+      // No repo row carries this host, so the fallback branch runs every time.
+      activeWorkspaceExecutionHostId: 'ssh:host-a'
+    } as unknown as AppState
+  }
+
+  it('resolves the active-workspace host once per repos snapshot', () => {
+    const counter: ReadCounter = { count: 0 }
+    const state = makeActiveWorkspaceState(counter)
+    counter.count = 0
+
+    for (let write = 0; write < STORE_WRITES; write += 1) {
+      expect(selectRepoByIdForActiveWorkspace(state, 'repo-0')).toBeNull()
+    }
+
+    // Worst case: the id-keyed map build plus one host-filter pass.
+    expect(counter.count).toBeLessThanOrEqual(REPO_COUNT * 3)
+  })
+
+  it('still prefers the row that carries the active workspace host', () => {
+    const localRepo = {
+      id: 'repo-0',
+      path: '/tmp/a',
+      displayName: 'a'
+    } as Repo
+    const sshRepo = {
+      id: 'repo-0',
+      path: '/tmp/a',
+      displayName: 'a',
+      connectionId: 'host-a'
+    } as Repo
+    const state = {
+      repos: [localRepo, sshRepo],
+      activeRepoId: 'repo-0',
+      activeWorkspaceExecutionHostId: 'ssh:host-a'
+    } as unknown as AppState
+
+    expect(selectRepoByIdForActiveWorkspace(state, 'repo-0')).toBe(sshRepo)
+    expect(selectRepoByIdForActiveWorkspace(state, 'repo-0')).toBe(sshRepo)
+  })
+
+  it('returns an identical result for repeated reads of one snapshot', () => {
+    const state = makeActiveWorkspaceState({ count: 0 })
+    expect(selectRepoByIdForActiveWorkspace(state, 'repo-0')).toBe(
+      selectRepoByIdForActiveWorkspace(state, 'repo-0')
+    )
+    expect(selectRepoByIdForActiveWorkspace(state, 'repo-1')).toBe(
+      selectRepoByIdForActiveWorkspace(state, 'repo-1')
+    )
+  })
+})
+
+describe('project runtime session summary', () => {
+  function makeRuntimeSessionState(counter: ReadCounter): AppState {
+    const tabsByWorktree: Record<string, TerminalTab[]> = {}
+    for (let repoIndex = 0; repoIndex < REPO_COUNT; repoIndex += 1) {
+      for (let index = 0; index < WORKTREES_PER_REPO; index += 1) {
+        const worktreeId = `repo-${repoIndex}${WORKTREE_ID_SEPARATOR}/tmp/wt-${repoIndex}-${index}`
+        tabsByWorktree[worktreeId] = Array.from(
+          { length: TABS_PER_WORKTREE },
+          (_unused, tabIndex) => {
+            const id = `tab-${repoIndex}-${index}-${tabIndex}`
+            return {
+              get id() {
+                counter.count += 1
+                return id
+              },
+              ptyId: `pty-${id}`,
+              worktreeId
+            } as TerminalTab
+          }
+        )
+      }
+    }
+    return {
+      tabsByWorktree,
+      ptyIdsByTabId: {},
+      agentStatusByPaneKey: {}
+    } as unknown as AppState
+  }
+
+  it('reuses the tab index across repos and store writes', () => {
+    const counter: ReadCounter = { count: 0 }
+    const state = makeRuntimeSessionState(counter)
+    const tabCount = REPO_COUNT * WORKTREES_PER_REPO * TABS_PER_WORKTREE
+    counter.count = 0
+
+    // One RepositoryPane per project, all re-running on every store write.
+    for (let write = 0; write < STORE_WRITES; write += 1) {
+      for (let repoIndex = 0; repoIndex < REPO_COUNT; repoIndex += 1) {
+        expect(getProjectRuntimeSessionSummary(state, `repo-${repoIndex}`)).toEqual({
+          liveTerminalCount: WORKTREES_PER_REPO * TABS_PER_WORKTREE,
+          activeTaskCount: 0
+        })
+      }
+    }
+
+    // The shared tab index plus one pass over each repo's own tabs.
+    expect(counter.count).toBeLessThanOrEqual(tabCount * 3)
+  })
+
+  it('returns an identical summary for repeated reads of one snapshot', () => {
+    const state = makeRuntimeSessionState({ count: 0 })
+    expect(getProjectRuntimeSessionSummary(state, 'repo-0')).toBe(
+      getProjectRuntimeSessionSummary(state, 'repo-0')
+    )
+  })
+
+  it('recomputes when a tab slice is replaced', () => {
+    const state = makeRuntimeSessionState({ count: 0 })
+    const first = getProjectRuntimeSessionSummary(state, 'repo-0')
+    const worktreeId = `repo-0${WORKTREE_ID_SEPARATOR}/tmp/wt-0-0`
+    const next = getProjectRuntimeSessionSummary(
+      {
+        ...state,
+        tabsByWorktree: {
+          [worktreeId]: [{ id: 'tab-new', ptyId: 'pty-new', worktreeId } as TerminalTab]
+        }
+      } as unknown as AppState,
+      'repo-0'
+    )
+
+    expect(first.liveTerminalCount).toBe(WORKTREES_PER_REPO * TABS_PER_WORKTREE)
+    expect(next.liveTerminalCount).toBe(1)
+  })
+
+  it('counts running agents against the owning project only', () => {
+    const state = makeRuntimeSessionState({ count: 0 })
+    const summary = getProjectRuntimeSessionSummary(
+      {
+        ...state,
+        agentStatusByPaneKey: {
+          'tab-0-0-0:leaf': { state: 'working', tabId: 'tab-0-0-0' },
+          'tab-1-0-0:leaf': { state: 'working', tabId: 'tab-1-0-0' },
+          'tab-0-1-0:leaf': { state: 'done', tabId: 'tab-0-1-0' }
+        }
+      } as unknown as AppState,
+      'repo-0'
+    )
+
+    expect(summary.activeTaskCount).toBe(1)
+  })
+})
diff --git a/src/renderer/src/store/selectors.ts b/src/renderer/src/store/selectors.ts
index 77c124f562c..b30673a0b39 100644
--- a/src/renderer/src/store/selectors.ts
+++ b/src/renderer/src/store/selectors.ts
@@ -228,33 +228,65 @@ export const useActiveRepo = () =>
   useAppStore(useShallow((s) => selectRepoByIdForActiveWorkspace(s, s.activeRepoId)))
 export const useRepoMap = () => useAppStore((s) => getCachedRepoMap(s.repos))
 
+type ActiveWorkspaceRepoState = Pick<
+  AppState,
+  'repos' | 'activeRepoId' | 'activeWorkspaceExecutionHostId'
+>
+
+// Why: mirrors getIndexedRepoMap above — the host-scoped branch re-filtered every
+// repo on each store write even though its answer only moves when `repos` or the
+// active workspace host does.
+const activeWorkspaceRepoCache = new WeakMap<AppState['repos'], Map<string, Repo | null>>()
+
+function resolveRepoOnActiveWorkspaceHost(
+  state: ActiveWorkspaceRepoState,
+  repoId: string,
+  activeWorkspaceExecutionHostId: ExecutionHostId
+): Repo | null {
+  const repoCandidates = state.repos.filter((candidate) => candidate.id === repoId)
+  const hostMatch = repoCandidates.find(
+    (candidate) => getRepoExecutionHostId(candidate) === activeWorkspaceExecutionHostId
+  )
+  if (hostMatch) {
+    return hostMatch
+  }
+  // Why: withRepoHostOwnership keeps a paired-hub worktree on its own SSH host while the repo
+  // stays hub-owned, so that one mismatch still names the right repo; every other stays closed.
+  if (parseExecutionHostId(activeWorkspaceExecutionHostId)?.kind !== 'ssh') {
+    return null
+  }
+  const pairedHubRepos = repoCandidates.filter(
+    (candidate) => parseExecutionHostId(getRepoExecutionHostId(candidate))?.kind === 'runtime'
+  )
+  return pairedHubRepos.length === 1 ? pairedHubRepos[0] : null
+}
+
 export function selectRepoByIdForActiveWorkspace(
-  state: Pick<AppState, 'repos' | 'activeRepoId' | 'activeWorkspaceExecutionHostId'>,
+  state: ActiveWorkspaceRepoState,
   repoId: string | null
 ): Repo | null {
   if (!repoId) {
     return null
   }
   const repo = getCachedRepoMap(state.repos).get(repoId) ?? null
-  if (repoId === state.activeRepoId && state.activeWorkspaceExecutionHostId) {
-    const repoCandidates = state.repos.filter((candidate) => candidate.id === repoId)
-    const hostMatch = repoCandidates.find(
-      (candidate) => getRepoExecutionHostId(candidate) === state.activeWorkspaceExecutionHostId
-    )
-    if (hostMatch) {
-      return hostMatch
-    }
-    // Why: withRepoHostOwnership keeps a paired-hub worktree on its own SSH host while the repo
-    // stays hub-owned, so that one mismatch still names the right repo; every other stays closed.
-    if (parseExecutionHostId(state.activeWorkspaceExecutionHostId)?.kind !== 'ssh') {
-      return null
-    }
-    const pairedHubRepos = repoCandidates.filter(
-      (candidate) => parseExecutionHostId(getRepoExecutionHostId(candidate))?.kind === 'runtime'
-    )
-    return pairedHubRepos.length === 1 ? pairedHubRepos[0] : null
+  const activeWorkspaceExecutionHostId = state.activeWorkspaceExecutionHostId
+  if (repoId !== state.activeRepoId || !activeWorkspaceExecutionHostId) {
+    return repo
   }
-  return repo
+  // The branch below only fires for the active repo, so the host id fully keys it.
+  let byHost = activeWorkspaceRepoCache.get(state.repos)
+  if (!byHost) {
+    byHost = new Map()
+    activeWorkspaceRepoCache.set(state.repos, byHost)
+  }
+  const cacheKey = `${activeWorkspaceExecutionHostId}\u0000${repoId}`
+  const cached = byHost.get(cacheKey)
+  if (cached !== undefined) {
+    return cached
+  }
+  const resolved = resolveRepoOnActiveWorkspaceHost(state, repoId, activeWorkspaceExecutionHostId)
+  byHost.set(cacheKey, resolved)
+  return resolved
 }
 
 export const useRepoById = (repoId: string | null) =>

From 9377214b4b135fb562775fad8a093a81293dbf70 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:07:58 -0700
Subject: [PATCH 68/92] perf(renderer): reconcile hydrated workspaces in one
 store write (#18150)

* perf(renderer): reconcile hydrated workspaces in one store write

Session hydration reconciled each workspace with its own set(), so a
193-workspace session fanned 193 writes out to every non-React store
subscriber and re-spread three whole workspace-keyed maps per workspace.
Fold the whole session into one patch, release the string-keyed terminal
scroll-intent entries on pane close, and drop the per-workspace/per-tab
reconnect debug logs.

* fix(test): make the hydration fixture bucket switch exhaustive

oxlint --type-aware flags the default arm; naming the editor case clears it.
---
 ...cile-hydrated-workspace-tab-models.test.ts |   5 +-
 ...reconcile-hydrated-workspace-tab-models.ts |  11 +-
 .../app-shell/use-app-startup-hydration.ts    |   2 +-
 .../src/lib/pane-manager/pane-split-close.ts  |   7 +
 .../terminal-scroll-intent-dom-tracking.ts    |   3 +-
 ...rminal-scroll-intent-key-retention.test.ts | 159 ++++++++++++
 .../terminal-scroll-intent-key-store.ts       |  63 +++++
 .../pane-manager/terminal-scroll-intent.ts    |  35 ++-
 .../store-session-terminal-reconnect.test.ts  |   7 +-
 ...ted-workspace-reconciliation-batch.test.ts | 148 +++++++++++
 ...drated-workspace-reconciliation-fixture.ts | 242 ++++++++++++++++++
 .../slices/tabs/tabs-reconciliation-batch.ts  |  55 ++++
 .../store/slices/tabs/tabs-reconciliation.ts  |  69 +++--
 .../store/slices/tabs/tabs-session-actions.ts |  42 ++-
 .../store/slices/tabs/tabs-slice-contract.ts  |   2 +
 .../terminals/workspace-terminal-reconnect.ts |  19 +-
 16 files changed, 805 insertions(+), 64 deletions(-)
 create mode 100644 src/renderer/src/lib/pane-manager/terminal-scroll-intent-key-retention.test.ts
 create mode 100644 src/renderer/src/lib/pane-manager/terminal-scroll-intent-key-store.ts
 create mode 100644 src/renderer/src/store/slices/tabs/hydrated-workspace-reconciliation-batch.test.ts
 create mode 100644 src/renderer/src/store/slices/tabs/hydrated-workspace-reconciliation-fixture.ts
 create mode 100644 src/renderer/src/store/slices/tabs/tabs-reconciliation-batch.ts

diff --git a/src/renderer/src/app-shell/reconcile-hydrated-workspace-tab-models.test.ts b/src/renderer/src/app-shell/reconcile-hydrated-workspace-tab-models.test.ts
index f4940db6ab5..cf33aed8e3e 100644
--- a/src/renderer/src/app-shell/reconcile-hydrated-workspace-tab-models.test.ts
+++ b/src/renderer/src/app-shell/reconcile-hydrated-workspace-tab-models.test.ts
@@ -2,13 +2,14 @@ import { describe, expect, it, vi } from 'vitest'
 import { reconcileHydratedWorkspaceTabModels } from './reconcile-hydrated-workspace-tab-models'
 
 describe('reconcileHydratedWorkspaceTabModels', () => {
-  it('reconciles every workspace the session hydrated, in session order', () => {
+  it('reconciles every workspace the session hydrated, in session order, in one call', () => {
     const reconcile = vi.fn()
     const reconciled = reconcileHydratedWorkspaceTabModels(
       { tabsByWorktree: { 'wt-a': [], 'wt-b': [], 'wt-c': [] } },
       reconcile
     )
-    expect(reconcile.mock.calls.map((call) => call[0])).toEqual(['wt-a', 'wt-b', 'wt-c'])
+    expect(reconcile).toHaveBeenCalledTimes(1)
+    expect(reconcile.mock.calls[0]?.[0]).toEqual(['wt-a', 'wt-b', 'wt-c'])
     expect(reconciled).toEqual(['wt-a', 'wt-b', 'wt-c'])
   })
 
diff --git a/src/renderer/src/app-shell/reconcile-hydrated-workspace-tab-models.ts b/src/renderer/src/app-shell/reconcile-hydrated-workspace-tab-models.ts
index 84704b3eb2d..3da45244660 100644
--- a/src/renderer/src/app-shell/reconcile-hydrated-workspace-tab-models.ts
+++ b/src/renderer/src/app-shell/reconcile-hydrated-workspace-tab-models.ts
@@ -3,12 +3,13 @@ import type { WorkspaceSessionState } from '../../../shared/workspace-session-st
 /** Reconcile every workspace loaded during boot so stale unified-tab subsets converge. */
 export function reconcileHydratedWorkspaceTabModels(
   session: Pick<WorkspaceSessionState, 'tabsByWorktree'>,
-  reconcileWorktreeTabModel: (worktreeId: string) => unknown
+  // Why batched: one store write for the whole session instead of one per
+  // workspace, each fanning out to every non-React store subscriber.
+  reconcileWorktreeTabModels: (worktreeIds: readonly string[]) => void
 ): string[] {
-  const reconciled: string[] = []
-  for (const worktreeId of Object.keys(session.tabsByWorktree)) {
-    reconcileWorktreeTabModel(worktreeId)
-    reconciled.push(worktreeId)
+  const reconciled = Object.keys(session.tabsByWorktree)
+  if (reconciled.length > 0) {
+    reconcileWorktreeTabModels(reconciled)
   }
   return reconciled
 }
diff --git a/src/renderer/src/app-shell/use-app-startup-hydration.ts b/src/renderer/src/app-shell/use-app-startup-hydration.ts
index 447fbfb3780..b50ac86705e 100644
--- a/src/renderer/src/app-shell/use-app-startup-hydration.ts
+++ b/src/renderer/src/app-shell/use-app-startup-hydration.ts
@@ -198,7 +198,7 @@ export function useAppStartupHydration(onOnboardingLoaded: (state: OnboardingSta
             actions.hydrateBrowserSession(sessionRead.session, sessionHydrationOptions)
             reconcileHydratedWorkspaceTabModels(
               sessionRead.session,
-              useAppStore.getState().reconcileWorktreeTabModel
+              useAppStore.getState().reconcileWorktreeTabModels
             )
           })
           await timeRendererStartupStep('prepare-terminal-startup-restoration', () =>
diff --git a/src/renderer/src/lib/pane-manager/pane-split-close.ts b/src/renderer/src/lib/pane-manager/pane-split-close.ts
index 80e35a18171..df725156655 100644
--- a/src/renderer/src/lib/pane-manager/pane-split-close.ts
+++ b/src/renderer/src/lib/pane-manager/pane-split-close.ts
@@ -21,6 +21,7 @@ import { disposeWebgl } from './pane-webgl-renderer'
 import { clearPendingSplitScrollRestore, scheduleSplitScrollRestore } from './pane-split-scroll'
 import { reattachWebglIfNeeded } from './pane-webgl-reattach'
 import { toPublicPane } from './pane-public-view'
+import { releaseTerminalScrollIntentKey } from './terminal-scroll-intent-key-store'
 
 type MovedPaneSplitState = {
   pane: ManagedPaneInternal
@@ -179,6 +180,12 @@ function teardownManagedPane(
   const closedLeafId = pane.leafId
   args.releasePaneIdentity(args.paneId)
   removePaneContainer(args, pane)
+  if (reason === 'close') {
+    // Leaf ids are minted UUIDs and never reused, so a closed leaf's scroll
+    // intent is unreachable. Detach/retire hand the leaf to a new host, which
+    // must still be able to restore it.
+    releaseTerminalScrollIntentKey(closedLeafId)
+  }
   const nextActivePaneId = activateReplacementPane(args)
   applyPaneOpacity(args.panes.values(), nextActivePaneId, args.styleOptions)
   for (const p of args.panes.values()) {
diff --git a/src/renderer/src/lib/pane-manager/terminal-scroll-intent-dom-tracking.ts b/src/renderer/src/lib/pane-manager/terminal-scroll-intent-dom-tracking.ts
index 9545615705c..81436039d88 100644
--- a/src/renderer/src/lib/pane-manager/terminal-scroll-intent-dom-tracking.ts
+++ b/src/renderer/src/lib/pane-manager/terminal-scroll-intent-dom-tracking.ts
@@ -8,7 +8,8 @@ import {
   syncTerminalScrollIntentFromViewport
 } from './terminal-scroll-intent'
 import { syncTerminalScrollIntentSoon } from './terminal-scroll-intent-settle'
-import type { TerminalScrollIntentKey, TerminalScrollIntentTarget } from './terminal-scroll-intent'
+import type { TerminalScrollIntentTarget } from './terminal-scroll-intent'
+import type { TerminalScrollIntentKey } from './terminal-scroll-intent-key-store'
 import {
   isTerminalScrollIntentRebuildInFlight,
   onTerminalScrollIntentBufferRebuildComplete
diff --git a/src/renderer/src/lib/pane-manager/terminal-scroll-intent-key-retention.test.ts b/src/renderer/src/lib/pane-manager/terminal-scroll-intent-key-retention.test.ts
new file mode 100644
index 00000000000..e7da03090a1
--- /dev/null
+++ b/src/renderer/src/lib/pane-manager/terminal-scroll-intent-key-retention.test.ts
@@ -0,0 +1,159 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type { ManagedPaneInternal } from './pane-manager-types'
+import type { TerminalLeafId } from '../../../../shared/stable-pane-id'
+
+const disposePane = vi.hoisted(() =>
+  vi.fn((pane: ManagedPaneInternal, panes: Map<number, ManagedPaneInternal>) => {
+    panes.delete(pane.id)
+  })
+)
+
+vi.mock('./pane-tree-ops', () => ({
+  captureScrollState: vi.fn(),
+  findPaneChildren: vi.fn(() => []),
+  promoteSibling: vi.fn(),
+  removeDividers: vi.fn(),
+  safeFit: vi.fn(),
+  wrapInSplit: vi.fn()
+}))
+vi.mock('./pane-lifecycle', () => ({ disposePane, openTerminal: vi.fn() }))
+vi.mock('./pane-webgl-renderer', () => ({ disposeWebgl: vi.fn() }))
+vi.mock('./pane-split-scroll', () => ({
+  clearPendingSplitScrollRestore: vi.fn(),
+  scheduleSplitScrollRestore: vi.fn()
+}))
+vi.mock('./pane-drag-reorder', () => ({ updateMultiPaneState: vi.fn() }))
+vi.mock('./pane-divider', () => ({ applyDividerStyles: vi.fn(), applyPaneOpacity: vi.fn() }))
+
+import {
+  closeManagedPane,
+  detachManagedPaneForExternalMove,
+  retireManagedPanePreservingPty
+} from './pane-split-close'
+import {
+  bindTerminalScrollIntentKey,
+  markTerminalPinnedViewport,
+  type TerminalScrollIntentTarget
+} from './terminal-scroll-intent'
+import {
+  readTerminalScrollIntentKeyRetention,
+  releaseTerminalScrollIntentKey
+} from './terminal-scroll-intent-key-store'
+
+function leafIdAt(index: number): TerminalLeafId {
+  return `11111111-1111-4111-8111-${String(index).padStart(12, '0')}` as TerminalLeafId
+}
+
+/** A pinned (non-bottom) viewport so a keyed intent is actually retained. */
+function createPinnedTerminal(): TerminalScrollIntentTarget {
+  return {
+    buffer: { active: { type: 'normal', viewportY: 3, baseY: 40 } } as never,
+    scrollToBottom: vi.fn(),
+    scrollToLine: vi.fn()
+  }
+}
+
+function createPane(id: number, leafId: TerminalLeafId): ManagedPaneInternal {
+  const container = {
+    classList: { contains: (className: string) => className === 'pane' },
+    dataset: { paneId: String(id), leafId },
+    parentElement: null,
+    remove: vi.fn()
+  }
+  return {
+    id,
+    leafId,
+    stablePaneId: leafId,
+    terminal: { focus: vi.fn() } as never,
+    container: container as unknown as HTMLElement,
+    xtermContainer: {} as never,
+    linkTooltip: {} as never,
+    terminalGpuAcceleration: 'auto',
+    gpuRenderingEnabled: false,
+    webglAttachmentDeferred: false,
+    webglDisabledAfterContextLoss: false,
+    hasComplexScriptOutput: false,
+    webglAddon: null,
+    ligaturesAddon: null,
+    fitResizeObserver: null,
+    pendingObservedFitRafId: null,
+    fitAddon: {} as never,
+    searchAddon: {} as never,
+    serializeAddon: {} as never,
+    unicode11Addon: {} as never,
+    webLinksAddon: {} as never,
+    compositionHandler: null,
+    pendingSplitScrollState: null,
+    debugLabel: null
+  }
+}
+
+function openPane(id: number, leafId: TerminalLeafId): ManagedPaneInternal {
+  const pane = createPane(id, leafId)
+  const terminal = createPinnedTerminal()
+  bindTerminalScrollIntentKey(terminal, leafId)
+  markTerminalPinnedViewport(terminal)
+  return pane
+}
+
+function closeArgs(pane: ManagedPaneInternal, panes: Map<number, ManagedPaneInternal>) {
+  return {
+    paneId: pane.id,
+    activePaneId: null,
+    panes,
+    root: {} as HTMLElement,
+    styleOptions: {},
+    managerOptions: { linkOpenHint: () => '' },
+    getDragCallbacks: () => ({}) as never,
+    releasePaneIdentity: vi.fn(),
+    setActivePaneId: vi.fn()
+  }
+}
+
+describe('terminal scroll intent key retention', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('returns both keyed maps to baseline after 200 pane open/close cycles', () => {
+    const baseline = readTerminalScrollIntentKeyRetention()
+
+    for (let index = 0; index < 200; index += 1) {
+      const leafId = leafIdAt(index)
+      const pane = openPane(index + 1, leafId)
+      const panes = new Map([[pane.id, pane]])
+      // A pinned pane must actually retain its keyed intent while it is open.
+      expect(readTerminalScrollIntentKeyRetention()).toEqual({
+        intents: baseline.intents + 1,
+        bindings: baseline.bindings + 1
+      })
+      // Keep a second pane so close is never the last-pane no-op path.
+      const survivor = createPane(10_000 + index, leafIdAt(10_000 + index))
+      panes.set(survivor.id, survivor)
+      closeManagedPane(closeArgs(pane, panes))
+    }
+
+    expect(readTerminalScrollIntentKeyRetention()).toEqual(baseline)
+  })
+
+  it('keeps the keyed intent when the leaf is handed to a new host', () => {
+    const baseline = readTerminalScrollIntentKeyRetention()
+
+    for (const teardown of [detachManagedPaneForExternalMove, retireManagedPanePreservingPty]) {
+      const leafId = leafIdAt(9000 + Number(teardown === retireManagedPanePreservingPty))
+      const pane = openPane(9000, leafId)
+      const survivor = createPane(9001, leafIdAt(9001))
+      const panes = new Map([
+        [pane.id, pane],
+        [survivor.id, survivor]
+      ])
+
+      expect(teardown(closeArgs(pane, panes))).toBe(true)
+      expect(readTerminalScrollIntentKeyRetention().intents).toBe(baseline.intents + 1)
+
+      releaseTerminalScrollIntentKey(leafId)
+    }
+
+    expect(readTerminalScrollIntentKeyRetention()).toEqual(baseline)
+  })
+})
diff --git a/src/renderer/src/lib/pane-manager/terminal-scroll-intent-key-store.ts b/src/renderer/src/lib/pane-manager/terminal-scroll-intent-key-store.ts
new file mode 100644
index 00000000000..23d2d5d8af1
--- /dev/null
+++ b/src/renderer/src/lib/pane-manager/terminal-scroll-intent-key-store.ts
@@ -0,0 +1,63 @@
+import type { TerminalScrollBufferType } from './terminal-scroll-buffer-snapshot'
+
+export type TerminalScrollIntentKind = 'followOutput' | 'pinnedViewport'
+export type TerminalScrollIntentKey = string
+
+export type TerminalScrollIntent = {
+  kind: TerminalScrollIntentKind
+  bufferType: TerminalScrollBufferType
+  viewportY: number
+  baseY: number
+  revision: number
+}
+
+// Keyed by stable leaf id, so a pin outlives the xterm instance that recorded
+// it (workspace switch, keyed remount). Unlike the WeakMap-keyed siblings in
+// terminal-scroll-intent.ts these hold a strong string key, so a leaf that is
+// gone for good must be released explicitly — see releaseTerminalScrollIntentKey.
+const terminalScrollIntentByKey = new Map<TerminalScrollIntentKey, TerminalScrollIntent>()
+const terminalScrollIntentBindingByKey = new Map<TerminalScrollIntentKey, number>()
+
+export function readKeyedTerminalScrollIntent(
+  key: TerminalScrollIntentKey
+): TerminalScrollIntent | undefined {
+  return terminalScrollIntentByKey.get(key)
+}
+
+export function writeKeyedTerminalScrollIntent(
+  key: TerminalScrollIntentKey,
+  intent: TerminalScrollIntent
+): void {
+  terminalScrollIntentByKey.set(key, intent)
+}
+
+export function readKeyedTerminalScrollIntentBinding(
+  key: TerminalScrollIntentKey
+): number | undefined {
+  return terminalScrollIntentBindingByKey.get(key)
+}
+
+export function writeKeyedTerminalScrollIntentBinding(
+  key: TerminalScrollIntentKey,
+  binding: number
+): void {
+  terminalScrollIntentBindingByKey.set(key, binding)
+}
+
+/**
+ * Drops the keyed intent for a leaf that is gone for good. Only safe on a real
+ * close: plain disposal (workspace switch, keyed remount, manager destroy)
+ * relies on these entries to restore the pin when the leaf mounts again.
+ */
+export function releaseTerminalScrollIntentKey(key: TerminalScrollIntentKey): void {
+  terminalScrollIntentByKey.delete(key)
+  terminalScrollIntentBindingByKey.delete(key)
+}
+
+/** Retention probe for the leak tests. */
+export function readTerminalScrollIntentKeyRetention(): { intents: number; bindings: number } {
+  return {
+    intents: terminalScrollIntentByKey.size,
+    bindings: terminalScrollIntentBindingByKey.size
+  }
+}
diff --git a/src/renderer/src/lib/pane-manager/terminal-scroll-intent.ts b/src/renderer/src/lib/pane-manager/terminal-scroll-intent.ts
index bd0b63611a6..9e1e32fcb81 100644
--- a/src/renderer/src/lib/pane-manager/terminal-scroll-intent.ts
+++ b/src/renderer/src/lib/pane-manager/terminal-scroll-intent.ts
@@ -3,6 +3,17 @@ import {
   notifyTerminalFollowOutputWaiters
 } from './terminal-follow-output-waiters'
 import { isTerminalScrollIntentRebuildInFlight } from './terminal-scroll-intent-rebuild'
+import {
+  readKeyedTerminalScrollIntent,
+  readKeyedTerminalScrollIntentBinding,
+  writeKeyedTerminalScrollIntent,
+  writeKeyedTerminalScrollIntentBinding
+} from './terminal-scroll-intent-key-store'
+import type {
+  TerminalScrollIntent,
+  TerminalScrollIntentKey,
+  TerminalScrollIntentKind
+} from './terminal-scroll-intent-key-store'
 import {
   clampTerminalViewportY,
   isTerminalViewportAtBottom,
@@ -11,24 +22,12 @@ import {
   type TerminalScrollBufferType
 } from './terminal-scroll-buffer-snapshot'
 
-type TerminalScrollIntentKind = 'followOutput' | 'pinnedViewport'
-
 export type TerminalScrollIntentTarget = {
   buffer?: Parameters<typeof readTerminalScrollBufferSnapshot>[0]['buffer']
   scrollToBottom?: () => void
   scrollToLine?: (line: number) => void
 }
 
-export type TerminalScrollIntentKey = string
-
-type TerminalScrollIntent = {
-  kind: TerminalScrollIntentKind
-  bufferType: TerminalScrollBufferType
-  viewportY: number
-  baseY: number
-  revision: number
-}
-
 export type TerminalStructuralScrollIntentSnapshot = {
   kind: TerminalScrollIntentKind
   bufferType: TerminalScrollBufferType
@@ -53,8 +52,6 @@ const terminalScrollIntentKeyByTerminal = new WeakMap<
   TerminalScrollIntentKey
 >()
 const terminalScrollIntentKeyBindingByTerminal = new WeakMap<TerminalScrollIntentTarget, number>()
-const terminalScrollIntentByKey = new Map<TerminalScrollIntentKey, TerminalScrollIntent>()
-const terminalScrollIntentBindingByKey = new Map<TerminalScrollIntentKey, number>()
 
 let nextTerminalScrollIntentRevision = 1
 let nextTerminalScrollIntentKeyBinding = 1
@@ -92,7 +89,7 @@ function writeIntentSnapshot(
   terminalScrollIntentByTerminal.set(terminal, intent)
   const key = terminalScrollIntentKeyByTerminal.get(terminal)
   if (key) {
-    terminalScrollIntentByKey.set(key, intent)
+    writeKeyedTerminalScrollIntent(key, intent)
   }
   if (kind === 'followOutput') {
     notifyTerminalFollowOutputWaiters(terminal)
@@ -106,7 +103,7 @@ function readStoredIntent(terminal: TerminalScrollIntentTarget): TerminalScrollI
     return terminalIntent
   }
   const key = terminalScrollIntentKeyByTerminal.get(terminal)
-  return key ? terminalScrollIntentByKey.get(key) : undefined
+  return key ? readKeyedTerminalScrollIntent(key) : undefined
 }
 
 export function bindTerminalScrollIntentKey(
@@ -120,8 +117,8 @@ export function bindTerminalScrollIntentKey(
   const binding = nextTerminalScrollIntentKeyBinding
   nextTerminalScrollIntentKeyBinding += 1
   terminalScrollIntentKeyBindingByTerminal.set(terminal, binding)
-  terminalScrollIntentBindingByKey.set(key, binding)
-  const existing = terminalScrollIntentByKey.get(key)
+  writeKeyedTerminalScrollIntentBinding(key, binding)
+  const existing = readKeyedTerminalScrollIntent(key)
   if (existing) {
     terminalScrollIntentByTerminal.set(terminal, existing)
   }
@@ -137,7 +134,7 @@ export function isTerminalScrollIntentKeyBindingCurrent(
   }
   return (
     terminalScrollIntentKeyBindingByTerminal.get(terminal) ===
-    terminalScrollIntentBindingByKey.get(key)
+    readKeyedTerminalScrollIntentBinding(key)
   )
 }
 
diff --git a/src/renderer/src/store/slices/store-session-terminal-reconnect.test.ts b/src/renderer/src/store/slices/store-session-terminal-reconnect.test.ts
index 81c6350680d..c0f05124eda 100644
--- a/src/renderer/src/store/slices/store-session-terminal-reconnect.test.ts
+++ b/src/renderer/src/store/slices/store-session-terminal-reconnect.test.ts
@@ -599,9 +599,12 @@ describe('reconnectPersistedTerminals', () => {
     }
     const sshConnectionStates = new Map([[targetId, currentAuthorityState]])
     const originalGet = sshConnectionStates.get.bind(sshConnectionStates)
+    // Rotate from the first read after the entry authority check, so the
+    // pre-publication check sees the new generation whatever number of
+    // intermediate reads the reconnect pass happens to make.
     sshConnectionStates.get = ((key: string) => {
       authorityReads += 1
-      return authorityReads >= 4 ? rotatedAuthorityState : originalGet(key)
+      return authorityReads >= 2 ? rotatedAuthorityState : originalGet(key)
     }) as typeof sshConnectionStates.get
     store.setState({
       repos: [
@@ -636,7 +639,7 @@ describe('reconnectPersistedTerminals', () => {
     })
 
     const after = store.getState()
-    expect(authorityReads).toBeGreaterThanOrEqual(4)
+    expect(authorityReads).toBeGreaterThanOrEqual(2)
     expect(after.tabsByWorktree).toBe(before.tabsByWorktree)
     expect(after.ptyIdsByTabId).toBe(before.ptyIdsByTabId)
     expect(after.pendingReconnectWorktreeIds).toBe(before.pendingReconnectWorktreeIds)
diff --git a/src/renderer/src/store/slices/tabs/hydrated-workspace-reconciliation-batch.test.ts b/src/renderer/src/store/slices/tabs/hydrated-workspace-reconciliation-batch.test.ts
new file mode 100644
index 00000000000..e6a7bfe7002
--- /dev/null
+++ b/src/renderer/src/store/slices/tabs/hydrated-workspace-reconciliation-batch.test.ts
@@ -0,0 +1,148 @@
+import { describe, it, expect, vi } from 'vitest'
+import type * as AgentStatusModule from '@/lib/agent-status'
+import { createTabsSliceMockApi } from '../tabs-slice-test-harness'
+import { createTestStore } from '../store-test-helpers'
+import {
+  buildHydratedWorkspaceFixture,
+  HYDRATED_TAB_COUNT,
+  HYDRATED_WORKSPACE_COUNT,
+  RECONCILIATION_WRITABLE_KEYS
+} from './hydrated-workspace-reconciliation-fixture'
+
+vi.mock('sonner', () => ({ toast: { info: vi.fn(), success: vi.fn(), error: vi.fn() } }))
+vi.mock('@/lib/agent-status', async (importOriginal) => {
+  const actual = await importOriginal<typeof AgentStatusModule>()
+  return { ...actual, detectAgentStatusFromTitle: vi.fn().mockReturnValue(null) }
+})
+
+createTabsSliceMockApi()
+
+// Approximates the renderer's live non-React store-subscriber population.
+const SUBSCRIBER_COUNT = 1200
+
+type Store = ReturnType<typeof createTestStore>
+
+function hydrateFixtureStore(): { store: Store; workspaceIds: string[] } {
+  const fixture = buildHydratedWorkspaceFixture()
+  expect(fixture.workspaceIds).toHaveLength(HYDRATED_WORKSPACE_COUNT)
+  expect(fixture.tabCount).toBe(HYDRATED_TAB_COUNT)
+  const store = createTestStore()
+  store.setState(fixture.state)
+  return { store, workspaceIds: fixture.workspaceIds }
+}
+
+function countNotifications(store: Store, run: () => void): number {
+  let notifications = 0
+  const unsubscribes = Array.from({ length: SUBSCRIBER_COUNT }, () =>
+    store.subscribe(() => {
+      notifications += 1
+    })
+  )
+  try {
+    run()
+  } finally {
+    for (const unsubscribe of unsubscribes) {
+      unsubscribe()
+    }
+  }
+  return notifications
+}
+
+/** Group ids for restored legacy terminals are minted, so pin them to compare states. */
+function withDeterministicUuids<T>(run: () => T): T {
+  let counter = 0
+  const spy = vi.spyOn(globalThis.crypto, 'randomUUID').mockImplementation(() => {
+    counter += 1
+    return `00000000-0000-4000-8000-${String(counter).padStart(12, '0')}`
+  })
+  try {
+    return run()
+  } finally {
+    spy.mockRestore()
+  }
+}
+
+function reconciliationSnapshot(store: Store): Record<string, unknown> {
+  const state = store.getState() as unknown as Record<string, unknown>
+  return Object.fromEntries(RECONCILIATION_WRITABLE_KEYS.map((key) => [key, state[key]]))
+}
+
+describe('whole-session workspace tab-model reconciliation', () => {
+  it('collapses a 193-workspace hydration to one store write', () => {
+    const perWorkspace = hydrateFixtureStore()
+    const perWorkspaceNotifications = countNotifications(perWorkspace.store, () => {
+      for (const worktreeId of perWorkspace.workspaceIds) {
+        perWorkspace.store.getState().reconcileWorktreeTabModel(worktreeId)
+      }
+    })
+
+    const batched = hydrateFixtureStore()
+    const batchedNotifications = countNotifications(batched.store, () => {
+      batched.store.getState().reconcileWorktreeTabModels(batched.workspaceIds)
+    })
+
+    // The fixture must actually be write-heavy, or the collapse proves nothing.
+    expect(perWorkspaceNotifications / SUBSCRIBER_COUNT).toBeGreaterThan(100)
+    expect(batchedNotifications).toBe(SUBSCRIBER_COUNT)
+  })
+
+  it('leaves the store byte-identical to the per-workspace path', () => {
+    const perWorkspace = hydrateFixtureStore()
+    withDeterministicUuids(() => {
+      for (const worktreeId of perWorkspace.workspaceIds) {
+        perWorkspace.store.getState().reconcileWorktreeTabModel(worktreeId)
+      }
+    })
+    const expected = reconciliationSnapshot(perWorkspace.store)
+
+    const batched = hydrateFixtureStore()
+    withDeterministicUuids(() => {
+      batched.store.getState().reconcileWorktreeTabModels(batched.workspaceIds)
+    })
+    const actual = reconciliationSnapshot(batched.store)
+
+    expect(actual).toEqual(expected)
+    // Object key order is observable through Object.keys/entries iteration in
+    // selectors and session serialization, so equal values are not enough.
+    for (const key of RECONCILIATION_WRITABLE_KEYS) {
+      const actualValue = actual[key]
+      const expectedValue = expected[key]
+      if (actualValue && typeof actualValue === 'object' && !Array.isArray(actualValue)) {
+        expect([key, Object.keys(actualValue)]).toEqual([key, Object.keys(expectedValue as object)])
+      }
+    }
+  })
+
+  it('re-reconciling the batched result is a no-op, as it is for the per-workspace path', () => {
+    const { store, workspaceIds } = hydrateFixtureStore()
+    store.getState().reconcileWorktreeTabModels(workspaceIds)
+    const settled = reconciliationSnapshot(store)
+
+    const notifications = countNotifications(store, () => {
+      store.getState().reconcileWorktreeTabModels(workspaceIds)
+    })
+
+    expect(notifications).toBe(0)
+    expect(reconciliationSnapshot(store)).toEqual(settled)
+  })
+
+  it('indexes openFiles once instead of rescanning it per workspace', () => {
+    const { store, workspaceIds } = hydrateFixtureStore()
+    const openFiles = store.getState().openFiles
+    let scans = 0
+    store.setState({
+      openFiles: new Proxy(openFiles, {
+        get(target, property, receiver) {
+          if (property === 'filter') {
+            scans += 1
+          }
+          return Reflect.get(target, property, receiver)
+        }
+      })
+    })
+
+    store.getState().reconcileWorktreeTabModels(workspaceIds)
+
+    expect(scans).toBe(0)
+  })
+})
diff --git a/src/renderer/src/store/slices/tabs/hydrated-workspace-reconciliation-fixture.ts b/src/renderer/src/store/slices/tabs/hydrated-workspace-reconciliation-fixture.ts
new file mode 100644
index 00000000000..30ba7be1633
--- /dev/null
+++ b/src/renderer/src/store/slices/tabs/hydrated-workspace-reconciliation-fixture.ts
@@ -0,0 +1,242 @@
+import type { AppState } from '../../types'
+import type { Tab, TabGroup } from '../../../../../shared/tab-types'
+import type { TerminalTab } from '../../../../../shared/terminal-tab-types'
+import type { OpenFile } from '../editor'
+
+/**
+ * Session shape measured on a real heavy profile: 193 workspaces / 382 tabs,
+ * spread over every reconciliation outcome (no-op, dropped tab, restored legacy
+ * runtime terminal, orphan sweep, editor tab) so a whole-session fold exercises
+ * both the workspace-scoped maps and the store-global ones workspaces share.
+ */
+export const HYDRATED_WORKSPACE_COUNT = 193
+export const HYDRATED_TAB_COUNT = 382
+
+const BUCKETS = ['stable', 'stale', 'legacy', 'orphan', 'editor'] as const
+type Bucket = (typeof BUCKETS)[number]
+
+export type HydratedWorkspaceFixture = {
+  workspaceIds: string[]
+  tabCount: number
+  state: Partial<AppState>
+}
+
+type FixtureDraft = {
+  unifiedTabsByWorktree: Record<string, Tab[]>
+  groupsByWorktree: Record<string, TabGroup[]>
+  activeGroupIdByWorktree: Record<string, string>
+  tabsByWorktree: Record<string, TerminalTab[]>
+  activeTabIdByWorktree: Record<string, string | null>
+  tabBarOrderByWorktree: Record<string, string[]>
+  ptyIdsByTabId: Record<string, string[]>
+  pendingReconnectPtyIdByTabId: Record<string, string>
+  unreadTerminalTabs: Record<string, true>
+  cacheTimerByKey: Record<string, number>
+  openFiles: OpenFile[]
+}
+
+function unifiedTab(id: string, worktreeId: string, groupId: string, over: Partial<Tab>): Tab {
+  return {
+    id,
+    entityId: id,
+    groupId,
+    worktreeId,
+    contentType: 'terminal',
+    label: id,
+    customLabel: null,
+    color: null,
+    sortOrder: 0,
+    createdAt: 1,
+    ...over
+  }
+}
+
+function runtimeTab(id: string, worktreeId: string, over: Partial<TerminalTab>): TerminalTab {
+  return {
+    id,
+    ptyId: `pty-${id}`,
+    worktreeId,
+    title: id,
+    customTitle: null,
+    color: null,
+    sortOrder: 0,
+    createdAt: 1,
+    ...over
+  }
+}
+
+function setGroup(draft: FixtureDraft, worktreeId: string, groupId: string, tabs: Tab[]): void {
+  draft.unifiedTabsByWorktree[worktreeId] = tabs
+  draft.groupsByWorktree[worktreeId] = [
+    {
+      id: groupId,
+      worktreeId,
+      activeTabId: tabs[0]?.id ?? null,
+      tabOrder: tabs.map((tab) => tab.id)
+    }
+  ]
+}
+
+/** Live terminal rows that reconcile to a no-op patch. */
+function buildStableWorkspace(draft: FixtureDraft, worktreeId: string, groupId: string): number {
+  const live = `${worktreeId}#live`
+  setGroup(draft, worktreeId, groupId, [unifiedTab(live, worktreeId, groupId, {})])
+  draft.tabsByWorktree[worktreeId] = [runtimeTab(live, worktreeId, {})]
+  return 1
+}
+
+/** A unified row with no runtime backing: dropped, and its store-global unread flag with it. */
+function buildStaleWorkspace(draft: FixtureDraft, worktreeId: string, groupId: string): number {
+  const live = `${worktreeId}#live`
+  const stale = `${worktreeId}#stale`
+  setGroup(draft, worktreeId, groupId, [
+    unifiedTab(live, worktreeId, groupId, {}),
+    unifiedTab(stale, worktreeId, groupId, { sortOrder: 1 })
+  ])
+  draft.tabsByWorktree[worktreeId] = [runtimeTab(live, worktreeId, {})]
+  draft.unreadTerminalTabs[stale] = true
+  return 2
+}
+
+/** Live only in a reconnect map: restored into the unified model, minting a group and layout. */
+function buildLegacyWorkspace(draft: FixtureDraft, worktreeId: string): number {
+  const legacy = `${worktreeId}#legacy`
+  draft.tabsByWorktree[worktreeId] = [runtimeTab(legacy, worktreeId, { ptyId: null })]
+  draft.pendingReconnectPtyIdByTabId[legacy] = `session-${legacy}`
+  draft.ptyIdsByTabId[legacy] = []
+  draft.unifiedTabsByWorktree[worktreeId] = []
+  draft.groupsByWorktree[worktreeId] = []
+  draft.activeTabIdByWorktree[worktreeId] = legacy
+  return 1
+}
+
+/** No PTY and no unified row: swept, which writes the store-global per-tab maps. */
+function buildOrphanWorkspace(draft: FixtureDraft, worktreeId: string): number {
+  const orphan = `${worktreeId}#orphan`
+  draft.tabsByWorktree[worktreeId] = [runtimeTab(orphan, worktreeId, { ptyId: null })]
+  draft.tabBarOrderByWorktree[worktreeId] = [orphan]
+  draft.activeTabIdByWorktree[worktreeId] = orphan
+  draft.cacheTimerByKey[`${orphan}:git`] = 1
+  draft.unifiedTabsByWorktree[worktreeId] = []
+  draft.groupsByWorktree[worktreeId] = []
+  return 1
+}
+
+/** One editor tab backed by an open file, one that is not — the openFiles rescan path. */
+function buildEditorWorkspace(draft: FixtureDraft, worktreeId: string, groupId: string): number {
+  const fileId = `${worktreeId}#file`
+  const ghost = `${worktreeId}#ghost-file`
+  setGroup(draft, worktreeId, groupId, [
+    unifiedTab(fileId, worktreeId, groupId, { contentType: 'editor' }),
+    unifiedTab(ghost, worktreeId, groupId, { contentType: 'editor', sortOrder: 1 })
+  ])
+  draft.tabsByWorktree[worktreeId] = []
+  draft.openFiles.push({
+    id: fileId,
+    filePath: `/tmp/${worktreeId}/${fileId}`,
+    relativePath: fileId,
+    worktreeId,
+    language: 'typescript',
+    isDirty: false,
+    mode: 'edit'
+  })
+  return 2
+}
+
+function buildWorkspace(
+  draft: FixtureDraft,
+  bucket: Bucket,
+  worktreeId: string,
+  groupId: string
+): number {
+  switch (bucket) {
+    case 'stable':
+      return buildStableWorkspace(draft, worktreeId, groupId)
+    case 'stale':
+      return buildStaleWorkspace(draft, worktreeId, groupId)
+    case 'legacy':
+      return buildLegacyWorkspace(draft, worktreeId)
+    case 'orphan':
+      return buildOrphanWorkspace(draft, worktreeId)
+    case 'editor':
+      return buildEditorWorkspace(draft, worktreeId, groupId)
+  }
+}
+
+/** Tops the fixture up to the measured tab count with extra live rows. */
+function padToTabCount(draft: FixtureDraft, workspaceIds: string[], missing: number): number {
+  let added = 0
+  for (let slot = 0; added < missing; slot += 1) {
+    const worktreeId = workspaceIds[slot % workspaceIds.length]
+    const group = draft.groupsByWorktree[worktreeId]?.[0]
+    if (!group || draft.tabsByWorktree[worktreeId] == null) {
+      continue
+    }
+    const id = `${worktreeId}#extra-${slot}`
+    draft.unifiedTabsByWorktree[worktreeId].push(
+      unifiedTab(id, worktreeId, group.id, { sortOrder: 10 + slot })
+    )
+    draft.tabsByWorktree[worktreeId].push(runtimeTab(id, worktreeId, { sortOrder: 10 + slot }))
+    group.tabOrder.push(id)
+    added += 1
+  }
+  return added
+}
+
+export function buildHydratedWorkspaceFixture(
+  workspaceCount = HYDRATED_WORKSPACE_COUNT,
+  tabCountTarget = HYDRATED_TAB_COUNT
+): HydratedWorkspaceFixture {
+  const draft: FixtureDraft = {
+    unifiedTabsByWorktree: {},
+    groupsByWorktree: {},
+    activeGroupIdByWorktree: {},
+    tabsByWorktree: {},
+    activeTabIdByWorktree: {},
+    tabBarOrderByWorktree: {},
+    ptyIdsByTabId: {},
+    pendingReconnectPtyIdByTabId: {},
+    unreadTerminalTabs: {},
+    cacheTimerByKey: {},
+    openFiles: []
+  }
+  const workspaceIds: string[] = []
+  let tabCount = 0
+
+  for (let index = 0; index < workspaceCount; index += 1) {
+    const worktreeId = `repo1::/tmp/w${index}`
+    const groupId = `g-${index}`
+    workspaceIds.push(worktreeId)
+    draft.activeGroupIdByWorktree[worktreeId] = groupId
+    tabCount += buildWorkspace(draft, BUCKETS[index % BUCKETS.length], worktreeId, groupId)
+  }
+  tabCount += padToTabCount(draft, workspaceIds, Math.max(0, tabCountTarget - tabCount))
+
+  return { workspaceIds, tabCount, state: { ...draft } }
+}
+
+/** Every top-level key the two reconciliation patch producers can write. */
+export const RECONCILIATION_WRITABLE_KEYS = [
+  'unifiedTabsByWorktree',
+  'groupsByWorktree',
+  'activeGroupIdByWorktree',
+  'layoutByWorktree',
+  'unreadTerminalTabs',
+  'tabsByWorktree',
+  'ptyIdsByTabId',
+  'runtimePaneTitlesByTabId',
+  'expandedPaneByTabId',
+  'canExpandPaneByTabId',
+  'terminalLayoutsByTabId',
+  'pendingStartupByTabId',
+  'pendingInitialCwdByTabId',
+  'pendingSetupSplitByTabId',
+  'pendingIssueCommandSplitByTabId',
+  'automaticAgentResumeClaimsByTabId',
+  'nativeChatLaunchPromptByTabId',
+  'nativeChatLaunchDraftByTabId',
+  'tabBarOrderByWorktree',
+  'cacheTimerByKey',
+  'activeTabIdByWorktree',
+  'activeTabId'
+] as const satisfies readonly (keyof AppState)[]
diff --git a/src/renderer/src/store/slices/tabs/tabs-reconciliation-batch.ts b/src/renderer/src/store/slices/tabs/tabs-reconciliation-batch.ts
new file mode 100644
index 00000000000..1eb11064203
--- /dev/null
+++ b/src/renderer/src/store/slices/tabs/tabs-reconciliation-batch.ts
@@ -0,0 +1,55 @@
+import type { AppState } from '../../types'
+
+/**
+ * Scratch shared by one multi-workspace reconciliation fold.
+ *
+ * Reconciling N workspaces one `set()` at a time re-spreads the same
+ * workspace-keyed maps N times and rescans `openFiles` N times. A batch lets
+ * the fold clone each map once and then write into its own private draft, and
+ * index `openFiles` once — `openFiles` is never written by reconciliation, so
+ * the index stays valid for the whole fold.
+ */
+export type WorktreeTabModelReconciliationBatch = {
+  /** Top-level `AppState` keys this fold already cloned and therefore owns. */
+  readonly ownedStateKeys: Set<string>
+  readonly liveEditorIdsByWorktree: ReadonlyMap<string, Set<string>>
+}
+
+export const EMPTY_LIVE_EDITOR_IDS: ReadonlySet<string> = new Set<string>()
+
+export function createWorktreeTabModelReconciliationBatch(
+  state: Pick<AppState, 'openFiles'>
+): WorktreeTabModelReconciliationBatch {
+  const liveEditorIdsByWorktree = new Map<string, Set<string>>()
+  for (const file of state.openFiles) {
+    let ids = liveEditorIdsByWorktree.get(file.worktreeId)
+    if (!ids) {
+      ids = new Set<string>()
+      liveEditorIdsByWorktree.set(file.worktreeId, ids)
+    }
+    ids.add(file.id)
+  }
+  return { ownedStateKeys: new Set<string>(), liveEditorIdsByWorktree }
+}
+
+/**
+ * Sets one workspace entry, mutating the batch's own draft once it owns the
+ * map. Insertion order matches the spread it replaces: an existing key keeps
+ * its slot, a new key is appended.
+ */
+export function writeBatchedWorkspaceRecordEntry<T>(
+  current: Record<string, T>,
+  stateKey: string,
+  worktreeId: string,
+  // `undefined` is accepted because the spread this replaces also stored it.
+  value: T | undefined,
+  batch: WorktreeTabModelReconciliationBatch | undefined
+): Record<string, T> {
+  if (batch?.ownedStateKeys.has(stateKey)) {
+    ;(current as Record<string, T | undefined>)[worktreeId] = value
+    return current
+  }
+  const next = { ...current, [worktreeId]: value } as Record<string, T>
+  batch?.ownedStateKeys.add(stateKey)
+  return next
+}
diff --git a/src/renderer/src/store/slices/tabs/tabs-reconciliation.ts b/src/renderer/src/store/slices/tabs/tabs-reconciliation.ts
index 1be6199b55c..72d7be7195e 100644
--- a/src/renderer/src/store/slices/tabs/tabs-reconciliation.ts
+++ b/src/renderer/src/store/slices/tabs/tabs-reconciliation.ts
@@ -7,6 +7,11 @@ import {
   getOrphanTerminalIds,
   terminalTabHasReconnectablePty
 } from '../terminal-orphan-helpers'
+import {
+  EMPTY_LIVE_EDITOR_IDS,
+  writeBatchedWorkspaceRecordEntry,
+  type WorktreeTabModelReconciliationBatch
+} from './tabs-reconciliation-batch'
 
 export type WorktreeTabModelReconciliation = {
   patch: Partial<AppState>
@@ -14,9 +19,15 @@ export type WorktreeTabModelReconciliation = {
   activeRenderableTabId: string | null
 }
 
+/**
+ * Pure projection of one workspace's reconciliation patch. Passing `batch`
+ * lets a multi-workspace fold reuse its own map drafts and `openFiles` index;
+ * the projected values are identical either way.
+ */
 export function projectWorktreeTabModelReconciliation(
   state: AppState,
-  worktreeId: string
+  worktreeId: string,
+  batch?: WorktreeTabModelReconciliationBatch
 ): WorktreeTabModelReconciliation {
   const unifiedTabs = state.unifiedTabsByWorktree[worktreeId] ?? []
   const groups = state.groupsByWorktree[worktreeId] ?? []
@@ -93,9 +104,13 @@ export function projectWorktreeTabModelReconciliation(
   const liveTerminalIds = new Set(
     runtimeTerminalTabs.filter((tab) => !orphanTerminalIds.has(tab.id)).map((tab) => tab.id)
   )
-  const liveEditorIds = new Set(
-    state.openFiles.filter((file) => file.worktreeId === worktreeId).map((file) => file.id)
-  )
+  // Why batched: the unbatched scan is O(openFiles) per workspace, so a
+  // whole-session reconcile is O(workspaces x openFiles).
+  const liveEditorIds: ReadonlySet<string> = batch
+    ? (batch.liveEditorIdsByWorktree.get(worktreeId) ?? EMPTY_LIVE_EDITOR_IDS)
+    : new Set(
+        state.openFiles.filter((file) => file.worktreeId === worktreeId).map((file) => file.id)
+      )
   const liveBrowserIds = new Set(
     (state.browserTabsByWorktree[worktreeId] ?? []).map((browserTab) => browserTab.id)
   )
@@ -177,7 +192,10 @@ export function projectWorktreeTabModelReconciliation(
     )
     let nextUnreadTerminalTabs = state.unreadTerminalTabs
     if (droppedTerminalEntityIds.length > 0) {
-      const copy = { ...state.unreadTerminalTabs }
+      // A batch that already owns this map published it in an earlier patch, so
+      // draining further entries in place needs no second patch entry.
+      const owned = batch?.ownedStateKeys.has('unreadTerminalTabs') === true
+      const copy = owned ? state.unreadTerminalTabs : { ...state.unreadTerminalTabs }
       let changed = false
       for (const entityId of droppedTerminalEntityIds) {
         if (copy[entityId]) {
@@ -187,25 +205,44 @@ export function projectWorktreeTabModelReconciliation(
       }
       if (changed) {
         nextUnreadTerminalTabs = copy
+        batch?.ownedStateKeys.add('unreadTerminalTabs')
       }
     }
     patch = {
-      unifiedTabsByWorktree: { ...state.unifiedTabsByWorktree, [worktreeId]: validTabs },
-      groupsByWorktree: { ...state.groupsByWorktree, [worktreeId]: nextGroups },
-      activeGroupIdByWorktree: {
-        ...state.activeGroupIdByWorktree,
-        [worktreeId]: nextActiveGroupId
-      },
+      unifiedTabsByWorktree: writeBatchedWorkspaceRecordEntry(
+        state.unifiedTabsByWorktree,
+        'unifiedTabsByWorktree',
+        worktreeId,
+        validTabs,
+        batch
+      ),
+      groupsByWorktree: writeBatchedWorkspaceRecordEntry(
+        state.groupsByWorktree,
+        'groupsByWorktree',
+        worktreeId,
+        nextGroups,
+        batch
+      ),
+      activeGroupIdByWorktree: writeBatchedWorkspaceRecordEntry(
+        state.activeGroupIdByWorktree,
+        'activeGroupIdByWorktree',
+        worktreeId,
+        nextActiveGroupId,
+        batch
+      ),
       ...(nextUnreadTerminalTabs !== state.unreadTerminalTabs
         ? { unreadTerminalTabs: nextUnreadTerminalTabs }
         : {}),
       ...(nextLayout && layoutChanged
         ? {
-            layoutByWorktree: {
-              ...state.layoutByWorktree,
-              // Why: restored runtime terminals need a concrete leaf before activation.
-              [worktreeId]: nextLayout
-            }
+            // Why: restored runtime terminals need a concrete leaf before activation.
+            layoutByWorktree: writeBatchedWorkspaceRecordEntry(
+              state.layoutByWorktree,
+              'layoutByWorktree',
+              worktreeId,
+              nextLayout,
+              batch
+            )
           }
         : {}),
       ...(orphanTerminalIds.size > 0
diff --git a/src/renderer/src/store/slices/tabs/tabs-session-actions.ts b/src/renderer/src/store/slices/tabs/tabs-session-actions.ts
index 1c2d22c0ce7..e33f1f533cd 100644
--- a/src/renderer/src/store/slices/tabs/tabs-session-actions.ts
+++ b/src/renderer/src/store/slices/tabs/tabs-session-actions.ts
@@ -8,6 +8,8 @@ import {
 } from '../degraded-repo-worktree-validity'
 import { buildHydratedTabState } from '../tabs-hydration'
 import { projectWorktreeTabModelReconciliation } from './tabs-reconciliation'
+import { createWorktreeTabModelReconciliationBatch } from './tabs-reconciliation-batch'
+import type { AppState } from '../../types'
 
 function replaceWorkspaceRecordKeys<T>(
   current: Record<string, T>,
@@ -20,11 +22,49 @@ function replaceWorkspaceRecordKeys<T>(
   }
 }
 
+/**
+ * Folds every workspace's reconciliation into one patch. Equivalent to
+ * applying each patch with its own `set()`: each projection reads the state
+ * left by its predecessors (they share `unreadTerminalTabs` and the orphan
+ * cleanup maps), only the store write and subscriber fanout are deferred.
+ */
+function projectWorktreeTabModelReconciliations(
+  state: AppState,
+  worktreeIds: readonly string[]
+): Partial<AppState> {
+  const batch = createWorktreeTabModelReconciliationBatch(state)
+  // Private working copy so batch-owned maps can be written in place.
+  const working = { ...state }
+  const merged: Partial<AppState> = {}
+  for (const worktreeId of worktreeIds) {
+    const { patch } = projectWorktreeTabModelReconciliation(working, worktreeId, batch)
+    if (Object.keys(patch).length === 0) {
+      continue
+    }
+    Object.assign(merged, patch)
+    Object.assign(working, patch)
+  }
+  return merged
+}
+
 export function createTabsSessionActions(
   set: TabsSliceSet,
   get: TabsSliceGet
-): Pick<TabsSlice, 'reconcileWorktreeTabModel' | 'hydrateTabsSession'> {
+): Pick<
+  TabsSlice,
+  'reconcileWorktreeTabModel' | 'reconcileWorktreeTabModels' | 'hydrateTabsSession'
+> {
   return {
+    reconcileWorktreeTabModels: (worktreeIds) => {
+      if (worktreeIds.length === 0) {
+        return
+      }
+      const patch = projectWorktreeTabModelReconciliations(get(), worktreeIds)
+      if (Object.keys(patch).length > 0) {
+        set(patch)
+      }
+    },
+
     reconcileWorktreeTabModel: (worktreeId) => {
       const reconciliation = projectWorktreeTabModelReconciliation(get(), worktreeId)
       if (Object.keys(reconciliation.patch).length > 0) {
diff --git a/src/renderer/src/store/slices/tabs/tabs-slice-contract.ts b/src/renderer/src/store/slices/tabs/tabs-slice-contract.ts
index 456d5892255..81d27ff54d5 100644
--- a/src/renderer/src/store/slices/tabs/tabs-slice-contract.ts
+++ b/src/renderer/src/store/slices/tabs/tabs-slice-contract.ts
@@ -152,6 +152,8 @@ export type TabsSlice = {
     renderableTabCount: number
     activeRenderableTabId: string | null
   }
+  /** Reconciles many workspaces through one store write instead of one per workspace. */
+  reconcileWorktreeTabModels: (worktreeIds: readonly string[]) => void
   hydrateTabsSession: (
     session: WorkspaceSessionState,
     options?: WorkspaceSessionHydrationOptions
diff --git a/src/renderer/src/store/terminals/workspace-terminal-reconnect.ts b/src/renderer/src/store/terminals/workspace-terminal-reconnect.ts
index 5b1e0d39f93..ea0c0545998 100644
--- a/src/renderer/src/store/terminals/workspace-terminal-reconnect.ts
+++ b/src/renderer/src/store/terminals/workspace-terminal-reconnect.ts
@@ -50,18 +50,6 @@ export function createWorkspaceTerminalReconnectActions(
       const repoById = buildByIdIndex(get().repos)
       for (const worktreeId of ids) {
         const tabs = tabsByWorktree[worktreeId] ?? []
-        const worktree = worktreeById.get(worktreeId)
-        const repo = worktree ? (repoById.get(worktree.repoId) ?? null) : null
-        // Why: only allow deferred reattach when the SSH connection is active; reattaching to a not-yet-connected relay (deferred/passphrase targets) would fail.
-        const sshTargetId = options?.directSshAuthority.targetId ?? repo?.connectionId ?? null
-        const sshState = sshTargetId ? get().sshConnectionStates.get(sshTargetId) : null
-        const sshConnected = sshTargetId != null && sshState?.status === 'connected'
-        const supportsDeferredReattach = options
-          ? sshConnected
-          : !repo?.connectionId || sshConnected
-        console.debug(
-          `[reconnect-terminals] worktree=${worktreeId} connectionId=${repo?.connectionId} sshStatus=${sshState?.status} supportsDeferredReattach=${supportsDeferredReattach}`
-        )
         const targetTabIds = pendingReconnectTabByWorktree[worktreeId] ?? []
         const tabsToReconnect: TerminalTab[] =
           targetTabIds.length > 0
@@ -84,11 +72,8 @@ export function createWorkspaceTerminalReconnectActions(
               ? undefined
               : pendingPtyId
           const hasLeafMappings = Object.keys(leafPtyMap).length > 0
-          // Why: publish live PTY hints before mount; pty-connection reattaches later.
-          console.debug(
-            `[reconnect-terminals] tab=${tabId} tabLevelPtyId=${tabLevelPtyId} supportsDeferredReattach=${supportsDeferredReattach} hasLeafMappings=${hasLeafMappings}`
-          )
-          // Why: populate ptyIdsByTabId so the sessions status segment maps daemon IDs to tabs; otherwise all sessions look like orphans until the pane mounts.
+          // Why: publish live PTY hints before mount (pty-connection reattaches later) so the
+          // sessions status segment maps daemon IDs to tabs; otherwise all sessions look like orphans until the pane mounts.
           // A row whose tab.ptyId went to the canonical row has no tab-level id left, but its own leaf PTYs still need advertising.
           const allPtyIds = hasLeafMappings
             ? (Object.values(leafPtyMap).filter(Boolean) as string[])

From 53f105827bc1949c3c36838052ecd227b962d7f4 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:08:01 -0700
Subject: [PATCH 69/92] perf(windows): stop asking the process table for
 memory, and share one projection per snapshot (#18151)

Two costs on the Windows process-table hot path, plus the EDR doc that
described neither of them accurately.

1. The snapshot set `ProcessDataFlag.Memory` and surfaced `memoryBytes`,
   which nothing read. The addon serves that flag with a second
   `OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ)` and a
   `GetProcessMemoryInfo` per process (process.cc:47-63), so the flag was
   one wasted handle per process per snapshot.

2. The shared TTL cache gave every pane the same native rows array, but
   each pane still ran `native.map(toProcessRow)` over the whole table,
   rebuilt a `childrenByPpid` Map from scratch, and did two linear scans.
   The `.map()` also handed `getProcessTableIndex` a new array each call,
   defeating the POSIX memo by construction. Both now cache per snapshot
   identity, and the POSIX resolver drops its duplicate descendant walk.

`getProcessTableIndex` / `buildProcessTableIndex` are generic over the row
shape so the Windows rows reuse the existing pass instead of a parallel one.

No behavior change: same rows in, same rows out, same descendant ordering
and same has-children answers.
---
 docs/reference/windows-edr-posture.md         |  64 ++++---
 docs/reference/windows-process-enumeration.md |  15 +-
 .../providers/agent-foreground-process.ts     |  43 ++---
 ...foreground-process-inspection-cost.test.ts | 156 ++++++++++++++++++
 .../windows-foreground-process-rows.ts        |  71 ++++----
 .../windows/windows-process-table-cim-scan.ts |   2 -
 .../windows/windows-process-table.test.ts     |  23 +--
 src/main/windows/windows-process-table.ts     |  34 ++--
 src/shared/process-table-snapshot.ts          |  65 ++++++--
 9 files changed, 346 insertions(+), 127 deletions(-)
 create mode 100644 src/main/providers/windows-foreground-process-inspection-cost.test.ts

diff --git a/docs/reference/windows-edr-posture.md b/docs/reference/windows-edr-posture.md
index d44aaf33e38..06eb2d5ff9b 100644
--- a/docs/reference/windows-edr-posture.md
+++ b/docs/reference/windows-edr-posture.md
@@ -72,12 +72,20 @@ behavioural engine can be expected to score it low.
 
 ### Every process gets a handle, on a timer
 
-`src/main/windows/windows-process-table.ts` takes a Toolhelp32 snapshot under one
-of two flag sets. Identity (`None | CreationTime`) answers pid/ppid/name from the
-snapshot alone and opens nothing; the detailed set adds `CommandLine`, which
-costs one `OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION)` per process. `Memory`
-is retired — it took a second handle carrying `PROCESS_VM_READ` and never read
-through it.
+`src/main/windows/windows-process-table.ts` takes a Toolhelp32 snapshot under
+**one** flag set, `CommandLine | CreationTime`, shared by every caller. pid, ppid
+and name come out of the snapshot itself and open nothing. `CommandLine` is what
+opens a handle: the addon calls `GetProcessCommandLine` per process, which opens
+`PROCESS_QUERY_INFORMATION | PROCESS_VM_READ` and walks the PEB with three
+`ReadProcessMemory` calls (`src/process_commandline.cc:32,41-47` in the vendored
+`@vscode/windows-process-tree` 0.8.0 source that `config/patches/` patches).
+
+`Memory` is retired as of this change, and that is a real reduction: it made
+`GetProcessMemoryUsage` open a **second** `PROCESS_QUERY_INFORMATION |
+PROCESS_VM_READ` handle per process for a `GetProcessMemoryInfo` call whose
+result no caller read (`src/process.cc:47-63`). Dropping it halves the handles
+opened per snapshot. It does not remove the remote memory read, because the
+command line still performs one.
 
 It exists because seven independent readers used to fork `powershell.exe` for a
 `Get-CimInstance Win32_Process` scan. That cost, measured: a PowerShell
@@ -90,23 +98,41 @@ panes multiplied it (#15036). The native snapshot answers the same question in
 See
 [`windows-process-enumeration.md`](./windows-process-enumeration.md).
 
-Asking for fewer fields is cheaper, and since the split the module does: one
-cache per flag set, so teardown identity and the session owner probe open no
-handle at all (6.3 ms p50) while only the callers that read a command line pay
-for one (12.3 ms p50, at 492 processes). Each cache still single-flights within
-itself, and one gate serializes the native reads because the vendored wrapper
-coalesces the flags of two overlapping calls.
+Asking for fewer fields is cheaper, and the module now asks for the smallest set
+that still answers every caller. There is **no** per-flag-set cache split: one
+TTL-cached snapshot serves everyone, deliberately, because a split would restore
+the per-pane fan-out the cache exists to remove — a 32-wide teardown has to
+collapse into one scan. So the cheap identity-only read is not something any
+caller can select; every read pays for `CommandLine`. An earlier revision of this
+file described a two-cache design with 6.3 ms / 12.3 ms p50 figures at 492
+processes. That design is not in the tree and those numbers describe no code
+path here; the figures that do apply are the module's own, in
+[`windows-process-enumeration.md`](./windows-process-enumeration.md).
 
 **How an EDR reads it:** a cross-process handle plus a remote memory read against
 every process on the box, repeating on a cadence, is the read half of the
 telemetry that credential dumping and process injection produce. MDE surfaced it
-as "suspicious memory activity". The memory read is gone: the command line now
-comes from the kernel, through `NtQueryInformationProcess`'s
-`ProcessCommandLineInformation` class, which needs only
-`PROCESS_QUERY_LIMITED_INFORMATION`. `ReadProcessMemory` is absent from the
-compiled addon, asserted against the binary's import table because the published
-prebuild loads fine and emits byte-identical strings. What is left to declare to
-administrators is the per-process handle itself.
+as "suspicious memory activity".
+
+**That signal is still present.** An earlier revision of this file claimed the
+command line "now comes from the kernel" through `NtQueryInformationProcess`'s
+`ProcessCommandLineInformation` class, needing only
+`PROCESS_QUERY_LIMITED_INFORMATION`, and that `ReadProcessMemory` was absent from
+the compiled addon. None of that is true of the code we ship.
+`process_commandline.cc` calls `NtQueryInformationProcess` with
+`ProcessBasicInformation` only — to locate the PEB — and then issues three
+`ReadProcessMemory` calls against a `PROCESS_VM_READ` handle to read the PEB, the
+`RTL_USER_PROCESS_PARAMETERS`, and the command-line buffer. Nothing asserts an
+import table, and no such assertion would pass.
+
+What this change did remove is the `Memory` flag's second handle and its
+`GetProcessMemoryInfo` call, so the per-process handle count per snapshot halves.
+What remains to declare to administrators is unchanged in kind: one
+`PROCESS_QUERY_INFORMATION | PROCESS_VM_READ` handle and a PEB read against every
+process on the box, at the shared snapshot's cadence. Moving to
+`ProcessCommandLineInformation` (Windows 8.1+, `PROCESS_QUERY_LIMITED_INFORMATION`
+only) would genuinely retire the remote read, but it is an addon patch nobody has
+written; treat it as unclaimed work, not as shipped.
 
 ### Encoded, policy-bypassing PowerShell
 
diff --git a/docs/reference/windows-process-enumeration.md b/docs/reference/windows-process-enumeration.md
index ef1faf5237c..87ac2a97fb1 100644
--- a/docs/reference/windows-process-enumeration.md
+++ b/docs/reference/windows-process-enumeration.md
@@ -40,6 +40,15 @@ Measured on Windows 11 with 1050 processes (p50 / p95):
 | + memory + command line          | 30.6 ms | 33.7 ms |
 | `Get-CimInstance` via PowerShell | 706 ms  | 723 ms  |
 
+Those are the module's published figures. The flag set this module actually
+requests is `CommandLine | CreationTime` — **not** `Memory`, which cost a second
+`OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ)` plus
+`GetProcessMemoryInfo` per process (`src/process.cc:47-63`) for a value nothing
+read. Dropping it halves the handles a snapshot opens. The remaining set sits
+between the two rows above and has not been measured separately; on a real
+Windows host, `Get-Counter '\Process(Orca)\Handle Count'` sampled across a
+snapshot cadence is the check.
+
 Those CIM numbers are from a 1050-process host. The scan scales with process
 count: on a 1486-process Windows SSH host it measured **1.36 s** and produced
 **4.8 MiB** of JSON, against the fallback's 3 s and 8 MiB limits. Both limits
@@ -220,11 +229,13 @@ ownership, and CPU accounting in the memory collector — still reads it through
 its own query. Those callers are not migrated.
 
 Committed private bytes have no equivalent either, and the one memory value the
-snapshot does carry is unusable for the sizes Orca now sees: `process.cc` stores
+snapshot _can_ carry is unusable for the sizes Orca now sees: `process.cc` stores
 `pmc.WorkingSetSize` into a `DWORD`, so anything above 4 GB wraps. That is the
 second reason `windows-process-resource-collector.ts` still runs its own
 `Get-CimInstance` sweep — it needs `PageFileUsage` (commit) and the CPU-time
-counters in the same pass. Migrating it to the native table would cost both.
+counters in the same pass. Migrating it to the native table would cost both, and
+it is why this module no longer sets the `Memory` flag at all: the field had no
+reader, and asking for it opened a handle per process on every snapshot.
 
 Start time is a proxy for identity, not identity. The durable answer for the
 process trees Orca itself spawns is an inherited handle: a job object names the
diff --git a/src/main/providers/agent-foreground-process.ts b/src/main/providers/agent-foreground-process.ts
index d244e0100dc..2000d35261c 100644
--- a/src/main/providers/agent-foreground-process.ts
+++ b/src/main/providers/agent-foreground-process.ts
@@ -1,7 +1,9 @@
 import { recognizeAgentProcessFromCommandLine } from '../../shared/agent-process-recognition'
 import { resolveOuterWrapperForegroundProcess } from '../../shared/foreground-wrapper-agent'
 import {
+  collectDescendantsFromIndex,
   getFreshProcessTableSnapshot,
+  getProcessTableIndex,
   getProcessTableSnapshot,
   type ProcessTableRow
 } from '../../shared/process-table-snapshot'
@@ -43,29 +45,6 @@ type ShellForegroundConfirmationOptions = {
     | Promise<ReadonlySet<number> | null>
 }
 
-function collectDescendants<Row extends { pid: number; ppid: number }>(
-  rows: Row[],
-  rootPid: number
-): (Row & { depth: number })[] {
-  const childrenByParent = new Map<number, Row[]>()
-  for (const row of rows) {
-    const children = childrenByParent.get(row.ppid) ?? []
-    children.push(row)
-    childrenByParent.set(row.ppid, children)
-  }
-
-  const descendants: (Row & { depth: number })[] = []
-  const stack = (childrenByParent.get(rootPid) ?? []).map((row) => ({ row, depth: 1 }))
-  while (stack.length > 0) {
-    const { row, depth } = stack.pop()!
-    descendants.push({ ...row, depth })
-    for (const child of childrenByParent.get(row.pid) ?? []) {
-      stack.push({ row: child, depth: depth + 1 })
-    }
-  }
-  return descendants
-}
-
 function commandExecutable(command: string): string {
   const trimmed = command.trim().replace(/^[-]/, '')
   if (trimmed.startsWith('"') || trimmed.startsWith("'")) {
@@ -97,12 +76,12 @@ export async function confirmShellForegroundProcess(
     }
   }
   try {
-    const rows = await getFreshProcessTableSnapshot()
-    if (!rows.some((row) => row.pid === shellPid)) {
+    const index = getProcessTableIndex(await getFreshProcessTableSnapshot())
+    const root = index.byPid.get(shellPid)
+    if (!root) {
       return false
     }
-    const root = rows.find((row) => row.pid === shellPid)!
-    const tree = [{ ...root, depth: 0 }, ...collectDescendants(rows, shellPid)]
+    const tree = [{ ...root, depth: 0 }, ...collectDescendantsFromIndex(index, shellPid)]
     const spawnedShellBasename = executableBasename(spawnedShellProcess)
     const foregroundShell = tree
       .filter(
@@ -172,7 +151,7 @@ export async function resolveAgentForegroundProcessWithAvailability(
     const rows = options.fresh
       ? await getFreshProcessTableSnapshot()
       : await getProcessTableSnapshot()
-    if (options.fresh && !rows.some((row) => row.pid === shellPid)) {
+    if (options.fresh && !getProcessTableIndex(rows).byPid.has(shellPid)) {
       return { available: false, processName: fallbackProcess }
     }
     return {
@@ -186,11 +165,13 @@ export async function resolveAgentForegroundProcessWithAvailability(
 }
 
 export function resolveAgentForegroundProcessFromPs(
-  rows: ProcessTableRow[],
+  rows: readonly ProcessTableRow[],
   shellPid: number
 ): string | null {
-  const shellRow = rows.find((row) => row.pid === shellPid)
-  const candidates = collectDescendants(rows, shellPid)
+  // Memoized per snapshot identity, so the caller's own index build is reused.
+  const index = getProcessTableIndex(rows)
+  const shellRow = index.byPid.get(shellPid)
+  const candidates = collectDescendantsFromIndex(index, shellPid)
   // Why: `+` in `ps stat` marks the process holding the terminal foreground.
   // The root shell can hold it after Ctrl-Z, so use the whole PTY tree as the
   // foreground gate; otherwise a stopped agent child still masquerades as live.
diff --git a/src/main/providers/windows-foreground-process-inspection-cost.test.ts b/src/main/providers/windows-foreground-process-inspection-cost.test.ts
new file mode 100644
index 00000000000..f08d1b690bb
--- /dev/null
+++ b/src/main/providers/windows-foreground-process-inspection-cost.test.ts
@@ -0,0 +1,156 @@
+// Regression guard on the per-inspection cost of Windows agent foreground
+// inspection — the Windows analogue of the POSIX index memo (#6288).
+//
+// The shared TTL cache already collapses N panes into one Toolhelp32 snapshot
+// (windows-agent-foreground-process-scan-volume.test.ts). What it never
+// collapsed is the work each pane does ON that snapshot: a full
+// `native.map(toProcessRow)` projection, a `childrenByPpid` Map rebuilt from
+// scratch, and two linear scans. This file counts that work at a realistic
+// table size and pane count, and pins the flag set the snapshot asks for.
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+import { __setWindowsProcessTreeLoaderForTests } from '../windows/windows-process-table'
+import {
+  queryWindowsPaneProcessInventory,
+  resetWindowsProcessRowsSnapshotForTests
+} from './windows-foreground-process-rows'
+
+// 1050 processes is the host measured in windows-process-enumeration.md; 11
+// panes is the fan-out the shared snapshot exists to serve.
+const TABLE_SIZE = 1050
+const PANE_COUNT = 11
+
+const SELF_ROW = { pid: process.pid, ppid: 0, name: 'vitest.exe', commandLine: 'vitest' }
+
+const shellPid = (pane: number): number => 10_000 + pane * 10
+const agentPid = (pane: number): number => shellPid(pane) + 1
+/** A row every pane can look up, so distinct results == distinct projections. */
+const PROBE_PID = 900_000 + TABLE_SIZE - 1
+
+/** One shell + one agent child per pane, padded out to a real table size. */
+function buildNativeTable(): { pid: number; ppid: number; name: string; commandLine: string }[] {
+  const rows = [SELF_ROW]
+  for (let pane = 0; pane < PANE_COUNT; pane += 1) {
+    rows.push({ pid: shellPid(pane), ppid: 4, name: 'cmd.exe', commandLine: 'cmd.exe' })
+    rows.push({
+      pid: agentPid(pane),
+      ppid: shellPid(pane),
+      name: 'node.exe',
+      commandLine: 'node C:/Users/dev/AppData/codex/bin/codex.js'
+    })
+  }
+  for (let filler = rows.length; filler < TABLE_SIZE; filler += 1) {
+    rows.push({ pid: 900_000 + filler, ppid: 4, name: 'svchost.exe', commandLine: 'svchost.exe' })
+  }
+  return rows
+}
+
+const NATIVE_TABLE = buildNativeTable()
+
+/**
+ * Count `Map.prototype.set` calls — the primitive both the old per-call
+ * `childrenByPpid` rebuild and the shared index build are made of. Patched for
+ * one awaited region and restored in `finally`, so nothing else observes it.
+ */
+async function countMapInsertions(run: () => Promise<void>): Promise<number> {
+  const original = Map.prototype.set
+  let insertions = 0
+  Map.prototype.set = function patched(this: Map<unknown, unknown>, key: unknown, value: unknown) {
+    insertions += 1
+    return original.call(this, key, value)
+  } as typeof Map.prototype.set
+  try {
+    await run()
+  } finally {
+    Map.prototype.set = original
+  }
+  return insertions
+}
+
+describe('windows foreground inspection cost per pane', () => {
+  const getAllProcesses = vi.fn()
+  let platform: PropertyDescriptor | undefined
+  let flagsSeen: number[] = []
+
+  beforeEach(() => {
+    flagsSeen = []
+    getAllProcesses.mockReset()
+    getAllProcesses.mockImplementation((cb: (rows: unknown) => void, flags: number) => {
+      flagsSeen.push(flags)
+      cb(NATIVE_TABLE)
+    })
+    platform = Object.getOwnPropertyDescriptor(process, 'platform')
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    __setWindowsProcessTreeLoaderForTests(() => ({
+      ProcessDataFlag: { None: 0, Memory: 1, CommandLine: 2, CreationTime: 4 },
+      getAllProcesses
+    }))
+    resetWindowsProcessRowsSnapshotForTests()
+    vi.useFakeTimers({ toFake: ['Date'] })
+    vi.setSystemTime(0)
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+    __setWindowsProcessTreeLoaderForTests()
+    if (platform) {
+      Object.defineProperty(process, 'platform', platform)
+    }
+  })
+
+  async function sweepPanes(): Promise<(number | undefined)[]> {
+    const resolved: (number | undefined)[] = []
+    for (let pane = 0; pane < PANE_COUNT; pane += 1) {
+      const inventory = await queryWindowsPaneProcessInventory(shellPid(pane), {
+        anchorPid: agentPid(pane)
+      })
+      expect(inventory?.candidates).toHaveLength(1)
+      resolved.push(inventory?.candidates[0]?.pid)
+    }
+    return resolved
+  }
+
+  it('never sets the Memory flag on the snapshot', async () => {
+    await queryWindowsPaneProcessInventory(shellPid(0))
+    expect(flagsSeen).toHaveLength(1)
+    // Memory is bit 0, and it costs the addon a second OpenProcess per process
+    // carrying PROCESS_VM_READ (process.cc `GetProcessMemoryUsage`).
+    expect(flagsSeen[0]! & 1).toBe(0)
+    // CommandLine (2) | CreationTime (4).
+    expect(flagsSeen[0]).toBe(6)
+  })
+
+  it('projects the shared snapshot once for the whole pane fan-out', async () => {
+    const probeRows: unknown[] = []
+    for (let pane = 0; pane < PANE_COUNT; pane += 1) {
+      const inventory = await queryWindowsPaneProcessInventory(shellPid(pane), {
+        anchorPid: PROBE_PID
+      })
+      probeRows.push(inventory?.anchorRow)
+    }
+    expect(probeRows.filter(Boolean)).toHaveLength(PANE_COUNT)
+    // One projection produced every pane's row object. Pre-fix each pane ran
+    // its own `native.map(toProcessRow)` over all 1050 rows, so this set held
+    // PANE_COUNT distinct objects and the sweep allocated PANE_COUNT * 1050.
+    expect(new Set(probeRows).size).toBe(1)
+  })
+
+  it('indexes the shared snapshot once for the whole pane fan-out', async () => {
+    // Prime the TTL cache and the index so the snapshot read is not in the count.
+    await queryWindowsPaneProcessInventory(shellPid(0), { anchorPid: agentPid(0) })
+
+    const insertions = await countMapInsertions(async () => {
+      await sweepPanes()
+    })
+
+    // Pre-fix every pane rebuilt a whole-table `childrenByPpid`, so this was
+    // >= PANE_COUNT * (rows with a distinct ppid). One shared index makes the
+    // whole sweep cost no table-sized Map build at all.
+    expect(insertions).toBeLessThan(TABLE_SIZE)
+  })
+
+  it('resolves the same foreground child for every pane as an unshared scan would', async () => {
+    const resolved = await sweepPanes()
+    expect(resolved).toEqual(Array.from({ length: PANE_COUNT }, (_, pane) => agentPid(pane)))
+  })
+})
diff --git a/src/main/providers/windows-foreground-process-rows.ts b/src/main/providers/windows-foreground-process-rows.ts
index f5a74bd0fe2..5be4734dddc 100644
--- a/src/main/providers/windows-foreground-process-rows.ts
+++ b/src/main/providers/windows-foreground-process-rows.ts
@@ -1,3 +1,7 @@
+import {
+  collectDescendantsFromIndex,
+  getProcessTableIndex
+} from '../../shared/process-table-snapshot'
 import {
   readWindowsProcessTable,
   readWindowsProcessTableFresh,
@@ -25,15 +29,40 @@ function toProcessRow(row: NativeWindowsProcessRow): WindowsProcessRow {
   }
 }
 
+/**
+ * One projection per snapshot identity, mirroring `getProcessTableIndex`.
+ *
+ * The TTL cache already gives every pane the same native rows array; without
+ * this each of them still rebuilt ~1050 row objects, which also handed
+ * `getProcessTableIndex` a new array each time and defeated its memo by
+ * construction. Keyed weakly, so a projection dies with its snapshot. Rows are
+ * shared, never mutated: descendants are copied with their depth, and
+ * `anchorRow` is read-only to every caller.
+ */
+const projectedRows = new WeakMap<readonly NativeWindowsProcessRow[], WindowsProcessRow[]>()
+
+function projectProcessRows(native: readonly NativeWindowsProcessRow[]): WindowsProcessRow[] {
+  const cached = projectedRows.get(native)
+  if (cached) {
+    return cached
+  }
+  const rows = native.map(toProcessRow)
+  projectedRows.set(native, rows)
+  return rows
+}
+
 /**
  * Rows from a scan that starts after this call.
  *
  * PID-identity checks in teardown must not reuse a cached row — it can predate
  * the very recycle it is meant to detect. Rejects when the table is unreadable,
  * so "unavailable" stays distinguishable from "nothing is running".
+ *
+ * `readonly` because the projection is shared with every other reader of the
+ * same snapshot.
  */
-export async function queryWindowsProcessRowsFresh(): Promise<WindowsProcessRow[]> {
-  return (await readWindowsProcessTableFresh()).map(toProcessRow)
+export async function queryWindowsProcessRowsFresh(): Promise<readonly WindowsProcessRow[]> {
+  return projectProcessRows(await readWindowsProcessTableFresh())
 }
 
 export async function queryWindowsProcessDescendants(
@@ -63,21 +92,22 @@ export async function queryWindowsPaneProcessInventory(
       options.fresh === true
         ? await readWindowsProcessTableFresh()
         : await readWindowsProcessTable()
-    rows = native.map(toProcessRow)
+    rows = projectProcessRows(native)
   } catch {
     return null
   }
+  // One index per snapshot, shared by every pane inspecting inside the TTL
+  // window: `byPid` answers both lookups that used to be linear scans, and
+  // `childrenByPpid` replaces a per-call Map rebuild over the whole table.
+  const index = getProcessTableIndex(rows)
   // Why: a snapshot that omitted the PTY root may be stale or permission-
   // filtered; only an observed root can authoritatively have no descendants.
-  if (!rows.some((row) => row.pid === rootPid)) {
+  if (!index.byPid.has(rootPid)) {
     return null
   }
   return {
-    candidates: collectDescendants(rows, rootPid).sort((a, b) => b.depth - a.depth),
-    anchorRow:
-      options.anchorPid !== undefined
-        ? (rows.find((row) => row.pid === options.anchorPid) ?? null)
-        : null
+    candidates: collectDescendantsFromIndex(index, rootPid).sort((a, b) => b.depth - a.depth),
+    anchorRow: options.anchorPid !== undefined ? (index.byPid.get(options.anchorPid) ?? null) : null
   }
 }
 
@@ -85,26 +115,3 @@ export async function queryWindowsPaneProcessInventory(
 export function resetWindowsProcessRowsSnapshotForTests(): void {
   resetWindowsProcessTableForTests()
 }
-
-function collectDescendants<Row extends { pid: number; ppid: number }>(
-  rows: Row[],
-  rootPid: number
-): (Row & { depth: number })[] {
-  const childrenByParent = new Map<number, Row[]>()
-  for (const row of rows) {
-    const children = childrenByParent.get(row.ppid) ?? []
-    children.push(row)
-    childrenByParent.set(row.ppid, children)
-  }
-
-  const descendants: (Row & { depth: number })[] = []
-  const stack = (childrenByParent.get(rootPid) ?? []).map((row) => ({ row, depth: 1 }))
-  while (stack.length > 0) {
-    const { row, depth } = stack.pop()!
-    descendants.push({ ...row, depth })
-    for (const child of childrenByParent.get(row.pid) ?? []) {
-      stack.push({ row: child, depth: depth + 1 })
-    }
-  }
-  return descendants
-}
diff --git a/src/main/windows/windows-process-table-cim-scan.ts b/src/main/windows/windows-process-table-cim-scan.ts
index 898f0c36f33..213f157f63b 100644
--- a/src/main/windows/windows-process-table-cim-scan.ts
+++ b/src/main/windows/windows-process-table-cim-scan.ts
@@ -75,8 +75,6 @@ export function parseWindowsCimProcessRows(stdout: string): WindowsProcessRow[]
       return []
     }
     const name = fieldAsString(row.Name)
-    // memoryBytes stays undefined: Win32_Process reports WorkingSetSize, but no
-    // caller reads it off this table and asking widens an already costly scan.
     return [{ pid, ppid, name, command: fieldAsString(row.CommandLine) || name }]
   })
 }
diff --git a/src/main/windows/windows-process-table.test.ts b/src/main/windows/windows-process-table.test.ts
index 609de009820..360dae4ec14 100644
--- a/src/main/windows/windows-process-table.test.ts
+++ b/src/main/windows/windows-process-table.test.ts
@@ -52,21 +52,24 @@ describe('windows process table', () => {
   it('maps native rows, defaulting an unreadable command line to empty', async () => {
     const rows = await readWindowsProcessTableFresh()
     expect(rows).toEqual([
-      { pid: process.pid, ppid: 0, name: 'vitest.exe', command: '', memoryBytes: undefined },
+      { pid: process.pid, ppid: 0, name: 'vitest.exe', command: '' },
       {
         pid: 100,
         ppid: 4,
         name: 'orca.exe',
         command: '"C:/a b/orca.exe" --x',
-        memoryBytes: 4096,
         creationTimeMs: 1_700_000_000_000
       }
     ])
   })
 
-  it('requests memory and command line together', async () => {
+  it('requests the command line and creation time, never memory', async () => {
     await readWindowsProcessTableFresh()
-    expect(getAllProcesses.mock.calls[0]?.[1]).toBe(7)
+    // CommandLine (2) | CreationTime (4). The Memory bit (1) stays clear: the
+    // addon opens a second PROCESS_VM_READ handle per process to serve it and
+    // nothing reads a working set off this table.
+    expect(getAllProcesses.mock.calls[0]?.[1]).toBe(6)
+    expect((getAllProcesses.mock.calls[0]?.[1] as number) & 1).toBe(0)
   })
 
   it('only advertises PID-safe ownership when the native creation-time field exists', () => {
@@ -400,20 +403,19 @@ describe('resolving the native reader', () => {
     })
     const rows = await readWindowsProcessTableFresh()
     expect(rows).toEqual([
-      { pid: process.pid, ppid: 0, name: 'vitest.exe', command: '', memoryBytes: undefined },
+      { pid: process.pid, ppid: 0, name: 'vitest.exe', command: '' },
       {
         pid: 100,
         ppid: 4,
         name: 'orca.exe',
         command: '"C:/a b/orca.exe" --x',
-        memoryBytes: 4096,
         creationTimeMs: 1_700_000_000_000
       }
     ])
     expect(isWindowsProcessTableAvailable()).toBe(true)
   })
 
-  it('asks the addon for memory and command line, as the package path does', async () => {
+  it('asks the addon for the command line but not memory, as the package path does', async () => {
     const addon = addonReturning(NATIVE)
     __setWindowsProcessTreeRequireForTests((specifier: string) => {
       if (specifier === ADDON_SPECIFIER) {
@@ -422,9 +424,10 @@ describe('resolving the native reader', () => {
       throw new Error('MODULE_NOT_FOUND')
     })
     await readWindowsProcessTableFresh()
-    // Memory | CommandLine. A bare snapshot would silently drop the command
-    // line every agent-recognition caller matches on first.
-    expect(addon.getProcessList).toHaveBeenCalledWith(expect.any(Function), 3)
+    // CommandLine only: a bare snapshot would silently drop the command line
+    // every agent-recognition caller matches on first, and the relay addon
+    // exposes no CreationTime bit to add.
+    expect(addon.getProcessList).toHaveBeenCalledWith(expect.any(Function), 2)
   })
 
   it('reaches the CIM scan when neither the package nor the addon is present', async () => {
diff --git a/src/main/windows/windows-process-table.ts b/src/main/windows/windows-process-table.ts
index 9308c64a9f0..42d48f4fc79 100644
--- a/src/main/windows/windows-process-table.ts
+++ b/src/main/windows/windows-process-table.ts
@@ -23,6 +23,10 @@ import { readWindowsProcessRowsWithCim } from './windows-process-table-cim-scan'
  *   pid+ppid+name        15.9 / 17.5 ms
  *   +memory +commandLine 30.6 / 33.7 ms
  *   PowerShell CIM        706 / 723  ms
+ *
+ * Those are the module's published figures for both extra fields together; the
+ * only flag set this module asks for is `CommandLine` (+ `CreationTime`, free),
+ * which sits between the two rows and has not been separately measured.
  */
 
 export type WindowsProcessRow = {
@@ -31,8 +35,6 @@ export type WindowsProcessRow = {
   name: string
   /** Full command line. Empty when the process denied a query handle. */
   command: string
-  /** Working set in bytes, or undefined when not requested/queryable. */
-  memoryBytes?: number
   /** Process creation time in Unix milliseconds, when the native snapshot provides it. */
   creationTimeMs?: number
 }
@@ -41,7 +43,6 @@ type NativeProcessInfo = {
   pid: number
   ppid: number
   name: string
-  memory?: number
   commandLine?: string
   creationTimeMs?: number
 }
@@ -49,7 +50,6 @@ type NativeProcessInfo = {
 type WindowsProcessTreeModule = {
   ProcessDataFlag: {
     None: number
-    Memory: number
     CommandLine: number
     CreationTime?: number
   }
@@ -82,7 +82,10 @@ type WindowsProcessTreeAddon = {
   ) => void
 }
 
-/** Mirrors the package's enum; the addon takes the raw bit field. */
+/**
+ * Mirrors the package's enum; the addon takes the raw bit field. `Memory` (1)
+ * is listed for completeness and is deliberately never set — see `flags` below.
+ */
 const PROCESS_DATA_FLAG = { None: 0, Memory: 1, CommandLine: 2 } as const
 
 /** Staged beside the relay bundle by build-relay; see RELAY_ARTIFACTS. */
@@ -190,16 +193,16 @@ function readNativeRows(): Promise<WindowsProcessRow[]> {
   }
   const readId = ++readSequence
   const readerEpoch = nativeReaderEpoch
-  // Why always both flags: each adds an OpenProcess per process (Memory a
-  // GetProcessMemoryInfo, CommandLine a PEB read), so asking for less would be
-  // cheaper -- 15.9ms p50 versus 30.6ms at 1050 processes. But every read shares
-  // one snapshot so a 32-wide teardown collapses into a single scan, and that
-  // snapshot has to satisfy every caller. Splitting the cache per field set
-  // would restore exactly the fan-out it exists to prevent.
-  const flags =
-    native.ProcessDataFlag.Memory |
-    native.ProcessDataFlag.CommandLine |
-    (native.ProcessDataFlag.CreationTime ?? 0)
+  // Why CommandLine but not Memory: each flag costs one OpenProcess per process
+  // inside the addon (process.cc), and every caller of this table matches on
+  // `command`, while nothing reads a working set off it -- the Resource Manager
+  // runs its own CIM sweep because it needs commit and CPU time in one pass, and
+  // `process.cc` truncates the working set into a DWORD anyway. Dropping Memory
+  // halves the per-snapshot handle count; the remaining flags stay in ONE flag
+  // set because every read shares one snapshot, so a 32-wide teardown collapses
+  // into a single scan. Splitting the cache per field set would restore exactly
+  // the fan-out it exists to prevent.
+  const flags = native.ProcessDataFlag.CommandLine | (native.ProcessDataFlag.CreationTime ?? 0)
   return new Promise((resolve, reject) => {
     // Hoisted so a synchronous throw from getAllProcesses can clear it. An
     // orphaned timer would otherwise fire later and wedge a reader that had
@@ -241,7 +244,6 @@ function readNativeRows(): Promise<WindowsProcessRow[]> {
             ppid: row.ppid,
             name: row.name,
             command: row.commandLine ?? '',
-            memoryBytes: row.memory,
             ...(typeof row.creationTimeMs === 'number'
               ? { creationTimeMs: row.creationTimeMs }
               : {})
diff --git a/src/shared/process-table-snapshot.ts b/src/shared/process-table-snapshot.ts
index 2d65fc3f324..54764767740 100644
--- a/src/shared/process-table-snapshot.ts
+++ b/src/shared/process-table-snapshot.ts
@@ -124,28 +124,36 @@ export type ProcessTableIndexStats = {
   indexLookups: number
 }
 
-export type ProcessTableIndex = {
-  rows: readonly ProcessTableRow[]
-  byPid: ReadonlyMap<number, ProcessTableRow>
-  childrenByPpid: ReadonlyMap<number, readonly ProcessTableRow[]>
+/** The parent/child fields every process-table row shape shares. */
+export type ProcessIdentityRow = { pid: number; ppid: number }
+
+export type ProcessTableIndexOf<Row extends ProcessIdentityRow> = {
+  rows: readonly Row[]
+  byPid: ReadonlyMap<number, Row>
+  childrenByPpid: ReadonlyMap<number, readonly Row[]>
   stats?: ProcessTableIndexStats
 }
 
+export type ProcessTableIndex = ProcessTableIndexOf<ProcessTableRow>
+
 /**
  * Build the correlation indexes in one linear pass over a capture. Only the
  * indexes a resolver actually reads are materialized: group indexes would cost
  * two more maps plus a per-row array allocation on every capture, and foreground
  * membership is derived from each row's own `pgid` against the root's `tpgid`.
+ *
+ * Generic over the row shape so the Windows snapshot (`pid`/`ppid`/`name`/
+ * `command`) shares this pass rather than carrying a parallel one.
  */
-export function buildProcessTableIndex(
-  rows: readonly ProcessTableRow[],
+export function buildProcessTableIndex<Row extends ProcessIdentityRow>(
+  rows: readonly Row[],
   stats?: ProcessTableIndexStats
-): ProcessTableIndex {
+): ProcessTableIndexOf<Row> {
   if (stats) {
     stats.indexBuilds += 1
   }
-  const byPid = new Map<number, ProcessTableRow>()
-  const childrenByPpid = new Map<number, ProcessTableRow[]>()
+  const byPid = new Map<number, Row>()
+  const childrenByPpid = new Map<number, Row[]>()
   for (const row of rows) {
     if (stats) {
       stats.rowVisits += 1
@@ -161,6 +169,29 @@ export function buildProcessTableIndex(
   return { rows, byPid, childrenByPpid, stats }
 }
 
+/**
+ * Depth-first descendants of `rootPid`, deepest-last, off a prebuilt index.
+ *
+ * Each row is copied with its depth, so callers may not mutate the index's rows
+ * through the result. Ordering matches a per-call `childrenByPpid` walk exactly:
+ * children keep capture order and the stack pops last-pushed first.
+ */
+export function collectDescendantsFromIndex<Row extends ProcessIdentityRow>(
+  index: ProcessTableIndexOf<Row>,
+  rootPid: number
+): (Row & { depth: number })[] {
+  const descendants: (Row & { depth: number })[] = []
+  const stack = (index.childrenByPpid.get(rootPid) ?? []).map((row) => ({ row, depth: 1 }))
+  while (stack.length > 0) {
+    const { row, depth } = stack.pop()!
+    descendants.push({ ...row, depth })
+    for (const child of index.childrenByPpid.get(row.pid) ?? []) {
+      stack.push({ row: child, depth: depth + 1 })
+    }
+  }
+  return descendants
+}
+
 /**
  * Rank a descendant row as a foreground candidate: a `+` (foreground process
  * group) row always outranks a background one, then the deepest wins.
@@ -169,9 +200,9 @@ export function scoreForegroundCandidateRow(row: ProcessTableRow & { depth: numb
   return (row.stat.includes('+') ? 10_000 : 0) + row.depth
 }
 
-export function lookupProcessTableIndex<T>(
-  index: ProcessTableIndex,
-  lookup: (index: ProcessTableIndex) => T,
+export function lookupProcessTableIndex<Row extends ProcessIdentityRow, T>(
+  index: ProcessTableIndexOf<Row>,
+  lookup: (index: ProcessTableIndexOf<Row>) => T,
   stats = index.stats
 ): T {
   if (stats) {
@@ -180,7 +211,9 @@ export function lookupProcessTableIndex<T>(
   return lookup(index)
 }
 
-const processTableIndexes = new WeakMap<readonly ProcessTableRow[], ProcessTableIndex>()
+// Keyed by array identity, which also pins the row shape the entry was built
+// for, so the one cast below cannot hand a caller another row type's index.
+const processTableIndexes = new WeakMap<readonly ProcessIdentityRow[], unknown>()
 
 /**
  * Memoize one index per snapshot identity, so the panes that share a TTL-cached
@@ -195,8 +228,10 @@ const processTableIndexes = new WeakMap<readonly ProcessTableRow[], ProcessTable
  * measurement without building anything. Measured callers keep calling
  * `buildProcessTableIndex(rows, stats)` directly.
  */
-export function getProcessTableIndex(rows: readonly ProcessTableRow[]): ProcessTableIndex {
-  const cached = processTableIndexes.get(rows)
+export function getProcessTableIndex<Row extends ProcessIdentityRow>(
+  rows: readonly Row[]
+): ProcessTableIndexOf<Row> {
+  const cached = processTableIndexes.get(rows) as ProcessTableIndexOf<Row> | undefined
   if (cached) {
     return cached
   }

From d22d5c80a69ed7341074c388128dadabd43f5b26 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:08:27 -0700
Subject: [PATCH 70/92] fix(terminal): stop a hidden pane's cursor blink
 deterministically (#18152)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A retained hidden pane keeps a live WebglRenderer, and the only thing that
stops its 600 ms cursor-blink timer is a real DOM blur event. Today that
arrives incidentally from display:none/visibility:hidden; under a hide mode
that keeps focus (opacity:0 without inert) it never fires and the pane blinks
— redrawing its whole cursor row per toggle — until the 5-minute idle timeout.

Park terminal.options.cursorBlink on suspend and restore the parked value on
resume, so the property holds regardless of which CSS hid the pane. Settings
writes land on the parked value while hidden, so a mid-hide settings change
cannot re-arm the timer behind the surface, and a user who disabled blink
never gets it back.
---
 .../terminal-pane/terminal-appearance.ts      |   5 +-
 .../pane-cursor-blink-suspension.test.ts      | 300 ++++++++++++++++++
 .../pane-cursor-blink-suspension.ts           |  57 ++++
 .../pane-manager-pane-creation.ts             |   5 +
 .../pane-manager/pane-rendering-control.ts    |  13 +
 .../pane-webgl-context-recovery.test.ts       |   1 +
 .../pane-webgl-refresh-lifecycle.test.ts      |   1 +
 .../terminal-webgl-hidden-retention.test.ts   |   3 +-
 8 files changed, 383 insertions(+), 2 deletions(-)
 create mode 100644 src/renderer/src/lib/pane-manager/pane-cursor-blink-suspension.test.ts
 create mode 100644 src/renderer/src/lib/pane-manager/pane-cursor-blink-suspension.ts

diff --git a/src/renderer/src/components/terminal-pane/terminal-appearance.ts b/src/renderer/src/components/terminal-pane/terminal-appearance.ts
index bb61a50fbbc..a5aa36568ca 100644
--- a/src/renderer/src/components/terminal-pane/terminal-appearance.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-appearance.ts
@@ -21,6 +21,7 @@ import {
   resolveTerminalCursorInactiveStyle
 } from '@/lib/pane-manager/pane-terminal-options'
 import { getFitOverrideForPty } from '@/lib/pane-manager/mobile-fit-overrides'
+import { setTerminalCursorBlinkOption } from '@/lib/pane-manager/pane-cursor-blink-suspension'
 import type { PtyTransport } from './pty-transport'
 import type { EffectiveMacOptionAsAlt } from '@/lib/keyboard-layout/detect-option-as-alt'
 import { HEX_COLOR_RE } from '../../../../shared/color-validation'
@@ -180,7 +181,9 @@ export function applyTerminalAppearance(
     const cursorStyle = settings.terminalCursorStyle ?? 'block'
     pane.terminal.options.cursorStyle = cursorStyle
     pane.terminal.options.cursorInactiveStyle = resolveTerminalCursorInactiveStyle(cursorStyle)
-    pane.terminal.options.cursorBlink = settings.terminalCursorBlink
+    // Why not a direct write: a suspended (hidden) pane parks the value instead, so a
+    // settings change mid-hide cannot re-arm its blink timer behind the hidden surface.
+    setTerminalCursorBlinkOption(pane.terminal, settings.terminalCursorBlink)
     const paneSize = paneFontSizes.get(pane.id)
     const metricOptions = {
       fontSize: paneSize ?? settings.terminalFontSize,
diff --git a/src/renderer/src/lib/pane-manager/pane-cursor-blink-suspension.test.ts b/src/renderer/src/lib/pane-manager/pane-cursor-blink-suspension.test.ts
new file mode 100644
index 00000000000..66dc3fc872b
--- /dev/null
+++ b/src/renderer/src/lib/pane-manager/pane-cursor-blink-suspension.test.ts
@@ -0,0 +1,300 @@
+// @vitest-environment happy-dom
+
+import { Terminal } from '@xterm/xterm'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { ManagedPaneInternal } from './pane-manager-types'
+import { resumePaneRendering, suspendPaneRendering } from './pane-rendering-control'
+import { resetHiddenWebglRetentionForTest } from './terminal-webgl-hidden-retention'
+import { isTerminalCursorBlinkSuspended } from './pane-cursor-blink-suspension'
+
+/**
+ * Invariant (`terminal-render.hidden-pane-idle-cost`): a hidden pane must not drive
+ * the cursor-blink redraw loop, and revealing it must put back exactly the blink
+ * state it had — never a frozen, missing, or unexpectedly blinking cursor.
+ *
+ * Oracle: the cursor xterm actually renders. The DOM renderer stamps
+ * `xterm-cursor` / `xterm-cursor-blink` on the cursor cell (DomRendererRowFactory),
+ * so these assertions read rendered output, not the option value — an assertion on
+ * `options.cursorBlink` alone would pass with the bug present.
+ *
+ * The hidden-side cost is proved separately by the redraw-count test at the bottom:
+ * the DOM renderer already gates its blink class on per-terminal focus, whereas the
+ * WebGL renderer's blink timer arms on `document.hasFocus()`, which is what leaks.
+ */
+
+const COLS = 80
+const ROWS = 24
+
+type TestPane = ManagedPaneInternal & { host: HTMLElement }
+
+function nextFrame(): Promise<void> {
+  return new Promise((resolve) => requestAnimationFrame(() => resolve()))
+}
+
+async function flushRender(): Promise<void> {
+  await nextFrame()
+  await nextFrame()
+  await new Promise((resolve) => setTimeout(resolve, 0))
+}
+
+function write(terminal: Terminal, data: string): Promise<void> {
+  return new Promise((resolve) => terminal.write(data, resolve))
+}
+
+function createTestPane(options: { cursorBlink?: boolean; webglAddon?: boolean } = {}): TestPane {
+  const host = document.createElement('div')
+  document.body.appendChild(host)
+  const terminal = new Terminal({
+    cols: COLS,
+    rows: ROWS,
+    cursorBlink: options.cursorBlink ?? true,
+    allowProposedApi: true
+  })
+  terminal.open(host)
+  terminal.focus()
+  const pane = {
+    id: 1,
+    terminal,
+    host,
+    container: host,
+    xtermContainer: host,
+    // Off so resume's reattachWebglIfNeeded leaves the DOM renderer in place;
+    // the rendered-cursor oracle needs a renderer that paints in happy-dom.
+    gpuRenderingEnabled: false,
+    terminalGpuAcceleration: 'off',
+    webglAddon: options.webglAddon ? ({ dispose: vi.fn() } as never) : null,
+    webglAttachmentDeferred: false,
+    webglDisabledAfterContextLoss: false,
+    webglAttachFailedSinceRecovery: false,
+    hasComplexScriptOutput: false,
+    pendingWebglRefreshRafId: null,
+    pendingObservedFitRafId: null
+  } as unknown as TestPane
+  return pane
+}
+
+/** The cursor cell as the renderer painted it, or null when no cursor is rendered. */
+function renderedCursor(pane: TestPane): HTMLElement | null {
+  return pane.host.querySelector('.xterm-cursor')
+}
+
+function rendersBlinkingCursor(pane: TestPane): boolean {
+  return renderedCursor(pane)?.classList.contains('xterm-cursor-blink') === true
+}
+
+function renderedText(pane: TestPane): string {
+  return pane.host.querySelector('.xterm-rows')?.textContent ?? ''
+}
+
+/** Reveal = the manager's resume pass, then the terminal regains real DOM focus. */
+async function reveal(panes: TestPane[], owner?: object): Promise<void> {
+  resumePaneRendering(panes, owner)
+  for (const pane of panes) {
+    pane.terminal.focus()
+  }
+}
+
+describe('hidden-pane cursor blink suspension', () => {
+  beforeEach(() => {
+    resetHiddenWebglRetentionForTest()
+    // happy-dom has no canvas text metrics; xterm measures glyphs on open().
+    vi.spyOn(HTMLCanvasElement.prototype, 'getContext').mockReturnValue({
+      measureText: () => ({ width: 10 })
+    } as unknown as CanvasRenderingContext2D)
+  })
+
+  afterEach(() => {
+    vi.restoreAllMocks()
+    document.body.replaceChildren()
+  })
+
+  it('renders a blinking cursor again one frame after reveal', async () => {
+    const pane = createTestPane()
+    await write(pane.terminal, 'ready$ ')
+    await flushRender()
+    expect(rendersBlinkingCursor(pane)).toBe(true)
+
+    suspendPaneRendering([pane])
+    expect(isTerminalCursorBlinkSuspended(pane.terminal)).toBe(true)
+
+    await reveal([pane])
+    await nextFrame()
+    expect(renderedCursor(pane), 'reveal must not leave the pane without a cursor').not.toBeNull()
+    expect(rendersBlinkingCursor(pane)).toBe(true)
+    expect(isTerminalCursorBlinkSuspended(pane.terminal)).toBe(false)
+  })
+
+  it('keeps a user who disabled cursor blink un-blinking across hide and reveal', async () => {
+    const pane = createTestPane({ cursorBlink: false })
+    await write(pane.terminal, 'ready$ ')
+    await flushRender()
+    expect(rendersBlinkingCursor(pane)).toBe(false)
+
+    suspendPaneRendering([pane])
+    await reveal([pane])
+    await flushRender()
+
+    expect(renderedCursor(pane), 'a steady cursor must still be rendered').not.toBeNull()
+    expect(rendersBlinkingCursor(pane), 'blink must stay off for this user').toBe(false)
+  })
+
+  it('does not drop output written while hidden, and echoes typing after reveal', async () => {
+    const pane = createTestPane()
+    await write(pane.terminal, 'before-hide\r\n')
+    await flushRender()
+
+    suspendPaneRendering([pane])
+    await write(pane.terminal, 'while-hidden\r\n')
+
+    await reveal([pane])
+    await flushRender()
+    expect(renderedText(pane)).toContain('before-hide')
+    expect(renderedText(pane)).toContain('while-hidden')
+
+    // Real key input through xterm's textarea must still route to the PTY.
+    const typed: string[] = []
+    pane.terminal.onData((data) => typed.push(data))
+    const keydown = new KeyboardEvent('keydown', {
+      key: 'x',
+      code: 'KeyX',
+      bubbles: true,
+      cancelable: true
+    })
+    Object.defineProperty(keydown, 'keyCode', { value: 88 })
+    pane.terminal.textarea?.dispatchEvent(keydown)
+    expect(typed, 'keystrokes must still reach the PTY after a hide/reveal').toEqual(['x'])
+
+    await write(pane.terminal, 'x')
+    await flushRender()
+    expect(renderedText(pane)).toContain('x')
+    expect(rendersBlinkingCursor(pane)).toBe(true)
+  })
+
+  it('restores blink on the retained-hidden-WebGL path, which skips dispose', async () => {
+    const owner = {}
+    const pane = createTestPane({ webglAddon: true })
+    const addon = pane.webglAddon
+    await write(pane.terminal, 'ready$ ')
+    await flushRender()
+
+    suspendPaneRendering([pane], { owner, livePanes: () => [pane] })
+    // The retention branch returns before disposeWebgl — this is the path where
+    // nothing else could have stopped the blink timer.
+    expect(addon?.dispose).not.toHaveBeenCalled()
+    expect(isTerminalCursorBlinkSuspended(pane.terminal)).toBe(true)
+
+    await reveal([pane], owner)
+    await nextFrame()
+    expect(rendersBlinkingCursor(pane)).toBe(true)
+  })
+
+  it('restores every pane of a split, including one revealed a second time', async () => {
+    const owner = {}
+    const left = createTestPane()
+    const right = createTestPane()
+    const panes = [left, right]
+    await write(left.terminal, 'left$ ')
+    await write(right.terminal, 'right$ ')
+    await flushRender()
+
+    for (let cycle = 0; cycle < 2; cycle++) {
+      suspendPaneRendering(panes, { owner, livePanes: () => panes })
+      resumePaneRendering(panes, owner)
+      // One at a time: the DOM renderer only paints a blinking cursor in the pane
+      // that currently holds real focus, so focus each split half in turn.
+      for (const [name, pane] of [
+        ['left', left],
+        ['right', right]
+      ] as const) {
+        pane.terminal.focus()
+        await nextFrame()
+        expect(renderedCursor(pane), `${name} cursor, cycle ${cycle}`).not.toBeNull()
+        expect(rendersBlinkingCursor(pane), `${name} blink, cycle ${cycle}`).toBe(true)
+      }
+    }
+    expect(renderedText(left)).toContain('left$')
+    expect(renderedText(right)).toContain('right$')
+  })
+
+  it('does not re-arm a hidden pane when the blink setting changes mid-hide', async () => {
+    const pane = createTestPane({ cursorBlink: false })
+    suspendPaneRendering([pane])
+
+    // What applyTerminalAppearance does when the user flips the setting.
+    const { setTerminalCursorBlinkOption } = await import('./pane-cursor-blink-suspension')
+    setTerminalCursorBlinkOption(pane.terminal, true)
+    expect(
+      pane.terminal.options.cursorBlink,
+      'a hidden pane must not start blinking behind the surface'
+    ).toBe(false)
+
+    await reveal([pane])
+    await nextFrame()
+    expect(rendersBlinkingCursor(pane), 'the new setting applies on reveal').toBe(true)
+  })
+
+  it('resume is a no-op for a pane that was never suspended', async () => {
+    const pane = createTestPane()
+    await flushRender()
+    await reveal([pane])
+    await nextFrame()
+    expect(rendersBlinkingCursor(pane)).toBe(true)
+  })
+})
+
+/**
+ * Deterministic cost gate for the hidden side.
+ *
+ * Model, taken from `@xterm/addon-webgl@0.20` sources: `CursorBlinkStateManager`
+ * runs a 600 ms interval whenever `ICoreBrowserService.isFocused` is true — a
+ * DOCUMENT-level fact — and every toggle calls `WebglRenderer._requestRedrawCursor()`,
+ * which redraws one full row (`_updateModel` loops `x < cols` per row).
+ * `WebglRenderer._updateCursorBlink()` decides whether the manager exists from
+ * `decPrivateModes.cursorBlink ?? terminal.options.cursorBlink`, which is read from
+ * the real Terminal below.
+ */
+const BLINK_INTERVAL_MS = 600
+
+function blinkCellsRedrawnPerWindow(terminal: Terminal, windowMs: number): number {
+  const decPrivateBlink = (
+    terminal as unknown as {
+      _core: { coreService: { decPrivateModes: { cursorBlink?: boolean } } }
+    }
+  )._core.coreService.decPrivateModes.cursorBlink
+  const blinking = decPrivateBlink ?? terminal.options.cursorBlink === true
+  if (!blinking) {
+    return 0
+  }
+  return Math.floor(windowMs / BLINK_INTERVAL_MS) * terminal.cols
+}
+
+describe('hidden-pane cursor blink redraw cost', () => {
+  beforeEach(() => {
+    resetHiddenWebglRetentionForTest()
+    vi.spyOn(HTMLCanvasElement.prototype, 'getContext').mockReturnValue({
+      measureText: () => ({ width: 10 })
+    } as unknown as CanvasRenderingContext2D)
+  })
+
+  afterEach(() => {
+    vi.restoreAllMocks()
+    document.body.replaceChildren()
+  })
+
+  it('drops retained hidden panes to zero blink redraws and restores them on reveal', async () => {
+    const owner = {}
+    // The retention cap: MAX_RETAINED_HIDDEN_WEBGL_CONTEXTS.
+    const panes = Array.from({ length: 6 }, () => createTestPane({ webglAddon: true }))
+    const windowMs = 30_000
+    const cells = () =>
+      panes.reduce((sum, pane) => sum + blinkCellsRedrawnPerWindow(pane.terminal, windowMs), 0)
+
+    expect(cells()).toBe(6 * 50 * COLS)
+
+    suspendPaneRendering(panes, { owner, livePanes: () => panes })
+    expect(cells(), 'hidden panes must cost nothing while the window is visible').toBe(0)
+
+    await reveal(panes, owner)
+    expect(cells()).toBe(6 * 50 * COLS)
+  })
+})
diff --git a/src/renderer/src/lib/pane-manager/pane-cursor-blink-suspension.ts b/src/renderer/src/lib/pane-manager/pane-cursor-blink-suspension.ts
new file mode 100644
index 00000000000..13f90af696c
--- /dev/null
+++ b/src/renderer/src/lib/pane-manager/pane-cursor-blink-suspension.ts
@@ -0,0 +1,57 @@
+import type { Terminal } from '@xterm/xterm'
+
+/**
+ * Park `cursorBlink` while a pane is hidden.
+ *
+ * Why: a retained hidden pane (`terminal-webgl-hidden-retention.ts`) keeps a live
+ * WebglRenderer, and the only thing that stops its 600 ms blink timer is
+ * `WebglRenderer.handleBlur()` — reached only from a real DOM blur event. Today
+ * that arrives incidentally, because `display:none`/`visibility:hidden` move focus;
+ * under `opacity:0` without `inert` (TerminalOverlaySlot's startup probe) it never
+ * fires, `Terminal.blur()` is a no-op on a textarea that is not the active element,
+ * and the pane blinks — redrawing its whole cursor row through
+ * `WebglRenderer._updateModel` — until the 5-minute idle timeout.
+ *
+ * `cursorBlink` is the public option that tears the timer down deterministically
+ * (`RenderService.handleOptionsChanged` -> `WebglRenderer._updateCursorBlink`), so
+ * "a hidden pane does not blink" stops depending on which CSS hid it.
+ *
+ * Resume restores the parked value rather than the settings value, so a pane that
+ * was not blinking before the hide never comes back blinking.
+ */
+const parkedCursorBlink = new WeakMap<Terminal, boolean>()
+
+export function suspendTerminalCursorBlink(terminal: Terminal): void {
+  if (parkedCursorBlink.has(terminal)) {
+    return
+  }
+  parkedCursorBlink.set(terminal, terminal.options.cursorBlink === true)
+  terminal.options.cursorBlink = false
+}
+
+/** Restores the pre-suspend blink state. No-op on a terminal that was never suspended. */
+export function resumeTerminalCursorBlink(terminal: Terminal): void {
+  if (!parkedCursorBlink.has(terminal)) {
+    return
+  }
+  const restored = parkedCursorBlink.get(terminal) === true
+  parkedCursorBlink.delete(terminal)
+  terminal.options.cursorBlink = restored
+}
+
+/**
+ * Settings-driven blink writes land on the parked value while a pane is suspended;
+ * writing the option directly would re-arm the blink timer behind a hidden surface
+ * until the next reveal.
+ */
+export function setTerminalCursorBlinkOption(terminal: Terminal, enabled: boolean): void {
+  if (parkedCursorBlink.has(terminal)) {
+    parkedCursorBlink.set(terminal, enabled)
+    return
+  }
+  terminal.options.cursorBlink = enabled
+}
+
+export function isTerminalCursorBlinkSuspended(terminal: Terminal): boolean {
+  return parkedCursorBlink.has(terminal)
+}
diff --git a/src/renderer/src/lib/pane-manager/pane-manager-pane-creation.ts b/src/renderer/src/lib/pane-manager/pane-manager-pane-creation.ts
index 11efdff06c0..483f49a1f55 100644
--- a/src/renderer/src/lib/pane-manager/pane-manager-pane-creation.ts
+++ b/src/renderer/src/lib/pane-manager/pane-manager-pane-creation.ts
@@ -2,6 +2,7 @@ import type { ManagedPane, ManagedPaneInternal, PaneManagerOptions } from './pan
 import type { PaneManagerHost } from './pane-manager-host'
 import { applyPaneOpacity } from './pane-divider'
 import { createPaneDOM, openTerminal } from './pane-lifecycle'
+import { suspendTerminalCursorBlink } from './pane-cursor-blink-suspension'
 import { shouldFollowMouseFocus } from './focus-follows-mouse'
 import { toPublicPane } from './pane-public-view'
 
@@ -53,6 +54,10 @@ export function createManagedPaneInternal(
     }
   )
   pane.webglAttachmentDeferred = host.isRenderingSuspended()
+  if (host.isRenderingSuspended()) {
+    // A pane that mounts behind a hidden surface never sees suspendPaneRendering().
+    suspendTerminalCursorBlink(pane.terminal)
+  }
   host.panes.set(id, pane)
   host.identities.register(id, leafId)
   return pane
diff --git a/src/renderer/src/lib/pane-manager/pane-rendering-control.ts b/src/renderer/src/lib/pane-manager/pane-rendering-control.ts
index 6709a7a1f98..219f17f4be6 100644
--- a/src/renderer/src/lib/pane-manager/pane-rendering-control.ts
+++ b/src/renderer/src/lib/pane-manager/pane-rendering-control.ts
@@ -1,4 +1,8 @@
 import type { ManagedPaneInternal } from './pane-manager-types'
+import {
+  resumeTerminalCursorBlink,
+  suspendTerminalCursorBlink
+} from './pane-cursor-blink-suspension'
 import { safeFit } from './pane-tree-ops'
 import {
   attachWebgl,
@@ -66,6 +70,12 @@ export function suspendPaneRendering(
   for (const pane of suspended) {
     pane.webglAttachmentDeferred = true
     pane.terminal.blur()
+    // Why here, above the retention return: the retention branch keeps a live
+    // WebglRenderer, whose blink timer only stops on a real DOM blur event. blur()
+    // above is a no-op unless that pane's textarea held focus, so under a hide mode
+    // that keeps focus the pane would blink — redrawing its cursor row — until the
+    // 5-minute idle timeout. Parking the option makes it unconditional.
+    suspendTerminalCursorBlink(pane.terminal)
   }
   // Keep recent hidden worktrees on live WebGL so switch-back never presents
   // DOM-fallback frames; evicted/over-cap owners fall back to dispose.
@@ -86,6 +96,9 @@ export function resumePaneRendering(
   }
   for (const pane of panes) {
     clearTerminalWebglAttachBackoff(pane)
+    // Before the attach below so a freshly constructed WebglRenderer already samples
+    // the restored option and blinks on its first frame.
+    resumeTerminalCursorBlink(pane.terminal)
     const rebuildDeferred = pane.webglRebuildDeferred === true
     pane.webglAttachmentDeferred = false
     // Reveal can retry before the next resume, so both paths share the bounded loss policy.
diff --git a/src/renderer/src/lib/pane-manager/pane-webgl-context-recovery.test.ts b/src/renderer/src/lib/pane-manager/pane-webgl-context-recovery.test.ts
index 2897c1627de..fef2c9f5d1e 100644
--- a/src/renderer/src/lib/pane-manager/pane-webgl-context-recovery.test.ts
+++ b/src/renderer/src/lib/pane-manager/pane-webgl-context-recovery.test.ts
@@ -14,6 +14,7 @@ function createPane(options: { loadAddon?: () => void } = {}): ManagedPaneIntern
     leafId,
     stablePaneId: leafId,
     terminal: {
+      options: { cursorBlink: true },
       cols: 80,
       rows: 24,
       refresh: vi.fn(),
diff --git a/src/renderer/src/lib/pane-manager/pane-webgl-refresh-lifecycle.test.ts b/src/renderer/src/lib/pane-manager/pane-webgl-refresh-lifecycle.test.ts
index d6e30bb57f8..09f2ef98c84 100644
--- a/src/renderer/src/lib/pane-manager/pane-webgl-refresh-lifecycle.test.ts
+++ b/src/renderer/src/lib/pane-manager/pane-webgl-refresh-lifecycle.test.ts
@@ -17,6 +17,7 @@ function createPane(
     leafId,
     stablePaneId: leafId,
     terminal: {
+      options: { cursorBlink: true },
       element: null,
       cols: 80,
       rows: 24,
diff --git a/src/renderer/src/lib/pane-manager/terminal-webgl-hidden-retention.test.ts b/src/renderer/src/lib/pane-manager/terminal-webgl-hidden-retention.test.ts
index e630e88d149..7d6bfdf26c2 100644
--- a/src/renderer/src/lib/pane-manager/terminal-webgl-hidden-retention.test.ts
+++ b/src/renderer/src/lib/pane-manager/terminal-webgl-hidden-retention.test.ts
@@ -10,7 +10,8 @@ import {
 
 function createPane(withAddon = true): ManagedPaneInternal {
   return {
-    terminal: { blur: vi.fn() },
+    // options mirrors the real Terminal: suspend parks cursorBlink here.
+    terminal: { blur: vi.fn(), options: { cursorBlink: true } },
     webglAddon: withAddon
       ? ({ dispose: vi.fn() } as unknown as ManagedPaneInternal['webglAddon'])
       : null,

From b00ec2073133fb4e965e93640988966eccad1d01 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:10:02 -0700
Subject: [PATCH 71/92] perf(startup): stop an unreachable SSH host from gating
 local terminal restore (#18164)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* perf(startup): stop an unreachable SSH host from gating local terminal restore

An asleep or unreachable SSH target held the terminal-restoration gate for the
full 15s reconnect timeout, so no terminal restored — local ones included.
Startup now awaits only the target that owns the active workspace's tabs and
lets the rest connect in the background, folded into the existing deferred path
that reattaches their PTYs on tab focus.

Also splits the renderer's git-environment fence out of the first-window PTY
services barrier: worktree hydration needs shell-PATH generation and the managed
WSL CLI registration, not a daemon PTY spawn or a hook-server bind. Terminal
restoration still fences on the first-window services via
app:prepareTerminalStartupRestoration.

Measured with tests/tools/benchmarks/startup-time-bench.mjs (382 restored tabs,
28k-file profile, medians of 3):
  unreachable SSH host: 17.27s -> 1.34s to renderer-startup-hydration-done
  all-local:             1.98s -> 1.33s

* fix(startup): restore the startup-ordering oracle and keep a connected background SSH target undeferred

app-startup-routing.test.ts pinned the old step names, so the two ordering cases
went vacuous-then-red when the barrier split. Repoint them at the steps that now
carry the same fences: 'git-environment-barrier-await' (shell PATH + managed WSL,
the fence host Git needs) before hydration worktrees, and
'prepare-terminal-startup-restoration' (which awaits firstWindowStartupServicesReady
in main) before terminal reconnect. Both still fail against main's hydration source.

Also: the timed-out-eager rewrite of the deferred list re-added background targets
that had already connected, undoing removeDeferredSshReconnectTarget and sending
fresh panes on a reachable host down the cold-restore path.
---
 .../startup/desktop-startup-ordering.test.ts  |  42 ++++
 .../startup/main-process-ipc-bootstrap.ts     |   7 +
 .../startup/main-process-runtime-launch.ts    |   3 +
 src/preload/api/app-api.ts                    |   3 +
 src/preload/api/app-bridge.ts                 |   2 +
 .../startup-actions-selector.test.ts          |   1 +
 .../src/app-shell/startup-actions-selector.ts |   4 +
 .../app-shell/use-app-startup-hydration.ts    |  30 ++-
 src/renderer/src/app-startup-routing.test.ts  |  25 ++-
 .../active-workspace-ssh-targets.test.ts      | 112 +++++++++
 .../startup/active-workspace-ssh-targets.ts   |  49 ++++
 .../src/startup/ssh-startup-reconnect.ts      |  18 +-
 .../startup-ssh-connection-restore.test.ts    | 208 +++++++++++++++++
 .../startup/startup-ssh-connection-restore.ts |  66 +++++-
 .../src/web/preload-api/web-app-api.ts        |   1 +
 .../startup-bench-state-fixture.mjs           | 193 ++++++++++++++++
 tests/tools/benchmarks/startup-time-bench.mjs | 212 ++++--------------
 17 files changed, 783 insertions(+), 193 deletions(-)
 create mode 100644 src/renderer/src/startup/active-workspace-ssh-targets.test.ts
 create mode 100644 src/renderer/src/startup/active-workspace-ssh-targets.ts
 create mode 100644 src/renderer/src/startup/startup-ssh-connection-restore.test.ts
 create mode 100644 tests/tools/benchmarks/startup-bench-state-fixture.mjs

diff --git a/src/main/startup/desktop-startup-ordering.test.ts b/src/main/startup/desktop-startup-ordering.test.ts
index e432ed383d2..fc381f15714 100644
--- a/src/main/startup/desktop-startup-ordering.test.ts
+++ b/src/main/startup/desktop-startup-ordering.test.ts
@@ -183,6 +183,48 @@ describe('startup ordering', () => {
     )
   })
 
+  it('keeps the git-environment barrier off the PTY startup services', () => {
+    const barrierSource = readFileSync(
+      join(process.cwd(), 'src/main/startup/main-process-ipc-bootstrap.ts'),
+      'utf8'
+    )
+    const launchSource = readFileSync(
+      join(process.cwd(), 'src/main/startup/main-process-runtime-launch.ts'),
+      'utf8'
+    )
+    const gitBarrierStart = barrierSource.indexOf(
+      "ipcMain.handle('app:awaitGitEnvironmentStartupBarrier'"
+    )
+    const gitBarrierEnd = barrierSource.indexOf(
+      "'app:prepareTerminalStartupRestoration'",
+      gitBarrierStart
+    )
+    expect(gitBarrierStart).toBeGreaterThanOrEqual(0)
+    expect(gitBarrierEnd).toBeGreaterThan(gitBarrierStart)
+    const gitBarrier = barrierSource.slice(gitBarrierStart, gitBarrierEnd)
+    // The git environment fence is shell PATH + WSL registration; a daemon PTY provider or a
+    // hook-server bind here puts terminal startup back in front of worktree hydration.
+    expect(gitBarrier).toContain('state.shellPathReady')
+    expect(gitBarrier).toContain('state.managedWslCliStartupBarrierReady')
+    expect(gitBarrier).not.toContain('firstWindowStartupServicesReady')
+    // The published promise must be the same one the terminal startup services wait on.
+    expect(launchSource).toContain('state.shellPathReady = shellPathReady')
+    expect(launchSource.indexOf('state.shellPathReady = shellPathReady')).toBeLessThan(
+      launchSource.indexOf('await launchDesktopMode(')
+    )
+    // Terminal restoration itself must still fence on the first-window services.
+    const restorationStart = barrierSource.indexOf(
+      "ipcMain.handle('app:prepareTerminalStartupRestoration'"
+    )
+    const restorationEnd = barrierSource.indexOf(
+      "'app:recoverLegacyWorkerTerminalsForRendererStartup'",
+      restorationStart
+    )
+    expect(barrierSource.slice(restorationStart, restorationEnd)).toContain(
+      'state.firstWindowStartupServicesReady'
+    )
+  })
+
   it('reconciles retained Codex homes after authoritative daemon inventory', () => {
     const source = readFileSync(
       join(process.cwd(), 'src/main/startup/main-process-pty-startup.ts'),
diff --git a/src/main/startup/main-process-ipc-bootstrap.ts b/src/main/startup/main-process-ipc-bootstrap.ts
index 89be84d2119..918fd844364 100644
--- a/src/main/startup/main-process-ipc-bootstrap.ts
+++ b/src/main/startup/main-process-ipc-bootstrap.ts
@@ -11,6 +11,13 @@ export function registerMainProcessIpcHandlers(): void {
       state.managedWslCliStartupBarrierReady
     ])
   })
+  // Why separate from the first-window barrier: host Git needs the shell-PATH
+  // generation and the managed WSL CLI registration, not a daemon PTY provider
+  // or a hook-server bind. Bundling them made worktree hydration wait on a
+  // terminal service it never calls.
+  ipcMain.handle('app:awaitGitEnvironmentStartupBarrier', async () => {
+    await Promise.all([state.shellPathReady, state.managedWslCliStartupBarrierReady])
+  })
   ipcMain.handle('app:prepareTerminalStartupRestoration', async () => {
     await Promise.all([
       state.firstWindowStartupServicesReady,
diff --git a/src/main/startup/main-process-runtime-launch.ts b/src/main/startup/main-process-runtime-launch.ts
index 7e5f278fdc5..9df28ecea8c 100644
--- a/src/main/startup/main-process-runtime-launch.ts
+++ b/src/main/startup/main-process-runtime-launch.ts
@@ -289,6 +289,9 @@ export async function initializeMainProcessRuntimeLaunch(
   state.serveOptions = serveOptions
   const runtimeRpc = installRuntimeRpc(runtime, serveOptions)
   const shellPathReady = shellPathHydration.whenReady()
+  // Why published: the renderer's git-environment barrier must fence on the same
+  // generation the terminal startup services wait for, not a later re-read.
+  state.shellPathReady = shellPathReady
   let desktopWindow: BrowserWindow | null = null
   if (process.platform === 'win32' && app.isPackaged && !serveOptions) {
     const desktopStartup = startWindowsDesktopBeforeShellPathReady({
diff --git a/src/preload/api/app-api.ts b/src/preload/api/app-api.ts
index 88cb86dc32b..b2d6eed966c 100644
--- a/src/preload/api/app-api.ts
+++ b/src/preload/api/app-api.ts
@@ -38,6 +38,9 @@ export type AppApi = {
   /** Resolves when the daemon PTY provider and hook receiver have either
    *  started or failed open for the first BrowserWindow. */
   awaitFirstWindowStartupServices: () => Promise<void>
+  /** Resolves when host Git can run: shell-PATH generation is published and the
+   *  managed WSL CLI registration has reconciled. Does not wait on PTY services. */
+  awaitGitEnvironmentStartupBarrier: () => Promise<void>
   /** Inventories retained PTYs and restores durable structured ownership before renderer adoption. */
   prepareTerminalStartupRestoration: () => Promise<void>
   /** Reconciles legacy worker authority around persisted terminal reconnect. */
diff --git a/src/preload/api/app-bridge.ts b/src/preload/api/app-bridge.ts
index 22d46cc40d2..2a0d50e9de4 100644
--- a/src/preload/api/app-bridge.ts
+++ b/src/preload/api/app-bridge.ts
@@ -43,6 +43,8 @@ export const appApi = {
   awaitBeforeUnloadCheckpoint: () => awaitBeforeUnloadCheckpoint(),
   awaitFirstWindowStartupServices: (): Promise<void> =>
     ipcRenderer.invoke('app:awaitFirstWindowStartupServices'),
+  awaitGitEnvironmentStartupBarrier: (): Promise<void> =>
+    ipcRenderer.invoke('app:awaitGitEnvironmentStartupBarrier'),
   prepareTerminalStartupRestoration: (): Promise<void> =>
     ipcRenderer.invoke('app:prepareTerminalStartupRestoration'),
   recoverLegacyWorkerTerminalsForRendererStartup: (): Promise<void> =>
diff --git a/src/renderer/src/app-shell/startup-actions-selector.test.ts b/src/renderer/src/app-shell/startup-actions-selector.test.ts
index 1d559eb0dcb..45a1b9cf5df 100644
--- a/src/renderer/src/app-shell/startup-actions-selector.test.ts
+++ b/src/renderer/src/app-shell/startup-actions-selector.test.ts
@@ -30,6 +30,7 @@ function makeActions(): StartupActions {
     reconnectPersistedTerminals: vi.fn(),
     setTerminalStartupRestorationReady: vi.fn(),
     setDeferredSshReconnectTargets: vi.fn(),
+    removeDeferredSshReconnectTarget: vi.fn(),
     setSshConnectionState: vi.fn(),
     hydratePersistedUI: vi.fn(),
     setHydrationSucceeded: vi.fn(),
diff --git a/src/renderer/src/app-shell/startup-actions-selector.ts b/src/renderer/src/app-shell/startup-actions-selector.ts
index c7dca311a03..ac18349909a 100644
--- a/src/renderer/src/app-shell/startup-actions-selector.ts
+++ b/src/renderer/src/app-shell/startup-actions-selector.ts
@@ -22,6 +22,7 @@ export type StartupActions = Pick<
   | 'reconnectPersistedTerminals'
   | 'setTerminalStartupRestorationReady'
   | 'setDeferredSshReconnectTargets'
+  | 'removeDeferredSshReconnectTarget'
   | 'setSshConnectionState'
   | 'hydratePersistedUI'
   | 'setHydrationSucceeded'
@@ -59,6 +60,8 @@ export function selectStartupActions(state: StartupActions): StartupActions {
     cachedStartupActions.setTerminalStartupRestorationReady ===
       state.setTerminalStartupRestorationReady &&
     cachedStartupActions.setDeferredSshReconnectTargets === state.setDeferredSshReconnectTargets &&
+    cachedStartupActions.removeDeferredSshReconnectTarget ===
+      state.removeDeferredSshReconnectTarget &&
     cachedStartupActions.setSshConnectionState === state.setSshConnectionState &&
     cachedStartupActions.hydratePersistedUI === state.hydratePersistedUI &&
     cachedStartupActions.setHydrationSucceeded === state.setHydrationSucceeded &&
@@ -91,6 +94,7 @@ export function selectStartupActions(state: StartupActions): StartupActions {
     reconnectPersistedTerminals: state.reconnectPersistedTerminals,
     setTerminalStartupRestorationReady: state.setTerminalStartupRestorationReady,
     setDeferredSshReconnectTargets: state.setDeferredSshReconnectTargets,
+    removeDeferredSshReconnectTarget: state.removeDeferredSshReconnectTarget,
     setSshConnectionState: state.setSshConnectionState,
     hydratePersistedUI: state.hydratePersistedUI,
     setHydrationSucceeded: state.setHydrationSucceeded,
diff --git a/src/renderer/src/app-shell/use-app-startup-hydration.ts b/src/renderer/src/app-shell/use-app-startup-hydration.ts
index b50ac86705e..91db232081c 100644
--- a/src/renderer/src/app-shell/use-app-startup-hydration.ts
+++ b/src/renderer/src/app-shell/use-app-startup-hydration.ts
@@ -19,6 +19,7 @@ import {
 } from '../startup/startup-diagnostics'
 import { recoverFromDegradedStartup } from '../startup/startup-degraded-recovery'
 import { restoreSshConnectionsForStartup } from '../startup/startup-ssh-connection-restore'
+import { collectActiveWorkspaceSshTargetIds } from '../startup/active-workspace-ssh-targets'
 import { publishTerminalViewAttributesAtAppStart } from '../components/terminal-pane/terminal-appearance'
 import { getSystemPrefersDark } from '../lib/terminal-theme'
 import {
@@ -155,9 +156,12 @@ export function useAppStartupHydration(onOnboardingLoaded: (state: OnboardingSta
               // Why: disconnected SSH repos hydrate from local metadata; only runtime-owned repos use placeholders.
               parseExecutionHostId(getRepoExecutionHostId(repo))?.kind !== 'runtime'
           )
-          // Why: worktree refresh can spawn host Git; wait for main's shell-PATH generation fence first.
-          await timeRendererStartupStep('first-window-services-await', () =>
-            window.api.app.awaitFirstWindowStartupServices()
+          // Why this barrier and not the first-window one: worktree refresh can spawn host Git,
+          // which needs the shell-PATH generation and the managed WSL CLI registration. It never
+          // needs the daemon PTY provider or the hook-server bind, and `prepare-terminal-startup-restoration`
+          // below still fences those before any terminal is restored.
+          await timeRendererStartupStep('git-environment-barrier-await', () =>
+            window.api.app.awaitGitEnvironmentStartupBarrier()
           )
           await timeRendererStartupStep('fetch-hydration-worktrees', () =>
             mapWithConcurrency(hydrationRepos, WORKTREE_REFRESH_CONCURRENCY, (repo) =>
@@ -213,9 +217,14 @@ export function useAppStartupHydration(onOnboardingLoaded: (state: OnboardingSta
             actions.pruneLastVisitedTimestamps()
             actions.seedActiveWorktreeLastVisitedIfMissing()
           })
-          await timeRendererStartupStep('fetch-browser-session-profiles', () =>
+          // Why started here but not awaited: on a remote runtime this is an RPC with a 15s
+          // timeout, and nothing between here and terminal restoration reads the profile list —
+          // awaiting it put that timeout on the terminal-restoration gate. Starting it at the
+          // original point keeps the profiles landing no later than they did before; the action
+          // swallows its own failures, so the `.catch` only marks the timing wrapper handled.
+          void timeRendererStartupStep('fetch-browser-session-profiles', () =>
             actions.fetchBrowserSessionProfiles()
-          )
+          ).catch(() => {})
           const onboardingState = await onboardingPromise
           if (!cancelled) {
             onOnboardingLoadedRef.current(onboardingState)
@@ -228,9 +237,17 @@ export function useAppStartupHydration(onOnboardingLoaded: (state: OnboardingSta
           )
           if (connectionIds.length > 0) {
             try {
+              // Why scoped: an unreachable host used to hold every restored terminal — local ones
+              // included — for the full reconnect timeout. Only the targets whose panes mount as
+              // soon as the gate opens are worth waiting for; the rest reattach on tab focus.
+              const blockingConnectionIds = collectActiveWorkspaceSshTargetIds(
+                useAppStore.getState()
+              )
               await restoreSshConnectionsForStartup({
                 connectionIds,
+                blockingConnectionIds,
                 setDeferredSshReconnectTargets: actions.setDeferredSshReconnectTargets,
+                removeDeferredSshReconnectTarget: actions.removeDeferredSshReconnectTarget,
                 publishSshConnectionState: actions.setSshConnectionState
               })
             } catch (err) {
@@ -240,7 +257,8 @@ export function useAppStartupHydration(onOnboardingLoaded: (state: OnboardingSta
             logRendererStartupDiagnostic('ssh-reconnect-skipped', { connectionIds: 0 })
           }
 
-          // first-window-services-await already fenced worktree hydration; terminal recovery reuses that ready state.
+          // Why no explicit barrier here: prepare-terminal-startup-restoration above already awaited
+          // the first-window services, and main re-awaits them inside this handler anyway.
           await timeRendererStartupStep('recover-legacy-worker-terminals-pre-reconnect', () =>
             window.api.app.recoverLegacyWorkerTerminalsForRendererStartup()
           )
diff --git a/src/renderer/src/app-startup-routing.test.ts b/src/renderer/src/app-startup-routing.test.ts
index 24a9cc75120..d1aad35829a 100644
--- a/src/renderer/src/app-startup-routing.test.ts
+++ b/src/renderer/src/app-startup-routing.test.ts
@@ -68,8 +68,11 @@ describe('renderer startup runtime routing', () => {
     const hydrationWorktreesIndex = source.indexOf(
       "timeRendererStartupStep('fetch-hydration-worktrees'"
     )
-    const servicesIndex = source.indexOf(
-      "timeRendererStartupStep('first-window-services-await'",
+    // Why this barrier: worktree hydration can spawn host Git, so it must sit behind the
+    // shell-PATH + managed-WSL fence. On packaged Windows the window opens before
+    // shellPathReady resolves, so this really is the fence, not a formality.
+    const gitEnvironmentBarrierIndex = source.indexOf(
+      "timeRendererStartupStep('git-environment-barrier-await'",
       sessionIndex
     )
     const fullWorktreesIndex = source.indexOf('await actions.fetchAllWorktrees()')
@@ -89,8 +92,11 @@ describe('renderer startup runtime routing', () => {
     expect(localReposIndex).toBeLessThan(localGroupsIndex)
     expect(localGroupsIndex).toBeLessThan(localFoldersIndex)
     expect(localReposIndex).toBeLessThan(sessionIndex)
-    expect(sessionIndex).toBeLessThan(servicesIndex)
-    expect(servicesIndex).toBeLessThan(hydrationWorktreesIndex)
+    expect(sessionIndex).toBeLessThan(gitEnvironmentBarrierIndex)
+    expect(gitEnvironmentBarrierIndex).toBeLessThan(hydrationWorktreesIndex)
+    expect(source.slice(gitEnvironmentBarrierIndex, hydrationWorktreesIndex)).toContain(
+      'window.api.app.awaitGitEnvironmentStartupBarrier()'
+    )
     const hydrationWorktreeBlock = source.slice(
       hydrationWorktreesIndex,
       source.indexOf('await keybindingsPromise')
@@ -180,7 +186,13 @@ describe('renderer startup runtime routing', () => {
 
   it('waits for first-window startup services before terminal reconnect', () => {
     const source = readSource(STARTUP_HYDRATION_PATH)
-    const servicesIndex = source.indexOf("timeRendererStartupStep('first-window-services-await'")
+    // Why this step: `app:prepareTerminalStartupRestoration` awaits
+    // firstWindowStartupServicesReady + managedWslCliStartupBarrierReady in main before it
+    // does anything else, so it is the renderer-side position of that fence.
+    // `desktop-startup-ordering.test.ts` pins the main-side await itself.
+    const servicesIndex = source.indexOf(
+      "timeRendererStartupStep('prepare-terminal-startup-restoration'"
+    )
     const preReconnectRecoveryIndex = source.indexOf(
       "timeRendererStartupStep('recover-legacy-worker-terminals-pre-reconnect'"
     )
@@ -193,6 +205,9 @@ describe('renderer startup runtime routing', () => {
     )
 
     expect(servicesIndex).toBeGreaterThanOrEqual(0)
+    expect(source.slice(servicesIndex)).toContain(
+      'window.api.app.prepareTerminalStartupRestoration()'
+    )
     expect(preReconnectRecoveryIndex).toBeGreaterThan(servicesIndex)
     expect(capabilityRefreshIndex).toBeGreaterThan(preReconnectRecoveryIndex)
     expect(reconnectIndex).toBeGreaterThan(capabilityRefreshIndex)
diff --git a/src/renderer/src/startup/active-workspace-ssh-targets.test.ts b/src/renderer/src/startup/active-workspace-ssh-targets.test.ts
new file mode 100644
index 00000000000..f36a186b0ac
--- /dev/null
+++ b/src/renderer/src/startup/active-workspace-ssh-targets.test.ts
@@ -0,0 +1,112 @@
+import { describe, expect, it } from 'vitest'
+import { toAppSshPtyId } from '../../../shared/ssh-pty-id'
+import type { TerminalTab } from '../../../shared/terminal-tab-types'
+import { collectActiveWorkspaceSshTargetIds } from './active-workspace-ssh-targets'
+
+function tab(id: string, ptyId: string | null = null): TerminalTab {
+  return {
+    id,
+    ptyId,
+    worktreeId: 'repo-a::/w/a',
+    title: id,
+    customTitle: null,
+    color: null,
+    sortOrder: 0,
+    createdAt: 1
+  } as TerminalTab
+}
+
+const emptyInput = {
+  activeWorktreeId: null as string | null,
+  tabsByWorktree: {} as Record<string, TerminalTab[]>,
+  pendingReconnectPtyIdByTabId: {} as Record<string, string>,
+  terminalLayoutsByTabId: {} as Record<string, { ptyIdsByLeafId?: Record<string, string | null> }>,
+  repos: [] as { id: string; connectionId?: string | null }[]
+}
+
+describe('collectActiveWorkspaceSshTargetIds', () => {
+  it('returns nothing when no workspace is active', () => {
+    expect(collectActiveWorkspaceSshTargetIds(emptyInput)).toEqual([])
+  })
+
+  it('returns nothing for a purely local active workspace', () => {
+    expect(
+      collectActiveWorkspaceSshTargetIds({
+        ...emptyInput,
+        activeWorktreeId: 'repo-a::/w/a',
+        tabsByWorktree: { 'repo-a::/w/a': [tab('t1', 'local-pty-1')] },
+        repos: [{ id: 'repo-a', connectionId: null }]
+      })
+    ).toEqual([])
+  })
+
+  it('names the target from the active workspace repo connection', () => {
+    expect(
+      collectActiveWorkspaceSshTargetIds({
+        ...emptyInput,
+        activeWorktreeId: 'repo-remote::/srv/w',
+        repos: [{ id: 'repo-remote', connectionId: 'ssh-1' }]
+      })
+    ).toEqual(['ssh-1'])
+  })
+
+  it('names the target from a restored PTY id when the repo catalog has no connection', () => {
+    // SSH worktrees are absent from worktreesByRepo at cold start; the PTY id is the durable name.
+    expect(
+      collectActiveWorkspaceSshTargetIds({
+        ...emptyInput,
+        activeWorktreeId: 'repo-a::/w/a',
+        tabsByWorktree: { 'repo-a::/w/a': [tab('t1')] },
+        pendingReconnectPtyIdByTabId: { t1: toAppSshPtyId('ssh-2', 'pty-9') },
+        repos: [{ id: 'repo-a' }]
+      })
+    ).toEqual(['ssh-2'])
+  })
+
+  it('names split-leaf targets on the active workspace', () => {
+    expect(
+      collectActiveWorkspaceSshTargetIds({
+        ...emptyInput,
+        activeWorktreeId: 'repo-a::/w/a',
+        tabsByWorktree: { 'repo-a::/w/a': [tab('t1')] },
+        terminalLayoutsByTabId: {
+          t1: {
+            ptyIdsByLeafId: {
+              leaf1: toAppSshPtyId('ssh-3', 'pty-1'),
+              leaf2: null,
+              leaf3: 'local-pty-2'
+            }
+          }
+        },
+        repos: [{ id: 'repo-a' }]
+      })
+    ).toEqual(['ssh-3'])
+  })
+
+  it('ignores targets that only own an inactive workspace', () => {
+    expect(
+      collectActiveWorkspaceSshTargetIds({
+        ...emptyInput,
+        activeWorktreeId: 'repo-a::/w/a',
+        tabsByWorktree: {
+          'repo-a::/w/a': [tab('t1', 'local-pty-1')],
+          'repo-b::/w/b': [tab('t2', toAppSshPtyId('ssh-other', 'pty-1'))]
+        },
+        repos: [{ id: 'repo-a' }, { id: 'repo-b', connectionId: 'ssh-other' }]
+      })
+    ).toEqual([])
+  })
+
+  it('deduplicates a target named by both the repo and its PTY ids', () => {
+    expect(
+      collectActiveWorkspaceSshTargetIds({
+        ...emptyInput,
+        activeWorktreeId: 'repo-remote::/srv/w',
+        tabsByWorktree: {
+          'repo-remote::/srv/w': [tab('t1', toAppSshPtyId('ssh-1', 'pty-1'))]
+        },
+        repos: [{ id: 'repo-remote', connectionId: 'ssh-1' }]
+      })
+    ).toEqual(['ssh-1'])
+  })
+})
diff --git a/src/renderer/src/startup/active-workspace-ssh-targets.ts b/src/renderer/src/startup/active-workspace-ssh-targets.ts
new file mode 100644
index 00000000000..c7514abf4a1
--- /dev/null
+++ b/src/renderer/src/startup/active-workspace-ssh-targets.ts
@@ -0,0 +1,49 @@
+import { parseAppSshPtyId } from '../../../shared/ssh-pty-id'
+import { getRepoIdFromWorktreeId } from '../../../shared/worktree/id'
+
+type ActiveWorkspaceSshTargetInput = {
+  activeWorktreeId: string | null
+  tabsByWorktree: Readonly<Record<string, readonly { id: string; ptyId?: string | null }[]>>
+  /** Restored tab-level PTY ids, keyed by tab id. */
+  pendingReconnectPtyIdByTabId: Readonly<Record<string, string>>
+  terminalLayoutsByTabId: Readonly<
+    Record<string, { ptyIdsByLeafId?: Readonly<Record<string, string | null>> } | undefined>
+  >
+  repos: readonly { id: string; connectionId?: string | null }[]
+}
+
+/**
+ * SSH targets that own terminals the user sees the moment the startup gate opens: the ones
+ * whose reconnect must still be awaited. Everything else can connect in the background and
+ * reattach on tab focus.
+ *
+ * Derived from the restored PTY ids rather than the repo catalog alone, because SSH worktrees
+ * are absent from `worktreesByRepo` at cold start — the PTY id is the durable name of the
+ * target the pane will reattach.
+ */
+export function collectActiveWorkspaceSshTargetIds(input: ActiveWorkspaceSshTargetInput): string[] {
+  const { activeWorktreeId } = input
+  if (!activeWorktreeId) {
+    return []
+  }
+  const targetIds = new Set<string>()
+  const repoId = getRepoIdFromWorktreeId(activeWorktreeId)
+  const connectionId = input.repos.find((repo) => repo.id === repoId)?.connectionId
+  if (connectionId) {
+    targetIds.add(connectionId)
+  }
+  for (const tab of input.tabsByWorktree[activeWorktreeId] ?? []) {
+    const ptyIds = [
+      tab.ptyId,
+      input.pendingReconnectPtyIdByTabId[tab.id],
+      ...Object.values(input.terminalLayoutsByTabId[tab.id]?.ptyIdsByLeafId ?? {})
+    ]
+    for (const ptyId of ptyIds) {
+      const parsed = ptyId ? parseAppSshPtyId(ptyId) : null
+      if (parsed) {
+        targetIds.add(parsed.connectionId)
+      }
+    }
+  }
+  return [...targetIds]
+}
diff --git a/src/renderer/src/startup/ssh-startup-reconnect.ts b/src/renderer/src/startup/ssh-startup-reconnect.ts
index d312239a878..e31bd963d6f 100644
--- a/src/renderer/src/startup/ssh-startup-reconnect.ts
+++ b/src/renderer/src/startup/ssh-startup-reconnect.ts
@@ -6,7 +6,9 @@ export type SshStartupReconnectResult = {
 
 export async function reconnectSshTargetForRendererStartup(args: {
   targetId: string
-  timeoutMs: number
+  /** Omitted for a connect nobody is waiting on — no timer, so it cannot report
+   *  a timeout the caller has no use for. */
+  timeoutMs?: number
   connect: (targetId: string) => Promise<SshConnectionState | null>
   publishState: (targetId: string, state: SshConnectionState) => void
   onFailure: (targetId: string, error: unknown) => void
@@ -14,10 +16,16 @@ export async function reconnectSshTargetForRendererStartup(args: {
   const { targetId, timeoutMs, connect, publishState, onFailure } = args
   let timeoutId: ReturnType<typeof setTimeout> | null = null
   try {
-    const timeout = new Promise<never>((_resolve, reject) => {
-      timeoutId = setTimeout(() => reject(new Error('SSH reconnect timeout')), timeoutMs)
-    })
-    const state = await Promise.race([connect(targetId), timeout])
+    const connected = connect(targetId)
+    const state =
+      timeoutMs === undefined
+        ? await connected
+        : await Promise.race([
+            connected,
+            new Promise<never>((_resolve, reject) => {
+              timeoutId = setTimeout(() => reject(new Error('SSH reconnect timeout')), timeoutMs)
+            })
+          ])
     // Why: the state-change IPC can trail connect's resolution. Publish the
     // authoritative result before restored terminals inspect renderer state.
     if (state) {
diff --git a/src/renderer/src/startup/startup-ssh-connection-restore.test.ts b/src/renderer/src/startup/startup-ssh-connection-restore.test.ts
new file mode 100644
index 00000000000..3464816d0d8
--- /dev/null
+++ b/src/renderer/src/startup/startup-ssh-connection-restore.test.ts
@@ -0,0 +1,208 @@
+import { afterEach, beforeEach, describe, expect, it, vi, type Mock } from 'vitest'
+import type { SshConnectionState, SshProviderEpoch, SshTarget } from '../../../shared/ssh-types'
+import { restoreSshConnectionsForStartup } from './startup-ssh-connection-restore'
+
+function connectedState(targetId: string): SshConnectionState {
+  return {
+    targetId,
+    status: 'connected',
+    error: null,
+    reconnectAttempt: 0,
+    providerEpoch: 'epoch' as SshProviderEpoch,
+    connectionGeneration: 1,
+    remotePlatform: 'linux'
+  }
+}
+
+function target(id: string, lastRequiredPassphrase = false): SshTarget {
+  return {
+    id,
+    label: id,
+    host: `${id}.example`,
+    port: 22,
+    username: 'orca',
+    lastRequiredPassphrase
+  }
+}
+
+type Harness = {
+  connect: Mock<(targetId: string) => Promise<SshConnectionState | null>>
+  getState: Mock<(targetId: string) => Promise<SshConnectionState | null>>
+  setDeferredSshReconnectTargets: Mock<(targetIds: string[]) => void>
+  removeDeferredSshReconnectTarget: Mock<(targetId: string) => void>
+  publishSshConnectionState: Mock<(targetId: string, state: SshConnectionState) => void>
+}
+
+let harness: Harness
+
+function installWindowApi(targets: SshTarget[]): void {
+  harness = {
+    connect: vi.fn(),
+    getState: vi.fn().mockResolvedValue(null),
+    setDeferredSshReconnectTargets: vi.fn(),
+    removeDeferredSshReconnectTarget: vi.fn(),
+    publishSshConnectionState: vi.fn()
+  }
+  vi.stubGlobal('window', {
+    api: {
+      app: { startupDiagnostic: undefined },
+      ssh: {
+        listTargets: vi.fn().mockResolvedValue(targets),
+        connect: (args: { targetId: string }) => harness.connect(args.targetId),
+        getState: (args: { targetId: string }) => harness.getState(args.targetId)
+      }
+    }
+  })
+}
+
+beforeEach(() => {
+  vi.spyOn(console, 'warn').mockImplementation(() => {})
+})
+
+afterEach(() => {
+  vi.useRealTimers()
+  vi.unstubAllGlobals()
+  vi.restoreAllMocks()
+})
+
+describe('restoreSshConnectionsForStartup', () => {
+  it('does not wait on a target that owns no immediately-mounted pane', async () => {
+    vi.useFakeTimers()
+    installWindowApi([target('ssh-active'), target('ssh-asleep')])
+    // The asleep host never answers — the old code awaited it for the full timeout.
+    harness.connect.mockImplementation((targetId: string) =>
+      targetId === 'ssh-active'
+        ? Promise.resolve(connectedState(targetId))
+        : new Promise<SshConnectionState>(() => {})
+    )
+
+    let settled = false
+    const restore = restoreSshConnectionsForStartup({
+      connectionIds: ['ssh-active', 'ssh-asleep'],
+      blockingConnectionIds: ['ssh-active'],
+      setDeferredSshReconnectTargets: harness.setDeferredSshReconnectTargets,
+      removeDeferredSshReconnectTarget: harness.removeDeferredSshReconnectTarget,
+      publishSshConnectionState: harness.publishSshConnectionState
+    }).then(() => {
+      settled = true
+    })
+
+    await vi.advanceTimersByTimeAsync(0)
+    await restore
+    expect(settled).toBe(true)
+    // Both were dialled; only the active one gated restoration.
+    expect(harness.connect).toHaveBeenCalledWith('ssh-active')
+    expect(harness.connect).toHaveBeenCalledWith('ssh-asleep')
+    expect(harness.publishSshConnectionState).toHaveBeenCalledWith(
+      'ssh-active',
+      connectedState('ssh-active')
+    )
+    // The unreachable host is deferred, so its panes reattach on tab focus.
+    expect(harness.setDeferredSshReconnectTargets).toHaveBeenCalledWith(['ssh-asleep'])
+  })
+
+  it('awaits the target that owns the active workspace', async () => {
+    vi.useFakeTimers()
+    installWindowApi([target('ssh-active')])
+    harness.connect.mockReturnValue(new Promise<SshConnectionState>(() => {}))
+
+    let settled = false
+    const restore = restoreSshConnectionsForStartup({
+      connectionIds: ['ssh-active'],
+      blockingConnectionIds: ['ssh-active'],
+      setDeferredSshReconnectTargets: harness.setDeferredSshReconnectTargets,
+      removeDeferredSshReconnectTarget: harness.removeDeferredSshReconnectTarget,
+      publishSshConnectionState: harness.publishSshConnectionState
+    }).then(() => {
+      settled = true
+    })
+
+    await vi.advanceTimersByTimeAsync(14_000)
+    expect(settled).toBe(false)
+    await vi.advanceTimersByTimeAsync(1_000)
+    await restore
+    expect(settled).toBe(true)
+    expect(harness.setDeferredSshReconnectTargets).toHaveBeenLastCalledWith(['ssh-active'])
+  })
+
+  it('clears the deferred flag once a background target connects', async () => {
+    installWindowApi([target('ssh-bg')])
+    harness.connect.mockResolvedValue(connectedState('ssh-bg'))
+
+    await restoreSshConnectionsForStartup({
+      connectionIds: ['ssh-bg'],
+      blockingConnectionIds: [],
+      setDeferredSshReconnectTargets: harness.setDeferredSshReconnectTargets,
+      removeDeferredSshReconnectTarget: harness.removeDeferredSshReconnectTarget,
+      publishSshConnectionState: harness.publishSshConnectionState
+    })
+    await vi.waitFor(() =>
+      expect(harness.removeDeferredSshReconnectTarget).toHaveBeenCalledWith('ssh-bg')
+    )
+    expect(harness.publishSshConnectionState).toHaveBeenCalledWith(
+      'ssh-bg',
+      connectedState('ssh-bg')
+    )
+  })
+
+  it('does not push a connected background target back into the deferred list', async () => {
+    installWindowApi([target('ssh-active'), target('ssh-bg')])
+    // The active host never answers and times out; the background host connects first.
+    harness.connect.mockImplementation((targetId: string) =>
+      targetId === 'ssh-bg'
+        ? Promise.resolve(connectedState(targetId))
+        : new Promise<SshConnectionState>(() => {})
+    )
+
+    await restoreSshConnectionsForStartup({
+      connectionIds: ['ssh-active', 'ssh-bg'],
+      blockingConnectionIds: ['ssh-active'],
+      setDeferredSshReconnectTargets: harness.setDeferredSshReconnectTargets,
+      removeDeferredSshReconnectTarget: harness.removeDeferredSshReconnectTarget,
+      publishSshConnectionState: harness.publishSshConnectionState
+    })
+
+    expect(harness.removeDeferredSshReconnectTarget).toHaveBeenCalledWith('ssh-bg')
+    // The timed-out rewrite must not resurrect the reachable background target: a deferred
+    // connected target sends fresh panes down the cold-restore path instead of the normal one.
+    expect(harness.setDeferredSshReconnectTargets).toHaveBeenLastCalledWith(['ssh-active'])
+  }, 30_000)
+
+  it('keeps passphrase targets deferred and never dials them', async () => {
+    installWindowApi([target('ssh-key', true), target('ssh-bg')])
+    harness.connect.mockResolvedValue(connectedState('ssh-bg'))
+
+    await restoreSshConnectionsForStartup({
+      connectionIds: ['ssh-key', 'ssh-bg'],
+      blockingConnectionIds: [],
+      setDeferredSshReconnectTargets: harness.setDeferredSshReconnectTargets,
+      removeDeferredSshReconnectTarget: harness.removeDeferredSshReconnectTarget,
+      publishSshConnectionState: harness.publishSshConnectionState
+    })
+
+    expect(harness.connect).not.toHaveBeenCalledWith('ssh-key')
+    expect(harness.setDeferredSshReconnectTargets).toHaveBeenCalledWith(['ssh-key', 'ssh-bg'])
+  })
+
+  it('awaits every target when no blocking set is supplied', async () => {
+    vi.useFakeTimers()
+    installWindowApi([target('ssh-a'), target('ssh-b')])
+    harness.connect.mockReturnValue(new Promise<SshConnectionState>(() => {}))
+
+    let settled = false
+    const restore = restoreSshConnectionsForStartup({
+      connectionIds: ['ssh-a', 'ssh-b'],
+      setDeferredSshReconnectTargets: harness.setDeferredSshReconnectTargets,
+      removeDeferredSshReconnectTarget: harness.removeDeferredSshReconnectTarget,
+      publishSshConnectionState: harness.publishSshConnectionState
+    }).then(() => {
+      settled = true
+    })
+
+    await vi.advanceTimersByTimeAsync(14_000)
+    expect(settled).toBe(false)
+    await vi.advanceTimersByTimeAsync(1_000)
+    await restore
+    expect(harness.setDeferredSshReconnectTargets).toHaveBeenLastCalledWith(['ssh-a', 'ssh-b'])
+  })
+})
diff --git a/src/renderer/src/startup/startup-ssh-connection-restore.ts b/src/renderer/src/startup/startup-ssh-connection-restore.ts
index b3ad1a42d61..35efaed2bfa 100644
--- a/src/renderer/src/startup/startup-ssh-connection-restore.ts
+++ b/src/renderer/src/startup/startup-ssh-connection-restore.ts
@@ -8,13 +8,27 @@ const SSH_RECONNECT_TIMEOUT_MS = 15_000
  * Re-establishes the SSH targets that were live at shutdown before terminal reconnect, so
  * SSH-backed tabs route through pty.attach. Passphrase-protected and timed-out targets are
  * handed back as deferred so their PTYs reattach on tab focus instead of stacking dialogs.
+ *
+ * Only `blockingConnectionIds` are awaited. Every other target connects in the background and
+ * is registered as deferred up front, so an unreachable host cannot hold local terminal
+ * restoration for the reconnect timeout. Background connects keep running in main; the pane's
+ * deferred flow joins the same in-flight `ssh.connect` on tab focus.
  */
 export async function restoreSshConnectionsForStartup(args: {
   connectionIds: string[]
+  /** Targets whose panes mount as soon as the startup gate opens. Omitted = await all. */
+  blockingConnectionIds?: readonly string[]
   setDeferredSshReconnectTargets: (targetIds: string[]) => void
+  removeDeferredSshReconnectTarget: (targetId: string) => void
   publishSshConnectionState: (targetId: string, state: SshConnectionState) => void
 }): Promise<void> {
-  const { connectionIds, setDeferredSshReconnectTargets, publishSshConnectionState } = args
+  const {
+    connectionIds,
+    blockingConnectionIds,
+    setDeferredSshReconnectTargets,
+    removeDeferredSshReconnectTarget,
+    publishSshConnectionState
+  } = args
   const allTargets = await timeRendererStartupStep('ssh-list-targets', () =>
     window.api.ssh.listTargets()
   )
@@ -24,11 +38,42 @@ export async function restoreSshConnectionsForStartup(args: {
     needsPassphrase: targetMap.get(targetId)?.lastRequiredPassphrase ?? false
   }))
 
-  const eagerTargets = targets.filter((t) => !t.needsPassphrase)
-  const deferredTargets = targets.filter((t) => t.needsPassphrase)
+  const passphraseTargetIds = targets.filter((t) => t.needsPassphrase).map((t) => t.targetId)
+  const blocking = blockingConnectionIds ? new Set(blockingConnectionIds) : null
+  const eagerTargets = targets.filter(
+    (t) => !t.needsPassphrase && (blocking === null || blocking.has(t.targetId))
+  )
+  const backgroundTargets = targets.filter(
+    (t) => !t.needsPassphrase && blocking !== null && !blocking.has(t.targetId)
+  )
 
-  if (deferredTargets.length > 0) {
-    setDeferredSshReconnectTargets(deferredTargets.map((t) => t.targetId))
+  const deferredTargetIds = [...passphraseTargetIds, ...backgroundTargets.map((t) => t.targetId)]
+  if (deferredTargetIds.length > 0) {
+    setDeferredSshReconnectTargets(deferredTargetIds)
+  }
+
+  // Why tracked: the timed-out branch below rewrites the whole deferred list, and a
+  // background target that already connected must not be pushed back into it.
+  const connectedBackgroundTargetIds = new Set<string>()
+  // Why fired before the awaited group: a background target that lands before terminal
+  // reconnect reads as an ordinary connected target, exactly as it does today.
+  for (const { targetId } of backgroundTargets) {
+    void reconnectSshTargetForRendererStartup({
+      targetId,
+      connect: (id) => window.api.ssh.connect({ targetId: id }),
+      publishState: (id, state) => {
+        publishSshConnectionState(id, state)
+        if (state.status === 'connected') {
+          // Why: a still-deferred connected target sends fresh panes down the deferred
+          // spawn path instead of the normal one. Clear it as soon as it is reachable.
+          connectedBackgroundTargetIds.add(id)
+          removeDeferredSshReconnectTarget(id)
+        }
+      },
+      onFailure: (id, error) => {
+        console.warn(`SSH background auto-reconnect failed for ${id}:`, error)
+      }
+    })
   }
 
   // Why: treat timed-out eager targets as deferred so their PTYs reattach on tab focus (ssh.connect keeps running in main and likely finishes by then).
@@ -52,10 +97,17 @@ export async function restoreSshConnectionsForStartup(args: {
           }
         })
       ),
-    { eagerTargets: eagerTargets.length, deferredTargets: deferredTargets.length }
+    {
+      eagerTargets: eagerTargets.length,
+      deferredTargets: passphraseTargetIds.length,
+      backgroundTargets: backgroundTargets.length
+    }
   )
   if (timedOutTargets.length > 0) {
-    setDeferredSshReconnectTargets([...deferredTargets.map((t) => t.targetId), ...timedOutTargets])
+    setDeferredSshReconnectTargets([
+      ...deferredTargetIds.filter((id) => !connectedBackgroundTargetIds.has(id)),
+      ...timedOutTargets
+    ])
   }
 
   // Why: older/wrapped providers may return no state from connect; poll main once as a compatibility fallback before terminal restoration.
diff --git a/src/renderer/src/web/preload-api/web-app-api.ts b/src/renderer/src/web/preload-api/web-app-api.ts
index f182b8a7790..28fd9f99176 100644
--- a/src/renderer/src/web/preload-api/web-app-api.ts
+++ b/src/renderer/src/web/preload-api/web-app-api.ts
@@ -33,6 +33,7 @@ export function createWebAppApi(): Partial<PreloadApi> {
       // Staging already wrote through to browser storage, so there is nothing left to join.
       awaitBeforeUnloadCheckpoint: () => Promise.resolve(),
       awaitFirstWindowStartupServices: () => Promise.resolve(),
+      awaitGitEnvironmentStartupBarrier: () => Promise.resolve(),
       prepareTerminalStartupRestoration: () => Promise.resolve(),
       recoverLegacyWorkerTerminalsForRendererStartup: () => Promise.resolve(),
       startupDiagnostic: () => Promise.resolve(),
diff --git a/tests/tools/benchmarks/startup-bench-state-fixture.mjs b/tests/tools/benchmarks/startup-bench-state-fixture.mjs
new file mode 100644
index 00000000000..87f353bcfce
--- /dev/null
+++ b/tests/tools/benchmarks/startup-bench-state-fixture.mjs
@@ -0,0 +1,193 @@
+/**
+ * Persisted-state fixtures for the startup benchmark: the git repos, GitHub
+ * remotes, restored terminal tabs, and unreachable SSH targets that `orca-data.json`
+ * must contain for a run to exercise the corresponding startup path.
+ */
+import { spawnSync } from 'node:child_process'
+import { existsSync, mkdirSync, realpathSync, unlinkSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+function initFixtureGitRepo(repoDir) {
+  mkdirSync(repoDir, { recursive: true })
+  if (!existsSync(join(repoDir, '.git'))) {
+    const init = spawnSync('git', ['init', repoDir], { stdio: 'ignore' })
+    if (init.status !== 0) {
+      throw new Error(`Failed to create git repo fixture at ${repoDir}`)
+    }
+  }
+  return realpathSync(repoDir)
+}
+
+/**
+ * Seed repos whose hydration reaches the `gh` login probe: a GitHub `origin`
+ * remote and no github.user/user.username config (the bench also points
+ * GIT_CONFIG_GLOBAL away from the developer's real config at launch).
+ */
+function buildGithubRepoFixtures(fixtureDir, githubRepos) {
+  const repos = []
+  for (let i = 0; i < githubRepos; i++) {
+    const repoPath = initFixtureGitRepo(join(fixtureDir, `bench-gh-repo-${i}`))
+    const remote = spawnSync(
+      'git',
+      [
+        '-C',
+        repoPath,
+        'remote',
+        'add',
+        'origin',
+        `https://github.com/orca-bench/bench-gh-repo-${i}.git`
+      ],
+      { stdio: 'ignore' }
+    )
+    // Exit 3 (remote exists) is fine on fixture reuse; anything else is not.
+    if (remote.status !== 0 && remote.status !== 3) {
+      throw new Error(`Failed to add GitHub remote to ${repoPath}`)
+    }
+    repos.push({
+      id: `bench-gh-repo-${i}`,
+      path: repoPath,
+      displayName: `Bench GH Repo ${i}`,
+      badgeColor: '#000000',
+      addedAt: 1,
+      externalWorktreeVisibility: 'show'
+    })
+  }
+  return repos
+}
+
+/**
+ * SSH targets on TEST-NET-3 (RFC 5737). The address is guaranteed unroutable,
+ * so the TCP handshake never completes and never gets a reset — the wire
+ * behaviour of a host that is asleep or behind a dropped VPN.
+ */
+function buildUnreachableSshTargets(count) {
+  const targets = []
+  for (let i = 0; i < count; i++) {
+    targets.push({
+      id: `bench-ssh-unreachable-${i}`,
+      label: `Unreachable Host ${i}`,
+      host: `203.0.113.${i + 1}`,
+      port: 22,
+      username: 'orca',
+      source: 'manual',
+      lastRequiredPassphrase: false
+    })
+  }
+  return targets
+}
+
+export function writePersistedStateFixture(
+  fixtureDir,
+  { stateProfile, sessionTabs, githubRepos, sshUnreachableTargets = 0 }
+) {
+  const dataPath = join(fixtureDir, 'orca-data.json')
+  if (stateProfile === 'none' && githubRepos === 0 && sshUnreachableTargets === 0) {
+    try {
+      unlinkSync(dataPath)
+    } catch {
+      // no persisted state fixture
+    }
+    return 0
+  }
+  if (!['none', 'restored-local-tabs'].includes(stateProfile)) {
+    throw new Error(`Unknown state profile: ${stateProfile}`)
+  }
+
+  const githubRepoEntries = buildGithubRepoFixtures(fixtureDir, githubRepos)
+  const sshTargets = buildUnreachableSshTargets(sshUnreachableTargets)
+  if (stateProfile === 'none') {
+    const state = {
+      schemaVersion: 1,
+      ...(sshTargets.length > 0 ? { sshTargets } : {}),
+      repos: githubRepoEntries,
+      settings: {
+        telemetry: {
+          installId: 'startup-bench',
+          optedIn: false,
+          existedBeforeTelemetryRelease: true
+        }
+      }
+    }
+    const json = JSON.stringify(state, null, 2)
+    writeFileSync(dataPath, json, 'utf-8')
+    return Buffer.byteLength(json)
+  }
+
+  const repoPath = initFixtureGitRepo(join(fixtureDir, 'bench-repo'))
+  const repoId = 'bench-repo'
+  const worktreeId = `${repoId}::${repoPath}`
+  const tabCount = Math.max(1, sessionTabs)
+  const tabs = []
+  const terminalLayoutsByTabId = {}
+  const activeTabIdByWorktree = {}
+  for (let i = 0; i < tabCount; i++) {
+    const tabId = `bench-tab-${String(i).padStart(5, '0')}`
+    const ptyId = `bench-pty-${String(i).padStart(5, '0')}`
+    tabs.push({
+      id: tabId,
+      ptyId,
+      worktreeId,
+      title: `Terminal ${i + 1}`,
+      customTitle: null,
+      color: null,
+      sortOrder: i,
+      createdAt: 1
+    })
+    terminalLayoutsByTabId[tabId] = {
+      root: null,
+      activeLeafId: null,
+      expandedLeafId: null
+    }
+  }
+  activeTabIdByWorktree[worktreeId] = tabs[0]?.id ?? null
+  const state = {
+    schemaVersion: 1,
+    repos: [
+      {
+        id: repoId,
+        path: repoPath,
+        displayName: 'Bench Repo',
+        badgeColor: '#000000',
+        addedAt: 1,
+        externalWorktreeVisibility: 'show'
+      },
+      ...githubRepoEntries
+    ],
+    settings: {
+      telemetry: {
+        installId: 'startup-bench',
+        optedIn: false,
+        existedBeforeTelemetryRelease: true
+      }
+    },
+    ui: {
+      lastActiveRepoId: repoId,
+      lastActiveWorktreeId: worktreeId
+    },
+    workspaceSession: {
+      activeRepoId: repoId,
+      activeWorktreeId: worktreeId,
+      activeTabId: tabs[0]?.id ?? null,
+      tabsByWorktree: {
+        [worktreeId]: tabs
+      },
+      terminalLayoutsByTabId,
+      activeTabIdByWorktree,
+      activeWorktreeIdsOnShutdown: [worktreeId],
+      defaultTerminalTabsAppliedByWorktreeId: {
+        [worktreeId]: true
+      },
+      // Why on the session and not just the target list: startup reconnect only
+      // dials targets that were connected at shutdown.
+      ...(sshTargets.length > 0
+        ? { activeConnectionIdsAtShutdown: sshTargets.map((target) => target.id) }
+        : {})
+    }
+  }
+  if (sshTargets.length > 0) {
+    state.sshTargets = sshTargets
+  }
+  const json = JSON.stringify(state, null, 2)
+  writeFileSync(dataPath, json, 'utf-8')
+  return Buffer.byteLength(json)
+}
diff --git a/tests/tools/benchmarks/startup-time-bench.mjs b/tests/tools/benchmarks/startup-time-bench.mjs
index 29363432c7a..e39f2d1d133 100644
--- a/tests/tools/benchmarks/startup-time-bench.mjs
+++ b/tests/tools/benchmarks/startup-time-bench.mjs
@@ -12,6 +12,7 @@
  *   node tests/tools/benchmarks/startup-time-bench.mjs --label baseline
  *     [--iterations 5] [--files 28000] [--fixture-dir <path>]
  *     [--state-profile none|restored-local-tabs] [--session-tabs 200]
+ *     [--ssh-unreachable-targets 1]
  *     [--github-repos 3] [--gh-hang-ms 30000]
  *     [--wait-for-event renderer-startup-hydration-done]
  *     [--exe <path-to-packaged-Orca>] [--timeout-ms 240000]
@@ -27,20 +28,14 @@
  * Results: tests/tools/benchmarks/results/startup-<label>-<timestamp>.json
  */
 import { spawn, spawnSync } from 'node:child_process'
-import {
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  realpathSync,
-  unlinkSync,
-  writeFileSync
-} from 'node:fs'
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
 import { createRequire } from 'node:module'
 import os from 'node:os'
 import { delimiter, join, resolve } from 'node:path'
+import { writePersistedStateFixture } from './startup-bench-state-fixture.mjs'
 
 const scriptDir = import.meta.dirname
-const repoRoot = resolve(scriptDir, '..', '..')
+const repoRoot = resolve(scriptDir, '..', '..', '..')
 const require = createRequire(import.meta.url)
 
 function parseArgs(argv) {
@@ -53,6 +48,11 @@ function parseArgs(argv) {
     timeoutMs: 240000,
     stateProfile: 'none',
     sessionTabs: 0,
+    // Seeds N SSH targets pointed at TEST-NET-3 (RFC 5737, guaranteed
+    // unroutable) and lists them as live-at-shutdown, so startup reconnect
+    // dials a host that never answers. Reproduces "one asleep remote machine
+    // delays every local terminal".
+    sshUnreachableTargets: 0,
     githubRepos: 0,
     ghHangMs: 0,
     waitForEvent: 'did-finish-load',
@@ -88,6 +88,9 @@ function parseArgs(argv) {
       case '--session-tabs':
         args.sessionTabs = Number(next())
         break
+      case '--ssh-unreachable-targets':
+        args.sshUnreachableTargets = Number(next())
+        break
       case '--github-repos':
         args.githubRepos = Number(next())
         break
@@ -113,7 +116,7 @@ function parseArgs(argv) {
  * tiny. Layout mirrors Chromium cache dirs plus a few Orca-owned dirs.
  */
 function ensureFixture(fixtureDir, options) {
-  const { fileCount, stateProfile, sessionTabs, githubRepos } = options
+  const { fileCount, stateProfile, sessionTabs, githubRepos, sshUnreachableTargets } = options
   const manifestPath = join(fixtureDir, 'bench-fixture-manifest.json')
   if (existsSync(manifestPath)) {
     try {
@@ -122,7 +125,8 @@ function ensureFixture(fixtureDir, options) {
         manifest.files === fileCount &&
         manifest.stateProfile === stateProfile &&
         manifest.sessionTabs === sessionTabs &&
-        (manifest.githubRepos ?? 0) === githubRepos
+        (manifest.githubRepos ?? 0) === githubRepos &&
+        (manifest.sshUnreachableTargets ?? 0) === sshUnreachableTargets
       ) {
         console.log(`[fixture] reusing ${fixtureDir} (${fileCount} files, state=${stateProfile})`)
         return
@@ -157,7 +161,8 @@ function ensureFixture(fixtureDir, options) {
   const persistedStateBytes = writePersistedStateFixture(fixtureDir, {
     stateProfile,
     sessionTabs,
-    githubRepos
+    githubRepos,
+    sshUnreachableTargets
   })
   writeFileSync(
     manifestPath,
@@ -166,6 +171,7 @@ function ensureFixture(fixtureDir, options) {
       stateProfile,
       sessionTabs,
       githubRepos,
+      sshUnreachableTargets,
       persistedStateBytes,
       createdAt: Date.now()
     })
@@ -173,157 +179,6 @@ function ensureFixture(fixtureDir, options) {
   console.log(`[fixture] done in ${((Date.now() - started) / 1000).toFixed(1)}s`)
 }
 
-function initFixtureGitRepo(repoDir) {
-  mkdirSync(repoDir, { recursive: true })
-  if (!existsSync(join(repoDir, '.git'))) {
-    const init = spawnSync('git', ['init', repoDir], { stdio: 'ignore' })
-    if (init.status !== 0) {
-      throw new Error(`Failed to create git repo fixture at ${repoDir}`)
-    }
-  }
-  return realpathSync(repoDir)
-}
-
-/**
- * Seed repos whose hydration reaches the `gh` login probe: a GitHub `origin`
- * remote and no github.user/user.username config (the bench also points
- * GIT_CONFIG_GLOBAL away from the developer's real config at launch).
- */
-function buildGithubRepoFixtures(fixtureDir, githubRepos) {
-  const repos = []
-  for (let i = 0; i < githubRepos; i++) {
-    const repoPath = initFixtureGitRepo(join(fixtureDir, `bench-gh-repo-${i}`))
-    const remote = spawnSync(
-      'git',
-      [
-        '-C',
-        repoPath,
-        'remote',
-        'add',
-        'origin',
-        `https://github.com/orca-bench/bench-gh-repo-${i}.git`
-      ],
-      { stdio: 'ignore' }
-    )
-    // Exit 3 (remote exists) is fine on fixture reuse; anything else is not.
-    if (remote.status !== 0 && remote.status !== 3) {
-      throw new Error(`Failed to add GitHub remote to ${repoPath}`)
-    }
-    repos.push({
-      id: `bench-gh-repo-${i}`,
-      path: repoPath,
-      displayName: `Bench GH Repo ${i}`,
-      badgeColor: '#000000',
-      addedAt: 1,
-      externalWorktreeVisibility: 'show'
-    })
-  }
-  return repos
-}
-
-function writePersistedStateFixture(fixtureDir, { stateProfile, sessionTabs, githubRepos }) {
-  const dataPath = join(fixtureDir, 'orca-data.json')
-  if (stateProfile === 'none' && githubRepos === 0) {
-    try {
-      unlinkSync(dataPath)
-    } catch {
-      // no persisted state fixture
-    }
-    return 0
-  }
-  if (!['none', 'restored-local-tabs'].includes(stateProfile)) {
-    throw new Error(`Unknown state profile: ${stateProfile}`)
-  }
-
-  const githubRepoEntries = buildGithubRepoFixtures(fixtureDir, githubRepos)
-  if (stateProfile === 'none') {
-    const state = {
-      schemaVersion: 1,
-      repos: githubRepoEntries,
-      settings: {
-        telemetry: {
-          installId: 'startup-bench',
-          optedIn: false,
-          existedBeforeTelemetryRelease: true
-        }
-      }
-    }
-    const json = JSON.stringify(state, null, 2)
-    writeFileSync(dataPath, json, 'utf-8')
-    return Buffer.byteLength(json)
-  }
-
-  const repoPath = initFixtureGitRepo(join(fixtureDir, 'bench-repo'))
-  const repoId = 'bench-repo'
-  const worktreeId = `${repoId}::${repoPath}`
-  const tabCount = Math.max(1, sessionTabs)
-  const tabs = []
-  const terminalLayoutsByTabId = {}
-  const activeTabIdByWorktree = {}
-  for (let i = 0; i < tabCount; i++) {
-    const tabId = `bench-tab-${String(i).padStart(5, '0')}`
-    const ptyId = `bench-pty-${String(i).padStart(5, '0')}`
-    tabs.push({
-      id: tabId,
-      ptyId,
-      worktreeId,
-      title: `Terminal ${i + 1}`,
-      customTitle: null,
-      color: null,
-      sortOrder: i,
-      createdAt: 1
-    })
-    terminalLayoutsByTabId[tabId] = {
-      root: null,
-      activeLeafId: null,
-      expandedLeafId: null
-    }
-  }
-  activeTabIdByWorktree[worktreeId] = tabs[0]?.id ?? null
-  const state = {
-    schemaVersion: 1,
-    repos: [
-      {
-        id: repoId,
-        path: repoPath,
-        displayName: 'Bench Repo',
-        badgeColor: '#000000',
-        addedAt: 1,
-        externalWorktreeVisibility: 'show'
-      },
-      ...githubRepoEntries
-    ],
-    settings: {
-      telemetry: {
-        installId: 'startup-bench',
-        optedIn: false,
-        existedBeforeTelemetryRelease: true
-      }
-    },
-    ui: {
-      lastActiveRepoId: repoId,
-      lastActiveWorktreeId: worktreeId
-    },
-    workspaceSession: {
-      activeRepoId: repoId,
-      activeWorktreeId: worktreeId,
-      activeTabId: tabs[0]?.id ?? null,
-      tabsByWorktree: {
-        [worktreeId]: tabs
-      },
-      terminalLayoutsByTabId,
-      activeTabIdByWorktree,
-      activeWorktreeIdsOnShutdown: [worktreeId],
-      defaultTerminalTabsAppliedByWorktreeId: {
-        [worktreeId]: true
-      }
-    }
-  }
-  const json = JSON.stringify(state, null, 2)
-  writeFileSync(dataPath, json, 'utf-8')
-  return Buffer.byteLength(json)
-}
-
 /**
  * Fake `gh` that hangs like a blackholed api.github.com. The hang lives in a
  * child process (ping/sleep) that inherits the probe's stdio pipes, so even
@@ -385,12 +240,19 @@ function buildLaunchEnvironment({ fixtureDir, githubRepos, ghShimDir }) {
 }
 
 function killProcessTree(proc) {
-  if (proc.exitCode !== null || proc.signalCode !== null) {
+  if (process.platform === 'win32') {
+    if (proc.exitCode === null && proc.signalCode === null) {
+      spawnSync('taskkill', ['/PID', String(proc.pid), '/T', '/F'], { stdio: 'ignore' })
+    }
     return
   }
-  if (process.platform === 'win32') {
-    spawnSync('taskkill', ['/PID', String(proc.pid), '/T', '/F'], { stdio: 'ignore' })
-  } else {
+  // Why the whole group and not just the child: Electron's helper processes
+  // inherit the stderr pipe, so killing only the launcher leaves them holding it
+  // open — the harness then never sees EOF and never exits after its last run.
+  // Requires the `detached: true` spawn below.
+  try {
+    process.kill(-proc.pid, 'SIGKILL')
+  } catch {
     try {
       proc.kill('SIGKILL')
     } catch {
@@ -432,7 +294,10 @@ function runIteration({ exe, timeoutMs, lingerMs, waitForEvent, launchEnv }) {
     const startedAt = process.hrtime.bigint()
     const child = spawn(command, commandArgs, {
       env: launchEnv,
-      stdio: ['ignore', 'ignore', 'pipe']
+      stdio: ['ignore', 'ignore', 'pipe'],
+      // Why: gives the launcher its own process group so teardown can reap every
+      // Electron helper it spawned (see killProcessTree).
+      detached: process.platform !== 'win32'
     })
     let finished = false
     let buffer = ''
@@ -512,6 +377,12 @@ function derivePhases(events) {
       'renderer-startup-hydration-done'
     ),
     totalToWorkspaceReady: eventTime(events, 'renderer-startup-hydration-done', 'harness'),
+    // Time the terminal-restoration gate spent on SSH reconnect, and on the
+    // main-process barrier that used to fence worktree hydration.
+    rendererSshReconnectMs: eventDetailsNumber(events, 'renderer-ssh-reconnect-done', 'durationMs'),
+    rendererStartupBarrierMs:
+      eventDetailsNumber(events, 'renderer-git-environment-barrier-await-done', 'durationMs') ??
+      eventDetailsNumber(events, 'renderer-first-window-services-await-done', 'durationMs'),
     rendererReconnectTerminalsMs:
       eventDetailsNumber(events, 'renderer-reconnect-terminals-done', 'durationMs') ??
       delta(
@@ -585,7 +456,7 @@ async function main() {
       join(
         os.tmpdir(),
         'orca-startup-bench',
-        `userdata-${args.files}-${args.stateProfile}-${args.sessionTabs}-gh${args.githubRepos}`
+        `userdata-${args.files}-${args.stateProfile}-${args.sessionTabs}-gh${args.githubRepos}-ssh${args.sshUnreachableTargets}`
       )
   )
   mkdirSync(fixtureDir, { recursive: true })
@@ -593,7 +464,8 @@ async function main() {
     fileCount: args.files,
     stateProfile: args.stateProfile,
     sessionTabs: args.sessionTabs,
-    githubRepos: args.githubRepos
+    githubRepos: args.githubRepos,
+    sshUnreachableTargets: args.sshUnreachableTargets
   })
   const ghShimDir = writeGhShim(fixtureDir, args.ghHangMs)
   const launchEnv = buildLaunchEnvironment({

From 698584f6ec7d7041c5e3842f9dc9459e10707fd5 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:10:05 -0700
Subject: [PATCH 72/92] perf(pty): stop startup history GC freezing the main
 process for seconds (#18165)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

`runHistoryGc` walked every terminal-history directory synchronously ten
seconds after launch: `readdirSync` on the root, then per directory a
`statSync`, a `readdirSync`, a `statSync` per file, an `existsSync`, a
`readFileSync` and a `JSON.parse`. On a real 613 MB root (2,776 dirs /
6,703 files) that is ~20,000 syscalls and 2,774 parses in one
uninterruptible pass — the main process was frozen for the whole of it,
7.5-10.6 s on the reporting machine.

Move the enumeration to `fs/promises` behind the existing
`forEachWithConcurrency` fixed-worker pool over an iterative frontier,
yielding through the shared `yieldToEventLoop()` every 32 entries. The
pass is cancellable and a second call joins the in-flight one rather
than racing its tombstone renames.

Max main-thread gap over the real root: 122-155 ms -> 1.1-1.9 ms idle,
522 ms -> 1.1 ms under load. Syscalls per pass 20,578 -> 17,803. Total
elapsed is lower too (88-108 ms vs 126-154 ms warm), so nothing is
smeared into a longer tail.

The prune decision logic and the tombstone path are untouched. A new
suite asserts the new walk removes exactly the set the synchronous walk
chose over a fixture covering every decision shape, and covers the races
async introduces: a directory removed mid-walk, a half-written
`meta.json`, and malformed/truncated/oversized metadata. All of those
resolve to "keep", matching what the sync version did on a read error.
---
 src/main/startup/main-process-quit.ts |   4 +
 src/main/terminal-history-gc.test.ts  | 444 ++++++++++++++++++++++++++
 src/main/terminal-history-gc.ts       | 240 +++++++++-----
 src/main/terminal-history.test.ts     | 175 ----------
 src/main/terminal-history.ts          |  25 +-
 5 files changed, 632 insertions(+), 256 deletions(-)
 create mode 100644 src/main/terminal-history-gc.test.ts

diff --git a/src/main/startup/main-process-quit.ts b/src/main/startup/main-process-quit.ts
index 61203bc3164..a4149e13ba7 100644
--- a/src/main/startup/main-process-quit.ts
+++ b/src/main/startup/main-process-quit.ts
@@ -24,6 +24,7 @@ import { shutdownObservability } from '../observability'
 import { isQuittingForUpdate } from '../updater'
 import { recordUpdaterLifecycle } from '../updater-lifecycle-diagnostics'
 import { stopTccPromptNotice } from '../macos-tcc-prompt-notice'
+import { cancelHistoryGc } from '../terminal-history-gc'
 import { shouldQuitWhenAllWindowsClosed } from './window-all-closed-quit-policy'
 import { mainProcessState as state } from './main-process-state'
 import { isDevParentShutdownRequested } from './configure-process'
@@ -82,6 +83,9 @@ function installBeforeQuitHandler(): void {
     state.repoMaintenanceShutdown = awaitPackedRefsLockRelease()
     // Why: defer PTY cleanup to will-quit so the renderer captures scrollback before PTY-exit events unmount TerminalPane (dropping its capture callbacks).
     state.rateLimits?.stop()
+    // Why safe on a vetoed quit: background history GC is idempotent and re-scheduled next launch,
+    // so abandoning the walk here only costs one deferred sweep, never a half-applied prune.
+    cancelHistoryGc()
   })
 }
 
diff --git a/src/main/terminal-history-gc.test.ts b/src/main/terminal-history-gc.test.ts
new file mode 100644
index 00000000000..ece0d9af25f
--- /dev/null
+++ b/src/main/terminal-history-gc.test.ts
@@ -0,0 +1,444 @@
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readdirSync,
+  rmSync,
+  statSync,
+  writeFileSync
+} from 'node:fs'
+import { tmpdir } from 'node:os'
+import { basename, join } from 'node:path'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { installFakeAppEnvironment } from '../../config/scripts/vitest-host-ports-setup'
+
+const { removeHostTreeMock } = vi.hoisted(() => ({
+  removeHostTreeMock: vi.fn<(dir: string) => Promise<void>>()
+}))
+
+// Why intercept rather than no-op: the tombstone path each prune produces is the decision this
+// suite reads, but the drain re-queues any tombstone still on disk after a "successful" removal,
+// so the stub has to really delete or the queue never terminates.
+vi.mock('./host-tree-removal', () => ({
+  removeHostTree: removeHostTreeMock
+}))
+
+import { readHistoryMeta } from './terminal-history'
+import {
+  cancelPendingHistoryTreeRemovalRetries,
+  flushPendingWorktreeHistoryDeletions
+} from './terminal-history-deletion'
+import { cancelHistoryGc, runHistoryGc, scheduleHistoryGc } from './terminal-history-gc'
+
+const GC_MIN_AGE_MS = 5 * 60 * 1000
+const PENDING_DELETE_DIR_NAME = '.pending-delete'
+const LIVE_WORKTREE_ID = 'repo-1::/path/live-wt'
+const DEAD_WORKTREE_ID = 'repo-1::/path/dead-wt'
+
+let userDataDir: string
+let historyRoot: string
+let originalXdgDataHome: string | undefined
+
+/**
+ * The enumeration this exercises used to be a synchronous walk. Its replacement is an async
+ * fixed-worker pass, so the whole safety net is that both reach the same prune decision over a
+ * realistic tree: over-pruning here destroys scrollback the user still expects to have.
+ *
+ * A verbatim port of the pre-change decision logic, reporting names instead of deleting.
+ */
+function referenceSyncPruneDecisions(root: string, liveWorktreeIds: Set<string>): string[] {
+  const decisions: string[] = []
+  if (!existsSync(root)) {
+    return decisions
+  }
+  const now = Date.now()
+  for (const entry of readdirSync(root)) {
+    if (entry === PENDING_DELETE_DIR_NAME) {
+      continue
+    }
+    const entryPath = join(root, entry)
+    try {
+      const stats = statSync(entryPath)
+      if (!stats.isDirectory()) {
+        continue
+      }
+      try {
+        for (const file of readdirSync(entryPath)) {
+          statSync(join(entryPath, file))
+        }
+      } catch {
+        // Skip size estimation on error.
+      }
+      if (!existsSync(join(entryPath, 'meta.json'))) {
+        continue
+      }
+      const meta = readHistoryMeta(entryPath)
+      if (!meta?.worktreeId) {
+        continue
+      }
+      if (!liveWorktreeIds.has(meta.worktreeId)) {
+        if (meta.createdAt && now - new Date(meta.createdAt).getTime() < GC_MIN_AGE_MS) {
+          continue
+        }
+        decisions.push(entry)
+      }
+    } catch {
+      // Skip individual entries that fail.
+    }
+  }
+  return decisions
+}
+
+function seedDir(name: string, files: Record<string, string>): string {
+  const dir = join(historyRoot, name)
+  mkdirSync(dir, { recursive: true })
+  for (const [file, contents] of Object.entries(files)) {
+    writeFileSync(join(dir, file), contents)
+  }
+  return dir
+}
+
+function meta(worktreeId: string | undefined, ageMs: number | null): string {
+  return JSON.stringify({
+    ...(worktreeId === undefined ? {} : { worktreeId }),
+    ...(ageMs === null ? {} : { createdAt: new Date(Date.now() - ageMs).toISOString() })
+  })
+}
+
+const OLD = GC_MIN_AGE_MS * 2
+
+/** Every decision shape the walk has to get right, including the ones that must never prune. */
+function seedDecisionMatrix(): void {
+  seedDir('live-old', { 'meta.json': meta(LIVE_WORKTREE_ID, OLD), zsh_history: 'a' })
+  seedDir('live-young', { 'meta.json': meta(LIVE_WORKTREE_ID, 0) })
+  seedDir('orphan-old', { 'meta.json': meta(DEAD_WORKTREE_ID, OLD), zsh_history: 'b' })
+  seedDir('orphan-no-createdat', { 'meta.json': meta(DEAD_WORKTREE_ID, null) })
+  seedDir('orphan-unparseable-createdat', {
+    'meta.json': JSON.stringify({ worktreeId: DEAD_WORKTREE_ID, createdAt: 'not-a-date' })
+  })
+  seedDir('orphan-young', { 'meta.json': meta(DEAD_WORKTREE_ID, 1_000) })
+  seedDir('no-meta', { zsh_history: 'c' })
+  seedDir('malformed-meta', { 'meta.json': '{ this is not json' })
+  seedDir('truncated-meta', { 'meta.json': `{"worktreeId":"${DEAD_WORKTREE_ID}` })
+  seedDir('empty-meta', { 'meta.json': '{}' })
+  seedDir('array-meta', { 'meta.json': `["${DEAD_WORKTREE_ID}"]` })
+  seedDir('null-meta', { 'meta.json': 'null' })
+  seedDir('no-worktree-id', { 'meta.json': meta(undefined, OLD) })
+  seedDir('oversize-meta', {
+    'meta.json': JSON.stringify({
+      worktreeId: DEAD_WORKTREE_ID,
+      createdAt: new Date(Date.now() - OLD).toISOString(),
+      pad: 'x'.repeat(64 * 1024)
+    })
+  })
+  // meta.json as a directory: stat succeeds, the read does not.
+  mkdirSync(join(historyRoot, 'meta-is-a-dir', 'meta.json'), { recursive: true })
+  seedDir('empty-dir', {})
+  // A plain file at the root is not a history directory.
+  writeFileSync(join(historyRoot, 'stray-file'), 'x')
+  mkdirSync(join(historyRoot, PENDING_DELETE_DIR_NAME), { recursive: true })
+}
+
+/** Enough entries to run several worker batches and cross the cooperative-yield boundary. */
+function seedBulk(count: number, orphanEvery: number): void {
+  for (let i = 0; i < count; i++) {
+    const orphan = i % orphanEvery === 0
+    seedDir(`bulk-${i}`, {
+      'meta.json': meta(orphan ? `${DEAD_WORKTREE_ID}-${i}` : LIVE_WORKTREE_ID, OLD),
+      zsh_history: `entry-${i}`,
+      bash_history: `entry-${i}`
+    })
+  }
+}
+
+function survivingDirs(): Set<string> {
+  return new Set(
+    readdirSync(historyRoot).filter(
+      (entry) =>
+        entry !== PENDING_DELETE_DIR_NAME && statSync(join(historyRoot, entry)).isDirectory()
+    )
+  )
+}
+
+beforeEach(() => {
+  userDataDir = mkdtempSync(join(tmpdir(), 'orca-history-gc-'))
+  historyRoot = join(userDataDir, 'terminal-history')
+  mkdirSync(historyRoot, { recursive: true })
+  installFakeAppEnvironment({ getPath: () => userDataDir })
+  // Why: the fish sweep resolves a real user data dir otherwise, and would delete the
+  // developer's own orca fish history files while this suite runs.
+  originalXdgDataHome = process.env.XDG_DATA_HOME
+  process.env.XDG_DATA_HOME = userDataDir
+  removeHostTreeMock.mockReset()
+  removeHostTreeMock.mockImplementation(async (dir) => {
+    rmSync(dir, { recursive: true, force: true })
+  })
+})
+
+/** Tombstone paths the pass condemned, with the `.<timestamp>.<rand>` rename suffix stripped. */
+function tombstonedNames(): Set<string> {
+  return new Set(
+    removeHostTreeMock.mock.calls.map(([dir]) => basename(dir).split('.').slice(0, -2).join('.'))
+  )
+}
+
+afterEach(async () => {
+  cancelHistoryGc()
+  vi.useRealTimers()
+  await flushPendingWorktreeHistoryDeletions()
+  cancelPendingHistoryTreeRemovalRetries()
+  if (originalXdgDataHome === undefined) {
+    delete process.env.XDG_DATA_HOME
+  } else {
+    process.env.XDG_DATA_HOME = originalXdgDataHome
+  }
+  rmSync(userDataDir, { recursive: true, force: true })
+})
+
+describe('history GC prune decisions', () => {
+  it('prunes exactly the set the synchronous walk chose', async () => {
+    seedDecisionMatrix()
+    seedBulk(200, 7)
+    const live = new Set([LIVE_WORKTREE_ID])
+
+    const before = survivingDirs()
+    const expected = new Set(referenceSyncPruneDecisions(historyRoot, live))
+
+    await runHistoryGc(live)
+
+    const after = survivingDirs()
+    const actual = new Set([...before].filter((entry) => !after.has(entry)))
+
+    expect(expected.size).toBeGreaterThan(0)
+    expect([...actual].sort()).toEqual([...expected].sort())
+  })
+
+  it('keeps every directory whose ownership cannot be established', async () => {
+    seedDecisionMatrix()
+
+    await runHistoryGc(new Set([LIVE_WORKTREE_ID]))
+
+    const after = survivingDirs()
+    for (const kept of [
+      'live-old',
+      'live-young',
+      'orphan-young',
+      'no-meta',
+      'malformed-meta',
+      'truncated-meta',
+      'empty-meta',
+      'array-meta',
+      'null-meta',
+      'no-worktree-id',
+      'oversize-meta',
+      'meta-is-a-dir',
+      'empty-dir'
+    ]) {
+      expect(after.has(kept)).toBe(true)
+    }
+    expect(after.has('orphan-old')).toBe(false)
+    expect(after.has('orphan-no-createdat')).toBe(false)
+    expect(after.has('orphan-unparseable-createdat')).toBe(false)
+    expect(existsSync(join(historyRoot, 'stray-file'))).toBe(true)
+  })
+
+  it('refuses to prune anything when the live set is empty', async () => {
+    seedDecisionMatrix()
+
+    await runHistoryGc(new Set())
+
+    expect(survivingDirs().has('orphan-old')).toBe(true)
+    expect(readdirSync(join(historyRoot, PENDING_DELETE_DIR_NAME))).toEqual([])
+  })
+
+  it('does not throw when the history root does not exist', async () => {
+    rmSync(historyRoot, { recursive: true, force: true })
+    await expect(runHistoryGc(new Set([LIVE_WORKTREE_ID]))).resolves.toBeUndefined()
+  })
+
+  it('tombstones orphans instead of removing them on the calling thread', async () => {
+    seedDecisionMatrix()
+
+    await runHistoryGc(new Set([LIVE_WORKTREE_ID]))
+
+    // The recursive rm only ever sees a path already renamed into the tombstone queue.
+    for (const [dir] of removeHostTreeMock.mock.calls) {
+      expect(dir).toContain(PENDING_DELETE_DIR_NAME)
+    }
+    expect(tombstonedNames().has('orphan-old')).toBe(true)
+  })
+
+  it('drains pre-existing tombstones without scanning them as worktrees', async () => {
+    seedDecisionMatrix()
+    const leftover = join(historyRoot, PENDING_DELETE_DIR_NAME, 'abc123.1700000000000.deadbeef')
+    mkdirSync(leftover, { recursive: true })
+
+    await runHistoryGc(new Set([LIVE_WORKTREE_ID]))
+
+    expect(removeHostTreeMock).toHaveBeenCalledWith(expect.stringContaining('abc123.1700000000000'))
+  })
+
+  it('continues the pass after one orphan tombstone fails', async () => {
+    seedDir('orphan-a', { 'meta.json': meta(`${DEAD_WORKTREE_ID}-a`, OLD) })
+    seedDir('orphan-b', { 'meta.json': meta(`${DEAD_WORKTREE_ID}-b`, OLD) })
+    // A file where the tombstone root must be makes the first rename fail; mkdir cannot replace it.
+    writeFileSync(join(historyRoot, PENDING_DELETE_DIR_NAME), 'not a directory')
+
+    await expect(runHistoryGc(new Set([LIVE_WORKTREE_ID]))).resolves.toBeUndefined()
+
+    // Nothing could be tombstoned, and both entries survive for a later pass to reclaim.
+    expect(survivingDirs()).toEqual(new Set(['orphan-a', 'orphan-b']))
+  })
+})
+
+describe('history GC concurrency behaviour', () => {
+  it('joins a second call to the in-flight pass instead of walking twice', async () => {
+    seedDecisionMatrix()
+    const live = new Set([LIVE_WORKTREE_ID])
+
+    const first = runHistoryGc(live)
+    const second = runHistoryGc(live)
+    expect(second).toBe(first)
+
+    await first
+    // Each rename produces its own tombstone, so a second overlapping walk would condemn twice.
+    const orphanRemovals = removeHostTreeMock.mock.calls.filter(([dir]) =>
+      basename(dir).startsWith('orphan-old.')
+    )
+    expect(orphanRemovals).toHaveLength(1)
+  })
+
+  it('starts a fresh pass once the previous one has settled', async () => {
+    seedDecisionMatrix()
+    const live = new Set([LIVE_WORKTREE_ID])
+    await runHistoryGc(live)
+    const second = runHistoryGc(live)
+    await expect(second).resolves.toBeUndefined()
+  })
+
+  it('stops an in-flight walk on cancel without pruning', async () => {
+    seedDecisionMatrix()
+    seedBulk(300, 3)
+    const before = survivingDirs()
+
+    const pass = runHistoryGc(new Set([LIVE_WORKTREE_ID]))
+    // Cancelling before the root listing resolves means no entry is ever visited.
+    cancelHistoryGc()
+    await pass
+
+    expect(survivingDirs()).toEqual(before)
+  })
+
+  it('does not run a scheduled pass that was cancelled while resolving live worktrees', async () => {
+    seedDecisionMatrix()
+    vi.useFakeTimers()
+    let resolveLiveIds: (ids: Set<string>) => void = () => {}
+    scheduleHistoryGc(
+      () =>
+        new Promise<Set<string>>((resolve) => {
+          resolveLiveIds = resolve
+        })
+    )
+
+    await vi.advanceTimersByTimeAsync(10_000)
+    cancelHistoryGc()
+    resolveLiveIds(new Set([LIVE_WORKTREE_ID]))
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(survivingDirs().has('orphan-old')).toBe(true)
+  })
+
+  it('coalesces duplicate scheduled startup GC calls', async () => {
+    vi.useFakeTimers()
+    const getLiveWorktreeIds = vi.fn().mockResolvedValue(new Set<string>())
+
+    scheduleHistoryGc(getLiveWorktreeIds)
+    scheduleHistoryGc(getLiveWorktreeIds)
+    await vi.advanceTimersByTimeAsync(10_000)
+
+    expect(getLiveWorktreeIds).toHaveBeenCalledTimes(1)
+  })
+})
+
+describe('history GC races an async walk introduces', () => {
+  it('survives a directory removed while the walk is in flight', async () => {
+    seedDecisionMatrix()
+    seedBulk(300, 5)
+    const live = new Set([LIVE_WORKTREE_ID])
+    const vanishing = ['bulk-11', 'bulk-77', 'bulk-201']
+
+    const pass = runHistoryGc(live)
+    for (const name of vanishing) {
+      rmSync(join(historyRoot, name), { recursive: true, force: true })
+    }
+    await expect(pass).resolves.toBeUndefined()
+
+    // Every live directory the racer did not touch is still there.
+    expect(survivingDirs().has('live-old')).toBe(true)
+    expect(survivingDirs().has('bulk-1')).toBe(true)
+    for (const name of vanishing) {
+      expect(existsSync(join(historyRoot, name))).toBe(false)
+    }
+  })
+
+  it('never prunes a directory whose meta.json is half-written when the walk reads it', async () => {
+    seedDir('being-written', {})
+    seedBulk(200, 5)
+    const live = new Set([LIVE_WORKTREE_ID])
+
+    const pass = runHistoryGc(live)
+    writeFileSync(
+      join(historyRoot, 'being-written', 'meta.json'),
+      `{"worktreeId":"${DEAD_WORKTREE_ID}","created`
+    )
+    await pass
+
+    expect(survivingDirs().has('being-written')).toBe(true)
+  })
+
+  it('prunes a directory whose meta.json arrived after the directory did', async () => {
+    seedDir('late-meta', {})
+    writeFileSync(
+      join(historyRoot, 'late-meta', 'meta.json'),
+      meta(`${DEAD_WORKTREE_ID}-late`, OLD)
+    )
+
+    await runHistoryGc(new Set([LIVE_WORKTREE_ID]))
+
+    expect(survivingDirs().has('late-meta')).toBe(false)
+  })
+})
+
+describe('history GC main-thread occupancy', () => {
+  it('yields to timers throughout the walk instead of blocking on it', async () => {
+    seedBulk(1_200, 40)
+    const live = new Set([LIVE_WORKTREE_ID])
+
+    const ticks = { sync: 0, async: 0 }
+    let maxAsyncGapMs = 0
+
+    // The pre-change walk is the control: a synchronous pass over the same tree cannot tick at all.
+    const syncTimer = setInterval(() => {
+      ticks.sync += 1
+    }, 4)
+    referenceSyncPruneDecisions(historyRoot, live)
+    clearInterval(syncTimer)
+
+    let last = performance.now()
+    const asyncTimer = setInterval(() => {
+      const now = performance.now()
+      maxAsyncGapMs = Math.max(maxAsyncGapMs, now - last - 4)
+      last = now
+      ticks.async += 1
+    }, 4)
+    await runHistoryGc(live)
+    clearInterval(asyncTimer)
+
+    // A synchronous pass cannot tick at all, however long it takes.
+    expect(ticks.sync).toBe(0)
+    expect(ticks.async).toBeGreaterThan(5)
+    // Generous because shared CI runners stall an idle timer by tens of ms on their own; the
+    // failure this guards against is a whole-walk block, which is seconds.
+    expect(maxAsyncGapMs).toBeLessThan(2_000)
+  })
+})
diff --git a/src/main/terminal-history-gc.ts b/src/main/terminal-history-gc.ts
index d67e3a7dd5c..37467c89423 100644
--- a/src/main/terminal-history-gc.ts
+++ b/src/main/terminal-history-gc.ts
@@ -1,5 +1,5 @@
 import { join } from 'node:path'
-import { existsSync, readdirSync, statSync } from 'node:fs'
+import { readdir, stat } from 'node:fs/promises'
 import {
   getHistoryRoot,
   listWslHistoryRoots,
@@ -9,9 +9,11 @@ import {
   schedulePendingHistoryTreeRemovals,
   scheduleWorktreeHistoryTreeDeletion
 } from './terminal-history-deletion'
-import { readHistoryMeta } from './terminal-history'
+import { readHistoryMetaAsync } from './terminal-history'
 import { resolveFishHistoryDir, sweepOrphanedFishHistoryFiles } from './fish-history-session'
 import { hashWorktreeId } from './terminal-history-id'
+import { forEachWithConcurrency } from '../shared/map-with-concurrency'
+import { yieldToEventLoop } from '../shared/event-loop-yield'
 
 // Why 5 minutes: GC runs ~10s after startup, and the live-worktree snapshot is
 // taken just before. A worktree created between the snapshot and GC execution
@@ -20,100 +22,136 @@ import { hashWorktreeId } from './terminal-history-id'
 // to cover any realistic snapshot-to-scan delay.
 const GC_MIN_AGE_MS = 5 * 60 * 1000
 
-let scheduledHistoryGcTimer: ReturnType<typeof setTimeout> | null = null
-let historyGcRunning = false
+// Why a fixed worker pool over a frontier and not per-entry promise fan-out: a real
+// history root holds thousands of directories, and starting every one at once queues
+// tens of thousands of libuv requests before the first completes. 16 is deep enough to
+// keep the default 4-thread pool saturated without monopolising the disk during startup.
+const HISTORY_GC_SCAN_CONCURRENCY = 16
+// Why yield at all when every step already awaits I/O: a fully cached root resolves each
+// await in a microtask, which never returns to the macrotask queue. This bounds that run.
+const HISTORY_GC_YIELD_EVERY = 32
 
-/** Scan a single history root directory, pruning orphaned entries.
- *  Returns { totalDirs, orphaned, pruned, totalSizeKB }. */
-function gcScanRoot(
-  root: string,
-  liveWorktreeIds: Set<string>
-): {
+let scheduledHistoryGcTimer: ReturnType<typeof setTimeout> | null = null
+let historyGcStarting = false
+let historyGcCancelled = false
+let activeHistoryGc: Promise<void> | null = null
+let activeHistoryGcAbort: AbortController | null = null
+
+type GcRootScan = {
   totalDirs: number
   orphaned: number
   pruned: number
   totalSizeKB: number
   /** Every fish data dir a meta.json in this root names, for the orphan sweep. */
   fishHistoryDirs: Set<string>
-} {
-  const result = {
+}
+
+/** Inspect one history directory, tombstoning it when its worktree is gone. */
+async function gcScanEntry(
+  root: string,
+  entry: string,
+  liveWorktreeIds: Set<string>,
+  now: number,
+  result: GcRootScan
+): Promise<void> {
+  const entryPath = join(root, entry)
+  try {
+    const stats = await stat(entryPath)
+    if (!stats.isDirectory()) {
+      return
+    }
+    result.totalDirs++
+
+    // Estimate directory size from meta.json + history files.
+    // Why a local accumulator: `result.totalSizeKB += <expression containing await>`
+    // reads the field before suspending and writes back a stale sum once workers interleave.
+    let dirSizeKB = 0
+    try {
+      for (const file of await readdir(entryPath)) {
+        dirSizeKB += Math.ceil((await stat(join(entryPath, file))).size / 1024)
+      }
+    } catch {
+      // Skip size estimation on error, keeping whatever was measured first.
+    }
+    result.totalSizeKB += dirSizeKB
+
+    // A missing, truncated, oversized or malformed meta.json reads back as null, and a
+    // null meta is never pruned — an entry whose ownership we cannot establish is kept.
+    const meta = await readHistoryMetaAsync(entryPath)
+    if (meta?.fishHistoryDir) {
+      result.fishHistoryDirs.add(meta.fishHistoryDir)
+    }
+    if (!meta?.worktreeId) {
+      return
+    }
+
+    if (!liveWorktreeIds.has(meta.worktreeId)) {
+      // Why: avoid a TOCTOU race where a worktree is created after the
+      // live-ID snapshot but before GC runs. Directories younger than
+      // GC_MIN_AGE_MS are presumed still live and skipped.
+      if (meta.createdAt) {
+        const ageMs = now - new Date(meta.createdAt).getTime()
+        if (ageMs < GC_MIN_AGE_MS) {
+          return
+        }
+      }
+
+      result.orphaned++
+      // Why: a large orphaned tree recursive-rm'd here would stall the main process ~10s after
+      // launch — the same freeze the explicit-delete path already tombstones its way out of.
+      if (scheduleWorktreeHistoryTreeDeletion(entryPath, root)) {
+        result.pruned++
+        console.log(`[pty:history:gc] Pruned orphaned history: ${meta.worktreeId}`)
+      }
+    }
+  } catch {
+    // Skip individual entries that fail.
+  }
+}
+
+/** Scan a single history root directory, pruning orphaned entries. */
+async function gcScanRoot(
+  root: string,
+  liveWorktreeIds: Set<string>,
+  signal: AbortSignal
+): Promise<GcRootScan> {
+  const result: GcRootScan = {
     totalDirs: 0,
     orphaned: 0,
     pruned: 0,
     totalSizeKB: 0,
     fishHistoryDirs: new Set<string>()
   }
-  if (!existsSync(root)) {
+
+  let entries: string[]
+  try {
+    entries = await readdir(root)
+  } catch {
+    // Absent or unreadable root: nothing to collect.
     return result
   }
 
   const now = Date.now()
+  // Why: pending-delete is a tombstone queue drained asynchronously, not a live worktree hash.
+  const frontier = entries.filter((entry) => entry !== PENDING_DELETE_DIR_NAME)
 
-  for (const entry of readdirSync(root)) {
-    // Why: pending-delete is a tombstone queue drained asynchronously, not a live worktree hash.
-    if (entry === PENDING_DELETE_DIR_NAME) {
-      continue
+  await forEachWithConcurrency(
+    frontier,
+    HISTORY_GC_SCAN_CONCURRENCY,
+    async (entry, index): Promise<void> => {
+      if (signal.aborted) {
+        return
+      }
+      await gcScanEntry(root, entry, liveWorktreeIds, now, result)
+      if (index % HISTORY_GC_YIELD_EVERY === HISTORY_GC_YIELD_EVERY - 1) {
+        await yieldToEventLoop()
+      }
     }
-    const entryPath = join(root, entry)
-    try {
-      const stat = statSync(entryPath)
-      if (!stat.isDirectory()) {
-        continue
-      }
-      result.totalDirs++
-
-      // Estimate directory size from meta.json + history files.
-      try {
-        for (const file of readdirSync(entryPath)) {
-          result.totalSizeKB += Math.ceil(statSync(join(entryPath, file)).size / 1024)
-        }
-      } catch {
-        // Skip size estimation on error.
-      }
-
-      const metaPath = join(entryPath, 'meta.json')
-      if (!existsSync(metaPath)) {
-        // No meta.json — can't determine ownership, skip.
-        continue
-      }
-
-      const meta = readHistoryMeta(entryPath)
-      if (meta?.fishHistoryDir) {
-        result.fishHistoryDirs.add(meta.fishHistoryDir)
-      }
-      if (!meta?.worktreeId) {
-        continue
-      }
-
-      if (!liveWorktreeIds.has(meta.worktreeId)) {
-        // Why: avoid a TOCTOU race where a worktree is created after the
-        // live-ID snapshot but before GC runs. Directories younger than
-        // GC_MIN_AGE_MS are presumed still live and skipped.
-        if (meta.createdAt) {
-          const ageMs = now - new Date(meta.createdAt).getTime()
-          if (ageMs < GC_MIN_AGE_MS) {
-            continue
-          }
-        }
-
-        result.orphaned++
-        // Why: a large orphaned tree recursive-rm'd here would stall the main process ~10s after
-        // launch — the same freeze the explicit-delete path already tombstones its way out of.
-        if (scheduleWorktreeHistoryTreeDeletion(entryPath, root)) {
-          result.pruned++
-          console.log(`[pty:history:gc] Pruned orphaned history: ${meta.worktreeId}`)
-        }
-      }
-    } catch {
-      // Skip individual entries that fail.
-    }
-  }
+  )
   return result
 }
 
-/** Run background GC to prune history directories for worktrees that are no
- *  longer in Orca's known live-worktree set. */
-export function runHistoryGc(liveWorktreeIds: Set<string>): void {
+async function executeHistoryGc(liveWorktreeIds: Set<string>, signal: AbortSignal): Promise<void> {
   try {
     // Why: finish tombstones left by quit mid-rm before scanning live worktree hashes.
     // Safe ahead of the guard below: these entries were already condemned by a
@@ -130,14 +168,17 @@ export function runHistoryGc(liveWorktreeIds: Set<string>): void {
       console.log('[pty:history:gc] Skipped: live worktree set is empty')
       return
     }
-    const main = gcScanRoot(getHistoryRoot(), liveWorktreeIds)
+    const main = await gcScanRoot(getHistoryRoot(), liveWorktreeIds, signal)
 
     // Also scan WSL history directories (each distro has its own subdirectory).
     const wslTotals = { totalDirs: 0, orphaned: 0, pruned: 0, totalSizeKB: 0 }
     const liveFishHistoryDirs = new Set(main.fishHistoryDirs)
     for (const distroRoot of listWslHistoryRoots()) {
+      if (signal.aborted) {
+        break
+      }
       schedulePendingHistoryTreeRemovals(distroRoot)
-      const r = gcScanRoot(distroRoot, liveWorktreeIds)
+      const r = await gcScanRoot(distroRoot, liveWorktreeIds, signal)
       wslTotals.totalDirs += r.totalDirs
       wslTotals.orphaned += r.orphaned
       wslTotals.pruned += r.pruned
@@ -147,6 +188,11 @@ export function runHistoryGc(liveWorktreeIds: Set<string>): void {
       }
     }
 
+    if (signal.aborted) {
+      console.log('[pty:history:gc] Cancelled mid-scan')
+      return
+    }
+
     // Why a sweep on top of per-worktree deletion: a fish history file lives in
     // the user's fish data dir, so it outlives the directory that names it. A
     // crash between tombstone and removal, or a hand-deleted history dir, leaves
@@ -178,28 +224,62 @@ export function runHistoryGc(liveWorktreeIds: Set<string>): void {
   }
 }
 
+/** Run background GC to prune history directories for worktrees that are no
+ *  longer in Orca's known live-worktree set. Resolves when the pass finishes. */
+export function runHistoryGc(liveWorktreeIds: Set<string>): Promise<void> {
+  // Why join instead of starting a second pass: two walks would race each other's
+  // tombstone renames, and the loser's `scheduleWorktreeHistoryTreeDeletion` would
+  // report a failure for a directory the winner already condemned.
+  if (activeHistoryGc) {
+    return activeHistoryGc
+  }
+  const controller = new AbortController()
+  activeHistoryGcAbort = controller
+  activeHistoryGc = executeHistoryGc(liveWorktreeIds, controller.signal).finally(() => {
+    activeHistoryGc = null
+    activeHistoryGcAbort = null
+  })
+  return activeHistoryGc
+}
+
+/** Drop a pending GC and stop an in-flight walk at its next entry. */
+export function cancelHistoryGc(): void {
+  if (scheduledHistoryGcTimer !== null) {
+    clearTimeout(scheduledHistoryGcTimer)
+    scheduledHistoryGcTimer = null
+  }
+  // Why a flag as well: the timer has already fired while the live-worktree lookup is
+  // in flight, and there is no controller to abort until the scan itself starts.
+  historyGcCancelled = true
+  activeHistoryGcAbort?.abort()
+}
+
 /** Schedule GC after a delay so it runs after workspace hydration completes.
  *  `getLiveWorktreeIds` should use already-known IDs, not probe repo paths. */
 export function scheduleHistoryGc(getLiveWorktreeIds: () => Promise<Set<string>>): void {
   // Why: main-window services can reattach during reload/reactivation; one
   // pending/running disk GC is enough and avoids duplicate startup I/O.
-  if (scheduledHistoryGcTimer !== null || historyGcRunning) {
+  if (scheduledHistoryGcTimer !== null || historyGcStarting || activeHistoryGc !== null) {
     return
   }
+  historyGcCancelled = false
   // Why 10s: avoids competing with startup-critical I/O while still running
   // early enough to clean up before the user notices disk usage (§7.6).
   scheduledHistoryGcTimer = setTimeout(async () => {
     scheduledHistoryGcTimer = null
-    historyGcRunning = true
+    historyGcStarting = true
     try {
       const liveIds = await getLiveWorktreeIds()
-      runHistoryGc(liveIds)
+      if (historyGcCancelled) {
+        return
+      }
+      await runHistoryGc(liveIds)
     } catch (err) {
       console.warn(
         `[pty:history:gc] Failed to enumerate live worktrees for GC: ${err instanceof Error ? err.message : String(err)}`
       )
     } finally {
-      historyGcRunning = false
+      historyGcStarting = false
     }
   }, 10_000)
 }
diff --git a/src/main/terminal-history.test.ts b/src/main/terminal-history.test.ts
index 1cbb5f83438..8dd25ea7ddf 100644
--- a/src/main/terminal-history.test.ts
+++ b/src/main/terminal-history.test.ts
@@ -96,8 +96,6 @@ import {
   flushPendingWorktreeHistoryDeletions
 } from './terminal-history-deletion'
 
-import { runHistoryGc, scheduleHistoryGc } from './terminal-history-gc'
-
 const OTHER_WORKTREE_HASH = hashWorktreeId('repo-1::/path/other-wt')
 
 describe('terminal-history', () => {
@@ -688,179 +686,6 @@ describe('terminal-history', () => {
     })
   })
 
-  describe('runHistoryGc', () => {
-    it('coalesces duplicate scheduled startup GC calls', async () => {
-      vi.useFakeTimers()
-      existsSyncMock.mockReturnValue(false)
-      const getLiveWorktreeIds = vi.fn().mockResolvedValue(new Set<string>())
-
-      scheduleHistoryGc(getLiveWorktreeIds)
-      scheduleHistoryGc(getLiveWorktreeIds)
-
-      await vi.advanceTimersByTimeAsync(10_000)
-
-      expect(getLiveWorktreeIds).toHaveBeenCalledTimes(1)
-    })
-
-    it('prunes orphaned directories', () => {
-      existsSyncMock.mockImplementation((p: string) => {
-        // WSL root doesn't exist, so GC skips it
-        if (p.includes('terminal-history-wsl')) {
-          return false
-        }
-        return true
-      })
-      readdirSyncMock.mockImplementation((dir: string) => {
-        if (dir.endsWith('terminal-history')) {
-          return ['dir1', 'dir2']
-        }
-        return ['meta.json']
-      })
-      statSyncMock.mockReturnValue({ isDirectory: () => true, size: 100 })
-      readFileSyncMock.mockImplementation((p: string) => {
-        // Use a createdAt old enough to pass the GC age threshold
-        const oldDate = new Date(Date.now() - 10 * 60 * 1000).toISOString()
-        if (p.includes('dir1')) {
-          return JSON.stringify({ worktreeId: 'live-wt', createdAt: oldDate })
-        }
-        return JSON.stringify({ worktreeId: 'dead-wt', createdAt: oldDate })
-      })
-
-      const liveIds = new Set(['live-wt'])
-      runHistoryGc(liveIds)
-
-      // Should only prune dir2 (dead-wt), not dir1 (live-wt), and never recursive-rm on the main thread.
-      expect(rmSyncMock).not.toHaveBeenCalled()
-      expect(renameSyncMock).toHaveBeenCalledTimes(1)
-      expect(renameSyncMock).toHaveBeenCalledWith(
-        expect.stringContaining('dir2'),
-        expect.stringContaining(`.pending-delete${sep}dir2.`)
-      )
-      expect(rmAsyncMock).toHaveBeenCalledWith(
-        expect.stringContaining(`.pending-delete${sep}dir2.`),
-        expect.objectContaining({ recursive: true, force: true })
-      )
-    })
-
-    // Why: an empty live set is what a store that fell back to default state
-    // looks like, and it is indistinguishable from a user with no worktrees —
-    // who has no history to collect either. Treating it as "everything is
-    // orphaned" turns a recoverable bad load into deleted shell history.
-    it('refuses to prune anything when the live set is empty', () => {
-      existsSyncMock.mockImplementation((p: string) => !p.includes('terminal-history-wsl'))
-      readdirSyncMock.mockImplementation((dir: string) => {
-        if (dir.endsWith('.pending-delete')) {
-          return []
-        }
-        if (dir.endsWith('terminal-history')) {
-          return ['dir1', 'dir2']
-        }
-        return ['meta.json']
-      })
-      statSyncMock.mockReturnValue({ isDirectory: () => true, size: 100 })
-      readFileSyncMock.mockReturnValue(
-        JSON.stringify({
-          worktreeId: 'some-wt',
-          createdAt: new Date(Date.now() - 10 * 60 * 1000).toISOString()
-        })
-      )
-
-      runHistoryGc(new Set())
-
-      expect(renameSyncMock).not.toHaveBeenCalled()
-      expect(rmSyncMock).not.toHaveBeenCalled()
-      expect(rmAsyncMock).not.toHaveBeenCalled()
-    })
-
-    it('continues GC after one orphan tombstone fails', async () => {
-      existsSyncMock.mockImplementation((path: string) => !path.includes('terminal-history-wsl'))
-      readdirSyncMock.mockImplementation((dir: string) => {
-        if (dir.endsWith('.pending-delete')) {
-          return []
-        }
-        if (dir.endsWith('terminal-history')) {
-          return ['broken', 'healthy']
-        }
-        return ['meta.json']
-      })
-      statSyncMock.mockReturnValue({ isDirectory: () => true, size: 100 })
-      readFileSyncMock.mockReturnValue(
-        JSON.stringify({
-          worktreeId: 'orphan',
-          createdAt: new Date(Date.now() - 10 * 60 * 1000).toISOString()
-        })
-      )
-      renameSyncMock.mockImplementationOnce(() => {
-        throw new Error('busy')
-      })
-
-      expect(() => runHistoryGc(new Set(['live-wt']))).not.toThrow()
-      expect(renameSyncMock).toHaveBeenCalledTimes(2)
-      expect(rmAsyncMock).toHaveBeenCalledTimes(1)
-      await flushPendingWorktreeHistoryDeletions()
-    })
-
-    it('skips recently-created directories to avoid TOCTOU race', () => {
-      existsSyncMock.mockImplementation((p: string) => {
-        if (p.includes('terminal-history-wsl')) {
-          return false
-        }
-        return true
-      })
-      readdirSyncMock.mockImplementation((dir: string) => {
-        if (dir.endsWith('terminal-history')) {
-          return ['fresh-dir']
-        }
-        return ['meta.json']
-      })
-      statSyncMock.mockReturnValue({ isDirectory: () => true, size: 100 })
-      // createdAt is just now — younger than the 5-minute GC threshold
-      readFileSyncMock.mockReturnValue(
-        JSON.stringify({ worktreeId: 'unknown-wt', createdAt: new Date().toISOString() })
-      )
-
-      runHistoryGc(new Set(['live-wt']))
-
-      // Should NOT prune because the directory is too young
-      expect(rmSyncMock).not.toHaveBeenCalled()
-      expect(renameSyncMock).not.toHaveBeenCalled()
-    })
-
-    it('does not throw when history root does not exist', () => {
-      existsSyncMock.mockReturnValue(false)
-      expect(() => runHistoryGc(new Set(['live-wt']))).not.toThrow()
-      expect(readdirSyncMock).not.toHaveBeenCalledWith('/fake/userData/terminal-history')
-    })
-
-    it('drains delete tombstones asynchronously instead of scanning them as worktrees', async () => {
-      let tombstonePresent = true
-      existsSyncMock.mockImplementation((p: string) => !String(p).includes('terminal-history-wsl'))
-      readdirSyncMock.mockImplementation((dir: string) => {
-        if (String(dir).endsWith('.pending-delete')) {
-          return tombstonePresent ? ['abc123.1700000000000.deadbeef'] : []
-        }
-        if (String(dir).endsWith('terminal-history')) {
-          return ['.pending-delete']
-        }
-        return ['meta.json']
-      })
-      statSyncMock.mockReturnValue({ isDirectory: () => true, size: 100 })
-      rmAsyncMock.mockImplementation(async () => {
-        tombstonePresent = false
-      })
-
-      runHistoryGc(new Set(['live-wt']))
-
-      // The tombstone queue is drained off-thread; GC must never rmSync it or count it as a worktree.
-      expect(rmSyncMock).not.toHaveBeenCalled()
-      expect(rmAsyncMock).toHaveBeenCalledWith(
-        expect.stringContaining('abc123.1700000000000.deadbeef'),
-        expect.objectContaining({ recursive: true, force: true })
-      )
-      await flushPendingWorktreeHistoryDeletions()
-    })
-  })
-
   describe('WSL path conversion', () => {
     it('converts HISTFILE to Linux path for WSL cwd', () => {
       const originalPlatform = process.platform
diff --git a/src/main/terminal-history.ts b/src/main/terminal-history.ts
index 04c772b2fc7..07ad8f12c93 100644
--- a/src/main/terminal-history.ts
+++ b/src/main/terminal-history.ts
@@ -1,5 +1,6 @@
 import { join, basename } from 'node:path'
 import { mkdirSync, existsSync, readFileSync, statSync, writeFileSync } from 'node:fs'
+import { readFile, stat } from 'node:fs/promises'
 import {
   dropInheritedOrcaFishHistory,
   fishHistorySessionName,
@@ -131,7 +132,29 @@ export function readHistoryMeta(dir: string): HistoryDirMeta | null {
     if (statSync(metaPath).size > MAX_HISTORY_META_BYTES) {
       return null
     }
-    const raw: unknown = JSON.parse(readFileSync(metaPath, 'utf-8'))
+    return parseHistoryMeta(dir, readFileSync(metaPath, 'utf-8'))
+  } catch {
+    return null
+  }
+}
+
+/** `readHistoryMeta` off the main thread, for scans that walk thousands of directories. */
+export async function readHistoryMetaAsync(dir: string): Promise<HistoryDirMeta | null> {
+  try {
+    const metaPath = join(dir, 'meta.json')
+    // Why stat before read: the cap must reject an oversized meta.json without loading it.
+    if ((await stat(metaPath)).size > MAX_HISTORY_META_BYTES) {
+      return null
+    }
+    return parseHistoryMeta(dir, await readFile(metaPath, 'utf-8'))
+  } catch {
+    return null
+  }
+}
+
+function parseHistoryMeta(dir: string, contents: string): HistoryDirMeta | null {
+  try {
+    const raw: unknown = JSON.parse(contents)
     if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
       return null
     }

From 6b1cbe54a167ed0398242c0ed391866342daea6a Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:22:25 -0700
Subject: [PATCH 73/92] fix(process-table): fail a short `ps` capture loudly,
 and stop a resume spending 49 of them (#18166)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The POSIX process-table capture ran `execFile('ps', ...)` with no `maxBuffer`,
inheriting Node's 1MB default. Measured at 1,460 processes the capture is 326KB
with a 5,116-char longest row — ~3x headroom, which a busy host clears.

Two separate defects follow, fixed here:

1. `parseProcessTableRows` drops unparseable lines, so any short capture reads
   as a COMPLETE table whose missing processes simply are not running. Verified:
   a capture cut at 4KB parses to 59 of 1,463 rows, and an empty capture parses
   to `[]`, both with no error — and `resolveAgentForegroundProcessWithAvailability`
   then answers `available: true`. That is the `unverifiable` -> `exited` collapse
   the execution boundary forbids. The capture now rejects with
   `ProcessTableCaptureError` on a ceiling-length or row-less capture, so both the
   lenient and strict views fail loudly and callers report unavailable.

2. `maxBuffer` is now an explicit 32MB, matching the sibling reader in
   `pty-descendant-termination.ts` and its stated reasoning. Without it a 4,000-
   process host fails EVERY capture, degrading the whole subsystem permanently.

Separately, `readStructuredTuiProcessIdentity` polled a fresh whole-machine `ps`
every 50ms for up to 5s. Each capture costs ~0.065 CPU-s, and the 5s ceiling is
only reached when the child never appears — where the tight interval buys
nothing. The interval now holds at 50ms for the first second, then doubles to a
500ms cap. Identification latency is unchanged for any child appearing inside
that window, and the 5s ceiling is unchanged.
---
 .../structured-tui-process-identity.test.ts   | 122 ++++++++++-
 .../structured-tui-process-identity.ts        |  20 +-
 src/shared/process-table-snapshot.test.ts     | 190 +++++++++++++++++-
 src/shared/process-table-snapshot.ts          |  46 ++++-
 4 files changed, 354 insertions(+), 24 deletions(-)

diff --git a/src/main/runtime/structured-tui-process-identity.test.ts b/src/main/runtime/structured-tui-process-identity.test.ts
index e85294611f3..4324f8c5a26 100644
--- a/src/main/runtime/structured-tui-process-identity.test.ts
+++ b/src/main/runtime/structured-tui-process-identity.test.ts
@@ -60,8 +60,18 @@ describe('structured TUI process identity', () => {
         platform: 'darwin',
         readPosixRows: async () => [
           { pid: 100, ppid: 1, stat: 'Ss', command: '/bin/zsh' },
-          { pid: 101, ppid: 100, stat: 'S+', command: 'node /opt/codex/bin/codex resume abc' },
-          { pid: 102, ppid: 101, stat: 'S+', command: '/opt/codex/vendor/codex' }
+          {
+            pid: 101,
+            ppid: 100,
+            stat: 'S+',
+            command: 'node /opt/codex/bin/codex resume abc'
+          },
+          {
+            pid: 102,
+            ppid: 101,
+            stat: 'S+',
+            command: '/opt/codex/vendor/codex'
+          }
         ],
         readStartTime
       })
@@ -83,9 +93,27 @@ describe('structured TUI process identity', () => {
         agent: 'codex',
         platform: 'win32',
         readWindowsRows: async () => [
-          { pid: 100, ppid: 1, name: 'pwsh.exe', command: 'pwsh.exe', executablePath: '' },
-          { pid: 101, ppid: 100, name: 'codex.exe', command: 'codex resume a', executablePath: '' },
-          { pid: 102, ppid: 100, name: 'codex.exe', command: 'codex resume b', executablePath: '' }
+          {
+            pid: 100,
+            ppid: 1,
+            name: 'pwsh.exe',
+            command: 'pwsh.exe',
+            executablePath: ''
+          },
+          {
+            pid: 101,
+            ppid: 100,
+            name: 'codex.exe',
+            command: 'codex resume a',
+            executablePath: ''
+          },
+          {
+            pid: 102,
+            ppid: 100,
+            name: 'codex.exe',
+            command: 'codex resume b',
+            executablePath: ''
+          }
         ],
         timeoutMs: 0
       })
@@ -107,7 +135,14 @@ describe('structured TUI process identity', () => {
           return [
             { pid: 100, ppid: 1, stat: 'Ss', command: '/bin/zsh' },
             ...(snapshots >= 3
-              ? [{ pid: 101, ppid: 100, stat: 'S+', command: 'codex resume session-1' }]
+              ? [
+                  {
+                    pid: 101,
+                    ppid: 100,
+                    stat: 'S+',
+                    command: 'codex resume session-1'
+                  }
+                ]
               : [])
           ]
         },
@@ -128,6 +163,81 @@ describe('structured TUI process identity', () => {
     expect(delays).toEqual([25, 25])
   })
 
+  // Each poll forks a whole-machine `ps` (~0.065 CPU-s at 1,460 processes), so the
+  // capture COUNT per identification is the cost, not the 5s wall ceiling.
+  function countCapturesForIdentification(input: {
+    captureCostMs: number
+    childAppearsAtMs: number | null
+  }): Promise<{
+    captures: number
+    identifiedAtMs: number | null
+    elapsedMs: number
+  }> {
+    let clockMs = 0
+    let captures = 0
+    return readStructuredTuiProcessIdentity({
+      hostId: 'local',
+      rootPid: 100,
+      spawnToken: 'spawn-cost',
+      agent: 'codex',
+      platform: 'darwin',
+      readPosixRows: async () => {
+        captures += 1
+        clockMs += input.captureCostMs
+        return [
+          { pid: 100, ppid: 1, stat: 'Ss', command: '/bin/zsh' },
+          ...(input.childAppearsAtMs !== null && clockMs >= input.childAppearsAtMs
+            ? [
+                {
+                  pid: 101,
+                  ppid: 100,
+                  stat: 'S+',
+                  command: 'codex resume session-1'
+                }
+              ]
+            : [])
+        ]
+      },
+      readStartTime: async () => 1_700_000_000_000,
+      now: () => clockMs,
+      sleep: async (delayMs) => {
+        clockMs += delayMs
+      }
+    }).then(
+      () => ({ captures, identifiedAtMs: clockMs, elapsedMs: clockMs }),
+      () => ({ captures, identifiedAtMs: null, elapsedMs: clockMs })
+    )
+  }
+
+  it('does not spend a hundred ps captures on an identification that never resolves', async () => {
+    const { captures, identifiedAtMs, elapsedMs } = await countCapturesForIdentification({
+      captureCostMs: 55,
+      childAppearsAtMs: null
+    })
+
+    expect(identifiedAtMs).toBeNull()
+    // The 5s ceiling is unchanged; only the captures inside it are.
+    expect(elapsedMs).toBeGreaterThanOrEqual(5_000)
+    // A flat 50ms poll spends ~48 captures here.
+    expect(captures).toBeLessThanOrEqual(20)
+  })
+
+  it('keeps identification latency identical while a child can still plausibly appear', async () => {
+    // The backoff must not touch the window a real spawn lands in: same capture
+    // count and same detection time as the flat 50ms poll.
+    for (const childAppearsAtMs of [0, 200, 500, 900]) {
+      const flatPollCaptures = Math.max(1, Math.ceil(childAppearsAtMs / (55 + 50)) + 1)
+      const { captures, identifiedAtMs } = await countCapturesForIdentification({
+        captureCostMs: 55,
+        childAppearsAtMs
+      })
+
+      expect(identifiedAtMs).not.toBeNull()
+      expect(captures).toBeLessThanOrEqual(flatPollCaptures)
+      expect(identifiedAtMs!).toBeLessThanOrEqual(childAppearsAtMs + 55 + 50)
+    }
+  })
+
   it('fails closed when the process snapshot omitted the PTY root', async () => {
     await expect(
       readStructuredTuiProcessIdentity({
diff --git a/src/main/runtime/structured-tui-process-identity.ts b/src/main/runtime/structured-tui-process-identity.ts
index 031b29f2f0f..d973f6c3f85 100644
--- a/src/main/runtime/structured-tui-process-identity.ts
+++ b/src/main/runtime/structured-tui-process-identity.ts
@@ -15,6 +15,13 @@ type ProcessRow = { pid: number; ppid: number; command: string; foreground: bool
 
 const STRUCTURED_TUI_PROCESS_WAIT_MS = 5_000
 const STRUCTURED_TUI_PROCESS_POLL_MS = 50
+// Why: every poll forks a whole-machine `ps` (~0.065 CPU-s at 1,460 processes),
+// and the 5s ceiling is only reached when the child never appears at all — so the
+// tight interval buys nothing there. Hold it for the window in which a spawning
+// child plausibly lands (detection latency byte-identical), then widen. Past the
+// window the added latency is bounded by one interval.
+const STRUCTURED_TUI_PROCESS_FAST_POLL_WINDOW_MS = 1_000
+const STRUCTURED_TUI_PROCESS_MAX_POLL_MS = 500
 
 function descendants(rows: ProcessRow[], rootPid: number): (ProcessRow & { depth: number })[] {
   const children = new Map<number, ProcessRow[]>()
@@ -153,7 +160,9 @@ export async function readStructuredTuiProcessIdentity(input: {
   const platform = input.platform ?? process.platform
   const now = input.now ?? Date.now
   const sleep = input.sleep ?? ((delayMs) => new Promise((resolve) => setTimeout(resolve, delayMs)))
-  const deadline = now() + (input.timeoutMs ?? STRUCTURED_TUI_PROCESS_WAIT_MS)
+  const startedAtMs = now()
+  const deadline = startedAtMs + (input.timeoutMs ?? STRUCTURED_TUI_PROCESS_WAIT_MS)
+  let pollDelayMs = input.pollIntervalMs ?? STRUCTURED_TUI_PROCESS_POLL_MS
 
   while (true) {
     const rows: ProcessRow[] =
@@ -194,6 +203,13 @@ export async function readStructuredTuiProcessIdentity(input: {
       const label = input.agent === 'codex' ? 'Codex' : 'Claude'
       throw new Error(`The resumed terminal did not expose one exact ${label} child process.`)
     }
-    await sleep(Math.min(input.pollIntervalMs ?? STRUCTURED_TUI_PROCESS_POLL_MS, remainingMs))
+    await sleep(Math.min(pollDelayMs, remainingMs))
+    if (now() - startedAtMs >= STRUCTURED_TUI_PROCESS_FAST_POLL_WINDOW_MS) {
+      // Never below the caller's interval, so an explicitly slow poll stays slow.
+      pollDelayMs = Math.max(
+        pollDelayMs,
+        Math.min(pollDelayMs * 2, STRUCTURED_TUI_PROCESS_MAX_POLL_MS)
+      )
+    }
   }
 }
diff --git a/src/shared/process-table-snapshot.test.ts b/src/shared/process-table-snapshot.test.ts
index f773c46df09..5cf693dfdbf 100644
--- a/src/shared/process-table-snapshot.test.ts
+++ b/src/shared/process-table-snapshot.test.ts
@@ -15,6 +15,7 @@ import {
   parseProcessTableRows,
   parseStrictProcessTableRows,
   ProcessTableCaptureError,
+  PS_MAX_BUFFER_BYTES,
   resetProcessTableSnapshotForTests,
   type ProcessTableIndexStats
 } from './process-table-snapshot'
@@ -261,7 +262,14 @@ describe('shared process-table capture', () => {
 
     expect(forks()).toBe(1)
     expect(strict).toEqual([
-      { pid: 100, ppid: 1, pgid: 100, tpgid: 100, stat: 'Ss+', command: '/bin/zsh' }
+      {
+        pid: 100,
+        ppid: 1,
+        pgid: 100,
+        tpgid: 100,
+        stat: 'Ss+',
+        command: '/bin/zsh'
+      }
     ])
   })
 
@@ -293,7 +301,12 @@ describe('parseProcessTableRows', () => {
     )
     expect(rows).toEqual([
       { pid: 501, ppid: 1, stat: 'S', command: '/bin/zsh' },
-      { pid: 600, ppid: 501, stat: 'S+', command: 'node /path/bin/codex --flag' }
+      {
+        pid: 600,
+        ppid: 501,
+        stat: 'S+',
+        command: 'node /path/bin/codex --flag'
+      }
     ])
   })
 
@@ -320,11 +333,46 @@ describe('parseStrictProcessTableRows', () => {
         stat: 'I',
         command: '[pool_workqueue_release]'
       },
-      { pid: 4, ppid: 2, pgid: 0, tpgid: -1, stat: 'I', command: '[kworker/R-rcu_g]' },
-      { pid: 5, ppid: 2, pgid: 0, tpgid: -1, stat: 'I', command: '[kworker/R-sync_wq]' },
-      { pid: 6, ppid: 2, pgid: 0, tpgid: -1, stat: 'I', command: '[kworker/R-slub_]' },
-      { pid: 100, ppid: 1, pgid: 100, tpgid: 100, stat: 'Ss+', command: '/bin/bash -l' },
-      { pid: 101, ppid: 100, pgid: 101, tpgid: 101, stat: 'S+', command: 'node /opt/codex' }
+      {
+        pid: 4,
+        ppid: 2,
+        pgid: 0,
+        tpgid: -1,
+        stat: 'I',
+        command: '[kworker/R-rcu_g]'
+      },
+      {
+        pid: 5,
+        ppid: 2,
+        pgid: 0,
+        tpgid: -1,
+        stat: 'I',
+        command: '[kworker/R-sync_wq]'
+      },
+      {
+        pid: 6,
+        ppid: 2,
+        pgid: 0,
+        tpgid: -1,
+        stat: 'I',
+        command: '[kworker/R-slub_]'
+      },
+      {
+        pid: 100,
+        ppid: 1,
+        pgid: 100,
+        tpgid: 100,
+        stat: 'Ss+',
+        command: '/bin/bash -l'
+      },
+      {
+        pid: 101,
+        ppid: 100,
+        pgid: 101,
+        tpgid: 101,
+        stat: 'S+',
+        command: 'node /opt/codex'
+      }
     ])
   })
 
@@ -334,7 +382,14 @@ describe('parseStrictProcessTableRows', () => {
         ' PID PPID PGID TPGID STAT COMMAND\r\n 100 1 100 101 Ss /bin/zsh -l\r\n 101 100 101 101 S+ node /opt/codex --flag  value\r\n'
       )
     ).toEqual([
-      { pid: 100, ppid: 1, pgid: 100, tpgid: 101, stat: 'Ss', command: '/bin/zsh -l' },
+      {
+        pid: 100,
+        ppid: 1,
+        pgid: 100,
+        tpgid: 101,
+        stat: 'Ss',
+        command: '/bin/zsh -l'
+      },
       {
         pid: 101,
         ppid: 100,
@@ -348,10 +403,24 @@ describe('parseStrictProcessTableRows', () => {
 
   it('accepts no-controlling-tty sentinels for later unverifiable classification', () => {
     expect(parseStrictProcessTableRows('100 1 100 0 Ss /bin/zsh')).toEqual([
-      { pid: 100, ppid: 1, pgid: 100, tpgid: 0, stat: 'Ss', command: '/bin/zsh' }
+      {
+        pid: 100,
+        ppid: 1,
+        pgid: 100,
+        tpgid: 0,
+        stat: 'Ss',
+        command: '/bin/zsh'
+      }
     ])
     expect(parseStrictProcessTableRows('100 1 100 -1 Ss /bin/zsh')).toEqual([
-      { pid: 100, ppid: 1, pgid: 100, tpgid: -1, stat: 'Ss', command: '/bin/zsh' }
+      {
+        pid: 100,
+        ppid: 1,
+        pgid: 100,
+        tpgid: -1,
+        stat: 'Ss',
+        command: '/bin/zsh'
+      }
     ])
   })
 
@@ -416,7 +485,11 @@ describe('getProcessTableIndex', () => {
 
   it('keeps the memo out of measured builds so a cache hit cannot satisfy a perf gate', () => {
     const rows = parseProcessTableRows('100 1 Ss bash')
-    const stats: ProcessTableIndexStats = { indexBuilds: 0, rowVisits: 0, indexLookups: 0 }
+    const stats: ProcessTableIndexStats = {
+      indexBuilds: 0,
+      rowVisits: 0,
+      indexLookups: 0
+    }
 
     const memoized = getProcessTableIndex(rows)
     const measured = buildProcessTableIndex(rows, stats)
@@ -428,3 +501,98 @@ describe('getProcessTableIndex', () => {
     expect(getProcessTableIndex(rows)).toBe(memoized)
   })
 })
+
+describe('process-table capture completeness', () => {
+  const NODE_DEFAULT_MAX_BUFFER_BYTES = 1024 * 1024
+
+  beforeEach(() => {
+    execFileMock.mockReset()
+    resetProcessTableSnapshotForTests()
+  })
+
+  /**
+   * Emulate Node's own execFile buffering: over `maxBuffer` it kills the child and
+   * calls back with ERR_CHILD_PROCESS_STDIO_MAXBUFFER plus the truncated bytes. A
+   * mock that always resolves would hide the very ceiling under test.
+   */
+  function mockPsWithNodeBufferSemantics(stdout: string): void {
+    execFileMock.mockImplementation(
+      (_command: string, _args: string[], options: unknown, callback: unknown) => {
+        const done = callback as (err: unknown, result: { stdout: string; stderr: string }) => void
+        const maxBuffer =
+          (options as { maxBuffer?: number })?.maxBuffer ?? NODE_DEFAULT_MAX_BUFFER_BYTES
+        if (Buffer.byteLength(stdout, 'utf-8') > maxBuffer) {
+          const error = Object.assign(new Error('stdout maxBuffer length exceeded'), {
+            code: 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER'
+          })
+          done(error, { stdout: stdout.slice(0, maxBuffer), stderr: '' })
+          return
+        }
+        done(null, { stdout, stderr: '' })
+      }
+    )
+  }
+
+  function busyHostTable(processCount: number): string {
+    // ~285 bytes/row, so 4k processes clears 1MB the way a real busy host does.
+    const argv = `/usr/bin/node ${'--inspect-brk-and-a-long-flag '.repeat(8)}server.js`
+    return `${Array.from(
+      { length: processCount },
+      (_, index) => `${1000 + index} 1 ${1000 + index} ${1000 + index} S+ ${argv}`
+    ).join('\n')}\n`
+  }
+
+  it('reads a busy host whose table overflows execFile 1MB default', async () => {
+    const table = busyHostTable(4_000)
+    expect(Buffer.byteLength(table, 'utf-8')).toBeGreaterThan(NODE_DEFAULT_MAX_BUFFER_BYTES)
+    mockPsWithNodeBufferSemantics(table)
+
+    // Without an explicit maxBuffer this rejects, so the whole subsystem degrades
+    // to "unverifiable" on every capture for as long as the host stays busy.
+    await expect(getProcessTableSnapshot()).resolves.toHaveLength(4_000)
+  })
+
+  it('reports a truncated capture as unreadable rather than a silently short table', async () => {
+    const table = busyHostTable(200)
+    const truncated = table + 'x'.repeat(PS_MAX_BUFFER_BYTES - table.length)
+    // A capture that stopped at the ceiling but still resolved: the lenient parser
+    // drops the cut tail without complaint, so 200 of N processes would read as
+    // the complete list — a false "no agent" the execution boundary forbids.
+    expect(parseProcessTableRows(truncated)).toHaveLength(200)
+    execFileMock.mockImplementation(
+      (_command: string, _args: string[], _options: unknown, callback: unknown) => {
+        ;(callback as (err: unknown, result: { stdout: string; stderr: string }) => void)(null, {
+          stdout: truncated,
+          stderr: ''
+        })
+      }
+    )
+
+    await expect(getProcessTableSnapshot()).rejects.toThrow(ProcessTableCaptureError)
+    await expect(getProcessTableSnapshot()).rejects.toThrow('capture_truncated')
+  })
+
+  it('names a buffer-ceiling rejection as truncation on both views', async () => {
+    mockPsWithNodeBufferSemantics('x'.repeat(PS_MAX_BUFFER_BYTES + 1))
+
+    await expect(getProcessTableSnapshot()).rejects.toThrow('capture_truncated')
+    resetProcessTableSnapshotForTests()
+    await expect(getStrictProcessTableSnapshot()).rejects.toThrow('capture_truncated')
+  })
+
+  it('reports an empty capture as unreadable rather than an empty process table', async () => {
+    // The lenient view used to answer [] here: zero processes on a machine that is
+    // by definition running at least `ps` itself.
+    execFileMock.mockImplementation(
+      (_command: string, _args: string[], _options: unknown, callback: unknown) => {
+        ;(callback as (err: unknown, result: { stdout: string; stderr: string }) => void)(null, {
+          stdout: '   \n',
+          stderr: ''
+        })
+      }
+    )
+
+    await expect(getProcessTableSnapshot()).rejects.toThrow(ProcessTableCaptureError)
+    await expect(getProcessTableSnapshot()).rejects.toThrow('empty_capture')
+  })
+})
diff --git a/src/shared/process-table-snapshot.ts b/src/shared/process-table-snapshot.ts
index 54764767740..8340ae37a1b 100644
--- a/src/shared/process-table-snapshot.ts
+++ b/src/shared/process-table-snapshot.ts
@@ -10,6 +10,11 @@ const execFile = promisify(execFileCb)
 /** Columns used by the evidence reader. Keep command last so its spaces survive parsing. */
 export const PS_ARGS = ['-axo', 'pid=,ppid=,pgid=,tpgid=,stat=,command='] as const
 const PS_TIMEOUT_MS = 3000
+// Why: execFile's 1MB default leaves ~3x headroom (326KB / 1,460 processes, and
+// a single 5KB argv row is ordinary), so a busy host overflows it and then EVERY
+// capture fails — a readable process table degrading into permanent
+// "unverifiable". Matches the sibling reader in pty-descendant-termination.ts.
+export const PS_MAX_BUFFER_BYTES = 32 * 1024 * 1024
 
 // Why: 500ms is below the active cadence poll's minimum inter-poll gap (~675ms
 // = 750ms less jitter), so a cadence-driven pane never reuses a snapshot older
@@ -388,13 +393,44 @@ function createProcessTableCapture(stdout: string): ProcessTableCapture {
   }
 }
 
+/**
+ * Reject a capture that cannot be a whole process table.
+ *
+ * Why this is not redundant with the buffer ceiling: `parseProcessTableRows`
+ * drops unparseable lines, so a short capture reads as a *complete* table whose
+ * missing processes simply are not running — a false "no agent"/"no children",
+ * i.e. the `unverifiable` -> `exited` collapse the execution boundary forbids.
+ * Only the strict view would notice today; the lenient view would not. A capture
+ * that stopped at the ceiling, or that carries no rows at all, is unreadable
+ * evidence and must fail loudly on both views.
+ */
+function assertWholeCapture(stdout: string): string {
+  if (Buffer.byteLength(stdout, 'utf-8') >= PS_MAX_BUFFER_BYTES) {
+    throw new ProcessTableCaptureError('capture_truncated')
+  }
+  if (!/\S/.test(stdout)) {
+    throw new ProcessTableCaptureError('empty_capture')
+  }
+  return stdout
+}
+
 const processTableReader = createProcessTableSnapshotReader<ProcessTableCapture>({
   runPs: async () => {
-    const { stdout } = await execFile('ps', [...PS_ARGS], {
-      encoding: 'utf-8',
-      timeout: PS_TIMEOUT_MS
-    })
-    return createProcessTableCapture(stdout)
+    let stdout: string
+    try {
+      ;({ stdout } = await execFile('ps', [...PS_ARGS], {
+        encoding: 'utf-8',
+        timeout: PS_TIMEOUT_MS,
+        maxBuffer: PS_MAX_BUFFER_BYTES
+      }))
+    } catch (error) {
+      // A ceiling hit is truncation, not absence: name it in the domain vocabulary.
+      if ((error as { code?: unknown } | null)?.code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER') {
+        throw new ProcessTableCaptureError('capture_truncated')
+      }
+      throw error
+    }
+    return createProcessTableCapture(assertWholeCapture(stdout))
   },
   now: () => Date.now()
 })

From d4fa0917144ddfd666ddc4c37bcc841034556fcb Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:22:29 -0700
Subject: [PATCH 74/92] perf(terminal): repaint only the rows an agent redraw
 touched (#18169)

Forced foreground repaints asked xterm for rows 0..rows-1. xterm's render
debouncer unions ranges, so one full-grid request widened every frame to a
whole-viewport `_updateModel` cell walk even when the write changed five rows.
Re-issue the repair over the parse's own dirty span instead, keeping the
whole grid for viewport scroll, alternate-screen flips, and any write whose
span cannot be observed.
---
 config/reliability-gates.jsonc                |  84 ++++
 .../pane-terminal-foreground-render-settle.ts |  82 +++-
 ...inal-foreground-repair-convergence.test.ts | 364 ++++++++++++++++++
 .../terminal-parsed-dirty-rows.ts             | 119 ++++++
 4 files changed, 635 insertions(+), 14 deletions(-)
 create mode 100644 src/renderer/src/lib/pane-manager/terminal-foreground-repair-convergence.test.ts
 create mode 100644 src/renderer/src/lib/pane-manager/terminal-parsed-dirty-rows.ts

diff --git a/config/reliability-gates.jsonc b/config/reliability-gates.jsonc
index 83de3128ecf..c36412c0383 100644
--- a/config/reliability-gates.jsonc
+++ b/config/reliability-gates.jsonc
@@ -13863,6 +13863,90 @@
       "knownGaps": ["No manifest command yet.", "No Windows CJK/emoji repaint command is wired."],
       "demotionRule": "Cannot promote if the oracle is screenshot-only or environment-skipped."
     },
+    {
+      "id": "terminal-render.foreground-repair-span",
+      "title": "A forced foreground repaint covers every row the write changed",
+      "maturity": "experimental",
+      "protection": "partial",
+      "owner": "terminal-rendering",
+      "layer": "renderer-unit",
+      "surfaces": [
+        "foreground PTY output",
+        "in-place agent redraws",
+        "erase-in-line/display",
+        "alternate screen",
+        "scroll",
+        "wide glyphs"
+      ],
+      "platforms": ["macos", "linux", "windows"],
+      "providers": ["local", "daemon", "ssh", "remote-runtime"],
+      "coveredPlatforms": ["macos"],
+      "coveredProviders": [],
+      "coverageNotes": "Renderer-unit convergence corpus over a real xterm parser, plus manual CDP pixel evidence on the macOS WebGL renderer. The repaint span is provider-independent because it is computed from xterm's parse, not from the transport; SSH/WSL/remote were not exercised live.",
+      "motivatingLinks": [
+        "https://github.com/stablyai/orca/pull/2669",
+        "https://github.com/stablyai/orca/pull/4669",
+        "https://github.com/stablyai/orca/pull/8178"
+      ],
+      "invariant": "The row span Orca asks xterm to repaint after a forced foreground refresh must cover every viewport row whose rendered content changed during that write, plus the cursor row before and after it; when the span cannot be established — unobservable parse, viewport scroll, or a normal/alternate buffer flip — the whole viewport must be repainted.",
+      "oracle": "A real @xterm/headless parser replays an adversarial corpus (in-place bottom-row redraws, standalone CR overwrite, backspace, erase-in-line, erase-in-display above and below the cursor, full clear, wide CJK, emoji, combining marks, ZWJ sequences, scroll-region insert/delete, reverse index, DEC 2026 frames, alternate-screen enter and exit, viewport scroll, narrow panes). Each viewport row is serialized cell-by-cell with its attributes before and after the write, and every row that differs must fall inside the span the settle path requested. A vacuity guard asserts each case actually moves the screen.",
+      "commands": [
+        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/lib/pane-manager/terminal-foreground-repair-convergence.test.ts"
+      ],
+      "testFiles": [
+        "src/renderer/src/lib/pane-manager/terminal-foreground-repair-convergence.test.ts"
+      ],
+      "assertionRefs": [
+        {
+          "file": "src/renderer/src/lib/pane-manager/terminal-foreground-repair-convergence.test.ts",
+          "assertions": [
+            "every viewport row whose serialized cells changed lies inside the requested repaint span",
+            "the cursor row before and after the write is inside the requested repaint span",
+            "viewport scroll and alternate-screen transitions still request the whole grid",
+            "an unobservable parse span falls back to the whole grid",
+            "an in-place bottom-row redraw narrows well below the full grid"
+          ]
+        }
+      ],
+      "evidenceRuns": [
+        {
+          "date": "2026-09-02",
+          "runner": "local",
+          "platform": "macos",
+          "result": "passed",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/lib/pane-manager/terminal-foreground-repair-convergence.test.ts",
+          "durationSeconds": 1,
+          "summary": "25 cases passed against a real xterm parser; paired CDP run on a 4-pane macOS WebGL dev build produced screenshots byte-identical to a forced full model rebuild."
+        }
+      ],
+      "runtimeBudget": {
+        "p95Seconds": 15,
+        "scope": "Renderer-unit convergence corpus"
+      },
+      "flakeHistory": {
+        "status": "not-started",
+        "evidence": "New deterministic gate; no soak history yet."
+      },
+      "redGreenEvidence": {
+        "status": "complete",
+        "evidence": "Narrowing the span to the cursor rows alone (dropping xterm's parse span) fails the claude-style in-place redraw and erase-in-display-above cases; reading buffer indices instead of viewport rows made the corpus vacuous and is now blocked by the changed-row guard."
+      },
+      "performanceBudget": {
+        "required": true,
+        "evidence": "Measured on a focused, visible 4-pane macOS dev build under an agent-style in-place redraw load: rendered cells/s 157,708 -> 30,139 and forEachDecorationAtCell 320,868/s -> 60,652/s with render frames/s unchanged (59.8 -> 60.5)."
+      },
+      "promotionCriteria": [
+        "Add Windows DOM-renderer coverage for the synchronous repair branch.",
+        "Wire pixel or cell evidence for the alternate-screen and reflow paths into CI rather than manual CDP runs.",
+        "Keep a full-grid fallback assertion for every new span-narrowing condition."
+      ],
+      "knownGaps": [
+        "No CI-wired pixel oracle; WebGL convergence evidence was collected manually over CDP.",
+        "Windows ConPTY synchronous repair path is covered only by the shared corpus, not on a Windows runner.",
+        "SSH/WSL/remote providers were not exercised live; the span is transport-independent by construction."
+      ],
+      "demotionRule": "Demote or block if a narrowing condition is added without a matching convergence case, if the corpus stops asserting that each case changes at least one row, or if a repaint regression is reported for in-place agent redraws."
+    },
     {
       "id": "terminal-shell.windows-resolution-parity",
       "title": "Windows local and daemon providers resolve shells and startup commands consistently",
diff --git a/src/renderer/src/lib/pane-manager/pane-terminal-foreground-render-settle.ts b/src/renderer/src/lib/pane-manager/pane-terminal-foreground-render-settle.ts
index 508fb7e1240..89198580cf3 100644
--- a/src/renderer/src/lib/pane-manager/pane-terminal-foreground-render-settle.ts
+++ b/src/renderer/src/lib/pane-manager/pane-terminal-foreground-render-settle.ts
@@ -1,9 +1,16 @@
 import { forceRepaintThroughRenderPause } from './terminal-render-pause-release'
+import {
+  disposeParsedDirtyRows,
+  readParsedDirtyRowSpan,
+  resetParsedDirtyRows,
+  type ParsedDirtyRowSpan
+} from './terminal-parsed-dirty-rows'
 import { runGuardedWriteCompletionStep } from './xterm-write-callback-guard'
 
 export type ForegroundTerminalOutputTarget = {
   buffer?: {
     active?: {
+      type?: string
       cursorY?: number
       baseY?: number
       viewportY?: number
@@ -32,6 +39,8 @@ const pendingViewportSettleRefreshByTerminal = new WeakMap<
 >()
 
 type ViewportSnapshot = {
+  type: string | null
+  cursorY: number | null
   baseY: number | null
   viewportY: number | null
 }
@@ -39,7 +48,8 @@ type ViewportSnapshot = {
 function refreshVisibleRows(
   terminal: ForegroundTerminalOutputTarget,
   synchronously: boolean,
-  shouldReleaseRenderPause?: () => boolean
+  shouldReleaseRenderPause?: () => boolean,
+  span?: ParsedDirtyRowSpan | null
 ): void {
   if (typeof terminal.rows !== 'number' || terminal.rows < 1) {
     return
@@ -51,10 +61,14 @@ function refreshVisibleRows(
     if (shouldReleaseRenderPause?.() === true && forceRepaintThroughRenderPause(terminal)) {
       return
     }
-    const start = 0
-    const end = Math.max(0, terminal.rows - 1)
+    const lastRow = Math.max(0, terminal.rows - 1)
+    // Why not always the whole grid: xterm's render debouncer unions ranges, so a
+    // 0..rows-1 repair request turns every frame into a full-viewport cell walk.
+    // `span` is the parse's own dirty rows; `null` keeps the whole-grid repaint.
+    const start = span ? Math.min(Math.max(span.start, 0), lastRow) : 0
+    const end = span ? Math.min(Math.max(span.end, start), lastRow) : lastRow
     // Why: DOM-rendered Windows ConPTY rewrites need an immediate repair, while
-    // WebGL can merge this full-grid request into xterm's already-queued frame.
+    // WebGL can merge this request into xterm's already-queued frame.
     if (synchronously && typeof terminal._core?.refresh === 'function') {
       terminal._core.refresh(start, end, true)
       return
@@ -70,20 +84,19 @@ function refreshVisibleRows(
 }
 
 function captureViewportSnapshot(terminal: ForegroundTerminalOutputTarget): ViewportSnapshot {
+  const active = terminal.buffer?.active
   return {
-    baseY: typeof terminal.buffer?.active?.baseY === 'number' ? terminal.buffer.active.baseY : null,
-    viewportY:
-      typeof terminal.buffer?.active?.viewportY === 'number'
-        ? terminal.buffer.active.viewportY
-        : null
+    type: typeof active?.type === 'string' ? active.type : null,
+    cursorY: typeof active?.cursorY === 'number' ? active.cursorY : null,
+    baseY: typeof active?.baseY === 'number' ? active.baseY : null,
+    viewportY: typeof active?.viewportY === 'number' ? active.viewportY : null
   }
 }
 
 function viewportChangedDuringWrite(
-  terminal: ForegroundTerminalOutputTarget,
-  beforeWrite: ViewportSnapshot
+  beforeWrite: ViewportSnapshot,
+  afterWrite: ViewportSnapshot
 ): boolean {
-  const afterWrite = captureViewportSnapshot(terminal)
   return (
     afterWrite.baseY !== null &&
     afterWrite.viewportY !== null &&
@@ -91,6 +104,39 @@ function viewportChangedDuringWrite(
   )
 }
 
+/**
+ * The rows this write's repair must cover: the parse's own dirty span widened by
+ * the cursor rows on both sides of the write.
+ *
+ * Why the cursor rows: xterm's WebGL model drops its cursor whenever an update
+ * pass excludes the cursor row, so a repair that skips it would blank the caret.
+ * Returns `null` — repaint everything — whenever the span is unknown, the
+ * viewport scrolled (dirty rows were recorded against the pre-scroll origin), or
+ * the write flipped between the normal and alternate buffer.
+ */
+function repairRowSpan(
+  terminal: ForegroundTerminalOutputTarget,
+  beforeWrite: ViewportSnapshot,
+  afterWrite: ViewportSnapshot
+): ParsedDirtyRowSpan | null {
+  if (beforeWrite.type !== afterWrite.type || viewportChangedDuringWrite(beforeWrite, afterWrite)) {
+    return null
+  }
+  const parsed = readParsedDirtyRowSpan(terminal)
+  if (!parsed) {
+    return null
+  }
+  let { start, end } = parsed
+  for (const cursorY of [beforeWrite.cursorY, afterWrite.cursorY]) {
+    if (cursorY === null) {
+      return null
+    }
+    start = Math.min(start, cursorY)
+    end = Math.max(end, cursorY)
+  }
+  return { start, end }
+}
+
 function cancelScheduledViewportSettleRefresh(terminal: ForegroundTerminalOutputTarget): void {
   const pending = pendingViewportSettleRefreshByTerminal.get(terminal)
   if (!pending) {
@@ -133,17 +179,19 @@ function settleForegroundRender(
   beforeWriteViewport: ViewportSnapshot,
   options: ForegroundTerminalWriteOptions
 ): void {
+  const afterWriteViewport = captureViewportSnapshot(terminal)
   refreshVisibleRows(
     terminal,
     options.shouldRefreshViewportSynchronously?.() ?? true,
-    options.shouldReleaseRenderPause
+    options.shouldReleaseRenderPause,
+    repairRowSpan(terminal, beforeWriteViewport, afterWriteViewport)
   )
   // Why: when output advances the viewport, Chromium can paint the freshly
   // scrolled top row one frame later than xterm finishes parsing. Repaint once
   // more after the scroll settles so the user doesn't need to jiggle the window.
   if (
     options.followupViewportRefresh ||
-    viewportChangedDuringWrite(terminal, beforeWriteViewport)
+    viewportChangedDuringWrite(beforeWriteViewport, afterWriteViewport)
   ) {
     scheduleViewportSettleRefresh(
       terminal,
@@ -161,6 +209,11 @@ export function writeForegroundTerminalChunk(
   const beforeWriteViewport = options.forceViewportRefresh
     ? captureViewportSnapshot(terminal)
     : null
+  if (beforeWriteViewport) {
+    // Why here and not in the callback: the span must cover only this write's
+    // parse, and xterm fires its dirty-row request between the two.
+    resetParsedDirtyRows(terminal)
+  }
   // Why guarded steps: this callback runs inside xterm's WriteBuffer loop,
   // where an escaping throw permanently wedges the terminal (see
   // xterm-write-callback-guard.ts). Guard settle and onParsed separately so a
@@ -190,4 +243,5 @@ export function writeForegroundTerminalChunk(
 
 export function discardForegroundRenderSettle(terminal: ForegroundTerminalOutputTarget): void {
   cancelScheduledViewportSettleRefresh(terminal)
+  disposeParsedDirtyRows(terminal)
 }
diff --git a/src/renderer/src/lib/pane-manager/terminal-foreground-repair-convergence.test.ts b/src/renderer/src/lib/pane-manager/terminal-foreground-repair-convergence.test.ts
new file mode 100644
index 00000000000..de18152558f
--- /dev/null
+++ b/src/renderer/src/lib/pane-manager/terminal-foreground-repair-convergence.test.ts
@@ -0,0 +1,364 @@
+import { Terminal } from '@xterm/headless'
+import { describe, expect, it } from 'vitest'
+
+import {
+  discardForegroundRenderSettle,
+  writeForegroundTerminalChunk,
+  type ForegroundTerminalOutputTarget
+} from './pane-terminal-foreground-render-settle'
+
+/**
+ * Convergence oracle for the narrowed foreground repaint.
+ *
+ * Invariant (`terminal-geometry.visible-convergence`): the rows Orca asks xterm
+ * to repaint after a forced foreground refresh must cover every viewport row
+ * whose rendered content changed during that write, plus the cursor row on both
+ * sides of it. A renderer whose model was converged before the write is then
+ * still converged after it, so narrowing the span can never strand a stale cell.
+ *
+ * A `null` span means "repaint the whole viewport" and trivially converges; the
+ * corpus below also asserts which cases must stay full-grid.
+ */
+
+type SpanRequest = { start: number; end: number }
+
+type Harness = {
+  terminal: Terminal
+  target: ForegroundTerminalOutputTarget
+  requests: SpanRequest[]
+}
+
+function createHarness(cols = 80, rows = 24): Harness {
+  const terminal = new Terminal({ cols, rows, allowProposedApi: true })
+  const requests: SpanRequest[] = []
+  const target = terminal as unknown as ForegroundTerminalOutputTarget & {
+    refresh: (start: number, end: number) => void
+  }
+  target.refresh = (start: number, end: number) => {
+    requests.push({ start, end })
+  }
+  return { terminal, target, requests }
+}
+
+function serializeRow(terminal: Terminal, viewportRow: number): string {
+  // Why the offset: `getLine` indexes the whole buffer, so viewport row 0 is the
+  // line at `viewportY`. Comparing raw buffer indices would compare scrollback
+  // that no write can touch and make the oracle vacuous.
+  const line = terminal.buffer.active.getLine(terminal.buffer.active.viewportY + viewportRow)
+  if (!line) {
+    return '<missing>'
+  }
+  const parts: string[] = []
+  for (let x = 0; x < terminal.cols; x++) {
+    const cell = line.getCell(x)
+    if (!cell) {
+      parts.push('~')
+      continue
+    }
+    parts.push(
+      [
+        cell.getChars(),
+        cell.getWidth(),
+        cell.getFgColorMode(),
+        cell.getFgColor(),
+        cell.getBgColorMode(),
+        cell.getBgColor(),
+        cell.isBold(),
+        cell.isItalic(),
+        cell.isDim(),
+        cell.isUnderline(),
+        cell.isBlink(),
+        cell.isInverse(),
+        cell.isInvisible(),
+        cell.isStrikethrough(),
+        cell.isOverline()
+      ].join(':')
+    )
+  }
+  return parts.join('|')
+}
+
+function snapshotViewport(terminal: Terminal): string[] {
+  const rows: string[] = []
+  for (let y = 0; y < terminal.rows; y++) {
+    rows.push(serializeRow(terminal, y))
+  }
+  return rows
+}
+
+function changedRows(before: string[], after: string[]): number[] {
+  const changed: number[] = []
+  for (let y = 0; y < Math.max(before.length, after.length); y++) {
+    if (before[y] !== after[y]) {
+      changed.push(y)
+    }
+  }
+  return changed
+}
+
+async function writeAndSettle(harness: Harness, data: string): Promise<void> {
+  await new Promise<void>((resolve) => {
+    const accepted = writeForegroundTerminalChunk(harness.target, data, {
+      forceViewportRefresh: true,
+      // Why: headless has no `_core.refresh`, so drive the public `refresh` path
+      // the WebGL/async branch uses in the app.
+      shouldRefreshViewportSynchronously: () => false,
+      onParsed: () => resolve()
+    })
+    expect(accepted).toBe(true)
+  })
+}
+
+/** Seed the pane without measuring: plain writes, drained before the oracle runs. */
+async function seed(harness: Harness, data: string): Promise<void> {
+  await new Promise<void>((resolve) => {
+    harness.terminal.write(data, () => resolve())
+  })
+}
+
+type Case = {
+  name: string
+  setup?: string
+  write: string
+  /** Whole-viewport repaint is required (scroll, buffer flip, unknown span). */
+  expectFullGrid?: boolean
+  cols?: number
+  rows?: number
+}
+
+const SCROLLBACK_SEED = `${Array.from({ length: 40 }, (_, i) => `line ${i} ${'lorem ipsum '.repeat(3)}`).join('\r\n')}\r\n\r\n\r\n\r\n`
+
+const CLAUDE_STYLE_REDRAW = `\x1b[?25l\x1b[4A\x1b[2K* Thinking… (12s)\r\n\x1b[2K  > tool call 3\r\n\x1b[2K  ${'#'.repeat(30)}\r\n\x1b[2K\r\n\x1b[?25h`
+
+const CASES: Case[] = [
+  {
+    name: 'claude-style in-place redraw of the bottom rows',
+    setup: SCROLLBACK_SEED,
+    write: CLAUDE_STYLE_REDRAW
+  },
+  {
+    name: 'standalone carriage-return overwrite of the current line',
+    setup: `${SCROLLBACK_SEED}some existing prompt text`,
+    write: '\rrewritten prompt'
+  },
+  {
+    name: 'backspace erase',
+    setup: `${SCROLLBACK_SEED}abcdef`,
+    write: '\b\b\b   \b\b\b'
+  },
+  {
+    name: 'erase in line to end',
+    setup: `${SCROLLBACK_SEED}${'x'.repeat(70)}`,
+    write: '\x1b[20G\x1b[K'
+  },
+  {
+    name: 'erase in line, whole line',
+    setup: `${SCROLLBACK_SEED}${'x'.repeat(70)}`,
+    write: '\x1b[2K'
+  },
+  {
+    name: 'erase in display from mid-screen to end',
+    setup: `${SCROLLBACK_SEED}${Array.from({ length: 10 }, (_, i) => `row ${i} ${'y'.repeat(40)}`).join('\r\n')}`,
+    write: '\x1b[12;5H\x1b[J'
+  },
+  {
+    name: 'erase in display, above cursor',
+    setup: `${SCROLLBACK_SEED}${Array.from({ length: 10 }, (_, i) => `row ${i} ${'y'.repeat(40)}`).join('\r\n')}`,
+    write: '\x1b[12;5H\x1b[1J'
+  },
+  {
+    name: 'full clear then home',
+    setup: SCROLLBACK_SEED,
+    write: '\x1b[2J\x1b[H'
+  },
+  {
+    name: 'wide CJK glyphs rewritten in place',
+    setup: `${SCROLLBACK_SEED}${'漢字テスト'.repeat(6)}`,
+    write: '\r\x1b[2K中文字符测试中文字符测试'
+  },
+  {
+    name: 'emoji rewritten in place',
+    setup: `${SCROLLBACK_SEED}status: 🚀🚀🚀 building`,
+    write: '\r\x1b[2Kstatus: ✅ done 🎉'
+  },
+  {
+    name: 'combining characters rewritten in place',
+    setup: `${SCROLLBACK_SEED}café naïve`,
+    write: '\r\x1b[2Kcafé́ é̀̂ done'
+  },
+  {
+    name: 'zero-width-joiner sequence',
+    setup: `${SCROLLBACK_SEED}team: `,
+    write: '\r\x1b[2Kteam: \u{1F469}‍\u{1F4BB} \u{1F468}‍\u{1F373}'
+  },
+  {
+    name: 'insert lines inside a scroll region',
+    setup: `${SCROLLBACK_SEED}${Array.from({ length: 12 }, (_, i) => `region ${i}`).join('\r\n')}`,
+    write: '\x1b[5;18r\x1b[8;1H\x1b[3L\x1b[r'
+  },
+  {
+    name: 'delete lines inside a scroll region',
+    setup: `${SCROLLBACK_SEED}${Array.from({ length: 12 }, (_, i) => `region ${i}`).join('\r\n')}`,
+    write: '\x1b[5;18r\x1b[8;1H\x1b[3M\x1b[r'
+  },
+  {
+    name: 'reverse index at the top of the screen scrolls content down',
+    setup: `${SCROLLBACK_SEED}${Array.from({ length: 12 }, (_, i) => `ri ${i}`).join('\r\n')}`,
+    write: '\x1b[1;1H\x1bM\x1bM'
+  },
+  {
+    name: 'cursor jump then paint on a far row',
+    setup: `${SCROLLBACK_SEED}${Array.from({ length: 12 }, (_, i) => `jump ${i}`).join('\r\n')}`,
+    write: '\x1b[2;5Hpainted far away\x1b[K'
+  },
+  {
+    name: 'DEC synchronized-output frame touching scattered rows',
+    setup: `${SCROLLBACK_SEED}${Array.from({ length: 20 }, (_, i) => `tui ${i}`).join('\r\n')}`,
+    write:
+      '\x1b[?2026h\x1b[?25l\x1b[1;2H\x1b[38;2;255;138;0m/ agent\x1b[0m\x1b[9;4Hbody row\x1b[K\x1b[23;2Hstream 0001\x1b[K\x1b[?25h\x1b[?2026l'
+  },
+  {
+    name: 'newline past the bottom scrolls the viewport',
+    setup: SCROLLBACK_SEED,
+    write: '\x1b[2Kfresh output line\r\n',
+    expectFullGrid: true
+  },
+  {
+    name: 'entering the alternate screen',
+    setup: SCROLLBACK_SEED,
+    write: '\x1b[?1049h\x1b[2J\x1b[H\x1b[Khello alt screen',
+    expectFullGrid: true
+  },
+  {
+    name: 'leaving the alternate screen',
+    setup: `${SCROLLBACK_SEED}\x1b[?1049h\x1b[2J\x1b[Halt content\x1b[K`,
+    write: '\x1b[?1049l\x1b[2K',
+    expectFullGrid: true
+  },
+  {
+    name: 'narrow pane, full-width in-place rewrite',
+    cols: 40,
+    rows: 12,
+    setup: 'z'.repeat(38),
+    write: `\r\x1b[2K${'q'.repeat(38)}`
+  }
+]
+
+describe('foreground repaint convergence', () => {
+  for (const testCase of CASES) {
+    it(`covers every changed row: ${testCase.name}`, async () => {
+      const harness = createHarness(testCase.cols ?? 80, testCase.rows ?? 24)
+      if (testCase.setup) {
+        await seed(harness, testCase.setup)
+      }
+      const before = snapshotViewport(harness.terminal)
+      const cursorBefore = harness.terminal.buffer.active.cursorY
+      harness.requests.length = 0
+
+      await writeAndSettle(harness, testCase.write)
+
+      const after = snapshotViewport(harness.terminal)
+      const cursorAfter = harness.terminal.buffer.active.cursorY
+      expect(harness.requests.length).toBeGreaterThan(0)
+
+      const request = harness.requests[0]!
+      const isFullGrid = request.start === 0 && request.end === harness.terminal.rows - 1
+      if (testCase.expectFullGrid) {
+        expect(isFullGrid).toBe(true)
+      }
+
+      const dirty = changedRows(before, after)
+      // Guard against a vacuous oracle: every corpus entry must move the screen.
+      expect(dirty.length).toBeGreaterThan(0)
+      for (const row of dirty) {
+        expect(
+          row >= request.start && row <= request.end,
+          `row ${row} changed but repaint span was ${request.start}..${request.end}`
+        ).toBe(true)
+      }
+      // The cursor row must be repainted: xterm's WebGL model drops the caret
+      // whenever an update pass excludes it.
+      expect(cursorBefore).toBeGreaterThanOrEqual(request.start)
+      expect(cursorBefore).toBeLessThanOrEqual(request.end)
+      expect(cursorAfter).toBeGreaterThanOrEqual(request.start)
+      expect(cursorAfter).toBeLessThanOrEqual(request.end)
+
+      discardForegroundRenderSettle(harness.target)
+      harness.terminal.dispose()
+    })
+  }
+
+  it('narrows an in-place bottom-row redraw well below the full grid', async () => {
+    const harness = createHarness(80, 40)
+    await seed(harness, SCROLLBACK_SEED)
+    harness.requests.length = 0
+    await writeAndSettle(harness, CLAUDE_STYLE_REDRAW)
+    const request = harness.requests[0]!
+    // Bottom-anchored redraw: the span ends on the cursor row but stays a few
+    // rows tall instead of the 40-row grid the old repair requested.
+    expect(request.end - request.start + 1).toBeLessThanOrEqual(8)
+    expect(request.start).toBeGreaterThan(0)
+    discardForegroundRenderSettle(harness.target)
+    harness.terminal.dispose()
+  })
+
+  it('widens the repair to the cursor rows on both sides of the write', () => {
+    // Why a double: xterm's own tracker always happens to include the cursor
+    // row, so only a controlled parse span can prove Orca adds it itself. The
+    // WebGL model drops the caret when an update pass excludes the cursor row.
+    const requests: SpanRequest[] = []
+    let fire: (event: { start: number; end: number } | undefined) => void = () => {}
+    const active = { type: 'normal', cursorY: 2, baseY: 0, viewportY: 0 }
+    const target: ForegroundTerminalOutputTarget = {
+      rows: 24,
+      buffer: { active },
+      refresh: (start, end) => requests.push({ start, end }),
+      write: (_data, callback) => {
+        fire({ start: 8, end: 9 })
+        active.cursorY = 17
+        callback?.()
+      },
+      _core: {
+        _inputHandler: {
+          onRequestRefreshRows: (listener) => {
+            fire = listener
+            return { dispose: () => {} }
+          }
+        }
+      }
+    } as unknown as ForegroundTerminalOutputTarget
+    writeForegroundTerminalChunk(target, 'x', {
+      forceViewportRefresh: true,
+      shouldRefreshViewportSynchronously: () => false
+    })
+    expect(requests).toEqual([{ start: 2, end: 17 }])
+  })
+
+  it('repaints the whole viewport when the parse span cannot be observed', async () => {
+    const requests: SpanRequest[] = []
+    const target: ForegroundTerminalOutputTarget = {
+      rows: 24,
+      buffer: {
+        active: { type: 'normal', cursorY: 3, baseY: 0, viewportY: 0 }
+      },
+      refresh: (start, end) => requests.push({ start, end }),
+      write: (_data, callback) => callback?.()
+    }
+    writeForegroundTerminalChunk(target, 'x', {
+      forceViewportRefresh: true,
+      shouldRefreshViewportSynchronously: () => false
+    })
+    expect(requests).toEqual([{ start: 0, end: 23 }])
+  })
+
+  it('keeps the follow-up settle repaint on the whole viewport', async () => {
+    const harness = createHarness(80, 24)
+    await seed(harness, SCROLLBACK_SEED)
+    harness.requests.length = 0
+    await writeAndSettle(harness, 'scrolling output\r\n')
+    // Primary repaint is full-grid because the viewport scrolled.
+    expect(harness.requests[0]).toEqual({ start: 0, end: 23 })
+    discardForegroundRenderSettle(harness.target)
+    harness.terminal.dispose()
+  })
+})
diff --git a/src/renderer/src/lib/pane-manager/terminal-parsed-dirty-rows.ts b/src/renderer/src/lib/pane-manager/terminal-parsed-dirty-rows.ts
new file mode 100644
index 00000000000..0b0185035c3
--- /dev/null
+++ b/src/renderer/src/lib/pane-manager/terminal-parsed-dirty-rows.ts
@@ -0,0 +1,119 @@
+/**
+ * The viewport row span xterm itself marked dirty while parsing the writes made
+ * since the last reset.
+ *
+ * Why: xterm's InputHandler already tracks exactly which viewport rows a parse
+ * touched and asks the terminal to repaint them (`onRequestRefreshRows`). Orca's
+ * foreground settle re-issues that repaint so an in-place agent redraw is painted
+ * now instead of a frame later. Re-issuing it as `0..rows-1` widened every
+ * repaint to the whole grid — xterm's render debouncer unions ranges, so one
+ * full-grid request turns a five-row frame into a whole-viewport `_updateModel`
+ * pass over every cell. Observing the parse's own dirty span keeps the repair
+ * and drops the widening.
+ */
+export type ParsedDirtyRowSpan = { start: number; end: number }
+
+type RequestRefreshRowsEvent = { start: number; end: number } | undefined
+
+type ParsedDirtyRowSource = {
+  _core?: {
+    _inputHandler?: {
+      onRequestRefreshRows?: (listener: (event: RequestRefreshRowsEvent) => void) => {
+        dispose: () => void
+      }
+    }
+  }
+}
+
+type ParsedDirtyRowTracker = {
+  start: number
+  end: number
+  observed: boolean
+  wholeViewport: boolean
+  dispose: () => void
+}
+
+// `null` marks a terminal whose parse spans cannot be observed, so callers keep
+// the full-grid behavior instead of narrowing on an absent signal.
+const trackersByTerminal = new WeakMap<object, ParsedDirtyRowTracker | null>()
+
+function attachTracker(terminal: object): ParsedDirtyRowTracker | null {
+  const existing = trackersByTerminal.get(terminal)
+  if (existing !== undefined) {
+    return existing
+  }
+  const subscribe = (terminal as ParsedDirtyRowSource)._core?._inputHandler?.onRequestRefreshRows
+  const inputHandler = (terminal as ParsedDirtyRowSource)._core?._inputHandler
+  if (typeof subscribe !== 'function' || !inputHandler) {
+    trackersByTerminal.set(terminal, null)
+    return null
+  }
+  const tracker: ParsedDirtyRowTracker = {
+    start: 0,
+    end: 0,
+    observed: false,
+    wholeViewport: false,
+    dispose: () => {}
+  }
+  try {
+    const subscription = subscribe.call(inputHandler, (event) => {
+      if (!event) {
+        // xterm asks for a whole-viewport repaint by firing `undefined`.
+        tracker.wholeViewport = true
+        tracker.observed = true
+        return
+      }
+      if (!tracker.observed) {
+        tracker.start = event.start
+        tracker.end = event.end
+        tracker.observed = true
+        return
+      }
+      tracker.start = Math.min(tracker.start, event.start)
+      tracker.end = Math.max(tracker.end, event.end)
+    })
+    tracker.dispose = () => subscription.dispose()
+  } catch {
+    trackersByTerminal.set(terminal, null)
+    return null
+  }
+  trackersByTerminal.set(terminal, tracker)
+  return tracker
+}
+
+/** Start (or reset) parse-span observation for the write that is about to run. */
+export function resetParsedDirtyRows(terminal: object): void {
+  const tracker = attachTracker(terminal)
+  if (!tracker) {
+    return
+  }
+  tracker.observed = false
+  tracker.wholeViewport = false
+  tracker.start = 0
+  tracker.end = 0
+}
+
+/**
+ * The union of parse spans since the last reset, or `null` when the span is
+ * unknown (unobservable terminal, no parse seen, or an xterm full-refresh
+ * request) and the caller must repaint the whole viewport.
+ */
+export function readParsedDirtyRowSpan(terminal: object): ParsedDirtyRowSpan | null {
+  const tracker = trackersByTerminal.get(terminal)
+  if (!tracker || !tracker.observed || tracker.wholeViewport) {
+    return null
+  }
+  return { start: tracker.start, end: tracker.end }
+}
+
+export function disposeParsedDirtyRows(terminal: object): void {
+  const tracker = trackersByTerminal.get(terminal)
+  if (tracker) {
+    try {
+      tracker.dispose()
+    } catch {
+      // A disposed terminal has already torn its emitters down.
+    }
+  }
+  trackersByTerminal.delete(terminal)
+}

From c7886e7a5fbea8e82d76b1f5d76b2a8678a84b96 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:24:32 -0700
Subject: [PATCH 75/92] perf(diff): stop redrawing the whole combined-diff file
 tree on every section load (#18140)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Both PR files viewers rebuilt the section-index Map with
`useMemo(..., [sections])`. An on-demand section load replaces the sections
array while the section keys stay identical, so every load handed the file
tree a new Map identity — a memo miss for all ~900 `CombinedDiffFileTreeRow`s.

`useCombinedDiffTreeNavigation` already cached the map behind an
entry-signature + per-index key comparison. Extract that into
`useCombinedDiffSectionIndexMap` and use it from all three call sites. The
extracted hook seeds its cache from a `useLayoutEffect` rather than during
render, so a render React discards cannot leave behind an entry describing
sections that never committed.
---
 .../combined-diff-file-tree-render.test.tsx   | 182 ++++++++++++++++++
 .../use-combined-diff-tree-navigation.ts      |  34 +---
 ...e-combined-diff-section-index-map.test.tsx |  63 ++++++
 .../use-combined-diff-section-index-map.ts    |  49 +++++
 ...files-combined-diff-section-index.test.tsx | 108 +++++++++++
 .../pr-files-combined-diff-viewer.tsx         |   7 +-
 .../combined-diff-section-index.test.tsx      | 110 +++++++++++
 .../files/combined-diff-viewer.tsx            |   4 +-
 8 files changed, 522 insertions(+), 35 deletions(-)
 create mode 100644 src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-render.test.tsx
 create mode 100644 src/renderer/src/components/editor/combined-diff/resolve-changes/use-combined-diff-section-index-map.test.tsx
 create mode 100644 src/renderer/src/components/editor/combined-diff/resolve-changes/use-combined-diff-section-index-map.ts
 create mode 100644 src/renderer/src/components/github-item-dialog/inspect-pull-request/pr-files-combined-diff-section-index.test.tsx
 create mode 100644 src/renderer/src/components/pull-request-page/files/combined-diff-section-index.test.tsx

diff --git a/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-render.test.tsx b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-render.test.tsx
new file mode 100644
index 00000000000..8b5361cb8f0
--- /dev/null
+++ b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-render.test.tsx
@@ -0,0 +1,182 @@
+// @vitest-environment happy-dom
+
+import React, { act, useCallback, useMemo, useState, type ReactElement } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { GitBranchChangeEntry } from '../../../../../../shared/git-diff-compare-types'
+import type { CombinedDiffFileTreeRow as CombinedDiffFileTreeRowComponent } from './combined-diff-file-tree-row'
+
+const rowRenders = vi.hoisted(() => ({ count: 0 }))
+const mountedRows = vi.hoisted(() => ({ count: 0 }))
+
+vi.mock('@/store', () => ({
+  useAppStore: (selector: (state: Record<string, unknown>) => unknown) =>
+    selector({ combinedDiffFileTreeWidth: 420, setCombinedDiffFileTreeWidth: () => {} })
+}))
+
+vi.mock('./combined-diff-file-tree-row', async (importOriginal) => {
+  const actual = (await importOriginal()) as {
+    CombinedDiffFileTreeRow: typeof CombinedDiffFileTreeRowComponent
+  }
+  const react = await import('react')
+  const Row = actual.CombinedDiffFileTreeRow
+  // Why: memo with React's default shallow compare, so this counts exactly the render commits
+  // the real memo'd row would have performed.
+  const CountingRow = react.memo((props: React.ComponentProps<typeof Row>) => {
+    rowRenders.count += 1
+    react.useEffect(() => {
+      mountedRows.count += 1
+      return () => {
+        mountedRows.count -= 1
+      }
+    }, [])
+    return react.createElement(Row, props)
+  })
+  return { ...actual, CombinedDiffFileTreeRow: CountingRow }
+})
+
+const { CombinedDiffFileTree } = await import('./combined-diff-file-tree')
+const { createCombinedDiffSectionIndexMap } =
+  await import('../resolve-changes/combined-diff-section-identity')
+const { useCombinedDiffSectionIndexMap } =
+  await import('../resolve-changes/use-combined-diff-section-index-map')
+const { getCombinedDiffBranchEntriesInTreeOrder } = await import('./combined-diff-file-tree-filter')
+
+const EMPTY_VIEWED_KEYS: ReadonlySet<string> = new Set()
+
+class NoopResizeObserver implements ResizeObserver {
+  observe(): void {}
+  unobserve(): void {}
+  disconnect(): void {}
+}
+
+let host: HTMLDivElement
+let root: Root
+
+beforeEach(() => {
+  globalThis.IS_REACT_ACT_ENVIRONMENT = true
+  rowRenders.count = 0
+  mountedRows.count = 0
+  host = document.createElement('div')
+  document.body.appendChild(host)
+  root = createRoot(host)
+  vi.stubGlobal('ResizeObserver', NoopResizeObserver)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  host.remove()
+  vi.unstubAllGlobals()
+  vi.restoreAllMocks()
+})
+
+type TestSection = { key: string; loading: boolean }
+
+/** `fileCount` files spread over `directoryCount` directories, in the viewer's own tree order. */
+function buildEntries(fileCount: number, directoryCount: number): GitBranchChangeEntry[] {
+  const raw: GitBranchChangeEntry[] = Array.from({ length: fileCount }, (_, index) => ({
+    path: `src/dir${String(index % directoryCount).padStart(2, '0')}/file-${String(index).padStart(4, '0')}.ts`,
+    status: 'modified'
+  }))
+  return getCombinedDiffBranchEntriesInTreeOrder('commit', raw)
+}
+
+function buildSections(entries: readonly GitBranchChangeEntry[]): TestSection[] {
+  return entries.map((entry) => ({ key: `combined-commit:${entry.path}`, loading: true }))
+}
+
+let loadSectionAt: (index: number) => void = () => {}
+
+/**
+ * Mirrors how both PR viewers feed the tree: an on-demand section load replaces the sections
+ * array, and the navigate callback closes over the section index map.
+ */
+function TreeHarness({
+  entries,
+  initialSections,
+  stableSectionIndexMap
+}: {
+  entries: readonly GitBranchChangeEntry[]
+  initialSections: TestSection[]
+  stableSectionIndexMap: boolean
+}): ReactElement {
+  const [sections, setSections] = useState(initialSections)
+  loadSectionAt = (index) => {
+    setSections((prev) =>
+      prev.map((section, sectionIndex) =>
+        sectionIndex === index ? { ...section, loading: false } : section
+      )
+    )
+  }
+  const rebuiltMap = useMemo(() => createCombinedDiffSectionIndexMap(sections), [sections])
+  const cachedMap = useCombinedDiffSectionIndexMap({ entrySignature: 'pr-1', sections })
+  const sectionIndexByKey = stableSectionIndexMap ? cachedMap : rebuiltMap
+  const onNavigate = useCallback(() => {
+    void sectionIndexByKey
+  }, [sectionIndexByKey])
+
+  return (
+    <CombinedDiffFileTree
+      mode="commit"
+      worktreePath="/repo"
+      entries={entries}
+      sectionIndexByKey={sectionIndexByKey}
+      activeSectionKey={null}
+      viewedSectionKeys={EMPTY_VIEWED_KEYS}
+      collapsed={false}
+      onCollapsedChange={() => {}}
+      onNavigate={onNavigate}
+    />
+  )
+}
+
+function mountedRowCount(): number {
+  return mountedRows.count
+}
+
+function renderHarness(
+  entries: readonly GitBranchChangeEntry[],
+  sections: TestSection[],
+  stableSectionIndexMap: boolean
+): void {
+  act(() => {
+    root.render(
+      <TreeHarness
+        entries={entries}
+        initialSections={sections}
+        stableSectionIndexMap={stableSectionIndexMap}
+      />
+    )
+  })
+}
+
+/** One section load per commit, the way lazy loads land while the user scrolls. */
+function runScrollPass(loadCount: number): number {
+  rowRenders.count = 0
+  for (let index = 0; index < loadCount; index += 1) {
+    act(() => loadSectionAt(index))
+  }
+  return rowRenders.count
+}
+
+describe('combined diff file tree re-renders on section loads', () => {
+  const SMALL_FILE_COUNT = 30
+  const SCROLL_PASS_LOADS = 10
+
+  it('re-renders every row per section load when the section index map is rebuilt', () => {
+    const entries = buildEntries(SMALL_FILE_COUNT, 3)
+    renderHarness(entries, buildSections(entries), false)
+    const rowCount = mountedRowCount()
+    expect(rowCount).toBeGreaterThan(SMALL_FILE_COUNT)
+
+    expect(runScrollPass(SCROLL_PASS_LOADS)).toBe(rowCount * SCROLL_PASS_LOADS)
+  })
+
+  it('re-renders no rows per section load when the section index map keeps its identity', () => {
+    const entries = buildEntries(SMALL_FILE_COUNT, 3)
+    renderHarness(entries, buildSections(entries), true)
+    expect(mountedRowCount()).toBeGreaterThan(SMALL_FILE_COUNT)
+
+    expect(runScrollPass(SCROLL_PASS_LOADS)).toBe(0)
+  })
+})
diff --git a/src/renderer/src/components/editor/combined-diff/browse-files/use-combined-diff-tree-navigation.ts b/src/renderer/src/components/editor/combined-diff/browse-files/use-combined-diff-tree-navigation.ts
index a237bc24c0d..fdf3cb78539 100644
--- a/src/renderer/src/components/editor/combined-diff/browse-files/use-combined-diff-tree-navigation.ts
+++ b/src/renderer/src/components/editor/combined-diff/browse-files/use-combined-diff-tree-navigation.ts
@@ -2,10 +2,8 @@ import React, { useCallback, useRef, useState } from 'react'
 import type { GitBranchChangeEntry } from '../../../../../../shared/git-diff-compare-types'
 import type { GitStatusEntry } from '../../../../../../shared/git-status-types'
 import type { DiffSection } from '../../diff-section-types'
-import {
-  createCombinedDiffSectionIndexMap,
-  type CombinedDiffFileTreeMode
-} from '../resolve-changes/combined-diff-section-identity'
+import type { CombinedDiffFileTreeMode } from '../resolve-changes/combined-diff-section-identity'
+import { useCombinedDiffSectionIndexMap } from '../resolve-changes/use-combined-diff-section-index-map'
 import { handleCombinedDiffFileTreeNavigation } from './combined-diff-file-tree-navigation'
 import { isCombinedDiffSectionViewed } from './combined-diff-file-tree-filter'
 
@@ -37,33 +35,7 @@ export function useCombinedDiffTreeNavigation({
   toggleSection: (index: number) => void
   treeMode: CombinedDiffFileTreeMode
 }): CombinedDiffTreeNavigation {
-  const sectionIndexCacheRef = useRef<{
-    entrySignature: string
-    sectionCount: number
-    map: Map<string, number>
-    keys: string[]
-  } | null>(null)
-  const sectionIndexByKey = React.useMemo(() => {
-    const previous = sectionIndexCacheRef.current
-    // Section content/loading updates preserve entry order and keys. The entry signature and
-    // count usually change when the navigable structure changes, but compare keys as a guard for
-    // same-sized/reused signatures (and to keep this cache correct if a caller rebuilds sections).
-    if (
-      previous?.entrySignature === entrySignature &&
-      previous.sectionCount === sections.length &&
-      sections.every((section, index) => previous.keys[index] === section.key)
-    ) {
-      return previous.map
-    }
-    const map = createCombinedDiffSectionIndexMap(sections)
-    sectionIndexCacheRef.current = {
-      entrySignature,
-      sectionCount: sections.length,
-      map,
-      keys: sections.map((section) => section.key)
-    }
-    return map
-  }, [entrySignature, sections])
+  const sectionIndexByKey = useCombinedDiffSectionIndexMap({ entrySignature, sections })
   const sectionIndexByKeyRef = useRef<ReadonlyMap<string, number>>(sectionIndexByKey)
   sectionIndexByKeyRef.current = sectionIndexByKey
 
diff --git a/src/renderer/src/components/editor/combined-diff/resolve-changes/use-combined-diff-section-index-map.test.tsx b/src/renderer/src/components/editor/combined-diff/resolve-changes/use-combined-diff-section-index-map.test.tsx
new file mode 100644
index 00000000000..cc008efb694
--- /dev/null
+++ b/src/renderer/src/components/editor/combined-diff/resolve-changes/use-combined-diff-section-index-map.test.tsx
@@ -0,0 +1,63 @@
+// @vitest-environment happy-dom
+
+import { renderHook } from '@testing-library/react'
+import { describe, expect, it } from 'vitest'
+import { useCombinedDiffSectionIndexMap } from './use-combined-diff-section-index-map'
+
+type Section = { key: string; loading: boolean }
+
+function sectionsFor(keys: readonly string[], loadedKeys: readonly string[] = []): Section[] {
+  return keys.map((key) => ({ key, loading: !loadedKeys.includes(key) }))
+}
+
+describe('useCombinedDiffSectionIndexMap', () => {
+  const keys = ['combined-commit:a.ts', 'combined-commit:b.ts', 'combined-commit:c.ts']
+
+  it('keeps the map identity across a section load that leaves the keys alone', () => {
+    const { result, rerender } = renderHook(
+      ({ sections }: { sections: Section[] }) =>
+        useCombinedDiffSectionIndexMap({ entrySignature: 'pr-1', sections }),
+      { initialProps: { sections: sectionsFor(keys) } }
+    )
+    const first = result.current
+
+    // An on-demand load replaces the array and one section object; keys are untouched.
+    rerender({ sections: sectionsFor(keys, ['combined-commit:b.ts']) })
+
+    expect(result.current).toBe(first)
+    expect([...result.current]).toEqual([
+      ['combined-commit:a.ts', 0],
+      ['combined-commit:b.ts', 1],
+      ['combined-commit:c.ts', 2]
+    ])
+  })
+
+  it('rebuilds when a section key changes in place', () => {
+    const { result, rerender } = renderHook(
+      ({ sections }: { sections: Section[] }) =>
+        useCombinedDiffSectionIndexMap({ entrySignature: 'pr-1', sections }),
+      { initialProps: { sections: sectionsFor(keys) } }
+    )
+    const first = result.current
+
+    rerender({ sections: sectionsFor(['combined-commit:a.ts', 'combined-commit:renamed.ts']) })
+
+    expect(result.current).not.toBe(first)
+    expect(result.current.get('combined-commit:renamed.ts')).toBe(1)
+    expect(result.current.has('combined-commit:b.ts')).toBe(false)
+  })
+
+  it('rebuilds when the entry set changes even if the keys happen to match', () => {
+    const { result, rerender } = renderHook(
+      ({ entrySignature }: { entrySignature: string }) =>
+        useCombinedDiffSectionIndexMap({ entrySignature, sections: sectionsFor(keys) }),
+      { initialProps: { entrySignature: 'pr-1' } }
+    )
+    const first = result.current
+
+    rerender({ entrySignature: 'pr-2' })
+
+    expect(result.current).not.toBe(first)
+    expect([...result.current]).toEqual([...first])
+  })
+})
diff --git a/src/renderer/src/components/editor/combined-diff/resolve-changes/use-combined-diff-section-index-map.ts b/src/renderer/src/components/editor/combined-diff/resolve-changes/use-combined-diff-section-index-map.ts
new file mode 100644
index 00000000000..0cf8555425f
--- /dev/null
+++ b/src/renderer/src/components/editor/combined-diff/resolve-changes/use-combined-diff-section-index-map.ts
@@ -0,0 +1,49 @@
+import { useLayoutEffect, useMemo, useRef } from 'react'
+import { createCombinedDiffSectionIndexMap } from './combined-diff-section-identity'
+
+type CombinedDiffSectionIndexCache = {
+  entrySignature: string
+  sections: readonly { key: string }[]
+  map: Map<string, number>
+}
+
+/**
+ * Section-key to section-index map that keeps its identity while the section keys do.
+ *
+ * On-demand section loads replace the sections array on every fetch, so a freshly built Map would
+ * be a memo miss for every consumer — the file tree would re-render all of its rows continuously
+ * while the user scrolls a large diff.
+ */
+export function useCombinedDiffSectionIndexMap({
+  entrySignature,
+  sections
+}: {
+  entrySignature: string
+  sections: readonly { key: string }[]
+}): Map<string, number> {
+  const cacheRef = useRef<CombinedDiffSectionIndexCache | null>(null)
+  const sectionIndexByKey = useMemo(() => {
+    const previous = cacheRef.current
+    // Section content/loading updates preserve entry order and keys. The entry signature usually
+    // changes when the navigable structure changes, but compare keys as a guard for reused
+    // signatures (and to keep this cache correct if a caller rebuilds sections).
+    if (
+      previous !== null &&
+      previous.entrySignature === entrySignature &&
+      previous.sections.length === sections.length &&
+      sections.every((section, index) => previous.sections[index]?.key === section.key)
+    ) {
+      return previous.map
+    }
+    return createCombinedDiffSectionIndexMap(sections)
+  }, [entrySignature, sections])
+
+  // Why a committed write and not a render-phase one: React can discard a render, and a cache
+  // seeded from abandoned work would hand a later render a map for sections that never existed.
+  // Layout, not passive, so a synchronous re-render inside the same commit still sees this cache.
+  useLayoutEffect(() => {
+    cacheRef.current = { entrySignature, sections, map: sectionIndexByKey }
+  }, [entrySignature, sectionIndexByKey, sections])
+
+  return sectionIndexByKey
+}
diff --git a/src/renderer/src/components/github-item-dialog/inspect-pull-request/pr-files-combined-diff-section-index.test.tsx b/src/renderer/src/components/github-item-dialog/inspect-pull-request/pr-files-combined-diff-section-index.test.tsx
new file mode 100644
index 00000000000..b42adae565b
--- /dev/null
+++ b/src/renderer/src/components/github-item-dialog/inspect-pull-request/pr-files-combined-diff-section-index.test.tsx
@@ -0,0 +1,108 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { GitHubPRFile } from '../../../../../shared/github/pull-request-types'
+import type { PRFilesCombinedDiffViewerProps } from '@/components/github/pr-file-diff-mapping'
+
+const capturedSectionIndexMaps = vi.hoisted(() => ({ list: [] as ReadonlyMap<string, number>[] }))
+const loaders = vi.hoisted(() => ({ loadSection: (_index: number) => {} }))
+
+vi.mock('@/store', () => ({
+  useAppStore: (selector: (state: Record<string, unknown>) => unknown) =>
+    selector({ settings: { theme: 'dark' } })
+}))
+
+vi.mock('./pr-files-combined-diff-body', () => ({
+  PRFilesCombinedDiffBody: (props: {
+    sectionIndexByKey: ReadonlyMap<string, number>
+    loadSection: (index: number) => void
+  }) => {
+    capturedSectionIndexMaps.list.push(props.sectionIndexByKey)
+    loaders.loadSection = props.loadSection
+    return null
+  }
+}))
+
+vi.mock('./pr-files-combined-diff-load', () => ({
+  addPRFilesCombinedDiffLineComment: () => Promise.resolve(),
+  // Why: stands in for the network fetch, keeping only the state shape a real load produces —
+  // a new sections array with one patched section and untouched keys.
+  loadPRFilesCombinedDiffSection: ({
+    index,
+    setSections
+  }: {
+    index: number
+    setSections: (updater: (prev: { key: string; loading: boolean }[]) => unknown) => void
+  }) => {
+    setSections((prev) =>
+      prev.map((section, sectionIndex) =>
+        sectionIndex === index ? { ...section, loading: false } : section
+      )
+    )
+  },
+  retryPRFilesCombinedDiffSection: () => {},
+  setAllPRFilesCombinedDiffSectionsCollapsed: () => {},
+  togglePRFilesCombinedDiffSection: () => {}
+}))
+
+const { PRFilesCombinedDiffViewer } = await import('./pr-files-combined-diff-viewer')
+
+let host: HTMLDivElement
+let root: Root
+
+beforeEach(() => {
+  globalThis.IS_REACT_ACT_ENVIRONMENT = true
+  capturedSectionIndexMaps.list = []
+  host = document.createElement('div')
+  document.body.appendChild(host)
+  root = createRoot(host)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  host.remove()
+  vi.restoreAllMocks()
+})
+
+function prFiles(count: number): GitHubPRFile[] {
+  return Array.from({ length: count }, (_, index) => ({
+    path: `src/file-${String(index).padStart(3, '0')}.ts`,
+    status: 'modified' as const,
+    additions: 1,
+    deletions: 1,
+    isBinary: false
+  }))
+}
+
+const viewerProps: PRFilesCombinedDiffViewerProps = {
+  files: prFiles(6),
+  comments: [],
+  repoPath: '/repo',
+  repoId: 'repo-1',
+  prNumber: 7,
+  prUrl: 'https://example.test/pr/7',
+  headSha: 'head',
+  baseSha: 'base',
+  pendingViewedPaths: new Set(),
+  onCommentAdded: () => {},
+  onViewedChange: () => Promise.resolve(true)
+}
+
+describe('inspect-pull-request combined diff section index map', () => {
+  it('keeps one map identity across on-demand section loads', () => {
+    act(() => {
+      root.render(<PRFilesCombinedDiffViewer {...viewerProps} />)
+    })
+    const initialMap = capturedSectionIndexMaps.list.at(-1)
+    expect(initialMap?.size).toBe(viewerProps.files.length)
+
+    for (let index = 0; index < viewerProps.files.length; index += 1) {
+      act(() => loaders.loadSection(index))
+    }
+
+    expect(capturedSectionIndexMaps.list.length).toBeGreaterThan(viewerProps.files.length)
+    expect(new Set(capturedSectionIndexMaps.list).size).toBe(1)
+  })
+})
diff --git a/src/renderer/src/components/github-item-dialog/inspect-pull-request/pr-files-combined-diff-viewer.tsx b/src/renderer/src/components/github-item-dialog/inspect-pull-request/pr-files-combined-diff-viewer.tsx
index 43c460469cd..4ab38698994 100644
--- a/src/renderer/src/components/github-item-dialog/inspect-pull-request/pr-files-combined-diff-viewer.tsx
+++ b/src/renderer/src/components/github-item-dialog/inspect-pull-request/pr-files-combined-diff-viewer.tsx
@@ -2,7 +2,7 @@ import React, { useCallback, useLayoutEffect, useMemo, useRef, useState } from '
 import { useVirtualizer } from '@tanstack/react-virtual'
 import type { editor as monacoEditor } from 'monaco-editor'
 import type { DecoratedDiffComment } from '@/components/diff-comments/decorated-diff-comment'
-import { createCombinedDiffSectionIndexMap } from '../../editor/combined-diff/resolve-changes/combined-diff-section-identity'
+import { useCombinedDiffSectionIndexMap } from '../../editor/combined-diff/resolve-changes/use-combined-diff-section-index-map'
 import { handleCombinedDiffFileTreeNavigation } from '../../editor/combined-diff/browse-files/combined-diff-file-tree-navigation'
 import { getDiffSectionRowEstimatedHeight } from '@/components/editor/diff-section-layout'
 import type { DiffSection } from '@/components/editor/diff-section-types'
@@ -30,6 +30,7 @@ import {
 } from './pr-files-combined-diff-load'
 
 type PRFilesCombinedDiffSectionsProps = PRFilesCombinedDiffViewerProps & {
+  signature: string
   sideBySide: boolean
   setSideBySide: React.Dispatch<React.SetStateAction<boolean>>
   fileTreeCollapsed: boolean
@@ -61,6 +62,7 @@ export function PRFilesCombinedDiffViewer(
     <PRFilesCombinedDiffSections
       key={signature}
       {...props}
+      signature={signature}
       sideBySide={sideBySide}
       setSideBySide={setSideBySide}
       fileTreeCollapsed={fileTreeCollapsed}
@@ -83,6 +85,7 @@ function PRFilesCombinedDiffSections({
   pendingViewedPaths,
   onCommentAdded,
   onViewedChange,
+  signature,
   sideBySide,
   setSideBySide,
   fileTreeCollapsed,
@@ -222,7 +225,7 @@ function PRFilesCombinedDiffSections({
   )
 
   const allSectionsCollapsed = sections.length > 0 && sections.every((section) => section.collapsed)
-  const sectionIndexByKey = useMemo(() => createCombinedDiffSectionIndexMap(sections), [sections])
+  const sectionIndexByKey = useCombinedDiffSectionIndexMap({ entrySignature: signature, sections })
   const viewedSectionKeys = useMemo(
     () => new Set(files.filter(isPRFileViewed).map((file) => getPRFileSectionKey(file.path))),
     [files]
diff --git a/src/renderer/src/components/pull-request-page/files/combined-diff-section-index.test.tsx b/src/renderer/src/components/pull-request-page/files/combined-diff-section-index.test.tsx
new file mode 100644
index 00000000000..9c7c7e11a34
--- /dev/null
+++ b/src/renderer/src/components/pull-request-page/files/combined-diff-section-index.test.tsx
@@ -0,0 +1,110 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { GitHubPRFile } from '../../../../../shared/github/pull-request-types'
+import type { PRFilesCombinedDiffViewerProps } from '@/components/github/pr-file-diff-mapping'
+
+const capturedSectionIndexMaps = vi.hoisted(() => ({ list: [] as ReadonlyMap<string, number>[] }))
+const loaders = vi.hoisted(() => ({ loadSection: (_index: number) => {} }))
+
+vi.mock('@/store', () => ({
+  useAppStore: (selector: (state: Record<string, unknown>) => unknown) =>
+    selector({ settings: { theme: 'dark' } })
+}))
+
+vi.mock('../../editor/combined-diff/browse-files/combined-diff-file-tree', () => ({
+  CombinedDiffFileTree: (props: { sectionIndexByKey: ReadonlyMap<string, number> }) => {
+    capturedSectionIndexMaps.list.push(props.sectionIndexByKey)
+    return null
+  }
+}))
+
+vi.mock('@/components/editor/DiffSectionItem', () => ({ DiffSectionItem: () => null }))
+vi.mock('./toolbar', () => ({ PRFilesDiffToolbar: () => null }))
+vi.mock('./view-restore', () => ({ usePRFilesDiffViewPersistence: () => {} }))
+
+vi.mock('./section-loader', () => ({
+  usePRFileSectionLoader: ({
+    setSections
+  }: {
+    setSections: (updater: (prev: { key: string; loading: boolean }[]) => unknown) => void
+  }) => {
+    // Why: stands in for the network fetch, keeping only the state shape a real load produces —
+    // a new sections array with one patched section and untouched keys.
+    loaders.loadSection = (index: number) => {
+      setSections((prev) =>
+        prev.map((section, sectionIndex) =>
+          sectionIndex === index ? { ...section, loading: false } : section
+        )
+      )
+    }
+    return {
+      loadSection: loaders.loadSection,
+      retrySection: () => {},
+      toggleSection: () => {},
+      setAllSectionsCollapsed: () => {}
+    }
+  }
+}))
+
+const { PRFilesCombinedDiffViewer } = await import('./combined-diff-viewer')
+
+let host: HTMLDivElement
+let root: Root
+
+beforeEach(() => {
+  globalThis.IS_REACT_ACT_ENVIRONMENT = true
+  capturedSectionIndexMaps.list = []
+  host = document.createElement('div')
+  document.body.appendChild(host)
+  root = createRoot(host)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  host.remove()
+  vi.restoreAllMocks()
+})
+
+function prFiles(count: number): GitHubPRFile[] {
+  return Array.from({ length: count }, (_, index) => ({
+    path: `src/file-${String(index).padStart(3, '0')}.ts`,
+    status: 'modified' as const,
+    additions: 1,
+    deletions: 1,
+    isBinary: false
+  }))
+}
+
+const viewerProps: PRFilesCombinedDiffViewerProps = {
+  files: prFiles(6),
+  comments: [],
+  repoPath: '/repo',
+  repoId: 'repo-1',
+  prNumber: 7,
+  prUrl: 'https://example.test/pr/7',
+  headSha: 'head',
+  baseSha: 'base',
+  pendingViewedPaths: new Set(),
+  onCommentAdded: () => {},
+  onViewedChange: () => Promise.resolve(true)
+}
+
+describe('pull request page combined diff section index map', () => {
+  it('keeps one map identity across on-demand section loads', () => {
+    act(() => {
+      root.render(<PRFilesCombinedDiffViewer {...viewerProps} />)
+    })
+    capturedSectionIndexMaps.list = []
+
+    for (let index = 0; index < viewerProps.files.length; index += 1) {
+      act(() => loaders.loadSection(index))
+    }
+
+    expect(capturedSectionIndexMaps.list.length).toBe(viewerProps.files.length)
+    expect(capturedSectionIndexMaps.list[0]?.size).toBe(viewerProps.files.length)
+    expect(new Set(capturedSectionIndexMaps.list).size).toBe(1)
+  })
+})
diff --git a/src/renderer/src/components/pull-request-page/files/combined-diff-viewer.tsx b/src/renderer/src/components/pull-request-page/files/combined-diff-viewer.tsx
index 3ef4d097ab5..2ba0fbbf621 100644
--- a/src/renderer/src/components/pull-request-page/files/combined-diff-viewer.tsx
+++ b/src/renderer/src/components/pull-request-page/files/combined-diff-viewer.tsx
@@ -4,7 +4,7 @@ import type { editor as monacoEditor } from 'monaco-editor'
 import { useAppStore } from '@/store'
 import { DiffSectionItem } from '@/components/editor/DiffSectionItem'
 import { CombinedDiffFileTree } from '../../editor/combined-diff/browse-files/combined-diff-file-tree'
-import { createCombinedDiffSectionIndexMap } from '../../editor/combined-diff/resolve-changes/combined-diff-section-identity'
+import { useCombinedDiffSectionIndexMap } from '../../editor/combined-diff/resolve-changes/use-combined-diff-section-index-map'
 import { handleCombinedDiffFileTreeNavigation } from '../../editor/combined-diff/browse-files/combined-diff-file-tree-navigation'
 import { getDiffSectionRowEstimatedHeight } from '@/components/editor/diff-section-layout'
 import type { DiffSection } from '@/components/editor/diff-section-types'
@@ -180,7 +180,7 @@ export function PRFilesCombinedDiffViewer({
     })
 
   const allSectionsCollapsed = sections.length > 0 && sections.every((section) => section.collapsed)
-  const sectionIndexByKey = useMemo(() => createCombinedDiffSectionIndexMap(sections), [sections])
+  const sectionIndexByKey = useCombinedDiffSectionIndexMap({ entrySignature, sections })
   const visibleActiveTreeSectionKey =
     activeTreeSectionKey && sectionIndexByKey.has(activeTreeSectionKey)
       ? activeTreeSectionKey

From 1910ab9c9c553545e16d25b0404187bc5e5a7bf8 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:29:12 -0700
Subject: [PATCH 76/92] fix(github): bound and coalesce the Orca star check so
 gh children cannot pile up (#18239)

`checkOrcaStarred`, `starOrca` and `getAuthenticatedViewer` were the only gh
call sites that reached for the legacy `execFileAsync` instead of
`ghExecFileAsync`, so they ran with no deadline, no process-tree kill and no
coalescing. A `gh` that never exits therefore ran forever and never released
its slot in the 4-wide GitHub semaphore in gh-utils.

Route all three through `ghExecFileAsync`, coalesce concurrent star checks onto
one child, and hoist the Landing star-state effect out of the conditionally
rendered footer so a repo-catalog rewrite no longer remounts it and re-forks gh.

Adds a ratchet test asserting no file outside the command runner names `gh` as
a spawned program.

Fixes #18234
---
 .../gh-exec-file-deadline.test.ts             |  94 ++++++++++++++
 .../command-runner/gh-spawn-boundary.test.ts  |  71 +++++++++++
 src/main/github/client-starred.test.ts        | 119 ++++++++++++++++--
 src/main/github/client.ts                     |   2 +-
 .../client/fetch/authenticated-viewer.ts      |   9 +-
 src/main/github/client/fetch/orca-star.ts     |  45 +++++--
 src/renderer/src/components/Landing.tsx       |  34 ++---
 .../components/landing-github-star-state.ts   |  39 ++++++
 8 files changed, 370 insertions(+), 43 deletions(-)
 create mode 100644 src/main/git/command-runner/gh-exec-file-deadline.test.ts
 create mode 100644 src/main/git/command-runner/gh-spawn-boundary.test.ts
 create mode 100644 src/renderer/src/components/landing-github-star-state.ts

diff --git a/src/main/git/command-runner/gh-exec-file-deadline.test.ts b/src/main/git/command-runner/gh-exec-file-deadline.test.ts
new file mode 100644
index 00000000000..3775b67a7ed
--- /dev/null
+++ b/src/main/git/command-runner/gh-exec-file-deadline.test.ts
@@ -0,0 +1,94 @@
+import { EventEmitter } from 'node:events'
+import type { ChildProcess } from 'node:child_process'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const { execFileMock, spawnMock, killSpawnedCommandTreeMock } = vi.hoisted(() => ({
+  execFileMock: vi.fn(),
+  spawnMock: vi.fn(),
+  killSpawnedCommandTreeMock: vi.fn().mockResolvedValue(undefined)
+}))
+
+vi.mock('node:child_process', async (importOriginal) => ({
+  ...(await importOriginal()),
+  execFile: execFileMock,
+  spawn: spawnMock
+}))
+vi.mock('./spawned-command-tree-kill', () => ({
+  killSpawnedCommandTree: killSpawnedCommandTreeMock
+}))
+
+import { ghExecFileAsync } from './gh-exec-file'
+
+function mockChild(pid = 4321): ChildProcess {
+  const child = new EventEmitter() as EventEmitter & Record<string, unknown>
+  child.pid = pid
+  child.kill = vi.fn(() => true)
+  child.stdin = Object.assign(new EventEmitter(), { end: vi.fn() })
+  child.stdout = new EventEmitter()
+  child.stderr = new EventEmitter()
+  return child as unknown as ChildProcess
+}
+
+/**
+ * The contract the star check depends on after #18234: a `gh` that never exits
+ * is killed at the deadline, tree and all, rather than running forever.
+ */
+describe('gh exec deadline', () => {
+  beforeEach(() => {
+    vi.useFakeTimers()
+    execFileMock.mockReset()
+    spawnMock.mockReset()
+    killSpawnedCommandTreeMock.mockClear()
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+  })
+
+  it('kills the process tree and rejects when gh never exits', async () => {
+    const child = mockChild()
+    // Why never invoking the callback: this is exactly the stuck child from
+    // #18234 — spawned, spinning, and never reporting an exit.
+    execFileMock.mockReturnValue(child)
+
+    const pending = ghExecFileAsync(['api', '--include', 'user/starred/stablyai/orca'], {
+      timeout: 15_000
+    })
+    const rejection = expect(pending).rejects.toThrow('timed out')
+    await vi.waitFor(() => expect(execFileMock).toHaveBeenCalledOnce())
+
+    // Not yet: the deadline has not elapsed.
+    expect(killSpawnedCommandTreeMock).not.toHaveBeenCalled()
+
+    await vi.advanceTimersByTimeAsync(15_000)
+    await rejection
+
+    expect(killSpawnedCommandTreeMock).toHaveBeenCalledWith(child)
+  })
+
+  it('spawns with hidden console and captured stdio, never an inherited or shell stdio', async () => {
+    const child = mockChild()
+    execFileMock.mockImplementation(
+      (
+        _command: string,
+        _args: string[],
+        _options: unknown,
+        callback: (error: Error | null, stdout: string, stderr: string) => void
+      ) => {
+        callback(null, 'HTTP/2.0 204 No Content\r\n', '')
+        return child
+      }
+    )
+
+    await ghExecFileAsync(['api', '--include', 'user/starred/stablyai/orca'], { timeout: 15_000 })
+
+    const [command, args, options] = execFileMock.mock.calls[0]
+    expect(command).toBe('gh')
+    expect(args).toEqual(['api', '--include', 'user/starred/stablyai/orca'])
+    // `execFile` captures stdout/stderr over pipes and never inherits Orca's;
+    // `shell` is never set, and the console stays hidden on Windows.
+    expect(options.windowsHide).toBe(true)
+    expect(options.stdio).toBeUndefined()
+    expect(options.shell).toBeUndefined()
+  })
+})
diff --git a/src/main/git/command-runner/gh-spawn-boundary.test.ts b/src/main/git/command-runner/gh-spawn-boundary.test.ts
new file mode 100644
index 00000000000..b6d83daaa95
--- /dev/null
+++ b/src/main/git/command-runner/gh-spawn-boundary.test.ts
@@ -0,0 +1,71 @@
+import { readFileSync, readdirSync, statSync } from 'node:fs'
+import { join, relative, resolve } from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+/**
+ * Guard the gh chokepoint the way `child-process-import-boundary` guards spawn.
+ *
+ * `ghExecFileAsync` is what gives a gh invocation a deadline, a process-tree
+ * kill, transient-error retry, the rate-limit breaker, and WSL/host routing.
+ * Two call sites quietly opted out of all of it by reaching for the legacy
+ * `execFileAsync('gh', …)`, and one of them left `gh` children spinning at 100%
+ * CPU forever while permanently exhausting the GitHub concurrency semaphore
+ * (#18234). Nothing about those call sites looked wrong locally — which is why
+ * this is a tree-level rule rather than a review habit.
+ *
+ * The allowlist is empty and may only stay empty.
+ */
+const GH_SPAWN_PATTERN =
+  /(?:execFileAsync|commandExecFileAsync|execFileCapture|runProcess|spawnProcess|execFile|spawnSync|spawn)\s*\(\s*(['"`])gh\1|program:\s*(['"`])gh\2/
+
+// Why trailing slash: a sibling like command-runner-extras.ts is scanned, not exempted.
+const OWNER_DIRECTORY = 'src/main/git/command-runner/'
+const SCANNED_EXTENSIONS = ['.ts', '.tsx']
+const IGNORED_DIRECTORIES = new Set([
+  'node_modules',
+  'dist',
+  'out',
+  'build',
+  '.git',
+  '__fixtures__'
+])
+
+function isTestFile(path: string): boolean {
+  return /\.(?:test|spec)\.tsx?$/.test(path) || path.includes('/__tests__/')
+}
+
+function collectSourceFiles(root: string): string[] {
+  let found: string[] = []
+  let entries: string[]
+  try {
+    entries = readdirSync(root)
+  } catch {
+    return found
+  }
+  for (const entry of entries) {
+    if (IGNORED_DIRECTORIES.has(entry)) {
+      continue
+    }
+    const full = join(root, entry)
+    if (statSync(full).isDirectory()) {
+      found = found.concat(collectSourceFiles(full))
+      continue
+    }
+    if (SCANNED_EXTENSIONS.some((extension) => full.endsWith(extension))) {
+      found.push(full)
+    }
+  }
+  return found
+}
+
+describe('gh spawn boundary', () => {
+  it('routes every gh invocation through ghExecFileAsync', () => {
+    const repoRoot = resolve(__dirname, '..', '..', '..', '..')
+    const offenders = collectSourceFiles(join(repoRoot, 'src'))
+      .map((path) => relative(repoRoot, path).split('\\').join('/'))
+      .filter((path) => !isTestFile(path) && !path.startsWith(OWNER_DIRECTORY))
+      .filter((path) => GH_SPAWN_PATTERN.test(readFileSync(join(repoRoot, path), 'utf8')))
+
+    expect(offenders).toEqual([])
+  })
+})
diff --git a/src/main/github/client-starred.test.ts b/src/main/github/client-starred.test.ts
index 4b118ad8afb..2997aef883a 100644
--- a/src/main/github/client-starred.test.ts
+++ b/src/main/github/client-starred.test.ts
@@ -26,47 +26,146 @@ vi.mock('./github-api-repository', async (importOriginal) =>
   )
 )
 
-import { checkOrcaStarred } from './client'
+import { __resetOrcaStarCheckForTests, checkOrcaStarred, starOrca } from './client'
 import { resetOriginRepositoryCache } from './client-test-harness'
 
-const { execFileAsyncMock, acquireMock, releaseMock } = clientMocks
+const { execFileAsyncMock, ghExecFileAsyncMock, acquireMock, releaseMock } = clientMocks
+
+/** Let the coalesced check reach its `await acquire()` continuation and spawn gh. */
+async function flushMicrotasks(): Promise<void> {
+  for (let i = 0; i < 5; i += 1) {
+    await Promise.resolve()
+  }
+}
 
 describe('checkOrcaStarred', () => {
-  beforeEach(() => {
+  beforeEach(async () => {
     resetOriginRepositoryCache()
     execFileAsyncMock.mockReset()
+    ghExecFileAsyncMock.mockReset()
     acquireMock.mockReset()
     releaseMock.mockReset()
     acquireMock.mockResolvedValue(undefined)
+    __resetOrcaStarCheckForTests()
   })
 
   it('returns true only for an included successful GitHub response', async () => {
-    execFileAsyncMock.mockResolvedValueOnce({ stdout: 'HTTP/2.0 204 No Content\r\n', stderr: '' })
+    ghExecFileAsyncMock.mockResolvedValueOnce({ stdout: 'HTTP/2.0 204 No Content\r\n', stderr: '' })
 
     await expect(checkOrcaStarred()).resolves.toBe(true)
 
-    expect(execFileAsyncMock).toHaveBeenCalledWith(
-      'gh',
+    expect(ghExecFileAsyncMock).toHaveBeenCalledWith(
       ['api', '--include', 'user/starred/stablyai/orca'],
-      { encoding: 'utf-8' }
+      expect.objectContaining({ encoding: 'utf-8' })
     )
   })
 
   it('returns true for an HTTP 200 starred response', async () => {
-    execFileAsyncMock.mockResolvedValueOnce({ stdout: 'HTTP/2.0 200 OK\r\n', stderr: '' })
+    ghExecFileAsyncMock.mockResolvedValueOnce({ stdout: 'HTTP/2.0 200 OK\r\n', stderr: '' })
 
     await expect(checkOrcaStarred()).resolves.toBe(true)
   })
 
   it('returns false for GitHub 404 not starred responses', async () => {
-    execFileAsyncMock.mockRejectedValueOnce(new Error('HTTP 404: Not Found'))
+    ghExecFileAsyncMock.mockRejectedValueOnce(new Error('HTTP 404: Not Found'))
 
     await expect(checkOrcaStarred()).resolves.toBe(false)
   })
 
   it('returns null when gh exits successfully without response headers', async () => {
-    execFileAsyncMock.mockResolvedValueOnce({ stdout: '', stderr: '' })
+    ghExecFileAsyncMock.mockResolvedValueOnce({ stdout: '', stderr: '' })
 
     await expect(checkOrcaStarred()).resolves.toBe(null)
   })
+
+  // ── #18234: an unbounded, unreaped, un-deduped star check ──────────────
+
+  it('never spawns gh directly, so the spawn carries a deadline and a tree kill', async () => {
+    ghExecFileAsyncMock.mockResolvedValueOnce({ stdout: 'HTTP/2.0 204 No Content\r\n', stderr: '' })
+
+    await checkOrcaStarred()
+
+    // Why: the raw execFileAsync has no timeout, so a `gh` that never exits ran
+    // forever at 100% CPU and was never reaped. ghExecFileAsync bounds the child
+    // and kills its process tree on the deadline.
+    expect(execFileAsyncMock).not.toHaveBeenCalled()
+    const [, options] = ghExecFileAsyncMock.mock.calls[0]
+    expect(typeof options.timeout).toBe('number')
+    expect(options.timeout).toBeGreaterThan(0)
+    expect(Number.isFinite(options.timeout)).toBe(true)
+  })
+
+  it('coalesces concurrent checks onto one gh child', async () => {
+    let resolveGh: (value: { stdout: string; stderr: string }) => void = () => {}
+    ghExecFileAsyncMock.mockReturnValueOnce(
+      new Promise((resolve) => {
+        resolveGh = resolve
+      })
+    )
+
+    const first = checkOrcaStarred()
+    const second = checkOrcaStarred()
+    const third = checkOrcaStarred()
+    await flushMicrotasks()
+
+    // Why: five call sites can ask at once; without coalescing each forked its
+    // own `gh` and four stuck children exhausted the GitHub semaphore.
+    expect(ghExecFileAsyncMock).toHaveBeenCalledTimes(1)
+    expect(acquireMock).toHaveBeenCalledTimes(1)
+
+    resolveGh({ stdout: 'HTTP/2.0 204 No Content\r\n', stderr: '' })
+    await expect(Promise.all([first, second, third])).resolves.toEqual([true, true, true])
+  })
+
+  it('starts a fresh check once the previous one has settled', async () => {
+    ghExecFileAsyncMock
+      .mockResolvedValueOnce({ stdout: 'HTTP/2.0 404 Not Found\r\n', stderr: '' })
+      .mockResolvedValueOnce({ stdout: 'HTTP/2.0 204 No Content\r\n', stderr: '' })
+
+    await checkOrcaStarred()
+    await expect(checkOrcaStarred()).resolves.toBe(true)
+    expect(ghExecFileAsyncMock).toHaveBeenCalledTimes(2)
+  })
+
+  it('releases its GitHub concurrency slot when gh fails or times out', async () => {
+    ghExecFileAsyncMock.mockRejectedValueOnce(new Error('gh timed out.'))
+
+    await expect(checkOrcaStarred()).resolves.toBe(null)
+
+    // Why: a leaked slot is permanent — four of them wedge every GitHub feature
+    // in the app for the rest of the session.
+    expect(releaseMock).toHaveBeenCalledTimes(1)
+    expect(acquireMock).toHaveBeenCalledTimes(1)
+  })
+})
+
+describe('starOrca', () => {
+  beforeEach(async () => {
+    resetOriginRepositoryCache()
+    execFileAsyncMock.mockReset()
+    ghExecFileAsyncMock.mockReset()
+    acquireMock.mockReset()
+    releaseMock.mockReset()
+    acquireMock.mockResolvedValue(undefined)
+    __resetOrcaStarCheckForTests()
+  })
+
+  it('stars through the bounded gh runner and releases its slot', async () => {
+    ghExecFileAsyncMock.mockResolvedValueOnce({ stdout: '', stderr: '' })
+
+    await expect(starOrca()).resolves.toBe(true)
+
+    expect(execFileAsyncMock).not.toHaveBeenCalled()
+    const [args, options] = ghExecFileAsyncMock.mock.calls[0]
+    expect(args).toEqual(['api', '-X', 'PUT', 'user/starred/stablyai/orca'])
+    expect(options.timeout).toBeGreaterThan(0)
+    expect(releaseMock).toHaveBeenCalledTimes(1)
+  })
+
+  it('reports failure and still releases its slot when gh times out', async () => {
+    ghExecFileAsyncMock.mockRejectedValueOnce(new Error('gh timed out.'))
+
+    await expect(starOrca()).resolves.toBe(false)
+    expect(releaseMock).toHaveBeenCalledTimes(1)
+  })
 })
diff --git a/src/main/github/client.ts b/src/main/github/client.ts
index 3adec83a13a..fa331749c8b 100644
--- a/src/main/github/client.ts
+++ b/src/main/github/client.ts
@@ -8,7 +8,7 @@ export {
   __resetTrackedUpstreamBranchCacheForTests
 } from './client/lookup/tracked-upstream-cache'
 export { addPRReviewComment, addPRReviewCommentReply } from './client/create/add-pr-review-comment'
-export { checkOrcaStarred, starOrca } from './client/fetch/orca-star'
+export { __resetOrcaStarCheckForTests, checkOrcaStarred, starOrca } from './client/fetch/orca-star'
 export { countWorkItems } from './client/list/count-work-items'
 export { createGitHubPullRequest } from './client/create/create-github-pull-request'
 export { getAuthenticatedViewer } from './client/fetch/authenticated-viewer'
diff --git a/src/main/github/client/fetch/authenticated-viewer.ts b/src/main/github/client/fetch/authenticated-viewer.ts
index dd297addd67..551ffe81377 100644
--- a/src/main/github/client/fetch/authenticated-viewer.ts
+++ b/src/main/github/client/fetch/authenticated-viewer.ts
@@ -1,14 +1,17 @@
 import type { GitHubViewer } from '../../../../shared/github/pull-request-types'
-import { execFileAsync, acquire, release } from '../../gh-utils'
+import { ghExecFileAsync, acquire, release } from '../../gh-utils'
 /**
  * Get the authenticated GitHub viewer when gh is available and logged in.
  * Returns null when gh is unavailable, unauthenticated, or the lookup fails.
+ *
+ * Runs through `ghExecFileAsync` for its deadline and tree kill: a `gh` that
+ * never exits would otherwise hold one of the four GitHub concurrency slots
+ * forever (#18234).
  */
 export async function getAuthenticatedViewer(): Promise<GitHubViewer | null> {
   await acquire()
   try {
-    const { stdout } = await execFileAsync(
-      'gh',
+    const { stdout } = await ghExecFileAsync(
       ['api', 'user', '--jq', '{login: .login, email: .email}'],
       { encoding: 'utf-8' }
     )
diff --git a/src/main/github/client/fetch/orca-star.ts b/src/main/github/client/fetch/orca-star.ts
index ddf63d71c17..a9006ed544a 100644
--- a/src/main/github/client/fetch/orca-star.ts
+++ b/src/main/github/client/fetch/orca-star.ts
@@ -1,17 +1,45 @@
-import { execFileAsync, acquire, release } from '../../gh-utils'
+import { ghExecFileAsync, acquire, release } from '../../gh-utils'
 export const ORCA_REPO = 'stablyai/orca'
 
+/**
+ * Deadline for the two star-nag gh calls.
+ *
+ * Why bounded at all: these are the only gh call sites that used the raw
+ * `execFileAsync`, so a `gh` that never exits blocked forever, never released
+ * its GitHub concurrency slot, and left the child running (#18234). Why shorter
+ * than the 30s gh default: nothing here is user-visible work — the nag falls
+ * back to the browser button — so a slow answer is worth less than a bounded one.
+ */
+const STAR_GH_TIMEOUT_MS = 15_000
+
+let inFlightStarCheck: Promise<boolean | null> | null = null
+
 /**
  * Check if the authenticated user has starred the Orca repo.
  * Returns true if starred, false if not, null if unable to determine (gh unavailable).
  */
-export async function checkOrcaStarred(): Promise<boolean | null> {
+export function checkOrcaStarred(): Promise<boolean | null> {
+  // Why: five independent callers (landing button, settings section, threshold
+  // nag, agent-value moment, force-show) can ask at once and none of them knows
+  // about the others. Without coalescing, each forks its own `gh`, and four
+  // stuck children exhaust the 4-wide GitHub semaphore for the app's lifetime.
+  inFlightStarCheck ??= runOrcaStarredCheck().finally(() => {
+    inFlightStarCheck = null
+  })
+  return inFlightStarCheck
+}
+
+/** @internal Drop any coalesced check so suites cannot inherit one another's. */
+export function __resetOrcaStarCheckForTests(): void {
+  inFlightStarCheck = null
+}
+
+async function runOrcaStarredCheck(): Promise<boolean | null> {
   await acquire()
   try {
-    const { stdout, stderr } = await execFileAsync(
-      'gh',
+    const { stdout, stderr } = await ghExecFileAsync(
       ['api', '--include', `user/starred/${ORCA_REPO}`],
-      { encoding: 'utf-8' }
+      { encoding: 'utf-8', timeout: STAR_GH_TIMEOUT_MS }
     )
     const response = `${stdout ?? ''}\n${stderr ?? ''}`
     if (/HTTP\/\S+\s+(?:200|204)\b/.test(response)) {
@@ -24,7 +52,7 @@ export async function checkOrcaStarred(): Promise<boolean | null> {
     if (message.includes('HTTP 404')) {
       return false
     }
-    // Anything else (gh not installed, not authenticated, network issue)
+    // Anything else (gh not installed, not authenticated, network issue, timeout)
     return null
   } finally {
     release()
@@ -37,8 +65,9 @@ export async function checkOrcaStarred(): Promise<boolean | null> {
 export async function starOrca(): Promise<boolean> {
   await acquire()
   try {
-    await execFileAsync('gh', ['api', '-X', 'PUT', `user/starred/${ORCA_REPO}`], {
-      encoding: 'utf-8'
+    await ghExecFileAsync(['api', '-X', 'PUT', `user/starred/${ORCA_REPO}`], {
+      encoding: 'utf-8',
+      timeout: STAR_GH_TIMEOUT_MS
     })
     return true
   } catch {
diff --git a/src/renderer/src/components/Landing.tsx b/src/renderer/src/components/Landing.tsx
index 99ed596b98f..d03614b63dd 100644
--- a/src/renderer/src/components/Landing.tsx
+++ b/src/renderer/src/components/Landing.tsx
@@ -16,6 +16,7 @@ import logo from '../../../../resources/logo.svg'
 import { translate } from '@/i18n/i18n'
 import { hasGitHubBackedProject, type PreflightIssue } from './landing-preflight-issues'
 import { useLandingPreflightRuntime } from './landing-preflight-runtime'
+import { useLandingOrcaStarState, type LandingStarState } from './landing-github-star-state'
 
 type ShortcutItem = {
   id: string
@@ -26,31 +27,21 @@ type ShortcutItem = {
 // Do not deep-link to /stargazers: GitHub 404s that page for users without repo write access.
 const ORCA_GITHUB_URL = 'https://github.com/stablyai/orca'
 
-type StarState = 'loading' | 'starred' | 'not-starred' | 'web-fallback' | 'hidden'
+type StarButtonProps = {
+  hasRepos: boolean
+  state: LandingStarState
+  setState: React.Dispatch<React.SetStateAction<LandingStarState>>
+}
 
-function GitHubStarButton({ hasRepos }: { hasRepos: boolean }): React.JSX.Element | null {
-  const [state, setState] = useState<StarState>('loading')
+function GitHubStarButton({
+  hasRepos,
+  state,
+  setState
+}: StarButtonProps): React.JSX.Element | null {
   const [menuOpen, setMenuOpen] = useState(false)
   const wrapperRef = useRef<HTMLDivElement | null>(null)
   const mountedRef = useMountedRef()
 
-  useEffect(() => {
-    let cancelled = false
-    void window.api.gh.checkOrcaStarred().then((result) => {
-      if (cancelled) {
-        return
-      }
-      if (result === null) {
-        setState('web-fallback')
-      } else {
-        setState(result ? 'starred' : 'not-starred')
-      }
-    })
-    return () => {
-      cancelled = true
-    }
-  }, [])
-
   useEffect(() => {
     if (!menuOpen) {
       return
@@ -237,6 +228,7 @@ export default function Landing(): React.JSX.Element {
 
   // Why: the runtime-aware slice probes the active remote host instead of the renderer host.
   const { preflightIssues } = useLandingPreflightRuntime()
+  const [starState, setStarState] = useLandingOrcaStarState()
 
   const createWorktreeShortcut = useShortcutKeyDetails('workspace.create')
   const previousWorktreeShortcut = useShortcutKeyDetails('worktree.navigateUp')
@@ -318,7 +310,7 @@ export default function Landing(): React.JSX.Element {
 
       {showGitHubSupportFooter && (
         <div className="absolute bottom-6 left-0 right-0 flex justify-center">
-          <GitHubStarButton hasRepos={repos.length > 0} />
+          <GitHubStarButton hasRepos={repos.length > 0} state={starState} setState={setStarState} />
         </div>
       )}
     </div>
diff --git a/src/renderer/src/components/landing-github-star-state.ts b/src/renderer/src/components/landing-github-star-state.ts
new file mode 100644
index 00000000000..098646b00f5
--- /dev/null
+++ b/src/renderer/src/components/landing-github-star-state.ts
@@ -0,0 +1,39 @@
+import { useEffect, useState, type Dispatch, type SetStateAction } from 'react'
+
+export type LandingStarState = 'loading' | 'starred' | 'not-starred' | 'web-fallback' | 'hidden'
+
+/**
+ * Resolve the viewer's Orca star state once per Landing mount.
+ *
+ * Why it lives here and not in the star button: the button renders inside a
+ * footer that is conditionally mounted on whether `repos` currently carries a
+ * GitHub provider identity, and `repos` is rewritten wholesale on every
+ * repo-catalog push. Every flicker of that condition re-ran the button's mount
+ * effect and forked another `gh api user/starred/...` (#18234). Landing itself
+ * only mounts when the user navigates, so the check runs once per visit.
+ */
+export function useLandingOrcaStarState(): [
+  LandingStarState,
+  Dispatch<SetStateAction<LandingStarState>>
+] {
+  const [state, setState] = useState<LandingStarState>('loading')
+
+  useEffect(() => {
+    let cancelled = false
+    void window.api.gh.checkOrcaStarred().then((result) => {
+      if (cancelled) {
+        return
+      }
+      if (result === null) {
+        setState('web-fallback')
+      } else {
+        setState(result ? 'starred' : 'not-starred')
+      }
+    })
+    return () => {
+      cancelled = true
+    }
+  }, [])
+
+  return [state, setState]
+}

From efe330549028f8fa5984a5a30311c399b3a88cb9 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:31:02 -0700
Subject: [PATCH 77/92] test(editor): isolate prefix bleed in the batched model
 sweep, drop a dead export (#18240)

Readiness-review follow-ups to #18144.

The parity test in closed-editor-tab-disposal.test.ts cannot see prefix bleed:
buildScenario closes tab-0..tab-99, so tab-10 is in the closed batch too and the
per-tab oracle disposes its models via tab-10's own prefix. Batched and oracle
agree and the assertion passes even with a bleeding predicate. Verified by
mutation: replacing the boundary probe with a naive startsWith leaves all five
of that file's tests green.

Adds a test through the batched disposeClosedEditorTabs entry point with a
still-OPEN tab-10 alongside a closed tab-1, which does fail under that mutation.

Also records the `boundary + 1` advance in hasPaneScopeOwner as load-bearing for
`:::` runs, with a test that fails under a `+ 2` "tidy-up", and removes
disposeUnattachedMonacoModelsByPathPrefix, which #18144 left with zero production
callers and a comment claiming it was kept for callers that do not exist.

Finally, documents why title-derived rows carry `startedAt: 0`, which is the sole
reason their `now` stamps cannot move a dashboard bucket.
---
 .../closed-editor-tab-cache-sweep.test.ts     | 45 ++++++++++++++++++-
 .../editor/closed-editor-tab-cache-sweep.ts   |  3 ++
 .../editor/closed-editor-tab-disposal.test.ts | 24 ++++++++++
 .../editor/diff-monaco-model-disposal.test.ts |  6 +--
 .../editor/diff-monaco-model-disposal.ts      |  7 ---
 .../worktree-title-derived-agent-rows.ts      |  6 +++
 6 files changed, 80 insertions(+), 11 deletions(-)

diff --git a/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.test.ts b/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.test.ts
index 726795a31dd..9d3b7ff042d 100644
--- a/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.test.ts
+++ b/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.test.ts
@@ -1,9 +1,52 @@
 import { describe, expect, it } from 'vitest'
 import type { PdfViewPosition } from '@/lib/scroll-cache'
-import { sweepClosedPdfViewPositions } from './closed-editor-tab-cache-sweep'
+import {
+  deletePaneScopedCacheEntries,
+  sweepClosedPdfViewPositions
+} from './closed-editor-tab-cache-sweep'
 
 const position = (pageNumber: number): PdfViewPosition => ({ pageNumber, top: 0, left: 0 })
 
+describe('deletePaneScopedCacheEntries', () => {
+  it('does not delete an owner whose id merely extends a closed owner id', () => {
+    const cache = new Map([
+      ['tab-1::pane-1', 1],
+      ['tab-10::pane-1', 2],
+      ['tab-1x::pane-1', 3]
+    ])
+    deletePaneScopedCacheEntries(cache, ['tab-1'])
+    expect([...cache.keys()]).toEqual(['tab-10::pane-1', 'tab-1x::pane-1'])
+  })
+
+  it('matches an owner that ends at the second `::` of a `:::` run', () => {
+    // Locks the `boundary + 1` advance in hasPaneScopeOwner: `a:` ends at index 2, which only the
+    // second `::` of the run exposes. A `+ 2` advance would skip it and leak the entry.
+    const cache = new Map([
+      ['a:::b', 1],
+      ['a::b', 2],
+      ['ab:::c', 3]
+    ])
+    deletePaneScopedCacheEntries(cache, ['a:'])
+    expect([...cache.keys()]).toEqual(['a::b', 'ab:::c'])
+  })
+
+  it('sweeps every owner in the batch in one pass', () => {
+    const cache = new Map([
+      ['tab-1::pane-1', 1],
+      ['tab-2::pane-1', 2],
+      ['tab-3::pane-1', 3]
+    ])
+    deletePaneScopedCacheEntries(cache, ['tab-1', 'tab-3'])
+    expect([...cache.keys()]).toEqual(['tab-2::pane-1'])
+  })
+
+  it('is a no-op for an empty owner batch', () => {
+    const cache = new Map([['tab-1::pane-1', 1]])
+    deletePaneScopedCacheEntries(cache, [])
+    expect(cache.size).toBe(1)
+  })
+})
+
 describe('sweepClosedPdfViewPositions', () => {
   it('deletes the unscoped :pdf entry', () => {
     const cache = new Map([['/a.pdf:pdf', position(4)]])
diff --git a/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.ts b/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.ts
index b9769fb9dc8..a553625c838 100644
--- a/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.ts
+++ b/src/renderer/src/components/editor/closed-editor-tab-cache-sweep.ts
@@ -26,6 +26,9 @@ function hasPaneScopeOwner(key: string, owners: ReadonlySet<string>): boolean {
   for (
     let boundary = key.indexOf('::');
     boundary !== -1;
+    // `+ 1`, not `+ 2`: in a `:::` run the second `::` starts one char after the first, and it can
+    // be the only boundary an owner ends at (owner `a:` against key `a:::b`). Skipping to `+ 2`
+    // steps over it and silently leaks that entry.
     boundary = key.indexOf('::', boundary + 1)
   ) {
     if (owners.has(key.slice(0, boundary))) {
diff --git a/src/renderer/src/components/editor/closed-editor-tab-disposal.test.ts b/src/renderer/src/components/editor/closed-editor-tab-disposal.test.ts
index 0223a4394b0..f23876fcf35 100644
--- a/src/renderer/src/components/editor/closed-editor-tab-disposal.test.ts
+++ b/src/renderer/src/components/editor/closed-editor-tab-disposal.test.ts
@@ -226,6 +226,30 @@ describe('disposeClosedEditorTabs', () => {
     expect(scrollTopCache.size).toBe(0)
   })
 
+  // Why this is not covered by the parity test above: `buildScenario` closes tab-0..tab-99, so
+  // tab-10 is in the closed batch too. Prefix bleed from tab-1 would dispose tab-10's models, but
+  // the per-tab oracle disposes them as well via tab-10's own prefix, so the two agree and the
+  // assertion still passes. Isolating it needs a still-OPEN tab whose id extends a closed one.
+  it('does not dispose a still-open tab whose id extends a closed tab id', () => {
+    const closed = getDiffViewerMonacoModelPaths({ modelKey: 'tab-1', generationSuffix: '' })
+    const stillOpen = getDiffViewerMonacoModelPaths({ modelKey: 'tab-10', generationSuffix: '' })
+    const models = [
+      createModel(closed.originalModelPath),
+      createModel(closed.modifiedModelPath),
+      createModel(stillOpen.originalModelPath),
+      createModel(stillOpen.modifiedModelPath)
+    ]
+
+    // Batched entry point on purpose: the owned prefixes become a Set probed at the URI's own `:`
+    // boundaries, which is a different predicate from the pre-batch per-prefix `startsWith`.
+    disposeClosedEditorTabs(createRegistry(models), [diffTab('tab-1'), diffTab('tab-2')])
+
+    expect(models.filter((m) => m.disposed).map((m) => m.path)).toEqual([
+      closed.originalModelPath,
+      closed.modifiedModelPath
+    ])
+  })
+
   it('is a no-op when nothing closed', () => {
     const registry = createRegistry([createModel('diff:original:tab-1:tab-1')])
     disposeClosedEditorTabs(registry, [])
diff --git a/src/renderer/src/components/editor/diff-monaco-model-disposal.test.ts b/src/renderer/src/components/editor/diff-monaco-model-disposal.test.ts
index dcefc61195d..75ccc46eff2 100644
--- a/src/renderer/src/components/editor/diff-monaco-model-disposal.test.ts
+++ b/src/renderer/src/components/editor/diff-monaco-model-disposal.test.ts
@@ -2,7 +2,7 @@ import { describe, expect, it, vi } from 'vitest'
 import {
   disposeUnattachedDiffViewerMonacoModels,
   disposeUnattachedMonacoModelPaths,
-  disposeUnattachedMonacoModelsByPathPrefix,
+  disposeUnattachedMonacoModelsByPathPrefixes,
   getDiffViewerMonacoModelPathPrefixes,
   getDiffViewerMonacoModelPaths
 } from './diff-monaco-model-disposal'
@@ -139,7 +139,7 @@ describe('diff Monaco model disposal', () => {
     const monacoRegistry = createRegistry(models)
     const { originalModelPathPrefix } = getDiffViewerMonacoModelPathPrefixes('tab-1')
 
-    disposeUnattachedMonacoModelsByPathPrefix(monacoRegistry, originalModelPathPrefix)
+    disposeUnattachedMonacoModelsByPathPrefixes(monacoRegistry, [originalModelPathPrefix])
 
     expect(baseDispose).toHaveBeenCalledOnce()
     expect(generatedDispose).toHaveBeenCalledOnce()
@@ -177,7 +177,7 @@ describe('diff Monaco model disposal', () => {
     const monacoRegistry = createRegistry(models)
     const { originalModelPathPrefix } = getDiffViewerMonacoModelPathPrefixes('foo')
 
-    disposeUnattachedMonacoModelsByPathPrefix(monacoRegistry, originalModelPathPrefix)
+    disposeUnattachedMonacoModelsByPathPrefixes(monacoRegistry, [originalModelPathPrefix])
 
     expect(ownedDispose).toHaveBeenCalledOnce()
     expect(siblingDispose).not.toHaveBeenCalled()
diff --git a/src/renderer/src/components/editor/diff-monaco-model-disposal.ts b/src/renderer/src/components/editor/diff-monaco-model-disposal.ts
index f833e53ec5b..2a1b5ceed5d 100644
--- a/src/renderer/src/components/editor/diff-monaco-model-disposal.ts
+++ b/src/renderer/src/components/editor/diff-monaco-model-disposal.ts
@@ -79,13 +79,6 @@ export function disposeUnattachedMonacoModelPaths(
   }
 }
 
-export function disposeUnattachedMonacoModelsByPathPrefix(
-  monacoRegistry: MonacoModelRegistry,
-  modelPathPrefix: string
-): void {
-  disposeUnattachedMonacoModelsByPathPrefixes(monacoRegistry, [modelPathPrefix])
-}
-
 /**
  * Sweeps every owned prefix in a single scan of the global model registry.
  *
diff --git a/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.ts b/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.ts
index 25d87c50801..08c0d27b9e7 100644
--- a/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.ts
+++ b/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.ts
@@ -215,6 +215,12 @@ function buildTitleDerivedAgentRow(args: {
     agentType,
     rowSource: 'live',
     state: rowState,
+    // Load-bearing zero, not a placeholder: `dashboardRowBucketProjection` reads `startedAt === 0`
+    // as "title-derived" and short-circuits `unseen`. That is the ONLY reason the `args.now` stamps
+    // on `entry` above (updatedAt / stateStartedAt / observation) cannot move this row's bucket.
+    // Dashboard bucket caches key their invalidation on the freshness boundary in
+    // `isExplicitAgentStatusFresh` alone; give this a real timestamp and every one of them starts
+    // serving stale counts, with no test failing at the point of the change.
     startedAt: 0
   }
 }

From fda9cae5e27a0d8533a1ee76ee70436f59856a16 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:32:06 -0700
Subject: [PATCH 78/92] perf(renderer): build useRef seeds once instead of
 every render (#18159)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* perf(renderer): stop re-running useRef initializers and ref-mirror effects every render

React evaluates the argument you pass to `useRef` on every render and discards
every result after the first. 30 renderer sites did real work in there — walking
every browser page/tab across all worktrees, building activation-order maps, and
minting `crypto.randomUUID()` per render on browser pages and the AI vault.

Also moves 12 verbatim ref-mirror Effects to render-phase assignment, and routes
the `tab.rename` shortcut straight to the focused tab instead of through a store
field every mounted tab subscribed to.

* perf(renderer): drop Fix 2 (render-phase ref mirrors) to satisfy no-ref-current-in-render

* perf(renderer): convert the four lazy-useRef sites that landed on main
---
 .../src/app-shell/app-command-handlers.ts     |   3 +-
 .../activity/use-agent-pane-threads.ts        |   6 +-
 .../use-browser-page-webview-lifecycle.ts     |   3 +-
 .../use-browser-page-zoom-feedback.ts         |   4 +-
 .../use-remote-browser-page-input.ts          |   3 +-
 ...-doc-preview-guest-tools.lazy-ref.test.tsx |  76 ++++++++++
 .../use-doc-preview-guest-tools.ts            |   3 +-
 .../dashboard/useAgentBucketCounts.ts         |   3 +-
 .../dashboard/useLiveDashboardSnapshot.ts     |   3 +-
 .../combined-diff-section-load-registry.ts    |   9 +-
 .../use-combined-diff-view-restore.ts         |  19 +--
 .../use-emulator-pane-session.ts              |   6 +-
 .../use-feature-wall-session-depth.ts         |   5 +-
 .../use-feature-wall-tour-telemetry.ts        |   3 +-
 .../FloatingTerminalPanel.shortcuts.test.tsx  |  17 ++-
 .../floating-terminal-panel-test-fixtures.ts  |   2 -
 .../floating-terminal-panel-test-harness.ts   |   5 +-
 .../use-floating-terminal-panel-shortcuts.ts  |   3 +-
 .../use-native-chat-live-session.ts           |   3 +-
 .../use-native-chat-retained-session.ts       |   3 +-
 .../right-sidebar/ai-vault-session-refresh.ts |   6 +-
 .../source-control/sync/git-history-panel.tsx |   3 +-
 .../useCreatePullRequestDialogFields.ts       |   5 +-
 .../right-sidebar/useFileExplorerTree.ts      |   3 +-
 .../settings/CommitMessageAiPane.tsx          |   3 +-
 .../repository-source-control-ai-global-ux.ts |  35 +++--
 .../use-settings-interaction-controller.ts    |   3 +-
 .../use-workspace-kanban-column-resize.ts     |   4 +-
 .../viewport/use-scroll-to-top.ts             |   3 +-
 .../SortableTab.rename-shortcut.test.tsx      |  42 ++++--
 .../src/components/tab-bar/SortableTab.tsx    |  29 ++--
 .../SortableTab.update-depth-probe.test.tsx   |  62 +++++++--
 .../tab-bar/terminal-tab-rename-request.ts    |  19 +++
 .../use-terminal-tab-cold-parking.ts          |   5 +-
 .../TerminalQuickCommandDialog.tsx            |   5 +-
 ...erminal-window-lifecycle.lazy-ref.test.tsx |  86 ++++++++++++
 .../use-terminal-window-lifecycle.ts          |  11 +-
 .../composer-state/async-composer-state.ts    |  31 +++--
 .../composer-state/composer-drop-listener.ts  |   3 +-
 src/renderer/src/hooks/use-audio-capture.ts   |   3 +-
 src/renderer/src/lazy-use-ref-ratchet.test.ts | 130 ++++++++++++++++++
 .../slices/tabs-label-and-pin-state.test.ts   |   8 --
 .../store/slices/tabs/create-tabs-slice.ts    |   1 -
 .../store/slices/tabs/tabs-label-actions.ts   |   5 -
 .../store/slices/tabs/tabs-slice-contract.ts  |   3 -
 45 files changed, 544 insertions(+), 143 deletions(-)
 create mode 100644 src/renderer/src/components/browser-pane/workspace-doc/use-doc-preview-guest-tools.lazy-ref.test.tsx
 create mode 100644 src/renderer/src/components/tab-bar/terminal-tab-rename-request.ts
 create mode 100644 src/renderer/src/components/use-terminal-window-lifecycle.lazy-ref.test.tsx
 create mode 100644 src/renderer/src/lazy-use-ref-ratchet.test.ts

diff --git a/src/renderer/src/app-shell/app-command-handlers.ts b/src/renderer/src/app-shell/app-command-handlers.ts
index 99915597e67..bb60f898130 100644
--- a/src/renderer/src/app-shell/app-command-handlers.ts
+++ b/src/renderer/src/app-shell/app-command-handlers.ts
@@ -5,6 +5,7 @@ import { requestScrollToCurrentWorkspaceRevealAndRename } from '@/lib/scroll-to-
 import { showTerminalShortcutCaptureNotification } from '@/lib/terminal-shortcut-capture-notification'
 import { shouldShowWorktreeHistoryControls } from '../lib/titlebar-worktree-history-controls'
 import { TOGGLE_WORKSPACE_BOARD_EVENT } from '../components/sidebar/useWorkspaceBoardPanel'
+import { requestTerminalTabRename } from '../components/tab-bar/terminal-tab-rename-request'
 import {
   deleteHoveredWorkspaceImmediately,
   resolveHoveredWorkspaceDeleteTarget
@@ -180,7 +181,7 @@ export function createAppCommandHandlers(
         ) {
           return false
         }
-        return claim('tab.rename', () => store.setRenamingTabId(store.activeTabId!))
+        return claim('tab.rename', () => requestTerminalTabRename(store.activeTabId!))
       }
     ],
     [
diff --git a/src/renderer/src/components/activity/use-agent-pane-threads.ts b/src/renderer/src/components/activity/use-agent-pane-threads.ts
index 01eb0475a02..1934488439e 100644
--- a/src/renderer/src/components/activity/use-agent-pane-threads.ts
+++ b/src/renderer/src/components/activity/use-agent-pane-threads.ts
@@ -121,8 +121,10 @@ export function useAgentPaneThreads(args: {
   // identities across rebuilds, so a status write to one agent leaves every other row's
   // memo bail-out and cached search text intact. Rebuilds are deterministic, so a repeated
   // (StrictMode/deferred) memo invocation returns identical objects from the cache.
-  const eventBuildCacheRef = useRef(createActivityEventBuildCache())
-  const threadReuseCacheRef = useRef(createAgentPaneThreadReuseCache())
+  const eventBuildCacheRef = useRef<ReturnType<typeof createActivityEventBuildCache>>(undefined!)
+  eventBuildCacheRef.current ??= createActivityEventBuildCache()
+  const threadReuseCacheRef = useRef<ReturnType<typeof createAgentPaneThreadReuseCache>>(undefined!)
+  threadReuseCacheRef.current ??= createAgentPaneThreadReuseCache()
 
   const { events: allEvents, liveAgentByPaneKey } = useMemo(
     () =>
diff --git a/src/renderer/src/components/browser-pane/host-guest/use-browser-page-webview-lifecycle.ts b/src/renderer/src/components/browser-pane/host-guest/use-browser-page-webview-lifecycle.ts
index a8de0e1e254..72859a415b5 100644
--- a/src/renderer/src/components/browser-pane/host-guest/use-browser-page-webview-lifecycle.ts
+++ b/src/renderer/src/components/browser-pane/host-guest/use-browser-page-webview-lifecycle.ts
@@ -132,7 +132,8 @@ export function useBrowserPageWebviewLifecycle({
   const addBrowserHistoryEntryRef = useRef(addBrowserHistoryEntry)
   const createBrowserTab = useAppStore((s) => s.createBrowserTab)
   const isPaintableRef = useRef(isPaintable)
-  const annotationViewportBridgeTokenRef = useRef(createBrowserUuid().replaceAll('-', ''))
+  const annotationViewportBridgeTokenRef = useRef<string>(undefined!)
+  annotationViewportBridgeTokenRef.current ??= createBrowserUuid().replaceAll('-', '')
   const isActiveRef = useRef(isActive)
   const pendingAnnotationPayloadRef = useRef(pendingAnnotationPayload)
   const browserAnnotations = useAppStore(
diff --git a/src/renderer/src/components/browser-pane/host-guest/use-browser-page-zoom-feedback.ts b/src/renderer/src/components/browser-pane/host-guest/use-browser-page-zoom-feedback.ts
index 368d66d5e8d..09474d21418 100644
--- a/src/renderer/src/components/browser-pane/host-guest/use-browser-page-zoom-feedback.ts
+++ b/src/renderer/src/components/browser-pane/host-guest/use-browser-page-zoom-feedback.ts
@@ -28,9 +28,9 @@ export function useBrowserPageZoomFeedback(browserTabId: string): {
   // tab's zoom through the shared setting. Why the module-level lookup: the guest webview outlives
   // this component (worktree switch, Settings visit), so re-seeding on remount would let a later
   // Settings change retroactively hijack a tab the user already zoomed.
-  const paneZoomLevelRef = useRef(
+  const paneZoomLevelRef = useRef<number>(undefined!)
+  paneZoomLevelRef.current ??=
     getExplicitBrowserPageZoomLevel(browserTabId) ?? normalizedBrowserDefaultZoomLevel
-  )
   const [browserZoomPercent, setBrowserZoomPercent] = useState(browserDefaultZoomPercent)
   const [browserZoomFeedbackVisible, setBrowserZoomFeedbackVisible] = useState(false)
   const browserZoomFeedbackTimerRef = useRef<ReturnType<typeof setTimeout>>(undefined)
diff --git a/src/renderer/src/components/browser-pane/stream-remote/use-remote-browser-page-input.ts b/src/renderer/src/components/browser-pane/stream-remote/use-remote-browser-page-input.ts
index 64002a1208a..c58a5c56a1a 100644
--- a/src/renderer/src/components/browser-pane/stream-remote/use-remote-browser-page-input.ts
+++ b/src/renderer/src/components/browser-pane/stream-remote/use-remote-browser-page-input.ts
@@ -28,7 +28,8 @@ export function useRemoteBrowserPageInputQueue(): {
   remoteWheelFrameRef: React.MutableRefObject<number | null>
   remoteWheelInFlightRef: React.MutableRefObject<boolean>
 } {
-  const remoteInputQueueRef = useRef<Promise<unknown>>(Promise.resolve())
+  const remoteInputQueueRef = useRef<Promise<unknown>>(undefined!)
+  remoteInputQueueRef.current ??= Promise.resolve()
   const pendingRemoteWheelRef = useRef<PendingRemoteBrowserWheel | null>(null)
   const remoteWheelFrameRef = useRef<number | null>(null)
   const remoteWheelInFlightRef = useRef(false)
diff --git a/src/renderer/src/components/browser-pane/workspace-doc/use-doc-preview-guest-tools.lazy-ref.test.tsx b/src/renderer/src/components/browser-pane/workspace-doc/use-doc-preview-guest-tools.lazy-ref.test.tsx
new file mode 100644
index 00000000000..d68cd200c21
--- /dev/null
+++ b/src/renderer/src/components/browser-pane/workspace-doc/use-doc-preview-guest-tools.lazy-ref.test.tsx
@@ -0,0 +1,76 @@
+// @vitest-environment happy-dom
+
+/**
+ * The annotation viewport bridge token used to sit in a `useRef(...)` argument, so every render of
+ * a doc preview minted a fresh `crypto.randomUUID()` and threw it away — only the mount-time token
+ * was ever read. Pin the mint count to the mount count.
+ */
+import { useState } from 'react'
+import { act, cleanup, render } from '@testing-library/react'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+
+const browserUuidCalls = vi.hoisted(() => ({ count: 0 }))
+
+vi.mock('@/lib/browser-uuid', () => ({
+  createBrowserUuid: () => {
+    browserUuidCalls.count += 1
+    return `00000000-0000-4000-8000-${String(browserUuidCalls.count).padStart(12, '0')}`
+  }
+}))
+
+vi.mock('@/hooks/useShortcutLabel', () => ({ useShortcutLabel: () => 'Cmd+G' }))
+vi.mock('@/components/browser-pane/annotate/guest-annotation-viewport-bridge', () => ({
+  syncGuestAnnotationViewportBridge: vi.fn()
+}))
+vi.mock('@/components/browser-pane/annotate/use-browser-page-annotation-send', () => ({
+  useBrowserPageAnnotationSend: () => ({
+    browserAnnotations: [],
+    setBrowserAnnotationTrayOpen: vi.fn()
+  })
+}))
+vi.mock('@/components/browser-pane/annotate/use-browser-page-grab-annotations', () => ({
+  useBrowserPageGrabAnnotations: () => ({})
+}))
+vi.mock('@/components/browser-pane/annotate/use-browser-page-markup-capture', () => ({
+  useBrowserPageMarkupCapture: () => ({})
+}))
+vi.mock('@/components/browser-pane/annotate/useGrabMode', () => ({
+  useGrabMode: () => ({ active: false })
+}))
+
+const { useDocPreviewGuestTools } = await import('./use-doc-preview-guest-tools')
+
+let bumpRender: (() => void) | null = null
+
+function Host(): null {
+  const [, setTick] = useState(0)
+  bumpRender = () => setTick((tick) => tick + 1)
+  useDocPreviewGuestTools({
+    previewId: 'preview-1',
+    worktreeId: 'wt-1',
+    grantId: 'grant-1',
+    webviewRef: { current: null },
+    containerRef: { current: null },
+    toolsReady: true
+  } as unknown as Parameters<typeof useDocPreviewGuestTools>[0])
+  return null
+}
+
+afterEach(() => {
+  cleanup()
+  browserUuidCalls.count = 0
+  bumpRender = null
+})
+
+describe('useDocPreviewGuestTools annotation bridge token', () => {
+  it('mints the bridge token once per mount, not once per render', () => {
+    render(<Host />)
+    expect(browserUuidCalls.count).toBe(1)
+
+    for (let i = 0; i < 20; i += 1) {
+      act(() => bumpRender?.())
+    }
+
+    expect(browserUuidCalls.count).toBe(1)
+  })
+})
diff --git a/src/renderer/src/components/browser-pane/workspace-doc/use-doc-preview-guest-tools.ts b/src/renderer/src/components/browser-pane/workspace-doc/use-doc-preview-guest-tools.ts
index 9eec9b8affe..83706aa3fcd 100644
--- a/src/renderer/src/components/browser-pane/workspace-doc/use-doc-preview-guest-tools.ts
+++ b/src/renderer/src/components/browser-pane/workspace-doc/use-doc-preview-guest-tools.ts
@@ -41,7 +41,8 @@ export function useDocPreviewGuestTools({
   // Why still empty before the first grant: the page is only a tool target once a document is on
   // screen, and useGrabMode needs a stable identity every render rather than one to guess with.
   const toolTargetId = grantId === null ? '' : previewId
-  const annotationViewportBridgeTokenRef = useRef(createBrowserUuid().replaceAll('-', ''))
+  const annotationViewportBridgeTokenRef = useRef<string>(undefined!)
+  annotationViewportBridgeTokenRef.current ??= createBrowserUuid().replaceAll('-', '')
   const [browserOverlayViewport, setBrowserOverlayViewport] = useState<BrowserOverlayViewport>({
     scrollX: 0,
     scrollY: 0,
diff --git a/src/renderer/src/components/dashboard/useAgentBucketCounts.ts b/src/renderer/src/components/dashboard/useAgentBucketCounts.ts
index 60df4995e56..0e8c2881244 100644
--- a/src/renderer/src/components/dashboard/useAgentBucketCounts.ts
+++ b/src/renderer/src/components/dashboard/useAgentBucketCounts.ts
@@ -51,7 +51,8 @@ export function useAgentBucketCounts(): AgentBucketCounts {
 
   // Why a per-hook cache: unrelated status/title writes change one worktree's inputs;
   // the cache keeps every other worktree's counts without rerunning its row pipeline.
-  const cacheRef = useRef(createDashboardBucketCountsCache())
+  const cacheRef = useRef<ReturnType<typeof createDashboardBucketCountsCache>>(undefined!)
+  cacheRef.current ??= createDashboardBucketCountsCache()
   return useMemo(() => {
     return buildDashboardBucketCounts(
       {
diff --git a/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts b/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts
index 227cf4e3f8b..52270167ef9 100644
--- a/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts
+++ b/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts
@@ -11,7 +11,8 @@ import { createWorktreeAgentRowsCache } from './worktree-agent-rows-cache'
  * is no relay, so we derive it here from the same builder the bridge uses.
  */
 export function useLiveDashboardSnapshot(): DashboardSnapshot {
-  const rowsCacheRef = useRef(createWorktreeAgentRowsCache())
+  const rowsCacheRef = useRef<ReturnType<typeof createWorktreeAgentRowsCache>>(undefined!)
+  rowsCacheRef.current ??= createWorktreeAgentRowsCache()
   const repos = useAppStore((s) => s.repos)
   const worktreesByRepo = useAppStore((s) => s.worktreesByRepo)
   const tabsByWorktree = useAppStore((s) => s.tabsByWorktree)
diff --git a/src/renderer/src/components/editor/combined-diff/load-sections/combined-diff-section-load-registry.ts b/src/renderer/src/components/editor/combined-diff/load-sections/combined-diff-section-load-registry.ts
index c74d03d7692..370dbd6ebf0 100644
--- a/src/renderer/src/components/editor/combined-diff/load-sections/combined-diff-section-load-registry.ts
+++ b/src/renderer/src/components/editor/combined-diff/load-sections/combined-diff-section-load-registry.ts
@@ -47,11 +47,10 @@ export function useCombinedDiffSectionLoadRegistry(
   const loadSectionRef = useRef<(index: number) => Promise<void>>(async () => {})
   const retrySectionRef = useRef<(index: number) => void>(() => {})
   const requestSectionReloadRef = useRef<(index: number) => void>(() => {})
-  const loadSchedulerRef = useRef(
-    createCombinedDiffLoadScheduler({
-      loadSection: (index) => loadSectionRef.current(index)
-    })
-  )
+  const loadSchedulerRef = useRef<ReturnType<typeof createCombinedDiffLoadScheduler>>(undefined!)
+  loadSchedulerRef.current ??= createCombinedDiffLoadScheduler({
+    loadSection: (index) => loadSectionRef.current(index)
+  })
   sectionsRef.current = sections
 
   useEffect(() => {
diff --git a/src/renderer/src/components/editor/combined-diff/remember-view/use-combined-diff-view-restore.ts b/src/renderer/src/components/editor/combined-diff/remember-view/use-combined-diff-view-restore.ts
index 9f657e3abd0..7fcc833df91 100644
--- a/src/renderer/src/components/editor/combined-diff/remember-view/use-combined-diff-view-restore.ts
+++ b/src/renderer/src/components/editor/combined-diff/remember-view/use-combined-diff-view-restore.ts
@@ -1,4 +1,4 @@
-import { useCallback, useLayoutEffect, useRef } from 'react'
+import { useCallback, useLayoutEffect, useRef, useState } from 'react'
 import type React from 'react'
 import type { VirtualizedScrollAnchor } from '@/hooks/useVirtualizedScrollAnchor'
 import type { GitStatusEntry } from '../../../../../../shared/git-status-types'
@@ -65,13 +65,16 @@ export function useCombinedDiffViewRestore({
     sectionLoadTokensRef
   } = registry
 
-  const scrollOffsetRef = useRef(combinedDiffScrollTopCache.get(viewStateKey) ?? 0)
-  const scrollAnchorRef = useRef<VirtualizedScrollAnchor>(
-    combinedDiffScrollAnchorCache.get(viewStateKey) ?? null
-  )
-  const latestDomScrollAnchorRef = useRef<VirtualizedScrollAnchor>(
-    combinedDiffScrollAnchorCache.get(viewStateKey) ?? null
-  )
+  // Why useState and not `useRef(expr)`: the latter re-reads all three caches on every render and
+  // throws the result away, and an anchor seeds legitimately to null so a nullish guard would keep
+  // re-reading. useState's initializer runs once without writing a ref during render.
+  const [restoreSeed] = useState<{ offset: number; anchor: VirtualizedScrollAnchor }>(() => ({
+    offset: combinedDiffScrollTopCache.get(viewStateKey) ?? 0,
+    anchor: combinedDiffScrollAnchorCache.get(viewStateKey) ?? null
+  }))
+  const scrollOffsetRef = useRef(restoreSeed.offset)
+  const scrollAnchorRef = useRef<VirtualizedScrollAnchor>(restoreSeed.anchor)
+  const latestDomScrollAnchorRef = useRef<VirtualizedScrollAnchor>(restoreSeed.anchor)
 
   // Why: tab/worktree switches unmount this viewer; cache by pane key so remount restores sections+scroll before repaint.
   const initializedEntryStateRef = useRef<{
diff --git a/src/renderer/src/components/emulator-pane/use-emulator-pane-session.ts b/src/renderer/src/components/emulator-pane/use-emulator-pane-session.ts
index 2ac04a9ca99..c696374526e 100644
--- a/src/renderer/src/components/emulator-pane/use-emulator-pane-session.ts
+++ b/src/renderer/src/components/emulator-pane/use-emulator-pane-session.ts
@@ -39,11 +39,13 @@ export function useEmulatorPaneSession({
   const configuredDefaultUdid = useAppStore(
     (state) => state.settings?.mobileEmulatorDefaultDeviceUdid ?? null
   )
-  const prelaunchedSessionRef = useRef<EmulatorPaneSession['info'] | null>(
+  // Why the lazy initializer: the consume deletes the handoff entry, and a `useRef(expr)` argument
+  // re-runs every render — so a prelaunch registered after mount was consumed and then discarded.
+  const [prelaunchedSession] = useState<EmulatorPaneSession['info'] | null>(() =>
     consumePrelaunchedSimulatorSession(worktreeId)
   )
   const prelaunchedState = buildPrelaunchedEmulatorSessionState(
-    prelaunchedSessionRef.current,
+    prelaunchedSession,
     configuredDefaultUdid
   )
   const [selectedUdid, setSelectedUdid] = useState<string | null>(prelaunchedState.selectedUdid)
diff --git a/src/renderer/src/components/feature-wall/use-feature-wall-session-depth.ts b/src/renderer/src/components/feature-wall/use-feature-wall-session-depth.ts
index c4d57043410..9ac9fcaa48f 100644
--- a/src/renderer/src/components/feature-wall/use-feature-wall-session-depth.ts
+++ b/src/renderer/src/components/feature-wall/use-feature-wall-session-depth.ts
@@ -47,13 +47,14 @@ export function useFeatureWallSessionDepth(
     visitedWorkbenchSteps: Set<WorkbenchStepId>
     visitedReviewSteps: Set<ReviewStepId>
     lastGroupId: FeatureWallWorkflowId | null
-  }>({
+  }>(undefined!)
+  sessionDepthRef.current ??= {
     visitedWorkflows: new Set(),
     visitedAgentSteps: new Set(),
     visitedWorkbenchSteps: new Set(),
     visitedReviewSteps: new Set(),
     lastGroupId: null
-  })
+  }
 
   const getTourDepthSummary = useCallback((): FeatureWallTourDepthSummary => {
     const session = sessionDepthRef.current
diff --git a/src/renderer/src/components/feature-wall/use-feature-wall-tour-telemetry.ts b/src/renderer/src/components/feature-wall/use-feature-wall-tour-telemetry.ts
index 7f98c90520a..23134e2a4a6 100644
--- a/src/renderer/src/components/feature-wall/use-feature-wall-tour-telemetry.ts
+++ b/src/renderer/src/components/feature-wall/use-feature-wall-tour-telemetry.ts
@@ -77,7 +77,8 @@ export function useFeatureWallTourTelemetry(args: {
   getDepthSummary: () => FeatureWallTourDepthSummary
 }): { markExitAction: (exitAction: FeatureWallExitAction) => void } {
   const { isOpen, source, getDepthSummary } = args
-  const telemetryRef = useRef<FeatureWallTourTelemetryState>(createFeatureWallTourTelemetryState())
+  const telemetryRef = useRef<FeatureWallTourTelemetryState>(undefined!)
+  telemetryRef.current ??= createFeatureWallTourTelemetryState()
   const sourceRef = useRef(source)
   const getDepthSummaryRef = useRef(getDepthSummary)
   // Why: close telemetry may emit from stable callbacks; keep the payload
diff --git a/src/renderer/src/components/floating-terminal/FloatingTerminalPanel.shortcuts.test.tsx b/src/renderer/src/components/floating-terminal/FloatingTerminalPanel.shortcuts.test.tsx
index 3593643b50c..3e4de4227e7 100644
--- a/src/renderer/src/components/floating-terminal/FloatingTerminalPanel.shortcuts.test.tsx
+++ b/src/renderer/src/components/floating-terminal/FloatingTerminalPanel.shortcuts.test.tsx
@@ -11,6 +11,10 @@ import {
   type FloatingPanelStoreState
 } from './floating-terminal-panel-test-fixtures'
 import { mocks, setupFloatingTerminalPanelTest } from './floating-terminal-panel-test-harness'
+import {
+  RENAME_TERMINAL_TAB_EVENT,
+  type RenameTerminalTabDetail
+} from '@/components/tab-bar/terminal-tab-rename-request'
 import {
   attachRef,
   bindFocusedFloatingPanelKeydown,
@@ -159,6 +163,15 @@ vi.mock('@/components/ShortcutKeyCombo', async () => {
   return (await import('./floating-terminal-panel-component-stubs')).createShortcutKeyComboModule()
 })
 
+/** Tab ids the panel asked to rename, in dispatch order. */
+function dispatchedRenameTabIds(): string[] {
+  return vi
+    .mocked(window.dispatchEvent)
+    .mock.calls.map(([event]) => event as CustomEvent<RenameTerminalTabDetail>)
+    .filter((event) => event.type === RENAME_TERMINAL_TAB_EVENT)
+    .map((event) => event.detail.tabId)
+}
+
 describe('FloatingTerminalPanel close behavior', () => {
   beforeEach(setupFloatingTerminalPanelTest)
 
@@ -434,7 +447,7 @@ describe('FloatingTerminalPanel close behavior', () => {
     expect(preventDefault).toHaveBeenCalledWith()
     expect(stopPropagation).toHaveBeenCalledWith()
     expect(stopImmediatePropagation).toHaveBeenCalledWith()
-    expect(mocks.setRenamingTabId).toHaveBeenCalledWith('tab-1')
+    expect(dispatchedRenameTabIds()).toEqual(['tab-1'])
     expect(mocks.setTabCustomTitle).not.toHaveBeenCalled()
   })
 
@@ -607,7 +620,7 @@ describe('FloatingTerminalPanel close behavior', () => {
       })
     )
 
-    expect(mocks.setRenamingTabId).not.toHaveBeenCalled()
+    expect(dispatchedRenameTabIds()).toEqual([])
   })
 
   it('leaves focused floating xterm tab index shortcuts to terminal-first terminals', async () => {
diff --git a/src/renderer/src/components/floating-terminal/floating-terminal-panel-test-fixtures.ts b/src/renderer/src/components/floating-terminal/floating-terminal-panel-test-fixtures.ts
index ac6fc0c1cf4..b51cb9a6d78 100644
--- a/src/renderer/src/components/floating-terminal/floating-terminal-panel-test-fixtures.ts
+++ b/src/renderer/src/components/floating-terminal/floating-terminal-panel-test-fixtures.ts
@@ -15,7 +15,6 @@ export type FloatingPanelStoreState = {
   activeGroupIdByWorktree: Record<string, string | null>
   activeTabIdByWorktree: Record<string, string | null>
   expandedPaneByTabId: Record<string, boolean>
-  renamingTabId: string | null
   createTab: (
     worktreeId: string,
     groupId?: string,
@@ -42,7 +41,6 @@ export type FloatingPanelStoreState = {
   activateTab: (tabId: string) => void
   setActiveTab: (tabId: string) => void
   setTabCustomTitle: (tabId: string, title: string | null) => void
-  setRenamingTabId: (tabId: string | null) => void
   setTabColor: (tabId: string, color: string | null) => void
   setTabPaneExpanded: (tabId: string, expanded: boolean) => void
   makePreviewFilePermanent: (fileId: string, tabId?: string) => void
diff --git a/src/renderer/src/components/floating-terminal/floating-terminal-panel-test-harness.ts b/src/renderer/src/components/floating-terminal/floating-terminal-panel-test-harness.ts
index 392a7bd224c..183508fa9aa 100644
--- a/src/renderer/src/components/floating-terminal/floating-terminal-panel-test-harness.ts
+++ b/src/renderer/src/components/floating-terminal/floating-terminal-panel-test-harness.ts
@@ -59,7 +59,6 @@ export type FloatingTerminalPanelMocks = {
   pinFile: Mock<FloatingPanelStoreState['pinFile']>
   setFloatingFocus: Mock<(state: { panelFocused: boolean; terminalFocused: boolean }) => void>
   setActiveTab: Mock<FloatingPanelStoreState['setActiveTab']>
-  setRenamingTabId: Mock<FloatingPanelStoreState['setRenamingTabId']>
   setTabColor: Mock<FloatingPanelStoreState['setTabColor']>
   setTabCustomTitle: Mock<FloatingPanelStoreState['setTabCustomTitle']>
   setTabPaneExpanded: Mock<FloatingPanelStoreState['setTabPaneExpanded']>
@@ -106,7 +105,6 @@ export const mocks: FloatingTerminalPanelMocks = {
   pinFile: vi.fn(),
   setFloatingFocus: vi.fn(),
   setActiveTab: vi.fn(),
-  setRenamingTabId: vi.fn(),
   setTabColor: vi.fn(),
   setTabCustomTitle: vi.fn(),
   setTabPaneExpanded: vi.fn(),
@@ -133,7 +131,6 @@ function resetStore(tabs: TerminalTab[] = []): void {
     activeGroupIdByWorktree: {},
     activeTabIdByWorktree: { [FLOATING_TERMINAL_WORKTREE_ID]: tabs[0]?.id ?? null },
     expandedPaneByTabId: {},
-    renamingTabId: null,
     activateTab: mocks.activateTab,
     closeBrowserTab: mocks.closeBrowserTab,
     closeFile: mocks.closeFile,
@@ -147,7 +144,6 @@ function resetStore(tabs: TerminalTab[] = []): void {
     pinFile: mocks.pinFile,
     setActiveTab: mocks.setActiveTab,
     setTabCustomTitle: mocks.setTabCustomTitle,
-    setRenamingTabId: mocks.setRenamingTabId,
     setTabColor: mocks.setTabColor,
     setTabPaneExpanded: mocks.setTabPaneExpanded,
     browserDefaultUrl: 'about:blank',
@@ -196,6 +192,7 @@ export async function setupFloatingTerminalPanelTest(): Promise<void> {
   }
   vi.stubGlobal('window', {
     addEventListener: vi.fn(),
+    dispatchEvent: vi.fn(),
     api: {
       app: {
         getFloatingMarkdownDirectory: mocks.getFloatingMarkdownDirectory,
diff --git a/src/renderer/src/components/floating-terminal/use-floating-terminal-panel-shortcuts.ts b/src/renderer/src/components/floating-terminal/use-floating-terminal-panel-shortcuts.ts
index b597810c0fd..ee1979451cf 100644
--- a/src/renderer/src/components/floating-terminal/use-floating-terminal-panel-shortcuts.ts
+++ b/src/renderer/src/components/floating-terminal/use-floating-terminal-panel-shortcuts.ts
@@ -7,6 +7,7 @@ import {
 } from '@/lib/floating-workspace-shortcut-policy'
 import { isFloatingWorkspaceTerminalInputTarget } from '@/lib/floating-workspace-terminal-actions'
 import { getShortcutPlatform } from '@/lib/shortcut-platform'
+import { requestTerminalTabRename } from '@/components/tab-bar/terminal-tab-rename-request'
 import { useAppStore } from '@/store'
 import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
 import type { KeybindingContext, KeybindingMatchOptions } from '../../../../shared/keybindings'
@@ -168,7 +169,7 @@ export function useFloatingTerminalPanelShortcuts({
           return 'unmatched'
         }
         consume()
-        useAppStore.getState().setRenamingTabId(activeTab.id)
+        requestTerminalTabRename(activeTab.id)
         return 'handled'
       }
       consume()
diff --git a/src/renderer/src/components/native-chat/use-native-chat-live-session.ts b/src/renderer/src/components/native-chat/use-native-chat-live-session.ts
index 59c4b80e389..9335965bdb8 100644
--- a/src/renderer/src/components/native-chat/use-native-chat-live-session.ts
+++ b/src/renderer/src/components/native-chat/use-native-chat-live-session.ts
@@ -117,7 +117,8 @@ export function useNativeChatLiveSession(
   // Appended messages accumulate separately from the snapshot so pagination doesn't lose in-flight appends; merged by id and capped to the read window (#6).
   const [appended, setAppended] = useState<NativeChatMessage[]>([])
   // Id-dedup merger backing `appended`; caches the id→index map so each live frame costs O(incoming), not O(existing) (#18).
-  const appendMergerRef = useRef(createNativeChatMerger(NATIVE_CHAT_SOURCE_PRIORITY))
+  const appendMergerRef = useRef<ReturnType<typeof createNativeChatMerger>>(undefined!)
+  appendMergerRef.current ??= createNativeChatMerger(NATIVE_CHAT_SOURCE_PRIORITY)
 
   const [hookState, hookStateStartedAt, hookHasWorkingSubagents] = useNativeChatHookStatus(paneKey)
 
diff --git a/src/renderer/src/components/native-chat/use-native-chat-retained-session.ts b/src/renderer/src/components/native-chat/use-native-chat-retained-session.ts
index 6d176f2ac55..eda95b074cc 100644
--- a/src/renderer/src/components/native-chat/use-native-chat-retained-session.ts
+++ b/src/renderer/src/components/native-chat/use-native-chat-retained-session.ts
@@ -22,7 +22,8 @@ export function useNativeChatRetainedSession(
     args.transcriptPath ?? null
   ])
   const activeIdentityRef = useRef(identity)
-  const retentionRef = useRef(createNativeChatTranscriptRetention())
+  const retentionRef = useRef<ReturnType<typeof createNativeChatTranscriptRetention>>(undefined!)
+  retentionRef.current ??= createNativeChatTranscriptRetention()
   const sessionMatchesIdentity = activeIdentityRef.current === identity
   const readPhase = sessionMatchesIdentity ? session.readPhase : 'loading'
 
diff --git a/src/renderer/src/components/right-sidebar/ai-vault-session-refresh.ts b/src/renderer/src/components/right-sidebar/ai-vault-session-refresh.ts
index b1f72178b24..d8655a560d3 100644
--- a/src/renderer/src/components/right-sidebar/ai-vault-session-refresh.ts
+++ b/src/renderer/src/components/right-sidebar/ai-vault-session-refresh.ts
@@ -61,7 +61,8 @@ export function useAiVaultSessionRefresh(
   const sessions = scanResult?.sessions ?? EMPTY_AI_VAULT_SESSIONS
   const [loading, setLoading] = useState(false)
   const [error, setError] = useState<string | null>(null)
-  const requestTokenRef = useRef(crypto.randomUUID())
+  const requestTokenRef = useRef<string>(undefined!)
+  requestTokenRef.current ??= crypto.randomUUID()
   const refreshIdRef = useRef(0)
   const refreshInFlightRef = useRef(false)
   const pendingRefreshRef = useRef(false)
@@ -69,7 +70,8 @@ export function useAiVaultSessionRefresh(
   const pendingBackgroundRef = useRef(true)
   const lastAppliedScanRef = useRef<{ scopeKey: string; scannedAt: string } | null>(null)
   const mountedRef = useRef(true)
-  const publicationGateRef = useRef(new AiVaultSessionPublicationGate())
+  const publicationGateRef = useRef<AiVaultSessionPublicationGate>(undefined!)
+  publicationGateRef.current ??= new AiVaultSessionPublicationGate()
   const scanScopeKey = `${aiVaultSessionResultCacheKey(executionHostScope, scopePaths)}\n${sessionLimit}`
   const scopePathsRef = useRef<readonly string[]>(scopePaths)
   scopePathsRef.current = scopePaths
diff --git a/src/renderer/src/components/right-sidebar/source-control/sync/git-history-panel.tsx b/src/renderer/src/components/right-sidebar/source-control/sync/git-history-panel.tsx
index 35751a428d1..71de9872649 100644
--- a/src/renderer/src/components/right-sidebar/source-control/sync/git-history-panel.tsx
+++ b/src/renderer/src/components/right-sidebar/source-control/sync/git-history-panel.tsx
@@ -92,7 +92,8 @@ export function GitHistoryPanel({
   const loadedCommitsRef = useRef<{
     result: GitHistoryResult | undefined
     ids: Set<string>
-  }>({ result, ids: new Set() })
+  }>(undefined!)
+  loadedCommitsRef.current ??= { result, ids: new Set() }
 
   // A new history result can reorder or replace commits, so drop any expansion
   // and cached file lists rather than risk showing stale files under a row.
diff --git a/src/renderer/src/components/right-sidebar/useCreatePullRequestDialogFields.ts b/src/renderer/src/components/right-sidebar/useCreatePullRequestDialogFields.ts
index 18e1c4c999d..fbb0508ee24 100644
--- a/src/renderer/src/components/right-sidebar/useCreatePullRequestDialogFields.ts
+++ b/src/renderer/src/components/right-sidebar/useCreatePullRequestDialogFields.ts
@@ -58,9 +58,8 @@ export function useCreatePullRequestDialogFields({
   const generationRequestIdRef = useRef(0)
   const generationSeedRef = useRef<GenerationSeed | null>(null)
   const restoredExternalGenerationSeedRef = useRef<string | null>(null)
-  const fieldRevisionsRef = useRef<PullRequestFieldRevisions>(
-    createInitialPullRequestFieldRevisions()
-  )
+  const fieldRevisionsRef = useRef<PullRequestFieldRevisions>(undefined!)
+  fieldRevisionsRef.current ??= createInitialPullRequestFieldRevisions()
   const [base, setBase] = useState('')
   const [title, setTitle] = useState('')
   const [body, setBody] = useState('')
diff --git a/src/renderer/src/components/right-sidebar/useFileExplorerTree.ts b/src/renderer/src/components/right-sidebar/useFileExplorerTree.ts
index d6f695c2ac3..4c8311f8dfa 100644
--- a/src/renderer/src/components/right-sidebar/useFileExplorerTree.ts
+++ b/src/renderer/src/components/right-sidebar/useFileExplorerTree.ts
@@ -45,7 +45,8 @@ export function useFileExplorerTree(
   const [rootError, setRootError] = useState<string | null>(null)
   const dirCacheRef = useRef(dirCache)
   dirCacheRef.current = dirCache
-  const dirLoadTrackerRef = useRef(createFileExplorerDirLoadTracker())
+  const dirLoadTrackerRef = useRef<ReturnType<typeof createFileExplorerDirLoadTracker>>(undefined!)
+  dirLoadTrackerRef.current ??= createFileExplorerDirLoadTracker()
   // Why: a ref, not state — the expansion effect must read the mark set by a refresh that landed
   // after the effect's render, and a state write would only be visible one render too late.
   const staleDirsRef = useRef(new Set<string>())
diff --git a/src/renderer/src/components/settings/CommitMessageAiPane.tsx b/src/renderer/src/components/settings/CommitMessageAiPane.tsx
index d14ff189c72..096ccd34d51 100644
--- a/src/renderer/src/components/settings/CommitMessageAiPane.tsx
+++ b/src/renderer/src/components/settings/CommitMessageAiPane.tsx
@@ -104,7 +104,8 @@ export function CommitMessageAiPane({
   const searchQuery = settingsSearchQuery ?? storeSearchQuery
   const config = readSettings(settings)
   const ownership = getSettingOwnershipSummary('sourceControlAiDefaults')
-  const settingsWriteQueueRef = useRef<Promise<void>>(Promise.resolve())
+  const settingsWriteQueueRef = useRef<Promise<void>>(undefined!)
+  settingsWriteQueueRef.current ??= Promise.resolve()
 
   const localWriteConfig = (patch: SourceControlAiSettingsPatch): Promise<void> => {
     const next = settingsWriteQueueRef.current
diff --git a/src/renderer/src/components/settings/repository-source-control-ai-global-ux.ts b/src/renderer/src/components/settings/repository-source-control-ai-global-ux.ts
index a27db245e6d..3a13f6186ca 100644
--- a/src/renderer/src/components/settings/repository-source-control-ai-global-ux.ts
+++ b/src/renderer/src/components/settings/repository-source-control-ai-global-ux.ts
@@ -83,25 +83,24 @@ export function useRepositorySourceControlAiGlobalUx({
   const lastSyncedRepoIdRef = useRef(repoId)
   const pendingWritesRef = useRef(0)
 
-  const queueRef = useRef(
-    createRepoAiPersistQueue({
-      getRepoId: () => repoIdRef.current,
-      getPersisted: () => persistedRef.current,
-      setPersisted: (value) => {
-        persistedRef.current = value
-        if (mountedRef.current) {
-          setBaselineRepoAiRef.current(value)
-        }
-      },
-      updateRepo: (id, updates) => updateRepoRef.current(id, updates),
-      isMounted: () => mountedRef.current,
-      onError: (message) => {
-        if (mountedRef.current) {
-          setSaveError(message)
-        }
+  const queueRef = useRef<ReturnType<typeof createRepoAiPersistQueue>>(undefined!)
+  queueRef.current ??= createRepoAiPersistQueue({
+    getRepoId: () => repoIdRef.current,
+    getPersisted: () => persistedRef.current,
+    setPersisted: (value) => {
+      persistedRef.current = value
+      if (mountedRef.current) {
+        setBaselineRepoAiRef.current(value)
       }
-    })
-  )
+    },
+    updateRepo: (id, updates) => updateRepoRef.current(id, updates),
+    isMounted: () => mountedRef.current,
+    onError: (message) => {
+      if (mountedRef.current) {
+        setSaveError(message)
+      }
+    }
+  })
 
   useEffect(() => {
     const repoChanged = lastSyncedRepoIdRef.current !== repoId
diff --git a/src/renderer/src/components/settings/use-settings-interaction-controller.ts b/src/renderer/src/components/settings/use-settings-interaction-controller.ts
index bfd24c7e5d8..6d949004749 100644
--- a/src/renderer/src/components/settings/use-settings-interaction-controller.ts
+++ b/src/renderer/src/components/settings/use-settings-interaction-controller.ts
@@ -39,7 +39,8 @@ export function useSettingsInteractionController(model: SettingsStoreModel) {
   const pendingScrollTargetWatchRef = useRef<SettingsDeepLinkTargetWatch | null>(null)
   const repoHooksRequestSeqRef = useRef(0)
   const shortcutsEscapeConfirmUntilRef = useRef(0)
-  const sourceControlAiWriteQueueRef = useRef<Promise<void>>(Promise.resolve())
+  const sourceControlAiWriteQueueRef = useRef<Promise<void>>(undefined!)
+  sourceControlAiWriteQueueRef.current ??= Promise.resolve()
 
   const hasUnsavedSourceControlAiPromptChanges =
     hasUnsavedCommitPromptChanges || hasUnsavedBranchPromptChanges
diff --git a/src/renderer/src/components/sidebar/use-workspace-kanban-column-resize.ts b/src/renderer/src/components/sidebar/use-workspace-kanban-column-resize.ts
index a48e940a3db..17547d5cd56 100644
--- a/src/renderer/src/components/sidebar/use-workspace-kanban-column-resize.ts
+++ b/src/renderer/src/components/sidebar/use-workspace-kanban-column-resize.ts
@@ -20,7 +20,8 @@ export function useWorkspaceKanbanColumnResize(
     clampWorkspaceBoardColumnWidth(committedWidth)
   )
   const [isResizingColumn, setIsResizingColumn] = useState(false)
-  const committedWidthRef = useRef(clampWorkspaceBoardColumnWidth(committedWidth))
+  const nextCommittedWidth = clampWorkspaceBoardColumnWidth(committedWidth)
+  const committedWidthRef = useRef(nextCommittedWidth)
   const commitWidthRef = useRef(onCommitWidth)
   const resizingRef = useRef(false)
   const startXRef = useRef(0)
@@ -29,7 +30,6 @@ export function useWorkspaceKanbanColumnResize(
   const frameRef = useRef<number | null>(null)
 
   commitWidthRef.current = onCommitWidth
-  const nextCommittedWidth = clampWorkspaceBoardColumnWidth(committedWidth)
   if (committedWidthRef.current !== nextCommittedWidth) {
     committedWidthRef.current = nextCommittedWidth
     if (!resizingRef.current) {
diff --git a/src/renderer/src/components/sidebar/worktree-list/viewport/use-scroll-to-top.ts b/src/renderer/src/components/sidebar/worktree-list/viewport/use-scroll-to-top.ts
index d732aa71cec..8c88d812746 100644
--- a/src/renderer/src/components/sidebar/worktree-list/viewport/use-scroll-to-top.ts
+++ b/src/renderer/src/components/sidebar/worktree-list/viewport/use-scroll-to-top.ts
@@ -42,7 +42,8 @@ export function useWorktreeListScrollToTop({
   showScrollToTop: boolean
   scrollToTop: () => void
 } {
-  const detectorRef = useRef<HardScrollUpDetectorState>(createHardScrollUpDetectorState())
+  const detectorRef = useRef<HardScrollUpDetectorState>(undefined!)
+  detectorRef.current ??= createHardScrollUpDetectorState()
   const [showScrollToTop, setShowScrollToTop] = useState(false)
   const showScrollToTopRef = useRef(false)
   const idleTimerRef = useRef<number | null>(null)
diff --git a/src/renderer/src/components/tab-bar/SortableTab.rename-shortcut.test.tsx b/src/renderer/src/components/tab-bar/SortableTab.rename-shortcut.test.tsx
index fd275935f77..2e04247dd9b 100644
--- a/src/renderer/src/components/tab-bar/SortableTab.rename-shortcut.test.tsx
+++ b/src/renderer/src/components/tab-bar/SortableTab.rename-shortcut.test.tsx
@@ -1,4 +1,7 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { requestTerminalTabRename } from './terminal-tab-rename-request'
+
+const windowListeners = new Map<string, Set<(event: Event) => void>>()
 
 const reactHookRuntime = vi.hoisted(() => ({
   states: [] as unknown[],
@@ -11,10 +14,8 @@ const storeState = vi.hoisted(
     clearTabLaunchAgent: ReturnType<typeof vi.fn>
     ptyIdsByTabId: Record<string, string[]>
     retainedAgentsByPaneKey: Record<string, unknown>
-    renamingTabId: string | null
     keybindings: Record<string, unknown>
     repos: unknown[]
-    setRenamingTabId: ReturnType<typeof vi.fn>
     terminalLayoutsByTabId: Record<string, unknown>
     worktreesByRepo: Record<string, unknown>
     unreadTerminalTabs: Record<string, boolean>
@@ -23,12 +24,8 @@ const storeState = vi.hoisted(
     clearTabLaunchAgent: vi.fn(),
     ptyIdsByTabId: {} as Record<string, string[]>,
     retainedAgentsByPaneKey: {},
-    renamingTabId: null as string | null,
     keybindings: {},
     repos: [],
-    setRenamingTabId: vi.fn((tabId: string | null) => {
-      storeState.renamingTabId = tabId
-    }),
     terminalLayoutsByTabId: {},
     worktreesByRepo: {},
     unreadTerminalTabs: {} as Record<string, boolean>
@@ -340,13 +337,24 @@ describe('SortableTab rename shortcut signal', () => {
   beforeEach(() => {
     reactHookRuntime.states = []
     reactHookRuntime.index = 0
-    storeState.renamingTabId = 'terminal-tab-1'
     storeState.unreadTerminalTabs = {}
     storeState.clearTabLaunchAgent.mockClear()
-    storeState.setRenamingTabId.mockClear()
+    windowListeners.clear()
     vi.stubGlobal('window', {
-      addEventListener: vi.fn(),
-      removeEventListener: vi.fn()
+      addEventListener: vi.fn((type: string, listener: (event: Event) => void) => {
+        const listeners = windowListeners.get(type) ?? new Set<(event: Event) => void>()
+        listeners.add(listener)
+        windowListeners.set(type, listeners)
+      }),
+      removeEventListener: vi.fn((type: string, listener: (event: Event) => void) => {
+        windowListeners.get(type)?.delete(listener)
+      }),
+      dispatchEvent: vi.fn((event: Event) => {
+        for (const listener of windowListeners.get(event.type) ?? []) {
+          listener(event)
+        }
+        return true
+      })
     })
     vi.stubGlobal('requestAnimationFrame', (callback: FrameRequestCallback) => {
       callback(0)
@@ -355,22 +363,30 @@ describe('SortableTab rename shortcut signal', () => {
     vi.stubGlobal('cancelAnimationFrame', vi.fn())
   })
 
-  it('opens the inline rename input and consumes the matching store signal', async () => {
+  it('opens the inline rename input for a request that targets this tab', async () => {
     await renderSortableTab()
+    requestTerminalTabRename('terminal-tab-1')
     const rerender = expandNode(await renderSortableTab())
     const inputs = findElementsByType(rerender, 'input')
 
-    expect(storeState.setRenamingTabId).toHaveBeenCalledWith(null)
-    expect(storeState.renamingTabId).toBeNull()
     expect(inputs).toHaveLength(1)
     expect(inputs[0].props.value).toBe('Runtime terminal title')
     expect(inputs[0].props['data-tab-rename-input']).toBe('true')
   })
 
+  it('ignores a rename request aimed at a different tab', async () => {
+    await renderSortableTab()
+    requestTerminalTabRename('terminal-tab-2')
+    const rerender = expandNode(await renderSortableTab())
+
+    expect(findElementsByType(rerender, 'input')).toHaveLength(0)
+  })
+
   it('ignores IME composition Enter before committing the custom tab title', async () => {
     const onSetCustomTitle = vi.fn()
 
     await renderSortableTab({ onSetCustomTitle })
+    requestTerminalTabRename('terminal-tab-1')
     let rerender = expandNode(await renderSortableTab({ onSetCustomTitle }))
     let input = findElementsByType(rerender, 'input')[0]
     ;(input.props.onChange as (event: { target: { value: string } }) => void)({
diff --git a/src/renderer/src/components/tab-bar/SortableTab.tsx b/src/renderer/src/components/tab-bar/SortableTab.tsx
index 70935abb29a..cb5966d1e23 100644
--- a/src/renderer/src/components/tab-bar/SortableTab.tsx
+++ b/src/renderer/src/components/tab-bar/SortableTab.tsx
@@ -17,6 +17,10 @@ import {
   type DropIndicator
 } from './drop-indicator'
 import { preventMiddleButtonDefault } from './middle-button-default-guard'
+import {
+  RENAME_TERMINAL_TAB_EVENT,
+  type RenameTerminalTabDetail
+} from './terminal-tab-rename-request'
 import { SortableTabContextMenu } from './SortableTabContextMenu'
 import { translate } from '@/i18n/i18n'
 import { TAB_CONTAINER_WIDTH_CLASSES, TAB_LABEL_WIDTH_CLASSES } from './tab-width-rules'
@@ -97,8 +101,6 @@ export default function SortableTab({
       terminalLayout: s.terminalLayoutsByTabId?.[tab.id]
     })
   )
-  const renamingTabId = useAppStore((s) => s.renamingTabId)
-  const setRenamingTabId = useAppStore((s) => s.setRenamingTabId)
 
   // Why: shellOverride is stamped at create time, so changing the default shell later won't repaint existing tabs.
   const shellForIcon = tab.shellOverride
@@ -166,14 +168,25 @@ export default function SortableTab({
     })
   }, [])
 
-  // Why: the tab.rename shortcut routes through store renamingTabId; open the editor and clear it so it fires once.
+  // Why the ref: keeps the listener subscribed to tab.id alone, so OSC title churn can't
+  // resubscribe it mid-edit. Written from an Effect, not in render -- a render React discards
+  // must not leave a stale handler behind for the next commit to fire.
+  const handleRenameOpenRef = useRef(handleRenameOpen)
   useEffect(() => {
-    if (renamingTabId !== tab.id) {
-      return
+    handleRenameOpenRef.current = handleRenameOpen
+  }, [handleRenameOpen])
+
+  useEffect(() => {
+    const onRenameRequest = (event: Event): void => {
+      const detail = (event as CustomEvent<RenameTerminalTabDetail | undefined>).detail
+      if (detail?.tabId !== tab.id) {
+        return
+      }
+      handleRenameOpenRef.current()
     }
-    handleRenameOpen()
-    setRenamingTabId(null)
-  }, [renamingTabId, tab.id, handleRenameOpen, setRenamingTabId])
+    window.addEventListener(RENAME_TERMINAL_TAB_EVENT, onRenameRequest)
+    return () => window.removeEventListener(RENAME_TERMINAL_TAB_EVENT, onRenameRequest)
+  }, [tab.id])
 
   useEffect(() => {
     const closeMenu = (): void => setMenuOpen(false)
diff --git a/src/renderer/src/components/tab-bar/SortableTab.update-depth-probe.test.tsx b/src/renderer/src/components/tab-bar/SortableTab.update-depth-probe.test.tsx
index acbd7ce38bc..39cacfb7825 100644
--- a/src/renderer/src/components/tab-bar/SortableTab.update-depth-probe.test.tsx
+++ b/src/renderer/src/components/tab-bar/SortableTab.update-depth-probe.test.tsx
@@ -18,6 +18,7 @@ import type { TerminalTab } from '../../../../shared/terminal-tab-types'
 import type { TabDragItemData } from '../tab-group/useTabDragSplit'
 import { useAppStore } from '../../store'
 import SortableTab from './SortableTab'
+import { requestTerminalTabRename } from './terminal-tab-rename-request'
 
 type ProbeState = {
   unreadTerminalTabs: Record<string, boolean>
@@ -27,9 +28,7 @@ type ProbeState = {
   runtimePaneTitlesByTabId: Record<string, Record<number, string>>
   ptyIdsByTabId: Record<string, string[]>
   terminalLayoutsByTabId: Record<string, unknown>
-  renamingTabId: string | null
   keybindings: Record<string, unknown>
-  setRenamingTabId: (tabId: string | null) => void
 }
 
 type StoreApiWithHook = {
@@ -44,7 +43,7 @@ async function createProbeStore(): Promise<StoreApiWithHook> {
   const globals = globalThis as Record<string, unknown>
   if (!globals[globalKey]) {
     const { create } = await import('zustand')
-    globals[globalKey] = create<ProbeState>((set) => ({
+    globals[globalKey] = create<ProbeState>(() => ({
       unreadTerminalTabs: {},
       unreadAgentCompletionPanes: {},
       agentStatusByPaneKey: {},
@@ -52,9 +51,7 @@ async function createProbeStore(): Promise<StoreApiWithHook> {
       runtimePaneTitlesByTabId: {},
       ptyIdsByTabId: {},
       terminalLayoutsByTabId: {},
-      renamingTabId: null,
-      keybindings: {},
-      setRenamingTabId: (tabId) => set({ renamingTabId: tabId })
+      keybindings: {}
     }))
   }
   return globals[globalKey] as StoreApiWithHook
@@ -101,6 +98,15 @@ vi.mock('@/components/ui/input', () => ({
   Input: (props: Record<string, unknown>) => <input {...props} />
 }))
 
+// Counts SortableTab's own renders: it is rendered unconditionally inside the tab body, so one
+// stub render == one SortableTab render, which the Harness counter above cannot see.
+vi.mock('./TerminalTabLeadingIcon', () => ({
+  TerminalTabLeadingIcon: () => {
+    tabRenderCount += 1
+    return <span />
+  }
+}))
+
 vi.mock('./shell-icons', () => ({ ShellIcon: () => <span /> }))
 vi.mock('@/lib/agent-catalog', () => ({ AgentIcon: () => <span /> }))
 vi.mock('../sidebar/WorktreeCardHelpers', () => ({ FilledBellIcon: () => <span /> }))
@@ -127,6 +133,7 @@ const dragData: TabDragItemData = {
 const probeStore = useAppStore as unknown as StoreApiWithHook
 
 let renderCount = 0
+let tabRenderCount = 0
 
 function Harness({ tab }: { tab: TerminalTab }): ReactElement {
   renderCount += 1
@@ -170,25 +177,52 @@ function ChurningHarness({ titles }: { titles: string[] }): ReactElement {
 
 afterEach(() => {
   cleanup()
-  probeStore.setState({ renamingTabId: null, unreadTerminalTabs: {}, agentStatusEpoch: 0 })
+  probeStore.setState({ unreadTerminalTabs: {}, agentStatusEpoch: 0 })
   renderCount = 0
+  tabRenderCount = 0
 })
 
 describe('SortableTab update-depth probe', () => {
-  it('settles when the rename shortcut arms renamingTabId', () => {
-    probeStore.setState({ renamingTabId: 'terminal-tab-1' })
+  it('settles when the rename shortcut targets this tab', () => {
     const { container } = render(<Harness tab={makeTab()} />)
+    act(() => requestTerminalTabRename('terminal-tab-1'))
     expect(container.querySelector('[data-tab-rename-input]')).not.toBeNull()
-    expect(probeStore.getState().renamingTabId).toBeNull()
     expect(renderCount).toBeLessThan(20)
   })
 
   it('settles under title churn while the rename editor is open', () => {
-    probeStore.setState({ renamingTabId: 'terminal-tab-1' })
     render(<ChurningHarness titles={['a', 'b', 'c', 'd', 'e', 'f']} />)
+    act(() => requestTerminalTabRename('terminal-tab-1'))
     expect(renderCount).toBeLessThan(40)
   })
 
+  // Regression: the shortcut used to arm a store field every tab subscribed to, so one rename
+  // re-rendered every mounted tab twice — once to notice the id, once when the tab cleared it.
+  it('re-renders only the targeted tab, once, per rename request', () => {
+    render(
+      <>
+        <Harness tab={makeTab({ id: 'terminal-tab-1' })} />
+        <Harness tab={makeTab({ id: 'terminal-tab-2' })} />
+        <Harness tab={makeTab({ id: 'terminal-tab-3' })} />
+      </>
+    )
+    const mountRenders = tabRenderCount
+    act(() => requestTerminalTabRename('terminal-tab-1'))
+    expect(tabRenderCount - mountRenders).toBe(1)
+  })
+
+  it('does not re-render any tab for a rename request no mounted tab owns', () => {
+    render(
+      <>
+        <Harness tab={makeTab({ id: 'terminal-tab-1' })} />
+        <Harness tab={makeTab({ id: 'terminal-tab-2' })} />
+      </>
+    )
+    const mountRenders = tabRenderCount
+    act(() => requestTerminalTabRename('terminal-tab-9'))
+    expect(tabRenderCount).toBe(mountRenders)
+  })
+
   it('settles under a store write storm', () => {
     render(<Harness tab={makeTab()} />)
     const before = renderCount
@@ -201,12 +235,12 @@ describe('SortableTab update-depth probe', () => {
   })
 
   it('settles in StrictMode double-invoked effects', () => {
-    probeStore.setState({ renamingTabId: 'terminal-tab-1' })
-    render(
+    const { container } = render(
       <StrictMode>
         <Harness tab={makeTab()} />
       </StrictMode>
     )
-    expect(probeStore.getState().renamingTabId).toBeNull()
+    act(() => requestTerminalTabRename('terminal-tab-1'))
+    expect(container.querySelector('[data-tab-rename-input]')).not.toBeNull()
   })
 })
diff --git a/src/renderer/src/components/tab-bar/terminal-tab-rename-request.ts b/src/renderer/src/components/tab-bar/terminal-tab-rename-request.ts
new file mode 100644
index 00000000000..4559ad0ea95
--- /dev/null
+++ b/src/renderer/src/components/tab-bar/terminal-tab-rename-request.ts
@@ -0,0 +1,19 @@
+/**
+ * Targeted rename dispatch for the `tab.rename` shortcut.
+ *
+ * Why an event and not store state: a store field is read by every mounted tab, so arming it
+ * re-rendered the whole strip, and the consuming tab then had to clear it — a second pass over
+ * every tab. The event reaches only the tab that owns the id. Mirrors the terminal-pane
+ * TOGGLE_TERMINAL_PANE_EXPAND_EVENT / FOCUS_TERMINAL_PANE_EVENT dispatch.
+ */
+export const RENAME_TERMINAL_TAB_EVENT = 'orca-rename-terminal-tab'
+
+export type RenameTerminalTabDetail = {
+  tabId: string
+}
+
+export function requestTerminalTabRename(tabId: string): void {
+  window.dispatchEvent(
+    new CustomEvent<RenameTerminalTabDetail>(RENAME_TERMINAL_TAB_EVENT, { detail: { tabId } })
+  )
+}
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.ts b/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.ts
index e28637097f7..dfc6ffc9614 100644
--- a/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.ts
+++ b/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.ts
@@ -120,7 +120,10 @@ export function useTerminalTabColdParking(args: {
   )
   const terminalTabHiddenSinceRef = useRef(new Map<string, number>())
   // Why: view switches hide every tab at once, so the park clock cannot rank them.
-  const terminalTabActivationOrderRef = useRef(createTerminalTabActivationOrder())
+  const terminalTabActivationOrderRef = useRef<ReturnType<typeof createTerminalTabActivationOrder>>(
+    undefined!
+  )
+  terminalTabActivationOrderRef.current ??= createTerminalTabActivationOrder()
   // Why (shared measure-clock contract with Terminal.tsx): tab hiddenSince
   // survives a background-measure window so per-tab park deadlines stay in
   // sync with the worktree retention/TTL clock, and a post-measure cool-down
diff --git a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialog.tsx b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialog.tsx
index c0d5a26c2e1..9593c23d276 100644
--- a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialog.tsx
+++ b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialog.tsx
@@ -76,7 +76,10 @@ export function TerminalQuickCommandDialog({
   const [draft, setDraft] = useState<TerminalQuickCommand>(command)
   const wasOpenRef = useRef(open)
   const syncedCommandRef = useRef(command)
-  const draftMemoryRef = useRef(createTerminalQuickCommandDialogDraftMemory(command, fallbackAgent))
+  const draftMemoryRef = useRef<ReturnType<typeof createTerminalQuickCommandDialogDraftMemory>>(
+    undefined!
+  )
+  draftMemoryRef.current ??= createTerminalQuickCommandDialogDraftMemory(command, fallbackAgent)
   const initialScope = getTerminalQuickCommandScope(command)
   const lastRepoScopeIdRef = useRef<string | null>(
     initialScope.type === 'repo' ? initialScope.repoId : null
diff --git a/src/renderer/src/components/use-terminal-window-lifecycle.lazy-ref.test.tsx b/src/renderer/src/components/use-terminal-window-lifecycle.lazy-ref.test.tsx
new file mode 100644
index 00000000000..ce99e46db27
--- /dev/null
+++ b/src/renderer/src/components/use-terminal-window-lifecycle.lazy-ref.test.tsx
@@ -0,0 +1,86 @@
+// @vitest-environment happy-dom
+
+/**
+ * `collectBrowserWebviewIds` walks every browser page and tab across every worktree. It used to sit
+ * in a `useRef(...)` argument, so `Terminal` paid for the whole walk on every render and threw the
+ * result away. Pin the invocation count to the mount count, not the render count.
+ */
+import { useState } from 'react'
+import { act, cleanup, render } from '@testing-library/react'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+
+const collectBrowserWebviewIdsCalls = vi.hoisted(() => ({ count: 0 }))
+
+vi.mock('../store', () => {
+  const state = {
+    browserTabsByWorktree: {},
+    browserPagesByWorkspace: {},
+    openFiles: []
+  }
+  const useAppStore = Object.assign(() => undefined, {
+    getState: () => state,
+    subscribe: () => () => {}
+  })
+  return { useAppStore }
+})
+
+vi.mock('../store/slices/browser-webview-cleanup', () => ({
+  collectBrowserWebviewIds: (...args: unknown[]) => {
+    collectBrowserWebviewIdsCalls.count += 1
+    void args
+    return new Set<string>()
+  },
+  destroyRemovedBrowserWebview: vi.fn()
+}))
+
+vi.mock('@/lib/updater-beforeunload', () => ({
+  isIntentionalAppRestartInProgress: () => false
+}))
+vi.mock('@/lib/shutdown-checkpoint-guard', () => ({
+  preventUnloadAndScheduleShutdownCheckpointReset: vi.fn()
+}))
+vi.mock('./window-close-request-coordinator', () => ({
+  setWindowCloseRequestHandler: vi.fn()
+}))
+
+const { useTerminalWindowLifecycle } = await import('./use-terminal-window-lifecycle')
+
+const controller = {
+  activeBrowserTabId: null,
+  activeTabType: 'terminal',
+  activeWorktreeBrowserTabIdsKey: '',
+  proceedToNativeWindowClose: () => {},
+  queueEditorCloseRequests: () => {},
+  renderedActiveWorktreeId: null,
+  setActiveBrowserTab: () => {},
+  setActiveTabType: () => {},
+  windowCloseAfterDirtyRef: { current: false }
+} as unknown as Parameters<typeof useTerminalWindowLifecycle>[0]
+
+let bumpRender: (() => void) | null = null
+
+function Host(): null {
+  const [, setTick] = useState(0)
+  bumpRender = () => setTick((tick) => tick + 1)
+  useTerminalWindowLifecycle(controller)
+  return null
+}
+
+afterEach(() => {
+  cleanup()
+  collectBrowserWebviewIdsCalls.count = 0
+  bumpRender = null
+})
+
+describe('useTerminalWindowLifecycle browser-webview id seed', () => {
+  it('collects the id set once per mount, not once per render', () => {
+    render(<Host />)
+    expect(collectBrowserWebviewIdsCalls.count).toBe(1)
+
+    for (let i = 0; i < 20; i += 1) {
+      act(() => bumpRender?.())
+    }
+
+    expect(collectBrowserWebviewIdsCalls.count).toBe(1)
+  })
+})
diff --git a/src/renderer/src/components/use-terminal-window-lifecycle.ts b/src/renderer/src/components/use-terminal-window-lifecycle.ts
index a252422de9f..23cdb930535 100644
--- a/src/renderer/src/components/use-terminal-window-lifecycle.ts
+++ b/src/renderer/src/components/use-terminal-window-lifecycle.ts
@@ -58,11 +58,12 @@ export function useTerminalWindowLifecycle(controller: TerminalActivationControl
     // oxlint-disable-next-line react-hooks/exhaustive-deps -- controller refs preserve their original stable identities.
   }, [proceedToNativeWindowClose, queueEditorCloseRequests])
 
-  const prevBrowserWebviewIdsRef = useRef<Set<string>>(
-    collectBrowserWebviewIds(
-      useAppStore.getState().browserTabsByWorktree,
-      useAppStore.getState().browserPagesByWorkspace
-    )
+  // Why lazy: a `useRef(expr)` argument re-runs on every render and is thrown away, and this
+  // walks every browser page and tab across all worktrees on a component that renders constantly.
+  const prevBrowserWebviewIdsRef = useRef<Set<string>>(undefined!)
+  prevBrowserWebviewIdsRef.current ??= collectBrowserWebviewIds(
+    useAppStore.getState().browserTabsByWorktree,
+    useAppStore.getState().browserPagesByWorkspace
   )
   useEffect(() => {
     let prevBrowserTabs = useAppStore.getState().browserTabsByWorktree
diff --git a/src/renderer/src/hooks/composer-state/async-composer-state.ts b/src/renderer/src/hooks/composer-state/async-composer-state.ts
index 2980576e3f7..f84baa51469 100644
--- a/src/renderer/src/hooks/composer-state/async-composer-state.ts
+++ b/src/renderer/src/hooks/composer-state/async-composer-state.ts
@@ -128,14 +128,13 @@ export function useComposerAsyncState(input: ComposerAsyncStateInput) {
 
   const [linkDirectLoading, setLinkDirectLoading] = useState(false)
 
-  const lastAutoNameRef = useRef<string>(
-    getInitialAutoManagedWorkspaceName({
-      draftName: persistDraft ? newWorkspaceDraft?.name : null,
-      draftLinkedWorkItem: persistDraft ? draftLinkedWorkItemSeed : null,
-      initialName,
-      initialLinkedWorkItem: initialLinkedWorkItemSeed
-    })
-  )
+  const lastAutoNameRef = useRef<string>(undefined!)
+  lastAutoNameRef.current ??= getInitialAutoManagedWorkspaceName({
+    draftName: persistDraft ? newWorkspaceDraft?.name : null,
+    draftLinkedWorkItem: persistDraft ? draftLinkedWorkItemSeed : null,
+    initialName,
+    initialLinkedWorkItem: initialLinkedWorkItemSeed
+  })
 
   const nameRef = useRef<string>(name)
 
@@ -153,12 +152,18 @@ export function useComposerAsyncState(input: ComposerAsyncStateInput) {
   }, [name, note])
 
   // Why: PR checkout refs resolve async, so submit can still see the linked PR as a checkout source if Create fires before the resolver settles.
+  // Why useState and not `useRef(expr)`: the seed legitimately resolves to null, so a nullish
+  // guard would keep re-running it; useState's initializer runs once without writing in render.
+  const [initialSmartGitHubPrStartPointSelection] =
+    useState<SmartGitHubPrStartPointSelection | null>(() =>
+      getInitialGitHubPrStartPointSelection({
+        item: initialGitHubWorkItem,
+        linkedWorkItem: initialLinkedWorkItemSeed,
+        repoId: selectedRepo?.id ?? initialRepoId
+      })
+    )
   const smartGitHubPrStartPointSelectionRef = useRef<SmartGitHubPrStartPointSelection | null>(
-    getInitialGitHubPrStartPointSelection({
-      item: initialGitHubWorkItem,
-      linkedWorkItem: initialLinkedWorkItemSeed,
-      repoId: selectedRepo?.id ?? initialRepoId
-    })
+    initialSmartGitHubPrStartPointSelection
   )
 
   useEffect(() => {
diff --git a/src/renderer/src/hooks/composer-state/composer-drop-listener.ts b/src/renderer/src/hooks/composer-state/composer-drop-listener.ts
index 145fe1a3c35..5cca0d4b073 100644
--- a/src/renderer/src/hooks/composer-state/composer-drop-listener.ts
+++ b/src/renderer/src/hooks/composer-state/composer-drop-listener.ts
@@ -10,7 +10,8 @@ export function useComposerDropListener(
   useEffect(() => {
     applyDropRef.current = applyDrop
   }, [applyDrop])
-  const instanceIdRef = useRef(Symbol('composer'))
+  const instanceIdRef = useRef<symbol>(undefined!)
+  instanceIdRef.current ??= Symbol('composer')
 
   useEffect(() => {
     const instanceId = instanceIdRef.current
diff --git a/src/renderer/src/hooks/use-audio-capture.ts b/src/renderer/src/hooks/use-audio-capture.ts
index 702640ae1c9..31e851a58ee 100644
--- a/src/renderer/src/hooks/use-audio-capture.ts
+++ b/src/renderer/src/hooks/use-audio-capture.ts
@@ -55,7 +55,8 @@ export function useAudioCapture(publishMeter?: DictationMeterPublisher) {
   const capturedChunkCountRef = useRef(0)
   const sessionIdRef = useRef('desktop')
   const trackLostCleanupRef = useRef<(() => void) | null>(null)
-  const meterAnalyzerRef = useRef(createDictationMeterAnalyzerState())
+  const meterAnalyzerRef = useRef<ReturnType<typeof createDictationMeterAnalyzerState>>(undefined!)
+  meterAnalyzerRef.current ??= createDictationMeterAnalyzerState()
   const publishedMeterRef = useRef(DEFAULT_DICTATION_METER)
   const lastMeterPublishedAtRef = useRef(Number.NEGATIVE_INFINITY)
 
diff --git a/src/renderer/src/lazy-use-ref-ratchet.test.ts b/src/renderer/src/lazy-use-ref-ratchet.test.ts
new file mode 100644
index 00000000000..c0b23821bcb
--- /dev/null
+++ b/src/renderer/src/lazy-use-ref-ratchet.test.ts
@@ -0,0 +1,130 @@
+import { readFileSync, readdirSync } from 'node:fs'
+import path from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+/**
+ * `useRef(create())` evaluates its argument on EVERY render and discards every result after the
+ * first, so any real work there is pure waste. The lazy form keeps the same value with none of the
+ * churn:
+ *
+ *   const ref = useRef<T>(undefined!)
+ *   ref.current ??= create()
+ *
+ * Use a `useState` lazy initializer instead when the seed can legitimately be null/undefined, or
+ * an explicit `seededRef` guard when both are true.
+ */
+const RENDERER_ROOT = import.meta.dirname
+
+function collectSourceFiles(dir: string, out: string[] = []): string[] {
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    const full = path.join(dir, entry.name)
+    if (entry.isDirectory()) {
+      if (entry.name === 'node_modules' || entry.name === 'dist') {
+        continue
+      }
+      collectSourceFiles(full, out)
+      continue
+    }
+    if (!/\.tsx?$/.test(entry.name) || /\.(test|spec)\.tsx?$/.test(entry.name)) {
+      continue
+    }
+    out.push(full)
+  }
+  return out
+}
+
+/** Reads the balanced argument text of the `useRef(...)` starting at `from`. */
+function readUseRefArgument(source: string, from: number): { arg: string; end: number } | null {
+  let i = from
+  while (source[i] === ' ') {
+    i++
+  }
+  if (source[i] === '<') {
+    let depth = 0
+    while (i < source.length) {
+      if (source[i] === '<') {
+        depth++
+      } else if (source[i] === '>') {
+        depth--
+        if (depth === 0) {
+          i++
+          break
+        }
+      }
+      i++
+    }
+  }
+  while (source[i] === ' ') {
+    i++
+  }
+  if (source[i] !== '(') {
+    return null
+  }
+  const argStart = i + 1
+  let depth = 0
+  while (i < source.length) {
+    if (source[i] === '(') {
+      depth++
+    } else if (source[i] === ')') {
+      depth--
+      if (depth === 0) {
+        return { arg: source.slice(argStart, i).trim(), end: i + 1 }
+      }
+    }
+    i++
+  }
+  return null
+}
+
+// Allowed because none of these is work that a render repeats for nothing:
+//  - an empty collection literal, which the repo keeps in the direct form
+//  - `undefined!`, the lazy-seed marker
+//  - a function literal, which is the ref's payload rather than its initialization
+//  - a primitive coercion of an already-computed value
+const ALLOWED_ARGUMENT = new RegExp(
+  [
+    '^new (Map|Set|WeakMap|WeakSet)(<[\\s\\S]*>)?\\(\\)$',
+    '^undefined!$',
+    '^(async )?\\([\\s\\S]*?\\)\\s*(:[^=]*)?=>[\\s\\S]*$',
+    '^(Boolean|Number|String)\\([\\s\\S]*\\)$',
+    '^[A-Za-z_$][\\w$.?\\[\\]\'"]*$'
+  ].join('|')
+)
+
+function findNonLazyUseRefs(file: string): string[] {
+  const source = readFileSync(file, 'utf8')
+  const findings: string[] = []
+  let index = 0
+  while ((index = source.indexOf('useRef', index)) !== -1) {
+    const start = index
+    index += 'useRef'.length
+    if (/[\w$.]/.test(source[start - 1] ?? '')) {
+      continue
+    }
+    const parsed = readUseRefArgument(source, index)
+    if (!parsed) {
+      continue
+    }
+    index = parsed.end
+    const arg = parsed.arg
+    if (arg === '' || ALLOWED_ARGUMENT.test(arg)) {
+      continue
+    }
+    // Only a call or constructor invocation actually burns work per render.
+    if (!/\(/.test(arg) && !/\bnew\b/.test(arg)) {
+      continue
+    }
+    const line = source.slice(0, start).split('\n').length
+    findings.push(
+      `${path.relative(RENDERER_ROOT, file)}:${line} useRef(${arg.replace(/\s+/g, ' ').slice(0, 90)})`
+    )
+  }
+  return findings
+}
+
+describe('renderer useRef initializers', () => {
+  it('never does work in the useRef argument', () => {
+    const findings = collectSourceFiles(RENDERER_ROOT).flatMap(findNonLazyUseRefs)
+    expect(findings).toEqual([])
+  })
+})
diff --git a/src/renderer/src/store/slices/tabs-label-and-pin-state.test.ts b/src/renderer/src/store/slices/tabs-label-and-pin-state.test.ts
index ef78f34f954..ea2a9bbb385 100644
--- a/src/renderer/src/store/slices/tabs-label-and-pin-state.test.ts
+++ b/src/renderer/src/store/slices/tabs-label-and-pin-state.test.ts
@@ -26,14 +26,6 @@ describe('TabsSlice', () => {
     store = createTestStore()
   })
 
-  it('setRenamingTabId sets and clears the tab rename signal', () => {
-    expect(store.getState().renamingTabId).toBeNull()
-    store.getState().setRenamingTabId('terminal-tab-1')
-    expect(store.getState().renamingTabId).toBe('terminal-tab-1')
-    store.getState().setRenamingTabId(null)
-    expect(store.getState().renamingTabId).toBeNull()
-  })
-
   // ─── setTabLabel / setTabCustomLabel / setUnifiedTabColor ─────────
 
   describe('tab property setters', () => {
diff --git a/src/renderer/src/store/slices/tabs/create-tabs-slice.ts b/src/renderer/src/store/slices/tabs/create-tabs-slice.ts
index 799cd257339..adbea2f1726 100644
--- a/src/renderer/src/store/slices/tabs/create-tabs-slice.ts
+++ b/src/renderer/src/store/slices/tabs/create-tabs-slice.ts
@@ -14,7 +14,6 @@ import { createTabsSessionActions } from './tabs-session-actions'
 
 export const createTabsSlice: StateCreator<AppState, [], [], TabsSlice> = (set, get) => ({
   unifiedTabsByWorktree: {},
-  renamingTabId: null,
   groupsByWorktree: {},
   activeGroupIdByWorktree: {},
   layoutByWorktree: {},
diff --git a/src/renderer/src/store/slices/tabs/tabs-label-actions.ts b/src/renderer/src/store/slices/tabs/tabs-label-actions.ts
index 012e1e8c0c0..8acb925bfae 100644
--- a/src/renderer/src/store/slices/tabs/tabs-label-actions.ts
+++ b/src/renderer/src/store/slices/tabs/tabs-label-actions.ts
@@ -18,7 +18,6 @@ export function createTabsLabelActions(
   | 'setTabLabel'
   | 'setTabViewMode'
   | 'toggleTabViewMode'
-  | 'setRenamingTabId'
   | 'setTabCustomLabel'
   | 'setUnifiedTabColor'
   | 'pinTab'
@@ -101,10 +100,6 @@ export function createTabsLabelActions(
       }
     },
 
-    setRenamingTabId: (tabId) => {
-      set({ renamingTabId: tabId })
-    },
-
     setTabCustomLabel: (tabId, label, opts) => {
       const exists = get().getTab(tabId) !== null
       set((state) => patchTab(state.unifiedTabsByWorktree, tabId, { customLabel: label }) ?? {})
diff --git a/src/renderer/src/store/slices/tabs/tabs-slice-contract.ts b/src/renderer/src/store/slices/tabs/tabs-slice-contract.ts
index 81d27ff54d5..2835d5e46d6 100644
--- a/src/renderer/src/store/slices/tabs/tabs-slice-contract.ts
+++ b/src/renderer/src/store/slices/tabs/tabs-slice-contract.ts
@@ -13,8 +13,6 @@ export type TabSplitDirection = 'left' | 'right' | 'up' | 'down'
 
 export type TabsSlice = {
   unifiedTabsByWorktree: Record<string, Tab[]>
-  // Why: id of the tab whose inline title editor should open; shortcut (tab.rename) sets it, the tab clears it on consume.
-  renamingTabId: string | null
   groupsByWorktree: Record<string, TabGroup[]>
   activeGroupIdByWorktree: Record<string, string>
   layoutByWorktree: Record<string, TabGroupLayoutNode>
@@ -101,7 +99,6 @@ export type TabsSlice = {
     opts?: { recordInteraction?: boolean }
   ) => void
   setUnifiedTabColor: (tabId: string, color: string | null) => void
-  setRenamingTabId: (tabId: string | null) => void
   pinTab: (tabId: string) => void
   unpinTab: (tabId: string) => void
   closeOtherTabs: (tabId: string) => string[]

From 974f3164a0380505611b19668612341e0bd3f742 Mon Sep 17 00:00:00 2001
From: Brennan Benson <79079362+brennanb2025@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:36:00 -0700
Subject: [PATCH 79/92] Make terminal error overlays opaque (#18231)

* Make terminal error overlays opaque

* fix(terminal): keep opaque error toast text readable

* fix(terminal): keep toast fallback opaque on older browsers

---------

Co-authored-by: Merge Sim <sim@local>
---
 .../terminal-pane/TerminalErrorToast.tsx       | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx b/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
index dcb838007b9..8b627a9651f 100644
--- a/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalErrorToast.tsx
@@ -179,6 +179,11 @@ export function TerminalErrorToast({
   const showIssueLink =
     !ssh && !paneOwnerUnverified && !showDaemonRestart && !isExplainedTerminalError(error)
   const displayError = humanizeTerminalError(error)
+  const tint = paneOwnerUnverified
+    ? null
+    : ssh
+      ? 'color-mix(in srgb, var(--color-amber-500) 20%, var(--popover))'
+      : 'color-mix(in srgb, var(--destructive) 20%, var(--popover))'
   const [retrying, setRetrying] = useState(false)
   const [retryFailed, setRetryFailed] = useState(false)
   const [environmentFooter, setEnvironmentFooter] = useState<{
@@ -231,17 +236,14 @@ export function TerminalErrorToast({
         zIndex: 50,
         padding: '10px 14px',
         borderRadius: 6,
-        background: paneOwnerUnverified
-          ? 'var(--popover)'
-          : ssh
-            ? 'rgba(234, 179, 8, 0.12)'
-            : 'rgba(220, 38, 38, 0.15)',
+        background: 'var(--popover)',
+        backgroundImage: tint ? `linear-gradient(${tint}, ${tint})` : undefined,
         border: paneOwnerUnverified
           ? '1px solid var(--color-amber-500)'
           : ssh
             ? '1px solid rgba(234, 179, 8, 0.35)'
             : '1px solid rgba(220, 38, 38, 0.4)',
-        color: paneOwnerUnverified ? 'var(--popover-foreground)' : ssh ? '#fde68a' : '#fca5a5',
+        color: 'var(--popover-foreground)',
         fontSize: 12,
         fontFamily: 'monospace',
         whiteSpace: 'pre-wrap',
@@ -268,7 +270,7 @@ export function TerminalErrorToast({
               )}{' '}
               <a
                 href="https://github.com/stablyai/orca/issues"
-                style={{ color: '#fca5a5', textDecoration: 'underline' }}
+                style={{ color: 'inherit', textDecoration: 'underline' }}
               >
                 {translate(
                   'auto.components.terminal.pane.TerminalErrorToast.a7e2fd2699',
@@ -326,7 +328,7 @@ export function TerminalErrorToast({
           style={{
             background: 'none',
             border: 'none',
-            color: paneOwnerUnverified ? 'var(--popover-foreground)' : ssh ? '#fde68a' : '#fca5a5',
+            color: 'inherit',
             cursor: 'pointer',
             fontSize: 14,
             padding: '0 0 0 8px',

From a0de2fde0b802961721e6cfe5df277825e6afac2 Mon Sep 17 00:00:00 2001
From: Jinwoo Hong <73622457+Jinwoo-H@users.noreply.github.com>
Date: Wed, 2 Sep 2026 16:39:56 -0400
Subject: [PATCH 80/92] fix(terminal): confirm an unrecognized foreground
 before downgrading agent prompts (#18238)

---
 ...rca-runtime-get-pty-record-for-pane-key.ts | 20 ++++-
 ...led-prompt-foreground-confirmation.spec.ts | 78 +++++++++++++++++++
 src/main/runtime/orca-runtime.test.ts         |  1 +
 .../runtime-terminal-agent-presence.ts        | 16 +++-
 src/relay/pty-shell-utils.test.ts             | 30 ++++++-
 src/relay/pty-shell-utils.ts                  |  8 +-
 6 files changed, 140 insertions(+), 13 deletions(-)
 create mode 100644 src/main/runtime/orca-runtime-tests/terminal-settled-prompt-foreground-confirmation.spec.ts

diff --git a/src/main/runtime/orca-runtime-get-pty-record-for-pane-key.ts b/src/main/runtime/orca-runtime-get-pty-record-for-pane-key.ts
index 37fac094067..32dd82fd48c 100644
--- a/src/main/runtime/orca-runtime-get-pty-record-for-pane-key.ts
+++ b/src/main/runtime/orca-runtime-get-pty-record-for-pane-key.ts
@@ -112,13 +112,25 @@ export class OrcaRuntimeWithGetPtyRecordForPaneKey extends OrcaRuntimeWithPruneM
       if (!ptyId || !trackedPty || !this.ptyController) {
         return false
       }
-      const agent = recognizeAgentProcess(
-        await this.ptyController.getForegroundProcess(ptyId)
-      )?.agent
+      let foregroundProcess = await this.ptyController.getForegroundProcess(ptyId)
+      let agent = recognizeAgentProcess(foregroundProcess)?.agent
+      // Why: the cached foreground name can be an executable basename nothing recognizes
+      // (macOS p_comm reports the native Claude installer as `2.1.258`), and treating that
+      // as "no agent" silently downgrades the prompt to unframed chunks, which Claude's
+      // composer truncates. A fresh process-table scan reads the real command line.
+      if (agent === undefined && this.ptyController.confirmForegroundProcess) {
+        foregroundProcess = await this.ptyController.confirmForegroundProcess(ptyId)
+        agent = recognizeAgentProcess(foregroundProcess)?.agent
+      }
       if (agent !== 'claude' && agent !== 'codex') {
         return false
       }
-      if (!(await this.isTerminalRunningAgent(handle, { retryForegroundWrappers: false }))) {
+      if (
+        !(await this.isTerminalRunningAgent(handle, {
+          retryForegroundWrappers: false,
+          foregroundProcess
+        }))
+      ) {
         return false
       }
       trackedPty.foregroundAgent = agent
diff --git a/src/main/runtime/orca-runtime-tests/terminal-settled-prompt-foreground-confirmation.spec.ts b/src/main/runtime/orca-runtime-tests/terminal-settled-prompt-foreground-confirmation.spec.ts
new file mode 100644
index 00000000000..84d55a7e1d2
--- /dev/null
+++ b/src/main/runtime/orca-runtime-tests/terminal-settled-prompt-foreground-confirmation.spec.ts
@@ -0,0 +1,78 @@
+import { describe, expect, it, vi } from 'vitest'
+import { OrcaRuntimeService } from '../orca-runtime-test-mocks.spec'
+import { store, syncSinglePty } from '../orca-runtime-test-fixtures.spec'
+
+// Why: node-pty's cached foreground name is p_comm on macOS, which reports the native Claude
+// install as its version directory (`2.1.258`). Reading that as "no agent" silently downgraded
+// `terminal.send --enter` from the atomic bracketed-paste route to unframed 16 KiB chunks,
+// which Claude's composer truncates for large prompts (STA-4577).
+describe('isTerminalRunningSettledPromptAgent foreground confirmation', () => {
+  // `2.1.258`: macOS p_comm for the native Claude install. `bash.exe`: the Windows daemon
+  // tracker answers with the shell fallback until its async scan lands.
+  it.each(['2.1.258', 'bash.exe'])(
+    'confirms an unrecognized foreground (%s) before refusing the settled route',
+    async (cachedForeground) => {
+      const getForegroundProcess = vi.fn(async () => cachedForeground)
+      const confirmForegroundProcess = vi.fn(async () => 'claude')
+      const runtime = new OrcaRuntimeService(store)
+      runtime.setPtyController({
+        write: () => true,
+        kill: () => true,
+        getForegroundProcess,
+        confirmForegroundProcess
+      })
+      syncSinglePty(runtime, 'pty-1', { paneTitle: 'bash' })
+      const [terminal] = (await runtime.listTerminals()).terminals
+
+      await expect(runtime.isTerminalRunningSettledPromptAgent(terminal.handle)).resolves.toBe(true)
+      expect(confirmForegroundProcess).toHaveBeenCalledWith('pty-1')
+      // The confirmed identity is reused; the cached read must not be re-consulted and win.
+      expect(getForegroundProcess).toHaveBeenCalledTimes(1)
+    }
+  )
+
+  it('keeps legacy delivery when confirmation also finds no target agent', async () => {
+    const confirmForegroundProcess = vi.fn(async () => 'vim')
+    const runtime = new OrcaRuntimeService(store)
+    runtime.setPtyController({
+      write: () => true,
+      kill: () => true,
+      getForegroundProcess: async () => '2.1.258',
+      confirmForegroundProcess
+    })
+    syncSinglePty(runtime, 'pty-1', { paneTitle: 'bash' })
+    const [terminal] = (await runtime.listTerminals()).terminals
+
+    await expect(runtime.isTerminalRunningSettledPromptAgent(terminal.handle)).resolves.toBe(false)
+    expect(confirmForegroundProcess).toHaveBeenCalledOnce()
+  })
+
+  it('does not confirm when the cached foreground already names a target agent', async () => {
+    const confirmForegroundProcess = vi.fn(async () => 'claude')
+    const runtime = new OrcaRuntimeService(store)
+    runtime.setPtyController({
+      write: () => true,
+      kill: () => true,
+      getForegroundProcess: async () => 'claude',
+      confirmForegroundProcess
+    })
+    syncSinglePty(runtime, 'pty-1', { paneTitle: 'bash' })
+    const [terminal] = (await runtime.listTerminals()).terminals
+
+    await expect(runtime.isTerminalRunningSettledPromptAgent(terminal.handle)).resolves.toBe(true)
+    expect(confirmForegroundProcess).not.toHaveBeenCalled()
+  })
+
+  it('refuses the settled route when the provider cannot confirm', async () => {
+    const runtime = new OrcaRuntimeService(store)
+    runtime.setPtyController({
+      write: () => true,
+      kill: () => true,
+      getForegroundProcess: async () => '2.1.258'
+    })
+    syncSinglePty(runtime, 'pty-1', { paneTitle: 'bash' })
+    const [terminal] = (await runtime.listTerminals()).terminals
+
+    await expect(runtime.isTerminalRunningSettledPromptAgent(terminal.handle)).resolves.toBe(false)
+  })
+})
diff --git a/src/main/runtime/orca-runtime.test.ts b/src/main/runtime/orca-runtime.test.ts
index f8b12ba4a9d..aabfeb899c8 100644
--- a/src/main/runtime/orca-runtime.test.ts
+++ b/src/main/runtime/orca-runtime.test.ts
@@ -57,6 +57,7 @@ await import('./orca-runtime-tests/terminal-output-and-worker-recovery-part-06.s
 await import('./orca-runtime-tests/terminal-output-and-worker-recovery-part-07.spec')
 await import('./orca-runtime-tests/terminal-handles-and-agent-status.spec')
 await import('./orca-runtime-tests/terminal-handles-and-agent-status-part-02.spec')
+await import('./orca-runtime-tests/terminal-settled-prompt-foreground-confirmation.spec')
 await import('./orca-runtime-tests/terminal-handles-and-agent-status-part-03.spec')
 await import('./orca-runtime-tests/terminal-handles-and-agent-status-part-04.spec')
 await import('./orca-runtime-tests/terminal-handles-and-agent-status-part-05.spec')
diff --git a/src/main/runtime/runtime-terminal-agent-presence.ts b/src/main/runtime/runtime-terminal-agent-presence.ts
index 86681e97688..e87520fccc8 100644
--- a/src/main/runtime/runtime-terminal-agent-presence.ts
+++ b/src/main/runtime/runtime-terminal-agent-presence.ts
@@ -30,6 +30,8 @@ type RuntimeTerminalAgentPresenceDependencies = {
 
 export type RuntimeTerminalAgentPresenceOptions = {
   retryForegroundWrappers?: boolean
+  /** Foreground identity the caller already confirmed; skips the provider's cached read. */
+  foregroundProcess?: string | null
 }
 
 export class RuntimeTerminalAgentPresence {
@@ -75,7 +77,7 @@ export class RuntimeTerminalAgentPresence {
       if (!leaf.ptyId) {
         return false
       }
-      const foreground = await this.deps.getForegroundProcess(leaf.ptyId)
+      const foreground = await this.readForegroundProcess(leaf.ptyId, options)
       if (!foreground) {
         return false
       }
@@ -138,7 +140,7 @@ export class RuntimeTerminalAgentPresence {
     ) {
       return true
     }
-    const foreground = await this.deps.getForegroundProcess(pty.ptyId)
+    const foreground = await this.readForegroundProcess(pty.ptyId, options)
     if (!foreground) {
       return false
     }
@@ -157,6 +159,16 @@ export class RuntimeTerminalAgentPresence {
     )
   }
 
+  private async readForegroundProcess(
+    ptyId: string,
+    options: RuntimeTerminalAgentPresenceOptions
+  ): Promise<string | null> {
+    if (options.foregroundProcess !== undefined) {
+      return options.foregroundProcess
+    }
+    return await this.deps.getForegroundProcess(ptyId)
+  }
+
   private async isRecognizedForegroundAgentProcess(
     ptyId: string,
     foregroundProcess: string,
diff --git a/src/relay/pty-shell-utils.test.ts b/src/relay/pty-shell-utils.test.ts
index c806faa7978..6bfeab1a56a 100644
--- a/src/relay/pty-shell-utils.test.ts
+++ b/src/relay/pty-shell-utils.test.ts
@@ -299,10 +299,34 @@ describe('resolveDefaultCwd', () => {
 })
 
 describe('getForegroundProcessName', () => {
-  it('returns clear non-wrapper foregrounds without process-table enrichment', async () => {
-    await expect(getForegroundProcessName(100, 'vim')).resolves.toBe('vim')
+  it('keeps a non-agent foreground name when the process table shows no agent', async () => {
+    await withProcessPlatform('darwin', async () => {
+      mockExecFile((_command, args) => {
+        if (args[0] === '-axo') {
+          return { stdout: ['100 99 Ss   zsh -l', '101 100 S+   vim notes.md'].join('\n') }
+        }
+        return new Error('unexpected command')
+      })
 
-    expect(execFileMock).not.toHaveBeenCalled()
+      await expect(getForegroundProcessName(100, 'vim')).resolves.toBe('vim')
+    })
+  })
+
+  it('resolves a macOS p_comm basename to the agent that owns the foreground', async () => {
+    // Why: node-pty reports the native Claude binary as its version directory (`2.1.258`);
+    // answering with that name downgrades agent prompts to unframed chunks (STA-4577).
+    await withProcessPlatform('darwin', async () => {
+      mockExecFile((_command, args) => {
+        if (args[0] === '-axo') {
+          return {
+            stdout: ['100 99 Ss   zsh -l', '101 100 S+   claude --model haiku'].join('\n')
+          }
+        }
+        return new Error('unexpected command')
+      })
+
+      await expect(getForegroundProcessName(100, '2.1.258')).resolves.toBe('claude')
+    })
   })
 
   it('recognizes SSH relay node-wrapped agents from descendant command lines', async () => {
diff --git a/src/relay/pty-shell-utils.ts b/src/relay/pty-shell-utils.ts
index e06edaeabc7..febf025654c 100644
--- a/src/relay/pty-shell-utils.ts
+++ b/src/relay/pty-shell-utils.ts
@@ -20,7 +20,6 @@ import {
   resolveOuterWrapperForegroundProcess,
   shouldInspectOuterWrapperForegroundProcess
 } from '../shared/foreground-wrapper-agent'
-import { isShellProcess } from '../shared/shell-process-detection'
 import {
   resolveWindowsAgentForegroundProcess,
   shouldInspectWindowsAgentForeground
@@ -305,10 +304,11 @@ export async function getForegroundProcessName(
         (await resolveWindowsAgentForegroundProcess(pid, fallbackProcess, {})) ?? fallbackProcess
       )
     }
-    if (!isShellProcess(fallbackProcess) && !isAgentForegroundWrapperProcess(fallbackProcess)) {
-      return fallbackProcess
-    }
   }
+  // Why: an unrecognized name is not proof of a non-agent foreground -- macOS p_comm truncates
+  // to the executable basename, which for the native Claude install is its version directory
+  // (`2.1.258`). The TTL-cached table read resolves the real command line; a foreground that
+  // is genuinely not an agent still answers with its own name below.
   const recognized = await getRecognizedForegroundDescendant(pid, fallbackProcess)
   if (recognized) {
     return recognized

From e3de6b2ce871cd4b094af82c216d1eecef2072e3 Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:42:14 -0700
Subject: [PATCH 81/92] Add automation runs dashboard with pagination and
 filtering (#18226)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Add automation runs dashboard with pagination and filtering

Adds a new Runs view in the Automations page that lets users browse all runs across automations with status/host filtering, search, and pagination support. Includes virtualized table rendering for efficient handling of large run histories and summary cards showing 24h/7d success/failure counts.

* Fix missing dependencies in useCallback hooks and imports

Missing dependencies in useCallback can cause stale closure bugs. This
adds missing state setters to dependency arrays and consolidates type
imports for consistency.

* Use keyset pagination for stable automation runs pages

Pagination now uses createdAt:id boundaries instead of offsets, so new
runs arriving between pages don't shift the window. Maintains backwards
compatibility with legacy offset cursors.

Move pagination to shared module, fix outcome counting for future-dated
runs, and improve hook state tracking on authority re-pairing or target
changes.

* Extract automation run details to top-level page view

Moves run display from detail pane to dedicated page, establishing
three-level navigation (Automations → Runs → Run Details) and simplifying
the detail pane component.

* Fix pagination stability when automation runs share createdAt

- Define a stable total order with createdAt and id tiebreaker to prevent runs tied on createdAt from being dropped when the boundary run is pruned between page requests
- Retain cursor on failed pagination so pages remain retryable
- Update ownerNotice type to AutomationActionNotice

* Extract automations list panel and worktree map logic

Split AutomationsPageSurface into smaller, focused modules for better maintainability and reusability. Move list panel UI rendering to AutomationsPageListPanel component and worktree map selection logic to a standalone utility function.

* Add i18n strings for automation runs dashboard

Adds localized strings for the automation runs dashboard view, including search, filtering by host and status, run counts for 24h/7d windows, and empty state messaging across all supported languages.

* fix missing translation

* fix missing translation
---
 README.md                                     |   1 +
 docs/reference/git-compatibility.md           |   8 +-
 .../content/docs/review/annotate-ai-diff.mdx  |   7 +-
 .../daemon/terminal-attach-cancellation.ts    |   5 +-
 .../loading-store/automation-persistence.ts   |  10 +
 .../automation-run-operations.test.ts         |  95 ++++++
 .../automation-run-operations.ts              |  22 +-
 .../orca-runtime-fence-automation-owner.ts    |  17 ++
 .../runtime/rpc/methods/automation-schemas.ts |   4 +-
 .../runtime/rpc/methods/automations.test.ts   |  19 ++
 src/main/runtime/rpc/methods/automations.ts   |  14 +-
 .../runtime/runtime-automation-controller.ts  |  51 ++--
 .../runtime/runtime-automation-run-context.ts |  19 ++
 .../runtime-automation-update-value.ts        |   8 +
 src/main/runtime/runtime-store-contract.ts    |   1 +
 src/main/worktree-create-preparation-pool.ts  |   8 +-
 .../src/components/GitLabItemDialog.tsx       |   2 +-
 .../automations/AutomationListToolbar.tsx     |  38 ++-
 .../automations/AutomationRunDetailsPage.tsx  |  99 ++++++
 .../automations/AutomationRunPageFrame.tsx    |   2 +-
 .../automations/AutomationRunsDashboard.tsx   | 282 ++++++++++++++++++
 .../AutomationRunsDashboardSurface.test.tsx   |  77 +++++
 .../AutomationRunsDashboardSurface.tsx        |  71 +++++
 .../automations/AutomationRunsTable.test.tsx  |  87 ++++++
 .../automations/AutomationRunsTable.tsx       | 156 ++++++++++
 .../AutomationsDetailPane.run-count.test.tsx  |   8 -
 .../AutomationsDetailPane.test.tsx            |  16 -
 .../automations/AutomationsDetailPane.tsx     | 105 +------
 .../automations/AutomationsListPanel.test.tsx |   1 +
 .../automations/AutomationsListPanel.tsx      |   5 +-
 .../AutomationsPageBreadcrumb.test.tsx        |  84 ++++++
 .../automations/AutomationsPageBreadcrumb.tsx |  76 +++++
 .../AutomationsPageDeleteDialogs.tsx          |  65 ++++
 .../automations/AutomationsPageListPanel.tsx  | 125 ++++++++
 .../automations/AutomationsPageSurface.tsx    | 245 ++++++---------
 .../automations/AutomationsPageTopBar.tsx     |  65 ++++
 .../automations/automation-host-client.ts     |  15 +
 .../automation-owner-action-runner.ts         |  16 +
 .../automations/automation-page-state.ts      |   5 +
 .../automation-row-action-dispatch.ts         |  24 +-
 .../automation-runs-dashboard-model.test.ts   | 105 +++++++
 .../automation-runs-dashboard-model.ts        | 138 +++++++++
 .../automation-scoped-list-client.ts          |  33 +-
 .../use-automation-run-page-state.ts          |  15 +
 .../use-automation-runs-dashboard.test.tsx    | 144 +++++++++
 .../use-automation-runs-dashboard.ts          | 188 ++++++++++++
 .../use-automations-page-controller.ts        |  10 +
 .../use-automations-page-destination-state.ts |  18 ++
 .../use-automations-page-escape.ts            |  23 +-
 .../use-automations-page-local-state.ts       |  13 +-
 .../use-selected-automation-run-history.ts    |  20 +-
 .../use-gitlab-review-actions.ts              |  27 +-
 src/renderer/src/i18n/locales/en.json         |  29 ++
 src/renderer/src/i18n/locales/es.json         |  29 ++
 src/renderer/src/i18n/locales/ja.json         |  29 ++
 src/renderer/src/i18n/locales/ko.json         |  29 ++
 src/renderer/src/i18n/locales/zh.json         |  29 ++
 src/shared/automation-run-cursor.ts           |  75 +++++
 src/shared/automations-types.ts               |   6 +
 tests/e2e/automation-runs-dashboard.spec.ts   |  44 +++
 60 files changed, 2612 insertions(+), 350 deletions(-)
 create mode 100644 src/main/persistence/scheduling-automations/automation-run-operations.test.ts
 create mode 100644 src/main/runtime/runtime-automation-run-context.ts
 create mode 100644 src/main/runtime/runtime-automation-update-value.ts
 create mode 100644 src/renderer/src/components/automations/AutomationRunDetailsPage.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationRunsDashboard.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationRunsDashboardSurface.test.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationRunsDashboardSurface.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationRunsTable.test.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationRunsTable.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationsPageBreadcrumb.test.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationsPageBreadcrumb.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationsPageDeleteDialogs.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationsPageListPanel.tsx
 create mode 100644 src/renderer/src/components/automations/AutomationsPageTopBar.tsx
 create mode 100644 src/renderer/src/components/automations/automation-runs-dashboard-model.test.ts
 create mode 100644 src/renderer/src/components/automations/automation-runs-dashboard-model.ts
 create mode 100644 src/renderer/src/components/automations/use-automation-runs-dashboard.test.tsx
 create mode 100644 src/renderer/src/components/automations/use-automation-runs-dashboard.ts
 create mode 100644 src/shared/automation-run-cursor.ts
 create mode 100644 tests/e2e/automation-runs-dashboard.spec.ts

diff --git a/README.md b/README.md
index b486a9a4925..0f99bfc877f 100644
--- a/README.md
+++ b/README.md
@@ -261,6 +261,7 @@ Want to contribute or run locally? See our [CONTRIBUTING.md](.github/CONTRIBUTIN
 </p>
 
 ## Signed Builds
+
 Windows code signing sponored/provided by [SignPath.io](https://signpath.io), certificate by [SignPath Foundation](https://signpath.org).
 
 ## License
diff --git a/docs/reference/git-compatibility.md b/docs/reference/git-compatibility.md
index 0e8b1f257d3..1e19860385e 100644
--- a/docs/reference/git-compatibility.md
+++ b/docs/reference/git-compatibility.md
@@ -44,14 +44,14 @@ authority.
 
 ### Placeholders That Fail Open
 
-`GitCapabilityCache` records commands Git *rejects*. A `git log --format`
+`GitCapabilityCache` records commands Git _rejects_. A `git log --format`
 placeholder Git does not know is not rejected: Git echoes it verbatim and exits
 zero, so there is no error to remember and no probe to cache. Ask for both forms
 in one record and pick at parse time.
 
-| Placeholder      | Preferred behavior                                                                                | Compatibility behavior                                                                                     |
-| ---------------- | ------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
-| `%(decorate:…)`  | Git 2.43 separates commit decorations with `\x1f`, so ref names containing commas survive         | The same record also carries `%D` (Git 2.10); an unexpanded `%(decorate` placeholder selects it, at the cost of comma-splitting |
+| Placeholder     | Preferred behavior                                                                        | Compatibility behavior                                                                                                          |
+| --------------- | ----------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------- |
+| `%(decorate:…)` | Git 2.43 separates commit decorations with `\x1f`, so ref names containing commas survive | The same record also carries `%D` (Git 2.10); an unexpanded `%(decorate` placeholder selects it, at the cost of comma-splitting |
 
 ## Why Not `simple-git`
 
diff --git a/docs/site/content/docs/review/annotate-ai-diff.mdx b/docs/site/content/docs/review/annotate-ai-diff.mdx
index 6ac3fe4e6a1..0744b2c5a9f 100644
--- a/docs/site/content/docs/review/annotate-ai-diff.mdx
+++ b/docs/site/content/docs/review/annotate-ai-diff.mdx
@@ -2,11 +2,14 @@
 title: Annotate AI Diff
 ---
 
-import { ImagePlaceholder } from '@/components/docs/prose';
+import { ImagePlaceholder } from '@/components/docs/prose'
 
 Annotate AI Diff is Orca's inline review loop for agent-generated code. You leave comments on any line of any AI-generated hunk, then send them back to the agent as a single batch for revision — no copying line numbers, no context-switching.
 
-<ImagePlaceholder src="/docs/annotate-ai-diff.gif" caption="Annotate a generated diff and send one batch of line-level notes back to the agent" />
+<ImagePlaceholder
+  src="/docs/annotate-ai-diff.gif"
+  caption="Annotate a generated diff and send one batch of line-level notes back to the agent"
+/>
 
 ## Leave a comment
 
diff --git a/src/main/daemon/terminal-attach-cancellation.ts b/src/main/daemon/terminal-attach-cancellation.ts
index 52f773b1bf2..9e87cbdb1bc 100644
--- a/src/main/daemon/terminal-attach-cancellation.ts
+++ b/src/main/daemon/terminal-attach-cancellation.ts
@@ -1,10 +1,7 @@
 import { TerminalAttachCanceledError } from './daemon-errors'
 
 /** Never resolves; only rejects, so it can bound a wait without settling it. */
-export function rejectOnAbort(
-  signal: AbortSignal | undefined,
-  sessionId: string
-): Promise<never> {
+export function rejectOnAbort(signal: AbortSignal | undefined, sessionId: string): Promise<never> {
   if (!signal) {
     return new Promise<never>(() => {})
   }
diff --git a/src/main/persistence/loading-store/automation-persistence.ts b/src/main/persistence/loading-store/automation-persistence.ts
index 3e56f2aaf8f..9f33f508fd9 100644
--- a/src/main/persistence/loading-store/automation-persistence.ts
+++ b/src/main/persistence/loading-store/automation-persistence.ts
@@ -29,6 +29,7 @@ import {
 import {
   createAutomationRun as createAutomationRunOperation,
   listAutomationRuns as listAutomationRunsOperation,
+  listAutomationRunsPage as listAutomationRunsOperationPage,
   recordRepeatedAutomationSkip as recordRepeatedAutomationSkipOperation,
   snapshotAutomationRunWorkspaceDisplayName as snapshotAutomationRunWorkspaceDisplayNameOperation,
   updateAutomationRun as updateAutomationRunOperation,
@@ -125,6 +126,15 @@ export class AutomationPersistence {
     )
   }
 
+  listAutomationRunsPage(automationId?: string, limit?: number, cursor?: string) {
+    return listAutomationRunsOperationPage(
+      this[automationPersistenceContext].runtime.state,
+      automationId,
+      limit,
+      cursor
+    )
+  }
+
   createAutomation(
     input: AutomationCreateInput,
     options?: { destination?: AutomationDestination }
diff --git a/src/main/persistence/scheduling-automations/automation-run-operations.test.ts b/src/main/persistence/scheduling-automations/automation-run-operations.test.ts
new file mode 100644
index 00000000000..c2ae00c02b6
--- /dev/null
+++ b/src/main/persistence/scheduling-automations/automation-run-operations.test.ts
@@ -0,0 +1,95 @@
+import { describe, expect, it } from 'vitest'
+import type { PersistedState } from '../../../shared/persisted-state-types'
+import { listAutomationRunsPage } from './automation-run-operations'
+
+function stateWithRuns(runs: { id: string; createdAt: number }[]): PersistedState {
+  return {
+    automationRuns: runs.map((run) => ({ ...run, automationId: 'a1' }))
+  } as PersistedState
+}
+
+describe('listAutomationRunsPage', () => {
+  it('returns a bounded, newest-first page and an opaque continuation cursor', () => {
+    const state = stateWithRuns([
+      { id: 'old', createdAt: 1 },
+      { id: 'new', createdAt: 3 },
+      { id: 'middle', createdAt: 2 }
+    ])
+
+    const first = listAutomationRunsPage(state, 'a1', 2)
+    expect(first.runs.map((run) => run.id)).toEqual(['new', 'middle'])
+    expect(first.nextCursor).not.toBeNull()
+
+    expect(listAutomationRunsPage(state, 'a1', 2, first.nextCursor ?? undefined)).toEqual(
+      expect.objectContaining({
+        runs: [expect.objectContaining({ id: 'old' })],
+        nextCursor: null
+      })
+    )
+  })
+
+  it('keeps the window stable when a newer run lands between pages', () => {
+    const state = stateWithRuns([
+      { id: 'r1', createdAt: 1 },
+      { id: 'r2', createdAt: 2 },
+      { id: 'r3', createdAt: 3 }
+    ])
+
+    const first = listAutomationRunsPage(state, 'a1', 2)
+    expect(first.runs.map((run) => run.id)).toEqual(['r3', 'r2'])
+
+    state.automationRuns = [
+      ...state.automationRuns,
+      { id: 'r4', automationId: 'a1', createdAt: 4 } as PersistedState['automationRuns'][number]
+    ]
+
+    const second = listAutomationRunsPage(state, 'a1', 2, first.nextCursor ?? undefined)
+    expect(second.runs.map((run) => run.id)).toEqual(['r1'])
+    expect(second.nextCursor).toBeNull()
+  })
+
+  it('resumes after a pruned boundary run instead of restarting the page', () => {
+    const state = stateWithRuns([
+      { id: 'r1', createdAt: 1 },
+      { id: 'r2', createdAt: 2 },
+      { id: 'r3', createdAt: 3 }
+    ])
+    const first = listAutomationRunsPage(state, 'a1', 2)
+
+    state.automationRuns = state.automationRuns.filter((run) => run.id !== 'r2')
+
+    expect(
+      listAutomationRunsPage(state, 'a1', 2, first.nextCursor ?? undefined).runs.map(
+        (run) => run.id
+      )
+    ).toEqual(['r1'])
+  })
+
+  it('keeps runs tied on createdAt when the boundary run is pruned', () => {
+    const state = stateWithRuns([
+      { id: 'r2', createdAt: 10 },
+      { id: 'r1', createdAt: 10 },
+      { id: 'r0', createdAt: 5 }
+    ])
+    const first = listAutomationRunsPage(state, 'a1', 1)
+    expect(first.runs.map((run) => run.id)).toEqual(['r1'])
+
+    state.automationRuns = state.automationRuns.filter((run) => run.id !== 'r1')
+
+    expect(
+      listAutomationRunsPage(state, 'a1', 2, first.nextCursor ?? undefined).runs.map(
+        (run) => run.id
+      )
+    ).toEqual(['r2', 'r0'])
+  })
+
+  it('still honours a legacy offset cursor issued before the upgrade', () => {
+    const state = stateWithRuns([
+      { id: 'r1', createdAt: 1 },
+      { id: 'r2', createdAt: 2 },
+      { id: 'r3', createdAt: 3 }
+    ])
+
+    expect(listAutomationRunsPage(state, 'a1', 2, '2').runs.map((run) => run.id)).toEqual(['r1'])
+  })
+})
diff --git a/src/main/persistence/scheduling-automations/automation-run-operations.ts b/src/main/persistence/scheduling-automations/automation-run-operations.ts
index 73e3be63e8b..0dc9e61731a 100644
--- a/src/main/persistence/scheduling-automations/automation-run-operations.ts
+++ b/src/main/persistence/scheduling-automations/automation-run-operations.ts
@@ -5,6 +5,7 @@ import type {
   Automation,
   AutomationDispatchResult,
   AutomationRun,
+  AutomationRunsPage,
   AutomationRunTrigger
 } from '../../../shared/automations-types'
 import type { PersistedState } from '../../../shared/persisted-state-types'
@@ -12,6 +13,10 @@ import {
   nextAutomationRunNumber,
   pruneAutomationRuns
 } from '../../../shared/automation-run-retention'
+import {
+  compareAutomationRunsNewestFirst,
+  paginateAutomationRuns
+} from '../../../shared/automation-run-cursor'
 import {
   normalizeAutomationPrecheckResult,
   normalizeAutomationRunOutputSnapshot,
@@ -36,14 +41,27 @@ function touchAutomation(state: PersistedState, automationId: string, now: numbe
   )
 }
 
-export function listAutomationRuns(state: PersistedState, automationId?: string): AutomationRun[] {
+function sortedAutomationRuns(state: PersistedState, automationId?: string): AutomationRun[] {
   const runs = state.automationRuns ?? []
   return [...(automationId ? runs.filter((run) => run.automationId === automationId) : runs)]
     .map((run) => ({
       ...run,
       precheckResult: normalizeAutomationPrecheckResult(run.precheckResult)
     }))
-    .sort((left, right) => right.createdAt - left.createdAt)
+    .sort(compareAutomationRunsNewestFirst)
+}
+
+export function listAutomationRuns(state: PersistedState, automationId?: string): AutomationRun[] {
+  return sortedAutomationRuns(state, automationId)
+}
+
+export function listAutomationRunsPage(
+  state: PersistedState,
+  automationId: string | undefined,
+  limit = 100,
+  cursor?: string
+): AutomationRunsPage {
+  return paginateAutomationRuns(sortedAutomationRuns(state, automationId), limit, cursor)
 }
 
 export function createAutomationRun(
diff --git a/src/main/runtime/orca-runtime-fence-automation-owner.ts b/src/main/runtime/orca-runtime-fence-automation-owner.ts
index 626d697716a..a90730c7886 100644
--- a/src/main/runtime/orca-runtime-fence-automation-owner.ts
+++ b/src/main/runtime/orca-runtime-fence-automation-owner.ts
@@ -53,6 +53,23 @@ export class OrcaRuntimeWithFenceAutomationOwner extends OrcaRuntimeWithPtyForeg
     })
   }
 
+  listAutomationRunsPage(
+    automationId?: string,
+    expectedOwner?: AutomationOwnerPrecondition,
+    limit?: number,
+    cursor?: string
+  ) {
+    if (expectedOwner && !automationId) {
+      throw new Error('An expected owner requires an automation id.')
+    }
+    return this.automation.withExternalProbePriority(() => {
+      if (automationId) {
+        this.fenceAutomationOwner(automationId, expectedOwner, 'read')
+      }
+      return this.automation.listRunsPage(automationId, limit, cursor)
+    })
+  }
+
   showAutomation(id: string, expectedOwner?: AutomationOwnerPrecondition): Automation {
     const automation = this.automation.show(id)
     this.fenceAutomationOwner(id, expectedOwner, 'read')
diff --git a/src/main/runtime/rpc/methods/automation-schemas.ts b/src/main/runtime/rpc/methods/automation-schemas.ts
index 5e5dbe4e4ad..f2c829c1a9d 100644
--- a/src/main/runtime/rpc/methods/automation-schemas.ts
+++ b/src/main/runtime/rpc/methods/automation-schemas.ts
@@ -137,7 +137,9 @@ export const AutomationId = z.object({
 
 export const AutomationRuns = z.object({
   automationId: OptionalString,
-  expectedOwner: ExpectedOwner
+  expectedOwner: ExpectedOwner,
+  limit: OptionalPositiveInt,
+  cursor: OptionalString
 })
 
 export const AutomationCreate = z.object({
diff --git a/src/main/runtime/rpc/methods/automations.test.ts b/src/main/runtime/rpc/methods/automations.test.ts
index d972bf6a553..ab768559749 100644
--- a/src/main/runtime/rpc/methods/automations.test.ts
+++ b/src/main/runtime/rpc/methods/automations.test.ts
@@ -105,6 +105,25 @@ describe('automation RPC methods', () => {
     expect(runtime.listAutomationRuns).toHaveBeenCalledWith('auto-1', undefined)
   })
 
+  it('returns a cursor page when the caller requests a bounded run history', async () => {
+    const runtime = {
+      getRuntimeId: () => 'test-runtime',
+      listAutomationRunsPage: vi.fn().mockReturnValue({
+        runs: [{ id: 'run-100', automationId: 'auto-1' }],
+        nextCursor: '100'
+      })
+    } as unknown as OrcaRuntimeService
+    const dispatcher = new RpcDispatcher({ runtime, methods: AUTOMATION_METHODS })
+
+    await expect(
+      dispatcher.dispatch(makeRequest('automation.runs', { automationId: 'auto-1', limit: 100 }))
+    ).resolves.toMatchObject({
+      ok: true,
+      result: { nextCursor: '100' }
+    })
+    expect(runtime.listAutomationRunsPage).toHaveBeenCalledWith('auto-1', undefined, 100, undefined)
+  })
+
   it('rejects unknown providers and invalid schedules', async () => {
     const runtime = {
       getRuntimeId: () => 'test-runtime',
diff --git a/src/main/runtime/rpc/methods/automations.ts b/src/main/runtime/rpc/methods/automations.ts
index 3645df3c149..ff5daca315c 100644
--- a/src/main/runtime/rpc/methods/automations.ts
+++ b/src/main/runtime/rpc/methods/automations.ts
@@ -83,8 +83,16 @@ export const AUTOMATION_METHODS: RpcMethod[] = [
   defineMethod({
     name: 'automation.runs',
     params: AutomationRuns,
-    handler: (params, { runtime }) => ({
-      runs: runtime.listAutomationRuns(params.automationId, params.expectedOwner)
-    })
+    handler: (params, { runtime }) => {
+      if (params.limit !== undefined || params.cursor !== undefined) {
+        return runtime.listAutomationRunsPage(
+          params.automationId,
+          params.expectedOwner,
+          params.limit,
+          params.cursor
+        )
+      }
+      return { runs: runtime.listAutomationRuns(params.automationId, params.expectedOwner) }
+    }
   })
 ]
diff --git a/src/main/runtime/runtime-automation-controller.ts b/src/main/runtime/runtime-automation-controller.ts
index c8c8b1504eb..d3ac55df438 100644
--- a/src/main/runtime/runtime-automation-controller.ts
+++ b/src/main/runtime/runtime-automation-controller.ts
@@ -15,6 +15,9 @@ import type {
   AutomationDestination
 } from '../../shared/automation-owner-precondition'
 import { runAutomationNowFenced } from '../automations/refused-manual-run'
+import { paginateAutomationRuns } from '../../shared/automation-run-cursor'
+import { hasRuntimeAutomationUpdateValue } from './runtime-automation-update-value'
+import { assertAutomationRunContextMatchesTarget } from './runtime-automation-run-context'
 
 export type RuntimeAutomationCreateInput = Omit<
   AutomationCreateInput,
@@ -72,6 +75,13 @@ export class RuntimeAutomationController {
     return this.store.listAutomationRuns(automationId)
   }
 
+  listRunsPage(automationId?: string, limit?: number, cursor?: string) {
+    if (this.store?.listAutomationRunsPage) {
+      return this.store.listAutomationRunsPage(automationId, limit, cursor)
+    }
+    return paginateAutomationRuns(this.listRuns(automationId), limit, cursor)
+  }
+
   listForScope(params: AutomationListParams = {}): AutomationListResult {
     if (!this.store?.listAutomationsForScope) {
       throw new Error('runtime_unavailable')
@@ -99,7 +109,7 @@ export class RuntimeAutomationController {
       throw new Error('runtime_unavailable')
     }
     const target = await this.resolveTarget(input)
-    this.assertRunContextMatchesTarget(input.runContext, target.repo)
+    assertAutomationRunContextMatchesTarget(input.runContext, target.repo)
     if (input.reuseSession && target.workspaceMode !== 'existing') {
       throw new Error('Session reuse requires an existing workspace target.')
     }
@@ -142,12 +152,12 @@ export class RuntimeAutomationController {
     const patch: AutomationUpdateInput = {}
     this.copyPatchValues(updates, patch)
     const targetChanged =
-      hasUpdateValue(updates, 'repo') ||
-      hasUpdateValue(updates, 'workspace') ||
-      hasUpdateValue(updates, 'workspaceMode')
+      hasRuntimeAutomationUpdateValue(updates, 'repo') ||
+      hasRuntimeAutomationUpdateValue(updates, 'workspace') ||
+      hasRuntimeAutomationUpdateValue(updates, 'workspaceMode')
     if (targetChanged) {
       const target = await this.resolveTarget(updates, current)
-      this.assertRunContextMatchesTarget(updates.runContext, target.repo)
+      assertAutomationRunContextMatchesTarget(updates.runContext, target.repo)
       if (patch.reuseSession === true && target.workspaceMode !== 'existing') {
         throw new Error('Session reuse requires an existing workspace target.')
       }
@@ -158,9 +168,13 @@ export class RuntimeAutomationController {
         patch.reuseSession = false
       }
     }
-    if (!targetChanged && hasUpdateValue(updates, 'runContext') && current.projectId) {
+    if (
+      !targetChanged &&
+      hasRuntimeAutomationUpdateValue(updates, 'runContext') &&
+      current.projectId
+    ) {
       const repo = await this.resolvers.showRepo(`id:${current.projectId}`)
-      this.assertRunContextMatchesTarget(updates.runContext, repo)
+      assertAutomationRunContextMatchesTarget(updates.runContext, repo)
     }
     if (!targetChanged && patch.reuseSession && current.workspaceMode !== 'existing') {
       throw new Error('Session reuse requires an existing workspace target.')
@@ -225,7 +239,7 @@ export class RuntimeAutomationController {
       'missedRunGraceMinutes'
     ] as const
     for (const key of keys) {
-      if (hasUpdateValue(updates, key)) {
+      if (hasRuntimeAutomationUpdateValue(updates, key)) {
         Object.assign(patch, { [key]: updates[key] })
       }
     }
@@ -292,25 +306,4 @@ export class RuntimeAutomationController {
     }
     return { projectId, workspaceMode: 'new_per_run', workspaceId: null, repo }
   }
-
-  private assertRunContextMatchesTarget(
-    runContext:
-      | RuntimeAutomationCreateInput['runContext']
-      | RuntimeAutomationUpdateInput['runContext'],
-    repo: Repo | null
-  ): void {
-    if (!runContext || !repo) {
-      return
-    }
-    if (runContext.repoId !== repo.id || runContext.path !== repo.path) {
-      throw new Error('Automation project does not match its run context.')
-    }
-  }
-}
-
-function hasUpdateValue<K extends keyof RuntimeAutomationUpdateInput>(
-  updates: RuntimeAutomationUpdateInput,
-  key: K
-): boolean {
-  return Object.hasOwn(updates, key) && updates[key] !== undefined
 }
diff --git a/src/main/runtime/runtime-automation-run-context.ts b/src/main/runtime/runtime-automation-run-context.ts
new file mode 100644
index 00000000000..f69f1771156
--- /dev/null
+++ b/src/main/runtime/runtime-automation-run-context.ts
@@ -0,0 +1,19 @@
+import type { Repo } from '../../shared/repo-types'
+import type {
+  RuntimeAutomationCreateInput,
+  RuntimeAutomationUpdateInput
+} from './runtime-automation-controller'
+
+export function assertAutomationRunContextMatchesTarget(
+  runContext:
+    | RuntimeAutomationCreateInput['runContext']
+    | RuntimeAutomationUpdateInput['runContext'],
+  repo: Repo | null
+): void {
+  if (!runContext || !repo) {
+    return
+  }
+  if (runContext.repoId !== repo.id || runContext.path !== repo.path) {
+    throw new Error('Automation project does not match its run context.')
+  }
+}
diff --git a/src/main/runtime/runtime-automation-update-value.ts b/src/main/runtime/runtime-automation-update-value.ts
new file mode 100644
index 00000000000..84f5a166c7b
--- /dev/null
+++ b/src/main/runtime/runtime-automation-update-value.ts
@@ -0,0 +1,8 @@
+import type { RuntimeAutomationUpdateInput } from './runtime-automation-controller'
+
+export function hasRuntimeAutomationUpdateValue<K extends keyof RuntimeAutomationUpdateInput>(
+  updates: RuntimeAutomationUpdateInput,
+  key: K
+): boolean {
+  return Object.hasOwn(updates, key) && updates[key] !== undefined
+}
diff --git a/src/main/runtime/runtime-store-contract.ts b/src/main/runtime/runtime-store-contract.ts
index e160e039533..aece6a8e7ad 100644
--- a/src/main/runtime/runtime-store-contract.ts
+++ b/src/main/runtime/runtime-store-contract.ts
@@ -61,6 +61,7 @@ export type RuntimeStore = {
   automationOwnerPrecondition?: Store['automationOwnerPrecondition']
   automationChangeSelector?: Store['automationChangeSelector']
   listAutomationRuns?: Store['listAutomationRuns']
+  listAutomationRunsPage?: Store['listAutomationRunsPage']
   createAutomation?: Store['createAutomation']
   updateAutomation?: Store['updateAutomation']
   deleteAutomation?: Store['deleteAutomation']
diff --git a/src/main/worktree-create-preparation-pool.ts b/src/main/worktree-create-preparation-pool.ts
index 26ee1c41aad..7539c6076e4 100644
--- a/src/main/worktree-create-preparation-pool.ts
+++ b/src/main/worktree-create-preparation-pool.ts
@@ -183,7 +183,13 @@ export function startPreparation({
       await cleanupStalePreparations(preparationHostKey(repoPathKey, wslDistro), repoPath, options)
       await mkdir(toHostFilesystemPath(preparationRoot), { recursive: true })
       // Already canonical, so the add re-resolves nothing.
-      await prepareWorktreeCreateCheckout(repoPath, preparedPath, canonicalBase, lockReason, options)
+      await prepareWorktreeCreateCheckout(
+        repoPath,
+        preparedPath,
+        canonicalBase,
+        lockReason,
+        options
+      )
     })()
   } satisfies PreparationEntry)
   preparations.set(key, entry)
diff --git a/src/renderer/src/components/GitLabItemDialog.tsx b/src/renderer/src/components/GitLabItemDialog.tsx
index 1cae8854a08..4c911520ed1 100644
--- a/src/renderer/src/components/GitLabItemDialog.tsx
+++ b/src/renderer/src/components/GitLabItemDialog.tsx
@@ -47,7 +47,7 @@ export default function GitLabItemDialog({
 
   const handleRefresh = useCallback(() => {
     setRefreshNonce((n) => n + 1)
-  }, [])
+  }, [setRefreshNonce])
   const detailsEditing = useGitLabDetailsEditing(item, repoSelector, state)
   const pipelineActions = useGitLabPipelineActions(item, repoSelector, state, handleRefresh)
   const reviewActions = useGitLabReviewActions(item, repoSelector, state)
diff --git a/src/renderer/src/components/automations/AutomationListToolbar.tsx b/src/renderer/src/components/automations/AutomationListToolbar.tsx
index c5efed566f6..259f58fba79 100644
--- a/src/renderer/src/components/automations/AutomationListToolbar.tsx
+++ b/src/renderer/src/components/automations/AutomationListToolbar.tsx
@@ -1,5 +1,5 @@
 import React from 'react'
-import { Plus, RefreshCw } from 'lucide-react'
+import { History, Plus, RefreshCw } from 'lucide-react'
 import { Button } from '@/components/ui/button'
 import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
 import { translate } from '@/i18n/i18n'
@@ -25,6 +25,7 @@ type AutomationListToolbarProps = {
   hostEntries: readonly AutomationHostCatalogEntry[]
   onRefresh: () => void
   isRefreshing: boolean
+  onOpenRuns: () => void
   openCreateDialog: (template?: AutomationTemplate) => void
   canCreateAutomation: boolean
 }
@@ -41,6 +42,7 @@ export function AutomationListToolbar({
   hostEntries,
   onRefresh,
   isRefreshing,
+  onOpenRuns,
   openCreateDialog,
   canCreateAutomation
 }: AutomationListToolbarProps): React.JSX.Element {
@@ -88,17 +90,29 @@ export function AutomationListToolbar({
           </TooltipContent>
         </Tooltip>
       </div>
-      <Button
-        type="button"
-        size="sm"
-        className="shrink-0"
-        onClick={() => openCreateDialog()}
-        disabled={!canCreateAutomation}
-        data-contextual-tour-target="automations-create"
-      >
-        <Plus className="size-4" />
-        {translate('auto.components.automations.AutomationsPage.newAutomation', 'New Automation')}
-      </Button>
+      <div className="flex shrink-0 items-center gap-2">
+        <Button
+          type="button"
+          variant="outline"
+          size="sm"
+          onClick={onOpenRuns}
+          data-contextual-tour-target="automations-runs"
+        >
+          <History className="size-4" />
+          {translate('auto.components.automations.AutomationListToolbar.runs', 'Runs')}
+        </Button>
+        <Button
+          type="button"
+          size="sm"
+          className="shrink-0"
+          onClick={() => openCreateDialog()}
+          disabled={!canCreateAutomation}
+          data-contextual-tour-target="automations-create"
+        >
+          <Plus className="size-4" />
+          {translate('auto.components.automations.AutomationsPage.newAutomation', 'New Automation')}
+        </Button>
+      </div>
     </div>
   )
 }
diff --git a/src/renderer/src/components/automations/AutomationRunDetailsPage.tsx b/src/renderer/src/components/automations/AutomationRunDetailsPage.tsx
new file mode 100644
index 00000000000..63bdf933434
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationRunDetailsPage.tsx
@@ -0,0 +1,99 @@
+import React from 'react'
+import { Eye, RefreshCw } from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import CommentMarkdown from '@/components/sidebar/CommentMarkdown'
+import { cn } from '@/lib/utils'
+import { translate } from '@/i18n/i18n'
+import type { Automation, AutomationRun } from '../../../../shared/automations-types'
+import { AutomationRunPageFrame } from './AutomationRunPageFrame'
+import { getAutomationRunContent } from './automation-run-content'
+import type { AutomationRunViewState } from './automation-run-view-state'
+import type { AutomationRunWorkspaceDisplay } from './automation-run-workspace-display'
+import {
+  formatAutomationDateTimeWithRelative,
+  getAutomationRunStatusLabel,
+  getAutomationRunStatusVariant
+} from './automation-page-parts'
+
+export function AutomationRunDetailsPage({
+  automation,
+  run,
+  relativeNow,
+  workspaceDisplay,
+  viewState,
+  canRerun,
+  isRerunPending,
+  onRerun,
+  onOpenWorkspace,
+  onBack
+}: {
+  automation: Automation | null
+  run: AutomationRun
+  relativeNow: number
+  workspaceDisplay: AutomationRunWorkspaceDisplay | null
+  viewState: AutomationRunViewState | null
+  canRerun: boolean
+  isRerunPending: boolean
+  onRerun: () => void
+  onOpenWorkspace: () => void
+  onBack: () => void
+}): React.JSX.Element {
+  return (
+    <section className="flex min-h-0 flex-1 p-5">
+      <AutomationRunPageFrame
+        title={automation?.name ?? run.title}
+        breadcrumbs={[
+          formatAutomationDateTimeWithRelative(run.scheduledFor, relativeNow),
+          'Orca',
+          workspaceDisplay?.detailLabel ??
+            translate('auto.components.automations.AutomationsPage.noWorkspace', 'No workspace')
+        ]}
+        detail={
+          run.outputSnapshot?.truncated
+            ? translate(
+                'auto.components.automations.AutomationsPage.latestSavedOutput',
+                'Latest saved output'
+              )
+            : null
+        }
+        statusLabel={getAutomationRunStatusLabel(run.status)}
+        statusVariant={getAutomationRunStatusVariant(run.status)}
+        actions={
+          <>
+            {canRerun && automation ? (
+              <Button
+                type="button"
+                variant="outline"
+                size="sm"
+                disabled={isRerunPending}
+                onClick={onRerun}
+              >
+                <RefreshCw className={cn('size-3.5', isRerunPending && 'animate-spin')} />
+                {translate('auto.components.automations.AutomationsPage.295698292f', 'Rerun')}
+              </Button>
+            ) : null}
+            {viewState ? (
+              <Button
+                type="button"
+                variant="outline"
+                size="sm"
+                disabled={!viewState.canOpen}
+                onClick={onOpenWorkspace}
+              >
+                <Eye className="size-3.5" />
+                {viewState.actionLabel}
+              </Button>
+            ) : null}
+          </>
+        }
+        onBack={onBack}
+      >
+        <CommentMarkdown
+          variant="document"
+          content={getAutomationRunContent(run)}
+          className="text-sm leading-relaxed text-foreground"
+        />
+      </AutomationRunPageFrame>
+    </section>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationRunPageFrame.tsx b/src/renderer/src/components/automations/AutomationRunPageFrame.tsx
index 30c323d6dc8..e51c94155e7 100644
--- a/src/renderer/src/components/automations/AutomationRunPageFrame.tsx
+++ b/src/renderer/src/components/automations/AutomationRunPageFrame.tsx
@@ -26,7 +26,7 @@ export function AutomationRunPageFrame({
   onBack
 }: AutomationRunPageFrameProps): React.JSX.Element {
   return (
-    <div className="flex min-h-full flex-col rounded-md border border-border/50 bg-background shadow-sm">
+    <div className="flex min-h-full w-full flex-col rounded-md border border-border/50 bg-background shadow-sm">
       <div className="flex shrink-0 items-start justify-between gap-3 border-b border-border/50 px-4 py-3">
         <div className="flex min-w-0 flex-1 items-start gap-2">
           <div className="shrink-0">
diff --git a/src/renderer/src/components/automations/AutomationRunsDashboard.tsx b/src/renderer/src/components/automations/AutomationRunsDashboard.tsx
new file mode 100644
index 00000000000..1271a1d5e7e
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationRunsDashboard.tsx
@@ -0,0 +1,282 @@
+import React, { useDeferredValue, useMemo, useState } from 'react'
+import { AlertCircle, ListFilter, RefreshCw, Search } from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import {
+  DropdownMenu,
+  DropdownMenuCheckboxItem,
+  DropdownMenuContent,
+  DropdownMenuRadioGroup,
+  DropdownMenuRadioItem,
+  DropdownMenuSeparator,
+  DropdownMenuSub,
+  DropdownMenuSubContent,
+  DropdownMenuSubTrigger,
+  DropdownMenuTrigger
+} from '@/components/ui/dropdown-menu'
+import { Input } from '@/components/ui/input'
+import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
+import { translate } from '@/i18n/i18n'
+import type { AutomationListRow } from './automation-list-row-identity'
+import {
+  countAutomationRunOutcomes,
+  filterAutomationRunsDashboardEntries,
+  getAutomationRunsHostKey,
+  getAutomationRunsScope,
+  type AutomationRunsDashboardEntry,
+  type AutomationRunsDashboardFailure,
+  type AutomationRunsStatusFilter
+} from './automation-runs-dashboard-model'
+import { AutomationRunsTable } from './AutomationRunsTable'
+
+const STATUS_LABELS: Record<AutomationRunsStatusFilter, { key: string; fallback: string }> = {
+  all: { key: 'allStatuses', fallback: 'All statuses' },
+  successful: { key: 'successful', fallback: 'Successful' },
+  failed: { key: 'failed', fallback: 'Failed' },
+  active: { key: 'active', fallback: 'In progress' },
+  skipped: { key: 'skipped', fallback: 'Skipped' }
+}
+
+function SummaryCard({ label, value }: { label: string; value: number }): React.JSX.Element {
+  return (
+    <div className="rounded-lg border border-border/60 bg-card px-3 py-2.5 text-card-foreground">
+      <div className="text-xs text-muted-foreground">{label}</div>
+      <div className="mt-1 text-lg font-medium tabular-nums">{value}</div>
+    </div>
+  )
+}
+
+export function AutomationRunsDashboard({
+  rows,
+  entries,
+  failures,
+  loading,
+  hasMore,
+  onLoadMore,
+  now,
+  onRefresh,
+  onOpenRun
+}: {
+  rows: readonly AutomationListRow[]
+  entries: readonly AutomationRunsDashboardEntry[]
+  failures: readonly AutomationRunsDashboardFailure[]
+  loading: boolean
+  hasMore: boolean
+  onLoadMore: () => void
+  now: number
+  onRefresh: () => void
+  onOpenRun: (entry: AutomationRunsDashboardEntry) => void
+}): React.JSX.Element {
+  const [query, setQuery] = useState('')
+  const deferredQuery = useDeferredValue(query)
+  const [status, setStatus] = useState<AutomationRunsStatusFilter>('all')
+  const [hostKeys, setHostKeys] = useState<string[]>([])
+  const hostOptions = useMemo(() => {
+    const options = new Map<string, string>()
+    for (const row of rows) {
+      const scope = getAutomationRunsScope(row)
+      options.set(
+        getAutomationRunsHostKey(row),
+        row.hostLabel ||
+          translate(
+            `auto.components.automations.AutomationRunsDashboard.${scope}`,
+            scope === 'local' ? 'Local' : 'Remote'
+          )
+      )
+    }
+    return [...options].map(([key, label]) => ({ key, label }))
+  }, [rows])
+  const hostEntries = useMemo(
+    () => filterAutomationRunsDashboardEntries({ entries, status: 'all', query: '', hostKeys }),
+    [entries, hostKeys]
+  )
+  const visibleEntries = useMemo(
+    () => filterAutomationRunsDashboardEntries({ entries, status, query: deferredQuery, hostKeys }),
+    [deferredQuery, entries, hostKeys, status]
+  )
+  const counts = useMemo(() => countAutomationRunOutcomes(hostEntries, now), [hostEntries, now])
+  const visibleFailures = failures.filter(
+    (failure) => hostKeys.length === 0 || hostKeys.includes(getAutomationRunsHostKey(failure.row))
+  )
+  const activeFilterCount = (status === 'all' ? 0 : 1) + (hostKeys.length > 0 ? 1 : 0)
+
+  const toggleHost = (hostKey: string): void => {
+    setHostKeys((current) =>
+      current.includes(hostKey)
+        ? current.filter((candidate) => candidate !== hostKey)
+        : [...current, hostKey]
+    )
+  }
+
+  return (
+    <div className="scrollbar-sleek min-h-0 flex-1 overflow-auto px-3 pb-4 md:px-5">
+      <div className="w-full">
+        <div className="mb-3 flex shrink-0 items-end gap-2">
+          <div className="relative w-full max-w-xs">
+            <Search className="pointer-events-none absolute left-2.5 top-1/2 size-3.5 -translate-y-1/2 text-muted-foreground" />
+            <Input
+              value={query}
+              onChange={(event) => setQuery(event.target.value)}
+              placeholder={translate(
+                'auto.components.automations.AutomationRunsDashboard.search',
+                'Search runs…'
+              )}
+              aria-label={translate(
+                'auto.components.automations.AutomationRunsDashboard.search',
+                'Search runs…'
+              )}
+              className="h-8 pl-8 text-xs"
+            />
+          </div>
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button type="button" variant="outline" size="sm" className="h-8 text-xs">
+                <ListFilter className="size-3.5" />
+                {translate(
+                  'auto.components.automations.AutomationRunsDashboard.filters',
+                  'Filters'
+                )}
+                {activeFilterCount > 0 ? (
+                  <span className="rounded-full bg-foreground px-1.5 text-[10px] font-semibold leading-4 text-background">
+                    {activeFilterCount}
+                  </span>
+                ) : null}
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent align="start">
+              <DropdownMenuSub>
+                <DropdownMenuSubTrigger>
+                  {translate('auto.components.automations.AutomationRunsDashboard.host', 'Host')}
+                </DropdownMenuSubTrigger>
+                <DropdownMenuSubContent className="scrollbar-sleek max-h-80 overflow-y-auto">
+                  <DropdownMenuCheckboxItem
+                    checked={hostKeys.length === 0}
+                    onCheckedChange={() => setHostKeys([])}
+                  >
+                    {translate('auto.components.automations.hostPicker.allHosts', 'All hosts')}
+                  </DropdownMenuCheckboxItem>
+                  {hostOptions.map((host) => (
+                    <DropdownMenuCheckboxItem
+                      key={host.key}
+                      checked={hostKeys.includes(host.key)}
+                      onCheckedChange={() => toggleHost(host.key)}
+                      onSelect={(event) => event.preventDefault()}
+                    >
+                      {host.label}
+                    </DropdownMenuCheckboxItem>
+                  ))}
+                </DropdownMenuSubContent>
+              </DropdownMenuSub>
+              <DropdownMenuSeparator />
+              <DropdownMenuSub>
+                <DropdownMenuSubTrigger>
+                  {translate(
+                    'auto.components.automations.AutomationRunsDashboard.status',
+                    'Status'
+                  )}
+                </DropdownMenuSubTrigger>
+                <DropdownMenuSubContent>
+                  <DropdownMenuRadioGroup
+                    value={status}
+                    onValueChange={(value) => setStatus(value as AutomationRunsStatusFilter)}
+                  >
+                    {Object.entries(STATUS_LABELS).map(([value, label]) => (
+                      <DropdownMenuRadioItem key={value} value={value}>
+                        {translate(
+                          `auto.components.automations.AutomationRunsDashboard.status.${label.key}`,
+                          label.fallback
+                        )}
+                      </DropdownMenuRadioItem>
+                    ))}
+                  </DropdownMenuRadioGroup>
+                </DropdownMenuSubContent>
+              </DropdownMenuSub>
+            </DropdownMenuContent>
+          </DropdownMenu>
+          <Tooltip>
+            <TooltipTrigger asChild>
+              <Button
+                type="button"
+                variant="ghost"
+                size="icon-sm"
+                aria-label={translate(
+                  'auto.components.automations.AutomationRunsDashboard.refresh',
+                  'Refresh runs'
+                )}
+                onClick={onRefresh}
+                disabled={loading}
+                className="shrink-0 border border-border bg-background shadow-none hover:bg-muted/50"
+              >
+                <RefreshCw className={loading ? 'size-4 animate-spin' : 'size-4'} />
+              </Button>
+            </TooltipTrigger>
+            <TooltipContent side="bottom" sideOffset={6}>
+              {translate(
+                'auto.components.automations.AutomationRunsDashboard.refresh',
+                'Refresh runs'
+              )}
+            </TooltipContent>
+          </Tooltip>
+        </div>
+
+        <div>
+          <div className="mb-3 grid grid-cols-2 gap-2 md:grid-cols-4">
+            <SummaryCard
+              label={translate(
+                'auto.components.automations.AutomationRunsDashboard.successful24h',
+                'Successful · 24h'
+              )}
+              value={counts.successful24h}
+            />
+            <SummaryCard
+              label={translate(
+                'auto.components.automations.AutomationRunsDashboard.failed24h',
+                'Failed · 24h'
+              )}
+              value={counts.failed24h}
+            />
+            <SummaryCard
+              label={translate(
+                'auto.components.automations.AutomationRunsDashboard.successful7d',
+                'Successful · 7d'
+              )}
+              value={counts.successful7d}
+            />
+            <SummaryCard
+              label={translate(
+                'auto.components.automations.AutomationRunsDashboard.failed7d',
+                'Failed · 7d'
+              )}
+              value={counts.failed7d}
+            />
+          </div>
+
+          {visibleFailures.length > 0 ? (
+            <div className="mb-3 flex items-start gap-2 rounded-md border border-border bg-muted/40 px-3 py-2 text-xs text-foreground">
+              <AlertCircle className="mt-0.5 size-3.5 shrink-0 text-muted-foreground" />
+              <span>
+                {visibleFailures.length === 1
+                  ? translate(
+                      'auto.components.automations.AutomationRunsDashboard.historyUnavailableOne',
+                      'Run history is unavailable for 1 automation. Counts include available history only.'
+                    )
+                  : translate(
+                      'auto.components.automations.AutomationRunsDashboard.historyUnavailableMany',
+                      'Run history is unavailable for {{count}} automations. Counts include available history only.',
+                      { count: visibleFailures.length }
+                    )}
+              </span>
+            </div>
+          ) : null}
+
+          <AutomationRunsTable
+            entries={visibleEntries}
+            loading={loading}
+            hasMore={hasMore}
+            onLoadMore={onLoadMore}
+            onOpenRun={onOpenRun}
+          />
+        </div>
+      </div>
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationRunsDashboardSurface.test.tsx b/src/renderer/src/components/automations/AutomationRunsDashboardSurface.test.tsx
new file mode 100644
index 00000000000..8da19eca24a
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationRunsDashboardSurface.test.tsx
@@ -0,0 +1,77 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot } from 'react-dom/client'
+import { describe, expect, it, vi } from 'vitest'
+import type { AutomationRunsDashboardEntry } from './automation-runs-dashboard-model'
+import { makeAutomationListRow, makeRun } from './automations-page-fixtures'
+
+let openRun: ((entry: AutomationRunsDashboardEntry) => void) | null = null
+
+vi.mock('./AutomationRunsDashboard', () => ({
+  AutomationRunsDashboard: (props: {
+    entries: readonly AutomationRunsDashboardEntry[]
+    onOpenRun: (entry: AutomationRunsDashboardEntry) => void
+  }) => {
+    openRun = props.onOpenRun
+    return null
+  }
+}))
+
+import { AutomationRunsDashboardSurface } from './AutomationRunsDashboardSurface'
+
+describe('AutomationRunsDashboardSurface', () => {
+  it('opens a run as a top-level page', () => {
+    const row = makeAutomationListRow()
+    const run = makeRun()
+    const entry: AutomationRunsDashboardEntry = {
+      key: `${row.key}:${run.id}`,
+      hostKey: 'desktop:self',
+      searchText: 'nightly',
+      row,
+      run,
+      scope: 'local'
+    }
+    const setPageView = vi.fn()
+    const setRunPageOrigin = vi.fn()
+    const selectAutomationRow = vi.fn()
+    const setPendingAutomationRunNavigation = vi.fn()
+    const setIsDetailOpen = vi.fn()
+    const container = document.createElement('div')
+    const root = createRoot(container)
+
+    act(() => {
+      root.render(
+        <AutomationRunsDashboardSurface
+          rows={[row]}
+          entries={[entry]}
+          failures={[]}
+          loading={false}
+          hasMore={false}
+          onLoadMore={vi.fn()}
+          now={0}
+          onRefresh={vi.fn()}
+          setPageView={setPageView}
+          setRunPageOrigin={setRunPageOrigin}
+          selectAutomationRow={selectAutomationRow}
+          setPendingAutomationRunNavigation={setPendingAutomationRunNavigation}
+          setIsDetailOpen={setIsDetailOpen}
+        />
+      )
+    })
+
+    act(() => openRun?.(entry))
+
+    expect(setPageView).toHaveBeenCalledWith('run')
+    expect(setRunPageOrigin).toHaveBeenCalledWith('runs')
+    expect(selectAutomationRow).toHaveBeenCalledWith(row.key)
+    expect(setPendingAutomationRunNavigation).toHaveBeenCalledWith({
+      automationId: row.automation.id,
+      runId: run.id,
+      hostId: undefined
+    })
+    expect(setIsDetailOpen).toHaveBeenCalledWith(true)
+
+    act(() => root.unmount())
+  })
+})
diff --git a/src/renderer/src/components/automations/AutomationRunsDashboardSurface.tsx b/src/renderer/src/components/automations/AutomationRunsDashboardSurface.tsx
new file mode 100644
index 00000000000..2cfe6edc2a9
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationRunsDashboardSurface.tsx
@@ -0,0 +1,71 @@
+import React from 'react'
+import { toRuntimeExecutionHostId, type ExecutionHostId } from '../../../../shared/execution-host'
+import type { AutomationListRow } from './automation-list-row-identity'
+import type {
+  AutomationRunsDashboardEntry,
+  AutomationRunsDashboardFailure
+} from './automation-runs-dashboard-model'
+import { AutomationRunsDashboard } from './AutomationRunsDashboard'
+import type { AutomationsPageView } from './automation-page-state'
+
+export function AutomationRunsDashboardSurface({
+  rows,
+  entries,
+  failures,
+  loading,
+  hasMore,
+  onLoadMore,
+  now,
+  onRefresh,
+  setPageView,
+  setRunPageOrigin,
+  selectAutomationRow,
+  setPendingAutomationRunNavigation,
+  setIsDetailOpen
+}: {
+  rows: readonly AutomationListRow[]
+  entries: readonly AutomationRunsDashboardEntry[]
+  failures: readonly AutomationRunsDashboardFailure[]
+  loading: boolean
+  hasMore: boolean
+  onLoadMore: () => void
+  now: number
+  onRefresh: () => void
+  setPageView: (view: AutomationsPageView) => void
+  setRunPageOrigin: (origin: 'runs' | 'automation') => void
+  selectAutomationRow: (rowKey: string | null) => void
+  setPendingAutomationRunNavigation: (navigation: {
+    automationId: string
+    runId: string | null
+    hostId?: ExecutionHostId
+  }) => void
+  setIsDetailOpen: (open: boolean) => void
+}): React.JSX.Element {
+  return (
+    <AutomationRunsDashboard
+      rows={rows}
+      entries={entries}
+      failures={failures}
+      loading={loading}
+      hasMore={hasMore}
+      onLoadMore={onLoadMore}
+      now={now}
+      onRefresh={onRefresh}
+      onOpenRun={(entry) => {
+        const authority = entry.row.catalogRef?.authority
+        setRunPageOrigin('runs')
+        setPageView('run')
+        selectAutomationRow(entry.row.key)
+        setPendingAutomationRunNavigation({
+          automationId: entry.row.automation.id,
+          runId: entry.run.id,
+          hostId:
+            authority?.kind === 'runtime'
+              ? toRuntimeExecutionHostId(authority.environmentId)
+              : undefined
+        })
+        setIsDetailOpen(true)
+      }}
+    />
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationRunsTable.test.tsx b/src/renderer/src/components/automations/AutomationRunsTable.test.tsx
new file mode 100644
index 00000000000..b5c8a70aa8b
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationRunsTable.test.tsx
@@ -0,0 +1,87 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { Automation, AutomationRun } from '../../../../shared/automations-types'
+import type { AutomationRunsDashboardEntry } from './automation-runs-dashboard-model'
+import { AutomationRunsTable } from './AutomationRunsTable'
+
+vi.mock('@tanstack/react-virtual', () => ({
+  useVirtualizer: ({
+    count,
+    getItemKey
+  }: {
+    count: number
+    getItemKey: (index: number) => string
+  }) => ({
+    getTotalSize: () => count * 59,
+    getVirtualItems: () =>
+      Array.from({ length: Math.min(count, 21) }, (_, index) => ({
+        index,
+        key: getItemKey(index),
+        start: index * 59
+      })),
+    measureElement: () => undefined
+  })
+}))
+
+function entries(count: number): AutomationRunsDashboardEntry[] {
+  const automation = { id: 'automation', name: 'Daily check' } as Automation
+  const row = {
+    key: 'row',
+    automation,
+    catalogRef: { authority: { kind: 'desktop' }, selector: { kind: 'self' } },
+    hostLabel: 'Local Mac',
+    usageSummary: null
+  } as const
+  return Array.from({ length: count }, (_, index) => ({
+    key: `row:run-${index}`,
+    hostKey: 'desktop:self',
+    searchText: `daily check run ${index} local mac`,
+    row,
+    run: {
+      id: `run-${index}`,
+      automationId: automation.id,
+      title: `Run ${index}`,
+      scheduledFor: index,
+      trigger: 'scheduled',
+      status: 'completed'
+    } as AutomationRun,
+    scope: 'local'
+  }))
+}
+
+describe('AutomationRunsTable virtualization', () => {
+  let container: HTMLDivElement
+  let root: Root
+
+  beforeEach(() => {
+    globalThis.IS_REACT_ACT_ENVIRONMENT = true
+    container = document.createElement('div')
+    document.body.appendChild(container)
+    root = createRoot(container)
+  })
+
+  afterEach(() => {
+    act(() => root.unmount())
+    container.remove()
+  })
+
+  it('keeps a 10,000-run history to a bounded number of mounted rows', () => {
+    act(() => {
+      root.render(
+        <AutomationRunsTable
+          entries={entries(10_000)}
+          loading={false}
+          hasMore={false}
+          onLoadMore={() => {}}
+          onOpenRun={() => {}}
+        />
+      )
+    })
+
+    const mountedRows = container.querySelectorAll('[data-testid="automation-runs-row"]')
+    expect(mountedRows).toHaveLength(21)
+  })
+})
diff --git a/src/renderer/src/components/automations/AutomationRunsTable.tsx b/src/renderer/src/components/automations/AutomationRunsTable.tsx
new file mode 100644
index 00000000000..e4ec4f565eb
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationRunsTable.tsx
@@ -0,0 +1,156 @@
+import React, { useEffect, useRef } from 'react'
+import { useVirtualizer } from '@tanstack/react-virtual'
+import { ChevronRight, Loader2 } from 'lucide-react'
+import { Badge } from '@/components/ui/badge'
+import { translate } from '@/i18n/i18n'
+import type { AutomationRunsDashboardEntry } from './automation-runs-dashboard-model'
+import {
+  formatAutomationDateTimeWithRelative,
+  getAutomationRunStatusLabel,
+  getAutomationRunStatusVariant
+} from './automation-page-parts'
+
+const RUN_ROW_HEIGHT_PX = 59
+const RUN_ROW_OVERSCAN = 10
+const RUNS_VIEWPORT_INITIAL_RECT = { width: 1024, height: 600 }
+
+export function AutomationRunsTable({
+  entries,
+  loading,
+  hasMore,
+  onLoadMore,
+  onOpenRun
+}: {
+  entries: readonly AutomationRunsDashboardEntry[]
+  loading: boolean
+  hasMore: boolean
+  onLoadMore: () => void
+  onOpenRun: (entry: AutomationRunsDashboardEntry) => void
+}): React.JSX.Element {
+  const scrollRef = useRef<HTMLDivElement>(null)
+  const loadMoreRequestedRef = useRef(false)
+  useEffect(() => {
+    if (!loading) {
+      loadMoreRequestedRef.current = false
+    }
+  }, [loading])
+  const virtualizer = useVirtualizer({
+    count: entries.length,
+    getScrollElement: () => scrollRef.current,
+    estimateSize: () => RUN_ROW_HEIGHT_PX,
+    overscan: RUN_ROW_OVERSCAN,
+    initialRect: RUNS_VIEWPORT_INITIAL_RECT,
+    getItemKey: (index) => entries[index]?.key ?? index
+  })
+
+  return (
+    <div className="flex min-h-[18rem] flex-col overflow-hidden rounded-lg border border-border/60 bg-card">
+      <div className="grid shrink-0 grid-cols-[minmax(11rem,1.4fr)_minmax(10rem,1fr)_minmax(5rem,.55fr)_minmax(8rem,.8fr)_minmax(7rem,auto)] gap-3 border-b border-border/60 px-4 py-2 text-[11px] font-semibold uppercase tracking-[0.05em] text-muted-foreground">
+        <div>
+          {translate(
+            'auto.components.automations.AutomationRunsDashboard.automation',
+            'Automation'
+          )}
+        </div>
+        <div>
+          {translate('auto.components.automations.AutomationRunsDashboard.triggered', 'Triggered')}
+        </div>
+        <div>
+          {translate('auto.components.automations.AutomationRunsDashboard.trigger', 'Trigger')}
+        </div>
+        <div>{translate('auto.components.automations.AutomationRunsDashboard.host', 'Host')}</div>
+        <div>
+          {translate('auto.components.automations.AutomationRunsDashboard.status', 'Status')}
+        </div>
+      </div>
+      <div
+        ref={scrollRef}
+        className="scrollbar-sleek h-[calc(100vh-21rem)] min-h-[15rem] overflow-auto"
+        onScroll={(event) => {
+          const { clientHeight, scrollHeight, scrollTop } = event.currentTarget
+          const nearEnd = scrollHeight - scrollTop - clientHeight < RUN_ROW_HEIGHT_PX * 10
+          if (hasMore && !loading && nearEnd && !loadMoreRequestedRef.current) {
+            loadMoreRequestedRef.current = true
+            onLoadMore()
+          }
+        }}
+      >
+        {loading && entries.length === 0 ? (
+          <div className="flex h-full items-center justify-center gap-2 text-sm text-muted-foreground">
+            <Loader2 className="size-4 animate-spin" />
+            {translate(
+              'auto.components.automations.AutomationRunsDashboard.loading',
+              'Loading runs…'
+            )}
+          </div>
+        ) : entries.length === 0 ? (
+          <div className="flex h-full flex-col items-center justify-center gap-1 px-6 text-center">
+            <div className="text-sm font-medium">
+              {translate(
+                'auto.components.automations.AutomationRunsDashboard.noRuns',
+                'No runs yet'
+              )}
+            </div>
+            <div className="text-xs text-muted-foreground">
+              {translate(
+                'auto.components.automations.AutomationRunsDashboard.emptyDescription',
+                'Runs appear here after an automation is triggered.'
+              )}
+            </div>
+          </div>
+        ) : (
+          <div className="relative w-full" style={{ height: virtualizer.getTotalSize() }}>
+            {virtualizer.getVirtualItems().map((virtualRow) => {
+              const entry = entries[virtualRow.index]
+              if (!entry) {
+                return null
+              }
+              return (
+                <div
+                  key={virtualRow.key}
+                  data-index={virtualRow.index}
+                  ref={virtualizer.measureElement}
+                  className="absolute left-0 top-0 w-full border-b border-border/50"
+                  style={{ transform: `translateY(${virtualRow.start}px)` }}
+                >
+                  <button
+                    type="button"
+                    data-testid="automation-runs-row"
+                    className="grid w-full grid-cols-[minmax(11rem,1.4fr)_minmax(10rem,1fr)_minmax(5rem,.55fr)_minmax(8rem,.8fr)_minmax(7rem,auto)] items-center gap-3 px-4 py-2.5 text-left text-sm transition-colors hover:bg-accent hover:text-accent-foreground focus-visible:outline-none focus-visible:ring-[3px] focus-visible:ring-ring/50"
+                    onClick={() => onOpenRun(entry)}
+                  >
+                    <div className="min-w-0">
+                      <div className="truncate font-medium">{entry.row.automation.name}</div>
+                      <div className="mt-0.5 truncate text-xs text-muted-foreground">
+                        {entry.run.title}
+                      </div>
+                    </div>
+                    <div className="min-w-0 truncate text-xs">
+                      {formatAutomationDateTimeWithRelative(entry.run.scheduledFor)}
+                    </div>
+                    <div className="capitalize text-xs text-muted-foreground">
+                      {entry.run.trigger}
+                    </div>
+                    <div className="min-w-0 truncate text-xs" title={entry.row.hostLabel}>
+                      {entry.row.hostLabel ||
+                        translate(
+                          `auto.components.automations.AutomationRunsDashboard.${entry.scope}`,
+                          entry.scope === 'local' ? 'Local' : 'Remote'
+                        )}
+                    </div>
+                    <div className="flex items-center justify-between gap-2">
+                      <Badge variant={getAutomationRunStatusVariant(entry.run.status)}>
+                        {getAutomationRunStatusLabel(entry.run.status)}
+                      </Badge>
+                      <ChevronRight className="size-3.5 text-muted-foreground" />
+                    </div>
+                  </button>
+                </div>
+              )
+            })}
+          </div>
+        )}
+      </div>
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationsDetailPane.run-count.test.tsx b/src/renderer/src/components/automations/AutomationsDetailPane.run-count.test.tsx
index 740f1130405..3d52b2335d6 100644
--- a/src/renderer/src/components/automations/AutomationsDetailPane.run-count.test.tsx
+++ b/src/renderer/src/components/automations/AutomationsDetailPane.run-count.test.tsx
@@ -28,7 +28,6 @@ async function renderRunsTab(historyUnavailable: boolean): Promise<HTMLButtonEle
         selected={makeAutomation()}
         selectedExternal={null}
         selectedExternalRunPage={null}
-        selectedAutomationRunPage={null}
         selectedRuns={[]}
         selectedRunsNotice={
           historyUnavailable
@@ -44,15 +43,10 @@ async function renderRunsTab(historyUnavailable: boolean): Promise<HTMLButtonEle
         selectedHostEntry={null}
         hostLabelById={new Map()}
         selectedRunNowAvailability={null}
-        selectedAutomationRunPageWorkspaceDisplay={null}
-        selectedAutomationRunPageViewState={null}
-        canRerunSelectedAutomationRunPage={false}
-        isSelectedAutomationRunPageRerunPending={false}
         worktreeMap={new Map()}
         fetchExternalAutomationRuns={vi.fn()}
         onActivePaneTabChange={vi.fn()}
         onClearExternalRunPage={vi.fn()}
-        onClearAutomationRunPage={vi.fn()}
         requestExternalAction={vi.fn()}
         openExternalRunPage={vi.fn()}
         openEditExternalDialog={vi.fn()}
@@ -60,8 +54,6 @@ async function renderRunsTab(historyUnavailable: boolean): Promise<HTMLButtonEle
         openEditDialog={vi.fn()}
         toggleAutomation={vi.fn()}
         requestDeleteAutomation={vi.fn()}
-        rerunAutomationRun={vi.fn()}
-        openRunWorkspace={vi.fn()}
         openAutomationRunPage={vi.fn()}
         onBackToList={vi.fn()}
         recoverSelectedRuns={vi.fn()}
diff --git a/src/renderer/src/components/automations/AutomationsDetailPane.test.tsx b/src/renderer/src/components/automations/AutomationsDetailPane.test.tsx
index f62abc274b8..5f3caaa2acd 100644
--- a/src/renderer/src/components/automations/AutomationsDetailPane.test.tsx
+++ b/src/renderer/src/components/automations/AutomationsDetailPane.test.tsx
@@ -47,7 +47,6 @@ function renderDetailPane(options: {
           selected={selected}
           selectedExternal={null}
           selectedExternalRunPage={null}
-          selectedAutomationRunPage={null}
           selectedRuns={[]}
           selectedRunsNotice={null}
           activePaneTab={activePaneTab}
@@ -59,15 +58,10 @@ function renderDetailPane(options: {
           selectedHostEntry={null}
           hostLabelById={new Map()}
           selectedRunNowAvailability={null}
-          selectedAutomationRunPageWorkspaceDisplay={null}
-          selectedAutomationRunPageViewState={null}
-          canRerunSelectedAutomationRunPage={false}
-          isSelectedAutomationRunPageRerunPending={false}
           worktreeMap={new Map()}
           fetchExternalAutomationRuns={async () => []}
           onActivePaneTabChange={onActivePaneTabChange}
           onClearExternalRunPage={() => undefined}
-          onClearAutomationRunPage={() => undefined}
           requestExternalAction={() => undefined}
           openExternalRunPage={() => undefined}
           openEditExternalDialog={() => undefined}
@@ -75,8 +69,6 @@ function renderDetailPane(options: {
           openEditDialog={() => undefined}
           toggleAutomation={() => undefined}
           requestDeleteAutomation={() => undefined}
-          rerunAutomationRun={() => undefined}
-          openRunWorkspace={() => undefined}
           openAutomationRunPage={() => undefined}
           onBackToList={() => undefined}
           recoverSelectedRuns={() => undefined}
@@ -178,7 +170,6 @@ describe('AutomationsDetailPane tab keyboard navigation', () => {
             selected={selected}
             selectedExternal={null}
             selectedExternalRunPage={null}
-            selectedAutomationRunPage={null}
             selectedRuns={[]}
             selectedRunsNotice={null}
             activePaneTab="overview"
@@ -190,15 +181,10 @@ describe('AutomationsDetailPane tab keyboard navigation', () => {
             selectedHostEntry={null}
             hostLabelById={new Map()}
             selectedRunNowAvailability={null}
-            selectedAutomationRunPageWorkspaceDisplay={null}
-            selectedAutomationRunPageViewState={null}
-            canRerunSelectedAutomationRunPage={false}
-            isSelectedAutomationRunPageRerunPending={false}
             worktreeMap={new Map()}
             fetchExternalAutomationRuns={async () => []}
             onActivePaneTabChange={() => undefined}
             onClearExternalRunPage={() => undefined}
-            onClearAutomationRunPage={() => undefined}
             requestExternalAction={() => undefined}
             openExternalRunPage={() => undefined}
             openEditExternalDialog={() => undefined}
@@ -206,8 +192,6 @@ describe('AutomationsDetailPane tab keyboard navigation', () => {
             openEditDialog={() => undefined}
             toggleAutomation={() => undefined}
             requestDeleteAutomation={() => undefined}
-            rerunAutomationRun={() => undefined}
-            openRunWorkspace={() => undefined}
             openAutomationRunPage={() => undefined}
             onBackToList={onBackToList}
             recoverSelectedRuns={() => undefined}
diff --git a/src/renderer/src/components/automations/AutomationsDetailPane.tsx b/src/renderer/src/components/automations/AutomationsDetailPane.tsx
index e0547174f33..72c60463ea3 100644
--- a/src/renderer/src/components/automations/AutomationsDetailPane.tsx
+++ b/src/renderer/src/components/automations/AutomationsDetailPane.tsx
@@ -1,8 +1,7 @@
 import React from 'react'
-import { ArrowLeft, Eye, RefreshCw } from 'lucide-react'
+import { ArrowLeft } from 'lucide-react'
 import { Button } from '@/components/ui/button'
 import { Tabs, TabsContent, TabsList, TabsTrigger } from '@/components/ui/tabs'
-import { cn } from '@/lib/utils'
 import type {
   Automation,
   ExternalAutomationAction,
@@ -12,7 +11,6 @@ import type {
   AutomationRun
 } from '../../../../shared/automations-types'
 import type { Worktree } from '../../../../shared/worktree/types'
-import CommentMarkdown from '@/components/sidebar/CommentMarkdown'
 import { AutomationDetail } from './AutomationDetail'
 import { HermesCronOutputView } from './HermesCronOutputView'
 import { AutomationRunPageFrame } from './AutomationRunPageFrame'
@@ -28,18 +26,10 @@ import {
   getExternalRunStatusLabel,
   getExternalRunStatusVariant
 } from './external-automation-display'
-import {
-  formatAutomationDateTimeWithRelative,
-  getAutomationRunStatusLabel,
-  getAutomationRunStatusVariant
-} from './automation-page-parts'
-import { getAutomationRunContent } from './automation-run-content'
 import type { AutomationActionNotice } from './automation-row-action-dispatch'
 import type { AutomationHostRecoveryAction } from './automation-host-status-descriptors'
 import type { AutomationHostCatalogEntry } from './automation-host-catalog-types'
 import type { AutomationTargetAvailability } from './automation-target-availability'
-import type { AutomationRunViewState } from './automation-run-view-state'
-import type { AutomationRunWorkspaceDisplay } from './automation-run-workspace-display'
 import type { AutomationPaneTab, SelectedExternalRunPage } from './automation-page-state'
 import {
   getAutomationDetailNextTab,
@@ -52,7 +42,6 @@ type AutomationsDetailPaneProps = {
   selected: Automation | null
   selectedExternal: ExternalAutomationListEntry | null
   selectedExternalRunPage: SelectedExternalRunPage | null
-  selectedAutomationRunPage: AutomationRun | null
   selectedRuns: AutomationRun[]
   /** Set when the selected automation's history read failed; its runs are unknown. */
   selectedRunsNotice: AutomationActionNotice | null
@@ -66,15 +55,10 @@ type AutomationsDetailPaneProps = {
   selectedHostEntry: AutomationHostCatalogEntry | null
   hostLabelById: ReadonlyMap<string, string>
   selectedRunNowAvailability: AutomationTargetAvailability | null
-  selectedAutomationRunPageWorkspaceDisplay: AutomationRunWorkspaceDisplay | null
-  selectedAutomationRunPageViewState: AutomationRunViewState | null
-  canRerunSelectedAutomationRunPage: boolean
-  isSelectedAutomationRunPageRerunPending: boolean
   worktreeMap: ReadonlyMap<string, Worktree>
   fetchExternalAutomationRuns: FetchExternalAutomationRuns
   onActivePaneTabChange: (tab: AutomationPaneTab) => void
   onClearExternalRunPage: () => void
-  onClearAutomationRunPage: () => void
   requestExternalAction: (
     manager: ExternalAutomationManager,
     job: ExternalAutomationJob,
@@ -95,8 +79,6 @@ type AutomationsDetailPaneProps = {
   openEditDialog: (automation: Automation) => void
   toggleAutomation: (automation: Automation) => void
   requestDeleteAutomation: (automation: Automation) => void
-  rerunAutomationRun: (automation: Automation, run: AutomationRun) => void
-  openRunWorkspace: (run: AutomationRun) => void
   openAutomationRunPage: (run: AutomationRun) => void
   onBackToList: () => void
   recoverSelectedRuns: (action: AutomationHostRecoveryAction) => void
@@ -106,7 +88,6 @@ export function AutomationsDetailPane({
   selected,
   selectedExternal,
   selectedExternalRunPage,
-  selectedAutomationRunPage,
   selectedRuns,
   selectedRunsNotice,
   activePaneTab,
@@ -118,15 +99,10 @@ export function AutomationsDetailPane({
   selectedHostEntry,
   hostLabelById,
   selectedRunNowAvailability,
-  selectedAutomationRunPageWorkspaceDisplay,
-  selectedAutomationRunPageViewState,
-  canRerunSelectedAutomationRunPage,
-  isSelectedAutomationRunPageRerunPending,
   worktreeMap,
   fetchExternalAutomationRuns,
   onActivePaneTabChange,
   onClearExternalRunPage,
-  onClearAutomationRunPage,
   requestExternalAction,
   openExternalRunPage,
   openEditExternalDialog,
@@ -134,8 +110,6 @@ export function AutomationsDetailPane({
   openEditDialog,
   toggleAutomation,
   requestDeleteAutomation,
-  rerunAutomationRun,
-  openRunWorkspace,
   openAutomationRunPage,
   onBackToList,
   recoverSelectedRuns
@@ -148,10 +122,6 @@ export function AutomationsDetailPane({
           onClearExternalRunPage()
           return
         }
-        if (selectedAutomationRunPage) {
-          onClearAutomationRunPage()
-          return
-        }
         onBackToList()
         return
       }
@@ -179,10 +149,8 @@ export function AutomationsDetailPane({
     activePaneTab,
     onActivePaneTabChange,
     onBackToList,
-    onClearAutomationRunPage,
     onClearExternalRunPage,
     selected,
-    selectedAutomationRunPage,
     selectedExternal,
     selectedExternalRunPage
   ])
@@ -291,76 +259,7 @@ export function AutomationsDetailPane({
           </TabsContent>
 
           <TabsContent value="runs" className="scrollbar-sleek min-h-0 overflow-auto p-5">
-            {selectedAutomationRunPage ? (
-              <AutomationRunPageFrame
-                title={selected?.name ?? selectedAutomationRunPage.title}
-                breadcrumbs={[
-                  formatAutomationDateTimeWithRelative(
-                    selectedAutomationRunPage.scheduledFor,
-                    relativeNow
-                  ),
-                  'Orca',
-                  selectedAutomationRunPageWorkspaceDisplay?.detailLabel ??
-                    translate(
-                      'auto.components.automations.AutomationsPage.noWorkspace',
-                      'No workspace'
-                    )
-                ]}
-                detail={
-                  selectedAutomationRunPage.outputSnapshot?.truncated
-                    ? translate(
-                        'auto.components.automations.AutomationsPage.latestSavedOutput',
-                        'Latest saved output'
-                      )
-                    : null
-                }
-                statusLabel={getAutomationRunStatusLabel(selectedAutomationRunPage.status)}
-                statusVariant={getAutomationRunStatusVariant(selectedAutomationRunPage.status)}
-                actions={
-                  <>
-                    {canRerunSelectedAutomationRunPage && selected ? (
-                      <Button
-                        type="button"
-                        variant="outline"
-                        size="sm"
-                        disabled={isSelectedAutomationRunPageRerunPending}
-                        onClick={() => void rerunAutomationRun(selected, selectedAutomationRunPage)}
-                      >
-                        <RefreshCw
-                          className={cn(
-                            'size-3.5',
-                            isSelectedAutomationRunPageRerunPending && 'animate-spin'
-                          )}
-                        />
-                        {translate(
-                          'auto.components.automations.AutomationsPage.295698292f',
-                          'Rerun'
-                        )}
-                      </Button>
-                    ) : null}
-                    {selectedAutomationRunPageViewState ? (
-                      <Button
-                        type="button"
-                        variant="outline"
-                        size="sm"
-                        disabled={!selectedAutomationRunPageViewState.canOpen}
-                        onClick={() => openRunWorkspace(selectedAutomationRunPage)}
-                      >
-                        <Eye className="size-3.5" />
-                        {selectedAutomationRunPageViewState.actionLabel}
-                      </Button>
-                    ) : null}
-                  </>
-                }
-                onBack={onClearAutomationRunPage}
-              >
-                <CommentMarkdown
-                  variant="document"
-                  content={getAutomationRunContent(selectedAutomationRunPage)}
-                  className="text-sm leading-relaxed text-foreground"
-                />
-              </AutomationRunPageFrame>
-            ) : selected ? (
+            {selected ? (
               <AutomationRunHistory
                 runs={selectedRuns}
                 automationId={selected.id}
diff --git a/src/renderer/src/components/automations/AutomationsListPanel.test.tsx b/src/renderer/src/components/automations/AutomationsListPanel.test.tsx
index 3955a4956f6..2f772d2a7ed 100644
--- a/src/renderer/src/components/automations/AutomationsListPanel.test.tsx
+++ b/src/renderer/src/components/automations/AutomationsListPanel.test.tsx
@@ -91,6 +91,7 @@ function renderPanel(
           }}
           hostCatalog={HOST_CATALOG}
           canCreateAutomation={true}
+          onOpenRuns={() => undefined}
           externalManagersUncheckedNotice={uncheckedNotice}
           onSelectHost={() => undefined}
           onRecoverHost={() => undefined}
diff --git a/src/renderer/src/components/automations/AutomationsListPanel.tsx b/src/renderer/src/components/automations/AutomationsListPanel.tsx
index fa6cb5891c4..5943096756a 100644
--- a/src/renderer/src/components/automations/AutomationsListPanel.tsx
+++ b/src/renderer/src/components/automations/AutomationsListPanel.tsx
@@ -107,6 +107,7 @@ type AutomationsListPanelProps = {
   onOpenDetail: () => void
   onRefresh: () => void
   isRefreshing: boolean
+  onOpenRuns: () => void
 }
 
 export function AutomationsListPanel(props: AutomationsListPanelProps): React.JSX.Element {
@@ -153,7 +154,8 @@ export function AutomationsListPanel(props: AutomationsListPanelProps): React.JS
     canCreateAutomation,
     onOpenDetail,
     onRefresh,
-    isRefreshing
+    isRefreshing,
+    onOpenRuns
   } = props
   const listRef = useRef<HTMLDivElement>(null)
   // Hosts moved into the Filters menu, so its toolbar row is the focus fallback now.
@@ -293,6 +295,7 @@ export function AutomationsListPanel(props: AutomationsListPanelProps): React.JS
         hostEntries={hostCatalog.entries}
         onRefresh={onRefresh}
         isRefreshing={isRefreshing}
+        onOpenRuns={onOpenRuns}
         openCreateDialog={openCreateDialog}
         canCreateAutomation={canCreateAutomation}
       />
diff --git a/src/renderer/src/components/automations/AutomationsPageBreadcrumb.test.tsx b/src/renderer/src/components/automations/AutomationsPageBreadcrumb.test.tsx
new file mode 100644
index 00000000000..2ce0a77fc56
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationsPageBreadcrumb.test.tsx
@@ -0,0 +1,84 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot } from 'react-dom/client'
+import { describe, expect, it, vi } from 'vitest'
+import { AutomationsPageBreadcrumb } from './AutomationsPageBreadcrumb'
+
+describe('AutomationsPageBreadcrumb', () => {
+  it('renders the selected automation as the detail-page breadcrumb', () => {
+    const container = document.createElement('div')
+    const root = createRoot(container)
+
+    act(() => {
+      root.render(
+        <AutomationsPageBreadcrumb
+          current="automation"
+          automationName="Nightly sync"
+          onBackToAutomations={vi.fn()}
+        />
+      )
+    })
+
+    expect(container.textContent).toContain('Automations')
+    expect(container.textContent).toContain('Nightly sync')
+    expect(container.querySelector('[aria-current="page"]')?.textContent).toBe('Nightly sync')
+
+    act(() => root.unmount())
+  })
+
+  it('links a run detail page back through Runs and Automations', () => {
+    const container = document.createElement('div')
+    const root = createRoot(container)
+    const onBackToAutomations = vi.fn()
+    const onBackToRuns = vi.fn()
+
+    act(() => {
+      root.render(
+        <AutomationsPageBreadcrumb
+          current="run"
+          onBackToAutomations={onBackToAutomations}
+          onBackToRuns={onBackToRuns}
+        />
+      )
+    })
+
+    expect(container.textContent).toContain('Automations')
+    expect(container.textContent).toContain('Runs')
+    expect(container.querySelector('[aria-current="page"]')?.textContent).toBe('Run details')
+
+    const buttons = container.querySelectorAll('button')
+    act(() => buttons[0]?.click())
+    act(() => buttons[1]?.click())
+    expect(onBackToAutomations).toHaveBeenCalledOnce()
+    expect(onBackToRuns).toHaveBeenCalledOnce()
+
+    act(() => root.unmount())
+  })
+
+  it('links an automation-origin run back to its automation details', () => {
+    const container = document.createElement('div')
+    const root = createRoot(container)
+    const onBackToAutomation = vi.fn()
+
+    act(() => {
+      root.render(
+        <AutomationsPageBreadcrumb
+          current="run"
+          automationName="Nightly sync"
+          onBackToAutomations={vi.fn()}
+          onBackToAutomation={onBackToAutomation}
+        />
+      )
+    })
+
+    expect(container.textContent).toContain('Nightly sync')
+    expect(container.textContent).toContain('Run details')
+
+    const buttons = container.querySelectorAll('button')
+    act(() => buttons[1]?.click())
+    expect(onBackToAutomation).toHaveBeenCalledOnce()
+
+    act(() => root.unmount())
+  })
+})
diff --git a/src/renderer/src/components/automations/AutomationsPageBreadcrumb.tsx b/src/renderer/src/components/automations/AutomationsPageBreadcrumb.tsx
new file mode 100644
index 00000000000..fa98e91f490
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationsPageBreadcrumb.tsx
@@ -0,0 +1,76 @@
+import React from 'react'
+import { ChevronRight } from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import { translate } from '@/i18n/i18n'
+
+export function AutomationsPageBreadcrumb({
+  current,
+  onBackToAutomations,
+  onBackToRuns,
+  automationName,
+  onBackToAutomation
+}: {
+  current: 'runs' | 'run' | 'automation'
+  onBackToAutomations: () => void
+  onBackToRuns?: () => void
+  automationName?: string
+  onBackToAutomation?: () => void
+}): React.JSX.Element {
+  return (
+    <nav
+      aria-label={translate(
+        'auto.components.automations.AutomationsPageBreadcrumb.ariaLabel',
+        'Automations breadcrumb'
+      )}
+      className="flex min-w-0 items-center text-sm"
+    >
+      <Button
+        type="button"
+        variant="link"
+        className="h-8 px-0 font-normal text-muted-foreground"
+        onClick={onBackToAutomations}
+      >
+        {translate('auto.components.automations.AutomationsPage.77c2778945', 'Automations')}
+      </Button>
+      <ChevronRight className="mx-1 size-3.5 shrink-0 text-muted-foreground" />
+      {current === 'automation' ? (
+        <span className="truncate font-medium" aria-current="page">
+          {automationName}
+        </span>
+      ) : current === 'run' ? (
+        <>
+          {automationName ? (
+            <Button
+              type="button"
+              variant="link"
+              className="h-8 max-w-[28ch] truncate px-0 font-normal text-muted-foreground"
+              onClick={onBackToAutomation}
+            >
+              {automationName}
+            </Button>
+          ) : (
+            <Button
+              type="button"
+              variant="link"
+              className="h-8 px-0 font-normal text-muted-foreground"
+              onClick={onBackToRuns}
+            >
+              {translate('auto.components.automations.AutomationRunsDashboard.runs', 'Runs')}
+            </Button>
+          )}
+          <ChevronRight className="mx-1 size-3.5 shrink-0 text-muted-foreground" />
+          <span className="truncate font-medium" aria-current="page">
+            {translate(
+              'auto.components.automations.AutomationsPageBreadcrumb.runDetails',
+              'Run details'
+            )}
+          </span>
+        </>
+      ) : (
+        <span className="truncate font-medium" aria-current="page">
+          {translate('auto.components.automations.AutomationRunsDashboard.runs', 'Runs')}
+        </span>
+      )}
+    </nav>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationsPageDeleteDialogs.tsx b/src/renderer/src/components/automations/AutomationsPageDeleteDialogs.tsx
new file mode 100644
index 00000000000..e5bb6cef3bc
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationsPageDeleteDialogs.tsx
@@ -0,0 +1,65 @@
+import React from 'react'
+import { AutomationDeleteDialog, ExternalAutomationDeleteDialog } from './AutomationDeleteDialogs'
+
+type Props = {
+  deleteTarget: React.ComponentProps<typeof AutomationDeleteDialog>['deleteTarget']
+  dontAskDeleteAgain: boolean
+  deleteConfirmButtonRef: React.ComponentProps<typeof AutomationDeleteDialog>['confirmButtonRef']
+  setDeleteTarget: (target: null) => void
+  setDontAskDeleteAgain: (value: boolean) => void
+  confirmDeleteAutomation: () => void
+  externalDeleteTarget: React.ComponentProps<
+    typeof ExternalAutomationDeleteDialog
+  >['externalDeleteTarget']
+  externalDeleteConfirmButtonRef: React.ComponentProps<
+    typeof ExternalAutomationDeleteDialog
+  >['confirmButtonRef']
+  setExternalDeleteTarget: (target: null) => void
+  confirmDeleteExternalAutomation: () => void
+}
+
+export function AutomationsPageDeleteDialogs({
+  deleteTarget,
+  dontAskDeleteAgain,
+  deleteConfirmButtonRef,
+  setDeleteTarget,
+  setDontAskDeleteAgain,
+  confirmDeleteAutomation,
+  externalDeleteTarget,
+  externalDeleteConfirmButtonRef,
+  setExternalDeleteTarget,
+  confirmDeleteExternalAutomation
+}: Props): React.JSX.Element {
+  return (
+    <>
+      <AutomationDeleteDialog
+        deleteTarget={deleteTarget}
+        dontAskDeleteAgain={dontAskDeleteAgain}
+        confirmButtonRef={deleteConfirmButtonRef}
+        onOpenChange={(open) => {
+          if (!open) {
+            setDeleteTarget(null)
+            setDontAskDeleteAgain(false)
+          }
+        }}
+        onDontAskAgainToggle={() => setDontAskDeleteAgain(!dontAskDeleteAgain)}
+        onCancel={() => {
+          setDeleteTarget(null)
+          setDontAskDeleteAgain(false)
+        }}
+        onConfirm={confirmDeleteAutomation}
+      />
+      <ExternalAutomationDeleteDialog
+        externalDeleteTarget={externalDeleteTarget}
+        confirmButtonRef={externalDeleteConfirmButtonRef}
+        onOpenChange={(open) => {
+          if (!open) {
+            setExternalDeleteTarget(null)
+          }
+        }}
+        onCancel={() => setExternalDeleteTarget(null)}
+        onConfirm={confirmDeleteExternalAutomation}
+      />
+    </>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationsPageListPanel.tsx b/src/renderer/src/components/automations/AutomationsPageListPanel.tsx
new file mode 100644
index 00000000000..25c7ff7b88c
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationsPageListPanel.tsx
@@ -0,0 +1,125 @@
+import React from 'react'
+import type { AutomationsPageController } from './use-automations-page-controller'
+import { AutomationsListPanel } from './AutomationsListPanel'
+
+export function AutomationsPageListPanel({
+  controller,
+  onOpenDetail
+}: {
+  controller: AutomationsPageController
+  onOpenDetail: () => void
+}): React.JSX.Element {
+  const {
+    store,
+    local,
+    list,
+    destination,
+    sourceAvailability,
+    pageRefresh,
+    runActions,
+    editorActions,
+    managementActions,
+    externalActions,
+    presentation
+  } = controller
+  const {
+    projectHostSetups,
+    repoMap,
+    worktreeMap,
+    sshConnectionStates,
+    runtimeStatusByEnvironmentId
+  } = store
+  const {
+    listSearchQuery,
+    setListSearchQuery,
+    listFilter,
+    setListFilter,
+    relativeNow,
+    externalActionKey,
+    setActivePaneTab,
+    isLoading,
+    setPageView
+  } = local
+  const {
+    hostCatalog,
+    hasListItems,
+    hasFilteredListItems,
+    isListSearchQueryTooLarge,
+    filteredRows,
+    filteredExternalAutomationEntries,
+    selectedRow,
+    selectedExternal,
+    searchCounts
+  } = list
+  const onListFilterChange = (next: typeof listFilter): void => {
+    setListFilter(next)
+    if ((next.hostStableKeys?.length ?? 0) > 0 && hostCatalog.resolution.effective.kind !== 'all') {
+      hostCatalog.selectHost({ kind: 'all' })
+    }
+  }
+  return (
+    <AutomationsListPanel
+      hasListItems={hasListItems}
+      hasFilteredListItems={hasFilteredListItems}
+      listSearchQuery={listSearchQuery}
+      isListSearchQueryTooLarge={isListSearchQueryTooLarge}
+      onListSearchQueryChange={setListSearchQuery}
+      listFilter={listFilter}
+      onListFilterChange={onListFilterChange}
+      searchCounts={{
+        ...searchCounts,
+        hostRowCount: list.visibleRows.length + list.externalAutomationEntries.length
+      }}
+      hostCatalog={hostCatalog}
+      externalManagersUncheckedNotice={list.externalManagersUncheckedNotice}
+      onSelectHost={hostCatalog.selectHost}
+      onRecoverHost={(action, entry) => {
+        hostCatalog.recover(action, entry)
+        if (action === 'retry') {
+          void pageRefresh.refresh()
+        }
+      }}
+      filteredRows={filteredRows}
+      filteredExternalAutomationEntries={filteredExternalAutomationEntries}
+      selectedRowKey={selectedRow?.key ?? null}
+      selectedExternalKey={local.selectedExternalKey}
+      selectedExternal={selectedExternal}
+      relativeNow={relativeNow}
+      repoMap={repoMap}
+      worktreeMap={worktreeMap}
+      repoForRow={store.repoForRow}
+      worktreeForRow={store.worktreeForRow}
+      projectHostSetups={projectHostSetups}
+      sshConnectionStates={sshConnectionStates}
+      runtimeStatusByEnvironmentId={runtimeStatusByEnvironmentId}
+      hostTargetFor={destination.automationHostTargetFor}
+      automationSourceHostAvailabilityByRowKey={
+        sourceAvailability.automationSourceHostAvailabilityByRowKey
+      }
+      hostLabelById={presentation.hostLabelById}
+      isActionEnabled={destination.isAutomationRowActionEnabled}
+      externalActionKey={externalActionKey}
+      selectAutomationRow={list.selectAutomationRow}
+      selectExternalKey={local.selectExternalKey}
+      setActivePaneTab={setActivePaneTab}
+      runNow={(row) => void runActions.runNow(row)}
+      openEditDialog={(row) => void editorActions.openEditDialog(row)}
+      toggleAutomation={(row) => void managementActions.toggleAutomation(row)}
+      requestDeleteAutomation={managementActions.requestDeleteAutomation}
+      requestExternalAction={externalActions.requestExternalAction}
+      openEditExternalDialog={editorActions.openEditExternalDialog}
+      openCreateDialog={editorActions.openCreateDialog}
+      canCreateAutomation={destination.canCreateAutomation}
+      onOpenDetail={onOpenDetail}
+      onRefresh={() => {
+        hostCatalog.refreshHosts()
+        void pageRefresh.refresh()
+      }}
+      isRefreshing={isLoading}
+      onOpenRuns={() => {
+        hostCatalog.selectHost({ kind: 'all' })
+        setPageView('runs')
+      }}
+    />
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationsPageSurface.tsx b/src/renderer/src/components/automations/AutomationsPageSurface.tsx
index 512add800a3..1e46b5f0283 100644
--- a/src/renderer/src/components/automations/AutomationsPageSurface.tsx
+++ b/src/renderer/src/components/automations/AutomationsPageSurface.tsx
@@ -1,17 +1,17 @@
 import React, { useMemo } from 'react'
 import { translate } from '@/i18n/i18n'
-import { AutomationDeleteDialog, ExternalAutomationDeleteDialog } from './AutomationDeleteDialogs'
 import { AutomationEditorDialog } from './AutomationEditorDialog'
-import { AutomationOwnerConflictNotice } from './AutomationOwnerConflictNotice'
 import { AutomationsDetailPane } from './AutomationsDetailPane'
-import { AutomationsListPanel } from './AutomationsListPanel'
 import { AutomationsPageSkeleton } from './AutomationsPageSkeleton'
 import { getAutomationAuthorityTarget } from './automation-host-client'
 import type { AutomationListRow } from './automation-list-row-identity'
 import type { AutomationHostRecoveryAction } from './automation-host-status-descriptors'
+import { AutomationsPageTopBar } from './AutomationsPageTopBar'
 import type { AutomationsPageController } from './use-automations-page-controller'
-
-/** Renders the page from controller state; host/query side effects stay in hooks. */
+import { AutomationRunsDashboardSurface } from './AutomationRunsDashboardSurface'
+import { AutomationRunDetailsPage } from './AutomationRunDetailsPage'
+import { AutomationsPageDeleteDialogs } from './AutomationsPageDeleteDialogs'
+import { AutomationsPageListPanel } from './AutomationsPageListPanel'
 export function AutomationsPageSurface({
   controller
 }: {
@@ -22,10 +22,10 @@ export function AutomationsPageSurface({
     local,
     list,
     destination,
+    runsDashboard,
     destinationForm,
     setup,
     runPage,
-    sourceAvailability,
     presentation,
     pageRefresh,
     draftEffects,
@@ -41,10 +41,9 @@ export function AutomationsPageSurface({
     repoMap,
     worktreeMap,
     settings,
-    sshConnectionStates,
-    runtimeStatusByEnvironmentId,
     repoForRow,
-    worktreeForRow
+    worktreeForRow,
+    setPendingAutomationRunNavigation
   } = store
   const {
     createOpen,
@@ -63,10 +62,6 @@ export function AutomationsPageSurface({
     externalDeleteTarget,
     externalDeleteConfirmButtonRef,
     setExternalDeleteTarget,
-    listSearchQuery,
-    setListSearchQuery,
-    listFilter,
-    setListFilter,
     relativeNow,
     externalActionKey,
     activePaneTab,
@@ -84,21 +79,14 @@ export function AutomationsPageSurface({
     setEditorNotice,
     editorNoticeHost,
     setEditorNoticeHost,
-    isLoading
+    isLoading,
+    pageView,
+    setPageView,
+    runPageOrigin,
+    setRunPageOrigin
   } = local
-  const {
-    hostCatalog,
-    hasListItems,
-    hasFilteredListItems,
-    isListSearchQueryTooLarge,
-    filteredRows,
-    filteredExternalAutomationEntries,
-    selected,
-    selectedRow,
-    selectedExternal,
-    searchCounts
-  } = list
-
+  const { hostCatalog, hasListItems, selected, selectedRow, selectedExternal } = list
+  const selectedAutomationRunPage = setup.selectedAutomationRunPage
   const selectedRunWorktreeMap = useMemo(() => {
     if (!selectedRow) {
       return worktreeMap
@@ -111,7 +99,6 @@ export function AutomationsPageSurface({
       })
     )
   }, [repoForRow, selectedRow, setup.selectedRuns, worktreeForRow, worktreeMap])
-
   const runSelectedRowAction = (action: (row: AutomationListRow) => void): void => {
     if (selectedRow) {
       action(selectedRow)
@@ -127,32 +114,43 @@ export function AutomationsPageSurface({
       void pageRefresh.refresh()
     }
   }
-  const onListFilterChange = (next: typeof listFilter): void => {
-    setListFilter(next)
-    if ((next.hostStableKeys?.length ?? 0) > 0 && hostCatalog.resolution.effective.kind !== 'all') {
-      // Host narrowing now lives in the Filters menu; clear the old single-host scope.
-      hostCatalog.selectHost({ kind: 'all' })
-    }
+  const openAutomationRunPage = (run: (typeof setup.selectedRuns)[number]): void => {
+    externalActions.openAutomationRunPage(run)
+    setRunPageOrigin('automation')
+    setPageView('run')
+  }
+  const showAutomationsList = (): void => {
+    setPageView('automations')
+    setSelectedAutomationRunPageId(null)
+    setIsDetailOpen(false)
+    setActivePaneTab('overview')
+  }
+  const showRunsDashboard = (): void => {
+    setPageView('runs')
+    setSelectedAutomationRunPageId(null)
+    setIsDetailOpen(false)
+    setActivePaneTab('overview')
+  }
+  const showAutomationDetails = (): void => {
+    setPageView('automations')
+    setSelectedAutomationRunPageId(null)
+    setIsDetailOpen(true)
+    setActivePaneTab('runs')
   }
-
   return (
     <main className="relative flex h-full min-h-0 flex-col bg-background pt-5 text-foreground md:pt-6">
-      <header
-        className="flex shrink-0 items-center px-3 pb-3 md:px-5"
-        style={{ paddingRight: 'max(0.75rem, var(--window-controls-width, 0px))' }}
-      >
-        <h1 className="truncate text-base font-semibold leading-8">
-          {translate('auto.components.automations.AutomationsPage.77c2778945', 'Automations')}
-        </h1>
-      </header>
-
-      <AutomationOwnerConflictNotice
-        notice={ownerAction?.notice ?? null}
-        className="mx-4 mb-2"
-        onRecover={(action) => recoverOwnerAction(action)}
-        onDismiss={() => setOwnerAction(null)}
+      <AutomationsPageTopBar
+        pageView={pageView}
+        isDetailOpen={isDetailOpen}
+        selectedAutomationName={selected?.name}
+        runPageOrigin={runPageOrigin}
+        ownerNotice={ownerAction?.notice ?? null}
+        recoverOwnerAction={recoverOwnerAction}
+        dismissOwnerAction={() => setOwnerAction(null)}
+        showAutomationsList={showAutomationsList}
+        showRunsDashboard={showRunsDashboard}
+        showAutomationDetails={showAutomationDetails}
       />
-
       <AutomationEditorDialog
         open={createOpen}
         isEditing={editingAutomationId !== null}
@@ -210,45 +208,62 @@ export function AutomationsPageSurface({
         onApplyTemplate={draftEffects.applyTemplateToDraft}
         onSave={() => void saveAutomation()}
       />
-
-      <AutomationDeleteDialog
+      <AutomationsPageDeleteDialogs
         deleteTarget={deleteTarget?.automation ?? null}
         dontAskDeleteAgain={dontAskDeleteAgain}
-        confirmButtonRef={deleteConfirmButtonRef}
-        onOpenChange={(open) => {
-          if (!open) {
-            setDeleteTarget(null)
-            setDontAskDeleteAgain(false)
-          }
-        }}
-        onDontAskAgainToggle={() => setDontAskDeleteAgain((previous) => !previous)}
-        onCancel={() => {
-          setDeleteTarget(null)
-          setDontAskDeleteAgain(false)
-        }}
-        onConfirm={() => void managementActions.confirmDeleteAutomation()}
-      />
-
-      <ExternalAutomationDeleteDialog
+        deleteConfirmButtonRef={deleteConfirmButtonRef}
+        setDeleteTarget={setDeleteTarget}
+        setDontAskDeleteAgain={setDontAskDeleteAgain}
+        confirmDeleteAutomation={() => void managementActions.confirmDeleteAutomation()}
         externalDeleteTarget={externalDeleteTarget}
-        confirmButtonRef={externalDeleteConfirmButtonRef}
-        onOpenChange={(open) => {
-          if (!open) {
-            setExternalDeleteTarget(null)
-          }
-        }}
-        onCancel={() => setExternalDeleteTarget(null)}
-        onConfirm={() => void externalActions.confirmDeleteExternalAutomation()}
+        externalDeleteConfirmButtonRef={externalDeleteConfirmButtonRef}
+        setExternalDeleteTarget={setExternalDeleteTarget}
+        confirmDeleteExternalAutomation={() =>
+          void externalActions.confirmDeleteExternalAutomation()
+        }
       />
-
-      {isLoading && !hasListItems ? (
+      {pageView === 'runs' ? (
+        <AutomationRunsDashboardSurface
+          rows={list.visibleRows}
+          entries={runsDashboard.entries}
+          failures={runsDashboard.failures}
+          loading={runsDashboard.loading}
+          hasMore={runsDashboard.hasMore}
+          onLoadMore={runsDashboard.loadMore}
+          now={relativeNow}
+          onRefresh={() => setRunHistoryReloadToken((token) => token + 1)}
+          setPageView={setPageView}
+          setRunPageOrigin={setRunPageOrigin}
+          selectAutomationRow={list.selectAutomationRow}
+          setPendingAutomationRunNavigation={setPendingAutomationRunNavigation}
+          setIsDetailOpen={setIsDetailOpen}
+        />
+      ) : pageView === 'run' && selectedAutomationRunPage ? (
+        <AutomationRunDetailsPage
+          automation={selected}
+          run={selectedAutomationRunPage}
+          relativeNow={relativeNow}
+          workspaceDisplay={runPage.selectedAutomationRunPageWorkspaceDisplay}
+          viewState={runPage.selectedAutomationRunPageViewState}
+          canRerun={runPage.canRerunSelectedAutomationRunPage}
+          isRerunPending={runPage.isSelectedAutomationRunPageRerunPending}
+          onRerun={() =>
+            runSelectedRowAction((row) =>
+              runActions.rerunAutomationRun(row, selectedAutomationRunPage)
+            )
+          }
+          onOpenWorkspace={() => openRunWorkspace(selectedAutomationRunPage)}
+          onBack={runPageOrigin === 'automation' ? showAutomationDetails : showRunsDashboard}
+        />
+      ) : pageView === 'run' ? (
+        <AutomationsPageSkeleton />
+      ) : isLoading && !hasListItems ? (
         <AutomationsPageSkeleton />
       ) : isDetailOpen && (selected || selectedExternal) ? (
         <AutomationsDetailPane
           selected={selected}
           selectedExternal={selectedExternal}
           selectedExternalRunPage={selectedExternalRunPage}
-          selectedAutomationRunPage={setup.selectedAutomationRunPage}
           selectedRuns={setup.selectedRuns}
           selectedRunsNotice={setup.selectedRunsNotice}
           selectedHostEntry={destination.rowRecoveryHost(selectedRow?.key ?? null)}
@@ -279,17 +294,10 @@ export function AutomationsPageSurface({
           }
           hostLabelById={presentation.hostLabelById}
           selectedRunNowAvailability={presentation.selectedRunNowAvailability}
-          selectedAutomationRunPageWorkspaceDisplay={
-            runPage.selectedAutomationRunPageWorkspaceDisplay
-          }
-          selectedAutomationRunPageViewState={runPage.selectedAutomationRunPageViewState}
-          canRerunSelectedAutomationRunPage={runPage.canRerunSelectedAutomationRunPage}
-          isSelectedAutomationRunPageRerunPending={runPage.isSelectedAutomationRunPageRerunPending}
           worktreeMap={selectedRunWorktreeMap}
           fetchExternalAutomationRuns={externalActions.fetchExternalAutomationRuns}
           onActivePaneTabChange={setActivePaneTab}
           onClearExternalRunPage={() => setSelectedExternalRunPage(null)}
-          onClearAutomationRunPage={() => setSelectedAutomationRunPageId(null)}
           requestExternalAction={externalActions.requestExternalAction}
           openExternalRunPage={externalActions.openExternalRunPage}
           openEditExternalDialog={editorActions.openEditExternalDialog}
@@ -299,11 +307,7 @@ export function AutomationsPageSurface({
           requestDeleteAutomation={() =>
             runSelectedRowAction(managementActions.requestDeleteAutomation)
           }
-          rerunAutomationRun={(_automation, run) =>
-            runSelectedRowAction((row) => runActions.rerunAutomationRun(row, run))
-          }
-          openRunWorkspace={openRunWorkspace}
-          openAutomationRunPage={externalActions.openAutomationRunPage}
+          openAutomationRunPage={openAutomationRunPage}
           onBackToList={() => {
             setIsDetailOpen(false)
             setSelectedAutomationRunPageId(null)
@@ -312,64 +316,9 @@ export function AutomationsPageSurface({
           }}
         />
       ) : (
-        <AutomationsListPanel
-          hasListItems={hasListItems}
-          hasFilteredListItems={hasFilteredListItems}
-          listSearchQuery={listSearchQuery}
-          isListSearchQueryTooLarge={isListSearchQueryTooLarge}
-          onListSearchQueryChange={setListSearchQuery}
-          listFilter={listFilter}
-          onListFilterChange={onListFilterChange}
-          searchCounts={{
-            ...searchCounts,
-            hostRowCount: list.visibleRows.length + list.externalAutomationEntries.length
-          }}
-          hostCatalog={hostCatalog}
-          externalManagersUncheckedNotice={list.externalManagersUncheckedNotice}
-          onSelectHost={hostCatalog.selectHost}
-          onRecoverHost={(action, entry) => {
-            hostCatalog.recover(action, entry)
-            if (action === 'retry') {
-              void pageRefresh.refresh()
-            }
-          }}
-          filteredRows={filteredRows}
-          filteredExternalAutomationEntries={filteredExternalAutomationEntries}
-          selectedRowKey={selectedRow?.key ?? null}
-          selectedExternalKey={local.selectedExternalKey}
-          selectedExternal={selectedExternal}
-          relativeNow={relativeNow}
-          repoMap={repoMap}
-          worktreeMap={worktreeMap}
-          repoForRow={repoForRow}
-          worktreeForRow={worktreeForRow}
-          projectHostSetups={projectHostSetups}
-          sshConnectionStates={sshConnectionStates}
-          runtimeStatusByEnvironmentId={runtimeStatusByEnvironmentId}
-          hostTargetFor={destination.automationHostTargetFor}
-          automationSourceHostAvailabilityByRowKey={
-            sourceAvailability.automationSourceHostAvailabilityByRowKey
-          }
-          hostLabelById={presentation.hostLabelById}
-          isActionEnabled={destination.isAutomationRowActionEnabled}
-          externalActionKey={externalActionKey}
-          selectAutomationRow={list.selectAutomationRow}
-          selectExternalKey={local.selectExternalKey}
-          setActivePaneTab={setActivePaneTab}
-          runNow={(row) => void runActions.runNow(row)}
-          openEditDialog={(row) => void editorActions.openEditDialog(row)}
-          toggleAutomation={(row) => void managementActions.toggleAutomation(row)}
-          requestDeleteAutomation={managementActions.requestDeleteAutomation}
-          requestExternalAction={externalActions.requestExternalAction}
-          openEditExternalDialog={editorActions.openEditExternalDialog}
-          openCreateDialog={editorActions.openCreateDialog}
-          canCreateAutomation={destination.canCreateAutomation}
+        <AutomationsPageListPanel
+          controller={controller}
           onOpenDetail={() => setIsDetailOpen(true)}
-          onRefresh={() => {
-            hostCatalog.refreshHosts()
-            void pageRefresh.refresh()
-          }}
-          isRefreshing={isLoading}
         />
       )}
     </main>
diff --git a/src/renderer/src/components/automations/AutomationsPageTopBar.tsx b/src/renderer/src/components/automations/AutomationsPageTopBar.tsx
new file mode 100644
index 00000000000..ec48aced278
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationsPageTopBar.tsx
@@ -0,0 +1,65 @@
+import React from 'react'
+import { translate } from '@/i18n/i18n'
+import { AutomationOwnerConflictNotice } from './AutomationOwnerConflictNotice'
+import { AutomationsPageBreadcrumb } from './AutomationsPageBreadcrumb'
+import type { AutomationHostRecoveryAction } from './automation-host-status-descriptors'
+import type { AutomationActionNotice } from './automation-row-action-dispatch'
+
+export function AutomationsPageTopBar({
+  pageView,
+  isDetailOpen,
+  selectedAutomationName,
+  runPageOrigin,
+  ownerNotice,
+  recoverOwnerAction,
+  dismissOwnerAction,
+  showAutomationsList,
+  showRunsDashboard,
+  showAutomationDetails
+}: {
+  pageView: 'automations' | 'runs' | 'run'
+  isDetailOpen: boolean
+  selectedAutomationName?: string
+  runPageOrigin: 'automation' | 'runs'
+  ownerNotice: AutomationActionNotice | null
+  recoverOwnerAction: (action: AutomationHostRecoveryAction) => void
+  dismissOwnerAction: () => void
+  showAutomationsList: () => void
+  showRunsDashboard: () => void
+  showAutomationDetails: () => void
+}): React.JSX.Element {
+  return (
+    <>
+      <header
+        className="flex shrink-0 items-center px-3 pb-3 md:px-5"
+        style={{ paddingRight: 'max(0.75rem, var(--window-controls-width, 0px))' }}
+      >
+        {pageView === 'runs' || pageView === 'run' ? (
+          <AutomationsPageBreadcrumb
+            current={pageView}
+            onBackToAutomations={showAutomationsList}
+            onBackToRuns={showRunsDashboard}
+            automationName={runPageOrigin === 'automation' ? selectedAutomationName : undefined}
+            onBackToAutomation={showAutomationDetails}
+          />
+        ) : isDetailOpen && selectedAutomationName ? (
+          <AutomationsPageBreadcrumb
+            current="automation"
+            automationName={selectedAutomationName}
+            onBackToAutomations={showAutomationsList}
+          />
+        ) : (
+          <h1 className="truncate text-base font-semibold leading-8">
+            {translate('auto.components.automations.AutomationsPage.77c2778945', 'Automations')}
+          </h1>
+        )}
+      </header>
+      <AutomationOwnerConflictNotice
+        notice={ownerNotice}
+        className="mx-4 mb-2"
+        onRecover={recoverOwnerAction}
+        onDismiss={dismissOwnerAction}
+      />
+    </>
+  )
+}
diff --git a/src/renderer/src/components/automations/automation-host-client.ts b/src/renderer/src/components/automations/automation-host-client.ts
index e7ef5a44770..b34efbb180e 100644
--- a/src/renderer/src/components/automations/automation-host-client.ts
+++ b/src/renderer/src/components/automations/automation-host-client.ts
@@ -3,6 +3,7 @@ import type {
   Automation,
   AutomationCreateInput,
   AutomationRun,
+  AutomationRunsPage,
   AutomationUpdateInput
 } from '../../../../shared/automations-types'
 import type { AutomationAuthorityRef } from '../../../../shared/automation-owner-ref'
@@ -131,6 +132,20 @@ export async function listAutomationRunsForTarget(
   return result.runs
 }
 
+export async function listAutomationRunsPageForTarget(
+  target: AutomationHostTarget,
+  automationId: string,
+  options: { limit?: number; cursor?: string } = {}
+): Promise<AutomationRunsPage> {
+  const result = await callRuntimeRpc<AutomationRunsPage | { runs: AutomationRun[] }>(
+    target,
+    'automation.runs',
+    { automationId, ...options },
+    { timeoutMs: 15_000 }
+  )
+  return { runs: result.runs, nextCursor: 'nextCursor' in result ? result.nextCursor : null }
+}
+
 export async function updateAutomationForTarget(
   automation: Automation,
   updates: AutomationUpdateInput,
diff --git a/src/renderer/src/components/automations/automation-owner-action-runner.ts b/src/renderer/src/components/automations/automation-owner-action-runner.ts
index b25baa16d08..ae4920252df 100644
--- a/src/renderer/src/components/automations/automation-owner-action-runner.ts
+++ b/src/renderer/src/components/automations/automation-owner-action-runner.ts
@@ -16,6 +16,7 @@ import type {
   Automation,
   AutomationCreateInput,
   AutomationRun,
+  AutomationRunsPage,
   AutomationUpdateInput
 } from '../../../../shared/automations-types'
 import {
@@ -40,8 +41,10 @@ import {
   deleteAutomationForOwner,
   deleteOrphanAutomation,
   listAutomationRunsForOwner,
+  listAutomationRunsPageForOwner,
   listAutomationsForOwner,
   listOrphanAutomationRuns,
+  listOrphanAutomationRunsPage,
   matchAutomationOwnerConflict,
   runAutomationNowForOwner,
   updateAutomationForOwner,
@@ -213,6 +216,19 @@ export async function listOwnedAutomationRuns(
   )
 }
 
+export async function listOwnedAutomationRunsPage(
+  availability: AutomationActionAvailability,
+  authority: AutomationAuthorityRef,
+  automationId: string,
+  options: { limit?: number; cursor?: string }
+): Promise<AutomationActionResult<AutomationRunsPage>> {
+  return await attempt(
+    availability,
+    (owner) => listAutomationRunsPageForOwner(owner, automationId, options),
+    () => listOrphanAutomationRunsPage(authority, automationId, options)
+  )
+}
+
 /** Create is destination-keyed rather than owner-keyed: the row does not exist yet. */
 export async function createAutomationAtDestination(
   authority: AutomationAuthorityRef,
diff --git a/src/renderer/src/components/automations/automation-page-state.ts b/src/renderer/src/components/automations/automation-page-state.ts
index b4eb2a31cc0..c273c778038 100644
--- a/src/renderer/src/components/automations/automation-page-state.ts
+++ b/src/renderer/src/components/automations/automation-page-state.ts
@@ -7,6 +7,11 @@ import type {
 /** Detail-pane tab shared by the page, its list panel, and the detail pane. */
 export type AutomationPaneTab = 'overview' | 'runs'
 
+/** Top-level surface within Automations. */
+export type AutomationsPageView = 'automations' | 'runs' | 'run'
+
+export type AutomationRunPageOrigin = 'runs' | 'automation'
+
 /** External run opened as a full page inside the detail pane. */
 export type SelectedExternalRunPage = {
   manager: ExternalAutomationManager
diff --git a/src/renderer/src/components/automations/automation-row-action-dispatch.ts b/src/renderer/src/components/automations/automation-row-action-dispatch.ts
index 564f6cd5d74..e75e0ce70f7 100644
--- a/src/renderer/src/components/automations/automation-row-action-dispatch.ts
+++ b/src/renderer/src/components/automations/automation-row-action-dispatch.ts
@@ -12,6 +12,7 @@
 import type {
   Automation,
   AutomationRun,
+  AutomationRunsPage,
   AutomationUpdateInput
 } from '../../../../shared/automations-types'
 import type { AutomationAuthorityRef } from '../../../../shared/automation-owner-ref'
@@ -25,6 +26,7 @@ import {
 import {
   deleteOwnedAutomation,
   listOwnedAutomationRuns,
+  listOwnedAutomationRunsPage,
   runOwnedAutomationNow,
   showOwnedAutomation,
   updateOwnedAutomation,
@@ -187,13 +189,31 @@ export async function dispatchAutomationReread(
 export async function dispatchAutomationRunHistory(
   context: AutomationDispatchContext,
   row: AutomationDispatchRow,
-  legacy: () => Promise<AutomationRun[]>
+  legacy: () => Promise<AutomationRun[]>,
+  authority: AutomationAuthorityRef = context.authority
 ): Promise<AutomationDispatchResult<AutomationRun[]>> {
   return await dispatch(
     context,
     row,
     'history',
-    (availability) => listOwnedAutomationRuns(availability, context.authority, row.automationId),
+    (availability) => listOwnedAutomationRuns(availability, authority, row.automationId),
+    legacy
+  )
+}
+
+export async function dispatchAutomationRunHistoryPage(
+  context: AutomationDispatchContext,
+  row: AutomationDispatchRow,
+  options: { limit?: number; cursor?: string },
+  legacy: () => Promise<AutomationRunsPage>,
+  authority: AutomationAuthorityRef = context.authority
+): Promise<AutomationDispatchResult<AutomationRunsPage>> {
+  return await dispatch(
+    context,
+    row,
+    'history',
+    (availability) =>
+      listOwnedAutomationRunsPage(availability, authority, row.automationId, options),
     legacy
   )
 }
diff --git a/src/renderer/src/components/automations/automation-runs-dashboard-model.test.ts b/src/renderer/src/components/automations/automation-runs-dashboard-model.test.ts
new file mode 100644
index 00000000000..43175dc3415
--- /dev/null
+++ b/src/renderer/src/components/automations/automation-runs-dashboard-model.test.ts
@@ -0,0 +1,105 @@
+import { describe, expect, it } from 'vitest'
+import type { Automation, AutomationRun } from '../../../../shared/automations-types'
+import type { AutomationListRow } from './automation-list-row-identity'
+import {
+  buildAutomationRunsDashboardEntries,
+  countAutomationRunOutcomes,
+  filterAutomationRunsDashboardEntries,
+  getAutomationRunsHostKey,
+  getAutomationRunsScope
+} from './automation-runs-dashboard-model'
+
+function row(
+  key: string,
+  hostLabel: string,
+  catalogRef: NonNullable<AutomationListRow['catalogRef']>
+): AutomationListRow {
+  return {
+    key,
+    hostLabel,
+    catalogRef,
+    usageSummary: null,
+    automation: {
+      id: key,
+      name: `Automation ${key}`,
+      executionTargetType: catalogRef.selector.kind === 'ssh' ? 'ssh' : 'local'
+    } as Automation
+  }
+}
+
+function run(
+  id: string,
+  automationId: string,
+  scheduledFor: number,
+  status: AutomationRun['status']
+) {
+  return { id, automationId, scheduledFor, status, title: `Run ${id}` } as AutomationRun
+}
+
+describe('automation runs dashboard model', () => {
+  const local = row('local-row', 'Local Mac', {
+    authority: { kind: 'desktop' },
+    selector: { kind: 'self' }
+  })
+  const ssh = row('ssh-row', 'Build host', {
+    authority: { kind: 'desktop' },
+    selector: { kind: 'ssh', targetId: 'build' }
+  })
+  const runtime = row('runtime-row', 'Cloud runtime', {
+    authority: { kind: 'runtime', environmentId: 'cloud' },
+    selector: { kind: 'self' }
+  })
+
+  it('keeps local, SSH, and runtime hosts in one chronologically sorted list', () => {
+    const entries = buildAutomationRunsDashboardEntries(
+      [local, ssh, runtime],
+      new Map([
+        [local.key, [run('local', local.automation.id, 10, 'completed')]],
+        [ssh.key, [run('ssh', ssh.automation.id, 30, 'dispatch_failed')]],
+        [runtime.key, [run('runtime', runtime.automation.id, 20, 'completed')]]
+      ])
+    )
+
+    expect(entries.map((entry) => entry.run.id)).toEqual(['ssh', 'runtime', 'local'])
+    expect(getAutomationRunsScope(local)).toBe('local')
+    expect(getAutomationRunsScope(ssh)).toBe('remote')
+    expect(getAutomationRunsScope(runtime)).toBe('remote')
+  })
+
+  it('filters by host without splitting the dashboard into local and remote views', () => {
+    const entries = buildAutomationRunsDashboardEntries(
+      [local, ssh],
+      new Map([
+        [local.key, [run('local', local.automation.id, 10, 'completed')]],
+        [ssh.key, [run('ssh', ssh.automation.id, 20, 'dispatch_failed')]]
+      ])
+    )
+
+    expect(
+      filterAutomationRunsDashboardEntries({
+        entries,
+        status: 'all',
+        query: '',
+        hostKeys: [getAutomationRunsHostKey(ssh)]
+      }).map((entry) => entry.run.id)
+    ).toEqual(['ssh'])
+    expect(countAutomationRunOutcomes(entries, 30).successful7d).toBe(1)
+  })
+
+  it('keeps future-dated runs out of the outcome windows', () => {
+    const entries = buildAutomationRunsDashboardEntries(
+      [local, ssh],
+      new Map([
+        [local.key, [run('ahead', local.automation.id, 40, 'completed')]],
+        [ssh.key, [run('ahead-failed', ssh.automation.id, 40, 'dispatch_failed')]]
+      ])
+    )
+
+    expect(countAutomationRunOutcomes(entries, 30)).toEqual({
+      successful24h: 0,
+      failed24h: 0,
+      successful7d: 0,
+      failed7d: 0
+    })
+  })
+})
diff --git a/src/renderer/src/components/automations/automation-runs-dashboard-model.ts b/src/renderer/src/components/automations/automation-runs-dashboard-model.ts
new file mode 100644
index 00000000000..fb177a55312
--- /dev/null
+++ b/src/renderer/src/components/automations/automation-runs-dashboard-model.ts
@@ -0,0 +1,138 @@
+import type { AutomationRun, AutomationRunStatus } from '../../../../shared/automations-types'
+import { parseExecutionHostId } from '../../../../shared/execution-host'
+import type { AutomationActionNotice } from './automation-row-action-dispatch'
+import type { AutomationListRow } from './automation-list-row-identity'
+
+export type AutomationRunsScope = 'local' | 'remote'
+export type AutomationRunsStatusFilter = 'all' | 'successful' | 'failed' | 'active' | 'skipped'
+
+export type AutomationRunsDashboardEntry = {
+  key: string
+  hostKey: string
+  searchText: string
+  row: AutomationListRow
+  run: AutomationRun
+  scope: AutomationRunsScope
+}
+
+export type AutomationRunsDashboardFailure = {
+  row: AutomationListRow
+  scope: AutomationRunsScope
+  notice: AutomationActionNotice
+}
+
+export function getAutomationRunsHostKey(row: AutomationListRow): string {
+  const authority = row.catalogRef?.authority
+  const selector = row.catalogRef?.selector
+  const authorityKey =
+    authority?.kind === 'runtime' ? `runtime:${authority.environmentId}` : 'desktop'
+  const selectorKey =
+    selector?.kind === 'ssh'
+      ? `ssh:${selector.targetId}`
+      : selector?.kind === 'orphan'
+        ? 'orphan'
+        : 'self'
+  return `${authorityKey}:${selectorKey}`
+}
+
+export function getAutomationRunsScope(row: AutomationListRow): AutomationRunsScope {
+  const authority = row.catalogRef?.authority
+  const selector = row.catalogRef?.selector
+  if (authority?.kind === 'runtime' || selector?.kind === 'ssh') {
+    return 'remote'
+  }
+  if (selector?.kind === 'self') {
+    return 'local'
+  }
+  const runHost = parseExecutionHostId(row.automation.runContext?.hostId)
+  return row.automation.executionTargetType === 'ssh' || runHost?.kind === 'runtime'
+    ? 'remote'
+    : 'local'
+}
+
+export function buildAutomationRunsDashboardEntries(
+  rows: readonly AutomationListRow[],
+  runsByRowKey: ReadonlyMap<string, readonly AutomationRun[]>
+): AutomationRunsDashboardEntry[] {
+  return rows
+    .flatMap((row) =>
+      (runsByRowKey.get(row.key) ?? []).map((run) => ({
+        key: `${row.key}:${run.id}`,
+        hostKey: getAutomationRunsHostKey(row),
+        searchText: [row.automation.name, run.title, row.hostLabel].join('\n').toLocaleLowerCase(),
+        row,
+        run,
+        scope: getAutomationRunsScope(row)
+      }))
+    )
+    .sort((left, right) => right.run.scheduledFor - left.run.scheduledFor)
+}
+
+function matchesStatus(status: AutomationRunStatus, filter: AutomationRunsStatusFilter): boolean {
+  if (filter === 'all') {
+    return true
+  }
+  if (filter === 'successful') {
+    return status === 'completed'
+  }
+  if (filter === 'failed') {
+    return status === 'dispatch_failed'
+  }
+  if (filter === 'skipped') {
+    return status.startsWith('skipped')
+  }
+  return status === 'pending' || status === 'dispatching' || status === 'dispatched'
+}
+
+export function filterAutomationRunsDashboardEntries({
+  entries,
+  status,
+  query,
+  hostKeys
+}: {
+  entries: readonly AutomationRunsDashboardEntry[]
+  status: AutomationRunsStatusFilter
+  query: string
+  hostKeys: readonly string[]
+}): AutomationRunsDashboardEntry[] {
+  const normalizedQuery = query.trim().toLocaleLowerCase()
+  const selectedHosts = new Set(hostKeys)
+  return entries.filter((entry) => {
+    if (
+      !matchesStatus(entry.run.status, status) ||
+      (selectedHosts.size > 0 && !selectedHosts.has(entry.hostKey))
+    ) {
+      return false
+    }
+    if (!normalizedQuery) {
+      return true
+    }
+    return entry.searchText.includes(normalizedQuery)
+  })
+}
+
+export function countAutomationRunOutcomes(
+  entries: readonly AutomationRunsDashboardEntry[],
+  now: number
+): { successful24h: number; failed24h: number; successful7d: number; failed7d: number } {
+  const dayAgo = now - 24 * 60 * 60 * 1000
+  const weekAgo = now - 7 * 24 * 60 * 60 * 1000
+  const counts = { successful24h: 0, failed24h: 0, successful7d: 0, failed7d: 0 }
+  for (const entry of entries) {
+    // A clock-skewed or future-dated run has not happened inside either window yet.
+    if (entry.run.scheduledFor > now) {
+      continue
+    }
+    const successful = entry.run.status === 'completed'
+    const failed = entry.run.status === 'dispatch_failed'
+    if (entry.run.scheduledFor >= weekAgo) {
+      counts.successful7d += successful ? 1 : 0
+      counts.failed7d += failed ? 1 : 0
+    }
+    if (entry.run.scheduledFor >= dayAgo) {
+      counts.successful24h += successful ? 1 : 0
+      counts.failed24h += failed ? 1 : 0
+    }
+  }
+  return counts
+}
diff --git a/src/renderer/src/components/automations/automation-scoped-list-client.ts b/src/renderer/src/components/automations/automation-scoped-list-client.ts
index 825329a1812..7c4cf6fddad 100644
--- a/src/renderer/src/components/automations/automation-scoped-list-client.ts
+++ b/src/renderer/src/components/automations/automation-scoped-list-client.ts
@@ -14,6 +14,7 @@ import type {
   Automation,
   AutomationCreateInput,
   AutomationRun,
+  AutomationRunsPage,
   AutomationUpdateInput
 } from '../../../../shared/automations-types'
 import type {
@@ -173,11 +174,13 @@ export async function listAutomationsForOwner(
 async function listRunsFenced(
   authority: AutomationAuthorityRef,
   automationId: string,
-  expectedOwner: AutomationOwnerPrecondition
+  expectedOwner: AutomationOwnerPrecondition,
+  options: { limit?: number; cursor?: string } = {}
 ): Promise<AutomationRun[]> {
   const result = await callAuthority<{ runs: AutomationRun[] }>(authority, 'automation.runs', {
     automationId,
-    expectedOwner
+    expectedOwner,
+    ...options
   })
   return result.runs
 }
@@ -189,6 +192,19 @@ export async function listAutomationRunsForOwner(
   return await listRunsFenced(owner.authority, automationId, ownerPrecondition(owner))
 }
 
+export async function listAutomationRunsPageForOwner(
+  owner: AutomationOwnerRef,
+  automationId: string,
+  options: { limit?: number; cursor?: string } = {}
+): Promise<AutomationRunsPage> {
+  const result = await callAuthority<AutomationRunsPage | { runs: AutomationRun[] }>(
+    owner.authority,
+    'automation.runs',
+    { automationId, expectedOwner: ownerPrecondition(owner), ...options }
+  )
+  return { runs: result.runs, nextCursor: 'nextCursor' in result ? result.nextCursor : null }
+}
+
 /**
  * The one fenced-mutation path every authority shares. Owned and orphan rows
  * differ in the precondition they fence with and in nothing else, so they
@@ -269,6 +285,19 @@ export async function listOrphanAutomationRuns(
   return await listRunsFenced(authority, automationId, ORPHAN_OWNER_PRECONDITION)
 }
 
+export async function listOrphanAutomationRunsPage(
+  authority: AutomationAuthorityRef,
+  automationId: string,
+  options: { limit?: number; cursor?: string } = {}
+): Promise<AutomationRunsPage> {
+  const result = await callAuthority<AutomationRunsPage | { runs: AutomationRun[] }>(
+    authority,
+    'automation.runs',
+    { automationId, expectedOwner: ORPHAN_OWNER_PRECONDITION, ...options }
+  )
+  return { runs: result.runs, nextCursor: 'nextCursor' in result ? result.nextCursor : null }
+}
+
 export async function runAutomationNowForOwner(
   owner: AutomationOwnerRef,
   id: string
diff --git a/src/renderer/src/components/automations/use-automation-run-page-state.ts b/src/renderer/src/components/automations/use-automation-run-page-state.ts
index e99ec438cbf..ef970dff5a7 100644
--- a/src/renderer/src/components/automations/use-automation-run-page-state.ts
+++ b/src/renderer/src/components/automations/use-automation-run-page-state.ts
@@ -48,6 +48,8 @@ export function useAutomationRunPageState({
     selectedExternalKey,
     selectExternalKey,
     setSelectedExternalRunPage,
+    pageView,
+    setPageView,
     isDetailOpen,
     setIsDetailOpen
   } = local
@@ -105,6 +107,9 @@ export function useAutomationRunPageState({
       setSelectedId(pending.automationId)
       setSelectedAutomationRunPageId(null)
       setPendingAutomationRunNavigation(null)
+      if (pageView === 'run') {
+        setPageView('runs')
+      }
       toast.message(
         translate(
           'auto.components.automations.AutomationsPage.pendingAutomationMissing',
@@ -123,6 +128,7 @@ export function useAutomationRunPageState({
       setActivePaneTab('overview')
       setSelectedAutomationRunPageId(null)
       setPendingAutomationRunNavigation(null)
+      setPageView('automations')
       return
     }
     if (
@@ -133,6 +139,9 @@ export function useAutomationRunPageState({
       setActivePaneTab('runs')
       setSelectedAutomationRunPageId(null)
       setPendingAutomationRunNavigation(null)
+      if (pageView === 'run') {
+        setPageView('runs')
+      }
       return
     }
     if (selectedAutomationRuns.automationId !== pending.automationId) {
@@ -144,10 +153,14 @@ export function useAutomationRunPageState({
     if (pendingRun) {
       setSelectedAutomationRunPageId(pending.runId)
       setPendingAutomationRunNavigation(null)
+      setPageView('run')
       return
     }
     setSelectedAutomationRunPageId(null)
     setPendingAutomationRunNavigation(null)
+    if (pageView === 'run') {
+      setPageView('runs')
+    }
     toast.message(
       translate(
         'auto.components.automations.AutomationsPage.pendingAutomationRunMissing',
@@ -159,6 +172,7 @@ export function useAutomationRunPageState({
     automationHostTargetKey,
     isLoading,
     pendingAutomationRunNavigation,
+    pageView,
     selectExternalKey,
     selectedAutomationRuns.automationId,
     selectedAutomationRuns.notice,
@@ -168,6 +182,7 @@ export function useAutomationRunPageState({
     setActivePaneTab,
     setIsDetailOpen,
     setPendingAutomationRunNavigation,
+    setPageView,
     setSelectedAutomationRunPageId,
     setSelectedId
   ])
diff --git a/src/renderer/src/components/automations/use-automation-runs-dashboard.test.tsx b/src/renderer/src/components/automations/use-automation-runs-dashboard.test.tsx
new file mode 100644
index 00000000000..519904a1e90
--- /dev/null
+++ b/src/renderer/src/components/automations/use-automation-runs-dashboard.test.tsx
@@ -0,0 +1,144 @@
+// @vitest-environment happy-dom
+
+import { act, useCallback } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { AutomationAuthorityRef } from '../../../../shared/automation-owner-ref'
+import type { AutomationRunsPage } from '../../../../shared/automations-types'
+import type { AutomationHostTarget } from './automation-host-client'
+import { makeAutomationListRow, makeRun } from './automations-page-fixtures'
+import * as dispatch from './automation-row-action-dispatch'
+import { useAutomationRunsDashboard } from './use-automation-runs-dashboard'
+
+vi.mock('./automation-row-action-dispatch', async (importOriginal) => ({
+  ...(await importOriginal<typeof dispatch>()),
+  dispatchAutomationRunHistoryPage: vi.fn()
+}))
+
+const historySpy = vi.mocked(dispatch.dispatchAutomationRunHistoryPage)
+
+const PAGES: Record<string, AutomationRunsPage> = {
+  head: { runs: [makeRun({ id: 'run-2', createdAt: 2 })], nextCursor: '2:run-2' },
+  '2:run-2': { runs: [makeRun({ id: 'run-1', createdAt: 1 })], nextCursor: null }
+}
+
+const row = makeAutomationListRow()
+const rows = [row]
+const context = { capturedOwners: new Map(), authority: { kind: 'desktop' as const } }
+
+type DashboardResult = ReturnType<typeof useAutomationRunsDashboard>
+
+let container: HTMLDivElement
+let root: Root
+let latest: DashboardResult | null = null
+
+type HarnessProps = {
+  enabled: boolean
+  authority?: AutomationAuthorityRef
+  target?: AutomationHostTarget | null
+}
+
+function Harness({ enabled, authority, target }: HarnessProps): null {
+  latest = useAutomationRunsDashboard({
+    enabled,
+    rows,
+    context,
+    legacyTarget: useCallback(() => target ?? null, [target]),
+    authorityForRow: useCallback(() => authority ?? { kind: 'desktop' }, [authority]),
+    reloadToken: 0
+  })
+  return null
+}
+
+async function render(enabled: boolean, props: Omit<HarnessProps, 'enabled'> = {}): Promise<void> {
+  await act(async () => {
+    root.render(<Harness enabled={enabled} {...props} />)
+  })
+}
+
+beforeEach(() => {
+  historySpy.mockImplementation(async (_context, _row, options) => ({
+    ok: true,
+    value: PAGES[options.cursor ?? 'head']
+  }))
+  container = document.createElement('div')
+  document.body.append(container)
+  root = createRoot(container)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  container.remove()
+  latest = null
+  historySpy.mockReset()
+})
+
+describe('useAutomationRunsDashboard', () => {
+  it('appends the next page when load more fires', async () => {
+    await render(true)
+    expect(latest?.entries.map((entry) => entry.run.id)).toEqual(['run-2'])
+
+    await act(async () => latest?.loadMore())
+
+    expect(latest?.entries.map((entry) => entry.run.id)).toEqual(['run-2', 'run-1'])
+    expect(historySpy.mock.calls.at(-1)?.[2].cursor).toBe('2:run-2')
+  })
+
+  it('keeps the cursor when a load more fails so the page stays retryable', async () => {
+    await render(true)
+    historySpy.mockImplementationOnce(async () => ({
+      ok: false,
+      notice: { message: 'offline', recovery: null, severity: 'failure' }
+    }))
+
+    await act(async () => latest?.loadMore())
+    expect(latest?.entries.map((entry) => entry.run.id)).toEqual(['run-2'])
+    expect(latest?.hasMore).toBe(true)
+
+    await act(async () => latest?.loadMore())
+
+    expect(historySpy.mock.calls.at(-1)?.[2].cursor).toBe('2:run-2')
+    expect(latest?.entries.map((entry) => entry.run.id)).toEqual(['run-2', 'run-1'])
+  })
+
+  it('refetches the head when the view is re-entered after a load more', async () => {
+    await render(true)
+    await act(async () => latest?.loadMore())
+    await render(false)
+    historySpy.mockClear()
+
+    await render(true)
+
+    expect(historySpy.mock.calls.at(-1)?.[2].cursor).toBeUndefined()
+    expect(latest?.entries.map((entry) => entry.run.id)).toEqual(['run-2'])
+  })
+
+  it('reloads from the head when the authority is re-paired', async () => {
+    const paired = (pairingRevision: number): AutomationAuthorityRef => ({
+      kind: 'runtime',
+      environmentId: 'env-1',
+      pairingRevision
+    })
+    await render(true, { authority: paired(1) })
+    await act(async () => latest?.loadMore())
+    expect(latest?.entries).toHaveLength(2)
+    historySpy.mockClear()
+
+    await render(true, { authority: paired(2) })
+
+    expect(historySpy.mock.calls.at(-1)?.[2].cursor).toBeUndefined()
+    expect(latest?.entries.map((entry) => entry.run.id)).toEqual(['run-2'])
+  })
+
+  it('reloads from the head when an uncaptured row moves to another fallback target', async () => {
+    await render(true, { target: { kind: 'local' } })
+    await act(async () => latest?.loadMore())
+    expect(latest?.entries).toHaveLength(2)
+    historySpy.mockClear()
+
+    await render(true, { target: { kind: 'environment', environmentId: 'env-1' } })
+
+    expect(historySpy.mock.calls.at(-1)?.[2].cursor).toBeUndefined()
+    expect(latest?.entries.map((entry) => entry.run.id)).toEqual(['run-2'])
+  })
+})
diff --git a/src/renderer/src/components/automations/use-automation-runs-dashboard.ts b/src/renderer/src/components/automations/use-automation-runs-dashboard.ts
new file mode 100644
index 00000000000..60588b61fbf
--- /dev/null
+++ b/src/renderer/src/components/automations/use-automation-runs-dashboard.ts
@@ -0,0 +1,188 @@
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react'
+import type { AutomationRun } from '../../../../shared/automations-types'
+import type { AutomationAuthorityRef } from '../../../../shared/automation-owner-ref'
+import { ownerKey } from '../../../../shared/automation-owner-key'
+import { capturedAutomationOwner, capturedAutomationOwnerKey } from './automation-captured-owner'
+import {
+  getAutomationHostTargetKey,
+  listAutomationRunsForTarget,
+  type AutomationHostTarget
+} from './automation-host-client'
+import type { AutomationListRow } from './automation-list-row-identity'
+import {
+  dispatchAutomationRunHistoryPage,
+  type AutomationDispatchContext
+} from './automation-row-action-dispatch'
+import {
+  buildAutomationRunsDashboardEntries,
+  getAutomationRunsScope,
+  type AutomationRunsDashboardFailure
+} from './automation-runs-dashboard-model'
+
+const FETCH_CONCURRENCY = 4
+// The persistence contract retains at most 100 final runs per automation;
+// fetching that bound keeps summary cards complete without an extra scan.
+const RUNS_PAGE_SIZE = 100
+
+type DashboardState = {
+  entries: ReturnType<typeof buildAutomationRunsDashboardEntries>
+  failures: AutomationRunsDashboardFailure[]
+  loading: boolean
+  nextCursors: ReadonlyMap<string, string>
+  hasMore: boolean
+  loadMore: () => void
+}
+
+const EMPTY_STATE: DashboardState = {
+  entries: [],
+  failures: [],
+  loading: false,
+  nextCursors: new Map(),
+  hasMore: false,
+  loadMore: () => undefined
+}
+
+export function useAutomationRunsDashboard({
+  enabled,
+  rows,
+  context,
+  legacyTarget,
+  authorityForRow,
+  reloadToken
+}: {
+  enabled: boolean
+  rows: readonly AutomationListRow[]
+  context: AutomationDispatchContext
+  legacyTarget: (row: AutomationListRow) => AutomationHostTarget | null
+  authorityForRow: (row: AutomationListRow) => AutomationAuthorityRef
+  reloadToken: number
+}): DashboardState {
+  const inputRef = useRef({ rows, context, legacyTarget, authorityForRow })
+  useEffect(() => {
+    inputRef.current = { rows, context, legacyTarget, authorityForRow }
+  }, [authorityForRow, context, legacyTarget, rows])
+  // Keys the effective request, not just the row: a re-pair bumps the authority's
+  // pairing revision and an uncaptured row's fallback target can move, and either
+  // makes the entries and cursors already on screen belong to a different host.
+  const queryKey = useMemo(
+    () =>
+      rows
+        .map((row) =>
+          [
+            row.key,
+            row.automation.updatedAt,
+            capturedAutomationOwnerKey(capturedAutomationOwner(context.capturedOwners, row.key)),
+            ownerKey({ authority: authorityForRow(row), selector: { kind: 'self' } }),
+            getAutomationHostTargetKey(legacyTarget(row) ?? { kind: 'local' })
+          ].join(':')
+        )
+        .join('|'),
+    [authorityForRow, context.capturedOwners, legacyTarget, rows]
+  )
+  const [state, setState] = useState<DashboardState>(EMPTY_STATE)
+  const stateRef = useRef(state)
+  useEffect(() => {
+    stateRef.current = state
+  }, [state])
+  const [loadMoreToken, setLoadMoreToken] = useState(0)
+  const loadMore = useCallback(() => setLoadMoreToken((token) => token + 1), [])
+  // Null while disabled: a fresh re-entry must never resume from the previous
+  // session's cursors, however many times load-more fired before it.
+  const generationRef = useRef<{
+    queryKey: string
+    reloadToken: number
+    loadMoreToken: number
+  } | null>(null)
+
+  useEffect(() => {
+    if (!enabled) {
+      generationRef.current = null
+      return
+    }
+    const input = inputRef.current
+    let cancelled = false
+    const previous = generationRef.current
+    const loadingMore =
+      previous !== null &&
+      previous.queryKey === queryKey &&
+      previous.reloadToken === reloadToken &&
+      previous.loadMoreToken !== loadMoreToken &&
+      stateRef.current.entries.length > 0
+    generationRef.current = { queryKey, reloadToken, loadMoreToken }
+    const runsByRowKey = new Map<string, AutomationRun[]>()
+    if (loadingMore) {
+      for (const entry of stateRef.current.entries) {
+        const current = runsByRowKey.get(entry.row.key) ?? []
+        current.push(entry.run)
+        runsByRowKey.set(entry.row.key, current)
+      }
+    }
+    const nextCursors = new Map<string, string>()
+    setState((current) =>
+      loadingMore ? { ...current, loading: true } : { ...EMPTY_STATE, loading: true, loadMore }
+    )
+    const failures: AutomationRunsDashboardFailure[] = loadingMore
+      ? [...stateRef.current.failures]
+      : []
+    let nextIndex = 0
+    const fetchNext = async (): Promise<void> => {
+      while (!cancelled && nextIndex < input.rows.length) {
+        const row = input.rows[nextIndex++]
+        const cursor = loadingMore ? stateRef.current.nextCursors.get(row.key) : undefined
+        if (loadingMore && !cursor) {
+          continue
+        }
+        const result = await dispatchAutomationRunHistoryPage(
+          input.context,
+          { rowKey: row.key, automationId: row.automation.id },
+          { limit: RUNS_PAGE_SIZE, ...(cursor ? { cursor } : {}) },
+          async () => ({
+            runs: await listAutomationRunsForTarget(
+              input.legacyTarget(row) ?? { kind: 'local' },
+              row.automation.id
+            ),
+            nextCursor: null
+          }),
+          input.authorityForRow(row)
+        )
+        if (result.ok) {
+          const current = runsByRowKey.get(row.key) ?? []
+          const seen = new Set(current.map((run) => run.id))
+          runsByRowKey.set(row.key, [
+            ...current,
+            ...result.value.runs.filter((run) => !seen.has(run.id))
+          ])
+          if (result.value.nextCursor) {
+            nextCursors.set(row.key, result.value.nextCursor)
+          }
+        } else {
+          // Only a successful terminal page retires a cursor; keeping it here
+          // leaves the row's remaining history reachable through `loadMore`.
+          if (cursor) {
+            nextCursors.set(row.key, cursor)
+          }
+          failures.push({ row, scope: getAutomationRunsScope(row), notice: result.notice })
+        }
+      }
+    }
+    void Promise.all(
+      Array.from({ length: Math.min(FETCH_CONCURRENCY, input.rows.length) }, fetchNext)
+    ).then(() => {
+      if (!cancelled) {
+        setState({
+          entries: buildAutomationRunsDashboardEntries(input.rows, runsByRowKey),
+          failures,
+          loading: false,
+          nextCursors,
+          hasMore: nextCursors.size > 0,
+          loadMore
+        })
+      }
+    })
+    return () => {
+      cancelled = true
+    }
+  }, [enabled, loadMore, loadMoreToken, queryKey, reloadToken])
+
+  return enabled ? { ...state, loadMore } : { ...EMPTY_STATE, loadMore }
+}
diff --git a/src/renderer/src/components/automations/use-automations-page-controller.ts b/src/renderer/src/components/automations/use-automations-page-controller.ts
index f47e2378bb4..70214a367b4 100644
--- a/src/renderer/src/components/automations/use-automations-page-controller.ts
+++ b/src/renderer/src/components/automations/use-automations-page-controller.ts
@@ -16,12 +16,21 @@ import { useAutomationsPageRefresh } from './use-automations-page-refresh'
 import { useAutomationsPageSetupState } from './use-automations-page-setup-state'
 import { useAutomationsPageStoreState } from './use-automations-page-store-state'
 import { useExternalAutomationActions } from './use-external-automation-actions'
+import { useAutomationRunsDashboard } from './use-automation-runs-dashboard'
 
 export function useAutomationsPageController() {
   const store = useAutomationsPageStoreState()
   const local = useAutomationsPageLocalState(store)
   const list = useAutomationsPageListState({ store, local })
   const destination = useAutomationsPageDestinationState({ store, local, list })
+  const runsDashboard = useAutomationRunsDashboard({
+    enabled: local.pageView === 'runs',
+    rows: list.visibleRows,
+    context: destination.automationDispatchContext,
+    legacyTarget: destination.automationHostTargetFor,
+    authorityForRow: destination.automationAuthorityForRow,
+    reloadToken: local.runHistoryReloadToken
+  })
   const destinationForm = useAutomationsPageDestinationForm({
     store,
     local,
@@ -90,6 +99,7 @@ export function useAutomationsPageController() {
     local,
     list,
     destination,
+    runsDashboard,
     destinationForm,
     setup,
     runPage,
diff --git a/src/renderer/src/components/automations/use-automations-page-destination-state.ts b/src/renderer/src/components/automations/use-automations-page-destination-state.ts
index f69374308f2..947d28182ef 100644
--- a/src/renderer/src/components/automations/use-automations-page-destination-state.ts
+++ b/src/renderer/src/components/automations/use-automations-page-destination-state.ts
@@ -123,6 +123,23 @@ export function useAutomationsPageDestinationState({
     (row: { key: string }): AutomationHostTarget | null => automationHostTargetForRowKey(row.key),
     [automationHostTargetForRowKey]
   )
+  const automationAuthorityForRow = useCallback(
+    (row: { catalogRef?: StableAutomationCatalogRef | null }): AutomationAuthorityRef => {
+      const authority = row.catalogRef?.authority
+      if (authority?.kind === 'runtime') {
+        return {
+          kind: 'runtime',
+          environmentId: authority.environmentId,
+          pairingRevision: automationRuntimePairingRevision(
+            runtimeEnvironments,
+            authority.environmentId
+          )
+        }
+      }
+      return { kind: 'desktop' }
+    },
+    [runtimeEnvironments]
+  )
   const automationDispatchContext = useMemo<AutomationDispatchContext>(
     () => ({ capturedOwners: capturedAutomationOwners, authority: automationAuthority }),
     [automationAuthority, capturedAutomationOwners]
@@ -198,6 +215,7 @@ export function useAutomationsPageDestinationState({
     createDestinationHostId,
     automationHostTargetForRowKey,
     automationHostTargetFor,
+    automationAuthorityForRow,
     automationDispatchContext,
     rowRecoveryHost,
     reportOwnerAction,
diff --git a/src/renderer/src/components/automations/use-automations-page-escape.ts b/src/renderer/src/components/automations/use-automations-page-escape.ts
index 03f1f239f73..be40b8b3fe0 100644
--- a/src/renderer/src/components/automations/use-automations-page-escape.ts
+++ b/src/renderer/src/components/automations/use-automations-page-escape.ts
@@ -18,6 +18,9 @@ export function useAutomationsPageEscape({
     isDetailOpen,
     selectedAutomationRunPageId,
     selectedExternalRunPage,
+    pageView,
+    runPageOrigin,
+    setPageView,
     setActivePaneTab,
     setIsDetailOpen,
     setSelectedAutomationRunPageId,
@@ -61,6 +64,15 @@ export function useAutomationsPageEscape({
         }
       }
 
+      if (pageView === 'run') {
+        event.preventDefault()
+        setSelectedAutomationRunPageId(null)
+        setPageView(runPageOrigin === 'automation' ? 'automations' : 'runs')
+        setIsDetailOpen(runPageOrigin === 'automation')
+        setActivePaneTab(runPageOrigin === 'automation' ? 'runs' : 'overview')
+        return
+      }
+
       if (isDetailOpen) {
         event.preventDefault()
         if (selectedExternalRunPage) {
@@ -76,6 +88,12 @@ export function useAutomationsPageEscape({
         return
       }
 
+      if (pageView === 'runs') {
+        event.preventDefault()
+        setPageView('automations')
+        return
+      }
+
       event.preventDefault()
       closeAutomationsPage()
     }
@@ -89,11 +107,14 @@ export function useAutomationsPageEscape({
     deleteTarget,
     externalDeleteTarget,
     isDetailOpen,
+    pageView,
+    runPageOrigin,
     selectedAutomationRunPageId,
     selectedExternalRunPage,
     setActivePaneTab,
     setIsDetailOpen,
     setSelectedAutomationRunPageId,
-    setSelectedExternalRunPage
+    setSelectedExternalRunPage,
+    setPageView
   ])
 }
diff --git a/src/renderer/src/components/automations/use-automations-page-local-state.ts b/src/renderer/src/components/automations/use-automations-page-local-state.ts
index 25f4fa30444..e92f666cb22 100644
--- a/src/renderer/src/components/automations/use-automations-page-local-state.ts
+++ b/src/renderer/src/components/automations/use-automations-page-local-state.ts
@@ -13,7 +13,12 @@ import type { AutomationHostCatalogEntry } from './automation-host-catalog-types
 import type { AutomationCreateDestination } from './automation-create-destination'
 import type { AutomationListRow } from './automation-list-row-identity'
 import { EMPTY_AUTOMATION_LIST_FILTER, type AutomationListFilter } from './automation-list-view'
-import type { AutomationPaneTab, SelectedExternalRunPage } from './automation-page-state'
+import type {
+  AutomationPaneTab,
+  AutomationRunPageOrigin,
+  AutomationsPageView,
+  SelectedExternalRunPage
+} from './automation-page-state'
 import type { ExternalAutomationScope } from './external-automation-scope-client'
 import type { SelectedAutomationRunHistoryOutcome } from './use-selected-automation-run-history'
 import type { AutomationsPageStoreState } from './use-automations-page-store-state'
@@ -60,6 +65,8 @@ export function useAutomationsPageLocalState(store: AutomationsPageStoreState) {
   const [editingHostStableKey, setEditingHostStableKey] = useState<string | null>(null)
   const moveCreationKeysRef = useRef(new Map<string, string>())
   const [relativeNow, setRelativeNow] = useState(() => Date.now())
+  const [pageView, setPageView] = useState<AutomationsPageView>('automations')
+  const [runPageOrigin, setRunPageOrigin] = useState<AutomationRunPageOrigin>('runs')
   const [activePaneTab, setActivePaneTab] = useState<AutomationPaneTab>('overview')
   const [selectedAutomationRunPageId, setSelectedAutomationRunPageId] = useState<string | null>(
     null
@@ -186,6 +193,10 @@ export function useAutomationsPageLocalState(store: AutomationsPageStoreState) {
     moveCreationKeysRef,
     relativeNow,
     setRelativeNow,
+    pageView,
+    setPageView,
+    runPageOrigin,
+    setRunPageOrigin,
     activePaneTab,
     setActivePaneTab,
     selectedAutomationRunPageId,
diff --git a/src/renderer/src/components/automations/use-selected-automation-run-history.ts b/src/renderer/src/components/automations/use-selected-automation-run-history.ts
index 2f1608f639a..a7b7dae6799 100644
--- a/src/renderer/src/components/automations/use-selected-automation-run-history.ts
+++ b/src/renderer/src/components/automations/use-selected-automation-run-history.ts
@@ -8,8 +8,9 @@
  * the host a navigation named — so those, and only those, are the key.
  */
 
-import { useEffect, useRef } from 'react'
+import { useEffect, useMemo, useRef } from 'react'
 import type { AutomationRun } from '../../../../shared/automations-types'
+import type { AutomationAuthorityRef } from '../../../../shared/automation-owner-ref'
 import { capturedAutomationOwner, capturedAutomationOwnerKey } from './automation-captured-owner'
 import type { AutomationListRow } from './automation-list-row-identity'
 import {
@@ -75,6 +76,14 @@ export function useSelectedAutomationRunHistory(input: SelectedAutomationRunHist
           navigationHostId(input.navigation, automationId) ?? ''
         ].join('|')
       : ''
+  const captured = input.selected
+    ? capturedAutomationOwner(input.context.capturedOwners, input.selected.key).owner
+    : null
+  const authority = captured?.authority ?? input.context.authority
+  const rowAuthority = useMemo<AutomationAuthorityRef>(
+    () => (authority?.kind === 'runtime' ? authority : { kind: 'desktop' }),
+    [authority]
+  )
 
   useEffect(() => {
     const { selected, context, legacyTarget, navigation, onSettled } = inputRef.current
@@ -90,8 +99,11 @@ export function useSelectedAutomationRunHistory(input: SelectedAutomationRunHist
     const target = navigationHost
       ? getAutomationTargetFromHostId(navigationHost)
       : (legacyTarget(selected) ?? { kind: 'local' })
-    void dispatchAutomationRunHistory(context, { rowKey, automationId }, () =>
-      listAutomationRunsForTarget(target, automationId)
+    void dispatchAutomationRunHistory(
+      context,
+      { rowKey, automationId },
+      () => listAutomationRunsForTarget(target, automationId),
+      rowAuthority
     ).then((result) => {
       if (cancelled) {
         return
@@ -107,5 +119,5 @@ export function useSelectedAutomationRunHistory(input: SelectedAutomationRunHist
     return () => {
       cancelled = true
     }
-  }, [automationId, rowKey, fetchKey, reloadToken])
+  }, [automationId, rowAuthority, rowKey, fetchKey, reloadToken])
 }
diff --git a/src/renderer/src/components/gitlab-item-dialog/use-gitlab-review-actions.ts b/src/renderer/src/components/gitlab-item-dialog/use-gitlab-review-actions.ts
index 9b56234ffc3..e560fa16799 100644
--- a/src/renderer/src/components/gitlab-item-dialog/use-gitlab-review-actions.ts
+++ b/src/renderer/src/components/gitlab-item-dialog/use-gitlab-review-actions.ts
@@ -49,7 +49,14 @@ export function useGitLabReviewActions(
         setReviewerOptionsLoading(false)
       }
     }
-  }, [mountedRef, repoSelector, reviewerOptions, reviewerOptionsLoading])
+  }, [
+    mountedRef,
+    repoSelector,
+    reviewerOptions,
+    reviewerOptionsLoading,
+    setReviewerOptions,
+    setReviewerOptionsLoading
+  ])
 
   const handleSetReviewers = useCallback(
     async (nextReviewers: GitLabAssignableUser[]): Promise<void> => {
@@ -101,7 +108,16 @@ export function useGitLabReviewActions(
         }
       }
     },
-    [details, item, mountedRef, repoSelector]
+    [
+      details,
+      item,
+      mountedRef,
+      repoSelector,
+      setDetails,
+      setReviewerDraftId,
+      setReviewerOptions,
+      setReviewerUpdating
+    ]
   )
 
   const handleSubmitInlineComment = useCallback(async (): Promise<void> => {
@@ -185,7 +201,10 @@ export function useGitLabReviewActions(
     inlineCommentLine,
     item,
     mountedRef,
-    repoSelector
+    repoSelector,
+    setDetails,
+    setInlineCommentBody,
+    setInlineCommentSubmitting
   ])
 
   const handleResolveDiscussion = useCallback(
@@ -228,7 +247,7 @@ export function useGitLabReviewActions(
         }
       }
     },
-    [item, repoSelector, mountedRef]
+    [item, repoSelector, mountedRef, setDetails, setResolvingThreadId]
   )
 
   return {
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index f1489d6754d..93ba2bbd96f 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -15887,6 +15887,35 @@
           "noProjects": "No projects are set up on {host}. Add one there, or choose another host.",
           "updateRequired": "Update the Orca server on {hosts} to store automations there.",
           "move": "Saving creates this automation on {host} and deletes the original and its run history."
+        },
+        "AutomationListToolbar": {
+          "runs": "Runs"
+        },
+        "AutomationRunsDashboard": {
+          "search": "Search runs…",
+          "filters": "Filters",
+          "host": "Host",
+          "status": "Status",
+          "refresh": "Refresh runs",
+          "successful24h": "Successful · 24h",
+          "failed24h": "Failed · 24h",
+          "successful7d": "Successful · 7d",
+          "failed7d": "Failed · 7d",
+          "historyUnavailableOne": "Run history is unavailable for 1 automation. Counts include available history only.",
+          "historyUnavailableMany": "Run history is unavailable for {{count}} automations. Counts include available history only.",
+          "automation": "Automation",
+          "triggered": "Triggered",
+          "trigger": "Trigger",
+          "loading": "Loading runs…",
+          "noRuns": "No runs yet",
+          "emptyDescription": "Runs appear here after an automation is triggered.",
+          "runs": "Runs",
+          "local": "Local",
+          "remote": "Remote"
+        },
+        "AutomationsPageBreadcrumb": {
+          "ariaLabel": "Automations breadcrumb",
+          "runDetails": "Run details"
         }
       },
       "agent": {
diff --git a/src/renderer/src/i18n/locales/es.json b/src/renderer/src/i18n/locales/es.json
index 79731f3b096..f4a4fd931de 100644
--- a/src/renderer/src/i18n/locales/es.json
+++ b/src/renderer/src/i18n/locales/es.json
@@ -13719,6 +13719,35 @@
         }
       },
       "automations": {
+        "AutomationListToolbar": {
+          "runs": "Ejecuciones"
+        },
+        "AutomationRunsDashboard": {
+          "search": "Buscar ejecuciones…",
+          "filters": "Filtros",
+          "host": "Host",
+          "status": "Estado",
+          "refresh": "Actualizar ejecuciones",
+          "successful24h": "Exitosas · 24 h",
+          "failed24h": "Fallidas · 24 h",
+          "successful7d": "Exitosas · 7 días",
+          "failed7d": "Fallidas · 7 días",
+          "historyUnavailableOne": "El historial de ejecuciones no está disponible para 1 automatización. Los recuentos solo incluyen el historial disponible.",
+          "historyUnavailableMany": "El historial de ejecuciones no está disponible para {{count}} automatizaciones. Los recuentos solo incluyen el historial disponible.",
+          "automation": "Automatización",
+          "triggered": "Activada",
+          "trigger": "Activar",
+          "loading": "Cargando ejecuciones…",
+          "noRuns": "Aún no hay ejecuciones",
+          "emptyDescription": "Las ejecuciones aparecerán aquí después de activar una automatización.",
+          "runs": "Ejecuciones",
+          "local": "Local",
+          "remote": "Remoto"
+        },
+        "AutomationsPageBreadcrumb": {
+          "ariaLabel": "Ruta de navegación de automatizaciones",
+          "runDetails": "Detalles de la ejecución"
+        },
         "AutomationCustomCronPanel": {
           "3e3b2c369f": "expresión cron",
           "e81a02d61b": "Ingrese un cron válido de cinco campos antes de guardar.",
diff --git a/src/renderer/src/i18n/locales/ja.json b/src/renderer/src/i18n/locales/ja.json
index 6afc506b12b..ee6e4440f79 100644
--- a/src/renderer/src/i18n/locales/ja.json
+++ b/src/renderer/src/i18n/locales/ja.json
@@ -13719,6 +13719,35 @@
         }
       },
       "automations": {
+        "AutomationListToolbar": {
+          "runs": "実行"
+        },
+        "AutomationRunsDashboard": {
+          "search": "実行を検索…",
+          "filters": "フィルター",
+          "host": "ホスト",
+          "status": "ステータス",
+          "refresh": "実行を更新",
+          "successful24h": "成功 · 24時間",
+          "failed24h": "失敗 · 24時間",
+          "successful7d": "成功 · 7日間",
+          "failed7d": "失敗 · 7日間",
+          "historyUnavailableOne": "1件の自動化で実行履歴を利用できません。カウントには利用可能な履歴のみが含まれます。",
+          "historyUnavailableMany": "{{count}}件の自動化で実行履歴を利用できません。カウントには利用可能な履歴のみが含まれます。",
+          "automation": "自動化",
+          "triggered": "トリガー済み",
+          "trigger": "トリガー",
+          "loading": "実行を読み込み中…",
+          "noRuns": "実行はまだありません",
+          "emptyDescription": "自動化がトリガーされると、ここに実行が表示されます。",
+          "runs": "実行",
+          "local": "ローカル",
+          "remote": "リモート"
+        },
+        "AutomationsPageBreadcrumb": {
+          "ariaLabel": "自動化のパンくずリスト",
+          "runDetails": "実行の詳細"
+        },
         "AutomationCustomCronPanel": {
           "3e3b2c369f": "クロン式",
           "e81a02d61b": "保存する前に、有効な 5 フィールドの cron を入力してください。",
diff --git a/src/renderer/src/i18n/locales/ko.json b/src/renderer/src/i18n/locales/ko.json
index c2836df4c40..76ed151ca2c 100644
--- a/src/renderer/src/i18n/locales/ko.json
+++ b/src/renderer/src/i18n/locales/ko.json
@@ -13775,6 +13775,35 @@
         }
       },
       "automations": {
+        "AutomationListToolbar": {
+          "runs": "실행"
+        },
+        "AutomationRunsDashboard": {
+          "search": "실행 검색…",
+          "filters": "필터",
+          "host": "호스트",
+          "status": "상태",
+          "refresh": "실행 새로 고침",
+          "successful24h": "성공 · 24시간",
+          "failed24h": "실패 · 24시간",
+          "successful7d": "성공 · 7일",
+          "failed7d": "실패 · 7일",
+          "historyUnavailableOne": "자동화 1개의 실행 기록을 사용할 수 없습니다. 집계에는 사용 가능한 기록만 포함됩니다.",
+          "historyUnavailableMany": "자동화 {{count}}개의 실행 기록을 사용할 수 없습니다. 집계에는 사용 가능한 기록만 포함됩니다.",
+          "automation": "자동화",
+          "triggered": "트리거됨",
+          "trigger": "트리거",
+          "loading": "실행 로드 중…",
+          "noRuns": "아직 실행이 없습니다",
+          "emptyDescription": "자동화를 트리거하면 여기에 실행이 표시됩니다.",
+          "runs": "실행",
+          "local": "로컬",
+          "remote": "원격"
+        },
+        "AutomationsPageBreadcrumb": {
+          "ariaLabel": "자동화 탐색경로",
+          "runDetails": "실행 세부정보"
+        },
         "AutomationCustomCronPanel": {
           "3e3b2c369f": "Cron 식",
           "e81a02d61b": "저장하기 전에 유효한 5개 필드 크론을 입력하세요.",
diff --git a/src/renderer/src/i18n/locales/zh.json b/src/renderer/src/i18n/locales/zh.json
index 77f56e805ae..5c1324afa12 100644
--- a/src/renderer/src/i18n/locales/zh.json
+++ b/src/renderer/src/i18n/locales/zh.json
@@ -13775,6 +13775,35 @@
         }
       },
       "automations": {
+        "AutomationListToolbar": {
+          "runs": "运行"
+        },
+        "AutomationRunsDashboard": {
+          "search": "搜索运行…",
+          "filters": "筛选条件",
+          "host": "主机",
+          "status": "状态",
+          "refresh": "刷新运行",
+          "successful24h": "成功 · 24 小时",
+          "failed24h": "失败 · 24 小时",
+          "successful7d": "成功 · 7 天",
+          "failed7d": "失败 · 7 天",
+          "historyUnavailableOne": "1 个自动化的运行历史不可用。计数仅包含可用的历史记录。",
+          "historyUnavailableMany": "{{count}} 个自动化的运行历史不可用。计数仅包含可用的历史记录。",
+          "automation": "自动化",
+          "triggered": "已触发",
+          "trigger": "触发",
+          "loading": "正在加载运行…",
+          "noRuns": "尚无运行",
+          "emptyDescription": "触发自动化后，运行记录会显示在这里。",
+          "runs": "运行",
+          "local": "本地",
+          "remote": "远程"
+        },
+        "AutomationsPageBreadcrumb": {
+          "ariaLabel": "自动化面包屑导航",
+          "runDetails": "运行详情"
+        },
         "AutomationCustomCronPanel": {
           "3e3b2c369f": "cron",
           "e81a02d61b": "保存前输入有效的五字段 cron。",
diff --git a/src/shared/automation-run-cursor.ts b/src/shared/automation-run-cursor.ts
new file mode 100644
index 00000000000..23bcaccc343
--- /dev/null
+++ b/src/shared/automation-run-cursor.ts
@@ -0,0 +1,75 @@
+import type { AutomationRun, AutomationRunsPage } from './automations-types'
+
+const MAX_PAGE_SIZE = 100
+
+/** A keyset boundary (`createdAt:id` of the previous page's last run), or the
+ *  bare offset older hosts emitted — still read so a cursor issued before an
+ *  upgrade keeps working. */
+type AutomationRunCursor =
+  | { kind: 'key'; createdAt: number; id: string }
+  | { kind: 'offset'; offset: number }
+
+function decodeAutomationRunCursor(cursor: string | undefined): AutomationRunCursor | null {
+  if (!cursor) {
+    return null
+  }
+  const separator = cursor.indexOf(':')
+  if (separator === -1) {
+    const offset = Number.parseInt(cursor, 10)
+    return Number.isFinite(offset) && offset > 0 ? { kind: 'offset', offset } : null
+  }
+  const createdAt = Number.parseInt(cursor.slice(0, separator), 10)
+  const id = cursor.slice(separator + 1)
+  return Number.isFinite(createdAt) && id ? { kind: 'key', createdAt, id } : null
+}
+
+/** The single total order pages and cursors agree on. Ties on `createdAt` fall
+ *  back to `id`, so a pruned boundary cannot take the runs tied with it. */
+export function compareAutomationRunsNewestFirst(
+  left: Pick<AutomationRun, 'createdAt' | 'id'>,
+  right: Pick<AutomationRun, 'createdAt' | 'id'>
+): number {
+  return right.createdAt - left.createdAt || left.id.localeCompare(right.id)
+}
+
+function pageStartIndex(
+  runs: readonly AutomationRun[],
+  cursor: AutomationRunCursor | null
+): number {
+  if (!cursor) {
+    return 0
+  }
+  if (cursor.kind === 'offset') {
+    return Math.min(cursor.offset, runs.length)
+  }
+  const boundary = runs.findIndex(
+    (run) => run.id === cursor.id && run.createdAt === cursor.createdAt
+  )
+  if (boundary !== -1) {
+    return boundary + 1
+  }
+  // Boundary run pruned between pages: resume at the first run the total order
+  // places after it, so runs tied on `createdAt` are not dropped with it.
+  const older = runs.findIndex((run) => compareAutomationRunsNewestFirst(cursor, run) < 0)
+  return older === -1 ? runs.length : older
+}
+
+/**
+ * Pages `runs`, which must already be sorted by `compareAutomationRunsNewestFirst`.
+ * The cursor names the previous page's last run rather than an index, so runs
+ * created between two page requests cannot shift the window and drop a run.
+ */
+export function paginateAutomationRuns(
+  runs: readonly AutomationRun[],
+  limit?: number,
+  cursor?: string
+): AutomationRunsPage {
+  const start = pageStartIndex(runs, decodeAutomationRunCursor(cursor))
+  const boundedLimit = Math.min(Math.max(1, limit ?? 100), MAX_PAGE_SIZE)
+  const page = runs.slice(start, start + boundedLimit)
+  const last = page.at(-1)
+  return {
+    runs: page,
+    nextCursor: last && start + page.length < runs.length ? `${last.createdAt}:${last.id}` : null
+  }
+}
diff --git a/src/shared/automations-types.ts b/src/shared/automations-types.ts
index 24d9345242d..80a56e3cdeb 100644
--- a/src/shared/automations-types.ts
+++ b/src/shared/automations-types.ts
@@ -170,6 +170,12 @@ export type AutomationRun = {
   lastOccurrenceAt?: number
 }
 
+/** A bounded history response; older hosts may continue returning `runs` only. */
+export type AutomationRunsPage = {
+  runs: AutomationRun[]
+  nextCursor: string | null
+}
+
 export type AutomationCreateInput = {
   /** Optional idempotency key; repeated creates return the original record. */
   creationKey?: string
diff --git a/tests/e2e/automation-runs-dashboard.spec.ts b/tests/e2e/automation-runs-dashboard.spec.ts
new file mode 100644
index 00000000000..ac0154701b8
--- /dev/null
+++ b/tests/e2e/automation-runs-dashboard.spec.ts
@@ -0,0 +1,44 @@
+/**
+ * End-to-end coverage for the Automations runs surface.
+ *
+ * The test intentionally does not depend on seeded run history: a fresh E2E
+ * profile may have no automations, but the Runs navigation and empty state must
+ * still be usable.
+ */
+
+import { test, expect } from './helpers/orca-app'
+import { waitForSessionReady } from './helpers/store'
+
+test('opens the runs dashboard and returns to automations', async ({ orcaPage }) => {
+  await waitForSessionReady(orcaPage)
+
+  await orcaPage.evaluate(() => {
+    const store = window.__store
+    if (!store) {
+      throw new Error('window.__store is not available')
+    }
+    store.getState().openAutomationsPage()
+  })
+
+  const runsButton = orcaPage.getByRole('button', { name: 'Runs' })
+  await expect(runsButton).toBeVisible()
+  await runsButton.click()
+
+  await expect(orcaPage.getByRole('navigation', { name: 'Automations breadcrumb' })).toBeVisible()
+  await expect(orcaPage.getByText('Successful · 24h')).toBeVisible()
+  await expect(orcaPage.getByText('Failed · 24h')).toBeVisible()
+  await expect(orcaPage.getByText('Successful · 7d')).toBeVisible()
+  await expect(orcaPage.getByText('Failed · 7d')).toBeVisible()
+  await expect(orcaPage.getByRole('button', { name: 'Filters' })).toBeVisible()
+  await expect(orcaPage.getByRole('button', { name: 'Refresh runs' })).toBeVisible()
+  await expect(orcaPage.getByText('Automation', { exact: true })).toBeVisible()
+  await expect(orcaPage.getByText('Triggered', { exact: true })).toBeVisible()
+  await expect(orcaPage.getByText('Status', { exact: true })).toBeVisible()
+
+  await orcaPage
+    .getByRole('navigation', { name: 'Automations breadcrumb' })
+    .getByRole('button', { name: 'Automations' })
+    .click()
+  await expect(orcaPage.getByRole('heading', { name: 'Automations' })).toBeVisible()
+  await expect(runsButton).toBeVisible()
+})

From c2fce80289622e965a281094e5b21cf0e5ddb28a Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 13:43:06 -0700
Subject: [PATCH 82/92] Fix agent dashboard setting configure (#18245)

* Make agents activity always-on; toggle via bell icon

- Remove optional showAgentsSidebar setting
- Replace sidebar view-toggle with bell-button for activity access
- Agents activity now always accessible in sidebar
- Preserve migration flag for introduction to existing users
- Remove visibility inference utilities

* Simplify sidebar when agents view active: hide workspace options, add to

- Hide workspace options menu and add project button when agents view is
  active, reducing UI clutter in that mode
- Add tooltip to the activity bell button for better discoverability
- Localize sidebar search field text
- Move search and filter toggles to local state in SidebarAgentsList,
  removing unused callbacks from thread list components
- Manage search input focus properly when opening
---
 .../terminal-settings-migrations.ts           |   3 +
 .../normalize-loaded-global-settings.test.ts  |  61 +----
 .../normalize-loaded-global-settings.ts       |   9 +-
 .../prepare-loaded-profile-settings.ts        |   2 +-
 .../activity-scope-filter-controls.tsx        |   5 +-
 .../activity/activity-thread-list-pane.tsx    |   3 +
 .../activity/activity-thread-list-toolbar.tsx |  14 +-
 .../activity/activity-thread-options-menu.tsx |  13 +-
 .../settings/ExperimentalPane.test.tsx        |  19 +-
 .../components/settings/ExperimentalPane.tsx  |  30 ---
 .../settings/appearance-sidebar-search.ts     |  21 --
 .../settings/experimental-search.ts           |   3 -
 .../src/components/sidebar/Sidebar.test.tsx   |  43 +---
 .../components/sidebar/SidebarAgentsList.tsx  |  54 ++++-
 .../components/sidebar/SidebarHeader.test.tsx | 228 ++++--------------
 .../src/components/sidebar/SidebarHeader.tsx  | 222 ++++++-----------
 .../components/sidebar/SidebarNav.test.tsx    |   1 -
 .../sidebar/agents-sidebar-visibility.test.ts |  15 --
 .../sidebar/agents-sidebar-visibility.ts      |  11 -
 src/renderer/src/components/sidebar/index.tsx | 131 +---------
 .../sidebar/sidebar-header-actions.tsx        |  49 ++--
 .../sidebar/sidebar-view-toggle.test.tsx      | 145 -----------
 .../sidebar/sidebar-view-toggle.tsx           | 106 --------
 src/renderer/src/i18n/locales/en.json         |   4 -
 .../slices/ui-hydration-view-layout.test.ts   |  22 --
 .../store/slices/ui-page-navigation.test.ts   |  17 --
 .../slices/ui/ui-slice-hydration-actions.ts   |   4 +-
 .../ui/ui-slice-hydration-sanitizers.ts       |  13 +-
 .../slices/ui/ui-slice-settings-actions.ts    |  10 +-
 .../store/slices/ui/ui-slice-view-actions.ts  |   7 -
 src/shared/agents-sidebar-visibility.ts       |  12 -
 src/shared/default-global-settings.ts         |   1 -
 src/shared/global-settings-types.ts           |   6 +-
 src/shared/telemetry-property-schemas.ts      |   1 -
 .../e2e/activity-agent-pane-isolation.spec.ts |   1 -
 35 files changed, 236 insertions(+), 1050 deletions(-)
 delete mode 100644 src/renderer/src/components/sidebar/agents-sidebar-visibility.test.ts
 delete mode 100644 src/renderer/src/components/sidebar/agents-sidebar-visibility.ts
 delete mode 100644 src/renderer/src/components/sidebar/sidebar-view-toggle.test.tsx
 delete mode 100644 src/renderer/src/components/sidebar/sidebar-view-toggle.tsx
 delete mode 100644 src/shared/agents-sidebar-visibility.ts

diff --git a/src/main/persistence/applying-settings/terminal-settings-migrations.ts b/src/main/persistence/applying-settings/terminal-settings-migrations.ts
index f8edf0ee466..699189d1390 100644
--- a/src/main/persistence/applying-settings/terminal-settings-migrations.ts
+++ b/src/main/persistence/applying-settings/terminal-settings-migrations.ts
@@ -59,6 +59,7 @@ export function readLegacyTerminalScrollbackSettings(
 type RetiredGlobalSettings = {
   terminalScrollbackBytes?: unknown
   enableGitHubAttribution?: unknown
+  showAgentsSidebar?: unknown
 }
 
 export function stripRetiredGlobalSettings(
@@ -67,10 +68,12 @@ export function stripRetiredGlobalSettings(
   const {
     terminalScrollbackBytes: _legacyScrollbackBytes,
     enableGitHubAttribution: _legacyGitHubAttribution,
+    showAgentsSidebar: _legacyShowAgentsSidebar,
     ...rest
   } = (settings ?? {}) as Partial<GlobalSettings> & RetiredGlobalSettings
   void _legacyScrollbackBytes
   void _legacyGitHubAttribution
+  void _legacyShowAgentsSidebar
   return rest
 }
 
diff --git a/src/main/persistence/loading-store/normalize-loaded-global-settings.test.ts b/src/main/persistence/loading-store/normalize-loaded-global-settings.test.ts
index 6d1040f09ae..4c463959bba 100644
--- a/src/main/persistence/loading-store/normalize-loaded-global-settings.test.ts
+++ b/src/main/persistence/loading-store/normalize-loaded-global-settings.test.ts
@@ -8,10 +8,9 @@ import type { GlobalSettings } from '../../../shared/global-settings-types'
 import type { PersistedState } from '../../../shared/persisted-state-types'
 
 // Simulates a profile created before the dedicated Experimental switch was persisted.
-function normalizeLegacyProfile(overrides: Partial<GlobalSettings>): PersistedState['settings'] {
+function normalizeLegacyProfile(overrides: Record<string, unknown>): PersistedState['settings'] {
   const defaults = getDefaultPersistedState(homedir())
   const settings: Partial<GlobalSettings> = { ...defaults.settings }
-  delete settings.showAgentsSidebar
   delete settings.experimentalActivity
   delete settings.experimentalAgentDashboardPopout
   Object.assign(settings, overrides)
@@ -22,59 +21,17 @@ function normalizeLegacyProfile(overrides: Partial<GlobalSettings>): PersistedSt
   return normalizeLoadedGlobalSettings(parsed, terminal, profile)
 }
 
-describe('showAgentsSidebar experimental-setting migration', () => {
-  it('keeps the sidebar for Agents-view opt-ins regardless of the dashboard experiment', () => {
+describe('retired Agents sidebar setting', () => {
+  it('does not mark new profiles as migrated', () => {
+    expect(normalizeLegacyProfile({}).agentsSidebarMigratedFromExperimental).toBe(false)
+  })
+
+  it('drops the old visibility setting while preserving migration metadata', () => {
     const normalized = normalizeLegacyProfile({
       experimentalActivity: true,
-      experimentalAgentDashboardPopout: false
+      showAgentsSidebar: false
     })
-    expect(normalized.showAgentsSidebar).toBe(true)
+    expect('showAgentsSidebar' in normalized).toBe(false)
     expect(normalized.agentsSidebarMigratedFromExperimental).toBe(true)
   })
-
-  it('carries the legacy Agents-view opt-in into the sidebar', () => {
-    expect(normalizeLegacyProfile({ experimentalActivity: true }).showAgentsSidebar).toBe(true)
-  })
-
-  it('does not show Agents migration copy for a dashboard-only opt-in', () => {
-    expect(
-      normalizeLegacyProfile({ experimentalAgentDashboardPopout: true })
-        .agentsSidebarMigratedFromExperimental
-    ).toBe(false)
-  })
-
-  it('defaults profiles with no legacy signal to the sidebar', () => {
-    const normalized = normalizeLegacyProfile({})
-    expect(normalized.showAgentsSidebar).toBe(true)
-    expect(normalized.agentsSidebarMigratedFromExperimental).toBe(false)
-  })
-
-  it('does not treat a dashboard opt-out as an Agents-tab opt-out', () => {
-    expect(
-      normalizeLegacyProfile({ experimentalAgentDashboardPopout: false }).showAgentsSidebar
-    ).toBe(true)
-  })
-
-  it('ignores a pre-stamp forced-default experimentalActivity true (not an opt-in)', () => {
-    const normalized = normalizeLegacyProfile({
-      experimentalActivity: true,
-      experimentalActivityDefaultedOffForAllUsers: undefined
-    })
-    expect(normalized.experimentalActivity).toBe(false)
-    expect(normalized.showAgentsSidebar).toBe(true)
-    expect(normalized.agentsSidebarMigratedFromExperimental).toBe(false)
-  })
-
-  it('preserves a stored showAgentsSidebar choice over legacy flags', () => {
-    expect(
-      normalizeLegacyProfile({ showAgentsSidebar: false, experimentalActivity: true })
-        .showAgentsSidebar
-    ).toBe(false)
-    expect(
-      normalizeLegacyProfile({
-        showAgentsSidebar: true,
-        experimentalAgentDashboardPopout: false
-      }).showAgentsSidebar
-    ).toBe(true)
-  })
 })
diff --git a/src/main/persistence/loading-store/normalize-loaded-global-settings.ts b/src/main/persistence/loading-store/normalize-loaded-global-settings.ts
index 9370ec4febc..90678e9f822 100644
--- a/src/main/persistence/loading-store/normalize-loaded-global-settings.ts
+++ b/src/main/persistence/loading-store/normalize-loaded-global-settings.ts
@@ -1,5 +1,4 @@
 import { getDefaultVoiceSettings } from '../../../shared/constants'
-import { resolveAgentsSidebarVisible } from '../../../shared/agents-sidebar-visibility'
 import { normalizePRBotAuthorOverrides } from '../../../shared/pr-bot-author-overrides'
 import { normalizeTerminalQuickCommands } from '../../../shared/terminal-quick-commands'
 import { normalizeOpenInApplications } from '../../../shared/open-in-applications'
@@ -86,13 +85,7 @@ export function normalizeLoadedGlobalSettings(
     ...migratedTerminalTuiScrollSensitivity.settings,
     experimentalActivity: migratedExperimentalActivity,
     experimentalActivityDefaultedOffForAllUsers: true,
-    // Keep the experimental Agents tab's rollout default for older profiles while
-    // preserving any choice made through its dedicated Experimental setting.
-    showAgentsSidebar: resolveAgentsSidebarVisible({
-      showAgentsSidebar: parsed.settings?.showAgentsSidebar
-    }),
-    // Preserve the legacy opt-in before the experimental setting is normalized away. This
-    // drives the migration-specific introduction copy without changing runtime behavior.
+    // Preserve the legacy opt-in so the one-time introduction copy can target existing users.
     agentsSidebarMigratedFromExperimental:
       parsed.settings?.agentsSidebarMigratedFromExperimental === true ||
       migratedExperimentalActivity,
diff --git a/src/main/persistence/loading-store/prepare-loaded-profile-settings.ts b/src/main/persistence/loading-store/prepare-loaded-profile-settings.ts
index 2410e68be54..69e0d28d8c5 100644
--- a/src/main/persistence/loading-store/prepare-loaded-profile-settings.ts
+++ b/src/main/persistence/loading-store/prepare-loaded-profile-settings.ts
@@ -62,7 +62,7 @@ export function prepareLoadedProfileSettings(
 ): PreparedLoadedProfileSettings {
   const experimentalActivityDefaultedOffForAllUsers =
     parsed.settings?.experimentalActivityDefaultedOffForAllUsers === true
-  // Why: the Agents view moved back behind Experimental; flip pre-migration profiles off once, then preserve opt-ins.
+  // Why: preserve the legacy rollout boundary while loading profiles created before the Agents tab graduated.
   const migratedExperimentalActivity = experimentalActivityDefaultedOffForAllUsers
     ? (parsed.settings?.experimentalActivity ?? false)
     : false
diff --git a/src/renderer/src/components/activity/activity-scope-filter-controls.tsx b/src/renderer/src/components/activity/activity-scope-filter-controls.tsx
index 6256595ba6b..7da07182062 100644
--- a/src/renderer/src/components/activity/activity-scope-filter-controls.tsx
+++ b/src/renderer/src/components/activity/activity-scope-filter-controls.tsx
@@ -1,7 +1,7 @@
 import React, { useMemo } from 'react'
 import { X } from 'lucide-react'
 import { useAppStore } from '@/store'
-import { DropdownMenuLabel, DropdownMenuSeparator } from '@/components/ui/dropdown-menu'
+import { DropdownMenuSeparator } from '@/components/ui/dropdown-menu'
 import SidebarRepositoryFilterSection from '@/components/sidebar/SidebarRepositoryFilterSection'
 import { SidebarHostScopeMenuSection } from '@/components/sidebar/SidebarHostScopeMenuSection'
 import {
@@ -32,9 +32,6 @@ export function ActivityScopeFilterMenuSections(): React.JSX.Element | null {
   }
   return (
     <>
-      <DropdownMenuLabel>
-        {translate('auto.components.sidebar.SidebarWorkspaceOptionsMenu.showSection', 'Show')}
-      </DropdownMenuLabel>
       {showHostScopeControls ? (
         <SidebarHostScopeMenuSection
           hostVisibilityLabel={getSidebarHostVisibilityLabel(agentsVisibleHostIds, hostOptions)}
diff --git a/src/renderer/src/components/activity/activity-thread-list-pane.tsx b/src/renderer/src/components/activity/activity-thread-list-pane.tsx
index 9c2beee6e0c..7879b486633 100644
--- a/src/renderer/src/components/activity/activity-thread-list-pane.tsx
+++ b/src/renderer/src/components/activity/activity-thread-list-pane.tsx
@@ -73,6 +73,7 @@ export function ActivityThreadListPane({
   onResizeStart,
   showFilterControls = true,
   showOptionsMenu = true,
+  showInlineActions = true,
   scopeFilterRow,
   collapsedGroupKeys,
   onToggleGroupCollapse,
@@ -109,6 +110,7 @@ export function ActivityThreadListPane({
   onResizeStart?: React.MouseEventHandler<HTMLDivElement>
   showFilterControls?: boolean
   showOptionsMenu?: boolean
+  showInlineActions?: boolean
   /** Rendered between the toolbar and the list; carries the active-scope chips row. */
   scopeFilterRow?: React.ReactNode
   collapsedGroupKeys?: ReadonlySet<string>
@@ -314,6 +316,7 @@ export function ActivityThreadListPane({
         resizable={resizable}
         showFilterControls={showFilterControls}
         showOptionsMenu={showOptionsMenu}
+        showInlineActions={showInlineActions}
       />
       {scopeFilterRow}
       <div className="relative min-h-0 flex-1">
diff --git a/src/renderer/src/components/activity/activity-thread-list-toolbar.tsx b/src/renderer/src/components/activity/activity-thread-list-toolbar.tsx
index f1ad0fb9057..5bca25ecec9 100644
--- a/src/renderer/src/components/activity/activity-thread-list-toolbar.tsx
+++ b/src/renderer/src/components/activity/activity-thread-list-toolbar.tsx
@@ -1,5 +1,5 @@
 import React from 'react'
-import { BellDot, CheckCheck, Search, Trash2, X } from 'lucide-react'
+import { CheckCheck, ListChecks, Search, Trash2, X } from 'lucide-react'
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import {
@@ -34,7 +34,8 @@ export function ActivityThreadListToolbar({
   onClearCompleted,
   resizable,
   showFilterControls,
-  showOptionsMenu
+  showOptionsMenu,
+  showInlineActions = true
 }: {
   activityFilterInputRef: React.RefObject<HTMLInputElement | null>
   query: string
@@ -54,6 +55,7 @@ export function ActivityThreadListToolbar({
   resizable: boolean
   showFilterControls: boolean
   showOptionsMenu: boolean
+  showInlineActions?: boolean
 }): React.JSX.Element | null {
   const showToolbar = showFilterControls || showOptionsMenu
   if (!showToolbar) {
@@ -63,7 +65,7 @@ export function ActivityThreadListToolbar({
   return (
     <>
       <div className="shrink-0 border-b border-border px-2 py-1.5">
-        <div className="flex items-center gap-1">
+        <div className="flex items-center justify-end gap-1">
           {showFilterControls ? (
             <div className="relative min-w-0 flex-1">
               <Search className="pointer-events-none absolute left-2 top-1/2 size-3 -translate-y-1/2 text-muted-foreground" />
@@ -147,7 +149,7 @@ export function ActivityThreadListToolbar({
                   className={cn(
                     'size-7 shrink-0 p-0 rounded-md transition-all',
                     readFilter === 'unread'
-                      ? '!border border-primary/50 !bg-primary/20 !text-primary shadow-xs hover:!bg-primary/30'
+                      ? '!border border-primary/30 !bg-primary/10 !text-primary/90 shadow-xs hover:!bg-primary/15 hover:!text-primary'
                       : 'text-muted-foreground hover:text-foreground hover:bg-muted/50'
                   )}
                   aria-label={translate(
@@ -155,7 +157,7 @@ export function ActivityThreadListToolbar({
                     'Show unread threads only'
                   )}
                 >
-                  <BellDot className="size-3.5" strokeWidth={2.25} />
+                  <ListChecks className="size-3.5" strokeWidth={2.25} />
                 </Toggle>
               </TooltipTrigger>
               <TooltipContent side="bottom" sideOffset={6}>
@@ -182,7 +184,7 @@ export function ActivityThreadListToolbar({
           ) : null}
         </div>
       </div>
-      {onMarkAllThreadsRead || onClearCompleted ? (
+      {showInlineActions && (onMarkAllThreadsRead || onClearCompleted) ? (
         <div className="flex shrink-0 items-center gap-1 border-b border-border px-2 py-1">
           {onMarkAllThreadsRead ? (
             <Button
diff --git a/src/renderer/src/components/activity/activity-thread-options-menu.tsx b/src/renderer/src/components/activity/activity-thread-options-menu.tsx
index a7d50a108ac..46638319f2a 100644
--- a/src/renderer/src/components/activity/activity-thread-options-menu.tsx
+++ b/src/renderer/src/components/activity/activity-thread-options-menu.tsx
@@ -1,11 +1,11 @@
 import React from 'react'
 import {
-  BellDot,
   Check,
   CheckCheck,
   GitFork,
   Layers,
-  MoreVertical,
+  ListChecks,
+  ListFilter,
   Rows3,
   Search,
   Trash2
@@ -94,13 +94,16 @@ export function ActivityThreadOptionsMenu({
                   'Thread list options'
                 )}
               >
-                <MoreVertical className="size-3.5" strokeWidth={2.25} />
+                <ListFilter className="size-3.5" strokeWidth={2.25} />
               </Button>
             </DropdownMenuTrigger>
           </span>
         </TooltipTrigger>
         <TooltipContent side="bottom">
-          {translate('auto.components.activity.ActivityPrototypePage.a472a14700', 'More options')}
+          {translate(
+            'auto.components.activity.ActivityPrototypePage.activityOptions',
+            'Activity options'
+          )}
         </TooltipContent>
       </Tooltip>
       <DropdownMenuContent
@@ -139,7 +142,7 @@ export function ActivityThreadOptionsMenu({
                     onCheckedChange={() => onToggleUnread()}
                     onSelect={(event) => event.preventDefault()}
                   >
-                    <BellDot className="size-3.5 text-muted-foreground" />
+                    <ListChecks className="size-3.5 text-muted-foreground" />
                     <span className="min-w-0 flex-1 truncate">
                       {translate(
                         'auto.components.activity.ActivityPrototypePage.showUnreadOnly',
diff --git a/src/renderer/src/components/settings/ExperimentalPane.test.tsx b/src/renderer/src/components/settings/ExperimentalPane.test.tsx
index 17abf3154a0..b421b77bfc2 100644
--- a/src/renderer/src/components/settings/ExperimentalPane.test.tsx
+++ b/src/renderer/src/components/settings/ExperimentalPane.test.tsx
@@ -7,7 +7,7 @@ import { afterEach, describe, expect, it, vi } from 'vitest'
 import type { GlobalSettings } from '../../../../shared/global-settings-types'
 import { getDefaultSettings } from '../../../../shared/constants'
 import { ExperimentalPane } from './ExperimentalPane'
-import { getExperimentalPaneSearchEntries, getExperimentalSearchEntry } from './experimental-search'
+import { getExperimentalPaneSearchEntries } from './experimental-search'
 
 vi.mock('../../store', () => ({
   useAppStore: (selector: (state: { settingsSearchQuery: string }) => unknown) =>
@@ -132,23 +132,6 @@ describe('ExperimentalPane', () => {
     )
   })
 
-  it('renders the Agents sidebar switch in Experimental without stale Appearance copy', () => {
-    const settings = getDefaultSettings('/tmp')
-    const markup = renderToStaticMarkup(
-      <ExperimentalPane settings={settings} updateSettings={vi.fn()} />
-    )
-
-    expect(settings.experimentalAgentDashboardPopout).toBeUndefined()
-    expect(markup).toContain('Show Agents Button')
-    // The visible copy is the search entry's own description, so settings search can't
-    // advertise text the page doesn't show.
-    expect(markup).toContain(getExperimentalSearchEntry().agentsSidebar.description)
-    expect(markup).not.toContain('Window &amp; Sidebar')
-    expect(getExperimentalPaneSearchEntries().map((entry) => entry.title)).toContain(
-      'Show Agents Button'
-    )
-  })
-
   it('renders the agent dashboard as an off-by-default searchable experiment', () => {
     const settings = getDefaultSettings('/tmp')
     const markup = renderToStaticMarkup(
diff --git a/src/renderer/src/components/settings/ExperimentalPane.tsx b/src/renderer/src/components/settings/ExperimentalPane.tsx
index 4c3536c78ed..2ef34d943c8 100644
--- a/src/renderer/src/components/settings/ExperimentalPane.tsx
+++ b/src/renderer/src/components/settings/ExperimentalPane.tsx
@@ -39,9 +39,6 @@ export function ExperimentalPane({
   const showNativeChat = matchesSettingsSearch(searchQuery, [
     getExperimentalSearchEntry().nativeChat
   ])
-  const showAgentsSidebar = matchesSettingsSearch(searchQuery, [
-    getExperimentalSearchEntry().agentsSidebar
-  ])
   const showAgentDashboard = matchesSettingsSearch(searchQuery, [
     getExperimentalSearchEntry().agentDashboard
   ])
@@ -64,33 +61,6 @@ export function ExperimentalPane({
 
   return (
     <div className="space-y-4">
-      {showAgentsSidebar ? (
-        <SearchableSetting
-          title={getExperimentalSearchEntry().agentsSidebar.title}
-          description={getExperimentalSearchEntry().agentsSidebar.description}
-          keywords={getExperimentalSearchEntry().agentsSidebar.keywords}
-          className="space-y-3 py-2"
-          id="experimental-agents-sidebar"
-        >
-          <div className="flex items-start justify-between gap-4">
-            <div className="min-w-0 shrink space-y-0.5">
-              <Label>{getExperimentalSearchEntry().agentsSidebar.title}</Label>
-              {/* Same string the search entry advertises, so search results match the page. */}
-              <p className="text-xs text-muted-foreground">
-                {getExperimentalSearchEntry().agentsSidebar.description}
-              </p>
-            </div>
-            <SettingsSwitch
-              checked={settings.showAgentsSidebar !== false}
-              ariaLabel={getExperimentalSearchEntry().agentsSidebar.title}
-              onChange={() =>
-                updateSettings({ showAgentsSidebar: settings.showAgentsSidebar === false })
-              }
-            />
-          </div>
-        </SearchableSetting>
-      ) : null}
-
       {showAgentDashboard ? (
         <AgentDashboardExperimentalSetting settings={settings} updateSettings={updateSettings} />
       ) : null}
diff --git a/src/renderer/src/components/settings/appearance-sidebar-search.ts b/src/renderer/src/components/settings/appearance-sidebar-search.ts
index 2b01f7704a7..ab77d2a0ad0 100644
--- a/src/renderer/src/components/settings/appearance-sidebar-search.ts
+++ b/src/renderer/src/components/settings/appearance-sidebar-search.ts
@@ -123,27 +123,6 @@ export const getShowPinnedWorktreesInGroupsEntry = createLocalizedCatalog(
   })
 )
 
-export const getAgentsSidebarEntry = createLocalizedCatalog((): SettingsSearchEntry => ({
-  title: translate('settings.appearance.agentsSidebar.title', 'Show Agents Button'),
-  description: translate(
-    'settings.appearance.agentsSidebar.description',
-    'Control whether the Agents tab appears in the left sidebar so you can monitor agent activity.'
-  ),
-  keywords: [
-    ...translateSearchKeyword('auto.components.settings.general.search.baa263d6d8', 'agents'),
-    ...translateSearchKeyword('auto.components.settings.agents.search.96ba2373b6', 'agent'),
-    // Why: the sidebar row is labeled "Agent Dashboard"; searching that name must find this.
-    ...translateSearchKeyword(
-      'auto.components.settings.experimental.search.agentDashboard.dashboard',
-      'dashboard'
-    ),
-    ...translateSearchKeyword('auto.components.settings.appearance.search.5bff6a2ef0', 'sidebar'),
-    ...translateSearchKeyword('auto.components.settings.general.search.2a254b725e', 'tab'),
-    ...translateSearchKeyword('auto.components.settings.appearance.search.648eeada79', 'hide'),
-    ...translateSearchKeyword('auto.components.settings.appearance.search.ac79fe4a04', 'show')
-  ]
-}))
-
 export const getSidebarEntries = createLocalizedCatalog((): SettingsSearchEntry[] => [
   {
     title: translate('auto.components.settings.appearance.search.155a1e7438', 'Show Tasks Button'),
diff --git a/src/renderer/src/components/settings/experimental-search.ts b/src/renderer/src/components/settings/experimental-search.ts
index 821de798301..594469fa200 100644
--- a/src/renderer/src/components/settings/experimental-search.ts
+++ b/src/renderer/src/components/settings/experimental-search.ts
@@ -5,7 +5,6 @@ import { translateSearchKeyword } from './settings-search-keywords'
 import { getNewWorktreeCardStyleSearchEntry } from './new-worktree-card-style-search-entry'
 import { getNativeChatExperimentalSearchEntry } from './native-chat-experimental-search-entry'
 import { getEphemeralVmsSearchEntry } from './ephemeral-vms-search'
-import { getAgentsSidebarEntry } from './appearance-sidebar-search'
 
 export const getExperimentalPaneSearchEntries = createLocalizedCatalog(
   (): SettingsSearchEntry[] => [
@@ -48,7 +47,6 @@ export const getExperimentalPaneSearchEntries = createLocalizedCatalog(
       ]
     },
     getNativeChatExperimentalSearchEntry(),
-    getAgentsSidebarEntry(),
     {
       title: translate(
         'auto.components.settings.experimental.search.agentDashboard.title',
@@ -203,7 +201,6 @@ export function getExperimentalSearchEntry() {
     nativeChat: findEntry(
       translate('auto.components.settings.experimental.search.nativeChat.title', 'Chat UI')
     ),
-    agentsSidebar: getAgentsSidebarEntry(),
     agentDashboard: findEntry(
       translate(
         'auto.components.settings.experimental.search.agentDashboard.title',
diff --git a/src/renderer/src/components/sidebar/Sidebar.test.tsx b/src/renderer/src/components/sidebar/Sidebar.test.tsx
index 343c3f10c3c..0de26d72270 100644
--- a/src/renderer/src/components/sidebar/Sidebar.test.tsx
+++ b/src/renderer/src/components/sidebar/Sidebar.test.tsx
@@ -3,7 +3,7 @@
 import type { CSSProperties, ReactNode } from 'react'
 import { renderToStaticMarkup } from 'react-dom/server'
 import { tmpdir } from 'node:os'
-import { cleanup, fireEvent, render, waitFor } from '@testing-library/react'
+import { cleanup, render, waitFor } from '@testing-library/react'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { getDefaultSettings } from '../../../../shared/constants'
 import type { GlobalSettings } from '../../../../shared/global-settings-types'
@@ -38,20 +38,7 @@ vi.mock('@/components/ui/tooltip', () => ({
   TooltipContent: ({ children }: { children: ReactNode }) => <>{children}</>
 }))
 
-vi.mock('./SidebarHeader', () => ({
-  default: ({
-    agentToolbar,
-    agentSearchRow
-  }: {
-    agentToolbar?: ReactNode
-    agentSearchRow?: ReactNode
-  }) => (
-    <div data-testid="sidebar-header">
-      {agentToolbar}
-      {agentSearchRow}
-    </div>
-  )
-}))
+vi.mock('./SidebarHeader', () => ({ default: () => <div data-testid="sidebar-header" /> }))
 
 vi.mock('./SidebarAgentsList', () => ({
   default: ({ query }: { query: string }) => (
@@ -240,35 +227,9 @@ describe('Sidebar', () => {
     expect(fetchAllWorktrees).not.toHaveBeenCalled()
   })
 
-  it('clears the agents search query when the search row closes', async () => {
-    setSidebarState(getDefaultSettings(tmpdir()))
-    mocks.state = { ...mocks.state, sidebarBody: 'agents' }
-    const view = render(sidebarElement())
-    const agentsList = await view.findByTestId('sidebar-agents-list')
-
-    const searchToggle = view.getAllByRole('button', { name: 'Search' })[0]
-    fireEvent.click(searchToggle)
-    const searchInput = view.getByPlaceholderText('Filter...')
-    fireEvent.change(searchInput, { target: { value: 'deploy' } })
-    expect(agentsList.getAttribute('data-query')).toBe('deploy')
-
-    // Escape hides the row; a lingering query would silently keep filtering the list.
-    fireEvent.keyDown(searchInput, { key: 'Escape' })
-    expect(view.queryByPlaceholderText('Filter...')).toBeNull()
-    expect(agentsList.getAttribute('data-query')).toBe('')
-
-    fireEvent.click(searchToggle)
-    fireEvent.change(view.getByPlaceholderText('Filter...'), { target: { value: 'again' } })
-    expect(agentsList.getAttribute('data-query')).toBe('again')
-    fireEvent.click(searchToggle)
-    expect(view.queryByPlaceholderText('Filter...')).toBeNull()
-    expect(agentsList.getAttribute('data-query')).toBe('')
-  })
-
   it('closes the dashboard drawer when the dashboard experiment is disabled', async () => {
     setSidebarState({
       ...getDefaultSettings(tmpdir()),
-      showAgentsSidebar: true,
       experimentalAgentDashboardPopout: false
     })
     const setAgentDashboardDrawerOpen = vi.fn()
diff --git a/src/renderer/src/components/sidebar/SidebarAgentsList.tsx b/src/renderer/src/components/sidebar/SidebarAgentsList.tsx
index 75c0c441bad..5d82b56253a 100644
--- a/src/renderer/src/components/sidebar/SidebarAgentsList.tsx
+++ b/src/renderer/src/components/sidebar/SidebarAgentsList.tsx
@@ -1,12 +1,15 @@
 import React, { useCallback, useEffect, useRef, useState } from 'react'
 import { createPortal } from 'react-dom'
+import { useTranslation } from 'react-i18next'
+import { Input } from '@/components/ui/input'
 import { useAppStore } from '@/store'
+import { translate } from '@/i18n/i18n'
 import { ActivityScopeFilterChips } from '@/components/activity/activity-scope-filter-controls'
 import { hasActivityThreadWorkspace } from '@/components/activity/activity-thread-actions'
 import { useActivityThreadActionBindings } from '@/components/activity/use-activity-thread-action-bindings'
 import { ActivityThreadListPane } from '@/components/activity/activity-thread-list-pane'
-import { ActivityThreadOptionsMenu } from '@/components/activity/activity-thread-controls'
 import { useAgentPaneThreads } from '@/components/activity/use-agent-pane-threads'
+import { ActivityThreadOptionsMenu } from '@/components/activity/activity-thread-controls'
 import type { ActivityGroupBy, ThreadReadFilter } from '@/components/activity/activity-thread-types'
 
 /**
@@ -36,14 +39,27 @@ export default function SidebarAgentsList({
   optionsTarget,
   scrollTopRef
 }: SidebarAgentsListProps): React.JSX.Element {
+  // The search row is owned here and mounts conditionally, so subscribe this host to locale changes.
+  useTranslation()
   // Why store-backed: these are persisted preferences (agents* UI fields), unlike the momentary read filter/search.
   const compactMode = useAppStore((s) => s.agentsCompactMode)
   const setCompactMode = useAppStore((s) => s.setAgentsCompactMode)
   const showChildAgents = useAppStore((s) => s.agentsShowChildAgents)
   const setShowChildAgents = useAppStore((s) => s.setAgentsShowChildAgents)
   const [selectedPaneKey, setSelectedPaneKey] = useState<string | null>(null)
+  const [searchOpen, setSearchOpen] = useState(false)
   const activityFilterInputRef = useRef<HTMLInputElement | null>(null)
 
+  useEffect(() => {
+    if (!searchOpen) {
+      return
+    }
+    // Radix restores focus to the menu trigger after selection; focus on the
+    // next frame so the newly mounted search field wins that race.
+    const frame = requestAnimationFrame(() => activityFilterInputRef.current?.focus())
+    return () => cancelAnimationFrame(frame)
+  }, [searchOpen])
+
   const {
     storeData,
     selectedPaneKeyIsLive,
@@ -93,7 +109,32 @@ export default function SidebarAgentsList({
   )
 
   return (
-    <>
+    <div className="flex min-h-0 flex-1 flex-col">
+      {searchOpen ? (
+        <div className="shrink-0 border-b border-border px-2 py-1.5">
+          <Input
+            ref={activityFilterInputRef}
+            autoFocus
+            value={query}
+            onChange={(event) => setQuery(event.target.value)}
+            onKeyDown={(event) => {
+              if (event.key === 'Escape') {
+                setSearchOpen(false)
+                setQuery('')
+              }
+            }}
+            placeholder={translate(
+              'auto.components.activity.ActivityPrototypePage.795cbf26e2',
+              'Filter...'
+            )}
+            className="h-7 w-full text-[11px]"
+            aria-label={translate(
+              'auto.components.activity.ActivityPrototypePage.search',
+              'Search'
+            )}
+          />
+        </div>
+      ) : null}
       <ActivityThreadListPane
         activityFilterInputRef={activityFilterInputRef}
         query={query}
@@ -107,6 +148,9 @@ export default function SidebarAgentsList({
         hasUnreadThreads={hasUnreadThreads}
         onCompactModeChange={setCompactMode}
         onShowChildAgentsChange={setShowChildAgents}
+        onMarkAllThreadsRead={markAllThreadsRead}
+        hasCompletedThreads={hasCompletedThreads}
+        onClearCompleted={handleClearCompleted}
         visibleThreadGroups={visibleThreadGroups}
         visibleThreadCount={visibleThreads.length}
         selectedPaneKey={effectiveSelectedPaneKey}
@@ -119,6 +163,7 @@ export default function SidebarAgentsList({
         showJumpAction={false}
         showFilterControls={false}
         showOptionsMenu={false}
+        showInlineActions={false}
         scopeFilterRow={<ActivityScopeFilterChips />}
         scrollTopRef={scrollTopRef}
       />
@@ -135,10 +180,13 @@ export default function SidebarAgentsList({
               onShowChildAgentsChange={setShowChildAgents}
               onMarkAllThreadsRead={markAllThreadsRead}
               onClearCompleted={handleClearCompleted}
+              onSearch={() => setSearchOpen(true)}
+              unreadOnly={readFilter === 'unread'}
+              onToggleUnread={() => setReadFilter(readFilter === 'unread' ? 'all' : 'unread')}
             />,
             optionsTarget
           )
         : null}
-    </>
+    </div>
   )
 }
diff --git a/src/renderer/src/components/sidebar/SidebarHeader.test.tsx b/src/renderer/src/components/sidebar/SidebarHeader.test.tsx
index 5df9ee619c5..8fff14e1846 100644
--- a/src/renderer/src/components/sidebar/SidebarHeader.test.tsx
+++ b/src/renderer/src/components/sidebar/SidebarHeader.test.tsx
@@ -23,7 +23,6 @@ type MockState = {
   updateSettings: (patch: Record<string, unknown>) => void
   activeContextualTourId: string | null
   settings?: {
-    showAgentsSidebar?: boolean
     experimentalAgentDashboardPopout?: boolean
     agentsSidebarIntroShown?: boolean
     agentsSidebarMigratedFromExperimental?: boolean
@@ -42,7 +41,9 @@ vi.mock('@/components/dashboard/useAgentBucketCounts', () => ({
   useAgentBucketCounts: () => ({ attention: 0, working: 0, done: 0, idle: 0 })
 }))
 
-vi.mock('./SidebarWorkspaceOptionsMenu', () => ({ default: () => null }))
+vi.mock('./SidebarWorkspaceOptionsMenu', () => ({
+  default: () => <button aria-label="Workspace options" type="button" />
+}))
 
 vi.mock('./workspace-options-menu-items', () => ({
   useWorkspaceOptionsFilterBadge: () => ({
@@ -91,17 +92,6 @@ function newWorkspaceButton(): HTMLButtonElement {
   return button
 }
 
-function workspaceViewLabel(): string {
-  const button = container.querySelector<HTMLButtonElement>(
-    'button[data-sidebar-section-title="projects"]'
-  )
-  const label = button?.querySelector<HTMLElement>('span:not([aria-hidden])')?.textContent
-  if (!label) {
-    throw new Error('Workspace view label not rendered')
-  }
-  return label
-}
-
 beforeEach(() => {
   mocks.openWorkspaceCreationComposerWithTourHandoff.mockClear()
   mocks.toast.mockClear()
@@ -114,8 +104,7 @@ beforeEach(() => {
     openModal: vi.fn(),
     updateSettings: vi.fn(),
     activeContextualTourId: null,
-    // Hydrated settings: the Agents tab is hidden until settings load.
-    settings: { showAgentsSidebar: true }
+    settings: {}
   }
   container = document.createElement('div')
   document.body.append(container)
@@ -157,106 +146,99 @@ describe('SidebarHeader', () => {
     expect(mocks.openWorkspaceCreationComposerWithTourHandoff).toHaveBeenCalledTimes(1)
   })
 
-  it('switches sidebar body to agents when clicking the agents tab in workspaces mode', () => {
+  it('opens agent activity from the bell button', () => {
     act(() => {
       root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
     })
 
-    const agentTab = container.querySelector<HTMLButtonElement>(
-      'button[data-sidebar-section-title="agents"]'
+    const activityButton = container.querySelector<HTMLButtonElement>(
+      '[aria-label="View activity"]'
     )
-    expect(agentTab).toBeTruthy()
+    expect(activityButton).toBeTruthy()
 
     act(() => {
-      agentTab?.click()
+      activityButton?.click()
     })
 
     expect(mockState.setSidebarBody).toHaveBeenCalledWith('agents')
   })
 
-  it('switches sidebar body to workspaces when clicking the projects tab in agents mode', () => {
+  it('shows the Agents introduction only for migrated users and never offers a hide action', () => {
+    mockState.settings = { agentsSidebarMigratedFromExperimental: true }
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+
+    expect(container.querySelector('[data-intro-open]')).toBeTruthy()
+    expect(container.textContent).toContain('Agents are easier to find')
+    expect(container.textContent).not.toContain('Hide Agents')
+
+    mockState.settings = {}
+    act(() => {
+      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
+    })
+    expect(container.querySelector('[data-intro-open]')).toBeNull()
+  })
+
+  it('turns off agent activity from the active bell button', () => {
     mockState.sidebarBody = 'agents'
     act(() => {
       root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
     })
 
-    const projectsTab = container.querySelector<HTMLButtonElement>(
-      'button[data-sidebar-section-title="projects"]'
+    const activityButton = container.querySelector<HTMLButtonElement>(
+      '[aria-label="Turn off activity view"]'
     )
-    expect(projectsTab).toBeTruthy()
+    expect(activityButton?.getAttribute('aria-pressed')).toBe('true')
 
     act(() => {
-      projectsTab?.click()
+      activityButton?.click()
     })
 
     expect(mockState.setSidebarBody).toHaveBeenCalledWith('workspaces')
   })
 
-  it('always labels the workspace view as Spaces', () => {
+  it('uses the legacy title based on workspace grouping', () => {
     act(() => {
       root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
     })
 
-    expect(workspaceViewLabel()).toBe('Spaces')
+    expect(container.querySelector('[data-sidebar-section-title="projects"]')?.textContent).toBe(
+      'Projects'
+    )
 
     mockState.groupBy = 'workspace-status'
     act(() => {
       root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
     })
-    expect(workspaceViewLabel()).toBe('Spaces')
-
-    mockState.sidebarBody = 'agents'
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-    expect(workspaceViewLabel()).toBe('Spaces')
-
-    mockState.sidebarBody = 'workspaces'
-    mockState.groupBy = 'none'
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-    expect(workspaceViewLabel()).toBe('Spaces')
-
-    mockState.sidebarBody = 'agents'
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-    expect(workspaceViewLabel()).toBe('Spaces')
+    expect(container.querySelector('[data-sidebar-section-title="workspaces"]')?.textContent).toBe(
+      'Workspaces'
+    )
   })
 
-  it('omits the Agents tab and returns to workspaces when it is disabled', () => {
-    mockState.sidebarBody = 'agents'
-    mockState.settings = { showAgentsSidebar: false }
-
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-
-    expect(container.querySelector('button[data-sidebar-section-title="agents"]')).toBeNull()
-    expect(mockState.setSidebarBody).toHaveBeenCalledWith('workspaces')
-  })
-
-  it('does not render workspace action buttons in agents mode', () => {
+  it('keeps the workspace filter alongside the active bell without Add Project', () => {
     mockState.sidebarBody = 'agents'
     act(() => {
       root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
     })
 
-    expect(container.querySelector('[aria-label="New workspace"]')).toBeNull()
+    expect(container.querySelector('[aria-label="Turn off activity view"]')).toBeTruthy()
+    expect(container.querySelector('[aria-label="New workspace"]')).toBeTruthy()
+    expect(container.querySelector('[aria-label="Workspace options"]')).toBeNull()
     expect(container.querySelector('[aria-label="Add Project"]')).toBeNull()
   })
 
-  it('keeps the view toggle and actions on one row at the default sidebar width', () => {
+  it('keeps the activity bell and actions on one row at the default sidebar width', () => {
     act(() => {
       root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
     })
 
-    const headerRow = container.querySelector('[role="radiogroup"]')?.parentElement
+    const headerRow = container.querySelector('.mt-2')
     const headerClasses = new Set(headerRow?.className.split(/\s+/) ?? [])
     expect(headerClasses.has('flex-wrap')).toBe(false)
-    expect(headerClasses.has('h-9')).toBe(true)
-    expect(container.querySelector('[aria-label="Add Project"]')).toBeTruthy()
+    expect(headerClasses.has('h-8')).toBe(true)
+    expect(container.querySelector('[aria-label="View activity"]')).toBeTruthy()
+    expect(container.querySelector('[aria-label="Add Project"]')).toBeNull()
     expect(container.querySelector('[aria-label="New workspace"]')).toBeTruthy()
   })
 
@@ -267,6 +249,7 @@ describe('SidebarHeader', () => {
     })
 
     expect(container.querySelector('[aria-label="Add Project"]')).toBeNull()
+    expect(container.querySelector('[aria-label="View activity"]')).toBeTruthy()
     expect(container.querySelector('[aria-label="New workspace"]')).toBeTruthy()
     expect(container.querySelector('[aria-label="More workspace actions"]')).toBeTruthy()
 
@@ -276,23 +259,6 @@ describe('SidebarHeader', () => {
     expect(mocks.openWorkspaceCreationComposerWithTourHandoff).toHaveBeenCalledTimes(1)
   })
 
-  it('keeps the intro closed and unstamped before settings hydrate', () => {
-    mockState.settings = undefined
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-
-    expect(container.querySelector('[data-intro-open]')).toBeNull()
-
-    const projectsTab = container.querySelector<HTMLButtonElement>(
-      'button[data-sidebar-section-title="projects"]'
-    )
-    act(() => {
-      projectsTab?.click()
-    })
-    expect(mockState.updateSettings).not.toHaveBeenCalled()
-  })
-
   it('does not reset a persisted agents body before settings hydrate', () => {
     mockState.settings = undefined
     mockState.sidebarBody = 'agents'
@@ -303,102 +269,8 @@ describe('SidebarHeader', () => {
     expect(mockState.setSidebarBody).not.toHaveBeenCalled()
   })
 
-  it('opens the intro once hydrated and stamps it only while it is on screen', () => {
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-
-    expect(container.querySelector('[data-intro-open]')).toBeTruthy()
-
-    const agentTab = container.querySelector<HTMLButtonElement>(
-      'button[data-sidebar-section-title="agents"]'
-    )
-    act(() => {
-      agentTab?.click()
-    })
-    expect(mockState.updateSettings).toHaveBeenCalledWith({ agentsSidebarIntroShown: true })
-  })
-
-  it('hides the Agents tab when a new user chooses Hide Agents', () => {
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-
-    const deferButton = Array.from(container.querySelectorAll('button')).find(
-      (button) => button.textContent?.trim() === 'Hide Agents'
-    )
-    expect(deferButton).toBeTruthy()
-    act(() => {
-      deferButton?.click()
-    })
-
-    expect(mockState.updateSettings).toHaveBeenCalledWith({
-      agentsSidebarIntroShown: true,
-      showAgentsSidebar: false
-    })
-    expect(mocks.toast).toHaveBeenCalledWith(
-      'Agents tab hidden. Re-enable it in Settings → Experimental.'
-    )
-  })
-
-  it('shows only Open Agents for migrated users', () => {
-    mockState.settings = {
-      showAgentsSidebar: true,
-      agentsSidebarMigratedFromExperimental: true
-    }
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-
-    const introButtons = Array.from(container.querySelectorAll('button')).filter((button) =>
-      ['Open Agents', 'Hide Agents'].includes(button.textContent?.trim() ?? '')
-    )
-    expect(introButtons).toHaveLength(1)
-    expect(introButtons[0]?.textContent?.trim()).toBe('Open Agents')
-  })
-
-  it('prevents auto-focus and outside focus transfers from dismissing the intro popover', () => {
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-
-    const props = mocks.popoverContentProps.current as {
-      onOpenAutoFocus?: (event: Event) => void
-      onFocusOutside?: (event: Event) => void
-    } | null
-
-    expect(props).toBeTruthy()
-
-    const openEvent = new Event('openAutoFocus')
-    const openPreventDefault = vi.spyOn(openEvent, 'preventDefault')
-    props?.onOpenAutoFocus?.(openEvent)
-    expect(openPreventDefault).toHaveBeenCalled()
-
-    const focusOutsideEvent = new Event('focusOutside')
-    const focusOutsidePreventDefault = vi.spyOn(focusOutsideEvent, 'preventDefault')
-    props?.onFocusOutside?.(focusOutsideEvent)
-    expect(focusOutsidePreventDefault).toHaveBeenCalled()
-  })
-
-  it('never re-stamps the intro after it was acknowledged', () => {
-    mockState.settings = { showAgentsSidebar: true, agentsSidebarIntroShown: true }
-    act(() => {
-      root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
-    })
-
-    expect(container.querySelector('[data-intro-open]')).toBeNull()
-
-    const agentTab = container.querySelector<HTMLButtonElement>(
-      'button[data-sidebar-section-title="agents"]'
-    )
-    act(() => {
-      agentTab?.click()
-    })
-    expect(mockState.updateSettings).not.toHaveBeenCalled()
-  })
-
   it('does not expose the deprecated full Agents view in agents mode', () => {
-    mockState.settings = { showAgentsSidebar: true, agentsSidebarIntroShown: true }
+    mockState.settings = { agentsSidebarIntroShown: true }
     mockState.sidebarBody = 'agents'
     act(() => {
       root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
@@ -419,6 +291,6 @@ describe('SidebarHeader', () => {
       root.render(<SidebarHeader onWorkspaceBoardMenuOpenChange={vi.fn()} />)
     })
     expect(container.querySelector('[aria-label="More workspace actions"]')).toBeNull()
-    expect(container.querySelector('[aria-label="Add Project"]')).toBeTruthy()
+    expect(container.querySelector('[aria-label="Add Project"]')).toBeNull()
   })
 })
diff --git a/src/renderer/src/components/sidebar/SidebarHeader.tsx b/src/renderer/src/components/sidebar/SidebarHeader.tsx
index dfc22c8b1bc..fafd7094034 100644
--- a/src/renderer/src/components/sidebar/SidebarHeader.tsx
+++ b/src/renderer/src/components/sidebar/SidebarHeader.tsx
@@ -1,72 +1,58 @@
-import React, { useEffect, useId } from 'react'
+import React, { useId } from 'react'
 import { useTranslation } from 'react-i18next'
 import { useAppStore } from '@/store'
 import { translate } from '@/i18n/i18n'
-import { SidebarViewToggle } from './sidebar-view-toggle'
 import { SidebarHeaderActions } from './sidebar-header-actions'
-import { shouldShowAgentsSidebar } from './agents-sidebar-visibility'
-import { Popover, PopoverAnchor, PopoverArrow, PopoverContent } from '@/components/ui/popover'
 import { Button } from '@/components/ui/button'
-import { Sparkles } from 'lucide-react'
-import { toast } from 'sonner'
+import { Popover, PopoverAnchor, PopoverArrow, PopoverContent } from '@/components/ui/popover'
+import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
+import { Sparkles, Bell } from 'lucide-react'
+import { cn } from '@/lib/utils'
 
 type SidebarHeaderProps = {
   onWorkspaceBoardMenuOpenChange: (open: boolean) => void
-  agentToolbar?: React.ReactNode
-  agentSearchRow?: React.ReactNode
-  showAgentsSidebar?: boolean
+  activityOptionsTarget?: React.Ref<HTMLDivElement>
 }
 
 const SidebarHeader = React.memo(function SidebarHeader({
   onWorkspaceBoardMenuOpenChange,
-  agentToolbar,
-  agentSearchRow,
-  showAgentsSidebar: showAgentsSidebarProp
+  activityOptionsTarget
 }: SidebarHeaderProps) {
   // Subscribe this memoized header to locale changes before using translate().
   useTranslation()
   const sidebarBody = useAppStore((s) => s.sidebarBody ?? 'workspaces')
-  // Why the derived boolean, not s.settings: the settings object gets a new identity on
-  // every write, which would re-render this memoized header subtree each time.
-  const showAgentsSidebarFromStore = useAppStore((s) => shouldShowAgentsSidebar(s.settings))
-  const showAgentsSidebar = showAgentsSidebarProp ?? showAgentsSidebarFromStore
+  const groupBy = useAppStore((s) => s.groupBy)
   const setSidebarBody = useAppStore((s) => s.setSidebarBody)
   const updateSettings = useAppStore((s) => s.updateSettings)
+  const agentsViewActive = sidebarBody === 'agents'
   const agentsSidebarIntroShown = useAppStore((s) => s.settings?.agentsSidebarIntroShown === true)
   const migratedFromExperimental = useAppStore(
     (s) => s.settings?.agentsSidebarMigratedFromExperimental === true
   )
   const introTitleId = useId()
   const introDescriptionId = useId()
-  // Why: settings are null until hydration; deriving intro visibility from the
-  // null default would flash the popover open (and stamp it shown) every launch.
-  const settingsHydrated = useAppStore((s) => s.settings != null)
-  const agentsViewActive = showAgentsSidebar && sidebarBody === 'agents'
-  const introOpen = settingsHydrated && showAgentsSidebar && !agentsSidebarIntroShown
+  // Existing users who opted into the former Experimental Agents view get one explanation.
+  const introOpen = migratedFromExperimental && !agentsSidebarIntroShown
   const acknowledgeIntro = React.useCallback(() => {
     void updateSettings?.({ agentsSidebarIntroShown: true })
   }, [updateSettings])
-  const deferAgentsIntro = React.useCallback(() => {
-    // Hide the new tab; users can re-enable it in Settings.
-    void updateSettings?.({ agentsSidebarIntroShown: true, showAgentsSidebar: false })
-    toast(
-      translate(
-        'agentsSidebarIntro.new.hiddenToast',
-        'Agents tab hidden. Re-enable it in Settings → Experimental.'
-      )
-    )
-  }, [updateSettings])
-
-  useEffect(() => {
-    // Wait for hydration: settings null must not clobber a persisted 'agents' body.
-    if (settingsHydrated && !showAgentsSidebar && sidebarBody === 'agents') {
-      setSidebarBody?.('workspaces')
-    }
-  }, [setSidebarBody, settingsHydrated, showAgentsSidebar, sidebarBody])
+  const sidebarTitle = groupBy === 'repo' ? 'Projects' : 'Workspaces'
+  const activityLabel = translate(
+    agentsViewActive ? 'dashboard.sidebar.closeActivity' : 'dashboard.sidebar.openActivity',
+    agentsViewActive ? 'Turn off activity view' : 'View activity'
+  )
 
   return (
-    <>
-      <div className="mt-2 flex h-9 min-w-0 items-center justify-between gap-1.5 px-2">
+    <div className="mt-2 flex h-8 min-w-0 items-center justify-between gap-1.5 px-2">
+      <div className="flex min-w-0 items-center gap-1">
+        <span
+          className="select-none pl-2 pr-0.5 text-xs font-semibold text-muted-foreground/80"
+          data-sidebar-section-title={groupBy === 'repo' ? 'projects' : 'workspaces'}
+        >
+          {sidebarTitle}
+        </span>
+      </div>
+      <div className="flex shrink-0 items-center gap-1">
         <Popover
           open={introOpen}
           onOpenChange={(open) => {
@@ -75,133 +61,71 @@ const SidebarHeader = React.memo(function SidebarHeader({
             }
           }}
         >
-          <div className="flex h-9 items-center">
-            <SidebarViewToggle
-              ariaLabel={translate('auto.components.sidebar.SidebarHeader.views', 'Sidebar view')}
-              value={agentsViewActive ? 'agents' : 'workspaces'}
-              onSelect={(value) => {
-                // Only stamp the intro as seen when it is actually on screen.
-                if (introOpen) {
-                  acknowledgeIntro()
-                }
-                setSidebarBody?.(value as 'workspaces' | 'agents')
-              }}
-              options={[
-                {
-                  value: 'workspaces',
-                  label: translate('auto.components.sidebar.SidebarHeader.spaces', 'Spaces'),
-                  sectionTitle: 'projects'
-                },
-                ...(showAgentsSidebar
-                  ? [
-                      {
-                        value: 'agents' as const,
-                        label: translate('dashboard.sidebar.label', 'Agents'),
-                        sectionTitle: 'agents' as const,
-                        renderWrapper: (button: React.ReactNode) => (
-                          <PopoverAnchor asChild>{button}</PopoverAnchor>
-                        )
-                      }
-                    ]
-                  : [])
-              ]}
-            />
-          </div>
-          {/* Why: prevent startup terminal/editor auto-focus from dismissing the intro popover. */}
+          <Tooltip>
+            <TooltipTrigger asChild>
+              <span className="inline-flex shrink-0">
+                <PopoverAnchor asChild>
+                  <Button
+                    type="button"
+                    variant="ghost"
+                    size="icon-xs"
+                    className={cn(
+                      'text-muted-foreground',
+                      agentsViewActive && 'bg-primary/15 text-primary hover:bg-primary/20'
+                    )}
+                    aria-label={activityLabel}
+                    aria-pressed={agentsViewActive}
+                    onClick={() => setSidebarBody?.(agentsViewActive ? 'workspaces' : 'agents')}
+                  >
+                    <Bell className="size-3.5" strokeWidth={2.25} />
+                  </Button>
+                </PopoverAnchor>
+              </span>
+            </TooltipTrigger>
+            <TooltipContent side="bottom" sideOffset={6}>
+              {activityLabel}
+            </TooltipContent>
+          </Tooltip>
           <PopoverContent
             side="bottom"
             align="center"
             sideOffset={8}
-            className="w-72 overflow-visible rounded-xl border border-border bg-popover p-3.5 text-popover-foreground shadow-floating"
+            className="w-72 rounded-xl border border-border bg-popover p-3.5 text-popover-foreground shadow-floating"
             onOpenAutoFocus={(event) => event.preventDefault()}
-            onFocusOutside={(event) => event.preventDefault()}
             aria-labelledby={introTitleId}
             aria-describedby={introDescriptionId}
           >
-            <PopoverArrow asChild width={14} height={7} className="overflow-visible">
-              <svg
-                viewBox="0 0 30 10"
-                preserveAspectRatio="none"
-                className="block overflow-visible"
-              >
-                <polygon points="0,0 30,0 15,10" className="fill-popover" />
-                <path d="M0 0 L15 10 L30 0" fill="none" className="stroke-border stroke-[1.5]" />
-              </svg>
-            </PopoverArrow>
+            <PopoverArrow />
             <div className="space-y-2.5">
-              <svg width="0" height="0" className="absolute pointer-events-none" aria-hidden="true">
-                <defs>
-                  <linearGradient id="agents-intro-aquatic" x1="0%" y1="0%" x2="100%" y2="100%">
-                    <stop offset="0%" stopColor="#10b981" />
-                    <stop offset="45%" stopColor="#06b6d4" />
-                    <stop offset="100%" stopColor="#2563eb" />
-                  </linearGradient>
-                </defs>
-              </svg>
-              <div className="space-y-1">
-                <div className="flex items-center gap-1.5">
-                  <Sparkles
-                    className="size-4 shrink-0"
-                    stroke="url(#agents-intro-aquatic)"
-                    fill="url(#agents-intro-aquatic)"
-                    fillOpacity={0.15}
-                    strokeWidth={2}
-                  />
-                  <h3 id={introTitleId} className="text-sm font-semibold text-foreground">
-                    {migratedFromExperimental
-                      ? translate('agentsSidebarIntro.migrated.title', 'Agents are easier to find')
-                      : translate('agentsSidebarIntro.new.title', 'Meet your Agents tab')}
-                  </h3>
-                </div>
-                <p
-                  id={introDescriptionId}
-                  className="text-xs leading-relaxed text-muted-foreground"
-                >
-                  {migratedFromExperimental
-                    ? translate(
-                        'agentsSidebarIntro.migrated.description',
-                        'Your Agents view is now a dedicated sidebar tab. Your activity and filters are preserved.'
-                      )
-                    : translate(
-                        'agentsSidebarIntro.new.description',
-                        'See what your agents are working on, what is done, and where you need to step in.'
-                      )}
-                </p>
+              <div className="flex items-center gap-1.5">
+                <Sparkles className="size-4 shrink-0 text-primary" aria-hidden="true" />
+                <h3 id={introTitleId} className="text-sm font-semibold text-foreground">
+                  {translate('agentsSidebarIntro.migrated.title', 'Agents are easier to find')}
+                </h3>
               </div>
-              <div className="flex justify-end items-center gap-2 pt-0.5">
-                {!migratedFromExperimental ? (
-                  <Button variant="ghost" size="sm" onClick={deferAgentsIntro}>
-                    {translate('agentsSidebarIntro.new.hide', 'Hide Agents')}
-                  </Button>
-                ) : null}
-                <Button
-                  size="sm"
-                  className="border-0 bg-[linear-gradient(135deg,#10b981_0%,#06b6d4_45%,#2563eb_100%)] text-white font-medium shadow-xs hover:brightness-105 active:scale-[0.98] transition-all"
-                  onClick={() => {
-                    acknowledgeIntro()
-                    setSidebarBody?.('agents')
-                  }}
-                >
-                  {migratedFromExperimental
-                    ? translate('agentsSidebarIntro.migrated.action', 'Open Agents')
-                    : translate('agentsSidebarIntro.new.action', 'Try Agents')}
+              <p id={introDescriptionId} className="text-xs leading-relaxed text-muted-foreground">
+                {translate(
+                  'agentsSidebarIntro.migrated.description',
+                  'Your Agents view is now a dedicated sidebar tab. Your activity and filters are preserved.'
+                )}
+              </p>
+              <div className="flex justify-end pt-0.5">
+                <Button size="sm" onClick={acknowledgeIntro}>
+                  {translate('agentsSidebarIntro.migrated.dismiss', 'Got it')}
                 </Button>
               </div>
             </div>
           </PopoverContent>
         </Popover>
         {agentsViewActive ? (
-          <div className="flex shrink-0 items-center gap-0.5">
-            {/* Do not add an expand action: the full Agents view is deprecated and must not open. */}
-            {agentToolbar}
-          </div>
-        ) : null}
-        {!agentsViewActive ? (
-          <SidebarHeaderActions onWorkspaceBoardMenuOpenChange={onWorkspaceBoardMenuOpenChange} />
+          <div ref={activityOptionsTarget} className="flex items-center" />
         ) : null}
+        <SidebarHeaderActions
+          onWorkspaceBoardMenuOpenChange={onWorkspaceBoardMenuOpenChange}
+          hideWorkspaceOptions={agentsViewActive}
+        />
       </div>
-      {agentsViewActive ? agentSearchRow : null}
-    </>
+    </div>
   )
 })
 
diff --git a/src/renderer/src/components/sidebar/SidebarNav.test.tsx b/src/renderer/src/components/sidebar/SidebarNav.test.tsx
index e3612db3858..5d72c8c1706 100644
--- a/src/renderer/src/components/sidebar/SidebarNav.test.tsx
+++ b/src/renderer/src/components/sidebar/SidebarNav.test.tsx
@@ -229,7 +229,6 @@ describe('SidebarNav', () => {
     setSidebarState({
       settings: {
         ...getDefaultSettings('/tmp'),
-        showAgentsSidebar: false,
         experimentalAgentDashboardPopout: true
       }
     })
diff --git a/src/renderer/src/components/sidebar/agents-sidebar-visibility.test.ts b/src/renderer/src/components/sidebar/agents-sidebar-visibility.test.ts
deleted file mode 100644
index 21639737994..00000000000
--- a/src/renderer/src/components/sidebar/agents-sidebar-visibility.test.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-import { describe, expect, it } from 'vitest'
-import { shouldShowAgentsSidebar } from './agents-sidebar-visibility'
-
-describe('shouldShowAgentsSidebar', () => {
-  it('hides while settings are not yet hydrated', () => {
-    expect(shouldShowAgentsSidebar(null)).toBe(false)
-    expect(shouldShowAgentsSidebar(undefined)).toBe(false)
-  })
-
-  it('defaults on and honors only the dedicated setting', () => {
-    expect(shouldShowAgentsSidebar({})).toBe(true)
-    expect(shouldShowAgentsSidebar({ showAgentsSidebar: true })).toBe(true)
-    expect(shouldShowAgentsSidebar({ showAgentsSidebar: false })).toBe(false)
-  })
-})
diff --git a/src/renderer/src/components/sidebar/agents-sidebar-visibility.ts b/src/renderer/src/components/sidebar/agents-sidebar-visibility.ts
deleted file mode 100644
index f0e978a4d2c..00000000000
--- a/src/renderer/src/components/sidebar/agents-sidebar-visibility.ts
+++ /dev/null
@@ -1,11 +0,0 @@
-import {
-  resolveAgentsSidebarVisible,
-  type AgentsSidebarVisibilitySettings
-} from '../../../../shared/agents-sidebar-visibility'
-
-export function shouldShowAgentsSidebar(
-  settings: Partial<AgentsSidebarVisibilitySettings> | null | undefined
-): boolean {
-  // Settings hydrate after first render; avoid flashing UI for opted-out profiles.
-  return settings ? resolveAgentsSidebarVisible(settings) : false
-}
diff --git a/src/renderer/src/components/sidebar/index.tsx b/src/renderer/src/components/sidebar/index.tsx
index 20d2fef711f..90c31999bd3 100644
--- a/src/renderer/src/components/sidebar/index.tsx
+++ b/src/renderer/src/components/sidebar/index.tsx
@@ -1,20 +1,16 @@
 import React, { useEffect, useMemo } from 'react'
-import { useTranslation } from 'react-i18next'
 import { useAppStore } from '@/store'
-import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from '@/components/ui/tooltip'
+import { TooltipProvider } from '@/components/ui/tooltip'
 import { useSidebarResize } from '@/hooks/useSidebarResize'
 import SidebarHeader from './SidebarHeader'
 import SidebarNav from './SidebarNav'
-import { shouldShowAgentsSidebar } from './agents-sidebar-visibility'
 import SetupScriptPromptCard from './SetupScriptPromptCard'
 import WorktreeList from './WorktreeList'
 import SidebarToolbar from './SidebarToolbar'
 import WorkspaceKanbanDrawer from './WorkspaceKanbanDrawer'
 import type { VirtualizedScrollAnchor } from '@/hooks/useVirtualizedScrollAnchor'
 import { cn } from '@/lib/utils'
-import { BellDot, FolderPlus, Loader2, Search } from 'lucide-react'
-import { Button } from '@/components/ui/button'
-import { Input } from '@/components/ui/input'
+import { FolderPlus, Loader2 } from 'lucide-react'
 import type { ActivityGroupBy, ThreadReadFilter } from '@/components/activity/activity-thread-types'
 import { ActivityThreadCollapseContext } from '@/components/activity/activity-thread-collapse-context'
 import { useSidebarProjectDrop } from './useSidebarProjectDrop'
@@ -23,7 +19,6 @@ import { useWorkspaceRevealBodyRedirect } from './use-workspace-reveal-body-redi
 import { resolveLeftSidebarStyleVariables } from '@/lib/left-sidebar-appearance'
 import { useSystemPrefersDark } from '@/components/terminal-pane/use-system-prefers-dark'
 import { lazyWithRetry } from '@/lib/lazy-with-retry'
-import { translate } from '@/i18n/i18n'
 
 // Why lazy: the Agents list pulls the whole activity pipeline (virtualizer, markdown
 // previews, thread derivation); users on the workspace view should not load or render any of it.
@@ -54,14 +49,6 @@ function Sidebar({
   worktreeScrollOffsetRef,
   worktreeScrollAnchorRef
 }: SidebarProps): React.JSX.Element {
-  // Why: the memoized toolbar/search JSX below is localized, so it needs both a
-  // language subscription here and the locale as a memo dep to refresh on a switch.
-  const { i18n } = useTranslation()
-  const locale = i18n.resolvedLanguage ?? i18n.language
-  const sidebarTranslate = React.useCallback(
-    (key: string, fallback: string): string => translate(key, fallback, { lng: locale }),
-    [locale]
-  )
   const sidebarOpen = useAppStore((s) => s.sidebarOpen)
   const sidebarWidth = useAppStore((s) => s.sidebarWidth)
   const setSidebarWidth = useAppStore((s) => s.setSidebarWidth)
@@ -69,19 +56,12 @@ function Sidebar({
   const startupWorktreeRefreshCompleted = useAppStore((s) => s.startupWorktreeRefreshCompleted)
   const settings = useAppStore((s) => s.settings)
   const sidebarBody = useAppStore((s) => s.sidebarBody ?? 'workspaces')
-  const showAgentsSidebar = shouldShowAgentsSidebar(settings)
   const showAgentDashboard = settings?.experimentalAgentDashboardPopout === true
   const agentDashboardDrawerOpen = useAppStore((s) => s.agentDashboardDrawerOpen)
   const setAgentDashboardDrawerOpen = useAppStore((s) => s.setAgentDashboardDrawerOpen)
   const [agentReadFilter, setAgentReadFilter] = React.useState<ThreadReadFilter>('all')
   const [agentGroupBy, setAgentGroupBy] = React.useState<ActivityGroupBy>('status')
   const [agentQuery, setAgentQuery] = React.useState('')
-  const [agentSearchOpen, setAgentSearchOpen] = React.useState(false)
-  // Why clear on close: the hidden input's query would keep filtering the list with no visible indicator.
-  const closeAgentSearch = React.useCallback(() => {
-    setAgentSearchOpen(false)
-    setAgentQuery('')
-  }, [])
   const [agentOptionsTarget, setAgentOptionsTarget] = React.useState<HTMLDivElement | null>(null)
   const agentsScrollTopRef = React.useRef(0)
   // Held here so collapsed groups (and the layout the saved scrollTop assumes)
@@ -165,106 +145,7 @@ function Sidebar({
     onDraftWidthChange: setLiveSidebarWidth
   })
 
-  // Why memoized: SidebarHeader is React.memo; fresh JSX here on every Sidebar render would
-  // defeat that memo and re-render the header subtree on unrelated store churn.
-  const agentToolbar = useMemo(
-    () => (
-      <div className="flex items-center gap-1 shrink-0">
-        <Tooltip>
-          <TooltipTrigger asChild>
-            <Button
-              type="button"
-              variant="ghost"
-              size="icon-xs"
-              className={cn(
-                'text-muted-foreground',
-                agentSearchOpen &&
-                  'border border-primary/50 bg-primary/20 text-primary hover:bg-primary/30'
-              )}
-              aria-label={sidebarTranslate(
-                'auto.components.activity.ActivityPrototypePage.search',
-                'Search'
-              )}
-              aria-pressed={agentSearchOpen}
-              onClick={() => {
-                if (agentSearchOpen) {
-                  closeAgentSearch()
-                } else {
-                  setAgentSearchOpen(true)
-                }
-              }}
-            >
-              <Search className="size-3.5" strokeWidth={2.25} />
-            </Button>
-          </TooltipTrigger>
-          <TooltipContent side="bottom" sideOffset={6}>
-            {sidebarTranslate('auto.components.activity.ActivityPrototypePage.search', 'Search')}
-          </TooltipContent>
-        </Tooltip>
-        <Tooltip>
-          <TooltipTrigger asChild>
-            <Button
-              type="button"
-              variant="ghost"
-              size="icon-xs"
-              aria-pressed={agentReadFilter === 'unread'}
-              onClick={() =>
-                setAgentReadFilter((filter) => (filter === 'unread' ? 'all' : 'unread'))
-              }
-              className={cn(
-                'text-muted-foreground',
-                agentReadFilter === 'unread' &&
-                  'border border-primary/50 bg-primary/20 text-primary hover:bg-primary/30'
-              )}
-              aria-label={sidebarTranslate(
-                'auto.components.activity.ActivityPrototypePage.d1a88df9a8',
-                'Show unread threads only'
-              )}
-            >
-              <BellDot className="size-3.5" strokeWidth={2.25} />
-            </Button>
-          </TooltipTrigger>
-          <TooltipContent side="bottom" sideOffset={6}>
-            {sidebarTranslate(
-              'auto.components.activity.ActivityPrototypePage.d1a88df9a8',
-              'Show unread threads only'
-            )}
-          </TooltipContent>
-        </Tooltip>
-        <div ref={setAgentOptionsTarget} className="flex items-center" />
-      </div>
-    ),
-    [agentReadFilter, agentSearchOpen, closeAgentSearch, sidebarTranslate]
-  )
-  const agentSearchRow = useMemo(
-    () =>
-      agentSearchOpen ? (
-        <div className="shrink-0 border-b border-border px-2 py-1.5">
-          <Input
-            autoFocus
-            value={agentQuery}
-            onChange={(event) => setAgentQuery(event.target.value)}
-            onKeyDown={(event) => {
-              if (event.key === 'Escape') {
-                closeAgentSearch()
-              }
-            }}
-            placeholder={sidebarTranslate(
-              'auto.components.activity.ActivityPrototypePage.795cbf26e2',
-              'Filter...'
-            )}
-            className="h-7 w-full text-[11px]"
-            aria-label={sidebarTranslate(
-              'auto.components.activity.ActivityPrototypePage.search',
-              'Search'
-            )}
-          />
-        </div>
-      ) : null,
-    [agentQuery, agentSearchOpen, closeAgentSearch, sidebarTranslate]
-  )
-
-  useWorkspaceRevealBodyRedirect(sidebarOpen && sidebarBody === 'agents' && showAgentsSidebar)
+  useWorkspaceRevealBodyRedirect(sidebarOpen && sidebarBody === 'agents')
 
   return (
     <TooltipProvider delayDuration={400}>
@@ -281,11 +162,9 @@ function Sidebar({
             <SidebarNav />
             <SidebarHeader
               onWorkspaceBoardMenuOpenChange={setWorkspaceBoardMenuOpen}
-              showAgentsSidebar={showAgentsSidebar}
-              agentToolbar={agentToolbar}
-              agentSearchRow={agentSearchRow}
+              activityOptionsTarget={setAgentOptionsTarget}
             />
-            {sidebarBody === 'agents' && showAgentsSidebar ? (
+            {sidebarBody === 'agents' ? (
               <React.Suspense fallback={<div className="min-h-0 flex-1" />}>
                 <ActivityThreadCollapseContext.Provider value={agentsCollapseState}>
                   <SidebarAgentsList
diff --git a/src/renderer/src/components/sidebar/sidebar-header-actions.tsx b/src/renderer/src/components/sidebar/sidebar-header-actions.tsx
index fda4f3ebb8b..9d92afe1b46 100644
--- a/src/renderer/src/components/sidebar/sidebar-header-actions.tsx
+++ b/src/renderer/src/components/sidebar/sidebar-header-actions.tsx
@@ -22,29 +22,6 @@ import {
 
 export const SIDEBAR_HEADER_WIDE_MIN_WIDTH = 235
 
-function AddProjectButton(): React.JSX.Element {
-  const openModal = useAppStore((s) => s.openModal)
-  return (
-    <Tooltip>
-      <TooltipTrigger asChild>
-        <Button
-          variant="ghost"
-          size="icon-xs"
-          type="button"
-          className="text-muted-foreground"
-          aria-label={translate('auto.components.sidebar.SidebarHeader.25a95899c9', 'Add Project')}
-          onClick={() => openModal('add-repo')}
-        >
-          <FolderPlus className="size-3.5" strokeWidth={2.25} />
-        </Button>
-      </TooltipTrigger>
-      <TooltipContent side="bottom" sideOffset={6}>
-        {translate('auto.components.sidebar.SidebarHeader.25a95899c9', 'Add Project')}
-      </TooltipContent>
-    </Tooltip>
-  )
-}
-
 function CompactWorkspaceOverflow({
   preserveWorkspaceBoardOpen,
   onMenuOpenChange
@@ -109,9 +86,11 @@ function CompactWorkspaceOverflow({
 }
 
 export function SidebarHeaderActions({
-  onWorkspaceBoardMenuOpenChange
+  onWorkspaceBoardMenuOpenChange,
+  hideWorkspaceOptions = false
 }: {
   onWorkspaceBoardMenuOpenChange: (open: boolean) => void
+  hideWorkspaceOptions?: boolean
 }): React.JSX.Element {
   const sidebarWidth = useAppStore((s) => s.sidebarWidth)
   const newWorktreeShortcutLabel = useShortcutLabel('workspace.create')
@@ -145,22 +124,24 @@ export function SidebarHeaderActions({
             )}
           </TooltipContent>
         </Tooltip>
-        <CompactWorkspaceOverflow
-          preserveWorkspaceBoardOpen
-          onMenuOpenChange={onWorkspaceBoardMenuOpenChange}
-        />
+        {hideWorkspaceOptions ? null : (
+          <CompactWorkspaceOverflow
+            preserveWorkspaceBoardOpen
+            onMenuOpenChange={onWorkspaceBoardMenuOpenChange}
+          />
+        )}
       </div>
     )
   }
 
   return (
     <div className="flex shrink-0 items-center gap-1">
-      <SidebarWorkspaceOptionsMenu
-        preserveWorkspaceBoardOpen
-        onMenuOpenChange={onWorkspaceBoardMenuOpenChange}
-      />
-
-      <AddProjectButton />
+      {hideWorkspaceOptions ? null : (
+        <SidebarWorkspaceOptionsMenu
+          preserveWorkspaceBoardOpen
+          onMenuOpenChange={onWorkspaceBoardMenuOpenChange}
+        />
+      )}
 
       <Tooltip>
         <TooltipTrigger asChild>
diff --git a/src/renderer/src/components/sidebar/sidebar-view-toggle.test.tsx b/src/renderer/src/components/sidebar/sidebar-view-toggle.test.tsx
deleted file mode 100644
index 38893fb8f2d..00000000000
--- a/src/renderer/src/components/sidebar/sidebar-view-toggle.test.tsx
+++ /dev/null
@@ -1,145 +0,0 @@
-// @vitest-environment happy-dom
-
-import { act } from 'react'
-import { createRoot, type Root } from 'react-dom/client'
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import { SidebarViewToggle } from './sidebar-view-toggle'
-
-;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
-
-let container: HTMLDivElement
-let root: Root
-
-beforeEach(() => {
-  container = document.createElement('div')
-  document.body.append(container)
-  root = createRoot(container)
-})
-
-afterEach(() => {
-  act(() => root.unmount())
-  container.remove()
-})
-
-describe('SidebarViewToggle', () => {
-  it('exposes radio semantics with a roving tabindex so arrow keys move between tabs', () => {
-    act(() => {
-      root.render(
-        <SidebarViewToggle
-          ariaLabel="Sidebar view"
-          value="agents"
-          onSelect={() => undefined}
-          options={[
-            { value: 'workspaces', label: 'Spaces', sectionTitle: 'projects' },
-            { value: 'agents', label: 'Agents', sectionTitle: 'agents' }
-          ]}
-        />
-      )
-    })
-
-    const items = [...container.querySelectorAll('[role="radio"]')]
-    expect(items).toHaveLength(2)
-    const agents = container.querySelector('[data-sidebar-section-title="agents"]')
-    const projects = container.querySelector('[data-sidebar-section-title="projects"]')
-    expect(agents?.getAttribute('aria-checked')).toBe('true')
-    expect(projects?.getAttribute('aria-checked')).toBe('false')
-    // Only one tab is in the tab order (roving tabindex); arrow keys reach the other.
-    const tabStops = items.map((item) => item.getAttribute('tabindex'))
-    expect(tabStops.filter((stop) => stop === '0')).toHaveLength(1)
-    expect(tabStops.filter((stop) => stop === '-1')).toHaveLength(1)
-  })
-
-  it('never deselects when the active tab is clicked again', () => {
-    const onSelect = vi.fn()
-    act(() => {
-      root.render(
-        <SidebarViewToggle
-          ariaLabel="Sidebar view"
-          value="agents"
-          onSelect={onSelect}
-          options={[
-            { value: 'workspaces', label: 'Spaces', sectionTitle: 'projects' },
-            { value: 'agents', label: 'Agents', sectionTitle: 'agents' }
-          ]}
-        />
-      )
-    })
-    const agents = container.querySelector<HTMLButtonElement>(
-      '[data-sidebar-section-title="agents"]'
-    )
-    act(() => agents?.click())
-    expect(onSelect).not.toHaveBeenCalled()
-    const projects = container.querySelector<HTMLButtonElement>(
-      '[data-sidebar-section-title="projects"]'
-    )
-    act(() => projects?.click())
-    expect(onSelect).toHaveBeenCalledWith('workspaces')
-  })
-
-  it('moves focus to the radio an arrow key selects', () => {
-    // Without the focus move, every later arrow press steps from the old index and
-    // keeps re-selecting the same neighbour.
-    const onSelect = vi.fn()
-    act(() => {
-      root.render(
-        <SidebarViewToggle
-          ariaLabel="Sidebar view"
-          value="workspaces"
-          onSelect={onSelect}
-          options={[
-            { value: 'workspaces', label: 'Spaces', sectionTitle: 'projects' },
-            { value: 'agents', label: 'Agents', sectionTitle: 'agents' }
-          ]}
-        />
-      )
-    })
-
-    const projects = container.querySelector<HTMLButtonElement>(
-      '[data-sidebar-section-title="projects"]'
-    )
-    act(() => {
-      projects?.focus()
-      projects?.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'ArrowRight', bubbles: true, cancelable: true })
-      )
-    })
-
-    expect(onSelect).toHaveBeenCalledWith('agents')
-    expect(document.activeElement).toBe(
-      container.querySelector('[data-sidebar-section-title="agents"]')
-    )
-  })
-
-  it('keeps the visible label on one line', () => {
-    act(() => {
-      root.render(
-        <SidebarViewToggle
-          ariaLabel="Sidebar view"
-          value="workspaces"
-          onSelect={() => undefined}
-          options={[
-            {
-              value: 'workspaces',
-              label: 'Spaces',
-              sectionTitle: 'projects'
-            },
-            { value: 'agents', label: 'Agents', sectionTitle: 'agents' }
-          ]}
-        />
-      )
-    })
-
-    const group = container.querySelector('[role="radiogroup"]')
-    const groupClasses = new Set(group?.className.split(/\s+/) ?? [])
-    expect(groupClasses.has('inline-flex')).toBe(true)
-    expect(groupClasses.has('shrink-0')).toBe(true)
-    expect(groupClasses.has('flex-1')).toBe(false)
-
-    const spacesTab = container.querySelector('[data-sidebar-section-title="projects"]')
-    const visibleLabel = [...(spacesTab?.querySelectorAll('span') ?? [])].find(
-      (span) => span.getAttribute('aria-hidden') == null && span.textContent === 'Spaces'
-    )
-    expect(visibleLabel?.className).toContain('whitespace-nowrap')
-    expect(visibleLabel?.className.includes('truncate')).toBe(false)
-  })
-})
diff --git a/src/renderer/src/components/sidebar/sidebar-view-toggle.tsx b/src/renderer/src/components/sidebar/sidebar-view-toggle.tsx
deleted file mode 100644
index 888f4f851c7..00000000000
--- a/src/renderer/src/components/sidebar/sidebar-view-toggle.tsx
+++ /dev/null
@@ -1,106 +0,0 @@
-import React from 'react'
-import { cn } from '@/lib/utils'
-
-type SidebarViewToggleOption = {
-  value: string
-  label: string
-  /** Every label this slot can ever show; reserves width so switching never resizes the tab. */
-  widthLabels?: readonly string[]
-  sectionTitle?: string
-  renderWrapper?: (button: React.ReactNode) => React.ReactNode
-}
-
-type SidebarViewToggleProps = {
-  ariaLabel: string
-  value: string
-  options: readonly SidebarViewToggleOption[]
-  onSelect: (value: string) => void
-  className?: string
-}
-
-/** Two-up segmented control; tab widths stay frozen so nothing reflows on toggle. */
-export function SidebarViewToggle({
-  ariaLabel,
-  value,
-  options,
-  onSelect,
-  className
-}: SidebarViewToggleProps): React.JSX.Element {
-  const buttonRefs = React.useRef<(HTMLButtonElement | null)[]>([])
-  // Arrow keys must carry focus to the newly checked radio, or every later press
-  // would still step from the old index and re-select the same neighbour.
-  const selectAndFocus = (index: number): void => {
-    const option = options[index]
-    if (!option) {
-      return
-    }
-    if (option.value !== value) {
-      onSelect(option.value)
-    }
-    buttonRefs.current[index]?.focus()
-  }
-  return (
-    <div
-      role="radiogroup"
-      aria-label={ariaLabel}
-      className={cn(
-        'inline-flex shrink-0 items-center rounded-lg border border-sidebar-border bg-sidebar-accent p-0.5 shadow-xs',
-        className
-      )}
-    >
-      {options.map((option, index) => {
-        const active = option.value === value
-        const button = (
-          <button
-            key={option.value}
-            ref={(element) => {
-              buttonRefs.current[index] = element
-            }}
-            type="button"
-            role="radio"
-            tabIndex={active ? 0 : -1}
-            aria-checked={active}
-            data-sidebar-section-title={option.sectionTitle}
-            onClick={() => {
-              if (!active) {
-                onSelect(option.value)
-              }
-            }}
-            onKeyDown={(e) => {
-              if (e.key === 'ArrowRight' || e.key === 'ArrowDown') {
-                e.preventDefault()
-                selectAndFocus((index + 1) % options.length)
-              } else if (e.key === 'ArrowLeft' || e.key === 'ArrowUp') {
-                e.preventDefault()
-                selectAndFocus((index - 1 + options.length) % options.length)
-              }
-            }}
-            className={cn(
-              'relative grid grid-cols-1 rounded-md border px-1.5 py-0.5 text-center text-xs outline-none transition-colors duration-200 focus-visible:ring-2 focus-visible:ring-ring/50 motion-reduce:transition-none',
-              active
-                ? 'border-sidebar-border bg-sidebar font-semibold text-sidebar-foreground shadow-xs'
-                : 'border-transparent font-medium text-worktree-sidebar-foreground/65 hover:text-worktree-sidebar-foreground'
-            )}
-          >
-            {(option.widthLabels ?? [option.label]).map((widthLabel) => (
-              <span
-                key={widthLabel}
-                aria-hidden
-                className="invisible col-start-1 row-start-1 whitespace-nowrap font-semibold"
-              >
-                {widthLabel}
-              </span>
-            ))}
-            <span className="col-start-1 row-start-1 whitespace-nowrap">{option.label}</span>
-          </button>
-        )
-
-        return option.renderWrapper ? (
-          <React.Fragment key={option.value}>{option.renderWrapper(button)}</React.Fragment>
-        ) : (
-          button
-        )
-      })}
-    </div>
-  )
-}
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index 93ba2bbd96f..b893f1e8bdf 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -137,10 +137,6 @@
       "menuBarIcon": {
         "title": "Show Menu Bar Icon",
         "description": "Keep an Orca shortcut and activity indicator in the macOS menu bar."
-      },
-      "agentsSidebar": {
-        "title": "Show Agents Button",
-        "description": "Control whether the Agents tab appears in the left sidebar so you can monitor agent activity."
       }
     },
     "browser": {
diff --git a/src/renderer/src/store/slices/ui-hydration-view-layout.test.ts b/src/renderer/src/store/slices/ui-hydration-view-layout.test.ts
index a9a6f7aed0a..d08e291d982 100644
--- a/src/renderer/src/store/slices/ui-hydration-view-layout.test.ts
+++ b/src/renderer/src/store/slices/ui-hydration-view-layout.test.ts
@@ -164,17 +164,6 @@ describe('createUISlice hydratePersistedUI', () => {
     expect(store.getState().activeView).toBe('terminal')
   })
 
-  it('drops a persisted activity view when the Agents sidebar is hidden', () => {
-    const store = createUIStore()
-    store.setState({
-      settings: { showAgentsSidebar: false } as AppState['settings']
-    })
-
-    store.getState().hydratePersistedUI(makePersistedUI({ activeView: 'activity' }), 'startup')
-
-    expect(store.getState().activeView).toBe('terminal')
-  })
-
   it('keeps a persisted activity view when the settings fetch failed', () => {
     // A failed window.api.settings.get() leaves settings null; downgrading here would let the
     // persisted-UI writer overwrite the saved view with terminal.
@@ -186,17 +175,6 @@ describe('createUISlice hydratePersistedUI', () => {
     expect(store.getState().activeView).toBe('activity')
   })
 
-  it('restores a persisted activity view when the Agents sidebar is shown', () => {
-    const store = createUIStore()
-    store.setState({
-      settings: { showAgentsSidebar: true } as AppState['settings']
-    })
-
-    store.getState().hydratePersistedUI(makePersistedUI({ activeView: 'activity' }), 'startup')
-
-    expect(store.getState().activeView).toBe('activity')
-  })
-
   it('restores a default-on view (mobile) even when its nav button is hidden', () => {
     const store = createUIStore()
     store.setState({
diff --git a/src/renderer/src/store/slices/ui-page-navigation.test.ts b/src/renderer/src/store/slices/ui-page-navigation.test.ts
index 9a355223c27..c61a0e69a48 100644
--- a/src/renderer/src/store/slices/ui-page-navigation.test.ts
+++ b/src/renderer/src/store/slices/ui-page-navigation.test.ts
@@ -301,9 +301,6 @@ describe('createUISlice settings navigation', () => {
   it('returns to the graduated Agents view after visiting settings', () => {
     const store = createUIStore()
 
-    store.setState({
-      settings: { showAgentsSidebar: true } as unknown as AppState['settings']
-    } as unknown as Partial<AppState>)
     store.getState().openActivityPage()
     expect(store.getState().activeView).toBe('activity')
 
@@ -313,20 +310,6 @@ describe('createUISlice settings navigation', () => {
     expect(store.getState().activeView).toBe('activity')
   })
 
-  it('falls back to terminal when closing settings with the Agents surfaces hidden', () => {
-    const store = createUIStore()
-
-    store.setState({
-      settings: { showAgentsSidebar: false } as unknown as AppState['settings'],
-      activeView: 'settings',
-      previousViewBeforeSettings: 'activity'
-    } as unknown as Partial<AppState>)
-
-    store.getState().closeSettingsPage()
-
-    expect(store.getState().activeView).toBe('terminal')
-  })
-
   it('clears transient settings search when opening settings', () => {
     const store = createUIStore()
 
diff --git a/src/renderer/src/store/slices/ui/ui-slice-hydration-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-hydration-actions.ts
index 64858db11a0..f44774b3770 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-hydration-actions.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-hydration-actions.ts
@@ -275,9 +275,7 @@ export function createUiHydrationActions(set: UISliceSet, _get: UISliceGet): Par
               : s.workspaceCleanupBrowse,
           // Why: restore only on startup; on 'sync' broadcasts it would clobber the window's current per-window view.
           activeView:
-            source === 'startup'
-              ? sanitizeHydratedActiveView(ui.activeView, s.settings)
-              : s.activeView,
+            source === 'startup' ? sanitizeHydratedActiveView(ui.activeView) : s.activeView,
           persistedUIReady: true
         }
         // The incoming payload is authoritative for the writer-owned fields, so it becomes the
diff --git a/src/renderer/src/store/slices/ui/ui-slice-hydration-sanitizers.ts b/src/renderer/src/store/slices/ui/ui-slice-hydration-sanitizers.ts
index edb79511cd8..bfed25a75cc 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-hydration-sanitizers.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-hydration-sanitizers.ts
@@ -15,8 +15,6 @@ import {
   normalizeExecutionHostScope
 } from '../../../../../shared/execution-host'
 import { persistedUIValuesEqual } from '../../../../../shared/persisted-ui-equality'
-// Pure predicate over GlobalSettings; safe to share with the store layer.
-import { shouldShowAgentsSidebar } from '@/components/sidebar/agents-sidebar-visibility'
 import { DEFAULT_STATUS_BAR_ITEMS } from '../../../../../shared/constants'
 import type { UISlice } from './ui-slice-contract'
 
@@ -173,20 +171,11 @@ export function sanitizeWorkspaceCleanupDismissals(
   return out
 }
 
-export function sanitizeHydratedActiveView(
-  value: PersistedUIState['activeView'],
-  settings: Parameters<typeof shouldShowAgentsSidebar>[0]
-): TopLevelView {
+export function sanitizeHydratedActiveView(value: PersistedUIState['activeView']): TopLevelView {
   // Why: older data (pre-activeView) or a view a different build doesn't have falls back to terminal rather than rendering nothing.
   if (!isTopLevelView(value)) {
     return 'terminal'
   }
-  // Why: activity is hidden when its entry points are, so gate only it (mobile/automations stay functional when hidden).
-  // Why the null check: a failed settings fetch is not an opt-out. Downgrading on absent settings
-  // would let the persisted-UI writer overwrite the user's saved `activity` with `terminal`.
-  if (value === 'activity' && settings && !shouldShowAgentsSidebar(settings)) {
-    return 'terminal'
-  }
   return value
 }
 
diff --git a/src/renderer/src/store/slices/ui/ui-slice-settings-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-settings-actions.ts
index c693c900c4a..229a3860fbc 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-settings-actions.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-settings-actions.ts
@@ -1,7 +1,5 @@
 import type { UISlice, UISliceGet, UISliceSet } from './ui-slice-contract'
 import { isSettingsNavigationTarget } from '../../../lib/settings-navigation-types'
-// Pure predicate over GlobalSettings; safe to share with the store layer.
-import { shouldShowAgentsSidebar } from '@/components/sidebar/agents-sidebar-visibility'
 
 export function createUiSettingsActions(set: UISliceSet, get: UISliceGet): Partial<UISlice> {
   return {
@@ -17,13 +15,7 @@ export function createUiSettingsActions(set: UISliceSet, get: UISliceGet): Parti
     },
     closeSettingsPage: () =>
       set((state) => {
-        // Agents graduated from experimentalActivity; match openActivityPage's gate.
-        const previousView =
-          state.previousViewBeforeSettings === 'activity' &&
-          !shouldShowAgentsSidebar(state.settings)
-            ? 'terminal'
-            : state.previousViewBeforeSettings
-        return { activeView: previousView }
+        return { activeView: state.previousViewBeforeSettings }
       }),
     settingsNavigationTarget: null,
     openSettingsTarget: (target) => {
diff --git a/src/renderer/src/store/slices/ui/ui-slice-view-actions.ts b/src/renderer/src/store/slices/ui/ui-slice-view-actions.ts
index d61efbb598d..b97f77c89a3 100644
--- a/src/renderer/src/store/slices/ui/ui-slice-view-actions.ts
+++ b/src/renderer/src/store/slices/ui/ui-slice-view-actions.ts
@@ -1,16 +1,9 @@
 import type { UISlice, UISliceGet, UISliceSet } from './ui-slice-contract'
 import { rewindHistoryIndexPastView } from '../worktree-nav-history'
-// Pure predicate over GlobalSettings; safe to share with the store layer.
-import { shouldShowAgentsSidebar } from '@/components/sidebar/agents-sidebar-visibility'
 
 export function createUiViewActions(set: UISliceSet, get: UISliceGet): Partial<UISlice> {
   return {
     openActivityPage: () => {
-      // Agents graduated from experimentalActivity; gate on the same visibility
-      // rule as the sidebar entry points so the view is reachable iff shown.
-      if (!shouldShowAgentsSidebar(get().settings)) {
-        return
-      }
       set((state) => ({
         activeView: 'activity',
         previousViewBeforeActivity:
diff --git a/src/shared/agents-sidebar-visibility.ts b/src/shared/agents-sidebar-visibility.ts
deleted file mode 100644
index c05f8e106ed..00000000000
--- a/src/shared/agents-sidebar-visibility.ts
+++ /dev/null
@@ -1,12 +0,0 @@
-export type AgentsSidebarVisibilitySettings = {
-  showAgentsSidebar?: boolean
-}
-
-export function resolveAgentsSidebarVisible(
-  settings: Partial<AgentsSidebarVisibilitySettings> | null | undefined
-): boolean {
-  if (!settings) {
-    return true
-  }
-  return settings.showAgentsSidebar !== false
-}
diff --git a/src/shared/default-global-settings.ts b/src/shared/default-global-settings.ts
index 260fb5d6846..313e9fc6a9a 100644
--- a/src/shared/default-global-settings.ts
+++ b/src/shared/default-global-settings.ts
@@ -225,7 +225,6 @@ export function buildDefaultSettings(args: {
     // Why: off keeps the cosmetic overlay unmounted for users who never opt in.
     experimentalPet: false,
     experimentalActivity: false,
-    showAgentsSidebar: true,
     experimentalActivityDefaultedOffForAllUsers: true,
     experimentalTerminalAttention: false,
     experimentalAgentHibernation: false,
diff --git a/src/shared/global-settings-types.ts b/src/shared/global-settings-types.ts
index f650e4f4a77..bc590a19a2e 100644
--- a/src/shared/global-settings-types.ts
+++ b/src/shared/global-settings-types.ts
@@ -427,11 +427,9 @@ export type GlobalSettings = {
   experimentalActivity: boolean
   /** Experimental: pop-out Kanban dashboard for monitoring and opening agent terminals across worktrees. */
   experimentalAgentDashboardPopout?: boolean
-  /** Experimental: whether the Agents tab is shown in the left sidebar. Defaults on. */
-  showAgentsSidebar?: boolean
-  /** Set after the experimental Agents tab introduction has been acknowledged. */
+  /** Set after the one-time legacy Agents tab introduction has been acknowledged. */
   agentsSidebarIntroShown?: boolean
-  /** True when the profile previously opted into the legacy experimental Agents view. */
+  /** True when the profile previously opted into the legacy Agents view. */
   agentsSidebarMigratedFromExperimental?: boolean
   /** How the Agent Dashboard opens: an in-window companion board or a separate pop-out window. Defaults to in-window. */
   experimentalAgentDashboardMode?: AgentDashboardMode
diff --git a/src/shared/telemetry-property-schemas.ts b/src/shared/telemetry-property-schemas.ts
index b1e8d2ed573..3346ea73320 100644
--- a/src/shared/telemetry-property-schemas.ts
+++ b/src/shared/telemetry-property-schemas.ts
@@ -192,7 +192,6 @@ export const SETTINGS_CHANGED_WHITELIST = [
   'experimentalNativeChat',
   'experimentalStructuredNativeChat',
   'experimentalActivity',
-  'showAgentsSidebar',
   'experimentalAgentDashboardPopout',
   'experimentalTerminalAttention',
   'experimentalAgentHibernation',
diff --git a/tests/e2e/activity-agent-pane-isolation.spec.ts b/tests/e2e/activity-agent-pane-isolation.spec.ts
index 817044bd127..12ac2f68dc6 100644
--- a/tests/e2e/activity-agent-pane-isolation.spec.ts
+++ b/tests/e2e/activity-agent-pane-isolation.spec.ts
@@ -127,7 +127,6 @@ async function enableActivityAgentsView(page: Page): Promise<void> {
     // Why: the Agents tab is on by default, but a fresh profile opens the intro popover
     // over it; stamping it as shown keeps the toggle clickable without dismissing it first.
     const settings = await window.api.settings.set({
-      showAgentsSidebar: true,
       agentsSidebarIntroShown: true
     })
     window.__store?.setState({ settings })

From 623d58e386170cb6c15b7afa6178d7c850f2b351 Mon Sep 17 00:00:00 2001
From: Brennan Benson <79079362+brennanb2025@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:00:17 -0700
Subject: [PATCH 83/92] fix(native-chat): show pasted images while they save,
 and make them previewable (#18118)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(native-chat): show pasted images while they save, and make them previewable

Pasting an image into the native chat composer showed nothing until the
clipboard image finished being written to disk, and the resulting chip could
never render the image at all.

Preview was blocked by path authorization, not by rendering. Clipboard pastes
are written to the OS temp dir, which sits outside every allowed root, so the
composer's own `fs:readFile` of the file Orca had just written was denied.
`saveClipboardImageBufferAsTempFile` now authorizes the path it writes, the
same way other Orca-produced external files are handled.

The delay is the macOS paste route: Cmd+V is intercepted in main and delivered
through the app-menu paste channel, which has no clipboard blob in hand, so the
composer only learned an image existed after the save round-trip. A new
`clipboard:readImageThumbnail` probe reads the clipboard in memory and returns a
downscaled preview; it runs alongside the save rather than before it, so text
paste gains no latency. The DOM-paste route needs no probe — it mints a blob URL
from the clipboard file on the same tick.

Attachments now carry `pending` and `previewUrl`: the chip appears immediately
with the real image dimmed under a spinner, then settles in place on the saved
path. Send is blocked while anything is pending, because a pending chip has no
agent-readable path yet. Pending chips are kept out of the pane attachment cache
so a mid-save unmount cannot strand one, and blob previews are revoked on
remove/clear. SSH pastes now carry their connectionId onto the chip so remote
previews read over SFTP.

Verified in a real Codex native chat under an isolated dev instance: the chip
appears in 42-61ms with a spinner, settles at ~141ms, three rapid pastes produce
three independent chips with Send disabled throughout, and the lightbox opens the
full 5120x2880 image read from disk. Ablation confirms the authorization fix:
the written path reads back, an unauthorized sibling in the same temp dir does
not.

Claude-Session: https://claude.ai/code/session_01NnEfY8NpfFtVnboLKnmgdW

* fix(native-chat): avoid stale image attachments and preview cache growth

---------

Co-authored-by: Merge Sim <sim@local>
---
 .../window/clipboard-image-temp-file.test.ts  |  50 ++++
 src/main/window/clipboard-image-temp-file.ts  |   4 +
 .../window/clipboard-image-thumbnail.test.ts  |  45 ++++
 src/main/window/clipboard-image-thumbnail.ts  |  45 ++++
 .../window/clipboard-ipc-handlers.test.ts     |  30 +--
 src/main/window/clipboard-ipc-handlers.ts     |  11 +-
 ...ui-bridge-clipboard-and-window-controls.ts |   3 +
 src/preload/api/ui-window-api.ts              |   2 +
 .../native-chat/NativeChatComposer.test.tsx   |  62 ++++-
 .../native-chat/NativeChatComposer.tsx        |  86 +++---
 .../native-chat/NativeChatComposerField.tsx   |   6 +
 .../NativeChatImageAttachmentPreview.test.tsx |  55 ++++
 .../NativeChatImageAttachmentPreview.tsx      |  63 +++--
 .../native-chat-image-paste.test.ts           |  29 +--
 .../native-chat/native-chat-image-paste.ts    |  16 --
 ...-native-chat-composer-attachments.test.tsx |  85 ++++++
 .../use-native-chat-composer-attachments.ts   | 140 ++++++++--
 .../use-native-chat-composer-paste.test.tsx   | 245 +++++++++++++++---
 .../use-native-chat-composer-paste.ts         | 160 ++++++++++--
 ...se-native-chat-structured-composer-send.ts |  73 ++++++
 src/renderer/src/i18n/locales/en.json         |   1 +
 .../src/web/preload-api/web-clipboard-api.ts  |  48 +++-
 .../src/web/preload-api/web-ui-api.ts         |   2 +
 src/shared/clipboard-image.ts                 |  26 ++
 24 files changed, 1071 insertions(+), 216 deletions(-)
 create mode 100644 src/main/window/clipboard-image-temp-file.test.ts
 create mode 100644 src/main/window/clipboard-image-thumbnail.test.ts
 create mode 100644 src/main/window/clipboard-image-thumbnail.ts
 create mode 100644 src/renderer/src/components/native-chat/NativeChatImageAttachmentPreview.test.tsx
 create mode 100644 src/renderer/src/components/native-chat/use-native-chat-structured-composer-send.ts

diff --git a/src/main/window/clipboard-image-temp-file.test.ts b/src/main/window/clipboard-image-temp-file.test.ts
new file mode 100644
index 00000000000..71ca0804c0e
--- /dev/null
+++ b/src/main/window/clipboard-image-temp-file.test.ts
@@ -0,0 +1,50 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const { authorizeExternalPathMock, writeFileMock, getPathMock, writeFileBase64Mock } = vi.hoisted(
+  () => ({
+    authorizeExternalPathMock: vi.fn(),
+    writeFileMock: vi.fn(),
+    getPathMock: vi.fn(() => '/var/folders/ab/T'),
+    writeFileBase64Mock: vi.fn()
+  })
+)
+
+vi.mock('node:fs/promises', () => ({ default: { writeFile: writeFileMock } }))
+vi.mock('node:crypto', () => ({ randomUUID: () => 'uuid-1' }))
+vi.mock('../../shared/app-environment', () => ({
+  getAppEnvironment: () => ({ getPath: getPathMock })
+}))
+vi.mock('../providers/ssh-filesystem-dispatch', () => ({
+  requireSshFilesystemProvider: () => ({
+    getTempDir: async () => '/remote/tmp',
+    writeFileBase64: writeFileBase64Mock
+  })
+}))
+vi.mock('../ipc/filesystem-auth', () => ({ authorizeExternalPath: authorizeExternalPathMock }))
+
+import { saveClipboardImageBufferAsTempFile } from './clipboard-image-temp-file'
+
+beforeEach(() => {
+  vi.clearAllMocks()
+})
+
+describe('saveClipboardImageBufferAsTempFile', () => {
+  it('authorizes the local temp file so the composer can preview what it just wrote', async () => {
+    const savedPath = await saveClipboardImageBufferAsTempFile(Buffer.from([1, 2, 3]))
+
+    expect(writeFileMock).toHaveBeenCalledWith(savedPath, Buffer.from([1, 2, 3]))
+    // The OS temp dir is outside every allowed root, so an unauthorized path
+    // makes fs:readFile deny the preview read of Orca's own file.
+    expect(authorizeExternalPathMock).toHaveBeenCalledWith(savedPath)
+  })
+
+  it('does not authorize a local path for an SSH save', async () => {
+    const savedPath = await saveClipboardImageBufferAsTempFile(Buffer.from([1]), {
+      connectionId: 'conn-1'
+    })
+
+    expect(savedPath.startsWith('/remote/tmp/')).toBe(true)
+    expect(writeFileBase64Mock).toHaveBeenCalled()
+    expect(authorizeExternalPathMock).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/main/window/clipboard-image-temp-file.ts b/src/main/window/clipboard-image-temp-file.ts
index cadbd677650..0024c4b6d1f 100644
--- a/src/main/window/clipboard-image-temp-file.ts
+++ b/src/main/window/clipboard-image-temp-file.ts
@@ -6,6 +6,7 @@ import { getAppEnvironment } from '../../shared/app-environment'
 import { requireSshFilesystemProvider } from '../providers/ssh-filesystem-dispatch'
 import { isWindowsAbsolutePathLike } from '../../shared/cross-platform-path'
 import { assertClipboardImageByteLengthWithinLimit } from '../../shared/clipboard-image'
+import { authorizeExternalPath } from '../ipc/filesystem-auth'
 
 export type SaveClipboardImageAsTempFileArgs = {
   connectionId?: string | null
@@ -41,5 +42,8 @@ export async function saveClipboardImageBufferAsTempFile(
 
   const tempPath = path.join(getAppEnvironment().getPath('temp'), fileName)
   await fs.writeFile(tempPath, buffer)
+  // Why: the OS temp dir is outside every allowed root, so without this the
+  // composer's own thumbnail/preview read of the file it just wrote is denied.
+  authorizeExternalPath(tempPath)
   return tempPath
 }
diff --git a/src/main/window/clipboard-image-thumbnail.test.ts b/src/main/window/clipboard-image-thumbnail.test.ts
new file mode 100644
index 00000000000..e3cd0608972
--- /dev/null
+++ b/src/main/window/clipboard-image-thumbnail.test.ts
@@ -0,0 +1,45 @@
+import { describe, expect, it, vi } from 'vitest'
+import { buildClipboardImageThumbnail } from './clipboard-image-thumbnail'
+
+function fakeImage(overrides: Partial<Parameters<typeof buildClipboardImageThumbnail>[0]>) {
+  return {
+    isEmpty: () => false,
+    getSize: () => ({ height: 10, width: 10 }),
+    resize: vi.fn(() => ({ toDataURL: () => 'data:image/png;base64,SMALL' })),
+    toDataURL: () => 'data:image/png;base64,FULL',
+    ...overrides
+  }
+}
+
+describe('buildClipboardImageThumbnail', () => {
+  it('downscales to the thumbnail budget but reports the source dimensions', () => {
+    const image = fakeImage({ getSize: () => ({ height: 1600, width: 3200 }) })
+
+    expect(buildClipboardImageThumbnail(image)).toEqual({
+      dataUrl: 'data:image/png;base64,SMALL',
+      height: 1600,
+      width: 3200
+    })
+    expect(image.resize).toHaveBeenCalledWith({ height: 160, quality: 'good', width: 320 })
+  })
+
+  it('skips the resize for an image that already fits', () => {
+    const image = fakeImage({ getSize: () => ({ height: 200, width: 320 }) })
+
+    expect(buildClipboardImageThumbnail(image)?.dataUrl).toBe('data:image/png;base64,FULL')
+    expect(image.resize).not.toHaveBeenCalled()
+  })
+
+  it('reports no thumbnail for an empty clipboard so text paste falls through', () => {
+    expect(buildClipboardImageThumbnail(fakeImage({ isEmpty: () => true }))).toBeNull()
+  })
+
+  it('reports no thumbnail rather than throwing for an oversized image', () => {
+    // The save call still surfaces the real too-large error; the probe only
+    // decides whether a placeholder chip is worth showing.
+    const image = fakeImage({ getSize: () => ({ height: 100_000, width: 100_000 }) })
+
+    expect(buildClipboardImageThumbnail(image)).toBeNull()
+    expect(image.resize).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/main/window/clipboard-image-thumbnail.ts b/src/main/window/clipboard-image-thumbnail.ts
new file mode 100644
index 00000000000..b2108e25f13
--- /dev/null
+++ b/src/main/window/clipboard-image-thumbnail.ts
@@ -0,0 +1,45 @@
+import {
+  assertClipboardImageDimensionsWithinLimit,
+  clipboardImageThumbnailSize,
+  type ClipboardImageDimensions,
+  type ClipboardImageThumbnail
+} from '../../shared/clipboard-image'
+
+/** The slice of Electron's NativeImage this module needs, so the decision logic
+ *  is testable without an Electron runtime. */
+export type ClipboardImageLike = {
+  isEmpty: () => boolean
+  getSize: () => ClipboardImageDimensions
+  resize: (options: { height: number; width: number; quality: 'good' | 'better' | 'best' }) => {
+    toDataURL: () => string
+  }
+  toDataURL: () => string
+}
+
+/**
+ * In-memory preview of whatever image the clipboard holds. Writing the image to
+ * disk (or uploading it over SFTP) takes long enough that a composer with no
+ * feedback reads as a dropped paste, so this answers "is there an image, and
+ * what does it look like" without touching the filesystem.
+ */
+export function buildClipboardImageThumbnail(
+  image: ClipboardImageLike
+): ClipboardImageThumbnail | null {
+  if (image.isEmpty()) {
+    return null
+  }
+  const size = image.getSize()
+  try {
+    assertClipboardImageDimensionsWithinLimit(size)
+  } catch {
+    // Oversized images still report through the save call; the probe only
+    // decides whether to show a placeholder, so degrade to "no preview".
+    return null
+  }
+  const thumbnailSize = clipboardImageThumbnailSize(size)
+  const thumbnail =
+    thumbnailSize.width === size.width && thumbnailSize.height === size.height
+      ? image
+      : image.resize({ ...thumbnailSize, quality: 'good' })
+  return { dataUrl: thumbnail.toDataURL(), height: size.height, width: size.width }
+}
diff --git a/src/main/window/clipboard-ipc-handlers.test.ts b/src/main/window/clipboard-ipc-handlers.test.ts
index ce84c68e327..ea337747421 100644
--- a/src/main/window/clipboard-ipc-handlers.test.ts
+++ b/src/main/window/clipboard-ipc-handlers.test.ts
@@ -13,6 +13,7 @@ const {
   spawnMock,
   childStdinEndMock,
   resolveAuthorizedPathMock,
+  authorizeExternalPathMock,
   fsAccessMock,
   fsLstatMock,
   fsMkdirMock,
@@ -48,6 +49,7 @@ const {
     return child
   }),
   resolveAuthorizedPathMock: vi.fn(),
+  authorizeExternalPathMock: vi.fn(),
   fsAccessMock: vi.fn(),
   fsLstatMock: vi.fn(),
   fsMkdirMock: vi.fn(),
@@ -90,7 +92,8 @@ vi.mock('node:fs/promises', () => ({
 vi.mock('../ipc/filesystem-auth', () => ({
   PATH_ACCESS_DENIED_MESSAGE:
     'Access denied: path resolves outside allowed directories. If this blocks a legitimate workflow, please file a GitHub issue.',
-  resolveAuthorizedPath: resolveAuthorizedPathMock
+  resolveAuthorizedPath: resolveAuthorizedPathMock,
+  authorizeExternalPath: authorizeExternalPathMock
 }))
 
 vi.mock('node:crypto', () => ({
@@ -548,30 +551,7 @@ describe('registerClipboardHandlers', () => {
     expect(removeHandlerMock).toHaveBeenCalledWith('clipboard:writeImage')
     expect(removeHandlerMock).toHaveBeenCalledWith('clipboard:writeFile')
     expect(removeHandlerMock).toHaveBeenCalledWith('clipboard:saveImageAsTempFile')
-  })
-
-  it('saves clipboard images to a local temp file when no connection is provided', async () => {
-    const png = Buffer.from([0, 1, 2, 3])
-    const expectedPath = join(
-      '/tmp',
-      'orca-paste-1760000000000-00000000-0000-4000-8000-000000000000.png'
-    )
-    clipboardReadImageMock.mockReturnValue({
-      getSize: () => ({ height: 1, width: 1 }),
-      isEmpty: () => false,
-      toPNG: () => png
-    })
-
-    registerClipboardHandlers({} as never)
-
-    const handlers = getRegisteredHandlers()
-    await expect(
-      handlers.get('clipboard:saveImageAsTempFile')?.(makeClipboardEvent(), undefined)
-    ).resolves.toBe(expectedPath)
-    expect(fsWriteFileMock).toHaveBeenCalledWith(expectedPath, png)
-    expect(clipboardReadBufferMock).not.toHaveBeenCalled()
-    expect(fsOpenMock).not.toHaveBeenCalled()
-    expect(getSshFilesystemProviderMock).not.toHaveBeenCalled()
+    expect(removeHandlerMock).toHaveBeenCalledWith('clipboard:readImageThumbnail')
   })
 
   it('does not inspect FileNameW when an empty image clipboard is read outside Windows', async () => {
diff --git a/src/main/window/clipboard-ipc-handlers.ts b/src/main/window/clipboard-ipc-handlers.ts
index 6322715ad77..9528958c25f 100644
--- a/src/main/window/clipboard-ipc-handlers.ts
+++ b/src/main/window/clipboard-ipc-handlers.ts
@@ -23,7 +23,8 @@ import {
 import {
   assertClipboardImageBase64LengthWithinLimit,
   assertClipboardImageByteLengthWithinLimit,
-  assertClipboardImageDimensionsWithinLimit
+  assertClipboardImageDimensionsWithinLimit,
+  type ClipboardImageThumbnail
 } from '../../shared/clipboard-image'
 import {
   writeFileToClipboard,
@@ -37,6 +38,7 @@ import {
 } from './clipboard-remote-file-copy'
 import { saveClipboardImageBufferInRuntime } from './clipboard-runtime-image-upload'
 import { readWindowsClipboardImageFileAsPng } from './clipboard-windows-image-file'
+import { buildClipboardImageThumbnail } from './clipboard-image-thumbnail'
 import { writeClipboardTextAndVerify } from './clipboard-text-write-verify'
 import { isDashboardPopoutRenderer } from './dashboard-popout-window'
 
@@ -85,6 +87,7 @@ export function registerClipboardHandlers(store: Store): void {
   ipcMain.removeHandler('clipboard:writeImage')
   ipcMain.removeHandler('clipboard:writeFile')
   ipcMain.removeHandler('clipboard:saveImageAsTempFile')
+  ipcMain.removeHandler('clipboard:readImageThumbnail')
 
   void cleanupExpiredRemoteClipboardFiles()
   scheduleLegacyRemoteClipboardFileCleanup()
@@ -100,6 +103,12 @@ export function registerClipboardHandlers(store: Store): void {
       return assertClipboardTextWithinLimitWithYield(clipboard.readText('selection'), options)
     }
   )
+  // Why: an unanswered paste reads as a dropped paste, so the composer probes
+  // the clipboard in memory before the (slower) save lands.
+  ipcMain.handle('clipboard:readImageThumbnail', (event): ClipboardImageThumbnail | null => {
+    assertTrustedClipboardSender(event)
+    return buildClipboardImageThumbnail(clipboard.readImage())
+  })
   // Why: terminals need to detect clipboard images to support tools like Claude
   // Code that accept image input via paste. Writes the clipboard image to a
   // temp file and returns the path, or null if the clipboard has no image.
diff --git a/src/preload/api/ui-bridge-clipboard-and-window-controls.ts b/src/preload/api/ui-bridge-clipboard-and-window-controls.ts
index fdad19c2944..1738cb46d2a 100644
--- a/src/preload/api/ui-bridge-clipboard-and-window-controls.ts
+++ b/src/preload/api/ui-bridge-clipboard-and-window-controls.ts
@@ -10,6 +10,7 @@ import {
   type RichMarkdownContextMenuTableTarget
 } from '../../shared/rich-markdown-context-menu'
 import type { NativeFileDropPayload } from '../../shared/native-file-drop'
+import type { ClipboardImageThumbnail } from '../../shared/clipboard-image'
 import type { ReadClipboardTextOptions } from '../../shared/clipboard-text'
 import { subscribeNativeFileDrop } from '../preload-runtime-support'
 import type { PreloadApi } from '../api-types'
@@ -93,6 +94,8 @@ export const uiClipboardAndWindowControlsApi = {
     connectionId?: string | null
     runtimeEnvironmentId?: string | null
   }): Promise<string | null> => ipcRenderer.invoke('clipboard:saveImageAsTempFile', args),
+  readClipboardImageThumbnail: (): Promise<ClipboardImageThumbnail | null> =>
+    ipcRenderer.invoke('clipboard:readImageThumbnail'),
   writeClipboardText: (text: string): Promise<void> =>
     ipcRenderer.invoke('clipboard:writeText', text),
   writeTerminalClipboardText: (text: string): Promise<void> =>
diff --git a/src/preload/api/ui-window-api.ts b/src/preload/api/ui-window-api.ts
index fc6aef6991b..b0fa905efa7 100644
--- a/src/preload/api/ui-window-api.ts
+++ b/src/preload/api/ui-window-api.ts
@@ -1,3 +1,4 @@
+import type { ClipboardImageThumbnail } from '../../shared/clipboard-image'
 import type { ReadClipboardTextOptions } from '../../shared/clipboard-text'
 import type { NativeFileDropPayload } from '../../shared/native-file-drop'
 import type {
@@ -12,6 +13,7 @@ export type UiWindowApi = {
     connectionId?: string | null
     runtimeEnvironmentId?: string | null
   }) => Promise<string | null>
+  readClipboardImageThumbnail: () => Promise<ClipboardImageThumbnail | null>
   writeClipboardText: (text: string) => Promise<void>
   writeTerminalClipboardText: (text: string) => Promise<void>
   writeSelectionClipboardText: (text: string) => Promise<void>
diff --git a/src/renderer/src/components/native-chat/NativeChatComposer.test.tsx b/src/renderer/src/components/native-chat/NativeChatComposer.test.tsx
index b1cf1a5879e..a1aecd23419 100644
--- a/src/renderer/src/components/native-chat/NativeChatComposer.test.tsx
+++ b/src/renderer/src/components/native-chat/NativeChatComposer.test.tsx
@@ -26,6 +26,7 @@ const mocks = vi.hoisted(() => ({
     sessionOptionsSurface?: SessionOptionsSurface | null
     sessionOptionsSnapshot?: SessionOptionDescriptor[]
     attachDisabled?: boolean
+    sendButtonDisabled?: boolean
   } | null,
   modelSwitchOutcome: 'applied' as 'applied' | 'rejected' | 'unknown',
   confirmationObserver: null as {
@@ -38,10 +39,11 @@ const mocks = vi.hoisted(() => ({
   createClaudeModelSwitchConfirmationObserver: vi.fn(),
   discoverCommitMessageModels: vi.fn(),
   draft: 'hello',
-  imageAttachments: [] as { id: string; path: string }[],
+  imageAttachments: [] as { id: string; path: string; pending?: boolean }[],
   getMainBufferSnapshot: vi.fn(),
   sendHandle: { cancel: vi.fn(), settleAfterMs: 500 },
   sendNativeChatMessage: vi.fn(),
+  sendNativeChatMessageWithImageAttachments: vi.fn(),
   sendNativeChatTypedCommand: vi.fn(),
   sendNativeChatMessageVerified: vi.fn(),
   typeNativeChatCommand: vi.fn(),
@@ -81,7 +83,8 @@ vi.mock('./native-chat-runtime-send', () => ({
   submitNativeChatPrompt: vi.fn()
 }))
 vi.mock('./native-chat-runtime-image-send', () => ({
-  sendNativeChatMessageWithImageAttachments: vi.fn()
+  sendNativeChatMessageWithImageAttachments: (...args: unknown[]) =>
+    mocks.sendNativeChatMessageWithImageAttachments(...args)
 }))
 vi.mock('./claude-model-switch-confirmation', () => ({
   createClaudeModelSwitchConfirmationObserver: (...args: unknown[]) =>
@@ -206,6 +209,7 @@ describe('NativeChatComposer', () => {
       ]
     })
     mocks.sendNativeChatMessage.mockReturnValue(mocks.sendHandle)
+    mocks.sendNativeChatMessageWithImageAttachments.mockReturnValue(mocks.sendHandle)
     mocks.sendNativeChatTypedCommand.mockReturnValue(mocks.sendHandle)
     mocks.sendNativeChatMessageVerified.mockResolvedValue(true)
     mocks.typeNativeChatCommand.mockResolvedValue(true)
@@ -341,6 +345,60 @@ describe('NativeChatComposer', () => {
     expect(mocks.setDraft).toHaveBeenCalledWith('')
   })
 
+  it('disables Send and blocks a send while an image attachment is still pending', () => {
+    mocks.imageAttachments = [{ id: 'image-1', path: '', pending: true }]
+    render(
+      <NativeChatComposer
+        terminalTabId="tab-1"
+        paneKey="tab-1:leaf-1"
+        targetPtyId="pty-1"
+        agent="codex"
+      />
+    )
+
+    expect(mocks.fieldProps?.sendButtonDisabled).toBe(true)
+
+    act(() => mocks.fieldProps?.onSend?.())
+
+    expect(mocks.sendNativeChatMessage).not.toHaveBeenCalled()
+    expect(mocks.sendNativeChatTypedCommand).not.toHaveBeenCalled()
+    expect(mocks.sendNativeChatMessageWithImageAttachments).not.toHaveBeenCalled()
+  })
+
+  it('enables Send and dispatches once a pending attachment resolves', () => {
+    mocks.imageAttachments = [{ id: 'image-1', path: '', pending: true }]
+    const view = render(
+      <NativeChatComposer
+        terminalTabId="tab-1"
+        paneKey="tab-1:leaf-1"
+        targetPtyId="pty-1"
+        agent="codex"
+      />
+    )
+    expect(mocks.fieldProps?.sendButtonDisabled).toBe(true)
+
+    mocks.imageAttachments = [{ id: 'image-1', path: '/tmp/pasted.png' }]
+    view.rerender(
+      <NativeChatComposer
+        terminalTabId="tab-1"
+        paneKey="tab-1:leaf-1"
+        targetPtyId="pty-1"
+        agent="codex"
+      />
+    )
+    expect(mocks.fieldProps?.sendButtonDisabled).toBe(false)
+
+    act(() => mocks.fieldProps?.onSend?.())
+
+    expect(mocks.sendNativeChatMessageWithImageAttachments).toHaveBeenCalledWith(
+      {},
+      'pty-1',
+      'hello',
+      ['/tmp/pasted.png'],
+      undefined
+    )
+  })
+
   it('types Codex slash composer sends instead of pasting them', () => {
     mocks.draft = '/status'
     render(
diff --git a/src/renderer/src/components/native-chat/NativeChatComposer.tsx b/src/renderer/src/components/native-chat/NativeChatComposer.tsx
index 9081f6adf65..e0b1d97a057 100644
--- a/src/renderer/src/components/native-chat/NativeChatComposer.tsx
+++ b/src/renderer/src/components/native-chat/NativeChatComposer.tsx
@@ -3,15 +3,10 @@ import { useAppStore } from '../../store'
 import { sendRuntimePtyInput } from '@/runtime/runtime-terminal-inspection'
 import { getSettingsForAgentTabRuntimeOwner } from '@/lib/agent-paste-draft'
 import { getVerifiedNativeChatCommands } from '../../../../shared/native-chat-agent-profiles'
-import {
-  isStructuredAgentSessionComposerCommand,
-  STRUCTURED_AGENT_SESSION_SLASH_COMMANDS
-} from '../../../../shared/structured-agent-session-composer'
-import { emitNativeChatMessageSent } from '@/lib/native-chat-telemetry'
+import { STRUCTURED_AGENT_SESSION_SLASH_COMMANDS } from '../../../../shared/structured-agent-session-composer'
 import {
   applyMentionSuggestion,
   EMPTY_HISTORY,
-  pushHistory,
   type HistoryState
 } from './native-chat-composer-state'
 import { useNativeChatDraft } from './use-native-chat-draft'
@@ -34,8 +29,8 @@ import type {
   NativeChatComposerHandle,
   NativeChatComposerProps
 } from './native-chat-composer-types'
-import { dispatchNativeChatStructuredComposerText } from './native-chat-structured-composer-dispatch'
 import { useNativeChatPtyComposerSend } from './use-native-chat-pty-composer-send'
+import { useNativeChatStructuredComposerSend } from './use-native-chat-structured-composer-send'
 import { useImeEnterGestureOwnership } from '@/lib/ime-composition-keyboard-event'
 import { useNativeChatComposerAppMenuSelection } from './use-native-chat-composer-app-menu-selection'
 
@@ -171,11 +166,21 @@ const NativeChatComposerPane = forwardRef<NativeChatComposerHandle, NativeChatCo
       setDraft,
       setNotice
     })
-    const { imageAttachments, attachResolvedPaths, clearImageAttachments, removeImageAttachment } =
-      attachments
+    const {
+      imageAttachments,
+      attachResolvedPaths,
+      clearImageAttachments,
+      removeImageAttachment,
+      beginPendingImageAttachment,
+      resolvePendingImageAttachment,
+      dropPendingImageAttachment
+    } = attachments
+    // A pasted image has no agent-readable path until its save lands; sending
+    // mid-save would ship the message without the image the chip promises.
+    const hasPendingAttachment = imageAttachments.some((attachment) => attachment.pending)
     const sendButtonDisabled = isWorking
       ? !hasPty || !onStop
-      : disabled || (draft.trim() === '' && imageAttachments.length === 0)
+      : disabled || hasPendingAttachment || (draft.trim() === '' && imageAttachments.length === 0)
 
     const { insertTypedText, focus } = useNativeChatTypedInsertion({
       textareaRef,
@@ -201,6 +206,9 @@ const NativeChatComposerPane = forwardRef<NativeChatComposerHandle, NativeChatCo
       caret,
       resolveAttachmentOwner,
       attachResolvedPaths,
+      beginPendingImageAttachment,
+      resolvePendingImageAttachment,
+      dropPendingImageAttachment,
       insertTypedText,
       setCaret,
       setNotice
@@ -236,41 +244,16 @@ const NativeChatComposerPane = forwardRef<NativeChatComposerHandle, NativeChatCo
     const sessionOptionsSurface = structuredTransport?.optionsSurface ?? ptySessionOptionsSurface
     const sessionOptionsSnapshot = structuredTransport?.optionSnapshot ?? ptySessionOptionsSnapshot
 
-    const sendStructured = useCallback(
-      (text: string, attachments = imageAttachments): void => {
-        if (!structuredTransport) {
-          return
-        }
-        if (attachments.length > 0 && isStructuredAgentSessionComposerCommand(text, agent)) {
-          structuredTransport.onError('Remove attachments before using a chat-session command.')
-          return
-        }
-        void dispatchNativeChatStructuredComposerText(structuredTransport, text, attachments)
-          .then(({ accepted, error }) => {
-            structuredTransport.onError(error)
-            if (!accepted) {
-              return
-            }
-            emitNativeChatMessageSent({ agent, runtime: structuredTransport.runtime })
-            setHistory((previous) => pushHistory(previous, text))
-            setDraft('')
-            setCaret(0)
-            clearSkillOrigin()
-            clearImageAttachments()
-          })
-          .catch((error) =>
-            structuredTransport.onError(error instanceof Error ? error.message : String(error))
-          )
-      },
-      [
-        agent,
-        clearImageAttachments,
-        clearSkillOrigin,
-        imageAttachments,
-        setDraft,
-        structuredTransport
-      ]
-    )
+    const sendStructured = useNativeChatStructuredComposerSend({
+      agent,
+      imageAttachments,
+      structuredTransport,
+      clearImageAttachments,
+      clearSkillOrigin,
+      setHistory,
+      setDraft,
+      setCaret
+    })
 
     const sendPty = useNativeChatPtyComposerSend({
       agent,
@@ -296,12 +279,23 @@ const NativeChatComposerPane = forwardRef<NativeChatComposerHandle, NativeChatCo
       setNotice
     })
     const send = useCallback(() => {
+      if (hasPendingAttachment) {
+        return
+      }
       if (!structuredTransport) {
         sendPty()
       } else if ((draft.trim() !== '' || imageAttachments.length > 0) && !disabled) {
         sendStructured(draft, imageAttachments)
       }
-    }, [disabled, draft, imageAttachments, sendPty, sendStructured, structuredTransport])
+    }, [
+      disabled,
+      draft,
+      hasPendingAttachment,
+      imageAttachments,
+      sendPty,
+      sendStructured,
+      structuredTransport
+    ])
 
     const interrupt = useCallback(() => {
       cancelPendingSends()
diff --git a/src/renderer/src/components/native-chat/NativeChatComposerField.tsx b/src/renderer/src/components/native-chat/NativeChatComposerField.tsx
index 346e44e8e54..51484d5d8c5 100644
--- a/src/renderer/src/components/native-chat/NativeChatComposerField.tsx
+++ b/src/renderer/src/components/native-chat/NativeChatComposerField.tsx
@@ -55,8 +55,14 @@ export type NativeChatComposerFieldProps = {
 
 export type NativeChatComposerImageAttachment = {
   id: string
+  /** Empty while `pending`: the clipboard image has no agent-readable path yet. */
   path: string
   connectionId?: string
+  /** Clipboard thumbnail (blob/data URL) rendered before — and after — the file
+   *  lands, so the chip never waits on a disk round-trip to show something. */
+  previewUrl?: string
+  /** True while the pasted image is still being written to disk or uploaded. */
+  pending?: boolean
 }
 
 /**
diff --git a/src/renderer/src/components/native-chat/NativeChatImageAttachmentPreview.test.tsx b/src/renderer/src/components/native-chat/NativeChatImageAttachmentPreview.test.tsx
new file mode 100644
index 00000000000..2b5924e9826
--- /dev/null
+++ b/src/renderer/src/components/native-chat/NativeChatImageAttachmentPreview.test.tsx
@@ -0,0 +1,55 @@
+// @vitest-environment happy-dom
+
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { cleanup, render, screen } from '@testing-library/react'
+import { NativeChatImageAttachmentPreview } from './NativeChatImageAttachmentPreview'
+import type { NativeChatComposerImageAttachment } from './NativeChatComposerField'
+
+const mocks = vi.hoisted(() => ({
+  useLocalImageSrc: vi.fn()
+}))
+
+vi.mock('@/i18n/i18n', () => ({
+  translate: (_key: string, fallback: string) => fallback
+}))
+
+vi.mock('@/components/editor/useLocalImageSrc', () => ({
+  useLocalImageSrc: mocks.useLocalImageSrc
+}))
+
+afterEach(() => {
+  cleanup()
+  vi.unstubAllGlobals()
+  mocks.useLocalImageSrc.mockReset()
+})
+
+function renderPreview(attachment: NativeChatComposerImageAttachment): void {
+  vi.stubGlobal('IntersectionObserver', undefined)
+  render(<NativeChatImageAttachmentPreview attachment={attachment} onRemove={vi.fn()} />)
+}
+
+describe('NativeChatImageAttachmentPreview', () => {
+  it('shows the clipboard thumbnail and a spinner while pending', () => {
+    mocks.useLocalImageSrc.mockReturnValue(undefined)
+    renderPreview({ id: 'a1', path: '', previewUrl: 'blob:clipboard-1', pending: true })
+
+    expect(document.querySelector('.animate-spin')).toBeTruthy()
+    expect(screen.getByRole('img', { name: 'Saving pasted image…' }).getAttribute('src')).toBe(
+      'blob:clipboard-1'
+    )
+  })
+
+  it('renders no spinner once the attachment has settled', () => {
+    mocks.useLocalImageSrc.mockReturnValue('blob:on-disk-1')
+    renderPreview({ id: 'a1', path: '/tmp/example.png' })
+
+    expect(document.querySelector('.animate-spin')).toBeFalsy()
+  })
+
+  it('does not read the on-disk file while the attachment is pending', () => {
+    mocks.useLocalImageSrc.mockReturnValue(undefined)
+    renderPreview({ id: 'a1', path: '', previewUrl: 'blob:clipboard-1', pending: true })
+
+    expect(mocks.useLocalImageSrc).toHaveBeenCalledWith(undefined, '', undefined)
+  })
+})
diff --git a/src/renderer/src/components/native-chat/NativeChatImageAttachmentPreview.tsx b/src/renderer/src/components/native-chat/NativeChatImageAttachmentPreview.tsx
index 27d6cbd42cf..52e9a5f7c3a 100644
--- a/src/renderer/src/components/native-chat/NativeChatImageAttachmentPreview.tsx
+++ b/src/renderer/src/components/native-chat/NativeChatImageAttachmentPreview.tsx
@@ -1,5 +1,5 @@
 import { useEffect, useRef, useState } from 'react'
-import { Image as ImageIcon, X } from 'lucide-react'
+import { Image as ImageIcon, Loader2, X } from 'lucide-react'
 import { Dialog, DialogContent, DialogDescription, DialogTitle } from '@/components/ui/dialog'
 import { translate } from '@/i18n/i18n'
 import { basename } from '@/lib/path'
@@ -41,31 +41,55 @@ export function NativeChatImageAttachmentPreview({
     observer.observe(element)
     return () => observer.disconnect()
   }, [])
-  const previewSrc = useLocalImageSrc(
-    isNearViewport || isOpen ? attachment.path : undefined,
+  const isPending = attachment.pending === true
+  const localSrc = useLocalImageSrc(
+    !isPending && (isNearViewport || isOpen) ? attachment.path : undefined,
     attachment.path,
     attachment.connectionId
   )
+  // The clipboard thumbnail is already in this process, so it renders with no
+  // round-trip; the on-disk file only wins for the full-size dialog.
+  const thumbnailSrc = attachment.previewUrl ?? localSrc
+  const fullSizeSrc = localSrc ?? attachment.previewUrl
   const filename = isNativeChatPastedImagePath(attachment.path)
     ? translate('components.native-chat.composer.pastedImageLabel', 'Pasted image')
     : basename(attachment.path)
+  const pendingLabel = translate(
+    'components.native-chat.composer.imageSaving',
+    'Saving pasted image…'
+  )
+  const label = isPending ? pendingLabel : filename
 
   return (
     <>
       <div ref={thumbnailRef} className="relative size-14 shrink-0">
         <button
           type="button"
-          aria-label={`${translate('components.native-chat.composer.viewAttachment', 'View image')}: ${filename}`}
-          title={filename}
+          aria-label={
+            isPending
+              ? pendingLabel
+              : `${translate('components.native-chat.composer.viewAttachment', 'View image')}: ${label}`
+          }
+          aria-busy={isPending}
+          title={label}
           onClick={() => setIsOpen(true)}
           className="flex size-full items-center justify-center overflow-hidden rounded-md border border-border bg-background transition-colors hover:border-ring focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
         >
-          {previewSrc ? (
-            <img src={previewSrc} alt={filename} className="size-full object-cover" />
+          {thumbnailSrc ? (
+            <img
+              src={thumbnailSrc}
+              alt={label}
+              className={`size-full object-cover${isPending ? ' opacity-50' : ''}`}
+            />
           ) : (
             <ImageIcon className="size-5 text-muted-foreground" />
           )}
         </button>
+        {isPending ? (
+          <span className="pointer-events-none absolute inset-0 flex items-center justify-center rounded-md bg-background/50">
+            <Loader2 className="size-4 animate-spin text-muted-foreground" />
+          </span>
+        ) : null}
         <button
           type="button"
           onClick={() => onRemove(attachment.id)}
@@ -80,23 +104,32 @@ export function NativeChatImageAttachmentPreview({
       </div>
       <Dialog open={isOpen} onOpenChange={setIsOpen}>
         <DialogContent className="flex max-h-[90vh] max-w-[90vw] flex-col gap-3 border-border bg-background p-3 sm:max-w-4xl">
-          <DialogTitle className="truncate text-sm">{filename}</DialogTitle>
+          <DialogTitle className="truncate text-sm">{label}</DialogTitle>
           <DialogDescription className="sr-only">
             {translate('components.native-chat.composer.imagePreview', 'Full-size image preview')}
           </DialogDescription>
           <div className="scrollbar-sleek flex min-h-0 items-center justify-center overflow-auto rounded-md bg-muted/20 p-2">
-            {previewSrc ? (
+            {fullSizeSrc ? (
               <img
-                src={previewSrc}
-                alt={filename}
+                src={fullSizeSrc}
+                alt={label}
                 className="max-h-[75vh] max-w-full object-contain"
               />
             ) : (
               <div className="flex items-center gap-2 py-12 text-sm text-muted-foreground">
-                <ImageIcon className="size-4" />
-                {translate(
-                  'components.native-chat.composer.imagePreviewUnavailable',
-                  'Preview unavailable'
+                {isPending ? (
+                  <>
+                    <Loader2 className="size-4 animate-spin" />
+                    {pendingLabel}
+                  </>
+                ) : (
+                  <>
+                    <ImageIcon className="size-4" />
+                    {translate(
+                      'components.native-chat.composer.imagePreviewUnavailable',
+                      'Preview unavailable'
+                    )}
+                  </>
                 )}
               </div>
             )}
diff --git a/src/renderer/src/components/native-chat/native-chat-image-paste.test.ts b/src/renderer/src/components/native-chat/native-chat-image-paste.test.ts
index 35fdc107695..a331f2c0bea 100644
--- a/src/renderer/src/components/native-chat/native-chat-image-paste.test.ts
+++ b/src/renderer/src/components/native-chat/native-chat-image-paste.test.ts
@@ -1,38 +1,15 @@
 import { describe, expect, it } from 'vitest'
-import {
-  getAgentImageHandling,
-  isNativeChatPastedImagePath,
-  resolveImagePaste
-} from './native-chat-image-paste'
+import { getAgentImageHandling, isNativeChatPastedImagePath } from './native-chat-image-paste'
 
 describe('image paste agent map', () => {
-  it('known image-capable agent attaches the temp file path', () => {
+  it('vision-capable TUIs take image attachments', () => {
     expect(getAgentImageHandling('claude')).toBe('attachment')
-    const result = resolveImagePaste('claude', '/tmp/orca-img-123.png')
-    expect(result).toEqual({ kind: 'attach', path: '/tmp/orca-img-123.png' })
-  })
-
-  it('codex also attaches image paths', () => {
-    expect(resolveImagePaste('codex', '/tmp/x.png')).toEqual({
-      kind: 'attach',
-      path: '/tmp/x.png'
-    })
-  })
-
-  it('grok attaches image paths like other vision-capable TUIs', () => {
+    expect(getAgentImageHandling('codex')).toBe('attachment')
     expect(getAgentImageHandling('grok')).toBe('attachment')
-    expect(resolveImagePaste('grok', '/tmp/orca-paste-1.png')).toEqual({
-      kind: 'attach',
-      path: '/tmp/orca-paste-1.png'
-    })
   })
 
   it('unknown/custom agent is unsupported', () => {
     expect(getAgentImageHandling('some-custom-agent')).toBe('unsupported')
-    expect(resolveImagePaste('some-custom-agent', '/tmp/x.png')).toEqual({
-      kind: 'unsupported',
-      agent: 'some-custom-agent'
-    })
   })
 })
 
diff --git a/src/renderer/src/components/native-chat/native-chat-image-paste.ts b/src/renderer/src/components/native-chat/native-chat-image-paste.ts
index 792d10445ed..5b05ae2d849 100644
--- a/src/renderer/src/components/native-chat/native-chat-image-paste.ts
+++ b/src/renderer/src/components/native-chat/native-chat-image-paste.ts
@@ -30,22 +30,6 @@ export function getAgentImageHandling(agent: AgentType): AgentImageHandling {
   return IMAGE_ATTACHMENT_AGENTS.has(agent) ? 'attachment' : 'unsupported'
 }
 
-export type ImagePasteResult =
-  | { kind: 'attach'; path: string }
-  | { kind: 'unsupported'; agent: AgentType }
-
-/**
- * Given the agent and the temp-file path the image was written to, decide what
- * (if anything) to attach. Attachment-capable agents receive the path through
- * the same bracketed image-paste channel as the terminal TUI.
- */
-export function resolveImagePaste(agent: AgentType, tempFilePath: string): ImagePasteResult {
-  if (getAgentImageHandling(agent) === 'attachment') {
-    return { kind: 'attach', path: tempFilePath }
-  }
-  return { kind: 'unsupported', agent }
-}
-
 export function isNativeChatImageAttachmentPath(path: string): boolean {
   return isImageDropPath(path)
 }
diff --git a/src/renderer/src/components/native-chat/use-native-chat-composer-attachments.test.tsx b/src/renderer/src/components/native-chat/use-native-chat-composer-attachments.test.tsx
index 7a3c1c6ad8b..1825a0db92a 100644
--- a/src/renderer/src/components/native-chat/use-native-chat-composer-attachments.test.tsx
+++ b/src/renderer/src/components/native-chat/use-native-chat-composer-attachments.test.tsx
@@ -260,4 +260,89 @@ describe('useNativeChatComposerAttachments', () => {
     )
     act(() => probe.root.unmount())
   })
+
+  it('settles a pending image attachment in place', async () => {
+    const probe = await renderProbe('pty-1')
+    let id: string | null = null
+    act(() => {
+      id = probe.latest().beginPendingImageAttachment('blob:preview-1')
+    })
+    expect(id).toBeTruthy()
+    expect(probe.latest().imageAttachments).toMatchObject([
+      { id, path: '', previewUrl: 'blob:preview-1', pending: true }
+    ])
+
+    act(() => {
+      probe.latest().resolvePendingImageAttachment(id as string, '/tmp/resolved.png', 'conn-1')
+    })
+
+    expect(probe.latest().imageAttachments).toMatchObject([
+      { id, path: '/tmp/resolved.png', previewUrl: 'blob:preview-1', connectionId: 'conn-1' }
+    ])
+    expect(probe.latest().imageAttachments[0]?.pending).toBeUndefined()
+    act(() => probe.root.unmount())
+  })
+
+  it('drops just the targeted pending chip', async () => {
+    const probe = await renderProbe('pty-1')
+    let firstId: string | null = null
+    let secondId: string | null = null
+    act(() => {
+      firstId = probe.latest().beginPendingImageAttachment('blob:preview-1')
+    })
+    act(() => {
+      secondId = probe.latest().beginPendingImageAttachment('blob:preview-2')
+    })
+
+    act(() => {
+      probe.latest().dropPendingImageAttachment(firstId as string)
+    })
+
+    expect(probe.latest().imageAttachments).toMatchObject([
+      { id: secondId, previewUrl: 'blob:preview-2', pending: true }
+    ])
+    act(() => probe.root.unmount())
+  })
+
+  it('excludes a pending chip from the scope cache while a settled chip persists', async () => {
+    const probe = await renderProbe('pty-1')
+    let pendingId: string | null = null
+    act(() => {
+      pendingId = probe.latest().beginPendingImageAttachment('blob:preview-1')
+    })
+    await act(async () => {
+      probe.latest().attachResolvedPaths(['/tmp/settled.png'])
+    })
+
+    const cached = readNativeChatAttachmentCache('pty-1')
+    expect(cached.some((attachment) => attachment.id === pendingId)).toBe(false)
+    expect(cached).toMatchObject([{ path: '/tmp/settled.png' }])
+    expect(cached[0]?.previewUrl).toBeUndefined()
+    act(() => probe.root.unmount())
+  })
+
+  it('revokes a blob: preview URL on removal but not a data: preview URL', async () => {
+    const probe = await renderProbe('pty-1')
+    const revoke = vi.spyOn(URL, 'revokeObjectURL')
+    let blobId: string | null = null
+    act(() => {
+      blobId = probe.latest().beginPendingImageAttachment('blob:preview-1')
+    })
+    act(() => {
+      probe.latest().beginPendingImageAttachment('data:image/png;base64,AAAA')
+    })
+
+    act(() => {
+      probe.latest().dropPendingImageAttachment(blobId as string)
+    })
+    expect(revoke).toHaveBeenCalledWith('blob:preview-1')
+
+    // Only the remaining data: chip is left to clear; revoke must not fire again.
+    revoke.mockClear()
+    act(() => {
+      probe.latest().clearImageAttachments()
+    })
+    expect(revoke).not.toHaveBeenCalled()
+    act(() => probe.root.unmount())
+  })
 })
diff --git a/src/renderer/src/components/native-chat/use-native-chat-composer-attachments.ts b/src/renderer/src/components/native-chat/use-native-chat-composer-attachments.ts
index d9a0844cbd4..c7a8c7ab2fc 100644
--- a/src/renderer/src/components/native-chat/use-native-chat-composer-attachments.ts
+++ b/src/renderer/src/components/native-chat/use-native-chat-composer-attachments.ts
@@ -40,6 +40,9 @@ export function useNativeChatComposerAttachments({
   clearImageAttachments: () => void
   flushPendingAttachments: () => void
   removeImageAttachment: (id: string) => void
+  beginPendingImageAttachment: (previewUrl?: string) => string | null
+  resolvePendingImageAttachment: (id: string, path: string, connectionId?: string | null) => void
+  dropPendingImageAttachment: (id: string) => void
 } {
   const [imageAttachments, setImageAttachments] = useState<NativeChatComposerImageAttachment[]>(
     () => readNativeChatAttachmentCache(attachmentScopeKey)
@@ -72,6 +75,30 @@ export function useNativeChatComposerAttachments({
     [attachmentScopeKey]
   )
 
+  const nextAttachmentId = useCallback((): string => {
+    imageAttachmentCounter.current += 1
+    return `${Date.now()}-${imageAttachmentCounter.current}`
+  }, [])
+
+  // Local paths are only attachable when the composer's target runs locally;
+  // remote-runtime panes read a different filesystem than the one we resolved.
+  const attachmentTargetBlocked = useCallback((): boolean => {
+    const target = resolveTarget()
+    return (
+      (!target && !allowWithoutTarget) ||
+      Boolean(target && nativeChatComposerTargetIsRemote(target.ptyId))
+    )
+  }, [allowWithoutTarget, resolveTarget])
+
+  const noteAttachmentTargetBlocked = useCallback(() => {
+    setNotice(
+      translate(
+        'components.native-chat.composer.localAttachmentUnsupported',
+        'Local attachments are not available for remote sessions.'
+      )
+    )
+  }, [setNotice])
+
   const appendImageAttachments = useCallback(
     (paths: { path: string; connectionId?: string | null }[]) => {
       if (paths.length === 0) {
@@ -79,16 +106,56 @@ export function useNativeChatComposerAttachments({
       }
       updateImageAttachments((prev) => [
         ...prev,
-        ...paths.map(({ path, connectionId }) => {
-          imageAttachmentCounter.current += 1
-          return {
-            id: `${Date.now()}-${imageAttachmentCounter.current}`,
-            path,
-            connectionId: connectionId ?? undefined
-          }
-        })
+        ...paths.map(({ path, connectionId }) => ({
+          id: nextAttachmentId(),
+          path,
+          connectionId: connectionId ?? undefined
+        }))
       ])
     },
+    [nextAttachmentId, updateImageAttachments]
+  )
+
+  // Placeholder chip shown the instant a paste starts, so a clipboard image that
+  // takes a beat to save (or upload over SSH) never reads as a dropped paste.
+  const beginPendingImageAttachment = useCallback(
+    (previewUrl?: string): string | null => {
+      if (disabledRef.current) {
+        return null
+      }
+      if (attachmentTargetBlocked()) {
+        noteAttachmentTargetBlocked()
+        return null
+      }
+      const id = nextAttachmentId()
+      updateImageAttachments((prev) => [...prev, { id, path: '', previewUrl, pending: true }])
+      return id
+    },
+    [attachmentTargetBlocked, nextAttachmentId, noteAttachmentTargetBlocked, updateImageAttachments]
+  )
+
+  const resolvePendingImageAttachment = useCallback(
+    (id: string, path: string, connectionId?: string | null) => {
+      updateImageAttachments((prev) =>
+        prev.map((attachment) =>
+          attachment.id === id
+            ? {
+                ...attachment,
+                path,
+                connectionId: connectionId ?? undefined,
+                pending: undefined
+              }
+            : attachment
+        )
+      )
+    },
+    [updateImageAttachments]
+  )
+
+  const dropPendingImageAttachment = useCallback(
+    (id: string) => {
+      updateImageAttachments((prev) => removeAttachmentById(prev, id))
+    },
     [updateImageAttachments]
   )
 
@@ -120,17 +187,8 @@ export function useNativeChatComposerAttachments({
       focus: boolean,
       preserveNotice = false
     ) => {
-      const target = resolveTarget()
-      if (
-        (!target && !allowWithoutTarget) ||
-        (target && nativeChatComposerTargetIsRemote(target.ptyId))
-      ) {
-        setNotice(
-          translate(
-            'components.native-chat.composer.localAttachmentUnsupported',
-            'Local attachments are not available for remote sessions.'
-          )
-        )
+      if (attachmentTargetBlocked()) {
+        noteAttachmentTargetBlocked()
         return
       }
       const imagePaths = resolvedPaths.filter(({ path }) => isNativeChatImageAttachmentPath(path))
@@ -150,10 +208,10 @@ export function useNativeChatComposerAttachments({
       }
     },
     [
-      allowWithoutTarget,
       appendImageAttachments,
+      attachmentTargetBlocked,
       insertFileReferences,
-      resolveTarget,
+      noteAttachmentTargetBlocked,
       setNotice,
       textareaRef
     ]
@@ -201,13 +259,37 @@ export function useNativeChatComposerAttachments({
   return {
     imageAttachments,
     attachResolvedPaths,
-    clearImageAttachments: () => updateImageAttachments(() => []),
+    clearImageAttachments: () =>
+      updateImageAttachments((prev) => {
+        prev.forEach(releaseAttachmentPreview)
+        return []
+      }),
     flushPendingAttachments,
-    removeImageAttachment: (id) =>
-      updateImageAttachments((prev) => prev.filter((attachment) => attachment.id !== id))
+    removeImageAttachment: (id) => updateImageAttachments((prev) => removeAttachmentById(prev, id)),
+    beginPendingImageAttachment,
+    resolvePendingImageAttachment,
+    dropPendingImageAttachment
   }
 }
 
+/** Object URLs minted from a clipboard blob leak until revoked; data URLs don't. */
+function releaseAttachmentPreview(attachment: NativeChatComposerImageAttachment): void {
+  if (attachment.previewUrl?.startsWith('blob:')) {
+    URL.revokeObjectURL(attachment.previewUrl)
+  }
+}
+
+function removeAttachmentById(
+  attachments: readonly NativeChatComposerImageAttachment[],
+  id: string
+): NativeChatComposerImageAttachment[] {
+  const removed = attachments.find((attachment) => attachment.id === id)
+  if (removed) {
+    releaseAttachmentPreview(removed)
+  }
+  return attachments.filter((attachment) => attachment.id !== id)
+}
+
 const attachmentCache = new Map<string, NativeChatComposerImageAttachment[]>()
 
 export function readNativeChatAttachmentCache(
@@ -218,8 +300,16 @@ export function readNativeChatAttachmentCache(
 
 function writeNativeChatAttachmentCache(
   scopeKey: string,
-  attachments: readonly NativeChatComposerImageAttachment[]
+  cacheable: readonly NativeChatComposerImageAttachment[]
 ): void {
+  // A pending chip's save resolves into THIS hook instance; restoring one into a
+  // remount would strand it pending forever, so only settled chips are cached.
+  const attachments = cacheable
+    .filter((attachment) => !attachment.pending)
+    // Preview URLs can retain the full clipboard Blob (or a large data URL) for
+    // the lifetime of the scope cache. Settled attachments reload from their
+    // authorized path after a remount, so never retain the transient preview.
+    .map(({ previewUrl: _previewUrl, ...attachment }) => attachment)
   if (attachments.length === 0) {
     attachmentCache.delete(scopeKey)
     return
diff --git a/src/renderer/src/components/native-chat/use-native-chat-composer-paste.test.tsx b/src/renderer/src/components/native-chat/use-native-chat-composer-paste.test.tsx
index 7f5d0e2f1b9..111b8369f12 100644
--- a/src/renderer/src/components/native-chat/use-native-chat-composer-paste.test.tsx
+++ b/src/renderer/src/components/native-chat/use-native-chat-composer-paste.test.tsx
@@ -6,7 +6,8 @@ import type { NativeChatAttachmentOwner } from './native-chat-attachment-upload'
 
 const mocks = vi.hoisted(() => ({
   saveClipboardImageAsTempFile: vi.fn(),
-  readClipboardText: vi.fn()
+  readClipboardText: vi.fn(),
+  readClipboardImageThumbnail: vi.fn()
 }))
 
 vi.mock('@/i18n/i18n', () => ({
@@ -27,42 +28,73 @@ vi.stubGlobal('window', {
   api: {
     ui: {
       saveClipboardImageAsTempFile: mocks.saveClipboardImageAsTempFile,
-      readClipboardText: mocks.readClipboardText
+      readClipboardText: mocks.readClipboardText,
+      readClipboardImageThumbnail: mocks.readClipboardImageThumbnail
     }
   }
 })
+vi.stubGlobal('URL', {
+  createObjectURL: () => 'blob:clipboard-image',
+  revokeObjectURL: () => {}
+})
 
 import { useNativeChatComposerPaste } from './use-native-chat-composer-paste'
 
 type HookApi = ReturnType<typeof useNativeChatComposerPaste>
 
-function Probe({
-  disabled,
-  resolveAttachmentOwner,
-  attachResolvedPaths,
-  insertTypedText,
-  setNotice,
-  onReady
-}: {
+/** Mirrors the composer's attachment list so tests can assert what the user sees. */
+type FakeChip = { id: string; path: string; previewUrl?: string; pending: boolean }
+
+function createChipStore(): {
+  chips: FakeChip[]
+  begin: (previewUrl?: string) => string | null
+  resolve: (id: string, path: string, connectionId?: string | null) => void
+  drop: (id: string) => void
+  connectionIds: (string | null | undefined)[]
+} {
+  const chips: FakeChip[] = []
+  const connectionIds: (string | null | undefined)[] = []
+  let counter = 0
+  return {
+    chips,
+    connectionIds,
+    begin: (previewUrl) => {
+      counter += 1
+      const id = `chip-${counter}`
+      chips.push({ id, path: '', previewUrl, pending: true })
+      return id
+    },
+    resolve: (id, path, connectionId) => {
+      const chip = chips.find((candidate) => candidate.id === id)
+      if (chip) {
+        chip.path = path
+        chip.pending = false
+      }
+      connectionIds.push(connectionId)
+    },
+    drop: (id) => {
+      const index = chips.findIndex((candidate) => candidate.id === id)
+      if (index !== -1) {
+        chips.splice(index, 1)
+      }
+    }
+  }
+}
+
+type ProbeArgs = {
   disabled: boolean
   resolveAttachmentOwner: () => NativeChatAttachmentOwner
-  attachResolvedPaths: (paths: string[]) => void
+  attachResolvedPaths: (paths: string[], connectionId?: string | null) => void
+  beginPendingImageAttachment: (previewUrl?: string) => string | null
+  resolvePendingImageAttachment: (id: string, path: string, connectionId?: string | null) => void
+  dropPendingImageAttachment: (id: string) => void
   insertTypedText: (text: string) => boolean
   setNotice: (notice: string | null) => void
   onReady: (api: HookApi) => void
-}): null {
-  onReady(
-    useNativeChatComposerPaste({
-      agent: 'claude',
-      disabled,
-      caret: 0,
-      resolveAttachmentOwner,
-      attachResolvedPaths,
-      insertTypedText,
-      setCaret: () => {},
-      setNotice
-    })
-  )
+}
+
+function Probe({ onReady, ...args }: ProbeArgs): null {
+  onReady(useNativeChatComposerPaste({ agent: 'claude', caret: 0, setCaret: () => {}, ...args }))
   return null
 }
 
@@ -71,12 +103,14 @@ let root: Root | null = null
 async function renderProbe(args: {
   disabled?: boolean
   resolveAttachmentOwner: () => NativeChatAttachmentOwner
-  attachResolvedPaths?: (paths: string[]) => void
+  attachResolvedPaths?: (paths: string[], connectionId?: string | null) => void
+  store?: ReturnType<typeof createChipStore>
   insertTypedText?: (text: string) => boolean
   setNotice?: (notice: string | null) => void
 }): Promise<{ latest: () => HookApi; setDisabled: (disabled: boolean) => Promise<void> }> {
   const container = document.createElement('div')
   document.body.append(container)
+  const store = args.store ?? createChipStore()
   let api: HookApi | null = null
   root = createRoot(container)
   const render = async (disabled: boolean): Promise<void> => {
@@ -86,6 +120,9 @@ async function renderProbe(args: {
           disabled,
           resolveAttachmentOwner: args.resolveAttachmentOwner,
           attachResolvedPaths: args.attachResolvedPaths ?? (() => {}),
+          beginPendingImageAttachment: store.begin,
+          resolvePendingImageAttachment: store.resolve,
+          dropPendingImageAttachment: store.drop,
           insertTypedText: args.insertTypedText ?? (() => true),
           setNotice: args.setNotice ?? (() => {}),
           onReady: (next) => {
@@ -113,7 +150,9 @@ function imagePasteEvent(): {
   defaultPrevented: boolean
 } {
   return {
-    clipboardData: { items: [{ type: 'image/png' }] } as unknown as DataTransfer,
+    clipboardData: {
+      items: [{ type: 'image/png', getAsFile: () => new Blob([], { type: 'image/png' }) }]
+    } as unknown as DataTransfer,
     preventDefault: vi.fn(),
     defaultPrevented: false
   }
@@ -137,10 +176,10 @@ afterEach(() => {
 describe('useNativeChatComposerPaste', () => {
   it('does not save a clipboard image locally for a remote runtime', async () => {
     const setNotice = vi.fn()
-    const attachResolvedPaths = vi.fn()
+    const store = createChipStore()
     const probe = await renderProbe({
       resolveAttachmentOwner: () => ({ kind: 'runtime' }),
-      attachResolvedPaths,
+      store,
       setNotice
     })
 
@@ -150,18 +189,19 @@ describe('useNativeChatComposerPaste', () => {
       'Local attachments are not available for remote sessions.'
     )
     expect(mocks.saveClipboardImageAsTempFile).not.toHaveBeenCalled()
-    expect(attachResolvedPaths).not.toHaveBeenCalled()
+    expect(mocks.readClipboardImageThumbnail).not.toHaveBeenCalled()
+    expect(store.chips).toHaveLength(0)
   })
 
   it('surfaces a failed SSH image save through the composer notice', async () => {
     mocks.saveClipboardImageAsTempFile.mockRejectedValue(
       new Error('Remote connection dropped. Click Reconnect on the SSH target before retrying.')
     )
-    const attachResolvedPaths = vi.fn()
+    const store = createChipStore()
     const setNotice = vi.fn()
     const probe = await renderProbe({
       resolveAttachmentOwner: () => sshOwner,
-      attachResolvedPaths,
+      store,
       setNotice
     })
     await act(async () => {
@@ -170,24 +210,138 @@ describe('useNativeChatComposerPaste', () => {
     expect(setNotice).toHaveBeenCalledWith(
       'Remote connection dropped. Click Reconnect on the SSH target before retrying.'
     )
-    expect(attachResolvedPaths).not.toHaveBeenCalled()
+    // The optimistic chip must not outlive a failed save.
+    expect(store.chips).toHaveLength(0)
   })
 
-  it('saves on the SSH host and attaches the returned remote path', async () => {
+  it('saves on the SSH host and settles the chip on the returned remote path', async () => {
     mocks.saveClipboardImageAsTempFile.mockResolvedValue('/remote/tmp/orca-paste-1.png')
+    const store = createChipStore()
     const attachResolvedPaths = vi.fn()
     const probe = await renderProbe({
       resolveAttachmentOwner: () => sshOwner,
+      store,
       attachResolvedPaths
     })
     await act(async () => {
       probe.latest().handlePaste(imagePasteEvent())
     })
     expect(mocks.saveClipboardImageAsTempFile).toHaveBeenCalledWith({ connectionId: 'conn-1' })
-    expect(attachResolvedPaths).toHaveBeenCalledWith(['/remote/tmp/orca-paste-1.png'])
+    expect(store.chips).toEqual([
+      {
+        id: 'chip-1',
+        path: '/remote/tmp/orca-paste-1.png',
+        previewUrl: 'blob:clipboard-image',
+        pending: false
+      }
+    ])
+    // The chip carries the SSH connection so its preview reads over SFTP.
+    expect(store.connectionIds).toEqual(['conn-1'])
+    expect(attachResolvedPaths).not.toHaveBeenCalled()
+  })
+
+  it('shows a pending chip before the save resolves', async () => {
+    let resolveSave: (path: string) => void = () => {}
+    mocks.saveClipboardImageAsTempFile.mockReturnValue(
+      new Promise<string>((resolve) => {
+        resolveSave = resolve
+      })
+    )
+    const store = createChipStore()
+    const probe = await renderProbe({
+      resolveAttachmentOwner: () => ({ kind: 'local' }),
+      store
+    })
+    await act(async () => {
+      probe.latest().handlePaste(imagePasteEvent())
+    })
+    expect(store.chips).toEqual([
+      { id: 'chip-1', path: '', previewUrl: 'blob:clipboard-image', pending: true }
+    ])
+    await act(async () => {
+      resolveSave('/tmp/orca-paste-1.png')
+    })
+    expect(store.chips[0]).toMatchObject({ path: '/tmp/orca-paste-1.png', pending: false })
+  })
+
+  it('does not settle a local path after the attachment owner changes', async () => {
+    let resolveSave: (path: string) => void = () => {}
+    let owner: NativeChatAttachmentOwner = { kind: 'local' }
+    mocks.saveClipboardImageAsTempFile.mockReturnValue(
+      new Promise<string>((resolve) => {
+        resolveSave = resolve
+      })
+    )
+    const store = createChipStore()
+    const setNotice = vi.fn()
+    const probe = await renderProbe({
+      resolveAttachmentOwner: () => owner,
+      store,
+      setNotice
+    })
+
+    await act(async () => {
+      probe.latest().handlePaste(imagePasteEvent())
+    })
+    expect(store.chips).toHaveLength(1)
+
+    owner = sshOwner
+    await act(async () => {
+      resolveSave('/tmp/orca-paste-owner-changed.png')
+    })
+
+    expect(store.chips).toHaveLength(0)
+    expect(setNotice).toHaveBeenCalledWith('Worktree not ready — try again in a moment.')
+  })
+
+  it('shows a pending chip for menu paste from the clipboard thumbnail probe', async () => {
+    mocks.readClipboardImageThumbnail.mockResolvedValue({
+      dataUrl: 'data:image/png;base64,AAA',
+      width: 1200,
+      height: 800
+    })
+    let resolveSave: (path: string) => void = () => {}
+    mocks.saveClipboardImageAsTempFile.mockReturnValue(
+      new Promise<string>((resolve) => {
+        resolveSave = resolve
+      })
+    )
+    const store = createChipStore()
+    const probe = await renderProbe({
+      resolveAttachmentOwner: () => ({ kind: 'local' }),
+      store
+    })
+    await act(async () => {
+      probe.latest().pasteFromClipboard()
+    })
+    expect(store.chips).toEqual([
+      { id: 'chip-1', path: '', previewUrl: 'data:image/png;base64,AAA', pending: true }
+    ])
+    await act(async () => {
+      resolveSave('/tmp/orca-paste-2.png')
+    })
+    expect(store.chips[0]).toMatchObject({ path: '/tmp/orca-paste-2.png', pending: false })
+  })
+
+  it('attaches directly when no clipboard preview was available', async () => {
+    mocks.readClipboardImageThumbnail.mockResolvedValue(null)
+    mocks.saveClipboardImageAsTempFile.mockResolvedValue('C:\\Temp\\orca-paste-3.png')
+    const store = createChipStore()
+    const attachResolvedPaths = vi.fn()
+    const probe = await renderProbe({
+      resolveAttachmentOwner: () => ({ kind: 'local' }),
+      store,
+      attachResolvedPaths
+    })
+    await act(async () => {
+      probe.latest().pasteFromClipboard()
+    })
+    expect(store.chips).toHaveLength(0)
+    expect(attachResolvedPaths).toHaveBeenCalledWith(['C:\\Temp\\orca-paste-3.png'], null)
   })
 
   it('stops pasteFromClipboard on a failed save instead of falling through to text', async () => {
+    mocks.readClipboardImageThumbnail.mockResolvedValue(null)
     mocks.saveClipboardImageAsTempFile.mockRejectedValue(new Error('sftp down'))
     const insertTypedText = vi.fn()
     const setNotice = vi.fn()
@@ -205,17 +359,40 @@ describe('useNativeChatComposerPaste', () => {
   })
 
   it('still falls through to text when the clipboard holds no image', async () => {
+    mocks.readClipboardImageThumbnail.mockResolvedValue(null)
     mocks.saveClipboardImageAsTempFile.mockResolvedValue(null)
     mocks.readClipboardText.mockResolvedValue('hello')
     const insertTypedText = vi.fn()
+    const store = createChipStore()
     const probe = await renderProbe({
       resolveAttachmentOwner: () => ({ kind: 'local' }),
+      store,
       insertTypedText
     })
     await act(async () => {
       probe.latest().pasteFromClipboard()
     })
     expect(insertTypedText).toHaveBeenCalledWith('hello')
+    expect(store.chips).toHaveLength(0)
+  })
+
+  it('drops the pending chip when the clipboard changed between probe and save', async () => {
+    mocks.readClipboardImageThumbnail.mockResolvedValue({
+      dataUrl: 'data:image/png;base64,AAA',
+      width: 10,
+      height: 10
+    })
+    mocks.saveClipboardImageAsTempFile.mockResolvedValue(null)
+    mocks.readClipboardText.mockResolvedValue('hello')
+    const store = createChipStore()
+    const probe = await renderProbe({
+      resolveAttachmentOwner: () => ({ kind: 'local' }),
+      store
+    })
+    await act(async () => {
+      probe.latest().pasteFromClipboard()
+    })
+    expect(store.chips).toHaveLength(0)
   })
 
   it('suppresses the failure notice when the composer became disabled mid-save', async () => {
diff --git a/src/renderer/src/components/native-chat/use-native-chat-composer-paste.ts b/src/renderer/src/components/native-chat/use-native-chat-composer-paste.ts
index c92c071209e..06bff8eb2f8 100644
--- a/src/renderer/src/components/native-chat/use-native-chat-composer-paste.ts
+++ b/src/renderer/src/components/native-chat/use-native-chat-composer-paste.ts
@@ -2,7 +2,7 @@ import { useCallback, useRef } from 'react'
 import { translate } from '@/i18n/i18n'
 import { extractIpcErrorMessage } from '@/lib/ipc-error'
 import type { AgentType } from '../../../../shared/agent-status-types'
-import { resolveImagePaste } from './native-chat-image-paste'
+import { getAgentImageHandling } from './native-chat-image-paste'
 import { NATIVE_CHAT_CONTEXT_PASTE_MAX_BYTES } from './native-chat-composer-target'
 import {
   nativeChatLocalAttachmentUnsupportedNotice,
@@ -19,7 +19,10 @@ export type UseNativeChatComposerPasteArgs = {
   /** Resolved at paste time: SSH panes must save the clipboard image on the
    *  remote host, or the attached path names a file the agent cannot read. */
   resolveAttachmentOwner: () => NativeChatAttachmentOwner
-  attachResolvedPaths: (paths: string[]) => void
+  attachResolvedPaths: (paths: string[], connectionId?: string | null) => void
+  beginPendingImageAttachment: (previewUrl?: string) => string | null
+  resolvePendingImageAttachment: (id: string, path: string, connectionId?: string | null) => void
+  dropPendingImageAttachment: (id: string) => void
   insertTypedText: (text: string) => boolean
   setCaret: (caret: number) => void
   setNotice: (notice: string | null) => void
@@ -33,12 +36,39 @@ type ClipboardEventLike = {
   defaultPrevented: boolean
 }
 
-function clipboardEventHasImage(event: ClipboardEventLike): boolean {
+function clipboardEventImageFile(event: ClipboardEventLike): File | null {
   const data = event.clipboardData
   if (!data) {
+    return null
+  }
+  const item = Array.from(data.items).find((candidate) => candidate.type.startsWith('image/'))
+  return item?.getAsFile() ?? null
+}
+
+/** Owners whose attachment path is a file this client can write right now. */
+function ownerAcceptsClipboardImage(
+  owner: NativeChatAttachmentOwner
+): owner is Extract<NativeChatAttachmentOwner, { kind: 'local' | 'ssh' }> {
+  return owner.kind === 'local' || owner.kind === 'ssh'
+}
+
+function ownerConnectionId(owner: NativeChatAttachmentOwner): string | null {
+  return owner.kind === 'ssh' ? owner.connectionId : null
+}
+
+/** A save can outlive a worktree/connection switch; never settle its path into
+ * a composer whose backing host changed while the clipboard was in flight. */
+function attachmentOwnerStillMatches(
+  original: NativeChatAttachmentOwner,
+  current: NativeChatAttachmentOwner
+): boolean {
+  if (original.kind !== current.kind) {
     return false
   }
-  return Array.from(data.items).some((item) => item.type.startsWith('image/'))
+  if (original.kind !== 'ssh') {
+    return true
+  }
+  return current.kind === 'ssh' && original.connectionId === current.connectionId
 }
 
 /**
@@ -47,7 +77,12 @@ function clipboardEventHasImage(event: ClipboardEventLike): boolean {
  * `handlePaste` consumes a paste event (the textarea's onPaste *or* the
  * pane-level capture listener — the OS often retargets the event off the
  * focused textarea, so the pane listener is the reliable path);
- * `pasteFromClipboard` is the menu-driven path with no event in hand.
+ * `pasteFromClipboard` is the menu-driven path with no event in hand (on macOS
+ * Cmd+V is routed here, so it must feel just as immediate).
+ *
+ * Both paths show a pending attachment chip before the image is saved: writing
+ * the file (or uploading it over SFTP) takes long enough that silence reads as
+ * a dropped paste and invites duplicate pastes.
  */
 export function useNativeChatComposerPaste({
   agent,
@@ -55,6 +90,9 @@ export function useNativeChatComposerPaste({
   caret,
   resolveAttachmentOwner,
   attachResolvedPaths,
+  beginPendingImageAttachment,
+  resolvePendingImageAttachment,
+  dropPendingImageAttachment,
   insertTypedText,
   setCaret,
   setNotice
@@ -67,6 +105,7 @@ export function useNativeChatComposerPaste({
   // the captured closure would otherwise attach/insert into a guarded composer.
   const disabledRef = useRef(disabled)
   disabledRef.current = disabled
+  const acceptsImages = getAgentImageHandling(agent) === 'attachment'
 
   // Distinguishes 'empty' (no image on the clipboard — text may fall through)
   // from 'failed' (save errored — the flow must stop and say why).
@@ -102,22 +141,45 @@ export function useNativeChatComposerPaste({
     [setNotice]
   )
 
-  const attachClipboardImageTempFile = useCallback(
-    (tempPath: string) => {
-      const result = resolveImagePaste(agent, tempPath)
-      if (result.kind === 'unsupported') {
-        setNotice(
-          translate(
-            'components.native-chat.composer.imageUnsupported',
-            'Image paste is not supported for this agent.'
-          )
-        )
+  const noteImagesUnsupported = useCallback(() => {
+    setNotice(
+      translate(
+        'components.native-chat.composer.imageUnsupported',
+        'Image paste is not supported for this agent.'
+      )
+    )
+  }, [setNotice])
+
+  /** Settle the chip started at paste time, or attach directly when the paste
+   *  produced no placeholder (no clipboard preview was available). */
+  const settleImagePaste = useCallback(
+    (
+      pendingId: string | null,
+      path: string,
+      connectionId: string | null,
+      originalOwner: NativeChatAttachmentOwner
+    ) => {
+      if (!attachmentOwnerStillMatches(originalOwner, resolveAttachmentOwner())) {
+        if (pendingId) {
+          dropPendingImageAttachment(pendingId)
+        }
+        setNotice(nativeChatWorktreeNotReadyNotice())
         return
       }
-      attachResolvedPaths([result.path])
+      if (pendingId) {
+        resolvePendingImageAttachment(pendingId, path, connectionId)
+      } else {
+        attachResolvedPaths([path], connectionId)
+      }
       setNotice(null)
     },
-    [agent, attachResolvedPaths, setNotice]
+    [
+      attachResolvedPaths,
+      dropPendingImageAttachment,
+      resolveAttachmentOwner,
+      resolvePendingImageAttachment,
+      setNotice
+    ]
   )
 
   const handlePaste = useCallback(
@@ -131,7 +193,8 @@ export function useNativeChatComposerPaste({
       // textarea's native paste keeps its caret/undo behavior when it is the
       // event target. (When the OS retargets the paste off the textarea the
       // pane listener still routes text via pasteFromClipboard.)
-      if (!clipboardEventHasImage(event)) {
+      const imageFile = clipboardEventImageFile(event)
+      if (!imageFile) {
         return
       }
       event.preventDefault()
@@ -140,25 +203,45 @@ export function useNativeChatComposerPaste({
         setNotice(nativeChatWorktreeNotReadyNotice())
         return
       }
+      if (!acceptsImages) {
+        noteImagesUnsupported()
+        return
+      }
       // Why: snapshot the caret before the async temp-file round-trip — `caret`
       // state can move (further typing/selection) while the await is in flight.
       const caretAtPaste = caret
+      // The clipboard blob is already in this process, so the chip can show the
+      // real image on the same tick the paste happens — no round-trip at all.
+      const previewUrl = ownerAcceptsClipboardImage(owner)
+        ? URL.createObjectURL(imageFile)
+        : undefined
+      const pendingId = previewUrl ? beginPendingImageAttachment(previewUrl) : null
+      if (previewUrl && !pendingId) {
+        URL.revokeObjectURL(previewUrl)
+      }
       void (async () => {
         const saved = await saveClipboardImageForOwner(owner)
         if (saved.status !== 'saved' || disabledRef.current) {
+          if (pendingId) {
+            dropPendingImageAttachment(pendingId)
+          }
           return
         }
-        attachClipboardImageTempFile(saved.tempPath)
+        settleImagePaste(pendingId, saved.tempPath, ownerConnectionId(owner), owner)
         setCaret(caretAtPaste)
       })()
     },
     [
-      attachClipboardImageTempFile,
+      acceptsImages,
+      beginPendingImageAttachment,
       caret,
+      dropPendingImageAttachment,
+      noteImagesUnsupported,
       resolveAttachmentOwner,
       saveClipboardImageForOwner,
       setCaret,
-      setNotice
+      setNotice,
+      settleImagePaste
     ]
   )
 
@@ -169,8 +252,23 @@ export function useNativeChatComposerPaste({
       // way to LEARN whether the clipboard holds an image. An image then gets
       // the not-ready notice (never a local-path attach for a possibly-remote
       // worktree); plain text falls through unaffected.
-      const saved = await saveClipboardImageForOwner(owner)
+      //
+      // The in-memory thumbnail probe runs alongside the save rather than before
+      // it: it answers first (it never touches disk or the network), so the chip
+      // appears while the save is still in flight and text paste stays as fast.
+      const wantsPlaceholder = acceptsImages && ownerAcceptsClipboardImage(owner)
+      const thumbnailPromise = wantsPlaceholder
+        ? window.api.ui.readClipboardImageThumbnail().catch(() => null)
+        : Promise.resolve(null)
+      const savePromise = saveClipboardImageForOwner(owner)
+      const thumbnail = await thumbnailPromise
+      const pendingId =
+        thumbnail && !disabledRef.current ? beginPendingImageAttachment(thumbnail.dataUrl) : null
+      const saved = await savePromise
       if (disabledRef.current || saved.status === 'failed') {
+        if (pendingId) {
+          dropPendingImageAttachment(pendingId)
+        }
         return
       }
       if (saved.status === 'saved') {
@@ -178,9 +276,17 @@ export function useNativeChatComposerPaste({
           setNotice(nativeChatWorktreeNotReadyNotice())
           return
         }
-        attachClipboardImageTempFile(saved.tempPath)
+        if (!acceptsImages) {
+          noteImagesUnsupported()
+          return
+        }
+        settleImagePaste(pendingId, saved.tempPath, ownerConnectionId(owner), owner)
         return
       }
+      // Clipboard changed between the probe and the save: no image to attach.
+      if (pendingId) {
+        dropPendingImageAttachment(pendingId)
+      }
       const text = await window.api.ui
         .readClipboardText({ maxBytes: NATIVE_CHAT_CONTEXT_PASTE_MAX_BYTES })
         .catch(() => '')
@@ -192,11 +298,15 @@ export function useNativeChatComposerPaste({
       }
     })()
   }, [
-    attachClipboardImageTempFile,
+    acceptsImages,
+    beginPendingImageAttachment,
+    dropPendingImageAttachment,
     insertTypedText,
+    noteImagesUnsupported,
     resolveAttachmentOwner,
     saveClipboardImageForOwner,
-    setNotice
+    setNotice,
+    settleImagePaste
   ])
 
   return { handlePaste, pasteFromClipboard }
diff --git a/src/renderer/src/components/native-chat/use-native-chat-structured-composer-send.ts b/src/renderer/src/components/native-chat/use-native-chat-structured-composer-send.ts
new file mode 100644
index 00000000000..e871d65c62c
--- /dev/null
+++ b/src/renderer/src/components/native-chat/use-native-chat-structured-composer-send.ts
@@ -0,0 +1,73 @@
+import { useCallback } from 'react'
+import { emitNativeChatMessageSent } from '@/lib/native-chat-telemetry'
+import { isStructuredAgentSessionComposerCommand } from '../../../../shared/structured-agent-session-composer'
+import type { AgentType } from '../../../../shared/agent-status-types'
+import { dispatchNativeChatStructuredComposerText } from './native-chat-structured-composer-dispatch'
+import { pushHistory, type HistoryState } from './native-chat-composer-state'
+import type { NativeChatStructuredComposerTransport } from './native-chat-composer-types'
+import type { NativeChatComposerImageAttachment } from './NativeChatComposerField'
+
+export type UseNativeChatStructuredComposerSendArgs = {
+  agent: AgentType
+  imageAttachments: readonly NativeChatComposerImageAttachment[]
+  structuredTransport?: NativeChatStructuredComposerTransport
+  clearImageAttachments: () => void
+  clearSkillOrigin: () => void
+  setHistory: (updater: (previous: HistoryState) => HistoryState) => void
+  setDraft: (value: string) => void
+  setCaret: (caret: number) => void
+}
+
+/** Send through the structured journal transport, clearing the composer only
+ *  once the transport accepts (the PTY path has its own sibling hook). */
+export function useNativeChatStructuredComposerSend({
+  agent,
+  imageAttachments,
+  structuredTransport,
+  clearImageAttachments,
+  clearSkillOrigin,
+  setHistory,
+  setDraft,
+  setCaret
+}: UseNativeChatStructuredComposerSendArgs): (
+  text: string,
+  attachments?: readonly NativeChatComposerImageAttachment[]
+) => void {
+  return useCallback(
+    (text: string, attachments = imageAttachments): void => {
+      if (!structuredTransport) {
+        return
+      }
+      if (attachments.length > 0 && isStructuredAgentSessionComposerCommand(text, agent)) {
+        structuredTransport.onError('Remove attachments before using a chat-session command.')
+        return
+      }
+      void dispatchNativeChatStructuredComposerText(structuredTransport, text, attachments)
+        .then(({ accepted, error }) => {
+          structuredTransport.onError(error)
+          if (!accepted) {
+            return
+          }
+          emitNativeChatMessageSent({ agent, runtime: structuredTransport.runtime })
+          setHistory((previous) => pushHistory(previous, text))
+          setDraft('')
+          setCaret(0)
+          clearSkillOrigin()
+          clearImageAttachments()
+        })
+        .catch((error) =>
+          structuredTransport.onError(error instanceof Error ? error.message : String(error))
+        )
+    },
+    [
+      agent,
+      clearImageAttachments,
+      clearSkillOrigin,
+      imageAttachments,
+      setCaret,
+      setDraft,
+      setHistory,
+      structuredTransport
+    ]
+  )
+}
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index b893f1e8bdf..b546a930830 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -16684,6 +16684,7 @@
         "removeAttachment": "Remove attachment",
         "pastedImageLabel": "Pasted image",
         "imagePasteFailed": "Image paste failed.",
+        "imageSaving": "Saving pasted image…",
         "worktreeNotReady": "Worktree not ready — try again in a moment.",
         "uploadingAttachments": "Uploading {{value0}} file(s) to remote…",
         "model": "Model",
diff --git a/src/renderer/src/web/preload-api/web-clipboard-api.ts b/src/renderer/src/web/preload-api/web-clipboard-api.ts
index d86ac8c45b3..ffd955c2d0b 100644
--- a/src/renderer/src/web/preload-api/web-clipboard-api.ts
+++ b/src/renderer/src/web/preload-api/web-clipboard-api.ts
@@ -4,7 +4,9 @@ import {
   CLIPBOARD_IMAGE_MAX_SOURCE_BYTES,
   CLIPBOARD_IMAGE_TOO_LARGE_ERROR,
   assertClipboardImageByteLengthWithinLimit,
-  assertClipboardImageDimensionsWithinLimit
+  assertClipboardImageDimensionsWithinLimit,
+  clipboardImageThumbnailSize,
+  type ClipboardImageThumbnail
 } from '../../../../shared/clipboard-image'
 import { assertClipboardTextWriteWithinLimitWithYield } from '../../../../shared/clipboard-text'
 import { copyClipboardTextViaExecCommand } from '../web-clipboard-copy-fallback'
@@ -72,6 +74,50 @@ export async function convertImageBlobToPng(blob: Blob): Promise<Blob> {
   }
 }
 
+async function readClipboardImageBlob(): Promise<Blob | null> {
+  const clipboard = navigator.clipboard as
+    | (Clipboard & { read?: () => Promise<ClipboardItem[]> })
+    | undefined
+  if (!clipboard?.read) {
+    return null
+  }
+  const items = await clipboard.read()
+  for (const item of items) {
+    const imageType = item.types.find((type) => type.startsWith('image/'))
+    if (imageType) {
+      return item.getType(imageType)
+    }
+  }
+  return null
+}
+
+/** Web counterpart of the main-process clipboard probe: decodes the clipboard
+ *  image once and returns a small preview so the composer can show a chip while
+ *  the full image is still being uploaded to the runtime. */
+export async function readClipboardImageThumbnail(): Promise<ClipboardImageThumbnail | null> {
+  const blob = await readClipboardImageBlob()
+  if (!blob) {
+    return null
+  }
+  assertClipboardImageBlobWithinLimit(blob)
+  const bitmap = await createImageBitmap(blob)
+  try {
+    assertClipboardImageDimensionsWithinLimit(bitmap)
+    const thumbnailSize = clipboardImageThumbnailSize(bitmap)
+    const canvas = document.createElement('canvas')
+    canvas.width = thumbnailSize.width
+    canvas.height = thumbnailSize.height
+    const context = canvas.getContext('2d')
+    if (!context) {
+      return null
+    }
+    context.drawImage(bitmap, 0, 0, thumbnailSize.width, thumbnailSize.height)
+    return { dataUrl: canvas.toDataURL('image/png'), height: bitmap.height, width: bitmap.width }
+  } finally {
+    bitmap.close()
+  }
+}
+
 export async function readClipboardImagePngBase64(): Promise<string | null> {
   const clipboard = navigator.clipboard as
     | (Clipboard & { read?: () => Promise<ClipboardItem[]> })
diff --git a/src/renderer/src/web/preload-api/web-ui-api.ts b/src/renderer/src/web/preload-api/web-ui-api.ts
index ca67f5664a9..2755fc5663b 100644
--- a/src/renderer/src/web/preload-api/web-ui-api.ts
+++ b/src/renderer/src/web/preload-api/web-ui-api.ts
@@ -7,6 +7,7 @@ import { omitPairingLocalUiFields } from '../../../../shared/pairing-local-ui-fi
 import type { PairedUiState } from '../../../../shared/pairing-local-ui-fields'
 import {
   readClipboardImagePngBase64,
+  readClipboardImageThumbnail,
   saveClipboardImageAsTempFileInRuntime,
   writeWebClipboardText
 } from './web-clipboard-api'
@@ -131,6 +132,7 @@ export function createWebUiApi(): NonNullable<Partial<PreloadApi>['ui']> {
       }
       return saveClipboardImageAsTempFileInRuntime(contentBase64, args)
     },
+    readClipboardImageThumbnail: () => readClipboardImageThumbnail().catch(() => null),
     writeClipboardText: writeWebClipboardText,
     writeTerminalClipboardText: writeWebClipboardText,
     writeSelectionClipboardText: () =>
diff --git a/src/shared/clipboard-image.ts b/src/shared/clipboard-image.ts
index 092467a9de2..28c1a276e46 100644
--- a/src/shared/clipboard-image.ts
+++ b/src/shared/clipboard-image.ts
@@ -36,3 +36,29 @@ export function assertClipboardImageDimensionsWithinLimit({
     throw new Error(CLIPBOARD_IMAGE_TOO_LARGE_ERROR)
   }
 }
+
+/** Longest edge of the thumbnail the composer shows while the full clipboard
+ *  image is still being written to disk. Small enough to cross IPC instantly. */
+export const CLIPBOARD_IMAGE_THUMBNAIL_MAX_EDGE = 320
+
+export type ClipboardImageThumbnail = ClipboardImageDimensions & {
+  /** `data:image/png;base64,...` preview of the clipboard image. */
+  dataUrl: string
+}
+
+/** Scale `size` down so its longest edge fits the thumbnail budget. Returns the
+ *  input unchanged when it already fits, so small images skip the resize. */
+export function clipboardImageThumbnailSize({
+  height,
+  width
+}: ClipboardImageDimensions): ClipboardImageDimensions {
+  const longestEdge = Math.max(width, height)
+  if (longestEdge <= CLIPBOARD_IMAGE_THUMBNAIL_MAX_EDGE) {
+    return { height, width }
+  }
+  const scale = CLIPBOARD_IMAGE_THUMBNAIL_MAX_EDGE / longestEdge
+  return {
+    height: Math.max(1, Math.round(height * scale)),
+    width: Math.max(1, Math.round(width * scale))
+  }
+}

From 0886db2b90e1487f58cf0df7fc0ad5dfe6c788e9 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:01:24 -0700
Subject: [PATCH 84/92] refactor(process-table): extract the correlation
 indexes into their own module (#18246)

`src/shared/process-table-snapshot.ts` is 308 code lines against the 300
cap for `**/*.ts`, so `static analysis` is red on `main` and every open PR
inherits it.

Neither PR that grew the file crossed the cap alone. #18151 took it to 427
raw lines; #18166 added ~35 more. #18166's branch predated #18151, so the
head CI linted was 428 raw lines and passed, while the squash onto main is
463 -> 308 code lines. The gate lints the PR head, not the merge result, so
nothing linted the sum until it was on main.

Pure move, no behaviour change: the generic index machinery
(ProcessIdentityRow, ProcessTableIndexOf, buildProcessTableIndex,
collectDescendantsFromIndex, lookupProcessTableIndex, getProcessTableIndex
and its WeakMap) moves to process-table-index.ts. `ProcessTableIndex` and
`scoreForegroundCandidateRow` stay behind because they need
`ProcessTableRow`, which keeps the new module free of any import back and
so introduces no cycle.
---
 .../agent-foreground-process-batch.test.ts    |   4 +-
 .../agent-foreground-process-batch.ts         |   8 +-
 .../providers/agent-foreground-process.ts     |   3 +-
 .../windows-foreground-process-rows.ts        |   5 +-
 src/relay/pty-shell-utils.ts                  |   2 +-
 src/shared/process-table-index.ts             | 117 ++++++++++++++++++
 src/shared/process-table-snapshot.test.ts     |  10 +-
 src/shared/process-table-snapshot.ts          | 114 +----------------
 8 files changed, 134 insertions(+), 129 deletions(-)
 create mode 100644 src/shared/process-table-index.ts

diff --git a/src/main/providers/agent-foreground-process-batch.test.ts b/src/main/providers/agent-foreground-process-batch.test.ts
index 784a62c3376..8baa37a7499 100644
--- a/src/main/providers/agent-foreground-process-batch.test.ts
+++ b/src/main/providers/agent-foreground-process-batch.test.ts
@@ -1,9 +1,9 @@
 import { describe, expect, it } from 'vitest'
+import { parseStrictProcessTableRows } from '../../shared/process-table-snapshot'
 import {
   buildProcessTableIndex,
-  parseStrictProcessTableRows,
   type ProcessTableIndexStats
-} from '../../shared/process-table-snapshot'
+} from '../../shared/process-table-index'
 import {
   resolveAgentForegroundProcessesBatch,
   resolveAgentForegroundProcessesFromIndex
diff --git a/src/main/providers/agent-foreground-process-batch.ts b/src/main/providers/agent-foreground-process-batch.ts
index ac9223a955f..2e0036bb603 100644
--- a/src/main/providers/agent-foreground-process-batch.ts
+++ b/src/main/providers/agent-foreground-process-batch.ts
@@ -7,13 +7,15 @@ import { resolveOuterWrapperForegroundProcess } from '../../shared/foreground-wr
 import { selectForegroundProcessCandidate } from '../../shared/foreground-process-selection'
 import type { ForegroundProcessEvidence } from '../../shared/foreground-process-evidence'
 import {
-  buildProcessTableIndex,
   getStrictProcessTableSnapshot,
-  lookupProcessTableIndex,
   type ProcessTableIndex,
-  type ProcessTableIndexStats,
   type ProcessTableRow
 } from '../../shared/process-table-snapshot'
+import {
+  buildProcessTableIndex,
+  lookupProcessTableIndex,
+  type ProcessTableIndexStats
+} from '../../shared/process-table-index'
 
 export type BatchedForegroundProcessRequest = {
   rootPid: number
diff --git a/src/main/providers/agent-foreground-process.ts b/src/main/providers/agent-foreground-process.ts
index 2000d35261c..017f88a7f9b 100644
--- a/src/main/providers/agent-foreground-process.ts
+++ b/src/main/providers/agent-foreground-process.ts
@@ -1,12 +1,11 @@
 import { recognizeAgentProcessFromCommandLine } from '../../shared/agent-process-recognition'
 import { resolveOuterWrapperForegroundProcess } from '../../shared/foreground-wrapper-agent'
 import {
-  collectDescendantsFromIndex,
   getFreshProcessTableSnapshot,
-  getProcessTableIndex,
   getProcessTableSnapshot,
   type ProcessTableRow
 } from '../../shared/process-table-snapshot'
+import { collectDescendantsFromIndex, getProcessTableIndex } from '../../shared/process-table-index'
 import {
   resolveWindowsAgentForegroundProcessWithAvailability,
   shouldInspectWindowsAgentForeground,
diff --git a/src/main/providers/windows-foreground-process-rows.ts b/src/main/providers/windows-foreground-process-rows.ts
index 5be4734dddc..5f462649e6c 100644
--- a/src/main/providers/windows-foreground-process-rows.ts
+++ b/src/main/providers/windows-foreground-process-rows.ts
@@ -1,7 +1,4 @@
-import {
-  collectDescendantsFromIndex,
-  getProcessTableIndex
-} from '../../shared/process-table-snapshot'
+import { collectDescendantsFromIndex, getProcessTableIndex } from '../../shared/process-table-index'
 import {
   readWindowsProcessTable,
   readWindowsProcessTableFresh,
diff --git a/src/relay/pty-shell-utils.ts b/src/relay/pty-shell-utils.ts
index febf025654c..e89ac60a7ed 100644
--- a/src/relay/pty-shell-utils.ts
+++ b/src/relay/pty-shell-utils.ts
@@ -10,11 +10,11 @@ import {
 } from '../shared/agent-process-recognition'
 import { getFirstCommandToken } from '../shared/command-token-scanner'
 import {
-  getProcessTableIndex,
   getProcessTableSnapshot,
   type ProcessTableIndex,
   type ProcessTableRow
 } from '../shared/process-table-snapshot'
+import { getProcessTableIndex } from '../shared/process-table-index'
 import { selectForegroundProcessCandidate } from '../shared/foreground-process-selection'
 import {
   resolveOuterWrapperForegroundProcess,
diff --git a/src/shared/process-table-index.ts b/src/shared/process-table-index.ts
new file mode 100644
index 00000000000..d67d2fa8ada
--- /dev/null
+++ b/src/shared/process-table-index.ts
@@ -0,0 +1,117 @@
+/**
+ * Correlation indexes over a process-table capture, generic over the row shape so the POSIX
+ * `ps` snapshot and the Windows process table share one pass instead of parallel ones.
+ */
+
+export type ProcessTableIndexStats = {
+  captures?: number
+  indexBuilds: number
+  rowVisits: number
+  indexLookups: number
+}
+
+/** The parent/child fields every process-table row shape shares. */
+export type ProcessIdentityRow = { pid: number; ppid: number }
+
+export type ProcessTableIndexOf<Row extends ProcessIdentityRow> = {
+  rows: readonly Row[]
+  byPid: ReadonlyMap<number, Row>
+  childrenByPpid: ReadonlyMap<number, readonly Row[]>
+  stats?: ProcessTableIndexStats
+}
+
+/**
+ * Build the correlation indexes in one linear pass over a capture. Only the
+ * indexes a resolver actually reads are materialized: group indexes would cost
+ * two more maps plus a per-row array allocation on every capture, and foreground
+ * membership is derived from each row's own `pgid` against the root's `tpgid`.
+ *
+ * Generic over the row shape so the Windows snapshot (`pid`/`ppid`/`name`/
+ * `command`) shares this pass rather than carrying a parallel one.
+ */
+export function buildProcessTableIndex<Row extends ProcessIdentityRow>(
+  rows: readonly Row[],
+  stats?: ProcessTableIndexStats
+): ProcessTableIndexOf<Row> {
+  if (stats) {
+    stats.indexBuilds += 1
+  }
+  const byPid = new Map<number, Row>()
+  const childrenByPpid = new Map<number, Row[]>()
+  for (const row of rows) {
+    if (stats) {
+      stats.rowVisits += 1
+    }
+    // Preserve rows.find() semantics if a malformed table repeats a pid
+    if (!byPid.has(row.pid)) {
+      byPid.set(row.pid, row)
+    }
+    const children = childrenByPpid.get(row.ppid) ?? []
+    children.push(row)
+    childrenByPpid.set(row.ppid, children)
+  }
+  return { rows, byPid, childrenByPpid, stats }
+}
+
+/**
+ * Depth-first descendants of `rootPid`, deepest-last, off a prebuilt index.
+ *
+ * Each row is copied with its depth, so callers may not mutate the index's rows
+ * through the result. Ordering matches a per-call `childrenByPpid` walk exactly:
+ * children keep capture order and the stack pops last-pushed first.
+ */
+export function collectDescendantsFromIndex<Row extends ProcessIdentityRow>(
+  index: ProcessTableIndexOf<Row>,
+  rootPid: number
+): (Row & { depth: number })[] {
+  const descendants: (Row & { depth: number })[] = []
+  const stack = (index.childrenByPpid.get(rootPid) ?? []).map((row) => ({ row, depth: 1 }))
+  while (stack.length > 0) {
+    const { row, depth } = stack.pop()!
+    descendants.push({ ...row, depth })
+    for (const child of index.childrenByPpid.get(row.pid) ?? []) {
+      stack.push({ row: child, depth: depth + 1 })
+    }
+  }
+  return descendants
+}
+
+export function lookupProcessTableIndex<Row extends ProcessIdentityRow, T>(
+  index: ProcessTableIndexOf<Row>,
+  lookup: (index: ProcessTableIndexOf<Row>) => T,
+  stats = index.stats
+): T {
+  if (stats) {
+    stats.indexLookups += 1
+  }
+  return lookup(index)
+}
+
+// Keyed by array identity, which also pins the row shape the entry was built
+// for, so the one cast below cannot hand a caller another row type's index.
+const processTableIndexes = new WeakMap<readonly ProcessIdentityRow[], unknown>()
+
+/**
+ * Memoize one index per snapshot identity, so the panes that share a TTL-cached
+ * capture walk its rows once instead of once each. Keyed weakly by the rows
+ * array, so an index dies with the snapshot that produced it. The shared build
+ * materializes only `byPid` and `childrenByPpid`, so a one-pane relay pays for
+ * two maps per capture rather than four indexes no resolver queries.
+ *
+ * Deliberately stats-free: `buildProcessTableIndex` mutates the caller's counter
+ * bag and stores it on the index, so a shared index would hand one caller's bag
+ * to an unrelated later caller and let a cache hit satisfy an `indexBuilds`
+ * measurement without building anything. Measured callers keep calling
+ * `buildProcessTableIndex(rows, stats)` directly.
+ */
+export function getProcessTableIndex<Row extends ProcessIdentityRow>(
+  rows: readonly Row[]
+): ProcessTableIndexOf<Row> {
+  const cached = processTableIndexes.get(rows) as ProcessTableIndexOf<Row> | undefined
+  if (cached) {
+    return cached
+  }
+  const index = buildProcessTableIndex(rows)
+  processTableIndexes.set(rows, index)
+  return index
+}
diff --git a/src/shared/process-table-snapshot.test.ts b/src/shared/process-table-snapshot.test.ts
index 5cf693dfdbf..acb1ba321da 100644
--- a/src/shared/process-table-snapshot.test.ts
+++ b/src/shared/process-table-snapshot.test.ts
@@ -7,18 +7,20 @@ const { execFileMock } = vi.hoisted(() => ({ execFileMock: vi.fn() }))
 vi.mock('node:child_process', () => ({ execFile: execFileMock }))
 
 import {
-  buildProcessTableIndex,
   createProcessTableSnapshotReader,
-  getProcessTableIndex,
   getProcessTableSnapshot,
   getStrictProcessTableSnapshot,
   parseProcessTableRows,
   parseStrictProcessTableRows,
   ProcessTableCaptureError,
   PS_MAX_BUFFER_BYTES,
-  resetProcessTableSnapshotForTests,
-  type ProcessTableIndexStats
+  resetProcessTableSnapshotForTests
 } from './process-table-snapshot'
+import {
+  buildProcessTableIndex,
+  getProcessTableIndex,
+  type ProcessTableIndexStats
+} from './process-table-index'
 
 function deferred<T>(): {
   promise: Promise<T>
diff --git a/src/shared/process-table-snapshot.ts b/src/shared/process-table-snapshot.ts
index 8340ae37a1b..17243d17b96 100644
--- a/src/shared/process-table-snapshot.ts
+++ b/src/shared/process-table-snapshot.ts
@@ -1,5 +1,6 @@
 import { execFile as execFileCb } from 'node:child_process'
 import { promisify } from 'node:util'
+import type { ProcessTableIndexOf } from './process-table-index'
 
 const execFile = promisify(execFileCb)
 
@@ -122,81 +123,8 @@ export function parseStrictProcessTableRows(stdout: string): ProcessTableRow[] {
   return rows
 }
 
-export type ProcessTableIndexStats = {
-  captures?: number
-  indexBuilds: number
-  rowVisits: number
-  indexLookups: number
-}
-
-/** The parent/child fields every process-table row shape shares. */
-export type ProcessIdentityRow = { pid: number; ppid: number }
-
-export type ProcessTableIndexOf<Row extends ProcessIdentityRow> = {
-  rows: readonly Row[]
-  byPid: ReadonlyMap<number, Row>
-  childrenByPpid: ReadonlyMap<number, readonly Row[]>
-  stats?: ProcessTableIndexStats
-}
-
 export type ProcessTableIndex = ProcessTableIndexOf<ProcessTableRow>
 
-/**
- * Build the correlation indexes in one linear pass over a capture. Only the
- * indexes a resolver actually reads are materialized: group indexes would cost
- * two more maps plus a per-row array allocation on every capture, and foreground
- * membership is derived from each row's own `pgid` against the root's `tpgid`.
- *
- * Generic over the row shape so the Windows snapshot (`pid`/`ppid`/`name`/
- * `command`) shares this pass rather than carrying a parallel one.
- */
-export function buildProcessTableIndex<Row extends ProcessIdentityRow>(
-  rows: readonly Row[],
-  stats?: ProcessTableIndexStats
-): ProcessTableIndexOf<Row> {
-  if (stats) {
-    stats.indexBuilds += 1
-  }
-  const byPid = new Map<number, Row>()
-  const childrenByPpid = new Map<number, Row[]>()
-  for (const row of rows) {
-    if (stats) {
-      stats.rowVisits += 1
-    }
-    // Preserve rows.find() semantics if a malformed table repeats a pid
-    if (!byPid.has(row.pid)) {
-      byPid.set(row.pid, row)
-    }
-    const children = childrenByPpid.get(row.ppid) ?? []
-    children.push(row)
-    childrenByPpid.set(row.ppid, children)
-  }
-  return { rows, byPid, childrenByPpid, stats }
-}
-
-/**
- * Depth-first descendants of `rootPid`, deepest-last, off a prebuilt index.
- *
- * Each row is copied with its depth, so callers may not mutate the index's rows
- * through the result. Ordering matches a per-call `childrenByPpid` walk exactly:
- * children keep capture order and the stack pops last-pushed first.
- */
-export function collectDescendantsFromIndex<Row extends ProcessIdentityRow>(
-  index: ProcessTableIndexOf<Row>,
-  rootPid: number
-): (Row & { depth: number })[] {
-  const descendants: (Row & { depth: number })[] = []
-  const stack = (index.childrenByPpid.get(rootPid) ?? []).map((row) => ({ row, depth: 1 }))
-  while (stack.length > 0) {
-    const { row, depth } = stack.pop()!
-    descendants.push({ ...row, depth })
-    for (const child of index.childrenByPpid.get(row.pid) ?? []) {
-      stack.push({ row: child, depth: depth + 1 })
-    }
-  }
-  return descendants
-}
-
 /**
  * Rank a descendant row as a foreground candidate: a `+` (foreground process
  * group) row always outranks a background one, then the deepest wins.
@@ -205,46 +133,6 @@ export function scoreForegroundCandidateRow(row: ProcessTableRow & { depth: numb
   return (row.stat.includes('+') ? 10_000 : 0) + row.depth
 }
 
-export function lookupProcessTableIndex<Row extends ProcessIdentityRow, T>(
-  index: ProcessTableIndexOf<Row>,
-  lookup: (index: ProcessTableIndexOf<Row>) => T,
-  stats = index.stats
-): T {
-  if (stats) {
-    stats.indexLookups += 1
-  }
-  return lookup(index)
-}
-
-// Keyed by array identity, which also pins the row shape the entry was built
-// for, so the one cast below cannot hand a caller another row type's index.
-const processTableIndexes = new WeakMap<readonly ProcessIdentityRow[], unknown>()
-
-/**
- * Memoize one index per snapshot identity, so the panes that share a TTL-cached
- * capture walk its rows once instead of once each. Keyed weakly by the rows
- * array, so an index dies with the snapshot that produced it. The shared build
- * materializes only `byPid` and `childrenByPpid`, so a one-pane relay pays for
- * two maps per capture rather than four indexes no resolver queries.
- *
- * Deliberately stats-free: `buildProcessTableIndex` mutates the caller's counter
- * bag and stores it on the index, so a shared index would hand one caller's bag
- * to an unrelated later caller and let a cache hit satisfy an `indexBuilds`
- * measurement without building anything. Measured callers keep calling
- * `buildProcessTableIndex(rows, stats)` directly.
- */
-export function getProcessTableIndex<Row extends ProcessIdentityRow>(
-  rows: readonly Row[]
-): ProcessTableIndexOf<Row> {
-  const cached = processTableIndexes.get(rows) as ProcessTableIndexOf<Row> | undefined
-  if (cached) {
-    return cached
-  }
-  const index = buildProcessTableIndex(rows)
-  processTableIndexes.set(rows, index)
-  return index
-}
-
 type Snapshot<T> = { value: T; capturedAtMs: number }
 
 type ProcessTableSnapshotReaderDeps<T> = {

From ef4e9c40ab05a58f714451b8ecb3b86dd334f1ca Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:03:21 -0700
Subject: [PATCH 85/92] fix(terminal): replay paired-runtime snapshots at the
 host's grid (#18132)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(terminal): replay paired-runtime snapshots at the host's grid

A paired remote pane parsed the host's authoritative terminal image at
whatever grid its own xterm happened to have. The host dimensions every
snapshot it publishes, but only the REQUESTED snapshot path ever read
`cols`/`rows` back — both PUSH paths (initial subscribe and server
recovery) dropped them, so `onSnapshot` handed the transport an image
with no grid and the drain wrote it as-is.

Serialized frames are grid-relative: rows are newline-fed and the frame
ends in an absolute CUP. Parsed at a different grid they re-wrap and
clip, and because an alternate-screen TUI has no scrollback the rows
scrolled off the top are gone. An idle agent never repaints, so the pane
stays wrong until the next byte arrives — which for a finished Claude
Code session is never.

Carry the grid the host already publishes through the multiplexer and
transport, then reuse the choreography the reattach payload already
follows: resize to the source grid, replay, fit back to the pane, and
push the resulting grid to the PTY. A host that publishes no dimensions
reads as unknown and keeps today's behaviour, so no wire change and no
capability negotiation is involved.

* fix(terminal): keep the source-grid fit correct under mobile fit overrides

Two follow-ups on the source-grid replay:

- A mobile fit override skipped the post-replay fit entirely, stranding
  the pane at the host's replay grid. Fit without the PTY grid push
  instead, matching applyMainBufferSnapshot.
- Reset the source-grid flag when a drain is scheduled: a transaction
  whose restore was skipped never runs afterRestore, and the stale flag
  would fit a later drain that never left the pane's own grid.

* perf(terminal): clear the replay buffer before the source-grid resize

The drain resized xterm to the host's serialization grid and only then
wrote the clearing `2J`/`3J`/`H`. `clearBeforeReplay` is true for every
pushed remote snapshot, so a column change reflowed a full scrollback
that the next sequence discarded microseconds later — on the recovery
push that lands under output flood, when the renderer is already loaded.

The clear is grid-independent, so running it first is equivalent: the
resize then operates on an empty buffer. Verified identical end state
(content, cursor, buffer type, baseY) across cols-change, rows-change,
alt-screen, no-scrollback and equal-grid shapes. Interleaved 25-run
medians on a 10k-line scrollback: 6.19ms -> 2.48ms on the normal buffer,
unchanged on the alternate screen (where `3J` cannot free the normal
buffer's history, so the reflow is paid either way).
---
 ...ection-remote-snapshot-source-grid.test.ts | 242 ++++++++++++++++++
 .../deferred-cold-restore-and-snapshot.ts     |   5 +-
 .../pty-connection/replay-data-drain.ts       |  91 ++++++-
 .../terminal-pane/pty-output-processor.ts     |   7 +-
 .../terminal-pane/pty-transport-types.ts      |   4 +
 ...e-runtime-pty-snapshot-source-grid.test.ts | 138 ++++++++++
 ...time-pty-transport-snapshot-replay.test.ts |   6 +-
 .../remote-runtime-pty-transport.ts           |   6 +
 ...emote-runtime-terminal-binary-snapshots.ts |  11 +-
 ...mote-runtime-terminal-multiplexer-types.ts |   4 +
 .../runtime/runtime-terminal-stream.test.ts   |  13 +-
 11 files changed, 516 insertions(+), 11 deletions(-)
 create mode 100644 src/renderer/src/components/terminal-pane/pty-connection-remote-snapshot-source-grid.test.ts
 create mode 100644 src/renderer/src/components/terminal-pane/remote-runtime-pty-snapshot-source-grid.test.ts

diff --git a/src/renderer/src/components/terminal-pane/pty-connection-remote-snapshot-source-grid.test.ts b/src/renderer/src/components/terminal-pane/pty-connection-remote-snapshot-source-grid.test.ts
new file mode 100644
index 00000000000..f4e8d8bd2bb
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/pty-connection-remote-snapshot-source-grid.test.ts
@@ -0,0 +1,242 @@
+import type * as React from 'react'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { flushAsyncTicks, renderHeadlessBuffer } from './pty-connection-test-async'
+import { createMockTransport, createPane, createManager } from './pty-connection-test-pane-fixtures'
+import type { ConnectCallbacks, MockTransport } from './pty-connection-test-pane-fixtures'
+import { buildPaneConnectionDeps } from './pty-connection-test-deps'
+import {
+  createInitialStoreState,
+  buildActiveRuntimeEnvironmentState
+} from './pty-connection-test-store-fixtures'
+import type { StoreState } from './pty-connection-test-store-state'
+import {
+  installTerminalTestGlobals,
+  restoreTerminalTestGlobals
+} from './pty-connection-test-environment'
+
+const {
+  resetAndRefreshAllTerminalWebglAtlases,
+  scheduleTerminalWebglAtlasRecovery,
+  scheduleRuntimeGraphSync,
+  shouldSeedCacheTimerOnInitialTitle,
+  toastInfo,
+  notifyCodexPaneBoundForStaleSweep
+} = vi.hoisted(() => ({
+  resetAndRefreshAllTerminalWebglAtlases: vi.fn(),
+  scheduleTerminalWebglAtlasRecovery: vi.fn(),
+  scheduleRuntimeGraphSync: vi.fn(),
+  shouldSeedCacheTimerOnInitialTitle: vi.fn(() => false),
+  toastInfo: vi.fn(),
+  notifyCodexPaneBoundForStaleSweep: vi.fn()
+}))
+
+let mockStoreState: StoreState
+let transportFactoryQueue: MockTransport[] = []
+let createdTransportOptions: Record<string, unknown>[] = []
+let storeSubscribers: ((state: StoreState) => void)[] = []
+
+vi.mock('@/runtime/sync-runtime-graph', () => ({
+  scheduleRuntimeGraphSync
+}))
+
+vi.mock('@/lib/pane-manager/pane-manager-registry', async (importOriginal) => ({
+  ...(await importOriginal<Record<string, unknown>>()),
+  resetAndRefreshAllTerminalWebglAtlases
+}))
+
+vi.mock('./terminal-webgl-atlas-recovery', () => ({
+  scheduleTerminalWebglAtlasRecovery
+}))
+
+vi.mock('@/store', () => ({
+  useAppStore: {
+    getState: () => mockStoreState,
+    subscribe: (listener: (state: StoreState) => void) => {
+      storeSubscribers.push(listener)
+      return () => {
+        storeSubscribers = storeSubscribers.filter((candidate) => candidate !== listener)
+      }
+    }
+  }
+}))
+
+vi.mock('@/lib/agent-status', async (importOriginal) => {
+  const { buildAgentStatusModuleMock } = await import('./pty-connection-test-environment')
+  return buildAgentStatusModuleMock(await importOriginal<Record<string, unknown>>())
+})
+
+vi.mock('./cache-timer-seeding', () => ({
+  shouldSeedCacheTimerOnInitialTitle
+}))
+
+vi.mock('sonner', () => ({
+  toast: { info: toastInfo }
+}))
+
+vi.mock('@/lib/codex-stale-pane-sweep', () => ({
+  notifyCodexPaneBoundForStaleSweep
+}))
+
+vi.mock('react', async (importOriginal) => {
+  const actual = await importOriginal<typeof React>()
+  return {
+    ...actual,
+    useCallback: <T extends (...args: unknown[]) => unknown>(fn: T): T => fn
+  }
+})
+
+vi.mock('./pty-transport', () => ({
+  createIpcPtyTransport: vi.fn((options: Record<string, unknown>) => {
+    createdTransportOptions.push(options)
+    const nextTransport = transportFactoryQueue.shift()
+    if (!nextTransport) {
+      throw new Error('No mock transport queued')
+    }
+    return nextTransport
+  })
+}))
+
+vi.mock('./remote-runtime-pty-transport', () => ({
+  createRemoteRuntimePtyTransport: vi.fn(
+    (_environmentId: string, options: Record<string, unknown>) => {
+      createdTransportOptions.push(options)
+      const nextTransport = transportFactoryQueue.shift()
+      if (!nextTransport) {
+        throw new Error('No mock transport queued')
+      }
+      return nextTransport
+    }
+  )
+}))
+
+vi.mock('./pty-dispatcher', async (importOriginal) => {
+  const actual = await importOriginal<Record<string, unknown>>()
+  return {
+    ...actual,
+    getEagerPtyBufferHandle: vi.fn(() => undefined)
+  }
+})
+
+const HOST_COLS = 143
+const HOST_ROWS = 12
+const PANE_COLS = 120
+const PANE_ROWS = 40
+
+// A serialized TUI frame the way @xterm/addon-serialize emits one: newline-fed
+// rows plus a trailing absolute CUP. Both are grid-relative.
+const HOST_FRAME = `\x1b[?1049h\x1b[2J\x1b[H${Array.from(
+  { length: HOST_ROWS },
+  (_unused, index) => `host row ${index + 1}`
+).join('\r\n')}\x1b[${HOST_ROWS};3H`
+
+function createDeps(overrides: Record<string, unknown> = {}) {
+  return buildPaneConnectionDeps(() => mockStoreState, overrides)
+}
+
+async function connectRemotePane(): Promise<{
+  operations: { kind: 'resize' | 'write'; value: string }[]
+  pane: ReturnType<typeof createPane>
+  transport: MockTransport
+  replay: (data: string, meta?: Record<string, unknown>) => void
+  dispose: () => void
+}> {
+  const { connectPanePty } = await import('./pty-connection')
+  mockStoreState = buildActiveRuntimeEnvironmentState(mockStoreState, 'env-1')
+  const transport = createMockTransport('remote:env-1@@terminal-1')
+  const captured: { current: ConnectCallbacks['onReplayData'] | null } = { current: null }
+  transport.connect.mockImplementation(async ({ callbacks }: { callbacks: ConnectCallbacks }) => {
+    captured.current = callbacks.onReplayData ?? null
+    return { id: 'remote:env-1@@terminal-1', replay: '' }
+  })
+  transportFactoryQueue.push(transport)
+
+  const pane = createPane(1)
+  pane.terminal.cols = PANE_COLS
+  pane.terminal.rows = PANE_ROWS
+  const operations: { kind: 'resize' | 'write'; value: string }[] = []
+  pane.terminal.write = vi.fn((data: string, callback?: () => void) => {
+    operations.push({ kind: 'write', value: data })
+    callback?.()
+  })
+  pane.terminal.resize = vi.fn((cols: number, rows: number) => {
+    operations.push({ kind: 'resize', value: `${cols}x${rows}` })
+    pane.terminal.cols = cols
+    pane.terminal.rows = rows
+  })
+  pane.fitAddon.proposeDimensions = vi.fn(() => ({ cols: PANE_COLS, rows: PANE_ROWS }))
+  pane.fitAddon.fit = vi.fn(() => {
+    pane.terminal.resize(PANE_COLS, PANE_ROWS)
+  })
+
+  const manager = createManager(1)
+  const disposable = connectPanePty(pane as never, manager as never, createDeps() as never)
+  await flushAsyncTicks(6)
+  transport.resize.mockClear()
+
+  return {
+    operations,
+    pane,
+    transport,
+    replay: (data, meta) => captured.current?.(data, meta as never),
+    dispose: () => disposable.dispose()
+  }
+}
+
+describe('pushed remote snapshot replay grid', () => {
+  beforeEach(() => {
+    vi.resetModules()
+    vi.clearAllMocks()
+    transportFactoryQueue = []
+    createdTransportOptions = []
+    storeSubscribers = []
+    mockStoreState = createInitialStoreState(() => mockStoreState)
+    installTerminalTestGlobals()
+  })
+
+  afterEach(async () => {
+    await restoreTerminalTestGlobals()
+  })
+
+  it('replays at the host grid and then pushes the pane grid back to the PTY', async () => {
+    const session = await connectRemotePane()
+
+    session.replay(HOST_FRAME, { snapshotCols: HOST_COLS, snapshotRows: HOST_ROWS })
+    await flushAsyncTicks(20)
+
+    const frameWriteIndex = session.operations.findIndex(
+      (operation) => operation.kind === 'write' && operation.value === HOST_FRAME
+    )
+    const sourceResizeIndex = session.operations.findIndex(
+      (operation) => operation.kind === 'resize' && operation.value === `${HOST_COLS}x${HOST_ROWS}`
+    )
+    expect(sourceResizeIndex).toBeGreaterThanOrEqual(0)
+    expect(frameWriteIndex).toBeGreaterThan(sourceResizeIndex)
+    // Why the PTY push matters: the pane must not be left driving the host at
+    // the replay geometry once the destination fit has run.
+    expect(session.transport.resize).toHaveBeenCalledWith(PANE_COLS, PANE_ROWS)
+    expect(session.transport.resize).not.toHaveBeenCalledWith(HOST_COLS, HOST_ROWS)
+    session.dispose()
+  })
+
+  it('keeps the pane grid when the host published no snapshot dimensions', async () => {
+    const session = await connectRemotePane()
+
+    session.replay(HOST_FRAME)
+    await flushAsyncTicks(20)
+
+    expect(session.pane.terminal.resize).not.toHaveBeenCalledWith(HOST_COLS, HOST_ROWS)
+    session.dispose()
+  })
+
+  it('only reproduces the host frame when it is parsed at the host grid', async () => {
+    const atHostGrid = await renderHeadlessBuffer([HOST_FRAME], HOST_COLS, HOST_ROWS)
+    const atPaneGrid = await renderHeadlessBuffer([HOST_FRAME], PANE_COLS, HOST_ROWS - 4)
+
+    // Why this is the user-visible failure: the alternate screen has no
+    // scrollback, so rows scrolled off by a shorter grid are gone for good and
+    // an idle TUI never repaints them.
+    expect(atHostGrid.filter((line) => line.startsWith('host row'))).toHaveLength(HOST_ROWS)
+    expect(atPaneGrid.filter((line) => line.startsWith('host row')).length).toBeLessThan(HOST_ROWS)
+    expect(atPaneGrid).not.toContain('host row 1')
+  })
+})
diff --git a/src/renderer/src/components/terminal-pane/pty-connection/deferred-cold-restore-and-snapshot.ts b/src/renderer/src/components/terminal-pane/pty-connection/deferred-cold-restore-and-snapshot.ts
index 28e0f95b9f7..6c3a0628f79 100644
--- a/src/renderer/src/components/terminal-pane/pty-connection/deferred-cold-restore-and-snapshot.ts
+++ b/src/renderer/src/components/terminal-pane/pty-connection/deferred-cold-restore-and-snapshot.ts
@@ -156,7 +156,10 @@ export function bindDeferredColdRestoreAndSnapshot(session: ConnectPanePtySessio
           }
         : {}),
       ...(meta.terminalOwner ? { terminalOwner: meta.terminalOwner } : {}),
-      ...(meta.alternateScreen !== undefined ? { alternateScreen: meta.alternateScreen } : {})
+      ...(meta.alternateScreen !== undefined ? { alternateScreen: meta.alternateScreen } : {}),
+      ...(meta.snapshotCols !== undefined && meta.snapshotRows !== undefined
+        ? { snapshotCols: meta.snapshotCols, snapshotRows: meta.snapshotRows }
+        : {})
     }
     session.scheduleReplayDataDrain()
   }
diff --git a/src/renderer/src/components/terminal-pane/pty-connection/replay-data-drain.ts b/src/renderer/src/components/terminal-pane/pty-connection/replay-data-drain.ts
index 87a2b6039ce..81ac85ed752 100644
--- a/src/renderer/src/components/terminal-pane/pty-connection/replay-data-drain.ts
+++ b/src/renderer/src/components/terminal-pane/pty-connection/replay-data-drain.ts
@@ -1,4 +1,8 @@
 import { waitForTerminalOutputParsed } from '@/lib/pane-manager/pane-terminal-output-scheduler'
+import { safeFit, safeFitAndThen } from '@/lib/pane-manager/pane-tree-ops'
+import { getFitOverrideForPty } from '@/lib/pane-manager/mobile-fit-overrides'
+
+import { resolvePositiveTerminalDimensions } from '../terminal-snapshot-replay-paint'
 
 import {
   CURSOR_SHOW_SEQUENCE,
@@ -66,6 +70,9 @@ export function bindReplayDataDrain(session: ConnectPanePtySession): void {
   session.pendingReplayData = null
   session.replayPayloadGeneration = 0
   let replayDrainQueued = false
+  // Why: a payload replayed at a foreign grid leaves xterm sized to the source,
+  // so the destination fit belongs after the whole transaction parses.
+  let replayedAtSourceGrid = false
   const drainReplayDataQueue = async (
     expectedPtyId: string | null,
     expectedStreamGeneration: number
@@ -86,8 +93,15 @@ export function bindReplayDataDrain(session: ConnectPanePtySession): void {
         return false
       }
       const payload = session.pendingReplayData
-      const { data, clearBeforeReplay, pendingEscapeTailAnsi, alternateScreen, terminalOwner } =
-        payload
+      const {
+        data,
+        clearBeforeReplay,
+        pendingEscapeTailAnsi,
+        alternateScreen,
+        terminalOwner,
+        snapshotCols,
+        snapshotRows
+      } = payload
       session.pendingReplayData = null
       const isCurrentPayload = (): boolean =>
         !session.disposed &&
@@ -100,12 +114,35 @@ export function bindReplayDataDrain(session: ConnectPanePtySession): void {
       // Relay replay buffers may overlap with content already rendered in
       // xterm. Local eager replay decides this earlier so metadata-only frames
       // can keep restored scrollback while still using the replay guard.
+      // Why ahead of the source-grid resize: the clear is grid-independent, so
+      // dropping the scrollback first spares a reflow of history the very next
+      // sequence discards (see use-terminal-container-fit-sync.ts on its cost).
       if (clearBeforeReplay) {
         await session.writeReplayDataAsync('\x1b[2J\x1b[3J\x1b[H')
         if (!isCurrentPayload()) {
           continue
         }
       }
+      // Why before the frame: the payload's wraps and cursor moves are relative
+      // to the grid the host serialized it at. Parsing it at the pane's own grid
+      // clips or re-wraps the image, and an idle TUI never repaints to correct
+      // it — the pane stays blank until the next byte arrives.
+      const sourceGrid = resolvePositiveTerminalDimensions(snapshotCols, snapshotRows)
+      if (
+        sourceGrid &&
+        (session.pane.terminal.cols !== sourceGrid.cols ||
+          session.pane.terminal.rows !== sourceGrid.rows)
+      ) {
+        // Why suppressed: this resize is a layout step for parsing, not the
+        // pane's real geometry — the destination fit below owns the PTY grid.
+        session.suppressStructuralReplayPtyResize = true
+        try {
+          session.pane.terminal.resize(sourceGrid.cols, sourceGrid.rows)
+        } finally {
+          session.suppressStructuralReplayPtyResize = false
+        }
+        replayedAtSourceGrid = true
+      }
       if (clearBeforeReplay || data.length > 0) {
         // Why: an empty clearing frame is still an authoritative repaint and
         // must clear a stale agent signal from an earlier payload.
@@ -148,12 +185,59 @@ export function bindReplayDataDrain(session: ConnectPanePtySession): void {
     }
     return appliedCurrentPayload
   }
+  // Why the same helper the reattach payload uses: a source-grid replay leaves
+  // xterm at the host's geometry, so the pane must fit back and push the
+  // resulting grid to the PTY before live bytes resume.
+  const fitAfterSourceGridReplay = async (
+    scheduledPtyId: string | null,
+    scheduledStreamGeneration: number
+  ): Promise<void> => {
+    if (!replayedAtSourceGrid) {
+      return
+    }
+    replayedAtSourceGrid = false
+    if (
+      session.disposed ||
+      !scheduledPtyId ||
+      session.transport.getPtyId() !== scheduledPtyId ||
+      session.transportStreamGeneration !== scheduledStreamGeneration
+    ) {
+      return
+    }
+    if (getFitOverrideForPty(scheduledPtyId)) {
+      // Why fit without the grid push: a mobile driver owns the PTY geometry,
+      // but the pane must still leave the host's replay grid.
+      safeFit(session.pane)
+      return
+    }
+    const gridPush = session.createReattachGridPush(scheduledStreamGeneration, scheduledPtyId)
+    const fit = safeFitAndThen(session.pane, 'replay-source-grid-fit', gridPush.continuation, {
+      shouldContinue: gridPush.shouldContinue,
+      retryIfUnmeasurable: true,
+      // Why: a hidden or parked pane must still leave the source grid once it
+      // is revealed, or the PTY stays pinned to the host's replay geometry.
+      deferIfHidden: true
+    })
+    session.pendingReattachFit = fit
+    try {
+      await fit.completion
+    } finally {
+      if (session.pendingReattachFit === fit) {
+        session.pendingReattachFit = null
+      }
+    }
+  }
+
   session.scheduleReplayDataDrain = (): void => {
     if (replayDrainQueued) {
       return
     }
     const scheduledPtyId = session.pendingReplayData?.ptyId ?? null
     replayDrainQueued = true
+    // Why reset here: a transaction whose restore was skipped never ran its
+    // afterRestore, and a stale flag would fit a later drain that never left
+    // the pane's own grid.
+    replayedAtSourceGrid = false
     // Why: live bytes are newer than the authoritative replay frame. Hold
     // them until clear + replay + reset have all parsed, or replay can erase them.
     const scheduledStreamGeneration =
@@ -171,7 +255,8 @@ export function bindReplayDataDrain(session: ConnectPanePtySession): void {
             shouldRestore: () =>
               !session.disposed &&
               session.transport.getPtyId() === scheduledPtyId &&
-              session.transportStreamGeneration === scheduledStreamGeneration
+              session.transportStreamGeneration === scheduledStreamGeneration,
+            afterRestore: () => fitAfterSourceGridReplay(scheduledPtyId, scheduledStreamGeneration)
           }
         )
       )
diff --git a/src/renderer/src/components/terminal-pane/pty-output-processor.ts b/src/renderer/src/components/terminal-pane/pty-output-processor.ts
index ac611e8ed0c..983b619b3bd 100644
--- a/src/renderer/src/components/terminal-pane/pty-output-processor.ts
+++ b/src/renderer/src/components/terminal-pane/pty-output-processor.ts
@@ -37,6 +37,8 @@ export type ProcessPtyOutputOptions = {
   snapshotSeq?: number
   alternateScreen?: boolean
   terminalOwner?: 'shell'
+  snapshotCols?: number
+  snapshotRows?: number
 }
 
 function removeSuppressedCursorNativeTitles(
@@ -217,7 +219,10 @@ export function createPtyOutputProcessor({
         ...(options.alternateScreen !== undefined
           ? { alternateScreen: options.alternateScreen }
           : {}),
-        ...(options.terminalOwner ? { terminalOwner: options.terminalOwner } : {})
+        ...(options.terminalOwner ? { terminalOwner: options.terminalOwner } : {}),
+        ...(options.snapshotCols !== undefined && options.snapshotRows !== undefined
+          ? { snapshotCols: options.snapshotCols, snapshotRows: options.snapshotRows }
+          : {})
       }
       if (Object.keys(replayMeta).length > 0) {
         callbacks.onReplayData(data, replayMeta)
diff --git a/src/renderer/src/components/terminal-pane/pty-transport-types.ts b/src/renderer/src/components/terminal-pane/pty-transport-types.ts
index f041f495c5c..b3b3d0700d8 100644
--- a/src/renderer/src/components/terminal-pane/pty-transport-types.ts
+++ b/src/renderer/src/components/terminal-pane/pty-transport-types.ts
@@ -60,6 +60,10 @@ export type PtyReplayDataMeta = {
   snapshotSeq?: number
   alternateScreen?: boolean
   terminalOwner?: 'shell'
+  /** Grid the payload was serialized at. Present only when the producer proved
+   *  it; the drain replays there and fits back to the pane afterwards. */
+  snapshotCols?: number
+  snapshotRows?: number
 }
 
 export type LocalPtySessionMetadata = {
diff --git a/src/renderer/src/components/terminal-pane/remote-runtime-pty-snapshot-source-grid.test.ts b/src/renderer/src/components/terminal-pane/remote-runtime-pty-snapshot-source-grid.test.ts
new file mode 100644
index 00000000000..3f49e6e0b7c
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/remote-runtime-pty-snapshot-source-grid.test.ts
@@ -0,0 +1,138 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  TerminalStreamOpcode,
+  decodeTerminalStreamFrame,
+  decodeTerminalStreamJson,
+  encodeTerminalStreamFrame,
+  encodeTerminalStreamJson,
+  encodeTerminalStreamText
+} from '../../../../shared/terminal-stream-protocol'
+
+// Client-side wire regression: the host dimensions every snapshot it publishes,
+// but only the REQUESTED snapshot path ever read `cols`/`rows` back. Both PUSH
+// paths (initial subscribe, server recovery) dropped them, so the pane parsed a
+// host-grid image at its own grid and an idle TUI never repainted the damage.
+// This drives REAL binary frames through the REAL multiplexer
+// (decodeSnapshotInfo → onSnapshot meta) into the REAL transport
+// (processData → onReplayData meta). One stream carries every case: the
+// multiplexer is a module-level singleton, so separate cases would need
+// separate module registries.
+
+describe('remote transport snapshot source-grid threading', () => {
+  const runtimeCall = vi.fn()
+  const runtimeSubscribe = vi.fn()
+  const subscriptionSendBinary = vi.fn()
+  let subscriptionCallbacks: {
+    onResponse: (response: unknown) => void
+    onBinary?: (bytes: Uint8Array<ArrayBufferLike>) => void
+    onError?: (error: { code: string; message: string }) => void
+    onClose?: () => void
+  } | null = null
+
+  beforeEach(() => {
+    vi.resetModules()
+    vi.doUnmock('../../runtime/remote-runtime-terminal-multiplexer')
+    vi.clearAllMocks()
+    subscriptionCallbacks = null
+    subscriptionSendBinary.mockReset()
+    runtimeCall.mockResolvedValue({
+      ok: true,
+      result: {
+        terminal: {
+          handle: 'terminal-1',
+          tabId: 'tab-1',
+          leafId: 'pane:1',
+          worktreeId: 'wt-1'
+        }
+      }
+    })
+    runtimeSubscribe.mockImplementation(
+      async (_args: unknown, callbacks: typeof subscriptionCallbacks) => {
+        subscriptionCallbacks = callbacks
+        return { unsubscribe: vi.fn(), sendBinary: subscriptionSendBinary }
+      }
+    )
+    vi.stubGlobal('window', {
+      api: {
+        runtimeEnvironments: { call: runtimeCall, subscribe: runtimeSubscribe }
+      }
+    })
+  })
+
+  it('carries the host grid on pushed snapshots and omits it when the host has none', async () => {
+    const { createRemoteRuntimePtyTransport } = await import('./remote-runtime-pty-transport')
+    const transport = createRemoteRuntimePtyTransport('env-1', {
+      worktreeId: 'wt-1',
+      tabId: 'tab-1',
+      leafId: 'pane:1'
+    })
+    const onReplayData = vi.fn()
+    transport.attach({
+      existingPtyId: 'remote:env-1@@terminal-1',
+      cols: 80,
+      rows: 24,
+      callbacks: { onReplayData }
+    })
+
+    await expect.poll(() => subscriptionCallbacks !== null, { timeout: 5000 }).toBe(true)
+    subscriptionCallbacks?.onResponse({ ok: true, result: { type: 'ready' } })
+    await expect
+      .poll(() => subscriptionSendBinary.mock.calls.length, { timeout: 5000 })
+      .toBeGreaterThan(0)
+    const subscribeFrame = subscriptionSendBinary.mock.calls
+      .map((call) => decodeTerminalStreamFrame(call[0] as Uint8Array))
+      .find((frame) => frame?.opcode === TerminalStreamOpcode.Subscribe)
+    expect(subscribeFrame).toBeDefined()
+    const streamId = decodeTerminalStreamJson<{ streamId: number }>(
+      subscribeFrame!.payload
+    )!.streamId
+
+    const deliverSnapshot = (start: Record<string, unknown>, body: string): void => {
+      for (const frame of [
+        encodeTerminalStreamFrame({
+          opcode: TerminalStreamOpcode.SnapshotStart,
+          streamId,
+          seq: 0,
+          payload: encodeTerminalStreamJson(start)
+        }),
+        encodeTerminalStreamFrame({
+          opcode: TerminalStreamOpcode.SnapshotChunk,
+          streamId,
+          seq: 0,
+          payload: encodeTerminalStreamText(body)
+        }),
+        encodeTerminalStreamFrame({
+          opcode: TerminalStreamOpcode.SnapshotEnd,
+          streamId,
+          seq: 0,
+          payload: new Uint8Array(0)
+        })
+      ]) {
+        subscriptionCallbacks?.onBinary?.(frame)
+      }
+    }
+
+    // Initial subscribe push: the host's 143x43 grid must reach the restorer.
+    deliverSnapshot({ cols: 143, rows: 43, seq: 7, source: 'headless' }, 'restored TUI frame')
+    await expect.poll(() => onReplayData.mock.calls.length, { timeout: 5000 }).toBe(1)
+    expect(onReplayData).toHaveBeenLastCalledWith(
+      'restored TUI frame',
+      expect.objectContaining({ snapshotCols: 143, snapshotRows: 43 })
+    )
+
+    // Server-pushed recovery: untagged, after the initial snapshot landed.
+    deliverSnapshot({ cols: 154, rows: 68, seq: 9, source: 'headless' }, 'recovered')
+    await expect.poll(() => onReplayData.mock.calls.length, { timeout: 5000 }).toBe(2)
+    expect(onReplayData).toHaveBeenLastCalledWith(
+      '\x1b[2J\x1b[3J\x1b[Hrecovered',
+      expect.objectContaining({ snapshotCols: 154, snapshotRows: 68 })
+    )
+
+    // A host that publishes no dimensions must read as unknown, not as a grid.
+    deliverSnapshot({ seq: 11, source: 'headless' }, 'undimensioned')
+    await expect.poll(() => onReplayData.mock.calls.length, { timeout: 5000 }).toBe(3)
+    const [, meta] = onReplayData.mock.calls[2] as [string, Record<string, unknown> | undefined]
+    expect(meta?.snapshotCols).toBeUndefined()
+    expect(meta?.snapshotRows).toBeUndefined()
+  })
+})
diff --git a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport-snapshot-replay.test.ts b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport-snapshot-replay.test.ts
index c6d1b8508f7..b6fc15f6413 100644
--- a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport-snapshot-replay.test.ts
+++ b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport-snapshot-replay.test.ts
@@ -127,7 +127,11 @@ describe('createRemoteRuntimePtyTransport', () => {
     emitOutput(streamId, liveOutput, liveSeq)
 
     expect(onReplayData).toHaveBeenCalledOnce()
-    expect(onReplayData).toHaveBeenCalledWith('AUTHORITATIVE_INITIAL_MARKER')
+    expect(onReplayData).toHaveBeenCalledWith(
+      'AUTHORITATIVE_INITIAL_MARKER',
+      // The host's grid rides the snapshot so the pane replays it there.
+      expect.objectContaining({ snapshotCols: 80, snapshotRows: 24 })
+    )
     expect(onConnect).toHaveBeenCalledOnce()
     expect(onData).toHaveBeenCalledWith(liveOutput, expect.objectContaining({ seq: liveSeq }))
     await vi.waitFor(() => {
diff --git a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
index a4290c5dbd5..1e5782fe496 100644
--- a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
+++ b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
@@ -1922,6 +1922,12 @@ export function createRemoteRuntimePtyTransport(
                 : {}),
               ...(meta?.alternateScreen !== undefined && meta.seq !== undefined
                 ? { alternateScreen: meta.alternateScreen }
+                : {}),
+              // Why unconditional on seq: the grid describes the image itself,
+              // not a stream boundary, so it is valid for every snapshot the
+              // host dimensions. Absent/zero degrades to the pane's own grid.
+              ...(meta?.cols !== undefined && meta.rows !== undefined
+                ? { snapshotCols: meta.cols, snapshotRows: meta.rows }
                 : {})
             })
           }
diff --git a/src/renderer/src/runtime/remote-runtime-terminal-binary-snapshots.ts b/src/renderer/src/runtime/remote-runtime-terminal-binary-snapshots.ts
index c90c00fe00b..61cb242a856 100644
--- a/src/renderer/src/runtime/remote-runtime-terminal-binary-snapshots.ts
+++ b/src/renderer/src/runtime/remote-runtime-terminal-binary-snapshots.ts
@@ -93,7 +93,12 @@ export abstract class RemoteRuntimeTerminalBinarySnapshots extends RemoteRuntime
             seq: info?.seq,
             kittyKeyboardFlags: info?.kittyKeyboardFlags,
             alternateScreen: info?.alternateScreen,
-            terminalOwner: info?.terminalOwner
+            terminalOwner: info?.terminalOwner,
+            // Why: the image encodes wraps and cursor moves against the host's
+            // grid, so the restorer must replay it there — the request path has
+            // always carried these; the pushes silently dropped them.
+            cols: info?.cols,
+            rows: info?.rows
           })
         } else if (target === 'recovery') {
           // Why: a server-pushed recovery snapshot replaces terminal state
@@ -105,7 +110,9 @@ export abstract class RemoteRuntimeTerminalBinarySnapshots extends RemoteRuntime
             seq: info?.seq,
             kittyKeyboardFlags: info?.kittyKeyboardFlags,
             alternateScreen: info?.alternateScreen,
-            terminalOwner: info?.terminalOwner
+            terminalOwner: info?.terminalOwner,
+            cols: info?.cols,
+            rows: info?.rows
           })
         }
       } else if (matchesPendingRequest) {
diff --git a/src/renderer/src/runtime/remote-runtime-terminal-multiplexer-types.ts b/src/renderer/src/runtime/remote-runtime-terminal-multiplexer-types.ts
index e8c6a286718..4b3a94aaf97 100644
--- a/src/renderer/src/runtime/remote-runtime-terminal-multiplexer-types.ts
+++ b/src/renderer/src/runtime/remote-runtime-terminal-multiplexer-types.ts
@@ -41,6 +41,10 @@ export type RemoteRuntimeMultiplexedTerminalCallbacks = {
       kittyKeyboardFlags?: number
       alternateScreen?: boolean
       terminalOwner?: 'shell'
+      /** Grid the host serialized this image at. Absent from hosts that omit
+       *  it, which must read as unknown so replay keeps the pane's own grid. */
+      cols?: number
+      rows?: number
     }
   ) => void
   onSubscribed?: () => void
diff --git a/src/renderer/src/runtime/runtime-terminal-stream.test.ts b/src/renderer/src/runtime/runtime-terminal-stream.test.ts
index 39cd8ce829a..2fcc8b2e293 100644
--- a/src/renderer/src/runtime/runtime-terminal-stream.test.ts
+++ b/src/renderer/src/runtime/runtime-terminal-stream.test.ts
@@ -572,7 +572,10 @@ describe('remote runtime terminal multiplex ACK gate', () => {
 
     injectSnapshot({ kind: 'scrollback', cols: 120, rows: 40, truncated: false }, 'initial state')
     expect(onSnapshot).toHaveBeenCalledWith('initial state', {
-      pendingEscapeTailAnsi: undefined
+      pendingEscapeTailAnsi: undefined,
+      // The host's serialization grid; the restorer replays there, not at the pane's own.
+      cols: 120,
+      rows: 40
     })
     expect(onSubscribed).toHaveBeenCalledTimes(1)
 
@@ -590,7 +593,9 @@ describe('remote runtime terminal multiplex ACK gate', () => {
     // clears screen and scrollback first and must not replay the subscribe
     // lifecycle.
     expect(onSnapshot).toHaveBeenCalledWith(`\x1b[2J\x1b[3J\x1b[H${'recovered state'}`, {
-      pendingEscapeTailAnsi: undefined
+      pendingEscapeTailAnsi: undefined,
+      cols: 120,
+      rows: 40
     })
     expect(onSubscribed).toHaveBeenCalledTimes(1)
 
@@ -607,7 +612,9 @@ describe('remote runtime terminal multiplex ACK gate', () => {
       ''
     )
     expect(onSnapshot).toHaveBeenCalledWith('\x1b[2J\x1b[3J\x1b[H', {
-      pendingEscapeTailAnsi: undefined
+      pendingEscapeTailAnsi: undefined,
+      cols: 120,
+      rows: 40
     })
     expect(onSubscribed).toHaveBeenCalledTimes(1)
 

From d8ca420cddc0a49df629484436ac7a54b137e74d Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:03:46 -0700
Subject: [PATCH 86/92] perf(remote): apply the no-evidence inspection cadence
 to remote panes (#18146)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A visible remote/SSH terminal that has never run an agent inspected its
execution host every ~2s forever for a strictly negative answer — ~30
RPC round trips per minute per pane, each a network hop plus a host-side
foreground process scan.

The `no-evidence` 15s cadence tier exists to bound exactly that volume,
but `isProcessInspectionCostly` gated it on local Windows only and
explicitly excluded remote-execution-host PTYs — the most expensive
inspection shape in the codebase.

Extract the predicate to `agent-process-inspection-cost.ts` and treat a
remote-execution-host PTY as costly on every client platform. The local
branch (Windows costly, POSIX cheap) is byte-identical.

Client-side timer choice only: no wire change, no new field, no opcode.
Activity (output/title/hook) re-arms the 2s cadence, agent evidence
returns the tier to active/idle, and the `unavailable` branch and its
error backoff are untouched.
---
 .../agent-completion-coordinator-types.ts     |  8 +-
 ...ent-completion-no-evidence-cadence.test.ts | 85 +++++++++++++++++--
 .../agent-process-inspection-cost.ts          | 27 ++++++
 .../pty-connection/terminal-keydown-fit.ts    | 15 +---
 4 files changed, 112 insertions(+), 23 deletions(-)
 create mode 100644 src/renderer/src/components/terminal-pane/agent-process-inspection-cost.ts

diff --git a/src/renderer/src/components/terminal-pane/agent-completion-coordinator-types.ts b/src/renderer/src/components/terminal-pane/agent-completion-coordinator-types.ts
index c65fec024ad..43389f59ce2 100644
--- a/src/renderer/src/components/terminal-pane/agent-completion-coordinator-types.ts
+++ b/src/renderer/src/components/terminal-pane/agent-completion-coordinator-types.ts
@@ -46,10 +46,10 @@ export type AgentCompletionCoordinatorOptions = {
   // this renderer CONSUMES that evidence and can tell "no evidence published"
   // from "host too old to publish it" — mixed-version hosts omit the field.
   shouldPollNoEvidenceProcessCadence?: () => boolean
-  // Why: on hosts where one inspection forks a whole-process-table scan (local
-  // Windows PowerShell/CIM), panes without agent evidence relax to a slow
-  // cadence; remote authorities can disable no-evidence polling entirely and
-  // re-arm from output/title activity instead.
+  // Why: where one inspection is a whole-process-table scan (local Windows
+  // PowerShell/CIM) or a host round trip plus a host-side scan (remote/SSH),
+  // panes without agent evidence relax to a slow cadence and re-arm from
+  // output/title/hook activity. See agent-process-inspection-cost.ts.
   isProcessInspectionCostly?: () => boolean
   shouldSuppressHookCompletion?: (payload: AgentCompletionStatusSnapshot) => boolean
 }
diff --git a/src/renderer/src/components/terminal-pane/agent-completion-no-evidence-cadence.test.ts b/src/renderer/src/components/terminal-pane/agent-completion-no-evidence-cadence.test.ts
index a0a35c36057..238f073fd38 100644
--- a/src/renderer/src/components/terminal-pane/agent-completion-no-evidence-cadence.test.ts
+++ b/src/renderer/src/components/terminal-pane/agent-completion-no-evidence-cadence.test.ts
@@ -1,20 +1,27 @@
 // Regression guard: bound the volume of cadence process inspections a visible,
 // idle terminal with NO agent evidence drives on hosts where each inspection is
-// a whole-process-table scan (local Windows forks powershell.exe/CIM — the
-// scan-cost analogue of #6288). Pre-fix a single visible idle shell inspected
-// every 2s forever (~30 scans/min); with the no-evidence tier it inspects every
-// 15s, and pane activity (output/title/hook) or agent evidence re-arms the hot
-// cadence so agent-start detection stays event-driven and agent-finish
-// detection is unchanged.
+// expensive — local Windows forks a powershell.exe/CIM whole-process-table scan
+// (the scan-cost analogue of #6288), and a remote/SSH pane pays a host round
+// trip plus a host-side foreground scan. Pre-fix a single visible idle shell
+// inspected every 2s forever (~30 scans/min); with the no-evidence tier it
+// inspects every 15s, and pane activity (output/title/hook) or agent evidence
+// re-arms the hot cadence so agent-start detection stays event-driven and
+// agent-finish detection is unchanged.
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import {
   createAgentCompletionCoordinator,
   resetAgentCompletionCoordinatorIdentitiesForTest
 } from './agent-completion-coordinator'
 import { resetAgentProcessInspectionQueueForTests } from './agent-process-inspection-queue'
+import { isAgentProcessInspectionCostly } from './agent-process-inspection-cost'
+import { toRemoteRuntimePtyId } from '../../../../shared/remote-runtime-pty-id'
+import { toAppSshPtyId } from '../../../../shared/ssh-pty-id'
 import type { RuntimeTerminalProcessInspection } from '@/runtime/runtime-terminal-inspection'
 import type { AgentCompletionCoordinatorOptions } from './agent-completion-coordinator-types'
 
+const MAC_UA = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)'
+const WINDOWS_UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)'
+
 function processResult(
   foregroundProcess: string | null,
   hasChildProcesses = foregroundProcess !== null
@@ -67,6 +74,43 @@ describe('agent completion no-evidence inspection cadence', () => {
     expect(inspectProcess).toHaveBeenCalledTimes(4)
   })
 
+  it('bounds a visible idle remote pane through the shipped cost predicate', async () => {
+    // Why: a remote inspection is an RPC round trip to the execution host plus a
+    // host-side foreground scan — the costliest inspection shape here — yet it
+    // was excluded from the no-evidence tier on every client platform.
+    const sshPtyId = toAppSshPtyId('target-1', 'pty-1')
+    const inspectProcess = vi.fn(async () => processResult(null, false))
+    const { coordinator } = createCoordinator(inspectProcess, {
+      getPtyId: () => sshPtyId,
+      isProcessInspectionCostly: () => isAgentProcessInspectionCostly(MAC_UA, sshPtyId)
+    })
+
+    coordinator.startProcessTracking()
+    await vi.advanceTimersByTimeAsync(60_000)
+
+    // 60s / 15s = 4 host round trips. Pre-fix (2s idle cadence) this was 30.
+    expect(inspectProcess).toHaveBeenCalledTimes(4)
+  })
+
+  it('re-arms the remote pane to the 2s cadence on the first byte of PTY output', async () => {
+    // Why: agent-start detection on a remote pane must stay event-driven, not
+    // wait out the relaxed interval.
+    const runtimePtyId = toRemoteRuntimePtyId('term_1', 'env-a')
+    const inspectProcess = vi.fn(async () => processResult(null, false))
+    const { coordinator } = createCoordinator(inspectProcess, {
+      getPtyId: () => runtimePtyId,
+      isProcessInspectionCostly: () => isAgentProcessInspectionCostly(MAC_UA, runtimePtyId)
+    })
+
+    coordinator.startProcessTracking()
+    await vi.advanceTimersByTimeAsync(14_000)
+    expect(inspectProcess).not.toHaveBeenCalled()
+
+    coordinator.observeOutputActivity()
+    await vi.advanceTimersByTimeAsync(2_000)
+    expect(inspectProcess).toHaveBeenCalledTimes(1)
+  })
+
   it('keeps the full 2s idle cadence on hosts where inspection is cheap', async () => {
     const inspectProcess = vi.fn(async () => processResult(null, false))
     const { coordinator } = createCoordinator(inspectProcess, {
@@ -76,7 +120,7 @@ describe('agent completion no-evidence inspection cadence', () => {
     coordinator.startProcessTracking()
     await vi.advanceTimersByTimeAsync(60_000)
 
-    // 60s / 2s = 30: POSIX/SSH/remote panes must not be relaxed.
+    // 60s / 2s = 30: local POSIX panes (cheap `ps`) must not be relaxed.
     expect(inspectProcess).toHaveBeenCalledTimes(30)
   })
 
@@ -275,3 +319,30 @@ describe('agent completion no-evidence inspection cadence', () => {
     })
   })
 })
+
+describe('isAgentProcessInspectionCostly', () => {
+  it('treats remote-execution-host ptys as costly on every client platform', () => {
+    for (const userAgent of [MAC_UA, WINDOWS_UA]) {
+      expect(isAgentProcessInspectionCostly(userAgent, toAppSshPtyId('target-1', 'pty-1'))).toBe(
+        true
+      )
+      expect(
+        isAgentProcessInspectionCostly(userAgent, toRemoteRuntimePtyId('term_1', 'env-a'))
+      ).toBe(true)
+      expect(isAgentProcessInspectionCostly(userAgent, toRemoteRuntimePtyId('term_1'))).toBe(true)
+    }
+  })
+
+  it('leaves the local branch unchanged: Windows costly, POSIX cheap', () => {
+    expect(isAgentProcessInspectionCostly(WINDOWS_UA, 'worktree-1|pane-1')).toBe(true)
+    expect(isAgentProcessInspectionCostly(WINDOWS_UA, null)).toBe(false)
+    expect(isAgentProcessInspectionCostly(MAC_UA, 'worktree-1|pane-1')).toBe(false)
+    expect(isAgentProcessInspectionCostly(MAC_UA, null)).toBe(false)
+  })
+
+  // Why: a bare "ssh:" id names no connection, so it is not evidence the
+  // inspection crosses a link (see remote-execution-host-pty.test.ts).
+  it('does not relax a POSIX pane for an ssh-prefixed id carrying no relay pty id', () => {
+    expect(isAgentProcessInspectionCostly(MAC_UA, 'ssh:target-1')).toBe(false)
+  })
+})
diff --git a/src/renderer/src/components/terminal-pane/agent-process-inspection-cost.ts b/src/renderer/src/components/terminal-pane/agent-process-inspection-cost.ts
new file mode 100644
index 00000000000..aeeea606bc0
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/agent-process-inspection-cost.ts
@@ -0,0 +1,27 @@
+import { isRemoteExecutionHostPtyId } from './remote-execution-host-pty'
+
+/**
+ * Whether one cadence process inspection for this pane is expensive enough that
+ * a pane with no agent evidence should relax to the `no-evidence` tier.
+ *
+ * Why remote first: a remote inspection is a `terminal.inspectProcess` /
+ * `pty.inspectProcess` round trip to the execution host plus a host-side
+ * foreground scan there — the costliest shape in this codebase, on every client
+ * platform. Local Windows is costly for a different reason: it forks a
+ * powershell.exe whole-process-table CIM scan per poll (~10-40x POSIX `ps`).
+ * Local POSIX (and daemon/WSL panes on it) stays on the full cadence.
+ *
+ * Relaxing is the interim measure: once this renderer consumes the batched
+ * foreground evidence direct-SSH/remote authorities already publish with their
+ * PTY inventory (#17525), those panes can drop to `shouldPollNoEvidenceProcessCadence`
+ * and stop scheduling idle host reads altogether.
+ */
+export function isAgentProcessInspectionCostly(userAgent: string, ptyId: string | null): boolean {
+  if (ptyId !== null && isRemoteExecutionHostPtyId(ptyId)) {
+    return true
+  }
+  if (!userAgent.includes('Windows')) {
+    return false
+  }
+  return ptyId !== null
+}
diff --git a/src/renderer/src/components/terminal-pane/pty-connection/terminal-keydown-fit.ts b/src/renderer/src/components/terminal-pane/pty-connection/terminal-keydown-fit.ts
index 947ead70c31..387e4362e4b 100644
--- a/src/renderer/src/components/terminal-pane/pty-connection/terminal-keydown-fit.ts
+++ b/src/renderer/src/components/terminal-pane/pty-connection/terminal-keydown-fit.ts
@@ -11,7 +11,7 @@ import { resolveCompatibleAgentTypeForOwner } from '../../../../../shared/agent-
 import { registerTerminalSideEffectFactConsumer } from '../terminal-side-effect-facts-handler'
 
 import { isAgentTaskCompleteTrackingEnabled } from './agent-task-complete-settings'
-import { isRemoteExecutionHostPtyId } from '../remote-execution-host-pty'
+import { isAgentProcessInspectionCostly } from '../agent-process-inspection-cost'
 import { isRemoteRuntimePtyId } from './paired-parked-terminal-restore'
 
 import type { ConnectPanePtySession } from './connect-pane-pty-session'
@@ -229,17 +229,8 @@ export function installTerminalKeydownFit(session: ConnectPanePtySession): void
       }),
     shouldPollProcessCadence: () =>
       isAgentTaskCompleteTrackingEnabled() && session.deps.isVisibleRef.current,
-    isProcessInspectionCostly: () => {
-      // Why: local Windows inspection forks a powershell.exe whole-process-table
-      // CIM scan per poll (~10-40x heavier than POSIX `ps`). Keep the no-evidence
-      // cadence enabled until inventory evidence is consumed by this renderer;
-      // mixed-version relays may omit the optional field.
-      if (!navigator.userAgent.includes('Windows')) {
-        return false
-      }
-      const ptyId = session.transport.getPtyId()
-      return ptyId !== null && !isRemoteExecutionHostPtyId(ptyId)
-    },
+    isProcessInspectionCostly: () =>
+      isAgentProcessInspectionCostly(navigator.userAgent, session.transport.getPtyId()),
     isLive: () => {
       if (session.disposed) {
         return false

From 4ff96df2b527b74e2d1001d4ef7c5073743ce099 Mon Sep 17 00:00:00 2001
From: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:05:29 -0700
Subject: [PATCH 87/92] Auto e2e tests autofix scheduled ci 1h run 32
 20260902T0700 (#18227)

* Fix flaky e2e tests with improved locators and synchronization

Add explicit waits, use more robust element selectors, and simplify test
setup to reduce race conditions. Replace file-based fixtures with
programmatic browser creation, use parent-scoped locators for menu
interactions, and poll for stable state before assertions.

* Add E2E failure triage report for run 33564563164

- Reconciles 14 failed tests against job logs and trace artifacts
- Categorizes failures: 8 product bugs, 2 flaky tests, 4 test updates
- Documents test-maintenance fixes and diagnostic findings
- Files 8 Linear issues with owners and fresh recurrence evidence
- Provides next actions for product owners and repository maintenance

* rm artifact notes

* Refactor browser creation E2E test to use UI interactions

- Click through menu instead of manipulating internal store state
- Use Playwright's locator and toBeVisible() assertion patterns

* Record E2E browser creation pageId before barrier check

Move createdPageId assignment before the barrier arm/fire checks. This
ensures the pageId is recorded unconditionally when tracking is enabled,
allowing tests to distinguish between creations rejected before the host
attempt vs those that failed after creation.

* Remove browser page reclamation assertion from restart test

Simplifies test by removing page ID tracking and poll checking
if pages persist after paired runtime restart.
---
 .../web-runtime-browser-creation-e2e-fault.ts |  7 +-
 .../issue-12656-terminal-link-tooltip.spec.ts |  9 ++-
 ...er-creation-reconciliation-failure.spec.ts | 78 +++++++++----------
 .../source-control-large-file-count.spec.ts   |  4 +-
 tests/e2e/tabs.spec.ts                        |  4 +-
 ...tree-active-delete-scroll-position.spec.ts | 22 +-----
 6 files changed, 58 insertions(+), 66 deletions(-)

diff --git a/src/renderer/src/runtime/web-runtime-browser-creation-e2e-fault.ts b/src/renderer/src/runtime/web-runtime-browser-creation-e2e-fault.ts
index db26cfa3d67..44a422a5d6a 100644
--- a/src/renderer/src/runtime/web-runtime-browser-creation-e2e-fault.ts
+++ b/src/renderer/src/runtime/web-runtime-browser-creation-e2e-fault.ts
@@ -179,10 +179,15 @@ export function throwIfE2eWebRuntimeBrowserCapabilityUnavailable(): void {
 }
 
 export async function pauseAfterE2eWebRuntimeBrowserCreate(remotePageId: string): Promise<void> {
-  if (!e2eConfig.exposeStore || !armed || !createdPageBarrier) {
+  if (!e2eConfig.exposeStore) {
     return
   }
+  // Recorded before the arm check so a journey that never arms the barrier can still prove no host
+  // page was created — a null id is only evidence if a real create would have set one.
   createdPageId = remotePageId
+  if (!armed || !createdPageBarrier) {
+    return
+  }
   await createdPageBarrier
 }
 
diff --git a/tests/e2e/issue-12656-terminal-link-tooltip.spec.ts b/tests/e2e/issue-12656-terminal-link-tooltip.spec.ts
index 06fc725ee36..879c8305266 100644
--- a/tests/e2e/issue-12656-terminal-link-tooltip.spec.ts
+++ b/tests/e2e/issue-12656-terminal-link-tooltip.spec.ts
@@ -147,8 +147,13 @@ test.describe('Issue #12656 terminal link tooltip', () => {
     expect(Math.abs(idle.paneBottom - idle.terminalBottom)).toBeLessThanOrEqual(1)
     await expect
       .poll(async () => {
-        await moveToLink(orcaPage, probe)
-        return readTooltipState(orcaPage, probe.tabId)
+        const currentProbe = await locateUrl(orcaPage, url)
+        if (!currentProbe) {
+          return { display: 'none', text: '' }
+        }
+        probe = currentProbe
+        await moveToLink(orcaPage, currentProbe)
+        return readTooltipState(orcaPage, currentProbe.tabId)
       })
       .toMatchObject({ display: '', text: expect.stringContaining(url) })
 
diff --git a/tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts b/tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts
index 27bbfff03fb..be280fcff13 100644
--- a/tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts
+++ b/tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts
@@ -1,10 +1,7 @@
-import { writeFileSync } from 'node:fs'
-import path from 'node:path'
 import type { Page, TestInfo } from '@stablyai/playwright-test'
 import { RuntimeClient } from '../../src/cli/runtime/client'
 import { expect, test } from './helpers/orca-app'
 import { readHostBrowserPageIds, readHostTabs } from './helpers/host-session-tabs'
-import { openFileExplorer } from './helpers/file-explorer'
 import {
   launchHeadlessPairedRuntimeHost,
   type HeadlessPairedRuntimeHost
@@ -17,8 +14,6 @@ import {
 } from './helpers/paired-electron-client'
 import { ensureTerminalVisible, waitForActiveWorktree, waitForSessionReady } from './helpers/store'
 
-const FIXTURE_NAME = 'paired-browser-reconcile-failure.html'
-
 type FaultSnapshot = {
   armed: boolean
   capabilityRejectionArmed: boolean
@@ -36,6 +31,22 @@ type FaultWindow = Window & {
   }
 }
 
+// Drives the real create menu so the failure surfaces through handleNewBrowserTab's toast.
+async function startBrowserCreate(page: Page): Promise<void> {
+  await page.evaluate(() => window.__store?.getState().setBrowserDefaultUrl('about:blank'))
+  await page.getByRole('button', { name: 'New tab' }).first().click()
+  const newBrowserTab = page.getByRole('menuitem', { name: /New Browser Tab/i })
+  await expect(newBrowserTab).toBeVisible({ timeout: 30_000 })
+  await newBrowserTab.click()
+}
+
+async function readStableHostTabs(hostClient: RuntimeClient, repoPath: string) {
+  const { publicationEpoch, snapshotVersion, ...state } = await readHostTabs(hostClient, repoPath)
+  expect(publicationEpoch).not.toBe('')
+  expect(snapshotVersion).toBeGreaterThan(0)
+  return state
+}
+
 type ClientTabState = {
   browserTabIds: string[]
   browserWorkspaceIds: string[]
@@ -115,14 +126,7 @@ async function runReconciliationFailureJourney(args: {
       })
       .toMatchObject({ terminalTabIds: expect.arrayContaining([expect.any(String)]) })
 
-    await openFileExplorer(page)
-    const fixtureRow = page.locator('[data-file-explorer-row]').filter({ hasText: FIXTURE_NAME })
-    await expect(fixtureRow).toBeVisible({ timeout: 30_000 })
-    await fixtureRow.click()
-    const openPreviewToSide = page.getByRole('button', { name: 'Open Preview to the Side' })
-    await expect(openPreviewToSide).toBeVisible({ timeout: 30_000 })
     const baselineClient = await readClientTabs(page, worktreeId)
-    expect(baselineClient.editorTabIds).not.toHaveLength(0)
     expect(baselineClient.terminalTabIds).not.toHaveLength(0)
     const baselineHostBrowserIds = await readHostBrowserPageIds(args.hostClient, args.repoPath)
 
@@ -133,7 +137,7 @@ async function runReconciliationFailureJourney(args: {
       }
       fault.arm()
     })
-    await openPreviewToSide.click()
+    await startBrowserCreate(page)
 
     const faultSnapshot = await expect
       .poll(
@@ -155,9 +159,8 @@ async function runReconciliationFailureJourney(args: {
     }
 
     expect(await readHostBrowserPageIds(args.hostClient, args.repoPath)).toContain(createdPageId)
-    // Why: the tab is staged on click, so while the create is held the user already sees it —
-    // exactly one of it, in the new split. The rollback assertions after release are what prove
-    // the optimism is unwound rather than stranded.
+    // The managed-browser action stages one tab in the active group while the host create is held.
+    // The rollback assertions prove that optimism is unwound rather than stranded.
     const heldClient = await readClientTabs(page, worktreeId)
     const addedSince = (baseline: string[], held: string[]): string[] => {
       expect(held).toEqual(expect.arrayContaining(baseline))
@@ -169,7 +172,7 @@ async function runReconciliationFailureJourney(args: {
     ).toHaveLength(1)
     expect(heldClient.editorTabIds).toEqual(baselineClient.editorTabIds)
     expect(heldClient.terminalTabIds).toEqual(baselineClient.terminalTabIds)
-    expect(addedSince(baselineClient.groupIds, heldClient.groupIds)).toHaveLength(1)
+    expect(heldClient.groupIds).toEqual(baselineClient.groupIds)
 
     await page.screenshot({
       path: args.testInfo.outputPath(`${args.topology}-browser-reconciliation-held.png`),
@@ -181,9 +184,9 @@ async function runReconciliationFailureJourney(args: {
       )
     ).toBe(true)
 
-    await expect(page.getByText('Unable to open this file in Orca Browser.')).toBeVisible({
-      timeout: 30_000
-    })
+    await expect(
+      page.getByText('The paired runtime could not create a managed browser tab.')
+    ).toBeVisible({ timeout: 30_000 })
     await expect
       .poll(() => readHostBrowserPageIds(args.hostClient, args.repoPath), {
         timeout: 30_000,
@@ -261,14 +264,8 @@ async function runCapabilityFailureJourney(args: {
       })
       .toMatchObject({ terminalTabIds: expect.arrayContaining([expect.any(String)]) })
 
-    await openFileExplorer(page)
-    const fixtureRow = page.locator('[data-file-explorer-row]').filter({ hasText: FIXTURE_NAME })
-    await expect(fixtureRow).toBeVisible({ timeout: 30_000 })
-    await fixtureRow.click()
-    const openPreviewToSide = page.getByRole('button', { name: 'Open Preview to the Side' })
-    await expect(openPreviewToSide).toBeVisible({ timeout: 30_000 })
     const baselineClient = await readClientTabs(page, worktreeId)
-    const baselineHost = await readHostTabs(args.hostClient, args.repoPath)
+    const baselineHost = await readStableHostTabs(args.hostClient, args.repoPath)
 
     await page.evaluate(() => {
       const fault = (window as FaultWindow).__webRuntimeBrowserCreationFault
@@ -277,18 +274,25 @@ async function runCapabilityFailureJourney(args: {
       }
       fault.armCapabilityRejection()
     })
-    await openPreviewToSide.click()
+    await startBrowserCreate(page)
 
-    await expect(page.getByText('Unable to open this file in Orca Browser.')).toBeVisible({
+    await expect(page.getByText(/E2E forced browser capability rejection/)).toBeVisible({
       timeout: 30_000
     })
+    // Why: baseline equality alone also holds for a create that was rolled back. A null page id is
+    // what separates rejecting before the host create from undoing one afterwards.
+    expect(
+      await page.evaluate(
+        () => (window as FaultWindow).__webRuntimeBrowserCreationFault?.snapshot() ?? null
+      )
+    ).toMatchObject({ createdPageId: null })
     await expect
       .poll(() => readClientTabs(page, worktreeId), {
         timeout: 30_000,
         message: 'client split state did not settle after capability rejection'
       })
       .toEqual(baselineClient)
-    expect(await readHostTabs(args.hostClient, args.repoPath)).toEqual(baselineHost)
+    expect(await readStableHostTabs(args.hostClient, args.repoPath)).toEqual(baselineHost)
     await page.screenshot({
       path: args.testInfo.outputPath(`${args.topology}-browser-capability-rejected.png`),
       fullPage: true
@@ -305,10 +309,6 @@ test('rolls back a headed-host browser when client reconciliation times out @hea
   testRepoPath
 }, testInfo) => {
   test.setTimeout(300_000)
-  writeFileSync(
-    path.join(testRepoPath, FIXTURE_NAME),
-    '<!doctype html><html><body><h1>browser reconciliation fault</h1></body></html>\n'
-  )
   await waitForSessionReady(orcaPage)
   await waitForActiveWorktree(orcaPage)
   await ensureTerminalVisible(orcaPage)
@@ -326,16 +326,12 @@ test('rolls back a headed-host browser when client reconciliation times out @hea
   })
 })
 
-test('cleans up a headed-host preview when capability rejects after preflight @headful', async ({
+test('cleans up a headed-host browser when capability rejects before create @headful', async ({
   electronApp,
   orcaPage,
   testRepoPath
 }, testInfo) => {
   test.setTimeout(300_000)
-  writeFileSync(
-    path.join(testRepoPath, FIXTURE_NAME),
-    '<!doctype html><html><body><h1>browser capability fault</h1></body></html>\n'
-  )
   await waitForSessionReady(orcaPage)
   await waitForActiveWorktree(orcaPage)
   await ensureTerminalVisible(orcaPage)
@@ -355,10 +351,6 @@ test('cleans up a headed-host preview when capability rejects after preflight @h
 
 test('keeps browser failure cleanup on a headless host', async ({ testRepoPath }, testInfo) => {
   test.setTimeout(300_000)
-  writeFileSync(
-    path.join(testRepoPath, FIXTURE_NAME),
-    '<!doctype html><html><body><h1>headless capability fault</h1></body></html>\n'
-  )
   const host: HeadlessPairedRuntimeHost = await launchHeadlessPairedRuntimeHost()
   try {
     await host.client.call('repo.add', { path: testRepoPath, kind: 'git' })
diff --git a/tests/e2e/source-control-large-file-count.spec.ts b/tests/e2e/source-control-large-file-count.spec.ts
index fb98eb9a123..28a5e7758f2 100644
--- a/tests/e2e/source-control-large-file-count.spec.ts
+++ b/tests/e2e/source-control-large-file-count.spec.ts
@@ -438,7 +438,9 @@ test.describe('Source Control large file count (#8013)', () => {
       // explicit recovery path after the underlying change count drops.
       removeLargeFileCountUntrackedTree(fixture.repoPath)
       await expect(tooManyChangesBanner).toBeVisible()
-      await orcaPage.getByRole('button', { name: 'Retry' }).click()
+      const retryButton = tooManyChangesBanner.locator('..').getByRole('button', { name: 'Retry' })
+      await expect(retryButton).toBeVisible()
+      await retryButton.click()
       await expect(tooManyChangesBanner).not.toBeVisible()
       await expect
         .poll(() =>
diff --git a/tests/e2e/tabs.spec.ts b/tests/e2e/tabs.spec.ts
index b89e47d4079..2faabafc1cc 100644
--- a/tests/e2e/tabs.spec.ts
+++ b/tests/e2e/tabs.spec.ts
@@ -29,7 +29,8 @@ import {
   getActiveTabType,
   getWorktreeTabs,
   getTabBarOrder,
-  ensureTerminalVisible
+  ensureTerminalVisible,
+  waitForStartupWorktreeRefresh
 } from './helpers/store'
 
 const SORTABLE_TAB = '[data-testid="sortable-tab"]'
@@ -69,6 +70,7 @@ async function getFocusedTerminalTabId(page: Page): Promise<string | null> {
 test.describe('Tabs', () => {
   test.beforeEach(async ({ orcaPage }) => {
     await waitForSessionReady(orcaPage)
+    await waitForStartupWorktreeRefresh(orcaPage)
     await waitForActiveWorktree(orcaPage)
     await ensureTerminalVisible(orcaPage)
   })
diff --git a/tests/e2e/worktree-active-delete-scroll-position.spec.ts b/tests/e2e/worktree-active-delete-scroll-position.spec.ts
index 1b9d4bc3283..5e2f15f5b75 100644
--- a/tests/e2e/worktree-active-delete-scroll-position.spec.ts
+++ b/tests/e2e/worktree-active-delete-scroll-position.spec.ts
@@ -237,24 +237,10 @@ test('deleting the active scrolled worktree preserves position and closes the ro
     `[data-worktree-sidebar] [data-worktree-id=${JSON.stringify(belowId)}]`
   )
   await pauseForVisualProof(orcaPage)
-  await target.evaluate((element) => {
-    const scope = element.querySelector<HTMLElement>(
-      '[data-worktree-context-menu-scope="worktree"]'
-    )
-    if (!scope) {
-      throw new Error('Worktree context-menu scope is unavailable')
-    }
-    scope.dispatchEvent(
-      new MouseEvent('contextmenu', {
-        bubbles: true,
-        button: 2,
-        cancelable: true,
-        clientX: scope.getBoundingClientRect().left + 10,
-        clientY: scope.getBoundingClientRect().top + 10
-      })
-    )
-  })
-  const deleteItem = orcaPage.getByRole('menuitem', { name: 'Delete', exact: true })
+  const contextMenuScope = target.locator('[data-worktree-context-menu-scope="worktree"]')
+  await expect(contextMenuScope).toBeVisible()
+  await contextMenuScope.click({ button: 'right' })
+  const deleteItem = orcaPage.getByRole('menuitem', { name: /^Delete(?:\s|$)/ })
   await expect(deleteItem).toBeVisible()
   await expect(deleteItem).toBeInViewport()
   await pauseForVisualProof(orcaPage)

From 817827be5b98d593184d62b9561e8b17acf87498 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:06:45 -0700
Subject: [PATCH 88/92] perf(renderer): drop react-markdown and the emoji
 catalog off the boot path (#18149)

The sidebar pulled react-markdown, remark/rehype and DOMPurify onto the eager
module graph through two static importers -- WorktreeCardMeta's hover-card notes
and DashboardAgentRowMessage's inline agent preview -- and built a 3,979-key
emoji shortcode catalog at module scope in both the renderer and the main
process. Neither is needed before first paint.

Route both markdown surfaces through one shared lazyWithRetry boundary that
preloads on pointer-enter (250ms hover open delay) and on agent-row mount, with
a same-box raw-text Suspense fallback so a pre-load paint cannot shift layout.
Memoize the emoji catalog behind loadCatalog() so import costs nothing.

Eager renderer JS: 5,569,446 B / 331 chunks -> 5,198,787 B / 325 chunks
(-370,659 B, -6.7%). Emoji catalog module eval: ~19.6 ms median -> 0 ms, paid
once on renderer boot and once on main boot.
---
 .../dashboard/DashboardAgentRowMessage.tsx    |  11 +-
 .../components/sidebar/WorktreeCardMeta.tsx   |  18 ++-
 .../sidebar/comment-markdown-lazy.tsx         |  49 +++++++++
 .../worktree-card-markdown-isolation.test.ts  | 103 ++++++++++++++++++
 .../workspace-emoji-shortcodes.lazy.test.ts   |  30 +++++
 .../src/lib/workspace-emoji-shortcodes.ts     |  40 ++++---
 .../emoji-shortcode-catalog.lazy.test.ts      |  44 ++++++++
 src/shared/emoji-shortcode-catalog.ts         |  63 ++++++++---
 8 files changed, 320 insertions(+), 38 deletions(-)
 create mode 100644 src/renderer/src/components/sidebar/comment-markdown-lazy.tsx
 create mode 100644 src/renderer/src/components/sidebar/worktree-card-markdown-isolation.test.ts
 create mode 100644 src/renderer/src/lib/workspace-emoji-shortcodes.lazy.test.ts
 create mode 100644 src/shared/emoji-shortcode-catalog.lazy.test.ts

diff --git a/src/renderer/src/components/dashboard/DashboardAgentRowMessage.tsx b/src/renderer/src/components/dashboard/DashboardAgentRowMessage.tsx
index 6b107086523..74d36300436 100644
--- a/src/renderer/src/components/dashboard/DashboardAgentRowMessage.tsx
+++ b/src/renderer/src/components/dashboard/DashboardAgentRowMessage.tsx
@@ -1,5 +1,9 @@
+import { useEffect } from 'react'
 import { cn } from '@/lib/utils'
-import CommentMarkdown from '@/components/sidebar/CommentMarkdown'
+import {
+  CommentMarkdownAsync,
+  preloadCommentMarkdown
+} from '@/components/sidebar/comment-markdown-lazy'
 import { translate } from '@/i18n/i18n'
 
 type DashboardAgentRowMessageProps = {
@@ -13,6 +17,9 @@ export function DashboardAgentRowMessage({
   isInterrupted,
   lastAssistantMessage
 }: DashboardAgentRowMessageProps): React.JSX.Element | null {
+  // These rows are the sidebar's only boot-visible markdown, so warm the chunk as
+  // soon as one mounts rather than waiting for text to arrive.
+  useEffect(preloadCommentMarkdown, [])
   // Why: message slot is always reserved in collapsed view so the row height
   // stays fixed as assistant text arrives or clears.
   if (!isInterrupted && !lastAssistantMessage) {
@@ -38,7 +45,7 @@ export function DashboardAgentRowMessage({
         </span>
       ) : null}
       {lastAssistantMessage ? (
-        <CommentMarkdown
+        <CommentMarkdownAsync
           content={lastAssistantMessage}
           // Why: animate between a clipped preview and natural height without
           // measuring markdown content in JS.
diff --git a/src/renderer/src/components/sidebar/WorktreeCardMeta.tsx b/src/renderer/src/components/sidebar/WorktreeCardMeta.tsx
index 3c288f6eb94..673dcad0f06 100644
--- a/src/renderer/src/components/sidebar/WorktreeCardMeta.tsx
+++ b/src/renderer/src/components/sidebar/WorktreeCardMeta.tsx
@@ -6,7 +6,6 @@ import { toast } from 'sonner'
 import { LinearIcon } from '@/components/icons/LinearIcon'
 import { JiraIcon } from '@/components/icons/JiraIcon'
 import { SelectedTextCopyMenu } from '@/components/SelectedTextCopyMenu'
-import CommentMarkdown from './CommentMarkdown'
 import { WORKTREE_NATIVE_CONTEXT_MENU_ATTR } from './WorktreeContextMenu'
 import {
   WorktreeCardDetailSection,
@@ -31,6 +30,10 @@ import { WorktreeCardAutomationDetailSection } from './WorktreeCardAutomationDet
 import { WorktreeCardCliDetailSection } from './WorktreeCardCliDetailSection'
 import { WorktreeCardIssueDetailSection } from './WorktreeCardIssueDetailSection'
 import { WorktreeCardHoverIdentityHeader } from './WorktreeCardHoverIdentityHeader'
+import { CommentMarkdownAsync, preloadCommentMarkdown } from './comment-markdown-lazy'
+
+const COMMENT_MARKDOWN_CLASS_NAME =
+  'text-[11.5px] text-foreground break-words leading-normal [&_.comment-md-p]:block [&_.comment-md-p+.comment-md-p]:mt-1'
 
 export type {
   WorktreeCardIssueDisplay,
@@ -183,7 +186,12 @@ export function WorktreeCardDetailsHover({
       openDelay={openDelay}
       closeDelay={closeDelay}
     >
-      <HoverCardTrigger asChild>{children}</HoverCardTrigger>
+      <HoverCardTrigger
+        asChild
+        onPointerEnter={hasComment(comment) ? preloadCommentMarkdown : undefined}
+      >
+        {children}
+      </HoverCardTrigger>
       <HoverCardContent
         side="right"
         align="start"
@@ -355,9 +363,11 @@ export function WorktreeCardDetailsHover({
                 }
               />
               <WorktreeCardDetailSectionContent className="space-y-2">
-                <CommentMarkdown
+                <CommentMarkdownAsync
                   content={comment ?? ''}
-                  className="text-[11.5px] text-foreground break-words leading-normal [&_.comment-md-p]:block [&_.comment-md-p+.comment-md-p]:mt-1"
+                  className={COMMENT_MARKDOWN_CLASS_NAME}
+                  // Mirrors remark-breaks so the fallback keeps the note's line count.
+                  fallbackClassName="whitespace-pre-wrap"
                 />
               </WorktreeCardDetailSectionContent>
             </WorktreeCardDetailSection>
diff --git a/src/renderer/src/components/sidebar/comment-markdown-lazy.tsx b/src/renderer/src/components/sidebar/comment-markdown-lazy.tsx
new file mode 100644
index 00000000000..81de8362505
--- /dev/null
+++ b/src/renderer/src/components/sidebar/comment-markdown-lazy.tsx
@@ -0,0 +1,49 @@
+import React from 'react'
+import { cn } from '@/lib/utils'
+import { lazyWithRetry } from '@/lib/lazy-with-retry'
+
+// Boot-path split: react-markdown + remark/rehype/DOMPurify is ~356 KB of JS that
+// only the sidebar's two markdown surfaces pull onto the eager graph. One lazy()
+// identity for both, so they share a component type and a single chunk fetch.
+const LazyCommentMarkdown = lazyWithRetry(() => import('./CommentMarkdown'), {
+  reloadKey: 'comment-markdown'
+})
+
+/** Warms the chunk ahead of render so the fallback is never actually shown. */
+export function preloadCommentMarkdown(): void {
+  void import('./CommentMarkdown')
+}
+
+type CommentMarkdownAsyncProps = React.ComponentProps<typeof LazyCommentMarkdown> & {
+  /** Extra classes for the pre-load fallback only, e.g. to mirror remark-breaks. */
+  fallbackClassName?: string
+}
+
+/**
+ * Renders the markdown body, falling back to the raw text in an identically
+ * classed box while the chunk loads — same width and wrapping constraints, so a
+ * paint before the chunk lands cannot shift layout.
+ */
+export function CommentMarkdownAsync({
+  fallbackClassName,
+  ...props
+}: CommentMarkdownAsyncProps): React.JSX.Element {
+  return (
+    <React.Suspense
+      fallback={
+        <div
+          className={cn(
+            'min-w-0 max-w-full [overflow-wrap:anywhere]',
+            props.className,
+            fallbackClassName
+          )}
+          title={props.title}
+        >
+          {props.content}
+        </div>
+      }
+    >
+      <LazyCommentMarkdown {...props} />
+    </React.Suspense>
+  )
+}
diff --git a/src/renderer/src/components/sidebar/worktree-card-markdown-isolation.test.ts b/src/renderer/src/components/sidebar/worktree-card-markdown-isolation.test.ts
new file mode 100644
index 00000000000..28925fc89dc
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-card-markdown-isolation.test.ts
@@ -0,0 +1,103 @@
+import { readFileSync, existsSync, statSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+const rendererSrc = join(__dirname, '../..')
+const entry = join(rendererSrc, 'main.tsx')
+const COMMENT_MARKDOWN = join(rendererSrc, 'components/sidebar/CommentMarkdown.tsx')
+
+function source(relativePath: string): string {
+  return readFileSync(join(rendererSrc, relativePath), 'utf8')
+}
+
+const MODULE_EXTENSIONS = ['.ts', '.tsx', '.js', '.jsx']
+
+function resolveImport(specifier: string, fromFile: string): string | null {
+  const base = specifier.startsWith('@/')
+    ? join(rendererSrc, specifier.slice(2))
+    : specifier.startsWith('.')
+      ? resolve(dirname(fromFile), specifier)
+      : null
+  if (base === null) {
+    return null
+  }
+  for (const extension of ['', ...MODULE_EXTENSIONS]) {
+    const candidate = base + extension
+    if (existsSync(candidate) && statSync(candidate).isFile()) {
+      return candidate
+    }
+  }
+  for (const extension of MODULE_EXTENSIONS) {
+    const candidate = join(base, `index${extension}`)
+    if (existsSync(candidate) && statSync(candidate).isFile()) {
+      return candidate
+    }
+  }
+  return null
+}
+
+// Static `from '...'` edges only; `import('...')` and `import type` do not ship
+// code onto the eager graph.
+const STATIC_IMPORT =
+  /(?:^|[\n;])\s*(?:import|export)(?:(?!\bfrom\b)[\s\S])*?\bfrom\s*['"]([^'"]+)['"]/g
+
+/** Walks the renderer entry's static import graph, recording how each module was reached. */
+function eagerModuleGraph(): Map<string, string | null> {
+  const parents = new Map<string, string | null>([[entry, null]])
+  const queue = [entry]
+  while (queue.length > 0) {
+    const current = queue.shift() as string
+    const contents = readFileSync(current, 'utf8')
+    for (const match of contents.matchAll(STATIC_IMPORT)) {
+      if (/^\s*(?:import|export)\s+type\b/.test(match[0].replace(/^[\n;]/, ''))) {
+        continue
+      }
+      const resolved = resolveImport(match[1], current)
+      if (resolved === null || parents.has(resolved)) {
+        continue
+      }
+      parents.set(resolved, current)
+      queue.push(resolved)
+    }
+  }
+  return parents
+}
+
+function importChain(parents: Map<string, string | null>, module: string): string[] {
+  const chain: string[] = []
+  let cursor: string | null | undefined = module
+  while (cursor) {
+    chain.push(cursor.slice(rendererSrc.length + 1))
+    cursor = parents.get(cursor)
+  }
+  return chain.toReversed()
+}
+
+describe('worktree card markdown performance isolation', () => {
+  it('keeps CommentMarkdown off the renderer boot graph entirely', () => {
+    const parents = eagerModuleGraph()
+
+    // Names the offending chain when this regresses, instead of a bare boolean.
+    const chain = parents.has(COMMENT_MARKDOWN) ? importChain(parents, COMMENT_MARKDOWN) : []
+    expect(chain).toEqual([])
+    expect(parents.size).toBeGreaterThan(1000)
+  })
+
+  it('routes both sidebar markdown surfaces through the shared lazy boundary', () => {
+    const lazyBoundary = source('components/sidebar/comment-markdown-lazy.tsx')
+    expect(lazyBoundary).toContain("import('./CommentMarkdown')")
+    // A fallback in the same box keeps first paint from shifting layout.
+    expect(lazyBoundary).toContain('React.Suspense')
+
+    for (const file of [
+      'components/sidebar/WorktreeCardMeta.tsx',
+      'components/dashboard/DashboardAgentRowMessage.tsx'
+    ]) {
+      const contents = source(file)
+      expect(contents).not.toMatch(/^import CommentMarkdown from/m)
+      expect(contents).toContain('CommentMarkdownAsync')
+      // The chunk must be warmed before the surface renders, not on demand.
+      expect(contents).toContain('preloadCommentMarkdown')
+    }
+  })
+})
diff --git a/src/renderer/src/lib/workspace-emoji-shortcodes.lazy.test.ts b/src/renderer/src/lib/workspace-emoji-shortcodes.lazy.test.ts
new file mode 100644
index 00000000000..eafc3e3b2b8
--- /dev/null
+++ b/src/renderer/src/lib/workspace-emoji-shortcodes.lazy.test.ts
@@ -0,0 +1,30 @@
+import { readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+describe('workspace emoji shortcode index laziness', () => {
+  beforeEach(() => {
+    vi.resetModules()
+  })
+
+  it('does not build the shared catalog when the renderer index is imported', async () => {
+    const shortcodeIndex = await import('./workspace-emoji-shortcodes')
+    const catalog = await import('../../../shared/emoji-shortcode-catalog')
+
+    expect(catalog.isEmojiShortcodeCatalogBuiltForTest()).toBe(false)
+
+    // Cursor/regex-only paths must stay off the catalog too.
+    expect(shortcodeIndex.getActiveWorkspaceEmojiShortcode('hi :tad', 7)).not.toBeNull()
+    expect(catalog.isEmojiShortcodeCatalogBuiltForTest()).toBe(false)
+
+    expect(shortcodeIndex.searchWorkspaceEmojiShortcodes('tada')[0]?.emoji).toBe('🎉')
+    expect(catalog.isEmojiShortcodeCatalogBuiltForTest()).toBe(true)
+  })
+
+  it('keeps the exact-shortcode index out of module scope', () => {
+    const indexSource = readFileSync(join(__dirname, 'workspace-emoji-shortcodes.ts'), 'utf8')
+
+    expect(indexSource).not.toMatch(/^const \w+ = new Map\(/m)
+    expect(indexSource).not.toContain('STANDARD_EMOJI_SHORTCODE_ENTRIES')
+  })
+})
diff --git a/src/renderer/src/lib/workspace-emoji-shortcodes.ts b/src/renderer/src/lib/workspace-emoji-shortcodes.ts
index 29e06dc74c9..a3d65c18907 100644
--- a/src/renderer/src/lib/workspace-emoji-shortcodes.ts
+++ b/src/renderer/src/lib/workspace-emoji-shortcodes.ts
@@ -1,5 +1,5 @@
 import {
-  STANDARD_EMOJI_SHORTCODE_ENTRIES,
+  getStandardEmojiShortcodeEntries,
   type StandardEmojiShortcodeEntry
 } from '../../../shared/emoji-shortcode-catalog'
 
@@ -16,9 +16,19 @@ export type WorkspaceEmojiReplacement = {
   value: string
 }
 
-const EXACT_SHORTCODE = new Map(
-  STANDARD_EMOJI_SHORTCODE_ENTRIES.map(({ emoji, shortcode }) => [shortcode, { emoji, shortcode }])
-)
+// Lazy for the same reason as the shared catalog it indexes: nothing needs it
+// until a `:` shortcode is completed.
+let exactShortcode: ReadonlyMap<string, WorkspaceEmojiSuggestion> | null = null
+
+function exactShortcodeIndex(): ReadonlyMap<string, WorkspaceEmojiSuggestion> {
+  exactShortcode ??= new Map(
+    getStandardEmojiShortcodeEntries().map(({ emoji, shortcode }) => [
+      shortcode,
+      { emoji, shortcode }
+    ])
+  )
+  return exactShortcode
+}
 
 // Lower tiers rank first, so `korea` surfaces `south_korea` above `dishwasher`-style incidental hits.
 const MATCH_TIER = { exact: 0, prefix: 1, wordStart: 2, substring: 3 } as const
@@ -43,15 +53,17 @@ export function searchWorkspaceEmojiShortcodes(
     return []
   }
 
-  const matches = STANDARD_EMOJI_SHORTCODE_ENTRIES.flatMap((entry) => {
-    const tier = matchTier(entry.shortcode, normalizedQuery)
-    return tier === null ? [] : [{ ...entry, tier }]
-  }).sort(
-    (left, right) =>
-      left.tier - right.tier ||
-      left.shortcode.length - right.shortcode.length ||
-      left.shortcode.localeCompare(right.shortcode)
-  )
+  const matches = getStandardEmojiShortcodeEntries()
+    .flatMap((entry) => {
+      const tier = matchTier(entry.shortcode, normalizedQuery)
+      return tier === null ? [] : [{ ...entry, tier }]
+    })
+    .sort(
+      (left, right) =>
+        left.tier - right.tier ||
+        left.shortcode.length - right.shortcode.length ||
+        left.shortcode.localeCompare(right.shortcode)
+    )
   const seenEmoji = new Set<string>()
   const suggestions: WorkspaceEmojiSuggestion[] = []
   for (const { emoji, shortcode } of matches) {
@@ -96,7 +108,7 @@ export function replaceCompletedWorkspaceEmojiShortcode(
   if (!match) {
     return null
   }
-  const suggestion = EXACT_SHORTCODE.get(match[2].toLowerCase())
+  const suggestion = exactShortcodeIndex().get(match[2].toLowerCase())
   if (!suggestion) {
     return null
   }
diff --git a/src/shared/emoji-shortcode-catalog.lazy.test.ts b/src/shared/emoji-shortcode-catalog.lazy.test.ts
new file mode 100644
index 00000000000..e838eef765e
--- /dev/null
+++ b/src/shared/emoji-shortcode-catalog.lazy.test.ts
@@ -0,0 +1,44 @@
+import { readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+describe('emoji shortcode catalog laziness', () => {
+  beforeEach(() => {
+    vi.resetModules()
+  })
+
+  it('does not build the catalog when the shared module is imported', async () => {
+    const catalog = await import('./emoji-shortcode-catalog.js')
+
+    expect(catalog.isEmojiShortcodeCatalogBuiltForTest()).toBe(false)
+
+    expect(catalog.getStandardEmojiShortcodeEntries().length).toBeGreaterThan(1000)
+    expect(catalog.isEmojiShortcodeCatalogBuiltForTest()).toBe(true)
+  })
+
+  it('builds on first use and keeps the main process off the eager path', async () => {
+    const catalog = await import('./emoji-shortcode-catalog.js')
+
+    expect(catalog.replaceKnownEmojiWithShortcodes('ship \u{1F389}')).toBe('ship  party ')
+    expect(catalog.isEmojiShortcodeCatalogBuiltForTest()).toBe(true)
+  })
+
+  it('leaves the main-process worktree namer importing only the deferred entry point', () => {
+    // A cross-project import would drag src/main into the shared tsconfig, so assert on source.
+    const worktreeLogic = readFileSync(join(__dirname, '../main/ipc/worktree-logic.ts'), 'utf8')
+    const catalogImport = worktreeLogic.match(
+      /import \{([^}]*)\} from '[^']*emoji-shortcode-catalog'/
+    )
+
+    expect(catalogImport?.[1].trim()).toBe('replaceKnownEmojiWithShortcodes')
+  })
+
+  it('keeps the catalog build out of module scope', () => {
+    const sharedSource = readFileSync(join(__dirname, 'emoji-shortcode-catalog.ts'), 'utf8')
+
+    // A module-scope `const X = <expression over the dataset>` is the regression this guards.
+    expect(sharedSource).not.toMatch(/^const \w+ = Object\.entries\(/m)
+    expect(sharedSource).not.toMatch(/^const \w+ = new (?:Map|Intl\.Segmenter)\(/m)
+    expect(sharedSource).toContain('function loadCatalog()')
+  })
+})
diff --git a/src/shared/emoji-shortcode-catalog.ts b/src/shared/emoji-shortcode-catalog.ts
index 63477e2069a..b583a0c617a 100644
--- a/src/shared/emoji-shortcode-catalog.ts
+++ b/src/shared/emoji-shortcode-catalog.ts
@@ -8,22 +8,50 @@ export type StandardEmojiShortcodeEntry = {
 // Skin-tone aliases (`wave_tone3`) are ~40% of the dataset and would drown the suggestion list.
 const SKIN_TONE_SHORTCODE = /_tone\d(?:-\d)?$/
 
-const CATALOG = Object.entries(emojiShortcodes).flatMap(([hexcode, value]) => {
-  const shortcodes = (typeof value === 'string' ? [value] : value).filter(
-    (shortcode) => !SKIN_TONE_SHORTCODE.test(shortcode)
-  )
-  return shortcodes.length > 0 ? [{ emoji: hexcodeToEmoji(hexcode), shortcodes }] : []
-})
+type EmojiShortcodeCatalog = {
+  entries: readonly StandardEmojiShortcodeEntry[]
+  primaryShortcodeByEmoji: ReadonlyMap<string, string>
+  segmenter: Intl.Segmenter
+}
 
-export const STANDARD_EMOJI_SHORTCODE_ENTRIES: readonly StandardEmojiShortcodeEntry[] =
-  CATALOG.flatMap(({ emoji, shortcodes }) => shortcodes.map((shortcode) => ({ emoji, shortcode })))
+let catalog: EmojiShortcodeCatalog | null = null
 
-const PRIMARY_SHORTCODE_BY_EMOJI = new Map(
-  CATALOG.map(({ emoji, shortcodes }) => [
-    normalizeEmojiLookup(emoji),
-    primaryShortcode(shortcodes)
-  ])
-)
+// Why lazy: this walks ~3,900 shortcodes and is only needed once a `:` is typed
+// or a worktree name is sanitized, but at module scope every renderer and main
+// boot paid for it. Memoized so the first caller builds it exactly once.
+function loadCatalog(): EmojiShortcodeCatalog {
+  if (catalog) {
+    return catalog
+  }
+  const grouped = Object.entries(emojiShortcodes).flatMap(([hexcode, value]) => {
+    const shortcodes = (typeof value === 'string' ? [value] : value).filter(
+      (shortcode) => !SKIN_TONE_SHORTCODE.test(shortcode)
+    )
+    return shortcodes.length > 0 ? [{ emoji: hexcodeToEmoji(hexcode), shortcodes }] : []
+  })
+  catalog = {
+    entries: grouped.flatMap(({ emoji, shortcodes }) =>
+      shortcodes.map((shortcode) => ({ emoji, shortcode }))
+    ),
+    primaryShortcodeByEmoji: new Map(
+      grouped.map(({ emoji, shortcodes }) => [
+        normalizeEmojiLookup(emoji),
+        primaryShortcode(shortcodes)
+      ])
+    ),
+    segmenter: new Intl.Segmenter('en', { granularity: 'grapheme' })
+  }
+  return catalog
+}
+
+export function getStandardEmojiShortcodeEntries(): readonly StandardEmojiShortcodeEntry[] {
+  return loadCatalog().entries
+}
+
+/** Test-only probe for the lazy-boundary guard; never branch on this in product code. */
+export function isEmojiShortcodeCatalogBuiltForTest(): boolean {
+  return catalog !== null
+}
 
 /**
  * Pick the alias that reads best as a branch or directory name: skip `+1`/`-1` so the name
@@ -40,11 +68,10 @@ function primaryShortcode(shortcodes: readonly string[]): string {
   )
 }
 
-const EMOJI_SEGMENTER = new Intl.Segmenter('en', { granularity: 'grapheme' })
-
 export function replaceKnownEmojiWithShortcodes(input: string): string {
-  return Array.from(EMOJI_SEGMENTER.segment(input), ({ segment }) => {
-    const shortcode = PRIMARY_SHORTCODE_BY_EMOJI.get(normalizeEmojiLookup(segment))
+  const { primaryShortcodeByEmoji, segmenter } = loadCatalog()
+  return Array.from(segmenter.segment(input), ({ segment }) => {
+    const shortcode = primaryShortcodeByEmoji.get(normalizeEmojiLookup(segment))
     return shortcode ? ` ${shortcode.replaceAll('_', '-')} ` : segment
   }).join('')
 }

From 1d34d76f28414c774564ffc7158a515e1dc3a03a Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:29:21 -0700
Subject: [PATCH 89/92] fix(i18n): add the three activity keys #18245 left out
 of en.json (#18250)

verify:localization-catalog and verify:localization-extraction both exited 1
on main. The failure was masked: the Lint step failed first on max-lines, so
every later static-analysis step was skipped.
---
 src/renderer/src/i18n/locales/en.json | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index b546a930830..1ffa6eaf9ce 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -15962,7 +15962,8 @@
           "none": "None",
           "search": "Search",
           "showUnreadOnly": "Show unread only",
-          "showChildAgents": "Show child agents"
+          "showChildAgents": "Show child agents",
+          "activityOptions": "Activity options"
         },
         "clearCompleted": {
           "clearedOne": "Cleared 1 completed agent",
@@ -17259,7 +17260,9 @@
   "dashboard": {
     "sidebar": {
       "label": "Agents",
-      "dashboardLabel": "Agent Dashboard"
+      "dashboardLabel": "Agent Dashboard",
+      "openActivity": "View activity",
+      "closeActivity": "Turn off activity view"
     }
   },
   "runtimeRpc": {

From 6d8dc0c97a2895491d301a7f3da2333922b7f2d9 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:35:37 -0700
Subject: [PATCH 90/92] perf(diff): window the combined-diff file tree rows on
 large reviews (#18236)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

`combined-diff-file-tree.tsx` had three unvirtualized `rows.map(...)` sites, so
a 900-file review mounted all 931 tree rows at once. Route the three through a
`CombinedDiffFileTreeRows` wrapper over the existing `SourceControlVirtualFileList`,
reusing its `SOURCE_CONTROL_VIRTUALIZE_MIN_ROWS = 50` threshold and scroll-margin
machinery, with the tree's own 24px row estimate.

`SourceControlVirtualFileList` gains one optional `estimateRowHeightPx` prop that
defaults to its current constant, so source control is unchanged.

Below the threshold the rows stay in natural flow and the markup is unchanged.
Above it, find-in-page, select-all-copy and Tab order see only the mounted
window — the same trade already accepted for the source-control panel.
---
 .../combined-diff-file-tree-row.tsx           |   3 +
 .../combined-diff-file-tree-rows.tsx          |  63 ++++++++
 ...combined-diff-file-tree-windowing.test.tsx | 146 ++++++++++++++++++
 .../browse-files/combined-diff-file-tree.tsx  |  74 ++++-----
 .../listing/virtual-file-list.tsx             |   8 +-
 5 files changed, 248 insertions(+), 46 deletions(-)
 create mode 100644 src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-rows.tsx
 create mode 100644 src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-windowing.test.tsx

diff --git a/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-row.tsx b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-row.tsx
index b71aab643b5..dfb417e2518 100644
--- a/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-row.tsx
+++ b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-row.tsx
@@ -24,6 +24,9 @@ export type CombinedDiffTreeNode = SourceControlTreeNode<
   GitStagingArea | CombinedDiffBranchTreeArea
 >
 
+// Why: every row is a single `py-1 text-xs` line (16px line box + 8px padding); measureElement
+// still corrects, but a wrong estimate makes the virtualized tree's scrollbar jump on first paint.
+export const COMBINED_DIFF_TREE_ROW_HEIGHT_PX = 24
 const COMBINED_DIFF_TREE_INDENT_PX = 12
 const COMBINED_DIFF_TREE_DIRECTORY_PADDING_PX = 8
 const COMBINED_DIFF_TREE_FILE_PADDING_PX = 20
diff --git a/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-rows.tsx b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-rows.tsx
new file mode 100644
index 00000000000..229f9561ac0
--- /dev/null
+++ b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-rows.tsx
@@ -0,0 +1,63 @@
+import React from 'react'
+import { SourceControlVirtualFileList } from '@/components/right-sidebar/source-control/listing/virtual-file-list'
+import type {
+  CombinedDiffFileTreeEntry,
+  CombinedDiffFileTreeMode
+} from '../resolve-changes/combined-diff-section-identity'
+import {
+  CombinedDiffFileTreeRow,
+  COMBINED_DIFF_TREE_ROW_HEIGHT_PX
+} from './combined-diff-file-tree-row'
+import type { CombinedDiffTreeNode } from './combined-diff-file-tree-model'
+
+/**
+ * One flattened tree section, windowed inside the file tree's scroller. A 900-file review flattens
+ * to over a thousand rows; below the virtualize threshold the rows stay in natural flow so small
+ * diffs keep byte-identical markup.
+ */
+export function CombinedDiffFileTreeRows({
+  rows,
+  mode,
+  worktreePath,
+  activeSectionKey,
+  sectionIndexByKey,
+  collapsedDirectoryKeys,
+  visibleFileCounts,
+  scrollElement,
+  onToggleDirectory,
+  onNavigate
+}: {
+  rows: readonly CombinedDiffTreeNode[]
+  mode: CombinedDiffFileTreeMode
+  worktreePath: string
+  activeSectionKey: string | null
+  sectionIndexByKey: ReadonlyMap<string, number>
+  collapsedDirectoryKeys: ReadonlySet<string>
+  visibleFileCounts: ReadonlyMap<string, number> | undefined
+  scrollElement: HTMLDivElement | null
+  onToggleDirectory: (key: string) => void
+  onNavigate: (entry: CombinedDiffFileTreeEntry) => void
+}): React.JSX.Element {
+  return (
+    <SourceControlVirtualFileList
+      rows={rows}
+      scrollElement={scrollElement}
+      estimateRowHeightPx={COMBINED_DIFF_TREE_ROW_HEIGHT_PX}
+      getRowKey={(node) => node.key}
+      renderRow={(node) => (
+        <CombinedDiffFileTreeRow
+          key={node.key}
+          node={node}
+          mode={mode}
+          worktreePath={worktreePath}
+          activeSectionKey={activeSectionKey}
+          sectionIndexByKey={sectionIndexByKey}
+          isCollapsed={collapsedDirectoryKeys.has(node.key)}
+          visibleFileCount={visibleFileCounts?.get(node.key)}
+          onToggleDirectory={onToggleDirectory}
+          onNavigate={onNavigate}
+        />
+      )}
+    />
+  )
+}
diff --git a/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-windowing.test.tsx b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-windowing.test.tsx
new file mode 100644
index 00000000000..2989f0bdeb7
--- /dev/null
+++ b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree-windowing.test.tsx
@@ -0,0 +1,146 @@
+// @vitest-environment happy-dom
+
+import React, { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { SOURCE_CONTROL_VIRTUALIZE_MIN_ROWS } from '@/components/right-sidebar/source-control/listing/virtual-file-list'
+import type { GitBranchChangeEntry } from '../../../../../../shared/git-diff-compare-types'
+import type { CombinedDiffFileTreeRow as CombinedDiffFileTreeRowComponent } from './combined-diff-file-tree-row'
+
+const mountedRows = vi.hoisted(() => ({ count: 0 }))
+
+vi.mock('@/store', () => ({
+  useAppStore: (selector: (state: Record<string, unknown>) => unknown) =>
+    selector({ combinedDiffFileTreeWidth: 420, setCombinedDiffFileTreeWidth: () => {} })
+}))
+
+vi.mock('./combined-diff-file-tree-row', async (importOriginal) => {
+  const actual = (await importOriginal()) as {
+    CombinedDiffFileTreeRow: typeof CombinedDiffFileTreeRowComponent
+  }
+  const react = await import('react')
+  const Row = actual.CombinedDiffFileTreeRow
+  const CountingRow = react.memo((props: React.ComponentProps<typeof Row>) => {
+    react.useEffect(() => {
+      mountedRows.count += 1
+      return () => {
+        mountedRows.count -= 1
+      }
+    }, [])
+    return react.createElement(Row, props)
+  })
+  return { ...actual, CombinedDiffFileTreeRow: CountingRow }
+})
+
+const { CombinedDiffFileTree } = await import('./combined-diff-file-tree')
+const { createCombinedDiffSectionIndexMap } =
+  await import('../resolve-changes/combined-diff-section-identity')
+const { getCombinedDiffBranchEntriesInTreeOrder } = await import('./combined-diff-file-tree-filter')
+
+const VIEWPORT_HEIGHT_PX = 600
+const TREE_ROW_HEIGHT_PX = 24
+const EMPTY_VIEWED_KEYS: ReadonlySet<string> = new Set()
+
+class NoopResizeObserver implements ResizeObserver {
+  observe(): void {}
+  unobserve(): void {}
+  disconnect(): void {}
+}
+
+let host: HTMLDivElement
+let root: Root
+
+beforeEach(() => {
+  globalThis.IS_REACT_ACT_ENVIRONMENT = true
+  mountedRows.count = 0
+  host = document.createElement('div')
+  document.body.appendChild(host)
+  root = createRoot(host)
+  vi.stubGlobal('ResizeObserver', NoopResizeObserver)
+  vi.spyOn(HTMLElement.prototype, 'offsetHeight', 'get').mockImplementation(
+    function (this: HTMLElement) {
+      return this.classList.contains('overflow-auto') ? VIEWPORT_HEIGHT_PX : TREE_ROW_HEIGHT_PX
+    }
+  )
+  vi.spyOn(Element.prototype, 'getBoundingClientRect').mockImplementation(function (this: Element) {
+    const height = this.classList.contains('overflow-auto')
+      ? VIEWPORT_HEIGHT_PX
+      : TREE_ROW_HEIGHT_PX
+    return {
+      top: 0,
+      bottom: height,
+      height,
+      left: 0,
+      right: 240,
+      width: 240,
+      x: 0,
+      y: 0,
+      toJSON: () => ({})
+    } as DOMRect
+  })
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  host.remove()
+  vi.unstubAllGlobals()
+  vi.restoreAllMocks()
+})
+
+/** `fileCount` files spread over `directoryCount` directories, in the viewer's own tree order. */
+function buildEntries(fileCount: number, directoryCount: number): GitBranchChangeEntry[] {
+  const raw: GitBranchChangeEntry[] = Array.from({ length: fileCount }, (_, index) => ({
+    path: `src/dir${String(index % directoryCount).padStart(2, '0')}/file-${String(index).padStart(4, '0')}.ts`,
+    status: 'modified'
+  }))
+  return getCombinedDiffBranchEntriesInTreeOrder('commit', raw)
+}
+
+function renderTree(entries: readonly GitBranchChangeEntry[]): void {
+  const sectionIndexByKey = createCombinedDiffSectionIndexMap(
+    entries.map((entry) => ({ key: `combined-commit:${entry.path}` }))
+  )
+  act(() => {
+    root.render(
+      <CombinedDiffFileTree
+        mode="commit"
+        worktreePath="/repo"
+        entries={entries}
+        sectionIndexByKey={sectionIndexByKey}
+        activeSectionKey={null}
+        viewedSectionKeys={EMPTY_VIEWED_KEYS}
+        collapsed={false}
+        onCollapsedChange={() => {}}
+        onNavigate={() => {}}
+      />
+    )
+  })
+}
+
+describe('combined diff file tree row windowing', () => {
+  it('mounts every row below the virtualize threshold', () => {
+    const fileCount = SOURCE_CONTROL_VIRTUALIZE_MIN_ROWS - 10
+    const directoryCount = 4
+    renderTree(buildEntries(fileCount, directoryCount))
+
+    // `src` plus one directory row per leaf directory, plus one row per file.
+    const totalRows = 1 + directoryCount + fileCount
+    expect(totalRows).toBeLessThan(SOURCE_CONTROL_VIRTUALIZE_MIN_ROWS)
+    expect(mountedRows.count).toBe(totalRows)
+    expect(host.querySelector('[data-testid="source-control-virtual-list"]')).toBeNull()
+    // Natural flow: no absolutely positioned wrappers, exactly the pre-virtualization markup.
+    expect(host.querySelectorAll('[data-index]').length).toBe(0)
+  })
+
+  it('mounts only a window of rows for a large review', () => {
+    const fileCount = 900
+    const directoryCount = 30
+    renderTree(buildEntries(fileCount, directoryCount))
+
+    const totalRows = 1 + directoryCount + fileCount
+    expect(host.querySelector('[data-testid="source-control-virtual-list"]')).not.toBeNull()
+    expect(mountedRows.count).toBeGreaterThan(0)
+    // A 600px viewport plus overscan: bounded by the window, not by the review size.
+    expect(mountedRows.count).toBeLessThan(totalRows / 10)
+  })
+})
diff --git a/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree.tsx b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree.tsx
index dc08942f8d5..c0eb5204c73 100644
--- a/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree.tsx
+++ b/src/renderer/src/components/editor/combined-diff/browse-files/combined-diff-file-tree.tsx
@@ -12,7 +12,7 @@ import type {
   CombinedDiffFileTreeEntry,
   CombinedDiffFileTreeMode
 } from '../resolve-changes/combined-diff-section-identity'
-import { CombinedDiffFileTreeRow } from './combined-diff-file-tree-row'
+import { CombinedDiffFileTreeRows } from './combined-diff-file-tree-rows'
 import { useCombinedDiffFileTreeResize } from './use-combined-diff-file-tree-resize'
 import { translate } from '@/i18n/i18n'
 import {
@@ -50,6 +50,8 @@ export function CombinedDiffFileTree({
   const [query, setQuery] = React.useState('')
   const [excludedExtensions, setExcludedExtensions] = React.useState<Set<string>>(() => new Set())
   const [includeViewed, setIncludeViewed] = React.useState(true)
+  // Why: state, not a ref — the virtualized row lists need the scroller on their own mount pass.
+  const [listScrollElement, setListScrollElement] = React.useState<HTMLDivElement | null>(null)
   const { handleResizeKeyDown, handleResizeStart, maxWidth, minWidth, treeRef, width } =
     useCombinedDiffFileTreeResize(collapsed)
   const toggleDirectory = React.useCallback((key: string) => {
@@ -171,6 +173,17 @@ export function CombinedDiffFileTree({
     return null
   }
 
+  const sharedRowProps = {
+    mode,
+    worktreePath,
+    activeSectionKey,
+    sectionIndexByKey,
+    collapsedDirectoryKeys,
+    scrollElement: listScrollElement,
+    onToggleDirectory: toggleDirectory,
+    onNavigate
+  }
+
   return (
     // Why: this column must be height-bounded so the file list, not the page,
     // owns overflow when review diffs have more files than fit on screen.
@@ -283,7 +296,7 @@ export function CombinedDiffFileTree({
           </Popover>
         </div>
       </div>
-      <div className="min-h-0 flex-1 overflow-auto py-1 scrollbar-sleek">
+      <div ref={setListScrollElement} className="min-h-0 flex-1 overflow-auto py-1 scrollbar-sleek">
         {visibleEntryCount === 0 ? (
           <div className="px-3 py-6 text-center text-xs text-muted-foreground">
             {translate(
@@ -309,20 +322,11 @@ export function CombinedDiffFileTree({
                   <div className="px-3 pb-1 text-[11px] font-semibold uppercase tracking-[0.05em] text-muted-foreground">
                     {group.label}
                   </div>
-                  {rows.map((node) => (
-                    <CombinedDiffFileTreeRow
-                      key={node.key}
-                      node={node}
-                      mode={mode}
-                      worktreePath={worktreePath}
-                      activeSectionKey={activeSectionKey}
-                      sectionIndexByKey={sectionIndexByKey}
-                      isCollapsed={collapsedDirectoryKeys.has(node.key)}
-                      visibleFileCount={visibleFileCounts?.get(node.key)}
-                      onToggleDirectory={toggleDirectory}
-                      onNavigate={onNavigate}
-                    />
-                  ))}
+                  <CombinedDiffFileTreeRows
+                    rows={rows}
+                    visibleFileCounts={visibleFileCounts}
+                    {...sharedRowProps}
+                  />
                 </div>
               )
             })}
@@ -334,38 +338,20 @@ export function CombinedDiffFileTree({
                     'Committed on Branch'
                   )}
                 </div>
-                {(branchVisibleRows?.rows ?? branchRows).map((node) => (
-                  <CombinedDiffFileTreeRow
-                    key={node.key}
-                    node={node}
-                    mode={mode}
-                    worktreePath={worktreePath}
-                    activeSectionKey={activeSectionKey}
-                    sectionIndexByKey={sectionIndexByKey}
-                    isCollapsed={collapsedDirectoryKeys.has(node.key)}
-                    visibleFileCount={branchVisibleRows?.visibleFileCounts.get(node.key)}
-                    onToggleDirectory={toggleDirectory}
-                    onNavigate={onNavigate}
-                  />
-                ))}
+                <CombinedDiffFileTreeRows
+                  rows={branchVisibleRows?.rows ?? branchRows}
+                  visibleFileCounts={branchVisibleRows?.visibleFileCounts}
+                  {...sharedRowProps}
+                />
               </div>
             ) : null}
           </>
         ) : (
-          (branchVisibleRows?.rows ?? branchRows).map((node) => (
-            <CombinedDiffFileTreeRow
-              key={node.key}
-              node={node}
-              mode={mode}
-              worktreePath={worktreePath}
-              activeSectionKey={activeSectionKey}
-              sectionIndexByKey={sectionIndexByKey}
-              isCollapsed={collapsedDirectoryKeys.has(node.key)}
-              visibleFileCount={branchVisibleRows?.visibleFileCounts.get(node.key)}
-              onToggleDirectory={toggleDirectory}
-              onNavigate={onNavigate}
-            />
-          ))
+          <CombinedDiffFileTreeRows
+            rows={branchVisibleRows?.rows ?? branchRows}
+            visibleFileCounts={branchVisibleRows?.visibleFileCounts}
+            {...sharedRowProps}
+          />
         )}
       </div>
       <div
diff --git a/src/renderer/src/components/right-sidebar/source-control/listing/virtual-file-list.tsx b/src/renderer/src/components/right-sidebar/source-control/listing/virtual-file-list.tsx
index c8f19ed8efa..28634c5630f 100644
--- a/src/renderer/src/components/right-sidebar/source-control/listing/virtual-file-list.tsx
+++ b/src/renderer/src/components/right-sidebar/source-control/listing/virtual-file-list.tsx
@@ -83,7 +83,8 @@ export function SourceControlVirtualFileList<TRow>({
   rows,
   getRowKey,
   renderRow,
-  scrollElement
+  scrollElement,
+  estimateRowHeightPx = SOURCE_CONTROL_FILE_ROW_HEIGHT_PX
 }: {
   rows: readonly TRow[]
   getRowKey: (row: TRow) => string
@@ -92,6 +93,9 @@ export function SourceControlVirtualFileList<TRow>({
   // yet when this component's mount effects run, so a ref would leave the
   // virtualizer unobserved until some unrelated re-render.
   scrollElement: HTMLDivElement | null
+  // Why: callers outside source control have their own row paddings; measureElement
+  // still corrects, but a wrong estimate makes the initial scrollbar jump.
+  estimateRowHeightPx?: number
 }): React.JSX.Element {
   const containerRef = useRef<HTMLDivElement>(null)
   const [scrollMargin, setScrollMargin] = useState(0)
@@ -124,7 +128,7 @@ export function SourceControlVirtualFileList<TRow>({
     count: rows.length,
     enabled: virtualize && scrollElement !== null,
     getScrollElement: () => scrollElement,
-    estimateSize: () => SOURCE_CONTROL_FILE_ROW_HEIGHT_PX,
+    estimateSize: () => estimateRowHeightPx,
     overscan: SOURCE_CONTROL_FILE_ROW_OVERSCAN,
     scrollMargin,
     // Why: stable row keys let the virtualizer carry item identity across

From 02a417c04b495c2c3a2daea4a83b5fe3fa8fc688 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:35:48 -0700
Subject: [PATCH 91/92] perf(renderer): stop six timers from ticking behind a
 hidden window (#18134)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* perf(renderer): stop six timers from ticking behind a hidden window

IntensiveWakeUpThrottling is disabled in this app, so a renderer interval
really does fire at full rate with the window hidden. Six of them had
nothing to observe them:

- NativeChatWorkingStatus ran a 1s interval + setState per in-flight turn
  purely to advance an elapsed-seconds counter. Deleted the effect and
  derived elapsed during render from the shared, visibility-gated
  useNow(1_000) clock, so N turns collapse onto one tick.
- The chromium-error fallback poll (250ms) kept probing a stuck-loading
  guest to write a loadError nobody could see.
- The contextual-tour full-pass interval (500ms) woke twice a second to
  queue a rAF a hidden window never paints.
- Three feature-wall animation timers (3600/2400/2400ms) kept committing
  React renders for animations nobody was watching.
- The landing preflight poll (30s) kept forcing IPC refreshes.

All five gated timers reuse installWindowVisibilityInterval. Each either
resumes where it left off (animations) or re-derives from durable state on
the becoming-visible run, so hiding and re-showing is observationally
identical to never hiding.

* test(git): stop two empty commits in the divergence fixture from hashing alike

`counts drift in both directions` builds 100 empty commits, resets to the fork
point, then adds one more — expecting 100 ahead + 1 behind to clear the cap of
100. An empty commit's hash covers only parent, tree, message and a
one-second-granularity timestamp, and every commit in the fixture reuses
`commit ${index}` starting from 0. On a runner fast enough to finish the whole
build inside one wall-clock second (CI: 1059ms for the case, ~7ms per commit),
the post-reset `commit 0` hashed identically to the first `commit 0` of the
chain, so Git handed back that same object and left the branch 99/0 apart
instead of 100/1 — `within`, not `exceeded`.

Numbering the empty commits across calls makes the fixture build the 101
distinct commits it already claimed to. Reproduced deterministically by pinning
GIT_AUTHOR_DATE/GIT_COMMITTER_DATE, which forces the timestamp collision the
fast runner hits by chance: fails with the exact CI assertion before, passes
after.
---
 .../worktree-base-divergence-real-git.test.ts |  10 +-
 ...hromium-error-page-poll-visibility.test.ts |  97 +++++++++++++++
 .../use-browser-page-webview-url-sync.ts      |   9 +-
 .../ContextualTourOverlay.tsx                 |  11 +-
 .../ContextualTourOverlay.visibility.test.tsx | 106 ++++++++++++++++
 .../feature-wall/WorkspacesAnimatedVisual.tsx |  30 +++--
 .../agents-orchestration/StatusesPage.tsx     |  28 +++--
 ...feature-wall-animation-visibility.test.tsx | 115 ++++++++++++++++++
 .../use-workbench-terminal-storyboard.ts      |  12 +-
 ...landing-preflight-runtime-boundary.test.ts |  30 +++++
 .../components/landing-preflight-runtime.ts   |  15 ++-
 .../native-chat/NativeChatWorkingStatus.tsx   |  26 ++--
 ...-chat-working-status-shared-clock.test.tsx |  94 ++++++++++++++
 13 files changed, 534 insertions(+), 49 deletions(-)
 create mode 100644 src/renderer/src/components/browser-pane/navigate/chromium-error-page-poll-visibility.test.ts
 create mode 100644 src/renderer/src/components/contextual-tours/ContextualTourOverlay.visibility.test.tsx
 create mode 100644 src/renderer/src/components/feature-wall/feature-wall-animation-visibility.test.tsx
 create mode 100644 src/renderer/src/components/native-chat/native-chat-working-status-shared-clock.test.tsx

diff --git a/src/main/git/worktree-base-divergence-real-git.test.ts b/src/main/git/worktree-base-divergence-real-git.test.ts
index e17192cf914..377b63b48f9 100644
--- a/src/main/git/worktree-base-divergence-real-git.test.ts
+++ b/src/main/git/worktree-base-divergence-real-git.test.ts
@@ -32,9 +32,17 @@ async function createRepo(): Promise<string> {
   return repoPath
 }
 
+// Why unique across calls: an empty commit's hash covers only parent, tree, message and a
+// one-second-granularity timestamp. On a fast runner the whole 100-commit build finishes inside
+// one second, so a post-reset `commit 0` off the same fork point hashed identically to the first
+// `commit 0` of the chain and Git handed back that same object — leaving the branch 99/0 apart
+// instead of 100/1.
+let emptyCommitSequence = 0
+
 function commitEmpty(repoPath: string, count: number): void {
   for (let index = 0; index < count; index += 1) {
-    git(repoPath, ['commit', '--quiet', '--allow-empty', '-m', `commit ${index}`])
+    emptyCommitSequence += 1
+    git(repoPath, ['commit', '--quiet', '--allow-empty', '-m', `commit ${emptyCommitSequence}`])
   }
 }
 
diff --git a/src/renderer/src/components/browser-pane/navigate/chromium-error-page-poll-visibility.test.ts b/src/renderer/src/components/browser-pane/navigate/chromium-error-page-poll-visibility.test.ts
new file mode 100644
index 00000000000..2256c4171f7
--- /dev/null
+++ b/src/renderer/src/components/browser-pane/navigate/chromium-error-page-poll-visibility.test.ts
@@ -0,0 +1,97 @@
+// @vitest-environment happy-dom
+
+import { act, cleanup, renderHook } from '@testing-library/react'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { BrowserTabPageState } from '../describe-page/browser-page-types'
+import { useBrowserPageWebviewUrlSync } from './use-browser-page-webview-url-sync'
+
+const CHROMIUM_ERROR_URL = 'chrome-error://chromewebdata/'
+
+function setDocumentVisibility(state: 'visible' | 'hidden'): void {
+  Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => state })
+  act(() => {
+    document.dispatchEvent(new Event('visibilitychange'))
+  })
+}
+
+function renderUrlSync(guestUrl: () => string): {
+  updates: [string, BrowserTabPageState][]
+  unmount: () => void
+} {
+  const updates: [string, BrowserTabPageState][] = []
+  const webview = { getURL: () => guestUrl(), src: '' } as unknown as Electron.WebviewTag
+  const view = renderHook(() =>
+    useBrowserPageWebviewUrlSync({
+      browserTabId: 'tab-1',
+      browserTabUrl: 'https://example.test/slow',
+      browserTabLoading: true,
+      isActive: true,
+      isPaintable: true,
+      slotViewport: null,
+      webviewRef: { current: webview },
+      chromeHeaderRef: { current: null },
+      lastKnownWebviewUrlRef: { current: 'https://example.test/slow' },
+      trackNextLoadingEventRef: { current: false },
+      keepAddressBarFocusRef: { current: false },
+      addressBarInputRef: { current: null },
+      browserTabUrlRef: { current: 'https://example.test/slow' },
+      addressBarValueRef: { current: 'https://example.test/slow' },
+      onUpdatePageStateRef: {
+        current: (tabId, patch) => {
+          updates.push([tabId, patch])
+        }
+      },
+      focusWebviewNow: () => false
+    })
+  )
+  return { updates, unmount: view.unmount }
+}
+
+beforeEach(() => {
+  vi.useFakeTimers()
+  setDocumentVisibility('visible')
+})
+
+afterEach(() => {
+  cleanup()
+  setDocumentVisibility('visible')
+  vi.useRealTimers()
+})
+
+describe('chromium error page poll visibility gate', () => {
+  it('stops the 250ms poll while hidden and re-detects the error page on return', () => {
+    let guestUrl = 'https://example.test/slow'
+    const { updates, unmount } = renderUrlSync(() => guestUrl)
+
+    // Visible and still loading: the fallback poll is armed.
+    expect(vi.getTimerCount()).toBe(1)
+    act(() => vi.advanceTimersByTime(1_000))
+    expect(updates).toHaveLength(0)
+
+    setDocumentVisibility('hidden')
+    expect(vi.getTimerCount()).toBe(0)
+
+    // The guest lands on a chrome-error page while nobody can see the surface.
+    guestUrl = CHROMIUM_ERROR_URL
+    act(() => vi.advanceTimersByTime(10_000))
+    expect(updates).toHaveLength(0)
+
+    // Returning re-reads the durable guest URL, so the loadError is not lost.
+    setDocumentVisibility('visible')
+    expect(updates).toHaveLength(1)
+    expect(updates[0]?.[1].loadError?.validatedUrl).toBe('https://example.test/slow')
+    expect(updates[0]?.[1].loading).toBe(false)
+
+    unmount()
+    expect(vi.getTimerCount()).toBe(0)
+  })
+
+  it('polls unchanged while the window stays visible', () => {
+    let guestUrl = 'https://example.test/slow'
+    const { updates } = renderUrlSync(() => guestUrl)
+
+    guestUrl = CHROMIUM_ERROR_URL
+    act(() => vi.advanceTimersByTime(250))
+    expect(updates).toHaveLength(1)
+  })
+})
diff --git a/src/renderer/src/components/browser-pane/navigate/use-browser-page-webview-url-sync.ts b/src/renderer/src/components/browser-pane/navigate/use-browser-page-webview-url-sync.ts
index 0c75ddefce0..bfd93702440 100644
--- a/src/renderer/src/components/browser-pane/navigate/use-browser-page-webview-url-sync.ts
+++ b/src/renderer/src/components/browser-pane/navigate/use-browser-page-webview-url-sync.ts
@@ -9,6 +9,7 @@ import {
   applyBrowserPageViewportLayout,
   syncBrowserPageChromeInset
 } from '../host-guest/browser-page-viewport'
+import { installWindowVisibilityInterval } from '@/lib/window-visibility-interval'
 import { shouldPollChromiumErrorPage } from './chromium-error-page-polling'
 import { isChromiumErrorPage } from '../describe-page/browser-page-url-display'
 import type { BrowserTabPageState } from '../describe-page/browser-page-types'
@@ -152,9 +153,11 @@ export function useBrowserPageWebviewUrlSync({
     }
 
     // Why: some Electron builds paint chrome-error pages without a did-fail-load event; poll only while the active tab loads as a fallback.
-    detectChromiumErrorPage()
-    const intervalId = window.setInterval(detectChromiumErrorPage, 250)
-    return () => window.clearInterval(intervalId)
+    // Why gated: a page stuck loading would otherwise poll 4x/sec forever behind a hidden window. The guest URL is durable state, so the becoming-visible run re-derives anything a hidden window skipped.
+    return installWindowVisibilityInterval({
+      run: detectChromiumErrorPage,
+      intervalMs: 250
+    })
   }, [
     addressBarValueRef,
     browserTabId,
diff --git a/src/renderer/src/components/contextual-tours/ContextualTourOverlay.tsx b/src/renderer/src/components/contextual-tours/ContextualTourOverlay.tsx
index 243bfcc48c4..119ca73d451 100644
--- a/src/renderer/src/components/contextual-tours/ContextualTourOverlay.tsx
+++ b/src/renderer/src/components/contextual-tours/ContextualTourOverlay.tsx
@@ -24,6 +24,7 @@ import {
   handleContextualTourOverlayKeyDown,
   type ActiveTourRenderState
 } from './ContextualTourOverlaySurface'
+import { installWindowVisibilityInterval } from '@/lib/window-visibility-interval'
 import { requestActiveTerminalPaneSplit } from '@/components/tab-bar/request-active-terminal-pane-split'
 import { performContextualTourStepAction } from './contextual-tour-step-actions'
 import { openWorkspaceCreationComposerWithTourHandoff } from './workspace-creation-tour-handoff'
@@ -228,14 +229,20 @@ export function ContextualTourOverlay(): JSX.Element | null {
     const scheduleFullMeasure = (): void => scheduleMeasure(true)
     window.addEventListener('resize', scheduleFullMeasure)
     window.addEventListener('scroll', scheduleTargetMeasure, true)
-    const interval = window.setInterval(scheduleFullMeasure, 500)
+    // Why gated: a hidden window paints no frames, so the queued rAF never runs
+    // and the pass is pure wakeup. The becoming-visible run re-queues it, and
+    // the layout effect measures on every render, so nothing is missed.
+    const stopFullPassInterval = installWindowVisibilityInterval({
+      run: scheduleFullMeasure,
+      intervalMs: 500
+    })
     return () => {
       if (frame !== null) {
         window.cancelAnimationFrame(frame)
       }
       window.removeEventListener('resize', scheduleFullMeasure)
       window.removeEventListener('scroll', scheduleTargetMeasure, true)
-      window.clearInterval(interval)
+      stopFullPassInterval()
     }
   }, [activeTourId, measureTourOverlay])
 
diff --git a/src/renderer/src/components/contextual-tours/ContextualTourOverlay.visibility.test.tsx b/src/renderer/src/components/contextual-tours/ContextualTourOverlay.visibility.test.tsx
new file mode 100644
index 00000000000..f8b6fe0094d
--- /dev/null
+++ b/src/renderer/src/components/contextual-tours/ContextualTourOverlay.visibility.test.tsx
@@ -0,0 +1,106 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it } from 'vitest'
+import { ContextualTourOverlay } from './ContextualTourOverlay'
+import { useAppStore } from '@/store'
+
+let container: HTMLDivElement
+let root: Root
+
+function tourTarget(name: string, top: number): { moveTo: (top: number) => void } {
+  let currentTop = top
+  const element = document.createElement('div')
+  element.setAttribute('data-contextual-tour-target', name)
+  Object.defineProperty(element, 'getBoundingClientRect', {
+    configurable: true,
+    value: () => ({
+      left: 100,
+      right: 220,
+      top: currentTop,
+      bottom: currentTop + 40,
+      width: 120,
+      height: 40,
+      x: 100,
+      y: currentTop
+    })
+  })
+  document.body.appendChild(element)
+  return {
+    moveTo: (next) => {
+      currentTop = next
+    }
+  }
+}
+
+async function settle(ms: number): Promise<void> {
+  await act(async () => {
+    await new Promise((resolve) => setTimeout(resolve, ms))
+  })
+}
+
+async function setDocumentVisibility(state: 'visible' | 'hidden'): Promise<void> {
+  Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => state })
+  await act(async () => {
+    document.dispatchEvent(new Event('visibilitychange'))
+    await new Promise((resolve) => setTimeout(resolve, 0))
+  })
+}
+
+function ringsTop(): string | undefined {
+  return container.querySelector<HTMLElement>('[data-contextual-tour-target-rings]')?.style.top
+}
+
+beforeEach(async () => {
+  ;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
+  ;(window as unknown as { api: unknown }).api = { ui: { set: () => Promise.resolve() } }
+  Object.defineProperty(window, 'innerWidth', { configurable: true, value: 1280 })
+  Object.defineProperty(window, 'innerHeight', { configurable: true, value: 960 })
+  await setDocumentVisibility('visible')
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+})
+
+afterEach(async () => {
+  act(() => root.unmount())
+  container.remove()
+  document.querySelectorAll('[data-contextual-tour-target]').forEach((node) => node.remove())
+  await setDocumentVisibility('visible')
+  useAppStore.setState({ activeContextualTourId: null, activeContextualTourStepIndex: 0 })
+})
+
+describe('ContextualTourOverlay full-pass interval visibility gate', () => {
+  it('pauses the 500ms full pass while hidden and re-measures on return', async () => {
+    const target = tourTarget('workspace-create-control', 300)
+    useAppStore.setState({
+      activeContextualTourId: 'workspace-agent-sessions',
+      activeContextualTourStepIndex: 1,
+      activeModal: 'none',
+      contextualToursOnboardingVisible: false,
+      contextualToursBlockingSurfaceVisible: false,
+      activeContextualTourSuppressed: false
+    })
+    await act(async () => {
+      root.render(<ContextualTourOverlay />)
+      await new Promise((resolve) => setTimeout(resolve, 50))
+    })
+    expect(ringsTop()).toBe('300px')
+
+    // Baseline: while visible, the periodic full pass follows a silent move.
+    target.moveTo(640)
+    await settle(700)
+    expect(ringsTop()).toBe('640px')
+
+    await setDocumentVisibility('hidden')
+    target.moveTo(900)
+    await settle(1_500)
+    expect(ringsTop()).toBe('640px')
+
+    // Returning runs the pass immediately, so the overlay is never left stale.
+    await setDocumentVisibility('visible')
+    await settle(50)
+    expect(ringsTop()).toBe('900px')
+  })
+})
diff --git a/src/renderer/src/components/feature-wall/WorkspacesAnimatedVisual.tsx b/src/renderer/src/components/feature-wall/WorkspacesAnimatedVisual.tsx
index 7240684aeb8..bc4260612fe 100644
--- a/src/renderer/src/components/feature-wall/WorkspacesAnimatedVisual.tsx
+++ b/src/renderer/src/components/feature-wall/WorkspacesAnimatedVisual.tsx
@@ -1,6 +1,7 @@
 import { useEffect, useMemo, useState } from 'react'
 import type { JSX } from 'react'
 import { AgentStateDot } from '@/components/AgentStateDot'
+import { installWindowVisibilityInterval } from '@/lib/window-visibility-interval'
 import { ClaudeIcon, OpenCodeGoIcon } from '../status-bar/icons'
 
 type AgentKind = 'claude' | 'codex' | 'opencode'
@@ -87,18 +88,23 @@ export function WorkspacesAnimatedVisual(props: { reducedMotion: boolean }): JSX
     if (reducedMotion) {
       return
     }
-    const id = window.setInterval(() => {
-      setVisualState((current) => {
-        const next = current.order.slice()
-        const finishing = next.pop()
-        if (!finishing) {
-          return current
-        }
-        next.unshift(finishing)
-        return { order: next, promotedWorkspaceId: finishing.id }
-      })
-    }, STEP_MS)
-    return () => window.clearInterval(id)
+    // Why: nobody watches an animation in a hidden window. `runOnVisible` is a
+    // no-op so revealing the window resumes the cycle instead of skipping a card.
+    return installWindowVisibilityInterval({
+      run: () => {
+        setVisualState((current) => {
+          const next = current.order.slice()
+          const finishing = next.pop()
+          if (!finishing) {
+            return current
+          }
+          next.unshift(finishing)
+          return { order: next, promotedWorkspaceId: finishing.id }
+        })
+      },
+      runOnVisible: () => {},
+      intervalMs: STEP_MS
+    })
   }, [reducedMotion])
   // Why: reduced-motion mode should display the static stack without a
   // post-render repair; only the animated interval needs promoted z-order.
diff --git a/src/renderer/src/components/feature-wall/agents-orchestration/StatusesPage.tsx b/src/renderer/src/components/feature-wall/agents-orchestration/StatusesPage.tsx
index acbfcb889ff..dd4412cf282 100644
--- a/src/renderer/src/components/feature-wall/agents-orchestration/StatusesPage.tsx
+++ b/src/renderer/src/components/feature-wall/agents-orchestration/StatusesPage.tsx
@@ -5,6 +5,7 @@ import { Wrench } from 'lucide-react'
 import { AgentStateDot } from '@/components/AgentStateDot'
 import { getAgentCatalog, AgentIcon, type AgentCatalogEntry } from '@/lib/agent-catalog'
 import { ClaudeIcon, OpenAIIcon } from '../../status-bar/icons'
+import { installWindowVisibilityInterval } from '@/lib/window-visibility-interval'
 import { cn } from '@/lib/utils'
 import { translate } from '@/i18n/i18n'
 
@@ -48,18 +49,25 @@ export function StatusesPage(props: { active: boolean; reducedMotion: boolean })
     schedule(() => setRevealed((r) => ({ ...r, codex: true })), 1900)
 
     let idx = 0
-    const cycleId = window.setInterval(() => {
-      setClaudeFading(true)
-      const swap = window.setTimeout(() => {
-        idx = (idx + 1) % CLAUDE_ACTIVITIES.length
-        setClaudeIdx(idx)
-        setClaudeFading(false)
-      }, 280)
-      timeouts.push(swap)
-    }, 2400)
+    // Why: nobody watches an animation in a hidden window. `runOnVisible` is a
+    // no-op so revealing the window resumes the cycle instead of skipping an
+    // activity; `idx` lives outside the timer, so the reveal picks up where it left off.
+    const stopCycle = installWindowVisibilityInterval({
+      run: () => {
+        setClaudeFading(true)
+        const swap = window.setTimeout(() => {
+          idx = (idx + 1) % CLAUDE_ACTIVITIES.length
+          setClaudeIdx(idx)
+          setClaudeFading(false)
+        }, 280)
+        timeouts.push(swap)
+      },
+      runOnVisible: () => {},
+      intervalMs: 2400
+    })
     return () => {
       timeouts.forEach((id) => window.clearTimeout(id))
-      window.clearInterval(cycleId)
+      stopCycle()
     }
   }, [active, reducedMotion])
 
diff --git a/src/renderer/src/components/feature-wall/feature-wall-animation-visibility.test.tsx b/src/renderer/src/components/feature-wall/feature-wall-animation-visibility.test.tsx
new file mode 100644
index 00000000000..334356ef1a4
--- /dev/null
+++ b/src/renderer/src/components/feature-wall/feature-wall-animation-visibility.test.tsx
@@ -0,0 +1,115 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { renderHook } from '@testing-library/react'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { TooltipProvider } from '@/components/ui/tooltip'
+import { StatusesPage } from './agents-orchestration/StatusesPage'
+import { useWorkbenchTerminalStoryboard } from './use-workbench-terminal-storyboard'
+import { WorkspacesAnimatedVisual } from './WorkspacesAnimatedVisual'
+
+let container: HTMLDivElement
+let root: Root
+
+function setDocumentVisibility(state: 'visible' | 'hidden'): void {
+  Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => state })
+  act(() => {
+    document.dispatchEvent(new Event('visibilitychange'))
+  })
+}
+
+function cardOrder(): string[] {
+  return Array.from(container.querySelectorAll<HTMLElement>('[data-ws-id]'))
+    .map((node) => ({
+      id: node.dataset.wsId ?? '',
+      top: Number.parseFloat(node.style.transform.replace(/[^\d.-]/g, '')) || 0
+    }))
+    .sort((left, right) => left.top - right.top)
+    .map((card) => card.id)
+}
+
+beforeEach(() => {
+  ;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
+  vi.useFakeTimers()
+  setDocumentVisibility('visible')
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  container.remove()
+  setDocumentVisibility('visible')
+  vi.useRealTimers()
+})
+
+describe('feature wall animation timers', () => {
+  it('pauses the workspaces card rotation while hidden and resumes without skipping', () => {
+    act(() =>
+      root.render(
+        <TooltipProvider>
+          <WorkspacesAnimatedVisual reducedMotion={false} />
+        </TooltipProvider>
+      )
+    )
+    const initialOrder = cardOrder()
+    expect(vi.getTimerCount()).toBe(1)
+
+    act(() => vi.advanceTimersByTime(3_600))
+    const afterOneStep = cardOrder()
+    expect(afterOneStep).not.toEqual(initialOrder)
+
+    setDocumentVisibility('hidden')
+    expect(vi.getTimerCount()).toBe(0)
+    act(() => vi.advanceTimersByTime(3_600 * 10))
+    expect(cardOrder()).toEqual(afterOneStep)
+
+    // Revealing resumes the cycle rather than jumping a card forward.
+    setDocumentVisibility('visible')
+    expect(cardOrder()).toEqual(afterOneStep)
+    expect(vi.getTimerCount()).toBe(1)
+    act(() => vi.advanceTimersByTime(3_600))
+    expect(cardOrder()).not.toEqual(afterOneStep)
+  })
+
+  it('pauses the workbench run queue while hidden and resumes from the same entry', () => {
+    const view = renderHook(() => useWorkbenchTerminalStoryboard('tour', false))
+    const first = view.result.current.running
+    act(() => vi.advanceTimersByTime(2_400))
+    const second = view.result.current.running
+    expect(second).not.toBe(first)
+
+    setDocumentVisibility('hidden')
+    act(() => vi.advanceTimersByTime(2_400 * 10))
+    expect(view.result.current.running).toBe(second)
+
+    setDocumentVisibility('visible')
+    expect(view.result.current.running).toBe(second)
+    act(() => vi.advanceTimersByTime(2_400))
+    expect(view.result.current.running).not.toBe(second)
+    view.unmount()
+  })
+
+  it('pauses the agent-status activity cycle while hidden and resumes in place', () => {
+    act(() =>
+      root.render(
+        <TooltipProvider>
+          <StatusesPage active reducedMotion={false} />
+        </TooltipProvider>
+      )
+    )
+    act(() => vi.advanceTimersByTime(2_400 + 280))
+    const afterOneCycle = container.textContent ?? ''
+
+    setDocumentVisibility('hidden')
+    act(() => vi.advanceTimersByTime((2_400 + 280) * 10))
+    expect(container.textContent).toBe(afterOneCycle)
+
+    setDocumentVisibility('visible')
+    expect(container.textContent).toBe(afterOneCycle)
+    act(() => vi.advanceTimersByTime(2_400 + 280))
+    expect(container.textContent).not.toBe(afterOneCycle)
+  })
+})
diff --git a/src/renderer/src/components/feature-wall/use-workbench-terminal-storyboard.ts b/src/renderer/src/components/feature-wall/use-workbench-terminal-storyboard.ts
index 919d3928500..4ee95a9d428 100644
--- a/src/renderer/src/components/feature-wall/use-workbench-terminal-storyboard.ts
+++ b/src/renderer/src/components/feature-wall/use-workbench-terminal-storyboard.ts
@@ -1,4 +1,5 @@
 import { useEffect, useState } from 'react'
+import { installWindowVisibilityInterval } from '@/lib/window-visibility-interval'
 import {
   WORKBENCH_RUN_QUEUE,
   WORKBENCH_RUN_TICK_MS,
@@ -38,10 +39,13 @@ export function useWorkbenchTerminalStoryboard(
     if (reducedMotion || isTwoAgentsChecklist) {
       return
     }
-    const id = window.setInterval(() => {
-      setRunIdx((index) => (index + 1) % WORKBENCH_RUN_QUEUE.length)
-    }, WORKBENCH_RUN_TICK_MS)
-    return () => window.clearInterval(id)
+    // Why: nobody watches an animation in a hidden window. `runOnVisible` is a
+    // no-op so revealing the window resumes the queue instead of skipping an entry.
+    return installWindowVisibilityInterval({
+      run: () => setRunIdx((index) => (index + 1) % WORKBENCH_RUN_QUEUE.length),
+      runOnVisible: () => {},
+      intervalMs: WORKBENCH_RUN_TICK_MS
+    })
   }, [isTwoAgentsChecklist, reducedMotion])
 
   useEffect(() => {
diff --git a/src/renderer/src/components/landing-preflight-runtime-boundary.test.ts b/src/renderer/src/components/landing-preflight-runtime-boundary.test.ts
index f282ca5f15a..f6426c9e3cf 100644
--- a/src/renderer/src/components/landing-preflight-runtime-boundary.test.ts
+++ b/src/renderer/src/components/landing-preflight-runtime-boundary.test.ts
@@ -15,6 +15,11 @@ const status = (overrides: Partial<PreflightStatus> = {}): PreflightStatus => ({
   ...overrides
 })
 
+function setDocumentVisibility(state: 'visible' | 'hidden'): void {
+  Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => state })
+  document.dispatchEvent(new Event('visibilitychange'))
+}
+
 const githubRepo: Repo = {
   id: 'github',
   path: '/repos/github',
@@ -27,6 +32,7 @@ const githubRepo: Repo = {
 
 beforeEach(() => {
   vi.useFakeTimers()
+  setDocumentVisibility('visible')
   refresh.mockClear()
   invalidate.mockClear()
   useAppStore.setState(useAppStore.getInitialState(), true)
@@ -35,6 +41,7 @@ beforeEach(() => {
 
 afterEach(() => {
   cleanup()
+  setDocumentVisibility('visible')
   vi.useRealTimers()
   useAppStore.setState(useAppStore.getInitialState(), true)
 })
@@ -108,6 +115,29 @@ describe('landing preflight runtime boundary', () => {
     view.unmount()
   })
 
+  it('stops the 30s preflight poll while hidden and lets the reveal refresh instead', () => {
+    useAppStore.setState({ repos: [githubRepo], preflightStatus: status() })
+    const view = renderHook(() => useLandingPreflightRuntime())
+    refresh.mockClear()
+
+    expect(vi.getTimerCount()).toBe(1)
+    act(() => setDocumentVisibility('hidden'))
+    expect(vi.getTimerCount()).toBe(0)
+
+    // Five poll windows pass behind a hidden window with no IPC at all.
+    act(() => vi.advanceTimersByTime(150_000))
+    expect(refresh).not.toHaveBeenCalled()
+
+    // The sibling visibilitychange handler force-refreshes on reveal, so the
+    // banner is current the moment it can be seen; the poll re-arms behind it.
+    act(() => setDocumentVisibility('visible'))
+    expect(refresh).toHaveBeenCalledTimes(1)
+    expect(refresh).toHaveBeenCalledWith({ force: true })
+    expect(vi.getTimerCount()).toBe(1)
+
+    view.unmount()
+  })
+
   it('keeps one active interval and removes listeners and polling on cleanup', () => {
     useAppStore.setState({ repos: [githubRepo], preflightStatus: status() })
     const addEventListener = vi.spyOn(document, 'addEventListener')
diff --git a/src/renderer/src/components/landing-preflight-runtime.ts b/src/renderer/src/components/landing-preflight-runtime.ts
index 57cc9d1c31d..6df10613668 100644
--- a/src/renderer/src/components/landing-preflight-runtime.ts
+++ b/src/renderer/src/components/landing-preflight-runtime.ts
@@ -1,5 +1,6 @@
 import { useEffect, useMemo } from 'react'
 import { useAppStore } from '../store'
+import { installWindowVisibilityInterval } from '@/lib/window-visibility-interval'
 import {
   getLandingPreflightIssues,
   hasGitHubBackedProject,
@@ -60,10 +61,16 @@ export function useLandingPreflightRuntime(): { preflightIssues: PreflightIssue[
     if (preflightIssues.length === 0) {
       return
     }
-    const intervalId = window.setInterval(() => {
-      void refreshPreflightStatus({ force: true })
-    }, 30000)
-    return () => window.clearInterval(intervalId)
+    // Why gated: the effect above already force-refreshes on visibilitychange
+    // and focus, so a revealed window has fresh data without this poll firing
+    // while hidden — hence the no-op `runOnVisible`.
+    return installWindowVisibilityInterval({
+      run: () => {
+        void refreshPreflightStatus({ force: true })
+      },
+      runOnVisible: () => {},
+      intervalMs: 30000
+    })
   }, [preflightIssues.length, refreshPreflightStatus])
 
   return { preflightIssues }
diff --git a/src/renderer/src/components/native-chat/NativeChatWorkingStatus.tsx b/src/renderer/src/components/native-chat/NativeChatWorkingStatus.tsx
index 5aef81ba51d..a883429f658 100644
--- a/src/renderer/src/components/native-chat/NativeChatWorkingStatus.tsx
+++ b/src/renderer/src/components/native-chat/NativeChatWorkingStatus.tsx
@@ -1,6 +1,7 @@
-import { useEffect, useState } from 'react'
+import { useState } from 'react'
 import { ChevronRight } from 'lucide-react'
 import { translate } from '@/i18n/i18n'
+import { useNow } from '@/hooks/use-now'
 
 export function NativeChatWorkingStatus({
   startedAt,
@@ -15,18 +16,17 @@ export function NativeChatWorkingStatus({
   expanded?: boolean
   onToggleExpanded?: () => void
 }): React.JSX.Element {
-  const [elapsedSeconds, setElapsedSeconds] = useState(0)
-
-  useEffect(() => {
-    if (thinking || workedSeconds != null) {
-      return
-    }
-    const epoch = startedAt ?? Date.now()
-    setElapsedSeconds(Math.max(0, Math.floor((Date.now() - epoch) / 1000)))
-    const update = () => setElapsedSeconds(Math.max(0, Math.floor((Date.now() - epoch) / 1000)))
-    const timer = window.setInterval(update, 1000)
-    return () => window.clearInterval(timer)
-  }, [startedAt, thinking, workedSeconds])
+  // Why: elapsed seconds is ordinary render dataflow, not an external system.
+  // The shared 1s clock is visibility-gated and collapses every in-flight turn
+  // onto one tick, instead of one interval plus one commit per turn.
+  const counting = !thinking && workedSeconds == null
+  const now = useNow(1_000, counting)
+  // Why: preserves the old effect's `startedAt ?? Date.now()` epoch for the
+  // single frame before the turn's startedAt lands.
+  const [mountedAt] = useState(() => Date.now())
+  const elapsedSeconds = counting
+    ? Math.max(0, Math.floor((now - (startedAt ?? mountedAt)) / 1000))
+    : 0
 
   const label =
     workedSeconds != null
diff --git a/src/renderer/src/components/native-chat/native-chat-working-status-shared-clock.test.tsx b/src/renderer/src/components/native-chat/native-chat-working-status-shared-clock.test.tsx
new file mode 100644
index 00000000000..dfea16ae0e4
--- /dev/null
+++ b/src/renderer/src/components/native-chat/native-chat-working-status-shared-clock.test.tsx
@@ -0,0 +1,94 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { NativeChatWorkingStatus } from './NativeChatWorkingStatus'
+
+let container: HTMLDivElement
+let root: Root
+
+function setDocumentVisibility(state: 'visible' | 'hidden'): void {
+  Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => state })
+  act(() => {
+    document.dispatchEvent(new Event('visibilitychange'))
+  })
+}
+
+function renderTurns(count: number, startedAt: number): void {
+  act(() => {
+    root.render(
+      <>
+        {Array.from({ length: count }, (_, index) => (
+          <NativeChatWorkingStatus key={index} startedAt={startedAt} thinking={false} />
+        ))}
+      </>
+    )
+  })
+}
+
+function elapsedLabels(): string[] {
+  return Array.from(container.querySelectorAll('[aria-label]'), (node) => node.textContent ?? '')
+}
+
+beforeEach(() => {
+  ;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
+  vi.useFakeTimers()
+  vi.setSystemTime(1_000_000)
+  setDocumentVisibility('visible')
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  container.remove()
+  setDocumentVisibility('visible')
+  vi.useRealTimers()
+})
+
+describe('native chat working status elapsed clock', () => {
+  it('collapses every in-flight turn onto one shared visibility-gated timer', () => {
+    renderTurns(3, 1_000_000)
+
+    // One shared 1s clock for all three turns, not one interval per turn.
+    expect(vi.getTimerCount()).toBe(1)
+    act(() => vi.advanceTimersByTime(3_000))
+    expect(elapsedLabels()).toEqual([
+      'Working for 3 seconds',
+      'Working for 3 seconds',
+      'Working for 3 seconds'
+    ])
+  })
+
+  it('stops ticking while hidden and re-syncs the elapsed value on return', () => {
+    renderTurns(1, 1_000_000)
+    act(() => vi.advanceTimersByTime(3_000))
+    expect(elapsedLabels()).toEqual(['Working for 3 seconds'])
+
+    setDocumentVisibility('hidden')
+    expect(vi.getTimerCount()).toBe(0)
+
+    // A minute of hidden wall-clock: no callbacks, no commits, label frozen.
+    act(() => vi.advanceTimersByTime(60_000))
+    expect(elapsedLabels()).toEqual(['Working for 3 seconds'])
+
+    // Returning re-derives elapsed from startedAt, so nothing was lost.
+    setDocumentVisibility('visible')
+    expect(elapsedLabels()).toEqual(['Working for 63 seconds'])
+    expect(vi.getTimerCount()).toBe(1)
+  })
+
+  it('holds no timer for a thinking turn or a completed turn', () => {
+    act(() => {
+      root.render(
+        <>
+          <NativeChatWorkingStatus startedAt={1_000_000} thinking />
+          <NativeChatWorkingStatus startedAt={1_000_000} thinking={false} workedSeconds={12} />
+        </>
+      )
+    })
+    expect(vi.getTimerCount()).toBe(0)
+  })
+})

From 437615499337cd963180923ac2d56c7d89e06505 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:46:52 -0700
Subject: [PATCH 92/92] perf(sidebar): stop re-allocating 423 workspace
 descriptors and 193 bucket projections per recompute (#18241)

Layers three identity memos onto the row cache #18222 landed, without changing
what the four sidebar numbers say in any state.

- The active-workspace descriptor list is memoized on the four slices
  `collectActiveDashboardWorkspaces(state, false)` actually reads.
- Each worktree's bucket tally is memoized on its rows plus the acknowledgement
  map, so a ping that rebuilds one worktree no longer re-projects the board.
- The `useShallow` selector becomes a module-level 14-identity gate, which
  allocates nothing on the unchanged path.
- The counts object is reused by identity when all four totals hold.
---
 ...dashboard-bucket-counts.allocation.test.ts | 250 ++++++++++++
 ...ashboard-bucket-counts.equivalence.test.ts | 371 ++++++++++++++++++
 .../build-dashboard-bucket-counts.ts          | 169 +++++++-
 .../dashboard-snapshot-workspaces.ts          |   7 +-
 .../useAgentBucketCounts.gate.test.ts         | 158 ++++++++
 .../dashboard/useAgentBucketCounts.test.tsx   |   3 +-
 .../dashboard/useAgentBucketCounts.ts         | 164 ++++----
 7 files changed, 1023 insertions(+), 99 deletions(-)
 create mode 100644 src/renderer/src/components/dashboard/build-dashboard-bucket-counts.allocation.test.ts
 create mode 100644 src/renderer/src/components/dashboard/build-dashboard-bucket-counts.equivalence.test.ts
 create mode 100644 src/renderer/src/components/dashboard/useAgentBucketCounts.gate.test.ts

diff --git a/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.allocation.test.ts b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.allocation.test.ts
new file mode 100644
index 00000000000..9145a397854
--- /dev/null
+++ b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.allocation.test.ts
@@ -0,0 +1,250 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
+import { makePaneKey } from '../../../../shared/stable-pane-id'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+import type * as DashboardSnapshotWorkspaces from './dashboard-snapshot-workspaces'
+import type * as DashboardRowBucket from './dashboard-row-bucket'
+import type { ActiveDashboardWorkspace } from './dashboard-snapshot-workspaces'
+
+const collected = vi.hoisted(() => ({
+  calls: 0,
+  descriptors: 0,
+  projections: 0
+}))
+
+vi.mock('./dashboard-snapshot-workspaces', async (importOriginal) => {
+  const actual = await importOriginal<typeof DashboardSnapshotWorkspaces>()
+  return {
+    ...actual,
+    collectActiveDashboardWorkspaces: (
+      ...args: Parameters<typeof actual.collectActiveDashboardWorkspaces>
+    ): ActiveDashboardWorkspace[] => {
+      const workspaces = actual.collectActiveDashboardWorkspaces(...args)
+      collected.calls += 1
+      collected.descriptors += workspaces.length
+      return workspaces
+    }
+  }
+})
+
+vi.mock('./dashboard-row-bucket', async (importOriginal) => {
+  const actual = await importOriginal<typeof DashboardRowBucket>()
+  return {
+    ...actual,
+    dashboardRowBucketProjection: (
+      ...args: Parameters<typeof actual.dashboardRowBucketProjection>
+    ) => {
+      collected.projections += 1
+      return actual.dashboardRowBucketProjection(...args)
+    }
+  }
+})
+
+import type { DashboardSnapshotState as SnapshotState } from './build-dashboard-snapshot'
+import {
+  buildDashboardBucketCounts,
+  createDashboardBucketCountsCache
+} from './build-dashboard-bucket-counts'
+
+const NOW = 1_700_000_000_000
+const WORKSPACE_COUNT = 400
+
+function leafId(index: number): string {
+  return `${String(index).padStart(8, '0')}-1111-4111-8111-111111111111`
+}
+
+function worktree(index: number): Worktree {
+  return {
+    id: `w${index}`,
+    repoId: 'r1',
+    path: `/r1/w${index}`,
+    head: 'abc123',
+    branch: 'main',
+    isBare: false,
+    isMainWorktree: false,
+    displayName: `w${index}`,
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: index,
+    lastActivityAt: NOW
+  }
+}
+
+function tab(index: number): TerminalTab {
+  return {
+    id: `tab${index}`,
+    ptyId: `pty-tab${index}`,
+    worktreeId: `w${index}`,
+    title: 'shell',
+    customTitle: null,
+    color: null,
+    sortOrder: 0,
+    createdAt: NOW
+  }
+}
+
+function entry(index: number, prompt: string): AgentStatusEntry {
+  return {
+    paneKey: makePaneKey(`tab${index}`, leafId(index)),
+    state: 'working',
+    prompt,
+    updatedAt: NOW,
+    stateStartedAt: NOW - 5_000,
+    stateHistory: [],
+    agentType: 'claude',
+    tabId: `tab${index}`,
+    worktreeId: `w${index}`
+  }
+}
+
+function largeState(): SnapshotState {
+  const worktrees: Worktree[] = []
+  const tabsByWorktree: Record<string, TerminalTab[]> = {}
+  const agentStatusByPaneKey: Record<string, AgentStatusEntry> = {}
+  const terminalLayoutsByTabId: Record<string, unknown> = {}
+  const ptyIdsByTabId: Record<string, string[]> = {}
+  for (let index = 0; index < WORKSPACE_COUNT; index += 1) {
+    worktrees.push(worktree(index))
+    tabsByWorktree[`w${index}`] = [tab(index)]
+    agentStatusByPaneKey[makePaneKey(`tab${index}`, leafId(index))] = entry(index, 'do the thing')
+    terminalLayoutsByTabId[`tab${index}`] = {
+      root: { type: 'leaf', leafId: leafId(index) },
+      activeLeafId: leafId(index),
+      expandedLeafId: null,
+      ptyIdsByLeafId: { [leafId(index)]: `pty-tab${index}` }
+    }
+    ptyIdsByTabId[`tab${index}`] = [`pty-tab${index}`]
+  }
+  return {
+    repos: [
+      {
+        id: 'r1',
+        path: '/r1',
+        displayName: 'Repo One',
+        badgeColor: '#000',
+        addedAt: 1
+      }
+    ],
+    worktreesByRepo: { r1: worktrees },
+    folderWorkspaces: [],
+    projectGroups: [],
+    tabsByWorktree,
+    agentStatusByPaneKey,
+    retainedAgentsByPaneKey: {},
+    migrationUnsupportedByPtyId: {},
+    runtimeAgentOrchestrationByPaneKey: {},
+    terminalLayoutsByTabId,
+    ptyIdsByTabId,
+    runtimePaneTitlesByTabId: {},
+    acknowledgedAgentsByPaneKey: {},
+    settings: null
+  } as unknown as SnapshotState
+}
+
+beforeEach(() => {
+  collected.calls = 0
+  collected.descriptors = 0
+  collected.projections = 0
+})
+
+describe('bucket-count work reuse', () => {
+  it('allocates the descriptor list once across recomputes that leave the workspace slices alone', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = largeState()
+
+    // Five recomputes driven by agent traffic: prompt streaming on one pane,
+    // which is what actually invalidates the counts memo in the sidebar.
+    for (let pass = 0; pass < 5; pass += 1) {
+      const next: SnapshotState = {
+        ...state,
+        agentStatusByPaneKey: {
+          ...state.agentStatusByPaneKey,
+          [makePaneKey('tab0', leafId(0))]: entry(0, `streamed ${pass}`)
+        }
+      }
+      buildDashboardBucketCounts(next, NOW + pass, cache, 1)
+    }
+
+    expect(collected.calls).toBe(1)
+    expect(collected.descriptors).toBe(WORKSPACE_COUNT)
+  })
+
+  it('projects only the rows of the worktree whose inputs moved', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = largeState()
+    buildDashboardBucketCounts(state, NOW, cache, 1)
+    // Cold pass: one row per workspace.
+    expect(collected.projections).toBe(WORKSPACE_COUNT)
+
+    collected.projections = 0
+    for (let pass = 0; pass < 5; pass += 1) {
+      buildDashboardBucketCounts(
+        {
+          ...state,
+          agentStatusByPaneKey: {
+            ...state.agentStatusByPaneKey,
+            [makePaneKey('tab0', leafId(0))]: entry(0, `streamed ${pass}`)
+          }
+        },
+        NOW + pass,
+        cache,
+        1
+      )
+    }
+    // One rebuilt worktree per pass, not the whole board.
+    expect(collected.projections).toBe(5)
+  })
+
+  it('recounts every worktree without rebuilding rows when acknowledgements change', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = largeState()
+    buildDashboardBucketCounts(state, NOW, cache, 1)
+
+    collected.projections = 0
+    const acked: SnapshotState = {
+      ...state,
+      acknowledgedAgentsByPaneKey: { [makePaneKey('tab0', leafId(0))]: NOW }
+    }
+    buildDashboardBucketCounts(acked, NOW + 1, cache, 1)
+    expect(cache.lastComputedWorktreeIds).toEqual([])
+    expect(collected.projections).toBe(WORKSPACE_COUNT)
+  })
+
+  it('rebuilds the descriptor list when any slice it reads changes identity', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = largeState()
+    buildDashboardBucketCounts(state, NOW, cache, 1)
+    expect(collected.calls).toBe(1)
+
+    const slices: (keyof SnapshotState | 'projectGroups' | 'folderWorkspaces')[] = [
+      'repos',
+      'worktreesByRepo',
+      'folderWorkspaces',
+      'projectGroups'
+    ]
+    let previous: Record<string, unknown> = state as unknown as Record<string, unknown>
+    for (const [index, slice] of slices.entries()) {
+      const source = previous[slice]
+      const next = {
+        ...previous,
+        [slice]: Array.isArray(source) ? [...source] : { ...(source as object) }
+      }
+      buildDashboardBucketCounts(next as unknown as SnapshotState, NOW, cache, 1)
+      expect(collected.calls, `re-collects after ${slice} changes`).toBe(index + 2)
+      previous = next
+    }
+  })
+
+  it('does not memoize when the caller passes no cache', () => {
+    const state = largeState()
+    buildDashboardBucketCounts(state, NOW)
+    buildDashboardBucketCounts(state, NOW)
+    expect(collected.calls).toBe(2)
+  })
+})
diff --git a/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.equivalence.test.ts b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.equivalence.test.ts
new file mode 100644
index 00000000000..2bca8fdf0e0
--- /dev/null
+++ b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.equivalence.test.ts
@@ -0,0 +1,371 @@
+import { describe, expect, it } from 'vitest'
+import {
+  AGENT_STATUS_STALE_AFTER_MS,
+  type AgentStatusEntry
+} from '../../../../shared/agent-status-types'
+import type { DashboardBucket } from '../../../../shared/dashboard-snapshot'
+import type { FolderWorkspace } from '../../../../shared/folder-workspace-types'
+import type { ProjectGroup } from '../../../../shared/project-group-types'
+import { makePaneKey } from '../../../../shared/stable-pane-id'
+import type { TerminalTab } from '../../../../shared/terminal-tab-types'
+import type { Worktree } from '../../../../shared/worktree/types'
+import { folderWorkspaceKey } from '../../../../shared/workspace-scope'
+import { EMPTY_WORKTREE_AGENT_ORCHESTRATION } from '../sidebar/worktree-agent-orchestration-batch'
+import type { DashboardSnapshotState } from './build-dashboard-snapshot'
+import {
+  buildDashboardBucketCounts,
+  createDashboardBucketCountsCache
+} from './build-dashboard-bucket-counts'
+import { selectDashboardOrchestration } from './dashboard-orchestration-selection'
+import { dashboardRowBucketProjection } from './dashboard-row-bucket'
+import { collectActiveDashboardWorkspaces } from './dashboard-snapshot-workspaces'
+import { selectWorktreeAgentRowsCached } from './worktree-agent-rows-cache'
+
+const BASE = 1_700_000_000_000
+const STALE = AGENT_STATUS_STALE_AFTER_MS
+const LEAF_1 = '11111111-1111-4111-8111-111111111111'
+const LEAF_2 = '22222222-2222-4222-8222-222222222222'
+const LEAF_3 = '33333333-3333-4333-8333-333333333333'
+const PANE_1 = makePaneKey('tab1', LEAF_1)
+const PANE_2 = makePaneKey('tab2', LEAF_2)
+const FOLDER_WORKSPACE_ID = folderWorkspaceKey('folder-1')
+const PANE_3 = makePaneKey('tab3', LEAF_3)
+
+/**
+ * Unmemoized reference walk, composed from the same shared primitives the sidebar
+ * counts are defined by. Every assertion below pins the memoized builder to this.
+ */
+function oracleBucketCounts(
+  state: DashboardSnapshotState,
+  now: number
+): Record<DashboardBucket, number> {
+  const counts: Record<DashboardBucket, number> = {
+    attention: 0,
+    working: 0,
+    done: 0,
+    idle: 0
+  }
+  const activeWorktrees = collectActiveDashboardWorkspaces(state, false)
+  const { singletonOrchestration, orchestrationByWorktree } = selectDashboardOrchestration(
+    state,
+    activeWorktrees
+  )
+  for (const { worktree } of activeWorktrees) {
+    const rows = selectWorktreeAgentRowsCached({
+      state,
+      worktreeId: worktree.id,
+      orchestration:
+        singletonOrchestration ??
+        orchestrationByWorktree?.get(worktree.id) ??
+        EMPTY_WORKTREE_AGENT_ORCHESTRATION,
+      now,
+      generation: undefined
+    })
+    for (const row of rows) {
+      if (row.rowSource === 'subagent') {
+        continue
+      }
+      counts[dashboardRowBucketProjection(row, state.acknowledgedAgentsByPaneKey).bucket] += 1
+    }
+  }
+  return counts
+}
+
+function worktree(id: string): Worktree {
+  return {
+    id,
+    repoId: 'r1',
+    path: `/r1/${id}`,
+    head: 'abc123',
+    branch: 'main',
+    isBare: false,
+    isMainWorktree: false,
+    displayName: id,
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: BASE
+  }
+}
+
+function tab(id: string, worktreeId: string): TerminalTab {
+  return {
+    id,
+    ptyId: `pty-${id}`,
+    worktreeId,
+    title: 'shell',
+    customTitle: null,
+    color: null,
+    sortOrder: 0,
+    createdAt: BASE
+  }
+}
+
+function entry(
+  paneKey: string,
+  tabId: string,
+  worktreeId: string,
+  overrides: Partial<AgentStatusEntry> = {}
+): AgentStatusEntry {
+  return {
+    paneKey,
+    state: 'working',
+    prompt: 'do the thing',
+    updatedAt: BASE,
+    stateStartedAt: BASE - 5_000,
+    stateHistory: [],
+    agentType: 'claude',
+    tabId,
+    worktreeId,
+    ...overrides
+  }
+}
+
+function leafLayout(tabId: string, leafId: string) {
+  return {
+    root: { type: 'leaf', leafId } as const,
+    activeLeafId: leafId,
+    expandedLeafId: null,
+    ptyIdsByLeafId: { [leafId]: `pty-${tabId}` }
+  }
+}
+
+function folderWorkspace(): FolderWorkspace {
+  return {
+    id: 'folder-1',
+    projectGroupId: 'group-1',
+    name: 'Docs workspace',
+    folderPath: '/workspace/docs',
+    connectionId: null,
+    linkedTask: null,
+    comment: '',
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: BASE,
+    createdAt: BASE,
+    updatedAt: BASE
+  }
+}
+
+function projectGroup(): ProjectGroup {
+  return {
+    id: 'group-1',
+    name: 'Documentation',
+    parentPath: '/workspace',
+    connectionId: null,
+    parentGroupId: null,
+    createdFrom: 'folder-scan',
+    tabOrder: 0,
+    isCollapsed: false,
+    color: null,
+    createdAt: BASE,
+    updatedAt: BASE
+  }
+}
+
+function baseState(): DashboardSnapshotState {
+  return {
+    repos: [
+      {
+        id: 'r1',
+        path: '/r1',
+        displayName: 'Repo One',
+        badgeColor: '#000',
+        addedAt: 1
+      }
+    ],
+    worktreesByRepo: { r1: [worktree('w1'), worktree('w2')] },
+    folderWorkspaces: [folderWorkspace()],
+    projectGroups: [projectGroup()],
+    tabsByWorktree: {
+      w1: [tab('tab1', 'w1')],
+      w2: [tab('tab2', 'w2')],
+      [FOLDER_WORKSPACE_ID]: [tab('tab3', FOLDER_WORKSPACE_ID)]
+    },
+    agentStatusByPaneKey: {
+      [PANE_1]: entry(PANE_1, 'tab1', 'w1'),
+      [PANE_2]: entry(PANE_2, 'tab2', 'w2', { state: 'done' }),
+      [PANE_3]: entry(PANE_3, 'tab3', FOLDER_WORKSPACE_ID, {
+        state: 'waiting'
+      })
+    },
+    retainedAgentsByPaneKey: {},
+    migrationUnsupportedByPtyId: {},
+    runtimeAgentOrchestrationByPaneKey: {},
+    terminalLayoutsByTabId: {
+      tab1: leafLayout('tab1', LEAF_1),
+      tab2: leafLayout('tab2', LEAF_2),
+      tab3: leafLayout('tab3', LEAF_3)
+    },
+    ptyIdsByTabId: {
+      tab1: ['pty-tab1'],
+      tab2: ['pty-tab2'],
+      tab3: ['pty-tab3']
+    },
+    runtimePaneTitlesByTabId: { tab1: { 0: 'shell' } },
+    acknowledgedAgentsByPaneKey: {},
+    settings: null
+  } as unknown as DashboardSnapshotState
+}
+
+/**
+ * One agent's clock crossing, walked in order through a single cache.
+ *
+ * `generation` models the store's `agentStatusEpoch`: it stays put until decay
+ * may have shifted a bucket. `BASE + STALE` is the last instant an entry is
+ * still fresh (`now - observedAt <= STALE`) and the only point where a cache
+ * *hit* — not a recompute — has to return a freshness verdict.
+ */
+const CLOCK_WALK: { label: string; now: number; generation: number }[] = [
+  { label: 'cold', now: BASE, generation: 1 },
+  { label: 'last fresh instant (cache hit)', now: BASE + STALE, generation: 1 },
+  { label: 'first stale instant', now: BASE + STALE + 1, generation: 2 },
+  { label: 'long stale (cache hit)', now: BASE + STALE * 4, generation: 2 },
+  { label: 'long stale (recomputed)', now: BASE + STALE * 4, generation: 3 }
+]
+
+type Mutation = {
+  label: string
+  apply: (state: DashboardSnapshotState) => DashboardSnapshotState
+}
+
+const MUTATIONS: Mutation[] = [
+  { label: 'unchanged', apply: (state) => state },
+  {
+    label: 'acknowledgement written',
+    apply: (state) => ({
+      ...state,
+      acknowledgedAgentsByPaneKey: { [PANE_2]: BASE + STALE * 8 }
+    })
+  },
+  {
+    label: 'unrelated pane-title frame',
+    apply: (state) => ({
+      ...state,
+      runtimePaneTitlesByTabId: {
+        ...state.runtimePaneTitlesByTabId,
+        tab2: { 0: 'sh' }
+      }
+    })
+  },
+  {
+    label: 'status write on one worktree',
+    apply: (state) => ({
+      ...state,
+      agentStatusByPaneKey: {
+        ...state.agentStatusByPaneKey,
+        [PANE_1]: entry(PANE_1, 'tab1', 'w1', {
+          prompt: 'streamed',
+          state: 'blocked'
+        })
+      }
+    })
+  },
+  {
+    label: 'worktree leaves the active set',
+    apply: (state) => ({ ...state, worktreesByRepo: { r1: [worktree('w1')] } })
+  },
+  {
+    label: 'folder workspace archived',
+    apply: (state) => ({
+      ...state,
+      folderWorkspaces: [{ ...folderWorkspace(), isArchived: true }]
+    })
+  },
+  {
+    label: 'project group renamed',
+    apply: (state) => ({
+      ...state,
+      projectGroups: [{ ...projectGroup(), name: 'Renamed' }]
+    })
+  },
+  {
+    label: 'pty goes away',
+    apply: (state) => ({
+      ...state,
+      ptyIdsByTabId: { tab2: ['pty-tab2'], tab3: ['pty-tab3'] }
+    })
+  }
+]
+
+describe('buildDashboardBucketCounts equivalence with the unmemoized walk', () => {
+  it('matches the oracle for every mutation at every clock, sharing one cache', () => {
+    for (const mutation of MUTATIONS) {
+      const cache = createDashboardBucketCountsCache()
+      for (const step of CLOCK_WALK) {
+        const state = mutation.apply(baseState())
+        expect(
+          buildDashboardBucketCounts(state, step.now, cache, step.generation),
+          `${mutation.label} @ ${step.label}`
+        ).toEqual(oracleBucketCounts(state, step.now))
+      }
+    }
+  })
+
+  it('matches the oracle when mutations are applied cumulatively through one cache', () => {
+    const cache = createDashboardBucketCountsCache()
+    let state = baseState()
+    for (const mutation of MUTATIONS) {
+      state = mutation.apply(state)
+      for (const step of CLOCK_WALK) {
+        expect(
+          buildDashboardBucketCounts(state, step.now, cache, step.generation),
+          `${mutation.label} @ ${step.label}`
+        ).toEqual(oracleBucketCounts(state, step.now))
+      }
+    }
+  })
+
+  it('serves the last-fresh instant from a cache hit and still decays one ms later', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = baseState()
+
+    expect(buildDashboardBucketCounts(state, BASE, cache, 1).working).toBe(1)
+    expect(cache.lastComputedWorktreeIds.length).toBe(3)
+
+    // The boundary the earlier matrix never covered: a cache hit answering at the
+    // exact instant `now - observedAt === STALE`, where the entry is still fresh.
+    const atBoundary = buildDashboardBucketCounts(state, BASE + STALE, cache, 1)
+    expect(cache.lastComputedWorktreeIds).toEqual([])
+    expect(atBoundary.working).toBe(1)
+    expect(atBoundary).toEqual(oracleBucketCounts(state, BASE + STALE))
+
+    const pastBoundary = buildDashboardBucketCounts(state, BASE + STALE + 1, cache, 2)
+    expect(pastBoundary.working).toBe(0)
+    expect(pastBoundary).toEqual(oracleBucketCounts(state, BASE + STALE + 1))
+  })
+
+  it('returns the previous counts object when the four totals are unchanged', () => {
+    const cache = createDashboardBucketCountsCache()
+    const state = baseState()
+    const first = buildDashboardBucketCounts(state, BASE, cache, 1)
+
+    // A prompt stream on one pane: rows rebuild, totals do not move.
+    const streamed: DashboardSnapshotState = {
+      ...state,
+      agentStatusByPaneKey: {
+        ...state.agentStatusByPaneKey,
+        [PANE_1]: entry(PANE_1, 'tab1', 'w1', { prompt: 'more output' })
+      }
+    }
+    const second = buildDashboardBucketCounts(streamed, BASE + 1_000, cache, 1)
+    expect(cache.lastComputedWorktreeIds).toEqual(['w1'])
+    expect(second).toBe(first)
+
+    const moved: DashboardSnapshotState = {
+      ...state,
+      agentStatusByPaneKey: {
+        ...state.agentStatusByPaneKey,
+        [PANE_1]: entry(PANE_1, 'tab1', 'w1', { state: 'blocked' })
+      }
+    }
+    expect(buildDashboardBucketCounts(moved, BASE + 2_000, cache, 1)).not.toBe(first)
+  })
+})
diff --git a/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.ts b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.ts
index ea21ff33a45..e673ad73298 100644
--- a/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.ts
+++ b/src/renderer/src/components/dashboard/build-dashboard-bucket-counts.ts
@@ -1,8 +1,13 @@
 import type { DashboardBucket } from '../../../../shared/dashboard-snapshot'
 import type { DashboardSnapshotState } from './build-dashboard-snapshot'
-import { collectActiveDashboardWorkspaces } from './dashboard-snapshot-workspaces'
+import {
+  collectActiveDashboardWorkspaces,
+  type ActiveDashboardWorkspace,
+  type DashboardWorkspaceState
+} from './dashboard-snapshot-workspaces'
 import { selectDashboardOrchestration } from './dashboard-orchestration-selection'
 import { dashboardRowBucketProjection } from './dashboard-row-bucket'
+import type { DashboardAgentRowWithLineage } from './agent-row-lineage'
 import { EMPTY_WORKTREE_AGENT_ORCHESTRATION } from '../sidebar/worktree-agent-orchestration-batch'
 import {
   createWorktreeAgentRowsCache,
@@ -19,20 +24,133 @@ const EMPTY_COUNTS: Record<DashboardBucket, number> = {
   idle: 0
 }
 
-export type DashboardBucketCountsCache = WorktreeAgentRowsCache
+type ActiveWorkspacesMemo = {
+  repos: unknown
+  worktreesByRepo: unknown
+  folderWorkspaces: unknown
+  projectGroups: unknown
+  workspaces: ActiveDashboardWorkspace[]
+}
+
+type WorktreeTallyMemo = {
+  rows: readonly unknown[]
+  acknowledgedAgentsByPaneKey: unknown
+  tally: Record<DashboardBucket, number>
+}
+
+export type DashboardBucketCountsCache = WorktreeAgentRowsCache & {
+  /** Memo over the metadata-free workspace collection; see selectActiveDashboardWorkspaces. */
+  activeWorkspaces: ActiveWorkspacesMemo | null
+  /** Per-worktree bucket tallies; see tallyWorktreeRows. */
+  tallyByWorktree: Map<string, WorktreeTallyMemo>
+  /** Previously returned totals, reused by identity when all four are unchanged. */
+  lastCounts: Record<DashboardBucket, number> | null
+}
 
 export function createDashboardBucketCountsCache(): DashboardBucketCountsCache {
-  return createWorktreeAgentRowsCache()
+  return {
+    ...createWorktreeAgentRowsCache(),
+    activeWorkspaces: null,
+    tallyByWorktree: new Map(),
+    lastCounts: null
+  }
+}
+
+/**
+ * The workspace descriptor list, reused by identity while its inputs hold.
+ *
+ * `collectActiveDashboardWorkspaces(state, false)` allocates one descriptor per
+ * workspace (hundreds, in a large install) and, with metadata off, reads only the
+ * four slices keyed here — see the read-set note on `DashboardWorkspaceState`.
+ * Every other slice it can touch sits behind an `includeMapMetadata` gate.
+ */
+function selectActiveDashboardWorkspaces(
+  state: DashboardWorkspaceState,
+  cache: DashboardBucketCountsCache | undefined
+): ActiveDashboardWorkspace[] {
+  const memo = cache?.activeWorkspaces
+  if (
+    memo &&
+    memo.repos === state.repos &&
+    memo.worktreesByRepo === state.worktreesByRepo &&
+    memo.folderWorkspaces === state.folderWorkspaces &&
+    memo.projectGroups === state.projectGroups
+  ) {
+    return memo.workspaces
+  }
+  const workspaces = collectActiveDashboardWorkspaces(state, false)
+  if (cache) {
+    cache.activeWorkspaces = {
+      repos: state.repos,
+      worktreesByRepo: state.worktreesByRepo,
+      folderWorkspaces: state.folderWorkspaces,
+      projectGroups: state.projectGroups,
+      workspaces
+    }
+  }
+  return workspaces
+}
+
+function countsEqual(
+  a: Record<DashboardBucket, number>,
+  b: Record<DashboardBucket, number>
+): boolean {
+  return (
+    a.attention === b.attention && a.working === b.working && a.done === b.done && a.idle === b.idle
+  )
+}
+
+/**
+ * One worktree's bucket tally, reused while its rows and the acknowledgement map
+ * both hold their identity.
+ *
+ * `dashboardRowBucketProjection` reads nothing but the row and
+ * `acknowledgedAgentsByPaneKey[row.paneKey]`, so those two identities are the
+ * whole input. Keying on the ack slice rather than folding it into the row cache
+ * keeps main's property that an acknowledgement recounts without rebuilding rows.
+ */
+function tallyWorktreeRows(
+  rows: DashboardAgentRowWithLineage[],
+  acknowledgedAgentsByPaneKey: Record<string, number> | undefined,
+  worktreeId: string,
+  cache: DashboardBucketCountsCache | undefined
+): Record<DashboardBucket, number> {
+  const memo = cache?.tallyByWorktree.get(worktreeId)
+  if (
+    memo &&
+    memo.rows === rows &&
+    memo.acknowledgedAgentsByPaneKey === acknowledgedAgentsByPaneKey
+  ) {
+    return memo.tally
+  }
+  const tally = { attention: 0, working: 0, done: 0, idle: 0 } satisfies Record<
+    DashboardBucket,
+    number
+  >
+  for (const row of rows) {
+    if (row.rowSource === 'subagent') {
+      continue
+    }
+    tally[dashboardRowBucketProjection(row, acknowledgedAgentsByPaneKey).bucket] += 1
+  }
+  cache?.tallyByWorktree.set(worktreeId, {
+    rows,
+    acknowledgedAgentsByPaneKey,
+    tally
+  })
+  return tally
 }
 
 /**
  * Derive sidebar counts without allocating dashboard cards or metadata.
  *
- * With a cache, each worktree's row pipeline reruns only when one of its own
- * inputs changed (see worktree-agent-rows-cache). Counting over the (possibly
- * reused) rows happens on every call, so acknowledgement changes recount
- * without rebuilding any rows. `generation` must change whenever time-based
- * freshness decay may have shifted a bucket (agentStatusEpoch).
+ * With a cache, three layers reuse work independently: the workspace descriptor
+ * list while its four slices hold, each worktree's row pipeline while its own
+ * inputs hold (see worktree-agent-rows-cache), and each worktree's bucket tally
+ * while its rows and the acknowledgement map hold. An acknowledgement write
+ * therefore recounts without rebuilding any rows, as before. `generation` must
+ * change whenever time-based freshness decay may have shifted a bucket
+ * (agentStatusEpoch).
  */
 export function buildDashboardBucketCounts(
   state: DashboardSnapshotState,
@@ -46,7 +164,7 @@ export function buildDashboardBucketCounts(
     done: 0,
     idle: 0
   } satisfies Record<DashboardBucket, number>
-  const activeWorktrees = collectActiveDashboardWorkspaces(state, false)
+  const activeWorktrees = selectActiveDashboardWorkspaces(state, cache)
   const { singletonOrchestration, orchestrationByWorktree } = selectDashboardOrchestration(
     state,
     activeWorktrees
@@ -68,19 +186,34 @@ export function buildDashboardBucketCounts(
       generation,
       cache
     })
-    for (const row of rows) {
-      if (row.rowSource === 'subagent') {
-        continue
-      }
-      counts[dashboardRowBucketProjection(row, state.acknowledgedAgentsByPaneKey).bucket] += 1
-    }
+    const tally = tallyWorktreeRows(rows, state.acknowledgedAgentsByPaneKey, worktreeId, cache)
+    counts.attention += tally.attention
+    counts.working += tally.working
+    counts.done += tally.done
+    counts.idle += tally.idle
   }
 
   if (cache) {
+    for (const worktreeId of cache.tallyByWorktree.keys()) {
+      if (!cache.seenWorktreeIds.has(worktreeId)) {
+        cache.tallyByWorktree.delete(worktreeId)
+      }
+    }
     finishWorktreeAgentRowsCachePass(cache)
   }
 
-  return counts.attention === 0 && counts.working === 0 && counts.done === 0 && counts.idle === 0
-    ? EMPTY_COUNTS
-    : counts
+  const totals =
+    counts.attention === 0 && counts.working === 0 && counts.done === 0 && counts.idle === 0
+      ? EMPTY_COUNTS
+      : counts
+  if (!cache) {
+    return totals
+  }
+  // Why: most recomputes are triggered by agent traffic that leaves all four
+  // totals where they were; a fresh object there would re-render the sidebar
+  // entry and miss every downstream memo keyed on this result.
+  const stable =
+    cache.lastCounts && countsEqual(cache.lastCounts, totals) ? cache.lastCounts : totals
+  cache.lastCounts = stable
+  return stable
 }
diff --git a/src/renderer/src/components/dashboard/dashboard-snapshot-workspaces.ts b/src/renderer/src/components/dashboard/dashboard-snapshot-workspaces.ts
index fcb34581414..0d8f2a33d93 100644
--- a/src/renderer/src/components/dashboard/dashboard-snapshot-workspaces.ts
+++ b/src/renderer/src/components/dashboard/dashboard-snapshot-workspaces.ts
@@ -30,7 +30,12 @@ export type ActiveDashboardWorkspace = {
   hostLabel?: string
 }
 
-type DashboardWorkspaceState = Pick<AppState, 'repos' | 'worktreesByRepo'> &
+/** With `includeMapMetadata: false`, `collectActiveDashboardWorkspaces` reads only
+ *  `repos`, `worktreesByRepo`, `folderWorkspaces` and `projectGroups` — every other
+ *  slice here sits behind a metadata gate. Callers memoize the result on exactly those
+ *  four (see `build-dashboard-bucket-counts`), so widening the metadata-free read set
+ *  means widening that key too. */
+export type DashboardWorkspaceState = Pick<AppState, 'repos' | 'worktreesByRepo'> &
   Partial<
     Pick<
       AppState,
diff --git a/src/renderer/src/components/dashboard/useAgentBucketCounts.gate.test.ts b/src/renderer/src/components/dashboard/useAgentBucketCounts.gate.test.ts
new file mode 100644
index 00000000000..618d04a9169
--- /dev/null
+++ b/src/renderer/src/components/dashboard/useAgentBucketCounts.gate.test.ts
@@ -0,0 +1,158 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { shallow } from 'zustand/shallow'
+import type { AppState } from '@/store/types'
+import {
+  resetAgentBucketCountStateForTests,
+  selectAgentBucketCountState
+} from './useAgentBucketCounts'
+
+vi.mock('@/store', () => ({ useAppStore: () => undefined }))
+
+const STORE_WRITES = 2_000
+
+function storeState(): AppState {
+  return {
+    repos: [],
+    worktreesByRepo: {},
+    tabsByWorktree: {},
+    unifiedTabsByWorktree: {},
+    agentStatusByPaneKey: {},
+    retainedAgentsByPaneKey: {},
+    migrationUnsupportedByPtyId: {},
+    runtimeAgentOrchestrationByPaneKey: {},
+    terminalLayoutsByTabId: {},
+    ptyIdsByTabId: {},
+    runtimePaneTitlesByTabId: {},
+    folderWorkspaces: [],
+    acknowledgedAgentsByPaneKey: {},
+    agentStatusEpoch: 0,
+    // A slice the counts never read: writing it is what "unrelated store write" means.
+    unreadCountsByWorktree: {}
+  } as unknown as AppState
+}
+
+// What `useShallow` did before the gate, unwrapped from the hook so it can be
+// driven directly: allocate the 14-key object, then `shallow()` it against the
+// previous one. Kept here as the comparison baseline.
+let previousShallow: Record<string, unknown> | null = null
+const shallowInputs = (s: AppState): Record<string, unknown> => ({
+  repos: s.repos,
+  worktreesByRepo: s.worktreesByRepo,
+  tabsByWorktree: s.tabsByWorktree,
+  unifiedTabsByWorktree: s.unifiedTabsByWorktree,
+  agentStatusByPaneKey: s.agentStatusByPaneKey,
+  retainedAgentsByPaneKey: s.retainedAgentsByPaneKey,
+  migrationUnsupportedByPtyId: s.migrationUnsupportedByPtyId,
+  runtimeAgentOrchestrationByPaneKey: s.runtimeAgentOrchestrationByPaneKey,
+  terminalLayoutsByTabId: s.terminalLayoutsByTabId,
+  ptyIdsByTabId: s.ptyIdsByTabId,
+  runtimePaneTitlesByTabId: s.runtimePaneTitlesByTabId,
+  folderWorkspaces: s.folderWorkspaces,
+  acknowledgedAgentsByPaneKey: s.acknowledgedAgentsByPaneKey,
+  agentStatusEpoch: s.agentStatusEpoch
+})
+const shallowSelector = (s: AppState): Record<string, unknown> => {
+  const next = shallowInputs(s)
+  if (previousShallow !== null && shallow(previousShallow, next)) {
+    return previousShallow
+  }
+  previousShallow = next
+  return next
+}
+
+function countAllocations(run: () => void): { entries: number; maps: number } {
+  const realEntries = Object.entries
+  const RealMap = globalThis.Map
+  let entries = 0
+  let maps = 0
+  Object.entries = ((target: object) => {
+    entries += 1
+    return realEntries(target)
+  }) as typeof Object.entries
+  class CountingMap<K, V> extends RealMap<K, V> {
+    constructor(init?: readonly (readonly [K, V])[] | null) {
+      super(init as never)
+      maps += 1
+    }
+  }
+  globalThis.Map = CountingMap as unknown as MapConstructor
+  try {
+    run()
+  } finally {
+    Object.entries = realEntries
+    globalThis.Map = RealMap
+  }
+  return { entries, maps }
+}
+
+afterEach(() => {
+  resetAgentBucketCountStateForTests()
+  previousShallow = null
+})
+
+describe('agent bucket count input gate', () => {
+  it('allocates nothing on a store write that leaves all fourteen slices alone', () => {
+    const state = storeState()
+    // Prime the gate, then replay the writes an unrelated slice would trigger.
+    selectAgentBucketCountState(state)
+
+    const gated = countAllocations(() => {
+      for (let write = 0; write < STORE_WRITES; write += 1) {
+        selectAgentBucketCountState(state)
+      }
+    })
+    const shallowBaseline = countAllocations(() => {
+      shallowSelector(state)
+      for (let write = 0; write < STORE_WRITES; write += 1) {
+        shallowSelector(state)
+      }
+    })
+
+    expect(gated).toEqual({ entries: 0, maps: 0 })
+    // zustand v5's shallow() takes the compareEntries path on a plain object:
+    // two Object.entries arrays and two Maps per write, to conclude nothing moved.
+    expect(shallowBaseline.entries).toBe(STORE_WRITES * 2)
+    expect(shallowBaseline.maps).toBe(STORE_WRITES * 2)
+  })
+
+  it('returns the identical inputs object until a read slice changes identity', () => {
+    const state = storeState()
+    const first = selectAgentBucketCountState(state)
+    expect(selectAgentBucketCountState(state)).toBe(first)
+
+    const unrelated = {
+      ...state,
+      unreadCountsByWorktree: {}
+    } as unknown as AppState
+    expect(selectAgentBucketCountState(unrelated)).toBe(first)
+
+    const moved = { ...state, agentStatusEpoch: 1 } as unknown as AppState
+    const second = selectAgentBucketCountState(moved)
+    expect(second).not.toBe(first)
+    expect(second.agentStatusEpoch).toBe(1)
+  })
+
+  it('carries every slice the counts read, and settings pinned to null', () => {
+    const state = storeState()
+    const inputs = selectAgentBucketCountState(state)
+    expect(inputs.settings).toBeNull()
+    for (const key of [
+      'repos',
+      'worktreesByRepo',
+      'tabsByWorktree',
+      'unifiedTabsByWorktree',
+      'agentStatusByPaneKey',
+      'retainedAgentsByPaneKey',
+      'migrationUnsupportedByPtyId',
+      'runtimeAgentOrchestrationByPaneKey',
+      'terminalLayoutsByTabId',
+      'ptyIdsByTabId',
+      'runtimePaneTitlesByTabId',
+      'folderWorkspaces',
+      'acknowledgedAgentsByPaneKey',
+      'agentStatusEpoch'
+    ] as const) {
+      expect(inputs[key], key).toBe(state[key])
+    }
+  })
+})
diff --git a/src/renderer/src/components/dashboard/useAgentBucketCounts.test.tsx b/src/renderer/src/components/dashboard/useAgentBucketCounts.test.tsx
index 541fbd716c1..5c2ac278724 100644
--- a/src/renderer/src/components/dashboard/useAgentBucketCounts.test.tsx
+++ b/src/renderer/src/components/dashboard/useAgentBucketCounts.test.tsx
@@ -37,11 +37,12 @@ vi.mock('./build-dashboard-bucket-counts', () => ({
   })
 }))
 
-import { useAgentBucketCounts } from './useAgentBucketCounts'
+import { resetAgentBucketCountStateForTests, useAgentBucketCounts } from './useAgentBucketCounts'
 
 afterEach(() => {
   cleanup()
   vi.clearAllMocks()
+  resetAgentBucketCountStateForTests()
   mocks.state.acknowledgedAgentsByPaneKey = {}
   mocks.state.unrelatedEpoch = 0
 })
diff --git a/src/renderer/src/components/dashboard/useAgentBucketCounts.ts b/src/renderer/src/components/dashboard/useAgentBucketCounts.ts
index 0e8c2881244..d003991cecf 100644
--- a/src/renderer/src/components/dashboard/useAgentBucketCounts.ts
+++ b/src/renderer/src/components/dashboard/useAgentBucketCounts.ts
@@ -1,6 +1,6 @@
 import { useMemo, useRef } from 'react'
 import { useAppStore } from '@/store'
-import { useShallow } from 'zustand/react/shallow'
+import type { AppState } from '@/store/types'
 import type { DashboardBucket } from '../../../../shared/dashboard-snapshot'
 import {
   buildDashboardBucketCounts,
@@ -9,93 +9,99 @@ import {
 
 export type AgentBucketCounts = Record<DashboardBucket, number>
 
+/** The bucket-count inputs, shaped so it doubles as the snapshot state passed to the builder. */
+export type AgentBucketCountState = Pick<
+  AppState,
+  | 'repos'
+  | 'worktreesByRepo'
+  | 'tabsByWorktree'
+  | 'unifiedTabsByWorktree'
+  | 'agentStatusByPaneKey'
+  | 'retainedAgentsByPaneKey'
+  | 'migrationUnsupportedByPtyId'
+  | 'runtimeAgentOrchestrationByPaneKey'
+  | 'terminalLayoutsByTabId'
+  | 'ptyIdsByTabId'
+  | 'runtimePaneTitlesByTabId'
+  | 'folderWorkspaces'
+  | 'acknowledgedAgentsByPaneKey'
+  | 'agentStatusEpoch'
+> & {
+  // Why null: counts never render a card's conversation name, so the
+  // generated-title gate is moot and the sidebar stays off settings.
+  settings: null
+}
+
+// Why module scope rather than useShallow: zustand runs this selector on every
+// store write, and shallow() on a plain object takes the compareEntries path —
+// two Object.entries arrays, 28 tuples and two Maps allocated per write just to
+// conclude nothing moved. Fourteen `===` against the previous slices allocates
+// nothing on the unchanged path, and the result is a pure function of the state
+// so one gate can serve every mounted consumer.
+let previousState: AgentBucketCountState | null = null
+
+/** Test-only: drop the cross-render identity gate so a case starts cold. */
+export function resetAgentBucketCountStateForTests(): void {
+  previousState = null
+}
+
+export function selectAgentBucketCountState(s: AppState): AgentBucketCountState {
+  const previous = previousState
+  if (
+    previous !== null &&
+    previous.repos === s.repos &&
+    previous.worktreesByRepo === s.worktreesByRepo &&
+    previous.tabsByWorktree === s.tabsByWorktree &&
+    previous.unifiedTabsByWorktree === s.unifiedTabsByWorktree &&
+    previous.agentStatusByPaneKey === s.agentStatusByPaneKey &&
+    previous.retainedAgentsByPaneKey === s.retainedAgentsByPaneKey &&
+    previous.migrationUnsupportedByPtyId === s.migrationUnsupportedByPtyId &&
+    previous.runtimeAgentOrchestrationByPaneKey === s.runtimeAgentOrchestrationByPaneKey &&
+    previous.terminalLayoutsByTabId === s.terminalLayoutsByTabId &&
+    previous.ptyIdsByTabId === s.ptyIdsByTabId &&
+    previous.runtimePaneTitlesByTabId === s.runtimePaneTitlesByTabId &&
+    previous.folderWorkspaces === s.folderWorkspaces &&
+    previous.acknowledgedAgentsByPaneKey === s.acknowledgedAgentsByPaneKey &&
+    previous.agentStatusEpoch === s.agentStatusEpoch
+  ) {
+    return previous
+  }
+  previousState = {
+    repos: s.repos,
+    worktreesByRepo: s.worktreesByRepo,
+    tabsByWorktree: s.tabsByWorktree,
+    unifiedTabsByWorktree: s.unifiedTabsByWorktree,
+    agentStatusByPaneKey: s.agentStatusByPaneKey,
+    retainedAgentsByPaneKey: s.retainedAgentsByPaneKey,
+    migrationUnsupportedByPtyId: s.migrationUnsupportedByPtyId,
+    runtimeAgentOrchestrationByPaneKey: s.runtimeAgentOrchestrationByPaneKey,
+    terminalLayoutsByTabId: s.terminalLayoutsByTabId,
+    ptyIdsByTabId: s.ptyIdsByTabId,
+    runtimePaneTitlesByTabId: s.runtimePaneTitlesByTabId,
+    folderWorkspaces: s.folderWorkspaces,
+    acknowledgedAgentsByPaneKey: s.acknowledgedAgentsByPaneKey,
+    agentStatusEpoch: s.agentStatusEpoch,
+    settings: null
+  }
+  return previousState
+}
+
 /**
  * Per-state agent counts for the sidebar dashboard entry, using the same row
  * and bucket derivation as the pop-out board without allocating its cards.
  * Recomputes only when an input slice changes.
  */
 export function useAgentBucketCounts(): AgentBucketCounts {
-  const {
-    repos,
-    worktreesByRepo,
-    tabsByWorktree,
-    unifiedTabsByWorktree,
-    agentStatusByPaneKey,
-    retainedAgentsByPaneKey,
-    migrationUnsupportedByPtyId,
-    runtimeAgentOrchestrationByPaneKey,
-    terminalLayoutsByTabId,
-    ptyIdsByTabId,
-    runtimePaneTitlesByTabId,
-    folderWorkspaces,
-    acknowledgedAgentsByPaneKey,
-    agentStatusEpoch
-  } = useAppStore(
-    useShallow((s) => ({
-      repos: s.repos,
-      worktreesByRepo: s.worktreesByRepo,
-      tabsByWorktree: s.tabsByWorktree,
-      unifiedTabsByWorktree: s.unifiedTabsByWorktree,
-      agentStatusByPaneKey: s.agentStatusByPaneKey,
-      retainedAgentsByPaneKey: s.retainedAgentsByPaneKey,
-      migrationUnsupportedByPtyId: s.migrationUnsupportedByPtyId,
-      runtimeAgentOrchestrationByPaneKey: s.runtimeAgentOrchestrationByPaneKey,
-      terminalLayoutsByTabId: s.terminalLayoutsByTabId,
-      ptyIdsByTabId: s.ptyIdsByTabId,
-      runtimePaneTitlesByTabId: s.runtimePaneTitlesByTabId,
-      folderWorkspaces: s.folderWorkspaces,
-      acknowledgedAgentsByPaneKey: s.acknowledgedAgentsByPaneKey,
-      agentStatusEpoch: s.agentStatusEpoch
-    }))
-  )
-
+  const state = useAppStore(selectAgentBucketCountState)
   // Why a per-hook cache: unrelated status/title writes change one worktree's inputs;
-  // the cache keeps every other worktree's counts without rerunning its row pipeline.
+  // the cache keeps every other worktree's rows without rerunning its row pipeline.
   const cacheRef = useRef<ReturnType<typeof createDashboardBucketCountsCache>>(undefined!)
   cacheRef.current ??= createDashboardBucketCountsCache()
   return useMemo(() => {
-    return buildDashboardBucketCounts(
-      {
-        repos,
-        worktreesByRepo,
-        tabsByWorktree,
-        unifiedTabsByWorktree,
-        agentStatusByPaneKey,
-        retainedAgentsByPaneKey,
-        migrationUnsupportedByPtyId,
-        runtimeAgentOrchestrationByPaneKey,
-        terminalLayoutsByTabId,
-        ptyIdsByTabId,
-        runtimePaneTitlesByTabId,
-        folderWorkspaces,
-        acknowledgedAgentsByPaneKey,
-        // Same: counts never render a card's conversation name, so the
-        // generated-title gate is moot and the sidebar stays off settings.
-        settings: null
-      },
-      Date.now(),
-      cacheRef.current,
-      // Why: time-based freshness decay is signaled by agentStatusEpoch; it invalidates
-      // every cached worktree so stale-decayed buckets recount.
-      agentStatusEpoch
-    )
-    // Why: Date.now() is read inside the memo (not a dep) so idle-decay tracks
-    // agentStatusEpoch ticks, matching useDashboardData.
+    // Why Date.now() is read here and not a dep: idle-decay tracks agentStatusEpoch
+    // ticks (carried in `state`), matching useDashboardData. That epoch doubles as the
+    // cache generation, so a stale-boundary tick recounts every decayed bucket.
+    return buildDashboardBucketCounts(state, Date.now(), cacheRef.current, state.agentStatusEpoch)
     // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [
-    repos,
-    worktreesByRepo,
-    tabsByWorktree,
-    unifiedTabsByWorktree,
-    agentStatusByPaneKey,
-    retainedAgentsByPaneKey,
-    migrationUnsupportedByPtyId,
-    runtimeAgentOrchestrationByPaneKey,
-    terminalLayoutsByTabId,
-    ptyIdsByTabId,
-    runtimePaneTitlesByTabId,
-    folderWorkspaces,
-    acknowledgedAgentsByPaneKey,
-    agentStatusEpoch
-  ])
+  }, [state])
 }